Merge pull request 'v1.0.49' (#61) from dev into master

Reviewed-on: #61

.gitea/workflows/ci.yml

@@ -46,6 +46,11 @@ jobs:
                 <username>${{ vars.TIMI_NEXUS_USERNAME }}</username>
                 <password>${{ vars.TIMI_NEXUS_PASSWORD }}</password>
               </server>
+              <server>
+                <id>e2ins_nexus</id>
+                <username>${{ vars.E2INS_NEXUS_USERNAME }}</username>
+                <password>${{ vars.E2INS_NEXUS_PASSWORD }}</password>
+              </server>
             </servers>
           </settings>
           EOF

.idea/data_source_mapping.xml

@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="DataSourcePerFileMappings">
-    <file url="file://$PROJECT_DIR$/src/main/java/com/imyeyu/api/modules/user/mapper/UserMapper.java" value="05742bdc-a11a-4147-9168-ef976a70258a" />
-    <file url="file://$PROJECT_DIR$/src/main/resources/mapper/timi-server/GaoCustomerMapper.xml" value="05742bdc-a11a-4147-9168-ef976a70258a" />
-  </component>
-</project>

.idea/sqldialects.xml

@@ -3,6 +3,7 @@
   <component name="SqlDialectMappings">
     <file url="file://$PROJECT_DIR$/src/main/resources/db/migration/timiserver/V1__init_schema.sql" dialect="MariaDB" />
     <file url="file://$PROJECT_DIR$/src/main/resources/db/migration/timiserver/V2__init_system_data.sql" dialect="GenericSQL" />
+    <file url="file://$PROJECT_DIR$/src/main/resources/mapper/timi-server/gao/GaoEventRecordMapper.xml" dialect="MariaDB" />
     <file url="PROJECT" dialect="MariaDB" />
   </component>
 </project>

http/README.md

@@ -1,163 +0,0 @@
-# HTTP 调试与文档规范
-
-本目录下的 `.http` 文件同时承担接口调试和接口文档职责，也要保证 AIAgent 能稳定读取
-
-## 目录分工
-
-### `.http`
-
-`.http` 只描述接口级信息：
-
-1. 接口中文名
-2. 权限要求
-3. 前置条件
-4. 请求参数对应的对象说明
-5. 返回参数对应的对象说明
-
-`.http` 不重复展开对象字段明细，复杂字段、嵌套结构、枚举值统一写到 `./object` 下
-
-### `./object`
-
-`./object` 只描述对象级信息：
-
-1. 字段名
-2. 字段类型
-3. 字段说明
-4. 枚举值及含义
-
-所有模块都可能复用的通用对象必须写在 `./object/common.md`
-
-按业务领域拆分对象说明文件，例如：
-
-1. `./object/common.md`
-2. `./object/user.md`
-3. `./object/role.md`
-4. `./object/permission.md`
-
-不要把同一个对象的字段说明散落到多个文件里
-
-## 全局约定
-
-### 返回包装
-
-除使用 `IgnoreGlobalReturn` 跳过全局包装的方法外，接口默认都会经过
-[GlobalReturnHandler](E:/IDEAProject/timi-spring/src/main/java/com/imyeyu/spring/util/GlobalReturnHandler.java)
-统一包装返回
-
-因此 `.http` 里的 `返回参数` 默认只描述业务 `data` 对象，不再重复赘述全局包装结构
-
-全局返回包装、通用成功码、错误信息、常见分页壳子等内容统一维护在 `./object/common.md`
-
-如果接口使用
-[IgnoreGlobalReturn](E:/IDEAProject/timi-spring/src/main/java/com/imyeyu/spring/annotation/IgnoreGlobalReturn.java)
-跳过全局包装，必须在对应接口的 `前置条件` 或补充说明里明确写出“该接口不走全局返回包装”
-
-### 文档真实性
-
-1. 文档只记录服务端真实行为
-2. 不写猜测
-3. 不写“看代码”
-4. 接口改了就同步更新 `.http` 和 `./object`
-
-### 变量复用
-
-能复用的变量统一放在文件顶部，例如 `@user_token`、`@userId`
-
-## `.http` 模板
-
-每个接口块固定使用下面格式，不要擅自增删字段名：
-
-```http
-### <接口中文名>
-### 权限：
-### 前置条件：
-### 请求参数：
-### 返回参数：
-
-POST {{baseUrl}}/path
-Content-Type: application/json
-Token: {{user_token}}
-
-{}
-```
-
-## `.http` 填写要求
-
-### 接口中文名
-
-直接写接口用途，别写成控制器方法名
-
-### 权限
-
-1. 优先直接翻译控制器上的真实注解
-2. 同时存在角色和权限时一起写，例如 `需要 ADMIN 角色 + USER_UPDATE 权限`
-3. 只有 Token 要求时写 `需要有效 Token`
-4. 无需登录时直接写 `无需登录`
-
-### 前置条件
-
-这里只写接口调用前必须知道的约束，例如：
-
-1. 需要先登录并回填 `user_token`
-2. 需要先创建用户再传入 `userId`
-3. 重复调用可能因为唯一约束失败
-4. 接口当前实现为空
-5. 该接口不走全局返回包装
-
-没有额外限制时写 `无`
-
-### 请求参数
-
-只写请求对象名和对象说明文件，不在 `.http` 内展开字段
-
-推荐格式：
-
-1. `无`
-2. `UserCreateRequest，详见 ./object/user.md`
-3. `Page<UserQuery>，详见 ./object/common.md 和 ./object/user.md`
-
-### 返回参数
-
-只写业务返回对象名和对象说明文件，不在 `.http` 内展开字段
-
-推荐格式：
-
-1. `无`
-2. `User，详见 ./object/user.md`
-3. `PageResult<User>，详见 ./object/common.md 和 ./object/user.md`
-4. `二进制数据流，该接口不走全局返回包装`
-
-## `./object` 编写要求
-
-对象说明统一使用 Markdown 表格，推荐结构如下
-
-```md
-## User
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| name | String | 登录名，系统内唯一 |
-
-## RoleCode
-
-| 枚举 | 说明 |
-|---|---|
-| SYSTEM | 系统 |
-| ADMIN | 管理员 |
-```
-
-### 对象说明规则
-
-1. 一个对象一个标题，标题名必须和 `.http` 里引用的对象名一致
-2. 字段说明只写真实存在且调用方需要关心的内容
-3. 枚举单独列出，不要把枚举值混进普通字段表
-4. 嵌套对象、列表元素对象也要有独立标题
-5. 通用壳子对象统一写在 `./object/common.md`
-
-## 维护要求
-
-1. 一个控制器通常对应一个 `.http` 文件
-2. 新增接口时，同步补齐对应 `.http`
-3. 新增或修改对象字段时，同步更新对应 `./object/*.md`
-4. 注释语言统一用中文
-5. 示例请求优先保证可调试，其次才是看起来完整

http/common/attachment.http

@@ -1,200 +0,0 @@
-### AttachmentController 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@attachmentId =
-@attachmentBizType = TEMP_FILE
-@attachmentBizId = demo-biz-id
-@attachmentAttachType = SOURCE
-@attachmentName = demo.png
-@attachmentFilePath = E:/Temp/demo.png
-@attachmentTempFileId =
-
-### 查询附件详情
-### 前置条件：`id` 必须传有效附件 ID
-### 请求参数：URL 参数 `id` 为附件 ID
-### 返回参数：Attachment，详见 ./object/common.md
-POST {{baseUrl}}/attach/detail?id={{attachmentId}}
-Token: {{user_token}}
-
-### 创建附件
-### 前置条件：回填 `attachmentFilePath` 为本地文件绝对路径
-### 请求参数：multipart/form-data
-### 返回参数：Attachment，详见 ./object/common.md
-POST {{baseUrl}}/attach/create
-Content-Type: multipart/form-data; boundary=AttachmentCreateBoundary
-Token: {{user_token}}
-
---AttachmentCreateBoundary
-Content-Disposition: form-data; name="bizType"
-
-{{attachmentBizType}}
---AttachmentCreateBoundary
-Content-Disposition: form-data; name="bizId"
-
-{{attachmentBizId}}
---AttachmentCreateBoundary
-Content-Disposition: form-data; name="attachType"
-
-{{attachmentAttachType}}
---AttachmentCreateBoundary
-Content-Disposition: form-data; name="name"
-
-{{attachmentName}}
---AttachmentCreateBoundary
-Content-Disposition: form-data; name="file"; filename="demo.png"
-Content-Type: application/octet-stream
-
-< {{attachmentFilePath}}
---AttachmentCreateBoundary--
-
-### 更新附件元数据
-### 前置条件：`id` 必须传有效附件 ID
-### 请求参数：multipart/form-data
-### 返回参数：无
-POST {{baseUrl}}/attach/update
-Content-Type: multipart/form-data; boundary=AttachmentUpdateMetaBoundary
-Token: {{user_token}}
-
---AttachmentUpdateMetaBoundary
-Content-Disposition: form-data; name="id"
-
-{{attachmentId}}
---AttachmentUpdateMetaBoundary
-Content-Disposition: form-data; name="name"
-
-{{attachmentName}}-updated
---AttachmentUpdateMetaBoundary
-Content-Disposition: form-data; name="attachType"
-
-{{attachmentAttachType}}
---AttachmentUpdateMetaBoundary--
-
-### 更新附件文件
-### 前置条件：`id` 必须传有效附件 ID，`attachmentFilePath` 必须传本地文件绝对路径
-### 请求参数：multipart/form-data
-### 返回参数：无
-POST {{baseUrl}}/attach/update
-Content-Type: multipart/form-data; boundary=AttachmentUpdateFileBoundary
-Token: {{user_token}}
-
---AttachmentUpdateFileBoundary
-Content-Disposition: form-data; name="id"
-
-{{attachmentId}}
---AttachmentUpdateFileBoundary
-Content-Disposition: form-data; name="name"
-
-{{attachmentName}}-file-updated
---AttachmentUpdateFileBoundary
-Content-Disposition: form-data; name="file"; filename="demo.png"
-Content-Type: application/octet-stream
-
-< {{attachmentFilePath}}
---AttachmentUpdateFileBoundary--
-
-### 删除附件
-### 前置条件：`id` 必须传有效附件 ID
-### 请求参数：URL 参数 `id` 为附件 ID
-### 返回参数：无
-POST {{baseUrl}}/attach/delete?id={{attachmentId}}
-Token: {{user_token}}
-
-### 按业务查询单个附件
-### 前置条件：`bizType` 和 `bizId` 必须传有效值
-### 请求参数：URL 参数 `bizType`、`bizId`
-### 返回参数：Attachment，详见 ./object/common.md
-GET {{baseUrl}}/attach/detail/byBiz?bizType={{attachmentBizType}}&bizId={{attachmentBizId}}
-Token: {{user_token}}
-
-### 按业务和附件类型查询单个附件
-### 前置条件：`bizType`、`bizId`、`attachType` 必须传有效值
-### 请求参数：URL 参数 `bizType`、`bizId`、`attachType`
-### 返回参数：Attachment，详见 ./object/common.md
-GET {{baseUrl}}/attach/detail/byAttachType?bizType={{attachmentBizType}}&bizId={{attachmentBizId}}&attachType={{attachmentAttachType}}
-Token: {{user_token}}
-
-### 按业务查询附件列表
-### 前置条件：`bizType` 和 `bizId` 必须传有效值
-### 请求参数：URL 参数 `bizType`、`bizId`，可重复传 `attachTypeList`
-### 返回参数：Attachment[]
-GET {{baseUrl}}/attach/list/byBiz?bizType={{attachmentBizType}}&bizId={{attachmentBizId}}&attachTypeList={{attachmentAttachType}}
-Token: {{user_token}}
-
-### 按业务统计附件数量
-### 前置条件：`bizType` 和 `bizId` 必须传有效值
-### 请求参数：URL 参数 `bizType`、`bizId`，可重复传 `attachTypeList`
-### 返回参数：number
-GET {{baseUrl}}/attach/count/byBiz?bizType={{attachmentBizType}}&bizId={{attachmentBizId}}&attachTypeList={{attachmentAttachType}}
-Token: {{user_token}}
-
-### 按业务分页查询附件
-### 前置条件：`bizType` 和 `bizId` 必须传有效值
-### 请求参数：URL 参数 `bizType`、`bizId`，可重复传 `attachTypeList`，请求体为 Page
-### 返回参数：PageResult<Attachment>
-POST {{baseUrl}}/attach/page/byBiz?bizType={{attachmentBizType}}&bizId={{attachmentBizId}}&attachTypeList={{attachmentAttachType}}
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 10
-}
-
-### 按业务差分更新附件
-### 前置条件：新增项需要传有效 `tempFileId`
-### 请求参数：BizUpdateReq
-### 返回参数：无
-POST {{baseUrl}}/attach/update/byBiz
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"bizType": "{{attachmentBizType}}",
-	"bizId": "{{attachmentBizId}}",
-	"items": [
-		{
-			"id": "{{attachmentId}}",
-			"attachType": "{{attachmentAttachType}}",
-			"name": "{{attachmentName}}-biz-updated"
-		},
-		{
-			"tempFileId": "{{attachmentTempFileId}}",
-			"attachType": "{{attachmentAttachType}}",
-			"name": "{{attachmentName}}-from-temp"
-		}
-	]
-}
-
-### 按业务删除全部附件
-### 前置条件：`bizType` 和 `bizId` 必须传有效值
-### 请求参数：BizDeleteReq
-### 返回参数：无
-POST {{baseUrl}}/attach/delete/byBiz
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"bizType": "{{attachmentBizType}}",
-	"bizId": "{{attachmentBizId}}"
-}
-
-### 读取附件原图
-### 前置条件：`attachmentId` 必须传有效附件 ID
-### 请求参数：路径参数 `id`
-### 返回参数：附件二进制流
-GET {{baseUrl}}/attach/read/{{attachmentId}}
-Token: {{user_token}}
-
-### 读取附件缩略图
-### 前置条件：`attachmentId` 必须传有效图片或视频附件 ID
-### 请求参数：路径参数 `id`，URL 参数 `thumbWidth`、`thumbHeight`
-### 返回参数：附件二进制流
-GET {{baseUrl}}/attach/read/{{attachmentId}}?thumbWidth=200&thumbHeight=200
-Token: {{user_token}}
-
-### 下载附件
-### 前置条件：`attachmentId` 必须传有效附件 ID
-### 请求参数：路径参数 `id`
-### 返回参数：附件二进制流
-GET {{baseUrl}}/attach/download/{{attachmentId}}
-Token: {{user_token}}

http/common/multilingual.http

@@ -1,66 +0,0 @@
-### MultilingualController 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@multilingualId =
-@multilingualZhCN = 测试简体中文
-@multilingualZhTW = 測試繁體中文
-@multilingualEnUS = Test English
-@multilingualRuRU = Тест
-@multilingualJaJP = テスト
-@multilingualDeDE = Test Deutsch
-@multilingualKoKR = 테스트
-
-### 查询多语言详情
-### 权限：需要 ADMIN 角色 +  MULTILINGUAL_READ 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效多语言 ID
-### 请求参数：无请求体，URL 参数：`id` 为多语言 ID
-### 返回参数：Multilingual，详见 ./object/common.md
-POST {{baseUrl}}/system/multilingual/detail?id={{multilingualId}}
-Token: {{user_token}}
-
-### 创建多语言
-### 权限：需要 ADMIN 角色 +  MULTILINGUAL_CREATE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Multilingual，详见 ./object/common.md
-### 返回参数：Multilingual，详见 ./object/common.md
-POST {{baseUrl}}/system/multilingual/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"zhCN": "{{multilingualZhCN}}",
-	"zhTW": "{{multilingualZhTW}}",
-	"enUS": "{{multilingualEnUS}}",
-	"ruRU": "{{multilingualRuRU}}",
-	"jaJP": "{{multilingualJaJP}}",
-	"deDE": "{{multilingualDeDE}}",
-	"koKR": "{{multilingualKoKR}}"
-}
-
-### 更新多语言
-### 权限：需要 ADMIN 角色 +  MULTILINGUAL_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`，`id` 必须存在
-### 请求参数：Multilingual，详见 ./object/common.md
-### 返回参数：无
-POST {{baseUrl}}/system/multilingual/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{multilingualId}}",
-	"zhCN": "{{multilingualZhCN}}-已更新",
-	"zhTW": "{{multilingualZhTW}}-已更新",
-	"enUS": "{{multilingualEnUS}}-updated",
-	"ruRU": "{{multilingualRuRU}}-updated",
-	"jaJP": "{{multilingualJaJP}}-updated",
-	"deDE": "{{multilingualDeDE}}-updated",
-	"koKR": "{{multilingualKoKR}}-updated"
-}
-
-### 删除多语言
-### 权限：需要 ADMIN 角色 +  MULTILINGUAL_DELETE 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效多语言 ID
-### 请求参数：无请求体，URL 参数：`id` 为多语言 ID
-### 返回参数：无
-POST {{baseUrl}}/system/multilingual/delete?id={{multilingualId}}
-Token: {{user_token}}

http/gao/action.http

@@ -1,60 +0,0 @@
-### GaoRegisterAction 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@actionId =
-
-### 分页查询登记行为
-POST {{baseUrl}}/gao/action/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 16
-}
-
-### 查询启用行为
-POST {{baseUrl}}/gao/action/enabled/list
-Token: {{user_token}}
-
-### 查询行为详情
-POST {{baseUrl}}/gao/action/detail?id={{actionId}}
-Token: {{user_token}}
-
-### 创建登记行为
-POST {{baseUrl}}/gao/action/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"name": "签到",
-	"description": "客户到店签到",
-	"enabled": true,
-	"requirePhoto": false,
-	"sort": 10,
-	"permissionCodeList": [
-		"RECORD:CREATE"
-	]
-}
-
-### 更新登记行为
-POST {{baseUrl}}/gao/action/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{actionId}}",
-	"name": "物品领取",
-	"description": "登记客户领取物品",
-	"enabled": true,
-	"requirePhoto": true,
-	"sort": 20,
-	"permissionCodeList": [
-		"RECORD:CREATE",
-		"STAT:READ"
-	]
-}
-
-### 删除登记行为
-POST {{baseUrl}}/gao/action/delete?id={{actionId}}
-Token: {{user_token}}

http/gao/customer.http

@@ -1,119 +0,0 @@
-### GaoCustomer 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@customerId =
-@introducerCustomerId =
-@customerCode = GAO-0001
-
-### 分页查询客户
-POST {{baseUrl}}/gao/customer/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 16
-}
-
-### 搜索客户
-POST {{baseUrl}}/gao/customer/search
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"keyword": "张",
-	"introducerCustomerId": "{{introducerCustomerId}}"
-}
-
-### 查询客户详情
-POST {{baseUrl}}/gao/customer/detail?id={{customerId}}
-Token: {{user_token}}
-
-### 按客户编码查询
-POST {{baseUrl}}/gao/customer/detail/code?code={{customerCode}}
-Token: {{user_token}}
-
-### 查询某客户邀请了哪些人
-POST {{baseUrl}}/gao/customer/invited/list?introducerCustomerId={{customerId}}
-Token: {{user_token}}
-
-### 创建客户
-POST {{baseUrl}}/gao/customer/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"code": "{{customerCode}}",
-	"name": "张三",
-	"age": 56,
-	"telephone": "020-88886666",
-	"address": "广州市天河区某街道",
-	"remark": "首诊客户",
-	"disease": "肩颈不适",
-	"conditioningPart": [
-		{
-			"code": "neck",
-			"name": "颈部"
-		},
-		{
-			"code": "shoulder",
-			"name": "肩部"
-		}
-	],
-	"introducerCustomerId": "{{introducerCustomerId}}"
-}
-
-### 更新客户
-POST {{baseUrl}}/gao/customer/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{customerId}}",
-	"code": "{{customerCode}}",
-	"name": "张三",
-	"age": 57,
-	"telephone": "020-88886667",
-	"address": "广州市天河区某街道 88 号",
-	"remark": "复诊客户",
-	"disease": "腰背调理",
-	"conditioningPart": {
-		"parts": [
-			"waist",
-			"back"
-		]
-	},
-	"introducerCustomerId": "{{introducerCustomerId}}"
-}
-
-### 删除客户
-POST {{baseUrl}}/gao/customer/delete?id={{customerId}}
-Token: {{user_token}}
-
-### 创建客户邀请关系
-POST {{baseUrl}}/gao/customer/invite/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"customerId": "{{customerId}}",
-	"introducerCustomerId": "{{introducerCustomerId}}"
-}
-
-### 查询客户邀请关系详情
-POST {{baseUrl}}/gao/customer/invite/detail?customerId={{customerId}}
-Token: {{user_token}}
-
-### 更新客户邀请关系
-POST {{baseUrl}}/gao/customer/invite/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"customerId": "{{customerId}}",
-	"introducerCustomerId": "{{introducerCustomerId}}"
-}
-
-### 删除客户邀请关系
-POST {{baseUrl}}/gao/customer/invite/delete?customerId={{customerId}}
-Token: {{user_token}}

http/gao/record.http

@@ -1,86 +0,0 @@
-### GaoRegisterRecord 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@recordId =
-@customerId =
-@customerCode = GAO-0001
-@actionId =
-
-### 分页查询登记记录
-POST {{baseUrl}}/gao/record/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 16
-}
-
-### 查询登记记录详情
-POST {{baseUrl}}/gao/record/detail?id={{recordId}}
-Token: {{user_token}}
-
-### 创建登记记录，直接传客户 ID
-POST {{baseUrl}}/gao/record/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"customerId": "{{customerId}}",
-	"actionId": "{{actionId}}",
-	"remark": "客户到店签到"
-}
-
-### 创建登记记录，扫码后传客户编码
-POST {{baseUrl}}/gao/record/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"customerCode": "{{customerCode}}",
-	"actionId": "{{actionId}}",
-	"remark": "扫码快速登记"
-}
-
-### 更新登记记录
-POST {{baseUrl}}/gao/record/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{recordId}}",
-	"customerId": "{{customerId}}",
-	"actionId": "{{actionId}}",
-	"remark": "补充备注",
-	"registeredAt": 1785110400
-}
-
-### 删除登记记录
-POST {{baseUrl}}/gao/record/delete?id={{recordId}}
-Token: {{user_token}}
-
-### 按日查询某个行为记录
-POST {{baseUrl}}/gao/record/period/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"actionId": "{{actionId}}",
-	"periodType": "DAY",
-	"periodValue": 20260727
-}
-
-### 按月统计某个行为记录
-POST {{baseUrl}}/gao/record/period/stat
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"actionId": "{{actionId}}",
-	"periodType": "MONTH",
-	"periodValue": 202607
-}
-
-### 查询客户所有登记统计
-POST {{baseUrl}}/gao/record/customer/stat?customerId={{customerId}}
-Token: {{user_token}}

http/http-client.env.json

@@ -1,8 +0,0 @@
-{
-	"dev": {
-		"baseUrl": "http://localhost:8091"
-	},
-	"prod": {
-		"baseUrl": "https://api.example.com"
-	}
-}

http/object/common.md

@@ -1,77 +0,0 @@
-# 通用对象说明
-
-## TimiResponse<T>
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| code | Integer | 响应码，`20000` 为成功 |
-| msg | String | 响应消息 |
-| data | T | 业务数据体，具体结构由接口返回对象决定 |
-
-## Page<T>
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| index | int | 页码下标，从 `0` 开始 |
-| size | long | 每页数量 |
-| equalsExample | T | 精确匹配示例对象，非空字段参与精确查询 |
-| likesExample | T | 模糊匹配示例对象，非空字段参与模糊查询 |
-| equalsLogic | Logic | 精确匹配字段之间的连接逻辑，默认 `AND` |
-| likesLogic | Logic | 模糊匹配字段之间的连接逻辑，默认 `OR` |
-| orderMap | LinkedHashMap<String, OrderType> | 排序字段映射，键通常为字段名，值为排序方向 |
-
-## PageResult<T>
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| total | long | 总数据量 |
-| pages | int | 总页数 |
-| list | List<T> | 当前页数据列表 |
-
-## UUIDEntity
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| id | String | 主键 ID，UUID 字符串 |
-| createdAt | Long | 创建时间，Unix 时间戳毫秒 |
-| updatedAt | Long | 更新时间，Unix 时间戳毫秒 |
-| deletedAt | Long | 删除时间，Unix 时间戳毫秒，未删除时通常为空 |
-
-## Multilingual
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| id | String | 多语言 ID |
-| zhCN | String | 简体中文文本 |
-| zhTW | String | 繁体中文文本 |
-| enUS | String | 英文文本 |
-| ruRU | String | 俄文文本 |
-| jaJP | String | 日文文本 |
-| deDE | String | 德文文本 |
-| koKR | String | 韩文文本 |
-| lastAccessAt | Long | 最后访问时间，Unix 时间戳毫秒 |
-| createdAt | Long | 创建时间，Unix 时间戳毫秒 |
-| updatedAt | Long | 更新时间，Unix 时间戳毫秒 |
-| deletedAt | Long | 删除时间，Unix 时间戳毫秒，未删除时通常为空 |
-
-## Logic
-
-| 枚举 | 说明 |
-|---|---|
-| AND | 多个条件同时满足 |
-| OR | 多个条件满足其一 |
-
-## OrderType
-
-| 枚举 | 说明 |
-|---|---|
-| ASC | 升序 |
-| DESC | 降序 |
-
-## ImageType
-
-| 枚举 | 说明 |
-|---|---|
-| AUTO | 双线性 |
-| SMOOTH | 模糊 |
-| PIXELATED | 像素 |

http/object/permission.md

@@ -1,31 +0,0 @@
-# 权限对象说明
-
-## Permission
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| id | String | 权限 ID |
-| createdAt | Long | 创建时间，Unix 时间戳毫秒 |
-| updatedAt | Long | 更新时间，Unix 时间戳毫秒 |
-| deletedAt | Long | 删除时间，Unix 时间戳毫秒 |
-| code | String | 权限代码，需与数据库 `permission.code` 保持一致 |
-| nameLangId | String | 权限名称的多语言键 |
-| description | String | 权限说明 |
-| name | String | 当前语言下的权限名称 |
-
-## BatchCreateReq
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| prefixCode | String | 权限代码前缀，例如 `ROLE` |
-| prefixName | String | 权限名称前缀，例如 `角色` |
-| types | Type[] | 需要批量生成的权限类型列表，详见 `BatchCreateType` |
-
-## BatchCreateType
-
-| 枚举 | 说明 |
-|---|---|
-| CREATE | 创建权限 |
-| READ | 读取权限 |
-| UPDATE | 更新权限 |
-| DELETE | 删除权限 |

http/object/role.md

@@ -1,34 +0,0 @@
-# 角色对象说明
-
-## Role
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| id | String | 角色 ID |
-| createdAt | Long | 创建时间，Unix 时间戳毫秒 |
-| updatedAt | Long | 更新时间，Unix 时间戳毫秒 |
-| deletedAt | Long | 删除时间，Unix 时间戳毫秒 |
-| code | String | 角色代码，常见值见 `RoleCode` |
-| nameLangId | String | 角色名称的多语言键 |
-| description | String | 角色说明 |
-| name | String | 当前语言下的角色名称 |
-| permissionList | List<Permission> | 角色自身直接绑定的权限列表 |
-| allPermissionList | List<Permission> | 角色全部权限列表，包含继承自子角色的权限 |
-| childRoleList | List<Role> | 子角色列表 |
-| permissionIdList | Set<String> | 权限 ID 列表，创建或更新角色时使用 |
-| childRoleIdList | Set<String> | 子角色 ID 列表，创建或更新角色时使用 |
-
-## UserRoleAuthorizeReq
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| userId | String | 目标用户 ID |
-| roleIdList | List<String> | 需要授权的角色 ID 列表 |
-| roleCodeList | List<String> | 需要授权的角色代码列表 |
-
-## RoleCode
-
-| 枚举 | 说明 |
-|---|---|
-| SYSTEM | 系统 |
-| ADMIN | 管理员 |

http/object/user.md

@@ -1,73 +0,0 @@
-# 用户对象说明
-
-## User
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| id | String | 用户 ID |
-| createdAt | Long | 创建时间，Unix 时间戳毫秒 |
-| updatedAt | Long | 更新时间，Unix 时间戳毫秒 |
-| deletedAt | Long | 删除时间，Unix 时间戳毫秒 |
-| name | String | 登录名，系统内唯一 |
-| nick | String | 用户昵称 |
-| password | String | 明文密码，请求时填写，响应通常不返回 |
-| email | String | 邮箱地址 |
-| emailVerifyAt | Long | 邮箱验证时间，Unix 时间戳毫秒 |
-| phoneNo | String | 手机号，11 位大陆手机号 |
-| phoneNoVerifyAt | Long | 手机号验证时间，Unix 时间戳毫秒 |
-| wrapperType | ImageType | 背景图渲染算法，详见 `ImageType` |
-| avatarType | ImageType | 头像渲染算法，详见 `ImageType` |
-| exp | Integer | 经验值 |
-| sex | Integer | 性别，当前代码未定义枚举说明 |
-| birthdate | Long | 出生日期，Unix 时间戳毫秒 |
-| qq | String | QQ 号 |
-| description | String | 个人说明 |
-| lastLoginIP | String | 上次登录 IP |
-| lastLoginAt | Long | 上次登录时间，Unix 时间戳毫秒 |
-| unmuteAt | Long | 解除禁言时间，Unix 时间戳毫秒 |
-| unbanAt | Long | 解除封禁时间，Unix 时间戳毫秒 |
-| roleList | List<String> | 角色代码列表 |
-| permissionList | List<String> | 权限代码列表 |
-| attachmentList | List<Attachment> | 附件列表 |
-| settingList | List<Setting> | 设置列表 |
-
-## LoginRequest
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| user | String | 用户标识，可能是 UID、邮箱或用户名 |
-| password | String | 明文密码 |
-
-## LoginResponse
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| token | String | 登录令牌 |
-| expireAt | Long | 令牌过期时间，Unix 时间戳毫秒 |
-| user | User | 当前登录用户 |
-
-## UpdatePasswordRequest
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| oldValue | String | 原密码 |
-| newValue | String | 新密码 |
-
-## PhoneVerifyCodeSendRequest
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| phoneNo | String | 手机号，必须为 11 位大陆手机号 |
-
-## PhoneVerifyRequest
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| phoneNo | String | 手机号，必须为 11 位大陆手机号 |
-| verifyCode | String | 6 位数字验证码 |
-
-## CancelRequest
-
-| 字段 | 类型 | 说明 |
-|---|---|---|
-| password | String | 当前密码，用于确认注销 |

http/user/permission.http

@@ -1,84 +0,0 @@
-### PermissionController 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@user_token =
-@permissionId =
-@permissionCode = TEST_PERMISSION
-@permissionNameLangId = permission.test.name
-@permissionDescription = 测试权限
-@moduleCode = CORE
-
-### 分页查询权限
-### 权限：需要 PERMISSION_READ 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Page<Permission>，详见 ./http/object/permission.md
-### 返回参数：PageResult<Permission>，详见 ./http/object/permission.md
-POST {{baseUrl}}/user/permission/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 10,
-	"likesExample": {
-		"code": "{{permissionCode}}",
-		"moduleCode": "{{moduleCode}}"
-	}
-}
-
-### 创建权限
-### 权限：当前代码要求 PERMISSION_READ 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Permission，详见 ./http/object/permission.md
-### 返回参数：无
-POST {{baseUrl}}/user/permission/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"moduleCode": "{{moduleCode}}",
-	"code": "{{permissionCode}}",
-	"nameLangId": "{{permissionNameLangId}}",
-	"description": "{{permissionDescription}}"
-}
-
-### 批量创建权限
-### 权限：需要 PERMISSION_CREATE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：BatchCreateReq，详见 ./http/object/permission.md
-### 返回参数：无
-POST {{baseUrl}}/user/permission/create/batch
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"moduleCode": "{{moduleCode}}",
-	"prefixCode": "ROLE",
-	"prefixName": "角色",
-	"types": ["CREATE", "READ", "UPDATE", "DELETE"]
-}
-
-### 更新权限
-### 权限：需要 PERMISSION_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`，`id` 必须存在
-### 请求参数：Permission，详见 ./http/object/permission.md
-### 返回参数：无
-POST {{baseUrl}}/user/permission/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{permissionId}}",
-	"moduleCode": "{{moduleCode}}",
-	"code": "{{permissionCode}}",
-	"nameLangId": "{{permissionNameLangId}}",
-	"description": "测试权限-已更新"
-}
-
-### 删除权限
-### 权限：需要 PERMISSION_DELETE 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效权限 ID
-### 请求参数：无请求体，URL 参数：`id` 为权限 ID
-### 返回参数：无
-POST {{baseUrl}}/user/permission/delete?id={{permissionId}}
-Token: {{user_token}}

http/user/role.http

@@ -1,113 +0,0 @@
-### RoleController 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@permissionId =
-@roleId =
-@roleCode = TEST_ROLE
-@roleNameLangId = role.test.name
-@roleDescription = 测试角色
-@childRoleId =
-@authorizedUserId =
-@moduleCode = CORE
-
-### 分页查询角色
-### 权限：需要 ADMIN 角色 +  ROLE_READ 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Page<Role>，详见 ./http/object/role.md
-### 返回参数：PageResult<Role>，详见 ./http/object/role.md
-POST {{baseUrl}}/user/role/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 16,
-	"likesExample": {
-		"moduleCode": "{{moduleCode}}"
-	}
-}
-
-### 查询角色详情
-### 权限：需要 ADMIN 角色 +  ROLE_READ 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效角色 ID
-### 请求参数：无请求体，URL 参数：`id` 为角色 ID
-### 返回参数：Role，详见 ./http/object/role.md
-POST {{baseUrl}}/user/role/detail?id={{roleId}}
-Token: {{user_token}}
-
-### 创建角色
-### 权限：需要 ADMIN 角色 +  ROLE_CREATE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Role，详见 ./http/object/role.md
-### 返回参数：无
-POST {{baseUrl}}/user/role/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"moduleCode": "{{moduleCode}}",
-	"code": "{{roleCode}}",
-	"nameLangId": "{{roleNameLangId}}",
-	"description": "{{roleDescription}}",
-	"permissionIdList": ["{{permissionId}}"],
-	"childRoleIdList": []
-}
-
-### 更新角色
-### 权限：需要 ADMIN 角色 +  ROLE_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`，`id` 必须存在
-### 请求参数：Role，详见 ./http/object/role.md
-### 返回参数：无
-POST {{baseUrl}}/user/role/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{roleId}}",
-	"moduleCode": "{{moduleCode}}",
-	"code": "{{roleCode}}",
-	"nameLangId": "{{roleNameLangId}}",
-	"description": "测试角色-已更新",
-	"permissionIdList": ["{{permissionId}}"],
-	"childRoleIdList": ["{{childRoleId}}"]
-}
-
-### 删除角色
-### 权限：需要 ADMIN 角色 +  ROLE_DELETE 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效角色 ID
-### 请求参数：无请求体，URL 参数：`id` 为角色 ID
-### 返回参数：无
-POST {{baseUrl}}/user/role/delete?id={{roleId}}
-Token: {{user_token}}
-
-### 查询用户角色
-### 权限：需要 ADMIN 角色 +  USER_ROLE_READ 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `userId` 必须传有效用户 ID
-### 请求参数：无请求体，URL 参数：`userId` 为用户 ID
-### 返回参数：List<Role>，详见 ./http/object/role.md
-POST {{baseUrl}}/user/role/authorized/list?userId={{authorizedUserId}}
-Token: {{user_token}}
-
-### 设置用户角色
-### 权限：需要 ADMIN 角色 + 同时具备 USER_ROLE_CREATE 和 USER_ROLE_DELETE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：UserRoleAuthorizeReq，详见 ./http/object/role.md
-### 返回参数：无
-POST {{baseUrl}}/user/role/authorized/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"userId": "{{authorizedUserId}}",
-	"moduleCode": "{{moduleCode}}",
-	"roleIdList": ["{{roleId}}"],
-	"roleCodeList": ["{{roleCode}}"]
-}
-
-### 查询用户已授权权限
-### 权限：需要 ADMIN 角色 +  USER_ROLE_READ 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `userId` 必须传有效用户 ID
-### 请求参数：无请求体，URL 参数：`userId` 为用户 ID
-### 返回参数：List<Permission>，详见 ./http/object/permission.md
-POST {{baseUrl}}/user/role/authorized/permission?userId={{authorizedUserId}}
-Token: {{user_token}}

http/user/user.http

@@ -1,186 +0,0 @@
-### UserController 接口测试
-### 在 IDEA 中选择 dev 或 prod 环境后执行
-
-@userId =
-@name = System
-@password = u#HA027xq$i9]P}uB]LweJspTb!3oS^.
-@newPassword = qwe123
-@nick = 测试用户
-@email = test@example.com
-
-### 分页查询用户
-### 权限：需要 ADMIN 角色 + USER_READ 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：Page<User>，详见 ./http/object/user.md
-### 返回参数：PageResult<User>，详见 ./http/object/user.md
-POST {{baseUrl}}/user/list
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"index": 0,
-	"size": 16
-}
-
-### 查询用户详情
-### 权限：需要 ADMIN 角色 + USER_READ 权限
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效用户 ID
-### 请求参数：无请求体，URL 参数：`id` 为用户 ID
-### 返回参数：User，详见 ./http/object/user.md
-POST {{baseUrl}}/user/detail?id={{userId}}
-Token: {{user_token}}
-
-### 创建用户
-### 权限：需要 ADMIN 角色 + USER_CREATE 权限
-### 前置条件：需要先登录并回填 `user_token`，重复用户名通常会失败
-### 请求参数：User，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/create
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"name": "{{name}}",
-	"nick": "{{nick}}",
-	"email": "{{email}}",
-	"phoneNo": "13800138000",
-	"password": "{{password}}"
-}
-
-### 更新用户
-### 权限：需要 ADMIN 角色 + USER_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`，`id` 必须存在
-### 请求参数：User，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/update
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"id": "{{userId}}",
-	"name": "{{name}}",
-	"nick": "{{nick}}",
-	"email": "{{email}}",
-	"phoneNo": "13800138000"
-}
-
-### 删除用户
-### 权限：需要 ADMIN 角色
-### 前置条件：需要先登录并回填 `user_token`，URL 参数 `id` 必须传有效用户 ID
-### 请求参数：无请求体，URL 参数：`id` 为用户 ID
-### 返回参数：无
-POST {{baseUrl}}/user/delete?id={{userId}}
-Token: {{user_token}}
-
-### 注册
-### 权限：无需登录
-### 前置条件：重复用户名通常会失败
-### 请求参数：User，详见 ./http/object/user.md
-### 返回参数：LoginResponse，详见 ./http/object/user.md
-POST {{baseUrl}}/user/register
-Content-Type: application/json
-
-{
-	"name": "Test",
-	"nick": "测试用户",
-	"phoneNo": "13800138000",
-	"password": "qwe123"
-}
-
-### 登录
-### 权限：无需登录
-### 前置条件：成功后需要把响应中的 token 回填到 `user_token`
-### 请求参数：LoginRequest，详见 ./http/object/user.md
-### 返回参数：LoginResponse，详见 ./http/object/user.md
-POST {{baseUrl}}/user/login
-Content-Type: application/json
-
-{
-	"user": "{{name}}",
-	"password": "{{password}}"
-}
-
-> {%
-client.global.set("user_token", response.body?.data?.token)
-%}
-
-### 令牌登录
-### 权限：需要有效 Token
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：无
-### 返回参数：LoginResponse，详见 ./http/object/user.md
-GET {{baseUrl}}/user/login/token
-Token: {{user_token}}
-
-### 登出
-### 权限：当前控制器未声明 RequiredToken/权限注解，按服务端实际会话处理
-### 前置条件：当前接口通常用于退出当前登录态
-### 请求参数：无
-### 返回参数：无
-POST {{baseUrl}}/user/logout
-Token: {{user_token}}
-
-### 修改当前用户密码
-### 权限：需要 USER_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：UpdatePasswordRequest，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/update/password
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"oldValue": "{{password}}",
-	"newValue": "{{newPassword}}"
-}
-
-### 修改当前用户邮箱
-### 权限：需要 USER_UPDATE 权限
-### 前置条件：当前方法体为空，接口尚未实现
-### 请求参数：无
-### 返回参数：无
-POST {{baseUrl}}/user/update/email
-Content-Type: application/json
-Token: {{user_token}}
-
-{}
-
-### 发送当前用户手机号验证码
-### 权限：需要 USER_UPDATE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：PhoneVerifyCodeSendRequest，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/phone/verify/send
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"phoneNo": "13800138000"
-}
-
-### 验证当前用户手机号
-### 权限：需要 USER_UPDATE 权限
-### 前置条件：需要先调用手机号验证码发送接口获取验证码
-### 请求参数：PhoneVerifyRequest，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/phone/verify
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"phoneNo": "13800138000",
-	"verifyCode": "123456"
-}
-
-### 注销当前用户
-### 权限：需要 USER_DELETE 权限
-### 前置条件：需要先登录并回填 `user_token`
-### 请求参数：CancelRequest，详见 ./http/object/user.md
-### 返回参数：无
-POST {{baseUrl}}/user/cancel
-Content-Type: application/json
-Token: {{user_token}}
-
-{
-	"password": "{{password}}"
-}

pom.xml

@@ -11,7 +11,7 @@
 
 	<groupId>com.imyeyu.timiserverapi</groupId>
 	<artifactId>TimiServerAPI</artifactId>
-	<version>1.0.8</version>
+	<version>1.0.49</version>
 	<packaging>jar</packaging>
 	<name>TimiServerAPI</name>
 	<description>imyeyu.com API</description>
@@ -167,18 +167,33 @@
 				<enabled>true</enabled>
 			</snapshots>
 		</repository>
+		<repository>
+			<id>e2ins_nexus</id>
+			<url>https://nexus.e2ins.com/repository/maven-public/</url>
+			<releases>
+				<enabled>true</enabled>
+			</releases>
+			<snapshots>
+				<enabled>true</enabled>
+			</snapshots>
+		</repository>
 	</repositories>
 
 	<dependencies>
+		<dependency>
+			<groupId>org.apache.groovy</groupId>
+			<artifactId>groovy</artifactId>
+			<version>4.0.29</version>
+		</dependency>
 		<dependency>
 			<groupId>com.imyeyu.spring</groupId>
 			<artifactId>timi-spring</artifactId>
-			<version>0.0.18</version>
+			<version>0.0.19</version>
 		</dependency>
 		<dependency>
 			<groupId>com.imyeyu.network</groupId>
 			<artifactId>timi-network</artifactId>
-			<version>0.0.13</version>
+			<version>0.0.14</version>
 		</dependency>
 		<dependency>
 			<groupId>com.imyeyu.lang</groupId>
@@ -188,17 +203,27 @@
 		<dependency>
 			<groupId>com.imyeyu.java</groupId>
 			<artifactId>timi-java</artifactId>
-			<version>0.0.6</version>
+			<version>0.0.11</version>
 		</dependency>
 		<dependency>
 			<groupId>com.imyeyu.utils</groupId>
 			<artifactId>timi-utils</artifactId>
-			<version>0.0.12</version>
+			<version>0.0.13</version>
+		</dependency>
+		<dependency>
+			<groupId>me.majiajie</groupId>
+			<artifactId>tinypinyin</artifactId>
+			<version>2.0.3</version>
+		</dependency>
+		<dependency>
+			<groupId>com.hankcs</groupId>
+			<artifactId>hanlp</artifactId>
+			<version>portable-1.8.4</version>
 		</dependency>
 		<dependency>
 			<groupId>com.imyeyu.font.icon</groupId>
 			<artifactId>timi-icon-font</artifactId>
-			<version>0.0.1</version>
+			<version>0.0.3</version>
 		</dependency>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
@@ -225,6 +250,15 @@
 			<groupId>org.flywaydb</groupId>
 			<artifactId>flyway-mysql</artifactId>
 		</dependency>
+		<dependency>
+			<groupId>com.tencentcloudapi</groupId>
+			<artifactId>tencentcloud-sdk-java-sms</artifactId>
+			<version>3.1.1281</version>
+		</dependency>
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-mail</artifactId>
+		</dependency>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-freemarker</artifactId>

src/main/java/com/imyeyu/api/annotation/EnableSetting.java

@@ -1,35 +0,0 @@
-package com.imyeyu.api.annotation;
-
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
-
-/**
- * 启用配置注解
- *
- * @author 夜雨
- * @since 2023-07-15 10:00
- */
-@Target(ElementType.METHOD)
-@Retention(RetentionPolicy.RUNTIME)
-public @interface EnableSetting {
-
-	/**
-	 *
-	 *
-	 * @author 夜雨
-	 * @since 2026-04-27 14:45
-	 */
-	enum Logic {
-
-		AND,
-
-		OR
-	}
-
-	Logic logic() default Logic.AND;
-
-	/** @return 未启用配置时响应消息语言映射键 */
-	String message() default "service.offline";
-}

src/main/java/com/imyeyu/api/annotation/EnableSettingInterceptor.java

@@ -1,55 +0,0 @@
-package com.imyeyu.api.annotation;
-
-import com.imyeyu.api.modules.common.service.SettingService;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
-import lombok.RequiredArgsConstructor;
-import org.springframework.context.annotation.Lazy;
-import org.springframework.lang.NonNull;
-import org.springframework.stereotype.Component;
-import org.springframework.web.method.HandlerMethod;
-import org.springframework.web.servlet.HandlerInterceptor;
-
-import java.lang.reflect.InvocationTargetException;
-import java.lang.reflect.Method;
-import java.util.ArrayList;
-import java.util.List;
-
-/**
- * 启用配置注解处理器
- *
- * @author 夜雨
- * @since 2023-07-15 10:01
- */
-@Component
-@RequiredArgsConstructor(onConstructor_ = {@Lazy})
-public class EnableSettingInterceptor implements HandlerInterceptor {
-
-	private final SettingService service;
-
-	public boolean preHandle(@NonNull HttpServletRequest req, @NonNull HttpServletResponse resp, @NonNull Object handler) throws InvocationTargetException, IllegalAccessException {
-		if (handler instanceof HandlerMethod handlerMethod) {
-			EnableSetting annotation = handlerMethod.getMethodAnnotation(EnableSetting.class);
-			if (annotation == null) {
-				return true;
-			}
-			EnableSetting.Logic logic = annotation.logic();
-			List<Boolean> valueList = new ArrayList<>();
-			for (Method method : annotation.getClass().getMethods()) {
-				if (method.getName().equals("message")) {
-					continue;
-				}
-				Enum<?>[] enums = (Enum<?>[]) method.invoke(annotation);
-				for (Enum<?> anEnum : enums) {
-					valueList.add(service.getSystem(anEnum).isTrue());
-				}
-			}
-			if (logic == EnableSetting.Logic.AND) {
-				return valueList.stream().allMatch(Boolean::booleanValue);
-			} else {
-				return valueList.stream().anyMatch(Boolean::booleanValue);
-			}
-		}
-		return true;
-	}
-}

src/main/java/com/imyeyu/api/annotation/RequireCoreRole.java

@@ -1,29 +0,0 @@
-package com.imyeyu.api.annotation;
-
-import com.imyeyu.api.bean.RoleMatchMode;
-import com.imyeyu.api.bean.CoreRoleCode;
-
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
-
-///
-/// 要求 CORE 模块角色
-///
-/// @author Codex
-/// @since 2026-07-26
-@Target({ElementType.METHOD, ElementType.TYPE})
-@Retention(RetentionPolicy.RUNTIME)
-public @interface RequireCoreRole {
-
-	/// 所需角色
-	///
-	/// @return 角色列表
-	CoreRoleCode[] value();
-
-	/// 匹配模式
-	///
-	/// @return 匹配模式
-	RoleMatchMode mode() default RoleMatchMode.ALL;
-}

src/main/java/com/imyeyu/api/annotation/RequireCoreRoleInterceptor.java

@@ -1,46 +0,0 @@
-package com.imyeyu.api.annotation;
-
-import com.imyeyu.api.bean.ModuleCode;
-import com.imyeyu.api.bean.RoleMatchMode;
-import com.imyeyu.api.bean.CoreRoleCode;
-import com.imyeyu.api.modules.user.service.RoleChecker;
-import com.imyeyu.java.TimiJava;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
-import org.springframework.lang.NonNull;
-import org.springframework.stereotype.Component;
-import org.springframework.web.method.HandlerMethod;
-import org.springframework.web.servlet.HandlerInterceptor;
-
-///
-/// CORE 角色注解处理器
-///
-/// @author Codex
-/// @since 2026-07-27
-@Component
-public class RequireCoreRoleInterceptor implements HandlerInterceptor {
-
-	private final RoleChecker roleChecker;
-
-	public RequireCoreRoleInterceptor(RoleChecker roleChecker) {
-		this.roleChecker = roleChecker;
-	}
-
-	@Override
-	public boolean preHandle(@NonNull HttpServletRequest req, @NonNull HttpServletResponse resp, @NonNull Object handler) {
-		if (!(handler instanceof HandlerMethod handlerMethod)) {
-			return true;
-		}
-		RequireCoreRole annotation = handlerMethod.getMethodAnnotation(RequireCoreRole.class);
-		if (annotation == null || TimiJava.isEmpty(annotation.value())) {
-			return true;
-		}
-		String[] roleCodeList = java.util.Arrays.stream(annotation.value()).map(CoreRoleCode::name).toArray(String[]::new);
-		if (annotation.mode() == RoleMatchMode.ANY) {
-			roleChecker.checkAny(ModuleCode.CORE, roleCodeList);
-		} else {
-			roleChecker.checkAll(ModuleCode.CORE, roleCodeList);
-		}
-		return true;
-	}
-}

src/main/java/com/imyeyu/api/annotation/SettingBizType.java

@@ -0,0 +1,17 @@
+package com.imyeyu.api.annotation;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+///
+///
+/// @author 夜雨
+/// @since 2026-09-08 15:22
+@Target(ElementType.TYPE)
+@Retention(RetentionPolicy.RUNTIME)
+public @interface SettingBizType {
+
+	String value();
+}

src/main/java/com/imyeyu/api/bean/CorePermissionCode.java

@@ -25,9 +25,9 @@ public enum CorePermissionCode implements BuiltinPermissionCode {
 	ROLE_PERMISSION_READ("ROLE_PERMISSION:READ", "角色权限读取", false, true),
 	ROLE_PERMISSION_DELETE("ROLE_PERMISSION:DELETE", "角色权限删除", false, true),
 
-	ROLE_RELATION_CREATE("ROLE_RELATION:CREATE", "角色关联创建", false, true),
-	ROLE_RELATION_READ("ROLE_RELATION:READ", "角色关联读取", false, true),
-	ROLE_RELATION_DELETE("ROLE_RELATION:DELETE", "角色关联删除", false, true),
+	ROLE_PERMISSION_INHERIT_CREATE("ROLE_PERMISSION_INHERIT:CREATE", "角色权限继承创建", false, true),
+	ROLE_PERMISSION_INHERIT_READ("ROLE_PERMISSION_INHERIT:READ", "角色权限继承读取", false, true),
+	ROLE_PERMISSION_INHERIT_DELETE("ROLE_PERMISSION_INHERIT:DELETE", "角色权限继承删除", false, true),
 
 	SETTING_CREATE("SETTING:CREATE", "设置创建", false, true),
 	SETTING_READ("SETTING:READ", "设置读取", false, true),
@@ -39,11 +39,32 @@ public enum CorePermissionCode implements BuiltinPermissionCode {
 	MULTILINGUAL_UPDATE("MULTILINGUAL:UPDATE", "多语言修改", false, true),
 	MULTILINGUAL_DELETE("MULTILINGUAL:DELETE", "多语言删除", false, true),
 
+	TAG_CREATE("TAG:CREATE", "标签创建", false, true),
+	TAG_READ("TAG:READ", "标签读取", false, true),
+	TAG_APPLY("TAG:APPLY", "标签应用", false, true),
+	TAG_UPDATE("TAG:UPDATE", "标签修改", false, true),
+	TAG_DELETE("TAG:DELETE", "标签删除", false, true),
+
+	ARTICLE_CREATE("ARTICLE:CREATE", "文章创建", false, true),
+	ARTICLE_READ("ARTICLE:READ", "文章读取", false, true),
+	ARTICLE_UPDATE("ARTICLE:UPDATE", "文章修改", false, true),
+	ARTICLE_DELETE("ARTICLE:DELETE", "文章删除", false, true),
+
 	USER_CREATE("USER:CREATE", "用户创建", false, true),
 	USER_READ("USER:READ", "用户读取", false, true),
 	USER_UPDATE("USER:UPDATE", "用户修改", false, true),
 	USER_DELETE("USER:DELETE", "用户删除", false, true),
 
+	FEEDBACK_CREATE("FEEDBACK:CREATE", "反馈创建", false, true),
+	FEEDBACK_READ("FEEDBACK:READ", "反馈读取", false, true),
+	FEEDBACK_UPDATE("FEEDBACK:UPDATE", "反馈修改", false, true),
+	FEEDBACK_DELETE("FEEDBACK:DELETE", "反馈删除", false, true),
+
+	NOTIFY_CREATE("NOTIFY:CREATE", "通知创建", false, true),
+	NOTIFY_READ("NOTIFY:READ", "通知读取", false, true),
+	NOTIFY_DELETE("NOTIFY:DELETE", "通知删除", false, true),
+	NOTIFY_CANCEL("NOTIFY:CANCEL", "通知取消", false, true),
+
 	USER_ROLE_CREATE("USER_ROLE:CREATE", "用户角色创建", true, true),
 	USER_ROLE_READ("USER_ROLE:READ", "用户角色读取", true, true),
 	USER_ROLE_DELETE("USER_ROLE:DELETE", "用户角色删除", true, true);

src/main/java/com/imyeyu/api/bean/CoreRoleCode.java

@@ -13,9 +13,7 @@ public enum CoreRoleCode implements BuiltinRoleCode {
 
 	SYSTEM("系统", true, null),
 
-	ADMIN("管理员", false, SYSTEM.name()),
-
-	USER_ROLE_ADMIN("授权管理", false, ADMIN.name());
+	ADMIN("管理员", false, SYSTEM.name());
 
 	final String defaultName;
 	final boolean protectedRole;
@@ -40,4 +38,5 @@ public enum CoreRoleCode implements BuiltinRoleCode {
 	public String getParentCode() {
 		return parentCode;
 	}
+
 }

src/main/java/com/imyeyu/api/bean/SettingEnum.java

@@ -0,0 +1,27 @@
+package com.imyeyu.api.bean;
+
+import com.imyeyu.api.annotation.SettingBizType;
+import com.imyeyu.api.modules.common.entity.Setting;
+import com.imyeyu.utils.Text;
+
+///
+///
+/// @author 夜雨
+/// @since 2026-09-08 15:18
+public interface SettingEnum {
+
+	default String getBizType() {
+		Class<? extends SettingEnum> implEnum = getClass();
+		SettingBizType bizType = implEnum.getAnnotation(SettingBizType.class);
+		if (bizType == null) {
+			return Text.bizClassName(implEnum);
+		}
+		return bizType.value();
+	}
+
+	String name();
+
+	String getDefaultValue();
+
+	Setting.ValueType getValueType();
+}

src/main/java/com/imyeyu/api/config/BeanConfig.java

@@ -4,8 +4,6 @@ import com.fasterxml.jackson.annotation.JsonInclude;
 import com.fasterxml.jackson.databind.DeserializationFeature;
 import com.fasterxml.jackson.databind.MapperFeature;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.fasterxml.jackson.databind.PropertyNamingStrategies;
-import com.fasterxml.jackson.databind.PropertyNamingStrategy;
 import com.fasterxml.jackson.databind.json.JsonMapper;
 import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule;
 import com.imyeyu.utils.Time;

src/main/java/com/imyeyu/api/config/RedisConfig.java

@@ -2,6 +2,8 @@ package com.imyeyu.api.config;
 
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.imyeyu.api.modules.common.entity.Multilingual;
+import com.imyeyu.api.modules.gao.ai.entity.GaoAiSession;
+import com.imyeyu.api.modules.gao.bean.GaoUserInviteCache;
 import com.imyeyu.spring.bean.RedisConfigParams;
 import com.imyeyu.spring.config.AbstractRedisConfig;
 import com.imyeyu.spring.util.Redis;
@@ -202,4 +204,16 @@ public class RedisConfig extends AbstractRedisConfig {
 	public Redis<String, String> getClipboardRedisTemplate() {
 		return getRedis(database, RedisSerializers.STRING, RedisSerializers.STRING);
 	}
+
+	/// @return GAO 用户邀请，code: 邀请缓存
+	@Bean("redisGaoUserInvite")
+	public Redis<String, GaoUserInviteCache> getGaoUserInviteRedisTemplate() {
+		return getRedis(database, RedisSerializers.STRING, RedisSerializers.jacksonSerializer(jackson, GaoUserInviteCache.class));
+	}
+
+	/// @return AI 会话，AI 会话 ID: 会话授权内容
+	@Bean("redisGaoAiSession")
+	public Redis<String, GaoAiSession> getGaoAiSessionRedisTemplate() {
+		return getRedis(database, RedisSerializers.STRING, RedisSerializers.jacksonSerializer(jackson, GaoAiSession.class));
+	}
 }

src/main/java/com/imyeyu/api/config/ThreadPoolConfig.java

@@ -32,4 +32,22 @@ public class ThreadPoolConfig {
 		executor.initialize();
 		return executor;
 	}
+
+	/// 创建操作审计线程池
+	///
+	/// @return 操作审计线程池
+	@Bean(name = "auditTaskExecutor")
+	public ThreadPoolTaskExecutor auditTaskExecutor() {
+		ThreadPoolTaskExecutor executor = new ThreadPoolTaskExecutor();
+		executor.setCorePoolSize(4);
+		executor.setMaxPoolSize(8);
+		executor.setQueueCapacity(2000);
+		executor.setKeepAliveSeconds(60);
+		executor.setWaitForTasksToCompleteOnShutdown(true);
+		executor.setAwaitTerminationSeconds(60);
+		executor.setThreadNamePrefix("audit-task-executor-");
+		executor.setRejectedExecutionHandler(new ThreadPoolExecutor.CallerRunsPolicy());
+		executor.initialize();
+		return executor;
+	}
 }

src/main/java/com/imyeyu/api/config/WebConfig.java

@@ -6,12 +6,9 @@ import com.fasterxml.jackson.databind.MapperFeature;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.json.JsonMapper;
 import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule;
-import com.imyeyu.api.annotation.EnableSettingInterceptor;
 import com.imyeyu.api.annotation.RequestRateLimitInterceptor;
 import com.imyeyu.api.annotation.RequireCorePermissionInterceptor;
-import com.imyeyu.api.annotation.RequireCoreRoleInterceptor;
 import com.imyeyu.api.modules.gao.annotation.RequireGaoPermissionInterceptor;
-import com.imyeyu.api.modules.gao.annotation.RequireGaoRoleInterceptor;
 import com.imyeyu.api.modules.journal.util.JournalAPIInterceptor;
 import com.imyeyu.api.modules.system.util.SystemAPIInterceptor;
 import com.imyeyu.spring.annotation.RequestBodyValueArgumentResolver;
@@ -42,9 +39,6 @@ public class WebConfig implements WebMvcConfigurer {
 	private final ObjectMapper jackson;
 	private final SystemAPIInterceptor systemAPIInterceptor;
 	private final JournalAPIInterceptor journalAPIInterceptor;
-	private final EnableSettingInterceptor enableSettingInterceptor;
-	private final RequireGaoRoleInterceptor requireGaoRoleInterceptor;
-	private final RequireCoreRoleInterceptor requireCoreRoleInterceptor;
 	private final RequestRateLimitInterceptor requestRateLimitInterceptor;
 	private final RequireGaoPermissionInterceptor requireGaoPermissionInterceptor;
 	private final RequireCorePermissionInterceptor requireCorePermissionInterceptor;
@@ -58,10 +52,7 @@ public class WebConfig implements WebMvcConfigurer {
 	public void addInterceptors(InterceptorRegistry registry) {
 		registry.addInterceptor(systemAPIInterceptor).addPathPatterns(SystemAPIInterceptor.PATH);
 		registry.addInterceptor(journalAPIInterceptor).addPathPatterns(JournalAPIInterceptor.PATH);
-		registry.addInterceptor(enableSettingInterceptor).addPathPatterns("/**");
-		registry.addInterceptor(requireCoreRoleInterceptor).addPathPatterns("/**");
 		registry.addInterceptor(requireCorePermissionInterceptor).addPathPatterns("/**");
-		registry.addInterceptor(requireGaoRoleInterceptor).addPathPatterns("/**");
 		registry.addInterceptor(requireGaoPermissionInterceptor).addPathPatterns("/**");
 		registry.addInterceptor(requestRateLimitInterceptor).addPathPatterns("/**");
 	}

src/main/java/com/imyeyu/api/modules/common/bean/GroovyScriptExecutionResult.java

@@ -0,0 +1,9 @@
+package com.imyeyu.api.modules.common.bean;
+
+/// Groovy 脚本执行结果
+///
+/// @param <T> 脚本返回值类型
+/// @author Codex
+/// @since 2026-09-04
+public record GroovyScriptExecutionResult<T>(String scriptId, String versionId, Integer version, String checksum, T result) {
+}

src/main/java/com/imyeyu/api/modules/common/bean/SettingModule.java

@@ -1,50 +0,0 @@
-package com.imyeyu.api.modules.common.bean;
-
-import com.imyeyu.api.modules.common.entity.Setting;
-import com.imyeyu.java.bean.timi.TimiCode;
-import com.imyeyu.java.bean.timi.TimiException;
-import lombok.AllArgsConstructor;
-import lombok.Getter;
-
-/**
- * 设置模块
- *
- * @author 夜雨
- * @since 2026-04-24 00:59
- */
-@Getter
-@AllArgsConstructor
-public enum SettingModule {
-
-	COMMON(Setting.Module.Common.class),
-
-	DOMAIN(Setting.Module.Domain.class),
-
-	FOREVER_MC(Setting.Module.ForeverMC.class),
-
-	MULTILINGUAL(Setting.Module.Multilingual.class),
-
-	GITEA(Setting.Module.Gitea.class),
-
-	MUSIC(Setting.Module.Music.class),
-
-	JOURNAL(Setting.Module.Journal.class),
-
-	TEMP_FILE(Setting.Module.TempFile.class),
-
-	SYSTEM(Setting.Module.System.class),
-
-	SYSTEM_STATUS(Setting.Module.SystemStatus.class);
-
-	/** 模块枚举类 */
-	final Class<? extends Enum<?>> clazz;
-
-	public static <T extends Enum<?>> SettingModule fromClass(Class<T> clazz) {
-		for (SettingModule value : values()) {
-			if (value.clazz.equals(clazz)) {
-				return value;
-			}
-		}
-		throw new TimiException(TimiCode.ERROR, "not found System Module: %s".formatted(clazz.getName()));
-	}
-}

src/main/java/com/imyeyu/api/modules/common/bean/TempFileSetting.java

@@ -0,0 +1,41 @@
+package com.imyeyu.api.modules.common.bean;
+
+import com.imyeyu.api.annotation.SettingBizType;
+import com.imyeyu.api.bean.SettingEnum;
+import com.imyeyu.api.modules.common.entity.Setting;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+/**
+ *
+ *
+ * @author 夜雨
+ * @since 2026-04-24 14:47
+ */
+@Getter
+@SettingBizType("TEMP_FILE")
+@AllArgsConstructor
+public enum TempFileSetting implements SettingEnum {
+
+	/** 启用服务 */
+	ENABLE(Boolean.TRUE.toString(), Setting.ValueType.BOOLEAN),
+
+	/** 最小缓存时长 */
+	TTL_MIN("1h", Setting.ValueType.TIME),
+
+	/** 默认缓存时长 */
+	TTL_DEFAULT("3d", Setting.ValueType.TIME),
+
+	/** 最大缓存时长 */
+	TTL_MAX("7d", Setting.ValueType.TIME),
+
+	/** 已过期文件残留时长 */
+	RESIDUE_TTL("90d", Setting.ValueType.TIME),
+
+	/** 每个 IP 限制有效临时文件容量 */
+	LIMIT_SIZE_OF_IP("10 GB", Setting.ValueType.BYTE_SIZE);
+
+	final String defaultValue;
+
+	final Setting.ValueType valueType;
+}

src/main/java/com/imyeyu/api/modules/common/bean/attachment/Metadata.java

@@ -1,48 +0,0 @@
-package com.imyeyu.api.modules.common.bean.attachment;
-
-import lombok.Data;
-import lombok.EqualsAndHashCode;
-
-/**
- * @author 夜雨
- * @since 2025-12-11 18:14
- */
-public class Metadata {
-
-	/**
-	 * 图片
-	 *
-	 * @author 夜雨
-	 * @since 2025-12-11 18:15
-	 */
-	@Data
-	public static class Image {
-
-		private int width;
-
-		private int height;
-	}
-
-	/**
-	 * 缩略图
-	 *
-	 * @author 夜雨
-	 * @since 2026-01-04 18:10
-	 */
-	@Data
-	@EqualsAndHashCode(callSuper = true)
-	public static class ThumbImage extends Image {
-
-		private String sourceId;
-
-		private String sourceMongoId;
-
-		private String sourceMimeType;
-
-		/** 请求宽度（缓存键之一，null 表示未指定） */
-		private Integer requestWidth;
-
-		/** 请求高度（缓存键之一，null 表示未指定） */
-		private Integer requestHeight;
-	}
-}

src/main/java/com/imyeyu/api/modules/common/bean/attachment/ThumbnailFitMode.java

@@ -0,0 +1,17 @@
+package com.imyeyu.api.modules.common.bean.attachment;
+
+/// 缩略图缩放模式
+///
+/// @author 夜雨
+/// @since 2026-08-21
+public enum ThumbnailFitMode {
+
+	/// 保持比例完整放入目标尺寸
+	FIT,
+
+	/// 保持比例裁剪填满目标尺寸
+	COVER,
+
+	/// 强制缩放到目标尺寸，可能导致图片变形
+	STRETCH
+}

src/main/java/com/imyeyu/api/modules/common/config/NotifyQueueConfig.java

@@ -0,0 +1,81 @@
+package com.imyeyu.api.modules.common.config;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.context.annotation.Configuration;
+
+/// 通知消息队列配置
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@Configuration
+@ConfigurationProperties(prefix = "notify.queue")
+public class NotifyQueueConfig {
+
+	private Mail mail = new Mail();
+
+	private Sms sms = new Sms();
+
+	private Wechat wechat = new Wechat();
+
+	private HTTP http = new HTTP();
+
+	/// 邮件队列配置
+	@Data
+	@EqualsAndHashCode(callSuper = true)
+	public static class Mail extends Queue {
+
+		private String defaultFrom;
+	}
+
+	/// 短信队列配置
+	@Data
+	@EqualsAndHashCode(callSuper = true)
+	public static class Sms extends Queue {
+
+		private String appId;
+
+		private String sign;
+
+		private String secretId;
+
+		private String secretKey;
+
+		private Captcha captcha;
+
+		/// 短信验证码
+		@Data
+		public static class Captcha {
+
+			private String templateId;
+
+			private int ttlMinute;
+
+			private int argIndex;
+		}
+	}
+
+	/// 微信队列配置
+	@Data
+	@EqualsAndHashCode(callSuper = true)
+	public static class Wechat extends Queue {
+	}
+
+	/// HTTP 队列配置
+	@Data
+	@EqualsAndHashCode(callSuper = true)
+	public static class HTTP extends Queue {
+	}
+
+	/// 通用队列配置
+	@Data
+	public static class Queue {
+
+		/// true 为启用
+		private boolean enable;
+
+		private String cron = "0/30 * * * * ?";
+	}
+}

src/main/java/com/imyeyu/api/modules/common/controller/ArticleController.java

@@ -0,0 +1,96 @@
+package com.imyeyu.api.modules.common.controller;
+
+import com.fasterxml.jackson.annotation.JsonView;
+import com.imyeyu.api.annotation.RequireCorePermission;
+import com.imyeyu.api.bean.CorePermissionCode;
+import com.imyeyu.api.modules.common.entity.Article;
+import com.imyeyu.api.modules.common.entity.Attachment;
+import com.imyeyu.api.modules.common.service.ArticleService;
+import com.imyeyu.api.modules.common.service.AttachmentService;
+import com.imyeyu.spring.annotation.AOPLog;
+import com.imyeyu.spring.annotation.RequestRateLimit;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
+import com.imyeyu.spring.util.ResponseView;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+/// 文章接口
+///
+/// @author Codex
+/// @since 2026-09-09
+@Slf4j
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/article")
+public class ArticleController {
+
+	private final ArticleService service;
+	private final AttachmentService attachmentService;
+
+	/// 查询文章列表
+	///
+	/// @param page 分页参数
+	/// @return 文章分页
+	@JsonView(ResponseView.Public.class)
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.ARTICLE_READ)
+	@PostMapping("/list")
+	public PageResult<Article> list(@RequestBody Page<Article> page) {
+		return service.page(page);
+	}
+
+	/// 查询文章详情
+	///
+	/// @param id 文章 ID
+	/// @return 文章详情
+	@JsonView(ResponseView.Public.class)
+	@RequestRateLimit
+	@RequestMapping("/detail")
+	public Article detail(@RequestParam String id) {
+		Article article = service.get(id);
+		article.setAttachmentList(attachmentService.listByBizId(Attachment.BizType.ARTICLE, article.getId()));
+		return article;
+	}
+
+	/// 创建文章
+	///
+	/// @param article 文章
+	/// @return 创建后的文章
+	@AOPLog
+	@JsonView(ResponseView.Public.class)
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.ARTICLE_CREATE)
+	@PostMapping("/create")
+	public Article create(@RequestBody Article article) {
+		service.create(article);
+		return article;
+	}
+
+	/// 更新文章
+	///
+	/// @param article 文章
+	@AOPLog
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.ARTICLE_UPDATE)
+	@PostMapping("/update")
+	public void update(@RequestBody Article article) {
+		service.update(article);
+	}
+
+	/// 删除文章
+	///
+	/// @param id 文章 ID
+	@AOPLog
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.ARTICLE_DELETE)
+	@PostMapping("/delete")
+	public void delete(@RequestParam String id) {
+		service.delete(id);
+	}
+}

src/main/java/com/imyeyu/api/modules/common/controller/AttachmentController.java

@@ -1,10 +1,10 @@
 package com.imyeyu.api.modules.common.controller;
 
 import com.imyeyu.api.modules.common.entity.Attachment;
+import com.imyeyu.api.modules.common.bean.attachment.ThumbnailFitMode;
 import com.imyeyu.api.modules.common.service.AttachmentService;
+import com.imyeyu.api.modules.common.service.AttachmentVariantService;
 import com.imyeyu.api.modules.common.service.TempFileService;
-import com.imyeyu.api.modules.common.vo.attach.BizDeleteReq;
-import com.imyeyu.api.modules.common.vo.attach.BizUpdateReq;
 import com.imyeyu.api.modules.common.vo.attach.TempFileResp;
 import com.imyeyu.java.TimiJava;
 import com.imyeyu.network.Network;
@@ -43,6 +43,7 @@ public class AttachmentController {
 
 	private final TempFileService tempFileService;
 	private final AttachmentService service;
+	private final AttachmentVariantService variantService;
 
 	/**
 	 * 查询附件详情
@@ -183,41 +184,22 @@ public class AttachmentController {
 		return service.pageByBizId(bizType, bizId, attachTypeList, page);
 	}
 
-	/**
-	 * 按业务差分更新附件
-	 *
-	 * @param req 更新请求
-	 */
-	@AOPLog
-	@RequestRateLimit
-	@PostMapping("/update/biz")
-	public void updateByBiz(@RequestBody BizUpdateReq req) {
-		service.updateByBiz(req);
-	}
-
-	/**
-	 * 按业务删除全部附件
-	 *
-	 * @param req 删除请求
-	 */
-	@AOPLog
-	@RequestRateLimit
-	@PostMapping("/delete/biz")
-	public void deleteByBiz(@RequestBody BizDeleteReq req) {
-		service.deleteByBiz(req);
-	}
-
 	@AOPLog
 	@IgnoreGlobalReturn
 	@GetMapping({"/read/{id}", "/download/{id}"})
-	public void readById(@PathVariable String id, @RequestParam(required = false) Integer thumbWidth, @RequestParam(required = false) Integer thumbHeight) throws UnsupportedEncodingException {
+	public void readById(
+		@PathVariable String id,
+		@RequestParam(required = false) Integer thumbWidth,
+		@RequestParam(required = false) Integer thumbHeight,
+		@RequestParam(defaultValue = "FIT") ThumbnailFitMode fitMode
+	) throws UnsupportedEncodingException {
 		HttpServletResponse resp = TimiSpring.getResponse();
 		Attachment attach = service.get(id);
 		if (attach == null) {
 			resp.setStatus(HttpServletResponse.SC_NOT_FOUND);
 			return;
 		}
-		responseAttachment(attach, thumbWidth, thumbHeight);
+		responseAttachment(attach, thumbWidth, thumbHeight, fitMode);
 	}
 
 	@AOPLog
@@ -233,21 +215,31 @@ public class AttachmentController {
 	public void read(@RequestParam String id) throws UnsupportedEncodingException {
 		HttpServletResponse resp = TimiSpring.getResponse();
 		Attachment attach = service.get(id);
+		if (attach == null) {
+			resp.setStatus(HttpServletResponse.SC_NOT_FOUND);
+			return;
+		}
 		if (TimiSpring.getRequest().getRequestURI().endsWith("/download")) {
 			resp.setHeader("Content-Disposition", Network.getFileDownloadHeader(attach.getName()));
 		}
-		response(attach);
+		response(attach, false);
 	}
 
-	private void responseAttachment(Attachment attach, Integer thumbWidth, Integer thumbHeight) throws UnsupportedEncodingException {
-		HttpServletResponse resp = TimiSpring.getResponse();
-		if (attach != null && TimiSpring.getRequest().getRequestURI().endsWith("/download") && attach.getName() != null) {
-			resp.setHeader("Content-Disposition", Network.getFileDownloadHeader(attach.getName()));
-		}
-		responseThumb(attach, thumbWidth, thumbHeight);
+	private void responseAttachment(
+		Attachment attach,
+		Integer thumbWidth,
+		Integer thumbHeight,
+		ThumbnailFitMode fitMode
+	) throws UnsupportedEncodingException {
+		responseThumb(attach, thumbWidth, thumbHeight, fitMode);
 	}
 
-	protected void responseThumb(Attachment attachment, Integer thumbWidth, Integer thumbHeight) {
+	protected void responseThumb(
+		Attachment attachment,
+		Integer thumbWidth,
+		Integer thumbHeight,
+		ThumbnailFitMode fitMode
+	) throws UnsupportedEncodingException {
 		HttpServletResponse resp = TimiSpring.getResponse();
 		if (TimiJava.isEmpty(attachment)) {
 			resp.setStatus(HttpServletResponse.SC_NOT_FOUND);
@@ -255,21 +247,65 @@ public class AttachmentController {
 		}
 		if (thumbWidth == null && thumbHeight == null) {
 			// 原图
+			setDownloadHeader(attachment);
 			response(attachment);
 			return;
 		}
 		// 缩略图
-		Attachment thumb = service.fetchThumb(attachment, thumbWidth, thumbHeight);
-		response(TimiJava.defaultIfNull(thumb, attachment));
+		Attachment thumb = variantService.fetchThumb(attachment, thumbWidth, thumbHeight, fitMode);
+		setDownloadHeader(thumb);
+		response(thumb);
+	}
+
+	private void setDownloadHeader(Attachment attachment) throws UnsupportedEncodingException {
+		if (attachment != null && TimiSpring.getRequest().getRequestURI().endsWith("/download") && attachment.getName() != null) {
+			TimiSpring.getResponse().setHeader("Content-Disposition", Network.getFileDownloadHeader(attachment.getName()));
+		}
+	}
+
+	/// 设置附件缓存头并处理条件请求
+	///
+	/// @param attachment 实际响应附件
+	/// @return true 表示客户端缓存仍有效，已返回 304
+	private boolean responseCache(Attachment attachment) {
+		HttpServletResponse resp = TimiSpring.getResponse();
+		resp.setHeader("Cache-Control", "private, no-cache");
+		String md5 = attachment.getMd5();
+		if (md5 == null || md5.isBlank()) {
+			return false;
+		}
+		String etag = "\"%s\"".formatted(md5);
+		resp.setHeader("ETag", etag);
+		String ifNoneMatch = TimiSpring.getHeader("If-None-Match");
+		if (ifNoneMatch == null) {
+			return false;
+		}
+		for (String value : ifNoneMatch.split(",")) {
+			String candidate = value.trim();
+			if ("*".equals(candidate) || etag.equals(candidate) || ("W/" + etag).equals(candidate)) {
+				resp.setStatus(HttpServletResponse.SC_NOT_MODIFIED);
+				return true;
+			}
+		}
+		return false;
 	}
 
 	protected void response(Attachment attachment) {
+		response(attachment, true);
+	}
+
+	private void response(Attachment attachment, boolean cacheable) {
 		HttpServletResponse resp = TimiSpring.getResponse();
 		try {
 			if (TimiJava.isEmpty(attachment)) {
 				resp.setStatus(HttpServletResponse.SC_NOT_FOUND);
 				return;
 			}
+			if (!cacheable) {
+				resp.setHeader("Cache-Control", "private, no-store");
+			} else if (responseCache(attachment)) {
+				return;
+			}
 			resp.setContentType(attachment.getMimeType());
 			attachment.doResponse();
 		} catch (Exception e) {

src/main/java/com/imyeyu/api/modules/common/controller/FeedbackController.java

@@ -0,0 +1,100 @@
+package com.imyeyu.api.modules.common.controller;
+
+import com.fasterxml.jackson.annotation.JsonView;
+import com.imyeyu.api.annotation.RequireCorePermission;
+import com.imyeyu.api.bean.CorePermissionCode;
+import com.imyeyu.api.modules.common.entity.Feedback;
+import com.imyeyu.api.modules.common.service.FeedbackService;
+import com.imyeyu.api.modules.user.service.UserLoginService;
+import com.imyeyu.spring.TimiSpring;
+import com.imyeyu.spring.annotation.AOPLog;
+import com.imyeyu.spring.annotation.CaptchaValid;
+import com.imyeyu.spring.annotation.RequestRateLimit;
+import com.imyeyu.spring.bean.CaptchaData;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
+import com.imyeyu.spring.util.ResponseView;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+/// 通用反馈接口
+///
+/// @author Codex
+/// @since 2026-08-19
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/feedback")
+public class FeedbackController {
+
+	private final FeedbackService service;
+	private final UserLoginService userLoginService;
+
+	/// 提交反馈。登录用户和匿名用户均需提交图形验证码，匿名用户按 IP 限流
+	///
+	/// @param captchaData 带图形验证码的反馈请求
+	@AOPLog
+	@JsonView(ResponseView.Public.class)
+	@CaptchaValid
+	@RequestRateLimit(value = 3, inSeconds = 60)
+	@PostMapping("/create")
+	public void create(@RequestBody @Valid CaptchaData<Feedback> captchaData) {
+		Feedback feedback = captchaData.getData();
+		feedback.setIp(TimiSpring.getRequestIP());
+		if (userLoginService.isLogged()) {
+			feedback.setUserId(userLoginService.getRequireLoginUserId());
+		}
+		service.create(feedback);
+	}
+
+	/// 查询反馈列表
+	///
+	/// @param page 分页参数
+	/// @return 反馈分页
+	@JsonView(ResponseView.Admin.class)
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.FEEDBACK_READ)
+	@PostMapping("/list")
+	public PageResult<Feedback> list(@RequestBody Page<Feedback> page) {
+		return service.page(page);
+	}
+
+	/// 查询反馈详情
+	///
+	/// @param id 反馈 ID
+	/// @return 反馈详情
+	@JsonView(ResponseView.Admin.class)
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.FEEDBACK_READ)
+	@PostMapping("/detail")
+	public Feedback detail(@RequestParam String id) {
+		return service.get(id);
+	}
+
+	/// 更新反馈
+	///
+	/// @param feedback 反馈
+	@AOPLog
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.FEEDBACK_UPDATE)
+	@PostMapping("/update")
+	public void update(@RequestBody Feedback feedback) {
+		feedback.setRespondedBy(userLoginService.getRequireLoginUserId());
+		service.update(feedback);
+	}
+
+	/// 删除反馈
+	///
+	/// @param id 反馈 ID
+	@AOPLog
+	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.FEEDBACK_DELETE)
+	@PostMapping("/delete")
+	public void delete(@RequestParam String id) {
+		service.delete(id);
+	}
+}

src/main/java/com/imyeyu/api/modules/common/controller/LoggerController.java

@@ -1,5 +1,6 @@
 package com.imyeyu.api.modules.common.controller;
 
+import com.imyeyu.api.modules.common.vo.ClientLogRequest;
 import com.imyeyu.api.modules.system.entity.Logger;
 import com.imyeyu.api.modules.system.service.LoggerService;
 import com.imyeyu.spring.annotation.AOPLog;
@@ -29,7 +30,9 @@ public class LoggerController {
 	@AOPLog
 	@RequiredToken
 	@PostMapping("/create")
-	public void create(@Valid @RequestBody Logger logger) {
+	public void create(@Valid @RequestBody ClientLogRequest request) {
+		Logger logger = Logger.info(Logger.Module.COMMON, "CLIENT_LOG");
+		logger.setContent(request.getContent());
 		service.create(logger);
 	}
 }

src/main/java/com/imyeyu/api/modules/common/controller/MultilingualController.java

@@ -2,9 +2,7 @@ package com.imyeyu.api.modules.common.controller;
 
 import com.fasterxml.jackson.annotation.JsonView;
 import com.imyeyu.api.annotation.RequireCorePermission;
-import com.imyeyu.api.annotation.RequireCoreRole;
 import com.imyeyu.api.bean.CorePermissionCode;
-import com.imyeyu.api.bean.CoreRoleCode;
 import com.imyeyu.api.modules.common.entity.Multilingual;
 import com.imyeyu.api.modules.common.service.MultilingualService;
 import com.imyeyu.spring.annotation.AOPLog;
@@ -40,7 +38,6 @@ public class MultilingualController {
 	 */
 	@JsonView(ResponseView.Admin.class)
 	@RequestRateLimit
-	@RequireCoreRole(CoreRoleCode.ADMIN)
 	@RequireCorePermission(CorePermissionCode.MULTILINGUAL_READ)
 	@PostMapping("/detail")
 	public Multilingual detail(@RequestParam String id) {
@@ -56,7 +53,6 @@ public class MultilingualController {
 	@AOPLog
 	@JsonView(ResponseView.Admin.class)
 	@RequestRateLimit
-	@RequireCoreRole(CoreRoleCode.ADMIN)
 	@RequireCorePermission(CorePermissionCode.MULTILINGUAL_CREATE)
 	@PostMapping("/create")
 	public Multilingual create(@RequestBody Multilingual multilingual) {
@@ -71,7 +67,6 @@ public class MultilingualController {
 	 */
 	@AOPLog
 	@RequestRateLimit
-	@RequireCoreRole(CoreRoleCode.ADMIN)
 	@RequireCorePermission(CorePermissionCode.MULTILINGUAL_UPDATE)
 	@PostMapping("/update")
 	public void update(@RequestBody Multilingual multilingual) {
@@ -85,7 +80,6 @@ public class MultilingualController {
 	 */
 	@AOPLog
 	@RequestRateLimit
-	@RequireCoreRole(CoreRoleCode.ADMIN)
 	@RequireCorePermission(CorePermissionCode.MULTILINGUAL_DELETE)
 	@PostMapping("/delete")
 	public void delete(@RequestParam String id) {

src/main/java/com/imyeyu/api/modules/common/controller/NotifyController.java

@@ -0,0 +1,250 @@
+package com.imyeyu.api.modules.common.controller;
+
+import com.fasterxml.jackson.annotation.JsonView;
+import com.imyeyu.api.annotation.RequireCorePermission;
+import com.imyeyu.api.bean.CorePermissionCode;
+import com.imyeyu.api.modules.common.entity.Notify;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+import com.imyeyu.api.modules.common.service.NotifyDetailService;
+import com.imyeyu.api.modules.common.service.NotifyService;
+import com.imyeyu.api.modules.common.service.SmsService;
+import com.imyeyu.api.modules.common.vo.NotifyManagementItem;
+import com.imyeyu.api.modules.user.entity.User;
+import com.imyeyu.api.modules.user.service.UserLoginService;
+import com.imyeyu.api.modules.user.service.UserService;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.spring.annotation.AOPLog;
+import com.imyeyu.spring.annotation.CaptchaValid;
+import com.imyeyu.spring.annotation.RequestRateLimit;
+import com.imyeyu.spring.annotation.RequiredToken;
+import com.imyeyu.spring.bean.CaptchaData;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
+import com.imyeyu.spring.util.ResponseView;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.stream.Collectors;
+import java.util.stream.Stream;
+
+/// 通知接口
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/notify")
+public class NotifyController {
+
+
+	private final SmsService smsService;
+	private final UserService userService;
+	private final NotifyService service;
+	private final UserLoginService userLoginService;
+	private final NotifyDetailService detailService;
+
+	/// 创建通知，同时创建通知详情
+	///
+	/// @param notify 通知及通知详情
+	/// @return 创建后的通知
+	@RequireCorePermission(CorePermissionCode.NOTIFY_CREATE)
+	@RequiredToken
+	@PostMapping("/create")
+	public Notify create(@RequestBody Notify notify) {
+		String sendFrom = userLoginService.isLogged() ? userLoginService.getRequireLoginUserId() : null;
+		notify.setCreatedBy(sendFrom);
+		for (NotifyDetail detail : notify.getDetailList()) {
+			detail.setNotifyId(notify.getId());
+			if (TimiJava.isNotEmpty(sendFrom)) {
+				detail.setSendFrom(sendFrom);
+			}
+		}
+		service.create(notify);
+		return notify;
+	}
+
+	/// 查询通知详情
+	///
+	/// @param id 通知 ID
+	/// @return 通知及通知详情
+	@JsonView(ResponseView.Public.class)
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@RequestMapping("/detail")
+	public Notify detail(@RequestParam String id) {
+		return fillDetailList(service.get(id));
+	}
+
+	/// 查询管理端通知列表
+	///
+	/// @param page 分页参数
+	/// @return 管理端通知列表
+	@JsonView(ResponseView.Admin.class)
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/management/list")
+	public PageResult<NotifyManagementItem> managementList(@RequestBody(required = false) Page<Notify> page) {
+		return service.pageManagement(page, userLoginService.getRequireLoginUserId());
+	}
+
+	/// 查询管理端通知详情及收件人
+	///
+	/// @param id 通知 ID
+	/// @return 通知详情及收件人
+	@JsonView(ResponseView.Admin.class)
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/management/detail")
+	public Notify managementDetail(@RequestParam String id) {
+		return fillDetailList(service.getManagement(id, userLoginService.getRequireLoginUserId()));
+	}
+
+	/// 删除通知及其通知详情
+	///
+	/// @param id 通知 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_DELETE)
+	@RequiredToken
+	@PostMapping("/delete")
+	public void delete(@RequestParam String id) {
+		service.delete(id);
+	}
+
+	/// 取消尚未成功发送的通知详情
+	///
+	/// @param id 通知 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_CANCEL)
+	@RequiredToken
+	@PostMapping("/cancel")
+	public void cancel(@RequestParam String id) {
+		service.cancel(id);
+	}
+
+	/// 删除管理端通知及其通知详情
+	///
+	/// @param id 通知 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_DELETE)
+	@RequiredToken
+	@PostMapping("/management/delete")
+	public void managementDelete(@RequestParam String id) {
+		service.deleteManagement(id, userLoginService.getRequireLoginUserId());
+	}
+
+	/// 取消管理端尚未成功发送的通知
+	///
+	/// @param id 通知 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_CANCEL)
+	@RequiredToken
+	@PostMapping("/management/cancel")
+	public void managementCancel(@RequestParam String id) {
+		service.cancelManagement(id, userLoginService.getRequireLoginUserId());
+	}
+
+	@AOPLog
+	@CaptchaValid
+	@RequestRateLimit(value = 1, inSeconds = 59)
+	@PostMapping("/sms/captcha/create")
+	public String smsCaptchaCreate(@RequestBody CaptchaData<Notify> req) {
+		return smsService.captchaCreate(req.getData());
+	}
+
+	/// 查询当前用户的站内通知
+	///
+	/// @param page 分页参数
+	/// @param unreadOnly true 为只查询未读通知
+	/// @return 站内通知分页结果
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/internal")
+	public PageResult<NotifyDetail> listInternal(
+		@RequestBody(required = false) Page<NotifyDetail> page,
+		@RequestParam(defaultValue = "false") boolean unreadOnly
+	) {
+		return detailService.pageInternalByUserId(page, userLoginService.getRequireLoginUserId(), unreadOnly);
+	}
+
+	@JsonView(ResponseView.Public.class)
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/detail")
+	public NotifyDetail internalDetail(@RequestParam String id) {
+		NotifyDetail detail = detailService.getInternalByUserId(id, userLoginService.getRequireLoginUserId());
+		if (TimiJava.isNotEmpty(detail.getSendFrom())) {
+			detail.setFromUser(userService.get(detail.getSendFrom()));
+		}
+		if (TimiJava.isNotEmpty(detail.getSendTo())) {
+			detail.setToUser(userService.get(detail.getSendTo()));
+		}
+		return detail;
+	}
+
+	/// 隐藏当前用户的一条站内通知
+	///
+	/// @param id 通知详情 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/delete")
+	public void deleteInternal(@RequestParam String id) {
+		detailService.hideInternalByUserId(id, userLoginService.getRequireLoginUserId());
+	}
+
+	/// 查询当前用户未读通知数量
+	///
+	/// @return 未读通知数量
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/unread/count")
+	public long countUnreadSite() {
+		return detailService.countUnreadSiteByUserId(userLoginService.getRequireLoginUserId());
+	}
+
+	/// 标记当前用户的一条站内通知已读
+	///
+	/// @param id 通知详情 ID
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/read")
+	public void markSiteRead(@RequestParam String id) {
+		detailService.markSiteRead(userLoginService.getRequireLoginUserId(), id);
+	}
+
+	/// 标记当前用户全部站内通知已读
+	@RequireCorePermission(CorePermissionCode.NOTIFY_READ)
+	@RequiredToken
+	@PostMapping("/internal/read/all")
+	public void markAllSiteRead() {
+		detailService.markAllSiteRead(userLoginService.getRequireLoginUserId());
+	}
+
+	/// 回填通知详情中的用户信息
+	///
+	/// @param notify 通知
+	/// @return 已回填用户信息的通知
+	private Notify fillDetailList(Notify notify) {
+		if (notify == null) {
+			return null;
+		}
+		List<NotifyDetail> detailList = detailService.listByNotifyId(notify.getId());
+		Set<String> userIdSet = detailList.stream()
+		                                  .filter(item -> item.getMsgType() == NotifyDetail.MsgType.INTERNAL)
+		                                  .flatMap(item -> Stream.of(item.getSendFrom(), item.getSendTo()))
+		                                  .collect(Collectors.toSet());
+		Map<String, User> userMap = userService.mapByIdList(userIdSet);
+		for (NotifyDetail detail : detailList) {
+			if (TimiJava.isNotEmpty(detail.getSendFrom())) {
+				detail.setFromUser(userMap.get(detail.getSendFrom()));
+			}
+			if (TimiJava.isNotEmpty(detail.getSendTo())) {
+				detail.setToUser(userMap.get(detail.getSendTo()));
+			}
+		}
+		notify.setDetailList(detailList);
+		return notify;
+	}
+}

src/main/java/com/imyeyu/api/modules/common/controller/SettingController.java

@@ -15,8 +15,12 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
+import java.util.List;
+import java.util.Map;
+
 /**
  *
  *
@@ -26,11 +30,30 @@ import org.springframework.web.bind.annotation.RestController;
 @Slf4j
 @RestController
 @RequiredArgsConstructor
-@RequestMapping("/system/setting")
+@RequestMapping("/setting")
 public class SettingController {
 
 	private final SettingService service;
 
+	/**
+	 * 查询公开配置映射
+	 *
+	 * @param bizType 业务类型
+	 * @param bizId 业务 ID，可为空
+	 * @param code 配置代码列表，可为空
+	 * @return 公开配置映射
+	 */
+	@JsonView(ResponseView.Public.class)
+	@RequestRateLimit
+	@RequestMapping("/map")
+	public Map<String, Setting> map(
+			@RequestParam String bizType,
+			@RequestParam(required = false) String bizId,
+			@RequestParam(required = false) List<String> code
+	) {
+		return service.mapPublic(bizType, bizId, code);
+	}
+
 	/**
 	 * 查询配置列表
 	 *
@@ -53,6 +76,7 @@ public class SettingController {
 	 */
 	@JsonView(ResponseView.Admin.class)
 	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.SETTING_READ)
 	@PostMapping("/detail")
 	public Setting detail(@RequestBody String id) {
 		return service.get(id);
@@ -66,6 +90,7 @@ public class SettingController {
 	 */
 	@AOPLog
 	@JsonView(ResponseView.Admin.class)
+	@RequireCorePermission(CorePermissionCode.SETTING_CREATE)
 	@RequestRateLimit
 	@PostMapping("/create")
 	public Setting create(@RequestBody Setting setting) {
@@ -80,6 +105,7 @@ public class SettingController {
 	 */
 	@AOPLog
 	@RequestRateLimit
+	@RequireCorePermission(CorePermissionCode.SETTING_UPDATE)
 	@PostMapping("/update")
 	public void update(@RequestBody Setting setting) {
 		service.update(setting);

src/main/java/com/imyeyu/api/modules/common/controller/TagController.java

@@ -0,0 +1,111 @@
+package com.imyeyu.api.modules.common.controller;
+
+import com.fasterxml.jackson.annotation.JsonView;
+import com.imyeyu.api.modules.common.entity.Tag;
+import com.imyeyu.api.modules.common.entity.TagApply;
+import com.imyeyu.api.modules.common.service.TagService;
+import com.imyeyu.spring.annotation.AOPLog;
+import com.imyeyu.spring.annotation.RequestRateLimit;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
+import com.imyeyu.spring.util.ResponseView;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+/// 标签接口
+///
+/// @author 夜雨
+/// @since 2026-08-12 15:09
+@Slf4j
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/tag")
+public class TagController {
+
+	private final TagService service;
+
+	/// 查询标签列表
+	///
+	/// @param page 分页参数
+	/// @return 标签分页
+	@RequestRateLimit
+	@JsonView(ResponseView.Public.class)
+	@PostMapping("/list")
+	public PageResult<Tag> list(@RequestBody Page<Tag> page) {
+		return service.page(page);
+	}
+
+	/// 查询标签详情
+	///
+	/// @param id 标签 ID
+	/// @return 标签详情
+	@RequestRateLimit
+	@JsonView(ResponseView.Public.class)
+	@PostMapping("/detail")
+	public Tag detail(@RequestParam String id) {
+		return service.get(id);
+	}
+
+	/// 创建标签
+	///
+	/// @param tag 标签
+	/// @return 标签
+	@AOPLog
+	@RequestRateLimit
+	@JsonView(ResponseView.Public.class)
+	@PostMapping("/create")
+	public Tag create(@RequestBody Tag tag) {
+		service.create(tag);
+		return tag;
+	}
+
+	/// 更新标签
+	///
+	/// @param tag 标签
+	@AOPLog
+	@RequestRateLimit
+	@PostMapping("/update")
+	public void update(@RequestBody Tag tag) {
+		service.update(tag);
+	}
+
+	/// 删除标签
+	///
+	/// @param id 标签 ID
+	@AOPLog
+	@RequestRateLimit
+	@PostMapping("/delete")
+	public void delete(@RequestParam String id) {
+		service.delete(id);
+	}
+
+	/// 按业务查询标签
+	///
+	/// @param bizType 业务类型
+	/// @param bizId 业务 ID
+	/// @return 标签列表
+	@RequestRateLimit
+	@JsonView(ResponseView.Public.class)
+	@GetMapping("/list/biz/id")
+	public List<Tag> listByBizType(@RequestParam TagApply.BizType bizType, @RequestParam String bizId) {
+		return service.listByBizType(bizType, bizId);
+	}
+
+	/// 差分保存业务标签
+	///
+	/// @param apply 标签请求
+	@AOPLog
+	@RequestRateLimit
+	@PostMapping("/apply")
+	public void apply(@RequestBody TagApply apply) {
+		service.apply(apply.getBizType(), apply.getBizId(), apply.getTagIdList());
+	}
+}

src/main/java/com/imyeyu/api/modules/common/entity/Article.java

@@ -1,6 +1,7 @@
 package com.imyeyu.api.modules.common.entity;
 
 import com.imyeyu.api.modules.common.bean.attachment.SettingSupport;
+import com.imyeyu.api.modules.user.entity.User;
 import com.imyeyu.spring.annotation.table.PageIgnore;
 import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
@@ -28,7 +29,17 @@ public class Article extends UUIDEntity implements SettingSupport {
 	public enum BizType {
 
 		/** 博客 */
-		BLOG
+		BLOG,
+
+		/// GAO 门店日记
+		GAO_STORE_DIARY,
+
+		GAO_HELP,
+
+		GAO_SYSTEM,
+
+		/// 反馈
+		FEEDBACK
 	}
 
 	/**
@@ -49,6 +60,19 @@ public class Article extends UUIDEntity implements SettingSupport {
 		TIP_TAP
 	}
 
+	/// 文章状态
+	public enum Status {
+
+		/// 草稿
+		DART,
+
+		/// 正常
+		NORMAL,
+
+		/// 隐藏
+		HIDDEN
+	}
+
 	/** 业务类型 */
 	protected BizType bizType;
 
@@ -58,8 +82,8 @@ public class Article extends UUIDEntity implements SettingSupport {
 	/** 标题 */
 	protected String title;
 
-	/** 摘要 */
-	protected String digest;
+	/** 描述 */
+	protected String description;
 
 	/** 正文类型 */
 	protected ContentType contentType;
@@ -74,9 +98,21 @@ public class Article extends UUIDEntity implements SettingSupport {
 	/** 喜欢数量 */
 	protected Integer likes;
 
+	/** 文章状态 */
+	protected Status status;
+
+	/// 最后更新用户 ID
+	protected String updatedBy;
+
+	@Transient
+	protected User updater;
+
 	@Transient
 	protected List<Setting> settingList;
 
 	@Transient
 	protected List<Comment> commentList;
+
+	@Transient
+	protected List<Attachment> attachmentList;
 }

src/main/java/com/imyeyu/api/modules/common/entity/Attachment.java

@@ -1,9 +1,10 @@
 package com.imyeyu.api.modules.common.entity;
 
-import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
 import com.imyeyu.api.TimiServerAPI;
 import com.imyeyu.api.modules.common.bean.attachment.AccessKey;
 import com.imyeyu.api.modules.common.service.AttachmentService;
+import com.imyeyu.java.TimiJava;
 import com.imyeyu.java.ref.Ref;
 import com.imyeyu.spring.TimiSpring;
 import com.imyeyu.spring.annotation.table.Transient;
@@ -29,11 +30,31 @@ public class Attachment extends UUIDEntity {
 	/// @since 2026-07-17 20:52
 	public enum BizType {
 
+		ARTICLE,
+
+		NOTIFY_DETAIL,
+
 		USER,
 
 		GAO_CUSTOMER,
 
-		GAO_REGISTRATION_EVENT_RECORD,
+		GAO_PRODUCT,
+
+		GAO_PRODUCT_SKU,
+
+		GAO_EVENT_RECORD,
+
+		GAO_FUND_RECORD,
+
+		GAO_STOCK_RECORD,
+
+		GAO_ORDER_FULFILLMENT,
+
+		GAO_SALES_ORDER,
+
+		GAO_POINT_REDEMPTION,
+
+		GAO_POINT_REDEMPTION_RETURN,
 
 		TEMP_FILE,
 
@@ -54,7 +75,7 @@ public class Attachment extends UUIDEntity {
 
 	protected String mimeType;
 
-	protected JsonNode metadata;
+	protected ObjectNode metadata;
 
 	protected Long size;
 
@@ -82,6 +103,14 @@ public class Attachment extends UUIDEntity {
 	@Transient
 	protected MultipartFile file;
 
+	public String buildMongoName() {
+		StringBuilder result = new StringBuilder(bizType.name());
+		if (TimiJava.isNotEmpty(attachType)) {
+			result.append('_').append(attachType.toUpperCase());
+		}
+		return result.append('_').append(name).toString();
+	}
+
 	public InputStream openInputStream() {
 		AttachmentService service = TimiServerAPI.applicationContext.getBean(AttachmentService.class);
 		return service.getInputStreamByMongoId(mongoId);

src/main/java/com/imyeyu/api/modules/common/entity/AttachmentVariant.java

@@ -0,0 +1,68 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import com.imyeyu.api.modules.common.bean.attachment.ThumbnailFitMode;
+import com.imyeyu.spring.annotation.table.AutoUUID;
+import com.imyeyu.spring.annotation.table.Id;
+import lombok.Data;
+
+/// 附件缩略图变体记录
+///
+/// @author 夜雨
+/// @since 2026-08-21
+@Data
+public class AttachmentVariant {
+
+	/// 变体 ID
+	@Id
+	@AutoUUID
+	private String id;
+
+	/// 源附件 ID
+	private String sourceAttachmentId;
+
+	/// 源文件版本，使用源 GridFS ID
+	private String sourceMongoId;
+
+	/// 源文件摘要
+	private String sourceMd5;
+
+	/// 请求宽度，0 表示未指定
+	private int requestWidth;
+
+	/// 请求高度，0 表示未指定
+	private int requestHeight;
+
+	/// 缩放模式
+	private ThumbnailFitMode fitMode;
+
+	/// 输出格式
+	private String outputFormat;
+
+	/// 缩略图算法版本
+	private String algorithmVersion;
+
+	/// 缩略图 GridFS ID
+	private String mongoId;
+
+	/// 缩略图名称
+	private String name;
+
+	/// 缩略图 MIME 类型
+	private String mimeType;
+
+	/// 缩略图元数据
+	private ObjectNode metadata;
+
+	/// 缩略图大小
+	private long size;
+
+	/// 缩略图摘要
+	private String md5;
+
+	/// 创建时间
+	private long createdAt;
+
+	/// 过期时间
+	private long expireAt;
+}

src/main/java/com/imyeyu/api/modules/common/entity/BaseQueueEntity.java

@@ -0,0 +1,61 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.imyeyu.spring.annotation.table.AutoUUID;
+import com.imyeyu.spring.annotation.table.Id;
+import com.imyeyu.spring.entity.Creatable;
+import com.imyeyu.spring.entity.Destroyable;
+import com.imyeyu.spring.entity.IDEntity;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/// 通知基础队列实体
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@NoArgsConstructor
+public class BaseQueueEntity implements IDEntity<String>, Creatable, Destroyable {
+
+	/** 主键 */
+	@Id
+	@AutoUUID
+	protected String id;
+
+	/** 所属通知详情 ID */
+	protected String notifyDetailId;
+
+	/** 内容 */
+	protected String content;
+
+	/** 参数 */
+	protected JsonNode args;
+
+	/** 发送去向 */
+	protected String sendTo;
+
+	/** 发送时间 */
+	protected Long sendAt;
+
+	/** 剩余重试次数 */
+	protected Integer retry;
+
+	/** 超时时间 */
+	protected Long timeoutAt;
+
+	/** 创建时间 */
+	protected Long createdAt;
+
+	/// 从通知详情创建队列实体
+	///
+	/// @param detail 通知详情
+	public BaseQueueEntity(NotifyDetail detail) {
+		notifyDetailId = detail.getId();
+		content = detail.getContent();
+		args = detail.getArgs();
+		sendTo = detail.getSendTo();
+		sendAt = detail.getSendAt();
+		retry = detail.getRetry();
+		timeoutAt = detail.getTimeoutAt();
+	}
+}

src/main/java/com/imyeyu/api/modules/common/entity/Feedback.java

@@ -0,0 +1,79 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.fasterxml.jackson.annotation.JsonView;
+import com.imyeyu.api.bean.ModuleCode;
+import com.imyeyu.spring.annotation.table.Transient;
+import com.imyeyu.spring.entity.UUIDEntity;
+import com.imyeyu.spring.util.ResponseView;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/// 通用反馈
+///
+/// @author Codex
+/// @since 2026-08-19
+@Data
+@NoArgsConstructor
+@EqualsAndHashCode(callSuper = true)
+public class Feedback extends UUIDEntity {
+
+	/// 反馈处理状态
+	public enum Status {
+
+		/// 待处理
+		PENDING,
+
+		/// 已回复
+		REPLIED,
+
+		/// 已关闭
+		CLOSED
+	}
+
+	/// 所属模块
+	@JsonView(ResponseView.Public.class)
+	private ModuleCode module;
+
+	/// 提交用户 ID，匿名反馈为 null
+	@JsonView(ResponseView.Admin.class)
+	private String userId;
+
+	/// 反馈内容文章 ID
+	@JsonView(ResponseView.Public.class)
+	private String contentId;
+
+	/// 联系方式
+	@JsonView(ResponseView.Public.class)
+	private String contact;
+
+	/// 提交 IP
+	@JsonView(ResponseView.Admin.class)
+	private String ip;
+
+	/// 处理状态
+	@JsonView(ResponseView.Public.class)
+	private Status status;
+
+	/// 管理员回复文章 ID
+	@JsonView(ResponseView.Public.class)
+	private String responseId;
+
+	/// 回复用户 ID
+	@JsonView(ResponseView.Admin.class)
+	private String respondedBy;
+
+	/// 回复时间
+	@JsonView(ResponseView.Public.class)
+	private Long respondedAt;
+
+	/// 管理员回复文章
+	@Transient
+	@JsonView(ResponseView.Public.class)
+	private Article content;
+
+	/// 管理员回复文章
+	@Transient
+	@JsonView(ResponseView.Public.class)
+	private Article response;
+}

src/main/java/com/imyeyu/api/modules/common/entity/GroovyScript.java

@@ -0,0 +1,46 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.imyeyu.spring.annotation.table.Transient;
+import com.imyeyu.spring.entity.UUIDEntity;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+/// Groovy 脚本
+///
+/// @author Codex
+/// @since 2026-09-04
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class GroovyScript extends UUIDEntity {
+
+	///
+	///
+	/// @author 夜雨
+	/// @since 2026/9/4 14:54
+	public enum BizType {
+
+		/// GAO 积分规则
+		GAO_POINT_RULE
+	}
+
+	/// 业务归属
+	private BizType bizType;
+
+	/// 业务内唯一代码
+	private String code;
+
+	/// 名称
+	private String name;
+
+	/// 说明
+	private String description;
+
+	/// true 为允许执行已发布版本
+	private Boolean enabled;
+
+	/// 当前发布版本 ID
+	private String publishedVersionId;
+
+	@Transient
+	private GroovyScriptVersion latest;
+}

src/main/java/com/imyeyu/api/modules/common/entity/GroovyScriptVersion.java

@@ -0,0 +1,26 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.imyeyu.spring.entity.UUIDEntity;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+/// Groovy 脚本版本
+///
+/// @author Codex
+/// @since 2026-09-04
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class GroovyScriptVersion extends UUIDEntity {
+
+	/// 脚本 ID
+	private String scriptId;
+
+	/// 版本号
+	private Integer version;
+
+	/// 脚本内容
+	private String content;
+
+	/// 脚本内容 SHA-256
+	private String checksum;
+}

src/main/java/com/imyeyu/api/modules/common/entity/HTTPQueue.java

@@ -0,0 +1,26 @@
+package com.imyeyu.api.modules.common.entity;
+
+import com.imyeyu.spring.annotation.table.Table;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+/// HTTP 回调队列
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@EqualsAndHashCode(callSuper = true)
+@Table("http_queue")
+public class HTTPQueue extends BaseQueueEntity {
+
+	/** HTTP 请求方法 */
+	protected String method;
+
+	/// 从通知详情创建 HTTP 队列
+	///
+	/// @param detail 通知详情
+	public HTTPQueue(NotifyDetail detail) {
+		super(detail);
+		method = "POST";
+	}
+}

src/main/java/com/imyeyu/api/modules/common/entity/MailQueue.java

@@ -0,0 +1,54 @@
+package com.imyeyu.api.modules.common.entity;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/// 邮件发送队列
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@NoArgsConstructor
+@EqualsAndHashCode(callSuper = true)
+public class MailQueue extends BaseQueueEntity {
+
+	/** 邮件标题 */
+	protected String subject;
+
+	/** 邮件附件 */
+	protected String attachments;
+
+	/** 发送来源 */
+	protected String sendFrom;
+
+	/// 从通知详情创建邮件队列
+	///
+	/// @param detail 通知详情
+	public MailQueue(NotifyDetail detail) {
+		super(detail);
+		subject = detail.getSubject();
+		sendFrom = detail.getSendFrom();
+	}
+
+	/// 邮件附件
+	@Data
+	public static class Attachment {
+
+		/** 附件类型 */
+		private Type type;
+
+		/** 附件值 */
+		private String value;
+
+		/// 附件来源类型
+		public enum Type {
+
+			/** 系统附件 */
+			E2INS_ATTACH,
+
+			/** URL 附件 */
+			URL
+		}
+	}
+}

src/main/java/com/imyeyu/api/modules/common/entity/Multilingual.java

@@ -1,6 +1,8 @@
 package com.imyeyu.api.modules.common.entity;
 
+import com.fasterxml.jackson.annotation.JsonIgnore;
 import com.imyeyu.java.bean.Language;
+import com.imyeyu.spring.annotation.table.Column;
 import com.imyeyu.spring.entity.UUIDEntity;
 import lombok.Data;
 import lombok.EqualsAndHashCode;
@@ -15,6 +17,18 @@ public class Multilingual extends UUIDEntity {
 
 	protected String zhCN;
 
+	@Column("zh_cn_pinyin_full")
+	@JsonIgnore
+	protected String zhCNPinyinFull;
+
+	@Column("zh_cn_pinyin_initial")
+	@JsonIgnore
+	protected String zhCNPinyinInitial;
+
+	@Column("zh_cn_pinyin_mixed")
+	@JsonIgnore
+	protected String zhCNPinyinMixed;
+
 	protected String zhTW;
 
 	protected String enUS;

src/main/java/com/imyeyu/api/modules/common/entity/Notify.java

@@ -1,7 +1,5 @@
 package com.imyeyu.api.modules.common.entity;
 
-import com.imyeyu.spring.annotation.table.AutoUUID;
-import com.imyeyu.spring.annotation.table.Id;
 import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
 import lombok.Data;
@@ -19,19 +17,14 @@ import java.util.List;
 @EqualsAndHashCode(callSuper = true)
 public class Notify extends UUIDEntity {
 
-	/** 主键 */
-	@Id
-	@AutoUUID
-	private String id;
-
 	/** 业务类型 */
 	private String bizType;
 
-	/** 提醒业务类型 */
+	/** 业务提醒类型 */
 	private String bizRemindedType;
 
-	/** 提醒业务 ID */
-	private String bizRemindedId;
+	/** 业务提醒查重键 */
+	private String bizRemindedKey;
 
 	/** 参数 */
 	private String args;

src/main/java/com/imyeyu/api/modules/common/entity/NotifyDetail.java

@@ -1,11 +1,24 @@
 package com.imyeyu.api.modules.common.entity;
 
+import com.fasterxml.jackson.annotation.JsonIgnore;
+import com.fasterxml.jackson.annotation.JsonView;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.imyeyu.api.TimiServerAPI;
+import com.imyeyu.api.modules.common.service.BaseQueueService;
+import com.imyeyu.api.modules.common.service.HTTPQueueService;
+import com.imyeyu.api.modules.common.service.MailQueueService;
+import com.imyeyu.api.modules.common.service.SmsQueueService;
+import com.imyeyu.api.modules.common.service.WechatQueueService;
+import com.imyeyu.api.modules.user.entity.User;
 import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
+import com.imyeyu.spring.util.ResponseView;
 import lombok.AllArgsConstructor;
 import lombok.Data;
 import lombok.EqualsAndHashCode;
 
+import java.util.List;
+
 /**
  * 通知详情
  *
@@ -25,13 +38,32 @@ public class NotifyDetail extends UUIDEntity {
 	@AllArgsConstructor
 	public enum MsgType {
 
-		SMS,
+		/** 站内通知，不进入外部消息队列 */
+		INTERNAL(null),
 
-		MAIL,
+		SMS(SmsQueueService.class),
 
-		HTTP,
+		MAIL(MailQueueService.class),
 
-		WECHAT;
+		HTTP(HTTPQueueService.class),
+
+		WECHAT(WechatQueueService.class);
+
+		private final Class<? extends BaseQueueService<?>> queueServiceClass;
+
+		/// 获取消息队列服务
+		///
+		/// @return 消息队列服务
+		public BaseQueueService<?> getService() {
+			return TimiServerAPI.applicationContext.getBean(queueServiceClass);
+		}
+
+		/// 判断是否需要外部消息队列
+		///
+		/// @return true 为需要外部消息队列
+		public boolean isQueue() {
+			return queueServiceClass != null;
+		}
 	}
 
 	/**
@@ -53,45 +85,94 @@ public class NotifyDetail extends UUIDEntity {
 		FAIL
 	}
 
+	/// 内容类型
+	///
+	/// @author 夜雨
+	/// @since 2026-08-24
+	public enum ContentType {
+
+		/** 纯文本 */
+		TEXT,
+
+		/** TipTap 富文本 */
+		TIP_TAP
+	}
+
 	/** 所属通知 ID */
+	@JsonView(ResponseView.Public.class)
 	private String notifyId;
 
 	/** 消息类型 */
+	@JsonView(ResponseView.Public.class)
 	private MsgType msgType;
 
 	/** 模板 ID */
+	@JsonView(ResponseView.Admin.class)
 	private String templateId;
 
 	/** 标题 */
+	@JsonView(ResponseView.Public.class)
 	private String subject;
 
 	/** 内容 */
-	private String data;
+	@JsonView(ResponseView.Public.class)
+	private String content;
+
+	/// 内容类型
+	@JsonView(ResponseView.Public.class)
+	private ContentType contentType;
 
 	/** 参数 */
-	private String args;
+	@JsonView(ResponseView.Public.class)
+	private JsonNode args;
 
 	/** 发送来源 */
+	@JsonView(ResponseView.Public.class)
 	private String sendFrom;
 
 	/** 发送去向 */
+	@JsonView(ResponseView.Public.class)
 	private String sendTo;
 
 	/** 发送时间 */
+	@JsonView(ResponseView.Public.class)
 	private Long sendAt;
 
 	/** 重试计数 */
+	@JsonView(ResponseView.Admin.class)
 	private Integer retry;
 
 	/** 超时时间 */
+	@JsonView(ResponseView.Admin.class)
 	private Long timeoutAt;
 
 	/** 结果描述 */
+	@JsonView(ResponseView.Admin.class)
 	private String resultDesc;
 
 	/** 状态 */
+	@JsonView(ResponseView.Public.class)
 	private Status status;
 
+	/** 已读时间，站内通知未读时为空 */
+	@JsonView(ResponseView.Public.class)
+	private Long readAt;
+
+	/// 收件人隐藏时间，仅站内通知生效
+	@JsonIgnore
+	private Long hiddenAt;
+
 	@Transient
 	protected Notify notify;
+
+	@Transient
+	protected User fromUser;
+
+	@Transient
+	protected User toUser;
+
+	/// 媒体附件列表
+	@JsonView(ResponseView.Public.class)
+	@Transient
+	protected List<Attachment> attachmentList;
 }

src/main/java/com/imyeyu/api/modules/common/entity/Setting.java

@@ -7,7 +7,6 @@ import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.node.ArrayNode;
 import com.fasterxml.jackson.databind.node.ObjectNode;
 import com.imyeyu.api.TimiServerAPI;
-import com.imyeyu.api.modules.common.bean.SettingModule;
 import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
 import com.imyeyu.spring.util.ResponseView;
@@ -62,6 +61,9 @@ public class Setting extends UUIDEntity {
 		/** 时间 */
 		TIME,
 
+		/// 字节大小
+		BYTE_SIZE,
+
 		/** 时长 */
 		DURATION,
 
@@ -102,16 +104,6 @@ public class Setting extends UUIDEntity {
 	@Transient
 	private Enum<?> keyRaw;
 
-	public Setting(Enum<?> key) {
-		setKeyRaw(key);
-	}
-
-	public Setting(Enum<?> key, Object value, ValueType valueType) {
-		setKeyRaw(key);
-		this.value = value.toString();
-		this.valueType = valueType;
-	}
-
 	/**
 	 * 以字符串形式返回配置值
 	 *
@@ -221,298 +213,4 @@ public class Setting extends UUIDEntity {
 			throw new IllegalArgumentException("setting value is not valid json: %s".formatted(value), e);
 		}
 	}
-
-	public void setKeyRaw(Enum<?> key) {
-		this.keyRaw = key;
-		this.bizType = SettingModule.fromClass(key.getClass()).toString();
-		this.code = key.toString();
-	}
-
-	public boolean is(Enum<?> key) {
-		return SettingModule.fromClass(key.getClass()).toString().equals(bizType) && key.toString().equals(code);
-	}
-
-	/**
-	 *
-	 *
-	 * @author 夜雨
-	 * @since 2026-04-24 14:23
-	 */
-	public static final class Module {
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:39
-		 */
-		public enum Common {
-
-			/** 微信收款码 */
-			WECHAT_RECEIVE_QR_CODE
-		}
-
-		/**
-		 * 域名
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-26 17:18
-		 */
-		public enum Domain {
-
-			ROOT,
-
-			API,
-
-			GIT,
-
-			BLOG,
-
-			SPACE,
-
-			FOREVER_MC
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:14
-		 */
-		public enum Blog {
-
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:03
-		 */
-		public enum User {
-
-			/** 启用登录 */
-			ENABLE_LOGIN,
-
-			/** 启用注册 */
-			ENABLE_REGISTER,
-
-			/** 允许数据更新 */
-			ENABLE_PROFILE_UPDATE,
-
-			/** 令牌有效期 */
-			TOKEN_TTL
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:21
-		 */
-		public enum Comment {
-
-			/** 启用服务 */
-			ENABLE
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:03
-		 */
-		public enum ICP {
-
-			IMYEYU_COM
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 15:01
-		 */
-		public enum ForeverMC {
-
-			PLAYER_BIND_MAX,
-
-			LOGIN_TOKEN_TTL
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:57
-		 */
-		public enum Multilingual {
-
-			/** 翻译 API */
-			TRANSLATE_API,
-
-			/** 翻译 AppId */
-			TRANSLATE_APP_ID,
-
-			/** 翻译密钥 */
-			TRANSLATE_KEY,
-
-			/** 翻译计划任务表达式 */
-			TRANSLATE_CORN,
-
-			/** 缓存时长 */
-			CACHE_TTL
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:55
-		 */
-		public enum Gitea {
-
-			/** 接口地址 */
-			API,
-
-			/** 关于页面所属文章 ID */
-			ABOUT_ARTICLE_ID,
-
-			/** 仓库文件地址 */
-			REPOSITORY_PATH
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:52
-		 */
-		public enum Music {
-
-			/** 启用服务 */
-			ENABLE,
-
-			/** 通信消息最大帧长度 */
-			MAX_FRAME_LENGTH,
-
-			/** 受控端 IP */
-			PLAYER_IP,
-
-			/** 受控端端口 */
-			PLAYER_PORT,
-
-			/** 控制端 IP */
-			CONTROLLER_IP,
-
-			/** 控制端端口 */
-			CONTROLLER_PORT,
-
-			/** 控制端入口地址 */
-			CONTROLLER_URI,
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:49
-		 */
-		public enum Journal {
-
-			/** 启用服务 */
-			ENABLE,
-
-			/** 审核中 */
-			REVIEWING,
-
-			/** 访问密钥 */
-			KEY,
-
-			/** 微信小程序 AppId */
-			APP_ID,
-
-			/** 微信小程序 AppSecret */
-			APP_SECRET,
-
-			/** 备忘录内容 */
-			MEMO,
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:47
-		 */
-		public enum TempFile {
-
-			/** 启用服务 */
-			ENABLE,
-
-			/** 最小缓存时长 */
-			TTL_MIN,
-
-			/** 默认缓存时长 */
-			TTL_DEFAULT,
-
-			/** 最大缓存时长 */
-			TTL_MAX,
-
-			/** 已过期文件残留时长 */
-			RESIDUE_TTL,
-
-			/** 每个 IP 限制有效临时文件容量 */
-			LIMIT_SIZE_OF_IP
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-27 14:35
-		 */
-		public enum FileSync {
-
-			ENABLE,
-
-			CRON,
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:23
-		 */
-		public enum System {
-
-			/** 文件系统基准路径 */
-			FILE_BASE_PATH,
-
-			/** 设置缓存时长 */
-			SETTING_TTL,
-
-			/** 哀悼滤镜 */
-			ENABLE_MOURN_FILTER,
-		}
-
-		/**
-		 *
-		 *
-		 * @author 夜雨
-		 * @since 2026-04-24 14:23
-		 */
-		public enum SystemStatus {
-
-			/** 状态采集数据量 */
-			LIMIT,
-
-			/** 状态采集网卡 */
-			NETWORK_MAC,
-
-			/** 状态采集频率 */
-			RATE,
-		}
-	}
 }

src/main/java/com/imyeyu/api/modules/common/entity/SmsQueue.java

@@ -0,0 +1,26 @@
+package com.imyeyu.api.modules.common.entity;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/// 短信发送队列
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@NoArgsConstructor
+@EqualsAndHashCode(callSuper = true)
+public class SmsQueue extends BaseQueueEntity {
+
+	/** 短信模板 ID */
+	protected String templateId;
+
+	/// 从通知详情创建短信队列
+	///
+	/// @param detail 通知详情
+	public SmsQueue(NotifyDetail detail) {
+		super(detail);
+		templateId = detail.getTemplateId();
+	}
+}

src/main/java/com/imyeyu/api/modules/common/entity/Tag.java

@@ -1,23 +1,43 @@
 package com.imyeyu.api.modules.common.entity;
 
+import com.imyeyu.api.annotation.MultilingualField;
 import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
 import lombok.Data;
 import lombok.EqualsAndHashCode;
 
-/**
- * @author 夜雨
- * @since 2024-08-28 14:26
- */
+/// 标签
+///
+/// @author 夜雨
+/// @since 2024-08-28 14:26
 @Data
 @EqualsAndHashCode(callSuper = true)
 public class Tag extends UUIDEntity {
 
-	protected String langKey;
+	///
+	///
+	/// @author 夜雨
+	/// @since 2026-08-12 16:49
+	public enum OwnerType {
 
+		GAO_STORE
+	}
+
+	/// 归属类型
+	protected OwnerType ownerType;
+
+	/// 归属 ID
+	protected String ownerId;
+
+	/// 名称多语言 ID
+	protected String nameLangId;
+
+	/// 当前语言名称
 	@Transient
-	protected String value;
+	@MultilingualField("nameLangId")
+	protected String name;
 
+	/// 中文名称
 	@Transient
 	protected String zhCN;
 }

src/main/java/com/imyeyu/api/modules/common/entity/TagApply.java

@@ -1,9 +1,12 @@
 package com.imyeyu.api.modules.common.entity;
 
+import com.imyeyu.spring.annotation.table.Transient;
 import com.imyeyu.spring.entity.UUIDEntity;
 import lombok.Data;
 import lombok.EqualsAndHashCode;
 
+import java.util.List;
+
 /**
  * 标签应用
  *
@@ -14,12 +17,25 @@ import lombok.EqualsAndHashCode;
 @EqualsAndHashCode(callSuper = true)
 public class TagApply extends UUIDEntity {
 
+	///
+	///
+	/// @author 夜雨
+	/// @since 2026-08-12 14:27
+	public enum BizType {
+
+		GAO_CUSTOMER
+	}
+
 	/** 业务类型 */
-	protected String bizType;
+	protected BizType bizType;
 
 	/** 业务 ID */
 	protected String bizId;
 
 	/** 标签 ID */
 	protected String tagId;
+
+	/// 标签 ID 列表
+	@Transient
+	private List<String> tagIdList;
 }

src/main/java/com/imyeyu/api/modules/common/entity/WechatQueue.java

@@ -0,0 +1,20 @@
+package com.imyeyu.api.modules.common.entity;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+/// 微信消息发送队列
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class WechatQueue extends BaseQueueEntity {
+
+	/// 从通知详情创建微信队列
+	///
+	/// @param detail 通知详情
+	public WechatQueue(NotifyDetail detail) {
+		super(detail);
+	}
+}

src/main/java/com/imyeyu/api/modules/common/mapper/AttachmentMapper.java

@@ -4,9 +4,9 @@ import com.imyeyu.api.modules.common.entity.Attachment;
 import com.imyeyu.spring.bean.Page;
 import com.imyeyu.spring.mapper.BaseMapper;
 import com.imyeyu.spring.mapper.RawMapper;
-import org.apache.ibatis.annotations.Param;
 import org.apache.ibatis.annotations.Select;
 
+import java.util.Collection;
 import java.util.List;
 
 /**
@@ -32,30 +32,12 @@ public interface AttachmentMapper extends BaseMapper<Attachment, String>, RawMap
 
 	List<Attachment> selectByBizId(Attachment.BizType bizType, String bizId, List<String> attachTypes, Page<Attachment> page);
 
-	List<Attachment> selectByBizIdList(@Param("bizType") Attachment.BizType bizType, @Param("bizIdList") List<String> bizIdList, @Param("attachTypes") List<String> attachTypes);
+	List<Attachment> selectAllByBizIdList(Attachment.BizType bizType, Collection<String> bizIdList, List<String> attachTypes);
+
+	List<Attachment> selectImageByBizIdList(Attachment.BizType bizType, Collection<String> bizIdList, String attachType);
 
 	long countByBizId(Attachment.BizType bizType, String bizId, List<String> attachTypes);
 
-	/**
-	 * 按源附件 ID 与请求尺寸查询已缓存缩略图
-	 *
-	 * @param bizType       源附件业务类型
-	 * @param sourceId      源附件 ID
-	 * @param requestWidth  请求宽度，{@code null} 表示未指定
-	 * @param requestHeight 请求高度，{@code null} 表示未指定
-	 * @return 缩略图附件，不存在返回 {@code null}
-	 */
-	Attachment selectThumb(Attachment.BizType bizType, String sourceId, Integer requestWidth, Integer requestHeight);
-
-	/**
-	 * 查询源附件的所有未销毁缩略图（含已软删除）
-	 *
-	 * @param sourceId 源附件 ID
-	 * @return 缩略图列表
-	 */
-	@Select("SELECT * FROM attachment WHERE biz_id = #{sourceId} AND attach_type = 'THUMB' AND is_destroyed = FALSE")
-	List<Attachment> selectThumbsBySourceId(String sourceId);
-
 	@Select("SELECT * FROM attachment WHERE `is_destroyed` = FALSE AND `destroy_at` < " + UNIX_TIME)
 	List<Attachment> selectNeedDestroy();
 }

src/main/java/com/imyeyu/api/modules/common/mapper/AttachmentVariantMapper.java

@@ -0,0 +1,86 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.Attachment;
+import com.imyeyu.api.modules.common.entity.AttachmentVariant;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+
+/// 附件缩略图变体 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-21
+public interface AttachmentVariantMapper {
+
+	/// 查询有效缩略图附件
+	///
+	/// @param sourceAttachmentId 源附件 ID
+	/// @param sourceMongoId      源 GridFS ID
+	/// @param requestWidth       请求宽度，0 表示未指定
+	/// @param requestHeight      请求高度，0 表示未指定
+	/// @param fitMode            缩放模式
+	/// @param outputFormat       输出格式
+	/// @param algorithmVersion   算法版本
+	/// @param now                当前时间
+	/// @return 缩略图附件
+	Attachment selectValidAttachment(
+		@Param("sourceAttachmentId") String sourceAttachmentId,
+		@Param("sourceMongoId") String sourceMongoId,
+		@Param("requestWidth") int requestWidth,
+		@Param("requestHeight") int requestHeight,
+		@Param("fitMode") String fitMode,
+		@Param("outputFormat") String outputFormat,
+		@Param("algorithmVersion") String algorithmVersion,
+		@Param("now") long now
+	);
+
+	/// 查询指定变体记录，不判断是否过期
+	///
+	/// @param sourceAttachmentId 源附件 ID
+	/// @param sourceMongoId      源 GridFS ID
+	/// @param requestWidth       请求宽度，0 表示未指定
+	/// @param requestHeight      请求高度，0 表示未指定
+	/// @param fitMode            缩放模式
+	/// @param outputFormat       输出格式
+	/// @param algorithmVersion   算法版本
+	/// @return 变体记录
+	AttachmentVariant selectByKey(
+		@Param("sourceAttachmentId") String sourceAttachmentId,
+		@Param("sourceMongoId") String sourceMongoId,
+		@Param("requestWidth") int requestWidth,
+		@Param("requestHeight") int requestHeight,
+		@Param("fitMode") String fitMode,
+		@Param("outputFormat") String outputFormat,
+		@Param("algorithmVersion") String algorithmVersion
+	);
+
+	/// 查询源附件的所有变体
+	///
+	/// @param sourceAttachmentId 源附件 ID
+	/// @return 变体列表
+	List<AttachmentVariant> selectBySourceAttachmentId(@Param("sourceAttachmentId") String sourceAttachmentId);
+
+	/// 查询已过期变体
+	///
+	/// @param now 当前时间
+	/// @return 已过期变体列表
+	List<AttachmentVariant> selectExpired(@Param("now") long now);
+
+	/// 新增变体
+	///
+	/// @param variant 变体
+	void insert(AttachmentVariant variant);
+
+	/// 延长缩略图变体的过期时间
+	///
+	/// @param id       变体 ID
+	/// @param now      当前时间
+	/// @param expireAt 新的过期时间
+	/// @return 更新记录数
+	int updateExpireAt(@Param("id") String id, @Param("now") long now, @Param("expireAt") long expireAt);
+
+	/// 删除变体
+	///
+	/// @param id 变体 ID
+	void delete(@Param("id") String id);
+}

src/main/java/com/imyeyu/api/modules/common/mapper/BaseQueueMapper.java

@@ -0,0 +1,26 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.BaseQueueEntity;
+import com.imyeyu.api.modules.common.util.QueueSQLProvider;
+import com.imyeyu.spring.mapper.BaseMapper;
+import org.apache.ibatis.annotations.DeleteProvider;
+import org.apache.ibatis.annotations.Param;
+import org.apache.ibatis.annotations.SelectProvider;
+
+import java.util.List;
+
+/// 通知队列基础 Mapper
+///
+/// @param <T> 队列实体类型
+/// @author 夜雨
+/// @since 2026-08-20
+public interface BaseQueueMapper<T extends BaseQueueEntity> extends BaseMapper<T, String> {
+
+	/** 查询已到发送时间的队列 */
+	@SelectProvider(type = QueueSQLProvider.class, method = "listReadyQueue")
+	List<T> listReadyQueue();
+
+	/** 根据通知详情 ID 物理删除队列 */
+	@DeleteProvider(type = QueueSQLProvider.class, method = "destroyByNotifyDetailId")
+	void destroyByNotifyDetailId(@Param("notifyDetailId") String notifyDetailId);
+}

src/main/java/com/imyeyu/api/modules/common/mapper/FeedbackMapper.java

@@ -0,0 +1,11 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.Feedback;
+import com.imyeyu.spring.mapper.BaseMapper;
+
+/// 通用反馈 Mapper
+///
+/// @author Codex
+/// @since 2026-08-19
+public interface FeedbackMapper extends BaseMapper<Feedback, String> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/GroovyScriptMapper.java

@@ -0,0 +1,11 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.GroovyScript;
+import com.imyeyu.spring.mapper.BaseMapper;
+
+/// Groovy 脚本 Mapper
+///
+/// @author Codex
+/// @since 2026-09-04
+public interface GroovyScriptMapper extends BaseMapper<GroovyScript, String> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/GroovyScriptVersionMapper.java

@@ -0,0 +1,15 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.GroovyScriptVersion;
+import com.imyeyu.spring.mapper.BaseMapper;
+import org.apache.ibatis.annotations.Select;
+
+/// Groovy 脚本版本 Mapper
+///
+/// @author Codex
+/// @since 2026-09-04
+public interface GroovyScriptVersionMapper extends BaseMapper<GroovyScriptVersion, String> {
+
+	@Select("SELECT * FROM `groovy_script_version` WHERE `script_id` = #{scriptId} " + NOT_DELETE + " ORDER BY `version` DESC " + LIMIT_1)
+	GroovyScriptVersion selectLatest(String scriptId);
+}

src/main/java/com/imyeyu/api/modules/common/mapper/HTTPQueueMapper.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.HTTPQueue;
+
+/// HTTP 队列 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface HTTPQueueMapper extends BaseQueueMapper<HTTPQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/MailQueueMapper.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.MailQueue;
+
+/// 邮件队列 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface MailQueueMapper extends BaseQueueMapper<MailQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/NotifyDetailMapper.java

@@ -2,6 +2,11 @@ package com.imyeyu.api.modules.common.mapper;
 
 import com.imyeyu.api.modules.common.entity.NotifyDetail;
 import com.imyeyu.spring.mapper.BaseMapper;
+import org.apache.ibatis.annotations.Param;
+import org.apache.ibatis.annotations.Select;
+import org.apache.ibatis.annotations.Update;
+
+import java.util.List;
 
 /**
  * 通知详情 Mapper
@@ -10,4 +15,38 @@ import com.imyeyu.spring.mapper.BaseMapper;
  * @since 2026-05-13 14:46
  */
 public interface NotifyDetailMapper extends BaseMapper<NotifyDetail, String> {
+
+	String NOT_HIDDEN = " AND `hidden_at` IS NULL";
+
+	/** 查询用户的站内通知 */
+	@Select("SELECT * FROM `notify_detail` WHERE `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + NOT_HIDDEN + NOT_DELETE + " ORDER BY `created_at` DESC LIMIT #{offset}, #{limit}")
+	List<NotifyDetail> selectSiteByUserId(@Param("userId") String userId, @Param("offset") long offset, @Param("limit") long limit);
+
+	/** 查询用户的未读站内通知 */
+	@Select("SELECT * FROM `notify_detail` WHERE `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + " AND `read_at` IS NULL " + NOT_HIDDEN + NOT_DELETE + " ORDER BY `created_at` DESC LIMIT #{offset}, #{limit}")
+	List<NotifyDetail> selectUnreadSiteByUserId(@Param("userId") String userId, @Param("offset") long offset, @Param("limit") long limit);
+
+	/** 统计用户的站内通知数量 */
+	@Select("SELECT COUNT(*) FROM `notify_detail` WHERE `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + NOT_HIDDEN + NOT_DELETE)
+	long countSiteByUserId(@Param("userId") String userId);
+
+	/** 统计用户的未读站内通知数量 */
+	@Select("SELECT COUNT(*) FROM `notify_detail` WHERE `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + " AND `read_at` IS NULL " + NOT_HIDDEN + NOT_DELETE)
+	long countUnreadSiteByUserId(@Param("userId") String userId);
+
+	/** 查询用户拥有的站内通知 */
+	@Select("SELECT * FROM `notify_detail` WHERE `id` = #{detailId} AND `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + NOT_HIDDEN + NOT_DELETE + " LIMIT 1")
+	NotifyDetail selectSiteByIdAndUserId(@Param("detailId") String detailId, @Param("userId") String userId);
+
+	/** 隐藏用户的站内通知 */
+	@Update("UPDATE `notify_detail` SET `hidden_at` = " + UNIX_TIME + ", `updated_at` = " + UNIX_TIME + " WHERE `id` = #{detailId} AND `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + NOT_HIDDEN + NOT_DELETE)
+	int hideSiteByIdAndUserId(@Param("detailId") String detailId, @Param("userId") String userId);
+
+	/** 标记站内通知已读 */
+	@Update("UPDATE `notify_detail` SET `read_at` = #{readAt}, `updated_at` = " + UNIX_TIME + " WHERE `id` = #{detailId} AND `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + " AND `read_at` IS NULL " + NOT_HIDDEN + NOT_DELETE)
+	int markSiteRead(@Param("detailId") String detailId, @Param("userId") String userId, @Param("readAt") long readAt);
+
+	/** 标记用户全部站内通知已读 */
+	@Update("UPDATE `notify_detail` SET `read_at` = #{readAt}, `updated_at` = " + UNIX_TIME + " WHERE `msg_type` = 'INTERNAL' AND `send_to` = #{userId} AND `send_at` < " + UNIX_TIME + " AND `read_at` IS NULL " + NOT_HIDDEN + NOT_DELETE)
+	int markAllSiteRead(@Param("userId") String userId, @Param("readAt") long readAt);
 }

src/main/java/com/imyeyu/api/modules/common/mapper/NotifyMapper.java

@@ -1,7 +1,11 @@
 package com.imyeyu.api.modules.common.mapper;
 
 import com.imyeyu.api.modules.common.entity.Notify;
+import com.imyeyu.api.modules.common.vo.NotifyManagementItem;
 import com.imyeyu.spring.mapper.BaseMapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
 
 /**
  * 通知 Mapper
@@ -10,4 +14,28 @@ import com.imyeyu.spring.mapper.BaseMapper;
  * @since 2026-05-13 14:46
  */
 public interface NotifyMapper extends BaseMapper<Notify, String> {
+
+	/// 原子创建业务提醒
+	int insertIfAbsent(Notify notify);
+
+	/// 分页查询管理端通知
+	///
+	/// @param userId 管理员用户 ID
+	/// @param offset 分页偏移量
+	/// @param limit 分页大小
+	/// @return 通知列表
+	List<NotifyManagementItem> selectManagementPage(@Param("userId") String userId, @Param("offset") long offset, @Param("limit") long limit);
+
+	/// 统计管理端通知数量
+	///
+	/// @param userId 管理员用户 ID
+	/// @return 通知数量
+	long countManagement(@Param("userId") String userId);
+
+	/// 查询管理员可管理的通知
+	///
+	/// @param notifyId 通知 ID
+	/// @param userId 管理员用户 ID
+	/// @return 通知
+	Notify selectManagement(@Param("notifyId") String notifyId, @Param("userId") String userId);
 }

src/main/java/com/imyeyu/api/modules/common/mapper/SettingMapper.java

@@ -3,6 +3,8 @@ package com.imyeyu.api.modules.common.mapper;
 import com.imyeyu.api.modules.common.entity.Setting;
 import com.imyeyu.spring.mapper.BaseMapper;
 
+import java.util.List;
+
 /**
  * 系统配置
  *
@@ -10,4 +12,6 @@ import com.imyeyu.spring.mapper.BaseMapper;
  * @since 2021-07-20 22:26
  */
 public interface SettingMapper extends BaseMapper<Setting, String> {
+
+	List<Setting> selectPublicByQuery(String bizType, String bizId, List<String> codeList);
 }

src/main/java/com/imyeyu/api/modules/common/mapper/SmsQueueMapper.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.SmsQueue;
+
+/// 短信队列 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface SmsQueueMapper extends BaseQueueMapper<SmsQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/TagApplyMapper.java

@@ -0,0 +1,11 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.TagApply;
+import com.imyeyu.spring.mapper.BaseMapper;
+
+/// 标签应用 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-12 15:05
+public interface TagApplyMapper extends BaseMapper<TagApply, String> {
+}

src/main/java/com/imyeyu/api/modules/common/mapper/TagMapper.java

@@ -2,10 +2,36 @@ package com.imyeyu.api.modules.common.mapper;
 
 import com.imyeyu.api.modules.common.entity.Tag;
 import com.imyeyu.spring.mapper.BaseMapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.Collection;
+import java.util.List;
 
 /**
  * @author 夜雨
  * @since 2025-05-30 22:48
  */
 public interface TagMapper extends BaseMapper<Tag, String> {
+
+	List<Tag> selectByIdList(Collection<String> idList);
+
+	/// 按归属和名称关键词查询标签总数
+	///
+	/// @param ownerType 归属类型
+	/// @param ownerId   归属 ID
+	/// @param keyword   名称关键词
+	/// @return 标签总数
+	long countByOwnerAndKeyword(@Param("ownerType") Tag.OwnerType ownerType, @Param("ownerId") String ownerId, @Param("keyword") String keyword);
+
+	/// 按归属和名称关键词分页查询标签
+	///
+	/// @param ownerType 归属类型
+	/// @param ownerId   归属 ID
+	/// @param keyword   名称关键词
+	/// @param offset    分页偏移量
+	/// @param limit     分页数量
+	/// @return 标签列表
+	List<Tag> selectByOwnerAndKeyword(@Param("ownerType") Tag.OwnerType ownerType, @Param("ownerId") String ownerId, @Param("keyword") String keyword, @Param("offset") long offset, @Param("limit") long limit);
+
+	Tag selectByOwnerAndZhCN(@Param("ownerType") Tag.OwnerType ownerType, @Param("ownerId") String ownerId, @Param("zhCN") String zhCN);
 }

src/main/java/com/imyeyu/api/modules/common/mapper/WechatQueueMapper.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.mapper;
+
+import com.imyeyu.api.modules.common.entity.WechatQueue;
+
+/// 微信队列 Mapper
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface WechatQueueMapper extends BaseQueueMapper<WechatQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/service/ArticleService.java

@@ -3,6 +3,8 @@ package com.imyeyu.api.modules.common.service;
 import com.imyeyu.api.modules.common.entity.Article;
 import com.imyeyu.spring.service.BaseService;
 
+import java.util.List;
+
 /**
  * 文章服务
  *
@@ -10,4 +12,10 @@ import com.imyeyu.spring.service.BaseService;
  * @since 2021-02-23 21:33
  */
 public interface ArticleService extends BaseService<Article, String> {
+
+	/// 按示例查询文章
+	///
+	/// @param example 查询示例
+	/// @return 文章列表
+	List<Article> listByExample(Article example);
 }

src/main/java/com/imyeyu/api/modules/common/service/AttachmentService.java

@@ -1,13 +1,12 @@
 package com.imyeyu.api.modules.common.service;
 
 import com.imyeyu.api.modules.common.entity.Attachment;
-import com.imyeyu.api.modules.common.vo.attach.BizDeleteReq;
-import com.imyeyu.api.modules.common.vo.attach.BizUpdateReq;
 import com.imyeyu.spring.bean.Page;
 import com.imyeyu.spring.bean.PageResult;
 import com.imyeyu.spring.service.BaseService;
 
 import java.io.InputStream;
+import java.util.Collection;
 import java.util.List;
 import java.util.Map;
 
@@ -19,17 +18,12 @@ import java.util.Map;
  */
 public interface AttachmentService extends BaseService<Attachment, String> {
 
-	/**
-	 * 按需获取或创建缩略图附件。
-	 * <p>当附件为图片或视频时，若指定尺寸的缩略图已存在则直接返回缓存，
-	 * 否则生成并持久化后返回。不支持缩略图的附件类型返回 {@code null}。</p>
-	 *
-	 * @param source        源附件（必须已持久化，mimeType 已填充）
-	 * @param requestWidth  请求宽度，{@code null} 表示未指定
-	 * @param requestHeight 请求高度，{@code null} 表示未指定
-	 * @return 缩略图附件，不支持时返回 {@code null}
-	 */
-	Attachment fetchThumb(Attachment source, Integer requestWidth, Integer requestHeight);
+	///
+	/// 克隆附件，复制业务属性和文件内容并生成新的附件记录
+	///
+	/// @param id 源附件 ID
+	/// @return 克隆后的附件
+	Attachment clone(String id);
 
 	Attachment getByBizId(Attachment.BizType bizType, String bizId);
 
@@ -51,15 +45,21 @@ public interface AttachmentService extends BaseService<Attachment, String> {
 	 */
 	List<Attachment> listByBizId(Attachment.BizType bizType, String bizId, String... attachTypes);
 
+	default Map<String, Attachment> mapFirstImageByIdList(Attachment.BizType bizType, Collection<String> bizIdList) {
+		return mapFirstImageByIdList(bizType, bizIdList, null);
+	}
+
+	Map<String, Attachment> mapFirstImageByIdList(Attachment.BizType bizType, Collection<String> bizIdList, String attachType);
+
 	/**
-	 * 根据多个业务 ID 批量获取附件。
+	 * 根据多个业务 ID 批量获取附件
 	 *
 	 * @param bizType     业务类型
 	 * @param bizIdList   业务 ID 列表
 	 * @param attachTypes 附件类型，可为 null
 	 * @return 按业务 ID 分组的附件列表
 	 */
-	Map<String, List<Attachment>> mapByBizIdList(Attachment.BizType bizType, List<String> bizIdList, String... attachTypes);
+	Map<String, List<Attachment>> mapByBizIdList(Attachment.BizType bizType, Collection<String> bizIdList, String... attachTypes);
 
 	/**
 	 * 根据业务获取所有附件
@@ -84,10 +84,8 @@ public interface AttachmentService extends BaseService<Attachment, String> {
 	 *   <li>请求有、数据库有、无 tempFileId → 仅更新元数据</li>
 	 *   <li>请求有、数据库有、有 tempFileId → 更新文件与元数据</li>
 	 * </ul>
-	 *
-	 * @param req 差分更新请求
 	 */
-	void updateByBiz(BizUpdateReq req);
+	void updateByBizId(Attachment.BizType bizType, String bizId, List<Attachment> list);
 
-	void deleteByBiz(BizDeleteReq req);
+	void deleteByBizId(Attachment.BizType bizType, String bizId);
 }

src/main/java/com/imyeyu/api/modules/common/service/AttachmentVariantService.java

@@ -0,0 +1,28 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.bean.attachment.ThumbnailFitMode;
+import com.imyeyu.api.modules.common.entity.Attachment;
+
+/// 附件缩略图变体服务
+///
+/// @author 夜雨
+/// @since 2026-08-21
+public interface AttachmentVariantService {
+
+	/// 按需获取或创建缩略图附件
+	///
+	/// @param source        源附件
+	/// @param requestWidth  请求宽度
+	/// @param requestHeight 请求高度
+	/// @param fitMode       缩放模式
+	/// @return 缩略图附件
+	Attachment fetchThumb(Attachment source, Integer requestWidth, Integer requestHeight, ThumbnailFitMode fitMode);
+
+	/// 删除源附件对应的全部缩略图变体
+	///
+	/// @param sourceAttachmentId 源附件 ID
+	void deleteBySourceId(String sourceAttachmentId);
+
+	/// 清理已过期的缩略图变体
+	void clearExpired();
+}

src/main/java/com/imyeyu/api/modules/common/service/BaseQueueService.java

@@ -0,0 +1,30 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.BaseQueueEntity;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+
+/// 通知队列基础服务
+///
+/// @param <T> 队列实体类型
+/// @author 夜雨
+/// @since 2026-08-20
+public interface BaseQueueService<T extends BaseQueueEntity> {
+
+	/// 创建队列
+	///
+	/// @param detail 通知详情
+	void createQueue(NotifyDetail detail);
+
+	/// 删除队列
+	///
+	/// @param detail 通知详情
+	void destroyQueue(NotifyDetail detail);
+
+	/// 执行已到期队列
+	void invokeQueue();
+
+	/// 发送队列消息
+	///
+	/// @param queue 队列
+	void send(T queue);
+}

src/main/java/com/imyeyu/api/modules/common/service/FeedbackService.java

@@ -0,0 +1,11 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.Feedback;
+import com.imyeyu.spring.service.BaseService;
+
+/// 通用反馈服务
+///
+/// @author Codex
+/// @since 2026-08-19
+public interface FeedbackService extends BaseService<Feedback, String> {
+}

src/main/java/com/imyeyu/api/modules/common/service/GroovyScriptService.java

@@ -0,0 +1,109 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.bean.GroovyScriptExecutionResult;
+import com.imyeyu.api.modules.common.entity.GroovyScript;
+import com.imyeyu.api.modules.common.entity.GroovyScriptVersion;
+import com.imyeyu.spring.service.BaseService;
+
+import java.util.List;
+import java.util.Map;
+
+/// Groovy 脚本服务
+///
+/// 脚本仅限可信管理员维护，不能作为不可信用户代码的执行环境
+///
+/// @author Codex
+/// @since 2026-09-04
+public interface GroovyScriptService extends BaseService<GroovyScript, String> {
+
+	/// 按业务归属查询脚本列表
+	///
+	/// @param bizType 业务归属
+	/// @return 脚本列表
+	List<GroovyScript> listByBizType(GroovyScript.BizType bizType);
+
+	/// 按业务归属和代码查询脚本
+	///
+	/// @param bizType 业务归属
+	/// @param code 业务内唯一代码
+	/// @return 脚本，不存在时返回 null
+	GroovyScript getByCode(GroovyScript.BizType bizType, String code);
+
+	/// 设置脚本启用状态
+	///
+	/// @param id 脚本 ID
+	/// @param enabled true 为允许执行已发布版本
+	void setEnabled(String id, boolean enabled);
+
+	GroovyScriptVersion getLatestVersion(String scriptId);
+
+	/// 创建不可变的脚本版本
+	///
+	/// @param scriptId 脚本 ID
+	/// @param content 脚本内容
+	/// @return 新版本
+	GroovyScriptVersion createVersion(String scriptId, String content);
+
+	/// 查询脚本的全部版本
+	///
+	/// @param scriptId 脚本 ID
+	/// @return 按版本号升序的版本列表
+	List<GroovyScriptVersion> listVersion(String scriptId);
+
+	/// 发布指定版本
+	///
+	/// @param scriptId 脚本 ID
+	/// @param versionId 脚本版本 ID
+	void publish(String scriptId, String versionId);
+
+	/// 取消当前发布版本
+	///
+	/// @param scriptId 脚本 ID
+	void unpublish(String scriptId);
+
+	/// 执行已发布且启用的脚本
+	///
+	/// @param bizType 业务归属
+	/// @param code 业务内唯一代码
+	/// @param bindings 传给脚本的变量
+	/// @return 脚本返回值
+	Object execute(GroovyScript.BizType bizType, String code, Map<String, Object> bindings);
+
+	/// 执行已发布且启用的脚本并返回实际执行版本
+	///
+	/// @param bizType 业务归属
+	/// @param code 业务内唯一代码
+	/// @param bindings 传给脚本的变量
+	/// @param resultType 返回值类型
+	/// @param <T> 返回值类型
+	/// @return 脚本执行结果
+	<T> GroovyScriptExecutionResult<T> executePublished(GroovyScript.BizType bizType, String code, Map<String, Object> bindings, Class<T> resultType);
+
+	/// 按指定历史版本执行脚本
+	///
+	/// 用于按积分发生时的脚本版本复算，脚本当前是否发布或启用不影响执行；脚本返回 null 表示未命中，属合法结果
+	///
+	/// @param versionId 脚本版本 ID
+	/// @param bindings 传给脚本的变量
+	/// @param resultType 返回值类型
+	/// @param <T> 返回值类型
+	/// @return 脚本执行结果
+	<T> GroovyScriptExecutionResult<T> executeVersion(String versionId, Map<String, Object> bindings, Class<T> resultType);
+
+	/// 执行已发布且启用的脚本并验证返回值类型
+	///
+	/// @param bizType 业务归属
+	/// @param code 业务内唯一代码
+	/// @param bindings 传给脚本的变量
+	/// @param resultType 返回值类型
+	/// @param <T> 返回值类型
+	/// @return 脚本返回值
+	<T> T execute(GroovyScript.BizType bizType, String code, Map<String, Object> bindings, Class<T> resultType);
+
+	/// 清除脚本的本地编译缓存
+	///
+	/// 多实例部署时，其他节点在收到脚本变更通知后调用此方法
+	///
+	/// @param scriptId 脚本 ID
+	void invalidate(String scriptId);
+}

src/main/java/com/imyeyu/api/modules/common/service/HTTPQueueService.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.HTTPQueue;
+
+/// HTTP 队列服务
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface HTTPQueueService extends BaseQueueService<HTTPQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/service/MailQueueService.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.MailQueue;
+
+/// 邮件队列服务
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface MailQueueService extends BaseQueueService<MailQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/service/NotifyDetailService.java

@@ -1,8 +1,12 @@
 package com.imyeyu.api.modules.common.service;
 
 import com.imyeyu.api.modules.common.entity.NotifyDetail;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
 import com.imyeyu.spring.service.BaseService;
 
+import java.util.List;
+
 /**
  * 通知详情服务
  *
@@ -10,4 +14,53 @@ import com.imyeyu.spring.service.BaseService;
  * @since 2026-05-13 14:46
  */
 public interface NotifyDetailService extends BaseService<NotifyDetail, String> {
+
+	/// 查询通知下的全部详情
+	///
+	/// @param notifyId 通知 ID
+	/// @return 通知详情列表
+	List<NotifyDetail> listByNotifyId(String notifyId);
+
+	/// 重新将通知详情放入消息队列
+	///
+	/// @param detailId 通知详情 ID
+	void requeue(String detailId);
+
+	/// 分页查询用户的站内通知
+	///
+	/// @param page 分页参数
+	/// @param userId 用户 ID
+	/// @param unreadOnly true 为只查询未读通知
+	/// @return 站内通知分页结果
+	PageResult<NotifyDetail> pageInternalByUserId(Page<NotifyDetail> page, String userId, boolean unreadOnly);
+
+	/// 查询当前用户拥有的站内通知详情
+	///
+	/// @param detailId 通知详情 ID
+	/// @param userId 用户 ID
+	/// @return 通知详情
+	NotifyDetail getInternalByUserId(String detailId, String userId);
+
+	/// 隐藏当前用户拥有的站内通知详情
+	///
+	/// @param detailId 通知详情 ID
+	/// @param userId 用户 ID
+	void hideInternalByUserId(String detailId, String userId);
+
+	/// 查询用户未读站内通知数量
+	///
+	/// @param userId 用户 ID
+	/// @return 未读数量
+	long countUnreadSiteByUserId(String userId);
+
+	/// 标记站内通知已读
+	///
+	/// @param userId 用户 ID
+	/// @param detailId 通知详情 ID
+	void markSiteRead(String userId, String detailId);
+
+	/// 标记用户全部站内通知已读
+	///
+	/// @param userId 用户 ID
+	void markAllSiteRead(String userId);
 }

src/main/java/com/imyeyu/api/modules/common/service/NotifyService.java

@@ -1,6 +1,9 @@
 package com.imyeyu.api.modules.common.service;
 
 import com.imyeyu.api.modules.common.entity.Notify;
+import com.imyeyu.api.modules.common.vo.NotifyManagementItem;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
 import com.imyeyu.spring.service.BaseService;
 
 /**
@@ -10,4 +13,40 @@ import com.imyeyu.spring.service.BaseService;
  * @since 2026-05-13 14:46
  */
 public interface NotifyService extends BaseService<Notify, String> {
+
+	/// 原子创建业务提醒，重复查重键不会创建通知详情
+	///
+	/// @param notify 通知
+	void createIfAbsent(Notify notify);
+
+	/// 分页查询当前用户创建的通知
+	///
+	/// @param page 分页参数
+	/// @param userId 用户 ID
+	/// @return 管理端通知列表
+	PageResult<NotifyManagementItem> pageManagement(Page<Notify> page, String userId);
+
+	/// 查询当前用户可管理的通知
+	///
+	/// @param notifyId 通知 ID
+	/// @param userId 用户 ID
+	/// @return 通知
+	Notify getManagement(String notifyId, String userId);
+
+	/// 删除当前用户创建的通知
+	///
+	/// @param notifyId 通知 ID
+	/// @param userId 用户 ID
+	void deleteManagement(String notifyId, String userId);
+
+	/// 取消当前用户创建的通知
+	///
+	/// @param notifyId 通知 ID
+	/// @param userId 用户 ID
+	void cancelManagement(String notifyId, String userId);
+
+	/// 取消通知中尚未成功发送的通知详情
+	///
+	/// @param notifyId 通知 ID
+	void cancel(String notifyId);
 }

src/main/java/com/imyeyu/api/modules/common/service/SettingService.java

@@ -1,12 +1,13 @@
 package com.imyeyu.api.modules.common.service;
 
+import com.imyeyu.api.bean.SettingEnum;
 import com.imyeyu.api.modules.common.bean.attachment.SettingSupport;
 import com.imyeyu.api.modules.common.entity.Setting;
 import com.imyeyu.java.TimiJava;
 import com.imyeyu.spring.service.BaseService;
-import com.imyeyu.utils.Text;
 
 import java.util.List;
+import java.util.Map;
 
 /**
  * 配置服务
@@ -18,12 +19,22 @@ public interface SettingService extends BaseService<Setting, String> {
 
 	Setting getByCode(String bizType, String bizId, String code);
 
-	default Setting getSystem(Enum<?> bizType) {
-		return getByCode(Text.bizClassName(bizType.getClass()), TimiJava.ZERO_UUID, bizType.toString());
+	default Setting getSystem(SettingEnum setting) {
+		return getByCode(setting.getBizType(), TimiJava.ZERO_UUID, setting.name());
 	}
 
 	List<Setting> listByBizId(String bizType, String bizId);
 
+	/**
+	 * 查询公开配置映射
+	 *
+	 * @param bizType 业务类型
+	 * @param bizId 业务 ID，可为空
+	 * @param code 配置代码列表，可为空
+	 * @return 公开配置映射
+	 */
+	Map<String, Setting> mapPublic(String bizType, String bizId, List<String> code);
+
 	default List<Setting> listBySettingSupport(SettingSupport settingSupport) {
 		String bizType = settingSupport.getClass().getSimpleName().toUpperCase();
 		return listByBizId(bizType, settingSupport.getId());

src/main/java/com/imyeyu/api/modules/common/service/SmsQueueService.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.SmsQueue;
+
+/// 短信队列服务
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface SmsQueueService extends BaseQueueService<SmsQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/service/SmsService.java

@@ -0,0 +1,30 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.Notify;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+
+/**
+ *
+ *
+ * @author 夜雨
+ * @since 2026-05-14 12:12
+ */
+public interface SmsService {
+
+	/**
+	 * 创建短信验证码通知
+	 *
+	 * @param detail 通知
+	 * @return 通知详情 ID
+	 */
+	String captchaCreate(Notify detail);
+
+	/**
+	 * 校验短信验证码
+	 *
+	 * @param detailId 通知详情 ID
+	 * @param captcha  请求验证码
+	 * @return 通知详情
+	 */
+	NotifyDetail captchaVerify(String detailId, String captcha);
+}

src/main/java/com/imyeyu/api/modules/common/service/TagService.java

@@ -1,11 +1,48 @@
 package com.imyeyu.api.modules.common.service;
 
 import com.imyeyu.api.modules.common.entity.Tag;
+import com.imyeyu.api.modules.common.entity.TagApply;
+import com.imyeyu.spring.bean.Page;
+import com.imyeyu.spring.bean.PageResult;
 import com.imyeyu.spring.service.BaseService;
 
-/**
- * @author 夜雨
- * @since 2025-05-30 22:46
- */
+import java.util.Collection;
+import java.util.List;
+
+/// 标签服务
+///
+/// @author 夜雨
+/// @since 2025-05-30 22:46
 public interface TagService extends BaseService<Tag, String> {
+
+	List<Tag> listByIdList(Collection<String> idList);
+
+	/// 按归属和名称关键词分页查询标签
+	///
+	/// @param page      分页参数
+	/// @param ownerType 归属类型
+	/// @param ownerId   归属 ID
+	/// @param keyword   名称关键词
+	/// @return 标签分页
+	PageResult<Tag> pageByOwnerAndKeyword(Page<Tag> page, Tag.OwnerType ownerType, String ownerId, String keyword);
+
+	/// 按业务查询标签列表
+	///
+	/// @param bizType 业务类型
+	/// @param bizId 业务 ID
+	/// @return 标签列表
+	List<Tag> listByBizType(TagApply.BizType bizType, String bizId);
+
+	/// 差分保存业务标签
+	///
+	/// @param bizType 业务类型
+	/// @param bizId 业务 ID
+	/// @param tagIdList 标签 ID 列表
+	void apply(TagApply.BizType bizType, String bizId, List<String> tagIdList);
+
+	/// 删除指定归属下的全部标签
+	///
+	/// @param ownerType 归属类型
+	/// @param ownerId 归属 ID
+	void deleteByOwner(Tag.OwnerType ownerType, String ownerId);
 }

src/main/java/com/imyeyu/api/modules/common/service/WechatQueueService.java

@@ -0,0 +1,10 @@
+package com.imyeyu.api.modules.common.service;
+
+import com.imyeyu.api.modules.common.entity.WechatQueue;
+
+/// 微信队列服务
+///
+/// @author 夜雨
+/// @since 2026-08-20
+public interface WechatQueueService extends BaseQueueService<WechatQueue> {
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/AbstractQueueService.java

@@ -0,0 +1,126 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.imyeyu.api.modules.common.config.NotifyQueueConfig;
+import com.imyeyu.api.modules.common.entity.BaseQueueEntity;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+import com.imyeyu.api.modules.common.mapper.BaseQueueMapper;
+import com.imyeyu.api.modules.common.service.BaseQueueService;
+import com.imyeyu.api.modules.common.service.NotifyDetailService;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
+import com.imyeyu.utils.Time;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Autowired;
+
+/// 通知队列抽象服务
+///
+/// @param <T> 队列实体类型
+/// @param <C> 队列配置类型
+/// @author 夜雨
+/// @since 2026-08-20
+@Slf4j
+public abstract class AbstractQueueService<T extends BaseQueueEntity, C extends NotifyQueueConfig.Queue> implements BaseQueueService<T> {
+
+	private NotifyDetailService notifyDetailService;
+
+	/// 注入通知详情服务
+	@Autowired
+	private void setNotifyDetailService(NotifyDetailService notifyDetailService) {
+		this.notifyDetailService = notifyDetailService;
+	}
+
+	/// 获取队列 Mapper
+	///
+	/// @return 队列 Mapper
+	protected abstract BaseQueueMapper<T> mapper();
+
+	/// 获取队列配置
+	///
+	/// @return 队列配置
+	protected abstract C config();
+
+	/// 校验发送目标
+	///
+	/// @param sendTo 发送目标
+	protected abstract void validateSendTo(String sendTo);
+
+	@Override
+	public void destroyQueue(NotifyDetail detail) {
+		TimiException.required(detail, "未找到通知详情");
+		TimiException.required(detail.getId(), "未找到通知详情 ID");
+		mapper().destroyByNotifyDetailId(detail.getId());
+	}
+
+	@Override
+	public void invokeQueue() {
+		for (T queue : mapper().listReadyQueue()) {
+			send(queue);
+		}
+	}
+
+	/// 处理单个队列消息
+	///
+	/// @param queue 队列
+	@Override
+	public final void send(T queue) {
+		TimiException.required(queue, "未找到通知队列");
+		NotifyDetail detail = notifyDetailService.get(queue.getNotifyDetailId());
+		if (detail == null) {
+			mapper().destroy(queue.getId());
+			return;
+		}
+
+		try {
+			long now = Time.now();
+			queue.setSendAt(now);
+			if (queue.getTimeoutAt() < now) {
+				throw new TimiException(TimiCode.RESULT_TIMEOUT, "通知队列已超时");
+			}
+			validateSendTo(queue.getSendTo());
+			if (!config().isEnable()) {
+				throw new TimiException(TimiCode.IGNORE, "通知队列未启用");
+			}
+			doSend(queue);
+			detail.setStatus(NotifyDetail.Status.REMINDED);
+		} catch (TimiException e) {
+			if (e.getCode() == TimiCode.IGNORE) {
+				detail.setStatus(NotifyDetail.Status.CANCEL);
+				detail.setResultDesc(e.getMessage());
+			} else if (e.getCode() == TimiCode.RESULT_TIMEOUT) {
+				detail.setStatus(NotifyDetail.Status.TIMEOUT);
+				detail.setResultDesc(e.getMessage());
+			} else {
+				log.error("处理通知队列失败", e);
+				detail.setStatus(NotifyDetail.Status.FAIL);
+				detail.setResultDesc(TimiJava.serializeThrowable(e));
+			}
+		} catch (Exception e) {
+			log.error("处理通知队列失败", e);
+			detail.setStatus(NotifyDetail.Status.FAIL);
+			detail.setResultDesc(TimiJava.serializeThrowable(e));
+		} finally {
+			try {
+				notifyDetailService.update(detail);
+				if (detail.getStatus() == NotifyDetail.Status.REMINDED
+					|| detail.getStatus() == NotifyDetail.Status.CANCEL
+					|| queue.getRetry() < 0
+				) {
+					mapper().destroy(queue.getId());
+				} else {
+					queue.setRetry(queue.getRetry() - 1);
+					mapper().update(queue);
+				}
+			} catch (Exception e) {
+				log.error("通知队列收尾处理失败", e);
+				mapper().destroy(queue.getId());
+			}
+		}
+	}
+
+	/// 执行实际发送动作
+	///
+	/// @param queue 队列
+	/// @throws Exception 发送异常
+	protected abstract void doSend(T queue) throws Exception;
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/ArticleServiceImplement.java

@@ -1,14 +1,23 @@
 package com.imyeyu.api.modules.common.service.implement;
 
 import com.imyeyu.api.modules.common.entity.Article;
+import com.imyeyu.api.modules.common.entity.Attachment;
 import com.imyeyu.api.modules.common.mapper.ArticleMapper;
 import com.imyeyu.api.modules.common.service.ArticleService;
+import com.imyeyu.api.modules.common.service.AttachmentService;
+import com.imyeyu.api.modules.system.entity.Logger;
+import com.imyeyu.api.modules.system.service.LoggerService;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
 import com.imyeyu.spring.mapper.BaseMapper;
 import com.imyeyu.spring.service.AbstractEntityService;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
 
+import java.util.List;
+
 /**
  * 文章服务实现
  *
@@ -20,10 +29,62 @@ import org.springframework.stereotype.Service;
 @RequiredArgsConstructor
 public class ArticleServiceImplement extends AbstractEntityService<Article, String> implements ArticleService {
 
+	private final LoggerService loggerService;
+	private final AttachmentService attachmentService;
+
 	private final ArticleMapper mapper;
 
 	@Override
 	protected BaseMapper<Article, String> mapper() {
 		return mapper;
 	}
+
+	@Override
+	public List<Article> listByExample(Article example) {
+		return mapper.selectAllByExample(example);
+	}
+
+	@Override
+	public void create(Article article) {
+		Logger logger = new Logger(Logger.Module.COMMON, "COMMON_ARTICLE_CREATE");
+		try {
+			super.create(article);
+			attachmentService.updateByBizId(Attachment.BizType.ARTICLE, article.getId(), article.getAttachmentList());
+			logger.setLevel(Logger.Level.INFO);
+			logger.setResult(article.getId());
+		} catch (TimiException e) {
+			logger.setLevel(Logger.Level.WARN);
+			logger.setException(e.getMessage());
+			throw e;
+		} catch (Exception e) {
+			logger.setLevel(Logger.Level.ERROR);
+			logger.setException(TimiJava.serializeThrowable(e));
+			log.error("create article error", e);
+			throw new TimiException(TimiCode.ERROR, "create article error", e);
+		} finally {
+			loggerService.create(logger);
+		}
+	}
+
+	@Override
+	public void update(Article article) {
+		Logger logger = new Logger(Logger.Module.COMMON, "COMMON_ARTICLE_UPDATE");
+		try {
+			super.update(article);
+			attachmentService.updateByBizId(Attachment.BizType.ARTICLE, article.getId(), article.getAttachmentList());
+			logger.setLevel(Logger.Level.INFO);
+			logger.setResult(article.getId());
+		} catch (TimiException e) {
+			logger.setLevel(Logger.Level.WARN);
+			logger.setException(e.getMessage());
+			throw e;
+		} catch (Exception e) {
+			logger.setLevel(Logger.Level.ERROR);
+			logger.setException(TimiJava.serializeThrowable(e));
+			log.error("update article error", e);
+			throw new TimiException(TimiCode.ERROR, "update article error", e);
+		} finally {
+			loggerService.create(logger);
+		}
+	}
 }

src/main/java/com/imyeyu/api/modules/common/service/implement/AttachmentServiceImplement.java

@@ -3,21 +3,14 @@ package com.imyeyu.api.modules.common.service.implement;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.node.ObjectNode;
 import com.imyeyu.api.config.dbsource.TimiServerDBConfig;
-import com.imyeyu.api.modules.common.bean.attachment.MediaAttach;
-import com.imyeyu.api.modules.common.bean.attachment.Metadata;
 import com.imyeyu.api.modules.common.entity.Attachment;
 import com.imyeyu.api.modules.common.mapper.AttachmentMapper;
 import com.imyeyu.api.modules.common.service.AttachmentService;
-import com.imyeyu.api.modules.common.vo.attach.BizDeleteReq;
-import com.imyeyu.api.modules.common.vo.attach.BizUpdateReq;
-import com.imyeyu.api.util.JavaCV;
+import com.imyeyu.api.modules.common.service.AttachmentVariantService;
 import com.imyeyu.io.IO;
 import com.imyeyu.java.TimiJava;
-import com.imyeyu.java.bean.CallbackArg;
 import com.imyeyu.java.bean.timi.TimiCode;
 import com.imyeyu.java.bean.timi.TimiException;
-import com.imyeyu.java.ref.Ref;
-import com.imyeyu.network.Network;
 import com.imyeyu.spring.TimiSpring;
 import com.imyeyu.spring.bean.Page;
 import com.imyeyu.spring.bean.PageResult;
@@ -28,7 +21,6 @@ import com.mongodb.client.gridfs.GridFSBucket;
 import com.mongodb.client.gridfs.model.GridFSFile;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
-import net.coobird.thumbnailator.Thumbnails;
 import org.apache.tika.Tika;
 import org.springframework.data.mongodb.core.query.Criteria;
 import org.springframework.data.mongodb.core.query.Query;
@@ -38,17 +30,16 @@ import org.springframework.transaction.annotation.Transactional;
 
 import javax.imageio.ImageIO;
 import java.awt.image.BufferedImage;
-import java.io.ByteArrayInputStream;
-import java.io.ByteArrayOutputStream;
-import java.io.File;
 import java.io.IOException;
 import java.io.InputStream;
 import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashSet;
 import java.util.List;
 import java.util.Map;
 import java.util.Objects;
 import java.util.Set;
-import java.util.UUID;
+import java.util.function.Function;
 import java.util.stream.Collectors;
 
 /**
@@ -65,47 +56,13 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 	private final ObjectMapper jackson;
 	private final GridFSBucket gridFSBucket;
 	private final GridFsTemplate gridFsTemplate;
+	private final AttachmentVariantService variantService;
 
 	@Override
 	protected BaseMapper<Attachment, String> mapper() {
 		return mapper;
 	}
 
-	@Transactional(TimiServerDBConfig.ROLLBACKER)
-	@Override
-	public void delete(String id) {
-		mapper.selectThumbsBySourceId(id).forEach(thumb -> super.delete(thumb.getId()));
-		super.delete(id);
-	}
-
-	@Transactional(TimiServerDBConfig.ROLLBACKER)
-	@Override
-	public void destroy(String id) {
-		CallbackArg<Attachment> doDestroy = attach -> {
-			try {
-				if (attach.getMongoId() != null) {
-					gridFsTemplate.delete(Query.query(Criteria.where("_id").is(attach.getMongoId())));
-				}
-				if (!attach.isDeleted()) {
-					attach.setDeletedAt(Time.now());
-				}
-				attach.setIsDestroyed(true);
-				attach.setDestroyAt(Time.now());
-				mapper.update(attach);
-
-				if (Ref.toType(MediaAttach.Type.class, attach.getAttachType()) == MediaAttach.Type.THUMB) {
-					// 缩略图记录物理删除
-					mapper.destroy(attach.getId());
-				}
-			} catch (Exception e) {
-				log.error("delete mongo file error, id={}", attach.getId(), e);
-				throw new TimiException(TimiCode.ERROR, "TODO delete mongo file error");
-			}
-		};
-		mapper.selectThumbsBySourceId(id).forEach(doDestroy::handler);
-		doDestroy.handler(mapper.selectRaw(id));
-	}
-
 	@Transactional(TimiServerDBConfig.ROLLBACKER)
 	@Override
 	public void create(Attachment attachment) {
@@ -119,13 +76,7 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 			InputStream is = attachment.getInputStream();
 			TimiException.required(is, "not found attachment.inputStream");
 
-			StringBuilder mongoName = new StringBuilder(attachment.getBizType().name());
-			if (TimiJava.isNotEmpty(attachment.getAttachType())) {
-				mongoName.append("_").append(attachment.getAttachType().toUpperCase()).append("_");
-			}
-			mongoName.append(attachment.getName());
-
-			mongoId = gridFsTemplate.store(attachment.getInputStream(), mongoName.toString()).toString();
+			mongoId = gridFsTemplate.store(attachment.getInputStream(), attachment.buildMongoName()).toString();
 			GridFSFile gridFSFile = gridFsTemplate.findOne(new Query(Criteria.where("_id").is(mongoId)));
 			attachment.setMongoId(mongoId);
 			attachment.setSize(gridFSFile.getLength());
@@ -135,11 +86,10 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 			attachment.setIsDestroyed(false);
 			if (attachment.getMimeType().startsWith("image")) {
 				BufferedImage image = ImageIO.read(gridFSBucket.openDownloadStream(gridFSFile.getObjectId()));
-				attachment.setMetadata(TimiJava.defaultIfNull(attachment.getMetadata(), jackson.createObjectNode()));
-				if (attachment.getMetadata() instanceof ObjectNode obj) {
-					obj.put("width", image.getWidth());
-					obj.put("height", image.getHeight());
-				}
+				ObjectNode metadata = TimiJava.defaultIfNull(attachment.getMetadata(), jackson.createObjectNode());
+				metadata.put("width", image.getWidth());
+				metadata.put("height", image.getHeight());
+				attachment.setMetadata(metadata);
 			}
 			mapper.insert(attachment);
 		} catch (Exception e) {
@@ -167,18 +117,9 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 			}
 			// 有新文件时，先查旧记录获取旧 mongoId 和兜底字段
 			Attachment old = mapper.selectRaw(attachment.getId());
-			// 构建存储名，优先取调用方设置的字段，否则沿用旧值
-			Attachment.BizType bizType = TimiJava.defaultIfNull(attachment.getBizType(), old.getBizType());
-			String attachType = TimiJava.defaultIfEmpty(attachment.getAttachType(), old.getAttachType());
-			String name = TimiJava.defaultIfEmpty(attachment.getName(), old.getName());
-			StringBuilder mongoName = new StringBuilder(bizType.name());
-			if (TimiJava.isNotEmpty(attachType)) {
-				mongoName.append("_").append(attachType.toUpperCase()).append("_");
-			}
-			mongoName.append(name);
-
+			TimiException.required(old, "not found attachment");
 			// 存储新文件
-			newMongoId = gridFsTemplate.store(stream, mongoName.toString()).toString();
+			newMongoId = gridFsTemplate.store(stream, attachment.buildMongoName()).toString();
 			GridFSFile gridFSFile = gridFsTemplate.findOne(new Query(Criteria.where("_id").is(newMongoId)));
 			attachment.setMongoId(newMongoId);
 			attachment.setSize(gridFSFile.getLength());
@@ -186,19 +127,20 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 			attachment.setMimeType(new Tika().detect(gridFSBucket.openDownloadStream(gridFSFile.getObjectId())));
 			if (attachment.getMimeType().startsWith("image")) {
 				BufferedImage image = ImageIO.read(gridFSBucket.openDownloadStream(gridFSFile.getObjectId()));
-				attachment.setMetadata(TimiJava.defaultIfNull(attachment.getMetadata(), jackson.createObjectNode()));
-				if (attachment.getMetadata() instanceof ObjectNode obj) {
-					obj.put("width", image.getWidth());
-					obj.put("height", image.getHeight());
-				}
+				ObjectNode metadata = TimiJava.defaultIfNull(attachment.getMetadata(), jackson.createObjectNode());
+				metadata.put("width", image.getWidth());
+				metadata.put("height", image.getHeight());
+				attachment.setMetadata(metadata);
 			}
 
 			// 更新数据库后删除旧 GridFS 文件
 			super.update(attachment);
+			// 源文件版本已变化，旧缩略图全部失效
+			variantService.deleteBySourceId(attachment.getId());
 			gridFsTemplate.delete(Query.query(Criteria.where("_id").is(old.getMongoId())));
 		} catch (Exception e) {
 			// 新文件已上传但后续操作失败，清理新文件防止孤儿数据
-			if (newMongoId != null) {
+			if (TimiJava.isNotEmpty(newMongoId)) {
 				gridFsTemplate.delete(Query.query(Criteria.where("_id").is(newMongoId)));
 			}
 			log.error("update error", e);
@@ -208,72 +150,64 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 
 	@Transactional(TimiServerDBConfig.ROLLBACKER)
 	@Override
-	public Attachment fetchThumb(Attachment source, Integer requestWidth, Integer requestHeight) {
-		TimiException.requiredTrue(requestWidth != null || requestHeight != null, "required width or height");
-		String mimeType = source.getMimeType();
-		boolean isImage = mimeType != null && Set.of("image/png", "image/bmp", "image/jpeg").contains(mimeType);
-		boolean isVideo = mimeType != null && Set.of("video/mp4", "video/quicktime").contains(mimeType);
-		if (!isImage && !isVideo) {
-			return null;
-		}
-		// 命中缓存直接返回
-		Attachment cached = mapper.selectThumb(source.getBizType(), source.getId(), requestWidth, requestHeight);
-		if (cached != null) {
-			return cached;
-		}
-		try {
-			ByteArrayOutputStream thumbStream = new ByteArrayOutputStream();
-			CallbackArg<InputStream> applyThumbSize = inputStream -> {
-				try {
-					Thumbnails.Builder<? extends InputStream> builder = Thumbnails.of(inputStream);
-					if (requestWidth != null && requestHeight != null) {
-						builder.size(requestWidth, requestHeight).keepAspectRatio(false).toOutputStream(thumbStream);
-					} else if (requestWidth != null) {
-						builder.width(requestWidth).keepAspectRatio(true).toOutputStream(thumbStream);
-					} else {
-						builder.height(requestHeight).keepAspectRatio(true).toOutputStream(thumbStream);
-					}
-				} catch (IOException e) {
-					log.error("applyThumbSize error for fetchThumb", e);
-					throw new RuntimeException(e);
-				}
-			};
-			if (isImage) {
-				applyThumbSize.handler(source.openInputStream());
-			} else {
-				String name = source.getName();
-				File tempFile = IO.file("temp/%s_%s".formatted(UUID.randomUUID(), name));
-				try {
-					IO.toFile(tempFile, source.openInputStream());
-					ByteArrayOutputStream baos = JavaCV.captureThumbnail(IO.getInputStream(tempFile), 2);
-					applyThumbSize.handler(IO.toInputStream(baos));
-				} finally {
-					IO.destroy(tempFile);
-				}
-			}
-			Metadata.ThumbImage thumbMeta = new Metadata.ThumbImage();
-			thumbMeta.setSourceId(source.getId());
-			thumbMeta.setSourceMongoId(source.getMongoId());
-			thumbMeta.setSourceMimeType(mimeType);
-			thumbMeta.setRequestWidth(requestWidth);
-			thumbMeta.setRequestHeight(requestHeight);
+	public void delete(String id) {
+		variantService.deleteBySourceId(id);
+		super.delete(id);
+	}
 
-			Attachment thumb = new Attachment();
-			thumb.setName(Network.simpleURIFileName(source.getName()) + ".png");
-			thumb.setBizType(source.getBizType());
-			thumb.setBizId(source.getId());
-			thumb.setAttachType(MediaAttach.Type.THUMB.toString());
-			thumb.setMetadata(jackson.valueToTree(thumbMeta));
-			thumb.setInputStream(new ByteArrayInputStream(thumbStream.toByteArray()));
-			// 缩略图 7 天后过期，额外 1 天宽限供后台任务销毁
-			long expireAt = Time.now() + 7 * Time.D;
-			thumb.setDeletedAt(expireAt);
-			thumb.setDestroyAt(expireAt + Time.D);
-			create(thumb);
-			return thumb;
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void destroy(String id) {
+		variantService.deleteBySourceId(id);
+		Attachment attachment = mapper.selectRaw(id);
+		if (attachment != null) {
+			destroyAttachment(attachment);
+		}
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public Attachment clone(String id) {
+		TimiException.required(id, "not found id");
+		Attachment source = mapper.selectRaw(id);
+		TimiException.required(source, "not found attachment");
+		TimiException.required(source.getMongoId(), "not found mongoId");
+
+		Attachment target = new Attachment();
+		target.setBizType(source.getBizType());
+		target.setBizId(source.getBizId());
+		target.setAttachType(source.getAttachType());
+		target.setTitle(source.getTitle());
+		target.setName(source.getName());
+		target.setMetadata(source.getMetadata() == null ? null : source.getMetadata().deepCopy());
+		target.setDestroyAt(source.getDestroyAt());
+		try (InputStream inputStream = getInputStreamByMongoId(source.getMongoId())) {
+			target.setInputStream(inputStream);
+			create(target);
+			return target;
+		} catch (IOException e) {
+			if (target.getMongoId() != null) {
+				gridFsTemplate.delete(Query.query(Criteria.where("_id").is(target.getMongoId())));
+			}
+			log.error("clone attachment error, id={}", id, e);
+			throw new TimiException(TimiCode.ERROR, "clone attachment error", e);
+		}
+	}
+
+	private void destroyAttachment(Attachment attachment) {
+		try {
+			if (attachment.getMongoId() != null) {
+				gridFsTemplate.delete(Query.query(Criteria.where("_id").is(attachment.getMongoId())));
+			}
+			if (!attachment.isDeleted()) {
+				attachment.setDeletedAt(Time.now());
+			}
+			attachment.setIsDestroyed(true);
+			attachment.setDestroyAt(Time.now());
+			mapper.update(attachment);
 		} catch (Exception e) {
-			log.error("create thumbnail error", e);
-			throw new TimiException(TimiCode.ERROR, "exception.attachment.create.error");
+			log.error("delete mongo file error, id={}", attachment.getId(), e);
+			throw new TimiException(TimiCode.ERROR, "TODO delete mongo file error", e);
 		}
 	}
 
@@ -309,23 +243,17 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 
 	@Override
 	public List<Attachment> listByBizId(Attachment.BizType bizType, String bizId, String... attachTypes) {
-		return mapper.selectByBizId(bizType, bizId, List.of(attachTypes), null);
+		return mapper.selectAllByBizIdList(bizType, List.of(bizId), List.of(attachTypes));
 	}
 
 	@Override
-	public Map<String, List<Attachment>> mapByBizIdList(Attachment.BizType bizType, List<String> bizIdList, String... attachTypes) {
-		if (bizIdList == null || bizIdList.isEmpty()) {
-			return Map.of();
-		}
-		List<String> normalizedBizIdList = bizIdList.stream()
-				.filter(TimiJava::isNotEmpty)
-				.distinct()
-				.toList();
-		if (normalizedBizIdList.isEmpty()) {
-			return Map.of();
-		}
-		return mapper.selectByBizIdList(bizType, new ArrayList<>(normalizedBizIdList), List.of(attachTypes)).stream()
-				.collect(Collectors.groupingBy(Attachment::getBizId));
+	public Map<String, Attachment> mapFirstImageByIdList(Attachment.BizType bizType, Collection<String> bizIdList, String attachType) {
+		return mapper.selectImageByBizIdList(bizType, new HashSet<>(bizIdList), attachType).stream().collect(Collectors.toMap(Attachment::getBizId, Function.identity()));
+	}
+
+	@Override
+	public Map<String, List<Attachment>> mapByBizIdList(Attachment.BizType bizType, Collection<String> bizIdList, String... attachTypes) {
+		return mapper.selectAllByBizIdList(bizType, new HashSet<>(bizIdList), List.of(attachTypes)).stream().collect(Collectors.groupingBy(Attachment::getBizId));
 	}
 
 	@Override
@@ -348,16 +276,14 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 
 	@Transactional(TimiServerDBConfig.ROLLBACKER)
 	@Override
-	public void updateByBiz(BizUpdateReq req) {
-		Attachment.BizType bizType = req.getBizType();
-		String bizId = req.getBizId();
-		List<Attachment> items = req.getItems();
+	public void updateByBizId(Attachment.BizType bizType, String bizId, List<Attachment> list) {
+		list = TimiJava.defaultIfNull(list, new ArrayList<>());
 
 		// 数据库现有附件
 		List<Attachment> dbList = mapper.selectAllByBizId(bizType, bizId);
 		Set<String> dbIds = dbList.stream().map(Attachment::getId).collect(Collectors.toSet());
 		// 请求附件 ID
-		Set<String> reqIds = items.stream().map(Attachment::getId).filter(Objects::nonNull).collect(Collectors.toSet());
+		Set<String> reqIds = list.stream().map(Attachment::getId).filter(Objects::nonNull).collect(Collectors.toSet());
 		// 数据库有、请求无：删除
 		for (Attachment attach : dbList) {
 			if (!reqIds.contains(attach.getId())) {
@@ -365,7 +291,7 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 			}
 		}
 
-		for (Attachment item : items) {
+		for (Attachment item : list) {
 			boolean isNew = item.getId() == null || !dbIds.contains(item.getId());
 			String tempFileId = item.getTempFileId();
 
@@ -393,6 +319,8 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 				// 将临时文件的 GridFS 存储转移至当前永久记录，废弃临时记录
 				Attachment current = mapper.selectRaw(item.getId());
 				Attachment tempFile = mapper.selectRaw(tempFileId);
+				// 源文件版本已变化，旧缩略图全部失效
+				variantService.deleteBySourceId(current.getId());
 				// 删除旧 GridFS 文件
 				gridFsTemplate.delete(Query.query(Criteria.where("_id").is(current.getMongoId())));
 				// 将存储信息从临时记录迁移到永久记录
@@ -432,8 +360,8 @@ public class AttachmentServiceImplement extends AbstractEntityService<Attachment
 
 	@Transactional(TimiServerDBConfig.ROLLBACKER)
 	@Override
-	public void deleteByBiz(BizDeleteReq req) {
-		List<Attachment> attachmentList = mapper.selectAllByBizId(req.getBizType(), req.getBizId());
+	public void deleteByBizId(Attachment.BizType bizType, String bizId) {
+		List<Attachment> attachmentList = mapper.selectAllByBizId(bizType, bizId);
 		for (Attachment attachment : attachmentList) {
 			delete(attachment.getId());
 		}

src/main/java/com/imyeyu/api/modules/common/service/implement/AttachmentVariantServiceImplement.java

@@ -0,0 +1,377 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import com.imyeyu.api.config.dbsource.TimiServerDBConfig;
+import com.imyeyu.api.modules.common.bean.attachment.MediaAttach;
+import com.imyeyu.api.modules.common.bean.attachment.ThumbnailFitMode;
+import com.imyeyu.api.modules.common.entity.Attachment;
+import com.imyeyu.api.modules.common.entity.AttachmentVariant;
+import com.imyeyu.api.modules.common.mapper.AttachmentVariantMapper;
+import com.imyeyu.api.modules.common.service.AttachmentVariantService;
+import com.imyeyu.api.util.JavaCV;
+import com.imyeyu.io.IO;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
+import com.imyeyu.network.Network;
+import com.imyeyu.spring.util.Redis;
+import com.imyeyu.utils.Time;
+import com.mongodb.client.gridfs.GridFSBucket;
+import com.mongodb.client.gridfs.model.GridFSFile;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import net.coobird.thumbnailator.Thumbnails;
+import net.coobird.thumbnailator.geometry.Positions;
+import org.springframework.beans.factory.annotation.Qualifier;
+import org.springframework.dao.DuplicateKeyException;
+import org.springframework.data.mongodb.core.query.Criteria;
+import org.springframework.data.mongodb.core.query.Query;
+import org.springframework.data.mongodb.gridfs.GridFsTemplate;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import javax.imageio.ImageIO;
+import java.awt.image.BufferedImage;
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.File;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.file.Files;
+import java.util.Set;
+import java.util.UUID;
+
+/// 附件缩略图变体服务实现
+///
+/// 负责缩略图生成、变体缓存、并发控制和变体文件清理，源附件生命周期由 `AttachmentService` 负责
+///
+/// @author 夜雨
+/// @since 2026-08-21
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class AttachmentVariantServiceImplement implements AttachmentVariantService {
+
+	private static final int THUMB_MAX_WIDTH = 4096;
+	private static final int THUMB_MAX_HEIGHT = 4096;
+	private static final long THUMB_MAX_PIXELS = 16_000_000L;
+	private static final long THUMB_CACHE_TTL = Time.D * 7;
+	private static final long THUMB_LOCK_TTL = Time.M * 10;
+	private static final double THUMB_TARGET_SECONDS = 2;
+	private static final int VARIANT_NAME_MAX_LENGTH = 255;
+	private static final String THUMB_OUTPUT_FORMAT = "png";
+	private static final String THUMB_ALGORITHM_VERSION = "v3";
+	private static final String THUMB_LOCK_KEY_PREFIX = "ATTACHMENT:THUMB:LOCK:";
+
+	private final AttachmentVariantMapper variantMapper;
+	private final ObjectMapper jackson;
+	private final GridFSBucket gridFSBucket;
+	private final GridFsTemplate gridFsTemplate;
+
+	@Qualifier("redisLocker")
+	private final Redis<String, Integer> redisLocker;
+
+	@Override
+	public Attachment fetchThumb(Attachment source, Integer requestWidth, Integer requestHeight, ThumbnailFitMode fitMode) {
+		TimiException.required(source, "not found source attachment");
+		TimiException.required(source.getId(), "not found source attachment.id");
+		TimiException.required(source.getMongoId(), "not found source attachment.mongoId");
+		TimiException.requiredTrue(requestWidth != null || requestHeight != null, "required width or height");
+		if (requestWidth != null && !(0 < requestWidth && requestWidth < THUMB_MAX_WIDTH + 1)) {
+			throw new TimiException(TimiCode.ARG_BAD, "attachment.thumbnail.width.invalid");
+		}
+		if (requestHeight != null && !(0 < requestHeight && requestHeight < THUMB_MAX_HEIGHT + 1)) {
+			throw new TimiException(TimiCode.ARG_BAD, "attachment.thumbnail.height.invalid");
+		}
+		if (requestWidth != null && requestHeight != null) {
+			long pixels = (long) requestWidth * requestHeight;
+			if (THUMB_MAX_PIXELS < pixels) {
+				throw new TimiException(TimiCode.ARG_BAD, "attachment.thumbnail.area.invalid");
+			}
+		}
+		fitMode = TimiJava.defaultIfNull(fitMode, ThumbnailFitMode.FIT);
+
+		String mimeType = source.getMimeType();
+		boolean isImage = mimeType != null && Set.of("image/png", "image/bmp", "image/jpeg").contains(mimeType);
+		boolean isVideo = mimeType != null && Set.of("video/mp4", "video/quicktime").contains(mimeType);
+		if (!isImage && !isVideo) {
+			throw new TimiException(TimiCode.ARG_BAD, "attachment.thumbnail.not.support");
+		}
+
+		int width = TimiJava.defaultIfNull(requestWidth, 0);
+		int height = TimiJava.defaultIfNull(requestHeight, 0);
+		long now = Time.now();
+		Attachment cached = variantMapper.selectValidAttachment(
+			source.getId(),
+			source.getMongoId(),
+			width,
+			height,
+			fitMode.toString(),
+			THUMB_OUTPUT_FORMAT,
+			THUMB_ALGORITHM_VERSION,
+			now
+		);
+		if (cached != null) {
+			Attachment refreshed = refreshCachedThumb(cached);
+			if (refreshed != null) {
+				return refreshed;
+			}
+		}
+
+		String lockKey = buildThumbLockKey(source, width, height, fitMode);
+		if (!redisLocker.lock(lockKey, 1, THUMB_LOCK_TTL)) {
+			throw new TimiException(TimiCode.ERROR_SERVICE_BUSY, "attachment.thumbnail.generating");
+		}
+		try {
+			cached = variantMapper.selectValidAttachment(
+				source.getId(),
+				source.getMongoId(),
+				width,
+				height,
+				fitMode.toString(),
+				THUMB_OUTPUT_FORMAT,
+				THUMB_ALGORITHM_VERSION,
+				Time.now()
+			);
+			if (cached != null) {
+				Attachment refreshed = refreshCachedThumb(cached);
+				if (refreshed != null) {
+					return refreshed;
+				}
+			}
+			AttachmentVariant oldVariant = variantMapper.selectByKey(
+				source.getId(),
+				source.getMongoId(),
+				width,
+				height,
+				fitMode.toString(),
+				THUMB_OUTPUT_FORMAT,
+				THUMB_ALGORITHM_VERSION
+			);
+			if (oldVariant != null) {
+				deleteVariant(oldVariant);
+			}
+			File thumbFile = null;
+			AttachmentVariant variant = null;
+			boolean variantInserted = false;
+			try {
+				thumbFile = createThumbFile(source, requestWidth, requestHeight, fitMode, isImage);
+				variant = new AttachmentVariant();
+				variant.setId(UUID.randomUUID().toString());
+				variant.setName(buildVariantName(source.getName()));
+				variant.setMimeType("image/" + THUMB_OUTPUT_FORMAT);
+				long expireAt = Time.now() + THUMB_CACHE_TTL;
+				variant.setSourceAttachmentId(source.getId());
+				variant.setSourceMongoId(source.getMongoId());
+				variant.setSourceMd5(source.getMd5());
+				variant.setRequestWidth(width);
+				variant.setRequestHeight(height);
+				variant.setFitMode(fitMode);
+				variant.setOutputFormat(THUMB_OUTPUT_FORMAT);
+				variant.setAlgorithmVersion(THUMB_ALGORITHM_VERSION);
+				variant.setCreatedAt(Time.now());
+				variant.setExpireAt(expireAt);
+				BufferedImage image = ImageIO.read(thumbFile);
+				if (image != null) {
+					ObjectNode metadata = jackson.createObjectNode();
+					metadata.put("width", image.getWidth());
+					metadata.put("height", image.getHeight());
+					variant.setMetadata(metadata);
+				}
+				try (InputStream inputStream = Files.newInputStream(thumbFile.toPath())) {
+					String mongoId = gridFsTemplate.store(inputStream, variant.getName()).toString();
+					GridFSFile gridFSFile = gridFsTemplate.findOne(new Query(Criteria.where("_id").is(mongoId)));
+					variant.setMongoId(mongoId);
+					variant.setSize(gridFSFile.getLength());
+					try (InputStream md5InputStream = gridFSBucket.openDownloadStream(gridFSFile.getObjectId())) {
+						variant.setMd5(IO.md5(md5InputStream));
+					}
+				}
+				try {
+					variantMapper.insert(variant);
+					variantInserted = true;
+				} catch (DuplicateKeyException e) {
+					destroyVariantFile(variant);
+					Attachment concurrent = variantMapper.selectValidAttachment(
+						source.getId(),
+						source.getMongoId(),
+						width,
+						height,
+						fitMode.toString(),
+						THUMB_OUTPUT_FORMAT,
+						THUMB_ALGORITHM_VERSION,
+						Time.now()
+					);
+					if (concurrent != null) {
+						Attachment refreshed = refreshCachedThumb(concurrent);
+						if (refreshed != null) {
+							return refreshed;
+						}
+					}
+					throw e;
+				}
+				return toThumbAttachment(source, variant);
+			} catch (Exception e) {
+				if (variant != null) {
+					destroyVariantFile(variant);
+					if (variantInserted) {
+						variantMapper.delete(variant.getId());
+					}
+				}
+				throw e;
+			} finally {
+				IO.destroy(thumbFile);
+			}
+		} catch (TimiException e) {
+			throw e;
+		} catch (Exception e) {
+			log.error("create thumbnail error", e);
+			throw new TimiException(TimiCode.ERROR, "exception.attachment.create.error", e);
+		} finally {
+			redisLocker.releaseLock(lockKey);
+		}
+	}
+
+	/// 延长已命中缩略图缓存的有效期
+	///
+	/// @param cached 已命中的缩略图
+	/// @return 更新成功时返回刷新后的缩略图，记录已不存在或已过期时返回 `null`
+	private Attachment refreshCachedThumb(Attachment cached) {
+		long now = Time.now();
+		long expireAt = now + THUMB_CACHE_TTL;
+		if (!(0 < variantMapper.updateExpireAt(cached.getId(), now, expireAt))) {
+			return null;
+		}
+		cached.setDestroyAt(expireAt);
+		return cached;
+	}
+
+	private String buildThumbLockKey(Attachment source, int width, int height, ThumbnailFitMode fitMode) {
+		return "%s%s:%s:%s:%s:%s".formatted(
+			THUMB_LOCK_KEY_PREFIX,
+			source.getId(),
+			source.getMongoId(),
+			width,
+			height,
+			fitMode
+		);
+	}
+
+	/// 构建不超过数据库字段长度的变体名称
+	///
+	/// @param sourceName 源附件名称
+	/// @return 变体名称
+	private String buildVariantName(String sourceName) {
+		String suffix = "." + THUMB_OUTPUT_FORMAT;
+		String baseName = Network.simpleURIFileName(sourceName);
+		int maxBaseLength = VARIANT_NAME_MAX_LENGTH - suffix.length();
+		if (maxBaseLength < baseName.codePointCount(0, baseName.length())) {
+			baseName = baseName.substring(0, baseName.offsetByCodePoints(0, maxBaseLength));
+		}
+		return baseName + suffix;
+	}
+
+	private File createThumbFile(
+		Attachment source,
+		Integer requestWidth,
+		Integer requestHeight,
+		ThumbnailFitMode fitMode,
+		boolean isImage
+	) throws Exception {
+		File thumbFile = Files.createTempFile("timi-thumb-", ".png").toFile();
+		try {
+			if (isImage) {
+				try (InputStream inputStream = source.openInputStream()) {
+					resize(inputStream, thumbFile, requestWidth, requestHeight, fitMode);
+				}
+				return thumbFile;
+			}
+
+			try (InputStream inputStream = source.openInputStream()) {
+				ByteArrayOutputStream frame = JavaCV.captureThumbnail(inputStream, THUMB_TARGET_SECONDS);
+				if (!(0 < frame.size())) {
+					throw new TimiException(TimiCode.ERROR_NOT_SUPPORT, "attachment.thumbnail.video.frame.empty");
+				}
+				try (InputStream frameInputStream = new ByteArrayInputStream(frame.toByteArray())) {
+					resize(frameInputStream, thumbFile, requestWidth, requestHeight, fitMode);
+				}
+				return thumbFile;
+			}
+		} catch (Exception e) {
+			IO.destroy(thumbFile);
+			throw e;
+		}
+	}
+
+	private void resize(
+		InputStream inputStream,
+		File outputFile,
+		Integer requestWidth,
+		Integer requestHeight,
+		ThumbnailFitMode fitMode
+	) throws IOException {
+		Thumbnails.Builder<? extends InputStream> builder = Thumbnails.of(inputStream)
+			.useExifOrientation(true)
+			.outputFormat(THUMB_OUTPUT_FORMAT);
+		if (requestWidth != null && requestHeight != null) {
+			switch (fitMode) {
+				case FIT -> builder.size(requestWidth, requestHeight).keepAspectRatio(true);
+				case COVER -> builder.size(requestWidth, requestHeight).keepAspectRatio(true).crop(Positions.CENTER);
+				case STRETCH -> builder.size(requestWidth, requestHeight).keepAspectRatio(false);
+			}
+		} else if (requestWidth != null) {
+			builder.width(requestWidth).keepAspectRatio(true);
+		} else {
+			builder.height(requestHeight).keepAspectRatio(true);
+		}
+		builder.toFile(outputFile);
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void deleteBySourceId(String sourceAttachmentId) {
+		for (AttachmentVariant variant : variantMapper.selectBySourceAttachmentId(sourceAttachmentId)) {
+			deleteVariant(variant);
+		}
+	}
+
+	private void deleteVariant(AttachmentVariant variant) {
+		destroyVariantFile(variant);
+		variantMapper.delete(variant.getId());
+	}
+
+	private void destroyVariantFile(AttachmentVariant variant) {
+		if (variant.getMongoId() != null) {
+			gridFsTemplate.delete(Query.query(Criteria.where("_id").is(variant.getMongoId())));
+		}
+	}
+
+	private Attachment toThumbAttachment(Attachment source, AttachmentVariant variant) {
+		Attachment thumb = new Attachment();
+		thumb.setId(variant.getId());
+		thumb.setBizType(source.getBizType());
+		thumb.setBizId(source.getId());
+		thumb.setAttachType(MediaAttach.Type.THUMB.toString());
+		thumb.setMongoId(variant.getMongoId());
+		thumb.setName(variant.getName());
+		thumb.setMimeType(variant.getMimeType());
+		thumb.setMetadata(variant.getMetadata());
+		thumb.setSize(variant.getSize());
+		thumb.setMd5(variant.getMd5());
+		thumb.setIsDestroyed(false);
+		thumb.setDestroyAt(variant.getExpireAt());
+		return thumb;
+	}
+
+	@Override
+	public void clearExpired() {
+		for (AttachmentVariant variant : variantMapper.selectExpired(Time.now())) {
+			try {
+				deleteVariant(variant);
+			} catch (Exception e) {
+				log.error("clear expired thumbnail variant error, id={}", variant.getId(), e);
+			}
+		}
+	}
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/FeedbackServiceImplement.java

@@ -0,0 +1,141 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.imyeyu.api.config.dbsource.TimiServerDBConfig;
+import com.imyeyu.api.modules.common.entity.Feedback;
+import com.imyeyu.api.modules.common.mapper.FeedbackMapper;
+import com.imyeyu.api.modules.common.service.ArticleService;
+import com.imyeyu.api.modules.common.service.AttachmentService;
+import com.imyeyu.api.modules.common.service.FeedbackService;
+import com.imyeyu.api.modules.system.entity.Logger;
+import com.imyeyu.api.modules.system.service.LoggerService;
+import com.imyeyu.api.modules.user.service.UserLoginService;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
+import com.imyeyu.spring.mapper.BaseMapper;
+import com.imyeyu.spring.service.AbstractEntityService;
+import com.imyeyu.utils.Time;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+/// 通用反馈服务实现
+///
+/// @author Codex
+/// @since 2026-08-19
+@Service
+@RequiredArgsConstructor
+@Slf4j
+public class FeedbackServiceImplement extends AbstractEntityService<Feedback, String> implements FeedbackService {
+
+	private static final long ANONYMOUS_ATTACHMENT_MAX_SIZE = 500L * 1024;
+
+	private final LoggerService loggerService;
+	private final ArticleService articleService;
+	private final UserLoginService userLoginService;
+	private final AttachmentService attachmentService;
+
+	private final FeedbackMapper mapper;
+
+	@Override
+	protected BaseMapper<Feedback, String> mapper() {
+		return mapper;
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void create(Feedback feedback) {
+		Logger logger = new Logger(Logger.Module.COMMON, "COMMON_FEEDBACK_CREATE");
+		try {
+			TimiException.required(feedback, "未找到反馈");
+			articleService.create(feedback.getContent());
+			feedback.setContentId(feedback.getContent().getId());
+			feedback.setStatus(TimiJava.defaultIfNull(feedback.getStatus(), Feedback.Status.PENDING));
+			super.create(feedback);
+			logger.setLevel(Logger.Level.INFO);
+			logger.setResult(feedback.getId());
+		} catch (TimiException e) {
+			logger.setLevel(Logger.Level.WARN);
+			logger.setException(e.getMessage());
+			throw e;
+		} catch (Exception e) {
+			logger.setLevel(Logger.Level.ERROR);
+			logger.setException(TimiJava.serializeThrowable(e));
+			log.error("create feedback error", e);
+			throw new TimiException(TimiCode.ERROR, "create feedback error", e);
+		} finally {
+			loggerService.create(logger);
+		}
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void update(Feedback feedback) {
+		Logger logger = new Logger(Logger.Module.COMMON, "COMMON_FEEDBACK_UPDATE");
+		try {
+			TimiException.required(feedback, "未找到反馈");
+			TimiException.required(feedback.getId(), "未找到反馈 ID");
+			Feedback dbFeedback = get(feedback.getId());
+			TimiException.required(dbFeedback, "未找到反馈");
+
+			feedback.getContent().setId(dbFeedback.getContentId());
+			articleService.update(feedback.getContent());
+
+			dbFeedback.setModule(TimiJava.defaultIfNull(feedback.getModule(), dbFeedback.getModule()));
+			if (TimiJava.isNotEmpty(feedback.getResponse())) {
+				if (TimiJava.isEmpty(feedback.getResponseId())) {
+					articleService.create(feedback.getResponse());
+					dbFeedback.setResponseId(feedback.getResponse().getId());
+					dbFeedback.setRespondedAt(Time.now());
+				} else {
+					feedback.getResponse().setId(dbFeedback.getResponseId());
+					articleService.update(feedback.getResponse());
+				}
+				dbFeedback.setStatus(Feedback.Status.REPLIED);
+				dbFeedback.setRespondedBy(userLoginService.getRequireLoginUserId());
+			}
+			super.update(dbFeedback);
+			logger.setLevel(Logger.Level.INFO);
+			logger.setResult(feedback.getId());
+		} catch (TimiException e) {
+			logger.setLevel(Logger.Level.WARN);
+			logger.setException(e.getMessage());
+			throw e;
+		} catch (Exception e) {
+			logger.setLevel(Logger.Level.ERROR);
+			logger.setException(TimiJava.serializeThrowable(e));
+			log.error("修改反馈失败", e);
+			throw new TimiException(TimiCode.ERROR, "修改反馈失败", e);
+		} finally {
+			loggerService.create(logger);
+		}
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void delete(String id) {
+		Logger logger = new Logger(Logger.Module.COMMON, "COMMON_FEEDBACK_DELETE");
+		try {
+			Feedback feedback = get(id);
+			articleService.delete(feedback.getContentId());
+			if (TimiJava.isNotEmpty(feedback.getResponseId())) {
+				articleService.delete(feedback.getResponseId());
+			}
+			super.delete(id);
+			logger.setLevel(Logger.Level.INFO);
+			logger.setResult(id);
+		} catch (TimiException e) {
+			logger.setLevel(Logger.Level.WARN);
+			logger.setException(e.getMessage());
+			throw e;
+		} catch (Exception e) {
+			logger.setLevel(Logger.Level.ERROR);
+			logger.setException(TimiJava.serializeThrowable(e));
+			log.error("delete feedback error", e);
+			throw new TimiException(TimiCode.ERROR, "delete feedback error", e);
+		} finally {
+			loggerService.create(logger);
+		}
+	}
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/GroovyScriptServiceImplement.java

@@ -0,0 +1,299 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.imyeyu.api.config.dbsource.TimiServerDBConfig;
+import com.imyeyu.api.modules.common.bean.GroovyScriptExecutionResult;
+import com.imyeyu.api.modules.common.entity.GroovyScript;
+import com.imyeyu.api.modules.common.entity.GroovyScriptVersion;
+import com.imyeyu.api.modules.common.mapper.GroovyScriptMapper;
+import com.imyeyu.api.modules.common.mapper.GroovyScriptVersionMapper;
+import com.imyeyu.api.modules.common.service.GroovyScriptService;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
+import com.imyeyu.spring.mapper.BaseMapper;
+import com.imyeyu.spring.service.AbstractEntityService;
+import groovy.lang.Binding;
+import groovy.lang.GroovyClassLoader;
+import groovy.lang.Script;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.transaction.support.TransactionSynchronization;
+import org.springframework.transaction.support.TransactionSynchronizationManager;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+
+/// Groovy 脚本服务实现
+///
+/// 每个已编译版本使用独立类加载器，缓存失效后可释放对应类及其元数据
+///
+/// @author Codex
+/// @since 2026-09-04
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class GroovyScriptServiceImplement extends AbstractEntityService<GroovyScript, String> implements GroovyScriptService {
+
+	private final GroovyScriptMapper mapper;
+	private final GroovyScriptVersionMapper versionMapper;
+	private final Map<String, CompiledScript> compiledScriptMap = new ConcurrentHashMap<>();
+
+	@Override
+	protected BaseMapper<GroovyScript, String> mapper() {
+		return mapper;
+	}
+
+	@Override
+	public List<GroovyScript> listByBizType(GroovyScript.BizType bizType) {
+		TimiException.required(bizType, "未找到脚本业务归属");
+		GroovyScript example = new GroovyScript();
+		example.setBizType(bizType);
+		return mapper.selectAllByExample(example);
+	}
+
+	@Override
+	public GroovyScript getByCode(GroovyScript.BizType bizType, String code) {
+		GroovyScript example = new GroovyScript();
+		example.setBizType(bizType);
+		example.setCode(code);
+		return mapper.selectByExample(example);
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void create(GroovyScript script) {
+		TimiException.required(script, "未找到脚本");
+		TimiException.required(script.getBizType(), "未找到脚本业务归属");
+		TimiException.required(script.getCode(), "未找到脚本代码");
+		TimiException.required(script.getName(), "未找到脚本名称");
+		TimiException.requiredNull(getByCode(script.getBizType(), script.getCode()), "Groovy 脚本已存在");
+		script.setEnabled(false);
+		script.setPublishedVersionId(null);
+		super.create(script);
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void update(GroovyScript script) {
+		TimiException.required(script, "未找到脚本");
+		TimiException.required(script.getId(), "未找到脚本 ID");
+		TimiException.required(script.getName(), "未找到脚本名称");
+		GroovyScript dbScript = get(script.getId());
+		TimiException.required(dbScript, "未找到脚本");
+		dbScript.setName(script.getName());
+		dbScript.setDescription(script.getDescription());
+		mapper.update(dbScript);
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void setEnabled(String id, boolean enabled) {
+		GroovyScript script = requireScript(id);
+		script.setEnabled(enabled);
+		mapper.update(script);
+		invalidateAfterCommit(script.getId());
+	}
+
+	@Override
+	public GroovyScriptVersion getLatestVersion(String scriptId) {
+		return versionMapper.selectLatest(scriptId);
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public GroovyScriptVersion createVersion(String scriptId, String content) {
+		requireScript(scriptId);
+		TimiException.required(content, "未找到脚本内容");
+		TimiException.requiredTrue(!content.isBlank(), "脚本内容不能为空");
+
+		GroovyScriptVersion version = new GroovyScriptVersion();
+		version.setScriptId(scriptId);
+		version.setVersion(versionMapper.selectLatest(scriptId).getVersion() + 1);
+		version.setContent(content);
+		version.setChecksum(checksum(content));
+		versionMapper.insert(version);
+		return version;
+	}
+
+	@Override
+	public List<GroovyScriptVersion> listVersion(String scriptId) {
+		TimiException.required(scriptId, "未找到脚本 ID");
+		GroovyScriptVersion example = new GroovyScriptVersion();
+		example.setScriptId(scriptId);
+		List<GroovyScriptVersion> versionList = new ArrayList<>(versionMapper.selectAllByExample(example));
+		versionList.sort(Comparator.comparing(GroovyScriptVersion::getVersion));
+		return versionList;
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void publish(String scriptId, String versionId) {
+		GroovyScript script = requireScript(scriptId);
+		GroovyScriptVersion version = requireVersion(versionId);
+		TimiException.requiredTrue(script.getId().equals(version.getScriptId()), "脚本版本不属于当前脚本");
+		script.setPublishedVersionId(version.getId());
+		mapper.update(script);
+		invalidateAfterCommit(script.getId());
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void unpublish(String scriptId) {
+		GroovyScript script = requireScript(scriptId);
+		script.setPublishedVersionId(null);
+		mapper.update(script);
+		invalidateAfterCommit(script.getId());
+	}
+
+	@Transactional(TimiServerDBConfig.ROLLBACKER)
+	@Override
+	public void delete(String id) {
+		requireScript(id);
+		super.delete(id);
+		invalidateAfterCommit(id);
+	}
+
+	@Override
+	public Object execute(GroovyScript.BizType bizType, String code, Map<String, Object> bindings) {
+		return executePublished(bizType, code, bindings, Object.class).result();
+	}
+
+	@Override
+	public <T> GroovyScriptExecutionResult<T> executePublished(GroovyScript.BizType bizType, String code, Map<String, Object> bindings, Class<T> resultType) {
+		TimiException.required(bizType, "未找到脚本业务归属");
+		TimiException.required(code, "未找到脚本代码");
+		TimiException.required(resultType, "未找到返回值类型");
+		GroovyScript script = getByCode(bizType, code);
+		TimiException.required(script, "未找到 Groovy 脚本");
+		TimiException.requiredTrue(Boolean.TRUE.equals(script.getEnabled()), "Groovy 脚本已停用");
+		TimiException.required(script.getPublishedVersionId(), "Groovy 脚本尚未发布");
+		GroovyScriptExecutionResult<T> result = executeVersion(script.getPublishedVersionId(), bindings, resultType);
+		TimiException.requiredTrue(script.getId().equals(result.scriptId()), "Groovy 脚本已发布版本无效");
+		return result;
+	}
+
+	@Override
+	public <T> T execute(GroovyScript.BizType bizType, String code, Map<String, Object> bindings, Class<T> resultType) {
+		return executePublished(bizType, code, bindings, resultType).result();
+	}
+
+	@Override
+	public <T> GroovyScriptExecutionResult<T> executeVersion(String versionId, Map<String, Object> bindings, Class<T> resultType) {
+		TimiException.required(resultType, "未找到返回值类型");
+		GroovyScriptVersion version = requireVersion(versionId);
+		CompiledScript compiledScript = compiledScriptMap.computeIfAbsent(cacheKey(version), key -> compile(version.getScriptId(), version));
+		try {
+			Object result = compiledScript.execute(bindings);
+			TimiException.requiredTrue(result == null || resultType.isInstance(result), "Groovy 脚本返回值类型不匹配");
+			return new GroovyScriptExecutionResult<>(version.getScriptId(), version.getId(), version.getVersion(), version.getChecksum(), resultType.cast(result));
+		} catch (TimiException e) {
+			throw e;
+		} catch (RuntimeException e) {
+			log.warn("Groovy 脚本执行失败，scriptId={}, versionId={}", version.getScriptId(), version.getId(), e);
+			throw new TimiException(TimiCode.ERROR, "Groovy 脚本执行失败");
+		}
+	}
+
+	@Override
+	public void invalidate(String scriptId) {
+		if (scriptId == null) {
+			return;
+		}
+		compiledScriptMap.entrySet().removeIf(entry -> {
+			if (!scriptId.equals(entry.getValue().scriptId())) {
+				return false;
+			}
+			entry.getValue().close();
+			return true;
+		});
+	}
+
+	private GroovyScript requireScript(String id) {
+		TimiException.required(id, "未找到脚本 ID");
+		GroovyScript script = get(id);
+		TimiException.required(script, "未找到脚本");
+		return script;
+	}
+
+	private GroovyScriptVersion requireVersion(String id) {
+		TimiException.required(id, "未找到脚本版本 ID");
+		GroovyScriptVersion version = versionMapper.select(id);
+		TimiException.required(version, "未找到脚本版本");
+		return version;
+	}
+
+	private String cacheKey(GroovyScriptVersion version) {
+		return "%s:%s".formatted(version.getId(), version.getChecksum());
+	}
+
+	private CompiledScript compile(String scriptId, GroovyScriptVersion version) {
+		GroovyClassLoader classLoader = new GroovyClassLoader(getClass().getClassLoader());
+		try {
+			Class<?> type = classLoader.parseClass(version.getContent(), "GroovyScript_%s_%d.groovy".formatted(version.getId().replace('-', '_'), version.getVersion()));
+			return new CompiledScript(scriptId, type.asSubclass(Script.class), classLoader);
+		} catch (RuntimeException e) {
+			close(classLoader);
+			log.warn("Groovy 脚本编译失败，scriptId={}, versionId={}", scriptId, version.getId(), e);
+			throw new TimiException(TimiCode.ERROR, "Groovy 脚本编译失败");
+		}
+	}
+
+	private String checksum(String content) {
+		try {
+			return java.util.HexFormat.of().formatHex(MessageDigest.getInstance("SHA-256").digest(content.getBytes(StandardCharsets.UTF_8)));
+		} catch (NoSuchAlgorithmException e) {
+			throw new IllegalStateException("JVM 缺少 SHA-256 算法", e);
+		}
+	}
+
+	private void invalidateAfterCommit(String scriptId) {
+		if (!TransactionSynchronizationManager.isSynchronizationActive()) {
+			invalidate(scriptId);
+			return;
+		}
+		TransactionSynchronizationManager.registerSynchronization(new TransactionSynchronization() {
+
+			@Override
+			public void afterCommit() {
+				invalidate(scriptId);
+			}
+		});
+	}
+
+	private void close(GroovyClassLoader classLoader) {
+		try {
+			classLoader.close();
+		} catch (IOException e) {
+			log.warn("关闭 Groovy 脚本类加载器失败", e);
+		}
+	}
+
+	private record CompiledScript(String scriptId, Class<? extends Script> type, GroovyClassLoader classLoader) {
+
+		private Object execute(Map<String, Object> bindings) {
+			try {
+				Script script = type.getDeclaredConstructor().newInstance();
+				script.setBinding(new Binding(bindings == null ? Map.of() : new HashMap<>(bindings)));
+				return script.run();
+			} catch (ReflectiveOperationException e) {
+				throw new IllegalStateException("Groovy 脚本实例化失败", e);
+			}
+		}
+
+		private void close() {
+			try {
+				classLoader.close();
+			} catch (IOException ignored) {
+			}
+		}
+	}
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/HTTPQueueServiceImplement.java

@@ -0,0 +1,59 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.imyeyu.api.modules.common.config.NotifyQueueConfig;
+import com.imyeyu.api.modules.common.entity.HTTPQueue;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+import com.imyeyu.api.modules.common.mapper.BaseQueueMapper;
+import com.imyeyu.api.modules.common.mapper.HTTPQueueMapper;
+import com.imyeyu.api.modules.common.service.HTTPQueueService;
+import com.imyeyu.java.bean.timi.TimiCode;
+import com.imyeyu.java.bean.timi.TimiException;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import java.net.URI;
+
+/// HTTP 队列服务实现
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class HTTPQueueServiceImplement extends AbstractQueueService<HTTPQueue, NotifyQueueConfig.HTTP> implements HTTPQueueService {
+
+	private final NotifyQueueConfig config;
+
+	private final HTTPQueueMapper mapper;
+
+	@Override
+	protected NotifyQueueConfig.HTTP config() {
+		return config.getHttp();
+	}
+
+	@Override
+	protected BaseQueueMapper<HTTPQueue> mapper() {
+		return mapper;
+	}
+
+	@Override
+	protected void validateSendTo(String sendTo) {
+		try {
+			URI uri = URI.create(sendTo);
+			TimiException.requiredTrue(uri.isAbsolute(), "发送目标不是有效 URI");
+		} catch (IllegalArgumentException e) {
+			throw new TimiException(TimiCode.ARG_BAD, "发送目标不是有效 URI", e);
+		}
+	}
+
+	@Override
+	public void createQueue(NotifyDetail detail) {
+		mapper.insert(new HTTPQueue(detail));
+	}
+
+	@Override
+	protected void doSend(HTTPQueue queue) {
+		throw new TimiException(TimiCode.ERROR_NOT_SUPPORT, "HTTP 推送暂未实现");
+	}
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/MailQueueServiceImplement.java

@@ -0,0 +1,67 @@
+package com.imyeyu.api.modules.common.service.implement;
+
+import com.imyeyu.api.modules.common.config.NotifyQueueConfig;
+import com.imyeyu.api.modules.common.entity.MailQueue;
+import com.imyeyu.api.modules.common.entity.NotifyDetail;
+import com.imyeyu.api.modules.common.mapper.BaseQueueMapper;
+import com.imyeyu.api.modules.common.mapper.MailQueueMapper;
+import com.imyeyu.api.modules.common.service.MailQueueService;
+import com.imyeyu.java.TimiJava;
+import com.imyeyu.java.bean.timi.TimiException;
+import com.imyeyu.utils.Regex;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.mail.SimpleMailMessage;
+import org.springframework.mail.javamail.JavaMailSender;
+import org.springframework.stereotype.Service;
+
+/// 邮件队列服务实现
+///
+/// @author 夜雨
+/// @since 2026-08-20
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class MailQueueServiceImplement extends AbstractQueueService<MailQueue, NotifyQueueConfig.Mail> implements MailQueueService {
+
+	private final NotifyQueueConfig config;
+	private final JavaMailSender mailSender;
+
+	private final MailQueueMapper mapper;
+
+	@Override
+	protected NotifyQueueConfig.Mail config() {
+		return config.getMail();
+	}
+
+	@Override
+	protected BaseQueueMapper<MailQueue> mapper() {
+		return mapper;
+	}
+
+	@Override
+	protected void validateSendTo(String sendTo) {
+		TimiException.requiredTrue(Regex.isMatch(Regex.EMAIL, sendTo), "发送目标不是有效邮箱");
+	}
+
+	@Override
+	public void createQueue(NotifyDetail detail) {
+		MailQueue queue = new MailQueue(detail);
+		queue.setSendFrom(TimiJava.defaultIfEmpty(queue.getSendFrom(), config.getMail().getDefaultFrom()));
+		mapper.insert(queue);
+	}
+
+	@Override
+	protected void doSend(MailQueue queue) {
+		TimiException.required(queue.getSendFrom(), "邮件发送来源不能为空");
+		TimiException.required(queue.getSubject(), "邮件标题不能为空");
+
+		SimpleMailMessage message = new SimpleMailMessage();
+		message.setFrom(queue.getSendFrom());
+		message.setTo(queue.getSendTo());
+		message.setSubject(queue.getSubject());
+		message.setText(queue.getContent());
+		mailSender.send(message);
+		log.info("邮件发送成功，目标：{}", queue.getSendTo());
+	}
+}

src/main/java/com/imyeyu/api/modules/common/service/implement/MultilingualServiceImplement.java

@@ -3,6 +3,7 @@ package com.imyeyu.api.modules.common.service.implement;
 import com.imyeyu.api.modules.common.entity.Multilingual;
 import com.imyeyu.api.modules.common.mapper.MultilingualMapper;
 import com.imyeyu.api.modules.common.service.MultilingualService;
+import com.imyeyu.api.util.PinyinUtil;
 import com.imyeyu.spring.mapper.BaseMapper;
 import com.imyeyu.spring.service.AbstractEntityService;
 import com.imyeyu.spring.util.Redis;
@@ -34,6 +35,18 @@ public class MultilingualServiceImplement extends AbstractEntityService<Multilin
 		return mapper;
 	}
 
+	@Override
+	public void create(Multilingual multilingual) {
+		fillPinyin(multilingual);
+		super.create(multilingual);
+	}
+
+	@Override
+	public void update(Multilingual multilingual) {
+		fillPinyin(multilingual);
+		super.update(multilingual);
+	}
+
 	@Override
 	public Multilingual get(String id) {
 		Multilingual result = redisLanguage.get(getKey(id));
@@ -81,4 +94,14 @@ public class MultilingualServiceImplement extends AbstractEntityService<Multilin
 	private String getKey(String id) {
 		return "%s%s".formatted(KEY_PREFIX, id);
 	}
+
+	private void fillPinyin(Multilingual multilingual) {
+		if (multilingual == null) {
+			return;
+		}
+		String zhCN = multilingual.getZhCN();
+		multilingual.setZhCNPinyinFull(PinyinUtil.full(zhCN));
+		multilingual.setZhCNPinyinInitial(PinyinUtil.initial(zhCN));
+		multilingual.setZhCNPinyinMixed(PinyinUtil.mixed(zhCN));
+	}
 }