feat: 租户级企微配置改造

- 新增 platform_tenant_wechat_apps 表（租户企微应用配置）
- platform_apps 增加 require_jssdk 字段
- platform_tenant_apps 增加 wechat_app_id 关联字段
- 新增企微应用管理 API 和页面
- 应用管理页面增加 JS-SDK 开关
- 应用配置页面增加企微应用选择

README.md

@@ -0,0 +1,129 @@
+# AI 对话启动指南
+
+> 本文档用于快速让新 AI 了解项目背景和当前状态
+
+---
+
+## 项目概述
+
+这是一个多租户 AI 应用平台，包含：
+
+| 项目 | 说明 | 技术栈 |
+|------|------|--------|
+| 000-platform | 统一管理平台（Admin UI） | Python FastAPI + Vue 3 |
+| 001-tools | PHP+n8n 工具迁移 | Python FastAPI + Vue 3 |
+| 011-ai-interview | AI 面试应用 | Python FastAPI + Vue 3 |
+
+---
+
+## 当前状态
+
+### 已完成
+- DevOps: Gitea + Drone CI/CD + Docker 自动部署
+- 多租户鉴权: URL 参数签名验证 (tid, aid, ts, sign)
+- 应用管理: Admin UI 可配置应用和生成签名链接
+- 5 个工具迁移: 头脑风暴、高情商回复、面诊方案、客户画像、医疗合规
+- AI 调用统计: 记录到 platform_ai_call_events
+
+### 待完成
+- 企业微信 JS-SDK 集成
+- n8n 返回 token 统计
+- 生产环境部署
+
+---
+
+## 关键文件位置
+
+```
+AgentWD/
+├── _shared/                          # 共享文档
+│   ├── AI对话启动指南.md              # 本文件
+│   ├── 项目进度/                      # 进度文档
+│   │   ├── 整体进度汇总.md
+│   │   ├── 000-platform进度.md
+│   │   └── 001-tools迁移进度.md
+│   └── 数据库/
+│       └── 测试环境配置.md            # 服务器/数据库信息
+├── 框架/
+│   └── CICD配置.md                   # CI/CD 说明
+├── projects/
+│   ├── 000-platform/                 # 管理平台
+│   ├── 001-tools/                    # 工具集
+│   └── 011-ai-interview/             # AI 面试
+└── scripts/                          # 数据库脚本
+```
+
+---
+
+## 服务器信息
+
+| 服务 | 地址 | 说明 |
+|------|------|------|
+| 测试服务器 | 47.107.172.23 | root / Nj861021 |
+| MySQL | 47.107.71.55 | scrm_reader / ScrmReader2024Pass |
+| n8n | https://n8n.ireborn.com.cn | 工作流引擎 |
+| Gitea | https://git.ai.ireborn.com.cn | 代码托管 |
+| Drone CI | https://ci.ai.ireborn.com.cn | 自动部署 |
+
+---
+
+## 测试地址
+
+| 服务 | 测试环境 |
+|------|----------|
+| 管理平台 | https://platform.test.ai.ireborn.com.cn/admin |
+| 工具集 | https://tools.test.ai.ireborn.com.cn |
+| AI 面试 | https://interview.test.ai.ireborn.com.cn |
+
+---
+
+## 鉴权机制
+
+### 001-tools 租户鉴权
+```
+URL: https://tools.test.ai.ireborn.com.cn/brainstorm?tid=test&aid=tools
+```
+
+- `tid`: 租户ID（必须）
+- `aid`: 应用代码（必须，默认 tools）
+- `ts`: 时间戳（需签名的租户必须）
+- `sign`: HMAC-SHA256(tid+aid+ts, token_secret)
+
+### 测试租户
+- `test`: 免签名，直接 `?tid=test&aid=tools`
+- `qiqi`: 需签名，通过 Admin UI 生成链接
+
+---
+
+## 开发规范
+
+1. **分支策略**: develop → 测试环境, main → 生产环境
+2. **代码提交**: 推送后自动触发 Drone CI/CD
+3. **样式保留**: 001-tools 各工具保持原 PHP 样式，不统一
+4. **数据库表**: 统一使用 `platform_` 前缀
+
+---
+
+## 常用命令
+
+```bash
+# 检查构建状态
+curl "https://ci.ai.ireborn.com.cn/api/repos/admin/000-platform/builds?per_page=1"
+
+# SSH 到服务器
+ssh root@47.107.172.23  # 密码: Nj861021
+
+# 执行 MySQL
+mysql -h 47.107.71.55 -u scrm_reader -pScrmReader2024Pass new_qiqi
+```
+
+---
+
+## 详细进度
+
+请阅读以下文件获取更多信息：
+
+1. `_shared/项目进度/整体进度汇总.md` - 整体架构和状态
+2. `_shared/项目进度/001-tools迁移进度.md` - 工具迁移详情
+3. `_shared/项目进度/000-platform进度.md` - 平台服务详情
+4. `_shared/数据库/测试环境配置.md` - 环境配置详情

backend/app/main.py

@@ -7,6 +7,7 @@ from .routers import stats_router, logs_router, config_router, health_router
 from .routers.auth import router as auth_router
 from .routers.tenants import router as tenants_router
 from .routers.tenant_apps import router as tenant_apps_router
+from .routers.tenant_wechat_apps import router as tenant_wechat_apps_router
 from .routers.apps import router as apps_router
 
 settings = get_settings()
@@ -31,6 +32,7 @@ app.include_router(health_router)
 app.include_router(auth_router, prefix="/api")
 app.include_router(tenants_router, prefix="/api")
 app.include_router(tenant_apps_router, prefix="/api")
+app.include_router(tenant_wechat_apps_router, prefix="/api")
 app.include_router(apps_router, prefix="/api")
 app.include_router(stats_router, prefix="/api")
 app.include_router(logs_router, prefix="/api")

backend/app/models/__init__.py

@@ -1,6 +1,7 @@
 """数据模型"""
 from .tenant import Tenant, Subscription, Config
 from .tenant_app import TenantApp
+from .tenant_wechat_app import TenantWechatApp
 from .app import App
 from .stats import AICallEvent, TenantUsageDaily
 from .logs import PlatformLog
@@ -10,6 +11,7 @@ __all__ = [
     "Subscription", 
     "Config",
     "TenantApp",
+    "TenantWechatApp",
     "App",
     "AICallEvent",
     "TenantUsageDaily",

backend/app/models/app.py

@@ -18,6 +18,9 @@ class App(Base):
     # [{"code": "brainstorm", "name": "头脑风暴", "path": "/brainstorm"}, ...]
     tools = Column(Text)
     
+    # 是否需要企微JS-SDK
+    require_jssdk = Column(SmallInteger, default=0)  # 0-不需要 1-需要
+    
     status = Column(SmallInteger, default=1)  # 0-禁用 1-启用
     created_at = Column(TIMESTAMP, default=datetime.now)
     updated_at = Column(TIMESTAMP, default=datetime.now, onupdate=datetime.now)

backend/app/models/tenant_app.py

@@ -13,10 +13,8 @@ class TenantApp(Base):
     app_code = Column(String(50), nullable=False, default='tools')
     app_name = Column(String(100))
     
-    # 企业微信配置
+    # 企业微信配置（关联 platform_tenant_wechat_apps）
-    wechat_corp_id = Column(String(100))
+    wechat_app_id = Column(Integer)  # 关联的企微应用ID
-    wechat_agent_id = Column(String(50))
-    wechat_secret_encrypted = Column(Text)
     
     # 鉴权配置
     access_token = Column(String(64))  # 访问令牌（长期有效）

backend/app/models/tenant_wechat_app.py

@@ -0,0 +1,23 @@
+"""租户企业微信应用配置模型"""
+from datetime import datetime
+from sqlalchemy import Column, Integer, String, Text, SmallInteger, TIMESTAMP
+from ..database import Base
+
+
+class TenantWechatApp(Base):
+    """租户企业微信应用配置表
+    
+    一个租户可以配置多个企微应用，供不同的平台应用关联使用
+    """
+    __tablename__ = "platform_tenant_wechat_apps"
+    
+    id = Column(Integer, primary_key=True, autoincrement=True)
+    tenant_id = Column(String(50), nullable=False, index=True)
+    name = Column(String(100), nullable=False)  # 应用名称，如"工具集应用"
+    corp_id = Column(String(100), nullable=False)  # 企业ID
+    agent_id = Column(String(50), nullable=False)  # 应用AgentId
+    secret_encrypted = Column(Text)  # 加密的Secret
+    
+    status = Column(SmallInteger, default=1)  # 0-禁用 1-启用
+    created_at = Column(TIMESTAMP, default=datetime.now)
+    updated_at = Column(TIMESTAMP, default=datetime.now, onupdate=datetime.now)

backend/app/routers/apps.py

@@ -30,6 +30,7 @@ class AppCreate(BaseModel):
     base_url: Optional[str] = None
     description: Optional[str] = None
     tools: Optional[List[ToolItem]] = None
+    require_jssdk: bool = False
 
 
 class AppUpdate(BaseModel):
@@ -38,6 +39,7 @@ class AppUpdate(BaseModel):
     base_url: Optional[str] = None
     description: Optional[str] = None
     tools: Optional[List[ToolItem]] = None
+    require_jssdk: Optional[bool] = None
     status: Optional[int] = None
 
 
@@ -117,6 +119,7 @@ async def create_app(
         base_url=data.base_url,
         description=data.description,
         tools=json.dumps([t.model_dump() for t in data.tools], ensure_ascii=False) if data.tools else None,
+        require_jssdk=1 if data.require_jssdk else 0,
         status=1
     )
     db.add(app)
@@ -147,6 +150,10 @@ async def update_app(
         else:
             update_data['tools'] = None
     
+    # 处理 require_jssdk
+    if 'require_jssdk' in update_data:
+        update_data['require_jssdk'] = 1 if update_data['require_jssdk'] else 0
+    
     for key, value in update_data.items():
         setattr(app, key, value)
     
@@ -261,6 +268,7 @@ def format_app(app: App) -> dict:
         "base_url": app.base_url,
         "description": app.description,
         "tools": json.loads(app.tools) if app.tools else [],
+        "require_jssdk": bool(app.require_jssdk),
         "status": app.status,
         "created_at": app.created_at,
         "updated_at": app.updated_at

backend/app/routers/tenant_apps.py

@@ -10,7 +10,6 @@ from ..database import get_db
 from ..models.tenant_app import TenantApp
 from .auth import get_current_user, require_operator
 from ..models.user import User
-from ..services.crypto import encrypt_config, decrypt_config
 
 router = APIRouter(prefix="/tenant-apps", tags=["应用配置"])
 
@@ -21,9 +20,7 @@ class TenantAppCreate(BaseModel):
     tenant_id: str
     app_code: str = "tools"
     app_name: Optional[str] = None
-    wechat_corp_id: Optional[str] = None
+    wechat_app_id: Optional[int] = None  # 关联的企微应用ID
-    wechat_agent_id: Optional[str] = None
-    wechat_secret: Optional[str] = None  # 明文，存储时加密
     access_token: Optional[str] = None  # 如果不传则自动生成
     allowed_origins: Optional[List[str]] = None
     allowed_tools: Optional[List[str]] = None
@@ -31,9 +28,7 @@ class TenantAppCreate(BaseModel):
 
 class TenantAppUpdate(BaseModel):
     app_name: Optional[str] = None
-    wechat_corp_id: Optional[str] = None
+    wechat_app_id: Optional[int] = None  # 关联的企微应用ID
-    wechat_agent_id: Optional[str] = None
-    wechat_secret: Optional[str] = None
     access_token: Optional[str] = None
     allowed_origins: Optional[List[str]] = None
     allowed_tools: Optional[List[str]] = None
@@ -66,7 +61,7 @@ async def list_tenant_apps(
         "total": total,
         "page": page,
         "size": size,
-        "items": [format_tenant_app(app, mask_secret=True) for app in apps]
+        "items": [format_tenant_app(app, mask_secret=True, db=db) for app in apps]
     }
 
 
@@ -81,7 +76,7 @@ async def get_tenant_app(
     if not app:
         raise HTTPException(status_code=404, detail="应用配置不存在")
     
-    return format_tenant_app(app, mask_secret=True)
+    return format_tenant_app(app, mask_secret=True, db=db)
 
 
 @router.post("")
@@ -102,18 +97,11 @@ async def create_tenant_app(
     # 自动生成 access_token
     access_token = data.access_token or secrets.token_hex(32)
     
-    # 加密 wechat_secret
-    wechat_secret_encrypted = None
-    if data.wechat_secret:
-        wechat_secret_encrypted = encrypt_config(data.wechat_secret)
-    
     app = TenantApp(
         tenant_id=data.tenant_id,
         app_code=data.app_code,
         app_name=data.app_name,
-        wechat_corp_id=data.wechat_corp_id,
+        wechat_app_id=data.wechat_app_id,
-        wechat_agent_id=data.wechat_agent_id,
-        wechat_secret_encrypted=wechat_secret_encrypted,
         access_token=access_token,
         allowed_origins=json.dumps(data.allowed_origins) if data.allowed_origins else None,
         allowed_tools=json.dumps(data.allowed_tools) if data.allowed_tools else None,
@@ -140,12 +128,6 @@ async def update_tenant_app(
     
     update_data = data.model_dump(exclude_unset=True)
     
-    # 处理 wechat_secret
-    if 'wechat_secret' in update_data:
-        if update_data['wechat_secret']:
-            app.wechat_secret_encrypted = encrypt_config(update_data['wechat_secret'])
-        del update_data['wechat_secret']
-    
     # 处理 JSON 字段
     if 'allowed_origins' in update_data:
         update_data['allowed_origins'] = json.dumps(update_data['allowed_origins']) if update_data['allowed_origins'] else None
@@ -194,34 +176,28 @@ async def regenerate_token(
     return {"success": True, "access_token": new_token}
 
 
-@router.get("/{app_id}/wechat-secret")
+def format_tenant_app(app: TenantApp, mask_secret: bool = True, db: Session = None) -> dict:
-async def get_wechat_secret(
-    app_id: int,
-    user: User = Depends(require_operator),
-    db: Session = Depends(get_db)
-):
-    """获取解密的 wechat_secret（仅操作员以上）"""
-    app = db.query(TenantApp).filter(TenantApp.id == app_id).first()
-    if not app:
-        raise HTTPException(status_code=404, detail="应用配置不存在")
-    
-    secret = None
-    if app.wechat_secret_encrypted:
-        secret = decrypt_config(app.wechat_secret_encrypted)
-    
-    return {"wechat_secret": secret}
-
-
-def format_tenant_app(app: TenantApp, mask_secret: bool = True) -> dict:
     """格式化应用配置"""
+    # 获取关联的企微应用信息
+    wechat_app_info = None
+    if app.wechat_app_id and db:
+        from ..models.tenant_wechat_app import TenantWechatApp
+        wechat_app = db.query(TenantWechatApp).filter(TenantWechatApp.id == app.wechat_app_id).first()
+        if wechat_app:
+            wechat_app_info = {
+                "id": wechat_app.id,
+                "name": wechat_app.name,
+                "corp_id": wechat_app.corp_id,
+                "agent_id": wechat_app.agent_id
+            }
+    
     result = {
         "id": app.id,
         "tenant_id": app.tenant_id,
         "app_code": app.app_code,
         "app_name": app.app_name,
-        "wechat_corp_id": app.wechat_corp_id,
+        "wechat_app_id": app.wechat_app_id,
-        "wechat_agent_id": app.wechat_agent_id,
+        "wechat_app": wechat_app_info,
-        "has_wechat_secret": bool(app.wechat_secret_encrypted),
         "access_token": "******" if mask_secret and app.access_token else app.access_token,
         "allowed_origins": json.loads(app.allowed_origins) if app.allowed_origins else [],
         "allowed_tools": json.loads(app.allowed_tools) if app.allowed_tools else [],

backend/app/routers/tenant_wechat_apps.py

@@ -0,0 +1,198 @@
+"""租户企业微信应用配置路由"""
+import json
+from fastapi import APIRouter, Depends, HTTPException, Query
+from pydantic import BaseModel
+from typing import Optional, List
+from sqlalchemy.orm import Session
+
+from ..database import get_db
+from ..models.tenant_wechat_app import TenantWechatApp
+from .auth import get_current_user, require_operator
+from ..models.user import User
+from ..services.crypto import encrypt_config, decrypt_config
+
+router = APIRouter(prefix="/tenant-wechat-apps", tags=["租户企微应用"])
+
+
+# Schemas
+
+class TenantWechatAppCreate(BaseModel):
+    tenant_id: str
+    name: str
+    corp_id: str
+    agent_id: str
+    secret: Optional[str] = None  # 明文，存储时加密
+
+
+class TenantWechatAppUpdate(BaseModel):
+    name: Optional[str] = None
+    corp_id: Optional[str] = None
+    agent_id: Optional[str] = None
+    secret: Optional[str] = None
+    status: Optional[int] = None
+
+
+# API Endpoints
+
+@router.get("")
+async def list_tenant_wechat_apps(
+    page: int = Query(1, ge=1),
+    size: int = Query(20, ge=1, le=100),
+    tenant_id: Optional[str] = None,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """获取租户企微应用列表"""
+    query = db.query(TenantWechatApp)
+    
+    if tenant_id:
+        query = query.filter(TenantWechatApp.tenant_id == tenant_id)
+    
+    total = query.count()
+    apps = query.order_by(TenantWechatApp.id.desc()).offset((page - 1) * size).limit(size).all()
+    
+    return {
+        "total": total,
+        "page": page,
+        "size": size,
+        "items": [format_wechat_app(app) for app in apps]
+    }
+
+
+@router.get("/by-tenant/{tenant_id}")
+async def list_by_tenant(
+    tenant_id: str,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """获取指定租户的所有企微应用（用于下拉选择）"""
+    apps = db.query(TenantWechatApp).filter(
+        TenantWechatApp.tenant_id == tenant_id,
+        TenantWechatApp.status == 1
+    ).order_by(TenantWechatApp.id.asc()).all()
+    
+    return [{"id": app.id, "name": app.name, "corp_id": app.corp_id, "agent_id": app.agent_id} for app in apps]
+
+
+@router.get("/{app_id}")
+async def get_tenant_wechat_app(
+    app_id: int,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db)
+):
+    """获取企微应用详情"""
+    app = db.query(TenantWechatApp).filter(TenantWechatApp.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="企微应用不存在")
+    
+    return format_wechat_app(app)
+
+
+@router.post("")
+async def create_tenant_wechat_app(
+    data: TenantWechatAppCreate,
+    user: User = Depends(require_operator),
+    db: Session = Depends(get_db)
+):
+    """创建企微应用"""
+    # 加密 secret
+    secret_encrypted = None
+    if data.secret:
+        secret_encrypted = encrypt_config(data.secret)
+    
+    app = TenantWechatApp(
+        tenant_id=data.tenant_id,
+        name=data.name,
+        corp_id=data.corp_id,
+        agent_id=data.agent_id,
+        secret_encrypted=secret_encrypted,
+        status=1
+    )
+    db.add(app)
+    db.commit()
+    db.refresh(app)
+    
+    return {"success": True, "id": app.id}
+
+
+@router.put("/{app_id}")
+async def update_tenant_wechat_app(
+    app_id: int,
+    data: TenantWechatAppUpdate,
+    user: User = Depends(require_operator),
+    db: Session = Depends(get_db)
+):
+    """更新企微应用"""
+    app = db.query(TenantWechatApp).filter(TenantWechatApp.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="企微应用不存在")
+    
+    update_data = data.model_dump(exclude_unset=True)
+    
+    # 处理 secret 加密
+    if 'secret' in update_data:
+        if update_data['secret']:
+            app.secret_encrypted = encrypt_config(update_data['secret'])
+        del update_data['secret']
+    
+    for key, value in update_data.items():
+        setattr(app, key, value)
+    
+    db.commit()
+    return {"success": True}
+
+
+@router.delete("/{app_id}")
+async def delete_tenant_wechat_app(
+    app_id: int,
+    user: User = Depends(require_operator),
+    db: Session = Depends(get_db)
+):
+    """删除企微应用"""
+    app = db.query(TenantWechatApp).filter(TenantWechatApp.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="企微应用不存在")
+    
+    # 检查是否有租户应用在使用
+    from ..models.tenant_app import TenantApp
+    usage_count = db.query(TenantApp).filter(TenantApp.wechat_app_id == app_id).count()
+    if usage_count > 0:
+        raise HTTPException(status_code=400, detail=f"有 {usage_count} 个应用配置正在使用此企微应用，无法删除")
+    
+    db.delete(app)
+    db.commit()
+    
+    return {"success": True}
+
+
+@router.get("/{app_id}/secret")
+async def get_wechat_secret(
+    app_id: int,
+    user: User = Depends(require_operator),
+    db: Session = Depends(get_db)
+):
+    """获取解密的 secret（仅操作员以上）"""
+    app = db.query(TenantWechatApp).filter(TenantWechatApp.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="企微应用不存在")
+    
+    secret = None
+    if app.secret_encrypted:
+        secret = decrypt_config(app.secret_encrypted)
+    
+    return {"secret": secret}
+
+
+def format_wechat_app(app: TenantWechatApp) -> dict:
+    """格式化企微应用数据"""
+    return {
+        "id": app.id,
+        "tenant_id": app.tenant_id,
+        "name": app.name,
+        "corp_id": app.corp_id,
+        "agent_id": app.agent_id,
+        "has_secret": bool(app.secret_encrypted),
+        "status": app.status,
+        "created_at": app.created_at,
+        "updated_at": app.updated_at
+    }

frontend/src/router/index.js

@@ -37,6 +37,12 @@ const routes = [
         component: () => import('@/views/apps/index.vue'),
         meta: { title: '应用管理', icon: 'Grid' }
       },
+      {
+        path: 'tenant-wechat-apps',
+        name: 'TenantWechatApps',
+        component: () => import('@/views/tenant-wechat-apps/index.vue'),
+        meta: { title: '企微应用', icon: 'ChatDotRound' }
+      },
       {
         path: 'app-config',
         name: 'AppConfig',

frontend/src/views/app-config/index.vue

@@ -19,6 +19,10 @@ const query = reactive({
 // 应用列表（从应用管理获取）
 const appList = ref([])
 const appToolsMap = ref({}) // app_code -> tools[]
+const appRequireJssdk = ref({}) // app_code -> require_jssdk
+
+// 企微应用列表（按租户）
+const wechatAppList = ref([]) // 当前表单租户的企微应用列表
 
 // 对话框
 const dialogVisible = ref(false)
@@ -29,12 +33,15 @@ const form = reactive({
   tenant_id: '',
   app_code: 'tools',
   app_name: '',
-  wechat_corp_id: '',
+  wechat_app_id: null, // 关联的企微应用ID
-  wechat_agent_id: '',
-  wechat_secret: '',
   allowed_tools: []
 })
 
+// 当前选择的应用是否需要 JS-SDK
+const currentAppRequireJssdk = computed(() => {
+  return appRequireJssdk.value[form.app_code] || false
+})
+
 // 根据选择的应用获取工具选项
 const toolOptions = computed(() => {
   const tools = appToolsMap.value[form.app_code] || []
@@ -66,11 +73,13 @@ const urlInfo = ref({})
 
 async function fetchApps() {
   try {
-    const res = await api.get('/api/apps/all')
+    const res = await api.get('/api/apps', { params: { size: 100 } })
-    appList.value = res.data || []
+    const apps = res.data.items || []
+    appList.value = apps.map(a => ({ app_code: a.app_code, app_name: a.app_name }))
     
-    // 获取每个应用的工具列表
+    // 获取每个应用的工具列表和 JS-SDK 要求
-    for (const app of appList.value) {
+    for (const app of apps) {
+      appRequireJssdk.value[app.app_code] = app.require_jssdk || false
       try {
         const toolsRes = await api.get(`/api/apps/${app.app_code}/tools`)
         appToolsMap.value[app.app_code] = toolsRes.data || []
@@ -83,6 +92,19 @@ async function fetchApps() {
   }
 }
 
+async function fetchWechatApps(tenantId) {
+  if (!tenantId) {
+    wechatAppList.value = []
+    return
+  }
+  try {
+    const res = await api.get(`/api/tenant-wechat-apps/by-tenant/${tenantId}`)
+    wechatAppList.value = res.data || []
+  } catch (e) {
+    wechatAppList.value = []
+  }
+}
+
 async function fetchList() {
   loading.value = true
   try {
@@ -113,37 +135,38 @@ function handleCreate() {
     tenant_id: '',
     app_code: 'tools',
     app_name: '',
-    wechat_corp_id: '',
+    wechat_app_id: null,
-    wechat_agent_id: '',
-    wechat_secret: '',
     allowed_tools: []
   })
+  wechatAppList.value = []
   dialogVisible.value = true
 }
 
-function handleEdit(row) {
+async function handleEdit(row) {
   editingId.value = row.id
   dialogTitle.value = '编辑应用配置'
   Object.assign(form, {
     tenant_id: row.tenant_id,
     app_code: row.app_code,
     app_name: row.app_name || '',
-    wechat_corp_id: row.wechat_corp_id || '',
+    wechat_app_id: row.wechat_app_id || null,
-    wechat_agent_id: row.wechat_agent_id || '',
-    wechat_secret: '', // 不回显密钥
     allowed_tools: row.allowed_tools || []
   })
+  // 获取该租户的企微应用列表
+  await fetchWechatApps(row.tenant_id)
   dialogVisible.value = true
 }
 
+// 租户ID变化时重新获取企微应用列表
+async function handleTenantChange() {
+  form.wechat_app_id = null
+  await fetchWechatApps(form.tenant_id)
+}
+
 async function handleSubmit() {
   await formRef.value.validate()
   
   const data = { ...form }
-  // 如果没有输入新密钥，不传这个字段
-  if (!data.wechat_secret) {
-    delete data.wechat_secret
-  }
   
   try {
     if (editingId.value) {
@@ -188,21 +211,6 @@ async function handleRegenerateToken(row) {
   }
 }
 
-async function handleViewSecret(row) {
-  try {
-    const res = await api.get(`/api/tenant-apps/${row.id}/wechat-secret`)
-    if (res.data.wechat_secret) {
-      ElMessageBox.alert(res.data.wechat_secret, '微信 Secret', {
-        confirmButtonText: '关闭'
-      })
-    } else {
-      ElMessage.info('未配置微信 Secret')
-    }
-  } catch (e) {
-    // 错误已在拦截器处理
-  }
-}
-
 // 生成链接功能
 function handleShowUrl(row) {
   currentRow.value = row
@@ -319,12 +327,12 @@ onMounted(() => {
       <el-table-column prop="tenant_id" label="租户ID" width="120" />
       <el-table-column prop="app_code" label="应用" width="100" />
       <el-table-column prop="app_name" label="应用名称" width="150" />
-      <el-table-column prop="wechat_corp_id" label="企业ID" width="150" show-overflow-tooltip />
+      <el-table-column label="企微应用" width="180">
-      <el-table-column prop="wechat_agent_id" label="应用ID" width="100" />
-      <el-table-column label="微信密钥" width="100">
         <template #default="{ row }">
-          <el-tag v-if="row.has_wechat_secret" type="success" size="small">已配置</el-tag>
+          <template v-if="row.wechat_app">
-          <el-tag v-else type="info" size="small">未配置</el-tag>
+            <el-tag type="success" size="small">{{ row.wechat_app.name }}</el-tag>
+          </template>
+          <el-tag v-else type="info" size="small">未关联</el-tag>
         </template>
       </el-table-column>
       <el-table-column label="Access Token" width="120">
@@ -341,12 +349,11 @@ onMounted(() => {
           <span v-if="(row.allowed_tools || []).length > 3">...</span>
         </template>
       </el-table-column>
-      <el-table-column label="操作" width="300" fixed="right">
+      <el-table-column label="操作" width="250" fixed="right">
         <template #default="{ row }">
           <el-button type="success" link size="small" @click="handleShowUrl(row)">生成链接</el-button>
           <el-button v-if="authStore.isOperator" type="primary" link size="small" @click="handleEdit(row)">编辑</el-button>
-          <el-button v-if="authStore.isOperator" type="warning" link size="small" @click="handleViewSecret(row)">密钥</el-button>
+          <el-button v-if="authStore.isOperator" type="info" link size="small" @click="handleRegenerateToken(row)">重置Token</el-button>
-          <el-button v-if="authStore.isOperator" type="info" link size="small" @click="handleRegenerateToken(row)">重置</el-button>
           <el-button v-if="authStore.isOperator" type="danger" link size="small" @click="handleDelete(row)">删除</el-button>
         </template>
       </el-table-column>
@@ -367,7 +374,12 @@ onMounted(() => {
     <el-dialog v-model="dialogVisible" :title="dialogTitle" width="600px">
       <el-form ref="formRef" :model="form" :rules="rules" label-width="120px">
         <el-form-item label="租户ID" prop="tenant_id">
-          <el-input v-model="form.tenant_id" :disabled="!!editingId" placeholder="如: tenant_001" />
+          <el-input 
+            v-model="form.tenant_id" 
+            :disabled="!!editingId" 
+            placeholder="如: qiqi" 
+            @blur="handleTenantChange"
+          />
         </el-form-item>
         <el-form-item label="应用" prop="app_code">
           <el-select v-model="form.app_code" :disabled="!!editingId" placeholder="选择应用" style="width: 100%">
@@ -379,16 +391,25 @@ onMounted(() => {
           <el-input v-model="form.app_name" placeholder="显示名称（可选）" />
         </el-form-item>
         
-        <el-divider content-position="left">企业微信配置</el-divider>
+        <el-divider v-if="currentAppRequireJssdk" content-position="left">企业微信关联</el-divider>
         
-        <el-form-item label="企业 ID">
+        <el-form-item v-if="currentAppRequireJssdk" label="关联企微应用">
-          <el-input v-model="form.wechat_corp_id" placeholder="ww开头的企业ID" />
+          <el-select 
-        </el-form-item>
+            v-model="form.wechat_app_id" 
-        <el-form-item label="应用 ID">
+            placeholder="选择企微应用" 
-          <el-input v-model="form.wechat_agent_id" placeholder="自建应用的 AgentId" />
+            clearable 
-        </el-form-item>
+            style="width: 100%"
-        <el-form-item label="应用 Secret">
+          >
-          <el-input v-model="form.wechat_secret" type="password" show-password :placeholder="editingId ? '留空则不修改' : '应用的 Secret'" />
+            <el-option 
+              v-for="wa in wechatAppList" 
+              :key="wa.id" 
+              :label="`${wa.name} (${wa.corp_id})`" 
+              :value="wa.id" 
+            />
+          </el-select>
+          <div v-if="wechatAppList.length === 0 && form.tenant_id" style="color: #909399; font-size: 12px; margin-top: 4px">
+            该租户暂无企微应用，请先在「企微应用」中配置
+          </div>
         </el-form-item>
         
         <el-divider content-position="left">权限配置</el-divider>

frontend/src/views/apps/index.vue

@@ -24,6 +24,7 @@ const form = reactive({
   app_name: '',
   base_url: '',
   description: '',
+  require_jssdk: false,
   tools: []
 })
 
@@ -72,6 +73,7 @@ function handleCreate() {
     app_name: '',
     base_url: '',
     description: '',
+    require_jssdk: false,
     tools: []
   })
   dialogVisible.value = true
@@ -85,6 +87,7 @@ function handleEdit(row) {
     app_name: row.app_name,
     base_url: row.base_url || '',
     description: row.description || '',
+    require_jssdk: row.require_jssdk || false,
     tools: row.tools || []
   })
   dialogVisible.value = true
@@ -201,6 +204,13 @@ onMounted(() => {
           <el-tag size="small">{{ (row.tools || []).length }} 个</el-tag>
         </template>
       </el-table-column>
+      <el-table-column label="JS-SDK" width="90">
+        <template #default="{ row }">
+          <el-tag :type="row.require_jssdk ? 'warning' : 'info'" size="small">
+            {{ row.require_jssdk ? '需要' : '不需要' }}
+          </el-tag>
+        </template>
+      </el-table-column>
       <el-table-column label="状态" width="80">
         <template #default="{ row }">
           <el-tag :type="row.status === 1 ? 'success' : 'info'" size="small">
@@ -245,6 +255,10 @@ onMounted(() => {
         <el-form-item label="描述">
           <el-input v-model="form.description" type="textarea" :rows="2" placeholder="应用描述" />
         </el-form-item>
+        <el-form-item label="企微JS-SDK">
+          <el-switch v-model="form.require_jssdk" />
+          <span style="margin-left: 12px; color: #909399; font-size: 12px">开启后租户需关联企微应用才能使用</span>
+        </el-form-item>
         
         <el-divider content-position="left">工具列表</el-divider>
         

frontend/src/views/tenant-wechat-apps/index.vue

@@ -0,0 +1,238 @@
+<script setup>
+import { ref, reactive, onMounted } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import api from '@/api'
+import { useAuthStore } from '@/stores/auth'
+
+const authStore = useAuthStore()
+
+const loading = ref(false)
+const tableData = ref([])
+const total = ref(0)
+const query = reactive({
+  page: 1,
+  size: 20,
+  tenant_id: ''
+})
+
+// 对话框
+const dialogVisible = ref(false)
+const dialogTitle = ref('')
+const editingId = ref(null)
+const formRef = ref(null)
+const form = reactive({
+  tenant_id: '',
+  name: '',
+  corp_id: '',
+  agent_id: '',
+  secret: ''
+})
+
+const rules = {
+  tenant_id: [{ required: true, message: '请输入租户ID', trigger: 'blur' }],
+  name: [{ required: true, message: '请输入应用名称', trigger: 'blur' }],
+  corp_id: [{ required: true, message: '请输入企业ID', trigger: 'blur' }],
+  agent_id: [{ required: true, message: '请输入应用ID', trigger: 'blur' }]
+}
+
+async function fetchList() {
+  loading.value = true
+  try {
+    const res = await api.get('/api/tenant-wechat-apps', { params: query })
+    tableData.value = res.data.items || []
+    total.value = res.data.total || 0
+  } catch (e) {
+    console.error(e)
+  } finally {
+    loading.value = false
+  }
+}
+
+function handleSearch() {
+  query.page = 1
+  fetchList()
+}
+
+function handlePageChange(page) {
+  query.page = page
+  fetchList()
+}
+
+function handleCreate() {
+  editingId.value = null
+  dialogTitle.value = '新建企微应用'
+  Object.assign(form, {
+    tenant_id: query.tenant_id || '',
+    name: '',
+    corp_id: '',
+    agent_id: '',
+    secret: ''
+  })
+  dialogVisible.value = true
+}
+
+function handleEdit(row) {
+  editingId.value = row.id
+  dialogTitle.value = '编辑企微应用'
+  Object.assign(form, {
+    tenant_id: row.tenant_id,
+    name: row.name,
+    corp_id: row.corp_id,
+    agent_id: row.agent_id,
+    secret: '' // 不回显密钥
+  })
+  dialogVisible.value = true
+}
+
+async function handleSubmit() {
+  await formRef.value.validate()
+  
+  const data = { ...form }
+  // 如果没有输入新密钥，不传这个字段
+  if (!data.secret) {
+    delete data.secret
+  }
+  
+  try {
+    if (editingId.value) {
+      await api.put(`/api/tenant-wechat-apps/${editingId.value}`, data)
+      ElMessage.success('更新成功')
+    } else {
+      await api.post('/api/tenant-wechat-apps', data)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    fetchList()
+  } catch (e) {
+    // 错误已在拦截器处理
+  }
+}
+
+async function handleDelete(row) {
+  await ElMessageBox.confirm(`确定删除企微应用「${row.name}」吗？`, '提示', {
+    type: 'warning'
+  })
+  
+  try {
+    await api.delete(`/api/tenant-wechat-apps/${row.id}`)
+    ElMessage.success('删除成功')
+    fetchList()
+  } catch (e) {
+    // 错误已在拦截器处理
+  }
+}
+
+async function handleViewSecret(row) {
+  try {
+    const res = await api.get(`/api/tenant-wechat-apps/${row.id}/secret`)
+    if (res.data.secret) {
+      ElMessageBox.alert(res.data.secret, '应用 Secret', {
+        confirmButtonText: '关闭'
+      })
+    } else {
+      ElMessage.info('未配置 Secret')
+    }
+  } catch (e) {
+    // 错误已在拦截器处理
+  }
+}
+
+onMounted(() => {
+  fetchList()
+})
+</script>
+
+<template>
+  <div class="page-container">
+    <div class="page-header">
+      <div class="title">企微应用管理</div>
+      <el-button v-if="authStore.isOperator" type="primary" @click="handleCreate">
+        <el-icon><Plus /></el-icon>
+        新建企微应用
+      </el-button>
+    </div>
+    
+    <!-- 搜索栏 -->
+    <div class="search-bar">
+      <el-input
+        v-model="query.tenant_id"
+        placeholder="租户ID"
+        clearable
+        style="width: 200px"
+        @keyup.enter="handleSearch"
+      />
+      <el-button type="primary" @click="handleSearch">搜索</el-button>
+    </div>
+    
+    <!-- 表格 -->
+    <el-table v-loading="loading" :data="tableData" style="width: 100%">
+      <el-table-column prop="id" label="ID" width="60" />
+      <el-table-column prop="tenant_id" label="租户ID" width="120" />
+      <el-table-column prop="name" label="应用名称" width="180" />
+      <el-table-column prop="corp_id" label="企业ID" width="200" show-overflow-tooltip />
+      <el-table-column prop="agent_id" label="应用ID" width="120" />
+      <el-table-column label="Secret" width="100">
+        <template #default="{ row }">
+          <el-tag v-if="row.has_secret" type="success" size="small">已配置</el-tag>
+          <el-tag v-else type="info" size="small">未配置</el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="状态" width="80">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'danger'" size="small">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column prop="created_at" label="创建时间" width="180" />
+      <el-table-column label="操作" width="200" fixed="right">
+        <template #default="{ row }">
+          <el-button v-if="authStore.isOperator" type="primary" link size="small" @click="handleEdit(row)">编辑</el-button>
+          <el-button v-if="authStore.isOperator" type="warning" link size="small" @click="handleViewSecret(row)">查看密钥</el-button>
+          <el-button v-if="authStore.isOperator" type="danger" link size="small" @click="handleDelete(row)">删除</el-button>
+        </template>
+      </el-table-column>
+    </el-table>
+    
+    <!-- 分页 -->
+    <div style="margin-top: 20px; display: flex; justify-content: flex-end">
+      <el-pagination
+        v-model:current-page="query.page"
+        :page-size="query.size"
+        :total="total"
+        layout="total, prev, pager, next"
+        @current-change="handlePageChange"
+      />
+    </div>
+    
+    <!-- 编辑对话框 -->
+    <el-dialog v-model="dialogVisible" :title="dialogTitle" width="500px">
+      <el-form ref="formRef" :model="form" :rules="rules" label-width="100px">
+        <el-form-item label="租户ID" prop="tenant_id">
+          <el-input v-model="form.tenant_id" :disabled="!!editingId" placeholder="如: qiqi" />
+        </el-form-item>
+        <el-form-item label="应用名称" prop="name">
+          <el-input v-model="form.name" placeholder="如: 工具集企微应用" />
+        </el-form-item>
+        <el-form-item label="企业ID" prop="corp_id">
+          <el-input v-model="form.corp_id" placeholder="ww开头的企业ID" />
+        </el-form-item>
+        <el-form-item label="应用ID" prop="agent_id">
+          <el-input v-model="form.agent_id" placeholder="自建应用的 AgentId" />
+        </el-form-item>
+        <el-form-item label="应用 Secret">
+          <el-input 
+            v-model="form.secret" 
+            type="password" 
+            show-password 
+            :placeholder="editingId ? '留空则不修改' : '应用的 Secret'" 
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSubmit">确定</el-button>
+      </template>
+    </el-dialog>
+  </div>
+</template>