@chenchaolong/plugin-trade-compliance-workbench 1.0.0 → 1.0.2

package/dist/lib/workbench.service.js

@@ -1,44 +1,92 @@
 import { __decorate, __metadata, __param } from "tslib";
-import { Injectable } from '@nestjs/common';
+import { Injectable, Optional } from '@nestjs/common';
 import { InjectDataSource } from '@nestjs/typeorm';
 import { Brackets, DataSource, In, IsNull } from 'typeorm';
 import { Decimal } from 'decimal.js';
-import { BankAccountSettings, CompanySanctionMatch, CompanySettings, ControlledCatalogBatch, ControlledCatalogImportIssue, ControlledGoodsRecord, Customer, CustomerContract, CustomerContractAnalysisRun, CustomerContractClause, CustomerContractClauseAnalysis, DerivedSalesOrderManualData, GeneratedSalesFile, ImportTask, MonthlySafeExchangeRate, ProductComplianceMatch, ProfitRuleSettings, PurchaseOrder, PurchaseOrderLine, RiskNoticeSettings, SanctionCatalogBatch, SanctionCatalogImportIssue, SanctionedCompanyRecord, SettingsHistory, Supplier } from './entities/index.js';
-import { ClauseTypes, DomainError, DomainErrorCodes } from './types.js';
+import ExcelJS from 'exceljs';
+import { createWriteStream } from 'node:fs';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { finished } from 'node:stream/promises';
+import { BankAccountSettings, CompanySanctionMatch, CompanySettings, ControlledCatalogBatch, ControlledCatalogImportIssue, ControlledGoodsRecord, Customer, CustomerContract, CustomerContractAnalysisRun, CustomerContractClause, CustomerContractClauseAnalysis, DerivedSalesOrderManualData, GeneratedSalesFile, ImportTask, ManagedAsset, MonthlySafeExchangeRate, ProductComplianceMatch, ProfitRuleSettings, PurchaseOrder, PurchaseOrderLine, RiskNoticeSettings, SanctionCatalogBatch, SanctionCatalogImportIssue, SanctionedCompanyRecord, SettingsHistory, Supplier } from './entities/index.js';
+import { CatalogTypes, ClauseTypes, CustomerProfitRateStatuses, DomainError, DomainErrorCodes, RefundValidationMethods, SalesPaymentStatuses, SanctionHitStatuses } from './types.js';
 import { deriveSalesLine, assertReceivedAmount } from './domain/finance.js';
 import { parseCustomerContractNo, parsePurchaseContractNo } from './domain/contract-number.js';
 import { isProductNameMatch, normalizeExactName, normalizeForProductMatch, normalizeHsCode, normalizeSanctionSource } from './domain/normalization.js';
 import { importTaskTimedOut, nextSettingsRevision, normalizeOptionalDecimalInput } from './domain/workflow.js';
 import { renderImportIssuesWorkbook } from './domain/import-issues.js';
-import { DEFAULT_BANKS, DEFAULT_COMPANY, DEFAULT_PROFIT_RULE } from './domain/default-settings.js';
-const DEFAULT_RISK_NOTICE = '<h3>操作前请确认</h3><ul><li><strong>删除、目录覆盖和合同审核</strong>会影响当前业务数据，请核对对象后再操作。</li><li>采购合同和客户合同重复时不会覆盖，必须先删除旧记录再重新上传。</li><li>销售文件生成前请确认利润率、换汇成本和银行信息。</li></ul><h3>推荐业务顺序</h3><p>维护风险目录，上传采购合同和客户合同，完成审核后处理销售合规与销售文件。</p>';
+import { BUILTIN_COMPANY_LOGO_STORAGE_ID, DEFAULT_BANKS, DEFAULT_COMPANY, DEFAULT_PROFIT_RULE } from './domain/default-settings.js';
+import { DEFAULT_RISK_NOTICE } from './domain/risk-notice.js';
+import { TradeComplianceFileStorage } from './adapters/file-storage.js';
+import { parseBankAccountType, parseExchangeRateInput, parseExpectedRevision, sanitizeRiskNoticeContent, validateBankSettingsInput, validateProfitSettingsInput, validatePurchaseLineDiscriminators, validateTaxRates } from './runtime-validation.js';
+const DEFAULT_IMPORT_ISSUE_EXPORT_MAX_ROWS = 50_000;
+const HARD_IMPORT_ISSUE_EXPORT_MAX_ROWS = 100_000;
+const CUSTOMER_REANALYSIS_TIMEOUT_MS = 20 * 60 * 1000;
+const ANALYTICS_EXPORT_MAX_ROWS = 100_000;
+const CATALOG_RISK_RECOMMENDATIONS = {
+    DUAL_USE: '建议核验军民两用物项许可要求，并在出口前完成合规审批',
+    OVERSEAS_SANCTION: '建议核验海外制裁限制及交易对手风险，并在交易前完成合规审批'
+};
+export { DEFAULT_RISK_NOTICE };
+export async function writeWorkbookFile(filePath, populate, openOutput = createWriteStream) {
+    const output = openOutput(filePath);
+    const closed = finished(output, { cleanup: true });
+    void closed.catch(() => undefined);
+    try {
+        const workbook = new ExcelJS.stream.xlsx.WorkbookWriter({ stream: output, useStyles: true });
+        await populate(workbook);
+        await workbook.commit();
+        await closed;
+    }
+    catch (error) {
+        if (!output.destroyed)
+            output.destroy();
+        await closed.catch(() => undefined);
+        throw error;
+    }
+}
 let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
-    constructor(dataSource) {
+    constructor(dataSource, storage) {
         this.dataSource = dataSource;
+        this.storage = storage;
     }
     async bootstrapSettings(scope) {
         const riskRepo = this.dataSource.getRepository(RiskNoticeSettings);
-        let risk = await riskRepo.findOne({ where: activeScope(scope) });
-        if (!risk)
-            risk = await riskRepo.save(riskRepo.create({ ...auditScope(scope), content: DEFAULT_RISK_NOTICE, revision: 1 }));
         const profitRepo = this.dataSource.getRepository(ProfitRuleSettings);
-        let profit = await profitRepo.findOne({ where: activeScope(scope) });
-        if (!profit)
-            profit = await profitRepo.save(profitRepo.create({ ...auditScope(scope), ...DEFAULT_PROFIT_RULE, revision: 1 }));
         const companyRepo = this.dataSource.getRepository(CompanySettings);
-        let company = await companyRepo.findOne({ where: activeScope(scope) });
-        if (!company)
-            company = await companyRepo.save(companyRepo.create({ ...auditScope(scope), ...DEFAULT_COMPANY, revision: 1 }));
         const bankRepo = this.dataSource.getRepository(BankAccountSettings);
-        const banks = [];
-        for (const defaults of DEFAULT_BANKS) {
-            let bank = await bankRepo.findOne({ where: { ...activeScope(scope), bankType: defaults.bankType } });
-            if (!bank)
-                bank = await bankRepo.save(bankRepo.create({ ...auditScope(scope), ...defaults, revision: 1 }));
-            banks.push(bank);
-        }
+        const builtinLogo = await this.ensureBuiltinCompanyLogo(scope);
+        const [risk, profit, company, ...banks] = await Promise.all([
+            this.ensureSettingsDefault(riskRepo, activeScope(scope), { ...auditScope(scope), content: DEFAULT_RISK_NOTICE, revision: 1 }),
+            this.ensureSettingsDefault(profitRepo, activeScope(scope), { ...auditScope(scope), ...DEFAULT_PROFIT_RULE, revision: 1 }),
+            this.ensureSettingsDefault(companyRepo, activeScope(scope), { ...auditScope(scope), ...DEFAULT_COMPANY, logoFileId: builtinLogo.id, revision: 1 }),
+            ...DEFAULT_BANKS.map(defaults => this.ensureSettingsDefault(bankRepo, { ...activeScope(scope), bankType: defaults.bankType }, { ...auditScope(scope), ...defaults, revision: 1 }))
+        ]);
         return { risk, profit, company, banks };
     }
+    async ensureBuiltinCompanyLogo(scope) {
+        const repo = this.dataSource.getRepository(ManagedAsset);
+        const where = { ...activeScope(scope), assetType: 'COMPANY_LOGO', storageType: 'BUILTIN', storageFileId: BUILTIN_COMPANY_LOGO_STORAGE_ID, deletedAt: IsNull() };
+        const existing = await repo.findOne({ where });
+        if (existing)
+            return existing;
+        await repo.createQueryBuilder().insert().values(repo.create({ ...auditScope(scope), assetType: 'COMPANY_LOGO', status: 'ACTIVE', storageType: 'BUILTIN', storageFileId: BUILTIN_COMPANY_LOGO_STORAGE_ID, ownerId: null, originalFileName: 'yuneec-logo.png', deletedAt: null, deletedById: null, deleteOperation: null })).orIgnore().execute();
+        const created = await repo.findOne({ where });
+        if (!created)
+            throw new DomainError(DomainErrorCodes.NOT_FOUND, '系统默认 Logo 资产初始化失败');
+        return created;
+    }
+    async ensureSettingsDefault(repo, where, values) {
+        const existing = await repo.findOne({ where });
+        if (existing)
+            return existing;
+        await repo.createQueryBuilder().insert().values(repo.create(values)).orIgnore().execute();
+        const row = await repo.findOne({ where });
+        if (!row)
+            throw new DomainError(DomainErrorCodes.NOT_FOUND, '系统默认设置初始化失败');
+        return row;
+    }
     async dashboard(scope) {
         const [{ risk }, controlledRiskCount, sanctionRiskCount, unlinkedPurchaseCount, unlinkedCustomerCount] = await Promise.all([
             this.bootstrapSettings(scope),
@@ -50,9 +98,10 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         return { riskNotice: risk, controlledRiskCount, sanctionRiskCount, unlinkedPurchaseCount, unlinkedCustomerCount };
     }
     async listControlledGoods(scope, query = {}) {
-        return this.pagedQuery(ControlledGoodsRecord, scope, query, ['productName', 'hsCode', 'controlDescription'], {
-            catalogType: query.parameters?.catalogType,
-            sourceFileName: query.parameters?.sourceFileName
+        return this.pagedCatalogQuery(ControlledGoodsRecord, ControlledCatalogBatch, scope, query, {
+            exact: { catalogType: query.parameters?.catalogType },
+            fuzzy: { productName: query.parameters?.productName, hsCode: query.parameters?.hsCode },
+            batchSourceFileName: query.parameters?.sourceFileName
         });
     }
     async listImportTasks(scope, query = {}) {
@@ -88,7 +137,9 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
             const recordRepo = manager.getRepository(ControlledGoodsRecord);
             const issueRepo = manager.getRepository(ControlledCatalogImportIssue);
             const taskRepo = manager.getRepository(ImportTask);
-            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: input.importTaskId } }), '解析任务不存在');
+            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: input.importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            if (task.status === 'SUCCEEDED' && task.resultEntityId)
+                return required(batchRepo.findOne({ where: { ...activeScope(scope), id: task.resultEntityId } }), '已完成导入批次不存在');
             task.status = 'PERSISTING';
             await taskRepo.save(task);
             const now = new Date();
@@ -129,13 +180,52 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         }).then(async (batch) => { await this.recalculateProductRisks(scope, 'CATALOG_CHANGED'); return batch; });
     }
     async listSanctionedCompanies(scope, query = {}) {
-        return this.pagedQuery(SanctionedCompanyRecord, scope, query, ['companyName', 'countryOrRegion', 'sanctionListSource', 'sanctionReason'], { sanctionListSource: query.parameters?.sanctionListSource });
+        return this.pagedCatalogQuery(SanctionedCompanyRecord, SanctionCatalogBatch, scope, query, {
+            fuzzy: {
+                companyName: query.parameters?.companyName,
+                countryOrRegion: query.parameters?.countryOrRegion,
+                sanctionListSource: query.parameters?.sanctionListSource
+            },
+            range: { effectiveDate: query.parameters?.effectiveDate },
+            batchSourceFileName: query.parameters?.sourceFileName
+        });
+    }
+    async getImportTaskResult(scope, taskId) {
+        await this.expireStaleImportTasks(scope);
+        const task = await required(this.dataSource.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), id: taskId } }), '解析任务不存在');
+        const execution = { commands: task.executionCommand ? [task.executionCommand] : [], polling: { intervalMs: 2000, timeoutMs: 1200000 } };
+        if (!task.resultEntityId)
+            return { task, ...execution };
+        if (task.documentType === 'CONTROLLED_CATALOG') {
+            const batch = await this.dataSource.getRepository(ControlledCatalogBatch).findOne({ where: { ...activeScope(scope), id: task.resultEntityId } });
+            return { task, batch: batch ?? undefined, ...execution };
+        }
+        if (task.documentType === 'SANCTION_CATALOG') {
+            const batch = await this.dataSource.getRepository(SanctionCatalogBatch).findOne({ where: { ...activeScope(scope), id: task.resultEntityId } });
+            return { task, batch: batch ?? undefined, ...execution };
+        }
+        return { task, ...execution };
+    }
+    async listImportIssues(scope, query) {
+        const page = Math.max(1, Number(query.page ?? 1));
+        const pageSize = Math.min(200, Math.max(1, Number(query.pageSize ?? 20)));
+        const entity = query.documentType === 'CONTROLLED_CATALOG' ? ControlledCatalogImportIssue : SanctionCatalogImportIssue;
+        const [items, total] = await this.dataSource.getRepository(entity).findAndCount({
+            where: { ...activeScope(scope), batchId: query.batchId, issueType: query.issueType },
+            order: { sourceSequence: 'ASC' }, skip: (page - 1) * pageSize, take: pageSize
+        });
+        return { items, total, page, pageSize };
     }
     async downloadImportIssues(scope, documentType, batchId) {
         const batchEntity = documentType === 'CONTROLLED_CATALOG' ? ControlledCatalogBatch : SanctionCatalogBatch;
         const issueEntity = documentType === 'CONTROLLED_CATALOG' ? ControlledCatalogImportIssue : SanctionCatalogImportIssue;
         const batch = await required(this.dataSource.getRepository(batchEntity).findOne({ where: { ...activeScope(scope), id: batchId } }), '目录导入批次不存在');
-        const issues = await this.dataSource.getRepository(issueEntity).find({ where: { ...activeScope(scope), batchId }, order: { sourceSequence: 'ASC' } });
+        const issueRepo = this.dataSource.getRepository(issueEntity);
+        const exportLimit = importIssueExportLimit();
+        const total = await issueRepo.count({ where: { ...activeScope(scope), batchId } });
+        if (total > exportLimit)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `导入问题共 ${total} 条，超过单次导出上限 ${exportLimit} 条，请使用在线分页筛选或分批处理。`);
+        const issues = await issueRepo.find({ where: { ...activeScope(scope), batchId }, order: { sourceSequence: 'ASC' }, take: exportLimit });
         return { fileName: `${batch.sourceFileName}-导入问题明细.xlsx`, buffer: await renderImportIssuesWorkbook(issues) };
     }
     async saveSanctionedCompany(scope, input) {
@@ -167,7 +257,9 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
             const recordRepo = manager.getRepository(SanctionedCompanyRecord);
             const issueRepo = manager.getRepository(SanctionCatalogImportIssue);
             const taskRepo = manager.getRepository(ImportTask);
-            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: input.importTaskId } }), '解析任务不存在');
+            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: input.importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            if (task.status === 'SUCCEEDED' && task.resultEntityId)
+                return required(batchRepo.findOne({ where: { ...activeScope(scope), id: task.resultEntityId } }), '已完成导入批次不存在');
             task.status = 'PERSISTING';
             await taskRepo.save(task);
             const now = new Date();
@@ -214,15 +306,61 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         const repo = this.dataSource.getRepository(ImportTask);
         return repo.save(repo.create({ ...createdScope(scope), ...input, status: input.status ?? 'QUEUED', queuedAt: new Date(), createdById: scope.userId ?? null }));
     }
-    async updateImportTaskDraft(scope, id, payload, version = 'v1') {
+    async saveImportTaskExecution(scope, id, command) {
+        const repo = this.dataSource.getRepository(ImportTask);
+        const task = await required(repo.findOne({ where: { ...activeScope(scope), id } }), '解析任务不存在');
+        task.executionCommand = command;
+        task.commandDispatchedAt = null;
+        return repo.save(task);
+    }
+    async markImportCommandDispatched(scope, id) {
+        const repo = this.dataSource.getRepository(ImportTask);
+        const task = await required(repo.findOne({ where: { ...activeScope(scope), id } }), '解析任务不存在');
+        task.commandDispatchedAt ??= new Date();
+        return repo.save(task);
+    }
+    async markImportTaskFailed(scope, id, failure) {
         const repo = this.dataSource.getRepository(ImportTask);
         const task = await required(repo.findOne({ where: { ...activeScope(scope), id } }), '解析任务不存在');
-        task.resultPayload = payload;
-        task.resultPayloadVersion = version;
-        task.status = 'AWAITING_REVIEW';
+        task.status = 'FAILED';
+        task.errorCode = failure.errorCode;
+        task.errorMessage = failure.errorMessage;
         task.completedAt = new Date();
         return repo.save(task);
     }
+    async createRetryImportTask(scope, sourceTaskId) {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(ImportTask);
+            const source = await required(repo.findOne({ where: { ...activeScope(scope), id: sourceTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            if (source.status !== 'FAILED' && source.status !== 'TIMED_OUT')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '仅失败或超时任务可以重新解析');
+            if (source.documentType !== 'CONTROLLED_CATALOG' && source.documentType !== 'SANCTION_CATALOG')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '仅目录任务支持重新解析');
+            if (!source.executionInput)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '原任务缺少可恢复执行参数');
+            const existing = await repo.findOne({ where: { ...activeScope(scope), retryOfTaskId: source.id } });
+            if (existing)
+                return existing;
+            return repo.save(repo.create({
+                ...createdScope(scope), documentType: source.documentType, sourceFileId: source.sourceFileId,
+                sourceFileName: source.sourceFileName, sourceFileFormat: source.sourceFileFormat,
+                sourcePlatformFileId: source.sourcePlatformFileId, executionInput: source.executionInput,
+                retryOfTaskId: source.id, status: 'EXTRACTING', queuedAt: new Date(), createdById: scope.userId ?? null
+            }));
+        });
+    }
+    async updateImportTaskDraft(scope, id, payload, version = 'v1') {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(ImportTask);
+            const task = await required(repo.findOne({ where: { ...activeScope(scope), id }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            await invalidateCustomerContractReanalysis(manager, scope, { reviewSource: 'IMPORT_DRAFT', task });
+            task.resultPayload = payload;
+            task.resultPayloadVersion = version;
+            task.status = 'AWAITING_REVIEW';
+            task.completedAt = new Date();
+            return repo.save(task);
+        });
+    }
     async markImportTaskParsing(scope, id) {
         const repo = this.dataSource.getRepository(ImportTask);
         const task = await required(repo.findOne({ where: { ...activeScope(scope), id } }), '解析任务不存在');
@@ -232,45 +370,132 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         return repo.save(task);
     }
     async savePurchaseDraft(scope, importTaskId, draft) {
+        assertPurchaseDraft(draft);
+        const confirmedById = requiredId(scope.userId, '当前用户标识');
+        const confirmedAt = new Date();
         const order = await this.dataSource.transaction(async (manager) => {
+            const taskRepo = manager.getRepository(ImportTask);
+            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            if (task.documentType !== 'PURCHASE_CONTRACT' || task.status !== 'AWAITING_REVIEW' || task.resultEntityId != null)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '仅待审核且未入库的采购合同任务可以保存审核');
             const orderRepo = manager.getRepository(PurchaseOrder);
             const normalizedContractNo = parsePurchaseContractNo(draft.order.contractNo).normalized;
             const duplicate = await orderRepo.findOne({ where: { ...activeScope(scope), normalizedContractNo, deletedAt: IsNull() } });
             if (duplicate)
                 throw new DomainError(DomainErrorCodes.DUPLICATE_CONTRACT, '采购合同已存在，如需重新上传请先删除旧记录', { id: duplicate.id, contractNo: draft.order.contractNo });
             const supplier = await this.upsertSupplier(manager, scope, draft.supplier);
-            const task = await required(manager.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), id: importTaskId } }), '解析任务不存在');
             task.status = 'PERSISTING';
-            await manager.getRepository(ImportTask).save(task);
-            const entity = await orderRepo.save(orderRepo.create({ ...auditScope(scope), supplierId: supplier.id, contractNo: draft.order.contractNo.trim(), normalizedContractNo, orderDate: draft.order.orderDate ?? null, contractAmountCny: draft.order.contractAmountCny, paidAmountCny: draft.order.paidAmountCny ?? '0', refundedAmountCny: draft.order.refundedAmountCny ?? '0', sourceFileId: task.sourceFileId, sourceFileName: task.sourceFileName, importTaskId: task.id, amountMismatchConfirmedAt: draft.order.amountMismatchConfirmedAt ?? null, amountMismatchConfirmedById: draft.order.amountMismatchConfirmedById ?? null }));
+            await taskRepo.save(task);
+            const entity = await orderRepo.save(orderRepo.create({ ...auditScope(scope), supplierId: supplier.id, contractNo: draft.order.contractNo.trim(), normalizedContractNo, orderDate: draft.order.orderDate ?? null, contractAmountCny: draft.order.contractAmountCny, paidAmountCny: draft.order.paidAmountCny ?? '0', refundedAmountCny: draft.order.refundedAmountCny ?? '0', sourceFileId: task.sourceFileId, sourceFileName: task.sourceFileName, importTaskId: task.id, amountMismatchConfirmedAt: draft.order.amountMismatch === true ? confirmedAt : null, amountMismatchConfirmedById: draft.order.amountMismatch === true ? confirmedById : null }));
             const lineRepo = manager.getRepository(PurchaseOrderLine);
             for (let index = 0; index < draft.lines.length; index += 1) {
                 const line = draft.lines[index];
                 if (new Decimal(line.quantity).lte(0))
                     throw new DomainError(DomainErrorCodes.INVALID_INPUT, '采购商品数量必须大于 0', { lineNumber: index + 1 });
-                await lineRepo.save(lineRepo.create({ ...auditScope(scope), purchaseOrderId: entity.id, lineNumber: line.lineNumber ?? index + 1, sourceType: line.sourceType ?? 'CONTRACT_EXTRACTED', productName: line.productName.trim(), normalizedProductName: normalizeForProductMatch(line.productName), englishName: line.englishName ?? null, englishNameSource: line.englishNameSource ?? null, productDescription: line.productDescription ?? null, modelSpecification: line.modelSpecification ?? null, unit: line.unit ?? null, quantity: line.quantity, unitPriceTaxIncluded: line.unitPriceTaxIncluded, lineAmountTaxIncluded: line.lineAmountTaxIncluded, vatRate: line.vatRate ?? null, vatRateSource: line.vatRateSource ?? null, hsCode: line.hsCode ?? null, hsCodeStatus: line.hsCodeStatus ?? 'UNCONFIRMED', hsCodeSource: line.hsCodeSource ?? null, hsCodeReferenceSnapshotId: line.hsCodeReferenceSnapshotId ?? null, refundRate: line.refundRate ?? null, refundRateSource: line.refundRateSource ?? null, refundPolicyReference: line.refundPolicyReference ?? null, refundPolicyDate: line.refundPolicyDate ?? null, refundValidationMethod: line.refundValidationMethod ?? null, refundConfirmedAt: line.refundConfirmedAt ?? null, refundConfirmedById: line.refundConfirmedById ?? null, amountMismatchConfirmedAt: line.amountMismatchConfirmedAt ?? null, amountMismatchConfirmedById: line.amountMismatchConfirmedById ?? null, sourceLocation: line.sourceLocation ?? null, sourceContent: line.sourceContent ?? null }));
+                await lineRepo.save(lineRepo.create({ ...auditScope(scope), purchaseOrderId: entity.id, lineNumber: line.lineNumber ?? index + 1, sourceType: line.sourceType ?? 'CONTRACT_EXTRACTED', productName: line.productName.trim(), normalizedProductName: normalizeForProductMatch(line.productName), englishName: line.englishName ?? null, englishNameSource: line.englishNameSource ?? null, productDescription: line.productDescription ?? null, modelSpecification: line.modelSpecification ?? null, unit: line.unit ?? null, quantity: line.quantity, unitPriceTaxIncluded: line.unitPriceTaxIncluded, lineAmountTaxIncluded: line.lineAmountTaxIncluded, vatRate: line.vatRate ?? null, vatRateSource: line.vatRateSource ?? null, hsCode: line.hsCode ?? null, hsCodeStatus: line.hsCodeStatus ?? 'UNCONFIRMED', hsCodeSource: line.hsCodeSource ?? null, hsCodeReferenceSnapshotId: line.hsCodeReferenceSnapshotId ?? null, originCountry: line.originCountry ?? null, domesticSourceLocation: line.domesticSourceLocation ?? null, refundRate: line.refundRate ?? null, refundRateSource: line.refundRateSource ?? null, refundPolicyReference: line.refundPolicyReference ?? null, refundPolicyDate: line.refundPolicyDate ?? null, refundValidationMethod: line.refundValidationMethod, refundConfirmedAt: confirmedAt, refundConfirmedById: confirmedById, amountMismatchConfirmedAt: line.amountMismatch === true ? confirmedAt : null, amountMismatchConfirmedById: line.amountMismatch === true ? confirmedById : null, sourceLocation: line.sourceLocation ?? null, sourceContent: line.sourceContent ?? null }));
             }
             task.status = 'SUCCEEDED';
             task.resultEntityId = entity.id;
             task.reviewSavedAt = new Date();
             task.completedAt = new Date();
-            await manager.getRepository(ImportTask).save(task);
+            await taskRepo.save(task);
             return entity;
         });
         await this.recalculateProductRisks(scope, 'SOURCE_CHANGED');
         await this.recalculateCompanyRisks(scope, 'SOURCE_CHANGED');
         return order;
     }
-    async listSuppliers(scope, query = {}) { return this.pagedQuery(Supplier, scope, query, ['code', 'name', 'shortName', 'contactName', 'businessProducts']); }
-    async listPurchaseOrders(scope, supplierId, query = {}) { return this.pagedQuery(PurchaseOrder, scope, query, ['contractNo', 'sourceFileName'], { supplierId }); }
-    async listPurchaseLines(scope, purchaseOrderId, query = {}) { return this.pagedQuery(PurchaseOrderLine, scope, query, ['productName', 'productDescription', 'modelSpecification', 'hsCode'], { purchaseOrderId }); }
+    async listSuppliers(scope, query = {}) {
+        const page = await this.pagedQuery(Supplier, scope, query, ['code', 'name', 'shortName', 'contactName', 'businessProducts'], {}, {
+            fuzzy: pick(query.parameters ?? {}, ['code', 'name', 'shortName', 'contactName', 'phone'])
+        });
+        return { ...page, items: await this.supplierDtos(scope, page.items) };
+    }
+    async getSupplier(scope, id) {
+        const supplier = await required(this.dataSource.getRepository(Supplier).findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '供应商不存在');
+        return (await this.supplierDtos(scope, [supplier]))[0];
+    }
+    async listPurchaseOrders(scope, supplierId, query = {}) {
+        const parameters = query.parameters ?? {};
+        const page = await this.pagedQuery(PurchaseOrder, scope, query, ['contractNo', 'sourceFileName'], { supplierId }, {
+            fuzzy: pick(parameters, ['contractNo']),
+            range: pick(parameters, ['orderDate', 'contractAmountCny']),
+            apply: qb => {
+                const unpaid = booleanFilter(parameters.hasUnpaid);
+                if (unpaid != null)
+                    qb.andWhere(unpaid ? 'row.contractAmountCny > row.paidAmountCny' : 'row.contractAmountCny <= row.paidAmountCny');
+                const refundExpression = purchaseEstimatedRefundSql('row');
+                const unrefunded = booleanFilter(parameters.hasUnrefunded);
+                if (unrefunded != null)
+                    qb.andWhere(unrefunded ? `${refundExpression} > row.refundedAmountCny` : `${refundExpression} <= row.refundedAmountCny`);
+                const linked = parameters.linkStatus === 'LINKED' ? true : parameters.linkStatus === 'UNLINKED' ? false : null;
+                if (linked != null)
+                    qb.andWhere(`${linked ? '' : 'NOT '}EXISTS (${linkedCustomerContractSql('row')})`, { ...activeScope(scope) });
+            }
+        });
+        return { ...page, items: await this.purchaseOrderDtos(scope, page.items) };
+    }
+    async getPurchaseOrder(scope, id) {
+        const order = await required(this.dataSource.getRepository(PurchaseOrder).findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '采购订单不存在');
+        return (await this.purchaseOrderDtos(scope, [order]))[0];
+    }
+    async listPurchaseLines(scope, purchaseOrderId, query = {}) {
+        const parameters = query.parameters ?? {};
+        const page = await this.pagedQuery(PurchaseOrderLine, scope, query, ['productName', 'productDescription', 'modelSpecification', 'hsCode'], { purchaseOrderId, hsCodeStatus: parameters.hsCodeStatus }, {
+            fuzzy: pick(parameters, ['productName', 'productDescription', 'hsCode']),
+            apply: qb => {
+                if (hasQueryValue(parameters.complianceCategory))
+                    qb.andWhere(`EXISTS (SELECT 1 FROM plugin_trade_compliance_product_match compliance_match WHERE compliance_match."purchaseOrderLineId" = row.id AND compliance_match."tenantId" = :tenantId AND compliance_match."organizationId" = :organizationId AND compliance_match."deletedAt" IS NULL AND compliance_match."catalogType" = :complianceCategory)`, { ...activeScope(scope), complianceCategory: parameters.complianceCategory });
+            }
+        });
+        const ids = page.items.map(item => item.id);
+        const matches = ids.length ? await this.dataSource.getRepository(ProductComplianceMatch).find({ where: { ...activeScope(scope), purchaseOrderLineId: In(ids), deletedAt: IsNull() } }) : [];
+        return {
+            ...page,
+            items: page.items.map(item => ({
+                ...item,
+                sourceType: item.sourceType,
+                hsCodeStatus: item.hsCodeStatus,
+                complianceCategories: [...new Set(matches.filter(match => match.purchaseOrderLineId === item.id).map(match => match.catalogType))]
+            }))
+        };
+    }
+    async getSupplierProcurementMetrics(scope, supplierId, currentYear = new Date().getFullYear()) {
+        const orders = await this.dataSource.getRepository(PurchaseOrder).find({ where: { ...activeScope(scope), supplierId, deletedAt: IsNull() } });
+        const orderIds = orders.map(order => order.id);
+        const lines = orderIds.length ? await this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId: In(orderIds), deletedAt: IsNull() } }) : [];
+        const currentOrders = orders.filter(order => String(order.orderDate ?? '').startsWith(`${currentYear}-`));
+        const top = new Map();
+        for (const line of lines)
+            top.set(line.productName, (top.get(line.productName) ?? new Decimal(0)).plus(line.lineAmountTaxIncluded));
+        const orderBalances = {};
+        for (const order of orders) {
+            const orderLines = lines.filter(line => line.purchaseOrderId === order.id);
+            orderBalances[order.id] = {
+                unpaidAmountCny: Decimal.max(new Decimal(order.contractAmountCny).minus(order.paidAmountCny), 0).toNumber(),
+                unrefundedAmountCny: Number(this.unrefundedAmount(order, orderLines))
+            };
+        }
+        return {
+            totalOrderCount: orders.length,
+            totalPurchaseAmountCny: decimalSum(orders, order => order.contractAmountCny),
+            currentYearOrderCount: currentOrders.length,
+            currentYearPurchaseAmountCny: decimalSum(currentOrders, order => order.contractAmountCny),
+            topProducts: [...top].sort((left, right) => right[1].cmp(left[1]) || left[0].localeCompare(right[0])).slice(0, 5).map(([productName, amountCny]) => ({ productName, amountCny: amountCny.toNumber() })),
+            orderBalances
+        };
+    }
     async updateSupplier(scope, id, input) {
-        const repo = this.dataSource.getRepository(Supplier);
-        const item = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '供应商不存在');
-        Object.assign(item, pick(input, ['code', 'name', 'shortName', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
-        item.normalizedName = normalizeExactName(item.name);
-        item.updatedById = scope.userId ?? null;
-        const saved = await repo.save(item);
+        const saved = await this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(Supplier);
+            const item = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '供应商不存在');
+            const code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Supplier, 'code' in input ? input.code : item.code, item.id);
+            Object.assign(item, pick(input, ['name', 'shortName', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
+            item.code = code;
+            item.normalizedName = normalizeExactName(item.name);
+            item.updatedById = scope.userId ?? null;
+            return repo.save(item);
+        });
         await this.recalculateCompanyRisks(scope, 'SOURCE_CHANGED');
         return saved;
     }
@@ -284,44 +509,67 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         return repo.save(item);
     }
     async updatePurchaseLine(scope, id, input) {
-        const repo = this.dataSource.getRepository(PurchaseOrderLine);
-        const item = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '采购商品不存在');
-        Object.assign(item, pick(input, ['productName', 'englishName', 'englishNameSource', 'productDescription', 'modelSpecification', 'unit', 'quantity', 'unitPriceTaxIncluded', 'lineAmountTaxIncluded', 'vatRate', 'vatRateSource', 'hsCode', 'hsCodeStatus', 'hsCodeSource', 'refundRate', 'refundRateSource', 'refundPolicyReference', 'refundPolicyDate', 'refundValidationMethod']));
-        if (new Decimal(item.quantity).lte(0))
+        validatePurchaseLineDiscriminators(input);
+        const existing = await required(this.dataSource.getRepository(PurchaseOrderLine).findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '采购商品不存在');
+        const candidate = { ...existing, ...pick(input, ['productName', 'englishName', 'englishNameSource', 'productDescription', 'modelSpecification', 'unit', 'quantity', 'unitPriceTaxIncluded', 'lineAmountTaxIncluded', 'vatRate', 'vatRateSource', 'hsCode', 'hsCodeStatus', 'hsCodeSource', 'originCountry', 'domesticSourceLocation', 'refundRate', 'refundRateSource', 'refundPolicyReference', 'refundPolicyDate', 'refundValidationMethod']) };
+        validateTaxRates(candidate, { purchaseOrderLineId: existing.id, lineNumber: existing.lineNumber, productName: candidate.productName });
+        if (new Decimal(candidate.quantity).lte(0))
             throw new DomainError(DomainErrorCodes.INVALID_INPUT, '采购商品数量必须大于 0');
-        await this.assertPurchaseOrderReceiptsRemainValid(scope, item.purchaseOrderId, item);
-        item.normalizedProductName = normalizeForProductMatch(item.productName);
-        item.updatedById = scope.userId ?? null;
-        const saved = await repo.save(item);
+        const saved = await this.withLockedPurchaseLines(scope, existing.purchaseOrderId, async ({ lineRepo, lines, contracts, customers, manuals }) => {
+            const item = await required(Promise.resolve(lines.find(line => line.id === id) ?? null), '采购商品不存在');
+            Object.assign(item, pick(input, ['productName', 'englishName', 'englishNameSource', 'productDescription', 'modelSpecification', 'unit', 'quantity', 'unitPriceTaxIncluded', 'lineAmountTaxIncluded', 'vatRate', 'vatRateSource', 'hsCode', 'hsCodeStatus', 'hsCodeSource', 'originCountry', 'domesticSourceLocation', 'refundRate', 'refundRateSource', 'refundPolicyReference', 'refundPolicyDate', 'refundValidationMethod']));
+            validatePurchaseLineDiscriminators(item);
+            const rates = validateTaxRates(item, { purchaseOrderLineId: item.id, lineNumber: item.lineNumber, productName: item.productName });
+            item.vatRate = rates.vatRate;
+            item.refundRate = rates.refundRate;
+            if (new Decimal(item.quantity).lte(0))
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '采购商品数量必须大于 0');
+            this.assertLockedPurchaseReceipts(lines, contracts, customers, manuals);
+            item.normalizedProductName = normalizeForProductMatch(item.productName);
+            item.updatedById = scope.userId ?? null;
+            return lineRepo.save(item);
+        });
         await this.recalculateProductRisks(scope, 'SOURCE_CHANGED');
         return saved;
     }
     async addPurchaseLine(scope, purchaseOrderId, input) {
-        const repo = this.dataSource.getRepository(PurchaseOrderLine);
-        const count = await repo.count({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() } });
-        const saved = await repo.save(repo.create({ ...auditScope(scope), purchaseOrderId, lineNumber: count + 1, sourceType: 'MANUAL_ENTRY', productName: input.productName.trim(), normalizedProductName: normalizeForProductMatch(input.productName), englishName: input.englishName ?? null, englishNameSource: input.englishNameSource ?? null, productDescription: input.productDescription ?? null, modelSpecification: input.modelSpecification ?? null, unit: input.unit ?? null, quantity: input.quantity, unitPriceTaxIncluded: input.unitPriceTaxIncluded, lineAmountTaxIncluded: input.lineAmountTaxIncluded, vatRate: input.vatRate ?? null, vatRateSource: input.vatRateSource ?? 'MANUAL', hsCode: input.hsCode ?? null, hsCodeStatus: input.hsCodeStatus ?? 'UNCONFIRMED', hsCodeSource: input.hsCodeSource ?? null, hsCodeReferenceSnapshotId: null, refundRate: input.refundRate ?? null, refundRateSource: input.refundRateSource ?? null, refundPolicyReference: input.refundPolicyReference ?? null, refundPolicyDate: input.refundPolicyDate ?? null, refundValidationMethod: input.refundValidationMethod ?? null, refundConfirmedAt: null, refundConfirmedById: null, amountMismatchConfirmedAt: null, amountMismatchConfirmedById: null, sourceLocation: null, sourceContent: null }));
+        validatePurchaseLineDiscriminators(input);
+        const discriminators = validatePurchaseLineDiscriminators({ ...input, sourceType: 'MANUAL_ENTRY', vatRateSource: input.vatRateSource ?? 'MANUAL', hsCodeStatus: input.hsCodeStatus ?? 'UNCONFIRMED' });
+        const rates = validateTaxRates(input, { productName: input.productName });
+        if (new Decimal(input.quantity).lte(0))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '采购商品数量必须大于 0');
+        const saved = await this.withLockedPurchaseLines(scope, purchaseOrderId, async ({ lineRepo, lines, contracts, customers, manuals }) => {
+            const lineNumber = lines.reduce((maximum, line) => Math.max(maximum, line.lineNumber), 0) + 1;
+            const item = lineRepo.create({ ...auditScope(scope), purchaseOrderId, lineNumber, sourceType: discriminators.sourceType ?? 'MANUAL_ENTRY', productName: input.productName.trim(), normalizedProductName: normalizeForProductMatch(input.productName), englishName: input.englishName ?? null, englishNameSource: discriminators.englishNameSource ?? null, productDescription: input.productDescription ?? null, modelSpecification: input.modelSpecification ?? null, unit: input.unit ?? null, quantity: input.quantity, unitPriceTaxIncluded: input.unitPriceTaxIncluded, lineAmountTaxIncluded: input.lineAmountTaxIncluded, vatRate: rates.vatRate, vatRateSource: discriminators.vatRateSource ?? 'MANUAL', hsCode: input.hsCode ?? null, hsCodeStatus: discriminators.hsCodeStatus ?? 'UNCONFIRMED', hsCodeSource: discriminators.hsCodeSource ?? null, hsCodeReferenceSnapshotId: null, originCountry: input.originCountry ?? null, domesticSourceLocation: input.domesticSourceLocation ?? null, refundRate: rates.refundRate, refundRateSource: discriminators.refundRateSource ?? null, refundPolicyReference: input.refundPolicyReference ?? null, refundPolicyDate: input.refundPolicyDate ?? null, refundValidationMethod: discriminators.refundValidationMethod ?? null, refundConfirmedAt: null, refundConfirmedById: null, amountMismatchConfirmedAt: null, amountMismatchConfirmedById: null, sourceLocation: null, sourceContent: null });
+            this.assertLockedPurchaseReceipts([...lines, item], contracts, customers, manuals);
+            return lineRepo.save(item);
+        });
         await this.recalculateProductRisks(scope, 'SOURCE_CHANGED');
         return saved;
     }
     async saveCustomerContractDraft(scope, importTaskId, draft) {
+        const normalizedDraft = { ...draft, clauses: draft.clauses.map(clause => ({ ...clause, ...normalizeCustomerContractAnalysisInput(clause) })) };
+        const effectiveAnalyses = completeCustomerClauseAnalyses(normalizedDraft);
         const contract = await this.dataSource.transaction(async (manager) => {
+            const taskRepo = manager.getRepository(ImportTask);
+            const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+            await invalidateCustomerContractReanalysis(manager, scope, { reviewSource: 'IMPORT_DRAFT', task });
             const parsed = parseCustomerContractNo(draft.contract.contractNo);
             const contractRepo = manager.getRepository(CustomerContract);
             const duplicate = await contractRepo.findOne({ where: { ...activeScope(scope), normalizedContractNo: parsed.normalized, deletedAt: IsNull() } });
             if (duplicate)
                 throw new DomainError(DomainErrorCodes.DUPLICATE_CONTRACT, '客户合同已存在，如需重新上传请先删除旧记录', { id: duplicate.id, contractNo: draft.contract.contractNo });
             const customer = await this.upsertCustomer(manager, scope, draft.customer);
-            const task = await required(manager.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), id: importTaskId } }), '解析任务不存在');
             task.status = 'PERSISTING';
-            await manager.getRepository(ImportTask).save(task);
-            const overallRiskLevel = maxRisk(draft.analyses?.map(item => item.riskLevel) ?? []);
+            await taskRepo.save(task);
+            const overallRiskLevel = maxRisk(effectiveAnalyses.map(item => item.riskLevel));
             const entity = await contractRepo.save(contractRepo.create({ ...auditScope(scope), customerId: customer.id, contractNo: draft.contract.contractNo.trim(), normalizedContractNo: parsed.normalized, contractAmountReviewCny: draft.contract.contractAmountReviewCny ?? null, signedAt: draft.contract.signedAt ?? null, overallRiskLevel, latestAnalysisRunId: null, sourceFileId: task.sourceFileId, sourceFileName: task.sourceFileName, importTaskId: task.id }));
             const clauseRepo = manager.getRepository(CustomerContractClause);
             const analysisRun = await manager.getRepository(CustomerContractAnalysisRun).save(manager.getRepository(CustomerContractAnalysisRun).create({ ...createdScope(scope), customerContractId: entity.id, importTaskId: task.id, analysisType: 'INITIAL', status: 'SUCCEEDED', promptVersion: 'CUSTOMER_CLAUSE_V1', modelName: null, startedAt: new Date(), completedAt: new Date(), createdById: scope.userId ?? null }));
             for (const type of ClauseTypes) {
-                const item = draft.clauses.find(clause => clause.clauseType === type);
-                const clause = await clauseRepo.save(clauseRepo.create({ ...auditScope(scope), customerContractId: entity.id, clauseType: type, extractionStatus: item?.extractionStatus ?? (item?.sourceText ? 'FOUND' : 'NOT_FOUND'), sourceText: item?.sourceText ?? null, reviewedText: item?.reviewedText ?? item?.sourceText ?? null, sourceLocation: item?.sourceLocation ?? null, sourceContent: item?.sourceContent ?? null }));
-                const analysis = draft.analyses?.find(value => value.clauseType === type);
+                const item = normalizedDraft.clauses.find(clause => clause.clauseType === type);
+                const clause = await clauseRepo.save(clauseRepo.create({ ...auditScope(scope), customerContractId: entity.id, clauseType: type, extractionStatus: item?.extractionStatus ?? 'NOT_FOUND', sourceText: item?.sourceText ?? null, reviewedText: item?.reviewedText ?? null, sourceLocation: item?.sourceLocation ?? null, sourceContent: item?.sourceContent ?? null }));
+                const analysis = effectiveAnalyses.find(value => value.clauseType === type);
                 if (analysis)
                     await manager.getRepository(CustomerContractClauseAnalysis).save(manager.getRepository(CustomerContractClauseAnalysis).create({ ...createdScope(scope), analysisRunId: analysisRun.id, customerContractClauseId: clause.id, clauseType: type, analyzedTextSnapshot: clause.reviewedText, riskLevel: analysis.riskLevel, riskMessageZh: analysis.riskMessageZh, suggestionZh: analysis.suggestionZh }));
             }
@@ -331,14 +579,96 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
             task.resultEntityId = entity.id;
             task.reviewSavedAt = new Date();
             task.completedAt = new Date();
-            await manager.getRepository(ImportTask).save(task);
+            await taskRepo.save(task);
             return entity;
         });
         await this.recalculateCompanyRisks(scope, 'SOURCE_CHANGED');
         return contract;
     }
     async listCustomers(scope, query = {}) { return this.pagedQuery(Customer, scope, query, ['code', 'name', 'shortName', 'country', 'contactName']); }
-    async listCustomerContracts(scope, query = {}) { return this.pagedQuery(CustomerContract, scope, query, ['contractNo', 'sourceFileName'], { customerId: query.parameters?.customerId }); }
+    async listSalesCustomers(scope, query = {}) {
+        const parameters = query.parameters ?? {};
+        assertOptionalEnum(parameters.profitRateStatus, CustomerProfitRateStatuses, '默认定价利润率状态');
+        assertOptionalEnum(parameters.sanctionStatus, SanctionHitStatuses, '制裁风险状态');
+        const page = await this.pagedQuery(Customer, scope, query, ['code', 'name', 'country'], {}, {
+            fuzzy: pick(parameters, ['code', 'name', 'country']),
+            range: pick(parameters, ['complianceCheckedAt']),
+            apply: qb => {
+                if (parameters.profitRateStatus === 'MISSING' || parameters.profitRateStatus === 'CONFIGURED')
+                    qb.andWhere('row.pricingProfitRateStatus = :pricingProfitRateStatus', { pricingProfitRateStatus: parameters.profitRateStatus });
+                if (parameters.sanctionStatus === 'HIT')
+                    qb.andWhere(`EXISTS (SELECT 1 FROM plugin_trade_compliance_company_sanction_match match WHERE match."tenantId" = :tenantId AND match."organizationId" = :organizationId AND match."deletedAt" IS NULL AND match."subjectType" = 'CUSTOMER' AND match."customerId" = row.id)`, activeScope(scope));
+                if (parameters.sanctionStatus === 'CLEAR')
+                    qb.andWhere("row.complianceCheckStatus = 'CHECKED'").andWhere(`NOT EXISTS (SELECT 1 FROM plugin_trade_compliance_company_sanction_match match WHERE match."tenantId" = :tenantId AND match."organizationId" = :organizationId AND match."deletedAt" IS NULL AND match."subjectType" = 'CUSTOMER' AND match."customerId" = row.id)`, activeScope(scope));
+                if (parameters.sanctionStatus === 'UNCHECKED')
+                    qb.andWhere("row.complianceCheckStatus = 'UNCHECKED'");
+            }
+        });
+        return { ...page, items: await this.salesCustomerDtos(scope, page.items) };
+    }
+    async listSalesOrders(scope, customerId, query = {}) {
+        assertOptionalEnum(query.parameters?.paymentStatus, SalesPaymentStatuses, '收款状态');
+        const customer = (await this.salesCustomerDtos(scope, [await required(this.dataSource.getRepository(Customer).findOne({ where: { ...activeScope(scope), id: customerId, deletedAt: IsNull() } }), '客户不存在')]))[0];
+        const page = await this.selectDerivedSalesOrderIdentities(scope, customerId, query, false);
+        const metricIdentities = await this.selectAllDerivedSalesOrderIdentities(scope, customerId, query.parameters ?? {}, false);
+        const [items, metricRows] = await Promise.all([
+            this.salesOrderDtos(scope, await this.listDerivedSalesOrders(scope, customerId, page.items)),
+            this.salesOrderDtos(scope, await this.listDerivedSalesOrders(scope, customerId, metricIdentities))
+        ]);
+        return { ...page, items, customer, metrics: salesMetrics(metricRows) };
+    }
+    async listSalesLines(scope, query) {
+        assertOptionalEnum(query.parameters?.complianceCategory, CatalogTypes, '合规分类');
+        const rows = await this.salesOrderDtos(scope, await this.listDerivedSalesOrders(scope, query.customerId));
+        const order = rows.find(item => item.customerContractId === query.customerContractId && item.purchaseOrderId === query.purchaseOrderId);
+        if (!order)
+            throw new DomainError(DomainErrorCodes.NOT_FOUND, '销售订单不存在');
+        const parameters = query.parameters ?? {};
+        const filtered = order.lines.filter(line => fuzzyValue(line.productName, parameters.productName) && fuzzyValue(line.productDescription, parameters.productDescription) && fuzzyValue(line.hsCode, parameters.hsCode) && (!hasQueryValue(parameters.complianceCategory) || line.complianceCategories.includes(parameters.complianceCategory)));
+        return { ...pageRows(filtered, query), order };
+    }
+    async listSalesFileOrders(scope, query = {}) {
+        const page = await this.selectDerivedSalesOrderIdentities(scope, undefined, query, true);
+        return { ...page, items: await this.salesOrderDtos(scope, await this.listDerivedSalesOrders(scope, undefined, page.items)) };
+    }
+    async listCustomerContracts(scope, query = {}) {
+        const parameters = query.parameters ?? {};
+        const page = await this.pagedQuery(CustomerContract, scope, query, ['contractNo', 'sourceFileName'], { customerId: parameters.customerId, overallRiskLevel: parameters.overallRiskLevel }, {
+            fuzzy: pick(parameters, ['contractNo']),
+            range: pick(parameters, ['signedAt', 'contractAmountReviewCny']),
+            apply: qb => {
+                if (hasQueryValue(parameters.customerName))
+                    qb.andWhere(`EXISTS (SELECT 1 FROM plugin_trade_compliance_customer customer_filter WHERE customer_filter.id = row."customerId" AND customer_filter."tenantId" = :tenantId AND customer_filter."organizationId" = :organizationId AND customer_filter."deletedAt" IS NULL AND customer_filter.name ILIKE :customerName)`, { ...activeScope(scope), customerName: `%${String(parameters.customerName).trim()}%` });
+                if (parameters.sanctionStatus === 'HIT')
+                    qb.andWhere(`EXISTS (${customerSanctionMatchSql('row')})`, activeScope(scope));
+                if (parameters.sanctionStatus === 'CLEAR')
+                    qb.andWhere(`NOT EXISTS (${customerSanctionMatchSql('row')})`, activeScope(scope)).andWhere(`EXISTS (SELECT 1 FROM plugin_trade_compliance_customer customer_checked WHERE customer_checked.id = row."customerId" AND customer_checked."complianceCheckStatus" = 'CHECKED')`);
+                if (parameters.sanctionStatus === 'UNCHECKED')
+                    qb.andWhere(`EXISTS (SELECT 1 FROM plugin_trade_compliance_customer customer_unchecked WHERE customer_unchecked.id = row."customerId" AND customer_unchecked."complianceCheckStatus" = 'UNCHECKED')`);
+            }
+        });
+        const customerIds = [...new Set(page.items.map(item => item.customerId))];
+        const customers = customerIds.length ? await this.dataSource.getRepository(Customer).find({ where: { ...activeScope(scope), id: In(customerIds), deletedAt: IsNull() } }) : [];
+        const matches = customerIds.length ? await this.dataSource.getRepository(CompanySanctionMatch).find({ where: { ...activeScope(scope), subjectType: 'CUSTOMER', customerId: In(customerIds), deletedAt: IsNull() } }) : [];
+        const contractIds = page.items.map(item => item.id);
+        const runs = contractIds.length ? await this.dataSource.getRepository(CustomerContractAnalysisRun).find({ where: { ...activeScope(scope), customerContractId: In(contractIds) }, order: { createdAt: 'DESC' } }) : [];
+        return {
+            ...page,
+            items: page.items.map(item => {
+                const customer = customers.find(value => value.id === item.customerId);
+                const latestRun = runs.find(run => run.customerContractId === item.id);
+                const sanctionMatchCount = matches.filter(match => match.customerId === item.customerId).length;
+                return {
+                    ...item,
+                    contractAmountReviewCny: item.contractAmountReviewCny,
+                    customerName: customer?.name ?? '',
+                    customerCode: customer?.code ?? null,
+                    sanctionStatus: customer?.complianceCheckStatus === 'CHECKED' ? sanctionMatchCount ? 'HIT' : 'CLEAR' : 'UNCHECKED',
+                    latestAnalysisAt: latestRun?.completedAt ?? latestRun?.createdAt ?? null
+                };
+            })
+        };
+    }
     async getCustomerContractReview(scope, id) {
         const contract = await required(this.dataSource.getRepository(CustomerContract).findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '客户合同不存在');
         const [customer, clauses, runs] = await Promise.all([
@@ -346,31 +676,299 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
             this.dataSource.getRepository(CustomerContractClause).find({ where: { ...activeScope(scope), customerContractId: id, deletedAt: IsNull() } }),
             this.dataSource.getRepository(CustomerContractAnalysisRun).find({ where: { ...activeScope(scope), customerContractId: id }, order: { createdAt: 'DESC' } })
         ]);
-        const analyses = runs.length ? await this.dataSource.getRepository(CustomerContractClauseAnalysis).find({ where: { ...activeScope(scope), analysisRunId: runs[0].id } }) : [];
-        return { contract, customer, clauses, analyses, latestRun: runs[0] ?? null };
+        const latestRun = contract.latestAnalysisRunId ? runs.find(run => run.id === contract.latestAnalysisRunId && run.status === 'SUCCEEDED') ?? null : null;
+        const analyses = latestRun ? await this.dataSource.getRepository(CustomerContractClauseAnalysis).find({ where: { ...activeScope(scope), analysisRunId: latestRun.id } }) : [];
+        const sanctionMatchCount = customer ? await this.dataSource.getRepository(CompanySanctionMatch).count({ where: { ...activeScope(scope), subjectType: 'CUSTOMER', customerId: customer.id, deletedAt: IsNull() } }) : 0;
+        return { contract, customer, clauses, analyses, latestRun, analysisRuns: runs, sanctionStatus: customer?.complianceCheckStatus === 'CHECKED' ? sanctionMatchCount ? 'HIT' : 'CLEAR' : 'UNCHECKED' };
+    }
+    async startCustomerContractReanalysis(scope, input) {
+        return this.dataSource.transaction(async (manager) => {
+            const now = new Date();
+            let importTaskId;
+            let customerContractId = null;
+            let clauses;
+            let contractTarget = null;
+            let taskTarget = null;
+            let activeRun = null;
+            const runRepo = manager.getRepository(CustomerContractAnalysisRun);
+            if (input.reviewSource === 'EXISTING_CONTRACT') {
+                const contractRepo = manager.getRepository(CustomerContract);
+                const contract = await required(contractRepo.findOne({ where: { ...activeScope(scope), id: requiredId(input.id, '客户合同标识'), deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户合同不存在');
+                contractTarget = contract;
+                customerContractId = contract.id;
+                importTaskId = contract.importTaskId;
+                activeRun = await runRepo.findOne({ where: { ...activeScope(scope), customerContractId: contract.id, analysisType: 'REANALYSIS', status: In(['PENDING', 'RUNNING']) }, lock: { mode: 'pessimistic_write' } });
+                const storedClauses = await manager.getRepository(CustomerContractClause).find({ where: { ...activeScope(scope), customerContractId: contract.id, deletedAt: IsNull() } });
+                clauses = storedClauses.map(clause => ({ clauseType: clause.clauseType, extractionStatus: clause.extractionStatus, sourceText: clause.sourceText, reviewedText: clause.reviewedText, sourceLocation: clause.sourceLocation, sourceContent: clause.sourceContent }));
+            }
+            else if (input.reviewSource === 'IMPORT_DRAFT') {
+                importTaskId = requiredId(input.importTaskId, '导入任务标识');
+                const taskRepo = manager.getRepository(ImportTask);
+                const task = await required(taskRepo.findOne({ where: { ...activeScope(scope), id: importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+                taskTarget = task;
+                if (task.documentType !== 'CUSTOMER_CONTRACT' || task.status !== 'AWAITING_REVIEW')
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '仅待审核的客户合同草稿可以重新分析');
+                activeRun = await runRepo.findOne({ where: { ...activeScope(scope), customerContractId: IsNull(), importTaskId, analysisType: 'REANALYSIS', status: In(['PENDING', 'RUNNING']) }, lock: { mode: 'pessimistic_write' } });
+                clauses = Array.isArray(task.resultPayload?.clauses) ? task.resultPayload.clauses.map(reanalysisClauseInput) : [];
+            }
+            else {
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '不支持的客户合同审核来源');
+            }
+            const analysisInput = { reviewSource: input.reviewSource, clauses };
+            const targetCurrentRunId = contractTarget?.currentReanalysisRunId ?? taskTarget?.currentReanalysisRunId ?? null;
+            if (activeRun) {
+                if (targetCurrentRunId && targetCurrentRunId !== activeRun.id)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务已不是当前运行');
+                const expiresAt = activeRun.expiresAt ?? new Date((activeRun.createdAt ?? now).getTime() + CUSTOMER_REANALYSIS_TIMEOUT_MS);
+                activeRun.expiresAt = expiresAt;
+                if (!await timeoutCustomerContractReanalysis(manager, { run: activeRun, contract: contractTarget, task: taskTarget }, now)) {
+                    if (activeRun.analysisInput) {
+                        await runRepo.save(activeRun);
+                        if (!targetCurrentRunId) {
+                            if (contractTarget) {
+                                contractTarget.currentReanalysisRunId = activeRun.id;
+                                await manager.getRepository(CustomerContract).save(contractTarget);
+                            }
+                            if (taskTarget) {
+                                taskTarget.currentReanalysisRunId = activeRun.id;
+                                await manager.getRepository(ImportTask).save(taskTarget);
+                            }
+                        }
+                        return { run: activeRun, resumed: true, reviewSource: activeRun.analysisInput.reviewSource, clauses: activeRun.analysisInput.clauses };
+                    }
+                    activeRun.status = 'FAILED';
+                    activeRun.errorCode = 'AI_REANALYSIS_INPUT_MISSING';
+                    activeRun.errorMessage = '重新分析运行缺少可验证的输入快照';
+                    activeRun.completedAt = now;
+                    await runRepo.save(activeRun);
+                }
+            }
+            const run = await runRepo.save(runRepo.create({ ...createdScope(scope), customerContractId, importTaskId, analysisType: 'REANALYSIS', status: 'PENDING', promptVersion: 'CUSTOMER_CLAUSE_V1', modelName: null, errorCode: null, errorMessage: null, analysisInput, executionCommand: null, expiresAt: new Date(now.getTime() + CUSTOMER_REANALYSIS_TIMEOUT_MS), commandDispatchedAt: null, startedAt: null, completedAt: null, createdById: scope.userId ?? null }));
+            if (contractTarget) {
+                contractTarget.currentReanalysisRunId = run.id;
+                await manager.getRepository(CustomerContract).save(contractTarget);
+            }
+            if (taskTarget) {
+                taskTarget.currentReanalysisRunId = run.id;
+                await manager.getRepository(ImportTask).save(taskTarget);
+            }
+            return { run, resumed: false, reviewSource: input.reviewSource, clauses };
+        });
+    }
+    async saveCustomerContractReanalysisExecution(scope, id, command) {
+        const outcome = await this.dataSource.transaction(async (manager) => {
+            const locked = await lockCustomerContractReanalysis(manager, scope, id);
+            const run = locked.run;
+            if (await timeoutCustomerContractReanalysis(manager, locked))
+                return { run, expired: true };
+            if (run.status !== 'PENDING' && run.status !== 'RUNNING')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务状态不允许保存命令');
+            if (run.executionCommand)
+                return { run, expired: false };
+            if (lockedCurrentReanalysisRunId(locked) !== run.id)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务已不是当前运行');
+            run.executionCommand = command;
+            return { run: await manager.getRepository(CustomerContractAnalysisRun).save(run), expired: false };
+        });
+        if (outcome.expired)
+            throw reanalysisTimeoutError();
+        return outcome.run;
+    }
+    async markCustomerContractReanalysisDispatched(scope, id) {
+        const outcome = await this.dataSource.transaction(async (manager) => {
+            const locked = await lockCustomerContractReanalysis(manager, scope, id);
+            const run = locked.run;
+            if (await timeoutCustomerContractReanalysis(manager, locked))
+                return { run, expired: true };
+            if (run.status !== 'PENDING')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '只有待派发的重新分析任务可以派发');
+            if (!run.executionCommand)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务尚未持久化执行命令');
+            if (lockedCurrentReanalysisRunId(locked) !== run.id)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务已不是当前运行');
+            const dispatchedAt = new Date();
+            run.commandDispatchedAt = dispatchedAt;
+            run.startedAt = dispatchedAt;
+            run.status = 'RUNNING';
+            return { run: await manager.getRepository(CustomerContractAnalysisRun).save(run), expired: false };
+        });
+        if (outcome.expired)
+            throw reanalysisTimeoutError();
+        return outcome.run;
+    }
+    async markCustomerContractReanalysisFailed(scope, id, input) {
+        const errorCode = requiredId(input.errorCode, '错误代码');
+        const errorMessage = requiredId(input.errorMessage, '错误信息');
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(CustomerContractAnalysisRun);
+            const locked = await lockCustomerContractReanalysis(manager, scope, id);
+            const run = locked.run;
+            if (await timeoutCustomerContractReanalysis(manager, locked))
+                return run;
+            if (run.status !== 'PENDING' && run.status !== 'RUNNING')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务状态不允许标记失败');
+            run.status = 'FAILED';
+            run.errorCode = errorCode;
+            run.errorMessage = errorMessage;
+            run.completedAt = new Date();
+            return repo.save(run);
+        });
+    }
+    async getCustomerContractReanalysisResult(scope, id) {
+        const run = await this.dataSource.transaction(async (manager) => {
+            const locked = await lockCustomerContractReanalysis(manager, scope, id);
+            await timeoutCustomerContractReanalysis(manager, locked);
+            return locked.run;
+        });
+        if (run.status !== 'SUCCEEDED')
+            return { run };
+        if (run.customerContractId)
+            return { run, review: await this.getCustomerContractReview(scope, run.customerContractId) };
+        const task = await required(this.dataSource.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), id: run.importTaskId } }), '解析任务不存在');
+        return { run, task };
+    }
+    async saveCustomerContractReanalysis(scope, analysisRunId, analyses) {
+        assertCompleteClauseAnalyses(analyses);
+        const outcome = await this.dataSource.transaction(async (manager) => {
+            const runRepo = manager.getRepository(CustomerContractAnalysisRun);
+            const locked = await lockCustomerContractReanalysis(manager, scope, analysisRunId);
+            const { run, contract, task } = locked;
+            if (run.status === 'SUCCEEDED')
+                return { run, expired: false };
+            if (await timeoutCustomerContractReanalysis(manager, locked))
+                return { run, expired: true };
+            if (lockedCurrentReanalysisRunId(locked) !== analysisRunId)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务已不是当前运行');
+            if (run.status !== 'PENDING' && run.status !== 'RUNNING')
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析任务状态不允许保存');
+            const analysisInput = requiredCustomerContractReanalysisInput(run);
+            if (run.customerContractId) {
+                const clauses = await manager.getRepository(CustomerContractClause).find({ where: { ...activeScope(scope), customerContractId: run.customerContractId, deletedAt: IsNull() } });
+                const analysisRepo = manager.getRepository(CustomerContractClauseAnalysis);
+                for (const analysis of analyses) {
+                    const clause = clauses.find(item => item.clauseType === analysis.clauseType);
+                    const inputClause = analysisInput.clauses.find(item => item.clauseType === analysis.clauseType);
+                    if (!clause)
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析结果包含未知条款类型', { clauseType: analysis.clauseType });
+                    if (!inputClause)
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析运行缺少条款输入快照', { clauseType: analysis.clauseType });
+                    await analysisRepo.save(analysisRepo.create({ ...createdScope(scope), analysisRunId: run.id, customerContractClauseId: clause.id, clauseType: analysis.clauseType, analyzedTextSnapshot: inputClause.reviewedText, riskLevel: analysis.riskLevel, riskMessageZh: analysis.riskMessageZh, suggestionZh: analysis.suggestionZh }));
+                }
+                const contractRepo = manager.getRepository(CustomerContract);
+                if (!contract)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同不存在');
+                contract.latestAnalysisRunId = run.id;
+                contract.overallRiskLevel = maxRisk(analyses.map(item => item.riskLevel));
+                await contractRepo.save(contract);
+            }
+            else {
+                const taskRepo = manager.getRepository(ImportTask);
+                if (!task)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '解析任务不存在');
+                task.resultPayload = { ...(task.resultPayload ?? {}), analyses };
+                await taskRepo.save(task);
+            }
+            run.status = 'SUCCEEDED';
+            run.completedAt = new Date();
+            return { run: await runRepo.save(run), expired: false };
+        });
+        if (outcome.expired)
+            throw reanalysisTimeoutError();
+        return outcome.run;
+    }
+    async getSourceFileDescriptor(scope, sourceFileId) {
+        const task = await required(this.dataSource.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), sourceFileId } }), '源文件不存在');
+        return { sourceFileId: task.sourceFileId, sourceFileName: task.sourceFileName };
     }
     async updateCustomerContractReview(scope, id, input) {
         const saved = await this.dataSource.transaction(async (manager) => {
             const contractRepo = manager.getRepository(CustomerContract);
-            const contract = await required(contractRepo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '客户合同不存在');
+            const contract = await required(contractRepo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户合同不存在');
             const customerRepo = manager.getRepository(Customer);
-            const customer = await required(customerRepo.findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() } }), '客户不存在');
+            const originalCustomer = await required(customerRepo.findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户不存在');
+            let customer = originalCustomer;
             if (input.customer) {
-                Object.assign(customer, pick(input.customer, ['code', 'name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
-                customer.normalizedName = normalizeExactName(customer.name);
-                customer.updatedById = scope.userId ?? null;
-                await customerRepo.save(customer);
+                const requestedName = 'name' in input.customer ? String(input.customer.name ?? '').trim() : originalCustomer.name;
+                if (!requestedName)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户名称为必填项');
+                const targetNormalizedName = normalizeExactName(requestedName);
+                if (targetNormalizedName !== originalCustomer.normalizedName) {
+                    const confirmation = input.customerTransferConfirmation;
+                    if (confirmation?.type !== 'CONFIRMED_CUSTOMER_TRANSFER')
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '更改客户名称需要确认转移合同');
+                    if (confirmation.targetNormalizedName !== targetNormalizedName)
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户转移确认已失效');
+                    await this.lockCustomerName(manager, scope, targetNormalizedName);
+                    customer = await customerRepo.findOne({ where: { ...activeScope(scope), normalizedName: targetNormalizedName, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } })
+                        ?? customerRepo.create({ ...auditScope(scope), name: requestedName, normalizedName: targetNormalizedName });
+                    const existingCode = customer.code;
+                    Object.assign(customer, pick(input.customer, ['name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
+                    customer.name = requestedName;
+                    customer.normalizedName = targetNormalizedName;
+                    customer.code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Customer, existingCode ?? input.customer.code, customer.id);
+                    customer.updatedById = scope.userId ?? null;
+                    customer = await customerRepo.save(customer);
+                    contract.customerId = customer.id;
+                    contract.updatedById = scope.userId ?? null;
+                    await contractRepo.save(contract);
+                }
+                else {
+                    const code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Customer, 'code' in input.customer ? input.customer.code : customer.code, customer.id);
+                    Object.assign(customer, pick(input.customer, ['code', 'name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
+                    customer.name = requestedName;
+                    customer.normalizedName = targetNormalizedName;
+                    customer.code = code;
+                    customer.updatedById = scope.userId ?? null;
+                    customer = await customerRepo.save(customer);
+                }
+            }
+            const clauseRepo = manager.getRepository(CustomerContractClause);
+            const clauseUpdates = input.clauses ?? [];
+            const currentClauses = clauseUpdates.length ? await clauseRepo.find({ where: { ...activeScope(scope), customerContractId: id, deletedAt: IsNull() } }) : [];
+            const currentClausesByType = new Map(currentClauses.map(clause => [clause.clauseType, clause]));
+            if (customerContractAnalysisInputChanged(currentClausesByType, clauseUpdates)) {
+                await invalidateCustomerContractReanalysis(manager, scope, { reviewSource: 'EXISTING_CONTRACT', contract });
+                contract.latestAnalysisRunId = null;
+                contract.overallRiskLevel = null;
+                contract.updatedById = scope.userId ?? null;
+                await contractRepo.save(contract);
             }
             if (input.contract) {
+                if ('contractNo' in input.contract) {
+                    const parsed = parseCustomerContractNo(String(input.contract.contractNo ?? ''));
+                    const duplicate = await contractRepo.findOne({
+                        where: { ...activeScope(scope), normalizedContractNo: parsed.normalized, deletedAt: IsNull() }
+                    });
+                    if (duplicate && duplicate.id !== contract.id) {
+                        throw new DomainError(DomainErrorCodes.DUPLICATE_CONTRACT, '客户合同已存在，如需重新上传请先删除旧记录', {
+                            id: duplicate.id,
+                            contractNo: parsed.normalized
+                        });
+                    }
+                    contract.contractNo = parsed.normalized;
+                    contract.normalizedContractNo = parsed.normalized;
+                }
                 Object.assign(contract, pick(input.contract, ['contractAmountReviewCny', 'signedAt']));
                 contract.updatedById = scope.userId ?? null;
-                await contractRepo.save(contract);
+                try {
+                    await contractRepo.save(contract);
+                }
+                catch (error) {
+                    if ('contractNo' in input.contract && isPostgresUniqueViolation(error)) {
+                        throw new DomainError(DomainErrorCodes.DUPLICATE_CONTRACT, '客户合同已存在，如需重新上传请先删除旧记录', {
+                            contractNo: contract.normalizedContractNo
+                        });
+                    }
+                    throw error;
+                }
             }
-            const clauseRepo = manager.getRepository(CustomerContractClause);
-            for (const update of input.clauses ?? []) {
-                const clause = await required(clauseRepo.findOne({ where: { ...activeScope(scope), id: update.id, customerContractId: id, deletedAt: IsNull() } }), '客户合同条款不存在');
-                clause.reviewedText = String(update.reviewedText ?? '').trim() || null;
-                clause.extractionStatus = clause.reviewedText ? 'FOUND' : 'NOT_FOUND';
+            for (const update of clauseUpdates) {
+                const clause = currentClausesByType.get(update.clauseType);
+                if (!clause || clause.id !== update.id)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同条款不存在');
+                const normalized = normalizeCustomerContractAnalysisInput(update);
+                clause.reviewedText = normalized.reviewedText;
+                clause.extractionStatus = normalized.extractionStatus;
                 clause.updatedById = scope.userId ?? null;
                 await clauseRepo.save(clause);
             }
@@ -379,108 +977,229 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         await this.recalculateCompanyRisks(scope, 'SOURCE_CHANGED');
         return saved;
     }
-    async listDerivedSalesOrders(scope, customerId) {
-        const customerRepo = this.dataSource.getRepository(Customer);
-        const contractRepo = this.dataSource.getRepository(CustomerContract);
-        const purchaseRepo = this.dataSource.getRepository(PurchaseOrder);
-        const lineRepo = this.dataSource.getRepository(PurchaseOrderLine);
-        const manualRepo = this.dataSource.getRepository(DerivedSalesOrderManualData);
-        const customers = await customerRepo.find({ where: { ...activeScope(scope), ...(customerId ? { id: customerId } : {}), deletedAt: IsNull() } });
+    async listDerivedSalesOrders(scope, customerId, selectedIdentities) {
+        const identities = selectedIdentities ?? await this.selectAllDerivedSalesOrderIdentities(scope, customerId, {}, false);
+        if (!identities.length)
+            return [];
+        const contractIds = [...new Set(identities.map(identity => identity.customerContractId))];
+        const purchaseIds = [...new Set(identities.map(identity => identity.purchaseOrderId))];
+        const selectedKeys = new Set(identities.map(identity => derivedOrderKey(identity.customerContractId, identity.purchaseOrderId)));
+        const [customers, contracts, purchases, manuals, lines] = await Promise.all([
+            this.dataSource.getRepository(Customer).find({ where: { ...activeScope(scope), ...(customerId ? { id: customerId } : {}), deletedAt: IsNull() } }),
+            this.dataSource.getRepository(CustomerContract).find({ where: { ...activeScope(scope), id: In(contractIds), ...(customerId ? { customerId } : {}), deletedAt: IsNull() } }),
+            this.dataSource.getRepository(PurchaseOrder).find({ where: { ...activeScope(scope), id: In(purchaseIds), deletedAt: IsNull() } }),
+            this.dataSource.getRepository(DerivedSalesOrderManualData).find({ where: { ...activeScope(scope), customerContractId: In(contractIds), purchaseOrderId: In(purchaseIds), deletedAt: IsNull() } }),
+            this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId: In(purchaseIds), deletedAt: IsNull() }, order: { lineNumber: 'ASC' } })
+        ]);
         const customerMap = new Map(customers.map(customer => [customer.id, customer]));
-        const contracts = await contractRepo.find({ where: { ...activeScope(scope), ...(customerId ? { customerId } : {}), deletedAt: IsNull() } });
-        const purchases = await purchaseRepo.find({ where: { ...activeScope(scope), deletedAt: IsNull() } });
+        const manualMap = new Map(manuals.map(manual => [derivedOrderKey(manual.customerContractId, manual.purchaseOrderId), manual]));
+        const linesByPurchase = groupBy(lines, line => line.purchaseOrderId);
+        const riskRows = lines.length ? await this.dataSource.getRepository(ProductComplianceMatch).find({ where: { ...activeScope(scope), purchaseOrderLineId: In(lines.map(line => line.id)), deletedAt: IsNull() } }) : [];
+        const controlledGoodsIds = [...new Set(riskRows.map(match => match.controlledGoodsId))];
+        const controlledGoods = controlledGoodsIds.length ? await this.dataSource.getRepository(ControlledGoodsRecord).find({ where: { ...activeScope(scope), id: In(controlledGoodsIds), deletedAt: IsNull() } }) : [];
+        const controlledGoodsById = new Map(controlledGoods.map(item => [item.id, item]));
+        const risksByLine = groupBy(riskRows, match => match.purchaseOrderLineId);
+        const purchasesByBaseCode = groupBy(purchases, purchase => parsePurchaseContractNo(purchase.contractNo).baseCode);
         const results = [];
         for (const contract of contracts) {
-            const customer = customerMap.get(contract.customerId) ?? await customerRepo.findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() } });
+            const customer = customerMap.get(contract.customerId);
             if (!customer)
                 continue;
             const baseCode = parseCustomerContractNo(contract.contractNo).baseCode;
-            for (const purchase of purchases.filter(item => parsePurchaseContractNo(item.contractNo).baseCode === baseCode)) {
-                const manual = await manualRepo.findOne({ where: { ...activeScope(scope), customerContractId: contract.id, purchaseOrderId: purchase.id, deletedAt: IsNull() } });
-                const effectiveRate = manual?.pricingProfitRateOverride ?? customer.defaultPricingProfitRate;
+            for (const purchase of purchasesByBaseCode.get(baseCode) ?? []) {
+                if (!selectedKeys.has(derivedOrderKey(contract.id, purchase.id)))
+                    continue;
+                const manual = manualMap.get(derivedOrderKey(contract.id, purchase.id));
+                const effectiveRate = manual?.pricingProfitRateOverride ?? (customer.pricingProfitRateStatus === 'CONFIGURED' ? customer.defaultPricingProfitRate : null);
                 if (effectiveRate == null)
                     continue;
                 const source = manual?.pricingProfitRateOverride != null ? 'ORDER_OVERRIDE' : 'CUSTOMER_DEFAULT';
-                const lines = await lineRepo.find({ where: { ...activeScope(scope), purchaseOrderId: purchase.id, deletedAt: IsNull() }, order: { lineNumber: 'ASC' } });
-                const riskRows = lines.length ? await this.dataSource.getRepository(ProductComplianceMatch).find({ where: { ...activeScope(scope), purchaseOrderLineId: In(lines.map(line => line.id)), deletedAt: IsNull() } }) : [];
-                const derivedLines = lines.map(line => {
+                const derivedLines = (linesByPurchase.get(purchase.id) ?? []).map(line => {
                     const pricing = deriveSalesLine({ purchaseUnitPriceCny: line.unitPriceTaxIncluded, quantity: line.quantity }, effectiveRate);
-                    return { purchaseOrderLineId: line.id, productName: line.productName, englishName: line.englishName, productDescription: line.productDescription, modelSpecification: line.modelSpecification, unit: line.unit, quantity: line.quantity, hsCode: line.hsCode, ...pricing, complianceMatches: riskRows.filter(match => match.purchaseOrderLineId === line.id).map(match => ({ controlledGoodsId: match.controlledGoodsId, catalogType: match.catalogType, matchMethod: match.matchMethod, similarityScore: match.similarityScore })) };
+                    return {
+                        purchaseOrderLineId: line.id, productName: line.productName, englishName: line.englishName, productDescription: line.productDescription,
+                        modelSpecification: line.modelSpecification, unit: line.unit, quantity: line.quantity, hsCode: line.hsCode, hsCodeStatus: line.hsCodeStatus,
+                        vatRate: line.vatRate, refundRate: line.refundRate, originCountry: line.originCountry, domesticSourceLocation: line.domesticSourceLocation,
+                        ...pricing,
+                        complianceMatches: (risksByLine.get(line.id) ?? []).map(match => {
+                            const controlledItem = controlledGoodsById.get(match.controlledGoodsId);
+                            return {
+                                controlledGoodsId: match.controlledGoodsId,
+                                catalogType: match.catalogType,
+                                matchMethod: match.matchMethod,
+                                similarityScore: match.similarityScore,
+                                matchedItemName: controlledItem?.productName ?? null,
+                                riskDescription: controlledItem?.controlDescription ?? null,
+                                recommendation: CATALOG_RISK_RECOMMENDATIONS[match.catalogType]
+                            };
+                        })
+                    };
                 });
                 const amount = derivedLines.reduce((sum, line) => sum.plus(line.salesLineAmountCny), new Decimal(0));
                 const received = new Decimal(manual?.receivedAmountCny ?? 0);
                 results.push({ customerContractId: contract.id, purchaseOrderId: purchase.id, customerId: customer.id, salesOrderNo: parsePurchaseContractNo(purchase.contractNo).salesOrderNo, customerContractNo: contract.contractNo, purchaseContractNo: purchase.contractNo, orderDate: purchase.orderDate, currencyCode: 'CNY', pricingProfitRateSource: source, effectivePricingProfitRate: effectiveRate, orderAmountCny: amount.toFixed(0), receivedAmountCny: received.toFixed(2), unreceivedAmountCny: Decimal.max(amount.minus(received), 0).toFixed(2), lines: derivedLines });
             }
         }
-        return results;
+        return results.sort(compareDerivedSalesOrders);
+    }
+    derivedSalesIdentityQuery(scope, customerId, parameters, includeParties) {
+        const qb = this.dataSource.getRepository(CustomerContract).createQueryBuilder('contract')
+            .innerJoin(Customer, 'customer', 'customer.id = contract."customerId" AND customer."tenantId" = contract."tenantId" AND customer."organizationId" = contract."organizationId" AND customer."deletedAt" IS NULL')
+            .innerJoin(PurchaseOrder, 'purchase', `purchase."tenantId" = contract."tenantId" AND purchase."organizationId" = contract."organizationId" AND purchase."deletedAt" IS NULL AND contract."normalizedContractNo" = regexp_replace(purchase."normalizedContractNo", '(-[0-9]+)?C$', '') || 'X'`)
+            .leftJoin(DerivedSalesOrderManualData, 'manual', 'manual."customerContractId" = contract.id AND manual."purchaseOrderId" = purchase.id AND manual."tenantId" = contract."tenantId" AND manual."organizationId" = contract."organizationId" AND manual."deletedAt" IS NULL')
+            .leftJoin(Supplier, 'supplier', 'supplier.id = purchase."supplierId" AND supplier."tenantId" = purchase."tenantId" AND supplier."organizationId" = purchase."organizationId" AND supplier."deletedAt" IS NULL')
+            .where('contract."tenantId" = :tenantId AND contract."organizationId" = :organizationId AND contract."deletedAt" IS NULL', activeScope(scope))
+            .andWhere("(manual.\"pricingProfitRateOverride\" IS NOT NULL OR (customer.\"pricingProfitRateStatus\" = 'CONFIGURED' AND customer.\"defaultPricingProfitRate\" IS NOT NULL))")
+            .select('contract.id', 'customerContractId').addSelect('purchase.id', 'purchaseOrderId');
+        if (customerId)
+            qb.andWhere('customer.id = :customerId', { customerId });
+        const fuzzy = (expression, key) => { if (hasQueryValue(parameters[key]))
+            qb.andWhere(`${expression} ILIKE :${key}`, { [key]: `%${String(parameters[key]).trim()}%` }); };
+        fuzzy(`regexp_replace(purchase."contractNo", 'C$', 'X')`, 'salesOrderNo');
+        fuzzy('contract."contractNo"', 'customerContractNo');
+        fuzzy('purchase."contractNo"', 'purchaseContractNo');
+        if (includeParties) {
+            fuzzy('customer.name', 'customerName');
+            fuzzy('supplier.name', 'supplierName');
+        }
+        const date = parameters.orderDate && typeof parameters.orderDate === 'object' && !Array.isArray(parameters.orderDate) ? parameters.orderDate : {};
+        if (hasQueryValue(date.from))
+            qb.andWhere('purchase."orderDate" >= :orderDateFrom', { orderDateFrom: date.from });
+        if (hasQueryValue(date.to))
+            qb.andWhere('purchase."orderDate" <= :orderDateTo', { orderDateTo: date.to });
+        const effectiveRate = 'COALESCE(manual."pricingProfitRateOverride", customer."defaultPricingProfitRate")';
+        const amount = `(SELECT COALESCE(SUM(ROUND(ROUND(sales_line."unitPriceTaxIncluded" * (1 + ${effectiveRate}), 0) * sales_line.quantity, 0)), 0) FROM plugin_trade_compliance_purchase_order_line sales_line WHERE sales_line."purchaseOrderId" = purchase.id AND sales_line."tenantId" = purchase."tenantId" AND sales_line."organizationId" = purchase."organizationId" AND sales_line."deletedAt" IS NULL)`;
+        const received = 'COALESCE(manual."receivedAmountCny", 0)';
+        if (parameters.paymentStatus === 'UNPAID')
+            qb.andWhere(`${received} <= 0`);
+        if (parameters.paymentStatus === 'PARTIAL')
+            qb.andWhere(`${received} > 0 AND ${received} < ${amount}`);
+        if (parameters.paymentStatus === 'PAID')
+            qb.andWhere(`${received} >= ${amount}`);
+        return qb;
+    }
+    async selectAllDerivedSalesOrderIdentities(scope, customerId, parameters, includeParties) {
+        return this.derivedSalesIdentityQuery(scope, customerId, parameters, includeParties).orderBy('contract.id', 'ASC').addOrderBy('purchase.id', 'ASC').getRawMany();
+    }
+    async selectDerivedSalesOrderIdentities(scope, customerId, query, includeParties) {
+        const pageSize = Math.min(200, Math.max(1, Number(query.pageSize ?? 20)));
+        const identityQuery = this.derivedSalesIdentityQuery(scope, customerId, query.parameters ?? {}, includeParties);
+        const identitySql = identityQuery.getQuery();
+        const identityParameters = identityQuery.getParameters();
+        const countRow = await this.dataSource.createQueryBuilder().select('COUNT(*)', 'total').from(`(${identitySql})`, 'identity').setParameters(identityParameters).getRawOne();
+        const total = Number(countRow?.total ?? 0);
+        const pageCount = Math.max(1, Math.ceil(total / pageSize));
+        const page = Math.min(pageCount, Math.max(1, Number(query.page ?? 1)));
+        const items = await this.dataSource.createQueryBuilder()
+            .select('identity."customerContractId"', 'customerContractId').addSelect('identity."purchaseOrderId"', 'purchaseOrderId')
+            .from(`(${identitySql})`, 'identity').setParameters(identityParameters)
+            .orderBy('identity."customerContractId"', 'ASC').addOrderBy('identity."purchaseOrderId"', 'ASC')
+            .offset((page - 1) * pageSize).limit(pageSize).getRawMany();
+        return { items: items, total, page, pageSize };
     }
     async saveCustomerProfitRate(scope, customerId, rate) {
-        const repo = this.dataSource.getRepository(Customer);
-        const customer = await required(repo.findOne({ where: { ...activeScope(scope), id: customerId, deletedAt: IsNull() } }), '客户不存在');
         if (new Decimal(rate).isNegative())
             throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户默认利润率不能小于 0');
-        await this.assertExistingReceiptsRemainValid(scope, customerId, rate);
-        customer.defaultPricingProfitRate = rate;
-        customer.updatedById = scope.userId ?? null;
-        return repo.save(customer);
+        return this.dataSource.transaction(async (manager) => {
+            const customerRepo = manager.getRepository(Customer);
+            const customer = await required(customerRepo.findOne({ where: { ...activeScope(scope), id: customerId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户不存在');
+            const contracts = await manager.getRepository(CustomerContract).find({ where: { ...activeScope(scope), customerId, deletedAt: IsNull() }, order: { id: 'ASC' } });
+            const baseCodes = new Set(contracts.map(contract => parseCustomerContractNo(contract.contractNo).baseCode));
+            const purchaseRepo = manager.getRepository(PurchaseOrder);
+            const relatedIds = (await purchaseRepo.find({ where: { ...activeScope(scope), deletedAt: IsNull() } })).filter(purchase => baseCodes.has(parsePurchaseContractNo(purchase.contractNo).baseCode)).map(purchase => purchase.id).sort();
+            const purchases = relatedIds.length ? await purchaseRepo.find({ where: { ...activeScope(scope), id: In(relatedIds), deletedAt: IsNull() }, order: { id: 'ASC' }, lock: { mode: 'pessimistic_write' } }) : [];
+            const purchaseIds = purchases.map(purchase => purchase.id);
+            const lines = purchaseIds.length ? await manager.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId: In(purchaseIds), deletedAt: IsNull() }, order: { purchaseOrderId: 'ASC', id: 'ASC' }, lock: { mode: 'pessimistic_write' } }) : [];
+            const contractIds = contracts.map(contract => contract.id);
+            const manuals = contractIds.length && purchaseIds.length ? await manager.getRepository(DerivedSalesOrderManualData).find({ where: { ...activeScope(scope), customerContractId: In(contractIds), purchaseOrderId: In(purchaseIds), deletedAt: IsNull() }, order: { customerContractId: 'ASC', purchaseOrderId: 'ASC' }, lock: { mode: 'pessimistic_write' } }) : [];
+            const linesByPurchase = groupBy(lines, line => line.purchaseOrderId);
+            for (const manual of manuals.filter(item => item.pricingProfitRateOverride == null)) {
+                const orderAmount = derivedOrderAmount(linesByPurchase.get(manual.purchaseOrderId) ?? [], rate);
+                assertReceivedAmount(orderAmount, manual.receivedAmountCny);
+            }
+            customer.defaultPricingProfitRate = rate;
+            customer.updatedById = scope.userId ?? null;
+            customer.pricingProfitRateStatus = 'CONFIGURED';
+            return customerRepo.save(customer);
+        });
     }
     async updateCustomer(scope, id, input) {
-        const repo = this.dataSource.getRepository(Customer);
-        const item = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '客户不存在');
-        Object.assign(item, pick(input, ['code', 'name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
-        item.normalizedName = normalizeExactName(item.name);
-        item.updatedById = scope.userId ?? null;
-        const saved = await repo.save(item);
+        const saved = await this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(Customer);
+            const item = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户不存在');
+            const code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Customer, 'code' in input ? input.code : item.code, item.id);
+            Object.assign(item, pick(input, ['name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
+            item.code = code;
+            item.normalizedName = normalizeExactName(item.name);
+            item.updatedById = scope.userId ?? null;
+            return repo.save(item);
+        });
         await this.recalculateCompanyRisks(scope, 'SOURCE_CHANGED');
         return saved;
     }
     async saveDerivedManualData(scope, customerContractId, purchaseOrderId, input) {
-        const repo = this.dataSource.getRepository(DerivedSalesOrderManualData);
-        let row = await repo.findOne({ where: { ...activeScope(scope), customerContractId, purchaseOrderId, deletedAt: IsNull() } });
-        if (!row)
-            row = repo.create({ ...auditScope(scope), customerContractId, purchaseOrderId, pricingProfitRateOverride: null, receivedAmountCny: '0' });
-        const override = input.pricingProfitRateOverride === undefined ? row.pricingProfitRateOverride : normalizeOptionalDecimalInput(input.pricingProfitRateOverride);
-        if (override != null && new Decimal(override).isNegative())
-            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '订单利润率不能小于 0');
-        row.pricingProfitRateOverride = override;
-        const derived = await this.deriveSingleOrder(scope, customerContractId, purchaseOrderId, row.pricingProfitRateOverride);
-        const received = input.receivedAmountCny ?? row.receivedAmountCny;
-        assertReceivedAmount(derived.orderAmountCny, received);
-        row.receivedAmountCny = received;
-        row.updatedById = scope.userId ?? null;
-        return repo.save(row);
+        return this.dataSource.transaction(async (manager) => {
+            const contract = await required(manager.getRepository(CustomerContract).findOne({ where: { ...activeScope(scope), id: customerContractId, deletedAt: IsNull() } }), '客户合同不存在');
+            const customer = await required(manager.getRepository(Customer).findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户不存在');
+            const purchase = await required(manager.getRepository(PurchaseOrder).findOne({ where: { ...activeScope(scope), id: purchaseOrderId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '采购订单不存在');
+            if (parseCustomerContractNo(contract.contractNo).baseCode !== parsePurchaseContractNo(purchase.contractNo).baseCode)
+                throw new DomainError(DomainErrorCodes.DERIVED_LINK_CONFLICT, '客户合同与采购订单未形成派生销售订单');
+            const lines = await manager.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() }, order: { id: 'ASC' }, lock: { mode: 'pessimistic_write' } });
+            const repo = manager.getRepository(DerivedSalesOrderManualData);
+            const where = { ...activeScope(scope), customerContractId, purchaseOrderId, deletedAt: IsNull() };
+            let row = await repo.findOne({ where, lock: { mode: 'pessimistic_write' } });
+            if (!row) {
+                await repo.createQueryBuilder().insert().into(DerivedSalesOrderManualData).values({ ...auditScope(scope), customerContractId, purchaseOrderId, pricingProfitRateOverride: null, receivedAmountCny: '0' }).orIgnore().execute();
+                row = await required(repo.findOne({ where, lock: { mode: 'pessimistic_write' } }), '销售订单人工维护数据创建失败');
+            }
+            const override = input.pricingProfitRateOverride === undefined ? row.pricingProfitRateOverride : normalizeOptionalDecimalInput(input.pricingProfitRateOverride);
+            if (override != null && new Decimal(override).isNegative())
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '订单利润率不能小于 0');
+            const effectiveRate = override ?? (customer.pricingProfitRateStatus === 'CONFIGURED' ? customer.defaultPricingProfitRate : null);
+            if (effectiveRate == null)
+                throw new DomainError(DomainErrorCodes.CUSTOMER_PROFIT_RATE_REQUIRED, '客户默认利润率未维护');
+            const received = input.receivedAmountCny ?? row.receivedAmountCny;
+            assertReceivedAmount(derivedOrderAmount(lines, effectiveRate), received);
+            if (input.pricingProfitRateOverride !== undefined)
+                row.pricingProfitRateOverride = override;
+            if (input.receivedAmountCny !== undefined)
+                row.receivedAmountCny = input.receivedAmountCny;
+            row.updatedById = scope.userId ?? null;
+            return repo.save(row);
+        });
     }
     async softDelete(scope, entityType, id) {
-        const map = { controlledGoods: ControlledGoodsRecord, sanctionedCompany: SanctionedCompanyRecord, supplier: Supplier, purchaseOrder: PurchaseOrder, purchaseLine: PurchaseOrderLine, customer: Customer, customerContract: CustomerContract, generatedFile: GeneratedSalesFile, exchangeRate: MonthlySafeExchangeRate };
+        const map = { controlledGoods: ControlledGoodsRecord, sanctionedCompany: SanctionedCompanyRecord, supplier: Supplier, purchaseOrder: PurchaseOrder, purchaseLine: PurchaseOrderLine, customer: Customer, customerContract: CustomerContract, generatedFile: GeneratedSalesFile };
         const entity = map[entityType];
         if (!entity)
             throw new DomainError(DomainErrorCodes.INVALID_INPUT, '不支持的删除类型', { entityType });
-        if (entity === Customer) {
-            const count = await this.dataSource.getRepository(CustomerContract).count({ where: { ...activeScope(scope), customerId: id, deletedAt: IsNull() } });
-            if (count)
-                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户存在有效合同，不能删除', { contractCount: count });
-        }
-        if (entity === Supplier) {
-            const count = await this.dataSource.getRepository(PurchaseOrder).count({ where: { ...activeScope(scope), supplierId: id, deletedAt: IsNull() } });
-            if (count)
-                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '供应商存在有效采购订单，不能删除', { orderCount: count });
-        }
-        const repo = this.dataSource.getRepository(entity);
-        const row = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '记录不存在');
         if (entity === PurchaseOrderLine)
-            await this.assertPurchaseOrderReceiptsRemainValid(scope, row.purchaseOrderId, undefined, row.id);
-        row.deletedAt = new Date();
-        row.deletedById = scope.userId ?? null;
-        row.deleteOperation = 'USER_DELETE';
-        row.updatedById = scope.userId ?? null;
-        await repo.save(row);
-        if (entity === PurchaseOrder)
-            await this.cascadePurchaseOrder(scope, id);
-        if (entity === CustomerContract)
-            await this.cascadeCustomerContract(scope, id);
-        if (entity === PurchaseOrderLine) {
-            await this.dataSource.getRepository(ProductComplianceMatch).update({ ...activeScope(scope), purchaseOrderLineId: id, deletedAt: IsNull() }, { deletedAt: new Date(), invalidationReason: 'SOURCE_CHANGED' });
-        }
+            return this.deletePurchaseLine(scope, id);
+        const row = await this.dataSource.transaction(async (manager) => {
+            if (entity === Customer) {
+                const count = await manager.getRepository(CustomerContract).count({ where: { ...activeScope(scope), customerId: id, deletedAt: IsNull() } });
+                if (count)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户存在有效合同，不能删除', { contractCount: count });
+            }
+            if (entity === Supplier) {
+                const count = await manager.getRepository(PurchaseOrder).count({ where: { ...activeScope(scope), supplierId: id, deletedAt: IsNull() } });
+                if (count)
+                    throw new DomainError(DomainErrorCodes.INVALID_INPUT, '供应商存在有效采购订单，不能删除', { orderCount: count });
+            }
+            const repo = manager.getRepository(entity);
+            const target = await required(repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '记录不存在');
+            const now = new Date();
+            target.deletedAt = now;
+            target.deletedById = scope.userId ?? null;
+            target.deleteOperation = 'USER_DELETE';
+            target.updatedById = scope.userId ?? null;
+            await repo.save(target);
+            if (entity === PurchaseOrder)
+                await this.cascadePurchaseOrder(manager, scope, id, now);
+            if (entity === CustomerContract)
+                await this.cascadeCustomerContract(manager, scope, id, now);
+            return target;
+        });
         if (entity === ControlledGoodsRecord)
             await this.recalculateProductRisks(scope, 'CATALOG_CHANGED');
         if (entity === SanctionedCompanyRecord)
@@ -489,118 +1208,354 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
     }
     async listGeneratedFiles(scope, query = {}) { return this.pagedQuery(GeneratedSalesFile, scope, query, ['salesOrderNoSnapshot', 'documentNo', 'fileName'], { customerContractId: query.parameters?.customerContractId, purchaseOrderId: query.parameters?.purchaseOrderId, fileType: query.parameters?.fileType }); }
     async settings(scope) {
-        const [{ risk, profit }, company, banks, rates] = await Promise.all([
-            this.bootstrapSettings(scope),
+        await this.bootstrapSettings(scope);
+        const [risk, profit, company, banks, rates] = await Promise.all([
+            this.dataSource.getRepository(RiskNoticeSettings).findOne({ where: activeScope(scope) }),
+            this.dataSource.getRepository(ProfitRuleSettings).findOne({ where: activeScope(scope) }),
             this.dataSource.getRepository(CompanySettings).findOne({ where: activeScope(scope) }),
             this.dataSource.getRepository(BankAccountSettings).find({ where: activeScope(scope), order: { bankType: 'ASC' } }),
             this.dataSource.getRepository(MonthlySafeExchangeRate).find({ where: { ...activeScope(scope), deletedAt: IsNull() }, order: { year: 'DESC', month: 'DESC' } })
         ]);
         return { risk, company, banks, profit, rates };
     }
-    async saveSettings(scope, type, input) {
-        const entityMap = { risk: RiskNoticeSettings, company: CompanySettings, bank: BankAccountSettings, profit: ProfitRuleSettings, rate: MonthlySafeExchangeRate };
-        const entity = entityMap[type];
-        const repo = this.dataSource.getRepository(entity);
-        const where = { ...activeScope(scope) };
-        if (type === 'bank')
-            where.bankType = input.bankType;
-        if (type === 'rate') {
-            where.year = input.year;
-            where.month = input.month;
-            where.currencyCode = 'USD';
-            where.deletedAt = IsNull();
+    async saveSettings(scope, type, input, expectedRevision) {
+        if (type === 'risk') {
+            const changes = {};
+            if ('content' in input)
+                changes.content = sanitizeRiskNoticeContent(input.content);
+            return this.persistSettings(scope, 'RISK', RiskNoticeSettings, activeScope(scope), settingsCreateScope(scope), changes, expectedRevision);
         }
-        let row = await repo.findOne({ where });
-        const before = row ? { ...row } : null;
-        if (!row)
-            row = repo.create({ ...auditScope(scope), ...(type === 'rate' ? { currencyCode: 'USD' } : {}) });
-        const allowed = { risk: ['content'], company: ['logoFileId', 'companyNameZh', 'companyNameEn', 'unifiedSocialCreditCode', 'addressZh', 'addressEn', 'phone', 'email'], bank: ['bankType', 'beneficiary', 'bankName', 'bankAddress', 'cnapsCode', 'accountNo', 'swiftCode'], profit: ['status', 'ruleVersion', 'minimumOrderProfitRate', 'exchangeCostMinimum', 'exchangeCostMaximum'], rate: ['year', 'month', 'usdToCnyRate', 'sourceReference'] };
-        Object.assign(row, pick(input, allowed[type]));
-        row.updatedById = scope.userId ?? null;
-        row.revision = nextSettingsRevision(before?.revision);
-        const saved = await repo.save(row);
-        await this.dataSource.getRepository(SettingsHistory).save(this.dataSource.getRepository(SettingsHistory).create({ ...activeScope(scope), settingsType: type.toUpperCase(), settingsId: saved.id, operationType: 'EDIT', snapshotVersion: 'v1', beforeRevision: before?.revision ?? 0, afterRevision: saved.revision ?? 1, beforeSnapshot: before, afterSnapshot: saved, operatedById: scope.userId ?? null }));
-        return saved;
+        if (type === 'company') {
+            const changes = {};
+            for (const field of ['logoFileId', 'companyNameZh', 'companyNameEn', 'unifiedSocialCreditCode', 'addressZh', 'addressEn', 'phone', 'email'])
+                if (field in input)
+                    changes[field] = settingNullableString(input[field], field);
+            return this.persistCompanySettings(scope, changes, expectedRevision);
+        }
+        if (type === 'bank') {
+            const values = validateBankSettingsInput(input);
+            return this.persistSettings(scope, 'BANK', BankAccountSettings, { ...activeScope(scope), bankType: values.bankType }, { ...settingsCreateScope(scope), bankType: values.bankType }, values, expectedRevision);
+        }
+        if (type === 'profit') {
+            const values = validateProfitSettingsInput(input);
+            return this.persistSettings(scope, 'PROFIT', ProfitRuleSettings, activeScope(scope), { ...settingsCreateScope(scope), ...DEFAULT_PROFIT_RULE }, values, expectedRevision);
+        }
+        const parsed = parseExchangeRateInput(input);
+        const sourceReference = 'sourceReference' in input ? settingString(input.sourceReference, '来源说明').trim() : '人工汇率';
+        if (!sourceReference)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '来源说明为必填项');
+        return this.persistMonthlyRate(scope, input, { ...parsed, sourceReference }, expectedRevision);
     }
-    async analytics(scope, filters = {}) {
-        const purchases = await this.dataSource.getRepository(PurchaseOrder).find({ where: { ...activeScope(scope), deletedAt: IsNull() } });
-        const suppliers = await this.dataSource.getRepository(Supplier).find({ where: { ...activeScope(scope), deletedAt: IsNull() } });
-        const lines = await this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), deletedAt: IsNull() } });
-        const derived = await this.listDerivedSalesOrders(scope);
-        const supplierMap = new Map(suppliers.map(item => [item.id, item.name]));
-        const search = String(filters.search ?? '').trim().toLocaleLowerCase();
-        const dateFrom = String(filters.orderDateFrom ?? '').trim();
-        const dateTo = String(filters.orderDateTo ?? '').trim();
-        const unpaidOnly = filters.unpaidOnly === true || filters.unpaidOnly === 'true';
-        const unreceivedOnly = filters.unreceivedOnly === true || filters.unreceivedOnly === 'true';
-        const purchaseRows = purchases.map(order => ({ ...order, supplierName: supplierMap.get(order.supplierId) ?? '', unpaidAmountCny: Decimal.max(new Decimal(order.contractAmountCny).minus(order.paidAmountCny), 0).toFixed(2), unrefundedAmountCny: this.unrefundedAmount(order, lines.filter(line => line.purchaseOrderId === order.id)) })).filter(row => {
-            const orderLines = lines.filter(line => line.purchaseOrderId === row.id);
-            const text = [row.contractNo, row.supplierName, ...orderLines.flatMap(line => [line.productName, line.hsCode])].filter(Boolean).join(' ').toLocaleLowerCase();
-            return (!search || text.includes(search)) && (!dateFrom || String(row.orderDate ?? '') >= dateFrom) && (!dateTo || String(row.orderDate ?? '') <= dateTo) && (!unpaidOnly || new Decimal(row.unpaidAmountCny).gt(0));
-        });
-        const customerNames = new Map((await this.dataSource.getRepository(Customer).find({ where: { ...activeScope(scope), deletedAt: IsNull() } })).map(item => [item.id, item.name]));
-        const salesRows = derived.filter(row => {
-            const text = [row.salesOrderNo, row.purchaseContractNo, row.customerContractNo, customerNames.get(row.customerId), ...row.lines.flatMap(line => [line.productName, line.hsCode])].filter(Boolean).join(' ').toLocaleLowerCase();
-            return (!search || text.includes(search)) && (!dateFrom || String(row.orderDate ?? '') >= dateFrom) && (!dateTo || String(row.orderDate ?? '') <= dateTo) && (!unreceivedOnly || new Decimal(row.unreceivedAmountCny).gt(0));
-        });
-        const purchaseIds = new Set(purchaseRows.map(row => row.id));
-        const filteredLines = lines.filter(line => purchaseIds.has(line.purchaseOrderId));
-        const currentYear = new Date().getFullYear();
-        return {
-            purchase: summarizeRows(purchaseRows, 'contractAmountCny', 'paidAmountCny', 'unpaidAmountCny'),
-            sales: summarizeRows(salesRows, 'orderAmountCny', 'receivedAmountCny', 'unreceivedAmountCny'),
-            annualPurchaseCount: purchaseRows.filter(row => row.orderDate?.startsWith(String(currentYear))).length,
-            annualSalesCount: salesRows.filter(row => row.orderDate?.startsWith(String(currentYear))).length,
-            purchaseTop5: topProducts(filteredLines, 'lineAmountTaxIncluded'),
-            salesTop5: topDerivedProducts(salesRows),
-            filters
-        };
+    async restoreSettingsDefault(scope, input) {
+        if (input.settingsType === 'risk')
+            return this.persistSettings(scope, 'RISK', RiskNoticeSettings, activeScope(scope), settingsCreateScope(scope), { content: DEFAULT_RISK_NOTICE }, input.expectedRevision, 'RESTORE_DEFAULT');
+        if (input.settingsType === 'company') {
+            const builtinLogo = await this.ensureBuiltinCompanyLogo(scope);
+            return this.persistCompanySettings(scope, { ...DEFAULT_COMPANY, logoFileId: builtinLogo.id }, input.expectedRevision, 'RESTORE_DEFAULT');
+        }
+        if (input.settingsType === 'profit')
+            return this.persistSettings(scope, 'PROFIT', ProfitRuleSettings, activeScope(scope), { ...settingsCreateScope(scope), ...DEFAULT_PROFIT_RULE }, { ...DEFAULT_PROFIT_RULE }, input.expectedRevision, 'RESTORE_DEFAULT');
+        const bankType = parseBankAccountType(input.bankType);
+        const defaults = DEFAULT_BANKS.find(item => item.bankType === bankType);
+        if (!defaults)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '银行默认配置不存在', { bankType });
+        return this.persistSettings(scope, 'BANK', BankAccountSettings, { ...activeScope(scope), bankType }, { ...settingsCreateScope(scope), bankType }, { ...defaults }, input.expectedRevision, 'RESTORE_DEFAULT');
     }
-    async recalculateProductRisks(scope, reason) {
-        const matchRepo = this.dataSource.getRepository(ProductComplianceMatch);
-        const now = new Date();
-        await matchRepo.update({ ...activeScope(scope), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: reason });
-        const [lines, goods] = await Promise.all([
-            this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), deletedAt: IsNull() } }),
-            this.dataSource.getRepository(ControlledGoodsRecord).find({ where: { ...activeScope(scope), deletedAt: IsNull() } })
-        ]);
-        for (const line of lines) {
-            const lineHs = normalizeHsCode(line.hsCode);
-            const hsMatches = lineHs ? goods.filter(item => item.normalizedHsCode && item.normalizedHsCode === lineHs) : [];
-            const candidates = hsMatches.length ? hsMatches : goods.filter(item => isProductNameMatch(line.productName, item.productName));
-            for (const item of candidates) {
-                const contains = normalizeForProductMatch(line.productName).includes(normalizeForProductMatch(item.productName)) || normalizeForProductMatch(item.productName).includes(normalizeForProductMatch(line.productName));
-                await matchRepo.save(matchRepo.create({ ...createdScope(scope), purchaseOrderLineId: line.id, controlledGoodsId: item.id, catalogType: item.catalogType, matchMethod: hsMatches.length ? 'HS_CODE_EXACT' : contains ? 'NAME_CONTAINS' : 'NAME_DICE', similarityScore: null, matchingRuleVersion: 'PRODUCT_MATCH_V1', matchingThreshold: '0.65', matchedAt: now, deletedAt: null, invalidationReason: null }));
-            }
-            line.complianceCheckedAt = now;
-            await this.dataSource.getRepository(PurchaseOrderLine).save(line);
+    async deleteMonthlyRate(scope, input) {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(MonthlySafeExchangeRate);
+            const row = await required(repo.findOne({ where: { ...activeScope(scope), id: input.id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '月度美元汇率不存在');
+            assertExpectedRevision(row.revision, input.expectedRevision);
+            const beforeRevision = row.revision;
+            const beforeSnapshot = settingsSnapshot('RATE', row);
+            row.deletedAt = new Date();
+            row.deletedById = scope.userId ?? null;
+            row.deleteOperation = 'USER_DELETE';
+            row.updatedById = scope.userId ?? null;
+            row.revision = nextSettingsRevision(beforeRevision);
+            const saved = await repo.save(row);
+            await saveSettingsHistory(manager, scope, 'RATE', saved.id, 'DELETE', beforeRevision, beforeSnapshot, saved);
+            return saved;
+        });
+    }
+    async persistSettings(scope, settingsType, entity, where, create, changes, expectedRevision, operationType = 'EDIT') {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(entity);
+            let row = await repo.findOne({ where, lock: { mode: 'pessimistic_write' } });
+            const beforeRevision = row?.revision ?? 0;
+            assertExpectedRevision(beforeRevision, parseExpectedRevision(expectedRevision, true));
+            const beforeSnapshot = row ? settingsSnapshot(settingsType, row) : null;
+            if (!row)
+                row = repo.create(create);
+            repo.merge(row, changes);
+            row.updatedById = scope.userId ?? null;
+            row.revision = nextSettingsRevision(beforeRevision);
+            const saved = await repo.save(row);
+            await saveSettingsHistory(manager, scope, settingsType, saved.id, operationType, beforeRevision, beforeSnapshot, saved);
+            return saved;
+        });
+    }
+    async persistCompanySettings(scope, requestedChanges, expectedRevision, operationType = 'EDIT') {
+        const changes = { ...requestedChanges };
+        const requestedLogoAssetId = typeof changes.logoFileId === 'string' ? changes.logoFileId : null;
+        let replacedStorageFileId = null;
+        try {
+            const saved = await this.dataSource.transaction(async (manager) => {
+                const repo = manager.getRepository(CompanySettings);
+                let row = await repo.findOne({ where: activeScope(scope), lock: { mode: 'pessimistic_write' } });
+                const beforeRevision = row?.revision ?? 0;
+                assertExpectedRevision(beforeRevision, parseExpectedRevision(expectedRevision, true));
+                const beforeSnapshot = row ? settingsSnapshot('COMPANY', row) : null;
+                const previousLogoAssetId = row?.logoFileId ?? null;
+                if (requestedLogoAssetId) {
+                    const assetRepo = manager.getRepository(ManagedAsset);
+                    const selected = await required(assetRepo.findOne({ where: { ...activeScope(scope), id: requestedLogoAssetId, assetType: 'COMPANY_LOGO', deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '公司 Logo 资产不存在');
+                    if (selected.status === 'DRAFT') {
+                        if (selected.storageType !== 'MANAGED' || selected.ownerId !== (scope.userId ?? null))
+                            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '公司 Logo 草稿不属于当前操作人');
+                        selected.status = 'ACTIVE';
+                        selected.updatedById = scope.userId ?? null;
+                        await assetRepo.save(selected);
+                    }
+                    else if (selected.status !== 'ACTIVE')
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '公司 Logo 资产状态无效');
+                    if (previousLogoAssetId && previousLogoAssetId !== selected.id) {
+                        const previous = await assetRepo.findOne({ where: { ...activeScope(scope), id: previousLogoAssetId, assetType: 'COMPANY_LOGO', status: 'ACTIVE', deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } });
+                        if (previous?.storageType === 'MANAGED') {
+                            previous.deletedAt = new Date();
+                            previous.deletedById = scope.userId ?? null;
+                            previous.deleteOperation = 'USER_DELETE';
+                            previous.updatedById = scope.userId ?? null;
+                            replacedStorageFileId = previous.storageFileId;
+                            await assetRepo.save(previous);
+                        }
+                    }
+                }
+                if (!row)
+                    row = repo.create(settingsCreateScope(scope));
+                repo.merge(row, changes);
+                row.updatedById = scope.userId ?? null;
+                row.revision = nextSettingsRevision(beforeRevision);
+                const committed = await repo.save(row);
+                await saveSettingsHistory(manager, scope, 'COMPANY', committed.id, operationType, beforeRevision, beforeSnapshot, committed);
+                return committed;
+            });
+            if (this.storage && replacedStorageFileId)
+                await this.storage.remove(replacedStorageFileId).catch(() => undefined);
+            return saved;
+        }
+        catch (error) {
+            if (requestedLogoAssetId)
+                await this.discardCompanyLogoDraft(scope, requestedLogoAssetId).catch(() => undefined);
+            throw error;
         }
-        return { scanned: lines.length, matches: await matchRepo.count({ where: { ...activeScope(scope), deletedAt: IsNull() } }) };
     }
-    async recalculateCompanyRisks(scope, reason) {
-        const repo = this.dataSource.getRepository(CompanySanctionMatch);
-        const now = new Date();
-        await repo.update({ ...activeScope(scope), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: reason });
-        const [suppliers, customers, sanctions] = await Promise.all([
-            this.dataSource.getRepository(Supplier).find({ where: { ...activeScope(scope), deletedAt: IsNull() } }),
-            this.dataSource.getRepository(Customer).find({ where: { ...activeScope(scope), deletedAt: IsNull() } }),
-            this.dataSource.getRepository(SanctionedCompanyRecord).find({ where: { ...activeScope(scope), deletedAt: IsNull() } })
-        ]);
-        for (const supplier of suppliers) {
-            for (const item of sanctions.filter(row => row.normalizedCompanyName === supplier.normalizedName))
-                await repo.save(repo.create({ ...createdScope(scope), subjectType: 'SUPPLIER', supplierId: supplier.id, customerId: null, sanctionedCompanyId: item.id, matchedNormalizedName: supplier.normalizedName, checkedAt: now, deletedAt: null, invalidationReason: null }));
-            supplier.complianceCheckedAt = now;
-            await this.dataSource.getRepository(Supplier).save(supplier);
+    async createCompanyLogoDraft(scope, buffer, fileName) {
+        if (!this.storage)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '公司 Logo 存储服务不可用');
+        const storageFileId = await this.storage.save(buffer, fileName, 'company-logo-drafts');
+        try {
+            const repo = this.dataSource.getRepository(ManagedAsset);
+            return await repo.save(repo.create({ ...auditScope(scope), assetType: 'COMPANY_LOGO', status: 'DRAFT', storageType: 'MANAGED', storageFileId, ownerId: scope.userId ?? null, originalFileName: fileName, deletedAt: null, deletedById: null, deleteOperation: null }));
+        }
+        catch (error) {
+            await this.storage.remove(storageFileId).catch(() => undefined);
+            throw error;
+        }
+    }
+    async discardCompanyLogoDraft(scope, assetId) {
+        let storageFileId = null;
+        const discarded = await this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(ManagedAsset);
+            const asset = await required(repo.findOne({ where: { ...activeScope(scope), id: assetId, assetType: 'COMPANY_LOGO', status: 'DRAFT', storageType: 'MANAGED', deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '公司 Logo 草稿不存在');
+            if (asset.ownerId !== (scope.userId ?? null))
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '公司 Logo 草稿不属于当前操作人');
+            asset.deletedAt = new Date();
+            asset.deletedById = scope.userId ?? null;
+            asset.deleteOperation = 'USER_DELETE';
+            asset.updatedById = scope.userId ?? null;
+            storageFileId = asset.storageFileId;
+            return repo.save(asset);
+        });
+        if (this.storage && storageFileId)
+            await this.storage.remove(storageFileId);
+        return discarded;
+    }
+    async readCompanyLogo(scope, assetId) {
+        if (!this.storage)
+            throw new DomainError(DomainErrorCodes.NOT_FOUND, '公司 Logo 存储服务不可用');
+        const asset = await required(this.dataSource.getRepository(ManagedAsset).findOne({ where: { ...activeScope(scope), id: assetId, assetType: 'COMPANY_LOGO', status: 'ACTIVE', deletedAt: IsNull() } }), '公司 Logo 资产不存在');
+        try {
+            return await this.storage.read(asset.storageFileId);
+        }
+        catch (error) {
+            if (asset.storageType === 'BUILTIN')
+                return undefined;
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '公司 Logo 文件不可读取，请重新上传或恢复默认', { assetId, cause: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    async persistMonthlyRate(scope, input, changes, expectedRevision) {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(MonthlySafeExchangeRate);
+            const id = typeof input.id === 'string' && input.id.trim() ? input.id.trim() : null;
+            let row = id ? await repo.findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }) : null;
+            if (id && !row)
+                throw new DomainError(DomainErrorCodes.NOT_FOUND, '月度美元汇率不存在');
+            const beforeRevision = row?.revision ?? 0;
+            assertExpectedRevision(beforeRevision, parseExpectedRevision(expectedRevision, true));
+            const occupied = await repo.findOne({ where: { ...activeScope(scope), year: changes.year, month: changes.month, currencyCode: 'USD', deletedAt: IsNull() } });
+            if (occupied && occupied.id !== row?.id)
+                throw new DomainError(DomainErrorCodes.INVALID_INPUT, '目标年月已存在美元汇率');
+            const beforeSnapshot = row ? settingsSnapshot('RATE', row) : null;
+            if (!row)
+                row = repo.create({ ...auditScope(scope), ...changes, currencyCode: 'USD', revision: 1 });
+            else {
+                repo.merge(row, changes);
+                row.updatedById = scope.userId ?? null;
+                row.revision = nextSettingsRevision(beforeRevision);
+            }
+            const saved = await repo.save(row);
+            await saveSettingsHistory(manager, scope, 'RATE', saved.id, 'EDIT', beforeRevision, beforeSnapshot, saved);
+            return saved;
+        });
+    }
+    async analytics(scope, query, source = this.dataSource) {
+        const currentYear = shanghaiCurrentYear();
+        const statement = analyticsAggregationStatement(scope, query, currentYear, 'PAGE');
+        const rawRows = await source.query(statement.sql, statement.parameters);
+        const total = Number(rawRows[0]?.total ?? rawRows.length);
+        if (total > ANALYTICS_EXPORT_MAX_ROWS)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `分析分组最多支持 ${ANALYTICS_EXPORT_MAX_ROWS} 条`, { total });
+        const pageCount = Math.max(1, Math.ceil(total / query.pageSize));
+        const page = Math.min(query.page, pageCount);
+        const pageStart = (page - 1) * query.pageSize + 1;
+        const pageEnd = pageStart + query.pageSize - 1;
+        const rankedRows = rawRows.map((row, index) => ({ row, rank: Number(row.rank ?? index + 1) }));
+        const details = rankedRows.filter(item => item.rank >= pageStart && item.rank <= pageEnd).map(item => analyticsDetailFromRaw(item.row, query));
+        const top5 = rankedRows.filter(item => item.rank <= 5).map(item => ({ key: String(item.row.key), label: String(item.row.label), amountCny: moneyString(item.row.amountCny) }));
+        const metrics = analyticsMetricsFromRaw(rawRows[0], query);
+        return { mode: query.mode, currentYear, dimension: query.dimension, metrics, top5, details: { items: details, page, pageSize: query.pageSize, total, pageCount } };
+    }
+    async exportAnalytics(scope, query) {
+        const title = query.mode === 'PURCHASE' ? '采购分析' : '销售分析';
+        const subject = query.dimension === 'SUPPLIER' ? '供应商' : query.dimension === 'CUSTOMER' ? '客户' : '商品名称';
+        const headers = query.dimension === 'PRODUCT'
+            ? [subject, '订单数', '商品数量', '商品明细金额 CNY']
+            : query.mode === 'PURCHASE'
+                ? [subject, '订单数', '订单总额 CNY', '已付款 CNY', '未付款 CNY', '已退税 CNY', '未退税 CNY']
+                : [subject, '订单数', '订单总额 CNY', '已收款 CNY', '未收款 CNY'];
+        const directory = await mkdtemp(join(tmpdir(), 'tcw-analytics-'));
+        const filePath = join(directory, `${title}.xlsx`);
+        try {
+            await writeWorkbookFile(filePath, async (workbook) => {
+                const sheet = workbook.addWorksheet(title);
+                sheet.columns = headers.map(header => ({ header, width: 20 }));
+                sheet.getRow(1).font = { bold: true };
+                sheet.getRow(1).commit();
+                const statement = analyticsAggregationStatement(scope, query, shanghaiCurrentYear(), 'EXPORT');
+                let count = 0;
+                await this.withAnalyticsSnapshot(statement, async (raw) => {
+                    count += 1;
+                    if (count > ANALYTICS_EXPORT_MAX_ROWS)
+                        throw new DomainError(DomainErrorCodes.INVALID_INPUT, `分析导出最多支持 ${ANALYTICS_EXPORT_MAX_ROWS} 条明细`, { total: count });
+                    const row = analyticsDetailFromRaw(raw, query);
+                    sheet.addRow(query.dimension === 'PRODUCT'
+                        ? [row.label, row.orderCount, row.productQuantity, row.amountCny]
+                        : query.mode === 'PURCHASE'
+                            ? [row.label, row.orderCount, row.amountCny, row.paidCny, row.unpaidCny, row.refundedCny, row.unrefundedCny]
+                            : [row.label, row.orderCount, row.amountCny, row.receivedCny, row.unreceivedCny]).commit();
+                });
+            });
+            return { fileName: `${title}.xlsx`, buffer: await readFile(filePath) };
         }
-        for (const customer of customers) {
-            for (const item of sanctions.filter(row => row.normalizedCompanyName === customer.normalizedName))
-                await repo.save(repo.create({ ...createdScope(scope), subjectType: 'CUSTOMER', supplierId: null, customerId: customer.id, sanctionedCompanyId: item.id, matchedNormalizedName: customer.normalizedName, checkedAt: now, deletedAt: null, invalidationReason: null }));
-            customer.complianceCheckedAt = now;
-            await this.dataSource.getRepository(Customer).save(customer);
+        finally {
+            await rm(directory, { recursive: true, force: true });
+        }
+    }
+    async withAnalyticsSnapshot(statement, consume) {
+        if (typeof this.dataSource.createQueryRunner === 'function') {
+            const runner = this.dataSource.createQueryRunner();
+            await runner.connect();
+            await runner.startTransaction('REPEATABLE READ');
+            try {
+                const stream = await runner.stream(statement.sql, statement.parameters);
+                for await (const row of stream)
+                    await consume(row);
+                await runner.commitTransaction();
+            }
+            catch (error) {
+                await runner.rollbackTransaction();
+                throw error;
+            }
+            finally {
+                await runner.release();
+            }
+            return;
         }
-        return { scanned: suppliers.length + customers.length, matches: await repo.count({ where: { ...activeScope(scope), deletedAt: IsNull() } }) };
+        await this.dataSource.transaction('REPEATABLE READ', async (manager) => {
+            const rows = await manager.query(statement.sql, statement.parameters);
+            for (const row of rows)
+                await consume(row);
+        });
     }
-    async pagedQuery(entity, scope, query, searchFields, exactFilters = {}) {
+    async recalculateProductRisks(scope, reason) {
+        return this.dataSource.transaction(async (manager) => {
+            const matchRepo = manager.getRepository(ProductComplianceMatch);
+            const lineRepo = manager.getRepository(PurchaseOrderLine);
+            const now = new Date();
+            if (this.dataSource.options?.type === 'postgres') {
+                await manager.query('SELECT pg_advisory_xact_lock(hashtext($1), hashtext($2))', [`trade-compliance:product-risk:${scope.tenantId}:${scope.organizationId}`, 'recalculate']);
+            }
+            const lines = await lineRepo.find({
+                where: { ...activeScope(scope), deletedAt: IsNull() },
+                order: { id: 'ASC' },
+                lock: { mode: 'pessimistic_write' }
+            });
+            await matchRepo.update({ ...activeScope(scope), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: reason });
+            const goods = await manager.getRepository(ControlledGoodsRecord).find({
+                where: { ...activeScope(scope), deletedAt: IsNull() },
+                order: { id: 'ASC' },
+                lock: { mode: 'pessimistic_read' }
+            });
+            for (const line of lines) {
+                const lineHs = normalizeHsCode(line.hsCode);
+                const hsMatches = lineHs ? goods.filter(item => item.normalizedHsCode && item.normalizedHsCode === lineHs) : [];
+                const candidates = hsMatches.length ? hsMatches : goods.filter(item => isProductNameMatch(line.productName, item.productName));
+                for (const item of candidates) {
+                    const contains = normalizeForProductMatch(line.productName).includes(normalizeForProductMatch(item.productName)) || normalizeForProductMatch(item.productName).includes(normalizeForProductMatch(line.productName));
+                    await matchRepo.save(matchRepo.create({ ...createdScope(scope), purchaseOrderLineId: line.id, controlledGoodsId: item.id, catalogType: item.catalogType, matchMethod: hsMatches.length ? 'HS_CODE_EXACT' : contains ? 'NAME_CONTAINS' : 'NAME_DICE', similarityScore: null, matchingRuleVersion: 'PRODUCT_MATCH_V1', matchingThreshold: '0.65', matchedAt: now, deletedAt: null, invalidationReason: null }));
+                }
+                await lineRepo.update({ ...activeScope(scope), id: line.id, deletedAt: IsNull() }, { complianceCheckedAt: now, updatedById: scope.userId ?? null, updatedAt: now });
+            }
+            return { scanned: lines.length, matches: await matchRepo.count({ where: { ...activeScope(scope), deletedAt: IsNull() } }) };
+        });
+    }
+    async recalculateCompanyRisks(scope, reason) {
+        return this.dataSource.transaction(async (manager) => {
+            const repo = manager.getRepository(CompanySanctionMatch);
+            const supplierRepo = manager.getRepository(Supplier);
+            const customerRepo = manager.getRepository(Customer);
+            const now = new Date();
+            await repo.update({ ...activeScope(scope), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: reason });
+            const [suppliers, customers, sanctions] = await Promise.all([
+                supplierRepo.find({ where: { ...activeScope(scope), deletedAt: IsNull() } }),
+                customerRepo.find({ where: { ...activeScope(scope), deletedAt: IsNull() } }),
+                manager.getRepository(SanctionedCompanyRecord).find({ where: { ...activeScope(scope), deletedAt: IsNull() } })
+            ]);
+            for (const supplier of suppliers) {
+                for (const item of sanctions.filter(row => row.normalizedCompanyName === supplier.normalizedName))
+                    await repo.save(repo.create({ ...createdScope(scope), subjectType: 'SUPPLIER', supplierId: supplier.id, customerId: null, sanctionedCompanyId: item.id, matchedNormalizedName: supplier.normalizedName, checkedAt: now, deletedAt: null, invalidationReason: null }));
+                await supplierRepo.update({ ...activeScope(scope), id: supplier.id, deletedAt: IsNull() }, { complianceCheckedAt: now, updatedById: scope.userId ?? null, updatedAt: now });
+            }
+            for (const customer of customers) {
+                for (const item of sanctions.filter(row => row.normalizedCompanyName === customer.normalizedName))
+                    await repo.save(repo.create({ ...createdScope(scope), subjectType: 'CUSTOMER', supplierId: null, customerId: customer.id, sanctionedCompanyId: item.id, matchedNormalizedName: customer.normalizedName, checkedAt: now, deletedAt: null, invalidationReason: null }));
+                await customerRepo.update({ ...activeScope(scope), id: customer.id, deletedAt: IsNull() }, { complianceCheckStatus: 'CHECKED', complianceCheckedAt: now, updatedById: scope.userId ?? null, updatedAt: now });
+            }
+            return { scanned: suppliers.length + customers.length, matches: await repo.count({ where: { ...activeScope(scope), deletedAt: IsNull() } }) };
+        });
+    }
+    async pagedQuery(entity, scope, query, searchFields, exactFilters = {}, filters = {}) {
         const page = Math.max(1, Number(query.page ?? 1));
         const pageSize = Math.min(200, Math.max(1, Number(query.pageSize ?? 20)));
         const qb = this.dataSource.getRepository(entity).createQueryBuilder('row').where('row.tenantId = :tenantId AND row.organizationId = :organizationId', activeScope(scope));
@@ -612,9 +1567,48 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         for (const [key, value] of Object.entries(exactFilters))
             if (value !== undefined && value !== null && value !== '')
                 qb.andWhere(`row.${key} = :filter_${key}`, { [`filter_${key}`]: value });
+        for (const [key, value] of Object.entries(filters.fuzzy ?? {}))
+            if (hasQueryValue(value))
+                qb.andWhere(`CAST(row.${key} AS TEXT) ILIKE :fuzzy_${key}`, { [`fuzzy_${key}`]: `%${String(value).trim()}%` });
+        for (const [key, value] of Object.entries(filters.range ?? {})) {
+            const range = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+            if (hasQueryValue(range.from))
+                qb.andWhere(`row.${key} >= :range_${key}_from`, { [`range_${key}_from`]: range.from });
+            if (hasQueryValue(range.to))
+                qb.andWhere(`row.${key} <= :range_${key}_to`, { [`range_${key}_to`]: range.to });
+        }
+        filters.apply?.(qb);
         const [items, total] = await qb.orderBy('row.createdAt', 'DESC').skip((page - 1) * pageSize).take(pageSize).getManyAndCount();
         return { items, total, page, pageSize };
     }
+    async pagedCatalogQuery(entity, batchEntity, scope, query, filters) {
+        const page = Math.max(1, Number(query.page ?? 1));
+        const pageSize = Math.min(200, Math.max(1, Number(query.pageSize ?? 20)));
+        const qb = this.dataSource.getRepository(entity).createQueryBuilder('row')
+            .leftJoin(batchEntity, 'batch', 'batch.id = row.batchId AND batch.tenantId = :tenantId AND batch.organizationId = :organizationId', activeScope(scope))
+            .where('row.tenantId = :tenantId AND row.organizationId = :organizationId', activeScope(scope))
+            .andWhere('row.deletedAt IS NULL');
+        for (const [key, value] of Object.entries(filters.exact ?? {}))
+            if (hasQueryValue(value))
+                qb.andWhere(`row.${key} = :exact_${key}`, { [`exact_${key}`]: value });
+        for (const [key, value] of Object.entries(filters.fuzzy ?? {}))
+            if (hasQueryValue(value))
+                qb.andWhere(`CAST(row.${key} AS TEXT) ILIKE :fuzzy_${key}`, { [`fuzzy_${key}`]: `%${String(value).trim()}%` });
+        if (hasQueryValue(filters.batchSourceFileName))
+            qb.andWhere('CAST(batch.sourceFileName AS TEXT) ILIKE :batchSourceFileName', { batchSourceFileName: `%${String(filters.batchSourceFileName).trim()}%` });
+        for (const [key, value] of Object.entries(filters.range ?? {})) {
+            const range = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+            if (hasQueryValue(range.from))
+                qb.andWhere(`row.${key} >= :range_${key}_from`, { [`range_${key}_from`]: range.from });
+            if (hasQueryValue(range.to))
+                qb.andWhere(`row.${key} <= :range_${key}_to`, { [`range_${key}_to`]: range.to });
+        }
+        const [items, total] = await qb.orderBy('row.createdAt', 'DESC').skip((page - 1) * pageSize).take(pageSize).getManyAndCount();
+        const batchIds = [...new Set(items.map(item => item.batchId).filter((id) => Boolean(id)))];
+        const batches = batchIds.length ? await this.dataSource.getRepository(batchEntity).find({ where: { ...activeScope(scope), id: In(batchIds) } }) : [];
+        const fileNames = new Map(batches.map(batch => [batch.id, batch.sourceFileName]));
+        return { items: items.map(item => ({ ...item, sourceFileName: item.batchId ? fileNames.get(item.batchId) : undefined })), total, page, pageSize };
+    }
     async upsertSupplier(manager, scope, input) {
         const repo = manager.getRepository(Supplier);
         const normalizedName = normalizeExactName(input.name);
@@ -624,10 +1618,58 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
         const manualCode = item.code;
         Object.assign(item, pick(input, ['name', 'shortName', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
         item.normalizedName = normalizedName;
-        item.code = manualCode ?? input.code ?? null;
+        item.code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Supplier, manualCode ?? input.code, item.id);
         item.updatedById = scope.userId ?? null;
         return repo.save(item);
     }
+    async supplierDtos(scope, suppliers) {
+        const ids = suppliers.map(item => item.id);
+        const matches = ids.length ? await this.dataSource.getRepository(CompanySanctionMatch).find({ where: { ...activeScope(scope), subjectType: 'SUPPLIER', supplierId: In(ids), deletedAt: IsNull() } }) : [];
+        return suppliers.map(supplier => {
+            const sanctionMatchCount = matches.filter(match => match.supplierId === supplier.id).length;
+            return { ...supplier, sanctionMatchCount, sanctionStatus: supplier.complianceCheckedAt == null ? 'UNCHECKED' : sanctionMatchCount ? 'HIT' : 'CLEAR' };
+        });
+    }
+    async salesCustomerDtos(scope, customers) {
+        const ids = customers.map(item => item.id);
+        const matches = ids.length ? await this.dataSource.getRepository(CompanySanctionMatch).find({ where: { ...activeScope(scope), subjectType: 'CUSTOMER', customerId: In(ids), deletedAt: IsNull() } }) : [];
+        return customers.map(customer => {
+            const sanctionMatchCount = matches.filter(match => match.customerId === customer.id).length;
+            return { ...customer, profitRateStatus: customer.pricingProfitRateStatus, sanctionMatchCount, sanctionStatus: customer.complianceCheckStatus === 'UNCHECKED' ? 'UNCHECKED' : sanctionMatchCount ? 'HIT' : 'CLEAR' };
+        });
+    }
+    async salesOrderDtos(scope, orders) {
+        if (!orders.length)
+            return [];
+        const purchaseIds = [...new Set(orders.map(item => item.purchaseOrderId))];
+        const [customers, purchases] = await Promise.all([
+            this.dataSource.getRepository(Customer).find({ where: { ...activeScope(scope), id: In([...new Set(orders.map(item => item.customerId))]), deletedAt: IsNull() } }),
+            this.dataSource.getRepository(PurchaseOrder).find({ where: { ...activeScope(scope), id: In(purchaseIds), deletedAt: IsNull() } })
+        ]);
+        const supplierIds = [...new Set(purchases.map(item => item.supplierId))];
+        const suppliers = supplierIds.length ? await this.dataSource.getRepository(Supplier).find({ where: { ...activeScope(scope), id: In(supplierIds), deletedAt: IsNull() } }) : [];
+        const customerNames = new Map(customers.map(item => [item.id, item.name]));
+        const purchaseSuppliers = new Map(purchases.map(item => [item.id, item.supplierId]));
+        const supplierNames = new Map(suppliers.map(item => [item.id, item.name]));
+        return orders.map(order => {
+            const received = new Decimal(order.receivedAmountCny);
+            const total = new Decimal(order.orderAmountCny);
+            const paymentStatus = received.lte(0) ? 'UNPAID' : received.gte(total) ? 'PAID' : 'PARTIAL';
+            return { ...order, customerName: customerNames.get(order.customerId) ?? '', supplierName: supplierNames.get(purchaseSuppliers.get(order.purchaseOrderId) ?? '') ?? '', pricingProfitRateStatus: 'CONFIGURED', paymentStatus, lines: order.lines.map(line => ({ ...line, complianceCategories: [...new Set(line.complianceMatches.map(match => match.catalogType))] })) };
+        });
+    }
+    async purchaseOrderDtos(scope, orders) {
+        const ids = orders.map(item => item.id);
+        const lines = ids.length ? await this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId: In(ids), deletedAt: IsNull() } }) : [];
+        const normalizedCustomerNos = [...new Set(orders.map(order => `${parsePurchaseContractNo(order.contractNo).baseCode}X`))];
+        const contracts = normalizedCustomerNos.length ? await this.dataSource.getRepository(CustomerContract).find({ where: { ...activeScope(scope), normalizedContractNo: In(normalizedCustomerNos), deletedAt: IsNull() } }) : [];
+        return orders.map(order => {
+            const orderLines = lines.filter(line => line.purchaseOrderId === order.id);
+            const customerContract = contracts.find(contract => parseCustomerContractNo(contract.contractNo).baseCode === parsePurchaseContractNo(order.contractNo).baseCode);
+            const estimatedRefundAmountCny = orderLines.reduce((total, line) => line.refundRate ? total.plus(new Decimal(line.lineAmountTaxIncluded).div(new Decimal(line.vatRate ?? 0).add(1)).mul(line.refundRate)) : total, new Decimal(0)).toFixed(2);
+            return { ...order, lineCount: orderLines.length, estimatedRefundAmountCny, customerContractId: customerContract?.id ?? null, customerContractNo: customerContract?.contractNo ?? null, customerContractLinkStatus: customerContract ? 'LINKED' : 'UNLINKED' };
+        });
+    }
     async upsertCustomer(manager, scope, input) {
         const repo = manager.getRepository(Customer);
         const normalizedName = normalizeExactName(input.name);
@@ -636,67 +1678,100 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
             item = repo.create({ ...auditScope(scope), name: input.name.trim(), normalizedName });
         const manualCode = item.code;
         const profitRate = item.defaultPricingProfitRate;
+        const profitRateStatus = item.pricingProfitRateStatus;
         Object.assign(item, pick(input, ['name', 'shortName', 'country', 'address', 'contactName', 'phone', 'wechat', 'email', 'taxNumber', 'paymentAccount', 'bankName', 'taxpayerRating', 'website', 'businessProducts']));
         item.normalizedName = normalizedName;
-        item.code = manualCode ?? input.code ?? null;
+        item.code = await this.lockAndAssertPartyCodeAvailable(manager, scope, Customer, manualCode ?? input.code, item.id);
         item.defaultPricingProfitRate = profitRate ?? input.defaultPricingProfitRate ?? null;
+        item.pricingProfitRateStatus = profitRateStatus ?? (input.defaultPricingProfitRate != null ? 'CONFIGURED' : 'MISSING');
         item.updatedById = scope.userId ?? null;
         return repo.save(item);
     }
-    async deriveSingleOrder(scope, customerContractId, purchaseOrderId, override) {
-        const contract = await required(this.dataSource.getRepository(CustomerContract).findOne({ where: { ...activeScope(scope), id: customerContractId, deletedAt: IsNull() } }), '客户合同不存在');
-        const customer = await required(this.dataSource.getRepository(Customer).findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() } }), '客户不存在');
-        const purchase = await required(this.dataSource.getRepository(PurchaseOrder).findOne({ where: { ...activeScope(scope), id: purchaseOrderId, deletedAt: IsNull() } }), '采购订单不存在');
-        const rate = override ?? customer.defaultPricingProfitRate;
-        if (rate == null)
-            throw new DomainError(DomainErrorCodes.CUSTOMER_PROFIT_RATE_REQUIRED, '客户默认利润率未维护');
-        const lines = await this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() } });
-        const amount = lines.reduce((sum, line) => sum.plus(deriveSalesLine({ purchaseUnitPriceCny: line.unitPriceTaxIncluded, quantity: line.quantity }, rate).salesLineAmountCny), new Decimal(0));
-        return { contract, customer, purchase, rate, orderAmountCny: amount.toFixed(0) };
-    }
-    async assertExistingReceiptsRemainValid(scope, customerId, fallbackRate) {
-        const contracts = await this.dataSource.getRepository(CustomerContract).find({ where: { ...activeScope(scope), customerId, deletedAt: IsNull() } });
-        const manuals = contracts.length ? await this.dataSource.getRepository(DerivedSalesOrderManualData).find({ where: { ...activeScope(scope), customerContractId: In(contracts.map(item => item.id)), deletedAt: IsNull() } }) : [];
-        for (const row of manuals.filter(item => item.pricingProfitRateOverride == null)) {
-            const derived = await this.deriveSingleOrder(scope, row.customerContractId, row.purchaseOrderId, fallbackRate);
-            assertReceivedAmount(derived.orderAmountCny, row.receivedAmountCny);
-        }
+    async lockCustomerName(manager, scope, normalizedName) {
+        await manager.query('SELECT pg_advisory_xact_lock(hashtext($1), hashtext($2))', [`trade-compliance:customer-name:${scope.tenantId}:${scope.organizationId}`, normalizedName]);
     }
-    async assertPurchaseOrderReceiptsRemainValid(scope, purchaseOrderId, changedLine, deletedLineId) {
-        const purchase = await required(this.dataSource.getRepository(PurchaseOrder).findOne({ where: { ...activeScope(scope), id: purchaseOrderId, deletedAt: IsNull() } }), '采购订单不存在');
-        const sourceLines = await this.dataSource.getRepository(PurchaseOrderLine).find({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() } });
-        const lines = sourceLines.filter(line => line.id !== deletedLineId).map(line => changedLine?.id === line.id ? changedLine : line);
-        const baseCode = parsePurchaseContractNo(purchase.contractNo).baseCode;
-        const contracts = await this.dataSource.getRepository(CustomerContract).find({ where: { ...activeScope(scope), deletedAt: IsNull() } });
-        for (const contract of contracts.filter(item => parseCustomerContractNo(item.contractNo).baseCode === baseCode)) {
-            const [customer, manual] = await Promise.all([
-                this.dataSource.getRepository(Customer).findOne({ where: { ...activeScope(scope), id: contract.customerId, deletedAt: IsNull() } }),
-                this.dataSource.getRepository(DerivedSalesOrderManualData).findOne({ where: { ...activeScope(scope), customerContractId: contract.id, purchaseOrderId, deletedAt: IsNull() } })
-            ]);
-            if (!customer || !manual || new Decimal(manual.receivedAmountCny).eq(0))
+    async lockAndAssertPartyCodeAvailable(manager, scope, entity, value, currentId) {
+        const code = normalizePartyCode(value);
+        if (code == null)
+            return null;
+        const partyType = entity === Supplier ? 'supplier' : 'customer';
+        const partyLabel = entity === Supplier ? '供应商' : '客户';
+        await manager.query('SELECT pg_advisory_xact_lock(hashtext($1), hashtext($2))', [`trade-compliance:${partyType}-code:${scope.tenantId}:${scope.organizationId}`, code]);
+        const repo = manager.getRepository(entity);
+        const query = repo.createQueryBuilder('party')
+            .where('party."tenantId" = :tenantId', { tenantId: scope.tenantId })
+            .andWhere('party."organizationId" = :organizationId', { organizationId: scope.organizationId })
+            .andWhere('party."deletedAt" IS NULL')
+            .andWhere('party."code" IS NOT NULL')
+            .andWhere('UPPER(BTRIM(party."code")) = :normalizedCode', { normalizedCode: code });
+        if (currentId)
+            query.andWhere('party."id" <> :currentId', { currentId });
+        const duplicate = (await query.getMany()).find(candidate => normalizePartyCode(candidate.code) === code);
+        if (duplicate)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${partyLabel}代码已存在`, { code, duplicateId: duplicate.id });
+        return code;
+    }
+    async withLockedPurchaseLines(scope, purchaseOrderId, callback) {
+        return this.dataSource.transaction(async (manager) => {
+            const purchaseRepo = manager.getRepository(PurchaseOrder);
+            const preview = await required(purchaseRepo.findOne({ where: { ...activeScope(scope), id: purchaseOrderId, deletedAt: IsNull() } }), '采购订单不存在');
+            const baseCode = parsePurchaseContractNo(preview.contractNo).baseCode;
+            const contracts = (await manager.getRepository(CustomerContract).find({ where: { ...activeScope(scope), deletedAt: IsNull() }, order: { id: 'ASC' } }))
+                .filter(contract => parseCustomerContractNo(contract.contractNo).baseCode === baseCode);
+            const customerRepo = manager.getRepository(Customer);
+            const customers = [];
+            for (const customerId of [...new Set(contracts.map(contract => contract.customerId))].sort()) {
+                customers.push(await required(customerRepo.findOne({ where: { ...activeScope(scope), id: customerId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户不存在'));
+            }
+            const purchase = await required(purchaseRepo.findOne({ where: { ...activeScope(scope), id: purchaseOrderId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '采购订单不存在');
+            const lineRepo = manager.getRepository(PurchaseOrderLine);
+            const lines = await lineRepo.find({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() }, order: { id: 'ASC' }, lock: { mode: 'pessimistic_write' } });
+            const contractIds = contracts.map(contract => contract.id);
+            const manuals = contractIds.length ? await manager.getRepository(DerivedSalesOrderManualData).find({ where: { ...activeScope(scope), customerContractId: In(contractIds), purchaseOrderId, deletedAt: IsNull() }, order: { customerContractId: 'ASC', purchaseOrderId: 'ASC' }, lock: { mode: 'pessimistic_write' } }) : [];
+            return callback({ manager, purchase, lineRepo, lines, contracts, customers, manuals });
+        });
+    }
+    assertLockedPurchaseReceipts(lines, contracts, customers, manuals) {
+        const contractsById = new Map(contracts.map(contract => [contract.id, contract]));
+        const customersById = new Map(customers.map(customer => [customer.id, customer]));
+        for (const manual of manuals) {
+            const contract = contractsById.get(manual.customerContractId);
+            const customer = contract ? customersById.get(contract.customerId) : undefined;
+            if (!customer || new Decimal(manual.receivedAmountCny).eq(0))
                 continue;
-            const rate = manual.pricingProfitRateOverride ?? customer.defaultPricingProfitRate;
+            const rate = manual.pricingProfitRateOverride ?? (customer.pricingProfitRateStatus === 'CONFIGURED' ? customer.defaultPricingProfitRate : null);
             if (rate == null)
                 continue;
-            const total = lines.reduce((sum, line) => sum.plus(deriveSalesLine({ purchaseUnitPriceCny: line.unitPriceTaxIncluded, quantity: line.quantity }, rate).salesLineAmountCny), new Decimal(0));
-            assertReceivedAmount(total, manual.receivedAmountCny);
+            assertReceivedAmount(derivedOrderAmount(lines, rate), manual.receivedAmountCny);
         }
     }
-    async cascadePurchaseOrder(scope, purchaseOrderId) {
-        const now = new Date();
-        const lineRepo = this.dataSource.getRepository(PurchaseOrderLine);
+    async deletePurchaseLine(scope, id) {
+        const existing = await required(this.dataSource.getRepository(PurchaseOrderLine).findOne({ where: { ...activeScope(scope), id, deletedAt: IsNull() } }), '记录不存在');
+        return this.withLockedPurchaseLines(scope, existing.purchaseOrderId, async ({ manager, lineRepo, lines, contracts, customers, manuals }) => {
+            const row = await required(Promise.resolve(lines.find(line => line.id === id) ?? null), '记录不存在');
+            this.assertLockedPurchaseReceipts(lines.filter(line => line.id !== id), contracts, customers, manuals);
+            row.deletedAt = new Date();
+            row.deletedById = scope.userId ?? null;
+            row.deleteOperation = 'USER_DELETE';
+            row.updatedById = scope.userId ?? null;
+            await lineRepo.save(row);
+            await manager.getRepository(ProductComplianceMatch).update({ ...activeScope(scope), purchaseOrderLineId: id, deletedAt: IsNull() }, { deletedAt: new Date(), invalidationReason: 'SOURCE_CHANGED' });
+            return row;
+        });
+    }
+    async cascadePurchaseOrder(manager, scope, purchaseOrderId, now) {
+        const lineRepo = manager.getRepository(PurchaseOrderLine);
         const lines = await lineRepo.find({ where: { ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() } });
         if (lines.length) {
             await lineRepo.update({ ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' });
-            await this.dataSource.getRepository(ProductComplianceMatch).update({ ...activeScope(scope), purchaseOrderLineId: In(lines.map(line => line.id)), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: 'SOURCE_CHANGED' });
+            await manager.getRepository(ProductComplianceMatch).update({ ...activeScope(scope), purchaseOrderLineId: In(lines.map(line => line.id)), deletedAt: IsNull() }, { deletedAt: now, invalidationReason: 'SOURCE_CHANGED' });
         }
-        await this.dataSource.getRepository(DerivedSalesOrderManualData).update({ ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' });
+        await manager.getRepository(DerivedSalesOrderManualData).update({ ...activeScope(scope), purchaseOrderId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' });
     }
-    async cascadeCustomerContract(scope, customerContractId) {
-        const now = new Date();
+    async cascadeCustomerContract(manager, scope, customerContractId, now) {
         await Promise.all([
-            this.dataSource.getRepository(CustomerContractClause).update({ ...activeScope(scope), customerContractId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' }),
-            this.dataSource.getRepository(DerivedSalesOrderManualData).update({ ...activeScope(scope), customerContractId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' })
+            manager.getRepository(CustomerContractClause).update({ ...activeScope(scope), customerContractId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' }),
+            manager.getRepository(DerivedSalesOrderManualData).update({ ...activeScope(scope), customerContractId, deletedAt: IsNull() }, { deletedAt: now, deletedById: scope.userId ?? null, deleteOperation: 'SOURCE_CASCADE' })
         ]);
     }
     async expireStaleImportTasks(scope) {
@@ -735,21 +1810,464 @@ let TradeComplianceWorkbenchService = class TradeComplianceWorkbenchService {
 TradeComplianceWorkbenchService = __decorate([
     Injectable(),
     __param(0, InjectDataSource()),
-    __metadata("design:paramtypes", [DataSource])
+    __param(1, Optional()),
+    __metadata("design:paramtypes", [DataSource,
+        TradeComplianceFileStorage])
 ], TradeComplianceWorkbenchService);
 export { TradeComplianceWorkbenchService };
 function activeScope(scope) { return { tenantId: scope.tenantId, organizationId: scope.organizationId }; }
+function isPostgresUniqueViolation(error) {
+    if (!error || typeof error !== 'object')
+        return false;
+    const candidate = error;
+    return candidate.code === '23505' || candidate.driverError?.code === '23505';
+}
+function normalizePartyCode(value) {
+    if (value == null)
+        return null;
+    const normalized = String(value).normalize('NFKC').trim().toUpperCase();
+    return normalized || null;
+}
+async function lockCustomerContractReanalysis(manager, scope, id) {
+    const runRepo = manager.getRepository(CustomerContractAnalysisRun);
+    const snapshot = await required(runRepo.findOne({ where: { ...activeScope(scope), id } }), '重新分析任务不存在');
+    if (snapshot.status !== 'PENDING' && snapshot.status !== 'RUNNING') {
+        const run = await required(runRepo.findOne({ where: { ...activeScope(scope), id }, lock: { mode: 'pessimistic_write' } }), '重新分析任务不存在');
+        return { run, contract: null, task: null };
+    }
+    if (snapshot.customerContractId) {
+        const contract = await required(manager.getRepository(CustomerContract).findOne({ where: { ...activeScope(scope), id: snapshot.customerContractId, deletedAt: IsNull() }, lock: { mode: 'pessimistic_write' } }), '客户合同不存在');
+        const run = await required(runRepo.findOne({ where: { ...activeScope(scope), id }, lock: { mode: 'pessimistic_write' } }), '重新分析任务不存在');
+        return { run, contract, task: null };
+    }
+    const task = await required(manager.getRepository(ImportTask).findOne({ where: { ...activeScope(scope), id: snapshot.importTaskId }, lock: { mode: 'pessimistic_write' } }), '解析任务不存在');
+    const run = await required(runRepo.findOne({ where: { ...activeScope(scope), id }, lock: { mode: 'pessimistic_write' } }), '重新分析任务不存在');
+    return { run, contract: null, task };
+}
+function lockedCurrentReanalysisRunId(locked) {
+    return locked.contract?.currentReanalysisRunId ?? locked.task?.currentReanalysisRunId ?? null;
+}
+async function timeoutCustomerContractReanalysis(manager, locked, now = new Date()) {
+    const { run, contract, task } = locked;
+    if (run.status !== 'PENDING' && run.status !== 'RUNNING')
+        return false;
+    const expiresAt = run.expiresAt ?? new Date((run.createdAt ?? now).getTime() + CUSTOMER_REANALYSIS_TIMEOUT_MS);
+    run.expiresAt = expiresAt;
+    if (expiresAt.getTime() > now.getTime())
+        return false;
+    run.status = 'TIMED_OUT';
+    run.errorCode = 'AI_REANALYSIS_TIMEOUT';
+    run.errorMessage = 'AI 重新分析超过 20 分钟';
+    run.completedAt = now;
+    if (contract?.currentReanalysisRunId === run.id) {
+        contract.currentReanalysisRunId = null;
+        await manager.getRepository(CustomerContract).save(contract);
+    }
+    if (task?.currentReanalysisRunId === run.id) {
+        task.currentReanalysisRunId = null;
+        await manager.getRepository(ImportTask).save(task);
+    }
+    await manager.getRepository(CustomerContractAnalysisRun).save(run);
+    return true;
+}
+async function invalidateCustomerContractReanalysis(manager, scope, target) {
+    const currentRunId = target.reviewSource === 'EXISTING_CONTRACT' ? target.contract.currentReanalysisRunId : target.task.currentReanalysisRunId;
+    if (!currentRunId)
+        return;
+    const runRepo = manager.getRepository(CustomerContractAnalysisRun);
+    const run = await required(runRepo.findOne({ where: { ...activeScope(scope), id: currentRunId }, lock: { mode: 'pessimistic_write' } }), '重新分析任务不存在');
+    const locked = target.reviewSource === 'EXISTING_CONTRACT'
+        ? { run, contract: target.contract, task: null }
+        : { run, contract: null, task: target.task };
+    if (!await timeoutCustomerContractReanalysis(manager, locked)) {
+        if (run.status === 'PENDING' || run.status === 'RUNNING') {
+            run.status = 'FAILED';
+            run.errorCode = 'AI_REANALYSIS_INPUT_CHANGED';
+            run.errorMessage = '重新分析输入在运行期间已变更';
+            run.completedAt = new Date();
+            await runRepo.save(run);
+        }
+        if (target.reviewSource === 'EXISTING_CONTRACT') {
+            target.contract.currentReanalysisRunId = null;
+            await manager.getRepository(CustomerContract).save(target.contract);
+        }
+        else {
+            target.task.currentReanalysisRunId = null;
+            await manager.getRepository(ImportTask).save(target.task);
+        }
+    }
+}
+function reanalysisTimeoutError() {
+    return new DomainError(DomainErrorCodes.INVALID_INPUT, 'AI 重新分析超过 20 分钟');
+}
+function requiredCustomerContractReanalysisInput(run) {
+    const input = run.analysisInput;
+    if (!input || (input.reviewSource !== 'EXISTING_CONTRACT' && input.reviewSource !== 'IMPORT_DRAFT') || !Array.isArray(input.clauses))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析运行缺少输入快照');
+    const clauses = input.clauses.map(reanalysisClauseInput);
+    if (clauses.length !== ClauseTypes.length || new Set(clauses.map(clause => clause.clauseType)).size !== ClauseTypes.length)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析运行输入快照必须完整包含七类关键条款');
+    return { reviewSource: input.reviewSource, clauses };
+}
+function normalizeCustomerContractAnalysisInput(value, enforceInvariant = true) {
+    if (value.extractionStatus !== 'FOUND' && value.extractionStatus !== 'NOT_FOUND')
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同条款提取状态无效');
+    if (value.reviewedText != null && typeof value.reviewedText !== 'string')
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同条款审核内容无效');
+    const reviewedText = value.reviewedText?.trim() || null;
+    if (enforceInvariant && value.extractionStatus === 'FOUND' && !reviewedText)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已找到条款必须填写人工审核内容');
+    if (enforceInvariant && value.extractionStatus === 'NOT_FOUND' && reviewedText)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '未找到条款不能填写人工审核内容');
+    return { reviewedText, extractionStatus: value.extractionStatus };
+}
+function customerContractAnalysisInputChanged(currentByType, updates) {
+    const seen = new Set();
+    let changed = false;
+    for (const update of updates) {
+        if (!ClauseTypes.includes(update.clauseType) || seen.has(update.clauseType))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同条款类型无效');
+        seen.add(update.clauseType);
+        const current = currentByType.get(update.clauseType);
+        if (!current || current.id !== update.id)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '客户合同条款不存在');
+        const normalizedCurrent = normalizeCustomerContractAnalysisInput(current, false);
+        const normalizedUpdate = normalizeCustomerContractAnalysisInput(update);
+        if (normalizedCurrent.reviewedText !== normalizedUpdate.reviewedText || normalizedCurrent.extractionStatus !== normalizedUpdate.extractionStatus)
+            changed = true;
+    }
+    return changed;
+}
+function reanalysisClauseInput(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析条款输入无效');
+    const clause = value;
+    if (!ClauseTypes.includes(clause.clauseType))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析条款类型无效');
+    if (clause.extractionStatus !== 'FOUND' && clause.extractionStatus !== 'NOT_FOUND')
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析条款提取状态无效');
+    const optionalText = (field) => clause[field] == null ? null : typeof clause[field] === 'string' ? clause[field] : (() => { throw new DomainError(DomainErrorCodes.INVALID_INPUT, `重新分析条款 ${field} 无效`); })();
+    return { clauseType: clause.clauseType, extractionStatus: clause.extractionStatus, sourceText: optionalText('sourceText'), reviewedText: optionalText('reviewedText'), sourceLocation: optionalText('sourceLocation'), sourceContent: optionalText('sourceContent') };
+}
+function importIssueExportLimit() { const configured = Number(process.env.TRADE_COMPLIANCE_IMPORT_ISSUE_EXPORT_MAX_ROWS); return Math.min(HARD_IMPORT_ISSUE_EXPORT_MAX_ROWS, Number.isFinite(configured) && configured > 0 ? Math.floor(configured) : DEFAULT_IMPORT_ISSUE_EXPORT_MAX_ROWS); }
+function hasQueryValue(value) { return value !== undefined && value !== null && String(value).trim() !== ''; }
+function derivedOrderKey(customerContractId, purchaseOrderId) { return `${customerContractId}:${purchaseOrderId}`; }
+function groupBy(rows, keyOf) { const grouped = new Map(); for (const row of rows) {
+    const key = keyOf(row);
+    const values = grouped.get(key);
+    if (values)
+        values.push(row);
+    else
+        grouped.set(key, [row]);
+} return grouped; }
+function compareDerivedSalesOrders(left, right) { return left.salesOrderNo.localeCompare(right.salesOrderNo) || left.purchaseOrderId.localeCompare(right.purchaseOrderId) || left.customerContractId.localeCompare(right.customerContractId); }
+function derivedOrderAmount(lines, rate) { return lines.reduce((total, line) => total.plus(deriveSalesLine({ purchaseUnitPriceCny: line.unitPriceTaxIncluded, quantity: line.quantity }, rate).salesLineAmountCny), new Decimal(0)).toFixed(0); }
+function assertOptionalEnum(value, allowed, label) { if (hasQueryValue(value) && !allowed.includes(value))
+    throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${label}无效`); }
+function fuzzyValue(value, filter) { return !hasQueryValue(filter) || String(value ?? '').toLocaleLowerCase().includes(String(filter).trim().toLocaleLowerCase()); }
+function pageRows(rows, query) { const pageSize = Math.min(200, Math.max(1, Number(query.pageSize ?? 20))); const pageCount = Math.max(1, Math.ceil(rows.length / pageSize)); const page = Math.min(pageCount, Math.max(1, Number(query.page ?? 1))); return { items: rows.slice((page - 1) * pageSize, page * pageSize), total: rows.length, page, pageSize }; }
+function filterSalesOrders(rows, parameters, includeParties = false) {
+    const date = parameters.orderDate && typeof parameters.orderDate === 'object' && !Array.isArray(parameters.orderDate) ? parameters.orderDate : {};
+    return rows.filter(row => fuzzyValue(row.salesOrderNo, parameters.salesOrderNo) && fuzzyValue(row.customerContractNo, parameters.customerContractNo) && fuzzyValue(row.purchaseContractNo, parameters.purchaseContractNo) && (!includeParties || fuzzyValue(row.supplierName, parameters.supplierName) && fuzzyValue(row.customerName, parameters.customerName)) && (!hasQueryValue(parameters.paymentStatus) || row.paymentStatus === parameters.paymentStatus) && (!hasQueryValue(date.from) || String(row.orderDate ?? '') >= String(date.from)) && (!hasQueryValue(date.to) || String(row.orderDate ?? '') <= String(date.to)));
+}
+function salesMetrics(rows) {
+    const currentYear = String(new Date().getFullYear());
+    const currentYearRows = rows.filter(row => String(row.orderDate ?? '').slice(0, 4) === currentYear);
+    const productAmounts = new Map();
+    for (const row of rows)
+        for (const line of row.lines)
+            productAmounts.set(line.productName, (productAmounts.get(line.productName) ?? new Decimal(0)).plus(line.salesLineAmountCny));
+    return {
+        orderCount: rows.length,
+        salesAmountCny: sum(rows, 'orderAmountCny'),
+        receivedAmountCny: sum(rows, 'receivedAmountCny'),
+        unreceivedAmountCny: sum(rows, 'unreceivedAmountCny'),
+        currentYearOrderCount: currentYearRows.length,
+        currentYearSalesAmountCny: sum(currentYearRows, 'orderAmountCny'),
+        topProducts: [...productAmounts].sort((left, right) => right[1].comparedTo(left[1]) || left[0].localeCompare(right[0])).slice(0, 5).map(([productName, amount]) => ({ productName, amountCny: amount.toFixed(2) }))
+    };
+}
+function sum(rows, key) { return rows.reduce((value, row) => value.plus(row[key] ?? 0), new Decimal(0)).toFixed(2); }
+function booleanFilter(value) { return value === true || value === 'true' ? true : value === false || value === 'false' ? false : null; }
+function purchaseEstimatedRefundSql(alias) { return `(SELECT COALESCE(SUM(refund_line."lineAmountTaxIncluded" / (1 + COALESCE(refund_line."vatRate", 0)) * COALESCE(refund_line."refundRate", 0)), 0) FROM plugin_trade_compliance_purchase_order_line refund_line WHERE refund_line."purchaseOrderId" = ${alias}.id AND refund_line."tenantId" = ${alias}."tenantId" AND refund_line."organizationId" = ${alias}."organizationId" AND refund_line."deletedAt" IS NULL)`; }
+function linkedCustomerContractSql(alias) { return `SELECT 1 FROM plugin_trade_compliance_customer_contract linked_contract WHERE linked_contract."tenantId" = :tenantId AND linked_contract."organizationId" = :organizationId AND linked_contract."deletedAt" IS NULL AND linked_contract."normalizedContractNo" = regexp_replace(${alias}."normalizedContractNo", '(-[0-9]+)?C$', '') || 'X'`; }
+function customerSanctionMatchSql(alias) { return `SELECT 1 FROM plugin_trade_compliance_company_sanction_match customer_match WHERE customer_match."tenantId" = :tenantId AND customer_match."organizationId" = :organizationId AND customer_match."deletedAt" IS NULL AND customer_match."subjectType" = 'CUSTOMER' AND customer_match."customerId" = ${alias}."customerId"`; }
 function createdScope(scope) { return { ...activeScope(scope), createdById: scope.userId ?? null }; }
 function auditScope(scope) { return { ...createdScope(scope), updatedById: scope.userId ?? null, deletedAt: null, deletedById: null, deleteOperation: null }; }
+function settingsCreateScope(scope) { return { ...createdScope(scope), updatedById: scope.userId ?? null }; }
+async function saveSettingsHistory(manager, scope, settingsType, settingsId, operationType, beforeRevision, beforeSnapshot, saved) {
+    const historyRepo = manager.getRepository(SettingsHistory);
+    const afterSnapshot = settingsSnapshot(settingsType, saved);
+    await historyRepo.save(historyRepo.create({ ...activeScope(scope), settingsType, settingsId, operationType, snapshotVersion: 'v1', beforeRevision, afterRevision: afterSnapshot.revision, beforeSnapshot, afterSnapshot, operatedById: scope.userId ?? null }));
+}
+function settingsSnapshot(settingsType, row) {
+    const value = row;
+    const revision = Number(value.revision);
+    if (!Number.isInteger(revision) || revision < 1)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '设置修订号无效', { settingsType, revision: value.revision });
+    if (settingsType === 'RISK')
+        return { settingsType, snapshotVersion: 'v1', revision, content: String(value.content ?? '') };
+    if (settingsType === 'COMPANY')
+        return { settingsType, snapshotVersion: 'v1', revision, logoFileId: nullableSnapshotText(value.logoFileId), companyNameZh: nullableSnapshotText(value.companyNameZh), companyNameEn: nullableSnapshotText(value.companyNameEn), unifiedSocialCreditCode: nullableSnapshotText(value.unifiedSocialCreditCode), addressZh: nullableSnapshotText(value.addressZh), addressEn: nullableSnapshotText(value.addressEn), phone: nullableSnapshotText(value.phone), email: nullableSnapshotText(value.email) };
+    if (settingsType === 'BANK')
+        return { settingsType, snapshotVersion: 'v1', revision, ...validateBankSettingsInput(value) };
+    if (settingsType === 'PROFIT') {
+        if (value.status !== 'UNCONFIGURED' && value.status !== 'ACTIVE')
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '利润率规则状态无效');
+        if (value.ruleVersion !== 'COMPLIANCE_V1')
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '利润率公式版本无效');
+        return { settingsType, snapshotVersion: 'v1', revision, status: value.status, ruleVersion: value.ruleVersion, minimumOrderProfitRate: finiteDecimalSetting(value.minimumOrderProfitRate, '最低整单利润率'), exchangeCostMinimum: finiteDecimalSetting(value.exchangeCostMinimum, '换汇成本下限'), exchangeCostMaximum: finiteDecimalSetting(value.exchangeCostMaximum, '换汇成本上限') };
+    }
+    if (value.currencyCode !== 'USD' || value.sourceType !== 'MANUAL')
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '月度汇率类型无效');
+    return { settingsType, snapshotVersion: 'v1', revision, year: Number(value.year), month: Number(value.month), currencyCode: value.currencyCode, usdToCnyRate: finiteDecimalSetting(value.usdToCnyRate, '美元兑人民币汇率'), sourceType: value.sourceType, sourceReference: nullableSnapshotText(value.sourceReference), deletedAt: value.deletedAt instanceof Date ? value.deletedAt.toISOString() : nullableSnapshotText(value.deletedAt) };
+}
+function nullableSnapshotText(value) { return value == null ? null : String(value); }
+function assertExpectedRevision(actual, expected) {
+    if (actual !== expected)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '设置已被其他操作修改，请刷新后重试', { actualRevision: actual, expectedRevision: expected });
+}
+function settingString(value, label) { if (typeof value !== 'string')
+    throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${label}必须是字符串`); return value; }
+function settingNullableString(value, label) { return value == null ? null : settingString(value, label); }
+function finiteDecimalSetting(value, label) { try {
+    const parsed = new Decimal(value);
+    if (parsed.isFinite())
+        return parsed.toString();
+}
+catch { } throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${label}必须是有限数值`, { value }); }
 async function required(promise, message) { const value = await promise; if (!value)
     throw new DomainError(DomainErrorCodes.NOT_FOUND, message); return value; }
 function pick(input, keys) { return Object.fromEntries(keys.filter(key => key in input).map(key => [key, input[key]])); }
 function maxRisk(levels) { return levels.includes('HIGH') ? 'HIGH' : levels.includes('MEDIUM') ? 'MEDIUM' : levels.includes('LOW') ? 'LOW' : null; }
-function summarizeRows(rows, totalKey, paidKey, unpaidKey) { return { count: rows.length, totalCny: sum(rows, totalKey), paidCny: sum(rows, paidKey), unpaidCny: sum(rows, unpaidKey), rows }; }
-function sum(rows, key) { return rows.reduce((value, row) => value.plus(row[key] ?? 0), new Decimal(0)).toFixed(2); }
-function topProducts(lines, amountKey) { const map = new Map(); for (const line of lines)
-    map.set(line.productName, (map.get(line.productName) ?? new Decimal(0)).plus(String(line[amountKey] ?? 0))); return [...map].sort((a, b) => b[1].cmp(a[1])).slice(0, 5).map(([name, amountCny]) => ({ name, amountCny: amountCny.toFixed(2) })); }
-function topDerivedProducts(orders) { const map = new Map(); for (const order of orders)
-    for (const line of order.lines)
-        map.set(line.productName, (map.get(line.productName) ?? new Decimal(0)).plus(line.salesLineAmountCny)); return [...map].sort((a, b) => b[1].cmp(a[1])).slice(0, 5).map(([name, amountCny]) => ({ name, amountCny: amountCny.toFixed(2) })); }
+function assertPurchaseDraft(draft) {
+    if (!String(draft.order.orderDate ?? '').trim())
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '下单日期为必填项');
+    const contractAmount = decimalInput(draft.order.contractAmountCny, '采购订单总额必须为有效金额');
+    const paidAmount = decimalInput(draft.order.paidAmountCny ?? 0, '已付款必须为有效金额');
+    const refundedAmount = decimalInput(draft.order.refundedAmountCny ?? 0, '已退税必须为有效金额');
+    if (paidAmount.isNegative())
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已付款不能为负数');
+    if (paidAmount.gt(contractAmount))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已付款不能超过采购订单总额');
+    if (refundedAmount.isNegative())
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已退税不能为负数');
+    if (draft.order.amountMismatch === true && draft.order.amountMismatchConfirmed !== true)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '订单总额差异必须确认');
+    let estimatedRefund = new Decimal(0);
+    for (let index = 0; index < draft.lines.length; index += 1) {
+        const line = draft.lines[index];
+        const prefix = `第${index + 1}条商品`;
+        if (!hasQueryValue(line.refundRate))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税率为必填项`);
+        if (!hasQueryValue(line.refundPolicyReference))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税政策依据为必填项`);
+        if (!hasQueryValue(line.refundPolicyDate))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税政策日期为必填项`);
+        if (String(line.refundPolicyDate) > String(draft.order.orderDate))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税政策日期不得晚于下单日期`);
+        if (!hasQueryValue(line.refundValidationMethod))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税校验方式为必填项`);
+        if (!RefundValidationMethods.some(method => method === line.refundValidationMethod))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}退税校验方式无效`);
+        validatePurchaseLineDiscriminators({ ...line, sourceType: line.sourceType ?? 'CONTRACT_EXTRACTED', hsCodeStatus: line.hsCodeStatus ?? 'UNCONFIRMED' });
+        if (line.amountMismatch === true && line.amountMismatchConfirmed !== true)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, `${prefix}金额差异必须确认`);
+        const lineAmount = decimalInput(line.lineAmountTaxIncluded, `${prefix}含税金额必须为有效金额`);
+        const rates = validateTaxRates(line, { lineNumber: index + 1, productName: line.productName });
+        const vatRate = new Decimal(rates.vatRate);
+        const refundRate = new Decimal(rates.refundRate);
+        estimatedRefund = estimatedRefund.plus(lineAmount.div(vatRate.add(1)).mul(refundRate));
+    }
+    if (refundedAmount.gt(estimatedRefund))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已退税不能超过预计退税总额');
+}
+function decimalInput(value, message) {
+    try {
+        return new Decimal(value);
+    }
+    catch {
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, message);
+    }
+}
+function completeCustomerClauseAnalyses(draft) {
+    return ClauseTypes.map(clauseType => {
+        const clause = draft.clauses.find(item => item.clauseType === clauseType);
+        if (!clause || clause.extractionStatus === 'NOT_FOUND')
+            return { clauseType, riskLevel: 'HIGH', riskMessageZh: '合同缺少该关键条款', suggestionZh: '请人工补充并确认该关键条款。' };
+        const analysis = draft.analyses?.find(item => item.clauseType === clauseType);
+        if (!analysis)
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '已找到的关键条款缺少分析结果', { clauseType });
+        return analysis;
+    });
+}
+function requiredId(value, label) { const id = String(value ?? '').trim(); if (!id)
+    throw new DomainError(DomainErrorCodes.INVALID_INPUT, `缺少${label}`); return id; }
+function assertCompleteClauseAnalyses(analyses) {
+    if (analyses.length !== ClauseTypes.length)
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析结果必须完整包含七类关键条款');
+    const seen = new Set();
+    for (const analysis of analyses) {
+        if (!ClauseTypes.includes(analysis.clauseType))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析结果包含未知条款类型', { clauseType: analysis.clauseType });
+        if (seen.has(analysis.clauseType))
+            throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析结果包含重复条款类型', { clauseType: analysis.clauseType });
+        seen.add(analysis.clauseType);
+    }
+    if (ClauseTypes.some(clauseType => !seen.has(clauseType)))
+        throw new DomainError(DomainErrorCodes.INVALID_INPUT, '重新分析结果必须完整包含七类关键条款');
+}
+function decimalSum(rows, read) { return rows.reduce((value, row) => value.plus(read(row)), new Decimal(0)).toNumber(); }
+function fuzzyMatches(value, filter) { return !filter || String(value ?? '').trim().toLocaleLowerCase().includes(filter.trim().toLocaleLowerCase()); }
+function shanghaiCurrentYear(now = new Date()) {
+    return Number(new Intl.DateTimeFormat('en-US', { timeZone: 'Asia/Shanghai', year: 'numeric' }).format(now));
+}
+function currentYearDateRange(currentYear, requested) {
+    const yearFrom = `${currentYear}-01-01`;
+    const yearTo = `${currentYear}-12-31`;
+    return { from: requested?.from && requested.from > yearFrom ? requested.from : yearFrom, to: requested?.to && requested.to < yearTo ? requested.to : yearTo };
+}
+function analyticsAggregationStatement(scope, query, currentYear, purpose) {
+    const parameters = [];
+    const parameter = (value) => { parameters.push(value); return `$${parameters.length}`; };
+    const tenant = parameter(scope.tenantId);
+    const organization = parameter(scope.organizationId);
+    const range = currentYearDateRange(currentYear, query.filters.orderDate);
+    const from = parameter(range.from);
+    const to = parameter(range.to);
+    const fuzzy = (expression, value) => value ? `${expression} ILIKE ${parameter(`%${value.trim()}%`)}` : null;
+    const lineConditions = (alias) => [
+        `${alias}."tenantId" = ${tenant}`,
+        `${alias}."organizationId" = ${organization}`,
+        `${alias}."deletedAt" IS NULL`,
+        fuzzy(`${alias}."productName"`, query.filters.productName),
+        fuzzy(`${alias}."hsCode"`, query.filters.hsCode)
+    ].filter((condition) => Boolean(condition));
+    let sourceSql;
+    if (query.mode === 'PURCHASE') {
+        const expectedRefund = `(SELECT COALESCE(SUM(refund_line."lineAmountTaxIncluded" / (1 + COALESCE(refund_line."vatRate", 0)) * COALESCE(refund_line."refundRate", 0)), 0) FROM plugin_trade_compliance_purchase_order_line refund_line WHERE refund_line."purchaseOrderId" = purchase.id AND refund_line."tenantId" = purchase."tenantId" AND refund_line."organizationId" = purchase."organizationId" AND refund_line."deletedAt" IS NULL)`;
+        const orderConditions = [
+            `purchase."tenantId" = ${tenant}`,
+            `purchase."organizationId" = ${organization}`,
+            'purchase."deletedAt" IS NULL',
+            `purchase."orderDate" BETWEEN ${from} AND ${to}`,
+            fuzzy('supplier.name', query.filters.supplier),
+            query.filters.unpaidOnly ? 'GREATEST(purchase."contractAmountCny" - purchase."paidAmountCny", 0) > 0' : null,
+            query.filters.unrefundedOnly ? `GREATEST(${expectedRefund} - purchase."refundedAmountCny", 0) > 0` : null,
+            `EXISTS (SELECT 1 FROM plugin_trade_compliance_purchase_order_line matched_line WHERE matched_line."purchaseOrderId" = purchase.id AND ${lineConditions('matched_line').join(' AND ')})`
+        ].filter((condition) => Boolean(condition));
+        const orders = `purchase_orders AS (
+      SELECT purchase.id, purchase."supplierId", supplier.name AS "subjectLabel",
+        purchase."contractAmountCny" AS "amountCny", purchase."paidAmountCny" AS "paidCny",
+        GREATEST(purchase."contractAmountCny" - purchase."paidAmountCny", 0) AS "unpaidCny",
+        purchase."refundedAmountCny" AS "refundedCny", GREATEST(${expectedRefund} - purchase."refundedAmountCny", 0) AS "unrefundedCny"
+      FROM plugin_trade_compliance_purchase_order purchase
+      INNER JOIN plugin_trade_compliance_supplier supplier ON supplier.id = purchase."supplierId" AND supplier."tenantId" = purchase."tenantId" AND supplier."organizationId" = purchase."organizationId" AND supplier."deletedAt" IS NULL
+      WHERE ${orderConditions.join(' AND ')}
+    )`;
+        sourceSql = query.dimension === 'PRODUCT'
+            ? `${orders}, grouped AS (
+          SELECT LOWER(BTRIM(line."productName")) AS key, MIN(BTRIM(line."productName")) AS label,
+            COUNT(DISTINCT orders.id)::bigint AS "orderCount", SUM(line.quantity) AS "productQuantity", SUM(line."lineAmountTaxIncluded") AS "amountCny"
+          FROM purchase_orders orders
+          INNER JOIN plugin_trade_compliance_purchase_order_line line ON line."purchaseOrderId" = orders.id AND ${lineConditions('line').join(' AND ')}
+          GROUP BY LOWER(BTRIM(line."productName"))
+        )`
+            : `${orders}, grouped AS (
+          SELECT orders."supplierId"::text AS key, MIN(orders."subjectLabel") AS label, COUNT(DISTINCT orders.id)::bigint AS "orderCount",
+            SUM(orders."amountCny") AS "amountCny", SUM(orders."paidCny") AS "paidCny", SUM(orders."unpaidCny") AS "unpaidCny",
+            SUM(orders."refundedCny") AS "refundedCny", SUM(orders."unrefundedCny") AS "unrefundedCny"
+          FROM purchase_orders orders GROUP BY orders."supplierId"
+        )`;
+    }
+    else {
+        const effectiveRate = 'COALESCE(manual."pricingProfitRateOverride", customer."defaultPricingProfitRate")';
+        const lineAmount = (alias) => `ROUND(ROUND(${alias}."unitPriceTaxIncluded" * (1 + ${effectiveRate}), 0) * ${alias}.quantity, 0)`;
+        const orderAmount = `(SELECT COALESCE(SUM(${lineAmount('sales_line')}), 0) FROM plugin_trade_compliance_purchase_order_line sales_line WHERE sales_line."purchaseOrderId" = purchase.id AND sales_line."tenantId" = purchase."tenantId" AND sales_line."organizationId" = purchase."organizationId" AND sales_line."deletedAt" IS NULL)`;
+        const orderConditions = [
+            `contract."tenantId" = ${tenant}`,
+            `contract."organizationId" = ${organization}`,
+            'contract."deletedAt" IS NULL',
+            `purchase."orderDate" BETWEEN ${from} AND ${to}`,
+            `(manual."pricingProfitRateOverride" IS NOT NULL OR (customer."pricingProfitRateStatus" = 'CONFIGURED' AND customer."defaultPricingProfitRate" IS NOT NULL))`,
+            fuzzy('customer.name', query.filters.customer),
+            query.filters.unreceivedOnly ? `GREATEST(${orderAmount} - COALESCE(manual."receivedAmountCny", 0), 0) > 0` : null,
+            `EXISTS (SELECT 1 FROM plugin_trade_compliance_purchase_order_line matched_line WHERE matched_line."purchaseOrderId" = purchase.id AND ${lineConditions('matched_line').join(' AND ')})`
+        ].filter((condition) => Boolean(condition));
+        const orders = `sales_orders AS (
+      SELECT contract.id AS "customerContractId", purchase.id AS "purchaseOrderId", customer.id AS "customerId", customer.name AS "subjectLabel", ${effectiveRate} AS "effectiveRate",
+        ${orderAmount} AS "amountCny", COALESCE(manual."receivedAmountCny", 0) AS "receivedCny",
+        GREATEST(${orderAmount} - COALESCE(manual."receivedAmountCny", 0), 0) AS "unreceivedCny"
+      FROM plugin_trade_compliance_customer_contract contract
+      INNER JOIN plugin_trade_compliance_customer customer ON customer.id = contract."customerId" AND customer."tenantId" = contract."tenantId" AND customer."organizationId" = contract."organizationId" AND customer."deletedAt" IS NULL
+      INNER JOIN plugin_trade_compliance_purchase_order purchase ON purchase."tenantId" = contract."tenantId" AND purchase."organizationId" = contract."organizationId" AND purchase."deletedAt" IS NULL AND contract."normalizedContractNo" = regexp_replace(purchase."normalizedContractNo", '(-[0-9]+)?C$', '') || 'X'
+      LEFT JOIN plugin_trade_compliance_derived_sales_manual manual ON manual."customerContractId" = contract.id AND manual."purchaseOrderId" = purchase.id AND manual."tenantId" = contract."tenantId" AND manual."organizationId" = contract."organizationId" AND manual."deletedAt" IS NULL
+      WHERE ${orderConditions.join(' AND ')}
+    )`;
+        sourceSql = query.dimension === 'PRODUCT'
+            ? `${orders}, grouped AS (
+          SELECT LOWER(BTRIM(line."productName")) AS key, MIN(BTRIM(line."productName")) AS label,
+            COUNT(DISTINCT orders."customerContractId"::text || ':' || orders."purchaseOrderId"::text)::bigint AS "orderCount",
+            SUM(line.quantity) AS "productQuantity", SUM(ROUND(ROUND(line."unitPriceTaxIncluded" * (1 + orders."effectiveRate"), 0) * line.quantity, 0)) AS "amountCny"
+          FROM sales_orders orders
+          INNER JOIN plugin_trade_compliance_purchase_order_line line ON line."purchaseOrderId" = orders."purchaseOrderId" AND ${lineConditions('line').join(' AND ')}
+          GROUP BY LOWER(BTRIM(line."productName"))
+        )`
+            : `${orders}, grouped AS (
+          SELECT orders."customerId"::text AS key, MIN(orders."subjectLabel") AS label,
+            COUNT(DISTINCT orders."customerContractId"::text || ':' || orders."purchaseOrderId"::text)::bigint AS "orderCount",
+            SUM(orders."amountCny") AS "amountCny", SUM(orders."receivedCny") AS "receivedCny", SUM(orders."unreceivedCny") AS "unreceivedCny"
+          FROM sales_orders orders GROUP BY orders."customerId"
+        )`;
+    }
+    const bounded = `${sourceSql}, bounded AS (SELECT * FROM grouped ORDER BY "amountCny" DESC, key ASC LIMIT ${ANALYTICS_EXPORT_MAX_ROWS + 1})`;
+    if (purpose === 'EXPORT')
+        return { sql: `WITH ${bounded} SELECT * FROM bounded ORDER BY "amountCny" DESC, key ASC`, parameters };
+    const metricColumns = query.dimension === 'PRODUCT'
+        ? 'SUM("amountCny") OVER () AS "metricAmountCny"'
+        : query.mode === 'PURCHASE'
+            ? 'SUM("amountCny") OVER () AS "metricAmountCny", SUM("paidCny") OVER () AS "metricPaidCny", SUM("unpaidCny") OVER () AS "metricUnpaidCny", SUM("refundedCny") OVER () AS "metricRefundedCny", SUM("unrefundedCny") OVER () AS "metricUnrefundedCny"'
+            : 'SUM("amountCny") OVER () AS "metricAmountCny", SUM("receivedCny") OVER () AS "metricReceivedCny", SUM("unreceivedCny") OVER () AS "metricUnreceivedCny"';
+    const start = (query.page - 1) * query.pageSize + 1;
+    const end = start + query.pageSize - 1;
+    return {
+        sql: `WITH ${bounded}, ranked AS (SELECT bounded.*, ROW_NUMBER() OVER (ORDER BY "amountCny" DESC, key ASC) AS rank, COUNT(*) OVER () AS total, ${metricColumns} FROM bounded) SELECT * FROM ranked WHERE rank <= 5 OR rank BETWEEN ${parameter(start)} AND ${parameter(end)} ORDER BY rank`,
+        parameters
+    };
+}
+function analyticsDetailFromRaw(row, query) {
+    const base = { key: String(row.key), label: String(row.label), orderCount: Number(row.orderCount), amountCny: moneyString(row.amountCny) };
+    if (query.dimension === 'PRODUCT')
+        return { ...base, productQuantity: decimalString(row.productQuantity) };
+    if (query.mode === 'PURCHASE')
+        return { ...base, paidCny: moneyString(row.paidCny), unpaidCny: moneyString(row.unpaidCny), refundedCny: moneyString(row.refundedCny), unrefundedCny: moneyString(row.unrefundedCny) };
+    return { ...base, receivedCny: moneyString(row.receivedCny), unreceivedCny: moneyString(row.unreceivedCny) };
+}
+function analyticsMetricsFromRaw(row, query) {
+    if (query.mode === 'PURCHASE')
+        return {
+            orderTotalCny: moneyString(row?.metricAmountCny ?? row?.amountCny),
+            paidCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricPaidCny ?? row?.paidCny),
+            unpaidCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricUnpaidCny ?? row?.unpaidCny),
+            refundedCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricRefundedCny ?? row?.refundedCny),
+            unrefundedCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricUnrefundedCny ?? row?.unrefundedCny)
+        };
+    return {
+        orderTotalCny: moneyString(row?.metricAmountCny ?? row?.amountCny),
+        receivedCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricReceivedCny ?? row?.receivedCny),
+        unreceivedCny: query.dimension === 'PRODUCT' ? '0.00' : moneyString(row?.metricUnreceivedCny ?? row?.unreceivedCny)
+    };
+}
+function moneyString(value) { try {
+    return new Decimal(value == null ? 0 : value).toFixed(2);
+}
+catch {
+    return '0.00';
+} }
+function decimalString(value) { try {
+    return new Decimal(value == null ? 0 : value).toString();
+}
+catch {
+    return '0';
+} }
 //# sourceMappingURL=workbench.service.js.map