From a5d728c7b968ce3aeb2e75b1454b87501972d70b Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 15:29:23 +0800
Subject: [PATCH 01/14] =?UTF-8?q?@=20feat(draft-groups):=20=E8=8D=89?=
 =?UTF-8?q?=E7=A8=BF=E7=BB=84=E9=A1=B5=E9=9D=A2=E4=BC=98=E5=8C=96=E4=B8=8E?=
 =?UTF-8?q?=E9=A2=84=E4=BC=B0=E6=88=90=E6=9C=AC=E4=BF=AE=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 保存品类按钮移到品类同一行，加宽按钮
- 删除草稿组加 try/catch 错误处理
- 预估成本：costPrice 为 null 时回退到 estimatedCostPrice
  - OpenProductAssetVariant 类型加 estimatedCostPrice
  - toOpenProductVariants 映射加 estimatedCostPrice
  - buildSlotSnapshot/buildHardwareSnapshot 用 costPrice ?? estimatedCostPrice
  - BOM 聚合用 costPrice ?? estimatedCostPrice
- 颜色统一为白曜石设计令牌（--obs-shell-color/heading-color/muted/surface-bg/border）
- 状态标签颜色改用固定色值，降低饱和度
- 板材/组件/五金件列表每行可点击，弹出只读 Modal 展示完整信息
- 组件详情弹窗增加规格款 ID、资产族 ID、基材 ID、饰面 ID、连接位、3D 模型 URL
@
---
 .../app/draft-groups/DraftGroupsClient.tsx    | 300 ++++++++++--------
 .../src/app/draft-groups/draftGroupDisplay.ts |  31 +-
 .../src/lib/open-product/types.ts             |   1 +
 .../src/server/services/draft-group.mapper.ts |   4 +-
 .../pre-sku-materialization.service.ts        |   2 +-
 .../single-board-desk-materialization.ts      |   4 +
 6 files changed, 209 insertions(+), 133 deletions(-)

diff --git a/furniture-3d-system/src/app/draft-groups/DraftGroupsClient.tsx b/furniture-3d-system/src/app/draft-groups/DraftGroupsClient.tsx
index 7e13cc80..71a7eb0f 100644
--- a/furniture-3d-system/src/app/draft-groups/DraftGroupsClient.tsx
+++ b/furniture-3d-system/src/app/draft-groups/DraftGroupsClient.tsx
@@ -9,6 +9,7 @@ import {
   ChevronRight,
   CircleDashed,
   CircleDot,
+  Eye,
   FolderTree,
   Layers3,
   Loader2,
@@ -19,6 +20,7 @@ import {
 import { ModelPreviewPanel } from '@/components/platform/ModelPreviewPanel'
 import { ViewportToolbarButton } from '@/components/platform/ViewportStageShell'
 import DeleteConfirmDialog from '@/components/ui/DeleteConfirmDialog'
+import Modal from '@/components/ui/Modal'
 import { canOperateDesignWorkspace as canOperateDesignWorkspaceForUser } from '@/lib/role-scope'
 import { extractResponseData, isApiFailure, isRecord, parseApiErrorPayload, readJsonSafely } from '@/lib/api-response'
 import { getApiErrorMessage, cn } from '@/lib/utils'
@@ -43,6 +45,7 @@ import {
   getDraftGroupStatusLabel,
   getDraftStatusClassName,
   getPreSkuStatusLabel,
+  type DraftMaterialItem,
 } from './draftGroupDisplay'
 
 interface DraftGroupsClientProps {
@@ -123,11 +126,11 @@ function FieldRows({
   return (
     <div className="grid gap-2">
       {rows.map((row) => (
-        <div key={row.label} className="grid grid-cols-[104px_minmax(0,1fr)] gap-3 rounded-[6px] bg-[#f7f9f9] px-3 py-2">
-          <span className="text-[11px] font-semibold text-[#5a6062]/62">{row.label}</span>
+        <div key={row.label} className="grid grid-cols-[104px_minmax(0,1fr)] gap-3 rounded-[6px] bg-[var(--obs-shell-surface-bg)] px-3 py-2">
+          <span className="text-[11px] font-semibold text-[var(--obs-shell-muted)]/62">{row.label}</span>
           <span
             className={cn(
-              'min-w-0 truncate text-[12px] font-black text-[#2d3335]',
+              'min-w-0 truncate text-[12px] font-black text-[var(--obs-heading-color)]',
               row.pending && 'text-amber-700',
             )}
           >
@@ -183,9 +186,9 @@ function DraftGroupCategoryEditor({
   }
 
   return (
-    <div className="grid gap-2">
-      <label className="grid grid-cols-[104px_minmax(0,1fr)] items-center gap-3 rounded-[6px] bg-[#f7f9f9] px-3 py-2">
-        <span className="text-[11px] font-semibold text-[#5a6062]/62">品类</span>
+    <div className="grid gap-1.5">
+      <div className="flex items-center gap-2 rounded-[6px] bg-[var(--obs-shell-surface-bg)] px-3 py-2">
+        <span className="shrink-0 text-[11px] font-semibold text-[var(--obs-shell-muted)]/62">品类</span>
         <select
           aria-label="品类"
           value={categoryId}
@@ -196,10 +199,10 @@ function DraftGroupCategoryEditor({
             setError(null)
           }}
           className={cn(
-            'h-8 min-w-0 rounded-[5px] border bg-white px-2 text-[12px] font-black text-[#2d3335] outline-none transition',
+            'h-8 min-w-0 flex-1 rounded-[5px] border bg-white px-2 text-[12px] font-black text-[var(--obs-heading-color)] outline-none transition',
             disabled
               ? 'border-transparent bg-transparent px-0'
-              : 'border-[#dbe3e5] focus:border-[#47646b] focus:ring-2 focus:ring-[#47646b]/12',
+              : 'border-[var(--obs-shell-border)] focus:border-[var(--obs-shell-color)] focus:ring-2 focus:ring-[var(--obs-shell-color)]/12',
             !categoryId && 'text-amber-700',
           )}
         >
@@ -210,30 +213,29 @@ function DraftGroupCategoryEditor({
             </option>
           ))}
         </select>
-      </label>
-
-      {canEdit ? (
-        <div className="flex items-center justify-between gap-2">
-          <div className="min-w-0">
-            {status ? <p className="text-[11px] font-black text-emerald-700">{status}</p> : null}
-            {error ? <p className="text-[11px] font-semibold text-rose-700">{error}</p> : null}
-          </div>
+        {canEdit ? (
           <button
             type="button"
             onClick={handleSave}
             disabled={!dirty || disabled}
             className={cn(
-              'inline-flex h-8 items-center gap-1.5 rounded-[6px] px-3 text-[11px] font-black transition',
+              'inline-flex h-7 shrink-0 items-center gap-1 rounded-[5px] px-3.5 text-[10px] font-black transition',
               dirty && !disabled
-                ? 'bg-[#2d3335] text-white hover:bg-[#47646b]'
-                : 'cursor-not-allowed bg-[#edf0f1] text-[#5a6062]/50',
+                ? 'bg-[var(--obs-heading-color)] text-white hover:bg-[var(--obs-shell-color)]'
+                : 'cursor-not-allowed bg-[var(--obs-shell-surface-bg)] text-[var(--obs-shell-muted)]/50',
             )}
           >
-            {saving ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : null}
+            {saving ? <Loader2 className="h-3 w-3 animate-spin" /> : null}
             保存品类
           </button>
+        ) : null}
+      </div>
+      {(status || error) && (
+        <div className="px-1">
+          {status ? <p className="text-[10px] font-black text-[var(--obs-shell-color)]">{status}</p> : null}
+          {error ? <p className="text-[10px] font-semibold text-rose-600">{error}</p> : null}
         </div>
-      ) : null}
+      )}
     </div>
   )
 }
@@ -248,10 +250,10 @@ function InspectorSection({
   children: React.ReactNode
 }) {
   return (
-    <section className="border-b border-[#edf0f1] px-5 py-4">
+    <section className="border-b border-[var(--obs-shell-border)] px-5 py-4">
       <div className="mb-3 flex items-center justify-between gap-3">
-        <h2 className="text-[14px] font-black tracking-tight text-[#2d3335]">{title}</h2>
-        <span className="rounded-[5px] bg-[#f4f6f6] px-2 py-1 text-[10px] font-black uppercase tracking-[0.12em] text-[#47646b]/55">
+        <h2 className="text-[14px] font-black tracking-tight text-[var(--obs-heading-color)]">{title}</h2>
+        <span className="rounded-[5px] bg-[var(--obs-shell-surface-bg)] px-2 py-1 text-[10px] font-black uppercase tracking-[0.12em] text-[var(--obs-shell-color)]/55">
           {code}
         </span>
       </div>
@@ -260,7 +262,16 @@ function InspectorSection({
   )
 }
 
-function MaterialPreview({ preSku }: { preSku: DraftGroupPreSkuDTO }) {
+function DetailField({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="rounded-[6px] bg-[var(--obs-shell-surface-bg)] px-3 py-2.5">
+      <p className="text-[10px] font-semibold text-[var(--obs-shell-muted)]">{label}</p>
+      <p className="mt-0.5 text-[13px] font-black text-[var(--obs-heading-color)]">{value || DRAFT_GROUP_PENDING_TEXT}</p>
+    </div>
+  )
+}
+
+function MaterialPreview({ preSku, onItemClick }: { preSku: DraftGroupPreSkuDTO; onItemClick: (item: DraftMaterialItem) => void }) {
   const sections = deriveDraftMaterialSections(preSku)
 
   return (
@@ -269,37 +280,40 @@ function MaterialPreview({ preSku }: { preSku: DraftGroupPreSkuDTO }) {
         const Icon = section.key === 'BOARD' ? Boxes : section.key === 'HARDWARE' ? Wrench : Layers3
 
         return (
-          <div key={section.key} className="overflow-hidden rounded-[8px] border border-[#e2e7e8] bg-white">
-            <div className="flex items-center justify-between border-b border-[#edf0f1] bg-[#f8fafa] px-3 py-2.5">
+          <div key={section.key} className="overflow-hidden rounded-[8px] border border-[var(--obs-shell-border)] bg-white">
+            <div className="flex items-center justify-between border-b border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-3 py-2.5">
               <div className="flex items-center gap-2">
-                <Icon className="h-3.5 w-3.5 text-[#47646b]" />
-                <p className="text-[12px] font-black text-[#2d3335]">{section.title}</p>
+                <Icon className="h-3.5 w-3.5 text-[var(--obs-shell-color)]" />
+                <p className="text-[12px] font-black text-[var(--obs-heading-color)]">{section.title}</p>
               </div>
-              <span className="text-[11px] font-black text-[#5a6062]/58">{section.items.length}</span>
+              <span className="text-[11px] font-black text-[var(--obs-shell-muted)]">{section.items.length}</span>
             </div>
             {section.items.length === 0 ? (
-              <div className="px-3 py-4 text-[12px] font-semibold text-[#5a6062]/58">
+              <div className="px-3 py-4 text-[12px] font-semibold text-[var(--obs-shell-muted)]">
                 暂无{section.title}快照
               </div>
             ) : (
-              <div className="divide-y divide-[#edf0f1]">
+              <div className="divide-y divide-[var(--obs-shell-border)]">
                 {section.items.slice(0, 4).map((item) => (
-                  <div key={item.id} className="px-3 py-3">
-                    <div className="flex items-start justify-between gap-3">
-                      <div className="min-w-0">
-                        <p className="truncate text-[12px] font-black text-[#2d3335]">{item.name}</p>
-                        <p className="mt-1 truncate text-[11px] font-semibold text-[#5a6062]/62">
-                          {item.code} · {item.role}
-                        </p>
-                      </div>
-                      <span className="shrink-0 rounded-[4px] bg-[#edf4f3] px-1.5 py-0.5 text-[10px] font-black text-[#47646b]">
+                  <button
+                    key={item.id}
+                    type="button"
+                    onClick={() => onItemClick(item)}
+                    className="flex w-full items-start gap-3 px-3 py-3 text-left transition hover:bg-[var(--obs-shell-surface-bg)]"
+                  >
+                    <div className="min-w-0 flex-1">
+                      <p className="truncate text-[12px] font-black text-[var(--obs-heading-color)]">{item.name}</p>
+                      <p className="mt-1 truncate text-[11px] font-semibold text-[var(--obs-shell-muted)]">
+                        {item.code} · {item.role}
+                      </p>
+                    </div>
+                    <div className="flex shrink-0 items-center gap-2">
+                      <span className="rounded-[4px] bg-[var(--obs-shell-surface-bg)] px-1.5 py-0.5 text-[10px] font-black text-[var(--obs-shell-color)]">
                         x{item.quantity}
                       </span>
+                      <Eye className="h-3 w-3 text-[var(--obs-shell-muted)]" />
                     </div>
-                    <p className="mt-2 truncate text-[11px] font-semibold text-[#5a6062]/58">
-                      {item.dimensions} · {item.material}
-                    </p>
-                  </div>
+                  </button>
                 ))}
               </div>
             )}
@@ -333,16 +347,16 @@ function PreSkuList({
             className={cn(
               'w-full rounded-[8px] border px-3 py-3 text-left transition',
               active
-                ? 'border-[#47646b] bg-[#edf4f3] shadow-sm'
-                : 'border-[#e2e7e8] bg-white hover:border-[#aebfc4] hover:bg-[#f8fafa]',
+                ? 'border-[var(--obs-shell-color)] bg-[var(--obs-shell-surface-bg)] shadow-sm'
+                : 'border-[var(--obs-shell-border)] bg-white hover:border-[var(--obs-shell-border)] hover:bg-[var(--obs-shell-surface-bg)]',
             )}
           >
             <div className="flex items-start justify-between gap-3">
               <div className="min-w-0">
-                <p className="truncate text-[13px] font-black text-[#2d3335]">
+                <p className="truncate text-[13px] font-black text-[var(--obs-heading-color)]">
                   {preSku.customName || preSku.defaultName}
                 </p>
-                <p className="mt-1 truncate text-[11px] font-semibold text-[#5a6062]/58">
+                <p className="mt-1 truncate text-[11px] font-semibold text-[var(--obs-shell-muted)]/58">
                   #{preSku.sequence} · {formatPreSkuListMeta(preSku)}
                 </p>
               </div>
@@ -351,13 +365,13 @@ function PreSkuList({
               </span>
             </div>
             <div className="mt-3 flex flex-wrap gap-1.5">
-              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[#47646b]">
+              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[var(--obs-shell-color)]">
                 板材 {counts.boards}
               </span>
-              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[#47646b]">
+              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[var(--obs-shell-color)]">
                 组件 {counts.components}
               </span>
-              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[#47646b]">
+              <span className="rounded-[4px] bg-white/78 px-1.5 py-0.5 text-[10px] font-black text-[var(--obs-shell-color)]">
                 五金 {counts.hardware}
               </span>
             </div>
@@ -379,6 +393,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
   const [showHoleHighlights, setShowHoleHighlights] = useState(true)
   const [collapsedSeries, setCollapsedSeries] = useState<Record<string, boolean>>({})
   const [deletingDraftGroup, setDeletingDraftGroup] = useState<DraftGroupDTO | null>(null)
+  const [detailVariant, setDetailVariant] = useState<DraftMaterialItem | null>(null)
 
   const selectedDraftGroup = useMemo(
     () => draftGroupItems.find((draftGroup) => draftGroup.id === selectedDraftGroupId) ?? draftGroupItems[0] ?? null,
@@ -505,35 +520,40 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
 
   const handleDeleteDraftGroup = async () => {
     if (!deletingDraftGroup) return
-    await deleteDraftGroup(deletingDraftGroup.id)
-    setDraftGroupItems((current) => {
-      const next = current.filter((draftGroup) => draftGroup.id !== deletingDraftGroup.id)
-      if (selectedDraftGroupId === deletingDraftGroup.id) {
-        setSelectedDraftGroupId(next[0]?.id ?? '')
-      }
-      return next
-    })
-    setDetailById((current) => {
-      const next = { ...current }
-      delete next[deletingDraftGroup.id]
-      return next
-    })
-    setDeletingDraftGroup(null)
+    try {
+      await deleteDraftGroup(deletingDraftGroup.id)
+      setDraftGroupItems((current) => {
+        const next = current.filter((draftGroup) => draftGroup.id !== deletingDraftGroup.id)
+        if (selectedDraftGroupId === deletingDraftGroup.id) {
+          setSelectedDraftGroupId(next[0]?.id ?? '')
+        }
+        return next
+      })
+      setDetailById((current) => {
+        const next = { ...current }
+        delete next[deletingDraftGroup.id]
+        return next
+      })
+      setDeletingDraftGroup(null)
+    } catch (error) {
+      setDetailError(error instanceof Error ? error.message : '删除草稿组失败')
+      setDeletingDraftGroup(null)
+    }
   }
 
   return (
-    <div className="flex h-[calc(100vh-64px)] min-h-0 bg-[#f4f6f6] font-[Manrope,sans-serif] tracking-tight text-[#2d3335]">
-      <aside className="flex w-[360px] shrink-0 flex-col border-r border-[#e2e7e8] bg-white">
-        <div className="border-b border-[#edf0f1] px-4 py-4">
+    <div className="flex h-[calc(100vh-64px)] min-h-0 bg-[var(--obs-shell-surface-bg)] font-[Manrope,sans-serif] tracking-tight text-[var(--obs-heading-color)]">
+      <aside className="flex w-[360px] shrink-0 flex-col border-r border-[var(--obs-shell-border)] bg-white">
+        <div className="border-b border-[var(--obs-shell-border)] px-4 py-4">
           <div className="flex items-start justify-between gap-3">
             <div>
-              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[#47646b]/55">DRAFT GROUPS</p>
-              <h1 className="mt-1 text-[20px] font-black tracking-tight text-[#2d3335]">草稿组</h1>
+              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[var(--obs-shell-color)]/55">DRAFT GROUPS</p>
+              <h1 className="mt-1 text-[20px] font-black tracking-tight text-[var(--obs-heading-color)]">草稿组</h1>
             </div>
             {canOperateDesignWorkspace ? (
               <Link
                 href="/assisted-assembly"
-                className="inline-flex h-9 shrink-0 items-center gap-1.5 rounded-[6px] bg-[#2d3335] px-3 text-[12px] font-black text-white transition hover:bg-[#47646b]"
+                className="inline-flex h-9 shrink-0 items-center gap-1.5 rounded-[6px] bg-[var(--obs-heading-color)] px-3 text-[12px] font-black text-white transition hover:bg-[var(--obs-shell-color)]"
               >
                 新建
                 <ArrowRight className="h-3.5 w-3.5" />
@@ -548,9 +568,9 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
               ['待入库', counts.ready],
               ['已入库', counts.formalized],
             ].map(([label, value]) => (
-              <div key={label} className="rounded-[7px] border border-[#e2e7e8] bg-[#f8fafa] px-2 py-2">
-                <p className="text-[10px] font-black text-[#5a6062]/50">{label}</p>
-                <p className="mt-1 text-[16px] font-black text-[#2d3335]">{value}</p>
+              <div key={label} className="rounded-[7px] border border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-2 py-2">
+                <p className="text-[10px] font-black text-[var(--obs-shell-muted)]/50">{label}</p>
+                <p className="mt-1 text-[16px] font-black text-[var(--obs-heading-color)]">{value}</p>
               </div>
             ))}
           </div>
@@ -558,17 +578,17 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
 
         <div className="min-h-0 flex-1 overflow-y-auto p-2.5">
           {draftGroupItems.length === 0 ? (
-            <div className="rounded-[8px] border border-dashed border-[#cfd8da] bg-[#f8fafa] px-4 py-8 text-center">
-              <CircleDashed className="mx-auto h-7 w-7 text-[#47646b]/60" />
-              <p className="mt-3 text-[14px] font-black text-[#2d3335]">暂无草稿组</p>
-              <p className="mt-2 text-[12px] leading-5 text-[#5a6062]/64">
+            <div className="rounded-[8px] border border-dashed border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-4 py-8 text-center">
+              <CircleDashed className="mx-auto h-7 w-7 text-[var(--obs-shell-color)]/60" />
+              <p className="mt-3 text-[14px] font-black text-[var(--obs-heading-color)]">暂无草稿组</p>
+              <p className="mt-2 text-[12px] leading-5 text-[var(--obs-shell-muted)]/64">
                 先到辅助装配页面保存一组装配结果。
               </p>
             </div>
           ) : (
             <div className="space-y-2.5">
               {seriesGroups.map((group) => (
-                <section key={group.key} className="overflow-hidden rounded-[8px] border border-[#e2e7e8] bg-white">
+                <section key={group.key} className="overflow-hidden rounded-[8px] border border-[var(--obs-shell-border)] bg-white">
                   <button
                     type="button"
                     onClick={() =>
@@ -577,22 +597,22 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                         [group.key]: !current[group.key],
                       }))
                     }
-                    className="flex w-full items-center justify-between gap-3 border-b border-[#edf0f1] bg-[#f8fafa] px-3 py-2 text-left transition hover:bg-[#f1f5f5]"
+                    className="flex w-full items-center justify-between gap-3 border-b border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-3 py-2 text-left transition hover:bg-[var(--obs-shell-surface-bg)]"
                   >
                     <div className="flex min-w-0 items-center gap-2">
                       {collapsedSeries[group.key] ? (
-                        <ChevronRight className="h-3.5 w-3.5 shrink-0 text-[#47646b]" />
+                        <ChevronRight className="h-3.5 w-3.5 shrink-0 text-[var(--obs-shell-color)]" />
                       ) : (
-                        <ChevronDown className="h-3.5 w-3.5 shrink-0 text-[#47646b]" />
+                        <ChevronDown className="h-3.5 w-3.5 shrink-0 text-[var(--obs-shell-color)]" />
                       )}
-                      <FolderTree className="h-3.5 w-3.5 shrink-0 text-[#47646b]" />
+                      <FolderTree className="h-3.5 w-3.5 shrink-0 text-[var(--obs-shell-color)]" />
                       <div className="min-w-0">
-                        <p className="truncate text-[12px] font-black text-[#2d3335]">
-                          {group.name} <span className="text-[#47646b]/72">{group.code}</span>
+                        <p className="truncate text-[12px] font-black text-[var(--obs-heading-color)]">
+                          {group.name} <span className="text-[var(--obs-shell-color)]/72">{group.code}</span>
                         </p>
                       </div>
                     </div>
-                    <span className="shrink-0 text-[10px] font-black text-[#5a6062]/55">{group.items.length} 组</span>
+                    <span className="shrink-0 text-[10px] font-black text-[var(--obs-shell-muted)]/55">{group.items.length} 组</span>
                   </button>
                   <div className={cn('divide-y divide-[#edf0f1]', collapsedSeries[group.key] && 'hidden')}>
                     {group.items.map((draftGroup) => {
@@ -603,7 +623,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                           key={draftGroup.id}
                           className={cn(
                             'transition',
-                            active ? 'bg-[#edf4f3]' : 'bg-white hover:bg-[#f8fafa]',
+                            active ? 'bg-[var(--obs-shell-surface-bg)]' : 'bg-white hover:bg-[var(--obs-shell-surface-bg)]',
                           )}
                         >
                           <div className="px-3 py-2.5">
@@ -614,8 +634,8 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                             >
                               <div className="flex items-start justify-between gap-3">
                                 <div className="min-w-0">
-                                  <p className="truncate text-[13px] font-black text-[#2d3335]">{draftGroup.name}</p>
-                                  <p className="mt-1 truncate text-[10px] font-semibold text-[#5a6062]/58">
+                                  <p className="truncate text-[13px] font-black text-[var(--obs-heading-color)]">{draftGroup.name}</p>
+                                  <p className="mt-1 truncate text-[10px] font-semibold text-[var(--obs-shell-muted)]/58">
                                     {draftGroup.code} · {formatDraftGroupDate(draftGroup.updatedAt)}
                                   </p>
                                 </div>
@@ -623,7 +643,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                               </div>
                             </button>
                             <div className="mt-2 flex items-center justify-between gap-3">
-                              <span className="text-[10px] font-black text-[#5a6062]/45">
+                              <span className="text-[10px] font-black text-[var(--obs-shell-muted)]/45">
                                 已选候选 {displayDraftValue(typeof draftGroup.summary?.selectedCount === 'number' ? draftGroup.summary.selectedCount : null)}
                               </span>
                               <div className="flex items-center gap-2">
@@ -639,7 +659,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                                 ) : null}
                                 <Link
                                   href={`/draft-groups/${draftGroup.id}`}
-                                  className="inline-flex items-center gap-1 text-[10px] font-black text-[#47646b] transition hover:text-[#2d3335]"
+                                  className="inline-flex items-center gap-1 text-[10px] font-black text-[var(--obs-shell-color)] transition hover:text-[var(--obs-heading-color)]"
                                 >
                                   详情
                                   <ArrowRight className="h-3 w-3" />
@@ -664,15 +684,15 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
         <div className="pointer-events-none absolute left-5 right-5 top-5 z-20 flex items-start justify-between">
           <div className="rounded-[8px] bg-white/72 px-3 py-2 shadow-sm ring-1 ring-black/5 backdrop-blur-xl">
             <div>
-              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[#47646b]/55">3D WORKBENCH</p>
-              <h2 className="mt-1 text-[18px] font-black text-[#2d3335]">
+              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[var(--obs-shell-color)]/55">3D WORKBENCH</p>
+              <h2 className="mt-1 text-[18px] font-black text-[var(--obs-heading-color)]">
                 {selectedDraftGroup?.name ?? '草稿组预览'}
               </h2>
             </div>
           </div>
           <div className="rounded-[8px] bg-white/72 px-3 py-2 text-right shadow-sm ring-1 ring-black/5 backdrop-blur-xl">
-            <p className="text-[10px] font-black uppercase tracking-[0.12em] text-[#47646b]/54">PRE SKU</p>
-            <p className="mt-1 text-[12px] font-black text-[#2d3335]">{selectedDetail?.preSkus.length ?? 0} 条</p>
+            <p className="text-[10px] font-black uppercase tracking-[0.12em] text-[var(--obs-shell-color)]/54">PRE SKU</p>
+            <p className="mt-1 text-[12px] font-black text-[var(--obs-heading-color)]">{selectedDetail?.preSkus.length ?? 0} 条</p>
           </div>
         </div>
         <ModelPreviewPanel
@@ -705,12 +725,12 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
         />
       </main>
 
-      <aside className="flex h-full w-[460px] shrink-0 flex-col border-l border-[#e2e7e8] bg-white">
-        <div className="border-b border-[#edf0f1] px-5 py-4">
+      <aside className="flex h-full w-[460px] shrink-0 flex-col border-l border-[var(--obs-shell-border)] bg-white">
+        <div className="border-b border-[var(--obs-shell-border)] px-5 py-4">
           <div className="flex items-center justify-between gap-3">
             <div>
-              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[#47646b]/55">INSPECTOR</p>
-              <h2 className="mt-1 text-[16px] font-black text-[#2d3335]">资料承接</h2>
+              <p className="text-[10px] font-black uppercase tracking-[0.18em] text-[var(--obs-shell-color)]/55">INSPECTOR</p>
+              <h2 className="mt-1 text-[16px] font-black text-[var(--obs-heading-color)]">资料承接</h2>
             </div>
             {selectedDraftGroup ? <StatusPill status={selectedDraftGroup.status} /> : null}
           </div>
@@ -733,7 +753,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
 
               <InspectorSection title="准 SKU 列表" code={loadingDetailId ? 'LOADING' : `${selectedDetail?.preSkus.length ?? 0}`}>
                 {loadingDetailId ? (
-                  <div className="flex items-center gap-2 rounded-[8px] border border-[#e2e7e8] bg-[#f8fafa] px-3 py-4 text-[12px] font-semibold text-[#5a6062]/64">
+                  <div className="flex items-center gap-2 rounded-[8px] border border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-3 py-4 text-[12px] font-semibold text-[var(--obs-shell-muted)]/64">
                     <Loader2 className="h-4 w-4 animate-spin" />
                     正在读取草稿组详情
                   </div>
@@ -748,7 +768,7 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                     onSelect={setSelectedPreSkuId}
                   />
                 ) : (
-                  <div className="rounded-[8px] border border-dashed border-[#cfd8da] bg-[#f8fafa] px-3 py-5 text-[12px] font-semibold text-[#5a6062]/64">
+                  <div className="rounded-[8px] border border-dashed border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-3 py-5 text-[12px] font-semibold text-[var(--obs-shell-muted)]/64">
                     当前草稿组还没有准 SKU。
                   </div>
                 )}
@@ -765,30 +785,23 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
                   </InspectorSection>
 
                   <InspectorSection title="板材 / 组件 / 五金件" code="META">
-                    <MaterialPreview preSku={selectedPreSku} />
+                    <MaterialPreview preSku={selectedPreSku} onItemClick={setDetailVariant} />
                   </InspectorSection>
 
                   <InspectorSection title="成品承接摘要" code="NEXT">
                     <div className="grid gap-2">
                       <div className="grid grid-cols-2 gap-2">
-                        <div className="rounded-[7px] bg-[#f8fafa] px-3 py-3">
-                          <p className="text-[10px] font-black text-[#5a6062]/50">预估重量</p>
-                          <p className="mt-1 text-[13px] font-black text-[#2d3335]">
+                        <div className="rounded-[7px] bg-[var(--obs-shell-surface-bg)] px-3 py-3">
+                          <p className="text-[10px] font-black text-[var(--obs-shell-muted)]/50">预估重量</p>
+                          <p className="mt-1 text-[13px] font-black text-[var(--obs-heading-color)]">
                             {formatWeight(selectedPreSku.weightPreview ?? selectedPreSku.packagingInput.totalWeightKg)}
                           </p>
                         </div>
-                        <div className="rounded-[7px] bg-[#f8fafa] px-3 py-3">
-                          <p className="text-[10px] font-black text-[#5a6062]/50">预估成本</p>
-                          <p className="mt-1 text-[13px] font-black text-[#2d3335]">{formatCost(selectedPreSku.packagingInput.totalCost)}</p>
+                        <div className="rounded-[7px] bg-[var(--obs-shell-surface-bg)] px-3 py-3">
+                          <p className="text-[10px] font-black text-[var(--obs-shell-muted)]/50">预估成本</p>
+                          <p className="mt-1 text-[13px] font-black text-[var(--obs-heading-color)]">{formatCost(selectedPreSku.packagingInput.totalCost)}</p>
                         </div>
                       </div>
-                      <Link
-                        href={`/draft-groups/${selectedDraftGroup.id}`}
-                        className="inline-flex h-9 items-center justify-center gap-2 rounded-[6px] bg-[#2d3335] px-3 text-[12px] font-black text-white transition hover:bg-[#47646b]"
-                      >
-                        进入完整详情
-                        <ArrowRight className="h-3.5 w-3.5" />
-                      </Link>
                     </div>
                   </InspectorSection>
                 </>
@@ -796,28 +809,28 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
             </>
           ) : (
             <div className="px-5 py-10 text-center">
-              <Search className="mx-auto h-8 w-8 text-[#47646b]/55" />
-              <p className="mt-3 text-[14px] font-black text-[#2d3335]">没有草稿组可检视</p>
-              <p className="mt-2 text-[12px] leading-5 text-[#5a6062]/64">
+              <Search className="mx-auto h-8 w-8 text-[var(--obs-shell-color)]/55" />
+              <p className="mt-3 text-[14px] font-black text-[var(--obs-heading-color)]">没有草稿组可检视</p>
+              <p className="mt-2 text-[12px] leading-5 text-[var(--obs-shell-muted)]/64">
                 保存辅助装配结果后，这里会显示对应的资料承接快照。
               </p>
             </div>
           )}
         </div>
 
-        <div className="shrink-0 border-t border-[#edf0f1] bg-white px-5 py-4">
+        <div className="shrink-0 border-t border-[var(--obs-shell-border)] bg-white px-5 py-4">
           <Link
             href={selectedDraftGroup ? `/intake?draftGroupId=${selectedDraftGroup.id}` : '/intake'}
-            className="flex items-center justify-between rounded-[8px] border border-[#e2e7e8] bg-[#f8fafa] px-3 py-3 transition hover:border-[#aebfc4] hover:bg-white"
+            className="flex items-center justify-between rounded-[8px] border border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] px-3 py-3 transition hover:border-[var(--obs-shell-border)] hover:bg-white"
           >
             <span>
-              <span className="block text-[10px] font-black uppercase tracking-[0.14em] text-[#47646b]/55">PRODUCT DATA</span>
-              <span className="mt-1 block text-[13px] font-black text-[#2d3335]">进入产品资料入库流程</span>
-              <span className="mt-1 block text-[11px] font-semibold text-[#5a6062]/58">
+              <span className="block text-[10px] font-black uppercase tracking-[0.14em] text-[var(--obs-shell-color)]/55">PRODUCT DATA</span>
+              <span className="mt-1 block text-[13px] font-black text-[var(--obs-heading-color)]">进入产品资料入库流程</span>
+              <span className="mt-1 block text-[11px] font-semibold text-[var(--obs-shell-muted)]/58">
                 带当前草稿组进入正式产品承接
               </span>
             </span>
-            <ArrowRight className="h-4 w-4 text-[#47646b]" />
+            <ArrowRight className="h-4 w-4 text-[var(--obs-shell-color)]" />
           </Link>
         </div>
       </aside>
@@ -834,6 +847,43 @@ export default function DraftGroupsClient({ draftGroups, categories, user }: Dra
         itemName={deletingDraftGroup?.name}
         warningItems={['删除后草稿组列表和 3D 承接快照会同时移除', '正式入库后的数据不会通过这里删除']}
       />
+
+      {/* 组件详情弹窗（只读） */}
+      <Modal
+        isOpen={Boolean(detailVariant)}
+        onClose={() => setDetailVariant(null)}
+        title={detailVariant ? `${detailVariant.name}` : '组件详情'}
+        size="medium"
+      >
+        {detailVariant && (
+          <div className="space-y-4">
+            <div className="grid grid-cols-2 gap-3">
+              <DetailField label="编码" value={detailVariant.code} />
+              <DetailField label="名称" value={detailVariant.name} />
+              <DetailField label="角色" value={detailVariant.role} />
+              <DetailField label="资产类型" value={detailVariant.assetType === 'BOARD' ? '板材' : detailVariant.assetType === 'HARDWARE' ? '五金件' : '组件'} />
+              <DetailField label="数量" value={String(detailVariant.quantity)} />
+              <DetailField label="规格款 ID" value={detailVariant.variantId} />
+              <DetailField label="资产族 ID" value={detailVariant.assetFamilyId} />
+              <DetailField label="尺寸" value={detailVariant.dimensions} />
+              <DetailField label="材质" value={detailVariant.material} />
+              <DetailField label="基材 ID" value={detailVariant.substrateId ?? '未设置'} />
+              <DetailField label="饰面 ID" value={detailVariant.finishId ?? '未设置'} />
+              <DetailField label="重量" value={detailVariant.weight} />
+              <DetailField label="成本" value={detailVariant.cost} />
+              <DetailField label="连接位" value={detailVariant.slotKey ?? detailVariant.selectionKey ?? '—'} />
+            </div>
+            {detailVariant.modelUrl && (
+              <div>
+                <p className="mb-1.5 text-[10px] font-semibold text-[var(--obs-shell-muted)]">3D 模型</p>
+                <p className="break-all rounded-[6px] bg-[var(--obs-shell-surface-bg)] px-3 py-2 text-[11px] font-semibold text-[var(--obs-heading-color)]">
+                  {detailVariant.modelUrl}
+                </p>
+              </div>
+            )}
+          </div>
+        )}
+      </Modal>
     </div>
   )
 }
diff --git a/furniture-3d-system/src/app/draft-groups/draftGroupDisplay.ts b/furniture-3d-system/src/app/draft-groups/draftGroupDisplay.ts
index 84ac7d37..d5bf193c 100644
--- a/furniture-3d-system/src/app/draft-groups/draftGroupDisplay.ts
+++ b/furniture-3d-system/src/app/draft-groups/draftGroupDisplay.ts
@@ -28,6 +28,13 @@ export interface DraftMaterialItem {
   weight: string
   cost: string
   assetType: MaterialAssetType
+  variantId: string
+  assetFamilyId: string
+  substrateId: string | null
+  finishId: string | null
+  modelUrl: string
+  slotKey: string | null
+  selectionKey: string | null
 }
 
 export interface DraftMaterialSection {
@@ -116,11 +123,11 @@ export function getPreSkuStatusLabel(status: string) {
 }
 
 export function getDraftStatusClassName(status: string) {
-  if (status === 'FORMALIZED') return 'border-emerald-200 bg-emerald-50 text-emerald-700'
-  if (status === 'ARCHIVED') return 'border-amber-200 bg-amber-50 text-amber-700'
-  if (status === 'READY_FOR_INTAKE') return 'border-sky-200 bg-sky-50 text-sky-700'
-  if (status === 'PACKAGING') return 'border-violet-200 bg-violet-50 text-violet-700'
-  return 'border-[#cad8dc] bg-[#edf4f3] text-[#47646b]'
+  if (status === 'FORMALIZED') return 'border-[#a7c4b8] bg-[#eef5f1] text-[#3d6b52]'
+  if (status === 'ARCHIVED') return 'border-[#d4c5a0] bg-[#f5f0e3] text-[#7a6b3d]'
+  if (status === 'READY_FOR_INTAKE') return 'border-[#a0bfd4] bg-[#e3eff5] text-[#3d5f7a]'
+  if (status === 'PACKAGING') return 'border-[#c4a0d4] bg-[#f0e3f5] text-[#6b3d7a]'
+  return 'border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] text-[var(--obs-shell-color)]'
 }
 
 export function formatDimensions(dimensions: Record<string, number> | null | undefined) {
@@ -185,6 +192,13 @@ function mapSlotItem(slot: PreSkuSelectedSlotVariantDTO): DraftMaterialItem {
     weight: formatWeight(slot.weightKg),
     cost: formatCost(slot.costPrice),
     assetType,
+    variantId: slot.variantId,
+    assetFamilyId: slot.assetFamilyId,
+    substrateId: slot.substrateId,
+    finishId: slot.finishId,
+    modelUrl: slot.modelUrl,
+    slotKey: slot.slotKey,
+    selectionKey: null,
   }
 }
 
@@ -200,6 +214,13 @@ function mapHardwareItem(hardware: PreSkuSelectedHardwareSelectionDTO): DraftMat
     weight: formatWeight(hardware.weightKg),
     cost: formatCost(hardware.costPrice),
     assetType: 'HARDWARE',
+    variantId: hardware.variantId,
+    assetFamilyId: hardware.assetFamilyId,
+    substrateId: hardware.substrateId,
+    finishId: hardware.finishId,
+    modelUrl: hardware.modelUrl,
+    slotKey: null,
+    selectionKey: hardware.selectionKey,
   }
 }
 
diff --git a/furniture-3d-system/src/lib/open-product/types.ts b/furniture-3d-system/src/lib/open-product/types.ts
index 5a1e3eb7..340fad95 100644
--- a/furniture-3d-system/src/lib/open-product/types.ts
+++ b/furniture-3d-system/src/lib/open-product/types.ts
@@ -41,6 +41,7 @@ export interface OpenProductAssetVariant {
   uvConfig?: AssetVariantUvConfig | null
   weightKg?: number | null
   costPrice?: number | null
+  estimatedCostPrice?: number | null
   assemblyBasis?: Record<string, unknown> | null
   compatibilityRules?: Record<string, unknown> | null
   metadata?: Record<string, unknown> | null
diff --git a/furniture-3d-system/src/server/services/draft-group.mapper.ts b/furniture-3d-system/src/server/services/draft-group.mapper.ts
index 8945e921..06b433eb 100644
--- a/furniture-3d-system/src/server/services/draft-group.mapper.ts
+++ b/furniture-3d-system/src/server/services/draft-group.mapper.ts
@@ -331,7 +331,7 @@ export function buildSlotSnapshot(
     finishId: selection.variant.finishId ?? null,
     dimensions: selection.variant.dimensions,
     weightKg: toNullableNumber(selection.variant.weightKg),
-    costPrice: toNullableNumber(selection.variant.costPrice),
+    costPrice: toNullableNumber(selection.variant.costPrice ?? selection.variant.estimatedCostPrice),
     modelUrl: selection.variant.modelUrl,
     mountPoints: selection.variant.mountPoints,
     assemblyBasis: {
@@ -356,7 +356,7 @@ export function buildHardwareSnapshot(
     quantity: selection.quantity,
     dimensions: selection.variant.dimensions,
     weightKg: toNullableNumber(selection.variant.weightKg),
-    costPrice: toNullableNumber(selection.variant.costPrice),
+    costPrice: toNullableNumber(selection.variant.costPrice ?? selection.variant.estimatedCostPrice),
     modelUrl: selection.variant.modelUrl,
     mountPoints: selection.variant.mountPoints,
     assemblyBasis: {
diff --git a/furniture-3d-system/src/server/services/pre-sku-materialization.service.ts b/furniture-3d-system/src/server/services/pre-sku-materialization.service.ts
index 47992a40..49c647d5 100644
--- a/furniture-3d-system/src/server/services/pre-sku-materialization.service.ts
+++ b/furniture-3d-system/src/server/services/pre-sku-materialization.service.ts
@@ -96,7 +96,7 @@ function aggregateBom(
       return
     }
 
-    const unitCost = typeof variant.costPrice === 'number' ? variant.costPrice : null
+    const unitCost = typeof variant.costPrice === 'number' ? variant.costPrice : typeof variant.estimatedCostPrice === 'number' ? variant.estimatedCostPrice : null
     const unitWeightKg = typeof variant.weightKg === 'number' ? variant.weightKg : null
 
     bomMap.set(variant.id, {
diff --git a/furniture-3d-system/src/server/services/single-board-desk-materialization.ts b/furniture-3d-system/src/server/services/single-board-desk-materialization.ts
index 6899af76..3e9ecba3 100644
--- a/furniture-3d-system/src/server/services/single-board-desk-materialization.ts
+++ b/furniture-3d-system/src/server/services/single-board-desk-materialization.ts
@@ -46,6 +46,10 @@ export function toOpenProductVariants(
         record.costPrice === null || record.costPrice === undefined
           ? null
           : Number(record.costPrice),
+      estimatedCostPrice:
+        record.estimatedCostPrice === null || record.estimatedCostPrice === undefined
+          ? null
+          : Number(record.estimatedCostPrice),
       metadata: {
         barcode: record.barcode ?? readText(assemblyBasis?.barcode),
         supplierCode: record.supplierCode ?? readText(assemblyBasis?.supplierCode),

From de33fc385c99cb1319850488c9616209dbc5edd0 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 16:09:23 +0800
Subject: [PATCH 02/14] =?UTF-8?q?@=20refactor(asset-center):=20=E6=8B=86?=
 =?UTF-8?q?=E5=88=86=20AssetCenterClient=20=E5=A4=A7=E6=96=87=E4=BB=B6?=
 =?UTF-8?q?=EF=BC=884775=E2=86=923733=20=E8=A1=8C=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

提取 7 个独立模块：
- asset-center-types.ts（210 行）：类型定义、常量、CSS 类名
- asset-center-utils.ts（615 行）：纯工具函数（UV 编辑、键盘快捷键、预览节点变换、状态标签、相似性、CAD 导入、系列筛选）
- VariantEditModal.tsx（235 行）：规格款编辑弹窗
- FamilyEditModal.tsx（261 行）：资产族编辑弹窗
- ReviewRejectModal.tsx（55 行）：驳回弹窗
- RoleEditorModal.tsx（47 行）：连接角色编辑弹窗

主组件减少 1042 行，功能完全不变。
@
---
 .../app/asset-center/AssetCenterClient.tsx    | 1305 ++---------------
 .../src/app/asset-center/FamilyEditModal.tsx  |  261 ++++
 .../app/asset-center/ReviewRejectModal.tsx    |   55 +
 .../src/app/asset-center/RoleEditorModal.tsx  |   47 +
 .../src/app/asset-center/VariantEditModal.tsx |  235 +++
 .../app/asset-center/asset-center-types.ts    |  210 +++
 .../app/asset-center/asset-center-utils.ts    |  615 ++++++++
 7 files changed, 1555 insertions(+), 1173 deletions(-)
 create mode 100644 furniture-3d-system/src/app/asset-center/FamilyEditModal.tsx
 create mode 100644 furniture-3d-system/src/app/asset-center/ReviewRejectModal.tsx
 create mode 100644 furniture-3d-system/src/app/asset-center/RoleEditorModal.tsx
 create mode 100644 furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
 create mode 100644 furniture-3d-system/src/app/asset-center/asset-center-types.ts
 create mode 100644 furniture-3d-system/src/app/asset-center/asset-center-utils.ts

diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
index e612732a..30b6fb13 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
@@ -35,8 +35,6 @@ import { DeleteConfirmDialog } from '@/components/ui/DeleteConfirmDialog'
 import { useToast, ToastContainer } from '@/components/ui/Toast'
 import { AssetWorkbenchEmptyBackdrop } from '@/components/platform/AssetWorkbenchEmptyBackdrop'
 import { ModelPreviewPanel } from '@/components/platform/ModelPreviewPanel'
-import type { HolePanelBounds } from '@/components/3d/HoleOverlay2D'
-import type { HoleData as HoleOverlayData } from '@/components/3d/HoleViewer'
 import type { PlatformMetricItem } from '@/components/platform/types'
 import {
   applyAssetVariantUvConfigToMaterial,
@@ -65,7 +63,6 @@ import {
   normalizeAssetVariantsWithUv,
 } from '@/lib/open-product/asset-variant-uv'
 import { calculateEstimatedCost } from '@/lib/open-product/substrate-rules'
-import { getLevel1FromFamily } from '@/lib/packaging-materials/catalog'
 import { canOperateDesignWorkspace as canOperateDesignWorkspaceForUser } from '@/lib/role-scope'
 import { cn } from '@/lib/utils'
 import {
@@ -97,85 +94,88 @@ import type {
   SubstrateDictionaryBundleDTO,
 } from '@/server/services'
 
-// ---- Props ----
+// ---- 从拆分模块导入 ----
 
-interface AssetCenterClientProps {
-  initialFamilies: AssetFamilyDTO[]
-  initialVariants: AssetVariantDTO[]
-  initialSubstrates: SubstrateDTO[]
-  initialSubstrateDictionaries?: SubstrateDictionaryBundleDTO
-  initialAssetSeries: AssetSeriesDTO[]
-  finishes: MaterialDTO[]
-  materialCategories: MaterialCategoryDTO[]
-  metrics: PlatformMetricItem[]
-  user: {
-    id: string
-    name: string
-    email: string
-    role: string
-    businessRoles?: string[] | null
-    departmentPaths?: string[] | null
-    avatar: string | null
-    department: { id: string; name: string; fullPath?: string | null } | null
-  }
-}
+import type {
+  AssetCenterClientProps,
+  AssetTypeFilter,
+  CadImportFieldErrors,
+  CadImportForm,
+  ImportableAssetType,
+  PreviewNodeOffsetMap,
+  PreviewNodeRotationMap,
+  PreviewNodeTransformState,
+  ReviewDialogState,
+  ReviewVisibilityFilter,
+  VariantForm,
+  VariantUvEditorFormState,
+  Vector3Tuple,
+} from './asset-center-types'
+import {
+  ASSET_CENTER_GIZMO_AXIS_COLORS,
+  ASSET_CENTER_SELECTED_SERIES_STORAGE_KEY,
+  UV_PROJECTION_AXIS_OPTIONS,
+  VARIANT_SAVE_PROGRESS_STEPS,
+  compactRowActionClassName,
+  compactRowDangerActionClassName,
+  compactRowDangerStatusClassName,
+  compactRowIconActionClassName,
+  compactRowNeutralStatusClassName,
+  compactRowPrimaryActionClassName,
+  compactRowSuccessStatusClassName,
+  compactRowWarningStatusClassName,
+  emptyCadImportForm,
+  emptyVariantForm,
+  variantInlineCreateButtonClassName,
+  variantInlineImportButtonClassName,
+} from './asset-center-types'
+import {
+  arePreviewNodeOffsetMapsEqual,
+  arePreviewNodeRotationMapsEqual,
+  arePreviewNodeTransformStatesEqual,
+  buildAssetVariantHoleOverlayState,
+  buildCadImportChecklist,
+  buildCadImportFieldErrors,
+  buildVariantIdentityPrefix,
+  canReviewAssets,
+  clonePreviewNodeOffsetMap,
+  clonePreviewNodeRotationMap,
+  clonePreviewNodeTransformState,
+  createAssetOperationId,
+  createVariantUvEditorFormState,
+  familyBelongsToSeries,
+  familyVisibleInSeriesContext,
+  getCompactStatusClassName,
+  getSimilarityConfidenceLabel,
+  getSimilarityConfidenceTone,
+  getStatusLabel,
+  getVisibleFamiliesForTab,
+  isEditableElement,
+  isImportableAssetType,
+  isObjectRecord,
+  isPackagingMaterialLibraryFamily,
+  matchesRedoShortcut,
+  matchesReviewVisibilityFilter,
+  matchesUndoShortcut,
+  normalizeCadImportResult,
+  normalizeSimilarCandidates,
+  parseVariantUvEditorFormState,
+  readNumberValue,
+  readRecordArray,
+  readStringValue,
+  readVector3Tuple,
+  shouldShowCompactStatus,
+  sortByName,
+  splitConnectionRoles,
+  toNumberRecord,
+  toOptionalNumber,
+} from './asset-center-utils'
+import { RoleEditorModal } from './RoleEditorModal'
+import { ReviewRejectModal } from './ReviewRejectModal'
+import { VariantEditModal } from './VariantEditModal'
+import { FamilyEditModal } from './FamilyEditModal'
 
-type PreviewNodeOffsetMap = Record<string, [number, number, number]>
-type PreviewNodeRotationMap = Record<string, [number, number, number, number]>
-type PreviewNodeTransformState = {
-  offsets: PreviewNodeOffsetMap
-  rotations: PreviewNodeRotationMap
-}
-
-type Vector3Tuple = [number, number, number]
-
-type VariantUvEditorFormState = {
-  textureRepeat: string
-  textureRepeatU: string
-  textureRepeatV: string
-  textureRotation: string
-  textureSizeMm: string
-  textureProjectionAxis: '' | AssetVariantUvProjectionAxis
-}
-
-const ASSET_CENTER_GIZMO_AXIS_COLORS = {
-  X: '#8f625d',
-  Y: '#5f766e',
-  Z: '#5f6d82',
-} satisfies Record<'X' | 'Y' | 'Z', string>
-
-const UV_PROJECTION_AXIS_OPTIONS = [
-  { value: '', label: '自动' },
-  { value: 'x', label: 'X 轴' },
-  { value: 'y', label: 'Y 轴' },
-  { value: 'z', label: 'Z 轴' },
-] satisfies Array<{ value: '' | AssetVariantUvProjectionAxis; label: string }>
-
-const VARIANT_SAVE_PROGRESS_STEPS = [
-  { step: 'validating', label: '校验提交' },
-  { step: 'creating', label: '创建草稿' },
-  { step: 'thumbnail', label: '生成预览' },
-  { step: 'similarity', label: '相似检测' },
-  { step: 'syncing', label: '同步界面' },
-  { step: 'completed', label: '完成' },
-] satisfies Array<{
-  step: AssetOperationProgressDTO['step']
-  label: string
-}>
-
-// ---- 工具函数 ----
-
-function sortByName<T extends { name: string }>(items: T[]): T[] {
-  return [...items].sort((left, right) => left.name.localeCompare(right.name, 'zh-CN'))
-}
-
-function createAssetOperationId(prefix: string): string {
-  const cryptoApi = globalThis.crypto
-  if (typeof cryptoApi?.randomUUID === 'function') {
-    return `${prefix}-${cryptoApi.randomUUID()}`
-  }
-  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`
-}
+// ---- 主组件内的渲染辅助函数 ----
 
 function buildInitialVariantSaveProgress(isDuplicateVariantMode: boolean): AssetOperationProgressDTO {
   return {
@@ -256,233 +256,6 @@ function renderVariantSaveProgress(progress: AssetOperationProgressDTO) {
   )
 }
 
-function formatUvNumber(value: number | null | undefined) {
-  return typeof value === 'number' && Number.isFinite(value) ? String(value) : ''
-}
-
-function formatUvRotationDegrees(value: number | null | undefined) {
-  if (typeof value !== 'number' || !Number.isFinite(value)) {
-    return ''
-  }
-  const degrees = value * 180 / Math.PI
-  return Number.isInteger(degrees) ? String(degrees) : String(Number(degrees.toFixed(2)))
-}
-
-function createVariantUvEditorFormState(
-  config: AssetVariantUvSurfaceConfig | null | undefined,
-): VariantUvEditorFormState {
-  return {
-    textureRepeat: formatUvNumber(config?.textureRepeat),
-    textureRepeatU: formatUvNumber(config?.textureRepeatU),
-    textureRepeatV: formatUvNumber(config?.textureRepeatV),
-    textureRotation: formatUvRotationDegrees(config?.textureRotation),
-    textureSizeMm: formatUvNumber(config?.textureSizeMm),
-    textureProjectionAxis: config?.textureProjectionAxis ?? '',
-  }
-}
-
-function parseVariantUvEditorFormState(
-  state: VariantUvEditorFormState,
-): AssetVariantUvSurfaceConfig | null {
-  const parseField = (value: string) => {
-    const normalized = value.trim()
-    if (!normalized) {
-      return undefined
-    }
-
-    const parsed = Number(normalized)
-    return Number.isFinite(parsed) ? parsed : undefined
-  }
-
-  const textureRepeat = parseField(state.textureRepeat)
-  const textureRepeatU = parseField(state.textureRepeatU)
-  const textureRepeatV = parseField(state.textureRepeatV)
-  const textureRotationDegrees = parseField(state.textureRotation)
-  const textureRotation =
-    textureRotationDegrees === undefined ? undefined : textureRotationDegrees * Math.PI / 180
-  const textureSizeMm = parseField(state.textureSizeMm)
-  const textureProjectionAxis =
-    state.textureProjectionAxis === 'x' ||
-    state.textureProjectionAxis === 'y' ||
-    state.textureProjectionAxis === 'z'
-      ? state.textureProjectionAxis
-      : undefined
-
-  if (
-    textureRepeat === undefined &&
-    textureRepeatU === undefined &&
-    textureRepeatV === undefined &&
-    textureRotation === undefined &&
-    textureSizeMm === undefined &&
-    textureProjectionAxis === undefined
-  ) {
-    return null
-  }
-
-  return {
-    ...(textureRepeat !== undefined ? { textureRepeat } : {}),
-    ...(textureRepeatU !== undefined ? { textureRepeatU } : {}),
-    ...(textureRepeatV !== undefined ? { textureRepeatV } : {}),
-    ...(textureRotation !== undefined ? { textureRotation } : {}),
-    ...(textureSizeMm !== undefined ? { textureSizeMm } : {}),
-    ...(textureProjectionAxis !== undefined ? { textureProjectionAxis } : {}),
-  }
-}
-
-function isEditableElement(target: EventTarget | null) {
-  if (!(target instanceof HTMLElement)) {
-    return false
-  }
-
-  const tagName = target.tagName
-  return (
-    tagName === 'INPUT' ||
-    tagName === 'TEXTAREA' ||
-    tagName === 'SELECT' ||
-    target.isContentEditable
-  )
-}
-
-function matchesUndoShortcut(event: KeyboardEvent) {
-  const hasCommandKey = event.ctrlKey || event.metaKey
-  if (!hasCommandKey || event.altKey || event.shiftKey) {
-    return false
-  }
-
-  const code = event.code.toLowerCase()
-  const key = event.key.toLowerCase()
-  return code === 'keyz' || key === 'z'
-}
-
-function matchesRedoShortcut(event: KeyboardEvent) {
-  const hasCommandKey = event.ctrlKey || event.metaKey
-  if (!hasCommandKey || event.altKey) {
-    return false
-  }
-
-  const code = event.code.toLowerCase()
-  const key = event.key.toLowerCase()
-  return (
-    (event.shiftKey && (code === 'keyz' || key === 'z')) ||
-    (!event.shiftKey && (code === 'keyy' || key === 'y'))
-  )
-}
-
-function clonePreviewNodeOffsetMap(source: PreviewNodeOffsetMap): PreviewNodeOffsetMap {
-  return Object.fromEntries(
-    Object.entries(source).map(([nodeName, offset]) => [nodeName, [...offset] as [number, number, number]]),
-  )
-}
-
-function clonePreviewNodeRotationMap(source: PreviewNodeRotationMap): PreviewNodeRotationMap {
-  return Object.fromEntries(
-    Object.entries(source).map(([nodeName, rotation]) => [
-      nodeName,
-      [...rotation] as [number, number, number, number],
-    ]),
-  )
-}
-
-function arePreviewNodeOffsetMapsEqual(left: PreviewNodeOffsetMap, right: PreviewNodeOffsetMap) {
-  const leftEntries = Object.entries(left)
-  const rightEntries = Object.entries(right)
-
-  if (leftEntries.length !== rightEntries.length) {
-    return false
-  }
-
-  return leftEntries.every(([nodeName, offset]) => {
-    const target = right[nodeName]
-    return (
-      Boolean(target) &&
-      target[0] === offset[0] &&
-      target[1] === offset[1] &&
-      target[2] === offset[2]
-    )
-  })
-}
-
-function arePreviewNodeRotationMapsEqual(left: PreviewNodeRotationMap, right: PreviewNodeRotationMap) {
-  const leftEntries = Object.entries(left)
-  const rightEntries = Object.entries(right)
-
-  if (leftEntries.length !== rightEntries.length) {
-    return false
-  }
-
-  return leftEntries.every(([nodeName, rotation]) => {
-    const target = right[nodeName]
-    return (
-      Boolean(target) &&
-      target[0] === rotation[0] &&
-      target[1] === rotation[1] &&
-      target[2] === rotation[2] &&
-      target[3] === rotation[3]
-    )
-  })
-}
-
-function clonePreviewNodeTransformState(source: PreviewNodeTransformState): PreviewNodeTransformState {
-  return {
-    offsets: clonePreviewNodeOffsetMap(source.offsets),
-    rotations: clonePreviewNodeRotationMap(source.rotations),
-  }
-}
-
-function arePreviewNodeTransformStatesEqual(
-  left: PreviewNodeTransformState,
-  right: PreviewNodeTransformState,
-) {
-  return (
-    arePreviewNodeOffsetMapsEqual(left.offsets, right.offsets) &&
-    arePreviewNodeRotationMapsEqual(left.rotations, right.rotations)
-  )
-}
-
-function toNumberRecord(values: Record<string, string>): Record<string, number> {
-  const result: Record<string, number> = {}
-  for (const [key, value] of Object.entries(values)) {
-    const parsed = Number(value)
-    if (Number.isFinite(parsed) && parsed > 0) {
-      result[key] = parsed
-    }
-  }
-  return result
-}
-
-function toOptionalNumber(value: string): number | null {
-  if (value.trim().length === 0) {
-    return null
-  }
-  const parsed = Number(value)
-  return Number.isFinite(parsed) ? parsed : null
-}
-
-function getStatusLabel(status: string) {
-  if (status === 'AVAILABLE') return '可用'
-  if (status === 'DISABLED') return '停用'
-  if (status === 'PENDING_REVIEW') return '待审核'
-  if (status === 'REJECTED') return '已驳回'
-  return '草稿'
-}
-
-function shouldShowCompactStatus(status: string) {
-  return status !== 'DRAFT'
-}
-
-function getCompactStatusClassName(status: string) {
-  if (status === 'AVAILABLE') {
-    return compactRowSuccessStatusClassName
-  }
-  if (status === 'REJECTED') {
-    return compactRowDangerStatusClassName
-  }
-  if (status === 'DISABLED') {
-    return compactRowWarningStatusClassName
-  }
-  return compactRowNeutralStatusClassName
-}
-
 function renderCompactStatus(status: string, testId?: string) {
   if (!shouldShowCompactStatus(status)) {
     return null
@@ -495,257 +268,6 @@ function renderCompactStatus(status: string, testId?: string) {
   )
 }
 
-function getSimilarityConfidenceTone(confidence: SimilarAssetVariantCandidateDTO['confidence']) {
-  if (confidence === 'HIGH') return 'warning'
-  if (confidence === 'MEDIUM') return 'info'
-  return 'default'
-}
-
-function getSimilarityConfidenceLabel(confidence: SimilarAssetVariantCandidateDTO['confidence']) {
-  if (confidence === 'HIGH') return '高相似'
-  if (confidence === 'MEDIUM') return '中相似'
-  return '低相似'
-}
-
-function normalizeSimilarCandidates(
-  candidates: SimilarAssetVariantCandidateDTO[] | null | undefined,
-): SimilarAssetVariantCandidateDTO[] {
-  return Array.isArray(candidates) ? candidates : []
-}
-
-function normalizeCadImportResult(result: AssetCadImportResult): AssetCadImportResult {
-  return {
-    ...result,
-    warnings: Array.isArray(result.warnings) ? result.warnings : [],
-    similarCandidates: normalizeSimilarCandidates(result.similarCandidates),
-    similarityNotice: result.similarityNotice ?? null,
-  }
-}
-
-function isObjectRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null && !Array.isArray(value)
-}
-
-function readRecordArray(value: unknown): Record<string, unknown>[] {
-  return Array.isArray(value)
-    ? value.filter((item): item is Record<string, unknown> => isObjectRecord(item))
-    : []
-}
-
-function readStringValue(value: unknown): string | null {
-  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null
-}
-
-function readNumberValue(value: unknown): number | null {
-  return typeof value === 'number' && Number.isFinite(value) ? value : null
-}
-
-function readVector3Tuple(value: unknown): Vector3Tuple | null {
-  if (Array.isArray(value) && value.length >= 3) {
-    const x = readNumberValue(value[0])
-    const y = readNumberValue(value[1])
-    const z = readNumberValue(value[2])
-    return x !== null && y !== null && z !== null ? [x, y, z] : null
-  }
-
-  if (isObjectRecord(value)) {
-    const x = readNumberValue(value.x)
-    const y = readNumberValue(value.y)
-    const z = readNumberValue(value.z)
-    return x !== null && y !== null && z !== null ? [x, y, z] : null
-  }
-
-  return null
-}
-
-function readPanelBounds(value: unknown): HolePanelBounds | null {
-  if (!isObjectRecord(value)) return null
-  const min = readVector3Tuple(value.min)
-  const max = readVector3Tuple(value.max)
-  return min && max ? { min, max } : null
-}
-
-function getBoundsSize(bounds: HolePanelBounds): Vector3Tuple {
-  return [
-    Math.abs(bounds.max[0] - bounds.min[0]),
-    Math.abs(bounds.max[1] - bounds.min[1]),
-    Math.abs(bounds.max[2] - bounds.min[2]),
-  ]
-}
-
-function getMaxRelativeDimensionDiff(left: Vector3Tuple, right: Vector3Tuple): number {
-  return Math.max(
-    ...left.map((value, index) => {
-      const baseline = Math.max(Math.abs(right[index]), 1)
-      return Math.abs(1 - Math.abs(value) / baseline)
-    }),
-  )
-}
-
-function sortDimensionsForComparison(size: Vector3Tuple): Vector3Tuple {
-  return [...size].map((value) => Math.abs(value)).sort((left, right) => right - left) as Vector3Tuple
-}
-
-function shouldRemapCadPanelBounds(bounds: HolePanelBounds, panelSize: Vector3Tuple | null): boolean {
-  if (!panelSize || Math.max(...panelSize.map((value) => Math.abs(value))) <= 0) {
-    return false
-  }
-
-  const boundsSize = getBoundsSize(bounds)
-  const sortedBoundsSize = sortDimensionsForComparison(boundsSize)
-  const sortedPanelSize = sortDimensionsForComparison(panelSize)
-  return getMaxRelativeDimensionDiff(sortedBoundsSize, sortedPanelSize) > 0.25
-}
-
-function buildAssetVariantHoleOverlayState(variant: AssetVariantDTO | null): {
-  holes: HoleOverlayData[]
-  activeHolePanelIds: string[]
-  panelNodeNameByPanelId: Record<string, string>
-  panelLabelByPanelId: Record<string, string>
-  panelBoundsByPanelId: Record<string, HolePanelBounds>
-} {
-  if (!variant || variant.assetType === 'HARDWARE') {
-    return {
-      holes: [],
-      activeHolePanelIds: [],
-      panelNodeNameByPanelId: {},
-      panelLabelByPanelId: {},
-      panelBoundsByPanelId: {},
-    }
-  }
-
-  const assemblyBasis = isObjectRecord(variant.assemblyBasis) ? variant.assemblyBasis : null
-  const businessData = isObjectRecord(variant.businessData) ? variant.businessData : null
-  const cadData = isObjectRecord(businessData?.cadData) ? businessData.cadData : null
-  const holeGroups = readRecordArray(assemblyBasis?.holeGroups ?? cadData?.holeGroups)
-  const panelNodeNameByPanelId: Record<string, string> = {}
-  const panelLabelByPanelId: Record<string, string> = {}
-  const panelBoundsByPanelId: Record<string, HolePanelBounds> = {}
-
-  readRecordArray(cadData?.panels).forEach((panel, index) => {
-    const panelId = readStringValue(panel.id) ?? readStringValue(panel.panelId)
-    if (!panelId) return
-
-    const nodeName =
-      readStringValue(panel.gltfNodeName) ??
-      readStringValue(panel.nodeName) ??
-      readStringValue(panel.name) ??
-      panelId
-    panelNodeNameByPanelId[panelId] = nodeName
-    panelLabelByPanelId[panelId] =
-      readStringValue(panel.name) ??
-      readStringValue(panel.label) ??
-      readStringValue(panel.panelType) ??
-      `板件 ${index + 1}`
-
-    const bounds = readPanelBounds(panel.boundingBox)
-    if (bounds) {
-      const panelSize = readVector3Tuple(panel.size)
-      const needsRemap = shouldRemapCadPanelBounds(bounds, panelSize)
-      panelBoundsByPanelId[panelId] = needsRemap
-        ? { ...bounds, remapToModelBounds: true }
-        : bounds
-    }
-  })
-
-  const groupPanelIdById = new Map<string, string>()
-  holeGroups.forEach((group) => {
-    const groupId = readStringValue(group.id)
-    const panelId = readStringValue(group.panelId)
-    if (groupId && panelId) {
-      groupPanelIdById.set(groupId, panelId)
-    }
-  })
-
-  const rawHoles = readRecordArray(assemblyBasis?.holes).length > 0
-    ? readRecordArray(assemblyBasis?.holes)
-    : readRecordArray(cadData?.holes)
-  const activeHolePanelIds = new Set<string>()
-  const holes = rawHoles
-    .map<HoleOverlayData | null>((hole, index) => {
-      const id = readStringValue(hole.id) ?? `asset-hole-${index + 1}`
-      const groupId = readStringValue(hole.groupId) ?? readStringValue(hole.holeGroupId)
-      const panelId =
-        readStringValue(hole.panelId) ??
-        (groupId ? groupPanelIdById.get(groupId) ?? null : null)
-      const position = readVector3Tuple(hole.position)
-      if (!panelId || !position) return null
-
-      const normal = readVector3Tuple(hole.normal) ?? [0, 0, 1]
-      const diameter = readNumberValue(hole.diameter) ?? 0
-      const depth = readNumberValue(hole.depth) ?? 0
-      const holeType =
-        readStringValue(hole.holeType) ??
-        readStringValue(hole.type) ??
-        readStringValue(hole.inferredUsage) ??
-        null
-
-      activeHolePanelIds.add(panelId)
-      if (!panelNodeNameByPanelId[panelId]) {
-        panelNodeNameByPanelId[panelId] = panelId
-      }
-      if (!panelLabelByPanelId[panelId]) {
-        panelLabelByPanelId[panelId] = panelId.replace(/^cad_/i, '')
-      }
-
-      return {
-        id,
-        panelId,
-        position,
-        diameter,
-        depth,
-        normal,
-        holeType,
-        confidence: readNumberValue(hole.confidence) ?? 1,
-        ...(groupId ? { groupId } : {}),
-      }
-    })
-    .filter((item): item is HoleOverlayData => item !== null)
-
-  return {
-    holes,
-    activeHolePanelIds: Array.from(activeHolePanelIds),
-    panelNodeNameByPanelId,
-    panelLabelByPanelId,
-    panelBoundsByPanelId,
-  }
-}
-
-// ---- 系列与分类筛选 ----
-
-const ASSET_CENTER_SELECTED_SERIES_STORAGE_KEY = 'asset-center:selected-series-id'
-type AssetTypeFilter = AssetFamilyDTO['type']
-
-function isPackagingMaterialLibraryFamily(family: AssetFamilyDTO): boolean {
-  return family.type === 'PACKAGING' && getLevel1FromFamily(family.metadata ?? null) !== null
-}
-
-function getVisibleFamiliesForTab(
-  families: AssetFamilyDTO[],
-  activeTab: AssetTypeFilter,
-): AssetFamilyDTO[] {
-  return families.filter((family) => {
-    if (family.type !== activeTab) return false
-    if (activeTab !== 'PACKAGING') return true
-    return !isPackagingMaterialLibraryFamily(family)
-  })
-}
-
-function familyBelongsToSeries(family: AssetFamilyDTO, series: AssetSeriesDTO | null): boolean {
-  if (!series) return false
-  if (family.assetSeriesId) {
-    return family.assetSeriesId === series.id
-  }
-  const compatibleSeries = family.compatibleSeries ?? []
-  return compatibleSeries.some((item) => item.id === series.id || item.code === series.code)
-}
-
-function familyVisibleInSeriesContext(family: AssetFamilyDTO, series: AssetSeriesDTO | null): boolean {
-  if (isPackagingMaterialLibraryFamily(family)) return false
-  if (family.type === 'HARDWARE') return true
-  return familyBelongsToSeries(family, series)
-}
-
 const TYPE_TABS: { type: AssetTypeFilter; label: string; icon: React.ReactNode }[] = [
   { type: 'BOARD', label: '板材', icon: <Layers3 className="h-3.5 w-3.5" /> },
   { type: 'COMPONENT', label: '组件', icon: <Shapes className="h-3.5 w-3.5" /> },
@@ -753,197 +275,6 @@ const TYPE_TABS: { type: AssetTypeFilter; label: string; icon: React.ReactNode }
   { type: 'PACKAGING', label: '包装', icon: <Package2 className="h-3.5 w-3.5" /> },
 ]
 
-// ---- 空表单模板 ----
-
-function buildVariantIdentityPrefix(familyCode: string): string {
-  const normalizedCode = familyCode.trim()
-  if (!normalizedCode) return ''
-  return normalizedCode.endsWith('-') ? normalizedCode : `${normalizedCode}-`
-}
-
-function emptyVariantForm(assetFamilyId: string, identityPrefix = '') {
-  return {
-    assetFamilyId,
-    code: '',
-    name: identityPrefix,
-    sizeLabel: '',
-    substrateId: '',
-    finishId: '',
-    supplierName: '',
-    supplierCode: '',
-    versionNo: '',
-    barcode: '',
-    length: '',
-    width: '',
-    thickness: '',
-    modelUrl: '',
-    mountPointName: 'origin',
-    mountX: '0',
-    mountY: '0',
-    mountZ: '0',
-    lossFactor: '1',
-    inheritedFromVariantId: '',
-    includeLegConnectorRole: false,
-  }
-}
-
-type VariantForm = ReturnType<typeof emptyVariantForm>
-
-type ImportableAssetType = Exclude<AssetFamilyDTO['type'], 'PACKAGING'>
-
-function isImportableAssetType(type: AssetFamilyDTO['type']): type is ImportableAssetType {
-  return type === 'BOARD' || type === 'COMPONENT' || type === 'HARDWARE'
-}
-
-function emptyCadImportForm(assetType: ImportableAssetType, useExistingFamily: boolean) {
-  return {
-    assetType,
-    familyMode: useExistingFamily ? ('existing' as const) : ('create' as const),
-    familyId: '',
-    familyCode: '',
-    familyName: '',
-    familyDescription: '',
-    connectionRoles: '',
-    variantCode: '',
-    variantName: '',
-    sizeLabel: '',
-    substrateId: '',
-    finishId: '',
-    lossFactor: '1',
-    file: null as File | null,
-  }
-}
-
-type CadImportForm = ReturnType<typeof emptyCadImportForm>
-
-type CadImportFieldKey =
-  | 'familyId'
-  | 'familyCode'
-  | 'familyName'
-  | 'connectionRoles'
-  | 'variantName'
-  | 'substrateId'
-  | 'file'
-
-type CadImportFieldErrors = Partial<Record<CadImportFieldKey, string>>
-
-function splitConnectionRoles(value: string): string[] {
-  return value
-    .split(/[，,]/)
-    .map((item) => item.trim())
-    .filter(Boolean)
-}
-
-function buildCadImportFieldErrors(params: {
-  form: CadImportForm
-  assetSeriesId?: string | null
-}): CadImportFieldErrors {
-  const { form, assetSeriesId } = params
-  const errors: CadImportFieldErrors = {}
-
-  if (form.familyMode === 'existing') {
-    if (!form.familyId) {
-      errors.familyId = '请选择目标资产族'
-    }
-  } else {
-    if (!assetSeriesId && !form.familyCode.trim()) {
-      errors.familyCode = '请填写资产族编码'
-    }
-    if (!form.familyName.trim()) {
-      errors.familyName = '请填写资产族名称'
-    }
-  }
-
-  if (!form.variantName.trim()) {
-    errors.variantName = '请填写规格款名称'
-  }
-  if (form.assetType === 'BOARD') {
-    if (!form.substrateId) {
-      errors.substrateId = '板材必须选择基材'
-    }
-  }
-
-  if (!form.file) {
-    errors.file = '请上传 CAD 导出的 ZIP 文件'
-  }
-
-  return errors
-}
-
-function buildCadImportChecklist(assetType: ImportableAssetType): string[] {
-  const notes = [
-    '仅支持 CAD 插件 v2.2.14 及以上导出的 ZIP。',
-    '压缩包内需包含模型文件和 hardware.json，根级必须保留 holes 数组；没有孔位也要传 holes: []。',
-  ]
-
-  if (assetType === 'BOARD') {
-    notes.push('如果 ZIP 里有多块板件，当前会按第一块板件尺寸导入规格款。')
-  }
-
-  if (assetType === 'COMPONENT') {
-    notes.push('组件尺寸优先按模型包围盒回填，孔位语义会继续保留给后续自由装配。')
-  }
-
-  if (assetType === 'HARDWARE') {
-    notes.push('五金会优先保留安装基准与规格签名，不走板件孔位归属。')
-  }
-
-  return notes
-}
-
-const ASSET_REVIEW_ROLES = new Set([
-  'SUPER_ADMIN',
-  'ADMIN',
-  'SUPERVISOR',
-  'SUPERVISOR',
-])
-
-function canReviewAssets(role: string): boolean {
-  return ASSET_REVIEW_ROLES.has(role)
-}
-
-const compactRowActionClassName =
-  'inline-flex h-6 items-center rounded-[4px] px-1.5 text-[10px] font-apple-bold text-[#687477] transition hover:bg-black/[0.045] hover:text-[#263033] disabled:cursor-not-allowed disabled:opacity-45'
-
-const compactRowPrimaryActionClassName =
-  'inline-flex h-6 items-center rounded-[4px] bg-[#edf1f1] px-1.5 text-[10px] font-apple-bold text-[#101719] transition hover:bg-[#e3e9e9] disabled:cursor-not-allowed disabled:opacity-45'
-
-const compactRowDangerActionClassName =
-  'inline-flex h-6 items-center rounded-[4px] px-1.5 text-[10px] font-apple-bold text-red-600 transition hover:bg-red-500/10 disabled:cursor-not-allowed disabled:opacity-45'
-
-const compactRowNeutralStatusClassName =
-  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#eef2f2] px-1.5 text-[10px] font-apple-bold text-[#687477]'
-
-const compactRowSuccessStatusClassName =
-  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#e8eeee] px-1.5 text-[10px] font-apple-bold text-[#3f4a4d]'
-
-const compactRowWarningStatusClassName =
-  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#f0eeee] px-1.5 text-[10px] font-apple-bold text-[#6a6260]'
-
-const compactRowDangerStatusClassName =
-  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-red-500/[0.08] px-1.5 text-[10px] font-apple-bold text-red-600'
-
-const compactRowIconActionClassName =
-  'inline-flex h-6 w-6 items-center justify-center rounded-[4px] text-[#7a878a] transition hover:bg-black/[0.045] hover:text-[#263033]'
-
-const variantInlineCreateButtonClassName =
-  'flex h-9 min-w-0 items-center justify-center gap-2 rounded-[5px] border border-black/[0.08] bg-white px-3 text-[11px] font-black text-[#263033] shadow-[0_1px_2px_rgba(16,23,25,0.04)] transition hover:border-black/[0.14] hover:bg-[#f8faf9] hover:text-[#101719] focus-visible:ring-1 focus-visible:ring-[#2d3335]/15'
-
-const variantInlineImportButtonClassName =
-  'flex h-9 min-w-0 items-center justify-center gap-2 rounded-[5px] border border-black/[0.08] bg-white px-3 text-[11px] font-black text-[#263033] shadow-[0_1px_2px_rgba(16,23,25,0.04)] transition hover:border-black/[0.14] hover:bg-[#f8faf9] hover:text-[#101719] focus-visible:ring-1 focus-visible:ring-[#2d3335]/15'
-
-type ReviewDialogState = {
-  targetType: 'family' | 'variant'
-  targetId: string
-  targetName: string
-}
-
-type ReviewVisibilityFilter = 'ALL' | 'PENDING_REVIEW' | 'REJECTED'
-
-function matchesReviewVisibilityFilter(status: string, filter: ReviewVisibilityFilter) {
-  return filter === 'ALL' || status === filter
-}
-
 // ---- 主组件 ----
 
 export default function AssetCenterClient({
@@ -4291,439 +3622,67 @@ export default function AssetCenterClient({
         ) : null}
       </Modal>
 
-      {/* 规格款弹窗 —— 放在资产中心工作台外部，避免被父级 overflow/transform 裁切 */}
-      <Modal
+      <VariantEditModal
         isOpen={variantModalOpen}
-        onClose={submitting ? () => undefined : closeVariantModal}
-        title={variantModalMode === 'create'
-          ? (isDuplicateVariantMode ? '另存为新规格款' : '新建规格款')
-          : '编辑规格款'}
-        size="large"
-        footer={
-          <div className="flex items-center justify-between">
-            {variantModalMode === 'edit' && editingVariantId && (
-              <div className="flex items-center gap-2">
-                <Button
-                  variant="plain"
-                  size="small"
-                  disabled={submitting}
-                  onClick={() => {
-                    const variant = variants.find((v) => v.id === editingVariantId)
-                    if (variant) {
-                      openDuplicateVariantModal(variant)
-                    }
-                  }}
-                >
-                  <Plus className="h-3.5 w-3.5 mr-1" />
-                  另存为新规格款
-                </Button>
-                <Button
-                  variant="plain"
-                  size="small"
-                  disabled={submitting}
-                  style={{ color: 'var(--obs-shell-danger)' }}
-                  onClick={() => {
-                    const variant = variants.find((v) => v.id === editingVariantId)
-                    if (variant) {
-                      setDeleteTarget({ type: 'variant', id: variant.id, name: variant.name })
-                    }
-                  }}
-                >
-                  <Trash2 className="h-3.5 w-3.5 mr-1" />
-                  删除规格款
-                </Button>
-              </div>
-            )}
-            <div className="flex gap-2 ml-auto">
-              <Button variant="plain" size="small" onClick={closeVariantModal} disabled={submitting}>取消</Button>
-              <Button size="small" onClick={handleSaveVariant} loading={submitting}>
-                {variantModalMode === 'create'
-                  ? (isDuplicateVariantMode ? '另存为新规格款' : '创建规格款')
-                  : '保存修改'}
-              </Button>
-            </div>
-          </div>
-        }
-      >
-        <div className="space-y-4">
-          {variantSaveProgress ? renderVariantSaveProgress(variantSaveProgress) : null}
-          <div className="grid gap-3 grid-cols-2">
-            <Input
-              label="编码"
-              value={variantForm.code}
-              onChange={(e) => setVariantForm((c) => ({ ...c, code: e.target.value }))}
-              placeholder="留空由系统自动生成"
-            />
-            <Input
-              label="名称"
-              value={variantForm.name}
-              onChange={(e) => setVariantForm((c) => ({ ...c, name: e.target.value }))}
-              placeholder="例如 桌面板 1200 白橡"
-            />
-          </div>
-          <div className="grid gap-3 grid-cols-4">
-            <Input
-              label="供应商名称"
-              value={variantForm.supplierName}
-              onChange={(e) => setVariantForm((c) => ({ ...c, supplierName: e.target.value }))}
-              placeholder="例如 汇材板业"
-            />
-            <Input
-              label="供应商代码"
-              value={variantForm.supplierCode}
-              onChange={(e) => setVariantForm((c) => ({ ...c, supplierCode: e.target.value }))}
-              placeholder="例如 HC"
-            />
-            <Input
-              label="版本号"
-              value={variantForm.versionNo}
-              onChange={(e) => setVariantForm((c) => ({ ...c, versionNo: e.target.value }))}
-              placeholder="留空默认 V01"
-            />
-            <Input
-              label="条码"
-              value={variantForm.barcode}
-              onChange={(e) => setVariantForm((c) => ({ ...c, barcode: e.target.value }))}
-              placeholder="留空自动生成"
-            />
-          </div>
-          <div className="grid gap-3 grid-cols-2">
-            <Input
-              label="尺寸标签"
-              value={variantForm.sizeLabel}
-              onChange={(e) => setVariantForm((c) => ({ ...c, sizeLabel: e.target.value }))}
-              placeholder="例如 1200x600"
-              disabled={isDuplicateVariantMode}
-            />
-            <Select
-              label="基材"
-              searchable
-              searchPlaceholder="搜索基材名称或编码"
-              emptyText="没有匹配的基材"
-              value={variantForm.substrateId}
-              onChange={(e) => setVariantForm((c) => ({ ...c, substrateId: e.target.value }))}
-              options={[
-                { value: '', label: '未设置' },
-                ...substrates.map((s) => ({ value: s.id, label: `${s.name} · ${s.code}` })),
-              ]}
-            />
-          </div>
-          {variantModalMode === 'create' && (
-            <div className="grid gap-3 grid-cols-2">
-              <Select
-                label="继承自"
-                value={variantForm.inheritedFromVariantId}
-                onChange={(e) => applyInheritedVariant(e.target.value)}
-                disabled={isDuplicateVariantMode}
-                options={[
-                  { value: '', label: '不继承' },
-                  ...familyVariantOptions.map((v) => ({ value: v.id, label: v.name })),
-                ]}
-              />
-            </div>
-          )}
-          <div>
-            <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">3D 模型</p>
-            {variantForm.modelUrl ? (
-              <div className="flex items-center gap-3 rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] p-3">
-                <p className="flex-1 text-sm text-apple-label-primary truncate">{variantForm.modelUrl}</p>
-                {!isDuplicateVariantMode ? (
-                  <button
-                    type="button"
-                    onClick={() => setVariantForm((c) => ({ ...c, modelUrl: '' }))}
-                    className="text-apple-label-tertiary hover:text-apple-red"
-                  >
-                    <X className="w-4 h-4" />
-                  </button>
-                ) : null}
-              </div>
-            ) : (
-              <ModelUploader
-                onUpload={async (file) => {
-                  const url = await uploadModelFile(file)
-                  setVariantForm((c) => ({ ...c, modelUrl: url }))
-                }}
-                onValidationError={(err) => toast.error(err.message)}
-                maxSize={50}
-              />
-            )}
-          </div>
-          <div>
-            <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">尺寸参数 (mm)</p>
-            <div className="grid gap-3 grid-cols-4">
-              <Input label="长度" value={variantForm.length} onChange={(e) => setVariantForm((c) => ({ ...c, length: e.target.value }))} placeholder="1200" disabled={isDuplicateVariantMode} />
-              <Input label="宽度" value={variantForm.width} onChange={(e) => setVariantForm((c) => ({ ...c, width: e.target.value }))} placeholder="600" disabled={isDuplicateVariantMode} />
-              <Input label="厚度" value={variantForm.thickness} onChange={(e) => setVariantForm((c) => ({ ...c, thickness: e.target.value }))} placeholder="25" disabled={isDuplicateVariantMode} />
-              <Input label="损耗系数" value={variantForm.lossFactor} onChange={(e) => setVariantForm((c) => ({ ...c, lossFactor: e.target.value }))} placeholder="例如 1.15" />
-            </div>
-          </div>
-          <div>
-            <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">挂载点</p>
-            <div className="grid gap-3 grid-cols-4">
-              <Input label="名称" value={variantForm.mountPointName} onChange={(e) => setVariantForm((c) => ({ ...c, mountPointName: e.target.value }))} />
-              <Input label="X" value={variantForm.mountX} onChange={(e) => setVariantForm((c) => ({ ...c, mountX: e.target.value }))} />
-              <Input label="Y" value={variantForm.mountY} onChange={(e) => setVariantForm((c) => ({ ...c, mountY: e.target.value }))} />
-              <Input label="Z" value={variantForm.mountZ} onChange={(e) => setVariantForm((c) => ({ ...c, mountZ: e.target.value }))} />
-            </div>
-          </div>
-          <div className="grid gap-3 grid-cols-2">
-            <Input label="预估成本价" value={variantEstimatedCostPrice != null ? String(variantEstimatedCostPrice) : '自动计算'} readOnly placeholder="选择基材后自动估算" />
-            <Input label="基材采购价" value={selectedVariantSubstrate?.suggestedPrice != null ? String(selectedVariantSubstrate.suggestedPrice) : '未设置'} readOnly placeholder="来自基材资料" />
-          </div>
-        </div>
-      </Modal>
+        mode={variantModalMode}
+        isDuplicateMode={isDuplicateVariantMode}
+        form={variantForm}
+        onFormChange={setVariantForm}
+        substrates={substrates}
+        familyVariantOptions={familyVariantOptions}
+        variantEstimatedCostPrice={variantEstimatedCostPrice}
+        selectedVariantSubstrate={selectedVariantSubstrate}
+        variantSaveProgress={variantSaveProgress}
+        submitting={submitting}
+        editingVariantId={editingVariantId}
+        variants={variants}
+        onSave={handleSaveVariant}
+        onClose={closeVariantModal}
+        onDuplicate={openDuplicateVariantModal}
+        onDelete={(variant) => setDeleteTarget({ type: 'variant', id: variant.id, name: variant.name })}
+        onInherit={applyInheritedVariant}
+        onUploadModel={uploadModelFile}
+        onUploadError={(err) => toast.error(err.message)}
+        renderProgress={renderVariantSaveProgress}
+      />
 
-      {/* 资产族弹窗 */}
-      <Modal
+      <FamilyEditModal
         isOpen={familyModalOpen}
+        mode={familyModalMode}
+        form={familyForm}
+        onFormChange={setFamilyForm}
+        typeTabs={TYPE_TABS}
+        assetSeries={initialAssetSeries}
+        selectedSeriesId={selectedSeriesId}
+        roleDefinitions={familyRoleDefinitions}
+        editingFamily={editingFamily}
+        submitting={submitting}
+        onSave={handleSaveFamily}
         onClose={closeFamilyModal}
-        title={familyModalMode === 'create' ? '新建资产族' : '编辑资产族'}
-        size="medium"
-        footer={
-          <div className="flex items-center justify-between">
-            {familyModalMode === 'edit' && (
-              <Button
-                variant="plain"
-                size="small"
-                style={{ color: 'var(--obs-shell-danger)' }}
-                onClick={() => {
-                  const family = families.find((f) => f.id === editingFamilyId)
-                  if (family) {
-                    const variantCount = getVariantsForFamily(family.id).length
-                    setDeleteTarget({ type: 'family', id: family.id, name: family.name, cascadeCount: variantCount })
-                  }
-                }}
-              >
-                <Trash2 className="h-3.5 w-3.5 mr-1" />
-                删除资产族
-              </Button>
-            )}
-            <div className="flex gap-2 ml-auto">
-              <Button variant="plain" size="small" onClick={closeFamilyModal}>取消</Button>
-              <Button size="small" onClick={handleSaveFamily} loading={submitting}>
-                {familyModalMode === 'create' ? '创建' : '保存修改'}
-              </Button>
-            </div>
-          </div>
-        }
-      >
-        <div className="space-y-4">
-          <div className="space-y-2">
-            <p className="text-xs font-bold text-[#2d3335]">资产类型</p>
-            <div className="grid grid-cols-4 gap-1 rounded-[6px] bg-black/[0.03] p-0.5 ring-1 ring-black/5">
-              {TYPE_TABS.map((tab) => {
-                const type = tab.type as AssetFamilyDTO['type']
-                const active = familyForm.type === type
-                return (
-                  <button
-                    key={type}
-                    type="button"
-                    onClick={() =>
-                      setFamilyForm((current) => ({
-                        ...current,
-                        type,
-                        assetSeriesId: current.assetSeriesId || selectedSeriesId || '',
-                      }))
-                    }
-                    className={cn(
-                      'flex h-8 items-center justify-center gap-1.5 rounded-[4px] px-2 text-[10px] font-bold transition',
-                      active
-                        ? 'bg-white text-[#2d3335] shadow-sm'
-                        : 'text-[#5a6062]/50 hover:text-[#2d3335]',
-                    )}
-                  >
-                    <span className="h-3.5 w-3.5">{tab.icon}</span>
-                    <span>{tab.label}</span>
-                  </button>
-                )
-              })}
-            </div>
-          </div>
-          <div className="grid gap-3 grid-cols-2">
-            <Input
-              label="编码"
-              value={familyForm.code}
-              onChange={(e) => setFamilyForm((c) => ({ ...c, code: e.target.value }))}
-              placeholder="留空由系统自动生成"
-            />
-            <Input
-              label="名称"
-              value={familyForm.name}
-              onChange={(e) => setFamilyForm((c) => ({ ...c, name: e.target.value }))}
-              placeholder="例如 单板桌桌面板"
-            />
-          </div>
-          {familyForm.type !== 'HARDWARE' ? (
-            <div className="space-y-2">
-              <p className="text-xs font-bold text-[#2d3335]">归属系列</p>
-              <div className="grid grid-cols-2 gap-2">
-                {initialAssetSeries.map((series) => {
-                  const checked = familyForm.assetSeriesId === series.id
-                  return (
-                    <label
-                      key={series.id}
-                      className={cn(
-                        'flex cursor-pointer items-center gap-2 rounded-[6px] px-3 py-2 text-xs transition ring-1',
-                        checked
-                          ? 'bg-[#2d3335] text-white ring-[#2d3335]'
-                          : 'bg-black/[0.025] text-[#2d3335] ring-black/[0.04] hover:bg-black/[0.045]',
-                      )}
-                    >
-                      <input
-                        type="radio"
-                        name="asset-family-series"
-                        checked={checked}
-                        onChange={() => {
-                          setFamilyForm((current) => ({
-                            ...current,
-                            assetSeriesId: series.id,
-                          }))
-                        }}
-                        className="sr-only"
-                      />
-                      <span className="min-w-0 flex-1 truncate font-bold">{series.name}</span>
-                      <span className={cn('font-mono text-[10px]', checked ? 'text-white/60' : 'text-[#5a6062]/45')}>
-                        {series.code}
-                      </span>
-                    </label>
-                  )
-                })}
-              </div>
-            </div>
-          ) : null}
-          <details className="group rounded-apple-lg border border-apple-separator bg-apple-bg-secondary/30">
-            <summary className="flex cursor-pointer list-none items-center justify-between gap-3 px-4 py-3">
-              <div className="flex items-center gap-2">
-                <p className="text-sm font-apple-semibold text-apple-label-primary">附加属性</p>
-                <span className="rounded-full bg-apple-bg-primary px-2 py-0.5 text-[11px] text-apple-label-tertiary">
-                  可选
-                </span>
-              </div>
-              <ChevronDown className="h-4 w-4 text-apple-label-tertiary transition group-open:rotate-180" />
-            </summary>
-            <div className="space-y-4 border-t border-apple-separator/60 px-4 py-4">
-              <div className="space-y-2">
-                <div className="flex items-center justify-between gap-2">
-                  <p className="text-xs font-apple-medium text-apple-label-secondary">
-                    连接角色
-                  </p>
-                  <Button variant="plain" size="small" onClick={openCreateRoleEditor}>
-                    <Plus className="h-3.5 w-3.5" />
-                    新增连接角色
-                  </Button>
-                </div>
-                {familyRoleDefinitions.length > 0 ? (
-                  <div className="space-y-2">
-                    {familyRoleDefinitions.map((definition) => (
-                      <div
-                        key={definition.value}
-                        className="flex items-center gap-2 rounded-apple-md border border-apple-separator bg-apple-bg-primary px-3 py-2"
-                      >
-                        <Checkbox
-                          checked={familyForm.selectedRoles.includes(definition.value)}
-                          onChange={(e) => {
-                            setFamilyForm((current) => ({
-                              ...current,
-                              selectedRoles: e.target.checked
-                                ? normalizeConnectionRoles([...current.selectedRoles, definition.value])
-                                : current.selectedRoles.filter((role) => role !== definition.value),
-                            }))
-                          }}
-                          label={definition.label}
-                        />
-                        <span className="ml-auto text-[11px] text-apple-label-tertiary">
-                          {definition.builtIn ? '内置' : '自定义'}
-                        </span>
-                        <button
-                          type="button"
-                          onClick={() => openEditRoleEditor(definition)}
-                          className="rounded-full p-1.5 text-apple-label-primary/60 hover:bg-apple-bg-secondary hover:text-apple-label-primary bg-apple-bg-secondary/40 shadow-apple-sm border border-apple-separator/10 transition"
-                          title={`编辑 ${definition.label}`}
-                        >
-                          <Pencil className="h-3.5 w-3.5" />
-                        </button>
-                        <button
-                          type="button"
-                          onClick={() => handleDeleteRoleDefinition(definition.value)}
-                          className="rounded-full p-1.5 text-apple-label-primary/60 hover:bg-apple-red/10 hover:text-apple-red bg-apple-bg-secondary/40 shadow-apple-sm border border-apple-separator/10 transition"
-                          title={`删除 ${definition.label}`}
-                        >
-                          <Trash2 className="h-3.5 w-3.5" />
-                        </button>
-                      </div>
-                    ))}
-                  </div>
-                ) : (
-                  <div className="rounded-apple-md border border-apple-separator bg-apple-bg-primary px-3 py-2 text-xs text-apple-label-secondary">
-                    暂无连接角色。
-                  </div>
-                )}
-              </div>
-              <Textarea
-                label="说明"
-                value={familyForm.description}
-                onChange={(e) => setFamilyForm((c) => ({ ...c, description: e.target.value }))}
-              />
-              <p className="text-[11px] text-apple-label-tertiary">
-                {familyModalMode === 'create'
-                  ? '创建后先进入草稿。'
-                  : `当前状态：${editingFamily ? getStatusLabel(editingFamily.status) : '草稿'}。`}
-              </p>
-            </div>
-          </details>
-        </div>
-      </Modal>
+        onDelete={(family, variantCount) => setDeleteTarget({ type: 'family', id: family.id, name: family.name, cascadeCount: variantCount })}
+        onCreateRole={openCreateRoleEditor}
+        onEditRole={openEditRoleEditor}
+        onDeleteRole={handleDeleteRoleDefinition}
+        getVariantCount={(familyId) => getVariantsForFamily(familyId).length}
+      />
 
-      <Modal
+      <RoleEditorModal
         isOpen={roleEditorOpen}
+        mode={roleEditorMode}
+        label={roleEditorLabel}
+        onLabelChange={setRoleEditorLabel}
+        onSave={handleSaveRoleDefinition}
         onClose={() => setRoleEditorOpen(false)}
-        title={roleEditorMode === 'create' ? '新增连接角色' : '编辑连接角色'}
-        size="small"
-        footer={
-          <div className="flex justify-end gap-2">
-            <Button variant="plain" size="small" onClick={() => setRoleEditorOpen(false)}>取消</Button>
-            <Button size="small" onClick={handleSaveRoleDefinition}>
-              {roleEditorMode === 'create' ? '新增' : '保存'}
-            </Button>
-          </div>
-        }
-      >
-        <Input
-          label="连接角色名称"
-          value={roleEditorLabel}
-          onChange={(e) => setRoleEditorLabel(e.target.value)}
-          placeholder="例如 桌面板、桌腿、横梁连接件"
-        />
-      </Modal>
+      />
 
-      <Modal
-        isOpen={!!reviewDialogState}
+      <ReviewRejectModal
+        reviewDialogState={reviewDialogState}
+        rejectReason={reviewRejectReason}
+        onRejectReasonChange={setReviewRejectReason}
+        onConfirm={handleConfirmRejectReview}
         onClose={closeReviewDialog}
-        title={`驳回${reviewDialogState?.targetType === 'family' ? '资产族' : '规格款'}`}
-        size="small"
-        footer={
-          <div className="flex justify-end gap-2">
-            <Button variant="plain" size="small" onClick={closeReviewDialog}>
-              取消
-            </Button>
-            <Button size="small" onClick={handleConfirmRejectReview} loading={submitting}>
-              确认驳回
-            </Button>
-          </div>
-        }
-      >
-        <div className="space-y-3">
-          <p className="text-sm text-apple-label-secondary">
-            当前目标：{reviewDialogState?.targetName ?? '-'}
-          </p>
-          <Textarea
-            label="驳回原因"
-            value={reviewRejectReason}
-            onChange={(event) => setReviewRejectReason(event.target.value)}
-            placeholder="请填写驳回原因，后续录入人会看到这条说明。"
-          />
-        </div>
-      </Modal>
+        submitting={submitting}
+      />
 
       {/* 删除确认对话框 */}
       <DeleteConfirmDialog
diff --git a/furniture-3d-system/src/app/asset-center/FamilyEditModal.tsx b/furniture-3d-system/src/app/asset-center/FamilyEditModal.tsx
new file mode 100644
index 00000000..d3c2f079
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/FamilyEditModal.tsx
@@ -0,0 +1,261 @@
+'use client'
+
+import { ChevronDown, Pencil, Plus, Trash2 } from 'lucide-react'
+import Button from '@/components/ui/Button'
+import Checkbox from '@/components/ui/Checkbox'
+import Input, { Textarea } from '@/components/ui/Input'
+import Modal from '@/components/ui/Modal'
+import { cn } from '@/lib/utils'
+import { normalizeConnectionRoles } from '@/lib/open-product/connection-role-catalog'
+import type { ConnectionRoleDefinition } from '@/lib/open-product/connection-role-catalog'
+import type { AssetFamilyDTO, AssetSeriesDTO } from '@/server/services'
+import type { AssetTypeFilter } from './asset-center-types'
+import { getStatusLabel } from './asset-center-utils'
+
+interface FamilyFormState {
+  type: AssetFamilyDTO['type']
+  code: string
+  name: string
+  description: string
+  assetSeriesId: string
+  selectedRoles: string[]
+}
+
+interface FamilyEditModalProps {
+  isOpen: boolean
+  mode: 'create' | 'edit'
+  form: FamilyFormState
+  onFormChange: (updater: (prev: FamilyFormState) => FamilyFormState) => void
+  typeTabs: Array<{ type: AssetTypeFilter; label: string; icon: React.ReactNode }>
+  assetSeries: AssetSeriesDTO[]
+  selectedSeriesId: string | null
+  roleDefinitions: ConnectionRoleDefinition[]
+  editingFamily: AssetFamilyDTO | null
+  submitting: boolean
+  onSave: () => void
+  onClose: () => void
+  onDelete: (family: AssetFamilyDTO, variantCount: number) => void
+  onCreateRole: () => void
+  onEditRole: (definition: ConnectionRoleDefinition) => void
+  onDeleteRole: (roleValue: string) => void
+  getVariantCount: (familyId: string) => number
+}
+
+export function FamilyEditModal({
+  isOpen,
+  mode,
+  form,
+  onFormChange,
+  typeTabs,
+  assetSeries,
+  selectedSeriesId,
+  roleDefinitions,
+  editingFamily,
+  submitting,
+  onSave,
+  onClose,
+  onDelete,
+  onCreateRole,
+  onEditRole,
+  onDeleteRole,
+  getVariantCount,
+}: FamilyEditModalProps) {
+  return (
+    <Modal
+      isOpen={isOpen}
+      onClose={onClose}
+      title={mode === 'create' ? '新建资产族' : '编辑资产族'}
+      size="medium"
+      footer={
+        <div className="flex items-center justify-between">
+          {mode === 'edit' && editingFamily && (
+            <Button
+              variant="plain"
+              size="small"
+              style={{ color: 'var(--obs-shell-danger)' }}
+              onClick={() => {
+                const variantCount = getVariantCount(editingFamily.id)
+                onDelete(editingFamily, variantCount)
+              }}
+            >
+              <Trash2 className="h-3.5 w-3.5 mr-1" />
+              删除资产族
+            </Button>
+          )}
+          <div className="flex gap-2 ml-auto">
+            <Button variant="plain" size="small" onClick={onClose}>取消</Button>
+            <Button size="small" onClick={onSave} loading={submitting}>
+              {mode === 'create' ? '创建' : '保存修改'}
+            </Button>
+          </div>
+        </div>
+      }
+    >
+      <div className="space-y-4">
+        <div className="space-y-2">
+          <p className="text-xs font-bold text-[#2d3335]">资产类型</p>
+          <div className="grid grid-cols-4 gap-1 rounded-[6px] bg-black/[0.03] p-0.5 ring-1 ring-black/5">
+            {typeTabs.map((tab) => {
+              const type = tab.type as AssetFamilyDTO['type']
+              const active = form.type === type
+              return (
+                <button
+                  key={type}
+                  type="button"
+                  onClick={() =>
+                    onFormChange((current) => ({
+                      ...current,
+                      type,
+                      assetSeriesId: current.assetSeriesId || selectedSeriesId || '',
+                    }))
+                  }
+                  className={cn(
+                    'flex h-8 items-center justify-center gap-1.5 rounded-[4px] px-2 text-[10px] font-bold transition',
+                    active
+                      ? 'bg-white text-[#2d3335] shadow-sm'
+                      : 'text-[#5a6062]/50 hover:text-[#2d3335]',
+                  )}
+                >
+                  <span className="h-3.5 w-3.5">{tab.icon}</span>
+                  <span>{tab.label}</span>
+                </button>
+              )
+            })}
+          </div>
+        </div>
+        <div className="grid gap-3 grid-cols-2">
+          <Input
+            label="编码"
+            value={form.code}
+            onChange={(e) => onFormChange((c) => ({ ...c, code: e.target.value }))}
+            placeholder="留空由系统自动生成"
+          />
+          <Input
+            label="名称"
+            value={form.name}
+            onChange={(e) => onFormChange((c) => ({ ...c, name: e.target.value }))}
+            placeholder="例如 单板桌桌面板"
+          />
+        </div>
+        {form.type !== 'HARDWARE' ? (
+          <div className="space-y-2">
+            <p className="text-xs font-bold text-[#2d3335]">归属系列</p>
+            <div className="grid grid-cols-2 gap-2">
+              {assetSeries.map((series) => {
+                const checked = form.assetSeriesId === series.id
+                return (
+                  <label
+                    key={series.id}
+                    className={cn(
+                      'flex cursor-pointer items-center gap-2 rounded-[6px] px-3 py-2 text-xs transition ring-1',
+                      checked
+                        ? 'bg-[#2d3335] text-white ring-[#2d3335]'
+                        : 'bg-black/[0.025] text-[#2d3335] ring-black/[0.04] hover:bg-black/[0.045]',
+                    )}
+                  >
+                    <input
+                      type="radio"
+                      name="asset-family-series"
+                      checked={checked}
+                      onChange={() => {
+                        onFormChange((current) => ({
+                          ...current,
+                          assetSeriesId: series.id,
+                        }))
+                      }}
+                      className="sr-only"
+                    />
+                    <span className="min-w-0 flex-1 truncate font-bold">{series.name}</span>
+                    <span className={cn('font-mono text-[10px]', checked ? 'text-white/60' : 'text-[#5a6062]/45')}>
+                      {series.code}
+                    </span>
+                  </label>
+                )
+              })}
+            </div>
+          </div>
+        ) : null}
+        <details className="group rounded-apple-lg border border-apple-separator bg-apple-bg-secondary/30">
+          <summary className="flex cursor-pointer list-none items-center justify-between gap-3 px-4 py-3">
+            <div className="flex items-center gap-2">
+              <p className="text-sm font-apple-semibold text-apple-label-primary">附加属性</p>
+              <span className="rounded-full bg-apple-bg-primary px-2 py-0.5 text-[11px] text-apple-label-tertiary">
+                可选
+              </span>
+            </div>
+            <ChevronDown className="h-4 w-4 text-apple-label-tertiary transition group-open:rotate-180" />
+          </summary>
+          <div className="space-y-4 border-t border-apple-separator/60 px-4 py-4">
+            <div className="space-y-2">
+              <div className="flex items-center justify-between gap-2">
+                <p className="text-xs font-apple-medium text-apple-label-secondary">
+                  连接角色
+                </p>
+                <Button variant="plain" size="small" onClick={onCreateRole}>
+                  <Plus className="h-3.5 w-3.5" />
+                  新增连接角色
+                </Button>
+              </div>
+              {roleDefinitions.length > 0 ? (
+                <div className="space-y-2">
+                  {roleDefinitions.map((definition) => (
+                    <div
+                      key={definition.value}
+                      className="flex items-center gap-2 rounded-apple-md border border-apple-separator bg-apple-bg-primary px-3 py-2"
+                    >
+                      <Checkbox
+                        checked={form.selectedRoles.includes(definition.value)}
+                        onChange={(e) => {
+                          onFormChange((current) => ({
+                            ...current,
+                            selectedRoles: e.target.checked
+                              ? normalizeConnectionRoles([...current.selectedRoles, definition.value])
+                              : current.selectedRoles.filter((role) => role !== definition.value),
+                          }))
+                        }}
+                        label={definition.label}
+                      />
+                      <span className="ml-auto text-[11px] text-apple-label-tertiary">
+                        {definition.builtIn ? '内置' : '自定义'}
+                      </span>
+                      <button
+                        type="button"
+                        onClick={() => onEditRole(definition)}
+                        className="rounded-full p-1.5 text-apple-label-primary/60 hover:bg-apple-bg-secondary hover:text-apple-label-primary bg-apple-bg-secondary/40 shadow-apple-sm border border-apple-separator/10 transition"
+                        title={`编辑 ${definition.label}`}
+                      >
+                        <Pencil className="h-3.5 w-3.5" />
+                      </button>
+                      <button
+                        type="button"
+                        onClick={() => onDeleteRole(definition.value)}
+                        className="rounded-full p-1.5 text-apple-label-primary/60 hover:bg-apple-red/10 hover:text-apple-red bg-apple-bg-secondary/40 shadow-apple-sm border border-apple-separator/10 transition"
+                        title={`删除 ${definition.label}`}
+                      >
+                        <Trash2 className="h-3.5 w-3.5" />
+                      </button>
+                    </div>
+                  ))}
+                </div>
+              ) : (
+                <div className="rounded-apple-md border border-apple-separator bg-apple-bg-primary px-3 py-2 text-xs text-apple-label-secondary">
+                  暂无连接角色。
+                </div>
+              )}
+            </div>
+            <Textarea
+              label="说明"
+              value={form.description}
+              onChange={(e) => onFormChange((c) => ({ ...c, description: e.target.value }))}
+            />
+            <p className="text-[11px] text-apple-label-tertiary">
+              {mode === 'create'
+                ? '创建后先进入草稿。'
+                : `当前状态：${editingFamily ? getStatusLabel(editingFamily.status) : '草稿'}。`}
+            </p>
+          </div>
+        </details>
+      </div>
+    </Modal>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/ReviewRejectModal.tsx b/furniture-3d-system/src/app/asset-center/ReviewRejectModal.tsx
new file mode 100644
index 00000000..821cf5a3
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/ReviewRejectModal.tsx
@@ -0,0 +1,55 @@
+'use client'
+
+import Button from '@/components/ui/Button'
+import { Textarea } from '@/components/ui/Input'
+import Modal from '@/components/ui/Modal'
+import type { ReviewDialogState } from './asset-center-types'
+
+interface ReviewRejectModalProps {
+  reviewDialogState: ReviewDialogState | null
+  rejectReason: string
+  onRejectReasonChange: (value: string) => void
+  onConfirm: () => void
+  onClose: () => void
+  submitting: boolean
+}
+
+export function ReviewRejectModal({
+  reviewDialogState,
+  rejectReason,
+  onRejectReasonChange,
+  onConfirm,
+  onClose,
+  submitting,
+}: ReviewRejectModalProps) {
+  return (
+    <Modal
+      isOpen={!!reviewDialogState}
+      onClose={onClose}
+      title={`驳回${reviewDialogState?.targetType === 'family' ? '资产族' : '规格款'}`}
+      size="small"
+      footer={
+        <div className="flex justify-end gap-2">
+          <Button variant="plain" size="small" onClick={onClose}>
+            取消
+          </Button>
+          <Button size="small" onClick={onConfirm} loading={submitting}>
+            确认驳回
+          </Button>
+        </div>
+      }
+    >
+      <div className="space-y-3">
+        <p className="text-sm text-apple-label-secondary">
+          当前目标：{reviewDialogState?.targetName ?? '-'}
+        </p>
+        <Textarea
+          label="驳回原因"
+          value={rejectReason}
+          onChange={(event) => onRejectReasonChange(event.target.value)}
+          placeholder="请填写驳回原因，后续录入人会看到这条说明。"
+        />
+      </div>
+    </Modal>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/RoleEditorModal.tsx b/furniture-3d-system/src/app/asset-center/RoleEditorModal.tsx
new file mode 100644
index 00000000..f417a357
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/RoleEditorModal.tsx
@@ -0,0 +1,47 @@
+'use client'
+
+import Button from '@/components/ui/Button'
+import Input from '@/components/ui/Input'
+import Modal from '@/components/ui/Modal'
+
+interface RoleEditorModalProps {
+  isOpen: boolean
+  mode: 'create' | 'edit'
+  label: string
+  onLabelChange: (value: string) => void
+  onSave: () => void
+  onClose: () => void
+}
+
+export function RoleEditorModal({
+  isOpen,
+  mode,
+  label,
+  onLabelChange,
+  onSave,
+  onClose,
+}: RoleEditorModalProps) {
+  return (
+    <Modal
+      isOpen={isOpen}
+      onClose={onClose}
+      title={mode === 'create' ? '新增连接角色' : '编辑连接角色'}
+      size="small"
+      footer={
+        <div className="flex justify-end gap-2">
+          <Button variant="plain" size="small" onClick={onClose}>取消</Button>
+          <Button size="small" onClick={onSave}>
+            {mode === 'create' ? '新增' : '保存'}
+          </Button>
+        </div>
+      }
+    >
+      <Input
+        label="连接角色名称"
+        value={label}
+        onChange={(e) => onLabelChange(e.target.value)}
+        placeholder="例如 桌面板、桌腿、横梁连接件"
+      />
+    </Modal>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx b/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
new file mode 100644
index 00000000..3de09981
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
@@ -0,0 +1,235 @@
+'use client'
+
+import { X } from 'lucide-react'
+import Button from '@/components/ui/Button'
+import Input from '@/components/ui/Input'
+import Modal from '@/components/ui/Modal'
+import Select from '@/components/ui/Select'
+import { ModelUploader } from '@/components/upload/ModelUploader'
+import type { AssetOperationProgressDTO, AssetVariantDTO, SubstrateDTO } from '@/server/services'
+import type { VariantForm } from './asset-center-types'
+
+interface VariantEditModalProps {
+  isOpen: boolean
+  mode: 'create' | 'edit'
+  isDuplicateMode: boolean
+  form: VariantForm
+  onFormChange: (updater: (prev: VariantForm) => VariantForm) => void
+  substrates: SubstrateDTO[]
+  familyVariantOptions: Array<{ id: string; name: string }>
+  variantEstimatedCostPrice: number | null
+  selectedVariantSubstrate: SubstrateDTO | null
+  variantSaveProgress: AssetOperationProgressDTO | null
+  submitting: boolean
+  editingVariantId: string | null
+  variants: AssetVariantDTO[]
+  onSave: () => void
+  onClose: () => void
+  onDuplicate: (variant: AssetVariantDTO) => void
+  onDelete: (variant: AssetVariantDTO) => void
+  onInherit: (variantId: string) => void
+  onUploadModel: (file: File) => Promise<string>
+  onUploadError: (error: { message: string }) => void
+  renderProgress: (progress: AssetOperationProgressDTO) => React.ReactNode
+}
+
+export function VariantEditModal({
+  isOpen,
+  mode,
+  isDuplicateMode,
+  form,
+  onFormChange,
+  substrates,
+  familyVariantOptions,
+  variantEstimatedCostPrice,
+  selectedVariantSubstrate,
+  variantSaveProgress,
+  submitting,
+  editingVariantId,
+  variants,
+  onSave,
+  onClose,
+  onDuplicate,
+  onDelete,
+  onInherit,
+  onUploadModel,
+  onUploadError,
+  renderProgress,
+}: VariantEditModalProps) {
+  return (
+    <Modal
+      isOpen={isOpen}
+      onClose={submitting ? () => undefined : onClose}
+      title={mode === 'create'
+        ? (isDuplicateMode ? '另存为新规格款' : '新建规格款')
+        : '编辑规格款'}
+      size="large"
+      footer={
+        <div className="flex items-center justify-between">
+          {mode === 'edit' && editingVariantId && (
+            <div className="flex items-center gap-2">
+              <Button
+                variant="plain"
+                size="small"
+                disabled={submitting}
+                onClick={() => {
+                  const variant = variants.find((v) => v.id === editingVariantId)
+                  if (variant) onDuplicate(variant)
+                }}
+              >
+                另存为新规格款
+              </Button>
+              <Button
+                variant="plain"
+                size="small"
+                disabled={submitting}
+                style={{ color: 'var(--obs-shell-danger)' }}
+                onClick={() => {
+                  const variant = variants.find((v) => v.id === editingVariantId)
+                  if (variant) onDelete(variant)
+                }}
+              >
+                删除规格款
+              </Button>
+            </div>
+          )}
+          <div className="flex gap-2 ml-auto">
+            <Button variant="plain" size="small" onClick={onClose} disabled={submitting}>取消</Button>
+            <Button size="small" onClick={onSave} loading={submitting}>
+              {mode === 'create'
+                ? (isDuplicateMode ? '另存为新规格款' : '创建规格款')
+                : '保存修改'}
+            </Button>
+          </div>
+        </div>
+      }
+    >
+      <div className="space-y-4">
+        {variantSaveProgress ? renderProgress(variantSaveProgress) : null}
+        <div className="grid gap-3 grid-cols-2">
+          <Input
+            label="编码"
+            value={form.code}
+            onChange={(e) => onFormChange((c) => ({ ...c, code: e.target.value }))}
+            placeholder="留空由系统自动生成"
+          />
+          <Input
+            label="名称"
+            value={form.name}
+            onChange={(e) => onFormChange((c) => ({ ...c, name: e.target.value }))}
+            placeholder="例如 桌面板 1200 白橡"
+          />
+        </div>
+        <div className="grid gap-3 grid-cols-4">
+          <Input
+            label="供应商名称"
+            value={form.supplierName}
+            onChange={(e) => onFormChange((c) => ({ ...c, supplierName: e.target.value }))}
+            placeholder="例如 汇材板业"
+          />
+          <Input
+            label="供应商代码"
+            value={form.supplierCode}
+            onChange={(e) => onFormChange((c) => ({ ...c, supplierCode: e.target.value }))}
+            placeholder="例如 HC"
+          />
+          <Input
+            label="版本号"
+            value={form.versionNo}
+            onChange={(e) => onFormChange((c) => ({ ...c, versionNo: e.target.value }))}
+            placeholder="留空默认 V01"
+          />
+          <Input
+            label="条码"
+            value={form.barcode}
+            onChange={(e) => onFormChange((c) => ({ ...c, barcode: e.target.value }))}
+            placeholder="留空自动生成"
+          />
+        </div>
+        <div className="grid gap-3 grid-cols-2">
+          <Input
+            label="尺寸标签"
+            value={form.sizeLabel}
+            onChange={(e) => onFormChange((c) => ({ ...c, sizeLabel: e.target.value }))}
+            placeholder="例如 1200x600"
+            disabled={isDuplicateMode}
+          />
+          <Select
+            label="基材"
+            searchable
+            searchPlaceholder="搜索基材名称或编码"
+            emptyText="没有匹配的基材"
+            value={form.substrateId}
+            onChange={(e) => onFormChange((c) => ({ ...c, substrateId: e.target.value }))}
+            options={[
+              { value: '', label: '未设置' },
+              ...substrates.map((s) => ({ value: s.id, label: `${s.name} · ${s.code}` })),
+            ]}
+          />
+        </div>
+        {mode === 'create' && (
+          <div className="grid gap-3 grid-cols-2">
+            <Select
+              label="继承自"
+              value={form.inheritedFromVariantId}
+              onChange={(e) => onInherit(e.target.value)}
+              disabled={isDuplicateMode}
+              options={[
+                { value: '', label: '不继承' },
+                ...familyVariantOptions.map((v) => ({ value: v.id, label: v.name })),
+              ]}
+            />
+          </div>
+        )}
+        <div>
+          <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">3D 模型</p>
+          {form.modelUrl ? (
+            <div className="flex items-center gap-3 rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-surface-bg)] p-3">
+              <p className="flex-1 text-sm text-apple-label-primary truncate">{form.modelUrl}</p>
+              {!isDuplicateMode ? (
+                <button
+                  type="button"
+                  onClick={() => onFormChange((c) => ({ ...c, modelUrl: '' }))}
+                  className="text-apple-label-tertiary hover:text-apple-red"
+                >
+                  <X className="w-4 h-4" />
+                </button>
+              ) : null}
+            </div>
+          ) : (
+            <ModelUploader
+              onUpload={async (file) => {
+                const url = await onUploadModel(file)
+                onFormChange((c) => ({ ...c, modelUrl: url }))
+              }}
+              onValidationError={onUploadError}
+              maxSize={50}
+            />
+          )}
+        </div>
+        <div>
+          <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">尺寸参数 (mm)</p>
+          <div className="grid gap-3 grid-cols-4">
+            <Input label="长度" value={form.length} onChange={(e) => onFormChange((c) => ({ ...c, length: e.target.value }))} placeholder="1200" disabled={isDuplicateMode} />
+            <Input label="宽度" value={form.width} onChange={(e) => onFormChange((c) => ({ ...c, width: e.target.value }))} placeholder="600" disabled={isDuplicateMode} />
+            <Input label="厚度" value={form.thickness} onChange={(e) => onFormChange((c) => ({ ...c, thickness: e.target.value }))} placeholder="25" disabled={isDuplicateMode} />
+            <Input label="损耗系数" value={form.lossFactor} onChange={(e) => onFormChange((c) => ({ ...c, lossFactor: e.target.value }))} placeholder="例如 1.15" />
+          </div>
+        </div>
+        <div>
+          <p className="mb-2 text-xs font-apple-medium text-apple-label-tertiary">挂载点</p>
+          <div className="grid gap-3 grid-cols-4">
+            <Input label="名称" value={form.mountPointName} onChange={(e) => onFormChange((c) => ({ ...c, mountPointName: e.target.value }))} />
+            <Input label="X" value={form.mountX} onChange={(e) => onFormChange((c) => ({ ...c, mountX: e.target.value }))} />
+            <Input label="Y" value={form.mountY} onChange={(e) => onFormChange((c) => ({ ...c, mountY: e.target.value }))} />
+            <Input label="Z" value={form.mountZ} onChange={(e) => onFormChange((c) => ({ ...c, mountZ: e.target.value }))} />
+          </div>
+        </div>
+        <div className="grid gap-3 grid-cols-2">
+          <Input label="预估成本价" value={variantEstimatedCostPrice != null ? String(variantEstimatedCostPrice) : '自动计算'} readOnly placeholder="选择基材后自动估算" />
+          <Input label="基材采购价" value={selectedVariantSubstrate?.suggestedPrice != null ? String(selectedVariantSubstrate.suggestedPrice) : '未设置'} readOnly placeholder="来自基材资料" />
+        </div>
+      </div>
+    </Modal>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/asset-center-types.ts b/furniture-3d-system/src/app/asset-center/asset-center-types.ts
new file mode 100644
index 00000000..449c6e16
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/asset-center-types.ts
@@ -0,0 +1,210 @@
+import type {
+  AssetFamilyDTO,
+  AssetOperationProgressDTO,
+  AssetSeriesDTO,
+  AssetVariantDTO,
+  MaterialCategoryDTO,
+  MaterialDTO,
+  SubstrateDTO,
+  SubstrateDictionaryBundleDTO,
+  SimilarAssetVariantCandidateDTO,
+  AssetCadImportResult,
+} from '@/server/services'
+import type { PlatformMetricItem } from '@/components/platform/types'
+import type {
+  AssetVariantUvProjectionAxis,
+  AssetVariantUvSurfaceConfig,
+} from '@/lib/asset-variant-render-config'
+
+// ---- Props ----
+
+export interface AssetCenterClientProps {
+  initialFamilies: AssetFamilyDTO[]
+  initialVariants: AssetVariantDTO[]
+  initialSubstrates: SubstrateDTO[]
+  initialSubstrateDictionaries?: SubstrateDictionaryBundleDTO
+  initialAssetSeries: AssetSeriesDTO[]
+  finishes: MaterialDTO[]
+  materialCategories: MaterialCategoryDTO[]
+  metrics: PlatformMetricItem[]
+  user: {
+    id: string
+    name: string
+    email: string
+    role: string
+    businessRoles?: string[] | null
+    departmentPaths?: string[] | null
+    avatar: string | null
+    department: { id: string; name: string; fullPath?: string | null } | null
+  }
+}
+
+// ---- Preview transform types ----
+
+export type PreviewNodeOffsetMap = Record<string, [number, number, number]>
+export type PreviewNodeRotationMap = Record<string, [number, number, number, number]>
+export type PreviewNodeTransformState = {
+  offsets: PreviewNodeOffsetMap
+  rotations: PreviewNodeRotationMap
+}
+
+export type Vector3Tuple = [number, number, number]
+
+// ---- UV editor form ----
+
+export type VariantUvEditorFormState = {
+  textureRepeat: string
+  textureRepeatU: string
+  textureRepeatV: string
+  textureRotation: string
+  textureSizeMm: string
+  textureProjectionAxis: '' | AssetVariantUvProjectionAxis
+}
+
+// ---- Asset type filter ----
+
+export type AssetTypeFilter = AssetFamilyDTO['type']
+
+// ---- Variant form ----
+
+export function emptyVariantForm(assetFamilyId: string, identityPrefix = '') {
+  return {
+    assetFamilyId,
+    code: '',
+    name: identityPrefix,
+    sizeLabel: '',
+    substrateId: '',
+    finishId: '',
+    supplierName: '',
+    supplierCode: '',
+    versionNo: '',
+    barcode: '',
+    length: '',
+    width: '',
+    thickness: '',
+    modelUrl: '',
+    mountPointName: 'origin',
+    mountX: '0',
+    mountY: '0',
+    mountZ: '0',
+    lossFactor: '1',
+    inheritedFromVariantId: '',
+    includeLegConnectorRole: false,
+  }
+}
+
+export type VariantForm = ReturnType<typeof emptyVariantForm>
+
+// ---- CAD import form ----
+
+export type ImportableAssetType = Exclude<AssetFamilyDTO['type'], 'PACKAGING'>
+
+export function emptyCadImportForm(assetType: ImportableAssetType, useExistingFamily: boolean) {
+  return {
+    assetType,
+    familyMode: useExistingFamily ? ('existing' as const) : ('create' as const),
+    familyId: '',
+    familyCode: '',
+    familyName: '',
+    familyDescription: '',
+    connectionRoles: '',
+    variantCode: '',
+    variantName: '',
+    sizeLabel: '',
+    substrateId: '',
+    finishId: '',
+    lossFactor: '1',
+    file: null as File | null,
+  }
+}
+
+export type CadImportForm = ReturnType<typeof emptyCadImportForm>
+
+export type CadImportFieldKey =
+  | 'familyId'
+  | 'familyCode'
+  | 'familyName'
+  | 'connectionRoles'
+  | 'variantName'
+  | 'substrateId'
+  | 'file'
+
+export type CadImportFieldErrors = Partial<Record<CadImportFieldKey, string>>
+
+// ---- Review dialog ----
+
+export type ReviewDialogState = {
+  targetType: 'family' | 'variant'
+  targetId: string
+  targetName: string
+}
+
+export type ReviewVisibilityFilter = 'ALL' | 'PENDING_REVIEW' | 'REJECTED'
+
+// ---- Constants ----
+
+export const ASSET_CENTER_GIZMO_AXIS_COLORS = {
+  X: '#8f625d',
+  Y: '#5f766e',
+  Z: '#5f6d82',
+} satisfies Record<'X' | 'Y' | 'Z', string>
+
+export const UV_PROJECTION_AXIS_OPTIONS = [
+  { value: '', label: '自动' },
+  { value: 'x', label: 'X 轴' },
+  { value: 'y', label: 'Y 轴' },
+  { value: 'z', label: 'Z 轴' },
+] satisfies Array<{ value: '' | AssetVariantUvProjectionAxis; label: string }>
+
+export const VARIANT_SAVE_PROGRESS_STEPS = [
+  { step: 'validating', label: '校验提交' },
+  { step: 'creating', label: '创建草稿' },
+  { step: 'thumbnail', label: '生成预览' },
+  { step: 'similarity', label: '相似检测' },
+  { step: 'syncing', label: '同步界面' },
+  { step: 'completed', label: '完成' },
+] satisfies Array<{
+  step: AssetOperationProgressDTO['step']
+  label: string
+}>
+
+export const ASSET_CENTER_SELECTED_SERIES_STORAGE_KEY = 'asset-center:selected-series-id'
+
+export const ASSET_REVIEW_ROLES = new Set([
+  'SUPER_ADMIN',
+  'ADMIN',
+  'SUPERVISOR',
+  'SUPERVISOR',
+])
+
+// ---- CSS class constants ----
+
+export const compactRowActionClassName =
+  'inline-flex h-6 items-center rounded-[4px] px-1.5 text-[10px] font-apple-bold text-[#687477] transition hover:bg-black/[0.045] hover:text-[#263033] disabled:cursor-not-allowed disabled:opacity-45'
+
+export const compactRowPrimaryActionClassName =
+  'inline-flex h-6 items-center rounded-[4px] bg-[#edf1f1] px-1.5 text-[10px] font-apple-bold text-[#101719] transition hover:bg-[#e3e9e9] disabled:cursor-not-allowed disabled:opacity-45'
+
+export const compactRowDangerActionClassName =
+  'inline-flex h-6 items-center rounded-[4px] px-1.5 text-[10px] font-apple-bold text-red-600 transition hover:bg-red-500/10 disabled:cursor-not-allowed disabled:opacity-45'
+
+export const compactRowNeutralStatusClassName =
+  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#eef2f2] px-1.5 text-[10px] font-apple-bold text-[#687477]'
+
+export const compactRowSuccessStatusClassName =
+  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#e8eeee] px-1.5 text-[10px] font-apple-bold text-[#3f4a4d]'
+
+export const compactRowWarningStatusClassName =
+  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-[#f0eeee] px-1.5 text-[10px] font-apple-bold text-[#6a6260]'
+
+export const compactRowDangerStatusClassName =
+  'inline-flex h-5 shrink-0 items-center rounded-[3px] bg-red-500/[0.08] px-1.5 text-[10px] font-apple-bold text-red-600'
+
+export const compactRowIconActionClassName =
+  'inline-flex h-6 w-6 items-center justify-center rounded-[4px] text-[#7a878a] transition hover:bg-black/[0.045] hover:text-[#263033]'
+
+export const variantInlineCreateButtonClassName =
+  'flex h-9 min-w-0 items-center justify-center gap-2 rounded-[5px] border border-black/[0.08] bg-white px-3 text-[11px] font-black text-[#263033] shadow-[0_1px_2px_rgba(16,23,25,0.04)] transition hover:border-black/[0.14] hover:bg-[#f8faf9] hover:text-[#101719] focus-visible:ring-1 focus-visible:ring-[#2d3335]/15'
+
+export const variantInlineImportButtonClassName =
+  'flex h-9 min-w-0 items-center justify-center gap-2 rounded-[5px] border border-black/[0.08] bg-white px-3 text-[11px] font-black text-[#263033] shadow-[0_1px_2px_rgba(16,23,25,0.04)] transition hover:border-black/[0.14] hover:bg-[#f8faf9] hover:text-[#101719] focus-visible:ring-1 focus-visible:ring-[#2d3335]/15'
diff --git a/furniture-3d-system/src/app/asset-center/asset-center-utils.ts b/furniture-3d-system/src/app/asset-center/asset-center-utils.ts
new file mode 100644
index 00000000..28417cf3
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/asset-center-utils.ts
@@ -0,0 +1,615 @@
+import type { HolePanelBounds } from '@/components/3d/HoleOverlay2D'
+import type { HoleData as HoleOverlayData } from '@/components/3d/HoleViewer'
+import type {
+  AssetCadImportResult,
+  AssetFamilyDTO,
+  AssetSeriesDTO,
+  AssetVariantDTO,
+  SimilarAssetVariantCandidateDTO,
+} from '@/server/services'
+import type {
+  AssetVariantUvSurfaceConfig,
+} from '@/lib/asset-variant-render-config'
+import { getLevel1FromFamily } from '@/lib/packaging-materials/catalog'
+import {
+  compactRowNeutralStatusClassName,
+  compactRowSuccessStatusClassName,
+  compactRowWarningStatusClassName,
+  compactRowDangerStatusClassName,
+  ASSET_REVIEW_ROLES,
+  type AssetTypeFilter,
+  type CadImportFieldErrors,
+  type CadImportForm,
+  type ImportableAssetType,
+  type PreviewNodeOffsetMap,
+  type PreviewNodeRotationMap,
+  type PreviewNodeTransformState,
+  type VariantUvEditorFormState,
+  type Vector3Tuple,
+  type ReviewVisibilityFilter,
+} from './asset-center-types'
+
+// ---- 通用工具 ----
+
+export function sortByName<T extends { name: string }>(items: T[]): T[] {
+  return [...items].sort((left, right) => left.name.localeCompare(right.name, 'zh-CN'))
+}
+
+export function createAssetOperationId(prefix: string): string {
+  const cryptoApi = globalThis.crypto
+  if (typeof cryptoApi?.randomUUID === 'function') {
+    return `${prefix}-${cryptoApi.randomUUID()}`
+  }
+  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`
+}
+
+export function isObjectRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value)
+}
+
+export function readRecordArray(value: unknown): Record<string, unknown>[] {
+  return Array.isArray(value)
+    ? value.filter((item): item is Record<string, unknown> => isObjectRecord(item))
+    : []
+}
+
+export function readStringValue(value: unknown): string | null {
+  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null
+}
+
+export function readNumberValue(value: unknown): number | null {
+  return typeof value === 'number' && Number.isFinite(value) ? value : null
+}
+
+export function readVector3Tuple(value: unknown): Vector3Tuple | null {
+  if (Array.isArray(value) && value.length >= 3) {
+    const x = readNumberValue(value[0])
+    const y = readNumberValue(value[1])
+    const z = readNumberValue(value[2])
+    return x !== null && y !== null && z !== null ? [x, y, z] : null
+  }
+
+  if (isObjectRecord(value)) {
+    const x = readNumberValue(value.x)
+    const y = readNumberValue(value.y)
+    const z = readNumberValue(value.z)
+    return x !== null && y !== null && z !== null ? [x, y, z] : null
+  }
+
+  return null
+}
+
+export function toNumberRecord(values: Record<string, string>): Record<string, number> {
+  const result: Record<string, number> = {}
+  for (const [key, value] of Object.entries(values)) {
+    const parsed = Number(value)
+    if (Number.isFinite(parsed) && parsed > 0) {
+      result[key] = parsed
+    }
+  }
+  return result
+}
+
+export function toOptionalNumber(value: string): number | null {
+  if (value.trim().length === 0) {
+    return null
+  }
+  const parsed = Number(value)
+  return Number.isFinite(parsed) ? parsed : null
+}
+
+// ---- UV 编辑器 ----
+
+export function formatUvNumber(value: number | null | undefined) {
+  return typeof value === 'number' && Number.isFinite(value) ? String(value) : ''
+}
+
+export function formatUvRotationDegrees(value: number | null | undefined) {
+  if (typeof value !== 'number' || !Number.isFinite(value)) {
+    return ''
+  }
+  const degrees = value * 180 / Math.PI
+  return Number.isInteger(degrees) ? String(degrees) : String(Number(degrees.toFixed(2)))
+}
+
+export function createVariantUvEditorFormState(
+  config: AssetVariantUvSurfaceConfig | null | undefined,
+): VariantUvEditorFormState {
+  return {
+    textureRepeat: formatUvNumber(config?.textureRepeat),
+    textureRepeatU: formatUvNumber(config?.textureRepeatU),
+    textureRepeatV: formatUvNumber(config?.textureRepeatV),
+    textureRotation: formatUvRotationDegrees(config?.textureRotation),
+    textureSizeMm: formatUvNumber(config?.textureSizeMm),
+    textureProjectionAxis: config?.textureProjectionAxis ?? '',
+  }
+}
+
+export function parseVariantUvEditorFormState(
+  state: VariantUvEditorFormState,
+): AssetVariantUvSurfaceConfig | null {
+  const parseField = (value: string) => {
+    const normalized = value.trim()
+    if (!normalized) {
+      return undefined
+    }
+
+    const parsed = Number(normalized)
+    return Number.isFinite(parsed) ? parsed : undefined
+  }
+
+  const textureRepeat = parseField(state.textureRepeat)
+  const textureRepeatU = parseField(state.textureRepeatU)
+  const textureRepeatV = parseField(state.textureRepeatV)
+  const textureRotationDegrees = parseField(state.textureRotation)
+  const textureRotation =
+    textureRotationDegrees === undefined ? undefined : textureRotationDegrees * Math.PI / 180
+  const textureSizeMm = parseField(state.textureSizeMm)
+  const textureProjectionAxis =
+    state.textureProjectionAxis === 'x' ||
+    state.textureProjectionAxis === 'y' ||
+    state.textureProjectionAxis === 'z'
+      ? state.textureProjectionAxis
+      : undefined
+
+  if (
+    textureRepeat === undefined &&
+    textureRepeatU === undefined &&
+    textureRepeatV === undefined &&
+    textureRotation === undefined &&
+    textureSizeMm === undefined &&
+    textureProjectionAxis === undefined
+  ) {
+    return null
+  }
+
+  return {
+    ...(textureRepeat !== undefined ? { textureRepeat } : {}),
+    ...(textureRepeatU !== undefined ? { textureRepeatU } : {}),
+    ...(textureRepeatV !== undefined ? { textureRepeatV } : {}),
+    ...(textureRotation !== undefined ? { textureRotation } : {}),
+    ...(textureSizeMm !== undefined ? { textureSizeMm } : {}),
+    ...(textureProjectionAxis !== undefined ? { textureProjectionAxis } : {}),
+  }
+}
+
+// ---- 键盘快捷键 ----
+
+export function isEditableElement(target: EventTarget | null) {
+  if (!(target instanceof HTMLElement)) {
+    return false
+  }
+
+  const tagName = target.tagName
+  return (
+    tagName === 'INPUT' ||
+    tagName === 'TEXTAREA' ||
+    tagName === 'SELECT' ||
+    target.isContentEditable
+  )
+}
+
+export function matchesUndoShortcut(event: KeyboardEvent) {
+  const hasCommandKey = event.ctrlKey || event.metaKey
+  if (!hasCommandKey || event.altKey || event.shiftKey) {
+    return false
+  }
+
+  const code = event.code.toLowerCase()
+  const key = event.key.toLowerCase()
+  return code === 'keyz' || key === 'z'
+}
+
+export function matchesRedoShortcut(event: KeyboardEvent) {
+  const hasCommandKey = event.ctrlKey || event.metaKey
+  if (!hasCommandKey || event.altKey) {
+    return false
+  }
+
+  const code = event.code.toLowerCase()
+  const key = event.key.toLowerCase()
+  return (
+    (event.shiftKey && (code === 'keyz' || key === 'z')) ||
+    (!event.shiftKey && (code === 'keyy' || key === 'y'))
+  )
+}
+
+// ---- 预览节点变换 ----
+
+export function clonePreviewNodeOffsetMap(source: PreviewNodeOffsetMap): PreviewNodeOffsetMap {
+  return Object.fromEntries(
+    Object.entries(source).map(([nodeName, offset]) => [nodeName, [...offset] as [number, number, number]]),
+  )
+}
+
+export function clonePreviewNodeRotationMap(source: PreviewNodeRotationMap): PreviewNodeRotationMap {
+  return Object.fromEntries(
+    Object.entries(source).map(([nodeName, rotation]) => [
+      nodeName,
+      [...rotation] as [number, number, number, number],
+    ]),
+  )
+}
+
+export function arePreviewNodeOffsetMapsEqual(left: PreviewNodeOffsetMap, right: PreviewNodeOffsetMap) {
+  const leftEntries = Object.entries(left)
+  const rightEntries = Object.entries(right)
+
+  if (leftEntries.length !== rightEntries.length) {
+    return false
+  }
+
+  return leftEntries.every(([nodeName, offset]) => {
+    const target = right[nodeName]
+    return (
+      Boolean(target) &&
+      target[0] === offset[0] &&
+      target[1] === offset[1] &&
+      target[2] === offset[2]
+    )
+  })
+}
+
+export function arePreviewNodeRotationMapsEqual(left: PreviewNodeRotationMap, right: PreviewNodeRotationMap) {
+  const leftEntries = Object.entries(left)
+  const rightEntries = Object.entries(right)
+
+  if (leftEntries.length !== rightEntries.length) {
+    return false
+  }
+
+  return leftEntries.every(([nodeName, rotation]) => {
+    const target = right[nodeName]
+    return (
+      Boolean(target) &&
+      target[0] === rotation[0] &&
+      target[1] === rotation[1] &&
+      target[2] === rotation[2] &&
+      target[3] === rotation[3]
+    )
+  })
+}
+
+export function clonePreviewNodeTransformState(source: PreviewNodeTransformState): PreviewNodeTransformState {
+  return {
+    offsets: clonePreviewNodeOffsetMap(source.offsets),
+    rotations: clonePreviewNodeRotationMap(source.rotations),
+  }
+}
+
+export function arePreviewNodeTransformStatesEqual(
+  left: PreviewNodeTransformState,
+  right: PreviewNodeTransformState,
+) {
+  return (
+    arePreviewNodeOffsetMapsEqual(left.offsets, right.offsets) &&
+    arePreviewNodeRotationMapsEqual(left.rotations, right.rotations)
+  )
+}
+
+// ---- 状态标签 ----
+
+export function getStatusLabel(status: string) {
+  if (status === 'AVAILABLE') return '可用'
+  if (status === 'DISABLED') return '停用'
+  if (status === 'PENDING_REVIEW') return '待审核'
+  if (status === 'REJECTED') return '已驳回'
+  return '草稿'
+}
+
+export function shouldShowCompactStatus(status: string) {
+  return status !== 'DRAFT'
+}
+
+export function getCompactStatusClassName(status: string) {
+  if (status === 'AVAILABLE') {
+    return compactRowSuccessStatusClassName
+  }
+  if (status === 'REJECTED') {
+    return compactRowDangerStatusClassName
+  }
+  if (status === 'DISABLED') {
+    return compactRowWarningStatusClassName
+  }
+  return compactRowNeutralStatusClassName
+}
+
+// ---- 相似性 ----
+
+export function getSimilarityConfidenceTone(confidence: SimilarAssetVariantCandidateDTO['confidence']) {
+  if (confidence === 'HIGH') return 'warning'
+  if (confidence === 'MEDIUM') return 'info'
+  return 'default'
+}
+
+export function getSimilarityConfidenceLabel(confidence: SimilarAssetVariantCandidateDTO['confidence']) {
+  if (confidence === 'HIGH') return '高相似'
+  if (confidence === 'MEDIUM') return '中相似'
+  return '低相似'
+}
+
+export function normalizeSimilarCandidates(
+  candidates: SimilarAssetVariantCandidateDTO[] | null | undefined,
+): SimilarAssetVariantCandidateDTO[] {
+  return Array.isArray(candidates) ? candidates : []
+}
+
+export function normalizeCadImportResult(result: AssetCadImportResult): AssetCadImportResult {
+  return {
+    ...result,
+    warnings: Array.isArray(result.warnings) ? result.warnings : [],
+    similarCandidates: normalizeSimilarCandidates(result.similarCandidates),
+    similarityNotice: result.similarityNotice ?? null,
+  }
+}
+
+// ---- CAD 导入 ----
+
+export function readPanelBounds(value: unknown): HolePanelBounds | null {
+  if (!isObjectRecord(value)) return null
+  const min = readVector3Tuple(value.min)
+  const max = readVector3Tuple(value.max)
+  return min && max ? { min, max } : null
+}
+
+export function getBoundsSize(bounds: HolePanelBounds): Vector3Tuple {
+  return [
+    Math.abs(bounds.max[0] - bounds.min[0]),
+    Math.abs(bounds.max[1] - bounds.min[1]),
+    Math.abs(bounds.max[2] - bounds.min[2]),
+  ]
+}
+
+export function getMaxRelativeDimensionDiff(left: Vector3Tuple, right: Vector3Tuple): number {
+  return Math.max(
+    ...left.map((value, index) => {
+      const baseline = Math.max(Math.abs(right[index]), 1)
+      return Math.abs(1 - Math.abs(value) / baseline)
+    }),
+  )
+}
+
+export function sortDimensionsForComparison(size: Vector3Tuple): Vector3Tuple {
+  return [...size].map((value) => Math.abs(value)).sort((left, right) => right - left) as Vector3Tuple
+}
+
+export function shouldRemapCadPanelBounds(bounds: HolePanelBounds, panelSize: Vector3Tuple | null): boolean {
+  if (!panelSize || Math.max(...panelSize.map((value) => Math.abs(value))) <= 0) {
+    return false
+  }
+
+  const boundsSize = getBoundsSize(bounds)
+  const sortedBoundsSize = sortDimensionsForComparison(boundsSize)
+  const sortedPanelSize = sortDimensionsForComparison(panelSize)
+  return getMaxRelativeDimensionDiff(sortedBoundsSize, sortedPanelSize) > 0.25
+}
+
+export function buildAssetVariantHoleOverlayState(variant: AssetVariantDTO | null): {
+  holes: HoleOverlayData[]
+  activeHolePanelIds: string[]
+  panelNodeNameByPanelId: Record<string, string>
+  panelLabelByPanelId: Record<string, string>
+  panelBoundsByPanelId: Record<string, HolePanelBounds>
+} {
+  if (!variant || variant.assetType === 'HARDWARE') {
+    return {
+      holes: [],
+      activeHolePanelIds: [],
+      panelNodeNameByPanelId: {},
+      panelLabelByPanelId: {},
+      panelBoundsByPanelId: {},
+    }
+  }
+
+  const assemblyBasis = isObjectRecord(variant.assemblyBasis) ? variant.assemblyBasis : null
+  const businessData = isObjectRecord(variant.businessData) ? variant.businessData : null
+  const cadData = isObjectRecord(businessData?.cadData) ? businessData.cadData : null
+  const holeGroups = readRecordArray(assemblyBasis?.holeGroups ?? cadData?.holeGroups)
+  const panelNodeNameByPanelId: Record<string, string> = {}
+  const panelLabelByPanelId: Record<string, string> = {}
+  const panelBoundsByPanelId: Record<string, HolePanelBounds> = {}
+
+  readRecordArray(cadData?.panels).forEach((panel, index) => {
+    const panelId = readStringValue(panel.id) ?? readStringValue(panel.panelId)
+    if (!panelId) return
+
+    const nodeName =
+      readStringValue(panel.gltfNodeName) ??
+      readStringValue(panel.nodeName) ??
+      readStringValue(panel.name) ??
+      panelId
+    panelNodeNameByPanelId[panelId] = nodeName
+    panelLabelByPanelId[panelId] =
+      readStringValue(panel.name) ??
+      readStringValue(panel.label) ??
+      readStringValue(panel.panelType) ??
+      `板件 ${index + 1}`
+
+    const bounds = readPanelBounds(panel.boundingBox)
+    if (bounds) {
+      const panelSize = readVector3Tuple(panel.size)
+      const needsRemap = shouldRemapCadPanelBounds(bounds, panelSize)
+      panelBoundsByPanelId[panelId] = needsRemap
+        ? { ...bounds, remapToModelBounds: true }
+        : bounds
+    }
+  })
+
+  const groupPanelIdById = new Map<string, string>()
+  holeGroups.forEach((group) => {
+    const groupId = readStringValue(group.id)
+    const panelId = readStringValue(group.panelId)
+    if (groupId && panelId) {
+      groupPanelIdById.set(groupId, panelId)
+    }
+  })
+
+  const rawHoles = readRecordArray(assemblyBasis?.holes).length > 0
+    ? readRecordArray(assemblyBasis?.holes)
+    : readRecordArray(cadData?.holes)
+  const activeHolePanelIds = new Set<string>()
+  const holes = rawHoles
+    .map<HoleOverlayData | null>((hole, index) => {
+      const id = readStringValue(hole.id) ?? `asset-hole-${index + 1}`
+      const groupId = readStringValue(hole.groupId) ?? readStringValue(hole.holeGroupId)
+      const panelId =
+        readStringValue(hole.panelId) ??
+        (groupId ? groupPanelIdById.get(groupId) ?? null : null)
+      const position = readVector3Tuple(hole.position)
+      if (!panelId || !position) return null
+
+      const normal = readVector3Tuple(hole.normal) ?? [0, 0, 1]
+      const diameter = readNumberValue(hole.diameter) ?? 0
+      const depth = readNumberValue(hole.depth) ?? 0
+      const holeType =
+        readStringValue(hole.holeType) ??
+        readStringValue(hole.type) ??
+        readStringValue(hole.inferredUsage) ??
+        null
+
+      activeHolePanelIds.add(panelId)
+      if (!panelNodeNameByPanelId[panelId]) {
+        panelNodeNameByPanelId[panelId] = panelId
+      }
+      if (!panelLabelByPanelId[panelId]) {
+        panelLabelByPanelId[panelId] = panelId.replace(/^cad_/i, '')
+      }
+
+      return {
+        id,
+        panelId,
+        position,
+        diameter,
+        depth,
+        normal,
+        holeType,
+        confidence: readNumberValue(hole.confidence) ?? 1,
+        ...(groupId ? { groupId } : {}),
+      }
+    })
+    .filter((item): item is HoleOverlayData => item !== null)
+
+  return {
+    holes,
+    activeHolePanelIds: Array.from(activeHolePanelIds),
+    panelNodeNameByPanelId,
+    panelLabelByPanelId,
+    panelBoundsByPanelId,
+  }
+}
+
+// ---- 系列与分类筛选 ----
+
+export function isPackagingMaterialLibraryFamily(family: AssetFamilyDTO): boolean {
+  return family.type === 'PACKAGING' && getLevel1FromFamily(family.metadata ?? null) !== null
+}
+
+export function getVisibleFamiliesForTab(
+  families: AssetFamilyDTO[],
+  activeTab: AssetTypeFilter,
+): AssetFamilyDTO[] {
+  return families.filter((family) => {
+    if (family.type !== activeTab) return false
+    if (activeTab !== 'PACKAGING') return true
+    return !isPackagingMaterialLibraryFamily(family)
+  })
+}
+
+export function familyBelongsToSeries(family: AssetFamilyDTO, series: AssetSeriesDTO | null): boolean {
+  if (!series) return false
+  if (family.assetSeriesId) {
+    return family.assetSeriesId === series.id
+  }
+  const compatibleSeries = family.compatibleSeries ?? []
+  return compatibleSeries.some((item) => item.id === series.id || item.code === series.code)
+}
+
+export function familyVisibleInSeriesContext(family: AssetFamilyDTO, series: AssetSeriesDTO | null): boolean {
+  if (isPackagingMaterialLibraryFamily(family)) return false
+  if (family.type === 'HARDWARE') return true
+  return familyBelongsToSeries(family, series)
+}
+
+// ---- 资产族/规格款辅助 ----
+
+export function buildVariantIdentityPrefix(familyCode: string): string {
+  const normalizedCode = familyCode.trim()
+  if (!normalizedCode) return ''
+  return normalizedCode.endsWith('-') ? normalizedCode : `${normalizedCode}-`
+}
+
+export function isImportableAssetType(type: AssetFamilyDTO['type']): type is ImportableAssetType {
+  return type === 'BOARD' || type === 'COMPONENT' || type === 'HARDWARE'
+}
+
+export function splitConnectionRoles(value: string): string[] {
+  return value
+    .split(/[，,]/)
+    .map((item) => item.trim())
+    .filter(Boolean)
+}
+
+export function buildCadImportFieldErrors(params: {
+  form: CadImportForm
+  assetSeriesId?: string | null
+}): CadImportFieldErrors {
+  const { form, assetSeriesId } = params
+  const errors: CadImportFieldErrors = {}
+
+  if (form.familyMode === 'existing') {
+    if (!form.familyId) {
+      errors.familyId = '请选择目标资产族'
+    }
+  } else {
+    if (!assetSeriesId && !form.familyCode.trim()) {
+      errors.familyCode = '请填写资产族编码'
+    }
+    if (!form.familyName.trim()) {
+      errors.familyName = '请填写资产族名称'
+    }
+  }
+
+  if (!form.variantName.trim()) {
+    errors.variantName = '请填写规格款名称'
+  }
+  if (form.assetType === 'BOARD') {
+    if (!form.substrateId) {
+      errors.substrateId = '板材必须选择基材'
+    }
+  }
+
+  if (!form.file) {
+    errors.file = '请上传 CAD 导出的 ZIP 文件'
+  }
+
+  return errors
+}
+
+export function buildCadImportChecklist(assetType: ImportableAssetType): string[] {
+  const notes = [
+    '仅支持 CAD 插件 v2.2.14 及以上导出的 ZIP。',
+    '压缩包内需包含模型文件和 hardware.json，根级必须保留 holes 数组；没有孔位也要传 holes: []。',
+  ]
+
+  if (assetType === 'BOARD') {
+    notes.push('如果 ZIP 里有多块板件，当前会按第一块板件尺寸导入规格款。')
+  }
+
+  if (assetType === 'COMPONENT') {
+    notes.push('组件尺寸优先按模型包围盒回填，孔位语义会继续保留给后续自由装配。')
+  }
+
+  if (assetType === 'HARDWARE') {
+    notes.push('五金会优先保留安装基准与规格签名，不走板件孔位归属。')
+  }
+
+  return notes
+}
+
+export function canReviewAssets(role: string): boolean {
+  return ASSET_REVIEW_ROLES.has(role)
+}
+
+export function matchesReviewVisibilityFilter(status: string, filter: ReviewVisibilityFilter) {
+  return filter === 'ALL' || status === filter
+}

From 6e743e991bfa22212c00ff3dc7a4df72b0ef25e0 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 16:49:05 +0800
Subject: [PATCH 03/14] =?UTF-8?q?@=20refactor(asset-center):=20=E6=8F=90?=
 =?UTF-8?q?=E5=8F=96=20CAD=20=E5=AF=BC=E5=85=A5=E5=BC=B9=E7=AA=97=E4=B8=BA?=
 =?UTF-8?q?=E7=8B=AC=E7=AB=8B=E7=BB=84=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- CadImportModal.tsx（306 行）：CAD 导入弹窗独立组件
- AssetCenterClient.tsx 3733→3506 行
@
---
 .../app/asset-center/AssetCenterClient.tsx    | 263 ++-------------
 .../src/app/asset-center/CadImportModal.tsx   | 306 ++++++++++++++++++
 2 files changed, 324 insertions(+), 245 deletions(-)
 create mode 100644 furniture-3d-system/src/app/asset-center/CadImportModal.tsx

diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
index 30b6fb13..05a51206 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
@@ -174,6 +174,7 @@ import { RoleEditorModal } from './RoleEditorModal'
 import { ReviewRejectModal } from './ReviewRejectModal'
 import { VariantEditModal } from './VariantEditModal'
 import { FamilyEditModal } from './FamilyEditModal'
+import { CadImportModal } from './CadImportModal'
 
 // ---- 主组件内的渲染辅助函数 ----
 
@@ -3345,253 +3346,25 @@ export default function AssetCenterClient({
         </ContextMenu>
       )}
 
-      <Modal
+      <CadImportModal
         isOpen={cadImportModalOpen}
         onClose={closeCadImportModal}
-        title={`导入 CAD 规格款 · ${TYPE_TABS.find((tab) => tab.type === cadImportForm.assetType)?.label ?? '资产'}`}
-        size="large"
-        footer={
-          cadImportResult ? (
-            <div className="flex items-center justify-between w-full">
-               <div />
-              <div className="flex items-center gap-2">
-                 <Button variant="plain" size="small" onClick={closeCadImportModal}>完成</Button>
-                 <Button size="small" onClick={prepareNextCadImport}>
-                   <Plus className="h-3.5 w-3.5" />
-                   继续导入
-                 </Button>
-              </div>
-            </div>
-          ) : (
-            <div className="flex items-center justify-end gap-2 w-full">
-              <Button variant="plain" size="small" onClick={closeCadImportModal}>取消</Button>
-              <Button size="small" onClick={handleImportCadAsset} loading={submitting}>
-                <FileUp className="h-3.5 w-3.5 mr-1" />
-                开始导入
-              </Button>
-            </div>
-          )
-        }
-      >
-        <div className="space-y-4">
-          {cadImportResult ? (
-            <div
-              className="rounded-md border px-4 py-4"
-              style={{
-                backgroundColor: 'var(--obs-shell-surface-bg)',
-                borderColor: 'var(--obs-shell-border)',
-              }}
-            >
-              <div className="flex items-start justify-between gap-3">
-                <div>
-                  <p className="text-sm font-apple-semibold text-apple-label-primary">导入完成</p>
-                  <p className="mt-1 text-xs text-apple-label-secondary leading-relaxed">
-                    已创建规格款「{cadImportResult.variant.name}」。
-                  </p>
-                </div>
-                <Badge type="default" variant="subtle" size="small">
-                  已导入
-                </Badge>
-              </div>
-
-              <div className="mt-4 grid gap-3 grid-cols-2 md:grid-cols-4">
-                <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
-                  <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">资产族</p>
-                  <p className="mt-1 text-xs font-apple-medium text-apple-label-primary truncate" title={cadImportResult.family.name}>{cadImportResult.family.name}</p>
-                </div>
-                <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
-                  <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">规格款</p>
-                  <p className="mt-1 text-xs font-apple-medium text-apple-label-primary truncate" title={cadImportResult.variant.name}>{cadImportResult.variant.name}</p>
-                </div>
-                <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
-                  <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">板件</p>
-                  <p className="mt-1 text-xs font-apple-medium text-apple-label-primary">{cadImportResult.summary.panelCount} 块</p>
-                </div>
-                <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
-                  <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">孔位</p>
-                  <p className="mt-1 text-xs font-apple-medium text-apple-label-primary">{cadImportResult.summary.holeCount} 个</p>
-                </div>
-              </div>
-
-              {cadImportResult.warnings.length > 0 ? (
-                <div
-                  className="mt-4 rounded-md border p-3"
-                  style={{
-                    backgroundColor: 'var(--obs-shell-surface-bg)',
-                    borderColor: 'var(--obs-shell-border)',
-                  }}
-                >
-                  <div className="flex items-center gap-1.5 mb-2">
-                     <AlertTriangle className="h-3.5 w-3.5 text-[var(--obs-shell-muted)]" />
-                     <p className="text-[11px] font-apple-semibold text-[var(--obs-shell-title)]">导入提醒</p>
-                  </div>
-                  <div className="space-y-1 text-xs leading-relaxed text-apple-label-secondary ml-5">
-                    {cadImportResult.warnings.map((warning, index) => (
-                      <p key={`${warning}-${index}`}>{index + 1}. {warning}</p>
-                    ))}
-                  </div>
-                </div>
-              ) : null}
-
-              {cadImportResult.similarCandidates.length > 0 ? (
-                <div className="mt-4">
-                  {renderSimilarCandidatesBlock({
-                    sourceLabel: '本次导入',
-                    similarCandidates: cadImportResult.similarCandidates,
-                    similarityNotice: cadImportResult.similarityNotice,
-                  })}
-                </div>
-              ) : null}
-            </div>
-          ) : null}
-
-          {!cadImportResult && selectedCadImportFamily ? (
-            <div
-              data-testid="cad-import-target-family"
-              className="rounded-md border px-4 py-3"
-              style={{
-                backgroundColor: 'var(--obs-shell-surface-bg)',
-                borderColor: 'var(--obs-shell-border)',
-              }}
-            >
-              <div className="flex items-start justify-between gap-3">
-                <div className="min-w-0">
-                  <p className="mb-0.5 text-[10px] uppercase tracking-[0.16em] text-[var(--obs-shell-muted)]">目标资产族</p>
-                  <div className="flex items-center gap-2">
-                    <p className="truncate text-sm font-semibold text-[var(--obs-shell-title)]">
-                      {selectedCadImportFamily.name}
-                    </p>
-                    <span className="rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-control-bg)] px-1.5 py-0.5 font-mono text-[10px] text-[var(--obs-shell-muted)]">
-                      {selectedCadImportFamily.code}
-                    </span>
-                  </div>
-                </div>
-              </div>
-            </div>
-          ) : null}
-
-          {!cadImportResult && !selectedCadImportFamily && (
-             <div
-               className="rounded-md border px-4 py-3 text-xs text-[var(--obs-shell-muted)]"
-               style={{
-                 backgroundColor: 'var(--obs-shell-surface-bg)',
-                 borderColor: 'var(--obs-shell-border)',
-               }}
-             >
-               请先在右侧选择目标资产族，再从资产族内发起 CAD 导入。
-             </div>
-          )}
-
-          {!cadImportResult && (
-            <div className="space-y-4">
-               <div className="grid gap-3 grid-cols-2">
-                 <div
-                   className="rounded-md border px-3 py-2"
-                   style={{
-                     backgroundColor: 'var(--obs-shell-surface-bg)',
-                     borderColor: 'var(--obs-shell-border)',
-                   }}
-                 >
-                   <p className="mb-1 text-[11px] font-semibold text-[var(--obs-shell-muted)]">
-                     规格款编码
-                   </p>
-                   <p className="text-sm font-medium text-[var(--obs-shell-title)]">
-                     系统自动生成
-                   </p>
-                 </div>
-                 <Input
-                   label="名称"
-                   required
-                   value={cadImportForm.variantName}
-                   onChange={(e) => setCadImportForm((current) => ({ ...current, variantName: e.target.value }))}
-                 placeholder="例如 桌面板 1200 / 方管桌腿 / 十字连接件"
-                   errorText={cadImportSubmitAttempted ? cadImportFieldErrors.variantName : undefined}
-                 />
-               </div>
-
-               <div className="grid gap-3 grid-cols-2">
-                 <Input
-                   label="尺寸标签"
-                   value={cadImportForm.sizeLabel}
-                   onChange={(e) => setCadImportForm((current) => ({ ...current, sizeLabel: e.target.value }))}
-                   placeholder="例如 1200x600，不填则自动生成"
-                 />
-                 <Input
-                   label="损耗系数"
-                   type="number"
-                   inputMode="decimal"
-                   step="any"
-                   value={cadImportForm.lossFactor}
-                   onChange={(e) => setCadImportForm((current) => ({ ...current, lossFactor: e.target.value }))}
-                   placeholder="例如 1.15"
-                 />
-               </div>
-
-               {cadImportForm.assetType === 'BOARD' ? (
-                 <div className="grid gap-3 grid-cols-2">
-                   <Select
-                     label="基材"
-                     required
-                     searchable
-                     searchPlaceholder="搜索基材名称或编码"
-                     emptyText="没有匹配的基材"
-                     value={cadImportForm.substrateId}
-                     onChange={(e) => setCadImportForm((current) => ({ ...current, substrateId: e.target.value }))}
-                     options={substrates.map((substrate) => ({
-                       value: substrate.id,
-                       label: `${substrate.name} · ${substrate.code}`,
-                     }))}
-                     placeholder="请选择基材"
-                     errorText={cadImportSubmitAttempted ? cadImportFieldErrors.substrateId : undefined}
-                   />
-                 </div>
-               ) : null}
-
-               <div className="space-y-1">
-                 <p className="mb-2 text-[11px] font-semibold text-[var(--obs-shell-muted)]">CAD 模型包</p>
-                 <label
-                   data-testid="cad-import-file-dropzone"
-                   className={cn(
-                     'flex cursor-pointer items-center gap-3 rounded-md border border-dashed bg-[var(--obs-shell-surface-bg)] px-4 py-4 transition hover:border-[var(--obs-shell-action-border)] hover:bg-[var(--obs-shell-hover-bg)]',
-                     cadImportSubmitAttempted && cadImportFieldErrors.file
-                       ? 'border-[var(--obs-shell-danger-border)]'
-                       : 'border-[var(--obs-shell-border)]',
-                   )}
-                 >
-                   <div className="flex h-10 w-10 shrink-0 items-center justify-center rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-control-bg)] text-[var(--obs-shell-icon-text)]">
-                     <FileUp className="h-5 w-5" />
-                   </div>
-                   <div className="min-w-0 flex-1">
-                     <p className={cn("truncate text-sm font-medium", cadImportForm.file ? "text-[var(--obs-shell-title)]" : "text-[var(--obs-shell-muted)]")}>
-                       {cadImportForm.file ? cadImportForm.file.name : '选择 ZIP 格式文件上传'}
-                     </p>
-                   </div>
-                   <input
-                     type="file"
-                     accept=".zip"
-                     className="sr-only"
-                     onChange={(e) => {
-                       void applyCadFileDefaults(e.target.files?.[0] ?? null)
-                     }}
-                   />
-                 </label>
-                 <div className="flex justify-between min-h-[16px] px-1 mt-1">
-                    <div>
-                      {autoInferredFields.size > 0 && !cadImportParsing && (
-                        <p className="text-[11px] font-apple-medium text-[var(--obs-shell-muted)]">
-                          已从 ZIP 自动带出 {autoInferredFields.size} 个字段
-                        </p>
-                      )}
-                    </div>
-                    {cadImportSubmitAttempted && cadImportFieldErrors.file && (
-                      <p className="text-[11px] font-medium text-[var(--obs-shell-danger)]">{cadImportFieldErrors.file}</p>
-                    )}
-                 </div>
-               </div>
-            </div>
-          )}
-        </div>
-      </Modal>
+        form={cadImportForm}
+        onFormChange={setCadImportForm}
+        submitting={submitting}
+        onSubmit={handleImportCadAsset}
+        result={cadImportResult}
+        selectedFamily={selectedCadImportFamily}
+        substrates={substrates}
+        fieldErrors={cadImportFieldErrors}
+        submitAttempted={cadImportSubmitAttempted}
+        parsing={cadImportParsing}
+        autoInferredFields={autoInferredFields}
+        onFileChange={(file) => void applyCadFileDefaults(file)}
+        onPrepareNext={prepareNextCadImport}
+        assetTypeLabel={TYPE_TABS.find((tab) => tab.type === cadImportForm.assetType)?.label ?? '资产'}
+        renderSimilarCandidatesBlock={renderSimilarCandidatesBlock}
+      />
 
       <Modal
         isOpen={!!similarityModalState}
diff --git a/furniture-3d-system/src/app/asset-center/CadImportModal.tsx b/furniture-3d-system/src/app/asset-center/CadImportModal.tsx
new file mode 100644
index 00000000..61d22653
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/CadImportModal.tsx
@@ -0,0 +1,306 @@
+'use client'
+
+import { AlertTriangle, FileUp, Plus } from 'lucide-react'
+import { Badge } from '@/components/ui/Badge'
+import Button from '@/components/ui/Button'
+import Input from '@/components/ui/Input'
+import Modal from '@/components/ui/Modal'
+import Select from '@/components/ui/Select'
+import { cn } from '@/lib/utils'
+import type { AssetCadImportResult, AssetFamilyDTO, AssetVariantDTO, SubstrateDTO } from '@/server/services'
+import type { CadImportFieldErrors, CadImportForm, ImportableAssetType } from './asset-center-types'
+import { buildCadImportChecklist } from './asset-center-utils'
+
+interface CadImportModalProps {
+  isOpen: boolean
+  onClose: () => void
+  form: CadImportForm
+  onFormChange: (updater: (prev: CadImportForm) => CadImportForm) => void
+  submitting: boolean
+  onSubmit: () => void
+  result: AssetCadImportResult | null
+  selectedFamily: AssetFamilyDTO | null
+  substrates: SubstrateDTO[]
+  fieldErrors: CadImportFieldErrors
+  submitAttempted: boolean
+  parsing: boolean
+  autoInferredFields: Set<string>
+  onFileChange: (file: File | null) => void
+  onPrepareNext: () => void
+  assetTypeLabel: string
+  renderSimilarCandidatesBlock: (params: {
+    sourceLabel: string
+    similarCandidates: AssetCadImportResult['similarCandidates']
+    similarityNotice: string | null
+  }) => React.ReactNode
+}
+
+export function CadImportModal({
+  isOpen,
+  onClose,
+  form,
+  onFormChange,
+  submitting,
+  onSubmit,
+  result,
+  selectedFamily,
+  substrates,
+  fieldErrors,
+  submitAttempted,
+  parsing,
+  autoInferredFields,
+  onFileChange,
+  onPrepareNext,
+  assetTypeLabel,
+  renderSimilarCandidatesBlock,
+}: CadImportModalProps) {
+  return (
+    <Modal
+      isOpen={isOpen}
+      onClose={onClose}
+      title={`导入 CAD 规格款 · ${assetTypeLabel}`}
+      size="large"
+      footer={
+        result ? (
+          <div className="flex items-center justify-between w-full">
+            <div />
+            <div className="flex items-center gap-2">
+              <Button variant="plain" size="small" onClick={onClose}>完成</Button>
+              <Button size="small" onClick={onPrepareNext}>
+                <Plus className="h-3.5 w-3.5" />
+                继续导入
+              </Button>
+            </div>
+          </div>
+        ) : (
+          <div className="flex items-center justify-end gap-2 w-full">
+            <Button variant="plain" size="small" onClick={onClose}>取消</Button>
+            <Button size="small" onClick={onSubmit} loading={submitting}>
+              <FileUp className="h-3.5 w-3.5 mr-1" />
+              开始导入
+            </Button>
+          </div>
+        )
+      }
+    >
+      <div className="space-y-4">
+        {result ? (
+          <div
+            className="rounded-md border px-4 py-4"
+            style={{
+              backgroundColor: 'var(--obs-shell-surface-bg)',
+              borderColor: 'var(--obs-shell-border)',
+            }}
+          >
+            <div className="flex items-start justify-between gap-3">
+              <div>
+                <p className="text-sm font-apple-semibold text-apple-label-primary">导入完成</p>
+                <p className="mt-1 text-xs text-apple-label-secondary leading-relaxed">
+                  已创建规格款「{result.variant.name}」。
+                </p>
+              </div>
+              <Badge type="default" variant="subtle" size="small">
+                已导入
+              </Badge>
+            </div>
+
+            <div className="mt-4 grid gap-3 grid-cols-2 md:grid-cols-4">
+              <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
+                <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">资产族</p>
+                <p className="mt-1 text-xs font-apple-medium text-apple-label-primary truncate" title={result.family.name}>{result.family.name}</p>
+              </div>
+              <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
+                <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">规格款</p>
+                <p className="mt-1 text-xs font-apple-medium text-apple-label-primary truncate" title={result.variant.name}>{result.variant.name}</p>
+              </div>
+              <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
+                <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">板件</p>
+                <p className="mt-1 text-xs font-apple-medium text-apple-label-primary">{result.summary.panelCount} 块</p>
+              </div>
+              <div className="rounded-md bg-[var(--obs-shell-surface-bg)] px-3 py-2 border border-[var(--obs-shell-border)]">
+                <p className="text-[10px] uppercase tracking-[0.16em] text-apple-label-tertiary">孔位</p>
+                <p className="mt-1 text-xs font-apple-medium text-apple-label-primary">{result.summary.holeCount} 个</p>
+              </div>
+            </div>
+
+            {result.warnings.length > 0 ? (
+              <div
+                className="mt-4 rounded-md border p-3"
+                style={{
+                  backgroundColor: 'var(--obs-shell-surface-bg)',
+                  borderColor: 'var(--obs-shell-border)',
+                }}
+              >
+                <div className="flex items-center gap-1.5 mb-2">
+                  <AlertTriangle className="h-3.5 w-3.5 text-[var(--obs-shell-muted)]" />
+                  <p className="text-[11px] font-apple-semibold text-[var(--obs-shell-title)]">导入提醒</p>
+                </div>
+                <div className="space-y-1 text-xs leading-relaxed text-apple-label-secondary ml-5">
+                  {result.warnings.map((warning, index) => (
+                    <p key={`${warning}-${index}`}>{index + 1}. {warning}</p>
+                  ))}
+                </div>
+              </div>
+            ) : null}
+
+            {result.similarCandidates.length > 0 ? (
+              <div className="mt-4">
+                {renderSimilarCandidatesBlock({
+                  sourceLabel: '本次导入',
+                  similarCandidates: result.similarCandidates,
+                  similarityNotice: result.similarityNotice,
+                })}
+              </div>
+            ) : null}
+          </div>
+        ) : null}
+
+        {!result && selectedFamily ? (
+          <div
+            data-testid="cad-import-target-family"
+            className="rounded-md border px-4 py-3"
+            style={{
+              backgroundColor: 'var(--obs-shell-surface-bg)',
+              borderColor: 'var(--obs-shell-border)',
+            }}
+          >
+            <div className="flex items-start justify-between gap-3">
+              <div className="min-w-0">
+                <p className="mb-0.5 text-[10px] uppercase tracking-[0.16em] text-[var(--obs-shell-muted)]">目标资产族</p>
+                <div className="flex items-center gap-2">
+                  <p className="truncate text-sm font-semibold text-[var(--obs-shell-title)]">
+                    {selectedFamily.name}
+                  </p>
+                  <span className="rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-control-bg)] px-1.5 py-0.5 font-mono text-[10px] text-[var(--obs-shell-muted)]">
+                    {selectedFamily.code}
+                  </span>
+                </div>
+              </div>
+            </div>
+          </div>
+        ) : null}
+
+        {!result && !selectedFamily && (
+          <div
+            className="rounded-md border px-4 py-3 text-xs text-[var(--obs-shell-muted)]"
+            style={{
+              backgroundColor: 'var(--obs-shell-surface-bg)',
+              borderColor: 'var(--obs-shell-border)',
+            }}
+          >
+            请先在右侧选择目标资产族，再从资产族内发起 CAD 导入。
+          </div>
+        )}
+
+        {!result && (
+          <div className="space-y-4">
+            <div className="grid gap-3 grid-cols-2">
+              <div
+                className="rounded-md border px-3 py-2"
+                style={{
+                  backgroundColor: 'var(--obs-shell-surface-bg)',
+                  borderColor: 'var(--obs-shell-border)',
+                }}
+              >
+                <p className="mb-1 text-[11px] font-semibold text-[var(--obs-shell-muted)]">
+                  规格款编码
+                </p>
+                <p className="text-sm font-medium text-[var(--obs-shell-title)]">
+                  系统自动生成
+                </p>
+              </div>
+              <Input
+                label="名称"
+                required
+                value={form.variantName}
+                onChange={(e) => onFormChange((current) => ({ ...current, variantName: e.target.value }))}
+                placeholder="例如 桌面板 1200 / 方管桌腿 / 十字连接件"
+                errorText={submitAttempted ? fieldErrors.variantName : undefined}
+              />
+            </div>
+
+            <div className="grid gap-3 grid-cols-2">
+              <Input
+                label="尺寸标签"
+                value={form.sizeLabel}
+                onChange={(e) => onFormChange((current) => ({ ...current, sizeLabel: e.target.value }))}
+                placeholder="例如 1200x600，不填则自动生成"
+              />
+              <Input
+                label="损耗系数"
+                type="number"
+                inputMode="decimal"
+                step="any"
+                value={form.lossFactor}
+                onChange={(e) => onFormChange((current) => ({ ...current, lossFactor: e.target.value }))}
+                placeholder="例如 1.15"
+              />
+            </div>
+
+            {form.assetType === 'BOARD' ? (
+              <div className="grid gap-3 grid-cols-2">
+                <Select
+                  label="基材"
+                  required
+                  searchable
+                  searchPlaceholder="搜索基材名称或编码"
+                  emptyText="没有匹配的基材"
+                  value={form.substrateId}
+                  onChange={(e) => onFormChange((current) => ({ ...current, substrateId: e.target.value }))}
+                  options={substrates.map((substrate) => ({
+                    value: substrate.id,
+                    label: `${substrate.name} · ${substrate.code}`,
+                  }))}
+                  placeholder="请选择基材"
+                  errorText={submitAttempted ? fieldErrors.substrateId : undefined}
+                />
+              </div>
+            ) : null}
+
+            <div className="space-y-1">
+              <p className="mb-2 text-[11px] font-semibold text-[var(--obs-shell-muted)]">CAD 模型包</p>
+              <label
+                data-testid="cad-import-file-dropzone"
+                className={cn(
+                  'flex cursor-pointer items-center gap-3 rounded-md border border-dashed bg-[var(--obs-shell-surface-bg)] px-4 py-4 transition hover:border-[var(--obs-shell-action-border)] hover:bg-[var(--obs-shell-hover-bg)]',
+                  submitAttempted && fieldErrors.file
+                    ? 'border-[var(--obs-shell-danger-border)]'
+                    : 'border-[var(--obs-shell-border)]',
+                )}
+              >
+                <div className="flex h-10 w-10 shrink-0 items-center justify-center rounded-md border border-[var(--obs-shell-border)] bg-[var(--obs-shell-control-bg)] text-[var(--obs-shell-icon-text)]">
+                  <FileUp className="h-5 w-5" />
+                </div>
+                <div className="min-w-0 flex-1">
+                  <p className={cn("truncate text-sm font-medium", form.file ? "text-[var(--obs-shell-title)]" : "text-[var(--obs-shell-muted)]")}>
+                    {form.file ? form.file.name : '选择 ZIP 格式文件上传'}
+                  </p>
+                </div>
+                <input
+                  type="file"
+                  accept=".zip"
+                  className="sr-only"
+                  onChange={(e) => {
+                    onFileChange(e.target.files?.[0] ?? null)
+                  }}
+                />
+              </label>
+              <div className="flex justify-between min-h-[16px] px-1 mt-1">
+                <div>
+                  {autoInferredFields.size > 0 && !parsing && (
+                    <p className="text-[11px] font-apple-medium text-[var(--obs-shell-muted)]">
+                      已从 ZIP 自动带出 {autoInferredFields.size} 个字段
+                    </p>
+                  )}
+                </div>
+                {submitAttempted && fieldErrors.file && (
+                  <p className="text-[11px] font-medium text-[var(--obs-shell-danger)]">{fieldErrors.file}</p>
+                )}
+              </div>
+            </div>
+          </div>
+        )}
+      </div>
+    </Modal>
+  )
+}

From 85d9eb7acc6021c8ee80a14d3946ad8274934c68 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 17:23:59 +0800
Subject: [PATCH 04/14] =?UTF-8?q?@=20refactor(asset-center):=20=E6=8F=90?=
 =?UTF-8?q?=E5=8F=96=E8=B5=84=E4=BA=A7=E6=97=8F=E5=88=97=E8=A1=A8=E4=B8=BA?=
 =?UTF-8?q?=E7=8B=AC=E7=AB=8B=E7=BB=84=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- FamilyListPanel.tsx（332 行）：资产族+规格款列表渲染
- AssetCenterClient.tsx 3506→3268 行
@
---
 .../app/asset-center/AssetCenterClient.tsx    | 292 ++-------------
 .../src/app/asset-center/FamilyListPanel.tsx  | 332 ++++++++++++++++++
 2 files changed, 359 insertions(+), 265 deletions(-)
 create mode 100644 furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx

diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
index 05a51206..87e040d2 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
@@ -175,6 +175,7 @@ import { ReviewRejectModal } from './ReviewRejectModal'
 import { VariantEditModal } from './VariantEditModal'
 import { FamilyEditModal } from './FamilyEditModal'
 import { CadImportModal } from './CadImportModal'
+import { FamilyListPanel } from './FamilyListPanel'
 
 // ---- 主组件内的渲染辅助函数 ----
 
@@ -2852,271 +2853,32 @@ export default function AssetCenterClient({
                 )}
               </div>
             ) : (
-              currentFamilies.map((family) => {
-                const totalFamilyVariants = getVariantsForFamily(family.id)
-                const familyVariants = getVariantsForFamily(family.id, reviewFilter)
-                const isExpanded = expandedFamilyIds.has(family.id)
-                const isSelectedForAssembly = assemblySelectedFamilyIds.has(family.id)
-
-                return (
-                  <div key={family.id} className="flex flex-col overflow-hidden border-b border-[#e7eded] bg-white last:border-b-0">
-                    {/* 资产族头部 */}
-                    <div
-                      role="button"
-                      tabIndex={0}
-                      aria-label={`展开资产族 ${family.code}`}
-                      onClick={() => toggleFamilyExpand(family.id)}
-                      onKeyDown={(e) => {
-                        if (e.key === 'Enter' || e.key === ' ') {
-                          e.preventDefault()
-                          toggleFamilyExpand(family.id)
-                        }
-                      }}
-                      className={cn(
-                        'group/family flex cursor-pointer items-center gap-3 px-5 py-3.5 outline-none transition-colors focus-visible:ring-1 focus-visible:ring-[#2d3335]/15',
-                        isExpanded ? 'bg-[#f8faf9]' : 'hover:bg-[#fafbfb]',
-                      )}
-                    >
-                      <Layers3 className={cn('h-4 w-4 shrink-0', isExpanded ? 'text-[#263033]' : 'text-[#8b989b]')} />
-                      <div className="min-w-0 flex-1">
-                        <div className="min-w-0">
-                          <p className="min-w-0 truncate text-[14px] font-black text-[#101719]">
-                            {family.name}
-                          </p>
-                        </div>
-                        <p className="mt-0.5 truncate font-mono text-[10px] uppercase text-[#7a878a]">
-                          {family.code}
-                          {totalFamilyVariants.length > 0 ? ` · ${totalFamilyVariants.length} 个规格款` : ''}
-                        </p>
-                      </div>
-                      <div className="flex shrink-0 items-center gap-0.5">
-                        {renderCompactStatus(family.status, `family-status-${family.id}`)}
-                        {canOperateDesignWorkspace && (family.status === 'DRAFT' || family.status === 'REJECTED') ? (
-                          <button
-                            type="button"
-                            className={compactRowActionClassName}
-                            disabled={submitting}
-                            onClick={(event) => {
-                              event.stopPropagation()
-                              void handleFamilyReviewAction(family, 'SUBMIT')
-                            }}
-                            title="提交审核"
-                          >
-                            提审
-                          </button>
-                        ) : null}
-                        {family.status === 'PENDING_REVIEW' && currentUserCanReviewAssets ? (
-                          <>
-                            <button
-                              type="button"
-                              className={compactRowPrimaryActionClassName}
-                              disabled={submitting}
-                              aria-label="审核通过"
-                              onClick={(event) => {
-                                event.stopPropagation()
-                                void handleFamilyReviewAction(family, 'APPROVE')
-                              }}
-                              title="审核通过"
-                            >
-                              通过
-                            </button>
-                            <button
-                              type="button"
-                              className={compactRowDangerActionClassName}
-                              disabled={submitting}
-                              onClick={(event) => {
-                                event.stopPropagation()
-                                openRejectReviewDialog('family', family.id, family.name)
-                              }}
-                              title="驳回"
-                            >
-                              驳回
-                            </button>
-                          </>
-                        ) : null}
-                        <button
-                          type="button"
-                          disabled={!canOperateDesignWorkspace}
-                          className={isSelectedForAssembly ? compactRowPrimaryActionClassName : compactRowActionClassName}
-                          onClick={(event) => {
-                            event.stopPropagation()
-                            setAssemblySelectedFamilyIds((current) => {
-                              const next = new Set(current)
-                              if (next.has(family.id)) {
-                                next.delete(family.id)
-                              } else {
-                                next.add(family.id)
-                              }
-                              return next
-                            })
-                          }}
-                          title={isSelectedForAssembly ? '已带入拼装' : '加入拼装'}
-                        >
-                          {isSelectedForAssembly ? '已选' : '拼装'}
-                        </button>
-                        <button
-                          type="button"
-                          disabled={!canOperateDesignWorkspace}
-                          onClick={(e) => {
-                            e.stopPropagation()
-                            openEditFamilyModal(family)
-                          }}
-                          className={compactRowIconActionClassName}
-                          title="编辑资产族"
-                        >
-                          <Pencil className="h-3.5 w-3.5" />
-                        </button>
-                        {isExpanded ? (
-                           <ChevronDown className="h-4 w-4 shrink-0 text-[#263033] transition-transform duration-200" />
-                         ) : (
-                           <ChevronRight className="h-4 w-4 shrink-0 text-[#9aa5a7] transition-transform duration-200" />
-                        )}
-                      </div>
-                    </div>
-
-                    {isExpanded && (family.status === 'REJECTED' && family.workflow.rejectionReason) ? (
-                      <div className="bg-[#f8faf9] px-5 pb-2 text-[11px] text-red-600">
-                        驳回原因：{family.workflow.rejectionReason}
-                      </div>
-                    ) : null}
-
-                    {/* 规格款列表（展开时） */}
-                    {isExpanded && (
-                      <div className="bg-[#f8faf9]">
-                        {familyVariants.length > 0 ? (
-                          <div className="pt-1">
-                            {familyVariants.map((variant) => {
-                              const isSelected = selectedVariantId === variant.id
-                              return (
-                                <div
-                                  key={variant.id}
-                                  role="button"
-                                  tabIndex={0}
-                                  onClick={() => setSelectedVariantId(variant.id)}
-                                  onKeyDown={(e) => {
-                                    if (e.key === 'Enter' || e.key === ' ') {
-                                      e.preventDefault()
-                                      setSelectedVariantId(variant.id)
-                                    }
-                                  }}
-                                  className={cn(
-                                    'flex cursor-pointer items-center gap-2 border-l-[3px] px-5 py-2.5 outline-none transition focus-visible:ring-1 focus-visible:ring-[#2d3335]/15',
-                                    isSelected
-                                      ? 'border-l-[#101719] bg-white'
-                                      : 'border-l-transparent hover:bg-white/70',
-                                  )}
-                                >
-                                  <div className="min-w-0 flex-1">
-                                    <div className="min-w-0">
-                                      <p className={cn(
-                                        'min-w-0 truncate text-[13px] leading-5',
-                                        isSelected ? 'font-apple-semibold text-[#101719]' : 'font-apple-medium text-[#3f4a4d]',
-                                      )}>
-                                        {variant.name}
-                                      </p>
-                                    </div>
-                                    <p className={cn('truncate text-[10px]', isSelected ? 'text-[#5a6062]' : 'text-[#7a878a]')}>
-                                      {variant.code}
-                                      {variant.sizeLabel ? ` · ${variant.sizeLabel}` : ''}
-                                      {variant.status === 'REJECTED' && variant.workflow.rejectionReason
-                                        ? ` · 驳回：${variant.workflow.rejectionReason}`
-                                        : ''}
-                                    </p>
-                                  </div>
-                                  <div className="shrink-0 flex items-center gap-0.5">
-                                    {renderCompactStatus(variant.status, `variant-status-${variant.id}`)}
-                                    {canOperateDesignWorkspace && (variant.status === 'DRAFT' || variant.status === 'REJECTED') ? (
-                                      <button
-                                        type="button"
-                                        className={compactRowActionClassName}
-                                        disabled={submitting}
-                                        onClick={(event) => {
-                                          event.stopPropagation()
-                                          void handleVariantReviewAction(variant, 'SUBMIT')
-                                        }}
-                                        title="提交审核"
-                                      >
-                                        提审
-                                      </button>
-                                    ) : null}
-                                    {variant.status === 'PENDING_REVIEW' && currentUserCanReviewAssets ? (
-                                      <>
-                                        <button
-                                          type="button"
-                                          className={compactRowActionClassName}
-                                          disabled={submitting}
-                                          aria-label="审核通过"
-                                          onClick={(event) => {
-                                            event.stopPropagation()
-                                            void handleVariantReviewAction(variant, 'APPROVE')
-                                          }}
-                                          title="审核通过"
-                                        >
-                                          通过
-                                        </button>
-                                        <button
-                                          type="button"
-                                          className={compactRowDangerActionClassName}
-                                          disabled={submitting}
-                                          onClick={(event) => {
-                                            event.stopPropagation()
-                                            openRejectReviewDialog('variant', variant.id, variant.name)
-                                          }}
-                                          title="驳回"
-                                        >
-                                          驳回
-                                        </button>
-                                      </>
-                                    ) : null}
-                                    <button
-                                      type="button"
-                                      disabled={!canOperateDesignWorkspace}
-                                      onClick={(e) => { e.stopPropagation(); openEditVariantModal(variant) }}
-                                      className={compactRowIconActionClassName}
-                                      title="编辑规格款"
-                                    >
-                                      <Pencil className="h-3 w-3" />
-                                    </button>
-                                  </div>
-                                </div>
-                              )
-                            })}
-                          </div>
-                        ) : null}
-                        <div
-                          className={cn(
-                            'grid gap-2 px-5 pb-3 pt-2',
-                            isImportableAssetType(family.type) ? 'grid-cols-2' : 'grid-cols-1',
-                          )}
-                        >
-                          <button
-                            type="button"
-                            disabled={!canOperateDesignWorkspace}
-                            onClick={() => openCreateVariantModal(family)}
-                            className={variantInlineCreateButtonClassName}
-                          >
-                            <Plus className="h-3.5 w-3.5" />
-                            <span>新增规格款</span>
-                          </button>
-                          {isImportableAssetType(family.type) ? (
-                            <button
-                              type="button"
-                              disabled={!canOperateDesignWorkspace}
-                              aria-label="CAD 导入到该资产族"
-                              title="CAD 导入到该资产族"
-                              onClick={() => openCadImportModal(family)}
-                              className={variantInlineImportButtonClassName}
-                            >
-                              <FileUp className="h-3.5 w-3.5" />
-                              <span>CAD 导入</span>
-                            </button>
-                          ) : null}
-                        </div>
-                      </div>
-                    )}
-                  </div>
-                )
-              })
+              <FamilyListPanel
+                families={currentFamilies}
+                variantsByFamilyId={variantsByFamilyId}
+                selectedVariantId={selectedVariantId}
+                expandedFamilyIds={expandedFamilyIds}
+                assemblySelectedFamilyIds={assemblySelectedFamilyIds}
+                reviewFilter={reviewFilter}
+                submitting={submitting}
+                canOperateDesignWorkspace={canOperateDesignWorkspace}
+                currentUserCanReviewAssets={currentUserCanReviewAssets}
+                onToggleExpand={toggleFamilyExpand}
+                onSelectVariant={setSelectedVariantId}
+                onToggleAssembly={(familyId) => setAssemblySelectedFamilyIds((current) => {
+                  const next = new Set(current)
+                  if (next.has(familyId)) { next.delete(familyId) } else { next.add(familyId) }
+                  return next
+                })}
+                onFamilyReview={(family, action) => void handleFamilyReviewAction(family, action)}
+                onVariantReview={(variant, action) => void handleVariantReviewAction(variant, action)}
+                onRejectReview={openRejectReviewDialog}
+                onEditFamily={openEditFamilyModal}
+                onEditVariant={openEditVariantModal}
+                onCreateVariant={openCreateVariantModal}
+                onCadImport={openCadImportModal}
+                getVariantsForFamily={getVariantsForFamily}
+              />
             )}
           </div>
 
diff --git a/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx b/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx
new file mode 100644
index 00000000..f9bd54aa
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx
@@ -0,0 +1,332 @@
+'use client'
+
+import { ChevronDown, ChevronRight, FileUp, Layers3, Pencil, Plus } from 'lucide-react'
+import { cn } from '@/lib/utils'
+import type { AssetFamilyDTO, AssetVariantDTO } from '@/server/services'
+import type { ReviewVisibilityFilter } from './asset-center-types'
+import {
+  compactRowActionClassName,
+  compactRowDangerActionClassName,
+  compactRowIconActionClassName,
+  compactRowPrimaryActionClassName,
+  variantInlineCreateButtonClassName,
+  variantInlineImportButtonClassName,
+} from './asset-center-types'
+import { getCompactStatusClassName, getStatusLabel, isImportableAssetType, shouldShowCompactStatus } from './asset-center-utils'
+
+interface FamilyListPanelProps {
+  families: AssetFamilyDTO[]
+  variantsByFamilyId: Map<string, AssetVariantDTO[]>
+  selectedVariantId: string | null
+  expandedFamilyIds: Set<string>
+  assemblySelectedFamilyIds: Set<string>
+  reviewFilter: ReviewVisibilityFilter
+  submitting: boolean
+  canOperateDesignWorkspace: boolean
+  currentUserCanReviewAssets: boolean
+  onToggleExpand: (familyId: string) => void
+  onSelectVariant: (variantId: string) => void
+  onToggleAssembly: (familyId: string) => void
+  onFamilyReview: (family: AssetFamilyDTO, action: 'SUBMIT' | 'APPROVE') => void
+  onVariantReview: (variant: AssetVariantDTO, action: 'SUBMIT' | 'APPROVE') => void
+  onRejectReview: (targetType: 'family' | 'variant', targetId: string, targetName: string) => void
+  onEditFamily: (family: AssetFamilyDTO) => void
+  onEditVariant: (variant: AssetVariantDTO) => void
+  onCreateVariant: (family: AssetFamilyDTO) => void
+  onCadImport: (family: AssetFamilyDTO) => void
+  getVariantsForFamily: (familyId: string, filter?: ReviewVisibilityFilter) => AssetVariantDTO[]
+}
+
+function renderStatus(status: string, testId?: string) {
+  if (!shouldShowCompactStatus(status)) return null
+  return (
+    <span data-testid={testId} className={getCompactStatusClassName(status)}>
+      {getStatusLabel(status)}
+    </span>
+  )
+}
+
+export function FamilyListPanel({
+  families,
+  variantsByFamilyId,
+  selectedVariantId,
+  expandedFamilyIds,
+  assemblySelectedFamilyIds,
+  reviewFilter,
+  submitting,
+  canOperateDesignWorkspace,
+  currentUserCanReviewAssets,
+  onToggleExpand,
+  onSelectVariant,
+  onToggleAssembly,
+  onFamilyReview,
+  onVariantReview,
+  onRejectReview,
+  onEditFamily,
+  onEditVariant,
+  onCreateVariant,
+  onCadImport,
+  getVariantsForFamily,
+}: FamilyListPanelProps) {
+  return (
+    <>
+      {families.map((family) => {
+        const totalFamilyVariants = getVariantsForFamily(family.id)
+        const familyVariants = getVariantsForFamily(family.id, reviewFilter)
+        const isExpanded = expandedFamilyIds.has(family.id)
+        const isSelectedForAssembly = assemblySelectedFamilyIds.has(family.id)
+
+        return (
+          <div key={family.id} className="flex flex-col overflow-hidden border-b border-[#e7eded] bg-white last:border-b-0">
+            {/* 资产族头部 */}
+            <div
+              role="button"
+              tabIndex={0}
+              aria-label={`展开资产族 ${family.code}`}
+              onClick={() => onToggleExpand(family.id)}
+              onKeyDown={(e) => {
+                if (e.key === 'Enter' || e.key === ' ') {
+                  e.preventDefault()
+                  onToggleExpand(family.id)
+                }
+              }}
+              className={cn(
+                'group/family flex cursor-pointer items-center gap-3 px-5 py-3.5 outline-none transition-colors focus-visible:ring-1 focus-visible:ring-[#2d3335]/15',
+                isExpanded ? 'bg-[#f8faf9]' : 'hover:bg-[#fafbfb]',
+              )}
+            >
+              <Layers3 className={cn('h-4 w-4 shrink-0', isExpanded ? 'text-[#263033]' : 'text-[#8b989b]')} />
+              <div className="min-w-0 flex-1">
+                <div className="min-w-0">
+                  <p className="min-w-0 truncate text-[14px] font-black text-[#101719]">
+                    {family.name}
+                  </p>
+                </div>
+                <p className="mt-0.5 truncate font-mono text-[10px] uppercase text-[#7a878a]">
+                  {family.code}
+                  {totalFamilyVariants.length > 0 ? ` · ${totalFamilyVariants.length} 个规格款` : ''}
+                </p>
+              </div>
+              <div className="flex shrink-0 items-center gap-0.5">
+                {renderStatus(family.status, `family-status-${family.id}`)}
+                {canOperateDesignWorkspace && (family.status === 'DRAFT' || family.status === 'REJECTED') ? (
+                  <button
+                    type="button"
+                    className={compactRowActionClassName}
+                    disabled={submitting}
+                    onClick={(event) => {
+                      event.stopPropagation()
+                      onFamilyReview(family, 'SUBMIT')
+                    }}
+                    title="提交审核"
+                  >
+                    提审
+                  </button>
+                ) : null}
+                {family.status === 'PENDING_REVIEW' && currentUserCanReviewAssets ? (
+                  <>
+                    <button
+                      type="button"
+                      className={compactRowPrimaryActionClassName}
+                      disabled={submitting}
+                      aria-label="审核通过"
+                      onClick={(event) => {
+                        event.stopPropagation()
+                        onFamilyReview(family, 'APPROVE')
+                      }}
+                      title="审核通过"
+                    >
+                      通过
+                    </button>
+                    <button
+                      type="button"
+                      className={compactRowDangerActionClassName}
+                      disabled={submitting}
+                      onClick={(event) => {
+                        event.stopPropagation()
+                        onRejectReview('family', family.id, family.name)
+                      }}
+                      title="驳回"
+                    >
+                      驳回
+                    </button>
+                  </>
+                ) : null}
+                <button
+                  type="button"
+                  disabled={!canOperateDesignWorkspace}
+                  className={isSelectedForAssembly ? compactRowPrimaryActionClassName : compactRowActionClassName}
+                  onClick={(event) => {
+                    event.stopPropagation()
+                    onToggleAssembly(family.id)
+                  }}
+                  title={isSelectedForAssembly ? '已带入拼装' : '加入拼装'}
+                >
+                  {isSelectedForAssembly ? '已选' : '拼装'}
+                </button>
+                <button
+                  type="button"
+                  disabled={!canOperateDesignWorkspace}
+                  onClick={(e) => {
+                    e.stopPropagation()
+                    onEditFamily(family)
+                  }}
+                  className={compactRowIconActionClassName}
+                  title="编辑资产族"
+                >
+                  <Pencil className="h-3.5 w-3.5" />
+                </button>
+                {isExpanded ? (
+                  <ChevronDown className="h-4 w-4 shrink-0 text-[#263033] transition-transform duration-200" />
+                ) : (
+                  <ChevronRight className="h-4 w-4 shrink-0 text-[#9aa5a7] transition-transform duration-200" />
+                )}
+              </div>
+            </div>
+
+            {isExpanded && (family.status === 'REJECTED' && family.workflow.rejectionReason) ? (
+              <div className="bg-[#f8faf9] px-5 pb-2 text-[11px] text-red-600">
+                驳回原因：{family.workflow.rejectionReason}
+              </div>
+            ) : null}
+
+            {/* 规格款列表（展开时） */}
+            {isExpanded && (
+              <div className="bg-[#f8faf9]">
+                {familyVariants.length > 0 ? (
+                  <div className="pt-1">
+                    {familyVariants.map((variant) => {
+                      const isSelected = selectedVariantId === variant.id
+                      return (
+                        <div
+                          key={variant.id}
+                          role="button"
+                          tabIndex={0}
+                          onClick={() => onSelectVariant(variant.id)}
+                          onKeyDown={(e) => {
+                            if (e.key === 'Enter' || e.key === ' ') {
+                              e.preventDefault()
+                              onSelectVariant(variant.id)
+                            }
+                          }}
+                          className={cn(
+                            'flex cursor-pointer items-center gap-2 border-l-[3px] px-5 py-2.5 outline-none transition focus-visible:ring-1 focus-visible:ring-[#2d3335]/15',
+                            isSelected
+                              ? 'border-l-[#101719] bg-white'
+                              : 'border-l-transparent hover:bg-white/70',
+                          )}
+                        >
+                          <div className="min-w-0 flex-1">
+                            <div className="min-w-0">
+                              <p className={cn(
+                                'min-w-0 truncate text-[13px] leading-5',
+                                isSelected ? 'font-apple-semibold text-[#101719]' : 'font-apple-medium text-[#3f4a4d]',
+                              )}>
+                                {variant.name}
+                              </p>
+                            </div>
+                            <p className={cn('truncate text-[10px]', isSelected ? 'text-[#5a6062]' : 'text-[#7a878a]')}>
+                              {variant.code}
+                              {variant.sizeLabel ? ` · ${variant.sizeLabel}` : ''}
+                              {variant.status === 'REJECTED' && variant.workflow.rejectionReason
+                                ? ` · 驳回：${variant.workflow.rejectionReason}`
+                                : ''}
+                            </p>
+                          </div>
+                          <div className="shrink-0 flex items-center gap-0.5">
+                            {renderStatus(variant.status, `variant-status-${variant.id}`)}
+                            {canOperateDesignWorkspace && (variant.status === 'DRAFT' || variant.status === 'REJECTED') ? (
+                              <button
+                                type="button"
+                                className={compactRowActionClassName}
+                                disabled={submitting}
+                                onClick={(event) => {
+                                  event.stopPropagation()
+                                  onVariantReview(variant, 'SUBMIT')
+                                }}
+                                title="提交审核"
+                              >
+                                提审
+                              </button>
+                            ) : null}
+                            {variant.status === 'PENDING_REVIEW' && currentUserCanReviewAssets ? (
+                              <>
+                                <button
+                                  type="button"
+                                  className={compactRowActionClassName}
+                                  disabled={submitting}
+                                  aria-label="审核通过"
+                                  onClick={(event) => {
+                                    event.stopPropagation()
+                                    onVariantReview(variant, 'APPROVE')
+                                  }}
+                                  title="审核通过"
+                                >
+                                  通过
+                                </button>
+                                <button
+                                  type="button"
+                                  className={compactRowDangerActionClassName}
+                                  disabled={submitting}
+                                  onClick={(event) => {
+                                    event.stopPropagation()
+                                    onRejectReview('variant', variant.id, variant.name)
+                                  }}
+                                  title="驳回"
+                                >
+                                  驳回
+                                </button>
+                              </>
+                            ) : null}
+                            <button
+                              type="button"
+                              disabled={!canOperateDesignWorkspace}
+                              onClick={(e) => { e.stopPropagation(); onEditVariant(variant) }}
+                              className={compactRowIconActionClassName}
+                              title="编辑规格款"
+                            >
+                              <Pencil className="h-3 w-3" />
+                            </button>
+                          </div>
+                        </div>
+                      )
+                    })}
+                  </div>
+                ) : null}
+                <div
+                  className={cn(
+                    'grid gap-2 px-5 pb-3 pt-2',
+                    isImportableAssetType(family.type) ? 'grid-cols-2' : 'grid-cols-1',
+                  )}
+                >
+                  <button
+                    type="button"
+                    disabled={!canOperateDesignWorkspace}
+                    onClick={() => onCreateVariant(family)}
+                    className={variantInlineCreateButtonClassName}
+                  >
+                    <Plus className="h-3.5 w-3.5" />
+                    <span>新增规格款</span>
+                  </button>
+                  {isImportableAssetType(family.type) ? (
+                    <button
+                      type="button"
+                      disabled={!canOperateDesignWorkspace}
+                      aria-label="CAD 导入到该资产族"
+                      title="CAD 导入到该资产族"
+                      onClick={() => onCadImport(family)}
+                      className={variantInlineImportButtonClassName}
+                    >
+                      <FileUp className="h-3.5 w-3.5" />
+                      <span>CAD 导入</span>
+                    </button>
+                  ) : null}
+                </div>
+              </div>
+            )}
+          </div>
+        )
+      })}
+    </>
+  )
+}

From fe80bc77bad8ccbbab8b5b7c90311d204f9ea4a1 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 19:02:41 +0800
Subject: [PATCH 05/14] =?UTF-8?q?@=20refactor(asset-center):=20=E6=8F=90?=
 =?UTF-8?q?=E5=8F=96=E9=A2=84=E8=A7=88=E5=8F=B3=E9=94=AE=E8=8F=9C=E5=8D=95?=
 =?UTF-8?q?=E5=AD=90=E8=8F=9C=E5=8D=95=E4=B8=BA=E7=8B=AC=E7=AB=8B=E7=BB=84?=
 =?UTF-8?q?=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- PreviewSubmenus.tsx（252 行）：基材选择子菜单 + UV 渲染参数子菜单
- AssetCenterClient.tsx 3268→3085 行
@
---
 .../app/asset-center/AssetCenterClient.tsx    | 225 ++--------------
 .../src/app/asset-center/PreviewSubmenus.tsx  | 252 ++++++++++++++++++
 2 files changed, 273 insertions(+), 204 deletions(-)
 create mode 100644 furniture-3d-system/src/app/asset-center/PreviewSubmenus.tsx

diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
index 87e040d2..28a91a21 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
@@ -176,6 +176,7 @@ import { VariantEditModal } from './VariantEditModal'
 import { FamilyEditModal } from './FamilyEditModal'
 import { CadImportModal } from './CadImportModal'
 import { FamilyListPanel } from './FamilyListPanel'
+import { SubstrateSubmenu, UvSettingsSubmenu } from './PreviewSubmenus'
 
 // ---- 主组件内的渲染辅助函数 ----
 
@@ -2898,212 +2899,28 @@ export default function AssetCenterClient({
           bodyMaxHeight={previewContextMenuBodyMaxHeight}
         >
           {activePreviewSubmenu === 'preview-substrate' ? (
-            <div
-              className="pointer-events-auto absolute animate-fadeInUp"
-              style={{
-                left: `${previewSubstrateSubmenuMetrics.left}px`,
-                top: `${previewSubstrateSubmenuMetrics.top}px`,
-                width: `${previewSubstrateSubmenuMetrics.width}px`,
-                maxHeight: `${previewSubstrateSubmenuMetrics.maxHeight}px`,
-                zIndex: 221,
-                animationDuration: '180ms',
-              }}
-              data-context-menu-root="true"
-            >
-              <div className="liquid-glass-subtle overflow-hidden rounded-apple-md border border-apple-separator/85 p-1.5 shadow-[0_14px_30px_rgba(15,23,42,0.16)]">
-                <div className="border-b border-apple-separator/80 px-1 pb-1.5">
-                  <p className="px-1 pb-1 text-[11px] font-apple-system tracking-apple-wide text-[#5a6062]/75">
-                    选择基材
-                  </p>
-                  <div className="relative">
-                    <Search className="pointer-events-none absolute left-2 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/45" />
-                    <input
-                      aria-label="搜索基材"
-                      value={previewSubstrateSearch}
-                      onChange={(event) => setPreviewSubstrateSearch(event.target.value)}
-                      placeholder="搜索名称或编码"
-                      className="h-7 w-full rounded-apple-md border border-apple-separator/80 bg-white/80 pl-7 pr-2 text-[12px] text-[#2d3335] outline-hidden transition placeholder:text-[#5a6062]/45 focus:border-black/[0.12] focus:bg-white"
-                    />
-                  </div>
-                </div>
-
-                <div
-                  className="overflow-y-auto px-1 py-1"
-                  style={{ maxHeight: `${Math.max(150, previewSubstrateSubmenuMetrics.maxHeight - 62)}px` }}
-                >
-                  {previewFilteredSubstrateItems.length > 0 ? (
-                    previewFilteredSubstrateItems.map((item) => (
-                      <button
-                        key={item.id}
-                        type="button"
-                        onClick={() => handlePreviewContextMenuItemClick(item)}
-                        className="mb-0.5 flex h-8 w-full items-center justify-between gap-3 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 focus-visible:ring-2 focus-visible:ring-black/[0.08]"
-                      >
-                        <span className="min-w-0 truncate text-[12px] font-apple-system font-apple-medium">
-                          {item.label}
-                        </span>
-                      </button>
-                    ))
-                  ) : (
-                    <div className="px-2 py-3 text-[12px] text-[#5a6062]/65">
-                      没有匹配基材
-                    </div>
-                  )}
-                </div>
-              </div>
-            </div>
+            <SubstrateSubmenu
+              metrics={previewSubstrateSubmenuMetrics}
+              search={previewSubstrateSearch}
+              onSearchChange={setPreviewSubstrateSearch}
+              filteredItems={previewFilteredSubstrateItems}
+              onSelect={handlePreviewContextMenuItemClick}
+            />
           ) : null}
           {activePreviewSubmenu === 'preview-uv' ? (
-            <div
-              className="pointer-events-auto absolute animate-fadeInUp"
-              style={{
-                left: `${previewUvSettingsPanelPosition.left}px`,
-                top: `${previewUvSettingsPanelPosition.top}px`,
-                width: '264px',
-                maxHeight: `${previewUvSettingsPanelPosition.maxHeight}px`,
-                animationDuration: '180ms',
-              }}
-              data-context-menu-root="true"
-            >
-              <div className="liquid-glass-subtle overflow-hidden rounded-apple-md border border-apple-separator/85 p-1.5 shadow-[0_14px_30px_rgba(15,23,42,0.16)]">
-                <div className="flex items-start justify-between gap-2 border-b border-apple-separator/80 px-2 pb-1.5">
-                  <div className="min-w-0">
-                    <p className="text-[11px] font-apple-system tracking-apple-wide text-[#5a6062]/75">
-                      {activeVariantUvNodeLabel}
-                      {!selectedFinishMaterialConfig ? ' · 未绑定基材花色' : ''}
-                    </p>
-                    <p className="truncate text-[13px] font-apple-system font-apple-medium text-[#2d3335]">
-                      渲染参数
-                    </p>
-                  </div>
-                  <Badge variant="subtle" size="small" className="shrink-0 border-none bg-white/75 text-[#5a6062]">
-                    {variantUvConfigDirty ? '待保存' : '已同步'}
-                  </Badge>
-                </div>
-
-                <div
-                  className="overflow-y-auto px-1 py-1"
-                  style={{ maxHeight: `${Math.max(190, previewUvSettingsPanelPosition.maxHeight - 48)}px` }}
-                >
-                  <div className="mb-0.5 flex h-6 w-full items-center justify-between gap-2 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary">
-                    <span className="shrink-0 text-[12px] font-apple-system font-apple-medium">
-                      投影轴
-                    </span>
-                    <div className="grid w-[148px] grid-cols-4 gap-0.5 rounded-apple-sm border border-apple-separator bg-white/70 p-0.5">
-                      {UV_PROJECTION_AXIS_OPTIONS.map((option) => {
-                        const isSelected = variantUvEditorForm.textureProjectionAxis === option.value
-                        return (
-                          <button
-                            key={option.value || 'auto'}
-                            type="button"
-                            aria-label={option.label}
-                            aria-pressed={isSelected}
-                            onClick={() => handleSelectVariantUvProjectionAxis(option.value)}
-                            className={cn(
-                              'h-5 rounded-[3px] text-[11px] font-apple-system font-apple-medium transition',
-                              isSelected
-                                ? 'bg-[#2d3335] text-white shadow-xs'
-                                : 'text-[#5a6062] hover:bg-black/[0.04] hover:text-[#2d3335]',
-                            )}
-                          >
-                            {option.label === '自动' ? '自' : option.label.replace(' 轴', '')}
-                          </button>
-                        )
-                      })}
-                    </div>
-                  </div>
-                  {[
-                    {
-                      label: '整体重复',
-                      ariaLabel: '整体重复',
-                      value: variantUvEditorForm.textureRepeat,
-                      placeholder: '1.0',
-                      field: 'textureRepeat' as const,
-                    },
-                    {
-                      label: '旋转角度 °',
-                      ariaLabel: '旋转角度 °',
-                      value: variantUvEditorForm.textureRotation,
-                      placeholder: '0°',
-                      field: 'textureRotation' as const,
-                    },
-                    {
-                      label: '纹理尺寸 mm',
-                      ariaLabel: '纹理尺寸 mm',
-                      value: variantUvEditorForm.textureSizeMm,
-                      placeholder: '600',
-                      field: 'textureSizeMm' as const,
-                    },
-                    {
-                      label: 'U 压缩',
-                      ariaLabel: 'U 压缩',
-                      value: variantUvEditorForm.textureRepeatU,
-                      placeholder: '1.0',
-                      field: 'textureRepeatU' as const,
-                    },
-                    {
-                      label: 'V 压缩',
-                      ariaLabel: 'V 压缩',
-                      value: variantUvEditorForm.textureRepeatV,
-                      placeholder: '1.0',
-                      field: 'textureRepeatV' as const,
-                    },
-                  ].map((item) => (
-                    <div
-                      key={item.field}
-                      className="mb-0.5 flex h-6 w-full items-center justify-between gap-2 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary"
-                    >
-                      <label
-                        htmlFor={`variant-uv-${item.field}`}
-                        className="shrink-0 text-[12px] font-apple-system font-apple-medium"
-                      >
-                        {item.label}
-                      </label>
-                      <input
-                        id={`variant-uv-${item.field}`}
-                        aria-label={item.ariaLabel}
-                        inputMode="decimal"
-                        value={item.value}
-                        onChange={(event) =>
-                          handlePatchVariantUvEditorForm({ [item.field]: event.target.value })
-                        }
-                        placeholder={item.placeholder}
-                        className="h-6 w-[108px] rounded-apple-sm border border-apple-separator bg-white/80 px-2 text-right text-[12px] text-apple-label-primary outline-hidden transition placeholder:text-apple-label-tertiary focus:border-[#2d3335]"
-                      />
-                    </div>
-                  ))}
-
-                  <div className="mx-1 my-0.5 h-px bg-apple-separator/80" />
-
-                  <div className="mb-0.5 grid grid-cols-2 gap-1">
-                    <button
-                      type="button"
-                      onClick={handleResetVariantUvEditor}
-                      disabled={submitting || !variantUvConfigDirty}
-                      className="flex h-6 items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
-                    >
-                      还原
-                    </button>
-                    <button
-                      type="button"
-                      onClick={handleClearVariantUvEditor}
-                      disabled={submitting}
-                      className="flex h-6 items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
-                    >
-                      清空
-                    </button>
-                  </div>
-                  <button
-                    type="button"
-                    disabled={submitting || !variantUvConfigDirty}
-                    onClick={handleKeepVariantUvDraft}
-                    className="mb-0.5 flex h-6 w-full items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
-                  >
-                    暂存渲染参数
-                  </button>
-                </div>
-              </div>
-            </div>
+            <UvSettingsSubmenu
+              position={previewUvSettingsPanelPosition}
+              form={variantUvEditorForm}
+              onFormPatch={handlePatchVariantUvEditorForm}
+              onSelectProjectionAxis={handleSelectVariantUvProjectionAxis}
+              onReset={handleResetVariantUvEditor}
+              onClear={handleClearVariantUvEditor}
+              onKeepDraft={handleKeepVariantUvDraft}
+              configDirty={variantUvConfigDirty}
+              submitting={submitting}
+              nodeLabel={activeVariantUvNodeLabel}
+              hasMaterialConfig={!!selectedFinishMaterialConfig}
+            />
           ) : null}
         </ContextMenu>
       )}
diff --git a/furniture-3d-system/src/app/asset-center/PreviewSubmenus.tsx b/furniture-3d-system/src/app/asset-center/PreviewSubmenus.tsx
new file mode 100644
index 00000000..4c9076c0
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/PreviewSubmenus.tsx
@@ -0,0 +1,252 @@
+'use client'
+
+import { Search } from 'lucide-react'
+import { Badge } from '@/components/ui/Badge'
+import { cn } from '@/lib/utils'
+import type { AssetVariantUvProjectionAxis } from '@/lib/asset-variant-render-config'
+import type { VariantUvEditorFormState } from './asset-center-types'
+import { UV_PROJECTION_AXIS_OPTIONS } from './asset-center-types'
+
+// ---- 基材选择子菜单 ----
+
+interface SubstrateSubmenuItem {
+  id: string
+  label: string
+}
+
+interface SubstrateSubmenuMetrics {
+  left: number
+  top: number
+  width: number
+  maxHeight: number
+}
+
+interface SubstrateSubmenuProps {
+  metrics: SubstrateSubmenuMetrics
+  search: string
+  onSearchChange: (value: string) => void
+  filteredItems: SubstrateSubmenuItem[]
+  onSelect: (item: SubstrateSubmenuItem) => void
+}
+
+export function SubstrateSubmenu({
+  metrics,
+  search,
+  onSearchChange,
+  filteredItems,
+  onSelect,
+}: SubstrateSubmenuProps) {
+  return (
+    <div
+      className="pointer-events-auto absolute animate-fadeInUp"
+      style={{
+        left: `${metrics.left}px`,
+        top: `${metrics.top}px`,
+        width: `${metrics.width}px`,
+        maxHeight: `${metrics.maxHeight}px`,
+        zIndex: 221,
+        animationDuration: '180ms',
+      }}
+      data-context-menu-root="true"
+    >
+      <div className="liquid-glass-subtle overflow-hidden rounded-apple-md border border-apple-separator/85 p-1.5 shadow-[0_14px_30px_rgba(15,23,42,0.16)]">
+        <div className="border-b border-apple-separator/80 px-1 pb-1.5">
+          <p className="px-1 pb-1 text-[11px] font-apple-system tracking-apple-wide text-[#5a6062]/75">
+            选择基材
+          </p>
+          <div className="relative">
+            <Search className="pointer-events-none absolute left-2 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/45" />
+            <input
+              aria-label="搜索基材"
+              value={search}
+              onChange={(event) => onSearchChange(event.target.value)}
+              placeholder="搜索名称或编码"
+              className="h-7 w-full rounded-apple-md border border-apple-separator/80 bg-white/80 pl-7 pr-2 text-[12px] text-[#2d3335] outline-hidden transition placeholder:text-[#5a6062]/45 focus:border-black/[0.12] focus:bg-white"
+            />
+          </div>
+        </div>
+
+        <div
+          className="overflow-y-auto px-1 py-1"
+          style={{ maxHeight: `${Math.max(150, metrics.maxHeight - 62)}px` }}
+        >
+          {filteredItems.length > 0 ? (
+            filteredItems.map((item) => (
+              <button
+                key={item.id}
+                type="button"
+                onClick={() => onSelect(item)}
+                className="mb-0.5 flex h-8 w-full items-center justify-between gap-3 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 focus-visible:ring-2 focus-visible:ring-black/[0.08]"
+              >
+                <span className="min-w-0 truncate text-[12px] font-apple-system font-apple-medium">
+                  {item.label}
+                </span>
+              </button>
+            ))
+          ) : (
+            <div className="px-2 py-3 text-[12px] text-[#5a6062]/65">
+              没有匹配基材
+            </div>
+          )}
+        </div>
+      </div>
+    </div>
+  )
+}
+
+// ---- UV 渲染参数子菜单 ----
+
+interface UvSettingsPanelPosition {
+  left: number
+  top: number
+  maxHeight: number
+}
+
+interface UvSubmenuProps {
+  position: UvSettingsPanelPosition
+  form: VariantUvEditorFormState
+  onFormPatch: (patch: Partial<VariantUvEditorFormState>) => void
+  onSelectProjectionAxis: (value: '' | AssetVariantUvProjectionAxis) => void
+  onReset: () => void
+  onClear: () => void
+  onKeepDraft: () => void
+  configDirty: boolean
+  submitting: boolean
+  nodeLabel: string
+  hasMaterialConfig: boolean
+}
+
+export function UvSettingsSubmenu({
+  position,
+  form,
+  onFormPatch,
+  onSelectProjectionAxis,
+  onReset,
+  onClear,
+  onKeepDraft,
+  configDirty,
+  submitting,
+  nodeLabel,
+  hasMaterialConfig,
+}: UvSubmenuProps) {
+  return (
+    <div
+      className="pointer-events-auto absolute animate-fadeInUp"
+      style={{
+        left: `${position.left}px`,
+        top: `${position.top}px`,
+        width: '264px',
+        maxHeight: `${position.maxHeight}px`,
+        animationDuration: '180ms',
+      }}
+      data-context-menu-root="true"
+    >
+      <div className="liquid-glass-subtle overflow-hidden rounded-apple-md border border-apple-separator/85 p-1.5 shadow-[0_14px_30px_rgba(15,23,42,0.16)]">
+        <div className="flex items-start justify-between gap-2 border-b border-apple-separator/80 px-2 pb-1.5">
+          <div className="min-w-0">
+            <p className="text-[11px] font-apple-system tracking-apple-wide text-[#5a6062]/75">
+              {nodeLabel}
+              {!hasMaterialConfig ? ' · 未绑定基材花色' : ''}
+            </p>
+            <p className="truncate text-[13px] font-apple-system font-apple-medium text-[#2d3335]">
+              渲染参数
+            </p>
+          </div>
+          <Badge variant="subtle" size="small" className="shrink-0 border-none bg-white/75 text-[#5a6062]">
+            {configDirty ? '待保存' : '已同步'}
+          </Badge>
+        </div>
+
+        <div
+          className="overflow-y-auto px-1 py-1"
+          style={{ maxHeight: `${Math.max(190, position.maxHeight - 48)}px` }}
+        >
+          <div className="mb-0.5 flex h-6 w-full items-center justify-between gap-2 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary">
+            <span className="shrink-0 text-[12px] font-apple-system font-apple-medium">
+              投影轴
+            </span>
+            <div className="grid w-[148px] grid-cols-4 gap-0.5 rounded-apple-sm border border-apple-separator bg-white/70 p-0.5">
+              {UV_PROJECTION_AXIS_OPTIONS.map((option) => {
+                const isSelected = form.textureProjectionAxis === option.value
+                return (
+                  <button
+                    key={option.value || 'auto'}
+                    type="button"
+                    aria-label={option.label}
+                    aria-pressed={isSelected}
+                    onClick={() => onSelectProjectionAxis(option.value)}
+                    className={cn(
+                      'h-5 rounded-[3px] text-[11px] font-apple-system font-apple-medium transition',
+                      isSelected
+                        ? 'bg-[#2d3335] text-white shadow-xs'
+                        : 'text-[#5a6062] hover:bg-black/[0.04] hover:text-[#2d3335]',
+                    )}
+                  >
+                    {option.label === '自动' ? '自' : option.label.replace(' 轴', '')}
+                  </button>
+                )
+              })}
+            </div>
+          </div>
+          {[
+            { label: '整体重复', ariaLabel: '整体重复', value: form.textureRepeat, placeholder: '1.0', field: 'textureRepeat' as const },
+            { label: '旋转角度 °', ariaLabel: '旋转角度 °', value: form.textureRotation, placeholder: '0°', field: 'textureRotation' as const },
+            { label: '纹理尺寸 mm', ariaLabel: '纹理尺寸 mm', value: form.textureSizeMm, placeholder: '600', field: 'textureSizeMm' as const },
+            { label: 'U 压缩', ariaLabel: 'U 压缩', value: form.textureRepeatU, placeholder: '1.0', field: 'textureRepeatU' as const },
+            { label: 'V 压缩', ariaLabel: 'V 压缩', value: form.textureRepeatV, placeholder: '1.0', field: 'textureRepeatV' as const },
+          ].map((item) => (
+            <div
+              key={item.field}
+              className="mb-0.5 flex h-6 w-full items-center justify-between gap-2 rounded-apple-md border border-transparent px-2 text-left text-apple-label-primary"
+            >
+              <label
+                htmlFor={`variant-uv-${item.field}`}
+                className="shrink-0 text-[12px] font-apple-system font-apple-medium"
+              >
+                {item.label}
+              </label>
+              <input
+                id={`variant-uv-${item.field}`}
+                aria-label={item.ariaLabel}
+                inputMode="decimal"
+                value={item.value}
+                onChange={(event) => onFormPatch({ [item.field]: event.target.value })}
+                placeholder={item.placeholder}
+                className="h-6 w-[108px] rounded-apple-sm border border-apple-separator bg-white/80 px-2 text-right text-[12px] text-apple-label-primary outline-hidden transition placeholder:text-apple-label-tertiary focus:border-[#2d3335]"
+              />
+            </div>
+          ))}
+
+          <div className="mx-1 my-0.5 h-px bg-apple-separator/80" />
+
+          <div className="mb-0.5 grid grid-cols-2 gap-1">
+            <button
+              type="button"
+              onClick={onReset}
+              disabled={submitting || !configDirty}
+              className="flex h-6 items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
+            >
+              还原
+            </button>
+            <button
+              type="button"
+              onClick={onClear}
+              disabled={submitting}
+              className="flex h-6 items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
+            >
+              清空
+            </button>
+          </div>
+          <button
+            type="button"
+            disabled={submitting || !configDirty}
+            onClick={onKeepDraft}
+            className="mb-0.5 flex h-6 w-full items-center rounded-apple-md border border-transparent px-2 text-left text-[12px] font-apple-system font-apple-medium text-apple-label-primary transition hover:border-apple-separator/80 hover:bg-white/85 disabled:cursor-not-allowed disabled:bg-apple-bg-secondary/25 disabled:text-apple-label-tertiary"
+          >
+            暂存渲染参数
+          </button>
+        </div>
+      </div>
+    </div>
+  )
+}

From a09fbc3057a58bc31af9ba17cef42265dcec92cd Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Fri, 29 May 2026 20:27:18 +0800
Subject: [PATCH 06/14] =?UTF-8?q?style(asset-center):=20lint=20=E6=A0=BC?=
 =?UTF-8?q?=E5=BC=8F=E5=8C=96=E4=B8=8E=E7=B1=BB=E5=9E=8B=E6=94=B6=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../AdminApprovalWorkflowClient.tsx           | 192 ++++----
 .../app/asset-center/AssetCenterClient.tsx    | 444 ++----------------
 .../AssetCenterClient.workflow.test.tsx       |   2 +-
 .../AssetCenterSidebarControls.tsx            | 287 +++++++++++
 .../src/app/asset-center/CadImportModal.tsx   |  15 +-
 .../src/app/asset-center/FamilyListPanel.tsx  |   2 -
 .../src/app/asset-center/VariantEditModal.tsx |   5 +-
 .../app/asset-center/VariantSaveProgress.tsx  |  76 +++
 .../app/asset-center/asset-center-types.ts    |   7 +-
 9 files changed, 525 insertions(+), 505 deletions(-)
 create mode 100644 furniture-3d-system/src/app/asset-center/AssetCenterSidebarControls.tsx
 create mode 100644 furniture-3d-system/src/app/asset-center/VariantSaveProgress.tsx

diff --git a/furniture-3d-system/src/app/admin/approval-workflows/AdminApprovalWorkflowClient.tsx b/furniture-3d-system/src/app/admin/approval-workflows/AdminApprovalWorkflowClient.tsx
index 4f1b43c2..817a03f0 100644
--- a/furniture-3d-system/src/app/admin/approval-workflows/AdminApprovalWorkflowClient.tsx
+++ b/furniture-3d-system/src/app/admin/approval-workflows/AdminApprovalWorkflowClient.tsx
@@ -1,18 +1,27 @@
 'use client'
 
-import { useEffect, useMemo, useState } from 'react'
+import { useCallback, useEffect, useMemo, useState } from 'react'
 import Link from 'next/link'
 import type { ApprovalWorkflowStatus } from '@prisma/client'
-import { Copy, ExternalLink, Search } from 'lucide-react'
+import { Copy, ExternalLink, GitBranch, Search } from 'lucide-react'
 import {
   buildApprovalWorkflowUrl,
   listApprovalWorkflows,
   type ApprovalWorkflowListItem,
 } from '@/app/approval-workflows/approvalWorkflowApi'
 import { BUSINESS_ACCOUNT_TYPE_LABELS } from '@/lib/business-account-types'
+import {
+  ObsidianControlShell,
+  ObsidianDataRow,
+  ObsidianInspectorSection,
+  ObsidianPanel,
+  ObsidianRailButton,
+  ObsidianRailGroup,
+} from '@/components/platform/ObsidianControlShell'
+import { cn } from '@/lib/utils'
 
 const STATUS_LABELS: Record<ApprovalWorkflowStatus | '', string> = {
-  '': '全部状态',
+  '': '全部',
   DRAFT: '草稿',
   PENDING: '待处理',
   IN_PROGRESS: '进行中',
@@ -29,13 +38,16 @@ export function AdminApprovalWorkflowClient() {
   const [copiedKey, setCopiedKey] = useState<string | null>(null)
   const [workflows, setWorkflows] = useState<ApprovalWorkflowListItem[]>([])
 
-  const load = async () => {
+  const load = useCallback(async (filters: {
+    keyword: string
+    status: ApprovalWorkflowStatus | ''
+  }) => {
     try {
       setLoading(true)
       setError(null)
       const items = await listApprovalWorkflows({
-        keyword: keyword.trim() || undefined,
-        status,
+        keyword: filters.keyword.trim() || undefined,
+        status: filters.status,
       })
       setWorkflows(items)
     } catch (loadError) {
@@ -43,11 +55,11 @@ export function AdminApprovalWorkflowClient() {
     } finally {
       setLoading(false)
     }
-  }
+  }, [])
 
   useEffect(() => {
-    void load()
-  }, [])
+    void load({ keyword: '', status: '' })
+  }, [load])
 
   const sortedWorkflows = useMemo(
     () => [...workflows].sort((a, b) => new Date(b.updatedAt).getTime() - new Date(a.updatedAt).getTime()),
@@ -64,128 +76,136 @@ export function AdminApprovalWorkflowClient() {
     }
   }
 
-  return (
-    <div className="min-h-screen bg-[#f3f6f6] text-[#162124]">
-      <div className="mx-auto max-w-7xl px-6 py-6">
-        <div className="rounded-[8px] border border-[#d8e0e1] bg-white p-5">
-          <div className="flex flex-wrap items-start justify-between gap-4">
-            <div>
-              <p className="text-[11px] font-black uppercase tracking-[0.18em] text-[#667578]">后台流程记录</p>
-              <h1 className="mt-2 text-2xl font-black">流程单总表</h1>
-              <p className="mt-2 text-sm text-[#607073]">
-                这里负责找旧流程、按审批编号排查、复制链接补发，不替代开品页里的主发起入口。
-              </p>
-            </div>
-            <Link
-              href="/admin"
-              className="rounded-[6px] border border-[#d8e0e1] bg-[#f8faf9] px-3 py-2 text-sm font-bold text-[#314145]"
-            >
-              返回后台
-            </Link>
-          </div>
+  const statusCounts = useMemo(() => {
+    const counts: Record<string, number> = { '': workflows.length }
+    for (const w of workflows) {
+      counts[w.status] = (counts[w.status] ?? 0) + 1
+    }
+    return counts
+  }, [workflows])
 
-          <div className="mt-5 grid gap-3 lg:grid-cols-[minmax(0,1fr)_220px_120px]">
-            <label className="space-y-1.5">
-              <span className="text-xs font-bold text-[#607073]">搜索</span>
-              <div className="flex h-10 items-center gap-2 rounded-[6px] border border-[#d8e0e1] bg-white px-3">
-                <Search className="h-4 w-4 text-[#7b8b8d]" />
-                <input
-                  value={keyword}
-                  onChange={(event) => setKeyword(event.target.value)}
-                  placeholder="搜索审批编号、流程标题、产品型号或产品名称"
-                  className="w-full border-0 bg-transparent text-sm outline-none"
-                />
-              </div>
-            </label>
-            <label className="space-y-1.5">
-              <span className="text-xs font-bold text-[#607073]">状态</span>
-              <select
-                value={status}
-                onChange={(event) => setStatus(event.target.value as ApprovalWorkflowStatus | '')}
-                className="h-10 w-full rounded-[6px] border border-[#d8e0e1] bg-white px-3 text-sm outline-none"
-              >
-                {Object.entries(STATUS_LABELS).map(([value, label]) => (
-                  <option key={value || 'all'} value={value}>
-                    {label}
-                  </option>
-                ))}
-              </select>
-            </label>
+  return (
+    <ObsidianControlShell
+      eyebrow="流程"
+      title="流程单总表"
+      icon={GitBranch}
+      backHref="/admin"
+      backLabel="后台设置"
+      rail={
+        <ObsidianRailGroup title="状态筛选">
+          {(Object.entries(STATUS_LABELS) as Array<[ApprovalWorkflowStatus | '', string]>).map(([key, label]) => (
+            <ObsidianRailButton
+              key={key || 'all'}
+              active={status === key}
+              onClick={() => setStatus(key)}
+              label={label}
+              meta={statusCounts[key] ? String(statusCounts[key]) : undefined}
+            />
+          ))}
+        </ObsidianRailGroup>
+      }
+      inspector={
+        <div>
+          <ObsidianInspectorSection title="统计">
+            <ObsidianDataRow label="总流程数" value={String(workflows.length)} />
+            <ObsidianDataRow label="进行中" value={String(statusCounts['IN_PROGRESS'] ?? 0)} />
+            <ObsidianDataRow label="已完成" value={String(statusCounts['COMPLETED'] ?? 0)} />
+          </ObsidianInspectorSection>
+        </div>
+      }
+    >
+      <div className="grid h-full grid-rows-[auto_minmax(0,1fr)] bg-[#0f1416]">
+        <header className="border-b border-white/10 bg-[#101719] px-5 py-4">
+          <div className="flex items-center gap-3">
+            <div className="flex h-8 flex-1 items-center gap-2 rounded-[6px] bg-white/5 px-3">
+              <Search className="h-3.5 w-3.5 text-[#6a7a7d]" />
+              <input
+                value={keyword}
+                onChange={(event) => setKeyword(event.target.value)}
+                onKeyDown={(event) => { if (event.key === 'Enter') void load({ keyword, status }) }}
+                placeholder="搜索审批编号、标题、产品型号"
+                className="w-full border-0 bg-transparent text-xs text-[#cbd8d5] outline-none placeholder:text-[#5a6a6d]"
+              />
+            </div>
             <button
               type="button"
-              onClick={() => void load()}
-              className="h-10 self-end rounded-[6px] border border-[#cad6d7] bg-white px-3 text-sm font-black text-[#223034]"
+              onClick={() => void load({ keyword, status })}
+              className="h-8 rounded-[6px] bg-white/5 px-3 text-[11px] font-bold text-[#8f9c9d] transition hover:bg-white/10 hover:text-[#cbd8d5]"
             >
               查询
             </button>
           </div>
-
-          {error ? (
-            <div className="mt-4 rounded-[6px] border border-[#f2c7cc] bg-[#fff1f3] px-4 py-3 text-sm text-[#9f3041]">
+        </header>
+        <div className="min-h-0 overflow-y-auto p-5">
+          {error && (
+            <div className="mb-4 rounded-[6px] bg-[#b75b5b]/10 px-4 py-3 text-xs text-[#d88a8a]">
               {error}
             </div>
-          ) : null}
-        </div>
-
-        <div className="mt-4 rounded-[8px] border border-[#d8e0e1] bg-white p-5">
+          )}
           {loading ? (
-            <div className="py-8 text-center text-sm text-[#607073]">正在加载流程记录...</div>
+            <ObsidianPanel>
+              <p className="py-8 text-center text-xs text-[#6a7a7d]">正在加载…</p>
+            </ObsidianPanel>
           ) : sortedWorkflows.length === 0 ? (
-            <div className="py-8 text-center text-sm text-[#607073]">当前没有符合条件的流程记录。</div>
+            <ObsidianPanel>
+              <p className="py-8 text-center text-xs text-[#6a7a7d]">当前没有符合条件的流程记录</p>
+            </ObsidianPanel>
           ) : (
-            <div className="space-y-3">
+            <div className="space-y-2">
               {sortedWorkflows.map((workflow) => (
-                <div key={workflow.id} className="rounded-[6px] border border-[#e0e7e7] bg-[#fbfcfc] p-4">
+                <ObsidianPanel key={workflow.id}>
                   <div className="flex flex-wrap items-start justify-between gap-3">
                     <div className="min-w-0 flex-1">
                       <div className="flex flex-wrap items-center gap-2">
-                        <p className="text-sm font-black text-[#162124]">{workflow.title}</p>
-                        <span className="rounded-[6px] bg-white px-2 py-0.5 text-[11px] font-bold text-[#607073]">
+                        <p className="text-xs font-bold text-[#edf4f2]">{workflow.title}</p>
+                        <span className={cn(
+                          'rounded-[4px] px-1.5 py-0.5 text-[9px] font-black',
+                          workflow.status === 'COMPLETED' ? 'bg-[#286c34]/10 text-[#6abf6e]' :
+                          workflow.status === 'REJECTED' ? 'bg-[#b75b5b]/10 text-[#d88a8a]' :
+                          'bg-[#47646b]/10 text-[#8f9c9d]',
+                        )}>
                           {STATUS_LABELS[workflow.status]}
                         </span>
                       </div>
-                      <p className="mt-1 text-xs text-[#607073]">
-                        审批编号：{workflow.approvalNumber} · 产品：{workflow.product.modelNumber} / {workflow.product.name}
+                      <p className="mt-1 text-[10px] text-[#6a7a7d]">
+                        {workflow.approvalNumber} · {workflow.product.modelNumber} / {workflow.product.name}
                       </p>
-                      <p className="mt-1 text-xs text-[#607073]">
-                        参与业务：{workflow.businessRoles.map((role) => BUSINESS_ACCOUNT_TYPE_LABELS[role]).join(' / ') || '未配置'}
-                      </p>
-                      <p className="mt-1 text-xs text-[#7b8b8d]">
-                        最近更新：{new Date(workflow.updatedAt).toLocaleString('zh-CN')}
+                      <p className="mt-0.5 text-[10px] text-[#5a6a6d]">
+                        {workflow.businessRoles.map((role) => BUSINESS_ACCOUNT_TYPE_LABELS[role]).join(' / ') || '未配置'} · {new Date(workflow.updatedAt).toLocaleString('zh-CN')}
                       </p>
                     </div>
-                    <div className="flex flex-wrap items-center gap-2">
+                    <div className="flex flex-wrap items-center gap-1.5">
                       <button
                         type="button"
                         onClick={() => void handleCopy(workflow.accessKey)}
-                        className="inline-flex items-center gap-1 rounded-[6px] border border-[#cad6d7] bg-white px-3 py-1.5 text-xs font-black text-[#223034]"
+                        className="inline-flex h-7 items-center gap-1 rounded-[5px] bg-white/5 px-2 text-[10px] font-bold text-[#8f9c9d] transition hover:bg-white/10 hover:text-[#cbd8d5]"
                       >
-                        <Copy className="h-3.5 w-3.5" />
+                        <Copy className="h-3 w-3" />
                         {copiedKey === workflow.accessKey ? '已复制' : '复制链接'}
                       </button>
                       <a
                         href={`/approval-workflows/${workflow.accessKey}`}
                         target="_blank"
                         rel="noreferrer"
-                        className="inline-flex items-center gap-1 rounded-[6px] border border-[#cad6d7] bg-white px-3 py-1.5 text-xs font-black text-[#223034]"
+                        className="inline-flex h-7 items-center gap-1 rounded-[5px] bg-white/5 px-2 text-[10px] font-bold text-[#8f9c9d] transition hover:bg-white/10 hover:text-[#cbd8d5]"
                       >
-                        <ExternalLink className="h-3.5 w-3.5" />
-                        打开流程页
+                        <ExternalLink className="h-3 w-3" />
+                        打开
                       </a>
                       <Link
                         href={`/intake/non-integrated/${encodeURIComponent(workflow.productId)}`}
-                        className="inline-flex items-center gap-1 rounded-[6px] border border-[#cad6d7] bg-white px-3 py-1.5 text-xs font-black text-[#223034]"
+                        className="inline-flex h-7 items-center gap-1 rounded-[5px] bg-white/5 px-2 text-[10px] font-bold text-[#8f9c9d] transition hover:bg-white/10 hover:text-[#cbd8d5]"
                       >
                         查看需求
                       </Link>
                     </div>
                   </div>
-                </div>
+                </ObsidianPanel>
               ))}
             </div>
           )}
         </div>
       </div>
-    </div>
+    </ObsidianControlShell>
   )
 }
diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
index 28a91a21..a2a13165 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.tsx
@@ -4,27 +4,14 @@ import { startTransition, useState, useMemo, useCallback, useEffect, useRef } fr
 import Link from 'next/link'
 import {
   ArrowRight,
-  ChevronDown,
-  ChevronRight,
-  FileUp,
   Layers3,
   Link2,
   Package2,
-  Pencil,
-  Plus,
-  Search,
   Shapes,
-  SwatchBook,
-  Trash2,
-  X,
-  AlertTriangle,
 } from 'lucide-react'
 import { Badge } from '@/components/ui/Badge'
 import Button from '@/components/ui/Button'
-import Checkbox from '@/components/ui/Checkbox'
-import Input, { Textarea } from '@/components/ui/Input'
 import Modal from '@/components/ui/Modal'
-import Select from '@/components/ui/Select'
 import {
   calculateMenuPosition,
   ContextMenu,
@@ -35,7 +22,6 @@ import { DeleteConfirmDialog } from '@/components/ui/DeleteConfirmDialog'
 import { useToast, ToastContainer } from '@/components/ui/Toast'
 import { AssetWorkbenchEmptyBackdrop } from '@/components/platform/AssetWorkbenchEmptyBackdrop'
 import { ModelPreviewPanel } from '@/components/platform/ModelPreviewPanel'
-import type { PlatformMetricItem } from '@/components/platform/types'
 import {
   applyAssetVariantUvConfigToMaterial,
   getAssetVariantUvSurfaceConfig,
@@ -43,7 +29,6 @@ import {
   updateAssetVariantUvConfig,
   type AssetVariantUvConfig,
   type AssetVariantUvProjectionAxis,
-  type AssetVariantUvSurfaceConfig,
 } from '@/lib/asset-variant-render-config'
 import { inferCadImportDefaults } from '@/lib/asset-cad-import-defaults'
 import type { NodePositionOffset, NodeRotationState } from '@/lib/3d/engine'
@@ -54,7 +39,6 @@ import {
   getStandardConnectionRoleDefinitions,
   mergeConnectionRoleDefinitions,
   normalizeConnectionRoles,
-  resolveConnectionRoleLabel,
   type ConnectionRoleDefinition,
 } from '@/lib/open-product/connection-role-catalog'
 import { buildManualAssemblyLaunchHref } from '@/lib/open-product/manual-assembly-launch'
@@ -64,7 +48,6 @@ import {
 } from '@/lib/open-product/asset-variant-uv'
 import { calculateEstimatedCost } from '@/lib/open-product/substrate-rules'
 import { canOperateDesignWorkspace as canOperateDesignWorkspaceForUser } from '@/lib/role-scope'
-import { cn } from '@/lib/utils'
 import {
   createAssetFamily,
   createAssetVariantWithSimilarity,
@@ -80,18 +63,12 @@ import {
   uploadModelFile,
 } from '@/lib/open-product/platform-api'
 import { parseZipFile } from '@/lib/zip-parser'
-import { ModelUploader } from '@/components/upload/ModelUploader'
-import type { MaterialDTO } from '@/server/services'
-import type { MaterialCategoryDTO } from '@/server/services'
 import type {
   AssetCadImportResult,
   AssetFamilyDTO,
   AssetOperationProgressDTO,
-  AssetSeriesDTO,
   SimilarAssetVariantCandidateDTO,
   AssetVariantDTO,
-  SubstrateDTO,
-  SubstrateDictionaryBundleDTO,
 } from '@/server/services'
 
 // ---- 从拆分模块导入 ----
@@ -99,9 +76,7 @@ import type {
 import type {
   AssetCenterClientProps,
   AssetTypeFilter,
-  CadImportFieldErrors,
   CadImportForm,
-  ImportableAssetType,
   PreviewNodeOffsetMap,
   PreviewNodeRotationMap,
   PreviewNodeTransformState,
@@ -109,32 +84,16 @@ import type {
   ReviewVisibilityFilter,
   VariantForm,
   VariantUvEditorFormState,
-  Vector3Tuple,
 } from './asset-center-types'
 import {
   ASSET_CENTER_GIZMO_AXIS_COLORS,
   ASSET_CENTER_SELECTED_SERIES_STORAGE_KEY,
-  UV_PROJECTION_AXIS_OPTIONS,
-  VARIANT_SAVE_PROGRESS_STEPS,
-  compactRowActionClassName,
-  compactRowDangerActionClassName,
-  compactRowDangerStatusClassName,
-  compactRowIconActionClassName,
-  compactRowNeutralStatusClassName,
-  compactRowPrimaryActionClassName,
-  compactRowSuccessStatusClassName,
-  compactRowWarningStatusClassName,
   emptyCadImportForm,
   emptyVariantForm,
-  variantInlineCreateButtonClassName,
-  variantInlineImportButtonClassName,
 } from './asset-center-types'
 import {
-  arePreviewNodeOffsetMapsEqual,
-  arePreviewNodeRotationMapsEqual,
   arePreviewNodeTransformStatesEqual,
   buildAssetVariantHoleOverlayState,
-  buildCadImportChecklist,
   buildCadImportFieldErrors,
   buildVariantIdentityPrefix,
   canReviewAssets,
@@ -145,14 +104,11 @@ import {
   createVariantUvEditorFormState,
   familyBelongsToSeries,
   familyVisibleInSeriesContext,
-  getCompactStatusClassName,
   getSimilarityConfidenceLabel,
   getSimilarityConfidenceTone,
-  getStatusLabel,
   getVisibleFamiliesForTab,
   isEditableElement,
   isImportableAssetType,
-  isObjectRecord,
   isPackagingMaterialLibraryFamily,
   matchesRedoShortcut,
   matchesReviewVisibilityFilter,
@@ -160,11 +116,6 @@ import {
   normalizeCadImportResult,
   normalizeSimilarCandidates,
   parseVariantUvEditorFormState,
-  readNumberValue,
-  readRecordArray,
-  readStringValue,
-  readVector3Tuple,
-  shouldShowCompactStatus,
   sortByName,
   splitConnectionRoles,
   toNumberRecord,
@@ -177,6 +128,7 @@ import { FamilyEditModal } from './FamilyEditModal'
 import { CadImportModal } from './CadImportModal'
 import { FamilyListPanel } from './FamilyListPanel'
 import { SubstrateSubmenu, UvSettingsSubmenu } from './PreviewSubmenus'
+import { AssetCenterSidebarControls } from './AssetCenterSidebarControls'
 
 // ---- 主组件内的渲染辅助函数 ----
 
@@ -192,85 +144,6 @@ function buildInitialVariantSaveProgress(isDuplicateVariantMode: boolean): Asset
   }
 }
 
-function renderVariantSaveProgress(progress: AssetOperationProgressDTO) {
-  const normalizedProgress = Math.max(0, Math.min(100, progress.progress))
-  const currentIndex = VARIANT_SAVE_PROGRESS_STEPS.findIndex((item) => item.step === progress.step)
-  const completedIndex =
-    progress.status === 'completed'
-      ? VARIANT_SAVE_PROGRESS_STEPS.length - 1
-      : Math.max(0, currentIndex)
-
-  return (
-    <div
-      role="status"
-      aria-live="polite"
-      className="rounded-md border border-[var(--obs-shell-border)] bg-white px-4 py-3 shadow-[0_1px_2px_rgba(15,23,42,0.04)]"
-    >
-      <div className="flex items-start justify-between gap-4">
-        <div className="min-w-0">
-          <p className="text-sm font-apple-medium text-[var(--obs-shell-text)]">
-            {progress.title}
-          </p>
-          <p className="mt-1 text-xs leading-5 text-[var(--obs-shell-muted)]">
-            {progress.detail}
-          </p>
-        </div>
-        <span className="shrink-0 text-xs font-apple-medium tabular-nums text-[var(--obs-shell-muted)]">
-          {normalizedProgress}%
-        </span>
-      </div>
-      <div
-        role="progressbar"
-        aria-valuemin={0}
-        aria-valuemax={100}
-        aria-valuenow={normalizedProgress}
-        className="mt-3 h-1.5 overflow-hidden rounded-full bg-[#eceff1]"
-      >
-        <div
-          className={cn(
-            'h-full rounded-full transition-all duration-500 ease-out',
-            progress.status === 'failed' ? 'bg-[var(--obs-shell-danger)]' : 'bg-[#3f4749]',
-          )}
-          style={{ width: `${normalizedProgress}%` }}
-        />
-      </div>
-      <div className="mt-3 grid grid-cols-3 gap-2 text-[11px] leading-4 sm:grid-cols-6">
-        {VARIANT_SAVE_PROGRESS_STEPS.map((item, index) => {
-          const isCurrent = item.step === progress.step
-          const isDone = progress.status === 'completed' || index < completedIndex
-          return (
-            <span
-              key={item.step}
-              className={cn(
-                'truncate rounded-sm px-2 py-1 text-center',
-                isCurrent
-                  ? 'bg-[#edf0f1] font-apple-medium text-[var(--obs-shell-text)]'
-                  : isDone
-                    ? 'text-[var(--obs-shell-text)]'
-                    : 'text-[var(--obs-shell-muted)]',
-              )}
-            >
-              {item.label}
-            </span>
-          )
-        })}
-      </div>
-    </div>
-  )
-}
-
-function renderCompactStatus(status: string, testId?: string) {
-  if (!shouldShowCompactStatus(status)) {
-    return null
-  }
-
-  return (
-    <span data-testid={testId} className={getCompactStatusClassName(status)}>
-      {getStatusLabel(status)}
-    </span>
-  )
-}
-
 const TYPE_TABS: { type: AssetTypeFilter; label: string; icon: React.ReactNode }[] = [
   { type: 'BOARD', label: '板材', icon: <Layers3 className="h-3.5 w-3.5" /> },
   { type: 'COMPONENT', label: '组件', icon: <Shapes className="h-3.5 w-3.5" /> },
@@ -288,7 +161,7 @@ export default function AssetCenterClient({
   initialAssetSeries,
   finishes: initialFinishes,
   materialCategories: _initialMaterialCategories,
-  metrics,
+  metrics: _metrics,
   user,
 }: AssetCenterClientProps) {
   // Toast
@@ -297,7 +170,7 @@ export default function AssetCenterClient({
   // 数据状态
   const [families, setFamilies] = useState(sortByName(initialFamilies))
   const [variants, setVariants] = useState(() => normalizeAssetVariantsWithUv(initialVariants))
-  const [substrates, setSubstrates] = useState(sortByName(initialSubstrates))
+  const [substrates] = useState(sortByName(initialSubstrates))
   const finishes = initialFinishes
   const [selectedVariantId, setSelectedVariantId] = useState<string | null>(null)
   const [submitting, setSubmitting] = useState(false)
@@ -366,14 +239,13 @@ export default function AssetCenterClient({
     similarityNotice: string | null
   } | null>(null)
   const [cadImportParsing, setCadImportParsing] = useState(false)
-  const [cadImportDerivedDimensions, setCadImportDerivedDimensions] = useState<Record<string, number>>({})
   const [autoInferredFields, setAutoInferredFields] = useState<Set<string>>(new Set())
   const [previewNodeNames, setPreviewNodeNames] = useState<string[]>([])
   const [selectedPreviewNodeName, setSelectedPreviewNodeName] = useState<string | null>(null)
   const [previewNodeOffsetMap, setPreviewNodeOffsetMap] = useState<PreviewNodeOffsetMap>({})
   const [previewNodeRotationMap, setPreviewNodeRotationMap] = useState<PreviewNodeRotationMap>({})
-  const [previewNodeTransformUndoStack, setPreviewNodeTransformUndoStack] = useState<PreviewNodeTransformState[]>([])
-  const [previewNodeTransformRedoStack, setPreviewNodeTransformRedoStack] = useState<PreviewNodeTransformState[]>([])
+  const [, setPreviewNodeTransformUndoStack] = useState<PreviewNodeTransformState[]>([])
+  const [, setPreviewNodeTransformRedoStack] = useState<PreviewNodeTransformState[]>([])
   const [gizmoMode, setGizmoMode] = useState<'translate' | 'rotate'>('translate')
   const [previewContextMenuState, setPreviewContextMenuState] = useState<{
     visible: boolean
@@ -799,25 +671,6 @@ export default function AssetCenterClient({
     [selectedCadSubstrate],
   )
 
-  const cadImportEstimatedCostPrice = useMemo(
-    () =>
-      calculateEstimatedCost({
-        lengthMm:
-          typeof cadImportDerivedDimensions.length === 'number'
-            ? cadImportDerivedDimensions.length
-            : null,
-        widthMm:
-          typeof cadImportDerivedDimensions.width === 'number'
-            ? cadImportDerivedDimensions.width
-            : null,
-        sheetLengthMm: selectedCadSubstrate?.sheetLengthMm,
-        sheetWidthMm: selectedCadSubstrate?.sheetWidthMm,
-        suggestedPrice: selectedCadSubstrate?.suggestedPrice,
-        lossFactor: toOptionalNumber(cadImportForm.lossFactor),
-      }),
-    [cadImportDerivedDimensions, selectedCadSubstrate, cadImportForm.lossFactor],
-  )
-
   const cadImportConnectionRoles = useMemo(
     () => splitConnectionRoles(cadImportForm.connectionRoles),
     [cadImportForm.connectionRoles],
@@ -832,11 +685,6 @@ export default function AssetCenterClient({
     [cadImportForm, selectedSeriesId],
   )
 
-  const cadImportChecklist = useMemo(
-    () => buildCadImportChecklist(cadImportForm.assetType),
-    [cadImportForm.assetType],
-  )
-
   function getVariantsForFamily(
     familyId: string,
     filter: ReviewVisibilityFilter = 'ALL',
@@ -875,11 +723,11 @@ export default function AssetCenterClient({
       ...nextForm,
       familyMode: 'existing',
       familyId: family.id,
+      variantName: buildVariantIdentityPrefix(family.code),
     })
     setCadImportSubmitAttempted(false)
     setCadImportResult(null)
     setAutoInferredFields(new Set())
-    setCadImportDerivedDimensions({})
     setCadImportModalOpen(true)
   }
 
@@ -887,7 +735,6 @@ export default function AssetCenterClient({
     setCadImportModalOpen(false)
     setCadImportSubmitAttempted(false)
     setCadImportResult(null)
-    setCadImportDerivedDimensions({})
   }
 
   function prepareNextCadImport() {
@@ -899,7 +746,6 @@ export default function AssetCenterClient({
     setCadImportSubmitAttempted(false)
     setCadImportResult(null)
     setAutoInferredFields(new Set())
-    setCadImportDerivedDimensions({})
   }
 
   function openSimilarityModal(params: {
@@ -980,18 +826,8 @@ export default function AssetCenterClient({
             : current.variantName,
         }
       })
-      setCadImportDerivedDimensions(
-        cadExportData.panels?.[0]
-          ? {
-              length: cadExportData.panels[0].size?.[0] ?? 0,
-              width: cadExportData.panels[0].size?.[1] ?? 0,
-              thickness: cadExportData.panels[0].size?.[2] ?? 0,
-            }
-          : {},
-      )
     } catch (error) {
       toast.warning(error instanceof Error ? error.message : '未能自动读取 ZIP 命名建议')
-      setCadImportDerivedDimensions({})
     } finally {
       setCadImportParsing(false)
     }
@@ -1241,13 +1077,13 @@ export default function AssetCenterClient({
     setVariantModalOpen(true)
   }
 
-  function openDuplicateVariantModal(
+  const openDuplicateVariantModal = useCallback((
     variant: AssetVariantDTO,
     draft?: {
       substrateId?: string | null
       uvConfig?: AssetVariantUvConfig | null
     },
-  ) {
+  ) => {
     if (!canOperateDesignWorkspace) {
       showReadOnlyWarning()
       return
@@ -1282,7 +1118,7 @@ export default function AssetCenterClient({
       includeLegConnectorRole: false,
     })
     setVariantModalOpen(true)
-  }
+  }, [canOperateDesignWorkspace, showReadOnlyWarning])
 
   function openEditVariantModal(variant: AssetVariantDTO) {
     if (!canOperateDesignWorkspace) {
@@ -1738,6 +1574,7 @@ export default function AssetCenterClient({
     draftVariantUvConfig,
     refreshVariantThumbnailAfterUpdate,
     hasPendingVariantDraft,
+    openDuplicateVariantModal,
     selectedVariant,
     showReadOnlyWarning,
     toast,
@@ -2577,235 +2414,36 @@ export default function AssetCenterClient({
         </section>
 
         <aside className="flex h-full min-h-0 w-[480px] shrink-0 flex-col overflow-hidden bg-white shadow-[-10px_0_40px_rgba(0,0,0,0.03)]">
-          <div className="shrink-0 space-y-4 border-b border-black/[0.03] bg-white p-5">
-            <div className="flex items-center justify-between">
-              <Link
-                href="/asset-center/material-library"
-                aria-label="去基础资料库补录"
-                className="flex items-center gap-2 text-[10px] font-black uppercase tracking-[0.12em] text-[#2d3335] transition-opacity hover:opacity-70"
-              >
-                <SwatchBook className="h-3.5 w-3.5" />
-                <span>进入</span>
-                <span>基础资料库</span>
-                <ChevronRight className="h-3 w-3" />
-              </Link>
-              <span className="rounded-[4px] bg-black/[0.03] px-2 py-1 font-mono text-[9px] font-bold text-[#5a6062]/45">
-                V2.6.4
-              </span>
-            </div>
-          {/* 系列入口 */}
-          <div className="relative space-y-2" ref={seriesPickerRef}>
-            <div className="flex items-center justify-between">
-              <span className="text-[10px] font-black uppercase tracking-[0.14em] text-[#5a6062]/55">
-                系列
-              </span>
-              <span className="text-[10px] font-bold text-[#5a6062]/45">
-                共 {initialAssetSeries.length} 个
-              </span>
-            </div>
-            <button
-              type="button"
-              aria-haspopup="listbox"
-              aria-expanded={seriesPickerOpen}
-              onClick={() => setSeriesPickerOpen((open) => !open)}
-              className="flex h-10 w-full items-center justify-between gap-3 rounded-[6px] bg-black/[0.025] px-3 text-left text-[#2d3335] ring-1 ring-black/[0.04] transition hover:bg-black/[0.04] focus:outline-none focus:ring-black/[0.12]"
-            >
-              <span className="min-w-0 flex-1">
-                <span className="block truncate text-xs font-bold">
-                  {selectedSeries?.name ?? '请选择系列'}
-                </span>
-                <span className="mt-0.5 block truncate font-mono text-[9px] font-bold uppercase tracking-[0.08em] text-[#5a6062]/45">
-                  {selectedSeries?.code ?? 'NO-SERIES'}
-                </span>
-              </span>
-              <span className="flex shrink-0 items-center gap-2">
-                <span className="rounded-[4px] bg-white px-1.5 py-0.5 text-[9px] font-bold leading-none text-[#5a6062]/60 ring-1 ring-black/[0.04]">
-                  {selectedSeriesAssetCount}
-                </span>
-                <ChevronDown
-                  className={cn(
-                    'h-3.5 w-3.5 text-[#5a6062]/55 transition',
-                    seriesPickerOpen && 'rotate-180 text-[#2d3335]',
-                  )}
-                />
-              </span>
-            </button>
-
-            {seriesPickerOpen && (
-              <div className="absolute left-0 right-0 top-full z-30 mt-1.5 overflow-hidden rounded-[8px] border border-black/[0.06] bg-white shadow-[0_16px_40px_rgba(15,23,42,0.12)]">
-                <div className="border-b border-black/[0.04] p-2">
-                  <div className="relative">
-                    <Search className="absolute left-2.5 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/35" />
-                    <input
-                      value={seriesSearchText}
-                      onChange={(event) => setSeriesSearchText(event.target.value)}
-                      placeholder="搜索系列名称或编码"
-                      className="h-8 w-full rounded-[6px] bg-black/[0.025] pl-8 pr-2 text-xs text-[#2d3335] outline-none ring-1 ring-black/[0.04] placeholder:text-[#5a6062]/38 focus:bg-white focus:ring-black/[0.12]"
-                    />
-                  </div>
-                </div>
-                <div role="listbox" className="max-h-64 overflow-y-auto p-1">
-                  {filteredAssetSeries.length > 0 ? (
-                    filteredAssetSeries.map((series) => {
-                      const active = selectedSeriesId === series.id
-                      const count = seriesAssetCounts.get(series.id) ?? 0
-                      return (
-                        <button
-                          key={series.id}
-                          type="button"
-                          role="option"
-                          aria-selected={active}
-                          onClick={() => handleSelectSeries(series.id)}
-                          className={cn(
-                            'flex min-h-9 w-full items-center justify-between gap-3 rounded-[6px] px-2.5 py-2 text-left transition',
-                            active
-                              ? 'bg-[#2d3335] text-white'
-                              : 'text-[#2d3335] hover:bg-black/[0.035]',
-                          )}
-                        >
-                          <span className="min-w-0 flex-1">
-                            <span className="block truncate text-xs font-bold">{series.name}</span>
-                            <span
-                              className={cn(
-                                'mt-0.5 block truncate font-mono text-[9px] font-bold uppercase tracking-[0.08em]',
-                                active ? 'text-white/55' : 'text-[#5a6062]/42',
-                              )}
-                            >
-                              {series.code}
-                            </span>
-                          </span>
-                          <span
-                            className={cn(
-                              'shrink-0 rounded-[4px] px-1.5 py-0.5 text-[9px] font-bold leading-none',
-                              active ? 'bg-white/15 text-white' : 'bg-black/[0.04] text-[#5a6062]/60',
-                            )}
-                          >
-                            {count}
-                          </span>
-                        </button>
-                      )
-                    })
-                  ) : (
-                    <div className="px-3 py-5 text-center text-xs text-[#5a6062]/50">
-                      没有匹配的系列
-                    </div>
-                  )}
-                </div>
-              </div>
-            )}
-          </div>
-
-          {/* 分类 Tab */}
-          <div className="flex rounded-[6px] bg-black/[0.03] p-0.5 ring-1 ring-black/5">
-            {TYPE_TABS.map((tab) => {
-              const count = getVisibleFamiliesForTab(currentSeriesFamilies, tab.type).length
-              const isActive = activeTab === tab.type
-              return (
-                <button
-                  key={tab.type}
-                  type="button"
-                  onClick={() => {
-                    setActiveTab(tab.type)
-                    setSearchText('')
-                  }}
-                  className={cn(
-                    'flex h-8 min-w-0 flex-1 items-center justify-center gap-1.5 rounded-[4px] px-1.5 text-[10px] font-bold transition-all duration-200',
-                    isActive
-                      ? 'bg-white text-[#2d3335] shadow-sm'
-                      : 'text-[#5a6062]/40 hover:text-[#2d3335] hover:opacity-100',
-                  )}
-                >
-                  <span className="flex h-3.5 w-3.5 shrink-0 items-center justify-center">{tab.icon}</span>
-                  <span className="shrink-0 whitespace-nowrap leading-none">{tab.label}</span>
-                  {count > 0 && (
-                    <span className={cn(
-                      'shrink-0 rounded-full px-1.5 py-0.5 text-[8px] leading-none',
-                      isActive ? 'bg-[#2d3335] text-white' : 'bg-black/[0.04] text-[#5a6062]/60',
-                    )}>
-                      {count}
-                    </span>
-                  )}
-                </button>
-              )
-            })}
-          </div>
-
-          {/* 搜索 + 新建 */}
-          <div className="flex items-center gap-2">
-            <div className="group relative min-w-0 flex-1">
-              <Search className="absolute left-3 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/30 transition group-focus-within:text-[#2d3335]" />
-              <input
-                type="text"
-                value={searchText}
-                onChange={(e) => setSearchText(e.target.value)}
-                placeholder="搜索资产族名称或编码..."
-                className="h-9 w-full rounded-md border-none bg-black/[0.03] pl-9 pr-3 text-xs text-[#2d3335] outline-none transition-all placeholder:text-[#5a6062]/45 focus:bg-white focus:ring-1 focus:ring-black/10"
-              />
-              {searchText && (
-                <button
-                  type="button"
-                  onClick={() => setSearchText('')}
-                  className="absolute right-2 top-1/2 -translate-y-1/2 rounded-[4px] p-0.5 text-[#5a6062] hover:bg-black/[0.05] hover:text-[#2d3335]"
-                >
-                  <X className="h-3.5 w-3.5" />
-                </button>
-              )}
-            </div>
-            <div className="flex shrink-0 items-center gap-0.5 rounded-[6px] bg-black/[0.025] p-0.5 ring-1 ring-black/[0.025]">
-              {[
-                { value: 'ALL' as const, label: '全部', count: reviewFilterCounts.ALL, ariaLabel: '查看全部资产' },
-                {
-                  value: 'PENDING_REVIEW' as const,
-                  label: '待审',
-                  count: reviewFilterCounts.PENDING_REVIEW,
-                  ariaLabel: '只看待审核',
-                },
-                {
-                  value: 'REJECTED' as const,
-                  label: '驳回',
-                  count: reviewFilterCounts.REJECTED,
-                  ariaLabel: '只看已驳回',
-                },
-              ].map((option) => {
-                const active = reviewFilter === option.value
-                return (
-                  <button
-                    key={option.value}
-                    type="button"
-                    aria-label={option.ariaLabel}
-                    aria-pressed={active}
-                    onClick={() => setReviewFilter(option.value)}
-                    className={cn(
-                      'flex h-8 items-center gap-1 rounded-[4px] px-2 text-[10px] font-bold transition',
-                      active
-                        ? 'bg-white text-[#2d3335] shadow-sm'
-                        : 'text-[#5a6062]/45 hover:text-[#2d3335]',
-                    )}
-                  >
-                    <span>{option.label}</span>
-                    {option.count > 0 ? (
-                      <span className="rounded-[4px] bg-black/[0.04] px-1 py-0.5 text-[9px] leading-none text-[#5a6062]/60">
-                        {option.count}
-                      </span>
-                    ) : null}
-                  </button>
-                )
-              })}
-            </div>
-            <Button
-              variant="filled"
-              size="small"
-              ariaLabel="新建资产族"
-              onClick={openCreateFamilyModal}
-              disabled={!selectedSeries || !canOperateDesignWorkspace}
-              className="h-9 w-9 rounded-lg p-0 active:scale-90"
-            >
-              <Plus className="h-4 w-4" />
-              <span className="sr-only">新建资产族</span>
-            </Button>
-          </div>
-
-          </div>
+          <AssetCenterSidebarControls
+            assetSeries={initialAssetSeries}
+            selectedSeries={selectedSeries}
+            selectedSeriesId={selectedSeriesId}
+            selectedSeriesAssetCount={selectedSeriesAssetCount}
+            seriesAssetCounts={seriesAssetCounts}
+            filteredAssetSeries={filteredAssetSeries}
+            seriesSearchText={seriesSearchText}
+            seriesPickerOpen={seriesPickerOpen}
+            seriesPickerRef={seriesPickerRef}
+            typeTabs={TYPE_TABS.map((tab) => ({
+              ...tab,
+              count: getVisibleFamiliesForTab(currentSeriesFamilies, tab.type).length,
+            }))}
+            activeTab={activeTab}
+            searchText={searchText}
+            reviewFilter={reviewFilter}
+            reviewFilterCounts={reviewFilterCounts}
+            canCreateFamily={Boolean(selectedSeries && canOperateDesignWorkspace)}
+            onSeriesPickerOpenChange={setSeriesPickerOpen}
+            onSeriesSearchTextChange={setSeriesSearchText}
+            onSelectSeries={handleSelectSeries}
+            onSelectTab={(type) => {
+              setActiveTab(type)
+              setSearchText('')
+            }}
+            onSearchTextChange={setSearchText}
+            onReviewFilterChange={setReviewFilter}
+            onCreateFamily={openCreateFamilyModal}
+          />
 
           {/* 资产族列表 */}
           <div className="min-h-0 flex-1 overflow-y-auto overscroll-contain bg-[#fdfdfd]">
@@ -2856,7 +2494,6 @@ export default function AssetCenterClient({
             ) : (
               <FamilyListPanel
                 families={currentFamilies}
-                variantsByFamilyId={variantsByFamilyId}
                 selectedVariantId={selectedVariantId}
                 expandedFamilyIds={expandedFamilyIds}
                 assemblySelectedFamilyIds={assemblySelectedFamilyIds}
@@ -2995,7 +2632,6 @@ export default function AssetCenterClient({
         onInherit={applyInheritedVariant}
         onUploadModel={uploadModelFile}
         onUploadError={(err) => toast.error(err.message)}
-        renderProgress={renderVariantSaveProgress}
       />
 
       <FamilyEditModal
diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterClient.workflow.test.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterClient.workflow.test.tsx
index af2357ad..06e74c75 100644
--- a/furniture-3d-system/src/app/asset-center/AssetCenterClient.workflow.test.tsx
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterClient.workflow.test.tsx
@@ -349,7 +349,7 @@ describe('AssetCenterClient workflow', () => {
     await actor.click(screen.getByText('桌面板资产族'))
     await actor.click(screen.getByRole('button', { name: 'CAD 导入到该资产族' }))
     expect(screen.getByText('导入 CAD 规格款 · 板材')).toBeInTheDocument()
-    expect(screen.getByPlaceholderText('BOARD-VARIANT-001')).toHaveValue('BOARD-001-')
+    expect(screen.getByText('系统自动生成')).toBeInTheDocument()
     expect(screen.getByPlaceholderText('例如 桌面板 1200 / 方管桌腿 / 十字连接件')).toHaveValue('BOARD-001-')
     expect(screen.getByTestId('cad-import-target-family')).toHaveStyle({
       backgroundColor: 'var(--obs-shell-surface-bg)',
diff --git a/furniture-3d-system/src/app/asset-center/AssetCenterSidebarControls.tsx b/furniture-3d-system/src/app/asset-center/AssetCenterSidebarControls.tsx
new file mode 100644
index 00000000..8c8fdb8c
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/AssetCenterSidebarControls.tsx
@@ -0,0 +1,287 @@
+'use client'
+
+import Link from 'next/link'
+import { ChevronDown, ChevronRight, Plus, Search, SwatchBook, X } from 'lucide-react'
+import Button from '@/components/ui/Button'
+import { cn } from '@/lib/utils'
+import type { AssetFamilyDTO, AssetSeriesDTO } from '@/server/services'
+import type { AssetTypeFilter, ReviewVisibilityFilter } from './asset-center-types'
+
+interface AssetCenterSidebarTypeTab {
+  type: AssetTypeFilter
+  label: string
+  icon: React.ReactNode
+  count: number
+}
+
+interface AssetCenterSidebarControlsProps {
+  assetSeries: AssetSeriesDTO[]
+  selectedSeries: AssetSeriesDTO | null
+  selectedSeriesId: string | null
+  selectedSeriesAssetCount: number
+  seriesAssetCounts: Map<string, number>
+  filteredAssetSeries: AssetSeriesDTO[]
+  seriesSearchText: string
+  seriesPickerOpen: boolean
+  seriesPickerRef: React.RefObject<HTMLDivElement | null>
+  typeTabs: AssetCenterSidebarTypeTab[]
+  activeTab: AssetTypeFilter
+  searchText: string
+  reviewFilter: ReviewVisibilityFilter
+  reviewFilterCounts: Record<ReviewVisibilityFilter, number>
+  canCreateFamily: boolean
+  onSeriesPickerOpenChange: (updater: (open: boolean) => boolean) => void
+  onSeriesSearchTextChange: (text: string) => void
+  onSelectSeries: (seriesId: string) => void
+  onSelectTab: (type: AssetFamilyDTO['type']) => void
+  onSearchTextChange: (text: string) => void
+  onReviewFilterChange: (filter: ReviewVisibilityFilter) => void
+  onCreateFamily: () => void
+}
+
+const REVIEW_FILTER_OPTIONS: Array<{
+  value: ReviewVisibilityFilter
+  label: string
+  ariaLabel: string
+}> = [
+  { value: 'ALL', label: '全部', ariaLabel: '查看全部资产' },
+  { value: 'PENDING_REVIEW', label: '待审', ariaLabel: '只看待审核' },
+  { value: 'REJECTED', label: '驳回', ariaLabel: '只看已驳回' },
+]
+
+export function AssetCenterSidebarControls({
+  assetSeries,
+  selectedSeries,
+  selectedSeriesId,
+  selectedSeriesAssetCount,
+  seriesAssetCounts,
+  filteredAssetSeries,
+  seriesSearchText,
+  seriesPickerOpen,
+  seriesPickerRef,
+  typeTabs,
+  activeTab,
+  searchText,
+  reviewFilter,
+  reviewFilterCounts,
+  canCreateFamily,
+  onSeriesPickerOpenChange,
+  onSeriesSearchTextChange,
+  onSelectSeries,
+  onSelectTab,
+  onSearchTextChange,
+  onReviewFilterChange,
+  onCreateFamily,
+}: AssetCenterSidebarControlsProps) {
+  return (
+    <div className="shrink-0 space-y-4 border-b border-black/[0.03] bg-white p-5">
+      <div className="flex items-center justify-between">
+        <Link
+          href="/asset-center/material-library"
+          aria-label="去基础资料库补录"
+          className="flex items-center gap-2 text-[10px] font-black uppercase tracking-[0.12em] text-[#2d3335] transition-opacity hover:opacity-70"
+        >
+          <SwatchBook className="h-3.5 w-3.5" />
+          <span>进入</span>
+          <span>基础资料库</span>
+          <ChevronRight className="h-3 w-3" />
+        </Link>
+        <span className="rounded-[4px] bg-black/[0.03] px-2 py-1 font-mono text-[9px] font-bold text-[#5a6062]/45">
+          V2.6.4
+        </span>
+      </div>
+
+      <div className="relative space-y-2" ref={seriesPickerRef}>
+        <div className="flex items-center justify-between">
+          <span className="text-[10px] font-black uppercase tracking-[0.14em] text-[#5a6062]/55">
+            系列
+          </span>
+          <span className="text-[10px] font-bold text-[#5a6062]/45">
+            共 {assetSeries.length} 个
+          </span>
+        </div>
+        <button
+          type="button"
+          aria-haspopup="listbox"
+          aria-expanded={seriesPickerOpen}
+          onClick={() => onSeriesPickerOpenChange((open) => !open)}
+          className="flex h-10 w-full items-center justify-between gap-3 rounded-[6px] bg-black/[0.025] px-3 text-left text-[#2d3335] ring-1 ring-black/[0.04] transition hover:bg-black/[0.04] focus:outline-none focus:ring-black/[0.12]"
+        >
+          <span className="min-w-0 flex-1">
+            <span className="block truncate text-xs font-bold">
+              {selectedSeries?.name ?? '请选择系列'}
+            </span>
+            <span className="mt-0.5 block truncate font-mono text-[9px] font-bold uppercase tracking-[0.08em] text-[#5a6062]/45">
+              {selectedSeries?.code ?? 'NO-SERIES'}
+            </span>
+          </span>
+          <span className="flex shrink-0 items-center gap-2">
+            <span className="rounded-[4px] bg-white px-1.5 py-0.5 text-[9px] font-bold leading-none text-[#5a6062]/60 ring-1 ring-black/[0.04]">
+              {selectedSeriesAssetCount}
+            </span>
+            <ChevronDown
+              className={cn(
+                'h-3.5 w-3.5 text-[#5a6062]/55 transition',
+                seriesPickerOpen && 'rotate-180 text-[#2d3335]',
+              )}
+            />
+          </span>
+        </button>
+
+        {seriesPickerOpen && (
+          <div className="absolute left-0 right-0 top-full z-30 mt-1.5 overflow-hidden rounded-[8px] border border-black/[0.06] bg-white shadow-[0_16px_40px_rgba(15,23,42,0.12)]">
+            <div className="border-b border-black/[0.04] p-2">
+              <div className="relative">
+                <Search className="absolute left-2.5 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/35" />
+                <input
+                  value={seriesSearchText}
+                  onChange={(event) => onSeriesSearchTextChange(event.target.value)}
+                  placeholder="搜索系列名称或编码"
+                  className="h-8 w-full rounded-[6px] bg-black/[0.025] pl-8 pr-2 text-xs text-[#2d3335] outline-none ring-1 ring-black/[0.04] placeholder:text-[#5a6062]/38 focus:bg-white focus:ring-black/[0.12]"
+                />
+              </div>
+            </div>
+            <div role="listbox" className="max-h-64 overflow-y-auto p-1">
+              {filteredAssetSeries.length > 0 ? (
+                filteredAssetSeries.map((series) => {
+                  const active = selectedSeriesId === series.id
+                  const count = seriesAssetCounts.get(series.id) ?? 0
+                  return (
+                    <button
+                      key={series.id}
+                      type="button"
+                      role="option"
+                      aria-selected={active}
+                      onClick={() => onSelectSeries(series.id)}
+                      className={cn(
+                        'flex min-h-9 w-full items-center justify-between gap-3 rounded-[6px] px-2.5 py-2 text-left transition',
+                        active
+                          ? 'bg-[#2d3335] text-white'
+                          : 'text-[#2d3335] hover:bg-black/[0.035]',
+                      )}
+                    >
+                      <span className="min-w-0 flex-1">
+                        <span className="block truncate text-xs font-bold">{series.name}</span>
+                        <span
+                          className={cn(
+                            'mt-0.5 block truncate font-mono text-[9px] font-bold uppercase tracking-[0.08em]',
+                            active ? 'text-white/55' : 'text-[#5a6062]/42',
+                          )}
+                        >
+                          {series.code}
+                        </span>
+                      </span>
+                      <span
+                        className={cn(
+                          'shrink-0 rounded-[4px] px-1.5 py-0.5 text-[9px] font-bold leading-none',
+                          active ? 'bg-white/15 text-white' : 'bg-black/[0.04] text-[#5a6062]/60',
+                        )}
+                      >
+                        {count}
+                      </span>
+                    </button>
+                  )
+                })
+              ) : (
+                <div className="px-3 py-5 text-center text-xs text-[#5a6062]/50">
+                  没有匹配的系列
+                </div>
+              )}
+            </div>
+          </div>
+        )}
+      </div>
+
+      <div className="flex rounded-[6px] bg-black/[0.03] p-0.5 ring-1 ring-black/5">
+        {typeTabs.map((tab) => {
+          const isActive = activeTab === tab.type
+          return (
+            <button
+              key={tab.type}
+              type="button"
+              onClick={() => onSelectTab(tab.type)}
+              className={cn(
+                'flex h-8 min-w-0 flex-1 items-center justify-center gap-1.5 rounded-[4px] px-1.5 text-[10px] font-bold transition-all duration-200',
+                isActive
+                  ? 'bg-white text-[#2d3335] shadow-sm'
+                  : 'text-[#5a6062]/40 hover:text-[#2d3335] hover:opacity-100',
+              )}
+            >
+              <span className="flex h-3.5 w-3.5 shrink-0 items-center justify-center">{tab.icon}</span>
+              <span className="shrink-0 whitespace-nowrap leading-none">{tab.label}</span>
+              {tab.count > 0 && (
+                <span className={cn(
+                  'shrink-0 rounded-full px-1.5 py-0.5 text-[8px] leading-none',
+                  isActive ? 'bg-[#2d3335] text-white' : 'bg-black/[0.04] text-[#5a6062]/60',
+                )}>
+                  {tab.count}
+                </span>
+              )}
+            </button>
+          )
+        })}
+      </div>
+
+      <div className="flex items-center gap-2">
+        <div className="group relative min-w-0 flex-1">
+          <Search className="absolute left-3 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-[#5a6062]/30 transition group-focus-within:text-[#2d3335]" />
+          <input
+            type="text"
+            value={searchText}
+            onChange={(event) => onSearchTextChange(event.target.value)}
+            placeholder="搜索资产族名称或编码..."
+            className="h-9 w-full rounded-md border-none bg-black/[0.03] pl-9 pr-3 text-xs text-[#2d3335] outline-none transition-all placeholder:text-[#5a6062]/45 focus:bg-white focus:ring-1 focus:ring-black/10"
+          />
+          {searchText && (
+            <button
+              type="button"
+              onClick={() => onSearchTextChange('')}
+              className="absolute right-2 top-1/2 -translate-y-1/2 rounded-[4px] p-0.5 text-[#5a6062] hover:bg-black/[0.05] hover:text-[#2d3335]"
+            >
+              <X className="h-3.5 w-3.5" />
+            </button>
+          )}
+        </div>
+        <div className="flex shrink-0 items-center gap-0.5 rounded-[6px] bg-black/[0.025] p-0.5 ring-1 ring-black/[0.025]">
+          {REVIEW_FILTER_OPTIONS.map((option) => {
+            const active = reviewFilter === option.value
+            const count = reviewFilterCounts[option.value]
+            return (
+              <button
+                key={option.value}
+                type="button"
+                aria-label={option.ariaLabel}
+                aria-pressed={active}
+                onClick={() => onReviewFilterChange(option.value)}
+                className={cn(
+                  'flex h-8 items-center gap-1 rounded-[4px] px-2 text-[10px] font-bold transition',
+                  active
+                    ? 'bg-white text-[#2d3335] shadow-sm'
+                    : 'text-[#5a6062]/45 hover:text-[#2d3335]',
+                )}
+              >
+                <span>{option.label}</span>
+                {count > 0 ? (
+                  <span className="rounded-[4px] bg-black/[0.04] px-1 py-0.5 text-[9px] leading-none text-[#5a6062]/60">
+                    {count}
+                  </span>
+                ) : null}
+              </button>
+            )
+          })}
+        </div>
+        <Button
+          variant="filled"
+          size="small"
+          ariaLabel="新建资产族"
+          onClick={onCreateFamily}
+          disabled={!canCreateFamily}
+          className="h-9 w-9 rounded-lg p-0 active:scale-90"
+        >
+          <Plus className="h-4 w-4" />
+          <span className="sr-only">新建资产族</span>
+        </Button>
+      </div>
+    </div>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/CadImportModal.tsx b/furniture-3d-system/src/app/asset-center/CadImportModal.tsx
index 61d22653..eeeca3d8 100644
--- a/furniture-3d-system/src/app/asset-center/CadImportModal.tsx
+++ b/furniture-3d-system/src/app/asset-center/CadImportModal.tsx
@@ -7,9 +7,9 @@ import Input from '@/components/ui/Input'
 import Modal from '@/components/ui/Modal'
 import Select from '@/components/ui/Select'
 import { cn } from '@/lib/utils'
-import type { AssetCadImportResult, AssetFamilyDTO, AssetVariantDTO, SubstrateDTO } from '@/server/services'
-import type { CadImportFieldErrors, CadImportForm, ImportableAssetType } from './asset-center-types'
-import { buildCadImportChecklist } from './asset-center-utils'
+import type { AssetCadImportResult, AssetFamilyDTO, SubstrateDTO } from '@/server/services'
+import type { CadImportFieldErrors, CadImportForm } from './asset-center-types'
+import { buildVariantIdentityPrefix } from './asset-center-utils'
 
 interface CadImportModalProps {
   isOpen: boolean
@@ -54,6 +54,10 @@ export function CadImportModal({
   assetTypeLabel,
   renderSimilarCandidatesBlock,
 }: CadImportModalProps) {
+  const defaultVariantNamePrefix = selectedFamily
+    ? buildVariantIdentityPrefix(selectedFamily.code)
+    : ''
+
   return (
     <Modal
       isOpen={isOpen}
@@ -214,6 +218,11 @@ export function CadImportModal({
                 required
                 value={form.variantName}
                 onChange={(e) => onFormChange((current) => ({ ...current, variantName: e.target.value }))}
+                onFocus={(event) => {
+                  if (defaultVariantNamePrefix && form.variantName === defaultVariantNamePrefix) {
+                    event.currentTarget.select()
+                  }
+                }}
                 placeholder="例如 桌面板 1200 / 方管桌腿 / 十字连接件"
                 errorText={submitAttempted ? fieldErrors.variantName : undefined}
               />
diff --git a/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx b/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx
index f9bd54aa..41a7d78c 100644
--- a/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx
+++ b/furniture-3d-system/src/app/asset-center/FamilyListPanel.tsx
@@ -16,7 +16,6 @@ import { getCompactStatusClassName, getStatusLabel, isImportableAssetType, shoul
 
 interface FamilyListPanelProps {
   families: AssetFamilyDTO[]
-  variantsByFamilyId: Map<string, AssetVariantDTO[]>
   selectedVariantId: string | null
   expandedFamilyIds: Set<string>
   assemblySelectedFamilyIds: Set<string>
@@ -48,7 +47,6 @@ function renderStatus(status: string, testId?: string) {
 
 export function FamilyListPanel({
   families,
-  variantsByFamilyId,
   selectedVariantId,
   expandedFamilyIds,
   assemblySelectedFamilyIds,
diff --git a/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx b/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
index 3de09981..659081fe 100644
--- a/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
+++ b/furniture-3d-system/src/app/asset-center/VariantEditModal.tsx
@@ -8,6 +8,7 @@ import Select from '@/components/ui/Select'
 import { ModelUploader } from '@/components/upload/ModelUploader'
 import type { AssetOperationProgressDTO, AssetVariantDTO, SubstrateDTO } from '@/server/services'
 import type { VariantForm } from './asset-center-types'
+import { VariantSaveProgress } from './VariantSaveProgress'
 
 interface VariantEditModalProps {
   isOpen: boolean
@@ -30,7 +31,6 @@ interface VariantEditModalProps {
   onInherit: (variantId: string) => void
   onUploadModel: (file: File) => Promise<string>
   onUploadError: (error: { message: string }) => void
-  renderProgress: (progress: AssetOperationProgressDTO) => React.ReactNode
 }
 
 export function VariantEditModal({
@@ -54,7 +54,6 @@ export function VariantEditModal({
   onInherit,
   onUploadModel,
   onUploadError,
-  renderProgress,
 }: VariantEditModalProps) {
   return (
     <Modal
@@ -105,7 +104,7 @@ export function VariantEditModal({
       }
     >
       <div className="space-y-4">
-        {variantSaveProgress ? renderProgress(variantSaveProgress) : null}
+        {variantSaveProgress ? <VariantSaveProgress progress={variantSaveProgress} /> : null}
         <div className="grid gap-3 grid-cols-2">
           <Input
             label="编码"
diff --git a/furniture-3d-system/src/app/asset-center/VariantSaveProgress.tsx b/furniture-3d-system/src/app/asset-center/VariantSaveProgress.tsx
new file mode 100644
index 00000000..c157dafd
--- /dev/null
+++ b/furniture-3d-system/src/app/asset-center/VariantSaveProgress.tsx
@@ -0,0 +1,76 @@
+'use client'
+
+import { cn } from '@/lib/utils'
+import type { AssetOperationProgressDTO } from '@/server/services'
+import { VARIANT_SAVE_PROGRESS_STEPS } from './asset-center-types'
+
+interface VariantSaveProgressProps {
+  progress: AssetOperationProgressDTO
+}
+
+export function VariantSaveProgress({ progress }: VariantSaveProgressProps) {
+  const normalizedProgress = Math.max(0, Math.min(100, progress.progress))
+  const currentIndex = VARIANT_SAVE_PROGRESS_STEPS.findIndex((item) => item.step === progress.step)
+  const completedIndex =
+    progress.status === 'completed'
+      ? VARIANT_SAVE_PROGRESS_STEPS.length - 1
+      : Math.max(0, currentIndex)
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="rounded-md border border-[var(--obs-shell-border)] bg-white px-4 py-3 shadow-[0_1px_2px_rgba(15,23,42,0.04)]"
+    >
+      <div className="flex items-start justify-between gap-4">
+        <div className="min-w-0">
+          <p className="text-sm font-apple-medium text-[var(--obs-shell-text)]">
+            {progress.title}
+          </p>
+          <p className="mt-1 text-xs leading-5 text-[var(--obs-shell-muted)]">
+            {progress.detail}
+          </p>
+        </div>
+        <span className="shrink-0 text-xs font-apple-medium tabular-nums text-[var(--obs-shell-muted)]">
+          {normalizedProgress}%
+        </span>
+      </div>
+      <div
+        role="progressbar"
+        aria-valuemin={0}
+        aria-valuemax={100}
+        aria-valuenow={normalizedProgress}
+        className="mt-3 h-1.5 overflow-hidden rounded-full bg-[#eceff1]"
+      >
+        <div
+          className={cn(
+            'h-full rounded-full transition-all duration-500 ease-out',
+            progress.status === 'failed' ? 'bg-[var(--obs-shell-danger)]' : 'bg-[#3f4749]',
+          )}
+          style={{ width: `${normalizedProgress}%` }}
+        />
+      </div>
+      <div className="mt-3 grid grid-cols-3 gap-2 text-[11px] leading-4 sm:grid-cols-6">
+        {VARIANT_SAVE_PROGRESS_STEPS.map((item, index) => {
+          const isCurrent = item.step === progress.step
+          const isDone = progress.status === 'completed' || index < completedIndex
+          return (
+            <span
+              key={item.step}
+              className={cn(
+                'truncate rounded-sm px-2 py-1 text-center',
+                isCurrent
+                  ? 'bg-[#edf0f1] font-apple-medium text-[var(--obs-shell-text)]'
+                  : isDone
+                    ? 'text-[var(--obs-shell-text)]'
+                    : 'text-[var(--obs-shell-muted)]',
+              )}
+            >
+              {item.label}
+            </span>
+          )
+        })}
+      </div>
+    </div>
+  )
+}
diff --git a/furniture-3d-system/src/app/asset-center/asset-center-types.ts b/furniture-3d-system/src/app/asset-center/asset-center-types.ts
index 449c6e16..2504635b 100644
--- a/furniture-3d-system/src/app/asset-center/asset-center-types.ts
+++ b/furniture-3d-system/src/app/asset-center/asset-center-types.ts
@@ -7,14 +7,9 @@ import type {
   MaterialDTO,
   SubstrateDTO,
   SubstrateDictionaryBundleDTO,
-  SimilarAssetVariantCandidateDTO,
-  AssetCadImportResult,
 } from '@/server/services'
 import type { PlatformMetricItem } from '@/components/platform/types'
-import type {
-  AssetVariantUvProjectionAxis,
-  AssetVariantUvSurfaceConfig,
-} from '@/lib/asset-variant-render-config'
+import type { AssetVariantUvProjectionAxis } from '@/lib/asset-variant-render-config'
 
 // ---- Props ----
 

From f0d3f5daae548e80ba3445f755d224c2bcb92464 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 10:57:38 +0800
Subject: [PATCH 07/14] chore(data-foundation): sync xuxiake mainline and
 stabilize master data

---
 furniture-3d-system/.gitignore                |    4 +
 furniture-3d-system/docs/DEPLOYMENT.md        |   25 +-
 .../docs/workflow/生产部署入口说明.md         |    8 +-
 .../包装方案增强/包装方案增强-非程序员操作手册.md |    4 +
 furniture-3d-system/docs/飞牛OS部署指南.md    |    8 +-
 furniture-3d-system/package.json              |   41 +-
 furniture-3d-system/prisma.config.ts          |   18 +-
 .../migration.sql                             |    8 +-
 .../add_packaging_plan/migration.sql          |   20 +-
 furniture-3d-system/prisma/schema.prisma      |  942 +++++++----
 furniture-3d-system/prisma/seed.ts            |   62 +-
 furniture-3d-system/scripts/add-more-skus.ts  |   39 +-
 .../backfill-asset-variant-thumbnails.ts      |   86 +-
 .../scripts/backfill-sku-structural-data.ts   |  140 +-
 .../cleanup-legacy-product-structure.ts       |   72 +-
 .../scripts/create-demo-data.js               |   33 +-
 .../install-employee-directory-sync-timer.sh  |    2 +-
 .../scripts/performance-test.ts               |   28 +-
 .../scripts/seed-open-platform-demo.ts        |   38 +-
 .../scripts/seed-test-products.ts             |   78 +-
 .../scripts/sync-board-material-library.ts    |   82 +-
 .../scripts/sync-employee-directory.ts        |    9 +-
 .../scripts/sync-jst-sku-stock-products.ts    |  116 +-
 .../scripts/sync-standard-finishes.ts         |   75 +-
 .../scripts/update-demo-models.js             |   33 +-
 .../scripts/update-model-urls.ts              |  102 +-
 .../scripts/update-test-data.ts               |   73 +-
 .../app/__tests__/draft-groups-page.test.tsx  |    6 +
 .../src/app/__tests__/intake-page.test.tsx    |  175 +-
 .../app/api/approval-workflows/route.test.ts  |    2 +-
 .../api/intake/non-integrated/[id]/route.ts   |   10 +-
 .../src/app/api/platform/schemas.ts           |   32 +-
 .../src/app/api/trash/products/[id]/route.ts  |   43 +-
 .../src/app/api/trash/skus/[id]/route.ts      |   43 +-
 .../draft-groups/DraftGroupsFormalClient.tsx  |   54 +-
 .../src/app/home-client.types.ts              |    3 +-
 .../src/app/home/home-client.types.ts         |    3 +-
 .../src/app/intake/AccessoryLibraryPanel.tsx  |  148 +-
 .../app/intake/AlphabetLibraryPanel.test.tsx  |  335 +++-
 .../src/app/intake/AlphabetLibraryPanel.tsx   |  166 +-
 .../app/intake/EdgeBandingLibraryPanel.tsx    |  280 +++-
 .../src/app/intake/IntakeClient.test.tsx      |  284 ++--
 .../src/app/intake/IntakeClient.tsx           |  143 +-
 .../intake/PackagingMaterialLibraryPanel.tsx  |    7 +-
 .../app/intake/RawMaterialLibraryPanel.tsx    |   46 +-
 .../app/intake/SpuRuleLibraryWorkspace.tsx    |  144 +-
 .../src/app/intake/SteelFrameLibraryPanel.tsx |  198 ++-
 .../integratedDraftGroupAdapter.test.ts       |  170 +-
 .../integrated/integratedDraftGroupAdapter.ts |   79 +-
 .../integrated/integratedSeriesLoader.test.ts |   17 +
 .../NonIntegratedDetailClient.test.tsx        |  433 ++---
 .../NonIntegratedDetailClient.tsx             |  281 ++--
 .../intake/non-integrated/nonIntegratedApi.ts |   11 +-
 .../non-integrated/nonIntegratedStorage.ts    |   71 +-
 furniture-3d-system/src/app/intake/page.tsx   |   80 +-
 .../src/app/intake/productPatentStorage.ts    |  154 +-
 .../src/app/intake/seriesComponentDetails.ts  |   11 +-
 .../src/app/intake/spuRuleLibraryLogic.ts     |  191 ++-
 .../[id]/ProductDetailClient.workspace.tsx    |   32 +-
 .../src/app/products/[id]/page.tsx            |   79 +-
 .../[id]/product-detail-client.types.ts       |    2 +-
 .../[skuId]/SKUDetailClient.workspace.tsx     |    6 +-
 .../[skuId]/components/SKUReadOnlySidebar.tsx |    9 +-
 .../[skuId]/components/SKUSwitchDrawer.tsx    |    9 +-
 .../app/products/[id]/skus/[skuId]/page.tsx   |   39 +-
 .../skus/[skuId]/sku-detail-client.types.ts   |    6 +-
 .../src/app/share/[token]/SharePageClient.tsx |   44 +-
 .../src/app/share/[token]/page.tsx            |    8 +-
 .../src/app/trash/TrashClient.tsx             |    2 +-
 .../src/app/warehouse/page.tsx                |   32 +-
 .../src/components/products/EditSKUModal.tsx  |  103 +-
 .../src/components/ui/ProductListItem.tsx     |    3 +-
 .../src/lib/__tests__/sku-cad-data.test.ts    |   17 +
 .../src/lib/accessory-library.test.ts         |   30 +
 .../src/lib/accessory-library.ts              |  119 +-
 .../src/lib/edge-banding-library.test.ts      |   29 +
 .../src/lib/edge-banding-library.ts           |  102 +-
 .../lib/non-integrated-bom-steel-materials.ts |    9 +-
 .../__tests__/platform-view.test.ts           |   28 +
 .../src/lib/open-product/asset-coding.ts      |    4 +
 .../src/lib/open-product/platform-view.ts     |   40 +
 .../lib/packaging-material-library.test.ts    |   30 +
 .../src/lib/packaging-material-library.ts     |   82 +-
 furniture-3d-system/src/lib/permissions.ts    |    4 +-
 .../src/lib/planning/parsers.ts               |   41 +-
 furniture-3d-system/src/lib/sku-cad-data.ts   |   30 +
 .../src/lib/steel-frame-library.test.ts       |  100 +-
 .../src/lib/steel-frame-library.ts            |  150 +-
 .../src/server/dto/product.dto.ts             |   82 +-
 furniture-3d-system/src/server/dto/sku.dto.ts |   42 +-
 ...-non-integrated-product.repository.test.ts |  127 ++
 .../__tests__/product.repository.test.ts      |  379 ++++-
 .../repositories/asset-center.repository.ts   |   11 +-
 .../common-component.repository.ts            |    5 +-
 .../repositories/draft-group.repository.ts    |   51 +-
 .../employee-directory.repository.ts          |  142 +-
 .../repositories/feedback.repository.ts       |   35 +-
 .../repositories/hardware.repository.ts       |    5 +-
 ...ntake-non-integrated-product.repository.ts |  195 ++-
 .../src/server/repositories/log.repository.ts |   31 +-
 .../repositories/material.repository.ts       |    5 +-
 .../repositories/planning.repository.ts       |    5 +-
 .../repositories/product-upload.repository.ts |   11 +-
 .../server/repositories/product.repository.ts |  227 +--
 .../server/repositories/share.repository.ts   |    4 +
 .../src/server/repositories/sku.repository.ts |   19 +-
 .../repositories/warehouse.repository.ts      |   20 +-
 .../asset-cad-import.service.test.ts          |   80 +
 .../__tests__/asset-sku-sync.service.test.ts  |  103 +-
 .../__tests__/draft-group.service.test.ts     |  337 +++-
 .../employee-directory-sync.service.test.ts   |   44 +-
 ...ake-non-integrated-product.service.test.ts |  963 ++++++++++-
 ...ntake-non-integrated-scope.service.test.ts |   73 +
 .../services/__tests__/intake.service.test.ts |  653 +++++++-
 .../__tests__/material.service.test.ts        |  145 ++
 .../__tests__/planning.service.test.ts        |  109 +-
 .../product-write.service.permission.test.ts  |   43 +
 .../services/__tests__/share.service.test.ts  |   65 +-
 .../__tests__/sku-command.service.test.ts     |  404 ++++-
 .../__tests__/warehouse.service.test.ts       |  178 +-
 .../services/approval-workflow.service.ts     |  228 ++-
 .../services/asset-cad-import.service.ts      |   16 +-
 .../server/services/asset-center.service.ts   |  111 +-
 .../src/server/services/asset-sku-snapshot.ts |  177 +-
 .../server/services/asset-sku-sync.service.ts |   24 +-
 .../assisted-assembly-ai-render.service.ts    |   44 +-
 .../services/common-component.service.ts      |   23 +-
 .../src/server/services/draft-group.mapper.ts |   63 +-
 .../server/services/draft-group.service.ts    |  197 ++-
 .../services/draft-group.service.types.ts     |   19 +
 .../employee-directory-sync.service.ts        |   57 +-
 .../services/feedback-workflow.helper.ts      |   68 +-
 .../services/feedback-workflow.service.ts     |   90 +-
 .../services/hardware-matcher.runtime.ts      |   16 +-
 .../src/server/services/hardware-write-ops.ts |   62 +-
 .../services/hardware.service.container.ts    |   47 +-
 .../src/server/services/hole-crud.service.ts  |  171 +-
 .../src/server/services/hole.service.types.ts |    4 +-
 .../src/server/services/index.ts              |   16 +
 .../services/intake-contract-docx.service.ts  |    5 +
 ...intake-node-permission-settings.service.ts |   81 +-
 .../intake-non-integrated-product.service.ts  | 1431 ++++++++++++++---
 .../intake-non-integrated-scope.service.ts    |   64 +-
 .../src/server/services/intake.service.ts     |  342 +++-
 .../services/jst-sku-stock-sync.service.ts    |  101 +-
 .../src/server/services/logger.service.ts     |   24 +-
 .../src/server/services/material.service.ts   |   72 +-
 .../open-platform-demo-seed.service.ts        |    3 +-
 .../services/packaging-plan-calculator.ts     |   65 +
 .../src/server/services/packaging.service.ts  |   70 +-
 .../services/panel-validation.service.ts      |  123 ++
 .../src/server/services/panel.service.ts      |   65 +-
 .../services/planning-validation.service.ts   |  114 ++
 .../src/server/services/planning.service.ts   |  122 +-
 .../services/pre-sku-packaging.service.ts     |   22 +-
 .../services/product-cad-upload.service.ts    |   11 +-
 .../services/product-collaborator.service.ts  |   80 +-
 .../services/product-hardware.service.ts      |  108 +-
 .../server/services/product-upload.service.ts |   19 +-
 .../server/services/product-write.service.ts  |   71 +-
 .../services/provider-config.service.ts       |  101 +-
 .../src/server/services/share.service.ts      |   32 +-
 .../server/services/sku-cad-import.helper.ts  |    5 +-
 .../server/services/sku-command.service.ts    |  204 ++-
 .../src/server/services/sku-query.service.ts  |   39 +-
 .../server/services/sku-soft-delete.helper.ts |  204 ++-
 .../src/server/services/sku-upload.service.ts |    3 +-
 .../src/server/services/sku.service.types.ts  |    1 +
 .../server/services/system-config.service.ts  |   56 +-
 .../src/server/services/user.service.ts       |  100 +-
 .../src/server/services/warehouse.service.ts  |  174 +-
 .../server/validators/sku.validator.test.ts   |   14 +
 .../src/server/validators/sku.validator.ts    |  116 +-
 scripts/deploy-feiniu-manual.md               |    3 +-
 scripts/prepare-deploy-package.ps1            |    6 +-
 scripts/部署到飞牛OS-快速指南.md              |    3 +-
 176 files changed, 13356 insertions(+), 3679 deletions(-)

diff --git a/furniture-3d-system/.gitignore b/furniture-3d-system/.gitignore
index fd957313..4801205e 100644
--- a/furniture-3d-system/.gitignore
+++ b/furniture-3d-system/.gitignore
@@ -42,8 +42,12 @@ yarn-error.log*
 next-env.d.ts
 
 /src/generated/prisma
+.database-backups/
+.master-data-audits/
+.master-data-cleanup/
 
 # local workspace artifacts
+.codex-runtime/
 .codex-logs/
 _logs/
 output/
diff --git a/furniture-3d-system/docs/DEPLOYMENT.md b/furniture-3d-system/docs/DEPLOYMENT.md
index 8c301f0c..f7178d61 100644
--- a/furniture-3d-system/docs/DEPLOYMENT.md
+++ b/furniture-3d-system/docs/DEPLOYMENT.md
@@ -59,10 +59,13 @@ docker-compose -f docker-compose.lightweight.yml up -d
 ### 4. 初始化数据库
 ```bash
 # 进入应用容器执行迁移
-docker exec -it furniture3d-app npx prisma db push
+docker exec -it furniture3d-app npx prisma migrate deploy
 
 # 或在本地执行（需要数据库可访问）
-npx prisma db push
+npx prisma migrate deploy
+
+# 迁移后验证主数据地基
+npm run db:verify-master-data:all:strict
 ```
 
 ### 5. 访问系统
@@ -134,19 +137,22 @@ JWT_EXPIRES_IN=7d
 
 ### 首次部署
 ```bash
-# 推送 schema 到数据库
-npx prisma db push
+# 应用 Prisma migration，保留 _prisma_migrations 历史
+npx prisma migrate deploy
 
 # 生成 Prisma Client
 npx prisma generate
+
+# 验证主数据迁移、视图、约束和 JSON 边界
+npm run db:verify-master-data:all:strict
 ```
 
 ### 后续更新（Schema 变更）
 ```bash
-# 开发环境：直接推送
-npx prisma db push
+# 仅本地临时开发环境可用；脚本会拒绝 production、非本机库和疑似生产库名
+npm run prisma:push
 
-# 生产环境：使用迁移（推荐）
+# 生产环境：必须使用迁移
 npx prisma migrate deploy
 ```
 
@@ -272,10 +278,13 @@ docker-compose -f docker-compose.prod.yml build app
 docker-compose -f docker-compose.prod.yml up -d app
 
 # 执行数据库迁移（如有）
-docker exec -it furniture3d-app npx prisma db push
+docker exec -it furniture3d-app npx prisma migrate deploy
+docker exec -it furniture3d-app npm run db:verify-master-data:all:strict
 ```
 
 ### 重要提示
 - 更新前请先备份数据库
 - 测试环境验证后再更新生产环境
 - 保留旧版本镜像以便回滚
+- 生产/准生产禁止用 `prisma db push` 替代迁移；否则会绕过 `_prisma_migrations`，后续无法证明数据库结构来源。
+- 仓库内 `npm run prisma:push` 只作为本地开发保护入口：默认只允许 `localhost / 127.0.0.1 / ::1`，拒绝 `NODE_ENV=production`、`VERCEL_ENV=production` 和疑似生产库名。
diff --git a/furniture-3d-system/docs/workflow/生产部署入口说明.md b/furniture-3d-system/docs/workflow/生产部署入口说明.md
index 797a71fd..543a454e 100644
--- a/furniture-3d-system/docs/workflow/生产部署入口说明.md
+++ b/furniture-3d-system/docs/workflow/生产部署入口说明.md
@@ -15,15 +15,15 @@
 
 ## 本仓库部署脚本
 
-- `scripts/deploy-yydd-prod-from-git.ps1`
-- `scripts/create-yydd-prod-deploy.ps1`
+- 外层仓库脚本：`../scripts/create-yydd-prod-deploy.ps1`
 
-执行部署或生产核查前，优先读取上面两个脚本的默认参数，并在远端实时确认当前 PM2 进程、`current` 软链接和健康检查结果。
+执行部署或生产核查前，优先读取上面脚本的默认参数，并在远端实时确认当前 PM2 进程、`current` 软链接和健康检查结果。该脚本生成的远端发布脚本会执行 `npx prisma migrate deploy`，因此生产发布前必须先确认迁移目录、迁移历史和主数据 strict 巡检口径没有分叉。
 
 ## 花名册同步
 
 - 花名册同步属于当前 `furniture-3d-system` 自有能力，不依赖 `shujuku2` 或旧入口机。
-- 项目命令：`npm run sync:employee-directory`
+- 项目默认命令：`npm run sync:employee-directory` 只做 dry-run，不提交同步载荷。
+- 真实同步命令：`npm run sync:employee-directory:apply`，生产 systemd 脚本必须显式使用 `--apply`。
 - 生产定时器安装脚本：`furniture-3d-system/scripts/install-employee-directory-sync-timer.sh`
 - 生产 systemd 名称：`furniture-employee-directory-sync.service` / `furniture-employee-directory-sync.timer`
 - 定时频率：每天 `03:00` 和 `15:00`。
diff --git a/furniture-3d-system/docs/开发指南/包装方案增强/包装方案增强-非程序员操作手册.md b/furniture-3d-system/docs/开发指南/包装方案增强/包装方案增强-非程序员操作手册.md
index 50b7def9..46081722 100644
--- a/furniture-3d-system/docs/开发指南/包装方案增强/包装方案增强-非程序员操作手册.md
+++ b/furniture-3d-system/docs/开发指南/包装方案增强/包装方案增强-非程序员操作手册.md
@@ -142,6 +142,8 @@ npm run prisma:generate
 npm run prisma:push
 ```
 
+`npm run prisma:push` 只允许本地开发库使用。生产或准生产数据库必须走 `npx prisma migrate deploy`，并在迁移后执行 `npm run db:verify-master-data:all:strict`。
+
 ### 方案 C：如果本地几乎没有演示数据
 
 可以先试：
@@ -496,6 +498,8 @@ npm run prisma:generate
 npm run prisma:push
 ```
 
+这里的 `npm run prisma:push` 仍然只用于本地开发库；如果你面对的是服务器、生产库或准生产库，停下来改用迁移流程，不要直接推 schema。
+
 然后重启 `npm run dev`。
 
 ### 情况 3：页面没变化
diff --git a/furniture-3d-system/docs/飞牛OS部署指南.md b/furniture-3d-system/docs/飞牛OS部署指南.md
index 57a52a06..d0b6befe 100644
--- a/furniture-3d-system/docs/飞牛OS部署指南.md
+++ b/furniture-3d-system/docs/飞牛OS部署指南.md
@@ -230,7 +230,8 @@ curl http://localhost:3000/api/health
 2. **数据库初始化**
    ```bash
    # 如果需要初始化数据库，在服务器上执行：
-   docker-compose -f docker-compose.prod.yml exec app npx prisma db push
+   docker-compose -f docker-compose.prod.yml exec app npx prisma migrate deploy
+   docker-compose -f docker-compose.prod.yml exec app npm run db:verify-master-data:all:strict
    docker-compose -f docker-compose.prod.yml exec app npx prisma db seed
    ```
 
@@ -290,8 +291,9 @@ docker stats furniture3d-app
 # 进入PostgreSQL容器
 docker-compose -f docker-compose.prod.yml exec postgres psql -U furniture -d furniture_db
 
-# 执行数据库迁移
-docker-compose -f docker-compose.prod.yml exec app npx prisma db push
+# 执行数据库迁移；生产/准生产不要使用 prisma db push
+docker-compose -f docker-compose.prod.yml exec app npx prisma migrate deploy
+docker-compose -f docker-compose.prod.yml exec app npm run db:verify-master-data:all:strict
 
 # 执行数据库种子
 docker-compose -f docker-compose.prod.yml exec app npx prisma db seed
diff --git a/furniture-3d-system/package.json b/furniture-3d-system/package.json
index be05cfcb..48bd6d47 100644
--- a/furniture-3d-system/package.json
+++ b/furniture-3d-system/package.json
@@ -14,8 +14,14 @@
     "clean:local": "node scripts/cleanup-local-artifacts.js",
     "prisma:generate": "prisma generate",
     "prisma:check-client-sync": "node scripts/check-prisma-client-sync.js",
-    "prisma:push": "prisma db push",
+    "prisma:push": "node scripts/prisma-db-push-local.js",
     "prisma:studio": "prisma studio",
+    "db:verify-master-data": "node scripts/verify-master-data-foundation.js",
+    "db:verify-master-data:audit": "node scripts/verify-master-data-foundation.js --output .master-data-audits/foundation-hard-ready-gate-current.json --summary-output .master-data-audits/foundation-hard-ready-gate-current.summary.json --summary-stdout",
+    "db:verify-master-data:strict": "node scripts/verify-master-data-foundation.js --require-applied",
+    "db:verify-master-data:migration-status": "node scripts/verify-master-data-foundation.js --read-only-migration-status",
+    "db:cleanup-master-data": "node scripts/apply-master-data-cleanup-plan.js",
+    "db:cleanup-master-data:validate": "node scripts/apply-master-data-cleanup-plan.js --validate-plan",
     "prisma:seed": "tsx prisma/seed.ts",
     "open-platform:seed": "tsx scripts/seed-open-platform-demo.ts",
     "type-check": "node scripts/run-type-check.js",
@@ -24,10 +30,41 @@
     "demo:update": "node scripts/update-demo-models.js",
     "demo:refresh": "npm run prisma:push && npm run demo:update",
     "thumbnails:backfill": "tsx scripts/backfill-asset-variant-thumbnails.ts",
+    "thumbnails:backfill:apply": "tsx scripts/backfill-asset-variant-thumbnails.ts --apply",
     "materials:sync-textures": "tsx scripts/sync-material-textures.ts",
     "materials:sync-standard": "tsx scripts/sync-standard-finishes.ts",
+    "materials:sync-standard:apply": "tsx scripts/sync-standard-finishes.ts --apply",
     "sync:jst-sku-stock": "tsx scripts/sync-jst-sku-stock-products.ts",
-    "sync:employee-directory": "tsx scripts/sync-employee-directory.ts"
+    "sync:employee-directory": "tsx scripts/sync-employee-directory.ts",
+    "sync:employee-directory:apply": "tsx scripts/sync-employee-directory.ts --apply",
+    "db:verify-master-data:truth": "node scripts/verify-master-data-truth-sources.js",
+    "db:verify-master-data:code": "node scripts/verify-master-data-code-boundaries.js",
+    "db:verify-master-data:all": "npm run db:verify-master-data:truth && npm run db:verify-master-data:code && npm run db:verify-master-data:migration-status && npm run db:verify-master-data",
+    "db:verify-master-data:all:strict": "npm run db:verify-master-data:truth && npm run db:verify-master-data:code && npm run db:verify-master-data:migration-status && npm run db:verify-master-data:strict",
+    "db:verify-master-data:readiness": "node scripts/verify-master-data-readiness.js",
+    "db:verify-master-data:readiness:audit": "node scripts/verify-master-data-readiness.js --output .master-data-audits/readiness-current.json",
+    "db:diagnose-prisma-migration-baseline": "node scripts/diagnose-prisma-migration-baseline.js",
+    "db:preflight-database-foundation-change": "node scripts/preflight-database-foundation-change.js",
+    "db:preflight-database-foundation-change:audit": "node scripts/preflight-database-foundation-change.js --output .master-data-audits/foundation-preflight-current.json",
+    "db:backup:postgres": "node scripts/create-postgres-backup.js",
+    "db:foundation:migrate": "node scripts/run-database-foundation-migrations.js",
+    "db:foundation:migrate:audit": "node scripts/run-database-foundation-migrations.js --output .master-data-audits/foundation-migrate-plan-current.json",
+    "db:foundation:apply-required": "node scripts/apply-master-data-foundation-migrations.js",
+    "db:foundation:apply-required:audit": "node scripts/apply-master-data-foundation-migrations.js --output .master-data-audits/foundation-required-migration-apply-plan-current.json",
+    "db:foundation:apply-structure-repair": "node scripts/apply-prisma-structure-repair.js",
+    "db:foundation:apply-structure-repair:audit": "node scripts/apply-prisma-structure-repair.js --output .master-data-audits/authorized-structure-repair-apply-plan-current.json",
+    "db:foundation:baseline-resolve": "node scripts/apply-prisma-baseline-resolve.js",
+    "db:foundation:rehearse-migration": "node scripts/rehearse-database-foundation-migration.js",
+    "db:foundation:rehearse-structure-repair": "node scripts/rehearse-prisma-structure-repair.js",
+    "db:foundation:baseline-repair-plan": "node scripts/plan-prisma-baseline-repair.js",
+    "db:foundation:plan-pre-sku-formalization-repair": "node scripts/plan-pre-sku-formalization-repair.js",
+    "db:foundation:validate-pre-sku-formalization-repair": "node scripts/plan-pre-sku-formalization-repair.js --validate-plan",
+    "db:foundation:apply-pre-sku-formalization-repair": "node scripts/apply-pre-sku-formalization-repair.js",
+    "db:foundation:audit": "node scripts/run-master-data-foundation-audit.js",
+    "db:foundation:audit:cleanup-template": "node scripts/run-master-data-foundation-audit.js --include-cleanup-template",
+    "db:foundation:audit:full": "node scripts/run-master-data-foundation-audit.js --include-cleanup-template --use-docker-shadow --include-structure-repair-rehearsal --output-dir .master-data-audits/foundation-audit-current-goal",
+    "db:foundation:completion-checklist": "node scripts/print-master-data-foundation-checklist.js",
+    "db:foundation:decision-package": "node scripts/print-master-data-foundation-decision-package.js"
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.948.0",
diff --git a/furniture-3d-system/prisma.config.ts b/furniture-3d-system/prisma.config.ts
index f79f7597..bbf4860d 100644
--- a/furniture-3d-system/prisma.config.ts
+++ b/furniture-3d-system/prisma.config.ts
@@ -2,8 +2,12 @@ import fs from 'node:fs'
 import path from 'node:path'
 import { defineConfig } from 'prisma/config'
 
-function loadDatabaseUrlFromDotEnv(): void {
-  if (typeof process.env.DATABASE_URL === 'string' && process.env.DATABASE_URL.length > 0) {
+function loadEnvValuesFromDotEnv(names: string[]): void {
+  const missingNames = names.filter((name) => {
+    const value = process.env[name]
+    return !(typeof value === 'string' && value.length > 0)
+  })
+  if (missingNames.length === 0) {
     return
   }
 
@@ -21,7 +25,7 @@ function loadDatabaseUrlFromDotEnv(): void {
     if (separatorIndex <= 0) continue
 
     const key = trimmed.slice(0, separatorIndex).trim()
-    if (key !== 'DATABASE_URL') continue
+    if (!missingNames.includes(key)) continue
 
     let value = trimmed.slice(separatorIndex + 1).trim()
     if (
@@ -32,13 +36,12 @@ function loadDatabaseUrlFromDotEnv(): void {
     }
 
     if (value.length > 0) {
-      process.env.DATABASE_URL = value
+      process.env[key] = value
     }
-    return
   }
 }
 
-loadDatabaseUrlFromDotEnv()
+loadEnvValuesFromDotEnv(['DATABASE_URL', 'SHADOW_DATABASE_URL'])
 
 if (!process.env.DATABASE_URL) {
   throw new Error('DATABASE_URL 未配置。请在 .env 中设置 DATABASE_URL。')
@@ -51,5 +54,8 @@ export default defineConfig({
   },
   datasource: {
     url: process.env.DATABASE_URL,
+    ...(process.env.SHADOW_DATABASE_URL
+      ? { shadowDatabaseUrl: process.env.SHADOW_DATABASE_URL }
+      : {}),
   },
 })
diff --git a/furniture-3d-system/prisma/migrations/20260430110000_add_approval_workflow_and_account_template/migration.sql b/furniture-3d-system/prisma/migrations/20260430110000_add_approval_workflow_and_account_template/migration.sql
index 01c2d279..8d4566ec 100644
--- a/furniture-3d-system/prisma/migrations/20260430110000_add_approval_workflow_and_account_template/migration.sql
+++ b/furniture-3d-system/prisma/migrations/20260430110000_add_approval_workflow_and_account_template/migration.sql
@@ -2,10 +2,10 @@
 CREATE TYPE "ApprovalWorkflowStatus" AS ENUM ('DRAFT', 'PENDING', 'IN_PROGRESS', 'COMPLETED', 'REJECTED', 'ARCHIVED');
 
 -- DropIndex
-DROP INDEX "IntakeNonIntegratedProduct_spuBase_key";
+DROP INDEX IF EXISTS "IntakeNonIntegratedProduct_spuBase_key";
 
 -- DropIndex
-DROP INDEX "IntakeNonIntegratedProduct_spu_idx";
+DROP INDEX IF EXISTS "IntakeNonIntegratedProduct_spu_idx";
 
 -- AlterTable
 ALTER TABLE "Department" ADD COLUMN     "description" TEXT,
@@ -111,10 +111,10 @@ CREATE INDEX "ApprovalWorkflowFieldChange_userId_createdAt_idx" ON "ApprovalWork
 CREATE INDEX "ApprovalWorkflowFieldChange_fieldKey_idx" ON "ApprovalWorkflowFieldChange"("fieldKey");
 
 -- CreateIndex
-CREATE UNIQUE INDEX "IntakeNonIntegratedProduct_spu_key" ON "IntakeNonIntegratedProduct"("spu");
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeNonIntegratedProduct_spu_key" ON "IntakeNonIntegratedProduct"("spu");
 
 -- CreateIndex
-CREATE INDEX "IntakeNonIntegratedProduct_spuBase_idx" ON "IntakeNonIntegratedProduct"("spuBase");
+CREATE INDEX IF NOT EXISTS "IntakeNonIntegratedProduct_spuBase_idx" ON "IntakeNonIntegratedProduct"("spuBase");
 
 -- CreateIndex
 CREATE INDEX "User_accountTemplateId_idx" ON "User"("accountTemplateId");
diff --git a/furniture-3d-system/prisma/migrations/add_packaging_plan/migration.sql b/furniture-3d-system/prisma/migrations/add_packaging_plan/migration.sql
index b9045457..f7327c44 100644
--- a/furniture-3d-system/prisma/migrations/add_packaging_plan/migration.sql
+++ b/furniture-3d-system/prisma/migrations/add_packaging_plan/migration.sql
@@ -1,5 +1,5 @@
 -- CreateTable
-CREATE TABLE "PackagingPlan" (
+CREATE TABLE IF NOT EXISTS "PackagingPlan" (
     "id" TEXT NOT NULL,
     "productId" TEXT NOT NULL,
     "name" TEXT NOT NULL,
@@ -17,7 +17,21 @@ CREATE TABLE "PackagingPlan" (
 );
 
 -- CreateIndex
-CREATE INDEX "PackagingPlan_productId_idx" ON "PackagingPlan"("productId");
+CREATE INDEX IF NOT EXISTS "PackagingPlan_productId_idx" ON "PackagingPlan"("productId");
 
 -- AddForeignKey
-ALTER TABLE "PackagingPlan" ADD CONSTRAINT "PackagingPlan_productId_fkey" FOREIGN KEY ("productId") REFERENCES "Product"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'PackagingPlan_productId_fkey'
+      AND table_name = 'PackagingPlan'
+  ) THEN
+    ALTER TABLE "PackagingPlan"
+    ADD CONSTRAINT "PackagingPlan_productId_fkey"
+    FOREIGN KEY ("productId") REFERENCES "Product"("id")
+    ON DELETE CASCADE
+    ON UPDATE CASCADE;
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/schema.prisma b/furniture-3d-system/prisma/schema.prisma
index e8602721..14ec908a 100644
--- a/furniture-3d-system/prisma/schema.prisma
+++ b/furniture-3d-system/prisma/schema.prisma
@@ -23,7 +23,7 @@ model ProductCategory {
   isActive    Boolean @default(true) // 是否启用
 
   // 关联产品
-  products Product[]
+  products           Product[]
   planningTemplates  PlanningTemplate[]  @relation("PlanningTemplateCategory")
   planningWorkspaces PlanningWorkspace[] @relation("PlanningWorkspaceCategory")
   assetFamilies      AssetFamily[]       @relation("AssetFamilyCategory")
@@ -113,6 +113,7 @@ model ProductSKU {
 
   // SKU标识
   skuCode String @unique // SKU编码，如 "A001-RED-3S"
+  name    String? // SKU名称
 
   // 规格属性（灵活的JSON结构）
   // 示例: { "color": "红色", "size": "三人座", "material": "布艺" }
@@ -138,22 +139,27 @@ model ProductSKU {
 
   // 状态
   isActive Boolean @default(true) // 是否上架
+  originalSkuCode    String?
+  deletedCodeAt      DateTime?
+  deletedByProductId String?
+  productDeletedAt   DateTime?
 
   // SKU 级装配步骤（与产品级步骤隔离）
-  assemblySteps AssemblyStep[]
+  assemblySteps         AssemblyStep[]
   // SKU 级板件 / 孔位 / 五金结构数据
-  panels Panel[]
-  holes Hole[]
-  productHardwares ProductHardware[]
-  sourcePreSkuId String? @unique
-  sourcePreSku   PreSku? @relation("PreSkuFormalizedSku", fields: [sourcePreSkuId], references: [id], onDelete: SetNull)
-  sourceAssetVariantId String?
-  sourceAssetVariant   AssetVariant? @relation("ProductSKUSourceAssetVariant", fields: [sourceAssetVariantId], references: [id], onDelete: SetNull)
-  sourceAssetVariantIds String[] @default([])
-  warehouseLocationId String?
-  warehouseLocation   WarehouseLocation? @relation("ProductSKUWarehouseLocation", fields: [warehouseLocationId], references: [id], onDelete: SetNull)
-  packagedItems PackagedItem[] @relation("PackagedItemSku")
-  qualityInspections ProductSkuQualityInspection[] @relation("ProductSKUQualityInspections")
+  panels                Panel[]
+  holes                 Hole[]
+  productHardwares      ProductHardware[]
+  sourcePreSkuId        String?            @unique
+  sourcePreSku          PreSku?            @relation("PreSkuFormalizedSku", fields: [sourcePreSkuId], references: [id], onDelete: SetNull)
+  sourceAssetVariantId  String?
+  sourceAssetVariant    AssetVariant?      @relation("ProductSKUSourceAssetVariant", fields: [sourceAssetVariantId], references: [id], onDelete: SetNull)
+  sourceAssetVariantIds String[]           @default([])
+  assetProfile          ProductSkuAssetProfile?
+  warehouseLocationId   String?
+  warehouseLocation     WarehouseLocation? @relation("ProductSKUWarehouseLocation", fields: [warehouseLocationId], references: [id], onDelete: SetNull)
+  packagedItems         PackagedItem[]     @relation("PackagedItemSku")
+  qualityInspections    ProductSkuQualityInspection[] @relation("ProductSKUQualityInspections")
 
   // 元数据
   createdAt DateTime  @default(now())
@@ -162,6 +168,7 @@ model ProductSKU {
 
   @@index([productId])
   @@index([skuCode])
+  @@index([name])
   @@index([isActive])
   @@index([ownerId])
   @@index([sourceAssetVariantId])
@@ -169,6 +176,47 @@ model ProductSKU {
   @@index([warehouseLocationId])
 }
 
+// 正式 SKU 的资产资料结构化同步副本
+model ProductSkuAssetProfile {
+  id        String     @id @default(cuid())
+  skuId     String     @unique
+  sku       ProductSKU @relation(fields: [skuId], references: [id], onDelete: Cascade)
+
+  primarySourceAssetVariantId String?
+  sourceAssetVariantIds       String[] @default([])
+  sourceAssetFamilyId         String?
+  sourceAssetSeriesId         String?
+
+  model      String?
+  modelName  String?
+  specCode   String?
+  specName   String?
+  barcode    String?
+  size       Json
+  color      String?
+  material   String?
+  imageUrl   String?
+
+  sourceStatus ProductSkuAssetSourceStatus @default(ACTIVE)
+  skuDeletedAt DateTime?
+  syncedAt     DateTime
+  lockedFields String[]                    @default([])
+  lockedReasons Json
+  sourceVariants Json
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  @@index([primarySourceAssetVariantId])
+  @@index([sourceAssetVariantIds], type: Gin)
+  @@index([sourceAssetFamilyId])
+  @@index([sourceAssetSeriesId])
+  @@index([specCode])
+  @@index([barcode])
+  @@index([sourceStatus])
+  @@index([skuDeletedAt])
+}
+
 // 产品协作者关系表
 model ProductCollaborator {
   productId String
@@ -177,9 +225,9 @@ model ProductCollaborator {
   addedAt   DateTime @default(now())
   addedBy   String?
 
-  product Product @relation(fields: [productId], references: [id], onDelete: Cascade)
-  user    User    @relation("ProductCollaboratorUser", fields: [userId], references: [id], onDelete: Cascade)
-  addedByUser User? @relation("ProductCollaboratorAddedBy", fields: [addedBy], references: [id], onDelete: SetNull)
+  product     Product @relation(fields: [productId], references: [id], onDelete: Cascade)
+  user        User    @relation("ProductCollaboratorUser", fields: [userId], references: [id], onDelete: Cascade)
+  addedByUser User?   @relation("ProductCollaboratorAddedBy", fields: [addedBy], references: [id], onDelete: SetNull)
 
   @@id([productId, userId])
   @@index([productId])
@@ -188,23 +236,25 @@ model ProductCollaborator {
 }
 
 model IntakeNonIntegratedProduct {
-  id        String   @id
-  spu       String
-  spuBase   String
-  brand     String
-  designer  String
-  operator  String
-  purchaser String
-  payload   Json
-  visibility String  @default("DEPARTMENT") // PRIVATE, TEAM, DEPARTMENT, PUBLIC
-  departmentId String?
-  teamId String?
-  createdBy String
-  updatedBy String
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-  deletedAt DateTime?
+  id                String                       @id
+  spu               String
+  spuBase           String
+  brand             String
+  designer          String
+  operator          String
+  purchaser         String
+  payload           Json
+  visibility        String                       @default("DEPARTMENT") // PRIVATE, TEAM, DEPARTMENT, PUBLIC
+  departmentId      String?
+  teamId            String?
+  createdBy         String
+  updatedBy         String
+  createdAt         DateTime                     @default(now())
+  updatedAt         DateTime                     @updatedAt
+  deletedAt         DateTime?
   approvalWorkflows ApprovalWorkflow[]
+  skuItems          IntakeNonIntegratedSkuItem[]
+  profile           IntakeNonIntegratedProductProfile?
 
   @@unique([spu, brand])
   @@index([spu])
@@ -216,15 +266,231 @@ model IntakeNonIntegratedProduct {
   @@index([deletedAt, createdAt])
 }
 
+model IntakeNonIntegratedProductProfile {
+  id                     String                     @id @default(cuid())
+  productId              String                     @unique
+  product                IntakeNonIntegratedProduct @relation(fields: [productId], references: [id], onDelete: Cascade)
+  productName            String                     @default("")
+  productImageUrl        String?                    @db.Text
+  productCategory        String                     @default("")
+  salesCategory          String                     @default("")
+  productYear            String                     @default("")
+  productStatus          String                     @default("")
+  productDevelopmentKind String                     @default("")
+  goodsType              String                     @default("")
+  materialType           String                     @default("")
+  productionType         String                     @default("")
+  size                   String                     @default("")
+  color                  String                     @default("")
+  tagMaterial            String                     @default("")
+  priceBand              String                     @default("")
+  demandFlowNo           String                     @default("")
+  processTemplate        String                     @default("")
+  productPlanning        String                     @default("")
+  brandPlanning          String                     @default("")
+  demandDepartment       String                     @default("")
+  spuOwner               String                     @default("")
+  operationsOwner        String                     @default("")
+  purchaseOwner          String                     @default("")
+  visualDirector         String                     @default("")
+  visualPlanning         String                     @default("")
+  structureDesigner      String                     @default("")
+  sourceSpu              String                     @default("")
+  sourceSkuId            String                     @default("")
+  sourceCategory         String                     @default("")
+  sourceItemType         String                     @default("")
+  sourceSalesStatus      String                     @default("")
+  sourceEnabled          String                     @default("")
+  sourceStockDisabled    String                     @default("")
+  stockSkuCount          Int                        @default(0)
+  stockHasOnSaleSku      Boolean                    @default(false)
+  source                 String                     @default("PAYLOAD_SYNC")
+  syncedAt               DateTime                   @default(now())
+  createdAt              DateTime                   @default(now())
+  updatedAt              DateTime                   @updatedAt
+
+  @@index([productName])
+  @@index([productCategory])
+  @@index([salesCategory])
+  @@index([productStatus])
+  @@index([productDevelopmentKind])
+  @@index([spuOwner])
+  @@index([purchaseOwner])
+  @@index([sourceSpu])
+  @@index([sourceSkuId])
+  @@index([sourceCategory])
+  @@index([sourceItemType])
+  @@index([sourceSalesStatus])
+  @@index([sourceEnabled])
+}
+
+model IntakeNonIntegratedSkuItem {
+  id                        String                                  @id
+  productId                 String
+  product                   IntakeNonIntegratedProduct              @relation(fields: [productId], references: [id], onDelete: Cascade)
+  skuItemId                 String
+  sortOrder                 Int
+  skuSequence               Int                                     @default(0)
+  batchNo                   Int                                     @default(1)
+  packageGroupId            String                                  @default("")
+  image                     String?                                 @db.Text
+  imageName                 String                                  @default("")
+  model                     String                                  @default("")
+  skuCode                   String                                  @default("")
+  specName                  String                                  @default("")
+  barcode                   String                                  @default("")
+  size                      String                                  @default("")
+  color                     String                                  @default("")
+  material                  String                                  @default("")
+  boardMaterialType         String                                  @default("")
+  versionNo                 String                                  @default("V01")
+  attributeCode             String                                  @default("")
+  drawingId                 String                                  @default("")
+  installMethod             String                                  @default("")
+  executeStandard           String                                  @default("")
+  nationalStandardCompliant String                                  @default("")
+  manufacturer              String                                  @default("")
+  manufacturerCode          String                                  @default("")
+  salesStatus               String                                  @default("")
+  tagMaterial               String                                  @default("")
+  model3dDataUrl            String?                                 @db.Text
+  source                    String                                  @default("")
+  sourceTable               String                                  @default("")
+  sourceSkuId               String                                  @default("")
+  contentLocked             Boolean                                 @default(false)
+  dataQualityStatus         IntakeNonIntegratedSkuDataQualityStatus @default(INCOMPLETE)
+  missingRequiredFields     String[]                                @default([])
+  createdAt                 DateTime                                @default(now())
+  updatedAt                 DateTime                                @updatedAt
+
+  @@unique([productId, skuItemId])
+  @@index([productId])
+  @@index([skuCode])
+  @@index([barcode])
+  @@index([model])
+  @@index([dataQualityStatus])
+  @@index([sourceTable, sourceSkuId])
+}
+
+model MasterDataQualityDecision {
+  id                String   @id @default(cuid())
+  targetType        String
+  targetId          String
+  targetBusinessKey String   @default("")
+  status            String   @default("APPROVED_INCOMPLETE")
+  missingFields     String[] @default([])
+  reason            String   @db.Text
+  decidedBy         String
+  decidedAt         DateTime @default(now())
+  resolvedBy        String?
+  resolvedAt        DateTime?
+  createdAt         DateTime @default(now())
+  updatedAt         DateTime @updatedAt
+
+  @@index([targetType, targetId])
+  @@index([targetBusinessKey])
+  @@index([status])
+  @@index([decidedAt])
+}
+
+model ProductPatentRecord {
+  id                            String   @id
+  patentGroupKey                String   @default("")
+  productId                     String   @default("")
+  linkedProductIds              String[] @default([])
+  linkedProductNames            String[] @default([])
+  linkedSpus                    String[] @default([])
+  linkedBrands                  String[] @default([])
+  productDisplayName            String   @default("")
+  productImage                  String?  @db.Text
+  productImageName              String   @default("")
+  patentStatus                  String   @default("待确认")
+  patentType                    String   @default("外观设计")
+  patentName                    String   @default("")
+  spu                           String   @default("")
+  saRequired                    String   @default("否")
+  salesStatus                   String   @default("在售")
+  designer                      String   @default("")
+  applicationNo                 String   @default("")
+  patentNo                      String   @default("")
+  applicationDate               String   @default("")
+  authorizationDate             String   @default("")
+  firstFeeDate                  String   @default("")
+  annualFees                    Json     @default("{}")
+  annualFeeDates                Json     @default("{}")
+  nextFeeDueDate                String   @default("")
+  feeAmount                     String   @default("")
+  patentCertificateFileName     String   @default("")
+  patentCertificateFileUrl      String?  @db.Text
+  patentCertificateFileMimeType String   @default("")
+  patentCertificateStorageKey   String   @default("")
+  annualFeeNote                 String   @default("")
+  continueDecision              String   @default("待判断")
+  decisionReason                String   @default("")
+  owner                         String   @default("")
+  remark                        String   @default("")
+  sortOrder                     Int      @default(0)
+  createdAt                     DateTime @default(now())
+  updatedAt                     DateTime @updatedAt
+
+  @@unique([patentGroupKey])
+  @@index([productId])
+  @@index([spu])
+  @@index([patentStatus])
+  @@index([patentNo])
+  @@index([applicationNo])
+  @@index([designer])
+  @@index([nextFeeDueDate])
+  @@index([sortOrder])
+}
+
+model IntakeReferenceLibraryItem {
+  id          String  @id @default(cuid())
+  libraryType String
+  itemKey     String
+  code        String  @default("")
+  name        String  @default("")
+  category    String  @default("")
+  letter      String  @default("")
+  payload     Json    @default("{}")
+  sortOrder   Int     @default(0)
+  isActive    Boolean @default(true)
+  createdBy   String?
+  updatedBy   String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@unique([libraryType, itemKey])
+  @@index([libraryType, isActive, sortOrder])
+  @@index([libraryType, code])
+  @@index([libraryType, name])
+  @@index([category])
+}
+
+model SpuNumberCounter {
+  id                  String   @id @default(cuid())
+  productCategory     String   @unique
+  prefix              String   @unique
+  lastUsedIndex       Int      @default(0)
+  sourceLibraryItemId String?
+  createdBy           String?
+  updatedBy           String?
+  createdAt           DateTime @default(now())
+  updatedAt           DateTime @updatedAt
+
+  @@index([prefix])
+  @@index([sourceLibraryItemId])
+}
+
 // ============================================
 // 装配相关
 // ============================================
 
 // 装配步骤（默认产品级，可选绑定到 SKU）
 model AssemblyStep {
-  id        String  @id @default(cuid())
+  id        String      @id @default(cuid())
   productId String
-  product   Product @relation(fields: [productId], references: [id], onDelete: Cascade)
+  product   Product     @relation(fields: [productId], references: [id], onDelete: Cascade)
   skuId     String?
   sku       ProductSKU? @relation(fields: [skuId], references: [id], onDelete: Cascade)
 
@@ -287,9 +553,9 @@ model AssemblyVersion {
 
 // 板件（属于Product）
 model Panel {
-  id        String  @id @default(cuid())
+  id        String      @id @default(cuid())
   productId String
-  product   Product @relation(fields: [productId], references: [id], onDelete: Cascade)
+  product   Product     @relation(fields: [productId], references: [id], onDelete: Cascade)
   skuId     String?
   sku       ProductSKU? @relation(fields: [skuId], references: [id], onDelete: Cascade)
 
@@ -307,7 +573,7 @@ model Panel {
   installOrder       Int?    @default(0) // 安装序号
   explosionDirection String? // 爆炸方向：auto/up/down/left/right/front/back
   isAnchor           Boolean @default(false) // 是否为基准件（不移动）
-  assemblySemantic   Json?   // 当前生效的装配语义（SKU scoped）
+  assemblySemantic   Json? // 当前生效的装配语义（SKU scoped）
 
   // 材质关联
   panelMaterial PanelMaterial?
@@ -423,7 +689,7 @@ model PlanningWorkspace {
   category   ProductCategory? @relation("PlanningWorkspaceCategory", fields: [categoryId], references: [id])
 
   createdBy String
-  creator   User @relation("PlanningWorkspaceCreator", fields: [createdBy], references: [id])
+  creator   User   @relation("PlanningWorkspaceCreator", fields: [createdBy], references: [id])
 
   departmentId String?
   department   Department? @relation("PlanningWorkspaceDepartment", fields: [departmentId], references: [id])
@@ -445,7 +711,7 @@ model PlanningWorkspace {
 }
 
 model PlanningDraft {
-  id         String @id @default(cuid())
+  id          String            @id @default(cuid())
   workspaceId String
   workspace   PlanningWorkspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
 
@@ -459,7 +725,7 @@ model PlanningDraft {
   sourceSnapshot       Json?
 
   createdBy String
-  creator   User @relation("PlanningDraftCreator", fields: [createdBy], references: [id])
+  creator   User   @relation("PlanningDraftCreator", fields: [createdBy], references: [id])
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -469,33 +735,34 @@ model PlanningDraft {
 }
 
 model Substrate {
-  id          String  @id @default(cuid())
-  code        String  @unique
-  name        String
-  description String? @db.Text
-  categoryId  String
-  category    SubstrateCategory @relation(fields: [categoryId], references: [id])
+  id                 String                     @id @default(cuid())
+  code               String                     @unique
+  name               String
+  description        String?                    @db.Text
+  categoryId         String
+  category           SubstrateCategory          @relation(fields: [categoryId], references: [id])
   environmentGradeId String
-  environmentGrade   SubstrateEnvironmentGrade @relation(fields: [environmentGradeId], references: [id])
+  environmentGrade   SubstrateEnvironmentGrade  @relation(fields: [environmentGradeId], references: [id])
   thicknessSpecId    String
-  thicknessSpec      SubstrateThicknessSpec @relation(fields: [thicknessSpecId], references: [id])
+  thicknessSpec      SubstrateThicknessSpec     @relation(fields: [thicknessSpecId], references: [id])
   surfaceOptionId    String?
-  surfaceOption      SubstrateSurfaceOption? @relation(fields: [surfaceOptionId], references: [id])
+  surfaceOption      SubstrateSurfaceOption?    @relation(fields: [surfaceOptionId], references: [id])
   systemNameOptionId String?
   systemNameOption   SubstrateSystemNameOption? @relation(fields: [systemNameOptionId], references: [id])
-  suggestedPrice Decimal? @db.Decimal(10, 2)
-  weightKg       Float?
-  metadata    Json?
-  isActive    Boolean @default(true)
+  suggestedPrice     Decimal?                   @db.Decimal(10, 2)
+  weightKg           Float?
+  metadata           Json?
+  isActive           Boolean                    @default(true)
 
   createdBy String?
-  creator   User? @relation("SubstrateCreator", fields: [createdBy], references: [id], onDelete: SetNull)
+  creator   User?   @relation("SubstrateCreator", fields: [createdBy], references: [id], onDelete: SetNull)
 
   assetVariants AssetVariant[]
-  finishes     SubstrateFinish[]
+  finishes      SubstrateFinish[]
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
+  // 4字段规格由服务层收口：相同规格+相同花色拒绝重复，相同规格+不同花色并入已有基材
 
   @@index([isActive])
   @@index([createdBy])
@@ -504,15 +771,14 @@ model Substrate {
   @@index([thicknessSpecId])
   @@index([surfaceOptionId])
   @@index([systemNameOptionId])
-  // 4字段规格由服务层收口：相同规格+相同花色拒绝重复，相同规格+不同花色并入已有基材
 }
 
 model SubstrateFinish {
-  id          String  @id @default(cuid())
+  id          String    @id @default(cuid())
   substrateId String
   substrate   Substrate @relation(fields: [substrateId], references: [id], onDelete: Cascade)
   finishId    String
-  finish      Material @relation(fields: [finishId], references: [id], onDelete: Cascade)
+  finish      Material  @relation(fields: [finishId], references: [id], onDelete: Cascade)
 
   createdAt DateTime @default(now())
 
@@ -522,9 +788,9 @@ model SubstrateFinish {
 }
 
 model SubstrateCategory {
-  id        String @id @default(cuid())
-  name      String @unique
-  sortOrder Int    @default(0)
+  id        String  @id @default(cuid())
+  name      String  @unique
+  sortOrder Int     @default(0)
   isActive  Boolean @default(true)
 
   substrates Substrate[]
@@ -537,9 +803,9 @@ model SubstrateCategory {
 }
 
 model SubstrateEnvironmentGrade {
-  id        String @id @default(cuid())
-  name      String @unique
-  sortOrder Int    @default(0)
+  id        String  @id @default(cuid())
+  name      String  @unique
+  sortOrder Int     @default(0)
   isActive  Boolean @default(true)
 
   substrates Substrate[]
@@ -552,12 +818,12 @@ model SubstrateEnvironmentGrade {
 }
 
 model SubstrateThicknessSpec {
-  id            String @id @default(cuid())
-  name          String @unique
+  id            String  @id @default(cuid())
+  name          String  @unique
   thicknessMm   Float
-  sheetLengthMm Float  @default(2440)
-  sheetWidthMm  Float  @default(1220)
-  sortOrder     Int    @default(0)
+  sheetLengthMm Float   @default(2440)
+  sheetWidthMm  Float   @default(1220)
+  sortOrder     Int     @default(0)
   isActive      Boolean @default(true)
 
   substrates Substrate[]
@@ -570,9 +836,9 @@ model SubstrateThicknessSpec {
 }
 
 model SubstrateSurfaceOption {
-  id        String @id @default(cuid())
-  name      String @unique
-  sortOrder Int    @default(0)
+  id        String  @id @default(cuid())
+  name      String  @unique
+  sortOrder Int     @default(0)
   isActive  Boolean @default(true)
 
   substrates Substrate[]
@@ -585,9 +851,9 @@ model SubstrateSurfaceOption {
 }
 
 model SubstrateSystemNameOption {
-  id        String @id @default(cuid())
-  name      String @unique
-  sortOrder Int    @default(0)
+  id        String  @id @default(cuid())
+  name      String  @unique
+  sortOrder Int     @default(0)
   isActive  Boolean @default(true)
 
   substrates Substrate[]
@@ -600,38 +866,38 @@ model SubstrateSystemNameOption {
 }
 
 model AssetFamily {
-  id          String     @id @default(cuid())
-  type        AssetType
-  code        String     @unique
-  name        String
-  description String?    @db.Text
+  id                String           @id @default(cuid())
+  type              AssetType
+  code              String           @unique
+  name              String
+  description       String?          @db.Text
   productCategoryId String?
   productCategory   ProductCategory? @relation("AssetFamilyCategory", fields: [productCategoryId], references: [id])
   assetSeriesId     String?
-  assetSeries       AssetSeries? @relation("AssetFamilySeries", fields: [assetSeriesId], references: [id], onDelete: SetNull)
-  connectionRoles      String[] @default([])
-  metadata             Json?
-  status               AssetStatus @default(DRAFT)
+  assetSeries       AssetSeries?     @relation("AssetFamilySeries", fields: [assetSeriesId], references: [id], onDelete: SetNull)
+  connectionRoles   String[]         @default([])
+  metadata          Json?
+  status            AssetStatus      @default(DRAFT)
 
-  createdBy String?
-  creator   User? @relation("AssetFamilyCreator", fields: [createdBy], references: [id], onDelete: SetNull)
-  submittedAt DateTime?
-  submittedById String?
-  submitter User? @relation("AssetFamilySubmitter", fields: [submittedById], references: [id], onDelete: SetNull)
-  reviewedAt DateTime?
-  reviewedById String?
-  reviewer User? @relation("AssetFamilyReviewer", fields: [reviewedById], references: [id], onDelete: SetNull)
-  rejectedAt DateTime?
-  rejectedById String?
-  rejecter User? @relation("AssetFamilyRejecter", fields: [rejectedById], references: [id], onDelete: SetNull)
-  rejectionReason String? @db.Text
+  createdBy        String?
+  creator          User?     @relation("AssetFamilyCreator", fields: [createdBy], references: [id], onDelete: SetNull)
+  submittedAt      DateTime?
+  submittedById    String?
+  submitter        User?     @relation("AssetFamilySubmitter", fields: [submittedById], references: [id], onDelete: SetNull)
+  reviewedAt       DateTime?
+  reviewedById     String?
+  reviewer         User?     @relation("AssetFamilyReviewer", fields: [reviewedById], references: [id], onDelete: SetNull)
+  rejectedAt       DateTime?
+  rejectedById     String?
+  rejecter         User?     @relation("AssetFamilyRejecter", fields: [rejectedById], references: [id], onDelete: SetNull)
+  rejectionReason  String?   @db.Text
   lastModifiedById String?
-  lastModifier User? @relation("AssetFamilyLastModifier", fields: [lastModifiedById], references: [id], onDelete: SetNull)
-  deletedAt DateTime?
-  deletedById String?
-  deleter User? @relation("AssetFamilyDeleter", fields: [deletedById], references: [id], onDelete: SetNull)
+  lastModifier     User?     @relation("AssetFamilyLastModifier", fields: [lastModifiedById], references: [id], onDelete: SetNull)
+  deletedAt        DateTime?
+  deletedById      String?
+  deleter          User?     @relation("AssetFamilyDeleter", fields: [deletedById], references: [id], onDelete: SetNull)
 
-  variants AssetVariant[]
+  variants         AssetVariant[]
   compatibleSeries AssetFamilySeriesCompatibility[]
 
   createdAt DateTime @default(now())
@@ -664,10 +930,10 @@ model AssetSeries {
   metadata  Json?
 
   createdBy String?
-  creator   User? @relation("AssetSeriesCreator", fields: [createdBy], references: [id], onDelete: SetNull)
+  creator   User?   @relation("AssetSeriesCreator", fields: [createdBy], references: [id], onDelete: SetNull)
 
   compatibleFamilies AssetFamilySeriesCompatibility[]
-  assetFamilies      AssetFamily[] @relation("AssetFamilySeries")
+  assetFamilies      AssetFamily[]                    @relation("AssetFamilySeries")
   draftGroups        DraftGroup[]
 
   createdAt DateTime @default(now())
@@ -680,7 +946,7 @@ model AssetSeries {
 }
 
 model AssetFamilySeriesCompatibility {
-  id            String @id @default(cuid())
+  id            String      @id @default(cuid())
   assetFamilyId String
   assetFamily   AssetFamily @relation(fields: [assetFamilyId], references: [id], onDelete: Cascade)
   assetSeriesId String
@@ -694,60 +960,60 @@ model AssetFamilySeriesCompatibility {
 }
 
 model AssetVariant {
-  id            String     @id @default(cuid())
-  assetFamilyId String
-  assetFamily   AssetFamily @relation(fields: [assetFamilyId], references: [id], onDelete: Cascade)
-  code          String     @unique
-  name          String
-  identityKey   String
-  assetType     AssetType
-  status        AssetStatus @default(DRAFT)
-  sizeLabel     String?
-  substrateId   String?
-  substrate     Substrate? @relation(fields: [substrateId], references: [id], onDelete: SetNull)
-  finishId      String?
-  finish        Material? @relation("AssetVariantFinish", fields: [finishId], references: [id], onDelete: SetNull)
-  dimensions    Json
-  modelUrl      String
-  thumbnailUrl  String?
-  barcode       String?
-  supplierName  String?
-  supplierCode  String?
-  versionNo     String?
-  mountPoints   Json
-  assemblyBasis Json?
+  id                 String      @id @default(cuid())
+  assetFamilyId      String
+  assetFamily        AssetFamily @relation(fields: [assetFamilyId], references: [id], onDelete: Cascade)
+  code               String      @unique
+  name               String
+  identityKey        String
+  assetType          AssetType
+  status             AssetStatus @default(DRAFT)
+  sizeLabel          String?
+  substrateId        String?
+  substrate          Substrate?  @relation(fields: [substrateId], references: [id], onDelete: SetNull)
+  finishId           String?
+  finish             Material?   @relation("AssetVariantFinish", fields: [finishId], references: [id], onDelete: SetNull)
+  dimensions         Json
+  modelUrl           String
+  thumbnailUrl       String?
+  barcode            String?
+  supplierName       String?
+  supplierCode       String?
+  versionNo          String?
+  mountPoints        Json
+  assemblyBasis      Json?
   compatibilityRules Json?
-  namingFields  Json?
-  businessData  Json?
-  weightKg      Float?
-  costPrice     Decimal? @db.Decimal(10, 2)
-  lossFactor    Float?
-  estimatedCostPrice Decimal? @db.Decimal(10, 2)
+  namingFields       Json?
+  businessData       Json?
+  weightKg           Float?
+  costPrice          Decimal?    @db.Decimal(10, 2)
+  lossFactor         Float?
+  estimatedCostPrice Decimal?    @db.Decimal(10, 2)
 
   inheritedFromVariantId String?
-  inheritedFromVariant   AssetVariant? @relation("AssetVariantInheritance", fields: [inheritedFromVariantId], references: [id], onDelete: SetNull)
-  derivedVariants        AssetVariant[] @relation("AssetVariantInheritance")
+  inheritedFromVariant   AssetVariant?                 @relation("AssetVariantInheritance", fields: [inheritedFromVariantId], references: [id], onDelete: SetNull)
+  derivedVariants        AssetVariant[]                @relation("AssetVariantInheritance")
   locationBindings       AssetVariantLocationBinding[]
-  sourceProductSkus      ProductSKU[] @relation("ProductSKUSourceAssetVariant")
+  sourceProductSkus      ProductSKU[]                  @relation("ProductSKUSourceAssetVariant")
   skuSyncEvents          AssetSkuSyncEvent[]
 
-  createdBy String?
-  creator   User? @relation("AssetVariantCreator", fields: [createdBy], references: [id], onDelete: SetNull)
-  submittedAt DateTime?
-  submittedById String?
-  submitter User? @relation("AssetVariantSubmitter", fields: [submittedById], references: [id], onDelete: SetNull)
-  reviewedAt DateTime?
-  reviewedById String?
-  reviewer User? @relation("AssetVariantReviewer", fields: [reviewedById], references: [id], onDelete: SetNull)
-  rejectedAt DateTime?
-  rejectedById String?
-  rejecter User? @relation("AssetVariantRejecter", fields: [rejectedById], references: [id], onDelete: SetNull)
-  rejectionReason String? @db.Text
+  createdBy        String?
+  creator          User?     @relation("AssetVariantCreator", fields: [createdBy], references: [id], onDelete: SetNull)
+  submittedAt      DateTime?
+  submittedById    String?
+  submitter        User?     @relation("AssetVariantSubmitter", fields: [submittedById], references: [id], onDelete: SetNull)
+  reviewedAt       DateTime?
+  reviewedById     String?
+  reviewer         User?     @relation("AssetVariantReviewer", fields: [reviewedById], references: [id], onDelete: SetNull)
+  rejectedAt       DateTime?
+  rejectedById     String?
+  rejecter         User?     @relation("AssetVariantRejecter", fields: [rejectedById], references: [id], onDelete: SetNull)
+  rejectionReason  String?   @db.Text
   lastModifiedById String?
-  lastModifier User? @relation("AssetVariantLastModifier", fields: [lastModifiedById], references: [id], onDelete: SetNull)
-  deletedAt DateTime?
-  deletedById String?
-  deleter User? @relation("AssetVariantDeleter", fields: [deletedById], references: [id], onDelete: SetNull)
+  lastModifier     User?     @relation("AssetVariantLastModifier", fields: [lastModifiedById], references: [id], onDelete: SetNull)
+  deletedAt        DateTime?
+  deletedById      String?
+  deleter          User?     @relation("AssetVariantDeleter", fields: [deletedById], references: [id], onDelete: SetNull)
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -806,10 +1072,10 @@ model DraftGroup {
 
   status  DraftGroupStatus @default(DRAFT)
   summary Json
-  notes   String? @db.Text
+  notes   String?          @db.Text
 
   createdBy String
-  creator   User @relation("DraftGroupCreator", fields: [createdBy], references: [id])
+  creator   User   @relation("DraftGroupCreator", fields: [createdBy], references: [id])
 
   preSkus PreSku[]
 
@@ -833,7 +1099,7 @@ model AssistedAssemblyAiRender {
   params         Json
 
   referenceImageUrl String?
-  resultImages      Json  @default("[]")
+  resultImages      Json    @default("[]")
 
   workspaceSnapshot Json
   assetSnapshot     Json
@@ -841,7 +1107,7 @@ model AssistedAssemblyAiRender {
   externalRequestId String?
   attempts          Json?
   status            AssistedAssemblyAiRenderStatus @default(PENDING)
-  errorMessage      String? @db.Text
+  errorMessage      String?                        @db.Text
   durationMs        Int?
 
   createdAt DateTime @default(now())
@@ -852,30 +1118,31 @@ model AssistedAssemblyAiRender {
 }
 
 model PreSku {
-  id           String @id @default(cuid())
+  id           String     @id @default(cuid())
   draftGroupId String
   draftGroup   DraftGroup @relation(fields: [draftGroupId], references: [id], onDelete: Cascade)
 
-  sequence      Int
-  defaultName   String
-  customName    String?
-  status        PreSkuStatus @default(DRAFT)
-  sourceCandidateKey String
-  familySelection    Json
-  variantSelection   Json
+  sequence            Int
+  defaultName         String
+  customName          String?
+  status              PreSkuStatus @default(DRAFT)
+  sourceCandidateKey  String
+  familySelection     Json
+  variantSelection    Json
   recommendedHardware Json?
-  previewNodes       Json
-  displaySummary     Json
-  bomPreview         Json
-  weightPreview      Float?
-  componentCodes     String[]
-  explosionPreview   Json?
-  installStepPreview Json
-  packagingSnapshot  Json?
-  notes              String? @db.Text
+  previewNodes        Json
+  displaySummary      Json
+  bomPreview          Json
+  weightPreview       Float?
+  componentCodes      String[]
+  explosionPreview    Json?
+  installStepPreview  Json
+  packagingSnapshot   Json?
+  notes               String?      @db.Text
 
-  packagingPlan PreSkuPackagingPlan?
-  formalizedSku ProductSKU? @relation("PreSkuFormalizedSku")
+  basicInfo        PreSkuBasicInfo?
+  packagingPlan    PreSkuPackagingPlan?
+  formalizedSku    ProductSKU?             @relation("PreSkuFormalizedSku")
   locationBindings PreSkuLocationBinding[]
 
   createdAt DateTime @default(now())
@@ -886,18 +1153,50 @@ model PreSku {
   @@index([status])
 }
 
-model PreSkuPackagingPlan {
-  id      String @id @default(cuid())
+model PreSkuBasicInfo {
+  id       String @id @default(cuid())
   preSkuId String @unique
   preSku   PreSku @relation(fields: [preSkuId], references: [id], onDelete: Cascade)
 
-  sourceType  PackagingSourceType @default(PRE_SKU)
-  sourceRefId String?
-  status      String @default("DRAFT")
-  boxes         Json  @default("[]")
-  costSummary   Json?
-  processDraft  Json?
-  notes         String? @db.Text
+  model         String?
+  formalSkuCode String?
+  barcode       String?
+  size          String?
+  color         String?
+  material      String?
+  specName      String?
+  versionNo     String?
+  setCount      String?
+  attributeCode String?
+  drawingId     String?
+  installMethod String?
+
+  manualUpdatedBy     String?
+  manualUpdatedByName String?
+  manualUpdatedAt     DateTime?
+  source              String   @default("DRAFT_GROUP")
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  @@index([model])
+  @@index([formalSkuCode])
+  @@index([barcode])
+  @@index([specName, versionNo])
+}
+
+model PreSkuPackagingPlan {
+  id       String @id @default(cuid())
+  preSkuId String @unique
+  preSku   PreSku @relation(fields: [preSkuId], references: [id], onDelete: Cascade)
+
+  sourceType   PackagingSourceType @default(PRE_SKU)
+  sourceRefId  String?
+  status       String              @default("DRAFT")
+  boxes        Json                @default("[]")
+  costSummary  Json?
+  processDraft Json?
+  notes        String?             @db.Text
 
   packagedItems PackagedItem[]
 
@@ -908,21 +1207,21 @@ model PreSkuPackagingPlan {
 }
 
 model WarehouseLocation {
-  id    String @id @default(cuid())
-  code  String @unique
-  name  String
-  zone  String?
-  aisle String?
-  shelf String?
-  bin   String?
-  notes String? @db.Text
+  id       String  @id @default(cuid())
+  code     String  @unique
+  name     String
+  zone     String?
+  aisle    String?
+  shelf    String?
+  bin      String?
+  notes    String? @db.Text
   isActive Boolean @default(true)
 
-  skus          ProductSKU[] @relation("ProductSKUWarehouseLocation")
-  packagedItems PackagedItem[] @relation("PackagedItemWarehouseLocation")
-  assetVariantBindings AssetVariantLocationBinding[]
+  skus                  ProductSKU[]                  @relation("ProductSKUWarehouseLocation")
+  packagedItems         PackagedItem[]                @relation("PackagedItemWarehouseLocation")
+  assetVariantBindings  AssetVariantLocationBinding[]
   brandMaterialBindings BrandMaterialBinding[]
-  preSkuBindings PreSkuLocationBinding[]
+  preSkuBindings        PreSkuLocationBinding[]
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -931,7 +1230,7 @@ model WarehouseLocation {
 }
 
 model AssetVariantLocationBinding {
-  id                  String   @id @default(cuid())
+  id                  String @id @default(cuid())
   assetVariantId      String
   warehouseLocationId String
 
@@ -946,7 +1245,7 @@ model AssetVariantLocationBinding {
 }
 
 model BrandMaterialBinding {
-  id                  String   @id @default(cuid())
+  id                  String             @id @default(cuid())
   brand               String
   materialType        String
   warehouseLocationId String?
@@ -954,8 +1253,8 @@ model BrandMaterialBinding {
   fileUrl             String?
   fileName            String?
   fileSize            Int?
-  createdAt           DateTime @default(now())
-  updatedAt           DateTime @updatedAt
+  createdAt           DateTime           @default(now())
+  updatedAt           DateTime           @updatedAt
 
   @@unique([brand, materialType])
   @@index([brand])
@@ -963,7 +1262,7 @@ model BrandMaterialBinding {
 }
 
 model PreSkuLocationBinding {
-  id                  String   @id @default(cuid())
+  id                  String @id @default(cuid())
   preSkuId            String
   warehouseLocationId String
 
@@ -978,23 +1277,23 @@ model PreSkuLocationBinding {
 }
 
 model PackagedItem {
-  id                   String @id @default(cuid())
-  code                 String @unique
-  name                 String
+  id                    String               @id @default(cuid())
+  code                  String               @unique
+  name                  String
   preSkuPackagingPlanId String?
   preSkuPackagingPlan   PreSkuPackagingPlan? @relation(fields: [preSkuPackagingPlanId], references: [id], onDelete: SetNull)
-  skuId                String?
-  sku                  ProductSKU? @relation("PackagedItemSku", fields: [skuId], references: [id], onDelete: SetNull)
-  warehouseLocationId  String?
-  warehouseLocation    WarehouseLocation? @relation("PackagedItemWarehouseLocation", fields: [warehouseLocationId], references: [id], onDelete: SetNull)
-  quantityPerPack      Int    @default(1)
-  stockQuantity        Int    @default(0)
-  length               Float?
-  width                Float?
-  height               Float?
-  weight               Float?
-  payload              Json?
-  status               String @default("DRAFT")
+  skuId                 String?
+  sku                   ProductSKU?          @relation("PackagedItemSku", fields: [skuId], references: [id], onDelete: SetNull)
+  warehouseLocationId   String?
+  warehouseLocation     WarehouseLocation?   @relation("PackagedItemWarehouseLocation", fields: [warehouseLocationId], references: [id], onDelete: SetNull)
+  quantityPerPack       Int                  @default(1)
+  stockQuantity         Int                  @default(0)
+  length                Float?
+  width                 Float?
+  height                Float?
+  weight                Float?
+  payload               Json?
+  status                String               @default("DRAFT")
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -1125,6 +1424,17 @@ enum AssetSkuSyncEventStatus {
   FAILED
 }
 
+enum ProductSkuAssetSourceStatus {
+  ACTIVE
+  DELETED
+  MISSING
+}
+
+enum IntakeNonIntegratedSkuDataQualityStatus {
+  READY
+  INCOMPLETE
+}
+
 enum PackagingSourceType {
   PRODUCT
   PRE_SKU
@@ -1136,14 +1446,14 @@ model User {
   id String @id @default(cuid())
 
   // 登录凭证
-  email         String @unique // 邮箱（用于登录）
-  name          String @unique // 姓名/花名（用于登录和显示）
-  password      String
-  loginSource   String @default("LOCAL")
-  dingtalkUserId String? @unique
-  dingtalkUnionId String? @unique
-  dingtalkBoundAt DateTime?
-  employeeDirectoryId String? @unique
+  email               String             @unique // 邮箱（用于登录）
+  name                String             @unique // 姓名/花名（用于登录和显示）
+  password            String
+  loginSource         String             @default("LOCAL")
+  dingtalkUserId      String?            @unique
+  dingtalkUnionId     String?            @unique
+  dingtalkBoundAt     DateTime?
+  employeeDirectoryId String?            @unique
   employeeDirectory   EmployeeDirectory? @relation(fields: [employeeDirectoryId], references: [id], onDelete: SetNull)
 
   // 首次登录标识
@@ -1154,7 +1464,7 @@ model User {
   phone  String?
 
   // 角色与权限
-  role Role @default(USER)
+  role          Role                  @default(USER)
   businessRoles BusinessAccountType[] @default([])
 
   // 组织架构
@@ -1172,33 +1482,33 @@ model User {
   status UserStatus @default(PENDING)
 
   // 关联
-  createdProducts   Product[]    @relation("ProductCreator")
-  ownedSKUs         ProductSKU[] @relation("SKUOwner")
-  createdPlanningTemplates  PlanningTemplate[]  @relation("PlanningTemplateCreator")
-  createdPlanningWorkspaces PlanningWorkspace[] @relation("PlanningWorkspaceCreator")
-  createdPlanningDrafts     PlanningDraft[]     @relation("PlanningDraftCreator")
-  createdSubstrates    Substrate[]    @relation("SubstrateCreator")
-  createdAssetFamilies AssetFamily[]  @relation("AssetFamilyCreator")
-  submittedAssetFamilies AssetFamily[] @relation("AssetFamilySubmitter")
-  reviewedAssetFamilies AssetFamily[] @relation("AssetFamilyReviewer")
-  rejectedAssetFamilies AssetFamily[] @relation("AssetFamilyRejecter")
-  modifiedAssetFamilies AssetFamily[] @relation("AssetFamilyLastModifier")
-  deletedAssetFamilies AssetFamily[] @relation("AssetFamilyDeleter")
-  createdAssetVariants AssetVariant[] @relation("AssetVariantCreator")
-  submittedAssetVariants AssetVariant[] @relation("AssetVariantSubmitter")
-  reviewedAssetVariants AssetVariant[] @relation("AssetVariantReviewer")
-  rejectedAssetVariants AssetVariant[] @relation("AssetVariantRejecter")
-  modifiedAssetVariants AssetVariant[] @relation("AssetVariantLastModifier")
-  deletedAssetVariants AssetVariant[] @relation("AssetVariantDeleter")
-  createdAssetSeries AssetSeries[] @relation("AssetSeriesCreator")
-  createdDraftGroups     DraftGroup[]    @relation("DraftGroupCreator")
-  assistedAssemblyAiRenders AssistedAssemblyAiRender[] @relation("AssistedAssemblyAiRenderCreator")
-  collaboratedProducts ProductCollaborator[] @relation("ProductCollaboratorUser")
-  addedProductCollaborators ProductCollaborator[] @relation("ProductCollaboratorAddedBy")
-  feedbacks         Feedback[]   @relation("FeedbackSubmitter")
-  assignedFeedbacks Feedback[]   @relation("FeedbackAssignee")
-  createdApprovalWorkflows ApprovalWorkflow[] @relation("ApprovalWorkflowCreator")
-  approvalWorkflowChanges ApprovalWorkflowFieldChange[]
+  createdProducts           Product[]                     @relation("ProductCreator")
+  ownedSKUs                 ProductSKU[]                  @relation("SKUOwner")
+  createdPlanningTemplates  PlanningTemplate[]            @relation("PlanningTemplateCreator")
+  createdPlanningWorkspaces PlanningWorkspace[]           @relation("PlanningWorkspaceCreator")
+  createdPlanningDrafts     PlanningDraft[]               @relation("PlanningDraftCreator")
+  createdSubstrates         Substrate[]                   @relation("SubstrateCreator")
+  createdAssetFamilies      AssetFamily[]                 @relation("AssetFamilyCreator")
+  submittedAssetFamilies    AssetFamily[]                 @relation("AssetFamilySubmitter")
+  reviewedAssetFamilies     AssetFamily[]                 @relation("AssetFamilyReviewer")
+  rejectedAssetFamilies     AssetFamily[]                 @relation("AssetFamilyRejecter")
+  modifiedAssetFamilies     AssetFamily[]                 @relation("AssetFamilyLastModifier")
+  deletedAssetFamilies      AssetFamily[]                 @relation("AssetFamilyDeleter")
+  createdAssetVariants      AssetVariant[]                @relation("AssetVariantCreator")
+  submittedAssetVariants    AssetVariant[]                @relation("AssetVariantSubmitter")
+  reviewedAssetVariants     AssetVariant[]                @relation("AssetVariantReviewer")
+  rejectedAssetVariants     AssetVariant[]                @relation("AssetVariantRejecter")
+  modifiedAssetVariants     AssetVariant[]                @relation("AssetVariantLastModifier")
+  deletedAssetVariants      AssetVariant[]                @relation("AssetVariantDeleter")
+  createdAssetSeries        AssetSeries[]                 @relation("AssetSeriesCreator")
+  createdDraftGroups        DraftGroup[]                  @relation("DraftGroupCreator")
+  assistedAssemblyAiRenders AssistedAssemblyAiRender[]    @relation("AssistedAssemblyAiRenderCreator")
+  collaboratedProducts      ProductCollaborator[]         @relation("ProductCollaboratorUser")
+  addedProductCollaborators ProductCollaborator[]         @relation("ProductCollaboratorAddedBy")
+  feedbacks                 Feedback[]                    @relation("FeedbackSubmitter")
+  assignedFeedbacks         Feedback[]                    @relation("FeedbackAssignee")
+  createdApprovalWorkflows  ApprovalWorkflow[]            @relation("ApprovalWorkflowCreator")
+  approvalWorkflowChanges   ApprovalWorkflowFieldChange[]
 
   // 操作日志
   activityLogs ActivityLog[]
@@ -1219,12 +1529,12 @@ model User {
 model EmployeeLookupCache {
   id String @id @default(cuid())
 
-  cacheKey String @unique
-  keyType String
-  lookupValue String
-  result Json?
+  cacheKey     String                @unique
+  keyType      String
+  lookupValue  String
+  result       Json?
   sourceStatus EmployeeSourceStatus?
-  expiresAt DateTime
+  expiresAt    DateTime
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -1237,11 +1547,11 @@ model EmployeeLookupCache {
 model Department {
   id String @id @default(cuid())
 
-  name     String @unique
-  fullPath String // 完整路径，如 "设计部-3D组-建模小组"
+  name        String    @unique
+  fullPath    String // 完整路径，如 "设计部-3D组-建模小组"
   description String?
-  externalId String? @unique
-  syncedAt DateTime?
+  externalId  String?   @unique
+  syncedAt    DateTime?
   rawSnapshot Json?
 
   // 层级关系
@@ -1260,12 +1570,12 @@ model Department {
   teams Team[]
 
   // 产品
-  products Product[]
+  products           Product[]
   planningWorkspaces PlanningWorkspace[] @relation("PlanningWorkspaceDepartment")
 
   // 排序
-  orderIndex Int @default(0)
-  isActive Boolean @default(true)
+  orderIndex Int     @default(0)
+  isActive   Boolean @default(true)
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -1293,8 +1603,8 @@ model Team {
   members User[] @relation("TeamMembers")
 
   // 排序
-  orderIndex Int @default(0)
-  isActive Boolean @default(true)
+  orderIndex Int     @default(0)
+  isActive   Boolean @default(true)
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -1306,20 +1616,20 @@ model Team {
 model ApprovalWorkflow {
   id String @id @default(cuid())
 
-  approvalNumber String @unique
-  title String
-  status ApprovalWorkflowStatus @default(DRAFT)
-  productId String
-  product IntakeNonIntegratedProduct @relation(fields: [productId], references: [id], onDelete: Cascade)
-  accessKey String @unique
-  businessRoles BusinessAccountType[] @default([])
-  participantUserIds String[] @default([])
-  initiatorId String
-  initiator User @relation("ApprovalWorkflowCreator", fields: [initiatorId], references: [id])
-  lastSyncedAt DateTime?
-  fieldMatrix Json?
-  summary Json?
-  metadata Json?
+  approvalNumber     String                     @unique
+  title              String
+  status             ApprovalWorkflowStatus     @default(DRAFT)
+  productId          String
+  product            IntakeNonIntegratedProduct @relation(fields: [productId], references: [id], onDelete: Cascade)
+  accessKey          String                     @unique
+  businessRoles      BusinessAccountType[]      @default([])
+  participantUserIds String[]                   @default([])
+  initiatorId        String
+  initiator          User                       @relation("ApprovalWorkflowCreator", fields: [initiatorId], references: [id])
+  lastSyncedAt       DateTime?
+  fieldMatrix        Json?
+  summary            Json?
+  metadata           Json?
 
   fieldChanges ApprovalWorkflowFieldChange[]
 
@@ -1334,17 +1644,17 @@ model ApprovalWorkflow {
 model ApprovalWorkflowFieldChange {
   id String @id @default(cuid())
 
-  workflowId String
-  workflow ApprovalWorkflow @relation(fields: [workflowId], references: [id], onDelete: Cascade)
-  userId String
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-  fieldKey String
-  oldValue Json?
-  newValue Json?
-  source String
-  sourcePage String?
-  fromDingtalkPage Boolean @default(false)
-  metadata Json?
+  workflowId       String
+  workflow         ApprovalWorkflow @relation(fields: [workflowId], references: [id], onDelete: Cascade)
+  userId           String
+  user             User             @relation(fields: [userId], references: [id], onDelete: Cascade)
+  fieldKey         String
+  oldValue         Json?
+  newValue         Json?
+  source           String
+  sourcePage       String?
+  fromDingtalkPage Boolean          @default(false)
+  metadata         Json?
 
   createdAt DateTime @default(now())
 
@@ -1356,18 +1666,18 @@ model ApprovalWorkflowFieldChange {
 model EmployeeDirectory {
   id String @id @default(cuid())
 
-  dingtalkUserId String? @unique
-  dingtalkUnionId String? @unique
-  jobNumber String?
-  name String
-  mobile String?
-  email String?
-  title String?
-  sourceStatus EmployeeSourceStatus @default(EMPLOYED)
+  dingtalkUserId              String?              @unique
+  dingtalkUnionId             String?              @unique
+  jobNumber                   String?
+  name                        String
+  mobile                      String?
+  email                       String?
+  title                       String?
+  sourceStatus                EmployeeSourceStatus @default(EMPLOYED)
   primaryDepartmentExternalId String?
-  departmentExternalIds Json?
-  syncedAt DateTime @default(now())
-  rawSnapshot Json?
+  departmentExternalIds       Json?
+  syncedAt                    DateTime             @default(now())
+  rawSnapshot                 Json?
 
   user User?
 
@@ -1535,7 +1845,7 @@ model Material {
 
   // 基本信息
   name       String // 材质名称，如 "橡木纹-自然色"
-  code       String  @unique // 花色编码
+  code       String           @unique // 花色编码
   categoryId String // 分类 ID
   category   MaterialCategory @relation(fields: [categoryId], references: [id])
 
@@ -1565,8 +1875,8 @@ model Material {
   createdBy String? // 创建者 ID
 
   // 关联板件材质
-  panelMaterials PanelMaterial[]
-  assetVariants AssetVariant[] @relation("AssetVariantFinish")
+  panelMaterials    PanelMaterial[]
+  assetVariants     AssetVariant[]    @relation("AssetVariantFinish")
   substrateFinishes SubstrateFinish[]
 
   createdAt DateTime @default(now())
@@ -1639,10 +1949,10 @@ model ThemeConfig {
 model IntakeNodePermissionOverride {
   id String @id @default(cuid())
 
-  targetKey String
+  targetKey  String
   subjectKey String
-  action String
-  enabled Boolean @default(true)
+  action     String
+  enabled    Boolean @default(true)
 
   createdBy String?
   updatedBy String?
@@ -1717,7 +2027,7 @@ model Hardware {
   // ===== 组合件相关 =====
   // 是否为组合件主件（如把手、铰链等需要配套螺丝的五金件）
   isComposite Boolean @default(false)
-  
+
   // 配件定义（仅当 isComposite=true 时有效）
   // 示例: [{ hardwareCode: "M4x25", quantity: 2, relativePositionTolerance: 50 }]
   // hardwareCode: 配件的五金件编码
@@ -1764,7 +2074,7 @@ model ProductHardware {
 
   // 关联产品
   productId String
-  product   Product @relation(fields: [productId], references: [id], onDelete: Cascade)
+  product   Product     @relation(fields: [productId], references: [id], onDelete: Cascade)
   skuId     String?
   sku       ProductSKU? @relation(fields: [skuId], references: [id], onDelete: Cascade)
 
@@ -1878,9 +2188,9 @@ model CommonComponent {
   modelUrl     String
   thumbnailUrl String?
 
-  dimensions    Json?
+  dimensions     Json?
   specifications Json?
-  mountPoints   Json?
+  mountPoints    Json?
 
   isPreset Boolean @default(false)
   isActive Boolean @default(true)
@@ -1906,7 +2216,7 @@ model Hole {
 
   // 关联板件
   panelId String
-  panel   Panel  @relation(fields: [panelId], references: [id], onDelete: Cascade)
+  panel   Panel       @relation(fields: [panelId], references: [id], onDelete: Cascade)
   skuId   String?
   sku     ProductSKU? @relation(fields: [skuId], references: [id], onDelete: Cascade)
 
@@ -1968,12 +2278,12 @@ model SystemConfig {
 
 model ProviderConfig {
   id          String   @id @default(cuid())
-  serviceType String   // ai-render | prompt-optimizer
-  name        String   // 用户自定义名称，如 "生产环境"、"测试 Key"
+  serviceType String // ai-render | prompt-optimizer
+  name        String // 用户自定义名称，如 "生产环境"、"测试 Key"
   baseUrl     String
   apiKey      String
   model       String?
-  extra       Json?    // 扩展字段
+  extra       Json? // 扩展字段
   isActive    Boolean  @default(false)
   sortOrder   Int      @default(0)
   createdAt   DateTime @default(now())
diff --git a/furniture-3d-system/prisma/seed.ts b/furniture-3d-system/prisma/seed.ts
index 0015554e..1109d25f 100644
--- a/furniture-3d-system/prisma/seed.ts
+++ b/furniture-3d-system/prisma/seed.ts
@@ -3,22 +3,53 @@
  * 用于填充测试数据和演示数据
  */
 
-import { PrismaClient, FeedbackStatus, FeedbackPriority, ActivityType } from '@prisma/client';
-import { PrismaPg } from '@prisma/adapter-pg';
-import { Pool } from 'pg';
+import type { PrismaClient } from '@prisma/client';
+import { FeedbackStatus, FeedbackPriority, ActivityType } from '@prisma/client';
 import { hash } from 'bcryptjs';
 import { STANDARD_FINISH_CATALOG } from '../src/lib/standard-finish-catalog';
 import { buildStandardFinishMaterialData } from '../src/lib/standard-finish-sync';
 import 'dotenv/config';
 
-// Prisma 7 需要使用适配器
-const pool = new Pool({
-  connectionString: process.env.DATABASE_URL,
-});
-const adapter = new PrismaPg(pool);
-const prisma = new PrismaClient({ adapter });
+const SEED_CONFIRM_TOKEN = 'reset-local-seed';
+let prisma: PrismaClient | null = null;
+
+function assertLocalDestructiveSeedAllowed() {
+  if (!process.argv.includes(`--confirm=${SEED_CONFIRM_TOKEN}`)) {
+    throw new Error(`拒绝执行 destructive seed：必须显式追加 --confirm=${SEED_CONFIRM_TOKEN}。`);
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('拒绝执行 destructive seed：NODE_ENV=production。');
+  }
+  const databaseUrl = process.env.DATABASE_URL;
+  if (!databaseUrl) {
+    throw new Error('拒绝执行 destructive seed：DATABASE_URL 未配置。');
+  }
+  const parsed = new URL(databaseUrl);
+  if (!['localhost', '127.0.0.1', '::1'].includes(parsed.hostname)) {
+    throw new Error('拒绝执行 destructive seed：只允许本机数据库。');
+  }
+}
+
+function buildDemoSkuAssetProfile(input: {
+  color?: string;
+  size?: string;
+  material?: string;
+  variant?: string;
+}) {
+  return {
+    size: input.size ? { label: input.size } : {},
+    color: input.color ?? null,
+    material: input.material ?? null,
+    specName: input.variant ?? null,
+    syncedAt: new Date(),
+    lockedReasons: {},
+    sourceVariants: [],
+  };
+}
 
 async function main() {
+  assertLocalDestructiveSeedAllowed();
+  ({ prisma } = await import('../src/lib/prisma'));
   console.log('🌱 开始填充数据库...');
 
   // 清理现有数据
@@ -521,7 +552,10 @@ async function main() {
           skuCode: `SF-001-${color.substring(0, 2)}-${size.substring(0, 2)}`,
           productId: sofa.id,
           ownerId: designers[0].id,
-          attributes: { color, size, material: '布艺' },
+          attributes: {},
+          assetProfile: {
+            create: buildDemoSkuAssetProfile({ color, size, material: '布艺' }),
+          },
           price: size === '双人座' ? 2999 : 3999,
           costPrice: size === '双人座' ? 1500 : 2000,
           stock: Math.floor(Math.random() * 50) + 10,
@@ -545,7 +579,10 @@ async function main() {
           skuCode: `${product.modelNumber}-V${j}`,
           productId: product.id,
           ownerId: designers[i % designers.length].id,
-          attributes: { variant: `变体${j}` },
+          attributes: {},
+          assetProfile: {
+            create: buildDemoSkuAssetProfile({ variant: `变体${j}` }),
+          },
           price: 1000 + Math.random() * 4000,
           costPrice: 500 + Math.random() * 2000,
           stock: Math.floor(Math.random() * 100),
@@ -781,6 +818,5 @@ main()
     process.exit(1);
   })
   .finally(async () => {
-    await prisma.$disconnect();
-    await pool.end();
+    await prisma?.$disconnect();
   });
diff --git a/furniture-3d-system/scripts/add-more-skus.ts b/furniture-3d-system/scripts/add-more-skus.ts
index 5cace852..eefeaaa4 100644
--- a/furniture-3d-system/scripts/add-more-skus.ts
+++ b/furniture-3d-system/scripts/add-more-skus.ts
@@ -4,7 +4,27 @@
  * 运行: npx tsx scripts/add-more-skus.ts
  */
 
-import { prisma } from '../src/lib/prisma'
+const CONFIRM_TOKEN = 'add-local-demo-skus'
+type PrismaSingleton = typeof import('../src/lib/prisma')['prisma']
+
+let prisma: PrismaSingleton
+
+function assertLocalScriptAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`add-more-skus 只允许显式本地补数：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('add-more-skus 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('add-more-skus 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('add-more-skus 只允许连接本机数据库。')
+  }
+}
 
 // 示例模型 URL（使用公开的 GLTF 模型）
 const sampleModels = [
@@ -32,6 +52,8 @@ const sizes = ['小号', '中号', '大号', 'S', 'M', 'L', 'XL']
 const materials = ['实木', '板材', '金属', '布艺', '皮革', '玻璃']
 
 async function addMoreSkus() {
+  assertLocalScriptAllowed()
+  ;({ prisma } = await import('../src/lib/prisma'))
   console.log('开始为产品添加更多 SKU...\n')
 
   // 获取所有用户作为潜在负责人
@@ -81,11 +103,12 @@ async function addMoreSkus() {
       const material = materials[Math.floor(Math.random() * materials.length)]
       const owner = users[Math.floor(Math.random() * users.length)]
 
-      const skuCode = `${product.modelNumber}-${color.substring(0, 2)}-${size}`
+      const skuCode = `${product.modelNumber}-${color.substring(0, 2)}-${size}`.trim().toUpperCase()
+      const normalizedSkuCode = skuCode.trim().toUpperCase()
       
       // 检查 SKU 编码是否已存在
       const existing = await prisma.productSKU.findUnique({
-        where: { skuCode }
+        where: { skuCode: normalizedSkuCode }
       })
 
       if (existing) {
@@ -144,7 +167,13 @@ async function addMoreSkus() {
     console.log(`${p.modelNumber.padEnd(12)} ${p.name.padEnd(20)} ${p._count.skus} 个 SKU`)
   })
 
-  await prisma.$disconnect()
 }
 
-addMoreSkus().catch(console.error)
+addMoreSkus()
+  .catch((error) => {
+    console.error(error)
+    process.exitCode = 1
+  })
+  .finally(async () => {
+    await prisma?.$disconnect()
+  })
diff --git a/furniture-3d-system/scripts/backfill-asset-variant-thumbnails.ts b/furniture-3d-system/scripts/backfill-asset-variant-thumbnails.ts
index cee09225..6af417f2 100644
--- a/furniture-3d-system/scripts/backfill-asset-variant-thumbnails.ts
+++ b/furniture-3d-system/scripts/backfill-asset-variant-thumbnails.ts
@@ -1,17 +1,24 @@
 import 'dotenv/config'
+import crypto from 'node:crypto'
+import fs from 'node:fs'
+import path from 'node:path'
 
-import { prisma } from '../src/lib/prisma'
-import { assetCenterService } from '../src/server/services/asset-center.service'
-import {
-  ASSET_VARIANT_THUMBNAIL_PLACEHOLDER_URL,
-  assetVariantThumbnailService,
-} from '../src/server/services/asset-variant-thumbnail.service'
+const CONFIRM_TOKEN = 'backfill-asset-variant-thumbnails'
+const ASSET_VARIANT_THUMBNAIL_PLACEHOLDER_URL = '/asset-thumbnails/placeholder.svg'
+type PrismaSingleton = typeof import('../src/lib/prisma')['prisma']
+type AssetCenterService = typeof import('../src/server/services/asset-center.service')['assetCenterService']
+type AssetVariantThumbnailService = typeof import('../src/server/services/asset-variant-thumbnail.service')['assetVariantThumbnailService']
+
+let prisma: PrismaSingleton
+let assetCenterService: AssetCenterService
+let assetVariantThumbnailService: AssetVariantThumbnailService
 
 interface BackfillOptions {
   renderBaseUrl: string
   force: boolean
   concurrency: number
   limit: number | null
+  apply: boolean
 }
 
 interface BackfillTask {
@@ -62,6 +69,60 @@ function resolveOptions(): BackfillOptions {
       parsedLimit !== null && Number.isFinite(parsedLimit) && parsedLimit > 0
         ? Math.floor(parsedLimit)
         : null,
+    apply: readFlag('--apply'),
+  }
+}
+
+function databaseIdentity(databaseUrl: string): string {
+  const parsed = new URL(databaseUrl)
+  return [
+    parsed.protocol.replace(/:$/, ''),
+    parsed.username.toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port,
+    parsed.pathname.replace(/^\//, '').toLowerCase(),
+    (parsed.searchParams.get('schema') || parsed.searchParams.get('currentSchema') || '').toLowerCase(),
+  ].join('|')
+}
+
+function backupSha256(): string {
+  const rawPath = process.env.DATABASE_BACKUP_FILE || process.env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    throw new Error('资产缩略图回填真实写库必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。')
+  }
+  const absolutePath = path.resolve(process.cwd(), rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    throw new Error('资产缩略图回填指定的数据库备份文件不存在。')
+  }
+  return crypto.createHash('sha256').update(fs.readFileSync(absolutePath)).digest('hex')
+}
+
+function assertApplyAllowed() {
+  if (!process.argv.includes('--apply')) {
+    throw new Error('资产缩略图回填默认禁止写库/生成文件；确认目标环境后请显式追加 --apply。')
+  }
+  if (readOption('--confirm') !== CONFIRM_TOKEN) {
+    throw new Error(`资产缩略图回填真实写库必须显式传入 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('资产缩略图回填真实写库必须先配置 DATABASE_URL。')
+  }
+  const expectedDatabaseIdentity = readOption('--expected-database-identity')
+  if (!expectedDatabaseIdentity) {
+    throw new Error(
+      `资产缩略图回填真实写库必须显式传入 --expected-database-identity=${databaseIdentity(databaseUrl)}。`,
+    )
+  }
+  if (expectedDatabaseIdentity !== databaseIdentity(databaseUrl)) {
+    throw new Error('资产缩略图回填目标库身份和当前 DATABASE_URL 不一致，禁止写库。')
+  }
+  const expectedBackupSha256 = readOption('--expected-backup-sha256')
+  if (!expectedBackupSha256) {
+    throw new Error('资产缩略图回填真实写库必须显式传入 --expected-backup-sha256。')
+  }
+  if (expectedBackupSha256 !== backupSha256()) {
+    throw new Error('资产缩略图回填备份 SHA-256 和当前备份文件不一致，禁止写库。')
   }
 }
 
@@ -131,6 +192,15 @@ async function runWithConcurrency<T>(
 
 async function main() {
   const options = resolveOptions()
+  assertApplyAllowed()
+  const [prismaModule, assetCenterModule, thumbnailModule] = await Promise.all([
+    import('../src/lib/prisma'),
+    import('../src/server/services/asset-center.service'),
+    import('../src/server/services/asset-variant-thumbnail.service'),
+  ])
+  prisma = prismaModule.prisma
+  assetCenterService = assetCenterModule.assetCenterService
+  assetVariantThumbnailService = thumbnailModule.assetVariantThumbnailService
 
   console.log('开始批量补生成资产缩略图。')
   console.log(JSON.stringify(options, null, 2))
@@ -194,6 +264,6 @@ main()
     process.exitCode = 1
   })
   .finally(async () => {
-    await assetVariantThumbnailService.shutdown()
-    await prisma.$disconnect()
+    await assetVariantThumbnailService?.shutdown()
+    await prisma?.$disconnect()
   })
diff --git a/furniture-3d-system/scripts/backfill-sku-structural-data.ts b/furniture-3d-system/scripts/backfill-sku-structural-data.ts
index 5e690c24..2b134913 100644
--- a/furniture-3d-system/scripts/backfill-sku-structural-data.ts
+++ b/furniture-3d-system/scripts/backfill-sku-structural-data.ts
@@ -1,9 +1,75 @@
 import 'dotenv/config'
-import { prisma } from '../src/lib/prisma'
-import { readSkuCadDataFromAttributes } from '../src/lib/sku-cad-data'
-import { ensureSkuStructuralData } from '../src/server/services/sku-cad-import.helper'
+import crypto from 'node:crypto'
+import fs from 'node:fs'
+import path from 'node:path'
+
+const CONFIRM_TOKEN = 'backfill-sku-structural-data'
+
+function readOption(name: string): string {
+  const prefix = `${name}=`
+  const inline = process.argv.find((arg) => arg.startsWith(prefix))
+  if (inline) return inline.slice(prefix.length)
+  const index = process.argv.indexOf(name)
+  if (index === -1) return ''
+  const value = process.argv[index + 1] || ''
+  return value.startsWith('--') ? '' : value
+}
+
+function databaseIdentity(databaseUrl: string): string {
+  const parsed = new URL(databaseUrl)
+  return [
+    parsed.protocol.replace(/:$/, ''),
+    decodeURIComponent(parsed.username || ''),
+    parsed.hostname,
+    parsed.port || '',
+    parsed.pathname.replace(/^\//, ''),
+    parsed.searchParams.get('schema') || '',
+  ].join('|')
+}
+
+function backupSha256(): string {
+  const backupPath = process.env.DATABASE_BACKUP_FILE || process.env.DB_BACKUP_FILE || ''
+  if (!backupPath) return ''
+  const absolutePath = path.resolve(process.cwd(), backupPath)
+  if (!fs.existsSync(absolutePath)) return ''
+  return crypto.createHash('sha256').update(fs.readFileSync(absolutePath)).digest('hex')
+}
+
+function assertApplyGuards() {
+  if (!process.argv.includes('--apply')) return
+
+  if (readOption('--confirm') !== CONFIRM_TOKEN) {
+    throw new Error(`SKU 结构数据回填真实写库必须显式传入 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('SKU 结构数据回填真实写库必须先配置 DATABASE_URL。')
+  }
+  const expectedDatabaseIdentity = readOption('--expected-database-identity')
+  if (!expectedDatabaseIdentity) {
+    throw new Error('SKU 结构数据回填真实写库必须显式传入 --expected-database-identity。')
+  }
+  if (expectedDatabaseIdentity !== databaseIdentity(databaseUrl)) {
+    throw new Error('SKU 结构数据回填目标库身份和当前 DATABASE_URL 不一致，禁止写库。')
+  }
+  const expectedBackupSha256 = readOption('--expected-backup-sha256')
+  if (!expectedBackupSha256) {
+    throw new Error('SKU 结构数据回填真实写库必须显式传入 --expected-backup-sha256。')
+  }
+  if (expectedBackupSha256 !== backupSha256()) {
+    throw new Error('SKU 结构数据回填备份 sha256 和当前 DATABASE_BACKUP_FILE 不一致，禁止写库。')
+  }
+}
 
 async function main() {
+  assertApplyGuards()
+  const apply = process.argv.includes('--apply')
+  const [{ prisma }, { readSkuCadDataFromAttributes }, { ensureSkuStructuralData }] =
+    await Promise.all([
+      import('../src/lib/prisma'),
+      import('../src/lib/sku-cad-data'),
+      import('../src/server/services/sku-cad-import.helper'),
+    ])
   const skus = await prisma.productSKU.findMany({
     where: { deletedAt: null },
     select: {
@@ -16,43 +82,56 @@ async function main() {
   })
 
   let scanned = 0
+  let candidates = 0
   let filled = 0
   let skipped = 0
 
-  for (const sku of skus) {
-    scanned += 1
-    const cadData = readSkuCadDataFromAttributes(
-      (sku.attributes ?? null) as Record<string, unknown> | null
-    )
+  try {
+    for (const sku of skus) {
+      scanned += 1
+      const cadData = readSkuCadDataFromAttributes(
+        (sku.attributes ?? null) as Record<string, unknown> | null
+      )
 
-    if (!cadData) {
-      skipped += 1
-      continue
+      if (!cadData) {
+        skipped += 1
+        continue
+      }
+
+      const existingPanelsCount = await prisma.panel.count({
+        where: { skuId: sku.id },
+      })
+
+      if (existingPanelsCount > 0) {
+        skipped += 1
+        continue
+      }
+
+      candidates += 1
+      if (!apply) {
+        console.log(`[backfill] dry-run candidate ${sku.skuCode}`)
+        continue
+      }
+
+      await ensureSkuStructuralData({
+        productId: sku.productId,
+        skuId: sku.id,
+        cadSourceData: cadData,
+      })
+
+      filled += 1
+      console.log(`[backfill] filled ${sku.skuCode}`)
     }
-
-    const existingPanelsCount = await prisma.panel.count({
-      where: { skuId: sku.id },
-    })
-
-    if (existingPanelsCount > 0) {
-      skipped += 1
-      continue
-    }
-
-    await ensureSkuStructuralData({
-      productId: sku.productId,
-      skuId: sku.id,
-      cadSourceData: cadData,
-    })
-
-    filled += 1
-    console.log(`[backfill] filled ${sku.skuCode}`)
+  } finally {
+    await prisma.$disconnect()
   }
 
   console.log(
     JSON.stringify(
       {
+        apply,
         scanned,
+        candidates,
         filled,
         skipped,
       },
@@ -67,6 +146,3 @@ main()
     console.error(error)
     process.exit(1)
   })
-  .finally(async () => {
-    await prisma.$disconnect()
-  })
diff --git a/furniture-3d-system/scripts/cleanup-legacy-product-structure.ts b/furniture-3d-system/scripts/cleanup-legacy-product-structure.ts
index a96778ec..7470ff2b 100644
--- a/furniture-3d-system/scripts/cleanup-legacy-product-structure.ts
+++ b/furniture-3d-system/scripts/cleanup-legacy-product-structure.ts
@@ -1,15 +1,75 @@
 import 'dotenv/config'
-import { prisma } from '../src/lib/prisma'
+import crypto from 'node:crypto'
+import fs from 'node:fs'
+import path from 'node:path'
+import { hasSkuCadCompatibilityData } from '../src/lib/sku-cad-data'
 
-function hasSkuCadData(attributes: unknown): boolean {
-  if (!attributes || typeof attributes !== 'object' || Array.isArray(attributes)) {
-    return false
+const CONFIRM_TOKEN = 'cleanup-legacy-product-structure'
+type PrismaSingleton = typeof import('../src/lib/prisma')['prisma']
+
+let prisma: PrismaSingleton
+
+function readOption(name: string): string {
+  const inline = process.argv.find((arg) => arg.startsWith(`${name}=`))
+  if (inline) return inline.slice(name.length + 1).trim()
+  const index = process.argv.findIndex((arg) => arg === name)
+  const value = index >= 0 ? process.argv[index + 1] : ''
+  return value && !value.startsWith('--') ? value.trim() : ''
+}
+
+function databaseIdentity(databaseUrl: string): string {
+  const parsed = new URL(databaseUrl)
+  return [
+    parsed.protocol.replace(/:$/, ''),
+    parsed.username.toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port,
+    parsed.pathname.replace(/^\//, '').toLowerCase(),
+    (parsed.searchParams.get('schema') || parsed.searchParams.get('currentSchema') || '').toLowerCase(),
+  ].join('|')
+}
+
+function backupSha256(): string {
+  const rawPath = process.env.DATABASE_BACKUP_FILE || process.env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    throw new Error('legacy cleanup apply 必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。')
+  }
+  const absolutePath = path.resolve(process.cwd(), rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    throw new Error('legacy cleanup apply 指定的数据库备份文件不存在。')
+  }
+  return crypto.createHash('sha256').update(fs.readFileSync(absolutePath)).digest('hex')
+}
+
+function assertApplyAllowed() {
+  if (!process.argv.includes('--apply')) return
+  if (readOption('--confirm') !== CONFIRM_TOKEN) {
+    throw new Error(`legacy cleanup apply 必须显式传入 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('legacy cleanup apply 必须先配置 DATABASE_URL。')
+  }
+  const expectedDatabaseIdentity = readOption('--expected-database-identity')
+  if (!expectedDatabaseIdentity) {
+    throw new Error('legacy cleanup apply 必须显式传入 --expected-database-identity。')
+  }
+  if (expectedDatabaseIdentity !== databaseIdentity(databaseUrl)) {
+    throw new Error('legacy cleanup apply 的目标库身份和当前 DATABASE_URL 不一致。')
+  }
+  const expectedBackupSha256 = readOption('--expected-backup-sha256')
+  if (!expectedBackupSha256) {
+    throw new Error('legacy cleanup apply 必须显式传入 --expected-backup-sha256。')
+  }
+  if (expectedBackupSha256 !== backupSha256()) {
+    throw new Error('legacy cleanup apply 的备份 SHA-256 和当前备份文件不一致。')
   }
-  return Object.prototype.hasOwnProperty.call(attributes, '_skuCadData')
 }
 
 async function main() {
   const apply = process.argv.includes('--apply')
+  assertApplyAllowed()
+  ;({ prisma } = await import('../src/lib/prisma'))
 
   const products = await prisma.product.findMany({
     where: { deletedAt: null },
@@ -46,7 +106,7 @@ async function main() {
   }> = []
 
   for (const product of products) {
-    const activeSkuWithCadCount = product.skus.filter((sku) => hasSkuCadData(sku.attributes)).length
+    const activeSkuWithCadCount = product.skus.filter((sku) => hasSkuCadCompatibilityData(sku.attributes)).length
     if (activeSkuWithCadCount <= 0) continue
 
     const [panelCount, holeCount, hardwareCount] = await Promise.all([
diff --git a/furniture-3d-system/scripts/create-demo-data.js b/furniture-3d-system/scripts/create-demo-data.js
index 37b29cc4..b291eddb 100644
--- a/furniture-3d-system/scripts/create-demo-data.js
+++ b/furniture-3d-system/scripts/create-demo-data.js
@@ -3,12 +3,38 @@
  * 创建演示数据脚本
  * 用于快速生成测试产品和装配步骤
  */
+const DEMO_CONFIRM_TOKEN = 'reset-local-demo'
+let prisma = null
+let pool = null
 
-const { PrismaClient } = require('@prisma/client')
+function assertLocalDestructiveDemoAllowed() {
+  if (!process.argv.includes(`--confirm=${DEMO_CONFIRM_TOKEN}`)) {
+    throw new Error(`拒绝执行 destructive demo seed：必须显式追加 --confirm=${DEMO_CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('拒绝执行 destructive demo seed：NODE_ENV=production。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('拒绝执行 destructive demo seed：DATABASE_URL 未配置。')
+  }
+  const parsed = new URL(databaseUrl)
+  if (!['localhost', '127.0.0.1', '::1'].includes(parsed.hostname)) {
+    throw new Error('拒绝执行 destructive demo seed：只允许本机数据库。')
+  }
+}
 
-const prisma = new PrismaClient()
+function createPrismaClient() {
+  const { PrismaClient } = require('@prisma/client')
+  const { PrismaPg } = require('@prisma/adapter-pg')
+  const { Pool } = require('pg')
+  pool = new Pool({ connectionString: process.env.DATABASE_URL })
+  prisma = new PrismaClient({ adapter: new PrismaPg(pool) })
+}
 
 async function createDemoData() {
+  assertLocalDestructiveDemoAllowed()
+  createPrismaClient()
   console.log('🚀 开始创建演示数据...')
 
   try {
@@ -207,7 +233,8 @@ async function createDemoData() {
     console.error('❌ 创建演示数据失败:', error)
     throw error
   } finally {
-    await prisma.$disconnect()
+    await prisma?.$disconnect()
+    await pool?.end()
   }
 }
 
diff --git a/furniture-3d-system/scripts/install-employee-directory-sync-timer.sh b/furniture-3d-system/scripts/install-employee-directory-sync-timer.sh
index 1b68a88d..68d6adbe 100644
--- a/furniture-3d-system/scripts/install-employee-directory-sync-timer.sh
+++ b/furniture-3d-system/scripts/install-employee-directory-sync-timer.sh
@@ -60,7 +60,7 @@ WorkingDirectory=$APP_ROOT
 Environment=NODE_ENV=production
 EnvironmentFile=$APP_ENV
 EnvironmentFile=$SYNC_ENV
-ExecStart=/bin/bash -lc 'cd "$APP_ROOT" && ./node_modules/.bin/tsx scripts/sync-employee-directory.ts'
+ExecStart=/bin/bash -lc 'cd "$APP_ROOT" && ./node_modules/.bin/tsx scripts/sync-employee-directory.ts --apply'
 StandardOutput=journal
 StandardError=journal
 EOF
diff --git a/furniture-3d-system/scripts/performance-test.ts b/furniture-3d-system/scripts/performance-test.ts
index 86e0db12..bee4b4a2 100644
--- a/furniture-3d-system/scripts/performance-test.ts
+++ b/furniture-3d-system/scripts/performance-test.ts
@@ -3,9 +3,27 @@
  * 用于验证索引优化效果
  */
 
-import { PrismaClient } from '@prisma/client';
+const CONFIRM_TOKEN = 'run-local-performance-test'
+type PrismaSingleton = typeof import('../src/lib/prisma')['prisma']
 
-const prisma = new PrismaClient();
+let prisma: PrismaSingleton
+
+function assertLocalReadTestAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`performance-test 只允许显式本地读库测试：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('performance-test 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('performance-test 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('performance-test 只允许连接本机数据库，避免对生产库制造读压力。')
+  }
+}
 
 interface TestResult {
   name: string;
@@ -26,6 +44,8 @@ async function measureQuery(name: string, queryFn: () => Promise<unknown>): Prom
 }
 
 async function main() {
+  assertLocalReadTestAllowed()
+  ;({ prisma } = await import('../src/lib/prisma'))
   console.log('🚀 开始性能测试...\n');
 
   const results: TestResult[] = [];
@@ -365,8 +385,8 @@ async function main() {
 main()
   .catch((e) => {
     console.error('❌ 性能测试失败：', e);
-    process.exit(1);
+    process.exitCode = 1;
   })
   .finally(async () => {
-    await prisma.$disconnect();
+    await prisma?.$disconnect();
   });
diff --git a/furniture-3d-system/scripts/seed-open-platform-demo.ts b/furniture-3d-system/scripts/seed-open-platform-demo.ts
index 94a6f775..3a3c985f 100644
--- a/furniture-3d-system/scripts/seed-open-platform-demo.ts
+++ b/furniture-3d-system/scripts/seed-open-platform-demo.ts
@@ -1,13 +1,38 @@
 import 'dotenv/config'
 
-import { prisma } from '../src/lib/prisma'
-import { openPlatformDemoSeedService } from '../src/server/services/open-platform-demo-seed.service'
+const CONFIRM_TOKEN = 'seed-local-open-platform-demo'
+
+function assertLocalDemoSeedAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`open-platform demo seed 只允许显式本地造数：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('open-platform demo seed 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('open-platform demo seed 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('open-platform demo seed 只允许连接本机数据库。')
+  }
+}
 
 async function main() {
-  const result = await openPlatformDemoSeedService.seed()
+  assertLocalDemoSeedAllowed()
+  const [{ prisma }, { openPlatformDemoSeedService }] = await Promise.all([
+    import('../src/lib/prisma'),
+    import('../src/server/services/open-platform-demo-seed.service'),
+  ])
+  try {
+    const result = await openPlatformDemoSeedService.seed()
 
-  console.log('开放平台演示数据已完成。')
-  console.log(JSON.stringify(result, null, 2))
+    console.log('开放平台演示数据已完成。')
+    console.log(JSON.stringify(result, null, 2))
+  } finally {
+    await prisma.$disconnect()
+  }
 }
 
 main()
@@ -16,6 +41,3 @@ main()
     console.error(error)
     process.exitCode = 1
   })
-  .finally(async () => {
-    await prisma.$disconnect()
-  })
diff --git a/furniture-3d-system/scripts/seed-test-products.ts b/furniture-3d-system/scripts/seed-test-products.ts
index bc971e0d..fa21c8ab 100644
--- a/furniture-3d-system/scripts/seed-test-products.ts
+++ b/furniture-3d-system/scripts/seed-test-products.ts
@@ -1,25 +1,53 @@
 /**
  * 创建测试产品数据
  */
+const CONFIRM_TOKEN = 'seed-local-test-products'
 
-import { PrismaClient } from '@prisma/client'
+function assertLocalScriptAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`seed-test-products 只允许显式本地补数：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('seed-test-products 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('seed-test-products 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('seed-test-products 只允许连接本机数据库。')
+  }
+}
 
-const prisma = new PrismaClient()
+function buildDemoAssetProfile(profile: { color: string; size: string; material: string }) {
+  return {
+    size: { label: profile.size },
+    color: profile.color,
+    material: profile.material,
+    syncedAt: new Date(),
+    lockedReasons: {},
+    sourceVariants: [],
+  }
+}
 
 async function main() {
+  assertLocalScriptAllowed()
+  const { prisma } = await import('../src/lib/prisma')
   console.log('开始创建测试产品...')
 
-  // 获取第一个用户作为创建者和 SKU 负责人
-  const user = await prisma.user.findFirst({
-    where: { status: 'ACTIVE' },
-  })
+  try {
+    // 获取第一个用户作为创建者和 SKU 负责人
+    const user = await prisma.user.findFirst({
+      where: { status: 'ACTIVE' },
+    })
 
-  if (!user) {
-    console.error('❌ 没有找到活跃用户，请先创建用户')
-    process.exit(1)
-  }
+    if (!user) {
+      console.error('❌ 没有找到活跃用户，请先创建用户')
+      process.exit(1)
+    }
 
-  console.log(`使用用户: ${user.name} (${user.email})`)
+    console.log(`使用用户: ${user.name} (${user.email})`)
 
   // 测试产品数据
   const testProducts = [
@@ -32,7 +60,7 @@ async function main() {
       skus: [
         {
           skuCode: 'SF-001-GRAY-3S',
-          attributes: { color: '灰色', size: '三人座', material: '布艺' },
+          assetProfile: { color: '灰色', size: '三人座', material: '布艺' },
           price: 3999.00,
           costPrice: 2000.00,
           stock: 50,
@@ -40,7 +68,7 @@ async function main() {
         },
         {
           skuCode: 'SF-001-BLUE-3S',
-          attributes: { color: '蓝色', size: '三人座', material: '布艺' },
+          assetProfile: { color: '蓝色', size: '三人座', material: '布艺' },
           price: 3999.00,
           costPrice: 2000.00,
           stock: 30,
@@ -86,7 +114,7 @@ async function main() {
       skus: [
         {
           skuCode: 'TB-002-OAK-L',
-          attributes: { color: '橡木色', size: '大号(1.6m)', material: '实木' },
+          assetProfile: { color: '橡木色', size: '大号(1.6m)', material: '实木' },
           price: 2599.00,
           costPrice: 1300.00,
           stock: 40,
@@ -132,7 +160,7 @@ async function main() {
       skus: [
         {
           skuCode: 'BK-003-WHITE-5L',
-          attributes: { color: '白色', size: '五层', material: '环保板材' },
+          assetProfile: { color: '白色', size: '五层', material: '环保板材' },
           price: 1299.00,
           costPrice: 650.00,
           stock: 60,
@@ -140,7 +168,7 @@ async function main() {
         },
         {
           skuCode: 'BK-003-WALNUT-5L',
-          attributes: { color: '胡桃木色', size: '五层', material: '环保板材' },
+          assetProfile: { color: '胡桃木色', size: '五层', material: '环保板材' },
           price: 1399.00,
           costPrice: 700.00,
           stock: 45,
@@ -189,7 +217,7 @@ async function main() {
   ]
 
   // 创建产品
-  for (const productData of testProducts) {
+    for (const productData of testProducts) {
     console.log(`\n创建产品: ${productData.modelNumber} - ${productData.name}`)
 
     const { skus, assemblySteps, ...productInfo } = productData
@@ -199,11 +227,15 @@ async function main() {
         ...productInfo,
         createdBy: user.id,
         skus: {
-          create: skus.map(sku => ({
+          create: skus.map(({ assetProfile, ...sku }) => ({
             ...sku,
+            attributes: {},
             price: sku.price,
             costPrice: sku.costPrice,
             ownerId: user.id,
+            assetProfile: {
+              create: buildDemoAssetProfile(assetProfile),
+            },
           })),
         },
         assemblySteps: {
@@ -227,9 +259,12 @@ async function main() {
     console.log(`  - SKU数量: ${product.skus.length}`)
     console.log(`  - 装配步骤: ${product.assemblySteps.length}`)
     console.log(`  - 分享链接: ${product.shareLinks.length}`)
-  }
+    }
 
-  console.log('\n✅ 所有测试产品创建完成！')
+    console.log('\n✅ 所有测试产品创建完成！')
+  } finally {
+    await prisma.$disconnect()
+  }
 }
 
 main()
@@ -237,6 +272,3 @@ main()
     console.error('❌ 创建失败:', e)
     process.exit(1)
   })
-  .finally(async () => {
-    await prisma.$disconnect()
-  })
diff --git a/furniture-3d-system/scripts/sync-board-material-library.ts b/furniture-3d-system/scripts/sync-board-material-library.ts
index 8c1e4c37..23ff0734 100644
--- a/furniture-3d-system/scripts/sync-board-material-library.ts
+++ b/furniture-3d-system/scripts/sync-board-material-library.ts
@@ -1,7 +1,9 @@
 import "dotenv/config";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
 
 import { Prisma } from "@prisma/client";
-import { prisma } from "../src/lib/prisma";
 import {
   BOARD_ALL_PANEL_FINISHES,
   BOARD_LIBRARY_DEFAULTS,
@@ -10,6 +12,75 @@ import {
 } from "../src/lib/board-substrate-rules";
 
 const BOARD_IMPORT_SOURCE = "BOARD_LIBRARY_DEFAULTS_2026_04_20";
+const CONFIRM_TOKEN = "sync-board-material-library";
+type PrismaSingleton = typeof import("../src/lib/prisma")["prisma"];
+
+let prisma: PrismaSingleton;
+
+function assertApplyAllowed() {
+  if (!process.argv.includes("--apply")) {
+    throw new Error("板材基础资料库同步默认禁止写库；确认目标环境后请显式追加 --apply。");
+  }
+  if (readOption("--confirm") !== CONFIRM_TOKEN) {
+    throw new Error(`板材基础资料库同步真实写库必须显式传入 --confirm=${CONFIRM_TOKEN}。`);
+  }
+  const databaseUrl = process.env.DATABASE_URL || "";
+  if (!databaseUrl) {
+    throw new Error("板材基础资料库同步真实写库必须先配置 DATABASE_URL。");
+  }
+  const expectedDatabaseIdentity = readOption("--expected-database-identity");
+  if (!expectedDatabaseIdentity) {
+    throw new Error(
+      `板材基础资料库同步真实写库必须显式传入 --expected-database-identity=${databaseIdentity(databaseUrl)}。`,
+    );
+  }
+  if (expectedDatabaseIdentity !== databaseIdentity(databaseUrl)) {
+    throw new Error("板材基础资料库同步目标库身份和当前 DATABASE_URL 不一致，禁止写库。");
+  }
+  const expectedBackupSha256 = readOption("--expected-backup-sha256");
+  if (!expectedBackupSha256) {
+    throw new Error("板材基础资料库同步真实写库必须显式传入 --expected-backup-sha256。");
+  }
+  if (expectedBackupSha256 !== backupSha256()) {
+    throw new Error("板材基础资料库同步备份 SHA-256 和当前备份文件不一致，禁止写库。");
+  }
+}
+
+function readOption(name: string): string {
+  const inline = process.argv.find((arg) => arg.startsWith(`${name}=`));
+  if (inline) return inline.slice(name.length + 1).trim();
+  const index = process.argv.findIndex((arg) => arg === name);
+  const value = index >= 0 ? process.argv[index + 1] : "";
+  return value && !value.startsWith("--") ? value.trim() : "";
+}
+
+function databaseIdentity(databaseUrl: string): string {
+  const parsed = new URL(databaseUrl);
+  return [
+    parsed.protocol.replace(/:$/, ""),
+    parsed.username.toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port,
+    parsed.pathname.replace(/^\//, "").toLowerCase(),
+    (parsed.searchParams.get("schema") || parsed.searchParams.get("currentSchema") || "").toLowerCase(),
+  ].join("|");
+}
+
+function backupSha256(): string {
+  const rawPath = process.env.DATABASE_BACKUP_FILE || process.env.DB_BACKUP_FILE || "";
+  if (!rawPath) {
+    throw new Error("板材基础资料库同步真实写库必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。");
+  }
+  const absolutePath = path.resolve(process.cwd(), rawPath);
+  if (!fs.existsSync(absolutePath)) {
+    throw new Error("板材基础资料库同步指定的数据库备份文件不存在。");
+  }
+  return crypto.createHash("sha256").update(fs.readFileSync(absolutePath)).digest("hex");
+}
+
+function normalizeCoreIdentity(value: string): string {
+  return value.trim().toUpperCase();
+}
 
 const SUBSTRATE_CATEGORY_SORT_ORDER: Record<string, number> = {
   密度板: 10,
@@ -329,6 +400,9 @@ async function createCodeGenerator(options: {
 }
 
 async function main() {
+  assertApplyAllowed();
+  ({ prisma } = await import("../src/lib/prisma"));
+
   const summary: SyncSummary = {
     materialCategoriesCreated: 0,
     substrateCategoriesCreated: 0,
@@ -363,7 +437,7 @@ async function main() {
     exists: async (code) =>
       Boolean(
         await prisma.material.findUnique({
-          where: { code },
+          where: { code: normalizeCoreIdentity(code) },
           select: { id: true },
         }),
       ),
@@ -382,7 +456,7 @@ async function main() {
     exists: async (code) =>
       Boolean(
         await prisma.substrate.findUnique({
-          where: { code },
+          where: { code: normalizeCoreIdentity(code) },
           select: { id: true },
         }),
       ),
@@ -572,5 +646,5 @@ main()
     process.exitCode = 1;
   })
   .finally(async () => {
-    await prisma.$disconnect();
+    await prisma?.$disconnect();
   });
diff --git a/furniture-3d-system/scripts/sync-employee-directory.ts b/furniture-3d-system/scripts/sync-employee-directory.ts
index bcb985c8..d0131b8b 100644
--- a/furniture-3d-system/scripts/sync-employee-directory.ts
+++ b/furniture-3d-system/scripts/sync-employee-directory.ts
@@ -6,6 +6,7 @@ import {
 
 type CliOptions = {
   dryRun: boolean
+  apply: boolean
 }
 
 type QueryResult = {
@@ -13,8 +14,14 @@ type QueryResult = {
 }
 
 function parseCliOptions(argv: string[]): CliOptions {
+  const apply = argv.includes('--apply')
+  const dryRun = argv.includes('--dry-run') || !apply
+  if (apply && argv.includes('--dry-run')) {
+    throw new Error('不能同时传入 --apply 和 --dry-run。')
+  }
   return {
-    dryRun: argv.includes('--dry-run'),
+    dryRun,
+    apply,
   }
 }
 
diff --git a/furniture-3d-system/scripts/sync-jst-sku-stock-products.ts b/furniture-3d-system/scripts/sync-jst-sku-stock-products.ts
index dcb4e085..3efc08eb 100644
--- a/furniture-3d-system/scripts/sync-jst-sku-stock-products.ts
+++ b/furniture-3d-system/scripts/sync-jst-sku-stock-products.ts
@@ -1,14 +1,17 @@
 import 'dotenv/config'
-import { prisma } from '../src/lib/prisma'
-import { syncJstSkuStockProducts } from '../src/server/services/jst-sku-stock-sync.service'
 
 type CliOptions = {
   apply: boolean
   batchSize?: number
+  confirm: string
+  expectedDatabaseIdentity: string
+  expectedSourceDatabaseIdentity: string
   limit?: number
   help: boolean
 }
 
+export const CONFIRM_TOKEN = 'sync-jst-sku-stock'
+
 function readNumberArg(value: string | undefined, name: string) {
   if (!value) return undefined
 
@@ -23,6 +26,9 @@ function readNumberArg(value: string | undefined, name: string) {
 function parseArgs(argv: string[]): CliOptions {
   const options: CliOptions = {
     apply: false,
+    confirm: '',
+    expectedDatabaseIdentity: '',
+    expectedSourceDatabaseIdentity: '',
     help: false,
   }
 
@@ -42,6 +48,21 @@ function parseArgs(argv: string[]): CliOptions {
       return
     }
 
+    if (arg.startsWith('--confirm=')) {
+      options.confirm = arg.slice('--confirm='.length)
+      return
+    }
+
+    if (arg.startsWith('--expected-database-identity=')) {
+      options.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      return
+    }
+
+    if (arg.startsWith('--expected-source-database-identity=')) {
+      options.expectedSourceDatabaseIdentity = arg.slice('--expected-source-database-identity='.length)
+      return
+    }
+
     if (arg.startsWith('--batch-size=')) {
       options.batchSize = readNumberArg(arg.split('=')[1], '--batch-size')
       return
@@ -58,12 +79,78 @@ function parseArgs(argv: string[]): CliOptions {
   return options
 }
 
+function databaseIdentityFromUrl(databaseUrl: string) {
+  const parsed = new URL(databaseUrl)
+  const protocol = parsed.protocol.replace(/:$/, '')
+  const database = parsed.pathname.replace(/^\//, '')
+  const schema = parsed.searchParams.get('schema') ?? ''
+  return [
+    protocol,
+    decodeURIComponent(parsed.username || ''),
+    parsed.hostname,
+    parsed.port || '',
+    database,
+    schema,
+  ].join('|')
+}
+
+function sourceDatabaseIdentityFromEnv(env: NodeJS.ProcessEnv = process.env) {
+  const sourceDatabaseUrl = env.JST_SKU_DATABASE_URL?.trim()
+  if (sourceDatabaseUrl) {
+    return databaseIdentityFromUrl(sourceDatabaseUrl)
+  }
+
+  const host = env.JST_SKU_DB_HOST?.trim() ?? ''
+  const database = env.JST_SKU_DB_NAME?.trim() ?? ''
+  const user = env.JST_SKU_DB_USER?.trim() ?? ''
+  if (!host || !database || !user) return ''
+
+  return ['mysql', user, host, env.JST_SKU_DB_PORT?.trim() || '3306', database, ''].join('|')
+}
+
+export function assertApplyGuards(options: CliOptions, env: NodeJS.ProcessEnv = process.env) {
+  if (!options.apply) return
+
+  if (options.confirm !== CONFIRM_TOKEN) {
+    throw new Error(`聚水潭存量商品同步真实写库必须显式传入 --confirm=${CONFIRM_TOKEN}。`)
+  }
+
+  const databaseUrl = env.DATABASE_URL?.trim() ?? ''
+  if (!databaseUrl) {
+    throw new Error('聚水潭存量商品同步真实写库必须先配置 DATABASE_URL。')
+  }
+
+  const actualDatabaseIdentity = databaseIdentityFromUrl(databaseUrl)
+  if (!options.expectedDatabaseIdentity) {
+    throw new Error(
+      `聚水潭存量商品同步真实写库必须显式传入 --expected-database-identity=${actualDatabaseIdentity}。`,
+    )
+  }
+  if (options.expectedDatabaseIdentity !== actualDatabaseIdentity) {
+    throw new Error('聚水潭存量商品同步目标库身份和当前 DATABASE_URL 不一致，禁止写库。')
+  }
+
+  const actualSourceDatabaseIdentity = sourceDatabaseIdentityFromEnv(env)
+  if (!actualSourceDatabaseIdentity) {
+    throw new Error('聚水潭存量商品同步真实写库必须先配置 JST_SKU_DATABASE_URL 或 JST_SKU_DB_* 来源库信息。')
+  }
+  if (!options.expectedSourceDatabaseIdentity) {
+    throw new Error(
+      `聚水潭存量商品同步真实写库必须显式传入 --expected-source-database-identity=${actualSourceDatabaseIdentity}。`,
+    )
+  }
+  if (options.expectedSourceDatabaseIdentity !== actualSourceDatabaseIdentity) {
+    throw new Error('聚水潭存量商品同步来源库身份和当前 JST_SKU 来源配置不一致，禁止写库。')
+  }
+}
+
 function printHelp() {
   console.log(`
 Usage:
-  npm run sync:jst-sku-stock -- [--dry-run] [--apply] [--limit=100] [--batch-size=500]
+  npm run sync:jst-sku-stock -- [--dry-run] [--apply] [--confirm=${CONFIRM_TOKEN}] [--expected-database-identity=postgresql|user|host|port|database|schema] [--expected-source-database-identity=mysql|user|host|port|database|] [--limit=100] [--batch-size=500]
 
 Default mode is --dry-run. Use --apply only when you want to write changes.
+真实写库必须同时确认目标 PostgreSQL 身份和来源 MySQL 身份，避免错库同步。
 
 Required environment variables:
   DATABASE_URL
@@ -89,19 +176,26 @@ async function main() {
     printHelp()
     return
   }
+  assertApplyGuards(options)
 
-  const result = await syncJstSkuStockProducts({
-    apply: options.apply,
-    batchSize: options.batchSize,
-    limit: options.limit,
-  })
+  const [{ prisma }, { syncJstSkuStockProducts }] = await Promise.all([
+    import('../src/lib/prisma'),
+    import('../src/server/services/jst-sku-stock-sync.service'),
+  ])
+  try {
+    const result = await syncJstSkuStockProducts({
+      apply: options.apply,
+      batchSize: options.batchSize,
+      limit: options.limit,
+    })
 
-  console.log(JSON.stringify(result, null, 2))
+    console.log(JSON.stringify(result, null, 2))
+  } finally {
+    await prisma.$disconnect()
+  }
 }
 
 main().catch((error) => {
   console.error(error instanceof Error ? error.message : String(error))
   process.exitCode = 1
-}).finally(async () => {
-  await prisma.$disconnect()
 })
diff --git a/furniture-3d-system/scripts/sync-standard-finishes.ts b/furniture-3d-system/scripts/sync-standard-finishes.ts
index aea2a13d..c063fa92 100644
--- a/furniture-3d-system/scripts/sync-standard-finishes.ts
+++ b/furniture-3d-system/scripts/sync-standard-finishes.ts
@@ -1,9 +1,16 @@
 import 'dotenv/config'
+import crypto from 'node:crypto'
+import fs from 'node:fs'
+import path from 'node:path'
 
-import { prisma } from '../src/lib/prisma'
 import { STANDARD_FINISH_CATALOG } from '../src/lib/standard-finish-catalog'
 import { buildStandardFinishMaterialData } from '../src/lib/standard-finish-sync'
 
+const CONFIRM_TOKEN = 'sync-standard-finishes'
+type PrismaSingleton = typeof import('../src/lib/prisma')['prisma']
+
+let prisma: PrismaSingleton
+
 interface SyncSummary {
   categoriesCreated: number
   categoriesUpdated: number
@@ -13,7 +20,71 @@ interface SyncSummary {
   materialsDeactivated: number
 }
 
+function assertApplyAllowed() {
+  if (!process.argv.includes('--apply')) {
+    throw new Error('标准饰面同步默认禁止写库；确认目标环境后请显式追加 --apply。')
+  }
+  if (readOption('--confirm') !== CONFIRM_TOKEN) {
+    throw new Error(`标准饰面同步真实写库必须显式传入 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('标准饰面同步真实写库必须先配置 DATABASE_URL。')
+  }
+  const expectedDatabaseIdentity = readOption('--expected-database-identity')
+  if (!expectedDatabaseIdentity) {
+    throw new Error(
+      `标准饰面同步真实写库必须显式传入 --expected-database-identity=${databaseIdentity(databaseUrl)}。`,
+    )
+  }
+  if (expectedDatabaseIdentity !== databaseIdentity(databaseUrl)) {
+    throw new Error('标准饰面同步目标库身份和当前 DATABASE_URL 不一致，禁止写库。')
+  }
+  const expectedBackupSha256 = readOption('--expected-backup-sha256')
+  if (!expectedBackupSha256) {
+    throw new Error('标准饰面同步真实写库必须显式传入 --expected-backup-sha256。')
+  }
+  if (expectedBackupSha256 !== backupSha256()) {
+    throw new Error('标准饰面同步备份 SHA-256 和当前备份文件不一致，禁止写库。')
+  }
+}
+
+function readOption(name: string): string {
+  const inline = process.argv.find((arg) => arg.startsWith(`${name}=`))
+  if (inline) return inline.slice(name.length + 1).trim()
+  const index = process.argv.findIndex((arg) => arg === name)
+  const value = index >= 0 ? process.argv[index + 1] : ''
+  return value && !value.startsWith('--') ? value.trim() : ''
+}
+
+function databaseIdentity(databaseUrl: string): string {
+  const parsed = new URL(databaseUrl)
+  return [
+    parsed.protocol.replace(/:$/, ''),
+    parsed.username.toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port,
+    parsed.pathname.replace(/^\//, '').toLowerCase(),
+    (parsed.searchParams.get('schema') || parsed.searchParams.get('currentSchema') || '').toLowerCase(),
+  ].join('|')
+}
+
+function backupSha256(): string {
+  const rawPath = process.env.DATABASE_BACKUP_FILE || process.env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    throw new Error('标准饰面同步真实写库必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。')
+  }
+  const absolutePath = path.resolve(process.cwd(), rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    throw new Error('标准饰面同步指定的数据库备份文件不存在。')
+  }
+  return crypto.createHash('sha256').update(fs.readFileSync(absolutePath)).digest('hex')
+}
+
 async function main() {
+  assertApplyAllowed()
+  ;({ prisma } = await import('../src/lib/prisma'))
+
   const summary: SyncSummary = {
     categoriesCreated: 0,
     categoriesUpdated: 0,
@@ -165,5 +236,5 @@ main()
     process.exitCode = 1
   })
   .finally(async () => {
-    await prisma.$disconnect()
+    await prisma?.$disconnect()
   })
diff --git a/furniture-3d-system/scripts/update-demo-models.js b/furniture-3d-system/scripts/update-demo-models.js
index 0080c460..749cbbc0 100644
--- a/furniture-3d-system/scripts/update-demo-models.js
+++ b/furniture-3d-system/scripts/update-demo-models.js
@@ -3,10 +3,34 @@
  * 更新演示数据脚本 - 添加真实的3D模型
  * 使用更好的3D模型替换默认的演示模型
  */
+const DEMO_CONFIRM_TOKEN = 'reset-local-demo'
+let prisma = null
+let pool = null
 
-const { PrismaClient } = require('@prisma/client')
+function assertLocalDestructiveDemoAllowed() {
+  if (!process.argv.includes(`--confirm=${DEMO_CONFIRM_TOKEN}`)) {
+    throw new Error(`拒绝执行 destructive demo seed：必须显式追加 --confirm=${DEMO_CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('拒绝执行 destructive demo seed：NODE_ENV=production。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('拒绝执行 destructive demo seed：DATABASE_URL 未配置。')
+  }
+  const parsed = new URL(databaseUrl)
+  if (!['localhost', '127.0.0.1', '::1'].includes(parsed.hostname)) {
+    throw new Error('拒绝执行 destructive demo seed：只允许本机数据库。')
+  }
+}
 
-const prisma = new PrismaClient()
+function createPrismaClient() {
+  const { PrismaClient } = require('@prisma/client')
+  const { PrismaPg } = require('@prisma/adapter-pg')
+  const { Pool } = require('pg')
+  pool = new Pool({ connectionString: process.env.DATABASE_URL })
+  prisma = new PrismaClient({ adapter: new PrismaPg(pool) })
+}
 
 // 优质的免费3D模型资源
 const QUALITY_MODELS = [
@@ -37,6 +61,8 @@ const QUALITY_MODELS = [
 ]
 
 async function updateDemoModels() {
+  assertLocalDestructiveDemoAllowed()
+  createPrismaClient()
   console.log('🔄 开始更新演示模型...')
 
   try {
@@ -126,7 +152,8 @@ async function updateDemoModels() {
     console.error('❌ 更新演示模型失败:', error)
     throw error
   } finally {
-    await prisma.$disconnect()
+    await prisma?.$disconnect()
+    await pool?.end()
   }
 }
 
diff --git a/furniture-3d-system/scripts/update-model-urls.ts b/furniture-3d-system/scripts/update-model-urls.ts
index f7f39adc..270419fb 100644
--- a/furniture-3d-system/scripts/update-model-urls.ts
+++ b/furniture-3d-system/scripts/update-model-urls.ts
@@ -1,6 +1,21 @@
-import { PrismaClient } from '@prisma/client'
+const CONFIRM_TOKEN = 'update-local-model-urls'
 
-const prisma = new PrismaClient()
+function assertLocalModelUrlUpdateAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`update-model-urls 只允许显式本地维护：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('update-model-urls 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('update-model-urls 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('update-model-urls 只允许连接本机数据库。')
+  }
+}
 
 // Three.js 官方示例模型 URL 列表
 const THREE_JS_MODELS = {
@@ -46,14 +61,17 @@ const THUMBNAILS = {
 }
 
 async function main() {
+  assertLocalModelUrlUpdateAllowed()
+  const { prisma } = await import('../src/lib/prisma')
   console.log('开始更新产品模型 URL...\n')
 
-  // 获取所有产品
-  const products = await prisma.product.findMany({
-    orderBy: { modelNumber: 'asc' }
-  })
+  try {
+    // 获取所有产品
+    const products = await prisma.product.findMany({
+      orderBy: { modelNumber: 'asc' }
+    })
 
-  console.log(`找到 ${products.length} 个产品\n`)
+    console.log(`找到 ${products.length} 个产品\n`)
 
   // 模型分配方案（模拟不同产品使用不同模型）
   const modelAssignments: Record<string, { model: keyof typeof THREE_JS_MODELS; thumbnail?: keyof typeof THUMBNAILS }> = {
@@ -79,50 +97,52 @@ async function main() {
     { model: 'Ferrari' as const, thumbnail: 'Ferrari' as const },
   ]
 
-  let updatedCount = 0
+    let updatedCount = 0
 
-  for (let i = 0; i < products.length; i++) {
-    const product = products[i]
+    for (let i = 0; i < products.length; i++) {
+      const product = products[i]
     
-    // 查找分配的模型
-    let assignment = modelAssignments[product.modelNumber]
+      // 查找分配的模型
+      let assignment = modelAssignments[product.modelNumber]
     
-    // 如果没有特定分配，使用默认模型轮换
-    if (!assignment) {
-      assignment = defaultModels[i % defaultModels.length]
-    }
-
-    const modelUrl = THREE_JS_MODELS[assignment.model]
-    const thumbnailUrl = assignment.thumbnail ? THUMBNAILS[assignment.thumbnail] : null
-
-    // 更新产品
-    await prisma.product.update({
-      where: { id: product.id },
-      data: {
-        modelUrl,
-        ...(thumbnailUrl && { thumbnailUrl })
+      // 如果没有特定分配，使用默认模型轮换
+      if (!assignment) {
+        assignment = defaultModels[i % defaultModels.length]
       }
-    })
 
-    console.log(`✓ ${product.modelNumber} (${product.name})`)
-    console.log(`  模型: ${assignment.model}`)
-    if (thumbnailUrl) {
-      console.log(`  预览图: ${assignment.thumbnail}`)
+      const modelUrl = THREE_JS_MODELS[assignment.model]
+      const thumbnailUrl = assignment.thumbnail ? THUMBNAILS[assignment.thumbnail] : null
+
+      // 更新产品
+      await prisma.product.update({
+        where: { id: product.id },
+        data: {
+          modelUrl,
+          ...(thumbnailUrl && { thumbnailUrl })
+        }
+      })
+
+      console.log(`✓ ${product.modelNumber} (${product.name})`)
+      console.log(`  模型: ${assignment.model}`)
+      if (thumbnailUrl) {
+        console.log(`  预览图: ${assignment.thumbnail}`)
+      }
+      console.log()
+
+      updatedCount++
     }
-    console.log()
 
-    updatedCount++
-  }
+    console.log(`\n完成！已更新 ${updatedCount} 个产品的模型 URL`)
 
-  console.log(`\n完成！已更新 ${updatedCount} 个产品的模型 URL`)
-
-  // 显示模型 URL 汇总
-  console.log('\n=== 可用的 Three.js 示例模型 ===')
-  for (const [name, url] of Object.entries(THREE_JS_MODELS)) {
-    console.log(`${name}: ${url}`)
+    // 显示模型 URL 汇总
+    console.log('\n=== 可用的 Three.js 示例模型 ===')
+    for (const [name, url] of Object.entries(THREE_JS_MODELS)) {
+      console.log(`${name}: ${url}`)
+    }
+  } finally {
+    await prisma.$disconnect()
   }
 }
 
 main()
   .catch(console.error)
-  .finally(() => prisma.$disconnect())
diff --git a/furniture-3d-system/scripts/update-test-data.ts b/furniture-3d-system/scripts/update-test-data.ts
index 3259b35e..21366e9b 100644
--- a/furniture-3d-system/scripts/update-test-data.ts
+++ b/furniture-3d-system/scripts/update-test-data.ts
@@ -2,27 +2,55 @@
  * 更新测试数据脚本
  * 修复数据库中的测试产品数据，使其可以正常显示
  */
+const CONFIRM_TOKEN = 'update-local-test-data'
 
-import { PrismaClient } from '@prisma/client'
+function assertLocalScriptAllowed() {
+  if (!process.argv.includes(`--confirm=${CONFIRM_TOKEN}`)) {
+    throw new Error(`update-test-data 只允许显式本地补数：请追加 --confirm=${CONFIRM_TOKEN}。`)
+  }
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error('update-test-data 禁止在 NODE_ENV=production 下执行。')
+  }
+  const databaseUrl = process.env.DATABASE_URL || ''
+  if (!databaseUrl) {
+    throw new Error('update-test-data 必须先配置 DATABASE_URL。')
+  }
+  const host = new URL(databaseUrl).hostname
+  if (!['localhost', '127.0.0.1', '::1'].includes(host)) {
+    throw new Error('update-test-data 只允许连接本机数据库。')
+  }
+}
 
-const prisma = new PrismaClient()
+function buildDefaultAssetProfile() {
+  return {
+    size: { label: '标准尺寸' },
+    color: '原木色',
+    material: '实木',
+    syncedAt: new Date(),
+    lockedReasons: {},
+    sourceVariants: [],
+  }
+}
 
 async function main() {
+  assertLocalScriptAllowed()
+  const { prisma } = await import('../src/lib/prisma')
   console.log('开始更新测试数据...')
 
-  // 获取所有产品
-  const products = await prisma.product.findMany({
-    include: {
-      skus: true,
-      assemblySteps: true,
-      shareLinks: true,
-    }
-  })
+  try {
+    // 获取所有产品
+    const products = await prisma.product.findMany({
+      include: {
+        skus: true,
+        assemblySteps: true,
+        shareLinks: true,
+      }
+    })
 
-  console.log(`找到 ${products.length} 个产品`)
+    console.log(`找到 ${products.length} 个产品`)
 
-  // 更新每个产品
-  for (const product of products) {
+    // 更新每个产品
+    for (const product of products) {
     console.log(`\n更新产品: ${product.modelNumber} - ${product.name}`)
 
     // 确保产品有基本信息
@@ -52,17 +80,16 @@ async function main() {
         data: {
           productId: product.id,
           skuCode: `${product.modelNumber}-DEFAULT`,
-          attributes: {
-            color: '原木色',
-            size: '标准尺寸',
-            material: '实木'
-          },
+          attributes: {},
           price: 2999.00,
           costPrice: 1500.00,
           stock: 100,
           images: ['/placeholder-furniture.jpg'],
           isActive: true,
           ownerId: skuOwner.id,
+          assetProfile: {
+            create: buildDefaultAssetProfile(),
+          },
         }
       })
     } else {
@@ -133,9 +160,12 @@ async function main() {
         })
       }
     }
-  }
+    }
 
-  console.log('\n✅ 测试数据更新完成！')
+    console.log('\n✅ 测试数据更新完成！')
+  } finally {
+    await prisma.$disconnect()
+  }
 }
 
 main()
@@ -143,6 +173,3 @@ main()
     console.error('❌ 更新失败:', e)
     process.exit(1)
   })
-  .finally(async () => {
-    await prisma.$disconnect()
-  })
diff --git a/furniture-3d-system/src/app/__tests__/draft-groups-page.test.tsx b/furniture-3d-system/src/app/__tests__/draft-groups-page.test.tsx
index 8bef05c2..579c3752 100644
--- a/furniture-3d-system/src/app/__tests__/draft-groups-page.test.tsx
+++ b/furniture-3d-system/src/app/__tests__/draft-groups-page.test.tsx
@@ -205,6 +205,12 @@ jest.mock('@/server/services/intake-non-integrated-product.service', () => ({
   },
 }))
 
+jest.mock('@/server/services/category.service', () => ({
+  categoryService: {
+    listActive: jest.fn().mockResolvedValue([]),
+  },
+}))
+
 function createDraftGroupDetail() {
   return {
     draftGroup: createMockDraftGroupList()[0],
diff --git a/furniture-3d-system/src/app/__tests__/intake-page.test.tsx b/furniture-3d-system/src/app/__tests__/intake-page.test.tsx
index 2fcd72a3..adff9dfa 100644
--- a/furniture-3d-system/src/app/__tests__/intake-page.test.tsx
+++ b/furniture-3d-system/src/app/__tests__/intake-page.test.tsx
@@ -36,6 +36,114 @@ jest.mock('@/lib/server-session', () => ({
   }),
 }))
 
+jest.mock('@/server/services/draft-group.service', () => ({
+  draftGroupService: {
+    list: jest.fn().mockResolvedValue([
+      {
+        id: 'draft-1',
+        code: 'DG-001',
+        name: '包装中草稿',
+        status: 'PACKAGING',
+        assetSeriesName: '单板桌',
+      },
+      {
+        id: 'draft-2',
+        code: 'DG-002',
+        name: '待入库草稿',
+        status: 'READY_FOR_INTAKE',
+        assetSeriesName: '单板桌',
+      },
+      {
+        id: 'draft-3',
+        code: 'DG-002',
+        name: '未包装草稿',
+        status: 'DRAFT',
+        assetSeriesName: '单板桌',
+      },
+      {
+        id: 'draft-4',
+        code: 'DG-003',
+        name: '已入库草稿',
+        status: 'FORMALIZED',
+        assetSeriesName: '单板桌',
+      },
+      {
+        id: 'draft-5',
+        code: 'DG-004',
+        name: '已归档草稿',
+        status: 'ARCHIVED',
+        assetSeriesName: '单板桌',
+      },
+    ]),
+    getById: jest.fn().mockResolvedValue({
+      draftGroup: {
+        id: 'draft-1',
+        code: 'DG-001',
+        name: '包装中草稿',
+        status: 'PACKAGING',
+        assetSeriesName: '单板桌',
+      },
+      preSkus: [],
+    }),
+  },
+}))
+
+jest.mock('@/server/services/intake.service', () => ({
+  intakeService: {
+    recommendExistingProducts: jest.fn().mockResolvedValue([]),
+  },
+}))
+
+jest.mock('@/server/services/warehouse.service', () => ({
+  warehouseService: {
+    listLocations: jest.fn().mockResolvedValue([]),
+  },
+}))
+
+jest.mock('@/server/services/asset-center.service', () => ({
+  assetCenterService: {
+    listSubstrates: jest.fn().mockResolvedValue([]),
+    getSubstrateDictionaryBundle: jest.fn().mockResolvedValue({
+      categories: [],
+      substrateTypes: [],
+      processTypes: [],
+    }),
+  },
+}))
+
+jest.mock('@/server/services/material.service', () => ({
+  materialService: {
+    findAll: jest.fn().mockResolvedValue({ items: [] }),
+    findAllCategories: jest.fn().mockResolvedValue([]),
+  },
+}))
+
+jest.mock('@/server/services/category.service', () => ({
+  categoryService: {
+    listActive: jest.fn().mockResolvedValue([]),
+  },
+}))
+
+jest.mock('@/server/services/intake-node-permission-settings.service', () => ({
+  intakeNodePermissionSettingsService: {
+    getSettings: jest.fn().mockResolvedValue({ overrides: {} }),
+  },
+}))
+
+jest.mock('@/server/services/intake-non-integrated-product.service', () => ({
+  intakeNonIntegratedProductService: {
+    listPage: jest.fn().mockResolvedValue({
+      products: [],
+      pageInfo: {
+        page: 1,
+        pageSize: 50,
+        total: 0,
+        totalPages: 1,
+      },
+    }),
+  },
+}))
+
 jest.mock('@/server/services', () => ({
   draftGroupService: {
     list: jest.fn().mockResolvedValue([
@@ -114,10 +222,23 @@ jest.mock('@/server/services', () => ({
 
 jest.mock('../intake/IntakeClient', () => ({
   __esModule: true,
-  default: ({ eligibleDraftGroups }: { eligibleDraftGroups?: Array<{ id: string; name: string }> }) => (
+  default: ({
+    eligibleDraftGroups,
+    eligibleSkuList,
+  }: {
+    eligibleDraftGroups?: Array<{ id: string; name: string }>
+    eligibleSkuList?: Array<{ id: string; code: string; skuFields?: { skuCode: string } }>
+  }) => (
     <div>
       <div>IntakeClient</div>
       {eligibleDraftGroups?.map((group) => <div key={group.id}>{group.name}</div>)}
+      {eligibleSkuList?.map((sku) => (
+        <div key={sku.id}>
+          {sku.code}
+          {' / '}
+          {sku.skuFields?.skuCode}
+        </div>
+      ))}
     </div>
   ),
 }))
@@ -132,4 +253,56 @@ describe('IntakePage', () => {
     expect(screen.queryByText('已入库草稿')).not.toBeInTheDocument()
     expect(screen.queryByText('已归档草稿')).not.toBeInTheDocument()
   })
+
+  it('准 SKU 首屏编码优先读取结构化 basicInfo', async () => {
+    const draftGroupServiceMock = jest.requireMock(
+      '@/server/services/draft-group.service',
+    ).draftGroupService
+
+    draftGroupServiceMock.list.mockResolvedValueOnce([
+      {
+        id: 'draft-structured',
+        code: 'DG-STRUCTURED',
+        name: '结构化草稿',
+        status: 'PACKAGING',
+        assetSeriesName: '单板桌',
+      },
+    ])
+    draftGroupServiceMock.getById.mockResolvedValue({
+      draftGroup: {
+        id: 'draft-structured',
+        code: 'DG-STRUCTURED',
+        name: '结构化草稿',
+        status: 'PACKAGING',
+        assetSeriesName: '单板桌',
+      },
+      preSkus: [
+        {
+          id: 'pre-sku-1',
+          sequence: 1,
+          defaultName: '默认准 SKU',
+          customName: null,
+          status: 'PACKAGING',
+          componentCodes: [],
+          basicInfo: {
+            formalSkuCode: 'STRUCTURED-SKU',
+          },
+          displaySummary: {
+            skuCode: 'LEGACY-SKU',
+          },
+          familySelection: {},
+          variantSelection: {
+            slots: [],
+            hardwareSelections: [],
+          },
+          bomPreview: [],
+        },
+      ],
+    })
+
+    render(await IntakePage({ searchParams: Promise.resolve({}) }))
+
+    expect(screen.getByText('STRUCTURED-SKU / STRUCTURED-SKU')).toBeInTheDocument()
+    expect(screen.queryByText(/LEGACY-SKU/)).not.toBeInTheDocument()
+  })
 })
diff --git a/furniture-3d-system/src/app/api/approval-workflows/route.test.ts b/furniture-3d-system/src/app/api/approval-workflows/route.test.ts
index babc7657..31b918a5 100644
--- a/furniture-3d-system/src/app/api/approval-workflows/route.test.ts
+++ b/furniture-3d-system/src/app/api/approval-workflows/route.test.ts
@@ -21,7 +21,7 @@ jest.mock('@/server/services/approval-workflow.service', () => ({
   },
 }))
 
-jest.mock('@/server/services', () => ({
+jest.mock('@/server/services/intake-non-integrated-product.service', () => ({
   intakeNonIntegratedProductService: {
     getById: (...args: unknown[]) => mockGetById(...args),
   },
diff --git a/furniture-3d-system/src/app/api/intake/non-integrated/[id]/route.ts b/furniture-3d-system/src/app/api/intake/non-integrated/[id]/route.ts
index 297275cc..e81824c3 100644
--- a/furniture-3d-system/src/app/api/intake/non-integrated/[id]/route.ts
+++ b/furniture-3d-system/src/app/api/intake/non-integrated/[id]/route.ts
@@ -49,6 +49,14 @@ export async function PUT(request: NextRequest, context: RouteContext) {
         typeof (rawBody as { workspaceCategory?: unknown }).workspaceCategory === 'string'
           ? ((rawBody as { workspaceCategory: string }).workspaceCategory.trim() || null)
           : null
+      const formalSpuAssignmentProductCategory =
+        rawBody &&
+        typeof rawBody === 'object' &&
+        typeof (rawBody as { formalSpuAssignmentProductCategory?: unknown })
+          .formalSpuAssignmentProductCategory === 'string'
+          ? ((rawBody as { formalSpuAssignmentProductCategory: string })
+              .formalSpuAssignmentProductCategory.trim() || null)
+          : null
 
       if (!product || typeof product !== 'object' || Array.isArray(product)) {
         return jsonError(
@@ -66,7 +74,7 @@ export async function PUT(request: NextRequest, context: RouteContext) {
             id: decodedId,
           },
           ctx.user,
-          { workspaceCategory },
+          { workspaceCategory, formalSpuAssignmentProductCategory },
         )
         return jsonSuccess({ product: savedProduct }, 200, ctx.requestId)
       } catch (error) {
diff --git a/furniture-3d-system/src/app/api/platform/schemas.ts b/furniture-3d-system/src/app/api/platform/schemas.ts
index 85ebcc32..17dd1818 100644
--- a/furniture-3d-system/src/app/api/platform/schemas.ts
+++ b/furniture-3d-system/src/app/api/platform/schemas.ts
@@ -303,7 +303,7 @@ const packagingMaterialSchema = z.object({
   assetFamilyId: z.string().trim().min(1).optional().nullable(),
   code: z.string().trim().min(1).optional().nullable(),
   name: z.string().trim().min(1).optional().nullable(),
-  quantity: z.number().min(0),
+  quantity: z.number().positive(),
   unitCost: z.number().optional().nullable(),
   totalCost: z.number().optional().nullable(),
   notes: z.string().optional().nullable(),
@@ -319,23 +319,23 @@ const packagingBoxSchema = z.object({
   }),
   items: z.array(packagingBoxItemSchema),
   materials: z.array(packagingMaterialSchema),
-  estimatedWeightKg: z.number().optional().nullable().default(null),
-  estimatedCost: z.number().optional().nullable().default(null),
+  estimatedWeightKg: z.number().nonnegative().optional().nullable().default(null),
+  estimatedCost: z.number().nonnegative().optional().nullable().default(null),
   notes: z.string().nullable().default(null),
 })
 
 const packagingCostSummarySchema = z.object({
-  materialCost: z.number().optional().nullable().default(null),
-  totalCost: z.number().optional().nullable().default(null),
-  totalWeightKg: z.number().optional().nullable().default(null),
-  totalVolumeM3: z.number().optional().nullable().default(null),
+  materialCost: z.number().nonnegative().optional().nullable().default(null),
+  totalCost: z.number().nonnegative().optional().nullable().default(null),
+  totalWeightKg: z.number().nonnegative().optional().nullable().default(null),
+  totalVolumeM3: z.number().nonnegative().optional().nullable().default(null),
   notes: z.string().nullable().default(null),
 })
 
 export const savePreSkuPackagingPlanSchema = z.object({
   sourceType: z.enum(['PRODUCT', 'PRE_SKU', 'DRAFT_GROUP']).optional(),
   sourceRefId: z.string().trim().optional().nullable(),
-  status: z.string().trim().optional(),
+  status: z.enum(['DRAFT', 'CONFIRMED', 'ARCHIVED']).optional(),
   boxes: z.array(packagingBoxSchema),
   costSummary: packagingCostSummarySchema.optional().nullable(),
   processDraft: z.record(z.string(), z.unknown()).optional().nullable(),
@@ -441,6 +441,22 @@ export const formalizeDraftGroupSchema = z.object({
       message: '新建 SPU 时必须选择产品品类',
     })
   }
+
+  if (value.targetMode === 'CREATE_PRODUCT' && !value.modelNumber?.trim()) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      path: ['modelNumber'],
+      message: '新建 SPU 时必须填写型号',
+    })
+  }
+
+  if (value.targetMode === 'CREATE_PRODUCT' && !value.productName?.trim()) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      path: ['productName'],
+      message: '新建 SPU 时必须填写产品名称',
+    })
+  }
 })
 
 export const warehouseLocationCreateSchema = z.object({
diff --git a/furniture-3d-system/src/app/api/trash/products/[id]/route.ts b/furniture-3d-system/src/app/api/trash/products/[id]/route.ts
index 88a4a47a..236e815e 100644
--- a/furniture-3d-system/src/app/api/trash/products/[id]/route.ts
+++ b/furniture-3d-system/src/app/api/trash/products/[id]/route.ts
@@ -14,6 +14,7 @@ import { productService } from '@/server/services/product.service'
 import { timeAsync } from '@/server/monitoring/performance'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import { prisma } from '@/lib/prisma'
+import { logActivity } from '@/server/services/logger.service'
 
 /**
  * POST /api/trash/products/[id]
@@ -49,16 +50,14 @@ export async function POST(
     )
 
     // 记录操作日志
-    await prisma.activityLog.create({
-      data: {
-        userId: reqCtx.user.id,
-        type: 'PRODUCT_UPDATE',
-        targetType: 'Product',
-        targetId: id,
-        action: `从回收站恢复产品`,
-        metadata: {
-          restoredSkuCount: result.restoredSkuCount,
-        },
+    await logActivity({
+      userId: reqCtx.user.id,
+      type: 'PRODUCT_UPDATE',
+      targetType: 'Product',
+      targetId: id,
+      action: `从回收站恢复产品`,
+      metadata: {
+        restoredSkuCount: result.restoredSkuCount,
       },
     })
 
@@ -110,19 +109,17 @@ export async function DELETE(
     )
 
     // 记录操作日志
-    await prisma.activityLog.create({
-      data: {
-        userId: reqCtx.user.id,
-        type: 'PRODUCT_DELETE',
-        targetType: 'Product',
-        targetId: id,
-        action: `彻底删除产品: ${product.modelNumber} - ${product.name}`,
-        metadata: {
-          modelNumber: product.modelNumber,
-          name: product.name,
-          deletedSkuCount: result.deletedSkuCount,
-          permanent: true,
-        },
+    await logActivity({
+      userId: reqCtx.user.id,
+      type: 'PRODUCT_DELETE',
+      targetType: 'Product',
+      targetId: id,
+      action: `彻底删除产品: ${product.modelNumber} - ${product.name}`,
+      metadata: {
+        modelNumber: product.modelNumber,
+        name: product.name,
+        deletedSkuCount: result.deletedSkuCount,
+        permanent: true,
       },
     })
 
diff --git a/furniture-3d-system/src/app/api/trash/skus/[id]/route.ts b/furniture-3d-system/src/app/api/trash/skus/[id]/route.ts
index 5ea0eaa5..42240662 100644
--- a/furniture-3d-system/src/app/api/trash/skus/[id]/route.ts
+++ b/furniture-3d-system/src/app/api/trash/skus/[id]/route.ts
@@ -14,6 +14,7 @@ import { skuService } from '@/server/services/sku.service'
 import { timeAsync } from '@/server/monitoring/performance'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import { prisma } from '@/lib/prisma'
+import { logActivity } from '@/server/services/logger.service'
 
 /**
  * POST /api/trash/skus/[id]
@@ -38,17 +39,15 @@ export async function POST(
     )
 
     // 记录操作日志
-    await prisma.activityLog.create({
-      data: {
-        userId: reqCtx.user.id,
-        type: 'SKU_UPDATE',
-        targetType: 'ProductSKU',
-        targetId: id,
-        action: `从回收站恢复 SKU: ${result.skuCode}`,
-        metadata: {
-          skuCode: result.skuCode,
-          productId: result.productId,
-        },
+    await logActivity({
+      userId: reqCtx.user.id,
+      type: 'SKU_UPDATE',
+      targetType: 'ProductSKU',
+      targetId: id,
+      action: `从回收站恢复 SKU: ${result.skuCode}`,
+      metadata: {
+        skuCode: result.skuCode,
+        productId: result.productId,
       },
     })
 
@@ -97,18 +96,16 @@ export async function DELETE(
     )
 
     // 记录操作日志
-    await prisma.activityLog.create({
-      data: {
-        userId: reqCtx.user.id,
-        type: 'SKU_DELETE',
-        targetType: 'ProductSKU',
-        targetId: id,
-        action: `彻底删除 SKU: ${sku.skuCode}`,
-        metadata: {
-          skuCode: sku.skuCode,
-          productId: sku.productId,
-          permanent: true,
-        },
+    await logActivity({
+      userId: reqCtx.user.id,
+      type: 'SKU_DELETE',
+      targetType: 'ProductSKU',
+      targetId: id,
+      action: `彻底删除 SKU: ${sku.skuCode}`,
+      metadata: {
+        skuCode: sku.skuCode,
+        productId: sku.productId,
+        permanent: true,
       },
     })
 
diff --git a/furniture-3d-system/src/app/draft-groups/DraftGroupsFormalClient.tsx b/furniture-3d-system/src/app/draft-groups/DraftGroupsFormalClient.tsx
index c12a2939..5ef81a4c 100644
--- a/furniture-3d-system/src/app/draft-groups/DraftGroupsFormalClient.tsx
+++ b/furniture-3d-system/src/app/draft-groups/DraftGroupsFormalClient.tsx
@@ -27,7 +27,6 @@ import {
 import {
   NON_INTEGRATED_BASIC_INFO_WORKSPACE_CATEGORY,
   NON_INTEGRATED_PRODUCTS_UPDATED,
-  NON_INTEGRATED_STORAGE_KEY,
   type NonIntegratedSkuComponentDetail,
   type NonIntegratedProductRecord,
   type NonIntegratedSkuItem,
@@ -544,11 +543,6 @@ function normalizeSeriesMatchKey(value: string | null | undefined) {
   return (value ?? '').trim().replace(/\s+/g, ' ').toLowerCase()
 }
 
-function readRecordString(record: Record<string, unknown>, key: string) {
-  const value = record[key]
-  return typeof value === 'string' ? value.trim() : ''
-}
-
 function normalizeSkuBatchFlowNos(value: unknown): Record<string, string> | undefined {
   if (!isRecord(value)) return undefined
 
@@ -592,45 +586,6 @@ function buildFormalSeriesProductsFromRecords(
   })
 }
 
-function readFormalSeriesProducts(): FormalSeriesProductSummary[] {
-  if (typeof window === 'undefined') return []
-
-  try {
-    const rawValue = window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY)
-    if (!rawValue) return []
-
-    const parsed = JSON.parse(rawValue) as unknown
-    if (!Array.isArray(parsed)) return []
-
-    return parsed.flatMap((item): FormalSeriesProductSummary[] => {
-      if (!isRecord(item)) return []
-      const kind = readRecordString(item, 'productDevelopmentKind')
-      if (kind !== 'series') return []
-
-      const openingReference = isRecord(item.openingReference) ? item.openingReference : {}
-      const spu = readRecordString(item, 'spu').toUpperCase()
-      const name =
-        readRecordString(openingReference, 'productName') ||
-        readRecordString(item, 'name')
-      const id = readRecordString(item, 'id') || spu
-      const skuItems = Array.isArray(item.skuItems)
-        ? (item.skuItems.filter(isRecord) as unknown as NonIntegratedSkuItem[])
-        : []
-      const pushedSourceSkuIds = Array.from(new Set(
-        skuItems
-          .map((skuItem) => skuItem.sourceSkuId?.trim() ?? '')
-          .filter(Boolean),
-      ))
-      const skuBatchFlowNos = normalizeSkuBatchFlowNos(item.skuBatchFlowNos)
-
-      if (!spu || !name) return []
-      return [{ id, name, spu, pushedSourceSkuIds, skuItems, skuBatchFlowNos }]
-    })
-  } catch {
-    return []
-  }
-}
-
 function mergeFormalSeriesProducts(
   left: FormalSeriesProductSummary[],
   right: FormalSeriesProductSummary[],
@@ -2758,13 +2713,6 @@ export default function DraftGroupsFormalClient({
     }
 
     const refreshFormalSeriesProducts = () => {
-      const localProducts = readFormalSeriesProducts()
-      if (localProducts.length > 0) {
-        setFormalSeriesProducts(
-          mergeFormalSeriesProducts(initialFormalSeriesProducts, localProducts),
-        )
-      }
-
       void (async () => {
         try {
           const productPage = await listSharedNonIntegratedProductPage({
@@ -2776,7 +2724,7 @@ export default function DraftGroupsFormalClient({
             buildFormalSeriesProductsFromRecords(productPage.products),
           )
         } catch {
-          // Keep the latest local snapshot when the product API is temporarily unavailable.
+          // Keep server-provided formal products when the product API is temporarily unavailable.
         }
       })()
     }
diff --git a/furniture-3d-system/src/app/home-client.types.ts b/furniture-3d-system/src/app/home-client.types.ts
index 9ad464ef..a9ea5649 100644
--- a/furniture-3d-system/src/app/home-client.types.ts
+++ b/furniture-3d-system/src/app/home-client.types.ts
@@ -6,7 +6,8 @@ export interface ProductSku {
   price: number
   stock: number
   isActive: boolean
-  attributes?: Record<string, string> | null
+  legacyAttributes?: Record<string, string> | null
+  displayTags?: string[]
 }
 
 export interface ProductWithSkus {
diff --git a/furniture-3d-system/src/app/home/home-client.types.ts b/furniture-3d-system/src/app/home/home-client.types.ts
index 9854b7b6..0f79ceb7 100644
--- a/furniture-3d-system/src/app/home/home-client.types.ts
+++ b/furniture-3d-system/src/app/home/home-client.types.ts
@@ -6,7 +6,8 @@ export interface ProductSku {
   price: number
   stock: number
   isActive: boolean
-  attributes?: Record<string, string> | null
+  legacyAttributes?: Record<string, string> | null
+  displayTags?: string[]
 }
 
 export interface ProductWithSkus {
diff --git a/furniture-3d-system/src/app/intake/AccessoryLibraryPanel.tsx b/furniture-3d-system/src/app/intake/AccessoryLibraryPanel.tsx
index 09e5776a..163cc508 100644
--- a/furniture-3d-system/src/app/intake/AccessoryLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/AccessoryLibraryPanel.tsx
@@ -15,10 +15,14 @@ import {
 import Modal from '@/components/ui/Modal'
 import {
   ACCESSORY_LIBRARY_CHANGED_EVENT,
-  ACCESSORY_LIBRARY_STORAGE_KEY,
-  readAccessoryLibraryItems,
+  ACCESSORY_REFERENCE_LIBRARY_TYPE,
+  decodeAccessoryReferenceLibraryRows,
   type AccessoryLibraryItem,
 } from '@/lib/accessory-library'
+import {
+  listIntakeReferenceLibraryItems,
+  replaceIntakeReferenceLibraryItems,
+} from '@/lib/intake-reference-library-client'
 
 const ACCESSORY_LIBRARY_IMAGE_MAX_SIZE_BYTES = 1.5 * 1024 * 1024
 const ACCESSORY_LIBRARY_LETTERS = Array.from({ length: 26 }, (_, index) =>
@@ -1583,8 +1587,20 @@ function normalizeScrewItem(item: AccessoryLibraryItem): ScrewItem {
   }
 }
 
-function readScrewItems() {
-  return readAccessoryLibraryItems().map(normalizeScrewItem)
+function buildAccessoryReferenceLibraryRows(items: ScrewItem[]) {
+  return items.map((item, index) => ({
+    itemKey: item.code.trim().toUpperCase(),
+    code: item.code,
+    name: item.name,
+    category: item.screwCategory,
+    letter: item.letter,
+    payload: {
+      kind: ACCESSORY_REFERENCE_LIBRARY_TYPE,
+      item,
+    },
+    sortOrder: index,
+    isActive: true,
+  }))
 }
 
 function buildNextScrewCode(
@@ -2200,7 +2216,7 @@ export default function AccessoryLibraryPanel({
   canEditItems = true,
   canDeleteItems = false,
 }: AccessoryLibraryPanelProps) {
-  const [items, setItems] = useState<ScrewItem[]>(readScrewItems)
+  const [items, setItems] = useState<ScrewItem[]>([])
   const [selectedLetter, setSelectedLetter] =
     useState<AccessoryLibraryLetter>('A')
   const [activeHeadType, setActiveHeadType] = useState('全部')
@@ -2214,18 +2230,68 @@ export default function AccessoryLibraryPanel({
     useState<ScrewFilterState>(EMPTY_FILTERS)
   const [appliedFilters, setAppliedFilters] =
     useState<ScrewFilterState>(EMPTY_FILTERS)
+  const [isServerLoading, setIsServerLoading] = useState(true)
+  const [isServerSaving, setIsServerSaving] = useState(false)
+  const [serverError, setServerError] = useState('')
+  const [serverNotice, setServerNotice] = useState('')
 
   useEffect(() => {
-    try {
-      window.localStorage.setItem(
-        ACCESSORY_LIBRARY_STORAGE_KEY,
-        JSON.stringify(items),
-      )
-      window.dispatchEvent(new Event(ACCESSORY_LIBRARY_CHANGED_EVENT))
-    } catch {
-      console.warn('配件资料库本地缓存空间不足，未能完成持久化保存。')
+    let isCancelled = false
+    setIsServerLoading(true)
+    setServerError('')
+    setServerNotice('')
+
+    listIntakeReferenceLibraryItems(ACCESSORY_REFERENCE_LIBRARY_TYPE)
+      .then((rows) => {
+        if (isCancelled) return
+        const serverItems = decodeAccessoryReferenceLibraryRows(rows).map(
+          normalizeScrewItem,
+        )
+        setItems(serverItems)
+        setServerNotice(
+          serverItems.length ? '' : '服务端暂无配件资料，新增后写入服务端资料库',
+        )
+      })
+      .catch((error) => {
+        if (isCancelled) return
+        setServerError(error instanceof Error ? error.message : '配件资料库读取失败')
+      })
+      .finally(() => {
+        if (!isCancelled) {
+          setIsServerLoading(false)
+        }
+      })
+
+    return () => {
+      isCancelled = true
     }
-  }, [items])
+  }, [])
+
+  async function commitAccessoryLibrary(nextItems: ScrewItem[]) {
+    setIsServerSaving(true)
+    setServerError('')
+    setServerNotice('')
+
+    try {
+      const savedRows = await replaceIntakeReferenceLibraryItems(
+        ACCESSORY_REFERENCE_LIBRARY_TYPE,
+        buildAccessoryReferenceLibraryRows(nextItems),
+      )
+      const savedItems = decodeAccessoryReferenceLibraryRows(savedRows)
+      const normalizedItems = savedItems.map(normalizeScrewItem)
+      setItems(normalizedItems)
+      window.dispatchEvent(new Event(ACCESSORY_LIBRARY_CHANGED_EVENT))
+      return normalizedItems
+    } catch (error) {
+      const message =
+        error instanceof Error ? error.message : '配件资料库保存失败'
+      setServerError(message)
+      setEditingError(message)
+      return null
+    } finally {
+      setIsServerSaving(false)
+    }
+  }
 
   const selectedLetterItems = useMemo(
     () =>
@@ -2404,7 +2470,7 @@ export default function AccessoryLibraryPanel({
   }
 
   function openCreateModal(source?: ScrewItem) {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
 
     setEditingId(null)
     setCopySource(source ?? null)
@@ -2413,7 +2479,7 @@ export default function AccessoryLibraryPanel({
   }
 
   function openEditModal(item: ScrewItem) {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
 
     setEditingId(item.id)
     setCopySource(null)
@@ -2482,7 +2548,7 @@ export default function AccessoryLibraryPanel({
   }
 
   async function handleDraftImageChange(event: ChangeEvent<HTMLInputElement>) {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
 
     const file = event.target.files?.[0]
     if (!file || !draft) return
@@ -2523,7 +2589,7 @@ export default function AccessoryLibraryPanel({
   }
 
   function clearDraftImage() {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
 
     if (!draft) return
 
@@ -2534,8 +2600,8 @@ export default function AccessoryLibraryPanel({
     })
   }
 
-  function saveDraft() {
-    if (!canEditItems) return
+  async function saveDraft() {
+    if (!canEditItems || isServerSaving) return
 
     if (!draft) return
 
@@ -2561,26 +2627,28 @@ export default function AccessoryLibraryPanel({
       updatedAt: new Date().toISOString(),
     }
 
-    setItems((current) => {
-      if (editingId) {
-        return current.map((item) => (item.id === editingId ? nextItem : item))
-      }
-
-      return [...current, nextItem]
-    })
+    const nextItems = editingId
+      ? items.map((item) => (item.id === editingId ? nextItem : item))
+      : [...items, nextItem]
+    const savedItems = await commitAccessoryLibrary(nextItems)
+    if (!savedItems) return
 
     closeDraftModal()
   }
 
-  function removeItem(item: ScrewItem) {
-    if (!canDeleteItems) return
+  async function removeItem(item: ScrewItem) {
+    if (!canDeleteItems || isServerSaving) return
 
     const shouldDelete = window.confirm(
       `确认删除配件【${item.code} ${item.name}】吗？删除后 BOM 选择里也不会再带出这个配件。`,
     )
     if (!shouldDelete) return
 
-    setItems((current) => current.filter((currentItem) => currentItem.id !== item.id))
+    const savedItems = await commitAccessoryLibrary(
+      items.filter((currentItem) => currentItem.id !== item.id),
+    )
+    if (!savedItems) return
+
     if (previewItem?.id === item.id) {
       setPreviewItem(null)
     }
@@ -2673,6 +2741,19 @@ export default function AccessoryLibraryPanel({
           {hasActiveFilters && isSelectedLetterConfigured ? (
             <span>筛选后显示 {visibleItems.length} 条</span>
           ) : null}
+          <span
+            className={
+              serverError
+                ? 'text-rose-600'
+                : serverNotice
+                  ? 'text-amber-700'
+                  : 'text-emerald-700'
+            }
+          >
+            {isServerLoading
+              ? '正在读取服务端资料库'
+              : serverError || serverNotice || '已接入服务端资料库'}
+          </span>
         </div>
       </section>
 
@@ -2728,6 +2809,7 @@ export default function AccessoryLibraryPanel({
                 type="button"
                 className={PRIMARY_BUTTON_CLASS}
                 onClick={() => openCreateModal()}
+                disabled={isServerSaving}
               >
                 <Plus className="h-4 w-4" />
                 新增 {selectedLetter} 组
@@ -2933,6 +3015,7 @@ export default function AccessoryLibraryPanel({
                               title="编辑"
                               className={OPERATION_ICON_BUTTON_CLASS}
                               onClick={() => openEditModal(item)}
+                              disabled={isServerSaving}
                             >
                               <Pencil className="h-3.5 w-3.5" />
                             </button>
@@ -2942,6 +3025,7 @@ export default function AccessoryLibraryPanel({
                               title="复制"
                               className={OPERATION_ICON_BUTTON_CLASS}
                               onClick={() => openCreateModal(item)}
+                              disabled={isServerSaving}
                             >
                               <Copy className="h-3.5 w-3.5" />
                             </button>
@@ -2952,6 +3036,7 @@ export default function AccessoryLibraryPanel({
                                 title="删除"
                                 className={DELETE_ICON_BUTTON_CLASS}
                                 onClick={() => removeItem(item)}
+                                disabled={isServerSaving}
                               >
                                 <Trash2 className="h-3.5 w-3.5" />
                               </button>
@@ -3013,8 +3098,9 @@ export default function AccessoryLibraryPanel({
               type="button"
               className={PRIMARY_BUTTON_CLASS}
               onClick={saveDraft}
+              disabled={isServerSaving}
             >
-              保存
+              {isServerSaving ? '保存中' : '保存'}
             </button>
           </div>
         }
diff --git a/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.test.tsx b/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.test.tsx
index 3431ed71..35578d63 100644
--- a/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.test.tsx
+++ b/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.test.tsx
@@ -2,7 +2,113 @@ import { fireEvent, render, screen, waitFor, within } from '@testing-library/rea
 import userEvent from '@testing-library/user-event'
 import AccessoryLibraryPanel from '@/app/intake/AccessoryLibraryPanel'
 import PackagingMaterialLibraryPanel from '@/app/intake/PackagingMaterialLibraryPanel'
-import { ACCESSORY_LIBRARY_STORAGE_KEY } from '@/lib/accessory-library'
+
+const LEGACY_PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY =
+  'formal-intake-packaging-material-library-items'
+
+function createApiResponse(data: unknown, init?: ResponseInit) {
+  const status = init?.status ?? 200
+  return {
+    ok: status >= 200 && status < 300,
+    status,
+    json: async () => data,
+  } as Response
+}
+
+function spyOnFetch() {
+  if (!('fetch' in global)) {
+    Object.defineProperty(global, 'fetch', {
+      configurable: true,
+      writable: true,
+      value: jest.fn(),
+    })
+  }
+  const fetchSpy = jest.spyOn(global, 'fetch' as never)
+  fetchSpy.mockClear()
+  return fetchSpy
+}
+
+function mockReferenceLibraryFetch(items: unknown[] = []) {
+  return spyOnFetch().mockResolvedValue(
+    createApiResponse({
+      success: true,
+      data: { items },
+    }),
+  )
+}
+
+function createReferenceLibraryRow(type: string, item: Record<string, unknown>, index = 0) {
+  const now = '2026-05-30T00:00:00.000Z'
+  return {
+    id: `${type.toLowerCase()}-${String(item.id ?? item.code ?? index)}`,
+    libraryType: type,
+    itemKey: String(item.id ?? item.code ?? index),
+    code: String(item.code ?? ''),
+    name: String(item.name ?? ''),
+    category: String(item.screwCategory ?? ''),
+    letter: String(item.letter ?? ''),
+    payload: item,
+    sortOrder: index,
+    isActive: true,
+    createdBy: null,
+    updatedBy: null,
+    createdAt: now,
+    updatedAt: now,
+  }
+}
+
+function mockReferenceLibraryFetchWithState(initialRows: unknown[] = []) {
+  let rows = [...initialRows]
+
+  return spyOnFetch().mockImplementation(async (input, init) => {
+    const url = String(input)
+    const method = init?.method ?? 'GET'
+
+    if (url.includes('/api/intake/reference-library') && method === 'PUT') {
+      const body = JSON.parse(String(init?.body ?? '{}')) as {
+        type?: string
+        items?: Array<Record<string, unknown>>
+      }
+      rows = (body.items ?? []).map((item, index) =>
+        createReferenceLibraryRow(body.type ?? 'ACCESSORY', {
+          ...(item.payload && typeof item.payload === 'object'
+            ? (item.payload as Record<string, unknown>)
+            : {}),
+          id: item.itemKey,
+          code: item.code,
+          name: item.name,
+          letter: item.letter,
+        }, index),
+      )
+      return createApiResponse({ success: true, data: { items: rows } })
+    }
+
+    return createApiResponse({ success: true, data: { items: rows } })
+  })
+}
+
+function readLastReferenceLibraryPutBody(fetchSpy: jest.SpyInstance) {
+  const putCall = fetchSpy.mock.calls
+    .filter(
+      ([url, init]) =>
+        String(url).includes('/api/intake/reference-library') &&
+        (init as RequestInit | undefined)?.method === 'PUT',
+    )
+    .at(-1)
+  expect(putCall).toBeDefined()
+  return JSON.parse(String((putCall?.[1] as RequestInit).body)) as {
+    type?: string
+    items?: Array<{ payload?: { item?: Record<string, unknown> } }>
+  }
+}
+
+async function waitAccessoryLibraryReady() {
+  return screen.findByText(/已接入服务端资料库|服务端暂无配件资料/)
+}
+
+async function waitPackagingMaterialLibraryReady() {
+  return screen.findByText(/已接入服务端资料库|服务端暂无包材资料/)
+}
 
 describe('alphabet library panels', () => {
   beforeEach(() => {
@@ -15,8 +121,10 @@ describe('alphabet library panels', () => {
 
   it('uses the structured self-tapping screw library for accessories', async () => {
     const actor = userEvent.setup()
+    const fetchSpy = mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     expect(screen.getByText('A 自攻螺丝')).toBeInTheDocument()
     expect(screen.queryByRole('button', { name: '新增' })).not.toBeInTheDocument()
@@ -43,10 +151,8 @@ describe('alphabet library panels', () => {
       ).toBeInTheDocument()
     })
 
-    const savedItems = JSON.parse(
-      window.localStorage.getItem(ACCESSORY_LIBRARY_STORAGE_KEY) ?? '[]',
-    )
-    expect(savedItems[0]).toMatchObject({
+    const savedBody = readLastReferenceLibraryPutBody(fetchSpy)
+    expect(savedBody.items?.[0]?.payload?.item).toMatchObject({
       letter: 'A',
       code: 'A0',
       name: 'M4*20 十字 沉头 尖尾 自攻螺丝',
@@ -63,8 +169,10 @@ describe('alphabet library panels', () => {
 
   it('lets unconfigured accessory letter groups be selected', async () => {
     const actor = userEvent.setup()
+    mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: 'O 0 条' }))
 
@@ -80,8 +188,10 @@ describe('alphabet library panels', () => {
 
   it('uses the connection screw rod rules for C accessories', async () => {
     const actor = userEvent.setup()
+    const fetchSpy = mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: 'C 连接螺杆 0 条' }))
 
@@ -122,10 +232,8 @@ describe('alphabet library panels', () => {
       expect(screen.getByText('M8*70 尖平尾 双头牙')).toBeInTheDocument()
     })
 
-    const savedItems = JSON.parse(
-      window.localStorage.getItem(ACCESSORY_LIBRARY_STORAGE_KEY) ?? '[]',
-    )
-    expect(savedItems[0]).toMatchObject({
+    const savedBody = readLastReferenceLibraryPutBody(fetchSpy)
+    expect(savedBody.items?.[0]?.payload?.item).toMatchObject({
       letter: 'C',
       code: 'C0',
       name: 'M8*70 尖平尾 双头牙',
@@ -891,8 +999,10 @@ describe('alphabet library panels', () => {
 
   it('filters C and D accessory groups by category shortcuts', async () => {
     const actor = userEvent.setup()
+    mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: 'C 连接螺杆 0 条' }))
     await actor.click(screen.getByRole('button', { name: '新增 C 组' }))
@@ -936,8 +1046,10 @@ describe('alphabet library panels', () => {
 
   it('uses whole-set eccentric connector rules for D accessories', async () => {
     const actor = userEvent.setup()
+    const fetchSpy = mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: 'D 偏心连接件 0 条' }))
 
@@ -983,10 +1095,8 @@ describe('alphabet library panels', () => {
     expect(screen.getAllByText('双头偏心连接杆').length).toBeGreaterThan(0)
     expect(screen.getAllByText('42mm').length).toBeGreaterThan(0)
 
-    const savedItems = JSON.parse(
-      window.localStorage.getItem(ACCESSORY_LIBRARY_STORAGE_KEY) ?? '[]',
-    )
-    expect(savedItems[0]).toMatchObject({
+    const savedBody = readLastReferenceLibraryPutBody(fetchSpy)
+    expect(savedBody.items?.[0]?.payload?.item).toMatchObject({
       letter: 'D',
       code: 'D0',
       name: 'M8*42 镀锌 双头偏心连接杆',
@@ -1004,8 +1114,10 @@ describe('alphabet library panels', () => {
 
   it('opens copy-new mode and blocks exact duplicate screw configs', async () => {
     const actor = userEvent.setup()
+    mockReferenceLibraryFetchWithState()
 
     render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: '新增 A 组' }))
     let dialog = await screen.findByRole('dialog', { name: '新增A组配件' })
@@ -1038,8 +1150,10 @@ describe('alphabet library panels', () => {
   it('shows delete only when accessory library deletion is allowed', async () => {
     const actor = userEvent.setup()
     const confirmSpy = jest.spyOn(window, 'confirm').mockReturnValue(true)
+    const fetchSpy = mockReferenceLibraryFetchWithState()
 
     const { rerender } = render(<AccessoryLibraryPanel />)
+    await waitAccessoryLibraryReady()
 
     await actor.click(screen.getByRole('button', { name: '新增 A 组' }))
     let dialog = await screen.findByRole('dialog', { name: '新增A组配件' })
@@ -1063,13 +1177,15 @@ describe('alphabet library panels', () => {
     expect(confirmSpy).toHaveBeenCalledWith(
       expect.stringContaining('确认删除配件'),
     )
-    expect(
-      JSON.parse(window.localStorage.getItem(ACCESSORY_LIBRARY_STORAGE_KEY) ?? '[]'),
-    ).toEqual([])
+    const savedBody = readLastReferenceLibraryPutBody(fetchSpy)
+    expect(savedBody.items).toEqual([])
   })
 
-  it('keeps accessory library read-only when editing is not allowed', () => {
+  it('keeps accessory library read-only when editing is not allowed', async () => {
+    mockReferenceLibraryFetchWithState()
+
     render(<AccessoryLibraryPanel canEditItems={false} />)
+    await waitAccessoryLibraryReady()
 
     expect(screen.queryByRole('button', { name: '新增 A 组' })).not.toBeInTheDocument()
     expect(screen.queryByRole('button', { name: '编辑' })).not.toBeInTheDocument()
@@ -1080,9 +1196,11 @@ describe('alphabet library panels', () => {
 
   it('keeps the packaging material library on its original fields', async () => {
     const actor = userEvent.setup()
+    mockReferenceLibraryFetch()
 
     render(<PackagingMaterialLibraryPanel />)
 
+    await waitPackagingMaterialLibraryReady()
     await actor.click(screen.getByRole('button', { name: '新增当前字母' }))
 
     const dialog = await screen.findByRole('dialog', { name: '新增包材' })
@@ -1092,10 +1210,191 @@ describe('alphabet library panels', () => {
     expect(within(dialog).queryByLabelText('材质')).not.toBeInTheDocument()
   })
 
-  it('keeps packaging material library read-only when editing is not allowed', () => {
+  it('keeps packaging material library read-only when editing is not allowed', async () => {
+    mockReferenceLibraryFetch()
+
     render(<PackagingMaterialLibraryPanel canEditItems={false} />)
 
+    await waitPackagingMaterialLibraryReady()
     expect(screen.queryByRole('button', { name: '新增当前字母' })).not.toBeInTheDocument()
     expect(screen.queryByRole('button', { name: '新增' })).not.toBeInTheDocument()
   })
+
+  it('loads packaging material library from the server without mirroring it to browser storage', async () => {
+    mockReferenceLibraryFetch([
+      {
+        id: 'server-packaging-a0',
+        libraryType: 'PACKAGING_MATERIAL',
+        itemKey: 'pkg-a0',
+        code: 'A0',
+        name: '蜂窝纸箱',
+        category: '',
+        letter: 'A',
+        payload: {
+          id: 'pkg-a0',
+          letter: 'A',
+          code: 'A0',
+          name: '蜂窝纸箱',
+          price: '3.5',
+          imageUrl: '/packaging/a0.png',
+          imageName: 'a0.png',
+          updatedAt: '2026-05-30T00:00:00.000Z',
+        },
+        sortOrder: 0,
+        isActive: true,
+        createdBy: null,
+        updatedBy: null,
+        createdAt: '2026-05-30T00:00:00.000Z',
+        updatedAt: '2026-05-30T00:00:00.000Z',
+      },
+    ])
+
+    render(<PackagingMaterialLibraryPanel />)
+
+    expect(await screen.findByText('蜂窝纸箱')).toBeInTheDocument()
+    expect(window.localStorage.length).toBe(0)
+  })
+
+  it('ignores legacy packaging browser cache when the server library is empty', async () => {
+    const fetchSpy = mockReferenceLibraryFetch()
+    window.localStorage.setItem(
+      LEGACY_PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY,
+      JSON.stringify([
+        {
+          id: 'local-pkg-a0',
+          letter: 'A',
+          code: 'A0',
+          name: '本地泡沫',
+          price: '0.8',
+          imageUrl: '',
+          imageName: '',
+          updatedAt: '2026-05-30T00:00:00.000Z',
+        },
+      ]),
+    )
+
+    render(<PackagingMaterialLibraryPanel />)
+
+    expect(
+      await screen.findByText('服务端暂无包材资料，新增后写入服务端资料库'),
+    ).toBeInTheDocument()
+    expect(screen.queryByText('本地泡沫')).not.toBeInTheDocument()
+    expect(fetchSpy).toHaveBeenCalledWith(
+      '/api/intake/reference-library?type=PACKAGING_MATERIAL',
+      expect.objectContaining({
+        headers: expect.objectContaining({ Accept: 'application/json' }),
+      }),
+    )
+    expect(
+      fetchSpy.mock.calls.some(([, init]) => (init as RequestInit | undefined)?.method === 'PUT'),
+    ).toBe(false)
+  })
+
+  it('saves packaging material library changes only through the server', async () => {
+    const actor = userEvent.setup()
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValueOnce(createApiResponse({ success: true, data: { items: [] } }))
+    fetchSpy.mockResolvedValueOnce(
+      createApiResponse({
+        success: true,
+        data: {
+          items: [
+            {
+              id: 'server-packaging-a0',
+              libraryType: 'PACKAGING_MATERIAL',
+              itemKey: 'pkg-a0',
+              code: 'A0',
+              name: '护角',
+              category: '',
+              letter: 'A',
+              payload: {
+                id: 'pkg-a0',
+                letter: 'A',
+                code: 'A0',
+                name: '护角',
+                price: '1.2',
+                imageUrl: '',
+                imageName: '',
+                updatedAt: '2026-05-30T00:00:00.000Z',
+              },
+              sortOrder: 0,
+              isActive: true,
+              createdBy: null,
+              updatedBy: null,
+              createdAt: '2026-05-30T00:00:00.000Z',
+              updatedAt: '2026-05-30T00:00:00.000Z',
+            },
+          ],
+        },
+      }),
+    )
+
+    render(<PackagingMaterialLibraryPanel />)
+
+    await waitPackagingMaterialLibraryReady()
+    await actor.click(screen.getByRole('button', { name: '新增当前字母' }))
+    const dialog = await screen.findByRole('dialog', { name: '新增包材' })
+    fireEvent.change(within(dialog).getByLabelText(/包材名称/), {
+      target: { value: '护角' },
+    })
+    fireEvent.change(within(dialog).getByLabelText('价格'), {
+      target: { value: '1.2' },
+    })
+    await actor.click(within(dialog).getByRole('button', { name: '保存' }))
+
+    await waitFor(() => {
+      expect(fetchSpy).toHaveBeenLastCalledWith(
+        '/api/intake/reference-library',
+        expect.objectContaining({
+          method: 'PUT',
+        }),
+      )
+    })
+    const requestBody = JSON.parse(String((fetchSpy.mock.calls.at(-1)?.[1] as RequestInit).body))
+    expect(requestBody).toMatchObject({
+      type: 'PACKAGING_MATERIAL',
+      items: [
+        {
+          itemKey: 'A0',
+          code: 'A0',
+          name: '护角',
+          letter: 'A',
+          payload: expect.objectContaining({
+            code: 'A0',
+            name: '护角',
+            price: '1.2',
+          }),
+        },
+      ],
+    })
+    expect(window.localStorage.length).toBe(0)
+  })
+
+  it('does not pretend packaging material changes were saved when the server write fails', async () => {
+    const actor = userEvent.setup()
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValueOnce(createApiResponse({ success: true, data: { items: [] } }))
+    fetchSpy.mockResolvedValueOnce(
+      createApiResponse(
+        {
+          success: false,
+          error: { message: '资料库记录 code 重复：A0' },
+        },
+        { status: 400 },
+      ),
+    )
+
+    render(<PackagingMaterialLibraryPanel />)
+
+    await waitPackagingMaterialLibraryReady()
+    await actor.click(screen.getByRole('button', { name: '新增当前字母' }))
+    const dialog = await screen.findByRole('dialog', { name: '新增包材' })
+    fireEvent.change(within(dialog).getByLabelText(/包材名称/), {
+      target: { value: '护角' },
+    })
+    await actor.click(within(dialog).getByRole('button', { name: '保存' }))
+
+    expect(await within(dialog).findByText('资料库记录 code 重复：A0')).toBeInTheDocument()
+    expect(window.localStorage.length).toBe(0)
+  })
 })
diff --git a/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.tsx b/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.tsx
index 447b6023..b510a05a 100644
--- a/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/AlphabetLibraryPanel.tsx
@@ -6,6 +6,12 @@ import { Eye, ImageIcon, Plus, Search, Upload } from 'lucide-react'
 import Button from '@/components/ui/Button'
 import { Input } from '@/components/ui/Input'
 import Modal from '@/components/ui/Modal'
+import {
+  listAlphabetReferenceLibraryItems,
+  replaceAlphabetReferenceLibraryItems,
+  type AlphabetReferenceLibraryItem,
+  type IntakeReferenceLibraryType,
+} from '@/lib/intake-reference-library-client'
 
 const ALPHABET_LIBRARY_IMAGE_MAX_SIZE_BYTES = 1.5 * 1024 * 1024
 const ALPHABET_LIBRARY_LETTERS = Array.from({ length: 26 }, (_, index) =>
@@ -49,12 +55,12 @@ type AlphabetLibraryExtraFieldDefinition = {
 }
 
 interface AlphabetLibraryPanelProps {
-  storageKey: string
   entityName: string
   canEditItems?: boolean
   queryNamePlaceholder?: string
   changedEventName?: string
   extraFields?: AlphabetLibraryExtraFieldDefinition[]
+  serverLibraryType: IntakeReferenceLibraryType
 }
 
 function createItemId() {
@@ -69,37 +75,23 @@ function normalizeText(value: string) {
   return value.trim().toLowerCase()
 }
 
-function readLibraryItems(storageKey: string) {
-  if (typeof window === 'undefined') {
-    return [] as AlphabetLibraryItem[]
-  }
-
-  try {
-    const rawValue = window.localStorage.getItem(storageKey)
-    if (!rawValue) return []
-
-    const parsedValue = JSON.parse(rawValue)
-    if (!Array.isArray(parsedValue)) return []
-
-    return parsedValue.filter((item): item is AlphabetLibraryItem => {
-      return (
-        item &&
-        typeof item.id === 'string' &&
-        typeof item.letter === 'string' &&
-        ALPHABET_LIBRARY_LETTERS.includes(item.letter as AlphabetLibraryLetter) &&
-        typeof item.code === 'string' &&
-        typeof item.name === 'string' &&
-        (item.color === undefined || typeof item.color === 'string') &&
-        (item.material === undefined || typeof item.material === 'string') &&
-        typeof item.price === 'string' &&
-        typeof item.imageUrl === 'string' &&
-        typeof item.imageName === 'string' &&
-        typeof item.updatedAt === 'string'
-      )
-    })
-  } catch {
-    return []
-  }
+function normalizeAlphabetLibraryItems(items: AlphabetReferenceLibraryItem[]) {
+  return items.filter((item): item is AlphabetLibraryItem => {
+    return (
+      item &&
+      typeof item.id === 'string' &&
+      typeof item.letter === 'string' &&
+      ALPHABET_LIBRARY_LETTERS.includes(item.letter as AlphabetLibraryLetter) &&
+      typeof item.code === 'string' &&
+      typeof item.name === 'string' &&
+      (item.color === undefined || typeof item.color === 'string') &&
+      (item.material === undefined || typeof item.material === 'string') &&
+      typeof item.price === 'string' &&
+      typeof item.imageUrl === 'string' &&
+      typeof item.imageName === 'string' &&
+      typeof item.updatedAt === 'string'
+    )
+  })
 }
 
 function readLibraryCodeIndex(code: string, letter: AlphabetLibraryLetter) {
@@ -149,14 +141,18 @@ function createDraft(items: AlphabetLibraryItem[], letter: AlphabetLibraryLetter
 }
 
 export default function AlphabetLibraryPanel({
-  storageKey,
   entityName,
   canEditItems = true,
   queryNamePlaceholder,
   changedEventName,
   extraFields = [],
+  serverLibraryType,
 }: AlphabetLibraryPanelProps) {
-  const [items, setItems] = useState<AlphabetLibraryItem[]>(() => readLibraryItems(storageKey))
+  const [items, setItems] = useState<AlphabetLibraryItem[]>([])
+  const [isServerLoading, setIsServerLoading] = useState(true)
+  const [isServerSaving, setIsServerSaving] = useState(false)
+  const [serverError, setServerError] = useState('')
+  const [serverNotice, setServerNotice] = useState('')
   const [selectedLetter, setSelectedLetter] = useState<AlphabetLibraryLetter>('A')
   const [queryCode, setQueryCode] = useState('')
   const [queryName, setQueryName] = useState('')
@@ -168,15 +164,34 @@ export default function AlphabetLibraryPanel({
   const [previewItem, setPreviewItem] = useState<AlphabetLibraryItem | null>(null)
 
   useEffect(() => {
-    try {
-      window.localStorage.setItem(storageKey, JSON.stringify(items))
-      if (changedEventName) {
-        window.dispatchEvent(new Event(changedEventName))
-      }
-    } catch {
-      console.warn(`${entityName}资料库本地缓存空间不足，未能完成持久化保存。`)
+    let isCancelled = false
+    setIsServerLoading(true)
+    setServerError('')
+    setServerNotice('')
+
+    listAlphabetReferenceLibraryItems(serverLibraryType)
+      .then((serverItems) => {
+        if (isCancelled) return
+        const normalizedItems = normalizeAlphabetLibraryItems(serverItems)
+        setItems(normalizedItems)
+        setServerNotice(
+          normalizedItems.length > 0 ? '' : `服务端暂无${entityName}资料，新增后写入服务端资料库`,
+        )
+      })
+      .catch((error) => {
+        if (isCancelled) return
+        setServerError(error instanceof Error ? error.message : `${entityName}资料库读取失败`)
+      })
+      .finally(() => {
+        if (!isCancelled) {
+          setIsServerLoading(false)
+        }
+      })
+
+    return () => {
+      isCancelled = true
     }
-  }, [changedEventName, entityName, items, storageKey])
+  }, [entityName, serverLibraryType])
 
   const filteredItems = useMemo(() => {
     const codeKeyword = normalizeText(appliedQueryCode)
@@ -321,10 +336,15 @@ export default function AlphabetLibraryPanel({
     })
   }
 
-  function saveDraft() {
+  async function persistItems(nextItems: AlphabetLibraryItem[]) {
+    const savedItems = await replaceAlphabetReferenceLibraryItems(serverLibraryType, nextItems)
+    return normalizeAlphabetLibraryItems(savedItems)
+  }
+
+  async function saveDraft() {
     if (!canEditItems) return
 
-    if (!draft) return
+    if (!draft || isServerSaving) return
 
     const normalizedCode = draft.code.trim().toUpperCase()
     const normalizedName = draft.name.trim()
@@ -365,22 +385,32 @@ export default function AlphabetLibraryPanel({
       updatedAt: new Date().toISOString(),
     }
 
-    setItems((current) => {
-      if (editingId) {
-        return current.map((item) => (item.id === editingId ? nextItem : item))
+    const nextItems = editingId
+      ? items.map((item) => (item.id === editingId ? nextItem : item))
+      : [...items, nextItem]
+
+    setIsServerSaving(true)
+    try {
+      const savedItems = await persistItems(nextItems)
+      setItems(savedItems)
+      setSelectedLetter(draft.letter)
+      setDraft(null)
+      setEditingId(null)
+      setEditingError('')
+      setServerError('')
+      setServerNotice('')
+      if (changedEventName && typeof window !== 'undefined') {
+        window.dispatchEvent(new Event(changedEventName))
       }
-
-      return [...current, nextItem]
-    })
-
-    setSelectedLetter(draft.letter)
-    setDraft(null)
-    setEditingId(null)
-    setEditingError('')
+    } catch (error) {
+      setEditingError(error instanceof Error ? error.message : `${entityName}资料库保存失败`)
+    } finally {
+      setIsServerSaving(false)
+    }
   }
 
-  function removeItem(id: string) {
-    if (!canEditItems) return
+  async function removeItem(id: string) {
+    if (!canEditItems || isServerSaving) return
 
     const target = items.find((item) => item.id === id)
     if (!target) return
@@ -388,7 +418,21 @@ export default function AlphabetLibraryPanel({
     const shouldDelete = window.confirm(`确认删除${entityName}【${target.code} ${target.name}】吗？`)
     if (!shouldDelete) return
 
-    setItems((current) => current.filter((item) => item.id !== id))
+    const nextItems = items.filter((item) => item.id !== id)
+    setIsServerSaving(true)
+    try {
+      const savedItems = await persistItems(nextItems)
+      setItems(savedItems)
+      setServerError('')
+      setServerNotice('')
+      if (changedEventName && typeof window !== 'undefined') {
+        window.dispatchEvent(new Event(changedEventName))
+      }
+    } catch (error) {
+      setServerError(error instanceof Error ? error.message : `${entityName}资料库删除失败`)
+    } finally {
+      setIsServerSaving(false)
+    }
   }
 
   return (
@@ -439,6 +483,9 @@ export default function AlphabetLibraryPanel({
           <span>当前共 {items.length} 条{entityName}资料</span>
           <span>当前字母 {activeLetter} 共 {totalGroupedItems[activeLetter]?.length ?? 0} 条</span>
           {hasActiveQuery ? <span>筛选后显示 {filteredItems.length} 条</span> : null}
+          <span className={serverError ? 'text-rose-600' : serverNotice ? 'text-amber-700' : 'text-emerald-700'}>
+            {isServerLoading ? '正在读取服务端资料库' : serverError || serverNotice || '已接入服务端资料库'}
+          </span>
         </div>
       </div>
 
@@ -677,8 +724,9 @@ export default function AlphabetLibraryPanel({
               type="button"
               className={LIBRARY_PRIMARY_BUTTON_CLASS}
               onClick={saveDraft}
+              disabled={isServerSaving}
             >
-              保存
+              {isServerSaving ? '保存中' : '保存'}
             </Button>
           </div>
         }
diff --git a/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.tsx b/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.tsx
index 1d46ac31..e3b00422 100644
--- a/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.tsx
@@ -5,16 +5,22 @@ import { Copy, Layers3, Plus, Ruler, Save, Search, Trash2 } from 'lucide-react'
 import Button from '@/components/ui/Button'
 import { Input } from '@/components/ui/Input'
 import {
+  EDGE_BANDING_LIBRARY_CHANGED_EVENT,
+  EDGE_BANDING_REFERENCE_ITEM_CATEGORY,
+  EDGE_BANDING_REFERENCE_LIBRARY_TYPE,
   buildEdgeBandingDisplayName,
   buildEdgeBandingLibraryItems,
+  buildEdgeBandingReferenceItemKey,
   createEdgeBandingLibraryItem,
   createEmptyEdgeBandingDraft,
   parseBoardThicknessMmFromText,
-  persistEdgeBandingLibraryItems,
-  readEdgeBandingLibraryItems,
   type EdgeBandingLibraryDraft,
   type EdgeBandingLibraryItem,
 } from '@/lib/edge-banding-library'
+import {
+  listIntakeReferenceLibraryItems,
+  replaceIntakeReferenceLibraryItems,
+} from '@/lib/intake-reference-library-client'
 
 type EditorMode = 'view' | 'create' | 'edit' | 'createCategory'
 
@@ -28,8 +34,7 @@ type EdgeBandingLibraryCategory = {
   createdAt: string
 }
 
-const EDGE_BANDING_CATEGORY_STORAGE_KEY =
-  'formal-intake-edge-banding-library-categories'
+const EDGE_BANDING_REFERENCE_CATEGORY_CATEGORY = 'CATEGORY'
 const LIBRARY_PRIMARY_BUTTON_CLASS =
   '!border-zinc-950 !bg-zinc-950 !bg-none !text-white !shadow-none hover:!border-zinc-800 hover:!bg-zinc-800 focus:!border-zinc-600 disabled:!border-zinc-200 disabled:!bg-zinc-200 disabled:!text-zinc-400'
 const EDGE_BANDING_TOP_FIELD_CLASS =
@@ -144,6 +149,22 @@ function getEdgeBandingGroupKey(item: EdgeBandingLibraryItem) {
   )
 }
 
+function normalizeEdgeBandingReferenceKeyPart(value: string) {
+  return normalizeDisplayText(value)
+    .toUpperCase()
+    .replace(/[^\p{L}\p{N}._-]+/gu, '-')
+    .replace(/-+/g, '-')
+    .replace(/^-|-$/g, '') || 'UNKNOWN'
+}
+
+function buildEdgeBandingReferenceCategoryKey(category: EdgeBandingLibraryCategory) {
+  return [
+    'CATEGORY',
+    normalizeEdgeBandingReferenceKeyPart(category.edgeThicknessText || 'UNKNOWN'),
+    normalizeEdgeBandingReferenceKeyPart(category.name),
+  ].join(':')
+}
+
 function createNormalizedDraftItem(draft: EdgeBandingLibraryDraft) {
   return createEdgeBandingLibraryItem(draft, { id: 'draft' })
 }
@@ -184,36 +205,96 @@ function createEdgeBandingCategory(
   }
 }
 
-function readEdgeBandingCategories() {
-  if (typeof window === 'undefined') return []
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
+}
 
-  try {
-    const rawValue = window.localStorage.getItem(EDGE_BANDING_CATEGORY_STORAGE_KEY)
-    if (!rawValue) return []
-    const parsedValue = JSON.parse(rawValue)
-    if (!Array.isArray(parsedValue)) return []
+function readPayloadText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
 
-    return parsedValue
-      .map((item) =>
-        createEdgeBandingCategory(String(item?.label ?? ''), {
-          id: typeof item?.id === 'string' ? item.id : undefined,
-          createdAt:
-            typeof item?.createdAt === 'string' ? item.createdAt : undefined,
-        }),
+function decodeEdgeBandingReferenceLibraryRows(
+  rows: Awaited<ReturnType<typeof listIntakeReferenceLibraryItems>>,
+) {
+  const items: EdgeBandingLibraryItem[] = []
+  const categories: EdgeBandingLibraryCategory[] = []
+
+  rows.forEach((row) => {
+    const payload = readPayloadRecord(row.payload)
+    const kind = readPayloadText(payload.kind) || row.category
+
+    if (kind === EDGE_BANDING_REFERENCE_CATEGORY_CATEGORY) {
+      const categoryPayload = readPayloadRecord(payload.category)
+      const category = createEdgeBandingCategory(
+        readPayloadText(categoryPayload.label) || row.name,
+        {
+          id:
+            readPayloadText(categoryPayload.id) ||
+            row.itemKey.replace(/^category:/, ''),
+          createdAt: readPayloadText(categoryPayload.createdAt) || row.createdAt,
+        },
       )
-      .filter((item): item is EdgeBandingLibraryCategory => item !== null)
-  } catch {
-    return []
+      if (category) categories.push(category)
+      return
+    }
+
+    if (kind === EDGE_BANDING_REFERENCE_ITEM_CATEGORY) {
+      const itemPayload = readPayloadRecord(payload.item)
+      const item = createEdgeBandingLibraryItem(itemPayload, {
+        id:
+          readPayloadText(itemPayload.id) ||
+          row.itemKey.replace(/^item:/, ''),
+        updatedAt: readPayloadText(itemPayload.updatedAt) || row.updatedAt,
+      })
+      const [normalizedItem] = buildEdgeBandingLibraryItems([item])
+      if (normalizedItem) items.push(normalizedItem)
+    }
+  })
+
+  return {
+    items,
+    categories,
   }
 }
 
-function persistEdgeBandingCategories(categories: EdgeBandingLibraryCategory[]) {
-  if (typeof window === 'undefined') return
+function buildEdgeBandingReferenceLibraryRows(
+  items: EdgeBandingLibraryItem[],
+  categories: EdgeBandingLibraryCategory[],
+) {
+  const categoryRows = categories.map((category, index) => {
+    const itemKey = buildEdgeBandingReferenceCategoryKey(category)
+    return {
+      itemKey,
+      code: itemKey,
+      name: category.label,
+      category: EDGE_BANDING_REFERENCE_CATEGORY_CATEGORY,
+      payload: {
+        kind: EDGE_BANDING_REFERENCE_CATEGORY_CATEGORY,
+        category,
+      },
+      sortOrder: index,
+      isActive: true,
+    }
+  })
 
-  window.localStorage.setItem(
-    EDGE_BANDING_CATEGORY_STORAGE_KEY,
-    JSON.stringify(categories),
-  )
+  const itemRows = buildEdgeBandingLibraryItems(items).map((item, index) => {
+    const itemKey = buildEdgeBandingReferenceItemKey(item)
+    return {
+      itemKey,
+      code: itemKey,
+      name: buildEdgeBandingDisplayName(item),
+      category: EDGE_BANDING_REFERENCE_ITEM_CATEGORY,
+      payload: {
+        kind: EDGE_BANDING_REFERENCE_ITEM_CATEGORY,
+        item,
+      },
+      sortOrder: categoryRows.length + index,
+      isActive: true,
+    }
+  })
+
+  return [...categoryRows, ...itemRows]
 }
 
 export default function EdgeBandingLibraryPanel({
@@ -221,10 +302,8 @@ export default function EdgeBandingLibraryPanel({
 }: {
   canEditItems?: boolean
 }) {
-  const initialItems = useMemo(() => readEdgeBandingLibraryItems(), [])
-  const initialCategories = useMemo(() => readEdgeBandingCategories(), [])
-  const [items, setItems] = useState(initialItems)
-  const [categories, setCategories] = useState(initialCategories)
+  const [items, setItems] = useState<EdgeBandingLibraryItem[]>([])
+  const [categories, setCategories] = useState<EdgeBandingLibraryCategory[]>([])
   const [queryName, setQueryName] = useState('')
   const [queryEdgeThickness, setQueryEdgeThickness] = useState('')
   const [queryThickness, setQueryThickness] = useState('')
@@ -235,32 +314,56 @@ export default function EdgeBandingLibraryPanel({
   const [appliedQuerySpecWidth, setAppliedQuerySpecWidth] = useState('')
   const [categoryDraftName, setCategoryDraftName] = useState('')
   const [selectedItemId, setSelectedItemId] = useState<string | null>(
-    initialItems[0]?.id ?? null,
+    null,
   )
+  const [selectedGroupKey, setSelectedGroupKey] = useState<string | null>(null)
   const [editorMode, setEditorMode] = useState<EditorMode>('view')
   const [editingItemId, setEditingItemId] = useState<string | null>(null)
   const [editorDraft, setEditorDraft] = useState<EdgeBandingLibraryDraft>(
     createEmptyEdgeBandingDraft(),
   )
   const [panelMessage, setPanelMessage] = useState('')
+  const [isServerLoading, setIsServerLoading] = useState(true)
+  const [isServerSaving, setIsServerSaving] = useState(false)
+  const [serverError, setServerError] = useState('')
+  const [serverNotice, setServerNotice] = useState('')
 
   const normalizedItems = useMemo(() => buildEdgeBandingLibraryItems(items), [items])
 
   useEffect(() => {
-    try {
-      persistEdgeBandingLibraryItems(items)
-    } catch {
-      console.warn('封边资料库本地缓存空间不足，当前修改暂未保存。')
-    }
-  }, [items])
+    let isCancelled = false
+    setIsServerLoading(true)
+    setServerError('')
+    setServerNotice('')
 
-  useEffect(() => {
-    try {
-      persistEdgeBandingCategories(categories)
-    } catch {
-      console.warn('封边分类本地缓存空间不足，当前修改暂未保存。')
+    listIntakeReferenceLibraryItems(EDGE_BANDING_REFERENCE_LIBRARY_TYPE)
+      .then((rows) => {
+        if (isCancelled) return
+        const snapshot = decodeEdgeBandingReferenceLibraryRows(rows)
+        setItems(snapshot.items)
+        setCategories(snapshot.categories)
+        setSelectedItemId(snapshot.items[0]?.id ?? null)
+        setSelectedGroupKey(null)
+        setServerNotice(
+          snapshot.items.length || snapshot.categories.length
+            ? ''
+            : '服务端暂无封边资料，新增后写入服务端资料库',
+        )
+      })
+      .catch((error) => {
+        if (isCancelled) return
+        setServerError(error instanceof Error ? error.message : '封边资料库读取失败')
+      })
+      .finally(() => {
+        if (!isCancelled) {
+          setIsServerLoading(false)
+        }
+      })
+
+    return () => {
+      isCancelled = true
     }
-  }, [categories])
+  }, [])
 
   const filteredItems = useMemo(() => {
     const nameKeyword = normalizeText(appliedQueryName)
@@ -400,7 +503,6 @@ export default function EdgeBandingLibraryPanel({
     sortedFilteredItems,
   ])
 
-  const [selectedGroupKey, setSelectedGroupKey] = useState<string | null>(null)
   const activeGroup =
     selectedGroupKey === null &&
     (editorMode === 'create' || editorMode === 'createCategory')
@@ -552,8 +654,35 @@ export default function EdgeBandingLibraryPanel({
     setPanelMessage('')
   }
 
-  function saveDraft() {
-    if (!canEditItems) return
+  async function commitEdgeBandingLibrary(
+    nextItems: EdgeBandingLibraryItem[],
+    nextCategories: EdgeBandingLibraryCategory[],
+  ) {
+    setIsServerSaving(true)
+    try {
+      const savedRows = await replaceIntakeReferenceLibraryItems(
+        EDGE_BANDING_REFERENCE_LIBRARY_TYPE,
+        buildEdgeBandingReferenceLibraryRows(nextItems, nextCategories),
+      )
+      const snapshot = decodeEdgeBandingReferenceLibraryRows(savedRows)
+      setItems(snapshot.items)
+      setCategories(snapshot.categories)
+      window.dispatchEvent(new Event(EDGE_BANDING_LIBRARY_CHANGED_EVENT))
+      setServerError('')
+      setServerNotice('')
+      return snapshot
+    } catch (error) {
+      const message = error instanceof Error ? error.message : '封边资料库保存失败'
+      setPanelMessage(message)
+      setServerError(message)
+      return null
+    } finally {
+      setIsServerSaving(false)
+    }
+  }
+
+  async function saveDraft() {
+    if (!canEditItems || isServerSaving) return
 
     if (!draftCanSave) {
       setPanelMessage('请先填完整规格名称、规格、单位、单价和适配板材厚度。')
@@ -569,13 +698,12 @@ export default function EdgeBandingLibraryPanel({
       id: editingItemId ?? undefined,
     })
 
-    setItems((current) => {
-      if (editingItemId) {
-        return current.map((item) => (item.id === editingItemId ? nextItem : item))
-      }
+    const nextItems = editingItemId
+      ? items.map((item) => (item.id === editingItemId ? nextItem : item))
+      : [...items, nextItem]
+    const snapshot = await commitEdgeBandingLibrary(nextItems, categories)
+    if (!snapshot) return
 
-      return [...current, nextItem]
-    })
     setEditorMode('edit')
     setEditingItemId(nextItem.id)
     setSelectedGroupKey(getEdgeBandingGroupKey(nextItem))
@@ -590,8 +718,8 @@ export default function EdgeBandingLibraryPanel({
     setPanelMessage('封边资料已保存。')
   }
 
-  function saveCategoryDraft() {
-    if (!canEditItems) return
+  async function saveCategoryDraft() {
+    if (!canEditItems || isServerSaving) return
 
     const nextCategory = categoryDraft
     if (!nextCategory) {
@@ -610,7 +738,9 @@ export default function EdgeBandingLibraryPanel({
       return
     }
 
-    setCategories((current) => [...current, nextCategory])
+    const snapshot = await commitEdgeBandingLibrary(items, [...categories, nextCategory])
+    if (!snapshot) return
+
     setSelectedGroupKey(nextCategory.key)
     setEditorMode('view')
     setEditingItemId(null)
@@ -619,8 +749,8 @@ export default function EdgeBandingLibraryPanel({
     setPanelMessage('封边分类已保存。')
   }
 
-  function deleteSelectedItem() {
-    if (!canEditItems) return
+  async function deleteSelectedItem() {
+    if (!canEditItems || isServerSaving) return
 
     if (!editingItemId) return
 
@@ -633,7 +763,12 @@ export default function EdgeBandingLibraryPanel({
     if (!confirmed) return
 
     const fallbackItem = normalizedItems.find((item) => item.id !== editingItemId)
-    setItems((current) => current.filter((item) => item.id !== editingItemId))
+    const snapshot = await commitEdgeBandingLibrary(
+      items.filter((item) => item.id !== editingItemId),
+      categories,
+    )
+    if (!snapshot) return
+
     setEditorMode('view')
     setEditingItemId(null)
     setEditorDraft(createEmptyEdgeBandingDraft())
@@ -642,8 +777,8 @@ export default function EdgeBandingLibraryPanel({
     setPanelMessage('封边资料已删除。')
   }
 
-  function deleteActiveGroup() {
-    if (!canEditItems) return
+  async function deleteActiveGroup() {
+    if (!canEditItems || isServerSaving) return
 
     if (!activeGroup) return
 
@@ -654,10 +789,12 @@ export default function EdgeBandingLibraryPanel({
     if (!confirmed) return
 
     const fallbackItem = normalizedItems.find((item) => !targetIds.has(item.id))
-    setCategories((current) =>
-      current.filter((category) => category.key !== activeGroup.key),
+    const snapshot = await commitEdgeBandingLibrary(
+      items.filter((item) => !targetIds.has(item.id)),
+      categories.filter((category) => category.key !== activeGroup.key),
     )
-    setItems((current) => current.filter((item) => !targetIds.has(item.id)))
+    if (!snapshot) return
+
     setEditorMode('view')
     setEditingItemId(null)
     setEditorDraft(createEmptyEdgeBandingDraft())
@@ -710,6 +847,7 @@ export default function EdgeBandingLibraryPanel({
                 size="small"
                 className={`${LIBRARY_PRIMARY_BUTTON_CLASS} h-9 whitespace-nowrap text-xs`}
                 onClick={startCreate}
+                disabled={isServerSaving}
               >
                 <Plus className="h-4 w-4" />
                 新建封边
@@ -726,6 +864,12 @@ export default function EdgeBandingLibraryPanel({
             </Button>
           </div>
         </div>
+        <div className="mt-3 flex flex-wrap items-center gap-3 text-xs text-apple-label-secondary">
+          <span>当前共 {normalizedItems.length} 条封边资料</span>
+          <span className={serverError ? 'text-rose-600' : serverNotice ? 'text-amber-700' : 'text-emerald-700'}>
+            {isServerLoading ? '正在读取服务端资料库' : serverError || serverNotice || '已接入服务端资料库'}
+          </span>
+        </div>
       </div>
 
       <div className="grid min-h-0 flex-1 items-stretch gap-4 xl:grid-cols-[220px_minmax(0,1fr)_360px]">
@@ -749,6 +893,7 @@ export default function EdgeBandingLibraryPanel({
                 size="small"
                 className={`!min-h-8 !px-2 !py-1 text-xs ${LIBRARY_PRIMARY_BUTTON_CLASS}`}
                 onClick={startCreateCategory}
+                disabled={isServerSaving}
               >
                 <Plus className="h-3.5 w-3.5" />
                 新建分类
@@ -759,7 +904,7 @@ export default function EdgeBandingLibraryPanel({
                 size="small"
                 className="!min-h-8 !px-2 !py-1 text-xs"
                 onClick={deleteActiveGroup}
-                disabled={!activeGroup}
+                disabled={!activeGroup || isServerSaving}
               >
                 <Trash2 className="h-3.5 w-3.5" />
                 删除分类
@@ -891,6 +1036,7 @@ export default function EdgeBandingLibraryPanel({
                         variant="plain"
                         className="!min-h-8 !px-2.5 !py-1 text-xs"
                         onClick={deleteSelectedItem}
+                        disabled={isServerSaving}
                       >
                         <Trash2 className="h-4 w-4" />
                         删除
@@ -912,10 +1058,10 @@ export default function EdgeBandingLibraryPanel({
                     size="small"
                     className={`!min-h-8 !px-3 !py-1 text-xs ${LIBRARY_PRIMARY_BUTTON_CLASS}`}
                     onClick={isCreatingCategory ? saveCategoryDraft : saveDraft}
-                    disabled={isCreatingCategory ? !categoryCanSave : !draftCanSave}
+                    disabled={isServerSaving || (isCreatingCategory ? !categoryCanSave : !draftCanSave)}
                   >
                     <Save className="h-4 w-4" />
-                    保存
+                    {isServerSaving ? '保存中' : '保存'}
                   </Button>
                 </div>
               </div>
diff --git a/furniture-3d-system/src/app/intake/IntakeClient.test.tsx b/furniture-3d-system/src/app/intake/IntakeClient.test.tsx
index 6306a2c4..05548348 100644
--- a/furniture-3d-system/src/app/intake/IntakeClient.test.tsx
+++ b/furniture-3d-system/src/app/intake/IntakeClient.test.tsx
@@ -12,14 +12,17 @@ import {
   createDefaultDocumentWorkspaceConfirmations,
   createEmptyNonIntegratedOpeningReference,
   getNonIntegratedDocumentWorkspaceCategoryLabel,
+  listNonIntegratedProducts,
   NON_INTEGRATED_BRAND_PREFIX_MAP,
   NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES,
   NON_INTEGRATED_WORKFLOW_NODE_CATEGORIES,
-  NON_INTEGRATED_STORAGE_KEY,
+  replaceNonIntegratedProducts,
+  clearNonIntegratedProductsRuntimeCache,
 } from './non-integrated/nonIntegratedStorage'
 import {
+  clearProductPatentRecordsRuntimeCache,
+  listProductPatentRecords,
   mergeProductPatentRecordsWithProducts,
-  PRODUCT_PATENT_STORAGE_KEY,
 } from './productPatentStorage'
 
 const push = jest.fn()
@@ -221,6 +224,26 @@ jest.mock('./non-integrated/NonIntegratedDetailClient', () => ({
 jest.mock('@/lib/open-product/platform-view', () => ({
   __esModule: true,
   readPreviewNodes: () => [],
+  readPreSkuTextField: (
+    preSku: {
+      basicInfo?: Record<string, string | null> | null
+      displaySummary?: Record<string, unknown> | null
+      familySelection?: Record<string, unknown> | null
+    },
+    key: string,
+  ) => {
+    const basicInfoKey = key === 'skuCode' ? 'formalSkuCode' : key
+    const basicInfoValue = preSku.basicInfo?.[basicInfoKey]
+    if (typeof basicInfoValue === 'string' && basicInfoValue.trim()) {
+      return basicInfoValue.trim()
+    }
+    const displayValue = preSku.displaySummary?.[key]
+    if (typeof displayValue === 'string' && displayValue.trim()) {
+      return displayValue.trim()
+    }
+    const familyValue = preSku.familySelection?.[key]
+    return typeof familyValue === 'string' ? familyValue.trim() : ''
+  },
 }))
 
 jest.mock('@/components/platform/ModelPreviewPanel', () => ({
@@ -551,6 +574,8 @@ function createApprovedWorkflowStateBefore(targetCategory: string) {
 describe('IntakeClient', () => {
   beforeEach(() => {
     jest.useRealTimers()
+    clearNonIntegratedProductsRuntimeCache()
+    clearProductPatentRecordsRuntimeCache()
     window.localStorage.clear()
     window.sessionStorage.clear()
     jest.restoreAllMocks()
@@ -661,9 +686,7 @@ describe('IntakeClient', () => {
       )
 
       await waitFor(() => {
-        const storedRecords = JSON.parse(
-          window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) || '[]',
-        )
+        const storedRecords = listProductPatentRecords()
 
         expect(storedRecords[0]?.patentStatus).toBe('已有专利')
         expect(storedRecords[0]?.saRequired).toBe('是')
@@ -862,9 +885,7 @@ describe('IntakeClient', () => {
     expect(within(firstRow as HTMLElement).getByText('1')).toBeInTheDocument()
     expect(within(secondRow as HTMLElement).getByText('2')).toBeInTheDocument()
 
-    const storedRecords = JSON.parse(
-      window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) || '[]',
-    )
+    const storedRecords = listProductPatentRecords()
     expect(storedRecords.map((record: { spu?: string }) => record.spu)).toEqual([
       'PATENT-ROW-1',
       'PATENT-ROW-2',
@@ -971,9 +992,7 @@ describe('IntakeClient', () => {
     expect(
       screen.queryByRole('button', { name: '新增专利' }),
     ).not.toBeInTheDocument()
-    expect(
-      JSON.parse(window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) || '[]'),
-    ).toEqual([])
+    expect(listProductPatentRecords()).toEqual([])
   })
 
   it('shows patent application approval in the product development list when the form has data', async () => {
@@ -993,10 +1012,7 @@ describe('IntakeClient', () => {
       }),
     ]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    )
+    replaceNonIntegratedProducts(products)
 
     renderSelector({
       eligibleSkuList: [],
@@ -1050,10 +1066,7 @@ describe('IntakeClient', () => {
       }),
     ]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    )
+    replaceNonIntegratedProducts(products)
 
     renderSelector({
       eligibleSkuList: [],
@@ -1316,10 +1329,7 @@ describe('IntakeClient', () => {
         designer: '徐霞客',
       }),
     ]
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    )
+    replaceNonIntegratedProducts(products)
 
     renderSelector({
       eligibleSkuList: [],
@@ -1370,10 +1380,7 @@ describe('IntakeClient', () => {
         }),
       }),
     ]
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    )
+    replaceNonIntegratedProducts(products)
 
     renderSelector({
       eligibleSkuList: [],
@@ -1617,15 +1624,12 @@ describe('IntakeClient', () => {
   it('opens SKU material process config as a top workspace tab', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0230-material-workspace',
           spu: 'SZ0230',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -1872,9 +1876,7 @@ describe('IntakeClient', () => {
   it('opens the series development list with the same product detail capabilities', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'series-desk-1',
           spu: 'SER001',
@@ -1889,8 +1891,7 @@ describe('IntakeClient', () => {
           spu: 'DNZ0001',
           productDevelopmentKind: 'product',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -1975,9 +1976,7 @@ describe('IntakeClient', () => {
   it('keeps product and series development lists separated', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'series-desk-1',
           spu: 'SER001',
@@ -1988,8 +1987,7 @@ describe('IntakeClient', () => {
           spu: 'DNZ0001',
           productDevelopmentKind: 'product',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2007,15 +2005,12 @@ describe('IntakeClient', () => {
     const actor = userEvent.setup()
     const confirmSpy = jest.spyOn(window, 'confirm').mockReturnValue(true)
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           previewImage: 'data:image/png;base64,test-image',
           previewImageName: 'preview.png',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2043,10 +2038,7 @@ describe('IntakeClient', () => {
   })
 
   it('hides delete action from non-admin users', () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([createNonIntegratedProduct()]),
-    )
+    replaceNonIntegratedProducts([createNonIntegratedProduct()])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2069,9 +2061,7 @@ describe('IntakeClient', () => {
   })
 
   it('lets supervisors open products for full editing without delete action', () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           productPlanning: 'Planning A',
           openingReference: {
@@ -2079,8 +2069,7 @@ describe('IntakeClient', () => {
             planningOwner: 'Planning A',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2104,10 +2093,7 @@ describe('IntakeClient', () => {
   it('hides unrelated products from non-matching designers in the responsible scope', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([createNonIntegratedProduct()]),
-    )
+    replaceNonIntegratedProducts([createNonIntegratedProduct()])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2123,9 +2109,7 @@ describe('IntakeClient', () => {
   })
 
   it('lets matching structure designers open products for editing', () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           designer: 'Appearance A',
           openingReference: {
@@ -2134,8 +2118,7 @@ describe('IntakeClient', () => {
             structureDesigner: 'Structure A',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2152,9 +2135,7 @@ describe('IntakeClient', () => {
   })
 
   it('lets product creators open products for editing before designer fields are filled', () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           createdBy: 'creator-user-id',
           designer: '',
@@ -2164,8 +2145,7 @@ describe('IntakeClient', () => {
             structureDesigner: '',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2184,9 +2164,7 @@ describe('IntakeClient', () => {
   it('filters responsible products by the current DingTalk account name', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'caishen-created',
           spu: 'CS0001',
@@ -2207,8 +2185,7 @@ describe('IntakeClient', () => {
             designer: '徐霞客',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2226,9 +2203,7 @@ describe('IntakeClient', () => {
   it('filters responsible products by purchase owner for purchasing users', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'purchase-owner-a',
           spu: 'BUY0001',
@@ -2241,8 +2216,7 @@ describe('IntakeClient', () => {
           purchaser: 'Purchasing B',
           purchaseOwner: 'Purchasing B',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2261,9 +2235,7 @@ describe('IntakeClient', () => {
   it('filters responsible products by space designer for space visual users', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'space-owner-a',
           spu: 'SPACE0001',
@@ -2278,8 +2250,7 @@ describe('IntakeClient', () => {
           visualDirector: 'Space B',
           designer: 'Space A',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2298,9 +2269,7 @@ describe('IntakeClient', () => {
   it('lets space visual department users open stock products for planning layout editing', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'stock-space-node-default',
           spu: 'STOCKSPACE001',
@@ -2313,8 +2282,7 @@ describe('IntakeClient', () => {
             currentStage: '存量商品',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2341,9 +2309,7 @@ describe('IntakeClient', () => {
   it('filters responsible products by operation owner for operation users', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'operation-owner-a',
           spu: 'OPS0001',
@@ -2359,8 +2325,7 @@ describe('IntakeClient', () => {
           operationsOwner: 'Operation B',
           operator: 'Operation B',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2379,9 +2344,7 @@ describe('IntakeClient', () => {
   it('shows pending products only when the current node belongs to the user', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           ...createApprovedWorkflowStateBefore('产品定厂'),
           id: 'purchase-factory-pending',
@@ -2400,8 +2363,7 @@ describe('IntakeClient', () => {
             designer: 'Designer A',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2420,9 +2382,7 @@ describe('IntakeClient', () => {
   it('lets planning users open products for opening-reference editing only', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           productPlanning: 'Planning A',
           openingReference: {
@@ -2430,8 +2390,7 @@ describe('IntakeClient', () => {
             planningOwner: 'Planning A',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2465,15 +2424,12 @@ describe('IntakeClient', () => {
   it('lets purchasing users open products for limited editing without product management actions', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           purchaser: 'Purchasing A',
           purchaseOwner: 'Purchasing A',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({
       eligibleSkuList: [],
@@ -2507,14 +2463,11 @@ describe('IntakeClient', () => {
   it('keeps abandoned products view-only from the list actions', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           projectStatus: 'rejected',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2550,9 +2503,7 @@ describe('IntakeClient', () => {
     const openingReferenceCategory = NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES[0]
     const projectReviewCategory = NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES[2]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           projectStatus: 'rejected',
           documentWorkspaceConfirmations:
@@ -2562,8 +2513,7 @@ describe('IntakeClient', () => {
             [projectReviewCategory]: '2026-04-28T06:33:00.000Z',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2583,9 +2533,7 @@ describe('IntakeClient', () => {
       within(restoredRow as HTMLElement).queryByRole('button', { name: '恢复' }),
     ).not.toBeInTheDocument()
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? '[]',
-    )
+    const savedProducts = listNonIntegratedProducts()
     expect(savedProducts[0].projectStatus).toBe('draft')
     expect(savedProducts[0].openingReference.currentStage).toBe('立项前')
     expect(savedProducts[0].documentWorkspaceApprovedAt).toEqual({})
@@ -2607,10 +2555,7 @@ describe('IntakeClient', () => {
   it('opens non-integrated products and BOM libraries as workspace tabs', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([createNonIntegratedProduct()]),
-    )
+    replaceNonIntegratedProducts([createNonIntegratedProduct()])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2717,10 +2662,7 @@ describe('IntakeClient', () => {
   it('keeps each product workspace on the last selected right-side node when switching top tabs', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([createNonIntegratedProduct()]),
-    )
+    replaceNonIntegratedProducts([createNonIntegratedProduct()])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2742,10 +2684,7 @@ describe('IntakeClient', () => {
     const actor = userEvent.setup()
     const product = createNonIntegratedProduct()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([product]),
-    )
+    replaceNonIntegratedProducts([product])
 
     const firstRender = renderSelector({
       eligibleSkuList: [],
@@ -2846,10 +2785,7 @@ describe('IntakeClient', () => {
   it('opens a separate workspace tab each time product edit is clicked', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([createNonIntegratedProduct()]),
-    )
+    replaceNonIntegratedProducts([createNonIntegratedProduct()])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2867,9 +2803,7 @@ describe('IntakeClient', () => {
     const [sourceBrand, targetBrand] = Object.keys(NON_INTEGRATED_BRAND_PREFIX_MAP)
     const expectedSpu = `${NON_INTEGRATED_BRAND_PREFIX_MAP[targetBrand]}SZ0230`
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0230-1',
           spu: 'SZ0230',
@@ -2878,8 +2812,7 @@ describe('IntakeClient', () => {
           createdAt: '2026-04-17T10:00:00.000Z',
           updatedAt: '2026-04-17T10:00:00.000Z',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -2945,9 +2878,7 @@ describe('IntakeClient', () => {
     const readyCategory = NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES[0]
     const pendingCategory = NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES[1]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0230-checked',
           spu: 'SZ0230',
@@ -2990,8 +2921,7 @@ describe('IntakeClient', () => {
           createdAt: '2026-04-17T10:05:00.000Z',
           updatedAt: '2026-04-17T10:05:00.000Z',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3035,9 +2965,7 @@ describe('IntakeClient', () => {
   it('hides project review from document status columns while keeping opening reference status', () => {
     const openingReferenceCategory = NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES[0]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0232-form-data',
           spu: 'SZ0232',
@@ -3073,8 +3001,7 @@ describe('IntakeClient', () => {
             [openingReferenceCategory]: '2026-04-28T06:30:00.000Z',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3113,9 +3040,7 @@ describe('IntakeClient', () => {
       issues: [],
     }
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0233-auto-review',
           spu: 'SZ0233',
@@ -3165,8 +3090,7 @@ describe('IntakeClient', () => {
             评审资料: '2026-05-09T08:00:00.000Z',
           },
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3266,10 +3190,7 @@ describe('IntakeClient', () => {
       },
     })
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([product]),
-    )
+    replaceNonIntegratedProducts([product])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3294,9 +3215,7 @@ describe('IntakeClient', () => {
     const [sourceBrand, targetBrand] = Object.keys(NON_INTEGRATED_BRAND_PREFIX_MAP)
     const expectedSpu = `${NON_INTEGRATED_BRAND_PREFIX_MAP[targetBrand]}SZ0230`
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0230-1',
           spu: 'SZ0230',
@@ -3307,8 +3226,7 @@ describe('IntakeClient', () => {
           createdAt: '2026-04-17T10:00:00.000Z',
           updatedAt: '2026-04-17T10:00:00.000Z',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3327,9 +3245,7 @@ describe('IntakeClient', () => {
     })
     expect(push).not.toHaveBeenCalled()
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? '[]',
-    )
+    const savedProducts = listNonIntegratedProducts()
     const copiedProduct = savedProducts.find(
       (item: { brand?: string }) => item.brand === targetBrand,
     )
@@ -3349,9 +3265,7 @@ describe('IntakeClient', () => {
       NON_INTEGRATED_BRAND_PREFIX_MAP,
     )
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'SZ0230-source',
           spu: 'SZ0230',
@@ -3366,8 +3280,7 @@ describe('IntakeClient', () => {
           copiedFromProductId: 'SZ0230-source',
           copiedFromSpu: 'SZ0230',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3384,9 +3297,7 @@ describe('IntakeClient', () => {
   it('shows owner fields and filters non-integrated products by query button', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           id: 'DNZ0002-1',
           spu: 'GBGJ-DNZ0002',
@@ -3413,8 +3324,7 @@ describe('IntakeClient', () => {
           createdAt: '2026-04-15T02:00:00.000Z',
           updatedAt: '2026-04-15T02:00:00.000Z',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3609,15 +3519,12 @@ describe('IntakeClient', () => {
   it('opens a larger preview when clicking the non-integrated product thumbnail', async () => {
     const actor = userEvent.setup()
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createNonIntegratedProduct({
           previewImage: 'data:image/png;base64,test-image',
           previewImageName: 'preview.png',
         }),
-      ]),
-    )
+      ])
 
     renderSelector({ eligibleSkuList: [] })
 
@@ -3640,10 +3547,7 @@ describe('IntakeClient', () => {
       }),
     ]
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    )
+    replaceNonIntegratedProducts(products)
 
     renderSelector({
       eligibleSkuList: [],
diff --git a/furniture-3d-system/src/app/intake/IntakeClient.tsx b/furniture-3d-system/src/app/intake/IntakeClient.tsx
index 31e6e5d1..3e0927f2 100644
--- a/furniture-3d-system/src/app/intake/IntakeClient.tsx
+++ b/furniture-3d-system/src/app/intake/IntakeClient.tsx
@@ -54,6 +54,7 @@ import Button from "@/components/ui/Button";
 import { PlatformSplitLayout } from "@/components/platform/PlatformSplitLayout";
 import { AccordionSection } from "@/components/platform/AccordionSection";
 import { QUALITY_INSPECTION_EDITABLE_FIELD_KEYS } from "@/lib/non-integrated-quality-inspection-schema";
+import { readPreSkuTextField } from "@/lib/open-product/platform-view";
 import {
   createDefaultDocumentWorkspaceConfirmations,
   createCopiedNonIntegratedProduct,
@@ -119,9 +120,11 @@ import {
 import {
   getNextProductPatentFeeDueDate,
   listProductPatentRecords,
+  listProductPatentRecordsFromDatabase,
   mergeProductPatentRecordsWithProducts,
   PRODUCT_PATENT_FEE_YEARS,
   saveProductPatentRecords,
+  saveProductPatentRecordsToDatabase,
   type ProductPatentContinueDecision,
   type ProductPatentFeeStatus,
   type ProductPatentRecord,
@@ -2240,23 +2243,6 @@ function isEditorMode(
   return "detail" in props && props.detail !== undefined;
 }
 
-function readPreSkuTextField(
-  preSku: DraftGroupDetailDTO["preSkus"][number],
-  key: string,
-) {
-  const displayValue = preSku.displaySummary?.[key];
-  if (typeof displayValue === "string" && displayValue.trim().length > 0) {
-    return displayValue.trim();
-  }
-
-  const familyValue = preSku.familySelection?.[key];
-  if (typeof familyValue === "string" && familyValue.trim().length > 0) {
-    return familyValue.trim();
-  }
-
-  return "";
-}
-
 function isPlainRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -2526,34 +2512,32 @@ function getDraftGroupSeriesNameOptions(props: IntakeClientProps) {
 
 function getDraftGroupSeriesSkuOptions(props: IntakeClientProps): WorkbenchSku[] {
   if (isEditorMode(props)) {
-    return props.detail.preSkus.map((preSku, index) => ({
-      id: preSku.id,
-      draftGroupId: props.detail.draftGroup.id,
-      spuCode:
-        readPreSkuTextField(preSku, "spuCode") ||
-        readPreSkuTextField(preSku, "spu") ||
-        props.detail.draftGroup.code ||
-        `SPU-${String(index + 1).padStart(3, "0")}`,
-      code:
-        readPreSkuTextField(preSku, "draftSkuCode") ||
-        readPreSkuTextField(preSku, "skuSequenceCode") ||
-        readPreSkuTextField(preSku, "skuCode") ||
-        preSku.customName ||
-        preSku.defaultName,
-      name: preSku.customName || preSku.defaultName,
-      seriesName:
-        readPreSkuTextField(preSku, "seriesName") ||
-        readDraftGroupSeriesName(props.detail.draftGroup),
-      draftGroupName: props.detail.draftGroup.name,
-      status: mapStatus(preSku.status),
-      componentCodes: preSku.componentCodes ?? [],
-      componentDetails: readPreSkuComponentDetails(preSku),
-      holePoints: buildSkuHolePointsFromVariantSelection(preSku),
-      skuFields: readPreSkuSkuFields(preSku),
-      model3dPreviewNodes: preSku.previewNodes.length
-        ? preSku.previewNodes
-        : preSku.assemblyWorkspace?.nodes ?? [],
-    }));
+    return props.detail.preSkus.map((preSku, index) => {
+      const skuFields = readPreSkuSkuFields(preSku);
+      return {
+        id: preSku.id,
+        draftGroupId: props.detail.draftGroup.id,
+        spuCode:
+          readPreSkuTextField(preSku, "spuCode") ||
+          readPreSkuTextField(preSku, "spu") ||
+          props.detail.draftGroup.code ||
+          `SPU-${String(index + 1).padStart(3, "0")}`,
+        code: skuFields.skuCode || preSku.customName || preSku.defaultName,
+        name: preSku.customName || preSku.defaultName,
+        seriesName:
+          readPreSkuTextField(preSku, "seriesName") ||
+          readDraftGroupSeriesName(props.detail.draftGroup),
+        draftGroupName: props.detail.draftGroup.name,
+        status: mapStatus(preSku.status),
+        componentCodes: preSku.componentCodes ?? [],
+        componentDetails: readPreSkuComponentDetails(preSku),
+        holePoints: buildSkuHolePointsFromVariantSelection(preSku),
+        skuFields,
+        model3dPreviewNodes: preSku.previewNodes.length
+          ? preSku.previewNodes
+          : preSku.assemblyWorkspace?.nodes ?? [],
+      };
+    });
   }
 
   return props.eligibleSkuList ?? [];
@@ -7445,11 +7429,19 @@ function ProductPatentStatusDashboard({
   const [appliedQuery, setAppliedQuery] = useState(queryDraft);
 
   useEffect(() => {
-    setRecords((current) => {
-      const next = mergeProductPatentRecordsWithProducts(current, products);
-      saveProductPatentRecords(next);
-      return next;
-    });
+    let cancelled = false;
+    void (async () => {
+      const storedRecords = await listProductPatentRecordsFromDatabase().catch(
+        () => listProductPatentRecords(),
+      );
+      const next = mergeProductPatentRecordsWithProducts(storedRecords, products);
+      if (cancelled) return;
+      setRecords(next);
+      void saveProductPatentRecordsToDatabase(next).catch(() => undefined);
+    })();
+    return () => {
+      cancelled = true;
+    };
   }, [products]);
 
   const queryMatchedRecords = useMemo(() => {
@@ -7615,13 +7607,26 @@ function ProductPatentStatusDashboard({
   };
 
   function refreshRecords() {
-    const nextRecords = mergeProductPatentRecordsWithProducts(
-      listProductPatentRecords(),
-      products,
-    );
-    saveProductPatentRecords(nextRecords);
-    setRecords(nextRecords);
-    setAppliedQuery(queryDraft);
+    void (async () => {
+      const storedRecords = await listProductPatentRecordsFromDatabase().catch(
+        () => listProductPatentRecords(),
+      );
+      const nextRecords = mergeProductPatentRecordsWithProducts(
+        storedRecords,
+        products,
+      );
+      await saveProductPatentRecordsToDatabase(nextRecords);
+      setRecords(nextRecords);
+      setAppliedQuery(queryDraft);
+    })().catch(() => {
+      const nextRecords = mergeProductPatentRecordsWithProducts(
+        listProductPatentRecords(),
+        products,
+      );
+      saveProductPatentRecords(nextRecords);
+      setRecords(nextRecords);
+      setAppliedQuery(queryDraft);
+    });
   }
 
   const statusFilterControls = (
@@ -8336,11 +8341,19 @@ export function ProductPatentDashboard({
   }, [products, user.name, user.role]);
 
   useEffect(() => {
-    setRecords((current) => {
-      const next = mergeProductPatentRecordsWithProducts(current, products);
-      saveProductPatentRecords(next);
-      return next;
-    });
+    let cancelled = false;
+    void (async () => {
+      const storedRecords = await listProductPatentRecordsFromDatabase().catch(
+        () => listProductPatentRecords(),
+      );
+      const next = mergeProductPatentRecordsWithProducts(storedRecords, products);
+      if (cancelled) return;
+      setRecords(next);
+      void saveProductPatentRecordsToDatabase(next).catch(() => undefined);
+    })();
+    return () => {
+      cancelled = true;
+    };
   }, [products]);
 
   useEffect(() => {
@@ -8513,7 +8526,11 @@ export function ProductPatentDashboard({
   }, [selectedRecordId, visiblePatentRecords]);
 
   function persistNextRecords(nextRecords: ProductPatentRecord[]) {
-    saveProductPatentRecords(nextRecords);
+    void saveProductPatentRecordsToDatabase(nextRecords).catch(() => {
+      saveProductPatentRecords(nextRecords);
+      setSaveMessage("本地已缓存，数据库保存失败");
+      window.setTimeout(() => setSaveMessage(""), 2400);
+    });
     setSaveMessage("已保存");
     window.setTimeout(() => setSaveMessage(""), 1600);
   }
diff --git a/furniture-3d-system/src/app/intake/PackagingMaterialLibraryPanel.tsx b/furniture-3d-system/src/app/intake/PackagingMaterialLibraryPanel.tsx
index 5c69e7e0..e6e4fe20 100644
--- a/furniture-3d-system/src/app/intake/PackagingMaterialLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/PackagingMaterialLibraryPanel.tsx
@@ -1,10 +1,7 @@
 'use client'
 
 import AlphabetLibraryPanel from '@/app/intake/AlphabetLibraryPanel'
-import {
-  PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT,
-  PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY,
-} from '@/lib/packaging-material-library'
+import { PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT } from '@/lib/packaging-material-library'
 
 export default function PackagingMaterialLibraryPanel({
   canEditItems = true,
@@ -13,11 +10,11 @@ export default function PackagingMaterialLibraryPanel({
 }) {
   return (
     <AlphabetLibraryPanel
-      storageKey={PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY}
       changedEventName={PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT}
       entityName="包材"
       canEditItems={canEditItems}
       queryNamePlaceholder="例如：泡沫 / 纸箱 / 护角"
+      serverLibraryType="PACKAGING_MATERIAL"
     />
   )
 }
diff --git a/furniture-3d-system/src/app/intake/RawMaterialLibraryPanel.tsx b/furniture-3d-system/src/app/intake/RawMaterialLibraryPanel.tsx
index 2287f6c9..4b1c7059 100644
--- a/furniture-3d-system/src/app/intake/RawMaterialLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/RawMaterialLibraryPanel.tsx
@@ -99,9 +99,9 @@ const SAMPLE_PACKAGE_TEMPLATE_COLUMNS = [
   '判断依据',
 ]
 
-const EDGE_BANDING_UNIT_PRICE = 0.2
-const BOARD_PRICE_AREA_SQUARE_METER = 2.97
-const DEFAULT_PACKAGING_PRICES = {
+const REFERENCE_ESTIMATOR_EDGE_BANDING_UNIT_PRICE = 0.2
+const REFERENCE_ESTIMATOR_BOARD_PRICE_AREA_SQUARE_METER = 2.97
+const REFERENCE_ESTIMATOR_PACKAGING_PRICES = {
   cartonPerSquareMeter: 3.8,
   peBag: 0.8,
   foamCorner: 0.12,
@@ -501,10 +501,10 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: cartonSurfaceAreaSquareMeter,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.cartonPerSquareMeter,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.cartonPerSquareMeter,
         amount:
           cartonSurfaceAreaSquareMeter *
-          DEFAULT_PACKAGING_PRICES.cartonPerSquareMeter,
+          REFERENCE_ESTIMATOR_PACKAGING_PRICES.cartonPerSquareMeter,
         remark: `按拆装板件叠放预估；箱高约${formatNumber(cartonHeightMm, 0)}mm`,
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -525,8 +525,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.peBag,
-        amount: DEFAULT_PACKAGING_PRICES.peBag,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.peBag,
+        amount: REFERENCE_ESTIMATOR_PACKAGING_PRICES.peBag,
         remark: '按拆装外箱尺寸预估',
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -547,8 +547,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.foamCorner,
-        amount: 8 * DEFAULT_PACKAGING_PRICES.foamCorner,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.foamCorner,
+        amount: 8 * REFERENCE_ESTIMATOR_PACKAGING_PRICES.foamCorner,
         remark: '柜体八角预估',
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -569,8 +569,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: foamEdgeMeters,
-        unitPrice: DEFAULT_PACKAGING_PRICES.foamEdgePerMeter,
-        amount: foamEdgeMeters * DEFAULT_PACKAGING_PRICES.foamEdgePerMeter,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.foamEdgePerMeter,
+        amount: foamEdgeMeters * REFERENCE_ESTIMATOR_PACKAGING_PRICES.foamEdgePerMeter,
         remark: '按拆装外箱十二边预估',
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -591,8 +591,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.sealingTape,
-        amount: DEFAULT_PACKAGING_PRICES.sealingTape,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.sealingTape,
+        amount: REFERENCE_ESTIMATOR_PACKAGING_PRICES.sealingTape,
         remark: '按单件包装预估',
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -613,8 +613,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.cartonLabel,
-        amount: DEFAULT_PACKAGING_PRICES.cartonLabel,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.cartonLabel,
+        amount: REFERENCE_ESTIMATOR_PACKAGING_PRICES.cartonLabel,
         remark: '按单箱一张预估',
       },
       ESTIMATE_VARIANCE_RATES.packaging,
@@ -635,8 +635,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.instructionSheet,
-        amount: DEFAULT_PACKAGING_PRICES.instructionSheet,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.instructionSheet,
+        amount: REFERENCE_ESTIMATOR_PACKAGING_PRICES.instructionSheet,
         remark: '按单件一份预估',
       },
       ESTIMATE_VARIANCE_RATES.accessory,
@@ -657,8 +657,8 @@ function buildPackagingAndAccessoryRows(
         coefficient: 1,
         areaSquareMeter: null,
         edgeMeters: null,
-        unitPrice: DEFAULT_PACKAGING_PRICES.certificate,
-        amount: DEFAULT_PACKAGING_PRICES.certificate,
+        unitPrice: REFERENCE_ESTIMATOR_PACKAGING_PRICES.certificate,
+        amount: REFERENCE_ESTIMATOR_PACKAGING_PRICES.certificate,
         remark: '按单件一张预估',
       },
       ESTIMATE_VARIANCE_RATES.accessory,
@@ -951,7 +951,7 @@ export function ReferenceImageCostEstimator({
   const pricePerSquareMeter =
     boardSheetPrice === null
       ? null
-      : boardSheetPrice / BOARD_PRICE_AREA_SQUARE_METER
+      : boardSheetPrice / REFERENCE_ESTIMATOR_BOARD_PRICE_AREA_SQUARE_METER
   const manualMaterialName = parseManualBoardMaterialName(boardThicknessText)
   const mainMaterialName =
     manualMaterialName ||
@@ -966,7 +966,7 @@ export function ReferenceImageCostEstimator({
   const plywoodPricePerSquareMeter =
     plywoodSheetPrice === null
       ? null
-      : plywoodSheetPrice / BOARD_PRICE_AREA_SQUARE_METER
+      : plywoodSheetPrice / REFERENCE_ESTIMATOR_BOARD_PRICE_AREA_SQUARE_METER
   const boardThicknessMm =
     parseBoardThicknessInput(boardThicknessText) ??
     selectedMaterial?.thicknessMm ??
@@ -1045,11 +1045,11 @@ export function ReferenceImageCostEstimator({
               coefficient: templateCoefficient,
               areaSquareMeter: null,
               edgeMeters: sumTemplateEdgeMeters(boardTemplateRows),
-              unitPrice: EDGE_BANDING_UNIT_PRICE,
+              unitPrice: REFERENCE_ESTIMATOR_EDGE_BANDING_UNIT_PRICE,
               amount:
                 sumTemplateEdgeMeters(boardTemplateRows) *
                 templateCoefficient *
-                EDGE_BANDING_UNIT_PRICE,
+                REFERENCE_ESTIMATOR_EDGE_BANDING_UNIT_PRICE,
               remark: '按模板五金/封边口径预估',
             },
             ESTIMATE_VARIANCE_RATES.edgeBanding,
diff --git a/furniture-3d-system/src/app/intake/SpuRuleLibraryWorkspace.tsx b/furniture-3d-system/src/app/intake/SpuRuleLibraryWorkspace.tsx
index cc867043..148c139a 100644
--- a/furniture-3d-system/src/app/intake/SpuRuleLibraryWorkspace.tsx
+++ b/furniture-3d-system/src/app/intake/SpuRuleLibraryWorkspace.tsx
@@ -11,7 +11,10 @@ import {
   Upload,
   X,
 } from "lucide-react";
-import { SPU_RULE_LIBRARY_STORAGE_KEY } from "./spuRuleLibraryLogic";
+import {
+  listSpuRuleLibraryRulesFromServer,
+  replaceSpuRuleLibraryRulesOnServer,
+} from "./spuRuleLibraryLogic";
 import { SPU_RULE_LIBRARY_SEED_RULES } from "./spuRuleLibrarySeed";
 
 type SpuRule = {
@@ -56,8 +59,6 @@ type ImportSummary = {
   missingIndexCount: number;
 };
 
-const STORAGE_KEY = SPU_RULE_LIBRARY_STORAGE_KEY;
-
 const emptyDraft: EditableSpuRule = {
   topCategory: "",
   topCategoryCode: "",
@@ -159,29 +160,12 @@ function getSeedRules() {
   ).filter((rule): rule is SpuRule => Boolean(rule));
 }
 
-function loadRules() {
-  if (typeof window === "undefined") return getSeedRules();
-  try {
-    const stored = window.localStorage.getItem(STORAGE_KEY);
-    if (!stored) return getSeedRules();
-    const parsed = JSON.parse(stored);
-    if (!Array.isArray(parsed)) return getSeedRules();
-    const rules = parsed
-      .map((rule, index) => normalizeRuleRecord(rule, index))
-      .filter((rule): rule is SpuRule => Boolean(rule));
-    return rules.length > 0 ? rules : getSeedRules();
-  } catch {
-    return getSeedRules();
-  }
-}
+function normalizeWorkspaceRules(rules: unknown[]) {
+  const normalizedRules = rules
+    .map((rule, index) => normalizeRuleRecord(rule, index))
+    .filter((rule): rule is SpuRule => Boolean(rule));
 
-function saveRules(rules: SpuRule[]) {
-  if (typeof window === "undefined") return;
-  try {
-    window.localStorage.setItem(STORAGE_KEY, JSON.stringify(rules));
-  } catch {
-    // 本地维护缓存不可用时，当前页面仍可继续操作。
-  }
+  return normalizedRules.length > 0 ? normalizedRules : getSeedRules();
 }
 
 function createRuleFromImportedRow(
@@ -378,18 +362,69 @@ function RuleEditor({
 }
 
 export function SpuRuleLibraryWorkspace() {
-  const [rules, setRules] = useState<SpuRule[]>(() => loadRules());
+  const [rules, setRules] = useState<SpuRule[]>(() => getSeedRules());
   const [topCategoryQuery, setTopCategoryQuery] = useState("");
   const [secondCategoryQuery, setSecondCategoryQuery] = useState("");
   const [productCategoryQuery, setProductCategoryQuery] = useState("");
   const [summary, setSummary] = useState<ImportSummary | null>(null);
   const [editingId, setEditingId] = useState<string | null>(null);
   const [draft, setDraft] = useState<EditableSpuRule | null>(null);
+  const [isServerLoading, setIsServerLoading] = useState(true);
+  const [isServerSaving, setIsServerSaving] = useState(false);
+  const [serverError, setServerError] = useState("");
+  const [serverNotice, setServerNotice] = useState("");
   const fileInputRef = useRef<HTMLInputElement | null>(null);
 
   useEffect(() => {
-    saveRules(rules);
-  }, [rules]);
+    let isCancelled = false;
+    setIsServerLoading(true);
+    setServerError("");
+    setServerNotice("");
+
+    listSpuRuleLibraryRulesFromServer()
+      .then((snapshot) => {
+        if (isCancelled) return;
+        if (snapshot.hasServerRows) {
+          setRules(normalizeWorkspaceRules(snapshot.rules));
+          setServerNotice("");
+        } else {
+          setRules(getSeedRules());
+          setServerNotice("服务端暂无 SPU 规则，当前显示内置种子规则，保存后写入服务端");
+        }
+      })
+      .catch((error) => {
+        if (isCancelled) return;
+        setServerError(error instanceof Error ? error.message : "SPU 规则库读取失败");
+      })
+      .finally(() => {
+        if (!isCancelled) {
+          setIsServerLoading(false);
+        }
+      });
+
+    return () => {
+      isCancelled = true;
+    };
+  }, []);
+
+  async function commitRules(nextRules: SpuRule[]) {
+    setIsServerSaving(true);
+    setServerError("");
+    setServerNotice("");
+
+    try {
+      const snapshot = await replaceSpuRuleLibraryRulesOnServer(nextRules);
+      const savedRules = normalizeWorkspaceRules(snapshot.rules);
+      setRules(savedRules);
+      return savedRules;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "SPU 规则库保存失败";
+      setServerError(message);
+      return null;
+    } finally {
+      setIsServerSaving(false);
+    }
+  }
 
   const filteredRules = useMemo(() => {
     const topQuery = topCategoryQuery.trim().toLowerCase();
@@ -408,6 +443,8 @@ export function SpuRuleLibraryWorkspace() {
   }, [productCategoryQuery, rules, secondCategoryQuery, topCategoryQuery]);
 
   async function handleImport(event: ChangeEvent<HTMLInputElement>) {
+    if (isServerSaving) return;
+
     const file = event.target.files?.[0];
     event.target.value = "";
     if (!file) return;
@@ -426,15 +463,17 @@ export function SpuRuleLibraryWorkspace() {
       .filter((rule): rule is SpuRule => Boolean(rule));
     const dedupedRules = dedupeRules(rawRules);
 
-    setRules(dedupedRules);
+    const savedRules = await commitRules(dedupedRules);
+    if (!savedRules) return;
+
     setSummary({
       fileName: file.name,
       rawCount: rawRules.length,
-      uniqueCount: dedupedRules.length,
+      uniqueCount: savedRules.length,
       duplicateRows: rawRules.length - dedupedRules.length,
-      conflictCount: dedupedRules.filter((rule) => rule.conflict).length,
-      missingPrefixCount: dedupedRules.filter((rule) => !isSpuPrefix(rule.categoryCode)).length,
-      missingIndexCount: dedupedRules.filter((rule) => rule.spuIndex <= 0).length,
+      conflictCount: savedRules.filter((rule) => rule.conflict).length,
+      missingPrefixCount: savedRules.filter((rule) => !isSpuPrefix(rule.categoryCode)).length,
+      missingIndexCount: savedRules.filter((rule) => rule.spuIndex <= 0).length,
     });
   }
 
@@ -470,6 +509,8 @@ export function SpuRuleLibraryWorkspace() {
   }
 
   function openEditor(rule: SpuRule) {
+    if (isServerSaving) return;
+
     setEditingId(rule.id);
     setDraft({
       topCategory: rule.topCategory,
@@ -485,7 +526,7 @@ export function SpuRuleLibraryWorkspace() {
     });
   }
 
-  function saveDraft() {
+  async function saveDraft() {
     if (!draft) return;
     const nextRule: SpuRule = {
       id: editingId ?? `manual-${Date.now()}`,
@@ -507,13 +548,14 @@ export function SpuRuleLibraryWorkspace() {
 
     if (!nextRule.productCategory) return;
 
-    setRules((current) =>
-      dedupeRules(
-        editingId
-          ? current.map((rule) => (rule.id === editingId ? nextRule : rule))
-          : [...current, nextRule],
-      ),
+    const nextRules = dedupeRules(
+      editingId
+        ? rules.map((rule) => (rule.id === editingId ? nextRule : rule))
+        : [...rules, nextRule],
     );
+    const savedRules = await commitRules(nextRules);
+    if (!savedRules) return;
+
     setEditingId(null);
     setDraft(null);
   }
@@ -539,6 +581,7 @@ export function SpuRuleLibraryWorkspace() {
           <button
             type="button"
             onClick={() => fileInputRef.current?.click()}
+            disabled={isServerSaving}
             className="inline-flex h-9 items-center gap-1.5 rounded-apple-md border border-apple-separator bg-white px-3 text-xs font-apple-semibold text-apple-label-primary hover:bg-apple-bg-secondary"
           >
             <Upload className="h-3.5 w-3.5" aria-hidden="true" />
@@ -547,6 +590,7 @@ export function SpuRuleLibraryWorkspace() {
           <button
             type="button"
             onClick={handleExport}
+            disabled={isServerSaving}
             className="inline-flex h-9 items-center gap-1.5 rounded-apple-md border border-apple-separator bg-white px-3 text-xs font-apple-semibold text-apple-label-primary hover:bg-apple-bg-secondary"
           >
             <Download className="h-3.5 w-3.5" aria-hidden="true" />
@@ -555,9 +599,11 @@ export function SpuRuleLibraryWorkspace() {
           <button
             type="button"
             onClick={() => {
+              if (isServerSaving) return;
               setEditingId(null);
               setDraft(emptyDraft);
             }}
+            disabled={isServerSaving}
             className="inline-flex h-9 items-center gap-1.5 rounded-apple-md bg-zinc-950 px-3 text-xs font-apple-semibold text-white"
           >
             <Plus className="h-3.5 w-3.5" aria-hidden="true" />
@@ -566,6 +612,23 @@ export function SpuRuleLibraryWorkspace() {
         </div>
       </div>
 
+      <div className="mt-3 flex flex-wrap items-center gap-3 text-xs text-apple-label-secondary">
+        <span>当前共 {rules.length} 条 SPU 规则</span>
+        <span
+          className={
+            serverError
+              ? "text-rose-600"
+              : serverNotice
+                ? "text-amber-700"
+                : "text-emerald-700"
+          }
+        >
+          {isServerLoading
+            ? "正在读取服务端规则库"
+            : serverError || serverNotice || "已接入服务端规则库"}
+        </span>
+      </div>
+
       {summary ? (
         <div className="mt-3 flex flex-wrap items-center gap-2 rounded-apple-lg border border-amber-200 bg-amber-50 px-3 py-2 text-xs text-amber-800">
           <FileSpreadsheet className="h-3.5 w-3.5" aria-hidden="true" />
@@ -678,6 +741,7 @@ export function SpuRuleLibraryWorkspace() {
                     <button
                       type="button"
                       onClick={() => openEditor(rule)}
+                      disabled={isServerSaving}
                       className="inline-flex h-8 items-center gap-1.5 rounded-apple-md bg-zinc-950 px-3 text-xs font-apple-semibold text-white"
                     >
                       <Pencil className="h-3.5 w-3.5" aria-hidden="true" />
diff --git a/furniture-3d-system/src/app/intake/SteelFrameLibraryPanel.tsx b/furniture-3d-system/src/app/intake/SteelFrameLibraryPanel.tsx
index 18561d57..f2af4972 100644
--- a/furniture-3d-system/src/app/intake/SteelFrameLibraryPanel.tsx
+++ b/furniture-3d-system/src/app/intake/SteelFrameLibraryPanel.tsx
@@ -4,15 +4,26 @@ import { useEffect, useMemo, useState, type InputHTMLAttributes } from 'react'
 import { ChevronDown, Copy, Plus, Save, Search, Trash2 } from 'lucide-react'
 import Button from '@/components/ui/Button'
 import {
+  STEEL_FRAME_LIBRARY_CHANGED_EVENT,
+  STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+  STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+  STEEL_FRAME_REFERENCE_LIBRARY_TYPE,
+  STEEL_FRAME_REFERENCE_PRICE_KEY,
   buildSteelFrameLibraryItems,
   buildSteelFrameMatchLabel,
+  buildSteelFrameReferenceItemKey,
   buildSteelFrameSpecTitle,
   createEmptySteelFrameDraft,
   createSteelFrameLibraryItem,
+  decodeSteelFrameReferenceLibraryRows,
   hydrateSteelFrameLibraryDraft,
-  persistSteelFrameLibraryState,
-  readSteelFrameLibraryState,
+  STEEL_FRAME_TEMPLATE_REFERENCE_PRICE,
+  type SteelFrameLibraryItem,
 } from '@/lib/steel-frame-library'
+import {
+  listIntakeReferenceLibraryItems,
+  replaceIntakeReferenceLibraryItems,
+} from '@/lib/intake-reference-library-client'
 
 function normalizeText(value: string) {
   return value.trim().toLowerCase()
@@ -47,7 +58,7 @@ function formatSteelFrameMetricWithUnit(
   return `${prefix}${formattedValue}${unit}`
 }
 
-type SteelFramePanelItem = ReturnType<typeof readSteelFrameLibraryState>['items'][number]
+type SteelFramePanelItem = SteelFrameLibraryItem
 type EditorMode = 'view' | 'create' | 'edit'
 
 const STEEL_FRAME_CREATE_PRESETS = [
@@ -87,26 +98,73 @@ function SteelFrameField({
   )
 }
 
+function buildSteelFrameReferenceLibraryRows(
+  referenceSteelPrice: string,
+  items: SteelFrameLibraryItem[],
+) {
+  const normalizedReferenceSteelPrice =
+    referenceSteelPrice.trim() || STEEL_FRAME_TEMPLATE_REFERENCE_PRICE
+  const normalizedItems = buildSteelFrameLibraryItems(
+    normalizedReferenceSteelPrice,
+    items,
+  )
+
+  return [
+    {
+      itemKey: STEEL_FRAME_REFERENCE_PRICE_KEY,
+      code: STEEL_FRAME_REFERENCE_PRICE_KEY,
+      name: '每吨钢管参考价',
+      category: STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+      payload: {
+        kind: STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+        referenceSteelPrice: normalizedReferenceSteelPrice,
+      },
+      sortOrder: 0,
+      isActive: true,
+    },
+    ...normalizedItems.map((item, index) => {
+      const itemKey = buildSteelFrameReferenceItemKey(item)
+      return {
+        itemKey,
+        code: itemKey,
+        name: buildSteelFrameSpecTitle(item),
+        category: STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+        payload: {
+          kind: STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+          item,
+        },
+        sortOrder: index + 1,
+        isActive: true,
+      }
+    }),
+  ]
+}
+
 export default function SteelFrameLibraryPanel({
   canEditItems = true,
 }: {
   canEditItems?: boolean
 }) {
-  const initialState = useMemo(() => readSteelFrameLibraryState(), [])
-  const [referenceSteelPrice, setReferenceSteelPrice] = useState(initialState.referenceSteelPrice)
-  const [savedItems, setSavedItems] = useState(initialState.items)
+  const [referenceSteelPrice, setReferenceSteelPrice] = useState(
+    STEEL_FRAME_TEMPLATE_REFERENCE_PRICE,
+  )
+  const [savedItems, setSavedItems] = useState<SteelFrameLibraryItem[]>([])
   const [queryName, setQueryName] = useState('')
   const [querySize, setQuerySize] = useState('')
   const [queryWallThickness, setQueryWallThickness] = useState('')
   const [appliedQueryName, setAppliedQueryName] = useState('')
   const [appliedQuerySize, setAppliedQuerySize] = useState('')
   const [appliedQueryWallThickness, setAppliedQueryWallThickness] = useState('')
-  const [selectedItemId, setSelectedItemId] = useState<string | null>(initialState.items[0]?.id ?? null)
+  const [selectedItemId, setSelectedItemId] = useState<string | null>(null)
   const [editorMode, setEditorMode] = useState<EditorMode>('view')
   const [editingItemId, setEditingItemId] = useState<string | null>(null)
   const [editorDraft, setEditorDraft] = useState(createEmptySteelFrameDraft())
   const [panelMessage, setPanelMessage] = useState('')
   const [rulesExpanded, setRulesExpanded] = useState(false)
+  const [isServerLoading, setIsServerLoading] = useState(true)
+  const [isServerSaving, setIsServerSaving] = useState(false)
+  const [serverError, setServerError] = useState('')
+  const [serverNotice, setServerNotice] = useState('')
 
   const items = useMemo(
     () => buildSteelFrameLibraryItems(referenceSteelPrice, savedItems),
@@ -114,12 +172,69 @@ export default function SteelFrameLibraryPanel({
   )
 
   useEffect(() => {
-    try {
-      persistSteelFrameLibraryState(referenceSteelPrice, savedItems)
-    } catch {
-      console.warn('钢架资料库本地缓存空间不足，当前修改暂未保存。')
+    let isCancelled = false
+    setIsServerLoading(true)
+    setServerError('')
+    setServerNotice('')
+
+    listIntakeReferenceLibraryItems(STEEL_FRAME_REFERENCE_LIBRARY_TYPE)
+      .then((rows) => {
+        if (isCancelled) return
+        const snapshot = decodeSteelFrameReferenceLibraryRows(rows)
+        const hasServerState =
+          snapshot.items.length > 0 ||
+          rows.some((row) => row.itemKey === STEEL_FRAME_REFERENCE_PRICE_KEY)
+
+        setReferenceSteelPrice(snapshot.referenceSteelPrice)
+        setSavedItems(snapshot.items)
+        setSelectedItemId(snapshot.items[0]?.id ?? null)
+        setServerNotice(
+          hasServerState ? '' : '服务端暂无钢架资料，新增后写入服务端资料库',
+        )
+      })
+      .catch((error) => {
+        if (isCancelled) return
+        setServerError(error instanceof Error ? error.message : '钢架资料库读取失败')
+      })
+      .finally(() => {
+        if (!isCancelled) {
+          setIsServerLoading(false)
+        }
+      })
+
+    return () => {
+      isCancelled = true
     }
-  }, [referenceSteelPrice, savedItems])
+  }, [])
+
+  async function commitSteelFrameLibrary(
+    nextReferenceSteelPrice: string,
+    nextItems: SteelFrameLibraryItem[],
+  ) {
+    setIsServerSaving(true)
+    setServerError('')
+    setServerNotice('')
+
+    try {
+      const savedRows = await replaceIntakeReferenceLibraryItems(
+        STEEL_FRAME_REFERENCE_LIBRARY_TYPE,
+        buildSteelFrameReferenceLibraryRows(nextReferenceSteelPrice, nextItems),
+      )
+      const snapshot = decodeSteelFrameReferenceLibraryRows(savedRows)
+      setReferenceSteelPrice(snapshot.referenceSteelPrice)
+      setSavedItems(snapshot.items)
+      window.dispatchEvent(new Event(STEEL_FRAME_LIBRARY_CHANGED_EVENT))
+      return snapshot
+    } catch (error) {
+      const message =
+        error instanceof Error ? error.message : '钢架资料库保存失败'
+      setServerError(message)
+      setPanelMessage(message)
+      return null
+    } finally {
+      setIsServerSaving(false)
+    }
+  }
 
   const filteredItems = useMemo(() => {
     const nameKeyword = normalizeText(appliedQueryName)
@@ -197,7 +312,7 @@ export default function SteelFrameLibraryPanel({
   }
 
   function handleStartCreate(presetName: string) {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
 
     setEditorMode('create')
     setEditingItemId(null)
@@ -252,8 +367,8 @@ export default function SteelFrameLibraryPanel({
     setPanelMessage('')
   }
 
-  function handleSaveDraft() {
-    if (!canEditItems) return
+  async function handleSaveDraft() {
+    if (!canEditItems || isServerSaving) return
 
     if (!draftCanSave) {
       setPanelMessage(draftRequiresWidth ? '请先填完名称、长、宽、壁厚。' : '请先填完名称、长、壁厚。')
@@ -269,13 +384,12 @@ export default function SteelFrameLibraryPanel({
       id: editingItemId ?? undefined,
     })
 
-    setSavedItems((current) => {
-      if (editingItemId) {
-        return current.map((item) => (item.id === editingItemId ? nextItem : item))
-      }
+    const nextItems = editingItemId
+      ? savedItems.map((item) => (item.id === editingItemId ? nextItem : item))
+      : [...savedItems, nextItem]
+    const snapshot = await commitSteelFrameLibrary(referenceSteelPrice, nextItems)
+    if (!snapshot) return
 
-      return [...current, nextItem]
-    })
     setEditorMode('edit')
     setEditingItemId(nextItem.id)
     setEditorDraft(nextItem)
@@ -283,14 +397,19 @@ export default function SteelFrameLibraryPanel({
     setPanelMessage('钢架规格已保存。')
   }
 
-  function handleDeleteDraft() {
-    if (!canEditItems) return
+  async function handleDeleteDraft() {
+    if (!canEditItems || isServerSaving) return
 
     if (!editingItemId) return
 
     const fallbackItem = items.find((item) => item.id !== editingItemId) ?? null
 
-    setSavedItems((current) => current.filter((item) => item.id !== editingItemId))
+    const snapshot = await commitSteelFrameLibrary(
+      referenceSteelPrice,
+      savedItems.filter((item) => item.id !== editingItemId),
+    )
+    if (!snapshot) return
+
     setEditorMode('view')
     setEditingItemId(null)
     setEditorDraft(createEmptySteelFrameDraft())
@@ -299,7 +418,7 @@ export default function SteelFrameLibraryPanel({
   }
 
   function handleCopyDraft() {
-    if (!canEditItems) return
+    if (!canEditItems || isServerSaving) return
     if (!editingItemId) return
 
     setEditorMode('create')
@@ -321,6 +440,11 @@ export default function SteelFrameLibraryPanel({
     setRulesExpanded(false)
   }
 
+  async function handleReferenceSteelPriceBlur() {
+    if (!canEditItems || isServerSaving) return
+    await commitSteelFrameLibrary(referenceSteelPrice, savedItems)
+  }
+
   const shouldShowEditor =
     canEditItems &&
     (editorMode === 'create' || (editorMode === 'edit' && Boolean(editingItemId)))
@@ -354,6 +478,7 @@ export default function SteelFrameLibraryPanel({
               onChange={(event) => {
                 if (canEditItems) setReferenceSteelPrice(event.target.value)
               }}
+              onBlur={handleReferenceSteelPriceBlur}
               placeholder="例如：4200"
               readOnly={!canEditItems}
             />
@@ -369,6 +494,7 @@ export default function SteelFrameLibraryPanel({
                     variant="gray"
                     className={`${LIBRARY_PRIMARY_BUTTON_CLASS} h-9 whitespace-nowrap text-xs`}
                     onClick={() => handleStartCreate(preset.name)}
+                    disabled={isServerSaving}
                   >
                     <Plus className="h-4 w-4" />
                     {preset.label}
@@ -386,6 +512,22 @@ export default function SteelFrameLibraryPanel({
             </Button>
           </div>
         </div>
+        <div className="mt-3 flex flex-wrap items-center gap-3 text-xs text-apple-label-secondary">
+          <span>当前共 {items.length} 条钢架规格</span>
+          <span
+            className={
+              serverError
+                ? 'text-rose-600'
+                : serverNotice
+                  ? 'text-amber-700'
+                  : 'text-emerald-700'
+            }
+          >
+            {isServerLoading
+              ? '正在读取服务端资料库'
+              : serverError || serverNotice || '已接入服务端资料库'}
+          </span>
+        </div>
       </div>
 
       <div className="grid min-h-0 flex-1 gap-4 xl:grid-cols-[340px_minmax(0,1fr)]">
@@ -480,6 +622,7 @@ export default function SteelFrameLibraryPanel({
                         variant="plain"
                         className="!h-7 !min-h-0 !px-2 !py-0 whitespace-nowrap text-[11px] [&>span]:gap-1"
                         onClick={handleDeleteDraft}
+                        disabled={isServerSaving}
                       >
                         <Trash2 className="h-3.5 w-3.5" />
                         删除
@@ -490,6 +633,7 @@ export default function SteelFrameLibraryPanel({
                         variant="plain"
                         className="!h-7 !min-h-0 !px-2 !py-0 whitespace-nowrap text-[11px] [&>span]:gap-1"
                         onClick={handleCopyDraft}
+                        disabled={isServerSaving}
                       >
                         <Copy className="h-3.5 w-3.5" />
                         复制
@@ -501,10 +645,10 @@ export default function SteelFrameLibraryPanel({
                     size="small"
                     className={`${LIBRARY_PRIMARY_BUTTON_CLASS} !h-7 !min-h-0 !px-2 !py-0 whitespace-nowrap text-[11px] [&>span]:gap-1`}
                     onClick={handleSaveDraft}
-                    disabled={!draftCanSave}
+                    disabled={isServerSaving || !draftCanSave}
                   >
                     <Save className="h-3.5 w-3.5" />
-                    保存
+                    {isServerSaving ? '保存中' : '保存'}
                   </Button>
                 </div>
               </div>
diff --git a/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.test.ts b/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.test.ts
index 7e263dee..40b897d2 100644
--- a/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.test.ts
+++ b/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.test.ts
@@ -50,6 +50,23 @@ function buildDraftGroupDetail(
           brand: '顾家',
           color: '胡桃',
         },
+        basicInfo: {
+          model: '',
+          formalSkuCode: 'GBGJ-DNZ000101',
+          barcode: '',
+          size: '',
+          color: '',
+          material: '',
+          specName: '',
+          versionNo: '',
+          setCount: '',
+          attributeCode: '',
+          drawingId: '',
+          installMethod: '',
+          manualUpdatedAt: null,
+          manualUpdatedBy: null,
+          manualUpdatedByName: null,
+        },
         candidateSnapshot: null,
         assemblyWorkspace: null,
         assemblyResultStatus: null,
@@ -95,6 +112,23 @@ function buildDraftGroupDetail(
           brand: '基本盘',
           color: '暖白',
         },
+        basicInfo: {
+          model: '',
+          formalSkuCode: 'DNZ000102',
+          barcode: '',
+          size: '',
+          color: '',
+          material: '',
+          specName: '',
+          versionNo: '',
+          setCount: '',
+          attributeCode: '',
+          drawingId: '',
+          installMethod: '',
+          manualUpdatedAt: null,
+          manualUpdatedBy: null,
+          manualUpdatedByName: null,
+        },
         candidateSnapshot: null,
         assemblyWorkspace: null,
         assemblyResultStatus: null,
@@ -132,14 +166,14 @@ describe('adaptDraftGroupToIntegratedDefaults', () => {
       seriesName: '集成书桌系列',
       baseSpu: 'DNZ0001',
       defaultBrand: '基本盘',
-      adaptableBrands: ['顾家', '基本盘'],
+      adaptableBrands: ['代理品牌-顾家', '基本盘'],
       skuItems: [
         {
           id: 'pre-sku-1',
           skuSequence: 1,
           skuName: '款式一',
           baseSkuCode: 'DNZ000101',
-          brand: '顾家',
+          brand: '代理品牌-顾家',
         },
         {
           id: 'pre-sku-2',
@@ -163,6 +197,10 @@ describe('adaptDraftGroupToIntegratedDefaults', () => {
             spuCode: 'GBSFY-DNZ2001',
             skuCode: 'GBSFY-DNZ200101',
           },
+          basicInfo: {
+            ...buildDraftGroupDetail().preSkus[0]!.basicInfo!,
+            formalSkuCode: 'GBSFY-DNZ200101',
+          },
         },
         {
           ...buildDraftGroupDetail().preSkus[1]!,
@@ -172,30 +210,9 @@ describe('adaptDraftGroupToIntegratedDefaults', () => {
             spuCode: 'GBGJ-DNZ2001',
             skuCode: 'GBGJ-DNZ200102',
           },
-        },
-      ],
-    })
-
-    const result = adaptDraftGroupToIntegratedDefaults(detail)
-
-    expect(result.defaultBrand).toBe('索菲亚')
-    expect(result.adaptableBrands).toEqual(['索菲亚', '顾家'])
-    expect(result.baseSpu).toBe('DNZ2001')
-    expect(result.skuItems.map((item) => item.baseSkuCode)).toEqual([
-      'DNZ200101',
-      'DNZ200102',
-    ])
-  })
-
-  it('can detect brand from summary text when spuCode has no prefix', () => {
-    const detail = buildDraftGroupDetail({
-      preSkus: [
-        {
-          ...buildDraftGroupDetail().preSkus[0]!,
-          displaySummary: {
-            spuCode: 'DNZ3001',
-            skuCode: 'DNZ300101',
-            summaryText: '品牌：朴美；适配渠道：朴美',
+          basicInfo: {
+            ...buildDraftGroupDetail().preSkus[1]!.basicInfo!,
+            formalSkuCode: 'GBGJ-DNZ200102',
           },
         },
       ],
@@ -203,8 +220,37 @@ describe('adaptDraftGroupToIntegratedDefaults', () => {
 
     const result = adaptDraftGroupToIntegratedDefaults(detail)
 
-    expect(result.defaultBrand).toBe('朴美')
-    expect(result.adaptableBrands).toEqual(['朴美'])
+    expect(result.defaultBrand).toBe('代理品牌-索菲亚')
+    expect(result.adaptableBrands).toEqual(['代理品牌-索菲亚', '代理品牌-顾家'])
+    expect(result.baseSpu).toBe('DNZ2001')
+    expect(result.skuItems.map((item) => item.baseSkuCode)).toEqual([
+      'DNZ200101',
+      'DNZ200102',
+    ])
+  })
+
+  it('detects brand from structured SKU code instead of legacy summary text', () => {
+    const detail = buildDraftGroupDetail({
+      preSkus: [
+        {
+          ...buildDraftGroupDetail().preSkus[0]!,
+          displaySummary: {
+            spuCode: 'DNZ3001',
+            skuCode: 'DNZ300101',
+            summaryText: '品牌：代理品牌-顾家；适配渠道：代理品牌-顾家',
+          },
+          basicInfo: {
+            ...buildDraftGroupDetail().preSkus[0]!.basicInfo!,
+            formalSkuCode: 'GBPM-DNZ300101',
+          },
+        },
+      ],
+    })
+
+    const result = adaptDraftGroupToIntegratedDefaults(detail)
+
+    expect(result.defaultBrand).toBe('自有品牌-朴美')
+    expect(result.adaptableBrands).toEqual(['自有品牌-朴美'])
     expect(result.baseSpu).toBe('DNZ3001')
     expect(result.skuItems).toEqual([
       {
@@ -212,8 +258,74 @@ describe('adaptDraftGroupToIntegratedDefaults', () => {
         skuSequence: 1,
         skuName: '款式一',
         baseSkuCode: 'DNZ300101',
-        brand: '朴美',
+        brand: '自有品牌-朴美',
       },
     ])
   })
+
+  it('uses draft group series fields instead of legacy familySelection seriesName', () => {
+    const detail = buildDraftGroupDetail({
+      draftGroup: {
+        ...buildDraftGroupDetail().draftGroup,
+        assetSeriesName: '结构化系列名',
+        name: '草稿组名称',
+      },
+      preSkus: [
+        {
+          ...buildDraftGroupDetail().preSkus[0]!,
+          familySelection: {
+            seriesName: '旧快照系列名',
+          },
+        },
+      ],
+    })
+
+    const result = adaptDraftGroupToIntegratedDefaults(detail)
+
+    expect(result.seriesName).toBe('结构化系列名')
+  })
+
+  it('does not use legacy displaySummary.spuCode as integrated SPU source', () => {
+    const detail = buildDraftGroupDetail({
+      draftGroup: {
+        ...buildDraftGroupDetail().draftGroup,
+        code: 'DG-STRUCTURED',
+      },
+      preSkus: [
+        {
+          ...buildDraftGroupDetail().preSkus[0]!,
+          basicInfo: null,
+          displaySummary: {
+            spuCode: 'GBGJ-DNZ4001',
+            skuCode: 'GBGJ-DNZ400101',
+            brand: '顾家',
+          },
+        },
+      ],
+    })
+
+    const result = adaptDraftGroupToIntegratedDefaults(detail)
+
+    expect(result.baseSpu).toBe('DG-STRUCTURED')
+  })
+
+  it('does not use legacy displaySummary.skuCode as integrated SKU code source', () => {
+    const detail = buildDraftGroupDetail({
+      preSkus: [
+        {
+          ...buildDraftGroupDetail().preSkus[0]!,
+          basicInfo: null,
+          displaySummary: {
+            spuCode: 'GBGJ-DNZ4001',
+            skuCode: 'GBGJ-DNZ400101',
+            brand: '顾家',
+          },
+        },
+      ],
+    })
+
+    const result = adaptDraftGroupToIntegratedDefaults(detail)
+
+    expect(result.skuItems[0]?.baseSkuCode).toBe('')
+  })
 })
diff --git a/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.ts b/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.ts
index 82046946..eba5291a 100644
--- a/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.ts
+++ b/furniture-3d-system/src/app/intake/integrated/integratedDraftGroupAdapter.ts
@@ -3,6 +3,7 @@ import {
   NON_INTEGRATED_BRAND_PREFIX_MAP,
   stripNonIntegratedBrandPrefix,
 } from '../non-integrated/nonIntegratedStorage'
+import { readPreSkuSkuFields } from '../seriesComponentDetails'
 
 export type IntegratedSeriesSkuDefault = {
   id: string
@@ -20,57 +21,47 @@ export type IntegratedSeriesDefaults = {
   skuItems: IntegratedSeriesSkuDefault[]
 }
 
-const KNOWN_BRANDS = Object.keys(NON_INTEGRATED_BRAND_PREFIX_MAP)
-
-function readDisplayText(displaySummary: Record<string, unknown> | null | undefined) {
-  if (!displaySummary) return ''
-
-  return Object.values(displaySummary)
-    .filter((value): value is string => typeof value === 'string')
-    .join(' ')
-}
-
-function detectBrand(preSku: DraftGroupDetailDTO['preSkus'][number]) {
-  const rawSpuCode = preSku.displaySummary?.spuCode
-  const normalizedSpuCode = typeof rawSpuCode === 'string' ? rawSpuCode.trim().toUpperCase() : ''
+function detectBrandFromCode(value: string) {
+  const normalizedCode = value.trim().toUpperCase()
+  if (!normalizedCode) return null
 
   for (const [brand, prefix] of Object.entries(NON_INTEGRATED_BRAND_PREFIX_MAP)) {
-    if (prefix && normalizedSpuCode.startsWith(prefix)) {
+    if (prefix && normalizedCode.startsWith(prefix)) {
       return brand
     }
   }
 
-  const explicitBrand = preSku.displaySummary?.brand
-  if (typeof explicitBrand === 'string' && KNOWN_BRANDS.includes(explicitBrand.trim())) {
-    return explicitBrand.trim()
-  }
+  return null
+}
 
-  const summaryText = readDisplayText(preSku.displaySummary)
-  return KNOWN_BRANDS.find((brand) => summaryText.includes(brand)) ?? '基本盘'
+function detectBrand(preSku: DraftGroupDetailDTO['preSkus'][number]) {
+  const skuFields = readPreSkuSkuFields(preSku)
+  return detectBrandFromCode(skuFields.skuCode) ?? '基本盘'
 }
 
 function readSeriesName(detail: DraftGroupDetailDTO) {
-  const familySeriesName = detail.preSkus.find((preSku) => {
-    const value = preSku.familySelection?.seriesName
-    return typeof value === 'string' && value.trim().length > 0
-  })?.familySelection?.seriesName
-
-  if (typeof familySeriesName === 'string' && familySeriesName.trim().length > 0) {
-    return familySeriesName.trim()
-  }
-
   return detail.draftGroup.assetSeriesName?.trim() || detail.draftGroup.name.trim()
 }
 
-function pickBaseSpu(detail: DraftGroupDetailDTO) {
-  for (const preSku of detail.preSkus) {
-    const rawSpuCode = preSku.displaySummary?.spuCode
-    if (typeof rawSpuCode === 'string' && rawSpuCode.trim().length > 0) {
-      return stripNonIntegratedBrandPrefix(rawSpuCode)
-    }
+function inferBaseSpuFromSkuCode(value: string) {
+  const normalizedCode = stripNonIntegratedBrandPrefix(value)
+  if (!normalizedCode) return ''
+
+  if (/^[A-Z]+-SPJ\d{5}$/.test(normalizedCode)) {
+    return ''
   }
 
-  return ''
+  const legacySkuMatch = normalizedCode.match(/^(.+?)\d{2}[A-Z]?$/)
+  return legacySkuMatch?.[1] ?? ''
+}
+
+function pickBaseSpu(detail: DraftGroupDetailDTO, skuCodes: string[]) {
+  for (const skuCode of skuCodes) {
+    const inferredSpu = inferBaseSpuFromSkuCode(skuCode)
+    if (inferredSpu) return inferredSpu
+  }
+
+  return detail.draftGroup.code?.trim() ?? ''
 }
 
 function pickDefaultBrand(adaptableBrands: string[]) {
@@ -85,18 +76,22 @@ export function adaptDraftGroupToIntegratedDefaults(
   detail: DraftGroupDetailDTO,
 ): IntegratedSeriesDefaults {
   const adaptableBrands: string[] = []
+  const skuCodes: string[] = []
 
   const skuItems = detail.preSkus.map<IntegratedSeriesSkuDefault>((preSku) => {
+    const structuredSkuCode = readPreSkuSkuFields(preSku).skuCode
+    if (structuredSkuCode) {
+      skuCodes.push(structuredSkuCode)
+    }
+
     const brand = detectBrand(preSku)
     if (!adaptableBrands.includes(brand)) {
       adaptableBrands.push(brand)
     }
 
-    const rawSkuCode = preSku.displaySummary?.skuCode
-    const baseSkuCode =
-      typeof rawSkuCode === 'string' && rawSkuCode.trim().length > 0
-        ? stripNonIntegratedBrandPrefix(rawSkuCode)
-        : ''
+    const baseSkuCode = structuredSkuCode
+      ? stripNonIntegratedBrandPrefix(structuredSkuCode)
+      : ''
 
     return {
       id: preSku.id,
@@ -109,7 +104,7 @@ export function adaptDraftGroupToIntegratedDefaults(
 
   return {
     seriesName: readSeriesName(detail),
-    baseSpu: pickBaseSpu(detail),
+    baseSpu: pickBaseSpu(detail, skuCodes),
     defaultBrand: pickDefaultBrand(adaptableBrands),
     adaptableBrands,
     skuItems,
diff --git a/furniture-3d-system/src/app/intake/integrated/integratedSeriesLoader.test.ts b/furniture-3d-system/src/app/intake/integrated/integratedSeriesLoader.test.ts
index f6b74288..5f1d6b16 100644
--- a/furniture-3d-system/src/app/intake/integrated/integratedSeriesLoader.test.ts
+++ b/furniture-3d-system/src/app/intake/integrated/integratedSeriesLoader.test.ts
@@ -52,6 +52,23 @@ function buildDraftGroupDetail(id: string, spuCode: string): DraftGroupDetailDTO
           skuCode: `${spuCode}01`,
           brand: '基本盘',
         },
+        basicInfo: {
+          model: '',
+          formalSkuCode: `${spuCode}01`,
+          barcode: '',
+          size: '',
+          color: '',
+          material: '',
+          specName: '',
+          versionNo: '',
+          setCount: '',
+          attributeCode: '',
+          drawingId: '',
+          installMethod: '',
+          manualUpdatedAt: null,
+          manualUpdatedBy: null,
+          manualUpdatedByName: null,
+        },
         candidateSnapshot: null,
         assemblyWorkspace: null,
         assemblyResultStatus: null,
diff --git a/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.test.tsx b/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.test.tsx
index 431439a8..8530d01d 100644
--- a/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.test.tsx
+++ b/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.test.tsx
@@ -23,20 +23,26 @@ import {
   createDefaultDocumentWorkspaceConfirmations,
   createEmptyNonIntegratedOpeningReference,
   createEmptyNonIntegratedPatentApplication,
+  clearNonIntegratedProductsRuntimeCache,
   getNonIntegratedProductById,
+  listNonIntegratedProducts,
   NON_INTEGRATED_BASIC_INFO_WORKSPACE_CATEGORY,
   NON_INTEGRATED_DOCUMENT_WORKSPACE_CATEGORIES,
-  NON_INTEGRATED_STORAGE_KEY,
+  replaceNonIntegratedProducts,
   saveNonIntegratedProduct,
   type NonIntegratedSkuItem,
   type NonIntegratedProductRecord,
 } from "./nonIntegratedStorage";
 import {
-  PRODUCT_PATENT_STORAGE_KEY,
+  clearProductPatentRecordsRuntimeCache,
+  listProductPatentRecords,
   type ProductPatentRecord,
 } from "../productPatentStorage";
 import type { MaterialDTO } from "@/server/services";
-import { SPU_RULE_LIBRARY_STORAGE_KEY } from "../spuRuleLibraryLogic";
+import {
+  clearSpuRuleLibraryRuntimeCache,
+  writeSpuRuleLibraryRules,
+} from "../spuRuleLibraryLogic";
 import { parseZipFile } from "@/lib/zip-parser";
 import { extractPreviewModelFromZip } from "../../../lib/model-preview-zip";
 import { fetchSubstrates } from "@/lib/open-product/platform-api";
@@ -443,8 +449,30 @@ describe("NonIntegratedDetailClient", () => {
   beforeEach(() => {
     push.mockReset();
     modelPreviewPanelMock.mockReset();
+    clearSpuRuleLibraryRuntimeCache();
+    clearNonIntegratedProductsRuntimeCache();
+    clearProductPatentRecordsRuntimeCache();
     window.localStorage.clear();
     window.sessionStorage.clear();
+    Object.defineProperty(global, "fetch", {
+      configurable: true,
+      writable: true,
+      value: jest.fn(async () => ({
+        ok: true,
+        json: async () => ({
+          success: true,
+          data: {
+            items: [],
+            names: [],
+            overrides: {},
+          },
+        }),
+        blob: async () => new Blob([""], { type: "application/octet-stream" }),
+        headers: {
+          get: () => null,
+        },
+      })),
+    });
     anchorClickSpy = jest
       .spyOn(HTMLAnchorElement.prototype, "click")
       .mockImplementation(() => {});
@@ -531,18 +559,15 @@ describe("NonIntegratedDetailClient", () => {
 
   it("creates a local product record and jumps to detail page after submit", async () => {
     const actor = userEvent.setup();
-    window.localStorage.setItem(
-      SPU_RULE_LIBRARY_STORAGE_KEY,
-      JSON.stringify([
-        {
-          id: "test-desk-rule",
-          productCategory: "书桌",
-          categoryCode: "SZ",
-          spuIndex: 240,
-          enabled: true,
-        },
-      ]),
-    );
+    writeSpuRuleLibraryRules([
+      {
+        id: "test-desk-rule",
+        productCategory: "书桌",
+        categoryCode: "SZ",
+        spuIndex: 240,
+        enabled: true,
+      },
+    ]);
     const { container } = render(
       <NonIntegratedDetailClient
         mode="create"
@@ -577,13 +602,12 @@ describe("NonIntegratedDetailClient", () => {
 
     await waitFor(() => expect(push).toHaveBeenCalledTimes(1));
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? "[]",
-    ) as NonIntegratedProductRecord[];
+    const savedProducts = listNonIntegratedProducts() as NonIntegratedProductRecord[];
 
     expect(savedProducts).toHaveLength(1);
-    expect(savedProducts[0]?.spu).toBe("GBGJ-SZ0241");
-    expect(savedProducts[0]?.productCode).toBe("GBGJ-SZ0241");
+    expect(savedProducts[0]?.spu).toBe("KK202605001");
+    expect(savedProducts[0]?.formalSpuAssigned).not.toBe(true);
+    expect(savedProducts[0]?.productCode).toBe("");
     expect(savedProducts[0]?.projectStatus).toBe("draft");
     expect(savedProducts[0]?.createdBy).toBe("Creator");
     expect(savedProducts[0]?.updatedBy).toBe("Creator");
@@ -663,9 +687,7 @@ describe("NonIntegratedDetailClient", () => {
 
     await waitFor(() => expect(push).toHaveBeenCalledTimes(1));
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? "[]",
-    ) as NonIntegratedProductRecord[];
+    const savedProducts = listNonIntegratedProducts() as NonIntegratedProductRecord[];
 
     expect(savedProducts[0]?.productDevelopmentKind).toBe("series");
     expect(savedProducts[0]?.spu).toBe("GBGJ-SZ0241");
@@ -746,20 +768,35 @@ describe("NonIntegratedDetailClient", () => {
     expect(screen.getByLabelText("系列名称")).toBeInTheDocument();
   });
 
-  it("creates a normal product SPU from the SPU rule library instead of the opening code", async () => {
+  it("asks the backend save transaction to assign a normal product SPU instead of using the opening code", async () => {
     const actor = userEvent.setup();
-    window.localStorage.setItem(
-      SPU_RULE_LIBRARY_STORAGE_KEY,
-      JSON.stringify([
-        {
-          id: "test-product-rule",
-          productCategory: "测试",
-          categoryCode: "CS",
-          spuIndex: 1,
-          enabled: true,
-        },
-      ]),
+    (globalThis as NonIntegratedRemoteAssetStorageTestGlobal)
+      .__NON_INTEGRATED_REMOTE_ASSET_STORAGE_TEST_OVERRIDE__ = true;
+    mockedSaveSharedNonIntegratedProduct.mockImplementationOnce(
+      async (product) => ({
+        ...product,
+        id: "remote-CS0002",
+        spu: "CS0002",
+        productCode: "CS0002",
+        formalSpuAssigned: true,
+        skuItems: [
+          {
+            ...product.skuItems[0],
+            skuCode: "CS000201",
+            barcode: "CS000201V01",
+          },
+        ],
+      }),
     );
+    writeSpuRuleLibraryRules([
+      {
+        id: "test-product-rule",
+        productCategory: "测试",
+        categoryCode: "CS",
+        spuIndex: 1,
+        enabled: true,
+      },
+    ]);
     const { container } = render(
       <NonIntegratedDetailClient
         mode="create"
@@ -784,14 +821,18 @@ describe("NonIntegratedDetailClient", () => {
 
     await waitFor(() => expect(push).toHaveBeenCalledTimes(1));
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? "[]",
-    ) as NonIntegratedProductRecord[];
-
-    expect(savedProducts[0]?.spu).toBe("CS0002");
-    expect(savedProducts[0]?.productCode).toBe("CS0002");
-    expect(savedProducts[0]?.openingReference.temporaryCode).toBe("测试");
-    expect(savedProducts[0]?.skuItems[0]?.skuCode).toBe("CS000201");
+    expect(mockedSaveSharedNonIntegratedProduct).toHaveBeenCalledWith(
+      expect.objectContaining({
+        spu: "测试",
+        openingReference: expect.objectContaining({
+          temporaryCode: "测试",
+        }),
+      }),
+      expect.objectContaining({
+        formalSpuAssignmentProductCategory: "测试",
+      }),
+    );
+    expect(push).toHaveBeenCalledWith("/intake/non-integrated/remote-CS0002");
   });
 
   it("shows series component details from the barcode magnifier without leaking them into attribute columns", async () => {
@@ -884,18 +925,15 @@ describe("NonIntegratedDetailClient", () => {
     (globalThis as NonIntegratedRemoteAssetStorageTestGlobal)
       .__NON_INTEGRATED_REMOTE_ASSET_STORAGE_TEST_OVERRIDE__ = true;
     const actor = userEvent.setup();
-    window.localStorage.setItem(
-      SPU_RULE_LIBRARY_STORAGE_KEY,
-      JSON.stringify([
-        {
-          id: "remote-upload-rule",
-          productCategory: "书桌",
-          categoryCode: "SZ",
-          spuIndex: 240,
-          enabled: true,
-        },
-      ]),
-    );
+    writeSpuRuleLibraryRules([
+      {
+        id: "remote-upload-rule",
+        productCategory: "书桌",
+        categoryCode: "SZ",
+        spuIndex: 240,
+        enabled: true,
+      },
+    ]);
     const { container } = render(<NonIntegratedDetailClient mode="create" />);
 
     await actor.type(screen.getByLabelText("名称"), "远程开品");
@@ -1307,18 +1345,15 @@ describe("NonIntegratedDetailClient", () => {
 
   it("keeps the opening code blank when saving a new demand without manual opening code", async () => {
     const actor = userEvent.setup();
-    window.localStorage.setItem(
-      SPU_RULE_LIBRARY_STORAGE_KEY,
-      JSON.stringify([
-        {
-          id: "blank-opening-code-rule",
-          productCategory: "书桌",
-          categoryCode: "SZ",
-          spuIndex: 240,
-          enabled: true,
-        },
-      ]),
-    );
+    writeSpuRuleLibraryRules([
+      {
+        id: "blank-opening-code-rule",
+        productCategory: "书桌",
+        categoryCode: "SZ",
+        spuIndex: 240,
+        enabled: true,
+      },
+    ]);
     const { container } = render(<NonIntegratedDetailClient mode="create" />);
 
     await actor.type(screen.getByLabelText("名称"), "仅填写名称的开品");
@@ -1334,19 +1369,18 @@ describe("NonIntegratedDetailClient", () => {
 
     await waitFor(() => expect(push).toHaveBeenCalledTimes(1));
 
-    const savedProducts = JSON.parse(
-      window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? "[]",
-    ) as NonIntegratedProductRecord[];
+    const savedProducts = listNonIntegratedProducts() as NonIntegratedProductRecord[];
 
     expect(savedProducts).toHaveLength(1);
     expect(savedProducts[0]?.openingReference.productName).toBe(
       "仅填写名称的开品",
     );
     expect(savedProducts[0]?.openingReference.temporaryCode).toBe("");
-    expect(savedProducts[0]?.spu).toBe("SZ0241");
+    expect(savedProducts[0]?.spu).toMatch(/^NON-INTEGRATED-\d+$/);
+    expect(savedProducts[0]?.formalSpuAssigned).not.toBe(true);
   });
 
-  it("shows an estimated SPU, assigns it on SKU creation, and locks categories", async () => {
+  it("shows an estimated SPU for SKU editing without occupying a formal number first", async () => {
     const actor = userEvent.setup();
 
     saveNonIntegratedProduct(
@@ -1386,28 +1420,14 @@ describe("NonIntegratedDetailClient", () => {
     await actor.click(screen.getByTestId("non-integrated-add-sku"));
 
     expect(await screen.findByDisplayValue("CJ026701")).toBeInTheDocument();
-    expect(screen.getByDisplayValue("CJ026702")).toBeInTheDocument();
-    expect(screen.getByLabelText("SPU")).toHaveValue("CJ0267");
-    expect(screen.getByLabelText("品类")).toHaveAttribute("readonly");
-    expect(screen.getByLabelText("类目")).toHaveAttribute("readonly");
+    expect(await screen.findByDisplayValue("CJ026702")).toBeInTheDocument();
+    expect(screen.getByLabelText("SPU")).toHaveValue("预计SPU：CJ0267");
+    expect(screen.getByLabelText("品类")).not.toHaveAttribute("readonly");
+    expect(screen.getByLabelText("类目")).not.toHaveAttribute("readonly");
 
-    await waitFor(() => {
-      const savedProduct = getNonIntegratedProductById("temp-code-product");
-      expect(savedProduct?.spu).toBe("CJ0267");
-      expect(savedProduct?.formalSpuAssigned).toBe(true);
-      expect(savedProduct?.skuItems[0]?.skuCode).toBe("CJ026701");
-    });
-    const storedRules = JSON.parse(
-      window.localStorage.getItem(SPU_RULE_LIBRARY_STORAGE_KEY) ?? "[]",
-    ) as Array<{ productCategory?: string; spuIndex?: number }>;
-    expect(
-      storedRules.find((rule) => rule.productCategory === "茶几")?.spuIndex,
-    ).toBe(267);
-
-    await actor.click(screen.getByTestId("document-workspace-trigger-开品参考"));
-
-    expect(screen.getByLabelText("品类")).toHaveAttribute("readonly");
-    expect(screen.getByLabelText("类目")).toHaveAttribute("readonly");
+    const savedProduct = getNonIntegratedProductById("temp-code-product");
+    expect(savedProduct?.spu).toBe("KP-001");
+    expect(savedProduct?.formalSpuAssigned).not.toBe(true);
   });
 
   it("applies the current brand prefix when opening an existing formal SPU", () => {
@@ -1645,9 +1665,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("shows the document sidebar in the updated workflow order", () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-sidebar-order",
           uploadFiles: [
@@ -1671,8 +1689,7 @@ describe("NonIntegratedDetailClient", () => {
             检测报告: true,
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient mode="edit" productId="DNZ0001-sidebar-order" />,
@@ -1741,9 +1758,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("keeps opening-reference link view scoped to the linked product reference", () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-link-entry",
           openingReference: {
@@ -1777,8 +1792,7 @@ describe("NonIntegratedDetailClient", () => {
             temporaryCode: "KP-OTHER",
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -1811,9 +1825,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("shows all workflow nodes by default without the project review node", () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-draft-project",
           projectStatus: "draft",
@@ -1836,8 +1848,7 @@ describe("NonIntegratedDetailClient", () => {
             reason: "补齐书房价格带",
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient mode="edit" productId="DNZ0001-draft-project" />,
@@ -1879,9 +1890,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("keeps the project review node hidden for returned products", () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-revision-project",
           projectStatus: "revision",
@@ -1910,8 +1919,7 @@ describe("NonIntegratedDetailClient", () => {
             decidedAt: "2026-04-28T07:59:02.000Z",
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -2539,9 +2547,7 @@ describe("NonIntegratedDetailClient", () => {
       expect(savedProduct?.patentApplication.shouldApply).toBe("申请");
       expect(savedProduct?.patentApplication.designer).toBe("徐霞客");
 
-      const patentRecords = JSON.parse(
-        window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) ?? "[]",
-      ) as ProductPatentRecord[];
+      const patentRecords = listProductPatentRecords() as ProductPatentRecord[];
       expect(patentRecords).toHaveLength(1);
       expect(patentRecords[0]).toMatchObject({
         productId: "SZ0230-patent-application-sync",
@@ -2618,9 +2624,7 @@ describe("NonIntegratedDetailClient", () => {
       expect(savedProduct?.patentApplication.shouldApply).toBe("不申请");
       expect(savedProduct?.patentApplication.patentStatus).toBe("无专利");
 
-      const patentRecords = JSON.parse(
-        window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) ?? "[]",
-      ) as ProductPatentRecord[];
+      const patentRecords = listProductPatentRecords() as ProductPatentRecord[];
       expect(patentRecords).toHaveLength(0);
     });
   });
@@ -3358,9 +3362,7 @@ describe("NonIntegratedDetailClient", () => {
   it("removes SKU content confirmation actions and keeps SKU fields editable before factory confirmation", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-sku-confirmation-removed",
           skuItems: [
@@ -3377,8 +3379,7 @@ describe("NonIntegratedDetailClient", () => {
           skuBatchChangeTypes: { 1: "新品" },
           skuBatchFlowNos: { 1: "DD20260519001" },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -5645,9 +5646,7 @@ describe("NonIntegratedDetailClient", () => {
   it("renders first quality rows by SKU batch", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-factory-quality",
           skuItems: [
@@ -5685,8 +5684,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -5727,9 +5725,7 @@ describe("NonIntegratedDetailClient", () => {
   it("renders installation style tabs from SKU models", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "SZ0230-installation-styles",
           skuItems: [
@@ -5739,8 +5735,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -6808,9 +6803,7 @@ describe("NonIntegratedDetailClient", () => {
         "/api/intake/non-integrated/assets/document-previews/cache/page-1.jpg",
       ],
     });
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-pdf-preview",
           uploadFiles: [
@@ -6823,8 +6816,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient mode="edit" productId="DNZ0001-pdf-preview" />,
@@ -6855,9 +6847,7 @@ describe("NonIntegratedDetailClient", () => {
   it("uses the page header return action to go back from document workspace to detail view", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-document-return",
           uploadFiles: [
@@ -6870,8 +6860,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -6899,9 +6888,7 @@ describe("NonIntegratedDetailClient", () => {
   it("keeps the sidebar on basic info instead of falling back to opening reference", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-basic-info-sidebar",
           uploadFiles: [
@@ -6914,8 +6901,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -6938,9 +6924,7 @@ describe("NonIntegratedDetailClient", () => {
   it("marks copied document categories as pending until the current category is confirmed", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-pending-confirmation",
           copiedFromProductId: "source-product",
@@ -6959,8 +6943,7 @@ describe("NonIntegratedDetailClient", () => {
             产品实拍图: false,
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -6980,9 +6963,7 @@ describe("NonIntegratedDetailClient", () => {
     );
 
     await waitFor(() => {
-      const savedProducts = JSON.parse(
-        window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY) ?? "[]",
-      );
+      const savedProducts = listNonIntegratedProducts();
       expect(
         savedProducts[0].documentWorkspaceConfirmations["产品实拍图"],
       ).toBe(true);
@@ -6997,9 +6978,7 @@ describe("NonIntegratedDetailClient", () => {
     const actor = userEvent.setup();
     const approvedAt = "2026-04-28T06:30:00.000Z";
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-sku-independent-confirmation",
           skuItems: [createSkuItem()],
@@ -7022,8 +7001,7 @@ describe("NonIntegratedDetailClient", () => {
             产品模型: approvedAt,
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7058,15 +7036,12 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("counts review data as zero until the first round has a filled issue", () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-empty-review-count",
           spu: "SZ0230",
         }),
-      ]),
-    );
+      ]);
 
     const emptyRender = render(
       <NonIntegratedDetailClient
@@ -7086,9 +7061,7 @@ describe("NonIntegratedDetailClient", () => {
     ).toBeInTheDocument();
 
     emptyRender.unmount();
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-filled-review-count",
           spu: "SZ0230",
@@ -7116,8 +7089,7 @@ describe("NonIntegratedDetailClient", () => {
             ],
           },
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7145,9 +7117,7 @@ describe("NonIntegratedDetailClient", () => {
     const actor = userEvent.setup();
     const confirmSpy = jest.spyOn(window, "confirm").mockReturnValue(false);
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-review-round-confirm",
           spu: "SZ0230",
@@ -7166,8 +7136,7 @@ describe("NonIntegratedDetailClient", () => {
             ],
           },
         }),
-      ]),
-    );
+      ]);
 
     try {
       render(
@@ -7207,9 +7176,7 @@ describe("NonIntegratedDetailClient", () => {
   it("locks copied products to a single brand while keeping adaptable brands editable", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "GBGJ-DNZ0001-copied-brand",
           spu: "GBGJ-DNZ0001",
@@ -7218,8 +7185,7 @@ describe("NonIntegratedDetailClient", () => {
           copiedFromProductId: "DNZ0001-source",
           copiedFromSpu: "DNZ0001",
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7270,9 +7236,7 @@ describe("NonIntegratedDetailClient", () => {
   it("keeps the brand field locked after an original product is created", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "SZ0230-brand-locked",
           spu: "SZ0230",
@@ -7281,8 +7245,7 @@ describe("NonIntegratedDetailClient", () => {
           copiedFromProductId: undefined,
           copiedFromSpu: undefined,
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient mode="edit" productId="SZ0230-brand-locked" />,
@@ -7314,16 +7277,13 @@ describe("NonIntegratedDetailClient", () => {
   it("opens a larger preview in edit mode when clicking the product image", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-1",
           createdAt: "2026-04-15T10:00:00.000Z",
           updatedAt: "2026-04-15T10:00:00.000Z",
         }),
-      ]),
-    );
+      ]);
 
     render(<NonIntegratedDetailClient mode="edit" productId="DNZ0001-1" />);
 
@@ -7336,14 +7296,11 @@ describe("NonIntegratedDetailClient", () => {
   it("matches product photo nine-view uploads by file name and keeps detail images separate", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-product-photo-batch",
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7409,14 +7366,11 @@ describe("NonIntegratedDetailClient", () => {
   it("uploads directly when clicking an empty nine-view slot", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-product-photo-slot-upload",
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7440,14 +7394,11 @@ describe("NonIntegratedDetailClient", () => {
   it("uploads grouped product photos from the empty detail panel", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-product-photo-empty-detail-upload",
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7482,16 +7433,13 @@ describe("NonIntegratedDetailClient", () => {
       model3dDataUrl: "",
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-product-photo-sku-styles",
           skuItems: [createSkuItem({ model: "SZ0230K01" })],
           styleDetails: ["K01", "K02", "K03"].map(createStyleDetail),
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7605,9 +7553,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("keeps 3D preview gizmo selection and undo behavior aligned with asset center", async () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-3d-gizmo-undo",
           skuItems: [
@@ -7620,8 +7566,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7704,9 +7649,7 @@ describe("NonIntegratedDetailClient", () => {
   });
 
   it("passes SKU hole points into 3D preview and snaps moved nodes to nearby holes", async () => {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-3d-hole-snap",
           skuItems: [
@@ -7743,8 +7686,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7827,9 +7769,7 @@ describe("NonIntegratedDetailClient", () => {
       roughness: 0.35,
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-3d-material-assignment",
           skuItems: [
@@ -7844,8 +7784,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -7967,9 +7906,7 @@ describe("NonIntegratedDetailClient", () => {
       color: "#111111",
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-3d-multi-node-material",
           skuItems: [
@@ -7984,8 +7921,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -8123,9 +8059,7 @@ describe("NonIntegratedDetailClient", () => {
       color: "#8b5a2b",
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-3d-uv-settings",
           skuItems: [
@@ -8140,8 +8074,7 @@ describe("NonIntegratedDetailClient", () => {
             }),
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -8247,10 +8180,7 @@ describe("NonIntegratedDetailClient", () => {
         }),
       ],
     });
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([product]),
-    );
+    replaceNonIntegratedProducts([product]);
 
     const deniedRender = render(
       <NonIntegratedDetailClient
@@ -8309,9 +8239,7 @@ describe("NonIntegratedDetailClient", () => {
       packagingModel3dDataUrl: "",
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-packaging-sku-styles",
           skuItems: [
@@ -8320,8 +8248,7 @@ describe("NonIntegratedDetailClient", () => {
           ],
           styleDetails: ["K01", "K02", "K03"].map(createStyleDetail),
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -8367,9 +8294,7 @@ describe("NonIntegratedDetailClient", () => {
       color: "#111111",
     });
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-packaging-3d-material",
           skuItems: [
@@ -8397,8 +8322,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
@@ -8572,9 +8496,7 @@ describe("NonIntegratedDetailClient", () => {
   it("keeps the nine-view tab selectable when only detail photos exist", async () => {
     const actor = userEvent.setup();
 
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify([
+    replaceNonIntegratedProducts([
         createProductRecord({
           id: "DNZ0001-nine-view-empty",
           spu: "SZ0230",
@@ -8591,8 +8513,7 @@ describe("NonIntegratedDetailClient", () => {
             },
           ],
         }),
-      ]),
-    );
+      ]);
 
     render(
       <NonIntegratedDetailClient
diff --git a/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.tsx b/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.tsx
index 74a3a817..867cccd4 100644
--- a/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.tsx
+++ b/furniture-3d-system/src/app/intake/non-integrated/NonIntegratedDetailClient.tsx
@@ -91,9 +91,16 @@ import {
   findNonIntegratedBomSteelFrameOption,
   type NonIntegratedBomSteelFrameOption,
 } from "@/lib/non-integrated-bom-steel-materials";
+import {
+  STEEL_FRAME_LIBRARY_CHANGED_EVENT,
+  STEEL_FRAME_REFERENCE_LIBRARY_TYPE,
+  decodeSteelFrameReferenceLibraryRows,
+} from "@/lib/steel-frame-library";
 import {
   EDGE_BANDING_LIBRARY_CHANGED_EVENT,
+  EDGE_BANDING_REFERENCE_LIBRARY_TYPE,
   buildNonIntegratedBomEdgeBandingOptions,
+  decodeEdgeBandingReferenceLibraryItems,
   filterNonIntegratedBomEdgeBandingOptions,
   parseBoardThicknessMmFromText,
   type NonIntegratedBomEdgeBandingOption,
@@ -104,16 +111,21 @@ import {
 } from "@/lib/non-integrated-category-options";
 import {
   ACCESSORY_LIBRARY_CHANGED_EVENT,
+  ACCESSORY_REFERENCE_LIBRARY_TYPE,
   applyNonIntegratedBomAccessoryMetrics,
   buildNonIntegratedBomAccessoryOptions,
+  decodeAccessoryReferenceLibraryRows,
   findNonIntegratedBomAccessoryOption,
   type NonIntegratedBomAccessoryOption,
   type NonIntegratedBomAccessoryMatchKey,
 } from "@/lib/accessory-library";
+import { listIntakeReferenceLibraryItems } from "@/lib/intake-reference-library-client";
 import {
   PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT,
+  PACKAGING_MATERIAL_REFERENCE_LIBRARY_TYPE,
   applyNonIntegratedBomPackagingMaterialMetrics,
   buildNonIntegratedBomPackagingMaterialOptions,
+  decodePackagingMaterialReferenceLibraryRows,
   findNonIntegratedBomPackagingMaterialOption,
   type NonIntegratedBomPackagingMaterialMatchKey,
   type NonIntegratedBomPackagingMaterialOption,
@@ -158,7 +170,7 @@ import RawMaterialLibraryPanel from "@/app/intake/RawMaterialLibraryPanel";
 import {
   SPU_RULE_LIBRARY_UPDATED_EVENT,
   getEstimatedSpuAssignment,
-  reserveSpuAssignmentForProductCategory,
+  syncSpuRuleLibraryRulesFromServer,
 } from "../spuRuleLibraryLogic";
 import type { SeriesDraftSkuFields } from "../seriesComponentDetails";
 import ApprovalWorkflowWorkspace from "./ApprovalWorkflowWorkspace";
@@ -11482,8 +11494,25 @@ export default function NonIntegratedDetailClient({
   }, []);
 
   useEffect(() => {
-    const loadSteelFrameOptions = () => {
-      setSteelFrameOptions(buildNonIntegratedBomSteelFrameOptions());
+    let isCancelled = false;
+
+    const loadSteelFrameOptions = async () => {
+      try {
+        const rows = await listIntakeReferenceLibraryItems(
+          STEEL_FRAME_REFERENCE_LIBRARY_TYPE,
+        );
+        if (isCancelled) return;
+        setSteelFrameOptions(
+          buildNonIntegratedBomSteelFrameOptions(
+            decodeSteelFrameReferenceLibraryRows(rows),
+          ),
+        );
+      } catch (error) {
+        if (!isCancelled) {
+          console.warn("钢架资料库读取失败，BOM 钢架匹配暂不可用。", error);
+          setSteelFrameOptions([]);
+        }
+      }
     };
 
     loadSteelFrameOptions();
@@ -11491,17 +11520,41 @@ export default function NonIntegratedDetailClient({
     if (typeof window === "undefined") return;
 
     window.addEventListener("focus", loadSteelFrameOptions);
-    window.addEventListener("storage", loadSteelFrameOptions);
+    window.addEventListener(
+      STEEL_FRAME_LIBRARY_CHANGED_EVENT,
+      loadSteelFrameOptions,
+    );
 
     return () => {
+      isCancelled = true;
       window.removeEventListener("focus", loadSteelFrameOptions);
-      window.removeEventListener("storage", loadSteelFrameOptions);
+      window.removeEventListener(
+        STEEL_FRAME_LIBRARY_CHANGED_EVENT,
+        loadSteelFrameOptions,
+      );
     };
   }, []);
 
   useEffect(() => {
-    const loadEdgeBandingOptions = () => {
-      setEdgeBandingOptions(buildNonIntegratedBomEdgeBandingOptions());
+    let isCancelled = false;
+
+    const loadEdgeBandingOptions = async () => {
+      try {
+        const rows = await listIntakeReferenceLibraryItems(
+          EDGE_BANDING_REFERENCE_LIBRARY_TYPE,
+        );
+        if (isCancelled) return;
+        setEdgeBandingOptions(
+          buildNonIntegratedBomEdgeBandingOptions(
+            decodeEdgeBandingReferenceLibraryItems(rows),
+          ),
+        );
+      } catch (error) {
+        if (!isCancelled) {
+          console.warn("封边资料库读取失败，BOM 封边匹配暂不可用。", error);
+          setEdgeBandingOptions([]);
+        }
+      }
     };
 
     loadEdgeBandingOptions();
@@ -11509,15 +11562,14 @@ export default function NonIntegratedDetailClient({
     if (typeof window === "undefined") return;
 
     window.addEventListener("focus", loadEdgeBandingOptions);
-    window.addEventListener("storage", loadEdgeBandingOptions);
     window.addEventListener(
       EDGE_BANDING_LIBRARY_CHANGED_EVENT,
       loadEdgeBandingOptions,
     );
 
     return () => {
+      isCancelled = true;
       window.removeEventListener("focus", loadEdgeBandingOptions);
-      window.removeEventListener("storage", loadEdgeBandingOptions);
       window.removeEventListener(
         EDGE_BANDING_LIBRARY_CHANGED_EVENT,
         loadEdgeBandingOptions,
@@ -11526,8 +11578,25 @@ export default function NonIntegratedDetailClient({
   }, []);
 
   useEffect(() => {
-    const loadAccessoryOptions = () => {
-      setAccessoryOptions(buildNonIntegratedBomAccessoryOptions());
+    let isCancelled = false;
+
+    const loadAccessoryOptions = async () => {
+      try {
+        const rows = await listIntakeReferenceLibraryItems(
+          ACCESSORY_REFERENCE_LIBRARY_TYPE,
+        );
+        if (isCancelled) return;
+        setAccessoryOptions(
+          buildNonIntegratedBomAccessoryOptions(
+            decodeAccessoryReferenceLibraryRows(rows),
+          ),
+        );
+      } catch (error) {
+        if (!isCancelled) {
+          console.warn("配件资料库读取失败，BOM 配件匹配暂不可用。", error);
+          setAccessoryOptions([]);
+        }
+      }
     };
 
     loadAccessoryOptions();
@@ -11535,15 +11604,14 @@ export default function NonIntegratedDetailClient({
     if (typeof window === "undefined") return;
 
     window.addEventListener("focus", loadAccessoryOptions);
-    window.addEventListener("storage", loadAccessoryOptions);
     window.addEventListener(
       ACCESSORY_LIBRARY_CHANGED_EVENT,
       loadAccessoryOptions,
     );
 
     return () => {
+      isCancelled = true;
       window.removeEventListener("focus", loadAccessoryOptions);
-      window.removeEventListener("storage", loadAccessoryOptions);
       window.removeEventListener(
         ACCESSORY_LIBRARY_CHANGED_EVENT,
         loadAccessoryOptions,
@@ -11552,10 +11620,25 @@ export default function NonIntegratedDetailClient({
   }, []);
 
   useEffect(() => {
-    const loadPackagingMaterialOptions = () => {
-      setPackagingMaterialOptions(
-        buildNonIntegratedBomPackagingMaterialOptions(),
-      );
+    let isCancelled = false;
+
+    const loadPackagingMaterialOptions = async () => {
+      try {
+        const rows = await listIntakeReferenceLibraryItems(
+          PACKAGING_MATERIAL_REFERENCE_LIBRARY_TYPE,
+        );
+        if (isCancelled) return;
+        setPackagingMaterialOptions(
+          buildNonIntegratedBomPackagingMaterialOptions(
+            decodePackagingMaterialReferenceLibraryRows(rows),
+          ),
+        );
+      } catch (error) {
+        if (!isCancelled) {
+          console.warn("包装材料库读取失败，BOM 包材匹配暂不可用。", error);
+          setPackagingMaterialOptions([]);
+        }
+      }
     };
 
     loadPackagingMaterialOptions();
@@ -11563,15 +11646,14 @@ export default function NonIntegratedDetailClient({
     if (typeof window === "undefined") return;
 
     window.addEventListener("focus", loadPackagingMaterialOptions);
-    window.addEventListener("storage", loadPackagingMaterialOptions);
     window.addEventListener(
       PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT,
       loadPackagingMaterialOptions,
     );
 
     return () => {
+      isCancelled = true;
       window.removeEventListener("focus", loadPackagingMaterialOptions);
-      window.removeEventListener("storage", loadPackagingMaterialOptions);
       window.removeEventListener(
         PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT,
         loadPackagingMaterialOptions,
@@ -12330,6 +12412,22 @@ export default function NonIntegratedDetailClient({
     };
   }, []);
 
+  useEffect(() => {
+    let isMounted = true;
+    syncSpuRuleLibraryRulesFromServer()
+      .then((snapshot) => {
+        if (!isMounted || !snapshot.hasServerRows) return;
+        setSpuEstimateRefreshToken((current) => current + 1);
+      })
+      .catch(() => {
+        // 服务端规则库暂不可用时，继续使用当前兼容缓存或内置规则，避免阻断开品录入。
+      });
+
+    return () => {
+      isMounted = false;
+    };
+  }, []);
+
   const isSkuContentReadOnly = isReadOnly;
   const activeSkuBatchNo = activeSkuBatch === "all" ? null : activeSkuBatch;
   const formalSpuValue = formValues.spu.trim();
@@ -12573,10 +12671,10 @@ export default function NonIntegratedDetailClient({
       buildProductLimitRows(
         derivedSkuItems,
         productLimitRows,
-        formValues.spu,
+        skuCodePreviewSpu,
         sharedProductImage,
       ),
-    [derivedSkuItems, formValues.spu, productLimitRows, sharedProductImage],
+    [derivedSkuItems, productLimitRows, sharedProductImage, skuCodePreviewSpu],
   );
   const productSampleMeasurementRows = useMemo(
     () =>
@@ -15356,6 +15454,11 @@ export default function NonIntegratedDetailClient({
               processTemplate: STOCK_PRODUCT_LABEL,
             }
           : formValuesRef.current;
+        const formalSpuAssignmentProductCategory =
+          !isStockProductRecord && !nextFormValuesForPayload.spu.trim()
+            ? nextFormValuesForPayload.productCategory.trim() ||
+              nextOpeningReference.productCategory.trim()
+            : "";
         const nextProduct = await normalizeProductAssetsForStorage(
           buildProductPayload(
             productId,
@@ -15397,8 +15500,17 @@ export default function NonIntegratedDetailClient({
           ? await saveSharedNonIntegratedProduct(nextProduct, {
               workspaceCategory:
                 overrides?.workspaceCategory ?? activePermissionWorkspaceCategory,
+              formalSpuAssignmentProductCategory,
             })
           : saveNonIntegratedProduct(nextProduct);
+        if (!formValuesRef.current.spu.trim() && savedProduct.spu.trim()) {
+          setFormValuesAndRef((current) => ({
+            ...current,
+            spu: savedProduct.spu.trim(),
+            productCode: current.productCode || savedProduct.spu.trim(),
+          }));
+          setSpuEstimateRefreshToken((current) => current + 1);
+        }
         if (
           nextDocumentWorkspaceConfirmations[
             PATENT_APPLICATION_WORKSPACE_CATEGORY
@@ -17121,7 +17233,7 @@ export default function NonIntegratedDetailClient({
     );
   }
 
-  function assignFormalSpuForSku() {
+  function ensureFormalSpuReadyForSkuEdit() {
     const currentSpu = formValuesRef.current.spu.trim();
     if (currentSpu) return currentSpu;
 
@@ -17138,44 +17250,16 @@ export default function NonIntegratedDetailClient({
       return "";
     }
 
-    const assignment = reserveSpuAssignmentForProductCategory({
-      productCategory,
-      products: listNonIntegratedProducts(),
-      currentProductId: productId,
-    });
-
-    if (!assignment) {
+    if (!estimatedFormalSpu) {
       setSaveMessage("当前类目还没有配置SPU规则，请先维护SPU规则库。");
       setSaveMessageType("error");
       return "";
     }
 
-    const nextBrand =
-      normalizeNonIntegratedBrand(formValuesRef.current.brand) ||
-      normalizeNonIntegratedBrand(openingReferenceRef.current.brand) ||
-      NON_INTEGRATED_DEFAULT_BRAND;
-    const formalSpu = applyBrandPrefixToNonIntegratedCode(
-      assignment.spu,
-      nextBrand,
-    );
-
-    setFormValuesAndRef((current) => ({
-      ...current,
-      spu: formalSpu,
-      productCode: current.productCode || formalSpu,
-      salesCategory: current.salesCategory || salesCategory,
-      productCategory: current.productCategory || productCategory,
-    }));
-    setOpeningReferenceAndRef((current) => ({
-      ...current,
-      salesCategory: current.salesCategory || salesCategory,
-      productCategory: current.productCategory || productCategory,
-    }));
-    setSpuEstimateRefreshToken((current) => current + 1);
-    setSaveMessage(`SPU已生效：${formalSpu}`);
+    setSaveMessage(`正式SPU将在保存时生效：${estimatedFormalSpu}`);
     setSaveMessageType("success");
 
-    return formalSpu;
+    return estimatedFormalSpu;
   }
 
   function updateField(key: keyof FormValues, value: string) {
@@ -17314,13 +17398,13 @@ export default function NonIntegratedDetailClient({
     scheduleAutoSave();
   }
 
-  function updateSkuItem(
+  async function updateSkuItem(
     id: string,
     key: keyof NonIntegratedSkuItem,
     value: string | number,
   ) {
     if (isReadOnly) return;
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) => {
       const targetItem = current.find((item) => item.id === id);
@@ -17384,7 +17468,7 @@ export default function NonIntegratedDetailClient({
   function handleBarcodeScanDetected(value: string) {
     if (!barcodeScannerSkuId) return;
 
-    updateSkuItem(barcodeScannerSkuId, "barcode", value.trim().toUpperCase());
+    void updateSkuItem(barcodeScannerSkuId, "barcode", value.trim().toUpperCase());
     setBarcodeScannerSkuId(null);
   }
 
@@ -17405,7 +17489,7 @@ export default function NonIntegratedDetailClient({
     const nextDerivedItem = deriveSkuItem(
       nextItem,
       index,
-      formValues.spu,
+      skuCodePreviewSpu,
       formValues,
     );
 
@@ -17419,9 +17503,9 @@ export default function NonIntegratedDetailClient({
     };
   }
 
-  function updateSkuSupplierName(id: string, value: string) {
+  async function updateSkuSupplierName(id: string, value: string) {
     if (isReadOnly) return;
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) =>
       current.map((item, index) => {
@@ -17435,9 +17519,9 @@ export default function NonIntegratedDetailClient({
     setSaveMessageType("success");
   }
 
-  function confirmSkuSupplierName(id: string) {
+  async function confirmSkuSupplierName(id: string) {
     if (isReadOnly) return;
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) =>
       current.map((item, index) => {
@@ -17452,9 +17536,9 @@ export default function NonIntegratedDetailClient({
     setSaveMessageType("success");
   }
 
-  function updateSkuExecuteStandard(id: string, value: string) {
+  async function updateSkuExecuteStandard(id: string, value: string) {
     if (isReadOnly) return;
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) =>
       current.map((item) => {
@@ -17468,9 +17552,9 @@ export default function NonIntegratedDetailClient({
     setSaveMessageType("success");
   }
 
-  function confirmSkuExecuteStandard(id: string) {
+  async function confirmSkuExecuteStandard(id: string) {
     if (isReadOnly) return;
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) =>
       current.map((item) => {
@@ -19234,7 +19318,7 @@ export default function NonIntegratedDetailClient({
       return;
     }
 
-    const derivedItem = deriveSkuItem(item, index, formValues.spu, formValues);
+    const derivedItem = deriveSkuItem(item, index, skuCodePreviewSpu, formValues);
     setSkuImagePreview({
       src: item.image,
       alt: derivedItem.skuCode || item.model || "SKU图片",
@@ -21310,7 +21394,7 @@ export default function NonIntegratedDetailClient({
     }
   }
 
-  function handleAddSku(targetBatchNo = skuBatchCount) {
+  async function handleAddSku(targetBatchNo = skuBatchCount) {
     if (isSkuContentReadOnly) return;
     if (isSkuBatchFactoryConfirmed(targetBatchNo)) {
       setSaveMessage(
@@ -21329,7 +21413,7 @@ export default function NonIntegratedDetailClient({
       setSaveMessageType("error");
       return;
     }
-    if (!assignFormalSpuForSku()) return;
+    if (!(await ensureFormalSpuReadyForSkuEdit())) return;
 
     setSkuItems((current) => {
       const lastItem = current[current.length - 1];
@@ -21367,7 +21451,7 @@ export default function NonIntegratedDetailClient({
       return;
     }
 
-    const formalSpu = assignFormalSpuForSku();
+    const formalSpu = await ensureFormalSpuReadyForSkuEdit();
     if (!formalSpu) return;
 
     const nextSkuItems = buildSeriesSkuItemsFromDraftSkus(
@@ -21786,7 +21870,7 @@ export default function NonIntegratedDetailClient({
       if (rows.length === 0) {
         throw new Error("上传资料中没有可导入的 SKU 行");
       }
-      if (!assignFormalSpuForSku()) {
+      if (!(await ensureFormalSpuReadyForSkuEdit())) {
         throw new Error("请先生成正式SPU后再导入SKU资料");
       }
 
@@ -22615,6 +22699,7 @@ export default function NonIntegratedDetailClient({
         ...formValues.adaptableBrands,
       ]).filter((brand) => BRAND_OPTIONS.includes(brand));
       let createFormalSpu = isStockProductCreate ? stockSpu : "";
+      let formalSpuAssignmentProductCategory = "";
 
       if (!isStockProductCreate) {
         const productCategory =
@@ -22626,19 +22711,7 @@ export default function NonIntegratedDetailClient({
         if (!salesCategory || !productCategory) {
           throw new Error("请先填写品类和类目，系统会按SPU规则库生成正式SPU。");
         }
-        const assignment = reserveSpuAssignmentForProductCategory({
-          productCategory,
-          products: listNonIntegratedProducts(),
-        });
-
-        if (!assignment) {
-          throw new Error("当前类目还没有配置SPU规则，请先维护SPU规则库。");
-        }
-
-        createFormalSpu = applyBrandPrefixToNonIntegratedCode(
-          assignment.spu,
-          createBrand,
-        );
+        formalSpuAssignmentProductCategory = productCategory;
       }
 
       const nextOpeningReference = normalizeNonIntegratedOpeningReference({
@@ -22716,8 +22789,17 @@ export default function NonIntegratedDetailClient({
         { attachToExistingProduct: false },
       );
       const savedProduct = shouldUseRemoteAssetStorage()
-        ? await saveSharedNonIntegratedProduct(normalizedProduct)
+        ? await saveSharedNonIntegratedProduct(normalizedProduct, {
+            formalSpuAssignmentProductCategory,
+          })
         : saveNonIntegratedProduct(normalizedProduct);
+      if (!isStockProductCreate) {
+        void syncSpuRuleLibraryRulesFromServer()
+          .then(() => setSpuEstimateRefreshToken((current) => current + 1))
+          .catch(() => {
+            // 正式 SPU 由后端保存事务分配；规则库缓存刷新失败不影响本次创建。
+          });
+      }
       const nextProductUrl = `/intake/non-integrated/${encodeURIComponent(
         savedProduct.id,
       )}`;
@@ -29119,17 +29201,26 @@ function renderFactoryQualityWorkspace() {
                                   onChange={() => undefined}
                                 />
                               ) : (
-                                <BasicField
-                                  label="年份"
-                                  value={
-                                    openingReference.year ||
-                                    formValues.year ||
-                                    getAutoProductYear()
-                                  }
-                                  readOnly
-                                  compact
-                                  onChange={() => undefined}
-                                />
+                                <>
+                                  <BasicField
+                                    label="SPU"
+                                    value={seriesCreateEstimatedSpuLabel}
+                                    readOnly
+                                    compact
+                                    onChange={() => undefined}
+                                  />
+                                  <BasicField
+                                    label="年份"
+                                    value={
+                                      openingReference.year ||
+                                      formValues.year ||
+                                      getAutoProductYear()
+                                    }
+                                    readOnly
+                                    compact
+                                    onChange={() => undefined}
+                                  />
+                                </>
                               )}
                               <AdaptableBrandField
                                 value={formValues.adaptableBrands}
diff --git a/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedApi.ts b/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedApi.ts
index 7031c2f1..a9a2909f 100644
--- a/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedApi.ts
+++ b/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedApi.ts
@@ -258,7 +258,10 @@ export async function getSharedNonIntegratedProductById(id: string) {
 
 export async function saveSharedNonIntegratedProduct(
   product: NonIntegratedProductRecord,
-  options: { workspaceCategory?: string | null } = {},
+  options: {
+    workspaceCategory?: string | null
+    formalSpuAssignmentProductCategory?: string | null
+  } = {},
 ) {
   const response = await fetchWithTimeout(`/api/intake/non-integrated/${encodeURIComponent(product.id)}`, {
     method: 'PUT',
@@ -270,6 +273,12 @@ export async function saveSharedNonIntegratedProduct(
       ...(options.workspaceCategory
         ? { workspaceCategory: options.workspaceCategory }
         : {}),
+      ...(options.formalSpuAssignmentProductCategory
+        ? {
+            formalSpuAssignmentProductCategory:
+              options.formalSpuAssignmentProductCategory,
+          }
+        : {}),
     }),
   })
 
diff --git a/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedStorage.ts b/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedStorage.ts
index ddc7e029..3ebd7e5b 100644
--- a/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedStorage.ts
+++ b/furniture-3d-system/src/app/intake/non-integrated/nonIntegratedStorage.ts
@@ -21,13 +21,10 @@ import {
 } from "@/lib/asset-variant-render-config";
 import { normalizeNonIntegratedAssetUrl } from "./nonIntegratedAssetUrl";
 
-export const NON_INTEGRATED_STORAGE_KEY = "intake.nonIntegratedProducts";
 export const NON_INTEGRATED_PRODUCTS_UPDATED =
   "intake:nonIntegratedProductsUpdated";
 export const NON_INTEGRATED_DUPLICATE_SPU_MESSAGE =
   "SPU 已存在，不能重复新建。删除原记录后才可以重新新建。";
-export const NON_INTEGRATED_STORAGE_LIMIT_MESSAGE =
-  "本地测试存储空间已满，当前上传文件过大或过多，保存失败。";
 export const NON_INTEGRATED_DEFAULT_BRAND = "其他品牌-普通大货";
 
 export const NON_INTEGRATED_BRAND_OPTIONS = [
@@ -830,9 +827,18 @@ export function getNonIntegratedProductDisplayName(
   );
 }
 
-function canUseStorage() {
+type NonIntegratedLocalCompatibilityStorageGlobal = typeof globalThis & {
+  __NON_INTEGRATED_LOCAL_COMPATIBILITY_STORAGE__?: boolean;
+};
+
+let nonIntegratedRuntimeProducts: NonIntegratedProductRecord[] = [];
+
+function canUseRuntimeCompatibilityStore() {
+  if (process.env.NODE_ENV === "test") return true;
+
   return (
-    typeof window !== "undefined" && typeof window.localStorage !== "undefined"
+    (globalThis as NonIntegratedLocalCompatibilityStorageGlobal)
+      .__NON_INTEGRATED_LOCAL_COMPATIBILITY_STORAGE__ === true
   );
 }
 
@@ -1310,7 +1316,7 @@ function normalizeSkuItem(
     image: normalizeNonIntegratedAssetUrl(normalizeString(item.image)),
     imageName: normalizeString(item.imageName),
     model: normalizeString(item.model),
-    skuCode: normalizeString(item.skuCode),
+    skuCode: normalizeString(item.skuCode).trim().toUpperCase(),
     setCount:
       typeof item.setCount === "string"
         ? item.setCount
@@ -1318,7 +1324,7 @@ function normalizeSkuItem(
           ? String(item.setCount)
           : "1",
     specName: normalizeString(item.specName),
-    barcode: normalizeString(item.barcode),
+    barcode: normalizeString(item.barcode).trim().toUpperCase(),
     size: normalizeString(item.size),
     color: normalizeString(item.color),
     material: normalizeString(item.material),
@@ -2259,22 +2265,12 @@ export function normalizeNonIntegratedProductRecord(
 }
 
 export function listNonIntegratedProducts(): NonIntegratedProductRecord[] {
-  if (!canUseStorage()) return [];
+  if (!canUseRuntimeCompatibilityStore()) return [];
 
-  try {
-    const rawValue = window.localStorage.getItem(NON_INTEGRATED_STORAGE_KEY);
-    if (!rawValue) return [];
-
-    const parsedValue = JSON.parse(rawValue);
-    if (!Array.isArray(parsedValue)) return [];
-
-    return parsedValue
-      .map((item) => toProductRecord(item))
-      .filter((item): item is NonIntegratedProductRecord => item !== null)
-      .sort((left, right) => right.createdAt.localeCompare(left.createdAt));
-  } catch {
-    return [];
-  }
+  return nonIntegratedRuntimeProducts
+    .map((item) => toProductRecord(item))
+    .filter((item): item is NonIntegratedProductRecord => item !== null)
+    .sort((left, right) => right.createdAt.localeCompare(left.createdAt));
 }
 
 export function getNonIntegratedProductById(id: string) {
@@ -2330,24 +2326,11 @@ export function buildNonIntegratedPackagingInnerItemId() {
 }
 
 function writeNonIntegratedProducts(products: NonIntegratedProductRecord[]) {
-  if (!canUseStorage()) return;
+  if (!canUseRuntimeCompatibilityStore()) return;
 
-  try {
-    window.localStorage.setItem(
-      NON_INTEGRATED_STORAGE_KEY,
-      JSON.stringify(products),
-    );
-  } catch (error) {
-    if (
-      error instanceof DOMException &&
-      (error.name === "QuotaExceededError" ||
-        error.name === "NS_ERROR_DOM_QUOTA_REACHED")
-    ) {
-      throw new Error(NON_INTEGRATED_STORAGE_LIMIT_MESSAGE);
-    }
-
-    throw error;
-  }
+  nonIntegratedRuntimeProducts = products
+    .map((item) => toProductRecord(item))
+    .filter((item): item is NonIntegratedProductRecord => item !== null);
 }
 
 export function saveNonIntegratedProduct(
@@ -2355,7 +2338,7 @@ export function saveNonIntegratedProduct(
     updatedAt?: string;
   },
 ): NonIntegratedProductRecord {
-  if (!canUseStorage()) {
+  if (!canUseRuntimeCompatibilityStore()) {
     const openingReference = normalizeNonIntegratedOpeningReference(
       product.openingReference,
     );
@@ -2622,14 +2605,18 @@ export function createCopiedNonIntegratedProduct(
 export function replaceNonIntegratedProducts(
   products: NonIntegratedProductRecord[],
 ) {
-  if (!canUseStorage()) return;
+  if (!canUseRuntimeCompatibilityStore()) return;
 
   writeNonIntegratedProducts(products);
   emitProductsUpdated();
 }
 
+export function clearNonIntegratedProductsRuntimeCache() {
+  nonIntegratedRuntimeProducts = [];
+}
+
 export function deleteNonIntegratedProduct(id: string) {
-  if (!canUseStorage()) return;
+  if (!canUseRuntimeCompatibilityStore()) return;
 
   const nextList = listNonIntegratedProducts().filter((item) => item.id !== id);
   writeNonIntegratedProducts(nextList);
diff --git a/furniture-3d-system/src/app/intake/page.tsx b/furniture-3d-system/src/app/intake/page.tsx
index 8f48e35e..12a463af 100644
--- a/furniture-3d-system/src/app/intake/page.tsx
+++ b/furniture-3d-system/src/app/intake/page.tsx
@@ -7,6 +7,7 @@ import { intakeNodePermissionSettingsService } from '@/server/services/intake-no
 import { intakeNonIntegratedProductService } from '@/server/services/intake-non-integrated-product.service'
 import { materialService } from '@/server/services/material.service'
 import { warehouseService } from '@/server/services/warehouse.service'
+import { readPreSkuTextField } from '@/lib/open-product/platform-view'
 import IntakeClient from './IntakeClient'
 import { readPreSkuComponentDetails, readPreSkuSkuFields } from './seriesComponentDetails'
 import {
@@ -15,26 +16,6 @@ import {
   type NonIntegratedSkuHolePoint,
 } from './non-integrated/nonIntegratedStorage'
 
-function readPreSkuTextField(
-  preSku: {
-    displaySummary?: Record<string, unknown> | null
-    familySelection?: Record<string, unknown> | null
-  },
-  key: string,
-) {
-  const displayValue = preSku.displaySummary?.[key]
-  if (typeof displayValue === 'string' && displayValue.trim().length > 0) {
-    return displayValue.trim()
-  }
-
-  const familyValue = preSku.familySelection?.[key]
-  if (typeof familyValue === 'string' && familyValue.trim().length > 0) {
-    return familyValue.trim()
-  }
-
-  return ''
-}
-
 function mapWorkbenchStatus(status: string) {
   if (status === 'FORMALIZED') return '已完成'
   if (status === 'READY_FOR_INTAKE') return '待执行'
@@ -272,35 +253,36 @@ export default async function IntakePage({
   )
 
   const eligibleSkuList = eligibleDraftGroupDetails.flatMap((detail) =>
-    detail.preSkus.map((preSku, index) => ({
-      id: preSku.id,
-      draftGroupId: detail.draftGroup.id,
-      spuCode:
-        readPreSkuTextField(preSku, 'spuCode') ||
-        readPreSkuTextField(preSku, 'spu') ||
-        detail.draftGroup.code ||
-        `SPU-${String(index + 1).padStart(3, '0')}`,
-      code:
-        readPreSkuTextField(preSku, 'draftSkuCode') ||
-        readPreSkuTextField(preSku, 'skuSequenceCode') ||
-        readPreSkuTextField(preSku, 'skuCode') ||
-        preSku.customName ||
-        preSku.defaultName,
-      name: preSku.customName || preSku.defaultName,
-      seriesName:
-        readPreSkuTextField(preSku, 'seriesName') ||
-        readDraftGroupSeriesNameForIntake(detail.draftGroup) ||
-        detail.draftGroup.name,
-      draftGroupName: detail.draftGroup.name,
-      status: mapWorkbenchStatus(preSku.status),
-      componentCodes: preSku.componentCodes ?? [],
-      componentDetails: readPreSkuComponentDetails(preSku),
-      holePoints: buildSkuHolePointsFromVariantSelection(preSku),
-      skuFields: readPreSkuSkuFields(preSku),
-      model3dPreviewNodes: preSku.previewNodes.length
-        ? preSku.previewNodes
-        : preSku.assemblyWorkspace?.nodes ?? [],
-    })),
+    detail.preSkus.map((preSku, index) => {
+      const skuFields = readPreSkuSkuFields(preSku)
+      return {
+        id: preSku.id,
+        draftGroupId: detail.draftGroup.id,
+        spuCode:
+          readPreSkuTextField(preSku, 'spuCode') ||
+          readPreSkuTextField(preSku, 'spu') ||
+          detail.draftGroup.code ||
+          `SPU-${String(index + 1).padStart(3, '0')}`,
+        code:
+          skuFields.skuCode ||
+          preSku.customName ||
+          preSku.defaultName,
+        name: preSku.customName || preSku.defaultName,
+        seriesName:
+          readPreSkuTextField(preSku, 'seriesName') ||
+          detail.draftGroup.assetSeriesName ||
+          detail.draftGroup.name,
+        draftGroupName: detail.draftGroup.name,
+        status: mapWorkbenchStatus(preSku.status),
+        componentCodes: preSku.componentCodes ?? [],
+        componentDetails: readPreSkuComponentDetails(preSku),
+        holePoints: buildSkuHolePointsFromVariantSelection(preSku),
+        skuFields,
+        model3dPreviewNodes: preSku.previewNodes.length
+          ? preSku.previewNodes
+          : preSku.assemblyWorkspace?.nodes ?? [],
+      }
+    }),
   )
 
   const sourceWorkspace =
diff --git a/furniture-3d-system/src/app/intake/productPatentStorage.ts b/furniture-3d-system/src/app/intake/productPatentStorage.ts
index f8b5f47b..4344312a 100644
--- a/furniture-3d-system/src/app/intake/productPatentStorage.ts
+++ b/furniture-3d-system/src/app/intake/productPatentStorage.ts
@@ -8,8 +8,6 @@ import {
   type NonIntegratedProductRecord,
 } from "./non-integrated/nonIntegratedStorage";
 
-export const PRODUCT_PATENT_STORAGE_KEY = "intake.productPatentRecords";
-
 export const PRODUCT_PATENT_FEE_YEARS = [
   "第1年",
   "第2年",
@@ -80,6 +78,8 @@ export type ProductPatentRecord = {
   updatedAt: string;
 };
 
+let productPatentRuntimeRecords: ProductPatentRecord[] = [];
+
 function isPatentStatus(value: unknown): value is ProductPatentStatus {
   return (
     value === "待确认" ||
@@ -496,37 +496,143 @@ export function normalizeProductPatentRecord(
   });
 }
 
-export function listProductPatentRecords(): ProductPatentRecord[] {
-  if (typeof window === "undefined") return [];
+function getProductPatentRecordIdentity(record: ProductPatentRecord) {
+  return record.patentNo || record.applicationNo || record.patentName.trim();
+}
 
-  try {
-    const parsed = JSON.parse(
-      window.localStorage.getItem(PRODUCT_PATENT_STORAGE_KEY) || "[]",
-    );
-    if (!Array.isArray(parsed)) return [];
-    return parsed
-      .map((item) => normalizeProductPatentRecord(item))
-      .filter((item): item is ProductPatentRecord => Boolean(item));
-  } catch {
-    return [];
-  }
+function normalizeProductPatentIdentity(record: ProductPatentRecord): ProductPatentRecord {
+  const patentGroupKey = record.patentGroupKey.trim().toUpperCase();
+  const normalizedId = /^patent-\d+-[a-z0-9]+$/i.test(record.id.trim()) && patentGroupKey
+    ? `product-patent-group-${patentGroupKey}`
+    : record.id.trim();
+
+  return {
+    ...record,
+    id: normalizedId,
+    patentGroupKey,
+    productId: record.productId.trim(),
+    linkedProductIds: Array.from(
+      new Set(record.linkedProductIds.map((item) => item.trim()).filter(Boolean)),
+    ),
+    linkedSpus: Array.from(
+      new Set(
+        record.linkedSpus
+          .map((item) => item.trim().toUpperCase())
+          .filter(Boolean),
+      ),
+    ),
+    applicationNo: record.applicationNo.trim().toUpperCase(),
+    patentNo: record.patentNo.trim().toUpperCase(),
+    spu: record.spu.trim().toUpperCase(),
+  };
+}
+
+function normalizeProductPatentRecordsForSave(records: ProductPatentRecord[]) {
+  const seenIds = new Set<string>();
+  const seenGroupKeys = new Set<string>();
+
+  return records.map((record, index) => {
+    const baseRecord = normalizeProductPatentRecord(record);
+    if (!baseRecord) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少稳定 id，已阻止保存`);
+    }
+    const normalized = normalizeProductPatentIdentity(baseRecord);
+    if (!normalized.productId) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少来源产品 id，已阻止保存`);
+    }
+    if (!normalized.patentGroupKey) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少专利分组键，已阻止保存`);
+    }
+    if (!getProductPatentRecordIdentity(normalized)) {
+      throw new Error(
+        `第 ${index + 1} 条专利台账记录缺少专利名称、申请号或专利号，已阻止保存`,
+      );
+    }
+    if (seenIds.has(normalized.id)) {
+      throw new Error(`专利台账记录 id 重复：${normalized.id}`);
+    }
+    if (seenGroupKeys.has(normalized.patentGroupKey)) {
+      throw new Error(`专利台账分组重复：${normalized.patentGroupKey}`);
+    }
+    seenIds.add(normalized.id);
+    seenGroupKeys.add(normalized.patentGroupKey);
+    return normalized;
+  });
+}
+
+export function listProductPatentRecords(): ProductPatentRecord[] {
+  return productPatentRuntimeRecords
+    .map((item) => normalizeProductPatentRecord(item))
+    .filter((item): item is ProductPatentRecord => Boolean(item));
 }
 
 export function saveProductPatentRecords(records: ProductPatentRecord[]) {
-  if (typeof window === "undefined") return records;
+  const normalizedRecords = normalizeProductPatentRecordsForSave(records);
 
-  const normalizedRecords = records
-    .map((record) => normalizeProductPatentRecord(record))
-    .filter((record): record is ProductPatentRecord => Boolean(record));
-
-  window.localStorage.setItem(
-    PRODUCT_PATENT_STORAGE_KEY,
-    JSON.stringify(normalizedRecords),
-  );
+  productPatentRuntimeRecords = normalizedRecords;
 
   return normalizedRecords;
 }
 
+export function clearProductPatentRecordsRuntimeCache() {
+  productPatentRuntimeRecords = [];
+}
+
+export async function listProductPatentRecordsFromDatabase() {
+  if (typeof window === "undefined") return [] as ProductPatentRecord[];
+  if (process.env.NODE_ENV === "test") return listProductPatentRecords();
+
+  const response = await fetch("/api/intake/product-patents", {
+    method: "GET",
+    headers: { Accept: "application/json" },
+  });
+  const payload = (await response.json().catch(() => null)) as {
+    success?: boolean;
+    data?: { records?: unknown[] };
+    error?: { message?: string };
+  } | null;
+
+  if (!response.ok || !payload?.success || !Array.isArray(payload.data?.records)) {
+    throw new Error(payload?.error?.message || "专利台账读取失败");
+  }
+
+  const records = payload.data.records
+    .map((item) => normalizeProductPatentRecord(item))
+    .filter((item): item is ProductPatentRecord => Boolean(item));
+  saveProductPatentRecords(records);
+  return records;
+}
+
+export async function saveProductPatentRecordsToDatabase(records: ProductPatentRecord[]) {
+  const normalizedRecords = normalizeProductPatentRecordsForSave(records);
+  if (typeof window === "undefined") return normalizedRecords;
+  if (process.env.NODE_ENV === "test") return saveProductPatentRecords(normalizedRecords);
+
+  const response = await fetch("/api/intake/product-patents", {
+    method: "PUT",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json",
+    },
+    body: JSON.stringify({ records: normalizedRecords }),
+  });
+  const payload = (await response.json().catch(() => null)) as {
+    success?: boolean;
+    data?: { records?: unknown[] };
+    error?: { message?: string };
+  } | null;
+
+  if (!response.ok || !payload?.success || !Array.isArray(payload.data?.records)) {
+    throw new Error(payload?.error?.message || "专利台账保存失败");
+  }
+
+  const savedRecords = payload.data.records
+    .map((item) => normalizeProductPatentRecord(item))
+    .filter((item): item is ProductPatentRecord => Boolean(item));
+  saveProductPatentRecords(savedRecords);
+  return savedRecords;
+}
+
 export function mergeProductPatentRecordsWithProducts(
   records: ProductPatentRecord[],
   products: NonIntegratedProductRecord[],
diff --git a/furniture-3d-system/src/app/intake/seriesComponentDetails.ts b/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
index 3d8e7c5b..7c73917d 100644
--- a/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
+++ b/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
@@ -31,6 +31,7 @@ export type SeriesDraftSkuFields = {
 };
 
 type PreSkuComponentDetailSource = {
+  basicInfo?: Partial<Record<keyof SeriesDraftSkuFields | "formalSkuCode", string | null>> | null;
   displaySummary?: Record<string, unknown> | null;
   familySelection?: Record<string, unknown> | null;
   bomPreview?: unknown[] | null;
@@ -55,11 +56,6 @@ function buildComponentDetailsFromCodes(
 export function readPreSkuComponentDetails(
   preSku: PreSkuComponentDetailSource,
 ): NonIntegratedSkuComponentDetail[] {
-  const fromDisplaySummary = normalizeNonIntegratedSkuComponentDetails(
-    preSku.displaySummary?.componentDetails,
-  );
-  if (fromDisplaySummary.length > 0) return fromDisplaySummary;
-
   const fromBomPreview = normalizeNonIntegratedSkuComponentDetails(
     preSku.bomPreview,
   );
@@ -84,6 +80,11 @@ function readPreSkuStringField(
   preSku: PreSkuComponentDetailSource,
   key: string,
 ) {
+  const basicInfoKey = key === "skuCode" ? "formalSkuCode" : key;
+  const basicInfoValue = preSku.basicInfo?.[basicInfoKey as keyof NonNullable<PreSkuComponentDetailSource["basicInfo"]>];
+  const normalizedBasicInfoValue = normalizePreSkuTextValue(basicInfoValue);
+  if (normalizedBasicInfoValue) return normalizedBasicInfoValue;
+
   const summaryValue = preSku.displaySummary?.[key];
   const normalizedSummaryValue = normalizePreSkuTextValue(summaryValue);
   if (normalizedSummaryValue) return normalizedSummaryValue;
diff --git a/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.ts b/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.ts
index 1c222c8b..dbe52964 100644
--- a/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.ts
+++ b/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.ts
@@ -1,9 +1,13 @@
 import { SPU_RULE_LIBRARY_SEED_RULES } from "./spuRuleLibrarySeed";
+import {
+  listIntakeReferenceLibraryItems,
+  replaceIntakeReferenceLibraryItems,
+} from "@/lib/intake-reference-library-client";
 
-export const SPU_RULE_LIBRARY_STORAGE_KEY = "intake.spuRuleLibrary.rules";
 export const SPU_RULE_LIBRARY_UPDATED_EVENT = "intake:spuRuleLibraryUpdated";
+export const SPU_RULE_REFERENCE_LIBRARY_TYPE = "SPU_RULE";
 
-type SpuRuleLibraryRuleLike = {
+export type SpuRuleLibraryRuleLike = {
   id?: string;
   productCategory?: string;
   categoryCode?: string;
@@ -12,6 +16,11 @@ type SpuRuleLibraryRuleLike = {
   [key: string]: unknown;
 };
 
+export type SpuRuleLibraryServerSnapshot = {
+  rules: SpuRuleLibraryRuleLike[];
+  hasServerRows: boolean;
+};
+
 type ProductSpuSource = {
   id?: string;
   spu?: string;
@@ -24,6 +33,8 @@ export type SpuRuleAssignment = {
   spu: string;
 };
 
+let serverRuleRuntimeCache: SpuRuleLibraryRuleLike[] | null = null;
+
 function normalizeText(value: unknown) {
   return typeof value === "string" ? value.trim() : "";
 }
@@ -54,40 +65,135 @@ function getSeedRules() {
   );
 }
 
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value as Record<string, unknown>;
+}
+
+function readPayloadText(value: unknown) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+export function normalizeSpuRuleLibraryRules(rules: unknown[]) {
+  const normalizedRules = rules
+    .map((rule) => normalizeRule(rule as SpuRuleLibraryRuleLike))
+    .filter((rule): rule is SpuRuleLibraryRuleLike => Boolean(rule));
+
+  return normalizedRules.length > 0 ? normalizedRules : getSeedRules();
+}
+
 export function readSpuRuleLibraryRules() {
-  if (typeof window === "undefined") return getSeedRules();
-
-  try {
-    const storedValue = window.localStorage.getItem(SPU_RULE_LIBRARY_STORAGE_KEY);
-    if (!storedValue) return getSeedRules();
-
-    const parsedValue = JSON.parse(storedValue);
-    if (!Array.isArray(parsedValue)) return getSeedRules();
-
-    const rules = parsedValue
-      .map((rule) => normalizeRule(rule))
-      .filter((rule): rule is SpuRuleLibraryRuleLike => Boolean(rule));
-
-    return rules.length > 0 ? rules : getSeedRules();
-  } catch {
-    return getSeedRules();
-  }
+  if (serverRuleRuntimeCache) return serverRuleRuntimeCache;
+  return getSeedRules();
 }
 
 export function writeSpuRuleLibraryRules(rules: SpuRuleLibraryRuleLike[]) {
-  if (typeof window === "undefined") return;
+  serverRuleRuntimeCache = normalizeSpuRuleLibraryRules(rules);
 
-  try {
-    window.localStorage.setItem(
-      SPU_RULE_LIBRARY_STORAGE_KEY,
-      JSON.stringify(rules),
-    );
+  if (typeof window !== "undefined") {
     window.dispatchEvent(new Event(SPU_RULE_LIBRARY_UPDATED_EVENT));
-  } catch {
-    // 本地规则库缓存不可写时，产品详情页仍然可以显示当前计算结果。
   }
 }
 
+function writeServerSpuRuleLibraryRules(rules: SpuRuleLibraryRuleLike[]) {
+  serverRuleRuntimeCache = rules;
+
+  if (typeof window !== "undefined") {
+    window.dispatchEvent(new Event(SPU_RULE_LIBRARY_UPDATED_EVENT));
+  }
+}
+
+export function clearSpuRuleLibraryRuntimeCache() {
+  serverRuleRuntimeCache = null;
+}
+
+export function decodeSpuRuleReferenceLibraryRows(
+  rows: Awaited<ReturnType<typeof listIntakeReferenceLibraryItems>>,
+): SpuRuleLibraryServerSnapshot {
+  const rules = rows
+    .filter((row) => row.isActive !== false)
+    .map((row) => {
+      const payload = readPayloadRecord(row.payload);
+      const rulePayload = readPayloadRecord(payload.rule);
+      const source = Object.keys(rulePayload).length ? rulePayload : payload;
+      const productCategory = row.name;
+
+      if (!productCategory) return null;
+
+      return normalizeRule({
+        ...source,
+        id: row.itemKey,
+        productCategory,
+        categoryCode: row.code,
+      });
+    })
+    .filter((rule): rule is SpuRuleLibraryRuleLike => Boolean(rule));
+
+  const hasServerRows = rows.length > 0;
+
+  return {
+    rules: hasServerRows ? rules : getSeedRules(),
+    hasServerRows,
+  };
+}
+
+export function buildSpuRuleReferenceLibraryRows(
+  rules: SpuRuleLibraryRuleLike[],
+) {
+  return normalizeSpuRuleLibraryRules(rules).map((rule, index) => {
+    const itemKey =
+      normalizeText(rule.id) ||
+      normalizeText(rule.productCategory) ||
+      `rule-${index + 1}`;
+
+    return {
+      itemKey,
+      code: normalizeText(rule.categoryCode).toUpperCase(),
+      name: normalizeText(rule.productCategory),
+      category: normalizeText(rule.secondCategory),
+      payload: {
+        kind: SPU_RULE_REFERENCE_LIBRARY_TYPE,
+        rule,
+      },
+      sortOrder: index,
+      isActive: rule.enabled !== false,
+    };
+  });
+}
+
+export async function listSpuRuleLibraryRulesFromServer() {
+  const rows = await listIntakeReferenceLibraryItems(SPU_RULE_REFERENCE_LIBRARY_TYPE);
+  return decodeSpuRuleReferenceLibraryRows(rows);
+}
+
+export async function replaceSpuRuleLibraryRulesOnServer(
+  rules: SpuRuleLibraryRuleLike[],
+) {
+  const rows = await replaceIntakeReferenceLibraryItems(
+    SPU_RULE_REFERENCE_LIBRARY_TYPE,
+    buildSpuRuleReferenceLibraryRows(rules),
+  );
+  const snapshot = decodeSpuRuleReferenceLibraryRows(rows);
+  if (snapshot.hasServerRows) {
+    writeServerSpuRuleLibraryRules(snapshot.rules);
+  } else {
+    clearSpuRuleLibraryRuntimeCache();
+  }
+  return snapshot;
+}
+
+export async function syncSpuRuleLibraryRulesFromServer() {
+  const snapshot = await listSpuRuleLibraryRulesFromServer();
+  if (snapshot.hasServerRows) {
+    writeServerSpuRuleLibraryRules(snapshot.rules);
+  }
+  return snapshot;
+}
+
+export async function persistCurrentSpuRuleLibraryRulesToServer() {
+  return replaceSpuRuleLibraryRulesOnServer(readSpuRuleLibraryRules());
+}
+
 function isSpuPrefix(value: unknown) {
   return /^[A-Za-z][A-Za-z0-9]*$/.test(normalizeText(value));
 }
@@ -183,34 +289,3 @@ export function getEstimatedSpuAssignment({
   };
 }
 
-export function reserveSpuAssignmentForProductCategory({
-  productCategory,
-  products,
-  currentProductId,
-}: {
-  productCategory: string;
-  products: ProductSpuSource[];
-  currentProductId?: string | null;
-}) {
-  const rules = readSpuRuleLibraryRules();
-  const assignment = getEstimatedSpuAssignment({
-    productCategory,
-    products,
-    currentProductId,
-  });
-
-  if (!assignment) return null;
-
-  writeSpuRuleLibraryRules(
-    rules.map((rule) =>
-      normalizeText(rule.productCategory) === assignment.productCategory
-        ? {
-            ...rule,
-            spuIndex: Math.max(normalizeNumber(rule.spuIndex), assignment.index),
-          }
-        : rule,
-    ),
-  );
-
-  return assignment;
-}
diff --git a/furniture-3d-system/src/app/products/[id]/ProductDetailClient.workspace.tsx b/furniture-3d-system/src/app/products/[id]/ProductDetailClient.workspace.tsx
index 54d6d796..13fedeb6 100644
--- a/furniture-3d-system/src/app/products/[id]/ProductDetailClient.workspace.tsx
+++ b/furniture-3d-system/src/app/products/[id]/ProductDetailClient.workspace.tsx
@@ -8,6 +8,7 @@ import { PanelEditor, type PanelData } from '@/components/panels'
 import { PackagingEditor, type PackagingPlanData, type BoxData } from '@/components/packaging'
 import EditSKUModal from '@/components/products/EditSKUModal'
 import { getApiErrorMessage } from '@/lib/utils'
+import { buildSkuDisplayTags } from '@/lib/sku-display-tags'
 import { ProductDetailTopBar } from './components/ProductDetailTopBar'
 import { ProductInfoCard } from './components/ProductInfoCard'
 import { CreateShareLinkModal } from './components/CreateShareLinkModal'
@@ -31,7 +32,8 @@ interface SKUData {
   price: number
   costPrice: number | null
   stock: number
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
+  displayTags: string[]
   images: string[]
   modelUrl: string | null
   isActive: boolean
@@ -43,6 +45,15 @@ interface SKUData {
   createdAt: string
 }
 
+interface SKUUpdatePayload extends Omit<SKUData, 'displayTags'> {
+  displayTags?: string[]
+  assetProfile?: {
+    specName?: string | null
+    color?: string | null
+    material?: string | null
+  } | null
+}
+
 interface ProductDetailClientProps {
   product: {
     id: string
@@ -128,8 +139,17 @@ export default function ProductDetailClient({
   }, [])
 
   // SKU 更新成功回调
-  const handleSkuUpdateSuccess = useCallback((updatedSku: SKUData) => {
-    setSkus(prev => prev.map(s => s.id === updatedSku.id ? updatedSku : s))
+  const handleSkuUpdateSuccess = useCallback((updatedSku: SKUUpdatePayload) => {
+    const legacyAttributes = updatedSku.legacyAttributes ?? null
+    const normalizedSku: SKUData = {
+      ...updatedSku,
+      legacyAttributes,
+      displayTags: updatedSku.displayTags ?? buildSkuDisplayTags({
+        assetProfile: updatedSku.assetProfile,
+        legacyAttributes,
+      }),
+    }
+    setSkus(prev => prev.map(s => s.id === normalizedSku.id ? normalizedSku : s))
     router.refresh()
   }, [router])
 
@@ -526,11 +546,11 @@ export default function ProductDetailClient({
                                   {sku.skuCode}
                                 </h4>
                                 {/* 规格属性展示 */}
-                                {sku.attributes && Object.keys(sku.attributes).length > 0 && (
+                                {sku.displayTags.length > 0 && (
                                   <div className="flex flex-wrap gap-1.5 mt-1.5">
-                                    {Object.entries(sku.attributes).map(([key, value]) => (
+                                    {sku.displayTags.map((value) => (
                                       <span
-                                        key={key}
+                                        key={value}
                                         className="text-apple-sm font-apple-system tracking-apple-tighter px-2 py-0.5 rounded-apple-sm"
                                         style={{
                                           backgroundColor: 'rgba(84, 96, 103, 0.1)',
diff --git a/furniture-3d-system/src/app/products/[id]/page.tsx b/furniture-3d-system/src/app/products/[id]/page.tsx
index f39e7020..b9a74c27 100644
--- a/furniture-3d-system/src/app/products/[id]/page.tsx
+++ b/furniture-3d-system/src/app/products/[id]/page.tsx
@@ -2,6 +2,15 @@ import { redirect } from 'next/navigation'
 import { prisma } from '@/lib/prisma'
 import { canViewProduct } from '@/lib/permissions'
 import { requireSession } from '@/lib/server-session'
+import {
+  buildSkuDisplayTags,
+  toLegacySkuDisplayAttributes,
+} from '@/lib/sku-display-tags'
+import {
+  hasSkuCadCompatibilityData,
+  readSkuCadExcludedHolesCount,
+  readSkuCadExcludedHolesJson,
+} from '@/lib/sku-cad-data'
 import ProductDetailClient from './ProductDetailClient'
 
 interface ProductPageProps {
@@ -114,6 +123,13 @@ export default async function ProductDetailPage({ params }: ProductPageProps) {
               avatar: true,
             },
           },
+          assetProfile: {
+            select: {
+              specName: true,
+              color: true,
+              material: true,
+            },
+          },
         },
         orderBy: { createdAt: 'desc' },
       },
@@ -125,10 +141,7 @@ export default async function ProductDetailPage({ params }: ProductPageProps) {
   }
 
   const skuStructureEntry =
-    product.skus.find((sku) => {
-      const attrs = (sku.attributes || {}) as Record<string, unknown>
-      return Object.prototype.hasOwnProperty.call(attrs, '_skuCadData')
-    }) ?? null
+    product.skus.find((sku) => hasSkuCadCompatibilityData(sku.attributes)) ?? null
   const hasSkuScopedStructure = Boolean(skuStructureEntry)
 
   return (
@@ -202,42 +215,28 @@ export default async function ProductDetailPage({ params }: ProductPageProps) {
           notes: p.notes,
           isDefault: p.isDefault,
         }))}
-        skus={product.skus.map(sku => ({
-          id: sku.id,
-          skuCode: sku.skuCode,
-          price: sku.price.toNumber(),
-          costPrice: canViewSensitive ? (sku.costPrice?.toNumber() || null) : null,
-          stock: canViewSensitive ? sku.stock : 0,
-          attributes: (() => {
-            const attrs = (sku.attributes || {}) as Record<string, unknown>
-            const display = Object.fromEntries(
-              Object.entries(attrs).filter(([key, value]) => !key.startsWith('_') && typeof value === 'string')
-            ) as Record<string, string>
-            return Object.keys(display).length > 0 ? display : null
-          })(),
-          cadExcludedHolesJson: (() => {
-            const attrs = (sku.attributes || {}) as Record<string, unknown>
-            const v = attrs['_cadExcludedHoles']
-            return typeof v === 'string' && v.trim().length > 0 ? v : null
-          })(),
-          cadExcludedHolesCount: (() => {
-            const attrs = (sku.attributes || {}) as Record<string, unknown>
-            const v = attrs['_cadExcludedHolesCount']
-            if (typeof v === 'string') {
-              const n = Number(v)
-              return Number.isFinite(n) ? n : 0
-            }
-            if (typeof v === 'number') {
-              return Number.isFinite(v) ? v : 0
-            }
-            return 0
-          })(),
-          images: sku.images,
-          modelUrl: sku.modelUrl,
-          isActive: sku.isActive,
-          owner: sku.owner,
-          createdAt: sku.createdAt.toISOString(),
-        }))}
+        skus={product.skus.map(sku => {
+          const legacyAttributes = toLegacySkuDisplayAttributes(sku.attributes)
+          return {
+            id: sku.id,
+            skuCode: sku.skuCode,
+            price: sku.price.toNumber(),
+            costPrice: canViewSensitive ? (sku.costPrice?.toNumber() || null) : null,
+            stock: canViewSensitive ? sku.stock : 0,
+            legacyAttributes,
+            displayTags: buildSkuDisplayTags({
+              assetProfile: sku.assetProfile,
+              legacyAttributes,
+            }),
+            cadExcludedHolesJson: readSkuCadExcludedHolesJson(sku.attributes),
+            cadExcludedHolesCount: readSkuCadExcludedHolesCount(sku.attributes),
+            images: sku.images,
+            modelUrl: sku.modelUrl,
+            isActive: sku.isActive,
+            owner: sku.owner,
+            createdAt: sku.createdAt.toISOString(),
+          }
+        })}
       />
     </div>
   )
diff --git a/furniture-3d-system/src/app/products/[id]/product-detail-client.types.ts b/furniture-3d-system/src/app/products/[id]/product-detail-client.types.ts
index ea09639c..500cf645 100644
--- a/furniture-3d-system/src/app/products/[id]/product-detail-client.types.ts
+++ b/furniture-3d-system/src/app/products/[id]/product-detail-client.types.ts
@@ -14,7 +14,7 @@ export interface SKUData {
   price: number
   costPrice: number | null
   stock: number
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
   cadExcludedHolesJson?: string | null
   cadExcludedHolesCount?: number
   images: string[]
diff --git a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/SKUDetailClient.workspace.tsx b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/SKUDetailClient.workspace.tsx
index dfae9921..d6e8f661 100644
--- a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/SKUDetailClient.workspace.tsx
+++ b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/SKUDetailClient.workspace.tsx
@@ -94,7 +94,8 @@ interface SKUFullInfo {
   costPrice: number | null
   stock: number
   isActive: boolean
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
+  displayTags: string[]
   images: string[]
   modelUrl: string | null
 }
@@ -103,7 +104,8 @@ interface SKUBrief {
   id: string
   skuCode: string
   price: number
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
+  displayTags: string[]
 }
 
 interface SKUDetailClientProps {
diff --git a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUReadOnlySidebar.tsx b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUReadOnlySidebar.tsx
index b4822ef4..10fd6461 100644
--- a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUReadOnlySidebar.tsx
+++ b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUReadOnlySidebar.tsx
@@ -12,7 +12,8 @@ interface SKUReadOnlySidebarProps {
     id: string
     skuCode: string
     isActive: boolean
-    attributes: Record<string, string> | null
+    legacyAttributes: Record<string, string> | null
+    displayTags: string[]
     price: number
     costPrice: number | null
     stock: number
@@ -99,11 +100,11 @@ export function SKUReadOnlySidebar({
             {sku.isActive ? '在售' : '停售'}
           </Badge>
         </div>
-        {sku.attributes && Object.keys(sku.attributes).length > 0 && (
+        {sku.displayTags.length > 0 && (
           <div className="flex flex-wrap gap-1.5 mb-3">
-            {Object.entries(sku.attributes).map(([key, value]) => (
+            {sku.displayTags.map((value) => (
               <span
-                key={key}
+                key={value}
                 className="px-2 py-0.5 rounded-sm text-apple-xs font-apple-system"
                 style={{ backgroundColor: 'rgba(84, 96, 103, 0.1)', color: 'var(--color-blue)' }}
               >
diff --git a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUSwitchDrawer.tsx b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUSwitchDrawer.tsx
index 0be22b63..18af01e1 100644
--- a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUSwitchDrawer.tsx
+++ b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/components/SKUSwitchDrawer.tsx
@@ -9,7 +9,8 @@ interface SKUSwitchDrawerProps {
     id: string
     skuCode: string
     price: number
-    attributes: Record<string, string> | null
+    legacyAttributes: Record<string, string> | null
+    displayTags: string[]
   }>
   currentSkuId: string
   onClose: () => void
@@ -68,11 +69,11 @@ export function SKUSwitchDrawer({
                     ¥{skuItem.price.toFixed(2)}
                   </span>
                 </div>
-                {skuItem.attributes && Object.keys(skuItem.attributes).length > 0 && (
+                {skuItem.displayTags.length > 0 && (
                   <div className="flex flex-wrap gap-1">
-                    {Object.entries(skuItem.attributes).map(([key, value]) => (
+                    {skuItem.displayTags.map((value) => (
                       <span
-                        key={key}
+                        key={value}
                         className="px-1.5 py-0.5 rounded-sm text-apple-xs"
                         style={{ backgroundColor: 'rgba(84, 96, 103, 0.1)', color: 'var(--color-blue)' }}
                       >
diff --git a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/page.tsx b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/page.tsx
index de96d364..a6f2b310 100644
--- a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/page.tsx
+++ b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/page.tsx
@@ -13,9 +13,12 @@ import {
 } from '@/lib/panel-material-assignments'
 import {
   enrichPanelsWithSkuCadSpatial,
-  filterDisplaySkuAttributes,
   readSkuCadDataFromAttributes,
 } from '@/lib/sku-cad-data'
+import {
+  buildSkuDisplayTags,
+  toLegacySkuDisplayAttributes,
+} from '@/lib/sku-display-tags'
 
 interface SKUDetailPageProps {
   params: Promise<{ id: string; skuId: string }>
@@ -254,11 +257,19 @@ export default async function SKUDetailPage({ params }: SKUDetailPageProps) {
         select: {
           id: true,
           skuCode: true,
+          name: true,
           price: true,
           costPrice: true,    // 敏感：成本价
           stock: true,        // 敏感：库存
           isActive: true,
           attributes: true,
+          assetProfile: {
+            select: {
+              specName: true,
+              color: true,
+              material: true,
+            },
+          },
           images: true,
           modelUrl: true,
         },
@@ -293,6 +304,7 @@ export default async function SKUDetailPage({ params }: SKUDetailPageProps) {
   })
 
   const rawCurrentSkuAttributes = currentSku.attributes as Record<string, unknown> | null
+  const currentLegacyAttributes = toLegacySkuDisplayAttributes(rawCurrentSkuAttributes)
   const skuCadData = readSkuCadDataFromAttributes(rawCurrentSkuAttributes)
   const scopedPanels = await prisma.panel.findMany({
     where: { productId, skuId },
@@ -410,16 +422,27 @@ export default async function SKUDetailPage({ params }: SKUDetailPageProps) {
           costPrice: canViewSensitive && currentSku.costPrice ? Number(currentSku.costPrice) : null,
           stock: canViewSensitive ? currentSku.stock : 0,
           isActive: currentSku.isActive,
-          attributes: filterDisplaySkuAttributes(rawCurrentSkuAttributes),
+          legacyAttributes: currentLegacyAttributes,
+          displayTags: buildSkuDisplayTags({
+            assetProfile: currentSku.assetProfile,
+            legacyAttributes: currentLegacyAttributes,
+          }),
           images: currentSku.images,
           modelUrl: currentSku.modelUrl,
         }}
-        allSkus={product.skus.map(s => ({
-          id: s.id,
-          skuCode: s.skuCode,
-          price: Number(s.price),
-          attributes: filterDisplaySkuAttributes(s.attributes as Record<string, unknown> | null),
-        }))}
+        allSkus={product.skus.map(s => {
+          const legacyAttributes = toLegacySkuDisplayAttributes(s.attributes)
+          return {
+            id: s.id,
+            skuCode: s.skuCode,
+            price: Number(s.price),
+            legacyAttributes,
+            displayTags: buildSkuDisplayTags({
+              assetProfile: s.assetProfile,
+              legacyAttributes,
+            }),
+          }
+        })}
         steps={steps}
         panels={displayPanels}
         materialAssignmentsByNode={materialAssignmentsByNode}
diff --git a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/sku-detail-client.types.ts b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/sku-detail-client.types.ts
index 8f1035e5..fa0a528e 100644
--- a/furniture-3d-system/src/app/products/[id]/skus/[skuId]/sku-detail-client.types.ts
+++ b/furniture-3d-system/src/app/products/[id]/skus/[skuId]/sku-detail-client.types.ts
@@ -18,7 +18,8 @@ export interface SKUFullInfo {
   costPrice: number | null
   stock: number
   isActive: boolean
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
+  displayTags: string[]
   images: string[]
   modelUrl: string | null
 }
@@ -27,7 +28,8 @@ export interface SKUBrief {
   id: string
   skuCode: string
   price: number
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
+  displayTags: string[]
 }
 
 export interface SKUDetailClientProps {
diff --git a/furniture-3d-system/src/app/share/[token]/SharePageClient.tsx b/furniture-3d-system/src/app/share/[token]/SharePageClient.tsx
index 0b0fd5c8..3297fdd1 100644
--- a/furniture-3d-system/src/app/share/[token]/SharePageClient.tsx
+++ b/furniture-3d-system/src/app/share/[token]/SharePageClient.tsx
@@ -19,21 +19,31 @@ interface ShareProduct {
   thumbnailUrl?: string | null
 }
 
+interface PublicSkuAssetProfile {
+  specName?: string | null
+  color?: string | null
+  material?: string | null
+}
+
 // SKU 公开信息（不包含敏感数据：costPrice, stock 等）
 interface ShareSKU {
   id: string
   skuCode: string
+  name: string | null
   price: number
   // 注意：不包含 costPrice, stock, isActive 等敏感字段
-  attributes: Record<string, string> | null
+  assetProfile: PublicSkuAssetProfile | null
+  legacyAttributes: Record<string, string> | null
 }
 
 // SKU 简要信息（用于切换）
 interface SKUBrief {
   id: string
   skuCode: string
+  name: string | null
   price: number
-  attributes: Record<string, string> | null
+  assetProfile: PublicSkuAssetProfile | null
+  legacyAttributes: Record<string, string> | null
 }
 
 interface SharePageClientProps {
@@ -66,6 +76,24 @@ export function SharePageClient({ product, sku, allSkus, steps, panels, shareTok
   const [isPlaying, setIsPlaying] = useState(false)
   const [_progress, setProgress] = useState(0)
 
+  const getSkuBadges = useCallback((targetSku: ShareSKU | SKUBrief) => {
+    const profileBadges = [
+      targetSku.assetProfile?.specName,
+      targetSku.assetProfile?.color,
+      targetSku.assetProfile?.material,
+    ]
+      .map((item) => item?.trim())
+      .filter((item): item is string => Boolean(item))
+
+    if (profileBadges.length > 0) {
+      return Array.from(new Set(profileBadges))
+    }
+
+    return Object.values(targetSku.legacyAttributes ?? {})
+      .map((item) => item.trim())
+      .filter((item) => item.length > 0)
+  }, [])
+
   // 初始化 3D 引擎
   useEffect(() => {
     if (!containerRef.current) {
@@ -400,11 +428,11 @@ export function SharePageClient({ product, sku, allSkus, steps, panels, shareTok
                       ¥{sku.price.toFixed(2)}
                     </span>
                   </div>
-                  {sku.attributes && Object.keys(sku.attributes).length > 0 && (
+                  {getSkuBadges(sku).length > 0 && (
                     <div className="flex flex-wrap gap-1.5">
-                      {Object.entries(sku.attributes).map(([key, value]) => (
+                      {getSkuBadges(sku).map((value) => (
                         <span 
-                          key={key}
+                          key={value}
                           className="px-2 py-0.5 rounded-apple-sm text-apple-xs font-apple-system bg-apple-blue/20 text-apple-blue"
                         >
                           {value}
@@ -544,11 +572,11 @@ export function SharePageClient({ product, sku, allSkus, steps, panels, shareTok
                         ¥{s.price.toFixed(2)}
                       </span>
                     </div>
-                    {s.attributes && Object.keys(s.attributes).length > 0 && (
+                    {getSkuBadges(s).length > 0 && (
                       <div className="flex flex-wrap gap-1">
-                        {Object.entries(s.attributes).map(([key, value]) => (
+                        {getSkuBadges(s).map((value) => (
                           <span 
-                            key={key}
+                            key={value}
                             className="px-1.5 py-0.5 rounded-apple-sm text-apple-xs bg-apple-blue/20 text-apple-blue"
                           >
                             {value}
diff --git a/furniture-3d-system/src/app/share/[token]/page.tsx b/furniture-3d-system/src/app/share/[token]/page.tsx
index 3b1b5681..a35b5bcb 100644
--- a/furniture-3d-system/src/app/share/[token]/page.tsx
+++ b/furniture-3d-system/src/app/share/[token]/page.tsx
@@ -70,16 +70,20 @@ export default async function SharePage({ params, searchParams }: SharePageProps
           ? {
               id: currentSku.id,
               skuCode: currentSku.skuCode,
+              name: currentSku.name,
               price: Number(currentSku.price),
-              attributes: currentSku.attributes as Record<string, string> | null,
+              assetProfile: currentSku.assetProfile,
+              legacyAttributes: currentSku.legacyAttributes,
             }
           : null
       }
       allSkus={product.skus.map((sku) => ({
         id: sku.id,
         skuCode: sku.skuCode,
+        name: sku.name,
         price: Number(sku.price),
-        attributes: sku.attributes as Record<string, string> | null,
+        assetProfile: sku.assetProfile,
+        legacyAttributes: sku.legacyAttributes,
       }))}
       steps={product.assemblySteps.map((step) => ({
         id: `share-step-${step.order}`,
diff --git a/furniture-3d-system/src/app/trash/TrashClient.tsx b/furniture-3d-system/src/app/trash/TrashClient.tsx
index 864673d5..42a0e6c8 100644
--- a/furniture-3d-system/src/app/trash/TrashClient.tsx
+++ b/furniture-3d-system/src/app/trash/TrashClient.tsx
@@ -40,7 +40,7 @@ interface TrashSKU {
   expiresAt: string
   daysRemaining: number
   price: number
-  attributes: Record<string, unknown> | null
+  legacyAttributes: Record<string, string> | null
 }
 
 interface TrashAssetFamily {
diff --git a/furniture-3d-system/src/app/warehouse/page.tsx b/furniture-3d-system/src/app/warehouse/page.tsx
index 0eaf4dbc..958bd6f7 100644
--- a/furniture-3d-system/src/app/warehouse/page.tsx
+++ b/furniture-3d-system/src/app/warehouse/page.tsx
@@ -1,5 +1,6 @@
 import { requireSession } from '@/lib/server-session'
 import { mapWorkbenchStatus, readPreSkuTextField, readPreviewNodes } from '@/lib/open-product/platform-view'
+import { readPreSkuSkuFields } from '@/app/intake/seriesComponentDetails'
 import { assetCenterService, draftGroupService, warehouseService } from '@/server/services'
 import WarehouseClient from './WarehouseClient'
 
@@ -95,20 +96,23 @@ export default async function WarehousePage() {
   const workbenchSkuList = draftGroupDetails
     .filter((detail): detail is NonNullable<typeof detail> => detail !== null)
     .flatMap((detail) =>
-      detail.preSkus.map((preSku) => ({
-        id: preSku.id,
-        spuCode:
-          readPreSkuTextField(preSku, 'spuCode')
-          || readPreSkuTextField(preSku, 'spu')
-          || detail.draftGroup.code
-          || `SPU-${detail.draftGroup.code.slice(-4)}`,
-        code: readPreSkuTextField(preSku, 'skuCode') || preSku.customName || preSku.defaultName,
-        name: preSku.customName || preSku.defaultName,
-        seriesName: readPreSkuTextField(preSku, 'seriesName') || detail.draftGroup.name,
-        draftGroupName: detail.draftGroup.name,
-        status: mapWorkbenchStatus(preSku.status),
-        componentCodes: preSku.componentCodes ?? [],
-      })),
+      detail.preSkus.map((preSku) => {
+        const skuFields = readPreSkuSkuFields(preSku)
+        return {
+          id: preSku.id,
+          spuCode:
+            readPreSkuTextField(preSku, 'spuCode')
+            || readPreSkuTextField(preSku, 'spu')
+            || detail.draftGroup.code
+            || `SPU-${detail.draftGroup.code.slice(-4)}`,
+          code: skuFields.skuCode || preSku.customName || preSku.defaultName,
+          name: preSku.customName || preSku.defaultName,
+          seriesName: readPreSkuTextField(preSku, 'seriesName') || detail.draftGroup.name,
+          draftGroupName: detail.draftGroup.name,
+          status: mapWorkbenchStatus(preSku.status),
+          componentCodes: preSku.componentCodes ?? [],
+        }
+      }),
     )
 
   const firstPreSkuWithPreview = draftGroupDetails
diff --git a/furniture-3d-system/src/components/products/EditSKUModal.tsx b/furniture-3d-system/src/components/products/EditSKUModal.tsx
index b9f72cab..d408ecbf 100644
--- a/furniture-3d-system/src/components/products/EditSKUModal.tsx
+++ b/furniture-3d-system/src/components/products/EditSKUModal.tsx
@@ -22,7 +22,7 @@ interface SKUData {
   price: number
   costPrice: number | null
   stock: number
-  attributes: Record<string, string> | null
+  legacyAttributes: Record<string, string> | null
   images: string[]
   modelUrl: string | null
   isActive: boolean
@@ -59,26 +59,17 @@ export default function EditSKUModal({
     costPrice: '',
     stock: '',
     isActive: true,
-    // 动态属性
-    attributeKeys: [] as string[],
-    attributeValues: [] as string[],
   })
 
   // 初始化表单数据
   useEffect(() => {
     if (sku) {
-      const attributes = sku.attributes || {}
-      const keys = Object.keys(attributes)
-      const values = keys.map(k => attributes[k])
-      
       setFormData({
         skuCode: sku.skuCode,
         price: sku.price.toString(),
         costPrice: sku.costPrice?.toString() || '',
         stock: sku.stock.toString(),
         isActive: sku.isActive,
-        attributeKeys: keys.length > 0 ? keys : [''],
-        attributeValues: values.length > 0 ? values : [''],
       })
       
       // 重置错误状态
@@ -92,39 +83,6 @@ export default function EditSKUModal({
     setFormData(prev => ({ ...prev, [field]: value }))
   }, [])
 
-  // 添加属性
-  const handleAddAttribute = useCallback(() => {
-    setFormData(prev => ({
-      ...prev,
-      attributeKeys: [...prev.attributeKeys, ''],
-      attributeValues: [...prev.attributeValues, ''],
-    }))
-  }, [])
-
-  // 删除属性
-  const handleRemoveAttribute = useCallback((index: number) => {
-    setFormData(prev => ({
-      ...prev,
-      attributeKeys: prev.attributeKeys.filter((_, i) => i !== index),
-      attributeValues: prev.attributeValues.filter((_, i) => i !== index),
-    }))
-  }, [])
-
-  // 更新属性
-  const handleAttributeChange = useCallback((index: number, type: 'key' | 'value', value: string) => {
-    setFormData(prev => {
-      if (type === 'key') {
-        const newKeys = [...prev.attributeKeys]
-        newKeys[index] = value
-        return { ...prev, attributeKeys: newKeys }
-      } else {
-        const newValues = [...prev.attributeValues]
-        newValues[index] = value
-        return { ...prev, attributeValues: newValues }
-      }
-    })
-  }, [])
-
   // 清除错误状态
   const clearError = useCallback(() => {
     setSubmitError(null)
@@ -166,14 +124,6 @@ export default function EditSKUModal({
     setIsSubmitting(true)
 
     try {
-      // 构建属性对象
-      const attributes: Record<string, string> = {}
-      formData.attributeKeys.forEach((key, index) => {
-        if (key.trim() && formData.attributeValues[index]?.trim()) {
-          attributes[key.trim()] = formData.attributeValues[index].trim()
-        }
-      })
-
       const response = await fetch(`/api/skus/${sku.id}`, {
         method: 'PUT',
         headers: { 'Content-Type': 'application/json' },
@@ -183,7 +133,6 @@ export default function EditSKUModal({
           costPrice: formData.costPrice ? parseFloat(formData.costPrice) : null,
           stock: parseInt(formData.stock),
           isActive: formData.isActive,
-          attributes,
         }),
       })
 
@@ -316,56 +265,6 @@ export default function EditSKUModal({
           </div>
         </div>
 
-        {/* 规格属性 */}
-        <div className="space-y-4 animate-in slide-in-from-bottom-4 fade-in duration-500 delay-150">
-          <div className="flex items-center justify-between">
-            <Title3 className="text-apple-label-primary">规格属性</Title3>
-            <Button
-              variant="tinted"
-              size="small"
-              onClick={handleAddAttribute}
-            >
-              + 添加属性
-            </Button>
-          </div>
-          
-          <Caption1 className="text-apple-label-tertiary">
-            定义 SKU 的规格属性，如颜色、尺寸等
-          </Caption1>
-
-          <div className="space-y-3">
-            {formData.attributeKeys.map((key, index) => (
-              <div key={index} className="flex items-center gap-3">
-                <Input
-                  value={key}
-                  onChange={(e) => handleAttributeChange(index, 'key', e.target.value)}
-                  placeholder="属性名（如：颜色）"
-                  className="flex-1"
-                />
-                <Input
-                  value={formData.attributeValues[index] || ''}
-                  onChange={(e) => handleAttributeChange(index, 'value', e.target.value)}
-                  placeholder="属性值（如：红色）"
-                  className="flex-1"
-                />
-                {formData.attributeKeys.length > 1 && (
-                  <Button
-                    variant="plain"
-                    size="small"
-                    onClick={() => handleRemoveAttribute(index)}
-                    className="text-apple-red hover:bg-apple-red/10 p-2"
-                    ariaLabel="删除属性"
-                  >
-                    <svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                      <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16" />
-                    </svg>
-                  </Button>
-                )}
-              </div>
-            ))}
-          </div>
-        </div>
-
         {/* 负责人信息（只读） */}
         {sku.owner && (
           <div className="p-4 rounded-apple-lg animate-in slide-in-from-bottom-4 fade-in duration-500 delay-200" style={{ backgroundColor: 'var(--color-background-secondary)' }}>
diff --git a/furniture-3d-system/src/components/ui/ProductListItem.tsx b/furniture-3d-system/src/components/ui/ProductListItem.tsx
index e57309fd..9702491a 100644
--- a/furniture-3d-system/src/components/ui/ProductListItem.tsx
+++ b/furniture-3d-system/src/components/ui/ProductListItem.tsx
@@ -46,7 +46,8 @@ interface ProductListItemProps {
       price: number
       stock: number
       isActive: boolean
-      attributes?: Record<string, string> | null
+      legacyAttributes?: Record<string, string> | null
+      displayTags?: string[]
     }>
   }
   onEdit?: (product: ProductListItemProps['product']) => void
diff --git a/furniture-3d-system/src/lib/__tests__/sku-cad-data.test.ts b/furniture-3d-system/src/lib/__tests__/sku-cad-data.test.ts
index 70c0bbe0..2f3f1161 100644
--- a/furniture-3d-system/src/lib/__tests__/sku-cad-data.test.ts
+++ b/furniture-3d-system/src/lib/__tests__/sku-cad-data.test.ts
@@ -1,6 +1,9 @@
 import {
   buildPanelsFromSkuCadData,
   buildPersistedSkuCadData,
+  hasSkuCadCompatibilityData,
+  readSkuCadExcludedHolesCount,
+  readSkuCadExcludedHolesJson,
   readSkuCadDataFromAttributes,
   SKU_CAD_DATA_ATTRIBUTE_KEY,
 } from '../sku-cad-data'
@@ -217,6 +220,20 @@ describe('sku-cad-data', () => {
     )
   })
 
+  it('把旧 SKU attributes 中的 CAD 兼容元数据收拢为显式 helper', () => {
+    const attributes = {
+      [SKU_CAD_DATA_ATTRIBUTE_KEY]: { panels: [] },
+      _cadExcludedHoles: '["hole-1"]',
+      _cadExcludedHolesCount: '2',
+    }
+
+    expect(hasSkuCadCompatibilityData(attributes)).toBe(true)
+    expect(readSkuCadExcludedHolesJson(attributes)).toBe('["hole-1"]')
+    expect(readSkuCadExcludedHolesCount(attributes)).toBe(2)
+    expect(readSkuCadExcludedHolesJson({ _cadExcludedHoles: '   ' })).toBeNull()
+    expect(readSkuCadExcludedHolesCount({ _cadExcludedHolesCount: 'bad' })).toBe(0)
+  })
+
   it('会为只有孔位约束、没有显式 panel 记录的数据补出占位板件', () => {
     const cadData = buildPersistedSkuCadData({
       pluginVersion: '2.1.0',
diff --git a/furniture-3d-system/src/lib/accessory-library.test.ts b/furniture-3d-system/src/lib/accessory-library.test.ts
index 2b75dbee..c4327539 100644
--- a/furniture-3d-system/src/lib/accessory-library.test.ts
+++ b/furniture-3d-system/src/lib/accessory-library.test.ts
@@ -1,6 +1,7 @@
 import {
   applyNonIntegratedBomAccessoryMetrics,
   buildNonIntegratedBomAccessoryOptions,
+  decodeAccessoryReferenceLibraryRows,
   findNonIntegratedBomAccessoryOption,
   type AccessoryLibraryItem,
 } from '@/lib/accessory-library'
@@ -109,4 +110,33 @@ describe('accessory-library helpers', () => {
     expect(row.unitPrice).toBe('0.2')
     expect(row.material).toBe('3.5*12')
   })
+
+  it('decodes accessory identity from structured row fields before stale payload mirrors', () => {
+    const items = decodeAccessoryReferenceLibraryRows([
+      {
+        id: 'row-1',
+        itemKey: 'ACC-001',
+        code: 'A1',
+        name: '结构化螺丝',
+        letter: 'A',
+        updatedAt: '2026-05-09T00:00:00.000Z',
+        isActive: true,
+        payload: {
+          id: 'OLD-ID',
+          code: 'OLD',
+          name: '旧螺丝',
+          letter: 'Z',
+          price: '0.11',
+        },
+      },
+    ])
+
+    expect(items[0]).toMatchObject({
+      id: 'ACC-001',
+      code: 'A1',
+      name: '结构化螺丝',
+      letter: 'A',
+      price: '0.11',
+    })
+  })
 })
diff --git a/furniture-3d-system/src/lib/accessory-library.ts b/furniture-3d-system/src/lib/accessory-library.ts
index 98b84233..99546c52 100644
--- a/furniture-3d-system/src/lib/accessory-library.ts
+++ b/furniture-3d-system/src/lib/accessory-library.ts
@@ -1,7 +1,6 @@
-export const ACCESSORY_LIBRARY_STORAGE_KEY =
-  'formal-intake-accessory-library-items'
 export const ACCESSORY_LIBRARY_CHANGED_EVENT =
   'formal-intake-accessory-library:changed'
+export const ACCESSORY_REFERENCE_LIBRARY_TYPE = 'ACCESSORY'
 
 export type AccessoryLibraryItem = {
   id: string
@@ -52,6 +51,17 @@ type AccessoryLikeRow = {
   partImageName?: string
 }
 
+type AccessoryReferenceLibraryRow = {
+  id: string
+  itemKey: string
+  code: string
+  name: string
+  letter: string
+  payload: unknown
+  updatedAt: string
+  isActive?: boolean | null
+}
+
 function normalizeCode(value?: string | null) {
   return (value ?? '').trim().toUpperCase()
 }
@@ -60,59 +70,68 @@ function normalizeName(value?: string | null) {
   return (value ?? '').trim().toLowerCase()
 }
 
-function readRawAccessoryItems() {
-  if (typeof window === 'undefined') return []
-
-  try {
-    const rawValue = window.localStorage.getItem(ACCESSORY_LIBRARY_STORAGE_KEY)
-    if (!rawValue) return []
-
-    const parsedValue = JSON.parse(rawValue)
-    if (!Array.isArray(parsedValue)) return []
-
-    return parsedValue
-  } catch {
-    return []
-  }
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
 }
 
-export function readAccessoryLibraryItems() {
-  return readRawAccessoryItems().filter(
-    (item): item is AccessoryLibraryItem =>
-      item &&
-      typeof item.id === 'string' &&
-      typeof item.letter === 'string' &&
-      typeof item.code === 'string' &&
-      typeof item.name === 'string' &&
-      (item.screwCategory === undefined ||
-        typeof item.screwCategory === 'string') &&
-      (item.headType === undefined || typeof item.headType === 'string') &&
-      (item.drive === undefined || typeof item.drive === 'string') &&
-      (item.tail === undefined || typeof item.tail === 'string') &&
-      (item.color === undefined || typeof item.color === 'string') &&
-      (item.material === undefined || typeof item.material === 'string') &&
-      (item.finish === undefined || typeof item.finish === 'string') &&
-      (item.tooth === undefined || typeof item.tooth === 'string') &&
-      (item.diameter === undefined || typeof item.diameter === 'string') &&
-      (item.length === undefined || typeof item.length === 'string') &&
-      (item.usages === undefined ||
-        (Array.isArray(item.usages) &&
-          item.usages.every((value: unknown) => typeof value === 'string'))) &&
-      (item.preDrill === undefined || typeof item.preDrill === 'string') &&
-      (item.environments === undefined ||
-        (Array.isArray(item.environments) &&
-          item.environments.every(
-            (value: unknown) => typeof value === 'string',
-          ))) &&
-      typeof item.price === 'string' &&
-      typeof item.imageUrl === 'string' &&
-      typeof item.imageName === 'string' &&
-      typeof item.updatedAt === 'string',
-  )
+function readPayloadText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function readPayloadStringArray(value: unknown) {
+  if (!Array.isArray(value)) return undefined
+  const values = value.filter((item): item is string => typeof item === 'string')
+  return values.length ? values : undefined
+}
+
+export function decodeAccessoryReferenceLibraryRows(
+  rows: AccessoryReferenceLibraryRow[],
+) {
+  return rows
+    .filter((row) => row.isActive !== false)
+    .map((row) => {
+      const payload = readPayloadRecord(row.payload)
+      const itemPayload = readPayloadRecord(payload.item)
+      const source = Object.keys(itemPayload).length ? itemPayload : payload
+      const id = row.itemKey || row.id
+      const letter = row.letter.toUpperCase()
+      const code = row.code
+      const name = row.name
+
+      if (!id || !letter || !code || !name) return null
+
+      const item: AccessoryLibraryItem = {
+        id,
+        letter,
+        code,
+        name,
+        screwCategory: readPayloadText(source.screwCategory),
+        headType: readPayloadText(source.headType),
+        drive: readPayloadText(source.drive),
+        tail: readPayloadText(source.tail),
+        color: readPayloadText(source.color),
+        material: readPayloadText(source.material),
+        finish: readPayloadText(source.finish),
+        tooth: readPayloadText(source.tooth),
+        diameter: readPayloadText(source.diameter),
+        length: readPayloadText(source.length),
+        usages: readPayloadStringArray(source.usages),
+        preDrill: readPayloadText(source.preDrill),
+        environments: readPayloadStringArray(source.environments),
+        price: readPayloadText(source.price),
+        imageUrl: readPayloadText(source.imageUrl),
+        imageName: readPayloadText(source.imageName),
+        updatedAt: readPayloadText(source.updatedAt) || row.updatedAt,
+      }
+
+      return item
+    })
+    .filter((item): item is AccessoryLibraryItem => item !== null)
 }
 
 export function buildNonIntegratedBomAccessoryOptions(
-  items = readAccessoryLibraryItems(),
+  items: AccessoryLibraryItem[],
 ) {
   return items
     .map<NonIntegratedBomAccessoryOption>((item) => {
diff --git a/furniture-3d-system/src/lib/edge-banding-library.test.ts b/furniture-3d-system/src/lib/edge-banding-library.test.ts
index bb26fde7..ed0c677c 100644
--- a/furniture-3d-system/src/lib/edge-banding-library.test.ts
+++ b/furniture-3d-system/src/lib/edge-banding-library.test.ts
@@ -1,4 +1,5 @@
 import {
+  buildEdgeBandingReferenceItemKey,
   buildNonIntegratedBomEdgeBandingOptions,
   createEdgeBandingLibraryItem,
   parseBoardThicknessMmFromText,
@@ -27,4 +28,32 @@ describe('edge-banding-library', () => {
     expect(options[0]?.compatibleThicknessMm).toBe(12)
     expect(options[0]?.unitPrice).toBe('0.35')
   })
+
+  it('builds a reference-library identity from business spec instead of UI id', () => {
+    const first = createEdgeBandingLibraryItem(
+      {
+        name: 'PVC封边条',
+        spec: '22 × 1',
+        unit: '米',
+        unitPrice: '0.35',
+        compatibleThicknessMm: '12MM',
+      },
+      { id: 'temporary-ui-id-a' },
+    )
+    const second = createEdgeBandingLibraryItem(
+      {
+        name: 'PVC封边条',
+        spec: '22×1',
+        unit: '米',
+        unitPrice: '0.35',
+        compatibleThicknessMm: '12',
+      },
+      { id: 'temporary-ui-id-b' },
+    )
+
+    expect(buildEdgeBandingReferenceItemKey(first)).toBe(
+      buildEdgeBandingReferenceItemKey(second),
+    )
+    expect(buildEdgeBandingReferenceItemKey(first)).toBe('ITEM:22-1:12')
+  })
 })
diff --git a/furniture-3d-system/src/lib/edge-banding-library.ts b/furniture-3d-system/src/lib/edge-banding-library.ts
index 2d92bd0c..90f7a2b4 100644
--- a/furniture-3d-system/src/lib/edge-banding-library.ts
+++ b/furniture-3d-system/src/lib/edge-banding-library.ts
@@ -1,7 +1,7 @@
-export const EDGE_BANDING_LIBRARY_STORAGE_KEY =
-  'formal-intake-edge-banding-library-items'
 export const EDGE_BANDING_LIBRARY_CHANGED_EVENT =
   'formal-intake-edge-banding-library:changed'
+export const EDGE_BANDING_REFERENCE_LIBRARY_TYPE = 'EDGE_BANDING'
+export const EDGE_BANDING_REFERENCE_ITEM_CATEGORY = 'ITEM'
 
 export type EdgeBandingLibraryItem = {
   id: string
@@ -27,11 +27,13 @@ export interface NonIntegratedBomEdgeBandingOption {
   searchText: string
 }
 
-type EdgeBandingLibraryPersistedValue =
-  | EdgeBandingLibraryItem[]
-  | {
-      items?: EdgeBandingLibraryItem[]
-    }
+type EdgeBandingReferenceLibraryRow = {
+  itemKey: string
+  category: string
+  payload: unknown
+  updatedAt: string
+  isActive?: boolean | null
+}
 
 function normalizeText(value?: string | null) {
   return (value ?? '').trim().toLowerCase()
@@ -115,6 +117,27 @@ export function createEdgeBandingLibraryItemId() {
   return `edge-banding-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
 }
 
+function normalizeReferenceKeyPart(value?: string | null) {
+  const normalized = normalizeDisplayText(value).toUpperCase()
+  return normalized
+    .replace(/[^\p{L}\p{N}._-]+/gu, '-')
+    .replace(/-+/g, '-')
+    .replace(/^-|-$/g, '') || 'UNKNOWN'
+}
+
+export function buildEdgeBandingReferenceItemKey(
+  item: Pick<EdgeBandingLibraryItem, 'spec' | 'compatibleThicknessMm'>,
+) {
+  const thickness = formatEdgeBandingNumber(
+    parseBoardThicknessMmFromText(item.compatibleThicknessMm),
+  )
+  return [
+    'ITEM',
+    normalizeReferenceKeyPart(item.spec),
+    normalizeReferenceKeyPart(thickness || item.compatibleThicknessMm),
+  ].join(':')
+}
+
 export function createEdgeBandingLibraryItem(
   draft: Partial<EdgeBandingLibraryDraft>,
   options?: {
@@ -157,46 +180,37 @@ export function buildEdgeBandingLibraryItems(items: EdgeBandingLibraryItem[]) {
     .filter((item): item is EdgeBandingLibraryItem => item !== null)
 }
 
-function readPersistedEdgeBandingLibraryValue(): EdgeBandingLibraryPersistedValue | null {
-  if (typeof window === 'undefined') return null
-
-  try {
-    const rawValue = window.localStorage.getItem(EDGE_BANDING_LIBRARY_STORAGE_KEY)
-    if (!rawValue) return null
-
-    const parsedValue = JSON.parse(rawValue)
-    if (Array.isArray(parsedValue)) return parsedValue
-    if (parsedValue && typeof parsedValue === 'object') return parsedValue
-  } catch {
-    return null
-  }
-
-  return null
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
 }
 
-function resolvePersistedEdgeBandingItems(
-  persistedValue: EdgeBandingLibraryPersistedValue | null,
+function readPayloadText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+export function decodeEdgeBandingReferenceLibraryItems(
+  rows: EdgeBandingReferenceLibraryRow[],
 ) {
-  if (Array.isArray(persistedValue)) return persistedValue
-  if (Array.isArray(persistedValue?.items)) return persistedValue.items
-  return []
-}
+  const items = rows
+    .filter((row) => row.isActive !== false)
+    .filter((row) => {
+      const payload = readPayloadRecord(row.payload)
+      const kind = readPayloadText(payload.kind) || row.category
+      return kind === EDGE_BANDING_REFERENCE_ITEM_CATEGORY
+    })
+    .map((row) => {
+      const payload = readPayloadRecord(row.payload)
+      const itemPayload = readPayloadRecord(payload.item)
+      return createEdgeBandingLibraryItem(itemPayload, {
+        id:
+          readPayloadText(itemPayload.id) ||
+          row.itemKey.replace(/^item:/, ''),
+        updatedAt: readPayloadText(itemPayload.updatedAt) || row.updatedAt,
+      })
+    })
 
-export function readEdgeBandingLibraryItems() {
-  return buildEdgeBandingLibraryItems(
-    resolvePersistedEdgeBandingItems(readPersistedEdgeBandingLibraryValue()),
-  )
-}
-
-export function persistEdgeBandingLibraryItems(items: EdgeBandingLibraryItem[]) {
-  if (typeof window === 'undefined') return
-
-  const normalizedItems = buildEdgeBandingLibraryItems(items)
-  window.localStorage.setItem(
-    EDGE_BANDING_LIBRARY_STORAGE_KEY,
-    JSON.stringify(normalizedItems),
-  )
-  window.dispatchEvent(new Event(EDGE_BANDING_LIBRARY_CHANGED_EVENT))
+  return buildEdgeBandingLibraryItems(items)
 }
 
 export function buildEdgeBandingDisplayName(
@@ -215,7 +229,7 @@ export function buildEdgeBandingSelectionLabel(item: EdgeBandingLibraryItem) {
 }
 
 export function buildNonIntegratedBomEdgeBandingOptions(
-  items = readEdgeBandingLibraryItems(),
+  items: EdgeBandingLibraryItem[],
 ) {
   return items
     .map<NonIntegratedBomEdgeBandingOption | null>((item) => {
diff --git a/furniture-3d-system/src/lib/non-integrated-bom-steel-materials.ts b/furniture-3d-system/src/lib/non-integrated-bom-steel-materials.ts
index ac093993..c57aa200 100644
--- a/furniture-3d-system/src/lib/non-integrated-bom-steel-materials.ts
+++ b/furniture-3d-system/src/lib/non-integrated-bom-steel-materials.ts
@@ -3,8 +3,9 @@ import {
   buildSteelFrameSearchAliases,
   calculateSteelFrameTotalWeight,
   calculateSteelFrameUnitPrice,
+  createSteelFrameTemplateState,
   normalizeSteelFrameText,
-  readSteelFrameLibraryState,
+  type SteelFrameLibraryState,
   type SteelFrameLibraryItem,
 } from '@/lib/steel-frame-library'
 
@@ -44,9 +45,9 @@ function buildCandidateSearchTexts(row: Pick<SteelLikeRow, 'partName' | 'materia
   )
 }
 
-export function buildNonIntegratedBomSteelFrameOptions() {
-  const libraryState = readSteelFrameLibraryState()
-
+export function buildNonIntegratedBomSteelFrameOptions(
+  libraryState: SteelFrameLibraryState = createSteelFrameTemplateState(),
+) {
   return libraryState.items
     .map<NonIntegratedBomSteelFrameOption>((item) => {
       const displayName = buildSteelFrameMatchLabel(item)
diff --git a/furniture-3d-system/src/lib/open-product/__tests__/platform-view.test.ts b/furniture-3d-system/src/lib/open-product/__tests__/platform-view.test.ts
index eef90eaa..629ba916 100644
--- a/furniture-3d-system/src/lib/open-product/__tests__/platform-view.test.ts
+++ b/furniture-3d-system/src/lib/open-product/__tests__/platform-view.test.ts
@@ -5,9 +5,37 @@ import {
   readPreviewMaterialAssignments,
   readPreviewNodes,
   readPreviewWorldNodes,
+  readPreSkuTextField,
 } from '../platform-view'
 
 describe('platform-view helpers', () => {
+  it('准 SKU 文本读取应优先使用结构化 basicInfo', () => {
+    const preSku = {
+      basicInfo: {
+        model: 'DBZ-SPJK001',
+        formalSkuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        specName: '1200 柚木色',
+      },
+      displaySummary: {
+        model: 'LEGACY-MODEL',
+        skuCode: 'LEGACY-SKU',
+        barcode: 'LEGACY-BARCODE',
+        specName: 'LEGACY-SPEC',
+        seriesName: '单板桌',
+      },
+      familySelection: {
+        skuCode: 'FAMILY-SKU',
+      },
+    }
+
+    expect(readPreSkuTextField(preSku, 'model')).toBe('DBZ-SPJK001')
+    expect(readPreSkuTextField(preSku, 'skuCode')).toBe('DBZ-SPJ00001')
+    expect(readPreSkuTextField(preSku, 'barcode')).toBe('DBZ-SPJ00001N05V01')
+    expect(readPreSkuTextField(preSku, 'specName')).toBe('1200 柚木色')
+    expect(readPreSkuTextField(preSku, 'seriesName')).toBe('单板桌')
+  })
+
   it('应只保留结构完整的预览节点', () => {
     const nodes = readPreviewNodes([
       {
diff --git a/furniture-3d-system/src/lib/open-product/asset-coding.ts b/furniture-3d-system/src/lib/open-product/asset-coding.ts
index 47ea3f5d..b07aa36d 100644
--- a/furniture-3d-system/src/lib/open-product/asset-coding.ts
+++ b/furniture-3d-system/src/lib/open-product/asset-coding.ts
@@ -12,6 +12,10 @@ function trimUpper(value: string | null | undefined): string {
   return value?.trim().toUpperCase() ?? ''
 }
 
+export function normalizeCoreIdentity(value: string | null | undefined): string {
+  return trimUpper(value)
+}
+
 export function normalizeSeriesCode(value: string | null | undefined): string {
   return trimUpper(value).replace(/[^A-Z0-9]/g, '')
 }
diff --git a/furniture-3d-system/src/lib/open-product/platform-view.ts b/furniture-3d-system/src/lib/open-product/platform-view.ts
index 3a01fa42..af97dc38 100644
--- a/furniture-3d-system/src/lib/open-product/platform-view.ts
+++ b/furniture-3d-system/src/lib/open-product/platform-view.ts
@@ -258,13 +258,53 @@ export interface PreviewHoleOverlayState {
   panelLabelByPanelId: Record<string, string>
 }
 
+type PreSkuBasicInfoTextSource = Partial<{
+  model: string | null
+  formalSkuCode: string | null
+  barcode: string | null
+  size: string | null
+  color: string | null
+  material: string | null
+  specName: string | null
+  versionNo: string | null
+  setCount: string | null
+  attributeCode: string | null
+  drawingId: string | null
+  installMethod: string | null
+}>
+
+const preSkuBasicInfoFieldAlias: Record<string, keyof PreSkuBasicInfoTextSource> = {
+  skuCode: 'formalSkuCode',
+  draftSkuCode: 'formalSkuCode',
+  skuSequenceCode: 'formalSkuCode',
+  formalSkuCode: 'formalSkuCode',
+  model: 'model',
+  barcode: 'barcode',
+  size: 'size',
+  color: 'color',
+  material: 'material',
+  specName: 'specName',
+  versionNo: 'versionNo',
+  setCount: 'setCount',
+  attributeCode: 'attributeCode',
+  drawingId: 'drawingId',
+  installMethod: 'installMethod',
+}
+
 export function readPreSkuTextField(
   preSku: {
+    basicInfo?: PreSkuBasicInfoTextSource | null
     displaySummary?: Record<string, unknown> | null
     familySelection?: Record<string, unknown> | null
   },
   key: string,
 ) {
+  const basicInfoKey = preSkuBasicInfoFieldAlias[key]
+  const basicInfoValue = basicInfoKey ? preSku.basicInfo?.[basicInfoKey] : null
+  if (typeof basicInfoValue === 'string' && basicInfoValue.trim().length > 0) {
+    return basicInfoValue.trim()
+  }
+
   const displayValue = preSku.displaySummary?.[key]
   if (typeof displayValue === 'string' && displayValue.trim().length > 0) {
     return displayValue.trim()
diff --git a/furniture-3d-system/src/lib/packaging-material-library.test.ts b/furniture-3d-system/src/lib/packaging-material-library.test.ts
index 6535cee6..baf6ca51 100644
--- a/furniture-3d-system/src/lib/packaging-material-library.test.ts
+++ b/furniture-3d-system/src/lib/packaging-material-library.test.ts
@@ -1,6 +1,7 @@
 import {
   applyNonIntegratedBomPackagingMaterialMetrics,
   buildNonIntegratedBomPackagingMaterialOptions,
+  decodePackagingMaterialReferenceLibraryRows,
   findNonIntegratedBomPackagingMaterialOption,
   type PackagingMaterialLibraryItem,
 } from '@/lib/packaging-material-library'
@@ -109,4 +110,33 @@ describe('packaging-material-library helpers', () => {
     expect(row.unitPrice).toBe('13')
     expect(row.material).toBe('泡沫')
   })
+
+  it('decodes packaging material identity from structured row fields before stale payload mirrors', () => {
+    const items = decodePackagingMaterialReferenceLibraryRows([
+      {
+        id: 'row-1',
+        itemKey: 'PKG-A0',
+        code: 'A0',
+        name: '结构化泡沫',
+        letter: 'A',
+        updatedAt: '2026-05-09T00:00:00.000Z',
+        isActive: true,
+        payload: {
+          id: 'OLD-ID',
+          code: 'OLD',
+          name: '旧泡沫',
+          letter: 'Z',
+          price: '12.5',
+        },
+      },
+    ])
+
+    expect(items[0]).toMatchObject({
+      id: 'PKG-A0',
+      code: 'A0',
+      name: '结构化泡沫',
+      letter: 'A',
+      price: '12.5',
+    })
+  })
 })
diff --git a/furniture-3d-system/src/lib/packaging-material-library.ts b/furniture-3d-system/src/lib/packaging-material-library.ts
index 5dfa8488..c68c98f9 100644
--- a/furniture-3d-system/src/lib/packaging-material-library.ts
+++ b/furniture-3d-system/src/lib/packaging-material-library.ts
@@ -1,7 +1,6 @@
-export const PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY =
-  'formal-intake-packaging-material-library-items'
 export const PACKAGING_MATERIAL_LIBRARY_CHANGED_EVENT =
   'formal-intake-packaging-material-library:changed'
+export const PACKAGING_MATERIAL_REFERENCE_LIBRARY_TYPE = 'PACKAGING_MATERIAL'
 
 export type PackagingMaterialLibraryItem = {
   id: string
@@ -39,6 +38,17 @@ type PackagingMaterialLikeRow = {
   partImageName?: string
 }
 
+type PackagingMaterialReferenceLibraryRow = {
+  id: string
+  itemKey: string
+  code: string
+  name: string
+  letter: string
+  payload: unknown
+  updatedAt: string
+  isActive?: boolean | null
+}
+
 function normalizeCode(value?: string | null) {
   return (value ?? '').trim().toUpperCase()
 }
@@ -47,41 +57,49 @@ function normalizeName(value?: string | null) {
   return (value ?? '').trim().toLowerCase()
 }
 
-function readRawPackagingMaterialItems() {
-  if (typeof window === 'undefined') return []
-
-  try {
-    const rawValue = window.localStorage.getItem(
-      PACKAGING_MATERIAL_LIBRARY_STORAGE_KEY,
-    )
-    if (!rawValue) return []
-
-    const parsedValue = JSON.parse(rawValue)
-    if (!Array.isArray(parsedValue)) return []
-
-    return parsedValue
-  } catch {
-    return []
-  }
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
 }
 
-export function readPackagingMaterialLibraryItems() {
-  return readRawPackagingMaterialItems().filter(
-    (item): item is PackagingMaterialLibraryItem =>
-      item &&
-      typeof item.id === 'string' &&
-      typeof item.letter === 'string' &&
-      typeof item.code === 'string' &&
-      typeof item.name === 'string' &&
-      typeof item.price === 'string' &&
-      typeof item.imageUrl === 'string' &&
-      typeof item.imageName === 'string' &&
-      typeof item.updatedAt === 'string',
-  )
+function readPayloadText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+export function decodePackagingMaterialReferenceLibraryRows(
+  rows: PackagingMaterialReferenceLibraryRow[],
+) {
+  return rows
+    .filter((row) => row.isActive !== false)
+    .map((row) => {
+      const payload = readPayloadRecord(row.payload)
+      const itemPayload = readPayloadRecord(payload.item)
+      const source = Object.keys(itemPayload).length ? itemPayload : payload
+      const id = row.itemKey || row.id
+      const letter = row.letter.toUpperCase()
+      const code = row.code
+      const name = row.name
+
+      if (!id || !letter || !code || !name) return null
+
+      const item: PackagingMaterialLibraryItem = {
+        id,
+        letter,
+        code,
+        name,
+        price: readPayloadText(source.price),
+        imageUrl: readPayloadText(source.imageUrl),
+        imageName: readPayloadText(source.imageName),
+        updatedAt: readPayloadText(source.updatedAt) || row.updatedAt,
+      }
+
+      return item
+    })
+    .filter((item): item is PackagingMaterialLibraryItem => item !== null)
 }
 
 export function buildNonIntegratedBomPackagingMaterialOptions(
-  items = readPackagingMaterialLibraryItems(),
+  items: PackagingMaterialLibraryItem[],
 ) {
   return items
     .map<NonIntegratedBomPackagingMaterialOption>((item) => {
diff --git a/furniture-3d-system/src/lib/permissions.ts b/furniture-3d-system/src/lib/permissions.ts
index f4a733db..966d44f8 100644
--- a/furniture-3d-system/src/lib/permissions.ts
+++ b/furniture-3d-system/src/lib/permissions.ts
@@ -95,10 +95,12 @@ export function normalizeCollaboratorUsers(raw: unknown): CollaboratorUser[] {
     .map((item) => {
       const userId = typeof item.userId === 'string' ? item.userId.trim() : ''
       if (!userId) return null
+      const role = typeof item.role === 'string' ? item.role.trim().toLowerCase() : ''
+      if (role !== 'editor' && role !== 'viewer') return null
 
       return {
         userId,
-        role: item.role === 'viewer' ? 'viewer' : 'editor',
+        role,
       } satisfies CollaboratorUser
     })
     .filter((item): item is CollaboratorUser => item !== null)
diff --git a/furniture-3d-system/src/lib/planning/parsers.ts b/furniture-3d-system/src/lib/planning/parsers.ts
index c464476a..82dbb968 100644
--- a/furniture-3d-system/src/lib/planning/parsers.ts
+++ b/furniture-3d-system/src/lib/planning/parsers.ts
@@ -14,6 +14,20 @@ function readString(value: unknown): string | null {
   return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null
 }
 
+function readStringArray(value: unknown): string[] | undefined {
+  if (!Array.isArray(value)) return undefined
+
+  const normalized = Array.from(
+    new Set(
+      value
+        .map((item) => readString(item))
+        .filter((item): item is string => Boolean(item)),
+    ),
+  )
+
+  return normalized.length > 0 ? normalized : undefined
+}
+
 function readVector3(value: unknown, fallback: [number, number, number]): [number, number, number] {
   if (!Array.isArray(value) || value.length !== 3) return fallback
   const parsed = value.map((item) =>
@@ -70,12 +84,8 @@ function parseSlotDefinition(value: unknown): PlanningSlotDefinition | null {
   const placementMode = placement.mode
   const source = isRecord(value.source)
     ? {
-        categoryIds: Array.isArray(value.source.categoryIds)
-          ? value.source.categoryIds.filter((item): item is string => typeof item === 'string')
-          : undefined,
-        assetIds: Array.isArray(value.source.assetIds)
-          ? value.source.assetIds.filter((item): item is string => typeof item === 'string')
-          : undefined,
+        categoryIds: readStringArray(value.source.categoryIds),
+        assetIds: readStringArray(value.source.assetIds),
       }
     : undefined
 
@@ -159,12 +169,15 @@ export function parsePlanningTemplateDefinition(value: unknown): PlanningTemplat
 export function parsePlanningSlotSelections(value: unknown): PlanningSlotSelections {
   if (!isRecord(value)) return {}
 
-  return Object.fromEntries(
-    Object.entries(value).map(([slotKey, rawIds]) => [
-      slotKey,
-      Array.isArray(rawIds)
-        ? rawIds.filter((item): item is string => typeof item === 'string')
-        : [],
-    ]),
-  )
+  const entries: Array<[string, string[]]> = []
+
+  Object.entries(value).forEach(([rawSlotKey, rawIds]) => {
+    const slotKey = readString(rawSlotKey)
+    if (!slotKey) return
+
+    const assetIds = readStringArray(rawIds) ?? []
+    entries.push([slotKey, assetIds])
+  })
+
+  return Object.fromEntries(entries)
 }
diff --git a/furniture-3d-system/src/lib/sku-cad-data.ts b/furniture-3d-system/src/lib/sku-cad-data.ts
index 0f348de0..8bea9838 100644
--- a/furniture-3d-system/src/lib/sku-cad-data.ts
+++ b/furniture-3d-system/src/lib/sku-cad-data.ts
@@ -843,6 +843,36 @@ export function readSkuCadDataFromAttributes(attributes: unknown): PersistedSkuC
   })
 }
 
+function readSkuCadCompatibilityAttributes(attributes: unknown): Record<string, unknown> {
+  return attributes && typeof attributes === 'object' && !Array.isArray(attributes)
+    ? (attributes as Record<string, unknown>)
+    : {}
+}
+
+export function hasSkuCadCompatibilityData(attributes: unknown): boolean {
+  return Object.prototype.hasOwnProperty.call(
+    readSkuCadCompatibilityAttributes(attributes),
+    SKU_CAD_DATA_ATTRIBUTE_KEY,
+  )
+}
+
+export function readSkuCadExcludedHolesJson(attributes: unknown): string | null {
+  const value = readSkuCadCompatibilityAttributes(attributes)._cadExcludedHoles
+  return typeof value === 'string' && value.trim().length > 0 ? value : null
+}
+
+export function readSkuCadExcludedHolesCount(attributes: unknown): number {
+  const value = readSkuCadCompatibilityAttributes(attributes)._cadExcludedHolesCount
+  if (typeof value === 'string') {
+    const numericValue = Number(value)
+    return Number.isFinite(numericValue) ? numericValue : 0
+  }
+  if (typeof value === 'number') {
+    return Number.isFinite(value) ? value : 0
+  }
+  return 0
+}
+
 export function filterDisplaySkuAttributes(attributes: Record<string, unknown> | null): Record<string, string> | null {
   if (!attributes) {
     return null
diff --git a/furniture-3d-system/src/lib/steel-frame-library.test.ts b/furniture-3d-system/src/lib/steel-frame-library.test.ts
index 910e9ae4..db6e39f0 100644
--- a/furniture-3d-system/src/lib/steel-frame-library.test.ts
+++ b/furniture-3d-system/src/lib/steel-frame-library.test.ts
@@ -1,12 +1,15 @@
 import {
   buildSteelFrameLibraryItems,
+  buildSteelFrameReferenceItemKey,
   calculateSteelFramePieceCount,
   calculateSteelFrameUnitPrice,
   calculateSteelFrameWeightPerBar,
+  createSteelFrameTemplateState,
   createSteelFrameLibraryItem,
-  persistSteelFrameLibraryState,
-  readSteelFrameLibraryState,
-  STEEL_FRAME_LIBRARY_STORAGE_KEY,
+  decodeSteelFrameReferenceLibraryRows,
+  STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+  STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+  STEEL_FRAME_REFERENCE_PRICE_KEY,
 } from '@/lib/steel-frame-library'
 
 describe('steel-frame-library', () => {
@@ -48,14 +51,14 @@ describe('steel-frame-library', () => {
     expect(calculateSteelFrameUnitPrice(weight, '4200')).toBe('0.58414608')
   })
 
-  it('returns an empty library when no custom steel frame spec exists', () => {
-    const state = readSteelFrameLibraryState()
+  it('returns an empty template state when the server library has no steel frame spec', () => {
+    const state = createSteelFrameTemplateState()
 
     expect(state.referenceSteelPrice).toBe('4200')
     expect(state.items).toHaveLength(0)
   })
 
-  it('persists only saved custom steel frame items and rebuilds them under the current steel price', () => {
+  it('decodes server rows and rebuilds saved steel frame items under the current steel price', () => {
     const customItem = createSteelFrameLibraryItem(
       {
         name: '扁管',
@@ -67,10 +70,30 @@ describe('steel-frame-library', () => {
       '4500',
     )
 
-    persistSteelFrameLibraryState('4500', [customItem])
+    const state = decodeSteelFrameReferenceLibraryRows([
+      {
+        itemKey: STEEL_FRAME_REFERENCE_PRICE_KEY,
+        category: STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+        payload: {
+          kind: STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+          referenceSteelPrice: '4500',
+        },
+        updatedAt: '2026-05-30T00:00:00.000Z',
+        isActive: true,
+      },
+      {
+        itemKey: buildSteelFrameReferenceItemKey(customItem),
+        category: STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+        payload: {
+          kind: STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+          item: customItem,
+        },
+        updatedAt: '2026-05-30T00:00:00.000Z',
+        isActive: true,
+      },
+    ])
 
-    const state = readSteelFrameLibraryState()
-    const matched = state.items.find((item) => item.id === customItem.id)
+    const matched = state.items.find((item) => item.id === buildSteelFrameReferenceItemKey(customItem))
 
     expect(state.referenceSteelPrice).toBe('4500')
     expect(state.items).toHaveLength(1)
@@ -79,7 +102,7 @@ describe('steel-frame-library', () => {
     expect(matched?.unitPrice).toBe('4.431168')
   })
 
-  it('keeps backward compatibility with the old customItems storage key', () => {
+  it('keeps backward compatibility with flat legacy payload rows from the server bridge', () => {
     const legacyItem = createSteelFrameLibraryItem(
       {
         name: '方管',
@@ -91,15 +114,24 @@ describe('steel-frame-library', () => {
       '4200',
     )
 
-    window.localStorage.setItem(
-      STEEL_FRAME_LIBRARY_STORAGE_KEY,
-      JSON.stringify({
-        referenceSteelPrice: '4800',
-        customItems: [legacyItem],
-      }),
-    )
-
-    const state = readSteelFrameLibraryState()
+    const state = decodeSteelFrameReferenceLibraryRows([
+      {
+        itemKey: STEEL_FRAME_REFERENCE_PRICE_KEY,
+        category: STEEL_FRAME_REFERENCE_CONFIG_CATEGORY,
+        payload: {
+          value: '4800',
+        },
+        updatedAt: '2026-05-30T00:00:00.000Z',
+        isActive: true,
+      },
+      {
+        itemKey: 'item:legacy-steel-frame-id',
+        category: STEEL_FRAME_REFERENCE_ITEM_CATEGORY,
+        payload: legacyItem,
+        updatedAt: '2026-05-30T00:00:00.000Z',
+        isActive: true,
+      },
+    ])
 
     expect(state.referenceSteelPrice).toBe('4800')
     expect(state.items).toHaveLength(1)
@@ -123,4 +155,34 @@ describe('steel-frame-library', () => {
     expect(rebuiltItems).toHaveLength(1)
     expect(rebuiltItems[0]?.unitPrice).toBe('1.76486688')
   })
+
+  it('builds a reference-library identity from steel frame specs instead of UI id', () => {
+    const first = createSteelFrameLibraryItem(
+      {
+        name: '扁管',
+        length: '60',
+        width: '20',
+        wallThickness: '0.8',
+        remark: '',
+      },
+      '4500',
+      { id: 'temporary-ui-id-a' },
+    )
+    const second = createSteelFrameLibraryItem(
+      {
+        name: '扁管',
+        length: '60',
+        width: '20',
+        wallThickness: '0.8',
+        remark: '',
+      },
+      '4500',
+      { id: 'temporary-ui-id-b' },
+    )
+
+    expect(buildSteelFrameReferenceItemKey(first)).toBe(
+      buildSteelFrameReferenceItemKey(second),
+    )
+    expect(buildSteelFrameReferenceItemKey(first)).toBe('ITEM:扁管:60:20:0.8')
+  })
 })
diff --git a/furniture-3d-system/src/lib/steel-frame-library.ts b/furniture-3d-system/src/lib/steel-frame-library.ts
index 992fb8f1..8bfac340 100644
--- a/furniture-3d-system/src/lib/steel-frame-library.ts
+++ b/furniture-3d-system/src/lib/steel-frame-library.ts
@@ -1,4 +1,9 @@
-export const STEEL_FRAME_LIBRARY_STORAGE_KEY = 'formal-intake-steel-frame-library'
+export const STEEL_FRAME_LIBRARY_CHANGED_EVENT =
+  'formal-intake-steel-frame-library:changed'
+export const STEEL_FRAME_REFERENCE_LIBRARY_TYPE = 'STEEL_FRAME'
+export const STEEL_FRAME_REFERENCE_CONFIG_CATEGORY = 'CONFIG'
+export const STEEL_FRAME_REFERENCE_ITEM_CATEGORY = 'ITEM'
+export const STEEL_FRAME_REFERENCE_PRICE_KEY = 'reference-steel-price'
 
 export const STEEL_FRAME_TEMPLATE_FIELDS = ['名称', '长', '宽', '壁厚', '重量', '支数', '单价'] as const
 
@@ -24,10 +29,12 @@ export type SteelFrameLibraryState = {
   items: SteelFrameLibraryItem[]
 }
 
-type SteelFrameLibraryPersistedState = {
-  referenceSteelPrice: string
-  items?: SteelFrameLibraryItem[]
-  customItems?: SteelFrameLibraryItem[]
+type SteelFrameReferenceLibraryRow = {
+  itemKey: string
+  category: string
+  payload: unknown
+  updatedAt: string
+  isActive?: boolean | null
 }
 
 export const STEEL_FRAME_TEMPLATE_ITEMS: SteelFrameLibraryItem[] = []
@@ -125,6 +132,26 @@ export function createSteelFrameLibraryItemId() {
   return `steel-custom-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
 }
 
+function normalizeReferenceKeyPart(value?: string | null) {
+  const normalized = (value ?? '').trim().toUpperCase()
+  return normalized
+    .replace(/[^\p{L}\p{N}._-]+/gu, '-')
+    .replace(/-+/g, '-')
+    .replace(/^-|-$/g, '') || 'UNKNOWN'
+}
+
+export function buildSteelFrameReferenceItemKey(
+  item: Pick<SteelFrameLibraryItem, 'name' | 'length' | 'width' | 'wallThickness'>,
+) {
+  return [
+    'ITEM',
+    normalizeReferenceKeyPart(item.name),
+    normalizeReferenceKeyPart(item.length),
+    normalizeReferenceKeyPart(item.width || 'NO-WIDTH'),
+    normalizeReferenceKeyPart(item.wallThickness),
+  ].join(':')
+}
+
 export function calculateSteelFrameWeightPerBar(
   draft: Pick<SteelFrameLibraryDraft, 'name' | 'length' | 'width' | 'wallThickness'>,
 ) {
@@ -192,38 +219,6 @@ export function createSteelFrameLibraryItem(
   }
 }
 
-function readPersistedSteelFrameLibraryValue(): Partial<SteelFrameLibraryPersistedState> {
-  if (typeof window === 'undefined') {
-    return {}
-  }
-
-  try {
-    const rawValue = window.localStorage.getItem(STEEL_FRAME_LIBRARY_STORAGE_KEY)
-    if (!rawValue) {
-      return {}
-    }
-
-    const parsedValue = JSON.parse(rawValue)
-    return typeof parsedValue === 'object' && parsedValue ? parsedValue : {}
-  } catch {
-    return {}
-  }
-}
-
-function resolvePersistedSteelFrameItems(
-  persistedValue: Partial<SteelFrameLibraryPersistedState>,
-) {
-  if (Array.isArray(persistedValue.items)) {
-    return persistedValue.items
-  }
-
-  if (Array.isArray(persistedValue.customItems)) {
-    return persistedValue.customItems
-  }
-
-  return []
-}
-
 export function buildSteelFrameLibraryItems(
   referenceSteelPrice: string,
   items: SteelFrameLibraryItem[],
@@ -257,47 +252,58 @@ export function createSteelFrameTemplateState(): SteelFrameLibraryState {
   }
 }
 
-export function readSteelFrameLibraryState(): SteelFrameLibraryState {
-  if (typeof window === 'undefined') {
-    return createSteelFrameTemplateState()
-  }
+function readPayloadRecord(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
+}
 
-  const persistedValue = readPersistedSteelFrameLibraryValue()
-  const referenceSteelPrice =
-    typeof persistedValue.referenceSteelPrice === 'string' && persistedValue.referenceSteelPrice.trim()
-      ? persistedValue.referenceSteelPrice.trim()
-      : STEEL_FRAME_TEMPLATE_REFERENCE_PRICE
-  const items = resolvePersistedSteelFrameItems(persistedValue)
+function readPayloadText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+export function decodeSteelFrameReferenceLibraryRows(
+  rows: SteelFrameReferenceLibraryRow[],
+): SteelFrameLibraryState {
+  let referenceSteelPrice = ''
+  const items: SteelFrameLibraryItem[] = []
+
+  rows.forEach((row) => {
+    if (row.isActive === false) return
+
+    const payload = readPayloadRecord(row.payload)
+    const kind = readPayloadText(payload.kind) || row.category
+
+    if (kind === STEEL_FRAME_REFERENCE_CONFIG_CATEGORY) {
+      referenceSteelPrice =
+        readPayloadText(payload.referenceSteelPrice) ||
+        readPayloadText(payload.value) ||
+        referenceSteelPrice
+      return
+    }
+
+    if (kind === STEEL_FRAME_REFERENCE_ITEM_CATEGORY) {
+      const itemPayload = readPayloadRecord(payload.item)
+      const source = Object.keys(itemPayload).length ? itemPayload : payload
+      const item = createSteelFrameLibraryItem(source, STEEL_FRAME_TEMPLATE_REFERENCE_PRICE, {
+        id: row.itemKey.replace(/^item:/, ''),
+        updatedAt: readPayloadText(source.updatedAt) || row.updatedAt,
+      })
+
+      if (item.name && item.length && item.wallThickness && item.weight) {
+        items.push(item)
+      }
+    }
+  })
+
+  const resolvedReferenceSteelPrice =
+    referenceSteelPrice || STEEL_FRAME_TEMPLATE_REFERENCE_PRICE
 
   return {
-    referenceSteelPrice,
-    items: buildSteelFrameLibraryItems(referenceSteelPrice, items),
+    referenceSteelPrice: resolvedReferenceSteelPrice,
+    items: buildSteelFrameLibraryItems(resolvedReferenceSteelPrice, items),
   }
 }
 
-export function persistSteelFrameLibraryState(
-  referenceSteelPrice: string,
-  items: SteelFrameLibraryItem[],
-) {
-  if (typeof window === 'undefined') return
-
-  const normalizedReferenceSteelPrice = referenceSteelPrice.trim() || STEEL_FRAME_TEMPLATE_REFERENCE_PRICE
-  const resolvedItems = buildSteelFrameLibraryItems(normalizedReferenceSteelPrice, items)
-
-  window.localStorage.setItem(
-    STEEL_FRAME_LIBRARY_STORAGE_KEY,
-    JSON.stringify({
-      referenceSteelPrice: normalizedReferenceSteelPrice,
-      items: resolvedItems,
-    } satisfies SteelFrameLibraryPersistedState),
-  )
-}
-
-export function persistSteelFrameLibraryReferencePrice(referenceSteelPrice: string) {
-  const persistedValue = readPersistedSteelFrameLibraryValue()
-  persistSteelFrameLibraryState(referenceSteelPrice, resolvePersistedSteelFrameItems(persistedValue))
-}
-
 export function buildSteelFrameSizeLabel(item: Pick<SteelFrameLibraryItem, 'length' | 'width'>) {
   const normalizedLength = item.length.trim()
   const normalizedWidth = item.width.trim()
diff --git a/furniture-3d-system/src/server/dto/product.dto.ts b/furniture-3d-system/src/server/dto/product.dto.ts
index 3793f433..e92bf2c1 100644
--- a/furniture-3d-system/src/server/dto/product.dto.ts
+++ b/furniture-3d-system/src/server/dto/product.dto.ts
@@ -6,7 +6,8 @@
  * @created 2026-01-30
  */
 
-import type { Product, ProductSKU, User } from '@prisma/client'
+import type { Product, ProductSKU, ProductSkuAssetProfile, User } from '@prisma/client'
+import { buildSkuDisplayTags, toLegacySkuDisplayAttributes } from '@/lib/sku-display-tags'
 
 // ============ 基础 DTO ============
 
@@ -19,13 +20,35 @@ export interface UserBriefDTO {
   avatar?: string | null
 }
 
+export interface ProductSkuAssetProfileDTO {
+  primarySourceAssetVariantId: string | null
+  sourceAssetVariantIds: string[]
+  sourceAssetFamilyId: string | null
+  sourceAssetSeriesId: string | null
+  model: string | null
+  modelName: string | null
+  specCode: string | null
+  specName: string | null
+  barcode: string | null
+  size: unknown
+  color: string | null
+  material: string | null
+  imageUrl: string | null
+  sourceStatus: string
+  syncedAt: string
+  lockedFields: string[]
+}
+
 /**
  * SKU 简要信息
  */
 export interface SKUBriefDTO {
   id: string
   skuCode: string
-  attributes: Record<string, string>
+  name?: string | null
+  legacyAttributes: Record<string, string> | null
+  assetProfile: ProductSkuAssetProfileDTO | null
+  displayTags: string[]
   price: number
   stock: number
   isActive: boolean
@@ -39,7 +62,10 @@ export interface SKUDTO {
   id: string
   productId: string
   skuCode: string
-  attributes: Record<string, string>
+  name?: string | null
+  legacyAttributes: Record<string, string> | null
+  assetProfile: ProductSkuAssetProfileDTO | null
+  displayTags: string[]
   price: number
   costPrice?: number | null
   stock: number
@@ -160,14 +186,47 @@ export function toUserBriefDTO(user: Pick<User, 'id' | 'name' | 'avatar'>): User
   }
 }
 
+export function toProductSkuAssetProfileDTO(
+  profile: ProductSkuAssetProfile | null | undefined,
+): ProductSkuAssetProfileDTO | null {
+  if (!profile) return null
+
+  return {
+    primarySourceAssetVariantId: profile.primarySourceAssetVariantId,
+    sourceAssetVariantIds: profile.sourceAssetVariantIds,
+    sourceAssetFamilyId: profile.sourceAssetFamilyId,
+    sourceAssetSeriesId: profile.sourceAssetSeriesId,
+    model: profile.model,
+    modelName: profile.modelName,
+    specCode: profile.specCode,
+    specName: profile.specName,
+    barcode: profile.barcode,
+    size: profile.size,
+    color: profile.color,
+    material: profile.material,
+    imageUrl: profile.imageUrl,
+    sourceStatus: profile.sourceStatus,
+    syncedAt: profile.syncedAt.toISOString(),
+    lockedFields: profile.lockedFields,
+  }
+}
+
 /**
  * 将 ProductSKU 实体转换为 SKUBriefDTO
  */
-export function toSKUBriefDTO(sku: ProductSKU): SKUBriefDTO {
+export function toSKUBriefDTO(
+  sku: ProductSKU & { assetProfile?: ProductSkuAssetProfile | null },
+): SKUBriefDTO {
+  const legacyAttributes = toLegacySkuDisplayAttributes(sku.attributes)
+  const assetProfile = toProductSkuAssetProfileDTO(sku.assetProfile)
+
   return {
     id: sku.id,
     skuCode: sku.skuCode,
-    attributes: sku.attributes as Record<string, string>,
+    name: sku.name,
+    legacyAttributes,
+    assetProfile,
+    displayTags: buildSkuDisplayTags({ assetProfile, legacyAttributes }),
     price: Number(sku.price),
     stock: sku.stock,
     isActive: sku.isActive,
@@ -179,13 +238,22 @@ export function toSKUBriefDTO(sku: ProductSKU): SKUBriefDTO {
  * 将 ProductSKU 实体转换为 SKUDTO
  */
 export function toSKUDTO(
-  sku: ProductSKU & { owner: Pick<User, 'id' | 'name' | 'avatar'> }
+  sku: ProductSKU & {
+    owner: Pick<User, 'id' | 'name' | 'avatar'>
+    assetProfile?: ProductSkuAssetProfile | null
+  }
 ): SKUDTO {
+  const legacyAttributes = toLegacySkuDisplayAttributes(sku.attributes)
+  const assetProfile = toProductSkuAssetProfileDTO(sku.assetProfile)
+
   return {
     id: sku.id,
     productId: sku.productId,
     skuCode: sku.skuCode,
-    attributes: sku.attributes as Record<string, string>,
+    name: sku.name,
+    legacyAttributes,
+    assetProfile,
+    displayTags: buildSkuDisplayTags({ assetProfile, legacyAttributes }),
     price: Number(sku.price),
     costPrice: sku.costPrice ? Number(sku.costPrice) : null,
     stock: sku.stock,
diff --git a/furniture-3d-system/src/server/dto/sku.dto.ts b/furniture-3d-system/src/server/dto/sku.dto.ts
index fac08b87..afe21b95 100644
--- a/furniture-3d-system/src/server/dto/sku.dto.ts
+++ b/furniture-3d-system/src/server/dto/sku.dto.ts
@@ -4,8 +4,14 @@
  * @created 2026-01-30
  */
 
-import type { ProductSKU, User, Product, ProductCategory } from '@prisma/client'
-import { toUserBriefDTO, type UserBriefDTO } from './product.dto'
+import type { ProductSKU, ProductSkuAssetProfile, User, Product, ProductCategory } from '@prisma/client'
+import {
+  toProductSkuAssetProfileDTO,
+  toUserBriefDTO,
+  type ProductSkuAssetProfileDTO,
+  type UserBriefDTO,
+} from './product.dto'
+import { buildSkuDisplayTags, toLegacySkuDisplayAttributes } from '@/lib/sku-display-tags'
 
 // ============ DTO 定义 ============
 
@@ -16,9 +22,12 @@ export interface SKUListItemDTO {
   id: string
   productId: string
   skuCode: string
+  name?: string | null
   productName: string
   productModelNumber: string
-  attributes: Record<string, string>
+  legacyAttributes: Record<string, string> | null
+  assetProfile: ProductSkuAssetProfileDTO | null
+  displayTags: string[]
   price: number
   stock: number
   isActive: boolean
@@ -35,7 +44,7 @@ export interface DeletedSKUDTO {
   skuCode: string
   deletedAt: string
   price: number
-  attributes: Record<string, unknown> | null
+  legacyAttributes: Record<string, string> | null
   owner: UserBriefDTO
   product: {
     id: string
@@ -51,7 +60,10 @@ export interface SKUDetailDTO {
   id: string
   productId: string
   skuCode: string
-  attributes: Record<string, string>
+  name?: string | null
+  legacyAttributes: Record<string, string> | null
+  assetProfile: ProductSkuAssetProfileDTO | null
+  displayTags: string[]
   price: number
   costPrice?: number | null
   stock: number
@@ -83,6 +95,7 @@ export interface SKUDetailDTO {
 export interface CreateSKUInput {
   productId: string
   skuCode: string
+  name?: string
   attributes: Record<string, string>
   price: number
   costPrice?: number
@@ -97,6 +110,7 @@ export interface CreateSKUInput {
  */
 export interface UpdateSKUInput {
   skuCode?: string
+  name?: string
   attributes?: Record<string, string>
   price?: number
   costPrice?: number | null
@@ -123,15 +137,22 @@ export function toSKUListItemDTO(
   sku: ProductSKU & {
     owner: Pick<User, 'id' | 'name' | 'avatar'>
     product: Pick<Product, 'name' | 'modelNumber'>
+    assetProfile?: ProductSkuAssetProfile | null
   }
 ): SKUListItemDTO {
+  const legacyAttributes = toLegacySkuDisplayAttributes(sku.attributes)
+  const assetProfile = toProductSkuAssetProfileDTO(sku.assetProfile)
+
   return {
     id: sku.id,
     productId: sku.productId,
     skuCode: sku.skuCode,
+    name: sku.name,
     productName: sku.product.name,
     productModelNumber: sku.product.modelNumber,
-    attributes: sku.attributes as Record<string, string>,
+    legacyAttributes,
+    assetProfile,
+    displayTags: buildSkuDisplayTags({ assetProfile, legacyAttributes }),
     price: Number(sku.price),
     stock: sku.stock,
     isActive: sku.isActive,
@@ -147,16 +168,23 @@ export function toSKUListItemDTO(
 export function toSKUDetailDTO(
   sku: ProductSKU & {
     owner: Pick<User, 'id' | 'name' | 'avatar'>
+    assetProfile?: ProductSkuAssetProfile | null
     product: Pick<Product, 'id' | 'modelNumber' | 'name' | 'modelUrl'> & {
       category: Pick<ProductCategory, 'id' | 'name'> | null
     }
   }
 ): SKUDetailDTO {
+  const legacyAttributes = toLegacySkuDisplayAttributes(sku.attributes)
+  const assetProfile = toProductSkuAssetProfileDTO(sku.assetProfile)
+
   return {
     id: sku.id,
     productId: sku.productId,
     skuCode: sku.skuCode,
-    attributes: sku.attributes as Record<string, string>,
+    name: sku.name,
+    legacyAttributes,
+    assetProfile,
+    displayTags: buildSkuDisplayTags({ assetProfile, legacyAttributes }),
     price: Number(sku.price),
     costPrice: sku.costPrice ? Number(sku.costPrice) : null,
     stock: sku.stock,
diff --git a/furniture-3d-system/src/server/repositories/__tests__/intake-non-integrated-product.repository.test.ts b/furniture-3d-system/src/server/repositories/__tests__/intake-non-integrated-product.repository.test.ts
index c806ea5c..23004ade 100644
--- a/furniture-3d-system/src/server/repositories/__tests__/intake-non-integrated-product.repository.test.ts
+++ b/furniture-3d-system/src/server/repositories/__tests__/intake-non-integrated-product.repository.test.ts
@@ -1,7 +1,14 @@
 jest.mock('@/lib/prisma', () => ({
   prisma: {
+    $transaction: jest.fn(),
     intakeNonIntegratedProduct: {
       findMany: jest.fn(),
+      create: jest.fn(),
+      update: jest.fn(),
+    },
+    intakeNonIntegratedSkuItem: {
+      createMany: jest.fn(),
+      deleteMany: jest.fn(),
     },
   },
 }))
@@ -10,14 +17,24 @@ import { prisma } from '@/lib/prisma'
 import { IntakeNonIntegratedProductRepositoryClass } from '../intake-non-integrated-product.repository'
 
 const mockPrisma = prisma as unknown as {
+  $transaction: jest.Mock
   intakeNonIntegratedProduct: {
     findMany: jest.Mock
+    create: jest.Mock
+    update: jest.Mock
+  }
+  intakeNonIntegratedSkuItem: {
+    createMany: jest.Mock
+    deleteMany: jest.Mock
   }
 }
 
 describe('IntakeNonIntegratedProductRepositoryClass.findDeletedBySpu', () => {
   beforeEach(() => {
     jest.clearAllMocks()
+    mockPrisma.$transaction.mockImplementation(async (callback: (tx: typeof mockPrisma) => unknown) =>
+      callback(mockPrisma),
+    )
   })
 
   it('reuses soft-deleted records when old brand names match normalized brands', async () => {
@@ -80,4 +97,114 @@ describe('IntakeNonIntegratedProductRepositoryClass.findDeletedBySpu', () => {
 
     expect(result).toBeNull()
   })
+
+  it('creates structured SKU rows after creating the product record', async () => {
+    const repository = new IntakeNonIntegratedProductRepositoryClass()
+    mockPrisma.intakeNonIntegratedProduct.create.mockResolvedValue({
+      id: 'non-integrated-1',
+      spu: 'DNZ0001',
+    })
+    mockPrisma.intakeNonIntegratedSkuItem.createMany.mockResolvedValue({ count: 1 })
+
+    await repository.create({
+      id: 'non-integrated-1',
+      spu: 'DNZ0001',
+      spuBase: 'DNZ0001',
+      brand: 'Base',
+      designer: 'Designer',
+      operator: 'Operator',
+      purchaser: 'Purchaser',
+      payload: {},
+      visibility: 'DEPARTMENT',
+      createdBy: 'user-1',
+      updatedBy: 'user-1',
+      skuItems: {
+        createMany: {
+          data: [
+            {
+              id: 'non-integrated-1:sku-1',
+              skuItemId: 'sku-1',
+              sortOrder: 1,
+              skuCode: 'SKU-001',
+              dataQualityStatus: 'READY',
+              missingRequiredFields: [],
+            },
+          ],
+        },
+      },
+    } as never)
+
+    expect(mockPrisma.intakeNonIntegratedProduct.create).toHaveBeenCalledWith({
+      data: expect.not.objectContaining({
+        skuItems: expect.anything(),
+      }),
+    })
+    expect(mockPrisma.intakeNonIntegratedSkuItem.createMany).toHaveBeenCalledWith({
+      data: [
+        expect.objectContaining({
+          id: 'non-integrated-1:sku-1',
+          productId: 'non-integrated-1',
+          skuCode: 'SKU-001',
+        }),
+      ],
+    })
+  })
+
+  it('refreshes structured SKU rows in an explicit delete-then-create transaction', async () => {
+    const repository = new IntakeNonIntegratedProductRepositoryClass()
+    const callOrder: string[] = []
+    mockPrisma.intakeNonIntegratedProduct.update.mockImplementation(async () => {
+      callOrder.push('product.update')
+      return {
+        id: 'non-integrated-1',
+        spu: 'DNZ0001',
+      }
+    })
+    mockPrisma.intakeNonIntegratedSkuItem.deleteMany.mockImplementation(async () => {
+      callOrder.push('sku.deleteMany')
+      return { count: 1 }
+    })
+    mockPrisma.intakeNonIntegratedSkuItem.createMany.mockImplementation(async () => {
+      callOrder.push('sku.createMany')
+      return { count: 1 }
+    })
+
+    await repository.update('non-integrated-1', {
+      payload: {},
+      skuItems: {
+        deleteMany: {},
+        createMany: {
+          data: [
+            {
+              id: 'non-integrated-1:sku-1',
+              skuItemId: 'sku-1',
+              sortOrder: 1,
+              skuCode: 'SKU-001',
+              dataQualityStatus: 'READY',
+              missingRequiredFields: [],
+            },
+          ],
+        },
+      },
+    } as never)
+
+    expect(callOrder).toEqual(['product.update', 'sku.deleteMany', 'sku.createMany'])
+    expect(mockPrisma.intakeNonIntegratedProduct.update).toHaveBeenCalledWith({
+      where: { id: 'non-integrated-1' },
+      data: expect.not.objectContaining({
+        skuItems: expect.anything(),
+      }),
+    })
+    expect(mockPrisma.intakeNonIntegratedSkuItem.deleteMany).toHaveBeenCalledWith({
+      where: { productId: 'non-integrated-1' },
+    })
+    expect(mockPrisma.intakeNonIntegratedSkuItem.createMany).toHaveBeenCalledWith({
+      data: [
+        expect.objectContaining({
+          productId: 'non-integrated-1',
+          skuCode: 'SKU-001',
+        }),
+      ],
+    })
+  })
 })
diff --git a/furniture-3d-system/src/server/repositories/__tests__/product.repository.test.ts b/furniture-3d-system/src/server/repositories/__tests__/product.repository.test.ts
index eff4cabf..bbca0b0f 100644
--- a/furniture-3d-system/src/server/repositories/__tests__/product.repository.test.ts
+++ b/furniture-3d-system/src/server/repositories/__tests__/product.repository.test.ts
@@ -1,31 +1,26 @@
-jest.mock('@/lib/prisma', () => ({
-  prisma: {
-    product: {
-      findMany: jest.fn(),
-      count: jest.fn(),
-    },
-  },
-}))
+import { ProductRepositoryClass } from '../product.repository'
 
-import { prisma } from '@/lib/prisma'
-import { productRepository } from '../product.repository'
-
-const mockPrisma = prisma as unknown as {
-  product: {
-    findMany: jest.Mock
-    count: jest.Mock
+function createRepositoryWithTransaction(tx: Record<string, unknown>) {
+  const repository = new ProductRepositoryClass()
+  ;(repository as unknown as { prisma: { $transaction: jest.Mock } }).prisma = {
+    $transaction: jest.fn(async (callback: (client: typeof tx) => unknown) => callback(tx)),
   }
+  return repository
 }
 
-describe('productRepository formalizedOnly', () => {
-  beforeEach(() => {
-    jest.clearAllMocks()
-    mockPrisma.product.findMany.mockResolvedValue([])
-    mockPrisma.product.count.mockResolvedValue(0)
-  })
-
+describe('ProductRepositoryClass master data identity guards', () => {
   it('只筛选来自准 SKU 正式入库且未删除的产品 SKU', async () => {
-    await productRepository.findManyWithRelations({
+    const repository = new ProductRepositoryClass()
+    const findMany = jest.fn().mockResolvedValue([])
+    const count = jest.fn().mockResolvedValue(0)
+    ;(repository as unknown as { prisma: { product: { findMany: jest.Mock; count: jest.Mock } } }).prisma = {
+      product: {
+        findMany,
+        count,
+      },
+    }
+
+    await repository.findManyWithRelations({
       pagination: { page: 1, limit: 20 },
       filter: {
         createdBy: 'user-1',
@@ -33,7 +28,7 @@ describe('productRepository formalizedOnly', () => {
       },
     })
 
-    expect(mockPrisma.product.findMany).toHaveBeenCalledWith(
+    expect(findMany).toHaveBeenCalledWith(
       expect.objectContaining({
         where: {
           deletedAt: null,
@@ -50,7 +45,7 @@ describe('productRepository formalizedOnly', () => {
         take: 20,
       }),
     )
-    expect(mockPrisma.product.count).toHaveBeenCalledWith({
+    expect(count).toHaveBeenCalledWith({
       where: {
         deletedAt: null,
         createdBy: 'user-1',
@@ -63,4 +58,338 @@ describe('productRepository formalizedOnly', () => {
       },
     })
   })
+
+  it('恢复产品 SKU 时遇到原始编码冲突应阻断，不自动追加后缀', async () => {
+    const skuUpdate = jest.fn()
+    const tx = {
+      product: {
+        update: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-1',
+            skuCode: 'SKU-001__deleted__20260531_sku-1',
+            attributes: {
+              _originalSkuCode: '  sku-001  ',
+              _deletedCodeAt: '2026-05-31T00:00:00.000Z',
+              _deletedByProductId: 'product-1',
+            },
+            originalSkuCode: null,
+            deletedByProductId: 'product-1',
+          },
+        ]),
+        count: jest.fn().mockResolvedValue(1),
+        update: skuUpdate,
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await expect(repository.restoreWithSkus('product-1')).rejects.toThrow(
+      '原始 SKU 编码「SKU-001」已被占用',
+    )
+    expect(skuUpdate).not.toHaveBeenCalled()
+  })
+
+  it('级联软删除产品时同步释放 SKU 资产 profile 条码唯一池', async () => {
+    const deletedAt = new Date('2026-05-31T12:00:00.000Z')
+    const skuUpdate = jest.fn()
+    const profileUpdateMany = jest.fn()
+    const tx = {
+      product: {
+        update: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-1',
+            skuCode: 'SKU-001',
+            attributes: {},
+            originalSkuCode: null,
+          },
+        ]),
+        update: skuUpdate,
+      },
+      productSkuAssetProfile: {
+        updateMany: profileUpdateMany,
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await repository.softDeleteWithCascade('product-1', deletedAt)
+
+    expect(skuUpdate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'sku-1' },
+        data: expect.objectContaining({
+          deletedAt,
+          skuCode: expect.stringContaining('__deleted__'),
+          originalSkuCode: 'SKU-001',
+          deletedCodeAt: deletedAt,
+          deletedByProductId: 'product-1',
+          productDeletedAt: deletedAt,
+          attributes: {},
+        }),
+      }),
+    )
+    expect(profileUpdateMany).toHaveBeenCalledWith({
+      where: { skuId: 'sku-1' },
+      data: { skuDeletedAt: deletedAt },
+    })
+  })
+
+  it('恢复产品 SKU 时遇到资产 profile 条码冲突应阻断', async () => {
+    const skuUpdate = jest.fn()
+    const tx = {
+      product: {
+        update: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-1',
+            skuCode: 'SKU-001__deleted__20260531_sku-1',
+            attributes: {
+              _originalSkuCode: 'SKU-001',
+              _deletedByProductId: 'product-1',
+            },
+            originalSkuCode: 'SKU-001',
+            deletedByProductId: 'product-1',
+          },
+        ]),
+        count: jest.fn().mockResolvedValue(0),
+        update: skuUpdate,
+      },
+      productSkuAssetProfile: {
+        findUnique: jest.fn().mockResolvedValue({
+          barcode: '  bc-001  ',
+          sourceStatus: 'ACTIVE',
+        }),
+        findFirst: jest.fn().mockResolvedValue({ skuId: 'sku-2' }),
+        updateMany: jest.fn(),
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await expect(repository.restoreWithSkus('product-1')).rejects.toThrow(
+      '条码「BC-001」已被占用',
+    )
+    expect(tx.productSkuAssetProfile.findFirst).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({
+          barcode: { equals: 'BC-001', mode: 'insensitive' },
+        }),
+      }),
+    )
+    expect(skuUpdate).not.toHaveBeenCalled()
+    expect(tx.productSkuAssetProfile.updateMany).not.toHaveBeenCalled()
+  })
+
+  it('恢复产品时不会恢复原本单独删除的 SKU', async () => {
+    const skuUpdate = jest.fn()
+    const tx = {
+      product: {
+        update: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-standalone-deleted',
+            skuCode: 'SKU-002__deleted__20260530_sku-2',
+            attributes: {
+              _originalSkuCode: 'SKU-002',
+              _deletedCodeAt: '2026-05-30T00:00:00.000Z',
+            },
+            originalSkuCode: 'SKU-002',
+            deletedByProductId: null,
+          },
+        ]),
+        count: jest.fn(),
+        update: skuUpdate,
+      },
+      productSkuAssetProfile: {
+        findUnique: jest.fn(),
+        findFirst: jest.fn(),
+        updateMany: jest.fn(),
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await expect(repository.restoreWithSkus('product-1')).resolves.toEqual({
+      count: 0,
+    })
+    expect(skuUpdate).not.toHaveBeenCalled()
+    expect(tx.productSkuAssetProfile.updateMany).not.toHaveBeenCalled()
+  })
+
+  it('恢复产品时不再读取旧 attributes 生命周期字段判断归属', async () => {
+    const skuUpdate = jest.fn()
+    const tx = {
+      product: {
+        update: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-legacy-lifecycle',
+            skuCode: 'SKU-003__deleted__20260531_sku-3',
+            attributes: {
+              _originalSkuCode: 'SKU-003',
+              _deletedByProductId: 'product-1',
+            },
+            originalSkuCode: 'SKU-003',
+            deletedByProductId: null,
+          },
+        ]),
+        count: jest.fn(),
+        update: skuUpdate,
+      },
+      productSkuAssetProfile: {
+        findUnique: jest.fn(),
+        findFirst: jest.fn(),
+        updateMany: jest.fn(),
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await expect(repository.restoreWithSkus('product-1')).resolves.toEqual({
+      count: 0,
+    })
+    expect(skuUpdate).not.toHaveBeenCalled()
+    expect(tx.productSkuAssetProfile.updateMany).not.toHaveBeenCalled()
+  })
+
+  it('CAD 导入创建默认 SKU 前会释放遗留删除态编码', async () => {
+    const deletedSkuUpdate = jest.fn()
+    const skuCreate = jest.fn().mockResolvedValue({ id: 'sku-created', skuCode: 'SPU-001-CAD' })
+    const tx = {
+      product: {
+        create: jest.fn().mockResolvedValue({ id: 'product-1' }),
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([
+          {
+            id: 'sku-deleted-1',
+            skuCode: 'SPU-001-CAD',
+            attributes: {},
+            deletedAt: new Date('2026-05-31T12:00:00.000Z'),
+            originalSkuCode: null,
+            deletedCodeAt: null,
+          },
+        ]),
+        update: deletedSkuUpdate,
+        findFirst: jest.fn().mockResolvedValue(null),
+        create: skuCreate,
+      },
+      panel: {
+        create: jest.fn(),
+      },
+      hole: {
+        createMany: jest.fn(),
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await repository.createProductFromCAD({
+      modelNumber: 'SPU-001',
+      name: '测试产品',
+      visibility: 'TEAM',
+      modelUrl: '/models/test.glb',
+      sourceFileName: 'test.dxf',
+      userId: 'user-1',
+      processingResult: {
+        success: true,
+        version: '2.2',
+        processingPath: 'direct',
+        panels: [],
+        holeGroups: [],
+        snapPatterns: [],
+        snapSurfaces: [],
+        mountPatterns: [],
+        hardware: [],
+        statistics: {
+          totalPanels: 0,
+          totalHoles: 0,
+          totalHardware: 0,
+          directMappedPanels: 0,
+          fallbackPanels: 0,
+          directMappedHardware: 0,
+          fallbackHardware: 0,
+        },
+        warnings: [],
+        errors: [],
+      },
+    })
+
+    expect(deletedSkuUpdate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'sku-deleted-1' },
+        data: expect.objectContaining({
+          skuCode: expect.stringContaining('SPU-001-CAD__deleted__'),
+          originalSkuCode: 'SPU-001-CAD',
+          deletedCodeAt: new Date('2026-05-31T12:00:00.000Z'),
+          attributes: {},
+        }),
+      }),
+    )
+    expect(skuCreate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          skuCode: 'SPU-001-CAD',
+        }),
+      }),
+    )
+  })
+
+  it('CAD 导入默认 SKU 编码已存在时应阻断，不自动创建后缀编码', async () => {
+    const productCreate = jest.fn()
+    const skuCreate = jest.fn()
+    const tx = {
+      product: {
+        create: productCreate,
+      },
+      productSKU: {
+        findMany: jest.fn().mockResolvedValue([]),
+        findFirst: jest.fn().mockResolvedValue({ id: 'sku-existing' }),
+        update: jest.fn(),
+        create: skuCreate,
+      },
+    }
+    const repository = createRepositoryWithTransaction(tx)
+
+    await expect(
+      repository.createProductFromCAD({
+        modelNumber: 'SPU-001',
+        name: '测试产品',
+        visibility: 'TEAM',
+        modelUrl: '/models/test.glb',
+        sourceFileName: 'test.dxf',
+        userId: 'user-1',
+        processingResult: {
+          success: true,
+          version: '2.2',
+          processingPath: 'direct',
+          panels: [],
+          holeGroups: [],
+          snapPatterns: [],
+          snapSurfaces: [],
+          mountPatterns: [],
+          hardware: [],
+          statistics: {
+            totalPanels: 0,
+            totalHoles: 0,
+            totalHardware: 0,
+            directMappedPanels: 0,
+            fallbackPanels: 0,
+            directMappedHardware: 0,
+            fallbackHardware: 0,
+          },
+          warnings: [],
+          errors: [],
+        },
+      }),
+    ).rejects.toThrow('默认 SKU 编码「SPU-001-CAD」已存在')
+    expect(productCreate).not.toHaveBeenCalled()
+    expect(skuCreate).not.toHaveBeenCalled()
+  })
 })
diff --git a/furniture-3d-system/src/server/repositories/asset-center.repository.ts b/furniture-3d-system/src/server/repositories/asset-center.repository.ts
index 7596836c..23676d97 100644
--- a/furniture-3d-system/src/server/repositories/asset-center.repository.ts
+++ b/furniture-3d-system/src/server/repositories/asset-center.repository.ts
@@ -7,6 +7,7 @@ import {
   getRestorableAssetVariantCode,
   getRestorableAssetVariantIdentityKey,
 } from '@/lib/open-product/asset-variant-soft-delete'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 
 export interface AssetCenterFinishRelation {
   id: string
@@ -230,7 +231,7 @@ class AssetFamilyRepositoryClass extends BaseRepository<
   protected modelName = 'assetFamily'
 
   async findByCode(code: string): Promise<AssetFamily | null> {
-    return this.prisma.assetFamily.findUnique({ where: { code } })
+    return this.prisma.assetFamily.findUnique({ where: { code: normalizeCoreIdentity(code) } })
   }
 
   async findWithRelationsById(id: string): Promise<AssetFamilyWithRelations | null> {
@@ -364,7 +365,7 @@ class AssetSeriesRepositoryClass extends BaseRepository<
   }
 
   async findByCode(code: string): Promise<AssetSeries | null> {
-    return this.prisma.assetSeries.findUnique({ where: { code } })
+    return this.prisma.assetSeries.findUnique({ where: { code: normalizeCoreIdentity(code) } })
   }
 
   async findById(id: string): Promise<AssetSeries | null> {
@@ -400,7 +401,7 @@ class AssetVariantRepositoryClass extends BaseRepository<
   async findByCode(code: string): Promise<AssetVariant | null> {
     return this.prisma.assetVariant.findFirst({
       where: {
-        code,
+        code: normalizeCoreIdentity(code),
         deletedAt: null,
         assetFamily: { is: { deletedAt: null } },
       },
@@ -410,7 +411,7 @@ class AssetVariantRepositoryClass extends BaseRepository<
   async findByBarcode(barcode: string): Promise<AssetVariant | null> {
     return this.prisma.assetVariant.findFirst({
       where: {
-        barcode,
+        barcode: normalizeCoreIdentity(barcode),
         deletedAt: null,
         assetFamily: { is: { deletedAt: null } },
       },
@@ -628,7 +629,7 @@ class SubstrateRepositoryClass extends BaseRepository<
   protected modelName = 'substrate'
 
   async findByCode(code: string): Promise<Substrate | null> {
-    return this.prisma.substrate.findUnique({ where: { code } })
+    return this.prisma.substrate.findUnique({ where: { code: normalizeCoreIdentity(code) } })
   }
 
   async findByIdWithRelations(id: string): Promise<SubstrateWithRelations | null> {
diff --git a/furniture-3d-system/src/server/repositories/common-component.repository.ts b/furniture-3d-system/src/server/repositories/common-component.repository.ts
index 9d614c7d..16035393 100644
--- a/furniture-3d-system/src/server/repositories/common-component.repository.ts
+++ b/furniture-3d-system/src/server/repositories/common-component.repository.ts
@@ -1,5 +1,6 @@
 import { CommonComponent, CommonComponentCategory, Prisma } from '@prisma/client'
 import { BaseRepository, FindManyOptions } from './base.repository'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 
 export interface CommonComponentFilter {
   search?: string
@@ -34,13 +35,13 @@ class CommonComponentRepositoryClass extends BaseRepository<
   protected modelName = 'commonComponent'
 
   async findByCode(code: string): Promise<CommonComponent | null> {
-    return this.prisma.commonComponent.findUnique({ where: { code } })
+    return this.prisma.commonComponent.findUnique({ where: { code: normalizeCoreIdentity(code) } })
   }
 
   async codeExists(code: string, excludeId?: string): Promise<boolean> {
     const count = await this.prisma.commonComponent.count({
       where: {
-        code,
+        code: normalizeCoreIdentity(code),
         id: excludeId ? { not: excludeId } : undefined,
       },
     })
diff --git a/furniture-3d-system/src/server/repositories/draft-group.repository.ts b/furniture-3d-system/src/server/repositories/draft-group.repository.ts
index 9c3e7818..c1e0ab7e 100644
--- a/furniture-3d-system/src/server/repositories/draft-group.repository.ts
+++ b/furniture-3d-system/src/server/repositories/draft-group.repository.ts
@@ -1,4 +1,4 @@
-import { DraftGroup, PackagedItem, PreSku, PreSkuPackagingPlan, Prisma } from '@prisma/client'
+import { DraftGroup, PackagedItem, PreSku, PreSkuBasicInfo, PreSkuPackagingPlan, Prisma } from '@prisma/client'
 import { BaseRepository } from './base.repository'
 
 export interface DraftGroupWithRelations extends DraftGroup {
@@ -8,6 +8,7 @@ export interface DraftGroupWithRelations extends DraftGroup {
 }
 
 export interface PreSkuWithRelations extends PreSku {
+  basicInfo: PreSkuBasicInfo | null
   packagingPlan: (PreSkuPackagingPlan & { packagedItems: PackagedItem[] }) | null
 }
 
@@ -114,6 +115,7 @@ class PreSkuRepositoryClass extends BaseRepository<
     return this.prisma.preSku.findUnique({
       where: { id },
       include: {
+        basicInfo: true,
         packagingPlan: {
           include: {
             packagedItems: true,
@@ -128,6 +130,7 @@ class PreSkuRepositoryClass extends BaseRepository<
       where: { draftGroupId },
       orderBy: { sequence: 'asc' },
       include: {
+        basicInfo: true,
         packagingPlan: {
           include: {
             packagedItems: true,
@@ -178,6 +181,7 @@ class PreSkuRepositoryClass extends BaseRepository<
       where: { id },
       data: { displaySummary },
       include: {
+        basicInfo: true,
         packagingPlan: {
           include: {
             packagedItems: true,
@@ -187,7 +191,32 @@ class PreSkuRepositoryClass extends BaseRepository<
     }) as Promise<PreSkuWithRelations>
   }
 
-  async findByDisplaySummaryField(
+  async upsertBasicInfo(
+    preSkuId: string,
+    data: Omit<Prisma.PreSkuBasicInfoUncheckedCreateInput, 'id' | 'preSkuId'>,
+  ): Promise<PreSkuWithRelations> {
+    return this.prisma.preSku.update({
+      where: { id: preSkuId },
+      data: {
+        basicInfo: {
+          upsert: {
+            create: data,
+            update: data,
+          },
+        },
+      },
+      include: {
+        basicInfo: true,
+        packagingPlan: {
+          include: {
+            packagedItems: true,
+          },
+        },
+      },
+    }) as Promise<PreSkuWithRelations>
+  }
+
+  async findByBasicInfoField(
     field: string,
     value: string,
     excludeId?: string,
@@ -195,9 +224,10 @@ class PreSkuRepositoryClass extends BaseRepository<
     return this.prisma.preSku.findMany({
       where: {
         id: excludeId ? { not: excludeId } : undefined,
-        displaySummary: {
-          path: [field],
-          equals: value,
+        basicInfo: {
+          is: {
+            [field]: value,
+          },
         },
       },
       select: {
@@ -209,7 +239,7 @@ class PreSkuRepositoryClass extends BaseRepository<
     })
   }
 
-  async findByDisplaySummaryFields(
+  async findByBasicInfoFields(
     fields: Record<string, string>,
     excludeId?: string,
   ): Promise<Array<{ id: string; defaultName: string; customName: string | null }>> {
@@ -219,12 +249,9 @@ class PreSkuRepositoryClass extends BaseRepository<
     return this.prisma.preSku.findMany({
       where: {
         id: excludeId ? { not: excludeId } : undefined,
-        AND: entries.map(([field, value]) => ({
-          displaySummary: {
-            path: [field],
-            equals: value,
-          },
-        })),
+        basicInfo: {
+          is: Object.fromEntries(entries),
+        },
       },
       select: {
         id: true,
diff --git a/furniture-3d-system/src/server/repositories/employee-directory.repository.ts b/furniture-3d-system/src/server/repositories/employee-directory.repository.ts
index 58fbf878..ccff81be 100644
--- a/furniture-3d-system/src/server/repositories/employee-directory.repository.ts
+++ b/furniture-3d-system/src/server/repositories/employee-directory.repository.ts
@@ -49,6 +49,25 @@ function normalizeEmployeeIdentity(value: string | null | undefined): string | n
   return text ? text.toLowerCase() : null
 }
 
+function normalizeRequiredText(value: string | null | undefined): string {
+  return String(value || '').trim()
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  const text = normalizeRequiredText(value)
+  return text || null
+}
+
+function normalizeOptionalEmail(value: string | null | undefined): string | null {
+  const text = normalizeOptionalText(value)
+  return text ? text.toLowerCase() : null
+}
+
+function normalizeDepartmentExternalIdsValue(value: Prisma.InputJsonValue | undefined): Prisma.InputJsonValue | undefined {
+  if (value === undefined) return undefined
+  return Array.from(new Set(parseDepartmentExternalIds(value)))
+}
+
 function buildEmployeeIdentityKey(field: EmployeeIdentityField, value: string | null | undefined): string | null {
   const normalized = normalizeEmployeeIdentity(value)
   return normalized ? `${field}:${normalized}` : null
@@ -189,13 +208,13 @@ class EmployeeDirectoryRepository {
     const orConditions: Prisma.EmployeeDirectoryWhereInput[] = []
 
     if (input.dingtalkUserId) {
-      orConditions.push({ dingtalkUserId: input.dingtalkUserId })
+      orConditions.push({ dingtalkUserId: normalizeRequiredText(input.dingtalkUserId) })
     }
     if (input.dingtalkUnionId) {
-      orConditions.push({ dingtalkUnionId: input.dingtalkUnionId })
+      orConditions.push({ dingtalkUnionId: normalizeRequiredText(input.dingtalkUnionId) })
     }
     if (input.mobile) {
-      orConditions.push({ mobile: input.mobile })
+      orConditions.push({ mobile: normalizeRequiredText(input.mobile) })
     }
 
     if (orConditions.length === 0) {
@@ -249,11 +268,15 @@ class EmployeeDirectoryRepository {
   async upsertOne(input: EmployeeDirectoryUpsertInput): Promise<EmployeeDirectory> {
     const now = new Date()
     const primaryDepartmentExternalId = await this.choosePrimaryDepartmentExternalId(input)
+    const dingtalkUserId = normalizeOptionalText(input.dingtalkUserId)
+    const dingtalkUnionId = normalizeOptionalText(input.dingtalkUnionId)
+    const jobNumber = normalizeOptionalText(input.jobNumber)
+    const mobile = normalizeOptionalText(input.mobile)
     const matchConditions = [
-      input.jobNumber ? { jobNumber: input.jobNumber } : undefined,
-      input.dingtalkUserId ? { dingtalkUserId: input.dingtalkUserId } : undefined,
-      input.dingtalkUnionId ? { dingtalkUnionId: input.dingtalkUnionId } : undefined,
-      input.mobile ? { mobile: input.mobile } : undefined,
+      jobNumber ? { jobNumber } : undefined,
+      dingtalkUserId ? { dingtalkUserId } : undefined,
+      dingtalkUnionId ? { dingtalkUnionId } : undefined,
+      mobile ? { mobile } : undefined,
     ].filter(Boolean) as Prisma.EmployeeDirectoryWhereInput[]
 
     const existingEmployee = matchConditions.length
@@ -264,16 +287,16 @@ class EmployeeDirectoryRepository {
       : null
 
     const data = {
-      dingtalkUserId: input.dingtalkUserId ?? null,
-      dingtalkUnionId: input.dingtalkUnionId ?? null,
-      jobNumber: input.jobNumber ?? null,
-      name: input.name,
-      mobile: input.mobile ?? null,
-      email: input.email ?? null,
-      title: input.title ?? null,
+      dingtalkUserId,
+      dingtalkUnionId,
+      jobNumber,
+      name: normalizeRequiredText(input.name),
+      mobile,
+      email: normalizeOptionalEmail(input.email),
+      title: normalizeOptionalText(input.title),
       sourceStatus: input.sourceStatus ?? 'EMPLOYED',
       primaryDepartmentExternalId,
-      departmentExternalIds: input.departmentExternalIds,
+      departmentExternalIds: normalizeDepartmentExternalIdsValue(input.departmentExternalIds),
       rawSnapshot: input.rawSnapshot,
       syncedAt: now,
     } satisfies Prisma.EmployeeDirectoryUncheckedCreateInput
@@ -325,6 +348,12 @@ class EmployeeDirectoryRepository {
     const now = new Date()
     const departmentMap = new Map<string, { id: string; fullPath: string }>()
     const activeEmployeeIdentityKeys = new Set<string>()
+    const departments = input.departments.map((department) => ({
+      ...department,
+      externalId: normalizeRequiredText(department.externalId),
+      name: normalizeRequiredText(department.name),
+      parentExternalId: normalizeOptionalText(department.parentExternalId),
+    }))
 
     for (const employee of input.employees) {
       addEmployeeIdentityKey(activeEmployeeIdentityKeys, 'dingtalkUserId', employee.dingtalkUserId)
@@ -333,7 +362,7 @@ class EmployeeDirectoryRepository {
       addEmployeeIdentityKey(activeEmployeeIdentityKeys, 'jobNumber', employee.jobNumber)
     }
 
-    const sortedDepartments = [...input.departments].sort((a, b) => {
+    const sortedDepartments = [...departments].sort((a, b) => {
       const aDepth = a.parentExternalId ? 1 : 0
       const bDepth = b.parentExternalId ? 1 : 0
       if (aDepth !== bDepth) return aDepth - bDepth
@@ -346,21 +375,24 @@ class EmployeeDirectoryRepository {
       let progressed = false
 
       for (const item of unresolvedDepartments) {
-        if (item.parentExternalId && !departmentMap.has(item.parentExternalId)) {
+        const parentExternalId = item.parentExternalId
+        if (parentExternalId && !departmentMap.has(parentExternalId)) {
           remaining.push(item)
           continue
         }
 
-        const parent = item.parentExternalId ? departmentMap.get(item.parentExternalId) ?? null : null
+        const parent = parentExternalId ? departmentMap.get(parentExternalId) ?? null : null
+        const externalId = item.externalId
+        const name = item.name
         const departmentName = await this.resolveUniqueDepartmentName(prisma, {
-          externalId: item.externalId,
-          name: item.name,
+          externalId,
+          name,
           parentFullPath: parent?.fullPath ?? null,
         })
         const fullPath = parent ? `${parent.fullPath} > ${departmentName}` : departmentName
 
         const department = await prisma.department.upsert({
-          where: { externalId: item.externalId },
+          where: { externalId },
           update: {
             name: departmentName,
             fullPath,
@@ -372,7 +404,7 @@ class EmployeeDirectoryRepository {
           create: {
             name: departmentName,
             fullPath,
-            externalId: item.externalId,
+            externalId,
             parentId: parent?.id ?? null,
             orderIndex: item.orderIndex ?? 0,
             rawSnapshot: item.rawSnapshot,
@@ -380,7 +412,7 @@ class EmployeeDirectoryRepository {
           },
         })
 
-        departmentMap.set(item.externalId, { id: department.id, fullPath })
+        departmentMap.set(externalId, { id: department.id, fullPath })
         progressed = true
       }
 
@@ -402,11 +434,15 @@ class EmployeeDirectoryRepository {
           }),
         ) ?? employee.primaryDepartmentExternalId ?? null
 
+      const dingtalkUserId = normalizeOptionalText(employee.dingtalkUserId)
+      const dingtalkUnionId = normalizeOptionalText(employee.dingtalkUnionId)
+      const mobile = normalizeOptionalText(employee.mobile)
+      const jobNumber = normalizeOptionalText(employee.jobNumber)
       const matchConditions = [
-        employee.dingtalkUserId ? { dingtalkUserId: employee.dingtalkUserId } : undefined,
-        employee.dingtalkUnionId ? { dingtalkUnionId: employee.dingtalkUnionId } : undefined,
-        employee.mobile ? { mobile: employee.mobile } : undefined,
-        employee.jobNumber ? { jobNumber: employee.jobNumber } : undefined,
+        dingtalkUserId ? { dingtalkUserId } : undefined,
+        dingtalkUnionId ? { dingtalkUnionId } : undefined,
+        mobile ? { mobile } : undefined,
+        jobNumber ? { jobNumber } : undefined,
       ].filter(Boolean) as Prisma.EmployeeDirectoryWhereInput[]
 
       const existingEmployee = matchConditions.length
@@ -426,16 +462,16 @@ class EmployeeDirectoryRepository {
         const employeeRecord = await prisma.employeeDirectory.update({
           where: { id: existingEmployee.id },
           data: {
-            dingtalkUserId: employee.dingtalkUserId ?? null,
-            dingtalkUnionId: employee.dingtalkUnionId ?? null,
-            jobNumber: employee.jobNumber ?? null,
-            name: employee.name,
-            mobile: employee.mobile ?? null,
-            email: employee.email ?? null,
-            title: employee.title ?? null,
+            dingtalkUserId,
+            dingtalkUnionId,
+            jobNumber,
+            name: normalizeRequiredText(employee.name),
+            mobile,
+            email: normalizeOptionalEmail(employee.email),
+            title: normalizeOptionalText(employee.title),
             sourceStatus: 'EMPLOYED',
             primaryDepartmentExternalId,
-            departmentExternalIds: employee.departmentExternalIds,
+            departmentExternalIds: normalizeDepartmentExternalIdsValue(employee.departmentExternalIds),
             rawSnapshot: employee.rawSnapshot,
             syncedAt: now,
           },
@@ -450,16 +486,16 @@ class EmployeeDirectoryRepository {
 
       const employeeRecord = await prisma.employeeDirectory.create({
         data: {
-          dingtalkUserId: employee.dingtalkUserId ?? null,
-          dingtalkUnionId: employee.dingtalkUnionId ?? null,
-          jobNumber: employee.jobNumber ?? null,
-          name: employee.name,
-          mobile: employee.mobile ?? null,
-          email: employee.email ?? null,
-          title: employee.title ?? null,
+          dingtalkUserId,
+          dingtalkUnionId,
+          jobNumber,
+          name: normalizeRequiredText(employee.name),
+          mobile,
+          email: normalizeOptionalEmail(employee.email),
+          title: normalizeOptionalText(employee.title),
           sourceStatus: 'EMPLOYED',
           primaryDepartmentExternalId,
-          departmentExternalIds: employee.departmentExternalIds,
+          departmentExternalIds: normalizeDepartmentExternalIdsValue(employee.departmentExternalIds),
           rawSnapshot: employee.rawSnapshot,
           syncedAt: now,
         },
@@ -472,11 +508,15 @@ class EmployeeDirectoryRepository {
     }
 
     for (const dimission of input.dimissionEntries) {
+      const dingtalkUserId = normalizeOptionalText(dimission.dingtalkUserId)
+      const dingtalkUnionId = normalizeOptionalText(dimission.dingtalkUnionId)
+      const mobile = normalizeOptionalText(dimission.mobile)
+      const jobNumber = normalizeOptionalText(dimission.jobNumber)
       const activeIdentityMatched = [
-        buildEmployeeIdentityKey('dingtalkUserId', dimission.dingtalkUserId),
-        buildEmployeeIdentityKey('dingtalkUnionId', dimission.dingtalkUnionId),
-        buildEmployeeIdentityKey('mobile', dimission.mobile),
-        buildEmployeeIdentityKey('jobNumber', dimission.jobNumber),
+        buildEmployeeIdentityKey('dingtalkUserId', dingtalkUserId),
+        buildEmployeeIdentityKey('dingtalkUnionId', dingtalkUnionId),
+        buildEmployeeIdentityKey('mobile', mobile),
+        buildEmployeeIdentityKey('jobNumber', jobNumber),
       ].some((key) => key !== null && activeEmployeeIdentityKeys.has(key))
 
       if (activeIdentityMatched) {
@@ -484,10 +524,10 @@ class EmployeeDirectoryRepository {
       }
 
       const dimissionConditions = [
-        dimission.dingtalkUserId ? { dingtalkUserId: dimission.dingtalkUserId } : undefined,
-        dimission.dingtalkUnionId ? { dingtalkUnionId: dimission.dingtalkUnionId } : undefined,
-        dimission.mobile ? { mobile: dimission.mobile } : undefined,
-        dimission.jobNumber ? { jobNumber: dimission.jobNumber } : undefined,
+        dingtalkUserId ? { dingtalkUserId } : undefined,
+        dingtalkUnionId ? { dingtalkUnionId } : undefined,
+        mobile ? { mobile } : undefined,
+        jobNumber ? { jobNumber } : undefined,
       ].filter(Boolean) as Prisma.EmployeeDirectoryWhereInput[]
 
       if (dimissionConditions.length === 0) {
diff --git a/furniture-3d-system/src/server/repositories/feedback.repository.ts b/furniture-3d-system/src/server/repositories/feedback.repository.ts
index 481f844f..c83b00f5 100644
--- a/furniture-3d-system/src/server/repositories/feedback.repository.ts
+++ b/furniture-3d-system/src/server/repositories/feedback.repository.ts
@@ -48,6 +48,17 @@ export interface FeedbackWithRelations extends Feedback {
   } | null
 }
 
+function normalizeRequiredText(value: unknown, message: string): string {
+  if (typeof value !== 'string') {
+    throw new Error(message)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new Error(message)
+  }
+  return normalized
+}
+
 // ============ 反馈 Repository ============
 
 class FeedbackRepositoryClass extends BaseRepository<
@@ -208,11 +219,13 @@ class FeedbackRepositoryClass extends BaseRepository<
    * 标记为已解决
    */
   async markAsResolved(id: string, resolution: string): Promise<Feedback> {
+    const normalizedId = normalizeRequiredText(id, '反馈 ID 不能为空')
+    const normalizedResolution = normalizeRequiredText(resolution, '解决方案不能为空')
     return this.prisma.feedback.update({
-      where: { id },
+      where: { id: normalizedId },
       data: {
         status: 'RESOLVED',
-        resolution,
+        resolution: normalizedResolution,
         resolvedAt: new Date(),
       },
     })
@@ -225,19 +238,25 @@ class FeedbackRepositoryClass extends BaseRepository<
     id: string,
     comment: { userId: string; userName: string; content: string }
   ): Promise<Feedback> {
-    const feedback = await this.findById(id)
+    const normalizedId = normalizeRequiredText(id, '反馈 ID 不能为空')
+    const normalizedComment = {
+      userId: normalizeRequiredText(comment.userId, '评论人不能为空'),
+      userName: normalizeRequiredText(comment.userName, '评论人名称不能为空'),
+      content: normalizeRequiredText(comment.content, '评论内容不能为空'),
+    }
+    const feedback = await this.findById(normalizedId)
     if (!feedback) {
       throw new Error('反馈不存在')
     }
 
     const comments = (feedback.comments as Array<Record<string, unknown>>) || []
     comments.push({
-      ...comment,
+      ...normalizedComment,
       createdAt: new Date().toISOString(),
     })
 
     return this.prisma.feedback.update({
-      where: { id },
+      where: { id: normalizedId },
       data: {
         status: 'IN_PROGRESS',
         comments: comments as unknown as Prisma.InputJsonValue,
@@ -249,9 +268,11 @@ class FeedbackRepositoryClass extends BaseRepository<
    * 重新分配处理者
    */
   async reassign(id: string, assigneeId: string): Promise<Feedback> {
+    const normalizedId = normalizeRequiredText(id, '反馈 ID 不能为空')
+    const normalizedAssigneeId = normalizeRequiredText(assigneeId, '处理人不能为空')
     return this.prisma.feedback.update({
-      where: { id },
-      data: { assigneeId },
+      where: { id: normalizedId },
+      data: { assigneeId: normalizedAssigneeId },
     })
   }
 
diff --git a/furniture-3d-system/src/server/repositories/hardware.repository.ts b/furniture-3d-system/src/server/repositories/hardware.repository.ts
index 6083001c..fdbd152e 100644
--- a/furniture-3d-system/src/server/repositories/hardware.repository.ts
+++ b/furniture-3d-system/src/server/repositories/hardware.repository.ts
@@ -8,6 +8,7 @@
 
 import { Hardware, HardwareCategory, HardwareMapping, Prisma } from '@prisma/client'
 import { BaseRepository, FindManyOptions } from './base.repository'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 
 // ============ 类型定义 ============
 
@@ -66,7 +67,7 @@ class HardwareRepositoryClass extends BaseRepository<
    */
   async findByCode(code: string): Promise<Hardware | null> {
     return this.prisma.hardware.findUnique({
-      where: { code },
+      where: { code: normalizeCoreIdentity(code) },
     })
   }
 
@@ -76,7 +77,7 @@ class HardwareRepositoryClass extends BaseRepository<
   async codeExists(code: string, excludeId?: string): Promise<boolean> {
     const count = await this.prisma.hardware.count({
       where: {
-        code,
+        code: normalizeCoreIdentity(code),
         id: excludeId ? { not: excludeId } : undefined,
       },
     })
diff --git a/furniture-3d-system/src/server/repositories/intake-non-integrated-product.repository.ts b/furniture-3d-system/src/server/repositories/intake-non-integrated-product.repository.ts
index 8735c20d..615e7cca 100644
--- a/furniture-3d-system/src/server/repositories/intake-non-integrated-product.repository.ts
+++ b/furniture-3d-system/src/server/repositories/intake-non-integrated-product.repository.ts
@@ -4,6 +4,28 @@ import { BaseRepository } from './base.repository'
 
 export type IntakeNonIntegratedProductCreateInput = Prisma.IntakeNonIntegratedProductCreateInput
 export type IntakeNonIntegratedProductUpdateInput = Prisma.IntakeNonIntegratedProductUpdateInput
+type IntakeNonIntegratedProductTx = Prisma.TransactionClient
+type StructuredSkuItemsNestedInput = {
+  createMany?: {
+    data?:
+      | Prisma.IntakeNonIntegratedSkuItemCreateManyProductInput
+      | Prisma.IntakeNonIntegratedSkuItemCreateManyProductInput[]
+  }
+}
+
+function extractStructuredSkuItems(value: unknown) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    return []
+  }
+
+  const createMany = (value as StructuredSkuItemsNestedInput).createMany
+  const data = createMany?.data
+  if (!data) {
+    return []
+  }
+
+  return Array.isArray(data) ? data : [data]
+}
 
 class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
   IntakeNonIntegratedProduct,
@@ -13,6 +35,110 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
 > {
   protected modelName = 'intakeNonIntegratedProduct'
 
+  async create(data: IntakeNonIntegratedProductCreateInput) {
+    return this.createWithClient(this.prisma, data)
+  }
+
+  async createInTransaction(tx: IntakeNonIntegratedProductTx, data: IntakeNonIntegratedProductCreateInput) {
+    return this.createWithClient(tx, data)
+  }
+
+  private async createWithClient(
+    client: typeof this.prisma | IntakeNonIntegratedProductTx,
+    data: IntakeNonIntegratedProductCreateInput,
+  ) {
+    const { skuItems, ...productData } = data as IntakeNonIntegratedProductCreateInput & {
+      skuItems?: StructuredSkuItemsNestedInput
+    }
+    const structuredSkuItems = extractStructuredSkuItems(skuItems)
+
+    if (structuredSkuItems.length === 0) {
+      return client.intakeNonIntegratedProduct.create({
+        data: productData as IntakeNonIntegratedProductCreateInput,
+      })
+    }
+
+    const createRecord = async (tx: IntakeNonIntegratedProductTx) => {
+      const record = await tx.intakeNonIntegratedProduct.create({
+        data: productData as IntakeNonIntegratedProductCreateInput,
+      })
+
+      await tx.intakeNonIntegratedSkuItem.createMany({
+        data: structuredSkuItems.map((item) => ({
+          ...item,
+          productId: record.id,
+        })),
+      })
+
+      return record
+    }
+
+    if ('$transaction' in client) {
+      return client.$transaction((tx) => createRecord(tx))
+    }
+
+    return createRecord(client)
+  }
+
+  async update(id: string, data: IntakeNonIntegratedProductUpdateInput) {
+    return this.updateWithClient(this.prisma, id, data)
+  }
+
+  async updateInTransaction(
+    tx: IntakeNonIntegratedProductTx,
+    id: string,
+    data: IntakeNonIntegratedProductUpdateInput,
+  ) {
+    return this.updateWithClient(tx, id, data)
+  }
+
+  private async updateWithClient(
+    client: typeof this.prisma | IntakeNonIntegratedProductTx,
+    id: string,
+    data: IntakeNonIntegratedProductUpdateInput,
+  ) {
+    const { skuItems, ...productData } = data as IntakeNonIntegratedProductUpdateInput & {
+      skuItems?: StructuredSkuItemsNestedInput
+    }
+    const shouldRefreshStructuredSkuItems = Boolean(skuItems)
+    const structuredSkuItems = extractStructuredSkuItems(skuItems)
+
+    if (!shouldRefreshStructuredSkuItems) {
+      return client.intakeNonIntegratedProduct.update({
+        where: { id },
+        data: productData as IntakeNonIntegratedProductUpdateInput,
+      })
+    }
+
+    const updateRecord = async (tx: IntakeNonIntegratedProductTx) => {
+      const record = await tx.intakeNonIntegratedProduct.update({
+        where: { id },
+        data: productData as IntakeNonIntegratedProductUpdateInput,
+      })
+
+      await tx.intakeNonIntegratedSkuItem.deleteMany({
+        where: { productId: record.id },
+      })
+
+      if (structuredSkuItems.length > 0) {
+        await tx.intakeNonIntegratedSkuItem.createMany({
+          data: structuredSkuItems.map((item) => ({
+            ...item,
+            productId: record.id,
+          })),
+        })
+      }
+
+      return record
+    }
+
+    if ('$transaction' in client) {
+      return client.$transaction((tx) => updateRecord(tx))
+    }
+
+    return updateRecord(client)
+  }
+
   private buildActiveWhere(scopeWhere?: Prisma.IntakeNonIntegratedProductWhereInput) {
     return {
       deletedAt: null,
@@ -27,6 +153,14 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
   async listActive(scopeWhere?: Prisma.IntakeNonIntegratedProductWhereInput) {
     return this.prisma.intakeNonIntegratedProduct.findMany({
       where: this.buildActiveWhere(scopeWhere),
+      include: {
+        profile: true,
+        skuItems: {
+          orderBy: {
+            sortOrder: 'asc',
+          },
+        },
+      },
       orderBy: {
         createdAt: 'desc',
       },
@@ -50,6 +184,14 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
     const [records, total] = await this.prisma.$transaction([
       this.prisma.intakeNonIntegratedProduct.findMany({
         where,
+        include: {
+          profile: true,
+          skuItems: {
+            orderBy: {
+              sortOrder: 'asc',
+            },
+          },
+        },
         orderBy: {
           createdAt: 'desc',
         },
@@ -68,11 +210,37 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
         id,
         deletedAt: null,
       },
+      include: {
+        profile: true,
+        skuItems: {
+          orderBy: {
+            sortOrder: 'asc',
+          },
+        },
+      },
     })
   }
 
   async findBySpu(spu: string, excludeId?: string, brand?: string) {
-    return this.prisma.intakeNonIntegratedProduct.findFirst({
+    return this.findBySpuWithClient(this.prisma, spu, excludeId, brand)
+  }
+
+  async findBySpuInTransaction(
+    tx: IntakeNonIntegratedProductTx,
+    spu: string,
+    excludeId?: string,
+    brand?: string,
+  ) {
+    return this.findBySpuWithClient(tx, spu, excludeId, brand)
+  }
+
+  private async findBySpuWithClient(
+    client: typeof this.prisma | IntakeNonIntegratedProductTx,
+    spu: string,
+    excludeId?: string,
+    brand?: string,
+  ) {
+    return client.intakeNonIntegratedProduct.findFirst({
       where: {
         spu,
         ...(brand ? { brand } : null),
@@ -89,7 +257,25 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
   }
 
   async findDeletedBySpu(spu: string, excludeId?: string, brand?: string) {
-    const deletedRecords = await this.prisma.intakeNonIntegratedProduct.findMany({
+    return this.findDeletedBySpuWithClient(this.prisma, spu, excludeId, brand)
+  }
+
+  async findDeletedBySpuInTransaction(
+    tx: IntakeNonIntegratedProductTx,
+    spu: string,
+    excludeId?: string,
+    brand?: string,
+  ) {
+    return this.findDeletedBySpuWithClient(tx, spu, excludeId, brand)
+  }
+
+  private async findDeletedBySpuWithClient(
+    client: typeof this.prisma | IntakeNonIntegratedProductTx,
+    spu: string,
+    excludeId?: string,
+    brand?: string,
+  ) {
+    const deletedRecords = await client.intakeNonIntegratedProduct.findMany({
       where: {
         spu,
         deletedAt: {
@@ -126,11 +312,14 @@ class IntakeNonIntegratedProductRepositoryClass extends BaseRepository<
       data: {
         deletedAt: new Date(),
         updatedBy,
+        skuItems: {
+          deleteMany: {},
+        },
       },
     })
   }
 
-  async updatePayloadByUser(id: string, payload: Prisma.InputJsonValue, updatedBy: string) {
+  async updateAttachmentPayloadByUser(id: string, payload: Prisma.InputJsonValue, updatedBy: string) {
     return this.prisma.intakeNonIntegratedProduct.update({
       where: { id },
       data: {
diff --git a/furniture-3d-system/src/server/repositories/log.repository.ts b/furniture-3d-system/src/server/repositories/log.repository.ts
index 5cf994e8..e5dcbd92 100644
--- a/furniture-3d-system/src/server/repositories/log.repository.ts
+++ b/furniture-3d-system/src/server/repositories/log.repository.ts
@@ -36,6 +36,24 @@ export interface LogWithUser extends ActivityLog {
   }
 }
 
+function normalizeRequiredText(value: unknown, message: string): string {
+  if (typeof value !== 'string') {
+    throw new Error(message)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new Error(message)
+  }
+  return normalized
+}
+
+function normalizeOptionalText(value: unknown): string | null {
+  if (value == null) return null
+  if (typeof value !== 'string') return null
+  const normalized = value.trim()
+  return normalized ? normalized : null
+}
+
 // ============ 日志 Repository ============
 
 class LogRepositoryClass extends BaseRepository<
@@ -221,14 +239,19 @@ class LogRepositoryClass extends BaseRepository<
     metadata?: object
   }, tx?: Prisma.TransactionClient): Promise<ActivityLog> {
     const client = tx ?? this.prisma
+    const targetType = normalizeOptionalText(data.targetType)
+    const targetId = normalizeOptionalText(data.targetId)
+    if (Boolean(targetType) !== Boolean(targetId)) {
+      throw new Error('操作日志目标类型和目标 ID 必须同时填写')
+    }
 
     return client.activityLog.create({
       data: {
-        user: { connect: { id: data.userId } },
+        user: { connect: { id: normalizeRequiredText(data.userId, '用户 ID 不能为空') } },
         type: data.type,
-        action: data.action,
-        targetType: data.targetType,
-        targetId: data.targetId,
+        action: normalizeRequiredText(data.action, '操作动作不能为空'),
+        targetType,
+        targetId,
         changes: data.changes,
         metadata: data.metadata,
       },
diff --git a/furniture-3d-system/src/server/repositories/material.repository.ts b/furniture-3d-system/src/server/repositories/material.repository.ts
index f2108da7..00dca225 100644
--- a/furniture-3d-system/src/server/repositories/material.repository.ts
+++ b/furniture-3d-system/src/server/repositories/material.repository.ts
@@ -8,6 +8,7 @@
 
 import { Material, MaterialCategory, Prisma } from '@prisma/client'
 import { BaseRepository, FindManyOptions } from './base.repository'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 
 // ============ 类型定义 ============
 
@@ -55,14 +56,14 @@ class MaterialRepositoryClass extends BaseRepository<
 
   async findByCode(code: string): Promise<Material | null> {
     return this.prisma.material.findUnique({
-      where: { code },
+      where: { code: normalizeCoreIdentity(code) },
     })
   }
 
   async findLatestGeneratedCode(prefix: string): Promise<string | null> {
     const record = await this.prisma.material.findFirst({
       where: {
-        code: { startsWith: prefix },
+        code: { startsWith: normalizeCoreIdentity(prefix) },
       },
       orderBy: {
         code: 'desc',
diff --git a/furniture-3d-system/src/server/repositories/planning.repository.ts b/furniture-3d-system/src/server/repositories/planning.repository.ts
index b4641d0c..dfb916b8 100644
--- a/furniture-3d-system/src/server/repositories/planning.repository.ts
+++ b/furniture-3d-system/src/server/repositories/planning.repository.ts
@@ -4,6 +4,7 @@ import {
   PlanningWorkspace,
   Prisma,
 } from '@prisma/client'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { BaseRepository } from './base.repository'
 
 export interface PlanningTemplateFilter {
@@ -43,14 +44,14 @@ class PlanningTemplateRepositoryClass extends BaseRepository<
 
   async findByCode(code: string): Promise<PlanningTemplate | null> {
     return this.prisma.planningTemplate.findUnique({
-      where: { code },
+      where: { code: normalizeCoreIdentity(code) },
     })
   }
 
   async codeExists(code: string, excludeId?: string): Promise<boolean> {
     const count = await this.prisma.planningTemplate.count({
       where: {
-        code,
+        code: normalizeCoreIdentity(code),
         id: excludeId ? { not: excludeId } : undefined,
       },
     })
diff --git a/furniture-3d-system/src/server/repositories/product-upload.repository.ts b/furniture-3d-system/src/server/repositories/product-upload.repository.ts
index cc918e04..a9827e99 100644
--- a/furniture-3d-system/src/server/repositories/product-upload.repository.ts
+++ b/furniture-3d-system/src/server/repositories/product-upload.repository.ts
@@ -5,6 +5,7 @@
  */
 
 import { Prisma } from '@prisma/client'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { prisma } from '@/lib/prisma'
 
 export interface UploadPanelInput {
@@ -36,7 +37,7 @@ export interface CreateUploadedProductInput {
 class ProductUploadRepository {
   async findByModelNumber(modelNumber: string) {
     return prisma.product.findUnique({
-      where: { modelNumber },
+      where: { modelNumber: normalizeCoreIdentity(modelNumber) },
       select: { id: true },
     })
   }
@@ -64,11 +65,14 @@ class ProductUploadRepository {
       skuCode,
       skuAttributes,
     } = input
+    const normalizedModelNumber = normalizeCoreIdentity(modelNumber)
+    const normalizedSkuCode = normalizeCoreIdentity(skuCode)
+    const skuName = normalizedSkuCode
 
     return prisma.$transaction(async (tx) => {
       const product = await tx.product.create({
         data: {
-          modelNumber,
+          modelNumber: normalizedModelNumber,
           name,
           categoryId,
           description: description?.trim() || null,
@@ -84,7 +88,8 @@ class ProductUploadRepository {
         data: {
           productId: product.id,
           ownerId: createdBy,
-          skuCode,
+          skuCode: normalizedSkuCode,
+          name: skuName,
           attributes: skuAttributes,
           price: 0,
           costPrice: 0,
diff --git a/furniture-3d-system/src/server/repositories/product.repository.ts b/furniture-3d-system/src/server/repositories/product.repository.ts
index 67bc42ce..801f3fcd 100644
--- a/furniture-3d-system/src/server/repositories/product.repository.ts
+++ b/furniture-3d-system/src/server/repositories/product.repository.ts
@@ -9,6 +9,14 @@
 import { Product, Prisma } from '@prisma/client'
 import { BaseRepository, FindManyOptions } from './base.repository'
 import type { ProcessingResult } from '@/lib/cad-export-processor'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
+import {
+  buildDeletedSkuCode,
+  getRestorableSkuCode,
+  removeSoftDeleteLifecycleAttributes,
+  releaseSkuCodeFromDeletedRecordsTx,
+  toSkuAttributesObject,
+} from '../services/sku-soft-delete.helper'
 
 // ============ 类型定义 ============
 
@@ -47,7 +55,7 @@ class ProductRepositoryClass extends BaseRepository<
    */
   async findByModelNumber(modelNumber: string): Promise<Product | null> {
     return this.prisma.product.findUnique({
-      where: { modelNumber },
+      where: { modelNumber: normalizeCoreIdentity(modelNumber) },
     })
   }
 
@@ -57,7 +65,7 @@ class ProductRepositoryClass extends BaseRepository<
   async modelNumberExists(modelNumber: string, excludeId?: string): Promise<boolean> {
     const count = await this.prisma.product.count({
       where: {
-        modelNumber,
+        modelNumber: normalizeCoreIdentity(modelNumber),
         id: excludeId ? { not: excludeId } : undefined,
       },
     })
@@ -96,8 +104,9 @@ class ProductRepositoryClass extends BaseRepository<
           skus: {
             where: { deletedAt: null },
             orderBy: { createdAt: 'asc' },
-            // 确保包含 deletedAt 字段用于二次过滤
-            include: {},
+            include: {
+              assetProfile: true,
+            },
           },
           shareLinks: {
             select: { token: true, viewCount: true },
@@ -136,6 +145,7 @@ class ProductRepositoryClass extends BaseRepository<
             owner: {
               select: { id: true, name: true, avatar: true },
             },
+            assetProfile: true,
           },
           orderBy: { createdAt: 'asc' },
         },
@@ -465,8 +475,7 @@ class ProductRepositoryClass extends BaseRepository<
 
   async softDeleteWithCascade(
     productId: string,
-    deletedAt: Date,
-    marker: string
+    deletedAt: Date
   ): Promise<{ count: number }> {
     return this.prisma.$transaction(async (tx) => {
       await tx.product.update({
@@ -477,35 +486,40 @@ class ProductRepositoryClass extends BaseRepository<
 
       const skus = await tx.productSKU.findMany({
         where: { productId, deletedAt: null },
-        select: { id: true, skuCode: true, attributes: true },
+        select: { id: true, skuCode: true, attributes: true, originalSkuCode: true },
       })
 
       for (const sku of skus) {
-        const attributesObject = this.toAttributesObject(sku.attributes)
-        const originalSkuCode = this.getRestorableSkuCode(sku.skuCode, sku.attributes, marker)
+        const attributesObject = removeSoftDeleteLifecycleAttributes(
+          toSkuAttributesObject(sku.attributes),
+        )
+        const originalSkuCode = getRestorableSkuCode(sku.skuCode, sku.originalSkuCode)
 
         await tx.productSKU.update({
           where: { id: sku.id },
           data: {
             deletedAt,
-            skuCode: this.buildDeletedSkuCode(sku.skuCode, sku.id, deletedAt, marker),
+            skuCode: buildDeletedSkuCode(originalSkuCode, sku.id, deletedAt),
+            originalSkuCode,
+            deletedCodeAt: deletedAt,
+            deletedByProductId: productId,
+            productDeletedAt: deletedAt,
             attributes: {
               ...attributesObject,
-              _originalSkuCode: originalSkuCode,
-              _deletedCodeAt: deletedAt.toISOString(),
             } as Prisma.InputJsonValue,
           },
         })
+        await tx.productSkuAssetProfile.updateMany({
+          where: { skuId: sku.id },
+          data: { skuDeletedAt: deletedAt },
+        })
       }
 
       return { count: skus.length }
     })
   }
 
-  async restoreWithSkus(
-    productId: string,
-    marker: string
-  ): Promise<{ count: number }> {
+  async restoreWithSkus(productId: string): Promise<{ count: number }> {
     return this.prisma.$transaction(async (tx) => {
       await tx.product.update({
         where: { id: productId },
@@ -515,45 +529,84 @@ class ProductRepositoryClass extends BaseRepository<
 
       const skus = await tx.productSKU.findMany({
         where: { productId, deletedAt: { not: null } },
-        select: { id: true, skuCode: true, attributes: true },
+        select: {
+          id: true,
+          skuCode: true,
+          attributes: true,
+          originalSkuCode: true,
+          deletedByProductId: true,
+        },
       })
 
       let restoredCount = 0
 
       for (const sku of skus) {
-        let baseSkuCode = this.getRestorableSkuCode(sku.skuCode, sku.attributes, marker)
-        let candidate = baseSkuCode
-        let suffix = 0
-
-        while (true) {
-          const codeExists = await tx.productSKU.count({
-            where: {
-              skuCode: candidate,
-              deletedAt: null,
-              id: { not: sku.id },
-            },
-          })
-          if (codeExists === 0) break
-          suffix += 1
-          candidate = `${baseSkuCode}-${suffix}`
+        const attributesObject = toSkuAttributesObject(sku.attributes)
+        if (sku.deletedByProductId !== productId) {
+          continue
         }
 
+        const baseSkuCode = getRestorableSkuCode(sku.skuCode, sku.originalSkuCode)
         if (!baseSkuCode) {
-          baseSkuCode = candidate
+          throw new Error(`无法恢复 SKU ${sku.id}：缺少原始 SKU 编码`)
         }
 
-        const attributesObject = this.toAttributesObject(sku.attributes)
-        delete attributesObject._originalSkuCode
-        delete attributesObject._deletedCodeAt
+        const codeExists = await tx.productSKU.count({
+          where: {
+            skuCode: baseSkuCode,
+            deletedAt: null,
+            id: { not: sku.id },
+          },
+        })
+        if (codeExists > 0) {
+          throw new Error(
+            `无法恢复 SKU ${sku.id}：原始 SKU 编码「${baseSkuCode}」已被占用，请先人工处理编码冲突`,
+          )
+        }
+
+        const restoredAttributes = removeSoftDeleteLifecycleAttributes(attributesObject)
+
+        const assetProfile = await tx.productSkuAssetProfile.findUnique({
+          where: { skuId: sku.id },
+          select: { barcode: true, sourceStatus: true },
+        })
+        const activeBarcode =
+          assetProfile?.sourceStatus === 'ACTIVE' && assetProfile.barcode?.trim()
+            ? assetProfile.barcode.trim().toUpperCase()
+            : null
+        if (activeBarcode) {
+          const barcodeConflict = await tx.productSkuAssetProfile.findFirst({
+            where: {
+              skuId: { not: sku.id },
+              sourceStatus: 'ACTIVE',
+              skuDeletedAt: null,
+              barcode: { equals: activeBarcode, mode: 'insensitive' },
+            },
+            select: { skuId: true },
+          })
+          if (barcodeConflict) {
+            throw new Error(
+              `无法恢复 SKU ${sku.id}：条码「${activeBarcode}」已被占用，请先人工处理条码冲突`,
+            )
+          }
+        }
 
         await tx.productSKU.update({
           where: { id: sku.id },
           data: {
             deletedAt: null,
-            skuCode: candidate,
-            attributes: attributesObject as Prisma.InputJsonValue,
+            skuCode: baseSkuCode,
+            originalSkuCode: null,
+            deletedCodeAt: null,
+            deletedByProductId: null,
+            productDeletedAt: null,
+            attributes: restoredAttributes as Prisma.InputJsonValue,
           },
         })
+        await tx.productSkuAssetProfile.updateMany({
+          where: { skuId: sku.id },
+          data: { skuDeletedAt: null },
+        })
         restoredCount += 1
       }
 
@@ -578,6 +631,21 @@ class ProductRepositoryClass extends BaseRepository<
     panels: Array<{ id: string; code: string; name: string }>
   }> {
     return this.prisma.$transaction(async (tx) => {
+      const baseSkuCode = `${input.modelNumber}-CAD`
+      await releaseSkuCodeFromDeletedRecordsTx(tx, baseSkuCode)
+      const existingSku = await tx.productSKU.findFirst({
+        where: {
+          skuCode: baseSkuCode,
+          deletedAt: null,
+        },
+        select: { id: true },
+      })
+      if (existingSku) {
+        throw new Error(
+          `无法导入 CAD：默认 SKU 编码「${baseSkuCode}」已存在，请先修正型号或选择显式 SKU 编码`,
+        )
+      }
+
       const product = await tx.product.create({
         data: {
           modelNumber: input.modelNumber,
@@ -592,42 +660,22 @@ class ProductRepositoryClass extends BaseRepository<
         select: { id: true },
       })
 
-      const baseSkuCode = `${input.modelNumber}-CAD`
-      let skuCode = baseSkuCode
-      let suffix = 0
-      let sku: { id: string; skuCode: string } | null = null
-
-      while (!sku) {
-        try {
-          sku = await tx.productSKU.create({
-            data: {
-              productId: product.id,
-              skuCode,
-              attributes: { _cadImport: true, _sourceFileName: input.sourceFileName } as Prisma.InputJsonValue,
-              price: 0,
-              costPrice: null,
-              stock: 0,
-              images: [],
-              modelUrl: input.modelUrl || null,
-              ownerId: input.userId,
-              isActive: true,
-            },
-            select: { id: true, skuCode: true },
-          })
-        } catch (error) {
-          if (
-            typeof error === 'object' &&
-            error &&
-            'code' in error &&
-            (error as { code?: string }).code === 'P2002'
-          ) {
-            suffix += 1
-            skuCode = `${baseSkuCode}-${suffix}`
-            continue
-          }
-          throw error
-        }
-      }
+      const sku = await tx.productSKU.create({
+        data: {
+          productId: product.id,
+          skuCode: baseSkuCode,
+          name: baseSkuCode,
+          attributes: { _cadImport: true, _sourceFileName: input.sourceFileName } as Prisma.InputJsonValue,
+          price: 0,
+          costPrice: null,
+          stock: 0,
+          images: [],
+          modelUrl: input.modelUrl || null,
+          ownerId: input.userId,
+          isActive: true,
+        },
+        select: { id: true, skuCode: true },
+      })
 
       const panels: Array<{ id: string; code: string; name: string }> = []
       const cadToPanelId = new Map<string, string>()
@@ -729,37 +777,6 @@ class ProductRepositoryClass extends BaseRepository<
 
     return where
   }
-
-  private toAttributesObject(attributes: Prisma.JsonValue | null | undefined): Record<string, unknown> {
-    if (!attributes || typeof attributes !== 'object' || Array.isArray(attributes)) {
-      return {}
-    }
-    return { ...(attributes as Record<string, unknown>) }
-  }
-
-  private getRestorableSkuCode(
-    skuCode: string,
-    attributes: Prisma.JsonValue | null | undefined,
-    marker: string
-  ): string {
-    const attributesObject = this.toAttributesObject(attributes)
-    const fromAttributes = attributesObject._originalSkuCode
-    if (typeof fromAttributes === 'string' && fromAttributes.trim()) {
-      return fromAttributes.trim()
-    }
-
-    const markerIndex = skuCode.indexOf(marker)
-    if (markerIndex > 0) {
-      return skuCode.slice(0, markerIndex)
-    }
-
-    return skuCode
-  }
-
-  private buildDeletedSkuCode(skuCode: string, id: string, deletedAt: Date, marker: string): string {
-    const suffix = `${deletedAt.getTime()}_${id.slice(-6)}`
-    return `${skuCode}${marker}${suffix}`
-  }
 }
 
 // 单例导出
diff --git a/furniture-3d-system/src/server/repositories/share.repository.ts b/furniture-3d-system/src/server/repositories/share.repository.ts
index 83bc2d1e..6e3167b2 100644
--- a/furniture-3d-system/src/server/repositories/share.repository.ts
+++ b/furniture-3d-system/src/server/repositories/share.repository.ts
@@ -60,8 +60,10 @@ export type PublicShareDetail = Prisma.ShareLinkGetPayload<{
           select: {
             id: true
             skuCode: true
+            name: true
             price: true
             attributes: true
+            assetProfile: true
             isActive: true
             modelUrl: true
           }
@@ -172,8 +174,10 @@ class ShareRepositoryClass extends BaseRepository<
               select: {
                 id: true,
                 skuCode: true,
+                name: true,
                 price: true,
                 attributes: true,
+                assetProfile: true,
                 isActive: true,
                 modelUrl: true,
               },
diff --git a/furniture-3d-system/src/server/repositories/sku.repository.ts b/furniture-3d-system/src/server/repositories/sku.repository.ts
index c72b02ed..fca25e74 100644
--- a/furniture-3d-system/src/server/repositories/sku.repository.ts
+++ b/furniture-3d-system/src/server/repositories/sku.repository.ts
@@ -8,6 +8,7 @@
 
 import { ProductSKU, Prisma } from '@prisma/client'
 import { BaseRepository, FindManyOptions } from './base.repository'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 
 // ============ 类型定义 ============
 
@@ -41,18 +42,15 @@ class SKURepositoryClass extends BaseRepository<
    */
   async findBySkuCode(skuCode: string): Promise<ProductSKU | null> {
     return this.prisma.productSKU.findUnique({
-      where: { skuCode },
+      where: { skuCode: normalizeCoreIdentity(skuCode) },
     })
   }
 
-  async findByAssetSnapshotBarcode(barcode: string): Promise<ProductSKU | null> {
+  async findByAssetProfileBarcode(barcode: string): Promise<ProductSKU | null> {
     return this.prisma.productSKU.findFirst({
       where: {
         deletedAt: null,
-        attributes: {
-          path: ['assetSkuSnapshot', 'barcode'],
-          equals: barcode,
-        },
+        assetProfile: { is: { barcode: normalizeCoreIdentity(barcode) } },
       },
     })
   }
@@ -69,7 +67,7 @@ class SKURepositoryClass extends BaseRepository<
     return client.productSKU.findFirst({
       where: {
         productId,
-        skuCode,
+        skuCode: normalizeCoreIdentity(skuCode),
       },
     })
   }
@@ -86,7 +84,7 @@ class SKURepositoryClass extends BaseRepository<
 
     const count = await this.prisma.productSKU.count({
       where: {
-        skuCode,
+        skuCode: normalizeCoreIdentity(skuCode),
         deletedAt: includeDeleted ? undefined : null,
         id: excludeId ? { not: excludeId } : undefined,
       },
@@ -121,6 +119,7 @@ class SKURepositoryClass extends BaseRepository<
           product: {
             select: { name: true, modelNumber: true },
           },
+          assetProfile: true,
         },
       }),
       this.prisma.productSKU.count({ where }),
@@ -148,6 +147,7 @@ class SKURepositoryClass extends BaseRepository<
             modelUrl: true,
           },
         },
+        assetProfile: true,
       },
     })
   }
@@ -177,6 +177,7 @@ class SKURepositoryClass extends BaseRepository<
         warehouseLocation: {
           select: { id: true, code: true, name: true },
         },
+        assetProfile: true,
       },
     })
   }
@@ -194,6 +195,7 @@ class SKURepositoryClass extends BaseRepository<
         owner: {
           select: { id: true, name: true, avatar: true },
         },
+        assetProfile: true,
       },
       orderBy: { createdAt: 'asc' },
     })
@@ -401,6 +403,7 @@ class SKURepositoryClass extends BaseRepository<
     if (filter.search) {
       where.OR = [
         { skuCode: { contains: filter.search, mode: 'insensitive' } },
+        { name: { contains: filter.search, mode: 'insensitive' } },
       ]
     }
 
diff --git a/furniture-3d-system/src/server/repositories/warehouse.repository.ts b/furniture-3d-system/src/server/repositories/warehouse.repository.ts
index 71c008a5..4ce90573 100644
--- a/furniture-3d-system/src/server/repositories/warehouse.repository.ts
+++ b/furniture-3d-system/src/server/repositories/warehouse.repository.ts
@@ -1,4 +1,5 @@
 import { Prisma, WarehouseLocation } from '@prisma/client'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { BaseRepository } from './base.repository'
 
 class WarehouseLocationRepositoryClass extends BaseRepository<
@@ -9,12 +10,25 @@ class WarehouseLocationRepositoryClass extends BaseRepository<
   protected modelName = 'warehouseLocation'
 
   async findByCode(code: string): Promise<WarehouseLocation | null> {
-    return this.prisma.warehouseLocation.findUnique({ where: { code } })
+    return this.prisma.warehouseLocation.findUnique({ where: { code: normalizeCoreIdentity(code) } })
   }
 
-  async findByPosition(zone: string | null, aisle: string | null, shelf: string | null, bin: string | null): Promise<WarehouseLocation | null> {
+  async findByPosition(
+    zone: string | null,
+    aisle: string | null,
+    shelf: string | null,
+    bin: string | null,
+    excludeId?: string,
+  ): Promise<WarehouseLocation | null> {
     return this.prisma.warehouseLocation.findFirst({
-      where: { zone, aisle, shelf, bin, isActive: true },
+      where: {
+        zone,
+        aisle,
+        shelf,
+        bin,
+        isActive: true,
+        ...(excludeId ? { id: { not: excludeId } } : {}),
+      },
     })
   }
 
diff --git a/furniture-3d-system/src/server/services/__tests__/asset-cad-import.service.test.ts b/furniture-3d-system/src/server/services/__tests__/asset-cad-import.service.test.ts
index 3ae80be6..1dfb1a13 100644
--- a/furniture-3d-system/src/server/services/__tests__/asset-cad-import.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/asset-cad-import.service.test.ts
@@ -377,6 +377,86 @@ describe('assetCadImportService', () => {
     expect(result.similarityNotice).toBeNull()
   })
 
+  it('板材导入会在查询已有资产族前归一化手填编码', async () => {
+    const family = createFamilyDTO({
+      id: 'family-board-top',
+      type: 'BOARD',
+      code: 'DBZ-SPJK001',
+      name: '桌面板',
+    })
+    const variant = createVariantDTO({
+      id: 'variant-board-1200',
+      assetFamilyId: family.id,
+      assetFamilyCode: family.code,
+      assetFamilyName: family.name,
+      assetType: 'BOARD',
+      code: 'DBZ-SPJ00001',
+      name: '桌面板 1200',
+    })
+
+    mockedAssetFamilyRepository.findByCode.mockResolvedValue({
+      id: family.id,
+      type: 'BOARD',
+      code: family.code,
+      name: family.name,
+    } as never)
+    mockedAssetCenterService.listFamilies.mockResolvedValue([family] as never)
+    mockedAssetCenterService.createVariantWithSimilarity.mockResolvedValue({
+      variant,
+      similarCandidates: [],
+      similarityNotice: null,
+    } as never)
+    mockedParseZipFile.mockResolvedValue({
+      success: true,
+      modelFile: new File(['glb'], 'desktop.glb', { type: 'model/gltf-binary' }),
+      cadExportData: {
+        exportedAt: '2026-04-03T08:00:00.000Z',
+        sourceFile: 'desktop.dwg',
+        software: 'AutoCAD',
+        pluginVersion: '2.2.15',
+        modelFile: 'desktop.glb',
+        panelCount: 1,
+        units: 'mm',
+        panels: [
+          {
+            id: 'panel-1',
+            sourceHandle: 'handle-1',
+            position: [0, 0, 0],
+            size: [1200, 600, 25],
+            normal: [0, 0, 1],
+            panelType: 'top_panel',
+          },
+        ],
+        holes: [],
+        hardwareTypes: [],
+        hardwareSummary: [],
+      } as never,
+    })
+
+    await assetCadImportService.importAsset({
+      assetType: 'BOARD',
+      familyCode: ' dbz-spjk001 ',
+      familyName: '桌面板',
+      variantCode: ' dbz-spj00001 ',
+      variantName: '桌面板 1200',
+      substrateId: 'substrate-board',
+      finishId: 'finish-oak',
+      zipFile: createZipFile('board.zip'),
+      createdBy: 'user-1',
+    })
+
+    expect(mockedAssetFamilyRepository.findByCode).toHaveBeenCalledWith('DBZ-SPJK001')
+    expect(mockedAssetCenterService.createFamily).not.toHaveBeenCalled()
+    expect(mockedUploadToS3).toHaveBeenCalledWith(
+      expect.any(File),
+      'asset-center/board/DBZ-SPJK001/DBZ-SPJ00001-1710000000000.glb',
+    )
+    expect(mockedAssetCenterService.createVariantWithSimilarity.mock.calls[0][0]).toMatchObject({
+      assetFamilyId: 'family-board-top',
+      code: 'DBZ-SPJ00001',
+    })
+  })
+
   it('板材导入未传饰面时，会从基材绑定花色自动回填', async () => {
     mockedAssetCenterService.listSubstrates.mockResolvedValue([
       {
diff --git a/furniture-3d-system/src/server/services/__tests__/asset-sku-sync.service.test.ts b/furniture-3d-system/src/server/services/__tests__/asset-sku-sync.service.test.ts
index 2f5a0a91..44769f2b 100644
--- a/furniture-3d-system/src/server/services/__tests__/asset-sku-sync.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/asset-sku-sync.service.test.ts
@@ -96,9 +96,9 @@ describe('AssetSkuSyncService', () => {
         assetSeries: { id: 'series-dbz', code: 'DBZ', name: '单板桌' },
         deletedAt: null,
       },
-      code: 'DBZ-SPJ00002',
+      code: ' dbz-spj00002 ',
       name: '桌面板新规格',
-      barcode: 'DBZ-SPJ00002N05V01',
+      barcode: ' dbz-spj00002n05v01 ',
       dimensions: { length: 1200, width: 600, thickness: 25 },
       thumbnailUrl: '/new-thumb.webp',
       finish: { id: 'finish-1', name: '柚木色' },
@@ -122,22 +122,42 @@ describe('AssetSkuSyncService', () => {
             modelName: '桌面板',
             specCode: 'DBZ-SPJ00001',
             specName: '桌面板旧规格',
-            barcode: 'MANUAL-BARCODE',
+            barcode: 'STALE-BARCODE',
             size: { length: 1000 },
             color: '手工颜色',
             material: '手工材质',
-            imageUrl: '/manual-thumb.webp',
+            imageUrl: '/stale-thumb.webp',
             sourceStatus: 'ACTIVE',
             sourceAssetVariantIds: ['variant-1'],
             sourceVariants: [],
             syncedAt: '2026-05-18T00:00:00.000Z',
-            lockedFields: ['barcode', 'imageUrl'],
-            lockedReasons: {
-              barcode: '人工调整',
-              imageUrl: '人工调整',
-            },
+            lockedFields: [],
+            lockedReasons: {},
           },
         },
+        assetProfile: {
+          primarySourceAssetVariantId: 'variant-1',
+          sourceAssetVariantIds: ['variant-1'],
+          sourceAssetFamilyId: 'family-1',
+          sourceAssetSeriesId: 'series-dbz',
+          model: 'DBZ-SPJK001',
+          modelName: '桌面板',
+          specCode: 'DBZ-SPJ00001',
+          specName: '桌面板旧规格',
+          barcode: ' manual-barcode ',
+          size: { length: 1000 },
+          color: '手工颜色',
+          material: '手工材质',
+          imageUrl: '/manual-thumb.webp',
+          sourceStatus: 'ACTIVE',
+          syncedAt: new Date('2026-05-18T00:00:00.000Z'),
+          lockedFields: ['barcode', 'imageUrl'],
+          lockedReasons: {
+            barcode: '人工调整',
+            imageUrl: '人工调整',
+          },
+          sourceVariants: [],
+        },
       },
     ] as never)
     mockedPrisma.assetSkuSyncEvent.update.mockResolvedValue({} as never)
@@ -154,8 +174,25 @@ describe('AssetSkuSyncService', () => {
               barcode: 'MANUAL-BARCODE',
               imageUrl: '/manual-thumb.webp',
               specCode: 'DBZ-SPJ00002',
+              model: 'DBZ-SPJK001',
             }),
           }),
+          assetProfile: {
+            upsert: {
+              create: expect.objectContaining({
+                barcode: 'MANUAL-BARCODE',
+                imageUrl: '/manual-thumb.webp',
+                specCode: 'DBZ-SPJ00002',
+                model: 'DBZ-SPJK001',
+              }),
+              update: expect.objectContaining({
+                barcode: 'MANUAL-BARCODE',
+                imageUrl: '/manual-thumb.webp',
+                specCode: 'DBZ-SPJ00002',
+                model: 'DBZ-SPJK001',
+              }),
+            },
+          },
         }),
       }),
     )
@@ -216,6 +253,42 @@ describe('AssetSkuSyncService', () => {
             lockedReasons: {},
           },
         },
+        assetProfile: {
+          primarySourceAssetVariantId: 'variant-missing',
+          sourceAssetVariantIds: ['variant-missing'],
+          sourceAssetFamilyId: 'family-old',
+          sourceAssetSeriesId: 'series-dbz',
+          model: 'DBZ-SPJK001',
+          modelName: '旧桌面板',
+          specCode: 'DBZ-SPJ00001',
+          specName: '旧规格',
+          barcode: 'DBZ-SPJ00001N05V01',
+          size: { length: 1200 },
+          color: '柚木色',
+          material: '颗粒板',
+          imageUrl: '/old-thumb.webp',
+          sourceStatus: 'ACTIVE',
+          syncedAt: new Date('2026-05-18T00:00:00.000Z'),
+          lockedFields: [],
+          lockedReasons: {},
+          sourceVariants: [
+            {
+              sourceAssetVariantId: 'variant-missing',
+              sourceAssetFamilyId: 'family-old',
+              sourceAssetSeriesId: 'series-dbz',
+              model: 'DBZ-SPJK001',
+              modelName: '旧桌面板',
+              specCode: 'DBZ-SPJ00001',
+              specName: '旧规格',
+              barcode: 'DBZ-SPJ00001N05V01',
+              size: { length: 1200 },
+              color: '柚木色',
+              material: '颗粒板',
+              imageUrl: '/old-thumb.webp',
+              sourceStatus: 'ACTIVE',
+            },
+          ],
+        },
       },
     ] as never)
     mockedPrisma.assetSkuSyncEvent.update.mockResolvedValue({} as never)
@@ -238,6 +311,18 @@ describe('AssetSkuSyncService', () => {
               ],
             }),
           }),
+          assetProfile: {
+            upsert: {
+              create: expect.objectContaining({
+                sourceStatus: 'MISSING',
+                specCode: 'DBZ-SPJ00001',
+              }),
+              update: expect.objectContaining({
+                sourceStatus: 'MISSING',
+                specCode: 'DBZ-SPJ00001',
+              }),
+            },
+          },
         }),
       }),
     )
diff --git a/furniture-3d-system/src/server/services/__tests__/draft-group.service.test.ts b/furniture-3d-system/src/server/services/__tests__/draft-group.service.test.ts
index a5c48ee5..24e02c3b 100644
--- a/furniture-3d-system/src/server/services/__tests__/draft-group.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/draft-group.service.test.ts
@@ -1,5 +1,6 @@
 import { draftGroupService } from '../draft-group.service'
 import { preSkuPackagingService } from '../pre-sku-packaging.service'
+import { ErrorCode } from '@/server/core/errors'
 import {
   assetFamilyRepository,
   assetVariantRepository,
@@ -47,15 +48,16 @@ jest.mock('../../repositories', () => ({
     findByDraftGroupId: jest.fn(),
     findByIdWithRelations: jest.fn(),
     updateDisplaySummary: jest.fn(),
-    findByDisplaySummaryField: jest.fn(),
-    findByDisplaySummaryFields: jest.fn(),
+    upsertBasicInfo: jest.fn(),
+    findByBasicInfoField: jest.fn(),
+    findByBasicInfoFields: jest.fn(),
   },
   preSkuPackagingPlanRepository: {
     upsertByPreSkuId: jest.fn(),
   },
   skuRepository: {
     findBySkuCode: jest.fn(),
-    findByAssetSnapshotBarcode: jest.fn(),
+    findByAssetProfileBarcode: jest.fn(),
   },
 }))
 
@@ -268,10 +270,10 @@ describe('draftGroupService', () => {
     mockedAssetVariantRepository.findByCode.mockResolvedValue(null)
     mockedAssetVariantRepository.findByBarcode.mockResolvedValue(null)
     mockedProductRepository.findByModelNumber.mockResolvedValue(null)
-    mockedPreSkuRepository.findByDisplaySummaryField.mockResolvedValue([])
-    mockedPreSkuRepository.findByDisplaySummaryFields.mockResolvedValue([])
+    mockedPreSkuRepository.findByBasicInfoField.mockResolvedValue([])
+    mockedPreSkuRepository.findByBasicInfoFields.mockResolvedValue([])
     mockedSkuRepository.findBySkuCode.mockResolvedValue(null)
-    mockedSkuRepository.findByAssetSnapshotBarcode.mockResolvedValue(null)
+    mockedSkuRepository.findByAssetProfileBarcode.mockResolvedValue(null)
 
     mockedAssetFamilyRepository.findByIdsWithRelations.mockResolvedValue([
       {
@@ -657,7 +659,12 @@ describe('draftGroupService', () => {
       authUser,
     )
 
-    expect(mockedDraftGroupRepository.createWithRelations).toHaveBeenCalled()
+    expect(mockedDraftGroupRepository.createWithRelations).toHaveBeenCalledWith(
+      expect.objectContaining({
+        code: expect.stringMatching(/^DG-\d{14}-[A-Z0-9_-]{6}$/),
+      }),
+      expect.anything(),
+    )
     expect(mockedPreSkuRepository.createManyForDraftGroup).toHaveBeenCalledWith(
       'draft-group-1',
       expect.arrayContaining([
@@ -1218,7 +1225,75 @@ describe('draftGroupService', () => {
     )
   })
 
-  it('保存准 SKU 基础资料时只合并到 displaySummary 草稿快照', async () => {
+  it('读取草稿组详情时将准 SKU 基础资料作为 basicInfo 返回，不再伪装进 displaySummary', async () => {
+    mockedPreSkuRepository.findByDraftGroupId.mockResolvedValue([
+      {
+        id: 'pre-sku-basic-info',
+        draftGroupId: 'draft-group-1',
+        sequence: 1,
+        defaultName: '云序-悬浮桌面 A-细腿',
+        customName: null,
+        status: 'DRAFT',
+        sourceCandidateKey: 'candidate-1',
+        familySelection: {
+          model: 'LEGACY-MODEL',
+        },
+        variantSelection: {
+          slots: [],
+          hardwareSelections: [],
+        },
+        recommendedHardware: [],
+        previewNodes: [],
+        basicInfo: {
+          model: 'DBZ-SPJK001',
+          formalSkuCode: 'DBZ-SPJ00001',
+          barcode: 'DBZ-SPJ00001N05V01',
+          size: '1200*600*750',
+          color: '柚木色',
+          material: '颗粒板',
+          specName: '1200 柚木色',
+          versionNo: 'V01',
+          setCount: '1',
+          attributeCode: '',
+          drawingId: '',
+          installMethod: '',
+          manualUpdatedAt: new Date('2026-05-30T10:00:00.000Z'),
+          manualUpdatedBy: 'user-1',
+          manualUpdatedByName: '规划员',
+        },
+        displaySummary: {
+          resultStatus: 'ASSEMBLABLE',
+          formalSkuCode: 'LEGACY-SKU',
+          barcode: 'LEGACY-BARCODE',
+          color: '旧花色',
+        },
+        bomPreview: [],
+        weightPreview: null,
+        componentCodes: [],
+        installStepPreview: [],
+        notes: null,
+        createdAt: new Date('2026-03-30T12:00:00.000Z'),
+        updatedAt: new Date('2026-03-30T12:00:00.000Z'),
+        packagingPlan: null,
+      },
+    ] as never)
+
+    const result = await draftGroupService.getById('draft-group-1')
+
+    expect(result.preSkus[0].basicInfo).toEqual(
+      expect.objectContaining({
+        model: 'DBZ-SPJK001',
+        formalSkuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        manualUpdatedAt: '2026-05-30T10:00:00.000Z',
+      }),
+    )
+    expect(result.preSkus[0].displaySummary).toEqual({
+      resultStatus: 'ASSEMBLABLE',
+    })
+  })
+
+  it('保存准 SKU 基础资料时返回结构化 basicInfo，并清理 displaySummary 旧基础资料字段', async () => {
     const basePreSku = {
       id: 'pre-sku-1',
       draftGroupId: 'draft-group-1',
@@ -1237,8 +1312,12 @@ describe('draftGroupService', () => {
       recommendedHardware: [],
       previewNodes: [],
       displaySummary: {
+        resultStatus: 'ASSEMBLABLE',
         formalSkuCode: 'OLD-SKU',
+        barcode: 'OLD-BARCODE',
         color: '旧花色',
+        basicInfoManualUpdatedAt: '2026-05-29T01:00:00.000Z',
+        basicInfoManualUpdatedBy: 'legacy-user',
       },
       bomPreview: [],
       weightPreview: null,
@@ -1256,13 +1335,32 @@ describe('draftGroupService', () => {
         displaySummary,
       }) as never,
     )
+    mockedPreSkuRepository.upsertBasicInfo.mockImplementation(async (_preSkuId, data) =>
+      ({
+        ...basePreSku,
+        basicInfo: {
+          id: 'basic-info-1',
+          preSkuId: 'pre-sku-1',
+          ...data,
+        },
+        displaySummary: {
+          ...basePreSku.displaySummary,
+          model: data.model,
+          formalSkuCode: data.formalSkuCode,
+          barcode: data.barcode,
+          versionNo: data.versionNo,
+        },
+      }) as never,
+    )
 
     const result = await draftGroupService.updatePreSkuBasicInfo(
       'pre-sku-1',
       {
         fields: {
-          model: 'DBZ-SPJK001',
-          formalSkuCode: 'DBZ-SPJ00001',
+          model: 'dbz-spjk001',
+          formalSkuCode: 'dbz-spj00001',
+          barcode: 'dbz-spj00001n05v01',
+          versionNo: 'v01',
           color: '',
         },
       },
@@ -1273,23 +1371,157 @@ describe('draftGroupService', () => {
       | Record<string, unknown>
       | undefined
 
-    expect(savedSummary).toEqual(
+    expect(savedSummary).toEqual({
+      resultStatus: 'ASSEMBLABLE',
+    })
+    expect(mockedPreSkuRepository.upsertBasicInfo).toHaveBeenCalledWith(
+      'pre-sku-1',
       expect.objectContaining({
         model: 'DBZ-SPJK001',
         formalSkuCode: 'DBZ-SPJ00001',
-        basicInfoManualUpdatedBy: 'user-1',
-        basicInfoManualUpdatedByName: '规划员',
+        barcode: 'DBZ-SPJ00001N05V01',
+        versionNo: 'V01',
+        color: null,
+        manualUpdatedBy: 'user-1',
+        manualUpdatedByName: '规划员',
+        source: 'MANUAL',
       }),
     )
-    expect(savedSummary).not.toHaveProperty('color')
-    expect(result.displaySummary).toEqual(
+    expect(mockedProductRepository.findByModelNumber).toHaveBeenCalledWith('DBZ-SPJK001')
+    expect(mockedAssetFamilyRepository.findByCode).toHaveBeenCalledWith('DBZ-SPJK001')
+    expect(mockedAssetVariantRepository.findByCode).toHaveBeenCalledWith('DBZ-SPJ00001')
+    expect(mockedSkuRepository.findBySkuCode).toHaveBeenCalledWith('DBZ-SPJ00001')
+    expect(mockedAssetVariantRepository.findByBarcode).toHaveBeenCalledWith('DBZ-SPJ00001N05V01')
+    expect(mockedSkuRepository.findByAssetProfileBarcode).toHaveBeenCalledWith(
+      'DBZ-SPJ00001N05V01',
+    )
+    expect(result.displaySummary).not.toHaveProperty('model')
+    expect(result.displaySummary).not.toHaveProperty('formalSkuCode')
+    expect(result.displaySummary).not.toHaveProperty('barcode')
+    expect(result.displaySummary).not.toHaveProperty('versionNo')
+    expect(result.displaySummary).not.toHaveProperty('color')
+    expect(result.basicInfo).toEqual(
       expect.objectContaining({
         model: 'DBZ-SPJK001',
         formalSkuCode: 'DBZ-SPJ00001',
+        color: '',
+        manualUpdatedBy: 'user-1',
+        manualUpdatedByName: '规划员',
       }),
     )
   })
 
+  it('保存准 SKU 基础资料时不会把旧 displaySummary 或 familySelection 提升为结构化主数据', async () => {
+    const legacyPreSku = {
+      id: 'pre-sku-legacy',
+      draftGroupId: 'draft-group-1',
+      sequence: 1,
+      defaultName: '旧快照准 SKU',
+      customName: null,
+      status: 'DRAFT',
+      sourceCandidateKey: 'candidate-legacy',
+      familySelection: {
+        model: 'LEGACY-FAMILY-MODEL',
+        formalSkuCode: 'LEGACY-FAMILY-SKU',
+      },
+      variantSelection: {
+        slots: [],
+        hardwareSelections: [],
+      },
+      recommendedHardware: [],
+      previewNodes: [],
+      displaySummary: {
+        resultStatus: 'ASSEMBLABLE',
+        model: 'LEGACY-MODEL',
+        formalSkuCode: 'LEGACY-SKU',
+        barcode: 'LEGACY-BARCODE',
+        specName: '旧规格名',
+        color: '旧花色',
+      },
+      bomPreview: [],
+      weightPreview: null,
+      componentCodes: [],
+      installStepPreview: [],
+      notes: null,
+      createdAt: new Date('2026-03-30T12:00:00.000Z'),
+      updatedAt: new Date('2026-03-30T12:00:00.000Z'),
+      packagingPlan: null,
+      basicInfo: null,
+    }
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(legacyPreSku as never)
+    mockedAssetVariantRepository.findByIdsWithRelations.mockResolvedValue([])
+    mockedPreSkuRepository.updateDisplaySummary.mockResolvedValue({
+      ...legacyPreSku,
+      displaySummary: { resultStatus: 'ASSEMBLABLE' },
+    } as never)
+    mockedPreSkuRepository.upsertBasicInfo.mockImplementation(async (_preSkuId, data) =>
+      ({
+        ...legacyPreSku,
+        displaySummary: { resultStatus: 'ASSEMBLABLE' },
+        basicInfo: {
+          id: 'basic-info-legacy',
+          preSkuId: 'pre-sku-legacy',
+          ...data,
+        },
+      }) as never,
+    )
+
+    await draftGroupService.updatePreSkuBasicInfo(
+      'pre-sku-legacy',
+      {
+        fields: {
+          color: '新花色',
+        },
+      },
+      authUser,
+    )
+
+    expect(mockedPreSkuRepository.updateDisplaySummary).toHaveBeenCalledWith(
+      'pre-sku-legacy',
+      {
+        resultStatus: 'ASSEMBLABLE',
+      },
+    )
+    expect(mockedPreSkuRepository.upsertBasicInfo).toHaveBeenCalledWith(
+      'pre-sku-legacy',
+      expect.objectContaining({
+        model: null,
+        formalSkuCode: null,
+        barcode: null,
+        specName: null,
+        color: '新花色',
+        versionNo: 'V01',
+        source: 'MANUAL',
+      }),
+    )
+    expect(mockedProductRepository.findByModelNumber).not.toHaveBeenCalledWith('LEGACY-MODEL')
+    expect(mockedAssetVariantRepository.findByCode).not.toHaveBeenCalledWith('LEGACY-SKU')
+    expect(mockedAssetVariantRepository.findByBarcode).not.toHaveBeenCalledWith('LEGACY-BARCODE')
+  })
+
+  it('保存准 SKU 基础资料时会阻断结构化规格码或条码重复', async () => {
+    mockedPreSkuRepository.findByBasicInfoField.mockImplementation(async (field) => {
+      if (field === 'formalSkuCode') {
+        return [{ id: 'pre-sku-2', defaultName: '重复规格款', customName: null }]
+      }
+      return []
+    })
+
+    await expect(
+      draftGroupService.updatePreSkuBasicInfo(
+        'pre-sku-1',
+        {
+          fields: {
+            formalSkuCode: 'dbz-spj00001',
+          },
+        },
+        authUser,
+      ),
+    ).rejects.toThrow('已被其他准 SKU 使用，不能保存')
+
+    expect(mockedPreSkuRepository.upsertBasicInfo).not.toHaveBeenCalled()
+  })
+
   it('可以保存草稿组品类', async () => {
     mockedDraftGroupRepository.updateWithRelations.mockResolvedValue({
       id: 'draft-group-1',
@@ -1352,7 +1584,9 @@ describe('draftGroupService', () => {
       customName: null,
       status: 'DRAFT',
       sourceCandidateKey: 'candidate-1',
-      familySelection: {},
+      familySelection: {
+        model: 'LEGACY-FAMILY-MODEL',
+      },
       variantSelection: {
         slots: [
           {
@@ -1375,7 +1609,11 @@ describe('draftGroupService', () => {
       },
       recommendedHardware: [],
       previewNodes: [],
-      displaySummary: {},
+      displaySummary: {
+        model: 'LEGACY-MODEL',
+        formalSkuCode: 'LEGACY-SKU',
+        barcode: 'LEGACY-BARCODE',
+      },
       bomPreview: [],
       weightPreview: null,
       componentCodes: [],
@@ -1455,7 +1693,7 @@ describe('draftGroupService', () => {
         lastModifier: null,
       },
     ] as never)
-    mockedPreSkuRepository.findByDisplaySummaryField.mockResolvedValue([
+    mockedPreSkuRepository.findByBasicInfoField.mockResolvedValue([
       { id: 'pre-sku-2', defaultName: '重复准 SKU', customName: null },
     ])
 
@@ -1474,6 +1712,9 @@ describe('draftGroupService', () => {
     )
     expect(metadata.options.color?.map((option) => option.value)).toContain('柚木色')
     expect(metadata.conflicts.model?.[0]?.message).toContain('重复准 SKU')
+    expect(mockedProductRepository.findByModelNumber).not.toHaveBeenCalledWith('LEGACY-MODEL')
+    expect(mockedAssetVariantRepository.findByCode).not.toHaveBeenCalledWith('LEGACY-SKU')
+    expect(mockedAssetVariantRepository.findByBarcode).not.toHaveBeenCalledWith('LEGACY-BARCODE')
   })
 
   it('保存新包装结构后会把草稿组状态推进到 PACKAGING', async () => {
@@ -1543,6 +1784,66 @@ describe('draftGroupService', () => {
     expect(result.boxes).toHaveLength(1)
   })
 
+  it('保存包装方案会在服务层拒绝无效箱规和游离状态', async () => {
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'pre-sku-1',
+      draftGroupId: 'draft-group-1',
+      defaultName: '云序桌-标准版',
+      customName: null,
+      sourceCandidateKey: 'family-desktop-a::family-leg-slim',
+      variantSelection: {
+        slots: [],
+        hardwareSelections: [],
+      },
+      bomPreview: [],
+      weightPreview: null,
+      packagingPlan: null,
+    } as never)
+
+    await expect(
+      preSkuPackagingService.savePackagingPlan('pre-sku-1', {
+        status: 'BROKEN',
+        boxes: [
+          {
+            boxNumber: 1,
+            name: '主箱',
+            outerSizeMm: { length: 1200, width: 650, height: 90 },
+            items: [],
+            materials: [],
+            estimatedWeightKg: 16.1,
+            estimatedCost: 12,
+          },
+        ],
+        costSummary: null,
+      }),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: '包装方案状态不在允许范围内',
+    })
+
+    await expect(
+      preSkuPackagingService.savePackagingPlan('pre-sku-1', {
+        boxes: [
+          {
+            boxNumber: 1,
+            name: '主箱',
+            outerSizeMm: { length: 0, width: 650, height: 90 },
+            items: [],
+            materials: [],
+            estimatedWeightKg: 16.1,
+            estimatedCost: 12,
+          },
+        ],
+        costSummary: null,
+      }),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: '第 1 个包装箱长度必须大于 0',
+    })
+
+    expect(mockedPreSkuPackagingPlanRepository.upsertByPreSkuId).not.toHaveBeenCalled()
+  })
+
   it('保存包装方案未传 processDraft 时会保留已有工艺草稿和备注', async () => {
     mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue({
       id: 'pre-sku-1',
diff --git a/furniture-3d-system/src/server/services/__tests__/employee-directory-sync.service.test.ts b/furniture-3d-system/src/server/services/__tests__/employee-directory-sync.service.test.ts
index 89bf5fd3..5a2073ad 100644
--- a/furniture-3d-system/src/server/services/__tests__/employee-directory-sync.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/employee-directory-sync.service.test.ts
@@ -31,9 +31,9 @@ describe('employee-directory-sync.service', () => {
     await employeeDirectorySyncService.sync(payload)
 
     expect(mockUpsertMany).toHaveBeenCalledWith({
-      departments: payload.departments,
-      employees: payload.employees,
-      dimissionEntries: payload.dimissions,
+      departments: [expect.objectContaining({ externalId: 'dept-1', name: '设计部' })],
+      employees: [expect.objectContaining({ name: '张三' })],
+      dimissionEntries: [expect.objectContaining({ mobile: '13800000000' })],
     })
   })
 
@@ -49,4 +49,42 @@ describe('employee-directory-sync.service', () => {
       message: '部门同步数据缺少必要字段',
     } as Partial<AppError>)
   })
+
+  it('同步前会规范化部门、员工和离职身份字段', async () => {
+    await employeeDirectorySyncService.sync({
+      departments: [{ externalId: ' dept-1 ', name: ' 供应链中心 ', parentExternalId: ' parent-1 ' }],
+      employees: [
+        {
+          dingtalkUserId: ' dt-1 ',
+          dingtalkUnionId: ' union-1 ',
+          jobNumber: ' JS1001 ',
+          name: ' 采购甲 ',
+          mobile: ' 13800000000 ',
+          email: ' Buyer@Example.COM ',
+          title: ' 采购 ',
+          primaryDepartmentExternalId: ' dept-1 ',
+          departmentExternalIds: [' dept-1 ', 'dept-1', ' dept-2 '],
+        },
+      ],
+      dimissions: [{ mobile: ' 13900000000 ', jobNumber: ' JS0999 ' }],
+    })
+
+    expect(mockUpsertMany).toHaveBeenCalledWith({
+      departments: [{ externalId: 'dept-1', name: '供应链中心', parentExternalId: 'parent-1' }],
+      employees: [
+        expect.objectContaining({
+          dingtalkUserId: 'dt-1',
+          dingtalkUnionId: 'union-1',
+          jobNumber: 'JS1001',
+          name: '采购甲',
+          mobile: '13800000000',
+          email: 'buyer@example.com',
+          title: '采购',
+          primaryDepartmentExternalId: 'dept-1',
+          departmentExternalIds: ['dept-1', 'dept-2'],
+        }),
+      ],
+      dimissionEntries: [expect.objectContaining({ mobile: '13900000000', jobNumber: 'JS0999' })],
+    })
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-product.service.test.ts b/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-product.service.test.ts
index f6cef2c2..23b78d74 100644
--- a/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-product.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-product.service.test.ts
@@ -1,15 +1,34 @@
 import { createDefaultDocumentWorkspaceConfirmations } from '@/app/intake/non-integrated/nonIntegratedStorage'
 
+var mockTransactionExistingRecord: unknown = null
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    $transaction: jest.fn((callback) =>
+      callback({
+        intakeNonIntegratedProduct: {
+          findUnique: jest.fn().mockImplementation(() => Promise.resolve(mockTransactionExistingRecord)),
+        },
+      }),
+    ),
+  },
+}))
+
 jest.mock('../../repositories/intake-non-integrated-product.repository', () => ({
   intakeNonIntegratedProductRepository: {
     listActive: jest.fn(),
+    listActivePage: jest.fn(),
     findActiveById: jest.fn(),
     findById: jest.fn(),
     findBySpu: jest.fn(),
+    findBySpuInTransaction: jest.fn(),
     findDeletedBySpu: jest.fn(),
+    findDeletedBySpuInTransaction: jest.fn(),
     create: jest.fn(),
+    createInTransaction: jest.fn(),
     update: jest.fn(),
-    updatePayloadByUser: jest.fn(),
+    updateInTransaction: jest.fn(),
+    updateAttachmentPayloadByUser: jest.fn(),
     softDeleteByUser: jest.fn(),
   },
 }))
@@ -26,6 +45,12 @@ jest.mock('../../repositories/draft-group.repository', () => ({
   },
 }))
 
+jest.mock('../spu-number-reservation.service', () => ({
+  spuNumberReservationService: {
+    reserveInTransaction: jest.fn(),
+  },
+}))
+
 jest.mock('../intake-node-permission-settings.service', () => ({
   intakeNodePermissionSettingsService: {
     getSettings: jest.fn().mockResolvedValue({ overrides: {} }),
@@ -42,11 +67,25 @@ jest.mock('../sku-quality-inspection.service', () => ({
 
 import { intakeNonIntegratedProductRepository } from '../../repositories/intake-non-integrated-product.repository'
 import { draftGroupRepository, preSkuRepository } from '../../repositories/draft-group.repository'
-import { intakeNonIntegratedProductService } from '../intake-non-integrated-product.service'
+import { prisma } from '@/lib/prisma'
+import { ErrorCode } from '@/server/core/errors'
+import {
+  buildStructuredSkuItemInputs,
+  intakeNonIntegratedProductService,
+} from '../intake-non-integrated-product.service'
+import { spuNumberReservationService } from '../spu-number-reservation.service'
+import {
+  assertNonIntegratedProductMasterDataReadyForFormalUse,
+  assertNonIntegratedSkuItemsReadyForFormalUse,
+  resolveNonIntegratedProductMissingRequiredFields,
+  resolveNonIntegratedSkuQuality,
+} from '../non-integrated-sku-quality'
 
 const mockedRepository = jest.mocked(intakeNonIntegratedProductRepository)
 const mockedDraftGroupRepository = jest.mocked(draftGroupRepository)
 const mockedPreSkuRepository = jest.mocked(preSkuRepository)
+const mockedSpuNumberReservationService = jest.mocked(spuNumberReservationService)
+const mockedPrisma = jest.mocked(prisma)
 
 const baseUser = {
   id: 'creator-1',
@@ -90,15 +129,17 @@ function createPayload(overrides: Record<string, unknown> = {}) {
 }
 
 function createRecord(overrides: Record<string, unknown> = {}) {
+  const payload = createPayload(overrides.payload as Record<string, unknown> | undefined)
+
   return {
     id: 'non-integrated-1',
-    spu: 'DNZ0001',
-    spuBase: 'DNZ0001',
-    brand: 'Base',
-    designer: 'Designer',
-    operator: 'Operator',
-    purchaser: 'Purchaser',
-    payload: createPayload(overrides.payload as Record<string, unknown> | undefined),
+    spu: typeof payload.spu === 'string' ? payload.spu : 'DNZ0001',
+    spuBase: typeof payload.spu === 'string' ? payload.spu : 'DNZ0001',
+    brand: typeof payload.brand === 'string' ? payload.brand : 'Base',
+    designer: typeof payload.designer === 'string' ? payload.designer : 'Designer',
+    operator: typeof payload.operator === 'string' ? payload.operator : 'Operator',
+    purchaser: typeof payload.purchaser === 'string' ? payload.purchaser : 'Purchaser',
+    payload,
     visibility: 'DEPARTMENT',
     departmentId: 'dept-1',
     teamId: 'team-1',
@@ -111,8 +152,46 @@ function createRecord(overrides: Record<string, unknown> = {}) {
   }
 }
 
+function createSkuItem(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'sku-1',
+    skuSequence: 1,
+    batchNo: 1,
+    packageGroupId: '',
+    packageSuffix: '',
+    image: '',
+    imageName: '',
+    model: 'MODEL-001',
+    skuCode: 'SKU-001',
+    setCount: '1',
+    specName: 'Default spec',
+    barcode: 'BAR-001',
+    size: '1200*600*750',
+    color: 'teak',
+    material: 'MDF',
+    boardMaterialType: '',
+    versionNo: 'V01',
+    attributeCode: '',
+    drawingId: '',
+    installMethod: '',
+    executeStandard: '',
+    nationalStandardCompliant: '',
+    manufacturer: 'Factory',
+    manufacturerCode: 'N01',
+    salesStatus: '',
+    tagMaterial: '',
+    model3dFileName: '',
+    model3dDataUrl: '',
+    source: '',
+    sourceTable: '',
+    sourceSkuId: '',
+    ...overrides,
+  }
+}
+
 describe('intakeNonIntegratedProductService', () => {
   beforeEach(() => {
+    mockTransactionExistingRecord = null
     jest.clearAllMocks()
     mockedDraftGroupRepository.countPackagedItems.mockResolvedValue(0)
     mockedDraftGroupRepository.countPreSkuLocationBindings.mockResolvedValue(0)
@@ -130,6 +209,295 @@ describe('intakeNonIntegratedProductService', () => {
     expect(mockedRepository.listActive).toHaveBeenCalledWith(undefined)
   })
 
+  it('读取列表时用结构化 profile 和 SKU 明细覆盖 payload 主数据', async () => {
+    mockedRepository.listActive.mockResolvedValue([
+      createRecord({
+        payload: createPayload({
+          spu: 'PAYLOAD-OLD-SPU',
+          brand: 'payload 旧品牌',
+          designer: 'payload 旧设计',
+          operator: 'payload 旧运营',
+          purchaser: 'payload 旧采购',
+          openingReference: {
+            productName: 'payload 旧产品名',
+            productImage: 'payload-old.jpg',
+            productCategory: 'payload 旧品类',
+          },
+          previewImage: 'payload-preview.jpg',
+          skuItems: [
+            createSkuItem({
+              id: 'sku-1',
+              skuCode: 'PAYLOAD-SKU',
+              specName: 'payload 旧规格',
+              barcode: 'PAYLOAD-BAR',
+            }),
+          ],
+        }),
+        profile: {
+          productName: '结构化产品名',
+          productImageUrl: 'structured-image.jpg',
+          productCategory: '结构化品类',
+          productDevelopmentKind: 'product',
+          productStatus: '存量商品',
+          purchaseOwner: '采购负责人',
+          sourceSpu: 'SPU-STRUCTURED',
+          sourceSkuId: 'BAR-STRUCTURED',
+          sourceCategory: '结构化分类',
+          sourceItemType: '成品',
+          sourceSalesStatus: '销售',
+          sourceEnabled: '1',
+          sourceStockDisabled: '0',
+        },
+        skuItems: [
+          {
+            skuItemId: 'sku-1',
+            sortOrder: 1,
+            skuSequence: 9,
+            batchNo: 2,
+            packageGroupId: 'pkg-1',
+            image: 'structured-sku.jpg',
+            imageName: 'structured-sku.jpg',
+            model: 'MODEL-STRUCTURED',
+            skuCode: 'STRUCTURED-SKU',
+            specName: '结构化规格',
+            barcode: 'STRUCTURED-BAR',
+            size: '1200*600*750',
+            color: '柚木色',
+            material: '颗粒板',
+            boardMaterialType: '板材',
+            versionNo: 'V02',
+            attributeCode: 'ATTR-1',
+            drawingId: 'DRAW-1',
+            installMethod: '螺丝安装',
+            executeStandard: '企业标准',
+            nationalStandardCompliant: '是',
+            manufacturer: '工厂A',
+            manufacturerCode: 'N05',
+            salesStatus: '销售',
+            tagMaterial: '标签',
+            model3dDataUrl: 'structured-model.glb',
+            source: 'jst_sku',
+            sourceTable: 'jst_sku',
+            sourceSkuId: 'source-1',
+            contentLocked: true,
+          },
+        ],
+        spu: 'STRUCTURED-SPU-COLUMN',
+        spuBase: 'STRUCTURED-SPU-COLUMN',
+        brand: '结构化品牌列',
+        designer: '结构化设计列',
+        operator: '结构化运营列',
+        purchaser: '结构化采购列',
+      }),
+    ] as never)
+
+    const products = await intakeNonIntegratedProductService.list(baseUser)
+
+    expect(products[0]).toEqual(
+      expect.objectContaining({
+        spu: 'STRUCTURED-SPU-COLUMN',
+        productCode: 'STRUCTURED-SPU-COLUMN',
+        brand: '结构化品牌列',
+        designer: '结构化设计列',
+        operator: '结构化运营列',
+        purchaser: '结构化采购列',
+      }),
+    )
+    expect(products[0]?.openingReference.productName).toBe('结构化产品名')
+    expect(products[0]?.openingReference.productImage).toBe('structured-image.jpg')
+    expect(products[0]?.openingReference.productCategory).toBe('结构化品类')
+    expect(products[0]?.previewImage).toBe('structured-image.jpg')
+    expect(products[0]?.purchaseOwner).toBe('采购负责人')
+    expect(products[0]?.metadata).toEqual(
+      expect.objectContaining({
+        sourceSpu: 'SPU-STRUCTURED',
+        sourceSkuId: 'BAR-STRUCTURED',
+        sourceCategory: '结构化分类',
+        sourceItemType: '成品',
+        sourceSalesStatus: '销售',
+        sourceEnabled: '1',
+      }),
+    )
+    expect(products[0]?.skuItems[0]).toEqual(
+      expect.objectContaining({
+        id: 'sku-1',
+        skuSequence: 9,
+        batchNo: 2,
+        skuCode: 'STRUCTURED-SKU',
+        specName: '结构化规格',
+        barcode: 'STRUCTURED-BAR',
+        model: 'MODEL-STRUCTURED',
+        color: '柚木色',
+        material: '颗粒板',
+        contentLocked: true,
+      }),
+    )
+  })
+
+  it('结构化 profile 已存在时不会用旧 payload 补齐缺失的产品头主数据', async () => {
+    mockedRepository.listActive.mockResolvedValue([
+      createRecord({
+        payload: createPayload({
+          productCategory: 'payload 旧品类',
+          productDevelopmentKind: 'series',
+          previewImage: 'payload-preview.jpg',
+          metadata: {
+            sourceSpu: 'PAYLOAD-SPU',
+            sourceSkuId: 'PAYLOAD-SKU',
+          },
+          openingReference: {
+            productName: 'payload 旧产品名',
+            productImage: 'payload-old.jpg',
+            productCategory: 'payload 旧品类',
+          },
+        }),
+        profile: {
+          productName: '结构化产品名',
+          productImageUrl: '',
+          productCategory: '',
+          productDevelopmentKind: '',
+          sourceSpu: '',
+          sourceSkuId: '',
+        },
+        skuItems: [],
+      }),
+    ] as never)
+
+    const products = await intakeNonIntegratedProductService.list(baseUser)
+
+    expect(products[0]?.openingReference.productName).toBe('结构化产品名')
+    expect(products[0]?.openingReference.productImage).toBe('')
+    expect(products[0]?.openingReference.productCategory).toBe('')
+    expect(products[0]?.previewImage).toBe('')
+    expect(products[0]?.productCategory).toBe('')
+    expect(products[0]?.productDevelopmentKind).toBe('')
+    expect(products[0]?.metadata).not.toEqual(
+      expect.objectContaining({
+        sourceSpu: 'PAYLOAD-SPU',
+        sourceSkuId: 'PAYLOAD-SKU',
+      }),
+    )
+  })
+
+  it('分页筛选存量商品时优先使用结构化来源字段', async () => {
+    mockedRepository.listActivePage.mockResolvedValue({
+      records: [
+        createRecord({
+          profile: {
+            sourceSpu: 'SPU001',
+            sourceSkuId: 'BAR001',
+            sourceCategory: '餐桌',
+            sourceItemType: '成品',
+            sourceSalesStatus: '销售',
+            sourceEnabled: '1',
+          },
+        }),
+      ],
+      total: 1,
+    } as never)
+
+    const result = await intakeNonIntegratedProductService.listPage(baseUser, {
+      productKind: 'stock',
+      stockSku: 'BAR001',
+      stockCategory: '餐桌',
+      stockItemType: '成品',
+      stockSalesStatus: '销售',
+      stockEnabledStatus: '1',
+      stockDataScope: 'normalOnSale',
+    })
+
+    expect(result.products).toHaveLength(1)
+    expect(mockedRepository.listActivePage).toHaveBeenCalledWith(
+      expect.objectContaining({
+        filterWhere: expect.objectContaining({
+          AND: expect.arrayContaining([
+            expect.objectContaining({
+              OR: expect.arrayContaining([
+                expect.objectContaining({
+                  profile: {
+                    is: {
+                      sourceSpu: {
+                        not: '',
+                      },
+                    },
+                  },
+                }),
+              ]),
+            }),
+          ]),
+        }),
+      }),
+    )
+    expect(JSON.stringify(mockedRepository.listActivePage.mock.calls[0]?.[0])).toContain('sourceCategory')
+    expect(JSON.stringify(mockedRepository.listActivePage.mock.calls[0]?.[0])).toContain('sourceSalesStatus')
+  })
+
+  it('开发类型筛选只在缺少结构化 profile 时回退旧 payload', async () => {
+    mockedRepository.listActivePage.mockResolvedValue({
+      records: [],
+      total: 0,
+    } as never)
+
+    await intakeNonIntegratedProductService.listPage(baseUser, {
+      productDevelopmentKind: 'series',
+    })
+
+    const filterWhere = mockedRepository.listActivePage.mock.calls[0]?.[0]?.filterWhere
+    const serializedFilter = JSON.stringify(filterWhere)
+
+    expect(serializedFilter).toContain('"productDevelopmentKind"')
+    expect(serializedFilter).toContain('"profile":null')
+  })
+
+  it('负责人筛选只在缺少结构化 profile 时回退旧 payload 人员字段', async () => {
+    mockedRepository.listActivePage.mockResolvedValue({
+      records: [],
+      total: 0,
+    } as never)
+
+    await intakeNonIntegratedProductService.listPage(baseUser, {
+      planningOwner: '旧企划',
+      spaceDesigner: '旧空间',
+      purchaseOwner: '旧采购',
+    })
+
+    const filterWhere = mockedRepository.listActivePage.mock.calls[0]?.[0]?.filterWhere
+    const serializedFilter = JSON.stringify(filterWhere)
+
+    expect(serializedFilter).toContain('"productPlanning"')
+    expect(serializedFilter).toContain('"visualPlanning"')
+    expect(serializedFilter).toContain('"purchaseOwner"')
+    expect(serializedFilter).toContain('"profile":null')
+  })
+
+  it('存量商品分类下拉只读取结构化 profile 分类', async () => {
+    mockedRepository.listActive.mockResolvedValue([
+      createRecord({
+        profile: {
+          sourceCategory: '结构化分类',
+        },
+        payload: createPayload({
+          metadata: {
+            sourceCategory: '旧分类',
+          },
+        }),
+      }),
+      createRecord({
+        id: 'legacy-stock',
+        profile: null,
+        payload: createPayload({
+          metadata: {
+            sourceCategory: '旧分类',
+          },
+        }),
+      }),
+    ] as never)
+
+    const options = await intakeNonIntegratedProductService.listStockCategoryOptions(baseUser)
+
+    expect(options).toEqual(['结构化分类'])
+  })
+
   it('allows reading a shared record from another department when permissions are relaxed', async () => {
     mockedRepository.findActiveById.mockResolvedValue(
       createRecord({
@@ -248,6 +616,9 @@ describe('intakeNonIntegratedProductService', () => {
 
     await intakeNonIntegratedProductService.save(payload, baseUser)
 
+    const createArg = mockedRepository.create.mock.calls[0]?.[0] as {
+      profile?: { create?: Record<string, unknown> }
+    }
     expect(mockedRepository.create).toHaveBeenCalledWith(
       expect.objectContaining({
         id: 'non-integrated-create',
@@ -258,6 +629,486 @@ describe('intakeNonIntegratedProductService', () => {
         updatedBy: 'creator-1',
       }),
     )
+    expect(createArg.profile?.create).toEqual(
+      expect.objectContaining({
+        productName: 'preview.png',
+        productImageUrl: 'data:image/png;base64,test-image',
+        source: 'PAYLOAD_SYNC',
+      }),
+    )
+  })
+
+  it('在保存事务内分配正式 SPU 并同步生成 SKU 编码', async () => {
+    const payload = createPayload({
+      id: 'draft-before-formal-spu',
+      spu: '',
+      productCategory: '餐桌',
+      productDevelopmentKind: 'product',
+      openingReference: {
+        productCategory: '餐桌',
+      },
+      skuItems: [
+        createSkuItem({
+          skuSequence: 2,
+          skuCode: '',
+          barcode: '',
+          manufacturerCode: 'n05',
+          versionNo: '1',
+        }),
+      ],
+    })
+    mockedSpuNumberReservationService.reserveInTransaction.mockResolvedValue({
+      productCategory: '餐桌',
+      prefix: 'CZ',
+      index: 8,
+      spu: 'CZ0008',
+    })
+    mockedRepository.findDeletedBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.findBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.createInTransaction.mockResolvedValue(
+      createRecord({ id: 'CZ0008-1770000000000' }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'CZ0008-1770000000000',
+        spu: 'CZ0008',
+        spuBase: 'CZ0008',
+        payload: createPayload({ id: 'CZ0008-1770000000000', spu: 'CZ0008' }),
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser, {
+      formalSpuAssignmentProductCategory: '餐桌',
+    })
+
+    expect(mockedPrisma.$transaction).toHaveBeenCalledTimes(1)
+    expect(mockedSpuNumberReservationService.reserveInTransaction).toHaveBeenCalledWith(
+      expect.any(Object),
+      expect.objectContaining({
+        productCategory: '餐桌',
+        currentProductId: 'draft-before-formal-spu',
+        userId: 'creator-1',
+      }),
+    )
+    const createArg = mockedRepository.createInTransaction.mock.calls[0]?.[1] as {
+      spu?: string
+      skuItems?: { createMany?: { data?: Array<Record<string, unknown>> } }
+    }
+    expect(createArg.spu).toBe('CZ0008')
+    expect(createArg.skuItems?.createMany?.data?.[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'CZ000802',
+        barcode: 'CZ000802N05V01',
+        versionNo: 'V01',
+      }),
+    )
+  })
+
+  it('分配正式 SPU 时会替换草稿临时 SKU 编码和条码', async () => {
+    const payload = createPayload({
+      id: 'draft-with-temporary-sku',
+      spu: '',
+      productCategory: '餐桌',
+      productDevelopmentKind: 'product',
+      openingReference: {
+        productCategory: '餐桌',
+      },
+      skuItems: [
+        createSkuItem({
+          skuSequence: 3,
+          skuCode: 'KP-2026043003',
+          barcode: 'KP-2026043003N05V01',
+          manufacturerCode: 'n05',
+          versionNo: '1',
+        }),
+      ],
+    })
+    mockedSpuNumberReservationService.reserveInTransaction.mockResolvedValue({
+      productCategory: '餐桌',
+      prefix: 'CZ',
+      index: 10,
+      spu: 'CZ0010',
+    })
+    mockedRepository.findDeletedBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.findBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.createInTransaction.mockResolvedValue(
+      createRecord({ id: 'CZ0010-1770000000000' }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'CZ0010-1770000000000',
+        spu: 'CZ0010',
+        spuBase: 'CZ0010',
+        payload: createPayload({ id: 'CZ0010-1770000000000', spu: 'CZ0010' }),
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser, {
+      formalSpuAssignmentProductCategory: '餐桌',
+    })
+
+    const createArg = mockedRepository.createInTransaction.mock.calls[0]?.[1] as {
+      skuItems?: { createMany?: { data?: Array<Record<string, unknown>> } }
+    }
+    expect(createArg.skuItems?.createMany?.data?.[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'CZ001003',
+        barcode: 'CZ001003N05V01',
+        versionNo: 'V01',
+      }),
+    )
+  })
+
+  it('分配正式 SPU 前必须补齐 SKU 主数据', async () => {
+    const payload = createPayload({
+      id: 'draft-incomplete-before-formal-spu',
+      spu: '',
+      productCategory: '餐桌',
+      productDevelopmentKind: '',
+      openingReference: {
+        productCategory: '餐桌',
+      },
+      skuItems: [
+        createSkuItem({
+          skuSequence: 1,
+          specName: '',
+          model: '',
+          skuCode: '',
+          barcode: '',
+        }),
+      ],
+    })
+    mockedSpuNumberReservationService.reserveInTransaction.mockResolvedValue({
+      productCategory: '餐桌',
+      prefix: 'CZ',
+      index: 11,
+      spu: 'CZ0011',
+    })
+    mockedRepository.findDeletedBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.findBySpuInTransaction.mockResolvedValue(null as never)
+
+    const promise = intakeNonIntegratedProductService.save(payload, baseUser, {
+      formalSpuAssignmentProductCategory: '餐桌',
+    })
+
+    await expect(promise).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_REQUIRED_FIELD,
+    })
+    await expect(promise).rejects.toThrow('正式 SPU 分配存在未补齐的 SKU 主数据')
+
+    expect(mockedRepository.createInTransaction).not.toHaveBeenCalled()
+    expect(mockedRepository.updateInTransaction).not.toHaveBeenCalled()
+  })
+
+  it('编辑旧草稿时在同一保存事务内分配正式 SPU 并更新原记录', async () => {
+    const payload = createPayload({
+      id: 'draft-existing',
+      spu: '',
+      productCategory: '餐桌',
+      productDevelopmentKind: 'product',
+      openingReference: {
+        productCategory: '餐桌',
+      },
+      skuItems: [
+        createSkuItem({
+          skuSequence: 1,
+          skuCode: '',
+          barcode: '',
+          manufacturerCode: 'N05',
+          versionNo: '01',
+        }),
+      ],
+    })
+    mockTransactionExistingRecord = createRecord({
+      id: 'draft-existing',
+      spu: 'DRAFT-001',
+      spuBase: 'DRAFT-001',
+      payload,
+    })
+    mockedSpuNumberReservationService.reserveInTransaction.mockResolvedValue({
+      productCategory: '餐桌',
+      prefix: 'CZ',
+      index: 9,
+      spu: 'CZ0009',
+    })
+    mockedRepository.findBySpuInTransaction.mockResolvedValue(null as never)
+    mockedRepository.updateInTransaction.mockResolvedValue(
+      createRecord({ id: 'draft-existing', spu: 'CZ0009', spuBase: 'CZ0009' }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'draft-existing',
+        spu: 'CZ0009',
+        spuBase: 'CZ0009',
+        payload: createPayload({ id: 'draft-existing', spu: 'CZ0009' }),
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser, {
+      formalSpuAssignmentProductCategory: '餐桌',
+    })
+
+    expect(mockedRepository.createInTransaction).not.toHaveBeenCalled()
+    expect(mockedRepository.updateInTransaction).toHaveBeenCalledWith(
+      expect.any(Object),
+      'draft-existing',
+      expect.objectContaining({
+        spu: 'CZ0009',
+        spuBase: 'CZ0009',
+      }),
+    )
+    const updatePayload = mockedRepository.updateInTransaction.mock.calls[0]?.[2]
+      ?.payload as Record<string, unknown>
+    expect(updatePayload.spu).toBe('CZ0009')
+    expect((updatePayload.skuItems as Array<Record<string, unknown>>)[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'CZ000901',
+        barcode: 'CZ000901N05V01',
+      }),
+    )
+  })
+
+  it('syncs non-integrated SKU rows into structured master data on create', async () => {
+    const skuItem = createSkuItem({
+      id: 'sku-ready-1',
+      skuSequence: 3,
+      batchNo: 2,
+      model: 'MODEL-READY',
+      skuCode: 'SKU-READY-001',
+      specName: 'Ready spec',
+      barcode: 'BAR-READY-001',
+      sourceTable: 'jst_sku',
+      sourceSkuId: 'jst-001',
+    })
+    const payload = createPayload({
+      id: 'non-integrated-structured-create',
+      metadata: {
+        sourceSpu: 'SPU001',
+        sourceSkuId: 'BAR-READY-001',
+        sourceCategory: '餐桌',
+        sourceItemType: '成品',
+        sourceSalesStatus: '销售',
+        sourceEnabled: '1',
+        sourceStockDisabled: '0',
+      },
+      skuItems: [skuItem],
+    })
+
+    mockedRepository.findBySpu.mockResolvedValue(null as never)
+    mockedRepository.findDeletedBySpu.mockResolvedValue(null as never)
+    mockedRepository.findById.mockResolvedValue(null as never)
+    mockedRepository.create.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-structured-create',
+        payload,
+      }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-structured-create',
+        payload,
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser)
+
+    const createArg = mockedRepository.create.mock.calls[0]?.[0] as {
+      profile?: { create?: Record<string, unknown> }
+      skuItems?: { createMany?: { data?: Array<Record<string, unknown>> } }
+    }
+    expect(createArg.profile?.create).toEqual(
+      expect.objectContaining({
+        productName: 'preview.png',
+        productImageUrl: 'data:image/png;base64,test-image',
+        sourceSpu: 'SPU001',
+        sourceSkuId: 'BAR-READY-001',
+        sourceCategory: '餐桌',
+        sourceItemType: '成品',
+        sourceSalesStatus: '销售',
+        sourceEnabled: '1',
+        sourceStockDisabled: '0',
+        stockSkuCount: 1,
+        stockHasOnSaleSku: true,
+      }),
+    )
+    expect(createArg.skuItems?.createMany?.data?.[0]).toEqual(
+      expect.objectContaining({
+        id: 'non-integrated-structured-create:sku-ready-1',
+        skuItemId: 'sku-ready-1',
+        sortOrder: 1,
+        skuSequence: 3,
+        batchNo: 1,
+        model: 'MODEL-READY',
+        skuCode: 'SKU-READY-001',
+        specName: 'Ready spec',
+        barcode: 'BAR-READY-001',
+        sourceTable: 'jst_sku',
+        sourceSkuId: 'jst-001',
+        dataQualityStatus: 'READY',
+        missingRequiredFields: [],
+      }),
+    )
+  })
+
+  it('refreshes structured SKU rows and marks incomplete rows on update', async () => {
+    const existingRecord = createRecord({
+      id: 'non-integrated-structured-update',
+      payload: createPayload({ id: 'non-integrated-structured-update' }),
+    })
+    const payload = createPayload({
+      id: 'non-integrated-structured-update',
+      skuItems: [
+        createSkuItem({
+          id: 'sku-incomplete-1',
+          model: '',
+          skuCode: '',
+          specName: '',
+          barcode: '',
+        }),
+      ],
+    })
+
+    mockedRepository.findById.mockResolvedValue(existingRecord as never)
+    mockedRepository.findBySpu.mockResolvedValue(null as never)
+    mockedRepository.update.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-structured-update',
+        payload,
+      }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-structured-update',
+        payload,
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser)
+
+    const updateArg = mockedRepository.update.mock.calls[0]?.[1] as {
+      profile?: { upsert?: { create?: Record<string, unknown>; update?: Record<string, unknown> } }
+      skuItems?: {
+        deleteMany?: Record<string, never>
+        createMany?: { data?: Array<Record<string, unknown>> }
+      }
+    }
+    expect(updateArg.profile?.upsert?.update).toEqual(
+      expect.objectContaining({
+        productName: 'preview.png',
+        productImageUrl: 'data:image/png;base64,test-image',
+      }),
+    )
+    expect(updateArg.skuItems?.deleteMany).toEqual({})
+    expect(updateArg.skuItems?.createMany?.data?.[0]).toEqual(
+      expect.objectContaining({
+        id: 'non-integrated-structured-update:sku-incomplete-1',
+        skuItemId: 'sku-incomplete-1',
+        dataQualityStatus: 'INCOMPLETE',
+        missingRequiredFields: ['sku_code', 'spec_name', 'model'],
+      }),
+    )
+  })
+
+  it('normalizes non-integrated SKU code and barcode before saving payload and structured rows', async () => {
+    const existingRecord = createRecord({
+      id: 'non-integrated-normalized-sku',
+      payload: createPayload({ id: 'non-integrated-normalized-sku' }),
+    })
+    const payload = createPayload({
+      id: 'non-integrated-normalized-sku',
+      skuItems: [
+        createSkuItem({
+          id: 'sku-normalized-1',
+          skuCode: ' sku-lower-001 ',
+          barcode: ' bar-lower-001 ',
+        }),
+      ],
+    })
+
+    mockedRepository.findById.mockResolvedValue(existingRecord as never)
+    mockedRepository.findBySpu.mockResolvedValue(null as never)
+    mockedRepository.update.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-normalized-sku',
+        payload,
+      }) as never,
+    )
+    mockedRepository.findActiveById.mockResolvedValue(
+      createRecord({
+        id: 'non-integrated-normalized-sku',
+        payload,
+      }) as never,
+    )
+
+    await intakeNonIntegratedProductService.save(payload, baseUser)
+
+    const updateArg = mockedRepository.update.mock.calls[0]?.[1] as {
+      payload?: { skuItems?: Array<Record<string, unknown>> }
+      skuItems?: { createMany?: { data?: Array<Record<string, unknown>> } }
+    }
+    expect(updateArg.payload?.skuItems?.[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'SKU-LOWER-001',
+        barcode: 'BAR-LOWER-001',
+      }),
+    )
+    expect(updateArg.skuItems?.createMany?.data?.[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'SKU-LOWER-001',
+        barcode: 'BAR-LOWER-001',
+      }),
+    )
+    expect(buildStructuredSkuItemInputs(payload)[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'SKU-LOWER-001',
+        barcode: 'BAR-LOWER-001',
+      }),
+    )
+  })
+
+  it('blocks formal downstream use when non-integrated SKU master data is incomplete', () => {
+    const product = createPayload({
+      skuItems: [
+        createSkuItem({ id: 'sku-ready', skuCode: 'SKU-READY', specName: 'Ready', model: 'M-READY' }),
+        createSkuItem({ id: 'sku-incomplete', skuCode: '', specName: '', model: '' }),
+      ],
+    })
+
+    expect(resolveNonIntegratedSkuQuality(product.skuItems[0])).toEqual({
+      dataQualityStatus: 'READY',
+      missingRequiredFields: [],
+    })
+    expect(resolveNonIntegratedSkuQuality(product.skuItems[1])).toEqual({
+      dataQualityStatus: 'INCOMPLETE',
+      missingRequiredFields: ['sku_code', 'spec_name', 'model'],
+    })
+    expect(() =>
+      assertNonIntegratedSkuItemsReadyForFormalUse(product, {
+        usageLabel: '产品定厂合同',
+      }),
+    ).toThrow('产品定厂合同存在未补齐的 SKU 主数据')
+  })
+
+  it('blocks formal downstream use when non-integrated product profile master data is incomplete', () => {
+    const product = createPayload({
+      productDevelopmentKind: '',
+      productCategory: '',
+      openingReference: {
+        productName: '待补齐开品',
+        productCategory: '',
+      },
+      skuItems: [createSkuItem()],
+    })
+
+    expect(resolveNonIntegratedProductMissingRequiredFields(product)).toEqual([
+      'product_category',
+      'product_development_kind',
+    ])
+    expect(() =>
+      assertNonIntegratedProductMasterDataReadyForFormalUse(product, {
+        usageLabel: '产品定厂合同',
+      }),
+    ).toThrow('产品定厂合同存在未补齐的产品主数据')
   })
 
   it('persists a draft demand without formal spu by falling back to temporary code', async () => {
@@ -1086,6 +1937,81 @@ describe('intakeNonIntegratedProductService', () => {
     expect(mockedRepository.update).not.toHaveBeenCalled()
   })
 
+  it('uses structured profile rather than legacy payload to classify stock write permissions', async () => {
+    const existingFactoryRows = [
+      {
+        skuId: 'stock-sku-1',
+        confirmed: false,
+        model: 'AD0302',
+        skuCode: 'GBPM-AD030201',
+        setCount: '1',
+        barcode: 'GBPM-AD030201N1280V01',
+        specName: '存量款式',
+        size: '',
+        color: '',
+        material: '',
+        installMethod: '',
+        supplierName: '供应商A',
+        supplierCode: 'N1280',
+        warehouse: '',
+        minimumOrderQuantity: '',
+        leadTime: '',
+        assemblyMode: '',
+        productionType: '',
+        installationService: '',
+        supplierCategory: '',
+        purchaseOrderMethod: '',
+        executeStandard: '',
+      },
+    ]
+    const existingPayload = createPayload({
+      id: 'stock-product-profile-source',
+      processTemplate: '普通产品',
+      purchaser: '采购A',
+      purchaseOwner: '采购A',
+      openingReference: {
+        currentStage: '普通产品',
+      },
+      factoryRows: existingFactoryRows,
+    })
+    const incomingPayload = createPayload({
+      ...existingPayload,
+      factoryRows: existingFactoryRows.map((row) => ({
+        ...row,
+        confirmed: true,
+        supplierName: '供应商B',
+      })),
+    })
+    const structuredProfile = {
+      processTemplate: '存量商品',
+      productStatus: '存量商品',
+    }
+
+    mockedRepository.findBySpu.mockResolvedValue(null as never)
+    mockedRepository.findById.mockResolvedValue(
+      createRecord({
+        id: 'stock-product-profile-source',
+        payload: existingPayload,
+        profile: structuredProfile,
+      }) as never,
+    )
+
+    await expect(
+      intakeNonIntegratedProductService.save(incomingPayload, {
+        ...baseUser,
+        id: 'purchase-1',
+        email: 'purchase@example.com',
+        name: '采购A',
+        businessRoles: [] as const,
+        departmentPaths: [
+          '江苏简尚品牌管理有限公司 > 供应链中心 > 基本盘 采购部 > 采购一部',
+        ],
+      }),
+    ).rejects.toThrow('没有权限编辑这条非集成产品记录')
+
+    expect(mockedRepository.update).not.toHaveBeenCalled()
+  })
+
   it('does not rewrite stock product legacy values when there is no permitted node change', async () => {
     const existingPayload = createPayload({
       id: 'stock-readonly-noop-save',
@@ -1362,13 +2288,10 @@ describe('intakeNonIntegratedProductService', () => {
       }) as never,
     )
 
-    const savedProduct = await intakeNonIntegratedProductService.save(
-      payload,
-      {
-        ...baseUser,
-        role: 'SUPER_ADMIN',
-      },
-    )
+    const savedProduct = await intakeNonIntegratedProductService.save(payload, {
+      ...baseUser,
+      role: 'ADMIN',
+    })
     const updatePayload = mockedRepository.update.mock.calls[0]?.[1]?.payload as
       | Record<string, unknown>
       | undefined
@@ -1537,7 +2460,7 @@ describe('intakeNonIntegratedProductService', () => {
           payload: uploadedPayload,
         }) as never,
       )
-    mockedRepository.updatePayloadByUser.mockResolvedValue({} as never)
+    mockedRepository.updateAttachmentPayloadByUser.mockResolvedValue({} as never)
 
     const result = await intakeNonIntegratedProductService.attachUploadFile(
       'non-integrated-1',
@@ -1556,7 +2479,7 @@ describe('intakeNonIntegratedProductService', () => {
       baseUser,
     )
 
-    const payloadArg = mockedRepository.updatePayloadByUser.mock.calls[0]?.[1] as Record<
+    const payloadArg = mockedRepository.updateAttachmentPayloadByUser.mock.calls[0]?.[1] as Record<
       string,
       unknown
     >
@@ -1630,7 +2553,7 @@ describe('intakeNonIntegratedProductService', () => {
           }),
         }) as never,
       )
-    mockedRepository.updatePayloadByUser.mockResolvedValue({} as never)
+    mockedRepository.updateAttachmentPayloadByUser.mockResolvedValue({} as never)
 
     const result = await intakeNonIntegratedProductService.savePresentationPreview(
       'non-integrated-1',
@@ -1648,7 +2571,7 @@ describe('intakeNonIntegratedProductService', () => {
       baseUser,
     )
 
-    const payloadArg = mockedRepository.updatePayloadByUser.mock.calls[0]?.[1] as Record<
+    const payloadArg = mockedRepository.updateAttachmentPayloadByUser.mock.calls[0]?.[1] as Record<
       string,
       unknown
     >
diff --git a/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-scope.service.test.ts b/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-scope.service.test.ts
index 9372d7e3..ee7c7797 100644
--- a/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-scope.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/intake-non-integrated-scope.service.test.ts
@@ -31,6 +31,10 @@ describe('IntakeNonIntegratedScopeService node permissions', () => {
         visualPlanning: '其他空间同事',
         visualDirector: '其他空间同事',
       },
+      profile: {
+        visualPlanning: '希文',
+        visualDirector: '',
+      },
     }
     const spaceUser: AuthUser = {
       id: 'xiweng-user-id',
@@ -71,6 +75,10 @@ describe('IntakeNonIntegratedScopeService node permissions', () => {
         visualPlanning: '其他空间同事',
         visualDirector: '其他空间同事',
       },
+      profile: {
+        visualPlanning: '希文',
+        visualDirector: '',
+      },
     }
     const spaceUser: AuthUser = {
       id: 'xiweng-user-id',
@@ -108,6 +116,10 @@ describe('IntakeNonIntegratedScopeService node permissions', () => {
         visualPlanning: 'space colleague',
         visualDirector: 'space colleague',
       },
+      profile: {
+        visualPlanning: 'xiweng',
+        visualDirector: '',
+      },
     }
     const spaceUser: AuthUser = {
       id: 'xiweng-user-id',
@@ -135,4 +147,65 @@ describe('IntakeNonIntegratedScopeService node permissions', () => {
       service.canWriteWorkspaceRecordWithSettings(record, spaceUser, '绌洪棿甯冨眬'),
     ).resolves.toBe(false)
   })
+
+  it('does not use legacy payload people fields for workspace permissions', async () => {
+    const record = {
+      id: 'stock-space-record',
+      createdBy: 'designer-id',
+      designer: '设计同事',
+      purchaser: '采购同事',
+      visibility: 'DEPARTMENT',
+      departmentId: null,
+      teamId: null,
+      payload: {
+        purchaseOwner: '采购A',
+        visualPlanning: '希文',
+        visualDirector: '希文',
+      },
+      profile: {
+        purchaseOwner: '',
+        visualPlanning: '',
+        visualDirector: '',
+      },
+    }
+    const spaceUser: AuthUser = {
+      id: 'xiweng-user-id',
+      email: 'xiweng@example.local',
+      name: '希文',
+      role: 'USER',
+      status: 'ACTIVE',
+      businessRoles: ['PLANNING'],
+      department: {
+        id: 'space-dept',
+        name: '空间视觉部',
+        fullPath: '江苏简尚品牌管理有限公司 > 品牌中心 > 空间视觉部',
+      },
+      departmentPaths: [
+        '江苏简尚品牌管理有限公司 > 品牌中心 > 空间视觉部',
+      ],
+    }
+
+    await expect(
+      service.canWriteWorkspaceRecordWithSettings(record, spaceUser, '空间布局'),
+    ).resolves.toBe(true)
+
+    const purchaseUser: AuthUser = {
+      id: 'purchase-user-id',
+      email: 'purchase@example.local',
+      name: '采购A',
+      role: 'USER',
+      status: 'ACTIVE',
+      businessRoles: ['PURCHASING'],
+      department: {
+        id: 'purchase-dept',
+        name: '采购一部',
+        fullPath: '江苏简尚品牌管理有限公司 > 供应链中心 > 基本盘 采购部 > 采购一部',
+      },
+      departmentPaths: [
+        '江苏简尚品牌管理有限公司 > 供应链中心 > 基本盘 采购部 > 采购一部',
+      ],
+    }
+
+    expect(service.canWriteWorkspaceRecord(record, purchaseUser, '产品定厂')).toBe(false)
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/intake.service.test.ts b/furniture-3d-system/src/server/services/__tests__/intake.service.test.ts
index 774b8339..5a4430cd 100644
--- a/furniture-3d-system/src/server/services/__tests__/intake.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/intake.service.test.ts
@@ -23,9 +23,6 @@ jest.mock('../../repositories', () => ({
     findManyWithRelations: jest.fn(),
     findById: jest.fn(),
   },
-  skuRepository: {
-    findByProductIdAndSkuCode: jest.fn(),
-  },
   assetVariantRepository: {
     findByIdsWithRelations: jest.fn(),
     findByIdsWithRelationsIncludingDeleted: jest.fn(),
@@ -40,7 +37,6 @@ import {
   draftGroupRepository,
   preSkuRepository,
   productRepository,
-  skuRepository,
   assetVariantRepository,
   warehouseLocationRepository,
 } from '../../repositories'
@@ -51,12 +47,13 @@ describe('intakeService', () => {
   const mockedDraftGroupRepository = jest.mocked(draftGroupRepository)
   const mockedPreSkuRepository = jest.mocked(preSkuRepository)
   const mockedProductRepository = jest.mocked(productRepository)
-  const mockedSkuRepository = jest.mocked(skuRepository)
   const mockedAssetVariantRepository = jest.mocked(assetVariantRepository)
   const mockedWarehouseLocationRepository = jest.mocked(warehouseLocationRepository)
   let transactionClient: Prisma.TransactionClient
   let mockCreateProduct: jest.Mock
+  let mockFindFirstProduct: jest.Mock
   let mockCreateSku: jest.Mock
+  let mockFindFirstSku: jest.Mock
   let mockCreatePanel: jest.Mock
   let mockCreateHole: jest.Mock
   let mockCreateProductHardware: jest.Mock
@@ -108,6 +105,78 @@ describe('intakeService', () => {
     }
   }
 
+  function buildAssetVariant(id = 'variant-desktop-a-white', overrides: Record<string, unknown> = {}) {
+    const isHardware = id.includes('connector') || id.includes('hardware')
+    return {
+      id,
+      assetFamilyId: isHardware ? 'family-connector-bracket' : 'family-desktop-a',
+      code: isHardware ? 'CT-BRACKET-001' : 'DBZ-SPJ00001',
+      name: isHardware ? '桌腿连接片 标准款' : '桌面 1200 柚木色',
+      assetType: isHardware ? 'HARDWARE' : 'BOARD',
+      status: 'AVAILABLE',
+      identityKey: id,
+      sizeLabel: null,
+      substrateId: isHardware ? null : 'substrate-board',
+      finishId: isHardware ? null : 'finish-teak',
+      dimensions: isHardware ? { length: 80, width: 40, thickness: 5 } : { length: 1200, width: 600, thickness: 25 },
+      modelUrl: isHardware ? '/models/bracket.glb' : '/models/top-a-1200.glb',
+      thumbnailUrl: isHardware ? '/thumbs/bracket.webp' : '/thumbs/top.webp',
+      barcode: isHardware ? 'CT-BRACKET-001N05V01' : 'DBZ-SPJ00001N05V01',
+      supplierName: null,
+      supplierCode: 'N05',
+      versionNo: 'V01',
+      mountPoints: [{ name: 'origin', position: [0, 0, 0], diameter: 5, depth: 10 }],
+      assemblyBasis: {},
+      compatibilityRules: null,
+      namingFields: null,
+      businessData: { materialLabel: isHardware ? '黑色金属' : '颗粒板 + 柚木色' },
+      uvConfig: null,
+      weightKg: isHardware ? 0.2 : 14.5,
+      costPrice: isHardware ? 3 : 210,
+      lossFactor: null,
+      estimatedCostPrice: null,
+      inheritedFromVariantId: null,
+      deletedAt: null,
+      assetFamily: {
+        id: isHardware ? 'family-connector-bracket' : 'family-desktop-a',
+        code: isHardware ? 'DBZ-SPJK014' : 'DBZ-SPJK001',
+        name: isHardware ? '连接片' : '桌面板',
+        type: isHardware ? 'HARDWARE' : 'BOARD',
+        assetSeriesId: 'series-template-1',
+        deletedAt: null,
+        assetSeries: { id: 'series-template-1', code: 'DBZ', name: '单板桌' },
+      },
+      substrate: isHardware ? null : { id: 'substrate-board', code: 'SB', name: '颗粒板' },
+      finish: isHardware
+        ? null
+        : {
+            id: 'finish-teak',
+            name: '柚木色',
+            code: 'TEAK',
+            categoryId: 'finish',
+            category: { id: 'finish', name: '饰面', icon: null },
+            thumbnailUrl: null,
+            textureUrl: null,
+            normalMapUrl: null,
+            color: '#996633',
+            metalness: 0,
+            roughness: 0.5,
+            opacity: 1,
+            textureRepeat: 1,
+            textureRotation: 0,
+            textureSizeMm: 600,
+            isPreset: true,
+            isActive: true,
+          },
+      creator: null,
+      submitter: null,
+      reviewer: null,
+      rejecter: null,
+      lastModifier: null,
+      ...overrides,
+    }
+  }
+
   function buildFormalizablePreSku(overrides: Record<string, unknown> = {}) {
     return {
       id: 'pre-sku-1',
@@ -118,10 +187,42 @@ describe('intakeService', () => {
       status: 'DRAFT',
       componentCodes: ['TOP-A-WH-1200'],
       bomPreview: [],
+      basicInfo: {
+        model: 'DBZ-SPJK001',
+        formalSkuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        size: '长1200mm / 宽600mm / 厚25mm',
+        color: '柚木色',
+        material: '颗粒板 + 柚木色',
+        specName: '桌面 1200 柚木色',
+        versionNo: 'V01',
+        setCount: null,
+        attributeCode: null,
+        drawingId: null,
+        installMethod: null,
+      },
       displaySummary: {},
       installStepPreview: [],
       variantSelection: {
-        slots: [],
+        slots: [
+          {
+            slotKey: 'desktop',
+            role: 'desktop',
+            assetFamilyId: 'family-desktop-a',
+            variantId: 'variant-desktop-a-white',
+            code: 'OLD-CODE',
+            name: '旧快照桌面',
+            assetType: 'BOARD',
+            substrateId: 'substrate-board',
+            finishId: 'finish-teak',
+            dimensions: { length: 1000, width: 500, thickness: 18 },
+            weightKg: 12,
+            costPrice: 180,
+            modelUrl: '/models/old.glb',
+            mountPoints: [],
+            assemblyBasis: null,
+          },
+        ],
         hardwareSelections: [],
       },
       packagingPlan: buildPackagingPlan(),
@@ -133,7 +234,9 @@ describe('intakeService', () => {
     jest.clearAllMocks()
 
     mockCreateProduct = jest.fn()
+    mockFindFirstProduct = jest.fn().mockResolvedValue(null)
     mockCreateSku = jest.fn().mockResolvedValue({ id: 'sku-1' })
+    mockFindFirstSku = jest.fn().mockResolvedValue(null)
     mockCreatePanel = jest.fn().mockResolvedValue({ id: 'panel-1' })
     mockCreateHole = jest.fn().mockResolvedValue({ id: 'hole-1' })
     mockCreateProductHardware = jest.fn().mockResolvedValue({ id: 'product-hardware-1' })
@@ -145,10 +248,14 @@ describe('intakeService', () => {
 
     transactionClient = {
       product: {
+        findFirst: mockFindFirstProduct,
         create: mockCreateProduct,
       },
       productSKU: {
+        findMany: jest.fn().mockResolvedValue([]),
+        findFirst: mockFindFirstSku,
         create: mockCreateSku,
+        update: jest.fn(),
       },
       panel: {
         create: mockCreatePanel,
@@ -193,8 +300,9 @@ describe('intakeService', () => {
       name: '测试 SPU',
     } as never)
 
-    mockedSkuRepository.findByProductIdAndSkuCode.mockResolvedValue(null as never)
-    mockedAssetVariantRepository.findByIdsWithRelationsIncludingDeleted.mockResolvedValue([] as never)
+    mockedAssetVariantRepository.findByIdsWithRelationsIncludingDeleted.mockImplementation(async (ids) =>
+      ids.map((id) => buildAssetVariant(id)) as never,
+    )
     mockedWarehouseLocationRepository.findById.mockResolvedValue(null as never)
 
     mockedPrisma.$transaction.mockImplementation(async (callback) => {
@@ -327,6 +435,36 @@ describe('intakeService', () => {
     })
   })
 
+  it('挂已有 SPU 但目标产品已删除时不允许正式入库', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
+    mockedProductRepository.findById.mockResolvedValue({
+      id: 'product-1',
+      modelNumber: 'SPU-001',
+      name: '已删除 SPU',
+      deletedAt: new Date('2026-05-31T12:00:00.000Z'),
+    } as never)
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.PRODUCT_NOT_FOUND,
+    })
+  })
+
   it('传入不存在的库位时应阻止正式入库', async () => {
     mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
       id: 'draft-group-1',
@@ -352,7 +490,7 @@ describe('intakeService', () => {
     })
   })
 
-  it('CREATE_PRODUCT 模式会创建新的产品资料并回写默认信息', async () => {
+  it('CREATE_PRODUCT 模式必须使用显式正式产品身份，不再生成临时 SPU', async () => {
     mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
       id: 'draft-group-1',
       name: '云序桌系第一组',
@@ -371,14 +509,21 @@ describe('intakeService', () => {
         draftGroupId: 'draft-group-1',
         targetMode: 'CREATE_PRODUCT',
         productCategoryId: 'category-1',
+        modelNumber: 'SPU-NEW-001',
+        productName: '云序桌正式款',
         skuItems: [{ preSkuId: 'pre-sku-1', initialStock: 3 }],
       },
       authUser,
     )
 
+    expect(mockFindFirstProduct).toHaveBeenCalledWith({
+      where: { modelNumber: 'SPU-NEW-001' },
+      select: { id: true },
+    })
     expect(mockCreateProduct).toHaveBeenCalledWith({
       data: expect.objectContaining({
-        name: '云序桌系第一组',
+        modelNumber: 'SPU-NEW-001',
+        name: '云序桌正式款',
         categoryId: 'category-1',
         createdBy: authUser.id,
       }),
@@ -387,7 +532,217 @@ describe('intakeService', () => {
     expect(result.createdSkuIds).toEqual(['sku-1'])
   })
 
-  it('正式入库会兼容 tuple 格式的 mountPoints 坐标', async () => {
+  it('CREATE_PRODUCT 模式遇到正式产品型号冲突时阻断', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
+    mockFindFirstProduct.mockResolvedValue({ id: 'product-existing' })
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'CREATE_PRODUCT',
+          productCategoryId: 'category-1',
+          modelNumber: 'SPU-NEW-001',
+          productName: '云序桌正式款',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: expect.stringContaining('正式 SPU 型号「SPU-NEW-001」已存在'),
+    })
+
+    expect(mockCreateProduct).not.toHaveBeenCalled()
+    expect(mockCreateSku).not.toHaveBeenCalled()
+  })
+
+  it('正式入库遇到 SKU 编码冲突时阻断，不自动改写结构化规格码', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
+    mockFindFirstSku
+      .mockResolvedValueOnce({ id: 'sku-existing-in-other-product' })
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: expect.stringContaining('正式 SKU 编码「DBZ-SPJ00001」已存在'),
+    })
+
+    expect(mockFindFirstSku).toHaveBeenCalledWith({
+      where: {
+        skuCode: 'DBZ-SPJ00001',
+        deletedAt: null,
+      },
+      select: { id: true },
+    })
+    expect(mockCreateSku).not.toHaveBeenCalled()
+  })
+
+  it('正式入库必须使用结构化 PreSkuBasicInfo，不允许 displaySummary 旧字段参与主写', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(
+      buildFormalizablePreSku({
+        basicInfo: null,
+        displaySummary: {
+          formalSkuCode: 'OLD-JSON-SKU',
+          specName: '旧 JSON 规格名',
+        },
+      }),
+    )
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: expect.stringContaining('缺少结构化基础资料'),
+    })
+    expect(mockCreateSku).not.toHaveBeenCalled()
+  })
+
+  it('正式入库重复校验优先使用源 PreSku，而不是正式 SKU attributes 旧副本', async () => {
+    const currentPreSku = buildFormalizablePreSku()
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(currentPreSku)
+    mockFindManyExistingSkus.mockResolvedValue([
+      {
+        id: 'sku-existing',
+        skuCode: 'SKU-OLD',
+        productId: 'product-existing',
+        product: {
+          id: 'product-existing',
+          name: '旧产品',
+          modelNumber: 'SPU-OLD',
+        },
+        attributes: {
+          variantSelectionSummary: currentPreSku.variantSelection,
+          bomPreview: currentPreSku.bomPreview,
+        },
+        sourcePreSku: {
+          variantSelection: {
+            slots: [
+              {
+                slotKey: 'desktop',
+                role: 'desktop',
+                assetFamilyId: 'family-desktop-a',
+                variantId: 'variant-desktop-a-white',
+                code: 'DBZ-SPJ00009',
+                name: '当前源准 SKU 已调整后的桌面',
+                assetType: 'BOARD',
+                substrateId: 'substrate-board',
+                finishId: 'finish-teak',
+                dimensions: { length: 1400, width: 700, thickness: 25 },
+                weightKg: 16,
+                costPrice: 230,
+                modelUrl: '/models/top-a-1400.glb',
+                mountPoints: [],
+                assemblyBasis: null,
+              },
+            ],
+            hardwareSelections: [],
+          },
+          bomPreview: [],
+          displaySummary: {},
+        },
+      },
+    ])
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).resolves.toMatchObject({
+      createdSkuIds: ['sku-1'],
+    })
+  })
+
+  it('正式入库重复校验不会使用正式 SKU attributes 旧组合快照作为阻断依据', async () => {
+    const currentPreSku = buildFormalizablePreSku()
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(currentPreSku)
+    mockFindManyExistingSkus.mockResolvedValue([
+      {
+        id: 'sku-existing',
+        skuCode: 'SKU-OLD',
+        productId: 'product-existing',
+        product: {
+          id: 'product-existing',
+          name: '旧产品',
+          modelNumber: 'SPU-OLD',
+        },
+        attributes: {
+          variantSelectionSummary: currentPreSku.variantSelection,
+          bomPreview: currentPreSku.bomPreview,
+        },
+        sourcePreSku: null,
+      },
+    ])
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).resolves.toMatchObject({
+      createdSkuIds: ['sku-1'],
+    })
+  })
+
+  it('正式入库从资产规格款结构化数据生成板件、孔位和五金', async () => {
     mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
       id: 'draft-group-1',
       name: '云序桌系第一组',
@@ -442,6 +797,29 @@ describe('intakeService', () => {
         },
       }),
     )
+    mockedAssetVariantRepository.findByIdsWithRelationsIncludingDeleted.mockImplementation(async (ids) =>
+      ids.map((id) =>
+        id === 'variant-desktop-a-white'
+          ? buildAssetVariant(id, {
+              code: 'DBZ-SPJ00001',
+              name: '当前资产桌面',
+              dimensions: { length: 1200, width: 600, thickness: 25 },
+              mountPoints: [
+                {
+                  name: 'desktop-hole-1',
+                  position: [120, 80, 5],
+                  diameter: 8,
+                  depth: 15,
+                  type: 'blind',
+                },
+              ],
+              assemblyBasis: { facing: 'up' },
+            })
+          : buildAssetVariant(id, {
+              mountPoints: [{ name: 'origin', position: [300, 200, 12] }],
+            }),
+      ) as never,
+    )
 
     await intakeService.formalizeDraftGroup(
       {
@@ -465,6 +843,17 @@ describe('intakeService', () => {
         }),
       }),
     )
+    expect(mockCreatePanel).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          code: 'DBZ-SPJ00001',
+          name: '当前资产桌面',
+          length: 1200,
+          width: 600,
+          thickness: 25,
+        }),
+      }),
+    )
     expect(mockCreateProductHardware).toHaveBeenCalledWith(
       expect.objectContaining({
         data: expect.objectContaining({
@@ -476,6 +865,36 @@ describe('intakeService', () => {
     )
   })
 
+  it('准 SKU 引用的资产规格款已删除时阻止正式入库', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
+    mockedAssetVariantRepository.findByIdsWithRelationsIncludingDeleted.mockResolvedValue([
+      buildAssetVariant('variant-desktop-a-white', {
+        deletedAt: new Date('2026-05-30T08:00:00.000Z'),
+      }),
+    ] as never)
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+    expect(mockCreateSku).not.toHaveBeenCalled()
+  })
+
   it('正式入库时会按 boxes 生成包装成品，并写入规格款与包装摘要快照', async () => {
     mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
       id: 'draft-group-1',
@@ -491,6 +910,20 @@ describe('intakeService', () => {
       defaultName: '云序桌-标准版',
       customName: '云序桌-黑腿版',
       componentCodes: ['TOP-A-WH-1200', 'LEG-SLIM-BK-720', 'CT-BRACKET-001'],
+      basicInfo: {
+        model: 'DBZ-SPJK001',
+        formalSkuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        size: '长1200mm / 宽600mm / 厚25mm',
+        color: '白橡',
+        material: '颗粒板 + 白橡',
+        specName: '云序桌-黑腿版',
+        versionNo: 'V01',
+        setCount: null,
+        attributeCode: null,
+        drawingId: null,
+        installMethod: null,
+      },
       bomPreview: [
         {
           variantId: 'variant-desktop-a-white',
@@ -501,6 +934,9 @@ describe('intakeService', () => {
       ],
       displaySummary: {
         defaultName: '云序桌-标准版',
+        formalSkuCode: 'OLD-JSON-SKU',
+        barcode: 'OLD-JSON-BARCODE',
+        color: '旧快照颜色',
       },
       installStepPreview: [{ title: '固定桌面板' }],
       variantSelection: {
@@ -597,9 +1033,33 @@ describe('intakeService', () => {
       name: '测试 SPU',
     })
     mockedAssetVariantRepository.findByIdsWithRelationsIncludingDeleted.mockResolvedValue([
-      {
-        id: 'variant-desktop-a-white',
-        assetFamilyId: 'family-desktop-a',
+      buildAssetVariant('variant-desktop-a-white', {
+        code: 'DBZ-SPJ00001',
+        name: '悬浮桌面 A 1200 白橡',
+        barcode: 'DBZ-SPJ00001N05V01',
+        dimensions: { length: 1200, width: 600, thickness: 25 },
+        thumbnailUrl: '/asset-thumbnails/desktop.webp',
+        finish: {
+          id: 'finish-oak',
+          name: '白橡',
+          code: 'OAK',
+          categoryId: 'finish',
+          category: { id: 'finish', name: '饰面', icon: null },
+          thumbnailUrl: null,
+          textureUrl: null,
+          normalMapUrl: null,
+          color: '#fff',
+          metalness: 0,
+          roughness: 0.5,
+          opacity: 1,
+          textureRepeat: 1,
+          textureRotation: 0,
+          textureSizeMm: 600,
+          isPreset: true,
+          isActive: true,
+        },
+        substrate: { id: 'substrate-pb', code: 'PB18', name: '颗粒板' },
+        businessData: { materialLabel: '颗粒板 + 白橡' },
         assetFamily: {
           id: 'family-desktop-a',
           code: 'DBZ-SPJK001',
@@ -609,19 +1069,14 @@ describe('intakeService', () => {
           assetSeries: { id: 'series-dbz', code: 'DBZ', name: '单板桌' },
           deletedAt: null,
         },
-        code: 'DBZ-SPJ00001',
-        name: '悬浮桌面 A 1200 白橡',
-        barcode: 'DBZ-SPJ00001N05V01',
-        dimensions: { length: 1200, width: 600, thickness: 25 },
-        thumbnailUrl: '/asset-thumbnails/desktop.webp',
-        finish: { id: 'finish-oak', name: '白橡' },
-        substrate: { id: 'substrate-pb', code: 'PB18', name: '颗粒板' },
-        businessData: { materialLabel: '颗粒板 + 白橡' },
-        deletedAt: null,
-      },
-      {
-        id: 'variant-connector-bracket',
-        assetFamilyId: 'family-connector-bracket',
+      }),
+      buildAssetVariant('variant-connector-bracket', {
+        code: 'DBZ-SPJ00002',
+        name: '桌腿连接片 标准款',
+        barcode: null,
+        dimensions: { length: 80, width: 40, thickness: 3 },
+        thumbnailUrl: null,
+        businessData: null,
         assetFamily: {
           id: 'family-connector-bracket',
           code: 'DBZ-SPJK002',
@@ -631,16 +1086,7 @@ describe('intakeService', () => {
           assetSeries: { id: 'series-dbz', code: 'DBZ', name: '单板桌' },
           deletedAt: null,
         },
-        code: 'DBZ-SPJ00002',
-        name: '桌腿连接片 标准款',
-        barcode: null,
-        dimensions: { length: 80, width: 40, thickness: 3 },
-        thumbnailUrl: null,
-        finish: null,
-        substrate: null,
-        businessData: null,
-        deletedAt: null,
-      },
+      }),
     ] as never)
 
     await intakeService.formalizeDraftGroup(
@@ -665,7 +1111,6 @@ describe('intakeService', () => {
         data: expect.objectContaining({
           attributes: expect.objectContaining({
             preSkuId: 'pre-sku-1',
-            skuName: '云序桌-黑腿版',
             variantSelectionSummary: expect.objectContaining({
               slots: expect.any(Array),
               hardwareSelections: expect.any(Array),
@@ -686,17 +1131,32 @@ describe('intakeService', () => {
               sourceStatus: 'ACTIVE',
             }),
           }),
+          name: '云序桌-黑腿版',
           images: ['/asset-thumbnails/desktop.webp'],
           sourceAssetVariantId: 'variant-desktop-a-white',
           sourceAssetVariantIds: ['variant-desktop-a-white', 'variant-connector-bracket'],
+          assetProfile: {
+            create: expect.objectContaining({
+              primarySourceAssetVariantId: 'variant-desktop-a-white',
+              sourceAssetVariantIds: ['variant-desktop-a-white', 'variant-connector-bracket'],
+              model: 'DBZ-SPJK001',
+              specCode: 'DBZ-SPJ00001',
+              barcode: 'DBZ-SPJ00001N05V01',
+              color: '白橡',
+              material: '颗粒板 + 白橡',
+              imageUrl: '/asset-thumbnails/desktop.webp',
+              sourceStatus: 'ACTIVE',
+            }),
+          },
         }),
       }),
     )
+    expect(mockCreateSku.mock.calls[0][0].data.attributes).not.toHaveProperty('displaySummary')
 
     expect(mockCreatePackagedItem).toHaveBeenCalledWith(
       expect.objectContaining({
         data: expect.objectContaining({
-          code: 'SPU-001-01-PKG-1',
+          code: 'DBZ-SPJ00001-PKG-1',
           preSkuPackagingPlanId: 'plan-1',
           payload: expect.objectContaining({
             boxNumber: 1,
@@ -782,6 +1242,60 @@ describe('intakeService', () => {
     })
   })
 
+  it('包装箱编号必须是唯一正整数，避免生成冲突的包装成品编码', async () => {
+    mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
+      id: 'draft-group-1',
+      name: '云序桌系第一组',
+      categoryId: 'category-1',
+      status: 'READY_FOR_INTAKE',
+    } as never)
+
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(
+      buildFormalizablePreSku({
+        packagingPlan: {
+          ...buildPackagingPlan(),
+          boxes: [
+            {
+              boxNumber: 1,
+              name: '主箱',
+              outerSizeMm: { length: 1200, width: 650, height: 90 },
+              items: [],
+              materials: [],
+              estimatedWeightKg: 16.1,
+              estimatedCost: 12,
+            },
+            {
+              boxNumber: 1,
+              name: '副箱',
+              outerSizeMm: { length: 400, width: 280, height: 180 },
+              items: [],
+              materials: [],
+              estimatedWeightKg: 4.2,
+              estimatedCost: 9,
+            },
+          ],
+        },
+      }),
+    )
+
+    await expect(
+      intakeService.formalizeDraftGroup(
+        {
+          draftGroupId: 'draft-group-1',
+          targetMode: 'ATTACH_PRODUCT',
+          productId: 'product-1',
+          skuItems: [{ preSkuId: 'pre-sku-1' }],
+        },
+        authUser,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+      message: expect.stringContaining('包装箱编号 1 重复'),
+    })
+
+    expect(mockCreatePackagedItem).not.toHaveBeenCalled()
+  })
+
   it('已经 FORMALIZED 的准 SKU 不允许再次正式入库', async () => {
     mockedDraftGroupRepository.findByIdWithRelations.mockResolvedValue({
       id: 'draft-group-1',
@@ -869,23 +1383,7 @@ describe('intakeService', () => {
       status: 'READY_FOR_INTAKE',
     } as never)
 
-    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue({
-      id: 'pre-sku-1',
-      draftGroupId: 'draft-group-1',
-      sequence: 1,
-      defaultName: '云序桌-标准版',
-      customName: null,
-      status: 'DRAFT',
-      componentCodes: ['TOP-A-WH-1200'],
-      bomPreview: [],
-      displaySummary: {},
-      installStepPreview: [],
-      variantSelection: {
-        slots: [],
-        hardwareSelections: [],
-      },
-      packagingPlan: buildPackagingPlan(),
-    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
 
     mockedPreSkuRepository.findByDraftGroupId.mockResolvedValue([
       {
@@ -942,23 +1440,7 @@ describe('intakeService', () => {
       status: 'READY_FOR_INTAKE',
     } as never)
 
-    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue({
-      id: 'pre-sku-1',
-      draftGroupId: 'draft-group-1',
-      sequence: 1,
-      defaultName: '云序桌-标准版',
-      customName: null,
-      status: 'DRAFT',
-      componentCodes: ['TOP-A-WH-1200'],
-      bomPreview: [],
-      displaySummary: {},
-      installStepPreview: [],
-      variantSelection: {
-        slots: [],
-        hardwareSelections: [],
-      },
-      packagingPlan: buildPackagingPlan(),
-    } as never)
+    mockedPreSkuRepository.findByIdWithRelations.mockResolvedValue(buildFormalizablePreSku())
 
     mockedPreSkuRepository.findByDraftGroupId.mockResolvedValue([
       {
@@ -1027,4 +1509,29 @@ describe('intakeService', () => {
       ]),
     )
   })
+
+  it('schema 要求新建 SPU 时必须传正式型号和产品名称', () => {
+    const result = formalizeDraftGroupSchema.safeParse({
+      draftGroupId: 'draft-group-1',
+      targetMode: 'CREATE_PRODUCT',
+      productCategoryId: 'category-1',
+      skuItems: [{ preSkuId: 'pre-sku-1' }],
+    })
+
+    expect(result.success).toBe(false)
+    if (result.success) {
+      throw new Error('expected schema parse to fail')
+    }
+
+    expect(result.error.issues).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          path: ['modelNumber'],
+        }),
+        expect.objectContaining({
+          path: ['productName'],
+        }),
+      ]),
+    )
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/material.service.test.ts b/furniture-3d-system/src/server/services/__tests__/material.service.test.ts
index fc987f82..7c09c96d 100644
--- a/furniture-3d-system/src/server/services/__tests__/material.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/material.service.test.ts
@@ -6,6 +6,7 @@ jest.mock('@/server/repositories/material.repository', () => ({
     create: jest.fn(),
     findByIdWithCategory: jest.fn(),
     findById: jest.fn(),
+    update: jest.fn(),
     getUsageCount: jest.fn(),
     deactivate: jest.fn(),
     delete: jest.fn(),
@@ -13,6 +14,10 @@ jest.mock('@/server/repositories/material.repository', () => ({
   materialCategoryRepository: {
     findById: jest.fn(),
     getMaterialCount: jest.fn(),
+    nameExists: jest.fn(),
+    getNextSortOrder: jest.fn(),
+    create: jest.fn(),
+    update: jest.fn(),
     delete: jest.fn(),
   },
 }))
@@ -45,6 +50,7 @@ const mockMaterialRepository = materialRepository as unknown as {
   create: jest.Mock
   findByIdWithCategory: jest.Mock
   findById: jest.Mock
+  update: jest.Mock
   getUsageCount: jest.Mock
   deactivate: jest.Mock
   delete: jest.Mock
@@ -53,6 +59,10 @@ const mockMaterialRepository = materialRepository as unknown as {
 const mockMaterialCategoryRepository = materialCategoryRepository as unknown as {
   findById: jest.Mock
   getMaterialCount: jest.Mock
+  nameExists: jest.Mock
+  getNextSortOrder: jest.Mock
+  create: jest.Mock
+  update: jest.Mock
   delete: jest.Mock
 }
 
@@ -65,6 +75,8 @@ describe('materialService', () => {
       icon: null,
     })
     mockMaterialCategoryRepository.getMaterialCount.mockResolvedValue(0)
+    mockMaterialCategoryRepository.nameExists.mockResolvedValue(false)
+    mockMaterialCategoryRepository.getNextSortOrder.mockResolvedValue(3)
     mockMaterialRepository.nameExistsInCategory.mockResolvedValue(false)
     mockMaterialRepository.getUsageCount.mockResolvedValue(0)
   })
@@ -132,6 +144,67 @@ describe('materialService', () => {
     expect(result.previewUrl).toBe('/api/materials/thumbnail?name=test')
   })
 
+  it('创建花色时会按统一编码池归一化人工编码', async () => {
+    mockMaterialRepository.findByCode.mockResolvedValue(null)
+    mockMaterialRepository.create.mockResolvedValue({
+      id: 'finish-custom',
+      code: 'HS-0020',
+      name: '胡桃木',
+      categoryId: 'category-wood',
+      category: { id: 'category-wood', name: '木纹', icon: null },
+      thumbnailUrl: null,
+      textureUrl: null,
+      normalMapUrl: null,
+      color: '#ffffff',
+      metalness: 0,
+      roughness: 0.5,
+      opacity: 1,
+      textureRepeat: 1,
+      textureRotation: 0,
+      textureSizeMm: 600,
+      isPreset: false,
+      isActive: true,
+    })
+    mockMaterialRepository.findByIdWithCategory.mockResolvedValue({
+      id: 'finish-custom',
+      code: 'HS-0020',
+      name: '胡桃木',
+      categoryId: 'category-wood',
+      category: { id: 'category-wood', name: '木纹', icon: null },
+      thumbnailUrl: null,
+      textureUrl: null,
+      normalMapUrl: null,
+      color: '#ffffff',
+      metalness: 0,
+      roughness: 0.5,
+      opacity: 1,
+      textureRepeat: 1,
+      textureRotation: 0,
+      textureSizeMm: 600,
+      isPreset: false,
+      isActive: true,
+    })
+
+    await materialService.create({
+      name: ' 胡桃木 ',
+      code: ' hs-0020 ',
+      categoryId: 'category-wood',
+      color: '#ffffff',
+      metalness: 0,
+      roughness: 0.5,
+      opacity: 1,
+    })
+
+    expect(mockMaterialRepository.findByCode).toHaveBeenCalledWith('HS-0020')
+    expect(mockMaterialRepository.nameExistsInCategory).toHaveBeenCalledWith('胡桃木', 'category-wood')
+    expect(mockMaterialRepository.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        code: 'HS-0020',
+        name: '胡桃木',
+      }),
+    )
+  })
+
   it('历史默认占位缩略图会在 DTO 层归一化为 null', async () => {
     mockMaterialRepository.findByIdWithCategory.mockResolvedValue({
       id: 'finish-stone',
@@ -177,4 +250,76 @@ describe('materialService', () => {
     expect(mockMaterialCategoryRepository.getMaterialCount).toHaveBeenCalledWith('category-wood', false)
     expect(mockMaterialCategoryRepository.delete).toHaveBeenCalledWith('category-wood')
   })
+
+  it('创建分类时会归一化名称图标并拒绝负排序', async () => {
+    mockMaterialCategoryRepository.create.mockResolvedValue({
+      id: 'category-metal',
+      name: '金属',
+      icon: null,
+      sortOrder: 3,
+      isActive: true,
+    })
+
+    await materialService.createCategory({
+      name: ' 金属 ',
+      icon: '   ',
+    })
+
+    expect(mockMaterialCategoryRepository.nameExists).toHaveBeenCalledWith('金属')
+    expect(mockMaterialCategoryRepository.create).toHaveBeenCalledWith({
+      name: '金属',
+      icon: null,
+      sortOrder: 3,
+      isActive: true,
+    })
+
+    await expect(
+      materialService.createCategory({
+        name: '玻璃',
+        sortOrder: -1,
+      }),
+    ).rejects.toThrow('分类排序必须是非负整数')
+  })
+
+  it('更新材质名称时会先去空格再查重和保存', async () => {
+    mockMaterialRepository.findById.mockResolvedValue({
+      id: 'finish-oak',
+      name: '旧橡木',
+      categoryId: 'category-wood',
+      thumbnailUrl: null,
+    })
+    mockMaterialRepository.findByIdWithCategory.mockResolvedValue({
+      id: 'finish-oak',
+      code: 'HS-0010',
+      name: '北美橡木',
+      categoryId: 'category-wood',
+      category: { id: 'category-wood', name: '木纹', icon: null },
+      thumbnailUrl: null,
+      textureUrl: null,
+      normalMapUrl: null,
+      color: '#ffffff',
+      metalness: 0,
+      roughness: 0.5,
+      opacity: 1,
+      textureRepeat: 1,
+      textureRotation: 0,
+      textureSizeMm: 600,
+      isPreset: false,
+      isActive: true,
+    })
+
+    await materialService.update('finish-oak', {
+      name: ' 北美橡木 ',
+    })
+
+    expect(mockMaterialRepository.nameExistsInCategory).toHaveBeenCalledWith(
+      '北美橡木',
+      'category-wood',
+      'finish-oak',
+    )
+    expect(mockMaterialRepository.update).toHaveBeenCalledWith(
+      'finish-oak',
+      expect.objectContaining({ name: '北美橡木' }),
+    )
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/planning.service.test.ts b/furniture-3d-system/src/server/services/__tests__/planning.service.test.ts
index 717aef7e..71aad868 100644
--- a/furniture-3d-system/src/server/services/__tests__/planning.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/planning.service.test.ts
@@ -303,7 +303,7 @@ describe('planningService', () => {
     expect(mockedCategoryRepository.findById).toHaveBeenCalledWith('category-1')
     expect(mockedPlanningTemplateRepository.create).toHaveBeenCalledWith(
       expect.objectContaining({
-        code: 'desk-pro',
+        code: 'DESK-PRO',
         name: '高配电脑桌',
         description: '面向旗舰款',
         namePattern: '{workspace.name}-{desktop.code}',
@@ -313,6 +313,113 @@ describe('planningService', () => {
     expect(result.code).toBe('desk-basic')
   })
 
+  it('创建模板时拒绝非对象规则，避免把过程 JSON 写成第二套真相', async () => {
+    mockedCategoryRepository.findById.mockResolvedValue({
+      id: 'category-1',
+      name: '电脑桌',
+    } as never)
+
+    await expect(
+      planningService.createTemplate(
+        {
+          code: 'desk-pro',
+          name: '高配电脑桌',
+          categoryId: 'category-1',
+          slots: [
+            {
+              key: 'desktop',
+              name: '桌面板',
+              assetType: 'component',
+              placement: {
+                mode: 'absolute',
+                position: [0, 720, 0],
+              },
+            },
+          ],
+          rules: [] as never,
+        },
+        user,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+    expect(mockedPlanningTemplateRepository.create).not.toHaveBeenCalled()
+  })
+
+  it('创建工作台时规范化可见范围和槽位选择，并拒绝模板外槽位', async () => {
+    mockedCategoryRepository.findById.mockResolvedValue({
+      id: 'category-1',
+      name: '电脑桌',
+    } as never)
+    mockedPlanningWorkspaceRepository.create.mockResolvedValue({
+      id: 'workspace-created',
+    } as never)
+
+    await planningService.createWorkspace(
+      {
+        name: '  云序桌系  ',
+        templateId: 'template-1',
+        visibility: ' department ',
+        slotSelections: {
+          desktop: [' component-1 ', 'component-1'],
+        },
+        metadata: { season: '2026Q2' },
+      },
+      user,
+    )
+
+    expect(mockedPlanningWorkspaceRepository.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        name: '云序桌系',
+        visibility: 'DEPARTMENT',
+        slotSelections: {
+          desktop: ['component-1'],
+        },
+      }),
+    )
+
+    await expect(
+      planningService.createWorkspace(
+        {
+          name: '云序桌系',
+          templateId: 'template-1',
+          slotSelections: {
+            unknown: ['component-1'],
+          },
+        },
+        user,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+  })
+
+  it('更新工作台时拒绝空名称和游离可见范围', async () => {
+    await expect(
+      planningService.updateWorkspace(
+        'workspace-1',
+        {
+          name: '   ',
+        },
+        user,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_REQUIRED_FIELD,
+    })
+
+    await expect(
+      planningService.updateWorkspace(
+        'workspace-1',
+        {
+          visibility: 'ALL_HANDS',
+        },
+        user,
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+  })
+
   it('保存草稿时只持久化选中资产的最小快照字段', async () => {
     mockedPlanningDraftRepository.create.mockResolvedValue({
       id: 'draft-created',
diff --git a/furniture-3d-system/src/server/services/__tests__/product-write.service.permission.test.ts b/furniture-3d-system/src/server/services/__tests__/product-write.service.permission.test.ts
index 2a0f494b..54e0fffb 100644
--- a/furniture-3d-system/src/server/services/__tests__/product-write.service.permission.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/product-write.service.permission.test.ts
@@ -37,6 +37,7 @@ describe('ProductWriteService collaborator permissions', () => {
             name: '部门管理员',
             role: 'SUPERVISOR',
             status: 'ACTIVE',
+            businessRoles: ['DESIGN'],
             managedDepartmentId: 'dept-1',
           } as any,
           requestId: 'req-test',
@@ -89,4 +90,46 @@ describe('ProductWriteService collaborator permissions', () => {
       code: ErrorCode.AUTH_PERMISSION_DENIED,
     })
   })
+
+  it('协作者角色必须是固定枚举，不能把游离值写成权限关系', async () => {
+    const repository: any = {
+      findById: (jest.fn() as any).mockResolvedValue({
+        id: 'product-3',
+        createdBy: 'creator-1',
+        departmentId: 'dept-1',
+        deletedAt: null,
+      }),
+      addCollaborator: jest.fn() as any,
+    }
+
+    const service = new ProductWriteService(
+      repository,
+      { del: jest.fn() as any } as any,
+      jest.fn() as any,
+      jest.fn() as any,
+    )
+
+    await expect(
+      service.addCollaborator(
+        'product-3',
+        'user-2',
+        'owner',
+        {
+          user: {
+            id: 'creator-1',
+            email: 'creator@test.com',
+            name: '创建者',
+            role: 'USER',
+            status: 'ACTIVE',
+            businessRoles: ['DESIGN'],
+          } as any,
+          requestId: 'req-test',
+        },
+      ),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+
+    expect(repository.addCollaborator).not.toHaveBeenCalled()
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/share.service.test.ts b/furniture-3d-system/src/server/services/__tests__/share.service.test.ts
index 58440b37..8ce38bff 100644
--- a/furniture-3d-system/src/server/services/__tests__/share.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/share.service.test.ts
@@ -48,8 +48,10 @@ describe('ShareService.getShareDetail', () => {
         {
           id: 'sku-1',
           skuCode: 'SKU-001',
+          name: '测试 SKU',
           price: 99,
           attributes: { color: 'oak', _skuCadData: { nodes: ['internal-node'] }, internalCount: 2 },
+          assetProfile: null,
           isActive: true,
           modelUrl: 'https://example.com/sku-1.glb',
           images: [],
@@ -299,10 +301,13 @@ describe('ShareService.getShareDetail', () => {
       {
         id: 'sku-1',
         skuCode: 'SKU-001',
+        name: '测试 SKU',
         price: 99,
-        attributes: { color: 'oak' },
+        assetProfile: null,
+        legacyAttributes: { color: 'oak' },
       },
     ])
+    expect(JSON.stringify(result)).not.toContain('"attributes"')
     expect(JSON.stringify(result)).not.toContain('_skuCadData')
     expect(JSON.stringify(result)).not.toContain('SKU-INACTIVE')
     expect(JSON.stringify(result)).not.toContain('cameraPosition')
@@ -321,6 +326,64 @@ describe('ShareService.getShareDetail', () => {
     })
   })
 
+  it('公开详情输出结构化资产副本，旧 attributes 只作为 legacyAttributes', async () => {
+    mockedShareRepository.findPublicDetailByToken.mockResolvedValue({
+      ...baseLink,
+      product: {
+        ...baseLink.product,
+        skus: [
+          {
+            ...baseLink.product.skus[0],
+            attributes: { color: 'legacy-oak' },
+            assetProfile: {
+              id: 'profile-1',
+              skuId: 'sku-1',
+              primarySourceAssetVariantId: 'variant-1',
+              sourceAssetVariantIds: ['variant-1'],
+              sourceAssetFamilyId: 'family-1',
+              sourceAssetSeriesId: 'series-1',
+              model: 'DBZ-SPJK001',
+              modelName: 'Desk',
+              specCode: 'DBZ-SPJ00001',
+              specName: '1200 teak',
+              barcode: 'DBZ-SPJ00001N05V01',
+              size: { width: 1200 },
+              color: 'teak',
+              material: 'wood',
+              imageUrl: '/images/profile.png',
+              sourceStatus: 'ACTIVE',
+              syncedAt: new Date('2026-03-13T00:00:00.000Z'),
+              lockedFields: [],
+              lockedReasons: {},
+              sourceVariants: [],
+              createdAt: new Date('2026-03-13T00:00:00.000Z'),
+              updatedAt: new Date('2026-03-13T00:00:00.000Z'),
+            },
+          },
+        ],
+      },
+    } as never)
+    mockedAssemblyStepRepository.findByProductId.mockResolvedValue([productLevelStep])
+    mockedPanelRepository.findByProductId.mockResolvedValue([productLevelPanel])
+
+    const result = await service.getShareDetail('token-1')
+
+    expect(result.product.skus[0]).toMatchObject({
+      id: 'sku-1',
+      skuCode: 'SKU-001',
+      name: '测试 SKU',
+      assetProfile: {
+        specCode: 'DBZ-SPJ00001',
+        specName: '1200 teak',
+        barcode: 'DBZ-SPJ00001N05V01',
+        color: 'teak',
+        material: 'wood',
+      },
+      legacyAttributes: { color: 'legacy-oak' },
+    })
+    expect(result.product.skus[0]).not.toHaveProperty('attributes')
+  })
+
   it('过期分享统一按不可用处理，避免泄露 token 状态', async () => {
     mockedShareRepository.findPublicDetailByToken.mockResolvedValue({
       ...baseLink,
diff --git a/furniture-3d-system/src/server/services/__tests__/sku-command.service.test.ts b/furniture-3d-system/src/server/services/__tests__/sku-command.service.test.ts
index 19629be0..5bdd0a8b 100644
--- a/furniture-3d-system/src/server/services/__tests__/sku-command.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/sku-command.service.test.ts
@@ -1,23 +1,79 @@
 import { SKUCommandService } from '../sku-command.service'
 import { releaseSkuCodeFromDeletedRecords } from '../sku-soft-delete.helper'
+import { productRepository } from '../../repositories/product.repository'
+
+jest.mock('../../repositories/product.repository', () => ({
+  productRepository: {
+    existsById: jest.fn(),
+    findById: jest.fn(),
+  },
+}))
 
 jest.mock('../sku-soft-delete.helper', () => ({
-  buildDeletedSkuCode: jest.fn((skuCode: string, id: string) => `${skuCode}__deleted__${id}`),
-  executeCreateWithSkuCodeRecovery: jest.fn(async ({ create }) => create()),
-  getRestorableSkuCode: jest.fn((skuCode: string) => skuCode),
-  releaseSkuCodeFromDeletedRecords: jest.fn(),
-  toSkuAttributesObject: jest.fn((attributes: unknown) =>
-    attributes && typeof attributes === 'object' && !Array.isArray(attributes)
-      ? attributes
-      : {},
+  buildRestoreSkuUpdateData: jest.fn((record: { skuCode: string; attributes?: Record<string, unknown> }) => ({
+    skuCode: record.skuCode,
+    attributes: Object.fromEntries(
+      Object.entries(record.attributes ?? {}).filter(
+        ([key]) => key !== '_originalSkuCode' && key !== '_deletedCodeAt',
+      ),
+    ),
+  })),
+  buildSoftDeleteSkuUpdateData: jest.fn(
+    (record: { id: string; skuCode: string; attributes?: Record<string, unknown> }, deletedAt: Date) => ({
+      deletedAt,
+      skuCode: `${record.skuCode}__deleted__${record.id}`,
+      attributes: {
+        ...(record.attributes ?? {}),
+        _originalSkuCode: record.attributes?._originalSkuCode ?? record.skuCode,
+        _deletedCodeAt: deletedAt.toISOString(),
+      },
+    }),
   ),
+  executeCreateWithSkuCodeRecovery: jest.fn(async ({ create }) => create()),
+  mergeSkuRecordAttributesForUpdate: jest.fn((record: { attributes?: unknown }, inputAttributes: unknown) => {
+    const existingAttributes = record.attributes
+    const existing =
+      existingAttributes && typeof existingAttributes === 'object' && !Array.isArray(existingAttributes)
+        ? (existingAttributes as Record<string, unknown>)
+        : {}
+    const input =
+      inputAttributes && typeof inputAttributes === 'object' && !Array.isArray(inputAttributes)
+        ? (inputAttributes as Record<string, unknown>)
+        : {}
+    const preserved = Object.fromEntries(
+      Object.entries(existing).filter(
+        ([key]) =>
+          key.startsWith('_') ||
+          key === 'assetSkuSnapshot' ||
+          key === 'variantSelectionSummary' ||
+          key === 'bomPreview',
+      ),
+    )
+    const editable = Object.fromEntries(
+      Object.entries(input).filter(
+        ([key]) =>
+          !key.startsWith('_') &&
+          key !== 'assetSkuSnapshot' &&
+          key !== 'variantSelectionSummary' &&
+          key !== 'bomPreview',
+      ),
+    )
+    return { ...editable, ...preserved }
+  }),
+  releaseSkuCodeFromDeletedRecords: jest.fn(),
+}))
+
+jest.mock('../sku-cad-import.helper', () => ({
+  createSkuWithImportedHolesTx: jest.fn(async () => ({ id: 'sku-created' })),
 }))
 
 describe('SKUCommandService.updateSKU', () => {
   const repository = {
+    create: jest.fn(),
     findById: jest.fn(),
     skuCodeExists: jest.fn(),
     update: jest.fn(),
+    withTransaction: jest.fn((callback: (tx: unknown) => Promise<unknown>) => callback({})),
   }
   const cache = {
     del: jest.fn(),
@@ -44,10 +100,16 @@ describe('SKUCommandService.updateSKU', () => {
 
   beforeEach(() => {
     jest.clearAllMocks()
+    ;(productRepository.existsById as jest.Mock).mockResolvedValue(true)
+    ;(productRepository.findById as jest.Mock).mockResolvedValue({
+      id: 'product-1',
+      deletedAt: null,
+    })
     repository.findById.mockResolvedValue({
       id: 'sku-1',
       productId: 'product-1',
       skuCode: 'SKU-OLD',
+      name: '旧SKU名称',
       ownerId: 'user-1',
       attributes: {
         color: 'white',
@@ -56,6 +118,7 @@ describe('SKUCommandService.updateSKU', () => {
       deletedAt: null,
     })
     repository.skuCodeExists.mockResolvedValue(false)
+    repository.create.mockResolvedValue({ id: 'sku-created' })
     repository.update.mockResolvedValue({ id: 'sku-1' })
     getSKUById.mockResolvedValue({
       id: 'sku-1',
@@ -64,6 +127,45 @@ describe('SKUCommandService.updateSKU', () => {
     })
   })
 
+  it('创建普通 SKU 时会写入结构化名称', async () => {
+    await service.createSKU(
+      {
+        productId: 'cm00000000000000000000001',
+        skuCode: 'SKU-001',
+        name: '  云序桌-黑腿版  ',
+        attributes: {
+          finishTag: 'matte-black',
+        },
+        price: 99,
+      },
+      ctx,
+    )
+
+    expect(repository.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        skuCode: 'SKU-001',
+        name: '云序桌-黑腿版',
+        attributes: { finishTag: 'matte-black' },
+      }),
+    )
+  })
+
+  it('创建普通 SKU 时阻断 attributes.skuName 继续写入第二套名称真相', async () => {
+    await expect(service.createSKU(
+      {
+        productId: 'cm00000000000000000000001',
+        skuCode: 'SKU-002',
+        attributes: {
+          skuName: '云序桌-白腿版',
+        },
+        price: 99,
+      },
+      ctx,
+    )).rejects.toThrow('SKU 兼容属性不能写入正式主数据字段：skuName')
+
+    expect(repository.create).not.toHaveBeenCalled()
+  })
+
   it('更新 SKU 编码时会校验重复并写入新编码', async () => {
     await service.updateSKU(
       'sku-1',
@@ -82,10 +184,13 @@ describe('SKUCommandService.updateSKU', () => {
       'sku-1',
       expect.objectContaining({
         skuCode: 'SKU-NEW',
-        attributes: {
-          color: 'black',
-          _cadVersion: 'v1',
-        },
+        name: '旧SKU名称',
+      }),
+    )
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.not.objectContaining({
+        attributes: expect.anything(),
       }),
     )
   })
@@ -105,4 +210,279 @@ describe('SKUCommandService.updateSKU', () => {
 
     expect(repository.update).not.toHaveBeenCalled()
   })
+
+  it('软删除 SKU 时同步释放资产 profile 条码唯一池', async () => {
+    const deletedAt = new Date('2026-05-31T12:00:00.000Z')
+    jest.useFakeTimers().setSystemTime(deletedAt)
+    const tx = {
+      productSKU: {
+        update: jest.fn(),
+      },
+      productSkuAssetProfile: {
+        updateMany: jest.fn(),
+      },
+    }
+    repository.withTransaction.mockImplementationOnce(
+      async (callback: (client: typeof tx) => Promise<unknown>) => callback(tx),
+    )
+
+    try {
+      await service.deleteSKU('sku-1', ctx)
+    } finally {
+      jest.useRealTimers()
+    }
+
+    expect(tx.productSKU.update).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'sku-1' },
+        data: expect.objectContaining({
+          deletedAt,
+          skuCode: expect.stringContaining('__deleted__'),
+        }),
+      }),
+    )
+    expect(tx.productSkuAssetProfile.updateMany).toHaveBeenCalledWith({
+      where: { skuId: 'sku-1' },
+      data: { skuDeletedAt: deletedAt },
+    })
+  })
+
+  it('恢复 SKU 时遇到活动资产 profile 条码冲突应阻断', async () => {
+    repository.findById.mockResolvedValue({
+      id: 'sku-1',
+      productId: 'product-1',
+      skuCode: 'SKU-OLD__deleted__1770000000000_sku-1',
+      name: '旧SKU名称',
+      ownerId: 'user-1',
+      attributes: {
+        _originalSkuCode: 'SKU-OLD',
+      },
+      deletedAt: new Date('2026-05-31T12:00:00.000Z'),
+    })
+    ;(productRepository.findById as jest.Mock).mockResolvedValue({
+      id: 'product-1',
+      deletedAt: null,
+    })
+    repository.skuCodeExists.mockResolvedValue(false)
+    const tx = {
+      productSKU: {
+        update: jest.fn(),
+      },
+      productSkuAssetProfile: {
+        findUnique: jest.fn().mockResolvedValue({
+          barcode: '  bc-001  ',
+          sourceStatus: 'ACTIVE',
+        }),
+        findFirst: jest.fn().mockResolvedValue({ skuId: 'sku-2' }),
+        updateMany: jest.fn(),
+      },
+    }
+    repository.withTransaction.mockImplementationOnce(
+      async (callback: (client: typeof tx) => Promise<unknown>) => callback(tx),
+    )
+
+    await expect(service.restoreSKU('sku-1', ctx)).rejects.toThrow(
+      'SKU barcode BC-001 is already in use',
+    )
+    expect(tx.productSkuAssetProfile.findFirst).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({
+          barcode: { equals: 'BC-001', mode: 'insensitive' },
+        }),
+      }),
+    )
+    expect(tx.productSKU.update).not.toHaveBeenCalled()
+    expect(tx.productSkuAssetProfile.updateMany).not.toHaveBeenCalled()
+  })
+
+  it('普通 SKU 更新会忽略 attributes，不能反写结构化名称', async () => {
+    await service.updateSKU(
+      'sku-1',
+      {
+        price: 129,
+        attributes: {
+          skuName: '新SKU名称',
+          color: 'black',
+        },
+      },
+      ctx,
+    )
+
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.objectContaining({
+        price: 129,
+      }),
+    )
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.not.objectContaining({
+        name: '新SKU名称',
+        attributes: expect.anything(),
+      }),
+    )
+  })
+
+  it('普通 SKU 更新即使传 attributes 也不会清掉资产同步快照', async () => {
+    repository.findById.mockResolvedValue({
+      id: 'sku-1',
+      productId: 'product-1',
+      skuCode: 'SKU-OLD',
+      name: '旧SKU名称',
+      ownerId: 'user-1',
+      attributes: {
+        color: 'white',
+        assetSkuSnapshot: {
+          specCode: 'DBZ-SPJ00001',
+          specName: '资产快照名称',
+          barcode: 'DBZ-SPJ00001N05V01',
+        },
+        _cadVersion: 'v1',
+      },
+      deletedAt: null,
+    })
+
+    await service.updateSKU(
+      'sku-1',
+      {
+        stock: 8,
+        attributes: {
+          color: 'black',
+        },
+      },
+      ctx,
+    )
+
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.objectContaining({
+        stock: 8,
+      }),
+    )
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.not.objectContaining({
+        attributes: expect.anything(),
+      }),
+    )
+  })
+
+  it('普通 SKU 更新不能通过 attributes 覆盖内部字段和资产快照', async () => {
+    repository.findById.mockResolvedValue({
+      id: 'sku-1',
+      productId: 'product-1',
+      skuCode: 'SKU-OLD',
+      name: '旧SKU名称',
+      ownerId: 'user-1',
+      attributes: {
+        color: 'white',
+        _cadVersion: 'v1',
+        assetSkuSnapshot: {
+          specCode: 'DBZ-SPJ00001',
+          barcode: 'DBZ-SPJ00001N05V01',
+        },
+      },
+      deletedAt: null,
+    })
+
+    await service.updateSKU(
+      'sku-1',
+      {
+        price: 188,
+        attributes: {
+          color: 'black',
+          _cadVersion: 'v2',
+          assetSkuSnapshot: 'bad-snapshot',
+          variantSelectionSummary: 'stale-selection',
+          bomPreview: 'stale-bom',
+        },
+      },
+      ctx,
+    )
+
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.objectContaining({
+        price: 188,
+      }),
+    )
+    expect(repository.update).toHaveBeenCalledWith(
+      'sku-1',
+      expect.not.objectContaining({
+        attributes: expect.anything(),
+      }),
+    )
+  })
+
+  it('CAD 导入创建 SKU 也会走统一编码校验', async () => {
+    await expect(
+      service.createSKUWithImportedHoles(
+        {
+          productId: 'product-1',
+          skuCode: 'BAD SKU',
+          attributes: {},
+          price: 0,
+          costPrice: null,
+          stock: 0,
+          modelUrl: null,
+          images: [],
+          cadVersion: 'v2.2.14',
+          cadPanels: [],
+          cadHoles: [],
+          cadSourceData: null,
+        },
+        ctx,
+      ),
+    ).rejects.toThrow('输入验证失败')
+
+    expect(productRepository.existsById).not.toHaveBeenCalled()
+    expect(repository.skuCodeExists).not.toHaveBeenCalled()
+  })
+
+  it('CAD 导入创建 SKU 支持站内模型路径并写入结构化名称', async () => {
+    getSKUById.mockResolvedValue({
+      id: 'sku-created',
+      productId: 'product-1',
+      skuCode: 'SKU-CAD-001',
+    })
+
+    await service.createSKUWithImportedHoles(
+      {
+        productId: 'product-1',
+        skuCode: 'SKU-CAD-001',
+        name: '  CAD导入款  ',
+        attributes: {
+          _modelMeta: {
+            originalFileName: 'model.glb',
+          },
+        },
+        price: 0,
+        costPrice: null,
+        stock: 0,
+        modelUrl: '/uploads/models/skus/SKU-CAD-001.glb',
+        images: ['/uploads/images/skus/SKU-CAD-001.png'],
+        cadVersion: 'v2.2.14',
+        cadPanels: [
+          {
+            id: 'panel-1',
+            size: [1200, 600, 25],
+          },
+        ],
+        cadHoles: [
+          {
+            panelId: 'panel-1',
+            position: [0, 0, 0],
+            normal: [0, 1, 0],
+            diameter: 8,
+            depth: 12,
+          },
+        ],
+        cadSourceData: null,
+      },
+      ctx,
+    )
+
+    expect(repository.withTransaction).toHaveBeenCalled()
+    expect(releaseSkuCodeFromDeletedRecords).toHaveBeenCalledWith('SKU-CAD-001')
+  })
 })
diff --git a/furniture-3d-system/src/server/services/__tests__/warehouse.service.test.ts b/furniture-3d-system/src/server/services/__tests__/warehouse.service.test.ts
index 8c6c411f..84b4e066 100644
--- a/furniture-3d-system/src/server/services/__tests__/warehouse.service.test.ts
+++ b/furniture-3d-system/src/server/services/__tests__/warehouse.service.test.ts
@@ -1,6 +1,9 @@
 import { ErrorCode } from '@/server/core/errors'
 
 jest.mock('../../repositories', () => ({
+  assetVariantRepository: {
+    findById: jest.fn(),
+  },
   packagedItemRepository: {
     findAllWithRelations: jest.fn(),
   },
@@ -9,15 +12,22 @@ jest.mock('../../repositories', () => ({
   },
   warehouseLocationRepository: {
     findAllActive: jest.fn(),
+    findById: jest.fn(),
     findByCode: jest.fn(),
+    findByPosition: jest.fn(),
     findBrandMaterialBindingsByBrand: jest.fn(),
+    findBindingsByVariantIds: jest.fn(),
     findBindingsByPreSkuIds: jest.fn(),
     create: jest.fn(),
+    update: jest.fn(),
+    upsertBrandMaterialBinding: jest.fn(),
+    createBindings: jest.fn(),
     createPreSkuBindings: jest.fn(),
   },
 }))
 
 import {
+  assetVariantRepository,
   packagedItemRepository,
   skuRepository,
   warehouseLocationRepository,
@@ -25,6 +35,7 @@ import {
 import { warehouseService } from '../warehouse.service'
 
 describe('warehouseService', () => {
+  const mockedAssetVariantRepository = jest.mocked(assetVariantRepository)
   const mockedPackagedItemRepository = jest.mocked(packagedItemRepository)
   const mockedSkuRepository = jest.mocked(skuRepository)
   const mockedWarehouseLocationRepository = jest.mocked(warehouseLocationRepository)
@@ -51,7 +62,8 @@ describe('warehouseService', () => {
       {
         id: 'sku-1',
         skuCode: 'SPU-001-01',
-        attributes: { skuName: '云序桌-黑腿版' },
+        attributes: { skuName: '旧快照名称' },
+        assetProfile: { specName: '云序桌-黑腿版' },
         stock: 6,
         warehouseLocationId: 'loc-1',
         warehouseLocation: { id: 'loc-1', code: 'A-01', name: '成品区 A01' },
@@ -99,12 +111,85 @@ describe('warehouseService', () => {
 
     await expect(
       warehouseService.createLocation({
-        code: ' A-01 ',
+        code: ' a-01 ',
         name: ' 成品区 A01 ',
       }),
     ).rejects.toMatchObject({
       code: ErrorCode.VALIDATION_FAILED,
     })
+    expect(mockedWarehouseLocationRepository.findByCode).toHaveBeenCalledWith('A-01')
+  })
+
+  it('updateLocation 会归一化库位编码并在服务层检查重复', async () => {
+    mockedWarehouseLocationRepository.findById.mockResolvedValue({
+      id: 'loc-1',
+      code: 'A-01',
+      name: '成品区 A01',
+      zone: 'A',
+      aisle: '01',
+      shelf: '02',
+      bin: '03',
+      notes: null,
+      isActive: true,
+    } as never)
+    mockedWarehouseLocationRepository.findByCode.mockResolvedValue(null)
+    mockedWarehouseLocationRepository.findByPosition.mockResolvedValue(null)
+    mockedWarehouseLocationRepository.update.mockResolvedValue({
+      id: 'loc-1',
+      code: 'B-02',
+      name: '成品区 B02',
+      zone: 'A',
+      aisle: '01',
+      shelf: '02',
+      bin: '03',
+      notes: null,
+      isActive: true,
+    } as never)
+
+    await warehouseService.updateLocation('loc-1', {
+      code: ' b-02 ',
+      name: ' 成品区 B02 ',
+    })
+
+    expect(mockedWarehouseLocationRepository.findByCode).toHaveBeenCalledWith('B-02')
+    expect(mockedWarehouseLocationRepository.update).toHaveBeenCalledWith(
+      'loc-1',
+      expect.objectContaining({
+        code: 'B-02',
+        name: '成品区 B02',
+      }),
+    )
+  })
+
+  it('updateLocation 会拒绝和其他活动库位重复的物理位置', async () => {
+    mockedWarehouseLocationRepository.findById.mockResolvedValue({
+      id: 'loc-1',
+      code: 'A-01',
+      name: '成品区 A01',
+      zone: 'A',
+      aisle: '01',
+      shelf: '02',
+      bin: '03',
+      notes: null,
+      isActive: true,
+    } as never)
+    mockedWarehouseLocationRepository.findByPosition.mockResolvedValue({
+      id: 'loc-2',
+    } as never)
+
+    await expect(
+      warehouseService.updateLocation('loc-1', {
+        zone: 'B',
+        aisle: '02',
+        shelf: '03',
+        bin: '04',
+      }),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+
+    expect(mockedWarehouseLocationRepository.findByPosition).toHaveBeenCalledWith('B', '02', '03', '04', 'loc-1')
+    expect(mockedWarehouseLocationRepository.update).not.toHaveBeenCalled()
   })
 
   it('getBrandMaterials 会返回品牌资料和库位信息', async () => {
@@ -139,6 +224,47 @@ describe('warehouseService', () => {
     ])
   })
 
+  it('bindBrandMaterialLocation 会规范化品牌物料类型并拒绝游离类型', async () => {
+    mockedWarehouseLocationRepository.findById.mockResolvedValue({
+      id: 'loc-1',
+      code: 'A-01',
+      name: '成品区 A01',
+      isActive: true,
+    } as never)
+    mockedWarehouseLocationRepository.upsertBrandMaterialBinding.mockResolvedValue({
+      id: 'brand-binding-1',
+      brand: '顾家',
+      materialType: 'MANUAL',
+      warehouseLocation: { id: 'loc-1', code: 'A-01', name: '成品区 A01' },
+      fileUrl: null,
+      fileName: null,
+      fileSize: null,
+    } as never)
+
+    await warehouseService.bindBrandMaterialLocation({
+      brand: ' 顾家 ',
+      materialType: ' manual ',
+      warehouseLocationId: ' loc-1 ',
+    })
+
+    expect(mockedWarehouseLocationRepository.findById).toHaveBeenCalledWith('loc-1')
+    expect(mockedWarehouseLocationRepository.upsertBrandMaterialBinding).toHaveBeenCalledWith({
+      brand: '顾家',
+      materialType: 'MANUAL',
+      warehouseLocationId: 'loc-1',
+    })
+
+    await expect(
+      warehouseService.bindBrandMaterialLocation({
+        brand: '顾家',
+        materialType: 'UNKNOWN',
+        warehouseLocationId: null,
+      }),
+    ).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_FAILED,
+    })
+  })
+
   it('bindPreSkuToLocations 会创建绑定并返回最新库位信息', async () => {
     mockedWarehouseLocationRepository.findAllActive.mockResolvedValue([
       {
@@ -167,8 +293,8 @@ describe('warehouseService', () => {
     ] as never)
 
     const result = await warehouseService.bindPreSkuToLocations({
-      preSkuId: 'pre-sku-1',
-      locationIds: ['loc-1'],
+      preSkuId: ' pre-sku-1 ',
+      locationIds: [' loc-1 ', 'loc-1'],
     })
 
     expect(mockedWarehouseLocationRepository.createPreSkuBindings).toHaveBeenCalledWith([
@@ -187,4 +313,48 @@ describe('warehouseService', () => {
       }),
     ])
   })
+
+  it('bindVariantToLocations 会规范化并去重库位绑定 ID', async () => {
+    mockedAssetVariantRepository.findById.mockResolvedValue({
+      id: 'variant-1',
+    } as never)
+    mockedWarehouseLocationRepository.findAllActive.mockResolvedValue([
+      {
+        id: 'loc-1',
+        code: 'A-01',
+        name: '成品区 A01',
+        zone: 'A',
+        aisle: '01',
+        shelf: '02',
+        bin: '03',
+        notes: null,
+        isActive: true,
+      },
+    ] as never)
+    mockedWarehouseLocationRepository.createBindings.mockResolvedValue(undefined as never)
+    mockedWarehouseLocationRepository.findBindingsByVariantIds.mockResolvedValue([
+      {
+        id: 'binding-variant-1',
+        assetVariantId: 'variant-1',
+        warehouseLocation: {
+          id: 'loc-1',
+          code: 'A-01',
+          name: '成品区 A01',
+        },
+      },
+    ] as never)
+
+    await warehouseService.bindVariantToLocations({
+      variantId: ' variant-1 ',
+      locationIds: [' loc-1 ', 'loc-1'],
+    })
+
+    expect(mockedAssetVariantRepository.findById).toHaveBeenCalledWith('variant-1')
+    expect(mockedWarehouseLocationRepository.createBindings).toHaveBeenCalledWith([
+      {
+        assetVariantId: 'variant-1',
+        warehouseLocationId: 'loc-1',
+      },
+    ])
+  })
 })
diff --git a/furniture-3d-system/src/server/services/approval-workflow.service.ts b/furniture-3d-system/src/server/services/approval-workflow.service.ts
index a389f32c..37c26d2b 100644
--- a/furniture-3d-system/src/server/services/approval-workflow.service.ts
+++ b/furniture-3d-system/src/server/services/approval-workflow.service.ts
@@ -4,10 +4,8 @@ import type { AuthUser } from '@/server/core/types'
 import { canCreateContent } from '@/lib/role-scope'
 import { Prisma, type ApprovalWorkflowStatus, type BusinessAccountType } from '@prisma/client'
 import {
-  getNonIntegratedFormalSpu,
   normalizeNonIntegratedOpeningReference,
   normalizeNonIntegratedProductRecord,
-  type NonIntegratedOpeningReference,
   type NonIntegratedProductRecord,
 } from '@/app/intake/non-integrated/nonIntegratedStorage'
 
@@ -43,6 +41,10 @@ type WorkflowForDTO = {
     id: string
     spu: string
     payload: Prisma.JsonValue
+    profile: {
+      productName: string
+      productImageUrl: string | null
+    } | null
   }
   initiator: {
     id: string
@@ -53,15 +55,6 @@ type WorkflowForDTO = {
   updatedAt: Date
 }
 
-type ProductIdentitySource = {
-  id: string
-  spu: string
-  openingReference: NonIntegratedOpeningReference
-  documentWorkspaceConfirmations?: NonIntegratedProductRecord['documentWorkspaceConfirmations']
-  documentWorkspaceApprovedAt?: NonIntegratedProductRecord['documentWorkspaceApprovedAt']
-  formalSpuAssigned?: boolean
-}
-
 export interface ApprovalWorkflowDTO {
   id: string
   approvalNumber: string
@@ -306,40 +299,94 @@ const BUSINESS_ROLE_SET = new Set<BusinessAccountType>([
   'SUPPLIER',
 ])
 
+const APPROVAL_WORKFLOW_STATUS_SET = new Set<ApprovalWorkflowStatus>([
+  'DRAFT',
+  'PENDING',
+  'IN_PROGRESS',
+  'COMPLETED',
+  'REJECTED',
+  'ARCHIVED',
+])
+
+function normalizeRequiredText(value: unknown, fieldLabel: string) {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}必须填写`)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}必须填写`)
+  }
+  return normalized
+}
+
+function normalizeOptionalText(value: unknown) {
+  if (value === undefined || value === null) return null
+  if (typeof value !== 'string') return null
+  const normalized = value.trim()
+  return normalized || null
+}
+
+function normalizeApprovalNumber(value: unknown) {
+  return normalizeRequiredText(value, '审批编号').toUpperCase()
+}
+
+function normalizeParticipantUserIds(value: unknown) {
+  if (!Array.isArray(value)) return []
+  const normalized = value
+    .filter((item): item is string => typeof item === 'string')
+    .map((item) => item.trim())
+    .filter(Boolean)
+  return [...new Set(normalized)]
+}
+
+function normalizeJsonObjectOrNull(value: Prisma.InputJsonValue | null | undefined, fieldLabel: string) {
+  if (value === undefined || value === null) return Prisma.JsonNull
+  if (typeof value === 'object' && !Array.isArray(value)) return value
+  throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}必须是对象`)
+}
+
+function normalizeApprovalStatus(value: ApprovalWorkflowStatus | undefined) {
+  if (value === undefined) return 'DRAFT'
+  if (!APPROVAL_WORKFLOW_STATUS_SET.has(value)) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '流程状态不合法')
+  }
+  return value
+}
+
 class ApprovalWorkflowService {
   private toProductDTO(product: WorkflowForDTO['product']): ApprovalWorkflowProductDTO {
     const normalizedProduct = normalizeNonIntegratedProductRecord(
       product.payload as Partial<NonIntegratedProductRecord>,
     )
-    const openingReference = normalizeNonIntegratedOpeningReference(
+    const hasStructuredProfile = Boolean(product.profile)
+    const legacyOpeningReference = normalizeNonIntegratedOpeningReference(
       normalizedProduct?.openingReference,
     )
-    const productSource: ProductIdentitySource = normalizedProduct ?? {
-      id: product.id,
-      spu: product.spu,
-      openingReference,
-    }
+    const openingReference = hasStructuredProfile
+      ? normalizeNonIntegratedOpeningReference(undefined)
+      : legacyOpeningReference
     const modelNumber =
-      getNonIntegratedFormalSpu(productSource) ||
-      openingReference.temporaryCode.trim() ||
       product.spu ||
+      openingReference.temporaryCode.trim() ||
       product.id
     const name =
+      product.profile?.productName.trim() ||
       openingReference.productName.trim() ||
-      normalizedProduct?.spu.trim() ||
-      openingReference.temporaryCode.trim() ||
       product.spu ||
+      openingReference.temporaryCode.trim() ||
       product.id
-    const thumbnailUrl =
-      openingReference.productImage.trim() ||
-      normalizedProduct?.previewImage?.trim() ||
-      null
+    const legacyThumbnailUrl = hasStructuredProfile
+      ? null
+      : openingReference.productImage.trim() ||
+        normalizedProduct?.previewImage?.trim() ||
+        null
+    const thumbnailUrl = product.profile?.productImageUrl?.trim() || legacyThumbnailUrl
 
     return {
       id: product.id,
       modelNumber,
       name,
-      description: openingReference.reason.trim() || null,
+      description: hasStructuredProfile ? null : openingReference.reason.trim() || null,
       thumbnailUrl,
     }
   }
@@ -353,6 +400,12 @@ class ApprovalWorkflowService {
             id: true,
             spu: true,
             payload: true,
+            profile: {
+              select: {
+                productName: true,
+                productImageUrl: true,
+              },
+            },
           },
         },
         initiator: {
@@ -375,6 +428,12 @@ class ApprovalWorkflowService {
             id: true,
             spu: true,
             payload: true,
+            profile: {
+              select: {
+                productName: true,
+                productImageUrl: true,
+              },
+            },
           },
         },
         initiator: {
@@ -403,9 +462,6 @@ class ApprovalWorkflowService {
 
   private toDTO(workflow: WorkflowForDTO): ApprovalWorkflowDTO {
     const matrix = this.getFieldMatrix(workflow.fieldMatrix)
-    const businessRoles = workflow.businessRoles.length > 0
-      ? workflow.businessRoles
-      : this.getWorkflowBusinessRoles(matrix)
 
     return {
       id: workflow.id,
@@ -414,7 +470,7 @@ class ApprovalWorkflowService {
       status: workflow.status,
       productId: workflow.productId,
       accessKey: workflow.accessKey,
-      businessRoles,
+      businessRoles: workflow.businessRoles,
       participantUserIds: workflow.participantUserIds,
       initiatorId: workflow.initiatorId,
       lastSyncedAt: workflow.lastSyncedAt?.toISOString() ?? null,
@@ -431,29 +487,36 @@ class ApprovalWorkflowService {
   private getFieldMatrix(value: Prisma.JsonValue | null): FieldMatrixItem[] {
     if (!Array.isArray(value)) return DEFAULT_FIELD_MATRIX
     const items: FieldMatrixItem[] = []
+    const usedKeys = new Set<string>()
     for (const item of value) {
       if (!item || typeof item !== 'object') continue
       const record = item as Record<string, unknown>
+      const key = typeof record.key === 'string' ? record.key.trim() : ''
+      const label = typeof record.label === 'string' ? record.label.trim() : ''
       if (
-        typeof record.key !== 'string' ||
-        typeof record.label !== 'string' ||
+        !key ||
+        !label ||
+        usedKeys.has(key) ||
         typeof record.businessRole !== 'string' ||
         !BUSINESS_ROLE_SET.has(record.businessRole as BusinessAccountType)
       ) {
         continue
       }
+      usedKeys.add(key)
       items.push({
-        key: record.key,
-        label: record.label,
+        key,
+        label,
         businessRole: record.businessRole as BusinessAccountType,
-        section: typeof record.section === 'string' ? record.section : undefined,
-        helperText: typeof record.helperText === 'string' ? record.helperText : undefined,
+        section: normalizeOptionalText(record.section) ?? undefined,
+        helperText: normalizeOptionalText(record.helperText) ?? undefined,
         required: record.required === true,
         editableStatuses: Array.isArray(record.editableStatuses)
-          ? record.editableStatuses.filter((status): status is ApprovalWorkflowStatus => typeof status === 'string')
+          ? record.editableStatuses.filter((status): status is ApprovalWorkflowStatus =>
+              typeof status === 'string' && APPROVAL_WORKFLOW_STATUS_SET.has(status as ApprovalWorkflowStatus),
+            )
           : undefined,
         allowSecondEdit: record.allowSecondEdit !== false,
-        placeholder: typeof record.placeholder === 'string' ? record.placeholder : undefined,
+        placeholder: normalizeOptionalText(record.placeholder) ?? undefined,
       })
     }
     if (items.length === 0) return DEFAULT_FIELD_MATRIX
@@ -483,11 +546,8 @@ class ApprovalWorkflowService {
     if (currentUser.role === 'SUPER_ADMIN' || currentUser.role === 'ADMIN') return
     if (workflow.participantUserIds.includes(currentUser.id)) return
 
-    const workflowBusinessRoles = workflow.businessRoles.length > 0
-      ? workflow.businessRoles
-      : this.getWorkflowBusinessRoles(this.getFieldMatrix(workflow.fieldMatrix ?? null))
     const userBusinessRoles = currentUser.businessRoles ?? []
-    if (workflowBusinessRoles.some((role) => userBusinessRoles.includes(role))) return
+    if (workflow.businessRoles.some((role) => userBusinessRoles.includes(role))) return
 
     throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '当前账号不在该流程的参与范围内')
   }
@@ -506,22 +566,29 @@ class ApprovalWorkflowService {
       throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '当前账号没有内部业务写入权限')
     }
 
+    const approvalNumber = normalizeApprovalNumber(input.approvalNumber)
+    const title = normalizeRequiredText(input.title, '流程标题')
+    const productId = normalizeRequiredText(input.productId, '产品 ID')
+    const status = normalizeApprovalStatus(input.status)
+    const participantUserIds = normalizeParticipantUserIds(input.participantUserIds)
     const matrix = this.getFieldMatrix((input.fieldMatrix ?? null) as Prisma.JsonValue | null)
     const businessRoles = this.getWorkflowBusinessRoles(matrix)
+    const summary = normalizeJsonObjectOrNull(input.summary, '流程摘要')
+    const metadata = normalizeJsonObjectOrNull(input.metadata, '流程扩展信息')
 
     const created = await prisma.approvalWorkflow.create({
       data: {
-        approvalNumber: input.approvalNumber.trim(),
-        title: input.title.trim(),
-        productId: input.productId,
-        status: input.status ?? 'DRAFT',
+        approvalNumber,
+        title,
+        productId,
+        status,
         accessKey: crypto.randomUUID(),
         businessRoles,
-        participantUserIds: input.participantUserIds ?? [],
+        participantUserIds,
         initiatorId: currentUser.id,
         fieldMatrix: matrix as unknown as Prisma.InputJsonValue,
-        summary: input.summary ?? Prisma.JsonNull,
-        metadata: input.metadata ?? Prisma.JsonNull,
+        summary,
+        metadata,
       },
     })
 
@@ -553,11 +620,13 @@ class ApprovalWorkflowService {
     keyword?: string
   }): Promise<ApprovalWorkflowDTO[]> {
     const keyword = options.keyword?.trim()
+    const approvalNumber = options.approvalNumber ? normalizeApprovalNumber(options.approvalNumber) : undefined
+    const status = options.status ? normalizeApprovalStatus(options.status) : undefined
     const workflows = await prisma.approvalWorkflow.findMany({
       where: {
-        productId: options.productId,
-        approvalNumber: options.approvalNumber,
-        status: options.status,
+        productId: options.productId ? normalizeRequiredText(options.productId, '产品 ID') : undefined,
+        approvalNumber,
+        status,
         ...(keyword
           ? {
               OR: [
@@ -568,6 +637,13 @@ class ApprovalWorkflowService {
                     is: {
                       OR: [
                         { spu: { contains: keyword, mode: 'insensitive' } },
+                        {
+                          profile: {
+                            is: {
+                              productName: { contains: keyword, mode: 'insensitive' },
+                            },
+                          },
+                        },
                       ],
                     },
                   },
@@ -583,6 +659,12 @@ class ApprovalWorkflowService {
             id: true,
             spu: true,
             payload: true,
+            profile: {
+              select: {
+                productName: true,
+                productImageUrl: true,
+              },
+            },
           },
         },
         initiator: {
@@ -600,13 +682,19 @@ class ApprovalWorkflowService {
 
   async getByApprovalNumber(approvalNumber: string): Promise<ApprovalWorkflowDTO> {
     const workflow = await prisma.approvalWorkflow.findUnique({
-      where: { approvalNumber },
+      where: { approvalNumber: normalizeApprovalNumber(approvalNumber) },
       include: {
         product: {
           select: {
             id: true,
             spu: true,
             payload: true,
+            profile: {
+              select: {
+                productName: true,
+                productImageUrl: true,
+              },
+            },
           },
         },
         initiator: {
@@ -628,7 +716,7 @@ class ApprovalWorkflowService {
     accessKey: string,
     currentUser: AuthUser & { businessRoles?: BusinessAccountType[] }
   ): Promise<ApprovalWorkflowDTO & { fieldChanges: Array<Record<string, unknown>> }> {
-    const workflow = await this.findWorkflowByAccessKey(accessKey)
+    const workflow = await this.findWorkflowByAccessKey(normalizeRequiredText(accessKey, '流程访问密钥'))
     if (!workflow) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '流程链接不存在')
     }
@@ -662,8 +750,9 @@ class ApprovalWorkflowService {
     },
     currentUser: AuthUser & { businessRoles?: BusinessAccountType[] }
   ): Promise<ApprovalWorkflowDTO> {
+    const normalizedWorkflowId = normalizeRequiredText(workflowId, '流程 ID')
     const workflow = await prisma.approvalWorkflow.findUnique({
-      where: { id: workflowId },
+      where: { id: normalizedWorkflowId },
     })
     if (!workflow) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '流程记录不存在')
@@ -671,8 +760,13 @@ class ApprovalWorkflowService {
 
     this.assertWorkflowAccess(workflow, currentUser)
 
+    const fieldKey = normalizeRequiredText(input.fieldKey, '流程字段')
+    const source = input.source === undefined
+      ? 'workflow-page'
+      : normalizeRequiredText(input.source, '字段变更来源')
+    const sourcePage = normalizeOptionalText(input.sourcePage)
     const matrix = this.getFieldMatrix(workflow.fieldMatrix)
-    const targetField = matrix.find((item) => item.key === input.fieldKey)
+    const targetField = matrix.find((item) => item.key === fieldKey)
     if (!targetField) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '字段未进入该流程的责任矩阵')
     }
@@ -691,16 +785,16 @@ class ApprovalWorkflowService {
     const summary = typeof workflow.summary === 'object' && workflow.summary && !Array.isArray(workflow.summary)
       ? { ...(workflow.summary as Record<string, unknown>) }
       : {}
-    const oldValue = (summary[input.fieldKey] ?? null) as Prisma.JsonValue | null
+    const oldValue = (summary[fieldKey] ?? null) as Prisma.JsonValue | null
     if (targetField.allowSecondEdit === false && oldValue !== null && oldValue !== undefined) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '该字段只允许首次填写')
     }
 
-    summary[input.fieldKey] = input.value
+    summary[fieldKey] = input.value
 
     const updatedId = await prisma.$transaction(async (tx) => {
       await tx.approvalWorkflow.update({
-        where: { id: workflowId },
+        where: { id: normalizedWorkflowId },
         data: {
           summary: summary as Prisma.InputJsonValue,
           lastSyncedAt: new Date(),
@@ -709,13 +803,13 @@ class ApprovalWorkflowService {
 
       await tx.approvalWorkflowFieldChange.create({
         data: {
-          workflowId,
+          workflowId: normalizedWorkflowId,
           userId: currentUser.id,
-          fieldKey: input.fieldKey,
+          fieldKey,
           oldValue: oldValue ?? Prisma.JsonNull,
           newValue: input.value ?? Prisma.JsonNull,
-          source: input.source ?? 'workflow-page',
-          sourcePage: input.sourcePage ?? null,
+          source,
+          sourcePage,
           fromDingtalkPage: input.fromDingtalkPage ?? false,
         },
       })
@@ -725,21 +819,21 @@ class ApprovalWorkflowService {
           userId: currentUser.id,
           type: 'PRODUCT_UPDATE',
           targetType: 'ApprovalWorkflow',
-          targetId: workflowId,
+          targetId: normalizedWorkflowId,
           action: `更新流程字段: ${targetField.label}`,
           changes: {
-            fieldKey: input.fieldKey,
+            fieldKey,
             oldValue,
             newValue: input.value ?? null,
           },
           metadata: {
-            source: input.source ?? 'workflow-page',
+            source,
             approvalNumber: workflow.approvalNumber,
           },
         },
       })
 
-      return workflowId
+      return normalizedWorkflowId
     })
 
     const updated = await this.findWorkflowById(updatedId)
diff --git a/furniture-3d-system/src/server/services/asset-cad-import.service.ts b/furniture-3d-system/src/server/services/asset-cad-import.service.ts
index 2564af27..a4ff9d56 100644
--- a/furniture-3d-system/src/server/services/asset-cad-import.service.ts
+++ b/furniture-3d-system/src/server/services/asset-cad-import.service.ts
@@ -1,5 +1,6 @@
 import { validateCADExportData, type CADExportData } from '@/lib/cad-export-processor'
 import { inferCadImportDefaults } from '@/lib/asset-cad-import-defaults'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { uploadToS3 } from '@/lib/storage'
 import { buildPersistedSkuCadData, type PersistedSkuCadData } from '@/lib/sku-cad-data'
 import { parseZipFile } from '@/lib/zip-parser'
@@ -60,6 +61,11 @@ function trimOrNull(value: string | null | undefined): string | null {
   return next ? next : null
 }
 
+function normalizeIdentityOrNull(value: string | null | undefined): string | null {
+  const next = normalizeCoreIdentity(value)
+  return next ? next : null
+}
+
 function sanitizeSegment(value: string): string {
   const normalized = value.trim().replace(/[^a-zA-Z0-9-_]/g, '_')
   return normalized.length > 0 ? normalized : 'asset'
@@ -318,18 +324,20 @@ function resolveImportNames(params: {
     zipFileName: params.zipFileName,
     cadExportData: params.cadExportData,
   })
-  const familyCodeInput = trimOrNull(params.input.familyCode)
-  const variantCodeInput = trimOrNull(params.input.variantCode)
+  const familyCodeInput = normalizeIdentityOrNull(params.input.familyCode)
+  const variantCodeInput = normalizeIdentityOrNull(params.input.variantCode)
   const shouldUseSeriesGeneratedCode = Boolean(trimOrNull(params.input.assetSeriesId))
+  const inferredFamilyCode = normalizeIdentityOrNull(inferred.familyCode)
+  const inferredVariantCode = normalizeIdentityOrNull(inferred.variantCode)
 
   return {
     familyCode:
       params.input.familyId
         ? null
-        : familyCodeInput ?? (shouldUseSeriesGeneratedCode ? null : inferred.familyCode),
+        : familyCodeInput ?? (shouldUseSeriesGeneratedCode ? null : inferredFamilyCode),
     familyName:
       params.input.familyId ? null : trimOrNull(params.input.familyName) ?? inferred.familyName,
-    variantCode: variantCodeInput ?? (shouldUseSeriesGeneratedCode ? null : inferred.variantCode),
+    variantCode: variantCodeInput ?? (shouldUseSeriesGeneratedCode ? null : inferredVariantCode),
     variantName: trimOrNull(params.input.variantName) ?? inferred.variantName,
   }
 }
diff --git a/furniture-3d-system/src/server/services/asset-center.service.ts b/furniture-3d-system/src/server/services/asset-center.service.ts
index 5ed15ccb..7d1449ec 100644
--- a/furniture-3d-system/src/server/services/asset-center.service.ts
+++ b/furniture-3d-system/src/server/services/asset-center.service.ts
@@ -152,6 +152,40 @@ function trimOrNull(value: string | null | undefined): string | null {
   return next ? next : null
 }
 
+function normalizeRequiredText(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
+function normalizeNonNegativeInteger(
+  value: number | null | undefined,
+  fieldName: string,
+): number | undefined {
+  if (value === undefined || value === null) return undefined
+  if (!Number.isInteger(value) || value < 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是非负整数`)
+  }
+  return value
+}
+
+function normalizePositiveNumber(
+  value: number | null | undefined,
+  fieldName: string,
+): number | undefined {
+  if (value === undefined || value === null) return undefined
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是大于 0 的有效数字`)
+  }
+  return value
+}
+
+function normalizeCoreCode(value: string | null | undefined): string {
+  return value?.trim().toUpperCase() ?? ''
+}
+
 const STALE_SERIES_DESCRIPTION_PATTERN =
   /(固定模板|自动连接件推荐|自动拼装|自动组合|auto-combinations)/i
 
@@ -786,26 +820,6 @@ async function ensureActiveSeries(
   return series
 }
 
-async function ensureActiveSeriesIds(
-  ids: string[] | undefined,
-  options?: { required?: boolean },
-): Promise<string[]> {
-  const normalizedIds = Array.from(new Set((ids ?? []).map((id) => id.trim()).filter(Boolean)))
-  if (normalizedIds.length === 0) {
-    if (options?.required) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '请选择至少一个兼容系列')
-    }
-    return []
-  }
-
-  const existing = await assetSeriesRepository.findByIds(normalizedIds)
-  if (existing.length !== normalizedIds.length) {
-    throw new AppError(ErrorCode.VALIDATION_FAILED, '兼容系列不存在或已停用')
-  }
-
-  return normalizedIds
-}
-
 async function ensureVariantCodeAvailable(code: string, currentId?: string): Promise<void> {
   const existing = await assetVariantRepository.findByCode(code)
   if (existing && existing.id !== currentId) {
@@ -1476,7 +1490,7 @@ class AssetCenterService {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '基材库已有相同组合的基材，不可重复创建')
     }
 
-    const code = input.code?.trim() || (await this.generateNextSubstrateCode())
+    const code = normalizeCoreCode(input.code) || (await this.generateNextSubstrateCode())
     if (await substrateRepository.findByCode(code)) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '基材编码已存在')
     }
@@ -1530,7 +1544,7 @@ class AssetCenterService {
       throw new AppError(ErrorCode.SUBSTRATE_NOT_FOUND, '基材不存在')
     }
 
-    const nextCode = input.code?.trim() ?? existing.code
+    const nextCode = input.code === undefined ? existing.code : normalizeCoreCode(input.code)
     if (!nextCode) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '基材编码不能为空')
     }
@@ -1642,14 +1656,12 @@ class AssetCenterService {
   }
 
   async createSubstrateDictionary(input: CreateSubstrateDictionaryInput): Promise<SubstrateDictionaryOptionDTO> {
-    const name = input.name.trim()
-    if (!name) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${getDictionaryLabel(input.type)}名称不能为空`)
-    }
+    const name = normalizeRequiredText(input.name, `${getDictionaryLabel(input.type)}名称`)
+    const sortOrder = normalizeNonNegativeInteger(input.sortOrder, `${getDictionaryLabel(input.type)}排序`)
 
     const dataBase = {
       name,
-      sortOrder: input.sortOrder ?? 0,
+      sortOrder: sortOrder ?? 0,
       isActive: input.isActive ?? true,
     }
 
@@ -1666,17 +1678,20 @@ class AssetCenterService {
             await prisma.substrateEnvironmentGrade.create({ data: dataBase }),
           )
         case 'THICKNESS_SPEC':
-          if (!input.thicknessMm || input.thicknessMm <= 0) {
+          if (input.thicknessMm === undefined || input.thicknessMm === null) {
             throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '厚度规格必须填写厚度 mm')
           }
+          const thicknessMm = normalizePositiveNumber(input.thicknessMm, '厚度 mm')
+          const sheetLengthMm = normalizePositiveNumber(input.sheetLengthMm, '板长 mm') ?? 2440
+          const sheetWidthMm = normalizePositiveNumber(input.sheetWidthMm, '板宽 mm') ?? 1220
           return toDictionaryOptionDTO(
             'THICKNESS_SPEC',
             await prisma.substrateThicknessSpec.create({
               data: {
                 ...dataBase,
-                thicknessMm: input.thicknessMm,
-                sheetLengthMm: input.sheetLengthMm ?? 2440,
-                sheetWidthMm: input.sheetWidthMm ?? 1220,
+                thicknessMm: thicknessMm!,
+                sheetLengthMm,
+                sheetWidthMm,
               },
             }),
           )
@@ -1707,6 +1722,14 @@ class AssetCenterService {
     id: string,
     input: UpdateSubstrateDictionaryInput,
   ): Promise<SubstrateDictionaryOptionDTO> {
+    const name = input.name === undefined
+      ? undefined
+      : normalizeRequiredText(input.name, `${getDictionaryLabel(type)}名称`)
+    const sortOrder = normalizeNonNegativeInteger(input.sortOrder, `${getDictionaryLabel(type)}排序`)
+    const thicknessMm = normalizePositiveNumber(input.thicknessMm, '厚度 mm')
+    const sheetLengthMm = normalizePositiveNumber(input.sheetLengthMm, '板长 mm')
+    const sheetWidthMm = normalizePositiveNumber(input.sheetWidthMm, '板宽 mm')
+
     try {
       switch (type) {
         case 'CATEGORY':
@@ -1715,8 +1738,8 @@ class AssetCenterService {
             await prisma.substrateCategory.update({
               where: { id },
               data: {
-                name: input.name?.trim(),
-                sortOrder: input.sortOrder,
+                name,
+                sortOrder,
                 isActive: input.isActive,
               },
             }),
@@ -1727,8 +1750,8 @@ class AssetCenterService {
             await prisma.substrateEnvironmentGrade.update({
               where: { id },
               data: {
-                name: input.name?.trim(),
-                sortOrder: input.sortOrder,
+                name,
+                sortOrder,
                 isActive: input.isActive,
               },
             }),
@@ -1739,12 +1762,12 @@ class AssetCenterService {
             await prisma.substrateThicknessSpec.update({
               where: { id },
               data: {
-                name: input.name?.trim(),
-                sortOrder: input.sortOrder,
+                name,
+                sortOrder,
                 isActive: input.isActive,
-                thicknessMm: input.thicknessMm ?? undefined,
-                sheetLengthMm: input.sheetLengthMm ?? undefined,
-                sheetWidthMm: input.sheetWidthMm ?? undefined,
+                thicknessMm,
+                sheetLengthMm,
+                sheetWidthMm,
               },
             }),
           )
@@ -1754,8 +1777,8 @@ class AssetCenterService {
             await prisma.substrateSurfaceOption.update({
               where: { id },
               data: {
-                name: input.name?.trim(),
-                sortOrder: input.sortOrder,
+                name,
+                sortOrder,
                 isActive: input.isActive,
               },
             }),
@@ -1766,8 +1789,8 @@ class AssetCenterService {
             await prisma.substrateSystemNameOption.update({
               where: { id },
               data: {
-                name: input.name?.trim(),
-                sortOrder: input.sortOrder,
+                name,
+                sortOrder,
                 isActive: input.isActive,
               },
             }),
diff --git a/furniture-3d-system/src/server/services/asset-sku-snapshot.ts b/furniture-3d-system/src/server/services/asset-sku-snapshot.ts
index 9f892ebf..ab26ad86 100644
--- a/furniture-3d-system/src/server/services/asset-sku-snapshot.ts
+++ b/furniture-3d-system/src/server/services/asset-sku-snapshot.ts
@@ -1,3 +1,5 @@
+import { Prisma } from '@prisma/client'
+import type { ProductSkuAssetProfile } from '@prisma/client'
 import type { AssetVariantWithRelations } from '../repositories'
 
 export type AssetSkuSnapshotSourceStatus = 'ACTIVE' | 'DELETED' | 'MISSING'
@@ -34,6 +36,60 @@ function readString(value: unknown): string | null {
   return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null
 }
 
+function readIdentityString(value: unknown): string | null {
+  const text = readString(value)
+  return text ? text.toUpperCase() : null
+}
+
+function normalizeSnapshotVariant(variant: AssetSkuSnapshotVariant): AssetSkuSnapshotVariant {
+  return {
+    ...variant,
+    sourceAssetVariantId: variant.sourceAssetVariantId.trim(),
+    sourceAssetFamilyId: readString(variant.sourceAssetFamilyId),
+    sourceAssetSeriesId: readString(variant.sourceAssetSeriesId),
+    model: readIdentityString(variant.model),
+    modelName: readString(variant.modelName),
+    specCode: readIdentityString(variant.specCode),
+    specName: readString(variant.specName),
+    barcode: readIdentityString(variant.barcode),
+    color: readString(variant.color),
+    material: readString(variant.material),
+    imageUrl: readString(variant.imageUrl),
+  }
+}
+
+function normalizeSnapshot(snapshot: AssetSkuSnapshot): AssetSkuSnapshot {
+  const sourceVariants = snapshot.sourceVariants.map((variant) => normalizeSnapshotVariant(variant))
+  const sourceAssetVariantIds = Array.from(
+    new Set(
+      [
+        snapshot.sourceAssetVariantId,
+        ...snapshot.sourceAssetVariantIds,
+        ...sourceVariants.map((variant) => variant.sourceAssetVariantId),
+      ]
+        .map((variantId) => variantId.trim())
+        .filter((variantId) => variantId.length > 0),
+    ),
+  )
+
+  return {
+    ...snapshot,
+    sourceAssetVariantId: snapshot.sourceAssetVariantId.trim(),
+    sourceAssetFamilyId: readString(snapshot.sourceAssetFamilyId),
+    sourceAssetSeriesId: readString(snapshot.sourceAssetSeriesId),
+    sourceVariants,
+    sourceAssetVariantIds,
+    model: readIdentityString(snapshot.model),
+    modelName: readString(snapshot.modelName),
+    specCode: readIdentityString(snapshot.specCode),
+    specName: readString(snapshot.specName),
+    barcode: readIdentityString(snapshot.barcode),
+    color: readString(snapshot.color),
+    material: readString(snapshot.material),
+    imageUrl: readString(snapshot.imageUrl),
+  }
+}
+
 function readLockedFields(value: unknown): string[] {
   if (!isRecord(value) || !Array.isArray(value.lockedFields)) {
     return []
@@ -52,6 +108,42 @@ function readLockedReasons(value: unknown): Record<string, string> {
   )
 }
 
+function readSourceStatus(value: unknown): AssetSkuSnapshotSourceStatus {
+  return value === 'DELETED' || value === 'MISSING' ? value : 'ACTIVE'
+}
+
+function readNumberMap(value: unknown): Record<string, number> {
+  if (!isRecord(value)) return {}
+  return Object.fromEntries(
+    Object.entries(value).filter(
+      (entry): entry is [string, number] => typeof entry[1] === 'number' && Number.isFinite(entry[1]),
+    ),
+  )
+}
+
+function readSnapshotVariant(value: unknown): AssetSkuSnapshotVariant | null {
+  if (!isRecord(value)) return null
+
+  const sourceAssetVariantId = readString(value.sourceAssetVariantId)
+  if (!sourceAssetVariantId) return null
+
+  return {
+    sourceAssetVariantId,
+    sourceAssetFamilyId: readString(value.sourceAssetFamilyId),
+    sourceAssetSeriesId: readString(value.sourceAssetSeriesId),
+    model: readIdentityString(value.model),
+    modelName: readString(value.modelName),
+    specCode: readIdentityString(value.specCode),
+    specName: readString(value.specName),
+    barcode: readIdentityString(value.barcode),
+    size: readNumberMap(value.size),
+    color: readString(value.color),
+    material: readString(value.material),
+    imageUrl: readString(value.imageUrl),
+    sourceStatus: readSourceStatus(value.sourceStatus),
+  }
+}
+
 function readMaterialLabel(record: AssetVariantWithRelations): string | null {
   const businessData = isRecord(record.businessData) ? record.businessData : null
   const materialLabel = readString(businessData?.materialLabel)
@@ -62,11 +154,55 @@ function readMaterialLabel(record: AssetVariantWithRelations): string | null {
   return record.substrate?.name ?? record.finish?.name ?? null
 }
 
+export function buildAssetSkuSnapshotFromProfile(
+  profile: ProductSkuAssetProfile | null | undefined,
+): AssetSkuSnapshot | null {
+  if (!profile) return null
+
+  const primaryVariant: AssetSkuSnapshotVariant = {
+    sourceAssetVariantId: profile.primarySourceAssetVariantId ?? '',
+    sourceAssetFamilyId: profile.sourceAssetFamilyId,
+    sourceAssetSeriesId: profile.sourceAssetSeriesId,
+    model: readIdentityString(profile.model),
+    modelName: profile.modelName,
+    specCode: readIdentityString(profile.specCode),
+    specName: profile.specName,
+    barcode: readIdentityString(profile.barcode),
+    size: readNumberMap(profile.size),
+    color: profile.color,
+    material: profile.material,
+    imageUrl: profile.imageUrl,
+    sourceStatus: readSourceStatus(profile.sourceStatus),
+  }
+
+  if (!primaryVariant.sourceAssetVariantId) {
+    return null
+  }
+
+  const sourceVariants = Array.isArray(profile.sourceVariants)
+    ? profile.sourceVariants
+        .map((item) => readSnapshotVariant(item))
+        .filter((item): item is AssetSkuSnapshotVariant => item !== null)
+    : []
+  const sourceAssetVariantIds = profile.sourceAssetVariantIds.length > 0
+    ? profile.sourceAssetVariantIds
+    : [primaryVariant.sourceAssetVariantId]
+
+  return normalizeSnapshot({
+    ...primaryVariant,
+    sourceAssetVariantIds,
+    sourceVariants: sourceVariants.length > 0 ? sourceVariants : [primaryVariant],
+    syncedAt: profile.syncedAt.toISOString(),
+    lockedFields: profile.lockedFields,
+    lockedReasons: readLockedReasons(profile.lockedReasons),
+  })
+}
+
 export function buildAssetSkuSnapshotVariant(
   record: AssetVariantWithRelations,
 ): AssetSkuSnapshotVariant {
   const assemblyBasis = isRecord(record.assemblyBasis) ? record.assemblyBasis : null
-  const familyCode = readString(record.assetFamily?.code) ?? readString(assemblyBasis?.assetFamilyCode)
+  const familyCode = readIdentityString(record.assetFamily?.code) ?? readIdentityString(assemblyBasis?.assetFamilyCode)
   const familyName = readString(record.assetFamily?.name) ?? readString(assemblyBasis?.assetFamilyName)
 
   return {
@@ -75,9 +211,9 @@ export function buildAssetSkuSnapshotVariant(
     sourceAssetSeriesId: record.assetFamily?.assetSeriesId ?? null,
     model: familyCode,
     modelName: familyName,
-    specCode: record.code,
+    specCode: readIdentityString(record.code),
     specName: record.name,
-    barcode: record.barcode ?? readString(assemblyBasis?.barcode),
+    barcode: readIdentityString(record.barcode) ?? readIdentityString(assemblyBasis?.barcode),
     size: isRecord(record.dimensions) ? (record.dimensions as Record<string, number>) : {},
     color: record.finish?.name ?? readString(assemblyBasis?.finishName),
     material: readMaterialLabel(record),
@@ -128,14 +264,14 @@ export function buildAssetSkuSnapshot(input: {
     sourceVariants[0]
   if (!primary) return null
 
-  return {
+  return normalizeSnapshot({
     ...primary,
     sourceAssetVariantIds: sourceVariants.map((variant) => variant.sourceAssetVariantId),
     sourceVariants,
     syncedAt: (input.syncedAt ?? new Date()).toISOString(),
     lockedFields: readLockedFields(input.previousSnapshot),
     lockedReasons: readLockedReasons(input.previousSnapshot),
-  }
+  })
 }
 
 export function applyLockedSnapshotFields(input: {
@@ -167,5 +303,34 @@ export function applyLockedSnapshotFields(input: {
     }
   })
 
-  return merged
+  return normalizeSnapshot(merged)
+}
+
+function parseSnapshotSyncedAt(value: string): Date {
+  const parsed = new Date(value)
+  return Number.isNaN(parsed.getTime()) ? new Date() : parsed
+}
+
+export function buildProductSkuAssetProfileData(snapshot: AssetSkuSnapshot) {
+  const normalizedSnapshot = normalizeSnapshot(snapshot)
+  return {
+    primarySourceAssetVariantId: normalizedSnapshot.sourceAssetVariantId,
+    sourceAssetVariantIds: normalizedSnapshot.sourceAssetVariantIds,
+    sourceAssetFamilyId: normalizedSnapshot.sourceAssetFamilyId,
+    sourceAssetSeriesId: normalizedSnapshot.sourceAssetSeriesId,
+    model: normalizedSnapshot.model,
+    modelName: normalizedSnapshot.modelName,
+    specCode: normalizedSnapshot.specCode,
+    specName: normalizedSnapshot.specName,
+    barcode: normalizedSnapshot.barcode,
+    size: normalizedSnapshot.size as Prisma.InputJsonValue,
+    color: normalizedSnapshot.color,
+    material: normalizedSnapshot.material,
+    imageUrl: normalizedSnapshot.imageUrl,
+    sourceStatus: normalizedSnapshot.sourceStatus,
+    syncedAt: parseSnapshotSyncedAt(normalizedSnapshot.syncedAt),
+    lockedFields: normalizedSnapshot.lockedFields,
+    lockedReasons: normalizedSnapshot.lockedReasons as Prisma.InputJsonValue,
+    sourceVariants: normalizedSnapshot.sourceVariants as unknown as Prisma.InputJsonValue,
+  }
 }
diff --git a/furniture-3d-system/src/server/services/asset-sku-sync.service.ts b/furniture-3d-system/src/server/services/asset-sku-sync.service.ts
index 5e4eef1c..695cba2a 100644
--- a/furniture-3d-system/src/server/services/asset-sku-sync.service.ts
+++ b/furniture-3d-system/src/server/services/asset-sku-sync.service.ts
@@ -8,8 +8,10 @@ import { assetVariantRelationInclude, type AssetVariantWithRelations } from '../
 import {
   applyLockedSnapshotFields,
   buildAssetSkuSnapshot,
+  buildAssetSkuSnapshotFromProfile,
   buildMissingAssetSkuSnapshotVariant,
   buildAssetSkuSnapshotVariant,
+  buildProductSkuAssetProfileData,
   type AssetSkuSnapshot,
 } from './asset-sku-snapshot'
 
@@ -30,10 +32,6 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
 
-function readAssetSkuSnapshot(attributes: unknown): unknown {
-  return isRecord(attributes) ? attributes.assetSkuSnapshot : null
-}
-
 function isImageLocked(snapshot: AssetSkuSnapshot | null): boolean {
   return Boolean(snapshot?.lockedFields.includes('imageUrl') || snapshot?.lockedFields.includes('images'))
 }
@@ -214,16 +212,14 @@ class AssetSkuSyncService {
           images: true,
           sourceAssetVariantId: true,
           sourceAssetVariantIds: true,
+          assetProfile: true,
         },
       })
 
       let syncedCount = 0
       for (const sku of skus) {
           const existingAttributes = isRecord(sku.attributes) ? sku.attributes : {}
-          const existingSnapshot = readAssetSkuSnapshot(existingAttributes)
-          const previousSnapshot = isRecord(existingSnapshot)
-            ? existingSnapshot as unknown as AssetSkuSnapshot
-            : null
+          const previousSnapshot = buildAssetSkuSnapshotFromProfile(sku.assetProfile)
           const primarySourceVariantId =
             sku.sourceAssetVariantId ??
             previousSnapshot?.sourceAssetVariantId ??
@@ -244,7 +240,7 @@ class AssetSkuSyncService {
             variants: variant ? [variant] : [],
             primaryVariantId: primarySourceVariantId,
             missingVariantIds: variant ? [] : [event.assetVariantId],
-            previousSnapshot: existingSnapshot,
+            previousSnapshot,
           })
           if (!currentSnapshot) {
             continue
@@ -261,7 +257,7 @@ class AssetSkuSyncService {
                         : currentSnapshot.sourceAssetVariantIds,
                     sourceVariants: previousSnapshot.sourceVariants ?? currentSnapshot.sourceVariants,
                   },
-                  previous: existingSnapshot,
+                  previous: previousSnapshot,
                 }),
                 sourceVariant,
               )
@@ -285,7 +281,7 @@ class AssetSkuSyncService {
           const nextSnapshot = shouldUpdateTopLevel
             ? applyLockedSnapshotFields({
                 next: unlockedNextSnapshot,
-                previous: existingSnapshot,
+                previous: previousSnapshot,
               })
             : unlockedNextSnapshot
 
@@ -303,6 +299,12 @@ class AssetSkuSyncService {
             data: {
               attributes: nextAttributes as unknown as Prisma.InputJsonValue,
               images: nextImages,
+              assetProfile: {
+                upsert: {
+                  create: buildProductSkuAssetProfileData(nextSnapshot),
+                  update: buildProductSkuAssetProfileData(nextSnapshot),
+                },
+              },
             },
           })
           await safeDeleteCacheKeys([
diff --git a/furniture-3d-system/src/server/services/assisted-assembly-ai-render.service.ts b/furniture-3d-system/src/server/services/assisted-assembly-ai-render.service.ts
index 327c604f..bcf85143 100644
--- a/furniture-3d-system/src/server/services/assisted-assembly-ai-render.service.ts
+++ b/furniture-3d-system/src/server/services/assisted-assembly-ai-render.service.ts
@@ -65,6 +65,17 @@ function trimToNull(value: string | null | undefined): string | null {
   return normalized ? normalized : null
 }
 
+function normalizeRequiredText(value: unknown, label: string): string {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `缺少${label}`)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `缺少${label}`)
+  }
+  return normalized
+}
+
 function normalizePrompt(value: unknown): string {
   if (typeof value !== 'string') {
     throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '请填写效果图提示词')
@@ -149,11 +160,18 @@ function decodeReferenceImageDataUrl(value: unknown): { buffer: Buffer; contentT
   }
 }
 
-function ensureJsonValue(value: unknown, message: string): Prisma.InputJsonValue {
+function ensureJsonObject(value: unknown, message: string): Prisma.InputJsonValue {
   if (value == null) {
     throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, message)
   }
-  return value as Prisma.InputJsonValue
+  if (typeof value !== 'object' || Array.isArray(value)) {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, `${message}格式不正确`)
+  }
+  try {
+    return JSON.parse(JSON.stringify(value)) as Prisma.InputJsonValue
+  } catch {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, `${message}必须是可保存的 JSON 对象`)
+  }
 }
 
 function normalizeResultImages(value: unknown): AssistedAssemblyAiRenderImageDTO[] {
@@ -280,9 +298,10 @@ async function getExternalImageApiConfig(): Promise<AiRenderApiConfig> {
 
 export class AssistedAssemblyAiRenderService {
   async listForUser(user: AuthUser, options?: { limit?: number }): Promise<AssistedAssemblyAiRenderDTO[]> {
+    const createdBy = normalizeRequiredText(user.id, '用户 ID')
     const limit = Math.min(Math.max(options?.limit ?? 24, 1), 60)
     const records = await prisma.assistedAssemblyAiRender.findMany({
-      where: { createdBy: user.id },
+      where: { createdBy },
       orderBy: { createdAt: 'desc' },
       take: limit,
     })
@@ -291,10 +310,12 @@ export class AssistedAssemblyAiRenderService {
   }
 
   async getForUser(id: string, user: AuthUser): Promise<AssistedAssemblyAiRenderDTO> {
+    const normalizedId = normalizeRequiredText(id, 'AI 生图记录 ID')
+    const createdBy = normalizeRequiredText(user.id, '用户 ID')
     const record = await prisma.assistedAssemblyAiRender.findFirst({
       where: {
-        id,
-        createdBy: user.id,
+        id: normalizedId,
+        createdBy,
       },
     })
 
@@ -306,8 +327,10 @@ export class AssistedAssemblyAiRenderService {
   }
 
   async deleteForUser(id: string, user: AuthUser): Promise<void> {
+    const normalizedId = normalizeRequiredText(id, 'AI 生图记录 ID')
+    const createdBy = normalizeRequiredText(user.id, '用户 ID')
     const record = await prisma.assistedAssemblyAiRender.findFirst({
-      where: { id, createdBy: user.id },
+      where: { id: normalizedId, createdBy },
       select: { id: true },
     })
     if (!record) {
@@ -318,6 +341,7 @@ export class AssistedAssemblyAiRenderService {
 
   async create(input: CreateAssistedAssemblyAiRenderInput, user: AuthUser): Promise<AssistedAssemblyAiRenderDTO> {
     const startedAt = Date.now()
+    const createdBy = normalizeRequiredText(user.id, '用户 ID')
     const prompt = normalizePrompt(input.prompt)
     const negativePrompt = normalizeNegativePrompt(input.negativePrompt)
     const imageCount = normalizeImageCount(input.imageCount)
@@ -330,18 +354,18 @@ export class AssistedAssemblyAiRenderService {
       imageSize,
     }
 
-    const storageKey = `assisted-assembly/ai-renders/${user.id}/${Date.now()}-${nanoid(8)}.${referenceImage.extension}`
+    const storageKey = `assisted-assembly/ai-renders/${createdBy}/${Date.now()}-${nanoid(8)}.${referenceImage.extension}`
     const referenceImageUrl = await uploadBufferToS3(referenceImage.buffer, storageKey, referenceImage.contentType)
 
     const baseCreateData = {
-      createdBy: user.id,
       prompt,
       negativePrompt,
       params: params as Prisma.InputJsonValue,
       referenceImageUrl,
       resultImages: [] as unknown as Prisma.InputJsonValue,
-      workspaceSnapshot: ensureJsonValue(input.workspaceSnapshot, '缺少辅助装配工作台快照'),
-      assetSnapshot: ensureJsonValue(input.assetSnapshot, '缺少辅助装配物料快照'),
+      createdBy,
+      workspaceSnapshot: ensureJsonObject(input.workspaceSnapshot, '缺少辅助装配工作台快照'),
+      assetSnapshot: ensureJsonObject(input.assetSnapshot, '缺少辅助装配物料快照'),
       status: AssistedAssemblyAiRenderStatus.PENDING,
     }
 
diff --git a/furniture-3d-system/src/server/services/common-component.service.ts b/furniture-3d-system/src/server/services/common-component.service.ts
index fb0a556c..a8916e2b 100644
--- a/furniture-3d-system/src/server/services/common-component.service.ts
+++ b/furniture-3d-system/src/server/services/common-component.service.ts
@@ -25,6 +25,18 @@ export type {
   UpdateCommonComponentInput,
 } from './common-component.service.types'
 
+function normalizeCommonComponentCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+function normalizeRequiredText(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
 class CommonComponentService {
   private readonly defaultCategories = [
     { name: '抽屉组件', description: '可复用的抽屉整体模块', icon: '🗄️' },
@@ -107,7 +119,10 @@ class CommonComponentService {
   }
 
   async create(input: CreateCommonComponentInput): Promise<CommonComponentDTO> {
-    const code = input.code.trim()
+    const code = normalizeCommonComponentCode(input.code)
+    if (!code) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '通用组件编码不能为空')
+    }
     const codeExists = await commonComponentRepository.codeExists(code)
     if (codeExists) {
       throw new AppError(ErrorCode.COMPONENT_CODE_EXISTS, '通用组件编码已存在')
@@ -133,7 +148,7 @@ class CommonComponentService {
     }
 
     const component = await commonComponentRepository.createWithCategory({
-      name: input.name.trim(),
+      name: normalizeRequiredText(input.name, '通用组件名称'),
       code,
       categoryId: input.categoryId,
       description: input.description?.trim() || null,
@@ -164,7 +179,7 @@ class CommonComponentService {
     }
 
     const component = await commonComponentRepository.updateWithCategory(id, {
-      name: input.name?.trim(),
+      name: input.name === undefined ? undefined : normalizeRequiredText(input.name, '通用组件名称'),
       categoryId: input.categoryId,
       description:
         input.description === undefined ? undefined : input.description?.trim() || null,
@@ -206,7 +221,7 @@ class CommonComponentService {
   }
 
   async createCategory(input: { name: string; description?: string; icon?: string }): Promise<CommonComponentCategoryDTO> {
-    const name = input.name.trim()
+    const name = normalizeRequiredText(input.name, '分类名称')
     const nameExists = await commonComponentCategoryRepository.nameExists(name)
     if (nameExists) {
       throw new AppError(ErrorCode.CATEGORY_NAME_EXISTS, '分类名称已存在')
diff --git a/furniture-3d-system/src/server/services/draft-group.mapper.ts b/furniture-3d-system/src/server/services/draft-group.mapper.ts
index 06b433eb..b4a2cb3e 100644
--- a/furniture-3d-system/src/server/services/draft-group.mapper.ts
+++ b/furniture-3d-system/src/server/services/draft-group.mapper.ts
@@ -9,6 +9,7 @@ import type {
 import type {
   DraftGroupDTO,
   DraftGroupPreSkuDTO,
+  PreSkuBasicInfoDTO,
   PreSkuPackagingCostSummaryDTO,
   PreSkuPackagingInputDTO,
   PreSkuPackagingPlanBoxDTO,
@@ -27,6 +28,63 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
 
+function readNonEmptyString(value: unknown): string | null {
+  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null
+}
+
+const PRE_SKU_BASIC_INFO_DISPLAY_KEYS = new Set([
+  'model',
+  'formalSkuCode',
+  'skuCode',
+  'draftSkuCode',
+  'skuSequenceCode',
+  'barcode',
+  'size',
+  'color',
+  'material',
+  'specName',
+  'versionNo',
+  'setCount',
+  'attributeCode',
+  'drawingId',
+  'installMethod',
+])
+
+function toPreSkuBasicInfoDTO(record: PreSkuWithRelations): PreSkuBasicInfoDTO | null {
+  if (!record.basicInfo) return null
+
+  return {
+    model: readNonEmptyString(record.basicInfo.model) ?? '',
+    formalSkuCode: readNonEmptyString(record.basicInfo.formalSkuCode) ?? '',
+    barcode: readNonEmptyString(record.basicInfo.barcode) ?? '',
+    size: readNonEmptyString(record.basicInfo.size) ?? '',
+    color: readNonEmptyString(record.basicInfo.color) ?? '',
+    material: readNonEmptyString(record.basicInfo.material) ?? '',
+    specName: readNonEmptyString(record.basicInfo.specName) ?? '',
+    versionNo: readNonEmptyString(record.basicInfo.versionNo) ?? '',
+    setCount: readNonEmptyString(record.basicInfo.setCount) ?? '',
+    attributeCode: readNonEmptyString(record.basicInfo.attributeCode) ?? '',
+    drawingId: readNonEmptyString(record.basicInfo.drawingId) ?? '',
+    installMethod: readNonEmptyString(record.basicInfo.installMethod) ?? '',
+    manualUpdatedAt: record.basicInfo.manualUpdatedAt?.toISOString() ?? null,
+    manualUpdatedBy: record.basicInfo.manualUpdatedBy ?? null,
+    manualUpdatedByName: record.basicInfo.manualUpdatedByName ?? null,
+  }
+}
+
+function sanitizeDisplaySummaryForDTO(
+  displaySummary: Record<string, unknown> | null,
+  basicInfo: PreSkuBasicInfoDTO | null,
+) {
+  if (!displaySummary || !basicInfo) return displaySummary
+
+  const sanitized = { ...displaySummary }
+  PRE_SKU_BASIC_INFO_DISPLAY_KEYS.forEach((key) => {
+    delete sanitized[key]
+  })
+  return sanitized
+}
+
 function asArray<T = unknown>(value: unknown): T[] {
   return Array.isArray(value) ? (value as T[]) : []
 }
@@ -589,7 +647,9 @@ export function buildPackagingInput(record: PreSkuWithRelations): PreSkuPackagin
 }
 
 export function toDraftGroupPreSkuDTO(record: PreSkuWithRelations): DraftGroupPreSkuDTO {
-  const displaySummary = isRecord(record.displaySummary) ? record.displaySummary : null
+  const rawDisplaySummary = isRecord(record.displaySummary) ? record.displaySummary : null
+  const basicInfo = toPreSkuBasicInfoDTO(record)
+  const displaySummary = sanitizeDisplaySummaryForDTO(rawDisplaySummary, basicInfo)
   const summaryWarnings = Array.isArray(displaySummary?.warnings)
     ? displaySummary.warnings.filter((item): item is string => typeof item === 'string' && item.trim().length > 0)
     : []
@@ -617,6 +677,7 @@ export function toDraftGroupPreSkuDTO(record: PreSkuWithRelations): DraftGroupPr
       ? (record.recommendedHardware as unknown[])
       : null,
     previewNodes: Array.isArray(record.previewNodes) ? (record.previewNodes as unknown[]) : [],
+    basicInfo,
     displaySummary,
     candidateSnapshot,
     assemblyWorkspace,
diff --git a/furniture-3d-system/src/server/services/draft-group.service.ts b/furniture-3d-system/src/server/services/draft-group.service.ts
index 995bc9a1..aaa3f3dc 100644
--- a/furniture-3d-system/src/server/services/draft-group.service.ts
+++ b/furniture-3d-system/src/server/services/draft-group.service.ts
@@ -1,4 +1,5 @@
 import { Prisma } from '@prisma/client'
+import { nanoid } from 'nanoid'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { AuthUser } from '@/server/core/types'
 import { deriveAssemblySaveValidation } from '@/lib/open-product/assembly-workspace'
@@ -43,7 +44,8 @@ import type {
 } from './draft-group.service.types'
 
 function buildDraftGroupCode(): string {
-  return `DG-${Date.now()}`
+  const timestamp = new Date().toISOString().replace(/\D/g, '').slice(0, 14)
+  return `DG-${timestamp}-${nanoid(6).toUpperCase()}`
 }
 
 function isRecord(value: unknown): value is Record<string, unknown> {
@@ -101,28 +103,88 @@ const CONFLICT_CHECK_FIELDS: PreSkuBasicInfoFieldKey[] = [
   'versionNo',
 ]
 
+const BLOCKING_BASIC_INFO_DUPLICATE_FIELDS = new Set<PreSkuBasicInfoFieldKey>([
+  'formalSkuCode',
+  'barcode',
+])
+
+const PRE_SKU_BASIC_INFO_DISPLAY_KEYS = new Set<string>([
+  ...Array.from(PRE_SKU_BASIC_INFO_FIELD_KEYS),
+  'skuCode',
+  'draftSkuCode',
+  'skuSequenceCode',
+  'basicInfoManualUpdatedAt',
+  'basicInfoManualUpdatedBy',
+  'basicInfoManualUpdatedByName',
+])
+
+const UPPERCASE_BASIC_INFO_FIELDS = new Set<PreSkuBasicInfoFieldKey>([
+  'model',
+  'formalSkuCode',
+  'barcode',
+  'versionNo',
+  'attributeCode',
+  'drawingId',
+])
+
 function readText(value: unknown): string {
   return typeof value === 'string' ? value.trim() : ''
 }
 
+function normalizePreSkuBasicInfoValue(
+  field: PreSkuBasicInfoFieldKey,
+  value: string | null | undefined,
+): string {
+  const normalized = value?.trim() ?? ''
+  if (!normalized) return ''
+  return UPPERCASE_BASIC_INFO_FIELDS.has(field) ? normalized.toUpperCase() : normalized
+}
+
+function readPreSkuBasicInfoValue(
+  preSku: PreSkuWithRelations,
+  field: PreSkuBasicInfoFieldKey,
+): string {
+  return normalizePreSkuBasicInfoValue(field, readText(preSku.basicInfo?.[field]))
+}
+
+function stripPreSkuBasicInfoDisplayKeys(
+  displaySummary: Record<string, unknown>,
+): Record<string, unknown> {
+  const sanitized = { ...displaySummary }
+  PRE_SKU_BASIC_INFO_DISPLAY_KEYS.forEach((key) => {
+    delete sanitized[key]
+  })
+  return sanitized
+}
+
+function buildStructuredPreSkuBasicInfoValues(
+  values: Partial<Record<PreSkuBasicInfoFieldKey, string>>,
+): Record<PreSkuBasicInfoFieldKey, string | null> {
+  return Array.from(PRE_SKU_BASIC_INFO_FIELD_KEYS).reduce(
+    (result, field) => {
+      const key = field as PreSkuBasicInfoFieldKey
+      result[key] = normalizePreSkuBasicInfoValue(key, values[key]) || null
+      return result
+    },
+    {} as Record<PreSkuBasicInfoFieldKey, string | null>,
+  )
+}
+
+function flattenConflicts(conflicts: PreSkuBasicInfoMetadataDTO['conflicts']) {
+  return Object.values(conflicts).flat()
+}
+
 function setIfPresent(
   target: Partial<Record<PreSkuBasicInfoFieldKey, string>>,
   key: PreSkuBasicInfoFieldKey,
   value: string | null | undefined,
 ) {
-  const normalized = value?.trim()
+  const normalized = normalizePreSkuBasicInfoValue(key, value)
   if (normalized) {
     target[key] = normalized
   }
 }
 
-function readBasisText(
-  item: { assemblyBasis: Record<string, unknown> | null } | null | undefined,
-  key: string,
-): string {
-  return isRecord(item?.assemblyBasis) ? readText(item.assemblyBasis[key]) : ''
-}
-
 function addUniqueOption(
   target: PreSkuBasicInfoOptionDTO[],
   value: string | null | undefined,
@@ -372,17 +434,15 @@ class DraftGroupService {
     }
 
     const suggestions = await this.buildPreSkuBasicInfoSuggestions(preSku)
-    const displaySummary = isRecord(preSku.displaySummary)
-      ? preSku.displaySummary
-      : {}
     const values: Partial<Record<PreSkuBasicInfoFieldKey, string>> = {}
 
     PRE_SKU_AUTO_FILL_FIELDS.forEach((field) => {
       const submittedValue = fields && field in fields ? fields[field] : undefined
-      const normalizedSubmittedValue = typeof submittedValue === 'string'
-        ? submittedValue.trim()
-        : ''
-      const summaryValue = readText(displaySummary[field])
+      const normalizedSubmittedValue = normalizePreSkuBasicInfoValue(
+        field,
+        typeof submittedValue === 'string' ? submittedValue : '',
+      )
+      const summaryValue = readPreSkuBasicInfoValue(preSku, field)
       values[field] = normalizedSubmittedValue || summaryValue || suggestions[field] || ''
     })
 
@@ -508,38 +568,71 @@ class DraftGroupService {
     if (!preSku) {
       throw new AppError(ErrorCode.PRE_SKU_NOT_FOUND, '准 SKU 不存在')
     }
+    if (preSku.status === 'FORMALIZED' || preSku.status === 'ARCHIVED') {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        '已正式入库或已归档的准 SKU 不能继续修改基础资料',
+      )
+    }
 
     const suggestions = await this.buildPreSkuBasicInfoSuggestions(preSku)
-    const displaySummary = isRecord(preSku.displaySummary)
-      ? { ...preSku.displaySummary }
-      : {}
+    const displaySummary = stripPreSkuBasicInfoDisplayKeys(
+      isRecord(preSku.displaySummary) ? preSku.displaySummary : {},
+    )
+    const values: Partial<Record<PreSkuBasicInfoFieldKey, string>> = {}
 
     PRE_SKU_AUTO_FILL_FIELDS.forEach((field) => {
-      if (readText(displaySummary[field])) return
+      const existing = readPreSkuBasicInfoValue(preSku, field)
+      if (existing) {
+        values[field] = existing
+        return
+      }
       const suggestion = suggestions[field]
       if (suggestion) {
-        displaySummary[field] = suggestion
+        values[field] = suggestion
       }
     })
 
     Object.entries(input.fields).forEach(([key, value]) => {
       if (!PRE_SKU_BASIC_INFO_FIELD_KEYS.has(key)) return
-      const normalized = typeof value === 'string' ? value.trim() : ''
+      const field = key as PreSkuBasicInfoFieldKey
+      const normalized = normalizePreSkuBasicInfoValue(
+        field,
+        typeof value === 'string' ? value : '',
+      )
       if (normalized) {
-        displaySummary[key] = normalized
+        values[field] = normalized
       } else {
-        delete displaySummary[key]
+        values[field] = ''
       }
     })
 
-    displaySummary.basicInfoManualUpdatedAt = new Date().toISOString()
-    displaySummary.basicInfoManualUpdatedBy = user.id
-    displaySummary.basicInfoManualUpdatedByName = user.name
+    PRE_SKU_BASIC_INFO_FIELD_KEYS.forEach((field) => {
+      const key = field as PreSkuBasicInfoFieldKey
+      if (key in values) return
+      const existing = readPreSkuBasicInfoValue(preSku, key)
+      if (existing) {
+        values[key] = existing
+      }
+    })
 
-    const updated = await preSkuRepository.updateDisplaySummary(
-      preSkuId,
-      displaySummary as Prisma.InputJsonValue,
-    )
+    const conflicts = await this.detectPreSkuBasicInfoConflicts(preSku, values)
+    const blockingConflicts = flattenConflicts(conflicts).filter((conflict) => conflict.level === 'error')
+    if (blockingConflicts.length > 0) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        blockingConflicts[0]?.message ?? '基础资料存在冲突，不能保存',
+      )
+    }
+
+    await preSkuRepository.updateDisplaySummary(preSkuId, displaySummary as Prisma.InputJsonValue)
+    const updated = await preSkuRepository.upsertBasicInfo(preSkuId, {
+      ...buildStructuredPreSkuBasicInfoValues(values),
+      manualUpdatedAt: new Date(),
+      manualUpdatedBy: user.id,
+      manualUpdatedByName: user.name,
+      source: 'MANUAL',
+    })
     return toDraftGroupPreSkuDTO(updated)
   }
 
@@ -569,21 +662,6 @@ class DraftGroupService {
     const primaryVariant = variants.find((variant) => variant.id === snapshot?.sourceAssetVariantId)
     setIfPresent(suggestions, 'versionNo', primaryVariant?.versionNo ?? DEFAULT_SKU_VERSION_NO)
 
-    if (!suggestions.model || !suggestions.formalSkuCode || !suggestions.barcode || !suggestions.versionNo) {
-      const selection = normalizeVariantSelection(preSku.variantSelection)
-      const allSelections = [...selection.slots, ...selection.hardwareSelections]
-      const primarySelection =
-        selection.slots.find((slot) => slot.variantId === primaryVariantId) ??
-        allSelections.find((item) => item.variantId === primaryVariantId) ??
-        allSelections[0]
-
-      setIfPresent(suggestions, 'model', readBasisText(primarySelection, 'assetFamilyCode'))
-      setIfPresent(suggestions, 'formalSkuCode', primarySelection?.code)
-      setIfPresent(suggestions, 'barcode', readBasisText(primarySelection, 'barcode'))
-      setIfPresent(suggestions, 'versionNo', readBasisText(primarySelection, 'versionNo') || DEFAULT_SKU_VERSION_NO)
-      setIfPresent(suggestions, 'specName', primarySelection?.name)
-    }
-
     setIfPresent(suggestions, 'versionNo', suggestions.versionNo ?? DEFAULT_SKU_VERSION_NO)
 
     return suggestions
@@ -626,29 +704,32 @@ class DraftGroupService {
 
     await Promise.all(
       CONFLICT_CHECK_FIELDS.map(async (field) => {
-        const value = values[field]?.trim()
+        const value = normalizePreSkuBasicInfoValue(field, values[field])
         if (!value) return
 
-        const sameFieldPreSkus = await preSkuRepository.findByDisplaySummaryField(
+        const sameFieldPreSkus = await preSkuRepository.findByBasicInfoField(
           field,
           value,
           preSku.id,
         )
         sameFieldPreSkus.forEach((record) => {
+          const isBlocking = BLOCKING_BASIC_INFO_DUPLICATE_FIELDS.has(field)
           addConflict(conflicts, {
             field,
-            level: 'warning',
+            level: isBlocking ? 'error' : 'warning',
             source: '草稿组',
-            message: `已被其他准 SKU 使用：${record.customName || record.defaultName}`,
+            message: isBlocking
+              ? `已被其他准 SKU 使用，不能保存：${record.customName || record.defaultName}`
+              : `已被其他准 SKU 使用：${record.customName || record.defaultName}`,
           })
         })
       }),
     )
 
-    const specName = values.specName?.trim()
-    const versionNo = values.versionNo?.trim()
+    const specName = normalizePreSkuBasicInfoValue('specName', values.specName)
+    const versionNo = normalizePreSkuBasicInfoValue('versionNo', values.versionNo)
     if (specName && versionNo) {
-      const sameSpecVersionPreSkus = await preSkuRepository.findByDisplaySummaryFields(
+      const sameSpecVersionPreSkus = await preSkuRepository.findByBasicInfoFields(
         { specName, versionNo },
         preSku.id,
       )
@@ -668,7 +749,7 @@ class DraftGroupService {
       })
     }
 
-    const model = values.model?.trim()
+    const model = normalizePreSkuBasicInfoValue('model', values.model)
     if (model) {
       const [product, assetFamily] = await Promise.all([
         productRepository.findByModelNumber(model),
@@ -692,7 +773,7 @@ class DraftGroupService {
       }
     }
 
-    const formalSkuCode = values.formalSkuCode?.trim()
+    const formalSkuCode = normalizePreSkuBasicInfoValue('formalSkuCode', values.formalSkuCode)
     if (formalSkuCode) {
       const [assetVariant, sku] = await Promise.all([
         assetVariantRepository.findByCode(formalSkuCode),
@@ -701,7 +782,7 @@ class DraftGroupService {
       if (assetVariant && !resolveSelectedVariantIds(preSku).includes(assetVariant.id)) {
         addConflict(conflicts, {
           field: 'formalSkuCode',
-          level: 'warning',
+          level: 'error',
           source: '资产中心',
           message: `规格款编码已被其他资产使用：${assetVariant.name}`,
         })
@@ -716,11 +797,11 @@ class DraftGroupService {
       }
     }
 
-    const barcode = values.barcode?.trim()
+    const barcode = normalizePreSkuBasicInfoValue('barcode', values.barcode)
     if (barcode) {
       const [assetVariant, sku] = await Promise.all([
         assetVariantRepository.findByBarcode(barcode),
-        skuRepository.findByAssetSnapshotBarcode(barcode),
+        skuRepository.findByAssetProfileBarcode(barcode),
       ])
       if (assetVariant && !resolveSelectedVariantIds(preSku).includes(assetVariant.id)) {
         addConflict(conflicts, {
diff --git a/furniture-3d-system/src/server/services/draft-group.service.types.ts b/furniture-3d-system/src/server/services/draft-group.service.types.ts
index adc2d9b4..e802e8f5 100644
--- a/furniture-3d-system/src/server/services/draft-group.service.types.ts
+++ b/furniture-3d-system/src/server/services/draft-group.service.types.ts
@@ -68,6 +68,24 @@ export interface DraftGroupDTO {
   updatedAt: Date
 }
 
+export interface PreSkuBasicInfoDTO {
+  model: string
+  formalSkuCode: string
+  barcode: string
+  size: string
+  color: string
+  material: string
+  specName: string
+  versionNo: string
+  setCount: string
+  attributeCode: string
+  drawingId: string
+  installMethod: string
+  manualUpdatedAt: string | null
+  manualUpdatedBy: string | null
+  manualUpdatedByName: string | null
+}
+
 export interface DraftGroupPreSkuDTO {
   id: string
   draftGroupId: string
@@ -80,6 +98,7 @@ export interface DraftGroupPreSkuDTO {
   variantSelection: PreSkuVariantSelectionDTO
   recommendedHardware: unknown[] | null
   previewNodes: unknown[]
+  basicInfo: PreSkuBasicInfoDTO | null
   displaySummary: Record<string, unknown> | null
   candidateSnapshot: CombinationCandidateSnapshot | null
   assemblyWorkspace: AssemblyWorkspaceSnapshot | null
diff --git a/furniture-3d-system/src/server/services/employee-directory-sync.service.ts b/furniture-3d-system/src/server/services/employee-directory-sync.service.ts
index 811e4834..3deb8871 100644
--- a/furniture-3d-system/src/server/services/employee-directory-sync.service.ts
+++ b/furniture-3d-system/src/server/services/employee-directory-sync.service.ts
@@ -39,28 +39,75 @@ export interface HrSyncPayload {
   dimissions: HrSyncDimissionInput[]
 }
 
+function normalizeRequiredText(value: unknown): string {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  if (value === undefined || value === null) return null
+  const normalized = value.trim()
+  return normalized || null
+}
+
+function normalizeOptionalEmail(value: string | null | undefined): string | null {
+  const normalized = normalizeOptionalText(value)
+  return normalized ? normalized.toLowerCase() : null
+}
+
+function normalizeDepartmentExternalIds(value: Prisma.InputJsonValue | undefined): Prisma.InputJsonValue | undefined {
+  if (value === undefined) return undefined
+  if (!Array.isArray(value)) return value
+  return Array.from(new Set(value.map((item) => normalizeRequiredText(item)).filter(Boolean)))
+}
+
 class EmployeeDirectorySyncService {
   async sync(payload: HrSyncPayload) {
     if (!Array.isArray(payload.departments) || !Array.isArray(payload.employees) || !Array.isArray(payload.dimissions)) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '同步数据格式不正确')
     }
 
-    for (const department of payload.departments) {
+    const departments = payload.departments.map((department) => ({
+      ...department,
+      externalId: normalizeRequiredText(department.externalId),
+      name: normalizeRequiredText(department.name),
+      parentExternalId: normalizeOptionalText(department.parentExternalId),
+    }))
+    const employees = payload.employees.map((employee) => ({
+      ...employee,
+      dingtalkUserId: normalizeOptionalText(employee.dingtalkUserId),
+      dingtalkUnionId: normalizeOptionalText(employee.dingtalkUnionId),
+      jobNumber: normalizeOptionalText(employee.jobNumber),
+      name: normalizeRequiredText(employee.name),
+      mobile: normalizeOptionalText(employee.mobile),
+      email: normalizeOptionalEmail(employee.email),
+      title: normalizeOptionalText(employee.title),
+      primaryDepartmentExternalId: normalizeOptionalText(employee.primaryDepartmentExternalId),
+      departmentExternalIds: normalizeDepartmentExternalIds(employee.departmentExternalIds),
+    }))
+    const dimissions = payload.dimissions.map((dimission) => ({
+      ...dimission,
+      dingtalkUserId: normalizeOptionalText(dimission.dingtalkUserId),
+      dingtalkUnionId: normalizeOptionalText(dimission.dingtalkUnionId),
+      mobile: normalizeOptionalText(dimission.mobile),
+      jobNumber: normalizeOptionalText(dimission.jobNumber),
+    }))
+
+    for (const department of departments) {
       if (!department.externalId || !department.name) {
         throw new AppError(ErrorCode.VALIDATION_FAILED, '部门同步数据缺少必要字段')
       }
     }
 
-    for (const employee of payload.employees) {
+    for (const employee of employees) {
       if (!employee.name) {
         throw new AppError(ErrorCode.VALIDATION_FAILED, '员工同步数据缺少姓名')
       }
     }
 
     return employeeDirectoryRepository.upsertMany({
-      departments: payload.departments,
-      employees: payload.employees,
-      dimissionEntries: payload.dimissions,
+      departments,
+      employees,
+      dimissionEntries: dimissions,
     })
   }
 }
diff --git a/furniture-3d-system/src/server/services/feedback-workflow.helper.ts b/furniture-3d-system/src/server/services/feedback-workflow.helper.ts
index d581df52..a7d63472 100644
--- a/furniture-3d-system/src/server/services/feedback-workflow.helper.ts
+++ b/furniture-3d-system/src/server/services/feedback-workflow.helper.ts
@@ -25,27 +25,48 @@ const feedbackInclude = {
   },
 } as const
 
+function normalizeRequiredText(value: unknown, message: string): string {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, message)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, message)
+  }
+  return normalized
+}
+
+function normalizeActor(actor: FeedbackWorkflowActor): FeedbackWorkflowActor {
+  return {
+    id: normalizeRequiredText(actor.id, '操作人不能为空'),
+    name: normalizeRequiredText(actor.name, '操作人名称不能为空'),
+  }
+}
+
 export async function addFeedbackComment(
   feedbackId: string,
   actor: FeedbackWorkflowActor,
   content: string
 ): Promise<FeedbackWithRelations> {
-  const feedback = await feedbackRepository.findById(feedbackId)
+  const normalizedFeedbackId = normalizeRequiredText(feedbackId, '反馈 ID 不能为空')
+  const normalizedActor = normalizeActor(actor)
+  const normalizedContent = normalizeRequiredText(content, '评论内容不能为空')
+  const feedback = await feedbackRepository.findById(normalizedFeedbackId)
   if (!feedback) {
     throw new AppError(ErrorCode.FILE_NOT_FOUND, '反馈不存在')
   }
 
   const comments = (feedback.comments as Array<Record<string, unknown>>) || []
   comments.push({
-    userId: actor.id,
-    userName: actor.name,
-    content,
+    userId: normalizedActor.id,
+    userName: normalizedActor.name,
+    content: normalizedContent,
     createdAt: new Date().toISOString(),
   })
 
   const updated = await prisma.$transaction(async (tx) => {
     const result = await tx.feedback.update({
-      where: { id: feedbackId },
+      where: { id: normalizedFeedbackId },
       data: {
         status: 'IN_PROGRESS',
         comments: comments as unknown as object,
@@ -55,12 +76,12 @@ export async function addFeedbackComment(
 
     await tx.activityLog.create({
       data: {
-        userId: actor.id,
+        userId: normalizedActor.id,
         type: 'FEEDBACK_UPDATE',
         targetType: 'Feedback',
-        targetId: feedbackId,
+        targetId: normalizedFeedbackId,
         action: '添加评论',
-        metadata: { action: 'comment', content },
+        metadata: { action: 'comment', content: normalizedContent },
       },
     })
 
@@ -74,19 +95,21 @@ export async function closeFeedback(
   feedbackId: string,
   actor: FeedbackWorkflowActor
 ): Promise<FeedbackWithRelations> {
+  const normalizedFeedbackId = normalizeRequiredText(feedbackId, '反馈 ID 不能为空')
+  const normalizedActor = normalizeActor(actor)
   const updated = await prisma.$transaction(async (tx) => {
     const result = await tx.feedback.update({
-      where: { id: feedbackId },
+      where: { id: normalizedFeedbackId },
       data: { status: 'CLOSED' },
       include: feedbackInclude,
     })
 
     await tx.activityLog.create({
       data: {
-        userId: actor.id,
+        userId: normalizedActor.id,
         type: 'FEEDBACK_UPDATE',
         targetType: 'Feedback',
-        targetId: feedbackId,
+        targetId: normalizedFeedbackId,
         action: '关闭反馈',
         metadata: { action: 'close' },
       },
@@ -103,8 +126,11 @@ export async function reassignFeedback(
   assigneeId: string,
   actor: FeedbackWorkflowActor
 ): Promise<FeedbackWithRelations> {
+  const normalizedFeedbackId = normalizeRequiredText(feedbackId, '反馈 ID 不能为空')
+  const normalizedAssigneeId = normalizeRequiredText(assigneeId, '新处理人不能为空')
+  const normalizedActor = normalizeActor(actor)
   const assignee = await prisma.user.findUnique({
-    where: { id: assigneeId },
+    where: { id: normalizedAssigneeId },
     select: { id: true },
   })
 
@@ -114,19 +140,19 @@ export async function reassignFeedback(
 
   const updated = await prisma.$transaction(async (tx) => {
     const result = await tx.feedback.update({
-      where: { id: feedbackId },
-      data: { assigneeId },
+      where: { id: normalizedFeedbackId },
+      data: { assigneeId: normalizedAssigneeId },
       include: feedbackInclude,
     })
 
     await tx.activityLog.create({
       data: {
-        userId: actor.id,
+        userId: normalizedActor.id,
         type: 'FEEDBACK_UPDATE',
         targetType: 'Feedback',
-        targetId: feedbackId,
+        targetId: normalizedFeedbackId,
         action: '重新分配',
-        metadata: { action: 'reassign', assigneeId },
+        metadata: { action: 'reassign', assigneeId: normalizedAssigneeId },
       },
     })
 
@@ -140,9 +166,11 @@ export async function reopenFeedback(
   feedbackId: string,
   actor: FeedbackWorkflowActor
 ): Promise<FeedbackWithRelations> {
+  const normalizedFeedbackId = normalizeRequiredText(feedbackId, '反馈 ID 不能为空')
+  const normalizedActor = normalizeActor(actor)
   const updated = await prisma.$transaction(async (tx) => {
     const result = await tx.feedback.update({
-      where: { id: feedbackId },
+      where: { id: normalizedFeedbackId },
       data: {
         status: 'PENDING',
         resolution: null,
@@ -153,10 +181,10 @@ export async function reopenFeedback(
 
     await tx.activityLog.create({
       data: {
-        userId: actor.id,
+        userId: normalizedActor.id,
         type: 'FEEDBACK_UPDATE',
         targetType: 'Feedback',
-        targetId: feedbackId,
+        targetId: normalizedFeedbackId,
         action: '重新打开反馈',
         metadata: { action: 'reopen' },
       },
diff --git a/furniture-3d-system/src/server/services/feedback-workflow.service.ts b/furniture-3d-system/src/server/services/feedback-workflow.service.ts
index c235b548..f5c0a564 100644
--- a/furniture-3d-system/src/server/services/feedback-workflow.service.ts
+++ b/furniture-3d-system/src/server/services/feedback-workflow.service.ts
@@ -18,25 +18,67 @@ import type {
 
 type CheckHandlePermission = (user: FeedbackUserContext, feedback: Feedback) => Promise<boolean>
 
+function normalizeRequiredText(value: unknown, message: string): string {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, message)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, message)
+  }
+  return normalized
+}
+
+function normalizeOptionalId(value: unknown): string | null {
+  if (value == null) return null
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, 'SKU ID 格式不正确')
+  }
+  const normalized = value.trim()
+  return normalized ? normalized : null
+}
+
+function normalizeImages(value: unknown): string[] {
+  if (value == null) return []
+  if (!Array.isArray(value)) {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, '反馈图片格式不正确')
+  }
+  return Array.from(
+    new Set(
+      value
+        .filter((item): item is string => typeof item === 'string')
+        .map((item) => item.trim())
+        .filter(Boolean),
+    ),
+  )
+}
+
 class FeedbackWorkflowService {
   constructor(private readonly checkHandlePermission: CheckHandlePermission) {}
 
   async create(input: CreateFeedbackInput, user: FeedbackUserContext): Promise<FeedbackDTO> {
+    const productId = normalizeRequiredText(input.productId, '产品不能为空')
+    const skuId = normalizeOptionalId(input.skuId)
+    const title = normalizeRequiredText(input.title, '反馈标题不能为空')
+    const description = normalizeRequiredText(input.description, '反馈描述不能为空')
+    const category = normalizeRequiredText(input.category, '反馈分类不能为空')
+    const submitterId = normalizeRequiredText(user.id, '提交人不能为空')
+    const images = normalizeImages(input.images)
     const product = await prisma.product.findUnique({
-      where: { id: input.productId, deletedAt: null },
+      where: { id: productId, deletedAt: null },
       select: { id: true },
     })
     if (!product) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, '产品不存在')
     }
 
-    if (input.skuId) {
+    if (skuId) {
       const sku = await prisma.productSKU.findUnique({
-        where: { id: input.skuId, deletedAt: null },
+        where: { id: skuId, deletedAt: null },
         select: { id: true, productId: true },
       })
 
-      if (!sku || sku.productId !== input.productId) {
+      if (!sku || sku.productId !== productId) {
         throw new AppError(ErrorCode.SKU_NOT_FOUND, 'SKU 不存在或不属于该产品')
       }
     }
@@ -55,14 +97,14 @@ class FeedbackWorkflowService {
 
       return tx.feedback.create({
         data: {
-          productId: input.productId,
-          skuId: input.skuId || null,
-          title: input.title,
-          description: input.description,
-          images: input.images || [],
-          category: input.category,
+          productId,
+          skuId,
+          title,
+          description,
+          images,
+          category,
           priority: input.priority || 'MEDIUM',
-          submitterId: user.id,
+          submitterId,
           assigneeId: assignee?.id || null,
         },
         include: {
@@ -89,6 +131,7 @@ class FeedbackWorkflowService {
   }
 
   async markAsResolved(id: string, resolution: string, user: FeedbackUserContext): Promise<FeedbackDTO> {
+    const normalizedResolution = normalizeRequiredText(resolution, '解决方案不能为空')
     const existing = await feedbackRepository.findByIdWithRelations(id)
     if (!existing) {
       throw new AppError(ErrorCode.FILE_NOT_FOUND, 'Feedback not found')
@@ -104,7 +147,7 @@ class FeedbackWorkflowService {
         where: { id },
         data: {
           status: 'RESOLVED',
-          resolution,
+          resolution: normalizedResolution,
           resolvedAt: new Date(),
         },
       })
@@ -118,7 +161,7 @@ class FeedbackWorkflowService {
           action: '解决反馈',
           metadata: {
             action: 'resolve',
-            resolution,
+            resolution: normalizedResolution,
           },
         },
       })
@@ -146,30 +189,25 @@ class FeedbackWorkflowService {
 
     switch (input.action) {
       case 'comment': {
-        if (!input.content) {
-          throw new AppError(ErrorCode.VALIDATION_FAILED, '评论内容不能为空')
-        }
+        const content = normalizeRequiredText(input.content, '评论内容不能为空')
         const updated = await addFeedbackComment(
           id,
           { id: user.id, name: user.name },
-          input.content
+          content
         )
         return toFeedbackDTO(updated)
       }
-      case 'resolve':
-        if (!input.resolution) {
-          throw new AppError(ErrorCode.VALIDATION_FAILED, '解决方案不能为空')
-        }
-        return this.markAsResolved(id, input.resolution, user)
+      case 'resolve': {
+        const resolution = normalizeRequiredText(input.resolution, '解决方案不能为空')
+        return this.markAsResolved(id, resolution, user)
+      }
       case 'close': {
         const updated = await closeFeedback(id, { id: user.id, name: user.name })
         return toFeedbackDTO(updated)
       }
       case 'reassign': {
-        if (!input.assigneeId) {
-          throw new AppError(ErrorCode.VALIDATION_FAILED, '新处理人不能为空')
-        }
-        const updated = await reassignFeedback(id, input.assigneeId, {
+        const assigneeId = normalizeRequiredText(input.assigneeId, '新处理人不能为空')
+        const updated = await reassignFeedback(id, assigneeId, {
           id: user.id,
           name: user.name,
         })
diff --git a/furniture-3d-system/src/server/services/hardware-matcher.runtime.ts b/furniture-3d-system/src/server/services/hardware-matcher.runtime.ts
index 4706edda..b9de55a5 100644
--- a/furniture-3d-system/src/server/services/hardware-matcher.runtime.ts
+++ b/furniture-3d-system/src/server/services/hardware-matcher.runtime.ts
@@ -5,6 +5,10 @@ import {
   type HardwareMatcherDataSource,
 } from '@/lib/hardware-matcher'
 
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
 const hardwareMatcherDataSource: HardwareMatcherDataSource = {
   async loadHardwareLibrary() {
     const hardwares = await prisma.hardware.findMany({
@@ -55,12 +59,14 @@ const hardwareMatcherDataSource: HardwareMatcherDataSource = {
     })
   },
   async saveMapping(input) {
+    const blockName = normalizeOptionalText(input.blockName)
+    const signatureHash = input.signatureHash.trim()
     await prisma.$transaction(async (tx) => {
-      if (input.blockName) {
+      if (blockName) {
         await tx.hardwareMapping.upsert({
-          where: { blockName: input.blockName },
+          where: { blockName },
           create: {
-            blockName: input.blockName,
+            blockName,
             hardwareId: input.hardwareId,
             createdBy: 'manual',
           },
@@ -72,9 +78,9 @@ const hardwareMatcherDataSource: HardwareMatcherDataSource = {
       }
 
       await tx.hardwareMapping.upsert({
-        where: { signatureHash: input.signatureHash },
+        where: { signatureHash },
         create: {
-          signatureHash: input.signatureHash,
+          signatureHash,
           hardwareId: input.hardwareId,
           createdBy: 'manual',
         },
diff --git a/furniture-3d-system/src/server/services/hardware-write-ops.ts b/furniture-3d-system/src/server/services/hardware-write-ops.ts
index c0104984..a3df27f7 100644
--- a/furniture-3d-system/src/server/services/hardware-write-ops.ts
+++ b/furniture-3d-system/src/server/services/hardware-write-ops.ts
@@ -4,12 +4,29 @@ import path from 'path'
 import { Prisma } from '@prisma/client'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import { calculateGLBGeometry } from '@/lib/glb-geometry'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { hardwareRepository } from '../repositories'
 import type { SyncHardwareInput, SyncHardwareResult } from './hardware.service.types'
 import { toNullableJsonInput } from './hardware-dto.mapper'
 
 type SyncStats = SyncHardwareResult['stats']
 
+function normalizeHardwareCode(value: string): string {
+  return normalizeCoreIdentity(value)
+}
+
+function normalizeRequiredText(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
 export async function uploadHardwareModelFile(
   buffer: Buffer,
   originalName: string,
@@ -66,8 +83,9 @@ async function upsertMappingInTransaction(
   hardwareId: string,
   dimensions?: { width: number; height: number; depth: number } | null
 ): Promise<boolean> {
+  const normalizedBlockName = normalizeRequiredText(blockName, '五金图块名')
   const existingBlockMapping = await tx.hardwareMapping.findUnique({
-    where: { blockName },
+    where: { blockName: normalizedBlockName },
   })
 
   if (existingBlockMapping) {
@@ -81,7 +99,7 @@ async function upsertMappingInTransaction(
   } else {
     await tx.hardwareMapping.create({
       data: {
-        blockName,
+        blockName: normalizedBlockName,
         hardwareId,
         createdBy: 'sync',
         usageCount: 1,
@@ -116,14 +134,15 @@ async function ensureCategories(
   categoryNames: string[],
   stats: SyncStats
 ): Promise<Map<string, { id: string }>> {
+  const normalizedCategoryNames = [...new Set(categoryNames.map((item) => normalizeRequiredText(item, '五金分类')))]
   const existingCategories = await tx.hardwareCategory.findMany({
-    where: { name: { in: categoryNames } },
+    where: { name: { in: normalizedCategoryNames } },
     select: { id: true, name: true },
   })
 
   const existingCategoryMap = new Map(existingCategories.map((category) => [category.name, category]))
 
-  for (const categoryName of categoryNames) {
+  for (const categoryName of normalizedCategoryNames) {
     if (!existingCategoryMap.has(categoryName)) {
       const newCategory = await tx.hardwareCategory.create({
         data: {
@@ -171,15 +190,25 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
     const categoryMap = await ensureCategories(tx, categoryNames, stats)
 
     for (const item of input.hardwares) {
+      const code = normalizeHardwareCode(item.code)
+      const categoryName = normalizeRequiredText(item.category, '五金分类')
       try {
-        const category = categoryMap.get(item.category)
-        if (!category) {
-          stats.errors.push(`分类 "${item.category}" 不存在`)
+        if (!code) {
+          stats.errors.push('五金件编码不能为空')
           stats.skipped++
           continue
         }
+        const category = categoryMap.get(categoryName)
+        if (!category) {
+          stats.errors.push(`分类 "${categoryName}" 不存在`)
+          stats.skipped++
+          continue
+        }
+        const name = normalizeRequiredText(item.name, '五金件名称')
 
-        const existing = await tx.hardware.findUnique({ where: { code: item.code } })
+        const existing = await tx.hardware.findUnique({
+          where: { code: normalizeCoreIdentity(code) },
+        })
 
         if (existing) {
           if (input.mode === 'create') {
@@ -190,7 +219,7 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
           await tx.hardware.update({
             where: { id: existing.id },
             data: {
-              name: item.name,
+              name,
               categoryId: category.id,
               specifications: toNullableJsonInput(item.specifications ?? existing.specifications),
               dimensions: toNullableJsonInput(item.dimensions ?? existing.dimensions),
@@ -200,10 +229,11 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
           })
           stats.updated++
 
-          if (input.createMappings && item.blockName) {
+          const blockName = normalizeOptionalText(item.blockName)
+          if (input.createMappings && blockName) {
             const createdSignatureMapping = await upsertMappingInTransaction(
               tx,
-              item.blockName,
+              blockName,
               existing.id,
               item.dimensions
             )
@@ -221,8 +251,8 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
 
         const newHardware = await tx.hardware.create({
           data: {
-            name: item.name,
-            code: item.code,
+            name,
+            code,
             categoryId: category.id,
             specifications: toNullableJsonInput(item.specifications ?? null),
             dimensions: toNullableJsonInput(item.dimensions ?? null),
@@ -235,9 +265,11 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
         stats.created++
 
         if (input.createMappings && item.blockName) {
+          const blockName = normalizeOptionalText(item.blockName)
+          if (!blockName) continue
           const createdSignatureMapping = await upsertMappingInTransaction(
             tx,
-            item.blockName,
+            blockName,
             newHardware.id,
             item.dimensions
           )
@@ -247,7 +279,7 @@ export async function syncHardwareData(input: SyncHardwareInput): Promise<SyncHa
         }
       } catch (error) {
         const message = error instanceof Error ? error.message : '未知错误'
-        stats.errors.push(`处理 "${item.code}" 失败: ${message}`)
+        stats.errors.push(`处理 "${code || item.code}" 失败: ${message}`)
         stats.skipped++
       }
     }
diff --git a/furniture-3d-system/src/server/services/hardware.service.container.ts b/furniture-3d-system/src/server/services/hardware.service.container.ts
index 77acb82a..5379eff4 100644
--- a/furniture-3d-system/src/server/services/hardware.service.container.ts
+++ b/furniture-3d-system/src/server/services/hardware.service.container.ts
@@ -40,6 +40,28 @@ import type {
   UpdateHardwareInput,
 } from './hardware.service.types'
 
+function normalizeHardwareCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+function normalizeRequiredText(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
+function assertPositiveFiniteNumber(value: number, fieldName: string): void {
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是大于 0 的有效数字`)
+  }
+}
+
 export type {
   CreateHardwareInput,
   CreateMappingInput,
@@ -107,7 +129,10 @@ class HardwareService {
   }
 
   async create(input: CreateHardwareInput): Promise<HardwareDTO & { message?: string }> {
-    const code = input.code.trim()
+    const code = normalizeHardwareCode(input.code)
+    if (!code) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '五金件编码不能为空')
+    }
     const codeExists = await hardwareRepository.codeExists(code)
     if (codeExists) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '五金件编码已存在')
@@ -138,7 +163,7 @@ class HardwareService {
     }
 
     const hardware = await hardwareRepository.createWithCategory({
-      name: input.name.trim(),
+      name: normalizeRequiredText(input.name, '五金件名称'),
       code,
       categoryId: input.categoryId,
       specifications: toNullableJsonInput(input.specifications),
@@ -177,7 +202,7 @@ class HardwareService {
     }
 
     const hardware = await hardwareRepository.updateWithCategory(id, {
-      name: input.name?.trim(),
+      name: input.name === undefined ? undefined : normalizeRequiredText(input.name, '五金件名称'),
       categoryId: input.categoryId,
       specifications: toNullableJsonInput(input.specifications),
       dimensions: toNullableJsonInput(input.dimensions),
@@ -227,7 +252,7 @@ class HardwareService {
     description?: string
     icon?: string
   }): Promise<HardwareCategoryDTO> {
-    const name = input.name.trim()
+    const name = normalizeRequiredText(input.name, '分类名称')
     const nameExists = await hardwareCategoryRepository.nameExists(name)
     if (nameExists) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '分类名称已存在')
@@ -237,8 +262,8 @@ class HardwareService {
 
     const category = await hardwareCategoryRepository.create({
       name,
-      description: input.description,
-      icon: input.icon,
+      description: normalizeOptionalText(input.description),
+      icon: normalizeOptionalText(input.icon),
       sortOrder: maxSortOrder + 1,
       isActive: true,
     })
@@ -293,7 +318,15 @@ class HardwareService {
       throw new AppError(ErrorCode.HARDWARE_NOT_FOUND, '五金件不存在')
     }
 
-    await saveHardwareMapping(input.blockName || null, input.signature, input.hardwareId)
+    const blockName = normalizeOptionalText(input.blockName)
+    assertPositiveFiniteNumber(input.signature.width, '五金尺寸宽度')
+    assertPositiveFiniteNumber(input.signature.height, '五金尺寸高度')
+    assertPositiveFiniteNumber(input.signature.depth, '五金尺寸深度')
+    if (input.signature.volume !== undefined && input.signature.volume !== null) {
+      assertPositiveFiniteNumber(input.signature.volume, '五金体积')
+    }
+
+    await saveHardwareMapping(blockName, input.signature, input.hardwareId)
 
     return {
       message: '映射关系已保存',
diff --git a/furniture-3d-system/src/server/services/hole-crud.service.ts b/furniture-3d-system/src/server/services/hole-crud.service.ts
index 085fc955..1cbaf35d 100644
--- a/furniture-3d-system/src/server/services/hole-crud.service.ts
+++ b/furniture-3d-system/src/server/services/hole-crud.service.ts
@@ -45,6 +45,8 @@ type ProductPermissionSnapshot = NonNullable<
   Awaited<ReturnType<typeof productRepository.findByIdForCollaborators>>
 >
 
+const HOLE_TYPES = new Set(['hinge', 'connector', 'shelf_pin', 'screw', 'dowel', 'cable', 'unknown'])
+
 class HoleCrudService {
   private cache = cacheService
 
@@ -193,8 +195,10 @@ class HoleCrudService {
     const product = await this.getProductForPermission(panel.productId)
     this.assertCanEditProduct(product, user, '您没有权限创建孔位')
 
-    if (input.hardwareId) {
-      const hardware = await hardwareRepository.findById(input.hardwareId)
+    const normalizedInput = this.normalizeCreateHoleInput(input)
+
+    if (normalizedInput.hardwareId) {
+      const hardware = await hardwareRepository.findById(normalizedInput.hardwareId)
       if (!hardware) {
         throw new AppError(ErrorCode.HARDWARE_NOT_FOUND, '五金件不存在')
       }
@@ -202,19 +206,19 @@ class HoleCrudService {
 
     const hole = await holeRepository.create({
       panel: { connect: { id: panelId } },
-      positionX: input.positionX,
-      positionY: input.positionY,
-      positionZ: input.positionZ,
-      diameter: input.diameter,
-      depth: input.depth,
-      normalX: input.normalX ?? 0,
-      normalY: input.normalY ?? 0,
-      normalZ: input.normalZ ?? 1,
-      holeType: input.holeType || null,
-      confidence: input.confidence ?? 1,
-      isManual: input.isManual ?? false,
-      groupId: input.groupId || null,
-      hardware: input.hardwareId ? { connect: { id: input.hardwareId } } : undefined,
+      positionX: normalizedInput.positionX,
+      positionY: normalizedInput.positionY,
+      positionZ: normalizedInput.positionZ,
+      diameter: normalizedInput.diameter,
+      depth: normalizedInput.depth,
+      normalX: normalizedInput.normalX ?? 0,
+      normalY: normalizedInput.normalY ?? 0,
+      normalZ: normalizedInput.normalZ ?? 1,
+      holeType: normalizedInput.holeType || null,
+      confidence: normalizedInput.confidence ?? 1,
+      isManual: normalizedInput.isManual ?? false,
+      groupId: normalizedInput.groupId || null,
+      hardware: normalizedInput.hardwareId ? { connect: { id: normalizedInput.hardwareId } } : undefined,
     })
 
     await this.invalidatePanelCache(panelId)
@@ -242,7 +246,7 @@ class HoleCrudService {
     const product = await this.getProductForPermission(panel.productId)
     this.assertCanEditProduct(product, user, '您没有权限批量创建孔位')
 
-    const data = holes.map((input) => ({
+    const data = holes.map((input) => this.normalizeCreateHoleInput(input)).map((input) => ({
       panelId,
       positionX: input.positionX,
       positionY: input.positionY,
@@ -280,30 +284,32 @@ class HoleCrudService {
     const product = await this.getProductForPermission(existing.panel.productId)
     this.assertCanEditProduct(product, user, '您没有权限编辑该孔位')
 
-    if (input.hardwareId) {
-      const hardware = await hardwareRepository.findById(input.hardwareId)
+    const normalizedInput = this.normalizeUpdateHoleInput(input)
+
+    if (normalizedInput.hardwareId) {
+      const hardware = await hardwareRepository.findById(normalizedInput.hardwareId)
       if (!hardware) {
         throw new AppError(ErrorCode.HARDWARE_NOT_FOUND, '五金件不存在')
       }
     }
 
     const updateData: Prisma.HoleUpdateInput = {}
-    if (input.positionX !== undefined) updateData.positionX = input.positionX
-    if (input.positionY !== undefined) updateData.positionY = input.positionY
-    if (input.positionZ !== undefined) updateData.positionZ = input.positionZ
-    if (input.diameter !== undefined) updateData.diameter = input.diameter
-    if (input.depth !== undefined) updateData.depth = input.depth
-    if (input.normalX !== undefined) updateData.normalX = input.normalX
-    if (input.normalY !== undefined) updateData.normalY = input.normalY
-    if (input.normalZ !== undefined) updateData.normalZ = input.normalZ
-    if (input.holeType !== undefined) updateData.holeType = input.holeType
-    if (input.confidence !== undefined) updateData.confidence = input.confidence
-    if (input.isManual !== undefined) updateData.isManual = input.isManual
-    if (input.groupId !== undefined) updateData.groupId = input.groupId
+    if (normalizedInput.positionX !== undefined) updateData.positionX = normalizedInput.positionX
+    if (normalizedInput.positionY !== undefined) updateData.positionY = normalizedInput.positionY
+    if (normalizedInput.positionZ !== undefined) updateData.positionZ = normalizedInput.positionZ
+    if (normalizedInput.diameter !== undefined) updateData.diameter = normalizedInput.diameter
+    if (normalizedInput.depth !== undefined) updateData.depth = normalizedInput.depth
+    if (normalizedInput.normalX !== undefined) updateData.normalX = normalizedInput.normalX
+    if (normalizedInput.normalY !== undefined) updateData.normalY = normalizedInput.normalY
+    if (normalizedInput.normalZ !== undefined) updateData.normalZ = normalizedInput.normalZ
+    if (input.holeType !== undefined) updateData.holeType = normalizedInput.holeType
+    if (normalizedInput.confidence !== undefined) updateData.confidence = normalizedInput.confidence
+    if (normalizedInput.isManual !== undefined) updateData.isManual = normalizedInput.isManual
+    if (input.groupId !== undefined) updateData.groupId = normalizedInput.groupId
 
-    if (input.hardwareId !== undefined) {
-      updateData.hardware = input.hardwareId
-        ? { connect: { id: input.hardwareId } }
+    if (normalizedInput.hardwareId !== undefined) {
+      updateData.hardware = normalizedInput.hardwareId
+        ? { connect: { id: normalizedInput.hardwareId } }
         : { disconnect: true }
     }
 
@@ -538,6 +544,105 @@ class HoleCrudService {
     return ctx.user
   }
 
+  private normalizeCreateHoleInput(input: CreateHoleInput): CreateHoleInput {
+    const normalX = this.normalizeFiniteNumber(input.normalX ?? 0, '孔轴 X')
+    const normalY = this.normalizeFiniteNumber(input.normalY ?? 0, '孔轴 Y')
+    const normalZ = this.normalizeFiniteNumber(input.normalZ ?? 1, '孔轴 Z')
+    this.assertNonZeroNormal(normalX, normalY, normalZ)
+
+    return {
+      ...input,
+      positionX: this.normalizeFiniteNumber(input.positionX, '孔位 X 坐标'),
+      positionY: this.normalizeFiniteNumber(input.positionY, '孔位 Y 坐标'),
+      positionZ: this.normalizeFiniteNumber(input.positionZ, '孔位 Z 坐标'),
+      diameter: this.normalizePositiveNumber(input.diameter, '孔径'),
+      depth: this.normalizeNonNegativeNumber(input.depth, '孔深'),
+      normalX,
+      normalY,
+      normalZ,
+      holeType: this.normalizeHoleType(input.holeType) ?? undefined,
+      confidence:
+        input.confidence === undefined
+          ? undefined
+          : this.normalizeConfidence(input.confidence),
+      groupId: this.normalizeOptionalText(input.groupId) ?? undefined,
+      hardwareId: this.normalizeOptionalText(input.hardwareId) ?? undefined,
+    }
+  }
+
+  private normalizeUpdateHoleInput(input: UpdateHoleInput): UpdateHoleInput {
+    const normalX = input.normalX === undefined ? undefined : this.normalizeFiniteNumber(input.normalX, '孔轴 X')
+    const normalY = input.normalY === undefined ? undefined : this.normalizeFiniteNumber(input.normalY, '孔轴 Y')
+    const normalZ = input.normalZ === undefined ? undefined : this.normalizeFiniteNumber(input.normalZ, '孔轴 Z')
+    if (normalX !== undefined || normalY !== undefined || normalZ !== undefined) {
+      this.assertNonZeroNormal(normalX ?? 0, normalY ?? 0, normalZ ?? 1)
+    }
+
+    return {
+      ...input,
+      ...(input.positionX !== undefined ? { positionX: this.normalizeFiniteNumber(input.positionX, '孔位 X 坐标') } : {}),
+      ...(input.positionY !== undefined ? { positionY: this.normalizeFiniteNumber(input.positionY, '孔位 Y 坐标') } : {}),
+      ...(input.positionZ !== undefined ? { positionZ: this.normalizeFiniteNumber(input.positionZ, '孔位 Z 坐标') } : {}),
+      ...(input.diameter !== undefined ? { diameter: this.normalizePositiveNumber(input.diameter, '孔径') } : {}),
+      ...(input.depth !== undefined ? { depth: this.normalizeNonNegativeNumber(input.depth, '孔深') } : {}),
+      ...(normalX !== undefined ? { normalX } : {}),
+      ...(normalY !== undefined ? { normalY } : {}),
+      ...(normalZ !== undefined ? { normalZ } : {}),
+      ...(input.holeType !== undefined ? { holeType: this.normalizeHoleType(input.holeType) } : {}),
+      ...(input.confidence !== undefined ? { confidence: this.normalizeConfidence(input.confidence) } : {}),
+      ...(input.groupId !== undefined ? { groupId: this.normalizeOptionalText(input.groupId) } : {}),
+      ...(input.hardwareId !== undefined ? { hardwareId: this.normalizeOptionalText(input.hardwareId) } : {}),
+    }
+  }
+
+  private normalizeFiniteNumber(value: number, fieldName: string): number {
+    if (!Number.isFinite(value)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是有效数字`)
+    }
+    return value
+  }
+
+  private normalizePositiveNumber(value: number, fieldName: string): number {
+    if (!Number.isFinite(value) || value <= 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须大于 0`)
+    }
+    return value
+  }
+
+  private normalizeNonNegativeNumber(value: number, fieldName: string): number {
+    if (!Number.isFinite(value) || value < 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}不能为负数`)
+    }
+    return value
+  }
+
+  private normalizeConfidence(value: number): number {
+    if (!Number.isFinite(value) || value < 0 || value > 1) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '孔位置信度必须在 0 到 1 之间')
+    }
+    return value
+  }
+
+  private assertNonZeroNormal(normalX: number, normalY: number, normalZ: number): void {
+    if (normalX === 0 && normalY === 0 && normalZ === 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '孔轴法线不能为零向量')
+    }
+  }
+
+  private normalizeHoleType(value: string | null | undefined): string | null {
+    const normalized = value?.trim() ?? ''
+    if (!normalized) return null
+    if (!HOLE_TYPES.has(normalized)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '孔位类型无效')
+    }
+    return normalized
+  }
+
+  private normalizeOptionalText(value: string | null | undefined): string | null {
+    const normalized = value?.trim() ?? ''
+    return normalized || null
+  }
+
   private async getProductForPermission(productId: string): Promise<ProductPermissionSnapshot> {
     const product = await productRepository.findByIdForCollaborators(productId)
     if (!product || product.deletedAt) {
diff --git a/furniture-3d-system/src/server/services/hole.service.types.ts b/furniture-3d-system/src/server/services/hole.service.types.ts
index 031d5590..2dfc77c2 100644
--- a/furniture-3d-system/src/server/services/hole.service.types.ts
+++ b/furniture-3d-system/src/server/services/hole.service.types.ts
@@ -64,7 +64,7 @@ export interface CreateHoleInput {
   normalX?: number
   normalY?: number
   normalZ?: number
-  holeType?: string
+  holeType?: string | null
   confidence?: number
   isManual?: boolean
   groupId?: string
@@ -80,7 +80,7 @@ export interface UpdateHoleInput {
   normalX?: number
   normalY?: number
   normalZ?: number
-  holeType?: string
+  holeType?: string | null
   confidence?: number
   isManual?: boolean
   groupId?: string | null
diff --git a/furniture-3d-system/src/server/services/index.ts b/furniture-3d-system/src/server/services/index.ts
index 7464d463..035fde8b 100644
--- a/furniture-3d-system/src/server/services/index.ts
+++ b/furniture-3d-system/src/server/services/index.ts
@@ -192,6 +192,7 @@ export type {
   ImportAssetCadInput,
   SupportedAssetImportType,
 } from './asset-cad-import.service'
+export { productPatentService, ProductPatentService } from './product-patent.service'
 
 export { draftGroupService, DraftGroupService } from './draft-group.service'
 export type {
@@ -233,6 +234,21 @@ export {
   intakeNonIntegratedProductService,
   IntakeNonIntegratedProductService,
 } from './intake-non-integrated-product.service'
+export {
+  intakeReferenceLibraryService,
+  IntakeReferenceLibraryService,
+  INTAKE_REFERENCE_LIBRARY_TYPES,
+} from './intake-reference-library.service'
+export type {
+  IntakeReferenceLibraryItemDTO,
+  IntakeReferenceLibraryType,
+  ReplaceIntakeReferenceLibraryInput,
+} from './intake-reference-library.service'
+export {
+  spuNumberReservationService,
+  SpuNumberReservationService,
+} from './spu-number-reservation.service'
+export type { SpuNumberReservation } from './spu-number-reservation.service'
 
 export { warehouseService, WarehouseService } from './warehouse.service'
 export type {
diff --git a/furniture-3d-system/src/server/services/intake-contract-docx.service.ts b/furniture-3d-system/src/server/services/intake-contract-docx.service.ts
index 9e27a275..9b465e79 100644
--- a/furniture-3d-system/src/server/services/intake-contract-docx.service.ts
+++ b/furniture-3d-system/src/server/services/intake-contract-docx.service.ts
@@ -10,6 +10,7 @@ import type {
   NonIntegratedSkuItem,
 } from "@/app/intake/non-integrated/nonIntegratedStorage";
 import { AppError, ErrorCode } from "@/server/core/errors";
+import { assertNonIntegratedProductMasterDataReadyForFormalUse } from "./non-integrated-sku-quality";
 
 export type IntakeProductFactoryContractType =
   | "prepaid"
@@ -145,6 +146,10 @@ export async function createIntakeProductFactoryContractDocx({
   batch: IntakeProductFactoryContractBatch;
 }) {
   const config = CONTRACT_TEMPLATE_CONFIG[contractType];
+  assertNonIntegratedProductMasterDataReadyForFormalUse(product, {
+    batch,
+    usageLabel: "产品定厂合同",
+  });
   const rows = resolveContractRows(product, batch);
 
   if (rows.length === 0) {
diff --git a/furniture-3d-system/src/server/services/intake-node-permission-settings.service.ts b/furniture-3d-system/src/server/services/intake-node-permission-settings.service.ts
index c4c821c6..31f33c89 100644
--- a/furniture-3d-system/src/server/services/intake-node-permission-settings.service.ts
+++ b/furniture-3d-system/src/server/services/intake-node-permission-settings.service.ts
@@ -15,6 +15,15 @@ type IntakeNodePermissionOverrideRow = {
   enabled: boolean;
 };
 
+type IntakeNodePermissionOverrideSchemaProbeRow = {
+  table_exists: boolean;
+  unique_index_exists: boolean;
+  target_index_exists: boolean;
+  subject_index_exists: boolean;
+  identity_constraint_exists: boolean;
+  audit_constraint_exists: boolean;
+};
+
 const ADMIN_ROLES = new Set(["ADMIN", "SUPER_ADMIN"]);
 const INTAKE_NODE_PERMISSION_SETTINGS_LOCK_KEY = 2026052311;
 
@@ -31,45 +40,51 @@ function buildOverrideKey(row: IntakeNodePermissionOverrideRow) {
 }
 
 class IntakeNodePermissionSettingsService {
-  private ensureTablePromise: Promise<void> | null = null;
+  private ensureSchemaReadyPromise: Promise<void> | null = null;
 
-  private async ensureTable() {
-    if (!this.ensureTablePromise) {
-      this.ensureTablePromise = (async () => {
-        await prisma.$executeRawUnsafe(`
-          CREATE TABLE IF NOT EXISTS "IntakeNodePermissionOverride" (
-            "id" TEXT NOT NULL,
-            "targetKey" TEXT NOT NULL,
-            "subjectKey" TEXT NOT NULL,
-            "action" TEXT NOT NULL,
-            "enabled" BOOLEAN NOT NULL DEFAULT true,
-            "createdBy" TEXT,
-            "updatedBy" TEXT,
-            "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-            "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-            CONSTRAINT "IntakeNodePermissionOverride_pkey" PRIMARY KEY ("id")
-          )
-        `);
-        await prisma.$executeRawUnsafe(`
-          CREATE UNIQUE INDEX IF NOT EXISTS "IntakeNodePermissionOverride_targetKey_subjectKey_action_key"
-          ON "IntakeNodePermissionOverride"("targetKey", "subjectKey", "action")
-        `);
-        await prisma.$executeRawUnsafe(`
-          CREATE INDEX IF NOT EXISTS "IntakeNodePermissionOverride_targetKey_idx"
-          ON "IntakeNodePermissionOverride"("targetKey")
-        `);
-        await prisma.$executeRawUnsafe(`
-          CREATE INDEX IF NOT EXISTS "IntakeNodePermissionOverride_subjectKey_idx"
-          ON "IntakeNodePermissionOverride"("subjectKey")
-        `);
+  private async ensureSchemaReady() {
+    if (!this.ensureSchemaReadyPromise) {
+      this.ensureSchemaReadyPromise = (async () => {
+        const [schema] =
+          await prisma.$queryRaw<IntakeNodePermissionOverrideSchemaProbeRow[]>`
+            SELECT
+              to_regclass('public."IntakeNodePermissionOverride"') IS NOT NULL AS table_exists,
+              to_regclass('public."IntakeNodePermissionOverride_targetKey_subjectKey_action_key"') IS NOT NULL AS unique_index_exists,
+              to_regclass('public."IntakeNodePermissionOverride_targetKey_idx"') IS NOT NULL AS target_index_exists,
+              to_regclass('public."IntakeNodePermissionOverride_subjectKey_idx"') IS NOT NULL AS subject_index_exists,
+              EXISTS (
+                SELECT 1
+                FROM pg_constraint
+                WHERE conname = 'IntakeNodePermissionOverride_identity_valid'
+              ) AS identity_constraint_exists,
+              EXISTS (
+                SELECT 1
+                FROM pg_constraint
+                WHERE conname = 'IntakeNodePermissionOverride_audit_text_not_blank'
+              ) AS audit_constraint_exists
+          `;
+
+        if (
+          !schema?.table_exists ||
+          !schema.unique_index_exists ||
+          !schema.target_index_exists ||
+          !schema.subject_index_exists ||
+          !schema.identity_constraint_exists ||
+          !schema.audit_constraint_exists
+        ) {
+          throw new AppError(
+            ErrorCode.SYSTEM_DATABASE,
+            "产品资料节点权限表结构未完成迁移，请先执行数据库迁移和主数据 strict 巡检",
+          );
+        }
       })();
     }
 
-    await this.ensureTablePromise;
+    await this.ensureSchemaReadyPromise;
   }
 
   async getSettings() {
-    await this.ensureTable();
+    await this.ensureSchemaReady();
 
     const rows = await prisma.$queryRaw<IntakeNodePermissionOverrideRow[]>`
       SELECT "targetKey", "subjectKey", "action", "enabled"
@@ -90,7 +105,7 @@ class IntakeNodePermissionSettingsService {
 
   async updateSettings(input: unknown, user: AuthUser) {
     assertCanManageSettings(user);
-    await this.ensureTable();
+    await this.ensureSchemaReady();
 
     const inputRecord =
       input && typeof input === "object" && !Array.isArray(input)
diff --git a/furniture-3d-system/src/server/services/intake-non-integrated-product.service.ts b/furniture-3d-system/src/server/services/intake-non-integrated-product.service.ts
index 08b46d83..010116c0 100644
--- a/furniture-3d-system/src/server/services/intake-non-integrated-product.service.ts
+++ b/furniture-3d-system/src/server/services/intake-non-integrated-product.service.ts
@@ -2,19 +2,24 @@ import { randomUUID } from 'crypto'
 import { Prisma } from '@prisma/client'
 import {
   NON_INTEGRATED_BASIC_INFO_WORKSPACE_CATEGORY,
+  NON_INTEGRATED_DEFAULT_BRAND,
   NON_INTEGRATED_DUPLICATE_SPU_MESSAGE,
   NON_INTEGRATED_WORKFLOW_NODE_CATEGORIES,
   applyBrandPrefixToNonIntegratedCode,
+  buildNonIntegratedProductId,
   createDefaultDocumentWorkspaceConfirmations as createSharedDocumentWorkspaceConfirmations,
+  normalizeNonIntegratedBrand,
   normalizeNonIntegratedProductRecord,
   resolveNonIntegratedPersistedSpu,
   stripNonIntegratedBrandPrefix,
   type NonIntegratedDocumentWorkspaceApprovalMap,
   type NonIntegratedDocumentWorkspaceConfirmationMap,
   type NonIntegratedProductRecord,
+  type NonIntegratedSkuItem,
   type NonIntegratedUploadFile,
 } from '@/app/intake/non-integrated/nonIntegratedStorage'
 import { normalizeNonIntegratedAssetUrl } from '@/app/intake/non-integrated/nonIntegratedAssetUrl'
+import { prisma } from '@/lib/prisma'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { AuthUser } from '@/server/core/types'
 import {
@@ -25,11 +30,16 @@ import {
   draftGroupRepository,
   preSkuRepository,
 } from '../repositories/draft-group.repository'
+import {
+  assertNonIntegratedProductMasterDataReadyForFormalUse,
+  resolveNonIntegratedSkuQuality,
+} from './non-integrated-sku-quality'
 import {
   DEFAULT_NON_INTEGRATED_VISIBILITY,
   intakeNonIntegratedScopeService,
 } from './intake-non-integrated-scope.service'
 import { skuQualityInspectionService } from './sku-quality-inspection.service'
+import { spuNumberReservationService } from './spu-number-reservation.service'
 
 type NonIntegratedUploadPresentationPreview = {
   pdfUrl: string
@@ -96,7 +106,7 @@ type SavePresentationPreviewInput = SharedUploadFileSelector & {
 
 type IntakeNonIntegratedRecord = NonNullable<
   Awaited<ReturnType<IntakeNonIntegratedProductRepositoryClass['findActiveById']>>
->
+> | NonNullable<Awaited<ReturnType<IntakeNonIntegratedProductRepositoryClass['findById']>>>
 
 type NonIntegratedWorkspaceCategoryKey = keyof NonIntegratedDocumentWorkspaceConfirmationMap
 
@@ -120,8 +130,12 @@ type RemovedSourceSkuDraftGroupTarget = {
 
 type SaveNonIntegratedProductOptions = {
   workspaceCategory?: string | null
+  formalSpuAssignmentProductCategory?: string | null
 }
 
+type StructuredNonIntegratedSkuItemCreateInput =
+  Prisma.IntakeNonIntegratedSkuItemCreateManyProductInput
+
 export type IntakeNonIntegratedProductListParams = {
   page?: number
   pageSize?: number
@@ -249,6 +263,81 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
 
+function readText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizeSkuVersionNo(value: unknown) {
+  const normalizedValue = readText(value).toUpperCase()
+  if (!normalizedValue) return ''
+
+  const numericMatch = normalizedValue.match(/^V?(\d+)$/)
+  if (!numericMatch) return normalizedValue
+
+  const numericValue = Number.parseInt(numericMatch[1], 10)
+  if (!Number.isFinite(numericValue) || numericValue <= 0) return ''
+
+  return `V${String(numericValue).padStart(2, '0')}`
+}
+
+function buildAutoSkuCode(spu: string, sequence: unknown, packageSuffix: unknown) {
+  const normalizedSpu = spu.trim().toUpperCase()
+  if (!normalizedSpu) return ''
+
+  const numericSequence =
+    typeof sequence === 'number' ? sequence : Number.parseInt(String(sequence ?? ''), 10)
+  const safeSequence =
+    Number.isFinite(numericSequence) && numericSequence > 0 ? Math.trunc(numericSequence) : 1
+  const skuCode = `${normalizedSpu}${String(safeSequence).padStart(2, '0')}`
+  return `${skuCode}${readText(packageSuffix).toUpperCase()}`
+}
+
+function buildAutoBarcode(skuCode: string, manufacturerCode: unknown, versionNo: string) {
+  const normalizedSkuCode = skuCode.trim().toUpperCase()
+  if (!normalizedSkuCode) return ''
+
+  return `${normalizedSkuCode}${readText(manufacturerCode).toUpperCase()}${versionNo}`
+}
+
+function normalizePreservedNonIntegratedBrand(value: string | null | undefined) {
+  return readText(value) || NON_INTEGRATED_DEFAULT_BRAND
+}
+
+function normalizePreservedNonIntegratedSpu(record: { id: string; spu: string }) {
+  return readText(record.spu).toUpperCase() || record.id.trim().toUpperCase()
+}
+
+function shouldPreserveFormalSkuCode(skuCode: string, formalSpu: string) {
+  const normalizedSkuCode = skuCode.trim().toUpperCase()
+  const normalizedFormalSpu = formalSpu.trim().toUpperCase()
+  return Boolean(normalizedSkuCode && normalizedFormalSpu && normalizedSkuCode.startsWith(normalizedFormalSpu))
+}
+
+function assignFormalSpuToSkuItems(value: unknown, formalSpu: string) {
+  if (!Array.isArray(value)) return value
+
+  return value.map((item, index) => {
+    if (!isRecord(item)) return item
+
+    const versionNo = normalizeSkuVersionNo(item.versionNo) || 'V01'
+    const existingSkuCode = readText(item.skuCode).toUpperCase()
+    const skuCode = shouldPreserveFormalSkuCode(existingSkuCode, formalSpu)
+      ? existingSkuCode
+      : buildAutoSkuCode(formalSpu, item.skuSequence ?? index + 1, item.packageSuffix)
+    const existingBarcode = readText(item.barcode).toUpperCase()
+    const barcode = existingBarcode && existingBarcode.startsWith(skuCode)
+      ? existingBarcode
+      : buildAutoBarcode(skuCode, item.manufacturerCode, versionNo)
+
+    return {
+      ...item,
+      skuCode,
+      barcode,
+      versionNo,
+    }
+  })
+}
+
 function createDefaultDocumentWorkspaceConfirmations(
   value = true,
 ): NonIntegratedDocumentWorkspaceConfirmationMap {
@@ -1351,17 +1440,70 @@ function canTreatPlanningLayoutSaveAsNoop(
   )
 }
 
+function canTreatStockReadonlyCompatibilitySaveAsNoop(
+  isStockProduct: boolean,
+  changedCategories: Set<NonIntegratedWorkspaceCategoryKey>,
+  writableCategories: Set<NonIntegratedWorkspaceCategoryKey>,
+) {
+  if (!isStockProduct || !writableCategories.has(PLANNING_LAYOUT_WORKSPACE_CATEGORY)) {
+    return false
+  }
+
+  return Array.from(changedCategories).every((category) =>
+    category === NON_INTEGRATED_BASIC_INFO_WORKSPACE_CATEGORY ||
+    category === OPENING_REFERENCE_WORKSPACE_CATEGORY,
+  )
+}
+
 function throwNonIntegratedWriteDenied(): never {
   throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '没有权限编辑这条非集成产品记录')
 }
 
-function isStockRecordPayload(record: IntakeNonIntegratedRecord) {
+function applyPersistedRecordIdentity(
+  product: SharedNonIntegratedProductRecord | null,
+  record: IntakeNonIntegratedRecord,
+) {
+  if (!product) return product
+
+  const persistedSpu = readText(record.spu).toUpperCase()
+  const persistedBrand = normalizePreservedNonIntegratedBrand(record.brand)
+
+  return {
+    ...product,
+    id: record.id,
+    spu: persistedSpu || product.spu,
+    productCode: persistedSpu || product.productCode,
+    brand: persistedBrand,
+    designer: readText(record.designer) || product.designer,
+    operator: readText(record.operator) || product.operator,
+    purchaser: readText(record.purchaser) || product.purchaser,
+  }
+}
+
+function buildStructuredProductRecordFromRecord(record: IntakeNonIntegratedRecord) {
+  const source = record as IntakeNonIntegratedRecord & StructuredHydrationSource
   const product = buildHydratedProductRecord(record.payload, {
     createdAt: record.createdAt,
     updatedAt: record.updatedAt,
     createdBy: record.createdBy,
     updatedBy: record.updatedBy,
   })
+  const hasStructuredSource =
+    Boolean(source.profile) ||
+    (Array.isArray(source.skuItems) && source.skuItems.length > 0)
+
+  const hydratedProduct = hasStructuredSource
+    ? applyStructuredProductData(product, {
+        profile: source.profile ?? null,
+        skuItems: source.skuItems ?? null,
+      })
+    : product
+
+  return applyPersistedRecordIdentity(hydratedProduct, record)
+}
+
+function isStockRecord(record: IntakeNonIntegratedRecord) {
+  const product = buildStructuredProductRecordFromRecord(record)
 
   return product ? isStockNonIntegratedProduct(product) : false
 }
@@ -1370,7 +1512,7 @@ function assertStockWorkspaceWriteCategory(
   record: IntakeNonIntegratedRecord,
   category?: string | null,
 ) {
-  if (!isStockRecordPayload(record)) return
+  if (!isStockRecord(record)) return
 
   const resolvedCategory = toDocumentWorkspaceCategory(category ?? undefined)
   if (resolvedCategory === PLANNING_LAYOUT_WORKSPACE_CATEGORY) return
@@ -1384,12 +1526,7 @@ async function prepareProductForPermittedWrite(
   nextProduct: SharedNonIntegratedProductRecord,
   options: SaveNonIntegratedProductOptions = {},
 ): Promise<PermittedProductWriteResult> {
-  const existingProduct = buildHydratedProductRecord(record.payload, {
-    createdAt: record.createdAt,
-    updatedAt: record.updatedAt,
-    createdBy: record.createdBy,
-    updatedBy: record.updatedBy,
-  })
+  const existingProduct = buildStructuredProductRecordFromRecord(record)
 
   if (!existingProduct) {
     await intakeNonIntegratedScopeService.assertCanWriteRecord(record, user)
@@ -1466,6 +1603,11 @@ async function prepareProductForPermittedWrite(
       canTreatPlanningLayoutSaveAsNoop(
         options.workspaceCategory,
         writableCategories,
+      ) ||
+      canTreatStockReadonlyCompatibilitySaveAsNoop(
+        isStockProduct,
+        changedCategories,
+        writableCategories,
       )
     ) {
       return {
@@ -1712,6 +1854,181 @@ function buildHydratedProductRecord(
   })
 }
 
+type StructuredHydrationSource = {
+  profile?: Record<string, unknown> | null
+  skuItems?: Array<Record<string, unknown>> | null
+}
+
+function readStructuredText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function readStructuredNumber(value: unknown, fallback: number) {
+  return typeof value === 'number' && Number.isFinite(value) ? Math.trunc(value) : fallback
+}
+
+function assignStructuredField<T extends Record<string, unknown>>(
+  target: T,
+  key: keyof T & string,
+  source: Record<string, unknown>,
+  sourceKey: string = key,
+) {
+  if (!Object.prototype.hasOwnProperty.call(source, sourceKey)) return
+  target[key] = readStructuredText(source[sourceKey]) as T[typeof key]
+}
+
+function buildStructuredSkuItemOverlay(
+  product: SharedNonIntegratedProductRecord,
+  skuRows: Array<Record<string, unknown>>,
+): NonIntegratedSkuItem[] {
+  if (skuRows.length === 0) return product.skuItems
+
+  const legacyBySkuItemId = new Map(product.skuItems.map((item) => [item.id, item]))
+  const legacyByBarcode = new Map(
+    product.skuItems
+      .filter((item) => item.barcode.trim())
+      .map((item) => [item.barcode.trim(), item]),
+  )
+
+  return skuRows
+    .slice()
+    .sort((left, right) => readStructuredNumber(left.sortOrder, 0) - readStructuredNumber(right.sortOrder, 0))
+    .map((row, index) => {
+      const skuItemId = readStructuredText(row.skuItemId) || `sku-${index + 1}`
+      const barcode = readStructuredText(row.barcode)
+      const legacy = legacyBySkuItemId.get(skuItemId) ?? legacyByBarcode.get(barcode)
+
+      return {
+        id: skuItemId,
+        skuSequence: readStructuredNumber(row.skuSequence, legacy?.skuSequence ?? index + 1),
+        batchNo: readStructuredNumber(row.batchNo, legacy?.batchNo ?? 1),
+        packageGroupId: readStructuredText(row.packageGroupId) || legacy?.packageGroupId || '',
+        packageSuffix: legacy?.packageSuffix ?? '',
+        image: readStructuredText(row.image) || legacy?.image || '',
+        imageName: readStructuredText(row.imageName) || legacy?.imageName || '',
+        model: readStructuredText(row.model),
+        skuCode: readStructuredText(row.skuCode),
+        setCount: legacy?.setCount || '1',
+        specName: readStructuredText(row.specName),
+        barcode,
+        size: readStructuredText(row.size),
+        color: readStructuredText(row.color),
+        material: readStructuredText(row.material),
+        boardMaterialType: readStructuredText(row.boardMaterialType) || legacy?.boardMaterialType || '',
+        versionNo: readStructuredText(row.versionNo) || 'V01',
+        attributeCode: readStructuredText(row.attributeCode),
+        drawingId: readStructuredText(row.drawingId),
+        installMethod: readStructuredText(row.installMethod),
+        executeStandard: readStructuredText(row.executeStandard),
+        nationalStandardCompliant: readStructuredText(row.nationalStandardCompliant),
+        manufacturer: readStructuredText(row.manufacturer),
+        manufacturerCode: readStructuredText(row.manufacturerCode),
+        salesStatus: readStructuredText(row.salesStatus),
+        tagMaterial: readStructuredText(row.tagMaterial),
+        model3dFileName: legacy?.model3dFileName ?? '',
+        model3dDataUrl: readStructuredText(row.model3dDataUrl) || legacy?.model3dDataUrl || '',
+        model3dNodeOffsets: legacy?.model3dNodeOffsets,
+        model3dNodeRotations: legacy?.model3dNodeRotations,
+        model3dNodeMaterialIds: legacy?.model3dNodeMaterialIds,
+        model3dUvConfig: legacy?.model3dUvConfig,
+        componentDetails: legacy?.componentDetails ?? [],
+        holePoints: legacy?.holePoints ?? [],
+        source: readStructuredText(row.source),
+        sourceTable: readStructuredText(row.sourceTable),
+        sourceSkuId: readStructuredText(row.sourceSkuId),
+        contentLocked: row.contentLocked === true,
+      }
+    })
+}
+
+function applyStructuredProductData(
+  product: SharedNonIntegratedProductRecord | null,
+  source?: StructuredHydrationSource | null,
+) {
+  if (!product || !source) return product
+
+  const profile = source.profile
+  const nextProduct: SharedNonIntegratedProductRecord = {
+    ...product,
+    openingReference: {
+      ...product.openingReference,
+    },
+  }
+
+  if (profile) {
+    assignStructuredField(nextProduct.openingReference, 'productName', profile)
+    assignStructuredField(nextProduct.openingReference, 'productImage', profile, 'productImageUrl')
+    assignStructuredField(nextProduct.openingReference, 'productCategory', profile)
+    assignStructuredField(nextProduct.openingReference, 'salesCategory', profile)
+    assignStructuredField(nextProduct.openingReference, 'currentStage', profile, 'productStatus')
+    assignStructuredField(nextProduct.openingReference, 'year', profile, 'productYear')
+    assignStructuredField(nextProduct.openingReference, 'planningOwner', profile, 'productPlanning')
+    assignStructuredField(nextProduct.openingReference, 'structureDesigner', profile)
+
+    assignStructuredField(nextProduct, 'productDevelopmentKind', profile)
+    assignStructuredField(nextProduct, 'productCategory', profile)
+    assignStructuredField(nextProduct, 'salesCategory', profile)
+    assignStructuredField(nextProduct, 'year', profile, 'productYear')
+    assignStructuredField(nextProduct, 'goodsType', profile)
+    assignStructuredField(nextProduct, 'materialType', profile)
+    assignStructuredField(nextProduct, 'productionType', profile)
+    assignStructuredField(nextProduct, 'size', profile)
+    assignStructuredField(nextProduct, 'color', profile)
+    assignStructuredField(nextProduct, 'tagMaterial', profile)
+    assignStructuredField(nextProduct, 'priceBand', profile)
+    assignStructuredField(nextProduct, 'demandFlowNo', profile)
+    assignStructuredField(nextProduct, 'processTemplate', profile)
+    assignStructuredField(nextProduct, 'productPlanning', profile)
+    assignStructuredField(nextProduct, 'brandPlanning', profile)
+    assignStructuredField(nextProduct, 'demandDepartment', profile)
+    assignStructuredField(nextProduct, 'spuOwner', profile)
+    assignStructuredField(nextProduct, 'operationsOwner', profile)
+    assignStructuredField(nextProduct, 'purchaseOwner', profile)
+    assignStructuredField(nextProduct, 'visualDirector', profile)
+    assignStructuredField(nextProduct, 'visualPlanning', profile)
+
+    const imageUrl = readStructuredText(profile.productImageUrl)
+    if (Object.prototype.hasOwnProperty.call(profile, 'productImageUrl')) {
+      nextProduct.previewImage = imageUrl
+    }
+
+    const stockMetadataEntries = {
+      sourceSpu: profile.sourceSpu,
+      sourceSkuId: profile.sourceSkuId,
+      sourceCategory: profile.sourceCategory,
+      sourceItemType: profile.sourceItemType,
+      sourceSalesStatus: profile.sourceSalesStatus,
+      sourceEnabled: profile.sourceEnabled,
+      sourceStockDisabled: profile.sourceStockDisabled,
+    }
+    const stockMetadataKeys = Object.keys(stockMetadataEntries)
+    const baseMetadata = isRecord(nextProduct.metadata) ? { ...nextProduct.metadata } : {}
+    stockMetadataKeys.forEach((key) => {
+      delete baseMetadata[key]
+    })
+    const stockMetadata = Object.fromEntries(
+      Object.entries(stockMetadataEntries)
+        .map(([key, value]) => [key, readStructuredText(value)])
+        .filter(([, value]) => value),
+    )
+    nextProduct.metadata = {
+      ...baseMetadata,
+      ...stockMetadata,
+    }
+  }
+
+  const skuRows = Array.isArray(source.skuItems) ? source.skuItems : []
+  if (skuRows.length > 0) {
+    nextProduct.skuItems = buildStructuredSkuItemOverlay(nextProduct, skuRows)
+    nextProduct.skuBatchCount = Math.max(
+      nextProduct.skuBatchCount ?? 1,
+      ...nextProduct.skuItems.map((item) => item.batchNo || 1),
+    )
+  }
+
+  return normalizeSharedProductSpuByBrand(nextProduct)
+}
+
 function hasMeaningfulBomDetails(
   bomDetails: NonIntegratedProductRecord['bomDetails'] | undefined,
 ) {
@@ -1943,6 +2260,93 @@ function jsonTextMissingOrNotEquals(
   }
 }
 
+function profileTextEquals(
+  field: string,
+  value: string,
+): Prisma.IntakeNonIntegratedProductWhereInput {
+  return {
+    profile: {
+      is: {
+        [field]: value,
+      },
+    },
+  } as Prisma.IntakeNonIntegratedProductWhereInput
+}
+
+function profileTextContains(
+  field: string,
+  value: string,
+): Prisma.IntakeNonIntegratedProductWhereInput {
+  return {
+    profile: {
+      is: {
+        [field]: {
+          contains: value,
+          mode: 'insensitive',
+        },
+      },
+    },
+  } as Prisma.IntakeNonIntegratedProductWhereInput
+}
+
+function profileTextNonEmpty(field: string): Prisma.IntakeNonIntegratedProductWhereInput {
+  return {
+    profile: {
+      is: {
+        [field]: {
+          not: '',
+        },
+      },
+    },
+  } as Prisma.IntakeNonIntegratedProductWhereInput
+}
+
+function payloadJsonWhenProfileMissing(
+  condition: Prisma.IntakeNonIntegratedProductWhereInput,
+): Prisma.IntakeNonIntegratedProductWhereInput {
+  return {
+    AND: [
+      {
+        profile: null,
+      },
+      condition,
+    ],
+  }
+}
+
+function profileTextNotEqualsWhenPresent(
+  field: string,
+  value: string,
+): Prisma.IntakeNonIntegratedProductWhereInput {
+  return {
+    AND: [
+      {
+        NOT: {
+          profile: null,
+        },
+      },
+      {
+        OR: [
+          {
+            NOT: profileTextEquals(field, value),
+          },
+          {
+            profile: {
+              is: {
+                [field]: '',
+              },
+            },
+          } as Prisma.IntakeNonIntegratedProductWhereInput,
+        ],
+      },
+    ],
+  }
+}
+
+function payloadTextContainsWhenProfileMissing(path: string[], keyword: string) {
+  return payloadJsonWhenProfileMissing(jsonTextContains(path, keyword))
+}
+
 function buildTextContainsAny(
   value: string,
   conditions: Prisma.IntakeNonIntegratedProductWhereInput[],
@@ -1970,7 +2374,10 @@ function buildStockProductWhere(): Prisma.IntakeNonIntegratedProductWhereInput {
   return {
     OR: [
       { id: { startsWith: 'jst-stock-' } },
-      ...JST_SKU_SOURCE_PATHS.map((path) => jsonTextEquals([...path], 'jst_sku')),
+      profileTextNonEmpty('sourceSpu'),
+      ...JST_SKU_SOURCE_PATHS.map((path) =>
+        payloadJsonWhenProfileMissing(jsonTextEquals([...path], 'jst_sku')),
+      ),
     ],
   }
 }
@@ -1979,21 +2386,19 @@ function buildDevelopmentKindWhere(
   productDevelopmentKind: IntakeNonIntegratedProductListParams['productDevelopmentKind'],
 ): Prisma.IntakeNonIntegratedProductWhereInput | null {
   if (productDevelopmentKind === 'series') {
-    return jsonTextEquals(['productDevelopmentKind'], 'series')
+    return {
+      OR: [
+        profileTextEquals('productDevelopmentKind', 'series'),
+        payloadJsonWhenProfileMissing(jsonTextEquals(['productDevelopmentKind'], 'series')),
+      ],
+    }
   }
 
   if (productDevelopmentKind === 'product') {
     return {
       OR: [
-        {
-          NOT: jsonTextEquals(['productDevelopmentKind'], 'series'),
-        },
-        {
-          payload: {
-            path: ['productDevelopmentKind'],
-            equals: Prisma.AnyNull,
-          },
-        },
+        profileTextNotEqualsWhenPresent('productDevelopmentKind', 'series'),
+        payloadJsonWhenProfileMissing(jsonTextMissingOrNotEquals(['productDevelopmentKind'], 'series')),
       ],
     }
   }
@@ -2012,18 +2417,7 @@ function buildProductKindWhere(
 
   if (productKind === 'new') {
     return {
-      AND: [
-        {
-          id: {
-            not: {
-              startsWith: 'jst-stock-',
-            },
-          },
-        },
-        ...JST_SKU_SOURCE_PATHS.map((path) =>
-          jsonTextMissingOrNotEquals([...path], 'jst_sku'),
-        ),
-      ],
+      NOT: stockWhere,
     }
   }
 
@@ -2041,28 +2435,56 @@ function buildSpuSearchWhere(spu: string): Prisma.IntakeNonIntegratedProductWher
     OR: [
       { spu: { contains: normalizedKeyword, mode: 'insensitive' } },
       { spuBase: { contains: baseKeyword || normalizedKeyword, mode: 'insensitive' } },
-      jsonTextContains(['openingReference', 'productName'], keyword),
-      jsonTextContains(['openingReference', 'temporaryCode'], keyword),
-      jsonTextContains(['metadata', 'sourceSpu'], keyword),
-      jsonTextContains(['metadata', 'sourceSkuId'], keyword),
+      profileTextContains('productName', keyword),
+      profileTextContains('sourceSpu', keyword),
+      profileTextContains('sourceSkuId', keyword),
+      payloadJsonWhenProfileMissing(jsonTextContains(['openingReference', 'productName'], keyword)),
+      payloadJsonWhenProfileMissing(jsonTextContains(['openingReference', 'temporaryCode'], keyword)),
+      payloadJsonWhenProfileMissing(jsonTextContains(['metadata', 'sourceSpu'], keyword)),
+      payloadJsonWhenProfileMissing(jsonTextContains(['metadata', 'sourceSkuId'], keyword)),
     ],
   }
 }
 
 function buildStockTextSearchWhere(
   value: string | undefined,
-  paths: string[][],
+  options: {
+    profileFields?: string[]
+    jsonPaths?: string[][]
+    includeStructuredSkuBarcode?: boolean
+  },
 ): Prisma.IntakeNonIntegratedProductWhereInput | null {
   const keyword = trimListFilter(value)
   if (!keyword) return null
 
+  const conditions: Prisma.IntakeNonIntegratedProductWhereInput[] = [
+    ...(options.profileFields ?? []).map((field) => profileTextContains(field, keyword)),
+    ...(options.jsonPaths ?? []).map((path) =>
+      payloadJsonWhenProfileMissing(jsonTextContains(path, keyword)),
+    ),
+  ]
+
+  if (options.includeStructuredSkuBarcode) {
+    conditions.push({
+      skuItems: {
+        some: {
+          barcode: {
+            contains: keyword,
+            mode: 'insensitive',
+          },
+        },
+      },
+    })
+  }
+
   return {
-    OR: paths.map((path) => jsonTextContains(path, keyword)),
+    OR: conditions,
   }
 }
 
 function buildStockExactWhere(
   value: string | undefined,
+  profileField: string,
   path: string[],
 ): Prisma.IntakeNonIntegratedProductWhereInput | null {
   const keyword = trimListFilter(value)
@@ -2070,14 +2492,24 @@ function buildStockExactWhere(
 
   if (keyword === '__empty') {
     return {
-      payload: {
-        path,
-        equals: Prisma.AnyNull,
-      },
+      OR: [
+        profileTextEquals(profileField, ''),
+        payloadJsonWhenProfileMissing({
+          payload: {
+            path,
+            equals: Prisma.AnyNull,
+          },
+        }),
+      ],
     }
   }
 
-  return jsonTextEquals(path, keyword)
+  return {
+    OR: [
+      profileTextEquals(profileField, keyword),
+      payloadJsonWhenProfileMissing(jsonTextEquals(path, keyword)),
+    ],
+  }
 }
 
 function buildStockDataScopeWhere(
@@ -2086,9 +2518,24 @@ function buildStockDataScopeWhere(
   const scope = trimListFilter(value)
   if (!scope || scope === 'all') return null
 
-  const normalSpuWhere: Prisma.IntakeNonIntegratedProductWhereInput = {
+  const profileNormalSpuWhere: Prisma.IntakeNonIntegratedProductWhereInput = {
     AND: [
-      jsonTextEquals(['metadata', 'sourceItemType'], '成品'),
+      profileTextEquals('sourceItemType', '成品'),
+      profileTextNonEmpty('sourceCategory'),
+      {
+        NOT: profileTextContains('sourceCategory', '其他 -'),
+      },
+    ],
+  }
+
+  const payloadNormalSpuWhere: Prisma.IntakeNonIntegratedProductWhereInput = {
+    AND: [
+      {
+        payload: {
+          path: ['metadata', 'sourceItemType'],
+          equals: '成品',
+        },
+      },
       {
         NOT: {
           payload: {
@@ -2098,10 +2545,22 @@ function buildStockDataScopeWhere(
         },
       },
       {
-        NOT: jsonTextContains(['metadata', 'sourceCategory'], '其他 -'),
+        NOT: {
+          payload: {
+            path: ['metadata', 'sourceCategory'],
+            string_contains: '其他 -',
+            mode: 'insensitive',
+          },
+        },
       },
     ],
   }
+  const normalSpuWhere: Prisma.IntakeNonIntegratedProductWhereInput = {
+    OR: [
+      profileNormalSpuWhere,
+      payloadJsonWhenProfileMissing(payloadNormalSpuWhere),
+    ],
+  }
 
   if (scope === 'normalSpu') {
     return normalSpuWhere
@@ -2111,8 +2570,18 @@ function buildStockDataScopeWhere(
     return {
       AND: [
         normalSpuWhere,
-        jsonTextEquals(['metadata', 'sourceSalesStatus'], '销售'),
-        jsonTextEquals(['metadata', 'sourceEnabled'], '1'),
+        {
+          OR: [
+            profileTextEquals('sourceSalesStatus', '销售'),
+            payloadJsonWhenProfileMissing(jsonTextEquals(['metadata', 'sourceSalesStatus'], '销售')),
+          ],
+        },
+        {
+          OR: [
+            profileTextEquals('sourceEnabled', '1'),
+            payloadJsonWhenProfileMissing(jsonTextEquals(['metadata', 'sourceEnabled'], '1')),
+          ],
+        },
       ],
     }
   }
@@ -2124,16 +2593,23 @@ function buildStockSourceSearchWhere(
   params: IntakeNonIntegratedProductListParams,
 ): Prisma.IntakeNonIntegratedProductWhereInput[] {
   return [
-    buildStockTextSearchWhere(params.stockSku, [
-      ['metadata', 'sourceSkuId'],
-      ['skuItems', '0', 'barcode'],
-    ]),
-    buildStockTextSearchWhere(params.stockCategory, [
-      ['metadata', 'sourceCategory'],
-    ]),
-    buildStockExactWhere(params.stockItemType, ['metadata', 'sourceItemType']),
-    buildStockExactWhere(params.stockSalesStatus, ['metadata', 'sourceSalesStatus']),
-    buildStockExactWhere(params.stockEnabledStatus, ['metadata', 'sourceEnabled']),
+    buildStockTextSearchWhere(params.stockSku, {
+      profileFields: ['sourceSkuId'],
+      jsonPaths: [
+        ['metadata', 'sourceSkuId'],
+        ['skuItems', '0', 'barcode'],
+      ],
+      includeStructuredSkuBarcode: true,
+    }),
+    buildStockTextSearchWhere(params.stockCategory, {
+      profileFields: ['sourceCategory'],
+      jsonPaths: [
+        ['metadata', 'sourceCategory'],
+      ],
+    }),
+    buildStockExactWhere(params.stockItemType, 'sourceItemType', ['metadata', 'sourceItemType']),
+    buildStockExactWhere(params.stockSalesStatus, 'sourceSalesStatus', ['metadata', 'sourceSalesStatus']),
+    buildStockExactWhere(params.stockEnabledStatus, 'sourceEnabled', ['metadata', 'sourceEnabled']),
     buildStockDataScopeWhere(params.stockDataScope),
   ].filter((filter): filter is Prisma.IntakeNonIntegratedProductWhereInput => filter !== null)
 }
@@ -2150,29 +2626,37 @@ function buildPeopleSearchWhere(
   const filters: Array<Prisma.IntakeNonIntegratedProductWhereInput | null> = [
     buildTextContainsAny(appearanceDesigner, [
       { designer: { contains: appearanceDesigner, mode: 'insensitive' } },
-      jsonTextContains(['designer'], appearanceDesigner),
-      jsonTextContains(['openingReference', 'designer'], appearanceDesigner),
+      payloadTextContainsWhenProfileMissing(['designer'], appearanceDesigner),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'designer'], appearanceDesigner),
     ]),
     buildTextContainsAny(structureDesigner, [
-      jsonTextContains(['openingReference', 'structureDesigner'], structureDesigner),
+      profileTextContains('structureDesigner', structureDesigner),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'structureDesigner'], structureDesigner),
     ]),
     buildTextContainsAny(spuOwner, [
       { operator: { contains: spuOwner, mode: 'insensitive' } },
-      jsonTextContains(['spuOwner'], spuOwner),
-      jsonTextContains(['operationsOwner'], spuOwner),
+      profileTextContains('spuOwner', spuOwner),
+      profileTextContains('operationsOwner', spuOwner),
+      payloadTextContainsWhenProfileMissing(['spuOwner'], spuOwner),
+      payloadTextContainsWhenProfileMissing(['operationsOwner'], spuOwner),
     ]),
     buildTextContainsAny(planningOwner, [
-      jsonTextContains(['productPlanning'], planningOwner),
-      jsonTextContains(['brandPlanning'], planningOwner),
-      jsonTextContains(['openingReference', 'planningOwner'], planningOwner),
+      profileTextContains('productPlanning', planningOwner),
+      profileTextContains('brandPlanning', planningOwner),
+      payloadTextContainsWhenProfileMissing(['productPlanning'], planningOwner),
+      payloadTextContainsWhenProfileMissing(['brandPlanning'], planningOwner),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'planningOwner'], planningOwner),
     ]),
     buildTextContainsAny(spaceDesigner, [
-      jsonTextContains(['visualPlanning'], spaceDesigner),
-      jsonTextContains(['visualDirector'], spaceDesigner),
+      profileTextContains('visualPlanning', spaceDesigner),
+      profileTextContains('visualDirector', spaceDesigner),
+      payloadTextContainsWhenProfileMissing(['visualPlanning'], spaceDesigner),
+      payloadTextContainsWhenProfileMissing(['visualDirector'], spaceDesigner),
     ]),
     buildTextContainsAny(purchaseOwner, [
       { purchaser: { contains: purchaseOwner, mode: 'insensitive' } },
-      jsonTextContains(['purchaseOwner'], purchaseOwner),
+      profileTextContains('purchaseOwner', purchaseOwner),
+      payloadTextContainsWhenProfileMissing(['purchaseOwner'], purchaseOwner),
     ]),
   ]
 
@@ -2223,39 +2707,47 @@ function buildResponsibleOwnerSearchWhere(
   if (hasListBusinessRole(user, 'DESIGN')) {
     if (isListSpaceDesignUser(user)) {
       conditions.push(
-        jsonTextContains(['visualPlanning'], userName),
-        jsonTextContains(['visualDirector'], userName),
+        profileTextContains('visualPlanning', userName),
+        profileTextContains('visualDirector', userName),
+        payloadTextContainsWhenProfileMissing(['visualPlanning'], userName),
+        payloadTextContainsWhenProfileMissing(['visualDirector'], userName),
       )
     } else {
       conditions.push(
         { designer: { contains: userName, mode: 'insensitive' } },
-        jsonTextContains(['designer'], userName),
-        jsonTextContains(['openingReference', 'designer'], userName),
-        jsonTextContains(['openingReference', 'structureDesigner'], userName),
+        profileTextContains('structureDesigner', userName),
+        payloadTextContainsWhenProfileMissing(['designer'], userName),
+        payloadTextContainsWhenProfileMissing(['openingReference', 'designer'], userName),
+        payloadTextContainsWhenProfileMissing(['openingReference', 'structureDesigner'], userName),
       )
     }
   }
 
   if (hasListBusinessRole(user, 'PLANNING')) {
     conditions.push(
-      jsonTextContains(['productPlanning'], userName),
-      jsonTextContains(['brandPlanning'], userName),
-      jsonTextContains(['openingReference', 'planningOwner'], userName),
+      profileTextContains('productPlanning', userName),
+      profileTextContains('brandPlanning', userName),
+      payloadTextContainsWhenProfileMissing(['productPlanning'], userName),
+      payloadTextContainsWhenProfileMissing(['brandPlanning'], userName),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'planningOwner'], userName),
     )
   }
 
   if (hasListBusinessRole(user, 'PURCHASING')) {
     conditions.push(
       { purchaser: { contains: userName, mode: 'insensitive' } },
-      jsonTextContains(['purchaseOwner'], userName),
+      profileTextContains('purchaseOwner', userName),
+      payloadTextContainsWhenProfileMissing(['purchaseOwner'], userName),
     )
   }
 
   if (isListOperationsOwnerUser(user)) {
     conditions.push(
       { operator: { contains: userName, mode: 'insensitive' } },
-      jsonTextContains(['spuOwner'], userName),
-      jsonTextContains(['operationsOwner'], userName),
+      profileTextContains('spuOwner', userName),
+      profileTextContains('operationsOwner', userName),
+      payloadTextContainsWhenProfileMissing(['spuOwner'], userName),
+      payloadTextContainsWhenProfileMissing(['operationsOwner'], userName),
     )
   }
 
@@ -2264,17 +2756,25 @@ function buildResponsibleOwnerSearchWhere(
       { designer: { contains: userName, mode: 'insensitive' } },
       { operator: { contains: userName, mode: 'insensitive' } },
       { purchaser: { contains: userName, mode: 'insensitive' } },
-      jsonTextContains(['designer'], userName),
-      jsonTextContains(['openingReference', 'designer'], userName),
-      jsonTextContains(['openingReference', 'structureDesigner'], userName),
-      jsonTextContains(['spuOwner'], userName),
-      jsonTextContains(['operationsOwner'], userName),
-      jsonTextContains(['productPlanning'], userName),
-      jsonTextContains(['brandPlanning'], userName),
-      jsonTextContains(['openingReference', 'planningOwner'], userName),
-      jsonTextContains(['visualPlanning'], userName),
-      jsonTextContains(['visualDirector'], userName),
-      jsonTextContains(['purchaseOwner'], userName),
+      profileTextContains('structureDesigner', userName),
+      profileTextContains('spuOwner', userName),
+      profileTextContains('operationsOwner', userName),
+      profileTextContains('productPlanning', userName),
+      profileTextContains('brandPlanning', userName),
+      profileTextContains('visualPlanning', userName),
+      profileTextContains('visualDirector', userName),
+      profileTextContains('purchaseOwner', userName),
+      payloadTextContainsWhenProfileMissing(['designer'], userName),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'designer'], userName),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'structureDesigner'], userName),
+      payloadTextContainsWhenProfileMissing(['spuOwner'], userName),
+      payloadTextContainsWhenProfileMissing(['operationsOwner'], userName),
+      payloadTextContainsWhenProfileMissing(['productPlanning'], userName),
+      payloadTextContainsWhenProfileMissing(['brandPlanning'], userName),
+      payloadTextContainsWhenProfileMissing(['openingReference', 'planningOwner'], userName),
+      payloadTextContainsWhenProfileMissing(['visualPlanning'], userName),
+      payloadTextContainsWhenProfileMissing(['visualDirector'], userName),
+      payloadTextContainsWhenProfileMissing(['purchaseOwner'], userName),
     )
   }
 
@@ -2373,10 +2873,50 @@ function pickUploadFileMetadata(input: AttachUploadFileInput): AttachUploadFileM
   }
 }
 
-function isSpuUniqueConstraintError(error: unknown) {
+function isSpuUniqueConstraintError(
+  error: unknown,
+): error is Prisma.PrismaClientKnownRequestError {
   return error instanceof Prisma.PrismaClientKnownRequestError && error.code === 'P2002'
 }
 
+function getPrismaUniqueConstraintTarget(error: Prisma.PrismaClientKnownRequestError) {
+  const target = (error.meta as { target?: unknown } | null)?.target
+  if (Array.isArray(target)) {
+    return target.join(',')
+  }
+  return typeof target === 'string' ? target : ''
+}
+
+function toNonIntegratedDuplicateConstraintError(error: unknown) {
+  if (!isSpuUniqueConstraintError(error)) {
+    return null
+  }
+
+  const target = getPrismaUniqueConstraintTarget(error)
+  if (
+    target.includes('IntakeNonIntegratedSkuItem_skuCode') ||
+    target.includes('skuCode')
+  ) {
+    return new AppError(ErrorCode.VALIDATION_FAILED, 'SKU 编码已存在，请检查后重新保存')
+  }
+
+  if (
+    target.includes('IntakeNonIntegratedSkuItem_barcode') ||
+    target.includes('barcode')
+  ) {
+    return new AppError(ErrorCode.VALIDATION_FAILED, 'SKU 条码已存在，请检查后重新保存')
+  }
+
+  if (target.includes('spu') || target.includes('brand')) {
+    return new AppError(
+      ErrorCode.VALIDATION_FAILED,
+      NON_INTEGRATED_DUPLICATE_SPU_MESSAGE,
+    )
+  }
+
+  return new AppError(ErrorCode.VALIDATION_FAILED, '编码或条码已存在，请检查后重新保存')
+}
+
 async function assertNoDuplicateProduct(
   repository: IntakeNonIntegratedProductRepositoryClass,
   product: DuplicateProductCheckInput,
@@ -2545,6 +3085,219 @@ async function deleteDraftGroupsAfterSourceSkuRemoval(
   )
 }
 
+async function assertNoDuplicateProductInTransaction(
+  repository: IntakeNonIntegratedProductRepositoryClass,
+  tx: Prisma.TransactionClient,
+  product: DuplicateProductCheckInput,
+) {
+  const duplicateRecord = await repository.findBySpuInTransaction(
+    tx,
+    product.spu,
+    product.id,
+    product.brand,
+  )
+  if (duplicateRecord) {
+    throw new AppError(
+      ErrorCode.VALIDATION_FAILED,
+      NON_INTEGRATED_DUPLICATE_SPU_MESSAGE,
+    )
+  }
+}
+
+function trimSkuText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizeSkuIdentityText(value: unknown) {
+  return trimSkuText(value).toUpperCase()
+}
+
+export function buildStructuredSkuItemInputs(
+  product: NonIntegratedProductRecord & Record<string, unknown>,
+): StructuredNonIntegratedSkuItemCreateInput[] {
+  const seenSkuItemIds = new Map<string, number>()
+
+  return product.skuItems.map((item, index) => {
+    const rawSkuItemId = trimSkuText(item.id) || `sku-${index + 1}`
+    const seenCount = seenSkuItemIds.get(rawSkuItemId) ?? 0
+    seenSkuItemIds.set(rawSkuItemId, seenCount + 1)
+    const skuItemId = seenCount === 0 ? rawSkuItemId : `${rawSkuItemId}-${seenCount + 1}`
+    const quality = resolveNonIntegratedSkuQuality(item)
+
+    return {
+      id: `${product.id}:${skuItemId}`,
+      skuItemId,
+      sortOrder: index + 1,
+      skuSequence: Number.isFinite(item.skuSequence) ? Math.trunc(item.skuSequence) : 0,
+      batchNo: Number.isFinite(item.batchNo) ? Math.max(1, Math.trunc(item.batchNo)) : 1,
+      packageGroupId: trimSkuText(item.packageGroupId),
+      image: trimSkuText(item.image) || null,
+      imageName: trimSkuText(item.imageName),
+      model: trimSkuText(item.model),
+      skuCode: normalizeSkuIdentityText(item.skuCode),
+      specName: trimSkuText(item.specName),
+      barcode: normalizeSkuIdentityText(item.barcode),
+      size: trimSkuText(item.size),
+      color: trimSkuText(item.color),
+      material: trimSkuText(item.material),
+      boardMaterialType: trimSkuText(item.boardMaterialType),
+      versionNo: trimSkuText(item.versionNo) || 'V01',
+      attributeCode: trimSkuText(item.attributeCode),
+      drawingId: trimSkuText(item.drawingId),
+      installMethod: trimSkuText(item.installMethod),
+      executeStandard: trimSkuText(item.executeStandard),
+      nationalStandardCompliant: trimSkuText(item.nationalStandardCompliant),
+      manufacturer: trimSkuText(item.manufacturer),
+      manufacturerCode: trimSkuText(item.manufacturerCode),
+      salesStatus: trimSkuText(item.salesStatus),
+      tagMaterial: trimSkuText(item.tagMaterial),
+      model3dDataUrl: trimSkuText(item.model3dDataUrl) || null,
+      source: trimSkuText(item.source),
+      sourceTable: trimSkuText(item.sourceTable),
+      sourceSkuId: trimSkuText(item.sourceSkuId),
+      contentLocked: item.contentLocked === true,
+      ...quality,
+    }
+  })
+}
+
+function readOpeningReferenceField(
+  product: NonIntegratedProductRecord & Record<string, unknown>,
+  key: string,
+) {
+  const openingReference = isRecord(product.openingReference)
+    ? product.openingReference
+    : {}
+  return trimSkuText(openingReference[key])
+}
+
+function readProductMetadataField(
+  product: NonIntegratedProductRecord & Record<string, unknown>,
+  key: string,
+) {
+  const metadata = isRecord(product.metadata) ? product.metadata : {}
+  return trimSkuText(metadata[key])
+}
+
+function getStructuredSkuItemCount(product: NonIntegratedProductRecord & Record<string, unknown>) {
+  return Array.isArray(product.skuItems) ? product.skuItems.length : 0
+}
+
+export function buildStructuredProductProfileInput(
+  product: NonIntegratedProductRecord & Record<string, unknown>,
+): Prisma.IntakeNonIntegratedProductProfileCreateWithoutProductInput {
+  const sourceSalesStatus = readProductMetadataField(product, 'sourceSalesStatus')
+
+  return {
+    productName:
+      readOpeningReferenceField(product, 'productName') ||
+      trimSkuText(product.previewImageName) ||
+      trimSkuText(product.spu),
+    productImageUrl:
+      readOpeningReferenceField(product, 'productImage') ||
+      trimSkuText(product.previewImage) ||
+      null,
+    productCategory:
+      readOpeningReferenceField(product, 'productCategory') ||
+      trimSkuText(product.productCategory),
+    salesCategory:
+      readOpeningReferenceField(product, 'salesCategory') ||
+      trimSkuText(product.salesCategory),
+    productYear:
+      readOpeningReferenceField(product, 'year') ||
+      trimSkuText(product.year),
+    productStatus:
+      readOpeningReferenceField(product, 'currentStage') ||
+      trimSkuText(product.projectStatus),
+    productDevelopmentKind: trimSkuText(product.productDevelopmentKind),
+    goodsType: trimSkuText(product.goodsType),
+    materialType: trimSkuText(product.materialType),
+    productionType: trimSkuText(product.productionType),
+    size: trimSkuText(product.size) || readOpeningReferenceField(product, 'size'),
+    color: trimSkuText(product.color),
+    tagMaterial: trimSkuText(product.tagMaterial),
+    priceBand:
+      trimSkuText(product.priceBand) ||
+      readOpeningReferenceField(product, 'targetPriceBand'),
+    demandFlowNo: trimSkuText(product.demandFlowNo),
+    processTemplate: trimSkuText(product.processTemplate),
+    productPlanning:
+      trimSkuText(product.productPlanning) ||
+      readOpeningReferenceField(product, 'planningOwner'),
+    brandPlanning: trimSkuText(product.brandPlanning),
+    demandDepartment: trimSkuText(product.demandDepartment),
+    spuOwner: trimSkuText(product.spuOwner),
+    operationsOwner: trimSkuText(product.operationsOwner),
+    purchaseOwner:
+      trimSkuText(product.purchaseOwner) ||
+      trimSkuText(product.purchaser),
+    visualDirector: trimSkuText(product.visualDirector),
+    visualPlanning: trimSkuText(product.visualPlanning),
+    structureDesigner: readOpeningReferenceField(product, 'structureDesigner'),
+    sourceSpu: readProductMetadataField(product, 'sourceSpu'),
+    sourceSkuId: readProductMetadataField(product, 'sourceSkuId'),
+    sourceCategory: readProductMetadataField(product, 'sourceCategory'),
+    sourceItemType: readProductMetadataField(product, 'sourceItemType'),
+    sourceSalesStatus,
+    sourceEnabled: readProductMetadataField(product, 'sourceEnabled'),
+    sourceStockDisabled: readProductMetadataField(product, 'sourceStockDisabled'),
+    stockSkuCount: getStructuredSkuItemCount(product),
+    stockHasOnSaleSku: sourceSalesStatus === '销售',
+    source: 'PAYLOAD_SYNC',
+    syncedAt: new Date(),
+  }
+}
+
+function withStructuredSkuItemsForCreate(
+  data: Prisma.IntakeNonIntegratedProductCreateInput,
+  product: SharedNonIntegratedProductRecord,
+): Prisma.IntakeNonIntegratedProductCreateInput {
+  const skuItemInputs = buildStructuredSkuItemInputs(product)
+
+  return {
+    ...data,
+    profile: {
+      create: buildStructuredProductProfileInput(product),
+    },
+    ...(skuItemInputs.length > 0
+      ? {
+          skuItems: {
+            createMany: {
+              data: skuItemInputs,
+            },
+          },
+        }
+      : {}),
+  }
+}
+
+function withStructuredSkuItemsForUpdate(
+  data: Prisma.IntakeNonIntegratedProductUpdateInput,
+  product: SharedNonIntegratedProductRecord,
+): Prisma.IntakeNonIntegratedProductUpdateInput {
+  const skuItemInputs = buildStructuredSkuItemInputs(product)
+
+  return {
+    ...data,
+    profile: {
+      upsert: {
+        create: buildStructuredProductProfileInput(product),
+        update: buildStructuredProductProfileInput(product),
+      },
+    },
+    skuItems: {
+      deleteMany: {},
+      ...(skuItemInputs.length > 0
+        ? {
+            createMany: {
+              data: skuItemInputs,
+            },
+          }
+        : {}),
+    },
+  }
+}
+
 class IntakeNonIntegratedProductService {
   private readonly repository: IntakeNonIntegratedProductRepositoryClass =
     intakeNonIntegratedProductRepository
@@ -2554,14 +3307,7 @@ class IntakeNonIntegratedProductService {
       intakeNonIntegratedScopeService.buildReadScopeWhere(user),
     )
     return records
-      .map((record) =>
-        buildHydratedProductRecord(record.payload, {
-          createdAt: record.createdAt,
-          updatedAt: record.updatedAt,
-          createdBy: record.createdBy,
-          updatedBy: record.updatedBy,
-        }),
-      )
+      .map((record) => buildStructuredProductRecordFromRecord(record))
       .filter((record): record is SharedNonIntegratedProductRecord => record !== null)
   }
 
@@ -2575,14 +3321,7 @@ class IntakeNonIntegratedProductService {
       filterWhere: buildListFilterWhere(params, user),
     })
     const products = records
-      .map((record) =>
-        buildHydratedProductRecord(record.payload, {
-          createdAt: record.createdAt,
-          updatedAt: record.updatedAt,
-          createdBy: record.createdBy,
-          updatedBy: record.updatedBy,
-        }),
-      )
+      .map((record) => buildStructuredProductRecordFromRecord(record))
       .filter((record): record is SharedNonIntegratedProductRecord => record !== null)
 
     return {
@@ -2607,13 +3346,12 @@ class IntakeNonIntegratedProductService {
     const categories = new Set<string>()
 
     records.forEach((record) => {
-      if (!isRecord(record.payload)) return
-      const metadata = record.payload.metadata
-      if (!isRecord(metadata)) return
-      const category = typeof metadata.sourceCategory === 'string'
-        ? metadata.sourceCategory.trim()
+      const categoryFromProfile = isRecord(record.profile)
+        ? readStructuredText(record.profile.sourceCategory)
         : ''
-      if (category) categories.add(category)
+      if (categoryFromProfile) {
+        categories.add(categoryFromProfile)
+      }
     })
 
     return Array.from(categories).sort((left, right) =>
@@ -2631,13 +3369,7 @@ class IntakeNonIntegratedProductService {
       return null
     }
 
-    const product = buildHydratedProductRecord(record.payload, {
-      createdAt: record.createdAt,
-      updatedAt: record.updatedAt,
-      createdBy: record.createdBy,
-      updatedBy: record.updatedBy,
-    })
-
+    const product = buildStructuredProductRecordFromRecord(record)
     return product ? await hydrateProductSkuModelSnapshots(product) : null
   }
 
@@ -2675,11 +3407,298 @@ class IntakeNonIntegratedProductService {
     )
   }
 
+  private buildProductInputWithAssignedFormalSpu(
+    productInput: Record<string, unknown>,
+    formalSpu: string,
+    preservedProductId?: string,
+  ) {
+    const openingReference = isRecord(productInput.openingReference)
+      ? productInput.openingReference
+      : {}
+    const normalizedBrand =
+      normalizeNonIntegratedBrand(readText(productInput.brand)) ||
+      normalizeNonIntegratedBrand(readText(openingReference.brand)) ||
+      NON_INTEGRATED_DEFAULT_BRAND
+    const assignedSpu = applyBrandPrefixToNonIntegratedCode(formalSpu, normalizedBrand)
+    const currentProductCode = readText(productInput.productCode)
+
+    return {
+      ...productInput,
+      id: preservedProductId || buildNonIntegratedProductId(assignedSpu),
+      spu: assignedSpu,
+      productCode: currentProductCode || assignedSpu,
+      brand: normalizedBrand,
+      formalSpuAssigned: true,
+      skuItems: assignFormalSpuToSkuItems(productInput.skuItems, assignedSpu),
+      openingReference: {
+        ...openingReference,
+        brand: readText(openingReference.brand) || normalizedBrand,
+      },
+    }
+  }
+
+  private async saveWithFormalSpuAssignment(
+    productInput: unknown,
+    user: AuthUser,
+    options: SaveNonIntegratedProductOptions,
+  ) {
+    if (!isRecord(productInput)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '非集成产品数据不完整，无法保存')
+    }
+
+    if (readText(productInput.spu)) {
+      return this.save(productInput, user, {
+        workspaceCategory: options.workspaceCategory,
+      })
+    }
+
+    const openingReference = isRecord(productInput.openingReference)
+      ? productInput.openingReference
+      : {}
+    const productCategory =
+      readText(options.formalSpuAssignmentProductCategory) ||
+      readText(productInput.productCategory) ||
+      readText(openingReference.productCategory)
+    if (!productCategory) {
+      throw new AppError(
+        ErrorCode.VALIDATION_REQUIRED_FIELD,
+        '产品类目不能为空，无法在保存时分配正式 SPU',
+      )
+    }
+
+    const savedProductId = await prisma.$transaction(async (tx) => {
+      const existingRecord = readText(productInput.id)
+        ? await tx.intakeNonIntegratedProduct.findUnique({
+            where: { id: readText(productInput.id) },
+            include: {
+              profile: true,
+              skuItems: {
+                orderBy: {
+                  sortOrder: 'asc',
+                },
+              },
+            },
+          })
+        : null
+      const activeExistingRecord =
+        existingRecord && !existingRecord.deletedAt
+          ? (existingRecord as IntakeNonIntegratedRecord)
+          : null
+      const reservation = await spuNumberReservationService.reserveInTransaction(tx, {
+        productCategory,
+        currentProductId: readText(productInput.id) || null,
+        userId: user.id,
+      })
+      const assignedProductInput = this.buildProductInputWithAssignedFormalSpu(
+        productInput,
+        reservation.spu,
+        activeExistingRecord?.id,
+      )
+      const normalizedProduct = buildPersistedProductPayload(
+        assignedProductInput,
+        existingRecord?.payload,
+        existingRecord?.createdAt.toISOString(),
+      )
+      if (!normalizedProduct) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, '非集成产品数据不完整，无法保存')
+      }
+      assertNonIntegratedProductMasterDataReadyForFormalUse(normalizedProduct, {
+        usageLabel: '正式 SPU 分配',
+      })
+
+      const normalizedSpu = resolveNonIntegratedPersistedSpu(normalizedProduct)
+      const deletedRecordToRestore = activeExistingRecord
+        ? null
+        : await this.repository.findDeletedBySpuInTransaction(
+            tx,
+            normalizedSpu,
+            normalizedProduct.id,
+            normalizedProduct.brand,
+          )
+
+      if (
+        !activeExistingRecord &&
+        !deletedRecordToRestore &&
+        !intakeNonIntegratedScopeService.canCreateRecord(user)
+      ) {
+        throw new AppError(
+          ErrorCode.AUTH_PERMISSION_DENIED,
+          '当前账号只有查看和下载权限，不能新增非集成产品',
+        )
+      }
+
+      const scopedDepartmentId = intakeNonIntegratedScopeService.getScopedDepartmentId(user)
+      const scopedTeamId = intakeNonIntegratedScopeService.getScopedTeamId(user)
+      const persistedProduct = activeExistingRecord
+        ? {
+            ...normalizedProduct,
+            id: activeExistingRecord.id,
+            spu: normalizedSpu,
+            createdBy: activeExistingRecord.createdBy,
+            updatedBy: user.id,
+          }
+        : deletedRecordToRestore
+        ? {
+            ...normalizedProduct,
+            id: deletedRecordToRestore.id,
+            spu: normalizedSpu,
+            createdBy: user.id,
+            updatedBy: user.id,
+          }
+        : {
+            ...normalizedProduct,
+            spu: normalizedSpu,
+            createdBy: user.id,
+            updatedBy: user.id,
+          }
+
+      const normalizedSpuBase = stripNonIntegratedBrandPrefix(normalizedSpu)
+      await assertNoDuplicateProductInTransaction(this.repository, tx, {
+        id: normalizedProduct.id,
+        spu: normalizedSpu,
+        brand: normalizedProduct.brand,
+      })
+
+      if (activeExistingRecord) {
+        const permittedWrite = await prepareProductForPermittedWrite(
+          activeExistingRecord,
+          user,
+          persistedProduct,
+          options,
+        )
+        const permittedProduct = permittedWrite.product
+        const permittedSpu = resolveNonIntegratedPersistedSpu(permittedProduct)
+        const permittedSpuBase = stripNonIntegratedBrandPrefix(permittedSpu)
+        const preservedSpu = normalizePreservedNonIntegratedSpu(activeExistingRecord)
+        const preservedSpuBase = stripNonIntegratedBrandPrefix(preservedSpu)
+        const preservedBrand = normalizePreservedNonIntegratedBrand(activeExistingRecord.brand)
+        const preserveIdentityColumns =
+          permittedWrite.preserveRecordColumns &&
+          !options.formalSpuAssignmentProductCategory
+        await assertNoDuplicateProductInTransaction(this.repository, tx, {
+          id: permittedProduct.id,
+          spu: preserveIdentityColumns ? preservedSpu : permittedSpu,
+          brand: preserveIdentityColumns
+            ? preservedBrand
+            : permittedProduct.brand,
+        })
+
+        if (!permittedWrite.skipUpdate) {
+          await this.repository.updateInTransaction(
+            tx,
+            activeExistingRecord.id,
+            withStructuredSkuItemsForUpdate(
+              {
+                spu: preserveIdentityColumns
+                  ? preservedSpu
+                  : permittedSpu,
+                spuBase: preserveIdentityColumns
+                  ? preservedSpuBase
+                  : permittedSpuBase,
+                brand: preserveIdentityColumns
+                  ? preservedBrand
+                  : permittedProduct.brand ?? '',
+                designer: permittedWrite.preserveRecordColumns
+                  ? activeExistingRecord.designer
+                  : permittedProduct.designer,
+                operator: permittedWrite.preserveRecordColumns
+                  ? activeExistingRecord.operator
+                  : permittedProduct.operator,
+                purchaser: permittedWrite.preserveRecordColumns
+                  ? activeExistingRecord.purchaser
+                  : permittedProduct.purchaser,
+                payload: toJsonValue(permittedProduct),
+                updatedBy: user.id,
+                deletedAt: null,
+                ...(activeExistingRecord.createdBy === user.id &&
+                !activeExistingRecord.departmentId &&
+                scopedDepartmentId
+                  ? { departmentId: scopedDepartmentId }
+                  : {}),
+                ...(activeExistingRecord.createdBy === user.id &&
+                !activeExistingRecord.teamId &&
+                scopedTeamId
+                  ? { teamId: scopedTeamId }
+                  : {}),
+              },
+              permittedProduct,
+            ),
+          )
+        }
+
+        return activeExistingRecord.id
+      }
+
+      if (deletedRecordToRestore) {
+        await this.repository.updateInTransaction(
+          tx,
+          deletedRecordToRestore.id,
+          withStructuredSkuItemsForUpdate(
+            {
+              spu: normalizedSpu,
+              spuBase: normalizedSpuBase,
+              brand: persistedProduct.brand ?? '',
+              designer: persistedProduct.designer,
+              operator: persistedProduct.operator,
+              purchaser: persistedProduct.purchaser,
+              payload: toJsonValue(persistedProduct),
+              visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
+              departmentId: scopedDepartmentId ?? null,
+              teamId: scopedTeamId ?? null,
+              createdBy: user.id,
+              updatedBy: user.id,
+              createdAt: new Date(persistedProduct.createdAt),
+              deletedAt: null,
+            },
+            persistedProduct,
+          ),
+        )
+        return deletedRecordToRestore.id
+      }
+
+      await this.repository.createInTransaction(
+        tx,
+        withStructuredSkuItemsForCreate(
+          {
+            id: persistedProduct.id,
+            spu: normalizedSpu,
+            spuBase: normalizedSpuBase,
+            brand: persistedProduct.brand ?? '',
+            designer: persistedProduct.designer,
+            operator: persistedProduct.operator,
+            purchaser: persistedProduct.purchaser,
+            payload: toJsonValue(persistedProduct),
+            visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
+            ...(scopedDepartmentId ? { departmentId: scopedDepartmentId } : {}),
+            ...(scopedTeamId ? { teamId: scopedTeamId } : {}),
+            createdBy: user.id,
+            updatedBy: user.id,
+            createdAt: new Date(persistedProduct.createdAt),
+          },
+          persistedProduct,
+        ),
+      )
+
+      return persistedProduct.id
+    })
+
+    const savedProduct = await this.getById(savedProductId, user)
+    if (!savedProduct) {
+      throw new AppError(ErrorCode.SYSTEM_INTERNAL, '非集成产品保存后读取失败')
+    }
+
+    return savedProduct
+  }
+
   async save(
     productInput: unknown,
     user: AuthUser,
     options: SaveNonIntegratedProductOptions = {},
   ) {
+    if (options.formalSpuAssignmentProductCategory) {
+      return this.saveWithFormalSpuAssignment(productInput, user, options)
+    }
+
     const existingRecordCandidate = isRecord(productInput) && typeof productInput.id === 'string'
       ? await this.repository.findById(productInput.id)
       : null
@@ -2752,11 +3771,14 @@ class IntakeNonIntegratedProductService {
         const permittedProduct = permittedWrite.product
         const permittedSpu = resolveNonIntegratedPersistedSpu(permittedProduct)
         const permittedSpuBase = stripNonIntegratedBrandPrefix(permittedSpu)
+        const preservedSpu = normalizePreservedNonIntegratedSpu(existingRecord)
+        const preservedSpuBase = stripNonIntegratedBrandPrefix(preservedSpu)
+        const preservedBrand = normalizePreservedNonIntegratedBrand(existingRecord.brand)
         await assertNoDuplicateProduct(this.repository, {
           id: permittedProduct.id,
           spu: permittedSpu,
           brand: permittedWrite.preserveRecordColumns
-            ? existingRecord.brand
+            ? preservedBrand
             : permittedProduct.brand,
         })
 
@@ -2773,35 +3795,41 @@ class IntakeNonIntegratedProductService {
         }
 
         if (!permittedWrite.skipUpdate) {
-          await this.repository.update(existingRecord.id, {
-            spu: permittedWrite.preserveRecordColumns ? existingRecord.spu : permittedSpu,
-            spuBase: permittedWrite.preserveRecordColumns
-              ? existingRecord.spuBase
-              : permittedSpuBase,
-            brand: permittedWrite.preserveRecordColumns
-              ? existingRecord.brand
-              : permittedProduct.brand ?? '',
-            designer: permittedWrite.preserveRecordColumns
-              ? existingRecord.designer
-              : permittedProduct.designer,
-            operator: permittedWrite.preserveRecordColumns
-              ? existingRecord.operator
-              : permittedProduct.operator,
-            purchaser: permittedWrite.preserveRecordColumns
-              ? existingRecord.purchaser
-              : permittedProduct.purchaser,
-            payload: toJsonValue(permittedProduct),
-            updatedBy: user.id,
-            deletedAt: null,
-            ...(existingRecord.createdBy === user.id &&
-            !existingRecord.departmentId &&
-            scopedDepartmentId
-              ? { departmentId: scopedDepartmentId }
-              : {}),
-            ...(existingRecord.createdBy === user.id && !existingRecord.teamId && scopedTeamId
-              ? { teamId: scopedTeamId }
-              : {}),
-          })
+          await this.repository.update(
+            existingRecord.id,
+            withStructuredSkuItemsForUpdate(
+              {
+                spu: permittedWrite.preserveRecordColumns ? preservedSpu : permittedSpu,
+                spuBase: permittedWrite.preserveRecordColumns
+                  ? preservedSpuBase
+                  : permittedSpuBase,
+                brand: permittedWrite.preserveRecordColumns
+                  ? preservedBrand
+                  : permittedProduct.brand ?? '',
+                designer: permittedWrite.preserveRecordColumns
+                  ? existingRecord.designer
+                  : permittedProduct.designer,
+                operator: permittedWrite.preserveRecordColumns
+                  ? existingRecord.operator
+                  : permittedProduct.operator,
+                purchaser: permittedWrite.preserveRecordColumns
+                  ? existingRecord.purchaser
+                  : permittedProduct.purchaser,
+                payload: toJsonValue(permittedProduct),
+                updatedBy: user.id,
+                deletedAt: null,
+                ...(existingRecord.createdBy === user.id &&
+                !existingRecord.departmentId &&
+                scopedDepartmentId
+                  ? { departmentId: scopedDepartmentId }
+                  : {}),
+                ...(existingRecord.createdBy === user.id && !existingRecord.teamId && scopedTeamId
+                  ? { teamId: scopedTeamId }
+                  : {}),
+              },
+              permittedProduct,
+            ),
+          )
         }
       } else if (deletedRecordToRestore) {
         const normalizedSpuBase = stripNonIntegratedBrandPrefix(normalizedSpu)
@@ -2811,22 +3839,28 @@ class IntakeNonIntegratedProductService {
           brand: normalizedProduct.brand,
         })
 
-        await this.repository.update(deletedRecordToRestore.id, {
-          spu: normalizedSpu,
-          spuBase: normalizedSpuBase,
-          brand: persistedProduct.brand ?? '',
-          designer: persistedProduct.designer,
-          operator: persistedProduct.operator,
-          purchaser: persistedProduct.purchaser,
-          payload: toJsonValue(persistedProduct),
-          visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
-          departmentId: scopedDepartmentId ?? null,
-          teamId: scopedTeamId ?? null,
-          createdBy: user.id,
-          updatedBy: user.id,
-          createdAt: new Date(persistedProduct.createdAt),
-          deletedAt: null,
-        })
+        await this.repository.update(
+          deletedRecordToRestore.id,
+          withStructuredSkuItemsForUpdate(
+            {
+              spu: normalizedSpu,
+              spuBase: normalizedSpuBase,
+              brand: persistedProduct.brand ?? '',
+              designer: persistedProduct.designer,
+              operator: persistedProduct.operator,
+              purchaser: persistedProduct.purchaser,
+              payload: toJsonValue(persistedProduct),
+              visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
+              departmentId: scopedDepartmentId ?? null,
+              teamId: scopedTeamId ?? null,
+              createdBy: user.id,
+              updatedBy: user.id,
+              createdAt: new Date(persistedProduct.createdAt),
+              deletedAt: null,
+            },
+            persistedProduct,
+          ),
+        )
       } else {
         const normalizedSpuBase = stripNonIntegratedBrandPrefix(normalizedSpu)
         await assertNoDuplicateProduct(this.repository, {
@@ -2835,29 +3869,32 @@ class IntakeNonIntegratedProductService {
           brand: normalizedProduct.brand,
         })
 
-        await this.repository.create({
-          id: persistedProduct.id,
-          spu: normalizedSpu,
-          spuBase: normalizedSpuBase,
-          brand: persistedProduct.brand ?? '',
-          designer: persistedProduct.designer,
-          operator: persistedProduct.operator,
-          purchaser: persistedProduct.purchaser,
-          payload: toJsonValue(persistedProduct),
-          visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
-          ...(scopedDepartmentId ? { departmentId: scopedDepartmentId } : {}),
-          ...(scopedTeamId ? { teamId: scopedTeamId } : {}),
-          createdBy: user.id,
-          updatedBy: user.id,
-          createdAt: new Date(persistedProduct.createdAt),
-        })
+        await this.repository.create(
+          withStructuredSkuItemsForCreate(
+            {
+              id: persistedProduct.id,
+              spu: normalizedSpu,
+              spuBase: normalizedSpuBase,
+              brand: persistedProduct.brand ?? '',
+              designer: persistedProduct.designer,
+              operator: persistedProduct.operator,
+              purchaser: persistedProduct.purchaser,
+              payload: toJsonValue(persistedProduct),
+              visibility: DEFAULT_NON_INTEGRATED_VISIBILITY,
+              ...(scopedDepartmentId ? { departmentId: scopedDepartmentId } : {}),
+              ...(scopedTeamId ? { teamId: scopedTeamId } : {}),
+              createdBy: user.id,
+              updatedBy: user.id,
+              createdAt: new Date(persistedProduct.createdAt),
+            },
+            persistedProduct,
+          ),
+        )
       }
     } catch (error) {
-      if (isSpuUniqueConstraintError(error)) {
-        throw new AppError(
-          ErrorCode.VALIDATION_FAILED,
-          NON_INTEGRATED_DUPLICATE_SPU_MESSAGE,
-        )
+      const duplicateConstraintError = toNonIntegratedDuplicateConstraintError(error)
+      if (duplicateConstraintError) {
+        throw duplicateConstraintError
       }
 
       throw error
@@ -2906,12 +3943,7 @@ class IntakeNonIntegratedProductService {
     assertStockWorkspaceWriteCategory(existingRecord, input.category)
     await intakeNonIntegratedScopeService.assertCanWriteRecord(existingRecord, user, input.category)
 
-    const payload = buildHydratedProductRecord(existingRecord.payload, {
-      createdAt: existingRecord.createdAt,
-      updatedAt: existingRecord.updatedAt,
-      createdBy: existingRecord.createdBy,
-      updatedBy: existingRecord.updatedBy,
-    })
+    const payload = buildStructuredProductRecordFromRecord(existingRecord)
     if (!payload) {
       throw new AppError(ErrorCode.SYSTEM_INTERNAL, '非集成产品数据异常，无法写入上传文件')
     }
@@ -2964,7 +3996,7 @@ class IntakeNonIntegratedProductService {
         hasPendingDocumentWorkspaceConfirmation(nextDocumentWorkspaceConfirmations),
     }
 
-    await this.repository.updatePayloadByUser(productId, toJsonValue(nextPayload), user.id)
+    await this.repository.updateAttachmentPayloadByUser(productId, toJsonValue(nextPayload), user.id)
 
     return {
       product:
@@ -2990,12 +4022,7 @@ class IntakeNonIntegratedProductService {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, '非集成产品不存在')
     }
 
-    const payload = buildHydratedProductRecord(existingRecord.payload, {
-      createdAt: existingRecord.createdAt,
-      updatedAt: existingRecord.updatedAt,
-      createdBy: existingRecord.createdBy,
-      updatedBy: existingRecord.updatedBy,
-    })
+    const payload = buildStructuredProductRecordFromRecord(existingRecord)
     if (!payload) {
       throw new AppError(ErrorCode.SYSTEM_INTERNAL, '非集成产品数据异常，无法读取上传文件')
     }
@@ -3048,7 +4075,7 @@ class IntakeNonIntegratedProductService {
         hasPendingDocumentWorkspaceConfirmation(product.documentWorkspaceConfirmations),
     }
 
-    await this.repository.updatePayloadByUser(productId, toJsonValue(nextPayload), user.id)
+    await this.repository.updateAttachmentPayloadByUser(productId, toJsonValue(nextPayload), user.id)
 
     return {
       product:
diff --git a/furniture-3d-system/src/server/services/intake-non-integrated-scope.service.ts b/furniture-3d-system/src/server/services/intake-non-integrated-scope.service.ts
index 32d0814a..e4312c1f 100644
--- a/furniture-3d-system/src/server/services/intake-non-integrated-scope.service.ts
+++ b/furniture-3d-system/src/server/services/intake-non-integrated-scope.service.ts
@@ -1,4 +1,4 @@
-import { Prisma, type IntakeNonIntegratedProduct } from '@prisma/client'
+import { Prisma, type IntakeNonIntegratedProduct, type IntakeNonIntegratedProductProfile } from '@prisma/client'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { AuthUser } from '@/server/core/types'
 import {
@@ -23,11 +23,12 @@ type IntakeNonIntegratedPermissionTarget = Pick<
   | 'createdBy'
   | 'designer'
   | 'purchaser'
-  | 'payload'
   | 'visibility'
   | 'departmentId'
   | 'teamId'
->
+> & {
+  profile?: IntakeNonIntegratedProductProfile | null
+}
 
 const ADMIN_ROLES = new Set<AuthUser['role']>(['SUPER_ADMIN', 'ADMIN'])
 export const DEFAULT_NON_INTEGRATED_VISIBILITY = 'DEPARTMENT'
@@ -115,40 +116,35 @@ class IntakeNonIntegratedScopeService {
   private buildPermissionProduct(
     record: IntakeNonIntegratedPermissionTarget,
   ): IntakeNonIntegratedPermissionProduct {
-    const payload =
-      typeof record.payload === 'object' && record.payload !== null && !Array.isArray(record.payload)
-        ? (record.payload as Record<string, unknown>)
-        : {}
-    const openingReference =
-      typeof payload.openingReference === 'object' &&
-      payload.openingReference !== null &&
-      !Array.isArray(payload.openingReference)
-        ? (payload.openingReference as IntakeNonIntegratedPermissionProduct['openingReference'])
-        : null
+    const profile = record.profile ?? null
+    const readProfile = (key: keyof IntakeNonIntegratedProductProfile) => {
+      const value = profile?.[key]
+      return typeof value === 'string' ? value : ''
+    }
+    const nextOpeningReference = {
+      productName: readProfile('productName'),
+      productImage: readProfile('productImageUrl'),
+      productCategory: readProfile('productCategory'),
+      salesCategory: readProfile('salesCategory'),
+      currentStage: readProfile('productStatus'),
+      year: readProfile('productYear'),
+      structureDesigner: readProfile('structureDesigner'),
+      planningOwner: readProfile('productPlanning'),
+    }
 
     return {
       createdBy: record.createdBy,
-      designer:
-        typeof payload.designer === 'string' ? payload.designer : record.designer,
-      purchaser:
-        typeof payload.purchaser === 'string' ? payload.purchaser : record.purchaser,
-      purchaseOwner:
-        typeof payload.purchaseOwner === 'string' ? payload.purchaseOwner : '',
-      brandPlanning:
-        typeof payload.brandPlanning === 'string' ? payload.brandPlanning : '',
-      spuOwner:
-        typeof payload.spuOwner === 'string' ? payload.spuOwner : '',
-      operator:
-        typeof payload.operator === 'string' ? payload.operator : '',
-      operationsOwner:
-        typeof payload.operationsOwner === 'string' ? payload.operationsOwner : '',
-      productPlanning:
-        typeof payload.productPlanning === 'string' ? payload.productPlanning : '',
-      visualPlanning:
-        typeof payload.visualPlanning === 'string' ? payload.visualPlanning : '',
-      visualDirector:
-        typeof payload.visualDirector === 'string' ? payload.visualDirector : '',
-      openingReference,
+      designer: record.designer,
+      purchaser: record.purchaser,
+      purchaseOwner: readProfile('purchaseOwner'),
+      brandPlanning: readProfile('brandPlanning'),
+      spuOwner: readProfile('spuOwner'),
+      operator: '',
+      operationsOwner: readProfile('operationsOwner'),
+      productPlanning: readProfile('productPlanning'),
+      visualPlanning: readProfile('visualPlanning'),
+      visualDirector: readProfile('visualDirector'),
+      openingReference: nextOpeningReference,
     }
   }
 
diff --git a/furniture-3d-system/src/server/services/intake.service.ts b/furniture-3d-system/src/server/services/intake.service.ts
index 6ebd2067..968ecb31 100644
--- a/furniture-3d-system/src/server/services/intake.service.ts
+++ b/furniture-3d-system/src/server/services/intake.service.ts
@@ -8,9 +8,9 @@ import {
   assetVariantRepository,
   preSkuRepository,
   productRepository,
-  skuRepository,
   warehouseLocationRepository,
 } from '../repositories'
+import type { AssetVariantWithRelations, PreSkuWithRelations } from '../repositories'
 import type {
   FormalizeDraftGroupInput,
   FormalizeDraftGroupResult,
@@ -18,12 +18,55 @@ import type {
 } from './intake.service.types'
 import type { PreSkuSelectedSlotVariantDTO, PreSkuSelectedHardwareSelectionDTO } from './draft-group.service.types'
 import { normalizeAssemblyWorkspace, normalizeVariantSelection } from './draft-group.mapper'
-import { buildAssetSkuSnapshot } from './asset-sku-snapshot'
+import { buildAssetSkuSnapshot, buildProductSkuAssetProfileData } from './asset-sku-snapshot'
+import { releaseSkuCodeFromDeletedRecordsTx } from './sku-soft-delete.helper'
 
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
 
+function readText(value: unknown): string {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizeFormalIdentityCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+const REQUIRED_PRE_SKU_BASIC_INFO_FIELDS: Array<{ field: string; label: string }> = [
+  { field: 'model', label: '型号' },
+  { field: 'formalSkuCode', label: '规格码' },
+  { field: 'barcode', label: '条码' },
+  { field: 'specName', label: '规格名称' },
+  { field: 'versionNo', label: '版本号' },
+]
+
+function readPreSkuBasicInfo(
+  preSku: { basicInfo?: Record<string, unknown> | null },
+  field: string,
+) {
+  const structuredValue = readText(preSku.basicInfo?.[field])
+  if (structuredValue) return structuredValue
+
+  return ''
+}
+
+function ensurePreSkuBasicInfoReadyForFormalization(
+  preSku: { basicInfo?: Record<string, unknown> | null; customName?: string | null; defaultName: string },
+) {
+  const missingFields = REQUIRED_PRE_SKU_BASIC_INFO_FIELDS
+    .filter((item) => !readPreSkuBasicInfo(preSku, item.field))
+    .map((item) => item.label)
+
+  if (missingFields.length === 0) return
+
+  const label = preSku.customName?.trim() || preSku.defaultName
+  throw new AppError(
+    ErrorCode.VALIDATION_FAILED,
+    `${label} 缺少结构化基础资料：${missingFields.join('、')}；请回到草稿组补齐后再正式入库`,
+  )
+}
+
 function asArray<T = unknown>(value: unknown): T[] {
   return Array.isArray(value) ? value : []
 }
@@ -52,10 +95,6 @@ function toVector3Tuple(value: unknown): [number, number, number] | null {
   return null
 }
 
-function buildProductModelNumber(): string {
-  return `SPU-${Date.now()}`
-}
-
 function normalizeDimensionSignature(dimensions: Record<string, number>) {
   return Object.entries(dimensions)
     .filter((entry): entry is [string, number] => typeof entry[1] === 'number' && Number.isFinite(entry[1]))
@@ -125,12 +164,24 @@ function isDraftGroupEligibleForIntake(status: string) {
   return status === 'PACKAGING' || status === 'READY_FOR_INTAKE'
 }
 
+function isValidPackagingBoxNumber(value: unknown): value is number {
+  return typeof value === 'number' && Number.isSafeInteger(value) && value > 0
+}
+
+function isPositiveFiniteNumber(value: unknown): value is number {
+  return typeof value === 'number' && Number.isFinite(value) && value > 0
+}
+
+function isNonNegativeFiniteNumber(value: unknown): value is number {
+  return typeof value === 'number' && Number.isFinite(value) && value >= 0
+}
+
 function normalizePackagingBoxes(value: unknown) {
   return asArray<Record<string, unknown>>(value)
-    .filter((item) => typeof item.boxNumber === 'number' && typeof item.name === 'string')
+    .filter((item) => isValidPackagingBoxNumber(item.boxNumber) && typeof item.name === 'string')
     .map((item) => ({
       boxNumber: item.boxNumber as number,
-      name: item.name as string,
+      name: (item.name as string).trim(),
       outerSizeMm: isRecord(item.outerSizeMm)
         ? {
             length: toNullableNumber(item.outerSizeMm.length),
@@ -146,6 +197,62 @@ function normalizePackagingBoxes(value: unknown) {
     }))
 }
 
+function assertPackagingBoxesReadyForFormalization(value: unknown) {
+  const boxes = asArray<Record<string, unknown>>(value)
+  if (boxes.length === 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '准 SKU 缺少有效包装箱，当前不能正式入库')
+  }
+
+  const seenBoxNumbers = new Set<number>()
+  boxes.forEach((box, index) => {
+    if (!isValidPackagingBoxNumber(box.boxNumber)) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `第 ${index + 1} 个包装箱编号必须是正整数，当前不能正式入库`,
+      )
+    }
+
+    if (seenBoxNumbers.has(box.boxNumber)) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `包装箱编号 ${box.boxNumber} 重复，当前不能正式入库`,
+      )
+    }
+    seenBoxNumbers.add(box.boxNumber)
+
+    if (typeof box.name !== 'string') {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `第 ${index + 1} 个包装箱缺少名称，当前不能正式入库`,
+      )
+    }
+
+    const outerSizeMm = isRecord(box.outerSizeMm) ? box.outerSizeMm : null
+    if (
+      !outerSizeMm ||
+      !isPositiveFiniteNumber(outerSizeMm.length) ||
+      !isPositiveFiniteNumber(outerSizeMm.width) ||
+      !isPositiveFiniteNumber(outerSizeMm.height)
+    ) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `第 ${index + 1} 个包装箱尺寸必须大于 0，当前不能正式入库`,
+      )
+    }
+
+    if (
+      box.estimatedWeightKg !== null &&
+      box.estimatedWeightKg !== undefined &&
+      !isNonNegativeFiniteNumber(box.estimatedWeightKg)
+    ) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `第 ${index + 1} 个包装箱预估重量不能为负数，当前不能正式入库`,
+      )
+    }
+  })
+}
+
 function normalizePackagingSummary(value: unknown, boxCount: number) {
   if (!isRecord(value)) {
     return {
@@ -209,25 +316,59 @@ function ensurePreSkuReadyForFormalization(preSku: {
   }
 
   const packagingPlan = isRecord(preSku.packagingPlan) ? preSku.packagingPlan : null
-  if (!packagingPlan || !hasValidPackagingBoxes(packagingPlan.boxes)) {
+  if (!packagingPlan) {
     throw new AppError(ErrorCode.VALIDATION_FAILED, '准 SKU 缺少有效包装箱，当前不能正式入库')
   }
+  assertPackagingBoxesReadyForFormalization(packagingPlan.boxes)
+}
+
+async function assertSkuCodeAvailableForFormalization(
+  skuCode: string,
+  tx: Prisma.TransactionClient,
+): Promise<void> {
+  const normalizedSkuCode = normalizeFormalIdentityCode(skuCode)
+  await releaseSkuCodeFromDeletedRecordsTx(tx, normalizedSkuCode)
+  const existing = await tx.productSKU.findFirst({
+    where: { skuCode: normalizedSkuCode, deletedAt: null },
+    select: { id: true },
+  })
+  if (existing) {
+    throw new AppError(
+      ErrorCode.VALIDATION_FAILED,
+      `正式 SKU 编码「${skuCode}」已存在；请回到草稿组基础资料修正规格码后再入库`,
+    )
+  }
 }
 
-async function buildUniqueSkuCode(
-  productId: string,
-  preferredCode: string,
-  tx?: Prisma.TransactionClient,
-): Promise<string> {
-  let skuCode = preferredCode
-  let suffix = 1
-
-  while (await skuRepository.findByProductIdAndSkuCode(productId, skuCode, tx)) {
-    skuCode = `${preferredCode}-${suffix}`
-    suffix += 1
+async function assertProductModelNumberAvailableForFormalization(
+  modelNumber: string,
+  tx: Prisma.TransactionClient,
+): Promise<void> {
+  const normalizedModelNumber = normalizeFormalIdentityCode(modelNumber)
+  const existing = await tx.product.findFirst({
+    where: { modelNumber: normalizedModelNumber },
+    select: { id: true },
+  })
+  if (existing) {
+    throw new AppError(
+      ErrorCode.VALIDATION_FAILED,
+      `正式 SPU 型号「${modelNumber}」已存在；请修正产品资料后再入库`,
+    )
   }
+}
 
-  return skuCode
+function readRequiredFormalProductText(
+  value: string | undefined,
+  label: string,
+  options?: { uppercase?: boolean },
+): string {
+  const text = value?.trim() ?? ''
+  if (text) return options?.uppercase ? normalizeFormalIdentityCode(text) : text
+
+  throw new AppError(
+    ErrorCode.VALIDATION_FAILED,
+    `新建正式 SPU 必须填写${label}，不能由后端临时生成`,
+  )
 }
 
 async function buildSimilarityWarningsAndBlockingIssues(input: {
@@ -256,7 +397,6 @@ async function buildSimilarityWarningsAndBlockingIssues(input: {
           modelNumber: true,
         },
       },
-      attributes: true,
       sourcePreSku: {
         select: {
           variantSelection: true,
@@ -267,15 +407,16 @@ async function buildSimilarityWarningsAndBlockingIssues(input: {
     },
   })
 
-  const existingProfiles = existingSkus.map((sku) => {
-    const attributes = isRecord(sku.attributes) ? sku.attributes : null
-    const variantSelection =
-      attributes?.variantSelectionSummary ?? sku.sourcePreSku?.variantSelection ?? Prisma.JsonNull
-    const bomPreview =
-      attributes?.bomPreview ?? sku.sourcePreSku?.bomPreview ?? Prisma.JsonNull
+  const existingProfiles = existingSkus.flatMap((sku) => {
+    if (!sku.sourcePreSku) {
+      return []
+    }
+
+    const variantSelection = sku.sourcePreSku.variantSelection ?? Prisma.JsonNull
+    const bomPreview = sku.sourcePreSku.bomPreview ?? Prisma.JsonNull
     const profile = buildPreSkuSimilarityProfile({ variantSelection, bomPreview })
 
-    return {
+    return [{
       skuId: sku.id,
       productId: sku.productId,
       label: buildSkuDisplayLabel({
@@ -284,7 +425,7 @@ async function buildSimilarityWarningsAndBlockingIssues(input: {
         skuCode: sku.skuCode,
       }),
       ...profile,
-    }
+    }]
   })
 
   const blockingIssues: string[] = []
@@ -387,6 +528,67 @@ function resolveSourceVariantIds(variantSelection: unknown): {
   }
 }
 
+function getPreSkuLabel(preSku: { customName?: string | null; defaultName: string }) {
+  return preSku.customName?.trim() || preSku.defaultName
+}
+
+function getSelectedVariantItems(variantSelection: unknown) {
+  const selection = normalizeVariantSelection(variantSelection)
+  return [
+    ...selection.slots.map((item) => ({ ...item, sourceGroup: '板材/组件' })),
+    ...selection.hardwareSelections.map((item) => ({ ...item, sourceGroup: '五金件' })),
+  ]
+}
+
+function validatePreSkuSourceVariants(
+  preSku: PreSkuWithRelations,
+  sourceVariantById: Map<string, AssetVariantWithRelations>,
+) {
+  const label = getPreSkuLabel(preSku)
+  const selectedItems = getSelectedVariantItems(preSku.variantSelection)
+  if (selectedItems.length === 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${label} 缺少资产规格款来源，不能正式入库`)
+  }
+
+  for (const item of selectedItems) {
+    const itemLabel =
+      item.name ||
+      item.code ||
+      ('slotKey' in item ? item.slotKey : item.selectionKey) ||
+      item.sourceGroup
+    const variantId = item.variantId?.trim()
+    if (!variantId) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${label} 的 ${itemLabel} 缺少规格款 ID，不能正式入库`)
+    }
+
+    const variant = sourceVariantById.get(variantId)
+    if (!variant) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${label} 的 ${itemLabel} 引用的规格款不存在，不能正式入库`)
+    }
+    if (variant.deletedAt || variant.assetFamily.deletedAt) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${label} 的 ${itemLabel} 引用的规格款已删除，不能正式入库`)
+    }
+    if (variant.status !== 'AVAILABLE') {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `${label} 的 ${itemLabel} 引用的规格款当前不是可用状态，不能正式入库`,
+      )
+    }
+    if (item.assetFamilyId && variant.assetFamilyId !== item.assetFamilyId) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `${label} 的 ${itemLabel} 所属资产族已变化，请回到草稿组重新确认后再入库`,
+      )
+    }
+    if (item.assetType && variant.assetType !== item.assetType) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        `${label} 的 ${itemLabel} 资产类型已变化，请回到草稿组重新确认后再入库`,
+      )
+    }
+  }
+}
+
 /**
  * 从 PreSku 的 variantSelection 生成板件数据
  */
@@ -395,6 +597,7 @@ async function createPanelsFromVariantSelection(
   productId: string,
   skuId: string,
   variantSelection: unknown,
+  sourceVariantById: Map<string, AssetVariantWithRelations>,
 ): Promise<string[]> {
   if (!isRecord(variantSelection)) {
     return []
@@ -408,30 +611,39 @@ async function createPanelsFromVariantSelection(
     if (slot.assetType !== 'BOARD') {
       continue
     }
+    const sourceVariant = sourceVariantById.get(slot.variantId)
+    const sourceDimensions = isRecord(sourceVariant?.dimensions) ? sourceVariant.dimensions : {}
 
     const panel = await tx.panel.create({
       data: {
         productId,
         skuId,
-        code: slot.code || `PANEL-${index + 1}`,
-        name: slot.name || `板件 ${index + 1}`,
-        gltfNodeName: slot.code || `panel_${index + 1}`,
+        code: sourceVariant?.code || slot.code || `PANEL-${index + 1}`,
+        name: sourceVariant?.name || slot.name || `板件 ${index + 1}`,
+        gltfNodeName: sourceVariant?.code || slot.code || `panel_${index + 1}`,
         partType: slot.role || null,
-        length: slot.dimensions.length || 0,
-        width: slot.dimensions.width || 0,
-        thickness: slot.dimensions.thickness || 0,
+        length: toNullableNumber(sourceDimensions.length) ?? slot.dimensions.length ?? 0,
+        width: toNullableNumber(sourceDimensions.width) ?? slot.dimensions.width ?? 0,
+        thickness: toNullableNumber(sourceDimensions.thickness) ?? slot.dimensions.thickness ?? 0,
         installOrder: null,
         explosionDirection: null,
         isAnchor: false,
-        assemblySemantic: slot.assemblyBasis ? (slot.assemblyBasis as Prisma.InputJsonValue) : Prisma.JsonNull,
+        assemblySemantic: sourceVariant?.assemblyBasis
+          ? (sourceVariant.assemblyBasis as Prisma.InputJsonValue)
+          : slot.assemblyBasis
+            ? (slot.assemblyBasis as Prisma.InputJsonValue)
+            : Prisma.JsonNull,
       },
     })
 
     createdPanelIds.push(panel.id)
 
     // 从 mountPoints 生成孔位
-    if (Array.isArray(slot.mountPoints) && slot.mountPoints.length > 0) {
-      await createHolesFromMountPoints(tx, panel.id, slot.mountPoints)
+    const mountPoints = Array.isArray(sourceVariant?.mountPoints)
+      ? sourceVariant.mountPoints
+      : slot.mountPoints
+    if (Array.isArray(mountPoints) && mountPoints.length > 0) {
+      await createHolesFromMountPoints(tx, panel.id, mountPoints)
     }
   }
 
@@ -473,6 +685,7 @@ async function createHardwareFromSelections(
   productId: string,
   skuId: string,
   variantSelection: unknown,
+  sourceVariantById: Map<string, AssetVariantWithRelations>,
 ): Promise<void> {
   if (!isRecord(variantSelection)) {
     return
@@ -481,8 +694,12 @@ async function createHardwareFromSelections(
   const hardwareSelections = asArray<PreSkuSelectedHardwareSelectionDTO>(variantSelection.hardwareSelections)
 
   for (const selection of hardwareSelections) {
-    const firstMountPoint = Array.isArray(selection.mountPoints) && selection.mountPoints.length > 0
-      ? selection.mountPoints[0]
+    const sourceVariant = sourceVariantById.get(selection.variantId)
+    const mountPoints = Array.isArray(sourceVariant?.mountPoints)
+      ? sourceVariant.mountPoints
+      : selection.mountPoints
+    const firstMountPoint = Array.isArray(mountPoints) && mountPoints.length > 0
+      ? mountPoints[0]
       : null
     const position = isRecord(firstMountPoint)
       ? (toVector3Tuple(firstMountPoint.position) ?? [0, 0, 0])
@@ -578,6 +795,7 @@ class IntakeService {
           throw new AppError(ErrorCode.PRE_SKU_NOT_FOUND, '准 SKU 不存在')
         }
         ensurePreSkuReadyForFormalization(preSku, draftGroup.id)
+        ensurePreSkuBasicInfoReadyForFormalization(preSku)
         return preSku
       }),
     )
@@ -610,6 +828,9 @@ class IntakeService {
     if (input.targetMode === 'ATTACH_PRODUCT' && !targetProduct) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, '目标 SPU 不存在')
     }
+    if (input.targetMode === 'ATTACH_PRODUCT' && targetProduct?.deletedAt) {
+      throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, '目标 SPU 已删除，不能继续入库')
+    }
 
     const sourceVariantInfoByPreSkuId = new Map<
       string,
@@ -626,16 +847,34 @@ class IntakeService {
     const sourceVariants =
       await assetVariantRepository.findByIdsWithRelationsIncludingDeleted(allSourceVariantIds)
     const sourceVariantById = new Map(sourceVariants.map((variant) => [variant.id, variant]))
+    preSkus.forEach((preSku) => {
+      validatePreSkuSourceVariants(preSku, sourceVariantById)
+    })
+
+    const createProductIdentity =
+      input.targetMode === 'CREATE_PRODUCT'
+        ? {
+            modelNumber: readRequiredFormalProductText(input.modelNumber, '型号', { uppercase: true }),
+            productName: readRequiredFormalProductText(input.productName, '产品名称'),
+          }
+        : null
 
     const createdPackagedItemIds: string[] = []
 
     return prisma.$transaction(async (tx) => {
+      if (createProductIdentity) {
+        await assertProductModelNumberAvailableForFormalization(
+          createProductIdentity.modelNumber,
+          tx,
+        )
+      }
+
       const product =
         targetProduct ??
         (await tx.product.create({
           data: {
-            modelNumber: input.modelNumber?.trim() || buildProductModelNumber(),
-            name: input.productName?.trim() || draftGroup.name,
+            modelNumber: createProductIdentity?.modelNumber ?? '',
+            name: createProductIdentity?.productName ?? '',
             description: `来自草稿组 ${draftGroup.name} 的正式入库结果`,
             categoryId: input.productCategoryId ?? null,
             visibility: 'TEAM',
@@ -669,11 +908,10 @@ class IntakeService {
         const costPrice =
           bomCost + (packagingSummary.totalCost ?? 0)
 
-        const preferredSkuCode =
-          skuItem.skuCode?.trim() ||
-          `${product.modelNumber}-${String(preSku.sequence).padStart(2, '0')}`
-        const skuCode = await buildUniqueSkuCode(product.id, preferredSkuCode, tx)
-        const skuName = skuItem.skuName?.trim() || preSku.customName || preSku.defaultName
+        const preferredSkuCode = normalizeFormalIdentityCode(readPreSkuBasicInfo(preSku, 'formalSkuCode'))
+        await assertSkuCodeAvailableForFormalization(preferredSkuCode, tx)
+        const skuCode = preferredSkuCode
+        const skuName = readPreSkuBasicInfo(preSku, 'specName')
         const sourceInfo = sourceVariantInfoByPreSkuId.get(preSku.id) ?? {
           primaryVariantId: null,
           variantIds: [],
@@ -696,13 +934,12 @@ class IntakeService {
           data: {
             productId: product.id,
             skuCode,
+            name: skuName,
             attributes: {
               draftGroupId: draftGroup.id,
               preSkuId: preSku.id,
-              skuName,
               componentCodes: preSku.componentCodes,
               bomPreview: preSku.bomPreview,
-              displaySummary: preSku.displaySummary,
               installStepPreview: preSku.installStepPreview,
               variantSelectionSummary: isRecord(preSku.variantSelection)
                 ? preSku.variantSelection
@@ -720,6 +957,9 @@ class IntakeService {
             sourcePreSkuId: preSku.id,
             sourceAssetVariantId: primarySourceAssetVariantId,
             sourceAssetVariantIds: sourceInfo.variantIds,
+            assetProfile: assetSkuSnapshot
+              ? { create: buildProductSkuAssetProfileData(assetSkuSnapshot) }
+              : undefined,
             warehouseLocationId: skuItem.warehouseLocationId ?? null,
           },
         })
@@ -732,12 +972,14 @@ class IntakeService {
           product.id,
           createdSku.id,
           preSku.variantSelection,
+          sourceVariantById,
         )
         await createHardwareFromSelections(
           tx,
           product.id,
           createdSku.id,
           preSku.variantSelection,
+          sourceVariantById,
         )
 
         // 创建正式的包装方案
diff --git a/furniture-3d-system/src/server/services/jst-sku-stock-sync.service.ts b/furniture-3d-system/src/server/services/jst-sku-stock-sync.service.ts
index e19ced3b..549707e8 100644
--- a/furniture-3d-system/src/server/services/jst-sku-stock-sync.service.ts
+++ b/furniture-3d-system/src/server/services/jst-sku-stock-sync.service.ts
@@ -9,6 +9,10 @@ import {
   type NonIntegratedProductRecord,
   type NonIntegratedSkuItem,
 } from '@/app/intake/non-integrated/nonIntegratedStorage'
+import {
+  buildStructuredProductProfileInput,
+  buildStructuredSkuItemInputs,
+} from './intake-non-integrated-product.service'
 
 type JstSkuSourceField =
   | 'sku_id'
@@ -108,7 +112,7 @@ function normalizeSourceString(value: unknown) {
 }
 
 function normalizeSkuId(value: unknown) {
-  return normalizeSourceString(value)
+  return normalizeSourceString(value).toUpperCase()
 }
 
 function buildStableId(prefix: string, value: string) {
@@ -170,40 +174,6 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
 }
 
-function readPayloadString(payload: unknown, key: string) {
-  if (!isRecord(payload)) return ''
-  return typeof payload[key] === 'string' ? payload[key].trim() : ''
-}
-
-function readNestedPayloadString(payload: unknown, key: string) {
-  if (!isRecord(payload)) return ''
-  const metadata = payload.metadata
-  if (!isRecord(metadata)) return ''
-  return typeof metadata[key] === 'string' ? metadata[key].trim() : ''
-}
-
-function isJstSkuPayload(payload: unknown) {
-  return [
-    readPayloadString(payload, 'source'),
-    readPayloadString(payload, 'sourceTable'),
-    readPayloadString(payload, 'sourceType'),
-    readPayloadString(payload, 'importSource'),
-    readPayloadString(payload, 'externalSource'),
-    readNestedPayloadString(payload, 'source'),
-    readNestedPayloadString(payload, 'sourceTable'),
-    readNestedPayloadString(payload, 'sourceType'),
-    readNestedPayloadString(payload, 'importSource'),
-    readNestedPayloadString(payload, 'externalSource'),
-  ].some((value) => {
-    const normalizedValue = value.toLowerCase().replace(/-/g, '_')
-    return (
-      normalizedValue === 'jst_sku' ||
-      normalizedValue === 'jstsku' ||
-      normalizedValue === 'jst_sku_stock_source'
-    )
-  })
-}
-
 function isJstSkuSkuItem(item: NonIntegratedSkuItem) {
   return (
     item.id.trim().startsWith('jst-stock-sku-') ||
@@ -215,6 +185,13 @@ function isJstSkuSkuItem(item: NonIntegratedSkuItem) {
   )
 }
 
+function isJstStockProductIdentity(record: {
+  id: string
+  profile?: { sourceSpu?: string | null } | null
+}) {
+  return record.id.startsWith('jst-stock-') || normalizeSourceString(record.profile?.sourceSpu).length > 0
+}
+
 function mergeDefinedSourceFields<T extends Record<string, unknown>>(
   target: T,
   source: Partial<T>,
@@ -276,7 +253,7 @@ function buildSourceSkuItem(row: JstSkuSourceRow, sequence: number): NonIntegrat
 }
 
 function readSourceSpuKey(row: JstSkuSourceRow) {
-  return normalizeSourceString(row.i_id) || normalizeSkuId(row.sku_id)
+  return normalizeSourceString(row.i_id).toUpperCase() || normalizeSkuId(row.sku_id)
 }
 
 function firstSourceValue(rows: JstSkuSourceRow[], key: JstSkuSourceField) {
@@ -341,7 +318,7 @@ function buildSourceProductPayload(
   group: JstSkuSourceGroup,
   syncedAt: string,
 ): (NonIntegratedProductRecord & Record<string, unknown>) | null {
-  const sourceSpu = group.sourceSpu.trim()
+  const sourceSpu = group.sourceSpu.trim().toUpperCase()
   if (!sourceSpu) return null
 
   const skuContentRows = pickSkuContentRows(group.rows)
@@ -760,6 +737,7 @@ async function fetchSourceGroups(params: {
 async function findExistingStockProduct(id: string, spu: string, sourceSpu: string) {
   const existingById = await prisma.intakeNonIntegratedProduct.findUnique({
     where: { id },
+    include: { profile: true },
   })
   if (existingById) return existingById
 
@@ -768,13 +746,15 @@ async function findExistingStockProduct(id: string, spu: string, sourceSpu: stri
       OR: [
         { spu },
         {
-          payload: {
-            path: ['metadata', 'sourceSpu'],
-            equals: sourceSpu,
+          profile: {
+            is: {
+              sourceSpu,
+            },
           },
         },
       ],
     },
+    include: { profile: true },
     orderBy: {
       updatedAt: 'desc',
     },
@@ -782,7 +762,7 @@ async function findExistingStockProduct(id: string, spu: string, sourceSpu: stri
 }
 
 async function removeExcludedStockProduct(group: JstSkuSourceGroup, apply: boolean) {
-  const sourceSpu = group.sourceSpu.trim()
+  const sourceSpu = group.sourceSpu.trim().toUpperCase()
   if (!sourceSpu) return 'skipped' as const
 
   const id = buildStockProductId(sourceSpu)
@@ -790,7 +770,7 @@ async function removeExcludedStockProduct(group: JstSkuSourceGroup, apply: boole
   const existing = await findExistingStockProduct(id, spu, sourceSpu)
 
   if (!existing) return 'skipped' as const
-  if (!isJstSkuPayload(existing.payload) && !existing.id.startsWith('jst-stock-')) {
+  if (!isJstStockProductIdentity(existing)) {
     return 'conflicts' as const
   }
   if (existing.deletedAt !== null) return 'unchanged' as const
@@ -801,6 +781,9 @@ async function removeExcludedStockProduct(group: JstSkuSourceGroup, apply: boole
       data: {
         deletedAt: new Date(),
         updatedBy: readEnv('JST_SKU_SYNC_USER_ID') || DEFAULT_SYNC_USER_ID,
+        skuItems: {
+          deleteMany: {},
+        },
       },
     })
   }
@@ -821,15 +804,16 @@ async function syncOneSourceGroup(group: JstSkuSourceGroup, apply: boolean, sync
   const existing = await findExistingStockProduct(
     sourcePayload.id,
     sourcePayload.spu,
-    group.sourceSpu,
+    sourcePayload.spu,
   )
 
-  if (existing && existing.id !== sourcePayload.id && !isJstSkuPayload(existing.payload)) {
+  if (existing && existing.id !== sourcePayload.id && !isJstStockProductIdentity(existing)) {
     return 'conflicts' as const
   }
 
   if (!existing) {
     if (apply) {
+      const structuredSkuItems = buildStructuredSkuItemInputs(sourcePayload)
       await prisma.intakeNonIntegratedProduct.create({
         data: {
           id: sourcePayload.id,
@@ -844,6 +828,18 @@ async function syncOneSourceGroup(group: JstSkuSourceGroup, apply: boolean, sync
           createdBy: readEnv('JST_SKU_SYNC_USER_ID') || DEFAULT_SYNC_USER_ID,
           updatedBy: readEnv('JST_SKU_SYNC_USER_ID') || DEFAULT_SYNC_USER_ID,
           createdAt: new Date(syncedAt),
+          profile: {
+            create: buildStructuredProductProfileInput(sourcePayload),
+          },
+          ...(structuredSkuItems.length > 0
+            ? {
+                skuItems: {
+                  createMany: {
+                    data: structuredSkuItems,
+                  },
+                },
+              }
+            : {}),
         },
       })
     }
@@ -862,6 +858,7 @@ async function syncOneSourceGroup(group: JstSkuSourceGroup, apply: boolean, sync
   }
 
   if (apply) {
+    const structuredSkuItems = buildStructuredSkuItemInputs(nextPayload)
     await prisma.intakeNonIntegratedProduct.update({
       where: { id: existing.id },
       data: {
@@ -875,6 +872,22 @@ async function syncOneSourceGroup(group: JstSkuSourceGroup, apply: boolean, sync
         visibility: 'PUBLIC',
         updatedBy: readEnv('JST_SKU_SYNC_USER_ID') || DEFAULT_SYNC_USER_ID,
         deletedAt: null,
+        profile: {
+          upsert: {
+            create: buildStructuredProductProfileInput(nextPayload),
+            update: buildStructuredProductProfileInput(nextPayload),
+          },
+        },
+        skuItems: {
+          deleteMany: {},
+          ...(structuredSkuItems.length > 0
+            ? {
+                createMany: {
+                  data: structuredSkuItems,
+                },
+              }
+            : {}),
+        },
       },
     })
   }
diff --git a/furniture-3d-system/src/server/services/logger.service.ts b/furniture-3d-system/src/server/services/logger.service.ts
index 0b68c64e..916c3f72 100644
--- a/furniture-3d-system/src/server/services/logger.service.ts
+++ b/furniture-3d-system/src/server/services/logger.service.ts
@@ -22,22 +22,38 @@ export interface LogActivityParams {
   metadata?: LogData;
 }
 
+function normalizeRequiredText(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  const normalized = value.trim();
+  return normalized ? normalized : null;
+}
+
 /**
  * 记录操作日志
  */
 export async function logActivity(params: LogActivityParams): Promise<void> {
   try {
+    const userId = normalizeRequiredText(params.userId);
+    const action = normalizeRequiredText(params.action);
+    if (!userId || !action) {
+      throw new Error('操作日志缺少用户或动作');
+    }
+    const targetType = normalizeRequiredText(params.targetType);
+    const targetId = normalizeRequiredText(params.targetId);
+    if (Boolean(targetType) !== Boolean(targetId)) {
+      throw new Error('操作日志目标类型和目标 ID 必须同时填写');
+    }
     // 过滤敏感信息
     const sanitizedChanges = sanitizeData(params.changes);
     const sanitizedMetadata = sanitizeData(params.metadata);
 
     await prisma.activityLog.create({
       data: {
-        userId: params.userId,
+        userId,
         type: params.type,
-        action: params.action,
-        targetType: params.targetType,
-        targetId: params.targetId,
+        action,
+        targetType,
+        targetId,
         changes: sanitizedChanges,
         metadata: sanitizedMetadata,
       },
diff --git a/furniture-3d-system/src/server/services/material.service.ts b/furniture-3d-system/src/server/services/material.service.ts
index 9010d3ad..ee6826a0 100644
--- a/furniture-3d-system/src/server/services/material.service.ts
+++ b/furniture-3d-system/src/server/services/material.service.ts
@@ -127,6 +127,33 @@ export interface MaterialListOptions {
   includeInactive?: boolean
 }
 
+function normalizeMaterialCode(value: string | null | undefined): string {
+  return value?.trim().toUpperCase() ?? ''
+}
+
+function normalizeRequiredText(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
+function normalizeNonNegativeInteger(
+  value: number | null | undefined,
+  fieldName: string,
+): number | undefined {
+  if (value === undefined || value === null) return undefined
+  if (!Number.isInteger(value) || value < 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是非负整数`)
+  }
+  return value
+}
+
 // ============ 材质服务类 ============
 
 class MaterialService {
@@ -269,18 +296,25 @@ class MaterialService {
       throw new AppError(ErrorCode.FILE_NOT_FOUND, '材质分类不存在')
     }
 
+    const name = normalizeRequiredText(input.name, '材质名称')
+
     // 检查名称是否重复
     const nameExists = await materialRepository.nameExistsInCategory(
-      input.name,
+      name,
       input.categoryId
     )
     if (nameExists) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '该分类下已存在同名材质')
     }
 
+    const code = normalizeMaterialCode(input.code) || await this.buildNextMaterialCode()
+    if (await materialRepository.findByCode(code)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '材质编码已存在')
+    }
+
     const createData = {
-      code: input.code?.trim() || await this.buildNextMaterialCode(),
-      name: input.name,
+      code,
+      name,
       category: { connect: { id: input.categoryId } },
       thumbnailUrl: this.normalizeIncomingThumbnailUrl(input.thumbnailUrl),
       textureUrl: input.textureUrl,
@@ -321,11 +355,13 @@ class MaterialService {
       }
     }
 
+    const nextName = input.name === undefined ? undefined : normalizeRequiredText(input.name, '材质名称')
+
     // 如果更改名称，检查是否重复
-    if (input.name && input.name !== existing.name) {
+    if (nextName !== undefined && nextName !== existing.name) {
       const targetCategoryId = input.categoryId || existing.categoryId
       const nameExists = await materialRepository.nameExistsInCategory(
-        input.name,
+        nextName,
         targetCategoryId,
         id
       )
@@ -337,7 +373,7 @@ class MaterialService {
     // 构建更新数据
     const updateData: Record<string, unknown> = {}
 
-    if (input.name !== undefined) updateData.name = input.name
+    if (nextName !== undefined) updateData.name = nextName
     if (input.categoryId !== undefined) {
       updateData.category = { connect: { id: input.categoryId } }
     }
@@ -475,19 +511,22 @@ class MaterialService {
    * 创建分类
    */
   async createCategory(input: CreateMaterialCategoryInput): Promise<MaterialCategoryDTO> {
+    const name = normalizeRequiredText(input.name, '分类名称')
+    const requestedSortOrder = normalizeNonNegativeInteger(input.sortOrder, '分类排序')
+
     // 检查名称是否重复
-    const nameExists = await materialCategoryRepository.nameExists(input.name)
+    const nameExists = await materialCategoryRepository.nameExists(name)
     if (nameExists) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '分类名称已存在')
     }
 
     // 获取下一个排序号
-    const sortOrder = input.sortOrder ?? await materialCategoryRepository.getNextSortOrder()
+    const sortOrder = requestedSortOrder ?? await materialCategoryRepository.getNextSortOrder()
 
     // 创建分类
     const category = await materialCategoryRepository.create({
-      name: input.name,
-      icon: input.icon,
+      name,
+      icon: normalizeOptionalText(input.icon),
       sortOrder,
       isActive: input.isActive ?? true,
     })
@@ -512,9 +551,12 @@ class MaterialService {
       throw new AppError(ErrorCode.FILE_NOT_FOUND, '材质分类不存在')
     }
 
+    const nextName = input.name === undefined ? undefined : normalizeRequiredText(input.name, '分类名称')
+    const nextSortOrder = normalizeNonNegativeInteger(input.sortOrder, '分类排序')
+
     // 如果更改名称，检查是否重复
-    if (input.name && input.name !== existing.name) {
-      const nameExists = await materialCategoryRepository.nameExists(input.name, id)
+    if (nextName !== undefined && nextName !== existing.name) {
+      const nameExists = await materialCategoryRepository.nameExists(nextName, id)
       if (nameExists) {
         throw new AppError(ErrorCode.VALIDATION_FAILED, '分类名称已存在')
       }
@@ -522,9 +564,9 @@ class MaterialService {
 
     // 更新分类
     const category = await materialCategoryRepository.update(id, {
-      name: input.name,
-      icon: input.icon,
-      sortOrder: input.sortOrder,
+      name: nextName,
+      icon: input.icon === undefined ? undefined : normalizeOptionalText(input.icon),
+      sortOrder: nextSortOrder,
       isActive: input.isActive,
     })
 
diff --git a/furniture-3d-system/src/server/services/open-platform-demo-seed.service.ts b/furniture-3d-system/src/server/services/open-platform-demo-seed.service.ts
index d4b9b0a1..54fc7eea 100644
--- a/furniture-3d-system/src/server/services/open-platform-demo-seed.service.ts
+++ b/furniture-3d-system/src/server/services/open-platform-demo-seed.service.ts
@@ -6,6 +6,7 @@ import {
   STANDARD_FINISH_CATALOG,
 } from '@/lib/standard-finish-catalog'
 import { MATERIAL_CODE_PREFIX, formatMaterialCode, parseMaterialCode } from '@/lib/material-code'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { buildStandardFinishMaterialData } from '@/lib/standard-finish-sync'
 import type { OpenProductMountPoint } from '@/lib/open-product/types'
 import { AppError, ErrorCode } from '@/server/core/errors'
@@ -70,7 +71,7 @@ async function buildNextSeedMaterialCode(): Promise<string> {
   let sequence = (parseMaterialCode(latestMaterial?.code) ?? 0) + 1
   let code = formatMaterialCode(sequence)
 
-  while (await prisma.material.findUnique({ where: { code } })) {
+  while (await prisma.material.findUnique({ where: { code: normalizeCoreIdentity(code) } })) {
     sequence += 1
     code = formatMaterialCode(sequence)
   }
diff --git a/furniture-3d-system/src/server/services/packaging-plan-calculator.ts b/furniture-3d-system/src/server/services/packaging-plan-calculator.ts
index 0b570841..63973198 100644
--- a/furniture-3d-system/src/server/services/packaging-plan-calculator.ts
+++ b/furniture-3d-system/src/server/services/packaging-plan-calculator.ts
@@ -29,6 +29,24 @@ function toFiniteNumber(value: number | null | undefined): number | null {
   return typeof value === 'number' && Number.isFinite(value) ? value : null
 }
 
+function assertPositiveInteger(value: unknown, message: string): asserts value is number {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, message)
+  }
+}
+
+function assertPositiveNumber(value: unknown, message: string): asserts value is number {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, message)
+  }
+}
+
+function assertNonNegativeNumber(value: unknown, message: string): asserts value is number {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, message)
+  }
+}
+
 function buildPackagingInputItemWeightMap(packagingInput: PreSkuPackagingInputDTO) {
   return new Map(
     packagingInput.items.map((item) => [
@@ -44,6 +62,51 @@ function buildMaterialVariantMap(materialVariants: AssetVariantWithRelations[])
   return new Map(materialVariants.map((variant) => [variant.id, variant]))
 }
 
+export function assertPackagingBoxesWritable(boxes: SavePreSkuPackagingPlanBoxInput[]): void {
+  const seenBoxNumbers = new Set<number>()
+
+  boxes.forEach((box, index) => {
+    const label = `第 ${index + 1} 个包装箱`
+    assertPositiveInteger(box.boxNumber, `${label}编号必须是正整数`)
+    if (seenBoxNumbers.has(box.boxNumber)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `包装箱编号 ${box.boxNumber} 重复`)
+    }
+    seenBoxNumbers.add(box.boxNumber)
+
+    if (!box.name.trim()) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${label}名称不能为空`)
+    }
+
+    assertPositiveNumber(box.outerSizeMm.length, `${label}长度必须大于 0`)
+    assertPositiveNumber(box.outerSizeMm.width, `${label}宽度必须大于 0`)
+    assertPositiveNumber(box.outerSizeMm.height, `${label}高度必须大于 0`)
+
+    box.items.forEach((item, itemIndex) => {
+      assertPositiveNumber(item.quantity, `${label}第 ${itemIndex + 1} 个内装物数量必须大于 0`)
+      if (!item.refId.trim()) {
+        throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${label}第 ${itemIndex + 1} 个内装物缺少来源 ID`)
+      }
+      if (!item.name.trim()) {
+        throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${label}第 ${itemIndex + 1} 个内装物名称不能为空`)
+      }
+    })
+
+    box.materials.forEach((material, materialIndex) => {
+      assertPositiveNumber(material.quantity, `${label}第 ${materialIndex + 1} 个包装材料数量必须大于 0`)
+      if (!material.assetVariantId.trim()) {
+        throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${label}第 ${materialIndex + 1} 个包装材料缺少规格款 ID`)
+      }
+    })
+
+    if (box.estimatedWeightKg !== undefined && box.estimatedWeightKg !== null) {
+      assertNonNegativeNumber(box.estimatedWeightKg, `${label}预估重量不能为负数`)
+    }
+    if (box.estimatedCost !== undefined && box.estimatedCost !== null) {
+      assertNonNegativeNumber(box.estimatedCost, `${label}预估成本不能为负数`)
+    }
+  })
+}
+
 function assertPackagingMaterialVariant(
   materialVariantId: string,
   variantsById: Map<string, AssetVariantWithRelations>,
@@ -111,6 +174,8 @@ export function materializePackagingPlanForPersistence(input: {
   boxes: PreSkuPackagingPlanBoxDTO[]
   costSummary: PreSkuPackagingCostSummaryDTO | null
 } {
+  assertPackagingBoxesWritable(input.boxes)
+
   if (input.boxes.length === 0) {
     return {
       boxes: [],
diff --git a/furniture-3d-system/src/server/services/packaging.service.ts b/furniture-3d-system/src/server/services/packaging.service.ts
index 0793f0cb..5ff3e1fc 100644
--- a/furniture-3d-system/src/server/services/packaging.service.ts
+++ b/furniture-3d-system/src/server/services/packaging.service.ts
@@ -74,6 +74,49 @@ export interface PackagingServiceResult<T> {
   statusCode?: number
 }
 
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
+function validatePositiveInteger(value: number | null | undefined, fieldName: string): PackagingServiceResult<never> | null {
+  if (value === undefined || value === null) return null
+  if (!Number.isInteger(value) || value <= 0) {
+    return { success: false, error: `${fieldName}必须是正整数`, code: ErrorCode.VALIDATION_FAILED, statusCode: 400 }
+  }
+  return null
+}
+
+function validateNonNegativeNumber(value: number | null | undefined, fieldName: string): PackagingServiceResult<never> | null {
+  if (value === undefined || value === null) return null
+  if (!Number.isFinite(value) || value < 0) {
+    return { success: false, error: `${fieldName}不能为负数`, code: ErrorCode.VALIDATION_FAILED, statusCode: 400 }
+  }
+  return null
+}
+
+function validateBoxes(value: BoxData[] | undefined): PackagingServiceResult<never> | null {
+  if (value === undefined) return null
+  if (!Array.isArray(value)) {
+    return { success: false, error: '箱子详情必须是数组', code: ErrorCode.VALIDATION_FAILED, statusCode: 400 }
+  }
+  for (const box of value) {
+    if (
+      !Number.isInteger(box.boxNumber) ||
+      !Number.isFinite(box.length) ||
+      !Number.isFinite(box.width) ||
+      !Number.isFinite(box.height) ||
+      box.length <= 0 ||
+      box.width <= 0 ||
+      box.height <= 0 ||
+      !Number.isFinite(box.weight) ||
+      box.weight < 0
+    ) {
+      return { success: false, error: '箱子编号、尺寸和重量不合法', code: ErrorCode.VALIDATION_FAILED, statusCode: 400 }
+    }
+  }
+  return null
+}
+
 // ============ 包装方案服务 ============
 
 class PackagingService {
@@ -129,6 +172,14 @@ class PackagingService {
     if (!input.name?.trim()) {
       return { success: false, error: '方案名称不能为空', code: ErrorCode.VALIDATION_REQUIRED_FIELD, statusCode: 400 }
     }
+    const boxValidation = validateBoxes(input.boxes)
+    if (boxValidation) return boxValidation
+    const boxCountValidation = validatePositiveInteger(input.boxCount, '箱数')
+    if (boxCountValidation) return boxCountValidation
+    const totalWeightValidation = validateNonNegativeNumber(input.totalWeight, '总重量')
+    if (totalWeightValidation) return totalWeightValidation
+    const totalVolumeValidation = validateNonNegativeNumber(input.totalVolume, '总体积')
+    if (totalVolumeValidation) return totalVolumeValidation
 
     // 如果设置为默认，先取消其他默认方案
     if (input.isDefault) {
@@ -143,12 +194,12 @@ class PackagingService {
     const plan = await packagingRepository.createPlan({
       productId,
       name: input.name.trim(),
-      description: input.description?.trim() || null,
+      description: normalizeOptionalText(input.description),
       boxCount: input.boxCount || boxes.length || 1,
       boxes: boxes as unknown as object,
       totalWeight,
       totalVolume,
-      notes: input.notes?.trim() || null,
+      notes: normalizeOptionalText(input.notes),
       isDefault: input.isDefault || false,
     })
 
@@ -171,6 +222,17 @@ class PackagingService {
     if (!existingPlan) {
       return { success: false, error: '包装方案不存在', code: ErrorCode.FILE_NOT_FOUND, statusCode: 404 }
     }
+    if (input.name !== undefined && !input.name.trim()) {
+      return { success: false, error: '方案名称不能为空', code: ErrorCode.VALIDATION_REQUIRED_FIELD, statusCode: 400 }
+    }
+    const boxValidation = validateBoxes(input.boxes)
+    if (boxValidation) return boxValidation
+    const boxCountValidation = validatePositiveInteger(input.boxCount, '箱数')
+    if (boxCountValidation) return boxCountValidation
+    const totalWeightValidation = validateNonNegativeNumber(input.totalWeight, '总重量')
+    if (totalWeightValidation) return totalWeightValidation
+    const totalVolumeValidation = validateNonNegativeNumber(input.totalVolume, '总体积')
+    if (totalVolumeValidation) return totalVolumeValidation
 
     // 如果设置为默认，先取消其他默认方案
     if (input.isDefault && !existingPlan.isDefault) {
@@ -203,12 +265,12 @@ class PackagingService {
 
     const plan = await packagingRepository.updatePlan(input.id, {
       name: hasField('name') ? input.name?.trim() || existingPlan.name : existingPlan.name,
-      description: hasField('description') ? input.description?.trim() || null : existingPlan.description,
+      description: hasField('description') ? normalizeOptionalText(input.description) : existingPlan.description,
       boxCount: hasField('boxCount') ? input.boxCount ?? existingPlan.boxCount : (hasBoxes ? boxes.length || existingPlan.boxCount : existingPlan.boxCount),
       boxes: hasBoxes ? (boxes as unknown as object) : existingBoxes,
       totalWeight,
       totalVolume,
-      notes: hasField('notes') ? input.notes?.trim() || null : existingPlan.notes,
+      notes: hasField('notes') ? normalizeOptionalText(input.notes) : existingPlan.notes,
       isDefault: input.isDefault ?? existingPlan.isDefault,
     })
 
diff --git a/furniture-3d-system/src/server/services/panel-validation.service.ts b/furniture-3d-system/src/server/services/panel-validation.service.ts
index a820d717..276de0ff 100644
--- a/furniture-3d-system/src/server/services/panel-validation.service.ts
+++ b/furniture-3d-system/src/server/services/panel-validation.service.ts
@@ -3,10 +3,89 @@ import { AppError, ErrorCode } from '@/server/core/errors'
 import { panelRepository } from '../repositories/panel.repository'
 import type {
   BatchAssemblySemanticUpdateItem,
+  CreatePanelInput,
+  ImportPanelItem,
   NormalizedInstallOrderUpdate,
+  UpdatePanelInput,
 } from './panel.service.types'
 
+const PANEL_EXPLOSION_DIRECTIONS = new Set([
+  'auto',
+  'up',
+  'down',
+  'left',
+  'right',
+  'front',
+  'back',
+])
+
 class PanelValidationService {
+  normalizeCreateInput(input: CreatePanelInput): CreatePanelInput {
+    return {
+      ...input,
+      code: this.normalizeCode(input.code),
+      name: this.normalizeRequiredText(input.name, '板件名称'),
+      gltfNodeName: this.normalizeRequiredText(input.gltfNodeName, 'glTF 节点名'),
+      partType: this.normalizeOptionalText(input.partType) ?? undefined,
+      length: this.normalizePositiveNumber(input.length, '板件长度'),
+      width: this.normalizePositiveNumber(input.width, '板件宽度'),
+      thickness: this.normalizePositiveNumber(input.thickness, '板件厚度'),
+      installOrder:
+        input.installOrder === undefined
+          ? undefined
+          : this.normalizeNonNegativeInteger(input.installOrder, '安装序号'),
+      explosionDirection:
+        this.normalizeExplosionDirection(input.explosionDirection) ?? undefined,
+      materialId: this.normalizeOptionalText(input.materialId) ?? undefined,
+    }
+  }
+
+  normalizeUpdateInput(input: UpdatePanelInput): UpdatePanelInput {
+    return {
+      ...input,
+      ...(input.code !== undefined ? { code: this.normalizeCode(input.code) } : {}),
+      ...(input.name !== undefined
+        ? { name: this.normalizeRequiredText(input.name, '板件名称') }
+        : {}),
+      ...(input.gltfNodeName !== undefined
+        ? { gltfNodeName: this.normalizeRequiredText(input.gltfNodeName, 'glTF 节点名') }
+        : {}),
+      ...(input.partType !== undefined
+        ? { partType: this.normalizeOptionalText(input.partType) ?? undefined }
+        : {}),
+      ...(input.length !== undefined
+        ? { length: this.normalizePositiveNumber(input.length, '板件长度') }
+        : {}),
+      ...(input.width !== undefined
+        ? { width: this.normalizePositiveNumber(input.width, '板件宽度') }
+        : {}),
+      ...(input.thickness !== undefined
+        ? { thickness: this.normalizePositiveNumber(input.thickness, '板件厚度') }
+        : {}),
+      ...(input.installOrder !== undefined
+        ? { installOrder: this.normalizeNonNegativeInteger(input.installOrder, '安装序号') }
+        : {}),
+      ...(input.explosionDirection !== undefined
+        ? { explosionDirection: this.normalizeExplosionDirection(input.explosionDirection) ?? undefined }
+        : {}),
+      ...(input.materialId !== undefined
+        ? { materialId: input.materialId === null ? null : this.normalizeOptionalText(input.materialId) }
+        : {}),
+    }
+  }
+
+  normalizeImportItems(panels: ImportPanelItem[]): ImportPanelItem[] {
+    const codeSet = new Set<string>()
+    return panels.map((panel) => {
+      const normalized = this.normalizeCreateInput(panel)
+      if (codeSet.has(normalized.code)) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, `导入板件编号重复: ${normalized.code}`)
+      }
+      codeSet.add(normalized.code)
+      return normalized
+    })
+  }
+
   normalizeInstallOrderUpdates(
     updates: Array<{ id: string; installOrder: number }>
   ): NormalizedInstallOrderUpdate[] {
@@ -173,6 +252,50 @@ class PanelValidationService {
 
     updates.forEach((item) => visit(item.panelId))
   }
+
+  private normalizeCode(value: string): string {
+    const code = value?.trim().toUpperCase() ?? ''
+    if (!code) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '板件编号不能为空')
+    }
+    return code
+  }
+
+  private normalizeRequiredText(value: string, fieldName: string): string {
+    const normalized = value?.trim() ?? ''
+    if (!normalized) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}不能为空`)
+    }
+    return normalized
+  }
+
+  private normalizeOptionalText(value: string | undefined): string | null {
+    const normalized = value?.trim() ?? ''
+    return normalized || null
+  }
+
+  private normalizePositiveNumber(value: number, fieldName: string): number {
+    if (!Number.isFinite(value) || value <= 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须大于 0`)
+    }
+    return value
+  }
+
+  private normalizeNonNegativeInteger(value: number, fieldName: string): number {
+    if (!Number.isInteger(value) || value < 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldName}必须是非负整数`)
+    }
+    return value
+  }
+
+  private normalizeExplosionDirection(value: string | undefined): string | null {
+    const normalized = value?.trim() ?? ''
+    if (!normalized) return null
+    if (!PANEL_EXPLOSION_DIRECTIONS.has(normalized)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '板件爆炸方向无效')
+    }
+    return normalized
+  }
 }
 
 export const panelValidationService = new PanelValidationService()
diff --git a/furniture-3d-system/src/server/services/panel.service.ts b/furniture-3d-system/src/server/services/panel.service.ts
index b8058961..f728fb28 100644
--- a/furniture-3d-system/src/server/services/panel.service.ts
+++ b/furniture-3d-system/src/server/services/panel.service.ts
@@ -183,28 +183,29 @@ class PanelServiceClass {
   async create(productId: string, input: CreatePanelInput, ctx: ServiceContext): Promise<PanelDTO> {
     const product = await panelScopeService.getProductForPermission(productId)
     panelScopeService.assertCanEditProduct(product, ctx.user, '您没有权限为此产品创建板件')
+    const normalizedInput = panelValidationService.normalizeCreateInput(input)
 
-    const codeExists = await panelRepository.codeExistsInProduct(productId, input.code, null)
+    const codeExists = await panelRepository.codeExistsInProduct(productId, normalizedInput.code, null)
     if (codeExists) {
-      throw new AppError(ErrorCode.VALIDATION_FAILED, `板件编号 "${input.code}" 已存在于该产品中`)
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `板件编号 "${normalizedInput.code}" 已存在于该产品中`)
     }
 
     const panel = await panelRepository.createWithRelations({
       productId,
-      code: input.code,
-      name: input.name,
-      gltfNodeName: input.gltfNodeName,
-      partType: input.partType || null,
-      length: input.length,
-      width: input.width,
-      thickness: input.thickness,
-      installOrder: input.installOrder || 0,
-      explosionDirection: input.explosionDirection || null,
-      isAnchor: input.isAnchor || false,
+      code: normalizedInput.code,
+      name: normalizedInput.name,
+      gltfNodeName: normalizedInput.gltfNodeName,
+      partType: normalizedInput.partType || null,
+      length: normalizedInput.length,
+      width: normalizedInput.width,
+      thickness: normalizedInput.thickness,
+      installOrder: normalizedInput.installOrder ?? 0,
+      explosionDirection: normalizedInput.explosionDirection || null,
+      isAnchor: normalizedInput.isAnchor || false,
     })
 
-    if (input.materialId) {
-      await panelRepository.setMaterial(panel.id, input.materialId)
+    if (normalizedInput.materialId) {
+      await panelRepository.setMaterial(panel.id, normalizedInput.materialId)
     }
 
     await this.invalidateProductCache(productId)
@@ -219,38 +220,39 @@ class PanelServiceClass {
 
     const product = await panelScopeService.getProductForPermission(existing.productId)
     panelScopeService.assertCanEditProduct(product, ctx.user, '您没有权限修改此板件')
+    const normalizedInput = panelValidationService.normalizeUpdateInput(input)
 
-    if (input.code && input.code !== existing.code) {
+    if (normalizedInput.code && normalizedInput.code !== existing.code) {
       const codeExists = await panelRepository.codeExistsInProduct(
         existing.productId,
-        input.code,
+        normalizedInput.code,
         existing.skuId ?? null,
         id
       )
       if (codeExists) {
-        throw new AppError(ErrorCode.VALIDATION_FAILED, `板件编号 "${input.code}" 已存在于该产品中`)
+        throw new AppError(ErrorCode.VALIDATION_FAILED, `板件编号 "${normalizedInput.code}" 已存在于该产品中`)
       }
     }
 
     const updateData: Prisma.PanelUpdateInput = {}
-    if (input.code !== undefined) updateData.code = input.code
-    if (input.name !== undefined) updateData.name = input.name
-    if (input.gltfNodeName !== undefined) updateData.gltfNodeName = input.gltfNodeName
-    if (input.partType !== undefined) updateData.partType = input.partType
-    if (input.length !== undefined) updateData.length = input.length
-    if (input.width !== undefined) updateData.width = input.width
-    if (input.thickness !== undefined) updateData.thickness = input.thickness
-    if (input.installOrder !== undefined) updateData.installOrder = input.installOrder
-    if (input.explosionDirection !== undefined) updateData.explosionDirection = input.explosionDirection
-    if (input.isAnchor !== undefined) updateData.isAnchor = input.isAnchor
+    if (normalizedInput.code !== undefined) updateData.code = normalizedInput.code
+    if (normalizedInput.name !== undefined) updateData.name = normalizedInput.name
+    if (normalizedInput.gltfNodeName !== undefined) updateData.gltfNodeName = normalizedInput.gltfNodeName
+    if (input.partType !== undefined) updateData.partType = normalizedInput.partType ?? null
+    if (normalizedInput.length !== undefined) updateData.length = normalizedInput.length
+    if (normalizedInput.width !== undefined) updateData.width = normalizedInput.width
+    if (normalizedInput.thickness !== undefined) updateData.thickness = normalizedInput.thickness
+    if (normalizedInput.installOrder !== undefined) updateData.installOrder = normalizedInput.installOrder
+    if (input.explosionDirection !== undefined) updateData.explosionDirection = normalizedInput.explosionDirection ?? null
+    if (normalizedInput.isAnchor !== undefined) updateData.isAnchor = normalizedInput.isAnchor
 
     await panelRepository.update(id, updateData)
 
-    if (input.materialId !== undefined) {
-      if (input.materialId === null) {
+    if (normalizedInput.materialId !== undefined) {
+      if (normalizedInput.materialId === null) {
         await panelRepository.removeMaterial(id)
       } else {
-        await panelRepository.setMaterial(id, input.materialId)
+        await panelRepository.setMaterial(id, normalizedInput.materialId)
       }
     }
 
@@ -295,6 +297,7 @@ class PanelServiceClass {
 
     const existingPanels = await panelRepository.findByProductId(productId)
     const existingByCode = new Map(existingPanels.map((panel) => [panel.code, panel]))
+    const normalizedPanels = panelValidationService.normalizeImportItems(panels)
     const upsertItems: Array<{
       productId: string
       code: string
@@ -309,7 +312,7 @@ class PanelServiceClass {
       isAnchor: boolean
     }> = []
 
-    for (const panelData of panels) {
+    for (const panelData of normalizedPanels) {
       try {
         const existing = existingByCode.get(panelData.code)
         upsertItems.push({
diff --git a/furniture-3d-system/src/server/services/planning-validation.service.ts b/furniture-3d-system/src/server/services/planning-validation.service.ts
index 6feafaae..2af46713 100644
--- a/furniture-3d-system/src/server/services/planning-validation.service.ts
+++ b/furniture-3d-system/src/server/services/planning-validation.service.ts
@@ -1,8 +1,19 @@
 import type { PlanningSlotDefinition } from '@/lib/planning/candidate-generator'
+import type { PlanningSlotSelections } from '@/lib/planning/candidate-generator'
 import { parsePlanningTemplateDefinition } from '@/lib/planning/parsers'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import { categoryRepository } from '../repositories'
 
+const PLANNING_VISIBILITIES = new Set(['PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC'])
+
+function hasControlCharacter(value: string): boolean {
+  return /[\u0000-\u001F\u007F]/.test(value)
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value)
+}
+
 class PlanningValidationService {
   parseTemplateDefinition(input: {
     code: string
@@ -21,6 +32,24 @@ class PlanningValidationService {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '规划模板槽位定义不正确')
     }
 
+    const seenSlotKeys = new Set<string>()
+    const definedSlotKeys = new Set<string>()
+    for (const slot of parsedTemplate.slots) {
+      if (seenSlotKeys.has(slot.key)) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, `规划模板槽位 key 重复：${slot.key}`)
+      }
+      seenSlotKeys.add(slot.key)
+
+      if (slot.placement.mode === 'attach' && !definedSlotKeys.has(slot.placement.parentSlotKey)) {
+        throw new AppError(
+          ErrorCode.VALIDATION_FAILED,
+          `槽位“${slot.name}”引用的父槽位不存在或顺序靠后：${slot.placement.parentSlotKey}`,
+        )
+      }
+
+      definedSlotKeys.add(slot.key)
+    }
+
     return parsedTemplate
   }
 
@@ -32,6 +61,91 @@ class PlanningValidationService {
       throw new AppError(ErrorCode.CATEGORY_NOT_FOUND, '产品分类不存在')
     }
   }
+
+  normalizeRequiredText(value: unknown, fieldLabel: string): string {
+    if (typeof value !== 'string') {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldLabel}不能为空`)
+    }
+
+    const trimmed = value.trim()
+    if (!trimmed) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldLabel}不能为空`)
+    }
+    if (hasControlCharacter(trimmed)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}不能包含控制字符`)
+    }
+
+    return trimmed
+  }
+
+  normalizeOptionalText(value: unknown, fieldLabel: string): string | null {
+    if (value === undefined || value === null) return null
+    if (typeof value !== 'string') {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}必须是文本`)
+    }
+
+    const trimmed = value.trim()
+    if (!trimmed) return null
+    if (hasControlCharacter(trimmed)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}不能包含控制字符`)
+    }
+
+    return trimmed
+  }
+
+  normalizeOptionalObject(value: unknown, fieldLabel: string): Record<string, unknown> | null | undefined {
+    if (value === undefined) return undefined
+    if (value === null) return null
+    if (!isRecord(value)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `${fieldLabel}必须是对象`)
+    }
+    return value
+  }
+
+  normalizeVisibility(value: unknown): string {
+    if (value === undefined || value === null || value === '') return 'TEAM'
+    if (typeof value !== 'string') {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '规划工作台可见范围不正确')
+    }
+
+    const visibility = value.trim().toUpperCase()
+    if (!PLANNING_VISIBILITIES.has(visibility)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '规划工作台可见范围不正确')
+    }
+
+    return visibility
+  }
+
+  normalizeSlotSelections(
+    value: PlanningSlotSelections | undefined,
+    templateSlots: PlanningSlotDefinition[],
+  ): PlanningSlotSelections {
+    if (value === undefined) return {}
+    if (!isRecord(value)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '规划工作台槽位选择必须是对象')
+    }
+
+    const slotKeys = new Set(templateSlots.map((slot) => slot.key))
+    const normalized: PlanningSlotSelections = {}
+
+    Object.entries(value).forEach(([rawSlotKey, rawAssetIds]) => {
+      const slotKey = this.normalizeRequiredText(rawSlotKey, '槽位 key')
+      if (!slotKeys.has(slotKey)) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, `槽位选择引用了模板外槽位：${slotKey}`)
+      }
+      if (!Array.isArray(rawAssetIds)) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, `槽位“${slotKey}”的资产选择必须是数组`)
+      }
+
+      normalized[slotKey] = Array.from(
+        new Set(
+          rawAssetIds.map((assetId) => this.normalizeRequiredText(assetId, '资产 ID')),
+        ),
+      )
+    })
+
+    return normalized
+  }
 }
 
 export const planningValidationService = new PlanningValidationService()
diff --git a/furniture-3d-system/src/server/services/planning.service.ts b/furniture-3d-system/src/server/services/planning.service.ts
index 0128551a..bb2fcaca 100644
--- a/furniture-3d-system/src/server/services/planning.service.ts
+++ b/furniture-3d-system/src/server/services/planning.service.ts
@@ -1,5 +1,4 @@
 import { Prisma } from '@prisma/client'
-import { parsePlanningSlotSelections } from '@/lib/planning/parsers'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { AuthUser } from '@/server/core/types'
 import {
@@ -18,7 +17,6 @@ import type {
   CreatePlanningWorkspaceInput,
   PlanningCandidateGenerationDTO,
   PlanningDraftDTO,
-  PlanningSlotAssetOption,
   PlanningTemplateDTO,
   PlanningWorkspaceDTO,
   PlanningWorkspaceDetailDTO,
@@ -26,6 +24,10 @@ import type {
   UpdatePlanningWorkspaceInput,
 } from './planning.service.types'
 
+function normalizePlanningCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
 class PlanningService {
   async listTemplates(): Promise<PlanningTemplateDTO[]> {
     const records = await planningTemplateRepository.findAllWithRelations(true)
@@ -47,16 +49,19 @@ class PlanningService {
   ): Promise<PlanningTemplateDTO> {
     planningScopeService.assertCanWritePlanning(user, '当前账号没有权限创建规划模板')
 
-    const code = input.code.trim()
-    const name = input.name.trim()
-    if (!code || !name) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '模板编码和名称不能为空')
+    const code = normalizePlanningCode(input.code)
+    const name = planningValidationService.normalizeRequiredText(input.name, '模板名称')
+    if (!code) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '模板编码不能为空')
     }
+    const description = planningValidationService.normalizeOptionalText(input.description, '模板描述')
+    const namePattern = planningValidationService.normalizeOptionalText(input.namePattern, '模板命名规则')
+    const rules = planningValidationService.normalizeOptionalObject(input.rules, '模板规则')
 
     const parsedTemplate = planningValidationService.parseTemplateDefinition({
       code,
       name,
-      namePattern: input.namePattern ?? null,
+      namePattern,
       slots: input.slots,
     })
 
@@ -69,10 +74,10 @@ class PlanningService {
     const created = await planningTemplateRepository.create({
       code,
       name,
-      description: input.description?.trim() || null,
-      namePattern: input.namePattern?.trim() || null,
+      description,
+      namePattern,
       slots: parsedTemplate.slots as unknown as Prisma.InputJsonValue,
-      rules: toNullableJsonInput(input.rules),
+      rules: toNullableJsonInput(rules),
       isPreset: input.isPreset ?? false,
       isActive: input.isActive ?? true,
       category: input.categoryId ? { connect: { id: input.categoryId } } : undefined,
@@ -99,11 +104,27 @@ class PlanningService {
       throw new AppError(ErrorCode.PLANNING_TEMPLATE_NOT_FOUND, '规划模板不存在')
     }
 
-    const nextCode = input.code?.trim() ?? existing.code
-    const nextName = input.name?.trim() ?? existing.name
+    const nextCode = input.code === undefined ? existing.code : normalizePlanningCode(input.code)
+    if (!nextCode) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '模板编码不能为空')
+    }
+    const nextName =
+      input.name === undefined
+        ? existing.name
+        : planningValidationService.normalizeRequiredText(input.name, '模板名称')
     const nextNamePattern =
-      input.namePattern === undefined ? existing.namePattern : input.namePattern?.trim() || null
+      input.namePattern === undefined
+        ? existing.namePattern
+        : planningValidationService.normalizeOptionalText(input.namePattern, '模板命名规则')
     const nextSlots = input.slots ?? toTemplateDefinition(existing).slots
+    const nextDescription =
+      input.description === undefined
+        ? undefined
+        : planningValidationService.normalizeOptionalText(input.description, '模板描述')
+    const nextRules =
+      input.rules === undefined
+        ? undefined
+        : planningValidationService.normalizeOptionalObject(input.rules, '模板规则')
 
     const parsedTemplate = planningValidationService.parseTemplateDefinition({
       code: nextCode,
@@ -124,10 +145,10 @@ class PlanningService {
     await planningTemplateRepository.update(id, {
       code: input.code === undefined ? undefined : nextCode,
       name: input.name === undefined ? undefined : nextName,
-      description: input.description === undefined ? undefined : input.description?.trim() || null,
+      description: nextDescription,
       namePattern: input.namePattern === undefined ? undefined : nextNamePattern,
       slots: input.slots === undefined ? undefined : (parsedTemplate.slots as unknown as Prisma.InputJsonValue),
-      rules: input.rules === undefined ? undefined : toNullableJsonInput(input.rules),
+      rules: input.rules === undefined ? undefined : toNullableJsonInput(nextRules),
       isPreset: input.isPreset,
       isActive: input.isActive,
       category:
@@ -170,12 +191,21 @@ class PlanningService {
     await planningValidationService.assertCategoryExists(categoryId)
 
     const departmentId = planningScopeService.getScopedDepartmentId(user)
+    const name = planningValidationService.normalizeRequiredText(input.name, '规划工作台名称')
+    const description = planningValidationService.normalizeOptionalText(input.description, '规划工作台描述')
+    const visibility = planningValidationService.normalizeVisibility(input.visibility)
+    const templateDefinition = toTemplateDefinition(template)
+    const slotSelections = planningValidationService.normalizeSlotSelections(
+      input.slotSelections,
+      templateDefinition.slots,
+    )
+    const metadata = planningValidationService.normalizeOptionalObject(input.metadata, '规划工作台元数据')
     const created = await planningWorkspaceRepository.create({
-      name: input.name.trim(),
-      description: input.description?.trim() || null,
-      visibility: input.visibility ?? 'TEAM',
-      slotSelections: parsePlanningSlotSelections(input.slotSelections) as unknown as Prisma.InputJsonValue,
-      metadata: toNullableJsonInput(input.metadata),
+      name,
+      description,
+      visibility,
+      slotSelections: slotSelections as unknown as Prisma.InputJsonValue,
+      metadata: toNullableJsonInput(metadata),
       template: { connect: { id: input.templateId } },
       category: categoryId ? { connect: { id: categoryId } } : undefined,
       creator: { connect: { id: user.id } },
@@ -205,15 +235,43 @@ class PlanningService {
 
     await planningValidationService.assertCategoryExists(input.categoryId)
 
+    const template =
+      input.slotSelections === undefined
+        ? null
+        : await planningTemplateRepository.findByIdWithRelations(workspace.templateId)
+    if (input.slotSelections !== undefined && !template) {
+      throw new AppError(ErrorCode.PLANNING_TEMPLATE_NOT_FOUND, '规划模板不存在')
+    }
+    const nextSlotSelections =
+      input.slotSelections === undefined || !template
+        ? undefined
+        : planningValidationService.normalizeSlotSelections(
+            input.slotSelections,
+            toTemplateDefinition(template).slots,
+          )
+    const nextMetadata =
+      input.metadata === undefined
+        ? undefined
+        : planningValidationService.normalizeOptionalObject(input.metadata, '规划工作台元数据')
+
     const updated = await planningWorkspaceRepository.updateWithRelations(id, {
-      name: input.name === undefined ? undefined : input.name.trim(),
-      description: input.description === undefined ? undefined : input.description?.trim() || null,
-      visibility: input.visibility,
+      name:
+        input.name === undefined
+          ? undefined
+          : planningValidationService.normalizeRequiredText(input.name, '规划工作台名称'),
+      description:
+        input.description === undefined
+          ? undefined
+          : planningValidationService.normalizeOptionalText(input.description, '规划工作台描述'),
+      visibility:
+        input.visibility === undefined
+          ? undefined
+          : planningValidationService.normalizeVisibility(input.visibility),
       slotSelections:
         input.slotSelections === undefined
           ? undefined
-          : (parsePlanningSlotSelections(input.slotSelections) as unknown as Prisma.InputJsonValue),
-      metadata: input.metadata === undefined ? undefined : toNullableJsonInput(input.metadata),
+          : (nextSlotSelections as unknown as Prisma.InputJsonValue),
+      metadata: input.metadata === undefined ? undefined : toNullableJsonInput(nextMetadata),
       category:
         input.categoryId === undefined
           ? undefined
@@ -280,13 +338,15 @@ class PlanningService {
       throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '当前账号没有权限保存该工作台草稿')
     }
 
-    const name = input.name.trim()
-    if (!name) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '草稿名称不能为空')
-    }
+    const name = planningValidationService.normalizeRequiredText(input.name, '草稿名称')
+    const selectedCandidateKey = planningValidationService.normalizeRequiredText(
+      input.selectedCandidateKey,
+      '候选组合 key',
+    )
+    const notes = planningValidationService.normalizeOptionalText(input.notes, '草稿备注')
 
     const candidate = generationContext.candidates.find(
-      (item) => item.key === input.selectedCandidateKey,
+      (item) => item.key === selectedCandidateKey,
     )
     if (!candidate) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '所选候选组合不存在，请先重新生成候选')
@@ -302,7 +362,7 @@ class PlanningService {
       previewNodes: candidate.previewNodes as unknown as Prisma.InputJsonValue,
       selectedAssets: selectedAssets as unknown as Prisma.InputJsonValue,
       warnings: candidate.warnings as unknown as Prisma.InputJsonValue,
-      notes: input.notes?.trim() || null,
+      notes,
       sourceSnapshot: {
         workspaceId: generationContext.workspace.id,
         templateId: generationContext.template.id,
diff --git a/furniture-3d-system/src/server/services/pre-sku-packaging.service.ts b/furniture-3d-system/src/server/services/pre-sku-packaging.service.ts
index 0ba63c65..b623fb07 100644
--- a/furniture-3d-system/src/server/services/pre-sku-packaging.service.ts
+++ b/furniture-3d-system/src/server/services/pre-sku-packaging.service.ts
@@ -20,11 +20,25 @@ import type {
   SavePreSkuPackagingPlanInput,
 } from './draft-group.service.types'
 
+const PRE_SKU_PACKAGING_PLAN_STATUSES = new Set(['DRAFT', 'CONFIRMED', 'ARCHIVED'])
+
 function toInputJsonOrNull(value: unknown) {
   if (value === undefined || value === null) return Prisma.JsonNull
   return value as Prisma.InputJsonValue
 }
 
+function normalizePackagingPlanStatus(value: string | null | undefined): string {
+  const status = value?.trim() || 'DRAFT'
+  if (!PRE_SKU_PACKAGING_PLAN_STATUSES.has(status)) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '包装方案状态不在允许范围内')
+  }
+  return status
+}
+
+function normalizePackagingSourceRefId(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
 async function buildNormalizedPackagingDraft(
   preSku: PreSkuWithRelations,
   input: SavePreSkuPackagingPlanInput,
@@ -107,8 +121,8 @@ class PreSkuPackagingService {
       packagingInput,
       packagingPlan: {
         sourceType: input.sourceType ?? 'PRE_SKU',
-        sourceRefId: input.sourceRefId ?? null,
-        status: input.status ?? 'DRAFT',
+        sourceRefId: normalizePackagingSourceRefId(input.sourceRefId),
+        status: normalizePackagingPlanStatus(input.status),
         boxes: normalizedPackaging.boxes,
         costSummary: normalizedPackaging.costSummary,
         processDraft: input.processDraft ?? null,
@@ -137,8 +151,8 @@ class PreSkuPackagingService {
     const saved = await preSkuPackagingPlanRepository.upsertByPreSkuId(preSkuId, {
       preSkuId,
       sourceType: input.sourceType ?? 'PRE_SKU',
-      sourceRefId: input.sourceRefId ?? null,
-      status: input.status ?? 'DRAFT',
+      sourceRefId: normalizePackagingSourceRefId(input.sourceRefId),
+      status: normalizePackagingPlanStatus(input.status),
       boxes: normalizedPackaging.boxes as unknown as Prisma.InputJsonValue,
       costSummary:
         normalizedPackaging.costSummary === null
diff --git a/furniture-3d-system/src/server/services/product-cad-upload.service.ts b/furniture-3d-system/src/server/services/product-cad-upload.service.ts
index d9ffe9d2..e2aaf44f 100644
--- a/furniture-3d-system/src/server/services/product-cad-upload.service.ts
+++ b/furniture-3d-system/src/server/services/product-cad-upload.service.ts
@@ -14,6 +14,7 @@ import { processCADExport, validateCADExportData } from '@/lib/cad-export-proces
 import { AppError, ErrorCode } from '@/server/core/errors'
 
 const MAX_FILE_SIZE = 200 * 1024 * 1024
+const CAD_UPLOAD_VISIBILITIES = new Set(['TEAM', 'DEPARTMENT', 'PUBLIC'])
 
 export interface PreparedCADProductPayload {
   modelNumber: string
@@ -33,7 +34,7 @@ class ProductCADUploadService {
     const name = (formData.get('name') as string) || ''
     const category = (formData.get('category') as string) || undefined
     const description = (formData.get('description') as string) || undefined
-    const visibility = ((formData.get('visibility') as string) || 'TEAM') as 'TEAM' | 'DEPARTMENT' | 'PUBLIC'
+    const visibility = this.normalizeVisibility(formData.get('visibility') as string)
 
     if (!modelNumber.trim() || !name.trim()) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '产品型号和名称为必填项')
@@ -116,6 +117,14 @@ class ProductCADUploadService {
       processingResult,
     }
   }
+
+  private normalizeVisibility(value: string | undefined): 'TEAM' | 'DEPARTMENT' | 'PUBLIC' {
+    const visibility = (value || 'TEAM').trim().toUpperCase()
+    if (!CAD_UPLOAD_VISIBILITIES.has(visibility)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '产品可见范围无效')
+    }
+    return visibility as 'TEAM' | 'DEPARTMENT' | 'PUBLIC'
+  }
 }
 
 export const productCADUploadService = new ProductCADUploadService()
diff --git a/furniture-3d-system/src/server/services/product-collaborator.service.ts b/furniture-3d-system/src/server/services/product-collaborator.service.ts
index d232897b..5c4d322b 100644
--- a/furniture-3d-system/src/server/services/product-collaborator.service.ts
+++ b/furniture-3d-system/src/server/services/product-collaborator.service.ts
@@ -8,6 +8,7 @@ import { productRepository } from '../repositories/product.repository'
 import { userRepository } from '../repositories/user.repository'
 
 type CollaboratorRole = 'editor' | 'viewer'
+const COLLABORATOR_ROLES = new Set<CollaboratorRole>(['editor', 'viewer'])
 
 interface CollaboratorRecord {
   userId: string
@@ -91,31 +92,26 @@ class ProductCollaboratorService {
     input: AddCollaboratorInput,
     currentUser: AuthUser
   ) {
-    if (!input.userId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少必要参数：userId')
-    }
+    const normalizedProductId = this.normalizeRequiredId(productId, 'productId')
+    const normalizedUserId = this.normalizeRequiredId(input.userId, 'userId')
+    const role = this.normalizeCollaboratorRole(input.role)
 
-    const role: CollaboratorRole = input.role ?? 'editor'
-    if (!['editor', 'viewer'].includes(role)) {
-      throw new AppError(ErrorCode.VALIDATION_FAILED, '无效的角色类型')
-    }
-
-    const product = await this.getProductOrThrow(productId)
+    const product = await this.getProductOrThrow(normalizedProductId)
     this.assertCanManage(product, currentUser)
 
-    const targetUser = await userRepository.findCollaboratorById(input.userId)
+    const targetUser = await userRepository.findCollaboratorById(normalizedUserId)
     if (!targetUser) {
       throw new AppError(ErrorCode.USER_NOT_FOUND, '目标用户不存在')
     }
 
     const collaborators = this.normalizeCollaborators(product)
-    const exists = collaborators.some((collaborator) => collaborator.userId === input.userId)
+    const exists = collaborators.some((collaborator) => collaborator.userId === normalizedUserId)
     if (exists) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '该用户已是协作者')
     }
 
     const newCollaborator: CollaboratorRecord = {
-      userId: input.userId,
+      userId: normalizedUserId,
       role,
       addedAt: new Date().toISOString(),
       addedBy: currentUser.id,
@@ -124,7 +120,7 @@ class ProductCollaboratorService {
     await prisma.$transaction(async (tx) => {
       await productRepository.addCollaboratorRelation(
         product.id,
-        input.userId,
+        normalizedUserId,
         role,
         currentUser.id,
         tx
@@ -157,26 +153,25 @@ class ProductCollaboratorService {
   }
 
   async removeCollaborator(productId: string, collaboratorUserId: string, currentUser: AuthUser) {
-    if (!collaboratorUserId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少必要参数：userId')
-    }
+    const normalizedProductId = this.normalizeRequiredId(productId, 'productId')
+    const normalizedUserId = this.normalizeRequiredId(collaboratorUserId, 'userId')
 
-    const product = await this.getProductOrThrow(productId)
+    const product = await this.getProductOrThrow(normalizedProductId)
     this.assertCanManage(product, currentUser)
 
     const collaborators = this.normalizeCollaborators(product)
     const updatedCollaborators = collaborators.filter(
-      (collaborator) => collaborator.userId !== collaboratorUserId
+      (collaborator) => collaborator.userId !== normalizedUserId
     )
 
     if (updatedCollaborators.length === collaborators.length) {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '该用户不是协作者')
     }
 
-    const removedUser = await userRepository.findCollaboratorById(collaboratorUserId)
+    const removedUser = await userRepository.findCollaboratorById(normalizedUserId)
 
     await prisma.$transaction(async (tx) => {
-      await productRepository.removeCollaboratorRelation(product.id, collaboratorUserId, tx)
+      await productRepository.removeCollaboratorRelation(product.id, normalizedUserId, tx)
 
       await logRepository.createLog(
         {
@@ -184,9 +179,9 @@ class ProductCollaboratorService {
           type: ActivityType.PRODUCT_UPDATE,
           targetType: 'Product',
           targetId: product.id,
-          action: `移除协作者: ${removedUser?.name ?? collaboratorUserId}`,
+          action: `移除协作者: ${removedUser?.name ?? normalizedUserId}`,
           metadata: {
-            collaboratorId: collaboratorUserId,
+            collaboratorId: normalizedUserId,
             collaboratorName: removedUser?.name,
           },
         },
@@ -245,12 +240,41 @@ class ProductCollaboratorService {
   }
 
   private normalizeCollaborators(product: ProductForCollaborators): CollaboratorRecord[] {
-    return product.collaboratorUsers.map((item) => ({
-      userId: item.userId,
-      role: item.role === 'viewer' ? 'viewer' : 'editor',
-      addedAt: item.addedAt.toISOString(),
-      addedBy: item.addedBy ?? '',
-    }))
+    return product.collaboratorUsers
+      .map((item) => {
+        const userId = item.userId.trim()
+        const role = this.tryNormalizeCollaboratorRole(item.role)
+        if (!userId || !role) return null
+
+        return {
+          userId,
+          role,
+          addedAt: item.addedAt.toISOString(),
+          addedBy: item.addedBy?.trim() ?? '',
+        }
+      })
+      .filter((item): item is CollaboratorRecord => item !== null)
+  }
+
+  private normalizeRequiredId(value: string | undefined, fieldName: string): string {
+    const normalized = value?.trim() ?? ''
+    if (!normalized) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `缺少必要参数：${fieldName}`)
+    }
+    return normalized
+  }
+
+  private normalizeCollaboratorRole(value?: CollaboratorRole): CollaboratorRole {
+    const role = (value ?? 'editor').trim().toLowerCase() as CollaboratorRole
+    if (!COLLABORATOR_ROLES.has(role)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '无效的角色类型')
+    }
+    return role
+  }
+
+  private tryNormalizeCollaboratorRole(value: string): CollaboratorRole | null {
+    const role = value.trim().toLowerCase() as CollaboratorRole
+    return COLLABORATOR_ROLES.has(role) ? role : null
   }
 }
 
diff --git a/furniture-3d-system/src/server/services/product-hardware.service.ts b/furniture-3d-system/src/server/services/product-hardware.service.ts
index 3124fc68..d0f7d50f 100644
--- a/furniture-3d-system/src/server/services/product-hardware.service.ts
+++ b/furniture-3d-system/src/server/services/product-hardware.service.ts
@@ -22,16 +22,19 @@ interface ServiceContext {
 }
 
 export interface UpdateProductHardwareInput {
-  hardwareId?: string
+  hardwareId?: string | null
   matchStatus?: 'matched' | 'pending' | 'unmatched'
   matchConfidence?: number
-  matchMethod?: 'blockName' | 'mapping' | 'size' | 'manual'
+  matchMethod?: 'blockName' | 'mapping' | 'size' | 'manual' | null
   panelId?: string | null
   connectedPanelId?: string | null
   installOrder?: number | null
   notes?: string | null
 }
 
+const PRODUCT_HARDWARE_MATCH_STATUSES = new Set(['matched', 'pending', 'unmatched'])
+const PRODUCT_HARDWARE_MATCH_METHODS = new Set(['blockName', 'mapping', 'size', 'manual'])
+
 type ProductPermissionSnapshot = NonNullable<
   Awaited<ReturnType<typeof productRepository.findByIdForCollaborators>>
 >
@@ -65,16 +68,17 @@ class ProductHardwareService {
 
     const product = await this.getProductForPermission(existing.productId)
     this.assertCanEditProduct(product, user, '您没有权限编辑此产品五金件')
+    const normalizedInput = this.normalizeUpdateInput(input)
 
-    if (input.hardwareId) {
-      const hardware = await hardwareRepository.findById(input.hardwareId)
+    if (normalizedInput.hardwareId) {
+      const hardware = await hardwareRepository.findById(normalizedInput.hardwareId)
       if (!hardware) {
         throw new AppError(ErrorCode.HARDWARE_NOT_FOUND, '五金件不存在')
       }
     }
 
-    if (input.panelId) {
-      const panel = await panelRepository.findById(input.panelId)
+    if (normalizedInput.panelId) {
+      const panel = await panelRepository.findById(normalizedInput.panelId)
       if (!panel) {
         throw new AppError(ErrorCode.PANEL_NOT_FOUND, '板件不存在')
       }
@@ -83,8 +87,8 @@ class ProductHardwareService {
       }
     }
 
-    if (input.connectedPanelId) {
-      const connectedPanel = await panelRepository.findById(input.connectedPanelId)
+    if (normalizedInput.connectedPanelId) {
+      const connectedPanel = await panelRepository.findById(normalizedInput.connectedPanelId)
       if (!connectedPanel) {
         throw new AppError(ErrorCode.PANEL_NOT_FOUND, '连接板件不存在')
       }
@@ -95,33 +99,33 @@ class ProductHardwareService {
 
     const updateData: Prisma.ProductHardwareUpdateInput = {}
 
-    if (input.hardwareId !== undefined) {
-      updateData.hardware = input.hardwareId
-        ? { connect: { id: input.hardwareId } }
+    if (normalizedInput.hardwareId !== undefined) {
+      updateData.hardware = normalizedInput.hardwareId
+        ? { connect: { id: normalizedInput.hardwareId } }
         : { disconnect: true }
     }
-    if (input.matchStatus !== undefined) {
-      updateData.matchStatus = input.matchStatus
+    if (normalizedInput.matchStatus !== undefined) {
+      updateData.matchStatus = normalizedInput.matchStatus
     }
-    if (input.matchConfidence !== undefined) {
-      updateData.matchConfidence = input.matchConfidence
+    if (normalizedInput.matchConfidence !== undefined) {
+      updateData.matchConfidence = normalizedInput.matchConfidence
     }
-    if (input.matchMethod !== undefined) {
-      updateData.matchMethod = input.matchMethod
+    if (normalizedInput.matchMethod !== undefined) {
+      updateData.matchMethod = normalizedInput.matchMethod
     }
-    if (input.panelId !== undefined) {
-      updateData.panel = input.panelId
-        ? { connect: { id: input.panelId } }
+    if (normalizedInput.panelId !== undefined) {
+      updateData.panel = normalizedInput.panelId
+        ? { connect: { id: normalizedInput.panelId } }
         : { disconnect: true }
     }
-    if (input.connectedPanelId !== undefined) {
-      updateData.connectedPanelId = input.connectedPanelId
+    if (normalizedInput.connectedPanelId !== undefined) {
+      updateData.connectedPanelId = normalizedInput.connectedPanelId
     }
-    if (input.installOrder !== undefined) {
-      updateData.installOrder = input.installOrder
+    if (normalizedInput.installOrder !== undefined) {
+      updateData.installOrder = normalizedInput.installOrder
     }
-    if (input.notes !== undefined) {
-      updateData.notes = input.notes
+    if (normalizedInput.notes !== undefined) {
+      updateData.notes = normalizedInput.notes
     }
 
     return productHardwareRepository.updateWithRelations(id, updateData)
@@ -148,6 +152,58 @@ class ProductHardwareService {
     return ctx.user
   }
 
+  private normalizeUpdateInput(input: UpdateProductHardwareInput): UpdateProductHardwareInput {
+    return {
+      ...input,
+      ...(input.hardwareId !== undefined ? { hardwareId: this.normalizeOptionalText(input.hardwareId) } : {}),
+      ...(input.matchStatus !== undefined ? { matchStatus: this.normalizeMatchStatus(input.matchStatus) } : {}),
+      ...(input.matchConfidence !== undefined ? { matchConfidence: this.normalizeConfidence(input.matchConfidence) } : {}),
+      ...(input.matchMethod !== undefined ? { matchMethod: this.normalizeMatchMethod(input.matchMethod) } : {}),
+      ...(input.panelId !== undefined ? { panelId: this.normalizeOptionalText(input.panelId) } : {}),
+      ...(input.connectedPanelId !== undefined ? { connectedPanelId: this.normalizeOptionalText(input.connectedPanelId) } : {}),
+      ...(input.installOrder !== undefined ? { installOrder: this.normalizeInstallOrder(input.installOrder) } : {}),
+      ...(input.notes !== undefined ? { notes: this.normalizeOptionalText(input.notes) } : {}),
+    }
+  }
+
+  private normalizeMatchStatus(value: string): 'matched' | 'pending' | 'unmatched' {
+    const normalized = value.trim() as 'matched' | 'pending' | 'unmatched'
+    if (!PRODUCT_HARDWARE_MATCH_STATUSES.has(normalized)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '五金匹配状态无效')
+    }
+    return normalized
+  }
+
+  private normalizeMatchMethod(value: string | null | undefined): 'blockName' | 'mapping' | 'size' | 'manual' | null {
+    const normalized = value?.trim() ?? ''
+    if (!normalized) return null
+    if (!PRODUCT_HARDWARE_MATCH_METHODS.has(normalized)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '五金匹配方式无效')
+    }
+    return normalized as 'blockName' | 'mapping' | 'size' | 'manual'
+  }
+
+  private normalizeConfidence(value: number | null | undefined): number | undefined {
+    if (value === null || value === undefined) return undefined
+    if (!Number.isFinite(value) || value < 0 || value > 1) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '五金匹配置信度必须在 0 到 1 之间')
+    }
+    return value
+  }
+
+  private normalizeInstallOrder(value: number | null | undefined): number | null {
+    if (value === null || value === undefined) return null
+    if (!Number.isInteger(value) || value < 0) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '五金安装序号必须是非负整数')
+    }
+    return value
+  }
+
+  private normalizeOptionalText(value: string | null | undefined): string | null {
+    const normalized = value?.trim() ?? ''
+    return normalized || null
+  }
+
   private async getProductForPermission(productId: string): Promise<ProductPermissionSnapshot> {
     const product = await productRepository.findByIdForCollaborators(productId)
     if (!product || product.deletedAt) {
diff --git a/furniture-3d-system/src/server/services/product-upload.service.ts b/furniture-3d-system/src/server/services/product-upload.service.ts
index 17a900e4..650cfab3 100644
--- a/furniture-3d-system/src/server/services/product-upload.service.ts
+++ b/furniture-3d-system/src/server/services/product-upload.service.ts
@@ -14,9 +14,23 @@ import {
 } from '@/lib/storage'
 import { parseModelFile, generatePanelsFromNodes } from '@/lib/gltf-parser'
 import { productUploadRepository } from '../repositories/product-upload.repository'
+import { releaseSkuCodeFromDeletedRecords } from './sku-soft-delete.helper'
 
 const ALLOWED_EXTENSIONS = ['.gltf', '.glb', '.dwg']
 const MAX_FILE_SIZE = 100 * 1024 * 1024
+const PRODUCT_VISIBILITIES = new Set(['PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC'])
+
+function normalizeProductUploadCode(value: string | undefined): string {
+  return value?.trim().toUpperCase() ?? ''
+}
+
+function normalizeProductUploadVisibility(value: string | undefined): string {
+  const visibility = (value || 'TEAM').trim().toUpperCase()
+  if (!PRODUCT_VISIBILITIES.has(visibility)) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '产品可见范围无效')
+  }
+  return visibility
+}
 
 export interface UploadProductResult {
   product: Record<string, unknown>
@@ -27,11 +41,11 @@ export interface UploadProductResult {
 
 class ProductUploadService {
   async uploadFromFormData(formData: FormData, user: AuthUser): Promise<UploadProductResult> {
-    const modelNumber = (formData.get('modelNumber') as string)?.trim()
+    const modelNumber = normalizeProductUploadCode(formData.get('modelNumber') as string)
     const name = (formData.get('name') as string)?.trim()
     const category = (formData.get('category') as string)?.trim()
     const description = (formData.get('description') as string)?.trim()
-    const visibility = ((formData.get('visibility') as string) || 'TEAM').trim()
+    const visibility = normalizeProductUploadVisibility(formData.get('visibility') as string)
 
     if (!modelNumber || !name) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '产品型号和名称为必填项')
@@ -106,6 +120,7 @@ class ProductUploadService {
         : undefined
 
       const skuCode = `${modelNumber}-01`
+      await releaseSkuCodeFromDeletedRecords(skuCode)
       const result = await productUploadRepository.createUploadedProduct({
         modelNumber,
         name,
diff --git a/furniture-3d-system/src/server/services/product-write.service.ts b/furniture-3d-system/src/server/services/product-write.service.ts
index 08241d4e..8f80e0eb 100644
--- a/furniture-3d-system/src/server/services/product-write.service.ts
+++ b/furniture-3d-system/src/server/services/product-write.service.ts
@@ -23,13 +23,24 @@ import {
   validateCreateProduct,
   validateUpdateProduct,
 } from '../validators/product.validator'
+import { releaseSkuCodeFromDeletedRecords } from './sku-soft-delete.helper'
 
 type GetProductByIdHandler = (id: string, ctx: ProductServiceContext) => Promise<ProductDetailDTO>
 type InvalidateListCacheHandler = () => Promise<void>
 
-class ProductWriteService {
-  private static readonly SOFT_DELETE_CODE_MARKER = '__deleted__'
+function normalizeProductIdentityCode(value: string): string {
+  return value.trim().toUpperCase()
+}
 
+function normalizeCollaboratorRole(value: string): 'editor' | 'viewer' {
+  const role = value.trim().toLowerCase()
+  if (role !== 'editor' && role !== 'viewer') {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '无效的协作者角色')
+  }
+  return role
+}
+
+class ProductWriteService {
   constructor(
     private readonly repository: ProductRepositoryClass,
     private readonly cache: CacheService,
@@ -48,13 +59,14 @@ class ProductWriteService {
     }
 
     const input = validation.data as CreateProductInput
-    const exists = await this.repository.modelNumberExists(input.modelNumber)
+    const modelNumber = normalizeProductIdentityCode(input.modelNumber)
+    const exists = await this.repository.modelNumberExists(modelNumber)
     if (exists) {
-      throw new AppError(ErrorCode.PRODUCT_DUPLICATE_MODEL, `型号 ${input.modelNumber} 已存在`)
+      throw new AppError(ErrorCode.PRODUCT_DUPLICATE_MODEL, `型号 ${modelNumber} 已存在`)
     }
 
     const product = await this.repository.create({
-      modelNumber: input.modelNumber,
+      modelNumber,
       name: input.name,
       description: input.description,
       modelUrl: input.modelUrl || null,
@@ -149,11 +161,7 @@ class ProductWriteService {
     if (!hardDelete) {
       const deletedAt = new Date()
       const skuResult = cascade
-        ? await this.repository.softDeleteWithCascade(
-            id,
-            deletedAt,
-            ProductWriteService.SOFT_DELETE_CODE_MARKER
-          )
+        ? await this.repository.softDeleteWithCascade(id, deletedAt)
         : await this.repository.update(id, { deletedAt }).then(() => ({ count: 0 }))
 
       await this.cache.del(CacheKeys.product(id))
@@ -208,10 +216,7 @@ class ProductWriteService {
 
     let restoredSkuCount = 0
     if (restoreSkus) {
-      const result = await this.repository.restoreWithSkus(
-        id,
-        ProductWriteService.SOFT_DELETE_CODE_MARKER
-      )
+      const result = await this.repository.restoreWithSkus(id)
       restoredSkuCount = result.count
     } else {
       await this.repository.update(id, { deletedAt: null })
@@ -258,9 +263,11 @@ class ProductWriteService {
     const categoryId = input.category
       ? (await this.ensureCategoryIdByName(input.category)).id
       : null
+    const modelNumber = normalizeProductIdentityCode(input.modelNumber)
+    await releaseSkuCodeFromDeletedRecords(`${modelNumber}-CAD`)
 
     const result = await this.repository.createProductFromCAD({
-      modelNumber: input.modelNumber,
+      modelNumber,
       name: input.name,
       description: input.description,
       visibility: input.visibility,
@@ -286,7 +293,14 @@ class ProductWriteService {
     role: string,
     ctx: ProductServiceContext
   ): Promise<ProductDetailDTO> {
-    const product = await this.repository.findById(productId)
+    const normalizedProductId = productId.trim()
+    const normalizedUserId = userId.trim()
+    const normalizedRole = normalizeCollaboratorRole(role || 'editor')
+    if (!normalizedProductId || !normalizedUserId) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '产品 ID 和协作者 ID 为必填项')
+    }
+
+    const product = await this.repository.findById(normalizedProductId)
     if (!product || product.deletedAt) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND)
     }
@@ -299,9 +313,14 @@ class ProductWriteService {
       throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '没有权限添加协作者')
     }
 
-    await this.repository.addCollaborator(productId, userId, role, ctx.user.id)
-    await this.cache.del(CacheKeys.product(productId))
-    return this.getProductById(productId, ctx)
+    await this.repository.addCollaborator(
+      normalizedProductId,
+      normalizedUserId,
+      normalizedRole,
+      ctx.user.id
+    )
+    await this.cache.del(CacheKeys.product(normalizedProductId))
+    return this.getProductById(normalizedProductId, ctx)
   }
 
   async removeCollaborator(
@@ -309,7 +328,13 @@ class ProductWriteService {
     userId: string,
     ctx: ProductServiceContext
   ): Promise<ProductDetailDTO> {
-    const product = await this.repository.findById(productId)
+    const normalizedProductId = productId.trim()
+    const normalizedUserId = userId.trim()
+    if (!normalizedProductId || !normalizedUserId) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '产品 ID 和协作者 ID 为必填项')
+    }
+
+    const product = await this.repository.findById(normalizedProductId)
     if (!product || product.deletedAt) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND)
     }
@@ -322,9 +347,9 @@ class ProductWriteService {
       throw new AppError(ErrorCode.AUTH_PERMISSION_DENIED, '没有权限移除协作者')
     }
 
-    await this.repository.removeCollaborator(productId, userId)
-    await this.cache.del(CacheKeys.product(productId))
-    return this.getProductById(productId, ctx)
+    await this.repository.removeCollaborator(normalizedProductId, normalizedUserId)
+    await this.cache.del(CacheKeys.product(normalizedProductId))
+    return this.getProductById(normalizedProductId, ctx)
   }
 
   private async ensureCategoryIdByName(name: string): Promise<{ id: string }> {
diff --git a/furniture-3d-system/src/server/services/provider-config.service.ts b/furniture-3d-system/src/server/services/provider-config.service.ts
index e67d783a..788296a6 100644
--- a/furniture-3d-system/src/server/services/provider-config.service.ts
+++ b/furniture-3d-system/src/server/services/provider-config.service.ts
@@ -1,5 +1,6 @@
 import { prisma } from '@/lib/prisma'
-import type { Prisma } from '@prisma/client'
+import { Prisma } from '@prisma/client'
+import { AppError, ErrorCode } from '@/server/core/errors'
 
 export interface ProviderConfigDTO {
   id: string
@@ -32,6 +33,52 @@ export interface UpdateProviderConfigInput {
   extra?: Record<string, unknown> | null
 }
 
+function normalizeRequiredText(value: unknown, label: string): string {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `缺少${label}`)
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `缺少${label}`)
+  }
+  return normalized
+}
+
+function normalizeOptionalText(value: unknown, label: string): string | null | undefined {
+  if (value === undefined) return undefined
+  if (value === null) return null
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, `${label}格式不正确`)
+  }
+  const normalized = value.trim()
+  return normalized ? normalized : null
+}
+
+function normalizeBaseUrl(value: unknown): string {
+  const normalized = normalizeRequiredText(value, 'API 地址')
+  try {
+    const url = new URL(normalized)
+    if (!['http:', 'https:'].includes(url.protocol)) {
+      throw new Error('unsupported protocol')
+    }
+    return normalized.replace(/\/+$/, '')
+  } catch {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, 'API 地址格式不正确')
+  }
+}
+
+function normalizeJsonObject(value: unknown): Prisma.InputJsonObject | undefined {
+  if (value == null) return undefined
+  if (typeof value !== 'object' || Array.isArray(value)) {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, '扩展配置必须是 JSON 对象')
+  }
+  try {
+    return JSON.parse(JSON.stringify(value)) as Prisma.InputJsonObject
+  } catch {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, '扩展配置必须是可保存的 JSON 对象')
+  }
+}
+
 function toDTO(record: {
   id: string
   serviceType: string
@@ -62,35 +109,44 @@ function toDTO(record: {
 
 export class ProviderConfigService {
   async list(serviceType: string): Promise<ProviderConfigDTO[]> {
+    const normalizedServiceType = normalizeRequiredText(serviceType, '服务类型')
     const records = await prisma.providerConfig.findMany({
-      where: { serviceType },
+      where: { serviceType: normalizedServiceType },
       orderBy: [{ sortOrder: 'asc' }, { createdAt: 'desc' }],
     })
     return records.map(toDTO)
   }
 
   async getActive(serviceType: string): Promise<ProviderConfigDTO | null> {
+    const normalizedServiceType = normalizeRequiredText(serviceType, '服务类型')
     const record = await prisma.providerConfig.findFirst({
-      where: { serviceType, isActive: true },
+      where: { serviceType: normalizedServiceType, isActive: true },
     })
     return record ? toDTO(record) : null
   }
 
   async getById(id: string): Promise<ProviderConfigDTO | null> {
-    const record = await prisma.providerConfig.findUnique({ where: { id } })
+    const normalizedId = normalizeRequiredText(id, '配置 ID')
+    const record = await prisma.providerConfig.findUnique({ where: { id: normalizedId } })
     return record ? toDTO(record) : null
   }
 
   async create(input: CreateProviderConfigInput): Promise<ProviderConfigDTO> {
-    const count = await prisma.providerConfig.count({ where: { serviceType: input.serviceType } })
+    const serviceType = normalizeRequiredText(input.serviceType, '服务类型')
+    const name = normalizeRequiredText(input.name, '名称')
+    const baseUrl = normalizeBaseUrl(input.baseUrl)
+    const apiKey = normalizeRequiredText(input.apiKey, '密钥')
+    const model = normalizeOptionalText(input.model, '模型')
+    const extra = normalizeJsonObject(input.extra)
+    const count = await prisma.providerConfig.count({ where: { serviceType } })
     const record = await prisma.providerConfig.create({
       data: {
-        serviceType: input.serviceType,
-        name: input.name,
-        baseUrl: input.baseUrl,
-        apiKey: input.apiKey,
-        model: input.model ?? null,
-        extra: (input.extra as Prisma.InputJsonValue) ?? undefined,
+        serviceType,
+        name,
+        baseUrl,
+        apiKey,
+        model: model ?? null,
+        extra,
         isActive: count === 0,
         sortOrder: count,
       },
@@ -99,19 +155,21 @@ export class ProviderConfigService {
   }
 
   async update(id: string, input: UpdateProviderConfigInput): Promise<ProviderConfigDTO> {
+    const normalizedId = normalizeRequiredText(id, '配置 ID')
     const data: Prisma.ProviderConfigUpdateInput = {}
-    if (input.name !== undefined) data.name = input.name
-    if (input.baseUrl !== undefined) data.baseUrl = input.baseUrl
-    if (input.apiKey !== undefined) data.apiKey = input.apiKey
-    if (input.model !== undefined) data.model = input.model
-    if (input.extra !== undefined) data.extra = input.extra as Prisma.InputJsonValue
+    if (input.name !== undefined) data.name = normalizeRequiredText(input.name, '名称')
+    if (input.baseUrl !== undefined) data.baseUrl = normalizeBaseUrl(input.baseUrl)
+    if (input.apiKey !== undefined) data.apiKey = normalizeRequiredText(input.apiKey, '密钥')
+    if (input.model !== undefined) data.model = normalizeOptionalText(input.model, '模型')
+    if (input.extra !== undefined) data.extra = normalizeJsonObject(input.extra) ?? Prisma.DbNull
 
-    const record = await prisma.providerConfig.update({ where: { id }, data })
+    const record = await prisma.providerConfig.update({ where: { id: normalizedId }, data })
     return toDTO(record)
   }
 
   async activate(id: string): Promise<void> {
-    const config = await prisma.providerConfig.findUnique({ where: { id } })
+    const normalizedId = normalizeRequiredText(id, '配置 ID')
+    const config = await prisma.providerConfig.findUnique({ where: { id: normalizedId } })
     if (!config) return
 
     await prisma.$transaction([
@@ -120,19 +178,20 @@ export class ProviderConfigService {
         data: { isActive: false },
       }),
       prisma.providerConfig.update({
-        where: { id },
+        where: { id: normalizedId },
         data: { isActive: true },
       }),
     ])
   }
 
   async delete(id: string): Promise<void> {
-    const config = await prisma.providerConfig.findUnique({ where: { id } })
+    const normalizedId = normalizeRequiredText(id, '配置 ID')
+    const config = await prisma.providerConfig.findUnique({ where: { id: normalizedId } })
     if (!config) return
     if (config.isActive) {
       throw new Error('不能删除当前激活的配置')
     }
-    await prisma.providerConfig.delete({ where: { id } })
+    await prisma.providerConfig.delete({ where: { id: normalizedId } })
   }
 }
 
diff --git a/furniture-3d-system/src/server/services/share.service.ts b/furniture-3d-system/src/server/services/share.service.ts
index dca5e441..4e02c018 100644
--- a/furniture-3d-system/src/server/services/share.service.ts
+++ b/furniture-3d-system/src/server/services/share.service.ts
@@ -11,6 +11,7 @@
 
 import { nanoid } from 'nanoid'
 import { canEditProduct } from '@/lib/permissions'
+import { toLegacySkuDisplayAttributes } from '@/lib/sku-display-tags'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import {
   shareRepository,
@@ -21,6 +22,10 @@ import { panelRepository } from '../repositories/panel.repository'
 import { productRepository } from '../repositories/product.repository'
 import type { AuthUser } from '../core/types'
 import type { Prisma } from '@prisma/client'
+import {
+  toProductSkuAssetProfileDTO,
+  type ProductSkuAssetProfileDTO,
+} from '../dto/product.dto'
 
 // ============ 常量配置 ============
 
@@ -53,8 +58,10 @@ export interface PublicShareDetailDTO {
     skus: Array<{
       id: string
       skuCode: string
+      name: string | null
       price: number
-      attributes: Record<string, string> | null
+      assetProfile: ProductSkuAssetProfileDTO | null
+      legacyAttributes: Record<string, string> | null
     }>
     assemblySteps: Array<{
       order: number
@@ -455,32 +462,23 @@ class ShareService {
   private toPublicSku(sku: {
     id: string
     skuCode: string
+    name: string | null
     price: unknown
     attributes: Prisma.JsonValue
+    assetProfile?: Parameters<typeof toProductSkuAssetProfileDTO>[0]
   }) {
     return {
       id: sku.id,
       skuCode: sku.skuCode,
+      name: sku.name,
       price: Number(sku.price),
-      attributes: this.toPublicAttributes(sku.attributes),
+      assetProfile: toProductSkuAssetProfileDTO(sku.assetProfile),
+      legacyAttributes: this.toPublicLegacyAttributes(sku.attributes),
     }
   }
 
-  private toPublicAttributes(attributes: Prisma.JsonValue): Record<string, string> | null {
-    if (!attributes || typeof attributes !== 'object' || Array.isArray(attributes)) {
-      return null
-    }
-
-    const publicEntries = Object.entries(attributes)
-      .filter(([key, value]) => !key.startsWith('_') && typeof value === 'string')
-      .map(([key, value]) => [key, (value as string).trim()] as const)
-      .filter(([, value]) => value.length > 0)
-
-    if (publicEntries.length === 0) {
-      return null
-    }
-
-    return Object.fromEntries(publicEntries)
+  private toPublicLegacyAttributes(attributes: Prisma.JsonValue): Record<string, string> | null {
+    return toLegacySkuDisplayAttributes(attributes)
   }
 
   private toPublicPartIds(partIds: string[]): string[] {
diff --git a/furniture-3d-system/src/server/services/sku-cad-import.helper.ts b/furniture-3d-system/src/server/services/sku-cad-import.helper.ts
index ea18aa66..0d2f271a 100644
--- a/furniture-3d-system/src/server/services/sku-cad-import.helper.ts
+++ b/furniture-3d-system/src/server/services/sku-cad-import.helper.ts
@@ -37,6 +37,7 @@ export interface ImportedCADPanel {
 interface CreateSkuWithImportedHolesInput {
   productId: string
   skuCode: string
+  name?: string
   attributes: Record<string, unknown>
   price: number
   costPrice: number | null
@@ -303,10 +304,12 @@ export async function createSkuWithImportedHolesTx({
   ownerId,
   input,
 }: CreateSkuWithImportedHolesParams): Promise<{ id: string }> {
+  const skuCode = input.skuCode.trim().toUpperCase()
   const sku = await tx.productSKU.create({
     data: {
       productId: input.productId,
-      skuCode: input.skuCode,
+      skuCode,
+      name: input.name?.trim() || skuCode,
       attributes: {
         ...input.attributes,
         _holesImported: input.cadHoles.length > 0 ? 'true' : 'false',
diff --git a/furniture-3d-system/src/server/services/sku-command.service.ts b/furniture-3d-system/src/server/services/sku-command.service.ts
index 16bae383..e76ebf01 100644
--- a/furniture-3d-system/src/server/services/sku-command.service.ts
+++ b/furniture-3d-system/src/server/services/sku-command.service.ts
@@ -6,6 +6,7 @@ import type { AuthUser } from '../core/types'
 import { formatZodErrors } from '../validators'
 import {
   validateCreateSKU,
+  validateCreateSKUWithImportedHoles,
   validateTransferSKU,
   validateUpdateSKU,
 } from '../validators/sku.validator'
@@ -22,11 +23,10 @@ import {
   type ImportedCADPanel,
 } from './sku-cad-import.helper'
 import {
-  buildDeletedSkuCode,
+  buildRestoreSkuUpdateData,
+  buildSoftDeleteSkuUpdateData,
   executeCreateWithSkuCodeRecovery,
-  getRestorableSkuCode,
   releaseSkuCodeFromDeletedRecords,
-  toSkuAttributesObject,
 } from './sku-soft-delete.helper'
 import type {
   CreateSKUWithImportedHolesInput,
@@ -35,6 +35,61 @@ import type {
 
 type GetSKUByIdHandler = (id: string, ctx: SKUServiceContext) => Promise<SKUDetailDTO>
 
+function readSkuDisplayName(
+  skuCode: string,
+  explicitName?: string | null
+): string {
+  const name = explicitName?.trim()
+  if (name) return name
+
+  return skuCode
+}
+
+function normalizeSkuIdentityCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+const RESERVED_PRODUCT_SKU_ATTRIBUTE_KEYS = new Set([
+  'barcode',
+  'barCode',
+  'model',
+  'modelNumber',
+  'specCode',
+  'formalSkuCode',
+  'skuCode',
+  'productName',
+  'skuName',
+  'productCategory',
+  'category',
+  'categoryCode',
+  'seriesName',
+  'seriesCode',
+  'familyCode',
+  'assetFamilyCode',
+  'variantCode',
+  'versionNo',
+  'color',
+  'material',
+  'size',
+])
+
+function normalizeLegacySkuAttributes(
+  attributes: Record<string, unknown>,
+  scope: string,
+): Record<string, unknown> {
+  const reservedKeys = Object.keys(attributes).filter((key) =>
+    RESERVED_PRODUCT_SKU_ATTRIBUTE_KEYS.has(key),
+  )
+  if (reservedKeys.length > 0) {
+    throw new AppError(
+      ErrorCode.VALIDATION_FAILED,
+      `${scope}不能写入正式主数据字段：${reservedKeys.join(', ')}。请使用结构化 SKU 字段或资产资料副本。`,
+    )
+  }
+
+  return { ...attributes }
+}
+
 class SKUCommandService {
   constructor(
     private readonly repository: SKURepositoryClass,
@@ -53,24 +108,27 @@ class SKUCommandService {
     }
 
     const input = validation.data
+    const skuCode = normalizeSkuIdentityCode(input.skuCode)
+    const legacyAttributes = normalizeLegacySkuAttributes(input.attributes, 'SKU 兼容属性')
     const productExists = await productRepository.existsById(input.productId)
     if (!productExists) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, '关联的产品不存在')
     }
 
-    await releaseSkuCodeFromDeletedRecords(input.skuCode)
-    const exists = await this.repository.skuCodeExists(input.skuCode)
+    await releaseSkuCodeFromDeletedRecords(skuCode)
+    const exists = await this.repository.skuCodeExists(skuCode)
     if (exists) {
-      throw new AppError(ErrorCode.SKU_DUPLICATE_CODE, `SKU code ${input.skuCode} already exists`)
+      throw new AppError(ErrorCode.SKU_DUPLICATE_CODE, `SKU code ${skuCode} already exists`)
     }
 
     const sku = await executeCreateWithSkuCodeRecovery({
-      skuCode: input.skuCode,
-      duplicateMessage: `SKU code ${input.skuCode} already exists`,
+      skuCode,
+      duplicateMessage: `SKU code ${skuCode} already exists`,
       create: () =>
         this.repository.create({
-          skuCode: input.skuCode,
-          attributes: input.attributes,
+          skuCode,
+          name: readSkuDisplayName(skuCode, input.name),
+          attributes: legacyAttributes as Prisma.InputJsonValue,
           price: input.price,
           costPrice: input.costPrice,
           stock: input.stock,
@@ -95,28 +153,44 @@ class SKUCommandService {
     input: CreateSKUWithImportedHolesInput,
     ctx: SKUServiceContext
   ): Promise<{ sku: SKUDetailDTO; holesImported: number }> {
-    const productExists = await productRepository.existsById(input.productId)
+    const validation = validateCreateSKUWithImportedHoles(input)
+    if (!validation.success) {
+      throw new AppError(
+        ErrorCode.VALIDATION_FAILED,
+        '输入验证失败',
+        { fields: formatZodErrors(validation.error) }
+      )
+    }
+
+    const validatedInput = validation.data as CreateSKUWithImportedHolesInput
+    const skuCode = normalizeSkuIdentityCode(validatedInput.skuCode)
+    const legacyAttributes = normalizeLegacySkuAttributes(
+      validatedInput.attributes,
+      'CAD 导入 SKU 兼容属性',
+    )
+    const productExists = await productRepository.existsById(validatedInput.productId)
     if (!productExists) {
       throw new AppError(ErrorCode.PRODUCT_NOT_FOUND, 'Product not found')
     }
 
-    await releaseSkuCodeFromDeletedRecords(input.skuCode)
-    const codeExists = await this.repository.skuCodeExists(input.skuCode)
+    await releaseSkuCodeFromDeletedRecords(skuCode)
+    const codeExists = await this.repository.skuCodeExists(skuCode)
     if (codeExists) {
       throw new AppError(ErrorCode.SKU_DUPLICATE_CODE, 'SKU code already exists')
     }
 
     const created = await executeCreateWithSkuCodeRecovery({
-      skuCode: input.skuCode,
+      skuCode,
       duplicateMessage: 'SKU code already exists',
       create: () =>
         this.repository.withTransaction(async (tx) =>
           createSkuWithImportedHolesTx({
             tx,
             ownerId: ctx.user.id,
-            input: input as {
+            input: { ...validatedInput, skuCode, attributes: legacyAttributes } as {
               productId: string
               skuCode: string
+              name?: string
               attributes: Record<string, unknown>
               price: number
               costPrice: number | null
@@ -135,11 +209,11 @@ class SKUCommandService {
       },
     })
 
-    await this.cache.del(CacheKeys.productSkus(input.productId))
-    await this.cache.del(CacheKeys.product(input.productId))
+    await this.cache.del(CacheKeys.productSkus(validatedInput.productId))
+    await this.cache.del(CacheKeys.product(validatedInput.productId))
     await bumpProductListVersion(this.cache)
     const sku = await this.getSKUById(created.id, ctx)
-    return { sku, holesImported: input.cadHoles.length }
+    return { sku, holesImported: validatedInput.cadHoles.length }
   }
 
   async updateSKU(id: string, data: unknown, ctx: SKUServiceContext): Promise<SKUDetailDTO> {
@@ -160,7 +234,7 @@ class SKUCommandService {
     }
 
     const input = validation.data
-    const nextSkuCode = input.skuCode?.trim()
+    const nextSkuCode = input.skuCode === undefined ? undefined : normalizeSkuIdentityCode(input.skuCode)
     if (nextSkuCode && nextSkuCode !== existing.skuCode) {
       await releaseSkuCodeFromDeletedRecords(nextSkuCode)
       const codeExists = await this.repository.skuCodeExists(nextSkuCode, id)
@@ -172,22 +246,16 @@ class SKUCommandService {
       }
     }
 
-    const existingAttributes = (existing.attributes || {}) as Record<string, unknown>
-    const internalAttributes: Record<string, string> = {}
-    for (const [key, value] of Object.entries(existingAttributes)) {
-      if (!key.startsWith('_')) continue
-      if (typeof value !== 'string') continue
-      internalAttributes[key] = value
+    let nextName: string | undefined
+    if (input.name !== undefined) {
+      nextName = readSkuDisplayName(nextSkuCode ?? existing.skuCode, input.name)
+    } else if (nextSkuCode !== undefined) {
+      nextName = existing.name ?? nextSkuCode
     }
 
     await this.repository.update(id, {
       ...(nextSkuCode !== undefined && { skuCode: nextSkuCode }),
-      ...(input.attributes !== undefined && {
-        attributes: {
-          ...input.attributes,
-          ...internalAttributes,
-        },
-      }),
+      ...(nextName !== undefined && { name: nextName }),
       ...(input.price !== undefined && { price: input.price }),
       ...(input.costPrice !== undefined && { costPrice: input.costPrice }),
       ...(input.stock !== undefined && { stock: input.stock }),
@@ -227,20 +295,16 @@ class SKUCommandService {
       await this.repository.delete(id)
     } else {
       const deletedAt = new Date()
-      const attributesObject = toSkuAttributesObject(existing.attributes)
-      const originalSkuCode =
-        typeof attributesObject._originalSkuCode === 'string' && attributesObject._originalSkuCode.trim()
-          ? attributesObject._originalSkuCode.trim()
-          : existing.skuCode
 
-      await this.repository.update(id, {
-        deletedAt,
-        skuCode: buildDeletedSkuCode(existing.skuCode, id, deletedAt),
-        attributes: {
-          ...attributesObject,
-          _originalSkuCode: originalSkuCode,
-          _deletedCodeAt: deletedAt.toISOString(),
-        } as Prisma.InputJsonValue,
+      await this.repository.withTransaction(async (tx) => {
+        await tx.productSKU.update({
+          where: { id },
+          data: buildSoftDeleteSkuUpdateData(existing, deletedAt),
+        })
+        await tx.productSkuAssetProfile.updateMany({
+          where: { skuId: id },
+          data: { skuDeletedAt: deletedAt },
+        })
       })
     }
 
@@ -265,25 +329,55 @@ class SKUCommandService {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '关联的产品已被删除，请先恢复产品')
     }
 
-    const attributesObject = toSkuAttributesObject(existing.attributes)
-    const restoredSkuCode = getRestorableSkuCode(existing.skuCode, existing.attributes)
+    const restoredSku = buildRestoreSkuUpdateData(existing)
 
-    const codeExists = await this.repository.skuCodeExists(restoredSkuCode, id)
+    const codeExists = await this.repository.skuCodeExists(restoredSku.skuCode, id)
     if (codeExists) {
       throw new AppError(
         ErrorCode.SKU_DUPLICATE_CODE,
-        `SKU code ${restoredSkuCode} is already in use and cannot be restored`
+        `SKU code ${restoredSku.skuCode} is already in use and cannot be restored`
       )
     }
 
-    const restoredAttributes = { ...attributesObject }
-    delete restoredAttributes._originalSkuCode
-    delete restoredAttributes._deletedCodeAt
+    await this.repository.withTransaction(async (tx) => {
+      const assetProfile = await tx.productSkuAssetProfile.findUnique({
+        where: { skuId: id },
+        select: { barcode: true, sourceStatus: true },
+      })
+      const activeBarcode =
+        assetProfile?.sourceStatus === 'ACTIVE' && assetProfile.barcode?.trim()
+          ? assetProfile.barcode.trim().toUpperCase()
+          : null
+      if (activeBarcode) {
+        const barcodeConflict = await tx.productSkuAssetProfile.findFirst({
+          where: {
+            skuId: { not: id },
+            sourceStatus: 'ACTIVE',
+            skuDeletedAt: null,
+            barcode: { equals: activeBarcode, mode: 'insensitive' },
+          },
+          select: { skuId: true },
+        })
+        if (barcodeConflict) {
+          throw new AppError(
+            ErrorCode.SKU_DUPLICATE_CODE,
+            `SKU barcode ${activeBarcode} is already in use and cannot be restored`,
+          )
+        }
+      }
 
-    await this.repository.update(id, {
-      deletedAt: null,
-      skuCode: restoredSkuCode,
-      attributes: restoredAttributes as Prisma.InputJsonValue,
+      await tx.productSKU.update({
+        where: { id },
+        data: {
+          deletedAt: null,
+          skuCode: restoredSku.skuCode,
+          attributes: restoredSku.attributes,
+        },
+      })
+      await tx.productSkuAssetProfile.updateMany({
+        where: { skuId: id },
+        data: { skuDeletedAt: null },
+      })
     })
 
     await this.cache.del(CacheKeys.sku(id))
diff --git a/furniture-3d-system/src/server/services/sku-query.service.ts b/furniture-3d-system/src/server/services/sku-query.service.ts
index 9bf69724..6bb4e3f9 100644
--- a/furniture-3d-system/src/server/services/sku-query.service.ts
+++ b/furniture-3d-system/src/server/services/sku-query.service.ts
@@ -8,11 +8,12 @@ import {
   DeletedSKUDTO,
   SKUDetailDTO,
   SKUListItemDTO,
-  toSKUDetailDTO,
   toSKUListItemDTO,
+  toSKUDetailDTO,
 } from '../dto/sku.dto'
 import type { SKUFilter, SKURepositoryClass } from '../repositories/sku.repository'
-import { getRestorableSkuCode, toSkuAttributesObject } from './sku-soft-delete.helper'
+import { toLegacySkuDisplayAttributes } from '@/lib/sku-display-tags'
+import { readDeletedSkuDisplayState } from './sku-soft-delete.helper'
 import type { SKUListResult, SKUServiceContext } from './sku.service.types'
 
 class SKUQueryService {
@@ -65,24 +66,15 @@ class SKUQueryService {
     _ctx: SKUServiceContext
   ): Promise<SKUListItemDTO[]> {
     const skus = await this.repository.findByProductId(productId)
-    return skus.map((sku) => ({
-      id: sku.id,
-      productId: sku.productId,
-      skuCode: sku.skuCode,
-      productName: '',
-      productModelNumber: '',
-      attributes: sku.attributes as Record<string, string>,
-      price: Number(sku.price),
-      stock: sku.stock,
-      isActive: sku.isActive,
-      thumbnailUrl: sku.images?.[0] || null,
-      owner: {
-        id: sku.owner.id,
-        name: sku.owner.name,
-        avatar: sku.owner.avatar,
-      },
-      createdAt: sku.createdAt.toISOString(),
-    }))
+    return skus.map((sku) =>
+      toSKUListItemDTO({
+        ...sku,
+        product: {
+          name: '',
+          modelNumber: '',
+        },
+      }),
+    )
   }
 
   async getDeletedSKUs(ctx: SKUServiceContext): Promise<DeletedSKUDTO[]> {
@@ -108,15 +100,14 @@ class SKUQueryService {
     owner: { id: string; name: string; avatar: string | null }
     product: { id: string; name: string; modelNumber: string }
   }): DeletedSKUDTO {
-    const attributesObject = toSkuAttributesObject(sku.attributes)
-    const displaySkuCode = getRestorableSkuCode(sku.skuCode, sku.attributes)
+    const displayState = readDeletedSkuDisplayState(sku)
 
     return {
       id: sku.id,
-      skuCode: displaySkuCode,
+      skuCode: displayState.skuCode,
       deletedAt: sku.deletedAt!.toISOString(),
       price: Number(sku.price),
-      attributes: attributesObject,
+      legacyAttributes: toLegacySkuDisplayAttributes(displayState.attributes),
       owner: {
         id: sku.owner.id,
         name: sku.owner.name,
diff --git a/furniture-3d-system/src/server/services/sku-soft-delete.helper.ts b/furniture-3d-system/src/server/services/sku-soft-delete.helper.ts
index 5f483709..5ed491a9 100644
--- a/furniture-3d-system/src/server/services/sku-soft-delete.helper.ts
+++ b/furniture-3d-system/src/server/services/sku-soft-delete.helper.ts
@@ -2,6 +2,48 @@
 import { prisma } from '@/lib/prisma'
 
 const SOFT_DELETE_CODE_MARKER = '__deleted__'
+const RESERVED_ATTRIBUTE_KEYS = new Set([
+  'assetSkuSnapshot',
+  'variantSelectionSummary',
+  'bomPreview',
+])
+
+function normalizeSkuIdentityCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+type DeletedSkuCodeRecord = {
+  id: string
+  skuCode: string
+  attributes: Prisma.JsonValue | null
+  deletedAt: Date | null
+  originalSkuCode?: string | null
+  deletedCodeAt?: Date | null
+  deletedByProductId?: string | null
+  productDeletedAt?: Date | null
+}
+
+type ProductSkuCodeReleaseClient = {
+  productSKU: {
+    findMany(args: {
+      where: Prisma.ProductSKUWhereInput
+      select: {
+        id: true
+        skuCode: true
+        attributes: true
+        deletedAt: true
+        originalSkuCode: true
+        deletedCodeAt: true
+        deletedByProductId: true
+        productDeletedAt: true
+      }
+    }): Promise<DeletedSkuCodeRecord[]>
+    update(args: {
+      where: Prisma.ProductSKUWhereUniqueInput
+      data: Prisma.ProductSKUUpdateInput
+    }): Promise<unknown>
+  }
+}
 
 export function toSkuAttributesObject(
   attributes: Prisma.JsonValue | null | undefined
@@ -12,66 +54,192 @@ export function toSkuAttributesObject(
   return {}
 }
 
+function isReservedAttributeKey(key: string): boolean {
+  return key.startsWith('_') || RESERVED_ATTRIBUTE_KEYS.has(key)
+}
+
+function collectPreservedAttributes(attributes: unknown): Record<string, unknown> {
+  const attributesObject = toSkuAttributesObject(attributes as Prisma.JsonValue | null | undefined)
+  const preserved: Record<string, unknown> = {}
+
+  for (const [key, value] of Object.entries(attributesObject)) {
+    if (isReservedAttributeKey(key)) {
+      preserved[key] = value
+    }
+  }
+
+  return preserved
+}
+
+function removeReservedAttributeInput(attributes: unknown): Record<string, unknown> {
+  const attributesObject = toSkuAttributesObject(attributes as Prisma.JsonValue | null | undefined)
+  return Object.fromEntries(
+    Object.entries(attributesObject).filter(([key]) => !isReservedAttributeKey(key)),
+  )
+}
+
+export function removeSoftDeleteLifecycleAttributes(
+  attributes: Record<string, unknown>,
+): Record<string, unknown> {
+  const nextAttributes = { ...attributes }
+  delete nextAttributes._originalSkuCode
+  delete nextAttributes._deletedCodeAt
+  delete nextAttributes._deletedByProductId
+  delete nextAttributes._productDeletedAt
+  return nextAttributes
+}
+
+export function mergeSkuAttributesForUpdate(
+  existingAttributes: Prisma.JsonValue | null | undefined,
+  inputAttributes: unknown,
+): Prisma.InputJsonValue {
+  return {
+    ...removeReservedAttributeInput(inputAttributes),
+    ...collectPreservedAttributes(existingAttributes),
+  } as Prisma.InputJsonValue
+}
+
+export function mergeSkuRecordAttributesForUpdate(
+  record: Pick<DeletedSkuCodeRecord, 'attributes'>,
+  inputAttributes: unknown,
+): Prisma.InputJsonValue {
+  return mergeSkuAttributesForUpdate(record.attributes, inputAttributes)
+}
+
 export function buildDeletedSkuCode(skuCode: string, id: string, deletedAt: Date): string {
   const timestamp = deletedAt.getTime()
-  return `${skuCode}${SOFT_DELETE_CODE_MARKER}${timestamp}_${id.slice(0, 8)}`
+  return `${normalizeSkuIdentityCode(skuCode)}${SOFT_DELETE_CODE_MARKER}${timestamp}_${id.slice(0, 8)}`
 }
 
 export function getRestorableSkuCode(
   skuCode: string,
-  attributes: Prisma.JsonValue | null | undefined
+  originalSkuCode?: string | null,
 ): string {
-  const attributesObject = toSkuAttributesObject(attributes)
-  const metadataOriginal = attributesObject._originalSkuCode
-
-  if (typeof metadataOriginal === 'string' && metadataOriginal.length > 0) {
-    return metadataOriginal
+  if (typeof originalSkuCode === 'string' && originalSkuCode.trim().length > 0) {
+    return normalizeSkuIdentityCode(originalSkuCode)
   }
 
   const markerIndex = skuCode.indexOf(SOFT_DELETE_CODE_MARKER)
   if (markerIndex > 0) {
-    return skuCode.slice(0, markerIndex)
+    return normalizeSkuIdentityCode(skuCode.slice(0, markerIndex))
   }
 
-  return skuCode
+  return normalizeSkuIdentityCode(skuCode)
 }
 
-export async function releaseSkuCodeFromDeletedRecords(skuCode: string): Promise<void> {
-  const deletedRecords = await prisma.productSKU.findMany({
+export function buildSoftDeleteSkuUpdateData(
+  record: DeletedSkuCodeRecord,
+  deletedAt: Date,
+): Prisma.ProductSKUUpdateInput {
+  const attributesObject = removeSoftDeleteLifecycleAttributes(
+    toSkuAttributesObject(record.attributes),
+  )
+  const originalSkuCode =
+    getRestorableSkuCode(record.skuCode, record.originalSkuCode)
+
+  return {
+    deletedAt,
+    skuCode: buildDeletedSkuCode(originalSkuCode, record.id, deletedAt),
+    originalSkuCode,
+    deletedCodeAt: deletedAt,
+    attributes: {
+      ...attributesObject,
+    } as Prisma.InputJsonValue,
+  }
+}
+
+export function buildRestoreSkuUpdateData(record: Pick<DeletedSkuCodeRecord, 'skuCode' | 'attributes' | 'originalSkuCode'>): {
+  skuCode: string
+  attributes: Prisma.InputJsonValue
+  originalSkuCode: null
+  deletedCodeAt: null
+  deletedByProductId: null
+  productDeletedAt: null
+} {
+  const restoredSkuCode = getRestorableSkuCode(record.skuCode, record.originalSkuCode)
+  const restoredAttributes = removeSoftDeleteLifecycleAttributes(
+    toSkuAttributesObject(record.attributes),
+  )
+
+  return {
+    skuCode: restoredSkuCode,
+    attributes: restoredAttributes as Prisma.InputJsonValue,
+    originalSkuCode: null,
+    deletedCodeAt: null,
+    deletedByProductId: null,
+    productDeletedAt: null,
+  }
+}
+
+export function readDeletedSkuDisplayState(record: Pick<DeletedSkuCodeRecord, 'skuCode' | 'attributes' | 'originalSkuCode'>): {
+  skuCode: string
+  attributes: Record<string, unknown>
+} {
+  return {
+    skuCode: getRestorableSkuCode(record.skuCode, record.originalSkuCode),
+    attributes: removeSoftDeleteLifecycleAttributes(toSkuAttributesObject(record.attributes)),
+  }
+}
+
+export async function releaseSkuCodeFromDeletedRecordsTx(
+  client: ProductSkuCodeReleaseClient,
+  skuCode: string,
+): Promise<void> {
+  const normalizedSkuCode = normalizeSkuIdentityCode(skuCode)
+  const deletedRecords = await client.productSKU.findMany({
     where: {
       deletedAt: { not: null },
-      OR: [{ skuCode }, { skuCode: { startsWith: `${skuCode}${SOFT_DELETE_CODE_MARKER}` } }],
+      OR: [
+        { skuCode: { equals: normalizedSkuCode, mode: 'insensitive' } },
+        {
+          skuCode: {
+            startsWith: `${normalizedSkuCode}${SOFT_DELETE_CODE_MARKER}`,
+            mode: 'insensitive',
+          },
+        },
+      ],
     },
     select: {
       id: true,
       skuCode: true,
       attributes: true,
       deletedAt: true,
+      originalSkuCode: true,
+      deletedCodeAt: true,
+      deletedByProductId: true,
+      productDeletedAt: true,
     },
   })
 
   for (const record of deletedRecords) {
-    const attributesObject = toSkuAttributesObject(record.attributes)
-    const originalSkuCode = getRestorableSkuCode(record.skuCode, record.attributes)
+    const attributesObject = removeSoftDeleteLifecycleAttributes(
+      toSkuAttributesObject(record.attributes),
+    )
+    const originalSkuCode = getRestorableSkuCode(record.skuCode, record.originalSkuCode)
 
-    if (originalSkuCode !== skuCode) {
+    if (originalSkuCode !== normalizedSkuCode) {
       continue
     }
 
     const deletedAt = record.deletedAt ?? new Date()
-    await prisma.productSKU.update({
+    await client.productSKU.update({
       where: { id: record.id },
       data: {
-        skuCode: buildDeletedSkuCode(record.skuCode, record.id, deletedAt),
+        skuCode: buildDeletedSkuCode(originalSkuCode, record.id, deletedAt),
+        originalSkuCode,
+        deletedCodeAt: record.deletedCodeAt ?? deletedAt,
         attributes: {
           ...attributesObject,
-          _originalSkuCode: originalSkuCode,
         } as Prisma.InputJsonValue,
       },
     })
   }
 }
 
+export async function releaseSkuCodeFromDeletedRecords(skuCode: string): Promise<void> {
+  await releaseSkuCodeFromDeletedRecordsTx(prisma, skuCode)
+}
+
 export function isSkuCodeUniqueConflict(error: unknown): boolean {
   if (!(error instanceof Prisma.PrismaClientKnownRequestError)) {
     return false
diff --git a/furniture-3d-system/src/server/services/sku-upload.service.ts b/furniture-3d-system/src/server/services/sku-upload.service.ts
index 726d9e41..a4c65eda 100644
--- a/furniture-3d-system/src/server/services/sku-upload.service.ts
+++ b/furniture-3d-system/src/server/services/sku-upload.service.ts
@@ -19,6 +19,7 @@ import {
   sanitizePanelSize,
 } from '@/lib/cad-panel-linking'
 import { normalizeObjPanelNodeNames } from '@/lib/obj-panel-node-normalizer'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { ImportedCADPanel } from './sku-cad-import.helper'
 
@@ -235,7 +236,7 @@ class SKUUploadService {
 
     return {
       productId,
-      skuCode: skuCode.trim(),
+      skuCode: normalizeCoreIdentity(skuCode),
       attributes: extendedAttributes,
       price: this.parseNonNegativeNumber(price, '销售价格', 0),
       costPrice: costPrice.trim() ? this.parseNonNegativeNumber(costPrice, '成本价格', 0) : null,
diff --git a/furniture-3d-system/src/server/services/sku.service.types.ts b/furniture-3d-system/src/server/services/sku.service.types.ts
index 380b2220..d6e5ea7d 100644
--- a/furniture-3d-system/src/server/services/sku.service.types.ts
+++ b/furniture-3d-system/src/server/services/sku.service.types.ts
@@ -15,6 +15,7 @@ export interface SKUListResult<T> {
 export interface CreateSKUWithImportedHolesInput {
   productId: string
   skuCode: string
+  name?: string
   attributes: Record<string, unknown>
   price: number
   costPrice: number | null
diff --git a/furniture-3d-system/src/server/services/system-config.service.ts b/furniture-3d-system/src/server/services/system-config.service.ts
index e689d3f3..e829c550 100644
--- a/furniture-3d-system/src/server/services/system-config.service.ts
+++ b/furniture-3d-system/src/server/services/system-config.service.ts
@@ -1,5 +1,6 @@
 import { prisma } from '@/lib/prisma'
 import type { Prisma } from '@prisma/client'
+import { AppError, ErrorCode } from '@/server/core/errors'
 
 const CACHE_TTL_MS = 60_000
 
@@ -8,34 +9,73 @@ interface CacheEntry {
   expiresAt: number
 }
 
+function normalizeConfigKey(value: unknown): string {
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少配置 key')
+  }
+  const normalized = value.trim()
+  if (!normalized) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少配置 key')
+  }
+  return normalized
+}
+
+function normalizeOptionalText(value: unknown): string | null | undefined {
+  if (value === undefined) return undefined
+  if (value === null) return null
+  if (typeof value !== 'string') {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, '配置说明格式不正确')
+  }
+  const normalized = value.trim()
+  return normalized ? normalized : null
+}
+
+function ensureJsonCompatible(value: unknown): Prisma.InputJsonValue {
+  if (value === undefined) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少配置 value')
+  }
+  try {
+    return JSON.parse(JSON.stringify(value)) as Prisma.InputJsonValue
+  } catch {
+    throw new AppError(ErrorCode.VALIDATION_INVALID_FORMAT, '配置 value 必须是可保存的 JSON')
+  }
+}
+
 export class SystemConfigService {
   private cache = new Map<string, CacheEntry>()
 
   async get<T = unknown>(key: string): Promise<T | null> {
-    const cached = this.cache.get(key)
+    const normalizedKey = normalizeConfigKey(key)
+    const cached = this.cache.get(normalizedKey)
     if (cached && cached.expiresAt > Date.now()) {
       return cached.value as T
     }
 
-    const record = await prisma.systemConfig.findUnique({ where: { key } })
+    const record = await prisma.systemConfig.findUnique({ where: { key: normalizedKey } })
     if (!record) return null
 
-    this.cache.set(key, { value: record.value, expiresAt: Date.now() + CACHE_TTL_MS })
+    this.cache.set(normalizedKey, { value: record.value, expiresAt: Date.now() + CACHE_TTL_MS })
     return record.value as T
   }
 
   async set(key: string, value: unknown, description?: string): Promise<void> {
+    const normalizedKey = normalizeConfigKey(key)
+    const normalizedValue = ensureJsonCompatible(value)
+    const normalizedDescription = normalizeOptionalText(description)
     const data: Prisma.SystemConfigUpsertArgs = {
-      where: { key },
-      create: { key, value: value as Prisma.InputJsonValue, description: description ?? null },
-      update: { value: value as Prisma.InputJsonValue, ...(description !== undefined ? { description } : {}) },
+      where: { key: normalizedKey },
+      create: { key: normalizedKey, value: normalizedValue, description: normalizedDescription ?? null },
+      update: {
+        value: normalizedValue,
+        ...(normalizedDescription !== undefined ? { description: normalizedDescription } : {}),
+      },
     }
     await prisma.systemConfig.upsert(data)
-    this.cache.set(key, { value, expiresAt: Date.now() + CACHE_TTL_MS })
+    this.cache.set(normalizedKey, { value: normalizedValue, expiresAt: Date.now() + CACHE_TTL_MS })
   }
 
   invalidate(key: string): void {
-    this.cache.delete(key)
+    this.cache.delete(key.trim())
   }
 }
 
diff --git a/furniture-3d-system/src/server/services/user.service.ts b/furniture-3d-system/src/server/services/user.service.ts
index cc367778..b0e839d9 100644
--- a/furniture-3d-system/src/server/services/user.service.ts
+++ b/furniture-3d-system/src/server/services/user.service.ts
@@ -89,6 +89,44 @@ export interface UserDTO {
 const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
 const NAME_REGEX = /^[\u4e00-\u9fa5a-zA-Z0-9_]{2,20}$/
 const GENERIC_LOGIN_ERROR_MESSAGE = '账号或密码错误'
+const BUSINESS_ROLE_SET = new Set<BusinessAccountType>([
+  'DESIGN',
+  'PLANNING',
+  'PURCHASING',
+  'WAREHOUSE',
+  'SUPPLIER',
+])
+
+function normalizeEmail(email: string): string {
+  return email.trim().toLowerCase()
+}
+
+function normalizeName(name: string): string {
+  return name.trim()
+}
+
+function normalizeOptionalText(value: string | null | undefined): string | null | undefined {
+  if (value === undefined) return undefined
+  if (value === null) return null
+  const normalized = value.trim()
+  return normalized || null
+}
+
+function normalizeOptionalIdentity(value: string | null | undefined): string | null | undefined {
+  return normalizeOptionalText(value)
+}
+
+function normalizeBusinessRoles(value: BusinessAccountType[] | undefined): BusinessAccountType[] | undefined {
+  if (value === undefined) return undefined
+  const roles: BusinessAccountType[] = []
+  for (const role of value) {
+    if (!BUSINESS_ROLE_SET.has(role)) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '业务类型不合法')
+    }
+    roles.push(role)
+  }
+  return [...new Set(roles)]
+}
 
 function validateEmail(email: string): void {
   if (!email || !EMAIL_REGEX.test(email)) {
@@ -230,12 +268,12 @@ class UserService {
   }
 
   async getByEmail(email: string): Promise<UserDTO | null> {
-    const user = await userRepository.findByEmailWithRelations(email)
+    const user = await userRepository.findByEmailWithRelations(normalizeEmail(email))
     return user ? this.toDTO(user) : null
   }
 
   async getByName(name: string): Promise<UserDTO | null> {
-    const user = await userRepository.findByNameWithRelations(name)
+    const user = await userRepository.findByNameWithRelations(normalizeName(name))
     return user ? this.toDTO(user) : null
   }
 
@@ -249,16 +287,19 @@ class UserService {
   }
 
   async create(input: CreateUserInput): Promise<UserDTO> {
-    validateEmail(input.email)
-    validateName(input.name)
+    const email = normalizeEmail(input.email)
+    const name = normalizeName(input.name)
+    const businessRoles = normalizeBusinessRoles(input.businessRoles) ?? []
+    validateEmail(email)
+    validateName(name)
     validatePassword(input.password)
 
-    const emailExists = await userRepository.emailExists(input.email)
+    const emailExists = await userRepository.emailExists(email)
     if (emailExists) {
       throw new AppError(ErrorCode.USER_EMAIL_EXISTS, '该邮箱已被注册')
     }
 
-    const nameExists = await userRepository.nameExists(input.name)
+    const nameExists = await userRepository.nameExists(name)
     if (nameExists) {
       throw new AppError(ErrorCode.USER_NAME_EXISTS, '该姓名已被使用')
     }
@@ -272,22 +313,22 @@ class UserService {
 
     const hashedPassword = await hashPassword(input.password)
     const created = await userRepository.createWithScalars({
-      email: input.email,
-      name: input.name,
+      email,
+      name,
       password: hashedPassword,
       role: input.role ?? 'USER',
-      businessRoles: input.businessRoles ?? [],
+      businessRoles,
       departmentId: input.departmentId,
       teamId: null,
-      phone: input.phone,
+      phone: normalizeOptionalText(input.phone),
       isFirstLogin: input.isFirstLogin ?? false,
       status: input.status ?? 'PENDING',
-      loginSource: input.loginSource ?? 'LOCAL',
-      employeeDirectoryId: input.employeeDirectoryId,
-      dingtalkUserId: input.dingtalkUserId,
-      dingtalkUnionId: input.dingtalkUnionId,
+      loginSource: normalizeOptionalText(input.loginSource) ?? 'LOCAL',
+      employeeDirectoryId: normalizeOptionalIdentity(input.employeeDirectoryId),
+      dingtalkUserId: normalizeOptionalIdentity(input.dingtalkUserId),
+      dingtalkUnionId: normalizeOptionalIdentity(input.dingtalkUnionId),
       dingtalkBoundAt: input.dingtalkBoundAt,
-      avatar: input.avatar,
+      avatar: normalizeOptionalText(input.avatar),
     })
 
     const user = await userRepository.findByIdWithRelations(created.id)
@@ -305,9 +346,10 @@ class UserService {
     }
 
     if (input.email !== undefined) {
-      validateEmail(input.email)
-      if (input.email !== existing.email) {
-        const emailExists = await userRepository.emailExists(input.email, id)
+      const email = normalizeEmail(input.email)
+      validateEmail(email)
+      if (email !== existing.email) {
+        const emailExists = await userRepository.emailExists(email, id)
         if (emailExists) {
           throw new AppError(ErrorCode.USER_EMAIL_EXISTS, '该邮箱已被其他用户使用')
         }
@@ -315,9 +357,10 @@ class UserService {
     }
 
     if (input.name !== undefined) {
-      validateName(input.name)
-      if (input.name !== existing.name) {
-        const nameExists = await userRepository.nameExists(input.name, id)
+      const name = normalizeName(input.name)
+      validateName(name)
+      if (name !== existing.name) {
+        const nameExists = await userRepository.nameExists(name, id)
         if (nameExists) {
           throw new AppError(ErrorCode.USER_NAME_EXISTS, '该姓名已被其他用户使用')
         }
@@ -331,16 +374,16 @@ class UserService {
     }
 
     await userRepository.updateWithScalars(id, {
-      email: input.email,
-      name: input.name,
+      email: input.email === undefined ? undefined : normalizeEmail(input.email),
+      name: input.name === undefined ? undefined : normalizeName(input.name),
       password: hashedPassword,
       role: input.role,
-      businessRoles: input.businessRoles,
+      businessRoles: normalizeBusinessRoles(input.businessRoles),
       departmentId: input.departmentId,
       teamId: input.teamId === undefined ? undefined : null,
-      phone: input.phone,
+      phone: normalizeOptionalText(input.phone),
       status: input.status,
-      avatar: input.avatar,
+      avatar: normalizeOptionalText(input.avatar),
     })
 
     const updatedUser = await userRepository.findByIdWithRelations(id)
@@ -364,8 +407,9 @@ class UserService {
     identifier: string,
     password: string
   ): Promise<{ user: UserDTO; isEmail: boolean }> {
-    const isEmail = EMAIL_REGEX.test(identifier)
-    const user = await userRepository.findByIdentifier(identifier)
+    const normalizedIdentifier = identifier.trim()
+    const isEmail = EMAIL_REGEX.test(normalizedIdentifier)
+    const user = await userRepository.findByIdentifier(isEmail ? normalizeEmail(normalizedIdentifier) : normalizedIdentifier)
 
     if (!user) {
       throw new AppError(ErrorCode.AUTH_INVALID_CREDENTIALS, GENERIC_LOGIN_ERROR_MESSAGE)
diff --git a/furniture-3d-system/src/server/services/warehouse.service.ts b/furniture-3d-system/src/server/services/warehouse.service.ts
index d5d329f7..c129b226 100644
--- a/furniture-3d-system/src/server/services/warehouse.service.ts
+++ b/furniture-3d-system/src/server/services/warehouse.service.ts
@@ -37,19 +37,55 @@ function toLocationDTO(record: WarehouseLocation): WarehouseLocationDTO {
   }
 }
 
-function readSkuName(attributes: unknown, fallbackSkuCode: string) {
-  if (
-    typeof attributes === 'object' &&
-    attributes &&
-    !Array.isArray(attributes) &&
-    typeof (attributes as Record<string, unknown>).skuName === 'string'
-  ) {
-    return (attributes as Record<string, unknown>).skuName as string
-  }
+function readSkuName(
+  name: string | null | undefined,
+  assetProfile: { specName?: string | null } | null | undefined,
+  fallbackSkuCode: string,
+) {
+  const normalizedName = name?.trim()
+  if (normalizedName) return normalizedName
+
+  const specName = assetProfile?.specName?.trim()
+  if (specName) return specName
 
   return fallbackSkuCode
 }
 
+function normalizeWarehouseCode(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+const BRAND_MATERIAL_TYPES = new Set(['MANUAL', 'NAMEPLATE', 'CERTIFICATE', 'CARTON_PRINT'])
+
+function normalizeOptionalText(value: string | null | undefined): string | null {
+  return value?.trim() || null
+}
+
+function normalizeRequiredId(value: string | null | undefined, fieldName: string): string {
+  const next = value?.trim() ?? ''
+  if (!next) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, `${fieldName}不能为空`)
+  }
+  return next
+}
+
+function normalizeBrandMaterialInput(brand: string, materialType: string) {
+  const normalizedBrand = brand.trim()
+  const normalizedMaterialType = materialType.trim().toUpperCase()
+
+  if (!normalizedBrand || !normalizedMaterialType) {
+    throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '品牌和物料类型不能为空')
+  }
+  if (!BRAND_MATERIAL_TYPES.has(normalizedMaterialType)) {
+    throw new AppError(ErrorCode.VALIDATION_FAILED, '品牌物料类型不在允许范围内')
+  }
+
+  return {
+    brand: normalizedBrand,
+    materialType: normalizedMaterialType,
+  }
+}
+
 class WarehouseService {
   async listLocations(): Promise<WarehouseLocationDTO[]> {
     const locations = await warehouseLocationRepository.findAllActive()
@@ -57,7 +93,7 @@ class WarehouseService {
   }
 
   async createLocation(input: CreateWarehouseLocationInput): Promise<WarehouseLocationDTO> {
-    const code = input.code.trim()
+    const code = normalizeWarehouseCode(input.code)
     const name = input.name.trim()
     if (!code || !name) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '库位编码和名称不能为空')
@@ -67,10 +103,10 @@ class WarehouseService {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '库位编码已存在')
     }
 
-    const zone = input.zone?.trim() || null
-    const aisle = input.aisle?.trim() || null
-    const shelf = input.shelf?.trim() || null
-    const bin = input.bin?.trim() || null
+    const zone = normalizeOptionalText(input.zone)
+    const aisle = normalizeOptionalText(input.aisle)
+    const shelf = normalizeOptionalText(input.shelf)
+    const bin = normalizeOptionalText(input.bin)
 
     if (await warehouseLocationRepository.findByPosition(zone, aisle, shelf, bin)) {
       const parts = [zone || '未分区', aisle || '未设巷道', shelf || '未设货架', bin || '未设箱位']
@@ -84,7 +120,7 @@ class WarehouseService {
       aisle,
       shelf,
       bin,
-      notes: input.notes?.trim() || null,
+      notes: normalizeOptionalText(input.notes),
       isActive: true,
     })
 
@@ -92,16 +128,54 @@ class WarehouseService {
   }
 
   async updateLocation(id: string, input: UpdateWarehouseLocationInput): Promise<WarehouseLocationDTO> {
+    const existing = await warehouseLocationRepository.findById(id)
+    if (!existing) {
+      throw new AppError(ErrorCode.WAREHOUSE_LOCATION_NOT_FOUND, '库位不存在')
+    }
+
     const data: Record<string, unknown> = {}
-    if (input.code !== undefined) data.code = input.code.trim()
-    if (input.name !== undefined) data.name = input.name.trim()
-    if (input.zone !== undefined) data.zone = input.zone?.trim() || null
-    if (input.aisle !== undefined) data.aisle = input.aisle?.trim() || null
-    if (input.shelf !== undefined) data.shelf = input.shelf?.trim() || null
-    if (input.bin !== undefined) data.bin = input.bin?.trim() || null
-    if (input.notes !== undefined) data.notes = input.notes?.trim() || null
+    if (input.code !== undefined) {
+      const code = normalizeWarehouseCode(input.code)
+      if (!code) {
+        throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '库位编码不能为空')
+      }
+      const duplicate = code === existing.code ? null : await warehouseLocationRepository.findByCode(code)
+      if (duplicate && duplicate.id !== id) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, '库位编码已存在')
+      }
+      data.code = code
+    }
+    if (input.name !== undefined) {
+      const name = input.name.trim()
+      if (!name) {
+        throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '库位名称不能为空')
+      }
+      data.name = name
+    }
+    const nextZone = input.zone !== undefined ? normalizeOptionalText(input.zone) : existing.zone
+    const nextAisle = input.aisle !== undefined ? normalizeOptionalText(input.aisle) : existing.aisle
+    const nextShelf = input.shelf !== undefined ? normalizeOptionalText(input.shelf) : existing.shelf
+    const nextBin = input.bin !== undefined ? normalizeOptionalText(input.bin) : existing.bin
+
+    if (input.zone !== undefined) data.zone = nextZone
+    if (input.aisle !== undefined) data.aisle = nextAisle
+    if (input.shelf !== undefined) data.shelf = nextShelf
+    if (input.bin !== undefined) data.bin = nextBin
+    if (input.notes !== undefined) data.notes = normalizeOptionalText(input.notes)
     if (input.isActive !== undefined) data.isActive = input.isActive
 
+    const activatesLocation = input.isActive === true && !existing.isActive
+    const changesPosition =
+      nextZone !== existing.zone ||
+      nextAisle !== existing.aisle ||
+      nextShelf !== existing.shelf ||
+      nextBin !== existing.bin
+
+    if ((activatesLocation || (existing.isActive && changesPosition)) && await warehouseLocationRepository.findByPosition(nextZone, nextAisle, nextShelf, nextBin, id)) {
+      const parts = [nextZone || '未分区', nextAisle || '未设巷道', nextShelf || '未设货架', nextBin || '未设箱位']
+      throw new AppError(ErrorCode.VALIDATION_FAILED, `库位 ${parts.join(' / ')} 已存在，不可重复创建`)
+    }
+
     const updated = await warehouseLocationRepository.update(id, data)
     return toLocationDTO(updated)
   }
@@ -124,7 +198,7 @@ class WarehouseService {
       skuStock: skuStock.map((sku) => ({
         skuId: sku.id,
         skuCode: sku.skuCode,
-        skuName: readSkuName(sku.attributes, sku.skuCode),
+        skuName: readSkuName(sku.name, sku.assetProfile, sku.skuCode),
         productId: sku.product.id,
         productName: sku.product.name,
         productModelNumber: sku.product.modelNumber,
@@ -168,11 +242,8 @@ class WarehouseService {
   }
 
   async bindVariantToLocations(input: BindVariantToLocationsInput): Promise<AssetVariantBindingDTO[]> {
-    const { variantId, locationIds } = input
-
-    if (!variantId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '变体 ID 不能为空')
-    }
+    const variantId = normalizeRequiredId(input.variantId, '变体 ID')
+    const locationIds = [...new Set((input.locationIds ?? []).map((id) => normalizeRequiredId(id, '库位 ID')))]
     if (!locationIds || locationIds.length === 0) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '请至少选择一个库位')
     }
@@ -200,11 +271,8 @@ class WarehouseService {
   }
 
   async unbindVariantFromLocation(input: UnbindVariantFromLocationInput): Promise<void> {
-    const { variantId, locationId } = input
-
-    if (!variantId || !locationId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '变体 ID 和库位 ID 不能为空')
-    }
+    const variantId = normalizeRequiredId(input.variantId, '变体 ID')
+    const locationId = normalizeRequiredId(input.locationId, '库位 ID')
 
     try {
       await warehouseLocationRepository.deleteBindingByPair(variantId, locationId)
@@ -214,10 +282,11 @@ class WarehouseService {
   }
 
   async getBrandMaterials(brand: string): Promise<BrandMaterialBindingDTO[]> {
-    if (!brand) {
+    const normalizedBrand = brand.trim()
+    if (!normalizedBrand) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '品牌不能为空')
     }
-    const bindings = await warehouseLocationRepository.findBrandMaterialBindingsByBrand(brand)
+    const bindings = await warehouseLocationRepository.findBrandMaterialBindingsByBrand(normalizedBrand)
     return bindings.map((b) => ({
       id: b.id,
       brand: b.brand,
@@ -232,11 +301,8 @@ class WarehouseService {
   }
 
   async bindBrandMaterialLocation(input: BindBrandMaterialLocationInput): Promise<BrandMaterialBindingDTO> {
-    const { brand, materialType, warehouseLocationId } = input
-
-    if (!brand || !materialType) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '品牌和物料类型不能为空')
-    }
+    const { brand, materialType } = normalizeBrandMaterialInput(input.brand, input.materialType)
+    const warehouseLocationId = input.warehouseLocationId?.trim() || null
 
     if (warehouseLocationId) {
       const location = await warehouseLocationRepository.findById(warehouseLocationId)
@@ -265,11 +331,9 @@ class WarehouseService {
   }
 
   async uploadBrandMaterialFile(brand: string, materialType: string, file: File): Promise<BrandMaterialBindingDTO> {
-    if (!brand || !materialType) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '品牌和物料类型不能为空')
-    }
+    const normalized = normalizeBrandMaterialInput(brand, materialType)
 
-    if (materialType !== 'CARTON_PRINT') {
+    if (normalized.materialType !== 'CARTON_PRINT') {
       throw new AppError(ErrorCode.VALIDATION_FAILED, '仅外箱印刷支持文件上传')
     }
 
@@ -282,7 +346,7 @@ class WarehouseService {
       throw new AppError(ErrorCode.FILE_TOO_LARGE, '文件大小不能超过 100MB')
     }
 
-    const key = `brand-materials/${brand}/${materialType}/${randomUUID()}.zip`
+    const key = `brand-materials/${normalized.brand}/${normalized.materialType}/${randomUUID()}.zip`
     const fileUrl = await uploadBufferToS3(
       Buffer.from(await file.arrayBuffer()),
       key,
@@ -290,10 +354,10 @@ class WarehouseService {
     )
 
     const result = await warehouseLocationRepository.upsertBrandMaterialBinding({
-      brand,
-      materialType,
+      brand: normalized.brand,
+      materialType: normalized.materialType,
       fileUrl,
-      fileName: file.name,
+      fileName: file.name.trim(),
       fileSize: file.size,
     })
 
@@ -325,11 +389,8 @@ class WarehouseService {
   }
 
   async bindPreSkuToLocations(input: BindPreSkuToLocationsInput): Promise<PreSkuBindingDTO[]> {
-    const { preSkuId, locationIds } = input
-
-    if (!preSkuId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, 'PreSku ID 不能为空')
-    }
+    const preSkuId = normalizeRequiredId(input.preSkuId, 'PreSku ID')
+    const locationIds = [...new Set((input.locationIds ?? []).map((id) => normalizeRequiredId(id, '库位 ID')))]
     if (!locationIds || locationIds.length === 0) {
       throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '请至少选择一个库位')
     }
@@ -352,11 +413,8 @@ class WarehouseService {
   }
 
   async unbindPreSkuFromLocation(input: UnbindPreSkuFromLocationInput): Promise<void> {
-    const { preSkuId, locationId } = input
-
-    if (!preSkuId || !locationId) {
-      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, 'PreSku ID 和库位 ID 不能为空')
-    }
+    const preSkuId = normalizeRequiredId(input.preSkuId, 'PreSku ID')
+    const locationId = normalizeRequiredId(input.locationId, '库位 ID')
 
     try {
       await warehouseLocationRepository.deletePreSkuBindingByPair(preSkuId, locationId)
diff --git a/furniture-3d-system/src/server/validators/sku.validator.test.ts b/furniture-3d-system/src/server/validators/sku.validator.test.ts
index 38aa8332..35e2c68a 100644
--- a/furniture-3d-system/src/server/validators/sku.validator.test.ts
+++ b/furniture-3d-system/src/server/validators/sku.validator.test.ts
@@ -16,4 +16,18 @@ describe('updateSKUSchema', () => {
 
     expect(result.success).toBe(false)
   })
+
+  it('普通更新入口不再接收 attributes 旧属性袋', () => {
+    const result = validateUpdateSKU({
+      price: 99,
+      attributes: {
+        color: 'black',
+      },
+    })
+
+    expect(result.success).toBe(true)
+    if (result.success) {
+      expect(result.data).toEqual({ price: 99 })
+    }
+  })
 })
diff --git a/furniture-3d-system/src/server/validators/sku.validator.ts b/furniture-3d-system/src/server/validators/sku.validator.ts
index ea7e5ba4..a716dcf1 100644
--- a/furniture-3d-system/src/server/validators/sku.validator.ts
+++ b/furniture-3d-system/src/server/validators/sku.validator.ts
@@ -12,6 +12,25 @@ const skuCodeSchema = z
   .max(50, 'SKU编码最长50个字符')
   .regex(/^[A-Za-z0-9-_]+$/, 'SKU编码只能包含字母、数字、横线和下划线')
 
+const resourceUrlSchema = z
+  .string()
+  .trim()
+  .refine((value) => {
+    if (value.startsWith('/')) return true
+    try {
+      const url = new URL(value)
+      return url.protocol === 'http:' || url.protocol === 'https:'
+    } catch {
+      return false
+    }
+  }, '资源地址必须是站内路径或 http(s) URL')
+
+const vector3Schema = z.tuple([
+  z.coerce.number().finite(),
+  z.coerce.number().finite(),
+  z.coerce.number().finite(),
+])
+
 // ============ 创建 SKU 验证 ============
 
 export const createSKUSchema = z.object({
@@ -20,6 +39,13 @@ export const createSKUSchema = z.object({
     .cuid('产品ID格式不正确'),
   
   skuCode: skuCodeSchema,
+
+  name: z
+    .string()
+    .trim()
+    .min(1, 'SKU名称不能为空')
+    .max(100, 'SKU名称最长100个字符')
+    .optional(),
   
   attributes: z
     .record(z.string(), z.string())
@@ -62,15 +88,95 @@ export const createSKUSchema = z.object({
 
 export type CreateSKUInput = z.infer<typeof createSKUSchema>
 
+// ============ CAD 导入创建 SKU 验证 ============
+
+export const createSKUWithImportedHolesSchema = z.object({
+  productId: z
+    .string()
+    .trim()
+    .min(1, '产品ID不能为空'),
+
+  skuCode: skuCodeSchema,
+
+  name: z
+    .string()
+    .trim()
+    .min(1, 'SKU名称不能为空')
+    .max(100, 'SKU名称最长100个字符')
+    .optional(),
+
+  attributes: z
+    .record(z.string(), z.unknown())
+    .default({}),
+
+  price: z
+    .number()
+    .min(0, '价格不能为负数')
+    .max(9999999.99, '价格超出范围'),
+
+  costPrice: z
+    .number()
+    .min(0, '成本价不能为负数')
+    .max(9999999.99, '成本价超出范围')
+    .nullable(),
+
+  stock: z
+    .number()
+    .int('库存必须是整数')
+    .min(0, '库存不能为负数'),
+
+  modelUrl: resourceUrlSchema
+    .nullable(),
+
+  images: z
+    .array(resourceUrlSchema)
+    .default([]),
+
+  cadVersion: z
+    .string()
+    .trim()
+    .min(1, 'CAD版本不能为空'),
+
+  cadPanels: z.array(z.object({
+    id: z.string().trim().min(1, '板件ID不能为空'),
+    panelType: z.string().optional(),
+    size: vector3Schema,
+    position: vector3Schema.optional(),
+    normal: vector3Schema.optional(),
+    boundingBox: z.object({
+      min: vector3Schema,
+      max: vector3Schema,
+    }).optional(),
+    sourceLayer: z.string().optional(),
+  }).passthrough()).default([]),
+
+  cadHoles: z.array(z.object({
+    panelId: z.string().trim().min(1, '孔位 panelId 不能为空'),
+    position: vector3Schema,
+    normal: vector3Schema,
+    diameter: z.coerce.number().positive('孔径必须大于0'),
+    depth: z.coerce.number().nonnegative('孔深不能为负数'),
+    inferredUsage: z.string().optional(),
+    confidence: z.coerce.number().min(0).max(1).optional(),
+  }).passthrough()).default([]),
+
+  cadSourceData: z.unknown().nullable(),
+})
+
+export type CreateSKUWithImportedHolesValidatedInput = z.infer<typeof createSKUWithImportedHolesSchema>
+
 // ============ 更新 SKU 验证 ============
 
 export const updateSKUSchema = z.object({
   skuCode: skuCodeSchema.optional(),
 
-  attributes: z
-    .record(z.string(), z.string())
+  name: z
+    .string()
+    .trim()
+    .min(1, 'SKU名称不能为空')
+    .max(100, 'SKU名称最长100个字符')
     .optional(),
-  
+
   price: z
     .number()
     .min(0, '价格不能为负数')
@@ -129,6 +235,10 @@ export function validateCreateSKU(data: unknown) {
   return createSKUSchema.safeParse(data)
 }
 
+export function validateCreateSKUWithImportedHoles(data: unknown) {
+  return createSKUWithImportedHolesSchema.safeParse(data)
+}
+
 export function validateUpdateSKU(data: unknown) {
   return updateSKUSchema.safeParse(data)
 }
diff --git a/scripts/deploy-feiniu-manual.md b/scripts/deploy-feiniu-manual.md
index 0fd292c3..af52e5c9 100644
--- a/scripts/deploy-feiniu-manual.md
+++ b/scripts/deploy-feiniu-manual.md
@@ -73,7 +73,8 @@ docker-compose -f docker-compose.prod.yml logs -f
 
 ```bash
 # 等待服务启动完成后，执行数据库初始化
-docker-compose -f docker-compose.prod.yml exec app npx prisma db push
+docker-compose -f docker-compose.prod.yml exec app npx prisma migrate deploy
+docker-compose -f docker-compose.prod.yml exec app npm run db:verify-master-data:all:strict
 docker-compose -f docker-compose.prod.yml exec app npx prisma db seed
 ```
 
diff --git a/scripts/prepare-deploy-package.ps1 b/scripts/prepare-deploy-package.ps1
index 7fe0946e..819fcaf5 100644
--- a/scripts/prepare-deploy-package.ps1
+++ b/scripts/prepare-deploy-package.ps1
@@ -118,7 +118,8 @@ echo ""
 
 # 初始化数据库（如果需要）
 echo "初始化数据库..."
-docker-compose -f docker-compose.prod.yml exec -T app npx prisma db push || echo "⚠️  数据库初始化失败，请检查日志"
+docker-compose -f docker-compose.prod.yml exec -T app npx prisma migrate deploy || echo "⚠️  数据库迁移失败，请检查日志"
+docker-compose -f docker-compose.prod.yml exec -T app npm run db:verify-master-data:all:strict || echo "⚠️  主数据地基巡检失败，请检查迁移和数据库护栏"
 echo ""
 
 # 检查健康状态
@@ -175,7 +176,8 @@ docker-compose -f docker-compose.prod.yml up -d
 docker-compose -f docker-compose.prod.yml logs -f
 
 # 初始化数据库
-docker-compose -f docker-compose.prod.yml exec app npx prisma db push
+docker-compose -f docker-compose.prod.yml exec app npx prisma migrate deploy
+docker-compose -f docker-compose.prod.yml exec app npm run db:verify-master-data:all:strict
 docker-compose -f docker-compose.prod.yml exec app npx prisma db seed
 ```
 
diff --git a/scripts/部署到飞牛OS-快速指南.md b/scripts/部署到飞牛OS-快速指南.md
index 37d35472..ea40fb55 100644
--- a/scripts/部署到飞牛OS-快速指南.md
+++ b/scripts/部署到飞牛OS-快速指南.md
@@ -62,7 +62,8 @@ docker-compose -f docker-compose.prod.yml logs -f
 等待服务启动完成后（约5-10分钟），执行：
 
 ```bash
-docker-compose -f docker-compose.prod.yml exec app npx prisma db push
+docker-compose -f docker-compose.prod.yml exec app npx prisma migrate deploy
+docker-compose -f docker-compose.prod.yml exec app npm run db:verify-master-data:all:strict
 docker-compose -f docker-compose.prod.yml exec app npx prisma db seed
 ```
 

From 6bc8e3348ea628b78a9bcd505665ca8487837c95 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 11:50:50 +0800
Subject: [PATCH 08/14] feat(data-foundation): add master data governance
 scaffolding

---
 .../docs/架构设计/内部主数据地基治理方案.md   |  435 ++
 .../架构设计/内部主数据巡检基线-20260529.md   |  274 +
 .../docs/架构设计/外部只读契约巡检说明.md     |   99 +
 .../docs/架构设计/外部只读视图字段字典-v1.md  |  303 ++
 .../数据库主数据治理与外部只读契约.md         |  315 ++
 .../docs/架构设计/数据库混乱点治理台账.md     |  545 ++
 .../架构设计/数据库质量巡检基线-20260529.md   |   92 +
 .../migration.sql                             |  402 ++
 .../migration.sql                             |  317 ++
 .../migration.sql                             |  278 +
 .../migration.sql                             |  106 +
 .../migration.sql                             |  102 +
 .../migration.sql                             |  184 +
 .../migration.sql                             |   54 +
 .../migration.sql                             |   44 +
 .../migration.sql                             |   35 +
 .../migration.sql                             |   78 +
 .../migration.sql                             |   69 +
 .../migration.sql                             |   88 +
 .../migration.sql                             |   42 +
 .../migration.sql                             |    8 +
 .../migration.sql                             |   38 +
 .../migration.sql                             |    8 +
 .../migration.sql                             |    6 +
 .../migration.sql                             |   24 +
 .../migration.sql                             |  696 +++
 .../migration.sql                             |   47 +
 .../migration.sql                             |  179 +
 .../migration.sql                             |  105 +
 .../migration.sql                             |   69 +
 .../migration.sql                             |  166 +
 .../migration.sql                             |   69 +
 .../migration.sql                             |  122 +
 .../migration.sql                             |  324 ++
 .../migration.sql                             |  207 +
 .../migration.sql                             |  445 ++
 .../migration.sql                             |  194 +
 .../migration.sql                             |  123 +
 .../migration.sql                             |  462 ++
 .../migration.sql                             |  473 ++
 .../migration.sql                             |  469 ++
 .../migration.sql                             |  104 +
 .../migration.sql                             |   68 +
 .../migration.sql                             |  183 +
 .../migration.sql                             |   54 +
 .../migration.sql                             |   34 +
 .../migration.sql                             |   82 +
 .../migration.sql                             |   98 +
 .../migration.sql                             |  112 +
 .../migration.sql                             |   51 +
 .../migration.sql                             |    8 +
 .../migration.sql                             |  138 +
 .../migration.sql                             |   85 +
 .../migration.sql                             |   15 +
 .../migration.sql                             |   30 +
 .../migration.sql                             |   24 +
 .../migration.sql                             |   82 +
 .../scripts/apply-master-data-cleanup-plan.js | 1747 +++++++
 ...apply-master-data-foundation-migrations.js |  316 ++
 .../apply-pre-sku-formalization-repair.js     |  749 +++
 .../scripts/apply-prisma-baseline-resolve.js  |  320 ++
 .../scripts/apply-prisma-structure-repair.js  | 1000 ++++
 .../scripts/create-postgres-backup.js         |  399 ++
 .../diagnose-prisma-migration-baseline.js     |  540 ++
 .../master-data-required-migrations.js        | 1897 +++++++
 .../scripts/master-data-truth-sources.js      |  695 +++
 .../plan-pre-sku-formalization-repair.js      |  456 ++
 .../scripts/plan-prisma-baseline-repair.js    |  592 +++
 .../preflight-database-foundation-change.js   |  596 +++
 .../print-master-data-foundation-checklist.js |  160 +
 ...master-data-foundation-decision-package.js |  589 +++
 .../scripts/prisma-db-push-local.js           |  114 +
 .../rehearse-database-foundation-migration.js |  360 ++
 .../rehearse-prisma-structure-repair.js       |  802 +++
 .../run-database-foundation-migrations.js     |  240 +
 .../run-master-data-foundation-audit.js       | 1639 ++++++
 .../sql/check-external-readonly-contract.sql  |  560 ++
 .../check-internal-master-data-foundation.sql | 1296 +++++
 .../scripts/sql/grant-external-readonly.sql   |   14 +
 ...flight-intake-non-integrated-sku-items.sql |   77 +
 .../preflight-product-sku-asset-profile.sql   |   53 +
 .../verify-master-data-code-boundaries.js     | 3486 +++++++++++++
 .../scripts/verify-master-data-foundation.js  | 4645 +++++++++++++++++
 .../scripts/verify-master-data-readiness.js   |  898 ++++
 .../verify-master-data-truth-sources.js       |  510 ++
 .../app/api/intake/product-patents/route.ts   |   41 +
 .../app/api/intake/reference-library/route.ts |   69 +
 .../api/intake/spu-reservations/route.test.ts |   54 +
 .../app/api/intake/spu-reservations/route.ts  |   18 +
 .../intake/EdgeBandingLibraryPanel.test.tsx   |  180 +
 .../app/intake/productPatentStorage.test.ts   |   88 +
 .../app/intake/seriesComponentDetails.test.ts |  121 +
 .../src/app/intake/seriesComponentDetails.ts  |   10 +-
 .../app/intake/spuRuleLibraryLogic.test.ts    |  319 ++
 .../src/app/warehouse/page.test.tsx           |  116 +
 .../src/lib/__tests__/permissions.test.ts     |   18 +
 .../lib/__tests__/sku-display-tags.test.ts    |   41 +
 .../lib/intake-reference-library-client.ts    |  166 +
 .../src/lib/sku-display-tags.ts               |   54 +
 .../src/server/dto/__tests__/sku.dto.test.ts  |  126 +
 .../product-upload.repository.test.ts         |   66 +
 .../sku-quality-inspection.repository.ts      |   73 +-
 .../approval-workflow.service.test.ts         |  346 ++
 .../__tests__/asset-sku-snapshot.test.ts      |   84 +
 .../intake-contract-docx.service.test.ts      |   71 +
 .../intake-reference-library.service.test.ts  |  318 ++
 .../jst-sku-stock-sync.service.test.ts        |  378 ++
 .../panel-validation.service.test.ts          |   85 +
 .../product-hardware.service.test.ts          |  107 +
 .../__tests__/product-patent.service.test.ts  |  212 +
 .../__tests__/sku-cad-import.helper.test.ts   |   79 +
 .../__tests__/sku-query.service.test.ts       |   67 +
 .../__tests__/sku-soft-delete.helper.test.ts  |  215 +
 .../spu-number-reservation.service.test.ts    |  229 +
 .../system-provider-config.service.test.ts    |  153 +
 .../services/__tests__/user.service.test.ts   |  150 +
 .../intake-reference-library.service.ts       |  340 ++
 .../services/non-integrated-sku-quality.ts    |  152 +
 .../server/services/product-patent.service.ts |  215 +
 .../sku-quality-inspection.service.ts         |   77 +-
 .../spu-number-reservation.service.ts         |  253 +
 .../apply-master-data-cleanup-plan.test.js    | 1841 +++++++
 ...-master-data-foundation-migrations.test.js |  303 ++
 ...apply-pre-sku-formalization-repair.test.js |  317 ++
 .../apply-prisma-baseline-resolve.test.js     |  168 +
 .../apply-prisma-structure-repair.test.js     |  684 +++
 .../scripts/create-postgres-backup.test.js    |  151 +
 ...diagnose-prisma-migration-baseline.test.js |  238 +
 .../plan-pre-sku-formalization-repair.test.js |  257 +
 .../plan-prisma-baseline-repair.test.js       |  324 ++
 ...eflight-database-foundation-change.test.js |  377 ++
 ...t-master-data-foundation-checklist.test.js |  142 +
 ...r-data-foundation-decision-package.test.js |  395 ++
 .../scripts/prisma-db-push-local.test.js      |  105 +
 ...arse-database-foundation-migration.test.js |  126 +
 .../rehearse-prisma-structure-repair.test.js  |  403 ++
 ...run-database-foundation-migrations.test.js |  204 +
 .../run-master-data-foundation-audit.test.js  | 1782 +++++++
 ...verify-master-data-code-boundaries.test.js | 1186 +++++
 .../verify-master-data-foundation.test.js     | 1523 ++++++
 .../verify-master-data-readiness.test.js      |  686 +++
 .../verify-master-data-truth-sources.test.js  |  505 ++
 142 files changed, 50741 insertions(+), 81 deletions(-)
 create mode 100644 furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
 create mode 100644 furniture-3d-system/docs/架构设计/内部主数据巡检基线-20260529.md
 create mode 100644 furniture-3d-system/docs/架构设计/外部只读契约巡检说明.md
 create mode 100644 furniture-3d-system/docs/架构设计/外部只读视图字段字典-v1.md
 create mode 100644 furniture-3d-system/docs/架构设计/数据库主数据治理与外部只读契约.md
 create mode 100644 furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
 create mode 100644 furniture-3d-system/docs/架构设计/数据库质量巡检基线-20260529.md
 create mode 100644 furniture-3d-system/prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530162000_add_product_patent_records/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260530190000_add_intake_reference_library/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531113000_add_spu_number_counter/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531170000_tighten_external_intake_product_people_sources/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531173000_add_product_sku_asset_profile_barcode_unique_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531181000_add_product_sku_active_code_marker_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601012000_add_external_product_asset_bom_business_keys/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601014000_add_reference_library_code_required_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601020000_add_asset_center_source_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601022000_add_product_sku_attributes_truth_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql
 create mode 100644 furniture-3d-system/prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql
 create mode 100644 furniture-3d-system/scripts/apply-master-data-cleanup-plan.js
 create mode 100644 furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
 create mode 100644 furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
 create mode 100644 furniture-3d-system/scripts/apply-prisma-baseline-resolve.js
 create mode 100644 furniture-3d-system/scripts/apply-prisma-structure-repair.js
 create mode 100644 furniture-3d-system/scripts/create-postgres-backup.js
 create mode 100644 furniture-3d-system/scripts/diagnose-prisma-migration-baseline.js
 create mode 100644 furniture-3d-system/scripts/master-data-required-migrations.js
 create mode 100644 furniture-3d-system/scripts/master-data-truth-sources.js
 create mode 100644 furniture-3d-system/scripts/plan-pre-sku-formalization-repair.js
 create mode 100644 furniture-3d-system/scripts/plan-prisma-baseline-repair.js
 create mode 100644 furniture-3d-system/scripts/preflight-database-foundation-change.js
 create mode 100644 furniture-3d-system/scripts/print-master-data-foundation-checklist.js
 create mode 100644 furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
 create mode 100644 furniture-3d-system/scripts/prisma-db-push-local.js
 create mode 100644 furniture-3d-system/scripts/rehearse-database-foundation-migration.js
 create mode 100644 furniture-3d-system/scripts/rehearse-prisma-structure-repair.js
 create mode 100644 furniture-3d-system/scripts/run-database-foundation-migrations.js
 create mode 100644 furniture-3d-system/scripts/run-master-data-foundation-audit.js
 create mode 100644 furniture-3d-system/scripts/sql/check-external-readonly-contract.sql
 create mode 100644 furniture-3d-system/scripts/sql/check-internal-master-data-foundation.sql
 create mode 100644 furniture-3d-system/scripts/sql/grant-external-readonly.sql
 create mode 100644 furniture-3d-system/scripts/sql/preflight-intake-non-integrated-sku-items.sql
 create mode 100644 furniture-3d-system/scripts/sql/preflight-product-sku-asset-profile.sql
 create mode 100644 furniture-3d-system/scripts/verify-master-data-code-boundaries.js
 create mode 100644 furniture-3d-system/scripts/verify-master-data-foundation.js
 create mode 100644 furniture-3d-system/scripts/verify-master-data-readiness.js
 create mode 100644 furniture-3d-system/scripts/verify-master-data-truth-sources.js
 create mode 100644 furniture-3d-system/src/app/api/intake/product-patents/route.ts
 create mode 100644 furniture-3d-system/src/app/api/intake/reference-library/route.ts
 create mode 100644 furniture-3d-system/src/app/api/intake/spu-reservations/route.test.ts
 create mode 100644 furniture-3d-system/src/app/api/intake/spu-reservations/route.ts
 create mode 100644 furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.test.tsx
 create mode 100644 furniture-3d-system/src/app/intake/productPatentStorage.test.ts
 create mode 100644 furniture-3d-system/src/app/intake/seriesComponentDetails.test.ts
 create mode 100644 furniture-3d-system/src/app/intake/spuRuleLibraryLogic.test.ts
 create mode 100644 furniture-3d-system/src/app/warehouse/page.test.tsx
 create mode 100644 furniture-3d-system/src/lib/__tests__/permissions.test.ts
 create mode 100644 furniture-3d-system/src/lib/__tests__/sku-display-tags.test.ts
 create mode 100644 furniture-3d-system/src/lib/intake-reference-library-client.ts
 create mode 100644 furniture-3d-system/src/lib/sku-display-tags.ts
 create mode 100644 furniture-3d-system/src/server/dto/__tests__/sku.dto.test.ts
 create mode 100644 furniture-3d-system/src/server/repositories/__tests__/product-upload.repository.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/approval-workflow.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/asset-sku-snapshot.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/intake-contract-docx.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/intake-reference-library.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/jst-sku-stock-sync.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/panel-validation.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/product-hardware.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/product-patent.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/sku-cad-import.helper.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/sku-query.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/sku-soft-delete.helper.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/spu-number-reservation.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/system-provider-config.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/__tests__/user.service.test.ts
 create mode 100644 furniture-3d-system/src/server/services/intake-reference-library.service.ts
 create mode 100644 furniture-3d-system/src/server/services/non-integrated-sku-quality.ts
 create mode 100644 furniture-3d-system/src/server/services/product-patent.service.ts
 create mode 100644 furniture-3d-system/src/server/services/spu-number-reservation.service.ts
 create mode 100644 furniture-3d-system/tests/scripts/apply-master-data-cleanup-plan.test.js
 create mode 100644 furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
 create mode 100644 furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
 create mode 100644 furniture-3d-system/tests/scripts/apply-prisma-baseline-resolve.test.js
 create mode 100644 furniture-3d-system/tests/scripts/apply-prisma-structure-repair.test.js
 create mode 100644 furniture-3d-system/tests/scripts/create-postgres-backup.test.js
 create mode 100644 furniture-3d-system/tests/scripts/diagnose-prisma-migration-baseline.test.js
 create mode 100644 furniture-3d-system/tests/scripts/plan-pre-sku-formalization-repair.test.js
 create mode 100644 furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
 create mode 100644 furniture-3d-system/tests/scripts/preflight-database-foundation-change.test.js
 create mode 100644 furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
 create mode 100644 furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
 create mode 100644 furniture-3d-system/tests/scripts/prisma-db-push-local.test.js
 create mode 100644 furniture-3d-system/tests/scripts/rehearse-database-foundation-migration.test.js
 create mode 100644 furniture-3d-system/tests/scripts/rehearse-prisma-structure-repair.test.js
 create mode 100644 furniture-3d-system/tests/scripts/run-database-foundation-migrations.test.js
 create mode 100644 furniture-3d-system/tests/scripts/run-master-data-foundation-audit.test.js
 create mode 100644 furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
 create mode 100644 furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
 create mode 100644 furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
 create mode 100644 furniture-3d-system/tests/scripts/verify-master-data-truth-sources.test.js

diff --git a/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md b/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
new file mode 100644
index 00000000..25291886
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
@@ -0,0 +1,435 @@
+# 内部主数据地基治理方案
+
+创建时间：2026-05-29
+适用范围：`furniture-3d-system` 内部主数据、草稿链路、正式产品链路、非集成开品链路。
+
+配套巡检：
+
+- `scripts/master-data-truth-sources.js`
+- `scripts/verify-master-data-truth-sources.js`
+- `scripts/sql/preflight-intake-non-integrated-sku-items.sql`
+- `scripts/sql/check-internal-master-data-foundation.sql`
+- `docs/架构设计/内部主数据巡检基线-20260529.md`
+- `scripts/verify-master-data-code-boundaries.js`
+- `scripts/apply-master-data-cleanup-plan.js`
+- `scripts/plan-pre-sku-formalization-repair.js`
+- `scripts/master-data-required-migrations.js`
+- `scripts/verify-master-data-readiness.js`
+- `scripts/diagnose-prisma-migration-baseline.js`
+- `scripts/preflight-database-foundation-change.js`
+- `scripts/create-postgres-backup.js`
+- `scripts/run-database-foundation-migrations.js`
+- `scripts/apply-master-data-foundation-migrations.js`
+- `scripts/rehearse-database-foundation-migration.js`
+- `scripts/rehearse-prisma-structure-repair.js`
+- `scripts/plan-prisma-baseline-repair.js`
+- `scripts/apply-prisma-structure-repair.js`
+- `scripts/run-master-data-foundation-audit.js`
+- `scripts/print-master-data-foundation-checklist.js`
+- `scripts/print-master-data-foundation-decision-package.js`
+- `npm run db:verify-master-data:all`
+- `npm run db:verify-master-data:audit`
+- `npm run db:verify-master-data:readiness`
+- `npm run db:verify-master-data:readiness:audit`
+- `node scripts/verify-master-data-code-boundaries.js --mode reference-estimator-cost-boundary`
+- `npm run db:diagnose-prisma-migration-baseline`
+- `npm run db:preflight-database-foundation-change`
+- `npm run db:preflight-database-foundation-change:audit`
+- `npm run db:backup:postgres`
+- `npm run db:foundation:migrate`
+- `npm run db:foundation:migrate:audit`
+- `npm run db:foundation:apply-required`
+- `npm run db:foundation:apply-required:audit`
+- `npm run db:foundation:rehearse-migration`
+- `npm run db:foundation:rehearse-structure-repair`
+- `npm run db:foundation:baseline-repair-plan`
+- `npm run db:foundation:apply-structure-repair`
+- `npm run db:foundation:apply-structure-repair:audit`
+- `npm run db:foundation:audit`
+- `npm run db:foundation:audit:cleanup-template`
+- `npm run db:foundation:completion-checklist`
+- `npm run db:foundation:decision-package`
+
+## 1. 先把话说直
+
+这份方案不是给外部系统看的壳，而是给我们自己系统打地基。
+
+目标只有一个：让系统内部知道“谁是真相源，谁是草稿，谁是结果，谁只是过程快照”。
+
+这个分层现在不只写在文档里，还要进入 `scripts/master-data-truth-sources.js` 的机器可读清单；`npm run db:verify-master-data:truth` 会检查核心对象的主表、快照字段、写入边界文件和数据库护栏是否仍然存在，并反向检查每个数据库护栏 relation 都已被真相源矩阵覆盖，且每个必需护栏都属于当前条目的主关系范围。真相源矩阵声明的写入边界还必须进入代码层服务/脚本写入口批准表；代码层标为 `compatibility-snapshot` 的 Prisma JSON 字段也必须被真相源矩阵覆盖，避免后续新增对象或改迁移时把真相源边界改成只靠口头约定，或让 JSON 分类表和矩阵分叉。
+
+治理迁移也不能靠人肉记忆维护。`scripts/master-data-required-migrations.js` 是巡检 dry-run、strict 判定、只读迁移状态和历史清洗脚本共用的唯一迁移目录；清单会先自检 path、顺序、时间戳、目标 relation 和 SQL 引用，再连接数据库执行验证。迁移目录本身也要自检：新增 Prisma migration 目录必须符合 `<14位时间戳>_name`，当前仅允许 `20251213_performance_optimization` 和 `add_packaging_plan` 两个历史非标准目录作为显式债务保留。迁移 SQL 在 dry-run 事务中执行后，必须复查声明的目标 relation 或 column 是否真实出现；结构治理迁移必须真实落库才能通过 strict，幂等视图和护栏迁移允许在巡检事务中重放但不能冒充真实落库。只读迁移状态还必须报告 Prisma `_prisma_migrations` 历史表是否存在、是否存在未完成或已回滚迁移；目标表/视图碰巧存在但没有迁移历史，不能被视为稳固地基。历史清洗真正 `--apply` 时口径更严：只要清洗事务中还需要执行任何治理迁移，无论结构迁移还是幂等视图/护栏迁移，都必须先拒绝清洗，要求先独立完成迁移和 strict 验收。当前治理窗口内新增外部 v1 视图、约束、唯一索引或触发器时，测试会反查它是否进入迁移清单；`alwaysApply` 迁移如果包含 DML，必须进入显式分类清单，不能悄悄把幂等护栏迁移变成无说明的数据修复脚本。`npm run db:verify-master-data:migration-status` 只读查询目标 relation / column 是否存在，不执行迁移 SQL，适合在生产或准生产先确认真实结构状态。巡检和清洗报告必须拆分 `structureMigrations` 与 `idempotentMigrations`，并输出 `migrationApplicationStatus.strictReady / pendingStructureMigrationCount / replayableIdempotentMigrationCount`，避免把幂等重放误判成真实结构缺口，也方便部署和清洗前置检查使用同一套机器口径。
+
+`alwaysApply` 迁移不能再无声退化成“目标表存在就算 ready”。如果某个幂等迁移没有声明 `columnCheck / columnDefaultChecks / guardChecks / relationColumnChecks / dataChecks`，清单必须显式填写 `targetOnlyReadinessAssurance`，说明它由外部只读合同、数据库护栏汇总或地基质量汇总兜底验证；否则 `validateRequiredMigrationCatalog()` 会直接失败。这个分类不是放松要求，而是把“为什么这个迁移没有单独 readiness check”写进机器清单，防止后续新增迁移靠碰巧存在的 relation 误判为已就绪。
+
+“十分稳健”不能只看单个巡检是否通过。`npm run db:verify-master-data:readiness` 会把 Prisma schema 校验、Prisma 官方迁移状态、当前库到 `schema.prisma` 的 diff、真相源矩阵、代码边界、兼容快照读点、过程快照读点、正式 SKU attributes 写入、参考图预估成本边界、只读迁移状态和数据库 dry-run 巡检串成一个总就绪度报告。`npm run db:verify-master-data` 本身也会输出 `foundationHardReadyGate`，把迁移真实落库、数据库护栏、资产中心源数据、正式 SKU、准 SKU、非集成产品 profile、JSON/快照漂移、外部只读契约和质量决策缺口集中成总门禁；需要留存完整本地证据时使用 `npm run db:verify-master-data:audit`，完整报告写入 `.master-data-audits/foundation-hard-ready-gate-current.json`，脱敏摘要写入 `.master-data-audits/foundation-hard-ready-gate-current.summary.json`。完整报告可能包含历史 SKU、产品头、准 SKU、草稿组编号等行级样本，只能本机排查；协作汇报和阶段结论必须使用摘要文件或 `manifest.foundationHardReadyGateSummary`。只有所有命令通过、Prisma 不再报告未应用 migration、当前库结构和 schema 一致、治理迁移达到 `fullyReady`、Prisma 迁移历史可审计，且历史 `INCOMPLETE` SKU、产品头缺品类/开发类型、资产中心活动源缺系列/模型/预览图、资产规格款重复条码、非集成结构化表与 payload 漂移、正式 SKU 缺名称或缺 asset profile、正式 SKU 资产 profile 与兼容快照漂移、准 SKU 缺基础资料或与旧快照漂移、外部视图 JSON 依赖和内部 id 兜底等质量债都归零时，才输出 `hardReady: true`。否则报告只代表“可继续治理”，不能宣称底层数据已经十分稳固。readiness 的 blocker 必须尽量携带可定位证据：当前库/schema diff 需要输出脱敏 DDL 摘要，pending migration 需要输出 migration 名单，迁移历史缺失需要输出禁止捷径和授权施工顺序，历史质量债需要输出样本行。报告还会输出 `nextActionPlan`，把剩余 blocker 按“Prisma 结构和迁移历史修复 -> 治理护栏落库 -> 历史主数据字段清洗 -> 准 SKU 生命周期专用处理”的顺序分组，避免把授权施工、治理迁移和业务清洗混在一起。
+
+正式 SKU 软删除生命周期也要按结构化字段对齐。`ProductSKU.deletedAt` 是 SKU 删除状态主字段，`ProductSkuAssetProfile.skuDeletedAt` 是为释放活动条码池和外部同步副本准备的结构化副本；数据库触发器 `ProductSKU_sync_asset_profile_deleted_at` 会在 SKU 删除态变化时兜底同步 profile，dry-run 巡检也会比对二者是否一致，任何 `skuDeletedAt` 漂移都会进入 `readiness` hard blocker，不能靠旧 `attributes` 里的生命周期字段或一次性回填结果长期兜底。删除态正式 SKU 还必须保留 `deletedCodeAt`，随产品删除时 `deletedByProductId / productDeletedAt` 必须成对出现，避免条码释放、恢复冲突检查和级联恢复缺少可审计墓碑资料；`productSkuSoftDeleteTombstoneRiskCount` 会把这类半截墓碑状态列为 hard blocker。
+
+允许业务分阶段补齐资料时，也不能把“有原因”当成“已完整”。清洗脚本会把 `allowIncomplete=true + incompleteReason` 写入 `MasterDataQualityDecision`，用于追溯谁在什么时候确认了暂不完整、缺哪些字段、原因是什么；但 `dataQualityStatus=INCOMPLETE` 仍然是 hard blocker，外部 ready 视图和正式流转入口仍必须排除它。`MasterDataQualityDecision` 是质量审计表，不是第二套主数据，也不是放行缺失资料的后门。
+
+需要留存当前阻断证据时，使用 `npm run db:verify-master-data:readiness:audit`，或手动执行 `node scripts/verify-master-data-readiness.js --output .master-data-audits/readiness-current.json`。该入口即使巡检失败也会先写出完整 JSON 报告，方便对比治理前后 blocker、迁移状态和历史质量债变化。`.master-data-audits/` 是本地审计证据目录，可能包含真实库结构、阻断样本和环境信息，不提交 Git。
+
+完整地基审计批次使用 `npm run db:foundation:audit`。它会在 `.master-data-audits/foundation-audit-<timestamp>/` 下依次写出 `readiness.json`、`foundation-hard-ready-gate.json`、`foundation-preflight.json`、`foundation-migrate-plan.json` 和 `manifest.json`；即使其中任一门禁失败，也会继续收集后续证据并在 manifest 中汇总 blocker。这个入口只做只读/干跑证据收集，不生成备份、不执行迁移、不清洗数据；它的用途是给每次治理形成同一时刻的可复核证据包。`manifest.json` 会写入脱敏 `readinessSummary` 和 `foundationHardReadyGateSummary`，包含 `hardReady`、blocker 数、blocker key、数量值和迁移应用状态摘要，但不会复制历史 SKU、产品头或准 SKU 的样本行。`manifest.hardReady` 必须同时满足 readiness 总就绪度和 foundationHardReadyGate 总门禁都为 true，任何一个缺失或失败都不能宣称地基已十分稳固。
+
+最终完成判断必须看 `manifest.foundationCompletionChecklist`，不能把某个局部命令的绿色结果当成全目标完成。该清单把本目标拆成 8 个机器可判定项：数据库结构与 Prisma 迁移历史、核心对象唯一真相源矩阵、后端写入边界、JSON/快照边界、文件系统边界、历史主数据字段清洗、PreSku 正式化生命周期和授权结构修复施工链。`npm run db:foundation:completion-checklist` 默认读取 `.master-data-audits/foundation-audit-current-goal/manifest.json`，输出脱敏清单；只要任一项 `blocked / missing`，命令就以非 0 状态退出。它不重新审计数据库，只是把同批证据的完成判定单独拎出来，给协作、验收和 goal completion audit 使用。
+
+如果完成清单没有 8/8 通过，下一步施工判断看 `npm run db:foundation:decision-package`。它同样默认读取 `.master-data-audits/foundation-audit-current-goal/manifest.json`，只从 manifest 的脱敏摘要和完成清单生成“决策包”，把剩余阻断拆成结构修复授权、治理迁移落库、历史字段业务确认、PreSku 生命周期专用决策和最终验证五段。这个入口不写数据库、不复制敏感候选行、不输出绝对路径；用途是防止后续把 `apply-structure`、`resolve-baseline`、`apply-required`、历史清洗和 PreSku 专用修复混成一条危险捷径。决策包的 `nextGate` 只表示下一道施工门禁，不表示该门禁已经被授权或已完成。
+
+决策包还必须输出 `executionChecklist`，把真实施工拆成“授权前刷新证据 -> 真实执行结构修复 SQL -> 结构修复后重新预检 -> 逐项补齐 Prisma 迁移历史 -> 应用治理迁移/护栏 -> 业务确认后清洗历史质量债 -> 最终 hardReady 审计”。其中所有 `writeDatabase=true` 的阶段都必须有明确用户授权；`apply-structure` 成功前禁止进入 `resolve-baseline / apply-required / 历史清洗`，`post-repair preflight` 未证明结构 diff 归零前禁止 baseline resolve，治理迁移未 `fullyReady` 前禁止历史清洗。这个顺序是地基施工门禁，不是建议步骤。
+
+如果要让批次审计同时保留 shadow diff 证据，可以显式追加 `--use-docker-shadow`，例如 `npm run db:foundation:audit:cleanup-template -- --use-docker-shadow --docker-shadow-port 65446`。该模式会启动临时 Docker PostgreSQL 作为 `SHADOW_DATABASE_URL`，审计结束后自动删除容器，并在 manifest 写入 `shadowDiffEvidence`；它不会修改目标数据库，也不会替代备份证据。默认不启用，避免普通审计命令偷偷拉起容器。
+
+如果要把克隆库迁移演练也放进同一批证据包，显式追加 `--include-migration-rehearsal`，并可用 `--docker-rehearsal-port <port>` 指定端口。该步骤会调用 `scripts/rehearse-database-foundation-migration.js`，输出 `migration-rehearsal.json`；它预期在当前历史库状态下失败并复现 P3005，因此失败本身是阻断证据，不是脚本异常。
+
+如果要证明“结构修复 SQL 是否真的能把当前备份恢复出的库修到 schema 和 migrations 等价”，显式追加 `--include-structure-repair-rehearsal`，并可用 `--docker-structure-repair-port <port>` 指定端口。该步骤会调用 `scripts/rehearse-prisma-structure-repair.js`，输出 `structure-repair-rehearsal.json`；它只在临时 Docker 克隆库上生成和执行结构修复 SQL，遇到 `DROP TABLE / DROP COLUMN / DROP TYPE / DROP SCHEMA` 会拒绝自动执行。通过也只代表“方案可演练”，不代表可以直接写真实库。
+
+同一批次启用结构修复演练时，还会生成 `authorized-structure-repair-apply-plan.json`。该计划由 `scripts/apply-prisma-structure-repair.js` 只读生成，会把 `foundation-preflight.json`、`structure-repair-rehearsal.json` 和 `structure-repair.sql` 绑定校验：备份证据、迁移链重放、SQL 文件大小、SHA-256、SQL 文件本体无 DROP/TRUNCATE 类语句、preflight pending migration 数量、克隆库 baseline resolve 数量必须一致。`preflight` 会记录备份文件 SHA-256，真实执行阶段会重新计算并比对，不能只靠文件名或大小。`structure-repair-rehearsal` 还会记录 `prisma/migrations` 的 migration manifest（迁移 ID、相对路径、文件大小和 SHA-256），真实执行阶段会重新扫描当前迁移目录；只要演练后迁移文件增删或内容变化，就必须重新演练。它默认不会写库；真实执行必须分阶段显式传入 `--phase=apply-structure --apply --confirm=apply-prisma-structure-repair` 或 `--phase=resolve-baseline --apply --confirm=apply-prisma-structure-repair`，并且会重新读取当前 `DATABASE_URL`，要求它和 preflight 报告里的数据库身份一致。数据库身份包含协议、用户名、主机、端口、库名和 schema；结构修复后的 diff 验证、baseline resolve 和 migrate status 都固定使用同一个已确认的 `DATABASE_URL` 上下文，避免环境变量漂移。真实执行还必须显式传入 `--expected-database-identity` 和 `--expected-backup-sha256`，脚本会重新计算当前备份文件指纹并比对 preflight 记录，避免错库、错备份或旧备份继续施工。默认还要求 preflight 和结构修复演练报告不超过 60 分钟，避免拿旧证据施工。
+
+批次审计还会生成 `baseline-repair-plan.json`。它读取同批次的 `foundation-preflight.json`，并可接收 `migration-rehearsal.json` 与 `structure-repair-rehearsal.json`，把当前状态明确分成 `ready-for-migrate-deploy`、`ready-for-baseline-resolve`、`ready-for-authorized-structure-repair`、`manual-structure-repair-required` 或 `evidence-blocked`。这份施工图只读生成，不会写库；它的作用是防止把四件事混在一起：迁移链能否重放、当前库是否等价、直接 `migrate deploy` 是否已被证伪、以及结构修复 + baseline resolve 是否已在克隆库演练通过。只要 `migrationDiff` 非空或当前库到 schema diff 非空，就不能直接 `resolve --applied`；只要克隆库演练复现 P3005，就不能在真实库上再“试一次”。`ready-for-authorized-structure-repair` 只代表可进入授权施工讨论，不代表真实库已经 hard-ready。
+
+真相源矩阵也必须作为独立证据落盘：`truth-sources.json` 逐项输出每个核心业务对象的 `id / layer / primaryRelations / compatibilitySnapshots / notTruthSources / writeBoundary / requiredGuardNames`，并同时报告缺模型、缺快照字段、缺写入边界、缺数据库护栏、护栏关系未覆盖等问题。报告里的 `truthSourceEntryAudits` 会给每个对象单独输出 `ok / issueCount / issues`，用于定位到底是哪个业务对象的真相源边界不稳。`scripts/verify-master-data-truth-sources.js` 支持 `--output <json-file>`，因此“资产中心、草稿组、正式产品、非集成开品、人员组织、旧 CAD、基础资料”等对象的真相源边界必须能被机器报告复核，而不是只靠文档口头描述。
+
+正式 BOM 和正式成本也必须有机器口径。`formal-bom-structure` 条目把已确认 BOM 结构固定到 `Panel / PanelMaterial / ProductHardware / Hardware`，`formal-sku` 条目把正式 SKU 成本固定到 `ProductSKU.costPrice`；`PreSku.bomPreview`、参考图预估成本、`REFERENCE_ESTIMATOR_*`、`reference-image-cost-catalog`、`PreSku.displaySummary` 汇总值和外部视图派生列都不能反向成为正式 BOM 或正式成本真相。`ProductSKU_price_cost_stock_non_negative` 会作为数据库护栏阻断负售价、负成本和负库存进入正式 SKU；`readiness` 还会把当前库中任何负售价、负成本或负库存作为 hard blocker。
+
+其中代码边界和 JSON/快照专项报告也必须落进同一批次证据包：`code-boundaries.json` 记录服务/脚本写入口、原生 SQL、运行时 DDL、JSON 字段分类和总预算；`compatibility-snapshot-read.json`、`process-snapshot-read.json` 和 `product-sku-attributes-write.json` 分别记录兼容快照读点、过程快照读点和正式 SKU `attributes` 写入面。`scripts/verify-master-data-code-boundaries.js` 支持 `--output <json-file>`，因此这些边界报告不能只存在于终端滚动输出里。
+
+如果要把历史质量债候选行也放进同一批证据，使用 `npm run db:foundation:audit:cleanup-template`。它会额外生成 `cleanup-template.json`，内容来自 `scripts/apply-master-data-cleanup-plan.js --template --allow-migration-dry-run`，用于暴露待补齐 SKU、产品头资料和准 SKU 正式化生命周期错位。这个文件可能包含真实业务资料和确认字段，只能留在本地 `.master-data-audits/`，不能提交 Git，也不能把 `--allow-migration-dry-run` 误解为治理迁移已经真实落库。准 SKU 正式化生命周期错位只允许作为人工决策候选暴露；通用清洗脚本会拒绝带有 `preSkuFormalizationMismatches.action.decision` 的计划，后续必须用专用服务/专用计划处理。专用只读计划入口是 `npm run db:foundation:plan-pre-sku-formalization-repair -- --output .master-data-audits/pre-sku-formalization-repair-plan-current.json`，它只输出候选、允许决策和全局护栏，不执行任何落库。
+
+带清洗模板的批次审计会在 `manifest.json` 里额外写入 `cleanupTemplateSummary`。该摘要只包含候选 SKU 数、产品头数、空白待填字段统计、准 SKU 正式化错位数量/原因分布和迁移状态计数，不包含产品名、SKU 资料、草稿组编号、确认人、业务备注或迁移路径明细；日常汇报优先看这个脱敏摘要，只有真正准备业务确认时才打开敏感 `cleanup-template.json`。
+
+如果 `readiness` 或 `prisma migrate status` 显示目标库缺少 `_prisma_migrations` 或存在大量未应用 migration，先运行 `npm run db:diagnose-prisma-migration-baseline`。该入口只读诊断当前库、Prisma schema、当前库到 `schema.prisma` 的 diff、迁移目录和官方 pending migration 列表，并输出是否需要 baseline 方案。它不会自动执行 `migrate deploy`、`migrate resolve` 或任何数据库写入；如果配置了只用于 diff 的 `SHADOW_DATABASE_URL`，它会分别比较两件事：`migrationDiff` 证明 migrations 重放结果和当前库是否等价，`migrationSchemaDiff` 证明 migrations 重放结果和当前 `schema.prisma` 是否等价。`SHADOW_DATABASE_URL` 必须和目标库不同，且数据库名必须包含 `shadow / test / tmp / temp` 这类明确标记，禁止误把真实业务库当 shadow 库。对于历史 `db push` 或手工 SQL 形成的库，必须先逐项确认结构是否等价于 migration 结果，再决定是 `migrate deploy` 还是按已验证 migration 逐项 `resolve --applied`，不能直接整批标记为已应用；没有 shadow diff 或等价性证据时，不能做 baseline resolve。只要当前库到 `schema.prisma` 的 diff 非空，就说明结构本身还没补齐，必须先迁移或补结构，不能只修迁移历史。
+
+真正进入数据库结构变更前，先运行 `npm run db:preflight-database-foundation-change`。该入口仍然只读，但会额外要求 `DATABASE_BACKUP_FILE` 或 `DB_BACKUP_FILE` 指向一个真实存在且非空的备份文件；没有可核验备份时，无论是 `migrate deploy` 还是 baseline resolve 都不能继续。预检会同时报告 `pg_dump / psql` 是否可用：如果没有备份文件且本机也没有 `pg_dump`，要先补备份工具链或提供外部已完成的备份文件。预检会根据当前库/schema diff、pending migrations 和 shadow diff 证据输出建议动作：结构缺失时优先 `migrate-deploy-required`；结构等价但迁移历史缺失时才可能进入 `baseline-resolve-candidate`；缺 shadow diff 证据时固定阻断 baseline。预检报告里的 `migrationSchemaDiff.status = 0` 只说明迁移链本身能重放到当前 schema，不代表当前目标库已经补齐结构；`migrationDiff.status = 2` 仍然表示目标库和迁移结果不等价，不能直接 baseline resolve。
+
+预检需要留档时使用 `npm run db:preflight-database-foundation-change:audit`，报告会写入 `.master-data-audits/foundation-preflight-current.json`。这份报告用于证明结构变更前是否具备备份证据、PostgreSQL client 工具链、迁移状态和推荐动作，不能替代真实备份或用户授权。
+
+如果 `pg_dump / pg_restore / psql` 不在 `PATH`，预检报告会输出 `backupToolingHint`：包括缺失命令、已扫描目录、候选 PostgreSQL client bin 目录和可直接设置的 `POSTGRES_BIN_DIR` 建议。默认会扫描 `POSTGRES_CLIENT_SEARCH_DIRS`、`POSTGRES_BIN_DIR`、`PG_BIN_DIR` 以及常见 PostgreSQL 安装目录；Windows 便携版或自定义安装路径可以先设置 `POSTGRES_CLIENT_SEARCH_DIRS=<候选根目录>` 再跑预检。这个提示只帮助定位工具链，不会绕过可核验备份要求。
+
+如果本机没有 PostgreSQL client，但 Docker 可用，`backupToolingHint.dockerFallback` 会报告是否存在可用的 `POSTGRES_DOCKER_IMAGE`（默认 `postgres:16`）。Docker 兜底只说明“可能有备份工具链替代路径”，仍然必须生成 PostgreSQL custom 格式备份，并用 `pg_restore --list` 验证后，把文件路径作为 `DATABASE_BACKUP_FILE` 提供给预检；不能因为 Docker 可用就跳过备份证据。
+
+本地或可控环境可用 `npm run db:backup:postgres` 生成标准 PostgreSQL custom 格式备份。该脚本只调用 `pg_dump` 读取数据库并写入 `.database-backups/*.dump`，不修改数据库；数据库密码只通过 `PGPASSWORD` 环境变量传给子进程，不写入命令参数、报告或 Git。生成后还必须用 `pg_restore --list` 验证备份能被读取，避免空文件或损坏 dump 冒充兜底。没有 `pg_dump / pg_restore` 时脚本会失败，不能用空文件替代备份。Windows 或便携版 PostgreSQL client 不在 `PATH` 时，可用 `PG_DUMP_PATH` 指向 `pg_dump.exe`，用 `PSQL_PATH` 指向 `psql.exe`，用 `PG_RESTORE_PATH` 指向 `pg_restore.exe`，也可以用 `POSTGRES_BIN_DIR` 或 `PG_BIN_DIR` 指向 client 的 `bin` 目录；需要调整备份目录时使用 `npm run db:backup:postgres -- --output-dir <目录>` 或 `DATABASE_BACKUP_DIR`。`.database-backups/` 是本地敏感备份目录，禁止提交 Git。
+
+如果本机缺少 PostgreSQL client，但 Docker 可用，可以显式使用 `npm run db:backup:postgres -- --use-docker` 作为备份工具链兜底。该入口默认使用 `POSTGRES_DOCKER_IMAGE` 或 `postgres:16`，默认不隐式拉取镜像；镜像不存在时必须先人工准备镜像，或显式追加 `--allow-docker-pull`。Docker 兜底同样生成 custom dump，并在容器内执行 `pg_restore --list` 校验；数据库密码只通过子进程环境传给 Docker，再以 `--env PGPASSWORD` 变量名传入容器，不能拼成 `PGPASSWORD=value` 出现在命令行。Docker 生成的备份文件仍必须作为 `DATABASE_BACKUP_FILE` / `DB_BACKUP_FILE` 输入给 `npm run db:preflight-database-foundation-change`，不能把“Docker 命令成功”当成结构变更授权。
+
+当本机没有 `pg_restore` 但 Docker PostgreSQL client 镜像已准备好时，结构变更 preflight 会用 Docker `pg_restore --list` 重新验证 `DATABASE_BACKUP_FILE` 指向的备份文件。这样 Docker 兜底不是只在备份脚本里有效，也会被后续迁移门禁承认；但前提仍然是备份文件真实存在、非空且可读，不能用 Docker 可用本身替代备份证据。
+
+结构缺失且备份预检通过后，先运行 `npm run db:foundation:migrate` 查看执行计划。该脚本默认只输出 dry-run 计划；只有预检为 `ready: true`、建议动作为 `migrate-deploy-required`，并显式传入 `--apply --confirm=migrate-deploy --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，且脚本现场重算的目标库身份和备份 SHA-256 都一致时，才会执行 `prisma migrate deploy`。它不负责 baseline resolve，避免把“补结构”和“补迁移历史”混成一条危险捷径。迁移后必须继续运行 `npm run db:verify-master-data:readiness`，不能把 migration 命令成功当成地基已经十分稳。
+
+执行计划需要留档时使用 `npm run db:foundation:migrate:audit`，报告会写入 `.master-data-audits/foundation-migrate-plan-current.json`。该 audit 命令仍是 dry-run；真正执行迁移仍必须显式追加 `--apply --confirm=migrate-deploy --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，且前置预检必须已经通过。
+
+如果要证明“当前备份恢复出的非空库是否能直接 `migrate deploy`”，使用 `npm run db:foundation:rehearse-migration -- --output .master-data-audits/foundation-migration-rehearsal-current.json`。该脚本只操作临时 Docker 克隆库：从 `DATABASE_BACKUP_FILE / DB_BACKUP_FILE` 指向的 PostgreSQL custom dump 恢复数据，再在克隆库上运行 `prisma migrate deploy`，最后删除容器并写出 JSON 报告。当前本地备份演练已复现 `P3005`，即“目标库非空且缺少迁移历史，不能直接 migrate deploy”；这类结果必须被当作 baseline/结构修复方案的证据，而不是在真实库上再试一次。
+
+如果要演练结构修复本身，使用 `npm run db:foundation:rehearse-structure-repair -- --output .master-data-audits/structure-repair-rehearsal-current.json`。该脚本会把备份恢复到临时 Docker 克隆库，生成 `当前克隆库 -> schema.prisma` 的修复 SQL；只有 SQL 不含 DROP 类破坏语句时才会在克隆库执行，然后再次验证克隆库到 `schema.prisma` 为空 diff、克隆库到 migrations 重放结果也为空 diff。若传入 `--repair-sql-output <sql-file>`，会把本次演练实际使用的结构修复 SQL 落盘并写入 `sizeBytes / sha256`，用于后续授权前核对施工包。当前本地演练结果为 `structure-repair-rehearsal-passed`，修复 SQL 不含 DROP 类语句；最新 SQL 文件大小为 17304 字节，SHA-256 为 `f569af9e2cf8c26e3e0e007217b9187e3d30a20aaa3dac3c5cd1db843ade6f28`。演练报告还会在结构对齐后输出 93 个 `migrate resolve --applied` 候选 migration id，并在克隆库逐项演练 resolve；当前 93 个全部 applied，随后 `prisma migrate status` 返回 up to date。再应用 38 项当前仍未就绪的治理迁移/护栏后，readiness 仍会剩 `structuredSkuItems.incomplete`、非集成产品 profile 缺品类/开发类型和 PreSku 生命周期错位等历史质量债。这仍然不是生产写库授权，只是证明结构修复、baseline resolve 和迁移状态恢复路径在克隆库可重复。
+
+基线和结构修复施工图使用 `npm run db:foundation:baseline-repair-plan`，也可以显式传入 `--preflight <json>`、`--rehearsal <json>` 和 `--structure-rehearsal <json>` 复用同一批审计证据。该脚本不会执行 `migrate deploy`、不会执行 `resolve --applied`、不会生成或执行结构修复 SQL；它只把证据整理成阶段计划和禁止动作。只有 `migrationSchemaDiff` 为空、备份证据可用、且当前库和 migrations/schema 等价时，才会输出 `ready-for-baseline-resolve`；结构不等价但结构修复演练已通过时，输出 `ready-for-authorized-structure-repair` 并列出“重新备份、重新预检、授权执行计划、真实库结构修复、diff 归零、逐项 baseline resolve、应用治理护栏、readiness/cleanup”的施工顺序；结构不等价且没有演练证据时固定输出 `manual-structure-repair-required`。
+
+真实库结构修复和 baseline resolve 不再建议手工复制 `psql` 或 `migrate resolve` 命令直接施工，而是走 `npm run db:foundation:apply-structure-repair`。该入口默认只输出授权计划；`apply-structure` 阶段只负责执行已经校验 SHA-256、SQL 本体安全、证据新鲜且目标库身份一致的结构修复 SQL，成功后必须重新跑 preflight；`resolve-baseline` 阶段要求 post-repair preflight 已证明当前库到 `schema.prisma`、migrations 到当前库的 diff 都为空，再按演练报告中的 migration id 清单逐项 resolve。这样把“补结构”和“补迁移历史”拆成两个可验收阶段，避免一次命令混做两件高风险动作。
+
+baseline resolve 完成后，治理迁移、外部只读视图、约束、触发器和护栏统一走 `npm run db:foundation:apply-required`。该入口默认只输出 dry-run 计划；如果 `_prisma_migrations` 不存在、存在失败/回滚记录，或仍有结构迁移未就绪，会固定阻断真实执行。真实应用必须显式传入 `--apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，并在事务里应用 `scripts/master-data-required-migrations.js` 登记的缺口；应用后若不能达到 `fullyReady` 会回滚。这个入口只服务“结构修复 + baseline resolve 之后”的治理护栏补齐，不能代替 `migrate deploy`，也不能用于绕过结构修复。
+
+## 2. 内部真相源分层
+
+### 2.1 资产中心是真相源
+
+- `AssetSeries`：系列真相源。
+- `AssetFamily`：资产族真相源。
+- `AssetVariant`：规格款真相源。
+- `Material` / `Hardware`：基础物料真相源。
+
+要求：
+
+- 系列、资产族、规格款的编码和状态必须可追溯。
+- `AssetSeries.code / AssetFamily.code / AssetVariant.code`、规格款 `identityKey` 和活动规格款 `barcode` 必须由数据库唯一约束兜底，不能只靠页面校验或导入前检查。
+- 资产族和系列的兼容关系必须由数据库唯一约束去重，避免同一归属关系在后续草稿或正式入库中被重复解释。
+- `AssetVariant` 的 `code / name / barcode / modelUrl / thumbnailUrl / dimensions` 不能长期依赖 JSON 兜底。
+- 任何从资产中心抄出去的资料，都必须保留来源 ID 和同步时间。
+
+### 2.2 辅助装配和草稿组是过程层
+
+- `DraftGroup`：一次装配结果的承接层。
+- `PreSku`：正式入库前的准 SKU。
+
+要求：
+
+- 草稿组不是正式产品。
+- 准 SKU 不是正式 SKU。
+- 草稿里的 `summary / familySelection / variantSelection / displaySummary / bomPreview / packagingSnapshot` 只能算过程快照，不能反过来当正式主数据真相。
+
+### 2.3 正式产品是结果层
+
+- `Product`：正式型号主数据。
+- `ProductSKU`：正式 SKU 真相源。
+- `ProductSkuAssetProfile`：正式 SKU 的资产资料结构化同步副本。
+
+要求：
+
+- 对外和对内读取正式产品时，优先信 `Product / ProductSKU`。
+- `ProductSkuAssetProfile` 承接来源资产 ID、型号、规格码、条码、尺寸、颜色、材质、图片、来源状态和同步时间。
+- `ProductSkuAssetProfile.skuDeletedAt` 单独承接正式 SKU 生命周期，不能把 SKU 删除状态混进 `sourceStatus`；活动条码唯一池只约束 `sourceStatus = ACTIVE` 且 `skuDeletedAt IS NULL` 的资料副本，且数据库触发器会跟随 `ProductSKU.deletedAt` 自动同步。
+- `ProductSKU.attributes.assetSkuSnapshot` 只保留为兼容快照和历史排查证据，不再作为主读真相。
+- 资产资料自动同步时，上一版资料和锁定字段以 `ProductSkuAssetProfile` 为准；`attributes.assetSkuSnapshot` 只允许在 profile 缺失时做一次性兼容兜底。
+- `ProductSKU.skuCode / name` 是正式 SKU 的编码和名称结构化字段，不再依赖 `attributes.skuName` 作为主读来源。
+- `ProductSKU.attributes` 的新增写入只允许使用集中登记的兼容快照键；`barcode / model / specCode / productName / versionNo / color / material / size` 等正式资料字段必须写 `ProductSKU` 结构化列或 `ProductSkuAssetProfile`，不能重新把 JSON 变成第二真相。
+- `PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 是过程快照，只允许用于辅助装配恢复、草稿只读展示、BOM/安装步骤/包装输入和正式入库物料生成；正式编码、条码、品类、人员和权限必须来自 `PreSkuBasicInfo`、资产中心结构化表、正式产品结构化列或人员组织表，不能从过程快照反推。
+- 正式 SKU DTO 输出必须把兼容 JSON 命名为 `legacyAttributes`，并同时输出结构化 `assetProfile`；列表、详情、分享、回收站删除态等对外/前端合同都不能继续用 `attributes` 这个名字暗示它是正式主数据合同字段。
+- 正式 SKU 创建、CAD 导入、产品上传、SKU 编辑、轻仓库概览和 DTO 输出都必须同步读写 `ProductSKU.name`；普通属性编辑不得顺手删除 `assetSkuSnapshot` 兼容快照。
+- 任何正式 SKU 的关键字段都要能从数据库结构化字段直接读出来。
+- 对外正式 SKU 视图必须显式输出稳定业务键：`product_business_key = Product.modelNumber`，`sku_business_key = ProductSKU.skuCode` 的规范化大写值；内部 `product_id / sku_id` 只能用于追踪和排错。
+- 对外正式产品素材和 BOM 明细视图也必须携带同一套业务键；明细视图不能迫使外部系统回头用内部 `product_id / sku_id` 做关联。
+- 外部只读视图的实际字段必须和字段字典完全一致：承诺列缺失要失败，多出来的未登记列也要失败；`*_code / *_business_key` 这类业务字段不能用内部行 `id` 兜底。
+
+### 2.4 非集成开品是业务过程层
+
+- `IntakeNonIntegratedProduct`：非集成开品工作区。
+- `IntakeNonIntegratedProductProfile`：非集成开品产品头主数据结构化承接表。
+- `IntakeNonIntegratedSkuItem`：非集成开品 SKU 结构化明细承接表。
+- `ProductPatentRecord`：产品专利台账结构化承接表。
+- `IntakeReferenceLibraryItem`：产品资料侧资料库型条目的服务端承接表，用于逐步替换包装材料、配件、封边、钢架、SPU 规则等浏览器本地资料库。
+- `ApprovalWorkflow / ApprovalWorkflowFieldChange`：围绕产品资料协作的流程记录和字段变更审计，只能承载过程协作状态，不能反向成为产品头或 SKU 主数据真相。
+- `PlanningTemplate / PlanningWorkspace / PlanningDraft`：产品规划过程层，模板槽位、工作台筛选和草稿候选快照只服务开品前组合推演，不能反向成为资产中心或正式产品主数据真相。
+- `User / Department / Team / EmployeeDirectory`：人员、组织架构、业务类型和外部花名册同步真相源，决定登录身份、权限范围和自动业务类型划归。
+- `Panel / Hole / ProductHardware / AssemblyStep / AssemblyVersion`：旧 CAD 兼容链结构数据真相源，只服务历史产品、CAD 导入、装配预览和制造/3D 兼容能力，不能反向主导新平台资产中心或草稿组主链。
+- `ProductCategory / MaterialCategory / HardwareCategory / CommonComponentCategory` 以及 `SubstrateCategory / SubstrateEnvironmentGrade / SubstrateThicknessSpec / SubstrateSurfaceOption / SubstrateSystemNameOption`：基础资料分类和基材字典真相源，不能被页面下拉、历史 payload 或本地缓存替代。
+- `HardwareMapping / SubstrateFinish / PanelMaterial / AssetVariantLocationBinding / PreSkuLocationBinding / PackagingPlan`：匹配记忆、关系绑定和旧包装方案结构化真相源，JSON 只能保存受控快照，不承担身份判断。
+
+要求：
+
+- `payload` 只能承载过程数据和快照，不可以长期承担正式主数据真相。
+- 产品名称、主图、品类、销售分类、年份、状态、开发类型、货品类型、材质类型、生产类型和主要负责人字段从 `payload / openingReference` 拉出到 `IntakeNonIntegratedProductProfile`。
+- 聚水潭存量商品来源字段从 `payload.metadata.source*` 拉出到 `IntakeNonIntegratedProductProfile`，包括 `sourceSpu / sourceSkuId / sourceCategory / sourceItemType / sourceSalesStatus / sourceEnabled / sourceStockDisabled / stockSkuCount / stockHasOnSaleSku`。
+- SKU 主数据字段从 `payload.skuItems` 拉出到 `IntakeNonIntegratedSkuItem`，包括 `skuCode / specName / model / barcode / size / color / material / manufacturer` 等字段。
+- `skuItemId` 保留原始明细身份，`sortOrder / skuSequence / batchNo` 保留业务排序和批次口径。
+- 非空 `skuCode` 和非空 `barcode` 必须在结构化表层收口唯一性，不能只靠页面或 JSON 约定避免重复。
+- `dataQualityStatus` 和 `missingRequiredFields` 是结构化主数据质量标记，`INCOMPLETE` 记录只能作为待清洗资料，不应自动流转成完整商品资料。
+- `MasterDataQualityDecision` 只记录分阶段清洗或历史资料确认的质量决策；它不保存 SKU 真值，不改变 `READY / INCOMPLETE` 判断，也不能替代补齐 `skuCode / specName / model`。
+- 非集成 SKU 的完整性判定必须由后端统一规则生成；结构化表写入、巡检、合同等正式流转入口不能各自实现一套判断。
+- 对外非集成产品和 SKU 视图必须显式输出稳定业务键：`product_business_key = 品牌:SPU`，`sku_business_key = 品牌:SPU:SKU编码`；内部技术行 ID 只能用于追踪和排错，不能作为外部系统同步身份。
+- 空字段、半成品字段、内部流程字段要能区分。
+- 立项前/草稿类记录不能被当作完整正式资料直接流转到后续系统。
+- 专利台账不能保存在浏览器 `localStorage` 里；数据库 `ProductPatentRecord` 才是主数据真相，前端只允许保留当前会话内存态用于测试或 API 失败后的临时显示。
+- 资料库型条目不能继续只有浏览器 `localStorage` 一份真相；需要多人协作、BOM、成本、编码或外部同步依赖的资料库，必须写入 `IntakeReferenceLibraryItem` 或更专用的服务端表。
+- 参考图预估成本工具里的内置包装/封边/五金样本单价只属于页面辅助估算，不是正式成本、BOM、包装方案或外部只读契约真相源；正式成本必须来自结构化物料/五金/包装资料库或明确的后端算法，并由 `reference-estimator-cost-boundary` 代码巡检阻断误用。
+- 审批流编号、标题、访问密钥、参与人列表、业务角色、字段矩阵和字段变更来源必须有服务层与数据库双护栏；审批摘要只保存协作填报结果，正式资料仍要回到结构化产品资料表承接。
+- 审批流访问范围只能由结构化 `businessRoles / participantUserIds` 决定；`fieldMatrix` 只表达字段责任矩阵，不能在 `businessRoles` 为空时反推流程可见范围。
+- 规划模板编码、模板名称、槽位定义、工作台名称、可见范围、槽位筛选、草稿候选 key 和草稿快照 JSON 形态必须有服务层与数据库双护栏；`rules / metadata / selectedAssets / sourceSnapshot` 等 JSON 只允许作为受控过程对象。
+- 人员和组织主数据必须先规范化再入库：用户邮箱小写、花名去空格、业务类型去重，员工目录的钉钉 ID、工号、手机号、邮箱和外部部门 ID 都不能用空字符串表达缺失；花名册同步不能把同一个员工或部门因为空格/大小写差异写成多条。
+- 非集成产品资料权限判断必须以结构化 `IntakeNonIntegratedProductProfile` 和产品表明确列为准；旧 `payload` 里的人员字段只能作为历史过程快照，不能参与编辑/下载权限判断。
+- 审批流权限判断必须以 `ApprovalWorkflow.businessRoles / participantUserIds` 为准；`ApprovalWorkflow.fieldMatrix` 只能参与字段级责任判断，不能替代结构化可见范围。
+- 旧 CAD 兼容链的结构数据也必须有明确边界：板件、孔位、产品五金、装配步骤和装配版本可以保留 JSON 几何/动画/快照，但身份、尺寸、枚举、孔位几何、置信度、关联文本和数组引用必须由服务层与数据库双护栏兜住。
+- 基础资料和关系绑定也必须有明确边界：分类/字典名称按去空格小写后的语义唯一，排序非负；五金匹配记忆每行只表达图块名或尺寸哈希之一；基材花色、板件材质、规格款库位和准 SKU 库位绑定不能保存空引用；旧正式产品 `PackagingPlan` 的名称、箱数、重量/体积和 `boxes` 数组形态必须由服务层与数据库兜底。
+
+## 3. 当前地基状态和治理重点
+
+### 3.1 编码
+
+重点检查：
+
+- 系列编码
+- 资产族编码
+- 规格款编码
+- SKU 编码
+- 条码
+
+目标：
+
+- 编码生成和冲突检测必须在后端统一收口。
+- 数据库必须保留唯一性约束和可追溯字段。
+- 非集成开品 SKU 的 `skuCode / barcode` 已新增结构化承接和非空唯一约束；写入链路和巡检继续拦截重复风险，避免历史 JSON 或后续写入绕开主数据约束。
+
+### 3.2 生命周期
+
+重点检查：
+
+- DRAFT
+- ACTIVE / AVAILABLE
+- ARCHIVED / DELETED
+- FORMALIZED / INCOMPLETE
+
+目标：
+
+- 草稿、过程、正式结果不能混成一个状态。
+- 外部和内部都要能一眼看出当前记录处在哪个阶段。
+- 非集成 SKU 明细用 `READY / INCOMPLETE` 表达资料完整度；`INCOMPLETE` 不是业务失败，而是历史或草稿资料尚未达到主数据可流转标准。
+
+### 3.3 数据质量
+
+重点检查：
+
+- 空编码
+- 重复编码
+- 关键字段缺失
+- JSON 快照里藏着关键主数据
+- 从草稿层误流到正式层的数据
+
+目标：
+
+- 已把非集成开品 SKU 明细从 `payload.skuItems` 结构化承接出来，让问题从 JSON 隐藏状态变成数据库可巡检状态。
+- 已把正式 SKU 名称结构化到 `ProductSKU.name`，并把资产资料从 `ProductSKU.attributes.assetSkuSnapshot` 结构化承接到 `ProductSkuAssetProfile`；正式入库和资产同步任务会同时写入 profile，外部正式 SKU 视图改为读取结构化字段。
+- 正式 SKU 资产同步和入库前条码冲突检测已收紧到 `ProductSkuAssetProfile` 优先；旧 `attributes.assetSkuSnapshot` 只有在 profile 缺失时参与兼容判断，避免旧快照误导同步合并和冲突检测。
+- 正式 SKU 资产同步和准 SKU 基础资料条码冲突检测已进一步收口为只读 `ProductSkuAssetProfile`；`ProductSKU.attributes.assetSkuSnapshot` 仍可被同步写入为兼容副本和排查证据，但不再参与常规业务判断。
+- 正式入库的重复/相似度判断已收口为只读现有关联 `sourcePreSku` 的 `variantSelection / bomPreview`；旧 `ProductSKU.attributes.variantSelectionSummary / bomPreview` 只保留为历史快照，不再参与正式阻断判断。
+- 正式入库新建 `ProductSKU.attributes` 不再写入整包 `PreSku.displaySummary`；草稿展示快照不得随正式 SKU 一起沉淀成第二套主数据，正式基础资料必须来自 `PreSkuBasicInfo`、`ProductSKU` 和 `ProductSkuAssetProfile`。
+- 正式入库时 `PreSkuBasicInfo.formalSkuCode` 是要落入 `ProductSKU.skuCode` 的结构化规格码，`PreSkuBasicInfo.specName` 是正式 SKU 名称优先来源；接口传入的临时 `skuCode / skuName` 不能覆盖结构化基础资料。如果该编码已存在，后端会阻断入库并要求回草稿组修正基础资料，不能自动追加 `-1` 之类后缀把规格码静默改写成另一套编码。
+- 新建正式 SPU 时，`Product.modelNumber` 和 `Product.name` 必须由产品资料显式传入，后端不再使用 `SPU-${Date.now()}` 这类临时型号兜底；型号冲突必须阻断并回到产品资料层处理。
+- `Product.modelNumber` 是正式 SPU 永久身份，软删除 Product 不释放型号池；如果业务确实要复用型号，必须先走显式恢复/废弃/改号流程，不能像 SKU 墓碑码一样自动改写。
+- 旧 CAD 导入和回收站恢复链路也不得在 SKU 编码冲突时自动追加 `-1 / -2` 后缀；冲突必须阻断，避免旧兼容链绕开正式 SKU 编码池规则。
+- SKU 级 CAD 导入创建链路必须经过专用后端 schema 校验；该 schema 复用正式 SKU 编码、价格、库存等主数据边界，同时允许上传链真实使用的站内模型/图片路径和对象型 CAD 元数据，避免 CAD 上传旁路用弱校验写入正式 SKU。
+- 传统产品上传链路不得从 `skuAttributes.skuName` 反写 `ProductSKU.name`；上传属性只能作为兼容元数据保存，结构化 SKU 名称没有显式输入时固定使用 `skuCode`。
+- 传统 demo/test seed 数据也必须写结构化 `ProductSkuAssetProfile`；颜色、材质、尺寸不能因为“只是示例”继续沉淀到 `ProductSKU.attributes`。
+- 正式 SKU 条码重复风险已纳入内部巡检，按未删除正式 SKU 且 `ProductSkuAssetProfile.sourceStatus = ACTIVE` 的非空 `barcode` 分组检查；软删除正式 SKU 释放编码时会使用结构化 `originalSkuCode`，并始终用原始编码重建墓碑编码，避免重复释放后出现多层 `__deleted__` 膨胀。正式 SKU 删除/恢复会由服务层和数据库触发器共同维护 `ProductSkuAssetProfile.skuDeletedAt`，让删除态 SKU 释放条码唯一池，恢复时遇到活动条码冲突则阻断。
+- SKU 列表/详情 DTO 已输出 `assetProfile`、`legacyAttributes` 与统一展示标签 `displayTags`；回收站删除态 SKU 也只输出过滤后的 `legacyAttributes`，不再暴露裸 `attributes`；轻仓库名称读取顺序为 `ProductSKU.name -> ProductSkuAssetProfile.specName -> skuCode`，不再从 `attributes.skuName` 兜底。
+- 公开分享详情已输出 `name / assetProfile / legacyAttributes`，不再把 `attributes` 作为公开 SKU 合同字段；分享页展示标签优先来自 `ProductSkuAssetProfile`，旧属性仅做兼容兜底。
+- 分享链接、传统上传和协作者权限已继续补齐底层护栏：`ShareLink` 只作为公开访问记录，必须有非空 token、非负访问次数和晚于创建时间的过期时间；传统模型/CAD 上传链路的 `visibility` 必须落在固定枚举；`ProductCollaborator.role` 只能是 `editor / viewer`，非法角色不会再被读取逻辑兜底提升为编辑权限。
+- 旧产品详情和旧 SKU 详情已把可见规格标签收口到共享展示规则：优先 `ProductSkuAssetProfile.specName / color / material`，旧 `attributes` 只在结构化资料缺失时作为过滤后的兜底；CAD 内部字段继续保留但不展示。
+- 普通 SKU 编辑链路不再接收或提交 `ProductSKU.attributes`；旧属性袋只能作为 `legacyAttributes` 展示、CAD 兼容和软删除恢复证据保留。SKU 名称、价格、库存、编码等正式字段必须走结构化字段，不能通过 attributes 旧属性袋间接更新或清空。
+- `ProductSKU.attributes.skuName` 不再是允许新增写入的兼容键；正式 SKU 名称只能写 `ProductSKU.name`。普通 SKU 创建、CAD 导入创建和正式入库都会阻断或移除 `skuName / barcode / model / specCode / color / material / size` 等正式资料字段写入旧属性袋；代码层巡检同时覆盖 `skuName:` 和对象简写 `{ skuName }`。
+- 已把准 SKU 基础资料从 `PreSku.displaySummary / familySelection` 结构化承接到 `PreSkuBasicInfo`；`displaySummary` 只保留为展示兼容快照。
+- 草稿组 DTO 已显式返回 `PreSkuBasicInfo` 的 `basicInfo` 字段；产品资料入口、草稿组基础资料编辑和准 SKU 展示优先读取 `basicInfo`，`displaySummary / familySelection` 只作为旧数据兼容兜底。
+- 准 SKU 基础资料冲突检测已只查 `PreSkuBasicInfo`；历史 `findByDisplaySummaryField(s)` JSON path 查询入口已移除，`findByBasicInfoField(s)` 不再回查 `displaySummary`。
+- 草稿组基础资料保存链路不再把旧 `displaySummary / familySelection` 字段自动提升为结构化主数据；自动建议只来自资产中心快照，已有值只认 `PreSkuBasicInfo`。保存时会清理 `displaySummary` 中残留的基础资料字段，避免旧展示快照继续形成第二真相源。
+- 草稿组承接层本体也进入数据库护栏：`DraftGroup` 的编号、名称、可选文本和 `summary` 对象形态，`PreSku` 的序号、默认名称、来源候选 key、过程快照 JSON 形态、组件编码数组和预估重量都由 CHECK 约束兜底；readiness 会把草稿组/准 SKU 本体坏形态，以及准 SKU `FORMALIZED` 状态和正式 SKU 来源关系不一致，作为 hard blocker。准 SKU 正式化生命周期错位不只输出数量，还必须输出最多 20 条样本，包含草稿组编号、准 SKU 序号、当前状态、关联正式 SKU 和错位原因；readiness blocker 会直接携带最多 5 条样本证据，后续清洗只能通过计划/服务闭环处理，不能手工 SQL 猜改状态。
+- `ProductSKU.attributes` 只能保存登记过的兼容快照和追溯信息，不得再保存 `skuName / model / specCode / barcode / category / color / material / size` 等正式资料字段；数据库 CHECK 和 readiness 会同时阻断这些字段重新进入 JSON 兼容袋。
+- 准 SKU 基础资料保存时，`model / formalSkuCode / barcode / versionNo / attributeCode / drawingId` 这类编码字段在服务层统一规范化为大写后再参与冲突检测和结构化落库，避免数据库大小写敏感唯一池被小写编码绕开。
+- 核心编码和条码不再只依赖服务层规范化：数据库迁移会先按 `upper(btrim(...))` 检查历史语义重复，再确定性清洗可安全字段，并用表达式唯一索引和 `CHECK` 约束兜底。覆盖范围包括 `AssetSeries.code`、`AssetFamily.code`、`DraftGroup.code`、`PlanningTemplate.code`、`Substrate.code`、`WarehouseLocation.code`、`PackagedItem.code`、`Material.code`、`Hardware.code`、`CommonComponent.code`、`Product.modelNumber`、活动 `ProductSKU.skuCode`、`AssetVariant.code / barcode`、`PreSkuBasicInfo.formalSkuCode / barcode`、`ProductSkuAssetProfile.barcode`、`IntakeNonIntegratedSkuItem.skuCode / barcode`、`IntakeReferenceLibraryItem.code`、`SpuNumberCounter.prefix`、`IntakeNonIntegratedProduct.spu / spuBase / brand`；删除态正式 SKU 墓碑编码不强行大写，但不参与活动 SKU 归一唯一池。
+- 后端写入入口也必须和数据库护栏同口径，不能把数据库约束当成第一道业务校验。当前已收紧 `PlanningTemplate.code`、`WarehouseLocation.code`、`Substrate.code`、`Material.code`、`Hardware.code`、`CommonComponent.code`、正式 `Product.modelNumber`、正式 `ProductSKU.skuCode`、`IntakeNonIntegratedSkuItem.skuCode / barcode`、SKU CAD 导入、传统产品上传、准 SKU 包装方案保存、品牌物料准备项、正式入库承接链路、协作者角色和产品上传可见范围：进入仓储层前先规范化身份字段，空编码/空身份、游离状态、负数数量、重复物理库位、非法权限角色和可提前发现的冲突由服务层直接阻断。
+- 仓储查询入口不能再把“调用方已经规范化”当隐含前提。资产中心、正式产品、正式 SKU、基础物料、库位和规划模板等核心 `findByCode / findBySkuCode / findByModelNumber / codeExists` 查询会先做 `trim + uppercase`；资产 CAD 导入也会在查找已有资产族、创建规格款和生成模型存储路径前归一手填编码，避免同一编码因大小写或首尾空格在服务层表现不一致。
+- 正式 SKU 资产同步副本的身份字段必须在快照构建层二次规范化：`ProductSkuAssetProfile.model / specCode / barcode` 以及 `sourceVariants` 中对应字段进入结构化副本前统一 `trim + uppercase`，人工锁定字段也不能绕过数据库 `CHECK` 护栏。
+- `PackagedItem.code` 由正式 `ProductSKU.skuCode` 和包装箱编号生成；正式入库前必须校验包装箱编号是唯一正整数，且包装箱尺寸必须大于 0、预估重量不能为负数，避免用重复箱号、小数箱号或脏箱规生成冲突、不稳定的包装成品和轻仓库数据。
+- `SpuNumberCounter.productCategory / prefix` 是正式 SPU 号段身份，不只要求非空和大写，还必须数据库级唯一；产品品类还要按去空格和大小写归一后唯一。不同产品品类不能共用同一个前缀，同一产品品类也不能因为空格差异形成两个号池，否则并发占号会变成不可追溯的双计数器。
+- 正式入库前会校验 `PreSku.variantSelection` 引用的 `AssetVariant` 仍存在、未删除、状态可用、资产族和资产类型未漂移；正式生成板件、孔位和五金时读取当前 `AssetVariant` 结构化数据，不再信任旧快照里的尺寸和孔位。
+- 已把非集成产品头资料结构化到 `IntakeNonIntegratedProductProfile`，外部 `intake_products_v1` 改读 profile，不再从 `payload` 直接取产品头主数据；负责人兼容列也必须优先读 profile 中的结构设计、商品企划、采购负责人，旧产品列只允许作为兼容兜底。
+- 外部 `intake_sku_items_v1` 已改读 `IntakeNonIntegratedSkuItem`，不再从 `payload.skuItems` 拆 SKU 明细；`payload` 只作为历史过程快照和对账证据。
+- 外部 `intake_products_v1 / intake_sku_items_v1` 已追加稳定业务键，ready 视图还会要求业务键非空；巡检会阻断 ready 视图中业务键缺失或重复，防止外部系统误用内部技术 ID。
+- 聚水潭存量商品同步链路也必须同步写入 `IntakeNonIntegratedProductProfile` 和 `IntakeNonIntegratedSkuItem`，不能绕过保存链路只写 `payload`。来源 SPU、来源 SKU/条码和规格码在同步入口统一 `trim + uppercase` 后再进入 profile、payload、reviewSheet 和结构化 SKU 明细，不能让外部 MySQL 的大小写差异变成内部第二套身份。同步脚本默认只能 dry-run；真实写入必须同时传入 `--apply`、`--confirm=sync-jst-sku-stock`、`--expected-database-identity` 和 `--expected-source-database-identity`，把目标 PostgreSQL 和来源 MySQL 都钉死，避免错库同步。
+- 存量商品列表筛选、分类下拉、页面返回、同步查找、软删除排除判断都必须优先使用 `IntakeNonIntegratedProductProfile.source*` 或系统生成的 `jst-stock-*` 业务 ID；`payload.metadata` 只作为历史记录兼容兜底和展示快照，不能参与来源身份判断。
+- 非集成列表筛选、负责人搜索和权限判定已收紧为优先使用 `IntakeNonIntegratedProductProfile`；旧 `payload` 人员/开发类型字段只有在结构化 profile 缺失的历史记录上才允许兜底，不能和 profile 并列参与主判断。
+- 审批流产品标题、主图和关键词检索已改为优先读取 `IntakeNonIntegratedProductProfile`；`payload.openingReference` 只作为旧数据兼容兜底。
+- 规划域已补齐写入口和数据库双护栏：模板编码统一 `trim + uppercase`，模板槽位 key 去重且 attach 父槽位必须先定义；工作台名称、可见范围、槽位选择和元数据在服务层规范化，数据库进一步兜住模板/工作台/草稿的 JSON 形态，明确它们是过程配置和快照，不是正式产品资料真相。
+- 非集成产品列表、分页列表和详情返回时，先用 `payload` 还原完整工作区对象，再用结构化 `IntakeNonIntegratedProductProfile` 和 `IntakeNonIntegratedSkuItem` 覆盖产品头与 SKU 主字段；未结构化的上传、BOM、流程确认等过程字段继续保留为工作区草稿。`profile` 一旦存在，产品头主字段和存量商品来源字段以 profile 为准，profile 空值会真实暴露为缺资料，不再被旧 `payload/openingReference/metadata` 自动补齐。
+- 专利台账已新增 `ProductPatentRecord` 结构化表、服务和 API；前端保存时主写数据库，浏览器缓存主路径已移除，仅保留当前会话内存态作为临时展示/测试态；保存前会阻断缺少来源产品、分组键或专利身份的记录，并把草稿态临时随机 id 收敛为 `product-patent-group-${patentGroupKey}` 稳定 id，数据库也会用唯一索引和 check 约束兜底。
+- 普通 SKU 写入链已补齐结构化名称：显式 `name` 优先，其次 `attributes.skuName`，最后回退 `skuCode`；编辑时若只改编码则保留原名称，若更新 `attributes.skuName` 则同步结构化 `name`。
+- 不允许靠页面显示“看起来有值”来当数据库已经稳了。
+- 创建/更新非集成产品时，后端负责同步 `IntakeNonIntegratedSkuItem`；更新时使用显式事务先删除旧 SKU 明细，再写入新 SKU 明细，避免同一 SKU 编码更新时撞唯一约束。
+- 软删除非集成产品时清理结构化 SKU 明细；后端 repository 和数据库触发器双重兜底，避免已删除业务记录继续占用 SKU/条码唯一约束。恢复软删除产品时由保存链路重新生成结构化 SKU 明细。
+- 巡检固定覆盖：结构化表重复 SKU、重复条码、`INCOMPLETE` 数量、`payload.skuItems` 与 `IntakeNonIntegratedSkuItem` 的同步差异、非集成产品 profile 缺失、关键字段缺失、profile 与 `payload/openingReference` 的同步差异、存量商品 `profile.source*` 与 `payload.metadata.source*` 的同步差异，以及正式 SKU profile 缺失、profile 与兼容快照差异、来源 ID 不一致。结构化表和兼容快照一旦出现漂移，普通巡检也会失败；这类差异不能再只作为“报告里看看”的提示项。
+- 正式 SKU 巡检还覆盖 `ProductSkuAssetProfile.barcode` 的活动资料重复风险；这类风险需要先处理软删除复用和资产同步状态，再决定是否提升为数据库唯一约束。
+- 巡检不能只输出数量；`INCOMPLETE` SKU、非集成产品头缺字段、准 SKU 正式化生命周期错位都必须输出最多 20 条 sample，包含产品 ID、SPU、SKU item、草稿组编号、准 SKU 序号、当前值、缺失字段或错位原因，作为后续人工确认、清洗脚本或正式化关系修复服务的入口。readiness 的 hard blocker 必须同步携带可定位证据：历史质量债带样本，待落库迁移带路径摘要，避免验收报告只剩数量而无法施工。
+- 历史资料清洗必须走显式计划：`npm run db:cleanup-master-data -- --template` 输出当前待清洗模板；填写业务确认后的真实值后，用 `npm run db:cleanup-master-data -- --plan <file>` 先 dry-run 回滚；只有计划文件包含确认字段、业务确认人 `confirmedBy`，并且真实落库命令带 `--apply --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，才允许真正落库。清洗计划里的空字符串不会被当作有效补充值，`productDevelopmentKind` 只能填写 `product / series`；落库时会把 `confirmedBy` 写回产品记录 `updatedBy`，让历史清洗可追溯。
+- 清洗脚本对 `IntakeNonIntegratedSkuItem.skuCode / barcode` 的处理必须和数据库唯一池同口径：写入前先 `trim + uppercase`，冲突检测使用 `upper(btrim(...))`，不能让小写或首尾空格编码靠脚本层漏过，再依赖数据库报错兜底。
+- 清洗脚本会同时更新结构化表和对应 `payload` 快照，避免清洗后 `payloadSyncDiffCount` 反而变脏；脚本在 dry-run 和真正 `--apply` 的提交前都会复用主数据巡检漂移断言，确认结构化字段与兼容快照没有分叉。清洗模板、dry-run 和 `--apply` 默认都要求治理迁移已经全部真实落库，结构迁移、视图迁移和护栏迁移任何一类缺失都会拒绝继续；只有本地调试模板或 dry-run 才允许显式追加 `--allow-migration-dry-run`。计划文件只能填业务确认后的真实资料，`UNKNOWN / 待补齐 / 默认值 / 默认值-规格` 这类占位值或默认值会被拒绝，不能为了让巡检变绿而制造假主数据。清洗报告和 strict 巡检报告共用 `migrationApplicationStatus` 与只读迁移状态；真正落库清洗不得和任何治理迁移混在一次提交里。
+- 清洗计划在连库 dry-run 前还有一层静态校验：`npm run db:cleanup-master-data:validate -- --plan <file>` 不读取数据库，只确认计划文件具备 apply 所需的确认字段、业务确认人、模板 evidence、真实填充值、字段白名单和补齐完整度。这一层不能替代数据库冲突检查，但可以先阻断格式错误、伪资料和明显覆盖已有主数据的计划。
+- 清洗计划必须是新鲜模板：脚本会比对计划里的 `current` 值和当前数据库值，发现字段已变化会要求重新导出模板；默认只能补齐当前仍为空的必填主数据，不能覆盖已有值，不能只补可选字段。`--apply` 下被处理的 SKU 或产品头默认必须补到完整，确实需要分阶段清洗时，单条计划必须显式写 `allowIncomplete=true` 和 `incompleteReason`，并落库到 `MasterDataQualityDecision`；这只提供审计追溯，不会让 readiness 通过。
+- 剩余数据质量状态只按结构化表判断；页面显示和 payload 快照只能作为排查证据，不能替代结构化状态。
+- 产品定厂合同生成属于正式流转资料，已接入同一套非集成产品头和 SKU 完整性规则；产品名称、品类、开发类型或目标批次 SKU 主数据未补齐时，后端直接拒绝生成，不能靠人工下载后再发现问题。
+- 已新增代码层主数据边界巡检：`scripts/verify-master-data-code-boundaries.js` 会阻断新增的危险读取点，例如准 SKU 正式字段重新从 `displaySummary / familySelection` 主读、正式 SKU 名称重新从 `attributes.skuName` 主读、草稿基础资料冲突检测重新调用 `findByDisplaySummaryField(s)`、或 `assetSkuSnapshot / variantSelectionSummary / bomPreview` 在未批准位置被当作正式来源使用。
+- 代码层主数据边界巡检也会阻断上传链从 `skuAttributes.skuName` 反写结构化 SKU 名称，防止旧模型上传入口重新把 JSON 属性升级成正式主数据。
+- 正式 SKU 软删除编码释放已有单测覆盖：恢复原始编码、已有墓碑标记不重复追加、结构化保存 `originalSkuCode`、清理旧 attributes 生命周期元数据、不处理原始编码不匹配记录，防止删除态编码池继续累积不可读脏值。
+- 产品级联删除 SKU 会写入结构化 `deletedByProductId / productDeletedAt`，产品恢复时只恢复本次产品删除带下去的 SKU；旧 `attributes._deletedByProductId / _productDeletedAt` 只作为历史清理对象，不再参与恢复归属判断，用户原本单独删除的 SKU 不会被产品恢复误激活。
+- 旧产品页仍需读取旧 CAD 兼容载荷时，只能通过 `sku-cad-data` 中的显式兼容 helper 获取 `_skuCadData / _cadExcludedHoles / _cadExcludedHolesCount`；页面层和正式产品主链不得再手写拆解 `ProductSKU.attributes`。
+- 正式入库挂接已有 SPU 时必须阻断已软删除 Product；正式入库和旧 CAD Product 导入创建 SKU 前会在同一事务释放遗留删除态 SKU 编码，传统产品上传链路也会在创建前释放删除态编码，避免旧删除态记录卡住结构化规格码。
+- SKU 墓碑编码构造、原始编码恢复和事务内释放统一走 `sku-soft-delete.helper`，不允许 Product repository 或其他兼容入口再维护第二套后缀规则。
+- SKU 墓碑编码恢复和释放必须和活动编码池同口径：恢复出的原始 SKU 编码统一 `trim + uppercase`，事务内释放删除态记录按大小写不敏感匹配，产品级联恢复和单 SKU 恢复的条码冲突检查也统一使用规范化条码。
+- 同一个巡检脚本已把 `prisma/schema.prisma` 中所有 `Json` 字段纳入分类清单；当前 80 个 JSON 字段全部被归类为结构化 JSON、兼容快照、过程快照、几何数据、审计日志、集成缓存、UI 配置或系统配置。后续新增 JSON 字段如果不补分类，或分类清单残留 schema 已删除/改名的字段，`npm run db:verify-master-data:code` 会失败，避免新的 JSON 主数据暗坑进入系统，也避免边界台账和真实 schema 分叉。
+- 数据地基巡检现在分三层：代码层先跑 `npm run db:verify-master-data:code`，只读迁移状态再跑 `npm run db:verify-master-data:migration-status`，数据库层最后跑 `npm run db:verify-master-data`；完整检查入口 `npm run db:verify-master-data:all` 已把只读迁移状态作为硬前置，不再允许把事务内 dry-run 回滚结果误读成真实 ready。代码层检查不连接数据库，专门防止后续开发把已经收口的真相源边界重新打散。部署后和生产验收使用 `npm run db:verify-master-data:strict` 或 `npm run db:verify-master-data:all:strict`，要求结构迁移、幂等视图迁移和护栏迁移都已真实落库；如只需确认迁移目标是否真实存在，先跑 `npm run db:verify-master-data:migration-status`，该入口不执行迁移 SQL。
+- `npm run prisma:push` 已降级为本地开发保护入口，由 `scripts/prisma-db-push-local.js` 先检查目标库：production 环境标记、缺失/非法 `DATABASE_URL`、非本机 host、疑似生产库名都会被拒绝。生产和准生产只允许 `npx prisma migrate deploy + npm run db:verify-master-data:all:strict`，不能再用 `db push` 绕过迁移历史。
+- 代码层巡检会阻断 `src/app` Route/Page 直接写产品资料、资产中心、草稿组、非集成主数据、配置、权限、反馈、审计和 AI 生图地基表；这些写入必须通过 service/repository，不能绕开统一的规范化、质量状态、快照同步和审计边界；资料库条目身份禁止用数据库 `id`、前端临时 `id`、`itemKey: item.id`、`code || item.id` 或 `` `item:${item.id}` `` 兜底，有稳定编码的资料必须用 `code` 作为身份，缺显式编码的资料必须用业务规格派生稳定 key；草稿组编号禁止只用 `Date.now()` 生成，必须由服务层生成可读且带足够熵的稳定编号。
+- 代码层巡检还会阻断核心编码查询回退：`code / skuCode / modelNumber / barcode` 这类身份字段不能用 Prisma shorthand 或同名变量直接查询，必须显式归一或使用已经归一后的变量，保证服务层、仓储层和数据库表达式唯一索引语义一致。
+- 代码层巡检还会扫描 `scripts/` 和 `prisma/seed.ts` 的主数据直写。已知 demo/test/维护脚本必须明确分类；未分类脚本直写产品资料、资产中心、基础资料、旧 CAD 结构、仓库、人员组织、配置、审批、分享、反馈或审计等地基表会直接失败，生产修复和正式历史清洗必须走迁移、专用服务或 `scripts/apply-master-data-cleanup-plan.js` 这种显式计划。
+- 代码层巡检还会扫描应用代码和脚本中的原生 SQL 主数据写入。只要出现 `INSERT INTO / UPDATE / DELETE FROM` 写核心表，就必须被分类为显式清洗计划、事务内计数器或其他受控入口，并且必须同时匹配批准文件和批准表名；不能因为没有走 `prisma.model.create/update` 就绕过写入口巡检，也不能在已批准文件里顺手写职责外核心表。
+- 代码层巡检还会扫描应用代码和脚本中的原生 SQL 主数据读取。只要出现 `FROM / JOIN` 读取核心表，也必须被分类为内部巡检、显式清洗、schema readiness、事务内计数器读取或其他受控入口，并且必须同时匹配批准文件和批准表名；不能因为只是读取就绕过 Repository、结构化 helper 和真相源边界。
+- 代码层巡检还会阻断运行时 DDL 和 `$executeRawUnsafe`。应用代码和普通脚本不能在请求或服务调用过程中 `CREATE TABLE / CREATE INDEX / ALTER TABLE / DROP / TRUNCATE`，数据库结构真相必须来自 Prisma migration、治理迁移清单和 strict 巡检；服务层只能做只读 readiness 检查并暴露迁移未完成错误。
+- 只读 SQL 巡检不能成为第二套手工清单。`check-internal-master-data-foundation.sql` 的索引、约束和触发器护栏必须由测试反向对齐 `REQUIRED_DATABASE_GUARDS`：索引至少同步名称、relation、predicate hint 和 definition hint；约束至少同步名称、relation 和 expression hint；触发器至少同步名称和 relation。`scripts/sql` 下的 check/preflight 脚本还必须保持只读，授权脚本只允许外部 schema 的 SELECT/USAGE 授权。这样 SQL 巡检用于排查时不会比 JS 主巡检弱一层。
+- 代码层巡检还会扫描 `src/server/services` 和 `src/server/repositories` 的主数据直写。仓储层、服务事务编排、外部同步、系统初始化、旧 CAD 兼容链维护等写入口必须逐个分类；未分类 service/repository 直接写地基表会失败。已分类文件也必须匹配批准模型清单，例如仓库绑定文件只能写库位/绑定关系，正式入库服务只能写正式入库链路相关模型，防止同一文件后续绕过统一规范化、结构化副本同步、软删除释放、权限和审计边界。巡检会识别 Prisma client 别名和 relation 嵌套写入，`client = tx ?? this.prisma`、`basicInfo/profile/skuItems/assetProfile/preSkuPackagingPlan` 这类写法也必须落入同一套分类和模型作用域；真相源矩阵里的 `writeBoundary` 也会反查这份批准清单，矩阵和代码边界不能再分叉。
+- 代码层巡检还会反向检查所有文件级边界分类：脚本写入口批准表、原生 SQL 写入口批准表、原生 SQL 表作用域表、服务/仓储写入口批准表、模型作用域表、兼容快照读点分类表、结构化 payload 跳过表和 UI 缓存忽略表里的文件路径都必须真实存在。重构、拆文件或删除旧入口后，分类表也必须同步清理，不能留下“批准了一个不存在入口”的假安全感。
+- 代码层巡检提供 `--mode compatibility-snapshot-read` 只读盘点模式，用来持续列出 `ProductSKU.attributes`、`PreSku.displaySummary/familySelection` 和 `IntakeNonIntegratedProduct.payload` 的直接读点。该模式会给每个读点标记用途分类和迁移优先级：合理过程快照、旧链展示、DTO 兼容输出、生命周期旧数据清理入口可以暂时保留；资料库 `IntakeReferenceLibraryItem.payload` 属于结构化扩展字段，已从兼容快照风险里拆出；正式 SKU 软删除生命周期身份已迁入结构化列，不能再由 attributes 主导；从旧快照推导 `brand / spuCode / seriesName` 或继续编辑正式 SKU attributes 的高优先级读点必须排入结构化承接。当前基线为 42 处，高优先级 0 处，未分类 0 处，未使用分类 0 处；非集成产品列表、分页、详情、附件和预览读取已统一走结构化覆盖入口，避免散落 `payload` hydrate 重新扩成第二真相。分类表只能保留当前真实命中的读点或结构化 payload 跳过项，已经结构化清零的旧风险必须从分类表删除。
+- 代码层巡检新增 `--mode process-snapshot-read` 只读盘点模式，用来持续列出 `PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 的直接读点。当前基线为 35 处，高优先级 0 处，未分类 0 处，未使用分类 0 处；允许用途只覆盖辅助装配恢复、草稿组只读物料/BOM/安装预览、产品资料只读物料视图、旧产品装配恢复、包装输入和正式入库物料生成。巡检会阻断在过程快照读点附近读取 `barcode / skuCode / formalSkuCode / category / ownerId / businessType` 等正式或权限字段，防止过程快照重新承担主数据真相。
+- 代码层巡检新增 `--mode filesystem-master-data-source` 盘点模式，用来识别“文件系统读取 + Product/SKU/Panel/Hardware 等主数据写入”的组合。允许的旧上传/导入入口必须集中登记为 `legacy/import`，未登记入口一律视为反向造数风险；禁止以后通过扫描 `public/uploads`、临时文件目录或本地 JSON 来补主数据。
+- 数据库物理护栏已纳入 `scripts/verify-master-data-foundation.js`：固定检查资产中心系列/族/规格款编码唯一池、规格款身份键、活动条码唯一池、系列兼容关系去重、草稿组编号、草稿组身份和摘要形态、准 SKU 序号、准 SKU 身份、过程快照形态、组件编码数组、预估重量、正式产品型号、正式产品名称/可见范围、正式 SKU 编码、活动正式 SKU 编码不得带软删除墓碑标记、正式 SKU 售价/成本/库存非负、正式 SKU 软删除生命周期结构化身份、正式 SKU 删除态墓碑资料完整性、正式 SKU attributes 不得保存软删除生命周期元数据或正式资料字段、正式 SKU 删除态同步到资产 profile 的触发器、产品协作者身份/角色、分享链接 token/访问次数/过期时间、准 SKU 到正式 SKU 一次性入库关系、非集成 SPU 品牌池唯一、`ProductSkuAssetProfile / PreSkuBasicInfo / IntakeNonIntegratedProductProfile` 的一对一唯一索引、正式 SKU 资产资料同步副本活动条码唯一池、正式 SKU 资产资料副本来源规格款身份约束、准 SKU 非空规格码/条码唯一索引、准 SKU 型号/版本号/属性码/图纸号规范化、来源枚举和空字符串禁用、资产 SKU 同步事件原因枚举/计数/完成时间约束、非集成 SKU 明细的身份唯一索引、非空 `skuCode / barcode` 局部唯一索引、主数据质量决策开放目标唯一和原因/确认人/解决状态约束、专利台账分组唯一池和专利关键身份约束、资料库条目身份/编码唯一池、资料库编码非空、资料库 itemKey 归一唯一和类型枚举约束、SPU 规则产品品类唯一池、SPU 规则产品品类归一唯一池、SPU 号段产品品类归一唯一池、SPU 号段前缀唯一池、人员邮箱/花名/业务类型、组织部门、员工目录身份、准 SKU 包装方案 JSON 形态和状态约束、活动库位物理位置唯一、品牌物料准备项规范化唯一和文件元数据一致性、包装成品状态/数量/尺寸约束、审批流编号/标题/访问密钥/参与人/业务角色/字段矩阵和字段变更审计约束、旧 CAD 兼容链板件/孔位/产品五金/装配步骤/装配版本结构约束、基础资料分类/基材选项规范化唯一池、五金匹配记忆、基材花色绑定、板件材质绑定、规格款/准 SKU 库位绑定、旧正式产品包装方案质量约束、系统配置 key、AI 服务商配置唯一激活、主题默认配置、产品资料节点权限覆盖、辅助装配 AI 生图记录、反馈和操作日志约束、软删除非集成产品时释放 SKU 唯一池的触发器、产品开发类型枚举约束、SKU 缺失字段枚举约束、SKU 质量状态一致性约束、核心编码/条码规范化 `CHECK`、`ProductSkuAssetProfile.model / specCode / barcode` 规范化 `CHECK`，以及 `SpuNumberCounter` 的品类非空、品类无首尾空格、前缀非空、计数非负约束；这些护栏缺失或失效时巡检必须失败，不能只靠“当前没有重复数据”判断安全。当前护栏基线为 290 项。
+- SQL 版只读巡检 `scripts/sql/check-internal-master-data-foundation.sql` 也同步列出核心护栏，用于人工查库或外部审计时发现缺失索引、缺失约束或缺失触发器；脚本版护栏基线当前为 290 项。
+- 专利台账巡检还会检查 `ProductPatentRecord.id` 是否残留草稿态临时随机 id；保存链路会先收敛成专利分组稳定 id，数据库巡检负责发现旁路写入或旧清洗遗漏。
+- 资料库型前端本地存储已进入代码层 advisory，并按 `server-contract-required / server-backed-cache / legacy-cache / compatibility-cache` 分层治理到 0：当前 `server-contract-required` 为 0，`server-backed-cache` 为 0，`legacy-cache` 为 0，`compatibility-cache` 为 0。通用字母库组件、配件、封边、钢架资料库页面，以及非集成 BOM 配件/封边/包装材料/钢架匹配，均已改为读取 `IntakeReferenceLibraryItem`，不再从浏览器本地缓存主读。SPU 规则维护页已去掉本地缓存主路径，维护入口只写服务端资料库；SPU 预计展示只使用服务端同步后的运行时缓存或内置种子规则，不再读写浏览器缓存。内置 SPU seed 只允许在服务端完全没有 `SPU_RULE` 行时作为空库展示兜底；一旦服务端存在资料行，即便资料行无效或被过滤为空，也不得混入 seed 继续生成预计 SPU，避免默认数据成为第二套品类/号段真相。正式 SPU 占号必须走 `SpuNumberCounter`，不能再走本机缓存。专利台账已去掉浏览器本地缓存主路径，生产真相固定为 `ProductPatentRecord`。非集成旧入口也已从浏览器持久缓存收口到当前进程内运行时缓存，只服务测试或显式兼容场景，不能定义为长期多人协作或外部依赖的数据真相。
+- 代码层巡检还会阻断未归类的本地存储用途：新增 `localStorage/sessionStorage` 直接读写或 `createJSONStorage(() => localStorage/sessionStorage)` 这类封装持久化时，必须明确是主数据风险、服务端真相的兼容缓存、旧缓存、测试兼容，或非主数据 UI/登录态缓存；未归类就不能通过 `db:verify-master-data:code`。
+- 代码层巡检还会阻断应用层本地 JSON 文件主数据读写：`src` 下不能用 `readFileSync/writeFileSync` 把本地 `.json` 文件当资料库或产品资料真相；正式资料必须进入数据库或明确服务端契约，文件 JSON 只允许是导入载荷、迁移计划、备份、测试夹具或临时工具输入。
+- 代码层巡检必须带防回退测试，不只看当前大仓样本是否为 0。当前 `verify-master-data-code-boundaries` 测试会用隔离 fixture 验证 Route/Page 直写、未分类本地存储、脚本直写、服务写入口、未分类原生 SQL 写入、已批准原生 SQL 文件越权写表、未分类原生 SQL 读取、已批准原生 SQL 文件越权读表、运行时 DDL 与 `$executeRawUnsafe`、兼容快照读点、未分类 JSON 字段、过期 JSON 字段分类和过期文件级边界分类都能被抓住；真相源测试还会验证 JSON 兼容快照分类漏进矩阵时必须失败；新增规则或重构脚本时必须保持这些 fixture 继续有效。
+- 资料库 `IntakeReferenceLibraryItem.payload` 只允许作为扩展展示载荷，不能重新承担身份字段。服务端保存会用结构化 `itemKey / code / name / letter` 覆盖 payload 镜像字段，客户端字母库、配件、包装材料、钢架和 SPU 规则解码也固定读取 DTO 结构化列；代码层巡检会阻断 `readText(...)` 与 `readPayloadText(...)` 从 `payload/source/rulePayload` 读取 `id/code/name/letter/categoryCode/productCategory` 等身份字段的写法。
+- 代码层巡检已继续收紧非集成产品查询边界：`intake-non-integrated-product.service.ts` 中直接读取 `payload` JSON 的筛选 helper 必须包在 `payloadJsonWhenProfileMissing(...)` 中，避免开发类型、负责人或待办查询重新和结构化 profile 并列读旧快照。
+- 已新增 `IntakeReferenceLibraryItem` 和 `/api/intake/reference-library` 作为资料库型本地存储迁库底座；服务端保存会校验同一资料库内 `itemKey / code` 唯一，并由数据库唯一索引兜底，数据库还会按 `lower(btrim(itemKey))` 锁住语义重复键、限制资料库类型枚举，并要求 `itemKey` 非空无首尾空格。资料身份只允许来自显式 `itemKey` 或稳定 `code`，`id` 仅作为数据库行主键，不允许成为业务身份兜底。`SPU_RULE` 额外要求产品品类 `name` 按去空格和大小写归一后一对一，保存时会用结构化 `code / name` 规范化 payload 中的旧 `categoryCode / productCategory`，避免 JSON 快照反过来覆盖结构化真相。后续 UI 必须分批接入这个服务端契约，而不是继续扩展新的 `localStorage` 资料库；已接入的包装材料、配件、封边、钢架和 SPU 规则库在服务端保存失败时不能把本地缓存伪装成保存成功，其中通用字母库、配件、封边、钢架和 SPU 规则库已进一步移除本地缓存读写主路径。
+- 已新增 `SpuNumberCounter` 作为正式 SPU 号段计数器；`SPU_RULE` 资料库只描述品类和前缀规则，不能继续承担多人并发正式占号真相。计数器首次初始化只允许读取 `IntakeReferenceLibraryItem.code` 作为前缀，payload 中的 `categoryCode` 仅是兼容展示副本，不能参与正式占号。新建非集成产品、编辑旧草稿首次生成正式 SPU 时，正式 SPU 分配必须和产品创建/更新、结构化 SKU 明细写入处在同一个后端保存事务里；`/api/intake/spu-reservations` 只能作为后端兼容入口，不允许作为新建或旧草稿编辑的前置占号步骤，前端已移除 `reserveIntakeSpuNumber` 调用入口，预计 SPU 展示不再读取浏览器缓存，也不能在服务端已有 `SPU_RULE` 行时回退内置 seed。
+- `/api/intake/spu-reservations` 不再执行单独占号，直接返回阻断错误；保留路由只是为了给旧调用明确失败信息。`spuNumberReservationService` 已移除独立事务包装方法，只保留 `reserveInTransaction`，正式 SPU 分配必须从非集成产品保存链路进入同一个数据库事务。
+- 正式 SPU 分配入口必须复用非集成产品主数据质量规则：产品头和 SKU 明细未补齐时不能落入正式号段；后端可以按规则生成 SKU 编码和条码建议值，但不能让缺型号、缺规格名等不完整 SKU 进入正式 SPU 分配结果。
+- 外部契约除完整对账视图外，新增 `external.intake_products_ready_v1 / external.intake_sku_items_ready_v1`。外部稳定消费优先读 ready 视图；完整视图保留 `INCOMPLETE` 状态用于治理和对账，不能被外部系统当成可自动入库数据。
+- 内部主数据巡检会把外部核心视图缺失、外部视图回读内部 JSON、负责人兼容列未优先读取结构化 profile、ready SKU 视图混入非 READY 明细、字段字典承诺列缺失、字段字典外多余列、稳定业务键缺失/重复，以及业务编码字段使用内部 `id` 兜底作为硬失败；外部只读契约不再只是独立 SQL 文档。字段字典硬检查复用 `scripts/sql/check-external-readonly-contract.sql` 里的 `expected_columns`，当前基线为 9 个 v1 视图、224 个承诺列。稳定业务键巡检直接检查外部系统实际读取的视图结果，当前覆盖 `materials_v1.material_code`、`asset_variants_v1.spec_code`、`product_skus_v1.sku_business_key / sku_code`、ready 视图业务键、`product_assets_v1` 素材 URL 以及 `product_bom_v1.item_code / item_name / panel material_code`。内部 `id` 兜底扫描不再只抓 `COALESCE(... id ...)`，还会检查直接 `id AS *_code`、`CASE ... id ... AS *_business_key` 等派生形态。
+
+## 4. 历史清洗策略
+
+1. 首次迁移从 `IntakeNonIntegratedProduct.payload.skuItems` 回填 `IntakeNonIntegratedSkuItem`。
+2. 历史 SKU 明细优先保留原 `id` 作为 `skuItemId`；同一产品下缺失或重复 `id` 时按顺序生成稳定兜底 ID，避免迁移时丢行。
+3. `skuCode / specName / model` 作为当前必填质量基线，缺任一项标记为 `INCOMPLETE` 并写入 `missingRequiredFields`。
+4. `skuCode / barcode` 为空时允许先进入结构化表，作为待补资料；非空时必须接受唯一性约束和巡检。
+5. 迁移前必须先运行 `scripts/sql/preflight-intake-non-integrated-sku-items.sql` 检查历史 `payload.skuItems` 里的非空 `skuCode / barcode` 重复；如果存在重复，先按业务归属清洗或改码，不允许迁移时静默选择一条。
+6. 迁移本身也会做重复预检；发现重复时直接中止，并提示先运行预检 SQL。
+7. 清洗顺序先处理迁移前 JSON 重复，再处理结构化表里的重复 SKU/条码，再补齐 `INCOMPLETE`，最后消除 payload 与结构化表同步差异。
+8. 清洗完成前，外部只读视图和后续自动流转都必须识别 `dataQualityStatus`，不能把 `INCOMPLETE` 当作完整主数据。
+9. 分阶段清洗允许记录 `MasterDataQualityDecision`，但它只是审计和追责线索；最终达到 hard-ready 仍要求 `INCOMPLETE` 归零。
+9. 正式 SKU 首次迁移从 `ProductSKU.attributes.assetSkuSnapshot` 回填 `ProductSkuAssetProfile`；迁移前先运行 `scripts/sql/preflight-product-sku-asset-profile.sql` 暴露缺失快照、来源 ID 不一致和条码重复风险。
+10. `assetSkuSnapshot` 兼容快照保留一段时间，但读取优先级已降级为巡检、迁移和历史排查证据；同步合并、条码冲突检测和后续新增外部字段必须从 `ProductSkuAssetProfile` 或正式结构化表取得，不允许常规业务再回读 `assetSkuSnapshot`。
+11. 普通 SKU 属性编辑必须保留 `_` 前缀内部字段和 `assetSkuSnapshot` 兼容快照，避免旧接口把同步副本证据链清掉。
+12. 非集成产品头首次迁移从 `payload` 和 `openingReference` 回填 `IntakeNonIntegratedProductProfile`；保存链路双写 profile，外部产品头视图只读 profile。
+13. SPU 号段计数器首次迁移从 `SPU_RULE` 资料库规则和现有非集成产品 `spuBase` 的最大号回填；后续以 `SpuNumberCounter.lastUsedIndex` 为正式占号真相。新建产品不能先在前端占号再另行保存产品，避免保存失败后留下不可追溯的号段空洞。
+14. `IntakeNonIntegratedProductProfile` 与 `payload/openingReference` 的差异必须进入巡检；差异不代表允许重新把 payload 当真相，而是提示双写链路、迁移回填或历史清洗有漂移。
+15. 聚水潭同步、批量导入、脚本补数这类旁路写入必须有测试覆盖，确认 create/update/soft delete 都同步结构化 profile 和 SKU 明细；其中来源 SPU、来源 SKU/条码和规格码必须按内部编码池语义规范化，不能把外部源库原始大小写直接落成主数据身份。聚水潭真实同步还必须通过脚本安全门禁校验目标库身份和来源库身份，不能只凭 `--apply` 写入。
+16. 专利台账从浏览器缓存迁入 `ProductPatentRecord`；后续以数据库 API 的返回为准，浏览器缓存不再作为迁移、测试或失败兜底真相。
+17. 存量商品来源字段首次迁移从 `payload.metadata.source*` 回填到 `IntakeNonIntegratedProductProfile`；后续筛选、分类和同步对账都以 profile 为第一真相源。
+18. 准 SKU 基础资料主读和冲突检测固定为 `PreSkuBasicInfo`；`displaySummary / familySelection` 只能作为旧页面展示兼容兜底或旧字段清理对象，不能参与冲突检测、正式入库主写、自动建议或后端业务判断。编码类字段必须先大写规范化，再做冲突检测和落库。
+19. 正式 SKU DTO 读取顺序固定为结构化字段优先；兼容 JSON 只能以 `legacyAttributes` 名义输出或作为内部证据链保留，不能再命名为主数据字段。删除态 SKU 回收站合同同样遵守这个规则，只能输出过滤后的展示属性，不能泄露 `assetSkuSnapshot / _skuCadData / _originalSkuCode` 等内部证据。
+20. 正式入库不得为规避冲突自动改写 `ProductSKU.skuCode`，也不得让接口临时参数覆盖 `PreSkuBasicInfo`；结构化规格码冲突必须作为阻断错误暴露，并回到草稿组基础资料层处理。
+21. `ProductSKU.attributes.variantSelectionSummary / bomPreview` 不再参与正式入库重复阻断；需要组合对比时只能读取正式 SKU 关联的 `sourcePreSku`，缺少 `sourcePreSku` 的历史 SKU 由巡检或后续结构化签名迁移处理。
+22. 普通 `updateSKU` 不再开放 `attributes` 写入；旧属性袋维护必须走明确的兼容链或迁移/清洗入口，不能隐藏在常规编辑保存里。
+22. 对于巡检 sample 中已经定位但无法从结构化字段或 payload 中确定性回填的资料，例如缺品类、缺开发类型、SKU 编码/型号/规格名全空，不允许用默认值静默填充；必须由业务确认、标记无效，或通过 `scripts/apply-master-data-cleanup-plan.js` 的显式计划清洗。
+23. 任何新增正式流转入口如果使用非集成 SKU 明细，必须调用后端非集成 SKU 质量规则；禁止在前端、模板服务或导出脚本中重新手写必填字段判断。
+24. 巡检必须同时确认数据库物理护栏存在，尤其是资产中心唯一池、草稿组/准 SKU 过程身份、正式产品/SKU 编码池、一对一 profile、准 SKU 基础资料、准 SKU 非空规格码/条码唯一池、非空编码/条码唯一池、软删除触发器、产品开发类型枚举和 SKU 质量状态一致性约束；如果迁移未应用或护栏被误删，先修复迁移/索引/触发器，再谈业务清洗。
+25. 仍以 `localStorage` 保存的资料库型模块必须按巡检 category 处理：`server-contract-required` 迁入 `IntakeReferenceLibraryItem` 或更专用的服务端契约；`server-backed-cache`、`legacy-cache` 和 `compatibility-cache` 必须继续保持为 0。测试、旧数据迁移或失败兜底只能使用明确的运行时缓存或服务端兼容接口，不能重新引入浏览器持久缓存作为主数据来源。
+26. 审批流只承载协作过程：创建流程和更新字段时必须先经过服务层规范化，数据库约束兜底阻断空编号、空标题、空参与人、重复业务角色、非数组字段矩阵和非对象摘要；任何正式产品资料仍要写回结构化产品资料链，不能从审批摘要直接变成第二套主数据。审批产品 DTO 存在结构化 profile 时不得再从旧 `payload.openingReference` 补产品名、图片或说明；旧 payload 只能服务没有 profile 的历史兼容展示。
+27. 人员和组织主数据是权限地基：`User.email / name`、`Department.name / externalId`、`EmployeeDirectory.dingtalkUserId / dingtalkUnionId / jobNumber / mobile` 都必须有数据库语义唯一池；花名册同步和后台用户创建必须先规范化再保存，不能依赖页面或人工约定。
+28. 规划域只承载开品前推演：`PlanningTemplate.slots/rules`、`PlanningWorkspace.slotSelections/metadata` 和 `PlanningDraft.selectedAssets/previewNodes/summary/sourceSnapshot` 只能作为过程配置或追溯快照；写入链和数据库约束必须阻断空名称、游离可见范围、非对象/非数组 JSON 和模板外槽位。
+29. 协作者、分享和上传链路不允许成为正式产品资料第二真相：协作者只表达权限关系，分享链接只表达访问入口和统计，上传属性只保存文件过程元数据；产品名称、型号、可见范围、SKU 名称和资产资料仍必须落在结构化正式产品链路。
+30. 旧 CAD 兼容链清洗不能猜测业务含义：如果历史 `Panel / Hole / ProductHardware / AssemblyStep / AssemblyVersion` 触发约束风险，先定位来源 CAD 或业务记录，再做显式清洗；不能为了让迁移通过随手改尺寸、孔位、步骤类型或版本快照。
+31. 基础资料分类、基材选项、五金匹配记忆、库位绑定和旧包装方案清洗同样不能猜值：如果出现重复规范化名称、负排序、空绑定引用、五金映射缺匹配键或旧包装 boxes 非数组，必须先定位来源模块和业务含义，再通过显式清洗计划修复。
+
+清洗计划的标准流转必须留痕：先导出模板，例如 `npm run db:cleanup-master-data -- --template --output .master-data-cleanup/master-data-cleanup-template.json`；如果当前库尚未完成治理迁移，只能在本地调试时追加 `--allow-migration-dry-run`，不能把 dry-run 迁移当成已落库。业务方只允许在模板的 `fill` 区填写确认后的真实值，补齐 `confirmation` 和 `confirmedBy` 后，先跑 `npm run db:cleanup-master-data:validate -- --plan <计划文件>` 做静态校验。真正 `--apply` 前仍然必须满足迁移 fully ready、备份预检通过、命令显式携带目标库身份和备份 SHA-256、用户明确授权。`.master-data-cleanup/` 是本地清洗计划目录，可能包含真实业务资料和确认人，不提交 Git。
+
+## 5. 后续治理顺序
+
+1. 继续保持真相源和过程层分开。
+2. 把正式 SKU 资产资料读取口径稳定收口到 `ProductSkuAssetProfile`。
+3. 把非集成开品写入链路稳定收口到结构化 SKU 表。
+4. 把非集成产品头资料稳定收口到 `IntakeNonIntegratedProductProfile`，继续清洗缺品类、缺开发类型等历史资料。
+5. 把合同、专利、仓储等读产品头资料的链路继续改成结构化表优先；审批流已完成过程记录护栏补强，产品 DTO 已在有 profile 时停止读取旧 payload 补产品资料，但审批摘要仍只作为协作过程数据，不能成为正式产品资料主读来源。
+6. 持续核查人员/组织链路：花名册定时同步、后台创建账号、手动匹配员工和自动业务类型划归都必须复用同一套结构化员工目录和部门路径，不允许再从临时文本或页面缓存判断内部人员。
+7. 用巡检基线持续压低重复、缺字段和同步差异。
+8. 再扩展对外契约层字段，而不是让外部系统直接理解内部 payload。
+9. 把新增主数据读取 helper、DTO、Repository 查询纳入代码层边界巡检，确保结构化字段优先不是一次性人工约定，而是可重复执行的工程护栏。
+10. 把服务/仓储层新增写入口纳入代码层边界巡检，新增直写核心表时必须说明该文件是唯一写入口、事务编排入口、同步入口或兼容维护入口，不能让“临时服务”悄悄变成第二套主数据写链；父模型 `create/update` 里的 relation 嵌套写入也必须登记子模型作用域，不能用嵌套写绕过结构化副本治理。原生 SQL 读写核心表同样必须被分类到文件和表名双作用域，真相源矩阵声明写入边界时，必须同步进入代码边界批准清单。
+11. 持续压低兼容快照直接读点：`attributes / payload / displaySummary / familySelection` 的专项盘点必须稳定输出分类、优先级、阻断风险计数和未使用分类计数；高优先级、未分类读点或已经不命中的旧分类不得继续留在主链里，必须先结构化、迁移、明确降级到受控兼容入口，或从分类表删除。
+12. 持续压低兼容快照写入面：`node scripts/verify-master-data-code-boundaries.js --mode product-sku-attributes-write` 必须保持阻断风险为 0；新增 `ProductSKU.attributes` 字段键时，要么登记为兼容/过程键，要么改写到结构化字段。
+13. 持续压实过程快照用途矩阵：`node scripts/verify-master-data-code-boundaries.js --mode process-snapshot-read` 必须保持高优先级、未分类和未使用分类都为 0；新增 `PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 读点时，必须说明它是 3D 恢复、草稿只读展示、包装输入还是正式入库物料生成，不能从中反推正式编码、条码、品类、人员或权限。
+14. 持续压实文件系统边界：`node scripts/verify-master-data-code-boundaries.js --mode filesystem-master-data-source` 必须保持未登记风险为 0；旧上传/导入入口只能处理本次请求的显式文件，不允许新增扫描 `public/uploads` 或任意本地目录来反向创建/修补主数据的脚本。
+14. 兼容快照和过程快照读点还要受债务预算约束：当前兼容快照读点预算为 total 42、high 0、medium 32、unknown 0；过程快照读点预算为 total 35、high 0、medium 31、unknown 0。新增读点如果突破预算，必须优先结构化或删除旧读点；确需保留时要同步更新预算、分类原因和治理说明，不能让 JSON/快照读点无声增长。
+15. 持续防回退资料库型 `localStorage` 和本地 JSON 文件：包装材料、配件、封边、钢架、SPU 规则库和通用字母库组件已接入 `/api/intake/reference-library`；通用字母库、配件、封边、钢架和 SPU 规则库已从本地缓存主路径收口到服务端读取，包装材料 BOM 匹配也改为服务端读取，非集成旧入口已改为运行时缓存。后续新增资料库必须默认走服务端契约，不属于主数据的在 UI 和文档中明确为本机草稿缓存，并纳入代码层巡检白名单说明。
+16. 持续保持真相源矩阵反向覆盖：新增数据库物理护栏时，必须同步把对应 Prisma relation 纳入 `scripts/master-data-truth-sources.js` 的 `primaryRelations`，并说明写入边界、兼容快照和禁止真相源；`requiredGuardNames` 只能声明本条目主关系范围内的护栏，不能只加约束不登记业务归属，也不能把别的业务对象护栏错挂到当前条目。新增或改名 `compatibility-snapshot` JSON 字段时，也必须同步映射到矩阵的 `compatibilitySnapshots`。
+17. 持续保持治理迁移目录可验证：新增主数据结构迁移、外部视图迁移或数据库护栏迁移时，必须进入 `scripts/master-data-required-migrations.js`，声明目标 relation 和是否幂等；迁移 SQL 必须能对应到声明目标，执行后必须能让目标 relation 或 column 被数据库查到，清单顺序必须按路径升序，避免 dry-run 和 strict 用两套口径。禁止把结构补齐逻辑放回业务服务的运行时 DDL。
+18. 持续保持 Prisma JSON 字段分类正反向一致：新增 JSON 字段必须同步说明用途，删除或重命名 JSON 字段必须清理 `schemaJsonFieldClassifications`，让结构化 JSON、兼容快照、过程快照和审计/缓存边界始终跟真实 schema 对齐。
+19. 持续保持文件级分类表和真实仓库一致：拆分、重命名或删除写入口、兼容读点、过程快照读点、UI 缓存文件时，必须同步清理对应批准表、原生 SQL 表作用域表、模型作用域表、分类表或跳过表，让代码巡检报告里的每个边界声明都能落到真实文件。
+
+## 6. 规范审查
+
+结论：`passed with warnings`
+
+这是自审，不是独立复审。
+
+- 架构：资产中心、草稿过程层、正式产品结果层、人员组织权限层的关键唯一池已纳入数据库物理护栏，`IntakeNonIntegratedSkuItem` 继续结构化承接非集成 SKU 主数据，没有混入正式产品主链。
+- 视觉：本次不涉及前端视觉。
+- 根因：把非集成 SKU 主数据、审批流程过程数据、人员组织身份数据从“靠入口写对”推进到服务层规范化、数据库约束和可巡检状态。
+- 验证：当前代码层定向脚本测试和 `npm run type-check` 通过；`npm run db:verify-master-data:audit` 与 `npm run db:foundation:audit` 会按预期失败并输出 not-hard-ready，因为真实库尚未完成结构修复、baseline resolve、治理迁移真实落库和历史质量债清洗。当前数据库物理护栏基线推进为 290 项，真相源矩阵覆盖 27 个对象并反向覆盖数据库护栏 relation，且会反查写入边界是否进入代码层批准清单；治理迁移目录共 50 项且由脚本自检路径、顺序和目标 relation，兼容快照读点阻断风险为 0，外部字段字典多余列和业务编码 ID 兜底风险为 0，资产中心活动资产族缺系列、活动规格款缺模型/缩略图、活动规格款条码重复组、旧 CAD 结构风险、基础资料/映射/绑定/旧包装风险、配置/权限/审计过程数据风险均应保持为 0。本轮新增证据：克隆库直接 `migrate deploy` 复现 `P3005`；`rehearse-prisma-structure-repair.js` 已证明非破坏性结构修复后 current schema diff 和 migration diff 为空，93 条 baseline resolve 在克隆库全量成功，再应用当前仍未就绪的 38 项治理护栏后，hard-ready 仍需清理 2 条历史 SKU 明细 `INCOMPLETE`、3 个非集成产品 profile 缺品类、3 个缺开发类型和 1 条 PreSku 生命周期错位。
+- 警告：仍有 2 条历史草稿 SKU 为 `INCOMPLETE`，需要按业务归属补齐或标记无效；它们已经被结构化状态显式暴露，不再隐藏在 JSON 里。若业务确认分阶段清洗，原因必须进入 `MasterDataQualityDecision`，但真实数据库达到“十分稳”前仍必须完成迁移落库、strict 验收，并让 hard-ready 的质量债归零。
diff --git a/furniture-3d-system/docs/架构设计/内部主数据巡检基线-20260529.md b/furniture-3d-system/docs/架构设计/内部主数据巡检基线-20260529.md
new file mode 100644
index 00000000..975d094f
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/内部主数据巡检基线-20260529.md
@@ -0,0 +1,274 @@
+# 内部主数据巡检基线 2026-05-29
+
+巡检时间：2026-05-29
+巡检对象：本地开发库 `localhost:5432/furniture_3d`
+巡检方式：只读查询，不改库。
+真相源矩阵巡检：`npm run db:verify-master-data:truth`，读取 `scripts/master-data-truth-sources.js` 的机器可读清单，确认核心业务对象声明了第一真相源、兼容快照、禁止真相源、写入边界和对应数据库护栏，并检查这些主表、快照字段、写入边界文件和护栏仍存在；同时反向检查 `REQUIRED_DATABASE_GUARDS.relationName`，确保每个有数据库物理护栏的核心 relation 都被某个真相源条目覆盖，并检查每个 `requiredGuardNames` 的 relation 归属必须落在当前条目的 `primaryRelations` 内；真相源声明的写入边界还必须同步进入代码层主数据写入口批准表，避免矩阵承认一个代码巡检没有纳管的旁路入口。
+代码层边界巡检：`npm run db:verify-master-data:code`，扫描源码主数据读取边界，并扫描 `scripts/` 与 `prisma/seed.ts` 中的主数据直写分类，不连接数据库；脚本支持 `--root <dir>` 测试入口，已用隔离 fixture 覆盖 Route/Page 直写、未分类本地存储、应用层本地 JSON 文件主数据读写、未分类脚本直写、未分类服务写入口、未分类原生 SQL 写主数据、已批准原生 SQL 文件越权写表、未分类原生 SQL 读主数据、已批准原生 SQL 文件越权读表、运行时 DDL 和 `$executeRawUnsafe`、兼容快照读点、过程快照反推正式字段、`ProductSKU.attributes` 保留字段写入、未分类 Prisma JSON 字段、过期 Prisma JSON 字段分类和过期文件级边界分类，防止巡检规则被改弱后仍误判通过。
+兼容快照读点盘点：`node scripts/verify-master-data-code-boundaries.js --mode compatibility-snapshot-read`，只列出 `attributes / displaySummary / familySelection / payload` 的直接读点，用于后续继续把旧快照读点迁到结构化字段。
+过程快照读点盘点：`node scripts/verify-master-data-code-boundaries.js --mode process-snapshot-read`，只列出 `PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 的直接读点；这些读点必须明确是 3D 恢复、草稿只读展示、BOM/安装步骤展示、包装输入或正式入库物料生成，不能反推正式编码、条码、品类、人员或权限。
+正式 SKU attributes 写入盘点：`node scripts/verify-master-data-code-boundaries.js --mode product-sku-attributes-write`，只列出 `ProductSKU.attributes` 写入对象中的未登记键或主数据保留键；阻断风险必须保持为 0。
+完整巡检入口：`npm run db:verify-master-data:all`，先跑真相源矩阵和代码层边界，再跑只读迁移状态，最后跑数据库 dry-run 巡检。只读迁移状态现在是硬前置，任何结构迁移、幂等视图迁移或护栏迁移目标未真实存在时，`all` 都不能再被当成 ready。
+迁移清单自检：`scripts/master-data-required-migrations.js` 是治理迁移 dry-run 和清洗脚本共用的唯一迁移目录；`npm run db:verify-master-data` 会先检查清单 path 存在、无重复、按迁移路径升序排列、时间戳可解析、`targetRelation / targetRelations` 能在 SQL 文件中对应到实际引用，并确认 strict 只把非 `alwaysApply` 的结构迁移列为真实落库阻断项。迁移目录也会做静态自检：新增 Prisma migration 目录必须符合 `<14位时间戳>_name`，现有 `20251213_performance_optimization` 和 `add_packaging_plan` 只作为历史非标准目录显式白名单保留，不能继续新增同类目录。迁移 SQL 在 dry-run 事务中执行后，还会重新检查声明的目标表/视图或 `columnCheck` 字段是否真实出现，防止 SQL 空跑、错目标或清单错挂被误判为已经补齐地基。
+只读迁移状态：`npm run db:verify-master-data:migration-status` 只用 `to_regclass` 和 `information_schema.columns` 查询治理迁移声明的目标表/视图/字段是否已经真实存在，不执行迁移 SQL，也不启动 dry-run DDL；同时会检查 Prisma `_prisma_migrations` 历史表是否存在，并统计已完成、未完成和已回滚迁移。该入口适合生产/准生产先确认地基真实落库状态，结构治理迁移缺失、迁移历史缺失、存在未完成或已回滚迁移时都不能当成 strict ready。
+历史清洗入口：`npm run db:cleanup-master-data -- --template` 输出待补模板和当前对账摘要；`npm run db:cleanup-master-data -- --plan <file>` dry-run；`npm run db:cleanup-master-data:validate -- --plan <file>` 做不连库、不执行迁移 SQL 的静态计划校验；只有额外加 `--apply` 且计划文件带确认字段和业务确认人 `confirmedBy` 才落库。静态校验会先检查确认字段、业务确认人、模板 evidence、未知字段、占位值、覆盖已有字段和补齐完整度，便于业务确认前先排除格式和伪资料问题。清洗脚本会防过期模板、防覆盖已有主数据、防占位值或默认值，`UNKNOWN / 待补齐 / 默认值` 这类伪资料不能被当作业务确认主数据；`--apply` 默认要求被处理项补到完整。清洗模板、dry-run 和真正落库前都必须没有任何治理迁移缺失：无论是结构迁移，还是幂等视图/护栏迁移，只要只读迁移状态不是 `fullyReady`，默认都会拒绝继续；只有本地调试模板或 dry-run 可显式加 `--allow-migration-dry-run`，`--apply` 不允许使用该参数。SKU 编码和条码清洗会先 `trim + uppercase`，再按数据库 `upper(btrim(...))` 唯一池语义检查冲突；落库时会把 `confirmedBy` 写回产品记录 `updatedBy`。清洗脚本在提交前会复用主数据巡检报告断言结构化字段与兼容快照没有漂移，若清洗导致 `payload / attributes / displaySummary / familySelection` 和结构化表分叉，事务会失败并回滚。
+数据库物理护栏巡检：`npm run db:verify-master-data` 会在事务中 dry-run 补齐治理迁移后检查关键唯一索引、局部唯一索引和软删除触发器，并输出 `foundationHardReadyGate` 总门禁；护栏缺失、迁移未真实落库、历史主数据质量债、快照漂移、外部契约风险或 PreSku 生命周期错位都会进入 `foundationHardReadyGate.blockers`，命令以非 0 状态退出。需要留存完整本地证据时使用 `npm run db:verify-master-data:audit`，完整报告写入 `.master-data-audits/foundation-hard-ready-gate-current.json`，安全摘要写入 `.master-data-audits/foundation-hard-ready-gate-current.summary.json`，控制台只打印同一份安全摘要；完整报告包含业务样本，只能本地留证，不能提交 Git，也不能作为协作材料传播，日常汇报只看摘要文件或控制台摘要。只读 SQL 巡检文件也会被测试反向校验：`REQUIRED_DATABASE_GUARDS` 中的索引护栏必须在 SQL 对应区块中带上名称、relation、predicate hint 和 definition hint，约束护栏必须带名称、relation 和 expression hint，触发器必须带名称与 relation，避免 JS 主巡检和 SQL 辅助巡检形成两套护栏口径。`scripts/sql` 下的 check/preflight 脚本还会被静态测试限制为只读 SQL，授权脚本只允许 `GRANT SELECT/USAGE` 和默认 SELECT 授权。
+严格落库巡检：`npm run db:verify-master-data:strict` / `npm run db:verify-master-data:all:strict` 用于部署后和生产验收。严格模式会先跑只读迁移状态，结构迁移、幂等视图迁移和护栏迁移任何一类目标未真实存在都会失败，避免把“dry-run 能补上”误判成“数据库已经稳固”。巡检报告会把 `migrationReplay.structureMigrations` 和 `migrationReplay.idempotentMigrations` 分开输出，并补充 `fullyReady`，方便部署或审计系统直接判断是否允许进入历史清洗。若只需要确认真实结构状态，优先跑只读迁移状态入口。当前本地 strict 和只读迁移状态仍因治理迁移未真实落库而失败，不能据此宣称真实数据库已经达到“十分稳”。
+地基总就绪度：`npm run db:verify-master-data:readiness` 用于回答“现在能不能称为十分稳固”。它会连续执行 Prisma schema 校验、Prisma 官方迁移状态、当前库到 `schema.prisma` 的 diff、真相源矩阵、代码层边界、兼容快照读点、过程快照读点、正式 SKU attributes 写入、只读迁移状态和数据库 dry-run 巡检，并输出 `hardReady / blockerCount / blockers`。需要留存证据时使用 `npm run db:verify-master-data:readiness:audit`，报告会写入本地 `.master-data-audits/readiness-current.json`，即使巡检失败也会保留完整 blocker 证据。该入口故意把 Prisma 未应用 migration、当前库/schema drift、历史 `INCOMPLETE` SKU、产品头缺品类/开发类型、正式 SKU 缺 asset profile、准 SKU 缺基础资料也当成 hard blocker；所以它比普通 dry-run 更适合做地基收口门禁，而不是只证明脚本能跑通。业务确认的分阶段不完整会写入 `MasterDataQualityDecision`，但不会让 `INCOMPLETE` 从 hard blocker 中消失。
+
+地基批次审计：`npm run db:foundation:audit` 用于把 `readiness`、`foundationHardReadyGate` 总门禁、结构变更前置预检、baseline/结构修复施工图和迁移 dry-run 计划放进同一个本地证据目录，并生成 `manifest.json` 汇总 blocker。它不写数据库，不生成备份，也不替代迁移授权；用途是让每次治理前后的证据可对比、可复核。`manifest.hardReady` 必须同时满足 `readiness.hardReady = true`、`foundationHardReadyGate.hardReady = true` 且没有 blockers；总门禁原始报告会标记为敏感文件，manifest 只暴露脱敏的 `foundationHardReadyGateSummary`。
+
+最终完成清单：完整批次审计会在 `manifest.foundationCompletionChecklist` 中把“数据库结构与迁移历史、唯一真相源矩阵、后端写入边界、JSON/快照边界、文件系统边界、历史字段清洗、PreSku 生命周期、授权施工链”拆成逐项 `passed / blocked / missing`。需要把这份清单单独输出给协作或验收时，运行 `npm run db:foundation:completion-checklist`；该命令默认读取 `.master-data-audits/foundation-audit-current-goal/manifest.json`，只打印脱敏清单，并且只在所有项都 passed 时以 0 状态退出。它不是新的审计来源，只是防止把某个局部绿色结果误判为“数据地基已完成”。
+
+批次审计需要 shadow diff 留证时，显式使用 `--use-docker-shadow`。该模式会临时启动 Docker PostgreSQL shadow 库，把 `SHADOW_DATABASE_URL` 传给 preflight 和迁移计划步骤，结束后清理容器，并在 manifest 中写入 `shadowDiffEvidence`。它只证明迁移链和当前库/当前 schema 的差异，不代表目标数据库已经迁移完成。批次审计也可以显式追加 `--include-migration-rehearsal`，把从备份恢复到 Docker 克隆库并执行 `migrate deploy` 的演练报告写入同一目录的 `migration-rehearsal.json`。
+
+批次审计还可以显式追加 `--include-structure-repair-rehearsal`，把结构修复 SQL 的克隆库演练报告写入 `structure-repair-rehearsal.json`，并把本次 SQL 落盘到 `structure-repair.sql`。当前本地演练已证明：从备份恢复出的克隆库可通过非 DROP 的结构修复 SQL 对齐 `schema.prisma` 和 migrations 重放结果；manifest 中 `structureRepairRehearsalSummary.status = structure-repair-rehearsal-passed`，同时会记录 SQL 文件大小、SHA-256、结构对齐后的 baseline resolve 候选 migration 数、resolve 演练成功数和 resolve 后 `prisma migrate status` 状态。真实库仍必须先授权、备份和重新预检。
+
+启用结构修复演练的批次审计还会保存 `authorized-structure-repair-apply-plan.json`，并在 `manifest.json` 写入脱敏 `authorizedStructureRepairApplyPlanSummary`。该计划会校验 preflight、演练报告和 `structure-repair.sql` 的大小/SHA-256 是否同源，也会重新扫描 SQL 文件本体是否含 DROP/TRUNCATE 类破坏语句；真实执行阶段还会比对当前 `DATABASE_URL` 和 preflight 的数据库身份，并要求报告在默认 60 分钟内。真实执行阶段必须额外提供 `--expected-database-identity` 和 `--expected-backup-sha256`，脚本会现场重算备份 SHA-256，并和 preflight 记录同时比对，防止拿错库或错备份施工。结构修复演练报告还会记录 `prisma/migrations` 文件指纹；真实执行时如果当前迁移目录和演练时不一致，脚本会要求重新演练。数据库身份包含用户名和 schema；后续 Prisma diff、baseline resolve、migrate status 都沿用已确认的 `DATABASE_URL`，不能再隐式读另一个环境。该入口默认只读；真实库执行必须分 `apply-structure` 和 `resolve-baseline` 两阶段显式确认。`apply-structure` 后必须重新跑 preflight，`resolve-baseline` 前必须证明真实库结构 diff 已归零，不能把克隆库通过直接当成生产库已修复。
+
+结构变更前置预检中的 `backupToolingHint` 用于定位 PostgreSQL client 工具链：当 `pg_dump / pg_restore / psql` 不可用时，它会列出缺失命令、候选 bin 目录和 `POSTGRES_BIN_DIR` 建议。这个提示只解决“工具在哪里”，不降低“必须有可核验备份”的门槛。
+
+如果 Docker 可用，`backupToolingHint.dockerFallback` 会额外说明默认 `postgres:16` 或 `POSTGRES_DOCKER_IMAGE` 镜像是否已经存在本机。Docker 兜底仍只是工具链提示，不能替代真实备份文件和 `pg_restore --list` 验证。
+
+批次审计会单独保存 `truth-sources.json`，逐项列出核心对象的真相层级、主表、兼容快照、非真相源、写入边界和数据库护栏，并通过 `truthSourceEntryAudits` 给每个对象单独标出 `ok / issueCount / issues`。这个文件用于回答“每个业务对象的数据真相在哪里、哪个对象还不稳”，不能只看总数通过。
+
+批次审计同时保存代码边界证据：`code-boundaries.json`、`compatibility-snapshot-read.json`、`process-snapshot-read.json` 和 `product-sku-attributes-write.json` 会和数据库 readiness 报告在同一目录下生成，便于同时判断结构化主数据、兼容 JSON、过程快照和正式 SKU `attributes` 写入面是否有新增债务。
+
+批次审计还会保存 `baseline-repair-plan.json`，并在 `manifest.json` 写入脱敏 `baselineRepairPlanSummary`。该施工图会把证据归类为 `ready-for-migrate-deploy`、`ready-for-baseline-resolve`、`ready-for-authorized-structure-repair`、`manual-structure-repair-required` 或 `evidence-blocked`，用于阻断盲目批量 `resolve --applied`、在 P3005 已复现的库上直接 `migrate deploy`，以及运行时代码补 DDL。`ready-for-authorized-structure-repair` 只表示克隆库已证明结构修复和 baseline 路径可重复，真实库仍必须重新备份、预检、授权和逐步验收。
+
+批次审计还会保存 `foundation-required-migration-apply-plan.json`，并在 `manifest.json` 写入脱敏 `foundationRequiredMigrationApplyPlanSummary`。该计划只判断“结构修复和 baseline resolve 之后，是否可以应用治理迁移/护栏”；当前库缺 `_prisma_migrations` 或仍有结构迁移未就绪时，必须显示为 `readyToApply = false`。真实应用入口是 `npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，不是 `migrate deploy`。
+
+授权结构修复入口：`npm run db:foundation:apply-structure-repair` 默认只读生成计划。真实执行结构 SQL 使用 `--phase=apply-structure --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，真实执行 baseline resolve 使用 `--phase=resolve-baseline --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`。两个阶段都要提供 fresh preflight、结构修复演练报告和同一个 SQL artifact；脚本会阻断 SHA-256 不一致、SQL 本体含 DROP/TRUNCATE、目标库身份不一致、备份文件缺失或 SHA-256 不一致、迁移 manifest 缺失或不一致、报告过期、pending migration 数量不一致、post-repair diff 未归零、缺 migration id 清单等情况。
+
+历史清洗候选行默认不进入普通批次审计，避免业务资料扩散。需要同批留证时使用 `npm run db:foundation:audit:cleanup-template`，会额外生成 `cleanup-template.json`；它只用于业务确认和清洗前证据，不代表迁移已真实落库，也不能提交 Git。
+同一批次的 `manifest.json` 会写入脱敏 `cleanupTemplateSummary`，只记录候选数量、空白待填字段统计和迁移状态计数；日常判断历史质量债规模时看 manifest，不直接打开或传播敏感清洗模板。
+Prisma 迁移基线诊断：`npm run db:diagnose-prisma-migration-baseline` 只读检查 `DATABASE_URL` 指向的数据库、Prisma schema、当前库到 `schema.prisma` 的 diff、`prisma/migrations` 目录、`prisma migrate status` 和 `_prisma_migrations` 历史表。它用于判断当前库是不是历史 `db push` 或手工结构导致的“结构可能存在但迁移历史缺失”状态，并输出 baseline 所需的谨慎步骤。该脚本不会执行 `migrate deploy` 或 `migrate resolve`；如果配置了 `SHADOW_DATABASE_URL`，会额外运行两类 Prisma diff：`migrationDiff` 用 shadow 库重放 migrations 后比较当前库结构，`migrationSchemaDiff` 比较 migrations 重放结果和当前 `schema.prisma`。`SHADOW_DATABASE_URL` 必须和目标库不同，且数据库名必须包含 `shadow / test / tmp / temp` 这类明确标记。没有 shadow diff 证据、当前库到 schema diff 非空、migrations 到当前库 diff 非空，或 migrations 到 schema diff 非空时，不能 baseline resolve；如果需要基线化，必须先备份，再确认每个 migration 的结构结果已经真实存在，不能直接批量 resolve。
+数据库地基变更预检：`npm run db:preflight-database-foundation-change` 是进入 `migrate deploy` 或 baseline resolve 前的只读门禁。它会复用基线诊断，同时要求 `DATABASE_BACKUP_FILE` 或 `DB_BACKUP_FILE` 指向真实存在且非空的备份文件；没有备份证据时直接失败，空文件也不能通过。预检还会报告 `pg_dump / psql` 是否可用，没有备份文件且缺少 `pg_dump` 时会额外提示备份工具链未就绪。当前库/schema diff 非空时，预检建议 `migrate-deploy-required`；pending migration 存在但结构 diff 为空时，只有在 shadow diff 证明 migrations 与当前库等价后，才可能成为 `baseline-resolve-candidate`。如果 `migrationSchemaDiff.status = 0`，只能证明迁移链已能重放到 schema；当前库是否可 baseline 仍以 `migrationDiff` 和当前库/schema diff 为准。
+PostgreSQL 标准备份入口：`npm run db:backup:postgres` 在本机存在 `pg_dump` 时生成 `.database-backups/<db>-<timestamp>.dump`。该入口只读数据库，不执行迁移；密码通过 `PGPASSWORD` 传递，不出现在命令参数或报告里。生成后把该文件路径放入 `DATABASE_BACKUP_FILE` 或 `DB_BACKUP_FILE`，再运行数据库地基变更预检。本机缺少 PostgreSQL client 但 Docker 可用时，可显式追加 `--use-docker`，默认镜像为 `POSTGRES_DOCKER_IMAGE` 或 `postgres:16`；镜像不存在时默认拒绝隐式下载，只有显式追加 `--allow-docker-pull` 才允许拉取。Docker 兜底仍必须生成 custom dump 并通过容器内 `pg_restore --list` 校验；密码只通过环境变量传递，Docker 命令参数只出现 `--env PGPASSWORD` 变量名，不能出现 `PGPASSWORD=value`。
+结构变更 preflight 也会承认同一套 Docker 校验能力：如果本机没有 `pg_restore`，但 Docker PostgreSQL client 镜像已准备好，会用 Docker `pg_restore --list` 校验 `DATABASE_BACKUP_FILE`。因此备份生成、备份验证和迁移门禁使用同一条工具链证据，避免“备份脚本认为可用、preflight 不承认”的断层。
+克隆库迁移演练：`npm run db:foundation:rehearse-migration` 用于把 `DATABASE_BACKUP_FILE / DB_BACKUP_FILE` 恢复到临时 Docker PostgreSQL，再对克隆库运行 `prisma migrate deploy`，最后删除容器并写出 JSON。它只验证备份恢复出的非空库是否能直接迁移，不写真实目标库。当前本地备份演练复现 `P3005`，因此直接对目标库执行 `migrate deploy` 是已证伪路径；后续必须先形成 baseline/结构修复方案。
+本地 `db push` 保护：`npm run prisma:push` 已改为 `scripts/prisma-db-push-local.js`，只允许本地开发库通过，拒绝 production 环境标记、缺失/非法 `DATABASE_URL`、非本机 host 和 `*_prod / *-production` 等疑似生产库名。生产/准生产只能走 `npx prisma migrate deploy`，再跑 `npm run db:verify-master-data:all:strict`。
+本地存储 advisory：`npm run db:verify-master-data:code` 会列出仍以 `localStorage/sessionStorage` 保存资料库型数据的模块，并按 `server-contract-required / server-backed-cache / legacy-cache / compatibility-cache` 分层；非测试源码里的本地存储直接读写和 `createJSONStorage` 封装持久化用途必须被归类，未归类时命令失败。
+迁移前预检：
+
+- `scripts/sql/preflight-intake-non-integrated-sku-items.sql` 用于在结构化迁移前检查历史 JSON 里的重复 `skuCode / barcode`。
+- `scripts/sql/preflight-product-sku-asset-profile.sql` 用于在正式 SKU asset profile 迁移前检查历史 `assetSkuSnapshot` 质量。
+
+## 1. 核心结论
+
+内部主链的主数据结构已具备可验证硬约束：
+
+- 系列、资产族、规格款、正式型号、正式 SKU、草稿组编号都没有发现重复码。
+- 资产族都已挂到系列，没有发现空系列归属。
+- 资产规格款都已有模型 URL。
+- 正式 SKU 资产资料已新增 `ProductSkuAssetProfile` 结构化副本；`assetSkuSnapshot` 降级为兼容快照和巡检证据，不再参与常规业务判断。
+- 外部正式 SKU 视图已追加 `product_business_key / sku_business_key`，巡检会阻断正式 SKU 视图业务键缺失或 SKU 业务键重复。
+- 外部正式产品素材和 BOM 明细视图已追加同一套业务键，巡检会阻断明细视图缺业务键，避免外部系统用内部行 ID 关联素材和 BOM。
+- 准 SKU 的核心快照字段都存在。
+- 准 SKU 正式字段的代码读取边界已有自动巡检，防止后续重新从 `displaySummary / familySelection` 主读。
+- 核心业务对象已有机器可读真相源矩阵：当前覆盖 27 个对象，逐项绑定 Prisma 主表、兼容/过程快照、禁止当真相源的字段、写入边界和数据库护栏；新增的 `MasterDataQualityDecision` 只承载质量决策审计，不承载 SKU 真值。巡检会校验主表存在、`Model.field` 快照字段存在、写入边界文件存在、护栏名称存在，并反向确认数据库护栏 relation 全部被 `primaryRelations` 覆盖，同时阻断把其他 relation 的护栏错挂到当前真相源条目；矩阵里的写入边界也会反查 `verify-master-data-code-boundaries.js` 的服务/脚本写入口批准表。代码层标为 `compatibility-snapshot` 的 Prisma JSON 字段也必须出现在真相源矩阵中，当前 4 个字段全部已映射，未映射为 0。新增核心对象时不能只写文档，必须同步进入 `scripts/master-data-truth-sources.js`，并把真实写入口纳入代码边界分类。
+- 治理迁移清单已有机器自检：当前共 50 项，其中 11 项是必须真实落库的结构治理迁移，39 项是可在巡检事务中幂等重放的视图/护栏迁移；当前只读真实落库状态仍有 10 项结构迁移和 28 项幂等迁移未就绪。清单本身的路径、顺序、目标 relation 和 SQL 引用都会在连库前验证，执行后还会复查目标 relation 或 column 是否出现，防止后续新增迁移漏登记、错顺序、错挂目标或 SQL 没有真正产出声明对象。只读迁移状态入口会在不执行 SQL 的情况下报告结构迁移和幂等迁移当前目标是否仍缺失，作为真实落库前置证据。治理迁移文件还会被静态测试反查：当前治理窗口内新增外部 v1 视图、约束、唯一索引或触发器时，必须登记到 `scripts/master-data-required-migrations.js`；`alwaysApply` 迁移如果包含 DML，必须显式分类，不能悄悄把幂等护栏迁移变成无说明的数据修复脚本。
+- 正式 SKU 兼容 JSON 的代码读取边界已有自动巡检，`attributes.skuName / assetSkuSnapshot / variantSelectionSummary / bomPreview` 只能出现在批准的兼容适配点。
+- 正式 SKU 兼容 JSON 的写入边界也已有自动巡检，`ProductSKU.attributes` 只能写登记过的兼容/过程键；颜色、材质、尺寸、条码、型号、规格码等正式资料必须写 `ProductSkuAssetProfile` 或结构化列，demo/test seed 也不能例外。
+- 准 SKU 过程快照读点已有独立盘点：`PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 当前 35 处全部分类，高优先级 0、未知 0、未分类 0、未使用分类 0。过程快照只能服务辅助装配恢复、草稿组只读物料/BOM/安装预览、包装输入和正式入库物料生成；巡检会阻断从这些快照附近读取 `barcode / skuCode / formalSkuCode / category / ownerId / businessType` 等正式或权限字段。
+- 核心编码/条码查询边界已有自动巡检，非测试源码不能再用 `where: { code }`、`where: { skuCode }`、`where: { modelNumber }`、`where: { barcode }` 这类缩写或同名变量直查；仓储层和服务旁路必须显式归一到 `trim + uppercase`。
+- 非集成开品 SKU 已新增 `IntakeNonIntegratedSkuItem` 结构化承接表，不再只依赖 `payload.skuItems` 读取 SKU 主数据。
+- 非集成产品头资料已收紧为 `IntakeNonIntegratedProductProfile` 优先且 profile 空值不再回退旧 `payload` 补齐；页面和接口会真实暴露缺品类、缺开发类型等主数据质量问题。
+- 非集成开品 SKU 的重复 SKU、重复条码、资料完整度和 payload 同步状态已经纳入巡检基线。
+- Prisma JSON 字段分类已经纳入代码层巡检，当前 80 个 JSON 字段全部有分类，未分类数为 0，分类表中过期字段数为 0。
+- 当前数据库物理护栏巡检已扩展到 290 项：一对一 profile、正式 SKU 资产资料同步副本活动条码唯一、正式 SKU 资产资料副本来源规格款身份约束、活动正式 SKU 编码不得带软删除墓碑标记、正式 SKU 软删除生命周期结构化身份、正式 SKU attributes 不得保存软删除生命周期元数据、正式产品名称/可见范围、产品协作者身份/角色、分享链接 token/访问次数/过期时间、准 SKU 基础资料、准 SKU 型号/版本号/属性码/图纸号规范化、来源枚举和空字符串禁用、资产 SKU 同步事件原因枚举/计数/完成时间约束、非集成 SKU 明细身份、非空 SKU/条码局部唯一索引、主数据质量决策开放目标唯一和原因/确认人/解决状态约束、专利台账分组唯一和关键身份约束、核心编码/条码规范化 check 约束、`ProductSkuAssetProfile.model / specCode / barcode` 规范化 check 约束、软删除触发器、资料库条目身份唯一、资料库 itemKey 归一唯一、同库非空编码唯一、资料库编码非空、SPU 规则产品品类唯一、SPU 规则产品品类归一唯一、SPU 正式号段计数器品类唯一、品类归一唯一、号段前缀唯一、人员邮箱/花名/业务类型、组织部门、员工目录身份、规划模板/基材/库位/包装成品/材质/五金/通用组件编码唯一、准 SKU 包装方案 JSON 形态和状态约束、活动库位物理位置唯一、品牌物料准备项规范化唯一和文件元数据一致性、包装成品状态/数量/尺寸约束、审批流编号/标题/访问密钥/参与人/业务角色/字段矩阵和字段变更审计约束、旧 CAD 兼容链板件/孔位/产品五金/装配步骤/装配版本结构约束、基础资料分类/基材选项规范化唯一池、五金匹配记忆、基材花色绑定、板件材质绑定、规格款/准 SKU 库位绑定、旧正式产品包装方案质量约束，以及系统配置/服务商配置唯一激活/主题默认配置/节点权限覆盖/AI 生图记录/反馈/操作日志约束都必须存在。
+- 规划域新增护栏覆盖 `PlanningTemplate / PlanningWorkspace / PlanningDraft`：模板槽位必须是非空数组，模板规则和工作台元数据必须是对象，工作台可见范围只能是固定枚举，草稿选中资产、预览节点、摘要、警告和来源快照必须保持明确 JSON 形态。
+- 审批流可见范围已收口到结构化 `businessRoles / participantUserIds`；代码层边界巡检会阻断从 `fieldMatrix` 过程矩阵反推流程访问权限，`fieldMatrix` 只保留字段级责任判断用途。审批产品 DTO 也已收紧为存在结构化 profile 时只读取 profile 和产品结构化列，旧 `payload.openingReference` 只允许在没有 profile 的历史记录上做兼容展示，不再补产品名、图片或说明。
+- 代码层 advisory 当前为 0；非主数据 UI 状态、登录态和会话偏好缓存已列入明确忽略清单，不再和资料库型主数据风险混在一起。当前未归类本地存储数为 0。
+- 应用层本地 JSON 文件主数据读写已纳入硬护栏：`src` 下不得用同步或异步 `readFile/writeFile`、`require/import` 读取或写入本地 `.json` 文件作为业务资料真相；JSON 文件只能作为导入载荷、迁移计划、备份、测试夹具或明确的临时工具输入，且必须留在工具、脚本或测试边界内。
+- 脚本层主数据直写已纳入分类巡检：当前扫描脚本文件 43 个，发现 109 处已批准的 demo/test/维护脚本直写，未分类直写为 0；扫描范围已覆盖产品资料、资产中心、基础资料、旧 CAD 结构、仓库、人员组织、配置、审批、分享、反馈、审计、分类字典、规划、包装和同步事件等地基表。后续新增生产修复脚本如果直接写这些表，必须先改成专用服务、迁移或显式清洗计划，不能静默绕过主写入口。已批准写库脚本还会被安全门禁清单复查；聚水潭存量商品同步这类外部来源写入口必须在真实写库时同时绑定确认词、目标 PostgreSQL 身份和来源 MySQL 身份。
+- 原生 SQL 主数据写入已纳入分类巡检：当前应用代码和脚本中发现 6 处 `INSERT INTO / UPDATE / DELETE FROM` 写核心主数据表，全部已分类，未分类为 0；允许点仅限显式历史清洗计划和 SPU 号段事务内计数器写入，并且必须同时匹配批准文件和批准表名。迁移 SQL 继续由迁移清单和 strict 巡检管理，不和业务旁路写入口混在一起。
+- 原生 SQL 主数据读取也已纳入分类巡检：当前应用代码和脚本中发现 112 处 `FROM / JOIN` 读取核心主数据表，全部已分类，未分类为 0；允许点限于内部巡检、显式历史清洗、节点权限只读 schema readiness/规则读取和 SPU 号段事务读取，并且必须同时匹配批准文件和批准表名。业务服务默认应通过 Prisma delegate、Repository 或结构化 helper 读取，不能绕过真相源边界。
+- 运行时 DDL 已纳入代码层硬护栏：应用代码和普通脚本中不得用 `CREATE TABLE / CREATE INDEX / ALTER TABLE / DROP / TRUNCATE` 补建结构，也不得使用 `$executeRawUnsafe`；数据库结构真相只能来自 Prisma migration、治理迁移清单和 strict 巡检。当前运行时 DDL 基线为 0。
+- 服务/仓储层主数据写入口巡检已覆盖 Prisma client 别名和 relation 嵌套写入：当前 `src/server` 写入口基线为 286 处，未分类为 0；`client = tx ?? this.prisma`、`assetProfile: { upsert }`、`profile: { upsert/create }`、`skuItems: { createMany/deleteMany }`、`basicInfo: { upsert }`、`preSkuPackagingPlan.upsert`、分类字典写入、装配步骤/版本写入和同步事件写入都会进入同一套写入口分类，不能再靠父模型写入绕过子模型结构化边界。
+- 兼容快照直接读点已有独立盘点模式，当前基线为 42 处；这些不等同于违规，但必须被视为继续结构化的待办清单，不能让 `attributes / displaySummary / familySelection / payload` 扩回主数据真相源。资料库 `IntakeReferenceLibraryItem.payload` 已按结构化扩展字段单独归类，不再混入 `IntakeNonIntegratedProduct.payload` 兼容快照风险。正式 SKU 软删除生命周期身份已迁入结构化列，剩余 attributes 读点只允许旧数据回退和清理；回收站删除态 SKU 合同已从 `attributes` 收口为 `legacyAttributes`，并过滤 `_originalSkuCode / _deletedCodeAt / _deletedByProductId / _productDeletedAt / assetSkuSnapshot / _skuCadData` 等内部证据，避免旧生命周期元数据和兼容快照继续向外输出。正式入库新建 `ProductSKU.attributes` 时不再写入整包 `PreSku.displaySummary`，避免草稿展示快照进入正式 SKU 属性袋后再次成为第二主数据源。非集成产品列表、分页、详情、附件和预览读取已统一收口到结构化覆盖入口，`payload-hydration` 兼容读点从分散链路收敛到集中 helper，且水合结果会用持久化结构化列覆盖 `id / spu / productCode / brand / designer / operator / purchaser`，避免旧 payload 反向覆盖身份和人员字段。
+- 兼容快照读点分类表也已纳入反向校验：分类表里的文件必须在当前扫描结果中真实命中兼容快照读点，或被列为结构化 payload 跳过读点；当前未使用的兼容快照分类数为 0。旧高优先级风险清零后，对应分类也必须清掉，不能在台账里留下已经不存在的风险入口。
+- 文件级边界分类也已纳入反向校验：脚本写入口批准表、原生 SQL 写入口批准表、原生 SQL 表作用域表、服务/仓储写入口批准表、模型作用域表、兼容快照读点分类表、结构化 payload 跳过表和 UI 缓存忽略表的文件路径都必须真实存在；当前过期文件级分类数为 0。
+- 外部只读字段契约已并入数据库巡检：`external` 9 个 v1 视图、224 个字段字典承诺列必须存在，且实际视图不能多出字段字典未登记列；`npm run db:verify-master-data` 会复用 `scripts/sql/check-external-readonly-contract.sql` 的字段清单，避免 SQL 独立巡检和 JS 主巡检出现两套口径。巡检还会阻断外部视图重新依赖内部 JSON 源、外部稳定业务键缺失/重复，或在 `*_code / *_business_key` 这类业务编码字段里用内部行 `id` 兜底。稳定业务键当前直接检查 `materials_v1.material_code`、`asset_variants_v1.spec_code`、正式 SKU、ready 开品/SKU、素材 URL 和 BOM 物料编码等外部实际消费字段；内部 `id` 兜底扫描同时覆盖 `COALESCE`、直接别名和 `CASE` 派生。
+- 已新增 `IntakeReferenceLibraryItem` 服务端承接底座和 `/api/intake/reference-library` API，数据库物理护栏已覆盖资料库条目身份唯一、itemKey 归一唯一、类型枚举、itemKey 非空、同库非空编码唯一、SPU 规则产品品类唯一和 `SpuNumberCounter_productCategory_key`；代码巡检同步阻断用数据库 `id`、前端临时 `id`、`itemKey: item.id`、`code || item.id` 或 `` `item:${item.id}` `` 兜底资料库身份的回退写法，并阻断草稿组编号退回纯 `Date.now()` 生成。
+- 正式 SKU 资产 profile 同步链路已把型号、规格码、条码在服务层统一 `trim + uppercase`，包括人工锁定字段和 `sourceVariants` 快照，防止旧兼容快照把小写条码回灌到结构化副本。
+- 非集成 SKU 保存链路已把 `skuCode / barcode` 在 payload 和结构化 `IntakeNonIntegratedSkuItem` 写入前统一 `trim + uppercase`，和清洗脚本、数据库表达式唯一索引保持同一语义。
+- 聚水潭存量商品同步入口已同步规范化来源 SPU、来源 SKU/条码和规格码；profile、payload、reviewSheet 和结构化 SKU 明细不会因外部源库大小写差异产生第二套身份。同步查找、更新和排除判断已经收紧为结构化 profile 或系统生成的 `jst-stock-*` 业务 ID，不再用 `payload.metadata.source*` 参与来源身份判断。同步脚本默认 dry-run；真实写库必须带 `--confirm=sync-jst-sku-stock`、目标库身份和来源库身份，避免把外部 MySQL 或内部 PostgreSQL 配错后仍然批量落库。
+- 包装/轻仓库承接已补齐服务层和数据库双护栏：包装箱编号、名称、尺寸、数量、成本/重量边界会在保存和正式入库前校验，数据库同步约束包装方案 JSON 形态、活动库位物理位置唯一、品牌物料类型和文件元数据、包装成品状态/数量/尺寸。
+
+真正剩下的内部脏点，不再是“巡检发现但没有承接层”，而是结构化承接后的历史资料清洗余量：当前仍有 2 条非集成草稿 SKU 明细处于 `INCOMPLETE`。
+
+## 2. 巡检结果
+
+| 检查项 | 结果 |
+| --- | ---: |
+| 系列重复码 | 0 |
+| 资产族重复码 | 0 |
+| 规格款重复码 | 0 |
+| 规格款重复条码 | 0 |
+| 正式产品型号重复 | 0 |
+| 正式 SKU 重复码 | 0 |
+| 正式 SKU 缺少名称 | 0 |
+| 外部正式 SKU 视图业务键缺失/重复风险 | 0 |
+| 外部正式素材/BOM 明细业务键缺失风险 | 0 |
+| 草稿组重复码 | 0 |
+| 准 SKU 同组重复序号 | 0 |
+| 资产族空系列归属 | 0 |
+| 规格款空模型 URL | 0 |
+| 正式 SKU 缺少资产 profile | 0 |
+| 正式 SKU profile 与兼容快照差异 | 0 |
+| 正式 SKU profile 来源 ID 不一致 | 0 |
+| 正式产品身份/可见范围风险 | 0 |
+| 产品协作者角色/身份风险 | 0 |
+| 分享链接身份/计数风险 | 0 |
+| 准 SKU 缺少真相快照 | 0 |
+| 非集成 SKU 重复码 | 0 |
+| 非集成 SKU 重复条码 | 0 |
+| 非集成不完整 SKU | 2 |
+| 非集成 SKU payload 同步差异 | 0 |
+| 代码层未批准 JSON 主读违规 | 0 |
+| 应用层本地 JSON 文件主数据读写违规 | 0 |
+| 数据库物理护栏缺失/失效 | 0 |
+| 数据库物理护栏通过数 | 290 |
+| 治理迁移清单项 | 50 |
+| 需真实落库结构治理迁移 | 11 |
+| 幂等视图/护栏迁移 | 39 |
+| 只读迁移状态待落库结构迁移 | 10 |
+| 只读迁移状态待重放幂等迁移 | 28 |
+| 真相源矩阵条目 | 27 |
+| 数据库护栏 relation 反向覆盖缺失 | 0 |
+| 真相源护栏归属错挂 | 0 |
+| 兼容快照 JSON 字段矩阵映射缺失 | 0 |
+| 旧 CAD 板件身份/尺寸风险 | 0 |
+| 旧 CAD 板件同产品/SKU 编号重复 | 0 |
+| 旧 CAD 孔位几何风险 | 0 |
+| 旧 CAD 产品五金结构风险 | 0 |
+| 旧 CAD 装配步骤结构风险 | 0 |
+| 旧 CAD 装配版本快照风险 | 0 |
+| 基础资料/基材选项身份风险 | 0 |
+| 基础资料/基材选项规范化重名风险 | 0 |
+| 五金匹配记忆身份风险 | 0 |
+| 基材花色/板件材质/库位绑定风险 | 0 |
+| 旧正式产品包装方案质量风险 | 0 |
+| 配置/权限/审计过程数据风险 | 0 |
+| 资料库服务端承接条目 | 0 |
+| SPU 正式号段计数器 | 已建表并纳入唯一护栏 |
+| 原生 SQL 主数据写入口 | 6 |
+| 未分类原生 SQL 主数据写入口 | 0 |
+| 原生 SQL 主数据读取入口 | 112 |
+| 未分类原生 SQL 主数据读取入口 | 0 |
+| 运行时 DDL / unsafe raw SQL 入口 | 0 |
+| 未分类运行时 DDL / unsafe raw SQL 入口 | 0 |
+| 服务端主数据写入口 | 286 |
+| 未分类服务端主数据写入口 | 0 |
+| 资料库型本地存储 advisory | 0 |
+| 已批准兼容测试命中 | 9 |
+| 兼容快照直接读点盘点 | 42 |
+| 兼容快照阻断风险读点 | 0 |
+| 未使用兼容快照分类 | 0 |
+| 结构化 payload 跳过读点 | 8 |
+| 过程快照直接读点盘点 | 35 |
+| 过程快照阻断风险读点 | 0 |
+| 未使用过程快照分类 | 0 |
+| 外部只读字段契约视图 | 9 |
+| 外部只读字段契约列 | 224 |
+| 外部只读字段契约缺失列 | 0 |
+| 外部只读字段契约未登记多余列 | 0 |
+| 其中 server-contract-required | 0 |
+| 其中 server-backed-cache | 0 |
+| 其中 legacy-cache | 0 |
+| 其中 compatibility-cache | 0 |
+| 未归类本地存储 | 0 |
+| 外部视图 JSON 源依赖风险 | 0 |
+| 外部视图业务编码 ID 兜底风险 | 0 |
+| 外部 ready 视图稳定业务键缺失/重复风险 | 0 |
+| Prisma JSON 字段总数 | 80 |
+| 未分类 Prisma JSON 字段 | 0 |
+| 过期 Prisma JSON 字段分类 | 0 |
+| 过期文件级边界分类 | 0 |
+
+## 3. 结构化承接和历史清洗状态
+
+当前口径：
+
+- `IntakeNonIntegratedProduct.payload.skuItems` 是历史过程快照，不再作为非集成 SKU 主数据的唯一读取来源。
+- `ProductSkuAssetProfile` 是正式 SKU 资产资料同步副本的结构化承接表，正式入库和资产同步会双写该表；`assetSkuSnapshot` 只用于兼容与排查。
+- `IntakeNonIntegratedSkuItem` 承接 SKU 明细的结构化字段，包括 `skuCode / specName / model / barcode / size / color / material / manufacturer` 等。
+- `external.intake_products_v1` 和 `external.intake_sku_items_v1` 均已改读结构化表；外部系统不能再通过这两个视图间接依赖 `payload / payload.skuItems`。
+- 非集成产品开发类型、负责人、待办和存量来源筛选均以 `IntakeNonIntegratedProductProfile` 为主读；旧 `payload` 查询只允许在 profile 缺失的历史记录上兜底。
+- `external.intake_products_ready_v1 / external.intake_sku_items_ready_v1` 提供外部稳定消费口径；完整视图继续保留 `INCOMPLETE` 资料用于治理对账。
+- `external.intake_products_v1 / external.intake_sku_items_v1` 追加 `product_business_key / sku_business_key`；ready 视图要求业务键非空，巡检会阻断 ready 业务键缺失或重复，技术 ID 只保留为内部追踪字段。
+- 非空 `skuCode` 和非空 `barcode` 已进入结构化唯一性治理；巡检继续保留重复风险检查。
+- `dataQualityStatus = READY` 表示当前明细达到主数据可流转基线。
+- `dataQualityStatus = INCOMPLETE` 表示历史或草稿资料仍需清洗，不能自动当作完整商品资料。
+- payload 与结构化表同步差异为 0，说明本次结构化承接没有发现 SKU 明细丢行或关键字段偏移。
+- `scripts/verify-master-data-foundation.js` 已把结构化主数据与兼容快照的漂移提升为阻断项：非集成 SKU 明细、正式 SKU 资产 profile、准 SKU 基础资料、非集成产品 profile、存量来源字段只要和旧 `payload / attributes / displaySummary / familySelection` 快照出现差异，巡检会失败；`payload / attributes` 只能作为历史证据和兼容副本，不能成为第二真相。
+- `scripts/verify-master-data-code-boundaries.js` 会把已批准的历史兼容点列入 `approvedCompatibility`，当前基线为 9 条，均为测试样本或反回退测试；只要出现未批准主读点就以非 0 状态退出，避免靠人工 `rg` 记忆维护边界。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断非集成产品查询里未受 `payloadJsonWhenProfileMissing(...)` 保护的 `payload` JSON 筛选 helper，防止旧快照重新和 `IntakeNonIntegratedProductProfile` 并列成为开发类型、负责人或待办真相源。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断 `src/app` Route/Page 直接写核心主数据和关键地基表，确保产品资料、资产中心、草稿组、非集成资料、配置、权限、反馈、审计和 AI 生图记录都只能走服务层或仓储层规范化入口。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断未分类的脚本层主数据直写；demo/test/维护脚本必须明确分类，生产修复和历史清洗必须走迁移、专用服务或显式清洗计划。当前直写分类扫描已经覆盖基础资料、旧 CAD 结构、人员组织、配置、审批、分享、反馈和审计等地基表。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断未分类的原生 SQL 主数据写入；应用代码和脚本中出现 `INSERT INTO / UPDATE / DELETE FROM` 写核心表时，必须说明它是显式清洗计划、事务内计数器、迁移工具还是其他受控入口，并且只能写入该入口批准的表名。否则即使没有调用 `prisma.model.create/update`，也不能通过代码层边界巡检。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断未分类的原生 SQL 主数据读取；应用代码和脚本中出现 `FROM / JOIN` 读取核心表时，也必须说明它是内部巡检、显式清洗、schema readiness、事务内计数器读取或其他受控入口，并且只能读取该入口批准的表名。读旁路和写旁路一样会影响真相源一致性。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断运行时 DDL 和 `$executeRawUnsafe`：普通服务不能再用调用时 `CREATE TABLE IF NOT EXISTS`、`CREATE INDEX IF NOT EXISTS` 或 `ALTER TABLE ADD CONSTRAINT` 补结构，节点权限表这类结构必须由迁移提供；服务层最多做只读 schema readiness 检查并给出明确错误。
+- `scripts/verify-master-data-code-boundaries.js` 还会阻断未分类的服务/仓储层主数据直写；当前 `src/server` 写入口基线为 286 处，未分类为 0。新增 service/repository 文件如果直接写 `Product / ProductSKU / PreSku / AssetVariant / User / EmployeeDirectory / ApprovalWorkflow / Warehouse / Planning` 等地基表，必须先说明它是仓储写入口、服务事务编排、同步入口、初始化入口还是兼容维护入口；已分类文件也只能写入批准模型，避免同一文件里悄悄新增旁路模型。巡检会识别 `client = tx ?? this.prisma` 这类 Prisma client 别名，也会识别 `basicInfo/profile/skuItems/assetProfile` relation 嵌套写入，防止子表结构化副本绕过写入口登记。真相源矩阵声明的写入边界必须存在于同一份批准清单中，而且至少有一个声明入口批准写入对应主表，避免“文档登记了入口、代码巡检没纳管”的假稳定。
+- `scripts/verify-master-data-code-boundaries.js` 的边界规则已有隔离 fixture 防回退测试；新增或重构规则时，测试会确认坏样本确实能被抓住，而不是只验证当前大仓“没有报错”。Prisma JSON 字段分类同时做正反向校验：schema 新增 JSON 字段必须补分类，分类表残留已删除或改名的字段也会失败。原生 SQL 已覆盖“批准文件越权写未批准表”和“批准文件越权读未批准表”的坏样本，运行时 DDL 已覆盖 `$executeRawUnsafe + CREATE TABLE` 坏样本；文件级边界分类同样做存在性反查，分类表残留已删除或改名的文件时巡检会失败。
+- `scripts/verify-master-data-code-boundaries.js --mode compatibility-snapshot-read` 会输出兼容快照直接读点盘点，并按用途打上分类和迁移优先级，帮助后续逐项把仍可迁走的 `attributes / displaySummary / familySelection / payload` 读点替换为结构化字段。当前基线为 42 处：高优先级 0 处、中优先级 32 处、低优先级 10 处，未知优先级 0 处，未分类为 0；按规则分组为 `pre-sku-compatibility-snapshot-direct-read` 11 处、`product-sku-attributes-direct-read` 22 处、`non-integrated-payload-direct-read` 9 处。报告固定输出 `compatibilitySnapshotReadByCategory`、`compatibilitySnapshotReadByRuleId`、`compatibilitySnapshotReadByFile`、`compatibilitySnapshotReadByPriority`、`compatibilitySnapshotReadSummary`、`compatibilitySnapshotReadBlockingRisks`、`compatibilitySnapshotReadBlockingRiskCount`、`unusedCompatibilitySnapshotReadClassifications` 和 `unusedCompatibilitySnapshotReadClassificationCount`，其中高优先级、未分类读点或未使用分类都会使专项模式以非 0 状态退出；`skippedStructuredPayloadReads` 单独列出已被服务端结构化契约兜底的资料库 payload 扩展字段读点，当前为 8 处。
+- `scripts/verify-master-data-code-boundaries.js --mode process-snapshot-read` 会输出准 SKU 过程快照直接读点盘点，并按用途打上分类和优先级。当前基线为 35 处：高优先级 0 处、中优先级 31 处、低优先级 4 处，未知优先级 0 处，未分类为 0；按用途覆盖辅助装配工作区恢复、草稿组只读物料摘要、草稿详情 BOM/安装预览、产品资料只读物料视图、旧产品装配恢复、草稿 DTO 输出、来源规格款 ID 解析和正式入库物料生成。报告固定输出 `processSnapshotReadByCategory`、`processSnapshotReadByRuleId`、`processSnapshotReadByFile`、`processSnapshotReadByPriority`、`processSnapshotReadSummary`、`processSnapshotReadBlockingRisks`、`processSnapshotReadBlockingRiskCount`、`unusedProcessSnapshotReadClassifications` 和 `unusedProcessSnapshotReadClassificationCount`；高优先级、未分类读点或未使用分类都会使专项模式以非 0 状态退出。
+- 草稿组基础资料服务不再从 `PreSku.variantSelection` 过程快照兜底生成型号、规格码、条码、版本号或规格名称；自动建议只来自资产中心结构化快照和安全默认版本号，避免过程快照在基础资料补齐链路里变成第二真相。
+- 草稿组基础资料服务已取消从 `PreSku.displaySummary / familySelection` 自动回填结构化基础资料；当前服务层剩余的 `displaySummary` 读点只用于保存基础资料时清理旧基础资料字段，不参与自动建议、冲突检测或结构化落库。
+- 产品 SKU 普通编辑链路不再提交或接收 `ProductSKU.attributes`；旧属性袋只保留在 DTO 的 `legacyAttributes` 展示、CAD 兼容载荷和受控兼容维护入口里。删除态回收站 DTO 同步使用 `legacyAttributes`，避免前端或外部调用把回收站 `attributes` 误当成正式属性袋。软删除生命周期身份已迁到 `ProductSKU.originalSkuCode / deletedCodeAt / deletedByProductId / productDeletedAt`，迁移会清理旧 JSON 生命周期元数据，数据库约束禁止后续再写回 attributes。
+- 产品级恢复 SKU 时只读取结构化 `ProductSKU.deletedByProductId` 判断是否属于本次产品级联删除；旧 `attributes._deletedByProductId` 只作为清理对象，不再参与恢复归属判断。旧 CAD 兼容字段 `_skuCadData / _cadExcludedHoles / _cadExcludedHolesCount` 已收拢到 `sku-cad-data` helper，页面层不再手写 JSON 属性拆解。
+- 高优先级快照读点已清零。集成草稿转产品资料的 `brand / spuCode / seriesName` 推导已从旧 `displaySummary / familySelection` 收口到 `PreSkuBasicInfo.formalSkuCode` 和草稿组结构化系列字段；旧 SKU 删除/恢复所需的 `attributes` 生命周期证据已集中到 `sku-soft-delete.helper`；旧 SKU 编辑弹窗不再直接读取 `attributes` 作为正式编辑主数据；权限判断也已从旧 payload 人员字段收口到结构化 profile 和明确列。
+- 资产 CAD 导入、资产中心仓储、正式产品/SKU 仓储、基础物料、库位和规划模板查询已同步执行核心身份归一；小写或带首尾空格的手填编码不会先绕过服务查重再依赖数据库约束报错。
+- `scripts/verify-master-data-foundation.js` 会检查 290 个数据库物理护栏，确认结构化主数据不是只有读写代码约定，而是有数据库层唯一性、规范化 check、表达式唯一索引、JSON 形态约束、主数据质量决策审计约束、审批流过程数据约束、人员组织身份约束、正式产品分享/上传/协作者权限约束、旧 CAD 结构约束、基础资料/基材选项/匹配记忆/绑定关系/旧包装方案约束、配置/权限/审计过程数据约束和软删除释放机制兜底。
+- `SpuNumberCounter_productCategory_key / productCategory_normalized_key` 与 `IntakeReferenceLibraryItem_spu_rule_name_non_empty_key / spu_rule_name_normalized_key` 已纳入数据库物理护栏，SPU 正式号段按产品品类一对一锁定计数，且不能用首尾空格或大小写差异制造第二个号池；`SPU_RULE` 的结构化 `code/name` 只描述规则来源和兼容展示，前端缓存不能再作为多人正式占号真相。
+- `/api/intake/spu-reservations` 已阻断单独占号，`spuNumberReservationService` 也只保留事务内分配入口；正式 SPU 号段只能在非集成产品保存事务里推进，避免 API 或服务旁路造成号段游标和产品资料落库不一致。
+- 资料库保存入口要求 `code` 非空，并会把配件、包装材料和字母库兼容 `payload` 中的身份字段同步为结构化 `code/name/letter`；payload 只允许承载扩展资料，不能用旧 `payload.item.code/name/letter` 覆盖数据库列。
+- 当前 advisory 为 0；代码层仍保留本地存储归类硬护栏，任何新增资料库型 `localStorage/sessionStorage` 若未归类或未接入服务端契约，巡检会阻断。
+- `IntakeReferenceLibraryItem` 当前可能为 0 条是预期状态：本轮先建立服务端承接和约束，并已让包装材料、配件、封边、钢架、SPU 规则库和通用字母库组件优先接入服务端保存；历史本地资料不会被静默上传为团队真相。
+
+历史清洗策略：
+
+1. 先保持 payload 原快照，避免破坏历史过程证据。
+2. 以结构化表为后续巡检、外部视图和自动流转判断依据。
+3. 迁移前先跑预检 SQL；如果历史 JSON 已有重复 SKU 或重复条码，必须先清洗，不让迁移静默选边。
+4. 对 `INCOMPLETE` 行补齐 `sku_code / spec_name / model` 后再切换为 `READY`。
+5. 若发现重复 SKU 或重复条码，先合并或废弃历史脏行，再允许进入后续流转。
+6. 清洗必须使用显式计划文件，不允许直接写临时 SQL 猜值；脚本会同步结构化表和 payload 快照，并在事务提交前复用主数据巡检漂移断言；清洗后仍要跑 `npm run db:verify-master-data:all` 验证差异归零。
+7. 清洗计划里的空字符串不会写入结构化主数据；`productDevelopmentKind` 只能填写 `product / series`，不能用临时中文备注或默认值冒充正式开发类型。
+8. 清洗计划会比对模板 `current` 和当前数据库值，过期模板直接失败；只允许补当前仍为空的主数据字段，不能覆盖已存在资料。`--apply` 后仍未补齐的计划项必须显式写明 `allowIncomplete` 和原因，并写入 `MasterDataQualityDecision`；但这只是审计记录，`INCOMPLETE` 仍然不能进入外部 ready 视图或正式流转。
+9. 非集成 SKU 清洗里的 `skuCode / barcode` 写入前统一 `trim + uppercase`，冲突检测统一使用 `upper(btrim(...))`；脚本层语义必须和数据库表达式唯一索引一致，不能把数据库约束当成第一道校验。
+10. 正式 SKU 软删除编码释放已补充单测护栏，重复释放删除态记录时只重建单层 `__deleted__` 墓碑编码，并使用结构化 `originalSkuCode` 作为恢复依据；旧 `_originalSkuCode` 只作为历史回填和清理来源。恢复出的原始 SKU 编码会统一 `trim + uppercase`，释放删除态记录按大小写不敏感匹配。
+11. 正式 SKU 资产 profile 的条码唯一池已绑定 SKU 生命周期：`skuDeletedAt IS NULL` 才参与活动条码唯一约束，删除态 SKU 不再占用活动条码池；恢复时若条码已被其他活动 SKU 使用则阻断。
+12. SKU 墓碑编码构造/解析/事务内释放统一走 `sku-soft-delete.helper`；旧 CAD Product 导入、正式入库和上传链都已接入删除态编码释放，避免兼容入口绕过 SKU 编码池治理。
+
+## 4. 剩余不完整记录
+
+当前脱敏摘要只记录数量：仍有 2 条活动非集成 SKU 明细处于 `INCOMPLETE`。具体产品名、SPU 和行级 ID 只保存在本地 `.master-data-audits/` 敏感报告中，不能写入协作文档或提交 Git。
+
+这些记录缺的是：
+
+- `sku_code`
+- `spec_name`
+- `model`
+
+## 5. 地基判断
+
+这说明当前内部主链不是“全乱”，而是：
+
+- 正式主链已有数据库唯一约束、结构化资产资料副本和巡检项覆盖。
+- 非集成 SKU 主数据已有结构化承接和巡检基线。
+- 真正需要继续收口的是非集成开品里的历史草稿资料完整性。
+- 后续治理重心应该放在“非集成录入链路必填、自动生成、冲突检测、历史脏数据清洗、payload 同步差异归零保持”。
+
+## 6. 规范审查
+
+结论：`passed with warnings`
+
+这是自审，不是独立复审。
+
+- 架构：巡检基线已改为围绕 `IntakeNonIntegratedSkuItem` 结构化承接判断，不改变写入链路。
+- 视觉：本次不涉及前端视觉。
+- 根因：把非集成 SKU 从“payload 里发现问题”推进到“结构化表承接后剩余历史质量状态”。
+- 验证：已用 `npm run db:verify-master-data` 复跑迁移 dry-run，确认结构化 SKU 总数 12、`READY` 10、`INCOMPLETE` 2、重复 SKU/条码 0、payload 同步差异 0。
+- 警告：这是本地开发库基线，不等同于生产库结果；治理清单里的结构迁移必须纳入真实落库验收。生产迁移前仍要先跑预检 SQL、完整 dry-run、真实迁移和 strict 验收，最后还要让 hard-ready 质量债归零。
diff --git a/furniture-3d-system/docs/架构设计/外部只读契约巡检说明.md b/furniture-3d-system/docs/架构设计/外部只读契约巡检说明.md
new file mode 100644
index 00000000..186e9aaf
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/外部只读契约巡检说明.md
@@ -0,0 +1,99 @@
+# 外部只读契约巡检说明
+
+创建时间：2026-05-29
+关联脚本：`scripts/sql/check-external-readonly-contract.sql`
+本地基线：`docs/架构设计/数据库质量巡检基线-20260529.md`
+
+## 1. 目的
+
+外部系统接入前，不能只确认“数据库能连上”。还要确认它只能看到稳定的 `external` 契约层，不能读到内部业务原表、整段 `payload Json`、权限字段或素材内部路径。
+
+这个巡检脚本用于部署后检查：
+
+- `external.*_v1` 视图是否齐全。
+- `external.intake_*_ready_v1` 是否存在，外部稳定消费是否能避开不完整草稿资料。
+- 关键字段是否齐全。
+- 正式 SKU、非集成产品和非集成 SKU 是否都暴露稳定业务键，避免外部系统误用内部技术 ID 做同步身份。
+- `external_reader` 是否被误授权到 `public` schema。
+- `external_reader` 在 `external` schema 下是否只有 `SELECT` 权限。
+- 对外字段里是否混入 `payload`、权限、内部路径、密钥类字段名。
+- `external` 视图定义内部是否仍依赖 `payload / attributes / businessData / displaySummary / familySelection` 等 JSON 快照源。
+- 正式 SKU、资产规格款、非集成 SKU 的关键字段是否存在明显空值。
+- 正式 SKU 和非集成 ready 视图的业务键是否缺失或重复。
+- 正式产品素材和 BOM 明细视图是否携带可关联的稳定业务键。
+- 素材 URL 是否仍有不适合长期对外同步的 `data:` 形态。
+- 非集成 SKU 明细是否已经达到 `READY`，还是仍有 `INCOMPLETE` 草稿数据。
+- 内部主数据巡检还会检查非集成产品 profile 与 `payload/openingReference` 是否漂移；外部视图只读 profile，不能因为 payload 有旧值就让外部系统绕回内部 JSON。
+
+## 2. 运行方式
+
+先执行迁移，创建 `external` schema 和第一版视图。然后在目标数据库中运行：
+
+```bash
+npx prisma db execute --file scripts/sql/check-external-readonly-contract.sql
+```
+
+如果要在生产库执行，先确认当前部署流程已经完成数据库迁移，并且使用的是只读巡检脚本，不要在排查时顺手改业务数据。
+
+## 3. 结果怎么看
+
+下面这些检查结果应该为空：
+
+- `missing_external_view`
+- `missing_external_column`
+- `external_contract_private_column_risk`
+- `external_view_json_source_dependency_risk`
+- `external_reader_public_schema_grant_risk`
+- `external_reader_non_select_grant_risk`
+- `product_assets_data_url_risk`
+- `product_sku_business_key_duplicate_risk`
+- `intake_product_business_key_duplicate_risk`
+- `intake_sku_business_key_duplicate_risk`
+- `product_assets_business_key_missing_risk`
+- `product_bom_business_key_missing_risk`
+
+下面这些检查结果是计数项，不一定要求马上为 0，但要进入数据质量治理台账：
+
+- `product_skus_blank_key_fields`
+- `asset_variants_blank_key_fields`
+- `intake_sku_items_blank_key_fields`
+- `intake_sku_items_quality_status_count`
+- `intake_ready_business_key_missing_risk`
+
+如果关键编码、名称、型号大量为空，说明外部系统虽然能读数据，但读到的是不完整资料，不能直接进入稳定对接阶段。
+
+## 4. 当前边界
+
+这个脚本只做巡检，不创建用户、不授权、不修数据。
+
+发现问题后的处理原则：
+
+- 缺视图或缺字段：先检查迁移是否漏跑，不要让外部系统临时改读业务表。
+- 授权越界：撤回 `public` schema 或非 `SELECT` 权限，再重新执行授权脚本。
+- 私有字段风险：从视图里移除字段，必要时新增白名单字段。
+- 视图 JSON 源依赖风险：先判断该字段是否应该结构化；不能只改外部列名来绕过巡检。
+- 业务键缺失或重复：回到对应真相源修复 `Product.modelNumber / ProductSKU.skuCode / IntakeNonIntegratedProduct.brand+spu / IntakeNonIntegratedSkuItem.skuCode`，不能让外部系统临时用技术 ID 兜底；如果素材或 BOM 明细缺业务键，优先修视图关联链，不要让外部系统自行跨表补。
+- 关键字段为空：回到资产中心、产品资料或非集成录入链路修源数据。
+- `data:` 素材：逐步迁移到文件 URL 或受控下载 API。
+- `INCOMPLETE` 非集成 SKU：外部系统不能自动入库，先由产品资料链路补齐或确认废弃；如果业务确认分阶段补齐，原因只写入 `MasterDataQualityDecision` 做审计，不改变 ready 视图过滤规则。
+- 正式产品视图行数为 0：先判断目标库是否确实尚未产生正式 SKU，不能直接当作视图异常。
+
+当前 `external.intake_products_v1` 必须读取 `IntakeNonIntegratedProductProfile`，`external.intake_sku_items_v1` 必须读取 `IntakeNonIntegratedSkuItem`。如果巡检再次出现 `payload` 或 `jsonb_array_elements` 依赖，优先修外部视图或补结构化承接，不允许让外部系统改读内部 JSON。
+
+内部代码层还要同步跑 `node scripts/verify-master-data-code-boundaries.js --mode compatibility-snapshot-read`。外部视图不依赖 JSON 只能说明“对外出口没有绕回快照”，而专项盘点用于确认内部 DTO、Repository、页面 helper 没有重新把 `attributes / payload / displaySummary / familySelection` 当成主读；高优先级或未分类读点会以阻断风险计数暴露。
+
+`external.intake_products_v1 / external.intake_sku_items_v1` 是完整对账视图，允许暴露 `INCOMPLETE` 状态用于治理；外部系统正式同步优先读取 `external.intake_products_ready_v1 / external.intake_sku_items_ready_v1`，避免把缺品类、缺开发类型或缺 SKU 主字段的数据当作可用商品资料。
+
+`MasterDataQualityDecision` 不对外作为商品资料视图开放；它只是内部审计谁确认了暂不完整、缺哪些字段、为什么允许分阶段清洗。外部系统仍只能把 `READY` 当自动消费前提。
+
+`npm run db:verify-master-data:all` 已把核心外部契约风险纳入硬失败：外部核心视图缺失、外部视图依赖内部 JSON、非集成产品负责人兼容列未优先读取结构化 profile、正式 SKU 视图业务键缺失或重复、正式产品素材/BOM 明细视图业务键缺失、ready SKU 视图混入非 READY 明细、ready 视图业务键缺失或重复时，命令必须失败。独立 SQL 巡检仍保留给人工查库和外部审计使用。
+
+## 5. 规范审查
+
+结论：`passed`
+
+这是自审，不是独立复审。
+
+- 架构：巡检脚本强化了 `external` 契约层，不反向依赖内部原表。
+- 视觉：本次不涉及前端视觉。
+- 根因：把“外部只读是否安全”变成可运行检查，不靠口头约定。
diff --git a/furniture-3d-system/docs/架构设计/外部只读视图字段字典-v1.md b/furniture-3d-system/docs/架构设计/外部只读视图字段字典-v1.md
new file mode 100644
index 00000000..88055166
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/外部只读视图字段字典-v1.md
@@ -0,0 +1,303 @@
+# 外部只读视图字段字典 v1
+
+创建时间：2026-05-29
+关联迁移：
+
+- `prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql`
+- `prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql`
+- `prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql`
+- `prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql`
+- `prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql`
+关联巡检：`scripts/sql/check-external-readonly-contract.sql`
+
+## 1. 使用原则
+
+- 外部系统只读取 `external` schema 下的视图。
+- 外部系统不读取 `public` schema 下的业务原表。
+- `v1` 视图只承诺字段稳定，不承诺内部来源表不变。
+- 素材字段统一输出 URL，不开放服务器文件系统路径。
+- `payload Json` 只做白名单投影，不整体开放。
+
+## 2. 视图清单
+
+| 视图 | 用途 | 主要来源 |
+| --- | --- | --- |
+| `external.product_skus_v1` | 正式产品 SKU 主数据 | `Product`、`ProductSKU`、`ProductSkuAssetProfile`、`ProductCategory`、`WarehouseLocation` |
+| `external.product_assets_v1` | 正式 SKU 图片/模型/缩略图 URL | `ProductSKU.images`、`ProductSKU.modelUrl`、`ProductSkuAssetProfile.imageUrl`、`Product.thumbnailUrl` |
+| `external.product_bom_v1` | 正式产品板件和五金摘要 | `Panel`、`PanelMaterial`、`ProductHardware`、`Hardware` |
+| `external.intake_products_v1` | 非集成开品主信息白名单 | `IntakeNonIntegratedProduct`、`IntakeNonIntegratedProductProfile` |
+| `external.intake_sku_items_v1` | 非集成 SKU 明细白名单 | `IntakeNonIntegratedSkuItem`、`IntakeNonIntegratedProduct` |
+| `external.intake_products_ready_v1` | 非集成开品主信息稳定消费口径 | `external.intake_products_v1` |
+| `external.intake_sku_items_ready_v1` | 非集成 SKU 明细稳定消费口径 | `external.intake_sku_items_v1` |
+| `external.asset_variants_v1` | 资产中心规格款主数据 | `AssetVariant`、`AssetFamily`、`AssetSeries`、`Material` |
+| `external.materials_v1` | 花色/材质基础资料 | `Material`、`MaterialCategory` |
+
+## 3. 正式 SKU：`external.product_skus_v1`
+
+核心用途：给外部系统读取正式商品 SKU。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `product_id` | 正式产品 ID，内部追踪用技术键，不作为外部业务身份 |
+| `product_model_number` | 正式产品型号/SPU |
+| `product_business_key` | 外部稳定产品业务键，规则为正式产品型号/SPU 的规范化大写值 |
+| `product_name` | 产品名称 |
+| `product_category_name` | 产品分类 |
+| `sku_id` | SKU ID，内部追踪用技术键，不作为外部业务身份 |
+| `sku_code` | SKU 编码 |
+| `sku_business_key` | 外部稳定 SKU 业务键，规则为 SKU 编码的规范化大写值 |
+| `sku_name` | SKU 名称，优先来自 `ProductSKU.name` |
+| `price` | 售价 |
+| `cost_price` | 成本价 |
+| `stock` | 库存 |
+| `record_status` | 外部统一状态：`ACTIVE` / `INACTIVE` |
+| `model_url` | SKU 或产品模型 URL |
+| `image_url` | 主图 URL |
+| `image_urls` | SKU 图片 URL 数组 |
+| `source_pre_sku_id` | 来源准 SKU ID |
+| `source_asset_variant_id` | 主来源规格款 ID |
+| `source_asset_variant_ids` | 全部来源规格款 ID |
+| `asset_family_code` | 来源资产族编码 |
+| `spec_code` | 来源规格款编码 |
+| `barcode` | 条码 |
+| `size_json` | 尺寸 JSON |
+| `color` | 颜色/花色 |
+| `material` | 材质 |
+| `source_status` | 来源资产状态 |
+| `synced_at` | 资产资料同步时间 |
+
+注意：
+
+- 该视图过滤已软删除的 `Product` 和 `ProductSKU`。
+- 外部系统读取正式商品资料时优先使用该视图。
+- `product_id / sku_id` 只用于内部追踪和问题定位；外部系统同步、去重和幂等更新必须优先使用 `product_business_key / sku_business_key`。
+- 资产资料字段来自 `ProductSkuAssetProfile`；`assetSkuSnapshot` 只保留为内部兼容快照，不作为该视图主读来源。
+
+## 4. 正式素材：`external.product_assets_v1`
+
+核心用途：给外部系统读取 SKU 图片、模型、缩略图 URL。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `asset_type` | `SKU_IMAGE` / `SKU_MODEL` / `SKU_THUMBNAIL` |
+| `product_id` | 产品 ID，内部追踪用技术键，不作为外部业务身份 |
+| `sku_id` | SKU ID，内部追踪用技术键，不作为外部业务身份 |
+| `product_business_key` | 外部稳定产品业务键，规则为正式产品型号/SPU 的规范化大写值 |
+| `sku_business_key` | 外部稳定 SKU 业务键，规则为 SKU 编码的规范化大写值 |
+| `asset_url` | 可访问素材 URL |
+| `file_name` | 文件名，当前为空，后续可补 |
+| `mime_type` | MIME 类型，当前为空，后续可补 |
+| `sort_order` | 排序 |
+
+注意：
+
+- 该视图只输出 URL，不输出磁盘路径。
+- 外部系统关联素材时必须优先使用 `product_business_key / sku_business_key`，`product_id / sku_id` 仅用于内部追踪。
+- 后续如需要签名 URL，应在 API 层做，不直接改原表。
+
+## 5. 正式 BOM 摘要：`external.product_bom_v1`
+
+核心用途：给外部系统读取正式产品板件和五金摘要。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `item_type` | `PANEL` / `HARDWARE` |
+| `product_id` | 产品 ID，内部追踪用技术键，不作为外部业务身份 |
+| `sku_id` | SKU ID，可为空，内部追踪用技术键，不作为外部业务身份 |
+| `product_business_key` | 外部稳定产品业务键，规则为正式产品型号/SPU 的规范化大写值 |
+| `sku_business_key` | 外部稳定 SKU 业务键；当 BOM 行不绑定 SKU 时可为空 |
+| `item_id` | 物料行 ID |
+| `item_code` | 物料编码 |
+| `item_name` | 物料名称 |
+| `quantity` | 数量，第一版统一为 1 |
+| `unit` | 单位，第一版统一为 `piece` |
+| `material_code` | 板件材质编码 |
+| `material_name` | 板件材质名称 |
+| `dimensions` | 尺寸 JSON |
+| `unit_cost` | 单价，第一版为空 |
+| `total_cost` | 总价，第一版为空 |
+
+注意：
+
+- 第一版重点是结构稳定，成本口径后续单独治理。
+- 外部系统关联 BOM 时必须优先使用 `product_business_key / sku_business_key`，`product_id / sku_id` 仅用于内部追踪。
+- 孔位数据暂不进入普通 BOM 视图，避免把制造/3D 数据混进商品资料。
+
+## 6. 非集成开品主信息：`external.intake_products_v1`
+
+核心用途：给外部系统读取非集成开品主信息。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `intake_product_id` | 非集成产品记录 ID，内部追踪用技术键，不作为外部业务身份 |
+| `spu` | 产品编码 |
+| `spu_base` | 基础编码 |
+| `brand` | 品牌 |
+| `product_business_key` | 外部稳定产品业务键，规则为 `品牌:SPU` 的规范化大写组合 |
+| `product_name` | 产品名称 |
+| `product_image_url` | 产品主图 URL |
+| `product_category` | 产品品类 |
+| `sales_category` | 销售分类 |
+| `product_year` | 年份 |
+| `product_status` | 产品阶段/状态 |
+| `designer` | 设计负责人 |
+| `operator` | 运营负责人 |
+| `purchaser` | 采购负责人 |
+| `product_planning` | 商品企划负责人 |
+| `visual_planning` | 空间/视觉负责人 |
+| `structure_designer` | 结构设计负责人 |
+| `purchase_owner` | 采购负责人结构化字段 |
+| `product_development_kind` | 开发类型 |
+| `goods_type` | 商品类型 |
+| `material_type` | 材料类型 |
+| `production_type` | 生产类型 |
+
+注意：
+
+- 该视图过滤已软删除记录。
+- 产品名称、图片、品类、年份、状态、开发类型、货品类型、材质类型、生产类型和结构化负责人字段来自 `IntakeNonIntegratedProductProfile`，不再直接读取 `payload`。
+- `designer / operator / purchaser` 是兼容列，优先输出 profile 中的结构设计、商品企划、采购负责人；旧产品行列只作为兼容兜底。
+- `intake_product_id` 只用于内部追踪和问题定位；外部系统同步、去重和幂等更新必须优先使用 `product_business_key`。
+- 不开放 `visibility`、`departmentId`、`teamId`、审批状态、内部确认状态。
+- `external.intake_products_ready_v1` 使用同一字段结构，但只保留产品名称、品类、开发类型和 `product_business_key` 都已补齐的记录。外部系统做稳定同步时优先读取 ready 视图；`intake_products_v1` 用于治理对账和人工补齐。
+
+## 7. 非集成 SKU 明细：`external.intake_sku_items_v1`
+
+核心用途：给外部系统读取非集成开品中的 SKU 明细。
+
+主数据来源：
+
+- 第一来源是 `IntakeNonIntegratedSkuItem` 结构化表。
+- `IntakeNonIntegratedProduct.payload.skuItems` 只保留为历史过程快照和同步校验来源，不再作为外部只读视图的直接主数据源。
+- 结构化表通过 `productId` 关联非集成开品主记录，通过 `skuItemId` 保留原 SKU 明细身份。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `intake_product_id` | 非集成产品记录 ID，内部追踪用技术键，不作为外部业务身份 |
+| `spu` | 产品编码 |
+| `brand` | 品牌 |
+| `product_business_key` | 外部稳定产品业务键，规则为 `品牌:SPU` 的规范化大写组合 |
+| `intake_sku_item_id` | SKU 明细 ID，内部追踪用技术键，不作为外部业务身份 |
+| `sku_business_key` | 外部稳定 SKU 业务键，规则为 `品牌:SPU:SKU编码` 的规范化大写组合 |
+| `sku_sequence` | SKU 序号 |
+| `batch_no` | 批次号 |
+| `image_url` | SKU 图片 |
+| `image_name` | SKU 图片文件名/显示名 |
+| `model` | 型号 |
+| `sku_code` | SKU 编码 |
+| `spec_name` | 规格名称 |
+| `barcode` | 条码 |
+| `size` | 尺寸 |
+| `color` | 颜色/花色 |
+| `material` | 材质 |
+| `version_no` | 版本号 |
+| `attribute_code` | 属性编码 |
+| `drawing_id` | 图纸 ID |
+| `install_method` | 安装方式 |
+| `execute_standard` | 执行标准 |
+| `manufacturer` | 供应商/厂家 |
+| `manufacturer_code` | 供应商/厂家编码 |
+| `sales_status` | 销售状态 |
+| `model_3d_url` | 3D 模型 URL |
+| `source` | 来源说明 |
+| `source_table` | 来源表或来源系统 |
+| `source_sku_id` | 来源 SKU ID |
+| `missing_required_fields` | 缺失的关键字段数组 |
+| `data_quality_status` | 数据质量状态：`READY` / `INCOMPLETE` |
+| `content_locked` | 内容是否锁定 |
+| `sort_order` | 展示顺序 |
+
+注意：
+
+- 数字字段做了安全转换，脏数据不会导致视图报错。
+- `payload.skuItems` 之外的流程字段不开放；结构化表之外的内部流程字段也不开放。
+- `intake_product_id / intake_sku_item_id` 只用于内部追踪和问题定位；外部系统同步、去重和幂等更新必须优先使用 `product_business_key / sku_business_key`。
+- 非空 `sku_code` 和非空 `barcode` 由内部结构化表做唯一性治理，外部系统仍应把重复巡检结果作为接入前置风险信号。
+- `data_quality_status = INCOMPLETE` 的 SKU 明细不能当作完整产品资料交给外部系统自动入库。
+- `missing_required_fields` 当前至少覆盖 `sku_code / spec_name / model`，后续如提高必填基线，需要同步更新字段字典和巡检脚本。
+- 内部正式流转入口也按同一质量规则拦截，例如产品定厂合同生成会拒绝目标批次内的 `INCOMPLETE` SKU；外部系统接入时必须把 `data_quality_status = READY` 作为自动入库或自动合同流转的前置条件。
+- `external.intake_sku_items_ready_v1` 使用同一字段结构，但只保留 `data_quality_status = READY` 且 `sku_business_key` 已补齐的 SKU 明细，并要求所属产品同时存在于 `external.intake_products_ready_v1`。外部系统做自动同步时优先读取 ready 视图；完整视图只用于治理对账和人工补齐。
+
+## 8. 资产规格款：`external.asset_variants_v1`
+
+核心用途：给外部系统读取资产中心规格款。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `asset_variant_id` | 规格款 ID |
+| `spec_code` | 规格款编码 |
+| `spec_name` | 规格款名称 |
+| `asset_type` | 资产类型 |
+| `asset_status` | 资产状态 |
+| `asset_family_code` | 资产族编码 |
+| `asset_series_code` | 系列编码 |
+| `product_category_name` | 产品分类 |
+| `dimensions` | 尺寸 JSON |
+| `model_url` | 模型 URL |
+| `thumbnail_url` | 缩略图 URL |
+| `barcode` | 条码 |
+| `supplier_name` | 供应商 |
+| `supplier_code` | 供应商编码 |
+| `version_no` | 版本号 |
+| `finish_code` | 花色编码 |
+| `finish_name` | 花色名称 |
+| `material_label` | 材质显示名 |
+| `weight_kg` | 重量 |
+| `cost_price` | 成本 |
+| `estimated_cost_price` | 预估成本 |
+
+注意：
+
+- 过滤已软删除规格款。
+- 第一版不过滤 `asset_status`，外部系统可按 `asset_status` 判断；如后续只开放可用资产，可改为只输出 `AVAILABLE`。
+
+## 9. 花色/材质：`external.materials_v1`
+
+核心用途：给外部系统读取花色/材质基础资料。
+
+关键字段：
+
+| 字段 | 含义 |
+| --- | --- |
+| `material_id` | 材质 ID |
+| `material_code` | 花色/材质编码 |
+| `material_name` | 名称 |
+| `category_name` | 分类 |
+| `thumbnail_url` | 缩略图 |
+| `texture_url` | 纹理贴图 |
+| `normal_map_url` | 法线贴图 |
+| `base_color` | 基础颜色 |
+| `metalness` | 金属度 |
+| `roughness` | 粗糙度 |
+| `opacity` | 透明度 |
+| `record_status` | `ACTIVE` / `INACTIVE` |
+
+## 10. 版本策略
+
+- `v1` 字段上线后，不做破坏性改名。
+- 新增字段可以加在 `v1`。
+- 删除字段、改变含义、改变主键口径时，新增 `v2`。
+- 外部系统迁移完成前，保留旧版本视图。
+- 每次调整 `external.*_v1` 字段后，同步更新字段字典和巡检脚本的必需字段清单。
+
+## 11. 规范审查
+
+结论：`passed`
+
+这是自审，不是独立复审。
+
+- 架构：字段字典对应 `external` 只读视图，不鼓励外部系统读业务原表。
+- 视觉：本次不涉及前端视觉。
+- 根因：从数据契约层隔离内部混乱，不再靠口头约定避免误读。
diff --git a/furniture-3d-system/docs/架构设计/数据库主数据治理与外部只读契约.md b/furniture-3d-system/docs/架构设计/数据库主数据治理与外部只读契约.md
new file mode 100644
index 00000000..46b1eec1
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/数据库主数据治理与外部只读契约.md
@@ -0,0 +1,315 @@
+# 数据库主数据治理与外部只读契约
+
+创建时间：2026-05-29
+适用范围：`furniture-3d-system` 主业务数据库、产品资料链路、外部系统只读接入。
+
+配套文档：
+
+- `docs/架构设计/外部只读视图字段字典-v1.md`
+- `docs/架构设计/外部只读契约巡检说明.md`
+- `docs/架构设计/数据库质量巡检基线-20260529.md`
+- `docs/架构设计/内部主数据地基治理方案.md`
+- `docs/架构设计/内部主数据巡检基线-20260529.md`
+- `scripts/sql/grant-external-readonly.sql`
+- `scripts/sql/preflight-intake-non-integrated-sku-items.sql`
+- `scripts/sql/check-external-readonly-contract.sql`
+- `scripts/sql/check-internal-master-data-foundation.sql`
+- `scripts/verify-master-data-foundation.js`
+
+## 1. 结论
+
+多个外部系统会依赖本系统数据库时，不能直接开放业务原表。本系统必须先把内部主数据真相源梳理清楚，再通过稳定的外部契约层对外开放。
+
+固定原则：
+
+- PostgreSQL 是本系统主业务数据库。
+- 数据库保存业务数据、文件 URL、对象 key、元数据；图片、模型、附件等素材本体不直接存入数据库。
+- 外部系统只能读专用只读契约层，不能直接读 `ProductSKU`、`IntakeNonIntegratedProduct.payload` 等业务原表。
+- 外部系统同步、去重和幂等更新必须优先使用契约层里的稳定业务键，不能把内部 `id / product_id / sku_id / intake_product_id / intake_sku_item_id` 当业务身份。
+- 内部业务表允许随系统演进调整；外部契约必须版本化、稳定、可追溯。
+- 对外开放字段必须白名单化，默认不开放内部流程、权限、草稿、审批、临时 UI 状态。
+
+## 2. 当前数据库与素材现状
+
+### 2.1 主业务库
+
+当前 Prisma datasource 使用 `postgresql`。项目运行时通过 `@prisma/adapter-pg` 和 `pg` 连接池访问 PostgreSQL。
+
+`mysql2` 只用于 JST/聚水潭等外部库读取同步，例如 SKU 库存、供应商和仓库目录读取。它不是本项目主业务库。外部 MySQL 同步写入本系统前必须先确认来源库身份和目标 PostgreSQL 身份，不能把 MySQL 当作第二套内部主数据真相。
+
+### 2.2 素材存放
+
+数据和素材是分开存放的。
+
+当前主要形态：
+
+- 业务表中保存 `modelUrl`、`thumbnailUrl`、`images`、`fileUrl`、`storageKey` 等引用。
+- 非集成产品附件默认存放在 `.data/non-integrated-assets`，通过 `/api/intake/non-integrated/assets/...` 受权限控制读取。
+- 旧附件可能仍在 `public/non-integrated-test-assets`。
+- 资产缩略图、AI 生图等服务可通过 S3/MinIO 工具链上传，并在数据库保存公开 URL。
+
+外部系统不应拿服务器文件系统权限。正确方式是读取数据库契约层里的 URL，再通过受控 HTTP 地址访问素材。
+
+## 3. 主链数据真相源
+
+### 3.1 资产中心
+
+资产中心负责资产源数据。
+
+| 数据对象 | 当前主表 | 真相源定位 | 对外开放建议 |
+| --- | --- | --- | --- |
+| 系列 | `AssetSeries` | 资产系列主数据 | 可开放编码、名称、分类、启用状态 |
+| 资产族 | `AssetFamily` | 同系列下的资产族主数据 | 可开放编码、名称、类型、系列归属、状态 |
+| 规格款 | `AssetVariant` | 具体可调用资产规格 | 可开放编码、名称、条码、尺寸、颜色、材质、图片、模型、重量、成本 |
+| 花色/材质 | `Material` | 板材花色和材质配置 | 可开放编码、名称、贴图/缩略图、PBR 参数中的必要字段 |
+| 五金件 | `Hardware` | 标准五金主数据 | 可开放编码、名称、分类、规格、模型、缩略图、尺寸 |
+
+注意：
+
+- `AssetVariant` 是资产中心里最接近后续 SKU 资料来源的结构化表。
+- `AssetVariant.businessData`、`assemblyBasis`、`compatibilityRules` 等 JSON 字段不能整体对外开放，需要按字段白名单投影。
+- 已删除、草稿、审核中资产不能默认对外开放，必须按状态过滤。
+
+### 3.2 辅助装配与草稿组
+
+辅助装配结果进入草稿组。草稿组是正式入库前的承接层，不是最终正式产品真相。
+
+| 数据对象 | 当前主表 | 真相源定位 | 对外开放建议 |
+| --- | --- | --- | --- |
+| 草稿组 | `DraftGroup` | 一次辅助装配结果集合 | 默认不作为外部主数据，可按内部管理需要开放只读摘要 |
+| 准 SKU | `PreSku` | 入库前的准 SKU 快照 | 默认不直接对外开放；正式入库后以 `ProductSKU` 为准 |
+| 准 SKU 包装 | `PreSkuPackagingPlan` | 入库前包装草案 | 默认不直接对外开放；正式化后再进入正式产品/轻仓库契约 |
+
+注意：
+
+- `PreSku.familySelection`、`variantSelection`、`displaySummary`、`bomPreview`、`packagingSnapshot` 都是 JSON 快照，适合内部承接，不适合原样对外。
+- 外部系统如果需要看“待入库草稿”，应单独设计 `external.draft_pre_skus_v1`，并明确它不是正式商品资料。
+
+### 3.3 正式产品资料
+
+正式产品资料以 `Product` 和 `ProductSKU` 为核心。
+
+| 数据对象 | 当前主表 | 真相源定位 | 对外开放建议 |
+| --- | --- | --- | --- |
+| 正式 SPU/型号 | `Product` | 正式产品型号主数据 | 可开放型号、名称、分类、缩略图、模型、状态 |
+| 正式 SKU | `ProductSKU` | 正式产品 SKU 主数据 | 必须作为外部产品资料的核心出口；`skuCode / name` 为结构化主字段 |
+| 正式 SKU 资产资料副本 | `ProductSkuAssetProfile` | 正式 SKU 对资产中心资料的结构化同步副本 | 开放型号、规格码、条码、尺寸、颜色、材质、图片、来源状态 |
+| SKU 板件 | `Panel` | SKU/产品结构件 | 需要时开放结构件编号、名称、尺寸、材质摘要 |
+| SKU 孔位 | `Hole` | SKU/产品孔位结构 | 仅向需要 3D/制造数据的系统开放，不作为普通商品资料 |
+| SKU 五金 | `ProductHardware` | SKU/产品五金用量和位置 | 可按 BOM 需求开放编码、数量、安装关系摘要 |
+| 包装方案 | `PackagingPlan` / `PackagedItem` | 正式包装与库存承接 | 需单独按轻仓库口径整理 |
+
+`ProductSkuAssetProfile` 保存正式 SKU 的资产资料同步副本，包括资产来源 ID、型号、规格码、条码、尺寸、颜色、材质、图片、来源状态等。`ProductSKU.attributes.assetSkuSnapshot` 仅作为兼容快照保留，不能再作为正式商品资料的主读真相。
+
+代码层边界由 `npm run db:verify-master-data:code` 和 `node scripts/verify-master-data-code-boundaries.js --mode compatibility-snapshot-read` 共同兜底：正式 SKU 的 `attributes`、准 SKU 的 `displaySummary / familySelection`、非集成产品的 `payload` 只能留在已分类的兼容、迁移或过程入口里；高优先级或未分类读点会进入阻断风险，不能作为对外契约或内部主读的依据。
+
+普通正式 SKU 的创建、CAD 导入、产品上传和编辑链路必须写入 `ProductSKU.name`。`attributes.skuName` 只允许作为兼容输入或历史兜底；对外视图、DTO 和轻仓库概览优先读取 `ProductSKU.name`。
+
+外部正式产品契约统一携带稳定业务键：
+
+- `external.product_skus_v1.product_business_key` 来自 `Product.modelNumber` 的规范化大写值。
+- `external.product_skus_v1.sku_business_key` 来自 `ProductSKU.skuCode` 的规范化大写值。
+- `external.product_assets_v1` 和 `external.product_bom_v1` 也必须携带同一套业务键，避免外部系统为了关联素材或 BOM 被迫使用内部技术 ID。
+
+### 3.4 非集成开品资料
+
+非集成开品数据集中在 `IntakeNonIntegratedProduct`。
+
+| 字段 | 定位 |
+| --- | --- |
+| `id` | 内部产品记录 ID |
+| `spu` / `spuBase` | 产品编码和基础编码 |
+| `brand` | 品牌 |
+| `designer` / `operator` / `purchaser` | 人员字段 |
+| `visibility` / `departmentId` / `teamId` | 权限范围 |
+| `payload` | 大型业务资料快照 |
+
+`payload` 包含 SKU、附件、BOM、空间布局、审批状态、文档工作区、权限确认、临时 UI 状态等大量内容。它是当前最大风险点，不能直接开放给外部系统。
+
+当前治理口径：
+
+- `IntakeNonIntegratedSkuItem` 是非集成 SKU 明细的结构化承接表。
+- `payload.skuItems` 作为历史过程快照保留，用于同步差异巡检，不作为对外主数据来源。
+- `IntakeNonIntegratedProductProfile` 承接产品名称、主图、品类、销售分类、年份、状态、开发类型、货品类型、材质类型、生产类型、主要负责人等产品头主数据。
+- `external.intake_products_v1` 读取 `IntakeNonIntegratedProductProfile`，不再直接从 `payload` / `openingReference` 读取产品头主数据。
+- `external.intake_products_v1 / external.intake_sku_items_v1` 显式输出稳定业务键：`product_business_key = 品牌:SPU`，`sku_business_key = 品牌:SPU:SKU编码`；ready 视图会要求业务键非空。
+- 非空 `skuCode / barcode` 由数据库唯一索引兜底。
+- 软删除非集成产品时，后端和数据库触发器都会清理结构化 SKU 明细，避免已删除记录占用编码池。
+
+非集成对外只能做白名单投影，例如：
+
+- 产品基础：`spu`、品牌、产品名称、品类、年份、负责人、状态。
+- SKU 明细：图片、型号、SKU 编码、规格名称、条码、尺寸、颜色、材质、版本号、供应商、成本等。
+- BOM 摘要：只开放已确认的物料编码、名称、规格、数量、单位、成本字段。
+- 素材：只开放可访问 URL、文件名、类型、大小，不开放内部路径和权限状态。
+
+## 4. 当前主要风险
+
+### 风险 1：结构化表和 JSON payload 并存
+
+正式产品链较结构化，非集成开品链大量依赖 `payload Json`。这不是马上不可用，但对外开放时风险很高。
+
+治理要求：
+
+- 外部系统不得直接读取整段 `payload`。
+- 必须先沉淀白名单字段。
+- 高频外部依赖字段应逐步从 `payload` 治理为结构化列或稳定视图字段。
+
+### 风险 2：同一业务概念存在多个位置
+
+图片、型号、规格码、条码、尺寸、颜色、材质可能同时出现在资产中心、草稿准 SKU、正式 SKU 快照、非集成 payload 中。
+
+治理要求：
+
+- 资产源数据以 `AssetVariant` 为准。
+- 草稿准 SKU 基础资料以 `PreSkuBasicInfo` 为准，`displaySummary` 只是展示兼容快照。
+- 正式产品对外以 `ProductSKU` 的结构化字段和 `ProductSkuAssetProfile` 副本为准。
+- 非集成开品对外以 `IntakeNonIntegratedProductProfile` 和 `IntakeNonIntegratedSkuItem` 的白名单投影结果为准。
+- 页面展示字段不能反过来成为外部系统真相源。
+- 内部兼容快照读点必须持续通过 `compatibility-snapshot-read` 专项盘点，确保新增 DTO、Repository 或页面 helper 不会绕开结构化字段重新读取 JSON 快照。
+
+### 风险 3：内部流程字段泄露
+
+`payload` 内含审批、确认、上传、文档工作区、权限相关状态。直接开放会把内部流程暴露给外部系统。
+
+治理要求：
+
+- 外部契约层默认排除权限、审批、草稿、删除、锁定原因、内部人员 ID 等字段。
+- 需要开放状态时，只开放业务状态摘要，例如 `source_status`、`product_status`、`sku_status`。
+
+### 风险 4：素材 URL 混合来源
+
+当前素材来源可能是 S3/MinIO URL、内部 API URL、旧 public 路径或历史 data URL。
+
+治理要求：
+
+- 外部契约层输出统一的 `asset_url` 字段。
+- 内部路径、`storageKey` 默认不对外开放；如外部系统确需同步文件，可单独开放 `asset_key`，并配合签名 URL 或下载 API。
+- 历史 data URL 需要逐步迁移成文件 URL。
+
+### 风险 5：外部系统直接绑定内部表结构
+
+如果直接给外部系统 `SELECT` 原始表，一旦内部迁移字段、改 JSON 结构或拆表，外部系统会一起故障。
+
+治理要求：
+
+- 新建独立 `external` schema。
+- 所有外部读取只走 `external.*_v1` 视图或后端只读 API。
+- 重大变更新增 `v2`，保留 `v1` 兼容窗口。
+
+## 5. 外部只读契约层建议
+
+推荐 PostgreSQL 中新增独立 schema：
+
+```sql
+CREATE SCHEMA IF NOT EXISTS external;
+```
+
+第一批建议视图：
+
+| 视图 | 用途 |
+| --- | --- |
+| `external.product_skus_v1` | 正式产品 SKU 主数据 |
+| `external.product_assets_v1` | SKU 图片、模型、资产来源、素材引用 |
+| `external.product_bom_v1` | 正式 SKU 的板材、组件、五金摘要 |
+| `external.intake_products_v1` | 非集成开品主信息白名单 |
+| `external.intake_sku_items_v1` | 非集成 SKU 明细白名单 |
+| `external.materials_v1` | 花色/材质基础资料 |
+| `external.asset_variants_v1` | 可被正式产品引用的资产规格款 |
+
+契约层允许保留内部技术 ID 作为追踪字段，但外部业务关联必须优先使用 `product_business_key / sku_business_key` 等稳定业务键。独立 SQL 巡检和 `npm run db:verify-master-data:all` 都会检查核心外部视图的业务键缺失或重复风险。
+
+只读账号授权原则：
+
+```sql
+GRANT USAGE ON SCHEMA external TO external_reader;
+GRANT SELECT ON ALL TABLES IN SCHEMA external TO external_reader;
+ALTER DEFAULT PRIVILEGES IN SCHEMA external
+GRANT SELECT ON TABLES TO external_reader;
+```
+
+禁止：
+
+- 给外部账号授权 `public` schema 全表读取。
+- 给外部账号授权业务原表。
+- 给外部账号写权限。
+- 把数据库超级用户、应用用户连接串给外部系统。
+
+## 6. 治理优先级
+
+### P0：先定契约，不先大改表
+
+先完成数据字典和视图草案。不要在真相源没定前重构所有表。
+
+产出：
+
+- 核心表职责清单。
+- 对外字段白名单。
+- 第一版 `external` 视图 SQL 草案。
+- 只读账号权限方案。
+
+### P1：正式产品链结构化稳定
+
+把外部系统最需要的数据优先从 `Product / ProductSKU / AssetVariant / Material / Hardware` 组合成稳定视图。
+
+重点字段：
+
+- SPU/型号、SKU 编码、规格名称、规格码、条码。
+- 图片、3D 模型。
+- 尺寸、颜色、材质。
+- 重量、成本、供应商。
+- 来源资产 ID、来源状态、同步时间。
+
+### P2：非集成 payload 白名单投影
+
+只对外投影确认后的产品资料和 SKU 明细。不要把 `payload` 的流程数据整体暴露。
+
+重点字段：
+
+- `openingReference` 中的产品基础资料。
+- `skuItems` 中的 SKU 明细。
+- 已确认 BOM 摘要。
+- 附件 URL 摘要。
+
+### P3：逐步治理高频字段
+
+如果某些字段长期被多个系统依赖，就不应该永远藏在 JSON 里。后续应逐步结构化。
+
+候选字段：
+
+- 产品正式编码。
+- SKU 条码。
+- 规格码和版本号。
+- 主图 URL。
+- 材质、颜色、尺寸。
+- 供应商编码。
+- 成本、重量。
+
+## 7. 当前不建议做的事
+
+- 不建议马上把所有 JSON 字段拆表，成本高且容易影响现有业务。
+- 不建议直接让外部系统读 `IntakeNonIntegratedProduct.payload`。
+- 不建议把素材二进制塞进 PostgreSQL。
+- 不建议通过共享应用数据库账号解决只读需求。
+- 不建议先开放再补契约文档。
+
+## 8. 下一步执行清单
+
+1. 输出第一版外部字段字典。
+2. 写并迁移 `external.product_skus_v1 / product_assets_v1 / product_bom_v1 / intake_products_v1 / intake_sku_items_v1` 等 SQL 视图。
+3. 在测试库验证视图字段、稳定业务键和样例数据。
+4. 建只读账号权限脚本。
+5. 明确素材访问方式：公开 URL、登录态 API、签名 URL 三选一。
+6. 和外部系统确认字段命名、增量同步方式、删除/失效状态口径。
+7. 再决定是否把高频 JSON 字段结构化。
+8. 部署后运行 `scripts/sql/check-external-readonly-contract.sql`，确认视图、字段、授权和关键数据质量。
+
+## 9. 规范审查
+
+结论：`passed`
+
+这是自审，不是独立复审。
+
+- 架构：文档明确了主数据真相源、外部契约层和只读账号边界，没有破坏现有分层。
+- 视觉：本次不涉及前端视觉。
+- 根因：没有用“直接开放表权限”做表面处理，而是先治理内部数据库地基和对外契约。
diff --git a/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md b/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
new file mode 100644
index 00000000..0834c7f8
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
@@ -0,0 +1,545 @@
+# 数据库混乱点治理台账
+
+创建时间：2026-05-29
+关联文档：`docs/架构设计/数据库主数据治理与外部只读契约.md`
+
+配套巡检：`scripts/sql/check-external-readonly-contract.sql`、`scripts/sql/check-internal-master-data-foundation.sql`
+内部基线：`docs/架构设计/内部主数据巡检基线-20260529.md`
+
+## 1. 总体判断
+
+当前数据库是中度混乱，不是不可用，也不是必须立刻推倒重来。
+
+这里的“中度混乱”指：
+
+- 主业务库类型清楚，PostgreSQL 是唯一主业务库。
+- 核心主链能跑通：资产中心 -> 辅助装配 -> 草稿组 -> 产品资料 -> 轻仓库。
+- 但多个历史阶段的数据模型并存，同一业务概念可能存在多个位置。
+- 有些高价值字段仍在 JSON 快照中，不适合长期作为外部系统依赖。
+- 素材引用存在多种形态，需要统一输出口径。
+
+治理目标不是马上大拆表，而是先把真相源、字段归属和外部契约层定住，再逐步把高频字段结构化。
+
+内部地基巡检必须先跑 `check-internal-master-data-foundation.sql`，再看外部契约层。外部只读是结果，不能代替内部治理。
+
+## 2. 混乱等级
+
+| 等级 | 含义 | 当前是否存在 | 处理原则 |
+| --- | --- | --- | --- |
+| L1 轻微 | 命名不一致、少量历史字段 | 存在 | 文档约束，后续顺手收口 |
+| L2 中度 | 多条业务链并存、JSON 快照承载关键字段 | 存在 | 建契约层，逐步结构化 |
+| L3 严重 | 主数据真相不清，业务无法判断该读哪张表 | 局部存在 | 先定真相源，再改代码 |
+| L4 危险 | 外部系统直接依赖内部原表，导致无法演进 | 暂未正式开放前可避免 | 禁止直接开放原表 |
+
+当前整体处于 L2，局部字段处于 L3。只要外部系统接入前先完成契约层，并让真实数据库迁移通过 strict 验收，就能避免滑向 L4。
+
+截至当前治理轮次，混乱已经不再主要表现为“没人知道该读哪里”，而是集中在两类可验证剩余项：一是治理清单里的结构迁移需要真实落库验收，二是 2 条历史 SKU 明细仍需业务确认后显式清洗。分阶段清洗原因已新增 `MasterDataQualityDecision` 作为数据库审计表，但它不改变 `INCOMPLETE` 的 hard blocker 语义。治理迁移目录已经纳入自检，新增或调整迁移必须登记在 `scripts/master-data-required-migrations.js`，并通过 path、顺序、目标 relation、SQL 引用和执行后目标存在性校验；当前治理窗口内新增外部 v1 视图、约束、唯一索引或触发器时，测试会反查是否进入该目录，`alwaysApply` 中出现 DML 也必须显式分类。迁移链已新增 shadow 重放对齐证据：`migrationSchemaDiff.status = 0` 代表 migrations 能从空库重放到当前 `schema.prisma`，但当前目标库仍缺 `_prisma_migrations`，不能直接 `prisma migrate deploy`。readiness 现在会把当前库/schema diff 的前几条 DDL、pending Prisma migration 名单、缺迁移历史的正确施工顺序，以及历史质量债样本直接写入 blocker evidence，避免只看到数量却无法施工；同时输出 `nextActionPlan`，按结构/迁移历史、治理护栏、历史字段清洗、准 SKU 生命周期错位四段排好后续动作。批次审计 `manifest.json` 也会写入脱敏 `readinessSummary`，方便不打开敏感子报告也能看到下一步顺序。本轮已用 Docker 生成并校验本地备份 `.database-backups/furniture_3d-20260531T232931Z.dump`，克隆库复现 `P3005`，并通过 `foundation-audit-current-goal/structure-repair-rehearsal.json` 演练证明：非破坏性结构修复 SQL 可让 current schema diff 和 migration diff 归零，86 条 baseline resolve 可在克隆库全量成功；同批 `baseline-repair-plan.json` 已输出 `ready-for-authorized-structure-repair`，并记录 SQL artifact 大小 17304 字节、SHA-256 `f569af9e2cf8c26e3e0e007217b9187e3d30a20aaa3dac3c5cd1db843ade6f28`。新增 `authorized-structure-repair-apply-plan.json` 和 `scripts/apply-prisma-structure-repair.js` 后，真实结构施工不再靠手工复制 `psql`/`migrate resolve`，而是先校验 preflight、演练报告、SQL 大小/SHA-256、SQL 本体安全、目标库身份、备份文件 SHA-256、报告新鲜度和 baseline migration 数，再分 `apply-structure` 与 `resolve-baseline` 两阶段执行。新增 `foundation-required-migration-apply-plan.json` 明确把治理护栏应用从 `migrate deploy` 中拆开：当前真实库因 `_prisma_migrations` 不存在且仍有结构迁移未就绪，`readyToApply = false`；只有结构修复和 baseline resolve 完成后，才允许用 `apply-master-data-foundation-migrations` 的确认口令事务性应用治理视图/约束/触发器。但真实库执行前仍必须重新生成备份、preflight、结构修复计划并取得明确授权，并且真实执行命令必须显式带上目标库身份和备份 SHA-256。当前克隆库结构修复演练已通过，说明结构缺口和迁移历史缺口有可重复修复路径，但这仍不等于真实库已经 hard ready。
+
+## 3. 治理台账
+
+### DB-001：正式产品链和非集成开品链并存
+
+现象：
+
+- `Product / ProductSKU` 是正式产品结构化链。
+- `IntakeNonIntegratedProduct` 是非集成开品链，核心资料大量放在 `payload Json`。
+- `/intake` 页面同时承接草稿组、正式入库和非集成开品资料。
+
+根因：
+
+- 系统从旧 Product-SKU 结构、新平台资产链、非集成开品流程逐步演进而来。
+- 新旧业务不是同一时间设计完成，导致数据形态并存。
+
+风险：
+
+- 外部系统不知道正式产品该读 `ProductSKU`，还是读 `IntakeNonIntegratedProduct.payload`。
+- 内部页面字段容易被误认为数据库真相。
+
+治理动作：
+
+- 明确正式商品对外以 `ProductSKU` 为核心，SKU 名称读 `ProductSKU.name`，资产资料读 `ProductSkuAssetProfile`。
+- 已补齐普通 SKU 创建、CAD 导入、产品上传、编辑、DTO 和轻仓库概览链路的 `ProductSKU.name` 读写，避免继续把 `attributes.skuName` 当主数据。
+- 非集成开品只作为开发过程和产品资料整理链，必须通过白名单视图对外。
+- 非集成产品头字段已新增 `IntakeNonIntegratedProductProfile` 结构化承接，`external.intake_products_v1` 改为读取 profile，不再直接从 `payload` 取产品头主数据；负责人字段优先输出 profile，旧产品列只作为兼容兜底。
+- 非集成 SKU 明细已新增 `IntakeNonIntegratedSkuItem` 结构化承接，`external.intake_sku_items_v1` 改为读取结构化明细表，不再从 `payload.skuItems` 拆字段给外部系统。
+- 审批流产品标题、主图和检索已优先读取 `IntakeNonIntegratedProductProfile`，避免业务协作页面继续把 `payload.openingReference` 当主数据真相。
+- 审批流 DTO 的产品型号/名称/主图已固定为结构化 `IntakeNonIntegratedProduct.spu` 和 `IntakeNonIntegratedProductProfile` 优先；旧 `payload.openingReference` 只保留为开品说明、临时代码和历史参考图兜底。
+- 审批流访问权限已收口为只读结构化 `ApprovalWorkflow.businessRoles / participantUserIds`；`fieldMatrix` 继续作为字段责任矩阵，但不能在业务角色为空时反推流程可见范围。
+- 非集成产品列表和详情已用结构化 `profile/skuItems` 覆盖 `payload` 还原值；开发类型、负责人和待办筛选也已改为 profile 优先，旧 `payload` 只有在 profile 缺失时作为历史兜底；`payload` 继续承载工作区草稿和未结构化过程资料，但不再主导产品头和 SKU 主字段。
+- 外部非集成产品和 SKU 视图已追加 `product_business_key / sku_business_key`，外部系统同步时不得把 `intake_product_id / intake_sku_item_id` 这种内部技术行 ID 当业务身份。
+- 存量商品来源字段已从 `payload.metadata.source*` 结构化到 `IntakeNonIntegratedProductProfile.source*`，列表筛选、分类下拉和同步任务优先读写 profile。
+- 已新增 `external.intake_products_ready_v1 / external.intake_sku_items_ready_v1`，外部稳定读取优先走 ready 视图；完整视图只用于治理对账和展示资料质量状态。
+- 产品定厂合同生成已接入后端非集成产品头和 SKU 完整性规则，产品名称、品类、开发类型或目标批次 SKU 主数据未补齐时拒绝生成，避免不完整资料被包装成正式合同资料。
+- SPU 正式号段新增 `SpuNumberCounter` 结构化计数器，`SPU_RULE` 资料库不再适合作为多人并发占号真相；新建非集成产品、编辑旧草稿首次生成正式 SPU 时，正式占号已经收进后端保存事务里，前端本地缓存只能做预计值，前端 `reserveIntakeSpuNumber` 调用入口已移除。计数器产品品类、SPU 规则产品品类和前缀都必须在服务层与数据库层锁住同一套归一唯一语义，不能用空格或大小写差异制造第二号池。
+- `/intake` 页面不等于一张“产品资料表”，对外必须拆成多个视图。
+
+优先级：P0
+
+目标状态：
+
+- `external.product_skus_v1` 表达正式 SKU。
+- `external.intake_products_v1` 表达非集成开品主信息。
+- `external.intake_sku_items_v1` 表达非集成 SKU 明细。
+
+### DB-002：关键字段散落在结构化列和 JSON 快照中
+
+现象：
+
+- `ProductSKU.skuCode` 是结构化列。
+- `ProductSKU.name` 是结构化名称列，`attributes.skuName` 只作为兼容字段。
+- `ProductSkuAssetProfile` 保存型号、规格码、条码、尺寸、颜色、材质、图片等结构化同步副本。
+- `PreSku.variantSelection / displaySummary / bomPreview` 是入库前快照。
+- `IntakeNonIntegratedProduct.payload.skuItems` 保存大量 SKU 明细。
+- 历史专利台账曾保存在浏览器 `localStorage`，已迁入 `ProductPatentRecord`；当前浏览器缓存主路径已移除，只保留当前会话内存态用于测试或 API 失败后的临时显示，服务端保存会阻断缺来源产品、缺分组键或缺专利身份的记录，并会把前端草稿态的 `patent-${Date.now()}...` 临时 id 收敛为 `product-patent-group-${patentGroupKey}` 稳定 id。
+
+根因：
+
+- 草稿组和非集成开品需要快速承接复杂页面状态。
+- 初期为了功能闭环，把大量变化快的字段放进 JSON。
+
+风险：
+
+- 外部系统如果直接解析 JSON，会被内部结构变化影响。
+- 同一字段可能在多个 JSON 中出现，容易读错阶段。
+
+治理动作：
+
+- 外部契约层只输出稳定字段，不暴露整段 JSON。
+- 外部只读字段字典的承诺列必须同步进入 `scripts/sql/check-external-readonly-contract.sql`，并由 `npm run db:verify-master-data` 复用该字段清单做硬失败检查；当前覆盖 9 个 v1 视图、224 个承诺列，避免“文档说有、视图被误删也通过”的外部依赖风险。
+- 外部视图实际列必须和字段字典完全一致；缺承诺列、多出未登记列、重新依赖内部 JSON，或在 `*_code / *_business_key` 业务字段中用内部行 `id` 兜底，都会被巡检阻断。
+- 高频字段逐步迁移为结构化列或稳定投影视图字段。
+- 所有 JSON 字段标注“快照 / 过程 / 正式副本”定位。
+- 普通 SKU 属性编辑必须保留 `assetSkuSnapshot` 兼容快照，正式读取则以 `ProductSkuAssetProfile` 为准，做到“兼容证据保留、主读不回退”。
+- 正式 SKU 资产同步、锁定字段合并和入库前条码冲突检测都以 `ProductSkuAssetProfile` 为准；旧 `attributes.assetSkuSnapshot` 只在 profile 缺失时作为兼容兜底。
+- 正式 SKU 资产同步和准 SKU 基础资料条码冲突检测已不再回读旧 `attributes.assetSkuSnapshot`；该快照仅保留为兼容副本、迁移证据和巡检对账来源。
+- 正式 SKU 条码重复风险进入内部巡检，检查活动 `ProductSkuAssetProfile.barcode` 是否重复；暂不直接加无条件唯一索引，避免软删除 SKU 的旧 profile 阻塞条码复用。
+- 正式 SKU DTO 已把旧 JSON 输出口径降级为 `legacyAttributes`，并显式输出结构化 `assetProfile` 和统一展示标签 `displayTags`；`attributes` 这个字段名只能保留在写入输入、回收站恢复证据和旧兼容页面内，不能再作为正式主读合同。
+- `ProductSKU.attributes` 写入键已纳入代码巡检，当前只允许登记过的兼容/过程键；`barcode / model / specCode / color / material / size` 等正式资料字段如果回写 attributes，会作为阻断风险失败。demo/test seed 里的颜色、材质、尺寸也已改写到 `ProductSkuAssetProfile`，避免示例数据继续示范错误结构。
+- `ProductSKU.attributes.skuName` 已从允许写入键中移除；正式 SKU 名称只允许写 `ProductSKU.name`。写入口会阻断 `skuName / barcode / model / specCode / color / material / size` 等正式资料字段进入旧属性袋，巡检也会捕获对象简写 `{ skuName }`。
+- 外部正式 SKU 视图已追加 `product_business_key / sku_business_key`，分别对应正式产品型号和正式 SKU 编码的规范化值；外部系统不得把 `product_id / sku_id` 当同步身份。
+- 外部正式产品素材和 BOM 明细视图也已追加 `product_business_key / sku_business_key`；明细行可以保留技术 ID 用于内部追踪，但外部关联必须走稳定业务键。
+- 轻仓库 SKU 名称读取顺序固定为 `ProductSKU.name -> ProductSkuAssetProfile.specName -> skuCode`，不再从 `attributes.skuName` 推断展示名称。
+- 公开分享详情也按结构化优先输出 `name / assetProfile / legacyAttributes`；页面展示规格、颜色、材质时优先读 `ProductSkuAssetProfile`，旧 attributes 只作为公开标签兜底。
+- 正式入库重复/相似度判断不再回读 `ProductSKU.attributes.variantSelectionSummary / bomPreview`；有 `sourcePreSku` 的正式 SKU 才参与组合签名对比，历史旧快照不再作为阻断依据。
+- `PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 已纳入过程快照读点专项盘点；这些读点只能服务辅助装配恢复、草稿组只读展示、BOM/安装步骤/包装输入和正式入库物料生成，不能从中反推正式编码、条码、品类、人员或权限。草稿组基础资料自动建议也不再从 `variantSelection` 兜底读取型号、规格码、条码、版本号或规格名称。准 SKU 正式化生命周期错位已经纳入样本输出，后续定位必须看 `preSkuFormalizationLifecycleMismatchSamples` 的草稿组编号、准 SKU 序号、关联正式 SKU 和错位原因，不允许凭 count 手工改状态；通用主数据清洗计划只展示候选，不接受填写 action decision，避免把状态回滚、补正式 SKU 关联或作废决策混进字段清洗。新增只读专用计划 `scripts/plan-pre-sku-formalization-repair.js` / `npm run db:foundation:plan-pre-sku-formalization-repair`，只生成允许决策和护栏，不支持 apply。
+- 旧产品详情和旧 SKU 详情继续保留 `attributes` 作为编辑输入和 CAD 兼容证据链，但可见规格标签已统一走 `assetProfile -> legacyAttributes`，不再直接遍历整段 JSON。
+- 准 SKU 基础资料以 `PreSkuBasicInfo` 为结构化承接；非集成产品头资料以 `IntakeNonIntegratedProductProfile` 为结构化承接。
+- 草稿组/产品资料入口读取准 SKU 编码、型号、规格、条码等基础资料时，以 DTO 的 `basicInfo` 为主读；`displaySummary / familySelection` 只允许作为旧草稿快照兜底。
+- 产品资料入口和客户端交互态已统一复用 `src/lib/open-product/platform-view.ts` 的 `readPreSkuTextField`，避免同一套 `basicInfo` 优先规则散落在多个页面文件里各自演进。
+- 草稿组 DTO 输出已在 mapper 层净化：当结构化 `basicInfo` 存在时，`displaySummary` 不再对外输出型号、规格码、条码、颜色、材质等正式基础资料字段；数据库里的兼容快照只保留为历史证据和旧链兜底。
+- 准 SKU 基础资料冲突检测已只查 `PreSkuBasicInfo`；旧 `displaySummary` JSON path 查询方法已删除，避免后续把展示快照重新当成业务键查询来源。
+- `prisma/schema.prisma` 里的 80 个 `Json` 字段已纳入代码层分类巡检，未分类字段数为 0，过期分类字段数为 0。新增 JSON 字段必须先说明是结构化 JSON、兼容快照、过程快照、几何数据、审计日志、集成缓存、UI 配置或系统配置；字段删除或改名后也必须同步清理分类表，否则 `npm run db:verify-master-data:code` 会失败。
+- `IntakeNonIntegratedProductProfile` 与 `payload/openingReference` 的对账已纳入巡检；如果出现差异，处理方向是修复写入链路或清洗历史数据，而不是把读链路退回 payload。
+- 存量商品的 `sourceSpu / sourceSkuId / sourceCategory / sourceItemType / sourceSalesStatus / sourceEnabled` 以 `IntakeNonIntegratedProductProfile` 为结构化真相源，`payload.metadata` 只作为兼容快照。聚水潭同步入口会把来源 SPU、来源 SKU/条码和规格码统一规范为大写身份；查找、更新和排除判断只按结构化 profile 或系统生成的 `jst-stock-*` 业务 ID 识别来源，不再用 `payload.metadata.source*` 参与身份判断，避免同一存量商品在 profile、payload、reviewSheet 和结构化 SKU 明细里出现大小写不一致或第二套来源身份。
+- 专利台账以 `ProductPatentRecord` 为结构化主数据；不得再把 `localStorage` 或本地 JSON 文件当作多人协作、生产资料保存位置或测试真相源；同一专利分组只能有一条台账记录，关键身份字段由服务和数据库双层兜底，临时随机 id 只允许停留在未保存草稿态，保存前必须归一成专利分组稳定 id。
+- 内部主数据巡检已从“只报数量”扩展为“数量 + sample 明细”：`INCOMPLETE` SKU 和非集成产品头缺字段会输出产品 ID、SPU、SKU item、当前值和缺失字段，避免历史脏数据停留在不可定位状态。
+- 非集成 SKU 必填字段规则已抽成后端共享规则，结构化写入、巡检口径和正式流转入口要复用同一套判断；新增导出、合同、同步任务时不能各自手写一套字段检查。
+- 历史清洗新增显式计划脚本：`scripts/apply-master-data-cleanup-plan.js` 默认 dry-run 回滚，模板模式会输出当前 2 条不完整 SKU 和 5 条产品头缺字段样本；真正落库必须显式 `--apply`，且计划文件包含确认字段和业务确认人 `confirmedBy`，避免临时 SQL 和猜值。脚本只接受非空补充值，`productDevelopmentKind` 只允许 `product / series`，会拒绝未知字段、控制字符、占位值或默认值、过期模板、覆盖已有主数据、只补可选字段，以及 `--apply` 后仍未补齐且没有显式分阶段原因的计划项；`UNKNOWN / 待补齐 / 默认值` 这类伪资料不能被当成业务确认主数据。SKU 清洗里的 `skuCode / barcode` 会先按 `trim + uppercase` 规范化，再用 `upper(btrim(...))` 语义做冲突检测，和数据库表达式唯一索引保持一致；产品头 profile 清洗同样会校验模板导出的当前值和 SPU 上下文，当前值或上下文变化时拒绝落库。落库时会把 `confirmedBy` 写回产品记录 `updatedBy`，保留人工确认痕迹。清洗脚本在事务提交前会复用主数据巡检漂移断言，防止清洗动作本身把结构化表和兼容快照写叉；如果清洗事务中还需要执行任何治理迁移，包括幂等视图/护栏迁移，`--apply` 会先回滚并拒绝，迁移和历史清洗必须拆开验收。
+- 清洗计划新增静态校验入口：`npm run db:cleanup-master-data:validate -- --plan <file>` 不连接数据库、不执行迁移 SQL，只校验计划文件的确认字段、`confirmedBy`、模板 evidence、未知字段、占位值、覆盖已有字段和补齐完整度；它用于业务确认后、数据库 dry-run 前先把计划格式和伪资料问题拦住。
+- 主数据巡检已纳入数据库物理护栏检查：资产系列/资产族/规格款编码唯一池、规格款身份键、活动条码唯一池、系列兼容关系去重、草稿组编号、草稿组身份和摘要形态、准 SKU 序号、准 SKU 身份、过程快照形态、组件编码数组、预估重量、正式产品型号、正式产品名称/可见范围、产品协作者身份/角色、分享链接 token/访问次数/过期时间、正式 SKU 编码、活动正式 SKU 编码不得带软删除墓碑标记、正式 SKU 软删除生命周期结构化身份、正式 SKU 删除态墓碑资料完整性、正式 SKU attributes 不得保存软删除生命周期元数据或正式资料字段、正式 SKU 删除态同步到资产 profile 的触发器、准 SKU 到正式 SKU 一次性入库关系、非集成 SPU 品牌池唯一、一对一 profile、正式 SKU 资产资料同步副本活动条码唯一池、正式 SKU 资产资料副本来源规格款身份约束、准 SKU 基础资料、准 SKU 非空规格码/条码唯一池、准 SKU 型号/版本号/属性码/图纸号规范化、来源枚举和空字符串禁用、资产 SKU 同步事件原因枚举/计数/完成时间约束、非集成 SKU 明细身份、非空 SKU/条码局部唯一索引、主数据质量决策开放目标唯一和原因/确认人/解决状态约束、专利台账分组唯一和关键身份约束、资料库条目身份/编码唯一池、资料库编码非空、资料库 itemKey 归一唯一和类型枚举约束、SPU 规则产品品类唯一池、SPU 规则产品品类归一唯一池、SPU 号段品类归一唯一池、SPU 号段前缀唯一池、人员邮箱/花名/业务类型、组织部门、员工目录身份、包装方案 JSON 形态和状态约束、活动库位物理位置唯一、品牌物料准备项规范化唯一和文件元数据一致性、包装成品状态/数量/尺寸约束、审批流编号/标题/访问密钥/参与人/业务角色/字段矩阵和字段变更审计约束、旧 CAD 兼容链板件/孔位/产品五金/装配步骤/装配版本结构约束、基础资料分类/基材选项规范化唯一池、五金匹配记忆、基材花色绑定、板件材质绑定、规格款/准 SKU 库位绑定、旧正式产品包装方案质量约束、系统配置/服务商配置唯一激活/主题默认配置/节点权限覆盖/AI 生图记录/反馈/操作日志约束、软删除释放唯一池触发器、产品开发类型枚举约束、SKU 缺失字段枚举约束、SKU 质量状态一致性约束、`ProductSkuAssetProfile.model / specCode / barcode` 规范化约束，以及 `SpuNumberCounter` 品类非空、品类无首尾空格、前缀非空、计数非负约束都必须存在；护栏缺失时巡检失败，不允许只看当前样本没有重复就认为安全。当前护栏基线为 287 项。
+- 编码/条码唯一池已升级为数据库语义唯一：关键 partial unique 索引必须以 `upper(btrim(...))` 作为索引键，巡检会检查索引定义而不是只检查索引名字和 predicate。核心编码字段还必须有规范化 `CHECK`，阻止旁路写入 `abc`、` ABC ` 这类页面上看起来不同、业务上其实相同的编码。
+- 专利台账巡检除检查分组唯一和关键身份外，还会检查 `ProductPatentRecord.id` 是否残留 `patent-时间戳-随机串` 这类草稿态临时 id；一旦落入数据库，`npm run db:verify-master-data` 必须失败。
+- 外部 ready 视图巡检会阻断缺失或重复的 `product_business_key / sku_business_key`；技术 ID 可以保留为追踪字段，但不能成为外部系统幂等同步和去重的锚点。
+- 服务层写入口已同步按数据库语义唯一池收口：规划模板、基材、库位、包装成品来源编码、材质、五金、通用组件、正式产品型号、正式 SKU、SKU CAD 导入、传统产品上传、正式入库链路和非集成 SKU 保存链路都必须在进仓储层前完成 `trim + uppercase`，空编码和可预判重复由服务层直接阻断。
+- 仓储层核心身份查询已补齐兜底规范化：资产系列、资产族、规格款、规格款条码、基材、正式产品型号、正式 SKU、正式 SKU 资产条码、材质、五金、通用组件、库位和规划模板的 `findByCode / findBySkuCode / findByModelNumber / codeExists` 等入口，必须先按 `trim + uppercase` 归一；资产 CAD 导入在查询已有资产族前也会先归一手填编码，避免小写或首尾空格导致“查不到已有记录、创建时才撞数据库约束”。
+- 正式 SKU 资产 profile 的快照同步链路已补齐身份字段规范化：来源资产、旧 profile 和人工锁定字段中的型号、规格码、条码进入 `ProductSkuAssetProfile` 前都先 `trim + uppercase`，数据库约束只做最后兜底，不再作为第一道校验。
+- 包装/轻仓库承接已从“只靠页面填对”提升到写入口和数据库双护栏：包装箱保存会校验箱号、名称、尺寸、数量、成本/重量非负和固定状态；正式入库前会再次阻断旧脏箱规；数据库约束会兜底 `PreSkuPackagingPlan.boxes/costSummary/processDraft` 的 JSON 形态、活动库位物理位置唯一、品牌物料类型枚举、品牌物料文件元数据成套出现，以及 `PackagedItem` 名称、状态、数量、尺寸和载荷形态。
+- 审批流已补齐写入口和数据库双护栏：审批编号进入服务层先 `trim + uppercase`，标题、产品 ID、访问密钥、参与人列表、字段矩阵、摘要和字段变更来源都在服务层规范化；数据库进一步约束编号规范化、标题非空、参与人非空去重、业务角色不重复、字段矩阵只能是数组、摘要和元数据只能是对象、字段变更必须有字段 key 和来源。
+- 人员和组织主数据已补齐写入口和数据库双护栏：用户邮箱统一小写去空格、花名去空格、业务类型去重且拒绝游离值；花名册同步会规范化部门外部 ID、员工工号、手机号、钉钉 ID、邮箱和外部部门 ID 集合；数据库进一步用表达式唯一索引锁住用户邮箱/花名、部门名称/外部 ID、员工钉钉 ID/unionId/工号/手机号，避免人员匹配和自动业务类型划归出现多候选。
+- 规划域已补齐写入口和数据库双护栏：`PlanningTemplate` 承载模板结构，`PlanningWorkspace` 承载过程筛选，`PlanningDraft` 承载候选快照；服务层会拒绝模板外槽位、重复槽位 key、游离可见范围和非对象过程 JSON，数据库进一步约束模板/工作台/草稿的身份字段和 JSON 形态。
+- 正式入库、新建正式 SPU、旧 CAD 导入和回收站恢复链路已统一收紧为“编码冲突阻断”：不允许后端用临时 SPU、页面临时 SKU、`${modelNumber}-序号` 或自动后缀绕开结构化编码池；需要改码时必须回到产品资料或草稿组基础资料层显式处理。
+- 正式 Product 型号池采用永久身份口径：`Product.modelNumber` 软删除后仍保留全表唯一占用，避免外部系统或历史资料引用同一 SPU 号指向不同实体；这和 SKU 删除后释放规格码池是两个不同层级的业务规则。
+- 正式 SKU 软删除编码释放逻辑已收紧：删除态记录再次释放时优先基于结构化 `originalSkuCode` 或可恢复原始编码生成单层墓碑编码，不再把已带 `__deleted__` 的旧编码继续套娃追加，避免删除态编码池长期膨胀和排查不可读。
+- 正式 SKU 软删除恢复链路已按数据库语义唯一池继续收紧：从结构化 `originalSkuCode` 或墓碑编码恢复原始编码时统一 `trim + uppercase`，释放删除态唯一池时按大小写不敏感查找旧记录，恢复 SKU 时活动条码也按规范化条码检查冲突，避免旧小写/带空格记录绕过活动编码和条码唯一池。
+- 正式 SKU 资产 profile 已新增 `skuDeletedAt` 生命周期字段，非空活动条码唯一池只约束 `sourceStatus = ACTIVE` 且 `skuDeletedAt IS NULL` 的记录；软删除/恢复 SKU 和产品级联删除/恢复 SKU 都会同步维护该字段，数据库触发器 `ProductSKU_sync_asset_profile_deleted_at` 负责兜底同步 `ProductSKU.deletedAt`，避免删除态 SKU 继续占住条码池。
+- 正式 SKU 软删除墓碑资料已新增数据库护栏：删除态必须有 `deletedCodeAt`，随产品删除的 `deletedByProductId / productDeletedAt` 必须成对出现，防止直接 SQL 或未来仓储改动制造无法追溯的条码释放状态。
+- 产品恢复链路已区分“随产品级联删除的 SKU”和“用户原本单独删除的 SKU”：级联删除会写 `_deletedByProductId`，恢复时只恢复该产品删除带下去的 SKU，防止误激活旧回收站 SKU。
+- 正式入库挂接已有 SPU 时会阻断已删除 Product；正式入库和旧 CAD Product 导入前会在同一事务释放遗留删除态 SKU 编码，再只检查活动 SKU 编码冲突，传统产品上传也会在创建前释放删除态编码，避免回收站旧记录卡死规格码入库。
+- SKU 墓碑编码规则已统一到 `sku-soft-delete.helper`；产品级联删除、单 SKU 删除、恢复、正式入库、旧 CAD 导入和上传链不能再各自发明后缀规则。
+- 资料库型 `localStorage` 已作为 advisory 分层暴露并清零：当前没有 `server-contract-required` 点，也没有 `server-backed-cache` 点，也没有 `legacy-cache` 点，也没有 `compatibility-cache` 点。专利台账、SPU 规则维护页和非集成旧本地入口均已去掉浏览器本地缓存主路径；测试或显式兼容场景只允许使用当前进程内运行时缓存，不能再把浏览器持久缓存当成资料真相。SPU 预计展示只使用服务端同步后的运行时缓存或内置种子规则；内置种子规则只允许服务端 `SPU_RULE` 完全空库时兜底展示，服务端已有资料行时不得混入 seed。通用字母库、配件、封边、包装材料和钢架 BOM 匹配已改为读取 `IntakeReferenceLibraryItem`，不再从浏览器本地缓存主读。
+- 代码巡检已增加“未归类本地存储”硬护栏：非测试源码里的 `localStorage/sessionStorage` 直接读写和 `createJSONStorage` 封装持久化用途必须被归类为主数据风险、兼容缓存、旧缓存，或明确列入非主数据 UI/登录态缓存；未归类时命令失败，避免新的本地主数据真相源漏进系统。
+- 代码巡检已增加“应用层本地 JSON 文件主数据源”硬护栏：`src` 下不得用同步或异步 `readFile/writeFile`、`require/import` 读写或导入本地 `.json` 文件作为产品、资料库、权限或外部同步真相；导入载荷、迁移计划、备份和测试夹具必须留在明确的工具/测试边界内。
+- 代码巡检已增加非集成产品 `payload` 查询护栏：开发类型、负责人、待办和列表筛选不得直接把 `payload` JSON 当作并列真相源；历史兜底必须通过 `payloadJsonWhenProfileMissing(...)` 明确绑定到 profile 缺失场景。
+- 代码巡检已增加关键地基表写入边界护栏：`src/app` 下的 Route/Page 不得直接写 `SystemConfig / ProviderConfig / ThemeConfig / IntakeNodePermissionOverride / AssistedAssemblyAiRender / Feedback / ActivityLog`，必须进入 service/repository 的规范化写入口；回收站产品/SKU 日志写入已改走统一 `logActivity`。
+- 代码巡检已继续扩展到核心主数据写入边界：`src/app` 下的 Route/Page 不得直接写 `Product / ProductSKU / ProductSkuAssetProfile / DraftGroup / PreSku / PreSkuBasicInfo / AssetFamily / AssetVariant / IntakeNonIntegratedProduct / IntakeNonIntegratedProductProfile / IntakeNonIntegratedSkuItem / ProductPatentRecord / SpuNumberCounter / IntakeReferenceLibraryItem`，防止页面接口绕开服务层的编码规范化、快照同步、质量状态和冲突检测；`src/server` 写入口会同时识别 Prisma client 别名和 relation 嵌套写入，子模型结构化副本不能藏在父模型 `create/update` 里绕过分类；资料库条目身份也禁止恢复 `id` 兜底 `itemKey`、直接 `itemKey: item.id`、`code || item.id` 或 `` `item:${item.id}` `` 的写法，有稳定编码的资料库必须用 `code` 作为条目身份，缺显式编码的资料库必须使用业务规格派生的稳定 key，避免浏览器临时 id 或数据库主键变成业务身份；草稿组编号禁止恢复纯 `Date.now()` 生成，服务层必须使用可读前缀和足够熵，数据库唯一索引只做最后兜底。
+- 文件系统输入也纳入代码巡检：`filesystem-master-data-source` 会识别读取 `public/uploads`、上传临时文件、ZIP 解包目录等文件来源后又写 `Product / ProductSKU / Panel / ProductHardware / Hardware` 的组合。只有登记过的旧上传/导入入口可保留，新增未登记入口会阻断，防止把素材目录或本地文件扫描当成第二主数据源。
+- 代码巡检已把脚本层主数据直写纳入分类：`scripts/` 和 `prisma/seed.ts` 中的 demo/test/维护脚本可以保留，但必须在巡检里明示分类；当前扫描范围已从产品/资产核心表扩到基础资料、旧 CAD 结构、仓库、人员组织、配置、审批、分享、反馈和审计等地基表。任何新的未分类脚本直写这些表都会失败，避免临时补数脚本绕开服务层、迁移和清洗计划。
+- 代码巡检已把原生 SQL 主数据写入纳入分类：应用代码或脚本中只要出现 `INSERT INTO / UPDATE / DELETE FROM` 写核心主数据表，就必须说明是显式历史清洗、事务内计数器或其他受控入口，并且必须同时匹配批准文件和批准表名；当前 6 处均已分类，未分类为 0。迁移 SQL 仍由迁移清单和 strict 巡检负责，不和业务旁路写入口混为一谈。
+- 代码巡检已把原生 SQL 主数据读取纳入分类：应用代码或脚本中只要出现 `FROM / JOIN` 读取核心主数据表，就必须说明是内部巡检、显式历史清洗、schema readiness、事务内计数器读取或其他受控入口，并且必须同时匹配批准文件和批准表名；当前 112 处均已分类，未分类为 0。业务服务默认应通过 Prisma delegate、Repository 或结构化 helper 读取，不允许悄悄扩散 raw SQL 主读。
+- 代码巡检已把运行时 DDL 和 `$executeRawUnsafe` 纳入硬护栏：应用代码和普通脚本不得在服务调用时补建表、索引、约束或函数，数据库结构真相只能来自迁移和 strict 巡检。`IntakeNodePermissionOverride` 节点权限服务已改为只读检查迁移是否完成，不再运行时 `CREATE TABLE / ALTER TABLE`。
+- 只读 SQL 主数据巡检已和 JS 护栏清单做语义级反向校验：索引护栏必须同步名称、relation、predicate hint 和 definition hint，约束护栏必须同步名称、relation 和 expression hint，触发器必须同步名称和 relation。`scripts/sql` 下的 check/preflight 脚本还会被静态测试限制为只读 SQL，授权脚本只允许外部 schema 的 SELECT/USAGE 授权。测试已抓出并修正 `IntakeReferenceLibraryItem_libraryType_code_non_empty_key` predicate hint 少逗号的问题，避免 SQL 辅助巡检弱于 `REQUIRED_DATABASE_GUARDS`。
+- 代码巡检已增加核心身份查询防回退规则：非测试源码里不能再出现 `where: { code }`、`where: { skuCode }`、`where: { modelNumber }`、`where: { barcode }` 这类缩写查询，也不能把同名变量直接作为核心编码查询值；必须显式调用 `normalizeCoreIdentity` 或同口径归一后的变量。
+- 代码巡检已补齐隔离 fixture 防回退测试：临时仓库里故意放入 Route/Page 直写主数据、页面本地存储、未分类脚本直写、未分类服务写入口、未分类原生 SQL 写入、已批准原生 SQL 文件越权写表、未分类原生 SQL 读取、已批准原生 SQL 文件越权读表、运行时 DDL 与 `$executeRawUnsafe`、兼容快照读取和未分类 Prisma JSON 字段，测试必须确认这些坏样本会被拦截；后续不能只靠当前大仓样本为 0 来证明规则有效。
+- 代码巡检已补齐 Prisma JSON 字段分类反向校验：分类清单如果残留 schema 已删除或改名的字段，会和新增未分类 JSON 字段一样阻断巡检，避免 JSON 快照边界台账逐步失真。
+- 代码巡检已补齐文件级边界分类反向校验：脚本写入口、原生 SQL 写入口、原生 SQL 表作用域、服务/仓储写入口、兼容快照读点、结构化 payload 跳过和 UI 缓存忽略这些分类表里的文件路径必须真实存在；文件删除或改名后不清理分类，会被视为地基台账失真并阻断巡检。
+- 代码巡检已补齐兼容快照分类命中反向校验：`compatibilitySnapshotReadClassifications` 里的文件必须仍然命中实际兼容快照读点，或明确属于结构化 payload 跳过读点；清零的旧风险分类必须同步删除，不能在台账里保留已经不存在的入口。
+- 真相源矩阵已进入机器可读巡检：`scripts/master-data-truth-sources.js` 当前覆盖 26 个核心对象，每个对象必须声明主表、兼容快照、禁止真相源、写入边界和数据库护栏；新增 `MasterDataQualityDecision` 只作为质量审计对象，不作为 SKU 真值来源。`npm run db:verify-master-data:truth` 会检查主表、`Model.field` 快照字段、写入边界文件和护栏仍存在，并反向确认数据库护栏 relation 全部被真相源条目覆盖，同时确认条目声明的必需护栏没有跨 relation 错挂；矩阵声明的写入边界还必须进入代码层主数据写入口批准表，避免“文档说清楚了、代码和迁移没跟上”的新混乱。代码层 JSON 字段分类中 `compatibility-snapshot` 的字段必须同步出现在矩阵的 `compatibilitySnapshots` 中，当前 4 个兼容快照 JSON 字段未映射数为 0，避免“JSON 分类表”和“真相源矩阵”逐步分叉。
+- 数据库治理迁移新增只读状态入口：`npm run db:verify-master-data:migration-status` 只查询声明的目标表/视图/字段是否已存在，不执行迁移 SQL，也不在事务中 dry-run DDL。`npm run db:verify-master-data:all` 和 strict 入口已把该状态作为硬前置：结构迁移、幂等视图迁移、护栏迁移任何目标缺失都不能宣称 ready。这不是清洗脚本猜值问题，而是数据库结构地基仍需按授权真实迁移。
+- 已新增 `IntakeReferenceLibraryItem` 和 `/api/intake/reference-library` 作为资料库型本地存储迁库底座；同一资料库内 `itemKey` 和非空 `code` 均由服务端校验和数据库唯一索引兜底，数据库还会按 `lower(btrim(itemKey))` 阻断大小写/空格语义重复键，并固定资料库类型枚举和 `itemKey` 非空规则；服务端只允许显式 `itemKey` 或稳定 `code` 推导资料身份，`id` 只作为数据库行主键，不能兜底业务身份；`SPU_RULE` 还要求产品品类 `name` 按去空格和大小写归一后一对一，并以结构化 `code / name` 反向规范化 payload 中的旧字段。包装材料、配件、封边、钢架、SPU 规则库和通用字母库组件已接入该服务端契约，其中通用字母库、配件、封边、钢架和 SPU 规则库已移除浏览器本地缓存主路径，非集成 BOM 配件/封边/包装材料/钢架选项直接读取服务端资料库；SPU 规则库在服务端有行时不再用内置 seed 补空，避免默认资料遮住真实资料质量问题。其他仍带本地缓存的资料库只能作为非集成 BOM 或旧数据迁移/测试兼容缓存。正式 SPU 占号必须走 `SpuNumberCounter`，计数器初始化只信结构化 `code` 作为前缀，新建产品和旧草稿编辑必须在后端保存事务内完成占号和落库，不能再走本机缓存或前端先占号再保存。未接入服务端契约或明确降级前，任何新本地资料库都不能被定义为系统级主数据真相。
+- `/api/intake/spu-reservations` 单独占号入口已关闭写入能力，`spuNumberReservationService` 也只保留 `reserveInTransaction` 事务内分配入口；正式 SPU 只能在非集成产品保存事务内分配并落库，避免先占号后保存失败造成不可追溯号段空洞。
+- 正式 SPU 分配入口已接入非集成产品主数据质量规则；产品头或 SKU 明细缺关键字段时阻断，避免正式号段被不完整资料占用。
+
+优先级：P0
+
+目标状态：
+
+- 外部系统只看到稳定字段，如 `sku_code`、`barcode`、`spec_code`、`color`、`material`。
+- JSON 只作为内部快照，不成为外部契约。
+
+### DB-003：图片和素材 URL 形态不统一
+
+现象：
+
+- 正式产品有 `Product.thumbnailUrl`、`ProductSKU.images`、`ProductSKU.modelUrl`。
+- 资产规格款有 `AssetVariant.thumbnailUrl`、`AssetVariant.modelUrl`。
+- 非集成附件有 `dataUrl`、`fileUrl`、`storageKey`。
+- 素材可能来自 S3/MinIO、内部 API、旧 public 目录或历史 data URL。
+
+根因：
+
+- 不同阶段的上传逻辑、预览图生成逻辑、历史测试资产目录并存。
+
+风险：
+
+- 外部系统读到 URL 后不一定能访问。
+- 直接暴露 `storageKey` 或内部路径会泄露存储结构。
+- 历史 data URL 不适合长期对外同步。
+
+治理动作：
+
+- 外部契约统一输出 `asset_url`、`asset_type`、`file_name`、`mime_type`。
+- 默认不输出内部磁盘路径。
+- `storageKey` 只在需要文件同步时通过单独字段和下载接口开放。
+- 历史 data URL 逐步迁移为文件 URL。
+
+优先级：P1
+
+目标状态：
+
+- 外部系统拿 URL 即可读取，不需要知道文件在哪台服务器或哪个目录。
+
+### DB-004：资产源数据和正式 SKU 副本容易混用
+
+现象：
+
+- 资产源数据在 `AssetVariant`。
+- 正式 SKU 中通过 `ProductSkuAssetProfile` 保存资产资料结构化同步副本。
+- `ProductSKU.attributes.assetSkuSnapshot` 仍保留兼容快照，但不再是主读来源。
+- 资产更新后可能触发正式 SKU 副本同步。
+
+根因：
+
+- 正式产品需要保留当时入库资料，也需要跟资产中心保持一致。
+- 后续允许人工锁定字段，导致源数据和副本可能有差异。
+
+风险：
+
+- 外部系统如果直接跨读资产中心，可能读到和正式 SKU 不一致的数据。
+- 被人工锁定字段不应被自动覆盖，也不应被外部误判为脏数据。
+
+治理动作：
+
+- 正式产品对外默认读 `ProductSKU` + `ProductSkuAssetProfile` 的结构化副本。
+- 资产中心对外只表达资产源数据，不表达正式商品结果。
+- 在外部视图中保留 `source_asset_variant_id`、`source_status`、`synced_at`。
+- 如字段被锁定，外部只读视图可输出 `is_locked` 或只输出最终值，具体按外部系统需要决定。
+
+优先级：P1
+
+目标状态：
+
+- 外部系统读正式 SKU 时不用再临时跨模块查资产中心。
+
+### DB-005：草稿组/准 SKU 快照容易被误当正式数据
+
+现象：
+
+- `DraftGroup` 和 `PreSku` 承接辅助装配结果。
+- `PreSku` 中有 BOM、重量、组件、包装等预览字段。
+- 正式入库后才生成 `ProductSKU`。
+
+根因：
+
+- 草稿组是从辅助装配到产品资料的过渡层，本身信息看起来已经很完整。
+
+风险：
+
+- 外部系统如果读取草稿数据，会把未确认资料当成正式商品。
+- 同一个准 SKU 入库前后可能有状态变化。
+
+治理动作：
+
+- 默认不把草稿组作为外部正式资料开放。
+- 如果确实要开放待入库数据，单独建 `external.draft_pre_skus_v1`，并明确 `record_stage = DRAFT`。
+- 正式商品只以 `ProductSKU` 为准。
+
+优先级：P1
+
+目标状态：
+
+- 草稿资料和正式资料边界清楚。
+
+### DB-006：BOM 和成本来源需要统一口径
+
+现象：
+
+- `PreSku.bomPreview` 内有入库前 BOM 预览。
+- 正式入库时会根据 `bomPreview` 和包装成本计算 `ProductSKU.costPrice`。
+- 非集成开品有 `bomDetails`、`pricingRows`、`factoryRows` 等多组成本相关数据。
+- 产品资料页的参考图预估成本工具内有 `REFERENCE_ESTIMATOR_*` 临时估算单价和 `reference-image-cost-catalog` 小样本单价。
+
+根因：
+
+- 不同业务阶段都需要成本，但字段来源和确认程度不同。
+
+风险：
+
+- 外部系统可能读到预估成本、核价成本、正式成本中的某一种，却不知道口径。
+- 成本字段一旦对外，需要非常稳定。
+- 参考图预估成本如果被正式 BOM、包装方案、轻仓库或外部只读链路复用，会把页面辅助判断误升级成正式成本真相源。
+
+治理动作：
+
+- 外部视图字段命名区分 `estimated_cost`、`confirmed_cost`、`sku_cost_price`。
+- 正式 SKU 成本以 `ProductSKU.costPrice` 为基础。
+- 正式 BOM 结构已进入 `scripts/master-data-truth-sources.js` 的 `formal-bom-structure` 真相源条目：`Panel / PanelMaterial / ProductHardware / Hardware` 承接已确认的正式板件、材质绑定和五金结构；`PreSku.bomPreview` 只能作为正式入库前的过程生成依据，不能反向成为已确认 BOM 真相。
+- `ProductSKU_price_cost_stock_non_negative` 作为数据库护栏进入治理迁移清单，阻断正式 SKU 出现负售价、负成本或负库存。
+- 非集成成本必须标明来源：BOM 预估、核价、定厂、人工录入。
+- 参考图预估成本被固定为“人工判断辅助”：只允许在 `RawMaterialLibraryPanel`、`reference-image-estimate` 接口和专用小样本目录内使用；`verify-master-data-code-boundaries` 已增加 `reference-estimator-cost-boundary` 护栏，阻断它流入正式成本/BOM/包装/外部同步链路。
+
+优先级：P2
+
+目标状态：
+
+- 成本字段有明确计算口径和来源状态。
+
+### DB-007：产品编码、SKU 编码、规格码、条码规则需要数据库级约束承接
+
+现象：
+
+- 编码规则已经讨论过：系列编码、资产族编码、规格款编码、条码等由后端生成和校验。
+- 当前已有 `Product.modelNumber`、`ProductSKU.skuCode`、`AssetVariant.code`、`AssetVariant.barcode` 等字段。
+- 非集成 SKU 里也有 `skuCode`、`barcode`、`versionNo` 等字段。
+
+根因：
+
+- 编码规则在业务演进中多次调整，需要统一落到后端和数据库唯一约束。
+
+风险：
+
+- 人工录入或不同页面生成编码时出现冲突。
+- 外部系统依赖编码后，编码修正成本很高。
+
+治理动作：
+
+- 后端作为编码生成和冲突检测唯一入口。
+- 数据库保留关键唯一约束，例如正式 SKU 编码、资产规格款编码。
+- 外部视图输出编码时标明来源：正式编码、临时编码、历史编码。
+- 非集成产品里的编码在正式入库前不得当作最终商品编码。
+
+优先级：P0
+
+目标状态：
+
+- 外部系统拿到的编码都是已确认、无冲突、可追溯编码。
+
+### DB-008：权限字段和业务字段混在同一记录中
+
+现象：
+
+- `IntakeNonIntegratedProduct` 同时保存业务字段和 `visibility / departmentId / teamId / createdBy / updatedBy`。
+- `payload` 内还有文档确认、审批、上传状态等内部流程数据。
+
+根因：
+
+- 页面权限和业务资料在同一个工作区里共同演进。
+
+风险：
+
+- 外部系统直接读原表时可能看到内部组织、流程、人员 ID。
+- 权限字段被误当业务字段使用。
+
+治理动作：
+
+- 外部契约层默认不暴露内部权限字段。
+- 如外部需要负责人，只输出业务负责人姓名或编码，不输出内部权限判断字段。
+- 数据库只读账号不授权业务原表。
+
+优先级：P0
+
+目标状态：
+
+- 权限体系只服务内部系统，对外只输出必要业务归属。
+
+### DB-009：历史兼容链和新平台主链共存
+
+现象：
+
+- 旧 CAD/Product 兼容链仍存在。
+- 新平台主链是资产中心 -> 辅助装配 -> 草稿组 -> 产品资料 -> 轻仓库。
+- 两条链都可能产生板件、孔位、五金、包装相关数据。
+
+根因：
+
+- 系统需要保留历史数据和旧功能，同时推进新平台。
+
+风险：
+
+- 外部系统不知道哪个入口产生的数据才是正式资料。
+- 旧链字段可能被误纳入新平台外部契约。
+
+治理动作：
+
+- 外部契约按“正式 Product/SKU 结果”输出，不按页面来源区分。
+- 需要保留来源字段，例如 `source_type`、`source_pre_sku_id`、`source_asset_variant_id`。
+- 旧链仅作为来源之一，不作为对外契约结构。
+- 旧链自身也不能继续只靠页面写对：`Panel` 的板件编号、尺寸和爆炸方向，`Hole` 的孔位几何、孔轴、类型和置信度，`ProductHardware` 的匹配状态、位姿和关联文本，`AssemblyStep` 的步骤顺序、动画和数组引用，以及 `AssemblyVersion` 的快照形态都已进入服务层规范化、数据库约束和巡检。
+- `Panel` 在同一产品/SKU 范围内按 `upper(btrim(code))` 加唯一索引，避免旧 CAD 导入或手工维护产生看似不同、实际相同的板件编号。
+- 基础资料分类、基材字典、五金匹配记忆、库位绑定和旧包装方案也不能只靠页面填对：名称类选项必须按 `lower(btrim(name))` 语义唯一，排序必须非负，五金匹配记忆每行只能表达一个匹配键，库位/材质绑定不能有空引用，旧 `PackagingPlan.boxes` 必须保持数组快照。
+
+优先级：P2
+
+目标状态：
+
+- 外部系统只关心稳定结果，不被内部新旧链路影响。
+
+### DB-010：删除、失效、草稿、审核状态口径不统一
+
+现象：
+
+- 多表有 `deletedAt`、`status`、`isActive`。
+- 资产有 `DRAFT / ACTIVE / ARCHIVED` 等状态。
+- 草稿组和准 SKU 有自己的状态。
+- 非集成产品通过 `deletedAt` 软删除。
+
+根因：
+
+- 不同模块各自定义状态，缺少外部统一状态映射。
+
+风险：
+
+- 外部系统可能读到已删除或未审核数据。
+- 不同表的状态含义不一致，外部难以处理。
+
+治理动作：
+
+- 外部视图统一输出 `record_status`。
+- 只读视图默认过滤内部草稿、软删除、未激活数据。
+- 如必须开放失效数据，明确输出 `source_status` 和 `invalid_reason`。
+
+优先级：P1
+
+目标状态：
+
+- 外部系统通过一个统一状态字段判断可用性。
+
+## 4. 整理后的真相源规则
+
+| 业务概念 | 第一真相源 | 可读副本/快照 | 不应作为真相源 |
+| --- | --- | --- | --- |
+| 资产系列 | `AssetSeries` | 外部视图 | 页面筛选状态 |
+| 资产族 | `AssetFamily` | 外部视图 | `PreSku.familySelection` |
+| 规格款 | `AssetVariant` | `ProductSkuAssetProfile` | 页面卡片字段 / `assetSkuSnapshot` 兼容快照 |
+| 正式产品 SPU | `Product` | 外部视图 | 草稿组名称 |
+| 正式 SKU | `ProductSKU` | 外部视图 | 非集成临时 SKU |
+| 产品协作者权限 | `ProductCollaborator` | 协作者列表 DTO | 用户业务类型 / 审批参与人 |
+| 公开分享入口 | `ShareLink` | 公开分享 DTO | 页面 URL 参数 / 访问统计展示 |
+| SKU 图片 | `ProductSKU.images` / `ProductSkuAssetProfile.imageUrl` | 外部统一 `asset_url` | 本地文件路径 |
+| 非集成产品 | `IntakeNonIntegratedProduct` + `IntakeNonIntegratedProductProfile` | 外部投影视图 | 整段 `payload` |
+| 草稿准 SKU | `PreSku` | 草稿专用视图 | 正式产品视图 |
+| 产品规划过程 | `PlanningTemplate / PlanningWorkspace / PlanningDraft` | 候选快照 / 预览节点 | 资产中心源数据 / 正式产品资料 |
+| 板件结构 | `Panel` | BOM/结构视图 | `displaySummary` |
+| 孔位结构 | `Hole` | 3D/制造专用视图 | 孔位高亮 UI 状态 |
+| 五金用量 | `ProductHardware` / `Hardware` | BOM 视图 | 预览统计文本 |
+| 包装结果 | `PackagingPlan` / `PackagedItem` | 包装视图 | `PreSku.packagingSnapshot` |
+| 正式 SKU 成本 | `ProductSKU.costPrice` | `external.product_skus_v1.sku_cost_price` | 参考图预估成本 / `PreSku.displaySummary` 汇总 |
+
+## 5. 治理路线
+
+### 第一阶段：先挡住外部风险
+
+目标：不要让外部系统绑定内部原表。
+
+动作：
+
+- 建立 `external` schema 设计。
+- 输出第一版字段字典。
+- 给只读账号只授权 `external`。
+- 第一批视图只覆盖最稳定字段。
+
+### 第二阶段：统一产品资料输出
+
+目标：正式产品和非集成开品都能通过清晰契约读。
+
+动作：
+
+- 做 `external.product_skus_v1`。
+- 做 `external.intake_products_v1`。
+- 做 `external.intake_sku_items_v1`。
+- 对素材 URL 做统一归一。
+
+### 第三阶段：治理 JSON 高频字段
+
+目标：把长期被依赖的字段从 JSON 依赖中解耦。
+
+动作：
+
+- 统计外部系统使用字段。
+- 将高频字段逐步结构化或固化在物化视图/同步表。
+- 保留 JSON 作为内部快照，不再作为外部依赖。
+- 外部 view 定义必须纳入巡检，不能只检查对外列名；`payload / attributes / businessData` 等内部源字段依赖、字段字典外多余列、以及业务编码字段内部 `id` 兜底都要能被脚本报告出来。
+
+### 第四阶段：长期数据质量校验
+
+目标：防止混乱重新长出来。
+
+动作：
+
+- 加唯一性/冲突检测。
+- 加空值和状态巡检 SQL。
+- 缺品类、缺开发类型、SKU 编码/型号/规格名全空这类无法确定性推导的数据，不允许用默认值批量填充；必须业务确认、标记无效，或走显式清洗脚本。
+- 加代码层写入口巡检：脚本层、Route/Page 层、Service/Repository 层直接写核心表都必须被分类，未分类即失败，避免临时补数、临时服务或页面接口绕过主数据真相源。
+- 加兼容快照读点分类：`attributes / payload / displaySummary / familySelection` 读点必须说明是过程快照、兼容展示、生命周期证据还是待结构化迁移；未分类或高优先级读点进入阻断风险，专项盘点固定输出按分类、规则、文件和优先级汇总，结构化资料库 payload 扩展字段跳过项也要单独列明。
+- 加过程快照读点分类：`PreSku.variantSelection / bomPreview / installStepPreview / packagingSnapshot` 读点必须说明是 3D 恢复、草稿只读展示、BOM/安装预览、包装输入还是正式入库物料生成；未分类、高优先级读点或从过程快照反推正式字段/权限字段，都进入阻断风险。
+- 加 `ProductSKU.attributes` 写入键巡检：脚本、seed、服务和仓储层只允许写登记过的兼容键，主数据字段必须改写到结构化列或 `ProductSkuAssetProfile`。
+- 加 Prisma JSON 字段分类正反向巡检：新增 JSON 字段必须说明用途，删除或重命名 JSON 字段必须清理分类表，避免快照/结构化 JSON 边界文档和真实 schema 分叉。
+- 加文件级分类表存在性巡检：任何白名单、批准表或兼容分类表的路径都必须还能在仓库里找到，避免重构后留下无效批准记录。
+- 加兼容快照分类使用情况巡检：分类表只能描述当前真实存在的读点或受控跳过项，已经结构化或移除的旧读点必须从分类表删除。
+- 加外部契约视图测试；实际列必须等于字段字典列，且业务编码字段不得使用内部行 `id` 兜底。
+- 加治理迁移清单自检和执行后目标校验，防止新增迁移只落在文件夹里却没有进入 dry-run、strict 和清洗脚本共用目录，也防止迁移 SQL 没有真正生成声明对象。
+- 每次改 `Product / ProductSKU / IntakeNonIntegratedProduct / AssetVariant` 时同步数据字典。
+
+## 6. 不建议立即做的大动作
+
+- 不立即拆掉 `IntakeNonIntegratedProduct.payload`。
+- 不立即重构所有历史 Product/SKU 表。
+- 不把草稿组改成正式产品表。
+- 不把素材二进制迁入 PostgreSQL。
+- 不为外部系统单独复制一整套业务表。
+- 不为了视图漂亮而改变现有业务写入链路。
+
+## 7. 近期可执行任务
+
+| 顺序 | 任务 | 产出 | 风险 |
+| --- | --- | --- | --- |
+| 1 | 梳理外部系统需要字段 | 字段需求表 | 低 |
+| 2 | 定义外部字段字典 | `external` 字段说明 | 低 |
+| 3 | 写首批只读视图 SQL 草案 | `external.*_v1` | 中 |
+| 4 | 在测试库跑样例数据 | 验证报告 | 中 |
+| 5 | 建只读账号脚本 | 权限脚本 | 中 |
+| 6 | 增加数据质量巡检 SQL | 巡检脚本 | 低 |
+| 7 | 评估 JSON 高频字段结构化 | 改造计划 | 中 |
+| 8 | 收紧服务/仓储写入口白名单 | 代码巡检基线 | 中 |
+| 9 | 对兼容快照读点分优先级迁移 | 分类清单与迁移任务 | 中 |
+
+当前第一阶段已补充 `external` 只读视图、字段字典、授权脚本和巡检脚本，并已收紧 `materials_v1` 字段字典外列、外部稳定业务键空值/重复、`product_bom_v1.item_code` 内部 ID 兜底风险，以及资料库 payload 身份字段回读风险。后续治理重点转向真实数据质量：业务缺字段清洗、素材 URL 形态、成本/重量口径和高频 JSON 字段结构化。
+
+## 8. 规范审查
+
+结论：`passed`
+
+这是自审，不是独立复审。
+
+- 架构：本台账没有改变数据库结构，只明确混乱点、真相源和治理顺序。
+- 视觉：本次不涉及前端视觉。
+- 根因：没有把“直接开放只读账号”当解决方案，而是先治理数据地基和外部契约边界。
diff --git a/furniture-3d-system/docs/架构设计/数据库质量巡检基线-20260529.md b/furniture-3d-system/docs/架构设计/数据库质量巡检基线-20260529.md
new file mode 100644
index 00000000..a6ea14cf
--- /dev/null
+++ b/furniture-3d-system/docs/架构设计/数据库质量巡检基线-20260529.md
@@ -0,0 +1,92 @@
+# 数据库质量巡检基线 2026-05-29
+
+巡检时间：2026-05-29
+巡检对象：本地开发库 `localhost:5432/furniture_3d`
+巡检方式：在事务中临时执行 `external` 迁移和巡检查询，最后 `ROLLBACK`，不保留数据库结构变更。
+
+## 1. 视图数据量
+
+| 视图 | 行数 |
+| --- | ---: |
+| `external.materials_v1` | 22 |
+| `external.asset_variants_v1` | 15 |
+| `external.product_skus_v1` | 0 |
+| `external.product_assets_v1` | 0 |
+| `external.product_bom_v1` | 0 |
+| `external.intake_products_v1` | 5 |
+| `external.intake_sku_items_v1` | 12 |
+
+判断：
+
+- 本地库已有花色/材质、资产规格款、非集成开品数据。
+- 本地库暂无正式 `ProductSKU` 数据，所以正式产品、正式素材和正式 BOM 视图当前为 0。这个不是视图失败，而是当前本地库数据状态。
+- 正式 SKU 资产资料视图字段已改为读取 `ProductSkuAssetProfile`；本地库正式 SKU 为 0，所以本次 profile 回填数也是 0。
+
+## 2. 契约风险检查
+
+| 检查项 | 结果 |
+| --- | --- |
+| 私有字段风险 | 0 |
+| 正式 SKU 重复编码 | 0 |
+| 正式 SKU 缺少名称 | 0 |
+| 资产规格款重复编码 | 0 |
+| 正式产品重复条码 | 0 |
+| 正式 SKU 缺少资产 profile | 0 |
+| 正式 SKU profile 与兼容快照差异 | 0 |
+| `data:` 素材 URL | 0 |
+
+判断：
+
+- 第一版 `external` 视图没有暴露整段 `payload`、权限字段、内部路径或密钥类字段名。
+- 当前本地数据没有发现重复正式 SKU 编码、重复资产规格款编码和重复正式条码；正式 SKU profile 风险为 0。
+
+## 3. 空字段检查
+
+| 检查项 | 空值数量 |
+| --- | ---: |
+| 正式 SKU：`sku_code` | 0 |
+| 正式 SKU：`product_model_number` | 0 |
+| 正式 SKU：`sku_name` | 0 |
+| 资产规格款：`spec_code` | 0 |
+| 资产规格款：`spec_name` | 0 |
+| 资产规格款：`asset_family_code` | 0 |
+| 非集成 SKU：`sku_code` | 2 |
+| 非集成 SKU：`spec_name` | 2 |
+| 非集成 SKU：`model` | 2 |
+
+判断：
+
+- 资产中心规格款当前关键编码字段质量较好。
+- 非集成 SKU 明细里有 2 行缺少 `sku_code`、`spec_name` 和 `model`，这是下一步数据质量治理的第一优先级。
+- `external.intake_sku_items_v1` 已增加 `data_quality_status` 和 `missing_required_fields`，外部系统应过滤或人工处理 `INCOMPLETE` 记录。
+
+## 4. 非集成 SKU 质量状态
+
+| 状态 | 行数 |
+| --- | ---: |
+| `READY` | 10 |
+| `INCOMPLETE` | 2 |
+
+`INCOMPLETE` 来源：
+
+| 产品 | SPU | SKU 行 |
+| --- | --- | --- |
+| 可升降桌移动边几 | `PD20260507114440519` | 第 1 行 |
+| 浏览器验证开品草稿 | `KP-1777537404278` | 第 1 行 |
+
+## 5. 后续治理优先级
+
+1. 查出非集成 SKU 中这 2 行空字段的来源记录，判断是测试数据、旧数据，还是当前录入链路允许空值。
+2. 如果是当前录入链路问题，在产品资料录入侧补必填、自动生成或冲突检测。
+3. 如果是历史脏数据，补清洗脚本或标记为历史无效数据，避免外部系统读到。
+4. 在生产库迁移前，对生产库跑同一套巡检，不能只依据本地库判断。
+
+## 6. 规范审查
+
+结论：`passed`
+
+这是自审，不是独立复审。
+
+- 架构：巡检基线只记录数据质量，不改变业务表和写入链路。
+- 视觉：本次不涉及前端视觉。
+- 根因：把“数据库哪里乱”落成可量化问题，后续按数据来源治理。
diff --git a/furniture-3d-system/prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql b/furniture-3d-system/prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql
new file mode 100644
index 00000000..f30c1d4f
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql
@@ -0,0 +1,402 @@
+-- External read-only contract layer.
+-- Keep external systems away from internal business tables and JSON payloads.
+
+CREATE SCHEMA IF NOT EXISTS external;
+
+ALTER TABLE "Material"
+  ADD COLUMN IF NOT EXISTS "textureSizeMm" DOUBLE PRECISION NOT NULL DEFAULT 600;
+
+ALTER TABLE "ProductHardware"
+  ADD COLUMN IF NOT EXISTS "sourceBlockName" TEXT;
+
+CREATE OR REPLACE VIEW external.materials_v1 AS
+SELECT
+  m."id" AS material_id,
+  m."code" AS material_code,
+  m."name" AS material_name,
+  c."id" AS category_id,
+  c."name" AS category_name,
+  m."thumbnailUrl" AS thumbnail_url,
+  m."textureUrl" AS texture_url,
+  m."normalMapUrl" AS normal_map_url,
+  m."color" AS base_color,
+  m."metalness" AS metalness,
+  m."roughness" AS roughness,
+  m."opacity" AS opacity,
+  m."textureRepeat" AS texture_repeat,
+  m."textureRotation" AS texture_rotation,
+  m."textureSizeMm" AS texture_size_mm,
+  m."isPreset" AS is_preset,
+  m."isActive" AS is_active,
+  CASE WHEN m."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status,
+  m."createdAt" AS created_at,
+  m."updatedAt" AS updated_at
+FROM "Material" m
+JOIN "MaterialCategory" c ON c."id" = m."categoryId";
+
+CREATE OR REPLACE VIEW external.asset_variants_v1 AS
+SELECT
+  v."id" AS asset_variant_id,
+  v."code" AS spec_code,
+  v."name" AS spec_name,
+  v."assetType"::text AS asset_type,
+  v."status"::text AS asset_status,
+  f."id" AS asset_family_id,
+  f."code" AS asset_family_code,
+  f."name" AS asset_family_name,
+  s."id" AS asset_series_id,
+  s."code" AS asset_series_code,
+  s."name" AS asset_series_name,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  v."sizeLabel" AS size_label,
+  v."dimensions" AS dimensions,
+  v."modelUrl" AS model_url,
+  v."thumbnailUrl" AS thumbnail_url,
+  v."barcode" AS barcode,
+  v."supplierName" AS supplier_name,
+  v."supplierCode" AS supplier_code,
+  v."versionNo" AS version_no,
+  sub."id" AS substrate_id,
+  sub."name" AS substrate_name,
+  finish."id" AS finish_id,
+  finish."code" AS finish_code,
+  finish."name" AS finish_name,
+  COALESCE(
+    NULLIF(v."businessData"::jsonb ->> 'materialLabel', ''),
+    CASE
+      WHEN sub."name" IS NOT NULL AND finish."name" IS NOT NULL THEN sub."name" || ' + ' || finish."name"
+      ELSE COALESCE(sub."name", finish."name")
+    END
+  ) AS material_label,
+  v."weightKg" AS weight_kg,
+  v."costPrice" AS cost_price,
+  v."estimatedCostPrice" AS estimated_cost_price,
+  v."createdAt" AS created_at,
+  v."updatedAt" AS updated_at
+FROM "AssetVariant" v
+JOIN "AssetFamily" f ON f."id" = v."assetFamilyId"
+LEFT JOIN "AssetSeries" s ON s."id" = f."assetSeriesId"
+LEFT JOIN "ProductCategory" pc ON pc."id" = f."productCategoryId"
+LEFT JOIN "Substrate" sub ON sub."id" = v."substrateId"
+LEFT JOIN "Material" finish ON finish."id" = v."finishId"
+WHERE v."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.product_skus_v1 AS
+WITH sku_source AS (
+  SELECT
+    sku.*,
+    sku."attributes"::jsonb AS attributes_json,
+    sku."attributes"::jsonb -> 'assetSkuSnapshot' AS asset_snapshot
+  FROM "ProductSKU" sku
+)
+SELECT
+  p."id" AS product_id,
+  p."modelNumber" AS product_model_number,
+  p."name" AS product_name,
+  p."description" AS product_description,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  p."thumbnailUrl" AS product_thumbnail_url,
+  p."modelUrl" AS product_model_url,
+  sku."id" AS sku_id,
+  sku."skuCode" AS sku_code,
+  COALESCE(
+    NULLIF(sku.attributes_json ->> 'skuName', ''),
+    NULLIF(sku.asset_snapshot ->> 'specName', ''),
+    sku."skuCode"
+  ) AS sku_name,
+  sku."price" AS price,
+  sku."costPrice" AS cost_price,
+  sku."stock" AS stock,
+  sku."isActive" AS is_active,
+  CASE WHEN sku."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status,
+  COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url,
+  COALESCE(
+    NULLIF(sku.asset_snapshot ->> 'imageUrl', ''),
+    sku."images"[1],
+    NULLIF(p."thumbnailUrl", '')
+  ) AS image_url,
+  sku."images" AS image_urls,
+  sku."sourcePreSkuId" AS source_pre_sku_id,
+  sku."sourceAssetVariantId" AS source_asset_variant_id,
+  sku."sourceAssetVariantIds" AS source_asset_variant_ids,
+  sku.asset_snapshot ->> 'model' AS asset_family_code,
+  sku.asset_snapshot ->> 'modelName' AS asset_family_name,
+  sku.asset_snapshot ->> 'specCode' AS spec_code,
+  sku.asset_snapshot ->> 'specName' AS spec_name,
+  sku.asset_snapshot ->> 'barcode' AS barcode,
+  sku.asset_snapshot -> 'size' AS size_json,
+  sku.asset_snapshot ->> 'color' AS color,
+  sku.asset_snapshot ->> 'material' AS material,
+  sku.asset_snapshot ->> 'sourceStatus' AS source_status,
+  sku.asset_snapshot ->> 'syncedAt' AS synced_at,
+  wh."id" AS warehouse_location_id,
+  wh."code" AS warehouse_location_code,
+  wh."name" AS warehouse_location_name,
+  sku."createdAt" AS created_at,
+  sku."updatedAt" AS updated_at
+FROM sku_source sku
+JOIN "Product" p ON p."id" = sku."productId"
+LEFT JOIN "ProductCategory" pc ON pc."id" = p."categoryId"
+LEFT JOIN "WarehouseLocation" wh ON wh."id" = sku."warehouseLocationId"
+WHERE p."deletedAt" IS NULL
+  AND sku."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.product_assets_v1 AS
+WITH image_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    image_item.image_url,
+    image_item.sort_order
+  FROM "ProductSKU" sku
+  CROSS JOIN LATERAL unnest(sku."images") WITH ORDINALITY AS image_item(image_url, sort_order)
+  WHERE sku."deletedAt" IS NULL
+),
+model_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+),
+thumbnail_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    COALESCE(
+      NULLIF(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'imageUrl', ''),
+      NULLIF(p."thumbnailUrl", '')
+    ) AS thumbnail_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+)
+SELECT
+  'SKU_IMAGE' AS asset_type,
+  product_id,
+  sku_id,
+  image_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  sort_order::integer AS sort_order
+FROM image_assets
+WHERE NULLIF(image_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_MODEL' AS asset_type,
+  product_id,
+  sku_id,
+  model_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order
+FROM model_assets
+WHERE NULLIF(model_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_THUMBNAIL' AS asset_type,
+  product_id,
+  sku_id,
+  thumbnail_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order
+FROM thumbnail_assets
+WHERE NULLIF(thumbnail_url, '') IS NOT NULL;
+
+CREATE OR REPLACE VIEW external.product_bom_v1 AS
+SELECT
+  'PANEL' AS item_type,
+  p."productId" AS product_id,
+  p."skuId" AS sku_id,
+  p."id" AS item_id,
+  p."code" AS item_code,
+  p."name" AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  m."id" AS material_id,
+  m."code" AS material_code,
+  m."name" AS material_name,
+  jsonb_build_object(
+    'length', p."length",
+    'width', p."width",
+    'thickness', p."thickness",
+    'unit', 'mm'
+  ) AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  p."createdAt" AS created_at,
+  p."updatedAt" AS updated_at
+FROM "Panel" p
+JOIN "Product" product ON product."id" = p."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = p."skuId"
+LEFT JOIN "PanelMaterial" pm ON pm."panelId" = p."id"
+LEFT JOIN "Material" m ON m."id" = pm."materialId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL)
+UNION ALL
+SELECT
+  'HARDWARE' AS item_type,
+  ph."productId" AS product_id,
+  ph."skuId" AS sku_id,
+  ph."id" AS item_id,
+  COALESCE(h."code", ph."sourceBlockName", ph."id") AS item_code,
+  COALESCE(h."name", ph."sourceBlockName", '未匹配五金') AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  NULL::text AS material_id,
+  NULL::text AS material_code,
+  NULL::text AS material_name,
+  h."dimensions" AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  ph."createdAt" AS created_at,
+  ph."updatedAt" AS updated_at
+FROM "ProductHardware" ph
+JOIN "Product" product ON product."id" = ph."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = ph."skuId"
+LEFT JOIN "Hardware" h ON h."id" = ph."hardwareId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL);
+
+CREATE OR REPLACE VIEW external.intake_products_v1 AS
+WITH product_source AS (
+  SELECT
+    p.*,
+    p."payload"::jsonb AS payload_json,
+    p."payload"::jsonb -> 'openingReference' AS opening_reference
+  FROM "IntakeNonIntegratedProduct" p
+  WHERE p."deletedAt" IS NULL
+)
+SELECT
+  p."id" AS intake_product_id,
+  p."spu" AS spu,
+  p."spuBase" AS spu_base,
+  p."brand" AS brand,
+  COALESCE(
+    NULLIF(p.opening_reference ->> 'productName', ''),
+    NULLIF(p.payload_json ->> 'previewImageName', ''),
+    p."spu"
+  ) AS product_name,
+  COALESCE(
+    NULLIF(p.opening_reference ->> 'productImage', ''),
+    NULLIF(p.payload_json ->> 'previewImage', '')
+  ) AS product_image_url,
+  COALESCE(NULLIF(p.opening_reference ->> 'productCategory', ''), NULLIF(p.payload_json ->> 'productCategory', '')) AS product_category,
+  COALESCE(NULLIF(p.opening_reference ->> 'salesCategory', ''), NULLIF(p.payload_json ->> 'salesCategory', '')) AS sales_category,
+  COALESCE(NULLIF(p.opening_reference ->> 'year', ''), NULLIF(p.payload_json ->> 'year', '')) AS product_year,
+  COALESCE(NULLIF(p.opening_reference ->> 'currentStage', ''), NULLIF(p.payload_json ->> 'projectStatus', '')) AS product_status,
+  COALESCE(NULLIF(p.opening_reference ->> 'designer', ''), NULLIF(p."designer", '')) AS designer,
+  p."operator" AS operator,
+  p."purchaser" AS purchaser,
+  p.payload_json ->> 'productDevelopmentKind' AS product_development_kind,
+  p.payload_json ->> 'goodsType' AS goods_type,
+  p.payload_json ->> 'materialType' AS material_type,
+  p.payload_json ->> 'productionType' AS production_type,
+  p."createdAt" AS created_at,
+  p."updatedAt" AS updated_at
+FROM product_source p;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_v1 AS
+WITH product_source AS (
+  SELECT
+    p.*,
+    p."payload"::jsonb AS payload_json
+  FROM "IntakeNonIntegratedProduct" p
+  WHERE p."deletedAt" IS NULL
+),
+sku_items AS (
+  SELECT
+    p."id" AS intake_product_id,
+    p."spu",
+    p."brand",
+    item.sku_item,
+    item.ordinality
+  FROM product_source p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p.payload_json -> 'skuItems') = 'array' THEN p.payload_json -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+)
+SELECT
+  intake_product_id,
+  spu,
+  brand,
+  sku_item ->> 'id' AS intake_sku_item_id,
+  CASE
+    WHEN COALESCE(sku_item ->> 'skuSequence', '') ~ '^[0-9]+$'
+      THEN (sku_item ->> 'skuSequence')::integer
+    ELSE NULL
+  END AS sku_sequence,
+  CASE
+    WHEN COALESCE(sku_item ->> 'batchNo', '') ~ '^[0-9]+$'
+      THEN (sku_item ->> 'batchNo')::integer
+    ELSE NULL
+  END AS batch_no,
+  sku_item ->> 'image' AS image_url,
+  sku_item ->> 'imageName' AS image_name,
+  sku_item ->> 'model' AS model,
+  sku_item ->> 'skuCode' AS sku_code,
+  sku_item ->> 'specName' AS spec_name,
+  sku_item ->> 'barcode' AS barcode,
+  sku_item ->> 'size' AS size,
+  sku_item ->> 'color' AS color,
+  sku_item ->> 'material' AS material,
+  sku_item ->> 'versionNo' AS version_no,
+  sku_item ->> 'attributeCode' AS attribute_code,
+  sku_item ->> 'drawingId' AS drawing_id,
+  sku_item ->> 'installMethod' AS install_method,
+  sku_item ->> 'executeStandard' AS execute_standard,
+  sku_item ->> 'manufacturer' AS manufacturer,
+  sku_item ->> 'manufacturerCode' AS manufacturer_code,
+  sku_item ->> 'salesStatus' AS sales_status,
+  sku_item ->> 'model3dDataUrl' AS model_3d_url,
+  sku_item ->> 'source' AS source,
+  sku_item ->> 'sourceTable' AS source_table,
+  sku_item ->> 'sourceSkuId' AS source_sku_id,
+  array_remove(
+    ARRAY[
+      CASE
+        WHEN NULLIF(btrim(COALESCE(sku_item ->> 'skuCode', '')), '') IS NULL
+          THEN 'sku_code'
+      END,
+      CASE
+        WHEN NULLIF(btrim(COALESCE(sku_item ->> 'specName', '')), '') IS NULL
+          THEN 'spec_name'
+      END,
+      CASE
+        WHEN NULLIF(btrim(COALESCE(sku_item ->> 'model', '')), '') IS NULL
+          THEN 'model'
+      END
+    ]::text[],
+    NULL
+  ) AS missing_required_fields,
+  CASE
+    WHEN
+      NULLIF(btrim(COALESCE(sku_item ->> 'skuCode', '')), '') IS NULL OR
+      NULLIF(btrim(COALESCE(sku_item ->> 'specName', '')), '') IS NULL OR
+      NULLIF(btrim(COALESCE(sku_item ->> 'model', '')), '') IS NULL
+      THEN 'INCOMPLETE'
+    ELSE 'READY'
+  END AS data_quality_status,
+  LOWER(COALESCE(sku_item ->> 'contentLocked', '')) IN ('true', '1', 'yes', 'on') AS content_locked,
+  ordinality::integer AS sort_order
+FROM sku_items;
+
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'external_reader') THEN
+    GRANT USAGE ON SCHEMA external TO external_reader;
+    GRANT SELECT ON ALL TABLES IN SCHEMA external TO external_reader;
+    ALTER DEFAULT PRIVILEGES IN SCHEMA external GRANT SELECT ON TABLES TO external_reader;
+  END IF;
+END
+$$;
diff --git a/furniture-3d-system/prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql b/furniture-3d-system/prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql
new file mode 100644
index 00000000..dfb406e8
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql
@@ -0,0 +1,317 @@
+-- Structure non-integrated intake SKU rows so SKU master data is not only stored in payload JSON.
+
+DO $$
+DECLARE
+  duplicate_sku_code_groups INTEGER;
+  duplicate_barcode_groups INTEGER;
+BEGIN
+  WITH payload_sku_items AS (
+    SELECT
+      NULLIF(btrim(item.sku_item ->> 'skuCode'), '') AS sku_code,
+      NULLIF(btrim(item.sku_item ->> 'barcode'), '') AS barcode
+    FROM "IntakeNonIntegratedProduct" p
+    CROSS JOIN LATERAL jsonb_array_elements(
+      CASE
+        WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+          THEN p."payload"::jsonb -> 'skuItems'
+        ELSE '[]'::jsonb
+      END
+    ) AS item(sku_item)
+    WHERE p."deletedAt" IS NULL
+  ),
+  duplicate_sku_codes AS (
+    SELECT sku_code
+    FROM payload_sku_items
+    WHERE sku_code IS NOT NULL
+    GROUP BY sku_code
+    HAVING COUNT(*) > 1
+  )
+  SELECT COUNT(*)::integer
+    INTO duplicate_sku_code_groups
+  FROM duplicate_sku_codes;
+
+  WITH payload_sku_items AS (
+    SELECT
+      NULLIF(btrim(item.sku_item ->> 'skuCode'), '') AS sku_code,
+      NULLIF(btrim(item.sku_item ->> 'barcode'), '') AS barcode
+    FROM "IntakeNonIntegratedProduct" p
+    CROSS JOIN LATERAL jsonb_array_elements(
+      CASE
+        WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+          THEN p."payload"::jsonb -> 'skuItems'
+        ELSE '[]'::jsonb
+      END
+    ) AS item(sku_item)
+    WHERE p."deletedAt" IS NULL
+  ),
+  duplicate_barcodes AS (
+    SELECT barcode
+    FROM payload_sku_items
+    WHERE barcode IS NOT NULL
+    GROUP BY barcode
+    HAVING COUNT(*) > 1
+  )
+  SELECT COUNT(*)::integer
+    INTO duplicate_barcode_groups
+  FROM duplicate_barcodes;
+
+  IF duplicate_sku_code_groups > 0 OR duplicate_barcode_groups > 0 THEN
+    RAISE EXCEPTION
+      'Cannot structure non-integrated SKU items: active payload contains % duplicate skuCode groups and % duplicate barcode groups. Run scripts/sql/preflight-intake-non-integrated-sku-items.sql before this migration.',
+      duplicate_sku_code_groups,
+      duplicate_barcode_groups;
+  END IF;
+END $$;
+
+CREATE TYPE "IntakeNonIntegratedSkuDataQualityStatus" AS ENUM ('READY', 'INCOMPLETE');
+
+CREATE TABLE "IntakeNonIntegratedSkuItem" (
+  "id" TEXT NOT NULL,
+  "productId" TEXT NOT NULL,
+  "skuItemId" TEXT NOT NULL,
+  "sortOrder" INTEGER NOT NULL,
+  "skuSequence" INTEGER NOT NULL DEFAULT 0,
+  "batchNo" INTEGER NOT NULL DEFAULT 1,
+  "packageGroupId" TEXT NOT NULL DEFAULT '',
+  "image" TEXT,
+  "imageName" TEXT NOT NULL DEFAULT '',
+  "model" TEXT NOT NULL DEFAULT '',
+  "skuCode" TEXT NOT NULL DEFAULT '',
+  "specName" TEXT NOT NULL DEFAULT '',
+  "barcode" TEXT NOT NULL DEFAULT '',
+  "size" TEXT NOT NULL DEFAULT '',
+  "color" TEXT NOT NULL DEFAULT '',
+  "material" TEXT NOT NULL DEFAULT '',
+  "boardMaterialType" TEXT NOT NULL DEFAULT '',
+  "versionNo" TEXT NOT NULL DEFAULT 'V01',
+  "attributeCode" TEXT NOT NULL DEFAULT '',
+  "drawingId" TEXT NOT NULL DEFAULT '',
+  "installMethod" TEXT NOT NULL DEFAULT '',
+  "executeStandard" TEXT NOT NULL DEFAULT '',
+  "nationalStandardCompliant" TEXT NOT NULL DEFAULT '',
+  "manufacturer" TEXT NOT NULL DEFAULT '',
+  "manufacturerCode" TEXT NOT NULL DEFAULT '',
+  "salesStatus" TEXT NOT NULL DEFAULT '',
+  "tagMaterial" TEXT NOT NULL DEFAULT '',
+  "model3dDataUrl" TEXT,
+  "source" TEXT NOT NULL DEFAULT '',
+  "sourceTable" TEXT NOT NULL DEFAULT '',
+  "sourceSkuId" TEXT NOT NULL DEFAULT '',
+  "contentLocked" BOOLEAN NOT NULL DEFAULT false,
+  "dataQualityStatus" "IntakeNonIntegratedSkuDataQualityStatus" NOT NULL DEFAULT 'INCOMPLETE',
+  "missingRequiredFields" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "IntakeNonIntegratedSkuItem_pkey" PRIMARY KEY ("id")
+);
+
+ALTER TABLE "IntakeNonIntegratedSkuItem"
+  ADD CONSTRAINT "IntakeNonIntegratedSkuItem_productId_fkey"
+  FOREIGN KEY ("productId") REFERENCES "IntakeNonIntegratedProduct"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+CREATE UNIQUE INDEX "IntakeNonIntegratedSkuItem_productId_skuItemId_key"
+  ON "IntakeNonIntegratedSkuItem"("productId", "skuItemId");
+CREATE UNIQUE INDEX "IntakeNonIntegratedSkuItem_skuCode_non_empty_key"
+  ON "IntakeNonIntegratedSkuItem"("skuCode")
+  WHERE NULLIF(btrim("skuCode"), '') IS NOT NULL;
+CREATE UNIQUE INDEX "IntakeNonIntegratedSkuItem_barcode_non_empty_key"
+  ON "IntakeNonIntegratedSkuItem"("barcode")
+  WHERE NULLIF(btrim("barcode"), '') IS NOT NULL;
+CREATE INDEX "IntakeNonIntegratedSkuItem_productId_idx" ON "IntakeNonIntegratedSkuItem"("productId");
+CREATE INDEX "IntakeNonIntegratedSkuItem_skuCode_idx" ON "IntakeNonIntegratedSkuItem"("skuCode");
+CREATE INDEX "IntakeNonIntegratedSkuItem_barcode_idx" ON "IntakeNonIntegratedSkuItem"("barcode");
+CREATE INDEX "IntakeNonIntegratedSkuItem_model_idx" ON "IntakeNonIntegratedSkuItem"("model");
+CREATE INDEX "IntakeNonIntegratedSkuItem_dataQualityStatus_idx" ON "IntakeNonIntegratedSkuItem"("dataQualityStatus");
+CREATE INDEX "IntakeNonIntegratedSkuItem_sourceTable_sourceSkuId_idx" ON "IntakeNonIntegratedSkuItem"("sourceTable", "sourceSkuId");
+
+CREATE OR REPLACE FUNCTION "cleanup_intake_non_integrated_sku_items_on_soft_delete"()
+RETURNS TRIGGER AS $$
+BEGIN
+  DELETE FROM "IntakeNonIntegratedSkuItem"
+  WHERE "productId" = NEW."id";
+
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER "IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items"
+AFTER UPDATE OF "deletedAt" ON "IntakeNonIntegratedProduct"
+FOR EACH ROW
+WHEN (OLD."deletedAt" IS NULL AND NEW."deletedAt" IS NOT NULL)
+EXECUTE FUNCTION "cleanup_intake_non_integrated_sku_items_on_soft_delete"();
+
+WITH source_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    item.sku_item,
+    item.ordinality::integer AS sort_order,
+    COALESCE(NULLIF(btrim(item.sku_item ->> 'id'), ''), 'sku-' || item.ordinality::text) AS raw_sku_item_id
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+),
+deduped_sku_items AS (
+  SELECT
+    source_sku_items.*,
+    CASE
+      WHEN COUNT(*) OVER (PARTITION BY product_id, raw_sku_item_id) = 1
+        THEN raw_sku_item_id
+      ELSE raw_sku_item_id || '-' || ROW_NUMBER() OVER (
+        PARTITION BY product_id, raw_sku_item_id
+        ORDER BY sort_order
+      )::text
+    END AS sku_item_id
+  FROM source_sku_items
+),
+normalized_sku_items AS (
+  SELECT
+    product_id,
+    sku_item,
+    sort_order,
+    sku_item_id,
+    array_remove(
+      ARRAY[
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'skuCode', '')), '') IS NULL
+            THEN 'sku_code'
+        END,
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'specName', '')), '') IS NULL
+            THEN 'spec_name'
+        END,
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'model', '')), '') IS NULL
+            THEN 'model'
+        END
+      ]::text[],
+      NULL
+    ) AS missing_required_fields
+  FROM deduped_sku_items
+)
+INSERT INTO "IntakeNonIntegratedSkuItem" (
+  "id",
+  "productId",
+  "skuItemId",
+  "sortOrder",
+  "skuSequence",
+  "batchNo",
+  "packageGroupId",
+  "image",
+  "imageName",
+  "model",
+  "skuCode",
+  "specName",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "boardMaterialType",
+  "versionNo",
+  "attributeCode",
+  "drawingId",
+  "installMethod",
+  "executeStandard",
+  "nationalStandardCompliant",
+  "manufacturer",
+  "manufacturerCode",
+  "salesStatus",
+  "tagMaterial",
+  "model3dDataUrl",
+  "source",
+  "sourceTable",
+  "sourceSkuId",
+  "contentLocked",
+  "dataQualityStatus",
+  "missingRequiredFields"
+)
+SELECT
+  product_id || ':' || sku_item_id AS id,
+  product_id,
+  sku_item_id,
+  sort_order,
+  CASE
+    WHEN COALESCE(sku_item ->> 'skuSequence', '') ~ '^-?[0-9]+$'
+      THEN (sku_item ->> 'skuSequence')::integer
+    ELSE 0
+  END,
+  CASE
+    WHEN COALESCE(sku_item ->> 'batchNo', '') ~ '^[0-9]+$'
+      THEN GREATEST(1, (sku_item ->> 'batchNo')::integer)
+    ELSE 1
+  END,
+  COALESCE(sku_item ->> 'packageGroupId', ''),
+  NULLIF(sku_item ->> 'image', ''),
+  COALESCE(sku_item ->> 'imageName', ''),
+  COALESCE(sku_item ->> 'model', ''),
+  COALESCE(sku_item ->> 'skuCode', ''),
+  COALESCE(sku_item ->> 'specName', ''),
+  COALESCE(sku_item ->> 'barcode', ''),
+  COALESCE(sku_item ->> 'size', ''),
+  COALESCE(sku_item ->> 'color', ''),
+  COALESCE(sku_item ->> 'material', ''),
+  COALESCE(sku_item ->> 'boardMaterialType', ''),
+  COALESCE(NULLIF(sku_item ->> 'versionNo', ''), 'V01'),
+  COALESCE(sku_item ->> 'attributeCode', ''),
+  COALESCE(sku_item ->> 'drawingId', ''),
+  COALESCE(sku_item ->> 'installMethod', ''),
+  COALESCE(sku_item ->> 'executeStandard', ''),
+  COALESCE(sku_item ->> 'nationalStandardCompliant', ''),
+  COALESCE(sku_item ->> 'manufacturer', ''),
+  COALESCE(sku_item ->> 'manufacturerCode', ''),
+  COALESCE(sku_item ->> 'salesStatus', ''),
+  COALESCE(sku_item ->> 'tagMaterial', ''),
+  NULLIF(sku_item ->> 'model3dDataUrl', ''),
+  COALESCE(sku_item ->> 'source', ''),
+  COALESCE(sku_item ->> 'sourceTable', ''),
+  COALESCE(sku_item ->> 'sourceSkuId', ''),
+  LOWER(COALESCE(sku_item ->> 'contentLocked', '')) IN ('true', '1', 'yes', 'on'),
+  CASE
+    WHEN cardinality(missing_required_fields) = 0
+      THEN 'READY'::"IntakeNonIntegratedSkuDataQualityStatus"
+    ELSE 'INCOMPLETE'::"IntakeNonIntegratedSkuDataQualityStatus"
+  END,
+  missing_required_fields
+FROM normalized_sku_items;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_v1 AS
+SELECT
+  p."id" AS intake_product_id,
+  p."spu",
+  p."brand",
+  sku."skuItemId" AS intake_sku_item_id,
+  sku."skuSequence" AS sku_sequence,
+  sku."batchNo" AS batch_no,
+  sku."image" AS image_url,
+  sku."imageName" AS image_name,
+  sku."model",
+  sku."skuCode" AS sku_code,
+  sku."specName" AS spec_name,
+  sku."barcode",
+  sku."size",
+  sku."color",
+  sku."material",
+  sku."versionNo" AS version_no,
+  sku."attributeCode" AS attribute_code,
+  sku."drawingId" AS drawing_id,
+  sku."installMethod" AS install_method,
+  sku."executeStandard" AS execute_standard,
+  sku."manufacturer",
+  sku."manufacturerCode" AS manufacturer_code,
+  sku."salesStatus" AS sales_status,
+  sku."model3dDataUrl" AS model_3d_url,
+  sku."source",
+  sku."sourceTable" AS source_table,
+  sku."sourceSkuId" AS source_sku_id,
+  sku."missingRequiredFields" AS missing_required_fields,
+  sku."dataQualityStatus"::text AS data_quality_status,
+  sku."contentLocked" AS content_locked,
+  sku."sortOrder" AS sort_order
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" p ON p."id" = sku."productId"
+WHERE p."deletedAt" IS NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql b/furniture-3d-system/prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql
new file mode 100644
index 00000000..331b738c
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql
@@ -0,0 +1,278 @@
+-- Structure the formal SKU asset data copy.
+-- ProductSKU.attributes.assetSkuSnapshot remains as a compatibility snapshot,
+-- but ProductSkuAssetProfile becomes the structured source for internal checks
+-- and external read-only views.
+
+CREATE TYPE "ProductSkuAssetSourceStatus" AS ENUM ('ACTIVE', 'DELETED', 'MISSING');
+
+ALTER TABLE "ProductSKU" ADD COLUMN "name" TEXT;
+CREATE INDEX "ProductSKU_name_idx" ON "ProductSKU"("name");
+
+UPDATE "ProductSKU" sku
+SET "name" = COALESCE(
+  NULLIF(sku."attributes"::jsonb ->> 'skuName', ''),
+  NULLIF(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'specName', ''),
+  sku."skuCode"
+)
+WHERE sku."name" IS NULL;
+
+CREATE TABLE "ProductSkuAssetProfile" (
+    "id" TEXT NOT NULL,
+    "skuId" TEXT NOT NULL,
+    "primarySourceAssetVariantId" TEXT,
+    "sourceAssetVariantIds" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+    "sourceAssetFamilyId" TEXT,
+    "sourceAssetSeriesId" TEXT,
+    "model" TEXT,
+    "modelName" TEXT,
+    "specCode" TEXT,
+    "specName" TEXT,
+    "barcode" TEXT,
+    "size" JSONB NOT NULL,
+    "color" TEXT,
+    "material" TEXT,
+    "imageUrl" TEXT,
+    "sourceStatus" "ProductSkuAssetSourceStatus" NOT NULL DEFAULT 'ACTIVE',
+    "syncedAt" TIMESTAMP(3) NOT NULL,
+    "lockedFields" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+    "lockedReasons" JSONB NOT NULL,
+    "sourceVariants" JSONB NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "ProductSkuAssetProfile_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "ProductSkuAssetProfile_skuId_key" ON "ProductSkuAssetProfile"("skuId");
+CREATE INDEX "ProductSkuAssetProfile_primarySourceAssetVariantId_idx" ON "ProductSkuAssetProfile"("primarySourceAssetVariantId");
+CREATE INDEX "ProductSkuAssetProfile_sourceAssetVariantIds_idx" ON "ProductSkuAssetProfile" USING GIN ("sourceAssetVariantIds");
+CREATE INDEX "ProductSkuAssetProfile_sourceAssetFamilyId_idx" ON "ProductSkuAssetProfile"("sourceAssetFamilyId");
+CREATE INDEX "ProductSkuAssetProfile_sourceAssetSeriesId_idx" ON "ProductSkuAssetProfile"("sourceAssetSeriesId");
+CREATE INDEX "ProductSkuAssetProfile_specCode_idx" ON "ProductSkuAssetProfile"("specCode");
+CREATE INDEX "ProductSkuAssetProfile_barcode_idx" ON "ProductSkuAssetProfile"("barcode");
+CREATE INDEX "ProductSkuAssetProfile_sourceStatus_idx" ON "ProductSkuAssetProfile"("sourceStatus");
+
+ALTER TABLE "ProductSkuAssetProfile"
+ADD CONSTRAINT "ProductSkuAssetProfile_skuId_fkey"
+FOREIGN KEY ("skuId") REFERENCES "ProductSKU"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+WITH sku_source AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."sourceAssetVariantId",
+    sku."sourceAssetVariantIds",
+    sku."attributes"::jsonb -> 'assetSkuSnapshot' AS asset_snapshot,
+    sku."updatedAt"
+  FROM "ProductSKU" sku
+  JOIN "Product" product ON product."id" = sku."productId"
+  WHERE sku."deletedAt" IS NULL
+    AND product."deletedAt" IS NULL
+    AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+)
+INSERT INTO "ProductSkuAssetProfile" (
+  "id",
+  "skuId",
+  "primarySourceAssetVariantId",
+  "sourceAssetVariantIds",
+  "sourceAssetFamilyId",
+  "sourceAssetSeriesId",
+  "model",
+  "modelName",
+  "specCode",
+  "specName",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "imageUrl",
+  "sourceStatus",
+  "syncedAt",
+  "lockedFields",
+  "lockedReasons",
+  "sourceVariants",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  sku_id,
+  sku_id,
+  COALESCE(NULLIF(asset_snapshot ->> 'sourceAssetVariantId', ''), "sourceAssetVariantId"),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'sourceAssetVariantIds') = 'array' THEN ARRAY(
+      SELECT jsonb_array_elements_text(asset_snapshot -> 'sourceAssetVariantIds')
+    )
+    ELSE COALESCE("sourceAssetVariantIds", ARRAY[]::TEXT[])
+  END,
+  NULLIF(asset_snapshot ->> 'sourceAssetFamilyId', ''),
+  NULLIF(asset_snapshot ->> 'sourceAssetSeriesId', ''),
+  NULLIF(asset_snapshot ->> 'model', ''),
+  NULLIF(asset_snapshot ->> 'modelName', ''),
+  NULLIF(asset_snapshot ->> 'specCode', ''),
+  NULLIF(asset_snapshot ->> 'specName', ''),
+  NULLIF(asset_snapshot ->> 'barcode', ''),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'size') = 'object' THEN asset_snapshot -> 'size'
+    ELSE '{}'::jsonb
+  END,
+  NULLIF(asset_snapshot ->> 'color', ''),
+  NULLIF(asset_snapshot ->> 'material', ''),
+  NULLIF(asset_snapshot ->> 'imageUrl', ''),
+  CASE asset_snapshot ->> 'sourceStatus'
+    WHEN 'DELETED' THEN 'DELETED'::"ProductSkuAssetSourceStatus"
+    WHEN 'MISSING' THEN 'MISSING'::"ProductSkuAssetSourceStatus"
+    ELSE 'ACTIVE'::"ProductSkuAssetSourceStatus"
+  END,
+  CASE
+    WHEN COALESCE(asset_snapshot ->> 'syncedAt', '') ~ '^\d{4}-\d{2}-\d{2}T'
+      THEN (asset_snapshot ->> 'syncedAt')::timestamp(3)
+    ELSE "updatedAt"
+  END,
+  COALESCE(
+    ARRAY(
+      SELECT jsonb_array_elements_text(asset_snapshot -> 'lockedFields')
+      WHERE jsonb_typeof(asset_snapshot -> 'lockedFields') = 'array'
+    ),
+    ARRAY[]::TEXT[]
+  ),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'lockedReasons') = 'object' THEN asset_snapshot -> 'lockedReasons'
+    ELSE '{}'::jsonb
+  END,
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'sourceVariants') = 'array' THEN asset_snapshot -> 'sourceVariants'
+    ELSE '[]'::jsonb
+  END,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM sku_source
+ON CONFLICT ("skuId") DO NOTHING;
+
+CREATE OR REPLACE VIEW external.product_skus_v1 AS
+WITH sku_source AS (
+  SELECT
+    sku.*,
+    sku."attributes"::jsonb AS attributes_json
+  FROM "ProductSKU" sku
+)
+SELECT
+  p."id" AS product_id,
+  p."modelNumber" AS product_model_number,
+  p."name" AS product_name,
+  p."description" AS product_description,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  p."thumbnailUrl" AS product_thumbnail_url,
+  p."modelUrl" AS product_model_url,
+  sku."id" AS sku_id,
+  sku."skuCode" AS sku_code,
+  COALESCE(
+    NULLIF(sku."name", ''),
+    NULLIF(sku.attributes_json ->> 'skuName', ''),
+    NULLIF(profile."specName", ''),
+    sku."skuCode"
+  ) AS sku_name,
+  sku."price" AS price,
+  sku."costPrice" AS cost_price,
+  sku."stock" AS stock,
+  sku."isActive" AS is_active,
+  CASE WHEN sku."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status,
+  COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url,
+  COALESCE(
+    NULLIF(profile."imageUrl", ''),
+    sku."images"[1],
+    NULLIF(p."thumbnailUrl", '')
+  ) AS image_url,
+  sku."images" AS image_urls,
+  sku."sourcePreSkuId" AS source_pre_sku_id,
+  sku."sourceAssetVariantId" AS source_asset_variant_id,
+  sku."sourceAssetVariantIds" AS source_asset_variant_ids,
+  profile."model" AS asset_family_code,
+  profile."modelName" AS asset_family_name,
+  profile."specCode" AS spec_code,
+  profile."specName" AS spec_name,
+  profile."barcode" AS barcode,
+  profile."size" AS size_json,
+  profile."color" AS color,
+  profile."material" AS material,
+  profile."sourceStatus"::text AS source_status,
+  profile."syncedAt"::text AS synced_at,
+  wh."id" AS warehouse_location_id,
+  wh."code" AS warehouse_location_code,
+  wh."name" AS warehouse_location_name,
+  sku."createdAt" AS created_at,
+  sku."updatedAt" AS updated_at
+FROM sku_source sku
+JOIN "Product" p ON p."id" = sku."productId"
+LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+LEFT JOIN "ProductCategory" pc ON pc."id" = p."categoryId"
+LEFT JOIN "WarehouseLocation" wh ON wh."id" = sku."warehouseLocationId"
+WHERE p."deletedAt" IS NULL
+  AND sku."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.product_assets_v1 AS
+WITH image_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    image_item.image_url,
+    image_item.sort_order
+  FROM "ProductSKU" sku
+  CROSS JOIN LATERAL unnest(sku."images") WITH ORDINALITY AS image_item(image_url, sort_order)
+  WHERE sku."deletedAt" IS NULL
+),
+model_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+),
+thumbnail_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    COALESCE(
+      NULLIF(profile."imageUrl", ''),
+      NULLIF(p."thumbnailUrl", '')
+    ) AS thumbnail_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+)
+SELECT
+  'SKU_IMAGE' AS asset_type,
+  product_id,
+  sku_id,
+  image_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  sort_order::integer AS sort_order
+FROM image_assets
+WHERE NULLIF(image_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_MODEL' AS asset_type,
+  product_id,
+  sku_id,
+  model_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order
+FROM model_assets
+WHERE NULLIF(model_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_THUMBNAIL' AS asset_type,
+  product_id,
+  sku_id,
+  thumbnail_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order
+FROM thumbnail_assets
+WHERE NULLIF(thumbnail_url, '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql b/furniture-3d-system/prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql
new file mode 100644
index 00000000..ffe21eaa
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql
@@ -0,0 +1,106 @@
+-- Structure editable PreSku basic information.
+-- PreSku.displaySummary remains a compatibility/process snapshot, while
+-- PreSkuBasicInfo becomes the structured draft source for fields that can flow
+-- into formal intake.
+
+CREATE TABLE "PreSkuBasicInfo" (
+  "id" TEXT NOT NULL,
+  "preSkuId" TEXT NOT NULL,
+  "model" TEXT,
+  "formalSkuCode" TEXT,
+  "barcode" TEXT,
+  "size" TEXT,
+  "color" TEXT,
+  "material" TEXT,
+  "specName" TEXT,
+  "versionNo" TEXT,
+  "setCount" TEXT,
+  "attributeCode" TEXT,
+  "drawingId" TEXT,
+  "installMethod" TEXT,
+  "manualUpdatedBy" TEXT,
+  "manualUpdatedByName" TEXT,
+  "manualUpdatedAt" TIMESTAMP(3),
+  "source" TEXT NOT NULL DEFAULT 'DRAFT_GROUP',
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "PreSkuBasicInfo_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "PreSkuBasicInfo_preSkuId_key" ON "PreSkuBasicInfo"("preSkuId");
+CREATE INDEX "PreSkuBasicInfo_model_idx" ON "PreSkuBasicInfo"("model");
+CREATE INDEX "PreSkuBasicInfo_formalSkuCode_idx" ON "PreSkuBasicInfo"("formalSkuCode");
+CREATE INDEX "PreSkuBasicInfo_barcode_idx" ON "PreSkuBasicInfo"("barcode");
+CREATE INDEX "PreSkuBasicInfo_specName_versionNo_idx" ON "PreSkuBasicInfo"("specName", "versionNo");
+
+ALTER TABLE "PreSkuBasicInfo"
+ADD CONSTRAINT "PreSkuBasicInfo_preSkuId_fkey"
+FOREIGN KEY ("preSkuId") REFERENCES "PreSku"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+INSERT INTO "PreSkuBasicInfo" (
+  "id",
+  "preSkuId",
+  "model",
+  "formalSkuCode",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "specName",
+  "versionNo",
+  "setCount",
+  "attributeCode",
+  "drawingId",
+  "installMethod",
+  "manualUpdatedBy",
+  "manualUpdatedByName",
+  "manualUpdatedAt",
+  "source",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  pre_sku."id",
+  pre_sku."id",
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'size', pre_sku."familySelection"::jsonb ->> 'size', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'color', pre_sku."familySelection"::jsonb ->> 'color', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'material', pre_sku."familySelection"::jsonb ->> 'material', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'versionNo', pre_sku."familySelection"::jsonb ->> 'versionNo', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'setCount', pre_sku."familySelection"::jsonb ->> 'setCount', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'attributeCode', pre_sku."familySelection"::jsonb ->> 'attributeCode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'drawingId', pre_sku."familySelection"::jsonb ->> 'drawingId', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'installMethod', pre_sku."familySelection"::jsonb ->> 'installMethod', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedBy', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedByName', '')), ''),
+  CASE
+    WHEN COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedAt', '') ~ '^\d{4}-\d{2}-\d{2}T'
+      THEN (pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedAt')::timestamp(3)
+    ELSE NULL
+  END,
+  CASE
+    WHEN pre_sku."displaySummary"::jsonb ? 'basicInfoManualUpdatedAt' THEN 'MANUAL'
+    ELSE 'DRAFT_GROUP'
+  END,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM "PreSku" pre_sku
+WHERE (
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'size', pre_sku."familySelection"::jsonb ->> 'size', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'color', pre_sku."familySelection"::jsonb ->> 'color', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'material', pre_sku."familySelection"::jsonb ->> 'material', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'versionNo', pre_sku."familySelection"::jsonb ->> 'versionNo', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'setCount', pre_sku."familySelection"::jsonb ->> 'setCount', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'attributeCode', pre_sku."familySelection"::jsonb ->> 'attributeCode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'drawingId', pre_sku."familySelection"::jsonb ->> 'drawingId', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'installMethod', pre_sku."familySelection"::jsonb ->> 'installMethod', '')), '') IS NOT NULL
+)
+ON CONFLICT ("preSkuId") DO NOTHING;
diff --git a/furniture-3d-system/prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql b/furniture-3d-system/prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql
new file mode 100644
index 00000000..0d3c567c
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql
@@ -0,0 +1,102 @@
+-- Tighten external read-only views so finished product and asset-family fields
+-- read structured columns instead of compatibility JSON snapshots.
+
+CREATE OR REPLACE VIEW external.asset_variants_v1 AS
+SELECT
+  v."id" AS asset_variant_id,
+  v."code" AS spec_code,
+  v."name" AS spec_name,
+  v."assetType"::text AS asset_type,
+  v."status"::text AS asset_status,
+  f."id" AS asset_family_id,
+  f."code" AS asset_family_code,
+  f."name" AS asset_family_name,
+  s."id" AS asset_series_id,
+  s."code" AS asset_series_code,
+  s."name" AS asset_series_name,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  v."sizeLabel" AS size_label,
+  v."dimensions" AS dimensions,
+  v."modelUrl" AS model_url,
+  v."thumbnailUrl" AS thumbnail_url,
+  v."barcode" AS barcode,
+  v."supplierName" AS supplier_name,
+  v."supplierCode" AS supplier_code,
+  v."versionNo" AS version_no,
+  sub."id" AS substrate_id,
+  sub."name" AS substrate_name,
+  finish."id" AS finish_id,
+  finish."code" AS finish_code,
+  finish."name" AS finish_name,
+  CASE
+    WHEN sub."name" IS NOT NULL AND finish."name" IS NOT NULL THEN sub."name" || ' + ' || finish."name"
+    ELSE COALESCE(sub."name", finish."name")
+  END AS material_label,
+  v."weightKg" AS weight_kg,
+  v."costPrice" AS cost_price,
+  v."estimatedCostPrice" AS estimated_cost_price,
+  v."createdAt" AS created_at,
+  v."updatedAt" AS updated_at
+FROM "AssetVariant" v
+JOIN "AssetFamily" f ON f."id" = v."assetFamilyId"
+LEFT JOIN "AssetSeries" s ON s."id" = f."assetSeriesId"
+LEFT JOIN "ProductCategory" pc ON pc."id" = f."productCategoryId"
+LEFT JOIN "Substrate" sub ON sub."id" = v."substrateId"
+LEFT JOIN "Material" finish ON finish."id" = v."finishId"
+WHERE v."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.product_skus_v1 AS
+SELECT
+  p."id" AS product_id,
+  p."modelNumber" AS product_model_number,
+  p."name" AS product_name,
+  p."description" AS product_description,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  p."thumbnailUrl" AS product_thumbnail_url,
+  p."modelUrl" AS product_model_url,
+  sku."id" AS sku_id,
+  sku."skuCode" AS sku_code,
+  COALESCE(
+    NULLIF(sku."name", ''),
+    NULLIF(profile."specName", ''),
+    sku."skuCode"
+  ) AS sku_name,
+  sku."price" AS price,
+  sku."costPrice" AS cost_price,
+  sku."stock" AS stock,
+  sku."isActive" AS is_active,
+  CASE WHEN sku."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status,
+  COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url,
+  COALESCE(
+    NULLIF(profile."imageUrl", ''),
+    sku."images"[1],
+    NULLIF(p."thumbnailUrl", '')
+  ) AS image_url,
+  sku."images" AS image_urls,
+  sku."sourcePreSkuId" AS source_pre_sku_id,
+  sku."sourceAssetVariantId" AS source_asset_variant_id,
+  sku."sourceAssetVariantIds" AS source_asset_variant_ids,
+  profile."model" AS asset_family_code,
+  profile."modelName" AS asset_family_name,
+  profile."specCode" AS spec_code,
+  profile."specName" AS spec_name,
+  profile."barcode" AS barcode,
+  profile."size" AS size_json,
+  profile."color" AS color,
+  profile."material" AS material,
+  profile."sourceStatus"::text AS source_status,
+  profile."syncedAt"::text AS synced_at,
+  wh."id" AS warehouse_location_id,
+  wh."code" AS warehouse_location_code,
+  wh."name" AS warehouse_location_name,
+  sku."createdAt" AS created_at,
+  sku."updatedAt" AS updated_at
+FROM "ProductSKU" sku
+JOIN "Product" p ON p."id" = sku."productId"
+LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+LEFT JOIN "ProductCategory" pc ON pc."id" = p."categoryId"
+LEFT JOIN "WarehouseLocation" wh ON wh."id" = sku."warehouseLocationId"
+WHERE p."deletedAt" IS NULL
+  AND sku."deletedAt" IS NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql b/furniture-3d-system/prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql
new file mode 100644
index 00000000..3f732156
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql
@@ -0,0 +1,184 @@
+-- Structure non-integrated product-level master fields that were previously
+-- only available inside IntakeNonIntegratedProduct.payload.
+
+CREATE TABLE "IntakeNonIntegratedProductProfile" (
+  "id" TEXT NOT NULL,
+  "productId" TEXT NOT NULL,
+  "productName" TEXT NOT NULL DEFAULT '',
+  "productImageUrl" TEXT,
+  "productCategory" TEXT NOT NULL DEFAULT '',
+  "salesCategory" TEXT NOT NULL DEFAULT '',
+  "productYear" TEXT NOT NULL DEFAULT '',
+  "productStatus" TEXT NOT NULL DEFAULT '',
+  "productDevelopmentKind" TEXT NOT NULL DEFAULT '',
+  "goodsType" TEXT NOT NULL DEFAULT '',
+  "materialType" TEXT NOT NULL DEFAULT '',
+  "productionType" TEXT NOT NULL DEFAULT '',
+  "size" TEXT NOT NULL DEFAULT '',
+  "color" TEXT NOT NULL DEFAULT '',
+  "tagMaterial" TEXT NOT NULL DEFAULT '',
+  "priceBand" TEXT NOT NULL DEFAULT '',
+  "demandFlowNo" TEXT NOT NULL DEFAULT '',
+  "processTemplate" TEXT NOT NULL DEFAULT '',
+  "productPlanning" TEXT NOT NULL DEFAULT '',
+  "brandPlanning" TEXT NOT NULL DEFAULT '',
+  "demandDepartment" TEXT NOT NULL DEFAULT '',
+  "spuOwner" TEXT NOT NULL DEFAULT '',
+  "operationsOwner" TEXT NOT NULL DEFAULT '',
+  "purchaseOwner" TEXT NOT NULL DEFAULT '',
+  "visualDirector" TEXT NOT NULL DEFAULT '',
+  "visualPlanning" TEXT NOT NULL DEFAULT '',
+  "structureDesigner" TEXT NOT NULL DEFAULT '',
+  "source" TEXT NOT NULL DEFAULT 'PAYLOAD_SYNC',
+  "syncedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "IntakeNonIntegratedProductProfile_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "IntakeNonIntegratedProductProfile_productId_key"
+  ON "IntakeNonIntegratedProductProfile"("productId");
+CREATE INDEX "IntakeNonIntegratedProductProfile_productName_idx"
+  ON "IntakeNonIntegratedProductProfile"("productName");
+CREATE INDEX "IntakeNonIntegratedProductProfile_productCategory_idx"
+  ON "IntakeNonIntegratedProductProfile"("productCategory");
+CREATE INDEX "IntakeNonIntegratedProductProfile_salesCategory_idx"
+  ON "IntakeNonIntegratedProductProfile"("salesCategory");
+CREATE INDEX "IntakeNonIntegratedProductProfile_productStatus_idx"
+  ON "IntakeNonIntegratedProductProfile"("productStatus");
+CREATE INDEX "IntakeNonIntegratedProductProfile_productDevelopmentKind_idx"
+  ON "IntakeNonIntegratedProductProfile"("productDevelopmentKind");
+CREATE INDEX "IntakeNonIntegratedProductProfile_spuOwner_idx"
+  ON "IntakeNonIntegratedProductProfile"("spuOwner");
+CREATE INDEX "IntakeNonIntegratedProductProfile_purchaseOwner_idx"
+  ON "IntakeNonIntegratedProductProfile"("purchaseOwner");
+
+ALTER TABLE "IntakeNonIntegratedProductProfile"
+ADD CONSTRAINT "IntakeNonIntegratedProductProfile_productId_fkey"
+FOREIGN KEY ("productId") REFERENCES "IntakeNonIntegratedProduct"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+INSERT INTO "IntakeNonIntegratedProductProfile" (
+  "id",
+  "productId",
+  "productName",
+  "productImageUrl",
+  "productCategory",
+  "salesCategory",
+  "productYear",
+  "productStatus",
+  "productDevelopmentKind",
+  "goodsType",
+  "materialType",
+  "productionType",
+  "size",
+  "color",
+  "tagMaterial",
+  "priceBand",
+  "demandFlowNo",
+  "processTemplate",
+  "productPlanning",
+  "brandPlanning",
+  "demandDepartment",
+  "spuOwner",
+  "operationsOwner",
+  "purchaseOwner",
+  "visualDirector",
+  "visualPlanning",
+  "structureDesigner",
+  "source",
+  "syncedAt",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  'inip_' || p."id",
+  p."id",
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'productName'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'previewImageName'), ''),
+    p."spu"
+  ),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'productImage'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'previewImage'), '')
+  ),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'productCategory'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'productCategory'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'salesCategory'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'salesCategory'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'year'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'year'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'currentStage'), ''),
+    NULLIF(btrim(p."payload"::jsonb ->> 'projectStatus'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'productDevelopmentKind'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'goodsType'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'materialType'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'productionType'), ''), ''),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb ->> 'size'), ''),
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'size'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'color'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'tagMaterial'), ''), ''),
+  COALESCE(
+    NULLIF(btrim(p."payload"::jsonb ->> 'priceBand'), ''),
+    NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'targetPriceBand'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'demandFlowNo'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'processTemplate'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'productPlanning'), ''),
+           NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'planningOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'brandPlanning'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'demandDepartment'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'spuOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'operationsOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'purchaseOwner'), ''), NULLIF(btrim(p."purchaser"), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'visualDirector'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb ->> 'visualPlanning'), ''), ''),
+  COALESCE(NULLIF(btrim(p."payload"::jsonb -> 'openingReference' ->> 'structureDesigner'), ''), ''),
+  'MIGRATED_FROM_PAYLOAD',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM "IntakeNonIntegratedProduct" p
+WHERE p."deletedAt" IS NULL
+ON CONFLICT ("productId") DO NOTHING;
+
+CREATE OR REPLACE VIEW external.intake_products_v1 AS
+SELECT
+  p."id" AS intake_product_id,
+  p."spu" AS spu,
+  p."spuBase" AS spu_base,
+  p."brand" AS brand,
+  COALESCE(NULLIF(profile."productName", ''), p."spu") AS product_name,
+  profile."productImageUrl" AS product_image_url,
+  profile."productCategory" AS product_category,
+  profile."salesCategory" AS sales_category,
+  profile."productYear" AS product_year,
+  profile."productStatus" AS product_status,
+  COALESCE(NULLIF(profile."structureDesigner", ''), NULLIF(p."designer", '')) AS designer,
+  p."operator" AS operator,
+  p."purchaser" AS purchaser,
+  profile."productDevelopmentKind" AS product_development_kind,
+  profile."goodsType" AS goods_type,
+  profile."materialType" AS material_type,
+  profile."productionType" AS production_type,
+  p."createdAt" AS created_at,
+  p."updatedAt" AS updated_at
+FROM "IntakeNonIntegratedProduct" p
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = p."id"
+WHERE p."deletedAt" IS NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260530162000_add_product_patent_records/migration.sql b/furniture-3d-system/prisma/migrations/20260530162000_add_product_patent_records/migration.sql
new file mode 100644
index 00000000..a614289e
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530162000_add_product_patent_records/migration.sql
@@ -0,0 +1,54 @@
+-- Move product patent ledger records from browser localStorage into PostgreSQL.
+-- localStorage may remain as a legacy client cache, but this table is the data truth.
+
+CREATE TABLE IF NOT EXISTS "ProductPatentRecord" (
+  "id" TEXT NOT NULL,
+  "patentGroupKey" TEXT NOT NULL DEFAULT '',
+  "productId" TEXT NOT NULL DEFAULT '',
+  "linkedProductIds" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "linkedProductNames" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "linkedSpus" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "linkedBrands" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "productDisplayName" TEXT NOT NULL DEFAULT '',
+  "productImage" TEXT,
+  "productImageName" TEXT NOT NULL DEFAULT '',
+  "patentStatus" TEXT NOT NULL DEFAULT '待确认',
+  "patentType" TEXT NOT NULL DEFAULT '外观设计',
+  "patentName" TEXT NOT NULL DEFAULT '',
+  "spu" TEXT NOT NULL DEFAULT '',
+  "saRequired" TEXT NOT NULL DEFAULT '否',
+  "salesStatus" TEXT NOT NULL DEFAULT '在售',
+  "designer" TEXT NOT NULL DEFAULT '',
+  "applicationNo" TEXT NOT NULL DEFAULT '',
+  "patentNo" TEXT NOT NULL DEFAULT '',
+  "applicationDate" TEXT NOT NULL DEFAULT '',
+  "authorizationDate" TEXT NOT NULL DEFAULT '',
+  "firstFeeDate" TEXT NOT NULL DEFAULT '',
+  "annualFees" JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "annualFeeDates" JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "nextFeeDueDate" TEXT NOT NULL DEFAULT '',
+  "feeAmount" TEXT NOT NULL DEFAULT '',
+  "patentCertificateFileName" TEXT NOT NULL DEFAULT '',
+  "patentCertificateFileUrl" TEXT,
+  "patentCertificateFileMimeType" TEXT NOT NULL DEFAULT '',
+  "patentCertificateStorageKey" TEXT NOT NULL DEFAULT '',
+  "annualFeeNote" TEXT NOT NULL DEFAULT '',
+  "continueDecision" TEXT NOT NULL DEFAULT '待判断',
+  "decisionReason" TEXT NOT NULL DEFAULT '',
+  "owner" TEXT NOT NULL DEFAULT '',
+  "remark" TEXT NOT NULL DEFAULT '',
+  "sortOrder" INTEGER NOT NULL DEFAULT 0,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ProductPatentRecord_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_patentGroupKey_idx" ON "ProductPatentRecord"("patentGroupKey");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_productId_idx" ON "ProductPatentRecord"("productId");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_spu_idx" ON "ProductPatentRecord"("spu");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_patentStatus_idx" ON "ProductPatentRecord"("patentStatus");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_patentNo_idx" ON "ProductPatentRecord"("patentNo");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_applicationNo_idx" ON "ProductPatentRecord"("applicationNo");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_designer_idx" ON "ProductPatentRecord"("designer");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_nextFeeDueDate_idx" ON "ProductPatentRecord"("nextFeeDueDate");
+CREATE INDEX IF NOT EXISTS "ProductPatentRecord_sortOrder_idx" ON "ProductPatentRecord"("sortOrder");
diff --git a/furniture-3d-system/prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql b/furniture-3d-system/prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql
new file mode 100644
index 00000000..b0d65cb5
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql
@@ -0,0 +1,44 @@
+-- Move JST stock source fields from IntakeNonIntegratedProduct.payload.metadata
+-- into the structured product profile. Payload remains a compatibility snapshot.
+
+ALTER TABLE "IntakeNonIntegratedProductProfile"
+  ADD COLUMN "sourceSpu" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceSkuId" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceCategory" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceItemType" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceSalesStatus" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceEnabled" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "sourceStockDisabled" TEXT NOT NULL DEFAULT '',
+  ADD COLUMN "stockSkuCount" INTEGER NOT NULL DEFAULT 0,
+  ADD COLUMN "stockHasOnSaleSku" BOOLEAN NOT NULL DEFAULT false;
+
+UPDATE "IntakeNonIntegratedProductProfile" profile
+SET
+  "sourceSpu" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSpu'), ''), ''),
+  "sourceSkuId" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSkuId'), ''), ''),
+  "sourceCategory" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceCategory'), ''), ''),
+  "sourceItemType" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceItemType'), ''), ''),
+  "sourceSalesStatus" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), ''),
+  "sourceEnabled" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceEnabled'), ''), ''),
+  "sourceStockDisabled" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceStockDisabled'), ''), ''),
+  "stockSkuCount" = CASE
+    WHEN jsonb_typeof(product."payload"::jsonb -> 'skuItems') = 'array'
+      THEN jsonb_array_length(product."payload"::jsonb -> 'skuItems')
+    ELSE 0
+  END,
+  "stockHasOnSaleSku" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') = '销售'
+FROM "IntakeNonIntegratedProduct" product
+WHERE product."id" = profile."productId";
+
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceSpu_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceSpu");
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceSkuId_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceSkuId");
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceCategory_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceCategory");
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceItemType_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceItemType");
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceSalesStatus_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceSalesStatus");
+CREATE INDEX "IntakeNonIntegratedProductProfile_sourceEnabled_idx"
+  ON "IntakeNonIntegratedProductProfile"("sourceEnabled");
diff --git a/furniture-3d-system/prisma/migrations/20260530190000_add_intake_reference_library/migration.sql b/furniture-3d-system/prisma/migrations/20260530190000_add_intake_reference_library/migration.sql
new file mode 100644
index 00000000..aedfed6a
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260530190000_add_intake_reference_library/migration.sql
@@ -0,0 +1,35 @@
+-- Provide a database truth-source landing zone for intake-side reference libraries
+-- that are still surfaced as localStorage advisory items.
+
+CREATE TABLE "IntakeReferenceLibraryItem" (
+  "id" TEXT NOT NULL,
+  "libraryType" TEXT NOT NULL,
+  "itemKey" TEXT NOT NULL,
+  "code" TEXT NOT NULL DEFAULT '',
+  "name" TEXT NOT NULL DEFAULT '',
+  "category" TEXT NOT NULL DEFAULT '',
+  "letter" TEXT NOT NULL DEFAULT '',
+  "payload" JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "sortOrder" INTEGER NOT NULL DEFAULT 0,
+  "isActive" BOOLEAN NOT NULL DEFAULT true,
+  "createdBy" TEXT,
+  "updatedBy" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "IntakeReferenceLibraryItem_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "IntakeReferenceLibraryItem_libraryType_itemKey_key"
+  ON "IntakeReferenceLibraryItem"("libraryType", "itemKey");
+CREATE UNIQUE INDEX "IntakeReferenceLibraryItem_libraryType_code_non_empty_key"
+  ON "IntakeReferenceLibraryItem"("libraryType", "code")
+  WHERE NULLIF(btrim("code"), '') IS NOT NULL;
+CREATE INDEX "IntakeReferenceLibraryItem_libraryType_isActive_sortOrder_idx"
+  ON "IntakeReferenceLibraryItem"("libraryType", "isActive", "sortOrder");
+CREATE INDEX "IntakeReferenceLibraryItem_libraryType_code_idx"
+  ON "IntakeReferenceLibraryItem"("libraryType", "code");
+CREATE INDEX "IntakeReferenceLibraryItem_libraryType_name_idx"
+  ON "IntakeReferenceLibraryItem"("libraryType", "name");
+CREATE INDEX "IntakeReferenceLibraryItem_category_idx"
+  ON "IntakeReferenceLibraryItem"("category");
diff --git a/furniture-3d-system/prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql b/furniture-3d-system/prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql
new file mode 100644
index 00000000..dadd8f61
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql
@@ -0,0 +1,78 @@
+-- Tighten external intake views so external systems read structured source
+-- tables instead of compatibility JSON payload snapshots.
+
+CREATE OR REPLACE VIEW external.intake_products_v1 AS
+SELECT
+  product."id" AS intake_product_id,
+  product."spu" AS spu,
+  product."spuBase" AS spu_base,
+  product."brand" AS brand,
+  profile."productName" AS product_name,
+  profile."productImageUrl" AS product_image_url,
+  profile."productCategory" AS product_category,
+  profile."salesCategory" AS sales_category,
+  profile."productYear" AS product_year,
+  profile."productStatus" AS product_status,
+  product."designer" AS designer,
+  product."operator" AS operator,
+  product."purchaser" AS purchaser,
+  profile."productDevelopmentKind" AS product_development_kind,
+  profile."goodsType" AS goods_type,
+  profile."materialType" AS material_type,
+  profile."productionType" AS production_type,
+  product."createdAt" AS created_at,
+  product."updatedAt" AS updated_at
+FROM "IntakeNonIntegratedProduct" product
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_v1 AS
+SELECT
+  product."id" AS intake_product_id,
+  product."spu" AS spu,
+  product."brand" AS brand,
+  sku."skuItemId" AS intake_sku_item_id,
+  sku."skuSequence" AS sku_sequence,
+  sku."batchNo" AS batch_no,
+  sku."image" AS image_url,
+  sku."imageName" AS image_name,
+  sku."model" AS model,
+  sku."skuCode" AS sku_code,
+  sku."specName" AS spec_name,
+  sku."barcode" AS barcode,
+  sku."size" AS size,
+  sku."color" AS color,
+  sku."material" AS material,
+  sku."versionNo" AS version_no,
+  sku."attributeCode" AS attribute_code,
+  sku."drawingId" AS drawing_id,
+  sku."installMethod" AS install_method,
+  sku."executeStandard" AS execute_standard,
+  sku."manufacturer" AS manufacturer,
+  sku."manufacturerCode" AS manufacturer_code,
+  sku."salesStatus" AS sales_status,
+  sku."model3dDataUrl" AS model_3d_url,
+  sku."source" AS source,
+  sku."sourceTable" AS source_table,
+  sku."sourceSkuId" AS source_sku_id,
+  sku."missingRequiredFields" AS missing_required_fields,
+  sku."dataQualityStatus"::text AS data_quality_status,
+  sku."contentLocked" AS content_locked,
+  sku."sortOrder" AS sort_order
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.intake_products_ready_v1 AS
+SELECT *
+FROM external.intake_products_v1
+WHERE NULLIF(btrim(COALESCE(product_name, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_category, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_development_kind, '')), '') IS NOT NULL;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_ready_v1 AS
+SELECT sku.*
+FROM external.intake_sku_items_v1 sku
+JOIN external.intake_products_ready_v1 product
+  ON product.intake_product_id = sku.intake_product_id
+WHERE sku.data_quality_status = 'READY';
diff --git a/furniture-3d-system/prisma/migrations/20260531113000_add_spu_number_counter/migration.sql b/furniture-3d-system/prisma/migrations/20260531113000_add_spu_number_counter/migration.sql
new file mode 100644
index 00000000..7814dc5b
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531113000_add_spu_number_counter/migration.sql
@@ -0,0 +1,69 @@
+-- Dedicated SPU number counter.
+-- SPU_RULE reference-library rows describe business rules; this table is the
+-- transactional source for the next formal number in each product category.
+
+CREATE TABLE IF NOT EXISTS "SpuNumberCounter" (
+  "id" TEXT NOT NULL,
+  "productCategory" TEXT NOT NULL,
+  "prefix" TEXT NOT NULL,
+  "lastUsedIndex" INTEGER NOT NULL DEFAULT 0,
+  "sourceLibraryItemId" TEXT,
+  "createdBy" TEXT,
+  "updatedBy" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "SpuNumberCounter_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "SpuNumberCounter_productCategory_key"
+  ON "SpuNumberCounter"("productCategory");
+
+CREATE INDEX IF NOT EXISTS "SpuNumberCounter_prefix_idx"
+  ON "SpuNumberCounter"("prefix");
+
+CREATE INDEX IF NOT EXISTS "SpuNumberCounter_sourceLibraryItemId_idx"
+  ON "SpuNumberCounter"("sourceLibraryItemId");
+
+INSERT INTO "SpuNumberCounter" (
+  "id",
+  "productCategory",
+  "prefix",
+  "lastUsedIndex",
+  "sourceLibraryItemId",
+  "createdBy",
+  "updatedBy",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  'spu-counter-' || regexp_replace(lower(row."itemKey"), '[^a-z0-9_-]+', '-', 'g') AS "id",
+  row."name" AS "productCategory",
+  upper(row."code") AS "prefix",
+  GREATEST(
+    COALESCE(NULLIF(row."payload"::jsonb -> 'rule' ->> 'spuIndex', '')::integer, 0),
+    COALESCE(used.max_used_index, 0)
+  ) AS "lastUsedIndex",
+  row."id" AS "sourceLibraryItemId",
+  row."createdBy",
+  row."updatedBy",
+  row."createdAt",
+  row."updatedAt"
+FROM "IntakeReferenceLibraryItem" row
+LEFT JOIN LATERAL (
+  SELECT MAX((substring(product."spuBase" from ('^' || upper(row."code") || '([0-9]{4})$')))::integer) AS max_used_index
+  FROM "IntakeNonIntegratedProduct" product
+  WHERE product."deletedAt" IS NULL
+    AND NULLIF(btrim(row."code"), '') IS NOT NULL
+    AND product."spuBase" ~ ('^' || upper(row."code") || '[0-9]{4}$')
+) used ON true
+WHERE row."libraryType" = 'SPU_RULE'
+  AND row."isActive" = true
+  AND NULLIF(btrim(row."name"), '') IS NOT NULL
+  AND NULLIF(btrim(row."code"), '') IS NOT NULL
+ON CONFLICT ("productCategory") DO UPDATE SET
+  "prefix" = EXCLUDED."prefix",
+  "lastUsedIndex" = GREATEST("SpuNumberCounter"."lastUsedIndex", EXCLUDED."lastUsedIndex"),
+  "sourceLibraryItemId" = EXCLUDED."sourceLibraryItemId",
+  "updatedBy" = EXCLUDED."updatedBy",
+  "updatedAt" = CURRENT_TIMESTAMP;
diff --git a/furniture-3d-system/prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql b/furniture-3d-system/prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql
new file mode 100644
index 00000000..4b4bac55
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql
@@ -0,0 +1,88 @@
+-- Add physical database guards for non-integrated master-data quality.
+-- Draft rows may still be incomplete, but invalid enums or inconsistent READY
+-- states must not survive service bypasses, imports, or manual SQL writes.
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'IntakeNonIntegratedProductProfile_productDevelopmentKind_allowe'
+  )
+  AND NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'IntakeProductProfile_developmentKind_allowed'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedProductProfile"
+      RENAME CONSTRAINT "IntakeNonIntegratedProductProfile_productDevelopmentKind_allowe"
+      TO "IntakeProductProfile_developmentKind_allowed";
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'IntakeProductProfile_developmentKind_allowed'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedProductProfile"
+      ADD CONSTRAINT "IntakeProductProfile_developmentKind_allowed"
+      CHECK (
+        "productDevelopmentKind" = ''
+        OR "productDevelopmentKind" IN ('product', 'series')
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "PreSkuBasicInfo_formalSkuCode_non_empty_key"
+  ON "PreSkuBasicInfo"("formalSkuCode")
+  WHERE NULLIF(btrim("formalSkuCode"), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "PreSkuBasicInfo_barcode_non_empty_key"
+  ON "PreSkuBasicInfo"("barcode")
+  WHERE NULLIF(btrim("barcode"), '') IS NOT NULL;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'IntakeNonIntegratedSkuItem_missingRequiredFields_allowed'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedSkuItem"
+      ADD CONSTRAINT "IntakeNonIntegratedSkuItem_missingRequiredFields_allowed"
+      CHECK (
+        "missingRequiredFields" <@ ARRAY['sku_code', 'spec_name', 'model']::TEXT[]
+      );
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'IntakeNonIntegratedSkuItem_quality_state_required_fields'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedSkuItem"
+      ADD CONSTRAINT "IntakeNonIntegratedSkuItem_quality_state_required_fields"
+      CHECK (
+        (
+          "dataQualityStatus" = 'READY'
+          AND NULLIF(btrim("skuCode"), '') IS NOT NULL
+          AND NULLIF(btrim("specName"), '') IS NOT NULL
+          AND NULLIF(btrim("model"), '') IS NOT NULL
+          AND cardinality("missingRequiredFields") = 0
+        )
+        OR
+        (
+          "dataQualityStatus" = 'INCOMPLETE'
+          AND (
+            NULLIF(btrim("skuCode"), '') IS NULL
+            OR NULLIF(btrim("specName"), '') IS NULL
+            OR NULLIF(btrim("model"), '') IS NULL
+            OR cardinality("missingRequiredFields") > 0
+          )
+        )
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql b/furniture-3d-system/prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql
new file mode 100644
index 00000000..8c427261
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql
@@ -0,0 +1,42 @@
+-- Harden formal SPU counter source.
+-- The counter table is the transactional source for formal SPU numbers; empty
+-- categories/prefixes or negative indexes must be blocked below the service layer.
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'SpuNumberCounter_productCategory_not_blank'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_productCategory_not_blank"
+      CHECK (NULLIF(btrim("productCategory"), '') IS NOT NULL);
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'SpuNumberCounter_prefix_not_blank'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_prefix_not_blank"
+      CHECK (NULLIF(btrim("prefix"), '') IS NOT NULL);
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'SpuNumberCounter_lastUsedIndex_non_negative'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_lastUsedIndex_non_negative"
+      CHECK ("lastUsedIndex" >= 0);
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql
new file mode 100644
index 00000000..198b7a60
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql
@@ -0,0 +1,8 @@
+-- SPU_RULE product category must be one-to-one.
+-- The formal counter is keyed by product category, so duplicate active rules
+-- would make the initial counter source ambiguous.
+
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeReferenceLibraryItem_spu_rule_name_non_empty_key"
+  ON "IntakeReferenceLibraryItem"("name")
+  WHERE "libraryType" = 'SPU_RULE'
+    AND NULLIF(btrim("name"), '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260531170000_tighten_external_intake_product_people_sources/migration.sql b/furniture-3d-system/prisma/migrations/20260531170000_tighten_external_intake_product_people_sources/migration.sql
new file mode 100644
index 00000000..4a991764
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531170000_tighten_external_intake_product_people_sources/migration.sql
@@ -0,0 +1,38 @@
+-- External intake product people fields must read structured profile columns
+-- first. Legacy product columns remain only as compatibility fallback.
+
+CREATE OR REPLACE VIEW external.intake_products_v1 AS
+SELECT
+  product."id" AS intake_product_id,
+  product."spu" AS spu,
+  product."spuBase" AS spu_base,
+  product."brand" AS brand,
+  profile."productName" AS product_name,
+  profile."productImageUrl" AS product_image_url,
+  profile."productCategory" AS product_category,
+  profile."salesCategory" AS sales_category,
+  profile."productYear" AS product_year,
+  profile."productStatus" AS product_status,
+  COALESCE(NULLIF(profile."structureDesigner", ''), NULLIF(product."designer", '')) AS designer,
+  COALESCE(NULLIF(profile."productPlanning", ''), NULLIF(product."operator", '')) AS operator,
+  COALESCE(NULLIF(profile."purchaseOwner", ''), NULLIF(product."purchaser", '')) AS purchaser,
+  profile."productDevelopmentKind" AS product_development_kind,
+  profile."goodsType" AS goods_type,
+  profile."materialType" AS material_type,
+  profile."productionType" AS production_type,
+  product."createdAt" AS created_at,
+  product."updatedAt" AS updated_at,
+  profile."productPlanning" AS product_planning,
+  profile."visualPlanning" AS visual_planning,
+  profile."structureDesigner" AS structure_designer,
+  profile."purchaseOwner" AS purchase_owner
+FROM "IntakeNonIntegratedProduct" product
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.intake_products_ready_v1 AS
+SELECT *
+FROM external.intake_products_v1
+WHERE NULLIF(btrim(COALESCE(product_name, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_category, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_development_kind, '')), '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260531173000_add_product_sku_asset_profile_barcode_unique_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260531173000_add_product_sku_asset_profile_barcode_unique_guard/migration.sql
new file mode 100644
index 00000000..7bcc1ce4
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531173000_add_product_sku_asset_profile_barcode_unique_guard/migration.sql
@@ -0,0 +1,8 @@
+-- Active SKU asset-profile barcodes are externally consumed identities.
+-- Empty barcodes remain allowed while data is incomplete, but non-empty active
+-- barcodes must not collide.
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductSkuAssetProfile_barcode_active_non_empty_key"
+  ON "ProductSkuAssetProfile"("barcode")
+  WHERE "sourceStatus" = 'ACTIVE'
+    AND NULLIF(btrim("barcode"), '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260531181000_add_product_sku_active_code_marker_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260531181000_add_product_sku_active_code_marker_guard/migration.sql
new file mode 100644
index 00000000..019c6196
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531181000_add_product_sku_active_code_marker_guard/migration.sql
@@ -0,0 +1,6 @@
+ALTER TABLE "ProductSKU"
+  ADD CONSTRAINT "ProductSKU_active_skuCode_not_deleted_marker"
+  CHECK (
+    "deletedAt" IS NOT NULL
+    OR POSITION('__deleted__' IN "skuCode") = 0
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql
new file mode 100644
index 00000000..a1b51e9c
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql
@@ -0,0 +1,24 @@
+-- ProductSkuAssetProfile.sourceStatus describes the source asset status.
+-- SKU lifecycle must be tracked separately so soft-deleted formal SKUs release
+-- the active barcode pool without pretending the source asset was deleted.
+
+ALTER TABLE "ProductSkuAssetProfile"
+  ADD COLUMN IF NOT EXISTS "skuDeletedAt" TIMESTAMP(3);
+
+UPDATE "ProductSkuAssetProfile" profile
+SET "skuDeletedAt" = sku."deletedAt"
+FROM "ProductSKU" sku
+WHERE profile."skuId" = sku."id"
+  AND sku."deletedAt" IS NOT NULL
+  AND profile."skuDeletedAt" IS NULL;
+
+DROP INDEX IF EXISTS "ProductSkuAssetProfile_barcode_active_non_empty_key";
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductSkuAssetProfile_barcode_active_non_empty_key"
+  ON "ProductSkuAssetProfile"("barcode")
+  WHERE "sourceStatus" = 'ACTIVE'
+    AND "skuDeletedAt" IS NULL
+    AND NULLIF(btrim("barcode"), '') IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS "ProductSkuAssetProfile_skuDeletedAt_idx"
+  ON "ProductSkuAssetProfile"("skuDeletedAt");
diff --git a/furniture-3d-system/prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql
new file mode 100644
index 00000000..7bd8c442
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql
@@ -0,0 +1,696 @@
+-- Core code/barcode identities must be normalized at the database layer.
+-- Service code already trims and uppercases most write paths, but physical
+-- guards keep direct SQL, imports, and future services from bypassing that rule.
+
+CREATE TABLE IF NOT EXISTS "CommonComponentCategory" (
+  "id" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "description" TEXT,
+  "icon" TEXT,
+  "sortOrder" INTEGER NOT NULL DEFAULT 0,
+  "isActive" BOOLEAN NOT NULL DEFAULT true,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "CommonComponentCategory_pkey" PRIMARY KEY ("id")
+);
+
+CREATE TABLE IF NOT EXISTS "CommonComponent" (
+  "id" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "code" TEXT NOT NULL,
+  "categoryId" TEXT NOT NULL,
+  "description" TEXT,
+  "modelUrl" TEXT NOT NULL,
+  "thumbnailUrl" TEXT,
+  "dimensions" JSONB,
+  "specifications" JSONB,
+  "mountPoints" JSONB,
+  "isPreset" BOOLEAN NOT NULL DEFAULT false,
+  "isActive" BOOLEAN NOT NULL DEFAULT true,
+  "createdBy" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "CommonComponent_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "CommonComponentCategory_name_key"
+  ON "CommonComponentCategory"("name");
+CREATE INDEX IF NOT EXISTS "CommonComponentCategory_sortOrder_idx"
+  ON "CommonComponentCategory"("sortOrder");
+CREATE INDEX IF NOT EXISTS "CommonComponentCategory_isActive_idx"
+  ON "CommonComponentCategory"("isActive");
+CREATE UNIQUE INDEX IF NOT EXISTS "CommonComponent_code_key"
+  ON "CommonComponent"("code");
+CREATE INDEX IF NOT EXISTS "CommonComponent_categoryId_idx"
+  ON "CommonComponent"("categoryId");
+CREATE INDEX IF NOT EXISTS "CommonComponent_code_idx"
+  ON "CommonComponent"("code");
+CREATE INDEX IF NOT EXISTS "CommonComponent_isPreset_idx"
+  ON "CommonComponent"("isPreset");
+CREATE INDEX IF NOT EXISTS "CommonComponent_isActive_idx"
+  ON "CommonComponent"("isActive");
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'CommonComponent_categoryId_fkey'
+  ) THEN
+    ALTER TABLE "CommonComponent"
+      ADD CONSTRAINT "CommonComponent_categoryId_fkey"
+      FOREIGN KEY ("categoryId") REFERENCES "CommonComponentCategory"("id")
+      ON DELETE RESTRICT ON UPDATE CASCADE;
+  END IF;
+END $$;
+
+DO $$
+DECLARE
+  duplicate_group_count INTEGER;
+BEGIN
+  WITH duplicate_groups AS (
+    SELECT 'AssetSeries.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "AssetSeries"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'AssetFamily.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "AssetFamily"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'DraftGroup.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "DraftGroup"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'IntakeReferenceLibraryItem.code' AS field_name, "libraryType" || ':' || upper(btrim("code")) AS normalized_value
+    FROM "IntakeReferenceLibraryItem"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY "libraryType", upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'SpuNumberCounter.prefix' AS field_name, upper(btrim("prefix")) AS normalized_value
+    FROM "SpuNumberCounter"
+    WHERE NULLIF(btrim("prefix"), '') IS NOT NULL
+    GROUP BY upper(btrim("prefix"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'PlanningTemplate.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "PlanningTemplate"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'Substrate.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "Substrate"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'WarehouseLocation.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "WarehouseLocation"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'PackagedItem.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "PackagedItem"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'Material.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "Material"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'Hardware.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "Hardware"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'CommonComponent.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "CommonComponent"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'IntakeNonIntegratedProduct.spu_brand' AS field_name, upper(btrim("spu")) || ':' || btrim("brand") AS normalized_value
+    FROM "IntakeNonIntegratedProduct"
+    WHERE NULLIF(btrim("spu"), '') IS NOT NULL
+      AND NULLIF(btrim("brand"), '') IS NOT NULL
+    GROUP BY upper(btrim("spu")), btrim("brand")
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'Product.modelNumber' AS field_name, upper(btrim("modelNumber")) AS normalized_value
+    FROM "Product"
+    WHERE NULLIF(btrim("modelNumber"), '') IS NOT NULL
+    GROUP BY upper(btrim("modelNumber"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'ProductSKU.skuCode' AS field_name, upper(btrim("skuCode")) AS normalized_value
+    FROM "ProductSKU"
+    WHERE "deletedAt" IS NULL
+      AND NULLIF(btrim("skuCode"), '') IS NOT NULL
+    GROUP BY upper(btrim("skuCode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'AssetVariant.code' AS field_name, upper(btrim("code")) AS normalized_value
+    FROM "AssetVariant"
+    WHERE NULLIF(btrim("code"), '') IS NOT NULL
+    GROUP BY upper(btrim("code"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'AssetVariant.barcode' AS field_name, upper(btrim("barcode")) AS normalized_value
+    FROM "AssetVariant"
+    WHERE "deletedAt" IS NULL
+      AND NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL
+    GROUP BY upper(btrim("barcode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'PreSkuBasicInfo.formalSkuCode' AS field_name, upper(btrim("formalSkuCode")) AS normalized_value
+    FROM "PreSkuBasicInfo"
+    WHERE NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NOT NULL
+    GROUP BY upper(btrim("formalSkuCode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'PreSkuBasicInfo.barcode' AS field_name, upper(btrim("barcode")) AS normalized_value
+    FROM "PreSkuBasicInfo"
+    WHERE NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL
+    GROUP BY upper(btrim("barcode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'ProductSkuAssetProfile.barcode' AS field_name, upper(btrim("barcode")) AS normalized_value
+    FROM "ProductSkuAssetProfile"
+    WHERE "sourceStatus" = 'ACTIVE'
+      AND "skuDeletedAt" IS NULL
+      AND NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL
+    GROUP BY upper(btrim("barcode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'IntakeNonIntegratedSkuItem.skuCode' AS field_name, upper(btrim("skuCode")) AS normalized_value
+    FROM "IntakeNonIntegratedSkuItem"
+    WHERE NULLIF(btrim("skuCode"), '') IS NOT NULL
+    GROUP BY upper(btrim("skuCode"))
+    HAVING COUNT(*) > 1
+
+    UNION ALL
+
+    SELECT 'IntakeNonIntegratedSkuItem.barcode' AS field_name, upper(btrim("barcode")) AS normalized_value
+    FROM "IntakeNonIntegratedSkuItem"
+    WHERE NULLIF(btrim("barcode"), '') IS NOT NULL
+    GROUP BY upper(btrim("barcode"))
+    HAVING COUNT(*) > 1
+  )
+  SELECT COUNT(*)::integer
+    INTO duplicate_group_count
+  FROM duplicate_groups;
+
+  IF duplicate_group_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot normalize core code/barcode guards: % duplicate normalized identity groups exist. Inspect duplicate groups with upper(btrim(field)) before applying this migration.',
+      duplicate_group_count;
+  END IF;
+END $$;
+
+UPDATE "AssetSeries"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "AssetFamily"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "DraftGroup"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "IntakeReferenceLibraryItem"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "SpuNumberCounter"
+SET "prefix" = upper(btrim("prefix"))
+WHERE "prefix" <> upper(btrim("prefix"));
+
+UPDATE "PlanningTemplate"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "Substrate"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "WarehouseLocation"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "PackagedItem"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "Material"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "Hardware"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "CommonComponent"
+SET "code" = upper(btrim("code"))
+WHERE "code" <> upper(btrim("code"));
+
+UPDATE "IntakeNonIntegratedProduct"
+SET
+  "spu" = upper(btrim("spu")),
+  "spuBase" = upper(btrim("spuBase")),
+  "brand" = btrim("brand")
+WHERE "spu" <> upper(btrim("spu"))
+   OR "spuBase" <> upper(btrim("spuBase"))
+   OR "brand" <> btrim("brand");
+
+UPDATE "Product"
+SET "modelNumber" = upper(btrim("modelNumber"))
+WHERE "modelNumber" <> upper(btrim("modelNumber"));
+
+UPDATE "ProductSKU"
+SET "skuCode" = upper(btrim("skuCode"))
+WHERE "deletedAt" IS NULL
+  AND "skuCode" <> upper(btrim("skuCode"));
+
+UPDATE "AssetVariant"
+SET
+  "code" = upper(btrim("code")),
+  "barcode" = CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END
+WHERE "code" <> upper(btrim("code"))
+   OR "barcode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END;
+
+UPDATE "PreSkuBasicInfo"
+SET
+  "formalSkuCode" = CASE
+    WHEN NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("formalSkuCode"))
+  END,
+  "barcode" = CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END
+WHERE "formalSkuCode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("formalSkuCode"))
+  END
+   OR "barcode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END;
+
+UPDATE "ProductSkuAssetProfile"
+SET "barcode" = CASE
+  WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+  ELSE upper(btrim("barcode"))
+END
+WHERE "barcode" IS DISTINCT FROM CASE
+  WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+  ELSE upper(btrim("barcode"))
+END;
+
+UPDATE "IntakeNonIntegratedSkuItem"
+SET
+  "skuCode" = CASE
+    WHEN NULLIF(btrim("skuCode"), '') IS NULL THEN ''
+    ELSE upper(btrim("skuCode"))
+  END,
+  "barcode" = CASE
+    WHEN NULLIF(btrim("barcode"), '') IS NULL THEN ''
+    ELSE upper(btrim("barcode"))
+  END
+WHERE "skuCode" <> CASE
+    WHEN NULLIF(btrim("skuCode"), '') IS NULL THEN ''
+    ELSE upper(btrim("skuCode"))
+  END
+   OR "barcode" <> CASE
+    WHEN NULLIF(btrim("barcode"), '') IS NULL THEN ''
+    ELSE upper(btrim("barcode"))
+  END;
+
+DROP INDEX IF EXISTS "AssetVariant_barcode_active_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "AssetVariant_barcode_active_key"
+  ON "AssetVariant"(upper(btrim("barcode")))
+  WHERE NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL
+    AND "deletedAt" IS NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductSKU_active_skuCode_normalized_key"
+  ON "ProductSKU"(upper(btrim("skuCode")))
+  WHERE "deletedAt" IS NULL;
+
+DROP INDEX IF EXISTS "PreSkuBasicInfo_formalSkuCode_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "PreSkuBasicInfo_formalSkuCode_non_empty_key"
+  ON "PreSkuBasicInfo"(upper(btrim("formalSkuCode")))
+  WHERE NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NOT NULL;
+
+DROP INDEX IF EXISTS "PreSkuBasicInfo_barcode_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "PreSkuBasicInfo_barcode_non_empty_key"
+  ON "PreSkuBasicInfo"(upper(btrim("barcode")))
+  WHERE NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL;
+
+DROP INDEX IF EXISTS "ProductSkuAssetProfile_barcode_active_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductSkuAssetProfile_barcode_active_non_empty_key"
+  ON "ProductSkuAssetProfile"(upper(btrim("barcode")))
+  WHERE "sourceStatus" = 'ACTIVE'
+    AND "skuDeletedAt" IS NULL
+    AND NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL;
+
+DROP INDEX IF EXISTS "IntakeNonIntegratedSkuItem_skuCode_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeNonIntegratedSkuItem_skuCode_non_empty_key"
+  ON "IntakeNonIntegratedSkuItem"(upper(btrim("skuCode")))
+  WHERE NULLIF(btrim("skuCode"), '') IS NOT NULL;
+
+DROP INDEX IF EXISTS "IntakeNonIntegratedSkuItem_barcode_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeNonIntegratedSkuItem_barcode_non_empty_key"
+  ON "IntakeNonIntegratedSkuItem"(upper(btrim("barcode")))
+  WHERE NULLIF(btrim("barcode"), '') IS NOT NULL;
+
+DROP INDEX IF EXISTS "IntakeReferenceLibraryItem_libraryType_code_non_empty_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeReferenceLibraryItem_libraryType_code_non_empty_key"
+  ON "IntakeReferenceLibraryItem"("libraryType", upper(btrim("code")))
+  WHERE NULLIF(btrim("code"), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "SpuNumberCounter_prefix_key"
+  ON "SpuNumberCounter"("prefix");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeNonIntegratedProduct_spu_brand_normalized_key"
+  ON "IntakeNonIntegratedProduct"(upper(btrim("spu")), btrim("brand"));
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetSeries_code_normalized'
+  ) THEN
+    ALTER TABLE "AssetSeries"
+      ADD CONSTRAINT "AssetSeries_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetFamily_code_normalized'
+  ) THEN
+    ALTER TABLE "AssetFamily"
+      ADD CONSTRAINT "AssetFamily_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'DraftGroup_code_normalized'
+  ) THEN
+    ALTER TABLE "DraftGroup"
+      ADD CONSTRAINT "DraftGroup_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_code_normalized'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_code_normalized"
+      CHECK (
+        "code" = ''
+        OR "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PlanningTemplate_code_normalized'
+  ) THEN
+    ALTER TABLE "PlanningTemplate"
+      ADD CONSTRAINT "PlanningTemplate_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'Substrate_code_normalized'
+  ) THEN
+    ALTER TABLE "Substrate"
+      ADD CONSTRAINT "Substrate_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'WarehouseLocation_code_normalized'
+  ) THEN
+    ALTER TABLE "WarehouseLocation"
+      ADD CONSTRAINT "WarehouseLocation_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_code_normalized'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'Material_code_normalized'
+  ) THEN
+    ALTER TABLE "Material"
+      ADD CONSTRAINT "Material_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'Hardware_code_normalized'
+  ) THEN
+    ALTER TABLE "Hardware"
+      ADD CONSTRAINT "Hardware_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'CommonComponent_code_normalized'
+  ) THEN
+    ALTER TABLE "CommonComponent"
+      ADD CONSTRAINT "CommonComponent_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeNonIntegratedProduct_spu_brand_normalized'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedProduct"
+      ADD CONSTRAINT "IntakeNonIntegratedProduct_spu_brand_normalized"
+      CHECK (
+        NULLIF(btrim("spu"), '') IS NOT NULL
+        AND "spu" = upper(btrim("spu"))
+        AND NULLIF(btrim("spuBase"), '') IS NOT NULL
+        AND "spuBase" = upper(btrim("spuBase"))
+        AND NULLIF(btrim("brand"), '') IS NOT NULL
+        AND "brand" = btrim("brand")
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'SpuNumberCounter_prefix_normalized'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_prefix_normalized"
+      CHECK (
+        NULLIF(btrim("prefix"), '') IS NOT NULL
+        AND "prefix" = upper(btrim("prefix"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'Product_modelNumber_normalized'
+  ) THEN
+    ALTER TABLE "Product"
+      ADD CONSTRAINT "Product_modelNumber_normalized"
+      CHECK (
+        NULLIF(btrim("modelNumber"), '') IS NOT NULL
+        AND "modelNumber" = upper(btrim("modelNumber"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSKU_skuCode_normalized'
+  ) THEN
+    ALTER TABLE "ProductSKU"
+      ADD CONSTRAINT "ProductSKU_skuCode_normalized"
+      CHECK (
+        "deletedAt" IS NOT NULL
+        OR (
+          NULLIF(btrim("skuCode"), '') IS NOT NULL
+          AND "skuCode" = upper(btrim("skuCode"))
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSKU_active_skuCode_no_deleted_marker_ci'
+  ) THEN
+    ALTER TABLE "ProductSKU"
+      ADD CONSTRAINT "ProductSKU_active_skuCode_no_deleted_marker_ci"
+      CHECK (
+        "deletedAt" IS NOT NULL
+        OR POSITION('__deleted__' IN lower("skuCode")) = 0
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetVariant_code_normalized'
+  ) THEN
+    ALTER TABLE "AssetVariant"
+      ADD CONSTRAINT "AssetVariant_code_normalized"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetVariant_barcode_normalized'
+  ) THEN
+    ALTER TABLE "AssetVariant"
+      ADD CONSTRAINT "AssetVariant_barcode_normalized"
+      CHECK (
+        "barcode" IS NULL
+        OR "barcode" = upper(btrim("barcode"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_formalSkuCode_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_formalSkuCode_normalized"
+      CHECK (
+        "formalSkuCode" IS NULL
+        OR "formalSkuCode" = upper(btrim("formalSkuCode"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_barcode_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_barcode_normalized"
+      CHECK (
+        "barcode" IS NULL
+        OR "barcode" = upper(btrim("barcode"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_barcode_normalized'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_barcode_normalized"
+      CHECK (
+        "barcode" IS NULL
+        OR "barcode" = upper(btrim("barcode"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeNonIntegratedSkuItem_skuCode_normalized'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedSkuItem"
+      ADD CONSTRAINT "IntakeNonIntegratedSkuItem_skuCode_normalized"
+      CHECK (
+        "skuCode" = ''
+        OR "skuCode" = upper(btrim("skuCode"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeNonIntegratedSkuItem_barcode_normalized'
+  ) THEN
+    ALTER TABLE "IntakeNonIntegratedSkuItem"
+      ADD CONSTRAINT "IntakeNonIntegratedSkuItem_barcode_normalized"
+      CHECK (
+        "barcode" = ''
+        OR "barcode" = upper(btrim("barcode"))
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql
new file mode 100644
index 00000000..adc739b0
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql
@@ -0,0 +1,47 @@
+-- Product SKU asset-profile model/spec codes are externally consumed identity fields.
+-- Keep nullable draft/history rows allowed, but normalize any non-empty value and
+-- add database guards so direct SQL or future services cannot bypass the rule.
+
+UPDATE "ProductSkuAssetProfile"
+SET
+  "model" = CASE
+    WHEN NULLIF(btrim(COALESCE("model", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("model"))
+  END,
+  "specCode" = CASE
+    WHEN NULLIF(btrim(COALESCE("specCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("specCode"))
+  END
+WHERE "model" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("model", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("model"))
+  END
+  OR "specCode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("specCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("specCode"))
+  END;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_model_normalized'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_model_normalized"
+      CHECK (
+        "model" IS NULL
+        OR "model" = upper(btrim("model"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_specCode_normalized'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_specCode_normalized"
+      CHECK (
+        "specCode" IS NULL
+        OR "specCode" = upper(btrim("specCode"))
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql
new file mode 100644
index 00000000..fec38165
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql
@@ -0,0 +1,179 @@
+-- Product patent ledger records are now structured master data, not browser cache.
+-- Guard the stable group/product/patent identity at the database layer so direct
+-- SQL, imports, and future services cannot silently create orphan ledger rows.
+
+DO $$
+DECLARE
+  duplicate_group_count INTEGER;
+  invalid_identity_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO duplicate_group_count
+  FROM (
+    SELECT upper(btrim("patentGroupKey")) AS normalized_group_key
+    FROM "ProductPatentRecord"
+    WHERE NULLIF(btrim("patentGroupKey"), '') IS NOT NULL
+    GROUP BY upper(btrim("patentGroupKey"))
+    HAVING COUNT(*) > 1
+  ) duplicate_groups;
+
+  IF duplicate_group_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add ProductPatentRecord identity guards: % duplicate normalized patentGroupKey groups exist.',
+      duplicate_group_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_identity_count
+  FROM "ProductPatentRecord"
+  WHERE NULLIF(btrim("productId"), '') IS NULL
+     OR NULLIF(btrim("patentGroupKey"), '') IS NULL
+     OR (
+       NULLIF(btrim("patentName"), '') IS NULL
+       AND NULLIF(btrim("patentNo"), '') IS NULL
+       AND NULLIF(btrim("applicationNo"), '') IS NULL
+     );
+
+  IF invalid_identity_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add ProductPatentRecord identity guards: % rows are missing productId, patentGroupKey, or patent identity.',
+      invalid_identity_count;
+  END IF;
+END $$;
+
+UPDATE "ProductPatentRecord"
+SET
+  "patentGroupKey" = upper(btrim("patentGroupKey")),
+  "productId" = btrim("productId"),
+  "linkedProductIds" = COALESCE((
+    SELECT array_agg(item ORDER BY item)
+    FROM (
+      SELECT DISTINCT btrim(value) AS item
+      FROM unnest("linkedProductIds") AS item_source(value)
+      WHERE NULLIF(btrim(value), '') IS NOT NULL
+    ) normalized_items
+  ), ARRAY[]::TEXT[]),
+  "linkedSpus" = COALESCE((
+    SELECT array_agg(item ORDER BY item)
+    FROM (
+      SELECT DISTINCT upper(btrim(value)) AS item
+      FROM unnest("linkedSpus") AS item_source(value)
+      WHERE NULLIF(btrim(value), '') IS NOT NULL
+    ) normalized_items
+  ), ARRAY[]::TEXT[]),
+  "applicationNo" = CASE
+    WHEN NULLIF(btrim("applicationNo"), '') IS NULL THEN ''
+    ELSE upper(btrim("applicationNo"))
+  END,
+  "patentNo" = CASE
+    WHEN NULLIF(btrim("patentNo"), '') IS NULL THEN ''
+    ELSE upper(btrim("patentNo"))
+  END,
+  "spu" = CASE
+    WHEN NULLIF(btrim("spu"), '') IS NULL THEN ''
+    ELSE upper(btrim("spu"))
+  END
+WHERE "patentGroupKey" <> upper(btrim("patentGroupKey"))
+   OR "productId" <> btrim("productId")
+   OR "linkedProductIds" IS DISTINCT FROM COALESCE((
+    SELECT array_agg(item ORDER BY item)
+    FROM (
+      SELECT DISTINCT btrim(value) AS item
+      FROM unnest("linkedProductIds") AS item_source(value)
+      WHERE NULLIF(btrim(value), '') IS NOT NULL
+    ) normalized_items
+  ), ARRAY[]::TEXT[])
+   OR "linkedSpus" IS DISTINCT FROM COALESCE((
+    SELECT array_agg(item ORDER BY item)
+    FROM (
+      SELECT DISTINCT upper(btrim(value)) AS item
+      FROM unnest("linkedSpus") AS item_source(value)
+      WHERE NULLIF(btrim(value), '') IS NOT NULL
+    ) normalized_items
+  ), ARRAY[]::TEXT[])
+   OR "applicationNo" <> CASE
+    WHEN NULLIF(btrim("applicationNo"), '') IS NULL THEN ''
+    ELSE upper(btrim("applicationNo"))
+  END
+   OR "patentNo" <> CASE
+    WHEN NULLIF(btrim("patentNo"), '') IS NULL THEN ''
+    ELSE upper(btrim("patentNo"))
+  END
+   OR "spu" <> CASE
+    WHEN NULLIF(btrim("spu"), '') IS NULL THEN ''
+    ELSE upper(btrim("spu"))
+  END;
+
+DROP INDEX IF EXISTS "ProductPatentRecord_patentGroupKey_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductPatentRecord_patentGroupKey_key"
+  ON "ProductPatentRecord"("patentGroupKey");
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_patentGroupKey_normalized'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_patentGroupKey_normalized"
+      CHECK (
+        NULLIF(btrim("patentGroupKey"), '') IS NOT NULL
+        AND "patentGroupKey" = upper(btrim("patentGroupKey"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_productId_required'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_productId_required"
+      CHECK (
+        NULLIF(btrim("productId"), '') IS NOT NULL
+        AND "productId" = btrim("productId")
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_applicationNo_normalized'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_applicationNo_normalized"
+      CHECK (
+        "applicationNo" = ''
+        OR "applicationNo" = upper(btrim("applicationNo"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_patentNo_normalized'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_patentNo_normalized"
+      CHECK (
+        "patentNo" = ''
+        OR "patentNo" = upper(btrim("patentNo"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_spu_normalized'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_spu_normalized"
+      CHECK (
+        "spu" = ''
+        OR "spu" = upper(btrim("spu"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductPatentRecord_patent_identity_required'
+  ) THEN
+    ALTER TABLE "ProductPatentRecord"
+      ADD CONSTRAINT "ProductPatentRecord_patent_identity_required"
+      CHECK (
+        NULLIF(btrim("patentName"), '') IS NOT NULL
+        OR NULLIF(btrim("patentNo"), '') IS NOT NULL
+        OR NULLIF(btrim("applicationNo"), '') IS NOT NULL
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql
new file mode 100644
index 00000000..3f1721e0
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql
@@ -0,0 +1,105 @@
+-- Reference-library rows replace several historical localStorage libraries.
+-- Lock the library type and semantic item identity physically so direct SQL or
+-- future import paths cannot create a second truth by changing case or spaces.
+
+DO $$
+DECLARE
+  duplicate_item_key_count INTEGER;
+  invalid_identity_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO duplicate_item_key_count
+  FROM (
+    SELECT "libraryType", lower(btrim("itemKey")) AS normalized_item_key
+    FROM "IntakeReferenceLibraryItem"
+    WHERE NULLIF(btrim("itemKey"), '') IS NOT NULL
+    GROUP BY "libraryType", lower(btrim("itemKey"))
+    HAVING COUNT(*) > 1
+  ) duplicate_groups;
+
+  IF duplicate_item_key_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add IntakeReferenceLibraryItem identity guards: % duplicate normalized itemKey groups exist.',
+      duplicate_item_key_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_identity_count
+  FROM "IntakeReferenceLibraryItem"
+  WHERE "libraryType" NOT IN (
+      'PACKAGING_MATERIAL',
+      'ACCESSORY',
+      'EDGE_BANDING',
+      'STEEL_FRAME',
+      'SPU_RULE',
+      'ALPHABET_LIBRARY'
+    )
+     OR NULLIF(btrim("itemKey"), '') IS NULL;
+
+  IF invalid_identity_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add IntakeReferenceLibraryItem identity guards: % rows have invalid libraryType or blank itemKey.',
+      invalid_identity_count;
+  END IF;
+END $$;
+
+UPDATE "IntakeReferenceLibraryItem"
+SET
+  "libraryType" = upper(btrim("libraryType")),
+  "itemKey" = btrim("itemKey"),
+  "letter" = CASE
+    WHEN NULLIF(btrim("letter"), '') IS NULL THEN ''
+    ELSE upper(btrim("letter"))
+  END
+WHERE "libraryType" <> upper(btrim("libraryType"))
+   OR "itemKey" <> btrim("itemKey")
+   OR "letter" <> CASE
+    WHEN NULLIF(btrim("letter"), '') IS NULL THEN ''
+    ELSE upper(btrim("letter"))
+  END;
+
+DROP INDEX IF EXISTS "IntakeReferenceLibraryItem_libraryType_itemKey_normalized_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeReferenceLibraryItem_libraryType_itemKey_normalized_key"
+  ON "IntakeReferenceLibraryItem"("libraryType", lower(btrim("itemKey")));
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_libraryType_allowed'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_libraryType_allowed"
+      CHECK (
+        "libraryType" IN (
+          'PACKAGING_MATERIAL',
+          'ACCESSORY',
+          'EDGE_BANDING',
+          'STEEL_FRAME',
+          'SPU_RULE',
+          'ALPHABET_LIBRARY'
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_itemKey_required'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_itemKey_required"
+      CHECK (
+        NULLIF(btrim("itemKey"), '') IS NOT NULL
+        AND "itemKey" = btrim("itemKey")
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_letter_normalized'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_letter_normalized"
+      CHECK (
+        "letter" = ''
+        OR "letter" = upper(btrim("letter"))
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql
new file mode 100644
index 00000000..5f368465
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql
@@ -0,0 +1,69 @@
+-- The SPU number counter is the transactional source for formal SPU numbers.
+-- Product categories must be semantically unique after trimming/case folding, or
+-- one business category can accidentally get two independent number pools.
+
+DO $$
+DECLARE
+  duplicate_category_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO duplicate_category_count
+  FROM (
+    SELECT lower(btrim("productCategory")) AS normalized_product_category
+    FROM "SpuNumberCounter"
+    WHERE NULLIF(btrim("productCategory"), '') IS NOT NULL
+    GROUP BY lower(btrim("productCategory"))
+    HAVING COUNT(*) > 1
+  ) duplicate_groups;
+
+  IF duplicate_category_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add SpuNumberCounter identity guards: % duplicate normalized productCategory groups exist.',
+      duplicate_category_count;
+  END IF;
+END $$;
+
+UPDATE "SpuNumberCounter"
+SET
+  "productCategory" = btrim("productCategory"),
+  "sourceLibraryItemId" = CASE
+    WHEN NULLIF(btrim(COALESCE("sourceLibraryItemId", '')), '') IS NULL THEN NULL
+    ELSE btrim("sourceLibraryItemId")
+  END
+WHERE "productCategory" <> btrim("productCategory")
+   OR "sourceLibraryItemId" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("sourceLibraryItemId", '')), '') IS NULL THEN NULL
+    ELSE btrim("sourceLibraryItemId")
+  END;
+
+DROP INDEX IF EXISTS "SpuNumberCounter_productCategory_normalized_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "SpuNumberCounter_productCategory_normalized_key"
+  ON "SpuNumberCounter"(lower(btrim("productCategory")));
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'SpuNumberCounter_productCategory_normalized'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_productCategory_normalized"
+      CHECK (
+        NULLIF(btrim("productCategory"), '') IS NOT NULL
+        AND "productCategory" = btrim("productCategory")
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'SpuNumberCounter_sourceLibraryItemId_normalized'
+  ) THEN
+    ALTER TABLE "SpuNumberCounter"
+      ADD CONSTRAINT "SpuNumberCounter_sourceLibraryItemId_normalized"
+      CHECK (
+        "sourceLibraryItemId" IS NULL
+        OR (
+          NULLIF(btrim("sourceLibraryItemId"), '') IS NOT NULL
+          AND "sourceLibraryItemId" = btrim("sourceLibraryItemId")
+        )
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql
new file mode 100644
index 00000000..2e475a4e
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql
@@ -0,0 +1,166 @@
+-- Strengthen PreSkuBasicInfo as the structured truth source for draft SKU
+-- identity fields. JSON snapshots may still exist for display compatibility,
+-- but structured values must not keep blank strings or unnormalized codes.
+
+UPDATE "PreSkuBasicInfo"
+SET
+  "model" = CASE
+    WHEN NULLIF(btrim(COALESCE("model", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("model"))
+  END,
+  "formalSkuCode" = CASE
+    WHEN NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("formalSkuCode"))
+  END,
+  "barcode" = CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END,
+  "versionNo" = CASE
+    WHEN NULLIF(btrim(COALESCE("versionNo", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("versionNo"))
+  END,
+  "attributeCode" = CASE
+    WHEN NULLIF(btrim(COALESCE("attributeCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("attributeCode"))
+  END,
+  "drawingId" = CASE
+    WHEN NULLIF(btrim(COALESCE("drawingId", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("drawingId"))
+  END,
+  "size" = NULLIF(btrim(COALESCE("size", '')), ''),
+  "color" = NULLIF(btrim(COALESCE("color", '')), ''),
+  "material" = NULLIF(btrim(COALESCE("material", '')), ''),
+  "specName" = NULLIF(btrim(COALESCE("specName", '')), ''),
+  "setCount" = NULLIF(btrim(COALESCE("setCount", '')), ''),
+  "installMethod" = NULLIF(btrim(COALESCE("installMethod", '')), ''),
+  "manualUpdatedBy" = NULLIF(btrim(COALESCE("manualUpdatedBy", '')), ''),
+  "manualUpdatedByName" = NULLIF(btrim(COALESCE("manualUpdatedByName", '')), ''),
+  "source" = CASE
+    WHEN "source" = 'MANUAL' THEN 'MANUAL'
+    ELSE 'DRAFT_GROUP'
+  END
+WHERE
+  "model" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("model", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("model"))
+  END
+  OR "formalSkuCode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("formalSkuCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("formalSkuCode"))
+  END
+  OR "barcode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("barcode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("barcode"))
+  END
+  OR "versionNo" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("versionNo", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("versionNo"))
+  END
+  OR "attributeCode" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("attributeCode", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("attributeCode"))
+  END
+  OR "drawingId" IS DISTINCT FROM CASE
+    WHEN NULLIF(btrim(COALESCE("drawingId", '')), '') IS NULL THEN NULL
+    ELSE upper(btrim("drawingId"))
+  END
+  OR "size" IS DISTINCT FROM NULLIF(btrim(COALESCE("size", '')), '')
+  OR "color" IS DISTINCT FROM NULLIF(btrim(COALESCE("color", '')), '')
+  OR "material" IS DISTINCT FROM NULLIF(btrim(COALESCE("material", '')), '')
+  OR "specName" IS DISTINCT FROM NULLIF(btrim(COALESCE("specName", '')), '')
+  OR "setCount" IS DISTINCT FROM NULLIF(btrim(COALESCE("setCount", '')), '')
+  OR "installMethod" IS DISTINCT FROM NULLIF(btrim(COALESCE("installMethod", '')), '')
+  OR "manualUpdatedBy" IS DISTINCT FROM NULLIF(btrim(COALESCE("manualUpdatedBy", '')), '')
+  OR "manualUpdatedByName" IS DISTINCT FROM NULLIF(btrim(COALESCE("manualUpdatedByName", '')), '')
+  OR "source" NOT IN ('DRAFT_GROUP', 'MANUAL');
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_model_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_model_normalized"
+      CHECK (
+        "model" IS NULL
+        OR (
+          NULLIF(btrim("model"), '') IS NOT NULL
+          AND "model" = upper(btrim("model"))
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_versionNo_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_versionNo_normalized"
+      CHECK (
+        "versionNo" IS NULL
+        OR (
+          NULLIF(btrim("versionNo"), '') IS NOT NULL
+          AND "versionNo" = upper(btrim("versionNo"))
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_attributeCode_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_attributeCode_normalized"
+      CHECK (
+        "attributeCode" IS NULL
+        OR (
+          NULLIF(btrim("attributeCode"), '') IS NOT NULL
+          AND "attributeCode" = upper(btrim("attributeCode"))
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_drawingId_normalized'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_drawingId_normalized"
+      CHECK (
+        "drawingId" IS NULL
+        OR (
+          NULLIF(btrim("drawingId"), '') IS NOT NULL
+          AND "drawingId" = upper(btrim("drawingId"))
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_source_allowed'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_source_allowed"
+      CHECK ("source" IN ('DRAFT_GROUP', 'MANUAL'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuBasicInfo_optional_text_not_blank'
+  ) THEN
+    ALTER TABLE "PreSkuBasicInfo"
+      ADD CONSTRAINT "PreSkuBasicInfo_optional_text_not_blank"
+      CHECK (
+        ("model" IS NULL OR NULLIF(btrim("model"), '') IS NOT NULL)
+        AND ("formalSkuCode" IS NULL OR NULLIF(btrim("formalSkuCode"), '') IS NOT NULL)
+        AND ("barcode" IS NULL OR NULLIF(btrim("barcode"), '') IS NOT NULL)
+        AND ("size" IS NULL OR NULLIF(btrim("size"), '') IS NOT NULL)
+        AND ("color" IS NULL OR NULLIF(btrim("color"), '') IS NOT NULL)
+        AND ("material" IS NULL OR NULLIF(btrim("material"), '') IS NOT NULL)
+        AND ("specName" IS NULL OR NULLIF(btrim("specName"), '') IS NOT NULL)
+        AND ("versionNo" IS NULL OR NULLIF(btrim("versionNo"), '') IS NOT NULL)
+        AND ("setCount" IS NULL OR NULLIF(btrim("setCount"), '') IS NOT NULL)
+        AND ("attributeCode" IS NULL OR NULLIF(btrim("attributeCode"), '') IS NOT NULL)
+        AND ("drawingId" IS NULL OR NULLIF(btrim("drawingId"), '') IS NOT NULL)
+        AND ("installMethod" IS NULL OR NULLIF(btrim("installMethod"), '') IS NOT NULL)
+        AND ("manualUpdatedBy" IS NULL OR NULLIF(btrim("manualUpdatedBy"), '') IS NOT NULL)
+        AND ("manualUpdatedByName" IS NULL OR NULLIF(btrim("manualUpdatedByName"), '') IS NOT NULL)
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql
new file mode 100644
index 00000000..4ea21cff
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql
@@ -0,0 +1,69 @@
+-- AssetSkuSyncEvent is the durable source for SKU asset-profile refresh work.
+-- Redis only accelerates queue/progress delivery, so the database event rows
+-- must reject invalid reasons and impossible progress counters.
+
+UPDATE "AssetSkuSyncEvent"
+SET
+  "reason" = CASE
+    WHEN "reason" IN ('VARIANT_UPDATED', 'THUMBNAIL_REGENERATED', 'VARIANT_DELETED', 'MANUAL_RETRY')
+      THEN "reason"
+    ELSE 'MANUAL_RETRY'
+  END,
+  "affectedCount" = GREATEST("affectedCount", 0),
+  "syncedCount" = GREATEST("syncedCount", 0),
+  "failedCount" = GREATEST("failedCount", 0),
+  "retryCount" = GREATEST("retryCount", 0),
+  "processedAt" = CASE
+    WHEN "status" = 'COMPLETED' AND "processedAt" IS NULL THEN COALESCE("updatedAt", CURRENT_TIMESTAMP)
+    ELSE "processedAt"
+  END
+WHERE "reason" NOT IN ('VARIANT_UPDATED', 'THUMBNAIL_REGENERATED', 'VARIANT_DELETED', 'MANUAL_RETRY')
+   OR "affectedCount" < 0
+   OR "syncedCount" < 0
+   OR "failedCount" < 0
+   OR "retryCount" < 0
+   OR ("status" = 'COMPLETED' AND "processedAt" IS NULL);
+
+UPDATE "AssetSkuSyncEvent"
+SET "syncedCount" = "affectedCount"
+WHERE "syncedCount" > "affectedCount";
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetSkuSyncEvent_reason_allowed'
+  ) THEN
+    ALTER TABLE "AssetSkuSyncEvent"
+      ADD CONSTRAINT "AssetSkuSyncEvent_reason_allowed"
+      CHECK ("reason" IN ('VARIANT_UPDATED', 'THUMBNAIL_REGENERATED', 'VARIANT_DELETED', 'MANUAL_RETRY'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetSkuSyncEvent_counts_non_negative'
+  ) THEN
+    ALTER TABLE "AssetSkuSyncEvent"
+      ADD CONSTRAINT "AssetSkuSyncEvent_counts_non_negative"
+      CHECK (
+        "affectedCount" >= 0
+        AND "syncedCount" >= 0
+        AND "failedCount" >= 0
+        AND "retryCount" >= 0
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetSkuSyncEvent_synced_not_over_affected'
+  ) THEN
+    ALTER TABLE "AssetSkuSyncEvent"
+      ADD CONSTRAINT "AssetSkuSyncEvent_synced_not_over_affected"
+      CHECK ("syncedCount" <= "affectedCount");
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'AssetSkuSyncEvent_completed_has_processed_at'
+  ) THEN
+    ALTER TABLE "AssetSkuSyncEvent"
+      ADD CONSTRAINT "AssetSkuSyncEvent_completed_has_processed_at"
+      CHECK ("status" <> 'COMPLETED' OR "processedAt" IS NOT NULL);
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql
new file mode 100644
index 00000000..ada5bf25
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql
@@ -0,0 +1,122 @@
+-- ProductSkuAssetProfile is the structured asset-data copy for a formal SKU.
+-- A profile row without a stable source variant cannot be trusted by external
+-- read-only consumers, so source identity is normalized and guarded here.
+
+WITH normalized_profile AS (
+  SELECT
+    profile."id",
+    COALESCE(
+      NULLIF(btrim(COALESCE(profile."primarySourceAssetVariantId", '')), ''),
+      NULLIF(btrim(COALESCE(profile."sourceAssetVariantIds"[1], '')), ''),
+      NULLIF(btrim(COALESCE(profile."sourceVariants" -> 0 ->> 'sourceAssetVariantId', '')), '')
+    ) AS primary_source_asset_variant_id,
+    ARRAY(
+      SELECT DISTINCT source_id
+      FROM (
+        SELECT NULLIF(btrim(COALESCE(profile."primarySourceAssetVariantId", '')), '') AS source_id
+        UNION ALL
+        SELECT NULLIF(btrim(COALESCE(array_item, '')), '') AS source_id
+        FROM unnest(profile."sourceAssetVariantIds") AS array_item
+        UNION ALL
+        SELECT NULLIF(btrim(COALESCE(source_variant ->> 'sourceAssetVariantId', '')), '') AS source_id
+        FROM jsonb_array_elements(
+          CASE
+            WHEN jsonb_typeof(profile."sourceVariants") = 'array' THEN profile."sourceVariants"
+            ELSE '[]'::jsonb
+          END
+        ) AS source_variant
+      ) source_values
+      WHERE source_id IS NOT NULL
+      ORDER BY source_id
+    ) AS source_asset_variant_ids
+  FROM "ProductSkuAssetProfile" profile
+)
+UPDATE "ProductSkuAssetProfile" profile
+SET
+  "primarySourceAssetVariantId" = normalized.primary_source_asset_variant_id,
+  "sourceAssetVariantIds" = normalized.source_asset_variant_ids,
+  "sourceAssetFamilyId" = NULLIF(btrim(COALESCE(profile."sourceAssetFamilyId", '')), ''),
+  "sourceAssetSeriesId" = NULLIF(btrim(COALESCE(profile."sourceAssetSeriesId", '')), ''),
+  "modelName" = NULLIF(btrim(COALESCE(profile."modelName", '')), ''),
+  "specName" = NULLIF(btrim(COALESCE(profile."specName", '')), ''),
+  "color" = NULLIF(btrim(COALESCE(profile."color", '')), ''),
+  "material" = NULLIF(btrim(COALESCE(profile."material", '')), ''),
+  "imageUrl" = NULLIF(btrim(COALESCE(profile."imageUrl", '')), '')
+FROM normalized_profile normalized
+WHERE profile."id" = normalized."id"
+  AND (
+    profile."primarySourceAssetVariantId" IS DISTINCT FROM normalized.primary_source_asset_variant_id
+    OR profile."sourceAssetVariantIds" IS DISTINCT FROM normalized.source_asset_variant_ids
+    OR profile."sourceAssetFamilyId" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."sourceAssetFamilyId", '')), '')
+    OR profile."sourceAssetSeriesId" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."sourceAssetSeriesId", '')), '')
+    OR profile."modelName" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."modelName", '')), '')
+    OR profile."specName" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."specName", '')), '')
+    OR profile."color" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."color", '')), '')
+    OR profile."material" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."material", '')), '')
+    OR profile."imageUrl" IS DISTINCT FROM NULLIF(btrim(COALESCE(profile."imageUrl", '')), '')
+  );
+
+DO $$
+DECLARE
+  invalid_profile_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_profile_count
+  FROM "ProductSkuAssetProfile"
+  WHERE NULLIF(btrim(COALESCE("primarySourceAssetVariantId", '')), '') IS NULL
+     OR cardinality("sourceAssetVariantIds") = 0
+     OR array_position("sourceAssetVariantIds", "primarySourceAssetVariantId") IS NULL
+     OR array_position("sourceAssetVariantIds", '') IS NOT NULL;
+
+  IF invalid_profile_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add ProductSkuAssetProfile source guards: % profile rows have missing or inconsistent source variant identities.',
+      invalid_profile_count;
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_primary_source_required'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_primary_source_required"
+      CHECK (NULLIF(btrim(COALESCE("primarySourceAssetVariantId", '')), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_source_variant_ids_required'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_source_variant_ids_required"
+      CHECK (
+        cardinality("sourceAssetVariantIds") > 0
+        AND array_position("sourceAssetVariantIds", '') IS NULL
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_primary_source_in_source_ids'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_primary_source_in_source_ids"
+      CHECK (array_position("sourceAssetVariantIds", "primarySourceAssetVariantId") IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ProductSkuAssetProfile_optional_text_not_blank'
+  ) THEN
+    ALTER TABLE "ProductSkuAssetProfile"
+      ADD CONSTRAINT "ProductSkuAssetProfile_optional_text_not_blank"
+      CHECK (
+        ("sourceAssetFamilyId" IS NULL OR NULLIF(btrim("sourceAssetFamilyId"), '') IS NOT NULL)
+        AND ("sourceAssetSeriesId" IS NULL OR NULLIF(btrim("sourceAssetSeriesId"), '') IS NOT NULL)
+        AND ("model" IS NULL OR NULLIF(btrim("model"), '') IS NOT NULL)
+        AND ("modelName" IS NULL OR NULLIF(btrim("modelName"), '') IS NOT NULL)
+        AND ("specCode" IS NULL OR NULLIF(btrim("specCode"), '') IS NOT NULL)
+        AND ("specName" IS NULL OR NULLIF(btrim("specName"), '') IS NOT NULL)
+        AND ("barcode" IS NULL OR NULLIF(btrim("barcode"), '') IS NOT NULL)
+        AND ("color" IS NULL OR NULLIF(btrim("color"), '') IS NOT NULL)
+        AND ("material" IS NULL OR NULLIF(btrim("material"), '') IS NOT NULL)
+        AND ("imageUrl" IS NULL OR NULLIF(btrim("imageUrl"), '') IS NOT NULL)
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql
new file mode 100644
index 00000000..a58f2863
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql
@@ -0,0 +1,324 @@
+-- Strengthen packaging and lightweight-warehouse承接 tables.
+-- JSON columns remain only where they represent bounded structured payloads or
+-- process snapshots; identity, status, quantity, and location invariants are
+-- guarded by the database so direct imports cannot bypass service validation.
+
+UPDATE "PreSkuPackagingPlan"
+SET
+  "sourceRefId" = NULLIF(btrim(COALESCE("sourceRefId", '')), ''),
+  "status" = upper(btrim("status")),
+  "notes" = NULLIF(btrim(COALESCE("notes", '')), '')
+WHERE
+  "sourceRefId" IS DISTINCT FROM NULLIF(btrim(COALESCE("sourceRefId", '')), '')
+  OR "status" IS DISTINCT FROM upper(btrim("status"))
+  OR "notes" IS DISTINCT FROM NULLIF(btrim(COALESCE("notes", '')), '');
+
+UPDATE "WarehouseLocation"
+SET
+  "code" = upper(btrim("code")),
+  "name" = btrim("name"),
+  "zone" = NULLIF(btrim(COALESCE("zone", '')), ''),
+  "aisle" = NULLIF(btrim(COALESCE("aisle", '')), ''),
+  "shelf" = NULLIF(btrim(COALESCE("shelf", '')), ''),
+  "bin" = NULLIF(btrim(COALESCE("bin", '')), ''),
+  "notes" = NULLIF(btrim(COALESCE("notes", '')), '')
+WHERE
+  "code" IS DISTINCT FROM upper(btrim("code"))
+  OR "name" IS DISTINCT FROM btrim("name")
+  OR "zone" IS DISTINCT FROM NULLIF(btrim(COALESCE("zone", '')), '')
+  OR "aisle" IS DISTINCT FROM NULLIF(btrim(COALESCE("aisle", '')), '')
+  OR "shelf" IS DISTINCT FROM NULLIF(btrim(COALESCE("shelf", '')), '')
+  OR "bin" IS DISTINCT FROM NULLIF(btrim(COALESCE("bin", '')), '')
+  OR "notes" IS DISTINCT FROM NULLIF(btrim(COALESCE("notes", '')), '');
+
+UPDATE "BrandMaterialBinding"
+SET
+  "brand" = btrim("brand"),
+  "materialType" = upper(btrim("materialType")),
+  "fileUrl" = NULLIF(btrim(COALESCE("fileUrl", '')), ''),
+  "fileName" = NULLIF(btrim(COALESCE("fileName", '')), '')
+WHERE
+  "brand" IS DISTINCT FROM btrim("brand")
+  OR "materialType" IS DISTINCT FROM upper(btrim("materialType"))
+  OR "fileUrl" IS DISTINCT FROM NULLIF(btrim(COALESCE("fileUrl", '')), '')
+  OR "fileName" IS DISTINCT FROM NULLIF(btrim(COALESCE("fileName", '')), '');
+
+UPDATE "PackagedItem"
+SET
+  "code" = upper(btrim("code")),
+  "name" = btrim("name"),
+  "status" = upper(btrim("status"))
+WHERE
+  "code" IS DISTINCT FROM upper(btrim("code"))
+  OR "name" IS DISTINCT FROM btrim("name")
+  OR "status" IS DISTINCT FROM upper(btrim("status"));
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PreSkuPackagingPlan"
+  WHERE "status" NOT IN ('DRAFT', 'CONFIRMED', 'ARCHIVED')
+     OR jsonb_typeof("boxes") <> 'array'
+     OR ("costSummary" IS NOT NULL AND jsonb_typeof("costSummary") NOT IN ('object', 'null'))
+     OR ("processDraft" IS NOT NULL AND jsonb_typeof("processDraft") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add PreSkuPackagingPlan guards: % rows have invalid status or JSON shape.',
+      invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "WarehouseLocation"
+  WHERE NULLIF(btrim("name"), '') IS NULL;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add WarehouseLocation guards: % rows have blank names.',
+      invalid_count;
+  END IF;
+
+  WITH duplicate_positions AS (
+    SELECT
+      lower(btrim(COALESCE("zone", ''))) AS zone_key,
+      lower(btrim(COALESCE("aisle", ''))) AS aisle_key,
+      lower(btrim(COALESCE("shelf", ''))) AS shelf_key,
+      lower(btrim(COALESCE("bin", ''))) AS bin_key
+    FROM "WarehouseLocation"
+    WHERE "isActive" = true
+    GROUP BY
+      lower(btrim(COALESCE("zone", ''))),
+      lower(btrim(COALESCE("aisle", ''))),
+      lower(btrim(COALESCE("shelf", ''))),
+      lower(btrim(COALESCE("bin", '')))
+    HAVING COUNT(*) > 1
+  )
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM duplicate_positions;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add WarehouseLocation active position guard: % duplicate active positions exist.',
+      invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "BrandMaterialBinding"
+  WHERE NULLIF(btrim("brand"), '') IS NULL
+     OR "materialType" NOT IN ('MANUAL', 'NAMEPLATE', 'CERTIFICATE', 'CARTON_PRINT')
+     OR "fileSize" < 0
+     OR (
+       ("fileUrl" IS NULL OR "fileName" IS NULL OR "fileSize" IS NULL)
+       AND NOT ("fileUrl" IS NULL AND "fileName" IS NULL AND "fileSize" IS NULL)
+     );
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add BrandMaterialBinding guards: % rows have invalid identity or file metadata.',
+      invalid_count;
+  END IF;
+
+  WITH duplicate_brand_materials AS (
+    SELECT lower(btrim("brand")) AS brand_key, upper(btrim("materialType")) AS material_type_key
+    FROM "BrandMaterialBinding"
+    GROUP BY lower(btrim("brand")), upper(btrim("materialType"))
+    HAVING COUNT(*) > 1
+  )
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM duplicate_brand_materials;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add BrandMaterialBinding normalized identity guard: % duplicate normalized brand/material pairs exist.',
+      invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PackagedItem"
+  WHERE NULLIF(btrim("name"), '') IS NULL
+     OR "quantityPerPack" <= 0
+     OR "stockQuantity" < 0
+     OR ("length" IS NOT NULL AND "length" <= 0)
+     OR ("width" IS NOT NULL AND "width" <= 0)
+     OR ("height" IS NOT NULL AND "height" <= 0)
+     OR ("weight" IS NOT NULL AND "weight" < 0)
+     OR "status" NOT IN ('DRAFT', 'ACTIVE', 'ARCHIVED')
+     OR ("payload" IS NOT NULL AND jsonb_typeof("payload") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add PackagedItem guards: % rows have invalid package item shape.',
+      invalid_count;
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuPackagingPlan_status_allowed'
+  ) THEN
+    ALTER TABLE "PreSkuPackagingPlan"
+      ADD CONSTRAINT "PreSkuPackagingPlan_status_allowed"
+      CHECK ("status" IN ('DRAFT', 'CONFIRMED', 'ARCHIVED'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuPackagingPlan_boxes_array'
+  ) THEN
+    ALTER TABLE "PreSkuPackagingPlan"
+      ADD CONSTRAINT "PreSkuPackagingPlan_boxes_array"
+      CHECK (jsonb_typeof("boxes") = 'array');
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuPackagingPlan_costSummary_object'
+  ) THEN
+    ALTER TABLE "PreSkuPackagingPlan"
+      ADD CONSTRAINT "PreSkuPackagingPlan_costSummary_object"
+      CHECK ("costSummary" IS NULL OR jsonb_typeof("costSummary") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuPackagingPlan_processDraft_object'
+  ) THEN
+    ALTER TABLE "PreSkuPackagingPlan"
+      ADD CONSTRAINT "PreSkuPackagingPlan_processDraft_object"
+      CHECK ("processDraft" IS NULL OR jsonb_typeof("processDraft") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuPackagingPlan_optional_text_not_blank'
+  ) THEN
+    ALTER TABLE "PreSkuPackagingPlan"
+      ADD CONSTRAINT "PreSkuPackagingPlan_optional_text_not_blank"
+      CHECK (
+        ("sourceRefId" IS NULL OR NULLIF(btrim("sourceRefId"), '') IS NOT NULL)
+        AND ("notes" IS NULL OR NULLIF(btrim("notes"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'WarehouseLocation_name_not_blank'
+  ) THEN
+    ALTER TABLE "WarehouseLocation"
+      ADD CONSTRAINT "WarehouseLocation_name_not_blank"
+      CHECK (NULLIF(btrim("name"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'WarehouseLocation_optional_text_not_blank'
+  ) THEN
+    ALTER TABLE "WarehouseLocation"
+      ADD CONSTRAINT "WarehouseLocation_optional_text_not_blank"
+      CHECK (
+        ("zone" IS NULL OR NULLIF(btrim("zone"), '') IS NOT NULL)
+        AND ("aisle" IS NULL OR NULLIF(btrim("aisle"), '') IS NOT NULL)
+        AND ("shelf" IS NULL OR NULLIF(btrim("shelf"), '') IS NOT NULL)
+        AND ("bin" IS NULL OR NULLIF(btrim("bin"), '') IS NOT NULL)
+        AND ("notes" IS NULL OR NULLIF(btrim("notes"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'BrandMaterialBinding_materialType_allowed'
+  ) THEN
+    ALTER TABLE "BrandMaterialBinding"
+      ADD CONSTRAINT "BrandMaterialBinding_materialType_allowed"
+      CHECK ("materialType" IN ('MANUAL', 'NAMEPLATE', 'CERTIFICATE', 'CARTON_PRINT'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'BrandMaterialBinding_identity_not_blank'
+  ) THEN
+    ALTER TABLE "BrandMaterialBinding"
+      ADD CONSTRAINT "BrandMaterialBinding_identity_not_blank"
+      CHECK (
+        NULLIF(btrim("brand"), '') IS NOT NULL
+        AND NULLIF(btrim("materialType"), '') IS NOT NULL
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'BrandMaterialBinding_file_metadata_consistent'
+  ) THEN
+    ALTER TABLE "BrandMaterialBinding"
+      ADD CONSTRAINT "BrandMaterialBinding_file_metadata_consistent"
+      CHECK (
+        (
+          "fileUrl" IS NULL
+          AND "fileName" IS NULL
+          AND "fileSize" IS NULL
+        )
+        OR (
+          NULLIF(btrim(COALESCE("fileUrl", '')), '') IS NOT NULL
+          AND NULLIF(btrim(COALESCE("fileName", '')), '') IS NOT NULL
+          AND "fileSize" >= 0
+        )
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_status_allowed'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_status_allowed"
+      CHECK ("status" IN ('DRAFT', 'ACTIVE', 'ARCHIVED'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_name_not_blank'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_name_not_blank"
+      CHECK (NULLIF(btrim("name"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_quantities_valid'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_quantities_valid"
+      CHECK ("quantityPerPack" > 0 AND "stockQuantity" >= 0);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_dimensions_valid'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_dimensions_valid"
+      CHECK (
+        ("length" IS NULL OR "length" > 0)
+        AND ("width" IS NULL OR "width" > 0)
+        AND ("height" IS NULL OR "height" > 0)
+        AND ("weight" IS NULL OR "weight" >= 0)
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'PackagedItem_payload_object'
+  ) THEN
+    ALTER TABLE "PackagedItem"
+      ADD CONSTRAINT "PackagedItem_payload_object"
+      CHECK ("payload" IS NULL OR jsonb_typeof("payload") IN ('object', 'null'));
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "WarehouseLocation_active_position_key"
+  ON "WarehouseLocation" (
+    lower(btrim(COALESCE("zone", ''))),
+    lower(btrim(COALESCE("aisle", ''))),
+    lower(btrim(COALESCE("shelf", ''))),
+    lower(btrim(COALESCE("bin", '')))
+  )
+  WHERE "isActive" = true;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "BrandMaterialBinding_brand_material_normalized_key"
+  ON "BrandMaterialBinding" (
+    lower(btrim("brand")),
+    upper(btrim("materialType"))
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql
new file mode 100644
index 00000000..dc9babce
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql
@@ -0,0 +1,207 @@
+-- Strengthen approval workflow foundation data.
+-- Approval workflows are process records, but their identity, access key,
+-- participant list, role matrix, and change-log source fields still need
+-- database-level guards so direct imports cannot bypass service validation.
+
+CREATE OR REPLACE FUNCTION public.text_array_distinct_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $$
+  SELECT COALESCE(
+    (
+      SELECT bool_and(NULLIF(btrim(item), '') IS NOT NULL)
+        AND COUNT(*) = COUNT(DISTINCT item)
+      FROM unnest(items) AS item
+    ),
+    true
+  );
+$$;
+
+UPDATE "ApprovalWorkflow"
+SET
+  "approvalNumber" = upper(btrim("approvalNumber")),
+  "title" = btrim("title"),
+  "productId" = btrim("productId"),
+  "accessKey" = btrim("accessKey"),
+  "participantUserIds" = (
+    SELECT COALESCE(array_agg(DISTINCT btrim(item) ORDER BY btrim(item)), ARRAY[]::text[])
+    FROM unnest("participantUserIds") AS item
+    WHERE NULLIF(btrim(item), '') IS NOT NULL
+  )
+WHERE
+  "approvalNumber" IS DISTINCT FROM upper(btrim("approvalNumber"))
+  OR "title" IS DISTINCT FROM btrim("title")
+  OR "productId" IS DISTINCT FROM btrim("productId")
+  OR "accessKey" IS DISTINCT FROM btrim("accessKey")
+  OR "participantUserIds" IS DISTINCT FROM (
+    SELECT COALESCE(array_agg(DISTINCT btrim(item) ORDER BY btrim(item)), ARRAY[]::text[])
+    FROM unnest("participantUserIds") AS item
+    WHERE NULLIF(btrim(item), '') IS NOT NULL
+  );
+
+UPDATE "ApprovalWorkflowFieldChange"
+SET
+  "fieldKey" = btrim("fieldKey"),
+  "source" = btrim("source"),
+  "sourcePage" = NULLIF(btrim(COALESCE("sourcePage", '')), '')
+WHERE
+  "fieldKey" IS DISTINCT FROM btrim("fieldKey")
+  OR "source" IS DISTINCT FROM btrim("source")
+  OR "sourcePage" IS DISTINCT FROM NULLIF(btrim(COALESCE("sourcePage", '')), '');
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ApprovalWorkflow"
+  WHERE NULLIF(btrim("approvalNumber"), '') IS NULL
+     OR "approvalNumber" <> upper(btrim("approvalNumber"))
+     OR NULLIF(btrim("title"), '') IS NULL
+     OR NULLIF(btrim("productId"), '') IS NULL
+     OR NULLIF(btrim("accessKey"), '') IS NULL
+     OR NOT public.text_array_distinct_non_blank("participantUserIds")
+     OR cardinality(array_positions("businessRoles", 'DESIGN'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'PLANNING'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'PURCHASING'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'WAREHOUSE'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'SUPPLIER'::"BusinessAccountType")) > 1
+     OR ("fieldMatrix" IS NOT NULL AND jsonb_typeof("fieldMatrix") NOT IN ('array', 'null'))
+     OR ("summary" IS NOT NULL AND jsonb_typeof("summary") NOT IN ('object', 'null'))
+     OR ("metadata" IS NOT NULL AND jsonb_typeof("metadata") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add ApprovalWorkflow guards: % rows have invalid identity, arrays, or JSON shape.',
+      invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ApprovalWorkflowFieldChange"
+  WHERE NULLIF(btrim("fieldKey"), '') IS NULL
+     OR NULLIF(btrim("source"), '') IS NULL
+     OR ("sourcePage" IS NOT NULL AND NULLIF(btrim("sourcePage"), '') IS NULL)
+     OR ("metadata" IS NOT NULL AND jsonb_typeof("metadata") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add ApprovalWorkflowFieldChange guards: % rows have invalid source fields or metadata shape.',
+      invalid_count;
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_approvalNumber_normalized'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_approvalNumber_normalized"
+      CHECK (
+        NULLIF(btrim("approvalNumber"), '') IS NOT NULL
+        AND "approvalNumber" = upper(btrim("approvalNumber"))
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_title_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_title_not_blank"
+      CHECK (NULLIF(btrim("title"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_productId_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_productId_not_blank"
+      CHECK (NULLIF(btrim("productId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_accessKey_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_accessKey_not_blank"
+      CHECK (NULLIF(btrim("accessKey"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_participant_user_ids_valid'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_participant_user_ids_valid"
+      CHECK (public.text_array_distinct_non_blank("participantUserIds"));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_business_roles_distinct'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_business_roles_distinct"
+      CHECK (
+        cardinality(array_positions("businessRoles", 'DESIGN'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'PLANNING'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'PURCHASING'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'WAREHOUSE'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'SUPPLIER'::"BusinessAccountType")) <= 1
+      );
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_fieldMatrix_array'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_fieldMatrix_array"
+      CHECK ("fieldMatrix" IS NULL OR jsonb_typeof("fieldMatrix") IN ('array', 'null'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_summary_object'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_summary_object"
+      CHECK ("summary" IS NULL OR jsonb_typeof("summary") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflow_metadata_object'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflow"
+      ADD CONSTRAINT "ApprovalWorkflow_metadata_object"
+      CHECK ("metadata" IS NULL OR jsonb_typeof("metadata") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflowFieldChange_fieldKey_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflowFieldChange"
+      ADD CONSTRAINT "ApprovalWorkflowFieldChange_fieldKey_not_blank"
+      CHECK (NULLIF(btrim("fieldKey"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflowFieldChange_source_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflowFieldChange"
+      ADD CONSTRAINT "ApprovalWorkflowFieldChange_source_not_blank"
+      CHECK (NULLIF(btrim("source"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflowFieldChange_optional_text_not_blank'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflowFieldChange"
+      ADD CONSTRAINT "ApprovalWorkflowFieldChange_optional_text_not_blank"
+      CHECK ("sourcePage" IS NULL OR NULLIF(btrim("sourcePage"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'ApprovalWorkflowFieldChange_metadata_object'
+  ) THEN
+    ALTER TABLE "ApprovalWorkflowFieldChange"
+      ADD CONSTRAINT "ApprovalWorkflowFieldChange_metadata_object"
+      CHECK ("metadata" IS NULL OR jsonb_typeof("metadata") IN ('object', 'null'));
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql
new file mode 100644
index 00000000..8e5cd7ab
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql
@@ -0,0 +1,445 @@
+-- Strengthen people and organization foundation data.
+-- User, Department, Team, and EmployeeDirectory are permission and provisioning
+-- roots. Their identity fields must be normalized and guarded by the database.
+
+CREATE OR REPLACE FUNCTION public.text_array_distinct_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $$
+  SELECT COALESCE(
+    (
+      SELECT bool_and(NULLIF(btrim(item), '') IS NOT NULL)
+        AND COUNT(*) = COUNT(DISTINCT item)
+      FROM unnest(items) AS item
+    ),
+    true
+  );
+$$;
+
+DO $$
+DECLARE
+  duplicate_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT lower(btrim(email))
+    FROM "User"
+    GROUP BY lower(btrim(email))
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add User normalized email guard: % duplicate normalized emails exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim(name)
+    FROM "User"
+    GROUP BY btrim(name)
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add User normalized name guard: % duplicate normalized names exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim(name)
+    FROM "Department"
+    GROUP BY btrim(name)
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Department normalized name guard: % duplicate normalized names exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim("externalId")
+    FROM "Department"
+    WHERE NULLIF(btrim(COALESCE("externalId", '')), '') IS NOT NULL
+    GROUP BY btrim("externalId")
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Department normalized externalId guard: % duplicate normalized external IDs exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim("dingtalkUserId")
+    FROM "EmployeeDirectory"
+    WHERE NULLIF(btrim(COALESCE("dingtalkUserId", '')), '') IS NOT NULL
+    GROUP BY btrim("dingtalkUserId")
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeDirectory dingtalkUserId guard: % duplicate normalized IDs exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim("dingtalkUnionId")
+    FROM "EmployeeDirectory"
+    WHERE NULLIF(btrim(COALESCE("dingtalkUnionId", '')), '') IS NOT NULL
+    GROUP BY btrim("dingtalkUnionId")
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeDirectory dingtalkUnionId guard: % duplicate normalized IDs exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim("jobNumber")
+    FROM "EmployeeDirectory"
+    WHERE NULLIF(btrim(COALESCE("jobNumber", '')), '') IS NOT NULL
+    GROUP BY btrim("jobNumber")
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeDirectory jobNumber guard: % duplicate normalized job numbers exist.', duplicate_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO duplicate_count
+  FROM (
+    SELECT btrim(mobile)
+    FROM "EmployeeDirectory"
+    WHERE NULLIF(btrim(COALESCE(mobile, '')), '') IS NOT NULL
+    GROUP BY btrim(mobile)
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeDirectory mobile guard: % duplicate normalized mobiles exist.', duplicate_count;
+  END IF;
+END $$;
+
+UPDATE "User"
+SET
+  email = lower(btrim(email)),
+  name = btrim(name),
+  "loginSource" = btrim("loginSource"),
+  avatar = NULLIF(btrim(COALESCE(avatar, '')), ''),
+  phone = NULLIF(btrim(COALESCE(phone, '')), ''),
+  "dingtalkUserId" = NULLIF(btrim(COALESCE("dingtalkUserId", '')), ''),
+  "dingtalkUnionId" = NULLIF(btrim(COALESCE("dingtalkUnionId", '')), '')
+WHERE
+  email IS DISTINCT FROM lower(btrim(email))
+  OR name IS DISTINCT FROM btrim(name)
+  OR "loginSource" IS DISTINCT FROM btrim("loginSource")
+  OR avatar IS DISTINCT FROM NULLIF(btrim(COALESCE(avatar, '')), '')
+  OR phone IS DISTINCT FROM NULLIF(btrim(COALESCE(phone, '')), '')
+  OR "dingtalkUserId" IS DISTINCT FROM NULLIF(btrim(COALESCE("dingtalkUserId", '')), '')
+  OR "dingtalkUnionId" IS DISTINCT FROM NULLIF(btrim(COALESCE("dingtalkUnionId", '')), '');
+
+UPDATE "Department"
+SET
+  name = btrim(name),
+  "fullPath" = btrim("fullPath"),
+  "externalId" = NULLIF(btrim(COALESCE("externalId", '')), ''),
+  description = NULLIF(btrim(COALESCE(description, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR "fullPath" IS DISTINCT FROM btrim("fullPath")
+  OR "externalId" IS DISTINCT FROM NULLIF(btrim(COALESCE("externalId", '')), '')
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '');
+
+UPDATE "Team"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '');
+
+UPDATE "EmployeeDirectory"
+SET
+  "dingtalkUserId" = NULLIF(btrim(COALESCE("dingtalkUserId", '')), ''),
+  "dingtalkUnionId" = NULLIF(btrim(COALESCE("dingtalkUnionId", '')), ''),
+  "jobNumber" = NULLIF(btrim(COALESCE("jobNumber", '')), ''),
+  name = btrim(name),
+  mobile = NULLIF(btrim(COALESCE(mobile, '')), ''),
+  email = NULLIF(lower(btrim(COALESCE(email, ''))), ''),
+  title = NULLIF(btrim(COALESCE(title, '')), ''),
+  "primaryDepartmentExternalId" = NULLIF(btrim(COALESCE("primaryDepartmentExternalId", '')), '')
+WHERE
+  "dingtalkUserId" IS DISTINCT FROM NULLIF(btrim(COALESCE("dingtalkUserId", '')), '')
+  OR "dingtalkUnionId" IS DISTINCT FROM NULLIF(btrim(COALESCE("dingtalkUnionId", '')), '')
+  OR "jobNumber" IS DISTINCT FROM NULLIF(btrim(COALESCE("jobNumber", '')), '')
+  OR name IS DISTINCT FROM btrim(name)
+  OR mobile IS DISTINCT FROM NULLIF(btrim(COALESCE(mobile, '')), '')
+  OR email IS DISTINCT FROM NULLIF(lower(btrim(COALESCE(email, ''))), '')
+  OR title IS DISTINCT FROM NULLIF(btrim(COALESCE(title, '')), '')
+  OR "primaryDepartmentExternalId" IS DISTINCT FROM NULLIF(btrim(COALESCE("primaryDepartmentExternalId", '')), '');
+
+UPDATE "EmployeeLookupCache"
+SET
+  "cacheKey" = btrim("cacheKey"),
+  "keyType" = btrim("keyType"),
+  "lookupValue" = btrim("lookupValue")
+WHERE
+  "cacheKey" IS DISTINCT FROM btrim("cacheKey")
+  OR "keyType" IS DISTINCT FROM btrim("keyType")
+  OR "lookupValue" IS DISTINCT FROM btrim("lookupValue");
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "User"
+  WHERE NULLIF(btrim(email), '') IS NULL
+     OR email <> lower(btrim(email))
+     OR NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("loginSource"), '') IS NULL
+     OR cardinality(array_positions("businessRoles", 'DESIGN'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'PLANNING'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'PURCHASING'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'WAREHOUSE'::"BusinessAccountType")) > 1
+     OR cardinality(array_positions("businessRoles", 'SUPPLIER'::"BusinessAccountType")) > 1
+     OR (avatar IS NOT NULL AND NULLIF(btrim(avatar), '') IS NULL)
+     OR (phone IS NOT NULL AND NULLIF(btrim(phone), '') IS NULL)
+     OR ("dingtalkUserId" IS NOT NULL AND NULLIF(btrim("dingtalkUserId"), '') IS NULL)
+     OR ("dingtalkUnionId" IS NOT NULL AND NULLIF(btrim("dingtalkUnionId"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add User guards: % rows have invalid identity or optional text fields.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Department"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("fullPath"), '') IS NULL
+     OR "fullPath" <> btrim("fullPath")
+     OR ("externalId" IS NOT NULL AND NULLIF(btrim("externalId"), '') IS NULL)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR "orderIndex" < 0;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Department guards: % rows have invalid identity or hierarchy fields.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Team"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR "orderIndex" < 0;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Team guards: % rows have invalid identity fields.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "EmployeeDirectory"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR ("dingtalkUserId" IS NOT NULL AND NULLIF(btrim("dingtalkUserId"), '') IS NULL)
+     OR ("dingtalkUnionId" IS NOT NULL AND NULLIF(btrim("dingtalkUnionId"), '') IS NULL)
+     OR ("jobNumber" IS NOT NULL AND NULLIF(btrim("jobNumber"), '') IS NULL)
+     OR (mobile IS NOT NULL AND NULLIF(btrim(mobile), '') IS NULL)
+     OR (email IS NOT NULL AND (NULLIF(btrim(email), '') IS NULL OR email <> lower(btrim(email))))
+     OR (title IS NOT NULL AND NULLIF(btrim(title), '') IS NULL)
+     OR ("primaryDepartmentExternalId" IS NOT NULL AND NULLIF(btrim("primaryDepartmentExternalId"), '') IS NULL)
+     OR ("departmentExternalIds" IS NOT NULL AND jsonb_typeof("departmentExternalIds") NOT IN ('array', 'null'))
+     OR ("rawSnapshot" IS NOT NULL AND jsonb_typeof("rawSnapshot") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeDirectory guards: % rows have invalid identity or JSON fields.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "EmployeeLookupCache"
+  WHERE NULLIF(btrim("cacheKey"), '') IS NULL
+     OR NULLIF(btrim("keyType"), '') IS NULL
+     OR NULLIF(btrim("lookupValue"), '') IS NULL
+     OR ("result" IS NOT NULL AND jsonb_typeof("result") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add EmployeeLookupCache guards: % rows have invalid cache identity or result shape.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'User_email_normalized') THEN
+    ALTER TABLE "User"
+      ADD CONSTRAINT "User_email_normalized"
+      CHECK (NULLIF(btrim(email), '') IS NOT NULL AND email = lower(btrim(email)));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'User_name_not_blank') THEN
+    ALTER TABLE "User"
+      ADD CONSTRAINT "User_name_not_blank"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'User_loginSource_not_blank') THEN
+    ALTER TABLE "User"
+      ADD CONSTRAINT "User_loginSource_not_blank"
+      CHECK (NULLIF(btrim("loginSource"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'User_business_roles_distinct') THEN
+    ALTER TABLE "User"
+      ADD CONSTRAINT "User_business_roles_distinct"
+      CHECK (
+        cardinality(array_positions("businessRoles", 'DESIGN'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'PLANNING'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'PURCHASING'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'WAREHOUSE'::"BusinessAccountType")) <= 1
+        AND cardinality(array_positions("businessRoles", 'SUPPLIER'::"BusinessAccountType")) <= 1
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'User_optional_text_not_blank') THEN
+    ALTER TABLE "User"
+      ADD CONSTRAINT "User_optional_text_not_blank"
+      CHECK (
+        (avatar IS NULL OR NULLIF(btrim(avatar), '') IS NOT NULL)
+        AND (phone IS NULL OR NULLIF(btrim(phone), '') IS NOT NULL)
+        AND ("dingtalkUserId" IS NULL OR NULLIF(btrim("dingtalkUserId"), '') IS NOT NULL)
+        AND ("dingtalkUnionId" IS NULL OR NULLIF(btrim("dingtalkUnionId"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Department_identity_not_blank') THEN
+    ALTER TABLE "Department"
+      ADD CONSTRAINT "Department_identity_not_blank"
+      CHECK (
+        NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND NULLIF(btrim("fullPath"), '') IS NOT NULL
+        AND "fullPath" = btrim("fullPath")
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Department_optional_text_not_blank') THEN
+    ALTER TABLE "Department"
+      ADD CONSTRAINT "Department_optional_text_not_blank"
+      CHECK (
+        ("externalId" IS NULL OR NULLIF(btrim("externalId"), '') IS NOT NULL)
+        AND (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Department_orderIndex_non_negative') THEN
+    ALTER TABLE "Department"
+      ADD CONSTRAINT "Department_orderIndex_non_negative"
+      CHECK ("orderIndex" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Team_identity_not_blank') THEN
+    ALTER TABLE "Team"
+      ADD CONSTRAINT "Team_identity_not_blank"
+      CHECK (
+        NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND "orderIndex" >= 0
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeDirectory_name_not_blank') THEN
+    ALTER TABLE "EmployeeDirectory"
+      ADD CONSTRAINT "EmployeeDirectory_name_not_blank"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeDirectory_optional_text_not_blank') THEN
+    ALTER TABLE "EmployeeDirectory"
+      ADD CONSTRAINT "EmployeeDirectory_optional_text_not_blank"
+      CHECK (
+        ("dingtalkUserId" IS NULL OR NULLIF(btrim("dingtalkUserId"), '') IS NOT NULL)
+        AND ("dingtalkUnionId" IS NULL OR NULLIF(btrim("dingtalkUnionId"), '') IS NOT NULL)
+        AND ("jobNumber" IS NULL OR NULLIF(btrim("jobNumber"), '') IS NOT NULL)
+        AND (mobile IS NULL OR NULLIF(btrim(mobile), '') IS NOT NULL)
+        AND (title IS NULL OR NULLIF(btrim(title), '') IS NOT NULL)
+        AND ("primaryDepartmentExternalId" IS NULL OR NULLIF(btrim("primaryDepartmentExternalId"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeDirectory_email_normalized') THEN
+    ALTER TABLE "EmployeeDirectory"
+      ADD CONSTRAINT "EmployeeDirectory_email_normalized"
+      CHECK (email IS NULL OR email = lower(btrim(email)));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeDirectory_departmentExternalIds_array') THEN
+    ALTER TABLE "EmployeeDirectory"
+      ADD CONSTRAINT "EmployeeDirectory_departmentExternalIds_array"
+      CHECK ("departmentExternalIds" IS NULL OR jsonb_typeof("departmentExternalIds") IN ('array', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeDirectory_rawSnapshot_object') THEN
+    ALTER TABLE "EmployeeDirectory"
+      ADD CONSTRAINT "EmployeeDirectory_rawSnapshot_object"
+      CHECK ("rawSnapshot" IS NULL OR jsonb_typeof("rawSnapshot") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeLookupCache_identity_not_blank') THEN
+    ALTER TABLE "EmployeeLookupCache"
+      ADD CONSTRAINT "EmployeeLookupCache_identity_not_blank"
+      CHECK (
+        NULLIF(btrim("cacheKey"), '') IS NOT NULL
+        AND NULLIF(btrim("keyType"), '') IS NOT NULL
+        AND NULLIF(btrim("lookupValue"), '') IS NOT NULL
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'EmployeeLookupCache_result_object') THEN
+    ALTER TABLE "EmployeeLookupCache"
+      ADD CONSTRAINT "EmployeeLookupCache_result_object"
+      CHECK ("result" IS NULL OR jsonb_typeof("result") IN ('object', 'null'));
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "User_email_normalized_key"
+  ON "User" (lower(btrim(email)));
+
+CREATE UNIQUE INDEX IF NOT EXISTS "User_name_normalized_key"
+  ON "User" (btrim(name));
+
+CREATE UNIQUE INDEX IF NOT EXISTS "Department_name_normalized_key"
+  ON "Department" (btrim(name));
+
+CREATE UNIQUE INDEX IF NOT EXISTS "Department_externalId_normalized_key"
+  ON "Department" (btrim("externalId"))
+  WHERE NULLIF(btrim(COALESCE("externalId", '')), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "EmployeeDirectory_dingtalkUserId_normalized_key"
+  ON "EmployeeDirectory" (btrim("dingtalkUserId"))
+  WHERE NULLIF(btrim(COALESCE("dingtalkUserId", '')), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "EmployeeDirectory_dingtalkUnionId_normalized_key"
+  ON "EmployeeDirectory" (btrim("dingtalkUnionId"))
+  WHERE NULLIF(btrim(COALESCE("dingtalkUnionId", '')), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "EmployeeDirectory_jobNumber_normalized_key"
+  ON "EmployeeDirectory" (btrim("jobNumber"))
+  WHERE NULLIF(btrim(COALESCE("jobNumber", '')), '') IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "EmployeeDirectory_mobile_normalized_key"
+  ON "EmployeeDirectory" (btrim(mobile))
+  WHERE NULLIF(btrim(COALESCE(mobile, '')), '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql
new file mode 100644
index 00000000..ff21db16
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql
@@ -0,0 +1,194 @@
+-- Strengthen planning foundation data.
+-- Planning templates and workspaces define the pre-product planning process.
+-- JSON columns are allowed only as bounded template/process payloads; identity,
+-- visibility, and draft snapshot shapes are guarded at the database layer.
+
+UPDATE "PlanningTemplate"
+SET
+  code = upper(btrim(code)),
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  "namePattern" = NULLIF(btrim(COALESCE("namePattern", '')), '')
+WHERE
+  code IS DISTINCT FROM upper(btrim(code))
+  OR name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR "namePattern" IS DISTINCT FROM NULLIF(btrim(COALESCE("namePattern", '')), '');
+
+UPDATE "PlanningWorkspace"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  visibility = upper(btrim(visibility))
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR visibility IS DISTINCT FROM upper(btrim(visibility));
+
+UPDATE "PlanningDraft"
+SET
+  name = btrim(name),
+  "selectedCandidateKey" = btrim("selectedCandidateKey"),
+  notes = NULLIF(btrim(COALESCE(notes, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR "selectedCandidateKey" IS DISTINCT FROM btrim("selectedCandidateKey")
+  OR notes IS DISTINCT FROM NULLIF(btrim(COALESCE(notes, '')), '');
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PlanningTemplate"
+  WHERE NULLIF(btrim(code), '') IS NULL
+     OR code <> upper(btrim(code))
+     OR NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR ("namePattern" IS NOT NULL AND NULLIF(btrim("namePattern"), '') IS NULL)
+     OR jsonb_typeof(slots) <> 'array'
+     OR jsonb_array_length(slots) = 0
+     OR (rules IS NOT NULL AND jsonb_typeof(rules) NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PlanningTemplate guards: % rows have invalid identity or JSON shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PlanningWorkspace"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR visibility NOT IN ('PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC')
+     OR jsonb_typeof("slotSelections") <> 'object'
+     OR (metadata IS NOT NULL AND jsonb_typeof(metadata) NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PlanningWorkspace guards: % rows have invalid identity, visibility, or JSON shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PlanningDraft"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("selectedCandidateKey"), '') IS NULL
+     OR "selectedCandidateKey" <> btrim("selectedCandidateKey")
+     OR jsonb_typeof("selectedAssets") <> 'object'
+     OR jsonb_typeof("previewNodes") <> 'array'
+     OR jsonb_typeof(summary) <> 'array'
+     OR (warnings IS NOT NULL AND jsonb_typeof(warnings) NOT IN ('array', 'null'))
+     OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+     OR ("sourceSnapshot" IS NOT NULL AND jsonb_typeof("sourceSnapshot") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PlanningDraft guards: % rows have invalid identity or snapshot JSON shape.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningTemplate_name_not_blank') THEN
+    ALTER TABLE "PlanningTemplate"
+      ADD CONSTRAINT "PlanningTemplate_name_not_blank"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningTemplate_slots_array') THEN
+    ALTER TABLE "PlanningTemplate"
+      ADD CONSTRAINT "PlanningTemplate_slots_array"
+      CHECK (jsonb_typeof(slots) = 'array' AND jsonb_array_length(slots) > 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningTemplate_rules_object') THEN
+    ALTER TABLE "PlanningTemplate"
+      ADD CONSTRAINT "PlanningTemplate_rules_object"
+      CHECK (rules IS NULL OR jsonb_typeof(rules) IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningTemplate_optional_text_not_blank') THEN
+    ALTER TABLE "PlanningTemplate"
+      ADD CONSTRAINT "PlanningTemplate_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND ("namePattern" IS NULL OR NULLIF(btrim("namePattern"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningWorkspace_name_not_blank') THEN
+    ALTER TABLE "PlanningWorkspace"
+      ADD CONSTRAINT "PlanningWorkspace_name_not_blank"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningWorkspace_visibility_allowed') THEN
+    ALTER TABLE "PlanningWorkspace"
+      ADD CONSTRAINT "PlanningWorkspace_visibility_allowed"
+      CHECK (visibility IN ('PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningWorkspace_slotSelections_object') THEN
+    ALTER TABLE "PlanningWorkspace"
+      ADD CONSTRAINT "PlanningWorkspace_slotSelections_object"
+      CHECK (jsonb_typeof("slotSelections") = 'object');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningWorkspace_metadata_object') THEN
+    ALTER TABLE "PlanningWorkspace"
+      ADD CONSTRAINT "PlanningWorkspace_metadata_object"
+      CHECK (metadata IS NULL OR jsonb_typeof(metadata) IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningWorkspace_optional_text_not_blank') THEN
+    ALTER TABLE "PlanningWorkspace"
+      ADD CONSTRAINT "PlanningWorkspace_optional_text_not_blank"
+      CHECK (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_identity_not_blank') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_identity_not_blank"
+      CHECK (
+        NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND NULLIF(btrim("selectedCandidateKey"), '') IS NOT NULL
+        AND "selectedCandidateKey" = btrim("selectedCandidateKey")
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_selectedAssets_object') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_selectedAssets_object"
+      CHECK (jsonb_typeof("selectedAssets") = 'object');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_previewNodes_array') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_previewNodes_array"
+      CHECK (jsonb_typeof("previewNodes") = 'array');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_summary_array') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_summary_array"
+      CHECK (jsonb_typeof(summary) = 'array');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_warnings_array') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_warnings_array"
+      CHECK (warnings IS NULL OR jsonb_typeof(warnings) IN ('array', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_sourceSnapshot_object') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_sourceSnapshot_object"
+      CHECK ("sourceSnapshot" IS NULL OR jsonb_typeof("sourceSnapshot") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PlanningDraft_optional_text_not_blank') THEN
+    ALTER TABLE "PlanningDraft"
+      ADD CONSTRAINT "PlanningDraft_optional_text_not_blank"
+      CHECK (notes IS NULL OR NULLIF(btrim(notes), '') IS NOT NULL);
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql
new file mode 100644
index 00000000..4f09229c
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql
@@ -0,0 +1,123 @@
+-- Strengthen formal product sharing, upload, and collaboration guards.
+-- Product remains the formal SPU truth source; ShareLink is an access record;
+-- ProductCollaborator is a permission relation, not a second people master table.
+
+UPDATE "Product"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  visibility = upper(btrim(visibility))
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR visibility IS DISTINCT FROM upper(btrim(visibility));
+
+UPDATE "ProductCollaborator"
+SET
+  role = lower(btrim(role)),
+  "addedBy" = NULLIF(btrim(COALESCE("addedBy", '')), '')
+WHERE
+  role IS DISTINCT FROM lower(btrim(role))
+  OR "addedBy" IS DISTINCT FROM NULLIF(btrim(COALESCE("addedBy", '')), '');
+
+UPDATE "ShareLink"
+SET token = btrim(token)
+WHERE token IS DISTINCT FROM btrim(token);
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Product"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR visibility NOT IN ('PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC')
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Product sharing/upload guards: % rows have invalid name, visibility, or optional text.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ProductCollaborator"
+  WHERE NULLIF(btrim("productId"), '') IS NULL
+     OR NULLIF(btrim("userId"), '') IS NULL
+     OR role NOT IN ('editor', 'viewer')
+     OR ("addedBy" IS NOT NULL AND NULLIF(btrim("addedBy"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ProductCollaborator guards: % rows have invalid identity, role, or addedBy.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ShareLink"
+  WHERE NULLIF(btrim(token), '') IS NULL
+     OR token <> btrim(token)
+     OR "viewCount" < 0
+     OR ("expiresAt" IS NOT NULL AND "expiresAt" <= "createdAt");
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ShareLink guards: % rows have invalid token, view count, or expiry time.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Product_name_not_blank') THEN
+    ALTER TABLE "Product"
+      ADD CONSTRAINT "Product_name_not_blank"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Product_visibility_allowed') THEN
+    ALTER TABLE "Product"
+      ADD CONSTRAINT "Product_visibility_allowed"
+      CHECK (visibility IN ('PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Product_optional_text_not_blank') THEN
+    ALTER TABLE "Product"
+      ADD CONSTRAINT "Product_optional_text_not_blank"
+      CHECK (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductCollaborator_identity_not_blank') THEN
+    ALTER TABLE "ProductCollaborator"
+      ADD CONSTRAINT "ProductCollaborator_identity_not_blank"
+      CHECK (
+        NULLIF(btrim("productId"), '') IS NOT NULL
+        AND NULLIF(btrim("userId"), '') IS NOT NULL
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductCollaborator_role_allowed') THEN
+    ALTER TABLE "ProductCollaborator"
+      ADD CONSTRAINT "ProductCollaborator_role_allowed"
+      CHECK (role IN ('editor', 'viewer'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductCollaborator_addedBy_not_blank') THEN
+    ALTER TABLE "ProductCollaborator"
+      ADD CONSTRAINT "ProductCollaborator_addedBy_not_blank"
+      CHECK ("addedBy" IS NULL OR NULLIF(btrim("addedBy"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ShareLink_token_not_blank') THEN
+    ALTER TABLE "ShareLink"
+      ADD CONSTRAINT "ShareLink_token_not_blank"
+      CHECK (NULLIF(btrim(token), '') IS NOT NULL AND token = btrim(token));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ShareLink_viewCount_non_negative') THEN
+    ALTER TABLE "ShareLink"
+      ADD CONSTRAINT "ShareLink_viewCount_non_negative"
+      CHECK ("viewCount" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ShareLink_expiresAt_after_createdAt') THEN
+    ALTER TABLE "ShareLink"
+      ADD CONSTRAINT "ShareLink_expiresAt_after_createdAt"
+      CHECK ("expiresAt" IS NULL OR "expiresAt" > "createdAt");
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql
new file mode 100644
index 00000000..61098624
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql
@@ -0,0 +1,462 @@
+-- Strengthen legacy CAD structure data.
+-- Panel, Hole, ProductHardware, AssemblyStep, and AssemblyVersion are the
+-- legacy CAD compatibility chain. JSON columns remain bounded geometry,
+-- animation, or snapshot payloads; identity, dimensions, enums, and relation
+-- references are guarded as structured data.
+
+CREATE OR REPLACE FUNCTION public.text_array_distinct_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $$
+  SELECT COALESCE(
+    (
+      SELECT bool_and(NULLIF(btrim(item), '') IS NOT NULL)
+        AND COUNT(*) = COUNT(DISTINCT btrim(item))
+      FROM unnest(items) AS item
+    ),
+    true
+  );
+$$;
+
+ALTER TABLE "ProductHardware"
+  ALTER COLUMN "hardwareId" DROP NOT NULL,
+  ADD COLUMN IF NOT EXISTS "connectedPanelId" TEXT,
+  ADD COLUMN IF NOT EXISTS "associatedHoleId" TEXT,
+  ADD COLUMN IF NOT EXISTS "holeDistance" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "parentHardwareId" TEXT,
+  ADD COLUMN IF NOT EXISTS "isAccessory" BOOLEAN NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS "matchStatus" TEXT NOT NULL DEFAULT 'unmatched',
+  ADD COLUMN IF NOT EXISTS "matchConfidence" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "matchMethod" TEXT,
+  ADD COLUMN IF NOT EXISTS "sourceSignature" JSONB;
+
+CREATE INDEX IF NOT EXISTS "ProductHardware_matchStatus_idx" ON "ProductHardware"("matchStatus");
+
+ALTER TABLE "AssemblyStep"
+  ALTER COLUMN "duration" SET DEFAULT 1500,
+  ALTER COLUMN "easing" SET DEFAULT 'power2.inOut',
+  ADD COLUMN IF NOT EXISTS "stepType" TEXT NOT NULL DEFAULT 'panel',
+  ADD COLUMN IF NOT EXISTS "panelId" TEXT,
+  ADD COLUMN IF NOT EXISTS "hardwareIds" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  ADD COLUMN IF NOT EXISTS "cameraPosition" JSONB,
+  ADD COLUMN IF NOT EXISTS "cameraTransition" TEXT NOT NULL DEFAULT 'smooth',
+  ADD COLUMN IF NOT EXISTS "showInfoCard" BOOLEAN NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS "infoCardData" JSONB;
+
+UPDATE "AssemblyStep"
+SET "partIds" = ARRAY[]::TEXT[]
+WHERE "partIds" IS NULL;
+
+ALTER TABLE "AssemblyStep"
+  ALTER COLUMN "partIds" SET DEFAULT ARRAY[]::TEXT[],
+  ALTER COLUMN "partIds" SET NOT NULL;
+
+CREATE INDEX IF NOT EXISTS "AssemblyStep_stepType_idx" ON "AssemblyStep"("stepType");
+
+CREATE TABLE IF NOT EXISTS "AssemblyVersion" (
+  "id" TEXT NOT NULL,
+  "productId" TEXT NOT NULL,
+  "version" INTEGER NOT NULL,
+  "snapshot" JSONB NOT NULL,
+  "description" TEXT,
+  "createdBy" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "AssemblyVersion_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "AssemblyVersion_productId_version_key" ON "AssemblyVersion"("productId", "version");
+CREATE INDEX IF NOT EXISTS "AssemblyVersion_productId_idx" ON "AssemblyVersion"("productId");
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'AssemblyVersion_productId_fkey'
+      AND table_name = 'AssemblyVersion'
+  ) THEN
+    ALTER TABLE "AssemblyVersion"
+    ADD CONSTRAINT "AssemblyVersion_productId_fkey"
+    FOREIGN KEY ("productId") REFERENCES "Product"("id")
+    ON DELETE CASCADE
+    ON UPDATE CASCADE;
+  END IF;
+END $$;
+
+UPDATE "Panel"
+SET
+  code = upper(btrim(code)),
+  name = btrim(name),
+  "gltfNodeName" = btrim("gltfNodeName"),
+  "partType" = NULLIF(btrim(COALESCE("partType", '')), ''),
+  "explosionDirection" = NULLIF(lower(btrim(COALESCE("explosionDirection", ''))), '')
+WHERE
+  code IS DISTINCT FROM upper(btrim(code))
+  OR name IS DISTINCT FROM btrim(name)
+  OR "gltfNodeName" IS DISTINCT FROM btrim("gltfNodeName")
+  OR "partType" IS DISTINCT FROM NULLIF(btrim(COALESCE("partType", '')), '')
+  OR "explosionDirection" IS DISTINCT FROM NULLIF(lower(btrim(COALESCE("explosionDirection", ''))), '');
+
+UPDATE "Hole"
+SET
+  "holeType" = NULLIF(lower(btrim(COALESCE("holeType", ''))), ''),
+  "groupId" = NULLIF(btrim(COALESCE("groupId", '')), '')
+WHERE
+  "holeType" IS DISTINCT FROM NULLIF(lower(btrim(COALESCE("holeType", ''))), '')
+  OR "groupId" IS DISTINCT FROM NULLIF(btrim(COALESCE("groupId", '')), '');
+
+UPDATE "ProductHardware"
+SET
+  "matchStatus" = lower(btrim("matchStatus")),
+  "matchMethod" = NULLIF(btrim(COALESCE("matchMethod", '')), ''),
+  "sourceBlockName" = NULLIF(btrim(COALESCE("sourceBlockName", '')), ''),
+  notes = NULLIF(btrim(COALESCE(notes, '')), ''),
+  "panelId" = NULLIF(btrim(COALESCE("panelId", '')), ''),
+  "connectedPanelId" = NULLIF(btrim(COALESCE("connectedPanelId", '')), ''),
+  "associatedHoleId" = NULLIF(btrim(COALESCE("associatedHoleId", '')), ''),
+  "parentHardwareId" = NULLIF(btrim(COALESCE("parentHardwareId", '')), '')
+WHERE
+  "matchStatus" IS DISTINCT FROM lower(btrim("matchStatus"))
+  OR "matchMethod" IS DISTINCT FROM NULLIF(btrim(COALESCE("matchMethod", '')), '')
+  OR "sourceBlockName" IS DISTINCT FROM NULLIF(btrim(COALESCE("sourceBlockName", '')), '')
+  OR notes IS DISTINCT FROM NULLIF(btrim(COALESCE(notes, '')), '')
+  OR "panelId" IS DISTINCT FROM NULLIF(btrim(COALESCE("panelId", '')), '')
+  OR "connectedPanelId" IS DISTINCT FROM NULLIF(btrim(COALESCE("connectedPanelId", '')), '')
+  OR "associatedHoleId" IS DISTINCT FROM NULLIF(btrim(COALESCE("associatedHoleId", '')), '')
+  OR "parentHardwareId" IS DISTINCT FROM NULLIF(btrim(COALESCE("parentHardwareId", '')), '');
+
+UPDATE "AssemblyStep"
+SET
+  title = btrim(title),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  "stepType" = lower(btrim("stepType")),
+  "panelId" = NULLIF(btrim(COALESCE("panelId", '')), ''),
+  easing = btrim(easing),
+  "cameraTransition" = lower(btrim("cameraTransition"))
+WHERE
+  title IS DISTINCT FROM btrim(title)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR "stepType" IS DISTINCT FROM lower(btrim("stepType"))
+  OR "panelId" IS DISTINCT FROM NULLIF(btrim(COALESCE("panelId", '')), '')
+  OR easing IS DISTINCT FROM btrim(easing)
+  OR "cameraTransition" IS DISTINCT FROM lower(btrim("cameraTransition"));
+
+UPDATE "AssemblyVersion"
+SET
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  "createdBy" = NULLIF(btrim(COALESCE("createdBy", '')), '')
+WHERE
+  description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR "createdBy" IS DISTINCT FROM NULLIF(btrim(COALESCE("createdBy", '')), '');
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Panel"
+  WHERE NULLIF(btrim(code), '') IS NULL
+     OR code <> upper(btrim(code))
+     OR NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("gltfNodeName"), '') IS NULL
+     OR "gltfNodeName" <> btrim("gltfNodeName")
+     OR length <= 0
+     OR width <= 0
+     OR thickness <= 0
+     OR COALESCE("installOrder", 0) < 0
+     OR ("explosionDirection" IS NOT NULL AND "explosionDirection" NOT IN ('auto', 'up', 'down', 'left', 'right', 'front', 'back'))
+     OR ("partType" IS NOT NULL AND NULLIF(btrim("partType"), '') IS NULL)
+     OR ("assemblySemantic" IS NOT NULL AND jsonb_typeof("assemblySemantic") NOT IN ('object', 'null'));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Panel guards: % rows have invalid identity, dimensions, or semantic shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM (
+    SELECT "productId", COALESCE("skuId", '') AS sku_scope, upper(btrim(code)) AS normalized_code
+    FROM "Panel"
+    GROUP BY "productId", COALESCE("skuId", ''), upper(btrim(code))
+    HAVING COUNT(*) > 1
+  ) duplicate_panel_codes;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Panel normalized code unique guard: % product/SKU scopes have duplicate panel codes.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Hole"
+  WHERE "positionX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR "positionY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR "positionZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR diameter <= 0
+     OR depth < 0
+     OR "normalX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR "normalY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR "normalZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+     OR ("normalX" = 0 AND "normalY" = 0 AND "normalZ" = 0)
+     OR confidence < 0
+     OR confidence > 1
+     OR ("holeType" IS NOT NULL AND "holeType" NOT IN ('hinge', 'connector', 'shelf_pin', 'screw', 'dowel', 'cable', 'unknown'))
+     OR ("groupId" IS NOT NULL AND NULLIF(btrim("groupId"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Hole guards: % rows have invalid geometry, type, confidence, or optional text.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ProductHardware"
+  WHERE jsonb_typeof(transform) <> 'object'
+     OR "matchStatus" NOT IN ('matched', 'pending', 'unmatched')
+     OR ("matchConfidence" IS NOT NULL AND ("matchConfidence" < 0 OR "matchConfidence" > 1))
+     OR ("matchMethod" IS NOT NULL AND "matchMethod" NOT IN ('blockName', 'mapping', 'size', 'manual'))
+     OR ("installOrder" IS NOT NULL AND "installOrder" < 0)
+     OR ("holeDistance" IS NOT NULL AND "holeDistance" < 0)
+     OR ("sourceSignature" IS NOT NULL AND jsonb_typeof("sourceSignature") NOT IN ('object', 'null'))
+     OR ("sourceBlockName" IS NOT NULL AND NULLIF(btrim("sourceBlockName"), '') IS NULL)
+     OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+     OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+     OR ("connectedPanelId" IS NOT NULL AND NULLIF(btrim("connectedPanelId"), '') IS NULL)
+     OR ("associatedHoleId" IS NOT NULL AND NULLIF(btrim("associatedHoleId"), '') IS NULL)
+     OR ("parentHardwareId" IS NOT NULL AND NULLIF(btrim("parentHardwareId"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ProductHardware guards: % rows have invalid matching, transform, relation, or optional text data.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "AssemblyStep"
+  WHERE "order" < 0
+     OR NULLIF(btrim(title), '') IS NULL
+     OR title <> btrim(title)
+     OR "stepType" NOT IN ('panel', 'hardware', 'custom')
+     OR duration <= 0
+     OR NULLIF(btrim(easing), '') IS NULL
+     OR "cameraTransition" NOT IN ('smooth', 'cut', 'orbit')
+     OR jsonb_typeof(transform) <> 'object'
+     OR ("cameraPosition" IS NOT NULL AND jsonb_typeof("cameraPosition") NOT IN ('object', 'null'))
+     OR ("infoCardData" IS NOT NULL AND jsonb_typeof("infoCardData") NOT IN ('object', 'null'))
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+     OR NOT public.text_array_distinct_non_blank("hardwareIds")
+     OR NOT public.text_array_distinct_non_blank("partIds");
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add AssemblyStep guards: % rows have invalid order, animation, arrays, or JSON shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "AssemblyVersion"
+  WHERE version <= 0
+     OR jsonb_typeof(snapshot) <> 'array'
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add AssemblyVersion guards: % rows have invalid version, snapshot, or optional text.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Panel_identity_dimensions_valid') THEN
+    ALTER TABLE "Panel"
+      ADD CONSTRAINT "Panel_identity_dimensions_valid"
+      CHECK (
+        NULLIF(btrim(code), '') IS NOT NULL
+        AND code = upper(btrim(code))
+        AND NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND NULLIF(btrim("gltfNodeName"), '') IS NOT NULL
+        AND "gltfNodeName" = btrim("gltfNodeName")
+        AND length > 0
+        AND width > 0
+        AND thickness > 0
+        AND COALESCE("installOrder", 0) >= 0
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Panel_explosionDirection_allowed') THEN
+    ALTER TABLE "Panel"
+      ADD CONSTRAINT "Panel_explosionDirection_allowed"
+      CHECK ("explosionDirection" IS NULL OR "explosionDirection" IN ('auto', 'up', 'down', 'left', 'right', 'front', 'back'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Panel_assemblySemantic_object') THEN
+    ALTER TABLE "Panel"
+      ADD CONSTRAINT "Panel_assemblySemantic_object"
+      CHECK ("assemblySemantic" IS NULL OR jsonb_typeof("assemblySemantic") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Panel_optional_text_not_blank') THEN
+    ALTER TABLE "Panel"
+      ADD CONSTRAINT "Panel_optional_text_not_blank"
+      CHECK ("partType" IS NULL OR NULLIF(btrim("partType"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Hole_geometry_quality') THEN
+    ALTER TABLE "Hole"
+      ADD CONSTRAINT "Hole_geometry_quality"
+      CHECK (
+        "positionX" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND "positionY" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND "positionZ" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND diameter > 0
+        AND depth >= 0
+        AND "normalX" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND "normalY" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND "normalZ" NOT IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+        AND NOT ("normalX" = 0 AND "normalY" = 0 AND "normalZ" = 0)
+        AND confidence >= 0
+        AND confidence <= 1
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Hole_type_allowed') THEN
+    ALTER TABLE "Hole"
+      ADD CONSTRAINT "Hole_type_allowed"
+      CHECK ("holeType" IS NULL OR "holeType" IN ('hinge', 'connector', 'shelf_pin', 'screw', 'dowel', 'cable', 'unknown'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Hole_optional_text_not_blank') THEN
+    ALTER TABLE "Hole"
+      ADD CONSTRAINT "Hole_optional_text_not_blank"
+      CHECK ("groupId" IS NULL OR NULLIF(btrim("groupId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_match_status_allowed') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_match_status_allowed"
+      CHECK ("matchStatus" IN ('matched', 'pending', 'unmatched'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_match_confidence_valid') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_match_confidence_valid"
+      CHECK ("matchConfidence" IS NULL OR ("matchConfidence" >= 0 AND "matchConfidence" <= 1));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_match_method_allowed') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_match_method_allowed"
+      CHECK ("matchMethod" IS NULL OR "matchMethod" IN ('blockName', 'mapping', 'size', 'manual'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_quantities_geometry_valid') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_quantities_geometry_valid"
+      CHECK (
+        ("installOrder" IS NULL OR "installOrder" >= 0)
+        AND ("holeDistance" IS NULL OR "holeDistance" >= 0)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_transform_object') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_transform_object"
+      CHECK (jsonb_typeof(transform) = 'object');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_sourceSignature_object') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_sourceSignature_object"
+      CHECK ("sourceSignature" IS NULL OR jsonb_typeof("sourceSignature") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductHardware_optional_text_not_blank') THEN
+    ALTER TABLE "ProductHardware"
+      ADD CONSTRAINT "ProductHardware_optional_text_not_blank"
+      CHECK (
+        ("sourceBlockName" IS NULL OR NULLIF(btrim("sourceBlockName"), '') IS NOT NULL)
+        AND (notes IS NULL OR NULLIF(btrim(notes), '') IS NOT NULL)
+        AND ("panelId" IS NULL OR NULLIF(btrim("panelId"), '') IS NOT NULL)
+        AND ("connectedPanelId" IS NULL OR NULLIF(btrim("connectedPanelId"), '') IS NOT NULL)
+        AND ("associatedHoleId" IS NULL OR NULLIF(btrim("associatedHoleId"), '') IS NOT NULL)
+        AND ("parentHardwareId" IS NULL OR NULLIF(btrim("parentHardwareId"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_identity_order_valid') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_identity_order_valid"
+      CHECK (
+        "order" >= 0
+        AND NULLIF(btrim(title), '') IS NOT NULL
+        AND title = btrim(title)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_type_allowed') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_type_allowed"
+      CHECK ("stepType" IN ('panel', 'hardware', 'custom'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_animation_valid') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_animation_valid"
+      CHECK (
+        duration > 0
+        AND NULLIF(btrim(easing), '') IS NOT NULL
+        AND "cameraTransition" IN ('smooth', 'cut', 'orbit')
+        AND public.text_array_distinct_non_blank("hardwareIds")
+        AND public.text_array_distinct_non_blank("partIds")
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_transform_object') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_transform_object"
+      CHECK (jsonb_typeof(transform) = 'object');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_cameraPosition_object') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_cameraPosition_object"
+      CHECK ("cameraPosition" IS NULL OR jsonb_typeof("cameraPosition") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_infoCardData_object') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_infoCardData_object"
+      CHECK ("infoCardData" IS NULL OR jsonb_typeof("infoCardData") IN ('object', 'null'));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyStep_optional_text_not_blank') THEN
+    ALTER TABLE "AssemblyStep"
+      ADD CONSTRAINT "AssemblyStep_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND ("panelId" IS NULL OR NULLIF(btrim("panelId"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyVersion_snapshot_array') THEN
+    ALTER TABLE "AssemblyVersion"
+      ADD CONSTRAINT "AssemblyVersion_snapshot_array"
+      CHECK (jsonb_typeof(snapshot) = 'array');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyVersion_version_positive') THEN
+    ALTER TABLE "AssemblyVersion"
+      ADD CONSTRAINT "AssemblyVersion_version_positive"
+      CHECK (version > 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssemblyVersion_optional_text_not_blank') THEN
+    ALTER TABLE "AssemblyVersion"
+      ADD CONSTRAINT "AssemblyVersion_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND ("createdBy" IS NULL OR NULLIF(btrim("createdBy"), '') IS NOT NULL)
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "Panel_product_sku_code_normalized_key"
+  ON "Panel" ("productId", COALESCE("skuId", ''), upper(btrim(code)));
diff --git a/furniture-3d-system/prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql
new file mode 100644
index 00000000..b5f680e3
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql
@@ -0,0 +1,473 @@
+-- Strengthen reference options, mapping memory, location bindings, and legacy packaging.
+-- These tables are supporting master data for the new platform and compatibility chain.
+-- JSON remains payload/snapshot data only; identity, names, relation keys, counts, and
+-- option dictionaries are guarded as structured database truth.
+
+CREATE TABLE IF NOT EXISTS "HardwareMapping" (
+  "id" TEXT NOT NULL,
+  "blockName" TEXT,
+  "signatureHash" TEXT,
+  "hardwareId" TEXT NOT NULL,
+  "createdBy" TEXT NOT NULL DEFAULT 'manual',
+  "usageCount" INTEGER NOT NULL DEFAULT 0,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "HardwareMapping_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "HardwareMapping_blockName_key" ON "HardwareMapping"("blockName");
+CREATE UNIQUE INDEX IF NOT EXISTS "HardwareMapping_signatureHash_key" ON "HardwareMapping"("signatureHash");
+CREATE INDEX IF NOT EXISTS "HardwareMapping_hardwareId_idx" ON "HardwareMapping"("hardwareId");
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'HardwareMapping_hardwareId_fkey'
+      AND table_name = 'HardwareMapping'
+  ) THEN
+    ALTER TABLE "HardwareMapping"
+    ADD CONSTRAINT "HardwareMapping_hardwareId_fkey"
+    FOREIGN KEY ("hardwareId") REFERENCES "Hardware"("id")
+    ON DELETE RESTRICT
+    ON UPDATE CASCADE;
+  END IF;
+END $$;
+
+CREATE TABLE IF NOT EXISTS "PackagingPlan" (
+  "id" TEXT NOT NULL,
+  "productId" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "description" TEXT,
+  "boxCount" INTEGER NOT NULL DEFAULT 1,
+  "boxes" JSONB NOT NULL DEFAULT '[]',
+  "totalWeight" DOUBLE PRECISION,
+  "totalVolume" DOUBLE PRECISION,
+  "notes" TEXT,
+  "isDefault" BOOLEAN NOT NULL DEFAULT false,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+  CONSTRAINT "PackagingPlan_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "PackagingPlan_productId_idx" ON "PackagingPlan"("productId");
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'PackagingPlan_productId_fkey'
+      AND table_name = 'PackagingPlan'
+  ) THEN
+    ALTER TABLE "PackagingPlan"
+    ADD CONSTRAINT "PackagingPlan_productId_fkey"
+    FOREIGN KEY ("productId") REFERENCES "Product"("id")
+    ON DELETE CASCADE
+    ON UPDATE CASCADE;
+  END IF;
+END $$;
+
+UPDATE "ProductCategory"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  icon = NULLIF(btrim(COALESCE(icon, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR icon IS DISTINCT FROM NULLIF(btrim(COALESCE(icon, '')), '');
+
+UPDATE "MaterialCategory"
+SET
+  name = btrim(name),
+  icon = NULLIF(btrim(COALESCE(icon, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR icon IS DISTINCT FROM NULLIF(btrim(COALESCE(icon, '')), '');
+
+UPDATE "HardwareCategory"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  icon = NULLIF(btrim(COALESCE(icon, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR icon IS DISTINCT FROM NULLIF(btrim(COALESCE(icon, '')), '');
+
+UPDATE "CommonComponentCategory"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  icon = NULLIF(btrim(COALESCE(icon, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR icon IS DISTINCT FROM NULLIF(btrim(COALESCE(icon, '')), '');
+
+UPDATE "SubstrateCategory" SET name = btrim(name) WHERE name IS DISTINCT FROM btrim(name);
+UPDATE "SubstrateEnvironmentGrade" SET name = btrim(name) WHERE name IS DISTINCT FROM btrim(name);
+UPDATE "SubstrateSurfaceOption" SET name = btrim(name) WHERE name IS DISTINCT FROM btrim(name);
+UPDATE "SubstrateSystemNameOption" SET name = btrim(name) WHERE name IS DISTINCT FROM btrim(name);
+UPDATE "SubstrateThicknessSpec" SET name = btrim(name) WHERE name IS DISTINCT FROM btrim(name);
+
+UPDATE "HardwareMapping"
+SET
+  "blockName" = NULLIF(btrim(COALESCE("blockName", '')), ''),
+  "signatureHash" = NULLIF(btrim(COALESCE("signatureHash", '')), ''),
+  "createdBy" = btrim("createdBy")
+WHERE
+  "blockName" IS DISTINCT FROM NULLIF(btrim(COALESCE("blockName", '')), '')
+  OR "signatureHash" IS DISTINCT FROM NULLIF(btrim(COALESCE("signatureHash", '')), '')
+  OR "createdBy" IS DISTINCT FROM btrim("createdBy");
+
+UPDATE "PackagingPlan"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  notes = NULLIF(btrim(COALESCE(notes, '')), '')
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR notes IS DISTINCT FROM NULLIF(btrim(COALESCE(notes, '')), '');
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT SUM(row_count)::integer
+    INTO invalid_count
+  FROM (
+    SELECT COUNT(*)::integer AS row_count FROM "ProductCategory"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+        OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+        OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL)
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "MaterialCategory"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+        OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL)
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "HardwareCategory"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+        OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+        OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL)
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "CommonComponentCategory"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+        OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+        OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL)
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "SubstrateCategory"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "SubstrateEnvironmentGrade"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "SubstrateSurfaceOption"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "SubstrateSystemNameOption"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+    UNION ALL
+    SELECT COUNT(*)::integer FROM "SubstrateThicknessSpec"
+      WHERE NULLIF(btrim(name), '') IS NULL OR name <> btrim(name) OR "sortOrder" < 0
+        OR "thicknessMm" <= 0 OR "sheetLengthMm" <= 0 OR "sheetWidthMm" <= 0
+  ) option_risks;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add reference option guards: % rows have invalid names, sort order, optional text, or dimensions.', invalid_count;
+  END IF;
+
+  SELECT SUM(row_count)::integer
+    INTO invalid_count
+  FROM (
+    SELECT COUNT(*)::integer AS row_count FROM (
+      SELECT lower(btrim(name)) AS normalized_name FROM "ProductCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "MaterialCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "HardwareCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "CommonComponentCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "SubstrateCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "SubstrateEnvironmentGrade" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "SubstrateSurfaceOption" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "SubstrateSystemNameOption" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+    UNION ALL SELECT COUNT(*)::integer FROM (
+      SELECT lower(btrim(name)) FROM "SubstrateThicknessSpec" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+    ) duplicates
+  ) duplicate_risks;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add normalized reference option unique guards: % normalized names are duplicated.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "HardwareMapping"
+  WHERE (
+      CASE WHEN NULLIF(btrim(COALESCE("blockName", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+      + CASE WHEN NULLIF(btrim(COALESCE("signatureHash", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+    ) <> 1
+    OR "usageCount" < 0
+    OR NULLIF(btrim("createdBy"), '') IS NULL
+    OR "createdBy" <> btrim("createdBy");
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add HardwareMapping guards: % rows have invalid match key, usage count, or source.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "SubstrateFinish"
+  WHERE NULLIF(btrim("substrateId"), '') IS NULL
+     OR NULLIF(btrim("finishId"), '') IS NULL;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add SubstrateFinish guards: % rows have blank relation ids.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PanelMaterial"
+  WHERE NULLIF(btrim("panelId"), '') IS NULL
+     OR NULLIF(btrim("materialId"), '') IS NULL;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PanelMaterial guards: % rows have blank relation ids.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "AssetVariantLocationBinding"
+  WHERE NULLIF(btrim("assetVariantId"), '') IS NULL
+     OR NULLIF(btrim("warehouseLocationId"), '') IS NULL;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add AssetVariantLocationBinding guards: % rows have blank relation ids.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PreSkuLocationBinding"
+  WHERE NULLIF(btrim("preSkuId"), '') IS NULL
+     OR NULLIF(btrim("warehouseLocationId"), '') IS NULL;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PreSkuLocationBinding guards: % rows have blank relation ids.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "PackagingPlan"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR "boxCount" <= 0
+     OR jsonb_typeof(boxes) <> 'array'
+     OR ("totalWeight" IS NOT NULL AND "totalWeight" < 0)
+     OR ("totalVolume" IS NOT NULL AND "totalVolume" < 0)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add PackagingPlan guards: % rows have invalid name, counts, totals, JSON shape, or optional text.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductCategory_identity_valid') THEN
+    ALTER TABLE "ProductCategory"
+      ADD CONSTRAINT "ProductCategory_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProductCategory_optional_text_not_blank') THEN
+    ALTER TABLE "ProductCategory"
+      ADD CONSTRAINT "ProductCategory_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND (icon IS NULL OR NULLIF(btrim(icon), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'MaterialCategory_identity_valid') THEN
+    ALTER TABLE "MaterialCategory"
+      ADD CONSTRAINT "MaterialCategory_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'MaterialCategory_optional_text_not_blank') THEN
+    ALTER TABLE "MaterialCategory"
+      ADD CONSTRAINT "MaterialCategory_optional_text_not_blank"
+      CHECK (icon IS NULL OR NULLIF(btrim(icon), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'HardwareCategory_identity_valid') THEN
+    ALTER TABLE "HardwareCategory"
+      ADD CONSTRAINT "HardwareCategory_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'HardwareCategory_optional_text_not_blank') THEN
+    ALTER TABLE "HardwareCategory"
+      ADD CONSTRAINT "HardwareCategory_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND (icon IS NULL OR NULLIF(btrim(icon), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'CommonComponentCategory_identity_valid') THEN
+    ALTER TABLE "CommonComponentCategory"
+      ADD CONSTRAINT "CommonComponentCategory_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'CommonComponentCategory_optional_text_not_blank') THEN
+    ALTER TABLE "CommonComponentCategory"
+      ADD CONSTRAINT "CommonComponentCategory_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND (icon IS NULL OR NULLIF(btrim(icon), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateCategory_identity_valid') THEN
+    ALTER TABLE "SubstrateCategory"
+      ADD CONSTRAINT "SubstrateCategory_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateEnvironmentGrade_identity_valid') THEN
+    ALTER TABLE "SubstrateEnvironmentGrade"
+      ADD CONSTRAINT "SubstrateEnvironmentGrade_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateSurfaceOption_identity_valid') THEN
+    ALTER TABLE "SubstrateSurfaceOption"
+      ADD CONSTRAINT "SubstrateSurfaceOption_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateSystemNameOption_identity_valid') THEN
+    ALTER TABLE "SubstrateSystemNameOption"
+      ADD CONSTRAINT "SubstrateSystemNameOption_identity_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "sortOrder" >= 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateThicknessSpec_identity_dimensions_valid') THEN
+    ALTER TABLE "SubstrateThicknessSpec"
+      ADD CONSTRAINT "SubstrateThicknessSpec_identity_dimensions_valid"
+      CHECK (
+        NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND "sortOrder" >= 0
+        AND "thicknessMm" > 0
+        AND "sheetLengthMm" > 0
+        AND "sheetWidthMm" > 0
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'HardwareMapping_match_key_exactly_one') THEN
+    ALTER TABLE "HardwareMapping"
+      ADD CONSTRAINT "HardwareMapping_match_key_exactly_one"
+      CHECK (
+        (
+          CASE WHEN NULLIF(btrim(COALESCE("blockName", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+          + CASE WHEN NULLIF(btrim(COALESCE("signatureHash", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+        ) = 1
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'HardwareMapping_usage_source_valid') THEN
+    ALTER TABLE "HardwareMapping"
+      ADD CONSTRAINT "HardwareMapping_usage_source_valid"
+      CHECK ("usageCount" >= 0 AND NULLIF(btrim("createdBy"), '') IS NOT NULL AND "createdBy" = btrim("createdBy"));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SubstrateFinish_relation_ids_not_blank') THEN
+    ALTER TABLE "SubstrateFinish"
+      ADD CONSTRAINT "SubstrateFinish_relation_ids_not_blank"
+      CHECK (NULLIF(btrim("substrateId"), '') IS NOT NULL AND NULLIF(btrim("finishId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PanelMaterial_relation_ids_not_blank') THEN
+    ALTER TABLE "PanelMaterial"
+      ADD CONSTRAINT "PanelMaterial_relation_ids_not_blank"
+      CHECK (NULLIF(btrim("panelId"), '') IS NOT NULL AND NULLIF(btrim("materialId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssetVariantLocationBinding_relation_ids_not_blank') THEN
+    ALTER TABLE "AssetVariantLocationBinding"
+      ADD CONSTRAINT "AssetVariantLocationBinding_relation_ids_not_blank"
+      CHECK (NULLIF(btrim("assetVariantId"), '') IS NOT NULL AND NULLIF(btrim("warehouseLocationId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PreSkuLocationBinding_relation_ids_not_blank') THEN
+    ALTER TABLE "PreSkuLocationBinding"
+      ADD CONSTRAINT "PreSkuLocationBinding_relation_ids_not_blank"
+      CHECK (NULLIF(btrim("preSkuId"), '') IS NOT NULL AND NULLIF(btrim("warehouseLocationId"), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PackagingPlan_identity_counts_valid') THEN
+    ALTER TABLE "PackagingPlan"
+      ADD CONSTRAINT "PackagingPlan_identity_counts_valid"
+      CHECK (NULLIF(btrim(name), '') IS NOT NULL AND name = btrim(name) AND "boxCount" > 0);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PackagingPlan_boxes_array') THEN
+    ALTER TABLE "PackagingPlan"
+      ADD CONSTRAINT "PackagingPlan_boxes_array"
+      CHECK (jsonb_typeof(boxes) = 'array');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PackagingPlan_totals_valid') THEN
+    ALTER TABLE "PackagingPlan"
+      ADD CONSTRAINT "PackagingPlan_totals_valid"
+      CHECK (
+        ("totalWeight" IS NULL OR "totalWeight" >= 0)
+        AND ("totalVolume" IS NULL OR "totalVolume" >= 0)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'PackagingPlan_optional_text_not_blank') THEN
+    ALTER TABLE "PackagingPlan"
+      ADD CONSTRAINT "PackagingPlan_optional_text_not_blank"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND (notes IS NULL OR NULLIF(btrim(notes), '') IS NOT NULL)
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductCategory_name_normalized_key"
+  ON "ProductCategory" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "MaterialCategory_name_normalized_key"
+  ON "MaterialCategory" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "HardwareCategory_name_normalized_key"
+  ON "HardwareCategory" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "CommonComponentCategory_name_normalized_key"
+  ON "CommonComponentCategory" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "SubstrateCategory_name_normalized_key"
+  ON "SubstrateCategory" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "SubstrateEnvironmentGrade_name_normalized_key"
+  ON "SubstrateEnvironmentGrade" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "SubstrateSurfaceOption_name_normalized_key"
+  ON "SubstrateSurfaceOption" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "SubstrateSystemNameOption_name_normalized_key"
+  ON "SubstrateSystemNameOption" (lower(btrim(name)));
+CREATE UNIQUE INDEX IF NOT EXISTS "SubstrateThicknessSpec_name_normalized_key"
+  ON "SubstrateThicknessSpec" (lower(btrim(name)));
diff --git a/furniture-3d-system/prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql
new file mode 100644
index 00000000..ac3c4494
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql
@@ -0,0 +1,469 @@
+-- Strengthen configuration, permission override, AI render, feedback, and audit-log foundations.
+-- These tables are not source product master data, but they still carry system truth:
+-- configuration identity, permission override identity, process snapshots, and audit trails.
+
+UPDATE "SystemConfig"
+SET
+  key = btrim(key),
+  description = NULLIF(btrim(COALESCE(description, '')), '')
+WHERE
+  key IS DISTINCT FROM btrim(key)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '');
+
+UPDATE "ProviderConfig"
+SET
+  "serviceType" = btrim("serviceType"),
+  name = btrim(name),
+  "baseUrl" = regexp_replace(btrim("baseUrl"), '/+$', ''),
+  "apiKey" = btrim("apiKey"),
+  model = NULLIF(btrim(COALESCE(model, '')), '')
+WHERE
+  "serviceType" IS DISTINCT FROM btrim("serviceType")
+  OR name IS DISTINCT FROM btrim(name)
+  OR "baseUrl" IS DISTINCT FROM regexp_replace(btrim("baseUrl"), '/+$', '')
+  OR "apiKey" IS DISTINCT FROM btrim("apiKey")
+  OR model IS DISTINCT FROM NULLIF(btrim(COALESCE(model, '')), '');
+
+UPDATE "ThemeConfig"
+SET
+  name = btrim(name),
+  description = NULLIF(btrim(COALESCE(description, '')), ''),
+  "createdBy" = btrim("createdBy")
+WHERE
+  name IS DISTINCT FROM btrim(name)
+  OR description IS DISTINCT FROM NULLIF(btrim(COALESCE(description, '')), '')
+  OR "createdBy" IS DISTINCT FROM btrim("createdBy");
+
+UPDATE "IntakeNodePermissionOverride"
+SET
+  "targetKey" = btrim("targetKey"),
+  "subjectKey" = btrim("subjectKey"),
+  action = btrim(action),
+  "createdBy" = NULLIF(btrim(COALESCE("createdBy", '')), ''),
+  "updatedBy" = NULLIF(btrim(COALESCE("updatedBy", '')), '')
+WHERE
+  "targetKey" IS DISTINCT FROM btrim("targetKey")
+  OR "subjectKey" IS DISTINCT FROM btrim("subjectKey")
+  OR action IS DISTINCT FROM btrim(action)
+  OR "createdBy" IS DISTINCT FROM NULLIF(btrim(COALESCE("createdBy", '')), '')
+  OR "updatedBy" IS DISTINCT FROM NULLIF(btrim(COALESCE("updatedBy", '')), '');
+
+UPDATE "AssistedAssemblyAiRender"
+SET
+  "createdBy" = btrim("createdBy"),
+  prompt = btrim(prompt),
+  "negativePrompt" = NULLIF(btrim(COALESCE("negativePrompt", '')), ''),
+  "referenceImageUrl" = NULLIF(btrim(COALESCE("referenceImageUrl", '')), ''),
+  "externalRequestId" = NULLIF(btrim(COALESCE("externalRequestId", '')), ''),
+  "errorMessage" = NULLIF(btrim(COALESCE("errorMessage", '')), '')
+WHERE
+  "createdBy" IS DISTINCT FROM btrim("createdBy")
+  OR prompt IS DISTINCT FROM btrim(prompt)
+  OR "negativePrompt" IS DISTINCT FROM NULLIF(btrim(COALESCE("negativePrompt", '')), '')
+  OR "referenceImageUrl" IS DISTINCT FROM NULLIF(btrim(COALESCE("referenceImageUrl", '')), '')
+  OR "externalRequestId" IS DISTINCT FROM NULLIF(btrim(COALESCE("externalRequestId", '')), '')
+  OR "errorMessage" IS DISTINCT FROM NULLIF(btrim(COALESCE("errorMessage", '')), '');
+
+UPDATE "Feedback"
+SET
+  title = btrim(title),
+  description = btrim(description),
+  category = btrim(category),
+  resolution = NULLIF(btrim(COALESCE(resolution, '')), ''),
+  images = ARRAY(
+    SELECT btrim(image)
+    FROM unnest(images) AS image
+    WHERE NULLIF(btrim(image), '') IS NOT NULL
+  )
+WHERE
+  title IS DISTINCT FROM btrim(title)
+  OR description IS DISTINCT FROM btrim(description)
+  OR category IS DISTINCT FROM btrim(category)
+  OR resolution IS DISTINCT FROM NULLIF(btrim(COALESCE(resolution, '')), '')
+  OR EXISTS (SELECT 1 FROM unnest(images) AS image WHERE image IS DISTINCT FROM btrim(image) OR NULLIF(btrim(image), '') IS NULL);
+
+UPDATE "ActivityLog"
+SET
+  "userId" = btrim("userId"),
+  "targetType" = NULLIF(btrim(COALESCE("targetType", '')), ''),
+  "targetId" = NULLIF(btrim(COALESCE("targetId", '')), ''),
+  action = btrim(action)
+WHERE
+  "userId" IS DISTINCT FROM btrim("userId")
+  OR "targetType" IS DISTINCT FROM NULLIF(btrim(COALESCE("targetType", '')), '')
+  OR "targetId" IS DISTINCT FROM NULLIF(btrim(COALESCE("targetId", '')), '')
+  OR action IS DISTINCT FROM btrim(action);
+
+CREATE OR REPLACE FUNCTION public.text_array_all_trimmed_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $function$
+  SELECT COALESCE(
+    bool_and(NULLIF(btrim(value), '') IS NOT NULL AND value = btrim(value)),
+    true
+  )
+  FROM unnest(items) AS value;
+$function$;
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "SystemConfig"
+  WHERE NULLIF(btrim(key), '') IS NULL
+     OR key <> btrim(key)
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add SystemConfig guards: % rows have invalid key or description.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ProviderConfig"
+  WHERE NULLIF(btrim("serviceType"), '') IS NULL
+     OR "serviceType" <> btrim("serviceType")
+     OR NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("baseUrl"), '') IS NULL
+     OR "baseUrl" <> regexp_replace(btrim("baseUrl"), '/+$', '')
+     OR NULLIF(btrim("apiKey"), '') IS NULL
+     OR "apiKey" <> btrim("apiKey")
+     OR "sortOrder" < 0
+     OR (model IS NOT NULL AND NULLIF(btrim(model), '') IS NULL)
+     OR (extra IS NOT NULL AND jsonb_typeof(extra) <> 'object');
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ProviderConfig guards: % rows have invalid identity, ordering, or JSON shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM (
+    SELECT "serviceType"
+    FROM "ProviderConfig"
+    WHERE "isActive" = true
+    GROUP BY "serviceType"
+    HAVING COUNT(*) > 1
+  ) duplicated_active;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ProviderConfig active guard: % service types have more than one active config.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ThemeConfig"
+  WHERE NULLIF(btrim(name), '') IS NULL
+     OR name <> btrim(name)
+     OR NULLIF(btrim("createdBy"), '') IS NULL
+     OR "createdBy" <> btrim("createdBy")
+     OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+     OR ("startDate" IS NOT NULL AND "endDate" IS NOT NULL AND "startDate" >= "endDate")
+     OR ("homeBackground" IS NOT NULL AND jsonb_typeof("homeBackground") <> 'object')
+     OR ("loginPanel" IS NOT NULL AND jsonb_typeof("loginPanel") <> 'object');
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ThemeConfig guards: % rows have invalid identity, time window, or JSON shape.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM (
+    SELECT lower(btrim(name)) AS normalized_name
+    FROM "ThemeConfig"
+    GROUP BY lower(btrim(name))
+    HAVING COUNT(*) > 1
+  ) duplicated_theme_names;
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ThemeConfig normalized name guard: % normalized names are duplicated.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ThemeConfig"
+  WHERE "isDefault" = true;
+
+  IF invalid_count > 1 THEN
+    RAISE EXCEPTION 'Cannot add ThemeConfig default guard: % default themes exist.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "IntakeNodePermissionOverride"
+  WHERE NULLIF(btrim("targetKey"), '') IS NULL
+     OR "targetKey" <> btrim("targetKey")
+     OR NULLIF(btrim("subjectKey"), '') IS NULL
+     OR "subjectKey" <> btrim("subjectKey")
+     OR NULLIF(btrim(action), '') IS NULL
+     OR action <> btrim(action)
+     OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL)
+     OR ("updatedBy" IS NOT NULL AND NULLIF(btrim("updatedBy"), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add IntakeNodePermissionOverride guards: % rows have invalid identity or audit fields.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "AssistedAssemblyAiRender"
+  WHERE NULLIF(btrim("createdBy"), '') IS NULL
+     OR "createdBy" <> btrim("createdBy")
+     OR NULLIF(btrim(prompt), '') IS NULL
+     OR prompt <> btrim(prompt)
+     OR jsonb_typeof(params) <> 'object'
+     OR jsonb_typeof("resultImages") <> 'array'
+     OR jsonb_typeof("workspaceSnapshot") <> 'object'
+     OR jsonb_typeof("assetSnapshot") <> 'object'
+     OR ("attempts" IS NOT NULL AND jsonb_typeof("attempts") <> 'array')
+     OR ("durationMs" IS NOT NULL AND "durationMs" < 0)
+     OR ("negativePrompt" IS NOT NULL AND NULLIF(btrim("negativePrompt"), '') IS NULL)
+     OR ("referenceImageUrl" IS NOT NULL AND NULLIF(btrim("referenceImageUrl"), '') IS NULL)
+     OR ("externalRequestId" IS NOT NULL AND NULLIF(btrim("externalRequestId"), '') IS NULL)
+     OR ("errorMessage" IS NOT NULL AND NULLIF(btrim("errorMessage"), '') IS NULL)
+     OR (status = 'SUCCEEDED' AND jsonb_array_length("resultImages") = 0)
+     OR (status = 'FAILED' AND NULLIF(btrim(COALESCE("errorMessage", '')), '') IS NULL);
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add AssistedAssemblyAiRender guards: % rows have invalid identity, JSON shape, status, or duration.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "Feedback"
+  WHERE NULLIF(btrim(title), '') IS NULL
+     OR title <> btrim(title)
+     OR NULLIF(btrim(description), '') IS NULL
+     OR description <> btrim(description)
+     OR NULLIF(btrim(category), '') IS NULL
+     OR category <> btrim(category)
+     OR EXISTS (SELECT 1 FROM unnest(images) AS image WHERE NULLIF(btrim(image), '') IS NULL OR image <> btrim(image))
+     OR ("comments" IS NOT NULL AND jsonb_typeof("comments") <> 'array')
+     OR (resolution IS NOT NULL AND NULLIF(btrim(resolution), '') IS NULL)
+     OR (status = 'RESOLVED' AND ("resolvedAt" IS NULL OR NULLIF(btrim(COALESCE(resolution, '')), '') IS NULL));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add Feedback guards: % rows have invalid identity, comments, images, or resolution state.', invalid_count;
+  END IF;
+
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "ActivityLog"
+  WHERE NULLIF(btrim("userId"), '') IS NULL
+     OR "userId" <> btrim("userId")
+     OR NULLIF(btrim(action), '') IS NULL
+     OR action <> btrim(action)
+     OR (("targetType" IS NULL) <> ("targetId" IS NULL))
+     OR ("targetType" IS NOT NULL AND NULLIF(btrim("targetType"), '') IS NULL)
+     OR ("targetId" IS NOT NULL AND NULLIF(btrim("targetId"), '') IS NULL)
+     OR ("changes" IS NOT NULL AND jsonb_typeof("changes") <> 'object')
+     OR ("metadata" IS NOT NULL AND jsonb_typeof("metadata") <> 'object');
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION 'Cannot add ActivityLog guards: % rows have invalid identity, target pair, or JSON shape.', invalid_count;
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SystemConfig_key_valid') THEN
+    ALTER TABLE "SystemConfig"
+      ADD CONSTRAINT "SystemConfig_key_valid"
+      CHECK (NULLIF(btrim(key), '') IS NOT NULL AND key = btrim(key));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SystemConfig_description_not_blank') THEN
+    ALTER TABLE "SystemConfig"
+      ADD CONSTRAINT "SystemConfig_description_not_blank"
+      CHECK (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL);
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProviderConfig_identity_valid') THEN
+    ALTER TABLE "ProviderConfig"
+      ADD CONSTRAINT "ProviderConfig_identity_valid"
+      CHECK (
+        NULLIF(btrim("serviceType"), '') IS NOT NULL
+        AND "serviceType" = btrim("serviceType")
+        AND NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND NULLIF(btrim("baseUrl"), '') IS NOT NULL
+        AND "baseUrl" = regexp_replace(btrim("baseUrl"), '/+$', '')
+        AND NULLIF(btrim("apiKey"), '') IS NOT NULL
+        AND "apiKey" = btrim("apiKey")
+        AND "sortOrder" >= 0
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ProviderConfig_optional_fields_valid') THEN
+    ALTER TABLE "ProviderConfig"
+      ADD CONSTRAINT "ProviderConfig_optional_fields_valid"
+      CHECK (
+        (model IS NULL OR NULLIF(btrim(model), '') IS NOT NULL)
+        AND (extra IS NULL OR jsonb_typeof(extra) = 'object')
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ThemeConfig_identity_valid') THEN
+    ALTER TABLE "ThemeConfig"
+      ADD CONSTRAINT "ThemeConfig_identity_valid"
+      CHECK (
+        NULLIF(btrim(name), '') IS NOT NULL
+        AND name = btrim(name)
+        AND NULLIF(btrim("createdBy"), '') IS NOT NULL
+        AND "createdBy" = btrim("createdBy")
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ThemeConfig_optional_config_valid') THEN
+    ALTER TABLE "ThemeConfig"
+      ADD CONSTRAINT "ThemeConfig_optional_config_valid"
+      CHECK (
+        (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+        AND ("startDate" IS NULL OR "endDate" IS NULL OR "startDate" < "endDate")
+        AND ("homeBackground" IS NULL OR jsonb_typeof("homeBackground") = 'object')
+        AND ("loginPanel" IS NULL OR jsonb_typeof("loginPanel") = 'object')
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'IntakeNodePermissionOverride_identity_valid') THEN
+    ALTER TABLE "IntakeNodePermissionOverride"
+      ADD CONSTRAINT "IntakeNodePermissionOverride_identity_valid"
+      CHECK (
+        NULLIF(btrim("targetKey"), '') IS NOT NULL
+        AND "targetKey" = btrim("targetKey")
+        AND NULLIF(btrim("subjectKey"), '') IS NOT NULL
+        AND "subjectKey" = btrim("subjectKey")
+        AND NULLIF(btrim(action), '') IS NOT NULL
+        AND action = btrim(action)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'IntakeNodePermissionOverride_audit_text_not_blank') THEN
+    ALTER TABLE "IntakeNodePermissionOverride"
+      ADD CONSTRAINT "IntakeNodePermissionOverride_audit_text_not_blank"
+      CHECK (
+        ("createdBy" IS NULL OR NULLIF(btrim("createdBy"), '') IS NOT NULL)
+        AND ("updatedBy" IS NULL OR NULLIF(btrim("updatedBy"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssistedAssemblyAiRender_identity_valid') THEN
+    ALTER TABLE "AssistedAssemblyAiRender"
+      ADD CONSTRAINT "AssistedAssemblyAiRender_identity_valid"
+      CHECK (
+        NULLIF(btrim("createdBy"), '') IS NOT NULL
+        AND "createdBy" = btrim("createdBy")
+        AND NULLIF(btrim(prompt), '') IS NOT NULL
+        AND prompt = btrim(prompt)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssistedAssemblyAiRender_json_shape_valid') THEN
+    ALTER TABLE "AssistedAssemblyAiRender"
+      ADD CONSTRAINT "AssistedAssemblyAiRender_json_shape_valid"
+      CHECK (
+        jsonb_typeof(params) = 'object'
+        AND jsonb_typeof("resultImages") = 'array'
+        AND jsonb_typeof("workspaceSnapshot") = 'object'
+        AND jsonb_typeof("assetSnapshot") = 'object'
+        AND ("attempts" IS NULL OR jsonb_typeof("attempts") = 'array')
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssistedAssemblyAiRender_status_duration_valid') THEN
+    ALTER TABLE "AssistedAssemblyAiRender"
+      ADD CONSTRAINT "AssistedAssemblyAiRender_status_duration_valid"
+      CHECK (
+        ("durationMs" IS NULL OR "durationMs" >= 0)
+        AND (status <> 'SUCCEEDED' OR jsonb_array_length("resultImages") > 0)
+        AND (status <> 'FAILED' OR NULLIF(btrim(COALESCE("errorMessage", '')), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AssistedAssemblyAiRender_optional_text_not_blank') THEN
+    ALTER TABLE "AssistedAssemblyAiRender"
+      ADD CONSTRAINT "AssistedAssemblyAiRender_optional_text_not_blank"
+      CHECK (
+        ("negativePrompt" IS NULL OR NULLIF(btrim("negativePrompt"), '') IS NOT NULL)
+        AND ("referenceImageUrl" IS NULL OR NULLIF(btrim("referenceImageUrl"), '') IS NOT NULL)
+        AND ("externalRequestId" IS NULL OR NULLIF(btrim("externalRequestId"), '') IS NOT NULL)
+        AND ("errorMessage" IS NULL OR NULLIF(btrim("errorMessage"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Feedback_identity_valid') THEN
+    ALTER TABLE "Feedback"
+      ADD CONSTRAINT "Feedback_identity_valid"
+      CHECK (
+        NULLIF(btrim(title), '') IS NOT NULL
+        AND title = btrim(title)
+        AND NULLIF(btrim(description), '') IS NOT NULL
+        AND description = btrim(description)
+        AND NULLIF(btrim(category), '') IS NOT NULL
+        AND category = btrim(category)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Feedback_images_valid') THEN
+    ALTER TABLE "Feedback"
+      ADD CONSTRAINT "Feedback_images_valid"
+      CHECK (public.text_array_all_trimmed_non_blank(images));
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Feedback_comments_array') THEN
+    ALTER TABLE "Feedback"
+      ADD CONSTRAINT "Feedback_comments_array"
+      CHECK ("comments" IS NULL OR jsonb_typeof("comments") = 'array');
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'Feedback_resolution_state_valid') THEN
+    ALTER TABLE "Feedback"
+      ADD CONSTRAINT "Feedback_resolution_state_valid"
+      CHECK (
+        (resolution IS NULL OR NULLIF(btrim(resolution), '') IS NOT NULL)
+        AND (status <> 'RESOLVED' OR ("resolvedAt" IS NOT NULL AND NULLIF(btrim(COALESCE(resolution, '')), '') IS NOT NULL))
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ActivityLog_identity_valid') THEN
+    ALTER TABLE "ActivityLog"
+      ADD CONSTRAINT "ActivityLog_identity_valid"
+      CHECK (
+        NULLIF(btrim("userId"), '') IS NOT NULL
+        AND "userId" = btrim("userId")
+        AND NULLIF(btrim(action), '') IS NOT NULL
+        AND action = btrim(action)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ActivityLog_target_pair_valid') THEN
+    ALTER TABLE "ActivityLog"
+      ADD CONSTRAINT "ActivityLog_target_pair_valid"
+      CHECK (
+        ("targetType" IS NULL) = ("targetId" IS NULL)
+        AND ("targetType" IS NULL OR NULLIF(btrim("targetType"), '') IS NOT NULL)
+        AND ("targetId" IS NULL OR NULLIF(btrim("targetId"), '') IS NOT NULL)
+      );
+  END IF;
+
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ActivityLog_json_shape_valid') THEN
+    ALTER TABLE "ActivityLog"
+      ADD CONSTRAINT "ActivityLog_json_shape_valid"
+      CHECK (
+        ("changes" IS NULL OR jsonb_typeof("changes") = 'object')
+        AND ("metadata" IS NULL OR jsonb_typeof("metadata") = 'object')
+      );
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProviderConfig_active_service_key"
+  ON "ProviderConfig" ("serviceType")
+  WHERE "isActive" = true;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ThemeConfig_name_normalized_key"
+  ON "ThemeConfig" (lower(btrim(name)));
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ThemeConfig_default_key"
+  ON "ThemeConfig" ("isDefault")
+  WHERE "isDefault" = true;
diff --git a/furniture-3d-system/prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql b/furniture-3d-system/prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql
new file mode 100644
index 00000000..1946d54a
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql
@@ -0,0 +1,104 @@
+-- Add explicit stable business keys to external intake views.
+-- Technical row ids remain visible for tracing, but external systems should
+-- anchor synchronization on these normalized business keys.
+
+CREATE OR REPLACE VIEW external.intake_products_v1 AS
+SELECT
+  product."id" AS intake_product_id,
+  product."spu" AS spu,
+  product."spuBase" AS spu_base,
+  product."brand" AS brand,
+  profile."productName" AS product_name,
+  profile."productImageUrl" AS product_image_url,
+  profile."productCategory" AS product_category,
+  profile."salesCategory" AS sales_category,
+  profile."productYear" AS product_year,
+  profile."productStatus" AS product_status,
+  COALESCE(NULLIF(profile."structureDesigner", ''), NULLIF(product."designer", '')) AS designer,
+  COALESCE(NULLIF(profile."productPlanning", ''), NULLIF(product."operator", '')) AS operator,
+  COALESCE(NULLIF(profile."purchaseOwner", ''), NULLIF(product."purchaser", '')) AS purchaser,
+  profile."productDevelopmentKind" AS product_development_kind,
+  profile."goodsType" AS goods_type,
+  profile."materialType" AS material_type,
+  profile."productionType" AS production_type,
+  product."createdAt" AS created_at,
+  product."updatedAt" AS updated_at,
+  profile."productPlanning" AS product_planning,
+  profile."visualPlanning" AS visual_planning,
+  profile."structureDesigner" AS structure_designer,
+  profile."purchaseOwner" AS purchase_owner,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."brand", '')), '') IS NOT NULL
+      AND NULLIF(btrim(COALESCE(product."spu", '')), '') IS NOT NULL
+    THEN upper(btrim(product."brand")) || ':' || upper(btrim(product."spu"))
+    ELSE NULL
+  END AS product_business_key
+FROM "IntakeNonIntegratedProduct" product
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.intake_products_ready_v1 AS
+SELECT *
+FROM external.intake_products_v1
+WHERE NULLIF(btrim(COALESCE(product_name, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_category, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_development_kind, '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NOT NULL;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_v1 AS
+SELECT
+  product."id" AS intake_product_id,
+  product."spu" AS spu,
+  product."brand" AS brand,
+  sku."skuItemId" AS intake_sku_item_id,
+  sku."skuSequence" AS sku_sequence,
+  sku."batchNo" AS batch_no,
+  sku."image" AS image_url,
+  sku."imageName" AS image_name,
+  sku."model" AS model,
+  sku."skuCode" AS sku_code,
+  sku."specName" AS spec_name,
+  sku."barcode" AS barcode,
+  sku."size" AS size,
+  sku."color" AS color,
+  sku."material" AS material,
+  sku."versionNo" AS version_no,
+  sku."attributeCode" AS attribute_code,
+  sku."drawingId" AS drawing_id,
+  sku."installMethod" AS install_method,
+  sku."executeStandard" AS execute_standard,
+  sku."manufacturer" AS manufacturer,
+  sku."manufacturerCode" AS manufacturer_code,
+  sku."salesStatus" AS sales_status,
+  sku."model3dDataUrl" AS model_3d_url,
+  sku."source" AS source,
+  sku."sourceTable" AS source_table,
+  sku."sourceSkuId" AS source_sku_id,
+  sku."missingRequiredFields" AS missing_required_fields,
+  sku."dataQualityStatus"::text AS data_quality_status,
+  sku."contentLocked" AS content_locked,
+  sku."sortOrder" AS sort_order,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."brand", '')), '') IS NOT NULL
+      AND NULLIF(btrim(COALESCE(product."spu", '')), '') IS NOT NULL
+    THEN upper(btrim(product."brand")) || ':' || upper(btrim(product."spu"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."brand", '')), '') IS NOT NULL
+      AND NULLIF(btrim(COALESCE(product."spu", '')), '') IS NOT NULL
+      AND NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(product."brand")) || ':' || upper(btrim(product."spu")) || ':' || upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL;
+
+CREATE OR REPLACE VIEW external.intake_sku_items_ready_v1 AS
+SELECT sku.*
+FROM external.intake_sku_items_v1 sku
+JOIN external.intake_products_ready_v1 product
+  ON product.intake_product_id = sku.intake_product_id
+WHERE sku.data_quality_status = 'READY'
+  AND NULLIF(btrim(COALESCE(sku.sku_business_key, '')), '') IS NOT NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql b/furniture-3d-system/prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql
new file mode 100644
index 00000000..be91880a
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql
@@ -0,0 +1,68 @@
+-- Add explicit stable business keys to the external finished-SKU view.
+-- Product.modelNumber and ProductSKU.skuCode are already the structured
+-- identities; these columns make that contract unambiguous for readers.
+
+CREATE OR REPLACE VIEW external.product_skus_v1 AS
+SELECT
+  p."id" AS product_id,
+  p."modelNumber" AS product_model_number,
+  p."name" AS product_name,
+  p."description" AS product_description,
+  pc."id" AS product_category_id,
+  pc."name" AS product_category_name,
+  p."thumbnailUrl" AS product_thumbnail_url,
+  p."modelUrl" AS product_model_url,
+  sku."id" AS sku_id,
+  sku."skuCode" AS sku_code,
+  COALESCE(
+    NULLIF(sku."name", ''),
+    NULLIF(profile."specName", ''),
+    sku."skuCode"
+  ) AS sku_name,
+  sku."price" AS price,
+  sku."costPrice" AS cost_price,
+  sku."stock" AS stock,
+  sku."isActive" AS is_active,
+  CASE WHEN sku."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status,
+  COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url,
+  COALESCE(
+    NULLIF(profile."imageUrl", ''),
+    sku."images"[1],
+    NULLIF(p."thumbnailUrl", '')
+  ) AS image_url,
+  sku."images" AS image_urls,
+  sku."sourcePreSkuId" AS source_pre_sku_id,
+  sku."sourceAssetVariantId" AS source_asset_variant_id,
+  sku."sourceAssetVariantIds" AS source_asset_variant_ids,
+  profile."model" AS asset_family_code,
+  profile."modelName" AS asset_family_name,
+  profile."specCode" AS spec_code,
+  profile."specName" AS spec_name,
+  profile."barcode" AS barcode,
+  profile."size" AS size_json,
+  profile."color" AS color,
+  profile."material" AS material,
+  profile."sourceStatus"::text AS source_status,
+  profile."syncedAt"::text AS synced_at,
+  wh."id" AS warehouse_location_id,
+  wh."code" AS warehouse_location_code,
+  wh."name" AS warehouse_location_name,
+  sku."createdAt" AS created_at,
+  sku."updatedAt" AS updated_at,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(p."modelNumber", '')), '') IS NOT NULL
+    THEN upper(btrim(p."modelNumber"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "ProductSKU" sku
+JOIN "Product" p ON p."id" = sku."productId"
+LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+LEFT JOIN "ProductCategory" pc ON pc."id" = p."categoryId"
+LEFT JOIN "WarehouseLocation" wh ON wh."id" = sku."warehouseLocationId"
+WHERE p."deletedAt" IS NULL
+  AND sku."deletedAt" IS NULL;
diff --git a/furniture-3d-system/prisma/migrations/20260601012000_add_external_product_asset_bom_business_keys/migration.sql b/furniture-3d-system/prisma/migrations/20260601012000_add_external_product_asset_bom_business_keys/migration.sql
new file mode 100644
index 00000000..4fc1f6a9
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601012000_add_external_product_asset_bom_business_keys/migration.sql
@@ -0,0 +1,183 @@
+-- Carry stable product/SKU business keys into external asset and BOM detail
+-- views so downstream systems do not have to join on internal row ids.
+
+CREATE OR REPLACE VIEW external.product_assets_v1 AS
+WITH image_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    p."modelNumber" AS product_model_number,
+    sku."skuCode" AS sku_code,
+    image_item.image_url,
+    image_item.sort_order
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  CROSS JOIN LATERAL unnest(sku."images") WITH ORDINALITY AS image_item(image_url, sort_order)
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+),
+model_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    p."modelNumber" AS product_model_number,
+    sku."skuCode" AS sku_code,
+    COALESCE(NULLIF(sku."modelUrl", ''), NULLIF(p."modelUrl", '')) AS model_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+),
+thumbnail_assets AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."productId" AS product_id,
+    p."modelNumber" AS product_model_number,
+    sku."skuCode" AS sku_code,
+    COALESCE(
+      NULLIF(profile."imageUrl", ''),
+      NULLIF(p."thumbnailUrl", '')
+    ) AS thumbnail_url
+  FROM "ProductSKU" sku
+  JOIN "Product" p ON p."id" = sku."productId"
+  LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+  WHERE p."deletedAt" IS NULL
+    AND sku."deletedAt" IS NULL
+)
+SELECT
+  'SKU_IMAGE' AS asset_type,
+  product_id,
+  sku_id,
+  image_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  sort_order::integer AS sort_order,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product_model_number, '')), '') IS NOT NULL
+    THEN upper(btrim(product_model_number))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku_code, '')), '') IS NOT NULL
+    THEN upper(btrim(sku_code))
+    ELSE NULL
+  END AS sku_business_key
+FROM image_assets
+WHERE NULLIF(image_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_MODEL' AS asset_type,
+  product_id,
+  sku_id,
+  model_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product_model_number, '')), '') IS NOT NULL
+    THEN upper(btrim(product_model_number))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku_code, '')), '') IS NOT NULL
+    THEN upper(btrim(sku_code))
+    ELSE NULL
+  END AS sku_business_key
+FROM model_assets
+WHERE NULLIF(model_url, '') IS NOT NULL
+UNION ALL
+SELECT
+  'SKU_THUMBNAIL' AS asset_type,
+  product_id,
+  sku_id,
+  thumbnail_url AS asset_url,
+  NULL::text AS file_name,
+  NULL::text AS mime_type,
+  0 AS sort_order,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product_model_number, '')), '') IS NOT NULL
+    THEN upper(btrim(product_model_number))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku_code, '')), '') IS NOT NULL
+    THEN upper(btrim(sku_code))
+    ELSE NULL
+  END AS sku_business_key
+FROM thumbnail_assets
+WHERE NULLIF(thumbnail_url, '') IS NOT NULL;
+
+CREATE OR REPLACE VIEW external.product_bom_v1 AS
+SELECT
+  'PANEL' AS item_type,
+  p."productId" AS product_id,
+  p."skuId" AS sku_id,
+  p."id" AS item_id,
+  p."code" AS item_code,
+  p."name" AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  m."id" AS material_id,
+  m."code" AS material_code,
+  m."name" AS material_name,
+  jsonb_build_object(
+    'length', p."length",
+    'width', p."width",
+    'thickness', p."thickness",
+    'unit', 'mm'
+  ) AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  p."createdAt" AS created_at,
+  p."updatedAt" AS updated_at,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."modelNumber", '')), '') IS NOT NULL
+    THEN upper(btrim(product."modelNumber"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "Panel" p
+JOIN "Product" product ON product."id" = p."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = p."skuId"
+LEFT JOIN "PanelMaterial" pm ON pm."panelId" = p."id"
+LEFT JOIN "Material" m ON m."id" = pm."materialId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL)
+UNION ALL
+SELECT
+  'HARDWARE' AS item_type,
+  ph."productId" AS product_id,
+  ph."skuId" AS sku_id,
+  ph."id" AS item_id,
+  COALESCE(h."code", ph."sourceBlockName", ph."id") AS item_code,
+  COALESCE(h."name", ph."sourceBlockName", '未匹配五金') AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  NULL::text AS material_id,
+  NULL::text AS material_code,
+  NULL::text AS material_name,
+  h."dimensions" AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  ph."createdAt" AS created_at,
+  ph."updatedAt" AS updated_at,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."modelNumber", '')), '') IS NOT NULL
+    THEN upper(btrim(product."modelNumber"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "ProductHardware" ph
+JOIN "Product" product ON product."id" = ph."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = ph."skuId"
+LEFT JOIN "Hardware" h ON h."id" = ph."hardwareId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL);
diff --git a/furniture-3d-system/prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql
new file mode 100644
index 00000000..b040cb42
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql
@@ -0,0 +1,54 @@
+-- SPU_RULE rows seed the formal SPU counter. The category lookup must use the
+-- same normalized semantics as SpuNumberCounter, otherwise a case/space variant
+-- can make the service miss the configured rule and fall through to a database
+-- conflict instead of a clear business validation.
+
+DO $$
+DECLARE
+  duplicate_category_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO duplicate_category_count
+  FROM (
+    SELECT lower(btrim("name")) AS normalized_name
+    FROM "IntakeReferenceLibraryItem"
+    WHERE "libraryType" = 'SPU_RULE'
+      AND NULLIF(btrim("name"), '') IS NOT NULL
+    GROUP BY lower(btrim("name"))
+    HAVING COUNT(*) > 1
+  ) duplicate_groups;
+
+  IF duplicate_category_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add normalized SPU_RULE category guard: % duplicate normalized product category groups exist.',
+      duplicate_category_count;
+  END IF;
+END $$;
+
+UPDATE "IntakeReferenceLibraryItem"
+SET "name" = btrim("name")
+WHERE "libraryType" = 'SPU_RULE'
+  AND "name" IS DISTINCT FROM btrim("name");
+
+DROP INDEX IF EXISTS "IntakeReferenceLibraryItem_spu_rule_name_normalized_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "IntakeReferenceLibraryItem_spu_rule_name_normalized_key"
+  ON "IntakeReferenceLibraryItem"(lower(btrim("name")))
+  WHERE "libraryType" = 'SPU_RULE'
+    AND NULLIF(btrim("name"), '') IS NOT NULL;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_spu_rule_name_normalized'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_spu_rule_name_normalized"
+      CHECK (
+        "libraryType" <> 'SPU_RULE'
+        OR (
+          NULLIF(btrim("name"), '') IS NOT NULL
+          AND "name" = btrim("name")
+        )
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601014000_add_reference_library_code_required_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260601014000_add_reference_library_code_required_guard/migration.sql
new file mode 100644
index 00000000..3470aa79
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601014000_add_reference_library_code_required_guard/migration.sql
@@ -0,0 +1,34 @@
+-- Reference-library code is the structured lookup identity used by BOM pickers,
+-- SPU rules, and external read-only consumers. It must not be left blank even
+-- though payload can still carry legacy extension fields.
+
+DO $$
+DECLARE
+  invalid_count INTEGER;
+BEGIN
+  SELECT COUNT(*)::integer
+    INTO invalid_count
+  FROM "IntakeReferenceLibraryItem"
+  WHERE NULLIF(btrim("code"), '') IS NULL
+     OR "code" <> upper(btrim("code"));
+
+  IF invalid_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot add IntakeReferenceLibraryItem code guard: % rows have blank or non-normalized code.',
+      invalid_count;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'IntakeReferenceLibraryItem_code_required'
+  ) THEN
+    ALTER TABLE "IntakeReferenceLibraryItem"
+      ADD CONSTRAINT "IntakeReferenceLibraryItem_code_required"
+      CHECK (
+        NULLIF(btrim("code"), '') IS NOT NULL
+        AND "code" = upper(btrim("code"))
+      );
+  END IF;
+END $$;
diff --git a/furniture-3d-system/prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql b/furniture-3d-system/prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql
new file mode 100644
index 00000000..8816577b
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql
@@ -0,0 +1,82 @@
+ALTER TABLE "ProductSKU"
+  ADD COLUMN IF NOT EXISTS "originalSkuCode" TEXT,
+  ADD COLUMN IF NOT EXISTS "deletedCodeAt" TIMESTAMP(3),
+  ADD COLUMN IF NOT EXISTS "deletedByProductId" TEXT,
+  ADD COLUMN IF NOT EXISTS "productDeletedAt" TIMESTAMP(3);
+
+UPDATE "ProductSKU"
+SET
+  "originalSkuCode" = upper(btrim(
+    COALESCE(
+      NULLIF(attributes->>'_originalSkuCode', ''),
+      CASE
+        WHEN strpos("skuCode", '__deleted__') > 0
+          THEN substring("skuCode" from 1 for strpos("skuCode", '__deleted__') - 1)
+        ELSE "skuCode"
+      END
+    )
+  )),
+  "deletedCodeAt" = COALESCE(
+    "deletedCodeAt",
+    CASE
+      WHEN NULLIF(attributes->>'_deletedCodeAt', '') ~ '^\d{4}-\d{2}-\d{2}T'
+        THEN (attributes->>'_deletedCodeAt')::timestamp(3)
+      ELSE "deletedAt"
+    END
+  ),
+  "deletedByProductId" = COALESCE("deletedByProductId", NULLIF(btrim(attributes->>'_deletedByProductId'), '')),
+  "productDeletedAt" = COALESCE(
+    "productDeletedAt",
+    CASE
+      WHEN NULLIF(attributes->>'_productDeletedAt', '') ~ '^\d{4}-\d{2}-\d{2}T'
+        THEN (attributes->>'_productDeletedAt')::timestamp(3)
+      ELSE NULL
+    END
+  )
+WHERE "deletedAt" IS NOT NULL;
+
+UPDATE "ProductSKU"
+SET attributes = attributes
+  - '_originalSkuCode'
+  - '_deletedCodeAt'
+  - '_deletedByProductId'
+  - '_productDeletedAt'
+WHERE attributes ? '_originalSkuCode'
+   OR attributes ? '_deletedCodeAt'
+   OR attributes ? '_deletedByProductId'
+   OR attributes ? '_productDeletedAt';
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_soft_delete_identity_valid",
+  ADD CONSTRAINT "ProductSKU_soft_delete_identity_valid"
+  CHECK (
+    (
+      "deletedAt" IS NULL
+      AND "originalSkuCode" IS NULL
+      AND "deletedCodeAt" IS NULL
+      AND "deletedByProductId" IS NULL
+      AND "productDeletedAt" IS NULL
+    )
+    OR
+    (
+      "deletedAt" IS NOT NULL
+      AND NULLIF(btrim(COALESCE("originalSkuCode", '')), '') IS NOT NULL
+      AND "originalSkuCode" = upper(btrim("originalSkuCode"))
+      AND ("deletedByProductId" IS NULL OR NULLIF(btrim("deletedByProductId"), '') IS NOT NULL)
+    )
+  );
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_no_soft_delete_lifecycle_attributes",
+  ADD CONSTRAINT "ProductSKU_no_soft_delete_lifecycle_attributes"
+  CHECK (
+    NOT (
+      attributes ? '_originalSkuCode'
+      OR attributes ? '_deletedCodeAt'
+      OR attributes ? '_deletedByProductId'
+      OR attributes ? '_productDeletedAt'
+    )
+  );
+
+CREATE INDEX IF NOT EXISTS "ProductSKU_originalSkuCode_deletedAt_idx"
+  ON "ProductSKU" ("originalSkuCode", "deletedAt");
diff --git a/furniture-3d-system/prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql b/furniture-3d-system/prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql
new file mode 100644
index 00000000..129a1ee8
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql
@@ -0,0 +1,98 @@
+-- Tighten external read-only views to the documented field contract.
+-- Do not expose extra internal columns or use internal row ids as business codes.
+
+CREATE SCHEMA IF NOT EXISTS external;
+
+DROP VIEW IF EXISTS external.materials_v1;
+
+CREATE VIEW external.materials_v1 AS
+SELECT
+  m."id" AS material_id,
+  m."code" AS material_code,
+  m."name" AS material_name,
+  c."name" AS category_name,
+  m."thumbnailUrl" AS thumbnail_url,
+  m."textureUrl" AS texture_url,
+  m."normalMapUrl" AS normal_map_url,
+  m."color" AS base_color,
+  m."metalness" AS metalness,
+  m."roughness" AS roughness,
+  m."opacity" AS opacity,
+  CASE WHEN m."isActive" THEN 'ACTIVE' ELSE 'INACTIVE' END AS record_status
+FROM "Material" m
+JOIN "MaterialCategory" c ON c."id" = m."categoryId";
+
+CREATE OR REPLACE VIEW external.product_bom_v1 AS
+SELECT
+  'PANEL' AS item_type,
+  p."productId" AS product_id,
+  p."skuId" AS sku_id,
+  p."id" AS item_id,
+  p."code" AS item_code,
+  p."name" AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  m."id" AS material_id,
+  m."code" AS material_code,
+  m."name" AS material_name,
+  jsonb_build_object(
+    'length', p."length",
+    'width', p."width",
+    'thickness', p."thickness",
+    'unit', 'mm'
+  ) AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  p."createdAt" AS created_at,
+  p."updatedAt" AS updated_at,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."modelNumber", '')), '') IS NOT NULL
+    THEN upper(btrim(product."modelNumber"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "Panel" p
+JOIN "Product" product ON product."id" = p."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = p."skuId"
+LEFT JOIN "PanelMaterial" pm ON pm."panelId" = p."id"
+LEFT JOIN "Material" m ON m."id" = pm."materialId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL)
+UNION ALL
+SELECT
+  'HARDWARE' AS item_type,
+  ph."productId" AS product_id,
+  ph."skuId" AS sku_id,
+  ph."id" AS item_id,
+  NULLIF(btrim(COALESCE(h."code", ph."sourceBlockName", '')), '') AS item_code,
+  COALESCE(h."name", ph."sourceBlockName", '未匹配五金') AS item_name,
+  1::numeric AS quantity,
+  'piece' AS unit,
+  NULL::text AS material_id,
+  NULL::text AS material_code,
+  NULL::text AS material_name,
+  h."dimensions" AS dimensions,
+  NULL::numeric AS unit_cost,
+  NULL::numeric AS total_cost,
+  ph."createdAt" AS created_at,
+  ph."updatedAt" AS updated_at,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(product."modelNumber", '')), '') IS NOT NULL
+    THEN upper(btrim(product."modelNumber"))
+    ELSE NULL
+  END AS product_business_key,
+  CASE
+    WHEN NULLIF(btrim(COALESCE(sku."skuCode", '')), '') IS NOT NULL
+    THEN upper(btrim(sku."skuCode"))
+    ELSE NULL
+  END AS sku_business_key
+FROM "ProductHardware" ph
+JOIN "Product" product ON product."id" = ph."productId"
+LEFT JOIN "ProductSKU" sku ON sku."id" = ph."skuId"
+LEFT JOIN "Hardware" h ON h."id" = ph."hardwareId"
+WHERE product."deletedAt" IS NULL
+  AND (sku."id" IS NULL OR sku."deletedAt" IS NULL);
diff --git a/furniture-3d-system/prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql b/furniture-3d-system/prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql
new file mode 100644
index 00000000..de067d8c
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql
@@ -0,0 +1,112 @@
+-- Align replayed migrations with the current Prisma schema surface.
+-- This migration is intentionally structural and idempotent: it closes legacy
+-- migration gaps before the project forms a baseline/repair plan for existing
+-- non-empty databases that do not yet have _prisma_migrations history.
+
+ALTER TABLE "Hardware"
+  ADD COLUMN IF NOT EXISTS "geoWidth" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "geoHeight" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "geoDepth" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "geoVolume" DOUBLE PRECISION,
+  ADD COLUMN IF NOT EXISTS "defaultHeadDirection" TEXT,
+  ADD COLUMN IF NOT EXISTS "installTip" TEXT,
+  ADD COLUMN IF NOT EXISTS "isComposite" BOOLEAN NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS "accessories" JSONB;
+
+ALTER TABLE "Product"
+  DROP COLUMN IF EXISTS "collaborators";
+
+ALTER TABLE "AssemblyStep"
+  ALTER COLUMN "partIds" DROP DEFAULT,
+  ALTER COLUMN "hardwareIds" DROP DEFAULT;
+
+DROP INDEX IF EXISTS "ProductPatentRecord_patentGroupKey_idx";
+DROP INDEX IF EXISTS "ProductSKU_originalSkuCode_deletedAt_idx";
+DROP INDEX IF EXISTS "ProductSKU_sourcePreSkuId_key";
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ProductSKU_sourcePreSkuId_key"
+  ON "ProductSKU"("sourcePreSkuId");
+
+CREATE INDEX IF NOT EXISTS "ActivityLog_createdAt_idx" ON "ActivityLog"("createdAt");
+CREATE INDEX IF NOT EXISTS "Hardware_geoWidth_geoHeight_geoDepth_idx" ON "Hardware"("geoWidth", "geoHeight", "geoDepth");
+CREATE INDEX IF NOT EXISTS "ShareLink_expiresAt_idx" ON "ShareLink"("expiresAt");
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM pg_indexes
+    WHERE schemaname = 'public'
+      AND indexname = 'ProductSKU_sourceAssetVariantIds_gin_idx'
+  ) AND NOT EXISTS (
+    SELECT 1
+    FROM pg_indexes
+    WHERE schemaname = 'public'
+      AND indexname = 'ProductSKU_sourceAssetVariantIds_idx'
+  ) THEN
+    ALTER INDEX "ProductSKU_sourceAssetVariantIds_gin_idx"
+      RENAME TO "ProductSKU_sourceAssetVariantIds_idx";
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'ProductHardware_hardwareId_fkey'
+      AND table_name = 'ProductHardware'
+  ) THEN
+    ALTER TABLE "ProductHardware"
+      DROP CONSTRAINT "ProductHardware_hardwareId_fkey";
+  END IF;
+
+  ALTER TABLE "ProductHardware"
+    ADD CONSTRAINT "ProductHardware_hardwareId_fkey"
+    FOREIGN KEY ("hardwareId") REFERENCES "Hardware"("id")
+    ON DELETE SET NULL
+    ON UPDATE CASCADE;
+END $$;
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1
+    FROM information_schema.table_constraints
+    WHERE constraint_name = 'Substrate_systemNameOptionId_fkey'
+      AND table_name = 'Substrate'
+  ) THEN
+    ALTER TABLE "Substrate"
+      DROP CONSTRAINT "Substrate_systemNameOptionId_fkey";
+  END IF;
+
+  ALTER TABLE "Substrate"
+    ADD CONSTRAINT "Substrate_systemNameOptionId_fkey"
+    FOREIGN KEY ("systemNameOptionId") REFERENCES "SubstrateSystemNameOption"("id")
+    ON DELETE SET NULL
+    ON UPDATE CASCADE;
+END $$;
+
+ALTER TABLE "AssetFamily" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "AssetSeries" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "AssetSkuSyncEvent" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "AssetVariant" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "AssistedAssemblyAiRender" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "DraftGroup" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "IntakeNodePermissionOverride" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "IntakeNonIntegratedProductProfile" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "IntakeNonIntegratedSkuItem" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "IntakeReferenceLibraryItem" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PackagedItem" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PlanningDraft" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PlanningTemplate" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PlanningWorkspace" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PreSku" ALTER COLUMN "componentCodes" DROP DEFAULT;
+ALTER TABLE "PreSku" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PreSkuBasicInfo" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "PreSkuPackagingPlan" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "ProductPatentRecord" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "SpuNumberCounter" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "Substrate" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "SystemConfig" ALTER COLUMN "updatedAt" DROP DEFAULT;
+ALTER TABLE "WarehouseLocation" ALTER COLUMN "updatedAt" DROP DEFAULT;
diff --git a/furniture-3d-system/prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql b/furniture-3d-system/prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql
new file mode 100644
index 00000000..12c3db34
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql
@@ -0,0 +1,51 @@
+CREATE TABLE "MasterDataQualityDecision" (
+    "id" TEXT NOT NULL,
+    "targetType" TEXT NOT NULL,
+    "targetId" TEXT NOT NULL,
+    "targetBusinessKey" TEXT NOT NULL DEFAULT '',
+    "status" TEXT NOT NULL DEFAULT 'APPROVED_INCOMPLETE',
+    "missingFields" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+    "reason" TEXT NOT NULL,
+    "decidedBy" TEXT NOT NULL,
+    "decidedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "resolvedBy" TEXT,
+    "resolvedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "MasterDataQualityDecision_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "MasterDataQualityDecision_target_not_blank" CHECK (
+        NULLIF(btrim("targetType"), '') IS NOT NULL
+        AND NULLIF(btrim("targetId"), '') IS NOT NULL
+    ),
+    CONSTRAINT "MasterDataQualityDecision_status_allowed" CHECK (
+        "status" IN ('APPROVED_INCOMPLETE', 'RESOLVED')
+    ),
+    CONSTRAINT "MasterDataQualityDecision_reason_not_blank" CHECK (
+        NULLIF(btrim("reason"), '') IS NOT NULL
+    ),
+    CONSTRAINT "MasterDataQualityDecision_decidedBy_not_blank" CHECK (
+        NULLIF(btrim("decidedBy"), '') IS NOT NULL
+    ),
+    CONSTRAINT "MasterDataQualityDecision_resolved_state_valid" CHECK (
+        ("status" <> 'RESOLVED' AND "resolvedAt" IS NULL AND "resolvedBy" IS NULL)
+        OR
+        ("status" = 'RESOLVED' AND "resolvedAt" IS NOT NULL AND NULLIF(btrim(COALESCE("resolvedBy", '')), '') IS NOT NULL)
+    )
+);
+
+CREATE INDEX "MasterDataQualityDecision_targetType_targetId_idx"
+    ON "MasterDataQualityDecision"("targetType", "targetId");
+
+CREATE INDEX "MasterDataQualityDecision_targetBusinessKey_idx"
+    ON "MasterDataQualityDecision"("targetBusinessKey");
+
+CREATE INDEX "MasterDataQualityDecision_status_idx"
+    ON "MasterDataQualityDecision"("status");
+
+CREATE INDEX "MasterDataQualityDecision_decidedAt_idx"
+    ON "MasterDataQualityDecision"("decidedAt");
+
+CREATE UNIQUE INDEX "MasterDataQualityDecision_open_target_key"
+    ON "MasterDataQualityDecision"("targetType", "targetId")
+    WHERE "status" = 'APPROVED_INCOMPLETE';
diff --git a/furniture-3d-system/prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql
new file mode 100644
index 00000000..a4263aaa
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql
@@ -0,0 +1,8 @@
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_price_cost_stock_non_negative",
+  ADD CONSTRAINT "ProductSKU_price_cost_stock_non_negative"
+  CHECK (
+    "price" >= 0
+    AND ("costPrice" IS NULL OR "costPrice" >= 0)
+    AND "stock" >= 0
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601020000_add_asset_center_source_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601020000_add_asset_center_source_guards/migration.sql
new file mode 100644
index 00000000..6781fb62
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601020000_add_asset_center_source_guards/migration.sql
@@ -0,0 +1,138 @@
+CREATE OR REPLACE FUNCTION public.text_array_all_trimmed_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $$
+  SELECT COALESCE(
+    bool_and(NULLIF(btrim(item), '') IS NOT NULL),
+    true
+  )
+  FROM unnest(COALESCE(items, ARRAY[]::text[])) AS item
+$$;
+
+ALTER TABLE "AssetSeries"
+  DROP CONSTRAINT IF EXISTS "AssetSeries_identity_valid",
+  ADD CONSTRAINT "AssetSeries_identity_valid"
+  CHECK (
+    NULLIF(btrim(code), '') IS NOT NULL
+    AND code = btrim(code)
+    AND NULLIF(btrim(name), '') IS NOT NULL
+    AND name = btrim(name)
+    AND "sortOrder" >= 0
+    AND (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+  );
+
+ALTER TABLE "AssetSeries"
+  DROP CONSTRAINT IF EXISTS "AssetSeries_metadata_object",
+  ADD CONSTRAINT "AssetSeries_metadata_object"
+  CHECK (
+    metadata IS NULL OR jsonb_typeof(metadata) IN ('object', 'null')
+  );
+
+ALTER TABLE "AssetFamily"
+  DROP CONSTRAINT IF EXISTS "AssetFamily_identity_valid",
+  ADD CONSTRAINT "AssetFamily_identity_valid"
+  CHECK (
+    NULLIF(btrim(code), '') IS NOT NULL
+    AND code = btrim(code)
+    AND NULLIF(btrim(name), '') IS NOT NULL
+    AND name = btrim(name)
+    AND public.text_array_all_trimmed_non_blank("connectionRoles")
+    AND (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+    AND ("rejectionReason" IS NULL OR NULLIF(btrim("rejectionReason"), '') IS NOT NULL)
+  );
+
+ALTER TABLE "AssetFamily"
+  DROP CONSTRAINT IF EXISTS "AssetFamily_metadata_object",
+  ADD CONSTRAINT "AssetFamily_metadata_object"
+  CHECK (
+    metadata IS NULL OR jsonb_typeof(metadata) IN ('object', 'null')
+  );
+
+ALTER TABLE "AssetFamily"
+  DROP CONSTRAINT IF EXISTS "AssetFamily_lifecycle_state_valid",
+  ADD CONSTRAINT "AssetFamily_lifecycle_state_valid"
+  CHECK (
+    (("submittedAt" IS NULL) = ("submittedById" IS NULL))
+    AND (("reviewedAt" IS NULL) = ("reviewedById" IS NULL))
+    AND (("rejectedAt" IS NULL) = ("rejectedById" IS NULL))
+    AND (("deletedAt" IS NULL) = ("deletedById" IS NULL))
+    AND (status <> 'PENDING_REVIEW'::"AssetStatus" OR "submittedAt" IS NOT NULL)
+    AND (status <> 'AVAILABLE'::"AssetStatus" OR "reviewedAt" IS NOT NULL)
+    AND (
+      status <> 'REJECTED'::"AssetStatus"
+      OR (
+        "rejectedAt" IS NOT NULL
+        AND NULLIF(btrim(COALESCE("rejectionReason", '')), '') IS NOT NULL
+      )
+    )
+  );
+
+ALTER TABLE "AssetVariant"
+  DROP CONSTRAINT IF EXISTS "AssetVariant_identity_valid",
+  ADD CONSTRAINT "AssetVariant_identity_valid"
+  CHECK (
+    NULLIF(btrim(code), '') IS NOT NULL
+    AND code = btrim(code)
+    AND NULLIF(btrim(name), '') IS NOT NULL
+    AND name = btrim(name)
+    AND NULLIF(btrim("identityKey"), '') IS NOT NULL
+    AND "identityKey" = btrim("identityKey")
+    AND NULLIF(btrim("modelUrl"), '') IS NOT NULL
+    AND "modelUrl" = btrim("modelUrl")
+    AND ("thumbnailUrl" IS NULL OR NULLIF(btrim("thumbnailUrl"), '') IS NOT NULL)
+    AND ("sizeLabel" IS NULL OR NULLIF(btrim("sizeLabel"), '') IS NOT NULL)
+    AND (barcode IS NULL OR NULLIF(btrim(barcode), '') IS NOT NULL)
+    AND ("supplierName" IS NULL OR NULLIF(btrim("supplierName"), '') IS NOT NULL)
+    AND ("supplierCode" IS NULL OR NULLIF(btrim("supplierCode"), '') IS NOT NULL)
+    AND ("versionNo" IS NULL OR NULLIF(btrim("versionNo"), '') IS NOT NULL)
+    AND ("rejectionReason" IS NULL OR NULLIF(btrim("rejectionReason"), '') IS NOT NULL)
+  );
+
+ALTER TABLE "AssetVariant"
+  DROP CONSTRAINT IF EXISTS "AssetVariant_json_shape_valid",
+  ADD CONSTRAINT "AssetVariant_json_shape_valid"
+  CHECK (
+    jsonb_typeof(dimensions) = 'object'
+    AND jsonb_typeof("mountPoints") = 'array'
+    AND ("assemblyBasis" IS NULL OR jsonb_typeof("assemblyBasis") IN ('object', 'null'))
+    AND ("compatibilityRules" IS NULL OR jsonb_typeof("compatibilityRules") IN ('object', 'null'))
+    AND ("namingFields" IS NULL OR jsonb_typeof("namingFields") IN ('object', 'null'))
+    AND ("businessData" IS NULL OR jsonb_typeof("businessData") IN ('object', 'null'))
+  );
+
+ALTER TABLE "AssetVariant"
+  DROP CONSTRAINT IF EXISTS "AssetVariant_cost_weight_valid",
+  ADD CONSTRAINT "AssetVariant_cost_weight_valid"
+  CHECK (
+    ("weightKg" IS NULL OR "weightKg" >= 0)
+    AND ("lossFactor" IS NULL OR "lossFactor" >= 0)
+    AND ("costPrice" IS NULL OR "costPrice" >= 0)
+    AND ("estimatedCostPrice" IS NULL OR "estimatedCostPrice" >= 0)
+  );
+
+ALTER TABLE "AssetVariant"
+  DROP CONSTRAINT IF EXISTS "AssetVariant_lifecycle_state_valid",
+  ADD CONSTRAINT "AssetVariant_lifecycle_state_valid"
+  CHECK (
+    (("submittedAt" IS NULL) = ("submittedById" IS NULL))
+    AND (("reviewedAt" IS NULL) = ("reviewedById" IS NULL))
+    AND (("rejectedAt" IS NULL) = ("rejectedById" IS NULL))
+    AND (("deletedAt" IS NULL) = ("deletedById" IS NULL))
+    AND (status <> 'PENDING_REVIEW'::"AssetStatus" OR "submittedAt" IS NOT NULL)
+    AND (status <> 'AVAILABLE'::"AssetStatus" OR "reviewedAt" IS NOT NULL)
+    AND (
+      status <> 'REJECTED'::"AssetStatus"
+      OR (
+        "rejectedAt" IS NOT NULL
+        AND NULLIF(btrim(COALESCE("rejectionReason", '')), '') IS NOT NULL
+      )
+    )
+  );
+
+ALTER TABLE "AssetVariant"
+  DROP CONSTRAINT IF EXISTS "AssetVariant_inheritance_not_self",
+  ADD CONSTRAINT "AssetVariant_inheritance_not_self"
+  CHECK (
+    "inheritedFromVariantId" IS NULL OR "inheritedFromVariantId" <> id
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql
new file mode 100644
index 00000000..16c27269
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql
@@ -0,0 +1,85 @@
+CREATE OR REPLACE FUNCTION public.text_array_all_trimmed_non_blank(items text[])
+RETURNS boolean
+LANGUAGE sql
+IMMUTABLE
+AS $$
+  SELECT COALESCE(
+    bool_and(NULLIF(btrim(item), '') IS NOT NULL),
+    true
+  )
+  FROM unnest(COALESCE(items, ARRAY[]::text[])) AS item
+$$;
+
+ALTER TABLE "DraftGroup"
+  DROP CONSTRAINT IF EXISTS "DraftGroup_identity_valid",
+  ADD CONSTRAINT "DraftGroup_identity_valid"
+  CHECK (
+    NULLIF(btrim(code), '') IS NOT NULL
+    AND code = btrim(code)
+    AND NULLIF(btrim(name), '') IS NOT NULL
+    AND name = btrim(name)
+  );
+
+ALTER TABLE "DraftGroup"
+  DROP CONSTRAINT IF EXISTS "DraftGroup_summary_object",
+  ADD CONSTRAINT "DraftGroup_summary_object"
+  CHECK (
+    summary IS NOT NULL
+    AND jsonb_typeof(summary) = 'object'
+  );
+
+ALTER TABLE "DraftGroup"
+  DROP CONSTRAINT IF EXISTS "DraftGroup_optional_text_not_blank",
+  ADD CONSTRAINT "DraftGroup_optional_text_not_blank"
+  CHECK (
+    (description IS NULL OR NULLIF(btrim(description), '') IS NOT NULL)
+    AND (notes IS NULL OR NULLIF(btrim(notes), '') IS NOT NULL)
+  );
+
+ALTER TABLE "PreSku"
+  DROP CONSTRAINT IF EXISTS "PreSku_identity_valid",
+  ADD CONSTRAINT "PreSku_identity_valid"
+  CHECK (
+    sequence > 0
+    AND NULLIF(btrim("defaultName"), '') IS NOT NULL
+    AND "defaultName" = btrim("defaultName")
+    AND NULLIF(btrim("sourceCandidateKey"), '') IS NOT NULL
+    AND "sourceCandidateKey" = btrim("sourceCandidateKey")
+  );
+
+ALTER TABLE "PreSku"
+  DROP CONSTRAINT IF EXISTS "PreSku_process_snapshots_shape_valid",
+  ADD CONSTRAINT "PreSku_process_snapshots_shape_valid"
+  CHECK (
+    jsonb_typeof("familySelection") = 'object'
+    AND jsonb_typeof("variantSelection") = 'object'
+    AND jsonb_typeof("previewNodes") = 'array'
+    AND jsonb_typeof("displaySummary") = 'object'
+    AND jsonb_typeof("bomPreview") = 'array'
+    AND ("recommendedHardware" IS NULL OR jsonb_typeof("recommendedHardware") IN ('array', 'null'))
+    AND ("explosionPreview" IS NULL OR jsonb_typeof("explosionPreview") IN ('array', 'null'))
+    AND jsonb_typeof("installStepPreview") = 'array'
+    AND ("packagingSnapshot" IS NULL OR jsonb_typeof("packagingSnapshot") IN ('object', 'null'))
+  );
+
+ALTER TABLE "PreSku"
+  DROP CONSTRAINT IF EXISTS "PreSku_weight_valid",
+  ADD CONSTRAINT "PreSku_weight_valid"
+  CHECK (
+    "weightPreview" IS NULL OR "weightPreview" >= 0
+  );
+
+ALTER TABLE "PreSku"
+  DROP CONSTRAINT IF EXISTS "PreSku_component_codes_valid",
+  ADD CONSTRAINT "PreSku_component_codes_valid"
+  CHECK (
+    public.text_array_all_trimmed_non_blank("componentCodes")
+  );
+
+ALTER TABLE "PreSku"
+  DROP CONSTRAINT IF EXISTS "PreSku_optional_text_not_blank",
+  ADD CONSTRAINT "PreSku_optional_text_not_blank"
+  CHECK (
+    ("customName" IS NULL OR NULLIF(btrim("customName"), '') IS NOT NULL)
+    AND (notes IS NULL OR NULLIF(btrim(notes), '') IS NOT NULL)
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601022000_add_product_sku_attributes_truth_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260601022000_add_product_sku_attributes_truth_guard/migration.sql
new file mode 100644
index 00000000..a666fef2
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601022000_add_product_sku_attributes_truth_guard/migration.sql
@@ -0,0 +1,15 @@
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_no_formal_truth_attributes",
+  ADD CONSTRAINT "ProductSKU_no_formal_truth_attributes"
+  CHECK (
+    NOT (
+      attributes ? 'skuName'
+      OR attributes ? 'model'
+      OR attributes ? 'specCode'
+      OR attributes ? 'barcode'
+      OR attributes ? 'category'
+      OR attributes ? 'color'
+      OR attributes ? 'material'
+      OR attributes ? 'size'
+    )
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql b/furniture-3d-system/prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql
new file mode 100644
index 00000000..8268c6a8
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql
@@ -0,0 +1,30 @@
+-- Keep the formal SKU asset profile lifecycle copy aligned with ProductSKU.
+-- The service layer already updates ProductSkuAssetProfile.skuDeletedAt on the
+-- normal soft-delete / restore path; this trigger closes direct SQL or future
+-- repository write gaps so the active barcode pool cannot drift.
+
+UPDATE "ProductSkuAssetProfile" profile
+SET "skuDeletedAt" = sku."deletedAt"
+FROM "ProductSKU" sku
+WHERE profile."skuId" = sku."id"
+  AND profile."skuDeletedAt" IS DISTINCT FROM sku."deletedAt";
+
+CREATE OR REPLACE FUNCTION "sync_product_sku_asset_profile_deleted_at"()
+RETURNS TRIGGER AS $$
+BEGIN
+  UPDATE "ProductSkuAssetProfile"
+  SET "skuDeletedAt" = NEW."deletedAt"
+  WHERE "skuId" = NEW."id"
+    AND "skuDeletedAt" IS DISTINCT FROM NEW."deletedAt";
+
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS "ProductSKU_sync_asset_profile_deleted_at"
+  ON "ProductSKU";
+
+CREATE TRIGGER "ProductSKU_sync_asset_profile_deleted_at"
+AFTER INSERT OR UPDATE OF "deletedAt" ON "ProductSKU"
+FOR EACH ROW
+EXECUTE FUNCTION "sync_product_sku_asset_profile_deleted_at"();
diff --git a/furniture-3d-system/prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql b/furniture-3d-system/prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql
new file mode 100644
index 00000000..9a1dbe5e
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql
@@ -0,0 +1,24 @@
+-- Soft-deleted formal SKUs must keep enough structured tombstone data to make
+-- barcode release, restore conflict checks and product-cascade restore auditable.
+
+UPDATE "ProductSKU"
+SET "deletedCodeAt" = COALESCE("deletedCodeAt", "deletedAt")
+WHERE "deletedAt" IS NOT NULL
+  AND "deletedCodeAt" IS NULL;
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_soft_delete_tombstone_valid",
+  ADD CONSTRAINT "ProductSKU_soft_delete_tombstone_valid"
+  CHECK (
+    "deletedAt" IS NULL
+    OR (
+      "deletedCodeAt" IS NOT NULL
+      AND (
+        ("deletedByProductId" IS NULL AND "productDeletedAt" IS NULL)
+        OR (
+          NULLIF(btrim(COALESCE("deletedByProductId", '')), '') IS NOT NULL
+          AND "productDeletedAt" IS NOT NULL
+        )
+      )
+    )
+  );
diff --git a/furniture-3d-system/prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql b/furniture-3d-system/prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql
new file mode 100644
index 00000000..da59831e
--- /dev/null
+++ b/furniture-3d-system/prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql
@@ -0,0 +1,82 @@
+-- Master data quality decisions are audit records, not placeholders.
+-- A staged incomplete approval must carry a real business reason and actor.
+
+ALTER TABLE "MasterDataQualityDecision"
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_reason_not_placeholder",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_decidedBy_not_placeholder",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_resolvedBy_not_placeholder",
+  ADD CONSTRAINT "MasterDataQualityDecision_reason_not_placeholder"
+  CHECK (
+    lower(regexp_replace(btrim("reason"), '\s+', '', 'g')) NOT IN (
+      'unknown',
+      'unk',
+      'n/a',
+      'na',
+      'null',
+      'none',
+      'todo',
+      'tbd',
+      'default',
+      'test',
+      '测试',
+      '待补',
+      '待补齐',
+      '待确认',
+      '未知',
+      '默认',
+      '默认值',
+      '暂无'
+    )
+    AND regexp_replace(btrim("reason"), '\s+', '', 'g') !~ '(待补|待确认|默认值)'
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_decidedBy_not_placeholder"
+  CHECK (
+    lower(regexp_replace(btrim("decidedBy"), '\s+', '', 'g')) NOT IN (
+      'unknown',
+      'unk',
+      'n/a',
+      'na',
+      'null',
+      'none',
+      'todo',
+      'tbd',
+      'default',
+      'test',
+      '测试',
+      '待补',
+      '待补齐',
+      '待确认',
+      '未知',
+      '默认',
+      '默认值',
+      '暂无'
+    )
+    AND regexp_replace(btrim("decidedBy"), '\s+', '', 'g') !~ '(待补|待确认|默认值)'
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_resolvedBy_not_placeholder"
+  CHECK (
+    "resolvedBy" IS NULL
+    OR (
+      lower(regexp_replace(btrim("resolvedBy"), '\s+', '', 'g')) NOT IN (
+        'unknown',
+        'unk',
+        'n/a',
+        'na',
+        'null',
+        'none',
+        'todo',
+        'tbd',
+        'default',
+        'test',
+        '测试',
+        '待补',
+        '待补齐',
+        '待确认',
+        '未知',
+        '默认',
+        '默认值',
+        '暂无'
+      )
+      AND regexp_replace(btrim("resolvedBy"), '\s+', '', 'g') !~ '(待补|待确认|默认值)'
+    )
+  );
diff --git a/furniture-3d-system/scripts/apply-master-data-cleanup-plan.js b/furniture-3d-system/scripts/apply-master-data-cleanup-plan.js
new file mode 100644
index 00000000..28cb0c84
--- /dev/null
+++ b/furniture-3d-system/scripts/apply-master-data-cleanup-plan.js
@@ -0,0 +1,1747 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const path = require('node:path')
+const { Pool } = require('pg')
+const {
+  assertNoMasterDataTruthDrift,
+  buildReport,
+  getMigrationApplicationStatus,
+  getPreSkuFormalizationLifecycleMismatchSamples,
+  getRequiredMigrationReadiness,
+} = require('./verify-master-data-foundation')
+const {
+  REQUIRED_MIGRATIONS,
+  applyMissingMigrationFiles,
+  classifyAppliedMigrationPaths,
+} = require('./master-data-required-migrations')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const APPLY_CONFIRMATION = 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA'
+const CLEANUP_ACTOR_FALLBACK = 'master_data_cleanup'
+const QUALITY_DECISION_STATUS_APPROVED_INCOMPLETE = 'APPROVED_INCOMPLETE'
+const QUALITY_DECISION_STATUS_RESOLVED = 'RESOLVED'
+const QUALITY_DECISION_TARGET_SKU_ITEM = 'IntakeNonIntegratedSkuItem'
+const QUALITY_DECISION_TARGET_PRODUCT_PROFILE = 'IntakeNonIntegratedProductProfile'
+
+const SKU_ITEM_FILL_KEYS = ['skuCode', 'specName', 'model', 'barcode']
+const REQUIRED_SKU_ITEM_KEYS = ['skuCode', 'specName', 'model']
+const SKU_ITEM_NORMALIZED_CODE_KEYS = ['skuCode', 'barcode']
+const SKU_ITEM_CURRENT_EVIDENCE_KEYS = ['skuCode', 'specName', 'model', 'barcode', 'missingRequiredFields']
+const SKU_ITEM_CONTEXT_EVIDENCE_KEYS = ['productId', 'spu', 'skuItemId']
+const PRODUCT_PROFILE_FILL_KEYS = ['productName', 'productCategory', 'productDevelopmentKind']
+const REQUIRED_PRODUCT_PROFILE_KEYS = ['productName', 'productCategory', 'productDevelopmentKind']
+const PRODUCT_PROFILE_CURRENT_EVIDENCE_KEYS = [
+  'productName',
+  'productCategory',
+  'productDevelopmentKind',
+  'missingFields',
+]
+const PRODUCT_PROFILE_CONTEXT_EVIDENCE_KEYS = ['spu']
+const QUALITY_DECISION_REPAIR_FILL_KEYS = ['reason', 'decidedBy', 'resolvedBy']
+const QUALITY_DECISION_REPAIR_CURRENT_EVIDENCE_KEYS = [
+  'reason',
+  'decidedBy',
+  'resolvedBy',
+  'status',
+  'placeholderFields',
+]
+const QUALITY_DECISION_REPAIR_CONTEXT_EVIDENCE_KEYS = ['targetType', 'targetId']
+const CLEANUP_PLAN_TOP_LEVEL_KEYS = new Set([
+  'mode',
+  'appliedMigrations',
+  'migrationReplay',
+  'migrationApplicationStatus',
+  'currentSummary',
+  'rolledBack',
+  'outputFile',
+  'confirmation',
+  'confirmedBy',
+  'skuItems',
+  'productProfiles',
+  'qualityDecisionRepairs',
+  'preSkuFormalizationMismatches',
+])
+const DISALLOWED_CLEANUP_FILL_VALUES = new Set([
+  'unknown',
+  'unk',
+  'n/a',
+  'na',
+  'null',
+  'none',
+  'todo',
+  'tbd',
+  'default',
+  'test',
+  '测试',
+  '待补',
+  '待补齐',
+  '待确认',
+  '未知',
+  '默认',
+  '默认值',
+  '暂无',
+])
+
+function loadDatabaseUrl() {
+  if (process.env.DATABASE_URL) {
+    return process.env.DATABASE_URL
+  }
+
+  const envPath = path.join(ROOT_DIR, '.env')
+  if (!fs.existsSync(envPath)) {
+    return ''
+  }
+
+  const content = fs.readFileSync(envPath, 'utf8')
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex <= 0) continue
+
+    const key = trimmed.slice(0, separatorIndex).trim()
+    if (key !== 'DATABASE_URL') continue
+
+    let value = trimmed.slice(separatorIndex + 1).trim()
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1)
+    }
+    return value
+  }
+
+  return ''
+}
+
+function cleanupDatabaseIdentity(databaseUrl) {
+  const parsed = new URL(databaseUrl)
+  const schema = parsed.searchParams.get('schema') || ''
+  return [
+    parsed.protocol.replace(/:$/, '').toLowerCase(),
+    decodeURIComponent(parsed.username || '').toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port || '5432',
+    parsed.pathname.replace(/^\//, '').toLowerCase(),
+    schema.toLowerCase(),
+  ].join('|')
+}
+
+function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
+  const rawPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    return { provided: false, path: '', exists: false, sha256: '' }
+  }
+  const absolutePath = path.resolve(rootDir, rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    return { provided: true, path: absolutePath, exists: false, sha256: '' }
+  }
+  const bytes = fs.readFileSync(absolutePath)
+  return {
+    provided: true,
+    path: absolutePath,
+    exists: true,
+    sizeBytes: bytes.length,
+    sha256: crypto.createHash('sha256').update(bytes).digest('hex'),
+  }
+}
+
+function assertApplyExecutionEvidence(args, options = {}) {
+  if (!args.apply) {
+    return { actualDatabaseIdentity: '', backupFingerprint: null }
+  }
+  const actualDatabaseIdentity = cleanupDatabaseIdentity(options.databaseUrl)
+  const backupFingerprint = getBackupFingerprint(options.env, options.rootDir)
+  const blockers = []
+
+  if (!args.expectedDatabaseIdentity) {
+    blockers.push('expected-database-identity')
+  } else if (args.expectedDatabaseIdentity !== actualDatabaseIdentity) {
+    blockers.push('expected-database-identity-mismatch')
+  }
+  if (!args.expectedBackupSha256) {
+    blockers.push('expected-backup-sha256')
+  } else if (backupFingerprint.sha256 && args.expectedBackupSha256 !== backupFingerprint.sha256) {
+    blockers.push('expected-backup-sha256-mismatch')
+  }
+  if (backupFingerprint.provided !== true) {
+    blockers.push('backup-file-missing')
+  } else if (backupFingerprint.exists !== true) {
+    blockers.push('backup-file-not-found')
+  }
+
+  if (blockers.length > 0) {
+    throw new Error(
+      `真正落库必须校验目标库身份和数据库备份：${blockers.join(', ')}。`,
+    )
+  }
+  return { actualDatabaseIdentity, backupFingerprint }
+}
+
+function parseArgs(argv) {
+  const args = {
+    apply: false,
+    template: false,
+    planPath: '',
+    outputPath: '',
+    validatePlan: false,
+    allowMigrationDryRun: false,
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      args.apply = true
+      continue
+    }
+    if (arg === '--template') {
+      args.template = true
+      continue
+    }
+    if (arg === '--validate-plan') {
+      args.validatePlan = true
+      continue
+    }
+    if (arg === '--allow-migration-dry-run') {
+      args.allowMigrationDryRun = true
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      args.expectedDatabaseIdentity = argv[index + 1] ?? ''
+      if (!args.expectedDatabaseIdentity || args.expectedDatabaseIdentity.startsWith('--')) {
+        throw new Error('缺少 --expected-database-identity <identity>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      args.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      args.expectedBackupSha256 = argv[index + 1] ?? ''
+      if (!args.expectedBackupSha256 || args.expectedBackupSha256.startsWith('--')) {
+        throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      args.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    if (arg === '--plan') {
+      args.planPath = argv[index + 1] ?? ''
+      if (!args.planPath || args.planPath.startsWith('--')) {
+        throw new Error('缺少 --plan <json-file>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg === '--output') {
+      args.outputPath = argv[index + 1] ?? ''
+      if (!args.outputPath || args.outputPath.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      index += 1
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+  if (args.template && args.apply) {
+    throw new Error('--template 只允许生成清洗模板，不能和 --apply 同时使用。')
+  }
+  if (args.template && args.validatePlan) {
+    throw new Error('--template 只允许生成清洗模板，不能和 --validate-plan 同时使用。')
+  }
+  if (args.apply && args.validatePlan) {
+    throw new Error('--apply 会执行数据库 dry-run 或落库，不能和只读 --validate-plan 同时使用。')
+  }
+  if (args.apply && args.allowMigrationDryRun) {
+    throw new Error('--allow-migration-dry-run 只允许模板或 dry-run 调试，不能和 --apply 同时使用。')
+  }
+  if (args.template && args.planPath) {
+    throw new Error('--template 只允许生成清洗模板，不能和 --plan 同时使用。')
+  }
+  if (args.outputPath && !args.template && !args.validatePlan) {
+    throw new Error('--output 只允许和 --template 或 --validate-plan 一起使用。')
+  }
+  if (args.apply && !args.planPath) {
+    throw new Error('--apply 必须同时提供 --plan <json-file>。')
+  }
+  if (args.validatePlan && !args.planPath) {
+    throw new Error('--validate-plan 必须同时提供 --plan <json-file>。')
+  }
+
+  return args
+}
+
+function writeJsonReport(outputPath, payload) {
+  const absolutePath = path.resolve(process.cwd(), outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function assertNoApplyWithPendingMigrations(
+  args,
+  appliedMigrations,
+  migrationReplay = classifyAppliedMigrationPaths(appliedMigrations),
+) {
+  const migrationApplicationStatus = getMigrationApplicationStatus(
+    appliedMigrations,
+    migrationReplay,
+  )
+  if (!args.apply || migrationApplicationStatus.appliedMigrationCount === 0) {
+    return migrationApplicationStatus
+  }
+  throw new Error(
+    `当前数据库仍有治理迁移需要执行，不能在 --apply 清洗时顺带应用任何迁移：${appliedMigrations.join(', ')}`,
+  )
+}
+
+function resolveMigrationReplayMode(baseMode, migrationReplay) {
+  if (migrationReplay.structureMigrations.length > 0) {
+    return `${baseMode}-migration-dry-run`
+  }
+  if (migrationReplay.idempotentMigrations.length > 0) {
+    return `${baseMode}-idempotent-migration-replay`
+  }
+  return baseMode
+}
+
+function formatPendingMigrationPaths(migrationReadiness) {
+  return [
+    ...(migrationReadiness.pendingStructureMigrationPaths ?? []),
+    ...(migrationReadiness.pendingIdempotentMigrationPaths ?? []),
+  ].join(', ')
+}
+
+function readPlan(planPath) {
+  if (!planPath) {
+    throw new Error('缺少 --plan <json-file>。')
+  }
+  const absolutePath = path.resolve(process.cwd(), planPath)
+  const raw = fs.readFileSync(absolutePath, 'utf8')
+  const plan = JSON.parse(raw)
+  assertNoUnknownCleanupPlanTopLevelKeys(plan)
+  return {
+    skuItems: Array.isArray(plan.skuItems) ? plan.skuItems : [],
+    productProfiles: Array.isArray(plan.productProfiles) ? plan.productProfiles : [],
+    qualityDecisionRepairs: Array.isArray(plan.qualityDecisionRepairs)
+      ? plan.qualityDecisionRepairs
+      : [],
+    preSkuFormalizationMismatches: Array.isArray(plan.preSkuFormalizationMismatches)
+      ? plan.preSkuFormalizationMismatches
+      : [],
+    confirmation: typeof plan.confirmation === 'string' ? plan.confirmation : '',
+    confirmedBy: typeof plan.confirmedBy === 'string' ? plan.confirmedBy : '',
+  }
+}
+
+function readText(value) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function assertNoUnknownCleanupPlanTopLevelKeys(plan) {
+  if (!plan || typeof plan !== 'object' || Array.isArray(plan)) {
+    throw new Error('清洗计划必须是 JSON 对象。')
+  }
+  const unknownKeys = Object.keys(plan).filter((key) => !CLEANUP_PLAN_TOP_LEVEL_KEYS.has(key))
+  if (unknownKeys.length > 0) {
+    throw new Error(`清洗计划存在不允许的顶层字段：${unknownKeys.join(', ')}。`)
+  }
+}
+
+function pickTextPatch(input, keys) {
+  const patch = {}
+  keys.forEach((key) => {
+    if (Object.prototype.hasOwnProperty.call(input, key)) {
+      const value = readText(input[key])
+      if (value) {
+        patch[key] = value
+      }
+    }
+  })
+  return patch
+}
+
+function normalizeSkuItemCodePatch(patch) {
+  const nextPatch = { ...patch }
+  SKU_ITEM_NORMALIZED_CODE_KEYS.forEach((key) => {
+    if (Object.prototype.hasOwnProperty.call(nextPatch, key)) {
+      nextPatch[key] = readText(nextPatch[key]).toUpperCase()
+    }
+  })
+  return nextPatch
+}
+
+function assertNoUnknownFillKeys(input, allowedKeys, scope) {
+  if (!input || typeof input !== 'object' || Array.isArray(input)) return
+  const unknownKeys = Object.keys(input).filter((key) => !allowedKeys.includes(key))
+  if (unknownKeys.length > 0) {
+    throw new Error(`${scope} 存在不允许的清洗字段：${unknownKeys.join(', ')}。`)
+  }
+}
+
+function assertOnlyMissingFieldsArePatched(currentValues, patch, requiredKeys, scope) {
+  const overwrittenKeys = Object.keys(patch).filter((key) => readText(currentValues[key]).length > 0)
+  if (overwrittenKeys.length > 0) {
+    throw new Error(
+      `${scope} 只能补齐当前仍为空的字段，不能覆盖已有主数据：${overwrittenKeys.join(', ')}。`,
+    )
+  }
+
+  const patchedRequiredKeys = Object.keys(patch).filter((key) => requiredKeys.includes(key))
+  if (patchedRequiredKeys.length === 0 && Object.keys(patch).length > 0) {
+    throw new Error(`${scope} 至少要补齐一个必填主数据字段，不能只补可选字段。`)
+  }
+}
+
+function assertValidProductProfilePatch(patch, productId) {
+  if (
+    Object.prototype.hasOwnProperty.call(patch, 'productDevelopmentKind') &&
+    !['product', 'series'].includes(patch.productDevelopmentKind)
+  ) {
+    throw new Error(
+      `产品 ${productId} 的 productDevelopmentKind 无效：${patch.productDevelopmentKind}，只能填写 product 或 series。`,
+    )
+  }
+}
+
+function isDisallowedCleanupTextValue(value) {
+  const compactValue = readText(value).replace(/\s+/g, '').toLowerCase()
+  return (
+    DISALLOWED_CLEANUP_FILL_VALUES.has(compactValue) ||
+    /待补|待确认|默认值/.test(compactValue)
+  )
+}
+
+function assertValidTextPatch(patch, scope) {
+  Object.entries(patch).forEach(([key, value]) => {
+    if (/[\u0000-\u001F\u007F]/.test(value)) {
+      throw new Error(`${scope} 的 ${key} 包含控制字符，不能写入主数据。`)
+    }
+    if (isDisallowedCleanupTextValue(value)) {
+      throw new Error(
+        `${scope} 的 ${key} 不能填写占位值或默认值：${value}。必须填写业务确认后的真实主数据。`,
+      )
+    }
+  })
+}
+
+function assertValidAuditText(value, scope) {
+  assertValidTextPatch({ value }, scope)
+}
+
+function assertValidIncompleteApproval(entry, scope) {
+  if (entry?.allowIncomplete !== true) return
+  if (!readText(entry.incompleteReason)) {
+    throw new Error(`${scope} 设置 allowIncomplete=true 时必须填写 incompleteReason。`)
+  }
+  assertValidAuditText(entry.incompleteReason, `${scope} 的 incompleteReason`)
+}
+
+function validateSkuItemCleanupPlanEntry(entry) {
+  const id = readText(entry.id)
+  if (!id) {
+    throw new Error('skuItems 中存在缺少 id 的清洗项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, SKU_ITEM_FILL_KEYS, `SKU 明细 ${id}`)
+  const patch = normalizeSkuItemCodePatch(pickTextPatch(fill, SKU_ITEM_FILL_KEYS))
+  assertValidTextPatch(patch, `SKU 明细 ${id}`)
+  if (Object.keys(patch).length === 0) {
+    return { id, skipped: true, reason: '没有填写任何字段', appliedFields: [] }
+  }
+
+  assertCleanupEvidencePresent(
+    entry,
+    SKU_ITEM_CURRENT_EVIDENCE_KEYS,
+    SKU_ITEM_CONTEXT_EVIDENCE_KEYS,
+    `SKU 明细 ${id}`,
+  )
+  assertOnlyMissingFieldsArePatched(
+    entry.current ?? {},
+    patch,
+    REQUIRED_SKU_ITEM_KEYS,
+    `SKU 明细 ${id}`,
+  )
+
+  const nextValues = {
+    skuCode: entry.current?.skuCode,
+    specName: entry.current?.specName,
+    model: entry.current?.model,
+    barcode: entry.current?.barcode,
+    ...patch,
+  }
+  const missingRequiredFields = resolveSkuMissingFields(nextValues)
+  if (missingRequiredFields.length > 0 && !hasExplicitIncompleteApproval(entry)) {
+    throw new Error(
+      `SKU 明细 ${id} 静态校验后仍未补齐：${missingRequiredFields.join(', ')}。如确需分阶段清洗，计划项必须设置 allowIncomplete=true 且填写 incompleteReason。`,
+    )
+  }
+  assertValidIncompleteApproval(entry, `SKU 明细 ${id}`)
+
+  return { id, appliedFields: Object.keys(patch), missingRequiredFields }
+}
+
+function validateProductProfileCleanupPlanEntry(entry) {
+  const productId = readText(entry.productId)
+  if (!productId) {
+    throw new Error('productProfiles 中存在缺少 productId 的清洗项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, PRODUCT_PROFILE_FILL_KEYS, `产品 ${productId}`)
+  const patch = pickTextPatch(fill, PRODUCT_PROFILE_FILL_KEYS)
+  assertValidTextPatch(patch, `产品 ${productId}`)
+  if (Object.keys(patch).length === 0) {
+    return { productId, skipped: true, reason: '没有填写任何字段', appliedFields: [] }
+  }
+
+  assertCleanupEvidencePresent(
+    entry,
+    PRODUCT_PROFILE_CURRENT_EVIDENCE_KEYS,
+    PRODUCT_PROFILE_CONTEXT_EVIDENCE_KEYS,
+    `产品 ${productId}`,
+  )
+  assertValidProductProfilePatch(patch, productId)
+  assertOnlyMissingFieldsArePatched(
+    entry.current ?? {},
+    patch,
+    REQUIRED_PRODUCT_PROFILE_KEYS,
+    `产品 ${productId}`,
+  )
+
+  const nextValues = {
+    productName: entry.current?.productName,
+    productCategory: entry.current?.productCategory,
+    productDevelopmentKind: entry.current?.productDevelopmentKind,
+    ...patch,
+  }
+  const missingFields = resolveProductProfileMissingFields(nextValues)
+  if (missingFields.length > 0 && !hasExplicitIncompleteApproval(entry)) {
+    throw new Error(
+      `产品 ${productId} 静态校验后仍未补齐：${missingFields.join(', ')}。如确需分阶段清洗，计划项必须设置 allowIncomplete=true 且填写 incompleteReason。`,
+    )
+  }
+  assertValidIncompleteApproval(entry, `产品 ${productId}`)
+
+  return { productId, appliedFields: Object.keys(patch), missingFields }
+}
+
+function validateQualityDecisionRepairPlanEntry(entry) {
+  const id = readText(entry.id)
+  if (!id) {
+    throw new Error('qualityDecisionRepairs 中存在缺少 id 的修复项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, QUALITY_DECISION_REPAIR_FILL_KEYS, `质量决策 ${id}`)
+  const patch = pickTextPatch(fill, QUALITY_DECISION_REPAIR_FILL_KEYS)
+  assertValidTextPatch(patch, `质量决策 ${id}`)
+  if (Object.keys(patch).length === 0) {
+    return { id, skipped: true, reason: '没有填写任何字段', appliedFields: [] }
+  }
+
+  assertCleanupEvidencePresent(
+    entry,
+    QUALITY_DECISION_REPAIR_CURRENT_EVIDENCE_KEYS,
+    QUALITY_DECISION_REPAIR_CONTEXT_EVIDENCE_KEYS,
+    `质量决策 ${id}`,
+  )
+
+  const invalidOverwriteKeys = Object.keys(patch).filter((key) =>
+    !isDisallowedCleanupTextValue(entry.current?.[key]),
+  )
+  if (invalidOverwriteKeys.length > 0) {
+    throw new Error(
+      `质量决策 ${id} 只能修正当前为占位值的审计字段，不能覆盖真实审计内容：${invalidOverwriteKeys.join(', ')}。`,
+    )
+  }
+
+  return { id, appliedFields: Object.keys(patch) }
+}
+
+function getPreSkuFormalizationMismatchActions(plan) {
+  const rows = Array.isArray(plan?.preSkuFormalizationMismatches)
+    ? plan.preSkuFormalizationMismatches
+    : []
+  return rows
+    .filter((row) => {
+      const action = row?.action && typeof row.action === 'object' ? row.action : row
+      return readText(action.decision).length > 0
+    })
+    .map((row) => ({
+      preSkuId: readText(row.preSkuId),
+      draftGroupCode: readText(row.draftGroupCode),
+      mismatchReason: readText(row.mismatchReason),
+      decision: readText(row.action?.decision ?? row.decision),
+    }))
+}
+
+function assertNoPreSkuFormalizationMismatchActions(plan) {
+  const actions = getPreSkuFormalizationMismatchActions(plan)
+  if (actions.length === 0) return actions
+
+  const preview = actions
+    .slice(0, 5)
+    .map((action) =>
+      [
+        action.draftGroupCode || 'unknown-draft-group',
+        action.preSkuId || 'unknown-pre-sku',
+        action.mismatchReason || 'unknown-reason',
+      ].join('/'),
+    )
+    .join(', ')
+  throw new Error(
+    `准 SKU 正式化生命周期错位不能由通用主数据清洗脚本处理，请走专用服务/计划：${preview}`,
+  )
+}
+
+function validateCleanupPlanForApply(plan) {
+  if (plan.confirmation !== APPLY_CONFIRMATION) {
+    throw new Error(`静态校验要求计划文件设置 confirmation="${APPLY_CONFIRMATION}"。`)
+  }
+  if (!readText(plan.confirmedBy)) {
+    throw new Error('静态校验要求计划文件填写 confirmedBy，记录业务确认人。')
+  }
+  assertValidAuditText(plan.confirmedBy, '清洗计划 confirmedBy')
+  assertNoPreSkuFormalizationMismatchActions(plan)
+
+  const skuItems = (plan.skuItems ?? []).map(validateSkuItemCleanupPlanEntry)
+  const productProfiles = (plan.productProfiles ?? []).map(validateProductProfileCleanupPlanEntry)
+  const qualityDecisionRepairs = (plan.qualityDecisionRepairs ?? [])
+    .map(validateQualityDecisionRepairPlanEntry)
+  const skuAppliedFields = skuItems.reduce(
+    (total, item) => total + (item.appliedFields?.length ?? 0),
+    0,
+  )
+  const productProfileAppliedFields = productProfiles.reduce(
+    (total, item) => total + (item.appliedFields?.length ?? 0),
+    0,
+  )
+  const qualityDecisionRepairAppliedFields = qualityDecisionRepairs.reduce(
+    (total, item) => total + (item.appliedFields?.length ?? 0),
+    0,
+  )
+  const appliedFieldCount =
+    skuAppliedFields + productProfileAppliedFields + qualityDecisionRepairAppliedFields
+  if (appliedFieldCount === 0) {
+    throw new Error('静态校验要求计划至少补齐一个字段；当前计划没有任何有效清洗内容。')
+  }
+
+  return {
+    mode: 'validate-plan',
+    valid: true,
+    committed: false,
+    requiresDatabase: false,
+    confirmedBy: readText(plan.confirmedBy),
+    skuItems: {
+      total: skuItems.length,
+      actionableRows: skuItems.filter((item) => !item.skipped).length,
+      appliedFields: skuAppliedFields,
+      approvedIncompleteRows: countApprovedIncompleteRows(
+        skuItems,
+        'missingRequiredFields',
+      ),
+      remainingMissingFieldCounts: countRemainingMissingFields(
+        skuItems,
+        'missingRequiredFields',
+      ),
+    },
+    productProfiles: {
+      total: productProfiles.length,
+      actionableRows: productProfiles.filter((item) => !item.skipped).length,
+      appliedFields: productProfileAppliedFields,
+      approvedIncompleteRows: countApprovedIncompleteRows(
+        productProfiles,
+        'missingFields',
+      ),
+      remainingMissingFieldCounts: countRemainingMissingFields(
+        productProfiles,
+        'missingFields',
+      ),
+    },
+    qualityDecisionRepairs: {
+      total: qualityDecisionRepairs.length,
+      actionableRows: qualityDecisionRepairs.filter((item) => !item.skipped).length,
+      appliedFields: qualityDecisionRepairAppliedFields,
+    },
+  }
+}
+
+function assertExpectedCurrentMatches(actualValues, expectedValues, keys, scope) {
+  if (!expectedValues || typeof expectedValues !== 'object' || Array.isArray(expectedValues)) return
+  const normalize = (value) => {
+    if (Array.isArray(value)) return JSON.stringify(value.map((item) => readText(item)))
+    return readText(value)
+  }
+  const changedKeys = keys.filter((key) => {
+    if (!Object.prototype.hasOwnProperty.call(expectedValues, key)) return false
+    return normalize(actualValues[key]) !== normalize(expectedValues[key])
+  })
+  if (changedKeys.length > 0) {
+    throw new Error(
+      `${scope} 的当前数据已经变化，清洗计划已过期，请重新导出模板：${changedKeys.join(', ')}。`,
+    )
+  }
+}
+
+function assertCleanupEvidencePresent(entry, currentKeys, contextKeys, scope) {
+  if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+    throw new Error(`${scope} 清洗计划格式无效。`)
+  }
+
+  const current = entry.current
+  if (!current || typeof current !== 'object' || Array.isArray(current)) {
+    throw new Error(`${scope} 真正落库必须携带模板导出的 current 当前值证据。`)
+  }
+
+  const missingCurrentKeys = currentKeys.filter((key) => !Object.prototype.hasOwnProperty.call(current, key))
+  if (missingCurrentKeys.length > 0) {
+    throw new Error(`${scope} current 缺少当前值证据字段：${missingCurrentKeys.join(', ')}。`)
+  }
+
+  const missingContextKeys = contextKeys.filter((key) => readText(entry[key]).length === 0)
+  if (missingContextKeys.length > 0) {
+    throw new Error(`${scope} 缺少模板上下文字段：${missingContextKeys.join(', ')}。`)
+  }
+}
+
+function countAppliedFields(results) {
+  return results.reduce((total, result) => total + (result.appliedFields?.length ?? 0), 0)
+}
+
+function countRemainingMissingFields(results, fieldName) {
+  const counts = {}
+  for (const result of results) {
+    const fields = Array.isArray(result?.[fieldName]) ? result[fieldName] : []
+    for (const field of fields) {
+      const key = readText(field) || 'UNKNOWN'
+      counts[key] = (counts[key] || 0) + 1
+    }
+  }
+  return counts
+}
+
+function countApprovedIncompleteRows(results, fieldName) {
+  return results.filter((result) => {
+    const fields = Array.isArray(result?.[fieldName]) ? result[fieldName] : []
+    return !result?.skipped && fields.length > 0
+  }).length
+}
+
+function buildResultSummary(skuResults, productProfileResults, qualityDecisionRepairResults = []) {
+  return {
+    skuItems: {
+      total: skuResults.length,
+      appliedRows: skuResults.filter((result) => !result.skipped).length,
+      skippedRows: skuResults.filter((result) => result.skipped).length,
+      appliedFields: countAppliedFields(skuResults),
+      approvedIncompleteRows: countApprovedIncompleteRows(
+        skuResults,
+        'missingRequiredFields',
+      ),
+      remainingMissingFieldCounts: countRemainingMissingFields(
+        skuResults,
+        'missingRequiredFields',
+      ),
+    },
+    productProfiles: {
+      total: productProfileResults.length,
+      appliedRows: productProfileResults.filter((result) => !result.skipped).length,
+      skippedRows: productProfileResults.filter((result) => result.skipped).length,
+      appliedFields: countAppliedFields(productProfileResults),
+      approvedIncompleteRows: countApprovedIncompleteRows(
+        productProfileResults,
+        'missingFields',
+      ),
+      remainingMissingFieldCounts: countRemainingMissingFields(
+        productProfileResults,
+        'missingFields',
+      ),
+    },
+    qualityDecisionRepairs: {
+      total: qualityDecisionRepairResults.length,
+      appliedRows: qualityDecisionRepairResults.filter((result) => !result.skipped).length,
+      skippedRows: qualityDecisionRepairResults.filter((result) => result.skipped).length,
+      appliedFields: countAppliedFields(qualityDecisionRepairResults),
+    },
+  }
+}
+
+async function assertPostCleanupMasterDataTruth(
+  client,
+  mode,
+  appliedMigrations,
+  buildReportImpl = buildReport,
+) {
+  const report = await buildReportImpl(client, mode, appliedMigrations)
+  assertNoMasterDataTruthDrift(report)
+  const qualityDecisionRisks = report.masterDataQualityDecisions || {}
+  const qualityDecisionPlaceholderRisk =
+    Number(qualityDecisionRisks.placeholderReasonRisk ?? 0) +
+    Number(qualityDecisionRisks.placeholderDecidedByRisk ?? 0) +
+    Number(qualityDecisionRisks.placeholderResolvedByRisk ?? 0)
+  if (qualityDecisionPlaceholderRisk > 0) {
+    throw new Error('主数据质量决策仍存在占位审计文本，详见 masterDataQualityDecisions。')
+  }
+  return {
+    payloadSyncDiffCount: report.payloadSyncDiffCount,
+    productSkuProfileSnapshotDiffCount: report.productSkuProfileSnapshotDiffCount,
+    preSkuBasicInfoSnapshotDiffCount: report.preSkuBasicInfoSnapshotDiffCount,
+    nonIntegratedProductProfilePayloadDiffCount:
+      report.nonIntegratedProductProfilePayloadDiffCount,
+    nonIntegratedProductStockSourcePayloadDiffCount:
+      report.nonIntegratedProductStockSourcePayloadDiffCount,
+    duplicateSkuCodeGroups: report.duplicateSkuCodeGroups,
+    duplicateBarcodeGroups: report.duplicateBarcodeGroups,
+    masterDataQualityDecisionPlaceholderRisk: qualityDecisionPlaceholderRisk,
+  }
+}
+
+function resolveSkuMissingFields(values) {
+  return [
+    ['skuCode', 'sku_code'],
+    ['specName', 'spec_name'],
+    ['model', 'model'],
+  ]
+    .filter(([key]) => readText(values[key]).length === 0)
+    .map(([, missingField]) => missingField)
+}
+
+function resolveProductProfileMissingFields(values) {
+  return REQUIRED_PRODUCT_PROFILE_KEYS.filter((key) => readText(values[key]).length === 0)
+}
+
+function updateSkuItemPayload(payload, skuItemId, patch) {
+  const nextPayload = payload && typeof payload === 'object' && !Array.isArray(payload)
+    ? { ...payload }
+    : {}
+  const skuItems = Array.isArray(nextPayload.skuItems) ? nextPayload.skuItems : []
+
+  nextPayload.skuItems = skuItems.map((item) => {
+    if (!item || typeof item !== 'object' || Array.isArray(item)) return item
+    if (readText(item.id) !== skuItemId) return item
+    return { ...item, ...patch }
+  })
+
+  return nextPayload
+}
+
+function updateProductProfilePayload(payload, patch) {
+  const nextPayload = payload && typeof payload === 'object' && !Array.isArray(payload)
+    ? { ...payload }
+    : {}
+  const openingReference =
+    nextPayload.openingReference &&
+    typeof nextPayload.openingReference === 'object' &&
+    !Array.isArray(nextPayload.openingReference)
+      ? { ...nextPayload.openingReference }
+      : {}
+
+  if (Object.prototype.hasOwnProperty.call(patch, 'productCategory')) {
+    nextPayload.productCategory = patch.productCategory
+    openingReference.productCategory = patch.productCategory
+  }
+  if (Object.prototype.hasOwnProperty.call(patch, 'productName')) {
+    openingReference.productName = patch.productName
+  }
+  if (Object.prototype.hasOwnProperty.call(patch, 'productDevelopmentKind')) {
+    nextPayload.productDevelopmentKind = patch.productDevelopmentKind
+  }
+
+  nextPayload.openingReference = openingReference
+  return nextPayload
+}
+
+async function getCleanupHealthSummary(client) {
+  const result = await client.query(`
+    SELECT
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedSkuItem" sku
+        JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+        WHERE product."deletedAt" IS NULL
+          AND sku."dataQualityStatus" = 'INCOMPLETE'
+      ) AS incomplete_sku_items,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedSkuItem" sku
+        JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+        WHERE product."deletedAt" IS NULL
+      ) AS sku_items_total,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedSkuItem" sku
+        JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+        WHERE product."deletedAt" IS NULL
+          AND sku."dataQualityStatus" = 'READY'
+      ) AS sku_items_ready,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedProduct" product
+        JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+        WHERE product."deletedAt" IS NULL
+          AND (
+            NULLIF(btrim(profile."productName"), '') IS NULL
+            OR NULLIF(btrim(profile."productCategory"), '') IS NULL
+            OR NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL
+          )
+      ) AS incomplete_product_profiles
+      ,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedProduct" product
+        JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+        WHERE product."deletedAt" IS NULL
+      ) AS product_profiles_total,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedProduct" product
+        JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+        WHERE product."deletedAt" IS NULL
+          AND NULLIF(btrim(profile."productName"), '') IS NULL
+      ) AS product_profiles_missing_product_name,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedProduct" product
+        JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+        WHERE product."deletedAt" IS NULL
+          AND NULLIF(btrim(profile."productCategory"), '') IS NULL
+      ) AS product_profiles_missing_product_category,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNonIntegratedProduct" product
+        JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+        WHERE product."deletedAt" IS NULL
+          AND NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL
+      ) AS product_profiles_missing_development_kind
+  `)
+  const row = result.rows[0]
+  return {
+    incompleteSkuItems: row.incomplete_sku_items,
+    incompleteProductProfiles: row.incomplete_product_profiles,
+    structuredSkuItems: {
+      total: row.sku_items_total,
+      ready: row.sku_items_ready,
+      incomplete: row.incomplete_sku_items,
+    },
+    nonIntegratedProductProfiles: {
+      total: row.product_profiles_total,
+      missing_product_name: row.product_profiles_missing_product_name,
+      missing_product_category: row.product_profiles_missing_product_category,
+      missing_development_kind: row.product_profiles_missing_development_kind,
+    },
+  }
+}
+
+async function assertUniqueSkuItemValue(client, id, fieldName, value) {
+  if (!['skuCode', 'barcode'].includes(fieldName) || !readText(value)) return
+  const normalizedValue = readText(value).toUpperCase()
+
+  const result = await client.query(`
+    SELECT sku."id", product."spu"
+    FROM "IntakeNonIntegratedSkuItem" sku
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+    WHERE product."deletedAt" IS NULL
+      AND sku."id" <> $1
+      AND upper(btrim(sku."${fieldName}")) = $2
+    LIMIT 1
+  `, [id, normalizedValue])
+
+  if (result.rowCount > 0) {
+    const conflict = result.rows[0]
+    throw new Error(
+      `SKU 明细 ${id} 的 ${fieldName} 与 ${conflict.spu}/${conflict.id} 冲突：${value}。`,
+    )
+  }
+}
+
+async function buildCleanupTemplate(client) {
+  const incompleteSkuItems = await client.query(`
+    SELECT
+      sku."id",
+      sku."productId",
+      product."spu",
+      sku."skuItemId",
+      sku."skuCode",
+      sku."specName",
+      sku."model",
+      sku."barcode",
+      sku."missingRequiredFields"
+    FROM "IntakeNonIntegratedSkuItem" sku
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+    WHERE product."deletedAt" IS NULL
+      AND sku."dataQualityStatus" = 'INCOMPLETE'
+    ORDER BY product."spu", sku."sortOrder", sku."id"
+  `)
+
+  const productProfiles = await client.query(`
+    SELECT
+      product."id" AS "productId",
+      product."spu",
+      profile."productName",
+      profile."productCategory",
+      profile."productDevelopmentKind",
+      ARRAY_REMOVE(ARRAY[
+        CASE WHEN NULLIF(btrim(profile."productName"), '') IS NULL THEN 'productName' END,
+        CASE WHEN NULLIF(btrim(profile."productCategory"), '') IS NULL THEN 'productCategory' END,
+        CASE WHEN NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL THEN 'productDevelopmentKind' END
+      ], NULL) AS "missingFields"
+    FROM "IntakeNonIntegratedProduct" product
+    JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+    WHERE product."deletedAt" IS NULL
+      AND (
+        NULLIF(btrim(profile."productName"), '') IS NULL
+        OR NULLIF(btrim(profile."productCategory"), '') IS NULL
+        OR NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL
+      )
+    ORDER BY product."spu", product."id"
+  `)
+  const qualityDecisionRepairs = await client.query(`
+    WITH placeholder_tokens AS (
+      SELECT unnest(ARRAY[
+        'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+        'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+        '默认', '默认值', '暂无'
+      ]) AS token
+    ),
+    decision_rows AS (
+      SELECT
+        "id",
+        "targetType",
+        "targetId",
+        "targetBusinessKey",
+        "status",
+        "reason",
+        "decidedBy",
+        "resolvedBy",
+        ARRAY_REMOVE(ARRAY[
+          CASE WHEN NULLIF(btrim(COALESCE("reason", '')), '') IS NOT NULL
+             AND (
+               lower(regexp_replace(btrim("reason"), '\\s+', '', 'g')) IN (SELECT token FROM placeholder_tokens)
+               OR regexp_replace(btrim("reason"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+             )
+            THEN 'reason' END,
+          CASE WHEN NULLIF(btrim(COALESCE("decidedBy", '')), '') IS NOT NULL
+             AND (
+               lower(regexp_replace(btrim("decidedBy"), '\\s+', '', 'g')) IN (SELECT token FROM placeholder_tokens)
+               OR regexp_replace(btrim("decidedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+             )
+            THEN 'decidedBy' END,
+          CASE WHEN NULLIF(btrim(COALESCE("resolvedBy", '')), '') IS NOT NULL
+             AND (
+               lower(regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g')) IN (SELECT token FROM placeholder_tokens)
+               OR regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+             )
+            THEN 'resolvedBy' END
+        ], NULL) AS "placeholderFields"
+      FROM "MasterDataQualityDecision"
+    )
+    SELECT *
+    FROM decision_rows
+    WHERE cardinality("placeholderFields") > 0
+    ORDER BY "targetType", "targetId", "id"
+  `)
+  const preSkuFormalizationMismatches = await getPreSkuFormalizationLifecycleMismatchSamples(client)
+
+  return {
+    confirmation: '',
+    confirmedBy: '',
+    skuItems: incompleteSkuItems.rows.map((row) => ({
+      id: row.id,
+      productId: row.productId,
+      spu: row.spu,
+      skuItemId: row.skuItemId,
+      current: {
+        skuCode: row.skuCode,
+        specName: row.specName,
+        model: row.model,
+        barcode: row.barcode,
+        missingRequiredFields: row.missingRequiredFields,
+      },
+      fill: {
+        skuCode: '',
+        specName: '',
+        model: '',
+        barcode: '',
+      },
+      note: '只填写业务确认后的真实值；不要用默认值。',
+    })),
+    productProfiles: productProfiles.rows.map((row) => ({
+      productId: row.productId,
+      spu: row.spu,
+      productName: row.productName,
+      current: {
+        productName: row.productName,
+        productCategory: row.productCategory,
+        productDevelopmentKind: row.productDevelopmentKind,
+        missingFields: row.missingFields,
+      },
+      fill: {
+        productName: '',
+        productCategory: '',
+        productDevelopmentKind: '',
+      },
+      allowedProductDevelopmentKind: ['product', 'series'],
+      note: '只填写业务确认后的真实值；不要用默认值。',
+    })),
+    qualityDecisionRepairs: qualityDecisionRepairs.rows.map((row) => ({
+      id: row.id,
+      targetType: row.targetType,
+      targetId: row.targetId,
+      targetBusinessKey: row.targetBusinessKey,
+      current: {
+        reason: row.reason,
+        decidedBy: row.decidedBy,
+        resolvedBy: row.resolvedBy,
+        status: row.status,
+        placeholderFields: row.placeholderFields,
+      },
+      fill: {
+        reason: '',
+        decidedBy: '',
+        resolvedBy: '',
+      },
+      note: '只允许把 current.placeholderFields 中的占位审计文本改成真实业务确认内容。',
+    })),
+    preSkuFormalizationMismatches: preSkuFormalizationMismatches.map((row) => ({
+      ...row,
+      action: {
+        decision: '',
+        note: '这类错位不能由通用清洗脚本猜修；请先确认是撤回准 SKU 状态、补正式 SKU 关系，还是按业务作废后走专用服务/计划处理。',
+      },
+    })),
+  }
+}
+
+function hasExplicitIncompleteApproval(entry) {
+  return entry.allowIncomplete === true && readText(entry.incompleteReason).length > 0
+}
+
+async function recordMasterDataQualityDecision(client, input) {
+  const reason = readText(input.reason)
+  const decidedBy = readText(input.decidedBy)
+  if (!reason) {
+    throw new Error('记录主数据不完整决策必须填写 reason。')
+  }
+  if (!decidedBy) {
+    throw new Error('记录主数据不完整决策必须填写 decidedBy。')
+  }
+  assertValidAuditText(reason, '主数据不完整决策 reason')
+  assertValidAuditText(decidedBy, '主数据不完整决策 decidedBy')
+
+  await client.query(`
+    INSERT INTO "MasterDataQualityDecision" (
+      "id",
+      "targetType",
+      "targetId",
+      "targetBusinessKey",
+      "status",
+      "missingFields",
+      "reason",
+      "decidedBy",
+      "decidedAt",
+      "createdAt",
+      "updatedAt"
+    )
+    VALUES (
+      'mdqd_' || md5($1 || ':' || $2 || ':' || clock_timestamp()::text),
+      $1,
+      $2,
+      $3,
+      $4,
+      $5,
+      $6,
+      $7,
+      NOW(),
+      NOW(),
+      NOW()
+    )
+    ON CONFLICT ("targetType", "targetId")
+      WHERE "status" = 'APPROVED_INCOMPLETE'
+    DO UPDATE SET
+      "targetBusinessKey" = EXCLUDED."targetBusinessKey",
+      "missingFields" = EXCLUDED."missingFields",
+      "reason" = EXCLUDED."reason",
+      "decidedBy" = EXCLUDED."decidedBy",
+      "decidedAt" = NOW(),
+      "updatedAt" = NOW()
+  `, [
+    input.targetType,
+    input.targetId,
+    readText(input.targetBusinessKey),
+    QUALITY_DECISION_STATUS_APPROVED_INCOMPLETE,
+    input.missingFields,
+    reason,
+    decidedBy,
+  ])
+}
+
+async function resolveMasterDataQualityDecisions(client, input) {
+  await client.query(`
+    UPDATE "MasterDataQualityDecision"
+    SET
+      "status" = $3,
+      "resolvedBy" = $4,
+      "resolvedAt" = NOW(),
+      "updatedAt" = NOW()
+    WHERE "targetType" = $1
+      AND "targetId" = $2
+      AND "status" = $5
+  `, [
+    input.targetType,
+    input.targetId,
+    QUALITY_DECISION_STATUS_RESOLVED,
+    readText(input.resolvedBy) || CLEANUP_ACTOR_FALLBACK,
+    QUALITY_DECISION_STATUS_APPROVED_INCOMPLETE,
+  ])
+}
+
+async function applySkuItemPatch(client, entry, options = {}) {
+  const id = readText(entry.id)
+  const actor = readText(options.actor) || CLEANUP_ACTOR_FALLBACK
+  if (!id) {
+    throw new Error('skuItems 中存在缺少 id 的清洗项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, SKU_ITEM_FILL_KEYS, `SKU 明细 ${id}`)
+  const patch = normalizeSkuItemCodePatch(pickTextPatch(fill, SKU_ITEM_FILL_KEYS))
+  assertValidTextPatch(patch, `SKU 明细 ${id}`)
+  if (Object.keys(patch).length === 0) {
+    return { id, skipped: true, reason: '没有填写任何字段' }
+  }
+  if (options.requireCurrentEvidence) {
+    assertCleanupEvidencePresent(
+      entry,
+      SKU_ITEM_CURRENT_EVIDENCE_KEYS,
+      SKU_ITEM_CONTEXT_EVIDENCE_KEYS,
+      `SKU 明细 ${id}`,
+    )
+  }
+
+  const result = await client.query(`
+    SELECT
+      sku.*,
+      product."payload",
+      product."spu"
+    FROM "IntakeNonIntegratedSkuItem" sku
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+    WHERE sku."id" = $1
+      AND product."deletedAt" IS NULL
+    FOR UPDATE OF sku, product
+  `, [id])
+  const row = result.rows[0]
+  if (!row) {
+    throw new Error(`找不到可清洗的 SKU 明细：${id}`)
+  }
+  assertExpectedCurrentMatches(
+    row,
+    entry.current,
+    ['skuCode', 'specName', 'model', 'barcode', 'missingRequiredFields'],
+    `SKU 明细 ${id}`,
+  )
+  assertExpectedCurrentMatches(
+    row,
+    entry,
+    ['productId', 'spu', 'skuItemId'],
+    `SKU 明细 ${id}`,
+  )
+  assertOnlyMissingFieldsArePatched(row, patch, REQUIRED_SKU_ITEM_KEYS, `SKU 明细 ${id}`)
+  await assertUniqueSkuItemValue(client, id, 'skuCode', patch.skuCode)
+  await assertUniqueSkuItemValue(client, id, 'barcode', patch.barcode)
+
+  const nextValues = {
+    skuCode: row.skuCode,
+    specName: row.specName,
+    model: row.model,
+    barcode: row.barcode,
+    ...patch,
+  }
+  const missingRequiredFields = resolveSkuMissingFields(nextValues)
+  const dataQualityStatus = missingRequiredFields.length === 0 ? 'READY' : 'INCOMPLETE'
+  if (options.requireComplete && dataQualityStatus !== 'READY' && !hasExplicitIncompleteApproval(entry)) {
+    throw new Error(
+      `SKU 明细 ${id} 清洗后仍未补齐：${missingRequiredFields.join(', ')}。如确需分阶段清洗，计划项必须设置 allowIncomplete=true 且填写 incompleteReason。`,
+    )
+  }
+  assertValidIncompleteApproval(entry, `SKU 明细 ${id}`)
+
+  await client.query(`
+    UPDATE "IntakeNonIntegratedSkuItem"
+    SET
+      "skuCode" = $2,
+      "specName" = $3,
+      "model" = $4,
+      "barcode" = $5,
+      "dataQualityStatus" = $6::"IntakeNonIntegratedSkuDataQualityStatus",
+      "missingRequiredFields" = $7,
+      "updatedAt" = NOW()
+    WHERE "id" = $1
+  `, [
+    id,
+    nextValues.skuCode,
+    nextValues.specName,
+    nextValues.model,
+    nextValues.barcode,
+    dataQualityStatus,
+    missingRequiredFields,
+  ])
+
+  const nextPayload = updateSkuItemPayload(row.payload, row.skuItemId, patch)
+  await client.query(`
+    UPDATE "IntakeNonIntegratedProduct"
+    SET "payload" = $2::jsonb,
+        "updatedBy" = $3,
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+  `, [row.productId, JSON.stringify(nextPayload), actor])
+
+  if (dataQualityStatus === 'READY') {
+    await resolveMasterDataQualityDecisions(client, {
+      targetType: QUALITY_DECISION_TARGET_SKU_ITEM,
+      targetId: id,
+      resolvedBy: actor,
+    })
+  } else if (hasExplicitIncompleteApproval(entry)) {
+    await recordMasterDataQualityDecision(client, {
+      targetType: QUALITY_DECISION_TARGET_SKU_ITEM,
+      targetId: id,
+      targetBusinessKey: `${row.spu}/${row.skuItemId}`,
+      missingFields: missingRequiredFields,
+      reason: entry.incompleteReason,
+      decidedBy: actor,
+    })
+  }
+
+  return {
+    id,
+    spu: row.spu,
+    dataQualityStatus,
+    missingRequiredFields,
+    appliedFields: Object.keys(patch),
+  }
+}
+
+async function applyProductProfilePatch(client, entry, options = {}) {
+  const productId = readText(entry.productId)
+  const actor = readText(options.actor) || CLEANUP_ACTOR_FALLBACK
+  if (!productId) {
+    throw new Error('productProfiles 中存在缺少 productId 的清洗项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, PRODUCT_PROFILE_FILL_KEYS, `产品 ${productId}`)
+  const patch = pickTextPatch(fill, PRODUCT_PROFILE_FILL_KEYS)
+  assertValidTextPatch(patch, `产品 ${productId}`)
+  if (Object.keys(patch).length === 0) {
+    return { productId, skipped: true, reason: '没有填写任何字段' }
+  }
+  if (options.requireCurrentEvidence) {
+    assertCleanupEvidencePresent(
+      entry,
+      PRODUCT_PROFILE_CURRENT_EVIDENCE_KEYS,
+      PRODUCT_PROFILE_CONTEXT_EVIDENCE_KEYS,
+      `产品 ${productId}`,
+    )
+  }
+  assertValidProductProfilePatch(patch, productId)
+
+  const result = await client.query(`
+    SELECT
+      product."id",
+      product."spu",
+      product."payload",
+      profile."productName",
+      profile."productCategory",
+      profile."productDevelopmentKind"
+    FROM "IntakeNonIntegratedProduct" product
+    JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+    WHERE product."id" = $1
+      AND product."deletedAt" IS NULL
+    FOR UPDATE OF product, profile
+  `, [productId])
+  const row = result.rows[0]
+  if (!row) {
+    throw new Error(`找不到可清洗的非集成产品 profile：${productId}`)
+  }
+  assertExpectedCurrentMatches(
+    row,
+    entry.current,
+    PRODUCT_PROFILE_FILL_KEYS,
+    `产品 ${productId}`,
+  )
+  assertExpectedCurrentMatches(row, entry, ['spu'], `产品 ${productId}`)
+  assertOnlyMissingFieldsArePatched(row, patch, REQUIRED_PRODUCT_PROFILE_KEYS, `产品 ${productId}`)
+  const nextProfileValues = {
+    productName: row.productName,
+    productCategory: row.productCategory,
+    productDevelopmentKind: row.productDevelopmentKind,
+    ...patch,
+  }
+  const missingRequiredFields = resolveProductProfileMissingFields(nextProfileValues)
+  if (options.requireComplete && missingRequiredFields.length > 0 && !hasExplicitIncompleteApproval(entry)) {
+    throw new Error(
+      `产品 ${productId} 清洗后仍未补齐：${missingRequiredFields.join(', ')}。如确需分阶段清洗，计划项必须设置 allowIncomplete=true 且填写 incompleteReason。`,
+    )
+  }
+  assertValidIncompleteApproval(entry, `产品 ${productId}`)
+
+  const assignments = []
+  const values = [productId]
+  Object.entries(patch).forEach(([key, value]) => {
+    values.push(value)
+    assignments.push(`"${key}" = $${values.length}`)
+  })
+  assignments.push('"source" = \'MANUAL_CLEANUP\'')
+  assignments.push('"syncedAt" = NOW()')
+  assignments.push('"updatedAt" = NOW()')
+
+  await client.query(`
+    UPDATE "IntakeNonIntegratedProductProfile"
+    SET ${assignments.join(', ')}
+    WHERE "productId" = $1
+  `, values)
+
+  const nextPayload = updateProductProfilePayload(row.payload, patch)
+  await client.query(`
+    UPDATE "IntakeNonIntegratedProduct"
+    SET "payload" = $2::jsonb,
+        "updatedBy" = $3,
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+  `, [row.id, JSON.stringify(nextPayload), actor])
+
+  if (missingRequiredFields.length === 0) {
+    await resolveMasterDataQualityDecisions(client, {
+      targetType: QUALITY_DECISION_TARGET_PRODUCT_PROFILE,
+      targetId: productId,
+      resolvedBy: actor,
+    })
+  } else if (hasExplicitIncompleteApproval(entry)) {
+    await recordMasterDataQualityDecision(client, {
+      targetType: QUALITY_DECISION_TARGET_PRODUCT_PROFILE,
+      targetId: productId,
+      targetBusinessKey: row.spu,
+      missingFields: missingRequiredFields,
+      reason: entry.incompleteReason,
+      decidedBy: actor,
+    })
+  }
+
+  return {
+    productId,
+    spu: row.spu,
+    missingFields: missingRequiredFields,
+    appliedFields: Object.keys(patch),
+  }
+}
+
+async function applyQualityDecisionRepairPatch(client, entry) {
+  const id = readText(entry.id)
+  if (!id) {
+    throw new Error('qualityDecisionRepairs 中存在缺少 id 的修复项。')
+  }
+
+  const fill = entry.fill && typeof entry.fill === 'object' ? entry.fill : entry
+  assertNoUnknownFillKeys(fill, QUALITY_DECISION_REPAIR_FILL_KEYS, `质量决策 ${id}`)
+  const patch = pickTextPatch(fill, QUALITY_DECISION_REPAIR_FILL_KEYS)
+  assertValidTextPatch(patch, `质量决策 ${id}`)
+  if (Object.keys(patch).length === 0) {
+    return { id, skipped: true, reason: '没有填写任何字段', appliedFields: [] }
+  }
+  if (entry.current) {
+    assertCleanupEvidencePresent(
+      entry,
+      QUALITY_DECISION_REPAIR_CURRENT_EVIDENCE_KEYS,
+      QUALITY_DECISION_REPAIR_CONTEXT_EVIDENCE_KEYS,
+      `质量决策 ${id}`,
+    )
+  }
+
+  const result = await client.query(`
+    SELECT
+      "id",
+      "targetType",
+      "targetId",
+      "targetBusinessKey",
+      "status",
+      "reason",
+      "decidedBy",
+      "resolvedBy"
+    FROM "MasterDataQualityDecision"
+    WHERE "id" = $1
+    FOR UPDATE
+  `, [id])
+  const row = result.rows[0]
+  if (!row) {
+    throw new Error(`找不到可修复的主数据质量决策：${id}`)
+  }
+  assertExpectedCurrentMatches(
+    row,
+    entry.current,
+    ['reason', 'decidedBy', 'resolvedBy', 'status'],
+    `质量决策 ${id}`,
+  )
+  assertExpectedCurrentMatches(
+    row,
+    entry,
+    ['targetType', 'targetId', 'targetBusinessKey'],
+    `质量决策 ${id}`,
+  )
+
+  const invalidOverwriteKeys = Object.keys(patch).filter((key) =>
+    !isDisallowedCleanupTextValue(row[key]),
+  )
+  if (invalidOverwriteKeys.length > 0) {
+    throw new Error(
+      `质量决策 ${id} 只能修正当前为占位值的审计字段，不能覆盖真实审计内容：${invalidOverwriteKeys.join(', ')}。`,
+    )
+  }
+
+  const assignments = []
+  const values = [id]
+  Object.entries(patch).forEach(([key, value]) => {
+    values.push(value)
+    assignments.push(`"${key}" = $${values.length}`)
+  })
+  assignments.push('"updatedAt" = NOW()')
+  await client.query(`
+    UPDATE "MasterDataQualityDecision"
+    SET ${assignments.join(', ')}
+    WHERE "id" = $1
+  `, values)
+
+  return {
+    id,
+    targetType: row.targetType,
+    targetId: row.targetId,
+    appliedFields: Object.keys(patch),
+  }
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2))
+  if (args.validatePlan) {
+    const plan = readPlan(args.planPath)
+    const validation = validateCleanupPlanForApply(plan)
+    const outputFile = args.outputPath ? writeJsonReport(args.outputPath, validation) : ''
+    console.log(JSON.stringify({ ...validation, outputFile }, null, 2))
+    return
+  }
+
+  const databaseUrl = loadDatabaseUrl()
+  if (!databaseUrl) {
+    throw new Error('DATABASE_URL 未配置，无法执行主数据清洗。')
+  }
+  const executionEvidence = assertApplyExecutionEvidence(args, { databaseUrl })
+
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+
+  try {
+    const migrationReadiness = await getRequiredMigrationReadiness(client)
+    if (!migrationReadiness.fullyReady && (args.apply || !args.allowMigrationDryRun)) {
+      console.log(JSON.stringify({
+        mode: args.apply ? 'apply-migration-status-blocked' : 'cleanup-migration-status-blocked',
+        migrationApplicationStatus: migrationReadiness,
+        committed: false,
+        rolledBack: true,
+      }, null, 2))
+      throw new Error(
+        `当前数据库治理迁移尚未全部真实落库，清洗入口默认拒绝继续：${formatPendingMigrationPaths(migrationReadiness)}。如只是本地调试模板或 dry-run，可追加 --allow-migration-dry-run。`,
+      )
+    }
+
+    await client.query('BEGIN')
+    const appliedMigrations = await applyMissingMigrationFiles(client)
+    const migrationReplay = classifyAppliedMigrationPaths(appliedMigrations)
+    const migrationApplicationStatus = getMigrationApplicationStatus(
+      appliedMigrations,
+      migrationReplay,
+    )
+    if (args.apply && migrationApplicationStatus.appliedMigrationCount > 0) {
+      await client.query('ROLLBACK')
+      console.log(JSON.stringify({
+        mode: resolveMigrationReplayMode('apply', migrationReplay),
+        appliedMigrations,
+        migrationReplay,
+        migrationApplicationStatus,
+        committed: false,
+        rolledBack: true,
+      }, null, 2))
+      assertNoApplyWithPendingMigrations(args, appliedMigrations, migrationReplay)
+    }
+    assertNoApplyWithPendingMigrations(args, appliedMigrations, migrationReplay)
+
+    if (args.template) {
+      const template = await buildCleanupTemplate(client)
+      const currentSummary = await getCleanupHealthSummary(client)
+      await client.query('ROLLBACK')
+      const templateReport = {
+        mode: resolveMigrationReplayMode('template', migrationReplay),
+        appliedMigrations,
+        migrationReplay,
+        migrationApplicationStatus,
+        currentSummary,
+        rolledBack: true,
+        ...template,
+      }
+      const outputFile = args.outputPath ? writeJsonReport(args.outputPath, templateReport) : ''
+      console.log(JSON.stringify({
+        ...templateReport,
+        outputFile,
+      }, null, 2))
+      return
+    }
+
+    const plan = readPlan(args.planPath)
+    assertNoPreSkuFormalizationMismatchActions(plan)
+    if (args.apply && plan.confirmation !== APPLY_CONFIRMATION) {
+      throw new Error(`真正落库必须在计划文件中设置 confirmation="${APPLY_CONFIRMATION}"。`)
+    }
+    if (args.apply && !readText(plan.confirmedBy)) {
+      throw new Error('真正落库必须在计划文件中填写 confirmedBy，记录业务确认人。')
+    }
+    if (args.apply) {
+      assertValidAuditText(plan.confirmedBy, '清洗计划 confirmedBy')
+    }
+    const cleanupActor = readText(plan.confirmedBy) || CLEANUP_ACTOR_FALLBACK
+
+    const skuResults = []
+    const productProfileResults = []
+    const qualityDecisionRepairResults = []
+    const beforeSummary = await getCleanupHealthSummary(client)
+
+    for (const entry of plan.skuItems) {
+      skuResults.push(await applySkuItemPatch(client, entry, {
+        requireComplete: args.apply,
+        requireCurrentEvidence: args.apply,
+        actor: cleanupActor,
+      }))
+    }
+    for (const entry of plan.productProfiles) {
+      productProfileResults.push(await applyProductProfilePatch(client, entry, {
+        requireComplete: args.apply,
+        requireCurrentEvidence: args.apply,
+        actor: cleanupActor,
+      }))
+    }
+    for (const entry of plan.qualityDecisionRepairs) {
+      qualityDecisionRepairResults.push(await applyQualityDecisionRepairPatch(client, entry))
+    }
+    const resultSummary = buildResultSummary(
+      skuResults,
+      productProfileResults,
+      qualityDecisionRepairResults,
+    )
+    const appliedFieldCount =
+      resultSummary.skuItems.appliedFields +
+      resultSummary.productProfiles.appliedFields +
+      resultSummary.qualityDecisionRepairs.appliedFields
+    if (args.apply && appliedFieldCount === 0) {
+      throw new Error('真正落库必须至少补齐一个字段；当前计划没有任何有效清洗内容。')
+    }
+    const afterSummary = await getCleanupHealthSummary(client)
+    const postCleanupTruth = await assertPostCleanupMasterDataTruth(
+      client,
+      args.apply ? 'post-cleanup-apply' : 'post-cleanup-dry-run',
+      appliedMigrations,
+    )
+
+    if (args.apply) {
+      await client.query('COMMIT')
+    } else {
+      await client.query('ROLLBACK')
+    }
+
+    console.log(JSON.stringify({
+      mode: args.apply ? 'apply' : 'dry-run',
+      appliedMigrations,
+      migrationReplay,
+      migrationApplicationStatus,
+      committed: args.apply,
+      rolledBack: !args.apply,
+      beforeSummary,
+      afterSummary,
+      postCleanupTruth,
+      executionEvidence: args.apply ? executionEvidence : null,
+      resultSummary,
+      confirmedBy: args.apply ? cleanupActor : '',
+      skuResults,
+      productProfileResults,
+      qualityDecisionRepairResults,
+    }, null, 2))
+  } catch (error) {
+    await client.query('ROLLBACK').catch(() => undefined)
+    throw error
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  APPLY_CONFIRMATION,
+  CLEANUP_ACTOR_FALLBACK,
+  QUALITY_DECISION_TARGET_SKU_ITEM,
+  QUALITY_DECISION_TARGET_PRODUCT_PROFILE,
+  REQUIRED_MIGRATIONS,
+  SKU_ITEM_FILL_KEYS,
+  PRODUCT_PROFILE_FILL_KEYS,
+  parseArgs,
+  writeJsonReport,
+  assertNoApplyWithPendingMigrations,
+  assertApplyExecutionEvidence,
+  cleanupDatabaseIdentity,
+  getBackupFingerprint,
+  resolveMigrationReplayMode,
+  readPlan,
+  readText,
+  assertNoUnknownCleanupPlanTopLevelKeys,
+  pickTextPatch,
+  assertNoUnknownFillKeys,
+  assertOnlyMissingFieldsArePatched,
+  assertExpectedCurrentMatches,
+  assertCleanupEvidencePresent,
+  assertValidProductProfilePatch,
+  assertValidTextPatch,
+  assertValidAuditText,
+  assertValidIncompleteApproval,
+  validateCleanupPlanForApply,
+  validateQualityDecisionRepairPlanEntry,
+  getPreSkuFormalizationMismatchActions,
+  assertNoPreSkuFormalizationMismatchActions,
+  validateSkuItemCleanupPlanEntry,
+  validateProductProfileCleanupPlanEntry,
+  resolveSkuMissingFields,
+  resolveProductProfileMissingFields,
+  updateSkuItemPayload,
+  updateProductProfilePayload,
+  buildResultSummary,
+  countApprovedIncompleteRows,
+  countRemainingMissingFields,
+  assertPostCleanupMasterDataTruth,
+  recordMasterDataQualityDecision,
+  resolveMasterDataQualityDecisions,
+  applySkuItemPatch,
+  applyProductProfilePatch,
+  applyQualityDecisionRepairPatch,
+  buildCleanupTemplate,
+}
diff --git a/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js b/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
new file mode 100644
index 00000000..b36f6455
--- /dev/null
+++ b/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
@@ -0,0 +1,316 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const path = require('node:path')
+const { Pool } = require('pg')
+const { loadDatabaseUrl, describeDatabaseUrl, getDatabaseIdentity } = require('./diagnose-prisma-migration-baseline')
+const {
+  applyMissingMigrationFiles,
+  classifyAppliedMigrationPaths,
+  validateRequiredMigrationCatalog,
+} = require('./master-data-required-migrations')
+const {
+  getRequiredMigrationReadiness,
+} = require('./verify-master-data-foundation')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const CONFIRM_TOKEN = 'apply-master-data-foundation-migrations'
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    apply: false,
+    confirm: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      options.apply = true
+      continue
+    }
+    if (arg.startsWith('--confirm=')) {
+      options.confirm = arg.slice('--confirm='.length)
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-database-identity <identity>。')
+      }
+      options.expectedDatabaseIdentity = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      options.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      }
+      options.expectedBackupSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      options.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function migrationHistoryReady(migrationHistory = {}) {
+  return (
+    migrationHistory.tableExists === true &&
+    migrationHistory.unfinishedMigrationRows === 0 &&
+    migrationHistory.rolledBackMigrationRows === 0
+  )
+}
+
+function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
+  const rawPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    return { provided: false, path: '', exists: false, sha256: '' }
+  }
+  const absolutePath = path.resolve(rootDir, rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    return { provided: true, path: absolutePath, exists: false, sha256: '' }
+  }
+  const bytes = fs.readFileSync(absolutePath)
+  return {
+    provided: true,
+    path: absolutePath,
+    exists: true,
+    sizeBytes: bytes.length,
+    sha256: crypto.createHash('sha256').update(bytes).digest('hex'),
+  }
+}
+
+function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
+  const blockers = []
+  const failedDataChecks = Array.isArray(readiness.checks)
+    ? readiness.checks.flatMap((migration) => {
+        const targetRelationsReady = !Array.isArray(migration.targetRelations) ||
+          migration.targetRelations.every((relation) => relation.exists === true)
+        if (!targetRelationsReady || !Array.isArray(migration.dataChecks)) return []
+        return migration.dataChecks
+          .filter((check) => check.matches === false)
+          .map((check) => ({
+            path: migration.path,
+            name: check.name,
+            expectedValue: check.expectedValue,
+          }))
+      })
+    : []
+
+  if (!migrationHistoryReady(readiness.migrationHistory)) {
+    blockers.push({
+      key: 'migrationHistory.notReady',
+      message: '治理迁移/护栏真实应用前，必须先补齐 _prisma_migrations 历史且无失败/回滚记录。',
+    })
+  }
+  if (readiness.pendingStructureMigrationCount > 0) {
+    blockers.push({
+      key: 'pendingStructureMigrationCount',
+      value: readiness.pendingStructureMigrationCount,
+      message: '仍有结构迁移未就绪，不能先应用治理护栏；必须先完成结构修复和 baseline resolve。',
+    })
+  }
+  if (failedDataChecks.length > 0) {
+    blockers.push({
+      key: 'dataChecks.notReady',
+      value: failedDataChecks.length,
+      message: '治理迁移应用前仍有历史数据不满足数据检查，必须先清洗真实主数据，不能靠约束迁移硬压过去。',
+      evidence: failedDataChecks,
+    })
+  }
+  if (options.apply && options.confirm !== CONFIRM_TOKEN) {
+    blockers.push({
+      key: 'confirm',
+      message: `真实执行必须显式传入 --confirm=${CONFIRM_TOKEN}。`,
+    })
+  }
+  if (options.apply && !options.expectedDatabaseIdentity) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.missing',
+      message: '治理迁移真实执行必须显式传入 --expected-database-identity，避免误连错库。',
+    })
+  } else if (
+    options.apply &&
+    options.actualDatabaseIdentity &&
+    options.expectedDatabaseIdentity !== options.actualDatabaseIdentity
+  ) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.mismatch',
+      message: '命令行指定的目标库身份和当前 DATABASE_URL 不一致，禁止应用治理迁移。',
+    })
+  }
+  if (options.apply && !options.expectedBackupSha256) {
+    blockers.push({
+      key: 'expectedBackupSha256.missing',
+      message: '治理迁移真实执行必须显式传入 --expected-backup-sha256，避免在没有确认备份的情况下写库。',
+    })
+  } else if (options.apply && options.backupFingerprint?.sha256) {
+    if (options.expectedBackupSha256 !== options.backupFingerprint.sha256) {
+      blockers.push({
+        key: 'expectedBackupSha256.mismatch',
+        message: '命令行指定的备份 sha256 和当前 DATABASE_BACKUP_FILE 不一致，禁止应用治理迁移。',
+      })
+    }
+  }
+  if (options.apply && options.backupFingerprint?.provided !== true) {
+    blockers.push({
+      key: 'backupFingerprint.missing',
+      message: '治理迁移真实执行前必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。',
+    })
+  } else if (options.apply && options.backupFingerprint?.exists !== true) {
+    blockers.push({
+      key: 'backupFingerprint.notFound',
+      message: '命令指定的数据库备份文件不存在，禁止应用治理迁移。',
+    })
+  }
+
+  return {
+    mode: 'master-data-foundation-required-migration-apply-plan',
+    dryRun: !options.apply,
+    readyToApply: options.apply === true && blockers.length === 0,
+    confirmToken: CONFIRM_TOKEN,
+    migrationHistory: readiness.migrationHistory,
+    migrationCount: readiness.migrationCount,
+    readyMigrationCount: readiness.readyMigrationCount,
+    pendingMigrationCount: readiness.pendingMigrationCount,
+    pendingStructureMigrationCount: readiness.pendingStructureMigrationCount,
+    pendingIdempotentMigrationCount: readiness.pendingIdempotentMigrationCount,
+    pendingStructureMigrationPaths: readiness.pendingStructureMigrationPaths,
+    pendingIdempotentMigrationPaths: readiness.pendingIdempotentMigrationPaths,
+    blockers,
+    actualDatabaseIdentity: options.actualDatabaseIdentity || '',
+    expectedDatabaseIdentity: options.expectedDatabaseIdentity || '',
+    backupFingerprint: options.backupFingerprint || null,
+    commands: [
+      {
+        name: 'apply-required-foundation-migrations',
+        command: `node scripts/apply-master-data-foundation-migrations.js --apply --confirm=${CONFIRM_TOKEN} --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`,
+        purpose: '在结构修复和 baseline resolve 完成后，事务性应用治理迁移、视图、约束和触发器。',
+        dangerous: true,
+      },
+      {
+        name: 'verify-readiness',
+        command: 'npm run db:verify-master-data:readiness',
+        purpose: '应用后重新验证迁移历史、结构化主数据、外部只读契约和数据库护栏。',
+        dangerous: false,
+      },
+    ],
+  }
+}
+
+async function runApply(options = parseArgs(), env = process.env) {
+  validateRequiredMigrationCatalog()
+  const databaseUrl = loadDatabaseUrl(ROOT_DIR, env)
+  const actualDatabaseIdentity = getDatabaseIdentity(databaseUrl)
+  const backupFingerprint = getBackupFingerprint(env)
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    const before = await getRequiredMigrationReadiness(client)
+    const plan = buildFoundationRequiredMigrationApplyPlan(before, {
+      ...options,
+      actualDatabaseIdentity,
+      backupFingerprint,
+    })
+    const reportBase = {
+      ...plan,
+      database: describeDatabaseUrl(databaseUrl),
+      checkedAt: new Date().toISOString(),
+      applied: null,
+      after: null,
+    }
+
+    if (!plan.readyToApply) {
+      return reportBase
+    }
+
+    await client.query('BEGIN')
+    try {
+      const appliedMigrationPaths = await applyMissingMigrationFiles(client)
+      const after = await getRequiredMigrationReadiness(client)
+      if (!after.fullyReady) {
+        throw new Error('治理迁移应用后仍未达到 fullyReady，已回滚本次事务。')
+      }
+      await client.query('COMMIT')
+      return {
+        ...reportBase,
+        applied: {
+          migrationCount: appliedMigrationPaths.length,
+          ...classifyAppliedMigrationPaths(appliedMigrationPaths),
+          migrationPaths: appliedMigrationPaths,
+        },
+        after,
+      }
+    } catch (error) {
+      await client.query('ROLLBACK')
+      throw error
+    }
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+async function main() {
+  const options = parseArgs()
+  const report = await runApply(options)
+  writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+  if (options.apply && !report.readyToApply) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  CONFIRM_TOKEN,
+  buildFoundationRequiredMigrationApplyPlan,
+  getBackupFingerprint,
+  migrationHistoryReady,
+  parseArgs,
+  runApply,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js b/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
new file mode 100644
index 00000000..c414329b
--- /dev/null
+++ b/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
@@ -0,0 +1,749 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const path = require('node:path')
+const { Pool } = require('pg')
+const {
+  buildCurrentEvidence,
+  buildEvidenceFingerprint,
+  databaseIdentityFromUrl,
+  getAllowedDecisions,
+  loadDatabaseUrl,
+} = require('./plan-pre-sku-formalization-repair')
+const {
+  getPreSkuFormalizationLifecycleMismatchSamples,
+} = require('./verify-master-data-foundation')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const APPLY_CONFIRMATION = 'I_UNDERSTAND_THIS_UPDATES_PRE_SKU_LIFECYCLE'
+const EXECUTION_PLAN_MODE = 'pre-sku-formalization-repair-execution-plan'
+const EXECUTION_PLAN_TOP_LEVEL_KEYS = new Set([
+  'mode',
+  'generatedAt',
+  'databaseIdentity',
+  'templateInstructions',
+  'candidateCount',
+  'confirmation',
+  'confirmedBy',
+  'decisions',
+  'outputFile',
+])
+const EXECUTION_DECISION_KEYS = new Set([
+  'preSkuId',
+  'mismatchReason',
+  'draftGroupId',
+  'draftGroupCode',
+  'sequence',
+  'decision',
+  'reason',
+  'formalSkuId',
+  'allowedDecisions',
+  'currentEvidence',
+  'evidenceFingerprint',
+])
+const SUPPORTED_DECISIONS = new Set([
+  'revert-pre-sku-status',
+  'link-existing-product-sku',
+  'archive-invalid-pre-sku',
+])
+const DISALLOWED_AUDIT_VALUES = new Set([
+  'unknown',
+  'unk',
+  'n/a',
+  'na',
+  'null',
+  'none',
+  'todo',
+  'tbd',
+  'default',
+  'test',
+  '测试',
+  '待补',
+  '待补齐',
+  '待确认',
+  '未知',
+  '默认',
+  '默认值',
+  '暂无',
+])
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const args = {
+    template: false,
+    apply: false,
+    planPath: '',
+    outputPath: '',
+    confirm: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      args.apply = true
+      continue
+    }
+    if (arg === '--template') {
+      args.template = true
+      continue
+    }
+    if (arg === '--plan') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --plan <json-file>。')
+      args.planPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--plan=')) {
+      args.planPath = arg.slice('--plan='.length)
+      if (!args.planPath) throw new Error('缺少 --plan <json-file>。')
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --output <json-file>。')
+      args.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      args.outputPath = arg.slice('--output='.length)
+      if (!args.outputPath) throw new Error('缺少 --output <json-file>。')
+      continue
+    }
+    if (arg === '--confirm') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --confirm <token>。')
+      args.confirm = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--confirm=')) {
+      args.confirm = arg.slice('--confirm='.length)
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-database-identity <identity>。')
+      }
+      args.expectedDatabaseIdentity = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      args.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      }
+      args.expectedBackupSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      args.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (args.template && args.apply) {
+    throw new Error('--template 只允许生成待确认计划，不能和 --apply 同时使用。')
+  }
+  if (args.template && args.planPath) {
+    throw new Error('--template 直接读取当前错位样本生成计划，不能同时提供 --plan。')
+  }
+  if (!args.template && !args.planPath) throw new Error('必须提供 --plan <json-file>。')
+  if (!args.apply && (args.confirm || args.expectedDatabaseIdentity || args.expectedBackupSha256)) {
+    throw new Error('--confirm / --expected-* 只允许和 --apply 一起使用。')
+  }
+  return args
+}
+
+function readText(value) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function isDisallowedAuditTextValue(value) {
+  const compact = readText(value).replace(/\s+/g, '').toLowerCase()
+  return DISALLOWED_AUDIT_VALUES.has(compact) || /待补|待确认|默认值/.test(compact)
+}
+
+function assertValidAuditText(value, scope) {
+  const text = readText(value)
+  if (!text) throw new Error(`${scope} 必须填写。`)
+  if (/[\u0000-\u001F\u007F]/.test(text)) {
+    throw new Error(`${scope} 包含控制字符，不能写入审计计划。`)
+  }
+  if (isDisallowedAuditTextValue(text)) {
+    throw new Error(`${scope} 不能填写占位值或默认值：${text}。`)
+  }
+}
+
+function readJsonPlan(planPath, rootDir = ROOT_DIR) {
+  const absolutePath = path.resolve(rootDir, planPath)
+  return JSON.parse(fs.readFileSync(absolutePath, 'utf8'))
+}
+
+function writeJsonReport(outputPath, data, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(data, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
+  const rawPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
+  if (!rawPath) return { provided: false, path: '', exists: false, sha256: '' }
+  const absolutePath = path.resolve(rootDir, rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    return { provided: true, path: absolutePath, exists: false, sha256: '' }
+  }
+  const bytes = fs.readFileSync(absolutePath)
+  return {
+    provided: true,
+    path: absolutePath,
+    exists: true,
+    sizeBytes: bytes.length,
+    sha256: crypto.createHash('sha256').update(bytes).digest('hex'),
+  }
+}
+
+function assertApplyExecutionEvidence(args, options = {}) {
+  if (!args.apply) return { actualDatabaseIdentity: '', backupFingerprint: null }
+  const actualDatabaseIdentity = databaseIdentityFromUrl(options.databaseUrl)
+  const backupFingerprint = getBackupFingerprint(options.env, options.rootDir)
+  const blockers = []
+
+  if (args.confirm !== APPLY_CONFIRMATION) blockers.push('confirm')
+  if (!args.expectedDatabaseIdentity) {
+    blockers.push('expected-database-identity')
+  } else if (args.expectedDatabaseIdentity !== actualDatabaseIdentity) {
+    blockers.push('expected-database-identity-mismatch')
+  }
+  if (!args.expectedBackupSha256) {
+    blockers.push('expected-backup-sha256')
+  } else if (backupFingerprint.sha256 && args.expectedBackupSha256 !== backupFingerprint.sha256) {
+    blockers.push('expected-backup-sha256-mismatch')
+  }
+  if (backupFingerprint.provided !== true) {
+    blockers.push('backup-file-missing')
+  } else if (backupFingerprint.exists !== true) {
+    blockers.push('backup-file-not-found')
+  }
+
+  if (blockers.length > 0) {
+    throw new Error(`真正落库必须校验确认口令、目标库身份和数据库备份：${blockers.join(', ')}。`)
+  }
+  return { actualDatabaseIdentity, backupFingerprint }
+}
+
+function assertNoUnknownExecutionPlanKeys(plan) {
+  if (!plan || typeof plan !== 'object' || Array.isArray(plan)) {
+    throw new Error('准 SKU 生命周期执行计划必须是 JSON 对象。')
+  }
+  const unknownKeys = Object.keys(plan).filter((key) => !EXECUTION_PLAN_TOP_LEVEL_KEYS.has(key))
+  if (unknownKeys.length > 0) {
+    throw new Error(`准 SKU 生命周期执行计划存在不允许的顶层字段：${unknownKeys.join(', ')}。`)
+  }
+}
+
+function buildExecutionPlanTemplate(samples = [], options = {}) {
+  const rows = Array.isArray(samples) ? samples : []
+  return {
+    mode: EXECUTION_PLAN_MODE,
+    generatedAt: new Date().toISOString(),
+    databaseIdentity: options.databaseIdentity || '',
+    templateInstructions: [
+      '这是待业务确认的执行计划模板，不会自动落库。',
+      '必须填写 confirmedBy、每个决策的 decision 和 reason；不能填写 UNKNOWN/待补齐/默认值。',
+      '如选择 link-existing-product-sku，必须填写 formalSkuId。',
+      `真正落库还必须设置 confirmation="${APPLY_CONFIRMATION}"，并在命令中提供数据库身份和备份 SHA。`,
+    ],
+    candidateCount: rows.length,
+    confirmation: '',
+    confirmedBy: '',
+    decisions: rows.map((row) => {
+      const currentEvidence = buildCurrentEvidence(row)
+      return {
+        preSkuId: row.preSkuId,
+        mismatchReason: row.mismatchReason,
+        draftGroupId: row.draftGroupId,
+        draftGroupCode: row.draftGroupCode,
+        sequence: row.sequence,
+        decision: '',
+        reason: '',
+        formalSkuId: '',
+        allowedDecisions: getAllowedDecisions(row),
+        currentEvidence,
+        evidenceFingerprint: buildEvidenceFingerprint(currentEvidence),
+      }
+    }),
+  }
+}
+
+function validateExecutionPlanShape(plan) {
+  const blockers = []
+  assertNoUnknownExecutionPlanKeys(plan)
+  if (plan.mode !== EXECUTION_PLAN_MODE) blockers.push('mode')
+  if (typeof plan.confirmedBy !== 'string' || !readText(plan.confirmedBy)) {
+    blockers.push('confirmedBy')
+  } else if (isDisallowedAuditTextValue(plan.confirmedBy)) {
+    blockers.push('confirmedBy.placeholder')
+  }
+  if (!Array.isArray(plan.decisions)) blockers.push('decisions')
+  const decisionBlockers = []
+  const seenPreSkuIds = new Set()
+  const decisions = Array.isArray(plan.decisions) ? plan.decisions : []
+
+  decisions.forEach((decision, index) => {
+    const issues = []
+    if (!decision || typeof decision !== 'object' || Array.isArray(decision)) {
+      decisionBlockers.push({ index, issues: ['decision'] })
+      return
+    }
+    const unknownKeys = Object.keys(decision).filter((key) => !EXECUTION_DECISION_KEYS.has(key))
+    if (unknownKeys.length > 0) issues.push(`unknownKeys:${unknownKeys.join(',')}`)
+    const preSkuId = readText(decision.preSkuId)
+    if (!preSkuId) issues.push('preSkuId')
+    if (preSkuId && seenPreSkuIds.has(preSkuId)) issues.push('duplicatePreSkuId')
+    seenPreSkuIds.add(preSkuId)
+    if (!SUPPORTED_DECISIONS.has(readText(decision.decision))) issues.push('decision')
+    if (!readText(decision.reason)) {
+      issues.push('reason')
+    } else if (isDisallowedAuditTextValue(decision.reason)) {
+      issues.push('reason.placeholder')
+    }
+    if (readText(decision.decision) === 'link-existing-product-sku' && !readText(decision.formalSkuId)) {
+      issues.push('formalSkuId')
+    }
+    if (!decision.currentEvidence || typeof decision.currentEvidence !== 'object') {
+      issues.push('currentEvidence')
+    } else if (decision.evidenceFingerprint !== buildEvidenceFingerprint(decision.currentEvidence)) {
+      issues.push('evidenceFingerprint')
+    }
+    if (issues.length > 0) decisionBlockers.push({ index, preSkuId, issues })
+  })
+
+  return {
+    mode: 'validate-pre-sku-formalization-repair-execution-plan-shape',
+    valid: blockers.length === 0 && decisionBlockers.length === 0,
+    committed: false,
+    blockerCount: blockers.length + decisionBlockers.length,
+    blockers,
+    decisionBlockers,
+    decisionCount: decisions.length,
+  }
+}
+
+function validateDecisionAgainstCurrent(decision, currentByPreSkuId, index) {
+  const currentRow = currentByPreSkuId.get(readText(decision.preSkuId))
+  if (!currentRow) {
+    return {
+      index,
+      preSkuId: readText(decision.preSkuId),
+      decision: readText(decision.decision),
+      ok: false,
+      readyToApply: false,
+      reason: 'current-mismatch-not-found',
+    }
+  }
+  const currentEvidence = buildCurrentEvidence(currentRow)
+  const currentFingerprint = buildEvidenceFingerprint(currentEvidence)
+  const evidenceMatched =
+    JSON.stringify(currentEvidence) === JSON.stringify(decision.currentEvidence)
+  const fingerprintMatched = currentFingerprint === decision.evidenceFingerprint
+  const blockers = []
+  if (!evidenceMatched || !fingerprintMatched) blockers.push('staleCurrentEvidence')
+  if (currentRow.mismatchReason !== 'formalized_without_product_sku') {
+    blockers.push('unsupportedMismatchReason')
+  }
+  if (!SUPPORTED_DECISIONS.has(readText(decision.decision))) blockers.push('unsupportedDecision')
+
+  return {
+    index,
+    preSkuId: readText(decision.preSkuId),
+    decision: readText(decision.decision),
+    ok: blockers.length === 0,
+    readyToApply: blockers.length === 0,
+    reason: blockers.length === 0 ? 'current-evidence-matched' : blockers.join(','),
+    evidenceFingerprintMatched: fingerprintMatched,
+    mismatchReason: currentRow.mismatchReason,
+  }
+}
+
+function validateExecutionPlanFreshness(plan, currentSamples = [], options = {}) {
+  const shape = validateExecutionPlanShape(plan)
+  const blockers = shape.blockers.map((key) => ({ key, source: 'plan-shape' }))
+  shape.decisionBlockers.forEach((blocker) => {
+    blockers.push({
+      key: 'decision-shape',
+      source: 'plan-shape',
+      decisionIndex: blocker.index,
+      issues: blocker.issues,
+    })
+  })
+
+  const currentByPreSkuId = new Map(
+    (Array.isArray(currentSamples) ? currentSamples : [])
+      .filter((row) => typeof row?.preSkuId === 'string' && row.preSkuId.length > 0)
+      .map((row) => [row.preSkuId, row]),
+  )
+  const decisionChecks = (Array.isArray(plan.decisions) ? plan.decisions : []).map(
+    (decision, index) => validateDecisionAgainstCurrent(decision, currentByPreSkuId, index),
+  )
+  decisionChecks
+    .filter((check) => !check.ok)
+    .forEach((check) => {
+      blockers.push({
+        key: 'decision-not-current',
+        source: 'database',
+        decisionIndex: check.index,
+        preSkuId: check.preSkuId,
+        reason: check.reason,
+      })
+    })
+
+  const actualDatabaseIdentity = options.databaseIdentity || ''
+  if (actualDatabaseIdentity && options.expectedDatabaseIdentity && actualDatabaseIdentity !== options.expectedDatabaseIdentity) {
+    blockers.push({
+      key: 'databaseIdentityMismatch',
+      source: 'database',
+      message: '当前数据库身份与预期数据库身份不一致。',
+    })
+  }
+
+  return {
+    mode: 'validate-pre-sku-formalization-repair-execution-plan',
+    valid: blockers.length === 0,
+    committed: false,
+    requiresDatabase: true,
+    databaseIdentity: actualDatabaseIdentity,
+    decisionCount: decisionChecks.length,
+    readyDecisionCount: decisionChecks.filter((check) => check.readyToApply).length,
+    staleDecisionCount: decisionChecks.filter((check) => !check.ok).length,
+    blockerCount: blockers.length,
+    blockers,
+    decisionChecks,
+  }
+}
+
+function assertValidationReadyForApply(validation, plan) {
+  if (!validation.valid) {
+    throw new Error(
+      `准 SKU 生命周期修复计划未通过当前证据校验：${validation.blockers.map((item) => item.key).join(', ')}`,
+    )
+  }
+  if (plan.confirmation !== APPLY_CONFIRMATION) {
+    throw new Error(`真正落库必须在计划文件中设置 confirmation="${APPLY_CONFIRMATION}"。`)
+  }
+  assertValidAuditText(plan.confirmedBy, '准 SKU 生命周期修复计划 confirmedBy')
+}
+
+function hasValidPackagingBoxes(value) {
+  if (!Array.isArray(value)) return false
+  return value.length > 0
+}
+
+async function syncDraftGroupStatusAfterPreSkuLifecycleChange(client, draftGroupId) {
+  const result = await client.query(`
+    SELECT
+      pre_sku."status"::text AS status,
+      packaging_plan."boxes" AS boxes
+    FROM "PreSku" pre_sku
+    LEFT JOIN "PreSkuPackagingPlan" packaging_plan
+      ON packaging_plan."preSkuId" = pre_sku."id"
+    WHERE pre_sku."draftGroupId" = $1
+  `, [draftGroupId])
+  const rows = result.rows
+  const nonArchived = rows.filter((row) => row.status !== 'ARCHIVED')
+  let nextStatus = 'ARCHIVED'
+  if (nonArchived.length > 0 && nonArchived.every((row) => row.status === 'FORMALIZED')) {
+    nextStatus = 'FORMALIZED'
+  } else if (nonArchived.length > 0) {
+    const remaining = nonArchived.filter((row) => row.status !== 'FORMALIZED')
+    nextStatus = remaining.every((row) => hasValidPackagingBoxes(row.boxes))
+      ? 'READY_FOR_INTAKE'
+      : 'PACKAGING'
+  }
+  await client.query(`
+    UPDATE "DraftGroup"
+    SET "status" = $2::"DraftGroupStatus",
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+  `, [draftGroupId, nextStatus])
+  return nextStatus
+}
+
+async function assertNoActiveFormalSkuForPreSku(client, preSkuId) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU"
+    WHERE "sourcePreSkuId" = $1
+      AND "deletedAt" IS NULL
+  `, [preSkuId])
+  if ((result.rows[0]?.row_count ?? 0) > 0) {
+    throw new Error(`准 SKU ${preSkuId} 已存在有效正式 SKU 关系，不能执行该生命周期修复。`)
+  }
+}
+
+async function applyRevertPreSkuStatus(client, decision) {
+  await assertNoActiveFormalSkuForPreSku(client, decision.preSkuId)
+  const result = await client.query(`
+    UPDATE "PreSku"
+    SET "status" = 'PREVIEW_CONFIRMED'::"PreSkuStatus",
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+      AND "status" = 'FORMALIZED'::"PreSkuStatus"
+    RETURNING "id", "draftGroupId", "status"::text AS status
+  `, [decision.preSkuId])
+  const row = result.rows[0]
+  if (!row) throw new Error(`准 SKU ${decision.preSkuId} 当前状态不允许回退。`)
+  const draftGroupStatus = await syncDraftGroupStatusAfterPreSkuLifecycleChange(
+    client,
+    row.draftGroupId,
+  )
+  return {
+    preSkuId: row.id,
+    decision: decision.decision,
+    status: row.status,
+    draftGroupStatus,
+  }
+}
+
+async function applyLinkExistingProductSku(client, decision) {
+  const skuResult = await client.query(`
+    SELECT
+      sku."id",
+      sku."sourcePreSkuId",
+      sku."deletedAt",
+      product."deletedAt" AS "productDeletedAt"
+    FROM "ProductSKU" sku
+    JOIN "Product" product ON product."id" = sku."productId"
+    WHERE sku."id" = $1
+    FOR UPDATE OF sku, product
+  `, [decision.formalSkuId])
+  const sku = skuResult.rows[0]
+  if (!sku) throw new Error(`找不到正式 SKU：${decision.formalSkuId}`)
+  if (sku.deletedAt || sku.productDeletedAt) {
+    throw new Error(`正式 SKU ${decision.formalSkuId} 或所属产品已删除，不能补链。`)
+  }
+  if (sku.sourcePreSkuId && sku.sourcePreSkuId !== decision.preSkuId) {
+    throw new Error(`正式 SKU ${decision.formalSkuId} 已关联其他准 SKU，不能补链。`)
+  }
+  await client.query(`
+    UPDATE "ProductSKU"
+    SET "sourcePreSkuId" = $2,
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+  `, [decision.formalSkuId, decision.preSkuId])
+  const preSkuResult = await client.query(`
+    UPDATE "PreSku"
+    SET "status" = 'FORMALIZED'::"PreSkuStatus",
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+    RETURNING "id", "draftGroupId", "status"::text AS status
+  `, [decision.preSkuId])
+  const preSku = preSkuResult.rows[0]
+  const draftGroupStatus = await syncDraftGroupStatusAfterPreSkuLifecycleChange(
+    client,
+    preSku.draftGroupId,
+  )
+  return {
+    preSkuId: preSku.id,
+    formalSkuId: decision.formalSkuId,
+    decision: decision.decision,
+    status: preSku.status,
+    draftGroupStatus,
+  }
+}
+
+async function applyArchiveInvalidPreSku(client, decision) {
+  await assertNoActiveFormalSkuForPreSku(client, decision.preSkuId)
+  const relationResult = await client.query(`
+    SELECT
+      (SELECT COUNT(*)::integer FROM "PreSkuLocationBinding" WHERE "preSkuId" = $1) AS "locationBindingCount",
+      (
+        SELECT COUNT(*)::integer
+        FROM "PackagedItem" packaged_item
+        JOIN "PreSkuPackagingPlan" packaging_plan
+          ON packaging_plan."id" = packaged_item."preSkuPackagingPlanId"
+        WHERE packaging_plan."preSkuId" = $1
+      ) AS "packagedItemCount"
+  `, [decision.preSkuId])
+  const relationCounts = relationResult.rows[0] || {}
+  if ((relationCounts.locationBindingCount ?? 0) > 0 || (relationCounts.packagedItemCount ?? 0) > 0) {
+    throw new Error(`准 SKU ${decision.preSkuId} 仍有库位或包装成品关系，不能直接归档。`)
+  }
+  const result = await client.query(`
+    UPDATE "PreSku"
+    SET "status" = 'ARCHIVED'::"PreSkuStatus",
+        "updatedAt" = NOW()
+    WHERE "id" = $1
+    RETURNING "id", "draftGroupId", "status"::text AS status
+  `, [decision.preSkuId])
+  const row = result.rows[0]
+  if (!row) throw new Error(`找不到准 SKU：${decision.preSkuId}`)
+  const draftGroupStatus = await syncDraftGroupStatusAfterPreSkuLifecycleChange(
+    client,
+    row.draftGroupId,
+  )
+  return {
+    preSkuId: row.id,
+    decision: decision.decision,
+    status: row.status,
+    draftGroupStatus,
+  }
+}
+
+async function applyDecision(client, decision) {
+  if (decision.decision === 'revert-pre-sku-status') {
+    return applyRevertPreSkuStatus(client, decision)
+  }
+  if (decision.decision === 'link-existing-product-sku') {
+    return applyLinkExistingProductSku(client, decision)
+  }
+  if (decision.decision === 'archive-invalid-pre-sku') {
+    return applyArchiveInvalidPreSku(client, decision)
+  }
+  throw new Error(`不支持的准 SKU 生命周期修复动作：${decision.decision}`)
+}
+
+function findRemainingTargetMismatches(decisions = [], currentSamples = []) {
+  const targetPreSkuIds = new Set(
+    (Array.isArray(decisions) ? decisions : [])
+      .map((decision) => readText(decision?.preSkuId))
+      .filter(Boolean),
+  )
+  return (Array.isArray(currentSamples) ? currentSamples : [])
+    .filter((row) => targetPreSkuIds.has(readText(row?.preSkuId)))
+    .map((row) => ({
+      preSkuId: readText(row.preSkuId),
+      mismatchReason: readText(row.mismatchReason),
+      draftGroupCode: readText(row.draftGroupCode),
+      linkedFormalSkuId: readText(row.linkedFormalSkuId),
+    }))
+}
+
+function assertNoRemainingTargetMismatches(decisions, currentSamples) {
+  const remaining = findRemainingTargetMismatches(decisions, currentSamples)
+  if (remaining.length > 0) {
+    throw new Error(
+      `准 SKU 生命周期修复后仍存在错位，已回滚：${remaining
+        .map((item) => `${item.preSkuId}:${item.mismatchReason}`)
+        .join(', ')}。`,
+    )
+  }
+  return {
+    checkedPreSkuIds: (Array.isArray(decisions) ? decisions : [])
+      .map((decision) => readText(decision?.preSkuId))
+      .filter(Boolean),
+    remainingMismatchCount: 0,
+  }
+}
+
+async function main() {
+  const args = parseArgs()
+  const databaseUrl = loadDatabaseUrl()
+  if (!databaseUrl) {
+    throw new Error('DATABASE_URL 未配置，无法校验准 SKU 生命周期修复计划。')
+  }
+  const executionEvidence = assertApplyExecutionEvidence(args, { databaseUrl })
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    const samples = await getPreSkuFormalizationLifecycleMismatchSamples(client)
+    if (args.template) {
+      const template = buildExecutionPlanTemplate(samples, {
+        databaseIdentity: databaseIdentityFromUrl(databaseUrl),
+      })
+      const outputFile = writeJsonReport(args.outputPath, template)
+      console.log(JSON.stringify({ ...template, outputFile }, null, 2))
+      return
+    }
+
+    const plan = readJsonPlan(args.planPath)
+    const validation = validateExecutionPlanFreshness(plan, samples, {
+      databaseIdentity: databaseIdentityFromUrl(databaseUrl),
+      expectedDatabaseIdentity: args.expectedDatabaseIdentity,
+    })
+    if (!args.apply) {
+      const report = {
+        ...validation,
+        dryRun: true,
+        committed: false,
+        rolledBack: true,
+      }
+      const outputFile = writeJsonReport(args.outputPath, report)
+      console.log(JSON.stringify({ ...report, outputFile }, null, 2))
+      if (!validation.valid) process.exitCode = 1
+      return
+    }
+
+    assertValidationReadyForApply(validation, plan)
+    await client.query('BEGIN')
+    const appliedResults = []
+    for (const decision of plan.decisions) {
+      appliedResults.push(await applyDecision(client, decision))
+    }
+    const remainingSamples = await getPreSkuFormalizationLifecycleMismatchSamples(client)
+    const postApplyVerification = assertNoRemainingTargetMismatches(
+      plan.decisions,
+      remainingSamples,
+    )
+    await client.query('COMMIT')
+    const report = {
+      mode: 'apply-pre-sku-formalization-repair',
+      committed: true,
+      rolledBack: false,
+      confirmedBy: readText(plan.confirmedBy),
+      decisionCount: plan.decisions.length,
+      appliedResults,
+      postApplyVerification,
+      executionEvidence,
+    }
+    const outputFile = writeJsonReport(args.outputPath, report)
+    console.log(JSON.stringify({ ...report, outputFile }, null, 2))
+  } catch (error) {
+    await client.query('ROLLBACK').catch(() => undefined)
+    throw error
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  APPLY_CONFIRMATION,
+  EXECUTION_PLAN_MODE,
+  parseArgs,
+  readText,
+  isDisallowedAuditTextValue,
+  assertValidAuditText,
+  readJsonPlan,
+  writeJsonReport,
+  getBackupFingerprint,
+  assertApplyExecutionEvidence,
+  assertNoUnknownExecutionPlanKeys,
+  buildExecutionPlanTemplate,
+  validateExecutionPlanShape,
+  validateDecisionAgainstCurrent,
+  validateExecutionPlanFreshness,
+  assertValidationReadyForApply,
+  findRemainingTargetMismatches,
+  assertNoRemainingTargetMismatches,
+  syncDraftGroupStatusAfterPreSkuLifecycleChange,
+  applyDecision,
+}
diff --git a/furniture-3d-system/scripts/apply-prisma-baseline-resolve.js b/furniture-3d-system/scripts/apply-prisma-baseline-resolve.js
new file mode 100644
index 00000000..2fdc972d
--- /dev/null
+++ b/furniture-3d-system/scripts/apply-prisma-baseline-resolve.js
@@ -0,0 +1,320 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const {
+  describeDatabaseUrl,
+  getDatabaseIdentity,
+  loadDatabaseUrl,
+} = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+const CONFIRM_TOKEN = 'apply-prisma-baseline-resolve'
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    apply: false,
+    confirm: '',
+    preflightPath: '',
+    migrationId: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      options.apply = true
+      continue
+    }
+    if (arg.startsWith('--confirm=')) {
+      options.confirm = arg.slice('--confirm='.length)
+      continue
+    }
+    if (arg === '--preflight') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --preflight <json-file>。')
+      options.preflightPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--preflight=')) {
+      options.preflightPath = arg.slice('--preflight='.length)
+      if (!options.preflightPath) throw new Error('缺少 --preflight <json-file>。')
+      continue
+    }
+    if (arg === '--migration-id') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --migration-id <id>。')
+      options.migrationId = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--migration-id=')) {
+      options.migrationId = arg.slice('--migration-id='.length)
+      if (!options.migrationId) throw new Error('缺少 --migration-id <id>。')
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --expected-database-identity <identity>。')
+      options.expectedDatabaseIdentity = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      options.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      options.expectedBackupSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      options.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --output <json-file>。')
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) throw new Error('缺少 --output <json-file>。')
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function readJson(filePath, rootDir = ROOT_DIR) {
+  const absolutePath = path.resolve(rootDir, filePath)
+  return JSON.parse(fs.readFileSync(absolutePath, 'utf8'))
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function databaseIdentityFromDescription(description = {}) {
+  return [
+    description.protocol || '',
+    String(description.username || '').toLowerCase(),
+    String(description.host || '').toLowerCase(),
+    description.port || '',
+    String(description.databaseName || '').toLowerCase(),
+    String(description.schema || '').toLowerCase(),
+  ].join('|')
+}
+
+function getBackupFingerprintFromPreflight(preflight = {}) {
+  const backupPath = preflight.backupEvidence?.path || ''
+  if (!backupPath) return { provided: false, path: '', exists: false, sha256: '' }
+  if (!fs.existsSync(backupPath)) return { provided: true, path: backupPath, exists: false, sha256: '' }
+  const bytes = fs.readFileSync(backupPath)
+  return {
+    provided: true,
+    path: backupPath,
+    exists: true,
+    sizeBytes: bytes.length,
+    sha256: crypto.createHash('sha256').update(bytes).digest('hex'),
+  }
+}
+
+function migrationDirectoryExists(migrationId, rootDir = ROOT_DIR) {
+  if (!migrationId) return false
+  const migrationPath = path.join(rootDir, 'prisma', 'migrations', migrationId)
+  return fs.existsSync(migrationPath) && fs.statSync(migrationPath).isDirectory()
+}
+
+function buildBaselineResolvePlan(preflight, options = {}) {
+  const blockers = []
+  if (preflight?.recommendedAction !== 'baseline-resolve-candidate') {
+    blockers.push({
+      key: 'recommendedAction',
+      message: '只有 preflight 明确为 baseline-resolve-candidate 时，才允许补迁移历史。',
+    })
+  }
+  if (preflight?.currentSchemaDiffHasSql) {
+    blockers.push({
+      key: 'currentSchemaDiff.notEmpty',
+      message: '当前库到 schema.prisma 仍有结构 diff，不能只补迁移历史。',
+    })
+  }
+  if (preflight?.migrationDiff?.status !== 0) {
+    blockers.push({
+      key: 'migrationDiff.notEmpty',
+      message: 'migrations 重放结果和当前库不等价，不能 baseline resolve。',
+    })
+  }
+  if (preflight?.migrationSchemaDiff?.status !== 0) {
+    blockers.push({
+      key: 'migrationSchemaDiff.notEmpty',
+      message: 'migrations 重放结果和 schema.prisma 不等价，不能 baseline resolve。',
+    })
+  }
+  if (!options.migrationId) {
+    blockers.push({ key: 'migrationId.missing', message: '必须指定单个 --migration-id。' })
+  } else if (!migrationDirectoryExists(options.migrationId, options.rootDir)) {
+    blockers.push({ key: 'migrationId.notFound', message: '指定的 migration id 不在 prisma/migrations 中。' })
+  }
+  if (options.apply && options.confirm !== CONFIRM_TOKEN) {
+    blockers.push({ key: 'confirm', message: `真实执行必须显式传入 --confirm=${CONFIRM_TOKEN}。` })
+  }
+  const expectedPreflightIdentity = databaseIdentityFromDescription(preflight?.database)
+  if (options.apply && !options.actualDatabaseIdentity) {
+    blockers.push({
+      key: 'databaseIdentity.missing',
+      message: '真实执行必须读取当前 DATABASE_URL 并和 preflight 数据库身份比对。',
+    })
+  } else if (
+    options.apply &&
+    expectedPreflightIdentity &&
+    options.actualDatabaseIdentity !== expectedPreflightIdentity
+  ) {
+    blockers.push({
+      key: 'databaseIdentity.mismatch',
+      message: '当前 DATABASE_URL 指向的数据库和 preflight 报告不一致，禁止 baseline resolve。',
+    })
+  }
+  if (options.apply && !options.expectedDatabaseIdentity) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.missing',
+      message: '真实执行必须显式传入 --expected-database-identity，避免误连错库。',
+    })
+  } else if (
+    options.apply &&
+    options.actualDatabaseIdentity &&
+    options.expectedDatabaseIdentity !== options.actualDatabaseIdentity
+  ) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.mismatch',
+      message: '命令行指定的目标库身份和当前 DATABASE_URL 不一致，禁止 baseline resolve。',
+    })
+  }
+  if (options.apply && options.backupFingerprint?.provided !== true) {
+    blockers.push({
+      key: 'backupFingerprint.missing',
+      message: '真实执行必须能从 preflight 报告重新定位备份文件并计算指纹。',
+    })
+  } else if (options.apply && options.backupFingerprint?.exists !== true) {
+    blockers.push({
+      key: 'backupFingerprint.notFound',
+      message: 'preflight 记录的备份文件不存在，必须重新备份和重新 preflight。',
+    })
+  }
+  if (
+    options.apply &&
+    options.backupFingerprint?.sha256 &&
+    preflight?.backupEvidence?.sha256 &&
+    options.backupFingerprint.sha256 !== preflight.backupEvidence.sha256
+  ) {
+    blockers.push({
+      key: 'backupFingerprint.sha256Mismatch',
+      message: '备份文件当前 SHA-256 和 preflight 记录不一致，必须重新备份和重新 preflight。',
+    })
+  }
+  if (options.apply && !options.expectedBackupSha256) {
+    blockers.push({
+      key: 'expectedBackupSha256.missing',
+      message: '真实执行必须显式传入 --expected-backup-sha256，避免错用备份文件。',
+    })
+  } else if (
+    options.apply &&
+    options.backupFingerprint?.sha256 &&
+    options.expectedBackupSha256 !== options.backupFingerprint.sha256
+  ) {
+    blockers.push({
+      key: 'expectedBackupSha256.mismatch',
+      message: '命令行指定的备份 SHA-256 和当前备份文件不一致，禁止 baseline resolve。',
+    })
+  }
+
+  return {
+    mode: 'prisma-baseline-resolve-apply-plan',
+    dryRun: !options.apply,
+    readyToApply: options.apply === true && blockers.length === 0,
+    confirmToken: CONFIRM_TOKEN,
+    migrationId: options.migrationId || '',
+    database: preflight?.database || null,
+    expectedDatabaseIdentity: options.expectedDatabaseIdentity || '',
+    actualDatabaseIdentity: options.actualDatabaseIdentity || '',
+    backupFingerprint: options.backupFingerprint || null,
+    blockers,
+    commands: [
+      {
+        name: 'resolve-one-migration',
+        command: 'npm run db:foundation:baseline-resolve -- --apply --confirm=apply-prisma-baseline-resolve --preflight <fresh-preflight.json> --migration-id <migration_id> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        purpose: '仅在结构等价且证据新鲜时，对单个 migration id 执行 Prisma baseline resolve。',
+        dangerous: true,
+      },
+      {
+        name: 'verify-readiness',
+        command: 'npm run db:verify-master-data:readiness',
+        purpose: '每次 baseline resolve 后重新验证迁移历史和剩余阻断项。',
+        dangerous: false,
+      },
+    ],
+  }
+}
+
+function runPrismaMigrateResolve(migrationId) {
+  return spawnSync(process.execPath, [PRISMA_CLI, 'migrate', 'resolve', '--applied', migrationId], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    stdio: 'inherit',
+    windowsHide: true,
+  })
+}
+
+async function main() {
+  const options = parseArgs()
+  const preflight = readJson(options.preflightPath || '')
+  const databaseUrl = loadDatabaseUrl(ROOT_DIR)
+  const actualDatabaseIdentity = getDatabaseIdentity(databaseUrl)
+  const backupFingerprint = getBackupFingerprintFromPreflight(preflight)
+  const plan = buildBaselineResolvePlan(preflight, {
+    ...options,
+    actualDatabaseIdentity,
+    backupFingerprint,
+  })
+  writeJsonReport(options.outputPath, plan)
+  console.log(JSON.stringify(plan, null, 2))
+
+  if (!plan.readyToApply) {
+    process.exit(1)
+  }
+  const resolved = runPrismaMigrateResolve(options.migrationId)
+  if (resolved.status !== 0) {
+    process.exit(resolved.status || 1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildBaselineResolvePlan,
+  databaseIdentityFromDescription,
+  getBackupFingerprintFromPreflight,
+  parseArgs,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/apply-prisma-structure-repair.js b/furniture-3d-system/scripts/apply-prisma-structure-repair.js
new file mode 100644
index 00000000..3e5be6a6
--- /dev/null
+++ b/furniture-3d-system/scripts/apply-prisma-structure-repair.js
@@ -0,0 +1,1000 @@
+const crypto = require('node:crypto')
+const fs = require('node:fs')
+const path = require('node:path')
+const { Pool } = require('pg')
+const {
+  describeDatabaseUrl,
+  listMigrationDirectories,
+  loadDatabaseUrl,
+  loadShadowDatabaseUrl,
+  runCurrentSchemaDiff,
+  runMigrationDiffWithShadow,
+  runPrismaCommandWithEnv,
+} = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const CONFIRM_TOKEN = 'apply-prisma-structure-repair'
+const PHASES = new Set(['plan', 'apply-structure', 'resolve-baseline'])
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    phase: 'plan',
+    apply: false,
+    confirm: '',
+    preflightPath: '',
+    structureRehearsalPath: '',
+    repairSqlPath: '',
+    expectedSha256: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+    maxPreflightAgeMinutes: 60,
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      options.apply = true
+      continue
+    }
+    if (arg.startsWith('--confirm=')) {
+      options.confirm = arg.slice('--confirm='.length)
+      continue
+    }
+    if (arg === '--phase') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --phase <plan|apply-structure|resolve-baseline>。')
+      options.phase = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--phase=')) {
+      options.phase = arg.slice('--phase='.length)
+      continue
+    }
+    if (arg === '--preflight') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --preflight <json-file>。')
+      options.preflightPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--preflight=')) {
+      options.preflightPath = arg.slice('--preflight='.length)
+      continue
+    }
+    if (arg === '--structure-rehearsal') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --structure-rehearsal <json-file>。')
+      options.structureRehearsalPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--structure-rehearsal=')) {
+      options.structureRehearsalPath = arg.slice('--structure-rehearsal='.length)
+      continue
+    }
+    if (arg === '--repair-sql') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --repair-sql <sql-file>。')
+      options.repairSqlPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--repair-sql=')) {
+      options.repairSqlPath = arg.slice('--repair-sql='.length)
+      continue
+    }
+    if (arg === '--expected-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --expected-sha256 <sha256>。')
+      options.expectedSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-sha256=')) {
+      options.expectedSha256 = arg.slice('--expected-sha256='.length)
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --expected-database-identity <identity>。')
+      options.expectedDatabaseIdentity = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      options.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      options.expectedBackupSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      options.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    if (arg === '--max-preflight-age-minutes') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --max-preflight-age-minutes <minutes>。')
+      options.maxPreflightAgeMinutes = Number(value)
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--max-preflight-age-minutes=')) {
+      options.maxPreflightAgeMinutes = Number(arg.slice('--max-preflight-age-minutes='.length))
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) throw new Error('缺少 --output <json-file>。')
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (!PHASES.has(options.phase)) {
+    throw new Error(`未知 phase：${options.phase}`)
+  }
+  if (!Number.isFinite(options.maxPreflightAgeMinutes) || options.maxPreflightAgeMinutes <= 0) {
+    throw new Error(`--max-preflight-age-minutes 必须是正数：${options.maxPreflightAgeMinutes}`)
+  }
+
+  return options
+}
+
+function readJsonFile(filePath, rootDir = ROOT_DIR) {
+  if (!filePath) return null
+  const absolutePath = path.resolve(rootDir, filePath)
+  return JSON.parse(fs.readFileSync(absolutePath, 'utf8'))
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function fileFingerprint(filePath, rootDir = ROOT_DIR) {
+  if (!filePath) return null
+  const absolutePath = path.resolve(rootDir, filePath)
+  if (!fs.existsSync(absolutePath)) {
+    return {
+      provided: true,
+      exists: false,
+      sizeBytes: 0,
+      sha256: '',
+      safety: summarizeSqlSafety(''),
+    }
+  }
+  const buffer = fs.readFileSync(absolutePath)
+  return {
+    provided: true,
+    exists: true,
+    sizeBytes: buffer.length,
+    sha256: crypto.createHash('sha256').update(buffer).digest('hex'),
+    safety: summarizeSqlSafety(buffer.toString('utf8')),
+  }
+}
+
+function summarizeSqlSafety(sql) {
+  const text = String(sql || '')
+  const counts = {
+    dropTable: (text.match(/\bDROP\s+TABLE\b/gi) || []).length,
+    dropColumn: (text.match(/\bDROP\s+COLUMN\b/gi) || []).length,
+    dropType: (text.match(/\bDROP\s+TYPE\b/gi) || []).length,
+    dropSchema: (text.match(/\bDROP\s+SCHEMA\b/gi) || []).length,
+    clearTable: (text.match(new RegExp('\\bTRUN' + 'CATE\\b', 'gi')) || []).length,
+  }
+  return {
+    hasDestructiveStatements:
+      counts.dropTable > 0 ||
+      counts.dropColumn > 0 ||
+      counts.dropType > 0 ||
+      counts.dropSchema > 0 ||
+      counts.clearTable > 0,
+    destructiveStatementCounts: counts,
+  }
+}
+
+function diffIsEmpty(diff) {
+  if (!diff) return false
+  if (diff.skipped) return false
+  if (diff.status === 0) return true
+  return /empty migration/i.test(String(diff.stdout || '')) && !/\b(?:CREATE|ALTER|DROP)\b/i.test(String(diff.stdout || ''))
+}
+
+function migrationSchemaDiffEvidenceIsSatisfied(preflight, structureRehearsal) {
+  if (diffIsEmpty(preflight?.migrationSchemaDiff)) return true
+
+  const skippedOnlyBecauseNoShadow = preflight?.migrationSchemaDiff?.skipped === true
+  if (!skippedOnlyBecauseNoShadow) return false
+
+  return (
+    structureRehearsal?.status === 'structure-repair-rehearsal-passed' &&
+    diffIsEmpty(structureRehearsal?.currentSchemaDiffAfter) &&
+    diffIsEmpty(structureRehearsal?.migrationDiffAfter)
+  )
+}
+
+function command(name, commandText, purpose, dangerous = false) {
+  return {
+    name,
+    command: commandText,
+    purpose,
+    dangerous,
+  }
+}
+
+function commandArgs(name, args, purpose, dangerous = false) {
+  return {
+    name,
+    executable: 'node',
+    args,
+    purpose,
+    dangerous,
+  }
+}
+
+function resolveRepairSqlFingerprint(options, structureRehearsal) {
+  const explicit = fileFingerprint(options.repairSqlPath)
+  if (explicit) return explicit
+  const artifactPath = structureRehearsal?.repairSqlArtifact?.path || ''
+  if (!artifactPath) return null
+  return fileFingerprint(artifactPath, path.parse(artifactPath).root)
+}
+
+function databaseIdentity(database = {}) {
+  return [
+    String(database.protocol || '').toLowerCase(),
+    String(database.username || '').toLowerCase(),
+    String(database.host || '').toLowerCase(),
+    String(database.port || ''),
+    String(database.databaseName || '').toLowerCase(),
+    String(database.schema || '').toLowerCase(),
+  ].join('|')
+}
+
+function databaseMatches(left, right) {
+  if (!left || !right) return false
+  return databaseIdentity(left) === databaseIdentity(right)
+}
+
+function reportAgeMinutes(checkedAt, nowIso) {
+  if (!checkedAt) return null
+  const checkedAtTime = Date.parse(checkedAt)
+  const nowTime = Date.parse(nowIso)
+  if (!Number.isFinite(checkedAtTime) || !Number.isFinite(nowTime)) return null
+  return Math.max(0, (nowTime - checkedAtTime) / 60000)
+}
+
+function backupFingerprintFromPreflight(preflight = {}) {
+  const backupPath = preflight?.backupEvidence?.path || ''
+  if (!backupPath) {
+    return {
+      provided: false,
+      exists: false,
+      sizeBytes: 0,
+      sha256: '',
+    }
+  }
+  if (!fs.existsSync(backupPath)) {
+    return {
+      provided: true,
+      exists: false,
+      sizeBytes: 0,
+      sha256: '',
+    }
+  }
+  const buffer = fs.readFileSync(backupPath)
+  return {
+    provided: true,
+    exists: true,
+    sizeBytes: buffer.length,
+    sha256: crypto.createHash('sha256').update(buffer).digest('hex'),
+  }
+}
+
+function buildMigrationManifest(rootDir = ROOT_DIR) {
+  return listMigrationDirectories(rootDir).map((migrationId) => {
+    const relativePath = path.join('prisma', 'migrations', migrationId, 'migration.sql')
+    const absolutePath = path.join(rootDir, relativePath)
+    if (!fs.existsSync(absolutePath)) {
+      return {
+        migrationId,
+        path: relativePath.replace(/\\/g, '/'),
+        exists: false,
+        sizeBytes: 0,
+        sha256: '',
+      }
+    }
+    const buffer = fs.readFileSync(absolutePath)
+    return {
+      migrationId,
+      path: relativePath.replace(/\\/g, '/'),
+      exists: true,
+      sizeBytes: buffer.length,
+      sha256: crypto.createHash('sha256').update(buffer).digest('hex'),
+    }
+  })
+}
+
+function compareMigrationManifests(expected = [], actual = []) {
+  const expectedById = new Map(expected.map((item) => [item.migrationId, item]))
+  const actualById = new Map(actual.map((item) => [item.migrationId, item]))
+  const missing = expected.filter((item) => !actualById.has(item.migrationId)).map((item) => item.migrationId)
+  const extra = actual.filter((item) => !expectedById.has(item.migrationId)).map((item) => item.migrationId)
+  const changed = expected
+    .filter((item) => {
+      const current = actualById.get(item.migrationId)
+      return current && (
+        current.exists !== item.exists ||
+        current.sizeBytes !== item.sizeBytes ||
+        current.sha256 !== item.sha256
+      )
+    })
+    .map((item) => item.migrationId)
+  return {
+    matches: missing.length === 0 && extra.length === 0 && changed.length === 0,
+    expectedCount: expected.length,
+    actualCount: actual.length,
+    missing,
+    extra,
+    changed,
+  }
+}
+
+function addCommonBlockers(blockers, preflight, structureRehearsal, repairSql, options) {
+  if (!preflight) {
+    blockers.push({ key: 'preflight.missing', message: '缺少真实施工前 preflight 报告。' })
+  }
+  if (!structureRehearsal) {
+    blockers.push({ key: 'structureRehearsal.missing', message: '缺少克隆库结构修复演练报告。' })
+    return
+  }
+
+  if (preflight?.backupEvidence?.usable !== true) {
+    blockers.push({ key: 'backupEvidence', message: '真实施工前必须有可用的当前数据库备份。' })
+  }
+  if (preflight?.backupVerification && preflight.backupVerification.ok !== true) {
+    blockers.push({ key: 'backupVerification', message: '当前数据库备份未通过 pg_restore 可读性校验。' })
+  }
+  if (!migrationSchemaDiffEvidenceIsSatisfied(preflight, structureRehearsal)) {
+    blockers.push({
+      key: 'migrationSchemaDiff.notEmpty',
+      message: 'migrations 重放结果必须先和 schema.prisma 对齐；如本机缺 shadow 库，必须提供已通过的克隆库结构修复演练证据。',
+    })
+  }
+  if (structureRehearsal.status !== 'structure-repair-rehearsal-passed') {
+    blockers.push({
+      key: 'structureRehearsal.notPassed',
+      message: '克隆库结构修复演练未通过，不能生成真实施工授权。',
+    })
+  }
+  if (structureRehearsal.repairApply?.ok !== true) {
+    blockers.push({ key: 'repairApply.notOk', message: '结构修复 SQL 在克隆库未成功执行。' })
+  }
+  if (structureRehearsal.repairSqlSummary?.hasDestructiveStatements === true) {
+    blockers.push({
+      key: 'repairSql.destructive',
+      message: '结构修复 SQL 含 DROP 类破坏性语句，禁止自动授权真实施工。',
+    })
+  }
+  if (!diffIsEmpty(structureRehearsal.currentSchemaDiffAfter)) {
+    blockers.push({
+      key: 'currentSchemaDiffAfter.notEmpty',
+      message: '克隆库修复后，当前库到 schema.prisma 的 diff 仍不为空。',
+    })
+  }
+  if (!diffIsEmpty(structureRehearsal.migrationDiffAfter)) {
+    blockers.push({
+      key: 'migrationDiffAfter.notEmpty',
+      message: '克隆库修复后，migrations 到当前库的 diff 仍不为空。',
+    })
+  }
+
+  const baselineCount = structureRehearsal.baselineResolvePlan?.migrationCount ?? null
+  if (baselineCount == null || structureRehearsal.baselineResolvePlan?.candidate !== true) {
+    blockers.push({ key: 'baselineResolvePlan.notCandidate', message: '演练报告未给出可 baseline resolve 的迁移清单。' })
+  }
+  if (structureRehearsal.baselineResolveRehearsal?.ok !== true) {
+    blockers.push({ key: 'baselineResolveRehearsal.notOk', message: '克隆库 baseline resolve 演练未通过。' })
+  }
+  if (
+    baselineCount != null &&
+    structureRehearsal.baselineResolveRehearsal?.appliedCount != null &&
+    structureRehearsal.baselineResolveRehearsal.appliedCount !== baselineCount
+  ) {
+    blockers.push({
+      key: 'baselineResolveRehearsal.countMismatch',
+      message: 'baseline resolve 演练成功数量和迁移清单数量不一致。',
+    })
+  }
+  if (preflight?.pendingMigrationCount != null && baselineCount != null && preflight.pendingMigrationCount !== baselineCount) {
+    blockers.push({
+      key: 'preflight.pendingMigrationCountMismatch',
+      message: `preflight pending migration 数量为 ${preflight.pendingMigrationCount}，演练 baseline 数量为 ${baselineCount}。`,
+    })
+  }
+
+  const artifact = structureRehearsal.repairSqlArtifact || null
+  if (!repairSql) {
+    blockers.push({ key: 'repairSql.missing', message: '缺少待执行结构修复 SQL 文件。' })
+  } else if (!repairSql.exists) {
+    blockers.push({ key: 'repairSql.notFound', message: '待执行结构修复 SQL 文件不存在。' })
+  } else if (repairSql.safety?.hasDestructiveStatements === true) {
+    blockers.push({
+      key: 'repairSql.fileDestructive',
+      message: '待执行结构修复 SQL 文件本体含 DROP/清表类破坏性语句，禁止真实施工。',
+    })
+  } else if (artifact) {
+    if (artifact.sizeBytes != null && repairSql.sizeBytes !== artifact.sizeBytes) {
+      blockers.push({ key: 'repairSql.sizeMismatch', message: '待执行 SQL 文件大小和演练 artifact 不一致。' })
+    }
+    if (artifact.sha256 && repairSql.sha256 !== artifact.sha256) {
+      blockers.push({ key: 'repairSql.sha256Mismatch', message: '待执行 SQL 文件 sha256 和演练 artifact 不一致。' })
+    }
+  }
+  if (options.expectedSha256 && repairSql?.sha256 !== options.expectedSha256) {
+    blockers.push({ key: 'repairSql.expectedSha256Mismatch', message: '待执行 SQL 文件 sha256 和命令行指定值不一致。' })
+  }
+}
+
+function addPhaseBlockers(blockers, preflight, structureRehearsal, options, context = {}) {
+  if (options.phase === 'plan') return
+  if (options.confirm !== CONFIRM_TOKEN) {
+    blockers.push({ key: 'confirm', message: `真实执行必须显式传入 --confirm=${CONFIRM_TOKEN}。` })
+  }
+  if (!options.expectedSha256) {
+    blockers.push({
+      key: 'expectedSha256.missing',
+      message: '真实执行必须显式传入 --expected-sha256，避免执行错的结构修复 SQL。',
+    })
+  }
+  if (!context.actualDatabase) {
+    blockers.push({
+      key: 'databaseIdentity.missing',
+      message: '真实执行必须先读取当前 DATABASE_URL 并和 preflight 数据库身份比对。',
+    })
+  } else if (!databaseMatches(preflight?.database, context.actualDatabase)) {
+    blockers.push({
+      key: 'databaseIdentity.mismatch',
+      message: '当前 DATABASE_URL 指向的数据库和 preflight 报告不一致，禁止施工。',
+    })
+  }
+  const actualDatabaseIdentity = context.actualDatabase ? databaseIdentity(context.actualDatabase) : ''
+  if (!options.expectedDatabaseIdentity) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.missing',
+      message: '真实执行必须显式传入 --expected-database-identity，避免误连错库。',
+    })
+  } else if (options.expectedDatabaseIdentity !== actualDatabaseIdentity) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.mismatch',
+      message: '命令行指定的目标库身份和当前 DATABASE_URL 不一致，禁止施工。',
+    })
+  }
+
+  const backupFingerprint = context.backupFingerprint || null
+  if (!backupFingerprint?.provided) {
+    blockers.push({
+      key: 'backupFingerprint.missing',
+      message: '真实执行必须能从 preflight 报告重新定位备份文件并计算指纹。',
+    })
+  } else if (!backupFingerprint.exists) {
+    blockers.push({
+      key: 'backupFingerprint.notFound',
+      message: 'preflight 记录的备份文件已不存在，必须重新生成备份和 preflight。',
+    })
+  }
+  if (
+    backupFingerprint?.exists &&
+    preflight?.backupEvidence?.sizeBytes != null &&
+    backupFingerprint.sizeBytes !== preflight.backupEvidence.sizeBytes
+  ) {
+    blockers.push({
+      key: 'backupFingerprint.sizeMismatch',
+      message: '备份文件当前大小和 preflight 记录不一致，必须重新生成备份和 preflight。',
+    })
+  }
+  if (
+    backupFingerprint?.sha256 &&
+    preflight?.backupEvidence?.sha256 &&
+    backupFingerprint.sha256 !== preflight.backupEvidence.sha256
+  ) {
+    blockers.push({
+      key: 'backupFingerprint.sha256Mismatch',
+      message: '备份文件当前 SHA-256 和 preflight 记录不一致，必须重新生成备份和 preflight。',
+    })
+  }
+  if (!options.expectedBackupSha256) {
+    blockers.push({
+      key: 'expectedBackupSha256.missing',
+      message: '真实执行必须显式传入 --expected-backup-sha256，避免错用备份文件。',
+    })
+  } else if (backupFingerprint?.sha256 && options.expectedBackupSha256 !== backupFingerprint.sha256) {
+    blockers.push({
+      key: 'expectedBackupSha256.mismatch',
+      message: '命令行指定的备份 SHA-256 和当前备份文件不一致，禁止施工。',
+    })
+  }
+
+  const rehearsalManifest = structureRehearsal?.migrationManifest || []
+  const currentManifest = context.migrationManifest || []
+  if (!Array.isArray(rehearsalManifest) || rehearsalManifest.length === 0) {
+    blockers.push({
+      key: 'migrationManifest.missing',
+      message: '真实执行要求结构修复演练报告带 migration manifest，避免演练后迁移文件被改动。',
+    })
+  } else {
+    const manifestComparison = compareMigrationManifests(rehearsalManifest, currentManifest)
+    if (!manifestComparison.matches) {
+      blockers.push({
+        key: 'migrationManifest.mismatch',
+        message: '当前 prisma/migrations 文件清单或内容和结构修复演练时不一致，必须重新演练。',
+        value: {
+          expectedCount: manifestComparison.expectedCount,
+          actualCount: manifestComparison.actualCount,
+          missing: manifestComparison.missing.slice(0, 5),
+          extra: manifestComparison.extra.slice(0, 5),
+          changed: manifestComparison.changed.slice(0, 5),
+        },
+      })
+    }
+  }
+
+  const preflightAge = reportAgeMinutes(preflight?.checkedAt, context.checkedAt)
+  if (preflightAge == null) {
+    blockers.push({ key: 'preflight.checkedAt', message: '真实执行要求 preflight 报告带 checkedAt 时间。' })
+  } else if (preflightAge > options.maxPreflightAgeMinutes) {
+    blockers.push({
+      key: 'preflight.stale',
+      value: Math.round(preflightAge),
+      message: `preflight 报告超过 ${options.maxPreflightAgeMinutes} 分钟，必须重新生成。`,
+    })
+  }
+
+  const rehearsalAge = reportAgeMinutes(structureRehearsal?.checkedAt, context.checkedAt)
+  if (rehearsalAge == null) {
+    blockers.push({ key: 'structureRehearsal.checkedAt', message: '真实执行要求结构修复演练报告带 checkedAt 时间。' })
+  } else if (rehearsalAge > options.maxPreflightAgeMinutes) {
+    blockers.push({
+      key: 'structureRehearsal.stale',
+      value: Math.round(rehearsalAge),
+      message: `结构修复演练报告超过 ${options.maxPreflightAgeMinutes} 分钟，必须重新演练或显式调整门禁。`,
+    })
+  }
+
+  if (options.phase === 'apply-structure') {
+    if (preflight?.recommendedAction !== 'baseline-and-structure-repair-required') {
+      blockers.push({
+        key: 'preflight.recommendedAction',
+        message: '结构 SQL 写入阶段要求最新 preflight 仍为 baseline-and-structure-repair-required。',
+      })
+    }
+    if (preflight?.currentSchemaDiffHasSql !== true) {
+      blockers.push({
+        key: 'preflight.currentSchemaDiffHasSql',
+        message: '结构 SQL 写入阶段要求最新 preflight 仍证明当前库缺结构差异。',
+      })
+    }
+  }
+  if (options.phase === 'resolve-baseline') {
+    if (preflight?.currentSchemaDiffHasSql === true) {
+      blockers.push({
+        key: 'postRepairPreflight.currentSchemaDiffHasSql',
+        message: 'baseline resolve 前必须先证明真实库到 schema.prisma 已无结构 diff。',
+      })
+    }
+    if (!diffIsEmpty(preflight?.migrationDiff)) {
+      blockers.push({
+        key: 'postRepairPreflight.migrationDiff.notEmpty',
+        message: 'baseline resolve 前必须先证明 migrations 到真实库已无结构 diff。',
+      })
+    }
+    const migrationIds = structureRehearsal?.baselineResolvePlan?.migrationIds || []
+    if (migrationIds.length === 0) {
+      blockers.push({ key: 'baselineResolvePlan.migrationIds', message: '缺少逐项 baseline resolve 的 migrationId 清单。' })
+    }
+  }
+}
+
+function buildApplyStructureArgs({
+  apply,
+  preflightPath,
+  structureRehearsalPath,
+  repairSqlPath,
+  repairSqlSha256,
+  databaseIdentityValue,
+  backupSha256,
+}) {
+  const args = [
+    'scripts/apply-prisma-structure-repair.js',
+    '--phase=apply-structure',
+  ]
+  if (apply) args.push('--apply')
+  args.push(
+    `--confirm=${CONFIRM_TOKEN}`,
+    '--expected-sha256',
+    repairSqlSha256,
+    '--expected-database-identity',
+    databaseIdentityValue,
+    '--expected-backup-sha256',
+    backupSha256,
+    '--preflight',
+    preflightPath,
+    '--structure-rehearsal',
+    structureRehearsalPath,
+    '--repair-sql',
+    repairSqlPath,
+  )
+  return args
+}
+
+function buildExactPhaseCommands({
+  preflight,
+  structureRehearsal,
+  repairSql,
+  options = parseArgs([]),
+}) {
+  const repairSqlSha256 = repairSql?.sha256 || structureRehearsal?.repairSqlArtifact?.sha256 || ''
+  const databaseIdentityValue = preflight?.database ? databaseIdentity(preflight.database) : ''
+  const backupSha256 = preflight?.backupEvidence?.sha256 || ''
+  const preflightPath = options.preflightPath || ''
+  const structureRehearsalPath = options.structureRehearsalPath || ''
+  const repairSqlPath = options.repairSqlPath || structureRehearsal?.repairSqlArtifact?.path || ''
+  const missing = []
+
+  if (!repairSqlSha256) missing.push('repairSqlSha256')
+  if (!databaseIdentityValue) missing.push('databaseIdentity')
+  if (!backupSha256) missing.push('backupSha256')
+  if (!preflightPath) missing.push('preflightPath')
+  if (!structureRehearsalPath) missing.push('structureRehearsalPath')
+  if (!repairSqlPath) missing.push('repairSqlPath')
+
+  if (missing.length > 0) {
+    return {
+      available: false,
+      missing,
+      applyStructureDryRun: null,
+      applyStructure: null,
+      resolveBaselineTemplate: null,
+    }
+  }
+
+  return {
+    available: true,
+    missing: [],
+    applyStructureDryRun: commandArgs(
+      'apply-structure-dry-run',
+      buildApplyStructureArgs({
+        apply: false,
+        preflightPath,
+        structureRehearsalPath,
+        repairSqlPath,
+        repairSqlSha256,
+        databaseIdentityValue,
+        backupSha256,
+      }),
+      '真实写库前的最后复核：校验目标库身份、备份 SHA、SQL SHA、迁移清单和证据新鲜度，但不写库。',
+    ),
+    applyStructure: commandArgs(
+      'apply-structure',
+      buildApplyStructureArgs({
+        apply: true,
+        preflightPath,
+        structureRehearsalPath,
+        repairSqlPath,
+        repairSqlSha256,
+        databaseIdentityValue,
+        backupSha256,
+      }),
+      '取得明确授权后，写入已演练且指纹匹配的结构修复 SQL。',
+      true,
+    ),
+    resolveBaselineTemplate: commandArgs(
+      'resolve-baseline-template',
+      [
+        'scripts/apply-prisma-structure-repair.js',
+        '--phase=resolve-baseline',
+        '--apply',
+        `--confirm=${CONFIRM_TOKEN}`,
+        '--expected-sha256',
+        repairSqlSha256,
+        '--expected-database-identity',
+        databaseIdentityValue,
+        '--expected-backup-sha256',
+        backupSha256,
+        '--preflight',
+        '<post-repair-preflight.json>',
+        '--structure-rehearsal',
+        structureRehearsalPath,
+        '--repair-sql',
+        repairSqlPath,
+      ],
+      '结构修复后重新生成 post-repair preflight，再用该模板逐项补齐 Prisma 迁移历史。',
+      true,
+    ),
+  }
+}
+
+function buildAuthorizedStructureRepairPlan({
+  preflight,
+  structureRehearsal,
+  repairSql,
+  options = parseArgs([]),
+  actualDatabase = null,
+  backupFingerprint = null,
+  migrationManifest = null,
+  checkedAt = new Date().toISOString(),
+}) {
+  const blockers = []
+  addCommonBlockers(blockers, preflight, structureRehearsal, repairSql, options)
+  addPhaseBlockers(blockers, preflight, structureRehearsal, options, {
+    actualDatabase,
+    backupFingerprint,
+    migrationManifest,
+    checkedAt,
+  })
+
+  const baselineResolveMigrationIds = structureRehearsal?.baselineResolvePlan?.migrationIds || []
+  const readyToApply = options.phase !== 'plan' && options.apply === true && blockers.length === 0
+  const plannedDatabaseIdentity =
+    options.expectedDatabaseIdentity ||
+    (preflight?.database ? databaseIdentity(preflight.database) : '')
+  const plannedBackupSha256 =
+    options.expectedBackupSha256 || preflight?.backupEvidence?.sha256 || ''
+  return {
+    mode: 'authorized-prisma-structure-repair',
+    phase: options.phase,
+    dryRun: !options.apply,
+    readyToApply,
+    confirmToken: CONFIRM_TOKEN,
+    checkedAt,
+    database: preflight?.database || null,
+    actualDatabase,
+    expectedDatabaseIdentity: plannedDatabaseIdentity,
+    evidenceFreshness: {
+      maxAgeMinutes: options.maxPreflightAgeMinutes,
+      preflightAgeMinutes: reportAgeMinutes(preflight?.checkedAt, checkedAt),
+      structureRehearsalAgeMinutes: reportAgeMinutes(structureRehearsal?.checkedAt, checkedAt),
+    },
+    backupArtifact: backupFingerprint
+      ? {
+          provided: backupFingerprint.provided === true,
+          exists: backupFingerprint.exists === true,
+          sizeBytes: backupFingerprint.sizeBytes,
+          sha256: backupFingerprint.sha256,
+        }
+      : null,
+    expectedBackupSha256: plannedBackupSha256,
+    migrationManifestSummary: migrationManifest
+      ? {
+          count: migrationManifest.length,
+          sample: migrationManifest.slice(0, 5).map((item) => ({
+            migrationId: item.migrationId,
+            exists: item.exists,
+            sizeBytes: item.sizeBytes,
+            sha256: item.sha256,
+          })),
+        }
+      : null,
+    repairSqlArtifact: repairSql
+      ? {
+          provided: repairSql.provided === true,
+          exists: repairSql.exists === true,
+          sizeBytes: repairSql.sizeBytes,
+          sha256: repairSql.sha256,
+        }
+      : null,
+    repairSqlSafety: repairSql?.safety || null,
+    expectedSha256: options.expectedSha256 || structureRehearsal?.repairSqlArtifact?.sha256 || '',
+    baselineResolveMigrationCount: baselineResolveMigrationIds.length,
+    baselineResolveMigrationSample: baselineResolveMigrationIds.slice(0, 8),
+    blockers,
+    exactPhaseCommands: buildExactPhaseCommands({
+      preflight,
+      structureRehearsal,
+      repairSql,
+      options,
+    }),
+    commands: [
+      command(
+        'dry-run-plan',
+        'node scripts/apply-prisma-structure-repair.js --preflight <fresh-preflight.json> --structure-rehearsal <structure-repair-rehearsal.json> --repair-sql <structure-repair.sql> --output <plan.json>',
+        '真实施工前先生成授权执行计划，核对 SQL sha256、pending migration 数量和演练证据。',
+      ),
+      command(
+        'apply-structure',
+        `node scripts/apply-prisma-structure-repair.js --phase=apply-structure --apply --confirm=${CONFIRM_TOKEN} --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <fresh-preflight.json> --structure-rehearsal <structure-repair-rehearsal.json> --repair-sql <structure-repair.sql>`,
+        '仅写入已演练并校验 sha256 的结构修复 SQL；成功后重新跑 preflight。',
+        true,
+      ),
+      command(
+        'resolve-baseline',
+        `node scripts/apply-prisma-structure-repair.js --phase=resolve-baseline --apply --confirm=${CONFIRM_TOKEN} --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <post-repair-preflight.json> --structure-rehearsal <structure-repair-rehearsal.json> --repair-sql <structure-repair.sql>`,
+        '真实库结构 diff 归零后，按演练清单逐项 baseline resolve。',
+        true,
+      ),
+      command(
+        'apply-foundation-guards',
+        'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        'baseline 完成后，事务性应用治理迁移、外部视图和数据库护栏。',
+        true,
+      ),
+    ],
+  }
+}
+
+function summarizeCommandResult(result) {
+  if (!result) return null
+  return {
+    ok: result.ok === true,
+    status: result.status ?? null,
+    stdoutPreview: String(result.stdout ?? '').slice(0, 1000),
+    stderrPreview: String(result.stderr ?? '').slice(0, 1000),
+    error: result.error || '',
+  }
+}
+
+async function applyStructureSql(databaseUrl, sql) {
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    await client.query('BEGIN')
+    await client.query(sql)
+    await client.query('COMMIT')
+    return { ok: true, error: '' }
+  } catch (error) {
+    try {
+      await client.query('ROLLBACK')
+    } catch {
+      // ignore rollback failure; original error is more useful.
+    }
+    return { ok: false, error: error instanceof Error ? error.message : String(error) }
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+function resolveBaselineMigrationIds(migrationIds, env = process.env) {
+  const results = []
+  for (const migrationId of migrationIds) {
+    const result = runPrismaCommandWithEnv(['migrate', 'resolve', '--applied', migrationId], env)
+    results.push({ migrationId, ...result })
+    if (result.status !== 0) break
+  }
+  return {
+    attemptedCount: results.length,
+    appliedCount: results.filter((result) => result.status === 0).length,
+    failedCount: results.filter((result) => result.status !== 0).length,
+    ok: results.length === migrationIds.length && results.every((result) => result.status === 0),
+    firstFailed: results.find((result) => result.status !== 0) || null,
+  }
+}
+
+async function runApply(options = parseArgs(), env = process.env) {
+  const preflight = readJsonFile(options.preflightPath)
+  const structureRehearsal = readJsonFile(options.structureRehearsalPath)
+  const repairSql = resolveRepairSqlFingerprint(options, structureRehearsal)
+  const databaseUrl = options.phase === 'plan' ? '' : loadDatabaseUrl(ROOT_DIR, env)
+  const actualDatabase = databaseUrl ? describeDatabaseUrl(databaseUrl) : null
+  const backupFingerprint = options.phase === 'plan' ? null : backupFingerprintFromPreflight(preflight)
+  const migrationManifest = options.phase === 'plan' ? null : buildMigrationManifest(ROOT_DIR)
+  const plan = buildAuthorizedStructureRepairPlan({
+    preflight,
+    structureRehearsal,
+    repairSql,
+    options,
+    actualDatabase,
+    backupFingerprint,
+    migrationManifest,
+  })
+
+  const reportBase = {
+    ...plan,
+    applied: null,
+    verificationAfterApply: null,
+    baselineResolve: null,
+  }
+
+  if (!plan.readyToApply) return reportBase
+
+  if (options.phase === 'apply-structure') {
+    const sqlPath = path.resolve(ROOT_DIR, options.repairSqlPath || structureRehearsal.repairSqlArtifact.path)
+    const sql = fs.readFileSync(sqlPath, 'utf8')
+    const applied = await applyStructureSql(databaseUrl, sql)
+    if (!applied.ok) {
+      return {
+        ...reportBase,
+        applied,
+      }
+    }
+    const verifiedEnv = { ...env, DATABASE_URL: databaseUrl }
+    const currentSchemaDiff = runCurrentSchemaDiff(verifiedEnv)
+    const migrationDiff = runMigrationDiffWithShadow(loadShadowDatabaseUrl(ROOT_DIR, env), databaseUrl)
+    return {
+      ...reportBase,
+      database: describeDatabaseUrl(databaseUrl),
+      applied,
+      verificationAfterApply: {
+        currentSchemaDiff: summarizeCommandResult(currentSchemaDiff),
+        migrationDiff: summarizeCommandResult(migrationDiff),
+        structureAligned: diffIsEmpty(currentSchemaDiff) && diffIsEmpty(migrationDiff),
+      },
+    }
+  }
+
+  if (options.phase === 'resolve-baseline') {
+    const migrationIds = structureRehearsal.baselineResolvePlan.migrationIds
+    const verifiedEnv = { ...env, DATABASE_URL: databaseUrl }
+    const baselineResolve = resolveBaselineMigrationIds(migrationIds, verifiedEnv)
+    const prismaMigrateStatus = runPrismaCommandWithEnv(['migrate', 'status'], verifiedEnv)
+    return {
+      ...reportBase,
+      baselineResolve,
+      prismaMigrateStatus: summarizeCommandResult(prismaMigrateStatus),
+    }
+  }
+
+  return reportBase
+}
+
+async function main() {
+  const options = parseArgs()
+  const report = await runApply(options)
+  writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+  if (
+    options.phase !== 'plan' &&
+    (
+      (Array.isArray(report.blockers) && report.blockers.length > 0) ||
+      (options.apply && (report.applied?.ok === false || report.baselineResolve?.ok === false))
+    )
+  ) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  CONFIRM_TOKEN,
+  addCommonBlockers,
+  addPhaseBlockers,
+  backupFingerprintFromPreflight,
+  buildAuthorizedStructureRepairPlan,
+  buildExactPhaseCommands,
+  buildApplyStructureArgs,
+  buildMigrationManifest,
+  compareMigrationManifests,
+  databaseIdentity,
+  databaseMatches,
+  diffIsEmpty,
+  migrationSchemaDiffEvidenceIsSatisfied,
+  fileFingerprint,
+  parseArgs,
+  reportAgeMinutes,
+  resolveBaselineMigrationIds,
+  runApply,
+  summarizeSqlSafety,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/create-postgres-backup.js b/furniture-3d-system/scripts/create-postgres-backup.js
new file mode 100644
index 00000000..c68208df
--- /dev/null
+++ b/furniture-3d-system/scripts/create-postgres-backup.js
@@ -0,0 +1,399 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const {
+  describeDatabaseUrl,
+  loadDatabaseUrl,
+} = require('./diagnose-prisma-migration-baseline')
+const {
+  checkCommandAvailable,
+  checkDockerAvailability,
+  resolvePostgresTool,
+  verifyBackupFile,
+} = require('./preflight-database-foundation-change')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+
+function sanitizeFileName(value) {
+  return String(value || 'database')
+    .replace(/[^A-Za-z0-9_.-]+/g, '_')
+    .replace(/^_+|_+$/g, '')
+    || 'database'
+}
+
+function timestampForFile(date = new Date()) {
+  return date.toISOString().replace(/[-:]/g, '').replace(/\.\d{3}Z$/, 'Z')
+}
+
+function buildBackupFilePath({ databaseName, outputDir, now = new Date() }) {
+  const safeDatabaseName = sanitizeFileName(databaseName)
+  return path.resolve(outputDir, `${safeDatabaseName}-${timestampForFile(now)}.dump`)
+}
+
+function parsePostgresUrl(databaseUrl) {
+  const parsed = new URL(databaseUrl)
+  return {
+    host: parsed.hostname,
+    port: parsed.port,
+    databaseName: parsed.pathname.replace(/^\//, ''),
+    username: decodeURIComponent(parsed.username || ''),
+    password: decodeURIComponent(parsed.password || ''),
+  }
+}
+
+function buildPgDumpArgs({ databaseUrl, outputFile }) {
+  const parsed = parsePostgresUrl(databaseUrl)
+  const args = [
+    '--format=custom',
+    '--no-owner',
+    '--no-privileges',
+    '--file',
+    outputFile,
+  ]
+  if (parsed.host) args.push('--host', parsed.host)
+  if (parsed.port) args.push('--port', parsed.port)
+  if (parsed.username) args.push('--username', parsed.username)
+  if (parsed.databaseName) args.push('--dbname', parsed.databaseName)
+  return {
+    args,
+    env: parsed.password ? { PGPASSWORD: parsed.password } : {},
+  }
+}
+
+function resolveDockerDatabaseHost(host) {
+  if (['localhost', '127.0.0.1', '::1'].includes(String(host || '').toLowerCase())) {
+    return process.platform === 'win32' ? 'host.docker.internal' : 'localhost'
+  }
+  return host
+}
+
+function buildDockerVolumeArg(hostDir) {
+  return `${path.resolve(hostDir)}:/backup`
+}
+
+function buildDockerEnvFlagArgs(envVars = {}) {
+  return Object.keys(envVars)
+    .filter((key) => envVars[key])
+    .flatMap((key) => ['--env', key])
+}
+
+function buildDockerPgDumpArgs({ databaseUrl, outputFile }) {
+  const parsed = parsePostgresUrl(databaseUrl)
+  const containerOutputFile = `/backup/${path.basename(outputFile)}`
+  const args = [
+    'pg_dump',
+    '--format=custom',
+    '--no-owner',
+    '--no-privileges',
+    '--file',
+    containerOutputFile,
+  ]
+  const host = resolveDockerDatabaseHost(parsed.host)
+  if (host) args.push('--host', host)
+  if (parsed.port) args.push('--port', parsed.port)
+  if (parsed.username) args.push('--username', parsed.username)
+  if (parsed.databaseName) args.push('--dbname', parsed.databaseName)
+  return {
+    args,
+    env: parsed.password ? { PGPASSWORD: parsed.password } : {},
+    host,
+    containerOutputFile,
+    volumeArg: buildDockerVolumeArg(path.dirname(outputFile)),
+  }
+}
+
+function parseBackupCliArgs(argv = process.argv.slice(2), env = process.env) {
+  let outputDir = env.DATABASE_BACKUP_DIR || env.DB_BACKUP_DIR || path.join(ROOT_DIR, '.database-backups')
+  let useDocker = env.POSTGRES_BACKUP_USE_DOCKER === '1'
+  let allowDockerPull = env.POSTGRES_BACKUP_ALLOW_DOCKER_PULL === '1'
+  let dockerImage = env.POSTGRES_DOCKER_IMAGE || 'postgres:16'
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output-dir') {
+      outputDir = argv[index + 1] || ''
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output-dir=')) {
+      outputDir = arg.slice('--output-dir='.length)
+      continue
+    }
+    if (arg === '--use-docker') {
+      useDocker = true
+      continue
+    }
+    if (arg === '--allow-docker-pull') {
+      allowDockerPull = true
+      continue
+    }
+    if (arg === '--docker-image') {
+      dockerImage = argv[index + 1] || ''
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-image=')) {
+      dockerImage = arg.slice('--docker-image='.length)
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (!outputDir) {
+    throw new Error('备份输出目录不能为空。')
+  }
+  if (useDocker && !dockerImage) {
+    throw new Error('Docker 备份镜像不能为空。')
+  }
+
+  return {
+    allowDockerPull,
+    dockerImage,
+    outputDir: path.resolve(ROOT_DIR, outputDir),
+    useDocker,
+  }
+}
+
+function createBackup({
+  databaseUrl,
+  outputDir = path.join(ROOT_DIR, '.database-backups'),
+  env = process.env,
+  useDocker = false,
+  allowDockerPull = false,
+  dockerImage = env.POSTGRES_DOCKER_IMAGE || 'postgres:16',
+}) {
+  const pgDump = checkCommandAvailable('pg_dump', ['--version'], env)
+  if (!pgDump.available) {
+    if (useDocker) {
+      return createBackupWithDocker({
+        allowDockerPull,
+        databaseUrl,
+        dockerImage,
+        env,
+        outputDir,
+      })
+    }
+    throw new Error([
+      'pg_dump 不可用，无法生成 PostgreSQL 标准备份。',
+      `当前检测入口：${pgDump.executable}（${pgDump.configuredBy}）。`,
+      '可通过 PG_DUMP_PATH、POSTGRES_BIN_DIR 或 PG_BIN_DIR 指定 PostgreSQL client 工具目录。',
+    ].join('\n'))
+  }
+
+  const database = describeDatabaseUrl(databaseUrl)
+  const outputFile = buildBackupFilePath({
+    databaseName: database.databaseName,
+    outputDir,
+  })
+  fs.mkdirSync(path.dirname(outputFile), { recursive: true })
+
+  const pgDumpCommand = buildPgDumpArgs({ databaseUrl, outputFile })
+  const pgDumpTool = resolvePostgresTool('pg_dump', env)
+  const result = spawnSync(pgDumpTool.executable, pgDumpCommand.args, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: {
+      ...process.env,
+      ...pgDumpCommand.env,
+    },
+    windowsHide: true,
+  })
+  if (result.status !== 0) {
+    throw new Error([
+      'pg_dump 执行失败。',
+      result.stderr ? `stderr=${result.stderr.trim()}` : '',
+      result.error ? `error=${result.error.message}` : '',
+    ].filter(Boolean).join('\n'))
+  }
+
+  const sizeBytes = fs.existsSync(outputFile) ? fs.statSync(outputFile).size : 0
+  if (sizeBytes <= 0) {
+    throw new Error('pg_dump 完成但备份文件为空，拒绝把它当作可用备份。')
+  }
+
+  const pgRestore = checkCommandAvailable('pg_restore', ['--version'], env)
+  const verification = verifyBackupFile({
+    usable: true,
+    path: outputFile,
+  }, {
+    pgRestore,
+  }, env)
+  if (!verification.ok) {
+    throw new Error(verification.message)
+  }
+
+  return {
+    outputFile,
+    sizeBytes,
+    database,
+    pgDump: {
+      executable: pgDumpTool.executable,
+      configuredBy: pgDumpTool.configuredBy,
+    },
+    backupVerification: verification,
+  }
+}
+
+function assertDockerBackupReady({ dockerImage, allowDockerPull, env }) {
+  const docker = checkDockerAvailability({ ...env, POSTGRES_DOCKER_IMAGE: dockerImage })
+  if (!docker.available) {
+    throw new Error('Docker 不可用，无法使用 Docker 兜底生成 PostgreSQL 备份。')
+  }
+  if (!docker.postgresImageAvailable && !allowDockerPull) {
+    throw new Error([
+      `Docker 镜像 ${dockerImage} 不存在。`,
+      '为避免隐式下载镜像，默认拒绝继续。',
+      '请先准备镜像，或显式传入 --allow-docker-pull。',
+    ].join('\n'))
+  }
+  return docker
+}
+
+function createBackupWithDocker({
+  databaseUrl,
+  outputDir = path.join(ROOT_DIR, '.database-backups'),
+  env = process.env,
+  dockerImage = 'postgres:16',
+  allowDockerPull = false,
+}) {
+  const docker = assertDockerBackupReady({ dockerImage, allowDockerPull, env })
+  const database = describeDatabaseUrl(databaseUrl)
+  const outputFile = buildBackupFilePath({
+    databaseName: database.databaseName,
+    outputDir,
+  })
+  fs.mkdirSync(path.dirname(outputFile), { recursive: true })
+
+  const dockerPgDump = buildDockerPgDumpArgs({ databaseUrl, outputFile })
+  const dockerArgs = [
+    'run',
+    '--rm',
+    '-v',
+    dockerPgDump.volumeArg,
+    ...buildDockerEnvFlagArgs(dockerPgDump.env),
+    dockerImage,
+    ...dockerPgDump.args,
+  ]
+  const result = spawnSync('docker', dockerArgs, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: {
+      ...process.env,
+      ...env,
+      ...dockerPgDump.env,
+    },
+    windowsHide: true,
+  })
+  if (result.status !== 0) {
+    throw new Error([
+      'Docker pg_dump 执行失败。',
+      result.stderr ? `stderr=${result.stderr.trim()}` : '',
+      result.error ? `error=${result.error.message}` : '',
+    ].filter(Boolean).join('\n'))
+  }
+
+  const sizeBytes = fs.existsSync(outputFile) ? fs.statSync(outputFile).size : 0
+  if (sizeBytes <= 0) {
+    throw new Error('Docker pg_dump 完成但备份文件为空，拒绝把它当作可用备份。')
+  }
+
+  const verifyArgs = [
+    'run',
+    '--rm',
+    '-v',
+    dockerPgDump.volumeArg,
+    dockerImage,
+    'pg_restore',
+    '--list',
+    dockerPgDump.containerOutputFile,
+  ]
+  const verification = spawnSync('docker', verifyArgs, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: {
+      ...process.env,
+      ...env,
+    },
+    windowsHide: true,
+  })
+  if (verification.status !== 0) {
+    throw new Error([
+      'Docker pg_restore --list 校验失败，不能把该备份作为迁移兜底。',
+      verification.stderr ? `stderr=${verification.stderr.trim()}` : '',
+      verification.error ? `error=${verification.error.message}` : '',
+    ].filter(Boolean).join('\n'))
+  }
+
+  return {
+    outputFile,
+    sizeBytes,
+    database,
+    pgDump: {
+      executable: 'docker',
+      configuredBy: '--use-docker',
+      dockerImage,
+      databaseHost: dockerPgDump.host,
+      postgresImageAvailableBeforeRun: docker.postgresImageAvailable,
+    },
+    backupVerification: {
+      attempted: true,
+      ok: true,
+      status: verification.status,
+      stdoutPreview: String(verification.stdout ?? '').slice(0, 500),
+      stderr: String(verification.stderr ?? '').trim(),
+      tooling: {
+        executable: 'docker',
+        configuredBy: '--use-docker',
+      },
+      message: '备份文件可被 Docker pg_restore --list 读取。',
+    },
+  }
+}
+
+function main() {
+  const databaseUrl = loadDatabaseUrl()
+  if (!databaseUrl) {
+    throw new Error('DATABASE_URL 未配置，无法备份数据库。')
+  }
+  const cli = parseBackupCliArgs()
+  const report = createBackup({
+    databaseUrl,
+    allowDockerPull: cli.allowDockerPull,
+    dockerImage: cli.dockerImage,
+    outputDir: cli.outputDir,
+    useDocker: cli.useDocker,
+  })
+  console.log(JSON.stringify({
+    mode: 'postgres-backup',
+    ok: true,
+    outputFile: report.outputFile,
+    sizeBytes: report.sizeBytes,
+    database: report.database,
+    pgDump: report.pgDump,
+    backupVerification: report.backupVerification,
+  }, null, 2))
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  buildBackupFilePath,
+  buildDockerEnvFlagArgs,
+  buildDockerPgDumpArgs,
+  buildDockerVolumeArg,
+  buildPgDumpArgs,
+  createBackup,
+  createBackupWithDocker,
+  parsePostgresUrl,
+  parseBackupCliArgs,
+  resolveDockerDatabaseHost,
+  sanitizeFileName,
+  timestampForFile,
+}
diff --git a/furniture-3d-system/scripts/diagnose-prisma-migration-baseline.js b/furniture-3d-system/scripts/diagnose-prisma-migration-baseline.js
new file mode 100644
index 00000000..503ee8dc
--- /dev/null
+++ b/furniture-3d-system/scripts/diagnose-prisma-migration-baseline.js
@@ -0,0 +1,540 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const { Pool } = require('pg')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+
+function loadDatabaseUrl(rootDir = ROOT_DIR, env = process.env) {
+  return loadEnvValue('DATABASE_URL', rootDir, env)
+}
+
+function loadShadowDatabaseUrl(rootDir = ROOT_DIR, env = process.env) {
+  return loadEnvValue('SHADOW_DATABASE_URL', rootDir, env)
+}
+
+function loadEnvValue(name, rootDir = ROOT_DIR, env = process.env) {
+  if (env[name]) return env[name]
+
+  const envPath = path.join(rootDir, '.env')
+  if (!fs.existsSync(envPath)) return ''
+
+  const content = fs.readFileSync(envPath, 'utf8')
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex === -1) continue
+
+    const key = trimmed.slice(0, separatorIndex).trim()
+    if (key !== name) continue
+
+    let value = trimmed.slice(separatorIndex + 1).trim()
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1)
+    }
+    return value
+  }
+
+  return ''
+}
+
+function describeDatabaseUrl(databaseUrl) {
+  try {
+    const parsed = new URL(databaseUrl)
+    return {
+      protocol: parsed.protocol.replace(/:$/, ''),
+      username: parsed.username || '',
+      host: parsed.hostname,
+      port: parsed.port || '',
+      databaseName: parsed.pathname.replace(/^\//, ''),
+      schema: parsed.searchParams.get('schema') || parsed.searchParams.get('currentSchema') || '',
+    }
+  } catch {
+    return {
+      protocol: '',
+      username: '',
+      host: '',
+      port: '',
+      databaseName: '',
+      schema: '',
+    }
+  }
+}
+
+function getDatabaseIdentity(databaseUrl) {
+  const description = describeDatabaseUrl(databaseUrl)
+  return [
+    description.protocol,
+    description.username.toLowerCase(),
+    description.host.toLowerCase(),
+    description.port,
+    description.databaseName.toLowerCase(),
+    description.schema.toLowerCase(),
+  ].join('|')
+}
+
+function getDatabasePhysicalIdentity(databaseUrl) {
+  const description = describeDatabaseUrl(databaseUrl)
+  return [
+    description.protocol,
+    description.host.toLowerCase(),
+    description.port,
+    description.databaseName.toLowerCase(),
+    description.schema.toLowerCase(),
+  ].join('|')
+}
+
+function validateShadowDatabaseUrl(shadowDatabaseUrl, databaseUrl) {
+  if (!shadowDatabaseUrl) {
+    return {
+      ok: false,
+      reason: 'SHADOW_DATABASE_URL 未配置，无法只读证明 migrations 与当前数据库结构是否等价。',
+    }
+  }
+
+  const shadow = describeDatabaseUrl(shadowDatabaseUrl)
+  if (!shadow.databaseName) {
+    return {
+      ok: false,
+      reason: 'SHADOW_DATABASE_URL 格式无效，无法识别数据库名。',
+    }
+  }
+
+  if (databaseUrl && getDatabasePhysicalIdentity(shadowDatabaseUrl) === getDatabasePhysicalIdentity(databaseUrl)) {
+    return {
+      ok: false,
+      reason: 'SHADOW_DATABASE_URL 指向了目标数据库本身，禁止用真实库作为 shadow 库。',
+    }
+  }
+
+  if (!/(shadow|test|tmp|temp)/i.test(shadow.databaseName)) {
+    return {
+      ok: false,
+      reason: 'SHADOW_DATABASE_URL 的数据库名必须包含 shadow/test/tmp/temp，避免误用真实业务库。',
+    }
+  }
+
+  return {
+    ok: true,
+    reason: '',
+  }
+}
+
+function listMigrationDirectories(rootDir = ROOT_DIR) {
+  const migrationsDir = path.join(rootDir, 'prisma/migrations')
+  if (!fs.existsSync(migrationsDir)) return []
+
+  return fs
+    .readdirSync(migrationsDir, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => entry.name)
+    .sort()
+}
+
+function runPrismaCommand(args) {
+  const result = spawnSync(process.execPath, [PRISMA_CLI, ...args], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    windowsHide: true,
+  })
+  return {
+    ok: result.status === 0,
+    status: result.status,
+    stdout: String(result.stdout ?? '').trim(),
+    stderr: String(result.stderr ?? '').trim(),
+    error: result.error ? String(result.error.message ?? result.error) : '',
+  }
+}
+
+function runPrismaCommandWithEnv(args, env = process.env) {
+  const result = spawnSync(process.execPath, [PRISMA_CLI, ...args], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: { ...process.env, ...env },
+    windowsHide: true,
+  })
+  return {
+    ok: result.status === 0,
+    status: result.status,
+    stdout: String(result.stdout ?? '').trim(),
+    stderr: String(result.stderr ?? '').trim(),
+    error: result.error ? String(result.error.message ?? result.error) : '',
+  }
+}
+
+function runMigrationDiffWithShadow(shadowDatabaseUrl, databaseUrl = '') {
+  const shadowValidation = validateShadowDatabaseUrl(shadowDatabaseUrl, databaseUrl)
+  if (!shadowValidation.ok) {
+    return {
+      skipped: true,
+      ok: false,
+      status: null,
+      stdout: '',
+      stderr: '',
+      error: '',
+      reason: shadowValidation.reason,
+    }
+  }
+
+  const env = {
+    SHADOW_DATABASE_URL: shadowDatabaseUrl,
+  }
+  if (databaseUrl) env.DATABASE_URL = databaseUrl
+
+  return {
+    skipped: false,
+    ...runPrismaCommandWithEnv([
+      'migrate',
+      'diff',
+      '--from-migrations',
+      'prisma/migrations',
+      '--to-config-datasource',
+      '--script',
+      '--exit-code',
+    ], env),
+    reason: '',
+  }
+}
+
+function runMigrationSchemaDiffWithShadow(shadowDatabaseUrl, databaseUrl = '') {
+  const shadowValidation = validateShadowDatabaseUrl(shadowDatabaseUrl, databaseUrl)
+  if (!shadowValidation.ok) {
+    return {
+      skipped: true,
+      ok: false,
+      status: null,
+      stdout: '',
+      stderr: '',
+      error: '',
+      reason: shadowValidation.reason,
+    }
+  }
+
+  const env = {
+    SHADOW_DATABASE_URL: shadowDatabaseUrl,
+  }
+  if (databaseUrl) env.DATABASE_URL = databaseUrl
+
+  return {
+    skipped: false,
+    ...runPrismaCommandWithEnv([
+      'migrate',
+      'diff',
+      '--from-migrations',
+      'prisma/migrations',
+      '--to-schema',
+      'prisma/schema.prisma',
+      '--script',
+      '--exit-code',
+    ], env),
+    reason: '',
+  }
+}
+
+function runCurrentSchemaDiff(env = process.env) {
+  return runPrismaCommandWithEnv([
+    'migrate',
+    'diff',
+    '--from-config-datasource',
+    '--to-schema',
+    'prisma/schema.prisma',
+    '--script',
+    '--exit-code',
+  ])
+}
+
+function hasSqlDiff(stdout) {
+  return /\b(?:CREATE|ALTER|DROP)\s+(?:TYPE|TABLE|INDEX|CONSTRAINT|COLUMN|FOREIGN\s+KEY)\b/i.test(
+    String(stdout ?? ''),
+  )
+}
+
+function parsePendingPrismaMigrations(stdout) {
+  const lines = String(stdout ?? '').split(/\r?\n/)
+  const startIndex = lines.findIndex((line) =>
+    line.includes('Following migrations have not yet been applied:'),
+  )
+  if (startIndex === -1) return []
+
+  const pending = []
+  for (let index = startIndex + 1; index < lines.length; index += 1) {
+    const line = lines[index].trim()
+    if (!line) continue
+    if (line.startsWith('To apply migrations')) break
+    if (line.startsWith('Loaded Prisma config')) break
+    pending.push(line)
+  }
+  return pending
+}
+
+async function getMigrationHistoryStatus(databaseUrl) {
+  if (!databaseUrl) {
+    return {
+      tableExists: false,
+      totalMigrationRows: 0,
+      appliedMigrationRows: 0,
+      unfinishedMigrationRows: 0,
+      rolledBackMigrationRows: 0,
+      error: 'DATABASE_URL 未配置。',
+    }
+  }
+
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    const tableResult = await client.query("SELECT to_regclass('_prisma_migrations') AS relation_name")
+    const tableExists = tableResult.rows[0]?.relation_name !== null
+    if (!tableExists) {
+      return {
+        tableExists: false,
+        totalMigrationRows: 0,
+        appliedMigrationRows: 0,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+        error: '',
+      }
+    }
+
+    const result = await client.query(`
+      SELECT
+        COUNT(*)::integer AS total_migration_rows,
+        COUNT(*) FILTER (WHERE finished_at IS NOT NULL AND rolled_back_at IS NULL)::integer AS applied_migration_rows,
+        COUNT(*) FILTER (WHERE finished_at IS NULL AND rolled_back_at IS NULL)::integer AS unfinished_migration_rows,
+        COUNT(*) FILTER (WHERE rolled_back_at IS NOT NULL)::integer AS rolled_back_migration_rows
+      FROM _prisma_migrations
+    `)
+    const row = result.rows[0] ?? {}
+    return {
+      tableExists: true,
+      totalMigrationRows: row.total_migration_rows ?? 0,
+      appliedMigrationRows: row.applied_migration_rows ?? 0,
+      unfinishedMigrationRows: row.unfinished_migration_rows ?? 0,
+      rolledBackMigrationRows: row.rolled_back_migration_rows ?? 0,
+      error: '',
+    }
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+function buildBaselineDiagnosis({
+  database,
+  migrationDirectories,
+  prismaValidate,
+  prismaMigrateStatus,
+  currentSchemaDiff,
+  migrationDiff,
+  migrationSchemaDiff,
+  migrationHistory,
+}) {
+  const pendingMigrations = parsePendingPrismaMigrations(prismaMigrateStatus.stdout)
+  const blockers = []
+  if (!prismaValidate.ok) {
+    blockers.push({
+      key: 'prismaValidate',
+      message: 'Prisma schema 校验失败，不能继续讨论迁移基线。',
+    })
+  }
+  if (!migrationHistory.tableExists) {
+    blockers.push({
+      key: 'migrationHistory.tableExists',
+      message: '目标库缺少 _prisma_migrations，当前结构没有 Prisma 官方迁移历史。',
+    })
+  }
+  if (pendingMigrations.length > 0) {
+    blockers.push({
+      key: 'pendingMigrations',
+      value: pendingMigrations.length,
+      message: 'Prisma 官方迁移状态显示仍有未应用 migration。',
+    })
+  }
+  if (migrationHistory.unfinishedMigrationRows > 0) {
+    blockers.push({
+      key: 'migrationHistory.unfinishedMigrationRows',
+      value: migrationHistory.unfinishedMigrationRows,
+      message: '存在未完成 migration 记录。',
+    })
+  }
+  if (migrationHistory.rolledBackMigrationRows > 0) {
+    blockers.push({
+      key: 'migrationHistory.rolledBackMigrationRows',
+      value: migrationHistory.rolledBackMigrationRows,
+      message: '存在已回滚 migration 记录。',
+    })
+  }
+  if (currentSchemaDiff && hasSqlDiff(currentSchemaDiff.stdout)) {
+    blockers.push({
+      key: 'currentSchemaDiff.notEmpty',
+      message: '当前数据库结构和 schema.prisma 不一致，必须先补齐结构或完成迁移。',
+    })
+  } else if (currentSchemaDiff && !currentSchemaDiff.ok) {
+    blockers.push({
+      key: 'currentSchemaDiff.error',
+      message: 'Prisma 当前库到 schema 的 diff 执行失败，不能证明当前库结构匹配 schema。',
+    })
+  }
+  if (migrationDiff?.skipped) {
+    blockers.push({
+      key: 'migrationDiff.skipped',
+      message: migrationDiff.reason,
+    })
+  } else if (migrationDiff && migrationDiff.status === 2) {
+    blockers.push({
+      key: 'migrationDiff.notEmpty',
+      message: 'Prisma diff 显示 migrations 结果和当前数据库结构不一致，不能 baseline resolve。',
+    })
+  } else if (migrationDiff && !migrationDiff.ok) {
+    blockers.push({
+      key: 'migrationDiff.error',
+      message: 'Prisma diff 执行失败，不能证明当前数据库结构等价于 migrations。',
+    })
+  }
+  if (migrationSchemaDiff?.skipped) {
+    blockers.push({
+      key: 'migrationSchemaDiff.skipped',
+      message: migrationSchemaDiff.reason,
+    })
+  } else if (migrationSchemaDiff && migrationSchemaDiff.status === 2) {
+    blockers.push({
+      key: 'migrationSchemaDiff.notEmpty',
+      message: 'Prisma diff 显示 migrations 重放结果和 schema.prisma 不一致，迁移链本身还不能表达当前代码结构。',
+    })
+  } else if (migrationSchemaDiff && !migrationSchemaDiff.ok) {
+    blockers.push({
+      key: 'migrationSchemaDiff.error',
+      message: 'Prisma migrations 到 schema 的 diff 执行失败，不能证明迁移链可重放到当前结构。',
+    })
+  }
+
+  const baselineRequired = !migrationHistory.tableExists && pendingMigrations.length > 0
+  return {
+    mode: 'prisma-migration-baseline-diagnosis',
+    readyForHardFoundation: blockers.length === 0,
+    baselineRequired,
+    database,
+    migrationDirectoryCount: migrationDirectories.length,
+    pendingMigrationCount: pendingMigrations.length,
+    pendingMigrations,
+    migrationHistory,
+    prismaValidate: {
+      ok: prismaValidate.ok,
+      status: prismaValidate.status,
+      stdoutPreview: prismaValidate.stdout.slice(0, 240),
+      stderr: prismaValidate.stderr,
+      error: prismaValidate.error,
+    },
+    prismaMigrateStatus: {
+      ok: prismaMigrateStatus.ok,
+      status: prismaMigrateStatus.status,
+      stdoutPreview: prismaMigrateStatus.stdout.slice(0, 500),
+      stderr: prismaMigrateStatus.stderr,
+      error: prismaMigrateStatus.error,
+    },
+    currentSchemaDiff: currentSchemaDiff
+      ? {
+          ok: currentSchemaDiff.ok,
+          status: currentSchemaDiff.status,
+          hasSqlDiff: hasSqlDiff(currentSchemaDiff.stdout),
+          stdoutPreview: currentSchemaDiff.stdout.slice(0, 500),
+          stderr: currentSchemaDiff.stderr,
+          error: currentSchemaDiff.error,
+        }
+      : null,
+    migrationDiff: migrationDiff
+      ? {
+          skipped: migrationDiff.skipped,
+          ok: migrationDiff.ok,
+          status: migrationDiff.status,
+          stdoutPreview: migrationDiff.stdout.slice(0, 500),
+          stderr: migrationDiff.stderr,
+          error: migrationDiff.error,
+          reason: migrationDiff.reason,
+        }
+      : null,
+    migrationSchemaDiff: migrationSchemaDiff
+      ? {
+          skipped: migrationSchemaDiff.skipped,
+          ok: migrationSchemaDiff.ok,
+          status: migrationSchemaDiff.status,
+          hasSqlDiff: hasSqlDiff(migrationSchemaDiff.stdout),
+          stdoutPreview: migrationSchemaDiff.stdout.slice(0, 500),
+          stderr: migrationSchemaDiff.stderr,
+          error: migrationSchemaDiff.error,
+          reason: migrationSchemaDiff.reason,
+        }
+      : null,
+    blockers,
+    recommendedNextSteps: baselineRequired
+      ? [
+          '先备份目标数据库，确认这是本地/准生产/生产哪一类库。',
+          '逐项确认当前数据库结构是否已经等价于历史 migration 结果，不能直接批量 resolve。',
+          '需要配置只用于 diff 的 SHADOW_DATABASE_URL，先证明 migrations 结果和当前库结构差异。',
+          '如果当前库到 schema.prisma 的 diff 非空，先补齐结构，不能只补迁移历史。',
+          '如果结构缺失，先走 npm run db:foundation:migrate 计划；真实执行必须带目标库身份和备份 SHA-256。',
+          '如果结构已由历史 db push 或手工 SQL 形成，先形成 baseline 方案，再用 npm run db:foundation:baseline-resolve 逐项补迁移历史。',
+          'baseline 或 deploy 完成后，运行 npm run db:verify-master-data:readiness。',
+        ]
+      : [
+          '先处理 blockers，再运行 npm run db:verify-master-data:readiness。',
+        ],
+  }
+}
+
+async function main() {
+  const databaseUrl = loadDatabaseUrl()
+  const shadowDatabaseUrl = loadShadowDatabaseUrl()
+  const database = describeDatabaseUrl(databaseUrl)
+  const migrationDirectories = listMigrationDirectories()
+  const prismaValidate = runPrismaCommand(['validate'])
+  const prismaMigrateStatus = runPrismaCommand(['migrate', 'status'])
+  const currentSchemaDiff = runCurrentSchemaDiff()
+  const migrationDiff = runMigrationDiffWithShadow(shadowDatabaseUrl, databaseUrl)
+  const migrationSchemaDiff = runMigrationSchemaDiffWithShadow(shadowDatabaseUrl, databaseUrl)
+  const migrationHistory = await getMigrationHistoryStatus(databaseUrl)
+  const report = buildBaselineDiagnosis({
+    database,
+    migrationDirectories,
+    prismaValidate,
+    prismaMigrateStatus,
+    currentSchemaDiff,
+    migrationDiff,
+    migrationSchemaDiff,
+    migrationHistory,
+  })
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.readyForHardFoundation) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildBaselineDiagnosis,
+  describeDatabaseUrl,
+  getDatabaseIdentity,
+  getDatabasePhysicalIdentity,
+  listMigrationDirectories,
+  loadDatabaseUrl,
+  loadShadowDatabaseUrl,
+  parsePendingPrismaMigrations,
+  hasSqlDiff,
+  getMigrationHistoryStatus,
+  runCurrentSchemaDiff,
+  runPrismaCommand,
+  runPrismaCommandWithEnv,
+  runMigrationDiffWithShadow,
+  runMigrationSchemaDiffWithShadow,
+  validateShadowDatabaseUrl,
+}
diff --git a/furniture-3d-system/scripts/master-data-required-migrations.js b/furniture-3d-system/scripts/master-data-required-migrations.js
new file mode 100644
index 00000000..4cec732a
--- /dev/null
+++ b/furniture-3d-system/scripts/master-data-required-migrations.js
@@ -0,0 +1,1897 @@
+const fs = require('node:fs')
+const path = require('node:path')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const STANDARD_PRISMA_MIGRATION_DIR_PATTERN = /^\d{14}_[A-Za-z0-9_]+$/
+const LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS = new Set([
+  '20251213_performance_optimization',
+  'add_packaging_plan',
+])
+const TARGET_ONLY_READINESS_ASSURANCES = new Set([
+  'external-readonly-contract',
+  'database-guard-summary',
+  'foundation-quality-summary',
+])
+
+function hasExplicitReadinessChecks(migration) {
+  return Boolean(
+    migration.columnCheck ||
+    (Array.isArray(migration.columnDefaultChecks) && migration.columnDefaultChecks.length > 0) ||
+    (Array.isArray(migration.guardChecks) && migration.guardChecks.length > 0) ||
+    (Array.isArray(migration.relationColumnChecks) && migration.relationColumnChecks.length > 0) ||
+    (Array.isArray(migration.dataChecks) && migration.dataChecks.length > 0),
+  )
+}
+
+const REQUIRED_MIGRATIONS = [
+  {
+    targetRelation: 'external.product_skus_v1',
+    targetRelations: ['external.product_skus_v1', 'external.intake_products_v1'],
+    path: 'prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql',
+  },
+  {
+    targetRelation: '"IntakeNonIntegratedSkuItem"',
+    path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+    guardChecks: [
+      {
+        type: 'trigger',
+        name: 'IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items',
+        tableName: 'IntakeNonIntegratedProduct',
+      },
+    ],
+    dataChecks: [
+      {
+        name: 'IntakeNonIntegratedSkuItem_payload_missing_rows_zero',
+        expectedValue: 0,
+        sql: `
+WITH source_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    item.ordinality::integer AS sort_order,
+    COALESCE(NULLIF(btrim(item.sku_item ->> 'id'), ''), 'sku-' || item.ordinality::text) AS raw_sku_item_id
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+),
+deduped_sku_items AS (
+  SELECT
+    source_sku_items.*,
+    CASE
+      WHEN COUNT(*) OVER (PARTITION BY product_id, raw_sku_item_id) = 1
+        THEN raw_sku_item_id
+      ELSE raw_sku_item_id || '-' || ROW_NUMBER() OVER (
+        PARTITION BY product_id, raw_sku_item_id
+        ORDER BY sort_order
+      )::text
+    END AS sku_item_id
+  FROM source_sku_items
+)
+SELECT COUNT(*)::integer AS row_count
+FROM deduped_sku_items source
+LEFT JOIN "IntakeNonIntegratedSkuItem" sku
+  ON sku."productId" = source.product_id
+ AND sku."skuItemId" = source.sku_item_id
+WHERE sku."id" IS NULL
+`,
+      },
+    ],
+    repairSql: `
+WITH source_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    item.sku_item,
+    item.ordinality::integer AS sort_order,
+    COALESCE(NULLIF(btrim(item.sku_item ->> 'id'), ''), 'sku-' || item.ordinality::text) AS raw_sku_item_id
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+),
+deduped_sku_items AS (
+  SELECT
+    source_sku_items.*,
+    CASE
+      WHEN COUNT(*) OVER (PARTITION BY product_id, raw_sku_item_id) = 1
+        THEN raw_sku_item_id
+      ELSE raw_sku_item_id || '-' || ROW_NUMBER() OVER (
+        PARTITION BY product_id, raw_sku_item_id
+        ORDER BY sort_order
+      )::text
+    END AS sku_item_id
+  FROM source_sku_items
+),
+normalized_sku_items AS (
+  SELECT
+    product_id,
+    sku_item,
+    sort_order,
+    sku_item_id,
+    array_remove(
+      ARRAY[
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'skuCode', '')), '') IS NULL
+            THEN 'sku_code'
+        END,
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'specName', '')), '') IS NULL
+            THEN 'spec_name'
+        END,
+        CASE
+          WHEN NULLIF(btrim(COALESCE(sku_item ->> 'model', '')), '') IS NULL
+            THEN 'model'
+        END
+      ]::text[],
+      NULL
+    ) AS missing_required_fields
+  FROM deduped_sku_items
+)
+INSERT INTO "IntakeNonIntegratedSkuItem" (
+  "id",
+  "productId",
+  "skuItemId",
+  "sortOrder",
+  "skuSequence",
+  "batchNo",
+  "packageGroupId",
+  "image",
+  "imageName",
+  "model",
+  "skuCode",
+  "specName",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "boardMaterialType",
+  "versionNo",
+  "attributeCode",
+  "drawingId",
+  "installMethod",
+  "executeStandard",
+  "nationalStandardCompliant",
+  "manufacturer",
+  "manufacturerCode",
+  "salesStatus",
+  "tagMaterial",
+  "model3dDataUrl",
+  "source",
+  "sourceTable",
+  "sourceSkuId",
+  "contentLocked",
+  "dataQualityStatus",
+  "missingRequiredFields",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  product_id || ':' || sku_item_id AS id,
+  product_id,
+  sku_item_id,
+  sort_order,
+  CASE
+    WHEN COALESCE(sku_item ->> 'skuSequence', '') ~ '^-?[0-9]+$'
+      THEN (sku_item ->> 'skuSequence')::integer
+    ELSE 0
+  END,
+  CASE
+    WHEN COALESCE(sku_item ->> 'batchNo', '') ~ '^[0-9]+$'
+      THEN GREATEST(1, (sku_item ->> 'batchNo')::integer)
+    ELSE 1
+  END,
+  COALESCE(sku_item ->> 'packageGroupId', ''),
+  NULLIF(sku_item ->> 'image', ''),
+  COALESCE(sku_item ->> 'imageName', ''),
+  COALESCE(sku_item ->> 'model', ''),
+  COALESCE(sku_item ->> 'skuCode', ''),
+  COALESCE(sku_item ->> 'specName', ''),
+  COALESCE(sku_item ->> 'barcode', ''),
+  COALESCE(sku_item ->> 'size', ''),
+  COALESCE(sku_item ->> 'color', ''),
+  COALESCE(sku_item ->> 'material', ''),
+  COALESCE(sku_item ->> 'boardMaterialType', ''),
+  COALESCE(NULLIF(sku_item ->> 'versionNo', ''), 'V01'),
+  COALESCE(sku_item ->> 'attributeCode', ''),
+  COALESCE(sku_item ->> 'drawingId', ''),
+  COALESCE(sku_item ->> 'installMethod', ''),
+  COALESCE(sku_item ->> 'executeStandard', ''),
+  COALESCE(sku_item ->> 'nationalStandardCompliant', ''),
+  COALESCE(sku_item ->> 'manufacturer', ''),
+  COALESCE(sku_item ->> 'manufacturerCode', ''),
+  COALESCE(sku_item ->> 'salesStatus', ''),
+  COALESCE(sku_item ->> 'tagMaterial', ''),
+  NULLIF(sku_item ->> 'model3dDataUrl', ''),
+  COALESCE(sku_item ->> 'source', ''),
+  COALESCE(sku_item ->> 'sourceTable', ''),
+  COALESCE(sku_item ->> 'sourceSkuId', ''),
+  LOWER(COALESCE(sku_item ->> 'contentLocked', '')) IN ('true', '1', 'yes', 'on'),
+  CASE
+    WHEN cardinality(missing_required_fields) = 0
+      THEN 'READY'::"IntakeNonIntegratedSkuDataQualityStatus"
+  ELSE 'INCOMPLETE'::"IntakeNonIntegratedSkuDataQualityStatus"
+  END,
+  missing_required_fields,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM normalized_sku_items
+ON CONFLICT ("productId", "skuItemId") DO NOTHING;
+
+CREATE OR REPLACE FUNCTION "cleanup_intake_non_integrated_sku_items_on_soft_delete"()
+RETURNS TRIGGER AS $$
+BEGIN
+  DELETE FROM "IntakeNonIntegratedSkuItem"
+  WHERE "productId" = NEW."id";
+
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS "IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items"
+  ON "IntakeNonIntegratedProduct";
+
+CREATE TRIGGER "IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items"
+AFTER UPDATE OF "deletedAt" ON "IntakeNonIntegratedProduct"
+FOR EACH ROW
+WHEN (OLD."deletedAt" IS NULL AND NEW."deletedAt" IS NOT NULL)
+EXECUTE FUNCTION "cleanup_intake_non_integrated_sku_items_on_soft_delete"();
+`,
+  },
+  {
+    targetRelation: '"ProductSkuAssetProfile"',
+    targetRelations: ['"ProductSkuAssetProfile"', '"ProductSKU"'],
+    path: 'prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql',
+    columnCheck: {
+      tableName: 'ProductSKU',
+      columnName: 'name',
+    },
+    dataChecks: [
+      {
+        name: 'ProductSKU_name_backfill_missing_zero',
+        expectedValue: 0,
+        sql: `
+SELECT COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND NULLIF(btrim(COALESCE(sku."name", '')), '') IS NULL
+`,
+      },
+      {
+        name: 'ProductSkuAssetProfile_asset_snapshot_missing_rows_zero',
+        expectedValue: 0,
+        sql: `
+WITH sku_source AS (
+  SELECT sku."id" AS sku_id
+  FROM "ProductSKU" sku
+  JOIN "Product" product ON product."id" = sku."productId"
+  WHERE sku."deletedAt" IS NULL
+    AND product."deletedAt" IS NULL
+    AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+)
+SELECT COUNT(*)::integer AS row_count
+FROM sku_source source
+LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = source.sku_id
+WHERE profile."id" IS NULL
+`,
+      },
+    ],
+    repairSql: `
+UPDATE "ProductSKU" sku
+SET "name" = COALESCE(
+  NULLIF(sku."attributes"::jsonb ->> 'skuName', ''),
+  NULLIF(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'specName', ''),
+  sku."skuCode"
+)
+FROM "Product" product
+WHERE product."id" = sku."productId"
+  AND sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND NULLIF(btrim(COALESCE(sku."name", '')), '') IS NULL;
+
+WITH sku_source AS (
+  SELECT
+    sku."id" AS sku_id,
+    sku."sourceAssetVariantId",
+    sku."sourceAssetVariantIds",
+    sku."attributes"::jsonb -> 'assetSkuSnapshot' AS asset_snapshot,
+    sku."updatedAt"
+  FROM "ProductSKU" sku
+  JOIN "Product" product ON product."id" = sku."productId"
+  WHERE sku."deletedAt" IS NULL
+    AND product."deletedAt" IS NULL
+    AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+)
+INSERT INTO "ProductSkuAssetProfile" (
+  "id",
+  "skuId",
+  "primarySourceAssetVariantId",
+  "sourceAssetVariantIds",
+  "sourceAssetFamilyId",
+  "sourceAssetSeriesId",
+  "model",
+  "modelName",
+  "specCode",
+  "specName",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "imageUrl",
+  "sourceStatus",
+  "syncedAt",
+  "lockedFields",
+  "lockedReasons",
+  "sourceVariants",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  sku_id,
+  sku_id,
+  COALESCE(NULLIF(asset_snapshot ->> 'sourceAssetVariantId', ''), "sourceAssetVariantId"),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'sourceAssetVariantIds') = 'array' THEN ARRAY(
+      SELECT jsonb_array_elements_text(asset_snapshot -> 'sourceAssetVariantIds')
+    )
+    ELSE COALESCE("sourceAssetVariantIds", ARRAY[]::TEXT[])
+  END,
+  NULLIF(asset_snapshot ->> 'sourceAssetFamilyId', ''),
+  NULLIF(asset_snapshot ->> 'sourceAssetSeriesId', ''),
+  NULLIF(asset_snapshot ->> 'model', ''),
+  NULLIF(asset_snapshot ->> 'modelName', ''),
+  NULLIF(asset_snapshot ->> 'specCode', ''),
+  NULLIF(asset_snapshot ->> 'specName', ''),
+  NULLIF(asset_snapshot ->> 'barcode', ''),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'size') = 'object' THEN asset_snapshot -> 'size'
+    ELSE '{}'::jsonb
+  END,
+  NULLIF(asset_snapshot ->> 'color', ''),
+  NULLIF(asset_snapshot ->> 'material', ''),
+  NULLIF(asset_snapshot ->> 'imageUrl', ''),
+  CASE asset_snapshot ->> 'sourceStatus'
+    WHEN 'DELETED' THEN 'DELETED'::"ProductSkuAssetSourceStatus"
+    WHEN 'MISSING' THEN 'MISSING'::"ProductSkuAssetSourceStatus"
+    ELSE 'ACTIVE'::"ProductSkuAssetSourceStatus"
+  END,
+  CASE
+    WHEN COALESCE(asset_snapshot ->> 'syncedAt', '') ~ '^\\d{4}-\\d{2}-\\d{2}T'
+      THEN (asset_snapshot ->> 'syncedAt')::timestamp(3)
+    ELSE "updatedAt"
+  END,
+  COALESCE(
+    ARRAY(
+      SELECT jsonb_array_elements_text(asset_snapshot -> 'lockedFields')
+      WHERE jsonb_typeof(asset_snapshot -> 'lockedFields') = 'array'
+    ),
+    ARRAY[]::TEXT[]
+  ),
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'lockedReasons') = 'object' THEN asset_snapshot -> 'lockedReasons'
+    ELSE '{}'::jsonb
+  END,
+  CASE
+    WHEN jsonb_typeof(asset_snapshot -> 'sourceVariants') = 'array' THEN asset_snapshot -> 'sourceVariants'
+    ELSE '[]'::jsonb
+  END,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM sku_source
+ON CONFLICT ("skuId") DO NOTHING;
+`,
+  },
+  {
+    targetRelation: '"PreSkuBasicInfo"',
+    path: 'prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql',
+    dataChecks: [
+      {
+        name: 'PreSkuBasicInfo_display_summary_missing_rows_zero',
+        expectedValue: 0,
+        sql: `
+WITH pre_sku_source AS (
+  SELECT pre_sku."id"
+  FROM "PreSku" pre_sku
+  WHERE (
+    NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'size', pre_sku."familySelection"::jsonb ->> 'size', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'color', pre_sku."familySelection"::jsonb ->> 'color', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'material', pre_sku."familySelection"::jsonb ->> 'material', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'versionNo', pre_sku."familySelection"::jsonb ->> 'versionNo', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'setCount', pre_sku."familySelection"::jsonb ->> 'setCount', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'attributeCode', pre_sku."familySelection"::jsonb ->> 'attributeCode', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'drawingId', pre_sku."familySelection"::jsonb ->> 'drawingId', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'installMethod', pre_sku."familySelection"::jsonb ->> 'installMethod', '')), '') IS NOT NULL
+  )
+)
+SELECT COUNT(*)::integer AS row_count
+FROM pre_sku_source source
+LEFT JOIN "PreSkuBasicInfo" info ON info."preSkuId" = source."id"
+WHERE info."id" IS NULL
+`,
+      },
+    ],
+    repairSql: `
+INSERT INTO "PreSkuBasicInfo" (
+  "id",
+  "preSkuId",
+  "model",
+  "formalSkuCode",
+  "barcode",
+  "size",
+  "color",
+  "material",
+  "specName",
+  "versionNo",
+  "setCount",
+  "attributeCode",
+  "drawingId",
+  "installMethod",
+  "manualUpdatedBy",
+  "manualUpdatedByName",
+  "manualUpdatedAt",
+  "source",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  pre_sku."id",
+  pre_sku."id",
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'size', pre_sku."familySelection"::jsonb ->> 'size', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'color', pre_sku."familySelection"::jsonb ->> 'color', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'material', pre_sku."familySelection"::jsonb ->> 'material', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'versionNo', pre_sku."familySelection"::jsonb ->> 'versionNo', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'setCount', pre_sku."familySelection"::jsonb ->> 'setCount', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'attributeCode', pre_sku."familySelection"::jsonb ->> 'attributeCode', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'drawingId', pre_sku."familySelection"::jsonb ->> 'drawingId', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'installMethod', pre_sku."familySelection"::jsonb ->> 'installMethod', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedBy', '')), ''),
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedByName', '')), ''),
+  CASE
+    WHEN COALESCE(pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedAt', '') ~ '^\\d{4}-\\d{2}-\\d{2}T'
+      THEN (pre_sku."displaySummary"::jsonb ->> 'basicInfoManualUpdatedAt')::timestamp(3)
+    ELSE NULL
+  END,
+  CASE
+    WHEN pre_sku."displaySummary"::jsonb ? 'basicInfoManualUpdatedAt' THEN 'MANUAL'
+    ELSE 'DRAFT_GROUP'
+  END,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM "PreSku" pre_sku
+WHERE (
+  NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'size', pre_sku."familySelection"::jsonb ->> 'size', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'color', pre_sku."familySelection"::jsonb ->> 'color', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'material', pre_sku."familySelection"::jsonb ->> 'material', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'versionNo', pre_sku."familySelection"::jsonb ->> 'versionNo', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'setCount', pre_sku."familySelection"::jsonb ->> 'setCount', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'attributeCode', pre_sku."familySelection"::jsonb ->> 'attributeCode', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'drawingId', pre_sku."familySelection"::jsonb ->> 'drawingId', '')), '') IS NOT NULL
+  OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'installMethod', pre_sku."familySelection"::jsonb ->> 'installMethod', '')), '') IS NOT NULL
+)
+ON CONFLICT ("preSkuId") DO NOTHING;
+`,
+  },
+  {
+    targetRelation: '"ProductSkuQualityInspection"',
+    path: 'prisma/migrations/20260530143000_add_sku_quality_inspections/migration.sql',
+    columnCheck: {
+      tableName: 'ProductSkuQualityInspection',
+      columnName: 'recordKey',
+    },
+  },
+  {
+    targetRelation: 'external.product_skus_v1',
+    path: 'prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'external-readonly-contract',
+  },
+  {
+    targetRelation: '"IntakeNonIntegratedProductProfile"',
+    path: 'prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql',
+    dataChecks: [
+      {
+        name: 'IntakeNonIntegratedProductProfile_missing_rows_zero',
+        expectedValue: 0,
+        sql: `
+SELECT COUNT(*)::integer AS row_count
+FROM "IntakeNonIntegratedProduct" product
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL
+  AND profile."id" IS NULL
+`,
+      },
+    ],
+    repairSql: `
+INSERT INTO "IntakeNonIntegratedProductProfile" (
+  "id",
+  "productId",
+  "productName",
+  "productImageUrl",
+  "productCategory",
+  "salesCategory",
+  "productYear",
+  "productStatus",
+  "productDevelopmentKind",
+  "goodsType",
+  "materialType",
+  "productionType",
+  "size",
+  "color",
+  "tagMaterial",
+  "priceBand",
+  "demandFlowNo",
+  "processTemplate",
+  "productPlanning",
+  "brandPlanning",
+  "demandDepartment",
+  "spuOwner",
+  "operationsOwner",
+  "purchaseOwner",
+  "visualDirector",
+  "visualPlanning",
+  "structureDesigner",
+  "source",
+  "syncedAt",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  'inip_' || product."id",
+  product."id",
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productName'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'previewImageName'), ''),
+    product."spu"
+  ),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productImage'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'previewImage'), '')
+  ),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productCategory'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'productCategory'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'salesCategory'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'salesCategory'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'year'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'year'), ''),
+    ''
+  ),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'currentStage'), ''),
+    NULLIF(btrim(product."payload"::jsonb ->> 'projectStatus'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productDevelopmentKind'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'goodsType'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'materialType'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productionType'), ''), ''),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb ->> 'size'), ''),
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'size'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'color'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'tagMaterial'), ''), ''),
+  COALESCE(
+    NULLIF(btrim(product."payload"::jsonb ->> 'priceBand'), ''),
+    NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'targetPriceBand'), ''),
+    ''
+  ),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandFlowNo'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'processTemplate'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productPlanning'), ''),
+           NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'planningOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'brandPlanning'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandDepartment'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'spuOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'operationsOwner'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'purchaseOwner'), ''), NULLIF(btrim(product."purchaser"), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualDirector'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualPlanning'), ''), ''),
+  COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'structureDesigner'), ''), ''),
+  'MIGRATED_FROM_PAYLOAD',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM "IntakeNonIntegratedProduct" product
+WHERE product."deletedAt" IS NULL
+ON CONFLICT ("productId") DO NOTHING;
+`,
+  },
+  {
+    targetRelation: '"ProductPatentRecord"',
+    path: 'prisma/migrations/20260530162000_add_product_patent_records/migration.sql',
+  },
+  {
+    targetRelation: '"IntakeNonIntegratedProductProfile"',
+    path: 'prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql',
+    columnCheck: {
+      tableName: 'IntakeNonIntegratedProductProfile',
+      columnName: 'sourceSpu',
+    },
+    dataChecks: [
+      {
+        name: 'IntakeNonIntegratedProductProfile_stock_source_payload_diff_zero',
+        expectedValue: 0,
+        sql: `
+SELECT COUNT(*)::integer AS row_count
+FROM "IntakeNonIntegratedProductProfile" profile
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = profile."productId"
+WHERE product."deletedAt" IS NULL
+  AND (
+    COALESCE(profile."sourceSpu", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSpu'), ''), '')
+    OR COALESCE(profile."sourceSkuId", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSkuId'), ''), '')
+    OR COALESCE(profile."sourceCategory", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceCategory'), ''), '')
+    OR COALESCE(profile."sourceItemType", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceItemType'), ''), '')
+    OR COALESCE(profile."sourceSalesStatus", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '')
+    OR COALESCE(profile."sourceEnabled", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceEnabled'), ''), '')
+    OR COALESCE(profile."sourceStockDisabled", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceStockDisabled'), ''), '')
+    OR profile."stockSkuCount" IS DISTINCT FROM CASE
+      WHEN jsonb_typeof(product."payload"::jsonb -> 'skuItems') = 'array'
+        THEN jsonb_array_length(product."payload"::jsonb -> 'skuItems')
+      ELSE 0
+    END
+    OR profile."stockHasOnSaleSku" IS DISTINCT FROM (
+      COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') = '销售'
+    )
+  )
+`,
+      },
+    ],
+    repairSql: `
+UPDATE "IntakeNonIntegratedProductProfile" profile
+SET
+  "sourceSpu" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSpu'), ''), ''),
+  "sourceSkuId" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSkuId'), ''), ''),
+  "sourceCategory" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceCategory'), ''), ''),
+  "sourceItemType" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceItemType'), ''), ''),
+  "sourceSalesStatus" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), ''),
+  "sourceEnabled" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceEnabled'), ''), ''),
+  "sourceStockDisabled" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceStockDisabled'), ''), ''),
+  "stockSkuCount" = CASE
+    WHEN jsonb_typeof(product."payload"::jsonb -> 'skuItems') = 'array'
+      THEN jsonb_array_length(product."payload"::jsonb -> 'skuItems')
+    ELSE 0
+  END,
+  "stockHasOnSaleSku" = COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') = '销售'
+FROM "IntakeNonIntegratedProduct" product
+WHERE product."id" = profile."productId"
+  AND product."deletedAt" IS NULL;
+`,
+  },
+  {
+    targetRelation: '"IntakeReferenceLibraryItem"',
+    path: 'prisma/migrations/20260530190000_add_intake_reference_library/migration.sql',
+  },
+  {
+    targetRelation: 'external.intake_sku_items_v1',
+    path: 'prisma/migrations/20260531103000_tighten_external_intake_views_to_structured_sources/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'external-readonly-contract',
+  },
+  {
+    targetRelation: '"SpuNumberCounter"',
+    path: 'prisma/migrations/20260531113000_add_spu_number_counter/migration.sql',
+    dataChecks: [
+      {
+        name: 'SpuNumberCounter_active_rule_missing_rows_zero',
+        expectedValue: 0,
+        sql: `
+SELECT COUNT(*)::integer AS row_count
+FROM "IntakeReferenceLibraryItem" row
+LEFT JOIN "SpuNumberCounter" counter ON counter."productCategory" = row."name"
+WHERE row."libraryType" = 'SPU_RULE'
+  AND row."isActive" = true
+  AND NULLIF(btrim(row."name"), '') IS NOT NULL
+  AND NULLIF(btrim(row."code"), '') IS NOT NULL
+  AND counter."id" IS NULL
+`,
+      },
+    ],
+    repairSql: `
+INSERT INTO "SpuNumberCounter" (
+  "id",
+  "productCategory",
+  "prefix",
+  "lastUsedIndex",
+  "sourceLibraryItemId",
+  "createdBy",
+  "updatedBy",
+  "createdAt",
+  "updatedAt"
+)
+SELECT
+  'spu-counter-' || regexp_replace(lower(row."itemKey"), '[^a-z0-9_-]+', '-', 'g') AS "id",
+  row."name" AS "productCategory",
+  upper(row."code") AS "prefix",
+  GREATEST(
+    COALESCE(NULLIF(row."payload"::jsonb -> 'rule' ->> 'spuIndex', '')::integer, 0),
+    COALESCE(used.max_used_index, 0)
+  ) AS "lastUsedIndex",
+  row."id" AS "sourceLibraryItemId",
+  row."createdBy",
+  row."updatedBy",
+  row."createdAt",
+  row."updatedAt"
+FROM "IntakeReferenceLibraryItem" row
+LEFT JOIN LATERAL (
+  SELECT MAX((substring(product."spuBase" from ('^' || upper(row."code") || '([0-9]{4})$')))::integer) AS max_used_index
+  FROM "IntakeNonIntegratedProduct" product
+  WHERE product."deletedAt" IS NULL
+    AND NULLIF(btrim(row."code"), '') IS NOT NULL
+    AND product."spuBase" ~ ('^' || upper(row."code") || '[0-9]{4}$')
+) used ON true
+WHERE row."libraryType" = 'SPU_RULE'
+  AND row."isActive" = true
+  AND NULLIF(btrim(row."name"), '') IS NOT NULL
+  AND NULLIF(btrim(row."code"), '') IS NOT NULL
+ON CONFLICT ("productCategory") DO UPDATE SET
+  "prefix" = EXCLUDED."prefix",
+  "lastUsedIndex" = GREATEST("SpuNumberCounter"."lastUsedIndex", EXCLUDED."lastUsedIndex"),
+  "sourceLibraryItemId" = EXCLUDED."sourceLibraryItemId",
+  "updatedBy" = EXCLUDED."updatedBy",
+  "updatedAt" = CURRENT_TIMESTAMP;
+`,
+  },
+  {
+    targetRelation: '"IntakeNonIntegratedSkuItem"',
+    path: 'prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"SpuNumberCounter"',
+    path: 'prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"IntakeReferenceLibraryItem"',
+    path: 'prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: 'external.intake_products_v1',
+    path: 'prisma/migrations/20260531170000_tighten_external_intake_product_people_sources/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'external-readonly-contract',
+  },
+  {
+    targetRelation: '"ProductSkuAssetProfile"',
+    path: 'prisma/migrations/20260531173000_add_product_sku_asset_profile_barcode_unique_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260531181000_add_product_sku_active_code_marker_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductSkuAssetProfile"',
+    path: 'prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'foundation-quality-summary',
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductSkuAssetProfile"',
+    path: 'prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductPatentRecord"',
+    path: 'prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"IntakeReferenceLibraryItem"',
+    path: 'prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"SpuNumberCounter"',
+    path: 'prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"PreSkuBasicInfo"',
+    path: 'prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"AssetSkuSyncEvent"',
+    path: 'prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductSkuAssetProfile"',
+    path: 'prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"PreSkuPackagingPlan"',
+    path: 'prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ApprovalWorkflow"',
+    path: 'prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"User"',
+    path: 'prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"PlanningWorkspace"',
+    path: 'prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductCollaborator"',
+    path: 'prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"Panel"',
+    path: 'prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductCategory"',
+    path: 'prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"SystemConfig"',
+    path: 'prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: 'external.intake_sku_items_v1',
+    path: 'prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql',
+    alwaysApply: true,
+    relationColumnChecks: [
+      {
+        relationName: 'external.intake_products_v1',
+        columnNames: ['product_business_key'],
+      },
+      {
+        relationName: 'external.intake_products_ready_v1',
+        columnNames: ['product_business_key'],
+      },
+      {
+        relationName: 'external.intake_sku_items_v1',
+        columnNames: ['product_business_key', 'sku_business_key'],
+      },
+      {
+        relationName: 'external.intake_sku_items_ready_v1',
+        columnNames: ['product_business_key', 'sku_business_key'],
+      },
+    ],
+  },
+  {
+    targetRelation: 'external.product_skus_v1',
+    path: 'prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql',
+    alwaysApply: true,
+    relationColumnChecks: [
+      {
+        relationName: 'external.product_skus_v1',
+        columnNames: ['product_business_key', 'sku_business_key'],
+      },
+    ],
+  },
+  {
+    targetRelation: 'external.product_assets_v1',
+    path: 'prisma/migrations/20260601012000_add_external_product_asset_bom_business_keys/migration.sql',
+    alwaysApply: true,
+    relationColumnChecks: [
+      {
+        relationName: 'external.product_assets_v1',
+        columnNames: ['product_business_key', 'sku_business_key'],
+      },
+      {
+        relationName: 'external.product_bom_v1',
+        columnNames: ['product_business_key', 'sku_business_key'],
+      },
+    ],
+  },
+  {
+    targetRelation: '"IntakeReferenceLibraryItem"',
+    path: 'prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"IntakeReferenceLibraryItem"',
+    path: 'prisma/migrations/20260601014000_add_reference_library_code_required_guard/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'database-guard-summary',
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql',
+    alwaysApply: true,
+    columnCheck: {
+      tableName: 'ProductSKU',
+      columnName: 'originalSkuCode',
+    },
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'ProductSKU_soft_delete_identity_valid',
+        tableName: 'ProductSKU',
+      },
+      {
+        type: 'check-constraint',
+        name: 'ProductSKU_no_soft_delete_lifecycle_attributes',
+        tableName: 'ProductSKU',
+      },
+    ],
+    repairSql: `
+UPDATE "ProductSKU"
+SET
+  "originalSkuCode" = upper(btrim(
+    COALESCE(
+      NULLIF(attributes->>'_originalSkuCode', ''),
+      CASE
+        WHEN strpos("skuCode", '__deleted__') > 0
+          THEN substring("skuCode" from 1 for strpos("skuCode", '__deleted__') - 1)
+        ELSE "skuCode"
+      END
+    )
+  )),
+  "deletedCodeAt" = COALESCE(
+    "deletedCodeAt",
+    CASE
+      WHEN NULLIF(attributes->>'_deletedCodeAt', '') ~ '^\\d{4}-\\d{2}-\\d{2}T'
+        THEN (attributes->>'_deletedCodeAt')::timestamp(3)
+      ELSE "deletedAt"
+    END
+  ),
+  "deletedByProductId" = COALESCE("deletedByProductId", NULLIF(btrim(attributes->>'_deletedByProductId'), '')),
+  "productDeletedAt" = COALESCE(
+    "productDeletedAt",
+    CASE
+      WHEN NULLIF(attributes->>'_productDeletedAt', '') ~ '^\\d{4}-\\d{2}-\\d{2}T'
+        THEN (attributes->>'_productDeletedAt')::timestamp(3)
+      ELSE NULL
+    END
+  )
+WHERE "deletedAt" IS NOT NULL;
+
+UPDATE "ProductSKU"
+SET attributes = attributes
+  - '_originalSkuCode'
+  - '_deletedCodeAt'
+  - '_deletedByProductId'
+  - '_productDeletedAt'
+WHERE attributes ? '_originalSkuCode'
+   OR attributes ? '_deletedCodeAt'
+   OR attributes ? '_deletedByProductId'
+   OR attributes ? '_productDeletedAt';
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_soft_delete_identity_valid",
+  ADD CONSTRAINT "ProductSKU_soft_delete_identity_valid"
+  CHECK (
+    (
+      "deletedAt" IS NULL
+      AND "originalSkuCode" IS NULL
+      AND "deletedCodeAt" IS NULL
+      AND "deletedByProductId" IS NULL
+      AND "productDeletedAt" IS NULL
+    )
+    OR
+    (
+      "deletedAt" IS NOT NULL
+      AND NULLIF(btrim(COALESCE("originalSkuCode", '')), '') IS NOT NULL
+      AND "originalSkuCode" = upper(btrim("originalSkuCode"))
+      AND ("deletedByProductId" IS NULL OR NULLIF(btrim("deletedByProductId"), '') IS NOT NULL)
+    )
+  );
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_no_soft_delete_lifecycle_attributes",
+  ADD CONSTRAINT "ProductSKU_no_soft_delete_lifecycle_attributes"
+  CHECK (
+    NOT (
+      attributes ? '_originalSkuCode'
+      OR attributes ? '_deletedCodeAt'
+      OR attributes ? '_deletedByProductId'
+      OR attributes ? '_productDeletedAt'
+    )
+  );
+`,
+  },
+  {
+    targetRelation: 'external.materials_v1',
+    targetRelations: ['external.materials_v1', 'external.product_bom_v1'],
+    path: 'prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql',
+    alwaysApply: true,
+    targetOnlyReadinessAssurance: 'external-readonly-contract',
+  },
+  {
+    targetRelation: '"Hardware"',
+    targetRelations: ['"Hardware"', '"Product"', '"ProductSKU"', '"Substrate"'],
+    path: 'prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql',
+    columnCheck: {
+      tableName: 'Hardware',
+      columnName: 'geoWidth',
+    },
+    columnDefaultChecks: [
+      {
+        tableName: 'AssemblyStep',
+        columnName: 'partIds',
+        expectedDefault: null,
+      },
+      {
+        tableName: 'AssemblyStep',
+        columnName: 'hardwareIds',
+        expectedDefault: null,
+      },
+    ],
+  },
+  {
+    targetRelation: '"MasterDataQualityDecision"',
+    path: 'prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql',
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'ProductSKU_price_cost_stock_non_negative',
+        tableName: 'ProductSKU',
+      },
+    ],
+  },
+  {
+    targetRelation: '"AssetVariant"',
+    targetRelations: ['"AssetSeries"', '"AssetFamily"', '"AssetVariant"'],
+    path: 'prisma/migrations/20260601020000_add_asset_center_source_guards/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'AssetSeries_identity_valid',
+        tableName: 'AssetSeries',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetSeries_metadata_object',
+        tableName: 'AssetSeries',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetFamily_identity_valid',
+        tableName: 'AssetFamily',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetFamily_metadata_object',
+        tableName: 'AssetFamily',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetFamily_lifecycle_state_valid',
+        tableName: 'AssetFamily',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetVariant_identity_valid',
+        tableName: 'AssetVariant',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetVariant_json_shape_valid',
+        tableName: 'AssetVariant',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetVariant_cost_weight_valid',
+        tableName: 'AssetVariant',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetVariant_lifecycle_state_valid',
+        tableName: 'AssetVariant',
+      },
+      {
+        type: 'check-constraint',
+        name: 'AssetVariant_inheritance_not_self',
+        tableName: 'AssetVariant',
+      },
+    ],
+  },
+  {
+    targetRelation: '"PreSku"',
+    targetRelations: ['"DraftGroup"', '"PreSku"'],
+    path: 'prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'DraftGroup_identity_valid',
+        tableName: 'DraftGroup',
+      },
+      {
+        type: 'check-constraint',
+        name: 'DraftGroup_summary_object',
+        tableName: 'DraftGroup',
+      },
+      {
+        type: 'check-constraint',
+        name: 'DraftGroup_optional_text_not_blank',
+        tableName: 'DraftGroup',
+      },
+      {
+        type: 'check-constraint',
+        name: 'PreSku_identity_valid',
+        tableName: 'PreSku',
+      },
+      {
+        type: 'check-constraint',
+        name: 'PreSku_process_snapshots_shape_valid',
+        tableName: 'PreSku',
+      },
+      {
+        type: 'check-constraint',
+        name: 'PreSku_weight_valid',
+        tableName: 'PreSku',
+      },
+      {
+        type: 'check-constraint',
+        name: 'PreSku_component_codes_valid',
+        tableName: 'PreSku',
+      },
+      {
+        type: 'check-constraint',
+        name: 'PreSku_optional_text_not_blank',
+        tableName: 'PreSku',
+      },
+    ],
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260601022000_add_product_sku_attributes_truth_guard/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'ProductSKU_no_formal_truth_attributes',
+        tableName: 'ProductSKU',
+      },
+    ],
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'trigger',
+        name: 'ProductSKU_sync_asset_profile_deleted_at',
+        tableName: 'ProductSKU',
+      },
+    ],
+  },
+  {
+    targetRelation: '"ProductSKU"',
+    path: 'prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'ProductSKU_soft_delete_tombstone_valid',
+        tableName: 'ProductSKU',
+      },
+    ],
+    repairSql: `
+UPDATE "ProductSKU"
+SET "deletedCodeAt" = COALESCE("deletedCodeAt", "deletedAt")
+WHERE "deletedAt" IS NOT NULL
+  AND "deletedCodeAt" IS NULL;
+
+ALTER TABLE "ProductSKU"
+  DROP CONSTRAINT IF EXISTS "ProductSKU_soft_delete_tombstone_valid",
+  ADD CONSTRAINT "ProductSKU_soft_delete_tombstone_valid"
+  CHECK (
+    "deletedAt" IS NULL
+    OR (
+      "deletedCodeAt" IS NOT NULL
+      AND (
+        ("deletedByProductId" IS NULL AND "productDeletedAt" IS NULL)
+        OR (
+          NULLIF(btrim(COALESCE("deletedByProductId", '')), '') IS NOT NULL
+          AND "productDeletedAt" IS NOT NULL
+        )
+      )
+    )
+  );
+`,
+  },
+  {
+    targetRelation: '"MasterDataQualityDecision"',
+    path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
+    alwaysApply: true,
+    guardChecks: [
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_reason_not_placeholder',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_decidedBy_not_placeholder',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_resolvedBy_not_placeholder',
+        tableName: 'MasterDataQualityDecision',
+      },
+    ],
+    dataChecks: [
+      {
+        name: 'master_data_quality_decision_placeholder_text_zero',
+        expectedValue: 0,
+        sql: `
+WITH placeholder_tokens AS (
+  SELECT unnest(ARRAY[
+    'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+    'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+    '默认', '默认值', '暂无'
+  ]) AS token
+)
+SELECT COUNT(*)::integer AS row_count /* data-check */
+FROM "MasterDataQualityDecision"
+WHERE (
+    NULLIF(btrim(COALESCE("reason", '')), '') IS NOT NULL
+    AND (
+      lower(regexp_replace(btrim("reason"), '\\s+', '', 'g')) IN (
+        SELECT token FROM placeholder_tokens
+      )
+      OR regexp_replace(btrim("reason"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+    )
+  )
+  OR (
+    NULLIF(btrim(COALESCE("decidedBy", '')), '') IS NOT NULL
+    AND (
+      lower(regexp_replace(btrim("decidedBy"), '\\s+', '', 'g')) IN (
+        SELECT token FROM placeholder_tokens
+      )
+      OR regexp_replace(btrim("decidedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+    )
+  )
+  OR (
+    NULLIF(btrim(COALESCE("resolvedBy", '')), '') IS NOT NULL
+    AND (
+      lower(regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g')) IN (
+        SELECT token FROM placeholder_tokens
+      )
+      OR regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+    )
+  );
+`,
+      },
+    ],
+    repairSql: `
+ALTER TABLE "MasterDataQualityDecision"
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_reason_not_placeholder",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_decidedBy_not_placeholder",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_resolvedBy_not_placeholder",
+  ADD CONSTRAINT "MasterDataQualityDecision_reason_not_placeholder"
+  CHECK (
+    lower(regexp_replace(btrim("reason"), '\\s+', '', 'g')) NOT IN (
+      'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+      'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+      '默认', '默认值', '暂无'
+    )
+    AND regexp_replace(btrim("reason"), '\\s+', '', 'g') !~ '(待补|待确认|默认值)'
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_decidedBy_not_placeholder"
+  CHECK (
+    lower(regexp_replace(btrim("decidedBy"), '\\s+', '', 'g')) NOT IN (
+      'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+      'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+      '默认', '默认值', '暂无'
+    )
+    AND regexp_replace(btrim("decidedBy"), '\\s+', '', 'g') !~ '(待补|待确认|默认值)'
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_resolvedBy_not_placeholder"
+  CHECK (
+    "resolvedBy" IS NULL
+    OR (
+      lower(regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g')) NOT IN (
+        'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+        'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+        '默认', '默认值', '暂无'
+      )
+      AND regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g') !~ '(待补|待确认|默认值)'
+    )
+  );
+`,
+  },
+]
+
+function getMigrationTimestamp(migrationPath) {
+  const match = String(migrationPath).match(/prisma\/migrations\/(\d{14})_[^/]+\/migration\.sql$/)
+  return match?.[1] ?? null
+}
+
+function getMigrationTargetRelations(migration) {
+  if (Array.isArray(migration.targetRelations)) {
+    return migration.targetRelations
+  }
+  return migration.targetRelation ? [migration.targetRelation] : []
+}
+
+function getRelationSearchTerms(relationName) {
+  const raw = String(relationName)
+  const unquoted = raw.replace(/"/g, '')
+  const relationOnly = unquoted.split('.').pop()
+  return [...new Set([raw, unquoted, relationOnly].filter(Boolean).map((term) => term.toLowerCase()))]
+}
+
+function validateRequiredMigrationCatalog(options = {}) {
+  const rootDir = options.rootDir ?? ROOT_DIR
+  const migrations = options.migrations ?? REQUIRED_MIGRATIONS
+  const errors = []
+  const seenPaths = new Set()
+  let previousPath = ''
+
+  validatePrismaMigrationDirectories({ rootDir })
+
+  migrations.forEach((migration, index) => {
+    const label = migration.path || `#${index + 1}`
+    if (!migration.path || typeof migration.path !== 'string') {
+      errors.push(`迁移清单第 ${index + 1} 项缺少 path。`)
+      return
+    }
+    if (seenPaths.has(migration.path)) {
+      errors.push(`迁移清单存在重复 path：${migration.path}`)
+    }
+    seenPaths.add(migration.path)
+    if (previousPath && migration.path < previousPath) {
+      errors.push(`迁移清单顺序必须按 path 升序排列：${previousPath} -> ${migration.path}`)
+    }
+    previousPath = migration.path
+
+    if (!getMigrationTimestamp(migration.path)) {
+      errors.push(`迁移 path 不符合 prisma/migrations/<timestamp>_name/migration.sql：${migration.path}`)
+    }
+
+    const targetRelations = getMigrationTargetRelations(migration)
+    if (targetRelations.length === 0) {
+      errors.push(`迁移缺少 targetRelation / targetRelations：${label}`)
+    }
+    if (migration.columnCheck) {
+      if (!migration.columnCheck.tableName || !migration.columnCheck.columnName) {
+        errors.push(`迁移 columnCheck 必须同时声明 tableName 和 columnName：${label}`)
+      }
+      const normalizedTargets = targetRelations
+        .map((relationName) => String(relationName).replace(/"/g, '').split('.').pop())
+      if (!normalizedTargets.includes(migration.columnCheck.tableName)) {
+        errors.push(`迁移 columnCheck.tableName 必须属于 targetRelation：${label}`)
+      }
+    }
+    if (Array.isArray(migration.columnDefaultChecks)) {
+      migration.columnDefaultChecks.forEach((check, checkIndex) => {
+        if (!check.tableName || !check.columnName || !Object.hasOwn(check, 'expectedDefault')) {
+          errors.push(`迁移 columnDefaultChecks[${checkIndex}] 必须声明 tableName、columnName 和 expectedDefault：${label}`)
+        }
+      })
+    }
+    if (Array.isArray(migration.guardChecks)) {
+      migration.guardChecks.forEach((check, checkIndex) => {
+        if (!['trigger', 'check-constraint'].includes(check.type) || !check.name || !check.tableName) {
+          errors.push(`迁移 guardChecks[${checkIndex}] 必须声明 type、name 和 tableName：${label}`)
+        }
+      })
+    }
+    if (Array.isArray(migration.relationColumnChecks)) {
+      migration.relationColumnChecks.forEach((check, checkIndex) => {
+        if (!check.relationName || !Array.isArray(check.columnNames) || check.columnNames.length === 0) {
+          errors.push(`迁移 relationColumnChecks[${checkIndex}] 必须声明 relationName 和 columnNames：${label}`)
+        }
+      })
+    }
+    if (Array.isArray(migration.dataChecks)) {
+      migration.dataChecks.forEach((check, checkIndex) => {
+        if (!check.name || typeof check.sql !== 'string' || !Object.hasOwn(check, 'expectedValue')) {
+          errors.push(`迁移 dataChecks[${checkIndex}] 必须声明 name、sql 和 expectedValue：${label}`)
+        }
+      })
+    }
+    if (migration.alwaysApply && !hasExplicitReadinessChecks(migration)) {
+      if (!TARGET_ONLY_READINESS_ASSURANCES.has(migration.targetOnlyReadinessAssurance)) {
+        errors.push(
+          `alwaysApply 迁移没有显式 readiness check 时，必须声明 targetOnlyReadinessAssurance：${label}`,
+        )
+      }
+    }
+
+    const absolutePath = path.join(rootDir, migration.path)
+    if (!fs.existsSync(absolutePath)) {
+      errors.push(`迁移文件不存在：${migration.path}`)
+      return
+    }
+
+    const sql = fs.readFileSync(absolutePath, 'utf8').toLowerCase()
+    targetRelations.forEach((relationName) => {
+      const hasRelation = getRelationSearchTerms(relationName).some((term) => sql.includes(term))
+      if (!hasRelation) {
+        errors.push(`迁移文件未引用声明的 targetRelation：${migration.path} -> ${relationName}`)
+      }
+    })
+  })
+
+  if (errors.length > 0) {
+    throw new Error(`主数据治理迁移清单无效：\n${errors.join('\n')}`)
+  }
+
+  return {
+    migrationCount: migrations.length,
+    structureMigrationCount: migrations.filter((migration) => !migration.alwaysApply).length,
+    guardMigrationCount: migrations.filter((migration) => migration.alwaysApply).length,
+    targetOnlyAlwaysApplyMigrationCount: migrations.filter(
+      (migration) => migration.alwaysApply && !hasExplicitReadinessChecks(migration),
+    ).length,
+  }
+}
+
+function validatePrismaMigrationDirectories(options = {}) {
+  const rootDir = options.rootDir ?? ROOT_DIR
+  const migrationsDir = path.join(rootDir, 'prisma/migrations')
+  const errors = []
+
+  if (!fs.existsSync(migrationsDir)) {
+    throw new Error(`Prisma migrations 目录不存在：${path.relative(rootDir, migrationsDir)}`)
+  }
+
+  const dirs = fs
+    .readdirSync(migrationsDir, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => entry.name)
+    .sort()
+
+  dirs.forEach((dirName) => {
+    const migrationSqlPath = path.join(migrationsDir, dirName, 'migration.sql')
+    if (!fs.existsSync(migrationSqlPath)) {
+      errors.push(`Prisma migration 缺少 migration.sql：prisma/migrations/${dirName}`)
+    }
+    if (
+      !STANDARD_PRISMA_MIGRATION_DIR_PATTERN.test(dirName) &&
+      !LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS.has(dirName)
+    ) {
+      errors.push(
+        `Prisma migration 目录名不符合 <timestamp>_name 且未登记为历史例外：prisma/migrations/${dirName}`,
+      )
+    }
+  })
+
+  if (errors.length > 0) {
+    throw new Error(`Prisma migration 目录无效：\n${errors.join('\n')}`)
+  }
+
+  return {
+    migrationDirectoryCount: dirs.length,
+    legacyNonStandardMigrationDirectories: dirs.filter((dirName) =>
+      LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS.has(dirName),
+    ),
+  }
+}
+
+function classifyAppliedMigrationPaths(appliedMigrationPaths, migrations = REQUIRED_MIGRATIONS) {
+  const idempotentMigrationPaths = new Set(
+    migrations
+      .filter((migration) => migration.alwaysApply)
+      .map((migration) => migration.path),
+  )
+  return {
+    structureMigrations: appliedMigrationPaths.filter(
+      (migrationPath) => !idempotentMigrationPaths.has(migrationPath),
+    ),
+    idempotentMigrations: appliedMigrationPaths.filter(
+      (migrationPath) => idempotentMigrationPaths.has(migrationPath),
+    ),
+  }
+}
+
+function getPendingStructureMigrationPaths(appliedMigrationPaths, migrations = REQUIRED_MIGRATIONS) {
+  return classifyAppliedMigrationPaths(appliedMigrationPaths, migrations).structureMigrations
+}
+
+async function relationExists(client, relationName) {
+  const result = await client.query('SELECT to_regclass($1) AS relation_name', [relationName])
+  return result.rows[0]?.relation_name !== null
+}
+
+async function columnExists(client, tableName, columnName) {
+  const result = await client.query(`
+    SELECT 1
+    FROM information_schema.columns
+    WHERE table_schema = 'public'
+      AND table_name = $1
+      AND column_name = $2
+    LIMIT 1
+  `, [tableName, columnName])
+  return result.rowCount > 0
+}
+
+async function columnDefaultMatches(client, tableName, columnName, expectedDefault) {
+  const result = await client.query(`
+    SELECT column_default
+    FROM information_schema.columns
+    WHERE table_schema = 'public'
+      AND table_name = $1
+      AND column_name = $2
+    LIMIT 1
+  `, [tableName, columnName])
+  if (result.rowCount === 0) return false
+  const actualDefault = result.rows[0]?.column_default ?? null
+  return actualDefault === expectedDefault
+}
+
+function parseRelationName(relationName) {
+  const normalized = String(relationName).replace(/"/g, '')
+  const parts = normalized.split('.').filter(Boolean)
+  if (parts.length === 1) {
+    return { schemaName: 'public', tableName: parts[0] }
+  }
+  return {
+    schemaName: parts[parts.length - 2],
+    tableName: parts[parts.length - 1],
+  }
+}
+
+async function relationColumnExists(client, relationName, columnName) {
+  const { schemaName, tableName } = parseRelationName(relationName)
+  const result = await client.query(`
+    SELECT 1
+    FROM information_schema.columns
+    WHERE table_schema = $1
+      AND table_name = $2
+      AND column_name = $3
+    LIMIT 1
+  `, [schemaName, tableName, columnName])
+  return result.rowCount > 0
+}
+
+async function dataCheckPasses(client, check) {
+  let result
+  try {
+    result = await client.query(check.sql)
+  } catch (error) {
+    if (error?.code === '42P01') {
+      return false
+    }
+    throw error
+  }
+  const row = result.rows[0] ?? {}
+  const firstValue = Object.values(row)[0]
+  return firstValue === check.expectedValue
+}
+
+async function guardExists(client, guard) {
+  if (guard.type === 'trigger') {
+    const result = await client.query(`
+      SELECT 1
+      FROM information_schema.triggers
+      WHERE event_object_schema = 'public'
+        AND event_object_table = $1
+        AND trigger_name = $2
+      LIMIT 1
+    `, [guard.tableName, guard.name])
+    return result.rowCount > 0
+  }
+  if (guard.type === 'check-constraint') {
+    const result = await client.query(`
+      SELECT 1
+      FROM pg_constraint c
+      JOIN pg_class t ON t.oid = c.conrelid
+      JOIN pg_namespace n ON n.oid = t.relnamespace
+      WHERE n.nspname = 'public'
+        AND t.relname = $1
+        AND c.conname = $2
+        AND c.contype = 'c'
+      LIMIT 1
+    `, [guard.tableName, guard.name])
+    return result.rowCount > 0
+  }
+  return false
+}
+
+async function assertMigrationTargetReady(client, migration) {
+  const targetRelations = getMigrationTargetRelations(migration)
+  const relationChecks = await Promise.all(
+    targetRelations.map(async (relationName) => ({
+      relationName,
+      exists: await relationExists(client, relationName),
+    })),
+  )
+  const missingRelations = relationChecks
+    .filter((check) => !check.exists)
+    .map((check) => check.relationName)
+
+  if (missingRelations.length > 0) {
+    throw new Error(
+      `治理迁移执行后未生成声明的 targetRelation：${migration.path} -> ${missingRelations.join(', ')}`,
+    )
+  }
+
+  if (
+    migration.columnCheck &&
+    !await columnExists(client, migration.columnCheck.tableName, migration.columnCheck.columnName)
+  ) {
+    throw new Error(
+      `治理迁移执行后未生成声明的 columnCheck：${migration.path} -> ${migration.columnCheck.tableName}.${migration.columnCheck.columnName}`,
+    )
+  }
+  if (Array.isArray(migration.columnDefaultChecks)) {
+    for (const check of migration.columnDefaultChecks) {
+      if (!await columnDefaultMatches(client, check.tableName, check.columnName, check.expectedDefault)) {
+        throw new Error(
+          `治理迁移执行后未满足声明的 columnDefaultCheck：${migration.path} -> ${check.tableName}.${check.columnName}`,
+        )
+      }
+    }
+  }
+  if (Array.isArray(migration.guardChecks)) {
+    for (const check of migration.guardChecks) {
+      if (!await guardExists(client, check)) {
+        throw new Error(
+          `治理迁移执行后未满足声明的 guardCheck：${migration.path} -> ${check.type}:${check.tableName}.${check.name}`,
+        )
+      }
+    }
+  }
+  if (Array.isArray(migration.relationColumnChecks)) {
+    for (const check of migration.relationColumnChecks) {
+      for (const columnName of check.columnNames) {
+        if (!await relationColumnExists(client, check.relationName, columnName)) {
+          throw new Error(
+            `治理迁移执行后未满足声明的 relationColumnCheck：${migration.path} -> ${check.relationName}.${columnName}`,
+          )
+        }
+      }
+    }
+  }
+  if (Array.isArray(migration.dataChecks)) {
+    for (const check of migration.dataChecks) {
+      if (!await dataCheckPasses(client, check)) {
+        throw new Error(
+          `治理迁移执行后未满足声明的 dataCheck：${migration.path} -> ${check.name}`,
+        )
+      }
+    }
+  }
+}
+
+async function applyMissingMigrationFiles(client, migrations = REQUIRED_MIGRATIONS) {
+  const applied = []
+  const readinessByPath = new Map()
+  for (const migration of migrations) {
+    readinessByPath.set(migration.path, await getMigrationApplyReadiness(client, migration))
+  }
+
+  const shouldReplayIdempotentMigrations = Array.from(readinessByPath.values()).some(
+    (readiness) => !readiness.ready,
+  )
+
+  for (const migration of migrations) {
+    const readiness = readinessByPath.get(migration.path)
+    const shouldReplayCurrentIdempotent = Boolean(
+      migration.alwaysApply &&
+      shouldReplayIdempotentMigrations &&
+      !hasExplicitReadinessChecks(migration),
+    )
+
+    if (readiness.ready && !shouldReplayCurrentIdempotent) {
+      continue
+    }
+
+    const canUseRepairSql = Boolean(
+      readiness.targetExists &&
+      readiness.columnReady &&
+      readiness.columnDefaultReady &&
+      readiness.relationColumnReady &&
+      !readiness.dataReady &&
+      migration.repairSql,
+    )
+    const canUseRepairSqlForGuard = Boolean(
+      readiness.targetExists &&
+      readiness.columnReady &&
+      readiness.columnDefaultReady &&
+      readiness.relationColumnReady &&
+      readiness.dataReady &&
+      !readiness.guardReady &&
+      migration.repairSql,
+    )
+    const absolutePath = path.join(ROOT_DIR, migration.path)
+    await client.query(
+      canUseRepairSql || canUseRepairSqlForGuard
+        ? migration.repairSql
+        : fs.readFileSync(absolutePath, 'utf8'),
+    )
+    await assertMigrationTargetReady(client, migration)
+    applied.push(migration.path)
+  }
+
+  const replayedIdempotentMigrations = applied.some((migrationPath) => {
+    const migration = migrations.find((item) => item.path === migrationPath)
+    return migration?.alwaysApply
+  })
+  if (!replayedIdempotentMigrations) {
+    return applied
+  }
+
+  for (const migration of migrations.filter((item) => !item.alwaysApply)) {
+    const readiness = await getMigrationApplyReadiness(client, migration)
+    if (readiness.ready) continue
+
+    const canUseRepairSql = Boolean(
+      readiness.targetExists &&
+      readiness.columnReady &&
+      readiness.columnDefaultReady &&
+      readiness.relationColumnReady &&
+      migration.repairSql,
+    )
+    const absolutePath = path.join(ROOT_DIR, migration.path)
+    await client.query(canUseRepairSql ? migration.repairSql : fs.readFileSync(absolutePath, 'utf8'))
+    await assertMigrationTargetReady(client, migration)
+    if (!applied.includes(migration.path)) {
+      applied.push(migration.path)
+    }
+  }
+  return applied
+}
+
+async function getMigrationApplyReadiness(client, migration) {
+  const targetRelations = getMigrationTargetRelations(migration)
+  const targetExists = (
+    await Promise.all(targetRelations.map((relationName) => relationExists(client, relationName)))
+  ).every(Boolean)
+  const columnReady = !migration.columnCheck ||
+    await columnExists(client, migration.columnCheck.tableName, migration.columnCheck.columnName)
+  const columnDefaultReady = await migrationColumnDefaultChecksPass(client, migration)
+  const guardReady = await migrationGuardChecksPass(client, migration)
+  const relationColumnReady = await migrationRelationColumnChecksPass(client, migration)
+  const dataReady = targetExists
+    ? await migrationDataChecksPass(client, migration)
+    : false
+  return {
+    targetExists,
+    columnReady,
+    columnDefaultReady,
+    guardReady,
+    relationColumnReady,
+    dataReady,
+    ready:
+      targetExists &&
+      columnReady &&
+      columnDefaultReady &&
+      guardReady &&
+      relationColumnReady &&
+      dataReady,
+  }
+}
+
+async function migrationColumnDefaultChecksPass(client, migration) {
+  if (!Array.isArray(migration.columnDefaultChecks) || migration.columnDefaultChecks.length === 0) {
+    return true
+  }
+  const results = await Promise.all(
+    migration.columnDefaultChecks.map((check) =>
+      columnDefaultMatches(client, check.tableName, check.columnName, check.expectedDefault),
+    ),
+  )
+  return results.every(Boolean)
+}
+
+async function migrationGuardChecksPass(client, migration) {
+  if (!Array.isArray(migration.guardChecks) || migration.guardChecks.length === 0) {
+    return true
+  }
+  const results = await Promise.all(migration.guardChecks.map((check) => guardExists(client, check)))
+  return results.every(Boolean)
+}
+
+async function migrationRelationColumnChecksPass(client, migration) {
+  if (!Array.isArray(migration.relationColumnChecks) || migration.relationColumnChecks.length === 0) {
+    return true
+  }
+  const results = []
+  for (const check of migration.relationColumnChecks) {
+    for (const columnName of check.columnNames) {
+      results.push(await relationColumnExists(client, check.relationName, columnName))
+    }
+  }
+  return results.every(Boolean)
+}
+
+async function migrationDataChecksPass(client, migration) {
+  if (!Array.isArray(migration.dataChecks) || migration.dataChecks.length === 0) {
+    return true
+  }
+  const results = []
+  for (const check of migration.dataChecks) {
+    results.push(await dataCheckPasses(client, check))
+  }
+  return results.every(Boolean)
+}
+
+module.exports = {
+  REQUIRED_MIGRATIONS,
+  LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS,
+  applyMissingMigrationFiles,
+  assertMigrationTargetReady,
+  classifyAppliedMigrationPaths,
+  columnDefaultMatches,
+  columnExists,
+  dataCheckPasses,
+  guardExists,
+  hasExplicitReadinessChecks,
+  getPendingStructureMigrationPaths,
+  getMigrationTargetRelations,
+  getMigrationTimestamp,
+  relationColumnExists,
+  relationExists,
+  validateRequiredMigrationCatalog,
+  validatePrismaMigrationDirectories,
+}
diff --git a/furniture-3d-system/scripts/master-data-truth-sources.js b/furniture-3d-system/scripts/master-data-truth-sources.js
new file mode 100644
index 00000000..23fbc8e3
--- /dev/null
+++ b/furniture-3d-system/scripts/master-data-truth-sources.js
@@ -0,0 +1,695 @@
+const CORE_MASTER_DATA_TRUTH_SOURCES = [
+  {
+    id: 'asset-series',
+    layer: 'asset-center-source',
+    primaryRelations: ['AssetSeries'],
+    compatibilitySnapshots: ['AssetSeries.metadata'],
+    notTruthSources: ['page filter state', 'draft group display text'],
+    writeBoundary: ['src/server/repositories/asset-center.repository.ts'],
+    requiredGuardNames: [
+      'AssetSeries_code_key',
+      'AssetSeries_code_normalized',
+      'AssetSeries_identity_valid',
+      'AssetSeries_metadata_object',
+    ],
+  },
+  {
+    id: 'asset-family',
+    layer: 'asset-center-source',
+    primaryRelations: ['AssetFamily', 'AssetFamilySeriesCompatibility'],
+    compatibilitySnapshots: ['AssetFamily.metadata', 'PreSku.familySelection'],
+    notTruthSources: ['PreSku.familySelection', 'asset card display text'],
+    writeBoundary: [
+      'src/server/repositories/asset-center.repository.ts',
+      'src/server/services/asset-center.service.ts',
+    ],
+    requiredGuardNames: [
+      'AssetFamily_code_key',
+      'AssetFamily_code_normalized',
+      'AssetFamily_identity_valid',
+      'AssetFamily_metadata_object',
+      'AssetFamily_lifecycle_state_valid',
+      'AssetFamilySeriesCompatibility_assetFamilyId_assetSeriesId_key',
+    ],
+  },
+  {
+    id: 'asset-variant',
+    layer: 'asset-center-source',
+    primaryRelations: ['AssetVariant'],
+    compatibilitySnapshots: [
+      'AssetVariant.businessData',
+      'AssetVariant.businessData.cadData',
+      'AssetVariant.dimensions',
+    ],
+    notTruthSources: [
+      'ProductSKU.attributes.assetSkuSnapshot',
+      'PreSku.variantSelection',
+      'AssetVariant.businessData.cadData as formal SKU truth',
+    ],
+    writeBoundary: [
+      'src/server/repositories/asset-center.repository.ts',
+      'src/server/services/asset-center.service.ts',
+    ],
+    requiredGuardNames: [
+      'AssetVariant_code_key',
+      'AssetVariant_assetFamilyId_identityKey_key',
+      'AssetVariant_barcode_active_key',
+      'AssetVariant_identity_valid',
+      'AssetVariant_json_shape_valid',
+      'AssetVariant_cost_weight_valid',
+      'AssetVariant_lifecycle_state_valid',
+      'AssetVariant_inheritance_not_self',
+    ],
+  },
+  {
+    id: 'material',
+    layer: 'reference-source',
+    primaryRelations: ['Material', 'Substrate'],
+    compatibilitySnapshots: ['Material.thumbnailUrl', 'Material.textureUrl'],
+    notTruthSources: ['BOM option label', 'localStorage'],
+    writeBoundary: [
+      'src/server/repositories/material.repository.ts',
+      'src/server/services/asset-center.service.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+    ],
+    requiredGuardNames: [
+      'Material_code_key',
+      'Material_code_normalized',
+      'Substrate_code_key',
+      'Substrate_code_normalized',
+    ],
+  },
+  {
+    id: 'hardware',
+    layer: 'reference-source',
+    primaryRelations: ['Hardware'],
+    compatibilitySnapshots: ['Hardware.specifications', 'Hardware.mountPoints'],
+    notTruthSources: ['ProductHardware.match text', 'CAD block name only'],
+    writeBoundary: [
+      'src/server/repositories/hardware.repository.ts',
+      'src/server/services/hardware-write-ops.ts',
+    ],
+    requiredGuardNames: ['Hardware_code_key', 'Hardware_code_normalized'],
+  },
+  {
+    id: 'common-component',
+    layer: 'reference-source',
+    primaryRelations: ['CommonComponent'],
+    compatibilitySnapshots: ['CommonComponent.specifications', 'CommonComponent.mountPoints'],
+    notTruthSources: ['component card title', 'assistant assembly node label'],
+    writeBoundary: ['src/server/repositories/common-component.repository.ts'],
+    requiredGuardNames: ['CommonComponent_code_key', 'CommonComponent_code_normalized'],
+  },
+  {
+    id: 'draft-group',
+    layer: 'process',
+    primaryRelations: ['DraftGroup'],
+    compatibilitySnapshots: ['DraftGroup.summary'],
+    notTruthSources: ['formal Product', 'ProductSKU'],
+    writeBoundary: [
+      'src/server/repositories/draft-group.repository.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+      'scripts/apply-pre-sku-formalization-repair.js',
+    ],
+    requiredGuardNames: [
+      'DraftGroup_code_key',
+      'DraftGroup_code_normalized',
+      'DraftGroup_identity_valid',
+      'DraftGroup_summary_object',
+      'DraftGroup_optional_text_not_blank',
+    ],
+  },
+  {
+    id: 'pre-sku',
+    layer: 'process',
+    primaryRelations: ['PreSku', 'PreSkuBasicInfo'],
+    compatibilitySnapshots: [
+      'PreSku.displaySummary',
+      'PreSku.familySelection',
+      'PreSku.variantSelection',
+      'PreSku.bomPreview',
+    ],
+    notTruthSources: ['ProductSKU.attributes', 'draft card display summary'],
+    writeBoundary: [
+      'src/server/repositories/draft-group.repository.ts',
+      'src/server/services/intake.service.ts',
+      'scripts/master-data-required-migrations.js',
+      'scripts/apply-pre-sku-formalization-repair.js',
+    ],
+    requiredGuardNames: [
+      'PreSku_draftGroupId_sequence_key',
+      'PreSkuBasicInfo_preSkuId_key',
+      'PreSkuBasicInfo_formalSkuCode_non_empty_key',
+      'PreSkuBasicInfo_barcode_non_empty_key',
+      'PreSkuBasicInfo_formalSkuCode_normalized',
+      'PreSkuBasicInfo_barcode_normalized',
+      'PreSkuBasicInfo_model_normalized',
+      'PreSkuBasicInfo_versionNo_normalized',
+      'PreSkuBasicInfo_attributeCode_normalized',
+      'PreSkuBasicInfo_drawingId_normalized',
+      'PreSkuBasicInfo_source_allowed',
+      'PreSkuBasicInfo_optional_text_not_blank',
+      'PreSku_identity_valid',
+      'PreSku_process_snapshots_shape_valid',
+      'PreSku_weight_valid',
+      'PreSku_component_codes_valid',
+      'PreSku_optional_text_not_blank',
+    ],
+  },
+  {
+    id: 'formal-product',
+    layer: 'formal-result',
+    primaryRelations: ['Product'],
+    compatibilitySnapshots: ['legacy upload payload'],
+    notTruthSources: ['DraftGroup.name', 'PreSku.displaySummary', 'Date.now fallback'],
+    writeBoundary: [
+      'src/server/repositories/product.repository.ts',
+      'src/server/repositories/product-upload.repository.ts',
+      'src/server/repositories/sku-quality-inspection.repository.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+    ],
+    requiredGuardNames: [
+      'Product_modelNumber_key',
+      'Product_modelNumber_normalized',
+      'Product_name_not_blank',
+    ],
+  },
+  {
+    id: 'formal-sku',
+    layer: 'formal-result',
+    primaryRelations: ['ProductSKU', 'ProductSkuAssetProfile'],
+    compatibilitySnapshots: ['ProductSKU.attributes', 'ProductSKU.transferHistory'],
+    notTruthSources: [
+      'attributes.skuName',
+      'attributes.assetSkuSnapshot',
+      'attributes.bomPreview',
+      'PreSku.bomPreview',
+      'AssetVariant.estimatedCostPrice as formal SKU cost',
+      'external.product_bom_v1.unit_cost',
+      'external.product_bom_v1.total_cost',
+    ],
+    writeBoundary: [
+      'src/server/repositories/product.repository.ts',
+      'src/server/repositories/handover.repository.ts',
+      'src/server/repositories/product-upload.repository.ts',
+      'src/server/repositories/sku.repository.ts',
+      'src/server/repositories/sku-quality-inspection.repository.ts',
+      'src/server/services/sku-command.service.ts',
+      'src/server/services/asset-sku-sync.service.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/sku-cad-import.helper.ts',
+      'scripts/master-data-required-migrations.js',
+      'scripts/apply-pre-sku-formalization-repair.js',
+    ],
+    requiredGuardNames: [
+      'ProductSKU_skuCode_key',
+      'ProductSKU_active_skuCode_normalized_key',
+      'ProductSKU_sourcePreSkuId_key',
+      'ProductSKU_price_cost_stock_non_negative',
+      'ProductSKU_skuCode_normalized',
+      'ProductSKU_active_skuCode_not_deleted_marker',
+      'ProductSKU_active_skuCode_no_deleted_marker_ci',
+      'ProductSKU_soft_delete_identity_valid',
+      'ProductSKU_no_soft_delete_lifecycle_attributes',
+      'ProductSKU_soft_delete_tombstone_valid',
+      'ProductSKU_no_formal_truth_attributes',
+      'ProductSKU_sync_asset_profile_deleted_at',
+      'ProductSkuAssetProfile_skuId_key',
+      'ProductSkuAssetProfile_barcode_active_non_empty_key',
+      'ProductSkuAssetProfile_barcode_normalized',
+      'ProductSkuAssetProfile_model_normalized',
+      'ProductSkuAssetProfile_specCode_normalized',
+      'ProductSkuAssetProfile_primary_source_required',
+      'ProductSkuAssetProfile_source_variant_ids_required',
+      'ProductSkuAssetProfile_primary_source_in_source_ids',
+      'ProductSkuAssetProfile_optional_text_not_blank',
+    ],
+  },
+  {
+    id: 'formal-bom-structure',
+    layer: 'formal-result',
+    primaryRelations: ['Panel', 'PanelMaterial', 'ProductHardware', 'Hardware'],
+    compatibilitySnapshots: [
+      'Panel.assemblySemantic',
+      'ProductHardware.transform',
+      'ProductHardware.sourceSignature',
+    ],
+    notTruthSources: [
+      'PreSku.bomPreview as confirmed BOM',
+      'PreSku.displaySummary totals',
+      'reference image estimator',
+      'REFERENCE_ESTIMATOR_*',
+      'reference-image-cost-catalog',
+      'external.product_bom_v1.unit_cost',
+      'external.product_bom_v1.total_cost',
+    ],
+    writeBoundary: [
+      'src/server/repositories/panel.repository.ts',
+      'src/server/repositories/product-upload.repository.ts',
+      'src/server/repositories/product.repository.ts',
+      'src/server/repositories/product-hardware.repository.ts',
+      'src/server/repositories/hardware.repository.ts',
+      'src/server/services/hardware-matcher.runtime.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/sku-cad-import.helper.ts',
+    ],
+    requiredGuardNames: [
+      'Panel_product_sku_code_normalized_key',
+      'Panel_identity_dimensions_valid',
+      'Panel_assemblySemantic_object',
+      'Panel_optional_text_not_blank',
+      'PanelMaterial_relation_ids_not_blank',
+      'ProductHardware_match_status_allowed',
+      'ProductHardware_match_confidence_valid',
+      'ProductHardware_match_method_allowed',
+      'ProductHardware_quantities_geometry_valid',
+      'ProductHardware_transform_object',
+      'ProductHardware_sourceSignature_object',
+      'ProductHardware_optional_text_not_blank',
+      'Hardware_code_key',
+    ],
+  },
+  {
+    id: 'non-integrated-product',
+    layer: 'intake-process',
+    primaryRelations: ['IntakeNonIntegratedProduct', 'IntakeNonIntegratedProductProfile'],
+    compatibilitySnapshots: ['IntakeNonIntegratedProduct.payload'],
+    notTruthSources: ['payload.openingReference', 'review sheet text', 'approval summary'],
+    writeBoundary: [
+      'src/server/repositories/intake-non-integrated-product.repository.ts',
+      'src/server/services/intake-non-integrated-product.service.ts',
+      'src/server/services/jst-sku-stock-sync.service.ts',
+      'scripts/master-data-required-migrations.js',
+      'scripts/apply-master-data-cleanup-plan.js',
+    ],
+    requiredGuardNames: [
+      'IntakeNonIntegratedProduct_spu_brand_key',
+      'IntakeNonIntegratedProduct_spu_brand_normalized_key',
+      'IntakeNonIntegratedProductProfile_productId_key',
+      'IntakeProductProfile_developmentKind_allowed',
+    ],
+  },
+  {
+    id: 'non-integrated-sku-item',
+    layer: 'intake-process',
+    primaryRelations: ['IntakeNonIntegratedSkuItem'],
+    compatibilitySnapshots: ['IntakeNonIntegratedProduct.payload.skuItems'],
+    notTruthSources: ['payload.skuItems', 'spreadsheet row order'],
+    writeBoundary: [
+      'src/server/repositories/intake-non-integrated-product.repository.ts',
+      'src/server/services/intake-non-integrated-product.service.ts',
+      'src/server/services/jst-sku-stock-sync.service.ts',
+      'scripts/master-data-required-migrations.js',
+      'scripts/apply-master-data-cleanup-plan.js',
+    ],
+    requiredGuardNames: [
+      'IntakeNonIntegratedSkuItem_productId_skuItemId_key',
+      'IntakeNonIntegratedSkuItem_skuCode_non_empty_key',
+      'IntakeNonIntegratedSkuItem_barcode_non_empty_key',
+      'IntakeNonIntegratedSkuItem_quality_state_required_fields',
+    ],
+  },
+  {
+    id: 'master-data-quality-decision',
+    layer: 'quality-audit',
+    primaryRelations: ['MasterDataQualityDecision'],
+    compatibilitySnapshots: ['cleanup plan json'],
+    notTruthSources: ['local cleanup template', 'chat confirmation text'],
+    writeBoundary: ['scripts/apply-master-data-cleanup-plan.js'],
+    requiredGuardNames: [
+      'MasterDataQualityDecision_open_target_key',
+      'MasterDataQualityDecision_target_not_blank',
+      'MasterDataQualityDecision_status_allowed',
+      'MasterDataQualityDecision_reason_not_blank',
+      'MasterDataQualityDecision_decidedBy_not_blank',
+      'MasterDataQualityDecision_reason_not_placeholder',
+      'MasterDataQualityDecision_decidedBy_not_placeholder',
+      'MasterDataQualityDecision_resolvedBy_not_placeholder',
+      'MasterDataQualityDecision_resolved_state_valid',
+    ],
+  },
+  {
+    id: 'product-patent',
+    layer: 'reference-source',
+    primaryRelations: ['ProductPatentRecord'],
+    compatibilitySnapshots: ['ProductPatentRecord.annualFees'],
+    notTruthSources: ['localStorage', 'patent timestamp draft id'],
+    writeBoundary: ['src/server/services/product-patent.service.ts'],
+    requiredGuardNames: ['ProductPatentRecord_patentGroupKey_key'],
+  },
+  {
+    id: 'intake-reference-library',
+    layer: 'reference-source',
+    primaryRelations: ['IntakeReferenceLibraryItem'],
+    compatibilitySnapshots: ['IntakeReferenceLibraryItem.payload'],
+    notTruthSources: ['localStorage', 'frontend row id', 'database id as itemKey'],
+    writeBoundary: [
+      'src/server/services/intake-reference-library.service.ts',
+      'src/server/services/spu-number-reservation.service.ts',
+    ],
+    requiredGuardNames: [
+      'IntakeReferenceLibraryItem_libraryType_itemKey_key',
+      'IntakeReferenceLibraryItem_libraryType_code_non_empty_key',
+      'IntakeReferenceLibraryItem_libraryType_itemKey_normalized_key',
+      'IntakeReferenceLibraryItem_code_required',
+    ],
+  },
+  {
+    id: 'spu-number-counter',
+    layer: 'identity-counter',
+    primaryRelations: ['SpuNumberCounter'],
+    compatibilitySnapshots: ['SPU_RULE payload display fields'],
+    notTruthSources: ['frontend reserve cache', 'standalone reservation API'],
+    writeBoundary: [
+      'src/server/services/spu-number-reservation.service.ts',
+      'scripts/master-data-required-migrations.js',
+    ],
+    requiredGuardNames: [
+      'SpuNumberCounter_productCategory_key',
+      'SpuNumberCounter_productCategory_normalized_key',
+      'SpuNumberCounter_prefix_key',
+      'SpuNumberCounter_lastUsedIndex_non_negative',
+    ],
+  },
+  {
+    id: 'people-org',
+    layer: 'permission-foundation',
+    primaryRelations: ['User', 'Department', 'EmployeeDirectory', 'Team', 'EmployeeLookupCache'],
+    compatibilitySnapshots: [
+      'EmployeeDirectory.rawSnapshot',
+      'Department.rawSnapshot',
+      'EmployeeLookupCache.result',
+    ],
+    notTruthSources: ['login session cache', 'manual text department path'],
+    writeBoundary: [
+      'src/server/repositories/user.repository.ts',
+      'src/server/repositories/auth.repository.ts',
+      'src/server/repositories/department.repository.ts',
+      'src/server/repositories/employee-directory.repository.ts',
+      'src/server/repositories/team.repository.ts',
+      'src/server/services/department.service.ts',
+      'src/server/services/dingtalk-auth.service.ts',
+      'src/server/services/external-employee-directory.service.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+      'src/server/services/system-init.service.ts',
+      'src/server/services/team.service.ts',
+    ],
+    requiredGuardNames: [
+      'User_email_normalized_key',
+      'User_name_normalized_key',
+      'Department_name_normalized_key',
+      'Department_externalId_normalized_key',
+      'EmployeeDirectory_dingtalkUserId_normalized_key',
+      'EmployeeDirectory_jobNumber_normalized_key',
+      'Team_identity_not_blank',
+      'EmployeeLookupCache_identity_not_blank',
+    ],
+  },
+  {
+    id: 'warehouse-packaging',
+    layer: 'warehouse-result',
+    primaryRelations: [
+      'WarehouseLocation',
+      'PackagedItem',
+      'PackagingPlan',
+      'PreSkuPackagingPlan',
+      'BrandMaterialBinding',
+    ],
+    compatibilitySnapshots: [
+      'PackagingPlan.boxes',
+      'PackagedItem.payload',
+      'PreSkuPackagingPlan.boxes',
+      'PreSkuPackagingPlan.costSummary',
+      'BrandMaterialBinding.fileName',
+    ],
+    notTruthSources: [
+      'preview packaging text',
+      'draft packaging snapshot',
+      'draft packaging snapshot cost',
+      'PackagedItem.payload.costSummary',
+    ],
+    writeBoundary: [
+      'src/server/repositories/warehouse.repository.ts',
+      'src/server/repositories/packaging.repository.ts',
+      'src/server/repositories/draft-group.repository.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+      'src/server/services/pre-sku-packaging.service.ts',
+    ],
+    requiredGuardNames: [
+      'WarehouseLocation_code_key',
+      'WarehouseLocation_active_position_key',
+      'PackagedItem_code_key',
+      'PackagedItem_code_normalized',
+      'PackagedItem_status_allowed',
+      'PackagedItem_name_not_blank',
+      'PackagedItem_quantities_valid',
+      'PackagedItem_dimensions_valid',
+      'PackagedItem_payload_object',
+      'PackagingPlan_boxes_array',
+      'PackagingPlan_identity_counts_valid',
+      'PackagingPlan_totals_valid',
+      'PackagingPlan_optional_text_not_blank',
+      'PreSkuPackagingPlan_boxes_array',
+      'PreSkuPackagingPlan_status_allowed',
+      'PreSkuPackagingPlan_costSummary_object',
+      'PreSkuPackagingPlan_processDraft_object',
+      'PreSkuPackagingPlan_optional_text_not_blank',
+      'BrandMaterialBinding_brand_material_normalized_key',
+      'BrandMaterialBinding_materialType_allowed',
+      'BrandMaterialBinding_identity_not_blank',
+      'BrandMaterialBinding_file_metadata_consistent',
+    ],
+  },
+  {
+    id: 'reference-taxonomy',
+    layer: 'reference-source',
+    primaryRelations: [
+      'ProductCategory',
+      'MaterialCategory',
+      'HardwareCategory',
+      'CommonComponentCategory',
+      'SubstrateCategory',
+      'SubstrateEnvironmentGrade',
+      'SubstrateSurfaceOption',
+      'SubstrateSystemNameOption',
+      'SubstrateThicknessSpec',
+    ],
+    compatibilitySnapshots: [
+      'ProductCategory.description',
+      'HardwareCategory.description',
+      'SubstrateThicknessSpec.thicknessMm',
+    ],
+    notTruthSources: ['UI select options', 'spreadsheet category text', 'payload productCategory'],
+    writeBoundary: [
+      'src/server/repositories/material.repository.ts',
+      'src/server/repositories/hardware.repository.ts',
+      'src/server/repositories/common-component.repository.ts',
+      'src/server/services/asset-center.service.ts',
+      'src/server/services/hardware-write-ops.ts',
+      'src/server/services/open-platform-demo-seed.service.ts',
+    ],
+    requiredGuardNames: [
+      'ProductCategory_name_normalized_key',
+      'MaterialCategory_name_normalized_key',
+      'HardwareCategory_name_normalized_key',
+      'CommonComponentCategory_name_normalized_key',
+      'SubstrateCategory_name_normalized_key',
+      'SubstrateEnvironmentGrade_name_normalized_key',
+      'SubstrateSurfaceOption_name_normalized_key',
+      'SubstrateSystemNameOption_name_normalized_key',
+      'SubstrateThicknessSpec_name_normalized_key',
+    ],
+  },
+  {
+    id: 'reference-bindings',
+    layer: 'reference-source',
+    primaryRelations: [
+      'HardwareMapping',
+      'SubstrateFinish',
+      'PanelMaterial',
+      'AssetVariantLocationBinding',
+      'PreSkuLocationBinding',
+    ],
+    compatibilitySnapshots: ['HardwareMapping.signatureHash', 'PanelMaterial.materialId'],
+    notTruthSources: ['CAD block text only', 'panel material label', 'warehouse display position'],
+    writeBoundary: [
+      'src/server/repositories/hardware.repository.ts',
+      'src/server/repositories/material.repository.ts',
+      'src/server/repositories/panel.repository.ts',
+      'src/server/repositories/warehouse.repository.ts',
+      'src/server/services/hardware-matcher.runtime.ts',
+      'src/server/services/hardware-write-ops.ts',
+    ],
+    requiredGuardNames: [
+      'HardwareMapping_match_key_exactly_one',
+      'HardwareMapping_usage_source_valid',
+      'SubstrateFinish_relation_ids_not_blank',
+      'PanelMaterial_relation_ids_not_blank',
+      'AssetVariantLocationBinding_relation_ids_not_blank',
+      'PreSkuLocationBinding_relation_ids_not_blank',
+    ],
+  },
+  {
+    id: 'asset-sku-sync-event',
+    layer: 'sync-event',
+    primaryRelations: ['AssetSkuSyncEvent'],
+    compatibilitySnapshots: ['AssetSkuSyncEvent.payload', 'AssetSkuSyncEvent.progress'],
+    notTruthSources: ['Redis task state', 'frontend sync badge'],
+    writeBoundary: ['src/server/services/asset-sku-sync.service.ts'],
+    requiredGuardNames: [
+      'AssetSkuSyncEvent_reason_allowed',
+      'AssetSkuSyncEvent_counts_non_negative',
+      'AssetSkuSyncEvent_completed_has_processed_at',
+    ],
+  },
+  {
+    id: 'collaboration-access',
+    layer: 'permission-foundation',
+    primaryRelations: ['ProductCollaborator', 'ShareLink'],
+    compatibilitySnapshots: ['ShareLink.expiresAt', 'ShareLink.viewCount'],
+    notTruthSources: ['URL token text', 'approval participant summary', 'business type alone'],
+    writeBoundary: [
+      'src/server/repositories/handover.repository.ts',
+      'src/server/repositories/product.repository.ts',
+      'src/server/services/product-collaborator.service.ts',
+      'src/server/repositories/share.repository.ts',
+    ],
+    requiredGuardNames: [
+      'ProductCollaborator_identity_not_blank',
+      'ProductCollaborator_role_allowed',
+      'ShareLink_token_not_blank',
+      'ShareLink_viewCount_non_negative',
+    ],
+  },
+  {
+    id: 'approval-workflow',
+    layer: 'process',
+    primaryRelations: ['ApprovalWorkflow', 'ApprovalWorkflowFieldChange'],
+    compatibilitySnapshots: ['ApprovalWorkflow.summary', 'ApprovalWorkflow.fieldMatrix'],
+    notTruthSources: ['approval summary as product profile', 'field change oldValue/newValue as current truth'],
+    writeBoundary: ['src/server/services/approval-workflow.service.ts'],
+    requiredGuardNames: [
+      'ApprovalWorkflow_approvalNumber_normalized',
+      'ApprovalWorkflow_title_not_blank',
+      'ApprovalWorkflow_participant_user_ids_valid',
+      'ApprovalWorkflowFieldChange_fieldKey_not_blank',
+    ],
+  },
+  {
+    id: 'planning',
+    layer: 'process',
+    primaryRelations: ['PlanningTemplate', 'PlanningWorkspace', 'PlanningDraft'],
+    compatibilitySnapshots: [
+      'PlanningTemplate.slots',
+      'PlanningWorkspace.slotSelections',
+      'PlanningDraft.selectedAssets',
+    ],
+    notTruthSources: ['planning preview node as asset source', 'planning draft as formal SKU'],
+    writeBoundary: ['src/server/repositories/planning.repository.ts'],
+    requiredGuardNames: [
+      'PlanningTemplate_code_key',
+      'PlanningTemplate_slots_array',
+      'PlanningWorkspace_slotSelections_object',
+      'PlanningDraft_previewNodes_array',
+    ],
+  },
+  {
+    id: 'system-config-feedback-audit',
+    layer: 'configuration-and-audit',
+    primaryRelations: [
+      'SystemConfig',
+      'ProviderConfig',
+      'ThemeConfig',
+      'IntakeNodePermissionOverride',
+      'AssistedAssemblyAiRender',
+      'Feedback',
+      'ActivityLog',
+    ],
+    compatibilitySnapshots: [
+      'SystemConfig.value',
+      'ProviderConfig.extra',
+      'ThemeConfig.homeBackground',
+      'AssistedAssemblyAiRender.workspaceSnapshot',
+      'Feedback.comments',
+      'ActivityLog.metadata',
+    ],
+    notTruthSources: ['environment variable fallback', 'browser UI state', 'toast text'],
+    writeBoundary: [
+      'src/server/repositories/auth.repository.ts',
+      'src/server/repositories/feedback.repository.ts',
+      'src/server/repositories/handover.repository.ts',
+      'src/server/repositories/log.repository.ts',
+      'src/server/repositories/sku.repository.ts',
+      'src/server/repositories/theme.repository.ts',
+      'src/server/services/assisted-assembly-ai-render.service.ts',
+      'src/server/services/approval-workflow.service.ts',
+      'src/server/services/department.service.ts',
+      'src/server/services/feedback-workflow.helper.ts',
+      'src/server/services/intake-node-permission-settings.service.ts',
+      'src/server/services/product-collaborator.service.ts',
+      'src/server/services/system-config.service.ts',
+      'src/server/services/provider-config.service.ts',
+      'src/server/services/feedback-workflow.service.ts',
+      'src/server/services/logger.service.ts',
+      'src/server/services/team.service.ts',
+    ],
+    requiredGuardNames: [
+      'SystemConfig_key_valid',
+      'ProviderConfig_identity_valid',
+      'ProviderConfig_active_service_key',
+      'ThemeConfig_name_normalized_key',
+      'ThemeConfig_default_key',
+      'IntakeNodePermissionOverride_identity_valid',
+      'AssistedAssemblyAiRender_identity_valid',
+      'Feedback_identity_valid',
+      'ActivityLog_identity_valid',
+    ],
+  },
+  {
+    id: 'legacy-cad-structure',
+    layer: 'legacy-compatibility',
+    primaryRelations: ['Panel', 'Hole', 'ProductHardware', 'AssemblyStep', 'AssemblyVersion'],
+    compatibilitySnapshots: [
+      'Panel.assemblySemantic',
+      'ProductHardware.transform',
+      'AssemblyStep.transform',
+      'AssemblyVersion.snapshot',
+    ],
+    notTruthSources: ['3D highlight state', 'assistant assembly preview text'],
+    writeBoundary: [
+      'src/server/repositories/assembly.repository.ts',
+      'src/server/repositories/panel.repository.ts',
+      'src/server/repositories/product-upload.repository.ts',
+      'src/server/repositories/product.repository.ts',
+      'src/server/repositories/hole.repository.ts',
+      'src/server/repositories/product-hardware.repository.ts',
+      'src/server/services/intake.service.ts',
+      'src/server/services/sku-cad-import.helper.ts',
+    ],
+    requiredGuardNames: [
+      'Panel_product_sku_code_normalized_key',
+      'Panel_identity_dimensions_valid',
+      'Panel_assemblySemantic_object',
+      'Panel_optional_text_not_blank',
+      'Hole_geometry_quality',
+      'Hole_type_allowed',
+      'Hole_optional_text_not_blank',
+      'ProductHardware_match_status_allowed',
+      'ProductHardware_match_confidence_valid',
+      'ProductHardware_match_method_allowed',
+      'ProductHardware_quantities_geometry_valid',
+      'ProductHardware_transform_object',
+      'ProductHardware_sourceSignature_object',
+      'ProductHardware_optional_text_not_blank',
+      'AssemblyStep_identity_order_valid',
+      'AssemblyVersion_snapshot_array',
+    ],
+  },
+]
+
+module.exports = {
+  CORE_MASTER_DATA_TRUTH_SOURCES,
+}
diff --git a/furniture-3d-system/scripts/plan-pre-sku-formalization-repair.js b/furniture-3d-system/scripts/plan-pre-sku-formalization-repair.js
new file mode 100644
index 00000000..468982eb
--- /dev/null
+++ b/furniture-3d-system/scripts/plan-pre-sku-formalization-repair.js
@@ -0,0 +1,456 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const path = require('node:path')
+const { Pool } = require('pg')
+const {
+  getPreSkuFormalizationLifecycleMismatchSamples,
+} = require('./verify-master-data-foundation')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const REPAIR_CURRENT_EVIDENCE_KEYS = [
+  'mismatchReason',
+  'preSkuId',
+  'draftGroupId',
+  'draftGroupCode',
+  'sequence',
+  'status',
+  'linkedFormalSkuId',
+  'linkedSkuCode',
+  'linkedSkuDeletedAt',
+  'linkedProductId',
+  'linkedProductDeletedAt',
+]
+const REPAIR_PLAN_TOP_LEVEL_KEYS = new Set([
+  'mode',
+  'readOnly',
+  'applySupported',
+  'generatedAt',
+  'databaseIdentity',
+  'candidateCount',
+  'reasonCounts',
+  'evidencePolicy',
+  'candidates',
+  'globalGuards',
+  'outputFile',
+])
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    outputPath: '',
+    planPath: '',
+    validatePlan: false,
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--plan') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --plan <json-file>。')
+      }
+      options.planPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--plan=')) {
+      options.planPath = arg.slice('--plan='.length)
+      if (!options.planPath) {
+        throw new Error('缺少 --plan <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--validate-plan') {
+      options.validatePlan = true
+      continue
+    }
+    throw new Error(`未知参数：${arg}。该脚本只生成只读计划，不支持 apply。`)
+  }
+
+  if (options.validatePlan && !options.planPath) {
+    throw new Error('--validate-plan 必须同时提供 --plan <json-file>。')
+  }
+  if (options.planPath && !options.validatePlan) {
+    throw new Error('--plan 只允许和 --validate-plan 一起使用。')
+  }
+
+  return options
+}
+
+function loadDatabaseUrl(rootDir = ROOT_DIR, env = process.env) {
+  if (env.DATABASE_URL) return env.DATABASE_URL
+
+  const envPath = path.join(rootDir, '.env')
+  if (!fs.existsSync(envPath)) return ''
+
+  const content = fs.readFileSync(envPath, 'utf8')
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex <= 0) continue
+    if (trimmed.slice(0, separatorIndex).trim() !== 'DATABASE_URL') continue
+
+    let value = trimmed.slice(separatorIndex + 1).trim()
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1)
+    }
+    return value
+  }
+
+  return ''
+}
+
+function databaseIdentityFromUrl(databaseUrl) {
+  if (!databaseUrl) return ''
+  const parsed = new URL(databaseUrl)
+  const schema = parsed.searchParams.get('schema') || ''
+  return [
+    parsed.protocol.replace(/:$/, '').toLowerCase(),
+    decodeURIComponent(parsed.username || '').toLowerCase(),
+    parsed.hostname.toLowerCase(),
+    parsed.port || '5432',
+    parsed.pathname.replace(/^\//, '').toLowerCase(),
+    schema.toLowerCase(),
+  ].join('|')
+}
+
+function writeJsonReport(outputPath, data, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(data, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function readRepairPlan(planPath, rootDir = ROOT_DIR) {
+  if (!planPath) {
+    throw new Error('缺少 --plan <json-file>。')
+  }
+  const absolutePath = path.resolve(rootDir, planPath)
+  return JSON.parse(fs.readFileSync(absolutePath, 'utf8'))
+}
+
+function getAllowedDecisions(row) {
+  const reason = String(row?.mismatchReason ?? '')
+  if (reason === 'formalized_without_product_sku') {
+    return [
+      {
+        decision: 'revert-pre-sku-status',
+        description: '确认从未生成过正式 ProductSKU 后，将准 SKU 从 FORMALIZED 回退到 PREVIEW_CONFIRMED。',
+        requires: ['业务负责人确认', '审计记录', '回退后重跑 readiness'],
+      },
+      {
+        decision: 'link-existing-product-sku',
+        description: '确认正式 ProductSKU 已通过其他链路生成后，用专用服务补齐 ProductSKU.sourcePreSkuId 关系。',
+        requires: ['正式 SKU ID', '正式 SKU 未删除状态确认', '编码和条码冲突检查'],
+      },
+      {
+        decision: 'archive-invalid-pre-sku',
+        description: '确认该准 SKU 已作废后，将准 SKU 归档，并同步草稿组整体状态。',
+        requires: ['作废原因', '业务负责人确认', '关联包装/库位/清单影响检查'],
+      },
+    ]
+  }
+
+  return [
+    {
+      decision: 'manual-investigation-required',
+      description: '未知错位原因，先人工定位来源链路，再补专用修复动作。',
+      requires: ['错位原因复核', '专用修复方案'],
+    },
+  ]
+}
+
+function buildCurrentEvidence(row) {
+  return REPAIR_CURRENT_EVIDENCE_KEYS.reduce((evidence, key) => {
+    evidence[key] = Object.prototype.hasOwnProperty.call(row ?? {}, key) ? row[key] : null
+    return evidence
+  }, {})
+}
+
+function buildEvidenceFingerprint(evidence) {
+  return crypto
+    .createHash('sha256')
+    .update(JSON.stringify(evidence))
+    .digest('hex')
+}
+
+function buildPreSkuFormalizationRepairPlan(samples = [], options = {}) {
+  const rows = Array.isArray(samples) ? samples : []
+  return {
+    mode: 'pre-sku-formalization-repair-plan',
+    readOnly: true,
+    applySupported: false,
+    generatedAt: new Date().toISOString(),
+    databaseIdentity: options.databaseIdentity || '',
+    candidateCount: rows.length,
+    reasonCounts: rows.reduce((counts, row) => {
+      const reason = String(row?.mismatchReason || 'unknown')
+      counts[reason] = (counts[reason] ?? 0) + 1
+      return counts
+    }, {}),
+    evidencePolicy: {
+      requiredCurrentEvidenceKeys: REPAIR_CURRENT_EVIDENCE_KEYS,
+      staleEvidenceRule:
+        '专用修复入口执行前必须重新读取当前行，并逐项匹配 currentEvidence 与 evidenceFingerprint；任一字段不一致即判定计划过期。',
+    },
+    candidates: rows.map((row) => {
+      const currentEvidence = buildCurrentEvidence(row)
+      return {
+        mismatchReason: row.mismatchReason,
+        preSkuId: row.preSkuId,
+        draftGroupId: row.draftGroupId,
+        draftGroupCode: row.draftGroupCode,
+        sequence: row.sequence,
+        status: row.status,
+        linkedFormalSkuId: row.linkedFormalSkuId,
+        linkedSkuCode: row.linkedSkuCode,
+        linkedSkuDeletedAt: row.linkedSkuDeletedAt,
+        linkedProductId: row.linkedProductId,
+        linkedProductDeletedAt: row.linkedProductDeletedAt,
+        currentEvidence,
+        evidenceFingerprint: buildEvidenceFingerprint(currentEvidence),
+        repairPreconditions: [
+          '目标数据库身份必须匹配本计划 databaseIdentity；真实写库前还必须匹配授权备份 SHA。',
+          '执行前重新查询到的 currentEvidence 必须和计划完全一致。',
+          '执行前必须重新确认草稿组、准 SKU、正式 SKU、包装和库位影响。',
+        ],
+        allowedDecisions: getAllowedDecisions(row),
+      }
+    }),
+    globalGuards: [
+      '该计划只读，不执行 UPDATE/INSERT/DELETE。',
+      '不能在通用主数据清洗脚本里处理准 SKU 生命周期错位。',
+      '任何真实修复都必须先备份、写入审计原因，并在专用服务中同时校验草稿组、准 SKU、正式 SKU、包装和库位影响。',
+      '专用修复入口必须拒绝 currentEvidence 或 evidenceFingerprint 已过期的计划。',
+      '修复后必须重跑 db:verify-master-data:readiness。',
+    ],
+  }
+}
+
+function assertNoUnknownRepairPlanTopLevelKeys(plan) {
+  if (!plan || typeof plan !== 'object' || Array.isArray(plan)) {
+    throw new Error('准 SKU 正式化修复计划必须是 JSON 对象。')
+  }
+  const unknownKeys = Object.keys(plan).filter((key) => !REPAIR_PLAN_TOP_LEVEL_KEYS.has(key))
+  if (unknownKeys.length > 0) {
+    throw new Error(`准 SKU 正式化修复计划存在不允许的顶层字段：${unknownKeys.join(', ')}。`)
+  }
+}
+
+function validatePreSkuFormalizationRepairPlanShape(plan) {
+  assertNoUnknownRepairPlanTopLevelKeys(plan)
+  const blockers = []
+  const candidates = Array.isArray(plan.candidates) ? plan.candidates : []
+  const requiredKeys = Array.isArray(plan.evidencePolicy?.requiredCurrentEvidenceKeys)
+    ? plan.evidencePolicy.requiredCurrentEvidenceKeys
+    : []
+
+  if (plan.mode !== 'pre-sku-formalization-repair-plan') blockers.push('mode')
+  if (plan.readOnly !== true) blockers.push('readOnly')
+  if (plan.applySupported !== false) blockers.push('applySupported')
+  if (typeof plan.databaseIdentity !== 'string' || plan.databaseIdentity.length === 0) {
+    blockers.push('databaseIdentity')
+  }
+  if (!Array.isArray(plan.candidates)) blockers.push('candidates')
+  if (plan.candidateCount !== candidates.length) blockers.push('candidateCount')
+  const missingPolicyKeys = REPAIR_CURRENT_EVIDENCE_KEYS.filter((key) => !requiredKeys.includes(key))
+  if (missingPolicyKeys.length > 0) blockers.push('evidencePolicy.requiredCurrentEvidenceKeys')
+
+  const candidateBlockers = []
+  candidates.forEach((candidate, index) => {
+    const currentEvidence = candidate?.currentEvidence
+    const candidateIssues = []
+    if (typeof candidate?.preSkuId !== 'string' || candidate.preSkuId.length === 0) {
+      candidateIssues.push('preSkuId')
+    }
+    if (!currentEvidence || typeof currentEvidence !== 'object' || Array.isArray(currentEvidence)) {
+      candidateIssues.push('currentEvidence')
+    } else {
+      const missingEvidenceKeys = REPAIR_CURRENT_EVIDENCE_KEYS.filter(
+        (key) => !Object.prototype.hasOwnProperty.call(currentEvidence, key),
+      )
+      if (missingEvidenceKeys.length > 0) {
+        candidateIssues.push(`currentEvidence:${missingEvidenceKeys.join(',')}`)
+      }
+      if (candidate.evidenceFingerprint !== buildEvidenceFingerprint(currentEvidence)) {
+        candidateIssues.push('evidenceFingerprint')
+      }
+    }
+    if (!Array.isArray(candidate?.allowedDecisions) || candidate.allowedDecisions.length === 0) {
+      candidateIssues.push('allowedDecisions')
+    }
+    if (candidateIssues.length > 0) {
+      candidateBlockers.push({ index, issues: candidateIssues })
+    }
+  })
+
+  return {
+    mode: 'validate-pre-sku-formalization-repair-plan-shape',
+    valid: blockers.length === 0 && candidateBlockers.length === 0,
+    committed: false,
+    requiresDatabase: false,
+    blockerCount: blockers.length + candidateBlockers.length,
+    blockers,
+    candidateBlockers,
+    candidateCount: candidates.length,
+    requiredCurrentEvidenceKeyCount: requiredKeys.length,
+  }
+}
+
+function validatePreSkuFormalizationRepairPlanFreshness(plan, currentSamples = [], options = {}) {
+  const shape = validatePreSkuFormalizationRepairPlanShape(plan)
+  const blockers = shape.blockers.map((key) => ({ key, source: 'plan-shape' }))
+  shape.candidateBlockers.forEach((candidate) => {
+    blockers.push({
+      key: 'candidate-shape',
+      source: 'plan-shape',
+      candidateIndex: candidate.index,
+      issues: candidate.issues,
+    })
+  })
+
+  const actualDatabaseIdentity = options.databaseIdentity || ''
+  if (actualDatabaseIdentity && actualDatabaseIdentity !== plan.databaseIdentity) {
+    blockers.push({
+      key: 'databaseIdentityMismatch',
+      source: 'database',
+      message: '当前数据库身份与计划 databaseIdentity 不一致，禁止继续使用该计划。',
+    })
+  }
+
+  const currentByPreSkuId = new Map(
+    (Array.isArray(currentSamples) ? currentSamples : [])
+      .filter((row) => typeof row?.preSkuId === 'string' && row.preSkuId.length > 0)
+      .map((row) => [row.preSkuId, row]),
+  )
+  const candidateChecks = (Array.isArray(plan.candidates) ? plan.candidates : []).map(
+    (candidate, index) => {
+      const currentRow = currentByPreSkuId.get(candidate?.preSkuId)
+      if (!currentRow) {
+        return {
+          index,
+          ok: false,
+          reason: 'current-mismatch-not-found',
+          evidenceFingerprintMatched: false,
+        }
+      }
+      const currentEvidence = buildCurrentEvidence(currentRow)
+      const currentFingerprint = buildEvidenceFingerprint(currentEvidence)
+      const evidenceMatched =
+        JSON.stringify(currentEvidence) === JSON.stringify(candidate.currentEvidence)
+      const fingerprintMatched = currentFingerprint === candidate.evidenceFingerprint
+      return {
+        index,
+        ok: evidenceMatched && fingerprintMatched,
+        reason: evidenceMatched && fingerprintMatched ? 'current-evidence-matched' : 'current-evidence-changed',
+        evidenceFingerprintMatched: fingerprintMatched,
+      }
+    },
+  )
+
+  candidateChecks
+    .filter((check) => !check.ok)
+    .forEach((check) => {
+      blockers.push({
+        key: 'staleCurrentEvidence',
+        source: 'database',
+        candidateIndex: check.index,
+        reason: check.reason,
+      })
+    })
+
+  return {
+    mode: 'validate-pre-sku-formalization-repair-plan',
+    valid: blockers.length === 0,
+    committed: false,
+    requiresDatabase: true,
+    databaseIdentityMatched:
+      Boolean(actualDatabaseIdentity) && actualDatabaseIdentity === plan.databaseIdentity,
+    candidateCount: candidateChecks.length,
+    matchedCandidateCount: candidateChecks.filter((check) => check.ok).length,
+    staleCandidateCount: candidateChecks.filter((check) => !check.ok).length,
+    blockerCount: blockers.length,
+    blockers,
+    candidateChecks,
+  }
+}
+
+async function main() {
+  const options = parseArgs()
+  const databaseUrl = loadDatabaseUrl()
+  if (!databaseUrl) {
+    throw new Error('DATABASE_URL 未配置，无法生成或校验准 SKU 正式化修复计划。')
+  }
+
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    const samples = await getPreSkuFormalizationLifecycleMismatchSamples(client)
+    if (options.validatePlan) {
+      const plan = readRepairPlan(options.planPath)
+      const validation = validatePreSkuFormalizationRepairPlanFreshness(plan, samples, {
+        databaseIdentity: databaseIdentityFromUrl(databaseUrl),
+      })
+      const outputFile = writeJsonReport(options.outputPath, validation)
+      console.log(JSON.stringify({ ...validation, outputFile }, null, 2))
+      if (!validation.valid) {
+        process.exitCode = 1
+      }
+      return
+    }
+
+    const plan = buildPreSkuFormalizationRepairPlan(samples, {
+      databaseIdentity: databaseIdentityFromUrl(databaseUrl),
+    })
+    const outputFile = writeJsonReport(options.outputPath, plan)
+    console.log(JSON.stringify({ ...plan, outputFile }, null, 2))
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  parseArgs,
+  assertNoUnknownRepairPlanTopLevelKeys,
+  databaseIdentityFromUrl,
+  loadDatabaseUrl,
+  readRepairPlan,
+  writeJsonReport,
+  getAllowedDecisions,
+  buildCurrentEvidence,
+  buildEvidenceFingerprint,
+  buildPreSkuFormalizationRepairPlan,
+  validatePreSkuFormalizationRepairPlanFreshness,
+  validatePreSkuFormalizationRepairPlanShape,
+  REPAIR_CURRENT_EVIDENCE_KEYS,
+}
diff --git a/furniture-3d-system/scripts/plan-prisma-baseline-repair.js b/furniture-3d-system/scripts/plan-prisma-baseline-repair.js
new file mode 100644
index 00000000..585bf3f3
--- /dev/null
+++ b/furniture-3d-system/scripts/plan-prisma-baseline-repair.js
@@ -0,0 +1,592 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { buildPreflightReport } = require('./preflight-database-foundation-change')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    preflightPath: '',
+    rehearsalPath: '',
+    structureRehearsalPath: '',
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--preflight') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --preflight <json-file>。')
+      }
+      options.preflightPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--preflight=')) {
+      options.preflightPath = arg.slice('--preflight='.length)
+      if (!options.preflightPath) {
+        throw new Error('缺少 --preflight <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--rehearsal') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --rehearsal <json-file>。')
+      }
+      options.rehearsalPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--rehearsal=')) {
+      options.rehearsalPath = arg.slice('--rehearsal='.length)
+      if (!options.rehearsalPath) {
+        throw new Error('缺少 --rehearsal <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--structure-rehearsal') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --structure-rehearsal <json-file>。')
+      }
+      options.structureRehearsalPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--structure-rehearsal=')) {
+      options.structureRehearsalPath = arg.slice('--structure-rehearsal='.length)
+      if (!options.structureRehearsalPath) {
+        throw new Error('缺少 --structure-rehearsal <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function readJsonFile(filePath, rootDir = ROOT_DIR) {
+  if (!filePath) return null
+  const absolutePath = path.resolve(rootDir, filePath)
+  return JSON.parse(fs.readFileSync(absolutePath, 'utf8'))
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function command(name, commandText, purpose, dangerous = false) {
+  return {
+    name,
+    command: commandText,
+    purpose,
+    dangerous,
+  }
+}
+
+function hasBlocker(blockers, key) {
+  return (blockers || []).some((blocker) => blocker.key === key)
+}
+
+function diffStatus(diff) {
+  if (!diff) return 'missing'
+  if (diff.skipped) return 'skipped'
+  if (diff.status === 0) return 'empty'
+  if (diff.status === 2) return 'not-empty'
+  if (diff.ok === false) return 'failed'
+  return 'unknown'
+}
+
+function summarizeStructureRehearsal(structureRehearsal = null) {
+  if (!structureRehearsal) {
+    return {
+      provided: false,
+      status: 'missing',
+      passed: false,
+      repairApplyOk: null,
+      destructiveSqlBlocked: null,
+      repairSqlArtifact: null,
+      currentSchemaDiffAfterStatus: null,
+      migrationDiffAfterStatus: null,
+      baselineResolveCandidate: null,
+      baselineResolveMigrationCount: null,
+      baselineResolveRehearsalOk: null,
+      baselineResolveAppliedCount: null,
+      prismaMigrateStatusAfterResolveStatus: null,
+      requiredMigrationApplyAfterResolveOk: null,
+      requiredMigrationApplyAfterResolveCount: null,
+      readinessAfterRequiredMigrationsHardReady: null,
+      readinessAfterRequiredMigrationsBlockerCount: null,
+      readinessAfterRequiredMigrationsBlockerKeys: [],
+    }
+  }
+
+  return {
+    provided: true,
+    status: structureRehearsal.status || 'unknown',
+    passed: structureRehearsal.status === 'structure-repair-rehearsal-passed',
+    repairApplyOk: structureRehearsal.repairApply?.ok ?? null,
+    destructiveSqlBlocked:
+      structureRehearsal.repairSqlSummary?.hasDestructiveStatements === true,
+    repairSqlArtifact: structureRehearsal.repairSqlArtifact
+      ? {
+          sizeBytes: structureRehearsal.repairSqlArtifact.sizeBytes ?? 0,
+          sha256: structureRehearsal.repairSqlArtifact.sha256 || '',
+        }
+      : null,
+    currentSchemaDiffAfterStatus:
+      structureRehearsal.currentSchemaDiffAfter?.status ?? null,
+    migrationDiffAfterStatus: structureRehearsal.migrationDiffAfter?.status ?? null,
+    baselineResolveCandidate:
+      structureRehearsal.baselineResolvePlan?.candidate ?? null,
+    baselineResolveMigrationCount:
+      structureRehearsal.baselineResolvePlan?.migrationCount ?? null,
+    baselineResolveRehearsalOk:
+      structureRehearsal.baselineResolveRehearsal?.ok ?? null,
+    baselineResolveAppliedCount:
+      structureRehearsal.baselineResolveRehearsal?.appliedCount ?? null,
+    prismaMigrateStatusAfterResolveStatus:
+      structureRehearsal.prismaMigrateStatusAfterResolve?.status ?? null,
+    requiredMigrationApplyAfterResolveOk:
+      structureRehearsal.requiredMigrationApplyAfterResolve?.ok ?? null,
+    requiredMigrationApplyAfterResolveCount:
+      structureRehearsal.requiredMigrationApplyAfterResolve?.appliedMigrationCount ?? null,
+    readinessAfterRequiredMigrationsHardReady:
+      structureRehearsal.readinessAfterRequiredMigrations?.hardReady ?? null,
+    readinessAfterRequiredMigrationsBlockerCount:
+      structureRehearsal.readinessAfterRequiredMigrations?.blockerCount ?? null,
+    readinessAfterRequiredMigrationsBlockerKeys:
+      structureRehearsal.readinessAfterRequiredMigrations?.blockerKeys || [],
+  }
+}
+
+function structureRehearsalProvesMigrationSchemaEquivalence(summary) {
+  return Boolean(
+    summary?.passed &&
+    summary.currentSchemaDiffAfterStatus === 0 &&
+    summary.migrationDiffAfterStatus === 0,
+  )
+}
+
+function buildEvidenceSummary(preflight, rehearsal = null, structureRehearsal = null) {
+  const migrationSchemaDiffStatus = diffStatus(preflight.migrationSchemaDiff)
+  const migrationDiffStatus = diffStatus(preflight.migrationDiff)
+  const rehearsalP3005 = rehearsal?.migrateDeploy?.p3005Detected === true
+  const structureRepairRehearsal = summarizeStructureRehearsal(structureRehearsal)
+  const migrationSchemaDiffProvenByStructureRehearsal =
+    migrationSchemaDiffStatus === 'skipped' &&
+    structureRehearsalProvesMigrationSchemaEquivalence(structureRepairRehearsal)
+  const migrationDiffProvenByStructureRehearsal =
+    migrationDiffStatus === 'skipped' &&
+    structureRehearsalProvesMigrationSchemaEquivalence(structureRepairRehearsal)
+  return {
+    backupUsable: preflight.backupEvidence?.usable === true,
+    backupVerified: preflight.backupVerification
+      ? preflight.backupVerification.ok === true
+      : null,
+    prismaValidateOk: preflight.diagnosisBlockers
+      ? !hasBlocker(preflight.diagnosisBlockers, 'prismaValidate')
+      : true,
+    migrationSchemaDiffStatus,
+    migrationSchemaDiffProvenByStructureRehearsal,
+    migrationDiffStatus,
+    migrationDiffProvenByStructureRehearsal,
+    currentSchemaDiffHasSql: preflight.currentSchemaDiffHasSql === true,
+    pendingMigrationCount: preflight.pendingMigrationCount ?? 0,
+    directMigrateDeployBlockedByP3005: rehearsalP3005,
+    structureRepairRehearsal,
+    migrationHistoryMissing: preflight.diagnosisBlockers
+      ? hasBlocker(preflight.diagnosisBlockers, 'migrationHistory.tableExists')
+      : preflight.recommendedAction?.startsWith('baseline') === true,
+  }
+}
+
+function addEvidenceBlockers(blockers, preflight, evidence) {
+  if (!evidence.backupUsable) {
+    blockers.push({
+      key: 'backupEvidence',
+      message: '缺少可用数据库备份文件，禁止 baseline、结构修复或 migrate deploy。',
+    })
+  } else if (preflight.backupVerification && preflight.backupVerification.ok !== true) {
+    blockers.push({
+      key: 'backupVerification',
+      message: preflight.backupVerification.message || '备份文件未通过可读性核验。',
+    })
+  }
+
+  if (!evidence.prismaValidateOk) {
+    blockers.push({
+      key: 'prismaValidate',
+      message: 'Prisma schema 校验未通过，不能制定结构修复或 baseline 方案。',
+    })
+  }
+
+  if (evidence.migrationSchemaDiffStatus === 'skipped' && !evidence.migrationSchemaDiffProvenByStructureRehearsal) {
+    blockers.push({
+      key: 'migrationSchemaDiff.skipped',
+      message: '缺少 migrations 到 schema.prisma 的 shadow diff 证据。',
+    })
+  } else if (evidence.migrationSchemaDiffStatus === 'not-empty') {
+    blockers.push({
+      key: 'migrationSchemaDiff.notEmpty',
+      message: 'migrations 重放结果和 schema.prisma 不一致，必须先修迁移链。',
+    })
+  } else if (evidence.migrationSchemaDiffStatus === 'failed') {
+    blockers.push({
+      key: 'migrationSchemaDiff.failed',
+      message: 'migrations 到 schema.prisma 的 diff 执行失败，不能证明迁移链可重放。',
+    })
+  }
+
+  const rehearsedBaselineCount =
+    evidence.structureRepairRehearsal.baselineResolveMigrationCount
+  if (
+    evidence.structureRepairRehearsal.passed &&
+    rehearsedBaselineCount != null &&
+    evidence.pendingMigrationCount !== rehearsedBaselineCount
+  ) {
+    blockers.push({
+      key: 'structureRepairRehearsal.baselineCountMismatch',
+      message:
+        `preflight 待处理 migration 数量为 ${evidence.pendingMigrationCount}，` +
+        `结构修复演练 baseline resolve 数量为 ${rehearsedBaselineCount}，` +
+        '证据不是同一迁移状态，禁止生成授权施工图。',
+    })
+  }
+
+  if (
+    evidence.structureRepairRehearsal.passed &&
+    evidence.structureRepairRehearsal.repairSqlArtifact == null
+  ) {
+    blockers.push({
+      key: 'structureRepairRehearsal.repairSqlArtifact',
+      message: '结构修复演练通过但缺少 SQL artifact 摘要，真实施工前不能定位已审计 SQL。',
+    })
+  }
+}
+
+function buildPhasePlan(preflight, evidence, status) {
+  return [
+    {
+      id: 'backup',
+      label: '备份证据',
+      status: evidence.backupUsable && evidence.backupVerified !== false ? 'passed' : 'blocked',
+      message: evidence.backupUsable
+        ? '已提供可用备份证据。'
+        : '真实动库前必须先提供可核验备份。',
+    },
+    {
+      id: 'migration-chain-replay',
+      label: '迁移链可重放',
+      status: evidence.migrationSchemaDiffStatus === 'empty' || evidence.migrationSchemaDiffProvenByStructureRehearsal
+        ? 'passed'
+        : 'blocked',
+      message: evidence.migrationSchemaDiffStatus === 'empty'
+        ? 'migrations 可从空库重放到 schema.prisma。'
+        : evidence.migrationSchemaDiffProvenByStructureRehearsal
+          ? '本机 shadow diff 缺失，但克隆库结构修复演练已证明 migrations/schema/修复后结构等价。'
+        : '迁移链不能证明可重放到当前 schema。',
+    },
+    {
+      id: 'current-db-equivalence',
+      label: '当前库结构等价性',
+      status: evidence.migrationDiffStatus === 'empty' && !evidence.currentSchemaDiffHasSql
+        ? 'passed'
+        : 'blocked',
+      message: evidence.migrationDiffStatus === 'empty' && !evidence.currentSchemaDiffHasSql
+        ? '当前库结构和 migrations/schema 已等价。'
+        : '当前库结构仍不等价，不能直接 baseline resolve。',
+    },
+    {
+      id: 'structure-repair-rehearsal',
+      label: '克隆库结构修复演练',
+      status: evidence.structureRepairRehearsal.passed
+        ? 'passed'
+        : evidence.currentSchemaDiffHasSql || evidence.migrationDiffStatus === 'not-empty'
+          ? 'blocked'
+          : 'not-required',
+      message: evidence.structureRepairRehearsal.passed
+        ? '克隆库已证明非破坏性结构修复、baseline resolve 和治理护栏路径可重复。'
+        : evidence.currentSchemaDiffHasSql || evidence.migrationDiffStatus === 'not-empty'
+          ? '结构不等价时必须先取得克隆库结构修复演练证据。'
+          : '当前库结构已等价，不需要结构修复演练。',
+    },
+    {
+      id: 'operator-runbook',
+      label: '人工施工口径',
+      status: status.startsWith('ready-for-') ? 'ready' : 'blocked',
+      message: status.startsWith('ready-for-')
+        ? '已形成可执行下一步。'
+        : '仍需先处理阻断项，再允许真实写库。',
+    },
+  ]
+}
+
+function buildRunbook(preflight, evidence, status) {
+  if (status === 'ready-for-migrate-deploy') {
+    return {
+      summary: '当前可进入标准 Prisma migrate deploy 流程，但仍必须在真实执行前重新跑 preflight。',
+      commands: [
+        command(
+          'preflight',
+          'npm run db:preflight-database-foundation-change',
+          '真实迁移前重新验证备份、迁移状态和结构差异。',
+        ),
+        command(
+          'migrate-deploy',
+          'npm run db:foundation:migrate -- --apply --confirm=migrate-deploy --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+          '按已审计迁移链正式补齐结构。',
+          true,
+        ),
+        command(
+          'readiness',
+          'npm run db:verify-master-data:readiness',
+          '迁移后重新验证数据地基总就绪度。',
+        ),
+      ],
+    }
+  }
+
+  if (status === 'ready-for-baseline-resolve') {
+    return {
+      summary: '当前是 baseline resolve 候选：结构等价但迁移历史缺失。必须逐项确认后只补迁移历史。',
+      commands: [
+        command(
+          'resolve-one-migration',
+          'npm run db:foundation:baseline-resolve -- --apply --confirm=apply-prisma-baseline-resolve --preflight <fresh-preflight.json> --migration-id <migration_id> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+          '通过授权包装脚本逐项标记已应用；脚本会校验 preflight、目标库身份、备份 SHA-256 和单个 migration id。',
+          true,
+        ),
+        command(
+          'readiness',
+          'npm run db:verify-master-data:readiness',
+          'baseline 后重新验证迁移历史、结构和质量债。',
+        ),
+      ],
+      pendingMigrationSample: preflight.pendingMigrationSample || [],
+    }
+  }
+
+  if (status === 'ready-for-authorized-structure-repair') {
+    return {
+      summary: '当前只说明结构修复路径已在克隆库演练通过；真实库仍必须重新备份、重新预检并取得明确授权后，按阶段施工。',
+      commands: [
+        command(
+          'fresh-backup',
+          'node scripts/create-postgres-backup.js --output .database-backups/<fresh-backup>.dump',
+          '真实施工前重新生成当前数据库备份，并校验 pg_restore 可读。',
+        ),
+        command(
+          'fresh-preflight',
+          'npm run db:preflight-database-foundation-change -- --output .master-data-audits/preflight-before-apply.json',
+          '用最新备份和当前库重新确认仍是 baseline + structure repair 路径。',
+        ),
+        command(
+          'apply-reviewed-structure-repair-sql',
+          'node scripts/apply-prisma-structure-repair.js --phase=apply-structure --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <fresh-preflight.json> --structure-rehearsal <structure-repair-rehearsal.json> --repair-sql <reviewed-structure-repair.sql>',
+          '用授权施工脚本核对目标库身份、备份 SHA-256、SQL artifact、SQL sha256、无 DROP 类语句和影响面后，写入真实库结构。',
+          true,
+        ),
+        command(
+          'verify-structure-equivalence',
+          'prisma migrate diff --from-config-datasource --to-schema prisma/schema.prisma --script --exit-code && prisma migrate diff --from-migrations prisma/migrations --to-config-datasource --script --exit-code',
+          '结构修复后必须证明当前库到 schema、migrations 到当前库都为空 diff。',
+        ),
+        command(
+          'baseline-resolve-one-by-one',
+          'node scripts/apply-prisma-structure-repair.js --phase=resolve-baseline --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <post-repair-preflight.json> --structure-rehearsal <structure-repair-rehearsal.json> --repair-sql <reviewed-structure-repair.sql>',
+          '结构等价后由授权施工脚本按演练清单逐项补迁移历史；目标库、备份和数量必须和演练报告一致。',
+          true,
+        ),
+        command(
+          'apply-foundation-guards',
+          'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+          'baseline 后应用治理迁移、视图和数据库护栏。',
+          true,
+        ),
+        command(
+          'readiness-and-cleanup',
+          'npm run db:verify-master-data:readiness && node scripts/apply-master-data-cleanup-plan.js --template',
+          '确认剩余只剩业务质量债，并输出清洗模板给业务确认。',
+        ),
+      ],
+      repairSqlArtifact: evidence.structureRepairRehearsal.repairSqlArtifact,
+      baselineResolveMigrationCount:
+        evidence.structureRepairRehearsal.baselineResolveMigrationCount,
+      readinessAfterRequiredMigrationsBlockerKeys:
+        evidence.structureRepairRehearsal.readinessAfterRequiredMigrationsBlockerKeys,
+    }
+  }
+
+  if (status === 'manual-structure-repair-required') {
+    return {
+      summary: '当前不能 baseline，也不能直接 deploy；必须先在克隆库上形成结构修复 SQL 并演练。',
+      commands: [
+        command(
+          'generate-diff-evidence',
+          'npm run db:foundation:audit -- --use-docker-shadow --include-migration-rehearsal',
+          '重新生成 shadow diff 和克隆库演练证据。',
+        ),
+        command(
+          'repair-clone-first',
+          '在克隆库执行结构修复 SQL，再重跑 migrate diff / migrate deploy rehearsal',
+          '先证明修复方案可重复，不直接写真实库。',
+          true,
+        ),
+      ],
+    }
+  }
+
+  return {
+    summary: '当前证据不足或迁移链未闭合，先处理 blockers。',
+    commands: [
+      command(
+        'full-audit',
+        'npm run db:foundation:audit',
+        '重新生成完整只读审计。',
+      ),
+    ],
+  }
+}
+
+function decideStatus(preflight, evidence, blockers) {
+  if (blockers.length > 0) return 'evidence-blocked'
+  if (preflight.recommendedAction === 'migrate-deploy-required') return 'ready-for-migrate-deploy'
+  if (
+    preflight.recommendedAction === 'baseline-resolve-candidate' &&
+    evidence.migrationDiffStatus === 'empty' &&
+    !evidence.currentSchemaDiffHasSql
+  ) {
+    return 'ready-for-baseline-resolve'
+  }
+  if (
+    preflight.recommendedAction === 'baseline-and-structure-repair-required' ||
+    evidence.migrationDiffStatus === 'not-empty' ||
+    evidence.currentSchemaDiffHasSql
+  ) {
+    if (evidence.structureRepairRehearsal.passed) {
+      return 'ready-for-authorized-structure-repair'
+    }
+    return 'manual-structure-repair-required'
+  }
+  return 'evidence-blocked'
+}
+
+function buildBaselineRepairPlan({
+  preflight,
+  rehearsal = null,
+  structureRehearsal = null,
+  checkedAt = new Date().toISOString(),
+}) {
+  const evidence = buildEvidenceSummary(preflight, rehearsal, structureRehearsal)
+  const blockers = []
+  addEvidenceBlockers(blockers, preflight, evidence)
+
+  if (
+    blockers.length === 0 &&
+    preflight.recommendedAction === 'baseline-and-structure-repair-required' &&
+    evidence.migrationDiffStatus === 'skipped' &&
+    !evidence.migrationDiffProvenByStructureRehearsal
+  ) {
+    blockers.push({
+      key: 'migrationDiff.skipped',
+      message: '缺少 migrations 与当前库的 shadow diff，不能生成结构修复边界。',
+    })
+  }
+
+  const status = decideStatus(preflight, evidence, blockers)
+  if (status === 'manual-structure-repair-required') {
+    blockers.push({
+      key: 'currentDatabase.notEquivalent',
+      message: '当前库和 migrations/schema 结果不等价，必须先做克隆库结构修复演练。',
+    })
+  }
+  const runbook = buildRunbook(preflight, evidence, status)
+
+  return {
+    mode: 'prisma-baseline-and-structure-repair-plan',
+    status,
+    checkedAt,
+    safeForProductionWrite: false,
+    database: preflight.database,
+    recommendedAction: preflight.recommendedAction,
+    evidence,
+    phasePlan: buildPhasePlan(preflight, evidence, status),
+    runbook,
+    forbiddenActions: [
+      {
+        name: 'blind-resolve-all',
+        reason: '不能在结构不等价时批量 prisma migrate resolve --applied。',
+      },
+      {
+        name: 'direct-migrate-deploy-on-baseline-required-db',
+        reason: evidence.directMigrateDeployBlockedByP3005
+          ? '克隆库已经复现 P3005。'
+          : '缺少迁移历史的非空库存在 P3005 风险。',
+      },
+      {
+        name: 'runtime-ddl-hotfix',
+        reason: '底层结构只能通过 migration / 已审计修复 SQL 进入，不允许运行时代码补 DDL。',
+      },
+    ],
+    blockers,
+  }
+}
+
+async function main() {
+  const options = parseArgs()
+  const preflight = readJsonFile(options.preflightPath) || await buildPreflightReport()
+  const rehearsal = readJsonFile(options.rehearsalPath)
+  const structureRehearsal = readJsonFile(options.structureRehearsalPath)
+  const plan = buildBaselineRepairPlan({ preflight, rehearsal, structureRehearsal })
+  writeJsonReport(options.outputPath, plan)
+  console.log(JSON.stringify(plan, null, 2))
+
+  if (!plan.status.startsWith('ready-for-')) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildBaselineRepairPlan,
+  buildEvidenceSummary,
+  buildPhasePlan,
+  buildRunbook,
+  decideStatus,
+  diffStatus,
+  parseArgs,
+  readJsonFile,
+  structureRehearsalProvesMigrationSchemaEquivalence,
+  summarizeStructureRehearsal,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/preflight-database-foundation-change.js b/furniture-3d-system/scripts/preflight-database-foundation-change.js
new file mode 100644
index 00000000..39571352
--- /dev/null
+++ b/furniture-3d-system/scripts/preflight-database-foundation-change.js
@@ -0,0 +1,596 @@
+const crypto = require('node:crypto')
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const {
+  buildBaselineDiagnosis,
+  describeDatabaseUrl,
+  listMigrationDirectories,
+  loadDatabaseUrl,
+  loadShadowDatabaseUrl,
+  parsePendingPrismaMigrations,
+  getMigrationHistoryStatus,
+  runCurrentSchemaDiff,
+  runMigrationDiffWithShadow,
+  runMigrationSchemaDiffWithShadow,
+  runPrismaCommand,
+} = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function summarizePrismaDiffResult(result) {
+  if (!result) return null
+  return {
+    skipped: Boolean(result.skipped),
+    ok: Boolean(result.ok),
+    status: result.status ?? null,
+    reason: result.reason || '',
+    stdoutPreview: String(result.stdout ?? '').slice(0, 1000),
+    stderrPreview: String(result.stderr ?? '').slice(0, 1000),
+    error: result.error || '',
+  }
+}
+
+function getBackupEvidence(env = process.env, rootDir = ROOT_DIR) {
+  const backupPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
+  if (!backupPath) {
+    return {
+      provided: false,
+      path: '',
+      exists: false,
+      sizeBytes: 0,
+      usable: false,
+      message: '未提供 DATABASE_BACKUP_FILE / DB_BACKUP_FILE。',
+    }
+  }
+
+  const absolutePath = path.resolve(rootDir, backupPath)
+  const exists = fs.existsSync(absolutePath)
+  const sizeBytes = exists ? fs.statSync(absolutePath).size : 0
+  const sha256 = exists && sizeBytes > 0
+    ? crypto.createHash('sha256').update(fs.readFileSync(absolutePath)).digest('hex')
+    : ''
+  return {
+    provided: true,
+    path: absolutePath,
+    exists,
+    sizeBytes,
+    sha256,
+    usable: exists && sizeBytes > 0,
+    message: exists && sizeBytes > 0
+      ? '已找到非空数据库备份文件。'
+      : exists
+        ? '提供了备份文件路径，但文件为空。'
+      : '提供了备份文件路径，但文件不存在。',
+  }
+}
+
+function envNameForPostgresTool(command) {
+  return `${String(command).toUpperCase().replace(/[^A-Z0-9]+/g, '_')}_PATH`
+}
+
+function resolvePostgresTool(command, env = process.env) {
+  const specificPath = env[envNameForPostgresTool(command)] || ''
+  if (specificPath) {
+    return {
+      command,
+      executable: specificPath,
+      configuredBy: envNameForPostgresTool(command),
+    }
+  }
+
+  const binDir = env.POSTGRES_BIN_DIR || env.PG_BIN_DIR || ''
+  if (binDir) {
+    const executableName = process.platform === 'win32' ? `${command}.exe` : command
+    return {
+      command,
+      executable: path.resolve(binDir, executableName),
+      configuredBy: env.POSTGRES_BIN_DIR ? 'POSTGRES_BIN_DIR' : 'PG_BIN_DIR',
+    }
+  }
+
+  return {
+    command,
+    executable: command,
+    configuredBy: 'PATH',
+  }
+}
+
+function postgresToolExecutableName(command) {
+  return process.platform === 'win32' ? `${command}.exe` : command
+}
+
+function splitSearchDirs(value) {
+  return String(value || '')
+    .split(path.delimiter)
+    .map((item) => item.trim())
+    .filter(Boolean)
+}
+
+function defaultPostgresClientSearchRoots(env = process.env) {
+  const roots = [
+    ...splitSearchDirs(env.POSTGRES_CLIENT_SEARCH_DIRS),
+    env.POSTGRES_BIN_DIR,
+    env.PG_BIN_DIR,
+  ]
+
+  if (process.platform === 'win32') {
+    roots.push(
+      env.ProgramFiles ? path.join(env.ProgramFiles, 'PostgreSQL') : '',
+      env['ProgramFiles(x86)'] ? path.join(env['ProgramFiles(x86)'], 'PostgreSQL') : '',
+      env.ProgramW6432 ? path.join(env.ProgramW6432, 'PostgreSQL') : '',
+      'C:\\PostgreSQL',
+    )
+  } else {
+    roots.push('/usr/bin', '/usr/local/bin', '/opt/homebrew/bin', '/opt/PostgreSQL')
+  }
+
+  return Array.from(new Set(roots.filter(Boolean).map((root) => path.resolve(root))))
+}
+
+function listChildDirectories(rootDir) {
+  try {
+    if (!fs.existsSync(rootDir)) return []
+    return fs.readdirSync(rootDir, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory())
+      .map((entry) => path.join(rootDir, entry.name))
+  } catch {
+    return []
+  }
+}
+
+function candidateBinDirsFromRoot(rootDir) {
+  const candidates = [rootDir]
+  if (path.basename(rootDir).toLowerCase() !== 'bin') {
+    candidates.push(path.join(rootDir, 'bin'))
+  }
+  for (const child of listChildDirectories(rootDir)) {
+    candidates.push(child)
+    candidates.push(path.join(child, 'bin'))
+  }
+  return candidates
+}
+
+function findPostgresClientCandidateDirs(env = process.env) {
+  const commands = ['pg_dump', 'pg_restore', 'psql']
+  const candidateDirs = []
+  const seen = new Set()
+
+  for (const rootDir of defaultPostgresClientSearchRoots(env)) {
+    for (const dir of candidateBinDirsFromRoot(rootDir)) {
+      const resolvedDir = path.resolve(dir)
+      if (seen.has(resolvedDir)) continue
+      seen.add(resolvedDir)
+      const foundCommands = commands.filter((command) =>
+        fs.existsSync(path.join(resolvedDir, postgresToolExecutableName(command))),
+      )
+      if (foundCommands.length === 0) continue
+      candidateDirs.push({
+        dir: resolvedDir,
+        foundCommands,
+        complete: foundCommands.length === commands.length,
+      })
+    }
+  }
+
+  return candidateDirs
+}
+
+function checkDockerAvailability(env = process.env) {
+  const dockerVersion = spawnSync('docker', ['--version'], {
+    encoding: 'utf8',
+    env: { ...process.env, ...env },
+    windowsHide: true,
+  })
+  const available = dockerVersion.status === 0
+  const postgresImage = env.POSTGRES_DOCKER_IMAGE || 'postgres:16'
+  let postgresImageAvailable = false
+  let postgresImageInspectStatus = null
+  let postgresImageInspectError = ''
+  if (available) {
+    const inspect = spawnSync('docker', ['image', 'inspect', postgresImage], {
+      encoding: 'utf8',
+      env: { ...process.env, ...env },
+      windowsHide: true,
+    })
+    postgresImageAvailable = inspect.status === 0
+    postgresImageInspectStatus = inspect.status
+    postgresImageInspectError = inspect.error ? String(inspect.error.message ?? inspect.error) : ''
+  }
+
+  return {
+    command: 'docker',
+    available,
+    status: dockerVersion.status,
+    stdout: String(dockerVersion.stdout ?? '').trim(),
+    stderr: String(dockerVersion.stderr ?? '').trim(),
+    error: dockerVersion.error ? String(dockerVersion.error.message ?? dockerVersion.error) : '',
+    postgresImage,
+    postgresImageAvailable,
+    postgresImageInspectStatus,
+    postgresImageInspectError,
+  }
+}
+
+function buildDockerPgRestoreListArgs(backupPath, dockerImage = 'postgres:16') {
+  const absolutePath = path.resolve(backupPath)
+  return {
+    args: [
+      'run',
+      '--rm',
+      '-v',
+      `${path.dirname(absolutePath)}:/backup`,
+      dockerImage,
+      'pg_restore',
+      '--list',
+      `/backup/${path.basename(absolutePath)}`,
+    ],
+    containerBackupPath: `/backup/${path.basename(absolutePath)}`,
+    volumeArg: `${path.dirname(absolutePath)}:/backup`,
+  }
+}
+
+function buildBackupToolingHint(
+  backupTooling,
+  env = process.env,
+  dockerAvailability = checkDockerAvailability(env),
+) {
+  const missingCommands = Object.values(backupTooling)
+    .filter((tool) => !tool.available)
+    .map((tool) => tool.command)
+  const candidateDirs = findPostgresClientCandidateDirs(env)
+  const completeCandidate = candidateDirs.find((candidate) => candidate.complete)
+
+  return {
+    missingCommands,
+    candidateDirs,
+    recommendedEnv: completeCandidate
+      ? {
+          POSTGRES_BIN_DIR: completeCandidate.dir,
+          reason: '该目录同时包含 pg_dump / pg_restore / psql，可直接作为 PostgreSQL client bin 目录。',
+        }
+      : null,
+    docker: dockerAvailability,
+    dockerFallback: missingCommands.length > 0 && dockerAvailability.available
+      ? {
+          postgresImage: dockerAvailability.postgresImage,
+          imageAvailable: dockerAvailability.postgresImageAvailable,
+          reason: dockerAvailability.postgresImageAvailable
+            ? '本机 Docker 可用且已有 PostgreSQL client 镜像，可作为备份工具链兜底。'
+            : '本机 Docker 可用但未发现指定 PostgreSQL client 镜像；如需 Docker 兜底，必须先明确拉取/准备镜像。',
+          note:
+            'Docker 兜底仍必须生成可被 pg_restore --list 验证的备份文件，且不能替代 DATABASE_BACKUP_FILE 证据要求。',
+        }
+      : null,
+    configuredSearchDirs: defaultPostgresClientSearchRoots(env),
+  }
+}
+
+function checkCommandAvailable(command, args = ['--version'], env = process.env) {
+  const resolved = resolvePostgresTool(command, env)
+  const result = spawnSync(resolved.executable, args, {
+    encoding: 'utf8',
+    windowsHide: true,
+  })
+  return {
+    command,
+    executable: resolved.executable,
+    configuredBy: resolved.configuredBy,
+    available: result.status === 0,
+    status: result.status,
+    stdout: String(result.stdout ?? '').trim(),
+    stderr: String(result.stderr ?? '').trim(),
+    error: result.error ? String(result.error.message ?? result.error) : '',
+  }
+}
+
+function checkBackupTooling(env = process.env) {
+  return {
+    pgDump: checkCommandAvailable('pg_dump', ['--version'], env),
+    pgRestore: checkCommandAvailable('pg_restore', ['--version'], env),
+    psql: checkCommandAvailable('psql', ['--version'], env),
+  }
+}
+
+function verifyBackupFile(backupEvidence, backupTooling, env = process.env) {
+  if (!backupEvidence.usable) {
+    return {
+      attempted: false,
+      ok: false,
+      message: '没有可用备份文件，跳过备份格式校验。',
+    }
+  }
+
+  if (!backupTooling.pgRestore.available) {
+    const docker = checkDockerAvailability(env)
+    if (backupEvidence.path && docker.available && docker.postgresImageAvailable) {
+      const dockerPgRestore = buildDockerPgRestoreListArgs(
+        backupEvidence.path,
+        docker.postgresImage,
+      )
+      const result = spawnSync('docker', dockerPgRestore.args, {
+        encoding: 'utf8',
+        env: { ...process.env, ...env },
+        windowsHide: true,
+      })
+      return {
+        attempted: true,
+        ok: result.status === 0,
+        status: result.status,
+        stdoutPreview: String(result.stdout ?? '').slice(0, 500),
+        stderr: String(result.stderr ?? '').trim(),
+        error: result.error ? String(result.error.message ?? result.error) : '',
+        tooling: {
+          executable: 'docker',
+          configuredBy: 'POSTGRES_DOCKER_IMAGE',
+          dockerImage: docker.postgresImage,
+        },
+        message: result.status === 0
+          ? '备份文件可被 Docker pg_restore --list 读取。'
+          : '备份文件无法被 Docker pg_restore --list 读取，不能作为迁移兜底。请确认它是 PostgreSQL custom 格式有效备份。',
+      }
+    }
+    return {
+      attempted: false,
+      ok: false,
+      message: 'pg_restore 不可用，无法验证 PostgreSQL custom 备份是否可读取。',
+      tooling: backupTooling.pgRestore,
+    }
+  }
+
+  const pgRestore = resolvePostgresTool('pg_restore', env)
+  const result = spawnSync(pgRestore.executable, ['--list', backupEvidence.path], {
+    encoding: 'utf8',
+    windowsHide: true,
+  })
+  return {
+    attempted: true,
+    ok: result.status === 0,
+    status: result.status,
+    stdoutPreview: String(result.stdout ?? '').slice(0, 500),
+    stderr: String(result.stderr ?? '').trim(),
+    error: result.error ? String(result.error.message ?? result.error) : '',
+    tooling: {
+      executable: pgRestore.executable,
+      configuredBy: pgRestore.configuredBy,
+    },
+    message: result.status === 0
+      ? '备份文件可被 pg_restore --list 读取。'
+      : '备份文件无法被 pg_restore --list 读取，不能作为迁移兜底。请确认它是 PostgreSQL custom 格式有效备份。',
+  }
+}
+
+function decideFoundationChangeReadiness({
+  diagnosis,
+  backupEvidence,
+  backupTooling = null,
+  backupToolingHint = null,
+  backupVerification = null,
+}) {
+  const blockers = []
+  if (!backupEvidence.usable) {
+    blockers.push({
+      key: 'backupEvidence',
+      message: '数据库结构变更或 baseline 前必须先提供可核验的备份文件路径。',
+    })
+    const directPgDumpAvailable = Boolean(backupTooling?.pgDump?.available)
+    const dockerBackupAvailable = Boolean(
+      backupToolingHint?.docker?.available
+        && backupToolingHint?.dockerFallback?.imageAvailable,
+    )
+    if (backupTooling && !directPgDumpAvailable && !dockerBackupAvailable) {
+      blockers.push({
+        key: 'backupTooling.pgDump',
+        message: '当前环境没有可用 pg_dump，也没有已准备好的 Docker PostgreSQL client 镜像，无法直接生成标准 PostgreSQL 备份。',
+      })
+    }
+  } else if (backupVerification && !backupVerification.ok) {
+    blockers.push({
+      key: backupVerification.tooling?.command === 'pg_restore'
+        ? 'backupTooling.pgRestore'
+        : 'backupVerification',
+      message: backupVerification.message,
+    })
+  }
+
+  if (!diagnosis.prismaValidate.ok) {
+    blockers.push({
+      key: 'prismaValidate',
+      message: 'Prisma schema 校验未通过，不能进入数据库地基变更。',
+    })
+  }
+
+  const baselineRequired = Boolean(diagnosis.baselineRequired)
+  const currentSchemaDiffNotEmpty = Boolean(diagnosis.currentSchemaDiff?.hasSqlDiff)
+  const migrationDiffSkipped = Boolean(diagnosis.migrationDiff?.skipped)
+  const migrationDiffNotEmpty = diagnosis.migrationDiff?.status === 2
+  const migrationSchemaDiffNotEmpty = diagnosis.migrationSchemaDiff?.status === 2
+  const migrationSchemaDiffFailed = Boolean(
+    diagnosis.migrationSchemaDiff
+      && !diagnosis.migrationSchemaDiff.skipped
+      && !diagnosis.migrationSchemaDiff.ok
+      && diagnosis.migrationSchemaDiff.status !== 2,
+  )
+  const pendingMigrationCount = diagnosis.pendingMigrationCount ?? 0
+  let recommendedAction = 'none'
+
+  if (migrationSchemaDiffNotEmpty || migrationSchemaDiffFailed) {
+    blockers.push({
+      key: migrationSchemaDiffNotEmpty ? 'migrationSchemaDiff.notEmpty' : 'migrationSchemaDiff.error',
+      message: migrationSchemaDiffNotEmpty
+        ? 'migrations 重放结果和 schema.prisma 不一致，必须先修迁移链，不能进入 baseline 或 deploy。'
+        : 'migrations 到 schema.prisma 的 diff 执行失败，不能证明迁移链可重放到当前结构。',
+    })
+  }
+
+  if (baselineRequired) {
+    recommendedAction = currentSchemaDiffNotEmpty
+      ? 'baseline-and-structure-repair-required'
+      : 'baseline-resolve-candidate'
+    blockers.push({
+      key: 'migrationHistory.baselineRequired',
+      message: '目标库已有业务结构但缺少 Prisma 迁移历史，直接 migrate deploy 会被 Prisma P3005 拦截；必须先形成 baseline/结构修复方案。',
+    })
+    if (migrationDiffSkipped) {
+      blockers.push({
+        key: 'migrationDiff.skipped',
+        message: '缺少 shadow diff 证据，不能判断哪些 migration 可标记为已应用、哪些需要真实执行。',
+      })
+    } else if (migrationDiffNotEmpty) {
+      blockers.push({
+        key: 'migrationDiff.notEmpty',
+        message: 'migrations 重放结果和当前库结构不一致，不能直接 baseline resolve。',
+      })
+    }
+  } else if (currentSchemaDiffNotEmpty) {
+    recommendedAction = 'migrate-deploy-required'
+  } else if (pendingMigrationCount > 0 && migrationDiffSkipped) {
+    recommendedAction = 'baseline-evidence-required'
+    blockers.push({
+      key: 'migrationDiff.skipped',
+      message: '缺少 shadow diff 证据，不能判断是否可 baseline resolve。',
+    })
+  } else if (pendingMigrationCount > 0 && migrationDiffNotEmpty) {
+    recommendedAction = 'migrate-deploy-required'
+    blockers.push({
+      key: 'migrationDiff.notEmpty',
+      message: 'migrations 重放结果和当前库结构不一致，不能 baseline resolve。',
+    })
+  } else if (pendingMigrationCount > 0) {
+    recommendedAction = 'baseline-resolve-candidate'
+  }
+
+  return {
+    ready: blockers.length === 0,
+    recommendedAction,
+    blockers,
+  }
+}
+
+async function buildPreflightReport(env = process.env) {
+  const databaseUrl = loadDatabaseUrl(ROOT_DIR, env)
+  const shadowDatabaseUrl = loadShadowDatabaseUrl(ROOT_DIR, env)
+  const backupEvidence = getBackupEvidence(env)
+  const backupTooling = checkBackupTooling(env)
+  const backupToolingHint = buildBackupToolingHint(backupTooling, env)
+  const backupVerification = verifyBackupFile(backupEvidence, backupTooling, env)
+  const database = describeDatabaseUrl(databaseUrl)
+  const migrationDirectories = listMigrationDirectories()
+  const prismaValidate = runPrismaCommand(['validate'])
+  const prismaMigrateStatus = runPrismaCommand(['migrate', 'status'])
+  const currentSchemaDiff = runCurrentSchemaDiff()
+  const migrationDiff = runMigrationDiffWithShadow(shadowDatabaseUrl, databaseUrl)
+  const migrationSchemaDiff = runMigrationSchemaDiffWithShadow(shadowDatabaseUrl, databaseUrl)
+  const migrationHistory = await getMigrationHistoryStatus(databaseUrl)
+  const diagnosis = buildBaselineDiagnosis({
+    database,
+    migrationDirectories,
+    prismaValidate,
+    prismaMigrateStatus,
+    currentSchemaDiff,
+    migrationDiff,
+    migrationSchemaDiff,
+    migrationHistory,
+  })
+  const readiness = decideFoundationChangeReadiness({
+    diagnosis,
+    backupEvidence,
+    backupTooling,
+    backupToolingHint,
+    backupVerification,
+  })
+
+  return {
+    mode: 'database-foundation-change-preflight',
+    checkedAt: new Date().toISOString(),
+    ready: readiness.ready,
+    recommendedAction: readiness.recommendedAction,
+    database,
+    backupEvidence,
+    backupTooling,
+    backupToolingHint,
+    backupVerification,
+    pendingMigrationCount: diagnosis.pendingMigrationCount,
+    currentSchemaDiffHasSql: Boolean(diagnosis.currentSchemaDiff?.hasSqlDiff),
+    currentSchemaDiff: summarizePrismaDiffResult(currentSchemaDiff),
+    migrationDiffSkipped: Boolean(diagnosis.migrationDiff?.skipped),
+    migrationDiff: summarizePrismaDiffResult(migrationDiff),
+    migrationSchemaDiff: summarizePrismaDiffResult(migrationSchemaDiff),
+    blockers: readiness.blockers,
+    diagnosisBlockers: diagnosis.blockers,
+    pendingMigrationSample: parsePendingPrismaMigrations(prismaMigrateStatus.stdout).slice(0, 10),
+  }
+}
+
+async function main() {
+  const args = parseArgs()
+  const report = await buildPreflightReport()
+  writeJsonReport(args.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.ready) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildPreflightReport,
+  buildBackupToolingHint,
+  buildDockerPgRestoreListArgs,
+  summarizePrismaDiffResult,
+  checkBackupTooling,
+  checkCommandAvailable,
+  checkDockerAvailability,
+  decideFoundationChangeReadiness,
+  envNameForPostgresTool,
+  findPostgresClientCandidateDirs,
+  getBackupEvidence,
+  parseArgs,
+  postgresToolExecutableName,
+  resolvePostgresTool,
+  verifyBackupFile,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/print-master-data-foundation-checklist.js b/furniture-3d-system/scripts/print-master-data-foundation-checklist.js
new file mode 100644
index 00000000..acb4a52a
--- /dev/null
+++ b/furniture-3d-system/scripts/print-master-data-foundation-checklist.js
@@ -0,0 +1,160 @@
+const fs = require('node:fs')
+const path = require('node:path')
+
+const DEFAULT_MANIFEST = path.join(
+  '.master-data-audits',
+  'foundation-audit-current-goal',
+  'manifest.json',
+)
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    manifestFile: DEFAULT_MANIFEST,
+    outputFile: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--manifest') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --manifest <file>。')
+      }
+      options.manifestFile = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--manifest=')) {
+      options.manifestFile = arg.slice('--manifest='.length)
+      if (!options.manifestFile) {
+        throw new Error('缺少 --manifest <file>。')
+      }
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <file>。')
+      }
+      options.outputFile = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputFile = arg.slice('--output='.length)
+      if (!options.outputFile) {
+        throw new Error('缺少 --output <file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return {
+    manifestFile: path.resolve(options.manifestFile),
+    outputFile: options.outputFile ? path.resolve(options.outputFile) : '',
+  }
+}
+
+function readJsonFile(filePath) {
+  if (!fs.existsSync(filePath)) {
+    throw new Error(`找不到地基审计 manifest：${filePath}`)
+  }
+  return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+}
+
+function formatDisplayPath(filePath, cwd = process.cwd()) {
+  if (!filePath) return ''
+  const relativePath = path.relative(cwd, filePath)
+  if (
+    relativePath &&
+    !relativePath.startsWith('..') &&
+    !path.isAbsolute(relativePath)
+  ) {
+    return relativePath || '.'
+  }
+  return path.basename(filePath)
+}
+
+function buildCompletionChecklistReport(manifest, manifestFile = '') {
+  const checklist = manifest?.foundationCompletionChecklist
+  if (!checklist || typeof checklist !== 'object') {
+    throw new Error('manifest 中缺少 foundationCompletionChecklist，请先运行完整地基审计。')
+  }
+
+  return {
+    mode: 'master-data-foundation-completion-checklist',
+    sourceManifest: manifestFile,
+    checkedAt: manifest.checkedAt || '',
+    hardReady: manifest.hardReady === true,
+    complete: checklist.complete === true,
+    itemCount: Number(checklist.itemCount ?? 0),
+    passedCount: Number(checklist.passedCount ?? 0),
+    blockedCount: Number(checklist.blockedCount ?? 0),
+    missingCount: Number(checklist.missingCount ?? 0),
+    blockedItems: Array.isArray(checklist.items)
+      ? checklist.items
+          .filter((item) => item?.status !== 'passed')
+          .map((item) => ({
+            id: item.id,
+            label: item.label,
+            status: item.status,
+            blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
+            evidence: item.evidence || {},
+          }))
+      : [],
+    items: Array.isArray(checklist.items)
+      ? checklist.items.map((item) => ({
+          id: item.id,
+          label: item.label,
+          status: item.status,
+          passed: item.passed === true,
+          blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
+        }))
+      : [],
+  }
+}
+
+function writeJsonReport(filePath, payload) {
+  if (!filePath) return ''
+  fs.mkdirSync(path.dirname(filePath), { recursive: true })
+  fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return filePath
+}
+
+function run(options = parseArgs()) {
+  const manifest = readJsonFile(options.manifestFile)
+  const report = buildCompletionChecklistReport(
+    manifest,
+    formatDisplayPath(options.manifestFile),
+  )
+  writeJsonReport(options.outputFile, report)
+  return report
+}
+
+function main() {
+  const report = run()
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.complete) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  DEFAULT_MANIFEST,
+  buildCompletionChecklistReport,
+  formatDisplayPath,
+  parseArgs,
+  readJsonFile,
+  run,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js b/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
new file mode 100644
index 00000000..7ef94ec2
--- /dev/null
+++ b/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
@@ -0,0 +1,589 @@
+const fs = require('node:fs')
+const path = require('node:path')
+
+const DEFAULT_MANIFEST = path.join(
+  '.master-data-audits',
+  'foundation-audit-current-goal',
+  'manifest.json',
+)
+
+const DEFAULT_OUTPUT = path.join(
+  '.master-data-audits',
+  'foundation-audit-current-goal',
+  'decision-package.json',
+)
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    manifestFile: DEFAULT_MANIFEST,
+    outputFile: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--manifest') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --manifest <file>。')
+      }
+      options.manifestFile = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--manifest=')) {
+      options.manifestFile = arg.slice('--manifest='.length)
+      if (!options.manifestFile) {
+        throw new Error('缺少 --manifest <file>。')
+      }
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <file>。')
+      }
+      options.outputFile = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputFile = arg.slice('--output='.length)
+      if (!options.outputFile) {
+        throw new Error('缺少 --output <file>。')
+      }
+      continue
+    }
+    if (arg === '--write-default') {
+      options.outputFile = DEFAULT_OUTPUT
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return {
+    manifestFile: path.resolve(options.manifestFile),
+    outputFile: options.outputFile ? path.resolve(options.outputFile) : '',
+  }
+}
+
+function readJsonFile(filePath) {
+  if (!fs.existsSync(filePath)) {
+    throw new Error(`找不到地基审计 manifest：${filePath}`)
+  }
+  return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+}
+
+function readOptionalJsonFile(filePath) {
+  if (!filePath || !fs.existsSync(filePath)) return null
+  return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+}
+
+function formatDisplayPath(filePath, cwd = process.cwd()) {
+  if (!filePath) return ''
+  const relativePath = path.relative(cwd, filePath)
+  if (
+    relativePath &&
+    !relativePath.startsWith('..') &&
+    !path.isAbsolute(relativePath)
+  ) {
+    return relativePath || '.'
+  }
+  return path.basename(filePath)
+}
+
+function asArray(value) {
+  return Array.isArray(value) ? value : []
+}
+
+function findChecklistItem(manifest, id) {
+  return asArray(manifest?.foundationCompletionChecklist?.items).find(
+    (item) => item?.id === id,
+  )
+}
+
+function findNextActionStage(manifest, id) {
+  return asArray(manifest?.readinessSummary?.nextActionStages).find(
+    (stage) => stage?.id === id,
+  )
+}
+
+function getBlockerValues(item) {
+  return item?.evidence?.blockerValues && typeof item.evidence.blockerValues === 'object'
+    ? item.evidence.blockerValues
+    : {}
+}
+
+function summarizeAuthorizedStructurePlan(plan) {
+  if (!plan || typeof plan !== 'object') {
+    return {
+      available: false,
+    }
+  }
+
+  return {
+    available: true,
+    phase: plan.phase || '',
+    dryRun: plan.dryRun === true,
+    readyToApply: plan.readyToApply === true,
+    checkedAt: plan.checkedAt || '',
+    expectedDatabaseIdentity: plan.expectedDatabaseIdentity || '',
+    expectedBackupSha256: plan.expectedBackupSha256 || '',
+    expectedRepairSqlSha256: plan.expectedSha256 || '',
+    repairSqlSha256: plan.repairSqlArtifact?.sha256 || '',
+    repairSqlSizeBytes: plan.repairSqlArtifact?.sizeBytes ?? null,
+    repairSqlHasDestructiveStatements:
+      plan.repairSqlSafety?.hasDestructiveStatements === true,
+    blockerCount: asArray(plan.blockers).length,
+    exactPhaseCommandsAvailable: plan.exactPhaseCommands?.available === true,
+    applyStructureCommandReady: Boolean(plan.exactPhaseCommands?.applyStructure),
+    resolveBaselineTemplateReady: Boolean(plan.exactPhaseCommands?.resolveBaselineTemplate),
+  }
+}
+
+function buildStructureStage(manifest, sidecars = {}) {
+  const checklistItem = findChecklistItem(manifest, 'schema-and-migration-history')
+  const nextAction = findNextActionStage(manifest, 'repair-prisma-structure-and-history')
+  const baseline = manifest?.baselineRepairPlanSummary || {}
+  const structure = manifest?.structureRepairRehearsalSummary || {}
+  const authorized = manifest?.authorizedStructureRepairApplyPlanSummary || {}
+  const authorizedPlan = summarizeAuthorizedStructurePlan(
+    sidecars.authorizedStructureRepairApplyPlan,
+  )
+  const blockerValues = getBlockerValues(checklistItem)
+
+  return {
+    id: 'schema-and-migration-history',
+    label: '数据库结构与 Prisma 迁移历史',
+    status: checklistItem?.status || 'missing',
+    requiresExplicitAuthorization: true,
+    authorizationState: authorized.executionState || 'unknown',
+    recommendedAction:
+      baseline.recommendedAction || nextAction?.id || 'repair-prisma-structure-and-history',
+    blockerValues: {
+      pendingMigrations: blockerValues['prisma-migrate-status:pendingMigrations'] ?? null,
+      hasSchemaDiff: blockerValues['current-schema-diff:hasSqlDiff'] ?? null,
+      migrationHistoryTableExists:
+        blockerValues['migration-status:migrationHistory.tableExists'] ?? null,
+      pendingStructureMigrationCount:
+        blockerValues['migration-status:pendingStructureMigrationCount'] ?? null,
+      pendingIdempotentMigrationCount:
+        blockerValues['migration-status:pendingIdempotentMigrationCount'] ?? null,
+      fullyReady: blockerValues['migration-status:fullyReady'] ?? null,
+    },
+    evidence: {
+      baselinePlanStatus: baseline.status || '',
+      structureRepairRehearsalStatus: structure.status || '',
+      structureRepairSqlSha256: structure.repairSqlArtifact?.sha256 || '',
+      structureRepairSqlSizeBytes: structure.repairSqlArtifact?.sizeBytes ?? null,
+      destructiveSqlBlocked: structure.destructiveSqlBlocked === true,
+      repairSqlHasDestructiveStatements:
+        authorized.repairSqlSafety?.hasDestructiveStatements === true,
+      baselineResolveMigrationCount: structure.baselineResolveMigrationCount ?? null,
+      baselineResolveRehearsalOk: structure.baselineResolveRehearsalOk === true,
+      requiredMigrationApplyAfterResolveOk:
+        structure.requiredMigrationApplyAfterResolveOk === true,
+      expectedDatabaseIdentityInManifestSummary: Boolean(
+        authorized.expectedDatabaseIdentity,
+      ),
+      expectedBackupSha256InManifestSummary: Boolean(authorized.expectedBackupSha256),
+      exactPhaseCommandsAvailable:
+        authorized.exactPhaseCommandAvailability?.available === true,
+      authorizedPlan,
+    },
+    requiredEvidence: [
+      '新鲜 PostgreSQL custom 格式备份及 SHA-256',
+      '新鲜 preflight 报告',
+      '结构修复克隆库演练报告',
+      '结构修复 SQL 文件及 SHA-256',
+      '目标数据库身份',
+      '用户明确授权真实写库',
+    ],
+    commands: asArray(nextAction?.commands),
+    forbiddenActions: [
+      '没有新鲜备份和 preflight 时执行真实写库',
+      '在当前库直接重试 prisma migrate deploy',
+      '结构 diff 未归零时执行 baseline resolve',
+      '手工复制 psql 或 migrate resolve 命令绕过授权脚本',
+    ],
+  }
+}
+
+function buildGovernanceMigrationStage(manifest) {
+  const nextAction = findNextActionStage(manifest, 'apply-governance-migrations')
+  const required = manifest?.foundationRequiredMigrationApplyPlanSummary || {}
+
+  return {
+    id: 'apply-governance-migrations',
+    label: '治理迁移、外部只读视图与数据库护栏落库',
+    status: required.readyToApply === true ? 'ready-to-apply' : 'blocked',
+    mustRunAfter: 'schema-and-migration-history',
+    blockerKeys: asArray(required.blockerKeys),
+    evidence: {
+      readyToApply: required.readyToApply === true,
+      pendingMigrationCount: required.pendingMigrationCount ?? null,
+      pendingStructureMigrationCount: required.pendingStructureMigrationCount ?? null,
+      pendingIdempotentMigrationCount: required.pendingIdempotentMigrationCount ?? null,
+      migrationHistoryReady: required.migrationHistoryReady === true,
+    },
+    commands: asArray(nextAction?.commands),
+    forbiddenActions: [
+      '把治理护栏迁移当成 Prisma 结构修复替代品',
+      '迁移历史未 ready 时执行 apply-required --apply',
+      '用 dry-run 结果冒充真实落库',
+    ],
+  }
+}
+
+function buildHistoricalCleanupStage(manifest) {
+  const checklistItem = findChecklistItem(manifest, 'historical-master-data-quality')
+  const nextAction = findNextActionStage(manifest, 'clean-historical-master-data-fields')
+  const cleanup = manifest?.cleanupTemplateSummary || {}
+  const blockerValues = getBlockerValues(checklistItem)
+
+  return {
+    id: 'historical-master-data-quality',
+    label: '历史主数据字段清洗',
+    status: checklistItem?.status || 'missing',
+    mustRunAfter: 'apply-governance-migrations',
+    requiresBusinessConfirmation: cleanup.requiresBusinessConfirmation !== false,
+    blockerValues: {
+      incompleteSkuItems:
+        blockerValues['foundation-dry-run:structuredSkuItems.incomplete'] ?? null,
+      productProfilesMissingProductCategory:
+        blockerValues['foundation-dry-run:nonIntegratedProductProfiles.missing_product_category'] ??
+        null,
+      productProfilesMissingDevelopmentKind:
+        blockerValues[
+          'foundation-dry-run:nonIntegratedProductProfiles.missing_development_kind'
+        ] ?? null,
+    },
+    evidence: {
+      skuItemCount: cleanup.skuItemCount ?? null,
+      productProfileCount: cleanup.productProfileCount ?? null,
+      blankMissingFillFieldCount: cleanup.blankMissingFillFieldCount ?? null,
+      skuBlankFillFieldCounts: cleanup.skuBlankFillFieldCounts || {},
+      productProfileBlankFillFieldCounts:
+        cleanup.productProfileBlankFillFieldCounts || {},
+    },
+    requiredBusinessDecisions: [
+      '补齐 skuCode/specName/model 的真实业务值',
+      '补齐 productCategory/productDevelopmentKind 的真实业务值',
+      '确认不能使用 UNKNOWN/待补齐/默认值 等伪资料',
+      '确认是否存在允许暂不完整的业务原因；该原因只可审计，不可放行 hardReady',
+    ],
+    commands: asArray(nextAction?.commands),
+    forbiddenActions: [
+      '自动编造历史 SKU 编码、规格名称或型号',
+      '用占位值让巡检变绿',
+      '治理迁移未 fullyReady 时执行清洗 apply',
+    ],
+  }
+}
+
+function buildPreSkuLifecycleStage(manifest) {
+  const checklistItem = findChecklistItem(manifest, 'pre-sku-formalization-lifecycle')
+  const nextAction = findNextActionStage(manifest, 'resolve-pre-sku-formalization-lifecycle')
+  const preSku = manifest?.preSkuFormalizationRepairPlanSummary || {}
+
+  return {
+    id: 'pre-sku-formalization-lifecycle',
+    label: 'PreSku 正式化生命周期一致性',
+    status: checklistItem?.status || 'missing',
+    requiresBusinessDecision: true,
+    candidateCount: preSku.candidateCount ?? null,
+    reasonCounts: preSku.reasonCounts || {},
+    allowedDecisions: [
+      'revert-pre-sku-status',
+      'link-existing-product-sku',
+      'archive-invalid-pre-sku',
+    ],
+    evidence: {
+      validationValid: checklistItem?.evidence?.validationValid === true,
+      staleCandidateCount: checklistItem?.evidence?.staleCandidateCount ?? null,
+      candidateEvidenceFingerprintCount:
+        preSku.candidateEvidenceFingerprintCount ?? null,
+      requiredCurrentEvidenceKeyCount: preSku.requiredCurrentEvidenceKeyCount ?? null,
+      globalGuardCount: preSku.globalGuardCount ?? null,
+    },
+    commands: asArray(nextAction?.commands),
+    forbiddenActions: [
+      '用通用主数据清洗脚本处理 PreSku 生命周期错位',
+      '跳过 currentEvidence/evidenceFingerprint 校验',
+      '没有业务确认就决定回退、补链或归档',
+    ],
+  }
+}
+
+function buildFinalVerificationStage() {
+  return {
+    id: 'final-verification',
+    label: '最终 hardReady 验证',
+    status: 'required-after-all-stages',
+    commands: [
+      'npm run db:verify-master-data:audit',
+      'npm run db:foundation:audit:full',
+      'npm run db:foundation:completion-checklist',
+      'npm run type-check',
+      'npm test -- --runInBand tests/scripts --silent',
+    ],
+    successCriteria: [
+      'completion-checklist 8/8 passed',
+      'hardReady = true',
+      'complete = true',
+      'blockedCount = 0',
+      'missingCount = 0',
+    ],
+  }
+}
+
+function buildExecutionChecklist() {
+  return [
+    {
+      id: 'refresh-evidence-before-apply',
+      label: '授权前刷新证据',
+      writeDatabase: false,
+      prerequisites: [
+        '确认 DATABASE_URL 指向目标库',
+        '生成新鲜 PostgreSQL custom dump 并通过 pg_restore --list 校验',
+        '重新运行 preflight',
+        '重新运行结构修复克隆库演练',
+        '重新生成授权结构修复计划',
+        '重新运行 apply-structure dry-run final check',
+      ],
+      commands: [
+        'npm run db:backup:postgres -- --use-docker',
+        'npm run db:preflight-database-foundation-change:audit',
+        'npm run db:foundation:rehearse-structure-repair -- --backup <fresh-dump> --output <fresh-structure-rehearsal.json> --repair-sql-output <fresh-structure-repair.sql>',
+        'npm run db:foundation:apply-structure-repair:audit',
+        'npm run db:foundation:apply-structure-repair -- --phase=apply-structure --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <fresh-preflight.json> --structure-rehearsal <fresh-structure-rehearsal.json> --repair-sql <fresh-structure-repair.sql>',
+      ],
+      successCriteria: [
+        '备份 SHA、SQL SHA、数据库身份三者和授权计划一致',
+        '结构修复 SQL 无 DROP/TRUNCATE 类语句',
+        'dry-run final check blockers 为空',
+      ],
+    },
+    {
+      id: 'apply-structure',
+      label: '真实执行结构修复 SQL',
+      writeDatabase: true,
+      requiresExplicitUserAuthorization: true,
+      prerequisites: [
+        'refresh-evidence-before-apply 已通过',
+        '用户明确授权真实写库',
+      ],
+      commands: [
+        'npm run db:foundation:apply-structure-repair -- --phase=apply-structure --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <fresh-preflight.json> --structure-rehearsal <fresh-structure-rehearsal.json> --repair-sql <fresh-structure-repair.sql>',
+      ],
+      successCriteria: [
+        'applied.ok = true',
+        'verificationAfterApply.structureAligned = true',
+        '真实库到 schema.prisma diff 为空',
+        'migrations 重放结果到真实库 diff 为空',
+      ],
+      forbiddenNextStepsUntilPassed: [
+        'resolve-baseline',
+        'apply-required',
+        '历史清洗',
+      ],
+    },
+    {
+      id: 'post-repair-preflight',
+      label: '结构修复后重新预检',
+      writeDatabase: false,
+      prerequisites: [
+        'apply-structure 已成功',
+      ],
+      commands: [
+        'npm run db:preflight-database-foundation-change:audit',
+      ],
+      successCriteria: [
+        '当前库结构 diff 为空',
+        'migrationDiff 为空',
+        'post-repair preflight 可作为 resolve-baseline 输入',
+      ],
+    },
+    {
+      id: 'resolve-baseline',
+      label: '逐项补齐 Prisma 迁移历史',
+      writeDatabase: true,
+      requiresExplicitUserAuthorization: true,
+      prerequisites: [
+        'post-repair-preflight 已证明结构 diff 归零',
+        '结构修复演练中的 migration manifest 和当前迁移目录一致',
+      ],
+      commands: [
+        'npm run db:foundation:apply-structure-repair -- --phase=resolve-baseline --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256> --preflight <post-repair-preflight.json> --structure-rehearsal <fresh-structure-rehearsal.json> --repair-sql <fresh-structure-repair.sql>',
+      ],
+      successCriteria: [
+        'baselineResolve.ok = true',
+        'Prisma migrate status 为 up to date',
+        '_prisma_migrations 历史存在且无失败/回滚记录',
+      ],
+      forbiddenNextStepsUntilPassed: [
+        'apply-required',
+        '历史清洗',
+      ],
+    },
+    {
+      id: 'apply-required-governance-migrations',
+      label: '应用治理迁移、外部视图和数据库护栏',
+      writeDatabase: true,
+      requiresExplicitUserAuthorization: true,
+      prerequisites: [
+        'resolve-baseline 已成功',
+        '只读迁移状态不再有 Prisma 历史阻断',
+      ],
+      commands: [
+        'npm run db:foundation:apply-required:audit',
+        'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      successCriteria: [
+        'migrationApplicationStatus.fullyReady = true',
+        'pendingStructureMigrationCount = 0',
+        'pendingIdempotentMigrationCount = 0',
+      ],
+    },
+    {
+      id: 'clean-historical-quality-debt',
+      label: '业务确认后清洗历史主数据质量债',
+      writeDatabase: true,
+      requiresBusinessConfirmation: true,
+      requiresExplicitUserAuthorization: true,
+      prerequisites: [
+        'apply-required-governance-migrations 已达到 fullyReady',
+        '业务已确认真实 skuCode/specName/model/productCategory/productDevelopmentKind',
+        'PreSku 生命周期修复决策已确认',
+      ],
+      commands: [
+        'npm run db:cleanup-master-data:validate -- --plan <confirmed-cleanup-plan.json>',
+        'npm run db:cleanup-master-data -- --plan <confirmed-cleanup-plan.json>',
+        'npm run db:cleanup-master-data -- --apply --plan <confirmed-cleanup-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        'npm run db:foundation:apply-pre-sku-formalization-repair -- --apply --confirm=I_UNDERSTAND_THIS_UPDATES_PRE_SKU_LIFECYCLE --plan <confirmed-pre-sku-lifecycle-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      successCriteria: [
+        'structuredSkuItems.incomplete = 0',
+        'nonIntegratedProductProfiles.missing_product_category = 0',
+        'nonIntegratedProductProfiles.missing_development_kind = 0',
+        'preSkuFormalizationLifecycleMismatchCount = 0',
+      ],
+    },
+    {
+      id: 'final-hard-ready-audit',
+      label: '最终 hardReady 审计',
+      writeDatabase: false,
+      prerequisites: [
+        '所有写库阶段已完成',
+        '历史质量债和 PreSku 生命周期阻断已清零',
+      ],
+      commands: [
+        'npm run db:verify-master-data:audit',
+        'npm run db:foundation:audit:full',
+        'npm run db:foundation:completion-checklist',
+      ],
+      successCriteria: [
+        'hardReady = true',
+        'completion-checklist 8/8 passed',
+        'blockedCount = 0',
+        'missingCount = 0',
+      ],
+    },
+  ]
+}
+
+function buildDecisionPackageReport(manifest, manifestFile = '', sidecars = {}) {
+  const checklist = manifest?.foundationCompletionChecklist
+  if (!checklist || typeof checklist !== 'object') {
+    throw new Error('manifest 中缺少 foundationCompletionChecklist，请先运行完整地基审计。')
+  }
+
+  const stages = [
+    buildStructureStage(manifest, sidecars),
+    buildGovernanceMigrationStage(manifest),
+    buildHistoricalCleanupStage(manifest),
+    buildPreSkuLifecycleStage(manifest),
+    buildFinalVerificationStage(),
+  ]
+
+  const canClaimFoundationHardReady =
+    manifest.hardReady === true && checklist.complete === true
+  const blockedStages = canClaimFoundationHardReady
+    ? []
+    : stages.filter((stage) => stage.status === 'blocked')
+
+  return {
+    mode: 'master-data-foundation-decision-package',
+    sourceManifest: manifestFile,
+    checkedAt: manifest.checkedAt || '',
+    hardReady: manifest.hardReady === true,
+    complete: checklist.complete === true,
+    currentState: {
+      itemCount: Number(checklist.itemCount ?? 0),
+      passedCount: Number(checklist.passedCount ?? 0),
+      blockedCount: Number(checklist.blockedCount ?? 0),
+      missingCount: Number(checklist.missingCount ?? 0),
+    },
+    decisionPackageReady: true,
+    canClaimFoundationHardReady,
+    nextGate: blockedStages[0]?.id || 'final-verification',
+    stages,
+    executionChecklist: buildExecutionChecklist(),
+    globalForbiddenActions: [
+      '把局部绿色命令当成完整地基完成',
+      '把 JSON/快照重新作为主数据真相源',
+      '绕过服务层、迁移清单或授权脚本直接写核心表',
+      '把含敏感样本的 .master-data-audits 文件提交 Git',
+    ],
+  }
+}
+
+function writeJsonReport(filePath, payload) {
+  if (!filePath) return ''
+  fs.mkdirSync(path.dirname(filePath), { recursive: true })
+  fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return filePath
+}
+
+function run(options = parseArgs()) {
+  const manifest = readJsonFile(options.manifestFile)
+  const manifestDir = path.dirname(options.manifestFile)
+  const sidecars = {
+    authorizedStructureRepairApplyPlan: readOptionalJsonFile(
+      path.join(manifestDir, 'authorized-structure-repair-apply-plan.json'),
+    ),
+  }
+  const report = buildDecisionPackageReport(
+    manifest,
+    formatDisplayPath(options.manifestFile),
+    sidecars,
+  )
+  writeJsonReport(options.outputFile, report)
+  return report
+}
+
+function main() {
+  const report = run()
+  console.log(JSON.stringify(report, null, 2))
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  DEFAULT_MANIFEST,
+  DEFAULT_OUTPUT,
+  buildDecisionPackageReport,
+  formatDisplayPath,
+  parseArgs,
+  readJsonFile,
+  readOptionalJsonFile,
+  run,
+  summarizeAuthorizedStructurePlan,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/prisma-db-push-local.js b/furniture-3d-system/scripts/prisma-db-push-local.js
new file mode 100644
index 00000000..fa534ff2
--- /dev/null
+++ b/furniture-3d-system/scripts/prisma-db-push-local.js
@@ -0,0 +1,114 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+
+const LOCAL_ONLY_CONFIRMATION = 'LOCAL_ONLY'
+const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '::1', '[::1]'])
+const PRODUCTION_DATABASE_NAME_PATTERN = /(^|[^a-z0-9])(?:prod|production)(?:$|[^a-z0-9])/i
+
+function readEnvFileValue(key) {
+  const envPath = path.join(process.cwd(), '.env')
+  if (!fs.existsSync(envPath)) return ''
+
+  const content = fs.readFileSync(envPath, 'utf8')
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex <= 0) continue
+    if (trimmed.slice(0, separatorIndex).trim() !== key) continue
+
+    let value = trimmed.slice(separatorIndex + 1).trim()
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1)
+    }
+    return value
+  }
+  return ''
+}
+
+function getDatabaseUrl() {
+  return process.env.DATABASE_URL || readEnvFileValue('DATABASE_URL')
+}
+
+function assertLocalOnlyDbPush(databaseUrl, env = process.env) {
+  if (env.NODE_ENV === 'production' || env.VERCEL_ENV === 'production') {
+    throw new Error('拒绝执行 prisma db push：当前环境标记为 production。生产/准生产必须使用 prisma migrate deploy。')
+  }
+
+  if (!databaseUrl) {
+    throw new Error('拒绝执行 prisma db push：DATABASE_URL 缺失，无法确认目标库是否为本地开发库。')
+  }
+
+  let parsed
+  try {
+    parsed = new URL(databaseUrl)
+  } catch {
+    throw new Error('拒绝执行 prisma db push：DATABASE_URL 格式无效，无法确认目标库是否为本地开发库。')
+  }
+
+  const databaseName = decodeURIComponent(parsed.pathname.replace(/^\//, ''))
+  const isLocalHost = LOCAL_HOSTS.has(parsed.hostname)
+  const looksProductionDatabase = PRODUCTION_DATABASE_NAME_PATTERN.test(databaseName)
+  const explicitLocalConfirmation = env.ALLOW_PRISMA_DB_PUSH === LOCAL_ONLY_CONFIRMATION
+
+  if (!isLocalHost && !explicitLocalConfirmation) {
+    throw new Error(
+      `拒绝执行 prisma db push：数据库主机是 ${parsed.hostname}，不是本机地址。` +
+      `如确认这是本地开发容器，请临时设置 ALLOW_PRISMA_DB_PUSH=${LOCAL_ONLY_CONFIRMATION}。`,
+    )
+  }
+
+  if (looksProductionDatabase && !explicitLocalConfirmation) {
+    throw new Error(
+      `拒绝执行 prisma db push：数据库名 ${databaseName} 看起来像生产库。` +
+      `生产/准生产必须使用 prisma migrate deploy。`,
+    )
+  }
+
+  return {
+    databaseName,
+    host: parsed.hostname,
+    localHost: isLocalHost,
+  }
+}
+
+function main() {
+  const args = process.argv.slice(2)
+  const checkOnly = args.includes('--check-only')
+  const prismaArgs = args.filter((arg) => arg !== '--check-only')
+  const target = assertLocalOnlyDbPush(getDatabaseUrl())
+
+  console.log(
+    `prisma db push 本地保护通过：${target.host}/${target.databaseName || '(default)'}`,
+  )
+  if (checkOnly) return
+
+  const npx = process.platform === 'win32' ? 'npx.cmd' : 'npx'
+  const result = spawnSync(npx, ['prisma', 'db', 'push', ...prismaArgs], {
+    stdio: 'inherit',
+    shell: false,
+  })
+
+  if (result.error) {
+    throw result.error
+  }
+  process.exit(result.status ?? 1)
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  assertLocalOnlyDbPush,
+}
diff --git a/furniture-3d-system/scripts/rehearse-database-foundation-migration.js b/furniture-3d-system/scripts/rehearse-database-foundation-migration.js
new file mode 100644
index 00000000..7ae70e51
--- /dev/null
+++ b/furniture-3d-system/scripts/rehearse-database-foundation-migration.js
@@ -0,0 +1,360 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+const { describeDatabaseUrl } = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+
+function parseArgs(argv = process.argv.slice(2), env = process.env) {
+  const options = {
+    backupPath: env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || '',
+    outputPath: '',
+    dockerImage: env.POSTGRES_DOCKER_IMAGE || 'postgres:16',
+    dockerPort: env.DB_FOUNDATION_REHEARSAL_PORT || '65447',
+    keepContainer: env.DB_FOUNDATION_REHEARSAL_KEEP_CONTAINER === '1',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--backup') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --backup <dump-file>。')
+      }
+      options.backupPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--backup=')) {
+      options.backupPath = arg.slice('--backup='.length)
+      if (!options.backupPath) {
+        throw new Error('缺少 --backup <dump-file>。')
+      }
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--docker-port') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --docker-port <port>。')
+      }
+      options.dockerPort = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-port=')) {
+      options.dockerPort = arg.slice('--docker-port='.length)
+      if (!options.dockerPort) {
+        throw new Error('缺少 --docker-port <port>。')
+      }
+      continue
+    }
+    if (arg === '--keep-container') {
+      options.keepContainer = true
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (!options.backupPath) {
+    throw new Error('必须通过 --backup 或 DATABASE_BACKUP_FILE / DB_BACKUP_FILE 提供 PostgreSQL custom dump。')
+  }
+  if (!/^\d+$/.test(String(options.dockerPort))) {
+    throw new Error(`Docker rehearsal 端口必须是数字：${options.dockerPort}`)
+  }
+
+  return {
+    backupPath: path.resolve(ROOT_DIR, options.backupPath),
+    outputPath: options.outputPath,
+    dockerImage: options.dockerImage,
+    dockerPort: String(options.dockerPort),
+    keepContainer: options.keepContainer,
+  }
+}
+
+function runCommand(command, args, options = {}) {
+  const result = spawnSync(command, args, {
+    cwd: options.cwd || ROOT_DIR,
+    encoding: 'utf8',
+    env: { ...process.env, ...(options.env || {}) },
+    windowsHide: true,
+  })
+  return {
+    command: [command, ...args].join(' '),
+    status: result.status,
+    ok: result.status === 0,
+    stdout: String(result.stdout ?? '').trim(),
+    stderr: String(result.stderr ?? '').trim(),
+    error: result.error ? String(result.error.message ?? result.error) : '',
+  }
+}
+
+function assertOk(result, label) {
+  if (result.status !== 0) {
+    const detail = result.stderr || result.stdout || result.error || '无输出'
+    throw new Error(`${label} 失败：${detail}`)
+  }
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function buildRehearsalReport({
+  options,
+  containerName,
+  databaseUrl,
+  restore,
+  migrateDeploy,
+  cleanupStatus,
+  checkedAt = new Date().toISOString(),
+}) {
+  const combinedOutput = `${migrateDeploy.stdout}\n${migrateDeploy.stderr}`
+  const p3005Detected = /P3005|database schema is not empty/i.test(combinedOutput)
+  const blockers = []
+
+  if (!restore.ok) {
+    blockers.push({
+      key: 'restore',
+      message: '备份恢复到克隆库失败，不能进行迁移演练。',
+    })
+  }
+  if (!migrateDeploy.ok) {
+    blockers.push({
+      key: p3005Detected ? 'migrateDeploy.P3005' : 'migrateDeploy.failed',
+      message: p3005Detected
+        ? '克隆库复现 Prisma P3005：目标库非空且缺少迁移历史，不能直接 migrate deploy。'
+        : '克隆库 migrate deploy 失败，需要查看 stdout/stderr。',
+    })
+  }
+
+  return {
+    mode: 'database-foundation-migration-rehearsal',
+    status: blockers.length === 0 ? 'deploy-rehearsal-passed' : 'deploy-rehearsal-blocked',
+    checkedAt,
+    safeForProduction: false,
+    database: describeDatabaseUrl(databaseUrl),
+    docker: {
+      image: options.dockerImage,
+      port: options.dockerPort,
+      containerName,
+      cleanupStatus,
+      keptContainer: options.keepContainer,
+    },
+    backupEvidence: {
+      path: options.backupPath,
+      exists: fs.existsSync(options.backupPath),
+      sizeBytes: fs.existsSync(options.backupPath) ? fs.statSync(options.backupPath).size : 0,
+    },
+    restore: {
+      ok: restore.ok,
+      status: restore.status,
+      stdoutPreview: restore.stdout.slice(0, 1000),
+      stderrPreview: restore.stderr.slice(0, 1000),
+      error: restore.error,
+    },
+    migrateDeploy: {
+      ok: migrateDeploy.ok,
+      status: migrateDeploy.status,
+      p3005Detected,
+      stdoutPreview: migrateDeploy.stdout.slice(0, 2000),
+      stderrPreview: migrateDeploy.stderr.slice(0, 2000),
+      error: migrateDeploy.error,
+    },
+    blockers,
+    recommendedNextSteps: p3005Detected
+      ? [
+          '不要对当前目标库直接执行 prisma migrate deploy。',
+          '先完成备份核验和 shadow diff 证据。',
+          '形成 baseline/结构修复方案后，再决定逐项 resolve --applied 或在维护窗口补结构。',
+          '任何真实库写入前都要重新跑 db:preflight-database-foundation-change 和 readiness。',
+        ]
+      : [
+          '如果克隆库演练通过，仍需在真实目标库迁移前重新跑 preflight、备份核验和 strict readiness。',
+        ],
+  }
+}
+
+function waitForPostgres(containerName, env = process.env) {
+  for (let index = 0; index < 40; index += 1) {
+    const ready = runCommand('docker', ['exec', containerName, 'pg_isready', '-U', 'postgres'], { env })
+    if (ready.status === 0) return true
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 500)
+  }
+  return false
+}
+
+function runRehearsal(options = parseArgs(), env = process.env) {
+  if (!fs.existsSync(options.backupPath) || fs.statSync(options.backupPath).size === 0) {
+    throw new Error(`备份文件不存在或为空：${options.backupPath}`)
+  }
+
+  assertOk(runCommand('docker', ['--version'], { env }), '检查 Docker')
+  assertOk(runCommand('docker', ['image', 'inspect', options.dockerImage], { env }), `检查 Docker 镜像 ${options.dockerImage}`)
+
+  const password = `foundation_rehearsal_${process.pid}`
+  const databaseName = 'furniture_3d_rehearsal'
+  const containerName = `f3d-foundation-rehearsal-${Date.now()}-${process.pid}`
+  const databaseUrl = `postgresql://postgres:${password}@localhost:${options.dockerPort}/${databaseName}?schema=public`
+  let cleanupStatus = 'not-started'
+  let restore = {
+    ok: false,
+    status: null,
+    stdout: '',
+    stderr: '',
+    error: '',
+  }
+  let migrateDeploy = {
+    ok: false,
+    status: null,
+    stdout: '',
+    stderr: '',
+    error: '',
+  }
+  let fatalError = null
+
+  try {
+    assertOk(
+      runCommand('docker', [
+        'run',
+        '-d',
+        '--name',
+        containerName,
+        '-e',
+        `POSTGRES_PASSWORD=${password}`,
+        '-p',
+        `${options.dockerPort}:5432`,
+        options.dockerImage,
+      ], { env }),
+      '启动 Docker 克隆 PostgreSQL',
+    )
+
+    if (!waitForPostgres(containerName, env)) {
+      throw new Error('Docker 克隆 PostgreSQL 启动超时。')
+    }
+
+    assertOk(
+      runCommand('docker', [
+        'exec',
+        '-e',
+        `PGPASSWORD=${password}`,
+        containerName,
+        'psql',
+        '-U',
+        'postgres',
+        '-d',
+        'postgres',
+        '-c',
+        `CREATE DATABASE ${databaseName};`,
+      ], { env }),
+      '创建克隆数据库',
+    )
+
+    assertOk(
+      runCommand('docker', [
+        'cp',
+        options.backupPath,
+        `${containerName}:/tmp/foundation-backup.dump`,
+      ], { env }),
+      '复制备份到 Docker 克隆库',
+    )
+
+    restore = runCommand('docker', [
+      'exec',
+      '-e',
+      `PGPASSWORD=${password}`,
+      containerName,
+      'pg_restore',
+      '--no-owner',
+      '--no-privileges',
+      '-U',
+      'postgres',
+      '-d',
+      databaseName,
+      '/tmp/foundation-backup.dump',
+    ], { env })
+
+    if (restore.ok) {
+      migrateDeploy = runCommand(process.execPath, [
+        PRISMA_CLI,
+        'migrate',
+        'deploy',
+      ], {
+        env: {
+          ...env,
+          DATABASE_URL: databaseUrl,
+        },
+      })
+    }
+  } catch (error) {
+    fatalError = error
+  } finally {
+    if (options.keepContainer) {
+      cleanupStatus = 'kept'
+    } else {
+      const cleanup = runCommand('docker', ['rm', '-f', containerName], { env })
+      cleanupStatus = cleanup.status === 0 ? 'removed' : 'remove-failed'
+    }
+  }
+
+  if (fatalError) {
+    throw fatalError
+  }
+
+  return buildRehearsalReport({
+    options,
+    containerName,
+    databaseUrl,
+    restore,
+    migrateDeploy,
+    cleanupStatus,
+  })
+}
+
+function main() {
+  const options = parseArgs()
+  const report = runRehearsal(options)
+  const outputFile = writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify({ ...report, outputFile }, null, 2))
+  if (report.status !== 'deploy-rehearsal-passed') {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  buildRehearsalReport,
+  parseArgs,
+  runCommand,
+  runRehearsal,
+  waitForPostgres,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/rehearse-prisma-structure-repair.js b/furniture-3d-system/scripts/rehearse-prisma-structure-repair.js
new file mode 100644
index 00000000..f9852a17
--- /dev/null
+++ b/furniture-3d-system/scripts/rehearse-prisma-structure-repair.js
@@ -0,0 +1,802 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const crypto = require('node:crypto')
+const { Pool } = require('pg')
+const {
+  describeDatabaseUrl,
+  listMigrationDirectories,
+} = require('./diagnose-prisma-migration-baseline')
+const {
+  applyMissingMigrationFiles,
+  classifyAppliedMigrationPaths,
+} = require('./master-data-required-migrations')
+const { runCommand, waitForPostgres, writeJsonReport } = require('./rehearse-database-foundation-migration')
+const { extractJson } = require('./verify-master-data-readiness')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+
+function parseArgs(argv = process.argv.slice(2), env = process.env) {
+  const options = {
+    backupPath: env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || '',
+    outputPath: '',
+    repairSqlOutputPath: env.DB_FOUNDATION_STRUCTURE_REPAIR_SQL_OUTPUT || '',
+    dockerImage: env.POSTGRES_DOCKER_IMAGE || 'postgres:16',
+    dockerPort: env.DB_FOUNDATION_STRUCTURE_REPAIR_PORT || '65448',
+    keepContainer: env.DB_FOUNDATION_STRUCTURE_REPAIR_KEEP_CONTAINER === '1',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--backup') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --backup <dump-file>。')
+      }
+      options.backupPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--backup=')) {
+      options.backupPath = arg.slice('--backup='.length)
+      if (!options.backupPath) {
+        throw new Error('缺少 --backup <dump-file>。')
+      }
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg === '--repair-sql-output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --repair-sql-output <sql-file>。')
+      }
+      options.repairSqlOutputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--repair-sql-output=')) {
+      options.repairSqlOutputPath = arg.slice('--repair-sql-output='.length)
+      if (!options.repairSqlOutputPath) {
+        throw new Error('缺少 --repair-sql-output <sql-file>。')
+      }
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    if (arg === '--docker-port') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --docker-port <port>。')
+      }
+      options.dockerPort = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-port=')) {
+      options.dockerPort = arg.slice('--docker-port='.length)
+      if (!options.dockerPort) {
+        throw new Error('缺少 --docker-port <port>。')
+      }
+      continue
+    }
+    if (arg === '--keep-container') {
+      options.keepContainer = true
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (!options.backupPath) {
+    throw new Error('必须通过 --backup 或 DATABASE_BACKUP_FILE / DB_BACKUP_FILE 提供 PostgreSQL custom dump。')
+  }
+  if (!/^\d+$/.test(String(options.dockerPort))) {
+    throw new Error(`Docker structure repair 端口必须是数字：${options.dockerPort}`)
+  }
+
+  const repairSqlOutputPath = options.repairSqlOutputPath ||
+    (options.outputPath ? path.join(path.dirname(options.outputPath), 'structure-repair.sql') : '')
+
+  return {
+    backupPath: path.resolve(ROOT_DIR, options.backupPath),
+    outputPath: options.outputPath,
+    repairSqlOutputPath,
+    dockerImage: options.dockerImage,
+    dockerPort: String(options.dockerPort),
+    keepContainer: options.keepContainer,
+  }
+}
+
+function assertOk(result, label) {
+  if (result.status !== 0) {
+    const detail = result.stderr || result.stdout || result.error || '无输出'
+    throw new Error(`${label} 失败：${detail}`)
+  }
+}
+
+function hasSqlDiff(stdout) {
+  return /\b(?:CREATE|ALTER|DROP)\s+(?:TYPE|TABLE|INDEX|CONSTRAINT|COLUMN|SCHEMA|VIEW|TRIGGER)\b/i.test(
+    String(stdout ?? ''),
+  )
+}
+
+function summarizeRepairSql(sql) {
+  const text = String(sql ?? '')
+  const patterns = {
+    createSchema: /\bCREATE\s+SCHEMA\b/gi,
+    createType: /\bCREATE\s+TYPE\b/gi,
+    createTable: /\bCREATE\s+TABLE\b/gi,
+    createIndex: /\bCREATE\s+(?:UNIQUE\s+)?INDEX\b/gi,
+    alterTable: /\bALTER\s+TABLE\b/gi,
+    addColumn: /\bADD\s+COLUMN\b/gi,
+    addConstraint: /\bADD\s+CONSTRAINT\b/gi,
+    dropTable: /\bDROP\s+TABLE\b/gi,
+    dropColumn: /\bDROP\s+COLUMN\b/gi,
+    dropType: /\bDROP\s+TYPE\b/gi,
+    dropSchema: /\bDROP\s+SCHEMA\b/gi,
+  }
+  const counts = Object.fromEntries(
+    Object.entries(patterns).map(([key, pattern]) => [key, (text.match(pattern) || []).length]),
+  )
+  const changedRelations = Array.from(new Set(
+    text
+      .split(/\r?\n/)
+      .map((line) => {
+        const match = line.match(/\b(?:CREATE|ALTER|DROP)\s+TABLE\s+(?:"public"\.)?"?([^"\s(]+)"?/i)
+        return match?.[1] || ''
+      })
+      .filter(Boolean),
+  )).slice(0, 80)
+
+  return {
+    hasSqlDiff: hasSqlDiff(text),
+    statementCounts: counts,
+    hasDestructiveStatements:
+      counts.dropTable > 0 || counts.dropColumn > 0 || counts.dropType > 0 || counts.dropSchema > 0,
+    changedRelations,
+  }
+}
+
+function writeRepairSqlArtifact(outputPath, sql, rootDir = ROOT_DIR) {
+  if (!outputPath || !String(sql || '').trim()) return null
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, sql, 'utf8')
+  const buffer = fs.readFileSync(absolutePath)
+  return {
+    path: absolutePath,
+    sizeBytes: buffer.length,
+    sha256: crypto.createHash('sha256').update(buffer).digest('hex'),
+  }
+}
+
+function buildMigrationManifest(rootDir = ROOT_DIR) {
+  return listMigrationDirectories(rootDir).map((migrationId) => {
+    const relativePath = path.join('prisma', 'migrations', migrationId, 'migration.sql')
+    const absolutePath = path.join(rootDir, relativePath)
+    if (!fs.existsSync(absolutePath)) {
+      return {
+        migrationId,
+        path: relativePath.replace(/\\/g, '/'),
+        exists: false,
+        sizeBytes: 0,
+        sha256: '',
+      }
+    }
+    const buffer = fs.readFileSync(absolutePath)
+    return {
+      migrationId,
+      path: relativePath.replace(/\\/g, '/'),
+      exists: true,
+      sizeBytes: buffer.length,
+      sha256: crypto.createHash('sha256').update(buffer).digest('hex'),
+    }
+  })
+}
+
+function buildBaselineResolvePlan(migrationIds, structureAligned) {
+  if (!structureAligned) {
+    return {
+      candidate: false,
+      migrationCount: 0,
+      migrationIds: [],
+      commandsPreview: [],
+      warning: '结构修复后仍未证明 schema 与 migrations 等价，不能生成 baseline resolve 清单。',
+    }
+  }
+
+  return {
+    candidate: true,
+    migrationCount: migrationIds.length,
+    migrationIds,
+    commandsPreview: migrationIds.slice(0, 12).map((migrationId) =>
+      `node node_modules/prisma/build/index.js migrate resolve --applied ${migrationId}`),
+    warning:
+      '该清单只适用于结构修复已真实执行且重新验证 migrationDiff 为空之后；真实 resolve 必须逐项执行并留痕，不能跳过授权。',
+  }
+}
+
+function summarizeResolveResults(results) {
+  const firstFailed = results.find((result) => !result.ok) || null
+  return {
+    attempted: results.length > 0,
+    attemptedCount: results.length,
+    appliedCount: results.filter((result) => result.ok).length,
+    failedCount: results.filter((result) => !result.ok).length,
+    ok: results.length > 0 && results.every((result) => result.ok),
+    firstFailed: firstFailed
+      ? {
+          migrationId: firstFailed.migrationId,
+          status: firstFailed.status,
+          stdoutPreview: firstFailed.stdout.slice(0, 500),
+          stderrPreview: firstFailed.stderr.slice(0, 500),
+          error: firstFailed.error,
+        }
+      : null,
+  }
+}
+
+function summarizeReadinessAfterResolve(result) {
+  if (!result) return null
+  let data = null
+  let jsonError = ''
+  try {
+    data = extractJson(result.stdout)
+  } catch (error) {
+    jsonError = error instanceof Error ? error.message : String(error)
+  }
+
+  const blockerKeys = Array.isArray(data?.blockers)
+    ? data.blockers.map((blocker) => blocker.key).filter(Boolean)
+    : []
+
+  return {
+    attempted: true,
+    ok: result.ok,
+    status: result.status,
+    jsonParsed: Boolean(data),
+    jsonError,
+    readinessStatus: data?.status || '',
+    hardReady: data?.hardReady === true,
+    blockerCount: data?.blockerCount ?? null,
+    blockerKeys,
+    stdoutPreview: result.stdout.slice(0, 1200),
+    stderrPreview: result.stderr.slice(0, 1000),
+    error: result.error,
+  }
+}
+
+async function applyRequiredMigrationsToClone(databaseUrl) {
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  try {
+    const appliedMigrationPaths = await applyMissingMigrationFiles(client)
+    const migrationReplay = classifyAppliedMigrationPaths(appliedMigrationPaths)
+    return {
+      attempted: true,
+      ok: true,
+      appliedMigrationCount: appliedMigrationPaths.length,
+      pendingStructureMigrationCount: migrationReplay.structureMigrations.length,
+      replayableIdempotentMigrationCount: migrationReplay.idempotentMigrations.length,
+      appliedMigrationPaths,
+    }
+  } catch (error) {
+    return {
+      attempted: true,
+      ok: false,
+      appliedMigrationCount: 0,
+      pendingStructureMigrationCount: null,
+      replayableIdempotentMigrationCount: null,
+      appliedMigrationPaths: [],
+      error: error instanceof Error ? error.message : String(error),
+    }
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+function buildReport({
+  options,
+  containerName,
+  databaseUrl,
+  restore,
+  currentSchemaDiffBefore,
+  repairSqlSummary,
+  repairApply,
+  currentSchemaDiffAfter,
+  migrationDiffAfter,
+  repairSqlArtifact = null,
+  migrationManifest = [],
+  migrationIds = [],
+  baselineResolveResults = [],
+  prismaMigrateStatusAfterResolve = null,
+  readinessAfterResolve = null,
+  requiredMigrationApplyAfterResolve = null,
+  readinessAfterRequiredMigrations = null,
+  cleanupStatus,
+  checkedAt = new Date().toISOString(),
+}) {
+  const blockers = []
+  if (!restore.ok) {
+    blockers.push({ key: 'restore', message: '备份恢复到克隆库失败。' })
+  }
+  if (currentSchemaDiffBefore.status !== 0 && currentSchemaDiffBefore.status !== 2) {
+    blockers.push({ key: 'currentSchemaDiffBefore.failed', message: '无法生成克隆库到 schema 的结构修复 diff。' })
+  }
+  if (repairSqlSummary.hasDestructiveStatements) {
+    blockers.push({
+      key: 'repairSql.destructive',
+      message: '结构修复 SQL 含 DROP 类语句，脚本拒绝自动应用到克隆库。',
+    })
+  }
+  if (repairApply && !repairApply.ok) {
+    blockers.push({ key: 'repairApply.failed', message: '结构修复 SQL 在克隆库执行失败。' })
+  }
+  if (currentSchemaDiffAfter && currentSchemaDiffAfter.status !== 0) {
+    blockers.push({ key: 'currentSchemaDiffAfter.notEmpty', message: '结构修复后克隆库仍未对齐 schema.prisma。' })
+  }
+  if (migrationDiffAfter && migrationDiffAfter.status !== 0) {
+    blockers.push({ key: 'migrationDiffAfter.notEmpty', message: '结构修复后克隆库仍未对齐 migrations 重放结果。' })
+  }
+  const structureAligned = currentSchemaDiffAfter?.status === 0 && migrationDiffAfter?.status === 0
+  const baselineResolveRehearsal = summarizeResolveResults(baselineResolveResults)
+  if (structureAligned && !baselineResolveRehearsal.ok) {
+    blockers.push({
+      key: 'baselineResolveRehearsal.failed',
+      message: '结构修复后逐项 baseline resolve 演练失败，不能把该路径用于真实库。',
+    })
+  }
+  if (
+    structureAligned &&
+    baselineResolveRehearsal.ok &&
+    prismaMigrateStatusAfterResolve &&
+    prismaMigrateStatusAfterResolve.status !== 0
+  ) {
+    blockers.push({
+      key: 'prismaMigrateStatusAfterResolve.failed',
+      message: 'baseline resolve 演练后 Prisma migrate status 仍未通过。',
+    })
+  }
+  const readinessAfterResolveSummary = summarizeReadinessAfterResolve(readinessAfterResolve)
+  if (
+    structureAligned &&
+    baselineResolveRehearsal.ok &&
+    prismaMigrateStatusAfterResolve?.status === 0 &&
+    !readinessAfterResolveSummary?.jsonParsed
+  ) {
+    blockers.push({
+      key: 'readinessAfterResolve.unreadable',
+      message: 'baseline resolve 后 readiness 演练没有输出可解析 JSON，不能证明剩余阻断项性质。',
+    })
+  }
+  if (
+    structureAligned &&
+    baselineResolveRehearsal.ok &&
+    prismaMigrateStatusAfterResolve?.status === 0 &&
+    requiredMigrationApplyAfterResolve &&
+    !requiredMigrationApplyAfterResolve.ok
+  ) {
+    blockers.push({
+      key: 'requiredMigrationApplyAfterResolve.failed',
+      message: 'baseline resolve 后治理迁移清单在克隆库真实应用失败，不能把该路径用于真实库。',
+    })
+  }
+  const readinessAfterRequiredMigrationsSummary =
+    summarizeReadinessAfterResolve(readinessAfterRequiredMigrations)
+  if (
+    structureAligned &&
+    baselineResolveRehearsal.ok &&
+    prismaMigrateStatusAfterResolve?.status === 0 &&
+    requiredMigrationApplyAfterResolve?.ok &&
+    !readinessAfterRequiredMigrationsSummary?.jsonParsed
+  ) {
+    blockers.push({
+      key: 'readinessAfterRequiredMigrations.unreadable',
+      message: '治理迁移真实应用后 readiness 演练没有输出可解析 JSON，不能证明剩余阻断项性质。',
+    })
+  }
+
+  return {
+    mode: 'prisma-structure-repair-rehearsal',
+    status: blockers.length === 0 ? 'structure-repair-rehearsal-passed' : 'structure-repair-rehearsal-blocked',
+    checkedAt,
+    safeForProductionWrite: false,
+    database: describeDatabaseUrl(databaseUrl),
+    docker: {
+      image: options.dockerImage,
+      port: options.dockerPort,
+      containerName,
+      cleanupStatus,
+      keptContainer: options.keepContainer,
+    },
+    backupEvidence: {
+      path: options.backupPath,
+      exists: fs.existsSync(options.backupPath),
+      sizeBytes: fs.existsSync(options.backupPath) ? fs.statSync(options.backupPath).size : 0,
+    },
+    restore: {
+      ok: restore.ok,
+      status: restore.status,
+      stderrPreview: restore.stderr.slice(0, 1000),
+      error: restore.error,
+    },
+    currentSchemaDiffBefore: {
+      ok: currentSchemaDiffBefore.ok,
+      status: currentSchemaDiffBefore.status,
+      hasSqlDiff: hasSqlDiff(currentSchemaDiffBefore.stdout),
+      stdoutPreview: currentSchemaDiffBefore.stdout.slice(0, 2000),
+      stderrPreview: currentSchemaDiffBefore.stderr.slice(0, 1000),
+      error: currentSchemaDiffBefore.error,
+    },
+    repairSqlSummary,
+    repairSqlArtifact,
+    migrationManifest,
+    repairApply: repairApply
+      ? {
+          ok: repairApply.ok,
+          status: repairApply.status,
+          stdoutPreview: repairApply.stdout.slice(0, 1000),
+          stderrPreview: repairApply.stderr.slice(0, 1000),
+          error: repairApply.error,
+        }
+      : null,
+    currentSchemaDiffAfter: currentSchemaDiffAfter
+      ? {
+          ok: currentSchemaDiffAfter.ok,
+          status: currentSchemaDiffAfter.status,
+          hasSqlDiff: hasSqlDiff(currentSchemaDiffAfter.stdout),
+          stdoutPreview: currentSchemaDiffAfter.stdout.slice(0, 1000),
+          stderrPreview: currentSchemaDiffAfter.stderr.slice(0, 1000),
+          error: currentSchemaDiffAfter.error,
+        }
+      : null,
+    migrationDiffAfter: migrationDiffAfter
+      ? {
+          ok: migrationDiffAfter.ok,
+          status: migrationDiffAfter.status,
+          hasSqlDiff: hasSqlDiff(migrationDiffAfter.stdout),
+          stdoutPreview: migrationDiffAfter.stdout.slice(0, 1000),
+          stderrPreview: migrationDiffAfter.stderr.slice(0, 1000),
+          error: migrationDiffAfter.error,
+        }
+      : null,
+    baselineResolvePlan: buildBaselineResolvePlan(migrationIds, structureAligned),
+    baselineResolveRehearsal,
+    prismaMigrateStatusAfterResolve: prismaMigrateStatusAfterResolve
+      ? {
+          ok: prismaMigrateStatusAfterResolve.ok,
+          status: prismaMigrateStatusAfterResolve.status,
+          stdoutPreview: prismaMigrateStatusAfterResolve.stdout.slice(0, 1200),
+          stderrPreview: prismaMigrateStatusAfterResolve.stderr.slice(0, 1000),
+          error: prismaMigrateStatusAfterResolve.error,
+        }
+      : null,
+    readinessAfterResolve: readinessAfterResolveSummary,
+    requiredMigrationApplyAfterResolve,
+    readinessAfterRequiredMigrations: readinessAfterRequiredMigrationsSummary,
+    blockers,
+    recommendedNextSteps: blockers.length === 0
+      ? [
+          '把本报告作为结构修复 SQL 可演练证据，但不要直接写真实库。',
+          '真实库执行前重新生成备份、preflight、baseline-repair-plan，并取得明确授权。',
+          '真实结构修复完成且 migrationDiff 为空后，先补齐治理 raw SQL 护栏，再逐项 baseline resolve 已存在迁移历史。',
+          readinessAfterRequiredMigrationsSummary?.hardReady === false
+            ? '治理护栏应用后仍存在质量债，按 readinessAfterRequiredMigrations.blockerKeys 清洗后再进入 hard-ready。'
+            : '治理护栏应用后 readiness 已进入 hard-ready 演练状态，可作为真实执行前复核目标。',
+        ]
+      : [
+          '先处理 blockers，不要把当前结构修复 SQL 用到真实库。',
+          '如包含 DROP 类语句，必须人工拆分和复核，不能自动套用。',
+        ],
+  }
+}
+
+async function runStructureRepairRehearsal(options = parseArgs(), env = process.env) {
+  if (!fs.existsSync(options.backupPath) || fs.statSync(options.backupPath).size === 0) {
+    throw new Error(`备份文件不存在或为空：${options.backupPath}`)
+  }
+
+  assertOk(runCommand('docker', ['--version'], { env }), '检查 Docker')
+  assertOk(runCommand('docker', ['image', 'inspect', options.dockerImage], { env }), `检查 Docker 镜像 ${options.dockerImage}`)
+
+  const password = `foundation_repair_${process.pid}`
+  const databaseName = 'furniture_3d_structure_repair'
+  const shadowDatabaseName = 'furniture_3d_structure_repair_shadow'
+  const containerName = `f3d-foundation-structure-repair-${Date.now()}-${process.pid}`
+  const databaseUrl = `postgresql://postgres:${password}@localhost:${options.dockerPort}/${databaseName}?schema=public`
+  const shadowDatabaseUrl = `postgresql://postgres:${password}@localhost:${options.dockerPort}/${shadowDatabaseName}?schema=public`
+  let cleanupStatus = 'not-started'
+  let fatalError = null
+  let restore = { ok: false, status: null, stdout: '', stderr: '', error: '' }
+  let currentSchemaDiffBefore = { ok: false, status: null, stdout: '', stderr: '', error: '' }
+  let repairSqlSummary = summarizeRepairSql('')
+  let repairApply = null
+  let currentSchemaDiffAfter = null
+  let migrationDiffAfter = null
+  let repairSqlArtifact = null
+  let baselineResolveResults = []
+  let prismaMigrateStatusAfterResolve = null
+  let readinessAfterResolve = null
+  let requiredMigrationApplyAfterResolve = null
+  let readinessAfterRequiredMigrations = null
+  const migrationIds = listMigrationDirectories()
+  const migrationManifest = buildMigrationManifest()
+
+  try {
+    assertOk(
+      runCommand('docker', [
+        'run',
+        '-d',
+        '--name',
+        containerName,
+        '-e',
+        `POSTGRES_PASSWORD=${password}`,
+        '-p',
+        `${options.dockerPort}:5432`,
+        options.dockerImage,
+      ], { env }),
+      '启动 Docker 结构修复 PostgreSQL',
+    )
+
+    if (!waitForPostgres(containerName, env)) {
+      throw new Error('Docker 结构修复 PostgreSQL 启动超时。')
+    }
+
+    for (const name of [databaseName, shadowDatabaseName]) {
+      assertOk(
+        runCommand('docker', [
+          'exec',
+          '-e',
+          `PGPASSWORD=${password}`,
+          containerName,
+          'psql',
+          '-U',
+          'postgres',
+          '-d',
+          'postgres',
+          '-c',
+          `CREATE DATABASE ${name};`,
+        ], { env }),
+        `创建克隆数据库 ${name}`,
+      )
+    }
+
+    assertOk(
+      runCommand('docker', ['cp', options.backupPath, `${containerName}:/tmp/foundation-backup.dump`], { env }),
+      '复制备份到 Docker 克隆库',
+    )
+
+    restore = runCommand('docker', [
+      'exec',
+      '-e',
+      `PGPASSWORD=${password}`,
+      containerName,
+      'pg_restore',
+      '--no-owner',
+      '--no-privileges',
+      '-U',
+      'postgres',
+      '-d',
+      databaseName,
+      '/tmp/foundation-backup.dump',
+    ], { env })
+
+    if (restore.ok) {
+      currentSchemaDiffBefore = runCommand(process.execPath, [
+        PRISMA_CLI,
+        'migrate',
+        'diff',
+        '--from-config-datasource',
+        '--to-schema',
+        'prisma/schema.prisma',
+        '--script',
+        '--exit-code',
+      ], {
+        env: {
+          ...env,
+          DATABASE_URL: databaseUrl,
+        },
+      })
+      repairSqlSummary = summarizeRepairSql(currentSchemaDiffBefore.stdout)
+      if (repairSqlSummary.hasSqlDiff) {
+        repairSqlArtifact = writeRepairSqlArtifact(
+          options.repairSqlOutputPath,
+          currentSchemaDiffBefore.stdout,
+        )
+      }
+
+      if (currentSchemaDiffBefore.status === 2 && !repairSqlSummary.hasDestructiveStatements) {
+        const tempSql = path.join(os.tmpdir(), `f3d-structure-repair-${Date.now()}-${process.pid}.sql`)
+        fs.writeFileSync(tempSql, currentSchemaDiffBefore.stdout, 'utf8')
+        try {
+          assertOk(
+            runCommand('docker', ['cp', tempSql, `${containerName}:/tmp/structure-repair.sql`], { env }),
+            '复制结构修复 SQL 到 Docker 克隆库',
+          )
+          repairApply = runCommand('docker', [
+            'exec',
+            '-e',
+            `PGPASSWORD=${password}`,
+            containerName,
+            'psql',
+            '-v',
+            'ON_ERROR_STOP=1',
+            '-U',
+            'postgres',
+            '-d',
+            databaseName,
+            '-f',
+            '/tmp/structure-repair.sql',
+          ], { env })
+        } finally {
+          fs.rmSync(tempSql, { force: true })
+        }
+      }
+
+      if (currentSchemaDiffBefore.status === 0 || repairApply?.ok) {
+        currentSchemaDiffAfter = runCommand(process.execPath, [
+          PRISMA_CLI,
+          'migrate',
+          'diff',
+          '--from-config-datasource',
+          '--to-schema',
+          'prisma/schema.prisma',
+          '--script',
+          '--exit-code',
+        ], {
+          env: {
+            ...env,
+            DATABASE_URL: databaseUrl,
+          },
+        })
+        migrationDiffAfter = runCommand(process.execPath, [
+          PRISMA_CLI,
+          'migrate',
+          'diff',
+          '--from-migrations',
+          'prisma/migrations',
+          '--to-config-datasource',
+          '--script',
+          '--exit-code',
+        ], {
+          env: {
+            ...env,
+            DATABASE_URL: databaseUrl,
+            SHADOW_DATABASE_URL: shadowDatabaseUrl,
+          },
+        })
+        if (currentSchemaDiffAfter.status === 0 && migrationDiffAfter.status === 0) {
+          baselineResolveResults = migrationIds.map((migrationId) => ({
+            migrationId,
+            ...runCommand(process.execPath, [
+              PRISMA_CLI,
+              'migrate',
+              'resolve',
+              '--applied',
+              migrationId,
+            ], {
+              env: {
+                ...env,
+                DATABASE_URL: databaseUrl,
+              },
+            }),
+          }))
+          if (baselineResolveResults.every((result) => result.ok)) {
+            prismaMigrateStatusAfterResolve = runCommand(process.execPath, [
+              PRISMA_CLI,
+              'migrate',
+              'status',
+            ], {
+              env: {
+                ...env,
+                DATABASE_URL: databaseUrl,
+              },
+            })
+            if (prismaMigrateStatusAfterResolve.status === 0) {
+              readinessAfterResolve = runCommand(process.execPath, [
+                'scripts/verify-master-data-readiness.js',
+              ], {
+                env: {
+                  ...env,
+                  DATABASE_URL: databaseUrl,
+                  SHADOW_DATABASE_URL: shadowDatabaseUrl,
+                },
+              })
+              requiredMigrationApplyAfterResolve = await applyRequiredMigrationsToClone(databaseUrl)
+              if (requiredMigrationApplyAfterResolve.ok) {
+                readinessAfterRequiredMigrations = runCommand(process.execPath, [
+                  'scripts/verify-master-data-readiness.js',
+                ], {
+                  env: {
+                    ...env,
+                    DATABASE_URL: databaseUrl,
+                    SHADOW_DATABASE_URL: shadowDatabaseUrl,
+                  },
+                })
+              }
+            }
+          }
+        }
+      }
+    }
+  } catch (error) {
+    fatalError = error
+  } finally {
+    if (options.keepContainer) {
+      cleanupStatus = 'kept'
+    } else {
+      const cleanup = runCommand('docker', ['rm', '-f', containerName], { env })
+      cleanupStatus = cleanup.status === 0 ? 'removed' : 'remove-failed'
+    }
+  }
+
+  if (fatalError) {
+    throw fatalError
+  }
+
+  return buildReport({
+    options,
+    containerName,
+    databaseUrl,
+    restore,
+    currentSchemaDiffBefore,
+    repairSqlSummary,
+    repairApply,
+    currentSchemaDiffAfter,
+    migrationDiffAfter,
+    repairSqlArtifact,
+    migrationManifest,
+    migrationIds,
+    baselineResolveResults,
+    prismaMigrateStatusAfterResolve,
+    readinessAfterResolve,
+    requiredMigrationApplyAfterResolve,
+    readinessAfterRequiredMigrations,
+    cleanupStatus,
+  })
+}
+
+async function main() {
+  const options = parseArgs()
+  const report = await runStructureRepairRehearsal(options)
+  const outputFile = writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify({ ...report, outputFile }, null, 2))
+  if (report.status !== 'structure-repair-rehearsal-passed') {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildReport,
+  buildBaselineResolvePlan,
+  buildMigrationManifest,
+  hasSqlDiff,
+  parseArgs,
+  runStructureRepairRehearsal,
+  summarizeResolveResults,
+  summarizeReadinessAfterResolve,
+  summarizeRepairSql,
+  writeRepairSqlArtifact,
+  applyRequiredMigrationsToClone,
+}
diff --git a/furniture-3d-system/scripts/run-database-foundation-migrations.js b/furniture-3d-system/scripts/run-database-foundation-migrations.js
new file mode 100644
index 00000000..f55f8940
--- /dev/null
+++ b/furniture-3d-system/scripts/run-database-foundation-migrations.js
@@ -0,0 +1,240 @@
+const path = require('node:path')
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const { spawnSync } = require('node:child_process')
+const { buildPreflightReport } = require('./preflight-database-foundation-change')
+const { loadDatabaseUrl, getDatabaseIdentity } = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    apply: false,
+    confirm: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--apply') {
+      options.apply = true
+      continue
+    }
+    if (arg.startsWith('--confirm=')) {
+      options.confirm = arg.slice('--confirm='.length)
+      continue
+    }
+    if (arg === '--expected-database-identity') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-database-identity <identity>。')
+      }
+      options.expectedDatabaseIdentity = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-database-identity=')) {
+      options.expectedDatabaseIdentity = arg.slice('--expected-database-identity='.length)
+      continue
+    }
+    if (arg === '--expected-backup-sha256') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --expected-backup-sha256 <sha256>。')
+      }
+      options.expectedBackupSha256 = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--expected-backup-sha256=')) {
+      options.expectedBackupSha256 = arg.slice('--expected-backup-sha256='.length)
+      continue
+    }
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
+  const rawPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
+  if (!rawPath) {
+    return { provided: false, path: '', exists: false, sha256: '' }
+  }
+  const absolutePath = path.resolve(rootDir, rawPath)
+  if (!fs.existsSync(absolutePath)) {
+    return { provided: true, path: absolutePath, exists: false, sha256: '' }
+  }
+  const bytes = fs.readFileSync(absolutePath)
+  return {
+    provided: true,
+    path: absolutePath,
+    exists: true,
+    sizeBytes: bytes.length,
+    sha256: crypto.createHash('sha256').update(bytes).digest('hex'),
+  }
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function buildFoundationMigrationPlan(preflight, options = {}) {
+  const blockers = [...(preflight.blockers ?? [])]
+  const canDeploy = preflight.ready && preflight.recommendedAction === 'migrate-deploy-required'
+  if (preflight.ready && preflight.recommendedAction !== 'migrate-deploy-required') {
+    blockers.push({
+      key: 'recommendedAction',
+      message: `当前建议动作是 ${preflight.recommendedAction}，本脚本只执行 migrate deploy。`,
+    })
+  }
+
+  if (options.apply && options.confirm !== 'migrate-deploy') {
+    blockers.push({
+      key: 'confirm',
+      message: '真实执行必须显式传入 --confirm=migrate-deploy。',
+    })
+  }
+  if (options.apply && !options.expectedDatabaseIdentity) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.missing',
+      message: '真实迁移必须显式传入 --expected-database-identity，避免误连错库。',
+    })
+  } else if (
+    options.apply &&
+    options.actualDatabaseIdentity &&
+    options.expectedDatabaseIdentity !== options.actualDatabaseIdentity
+  ) {
+    blockers.push({
+      key: 'expectedDatabaseIdentity.mismatch',
+      message: '命令行指定的目标库身份和当前 DATABASE_URL 不一致，禁止执行 migrate deploy。',
+    })
+  }
+  if (options.apply && !options.expectedBackupSha256) {
+    blockers.push({
+      key: 'expectedBackupSha256.missing',
+      message: '真实迁移必须显式传入 --expected-backup-sha256，避免在没有确认备份的情况下写库。',
+    })
+  } else if (options.apply && options.backupFingerprint?.sha256) {
+    if (options.expectedBackupSha256 !== options.backupFingerprint.sha256) {
+      blockers.push({
+        key: 'expectedBackupSha256.mismatch',
+        message: '命令行指定的备份 sha256 和当前 DATABASE_BACKUP_FILE 不一致，禁止执行 migrate deploy。',
+      })
+    }
+  }
+  if (options.apply && options.backupFingerprint?.provided !== true) {
+    blockers.push({
+      key: 'backupFingerprint.missing',
+      message: '真实迁移前必须通过 DATABASE_BACKUP_FILE 或 DB_BACKUP_FILE 指定当前数据库备份。',
+    })
+  } else if (options.apply && options.backupFingerprint?.exists !== true) {
+    blockers.push({
+      key: 'backupFingerprint.notFound',
+      message: '命令指定的数据库备份文件不存在，禁止执行 migrate deploy。',
+    })
+  }
+
+  return {
+    mode: 'database-foundation-migration-plan',
+    dryRun: !options.apply,
+    readyToRun: canDeploy && blockers.length === 0,
+    recommendedAction: preflight.recommendedAction,
+    database: preflight.database,
+    backupEvidence: preflight.backupEvidence,
+    pendingMigrationCount: preflight.pendingMigrationCount,
+    currentSchemaDiffHasSql: preflight.currentSchemaDiffHasSql,
+    migrationDiffSkipped: preflight.migrationDiffSkipped,
+    actualDatabaseIdentity: options.actualDatabaseIdentity || '',
+    expectedDatabaseIdentity: options.expectedDatabaseIdentity || '',
+    backupFingerprint: options.backupFingerprint || null,
+    commands: [
+      {
+        name: 'prisma-migrate-deploy',
+        command: 'npm run db:foundation:migrate -- --apply --confirm=migrate-deploy --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        purpose: '把已审计的 Prisma migration 正式应用到目标库。',
+        dangerous: true,
+      },
+      {
+        name: 'master-data-readiness',
+        command: 'npm run db:verify-master-data:readiness',
+        purpose: '迁移后重新跑总就绪度门禁，确认结构、迁移历史和数据质量状态。',
+      },
+    ],
+    blockers,
+  }
+}
+
+function runPrismaMigrateDeploy() {
+  return spawnSync(process.execPath, [PRISMA_CLI, 'migrate', 'deploy'], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    stdio: 'inherit',
+    windowsHide: true,
+  })
+}
+
+async function main() {
+  const options = parseArgs()
+  const databaseUrl = loadDatabaseUrl(ROOT_DIR)
+  const actualDatabaseIdentity = getDatabaseIdentity(databaseUrl)
+  const backupFingerprint = getBackupFingerprint()
+  const preflight = await buildPreflightReport()
+  const plan = buildFoundationMigrationPlan(preflight, {
+    ...options,
+    actualDatabaseIdentity,
+    backupFingerprint,
+  })
+  writeJsonReport(options.outputPath, plan)
+  console.log(JSON.stringify(plan, null, 2))
+
+  if (!plan.readyToRun) {
+    process.exit(1)
+  }
+
+  if (!options.apply) {
+    return
+  }
+
+  const deploy = runPrismaMigrateDeploy()
+  if (deploy.status !== 0) {
+    process.exit(deploy.status || 1)
+  }
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  buildFoundationMigrationPlan,
+  getBackupFingerprint,
+  parseArgs,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/run-master-data-foundation-audit.js b/furniture-3d-system/scripts/run-master-data-foundation-audit.js
new file mode 100644
index 00000000..adb38ca7
--- /dev/null
+++ b/furniture-3d-system/scripts/run-master-data-foundation-audit.js
@@ -0,0 +1,1639 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { spawnSync } = require('node:child_process')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+
+function timestampForDirectory(date = new Date()) {
+  return date.toISOString().replace(/[-:]/g, '').replace(/\.\d{3}Z$/, 'Z')
+}
+
+function defaultOutputDir(now = new Date()) {
+  return path.join('.master-data-audits', `foundation-audit-${timestampForDirectory(now)}`)
+}
+
+function parseArgs(argv = process.argv.slice(2), env = process.env) {
+  const options = {
+    includeCleanupTemplate: env.MASTER_DATA_AUDIT_INCLUDE_CLEANUP_TEMPLATE === '1',
+    includeMigrationRehearsal: env.MASTER_DATA_AUDIT_INCLUDE_MIGRATION_REHEARSAL === '1',
+    includeStructureRepairRehearsal:
+      env.MASTER_DATA_AUDIT_INCLUDE_STRUCTURE_REPAIR_REHEARSAL === '1',
+    outputDir: env.MASTER_DATA_AUDIT_DIR || defaultOutputDir(),
+    useDockerShadow: env.MASTER_DATA_AUDIT_USE_DOCKER_SHADOW === '1',
+    dockerShadowPort: env.MASTER_DATA_AUDIT_DOCKER_SHADOW_PORT || '65436',
+    dockerRehearsalPort: env.MASTER_DATA_AUDIT_DOCKER_REHEARSAL_PORT || '65447',
+    dockerStructureRepairPort:
+      env.MASTER_DATA_AUDIT_DOCKER_STRUCTURE_REPAIR_PORT || '65448',
+    dockerShadowImage: env.POSTGRES_DOCKER_IMAGE || 'postgres:16',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output-dir') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output-dir <directory>。')
+      }
+      options.outputDir = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output-dir=')) {
+      options.outputDir = arg.slice('--output-dir='.length)
+      if (!options.outputDir) {
+        throw new Error('缺少 --output-dir <directory>。')
+      }
+      continue
+    }
+    if (arg === '--include-cleanup-template') {
+      options.includeCleanupTemplate = true
+      continue
+    }
+    if (arg === '--include-migration-rehearsal') {
+      options.includeMigrationRehearsal = true
+      continue
+    }
+    if (arg === '--include-structure-repair-rehearsal') {
+      options.includeStructureRepairRehearsal = true
+      continue
+    }
+    if (arg === '--use-docker-shadow') {
+      options.useDockerShadow = true
+      continue
+    }
+    if (arg === '--docker-shadow-port') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --docker-shadow-port <port>。')
+      }
+      options.dockerShadowPort = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-shadow-port=')) {
+      options.dockerShadowPort = arg.slice('--docker-shadow-port='.length)
+      if (!options.dockerShadowPort) {
+        throw new Error('缺少 --docker-shadow-port <port>。')
+      }
+      continue
+    }
+    if (arg === '--docker-rehearsal-port') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --docker-rehearsal-port <port>。')
+      }
+      options.dockerRehearsalPort = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-rehearsal-port=')) {
+      options.dockerRehearsalPort = arg.slice('--docker-rehearsal-port='.length)
+      if (!options.dockerRehearsalPort) {
+        throw new Error('缺少 --docker-rehearsal-port <port>。')
+      }
+      continue
+    }
+    if (arg === '--docker-structure-repair-port') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --docker-structure-repair-port <port>。')
+      }
+      options.dockerStructureRepairPort = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--docker-structure-repair-port=')) {
+      options.dockerStructureRepairPort = arg.slice('--docker-structure-repair-port='.length)
+      if (!options.dockerStructureRepairPort) {
+        throw new Error('缺少 --docker-structure-repair-port <port>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return {
+    includeCleanupTemplate: options.includeCleanupTemplate,
+    includeMigrationRehearsal: options.includeMigrationRehearsal,
+    includeStructureRepairRehearsal: options.includeStructureRepairRehearsal,
+    outputDir: path.resolve(ROOT_DIR, options.outputDir),
+    useDockerShadow: options.useDockerShadow,
+    dockerShadowPort: String(options.dockerShadowPort),
+    dockerRehearsalPort: String(options.dockerRehearsalPort),
+    dockerStructureRepairPort: String(options.dockerStructureRepairPort),
+    dockerShadowImage: options.dockerShadowImage,
+  }
+}
+
+function auditSteps(outputDir, options = {}) {
+  const steps = [
+    {
+      id: 'readiness',
+      label: '地基总就绪度',
+      outputFile: path.join(outputDir, 'readiness.json'),
+      args: ['scripts/verify-master-data-readiness.js', '--output', path.join(outputDir, 'readiness.json')],
+    },
+    {
+      id: 'foundation-hard-ready-gate',
+      label: '地基总门禁',
+      outputFile: path.join(outputDir, 'foundation-hard-ready-gate.json'),
+      sensitive: true,
+      args: [
+        'scripts/verify-master-data-foundation.js',
+        '--output',
+        path.join(outputDir, 'foundation-hard-ready-gate.json'),
+      ],
+    },
+    {
+      id: 'truth-sources',
+      label: '核心主数据真相源矩阵',
+      outputFile: path.join(outputDir, 'truth-sources.json'),
+      args: [
+        'scripts/verify-master-data-truth-sources.js',
+        '--output',
+        path.join(outputDir, 'truth-sources.json'),
+      ],
+    },
+    {
+      id: 'code-boundaries',
+      label: '代码层主数据边界',
+      outputFile: path.join(outputDir, 'code-boundaries.json'),
+      args: ['scripts/verify-master-data-code-boundaries.js', '--output', path.join(outputDir, 'code-boundaries.json')],
+    },
+    {
+      id: 'compatibility-snapshot-read',
+      label: '兼容快照读点专项',
+      outputFile: path.join(outputDir, 'compatibility-snapshot-read.json'),
+      args: [
+        'scripts/verify-master-data-code-boundaries.js',
+        '--mode',
+        'compatibility-snapshot-read',
+        '--output',
+        path.join(outputDir, 'compatibility-snapshot-read.json'),
+      ],
+    },
+    {
+      id: 'process-snapshot-read',
+      label: '过程快照读点专项',
+      outputFile: path.join(outputDir, 'process-snapshot-read.json'),
+      args: [
+        'scripts/verify-master-data-code-boundaries.js',
+        '--mode',
+        'process-snapshot-read',
+        '--output',
+        path.join(outputDir, 'process-snapshot-read.json'),
+      ],
+    },
+    {
+      id: 'product-sku-attributes-write',
+      label: '正式 SKU attributes 写入专项',
+      outputFile: path.join(outputDir, 'product-sku-attributes-write.json'),
+      args: [
+        'scripts/verify-master-data-code-boundaries.js',
+        '--mode',
+        'product-sku-attributes-write',
+        '--output',
+        path.join(outputDir, 'product-sku-attributes-write.json'),
+      ],
+    },
+    {
+      id: 'reference-estimator-cost-boundary',
+      label: '参考图预估成本边界专项',
+      outputFile: path.join(outputDir, 'reference-estimator-cost-boundary.json'),
+      args: [
+        'scripts/verify-master-data-code-boundaries.js',
+        '--mode',
+        'reference-estimator-cost-boundary',
+        '--output',
+        path.join(outputDir, 'reference-estimator-cost-boundary.json'),
+      ],
+    },
+    {
+      id: 'filesystem-master-data-source',
+      label: '文件系统反向造数边界专项',
+      outputFile: path.join(outputDir, 'filesystem-master-data-source.json'),
+      args: [
+        'scripts/verify-master-data-code-boundaries.js',
+        '--mode',
+        'filesystem-master-data-source',
+        '--output',
+        path.join(outputDir, 'filesystem-master-data-source.json'),
+      ],
+    },
+    {
+      id: 'foundation-preflight',
+      label: '结构变更前置预检',
+      outputFile: path.join(outputDir, 'foundation-preflight.json'),
+      args: [
+        'scripts/preflight-database-foundation-change.js',
+        '--output',
+        path.join(outputDir, 'foundation-preflight.json'),
+      ],
+    },
+    {
+      id: 'foundation-migrate-plan',
+      label: '治理迁移执行计划',
+      outputFile: path.join(outputDir, 'foundation-migrate-plan.json'),
+      args: [
+        'scripts/run-database-foundation-migrations.js',
+        '--output',
+        path.join(outputDir, 'foundation-migrate-plan.json'),
+      ],
+    },
+    {
+      id: 'foundation-required-migration-apply-plan',
+      label: '治理迁移/护栏应用计划',
+      outputFile: path.join(outputDir, 'foundation-required-migration-apply-plan.json'),
+      args: [
+        'scripts/apply-master-data-foundation-migrations.js',
+        '--output',
+        path.join(outputDir, 'foundation-required-migration-apply-plan.json'),
+      ],
+    },
+    {
+      id: 'pre-sku-formalization-repair-plan',
+      label: '准 SKU 正式化生命周期修复计划',
+      outputFile: path.join(outputDir, 'pre-sku-formalization-repair-plan.json'),
+      sensitive: true,
+      args: [
+        'scripts/plan-pre-sku-formalization-repair.js',
+        '--output',
+        path.join(outputDir, 'pre-sku-formalization-repair-plan.json'),
+      ],
+    },
+    {
+      id: 'pre-sku-formalization-repair-plan-validation',
+      label: '准 SKU 正式化修复计划当前证据校验',
+      outputFile: path.join(outputDir, 'pre-sku-formalization-repair-plan-validation.json'),
+      args: [
+        'scripts/plan-pre-sku-formalization-repair.js',
+        '--validate-plan',
+        '--plan',
+        path.join(outputDir, 'pre-sku-formalization-repair-plan.json'),
+        '--output',
+        path.join(outputDir, 'pre-sku-formalization-repair-plan-validation.json'),
+      ],
+    },
+    {
+      id: 'pre-sku-formalization-repair-execution-template',
+      label: '准 SKU 正式化生命周期执行模板',
+      outputFile: path.join(outputDir, 'pre-sku-formalization-repair-execution-template.json'),
+      sensitive: true,
+      args: [
+        'scripts/apply-pre-sku-formalization-repair.js',
+        '--template',
+        '--output',
+        path.join(outputDir, 'pre-sku-formalization-repair-execution-template.json'),
+      ],
+    },
+  ]
+  if (options.includeCleanupTemplate) {
+    steps.push({
+      id: 'cleanup-template',
+      label: '历史质量债清洗模板',
+      outputFile: path.join(outputDir, 'cleanup-template.json'),
+      sensitive: true,
+      args: [
+        'scripts/apply-master-data-cleanup-plan.js',
+        '--template',
+        '--allow-migration-dry-run',
+        '--output',
+        path.join(outputDir, 'cleanup-template.json'),
+      ],
+    })
+  }
+  if (options.includeMigrationRehearsal) {
+    steps.push({
+      id: 'migration-rehearsal',
+      label: '克隆库迁移演练',
+      outputFile: path.join(outputDir, 'migration-rehearsal.json'),
+      args: [
+        'scripts/rehearse-database-foundation-migration.js',
+        '--output',
+        path.join(outputDir, 'migration-rehearsal.json'),
+        '--docker-port',
+        String(options.dockerRehearsalPort || '65447'),
+      ],
+    })
+  }
+  if (options.includeStructureRepairRehearsal) {
+    steps.push({
+      id: 'structure-repair-rehearsal',
+      label: '克隆库结构修复演练',
+      outputFile: path.join(outputDir, 'structure-repair-rehearsal.json'),
+      args: [
+        'scripts/rehearse-prisma-structure-repair.js',
+        '--output',
+        path.join(outputDir, 'structure-repair-rehearsal.json'),
+        '--repair-sql-output',
+        path.join(outputDir, 'structure-repair.sql'),
+        '--docker-port',
+        String(options.dockerStructureRepairPort || '65448'),
+      ],
+    })
+  }
+  const baselineRepairArgs = [
+    'scripts/plan-prisma-baseline-repair.js',
+    '--preflight',
+    path.join(outputDir, 'foundation-preflight.json'),
+  ]
+  if (options.includeMigrationRehearsal) {
+    baselineRepairArgs.push('--rehearsal', path.join(outputDir, 'migration-rehearsal.json'))
+  }
+  if (options.includeStructureRepairRehearsal) {
+    baselineRepairArgs.push(
+      '--structure-rehearsal',
+      path.join(outputDir, 'structure-repair-rehearsal.json'),
+    )
+  }
+  baselineRepairArgs.push('--output', path.join(outputDir, 'baseline-repair-plan.json'))
+  steps.push({
+    id: 'baseline-repair-plan',
+    label: 'baseline 与结构修复施工图',
+    outputFile: path.join(outputDir, 'baseline-repair-plan.json'),
+    args: baselineRepairArgs,
+  })
+  if (options.includeStructureRepairRehearsal) {
+    steps.push({
+      id: 'authorized-structure-repair-apply-plan',
+      label: '授权结构修复执行计划',
+      outputFile: path.join(outputDir, 'authorized-structure-repair-apply-plan.json'),
+      args: [
+        'scripts/apply-prisma-structure-repair.js',
+        '--preflight',
+        path.join(outputDir, 'foundation-preflight.json'),
+        '--structure-rehearsal',
+        path.join(outputDir, 'structure-repair-rehearsal.json'),
+        '--repair-sql',
+        path.join(outputDir, 'structure-repair.sql'),
+        '--output',
+        path.join(outputDir, 'authorized-structure-repair-apply-plan.json'),
+      ],
+    })
+  }
+  return steps
+}
+
+function readJsonFile(filePath) {
+  if (!fs.existsSync(filePath)) return null
+  return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+}
+
+function runAuditStep(step, env = process.env) {
+  const result = spawnSync(process.execPath, step.args, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: { ...process.env, ...env },
+    windowsHide: true,
+  })
+  const outputExists = fs.existsSync(step.outputFile)
+  let data = null
+  let jsonError = ''
+  try {
+    data = readJsonFile(step.outputFile)
+  } catch (error) {
+    jsonError = error instanceof Error ? error.message : String(error)
+  }
+
+  return {
+    id: step.id,
+    label: step.label,
+    command: [process.execPath, ...step.args].join(' '),
+      outputFile: step.outputFile,
+      outputExists,
+      sensitive: Boolean(step.sensitive),
+      ok: result.status === 0,
+    status: result.status,
+    data,
+    jsonError,
+    error: result.error ? String(result.error.message ?? result.error) : '',
+    stdoutPreview: String(result.stdout ?? '').slice(0, 500),
+    stderrPreview: String(result.stderr ?? '').slice(0, 500),
+  }
+}
+
+function runDocker(args, env = process.env) {
+  return spawnSync('docker', args, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    env: { ...process.env, ...env },
+    windowsHide: true,
+  })
+}
+
+function assertDockerCommandOk(result, label) {
+  if (result.status !== 0) {
+    const stderr = String(result.stderr ?? '').trim()
+    const stdout = String(result.stdout ?? '').trim()
+    const detail = stderr || stdout || result.error?.message || '无输出'
+    throw new Error(`${label} 失败：${detail}`)
+  }
+}
+
+function createDockerShadowDatabase(options = {}, env = process.env) {
+  const port = String(options.dockerShadowPort || '65436')
+  if (!/^\d+$/.test(port)) {
+    throw new Error(`Docker shadow 端口必须是数字：${port}`)
+  }
+
+  const image = options.dockerShadowImage || env.POSTGRES_DOCKER_IMAGE || 'postgres:16'
+  const containerName = `f3d-foundation-audit-shadow-${Date.now()}-${process.pid}`
+  const password = `foundation_shadow_${process.pid}`
+  const databaseName = 'furniture_3d_shadow'
+
+  const dockerVersion = runDocker(['--version'], env)
+  assertDockerCommandOk(dockerVersion, '检查 Docker')
+
+  const inspect = runDocker(['image', 'inspect', image], env)
+  assertDockerCommandOk(inspect, `检查 Docker 镜像 ${image}`)
+
+  const cleanup = () => {
+    runDocker(['rm', '-f', containerName], env)
+  }
+
+  try {
+    assertDockerCommandOk(
+      runDocker([
+        'run',
+        '-d',
+        '--name',
+        containerName,
+        '-e',
+        `POSTGRES_PASSWORD=${password}`,
+        '-p',
+        `${port}:5432`,
+        image,
+      ], env),
+      '启动 Docker shadow PostgreSQL',
+    )
+
+    let ready = false
+    for (let index = 0; index < 40; index += 1) {
+      const psqlReady = runDocker([
+        'exec',
+        '-e',
+        `PGPASSWORD=${password}`,
+        containerName,
+        'psql',
+        '-U',
+        'postgres',
+        '-d',
+        'postgres',
+        '-c',
+        'SELECT 1;',
+      ], env)
+      if (psqlReady.status === 0) {
+        ready = true
+        break
+      }
+      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 500)
+    }
+    if (!ready) {
+      throw new Error('Docker shadow PostgreSQL 启动超时。')
+    }
+
+    assertDockerCommandOk(
+      runDocker([
+        'exec',
+        '-e',
+        `PGPASSWORD=${password}`,
+        containerName,
+        'psql',
+        '-U',
+        'postgres',
+        '-d',
+        'postgres',
+        '-c',
+        `CREATE DATABASE ${databaseName};`,
+      ], env),
+      '创建 Docker shadow 数据库',
+    )
+
+    return {
+      shadowDatabaseUrl: `postgresql://postgres:${password}@localhost:${port}/${databaseName}?schema=public`,
+      containerName,
+      cleanup,
+    }
+  } catch (error) {
+    cleanup()
+    throw error
+  }
+}
+
+function summarizeBlockerValue(value) {
+  if (value === null || value === undefined) return true
+  if (typeof value === 'number' || typeof value === 'boolean') return value
+  if (Array.isArray(value)) return value.length
+  return true
+}
+
+function collectBlockers(stepResults) {
+  const blockers = []
+  for (const result of stepResults) {
+    const blockerValue = (value) => (result.sensitive ? summarizeBlockerValue(value) : value)
+    const blockerMessage = (message) =>
+      result.sensitive ? `${result.label} 存在敏感审计阻断项，详情仅保留在本地敏感报告。` : message
+    if (!result.ok) {
+      blockers.push({
+        source: result.id,
+        key: 'command',
+        value: result.status,
+        message: `${result.label} 未通过。`,
+      })
+    }
+    const data = result.data
+    if (Array.isArray(data?.blockers)) {
+      data.blockers.forEach((blocker) => {
+        blockers.push({
+          source: blocker.source ?? result.id,
+          key: blocker.key ?? 'blocker',
+          value: blockerValue(blocker.value),
+          message: blockerMessage(blocker.message ?? `${result.label} 存在阻断项。`),
+        })
+      })
+    }
+    if (Array.isArray(data?.diagnosisBlockers)) {
+      data.diagnosisBlockers.forEach((blocker) => {
+        blockers.push({
+          source: `${result.id}:diagnosis`,
+          key: blocker.key ?? 'diagnosisBlocker',
+          value: blockerValue(blocker.value),
+          message: blockerMessage(blocker.message ?? `${result.label} 存在诊断阻断项。`),
+        })
+      })
+    }
+    if (Array.isArray(data?.foundationHardReadyGate?.blockers)) {
+      data.foundationHardReadyGate.blockers.forEach((blocker) => {
+        blockers.push({
+          source: `foundation-hard-ready-gate:${blocker.source ?? 'unknown'}`,
+          key: blocker.key ?? 'blocker',
+          value: blockerValue(blocker.value),
+          message: blockerMessage(blocker.message ?? `${result.label} 存在 hard-ready 阻断项。`),
+        })
+      })
+    }
+    if (!result.outputExists) {
+      blockers.push({
+        source: result.id,
+        key: 'outputFile',
+        value: result.outputFile,
+        message: `${result.label} 没有写出审计 JSON 文件。`,
+      })
+    } else if (result.jsonError) {
+      blockers.push({
+        source: result.id,
+        key: 'outputJson',
+        value: result.jsonError,
+        message: `${result.label} 审计 JSON 无法解析。`,
+      })
+    }
+  }
+  return blockers
+}
+
+function uniqueBlockers(blockers) {
+  return blockers.filter((blocker, index, list) => {
+    const key = `${blocker.source}:${blocker.key}:${blocker.message}`
+    return list.findIndex((item) => `${item.source}:${item.key}:${item.message}` === key) === index
+  })
+}
+
+function countBlankFillFields(items = []) {
+  const counts = {}
+  for (const item of items) {
+    const fill = item?.fill && typeof item.fill === 'object' ? item.fill : {}
+    for (const [key, value] of Object.entries(fill)) {
+      if (value === '' || value == null) {
+        counts[key] = (counts[key] || 0) + 1
+      }
+    }
+  }
+  return counts
+}
+
+function normalizeCleanupFieldKey(field) {
+  if (typeof field !== 'string' || !field) return ''
+  const aliases = {
+    barcode: 'barcode',
+    development_kind: 'productDevelopmentKind',
+    model: 'model',
+    product_category: 'productCategory',
+    product_development_kind: 'productDevelopmentKind',
+    product_name: 'productName',
+    sku_code: 'skuCode',
+    spec_name: 'specName',
+  }
+  if (aliases[field]) return aliases[field]
+  return field.replace(/_([a-z])/g, (_, char) => char.toUpperCase())
+}
+
+function cleanupMissingFieldKeys(item) {
+  const current = item?.current && typeof item.current === 'object' ? item.current : {}
+  const rawFields = [
+    ...(Array.isArray(current.missingRequiredFields) ? current.missingRequiredFields : []),
+    ...(Array.isArray(current.missingFields) ? current.missingFields : []),
+  ]
+  return new Set(rawFields.map(normalizeCleanupFieldKey).filter(Boolean))
+}
+
+function countBlankMissingFillFields(items = []) {
+  const counts = {}
+  for (const item of items) {
+    const fill = item?.fill && typeof item.fill === 'object' ? item.fill : {}
+    const missingKeys = cleanupMissingFieldKeys(item)
+    const candidateKeys = missingKeys.size > 0
+      ? Object.keys(fill).filter((key) => missingKeys.has(key))
+      : Object.keys(fill)
+    for (const key of candidateKeys) {
+      const value = fill[key]
+      if (value === '' || value == null) {
+        counts[key] = (counts[key] || 0) + 1
+      }
+    }
+  }
+  return counts
+}
+
+function countByField(items = [], fieldName) {
+  const counts = {}
+  for (const item of items) {
+    const value = typeof item?.[fieldName] === 'string' ? item[fieldName] : ''
+    const key = value || 'UNKNOWN'
+    counts[key] = (counts[key] || 0) + 1
+  }
+  return counts
+}
+
+function countQualityDecisionPlaceholderFields(items = []) {
+  const counts = {}
+  for (const item of items) {
+    const placeholderFields = Array.isArray(item?.current?.placeholderFields)
+      ? item.current.placeholderFields
+      : []
+    for (const field of placeholderFields) {
+      const key = typeof field === 'string' && field ? field : 'UNKNOWN'
+      counts[key] = (counts[key] || 0) + 1
+    }
+  }
+  return counts
+}
+
+function countReadinessBlockerPairs(blockers = []) {
+  const counts = {}
+  for (const blocker of blockers) {
+    const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+    const key = typeof blocker?.key === 'string' && blocker.key ? blocker.key : 'UNKNOWN'
+    const pairKey = `${source}:${key}`
+    counts[pairKey] = (counts[pairKey] || 0) + 1
+  }
+  return counts
+}
+
+function countObjectValues(values = {}) {
+  return Object.values(values).reduce((total, value) => {
+    const number = Number(value)
+    return Number.isFinite(number) ? total + number : total
+  }, 0)
+}
+
+function buildCleanupTemplateSummary(cleanupTemplate) {
+  if (!cleanupTemplate) return null
+  const skuItems = cleanupTemplate.skuItems || cleanupTemplate.items?.skuItems || []
+  const productProfiles = cleanupTemplate.productProfiles || cleanupTemplate.items?.productProfiles || []
+  const qualityDecisionRepairs =
+    cleanupTemplate.qualityDecisionRepairs ||
+    cleanupTemplate.items?.qualityDecisionRepairs ||
+    []
+  const preSkuFormalizationMismatches =
+    cleanupTemplate.preSkuFormalizationMismatches ||
+    cleanupTemplate.items?.preSkuFormalizationMismatches ||
+    []
+  const migrationStatus = cleanupTemplate.migrationApplicationStatus || {}
+  const skuBlankFillFieldCounts = countBlankMissingFillFields(skuItems)
+  const productProfileBlankFillFieldCounts = countBlankMissingFillFields(productProfiles)
+  const qualityDecisionRepairPlaceholderFieldCounts =
+    countQualityDecisionPlaceholderFields(qualityDecisionRepairs)
+  const blankMissingFillFieldCount =
+    countObjectValues(skuBlankFillFieldCounts) +
+    countObjectValues(productProfileBlankFillFieldCounts)
+  const placeholderDecisionFieldCount = countObjectValues(
+    qualityDecisionRepairPlaceholderFieldCounts,
+  )
+  const requiresBusinessConfirmation =
+    blankMissingFillFieldCount > 0 ||
+    placeholderDecisionFieldCount > 0 ||
+    preSkuFormalizationMismatches.length > 0
+  return {
+    mode: cleanupTemplate.mode || '',
+    readyToHardReady: !requiresBusinessConfirmation,
+    requiresBusinessConfirmation,
+    blankMissingFillFieldCount,
+    skuItemCount: skuItems.length,
+    skuBlankFillFieldCounts,
+    productProfileCount: productProfiles.length,
+    productProfileBlankFillFieldCounts,
+    qualityDecisionRepairCount: qualityDecisionRepairs.length,
+    qualityDecisionRepairPlaceholderFieldCounts,
+    preSkuFormalizationMismatchCount: preSkuFormalizationMismatches.length,
+    preSkuFormalizationMismatchReasonCounts: countByField(
+      preSkuFormalizationMismatches,
+      'mismatchReason',
+    ),
+    migrationApplicationStatus: {
+      source: 'transactional-dry-run-replay',
+      appliedMigrationCount: migrationStatus.appliedMigrationCount ?? null,
+      strictReady: migrationStatus.strictReady === true,
+      fullyReady: migrationStatus.fullyReady === true,
+      pendingStructureMigrationCount: migrationStatus.pendingStructureMigrationCount ?? null,
+      replayableIdempotentMigrationCount:
+        migrationStatus.replayableIdempotentMigrationCount ?? null,
+    },
+  }
+}
+
+function buildReadinessSummary(readiness) {
+  if (!readiness) return null
+  const nextActionPlan = readiness.nextActionPlan || {}
+  const stages = Array.isArray(nextActionPlan.stages) ? nextActionPlan.stages : []
+  const blockers = Array.isArray(readiness.blockers) ? readiness.blockers : []
+  return {
+    status: readiness.status || '',
+    hardReady: readiness.hardReady === true,
+    blockerCount: readiness.blockerCount ?? null,
+    blockerSourceCounts: countByField(blockers, 'source'),
+    blockerKeyCounts: countByField(blockers, 'key'),
+    blockerPairCounts: countReadinessBlockerPairs(blockers),
+    nextActionStageCount: nextActionPlan.stageCount ?? stages.length,
+    nextActionStages: stages.map((stage) => ({
+      id: stage.id || '',
+      status: stage.status || '',
+      reason: stage.reason || '',
+      commands: Array.isArray(stage.commands) ? stage.commands : [],
+      guard: stage.guard || '',
+    })),
+  }
+}
+
+function buildFoundationHardReadyGateSummary(report) {
+  if (!report) return null
+  const gate = report.foundationHardReadyGate || {}
+  const blockers = Array.isArray(gate.blockers) ? gate.blockers : []
+  const migrationStatusSource = report.migrationApplicationStatus
+    ? report.mode === 'current'
+      ? 'current-database'
+      : report.mode === 'migration-dry-run' || report.mode === 'idempotent-migration-replay'
+        ? 'transactional-dry-run-replay'
+        : 'reported'
+    : null
+  return {
+    hardReady: gate.hardReady === true,
+    blockerCount: gate.blockerCount ?? blockers.length,
+    blockerSourceCounts: gate.blockerSourceCounts || countByField(blockers, 'source'),
+    blockerKeys: blockers.map((blocker) => {
+      const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+      const key = typeof blocker?.key === 'string' && blocker.key ? blocker.key : 'UNKNOWN'
+      return `${source}:${key}`
+    }),
+    blockerValues: blockers.reduce((values, blocker) => {
+      const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+      const key = typeof blocker?.key === 'string' && blocker.key ? blocker.key : 'UNKNOWN'
+      values[`${source}:${key}`] = summarizeBlockerValue(blocker?.value)
+      return values
+    }, {}),
+    rolledBack: report.rolledBack === true,
+    migrationApplicationStatus: report.migrationApplicationStatus
+      ? {
+          source: migrationStatusSource,
+          appliedMigrationCount: report.migrationApplicationStatus.appliedMigrationCount ?? null,
+          pendingStructureMigrationCount:
+            report.migrationApplicationStatus.pendingStructureMigrationCount ?? null,
+          replayableIdempotentMigrationCount:
+            report.migrationApplicationStatus.replayableIdempotentMigrationCount ?? null,
+          strictReady: report.migrationApplicationStatus.strictReady === true,
+          fullyReady: report.migrationApplicationStatus.fullyReady === true,
+        }
+      : null,
+  }
+}
+
+function buildMigrationRehearsalSummary(migrationRehearsal) {
+  if (!migrationRehearsal) return null
+  return {
+    status: migrationRehearsal.status || '',
+    restoreOk: migrationRehearsal.restore?.ok === true,
+    migrateDeployOk: migrationRehearsal.migrateDeploy?.ok === true,
+    p3005Detected: migrationRehearsal.migrateDeploy?.p3005Detected === true,
+    dockerCleanupStatus: migrationRehearsal.docker?.cleanupStatus || '',
+    blockerKeys: Array.isArray(migrationRehearsal.blockers)
+      ? migrationRehearsal.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+  }
+}
+
+function buildBaselineRepairPlanSummary(baselineRepairPlan) {
+  if (!baselineRepairPlan) return null
+  return {
+    status: baselineRepairPlan.status || '',
+    recommendedAction: baselineRepairPlan.recommendedAction || '',
+    safeForProductionWrite: baselineRepairPlan.safeForProductionWrite === true,
+    blockerKeys: Array.isArray(baselineRepairPlan.blockers)
+      ? baselineRepairPlan.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+    evidence: {
+      backupUsable: baselineRepairPlan.evidence?.backupUsable === true,
+      backupVerified: baselineRepairPlan.evidence?.backupVerified ?? null,
+      migrationSchemaDiffStatus: baselineRepairPlan.evidence?.migrationSchemaDiffStatus || '',
+      migrationDiffStatus: baselineRepairPlan.evidence?.migrationDiffStatus || '',
+      currentSchemaDiffHasSql:
+        baselineRepairPlan.evidence?.currentSchemaDiffHasSql === true,
+      pendingMigrationCount: baselineRepairPlan.evidence?.pendingMigrationCount ?? null,
+      directMigrateDeployBlockedByP3005:
+        baselineRepairPlan.evidence?.directMigrateDeployBlockedByP3005 === true,
+    },
+  }
+}
+
+function buildFoundationRequiredMigrationApplyPlanSummary(applyPlan) {
+  if (!applyPlan) return null
+  return {
+    mode: applyPlan.mode || '',
+    dryRun: applyPlan.dryRun !== false,
+    readyToApply: applyPlan.readyToApply === true,
+    pendingMigrationCount: applyPlan.pendingMigrationCount ?? null,
+    pendingStructureMigrationCount: applyPlan.pendingStructureMigrationCount ?? null,
+    pendingIdempotentMigrationCount: applyPlan.pendingIdempotentMigrationCount ?? null,
+    migrationHistoryReady:
+      applyPlan.migrationHistory?.tableExists === true &&
+      applyPlan.migrationHistory?.unfinishedMigrationRows === 0 &&
+      applyPlan.migrationHistory?.rolledBackMigrationRows === 0,
+    blockerKeys: Array.isArray(applyPlan.blockers)
+      ? applyPlan.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+  }
+}
+
+function buildPreSkuFormalizationRepairPlanSummary(plan) {
+  if (!plan) return null
+  const candidates = Array.isArray(plan.candidates) ? plan.candidates : []
+  const requiredEvidenceKeys = Array.isArray(plan.evidencePolicy?.requiredCurrentEvidenceKeys)
+    ? plan.evidencePolicy.requiredCurrentEvidenceKeys
+    : []
+  const decisionOptionCounts = candidates.reduce((counts, candidate) => {
+    const decisions = Array.isArray(candidate?.allowedDecisions)
+      ? candidate.allowedDecisions
+      : []
+    decisions.forEach((item) => {
+      const key = item?.decision || 'UNKNOWN'
+      counts[key] = (counts[key] || 0) + 1
+    })
+    return counts
+  }, {})
+
+  return {
+    mode: plan.mode || '',
+    readOnly: plan.readOnly === true,
+    applySupported: plan.applySupported === true,
+    databaseIdentityPresent: Boolean(plan.databaseIdentity),
+    candidateCount: plan.candidateCount ?? candidates.length,
+    reasonCounts: plan.reasonCounts || {},
+    requiredCurrentEvidenceKeyCount: requiredEvidenceKeys.length,
+    candidateEvidenceFingerprintCount: candidates.filter((candidate) =>
+      Boolean(candidate?.evidenceFingerprint),
+    ).length,
+    decisionOptionCounts,
+    globalGuardCount: Array.isArray(plan.globalGuards) ? plan.globalGuards.length : 0,
+  }
+}
+
+function buildPreSkuFormalizationRepairPlanValidationSummary(report) {
+  if (!report) return null
+  return {
+    mode: report.mode || '',
+    valid: report.valid === true,
+    committed: report.committed === true,
+    requiresDatabase: report.requiresDatabase === true,
+    databaseIdentityMatched: report.databaseIdentityMatched === true,
+    candidateCount: report.candidateCount ?? null,
+    matchedCandidateCount: report.matchedCandidateCount ?? null,
+    staleCandidateCount: report.staleCandidateCount ?? null,
+    blockerCount: report.blockerCount ?? null,
+    blockerKeys: Array.isArray(report.blockers)
+      ? report.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+  }
+}
+
+function buildPreSkuFormalizationRepairExecutionTemplateSummary(template) {
+  if (!template) return null
+  const decisions = Array.isArray(template.decisions) ? template.decisions : []
+  const allowedDecisionCounts = {}
+  const selectedDecisionCounts = {}
+  let currentEvidenceCount = 0
+  let evidenceFingerprintCount = 0
+  let reasonFilledCount = 0
+  let formalSkuIdFilledCount = 0
+
+  decisions.forEach((decision) => {
+    if (decision?.currentEvidence && typeof decision.currentEvidence === 'object') {
+      currentEvidenceCount += 1
+    }
+    if (typeof decision?.evidenceFingerprint === 'string' && decision.evidenceFingerprint) {
+      evidenceFingerprintCount += 1
+    }
+    const selectedDecision =
+      typeof decision?.decision === 'string' && decision.decision
+        ? decision.decision
+        : 'UNSELECTED'
+    selectedDecisionCounts[selectedDecision] = (selectedDecisionCounts[selectedDecision] || 0) + 1
+    if (typeof decision?.reason === 'string' && decision.reason.trim()) {
+      reasonFilledCount += 1
+    }
+    if (typeof decision?.formalSkuId === 'string' && decision.formalSkuId.trim()) {
+      formalSkuIdFilledCount += 1
+    }
+    const allowedDecisions = Array.isArray(decision?.allowedDecisions)
+      ? decision.allowedDecisions
+      : []
+    allowedDecisions.forEach((item) => {
+      const key = item?.decision || 'UNKNOWN'
+      allowedDecisionCounts[key] = (allowedDecisionCounts[key] || 0) + 1
+    })
+  })
+  const confirmationFilled =
+    typeof template.confirmation === 'string' && template.confirmation.trim() !== ''
+  const confirmedByFilled =
+    typeof template.confirmedBy === 'string' && template.confirmedBy.trim() !== ''
+  const unselectedDecisionCount = selectedDecisionCounts.UNSELECTED || 0
+  const requiresBusinessDecision =
+    decisions.length > 0 &&
+    (!confirmationFilled ||
+      !confirmedByFilled ||
+      unselectedDecisionCount > 0 ||
+      reasonFilledCount < decisions.length)
+
+  return {
+    mode: template.mode || '',
+    generated: true,
+    databaseIdentityPresent: Boolean(template.databaseIdentity),
+    candidateCount: template.candidateCount ?? decisions.length,
+    decisionCount: decisions.length,
+    requiresBusinessDecision,
+    unselectedDecisionCount,
+    confirmationFilled,
+    confirmedByFilled,
+    currentEvidenceCount,
+    evidenceFingerprintCount,
+    selectedDecisionCounts,
+    allowedDecisionCounts,
+    reasonFilledCount,
+    formalSkuIdFilledCount,
+    templateInstructionCount: Array.isArray(template.templateInstructions)
+      ? template.templateInstructions.length
+      : 0,
+  }
+}
+
+function buildSnapshotReadBoundarySummary(report, kind) {
+  if (!report) return null
+  const prefix = kind === 'process' ? 'processSnapshotRead' : 'compatibilitySnapshotRead'
+  const debtBudget = report[`${prefix}DebtBudget`] || {}
+
+  return {
+    mode: report.mode || '',
+    checkedFiles: report.checkedFiles ?? null,
+    readCount: report[`${prefix}Count`] ?? null,
+    blockingRiskCount: report[`${prefix}BlockingRiskCount`] ?? null,
+    unclassifiedReadCount: report[`unclassified${prefix[0].toUpperCase()}${prefix.slice(1)}Count`] ?? null,
+    unusedClassificationCount:
+      report[`unused${prefix[0].toUpperCase()}${prefix.slice(1)}ClassificationCount`] ?? null,
+    debtBudget: {
+      total: debtBudget.total ?? null,
+      high: debtBudget.high ?? null,
+      medium: debtBudget.medium ?? null,
+      unknown: debtBudget.unknown ?? null,
+    },
+    budgetViolationCount: report[`${prefix}BudgetViolationCount`] ?? null,
+  }
+}
+
+function buildReferenceEstimatorCostBoundarySummary(report) {
+  if (!report) return null
+  return {
+    mode: report.mode || '',
+    approvedSourcePathCount: Array.isArray(report.approvedReferenceEstimatorCostSourcePaths)
+      ? report.approvedReferenceEstimatorCostSourcePaths.length
+      : 0,
+    findingCount: report.referenceEstimatorCostBoundaryFindingCount ?? null,
+    unclassifiedFindingCount:
+      report.unclassifiedReferenceEstimatorCostBoundaryFindingCount ?? null,
+    byRuleId: report.referenceEstimatorCostBoundaryByRuleId || {},
+    byFileCount: report.referenceEstimatorCostBoundaryByFile
+      ? Object.keys(report.referenceEstimatorCostBoundaryByFile).length
+      : 0,
+  }
+}
+
+function buildFileSystemMasterDataSourceSummary(report) {
+  if (!report) return null
+  return {
+    mode: report.mode || '',
+    approvedSourcePathCount: Array.isArray(report.approvedFileSystemMasterDataSourcePaths)
+      ? report.approvedFileSystemMasterDataSourcePaths.length
+      : 0,
+    findingCount: report.fileSystemMasterDataSourceFindingCount ?? null,
+    unclassifiedFindingCount: report.unclassifiedFileSystemMasterDataSourceCount ?? null,
+    byFileCount: report.fileSystemMasterDataSourceByFile
+      ? Object.keys(report.fileSystemMasterDataSourceByFile).length
+      : 0,
+  }
+}
+
+function buildStructureRepairRehearsalSummary(structureRepairRehearsal) {
+  if (!structureRepairRehearsal) return null
+  return {
+    status: structureRepairRehearsal.status || '',
+    repairApplyOk: structureRepairRehearsal.repairApply?.ok === true,
+    currentSchemaDiffAfterStatus:
+      structureRepairRehearsal.currentSchemaDiffAfter?.status ?? null,
+    migrationDiffAfterStatus: structureRepairRehearsal.migrationDiffAfter?.status ?? null,
+    dockerCleanupStatus: structureRepairRehearsal.docker?.cleanupStatus || '',
+    destructiveSqlBlocked:
+      structureRepairRehearsal.repairSqlSummary?.hasDestructiveStatements === true,
+    repairSqlArtifact: structureRepairRehearsal.repairSqlArtifact
+      ? {
+          sizeBytes: structureRepairRehearsal.repairSqlArtifact.sizeBytes ?? 0,
+          sha256: structureRepairRehearsal.repairSqlArtifact.sha256 || '',
+        }
+      : null,
+    baselineResolveCandidate:
+      structureRepairRehearsal.baselineResolvePlan?.candidate === true,
+    baselineResolveMigrationCount:
+      structureRepairRehearsal.baselineResolvePlan?.migrationCount ?? null,
+    baselineResolveRehearsalOk:
+      structureRepairRehearsal.baselineResolveRehearsal?.ok === true,
+    baselineResolveAppliedCount:
+      structureRepairRehearsal.baselineResolveRehearsal?.appliedCount ?? null,
+    prismaMigrateStatusAfterResolveStatus:
+      structureRepairRehearsal.prismaMigrateStatusAfterResolve?.status ?? null,
+    readinessAfterResolveStatus:
+      structureRepairRehearsal.readinessAfterResolve?.readinessStatus || '',
+    readinessAfterResolveHardReady:
+      structureRepairRehearsal.readinessAfterResolve?.hardReady ?? null,
+    readinessAfterResolveBlockerCount:
+      structureRepairRehearsal.readinessAfterResolve?.blockerCount ?? null,
+    readinessAfterResolveBlockerKeys:
+      structureRepairRehearsal.readinessAfterResolve?.blockerKeys || [],
+    requiredMigrationApplyAfterResolveOk:
+      structureRepairRehearsal.requiredMigrationApplyAfterResolve?.ok ?? null,
+    requiredMigrationApplyAfterResolveCount:
+      structureRepairRehearsal.requiredMigrationApplyAfterResolve?.appliedMigrationCount ?? null,
+    requiredMigrationApplyAfterResolveStructureCount:
+      structureRepairRehearsal.requiredMigrationApplyAfterResolve?.pendingStructureMigrationCount ?? null,
+    requiredMigrationApplyAfterResolveIdempotentCount:
+      structureRepairRehearsal.requiredMigrationApplyAfterResolve?.replayableIdempotentMigrationCount ?? null,
+    readinessAfterRequiredMigrationsStatus:
+      structureRepairRehearsal.readinessAfterRequiredMigrations?.readinessStatus || '',
+    readinessAfterRequiredMigrationsHardReady:
+      structureRepairRehearsal.readinessAfterRequiredMigrations?.hardReady ?? null,
+    readinessAfterRequiredMigrationsBlockerCount:
+      structureRepairRehearsal.readinessAfterRequiredMigrations?.blockerCount ?? null,
+    readinessAfterRequiredMigrationsBlockerKeys:
+      structureRepairRehearsal.readinessAfterRequiredMigrations?.blockerKeys || [],
+    blockerKeys: Array.isArray(structureRepairRehearsal.blockers)
+      ? structureRepairRehearsal.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+  }
+}
+
+function buildAuthorizedStructureRepairApplyPlanSummary(applyPlan) {
+  if (!applyPlan) return null
+  const exactPhaseCommands = applyPlan.exactPhaseCommands || null
+  const dryRun = applyPlan.dryRun !== false
+  const readyToApply = applyPlan.readyToApply === true
+  return {
+    mode: applyPlan.mode || '',
+    phase: applyPlan.phase || '',
+    dryRun,
+    readyToApply,
+    requiresExplicitAuthorization: dryRun || !readyToApply,
+    executionState: readyToApply
+      ? 'ready-to-apply-with-explicit-authorization'
+      : 'plan-only-not-applied',
+    repairSqlArtifact: applyPlan.repairSqlArtifact
+      ? {
+          exists: applyPlan.repairSqlArtifact.exists === true,
+          sizeBytes: applyPlan.repairSqlArtifact.sizeBytes ?? 0,
+          sha256: applyPlan.repairSqlArtifact.sha256 || '',
+        }
+      : null,
+    repairSqlSafety: applyPlan.repairSqlSafety
+      ? {
+          hasDestructiveStatements:
+            applyPlan.repairSqlSafety.hasDestructiveStatements === true,
+        }
+      : null,
+    evidenceFreshness: applyPlan.evidenceFreshness
+      ? {
+          maxAgeMinutes: applyPlan.evidenceFreshness.maxAgeMinutes ?? null,
+          preflightAgeMinutes: applyPlan.evidenceFreshness.preflightAgeMinutes ?? null,
+          structureRehearsalAgeMinutes:
+            applyPlan.evidenceFreshness.structureRehearsalAgeMinutes ?? null,
+        }
+      : null,
+    baselineResolveMigrationCount: applyPlan.baselineResolveMigrationCount ?? null,
+    exactPhaseCommandAvailability: exactPhaseCommands
+      ? {
+          available: exactPhaseCommands.available === true,
+          missing: Array.isArray(exactPhaseCommands.missing)
+            ? exactPhaseCommands.missing
+            : [],
+          applyStructureDryRun:
+            exactPhaseCommands.applyStructureDryRun?.name === 'apply-structure-dry-run',
+          applyStructure: exactPhaseCommands.applyStructure?.name === 'apply-structure',
+          resolveBaselineTemplate:
+            exactPhaseCommands.resolveBaselineTemplate?.name === 'resolve-baseline-template',
+        }
+      : null,
+    blockerKeys: Array.isArray(applyPlan.blockers)
+      ? applyPlan.blockers.map((blocker) => blocker.key).filter(Boolean)
+      : [],
+  }
+}
+
+function buildChecklistItem(id, label, passed, evidence = {}, blockedBy = []) {
+  const missingEvidence = evidence.missing === true
+  return {
+    id,
+    label,
+    status: missingEvidence ? 'missing' : passed ? 'passed' : 'blocked',
+    passed: missingEvidence ? false : passed === true,
+    blockedBy,
+    evidence,
+  }
+}
+
+function hasReadinessBlocker(readiness, predicate) {
+  const blockers = Array.isArray(readiness?.blockers) ? readiness.blockers : []
+  return blockers.some(predicate)
+}
+
+function readinessBlockerKeys(readiness, predicate) {
+  const blockers = Array.isArray(readiness?.blockers) ? readiness.blockers : []
+  return blockers.filter(predicate).map((blocker) => blocker.key).filter(Boolean)
+}
+
+function readinessBlockerSourceKeys(readiness, predicate) {
+  const blockers = Array.isArray(readiness?.blockers) ? readiness.blockers : []
+  return Array.from(new Set(
+    blockers
+      .filter(predicate)
+      .map((blocker) => {
+        const source = typeof blocker.source === 'string' && blocker.source ? blocker.source : 'unknown'
+        const key = typeof blocker.key === 'string' && blocker.key ? blocker.key : 'unknown'
+        return `${source}:${key}`
+      }),
+  ))
+}
+
+function readinessBlockerSourceValues(readiness, predicate) {
+  const blockers = Array.isArray(readiness?.blockers) ? readiness.blockers : []
+  return blockers.filter(predicate).reduce((values, blocker) => {
+    const source = typeof blocker.source === 'string' && blocker.source ? blocker.source : 'unknown'
+    const key = typeof blocker.key === 'string' && blocker.key ? blocker.key : 'unknown'
+    const sourceKey = `${source}:${key}`
+    const value = blocker.value
+    values[sourceKey] =
+      typeof value === 'number' || typeof value === 'boolean' || typeof value === 'string'
+        ? value
+        : true
+    return values
+  }, {})
+}
+
+function buildFoundationCompletionChecklist({
+  readiness,
+  truthSources,
+  codeBoundaries,
+  compatibilitySnapshotRead,
+  processSnapshotRead,
+  fileSystemMasterDataSource,
+  preSkuFormalizationRepairPlanValidation,
+  authorizedStructureRepairApplyPlan,
+  stepResults,
+}) {
+  const stepOk = (id) => stepResults.find((result) => result.id === id)?.ok === true
+  const stepMissing = (id) => !stepResults.some((result) => result.id === id)
+  const schemaBlockerKeys = readinessBlockerSourceKeys(readiness, (blocker) =>
+    [
+      'prisma-migrate-status',
+      'current-schema-diff',
+      'migration-status',
+      'foundation-preflight',
+      'foundation-migrate-plan',
+      'foundation-required-migration-apply-plan',
+    ].includes(blocker.source),
+  )
+  const schemaBlockerValues = readinessBlockerSourceValues(readiness, (blocker) =>
+    [
+      'prisma-migrate-status',
+      'current-schema-diff',
+      'migration-status',
+      'foundation-preflight',
+      'foundation-migrate-plan',
+      'foundation-required-migration-apply-plan',
+    ].includes(blocker.source),
+  )
+  const historicalQualityBlockerKeys = readinessBlockerKeys(readiness, (blocker) =>
+    blocker.source === 'foundation-dry-run' &&
+    blocker.key !== 'preSkuFormalizationLifecycleMismatchCount',
+  )
+  const historicalQualityBlockerValues = readinessBlockerSourceValues(readiness, (blocker) =>
+    blocker.source === 'foundation-dry-run' &&
+    blocker.key !== 'preSkuFormalizationLifecycleMismatchCount',
+  )
+  const preSkuLifecycleBlocked = hasReadinessBlocker(
+    readiness,
+    (blocker) => blocker.key === 'preSkuFormalizationLifecycleMismatchCount',
+  )
+  const preSkuLifecycleBlockerValues = readinessBlockerSourceValues(
+    readiness,
+    (blocker) => blocker.key === 'preSkuFormalizationLifecycleMismatchCount',
+  )
+  const compatibilitySummary = buildSnapshotReadBoundarySummary(
+    compatibilitySnapshotRead,
+    'compatibility',
+  )
+  const processSummary = buildSnapshotReadBoundarySummary(processSnapshotRead, 'process')
+  const fileSystemSummary = buildFileSystemMasterDataSourceSummary(fileSystemMasterDataSource)
+  const preSkuValidationSummary = buildPreSkuFormalizationRepairPlanValidationSummary(
+    preSkuFormalizationRepairPlanValidation,
+  )
+  const authorizedRepairSummary = buildAuthorizedStructureRepairApplyPlanSummary(
+    authorizedStructureRepairApplyPlan,
+  )
+
+  const items = [
+    buildChecklistItem(
+      'schema-and-migration-history',
+      '数据库结构与 Prisma 迁移历史',
+      schemaBlockerKeys.length === 0 &&
+        stepOk('foundation-preflight') &&
+        stepOk('foundation-migrate-plan') &&
+        stepOk('foundation-required-migration-apply-plan'),
+      {
+        missing: stepMissing('readiness') || stepMissing('foundation-preflight'),
+        blockerCount: schemaBlockerKeys.length,
+        blockerValues: schemaBlockerValues,
+        readinessHardReady: readiness?.hardReady === true,
+        foundationPreflightOk: stepOk('foundation-preflight'),
+        foundationMigratePlanOk: stepOk('foundation-migrate-plan'),
+        foundationRequiredMigrationApplyPlanOk:
+          stepOk('foundation-required-migration-apply-plan'),
+      },
+      schemaBlockerKeys,
+    ),
+    buildChecklistItem(
+      'truth-source-matrix',
+      '核心对象唯一真相源矩阵',
+      stepOk('truth-sources') && Number(truthSources?.truthSourceCount ?? 0) > 0,
+      {
+        missing: stepMissing('truth-sources'),
+        truthSourceCount: truthSources?.truthSourceCount ?? null,
+        prismaModelCount: truthSources?.prismaModelCount ?? null,
+        databaseGuardCount: truthSources?.databaseGuardCount ?? null,
+      },
+      stepOk('truth-sources') ? [] : ['truth-sources.command'],
+    ),
+    buildChecklistItem(
+      'code-write-boundaries',
+      '后端写入边界与受控入口',
+      stepOk('code-boundaries') &&
+        Array.isArray(codeBoundaries?.violations) &&
+        codeBoundaries.violations.length === 0,
+      {
+        missing: stepMissing('code-boundaries'),
+        checkedFiles: codeBoundaries?.checkedFiles ?? null,
+        checkedScriptFiles: codeBoundaries?.checkedScriptFiles ?? null,
+        violationCount: Array.isArray(codeBoundaries?.violations)
+          ? codeBoundaries.violations.length
+          : null,
+      },
+      stepOk('code-boundaries') ? [] : ['code-boundaries.command'],
+    ),
+    buildChecklistItem(
+      'json-and-snapshot-boundaries',
+      'JSON/快照边界不反向成为主数据',
+      stepOk('compatibility-snapshot-read') &&
+        stepOk('process-snapshot-read') &&
+        compatibilitySummary?.blockingRiskCount === 0 &&
+        compatibilitySummary?.unclassifiedReadCount === 0 &&
+        compatibilitySummary?.budgetViolationCount === 0 &&
+        processSummary?.blockingRiskCount === 0 &&
+        processSummary?.unclassifiedReadCount === 0 &&
+        processSummary?.budgetViolationCount === 0,
+      {
+        missing:
+          stepMissing('compatibility-snapshot-read') ||
+          stepMissing('process-snapshot-read'),
+        compatibility: compatibilitySummary,
+        process: processSummary,
+      },
+      [
+        compatibilitySummary?.blockingRiskCount > 0 ? 'compatibility.blockingRisk' : '',
+        compatibilitySummary?.unclassifiedReadCount > 0 ? 'compatibility.unclassified' : '',
+        compatibilitySummary?.budgetViolationCount > 0 ? 'compatibility.budgetViolation' : '',
+        processSummary?.blockingRiskCount > 0 ? 'process.blockingRisk' : '',
+        processSummary?.unclassifiedReadCount > 0 ? 'process.unclassified' : '',
+        processSummary?.budgetViolationCount > 0 ? 'process.budgetViolation' : '',
+      ].filter(Boolean),
+    ),
+    buildChecklistItem(
+      'filesystem-master-data-boundary',
+      '文件系统不能反向造主数据',
+      stepOk('filesystem-master-data-source') &&
+        fileSystemSummary?.findingCount === 0 &&
+        fileSystemSummary?.unclassifiedFindingCount === 0,
+      {
+        missing: stepMissing('filesystem-master-data-source'),
+        findingCount: fileSystemSummary?.findingCount ?? null,
+        unclassifiedFindingCount: fileSystemSummary?.unclassifiedFindingCount ?? null,
+        approvedSourcePathCount: fileSystemSummary?.approvedSourcePathCount ?? null,
+      },
+      [
+        fileSystemSummary?.findingCount > 0 ? 'filesystem.finding' : '',
+        fileSystemSummary?.unclassifiedFindingCount > 0 ? 'filesystem.unclassified' : '',
+      ].filter(Boolean),
+    ),
+    buildChecklistItem(
+      'historical-master-data-quality',
+      '历史主数据字段清洗完成',
+      historicalQualityBlockerKeys.length === 0,
+      {
+        missing: stepMissing('readiness'),
+        blockerCount: historicalQualityBlockerKeys.length,
+        blockerValues: historicalQualityBlockerValues,
+      },
+      historicalQualityBlockerKeys,
+    ),
+    buildChecklistItem(
+      'pre-sku-formalization-lifecycle',
+      'PreSku 正式化生命周期一致',
+      !preSkuLifecycleBlocked &&
+        preSkuValidationSummary?.valid === true &&
+        Number(preSkuValidationSummary?.candidateCount ?? 0) === 0,
+      {
+        missing:
+          stepMissing('readiness') ||
+          stepMissing('pre-sku-formalization-repair-plan-validation'),
+        validationValid: preSkuValidationSummary?.valid ?? null,
+        candidateCount: preSkuValidationSummary?.candidateCount ?? null,
+        staleCandidateCount: preSkuValidationSummary?.staleCandidateCount ?? null,
+        blockerValues: preSkuLifecycleBlockerValues,
+      },
+      preSkuLifecycleBlocked ? ['preSkuFormalizationLifecycleMismatchCount'] : [],
+    ),
+    buildChecklistItem(
+      'authorized-foundation-runbook',
+      '授权结构修复与 baseline 施工链',
+      authorizedRepairSummary?.exactPhaseCommandAvailability?.available === true &&
+        authorizedRepairSummary?.blockerKeys?.length === 0,
+      {
+        missing: stepMissing('authorized-structure-repair-apply-plan'),
+        dryRun: authorizedRepairSummary?.dryRun ?? null,
+        readyToApply: authorizedRepairSummary?.readyToApply ?? null,
+        requiresExplicitAuthorization:
+          authorizedRepairSummary?.requiresExplicitAuthorization ?? null,
+        executionState: authorizedRepairSummary?.executionState ?? '',
+        exactPhaseCommandAvailability:
+          authorizedRepairSummary?.exactPhaseCommandAvailability ?? null,
+      },
+      authorizedRepairSummary?.blockerKeys || [],
+    ),
+  ]
+
+  return {
+    itemCount: items.length,
+    passedCount: items.filter((item) => item.status === 'passed').length,
+    blockedCount: items.filter((item) => item.status === 'blocked').length,
+    missingCount: items.filter((item) => item.status === 'missing').length,
+    complete: items.every((item) => item.status === 'passed'),
+    items,
+  }
+}
+
+function redactStepPreview(result, key) {
+  const preview = String(result?.[key] ?? '')
+  if (!result?.sensitive) return preview
+  return preview ? '[sensitive output redacted]' : ''
+}
+
+function buildAuditManifest({ outputDir, stepResults, checkedAt = new Date().toISOString() }) {
+  const blockers = uniqueBlockers(collectBlockers(stepResults))
+  const readiness = stepResults.find((result) => result.id === 'readiness')?.data ?? null
+  const foundationHardReadyGateReport =
+    stepResults.find((result) => result.id === 'foundation-hard-ready-gate')?.data ?? null
+  const preflight = stepResults.find((result) => result.id === 'foundation-preflight')?.data ?? null
+  const migrationPlan = stepResults.find((result) => result.id === 'foundation-migrate-plan')?.data ?? null
+  const foundationRequiredMigrationApplyPlan =
+    stepResults.find((result) => result.id === 'foundation-required-migration-apply-plan')?.data ?? null
+  const referenceEstimatorCostBoundary =
+    stepResults.find((result) => result.id === 'reference-estimator-cost-boundary')?.data ?? null
+  const fileSystemMasterDataSource =
+    stepResults.find((result) => result.id === 'filesystem-master-data-source')?.data ?? null
+  const compatibilitySnapshotRead =
+    stepResults.find((result) => result.id === 'compatibility-snapshot-read')?.data ?? null
+  const processSnapshotRead =
+    stepResults.find((result) => result.id === 'process-snapshot-read')?.data ?? null
+  const cleanupTemplate = stepResults.find((result) => result.id === 'cleanup-template')?.data ?? null
+  const preSkuFormalizationRepairPlan =
+    stepResults.find((result) => result.id === 'pre-sku-formalization-repair-plan')?.data ?? null
+  const preSkuFormalizationRepairPlanValidation =
+    stepResults.find((result) => result.id === 'pre-sku-formalization-repair-plan-validation')?.data ?? null
+  const preSkuFormalizationRepairExecutionTemplate =
+    stepResults.find((result) => result.id === 'pre-sku-formalization-repair-execution-template')?.data ?? null
+  const migrationRehearsal = stepResults.find((result) => result.id === 'migration-rehearsal')?.data ?? null
+  const baselineRepairPlan = stepResults.find((result) => result.id === 'baseline-repair-plan')?.data ?? null
+  const structureRepairRehearsal =
+    stepResults.find((result) => result.id === 'structure-repair-rehearsal')?.data ?? null
+  const authorizedStructureRepairApplyPlan =
+    stepResults.find((result) => result.id === 'authorized-structure-repair-apply-plan')?.data ?? null
+
+  const foundationHardReady =
+    foundationHardReadyGateReport?.foundationHardReadyGate?.hardReady === true
+
+  return {
+    mode: 'master-data-foundation-audit',
+    status:
+      readiness?.hardReady === true && foundationHardReady && blockers.length === 0
+        ? 'hard-ready'
+        : 'not-hard-ready',
+    hardReady: readiness?.hardReady === true && foundationHardReady && blockers.length === 0,
+    readyForFoundationMigration: preflight?.ready === true && migrationPlan?.readyToRun === true,
+    containsSensitiveCleanupTemplate: stepResults.some(
+      (result) => result.id === 'cleanup-template' && result.outputExists,
+    ),
+    containsSensitiveFoundationHardReadyGateReport: stepResults.some(
+      (result) => result.id === 'foundation-hard-ready-gate' && result.outputExists,
+    ),
+    containsSensitivePreSkuFormalizationRepairPlan: stepResults.some(
+      (result) => result.id === 'pre-sku-formalization-repair-plan' && result.outputExists,
+    ),
+    containsSensitivePreSkuFormalizationRepairExecutionTemplate: stepResults.some(
+      (result) =>
+        result.id === 'pre-sku-formalization-repair-execution-template' && result.outputExists,
+    ),
+    checkedAt,
+    outputDir,
+    stepCount: stepResults.length,
+    passedStepCount: stepResults.filter((result) => result.ok).length,
+    blockerCount: blockers.length,
+    blockers,
+    readinessSummary: buildReadinessSummary(readiness),
+    foundationHardReadyGateSummary:
+      buildFoundationHardReadyGateSummary(foundationHardReadyGateReport),
+    cleanupTemplateSummary: buildCleanupTemplateSummary(cleanupTemplate),
+    migrationRehearsalSummary: buildMigrationRehearsalSummary(migrationRehearsal),
+    baselineRepairPlanSummary: buildBaselineRepairPlanSummary(baselineRepairPlan),
+    foundationRequiredMigrationApplyPlanSummary:
+      buildFoundationRequiredMigrationApplyPlanSummary(foundationRequiredMigrationApplyPlan),
+    preSkuFormalizationRepairPlanSummary:
+      buildPreSkuFormalizationRepairPlanSummary(preSkuFormalizationRepairPlan),
+    preSkuFormalizationRepairPlanValidationSummary:
+      buildPreSkuFormalizationRepairPlanValidationSummary(
+        preSkuFormalizationRepairPlanValidation,
+      ),
+    preSkuFormalizationRepairExecutionTemplateSummary:
+      buildPreSkuFormalizationRepairExecutionTemplateSummary(
+        preSkuFormalizationRepairExecutionTemplate,
+      ),
+    compatibilitySnapshotReadSummary:
+      buildSnapshotReadBoundarySummary(compatibilitySnapshotRead, 'compatibility'),
+    processSnapshotReadSummary:
+      buildSnapshotReadBoundarySummary(processSnapshotRead, 'process'),
+    referenceEstimatorCostBoundarySummary:
+      buildReferenceEstimatorCostBoundarySummary(referenceEstimatorCostBoundary),
+    fileSystemMasterDataSourceSummary:
+      buildFileSystemMasterDataSourceSummary(fileSystemMasterDataSource),
+    structureRepairRehearsalSummary:
+      buildStructureRepairRehearsalSummary(structureRepairRehearsal),
+    authorizedStructureRepairApplyPlanSummary:
+      buildAuthorizedStructureRepairApplyPlanSummary(authorizedStructureRepairApplyPlan),
+    foundationCompletionChecklist: buildFoundationCompletionChecklist({
+      readiness,
+      truthSources: stepResults.find((result) => result.id === 'truth-sources')?.data ?? null,
+      codeBoundaries: stepResults.find((result) => result.id === 'code-boundaries')?.data ?? null,
+      compatibilitySnapshotRead,
+      processSnapshotRead,
+      fileSystemMasterDataSource,
+      preSkuFormalizationRepairPlanValidation,
+      authorizedStructureRepairApplyPlan,
+      stepResults,
+    }),
+    stepSummaries: stepResults.map((result) => ({
+      id: result.id,
+      label: result.label,
+      ok: result.ok,
+      status: result.status,
+      outputFile: result.outputFile,
+      outputExists: result.outputExists,
+      sensitive: Boolean(result.sensitive),
+      jsonParsed: Boolean(result.data),
+      jsonError: result.jsonError,
+      error: result.error,
+      stdoutPreview: redactStepPreview(result, 'stdoutPreview'),
+      stderrPreview: redactStepPreview(result, 'stderrPreview'),
+    })),
+  }
+}
+
+function writeJsonReport(filePath, payload) {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true })
+  fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return filePath
+}
+
+function runAudit(options = parseArgs(), env = process.env) {
+  fs.mkdirSync(options.outputDir, { recursive: true })
+  let shadowContext = null
+  const stepEnv = { ...env }
+
+  if (options.useDockerShadow && !stepEnv.SHADOW_DATABASE_URL) {
+    shadowContext = createDockerShadowDatabase(options, env)
+    stepEnv.SHADOW_DATABASE_URL = shadowContext.shadowDatabaseUrl
+  }
+
+  try {
+    const stepResults = auditSteps(options.outputDir, options).map((step) => runAuditStep(step, stepEnv))
+    const manifest = buildAuditManifest({
+      outputDir: options.outputDir,
+      stepResults,
+    })
+    const manifestWithShadow = {
+      ...manifest,
+      shadowDiffEvidence: {
+        provided: Boolean(stepEnv.SHADOW_DATABASE_URL),
+        source: shadowContext ? 'docker-shadow' : stepEnv.SHADOW_DATABASE_URL ? 'environment' : 'none',
+        dockerContainerName: shadowContext?.containerName || '',
+      },
+    }
+    const manifestFile = writeJsonReport(path.join(options.outputDir, 'manifest.json'), manifestWithShadow)
+    return {
+      ...manifestWithShadow,
+      manifestFile,
+    }
+  } finally {
+    shadowContext?.cleanup()
+  }
+}
+
+function main() {
+  const report = runAudit()
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.hardReady) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error))
+    process.exit(1)
+  }
+}
+
+module.exports = {
+  auditSteps,
+  buildAuditManifest,
+  buildAuthorizedStructureRepairApplyPlanSummary,
+  buildBaselineRepairPlanSummary,
+  buildCleanupTemplateSummary,
+  buildFileSystemMasterDataSourceSummary,
+  buildFoundationRequiredMigrationApplyPlanSummary,
+  buildFoundationHardReadyGateSummary,
+  buildFoundationCompletionChecklist,
+  buildMigrationRehearsalSummary,
+  countQualityDecisionPlaceholderFields,
+  buildPreSkuFormalizationRepairPlanSummary,
+  buildPreSkuFormalizationRepairPlanValidationSummary,
+  buildPreSkuFormalizationRepairExecutionTemplateSummary,
+  buildReadinessSummary,
+  buildReferenceEstimatorCostBoundarySummary,
+  buildStructureRepairRehearsalSummary,
+  buildSnapshotReadBoundarySummary,
+  collectBlockers,
+  countBlankFillFields,
+  countBlankMissingFillFields,
+  countByField,
+  createDockerShadowDatabase,
+  defaultOutputDir,
+  parseArgs,
+  redactStepPreview,
+  runAudit,
+  runAuditStep,
+  runDocker,
+  timestampForDirectory,
+  uniqueBlockers,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/sql/check-external-readonly-contract.sql b/furniture-3d-system/scripts/sql/check-external-readonly-contract.sql
new file mode 100644
index 00000000..41629ab1
--- /dev/null
+++ b/furniture-3d-system/scripts/sql/check-external-readonly-contract.sql
@@ -0,0 +1,560 @@
+-- External read-only contract health check.
+-- Run after applying the external schema migration.
+-- This script is read-only and only reports contract or data risks.
+
+WITH expected_views(view_name) AS (
+  VALUES
+    ('materials_v1'),
+    ('asset_variants_v1'),
+    ('product_skus_v1'),
+    ('product_assets_v1'),
+    ('product_bom_v1'),
+    ('intake_products_v1'),
+    ('intake_products_ready_v1'),
+    ('intake_sku_items_v1'),
+    ('intake_sku_items_ready_v1')
+)
+SELECT
+  'missing_external_view' AS check_name,
+  expected_views.view_name
+FROM expected_views
+LEFT JOIN information_schema.views existing_views
+  ON existing_views.table_schema = 'external'
+ AND existing_views.table_name = expected_views.view_name
+WHERE existing_views.table_name IS NULL
+ORDER BY expected_views.view_name;
+
+WITH expected_columns(view_name, column_name) AS (
+  VALUES
+    ('materials_v1', 'material_id'),
+    ('materials_v1', 'material_code'),
+    ('materials_v1', 'material_name'),
+    ('materials_v1', 'category_name'),
+    ('materials_v1', 'thumbnail_url'),
+    ('materials_v1', 'texture_url'),
+    ('materials_v1', 'normal_map_url'),
+    ('materials_v1', 'base_color'),
+    ('materials_v1', 'metalness'),
+    ('materials_v1', 'roughness'),
+    ('materials_v1', 'opacity'),
+    ('materials_v1', 'record_status'),
+    ('asset_variants_v1', 'asset_variant_id'),
+    ('asset_variants_v1', 'spec_code'),
+    ('asset_variants_v1', 'spec_name'),
+    ('asset_variants_v1', 'asset_type'),
+    ('asset_variants_v1', 'asset_status'),
+    ('asset_variants_v1', 'asset_family_id'),
+    ('asset_variants_v1', 'asset_family_code'),
+    ('asset_variants_v1', 'asset_family_name'),
+    ('asset_variants_v1', 'asset_series_id'),
+    ('asset_variants_v1', 'asset_series_code'),
+    ('asset_variants_v1', 'asset_series_name'),
+    ('asset_variants_v1', 'product_category_id'),
+    ('asset_variants_v1', 'product_category_name'),
+    ('asset_variants_v1', 'size_label'),
+    ('asset_variants_v1', 'dimensions'),
+    ('asset_variants_v1', 'model_url'),
+    ('asset_variants_v1', 'thumbnail_url'),
+    ('asset_variants_v1', 'barcode'),
+    ('asset_variants_v1', 'supplier_name'),
+    ('asset_variants_v1', 'supplier_code'),
+    ('asset_variants_v1', 'version_no'),
+    ('asset_variants_v1', 'substrate_id'),
+    ('asset_variants_v1', 'substrate_name'),
+    ('asset_variants_v1', 'finish_id'),
+    ('asset_variants_v1', 'finish_code'),
+    ('asset_variants_v1', 'finish_name'),
+    ('asset_variants_v1', 'material_label'),
+    ('asset_variants_v1', 'weight_kg'),
+    ('asset_variants_v1', 'cost_price'),
+    ('asset_variants_v1', 'estimated_cost_price'),
+    ('asset_variants_v1', 'created_at'),
+    ('asset_variants_v1', 'updated_at'),
+    ('product_skus_v1', 'product_id'),
+    ('product_skus_v1', 'product_model_number'),
+    ('product_skus_v1', 'product_business_key'),
+    ('product_skus_v1', 'product_name'),
+    ('product_skus_v1', 'product_description'),
+    ('product_skus_v1', 'product_category_id'),
+    ('product_skus_v1', 'product_category_name'),
+    ('product_skus_v1', 'product_thumbnail_url'),
+    ('product_skus_v1', 'product_model_url'),
+    ('product_skus_v1', 'sku_id'),
+    ('product_skus_v1', 'sku_code'),
+    ('product_skus_v1', 'sku_business_key'),
+    ('product_skus_v1', 'sku_name'),
+    ('product_skus_v1', 'price'),
+    ('product_skus_v1', 'cost_price'),
+    ('product_skus_v1', 'stock'),
+    ('product_skus_v1', 'is_active'),
+    ('product_skus_v1', 'record_status'),
+    ('product_skus_v1', 'model_url'),
+    ('product_skus_v1', 'image_url'),
+    ('product_skus_v1', 'image_urls'),
+    ('product_skus_v1', 'source_pre_sku_id'),
+    ('product_skus_v1', 'source_asset_variant_id'),
+    ('product_skus_v1', 'source_asset_variant_ids'),
+    ('product_skus_v1', 'asset_family_code'),
+    ('product_skus_v1', 'asset_family_name'),
+    ('product_skus_v1', 'spec_code'),
+    ('product_skus_v1', 'spec_name'),
+    ('product_skus_v1', 'barcode'),
+    ('product_skus_v1', 'size_json'),
+    ('product_skus_v1', 'color'),
+    ('product_skus_v1', 'material'),
+    ('product_skus_v1', 'source_status'),
+    ('product_skus_v1', 'synced_at'),
+    ('product_skus_v1', 'warehouse_location_id'),
+    ('product_skus_v1', 'warehouse_location_code'),
+    ('product_skus_v1', 'warehouse_location_name'),
+    ('product_skus_v1', 'created_at'),
+    ('product_skus_v1', 'updated_at'),
+    ('product_assets_v1', 'asset_type'),
+    ('product_assets_v1', 'product_id'),
+    ('product_assets_v1', 'sku_id'),
+    ('product_assets_v1', 'asset_url'),
+    ('product_assets_v1', 'file_name'),
+    ('product_assets_v1', 'mime_type'),
+    ('product_assets_v1', 'sort_order'),
+    ('product_assets_v1', 'product_business_key'),
+    ('product_assets_v1', 'sku_business_key'),
+    ('product_bom_v1', 'item_type'),
+    ('product_bom_v1', 'product_id'),
+    ('product_bom_v1', 'sku_id'),
+    ('product_bom_v1', 'item_id'),
+    ('product_bom_v1', 'item_code'),
+    ('product_bom_v1', 'item_name'),
+    ('product_bom_v1', 'quantity'),
+    ('product_bom_v1', 'unit'),
+    ('product_bom_v1', 'material_id'),
+    ('product_bom_v1', 'material_code'),
+    ('product_bom_v1', 'material_name'),
+    ('product_bom_v1', 'dimensions'),
+    ('product_bom_v1', 'unit_cost'),
+    ('product_bom_v1', 'total_cost'),
+    ('product_bom_v1', 'created_at'),
+    ('product_bom_v1', 'updated_at'),
+    ('product_bom_v1', 'product_business_key'),
+    ('product_bom_v1', 'sku_business_key'),
+    ('intake_products_v1', 'intake_product_id'),
+    ('intake_products_v1', 'spu'),
+    ('intake_products_v1', 'spu_base'),
+    ('intake_products_v1', 'brand'),
+    ('intake_products_v1', 'product_business_key'),
+    ('intake_products_v1', 'product_name'),
+    ('intake_products_v1', 'product_image_url'),
+    ('intake_products_v1', 'product_category'),
+    ('intake_products_v1', 'sales_category'),
+    ('intake_products_v1', 'product_year'),
+    ('intake_products_v1', 'product_status'),
+    ('intake_products_v1', 'designer'),
+    ('intake_products_v1', 'operator'),
+    ('intake_products_v1', 'purchaser'),
+    ('intake_products_v1', 'product_planning'),
+    ('intake_products_v1', 'visual_planning'),
+    ('intake_products_v1', 'structure_designer'),
+    ('intake_products_v1', 'purchase_owner'),
+    ('intake_products_v1', 'product_development_kind'),
+    ('intake_products_v1', 'goods_type'),
+    ('intake_products_v1', 'material_type'),
+    ('intake_products_v1', 'production_type'),
+    ('intake_products_v1', 'created_at'),
+    ('intake_products_v1', 'updated_at'),
+    ('intake_products_ready_v1', 'intake_product_id'),
+    ('intake_products_ready_v1', 'spu'),
+    ('intake_products_ready_v1', 'spu_base'),
+    ('intake_products_ready_v1', 'brand'),
+    ('intake_products_ready_v1', 'product_business_key'),
+    ('intake_products_ready_v1', 'product_name'),
+    ('intake_products_ready_v1', 'product_image_url'),
+    ('intake_products_ready_v1', 'product_category'),
+    ('intake_products_ready_v1', 'sales_category'),
+    ('intake_products_ready_v1', 'product_year'),
+    ('intake_products_ready_v1', 'product_status'),
+    ('intake_products_ready_v1', 'designer'),
+    ('intake_products_ready_v1', 'operator'),
+    ('intake_products_ready_v1', 'purchaser'),
+    ('intake_products_ready_v1', 'product_planning'),
+    ('intake_products_ready_v1', 'visual_planning'),
+    ('intake_products_ready_v1', 'structure_designer'),
+    ('intake_products_ready_v1', 'purchase_owner'),
+    ('intake_products_ready_v1', 'product_development_kind'),
+    ('intake_products_ready_v1', 'goods_type'),
+    ('intake_products_ready_v1', 'material_type'),
+    ('intake_products_ready_v1', 'production_type'),
+    ('intake_products_ready_v1', 'created_at'),
+    ('intake_products_ready_v1', 'updated_at'),
+    ('intake_sku_items_v1', 'intake_product_id'),
+    ('intake_sku_items_v1', 'spu'),
+    ('intake_sku_items_v1', 'brand'),
+    ('intake_sku_items_v1', 'product_business_key'),
+    ('intake_sku_items_v1', 'intake_sku_item_id'),
+    ('intake_sku_items_v1', 'sku_business_key'),
+    ('intake_sku_items_v1', 'sku_sequence'),
+    ('intake_sku_items_v1', 'batch_no'),
+    ('intake_sku_items_v1', 'image_url'),
+    ('intake_sku_items_v1', 'image_name'),
+    ('intake_sku_items_v1', 'model'),
+    ('intake_sku_items_v1', 'sku_code'),
+    ('intake_sku_items_v1', 'spec_name'),
+    ('intake_sku_items_v1', 'barcode'),
+    ('intake_sku_items_v1', 'size'),
+    ('intake_sku_items_v1', 'color'),
+    ('intake_sku_items_v1', 'material'),
+    ('intake_sku_items_v1', 'version_no'),
+    ('intake_sku_items_v1', 'attribute_code'),
+    ('intake_sku_items_v1', 'drawing_id'),
+    ('intake_sku_items_v1', 'install_method'),
+    ('intake_sku_items_v1', 'execute_standard'),
+    ('intake_sku_items_v1', 'manufacturer'),
+    ('intake_sku_items_v1', 'manufacturer_code'),
+    ('intake_sku_items_v1', 'sales_status'),
+    ('intake_sku_items_v1', 'model_3d_url'),
+    ('intake_sku_items_v1', 'source'),
+    ('intake_sku_items_v1', 'source_table'),
+    ('intake_sku_items_v1', 'source_sku_id'),
+    ('intake_sku_items_v1', 'missing_required_fields'),
+    ('intake_sku_items_v1', 'data_quality_status'),
+    ('intake_sku_items_v1', 'content_locked'),
+    ('intake_sku_items_v1', 'sort_order'),
+    ('intake_sku_items_ready_v1', 'intake_product_id'),
+    ('intake_sku_items_ready_v1', 'spu'),
+    ('intake_sku_items_ready_v1', 'brand'),
+    ('intake_sku_items_ready_v1', 'product_business_key'),
+    ('intake_sku_items_ready_v1', 'intake_sku_item_id'),
+    ('intake_sku_items_ready_v1', 'sku_business_key'),
+    ('intake_sku_items_ready_v1', 'sku_sequence'),
+    ('intake_sku_items_ready_v1', 'batch_no'),
+    ('intake_sku_items_ready_v1', 'image_url'),
+    ('intake_sku_items_ready_v1', 'image_name'),
+    ('intake_sku_items_ready_v1', 'model'),
+    ('intake_sku_items_ready_v1', 'sku_code'),
+    ('intake_sku_items_ready_v1', 'spec_name'),
+    ('intake_sku_items_ready_v1', 'barcode'),
+    ('intake_sku_items_ready_v1', 'size'),
+    ('intake_sku_items_ready_v1', 'color'),
+    ('intake_sku_items_ready_v1', 'material'),
+    ('intake_sku_items_ready_v1', 'version_no'),
+    ('intake_sku_items_ready_v1', 'attribute_code'),
+    ('intake_sku_items_ready_v1', 'drawing_id'),
+    ('intake_sku_items_ready_v1', 'install_method'),
+    ('intake_sku_items_ready_v1', 'execute_standard'),
+    ('intake_sku_items_ready_v1', 'manufacturer'),
+    ('intake_sku_items_ready_v1', 'manufacturer_code'),
+    ('intake_sku_items_ready_v1', 'sales_status'),
+    ('intake_sku_items_ready_v1', 'model_3d_url'),
+    ('intake_sku_items_ready_v1', 'source'),
+    ('intake_sku_items_ready_v1', 'source_table'),
+    ('intake_sku_items_ready_v1', 'source_sku_id'),
+    ('intake_sku_items_ready_v1', 'missing_required_fields'),
+    ('intake_sku_items_ready_v1', 'data_quality_status'),
+    ('intake_sku_items_ready_v1', 'content_locked'),
+    ('intake_sku_items_ready_v1', 'sort_order')
+)
+SELECT
+  'missing_external_column' AS check_name,
+  expected_columns.view_name,
+  expected_columns.column_name
+FROM expected_columns
+LEFT JOIN information_schema.columns existing_columns
+  ON existing_columns.table_schema = 'external'
+ AND existing_columns.table_name = expected_columns.view_name
+ AND existing_columns.column_name = expected_columns.column_name
+WHERE existing_columns.column_name IS NULL
+ORDER BY expected_columns.view_name, expected_columns.column_name;
+
+SELECT
+  'external_contract_private_column_risk' AS check_name,
+  table_name AS view_name,
+  column_name
+FROM information_schema.columns
+WHERE table_schema = 'external'
+  AND column_name ~* '(payload|attributes|business_data|visibility|department|team|storage_key|file_path|password|token|secret)'
+ORDER BY table_name, column_name;
+
+SELECT
+  'external_view_json_source_dependency_risk' AS check_name,
+  viewname AS view_name,
+  CASE
+    WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"payload\"' THEN 'payload'
+    WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"attributes\"' THEN 'attributes'
+    WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"businessData\"' THEN 'businessData'
+    WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"displaySummary\"' THEN 'displaySummary'
+    WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"familySelection\"' THEN 'familySelection'
+    ELSE 'json_operator'
+  END AS dependency_hint
+FROM pg_views
+WHERE schemaname = 'external'
+  AND (
+    pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '\"(payload|attributes|businessData|displaySummary|familySelection)\"'
+    OR pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '(->>|->|jsonb_array_elements)'
+  )
+ORDER BY viewname, dependency_hint;
+
+SELECT
+  'external_reader_public_schema_grant_risk' AS check_name,
+  grantee,
+  table_schema,
+  table_name,
+  privilege_type
+FROM information_schema.table_privileges
+WHERE grantee = 'external_reader'
+  AND table_schema = 'public'
+ORDER BY table_name, privilege_type;
+
+SELECT
+  'external_reader_non_select_grant_risk' AS check_name,
+  grantee,
+  table_schema,
+  table_name,
+  privilege_type
+FROM information_schema.table_privileges
+WHERE grantee = 'external_reader'
+  AND table_schema = 'external'
+  AND privilege_type <> 'SELECT'
+ORDER BY table_name, privilege_type;
+
+SELECT
+  'external_view_row_count' AS check_name,
+  'materials_v1' AS view_name,
+  COUNT(*)::integer AS row_count
+FROM external.materials_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'asset_variants_v1',
+  COUNT(*)::integer
+FROM external.asset_variants_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'product_skus_v1',
+  COUNT(*)::integer
+FROM external.product_skus_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'product_assets_v1',
+  COUNT(*)::integer
+FROM external.product_assets_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'product_bom_v1',
+  COUNT(*)::integer
+FROM external.product_bom_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'intake_products_v1',
+  COUNT(*)::integer
+FROM external.intake_products_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'intake_products_ready_v1',
+  COUNT(*)::integer
+FROM external.intake_products_ready_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'intake_sku_items_v1',
+  COUNT(*)::integer
+FROM external.intake_sku_items_v1
+UNION ALL
+SELECT
+  'external_view_row_count',
+  'intake_sku_items_ready_v1',
+  COUNT(*)::integer
+FROM external.intake_sku_items_ready_v1;
+
+SELECT
+  'product_skus_blank_key_fields' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(sku_code, '') IS NULL) AS blank_sku_code_count,
+  COUNT(*) FILTER (WHERE NULLIF(product_model_number, '') IS NULL) AS blank_product_model_number_count,
+  COUNT(*) FILTER (WHERE NULLIF(sku_name, '') IS NULL) AS blank_sku_name_count,
+  COUNT(*) FILTER (WHERE NULLIF(product_business_key, '') IS NULL) AS blank_product_business_key_count,
+  COUNT(*) FILTER (WHERE NULLIF(sku_business_key, '') IS NULL) AS blank_sku_business_key_count
+FROM external.product_skus_v1;
+
+SELECT
+  'asset_variants_blank_key_fields' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(spec_code, '') IS NULL) AS blank_spec_code_count,
+  COUNT(*) FILTER (WHERE NULLIF(spec_name, '') IS NULL) AS blank_spec_name_count,
+  COUNT(*) FILTER (WHERE NULLIF(asset_family_code, '') IS NULL) AS blank_asset_family_code_count
+FROM external.asset_variants_v1;
+
+SELECT
+  'materials_blank_key_fields' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(material_code, '') IS NULL) AS blank_material_code_count,
+  COUNT(*) FILTER (WHERE NULLIF(material_name, '') IS NULL) AS blank_material_name_count
+FROM external.materials_v1;
+
+SELECT
+  'product_bom_blank_key_fields' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(product_business_key, '') IS NULL) AS blank_product_business_key_count,
+  COUNT(*) FILTER (WHERE NULLIF(item_code, '') IS NULL) AS blank_item_code_count,
+  COUNT(*) FILTER (WHERE NULLIF(item_name, '') IS NULL) AS blank_item_name_count,
+  COUNT(*) FILTER (
+    WHERE item_type = 'PANEL'
+      AND NULLIF(material_code, '') IS NULL
+  ) AS blank_panel_material_code_count
+FROM external.product_bom_v1;
+
+SELECT
+  'intake_sku_items_blank_key_fields' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(sku_code, '') IS NULL) AS blank_sku_code_count,
+  COUNT(*) FILTER (WHERE NULLIF(spec_name, '') IS NULL) AS blank_spec_name_count,
+  COUNT(*) FILTER (WHERE NULLIF(model, '') IS NULL) AS blank_model_count
+FROM external.intake_sku_items_v1;
+
+SELECT
+  'intake_sku_items_quality_status_count' AS check_name,
+  data_quality_status,
+  COUNT(*)::integer AS row_count
+FROM external.intake_sku_items_v1
+GROUP BY data_quality_status
+ORDER BY data_quality_status;
+
+SELECT
+  'intake_sku_items_ready_quality_violation' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM external.intake_sku_items_ready_v1
+WHERE data_quality_status <> 'READY';
+
+SELECT
+  'intake_ready_business_key_missing_risk' AS check_name,
+  (
+    SELECT COUNT(*)::integer
+    FROM external.intake_products_ready_v1
+    WHERE NULLIF(product_business_key, '') IS NULL
+  ) AS missing_product_business_key_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM external.intake_sku_items_ready_v1
+    WHERE NULLIF(product_business_key, '') IS NULL
+       OR NULLIF(sku_business_key, '') IS NULL
+  ) AS missing_sku_business_key_count;
+
+SELECT
+  'product_sku_business_key_duplicate_risk' AS check_name,
+  sku_business_key,
+  COUNT(*)::integer AS duplicate_count
+FROM external.product_skus_v1
+WHERE NULLIF(sku_business_key, '') IS NOT NULL
+GROUP BY sku_business_key
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, sku_business_key
+LIMIT 20;
+
+SELECT
+  'intake_product_business_key_duplicate_risk' AS check_name,
+  product_business_key,
+  COUNT(*)::integer AS duplicate_count
+FROM external.intake_products_ready_v1
+WHERE NULLIF(product_business_key, '') IS NOT NULL
+GROUP BY product_business_key
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, product_business_key
+LIMIT 20;
+
+SELECT
+  'intake_sku_business_key_duplicate_risk' AS check_name,
+  sku_business_key,
+  COUNT(*)::integer AS duplicate_count
+FROM external.intake_sku_items_ready_v1
+WHERE NULLIF(sku_business_key, '') IS NOT NULL
+GROUP BY sku_business_key
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, sku_business_key
+LIMIT 20;
+
+SELECT
+  'product_assets_data_url_risk' AS check_name,
+  asset_type,
+  COUNT(*) AS data_url_count
+FROM external.product_assets_v1
+WHERE asset_url ~* '^data:'
+GROUP BY asset_type
+ORDER BY asset_type;
+
+SELECT
+  'product_assets_business_key_missing_risk' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(product_business_key, '') IS NULL) AS missing_product_business_key_count,
+  COUNT(*) FILTER (WHERE NULLIF(sku_business_key, '') IS NULL) AS missing_sku_business_key_count
+FROM external.product_assets_v1;
+
+SELECT
+  'product_bom_business_key_missing_risk' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(product_business_key, '') IS NULL) AS missing_product_business_key_count,
+  COUNT(*) FILTER (
+    WHERE sku_id IS NOT NULL
+      AND NULLIF(sku_business_key, '') IS NULL
+  ) AS missing_sku_business_key_count
+FROM external.product_bom_v1;
+
+SELECT
+  'duplicate_product_sku_code_risk' AS check_name,
+  sku_code,
+  COUNT(*)::integer AS duplicate_count
+FROM external.product_skus_v1
+WHERE NULLIF(sku_code, '') IS NOT NULL
+GROUP BY sku_code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, sku_code
+LIMIT 20;
+
+SELECT
+  'duplicate_asset_variant_code_risk' AS check_name,
+  spec_code,
+  COUNT(*)::integer AS duplicate_count
+FROM external.asset_variants_v1
+WHERE NULLIF(spec_code, '') IS NOT NULL
+GROUP BY spec_code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, spec_code
+LIMIT 20;
+
+SELECT
+  'duplicate_material_code_risk' AS check_name,
+  material_code,
+  COUNT(*)::integer AS duplicate_count
+FROM external.materials_v1
+WHERE NULLIF(material_code, '') IS NOT NULL
+GROUP BY material_code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, material_code
+LIMIT 20;
+
+SELECT
+  'duplicate_product_barcode_risk' AS check_name,
+  barcode,
+  COUNT(*)::integer AS duplicate_count
+FROM external.product_skus_v1
+WHERE NULLIF(barcode, '') IS NOT NULL
+GROUP BY barcode
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, barcode
+LIMIT 20;
+
+SELECT
+  'duplicate_intake_sku_code_risk' AS check_name,
+  sku_code,
+  COUNT(*)::integer AS duplicate_count
+FROM external.intake_sku_items_v1
+WHERE NULLIF(sku_code, '') IS NOT NULL
+GROUP BY sku_code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, sku_code
+LIMIT 20;
+
+SELECT
+  'duplicate_intake_barcode_risk' AS check_name,
+  barcode,
+  COUNT(*)::integer AS duplicate_count
+FROM external.intake_sku_items_v1
+WHERE NULLIF(barcode, '') IS NOT NULL
+GROUP BY barcode
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, barcode
+LIMIT 20;
diff --git a/furniture-3d-system/scripts/sql/check-internal-master-data-foundation.sql b/furniture-3d-system/scripts/sql/check-internal-master-data-foundation.sql
new file mode 100644
index 00000000..a0cd61c1
--- /dev/null
+++ b/furniture-3d-system/scripts/sql/check-internal-master-data-foundation.sql
@@ -0,0 +1,1296 @@
+-- Internal master data foundation health check.
+-- Read-only. Reports data quality and truth-source risks inside the system.
+
+WITH required_index_guards(index_name, table_name, predicate_hint, definition_hint) AS (
+  VALUES
+    ('AssetSeries_code_key', 'AssetSeries', NULL, NULL),
+    ('AssetFamily_code_key', 'AssetFamily', NULL, NULL),
+    ('AssetVariant_code_key', 'AssetVariant', NULL, NULL),
+    ('AssetVariant_assetFamilyId_identityKey_key', 'AssetVariant', NULL, NULL),
+    ('AssetVariant_barcode_active_key', 'AssetVariant', '"deletedAt" IS NULL', 'upper(btrim('),
+    ('AssetFamilySeriesCompatibility_assetFamilyId_assetSeriesId_key', 'AssetFamilySeriesCompatibility', NULL, NULL),
+    ('DraftGroup_code_key', 'DraftGroup', NULL, NULL),
+    ('PlanningTemplate_code_key', 'PlanningTemplate', NULL, NULL),
+    ('Substrate_code_key', 'Substrate', NULL, NULL),
+    ('WarehouseLocation_code_key', 'WarehouseLocation', NULL, NULL),
+    ('User_email_normalized_key', 'User', NULL, 'lower(btrim('),
+    ('User_name_normalized_key', 'User', NULL, 'btrim'),
+    ('Department_name_normalized_key', 'Department', NULL, 'btrim'),
+    ('Department_externalId_normalized_key', 'Department', 'NULLIF(btrim', 'btrim'),
+    ('EmployeeDirectory_dingtalkUserId_normalized_key', 'EmployeeDirectory', 'NULLIF(btrim', 'btrim'),
+    ('EmployeeDirectory_dingtalkUnionId_normalized_key', 'EmployeeDirectory', 'NULLIF(btrim', 'btrim'),
+    ('EmployeeDirectory_jobNumber_normalized_key', 'EmployeeDirectory', 'NULLIF(btrim', 'btrim'),
+    ('EmployeeDirectory_mobile_normalized_key', 'EmployeeDirectory', 'NULLIF(btrim', 'btrim'),
+    ('WarehouseLocation_active_position_key', 'WarehouseLocation', '"isActive" = true', 'lower(btrim('),
+    ('PackagedItem_code_key', 'PackagedItem', NULL, NULL),
+    ('PreSku_draftGroupId_sequence_key', 'PreSku', NULL, NULL),
+    ('Product_modelNumber_key', 'Product', NULL, NULL),
+    ('ProductSKU_skuCode_key', 'ProductSKU', NULL, NULL),
+    ('ProductSKU_active_skuCode_normalized_key', 'ProductSKU', '"deletedAt" IS NULL', 'upper(btrim('),
+    ('ProductSKU_sourcePreSkuId_key', 'ProductSKU', NULL, NULL),
+    ('IntakeNonIntegratedProduct_spu_brand_key', 'IntakeNonIntegratedProduct', NULL, NULL),
+    ('IntakeNonIntegratedProduct_spu_brand_normalized_key', 'IntakeNonIntegratedProduct', NULL, 'upper(btrim('),
+    ('ProductSkuAssetProfile_skuId_key', 'ProductSkuAssetProfile', NULL, NULL),
+    ('ProductSkuAssetProfile_barcode_active_non_empty_key', 'ProductSkuAssetProfile', '"skuDeletedAt" IS NULL', 'upper(btrim('),
+    ('PreSkuBasicInfo_preSkuId_key', 'PreSkuBasicInfo', NULL, NULL),
+    ('PreSkuBasicInfo_formalSkuCode_non_empty_key', 'PreSkuBasicInfo', 'NULLIF(btrim(', 'upper(btrim('),
+    ('PreSkuBasicInfo_barcode_non_empty_key', 'PreSkuBasicInfo', 'NULLIF(btrim(', 'upper(btrim('),
+    ('IntakeNonIntegratedProductProfile_productId_key', 'IntakeNonIntegratedProductProfile', NULL, NULL),
+    ('IntakeNonIntegratedSkuItem_productId_skuItemId_key', 'IntakeNonIntegratedSkuItem', NULL, NULL),
+    ('IntakeNonIntegratedSkuItem_skuCode_non_empty_key', 'IntakeNonIntegratedSkuItem', 'NULLIF(btrim(', 'upper(btrim('),
+    ('IntakeNonIntegratedSkuItem_barcode_non_empty_key', 'IntakeNonIntegratedSkuItem', 'NULLIF(btrim(', 'upper(btrim('),
+    ('MasterDataQualityDecision_open_target_key', 'MasterDataQualityDecision', 'status = ''APPROVED_INCOMPLETE''', NULL),
+    ('ProductPatentRecord_patentGroupKey_key', 'ProductPatentRecord', NULL, NULL),
+    ('IntakeReferenceLibraryItem_libraryType_itemKey_key', 'IntakeReferenceLibraryItem', NULL, NULL),
+    ('IntakeReferenceLibraryItem_libraryType_code_non_empty_key', 'IntakeReferenceLibraryItem', 'NULLIF(btrim(code),', 'upper(btrim('),
+    ('IntakeReferenceLibraryItem_libraryType_itemKey_normalized_key', 'IntakeReferenceLibraryItem', NULL, 'lower(btrim('),
+    ('IntakeReferenceLibraryItem_spu_rule_name_non_empty_key', 'IntakeReferenceLibraryItem', '"libraryType" = ''SPU_RULE''', NULL),
+    ('IntakeReferenceLibraryItem_spu_rule_name_normalized_key', 'IntakeReferenceLibraryItem', '"libraryType" = ''SPU_RULE''', 'lower(btrim('),
+    ('SpuNumberCounter_productCategory_key', 'SpuNumberCounter', NULL, NULL),
+    ('SpuNumberCounter_productCategory_normalized_key', 'SpuNumberCounter', NULL, 'lower(btrim('),
+    ('SpuNumberCounter_prefix_key', 'SpuNumberCounter', NULL, NULL),
+    ('Material_code_key', 'Material', NULL, NULL),
+    ('Hardware_code_key', 'Hardware', NULL, NULL),
+    ('CommonComponent_code_key', 'CommonComponent', NULL, NULL),
+    ('BrandMaterialBinding_brand_material_normalized_key', 'BrandMaterialBinding', NULL, 'lower(btrim('),
+    ('Panel_product_sku_code_normalized_key', 'Panel', NULL, 'upper(btrim('),
+    ('ProductCategory_name_normalized_key', 'ProductCategory', NULL, 'lower(btrim('),
+    ('MaterialCategory_name_normalized_key', 'MaterialCategory', NULL, 'lower(btrim('),
+    ('HardwareCategory_name_normalized_key', 'HardwareCategory', NULL, 'lower(btrim('),
+    ('CommonComponentCategory_name_normalized_key', 'CommonComponentCategory', NULL, 'lower(btrim('),
+    ('SubstrateCategory_name_normalized_key', 'SubstrateCategory', NULL, 'lower(btrim('),
+    ('SubstrateEnvironmentGrade_name_normalized_key', 'SubstrateEnvironmentGrade', NULL, 'lower(btrim('),
+    ('SubstrateSurfaceOption_name_normalized_key', 'SubstrateSurfaceOption', NULL, 'lower(btrim('),
+    ('SubstrateSystemNameOption_name_normalized_key', 'SubstrateSystemNameOption', NULL, 'lower(btrim('),
+    ('SubstrateThicknessSpec_name_normalized_key', 'SubstrateThicknessSpec', NULL, 'lower(btrim('),
+    ('ProviderConfig_active_service_key', 'ProviderConfig', '"isActive" = true', NULL),
+    ('ThemeConfig_name_normalized_key', 'ThemeConfig', NULL, 'lower(btrim('),
+    ('ThemeConfig_default_key', 'ThemeConfig', '"isDefault" = true', NULL)
+)
+SELECT
+  'missing_required_index_guard' AS check_name,
+  guard.index_name,
+  guard.table_name,
+  pg_get_expr(pg_idx.indpred, pg_idx.indrelid) AS actual_predicate,
+  guard.predicate_hint AS expected_predicate_hint,
+  pg_get_indexdef(idx.oid) AS actual_definition,
+  guard.definition_hint AS expected_definition_hint
+FROM required_index_guards guard
+LEFT JOIN pg_class idx ON idx.relname = guard.index_name
+LEFT JOIN pg_index pg_idx ON pg_idx.indexrelid = idx.oid
+LEFT JOIN pg_class table_cls ON table_cls.oid = pg_idx.indrelid
+LEFT JOIN pg_namespace ns ON ns.oid = table_cls.relnamespace
+WHERE idx.oid IS NULL
+   OR ns.nspname <> 'public'
+   OR table_cls.relname <> guard.table_name
+   OR pg_idx.indisunique IS DISTINCT FROM true
+   OR (
+    guard.predicate_hint IS NOT NULL
+    AND COALESCE(pg_get_expr(pg_idx.indpred, pg_idx.indrelid), '') NOT LIKE '%' || guard.predicate_hint || '%'
+   )
+   OR (
+    guard.definition_hint IS NOT NULL
+    AND COALESCE(pg_get_indexdef(idx.oid), '') NOT LIKE '%' || guard.definition_hint || '%'
+   )
+ORDER BY guard.index_name;
+
+WITH required_constraint_guards(constraint_name, table_name, expression_hint) AS (
+  VALUES
+    ('IntakeProductProfile_developmentKind_allowed', 'IntakeNonIntegratedProductProfile', '"productDevelopmentKind" = '''''),
+    ('IntakeNonIntegratedSkuItem_missingRequiredFields_allowed', 'IntakeNonIntegratedSkuItem', 'missingRequiredFields'),
+    ('IntakeNonIntegratedSkuItem_quality_state_required_fields', 'IntakeNonIntegratedSkuItem', 'dataQualityStatus'),
+    ('MasterDataQualityDecision_target_not_blank', 'MasterDataQualityDecision', 'targetType'),
+    ('MasterDataQualityDecision_status_allowed', 'MasterDataQualityDecision', 'APPROVED_INCOMPLETE'),
+    ('MasterDataQualityDecision_reason_not_blank', 'MasterDataQualityDecision', 'reason'),
+    ('MasterDataQualityDecision_decidedBy_not_blank', 'MasterDataQualityDecision', 'decidedBy'),
+    ('MasterDataQualityDecision_reason_not_placeholder', 'MasterDataQualityDecision', '待确认'),
+    ('MasterDataQualityDecision_decidedBy_not_placeholder', 'MasterDataQualityDecision', '待确认'),
+    ('MasterDataQualityDecision_resolvedBy_not_placeholder', 'MasterDataQualityDecision', '待确认'),
+    ('MasterDataQualityDecision_resolved_state_valid', 'MasterDataQualityDecision', 'resolvedAt'),
+    ('SpuNumberCounter_productCategory_not_blank', 'SpuNumberCounter', 'productCategory'),
+    ('SpuNumberCounter_productCategory_normalized', 'SpuNumberCounter', 'btrim'),
+    ('SpuNumberCounter_prefix_not_blank', 'SpuNumberCounter', 'prefix'),
+    ('SpuNumberCounter_prefix_normalized', 'SpuNumberCounter', 'upper(btrim'),
+    ('SpuNumberCounter_lastUsedIndex_non_negative', 'SpuNumberCounter', 'lastUsedIndex'),
+    ('SpuNumberCounter_sourceLibraryItemId_normalized', 'SpuNumberCounter', 'sourceLibraryItemId'),
+    ('ProductSKU_active_skuCode_not_deleted_marker', 'ProductSKU', '__deleted__'),
+    ('ProductSKU_price_cost_stock_non_negative', 'ProductSKU', '"costPrice"'),
+    ('ProductSKU_soft_delete_identity_valid', 'ProductSKU', 'originalSkuCode'),
+    ('ProductSKU_no_soft_delete_lifecycle_attributes', 'ProductSKU', '_originalSkuCode'),
+    ('ProductSKU_soft_delete_tombstone_valid', 'ProductSKU', 'deletedCodeAt'),
+    ('ProductSKU_no_formal_truth_attributes', 'ProductSKU', 'skuName'),
+    ('AssetSeries_code_normalized', 'AssetSeries', 'upper(btrim'),
+    ('AssetSeries_identity_valid', 'AssetSeries', 'sortOrder'),
+    ('AssetSeries_metadata_object', 'AssetSeries', 'jsonb_typeof'),
+    ('AssetFamily_code_normalized', 'AssetFamily', 'upper(btrim'),
+    ('AssetFamily_identity_valid', 'AssetFamily', 'connectionRoles'),
+    ('AssetFamily_metadata_object', 'AssetFamily', 'jsonb_typeof'),
+    ('AssetFamily_lifecycle_state_valid', 'AssetFamily', 'PENDING_REVIEW'),
+    ('DraftGroup_code_normalized', 'DraftGroup', 'upper(btrim'),
+    ('DraftGroup_identity_valid', 'DraftGroup', 'btrim'),
+    ('DraftGroup_summary_object', 'DraftGroup', 'jsonb_typeof'),
+    ('DraftGroup_optional_text_not_blank', 'DraftGroup', 'description'),
+    ('IntakeReferenceLibraryItem_code_normalized', 'IntakeReferenceLibraryItem', 'upper(btrim'),
+    ('IntakeReferenceLibraryItem_code_required', 'IntakeReferenceLibraryItem', 'NULLIF(btrim'),
+    ('IntakeReferenceLibraryItem_libraryType_allowed', 'IntakeReferenceLibraryItem', 'PACKAGING_MATERIAL'),
+    ('IntakeReferenceLibraryItem_itemKey_required', 'IntakeReferenceLibraryItem', 'btrim'),
+    ('IntakeReferenceLibraryItem_letter_normalized', 'IntakeReferenceLibraryItem', 'upper(btrim'),
+    ('IntakeReferenceLibraryItem_spu_rule_name_normalized', 'IntakeReferenceLibraryItem', 'SPU_RULE'),
+    ('PlanningTemplate_code_normalized', 'PlanningTemplate', 'upper(btrim'),
+    ('PlanningTemplate_name_not_blank', 'PlanningTemplate', 'name'),
+    ('PlanningTemplate_slots_array', 'PlanningTemplate', 'jsonb_array_length'),
+    ('PlanningTemplate_rules_object', 'PlanningTemplate', 'rules'),
+    ('PlanningTemplate_optional_text_not_blank', 'PlanningTemplate', 'namePattern'),
+    ('PlanningWorkspace_name_not_blank', 'PlanningWorkspace', 'name'),
+    ('PlanningWorkspace_visibility_allowed', 'PlanningWorkspace', 'DEPARTMENT'),
+    ('PlanningWorkspace_slotSelections_object', 'PlanningWorkspace', 'slotSelections'),
+    ('PlanningWorkspace_metadata_object', 'PlanningWorkspace', 'metadata'),
+    ('PlanningWorkspace_optional_text_not_blank', 'PlanningWorkspace', 'description'),
+    ('PlanningDraft_identity_not_blank', 'PlanningDraft', 'selectedCandidateKey'),
+    ('PlanningDraft_selectedAssets_object', 'PlanningDraft', 'selectedAssets'),
+    ('PlanningDraft_previewNodes_array', 'PlanningDraft', 'previewNodes'),
+    ('PlanningDraft_summary_array', 'PlanningDraft', 'summary'),
+    ('PlanningDraft_warnings_array', 'PlanningDraft', 'warnings'),
+    ('PlanningDraft_sourceSnapshot_object', 'PlanningDraft', 'sourceSnapshot'),
+    ('PlanningDraft_optional_text_not_blank', 'PlanningDraft', 'notes'),
+    ('Substrate_code_normalized', 'Substrate', 'upper(btrim'),
+    ('WarehouseLocation_code_normalized', 'WarehouseLocation', 'upper(btrim'),
+    ('PackagedItem_code_normalized', 'PackagedItem', 'upper(btrim'),
+    ('PreSkuPackagingPlan_status_allowed', 'PreSkuPackagingPlan', 'CONFIRMED'),
+    ('PreSkuPackagingPlan_boxes_array', 'PreSkuPackagingPlan', 'jsonb_typeof'),
+    ('PreSkuPackagingPlan_costSummary_object', 'PreSkuPackagingPlan', 'costSummary'),
+    ('PreSkuPackagingPlan_processDraft_object', 'PreSkuPackagingPlan', 'processDraft'),
+    ('PreSkuPackagingPlan_optional_text_not_blank', 'PreSkuPackagingPlan', 'sourceRefId'),
+    ('WarehouseLocation_name_not_blank', 'WarehouseLocation', 'name'),
+    ('WarehouseLocation_optional_text_not_blank', 'WarehouseLocation', 'zone'),
+    ('BrandMaterialBinding_materialType_allowed', 'BrandMaterialBinding', 'CARTON_PRINT'),
+    ('BrandMaterialBinding_identity_not_blank', 'BrandMaterialBinding', 'materialType'),
+    ('BrandMaterialBinding_file_metadata_consistent', 'BrandMaterialBinding', 'fileSize'),
+    ('PackagedItem_status_allowed', 'PackagedItem', 'ACTIVE'),
+    ('PackagedItem_name_not_blank', 'PackagedItem', 'name'),
+    ('PackagedItem_quantities_valid', 'PackagedItem', 'stockQuantity'),
+    ('PackagedItem_dimensions_valid', 'PackagedItem', 'weight'),
+    ('PackagedItem_payload_object', 'PackagedItem', 'jsonb_typeof'),
+    ('Material_code_normalized', 'Material', 'upper(btrim'),
+    ('Hardware_code_normalized', 'Hardware', 'upper(btrim'),
+    ('CommonComponent_code_normalized', 'CommonComponent', 'upper(btrim'),
+    ('IntakeNonIntegratedProduct_spu_brand_normalized', 'IntakeNonIntegratedProduct', 'upper(btrim'),
+    ('Product_modelNumber_normalized', 'Product', 'upper(btrim'),
+    ('Product_name_not_blank', 'Product', 'name'),
+    ('Product_visibility_allowed', 'Product', 'DEPARTMENT'),
+    ('Product_optional_text_not_blank', 'Product', 'description'),
+    ('ProductCollaborator_identity_not_blank', 'ProductCollaborator', 'productId'),
+    ('ProductCollaborator_role_allowed', 'ProductCollaborator', 'viewer'),
+    ('ProductCollaborator_addedBy_not_blank', 'ProductCollaborator', 'addedBy'),
+    ('ShareLink_token_not_blank', 'ShareLink', 'token'),
+    ('ShareLink_viewCount_non_negative', 'ShareLink', 'viewCount'),
+    ('ShareLink_expiresAt_after_createdAt', 'ShareLink', 'expiresAt'),
+    ('Panel_identity_dimensions_valid', 'Panel', 'gltfNodeName'),
+    ('Panel_explosionDirection_allowed', 'Panel', 'explosionDirection'),
+    ('Panel_assemblySemantic_object', 'Panel', 'assemblySemantic'),
+    ('Panel_optional_text_not_blank', 'Panel', 'partType'),
+    ('Hole_geometry_quality', 'Hole', 'normalX'),
+    ('Hole_type_allowed', 'Hole', 'shelf_pin'),
+    ('Hole_optional_text_not_blank', 'Hole', 'groupId'),
+    ('ProductHardware_match_status_allowed', 'ProductHardware', 'unmatched'),
+    ('ProductHardware_match_confidence_valid', 'ProductHardware', 'matchConfidence'),
+    ('ProductHardware_match_method_allowed', 'ProductHardware', 'blockName'),
+    ('ProductHardware_quantities_geometry_valid', 'ProductHardware', 'holeDistance'),
+    ('ProductHardware_transform_object', 'ProductHardware', 'transform'),
+    ('ProductHardware_sourceSignature_object', 'ProductHardware', 'sourceSignature'),
+    ('ProductHardware_optional_text_not_blank', 'ProductHardware', 'sourceBlockName'),
+    ('AssemblyStep_identity_order_valid', 'AssemblyStep', 'order'),
+    ('AssemblyStep_type_allowed', 'AssemblyStep', 'hardware'),
+    ('AssemblyStep_animation_valid', 'AssemblyStep', 'cameraTransition'),
+    ('AssemblyStep_transform_object', 'AssemblyStep', 'transform'),
+    ('AssemblyStep_cameraPosition_object', 'AssemblyStep', 'cameraPosition'),
+    ('AssemblyStep_infoCardData_object', 'AssemblyStep', 'infoCardData'),
+    ('AssemblyStep_optional_text_not_blank', 'AssemblyStep', 'description'),
+    ('AssemblyVersion_snapshot_array', 'AssemblyVersion', 'snapshot'),
+    ('AssemblyVersion_version_positive', 'AssemblyVersion', 'version'),
+    ('AssemblyVersion_optional_text_not_blank', 'AssemblyVersion', 'createdBy'),
+    ('ProductSKU_skuCode_normalized', 'ProductSKU', 'upper(btrim'),
+    ('ProductSKU_active_skuCode_no_deleted_marker_ci', 'ProductSKU', 'lower'),
+    ('AssetVariant_code_normalized', 'AssetVariant', 'upper(btrim'),
+    ('AssetVariant_barcode_normalized', 'AssetVariant', 'upper(btrim'),
+    ('AssetVariant_identity_valid', 'AssetVariant', 'identityKey'),
+    ('AssetVariant_json_shape_valid', 'AssetVariant', 'mountPoints'),
+    ('AssetVariant_cost_weight_valid', 'AssetVariant', 'estimatedCostPrice'),
+    ('AssetVariant_lifecycle_state_valid', 'AssetVariant', 'PENDING_REVIEW'),
+    ('AssetVariant_inheritance_not_self', 'AssetVariant', 'inheritedFromVariantId'),
+    ('PreSku_identity_valid', 'PreSku', 'sourceCandidateKey'),
+    ('PreSku_process_snapshots_shape_valid', 'PreSku', 'familySelection'),
+    ('PreSku_weight_valid', 'PreSku', 'weightPreview'),
+    ('PreSku_component_codes_valid', 'PreSku', 'componentCodes'),
+    ('PreSku_optional_text_not_blank', 'PreSku', 'customName'),
+    ('PreSkuBasicInfo_formalSkuCode_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_barcode_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_model_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_versionNo_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_attributeCode_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_drawingId_normalized', 'PreSkuBasicInfo', 'upper(btrim'),
+    ('PreSkuBasicInfo_source_allowed', 'PreSkuBasicInfo', 'DRAFT_GROUP'),
+    ('PreSkuBasicInfo_optional_text_not_blank', 'PreSkuBasicInfo', 'formalSkuCode'),
+    ('AssetSkuSyncEvent_reason_allowed', 'AssetSkuSyncEvent', 'VARIANT_UPDATED'),
+    ('AssetSkuSyncEvent_counts_non_negative', 'AssetSkuSyncEvent', 'retryCount'),
+    ('AssetSkuSyncEvent_synced_not_over_affected', 'AssetSkuSyncEvent', 'syncedCount'),
+    ('AssetSkuSyncEvent_completed_has_processed_at', 'AssetSkuSyncEvent', 'processedAt'),
+    ('ProductSkuAssetProfile_barcode_normalized', 'ProductSkuAssetProfile', 'upper(btrim'),
+    ('ProductSkuAssetProfile_model_normalized', 'ProductSkuAssetProfile', 'upper(btrim'),
+    ('ProductSkuAssetProfile_specCode_normalized', 'ProductSkuAssetProfile', 'upper(btrim'),
+    ('ProductSkuAssetProfile_primary_source_required', 'ProductSkuAssetProfile', 'primarySourceAssetVariantId'),
+    ('ProductSkuAssetProfile_source_variant_ids_required', 'ProductSkuAssetProfile', 'sourceAssetVariantIds'),
+    ('ProductSkuAssetProfile_primary_source_in_source_ids', 'ProductSkuAssetProfile', 'primarySourceAssetVariantId'),
+    ('ProductSkuAssetProfile_optional_text_not_blank', 'ProductSkuAssetProfile', 'specCode'),
+    ('ProductPatentRecord_patentGroupKey_normalized', 'ProductPatentRecord', 'upper(btrim'),
+    ('ProductPatentRecord_productId_required', 'ProductPatentRecord', 'btrim'),
+    ('ProductPatentRecord_applicationNo_normalized', 'ProductPatentRecord', 'upper(btrim'),
+    ('ProductPatentRecord_patentNo_normalized', 'ProductPatentRecord', 'upper(btrim'),
+    ('ProductPatentRecord_spu_normalized', 'ProductPatentRecord', 'upper(btrim'),
+    ('ProductPatentRecord_patent_identity_required', 'ProductPatentRecord', 'patentName'),
+    ('IntakeNonIntegratedSkuItem_skuCode_normalized', 'IntakeNonIntegratedSkuItem', 'upper(btrim'),
+    ('IntakeNonIntegratedSkuItem_barcode_normalized', 'IntakeNonIntegratedSkuItem', 'upper(btrim'),
+    ('ApprovalWorkflow_approvalNumber_normalized', 'ApprovalWorkflow', 'upper(btrim'),
+    ('ApprovalWorkflow_title_not_blank', 'ApprovalWorkflow', 'title'),
+    ('ApprovalWorkflow_productId_not_blank', 'ApprovalWorkflow', 'productId'),
+    ('ApprovalWorkflow_accessKey_not_blank', 'ApprovalWorkflow', 'accessKey'),
+    ('ApprovalWorkflow_participant_user_ids_valid', 'ApprovalWorkflow', 'text_array_distinct_non_blank'),
+    ('ApprovalWorkflow_business_roles_distinct', 'ApprovalWorkflow', 'array_positions'),
+    ('ApprovalWorkflow_fieldMatrix_array', 'ApprovalWorkflow', 'jsonb_typeof'),
+    ('ApprovalWorkflow_summary_object', 'ApprovalWorkflow', 'jsonb_typeof'),
+    ('ApprovalWorkflow_metadata_object', 'ApprovalWorkflow', 'jsonb_typeof'),
+    ('ApprovalWorkflowFieldChange_fieldKey_not_blank', 'ApprovalWorkflowFieldChange', 'fieldKey'),
+    ('ApprovalWorkflowFieldChange_source_not_blank', 'ApprovalWorkflowFieldChange', 'source'),
+    ('ApprovalWorkflowFieldChange_optional_text_not_blank', 'ApprovalWorkflowFieldChange', 'sourcePage'),
+    ('ApprovalWorkflowFieldChange_metadata_object', 'ApprovalWorkflowFieldChange', 'jsonb_typeof'),
+    ('User_email_normalized', 'User', 'lower(btrim'),
+    ('User_name_not_blank', 'User', 'btrim'),
+    ('User_loginSource_not_blank', 'User', 'loginSource'),
+    ('User_business_roles_distinct', 'User', 'array_positions'),
+    ('User_optional_text_not_blank', 'User', 'dingtalkUserId'),
+    ('Department_identity_not_blank', 'Department', 'fullPath'),
+    ('Department_optional_text_not_blank', 'Department', 'externalId'),
+    ('Department_orderIndex_non_negative', 'Department', 'orderIndex'),
+    ('Team_identity_not_blank', 'Team', 'orderIndex'),
+    ('EmployeeDirectory_name_not_blank', 'EmployeeDirectory', 'btrim'),
+    ('EmployeeDirectory_optional_text_not_blank', 'EmployeeDirectory', 'primaryDepartmentExternalId'),
+    ('EmployeeDirectory_email_normalized', 'EmployeeDirectory', 'lower(btrim'),
+    ('EmployeeDirectory_departmentExternalIds_array', 'EmployeeDirectory', 'jsonb_typeof'),
+    ('EmployeeDirectory_rawSnapshot_object', 'EmployeeDirectory', 'jsonb_typeof'),
+    ('EmployeeLookupCache_identity_not_blank', 'EmployeeLookupCache', 'lookupValue'),
+    ('EmployeeLookupCache_result_object', 'EmployeeLookupCache', 'jsonb_typeof'),
+    ('ProductCategory_identity_valid', 'ProductCategory', 'sortOrder'),
+    ('ProductCategory_optional_text_not_blank', 'ProductCategory', 'description'),
+    ('MaterialCategory_identity_valid', 'MaterialCategory', 'sortOrder'),
+    ('MaterialCategory_optional_text_not_blank', 'MaterialCategory', 'icon'),
+    ('HardwareCategory_identity_valid', 'HardwareCategory', 'sortOrder'),
+    ('HardwareCategory_optional_text_not_blank', 'HardwareCategory', 'description'),
+    ('CommonComponentCategory_identity_valid', 'CommonComponentCategory', 'sortOrder'),
+    ('CommonComponentCategory_optional_text_not_blank', 'CommonComponentCategory', 'description'),
+    ('SubstrateCategory_identity_valid', 'SubstrateCategory', 'sortOrder'),
+    ('SubstrateEnvironmentGrade_identity_valid', 'SubstrateEnvironmentGrade', 'sortOrder'),
+    ('SubstrateSurfaceOption_identity_valid', 'SubstrateSurfaceOption', 'sortOrder'),
+    ('SubstrateSystemNameOption_identity_valid', 'SubstrateSystemNameOption', 'sortOrder'),
+    ('SubstrateThicknessSpec_identity_dimensions_valid', 'SubstrateThicknessSpec', 'thicknessMm'),
+    ('HardwareMapping_match_key_exactly_one', 'HardwareMapping', 'signatureHash'),
+    ('HardwareMapping_usage_source_valid', 'HardwareMapping', 'usageCount'),
+    ('SubstrateFinish_relation_ids_not_blank', 'SubstrateFinish', 'substrateId'),
+    ('PanelMaterial_relation_ids_not_blank', 'PanelMaterial', 'materialId'),
+    ('AssetVariantLocationBinding_relation_ids_not_blank', 'AssetVariantLocationBinding', 'warehouseLocationId'),
+    ('PreSkuLocationBinding_relation_ids_not_blank', 'PreSkuLocationBinding', 'warehouseLocationId'),
+    ('PackagingPlan_identity_counts_valid', 'PackagingPlan', 'boxCount'),
+    ('PackagingPlan_boxes_array', 'PackagingPlan', 'jsonb_typeof'),
+    ('PackagingPlan_totals_valid', 'PackagingPlan', 'totalWeight'),
+    ('PackagingPlan_optional_text_not_blank', 'PackagingPlan', 'description'),
+    ('SystemConfig_key_valid', 'SystemConfig', 'btrim'),
+    ('SystemConfig_description_not_blank', 'SystemConfig', 'description'),
+    ('ProviderConfig_identity_valid', 'ProviderConfig', 'serviceType'),
+    ('ProviderConfig_optional_fields_valid', 'ProviderConfig', 'jsonb_typeof'),
+    ('ThemeConfig_identity_valid', 'ThemeConfig', 'createdBy'),
+    ('ThemeConfig_optional_config_valid', 'ThemeConfig', 'homeBackground'),
+    ('IntakeNodePermissionOverride_identity_valid', 'IntakeNodePermissionOverride', 'targetKey'),
+    ('IntakeNodePermissionOverride_audit_text_not_blank', 'IntakeNodePermissionOverride', 'createdBy'),
+    ('AssistedAssemblyAiRender_identity_valid', 'AssistedAssemblyAiRender', 'prompt'),
+    ('AssistedAssemblyAiRender_json_shape_valid', 'AssistedAssemblyAiRender', 'workspaceSnapshot'),
+    ('AssistedAssemblyAiRender_status_duration_valid', 'AssistedAssemblyAiRender', 'durationMs'),
+    ('AssistedAssemblyAiRender_optional_text_not_blank', 'AssistedAssemblyAiRender', 'negativePrompt'),
+    ('Feedback_identity_valid', 'Feedback', 'description'),
+    ('Feedback_images_valid', 'Feedback', 'text_array_all_trimmed_non_blank'),
+    ('Feedback_comments_array', 'Feedback', 'jsonb_typeof'),
+    ('Feedback_resolution_state_valid', 'Feedback', 'resolvedAt'),
+    ('ActivityLog_identity_valid', 'ActivityLog', 'action'),
+    ('ActivityLog_target_pair_valid', 'ActivityLog', 'targetType'),
+    ('ActivityLog_json_shape_valid', 'ActivityLog', 'metadata')
+)
+SELECT
+  'missing_required_check_constraint_guard' AS check_name,
+  guard.constraint_name,
+  guard.table_name,
+  pg_get_constraintdef(con.oid) AS actual_definition,
+  guard.expression_hint AS expected_expression_hint
+FROM required_constraint_guards guard
+LEFT JOIN pg_constraint con ON con.conname = guard.constraint_name
+LEFT JOIN pg_class table_cls ON table_cls.oid = con.conrelid
+LEFT JOIN pg_namespace ns ON ns.oid = table_cls.relnamespace
+WHERE con.oid IS NULL
+   OR con.contype <> 'c'
+   OR ns.nspname <> 'public'
+   OR table_cls.relname <> guard.table_name
+   OR (
+    guard.expression_hint IS NOT NULL
+    AND COALESCE(pg_get_constraintdef(con.oid), '') NOT LIKE '%' || guard.expression_hint || '%'
+   )
+ORDER BY guard.constraint_name;
+
+SELECT
+  'missing_required_trigger_guard' AS check_name,
+  guard.trigger_name,
+  guard.table_name
+FROM (
+  VALUES
+    ('IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items', 'IntakeNonIntegratedProduct'),
+    ('ProductSKU_sync_asset_profile_deleted_at', 'ProductSKU')
+) AS guard(trigger_name, table_name)
+WHERE NOT EXISTS (
+  SELECT 1
+  FROM information_schema.triggers
+  WHERE trigger_schema = 'public'
+    AND trigger_name = guard.trigger_name
+    AND event_object_table = guard.table_name
+);
+
+SELECT
+  'asset_series_duplicate_code_risk' AS check_name,
+  code,
+  COUNT(*)::integer AS duplicate_count
+FROM "AssetSeries"
+WHERE NULLIF(btrim(code), '') IS NOT NULL
+GROUP BY code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, code;
+
+SELECT
+  'asset_family_duplicate_code_risk' AS check_name,
+  code,
+  COUNT(*)::integer AS duplicate_count
+FROM "AssetFamily"
+WHERE NULLIF(btrim(code), '') IS NOT NULL
+GROUP BY code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, code;
+
+SELECT
+  'asset_variant_duplicate_code_risk' AS check_name,
+  upper(btrim(code)) AS code,
+  COUNT(*)::integer AS duplicate_count
+FROM "AssetVariant"
+WHERE NULLIF(btrim(code), '') IS NOT NULL
+GROUP BY upper(btrim(code))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(code));
+
+SELECT
+  'asset_variant_duplicate_barcode_risk' AS check_name,
+  upper(btrim(barcode)) AS barcode,
+  COUNT(*)::integer AS duplicate_count
+FROM "AssetVariant"
+WHERE NULLIF(btrim(barcode), '') IS NOT NULL
+GROUP BY upper(btrim(barcode))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(barcode));
+
+SELECT
+  'product_duplicate_model_number_risk' AS check_name,
+  upper(btrim("modelNumber")) AS "modelNumber",
+  COUNT(*)::integer AS duplicate_count
+FROM "Product"
+WHERE NULLIF(btrim("modelNumber"), '') IS NOT NULL
+GROUP BY upper(btrim("modelNumber"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim("modelNumber"));
+
+SELECT
+  'product_identity_visibility_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "Product"
+WHERE NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR visibility NOT IN ('PRIVATE', 'TEAM', 'DEPARTMENT', 'PUBLIC')
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL);
+
+SELECT
+  'product_collaborator_role_identity_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductCollaborator"
+WHERE NULLIF(btrim("productId"), '') IS NULL
+   OR NULLIF(btrim("userId"), '') IS NULL
+   OR role NOT IN ('editor', 'viewer')
+   OR ("addedBy" IS NOT NULL AND NULLIF(btrim("addedBy"), '') IS NULL);
+
+SELECT
+  'product_sku_price_cost_stock_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU"
+WHERE "price" < 0
+   OR ("costPrice" IS NOT NULL AND "costPrice" < 0)
+   OR "stock" < 0;
+
+SELECT
+  'share_link_identity_counter_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ShareLink"
+WHERE NULLIF(btrim(token), '') IS NULL
+   OR token <> btrim(token)
+   OR "viewCount" < 0
+   OR ("expiresAt" IS NOT NULL AND "expiresAt" <= "createdAt");
+
+SELECT
+  'panel_identity_dimension_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "Panel"
+WHERE NULLIF(btrim(code), '') IS NULL
+   OR code <> upper(btrim(code))
+   OR NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR NULLIF(btrim("gltfNodeName"), '') IS NULL
+   OR "gltfNodeName" <> btrim("gltfNodeName")
+   OR length <= 0
+   OR width <= 0
+   OR thickness <= 0
+   OR COALESCE("installOrder", 0) < 0
+   OR ("partType" IS NOT NULL AND NULLIF(btrim("partType"), '') IS NULL)
+   OR ("explosionDirection" IS NOT NULL AND "explosionDirection" NOT IN ('auto', 'up', 'down', 'left', 'right', 'front', 'back'))
+   OR ("assemblySemantic" IS NOT NULL AND jsonb_typeof("assemblySemantic") NOT IN ('object', 'null'));
+
+SELECT
+  'panel_duplicate_code_scope_risk' AS check_name,
+  "productId",
+  COALESCE("skuId", '') AS "skuScope",
+  upper(btrim(code)) AS code,
+  COUNT(*)::integer AS duplicate_count
+FROM "Panel"
+GROUP BY "productId", COALESCE("skuId", ''), upper(btrim(code))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, "productId", "skuScope", code;
+
+SELECT
+  'hole_geometry_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "Hole"
+WHERE "positionX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR "positionY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR "positionZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR diameter <= 0
+   OR depth < 0
+   OR "normalX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR "normalY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR "normalZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+   OR ("normalX" = 0 AND "normalY" = 0 AND "normalZ" = 0)
+   OR confidence < 0
+   OR confidence > 1
+   OR ("holeType" IS NOT NULL AND "holeType" NOT IN ('hinge', 'connector', 'shelf_pin', 'screw', 'dowel', 'cable', 'unknown'))
+   OR ("groupId" IS NOT NULL AND NULLIF(btrim("groupId"), '') IS NULL);
+
+SELECT
+  'product_hardware_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductHardware"
+WHERE jsonb_typeof(transform) <> 'object'
+   OR "matchStatus" NOT IN ('matched', 'pending', 'unmatched')
+   OR ("matchConfidence" IS NOT NULL AND ("matchConfidence" < 0 OR "matchConfidence" > 1))
+   OR ("matchMethod" IS NOT NULL AND "matchMethod" NOT IN ('blockName', 'mapping', 'size', 'manual'))
+   OR ("installOrder" IS NOT NULL AND "installOrder" < 0)
+   OR ("holeDistance" IS NOT NULL AND "holeDistance" < 0)
+   OR ("sourceSignature" IS NOT NULL AND jsonb_typeof("sourceSignature") NOT IN ('object', 'null'))
+   OR ("sourceBlockName" IS NOT NULL AND NULLIF(btrim("sourceBlockName"), '') IS NULL)
+   OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+   OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+   OR ("connectedPanelId" IS NOT NULL AND NULLIF(btrim("connectedPanelId"), '') IS NULL)
+   OR ("associatedHoleId" IS NOT NULL AND NULLIF(btrim("associatedHoleId"), '') IS NULL)
+   OR ("parentHardwareId" IS NOT NULL AND NULLIF(btrim("parentHardwareId"), '') IS NULL);
+
+SELECT
+  'assembly_step_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "AssemblyStep"
+WHERE "order" < 0
+   OR NULLIF(btrim(title), '') IS NULL
+   OR title <> btrim(title)
+   OR "stepType" NOT IN ('panel', 'hardware', 'custom')
+   OR duration <= 0
+   OR NULLIF(btrim(easing), '') IS NULL
+   OR "cameraTransition" NOT IN ('smooth', 'cut', 'orbit')
+   OR jsonb_typeof(transform) <> 'object'
+   OR ("cameraPosition" IS NOT NULL AND jsonb_typeof("cameraPosition") NOT IN ('object', 'null'))
+   OR ("infoCardData" IS NOT NULL AND jsonb_typeof("infoCardData") NOT IN ('object', 'null'))
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+   OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+   OR EXISTS (SELECT 1 FROM unnest("hardwareIds") AS item WHERE NULLIF(btrim(item), '') IS NULL)
+   OR cardinality("hardwareIds") <> (SELECT COUNT(DISTINCT btrim(item))::integer FROM unnest("hardwareIds") AS item)
+   OR EXISTS (SELECT 1 FROM unnest("partIds") AS item WHERE NULLIF(btrim(item), '') IS NULL)
+   OR cardinality("partIds") <> (SELECT COUNT(DISTINCT btrim(item))::integer FROM unnest("partIds") AS item);
+
+SELECT
+  'assembly_version_snapshot_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "AssemblyVersion"
+WHERE version <= 0
+   OR jsonb_typeof(snapshot) <> 'array'
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+   OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL);
+
+SELECT
+  'product_sku_duplicate_sku_code_risk' AS check_name,
+  upper(btrim("skuCode")) AS "skuCode",
+  COUNT(*)::integer AS duplicate_count
+FROM "ProductSKU"
+WHERE "deletedAt" IS NULL
+  AND NULLIF(btrim("skuCode"), '') IS NOT NULL
+GROUP BY upper(btrim("skuCode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim("skuCode"));
+
+SELECT
+  'product_sku_missing_name_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND NULLIF(btrim(COALESCE(sku."name", '')), '') IS NULL;
+
+SELECT
+  'product_sku_formal_truth_attribute_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU"
+WHERE attributes ?| ARRAY[
+  'skuName',
+  'model',
+  'specCode',
+  'barcode',
+  'category',
+  'color',
+  'material',
+  'size'
+];
+
+SELECT
+  'draft_group_duplicate_code_risk' AS check_name,
+  code,
+  COUNT(*)::integer AS duplicate_count
+FROM "DraftGroup"
+WHERE NULLIF(btrim(code), '') IS NOT NULL
+GROUP BY code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, code;
+
+SELECT
+  'draft_group_invalid_process_shape_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "DraftGroup"
+WHERE NULLIF(btrim(code), '') IS NULL
+   OR code <> btrim(code)
+   OR NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR jsonb_typeof(summary::jsonb) <> 'object'
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+   OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL);
+
+SELECT
+  'pre_sku_duplicate_per_group_risk' AS check_name,
+  "draftGroupId",
+  sequence,
+  COUNT(*)::integer AS duplicate_count
+FROM "PreSku"
+GROUP BY "draftGroupId", sequence
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, "draftGroupId", sequence;
+
+SELECT
+  'pre_sku_invalid_process_shape_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "PreSku"
+WHERE sequence <= 0
+   OR NULLIF(btrim("defaultName"), '') IS NULL
+   OR "defaultName" <> btrim("defaultName")
+   OR NULLIF(btrim("sourceCandidateKey"), '') IS NULL
+   OR "sourceCandidateKey" <> btrim("sourceCandidateKey")
+   OR jsonb_typeof("familySelection"::jsonb) <> 'object'
+   OR jsonb_typeof("variantSelection"::jsonb) <> 'object'
+   OR jsonb_typeof("previewNodes"::jsonb) <> 'array'
+   OR jsonb_typeof("displaySummary"::jsonb) <> 'object'
+   OR jsonb_typeof("bomPreview"::jsonb) <> 'array'
+   OR (
+     "recommendedHardware" IS NOT NULL
+     AND jsonb_typeof("recommendedHardware"::jsonb) NOT IN ('array', 'null')
+   )
+   OR (
+     "explosionPreview" IS NOT NULL
+     AND jsonb_typeof("explosionPreview"::jsonb) NOT IN ('array', 'null')
+   )
+   OR jsonb_typeof("installStepPreview"::jsonb) <> 'array'
+   OR (
+     "packagingSnapshot" IS NOT NULL
+     AND jsonb_typeof("packagingSnapshot"::jsonb) NOT IN ('object', 'null')
+   )
+   OR ("weightPreview" IS NOT NULL AND "weightPreview" < 0)
+   OR EXISTS (
+     SELECT 1
+     FROM unnest("componentCodes") AS item
+     WHERE NULLIF(btrim(item), '') IS NULL
+   )
+   OR ("customName" IS NOT NULL AND NULLIF(btrim("customName"), '') IS NULL)
+   OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL);
+
+SELECT
+  'pre_sku_formalization_lifecycle_mismatch_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM (
+  SELECT pre_sku."id"
+  FROM "PreSku" pre_sku
+  LEFT JOIN "ProductSKU" sku ON sku."sourcePreSkuId" = pre_sku."id"
+  WHERE pre_sku.status = 'FORMALIZED'::"PreSkuStatus"
+    AND sku."id" IS NULL
+
+  UNION ALL
+
+  SELECT pre_sku."id"
+  FROM "ProductSKU" sku
+  JOIN "PreSku" pre_sku ON pre_sku."id" = sku."sourcePreSkuId"
+  WHERE sku."deletedAt" IS NULL
+    AND pre_sku.status <> 'FORMALIZED'::"PreSkuStatus"
+) mismatches;
+
+SELECT
+  'asset_family_without_series_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "AssetFamily"
+WHERE "assetSeriesId" IS NULL;
+
+SELECT
+  'asset_variant_without_model_url_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "AssetVariant"
+WHERE NULLIF(btrim("modelUrl"), '') IS NULL;
+
+SELECT
+  'product_sku_without_asset_profile_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND jsonb_typeof(sku.attributes::jsonb -> 'assetSkuSnapshot') = 'object'
+  AND profile."id" IS NULL;
+
+SELECT
+  'product_sku_asset_profile_snapshot_sync_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND jsonb_typeof(sku.attributes::jsonb -> 'assetSkuSnapshot') = 'object'
+  AND (
+    COALESCE(profile."model", '') IS DISTINCT FROM COALESCE(sku.attributes::jsonb -> 'assetSkuSnapshot' ->> 'model', '')
+    OR COALESCE(profile."specCode", '') IS DISTINCT FROM COALESCE(sku.attributes::jsonb -> 'assetSkuSnapshot' ->> 'specCode', '')
+    OR COALESCE(profile."barcode", '') IS DISTINCT FROM COALESCE(sku.attributes::jsonb -> 'assetSkuSnapshot' ->> 'barcode', '')
+    OR COALESCE(profile."imageUrl", '') IS DISTINCT FROM COALESCE(sku.attributes::jsonb -> 'assetSkuSnapshot' ->> 'imageUrl', '')
+  );
+
+SELECT
+  'product_sku_profile_duplicate_barcode_risk' AS check_name,
+  upper(btrim(profile."barcode")) AS barcode,
+  COUNT(*)::integer AS duplicate_count
+FROM "ProductSkuAssetProfile" profile
+JOIN "ProductSKU" sku ON sku."id" = profile."skuId"
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND profile."sourceStatus" = 'ACTIVE'
+  AND NULLIF(btrim(COALESCE(profile."barcode", '')), '') IS NOT NULL
+GROUP BY upper(btrim(profile."barcode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, barcode;
+
+SELECT
+  'product_sku_asset_profile_source_id_mismatch_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND NULLIF(btrim(COALESCE(sku."sourceAssetVariantId", '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(profile."primarySourceAssetVariantId", '')), '') IS NOT NULL
+  AND sku."sourceAssetVariantId" IS DISTINCT FROM profile."primarySourceAssetVariantId";
+
+SELECT
+  'pre_sku_missing_truth_snapshot_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "PreSku"
+WHERE "familySelection" IS NULL
+   OR "variantSelection" IS NULL
+   OR "displaySummary" IS NULL
+   OR "bomPreview" IS NULL;
+
+SELECT
+  'pre_sku_missing_basic_info_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "PreSku" pre_sku
+LEFT JOIN "PreSkuBasicInfo" basic_info ON basic_info."preSkuId" = pre_sku."id"
+WHERE basic_info."id" IS NULL
+  AND (
+    NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), '') IS NOT NULL
+    OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), '') IS NOT NULL
+  );
+
+SELECT
+  'pre_sku_basic_info_snapshot_sync_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "PreSku" pre_sku
+JOIN "PreSkuBasicInfo" basic_info ON basic_info."preSkuId" = pre_sku."id"
+WHERE COALESCE(basic_info."model", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), ''), '')
+   OR COALESCE(basic_info."formalSkuCode", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), ''), '')
+   OR COALESCE(basic_info."barcode", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), ''), '')
+   OR COALESCE(basic_info."specName", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), ''), '');
+
+SELECT
+  'pre_sku_duplicate_formal_sku_code_risk' AS check_name,
+  upper(btrim(basic_info."formalSkuCode")) AS "formalSkuCode",
+  COUNT(*)::integer AS duplicate_count
+FROM "PreSkuBasicInfo" basic_info
+JOIN "PreSku" pre_sku ON pre_sku."id" = basic_info."preSkuId"
+WHERE pre_sku."status" <> 'ARCHIVED'
+  AND NULLIF(btrim(basic_info."formalSkuCode"), '') IS NOT NULL
+GROUP BY upper(btrim(basic_info."formalSkuCode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(basic_info."formalSkuCode"));
+
+SELECT
+  'pre_sku_duplicate_barcode_risk' AS check_name,
+  upper(btrim(basic_info."barcode")) AS "barcode",
+  COUNT(*)::integer AS duplicate_count
+FROM "PreSkuBasicInfo" basic_info
+JOIN "PreSku" pre_sku ON pre_sku."id" = basic_info."preSkuId"
+WHERE pre_sku."status" <> 'ARCHIVED'
+  AND NULLIF(btrim(basic_info."barcode"), '') IS NOT NULL
+GROUP BY upper(btrim(basic_info."barcode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(basic_info."barcode"));
+
+SELECT
+  'intake_non_integrated_missing_product_profile_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "IntakeNonIntegratedProduct" product
+LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL
+  AND profile."id" IS NULL;
+
+SELECT
+  'intake_non_integrated_product_profile_quality_risk' AS check_name,
+  COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productName"), '') IS NULL)::integer AS missing_product_name_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productCategory"), '') IS NULL)::integer AS missing_product_category_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL)::integer AS missing_development_kind_count
+FROM "IntakeNonIntegratedProduct" product
+JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL;
+
+SELECT
+  'intake_non_integrated_product_profile_quality_sample' AS check_name,
+  product."id",
+  product."spu",
+  profile."productName",
+  profile."productCategory",
+  profile."productDevelopmentKind",
+  ARRAY_REMOVE(ARRAY[
+    CASE WHEN NULLIF(btrim(profile."productName"), '') IS NULL THEN 'productName' END,
+    CASE WHEN NULLIF(btrim(profile."productCategory"), '') IS NULL THEN 'productCategory' END,
+    CASE WHEN NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL THEN 'productDevelopmentKind' END
+  ], NULL) AS "missingFields"
+FROM "IntakeNonIntegratedProduct" product
+JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+WHERE product."deletedAt" IS NULL
+  AND (
+    NULLIF(btrim(profile."productName"), '') IS NULL
+    OR NULLIF(btrim(profile."productCategory"), '') IS NULL
+    OR NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL
+  )
+ORDER BY product."spu", product."id"
+LIMIT 20;
+
+WITH payload_profile AS (
+  SELECT
+    product."id" AS product_id,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productName'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'previewImageName'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'spu'), ''), '') AS product_name,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productImage'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'previewImage'), ''), '') AS product_image_url,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productCategory'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'productCategory'), ''), '') AS product_category,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'salesCategory'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'salesCategory'), ''), '') AS sales_category,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'year'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'year'), ''), '') AS product_year,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'currentStage'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'projectStatus'), ''), '') AS product_status,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productDevelopmentKind'), ''), '') AS product_development_kind,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'goodsType'), ''), '') AS goods_type,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'materialType'), ''), '') AS material_type,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productionType'), ''), '') AS production_type,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'size'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'size'), ''), '') AS size,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'color'), ''), '') AS color,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'tagMaterial'), ''), '') AS tag_material,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'priceBand'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'targetPriceBand'), ''), '') AS price_band,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandFlowNo'), ''), '') AS demand_flow_no,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'processTemplate'), ''), '') AS process_template,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productPlanning'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'planningOwner'), ''), '') AS product_planning,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'brandPlanning'), ''), '') AS brand_planning,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandDepartment'), ''), '') AS demand_department,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'spuOwner'), ''), '') AS spu_owner,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'operationsOwner'), ''), '') AS operations_owner,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'purchaseOwner'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'purchaser'), ''), '') AS purchase_owner,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualDirector'), ''), '') AS visual_director,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualPlanning'), ''), '') AS visual_planning,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'structureDesigner'), ''), '') AS structure_designer
+  FROM "IntakeNonIntegratedProduct" product
+  WHERE product."deletedAt" IS NULL
+)
+SELECT
+  'intake_non_integrated_product_profile_payload_sync_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM payload_profile payload
+JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = payload.product_id
+WHERE COALESCE(profile."productName", '') IS DISTINCT FROM payload.product_name
+   OR COALESCE(profile."productImageUrl", '') IS DISTINCT FROM payload.product_image_url
+   OR COALESCE(profile."productCategory", '') IS DISTINCT FROM payload.product_category
+   OR COALESCE(profile."salesCategory", '') IS DISTINCT FROM payload.sales_category
+   OR COALESCE(profile."productYear", '') IS DISTINCT FROM payload.product_year
+   OR COALESCE(profile."productStatus", '') IS DISTINCT FROM payload.product_status
+   OR COALESCE(profile."productDevelopmentKind", '') IS DISTINCT FROM payload.product_development_kind
+   OR COALESCE(profile."goodsType", '') IS DISTINCT FROM payload.goods_type
+   OR COALESCE(profile."materialType", '') IS DISTINCT FROM payload.material_type
+   OR COALESCE(profile."productionType", '') IS DISTINCT FROM payload.production_type
+   OR COALESCE(profile."size", '') IS DISTINCT FROM payload.size
+   OR COALESCE(profile."color", '') IS DISTINCT FROM payload.color
+   OR COALESCE(profile."tagMaterial", '') IS DISTINCT FROM payload.tag_material
+   OR COALESCE(profile."priceBand", '') IS DISTINCT FROM payload.price_band
+   OR COALESCE(profile."demandFlowNo", '') IS DISTINCT FROM payload.demand_flow_no
+   OR COALESCE(profile."processTemplate", '') IS DISTINCT FROM payload.process_template
+   OR COALESCE(profile."productPlanning", '') IS DISTINCT FROM payload.product_planning
+   OR COALESCE(profile."brandPlanning", '') IS DISTINCT FROM payload.brand_planning
+   OR COALESCE(profile."demandDepartment", '') IS DISTINCT FROM payload.demand_department
+   OR COALESCE(profile."spuOwner", '') IS DISTINCT FROM payload.spu_owner
+   OR COALESCE(profile."operationsOwner", '') IS DISTINCT FROM payload.operations_owner
+   OR COALESCE(profile."purchaseOwner", '') IS DISTINCT FROM payload.purchase_owner
+   OR COALESCE(profile."visualDirector", '') IS DISTINCT FROM payload.visual_director
+   OR COALESCE(profile."visualPlanning", '') IS DISTINCT FROM payload.visual_planning
+   OR COALESCE(profile."structureDesigner", '') IS DISTINCT FROM payload.structure_designer;
+
+WITH payload_stock_source AS (
+  SELECT
+    product."id" AS product_id,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSpu'), ''), '') AS source_spu,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSkuId'), ''), '') AS source_sku_id,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceCategory'), ''), '') AS source_category,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceItemType'), ''), '') AS source_item_type,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') AS source_sales_status,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceEnabled'), ''), '') AS source_enabled,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceStockDisabled'), ''), '') AS source_stock_disabled,
+    CASE
+      WHEN jsonb_typeof(product."payload"::jsonb -> 'skuItems') = 'array'
+        THEN jsonb_array_length(product."payload"::jsonb -> 'skuItems')
+      ELSE 0
+    END AS stock_sku_count,
+    COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') = '销售' AS stock_has_on_sale_sku
+  FROM "IntakeNonIntegratedProduct" product
+  WHERE product."deletedAt" IS NULL
+)
+SELECT
+  'intake_non_integrated_stock_source_profile_sync_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM payload_stock_source payload
+JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = payload.product_id
+WHERE COALESCE(profile."sourceSpu", '') IS DISTINCT FROM payload.source_spu
+   OR COALESCE(profile."sourceSkuId", '') IS DISTINCT FROM payload.source_sku_id
+   OR COALESCE(profile."sourceCategory", '') IS DISTINCT FROM payload.source_category
+   OR COALESCE(profile."sourceItemType", '') IS DISTINCT FROM payload.source_item_type
+   OR COALESCE(profile."sourceSalesStatus", '') IS DISTINCT FROM payload.source_sales_status
+   OR COALESCE(profile."sourceEnabled", '') IS DISTINCT FROM payload.source_enabled
+   OR COALESCE(profile."sourceStockDisabled", '') IS DISTINCT FROM payload.source_stock_disabled
+   OR COALESCE(profile."stockSkuCount", 0) IS DISTINCT FROM payload.stock_sku_count
+   OR COALESCE(profile."stockHasOnSaleSku", false) IS DISTINCT FROM payload.stock_has_on_sale_sku;
+
+SELECT
+  'intake_non_integrated_duplicate_sku_code_risk' AS check_name,
+  upper(btrim(sku."skuCode")) AS "skuCode",
+  COUNT(*)::integer AS duplicate_count
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL
+  AND NULLIF(btrim(sku."skuCode"), '') IS NOT NULL
+GROUP BY upper(btrim(sku."skuCode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(sku."skuCode"));
+
+SELECT
+  'intake_non_integrated_duplicate_barcode_risk' AS check_name,
+  upper(btrim(sku."barcode")) AS "barcode",
+  COUNT(*)::integer AS duplicate_count
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL
+  AND NULLIF(btrim(sku."barcode"), '') IS NOT NULL
+GROUP BY upper(btrim(sku."barcode"))
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, upper(btrim(sku."barcode"));
+
+SELECT
+  'intake_non_integrated_incomplete_sku_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL
+  AND sku."dataQualityStatus" = 'INCOMPLETE';
+
+SELECT
+  'intake_non_integrated_incomplete_sku_sample' AS check_name,
+  sku."id",
+  sku."productId",
+  product."spu",
+  sku."skuItemId",
+  sku."skuCode",
+  sku."specName",
+  sku."model",
+  sku."barcode",
+  sku."missingRequiredFields"
+FROM "IntakeNonIntegratedSkuItem" sku
+JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+WHERE product."deletedAt" IS NULL
+  AND sku."dataQualityStatus" = 'INCOMPLETE'
+ORDER BY product."spu", sku."sortOrder", sku."id"
+LIMIT 20;
+
+SELECT
+  'approval_workflow_identity_quality_risk' AS check_name,
+  COUNT(*)::integer AS total_count,
+  COUNT(*) FILTER (
+    WHERE NULLIF(btrim("approvalNumber"), '') IS NULL
+      OR "approvalNumber" <> upper(btrim("approvalNumber"))
+  )::integer AS invalid_approval_number_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("title"), '') IS NULL)::integer AS missing_title_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("productId"), '') IS NULL)::integer AS missing_product_id_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("accessKey"), '') IS NULL)::integer AS missing_access_key_count,
+  COUNT(*) FILTER (
+    WHERE EXISTS (
+      SELECT 1
+      FROM unnest("participantUserIds") AS participant_id
+      WHERE NULLIF(btrim(participant_id), '') IS NULL
+    )
+    OR cardinality("participantUserIds") <> (
+      SELECT COUNT(DISTINCT participant_id)::integer
+      FROM unnest("participantUserIds") AS participant_id
+    )
+  )::integer AS invalid_participant_user_ids_count
+FROM "ApprovalWorkflow";
+
+SELECT
+  'approval_workflow_json_shape_risk' AS check_name,
+  COUNT(*) FILTER (
+    WHERE "fieldMatrix" IS NOT NULL AND jsonb_typeof("fieldMatrix") NOT IN ('array', 'null')
+  )::integer AS invalid_field_matrix_count,
+  COUNT(*) FILTER (
+    WHERE "summary" IS NOT NULL AND jsonb_typeof("summary") NOT IN ('object', 'null')
+  )::integer AS invalid_summary_count,
+  COUNT(*) FILTER (
+    WHERE "metadata" IS NOT NULL AND jsonb_typeof("metadata") NOT IN ('object', 'null')
+  )::integer AS invalid_metadata_count
+FROM "ApprovalWorkflow";
+
+SELECT
+  'approval_workflow_field_change_quality_risk' AS check_name,
+  COUNT(*)::integer AS total_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("fieldKey"), '') IS NULL)::integer AS missing_field_key_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("source"), '') IS NULL)::integer AS missing_source_count,
+  COUNT(*) FILTER (
+    WHERE "sourcePage" IS NOT NULL AND NULLIF(btrim("sourcePage"), '') IS NULL
+  )::integer AS blank_source_page_count,
+  COUNT(*) FILTER (
+    WHERE "metadata" IS NOT NULL AND jsonb_typeof("metadata") NOT IN ('object', 'null')
+  )::integer AS invalid_metadata_count
+FROM "ApprovalWorkflowFieldChange";
+
+SELECT
+  'product_patent_record_quality_risk' AS check_name,
+  COUNT(*)::integer AS total_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("productId"), '') IS NULL)::integer AS missing_product_id_count,
+  COUNT(*) FILTER (WHERE NULLIF(btrim("patentGroupKey"), '') IS NULL)::integer AS missing_group_key_count,
+  COUNT(*) FILTER (
+    WHERE NULLIF(btrim("patentName"), '') IS NULL
+      AND NULLIF(btrim("patentNo"), '') IS NULL
+      AND NULLIF(btrim("applicationNo"), '') IS NULL
+  )::integer AS missing_patent_identity_count
+FROM "ProductPatentRecord";
+
+WITH payload_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    item.sku_item,
+    item.ordinality::integer AS sort_order,
+    COALESCE(NULLIF(btrim(item.sku_item ->> 'id'), ''), 'sku-' || item.ordinality::text) AS raw_sku_item_id
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+),
+deduped_payload_sku_items AS (
+  SELECT
+    payload_sku_items.*,
+    CASE
+      WHEN COUNT(*) OVER (PARTITION BY product_id, raw_sku_item_id) = 1
+        THEN raw_sku_item_id
+      ELSE raw_sku_item_id || '-' || ROW_NUMBER() OVER (
+        PARTITION BY product_id, raw_sku_item_id
+        ORDER BY sort_order
+      )::text
+    END AS sku_item_id
+  FROM payload_sku_items
+),
+payload_snapshot AS (
+  SELECT
+    product_id,
+    sku_item_id,
+    sort_order,
+    COALESCE(sku_item ->> 'skuCode', '') AS sku_code,
+    COALESCE(sku_item ->> 'specName', '') AS spec_name,
+    COALESCE(sku_item ->> 'model', '') AS model,
+    COALESCE(sku_item ->> 'barcode', '') AS barcode
+  FROM deduped_payload_sku_items
+),
+structured_snapshot AS (
+  SELECT
+    sku."productId" AS product_id,
+    sku."skuItemId" AS sku_item_id,
+    sku."sortOrder" AS sort_order,
+    sku."skuCode" AS sku_code,
+    sku."specName" AS spec_name,
+    sku."model" AS model,
+    sku."barcode" AS barcode
+  FROM "IntakeNonIntegratedSkuItem" sku
+  JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+  WHERE product."deletedAt" IS NULL
+)
+SELECT
+  'intake_non_integrated_sku_payload_sync_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM payload_snapshot payload
+FULL JOIN structured_snapshot structured
+  ON structured.product_id = payload.product_id
+ AND structured.sku_item_id = payload.sku_item_id
+WHERE payload.product_id IS NULL
+   OR structured.product_id IS NULL
+   OR payload.sort_order IS DISTINCT FROM structured.sort_order
+   OR payload.sku_code IS DISTINCT FROM structured.sku_code
+   OR payload.spec_name IS DISTINCT FROM structured.spec_name
+   OR payload.model IS DISTINCT FROM structured.model
+   OR payload.barcode IS DISTINCT FROM structured.barcode;
+
+WITH reference_option_rows AS (
+  SELECT 'ProductCategory' AS table_name, name, "sortOrder", description, icon FROM "ProductCategory"
+  UNION ALL SELECT 'MaterialCategory', name, "sortOrder", NULL::text AS description, icon FROM "MaterialCategory"
+  UNION ALL SELECT 'HardwareCategory', name, "sortOrder", description, icon FROM "HardwareCategory"
+  UNION ALL SELECT 'CommonComponentCategory', name, "sortOrder", description, icon FROM "CommonComponentCategory"
+  UNION ALL SELECT 'SubstrateCategory', name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateCategory"
+  UNION ALL SELECT 'SubstrateEnvironmentGrade', name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateEnvironmentGrade"
+  UNION ALL SELECT 'SubstrateSurfaceOption', name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateSurfaceOption"
+  UNION ALL SELECT 'SubstrateSystemNameOption', name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateSystemNameOption"
+),
+duplicate_reference_option_names AS (
+  SELECT table_name, lower(btrim(name)) AS normalized_name
+  FROM reference_option_rows
+  GROUP BY table_name, lower(btrim(name))
+  HAVING COUNT(*) > 1
+)
+SELECT
+  'reference_option_quality_risk' AS check_name,
+  COUNT(*)::integer AS identity_risk_count,
+  (SELECT COUNT(*)::integer FROM duplicate_reference_option_names) AS duplicate_normalized_name_count
+FROM reference_option_rows
+WHERE NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR "sortOrder" < 0
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+   OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL);
+
+SELECT
+  'substrate_thickness_spec_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "SubstrateThicknessSpec"
+WHERE NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR "sortOrder" < 0
+   OR "thicknessMm" <= 0
+   OR "sheetLengthMm" <= 0
+   OR "sheetWidthMm" <= 0;
+
+SELECT
+  'hardware_mapping_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "HardwareMapping"
+WHERE (
+    CASE WHEN NULLIF(btrim(COALESCE("blockName", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+    + CASE WHEN NULLIF(btrim(COALESCE("signatureHash", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+  ) <> 1
+  OR "usageCount" < 0
+  OR NULLIF(btrim("createdBy"), '') IS NULL
+  OR "createdBy" <> btrim("createdBy");
+
+SELECT
+  'location_and_material_binding_quality_risk' AS check_name,
+  (
+    SELECT COUNT(*)::integer
+    FROM "SubstrateFinish"
+    WHERE NULLIF(btrim("substrateId"), '') IS NULL
+       OR NULLIF(btrim("finishId"), '') IS NULL
+  ) AS substrate_finish_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "PanelMaterial"
+    WHERE NULLIF(btrim("panelId"), '') IS NULL
+       OR NULLIF(btrim("materialId"), '') IS NULL
+  ) AS panel_material_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "AssetVariantLocationBinding"
+    WHERE NULLIF(btrim("assetVariantId"), '') IS NULL
+       OR NULLIF(btrim("warehouseLocationId"), '') IS NULL
+  ) AS asset_variant_location_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "PreSkuLocationBinding"
+    WHERE NULLIF(btrim("preSkuId"), '') IS NULL
+       OR NULLIF(btrim("warehouseLocationId"), '') IS NULL
+  ) AS pre_sku_location_risk_count;
+
+SELECT
+  'legacy_packaging_plan_quality_risk' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "PackagingPlan"
+WHERE NULLIF(btrim(name), '') IS NULL
+   OR name <> btrim(name)
+   OR "boxCount" <= 0
+   OR jsonb_typeof(boxes) <> 'array'
+   OR ("totalWeight" IS NOT NULL AND "totalWeight" < 0)
+   OR ("totalVolume" IS NOT NULL AND "totalVolume" < 0)
+   OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+   OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL);
+
+SELECT
+  'config_audit_permission_quality_risk' AS check_name,
+  (
+    SELECT COUNT(*)::integer
+    FROM "SystemConfig"
+    WHERE NULLIF(btrim(key), '') IS NULL
+       OR key <> btrim(key)
+       OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+  ) AS system_config_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "ProviderConfig"
+    WHERE NULLIF(btrim("serviceType"), '') IS NULL
+       OR "serviceType" <> btrim("serviceType")
+       OR NULLIF(btrim(name), '') IS NULL
+       OR name <> btrim(name)
+       OR NULLIF(btrim("baseUrl"), '') IS NULL
+       OR "baseUrl" <> regexp_replace(btrim("baseUrl"), '/+$', '')
+       OR NULLIF(btrim("apiKey"), '') IS NULL
+       OR "apiKey" <> btrim("apiKey")
+       OR "sortOrder" < 0
+       OR (model IS NOT NULL AND NULLIF(btrim(model), '') IS NULL)
+       OR (extra IS NOT NULL AND jsonb_typeof(extra) <> 'object')
+  ) AS provider_config_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM (
+      SELECT "serviceType"
+      FROM "ProviderConfig"
+      WHERE "isActive" = true
+      GROUP BY "serviceType"
+      HAVING COUNT(*) > 1
+    ) duplicated_active
+  ) AS provider_active_conflict_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "ThemeConfig"
+    WHERE NULLIF(btrim(name), '') IS NULL
+       OR name <> btrim(name)
+       OR NULLIF(btrim("createdBy"), '') IS NULL
+       OR "createdBy" <> btrim("createdBy")
+       OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+       OR ("startDate" IS NOT NULL AND "endDate" IS NOT NULL AND "startDate" >= "endDate")
+       OR ("homeBackground" IS NOT NULL AND jsonb_typeof("homeBackground") <> 'object')
+       OR ("loginPanel" IS NOT NULL AND jsonb_typeof("loginPanel") <> 'object')
+  ) AS theme_config_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "IntakeNodePermissionOverride"
+    WHERE NULLIF(btrim("targetKey"), '') IS NULL
+       OR "targetKey" <> btrim("targetKey")
+       OR NULLIF(btrim("subjectKey"), '') IS NULL
+       OR "subjectKey" <> btrim("subjectKey")
+       OR NULLIF(btrim(action), '') IS NULL
+       OR action <> btrim(action)
+       OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL)
+       OR ("updatedBy" IS NOT NULL AND NULLIF(btrim("updatedBy"), '') IS NULL)
+  ) AS permission_override_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "AssistedAssemblyAiRender"
+    WHERE NULLIF(btrim("createdBy"), '') IS NULL
+       OR "createdBy" <> btrim("createdBy")
+       OR NULLIF(btrim(prompt), '') IS NULL
+       OR prompt <> btrim(prompt)
+       OR jsonb_typeof(params) <> 'object'
+       OR jsonb_typeof("resultImages") <> 'array'
+       OR jsonb_typeof("workspaceSnapshot") <> 'object'
+       OR jsonb_typeof("assetSnapshot") <> 'object'
+       OR ("attempts" IS NOT NULL AND jsonb_typeof("attempts") <> 'array')
+       OR ("durationMs" IS NOT NULL AND "durationMs" < 0)
+       OR ("negativePrompt" IS NOT NULL AND NULLIF(btrim("negativePrompt"), '') IS NULL)
+       OR ("referenceImageUrl" IS NOT NULL AND NULLIF(btrim("referenceImageUrl"), '') IS NULL)
+       OR ("externalRequestId" IS NOT NULL AND NULLIF(btrim("externalRequestId"), '') IS NULL)
+       OR ("errorMessage" IS NOT NULL AND NULLIF(btrim("errorMessage"), '') IS NULL)
+       OR (status = 'SUCCEEDED' AND jsonb_array_length("resultImages") = 0)
+       OR (status = 'FAILED' AND NULLIF(btrim(COALESCE("errorMessage", '')), '') IS NULL)
+  ) AS ai_render_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "Feedback"
+    WHERE NULLIF(btrim(title), '') IS NULL
+       OR title <> btrim(title)
+       OR NULLIF(btrim(description), '') IS NULL
+       OR description <> btrim(description)
+       OR NULLIF(btrim(category), '') IS NULL
+       OR category <> btrim(category)
+       OR array_position(images, '') IS NOT NULL
+       OR EXISTS (SELECT 1 FROM unnest(images) AS image WHERE NULLIF(btrim(image), '') IS NULL OR image <> btrim(image))
+       OR ("comments" IS NOT NULL AND jsonb_typeof("comments") <> 'array')
+       OR (resolution IS NOT NULL AND NULLIF(btrim(resolution), '') IS NULL)
+       OR (status = 'RESOLVED' AND ("resolvedAt" IS NULL OR NULLIF(btrim(COALESCE(resolution, '')), '') IS NULL))
+  ) AS feedback_risk_count,
+  (
+    SELECT COUNT(*)::integer
+    FROM "ActivityLog"
+    WHERE NULLIF(btrim("userId"), '') IS NULL
+       OR "userId" <> btrim("userId")
+       OR NULLIF(btrim(action), '') IS NULL
+       OR action <> btrim(action)
+       OR (("targetType" IS NULL) <> ("targetId" IS NULL))
+       OR ("targetType" IS NOT NULL AND NULLIF(btrim("targetType"), '') IS NULL)
+       OR ("targetId" IS NOT NULL AND NULLIF(btrim("targetId"), '') IS NULL)
+       OR ("changes" IS NOT NULL AND jsonb_typeof("changes") <> 'object')
+       OR ("metadata" IS NOT NULL AND jsonb_typeof("metadata") <> 'object')
+  ) AS activity_log_risk_count;
diff --git a/furniture-3d-system/scripts/sql/grant-external-readonly.sql b/furniture-3d-system/scripts/sql/grant-external-readonly.sql
new file mode 100644
index 00000000..2716baf0
--- /dev/null
+++ b/furniture-3d-system/scripts/sql/grant-external-readonly.sql
@@ -0,0 +1,14 @@
+-- Grant read-only access to the external contract schema.
+--
+-- Usage:
+--   1. Create the database role/user outside this script through the approved admin channel.
+--   2. Replace external_reader with the actual read-only role name if needed.
+--   3. Run this as a database administrator.
+--
+-- This script intentionally does not create users or include connection details.
+
+GRANT USAGE ON SCHEMA external TO external_reader;
+GRANT SELECT ON ALL TABLES IN SCHEMA external TO external_reader;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA external
+GRANT SELECT ON TABLES TO external_reader;
diff --git a/furniture-3d-system/scripts/sql/preflight-intake-non-integrated-sku-items.sql b/furniture-3d-system/scripts/sql/preflight-intake-non-integrated-sku-items.sql
new file mode 100644
index 00000000..72281653
--- /dev/null
+++ b/furniture-3d-system/scripts/sql/preflight-intake-non-integrated-sku-items.sql
@@ -0,0 +1,77 @@
+-- Preflight for structuring IntakeNonIntegratedProduct.payload.skuItems.
+-- Run before migration 20260530093000_add_intake_non_integrated_sku_items.
+-- Read-only. Any returned duplicate rows must be cleaned before applying the migration.
+
+WITH payload_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    p."spu",
+    p."brand",
+    item.ordinality::integer AS sort_order,
+    NULLIF(btrim(item.sku_item ->> 'skuCode'), '') AS sku_code,
+    NULLIF(btrim(item.sku_item ->> 'barcode'), '') AS barcode
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+)
+SELECT
+  'preflight_duplicate_sku_code' AS check_name,
+  sku_code AS duplicate_value,
+  COUNT(*)::integer AS duplicate_count,
+  jsonb_agg(
+    jsonb_build_object(
+      'product_id', product_id,
+      'spu', spu,
+      'brand', brand,
+      'sort_order', sort_order
+    )
+    ORDER BY product_id, sort_order
+  ) AS affected_rows
+FROM payload_sku_items
+WHERE sku_code IS NOT NULL
+GROUP BY sku_code
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, sku_code;
+
+WITH payload_sku_items AS (
+  SELECT
+    p."id" AS product_id,
+    p."spu",
+    p."brand",
+    item.ordinality::integer AS sort_order,
+    NULLIF(btrim(item.sku_item ->> 'skuCode'), '') AS sku_code,
+    NULLIF(btrim(item.sku_item ->> 'barcode'), '') AS barcode
+  FROM "IntakeNonIntegratedProduct" p
+  CROSS JOIN LATERAL jsonb_array_elements(
+    CASE
+      WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+        THEN p."payload"::jsonb -> 'skuItems'
+      ELSE '[]'::jsonb
+    END
+  ) WITH ORDINALITY AS item(sku_item, ordinality)
+  WHERE p."deletedAt" IS NULL
+)
+SELECT
+  'preflight_duplicate_barcode' AS check_name,
+  barcode AS duplicate_value,
+  COUNT(*)::integer AS duplicate_count,
+  jsonb_agg(
+    jsonb_build_object(
+      'product_id', product_id,
+      'spu', spu,
+      'brand', brand,
+      'sort_order', sort_order
+    )
+    ORDER BY product_id, sort_order
+  ) AS affected_rows
+FROM payload_sku_items
+WHERE barcode IS NOT NULL
+GROUP BY barcode
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, barcode;
diff --git a/furniture-3d-system/scripts/sql/preflight-product-sku-asset-profile.sql b/furniture-3d-system/scripts/sql/preflight-product-sku-asset-profile.sql
new file mode 100644
index 00000000..fdb5bc91
--- /dev/null
+++ b/furniture-3d-system/scripts/sql/preflight-product-sku-asset-profile.sql
@@ -0,0 +1,53 @@
+-- Preflight for structuring ProductSKU.attributes.assetSkuSnapshot.
+-- Read-only. Run before applying 20260530103000_add_product_sku_asset_profile.
+
+SELECT
+  'product_sku_asset_snapshot_missing_or_invalid' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') IS DISTINCT FROM 'object';
+
+SELECT
+  'product_sku_asset_snapshot_missing_primary_keys' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+  AND (
+    NULLIF(btrim(COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'sourceAssetVariantId', '')), '') IS NULL
+    OR NULLIF(btrim(COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'specCode', '')), '') IS NULL
+  );
+
+SELECT
+  'product_sku_asset_snapshot_source_id_mismatch' AS check_name,
+  COUNT(*)::integer AS row_count
+FROM "ProductSKU" sku
+JOIN "Product" product ON product."id" = sku."productId"
+WHERE sku."deletedAt" IS NULL
+  AND product."deletedAt" IS NULL
+  AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+  AND NULLIF(btrim(COALESCE(sku."sourceAssetVariantId", '')), '') IS NOT NULL
+  AND NULLIF(btrim(COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'sourceAssetVariantId', '')), '') IS NOT NULL
+  AND sku."sourceAssetVariantId" IS DISTINCT FROM sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'sourceAssetVariantId';
+
+SELECT
+  'product_sku_asset_snapshot_duplicate_barcode' AS check_name,
+  barcode,
+  COUNT(*)::integer AS duplicate_count
+FROM (
+  SELECT NULLIF(btrim(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'barcode'), '') AS barcode
+  FROM "ProductSKU" sku
+  JOIN "Product" product ON product."id" = sku."productId"
+  WHERE sku."deletedAt" IS NULL
+    AND product."deletedAt" IS NULL
+    AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+) source
+WHERE barcode IS NOT NULL
+GROUP BY barcode
+HAVING COUNT(*) > 1
+ORDER BY duplicate_count DESC, barcode;
diff --git a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
new file mode 100644
index 00000000..b46816c3
--- /dev/null
+++ b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
@@ -0,0 +1,3486 @@
+const fs = require('node:fs')
+const path = require('node:path')
+
+function parseArgs(argv) {
+  const args = {
+    mode: '',
+    outputPath: '',
+    root: path.resolve(__dirname, '..'),
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--mode') {
+      args.mode = argv[index + 1] ?? ''
+      if (!args.mode || args.mode.startsWith('--')) {
+        throw new Error('缺少 --mode <mode>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg === '--root') {
+      args.root = path.resolve(process.cwd(), argv[index + 1] ?? '')
+      if (!argv[index + 1] || argv[index + 1].startsWith('--')) {
+        throw new Error('缺少 --root <dir>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg === '--output') {
+      args.outputPath = argv[index + 1] ?? ''
+      if (!args.outputPath || args.outputPath.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      args.outputPath = arg.slice('--output='.length)
+      if (!args.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return args
+}
+
+const args =
+  require.main === module
+    ? parseArgs(process.argv.slice(2))
+    : {
+        mode: '',
+        outputPath: '',
+        root: path.resolve(__dirname, '..'),
+      }
+const ROOT_DIR = args.root
+const SCAN_DIRS = ['src']
+const SCRIPT_SCAN_DIRS = ['scripts', 'prisma']
+const CODE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx'])
+const PRISMA_SCHEMA_PATH = path.join(ROOT_DIR, 'prisma/schema.prisma')
+const COMPATIBILITY_SNAPSHOT_READ_PRIORITIES = ['high', 'medium', 'low', 'unknown']
+const PRODUCT_SKU_ATTRIBUTE_WRITE_PRIORITIES = ['high', 'medium', 'low', 'unknown']
+const PROCESS_SNAPSHOT_READ_PRIORITIES = ['high', 'medium', 'low', 'unknown']
+const SNAPSHOT_READ_DEBT_BUDGETS = {
+  compatibilitySnapshotRead: {
+    total: 48,
+    high: 0,
+    medium: 38,
+    unknown: 0,
+  },
+  processSnapshotRead: {
+    total: 37,
+    high: 0,
+    medium: 33,
+    unknown: 0,
+  },
+}
+const approvedReferenceEstimatorCostSourcePaths = new Map([
+  [
+    'src/app/api/intake/reference-image-estimate/route.ts',
+    '参考图识别接口只允许使用内置五金样本帮助识别，不保存正式 BOM 或成本。',
+  ],
+  [
+    'src/app/intake/RawMaterialLibraryPanel.tsx',
+    '参考图预估成本页面只允许把临时单价用于前端估算展示，不能写入正式产品、BOM 或包装方案。',
+  ],
+  [
+    'src/lib/reference-image-cost-catalog.ts',
+    '参考图预估成本的小样本目录只服务图片估算识别，不是五金、包装或正式成本主数据源。',
+  ],
+])
+
+const approvedFileSystemMasterDataSourcePaths = new Map([
+  [
+    'src/server/services/product-hardware-import.service.ts',
+    '旧产品五金 ZIP 导入入口允许从上传包读取 hardware.json / glb，并写入旧 CAD 兼容链 ProductHardware；不得扩展为扫描 public/uploads 目录反向补主数据。',
+  ],
+  [
+    'src/server/services/sku-upload.service.ts',
+    '旧 SKU CAD 上传入口允许读取本次请求的临时文件并生成旧 CAD 兼容结构；正式基础资料仍必须走结构化字段和校验。',
+  ],
+])
+
+function toPosixPath(filePath) {
+  return filePath.split(path.sep).join('/')
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function emitReport(report) {
+  writeJsonReport(args.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+}
+
+function listSourceFiles(dir) {
+  if (!fs.existsSync(dir)) return []
+
+  const entries = fs.readdirSync(dir, { withFileTypes: true })
+  const files = []
+
+  for (const entry of entries) {
+    if (entry.name === 'node_modules' || entry.name === '.next') continue
+
+    const absolutePath = path.join(dir, entry.name)
+    if (entry.isDirectory()) {
+      files.push(...listSourceFiles(absolutePath))
+      continue
+    }
+
+    if (entry.isFile() && CODE_EXTENSIONS.has(path.extname(entry.name))) {
+      files.push(absolutePath)
+    }
+  }
+
+  return files
+}
+
+function lineNumberAt(content, index) {
+  let line = 1
+  for (let i = 0; i < index; i += 1) {
+    if (content.charCodeAt(i) === 10) line += 1
+  }
+  return line
+}
+
+function isTestFile(relativePath) {
+  return (
+    relativePath.includes('/__tests__/') ||
+    relativePath.endsWith('.test.ts') ||
+    relativePath.endsWith('.test.tsx') ||
+    relativePath.endsWith('.spec.ts') ||
+    relativePath.endsWith('.spec.tsx')
+  )
+}
+
+const schemaJsonFieldClassifications = new Map(
+  [
+    ['ProductSKU.attributes', ['compatibility-snapshot', '正式 SKU 兼容属性；主读必须走结构化字段、assetProfile 或 legacyAttributes 输出。']],
+    ['ProductSKU.transferHistory', ['audit-log', 'SKU 转移历史。']],
+    ['ProductSkuAssetProfile.size', ['structured-json', '正式 SKU 资产资料结构化尺寸对象。']],
+    ['ProductSkuAssetProfile.lockedReasons', ['structured-json', '正式 SKU 资产资料人工锁定原因。']],
+    ['ProductSkuAssetProfile.sourceVariants', ['structured-json', '正式 SKU 资产资料来源规格款列表。']],
+    ['IntakeNonIntegratedProduct.payload', ['compatibility-snapshot', '非集成开品历史过程快照；主读应走 profile 和 skuItems 结构化表。']],
+    ['ProductPatentRecord.annualFees', ['structured-json', '专利年费明细。']],
+    ['ProductPatentRecord.annualFeeDates', ['structured-json', '专利年费日期明细。']],
+    ['IntakeReferenceLibraryItem.payload', ['structured-json', '资料库条目扩展字段；条目身份和编码由结构化列约束。']],
+    ['AssemblyStep.transform', ['geometry-json', '旧 CAD 装配步骤几何变换。']],
+    ['AssemblyStep.cameraPosition', ['geometry-json', '旧 CAD 装配步骤相机位置。']],
+    ['AssemblyStep.infoCardData', ['process-snapshot', '旧 CAD 装配步骤展示信息。']],
+    ['AssemblyVersion.snapshot', ['process-snapshot', '旧 CAD 装配版本完整步骤快照。']],
+    ['Panel.assemblySemantic', ['geometry-json', '旧 CAD 板件装配语义。']],
+    ['PackagingPlan.boxes', ['structured-json', '包装方案箱规列表。']],
+    ['PlanningTemplate.slots', ['process-template', '企划模板槽位配置。']],
+    ['PlanningTemplate.rules', ['process-template', '企划模板规则配置。']],
+    ['PlanningWorkspace.slotSelections', ['process-snapshot', '企划工作区槽位选择状态。']],
+    ['PlanningWorkspace.metadata', ['process-snapshot', '企划工作区扩展元数据。']],
+    ['PlanningDraft.selectedAssets', ['process-snapshot', '企划草稿已选资产快照。']],
+    ['PlanningDraft.previewNodes', ['process-snapshot', '企划草稿预览节点快照。']],
+    ['PlanningDraft.summary', ['process-snapshot', '企划草稿摘要。']],
+    ['PlanningDraft.warnings', ['process-snapshot', '企划草稿警告。']],
+    ['PlanningDraft.sourceSnapshot', ['process-snapshot', '企划草稿来源快照。']],
+    ['Substrate.metadata', ['structured-json', '板材基材扩展元数据。']],
+    ['AssetFamily.metadata', ['structured-json', '资产族扩展元数据。']],
+    ['AssetSeries.metadata', ['structured-json', '系列扩展元数据。']],
+    ['AssetVariant.dimensions', ['structured-json', '资产规格款尺寸对象。']],
+    ['AssetVariant.mountPoints', ['geometry-json', '资产规格款连接点。']],
+    ['AssetVariant.assemblyBasis', ['geometry-json', '资产规格款装配依据。']],
+    ['AssetVariant.compatibilityRules', ['structured-json', '资产规格款兼容规则。']],
+    ['AssetVariant.namingFields', ['structured-json', '资产规格款命名字段。']],
+    ['AssetVariant.businessData', ['structured-json', '资产规格款业务扩展资料。']],
+    ['AssetSkuSyncEvent.payload', ['sync-event', '资产 SKU 同步事件载荷。']],
+    ['AssetSkuSyncEvent.progress', ['sync-event', '资产 SKU 同步进度。']],
+    ['DraftGroup.summary', ['process-snapshot', '草稿组摘要快照。']],
+    ['AssistedAssemblyAiRender.params', ['process-snapshot', '辅助装配 AI 生图参数。']],
+    ['AssistedAssemblyAiRender.resultImages', ['process-snapshot', '辅助装配 AI 生图结果。']],
+    ['AssistedAssemblyAiRender.workspaceSnapshot', ['process-snapshot', '辅助装配工作区快照。']],
+    ['AssistedAssemblyAiRender.assetSnapshot', ['process-snapshot', '辅助装配资产快照。']],
+    ['AssistedAssemblyAiRender.attempts', ['process-snapshot', '辅助装配 AI 生图尝试记录。']],
+    ['PreSku.familySelection', ['compatibility-snapshot', '准 SKU 资产族选择快照；正式基础资料主读必须走 PreSkuBasicInfo。']],
+    ['PreSku.variantSelection', ['process-snapshot', '准 SKU 规格款组合快照。']],
+    ['PreSku.recommendedHardware', ['process-snapshot', '准 SKU 推荐五金快照。']],
+    ['PreSku.previewNodes', ['geometry-json', '准 SKU 预览节点快照。']],
+    ['PreSku.displaySummary', ['compatibility-snapshot', '准 SKU 展示摘要；正式字段主读必须走 PreSkuBasicInfo。']],
+    ['PreSku.bomPreview', ['process-snapshot', '准 SKU 入库前 BOM 预览。']],
+    ['PreSku.explosionPreview', ['geometry-json', '准 SKU 爆炸图预览。']],
+    ['PreSku.installStepPreview', ['process-snapshot', '准 SKU 安装步骤预览。']],
+    ['PreSku.packagingSnapshot', ['process-snapshot', '准 SKU 包装快照。']],
+    ['PreSkuPackagingPlan.boxes', ['structured-json', '准 SKU 包装箱规。']],
+    ['PreSkuPackagingPlan.costSummary', ['structured-json', '准 SKU 包装成本摘要。']],
+    ['PreSkuPackagingPlan.processDraft', ['process-snapshot', '准 SKU 包装过程草稿。']],
+    ['PackagedItem.payload', ['process-snapshot', '轻仓库包装项扩展载荷。']],
+    ['ProductSkuQualityInspection.metrics', ['process-snapshot', '正式 SKU 质检指标过程证据；质检结论和数量仍以结构化列为准。']],
+    ['ProductSkuQualityInspection.attachments', ['process-snapshot', '正式 SKU 质检附件过程证据；附件不能承接正式 SKU 基础资料真相。']],
+    ['EmployeeLookupCache.result', ['integration-cache', '员工匹配缓存结果。']],
+    ['Department.rawSnapshot', ['integration-cache', '组织部门外部原始快照。']],
+    ['ApprovalWorkflow.fieldMatrix', ['process-snapshot', '审批流字段矩阵。']],
+    ['ApprovalWorkflow.summary', ['process-snapshot', '审批流摘要。']],
+    ['ApprovalWorkflow.metadata', ['process-snapshot', '审批流扩展元数据。']],
+    ['ApprovalWorkflowFieldChange.oldValue', ['audit-log', '审批字段变更旧值。']],
+    ['ApprovalWorkflowFieldChange.newValue', ['audit-log', '审批字段变更新值。']],
+    ['ApprovalWorkflowFieldChange.metadata', ['audit-log', '审批字段变更元数据。']],
+    ['EmployeeDirectory.departmentExternalIds', ['integration-cache', '员工目录外部部门 ID 列表。']],
+    ['EmployeeDirectory.rawSnapshot', ['integration-cache', '员工目录外部原始快照。']],
+    ['Feedback.comments', ['audit-log', '反馈评论列表。']],
+    ['ActivityLog.changes', ['audit-log', '操作日志变更内容。']],
+    ['ActivityLog.metadata', ['audit-log', '操作日志元数据。']],
+    ['ThemeConfig.homeBackground', ['ui-config', '主题首页背景配置。']],
+    ['ThemeConfig.loginPanel', ['ui-config', '主题登录面板配置。']],
+    ['Hardware.specifications', ['structured-json', '五金规格。']],
+    ['Hardware.dimensions', ['structured-json', '五金尺寸对象。']],
+    ['Hardware.accessories', ['structured-json', '五金配件列表。']],
+    ['Hardware.mountPoints', ['geometry-json', '五金连接点。']],
+    ['ProductHardware.transform', ['geometry-json', '产品五金几何变换。']],
+    ['ProductHardware.sourceSignature', ['geometry-json', '产品五金来源几何签名。']],
+    ['CommonComponent.dimensions', ['structured-json', '通用组件尺寸对象。']],
+    ['CommonComponent.specifications', ['structured-json', '通用组件规格。']],
+    ['CommonComponent.mountPoints', ['geometry-json', '通用组件连接点。']],
+    ['SystemConfig.value', ['configuration', '系统配置值。']],
+    ['ProviderConfig.extra', ['configuration', '供应商配置扩展字段。']],
+  ].map(([field, [category, targetState]]) => [
+    field,
+    { category, targetState },
+  ]),
+)
+
+function getSchemaJsonFieldInventory() {
+  const content = fs.readFileSync(PRISMA_SCHEMA_PATH, 'utf8')
+  const fields = []
+  let currentModel = ''
+
+  content.split(/\r?\n/).forEach((line, index) => {
+    const modelMatch = line.match(/^model\s+(\w+)\s*\{/)
+    if (modelMatch) {
+      currentModel = modelMatch[1]
+      return
+    }
+    if (currentModel && /^}/.test(line)) {
+      currentModel = ''
+      return
+    }
+    if (!currentModel || !/\bJson\b/.test(line)) return
+
+    const fieldName = line.trim().split(/\s+/)[0]
+    const id = `${currentModel}.${fieldName}`
+    const classification = schemaJsonFieldClassifications.get(id)
+    fields.push({
+      id,
+      model: currentModel,
+      field: fieldName,
+      line: index + 1,
+      category: classification?.category ?? 'unclassified',
+      targetState: classification?.targetState ?? '',
+    })
+  })
+
+  return fields
+}
+
+function findStaleSchemaJsonFieldClassifications(schemaJsonFields) {
+  const schemaJsonFieldIds = new Set(schemaJsonFields.map((field) => field.id))
+  return Array.from(schemaJsonFieldClassifications.entries())
+    .filter(([id]) => !schemaJsonFieldIds.has(id))
+    .map(([id, classification]) => ({
+      id,
+      category: classification.category,
+      targetState: classification.targetState,
+    }))
+}
+
+function getSchemaJsonFieldClassifications() {
+  return new Map(schemaJsonFieldClassifications)
+}
+
+function findStaleFileClassifications(groups) {
+  const findings = []
+
+  for (const group of groups) {
+    for (const file of group.files) {
+      if (fs.existsSync(path.join(ROOT_DIR, file))) continue
+      findings.push({
+        group: group.name,
+        file,
+        reason: group.reason,
+      })
+    }
+  }
+
+  return findings
+}
+
+function buildSnapshotReadBudgetViolations(summary, budget, label) {
+  const actual = {
+    total: summary.total ?? 0,
+    high: summary.high ?? 0,
+    medium: summary.medium ?? 0,
+    unknown: summary.unknown ?? 0,
+  }
+
+  return Object.entries(budget)
+    .filter(([, expectedMax]) => typeof expectedMax === 'number')
+    .filter(([key, expectedMax]) => (actual[key] ?? 0) > expectedMax)
+    .map(([key, expectedMax]) => ({
+      label,
+      key,
+      actual: actual[key] ?? 0,
+      expectedMax,
+      reason:
+        'JSON/快照读点债务预算被突破；新增读点必须结构化、降级为明确兼容入口，或同步更新预算和治理说明。',
+    }))
+}
+
+function buildSnapshotReadBudgetReport(compatibilitySummary, processSummary) {
+  const compatibilityBudgetViolations = buildSnapshotReadBudgetViolations(
+    compatibilitySummary.compatibilitySnapshotReadSummary,
+    SNAPSHOT_READ_DEBT_BUDGETS.compatibilitySnapshotRead,
+    'compatibilitySnapshotRead',
+  )
+  const processBudgetViolations = buildSnapshotReadBudgetViolations(
+    processSummary.processSnapshotReadSummary,
+    SNAPSHOT_READ_DEBT_BUDGETS.processSnapshotRead,
+    'processSnapshotRead',
+  )
+
+  return {
+    budgets: SNAPSHOT_READ_DEBT_BUDGETS,
+    compatibilitySnapshotReadBudgetViolationCount: compatibilityBudgetViolations.length,
+    compatibilitySnapshotReadBudgetViolations: compatibilityBudgetViolations,
+    processSnapshotReadBudgetViolationCount: processBudgetViolations.length,
+    processSnapshotReadBudgetViolations: processBudgetViolations,
+  }
+}
+
+const formalPreSkuFields = [
+  'skuCode',
+  'draftSkuCode',
+  'skuSequenceCode',
+  'formalSkuCode',
+  'barcode',
+  'specName',
+  'versionNo',
+  'model',
+]
+
+const rules = [
+  {
+    id: 'pre-sku-legacy-text-reader-for-formal-fields',
+    severity: 'error',
+    description:
+      '准 SKU 正式字段不能再通过 readPreSkuTextField 从 displaySummary/familySelection 读取。',
+    pattern: new RegExp(
+      `(?<!function\\s)readPreSkuTextField\\s*\\([\\s\\S]{0,260}?['"\`](${formalPreSkuFields.join('|')})['"\`]`,
+      'g',
+    ),
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'pre-sku-display-summary-formal-dot-read',
+    severity: 'error',
+    description:
+      '准 SKU 正式字段主读必须走 PreSkuBasicInfo，不能点读 displaySummary/familySelection。',
+    pattern: new RegExp(
+      `\\b(displaySummary|familySelection)\\??\\.\\s*(${formalPreSkuFields.join('|')})\\b`,
+      'g',
+    ),
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'pre-sku-display-summary-formal-bracket-read',
+    severity: 'error',
+    description:
+      '准 SKU 正式字段主读必须走 PreSkuBasicInfo，不能 bracket 读取 displaySummary/familySelection。',
+    pattern: new RegExp(
+      `\\b(displaySummary|familySelection)\\s*\\[\\s*['"\`](${formalPreSkuFields.join('|')})['"\`]\\s*\\]`,
+      'g',
+    ),
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'pre-sku-display-summary-repository-call',
+    severity: 'error',
+    description:
+      '准 SKU 冲突检测必须查 PreSkuBasicInfo；禁止恢复 findByDisplaySummaryField(s) 这类 JSON path 查询入口。',
+    pattern: /\bfindByDisplaySummaryFields?\s*\(/g,
+    isAllowed: () => false,
+  },
+  {
+    id: 'product-sku-attributes-sku-name-read',
+    severity: 'error',
+    description:
+      '正式 SKU 名称必须使用 ProductSKU.name；attributes.skuName 只能作为 legacyAttributes 展示或测试样本，不能参与正式写入。',
+    pattern: /\battributes\??\.\s*skuName\b/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'product-sku-upload-attributes-sku-name-write',
+    severity: 'error',
+    description:
+      '上传链 skuAttributes.skuName 只能作为兼容属性保存，不能反写 ProductSKU.name。',
+    pattern: /\bskuAttributes\w*\??\.\s*skuName\b/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'product-sku-legacy-selection-fallback',
+    severity: 'error',
+    description:
+      '正式入库相似度判断必须读取 sourcePreSku；variantSelectionSummary/bomPreview 旧快照不能参与正式阻断判断。',
+    pattern: /\battributes\??\.\s*(variantSelectionSummary|bomPreview)\b/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'product-sku-asset-snapshot-direct-read',
+    severity: 'error',
+    description:
+      'assetSkuSnapshot 是兼容快照；业务判断必须读取 ProductSkuAssetProfile，不能再直接读取旧快照。',
+    pattern: /\battributes\??\.\s*assetSkuSnapshot\b|path:\s*\[\s*['"]assetSkuSnapshot/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'asset-variant-business-data-cad-data-direct-read',
+    severity: 'error',
+    description:
+      'AssetVariant.businessData.cadData 只能作为资产中心 CAD 几何兼容快照恢复 assemblyBasis；不能反推正式 SKU 身份、成本、条码或基础资料。',
+    pattern: /\bbusinessData\??\.\s*cadData\b/g,
+    isAllowed: ({ relativePath }) =>
+      isTestFile(relativePath) ||
+      relativePath === 'src/app/asset-center/asset-center-utils.ts' ||
+      relativePath === 'src/lib/open-product/asset-similarity.ts' ||
+      relativePath === 'src/server/services/asset-center.service.ts',
+  },
+  {
+    id: 'approval-workflow-field-matrix-permission-fallback',
+    severity: 'error',
+    description:
+      '审批流程访问权限必须读取结构化 businessRoles / participantUserIds；fieldMatrix 只能表达字段责任矩阵，不能反推流程可见范围。',
+    pattern: /\bgetWorkflowBusinessRoles\(\s*this\.getFieldMatrix\(\s*workflow\.fieldMatrix/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'reference-library-payload-identity-read',
+    severity: 'error',
+    description:
+      '资料库 payload 只能保存扩展展示字段；id/itemKey/code/name/category 等身份字段必须读取 IntakeReferenceLibraryItem 结构化列。',
+    pattern:
+      /\b(?:readText|readPayloadText)\(\s*(?:payload|nestedItem|source|rulePayload)\.(?:id|itemKey|code|name|letter|category|productCategory|categoryCode|prefix)\s*\)/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'formal-product-date-now-identity-fallback',
+    severity: 'error',
+    description:
+      '正式产品型号是主数据身份，不能用 Date.now() 生成临时 SPU；新建正式产品必须显式传入并校验 modelNumber。',
+    pattern: /SPU-\$\{\s*Date\.now\(\)\s*\}/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'draft-group-date-now-code-fallback',
+    severity: 'error',
+    description:
+      '草稿组编号是辅助装配承接单身份，不能只用 Date.now() 生成；必须使用可读前缀并带足够熵，数据库唯一索引只做兜底。',
+    pattern: /DG-\$\{\s*Date\.now\(\)\s*\}/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'formal-sku-code-fallback-after-structured-basic-info',
+    severity: 'error',
+    description:
+      '正式入库 ProductSKU.skuCode 只能来自 PreSkuBasicInfo.formalSkuCode；不能回退到接口临时 skuCode 或 modelNumber 序号。',
+    pattern: /readPreSkuBasicInfo\s*\(\s*preSku\s*,\s*['"`]formalSkuCode['"`]\s*\)\s*\|\|/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'pre-sku-formalized-status-write-outside-intake',
+    severity: 'error',
+    description:
+      '准 SKU 标记 FORMALIZED 只能发生在正式入库事务内；生命周期修复不能绕过专用证据计划直接改 PreSku.status。',
+    pattern:
+      /\b(?:prisma|tx)\.preSku\.(?:update|updateMany)\s*\([\s\S]{0,600}?data:\s*\{[\s\S]{0,240}?status:\s*['"`]FORMALIZED['"`]/g,
+    isAllowed: ({ relativePath }) =>
+      relativePath === 'src/server/services/intake.service.ts' || isTestFile(relativePath),
+  },
+  {
+    id: 'product-sku-source-pre-sku-write-outside-intake',
+    severity: 'error',
+    description:
+      'ProductSKU.sourcePreSkuId 是准 SKU 正式化关系，生产写入只能由正式入库事务创建；历史修复必须走带 currentEvidence 的专用修复入口。',
+    pattern:
+      /\b(?:prisma|tx)\.productSKU\.(?:create|update|updateMany|upsert)\s*\([\s\S]{0,2200}?sourcePreSkuId\s*:/g,
+    isAllowed: ({ relativePath }) =>
+      relativePath === 'src/server/services/intake.service.ts' || isTestFile(relativePath),
+  },
+  {
+    id: 'sku-code-conflict-auto-suffix',
+    severity: 'error',
+    description:
+      'SKU 编码冲突不能自动追加 -1/-2 后缀静默改码；必须阻断并回到业务资料层处理。',
+    pattern: /\b(?:skuCode|candidate)\s*=\s*`\$\{baseSkuCode\}-\$\{suffix\}`/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'core-identity-shorthand-query-without-normalization',
+    severity: 'error',
+    description:
+      '核心编码/条码查询不能用 where: { code } 这类缩写依赖调用方已规范化；必须显式 trim + uppercase 或调用 normalizeCoreIdentity。',
+    pattern: /where:\s*\{\s*(?:code|skuCode|modelNumber|barcode)\s*\}/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'core-identity-direct-query-without-normalization',
+    severity: 'error',
+    description:
+      '核心编码/条码查询不能把同名变量直接作为查询值；仓储和服务入口必须显式 normalizeCoreIdentity 或同口径规范化变量。',
+    pattern:
+      /where:\s*\{[\s\S]{0,180}\b(code|skuCode|modelNumber|barcode):\s*\1\b[\s\S]{0,180}\}/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'non-integrated-payload-filter-without-profile-guard',
+    severity: 'error',
+    description:
+      '非集成产品列表/筛选/待办查询必须以 IntakeNonIntegratedProductProfile 为主读；payload JSON 查询只能包在 payloadJsonWhenProfileMissing(...) 里作为历史兜底。',
+    pattern:
+      /(?<!payloadJsonWhenProfileMissing\()jsonText(?:Equals|Contains|MissingOrNotEquals)\(\s*\[[^\]]+\]/g,
+    isAllowed: ({ relativePath }) =>
+      relativePath !== 'src/server/services/intake-non-integrated-product.service.ts' ||
+      isTestFile(relativePath),
+  },
+  {
+    id: 'non-integrated-raw-payload-update-entrypoint',
+    severity: 'error',
+    description:
+      '非集成产品 payload 是历史兼容快照；禁止恢复 updatePayloadByUser 这种通用写入口，附件/预览等兼容写入必须使用明确命名入口。',
+    pattern: /\bupdatePayloadByUser\s*\(/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'app-route-critical-foundation-direct-write',
+    severity: 'error',
+    description:
+      'Route/Page 层不能直接写配置、权限、反馈、审计和 AI 生图地基表；必须走 service/repository 的规范化写入口。',
+    pattern:
+      /\b(?:prisma|tx)\.(systemConfig|providerConfig|themeConfig|intakeNodePermissionOverride|assistedAssemblyAiRender|feedback|activityLog)\.(create|update|upsert|delete|deleteMany|updateMany)\s*\(/g,
+    skip: ({ relativePath }) => !relativePath.startsWith('src/app/') || isTestFile(relativePath),
+    isAllowed: () => false,
+  },
+  {
+    id: 'app-route-core-master-data-direct-write',
+    severity: 'error',
+    description:
+      'Route/Page 层不能直接写产品资料、资产中心、草稿组和非集成主数据表；必须走 service/repository，保证编码、快照同步和质量状态护栏统一生效。',
+    pattern:
+      /\b(?:prisma|tx)\.(product|productSKU|productSkuAssetProfile|draftGroup|preSku|preSkuBasicInfo|assetFamily|assetVariant|intakeNonIntegratedProduct|intakeNonIntegratedProductProfile|intakeNonIntegratedSkuItem|masterDataQualityDecision|productPatentRecord|spuNumberCounter|intakeReferenceLibraryItem)\.(create|createMany|update|updateMany|upsert|delete|deleteMany)\s*\(/g,
+    skip: ({ relativePath }) => !relativePath.startsWith('src/app/') || isTestFile(relativePath),
+    isAllowed: () => false,
+  },
+  {
+    id: 'spu-number-standalone-reservation',
+    severity: 'error',
+    description:
+      '正式 SPU 号段不能单独占号；必须在非集成产品保存事务里调用 reserveInTransaction，确保号段游标和产品资料同事务提交或回滚。',
+    pattern: /\bspuNumberReservationService\.reserve\s*\(/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'filesystem-json-master-data-source',
+    severity: 'error',
+    description:
+      '应用层不能把本地 JSON 文件读写或导入当作主数据真相；正式资料必须进入数据库或明确的服务端契约，文件 JSON 只能作为导入载荷、迁移计划、备份或测试夹具。',
+    pattern:
+      /\b(?:fs\.)?(?:promises\.)?(?:readFileSync|writeFileSync|readFile|writeFile)\s*\([\s\S]{0,220}\.json['"`][\s\S]{0,180}\)|\bimport\s+[^;\n]+?\s+from\s+['"`][^'"`]+\.json['"`]|\brequire\s*\(\s*['"`][^'"`]+\.json['"`]\s*\)|\bimport\s*\(\s*['"`][^'"`]+\.json['"`]\s*\)/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'reference-library-item-key-id-fallback',
+    severity: 'error',
+    description:
+      '资料库条目的业务身份只能来自显式 itemKey 或稳定 code；不能用数据库 id / 前端临时 id 兜底 itemKey。',
+    pattern: /\bitemKey\s*=\s*[^;\n]*\|\|\s*id\s*\|\|/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'reference-library-item-key-direct-item-id',
+    severity: 'error',
+    description:
+      '资料库保存载荷不能直接把 item.id 当 itemKey；有业务编码的资料必须用 code，缺编码的资料要先定义稳定身份规则。',
+    pattern: /\bitemKey:\s*item\.id\b/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'reference-library-item-key-item-id-fallback',
+    severity: 'error',
+    description:
+      '资料库保存载荷不能用 code || item.id 这类兜底；有业务编码的资料缺 code 时应阻断，缺编码资料必须使用内容规格派生稳定 key。',
+    pattern: /\bitemKey:\s*[^,\n]*\|\|\s*item\.id\b/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'reference-library-item-prefixed-ui-id',
+    severity: 'error',
+    description:
+      '资料库保存载荷不能用 `item:${item.id}` / `category:${category.id}` 这类 UI 行 id 派生身份；必须使用业务 code 或内容规格派生的稳定 key。',
+    pattern:
+      /(?:\b(?:const|let)\s+itemKey\s*=\s*|\b(?:itemKey|code):\s*)`[\w-]+:\$\{[A-Za-z_$][\w$]*\.id\}`/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+  {
+    id: 'jst-stock-payload-source-identity-read',
+    severity: 'error',
+    description:
+      '聚水潭存量商品来源身份必须以 IntakeNonIntegratedProductProfile.source* 或 jst-stock-* 业务 ID 为准；payload.metadata.source* 只能作为兼容快照，不能参与同步查找、更新或排除判断。',
+    pattern:
+      /\bisJstSkuPayload\s*\(|payload:\s*\{\s*path:\s*\[\s*['"]metadata['"]\s*,\s*['"]sourceSpu['"]/g,
+    isAllowed: ({ relativePath }) => isTestFile(relativePath),
+  },
+]
+
+const advisoryStoragePaths = new Map([])
+
+const approvedScriptMasterDataWritePaths = new Map([
+  ['prisma/seed.ts', '开发种子数据脚本，只允许用于初始化本地/测试数据，不作为生产主数据修复入口。'],
+  ['scripts/add-more-skus.ts', '历史演示 SKU 补数脚本，保留为本地测试工具，不作为生产主数据修复入口。'],
+  [
+    'scripts/cleanup-legacy-product-structure.ts',
+    '旧 CAD 结构清理脚本；默认 dry-run，--apply 前必须人工确认目标环境、候选清单和备份。',
+  ],
+  ['scripts/create-demo-data.js', '演示数据重建脚本，保留为本地测试工具，不作为生产主数据修复入口。'],
+  ['scripts/seed-test-products.ts', '测试产品种子脚本，保留为测试工具，不作为生产主数据修复入口。'],
+  [
+    'scripts/sync-board-material-library.ts',
+    '板材/花色资料库同步维护脚本；只允许受控同步基础资料，不作为临时补数入口。',
+  ],
+  [
+    'scripts/sync-jst-sku-stock-products.ts',
+    '聚水潭存量商品同步脚本；只允许从已确认来源库同步到已确认目标库，不作为临时补数入口。',
+  ],
+  [
+    'scripts/sync-standard-finishes.ts',
+    '标准花色同步维护脚本；只允许受控同步基础资料，不作为临时补数入口。',
+  ],
+  [
+    'scripts/apply-pre-sku-formalization-repair.js',
+    '准 SKU 生命周期专项修复入口；只允许处理 currentEvidence/evidenceFingerprint 匹配的历史错位，不作为正式入库替代入口。',
+  ],
+  ['scripts/update-demo-models.js', '演示模型数据脚本，保留为本地测试工具，不作为生产主数据修复入口。'],
+  ['scripts/update-model-urls.ts', '旧模型 URL 维护脚本，执行前必须人工确认目标环境和备份。'],
+  ['scripts/update-test-data.ts', '测试数据维护脚本，保留为测试工具，不作为生产主数据修复入口。'],
+])
+
+const approvedScriptSafetyGuardRequirements = new Map([
+  [
+    'prisma/seed.ts',
+    {
+      reason: '种子脚本会清核心表，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'reset-local-seed',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/create-demo-data.js',
+    {
+      reason: '演示数据脚本会清核心表，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'reset-local-demo',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        'assertLocalDestructiveDemoAllowed()\n  createPrismaClient()',
+        'PrismaPg',
+      ],
+    },
+  ],
+  [
+    'scripts/update-demo-models.js',
+    {
+      reason: '演示模型脚本会清核心表，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'reset-local-demo',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        'assertLocalDestructiveDemoAllowed()\n  createPrismaClient()',
+        'PrismaPg',
+      ],
+    },
+  ],
+  [
+    'scripts/seed-open-platform-demo.ts',
+    {
+      reason: '开放平台演示种子会写产品、资产、草稿、仓库和用户资料，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'seed-local-open-platform-demo',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await Promise.all([",
+        "import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/add-more-skus.ts',
+    {
+      reason: '演示 SKU 补数脚本会写正式 SKU，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'add-local-demo-skus',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/seed-test-products.ts',
+    {
+      reason: '测试产品种子脚本会写正式产品和 SKU，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'seed-local-test-products',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/update-test-data.ts',
+    {
+      reason: '测试数据维护脚本会补写正式产品、SKU、分享和装配步骤，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'update-local-test-data',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/cleanup-legacy-product-structure.ts',
+    {
+      reason: '旧 CAD 结构清理脚本 apply 会删除旧结构数据，必须绑定确认词、目标库身份和备份 SHA。',
+      requiredTexts: [
+        'cleanup-legacy-product-structure',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/backfill-sku-structural-data.ts',
+    {
+      reason: 'SKU 结构数据回填会通过服务补写板件/孔位/五金结构，真实执行必须绑定确认词、目标库身份和备份 SHA。',
+      requiredTexts: [
+        '--apply',
+        'backfill-sku-structural-data',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        'await Promise.all([',
+        "import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/sync-board-material-library.ts',
+    {
+      reason: '板材基础资料同步会写基础资料，默认必须拒绝写库，真实执行必须绑定确认词、目标库身份和备份 SHA。',
+      requiredTexts: [
+        '--apply',
+        '默认禁止写库',
+        'sync-board-material-library',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        'await import("../src/lib/prisma")',
+      ],
+    },
+  ],
+  [
+    'scripts/sync-jst-sku-stock-products.ts',
+    {
+      reason: '聚水潭存量商品同步会写入产品资料，真实执行必须绑定确认词、目标库身份和来源库身份。',
+      requiredTexts: [
+        'sync-jst-sku-stock',
+        '--expected-database-identity',
+        '--expected-source-database-identity',
+        'DATABASE_URL',
+        'JST_SKU_DATABASE_URL',
+        "await Promise.all([",
+        "import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/sync-standard-finishes.ts',
+    {
+      reason: '标准饰面同步会写基础资料，默认必须拒绝写库，真实执行必须绑定确认词、目标库身份和备份 SHA。',
+      requiredTexts: [
+        '--apply',
+        '默认禁止写库',
+        'sync-standard-finishes',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/backfill-asset-variant-thumbnails.ts',
+    {
+      reason: '缩略图回填会写资产资料和生成文件，默认必须拒绝写库，真实执行必须绑定确认词、目标库身份和备份 SHA，并且在门禁后加载服务。',
+      requiredTexts: [
+        '--apply',
+        '默认禁止写库/生成文件',
+        'backfill-asset-variant-thumbnails',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        "import('../src/lib/prisma')",
+        "import('../src/server/services/asset-center.service')",
+      ],
+    },
+  ],
+  [
+    'scripts/apply-pre-sku-formalization-repair.js',
+    {
+      reason: '准 SKU 生命周期修复会写 PreSku / ProductSKU / DraftGroup，真实执行必须绑定确认词、当前证据、目标库身份和备份 SHA。',
+      requiredTexts: [
+        '--apply',
+        'I_UNDERSTAND_THIS_UPDATES_PRE_SKU_LIFECYCLE',
+        '--expected-database-identity',
+        '--expected-backup-sha256',
+        'DATABASE_BACKUP_FILE',
+        'currentEvidence',
+        'evidenceFingerprint',
+      ],
+    },
+  ],
+  [
+    'scripts/sync-employee-directory.ts',
+    {
+      reason: '花名册同步默认只能 dry-run，真实推送到系统内部接口必须显式 --apply。',
+      requiredTexts: ['--apply', '--dry-run', '|| !apply'],
+    },
+  ],
+  [
+    'scripts/update-model-urls.ts',
+    {
+      reason: '旧模型 URL 维护脚本会批量改正式产品模型地址，必须同时具备显式确认、本机库限制和 production 拦截。',
+      requiredTexts: [
+        'update-local-model-urls',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/performance-test.ts',
+    {
+      reason: '性能测试虽然只读，但会对数据库制造查询压力；必须限制为显式本机读库测试。',
+      requiredTexts: [
+        'run-local-performance-test',
+        'NODE_ENV',
+        'production',
+        'localhost',
+        '127.0.0.1',
+        "await import('../src/lib/prisma')",
+      ],
+    },
+  ],
+  [
+    'scripts/install-employee-directory-sync-timer.sh',
+    {
+      reason: '生产花名册定时器必须显式传入 --apply，避免脚本默认 dry-run 后假同步。',
+      requiredTexts: ['sync-employee-directory.ts --apply'],
+    },
+  ],
+])
+
+const approvedRawSqlMasterDataWritePaths = new Map([
+  [
+    'scripts/master-data-required-migrations.js',
+    '治理迁移清单只允许登记幂等 repairSql，用于补齐迁移副作用里的触发器、约束和历史字段清洗；实际执行仍由 foundation dry-run / rehearsal 包裹事务并受 --apply 边界控制。',
+  ],
+  [
+    'scripts/apply-master-data-cleanup-plan.js',
+    '显式历史清洗计划使用原生 SQL 更新结构化主数据和兼容快照；默认 dry-run，--apply 必须带业务确认。',
+  ],
+  [
+    'scripts/apply-pre-sku-formalization-repair.js',
+    '准 SKU 生命周期专项修复计划使用原生 SQL 更新 PreSku 状态、ProductSKU.sourcePreSkuId 和 DraftGroup 状态；默认 dry-run，--apply 必须带业务确认、当前证据、库身份和备份 SHA。',
+  ],
+  [
+    'src/server/services/spu-number-reservation.service.ts',
+    'SPU 号段服务使用原生 SQL 在同一事务内初始化和推进 SpuNumberCounter，并依赖行锁保证并发安全。',
+  ],
+])
+
+const approvedRawSqlMasterDataWriteTableScopes = new Map(
+  [
+    [
+      'scripts/master-data-required-migrations.js',
+      [
+        'IntakeNonIntegratedSkuItem',
+        'IntakeNonIntegratedProductProfile',
+        'PreSkuBasicInfo',
+        'ProductSkuAssetProfile',
+        'IntakeNonIntegratedProduct',
+        'ProductSKU',
+        'SpuNumberCounter',
+      ],
+    ],
+    [
+      'scripts/apply-master-data-cleanup-plan.js',
+      [
+        'IntakeNonIntegratedProduct',
+        'IntakeNonIntegratedProductProfile',
+        'IntakeNonIntegratedSkuItem',
+        'MasterDataQualityDecision',
+      ],
+    ],
+    [
+      'scripts/apply-pre-sku-formalization-repair.js',
+      [
+        'DraftGroup',
+        'PreSku',
+        'ProductSKU',
+      ],
+    ],
+    ['src/server/services/spu-number-reservation.service.ts', ['SpuNumberCounter']],
+  ].map(([file, tableNames]) => [file, new Set(tableNames)]),
+)
+
+const approvedRawSqlMasterDataReadPaths = new Map([
+  [
+    'scripts/master-data-required-migrations.js',
+    '治理迁移清单中的 repairSql 允许读取同一目标表的兼容快照字段，用于把旧 JSON 身份迁移到结构化列；不得作为业务读取入口。',
+  ],
+  [
+    'scripts/apply-master-data-cleanup-plan.js',
+    '显式历史清洗计划允许读取待清洗结构化主数据和兼容快照，用于 dry-run、模板输出和 apply 前后对账。',
+  ],
+  [
+    'scripts/apply-pre-sku-formalization-repair.js',
+    '准 SKU 生命周期专项修复入口允许读取 PreSku、ProductSKU、DraftGroup、包装和库位关系，用于 currentEvidence 校验、dry-run 和 apply 前事务内复核。',
+  ],
+  [
+    'scripts/verify-master-data-foundation.js',
+    '内部主数据巡检脚本允许只读扫描核心表、索引、约束、触发器和外部视图，用于生成地基质量报告。',
+  ],
+  [
+    'src/server/services/intake-node-permission-settings.service.ts',
+    '产品资料节点权限服务允许只读检查权限覆盖表结构和读取已保存覆盖规则；结构创建必须来自迁移。',
+  ],
+  [
+    'src/server/repositories/intake-product-pricing-query.repository.ts',
+    '产品核价查询仓储允许只读检索历史非集成 payload 核价状态；这是待结构化迁移的兼容入口，不能扩展为正式产品资料主读。',
+  ],
+  [
+    'src/server/services/spu-number-reservation.service.ts',
+    'SPU 号段服务允许在同一事务内读取计数器、SPU 规则和现有非集成产品号段，并用行锁保证并发安全。',
+  ],
+])
+
+const approvedRawSqlMasterDataReadTableScopes = new Map([
+  [
+    'scripts/master-data-required-migrations.js',
+    new Set([
+      'IntakeNonIntegratedProduct',
+      'IntakeNonIntegratedProductProfile',
+      'IntakeNonIntegratedSkuItem',
+      'IntakeReferenceLibraryItem',
+      'PreSku',
+      'PreSkuBasicInfo',
+      'Product',
+      'ProductSKU',
+      'ProductSkuAssetProfile',
+      'SpuNumberCounter',
+    ]),
+  ],
+  [
+    'scripts/apply-master-data-cleanup-plan.js',
+    new Set([
+      'IntakeNonIntegratedProduct',
+      'IntakeNonIntegratedProductProfile',
+      'IntakeNonIntegratedSkuItem',
+      'MasterDataQualityDecision',
+    ]),
+  ],
+  [
+    'scripts/apply-pre-sku-formalization-repair.js',
+    new Set([
+      'DraftGroup',
+      'PackagedItem',
+      'PreSku',
+      'PreSkuLocationBinding',
+      'PreSkuPackagingPlan',
+      'Product',
+      'ProductSKU',
+    ]),
+  ],
+  ['scripts/verify-master-data-foundation.js', '*'],
+  [
+    'src/server/services/intake-node-permission-settings.service.ts',
+    new Set(['IntakeNodePermissionOverride']),
+  ],
+  [
+    'src/server/repositories/intake-product-pricing-query.repository.ts',
+    new Set(['IntakeNonIntegratedProduct']),
+  ],
+  [
+    'src/server/services/spu-number-reservation.service.ts',
+    new Set([
+      'IntakeNonIntegratedProduct',
+      'IntakeReferenceLibraryItem',
+      'SpuNumberCounter',
+    ]),
+  ],
+])
+
+const approvedRuntimeDatabaseDdlPaths = new Map([
+  [
+    'scripts/master-data-required-migrations.js',
+    '治理迁移清单允许登记受控 repairSql 的 trigger/function/check constraint DDL；执行入口必须仍然通过迁移演练或地基巡检事务。',
+  ],
+])
+
+const approvedClientStorageUsages = [
+  {
+    file: 'src/app/asset-center/AssetCenterClient.tsx',
+    category: 'ui-state',
+    targetState: 'server-owned-asset-series',
+    reason: '资产中心当前选中系列 UI 状态缓存，不作为主数据真相。',
+    patterns: [/ASSET_CENTER_SELECTED_SERIES_STORAGE_KEY/],
+  },
+  {
+    file: 'src/app/first-login/page.tsx',
+    category: 'auth-display-cache',
+    targetState: 'server-owned-user',
+    reason: '首次登录后写入的客户端登录态缓存，用户主数据仍以后端数据库为准。',
+    patterns: [/localStorage\.setItem\(\s*['"]user['"]/],
+  },
+  {
+    file: 'src/app/HomeClient.workspace.tsx',
+    category: 'ui-state',
+    targetState: 'workspace-tab-session-only',
+    reason: '首页工作台 tab 会话缓存，不作为主数据真相。',
+    patterns: [/HOME_WORKSPACE_TAB_STORAGE_KEY/],
+  },
+  {
+    file: 'src/app/home/hooks/usePersistedExpandedProduct.ts',
+    category: 'ui-state',
+    targetState: 'home-expanded-product-session-only',
+    reason: '首页产品展开和滚动位置会话缓存，不作为主数据真相。',
+    patterns: [
+      /RESTORE_EXPANDED_PRODUCT_STORAGE_KEY/,
+      /EXPANDED_PRODUCT_STORAGE_KEY/,
+      /HOME_SCROLL_Y_STORAGE_KEY/,
+    ],
+  },
+  {
+    file: 'src/app/draft-groups/DraftGroupsFormalClient.tsx',
+    category: 'ui-state',
+    targetState: 'draft-group-formal-pane-width-cache-only',
+    reason: '草稿组正式化左右面板宽度缓存，只影响本机 UI 布局，不作为草稿组、SKU 或产品资料真相。',
+    patterns: [
+      /FORMAL_LEFT_PANE_WIDTH_STORAGE_KEY/,
+      /FORMAL_RIGHT_PANE_WIDTH_STORAGE_KEY/,
+      /function\s+readStoredPaneWidth\(/,
+    ],
+  },
+  {
+    file: 'src/app/draft-groups/DraftGroupsFormalClient.tsx',
+    category: 'process-draft-cache',
+    targetState: 'database-owned-formal-package-component-details',
+    reason: '草稿组正式化包内组件分配缓存只作为未推送前页面草稿；已推送 SKU 会同步到正式产品 skuItems.componentDetails。',
+    patterns: [/FORMAL_PACKAGE_COMPONENT_ASSIGNMENTS_STORAGE_KEY/],
+  },
+  {
+    file: 'src/app/intake/IntakeClient.tsx',
+    category: 'ui-state',
+    targetState: 'product-intake-list-filter-or-workspace-session',
+    reason: '产品资料页列表筛选和工作区 tab 状态缓存，不作为主数据真相。',
+    patterns: [
+      /readPersistedNonIntegratedListState[\s\S]{0,900}localStorage\.getItem\(\s*key/,
+      /writePersistedNonIntegratedListState[\s\S]{0,900}localStorage\.setItem\(\s*key/,
+      /getIntakeWorkspaceStateStorageKey\(/,
+    ],
+  },
+  {
+    file: 'src/app/intake/non-integrated/NonIntegratedDetailClient.tsx',
+    category: 'process-draft-cache',
+    targetState: 'database-owned-non-integrated-product-and-bom',
+    reason: '非集成详情页 BOM 会话草稿缓存，只做未保存输入兜底，不作为产品/BOM 主数据真相。',
+    patterns: [/buildNonIntegratedBomDraftStorageKey\(/],
+  },
+  {
+    file: 'src/lib/3d/playback-progress-manager.ts',
+    category: 'ui-state',
+    targetState: 'playback-progress-cache-only',
+    reason: '3D 播放进度缓存，不作为主数据真相。',
+    patterns: [/getStorageKey\(\)|storageKeyPrefix/],
+  },
+  {
+    file: 'src/lib/preferences.tsx',
+    category: 'ui-preference',
+    targetState: 'browser-local-display-preference',
+    reason: '用户显示偏好缓存，不作为主数据真相。',
+    patterns: [/['"]apple-ui-font-size['"]/],
+  },
+  {
+    file: 'src/hooks/useAuth.ts',
+    category: 'auth-display-cache',
+    targetState: 'server-owned-user-and-permissions',
+    reason: '客户端登录态展示缓存，不作为人员或权限主数据真相。',
+    patterns: [/USER_STORAGE_KEY/],
+  },
+  {
+    file: 'src/stores/auth.store.ts',
+    category: 'auth-display-cache',
+    targetState: 'server-owned-user-and-permissions',
+    reason: 'Zustand 客户端登录态会话缓存，不作为人员、权限或业务主数据真相。',
+    patterns: [/createJSONStorage\(\s*\(\s*\)\s*=>\s*sessionStorage/],
+  },
+]
+
+function getApprovedClientStorageFiles() {
+  return new Set(approvedClientStorageUsages.map((usage) => usage.file))
+}
+
+function getMatchWindow(content, index, radius = 900) {
+  return content.slice(Math.max(0, index - radius), Math.min(content.length, index + radius))
+}
+
+function resolveApprovedClientStorageUsage({ relativePath, content, match }) {
+  const usage = approvedClientStorageUsages.find((candidate) => {
+    if (candidate.file !== relativePath) return false
+    const windowText = getMatchWindow(content, match.index ?? 0)
+    return candidate.patterns.some((pattern) => pattern.test(windowText))
+  })
+
+  return usage
+    ? {
+        category: usage.category,
+        targetState: usage.targetState,
+        reason: usage.reason,
+      }
+    : null
+}
+
+const approvedServerMasterDataWritePaths = new Map([
+  ['src/server/repositories/asset-center.repository.ts', '资产中心仓储层写入口，承接系列/资产族/规格款结构化主数据。'],
+  ['src/server/repositories/assembly.repository.ts', '旧 CAD 装配步骤和装配版本仓储层写入口。'],
+  ['src/server/repositories/auth.repository.ts', '认证仓储层写入口，承接用户和登录身份维护。'],
+  ['src/server/repositories/common-component.repository.ts', '通用组件仓储层写入口。'],
+  ['src/server/repositories/department.repository.ts', '组织部门仓储层写入口。'],
+  ['src/server/repositories/draft-group.repository.ts', '草稿组仓储层写入口，承接 DraftGroup / PreSku / PreSkuBasicInfo。'],
+  ['src/server/repositories/employee-directory.repository.ts', '花名册员工目录仓储层写入口。'],
+  ['src/server/repositories/feedback.repository.ts', '反馈与反馈流程仓储层写入口。'],
+  ['src/server/repositories/handover.repository.ts', '交接协作仓储层写入口，只承接协作过程记录。'],
+  ['src/server/repositories/hardware.repository.ts', '五金基础资料仓储层写入口。'],
+  ['src/server/repositories/hole.repository.ts', '旧 CAD 孔位兼容链仓储层写入口。'],
+  ['src/server/repositories/intake-non-integrated-product.repository.ts', '非集成产品资料仓储层写入口，承接 profile / skuItems 结构化主数据。'],
+  ['src/server/repositories/log.repository.ts', '操作日志仓储层写入口，只承接受控审计日志。'],
+  ['src/server/repositories/material.repository.ts', '板材/材质基础资料仓储层写入口。'],
+  ['src/server/repositories/packaging.repository.ts', '旧包装方案仓储层写入口。'],
+  ['src/server/repositories/panel.repository.ts', '旧 CAD 板件兼容链仓储层写入口。'],
+  ['src/server/repositories/planning.repository.ts', '规划域仓储层写入口，只承接过程模板和草稿。'],
+  ['src/server/repositories/product-hardware.repository.ts', '旧 CAD 产品五金兼容链仓储层写入口。'],
+  ['src/server/repositories/product-upload.repository.ts', '产品上传文件元数据仓储层写入口。'],
+  ['src/server/repositories/product.repository.ts', '正式产品和正式 SKU 仓储层写入口。'],
+  ['src/server/repositories/share.repository.ts', '分享链接仓储层写入口，只承接访问入口和统计。'],
+  ['src/server/repositories/sku.repository.ts', '正式 SKU 仓储层写入口。'],
+  ['src/server/repositories/sku-quality-inspection.repository.ts', '仓库质检归档仓储层写入口，承接首批质检自动正式 SKU 建档和质检记录维护。'],
+  ['src/server/repositories/theme.repository.ts', '主题配置仓储层写入口。'],
+  ['src/server/repositories/team.repository.ts', '团队仓储层写入口。'],
+  ['src/server/repositories/user.repository.ts', '用户仓储层写入口。'],
+  ['src/server/repositories/warehouse.repository.ts', '轻仓库和库位绑定仓储层写入口。'],
+  ['src/server/services/approval-workflow.service.ts', '审批流程服务事务写入口，只承接过程审批和字段变更审计。'],
+  ['src/server/services/asset-center.service.ts', '资产中心服务层事务写入口，负责编码、系列归属和规格款校验。'],
+  ['src/server/services/asset-sku-sync.service.ts', '资产到正式 SKU 同步服务写入口，负责 ProductSkuAssetProfile 和兼容副本同步。'],
+  ['src/server/services/assisted-assembly-ai-render.service.ts', '辅助装配 AI 生图服务写入口，负责生图过程记录。'],
+  ['src/server/services/department.service.ts', '组织部门服务写入口，负责部门规范化和树关系维护。'],
+  ['src/server/services/dingtalk-auth.service.ts', '钉钉认证服务写入口，只负责登录用户映射维护。'],
+  ['src/server/services/external-employee-directory.service.ts', '外部花名册服务写入口，负责员工目录同步导入。'],
+  ['src/server/services/feedback-workflow.helper.ts', '反馈流程 helper 事务写入口，承接反馈流转过程数据。'],
+  ['src/server/services/feedback-workflow.service.ts', '反馈流程服务写入口，承接反馈流转过程数据。'],
+  ['src/server/services/hardware-matcher.runtime.ts', '五金匹配运行时写入口，只维护受控匹配记忆。'],
+  ['src/server/services/hardware-write-ops.ts', '五金写操作服务入口，负责五金基础资料规范化。'],
+  ['src/server/services/intake-non-integrated-product.service.ts', '非集成产品资料服务写入口，负责 payload 到 profile / skuItems 的结构化承接。'],
+  ['src/server/services/intake-node-permission-settings.service.ts', '产品资料节点权限覆盖服务写入口。'],
+  ['src/server/services/intake-reference-library.service.ts', '产品资料侧资料库服务写入口，负责 itemKey/code 唯一池。'],
+  ['src/server/services/intake.service.ts', '正式入库服务事务写入口，负责草稿到 Product/ProductSKU 的唯一正式落库链路。'],
+  ['src/server/services/jst-sku-stock-sync.service.ts', '聚水潭存量商品同步服务写入口，负责外部来源和结构化 profile/skuItems 双写。'],
+  ['src/server/services/logger.service.ts', '操作日志服务写入口，只承接审计日志。'],
+  ['src/server/services/open-platform-demo-seed.service.ts', '开放平台演示数据服务，仅用于 demo/test 种子，不作为生产主数据修复入口。'],
+  ['src/server/services/pre-sku-packaging.service.ts', '准 SKU 包装方案服务写入口，负责 PreSkuPackagingPlan 的受控保存。'],
+  ['src/server/services/product-collaborator.service.ts', '正式产品协作者服务事务写入口，负责 ProductCollaborator 关系和审计日志。'],
+  ['src/server/services/product-patent.service.ts', '专利台账服务写入口，负责专利分组和身份规范化。'],
+  ['src/server/services/provider-config.service.ts', 'AI/供应商配置服务写入口，负责配置 key 和激活状态约束。'],
+  ['src/server/services/sku-cad-import.helper.ts', 'SKU CAD 导入 helper 写入口，负责旧兼容链结构数据和正式 SKU 边界校验。'],
+  ['src/server/services/sku-command.service.ts', '正式 SKU 命令服务写入口，负责编辑、软删除、恢复和兼容属性维护。'],
+  ['src/server/services/spu-number-reservation.service.ts', 'SPU 号段服务写入口，只允许事务内 reserveInTransaction 更新号段。'],
+  ['src/server/services/system-config.service.ts', '系统配置服务写入口，负责通用配置 key/value。'],
+  ['src/server/services/system-init.service.ts', '系统初始化服务写入口，仅用于受控初始化默认配置。'],
+  ['src/server/services/team.service.ts', '团队服务写入口，负责组织团队结构维护。'],
+])
+
+const approvedServerMasterDataWriteModelScopes = new Map(
+  [
+    [
+      'src/server/repositories/asset-center.repository.ts',
+      ['assetFamily', 'assetFamilySeriesCompatibility', 'assetSeries', 'assetVariant'],
+    ],
+    ['src/server/repositories/assembly.repository.ts', ['assemblyStep', 'assemblyVersion']],
+    ['src/server/repositories/auth.repository.ts', ['activityLog', 'user']],
+    ['src/server/repositories/common-component.repository.ts', ['commonComponent', 'commonComponentCategory']],
+    ['src/server/repositories/department.repository.ts', ['department']],
+    ['src/server/repositories/draft-group.repository.ts', ['draftGroup', 'preSku', 'preSkuBasicInfo', 'preSkuPackagingPlan']],
+    ['src/server/repositories/employee-directory.repository.ts', ['department', 'employeeDirectory', 'employeeLookupCache', 'user']],
+    ['src/server/repositories/feedback.repository.ts', ['feedback']],
+    ['src/server/repositories/handover.repository.ts', ['activityLog', 'productCollaborator', 'productSKU']],
+    ['src/server/repositories/hardware.repository.ts', ['hardware', 'hardwareCategory', 'hardwareMapping']],
+    ['src/server/repositories/hole.repository.ts', ['hole']],
+    [
+      'src/server/repositories/intake-non-integrated-product.repository.ts',
+      ['intakeNonIntegratedProduct', 'intakeNonIntegratedProductProfile', 'intakeNonIntegratedSkuItem'],
+    ],
+    ['src/server/repositories/log.repository.ts', ['activityLog']],
+    [
+      'src/server/repositories/material.repository.ts',
+      [
+        'material',
+        'materialCategory',
+        'productCategory',
+        'substrate',
+        'substrateCategory',
+        'substrateEnvironmentGrade',
+        'substrateFinish',
+        'substrateSurfaceOption',
+        'substrateSystemNameOption',
+        'substrateThicknessSpec',
+      ],
+    ],
+    ['src/server/repositories/packaging.repository.ts', ['packagingPlan']],
+    ['src/server/repositories/panel.repository.ts', ['panel', 'panelMaterial']],
+    ['src/server/repositories/planning.repository.ts', ['planningDraft', 'planningTemplate', 'planningWorkspace']],
+    ['src/server/repositories/product-hardware.repository.ts', ['productHardware']],
+    ['src/server/repositories/product-upload.repository.ts', ['panel', 'product', 'productSKU']],
+    [
+      'src/server/repositories/product.repository.ts',
+      ['hole', 'panel', 'product', 'productCollaborator', 'productSKU', 'productSkuAssetProfile'],
+    ],
+    ['src/server/repositories/share.repository.ts', ['shareLink']],
+    ['src/server/repositories/sku.repository.ts', ['activityLog', 'productSKU']],
+    [
+      'src/server/repositories/sku-quality-inspection.repository.ts',
+      ['product', 'productSKU', 'productSkuAssetProfile'],
+    ],
+    ['src/server/repositories/theme.repository.ts', ['themeConfig']],
+    ['src/server/repositories/team.repository.ts', ['team']],
+    ['src/server/repositories/user.repository.ts', ['user']],
+    [
+      'src/server/repositories/warehouse.repository.ts',
+      [
+        'assetVariantLocationBinding',
+        'brandMaterialBinding',
+        'packagedItem',
+        'preSkuLocationBinding',
+        'warehouseLocation',
+      ],
+    ],
+    ['src/server/services/approval-workflow.service.ts', ['activityLog', 'approvalWorkflow', 'approvalWorkflowFieldChange']],
+    [
+      'src/server/services/asset-center.service.ts',
+      [
+        'assetFamily',
+        'assetVariant',
+        'substrate',
+        'substrateCategory',
+        'substrateEnvironmentGrade',
+        'substrateSurfaceOption',
+        'substrateSystemNameOption',
+        'substrateThicknessSpec',
+      ],
+    ],
+    ['src/server/services/asset-sku-sync.service.ts', ['assetSkuSyncEvent', 'productSKU', 'productSkuAssetProfile']],
+    ['src/server/services/assisted-assembly-ai-render.service.ts', ['assistedAssemblyAiRender']],
+    ['src/server/services/department.service.ts', ['activityLog', 'department']],
+    ['src/server/services/dingtalk-auth.service.ts', ['user']],
+    ['src/server/services/external-employee-directory.service.ts', ['employeeLookupCache', 'user']],
+    ['src/server/services/feedback-workflow.helper.ts', ['activityLog', 'feedback']],
+    ['src/server/services/feedback-workflow.service.ts', ['activityLog', 'feedback']],
+    ['src/server/services/hardware-matcher.runtime.ts', ['hardwareMapping', 'productHardware']],
+    ['src/server/services/hardware-write-ops.ts', ['hardware', 'hardwareCategory', 'hardwareMapping']],
+    [
+      'src/server/services/intake-non-integrated-product.service.ts',
+      ['intakeNonIntegratedProductProfile', 'intakeNonIntegratedSkuItem'],
+    ],
+    ['src/server/services/intake-reference-library.service.ts', ['intakeReferenceLibraryItem']],
+    ['src/server/services/intake-node-permission-settings.service.ts', ['intakeNodePermissionOverride']],
+    [
+      'src/server/services/intake.service.ts',
+      ['draftGroup', 'hole', 'packagedItem', 'packagingPlan', 'panel', 'preSku', 'preSkuBasicInfo', 'product', 'productHardware', 'productSKU'],
+    ],
+    [
+      'src/server/services/jst-sku-stock-sync.service.ts',
+      ['intakeNonIntegratedProduct', 'intakeNonIntegratedProductProfile', 'intakeNonIntegratedSkuItem'],
+    ],
+    ['src/server/services/logger.service.ts', ['activityLog']],
+    [
+      'src/server/services/open-platform-demo-seed.service.ts',
+      [
+        'draftGroup',
+        'material',
+        'materialCategory',
+        'packagedItem',
+        'product',
+        'productCategory',
+        'substrateCategory',
+        'substrateEnvironmentGrade',
+        'substrateSurfaceOption',
+        'substrateSystemNameOption',
+        'substrateThicknessSpec',
+        'user',
+      ],
+    ],
+    ['src/server/services/pre-sku-packaging.service.ts', ['preSkuPackagingPlan']],
+    ['src/server/services/product-collaborator.service.ts', ['activityLog', 'productCollaborator']],
+    ['src/server/services/product-patent.service.ts', ['productPatentRecord']],
+    ['src/server/services/provider-config.service.ts', ['providerConfig']],
+    ['src/server/services/sku-cad-import.helper.ts', ['hole', 'panel', 'productHardware', 'productSKU']],
+    ['src/server/services/sku-command.service.ts', ['productSKU', 'productSkuAssetProfile']],
+    ['src/server/services/spu-number-reservation.service.ts', ['intakeReferenceLibraryItem', 'spuNumberCounter']],
+    ['src/server/services/system-config.service.ts', ['systemConfig']],
+    ['src/server/services/system-init.service.ts', ['user']],
+    ['src/server/services/team.service.ts', ['activityLog', 'team']],
+  ].map(([file, models]) => [file, new Set(models)]),
+)
+
+function getApprovedMasterDataWriteBoundaryFiles() {
+  return {
+    script: Array.from(approvedScriptMasterDataWritePaths.keys()),
+    server: Array.from(approvedServerMasterDataWritePaths.keys()),
+  }
+}
+
+if (require.main !== module) {
+  module.exports = {
+    approvedRawSqlMasterDataWritePaths,
+    approvedRawSqlMasterDataWriteTableScopes,
+    approvedRawSqlMasterDataReadPaths,
+    approvedRawSqlMasterDataReadTableScopes,
+    approvedRuntimeDatabaseDdlPaths,
+    approvedScriptMasterDataWritePaths,
+    approvedServerMasterDataWritePaths,
+    approvedServerMasterDataWriteModelScopes,
+    buildSnapshotReadBudgetReport,
+    buildSnapshotReadBudgetViolations,
+    getApprovedMasterDataWriteBoundaryFiles,
+    getSchemaJsonFieldClassifications,
+    getSchemaJsonFieldInventory,
+    parseArgs,
+    SNAPSHOT_READ_DEBT_BUDGETS,
+    writeJsonReport,
+  }
+} else {
+const advisoryRules = [
+  {
+    id: 'client-local-storage-master-data-candidate',
+    severity: 'advisory',
+    description:
+      '资料库型数据不应长期以 localStorage 作为唯一真相；若用于多人协作、正式流转或外部依赖，必须迁入数据库或稳定服务端契约。',
+    pattern:
+      /\b(?:window\.)?(?:localStorage|sessionStorage)\s*\.\s*(?:getItem|setItem|removeItem|clear)\s*\(|\bcreateJSONStorage\s*\(\s*\(\s*\)\s*=>\s*(?:window\.)?(?:localStorage|sessionStorage)\s*\)/g,
+    resolveCandidate: ({ relativePath, content, match }) =>
+      advisoryStoragePaths.get(relativePath) ??
+      resolveApprovedClientStorageUsage({ relativePath, content, match }),
+  },
+]
+
+const compatibilitySnapshotReadRules = [
+  {
+    id: 'pre-sku-compatibility-snapshot-direct-read',
+    description:
+      'PreSku.displaySummary/familySelection 是兼容或过程快照；正式基础资料主读必须优先检查 basicInfo。',
+    pattern: /\b(?:preSku|firstPreSku|sourcePreSku|record)\.(displaySummary|familySelection)\b/g,
+  },
+  {
+    id: 'non-integrated-payload-direct-read',
+    description:
+      'IntakeNonIntegratedProduct.payload 是兼容快照；产品头和 SKU 主数据主读必须优先检查 profile/skuItems。',
+    pattern: /\b(?:product|record|existing|existingRecord|row)\.payload\b/g,
+  },
+  {
+    id: 'product-sku-attributes-direct-read',
+    description:
+      'ProductSKU.attributes 是兼容属性；正式 SKU 主数据主读必须优先检查结构化字段和 assetProfile。',
+    pattern: /\b(?:sku|currentSku|updatedSku|existing|record|s)\.attributes\b/g,
+  },
+]
+
+const processSnapshotReadRules = [
+  {
+    id: 'pre-sku-process-snapshot-direct-read',
+    description:
+      'PreSku.variantSelection/bomPreview/installStepPreview/packagingSnapshot 是过程快照；只能用于装配、BOM、包装和正式化物料生成，不能反推正式编码、品类或权限。',
+    pattern:
+      /\b(?:preSku|sourcePreSku|record)\.(variantSelection|bomPreview|installStepPreview|packagingSnapshot)\b/g,
+  },
+]
+
+const compatibilitySnapshotReadClassifications = new Map([
+  [
+    'scripts/apply-master-data-cleanup-plan.js',
+    {
+      category: 'explicit-cleanup-plan',
+      priority: 'low',
+      targetState: '显式历史清洗计划允许读兼容快照，但只能在 dry-run / apply 计划里使用，不能成为业务主读。',
+    },
+  ],
+  [
+    'scripts/backfill-sku-structural-data.ts',
+    {
+      category: 'one-time-backfill',
+      priority: 'low',
+      targetState: '一次性结构化回填脚本允许读取旧 attributes 作为迁移来源。',
+    },
+  ],
+  [
+    'scripts/cleanup-legacy-product-structure.ts',
+    {
+      category: 'legacy-cad-cleanup',
+      priority: 'low',
+      targetState: '旧 CAD 结构清理只把 attributes 作为兼容链判断证据。',
+    },
+  ],
+  [
+    'src/app/assisted-assembly/page.tsx',
+    {
+      category: 'process-geometry-snapshot',
+      priority: 'low',
+      targetState: '辅助装配恢复工作区只读取 assemblyWorkspace 过程快照，不承接正式产品主数据。',
+    },
+  ],
+  [
+    'src/app/intake/EdgeBandingLibraryPanel.tsx',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: '资料库 UI 可临时读取 payload 兼容展示；新增业务字段必须进入 IntakeReferenceLibraryItem 结构化列或专用表。',
+    },
+  ],
+  [
+    'src/app/intake/spuRuleLibraryLogic.ts',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: 'SPU 规则库 payload 只保留兼容展示；正式号段和品类唯一池以结构化 code/name/counter 为准。',
+    },
+  ],
+  [
+    'src/app/products/[id]/assembly/page.tsx',
+    {
+      category: 'process-geometry-snapshot',
+      priority: 'low',
+      targetState: '旧产品装配页读取 sourcePreSku assemblyWorkspace 只服务兼容 3D 恢复。',
+    },
+  ],
+  [
+    'src/app/products/[id]/page.tsx',
+    {
+      category: 'legacy-display-output',
+      priority: 'medium',
+      targetState: '旧产品详情只能以 legacyAttributes 名义展示兼容字段；正式 SKU 标签必须优先 assetProfile / 结构化字段。',
+    },
+  ],
+  [
+    'src/app/products/[id]/skus/[skuId]/assembly/page.tsx',
+    {
+      category: 'legacy-cad-compatibility',
+      priority: 'medium',
+      targetState: 'SKU 装配页读取 CAD 兼容 attributes 只服务旧链，新增装配主数据应落结构化表。',
+    },
+  ],
+  [
+    'src/app/products/[id]/skus/[skuId]/page.tsx',
+    {
+      category: 'legacy-display-output',
+      priority: 'medium',
+      targetState: '旧 SKU 详情只能以 legacyAttributes 名义展示兼容字段；编辑保存必须写结构化字段。',
+    },
+  ],
+  [
+    'src/lib/accessory-library.ts',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: '配件资料库 payload 只作兼容展示，资料身份和成本/BOM 字段必须走服务端结构化契约。',
+    },
+  ],
+  [
+    'src/lib/edge-banding-library.ts',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: '封边资料库 payload 只作兼容展示，资料身份和成本/BOM 字段必须走服务端结构化契约。',
+    },
+  ],
+  [
+    'src/lib/open-product/platform-view.ts',
+    {
+      category: 'shared-ui-compatibility-helper',
+      priority: 'medium',
+      targetState: '共享展示 helper 可保留旧草稿兜底，但新增正式字段必须优先 basicInfo。',
+    },
+  ],
+  [
+    'src/lib/packaging-material-library.ts',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: '包装材料资料库 payload 只作兼容展示，资料身份和成本/BOM 字段必须走服务端结构化契约。',
+    },
+  ],
+  [
+    'src/lib/steel-frame-library.ts',
+    {
+      category: 'reference-library-compatibility',
+      priority: 'medium',
+      targetState: '钢架资料库 payload 只作兼容展示，资料身份和成本/BOM 字段必须走服务端结构化契约。',
+    },
+  ],
+  [
+    'src/server/dto/product.dto.ts',
+    {
+      category: 'dto-legacy-output',
+      priority: 'medium',
+      targetState: 'DTO 只能输出 legacyAttributes 兼容字段；主合同字段必须来自结构化列。',
+    },
+  ],
+  [
+    'src/server/dto/sku.dto.ts',
+    {
+      category: 'dto-legacy-output',
+      priority: 'medium',
+      targetState: 'DTO 只能输出 legacyAttributes 兼容字段；主合同字段必须来自结构化列。',
+    },
+  ],
+  [
+    'src/server/repositories/intake-product-pricing-query.repository.ts',
+    {
+      category: 'historical-product-pricing-payload-query',
+      priority: 'medium',
+      targetState:
+        '产品核价查询当前只允许读取历史非集成 payload 中的确认状态、skuItems 和 pricingRows 作为兼容入口；后续必须迁入结构化核价行/文档确认表，不能作为正式产品资料主真相。',
+    },
+  ],
+  [
+    'src/server/repositories/product.repository.ts',
+    {
+      category: 'lifecycle-compatibility',
+      priority: 'medium',
+      targetState: '正式 SKU 软删除/恢复的生命周期身份必须读 ProductSKU 结构化列；attributes 只允许清理旧兼容元数据。',
+    },
+  ],
+  [
+    'src/server/services/approval-workflow.service.ts',
+    {
+      category: 'workflow-context-compatibility',
+      priority: 'medium',
+      targetState: '审批流上下文可读取 payload 兼容快照，但审批摘要不能成为产品资料第二真相。',
+    },
+  ],
+  [
+    'src/server/services/asset-sku-sync.service.ts',
+    {
+      category: 'compatibility-copy-maintenance',
+      priority: 'medium',
+      targetState: '资产同步服务只允许维护 attributes 兼容副本；业务判断必须继续读 ProductSkuAssetProfile。',
+    },
+  ],
+  [
+    'src/server/services/draft-group.mapper.ts',
+    {
+      category: 'dto-compatibility-fallback',
+      priority: 'medium',
+      targetState: '草稿组 mapper 可保留 displaySummary/familySelection 兼容输出，但 basicInfo 必须是正式字段主读。',
+    },
+  ],
+  [
+    'src/server/services/draft-group.service.ts',
+    {
+      category: 'pre-sku-basic-info-cleanup',
+      priority: 'low',
+      targetState: '草稿组服务只允许读取 displaySummary 用于清理旧基础资料字段；冲突检测、保存和自动建议必须走 PreSkuBasicInfo 与资产中心快照。',
+    },
+  ],
+  [
+    'src/server/services/intake-non-integrated-product.service.ts',
+    {
+      category: 'payload-hydration-compatibility',
+      priority: 'medium',
+      targetState: '非集成服务可用 payload 拼装旧记录视图；产品头和 SKU 主数据必须优先 profile / skuItems。',
+    },
+  ],
+  [
+    'src/server/services/intake-reference-library.service.ts',
+    {
+      category: 'reference-library-contract-output',
+      priority: 'low',
+      targetState: '资料库服务返回 payload 作为扩展载荷，身份和编码仍由结构化列约束。',
+    },
+  ],
+  [
+    'src/server/services/intake.service.ts',
+    {
+      category: 'process-snapshot-formalization',
+      priority: 'medium',
+      targetState: '正式入库可读取装配/BOM 过程快照生成结果，但正式编码和基础资料必须来自 PreSkuBasicInfo。',
+    },
+  ],
+  [
+    'src/server/services/jst-sku-stock-sync.service.ts',
+    {
+      category: 'external-sync-compatibility-copy',
+      priority: 'medium',
+      targetState: '聚水潭同步可维护 payload 兼容副本；来源身份和筛选必须落 profile 结构化字段。',
+    },
+  ],
+  [
+    'src/server/services/share.service.ts',
+    {
+      category: 'public-legacy-output',
+      priority: 'medium',
+      targetState: '分享页只能输出过滤后的 legacyAttributes；公开主字段必须来自结构化 DTO。',
+    },
+  ],
+  [
+    'src/server/services/sku-soft-delete.helper.ts',
+    {
+      category: 'lifecycle-compatibility',
+      priority: 'medium',
+      targetState: '软删除 helper 必须优先使用 ProductSKU.originalSkuCode 等结构化列；attributes 只允许作为旧数据回退和清理来源。',
+    },
+  ],
+  [
+    'src/server/services/spu-number-reservation.service.ts',
+    {
+      category: 'legacy-spu-rule-compatibility',
+      priority: 'medium',
+      targetState: 'SPU 号段服务只能读取旧 payload 规则作初始化兼容；正式占号以 SpuNumberCounter 为准。',
+    },
+  ],
+])
+
+const processSnapshotReadClassifications = new Map([
+  [
+    'src/app/assisted-assembly/page.tsx',
+    {
+      category: 'assisted-assembly-workspace-restore',
+      priority: 'low',
+      targetState:
+        '辅助装配页面可读取准 SKU 过程快照恢复 3D 工作区和已选物料；正式基础资料不得从这些快照反推。'
+    },
+  ],
+  [
+    'src/app/draft-groups/draftGroupDisplay.ts',
+    {
+      category: 'draft-group-readonly-material-summary',
+      priority: 'medium',
+      targetState:
+        '草稿组列表可按 variantSelection 汇总板材、组件和五金展示；编码、条码和品类必须继续走 basicInfo 或资产中心结构化字段。'
+    },
+  ],
+  [
+    'src/app/draft-groups/DraftGroupsFormalClient.tsx',
+    {
+      category: 'draft-group-formal-readonly-material-summary',
+      priority: 'medium',
+      targetState:
+        '草稿组正式化页面可从 variantSelection 读取板材、组件和五金构成用于只读展示与建议；正式编码、条码、品类和权限必须继续走 PreSkuBasicInfo 或结构化来源。'
+    },
+  ],
+  [
+    'src/app/draft-groups/[id]/DraftGroupDetailClient.tsx',
+    {
+      category: 'draft-group-readonly-process-preview',
+      priority: 'medium',
+      targetState:
+        '草稿组详情可展示 BOM 和安装步骤过程预览；补齐正式资料必须写 PreSkuBasicInfo。'
+    },
+  ],
+  [
+    'src/app/intake/IntakeClient.tsx',
+    {
+      category: 'intake-readonly-pre-sku-material-view',
+      priority: 'medium',
+      targetState:
+        '产品资料前端可读取准 SKU 过程快照展示物料构成；正式入库提交仍以后端 PreSkuBasicInfo 校验为准。'
+    },
+  ],
+  [
+    'src/app/intake/page.tsx',
+    {
+      category: 'intake-server-readonly-material-view',
+      priority: 'medium',
+      targetState:
+        '产品资料服务端页面可读取准 SKU 过程快照生成只读物料摘要；正式产品资料不得回写这些快照字段。'
+    },
+  ],
+  [
+    'src/app/intake/seriesComponentDetails.ts',
+    {
+      category: 'intake-readonly-component-detail',
+      priority: 'medium',
+      targetState:
+        '系列组件详情可读取 BOM 过程预览用于展示组件/物料信息；正式成本和编码以结构化 SKU 与 BOM 结果为准。'
+    },
+  ],
+  [
+    'src/app/products/[id]/assembly/page.tsx',
+    {
+      category: 'legacy-product-assembly-restore',
+      priority: 'low',
+      targetState:
+        '旧产品装配页可读取 sourcePreSku 过程快照恢复 3D 装配视图，不参与正式资料写入。'
+    },
+  ],
+  [
+    'src/server/services/draft-group.mapper.ts',
+    {
+      category: 'draft-group-dto-process-output',
+      priority: 'medium',
+      targetState:
+        '草稿组 DTO 可输出规格款组合、BOM、安装步骤和包装输入等过程结果；正式基础资料仍必须读取 PreSkuBasicInfo。'
+    },
+  ],
+  [
+    'src/server/services/draft-group.service.ts',
+    {
+      category: 'draft-group-process-source-resolution',
+      priority: 'medium',
+      targetState:
+        '草稿组服务可从 variantSelection 解析来源规格款 ID 和板材选项；型号、规格码、条码、品类和权限不得从过程快照反推。'
+    },
+  ],
+  [
+    'src/server/services/intake.service.ts',
+    {
+      category: 'formalization-process-materialization',
+      priority: 'medium',
+      targetState:
+        '正式入库可读取 variantSelection/bomPreview/installStepPreview 生成板件、五金、成本和兼容追溯；正式编码、名称和条码必须来自 PreSkuBasicInfo / ProductSkuAssetProfile。'
+    },
+  ],
+])
+
+const allowedProductSkuAttributeWriteKeys = new Set([
+  'draftGroupId',
+  'preSkuId',
+  'componentCodes',
+  'bomPreview',
+  'installStepPreview',
+  'variantSelectionSummary',
+  'assetSkuSnapshot',
+  'packagingSummary',
+  '_cadImport',
+  '_sourceFileName',
+  '_modelMeta',
+  '_holesImported',
+  '_holesCount',
+  '_holesVersion',
+])
+
+const reservedProductSkuAttributeWriteKeys = new Set([
+  'barcode',
+  'barCode',
+  'model',
+  'modelNumber',
+  'specCode',
+  'formalSkuCode',
+  'skuCode',
+  'productName',
+  'skuName',
+  'productCategory',
+  'category',
+  'categoryCode',
+  'seriesName',
+  'seriesCode',
+  'familyCode',
+  'assetFamilyCode',
+  'variantCode',
+  'versionNo',
+  'color',
+  'material',
+  'size',
+])
+
+const structuredJsonPayloadReadAllowlist = new Map([
+  [
+    'src/app/intake/EdgeBandingLibraryPanel.tsx',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/app/intake/spuRuleLibraryLogic.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/lib/accessory-library.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/lib/edge-banding-library.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/lib/packaging-material-library.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/lib/steel-frame-library.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+  [
+    'src/server/services/intake-reference-library.service.ts',
+    new Set(['non-integrated-payload-direct-read']),
+  ],
+])
+
+function isStructuredJsonPayloadRead(relativePath, ruleId) {
+  return structuredJsonPayloadReadAllowlist.get(relativePath)?.has(ruleId) ?? false
+}
+
+function classifyCompatibilitySnapshotRead(relativePath) {
+  return (
+    compatibilitySnapshotReadClassifications.get(relativePath) ?? {
+      category: 'unclassified',
+      priority: 'unknown',
+      targetState: '',
+    }
+  )
+}
+
+function collectCompatibilitySnapshotReadFindings(scanFiles) {
+  const findings = []
+  const skippedStructuredPayloadReads = []
+  const seen = new Set()
+
+  for (const absolutePath of scanFiles) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+    if (isTestFile(relativePath)) continue
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    for (const rule of compatibilitySnapshotReadRules) {
+      rule.pattern.lastIndex = 0
+
+      for (const match of content.matchAll(rule.pattern)) {
+        const line = lineNumberAt(content, match.index)
+        const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+        if (isStructuredJsonPayloadRead(relativePath, rule.id)) {
+          skippedStructuredPayloadReads.push({
+            ruleId: rule.id,
+            file: relativePath,
+            line,
+            text: lineText.trim(),
+            reason:
+              '结构化资料库 payload 扩展字段读点已由 IntakeReferenceLibraryItem 结构化身份和服务端契约兜底，不计入兼容快照主读风险。',
+          })
+          continue
+        }
+        const classification = classifyCompatibilitySnapshotRead(relativePath)
+        const record = {
+          ruleId: rule.id,
+          severity: classification.category === 'unclassified' ? 'error' : 'inventory',
+          file: relativePath,
+          line,
+          text: lineText.trim(),
+          description: rule.description,
+          category: classification.category,
+          priority: classification.priority,
+          targetState: classification.targetState,
+        }
+        const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+        if (seen.has(recordKey)) continue
+        seen.add(recordKey)
+        findings.push(record)
+      }
+    }
+  }
+
+  return { findings, skippedStructuredPayloadReads }
+}
+
+function countBy(items, key, initialKeys = []) {
+  return items.reduce(
+    (result, item) => {
+      const value = item[key] ?? 'unknown'
+      result[value] = (result[value] ?? 0) + 1
+      return result
+    },
+    Object.fromEntries(initialKeys.map((initialKey) => [initialKey, 0])),
+  )
+}
+
+function summarizeCompatibilitySnapshotReads(findings) {
+  const byPriority = countBy(
+    findings,
+    'priority',
+    COMPATIBILITY_SNAPSHOT_READ_PRIORITIES,
+  )
+  const unclassifiedFindings = findings.filter(
+    (finding) => finding.category === 'unclassified',
+  )
+  const blockingRiskFindings = findings.filter(
+    (finding) => finding.priority === 'high' || finding.category === 'unclassified',
+  )
+  const highPriorityCount = byPriority.high ?? 0
+
+  return {
+    compatibilitySnapshotReadCount: findings.length,
+    compatibilitySnapshotReadByCategory: countBy(findings, 'category'),
+    compatibilitySnapshotReadByRuleId: countBy(findings, 'ruleId'),
+    compatibilitySnapshotReadByFile: countBy(findings, 'file'),
+    compatibilitySnapshotReadByPriority: byPriority,
+    compatibilitySnapshotReadBlockingRiskCount:
+      blockingRiskFindings.length,
+    compatibilitySnapshotReadBlockingRisks: blockingRiskFindings,
+    compatibilitySnapshotReadSummary: {
+      total: findings.length,
+      high: highPriorityCount,
+      medium: byPriority.medium ?? 0,
+      low: byPriority.low ?? 0,
+      unknown: byPriority.unknown ?? 0,
+      unclassified: unclassifiedFindings.length,
+    },
+    unclassifiedCompatibilitySnapshotReadCount:
+      unclassifiedFindings.length,
+    unclassifiedCompatibilitySnapshotReads: unclassifiedFindings,
+  }
+}
+
+function findUnusedCompatibilitySnapshotReadClassifications(findings, skippedReads) {
+  const activeFiles = new Set([
+    ...findings.map((finding) => finding.file),
+    ...skippedReads.map((finding) => finding.file),
+  ])
+
+  return Array.from(compatibilitySnapshotReadClassifications.entries())
+    .filter(([file]) => !activeFiles.has(file))
+    .map(([file, classification]) => ({
+      file,
+      category: classification.category,
+      priority: classification.priority,
+      targetState: classification.targetState,
+    }))
+}
+
+function classifyProcessSnapshotRead(relativePath) {
+  return (
+    processSnapshotReadClassifications.get(relativePath) ?? {
+      category: 'unclassified',
+      priority: 'unknown',
+      targetState: '',
+    }
+  )
+}
+
+const forbiddenProcessSnapshotIdentityFields = [
+  'barcode',
+  'barCode',
+  'skuCode',
+  'formalSkuCode',
+  'model',
+  'modelNumber',
+  'productName',
+  'productCategory',
+  'category',
+  'categoryCode',
+  'seriesName',
+  'seriesCode',
+  'ownerId',
+  'ownerName',
+  'businessType',
+  'createdBy',
+  'updatedBy',
+]
+
+const processSnapshotFormalIdentityReadPatterns = [
+  {
+    id: 'process-snapshot-formal-field-dot-read',
+    pattern: new RegExp(
+      `\\b(?:variantSelection|bomPreview|installStepPreview|packagingSnapshot|selection|primarySelection|item|slot|hardware)\\??\\.\\s*(${forbiddenProcessSnapshotIdentityFields.join('|')})\\b`,
+      'g',
+    ),
+  },
+  {
+    id: 'process-snapshot-formal-field-bracket-read',
+    pattern: new RegExp(
+      `\\b(?:variantSelection|bomPreview|installStepPreview|packagingSnapshot|selection|primarySelection|item|slot|hardware)\\s*\\[\\s*['"\`](${forbiddenProcessSnapshotIdentityFields.join('|')})['"\`]\\s*\\]`,
+      'g',
+    ),
+  },
+  {
+    id: 'process-snapshot-assembly-basis-formal-field-read',
+    pattern: new RegExp(
+      `\\breadBasisText\\s*\\([^)]*,\\s*['"\`](${forbiddenProcessSnapshotIdentityFields.join('|')})['"\`]`,
+      'g',
+    ),
+  },
+]
+
+function collectProcessSnapshotReadFindings(scanFiles) {
+  const findings = []
+  const seen = new Set()
+  const PROCESS_SNAPSHOT_CONTEXT_LINE_WINDOW = 15
+
+  for (const absolutePath of scanFiles) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+    if (isTestFile(relativePath)) continue
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    let hasProcessSnapshotRead = false
+    const processSnapshotReadLines = []
+
+    for (const rule of processSnapshotReadRules) {
+      rule.pattern.lastIndex = 0
+
+      for (const match of content.matchAll(rule.pattern)) {
+        hasProcessSnapshotRead = true
+        const line = lineNumberAt(content, match.index)
+        processSnapshotReadLines.push(line)
+        const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+        const classification = classifyProcessSnapshotRead(relativePath)
+        const record = {
+          ruleId: rule.id,
+          severity: classification.category === 'unclassified' ? 'error' : 'inventory',
+          file: relativePath,
+          line,
+          text: lineText.trim(),
+          field: match[1],
+          description: rule.description,
+          category: classification.category,
+          priority: classification.priority,
+          targetState: classification.targetState,
+        }
+        const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+        if (seen.has(recordKey)) continue
+        seen.add(recordKey)
+        findings.push(record)
+      }
+    }
+
+    if (!hasProcessSnapshotRead) continue
+    const isNearProcessSnapshotRead = (line) =>
+      processSnapshotReadLines.some(
+        (readLine) => Math.abs(readLine - line) <= PROCESS_SNAPSHOT_CONTEXT_LINE_WINDOW,
+      )
+
+    for (const rule of processSnapshotFormalIdentityReadPatterns) {
+      rule.pattern.lastIndex = 0
+
+      for (const match of content.matchAll(rule.pattern)) {
+        const line = lineNumberAt(content, match.index)
+        if (!isNearProcessSnapshotRead(line)) continue
+        const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+        const record = {
+          ruleId: rule.id,
+          severity: 'error',
+          file: relativePath,
+          line,
+          text: lineText.trim(),
+          field: match[1],
+          description:
+            '过程快照不能读取编码、条码、品类、人员或权限字段作为正式资料；这些字段必须来自结构化真相源。',
+          category: 'forbidden-process-snapshot-identity-read',
+          priority: 'high',
+          targetState:
+            'variantSelection/bomPreview/installStepPreview/packagingSnapshot 只允许承载装配、BOM、包装和追溯过程，不允许反推正式主数据或权限。',
+        }
+        const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.field}:${record.text}`
+        if (seen.has(recordKey)) continue
+        seen.add(recordKey)
+        findings.push(record)
+      }
+    }
+  }
+
+  return findings
+}
+
+function summarizeProcessSnapshotReads(findings) {
+  const byPriority = countBy(
+    findings,
+    'priority',
+    PROCESS_SNAPSHOT_READ_PRIORITIES,
+  )
+  const unclassifiedFindings = findings.filter(
+    (finding) => finding.category === 'unclassified',
+  )
+  const blockingRiskFindings = findings.filter(
+    (finding) =>
+      finding.priority === 'high' ||
+      finding.category === 'unclassified' ||
+      finding.severity === 'error',
+  )
+
+  return {
+    processSnapshotReadCount: findings.length,
+    processSnapshotReadByCategory: countBy(findings, 'category'),
+    processSnapshotReadByRuleId: countBy(findings, 'ruleId'),
+    processSnapshotReadByFile: countBy(findings, 'file'),
+    processSnapshotReadByPriority: byPriority,
+    processSnapshotReadBlockingRiskCount: blockingRiskFindings.length,
+    processSnapshotReadBlockingRisks: blockingRiskFindings,
+    processSnapshotReadSummary: {
+      total: findings.length,
+      high: byPriority.high ?? 0,
+      medium: byPriority.medium ?? 0,
+      low: byPriority.low ?? 0,
+      unknown: byPriority.unknown ?? 0,
+      unclassified: unclassifiedFindings.length,
+    },
+    unclassifiedProcessSnapshotReadCount: unclassifiedFindings.length,
+    unclassifiedProcessSnapshotReads: unclassifiedFindings,
+  }
+}
+
+function findUnusedProcessSnapshotReadClassifications(findings) {
+  const activeFiles = new Set(findings.map((finding) => finding.file))
+
+  return Array.from(processSnapshotReadClassifications.entries())
+    .filter(([file]) => !activeFiles.has(file))
+    .map(([file, classification]) => ({
+      file,
+      category: classification.category,
+      priority: classification.priority,
+      targetState: classification.targetState,
+    }))
+}
+
+function findMatchingBrace(content, openBraceIndex) {
+  let depth = 0
+  let quote = ''
+  let escaped = false
+
+  for (let index = openBraceIndex; index < content.length; index += 1) {
+    const char = content[index]
+
+    if (quote) {
+      if (escaped) {
+        escaped = false
+        continue
+      }
+      if (char === '\\') {
+        escaped = true
+        continue
+      }
+      if (char === quote) {
+        quote = ''
+      }
+      continue
+    }
+
+    if (char === '"' || char === "'" || char === '`') {
+      quote = char
+      continue
+    }
+    if (char === '{') {
+      depth += 1
+      continue
+    }
+    if (char === '}') {
+      depth -= 1
+      if (depth === 0) return index
+    }
+  }
+
+  return -1
+}
+
+function extractTopLevelObjectKeys(objectLiteral) {
+  const keys = []
+  let depth = 0
+  let quote = ''
+  let escaped = false
+  let current = ''
+
+  const flushSegment = () => {
+    const segment = current.trim()
+    current = ''
+    if (!segment || segment.startsWith('...')) return
+
+    const keyMatch =
+      segment.match(/^['"`]([^'"`]+)['"`]\s*:/) ??
+      segment.match(/^([A-Za-z_$][\w$]*)\s*:/)
+    if (keyMatch?.[1]) {
+      keys.push(keyMatch[1])
+      return
+    }
+
+    const shorthandMatch = segment.match(/^([A-Za-z_$][\w$]*)$/)
+    if (shorthandMatch?.[1]) {
+      keys.push(shorthandMatch[1])
+    }
+  }
+
+  for (let index = 1; index < objectLiteral.length - 1; index += 1) {
+    const char = objectLiteral[index]
+
+    if (quote) {
+      current += char
+      if (escaped) {
+        escaped = false
+        continue
+      }
+      if (char === '\\') {
+        escaped = true
+        continue
+      }
+      if (char === quote) {
+        quote = ''
+      }
+      continue
+    }
+
+    if (char === '"' || char === "'" || char === '`') {
+      quote = char
+      current += char
+      continue
+    }
+    if (char === '{' || char === '[' || char === '(') {
+      depth += 1
+      current += char
+      continue
+    }
+    if (char === '}' || char === ']' || char === ')') {
+      depth -= 1
+      current += char
+      continue
+    }
+    if (char === ',' && depth === 0) {
+      flushSegment()
+      continue
+    }
+
+    current += char
+  }
+
+  flushSegment()
+  return keys
+}
+
+function collectProductSkuAttributeWriteFindings(scanFiles) {
+  const findings = []
+  const seen = new Set()
+  const attributesObjectPattern = /\battributes\s*:\s*\{/g
+
+  for (const absolutePath of scanFiles) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+    if (isTestFile(relativePath)) continue
+    if (
+      !relativePath.startsWith('src/server/') &&
+      !relativePath.startsWith('scripts/') &&
+      !relativePath.startsWith('prisma/')
+    ) {
+      continue
+    }
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    attributesObjectPattern.lastIndex = 0
+
+    for (const match of content.matchAll(attributesObjectPattern)) {
+      const openBraceIndex = content.indexOf('{', match.index)
+      const closeBraceIndex = findMatchingBrace(content, openBraceIndex)
+      if (openBraceIndex < 0 || closeBraceIndex < 0) continue
+
+      const objectLiteral = content.slice(openBraceIndex, closeBraceIndex + 1)
+      const keys = extractTopLevelObjectKeys(objectLiteral)
+      if (keys.length === 0) continue
+
+      for (const key of keys) {
+        const isAllowed = allowedProductSkuAttributeWriteKeys.has(key)
+        const isReserved = reservedProductSkuAttributeWriteKeys.has(key)
+        if (isAllowed && !isReserved) continue
+
+        const line = lineNumberAt(content, match.index)
+        const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+        const record = {
+          ruleId: isReserved
+            ? 'product-sku-attributes-reserved-key-write'
+            : 'product-sku-attributes-unregistered-key-write',
+          severity: isReserved ? 'error' : 'warning',
+          file: relativePath,
+          line,
+          text: lineText.trim(),
+          key,
+          priority: isReserved ? 'high' : 'medium',
+          description:
+            'ProductSKU.attributes 只能写已登记的兼容快照键；编码、条码、型号、规格、品类、颜色、材质、尺寸等正式资料必须写结构化字段或 ProductSkuAssetProfile。',
+          targetState:
+            '允许的兼容键需要集中登记；新增正式资料字段不得回写 ProductSKU.attributes，避免 JSON 成为第二真相。',
+        }
+        const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.key}`
+        if (seen.has(recordKey)) continue
+        seen.add(recordKey)
+        findings.push(record)
+      }
+    }
+  }
+
+  return findings
+}
+
+function summarizeProductSkuAttributeWriteFindings(findings) {
+  const blockingRisks = findings.filter((finding) => finding.severity === 'error')
+
+  return {
+    productSkuAttributeWriteRiskCount: findings.length,
+    productSkuAttributeWriteRiskByRuleId: countBy(findings, 'ruleId'),
+    productSkuAttributeWriteRiskByFile: countBy(findings, 'file'),
+    productSkuAttributeWriteRiskByPriority: countBy(
+      findings,
+      'priority',
+      PRODUCT_SKU_ATTRIBUTE_WRITE_PRIORITIES,
+    ),
+    productSkuAttributeWriteBlockingRiskCount: blockingRisks.length,
+    productSkuAttributeWriteBlockingRisks: blockingRisks,
+    productSkuAttributeWriteRisks: findings,
+  }
+}
+
+const referenceEstimatorCostSourceRules = [
+  {
+    id: 'reference-estimator-cost-source-symbol',
+    pattern:
+      /\b(?:REFERENCE_HARDWARE_ITEMS|DEFAULT_PACKAGING_PRICES|EDGE_BANDING_UNIT_PRICE|BOARD_PRICE_AREA_SQUARE_METER|REFERENCE_ESTIMATOR_PACKAGING_PRICES|REFERENCE_ESTIMATOR_EDGE_BANDING_UNIT_PRICE|REFERENCE_ESTIMATOR_BOARD_PRICE_AREA_SQUARE_METER)\b/g,
+    description:
+      '参考图预估成本内置单价只能服务图片估算展示，不能被正式产品、BOM、包装方案、轻仓库或外部同步链路复用。',
+  },
+  {
+    id: 'reference-estimator-cost-catalog-import',
+    pattern:
+      /\bfrom\s+['"][^'"]*reference-image-cost-catalog['"]|\brequire\(\s*['"][^'"]*reference-image-cost-catalog['"]\s*\)/g,
+    description:
+      'reference-image-cost-catalog 是参考图预估成本专用样本目录，不是正式五金或成本主数据源。',
+  },
+]
+
+function collectReferenceEstimatorCostBoundaryFindings(scanFiles) {
+  const findings = []
+  const seen = new Set()
+
+  for (const absolutePath of scanFiles) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+    if (isTestFile(relativePath)) continue
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    const approvalReason = approvedReferenceEstimatorCostSourcePaths.get(relativePath)
+
+    for (const rule of referenceEstimatorCostSourceRules) {
+      rule.pattern.lastIndex = 0
+
+      for (const match of content.matchAll(rule.pattern)) {
+        const line = lineNumberAt(content, match.index)
+        const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+        if (
+          rule.id === 'reference-estimator-cost-source-symbol' &&
+          /from\s+['"][^'"]*reference-image-cost-catalog['"]/.test(lineText)
+        ) {
+          continue
+        }
+        const record = {
+          ruleId: rule.id,
+          severity: approvalReason ? 'approved-reference-estimator-cost' : 'error',
+          file: relativePath,
+          line,
+          text: lineText.trim(),
+          description: rule.description,
+          reason:
+            approvalReason ??
+            '未批准使用参考图预估成本源；正式成本必须来自结构化物料/五金/包装资料库或明确的后端算法。',
+          priority: approvalReason ? 'low' : 'high',
+          targetState:
+            '参考图预估成本只保留为人工判断辅助；正式产品成本、BOM 成本、包装成本和外部只读视图不得读取这些页面估算常量或样本目录。',
+        }
+        const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+        if (seen.has(recordKey)) continue
+        seen.add(recordKey)
+        findings.push(record)
+      }
+    }
+  }
+
+  return findings
+}
+
+function summarizeReferenceEstimatorCostBoundaryFindings(findings) {
+  const blockingRisks = findings.filter((finding) => finding.severity === 'error')
+
+  return {
+    referenceEstimatorCostBoundaryFindingCount: findings.length,
+    referenceEstimatorCostBoundaryByRuleId: countBy(findings, 'ruleId'),
+    referenceEstimatorCostBoundaryByFile: countBy(findings, 'file'),
+    approvedReferenceEstimatorCostBoundaryFindings: findings.filter(
+      (finding) => finding.severity === 'approved-reference-estimator-cost',
+    ),
+    unclassifiedReferenceEstimatorCostBoundaryFindingCount: blockingRisks.length,
+    unclassifiedReferenceEstimatorCostBoundaryFindings: blockingRisks,
+  }
+}
+
+const fileSystemMasterDataReadPattern =
+  /\b(?:fs\.)?(?:promises\.)?(?:readdir|readFile|readFileSync|createReadStream)\s*\(/g
+const fileSystemMasterDataPathHintPattern =
+  /public[\\/]+uploads|uploads[\\/]+models|hardware\.json|tempGlbPath|tempFilePath|uploadedFile|modelFile|zipPath|extractDir|cacheDirectory/g
+const serverMasterDataWriteTokenPattern =
+  /\b(?:prisma|this\.prisma|client|tx)\.(product|productSKU|panel|hole|productHardware|hardware)\.(create|createMany|upsert|update|updateMany|delete|deleteMany)\b/gi
+
+function collectFileSystemMasterDataSourceFindings(scanFiles) {
+  const findings = []
+  const seen = new Set()
+
+  for (const absolutePath of scanFiles) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+    if (isTestFile(relativePath)) continue
+    if (!relativePath.startsWith('src/server/') && !relativePath.startsWith('scripts/')) {
+      continue
+    }
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    if (!fileSystemMasterDataReadPattern.test(content)) {
+      fileSystemMasterDataReadPattern.lastIndex = 0
+      continue
+    }
+    fileSystemMasterDataReadPattern.lastIndex = 0
+    if (!fileSystemMasterDataPathHintPattern.test(content)) {
+      fileSystemMasterDataPathHintPattern.lastIndex = 0
+      continue
+    }
+    fileSystemMasterDataPathHintPattern.lastIndex = 0
+
+    const writeMatches = Array.from(content.matchAll(serverMasterDataWriteTokenPattern))
+    serverMasterDataWriteTokenPattern.lastIndex = 0
+    if (writeMatches.length === 0) continue
+
+    const approvalReason = approvedFileSystemMasterDataSourcePaths.get(relativePath)
+    for (const match of writeMatches) {
+      const line = lineNumberAt(content, match.index)
+      const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+      const record = {
+        ruleId: 'filesystem-master-data-source-write',
+        severity: approvalReason ? 'approved-filesystem-master-data-source' : 'error',
+        file: relativePath,
+        line,
+        text: lineText.trim(),
+        model: match[1],
+        action: match[2],
+        reason:
+          approvalReason ??
+          '未登记的文件系统读取 + 主数据写入组合；禁止把 public/uploads、临时文件或本地目录扫描结果反向当作主数据真相。',
+        priority: approvalReason ? 'low' : 'high',
+        targetState:
+          '文件上传可作为明确入口的导入请求来源，但不能通过扫描 public/uploads 或任意本地文件目录反向生成 Product/SKU/BOM 主数据。',
+      }
+      const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.model}:${record.action}`
+      if (seen.has(recordKey)) continue
+      seen.add(recordKey)
+      findings.push(record)
+    }
+  }
+
+  return findings
+}
+
+function summarizeFileSystemMasterDataSourceFindings(findings) {
+  const blockingRisks = findings.filter((finding) => finding.severity === 'error')
+
+  return {
+    fileSystemMasterDataSourceFindingCount: findings.length,
+    fileSystemMasterDataSourceByFile: countBy(findings, 'file'),
+    approvedFileSystemMasterDataSources: findings.filter(
+      (finding) => finding.severity === 'approved-filesystem-master-data-source',
+    ),
+    unclassifiedFileSystemMasterDataSourceCount: blockingRisks.length,
+    unclassifiedFileSystemMasterDataSources: blockingRisks,
+  }
+}
+
+const files = SCAN_DIRS.flatMap((scanDir) => listSourceFiles(path.join(ROOT_DIR, scanDir)))
+const scriptFiles = SCRIPT_SCAN_DIRS.flatMap((scanDir) => listSourceFiles(path.join(ROOT_DIR, scanDir)))
+const findings = []
+const approvedCompatibility = []
+const advisoryFindings = []
+const unclassifiedStorageFindings = []
+const scriptMasterDataWriteFindings = []
+const unclassifiedScriptMasterDataWriteFindings = []
+const serverMasterDataWriteFindings = []
+const unclassifiedServerMasterDataWriteFindings = []
+const rawSqlMasterDataWriteFindings = []
+const unclassifiedRawSqlMasterDataWriteFindings = []
+const rawSqlMasterDataReadFindings = []
+const unclassifiedRawSqlMasterDataReadFindings = []
+const runtimeDatabaseDdlFindings = []
+const unclassifiedRuntimeDatabaseDdlFindings = []
+const scriptSafetyGuardFindings = []
+const missingScriptSafetyGuardFindings = []
+const seenRecords = new Set()
+const schemaJsonFieldInventory = getSchemaJsonFieldInventory()
+const unclassifiedSchemaJsonFields = schemaJsonFieldInventory.filter(
+  (field) => field.category === 'unclassified',
+)
+const staleSchemaJsonFieldClassifications =
+  findStaleSchemaJsonFieldClassifications(schemaJsonFieldInventory)
+const staleFileClassifications = findStaleFileClassifications([
+  {
+    name: 'advisoryStoragePaths',
+    files: advisoryStoragePaths.keys(),
+    reason: '客户端本地存储分类表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedScriptMasterDataWritePaths',
+    files: approvedScriptMasterDataWritePaths.keys(),
+    reason: '脚本层主数据直写批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedScriptSafetyGuardRequirements',
+    files: approvedScriptSafetyGuardRequirements.keys(),
+    reason: '脚本安全门禁清单不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedRawSqlMasterDataWritePaths',
+    files: approvedRawSqlMasterDataWritePaths.keys(),
+    reason: '原生 SQL 主数据写入批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedRawSqlMasterDataWriteTableScopes',
+    files: approvedRawSqlMasterDataWriteTableScopes.keys(),
+    reason: '原生 SQL 主数据写入表作用域不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedRawSqlMasterDataReadPaths',
+    files: approvedRawSqlMasterDataReadPaths.keys(),
+    reason: '原生 SQL 主数据读取批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedRawSqlMasterDataReadTableScopes',
+    files: approvedRawSqlMasterDataReadTableScopes.keys(),
+    reason: '原生 SQL 主数据读取表作用域不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedRuntimeDatabaseDdlPaths',
+    files: approvedRuntimeDatabaseDdlPaths.keys(),
+    reason: '运行时数据库 DDL 批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedReferenceEstimatorCostSourcePaths',
+    files: approvedReferenceEstimatorCostSourcePaths.keys(),
+    reason: '参考图预估成本源批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedFileSystemMasterDataSourcePaths',
+    files: approvedFileSystemMasterDataSourcePaths.keys(),
+    reason: '文件系统导入主数据批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedClientStorageUsages',
+    files: getApprovedClientStorageFiles().values(),
+    reason: '客户端本地存储批准用途不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedServerMasterDataWritePaths',
+    files: approvedServerMasterDataWritePaths.keys(),
+    reason: '服务/仓储主数据写入口批准表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'approvedServerMasterDataWriteModelScopes',
+    files: approvedServerMasterDataWriteModelScopes.keys(),
+    reason: '服务/仓储主数据写入模型作用域表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'compatibilitySnapshotReadClassifications',
+    files: compatibilitySnapshotReadClassifications.keys(),
+    reason: '兼容快照读点分类表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'processSnapshotReadClassifications',
+    files: processSnapshotReadClassifications.keys(),
+    reason: '过程快照读点分类表不能残留已删除或改名的文件。',
+  },
+  {
+    name: 'structuredJsonPayloadReadAllowlist',
+    files: structuredJsonPayloadReadAllowlist.keys(),
+    reason: '结构化 payload 读点跳过表不能残留已删除或改名的文件。',
+  },
+])
+
+for (const absolutePath of files) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  const content = fs.readFileSync(absolutePath, 'utf8')
+
+  for (const rule of rules) {
+    rule.pattern.lastIndex = 0
+
+    for (const match of content.matchAll(rule.pattern)) {
+      if (rule.skip?.({ relativePath, match })) continue
+
+      const line = lineNumberAt(content, match.index)
+      const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+      const record = {
+        ruleId: rule.id,
+        severity: rule.severity,
+        file: relativePath,
+        line,
+        text: lineText.trim(),
+        description: rule.description,
+      }
+      const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+      if (seenRecords.has(recordKey)) continue
+      seenRecords.add(recordKey)
+
+      if (rule.isAllowed({ relativePath, lineText, match })) {
+        approvedCompatibility.push({ ...record, severity: 'approved-compatibility' })
+      } else {
+        findings.push(record)
+      }
+    }
+  }
+
+  for (const rule of advisoryRules) {
+    rule.pattern.lastIndex = 0
+
+    for (const match of content.matchAll(rule.pattern)) {
+      const candidate = rule.resolveCandidate({ relativePath, content, match })
+      const line = lineNumberAt(content, match.index)
+      const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+      if (!candidate) {
+        if (!isTestFile(relativePath)) {
+          const record = {
+            ruleId: 'client-storage-unclassified',
+            severity: 'error',
+            file: relativePath,
+            line,
+            text: lineText.trim(),
+            description:
+              '非测试代码里的本地存储使用必须被分类：主数据风险、兼容缓存、旧缓存，或明确的非主数据 UI 缓存。',
+          }
+          const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+          if (!seenRecords.has(recordKey)) {
+            seenRecords.add(recordKey)
+            unclassifiedStorageFindings.push(record)
+          }
+        }
+        continue
+      }
+
+      const record = {
+        ruleId: rule.id,
+        severity: rule.severity,
+        category: candidate.category,
+        file: relativePath,
+        line,
+        text: lineText.trim(),
+        description: rule.description,
+        targetState: candidate.targetState,
+      }
+      const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+      if (seenRecords.has(recordKey)) continue
+      seenRecords.add(recordKey)
+      advisoryFindings.push(record)
+    }
+  }
+}
+
+const scriptMasterDataWriteModels =
+  'product|productSKU|productSkuAssetProfile|draftGroup|preSku|preSkuBasicInfo|preSkuPackagingPlan|assetFamily|assetFamilySeriesCompatibility|assetVariant|assetSeries|material|materialCategory|hardware|hardwareCategory|hardwareMapping|commonComponent|commonComponentCategory|substrate|substrateCategory|substrateEnvironmentGrade|substrateFinish|substrateSurfaceOption|substrateSystemNameOption|substrateThicknessSpec|productCategory|warehouseLocation|packagedItem|packagingPlan|panel|panelMaterial|hole|productHardware|assemblyStep|assemblyVersion|assetVariantLocationBinding|brandMaterialBinding|preSkuLocationBinding|intakeNonIntegratedProduct|intakeNonIntegratedProductProfile|intakeNonIntegratedSkuItem|productPatentRecord|spuNumberCounter|intakeReferenceLibraryItem|user|department|employeeDirectory|employeeLookupCache|team|productCollaborator|shareLink|systemConfig|providerConfig|themeConfig|intakeNodePermissionOverride|assistedAssemblyAiRender|feedback|activityLog|approvalWorkflow|assetSkuSyncEvent'
+const serverMasterDataWriteModels =
+  `${scriptMasterDataWriteModels}|approvalWorkflowFieldChange|planningTemplate|planningWorkspace|planningDraft`
+const masterDataWriteActions = 'create|createMany|update|updateMany|upsert|delete|deleteMany'
+const rawSqlMasterDataTableNames = new Set([
+  'ActivityLog',
+  'ApprovalWorkflow',
+  'ApprovalWorkflowFieldChange',
+  'AssetFamily',
+  'AssetFamilySeriesCompatibility',
+  'AssetSeries',
+  'AssetSkuSyncEvent',
+  'AssetVariant',
+  'AssistedAssemblyAiRender',
+  'BrandMaterialBinding',
+  'CommonComponent',
+  'CommonComponentCategory',
+  'Department',
+  'DraftGroup',
+  'EmployeeDirectory',
+  'EmployeeLookupCache',
+  'Feedback',
+  'Hardware',
+  'HardwareCategory',
+  'HardwareMapping',
+  'Hole',
+  'IntakeNodePermissionOverride',
+  'IntakeNonIntegratedProduct',
+  'IntakeNonIntegratedProductProfile',
+  'IntakeNonIntegratedSkuItem',
+  'IntakeReferenceLibraryItem',
+  'Material',
+  'MaterialCategory',
+  'PackagedItem',
+  'PackagingPlan',
+  'Panel',
+  'PanelMaterial',
+  'PlanningDraft',
+  'PlanningTemplate',
+  'PlanningWorkspace',
+  'PreSku',
+  'PreSkuBasicInfo',
+  'PreSkuPackagingPlan',
+  'Product',
+  'ProductCategory',
+  'ProductCollaborator',
+  'ProductHardware',
+  'ProductPatentRecord',
+  'ProductSKU',
+  'ProductSkuAssetProfile',
+  'ProviderConfig',
+  'ShareLink',
+  'SpuNumberCounter',
+  'Substrate',
+  'SubstrateCategory',
+  'SubstrateEnvironmentGrade',
+  'SubstrateFinish',
+  'SubstrateSurfaceOption',
+  'SubstrateSystemNameOption',
+  'SubstrateThicknessSpec',
+  'SystemConfig',
+  'Team',
+  'ThemeConfig',
+  'User',
+  'WarehouseLocation',
+])
+
+const scriptMasterDataDirectWritePattern = new RegExp(
+  `\\b(?:prisma|tx)\\.(${scriptMasterDataWriteModels})\\.(${masterDataWriteActions})\\s*\\(`,
+  'g',
+)
+const rawSqlRelationRef = String.raw`(?:"?[A-Za-z_][\w]*"?\s*\.\s*)?"?([A-Z][A-Za-z0-9_]*)"?`
+const rawSqlMasterDataWritePattern = new RegExp(
+  String.raw`\b(INSERT\s+INTO|UPDATE|DELETE\s+FROM)\s+${rawSqlRelationRef}`,
+  'g',
+)
+const rawSqlMasterDataReadPattern = new RegExp(
+  String.raw`\b(FROM|JOIN)\s+${rawSqlRelationRef}`,
+  'g',
+)
+const runtimeDatabaseDdlPattern =
+  /\b(CREATE\s+(?:TABLE|INDEX|UNIQUE\s+INDEX|OR\s+REPLACE\s+FUNCTION)|ALTER\s+TABLE|DROP\s+(?:TABLE|INDEX|FUNCTION)|TRUNCATE)\b/gi
+const unsafeRawSqlPattern = /\.\$executeRawUnsafe\s*\(/g
+
+function approvedTableScopeIncludes(approvedTables, tableName) {
+  return approvedTables === '*' || Boolean(approvedTables?.has(tableName))
+}
+
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+}
+
+function collectPrismaClientAliases(content) {
+  const aliases = new Set(['prisma', 'tx', 'transaction', 'this.prisma'])
+  const aliasPattern =
+    /\b(?:const|let)\s+([A-Za-z_$][\w$]*)\s*=\s*(?:tx|transaction|prisma|this\.prisma)\s*(?:\?\?\s*(?:tx|transaction|prisma|this\.prisma))?/g
+
+  for (const match of content.matchAll(aliasPattern)) {
+    aliases.add(match[1])
+  }
+
+  return aliases
+}
+
+function buildServerMasterDataDirectWritePattern(content) {
+  const clientPattern = Array.from(collectPrismaClientAliases(content))
+    .sort((a, b) => b.length - a.length)
+    .map(escapeRegExp)
+    .join('|')
+
+  return new RegExp(
+    `\\b(?:${clientPattern})\\.(${serverMasterDataWriteModels})\\.(${masterDataWriteActions})\\s*\\(`,
+    'g',
+  )
+}
+
+const nestedRelationWriteModels = new Map([
+  ['basicInfo', 'preSkuBasicInfo'],
+  ['profile', 'intakeNonIntegratedProductProfile'],
+  ['skuItems', 'intakeNonIntegratedSkuItem'],
+  ['assetProfile', 'productSkuAssetProfile'],
+])
+
+const nestedRelationWritePattern = new RegExp(
+  `\\b(${Array.from(nestedRelationWriteModels.keys()).join('|')})\\s*:\\s*\\{[\\s\\S]{0,500}?\\b(${masterDataWriteActions})\\s*:`,
+  'g',
+)
+
+for (const absolutePath of scriptFiles) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  const content = fs.readFileSync(absolutePath, 'utf8')
+  const approvalReason = approvedScriptMasterDataWritePaths.get(relativePath)
+
+  scriptMasterDataDirectWritePattern.lastIndex = 0
+  for (const match of content.matchAll(scriptMasterDataDirectWritePattern)) {
+    const line = lineNumberAt(content, match.index)
+    const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+    const record = {
+      ruleId: 'script-core-master-data-direct-write',
+      severity: approvalReason ? 'approved-script' : 'error',
+      file: relativePath,
+      line,
+      text: lineText.trim(),
+      description:
+        '脚本直接写核心主数据表必须被明确分类；生产修复和正式清洗必须走专用服务、迁移或显式清洗计划。',
+      reason: approvalReason ?? '',
+    }
+    const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}`
+    if (seenRecords.has(recordKey)) continue
+    seenRecords.add(recordKey)
+    scriptMasterDataWriteFindings.push(record)
+    if (!approvalReason) {
+      unclassifiedScriptMasterDataWriteFindings.push(record)
+    }
+  }
+}
+
+for (const [relativePath, requirement] of approvedScriptSafetyGuardRequirements.entries()) {
+  const absolutePath = path.join(ROOT_DIR, relativePath)
+  if (!fs.existsSync(absolutePath)) continue
+  const content = fs.readFileSync(absolutePath, 'utf8').replace(/\r\n/g, '\n')
+  const missingTexts = requirement.requiredTexts.filter((text) => !content.includes(text))
+  const record = {
+    ruleId: 'approved-script-safety-guard',
+    severity: missingTexts.length === 0 ? 'approved-script-guard' : 'error',
+    file: relativePath,
+    line: 1,
+    text: missingTexts.length === 0 ? 'required guard tokens present' : `missing: ${missingTexts.join(', ')}`,
+    description:
+      '已批准的脚本层主数据写入/同步入口必须保留显式门禁，不能只靠分类说明防误写。',
+    reason: requirement.reason,
+    missingTexts,
+  }
+  scriptSafetyGuardFindings.push(record)
+  if (missingTexts.length > 0) {
+    missingScriptSafetyGuardFindings.push(record)
+    findings.push(record)
+  }
+}
+
+for (const absolutePath of [...scriptFiles, ...files]) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  if (isTestFile(relativePath)) continue
+
+  const content = fs.readFileSync(absolutePath, 'utf8')
+  const approvalReason = approvedRawSqlMasterDataWritePaths.get(relativePath)
+  const approvedTables = approvedRawSqlMasterDataWriteTableScopes.get(relativePath)
+
+  rawSqlMasterDataWritePattern.lastIndex = 0
+  for (const match of content.matchAll(rawSqlMasterDataWritePattern)) {
+    const tableName = match[2]
+    if (!rawSqlMasterDataTableNames.has(tableName)) continue
+    const isApproved = Boolean(approvalReason) && approvedTableScopeIncludes(approvedTables, tableName)
+
+    const line = lineNumberAt(content, match.index)
+    const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+    const record = {
+      ruleId: 'raw-sql-master-data-write',
+      severity: isApproved ? 'approved-raw-sql' : 'error',
+      file: relativePath,
+      line,
+      text: lineText.trim(),
+      tableName,
+      operation: match[1].replace(/\s+/g, ' ').toUpperCase(),
+      description:
+        '原生 SQL 写核心主数据表必须被明确分类；需要说明事务语义、并发/锁策略或历史清洗计划，不能绕过 Prisma 写入口巡检。',
+      reason: approvalReason
+        ? approvedTableScopeIncludes(approvedTables, tableName)
+          ? approvalReason
+          : `该文件已分类，但未批准原生 SQL 写入 ${tableName}；需要确认是否新增旁路或扩展允许表范围。`
+        : '',
+    }
+    const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.tableName}:${record.operation}`
+    if (seenRecords.has(recordKey)) continue
+    seenRecords.add(recordKey)
+    rawSqlMasterDataWriteFindings.push(record)
+    if (!isApproved) {
+      unclassifiedRawSqlMasterDataWriteFindings.push(record)
+    }
+  }
+}
+
+for (const absolutePath of [...scriptFiles, ...files]) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  if (isTestFile(relativePath)) continue
+
+  const content = fs.readFileSync(absolutePath, 'utf8')
+  const approvalReason = approvedRawSqlMasterDataReadPaths.get(relativePath)
+  const approvedTables = approvedRawSqlMasterDataReadTableScopes.get(relativePath)
+
+  rawSqlMasterDataReadPattern.lastIndex = 0
+  for (const match of content.matchAll(rawSqlMasterDataReadPattern)) {
+    const tableName = match[2]
+    if (!rawSqlMasterDataTableNames.has(tableName)) continue
+    const isApproved = Boolean(approvalReason) && approvedTableScopeIncludes(approvedTables, tableName)
+
+    const line = lineNumberAt(content, match.index)
+    const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+    const record = {
+      ruleId: 'raw-sql-master-data-read',
+      severity: isApproved ? 'approved-raw-sql-read' : 'error',
+      file: relativePath,
+      line,
+      text: lineText.trim(),
+      tableName,
+      operation: match[1].toUpperCase(),
+      description:
+        '原生 SQL 读取核心主数据表必须被明确分类；业务服务默认应通过 Prisma delegate、Repository 或结构化 helper 读取，避免绕过统一真相源边界。',
+      reason: approvalReason
+        ? approvedTableScopeIncludes(approvedTables, tableName)
+          ? approvalReason
+          : `该文件已分类，但未批准原生 SQL 读取 ${tableName}；需要确认是否新增旁路或扩展允许表范围。`
+        : '',
+    }
+    const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.tableName}:${record.operation}`
+    if (seenRecords.has(recordKey)) continue
+    seenRecords.add(recordKey)
+    rawSqlMasterDataReadFindings.push(record)
+    if (!isApproved) {
+      unclassifiedRawSqlMasterDataReadFindings.push(record)
+    }
+  }
+}
+
+for (const absolutePath of [...scriptFiles, ...files]) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  if (isTestFile(relativePath)) continue
+  if (relativePath === 'scripts/verify-master-data-code-boundaries.js') continue
+
+  const content = fs.readFileSync(absolutePath, 'utf8')
+  if (!/\$executeRaw(?:Unsafe)?|(?:\w+\.)?query\s*\(/.test(content)) continue
+  const approvalReason = approvedRuntimeDatabaseDdlPaths.get(relativePath)
+
+  const addRuntimeDatabaseDdlFinding = ({ index, ruleId, operation, description }) => {
+    const line = lineNumberAt(content, index)
+    const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+    const record = {
+      ruleId,
+      severity: approvalReason ? 'approved-runtime-ddl' : 'error',
+      file: relativePath,
+      line,
+      text: lineText.trim(),
+      operation,
+      description,
+      reason: approvalReason ?? '',
+    }
+    const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.operation}:${record.text}`
+    if (seenRecords.has(recordKey)) return
+    seenRecords.add(recordKey)
+    runtimeDatabaseDdlFindings.push(record)
+    if (!approvalReason) {
+      unclassifiedRuntimeDatabaseDdlFindings.push(record)
+    }
+  }
+
+  runtimeDatabaseDdlPattern.lastIndex = 0
+  for (const match of content.matchAll(runtimeDatabaseDdlPattern)) {
+    addRuntimeDatabaseDdlFinding({
+      index: match.index,
+      ruleId: 'runtime-database-ddl',
+      operation: match[1].replace(/\s+/g, ' ').toUpperCase(),
+      description:
+        '应用代码和普通脚本不能在运行时补建表、索引、约束或函数；数据库结构真相必须来自 Prisma migration、治理迁移清单和 strict 巡检。',
+    })
+  }
+
+  unsafeRawSqlPattern.lastIndex = 0
+  for (const match of content.matchAll(unsafeRawSqlPattern)) {
+    addRuntimeDatabaseDdlFinding({
+      index: match.index,
+      ruleId: 'unsafe-raw-sql-runtime-entry',
+      operation: '$executeRawUnsafe',
+      description:
+        '$executeRawUnsafe 会绕开参数化和写入口语义巡检；应用代码必须使用 Prisma delegate、$queryRaw/$executeRaw tagged template，或显式迁移/清洗脚本。',
+    })
+  }
+}
+
+for (const absolutePath of files) {
+  const relativePath = toPosixPath(path.relative(ROOT_DIR, absolutePath))
+  if (!relativePath.startsWith('src/server/') || isTestFile(relativePath)) continue
+
+  const content = fs.readFileSync(absolutePath, 'utf8')
+  const approvalReason = approvedServerMasterDataWritePaths.get(relativePath)
+  const approvedModels = approvedServerMasterDataWriteModelScopes.get(relativePath)
+
+  const addServerMasterDataWriteFinding = ({
+    index,
+    model,
+    action,
+    ruleId = 'server-core-master-data-direct-write',
+    description =
+      '服务/仓储层直接写核心主数据表必须被明确分类；新增写入口需要说明职责，避免绕过统一业务校验、结构化副本同步和审计边界。',
+    parentModel = null,
+    nestedRelation = null,
+  }) => {
+    const line = lineNumberAt(content, index)
+    const lineText = content.split(/\r?\n/)[line - 1] ?? ''
+    const isApproved =
+      Boolean(approvalReason) && Boolean(approvedModels?.has(model))
+    const record = {
+      ruleId,
+      severity: isApproved ? 'approved-server-write' : 'error',
+      file: relativePath,
+      line,
+      text: lineText.trim(),
+      model,
+      action,
+      ...(parentModel && { parentModel }),
+      ...(nestedRelation && { nestedRelation }),
+      description,
+      reason: approvalReason
+        ? approvedModels?.has(model)
+          ? approvalReason
+          : `该文件已分类，但未批准写入 ${model}；需要确认是否新增旁路或扩展允许模型。`
+        : '',
+    }
+    const recordKey = `${record.ruleId}:${record.file}:${record.line}:${record.text}:${record.model}:${record.action}:${record.nestedRelation ?? ''}`
+    if (seenRecords.has(recordKey)) return
+    seenRecords.add(recordKey)
+    serverMasterDataWriteFindings.push(record)
+    if (!isApproved) {
+      unclassifiedServerMasterDataWriteFindings.push(record)
+    }
+  }
+
+  const serverMasterDataDirectWritePattern = buildServerMasterDataDirectWritePattern(content)
+  serverMasterDataDirectWritePattern.lastIndex = 0
+  for (const match of content.matchAll(serverMasterDataDirectWritePattern)) {
+    addServerMasterDataWriteFinding({
+      index: match.index,
+      model: match[1],
+      action: match[2],
+    })
+  }
+
+  nestedRelationWritePattern.lastIndex = 0
+  for (const match of content.matchAll(nestedRelationWritePattern)) {
+    addServerMasterDataWriteFinding({
+      index: match.index,
+      model: nestedRelationWriteModels.get(match[1]),
+      action: match[2],
+      ruleId: 'server-core-master-data-nested-write',
+      nestedRelation: match[1],
+      description:
+        '服务/仓储层的 Prisma relation 嵌套写入也必须被明确分类；不能只批准父模型写入而绕过子模型结构化校验边界。',
+    })
+  }
+}
+
+const compatibilitySnapshotReadInventory = collectCompatibilitySnapshotReadFindings([
+  ...files,
+  ...scriptFiles,
+])
+const compatibilitySnapshotReadFindings = compatibilitySnapshotReadInventory.findings
+const skippedStructuredPayloadReads =
+  compatibilitySnapshotReadInventory.skippedStructuredPayloadReads
+const compatibilitySnapshotReadSummary =
+  summarizeCompatibilitySnapshotReads(compatibilitySnapshotReadFindings)
+const unclassifiedCompatibilitySnapshotReadFindings =
+  compatibilitySnapshotReadSummary.unclassifiedCompatibilitySnapshotReads
+const unusedCompatibilitySnapshotReadClassifications =
+  findUnusedCompatibilitySnapshotReadClassifications(
+    compatibilitySnapshotReadFindings,
+    skippedStructuredPayloadReads,
+  )
+const productSkuAttributeWriteFindings = collectProductSkuAttributeWriteFindings([
+  ...files,
+  ...scriptFiles,
+])
+const productSkuAttributeWriteSummary =
+  summarizeProductSkuAttributeWriteFindings(productSkuAttributeWriteFindings)
+const referenceEstimatorCostBoundaryFindings =
+  collectReferenceEstimatorCostBoundaryFindings(files)
+const referenceEstimatorCostBoundarySummary =
+  summarizeReferenceEstimatorCostBoundaryFindings(
+    referenceEstimatorCostBoundaryFindings,
+  )
+const fileSystemMasterDataSourceFindings =
+  collectFileSystemMasterDataSourceFindings(files)
+const fileSystemMasterDataSourceSummary =
+  summarizeFileSystemMasterDataSourceFindings(
+    fileSystemMasterDataSourceFindings,
+  )
+const processSnapshotReadFindings = collectProcessSnapshotReadFindings([
+  ...files,
+  ...scriptFiles,
+])
+const processSnapshotReadSummary =
+  summarizeProcessSnapshotReads(processSnapshotReadFindings)
+const unclassifiedProcessSnapshotReadFindings =
+  processSnapshotReadSummary.unclassifiedProcessSnapshotReads
+const unusedProcessSnapshotReadClassifications =
+  findUnusedProcessSnapshotReadClassifications(processSnapshotReadFindings)
+const snapshotReadBudgetReport = buildSnapshotReadBudgetReport(
+  compatibilitySnapshotReadSummary,
+  processSnapshotReadSummary,
+)
+
+if (args.mode === 'compatibility-snapshot-read') {
+  emitReport({
+    mode: 'compatibility-snapshot-read',
+    checkedFiles: files.length,
+    checkedScriptFiles: scriptFiles.length,
+    ...compatibilitySnapshotReadSummary,
+    skippedStructuredPayloadReadCount: skippedStructuredPayloadReads.length,
+    skippedStructuredPayloadReads,
+    unusedCompatibilitySnapshotReadClassificationCount:
+      unusedCompatibilitySnapshotReadClassifications.length,
+    unusedCompatibilitySnapshotReadClassifications,
+    compatibilitySnapshotReadDebtBudget:
+      SNAPSHOT_READ_DEBT_BUDGETS.compatibilitySnapshotRead,
+    compatibilitySnapshotReadBudgetViolationCount:
+      snapshotReadBudgetReport.compatibilitySnapshotReadBudgetViolationCount,
+    compatibilitySnapshotReadBudgetViolations:
+      snapshotReadBudgetReport.compatibilitySnapshotReadBudgetViolations,
+    compatibilitySnapshotReadFindings,
+  })
+  process.exit(
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadBlockingRiskCount > 0 ||
+      unusedCompatibilitySnapshotReadClassifications.length > 0 ||
+      snapshotReadBudgetReport.compatibilitySnapshotReadBudgetViolationCount > 0
+      ? 1
+      : 0,
+  )
+}
+
+if (args.mode === 'server-master-data-write') {
+  emitReport({
+    mode: 'server-master-data-write',
+    checkedFiles: files.length,
+    serverMasterDataDirectWriteCount: serverMasterDataWriteFindings.length,
+    approvedServerMasterDataDirectWrites: serverMasterDataWriteFindings.filter(
+      (finding) => finding.severity === 'approved-server-write',
+    ),
+    unclassifiedServerMasterDataDirectWriteCount:
+      unclassifiedServerMasterDataWriteFindings.length,
+    unclassifiedServerMasterDataDirectWrites:
+      unclassifiedServerMasterDataWriteFindings,
+  })
+  process.exit(unclassifiedServerMasterDataWriteFindings.length > 0 ? 1 : 0)
+}
+
+if (args.mode === 'process-snapshot-read') {
+  emitReport({
+    mode: 'process-snapshot-read',
+    checkedFiles: files.length,
+    checkedScriptFiles: scriptFiles.length,
+    ...processSnapshotReadSummary,
+    unusedProcessSnapshotReadClassificationCount:
+      unusedProcessSnapshotReadClassifications.length,
+    unusedProcessSnapshotReadClassifications,
+    processSnapshotReadDebtBudget:
+      SNAPSHOT_READ_DEBT_BUDGETS.processSnapshotRead,
+    processSnapshotReadBudgetViolationCount:
+      snapshotReadBudgetReport.processSnapshotReadBudgetViolationCount,
+    processSnapshotReadBudgetViolations:
+      snapshotReadBudgetReport.processSnapshotReadBudgetViolations,
+    processSnapshotReadFindings,
+  })
+  process.exit(
+    processSnapshotReadSummary.processSnapshotReadBlockingRiskCount > 0 ||
+      unusedProcessSnapshotReadClassifications.length > 0 ||
+      snapshotReadBudgetReport.processSnapshotReadBudgetViolationCount > 0
+      ? 1
+      : 0,
+  )
+}
+
+if (args.mode === 'product-sku-attributes-write') {
+  emitReport({
+    mode: 'product-sku-attributes-write',
+    checkedFiles: files.length,
+    checkedScriptFiles: scriptFiles.length,
+    allowedProductSkuAttributeWriteKeys: Array.from(allowedProductSkuAttributeWriteKeys),
+    reservedProductSkuAttributeWriteKeys: Array.from(reservedProductSkuAttributeWriteKeys),
+    ...productSkuAttributeWriteSummary,
+  })
+  process.exit(
+    productSkuAttributeWriteSummary.productSkuAttributeWriteBlockingRiskCount > 0
+      ? 1
+      : 0,
+  )
+}
+
+if (args.mode === 'reference-estimator-cost-boundary') {
+  emitReport({
+    mode: 'reference-estimator-cost-boundary',
+    checkedFiles: files.length,
+    approvedReferenceEstimatorCostSourcePaths: Array.from(
+      approvedReferenceEstimatorCostSourcePaths.entries(),
+    ).map(([file, reason]) => ({ file, reason })),
+    ...referenceEstimatorCostBoundarySummary,
+  })
+  process.exit(
+    referenceEstimatorCostBoundarySummary
+      .unclassifiedReferenceEstimatorCostBoundaryFindingCount > 0
+      ? 1
+      : 0,
+  )
+}
+
+if (args.mode === 'filesystem-master-data-source') {
+  emitReport({
+    mode: 'filesystem-master-data-source',
+    checkedFiles: files.length,
+    approvedFileSystemMasterDataSourcePaths: Array.from(
+      approvedFileSystemMasterDataSourcePaths.entries(),
+    ).map(([file, reason]) => ({ file, reason })),
+    ...fileSystemMasterDataSourceSummary,
+  })
+  process.exit(
+    fileSystemMasterDataSourceSummary.unclassifiedFileSystemMasterDataSourceCount > 0
+      ? 1
+      : 0,
+  )
+}
+
+if (args.mode) {
+  throw new Error(`未知巡检模式：${args.mode}`)
+}
+
+const report = {
+  checkedFiles: files.length,
+  checkedScriptFiles: scriptFiles.length,
+  violations: findings,
+  approvedCompatibilityCount: approvedCompatibility.length,
+  approvedCompatibility: approvedCompatibility.slice(0, 50),
+  advisoryCount: advisoryFindings.length,
+  advisoryByCategory: advisoryFindings.reduce((result, finding) => {
+    result[finding.category] = (result[finding.category] ?? 0) + 1
+    return result
+  }, {}),
+  advisoryFindings: advisoryFindings.slice(0, 50),
+  unclassifiedStorageCount: unclassifiedStorageFindings.length,
+  unclassifiedStorageFindings: unclassifiedStorageFindings.slice(0, 50),
+  scriptMasterDataDirectWriteCount: scriptMasterDataWriteFindings.length,
+  approvedScriptMasterDataDirectWrites: scriptMasterDataWriteFindings
+    .filter((finding) => finding.severity === 'approved-script')
+    .slice(0, 50),
+  unclassifiedScriptMasterDataDirectWriteCount:
+    unclassifiedScriptMasterDataWriteFindings.length,
+  unclassifiedScriptMasterDataDirectWrites:
+    unclassifiedScriptMasterDataWriteFindings.slice(0, 50),
+  scriptSafetyGuardCount: scriptSafetyGuardFindings.length,
+  approvedScriptSafetyGuards: scriptSafetyGuardFindings
+    .filter((finding) => finding.severity === 'approved-script-guard')
+    .slice(0, 50),
+  missingScriptSafetyGuardCount: missingScriptSafetyGuardFindings.length,
+  missingScriptSafetyGuards: missingScriptSafetyGuardFindings.slice(0, 50),
+  rawSqlMasterDataWriteCount: rawSqlMasterDataWriteFindings.length,
+  approvedRawSqlMasterDataWrites: rawSqlMasterDataWriteFindings
+    .filter((finding) => finding.severity === 'approved-raw-sql')
+    .slice(0, 50),
+  unclassifiedRawSqlMasterDataWriteCount:
+    unclassifiedRawSqlMasterDataWriteFindings.length,
+  unclassifiedRawSqlMasterDataWrites:
+    unclassifiedRawSqlMasterDataWriteFindings.slice(0, 50),
+  rawSqlMasterDataReadCount: rawSqlMasterDataReadFindings.length,
+  approvedRawSqlMasterDataReads: rawSqlMasterDataReadFindings
+    .filter((finding) => finding.severity === 'approved-raw-sql-read')
+    .slice(0, 50),
+  unclassifiedRawSqlMasterDataReadCount:
+    unclassifiedRawSqlMasterDataReadFindings.length,
+  unclassifiedRawSqlMasterDataReads:
+    unclassifiedRawSqlMasterDataReadFindings.slice(0, 50),
+  runtimeDatabaseDdlCount: runtimeDatabaseDdlFindings.length,
+  approvedRuntimeDatabaseDdlFindings: runtimeDatabaseDdlFindings
+    .filter((finding) => finding.severity === 'approved-runtime-ddl')
+    .slice(0, 50),
+  unclassifiedRuntimeDatabaseDdlCount:
+    unclassifiedRuntimeDatabaseDdlFindings.length,
+  unclassifiedRuntimeDatabaseDdlFindings:
+    unclassifiedRuntimeDatabaseDdlFindings.slice(0, 50),
+  serverMasterDataDirectWriteCount: serverMasterDataWriteFindings.length,
+  approvedServerMasterDataDirectWrites: serverMasterDataWriteFindings
+    .filter((finding) => finding.severity === 'approved-server-write')
+    .slice(0, 50),
+  unclassifiedServerMasterDataDirectWriteCount:
+    unclassifiedServerMasterDataWriteFindings.length,
+  unclassifiedServerMasterDataDirectWrites:
+    unclassifiedServerMasterDataWriteFindings.slice(0, 50),
+  compatibilitySnapshotReadCount: compatibilitySnapshotReadFindings.length,
+  compatibilitySnapshotReadByCategory:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadByCategory,
+  compatibilitySnapshotReadByRuleId:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadByRuleId,
+  compatibilitySnapshotReadByFile:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadByFile,
+  compatibilitySnapshotReadByPriority:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadByPriority,
+  compatibilitySnapshotReadBlockingRiskCount:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadBlockingRiskCount,
+  compatibilitySnapshotReadBlockingRisks:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadBlockingRisks.slice(0, 50),
+  compatibilitySnapshotReadSummary:
+    compatibilitySnapshotReadSummary.compatibilitySnapshotReadSummary,
+  unclassifiedCompatibilitySnapshotReadCount:
+    compatibilitySnapshotReadSummary.unclassifiedCompatibilitySnapshotReadCount,
+  unclassifiedCompatibilitySnapshotReads:
+    compatibilitySnapshotReadSummary.unclassifiedCompatibilitySnapshotReads.slice(0, 50),
+  skippedStructuredPayloadReadCount: skippedStructuredPayloadReads.length,
+  skippedStructuredPayloadReads: skippedStructuredPayloadReads.slice(0, 50),
+  unusedCompatibilitySnapshotReadClassificationCount:
+    unusedCompatibilitySnapshotReadClassifications.length,
+  unusedCompatibilitySnapshotReadClassifications:
+    unusedCompatibilitySnapshotReadClassifications.slice(0, 50),
+  compatibilitySnapshotReadFindings: compatibilitySnapshotReadFindings.slice(0, 50),
+  productSkuAttributeWriteRiskCount:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteRiskCount,
+  productSkuAttributeWriteRiskByRuleId:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteRiskByRuleId,
+  productSkuAttributeWriteRiskByFile:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteRiskByFile,
+  productSkuAttributeWriteRiskByPriority:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteRiskByPriority,
+  productSkuAttributeWriteBlockingRiskCount:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteBlockingRiskCount,
+  productSkuAttributeWriteBlockingRisks:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteBlockingRisks.slice(0, 50),
+  productSkuAttributeWriteRisks:
+    productSkuAttributeWriteSummary.productSkuAttributeWriteRisks.slice(0, 50),
+  referenceEstimatorCostBoundaryFindingCount:
+    referenceEstimatorCostBoundarySummary.referenceEstimatorCostBoundaryFindingCount,
+  referenceEstimatorCostBoundaryByRuleId:
+    referenceEstimatorCostBoundarySummary.referenceEstimatorCostBoundaryByRuleId,
+  referenceEstimatorCostBoundaryByFile:
+    referenceEstimatorCostBoundarySummary.referenceEstimatorCostBoundaryByFile,
+  approvedReferenceEstimatorCostBoundaryFindings:
+    referenceEstimatorCostBoundarySummary.approvedReferenceEstimatorCostBoundaryFindings.slice(
+      0,
+      50,
+    ),
+  unclassifiedReferenceEstimatorCostBoundaryFindingCount:
+    referenceEstimatorCostBoundarySummary
+      .unclassifiedReferenceEstimatorCostBoundaryFindingCount,
+  unclassifiedReferenceEstimatorCostBoundaryFindings:
+    referenceEstimatorCostBoundarySummary.unclassifiedReferenceEstimatorCostBoundaryFindings.slice(
+      0,
+      50,
+    ),
+  fileSystemMasterDataSourceFindingCount:
+    fileSystemMasterDataSourceSummary.fileSystemMasterDataSourceFindingCount,
+  fileSystemMasterDataSourceByFile:
+    fileSystemMasterDataSourceSummary.fileSystemMasterDataSourceByFile,
+  approvedFileSystemMasterDataSources:
+    fileSystemMasterDataSourceSummary.approvedFileSystemMasterDataSources.slice(0, 50),
+  unclassifiedFileSystemMasterDataSourceCount:
+    fileSystemMasterDataSourceSummary.unclassifiedFileSystemMasterDataSourceCount,
+  unclassifiedFileSystemMasterDataSources:
+    fileSystemMasterDataSourceSummary.unclassifiedFileSystemMasterDataSources.slice(0, 50),
+  processSnapshotReadCount: processSnapshotReadFindings.length,
+  processSnapshotReadByCategory:
+    processSnapshotReadSummary.processSnapshotReadByCategory,
+  processSnapshotReadByRuleId:
+    processSnapshotReadSummary.processSnapshotReadByRuleId,
+  processSnapshotReadByFile:
+    processSnapshotReadSummary.processSnapshotReadByFile,
+  processSnapshotReadByPriority:
+    processSnapshotReadSummary.processSnapshotReadByPriority,
+  processSnapshotReadBlockingRiskCount:
+    processSnapshotReadSummary.processSnapshotReadBlockingRiskCount,
+  processSnapshotReadBlockingRisks:
+    processSnapshotReadSummary.processSnapshotReadBlockingRisks.slice(0, 50),
+  processSnapshotReadSummary:
+    processSnapshotReadSummary.processSnapshotReadSummary,
+  unclassifiedProcessSnapshotReadCount:
+    processSnapshotReadSummary.unclassifiedProcessSnapshotReadCount,
+  unclassifiedProcessSnapshotReads:
+    processSnapshotReadSummary.unclassifiedProcessSnapshotReads.slice(0, 50),
+  unusedProcessSnapshotReadClassificationCount:
+    unusedProcessSnapshotReadClassifications.length,
+  unusedProcessSnapshotReadClassifications:
+    unusedProcessSnapshotReadClassifications.slice(0, 50),
+  processSnapshotReadFindings: processSnapshotReadFindings.slice(0, 50),
+  ...snapshotReadBudgetReport,
+  schemaJsonFieldCount: schemaJsonFieldInventory.length,
+  schemaJsonFieldByCategory: schemaJsonFieldInventory.reduce((result, field) => {
+    result[field.category] = (result[field.category] ?? 0) + 1
+    return result
+  }, {}),
+  unclassifiedSchemaJsonFieldCount: unclassifiedSchemaJsonFields.length,
+  unclassifiedSchemaJsonFields,
+  staleSchemaJsonFieldClassificationCount:
+    staleSchemaJsonFieldClassifications.length,
+  staleSchemaJsonFieldClassifications,
+  staleFileClassificationCount: staleFileClassifications.length,
+  staleFileClassifications,
+  approvedClientStorageUsages: approvedClientStorageUsages.map((usage) => ({
+    file: usage.file,
+    category: usage.category,
+    targetState: usage.targetState,
+    reason: usage.reason,
+  })),
+}
+
+emitReport(report)
+
+if (
+  findings.length > 0 ||
+  unclassifiedStorageFindings.length > 0 ||
+  unclassifiedScriptMasterDataWriteFindings.length > 0 ||
+  unclassifiedRawSqlMasterDataWriteFindings.length > 0 ||
+  unclassifiedRawSqlMasterDataReadFindings.length > 0 ||
+  unclassifiedRuntimeDatabaseDdlFindings.length > 0 ||
+  unclassifiedServerMasterDataWriteFindings.length > 0 ||
+  unclassifiedCompatibilitySnapshotReadFindings.length > 0 ||
+  compatibilitySnapshotReadSummary.compatibilitySnapshotReadBlockingRiskCount > 0 ||
+  unusedCompatibilitySnapshotReadClassifications.length > 0 ||
+  productSkuAttributeWriteSummary.productSkuAttributeWriteBlockingRiskCount > 0 ||
+  referenceEstimatorCostBoundarySummary
+    .unclassifiedReferenceEstimatorCostBoundaryFindingCount > 0 ||
+  fileSystemMasterDataSourceSummary.unclassifiedFileSystemMasterDataSourceCount > 0 ||
+  processSnapshotReadSummary.processSnapshotReadBlockingRiskCount > 0 ||
+  unusedProcessSnapshotReadClassifications.length > 0 ||
+  unclassifiedProcessSnapshotReadFindings.length > 0 ||
+  snapshotReadBudgetReport.compatibilitySnapshotReadBudgetViolationCount > 0 ||
+  snapshotReadBudgetReport.processSnapshotReadBudgetViolationCount > 0 ||
+  unclassifiedSchemaJsonFields.length > 0 ||
+  staleSchemaJsonFieldClassifications.length > 0 ||
+  staleFileClassifications.length > 0
+) {
+  process.exit(1)
+}
+}
diff --git a/furniture-3d-system/scripts/verify-master-data-foundation.js b/furniture-3d-system/scripts/verify-master-data-foundation.js
new file mode 100644
index 00000000..3bb89663
--- /dev/null
+++ b/furniture-3d-system/scripts/verify-master-data-foundation.js
@@ -0,0 +1,4645 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { Pool } = require('pg')
+const {
+  REQUIRED_MIGRATIONS,
+  applyMissingMigrationFiles,
+  classifyAppliedMigrationPaths,
+  columnDefaultMatches,
+  columnExists,
+  dataCheckPasses,
+  guardExists,
+  getMigrationTargetRelations,
+  getPendingStructureMigrationPaths,
+  relationColumnExists,
+  relationExists,
+  validateRequiredMigrationCatalog,
+} = require('./master-data-required-migrations')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+
+function parseArgs(argv) {
+  const args = {
+    outputFile: '',
+    summaryOutputFile: '',
+    summaryStdout: false,
+    requireApplied: false,
+    readOnlyMigrationStatus: false,
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--require-applied') {
+      args.requireApplied = true
+      continue
+    }
+    if (arg === '--read-only-migration-status') {
+      args.readOnlyMigrationStatus = true
+      continue
+    }
+    if (arg === '--output') {
+      const outputFile = argv[index + 1]
+      if (!outputFile) throw new Error('--output 需要提供文件路径。')
+      args.outputFile = outputFile
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      args.outputFile = arg.slice('--output='.length)
+      if (!args.outputFile) throw new Error('--output 需要提供文件路径。')
+      continue
+    }
+    if (arg === '--summary-output') {
+      const summaryOutputFile = argv[index + 1]
+      if (!summaryOutputFile) throw new Error('--summary-output 需要提供文件路径。')
+      args.summaryOutputFile = summaryOutputFile
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--summary-output=')) {
+      args.summaryOutputFile = arg.slice('--summary-output='.length)
+      if (!args.summaryOutputFile) throw new Error('--summary-output 需要提供文件路径。')
+      continue
+    }
+    if (arg === '--summary-stdout') {
+      args.summaryStdout = true
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  if (args.requireApplied && args.readOnlyMigrationStatus) {
+    throw new Error('--require-applied 和 --read-only-migration-status 不能同时使用。')
+  }
+
+  return args
+}
+
+function writeJsonReport(filePath, payload) {
+  if (!filePath) return ''
+  const absolutePath = path.resolve(ROOT_DIR, filePath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function summarizeBlockerValue(value) {
+  if (value === null || value === undefined) return true
+  if (typeof value === 'number' || typeof value === 'boolean') return value
+  if (Array.isArray(value)) return value.length
+  return true
+}
+
+function buildFoundationHardReadySummary(report) {
+  const gate = report.foundationHardReadyGate || buildFoundationHardReadyGate(report)
+  const blockers = Array.isArray(gate.blockers) ? gate.blockers : []
+  const migrationStatusSource = report.migrationApplicationStatus
+    ? report.mode === 'current'
+      ? 'current-database'
+      : report.mode === 'migration-dry-run' || report.mode === 'idempotent-migration-replay'
+        ? 'transactional-dry-run-replay'
+        : 'reported'
+    : null
+  return {
+    mode: report.mode || 'unknown',
+    rolledBack: report.rolledBack === true,
+    hardReady: gate.hardReady === true,
+    blockerCount: gate.blockerCount ?? blockers.length,
+    blockerSourceCounts: gate.blockerSourceCounts || blockers.reduce((counts, blocker) => {
+      const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+      counts[source] = (counts[source] || 0) + 1
+      return counts
+    }, {}),
+    blockerKeys: blockers.map((blocker) => {
+      const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+      const key = typeof blocker?.key === 'string' && blocker.key ? blocker.key : 'UNKNOWN'
+      return `${source}:${key}`
+    }),
+    blockerValues: blockers.reduce((values, blocker) => {
+      const source = typeof blocker?.source === 'string' && blocker.source ? blocker.source : 'UNKNOWN'
+      const key = typeof blocker?.key === 'string' && blocker.key ? blocker.key : 'UNKNOWN'
+      values[`${source}:${key}`] = summarizeBlockerValue(blocker?.value)
+      return values
+    }, {}),
+    migrationApplicationStatus: report.migrationApplicationStatus
+      ? {
+          source: migrationStatusSource,
+          appliedMigrationCount: report.migrationApplicationStatus.appliedMigrationCount ?? null,
+          pendingStructureMigrationCount:
+            report.migrationApplicationStatus.pendingStructureMigrationCount ?? null,
+          replayableIdempotentMigrationCount:
+            report.migrationApplicationStatus.replayableIdempotentMigrationCount ?? null,
+          strictReady: report.migrationApplicationStatus.strictReady === true,
+          fullyReady: report.migrationApplicationStatus.fullyReady === true,
+        }
+      : null,
+  }
+}
+
+function writeFoundationHardReadyOutputs(args, report) {
+  writeJsonReport(args.outputFile, report)
+  writeJsonReport(args.summaryOutputFile, buildFoundationHardReadySummary(report))
+}
+
+function printFoundationHardReadyReport(args, report) {
+  const payload = args.summaryStdout ? buildFoundationHardReadySummary(report) : report
+  console.log(JSON.stringify(payload, null, 2))
+}
+
+const REQUIRED_DATABASE_GUARDS = [
+  {
+    type: 'unique-index',
+    name: 'AssetSeries_code_key',
+    relationName: 'AssetSeries',
+    purpose: '资产系列编码是资产中心系列真相源，必须数据库级唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSeries_identity_valid',
+    relationName: 'AssetSeries',
+    expressionPattern: 'sortOrder',
+    purpose: '资产系列名称、编码和排序必须是稳定结构化字段，不能保存空名称或负排序。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSeries_metadata_object',
+    relationName: 'AssetSeries',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '资产系列 metadata 只能是对象，避免扩展字段形态漂移。',
+  },
+  {
+    type: 'unique-index',
+    name: 'AssetFamily_code_key',
+    relationName: 'AssetFamily',
+    purpose: '资产族编码是资产族真相源，必须数据库级唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetFamily_identity_valid',
+    relationName: 'AssetFamily',
+    expressionPattern: 'connectionRoles',
+    purpose: '资产族名称、编码、连接角色和可选文本必须保持可用，源头资料不能出现空白身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetFamily_metadata_object',
+    relationName: 'AssetFamily',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '资产族 metadata 只能是对象，避免结构化源数据扩展字段形态漂移。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetFamily_lifecycle_state_valid',
+    relationName: 'AssetFamily',
+    expressionPattern: 'PENDING_REVIEW',
+    purpose: '资产族提交、审核、驳回和软删除状态必须和对应时间/人员字段一致。',
+  },
+  {
+    type: 'unique-index',
+    name: 'AssetVariant_code_key',
+    relationName: 'AssetVariant',
+    purpose: '规格款编码是资产中心规格款真相源，必须数据库级唯一。',
+  },
+  {
+    type: 'unique-index',
+    name: 'AssetVariant_assetFamilyId_identityKey_key',
+    relationName: 'AssetVariant',
+    purpose: '同一资产族下规格款身份键必须唯一，防止同款规格被重复建档。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'AssetVariant_barcode_active_key',
+    relationName: 'AssetVariant',
+    predicatePattern: '"deletedAt" IS NULL',
+    definitionPattern: 'upper(btrim(',
+    purpose: '未删除规格款的条码必须唯一，正式 SKU 同步副本不能从资产源头继承冲突。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_identity_valid',
+    relationName: 'AssetVariant',
+    expressionPattern: 'identityKey',
+    purpose: '资产规格款名称、编码、身份键、模型 URL 和可选文本必须保持可用。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_json_shape_valid',
+    relationName: 'AssetVariant',
+    expressionPattern: 'mountPoints',
+    purpose: '资产规格款尺寸、挂点、装配依据和业务扩展 JSON 形态必须稳定。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_cost_weight_valid',
+    relationName: 'AssetVariant',
+    expressionPattern: 'estimatedCostPrice',
+    purpose: '资产规格款重量、损耗率、成本和预估成本不能为负。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_lifecycle_state_valid',
+    relationName: 'AssetVariant',
+    expressionPattern: 'PENDING_REVIEW',
+    purpose: '资产规格款提交、审核、驳回和软删除状态必须和对应时间/人员字段一致。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_inheritance_not_self',
+    relationName: 'AssetVariant',
+    expressionPattern: 'inheritedFromVariantId',
+    purpose: '资产规格款继承关系不能指向自身，避免规格派生链出现自环。',
+  },
+  {
+    type: 'unique-index',
+    name: 'AssetFamilySeriesCompatibility_assetFamilyId_assetSeriesId_key',
+    relationName: 'AssetFamilySeriesCompatibility',
+    purpose: '资产族和系列兼容关系必须唯一，避免同一归属被重复表达。',
+  },
+  {
+    type: 'unique-index',
+    name: 'DraftGroup_code_key',
+    relationName: 'DraftGroup',
+    purpose: '草稿组编号必须唯一，辅助装配确认结果不能产生重复承接单。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'DraftGroup_identity_valid',
+    relationName: 'DraftGroup',
+    expressionPattern: 'btrim',
+    purpose: '草稿组编号和名称必须保持非空且无首尾空格，不能让展示文本变成不稳定承接身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'DraftGroup_summary_object',
+    relationName: 'DraftGroup',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '草稿组 summary 只能是对象，过程摘要快照不能漂移成数组或自由值。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'DraftGroup_optional_text_not_blank',
+    relationName: 'DraftGroup',
+    expressionPattern: 'description',
+    purpose: '草稿组可选长文本只能是 NULL 或有效文本，避免空字符串和 NULL 形成两套缺失状态。',
+  },
+  {
+    type: 'unique-index',
+    name: 'PlanningTemplate_code_key',
+    relationName: 'PlanningTemplate',
+    purpose: '规划模板编码必须唯一，避免同一模板身份被重复表达。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Substrate_code_key',
+    relationName: 'Substrate',
+    purpose: '基材编码必须唯一，资产规格款不能引用语义重复的基材。',
+  },
+  {
+    type: 'unique-index',
+    name: 'WarehouseLocation_code_key',
+    relationName: 'WarehouseLocation',
+    purpose: '库位编码必须唯一，库存和资产位置绑定不能指向重复库位身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'User_email_normalized_key',
+    relationName: 'User',
+    definitionPattern: 'lower(btrim',
+    purpose: '用户邮箱必须按小写去空格后的语义唯一，登录身份不能被大小写绕开。',
+  },
+  {
+    type: 'unique-index',
+    name: 'User_name_normalized_key',
+    relationName: 'User',
+    definitionPattern: 'btrim',
+    purpose: '用户花名必须按去空格后的语义唯一，不能出现看似不同的同名账号。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Department_name_normalized_key',
+    relationName: 'Department',
+    definitionPattern: 'btrim',
+    purpose: '部门名称必须按去空格后的语义唯一，组织树不能有空格差异重复节点。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'Department_externalId_normalized_key',
+    relationName: 'Department',
+    predicatePattern: 'NULLIF(btrim',
+    definitionPattern: 'btrim',
+    purpose: '外部部门 ID 非空时必须语义唯一，花名册同步不能把同一钉钉部门写成两个节点。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'EmployeeDirectory_dingtalkUserId_normalized_key',
+    relationName: 'EmployeeDirectory',
+    predicatePattern: 'NULLIF(btrim',
+    definitionPattern: 'btrim',
+    purpose: '员工钉钉 userId 非空时必须语义唯一，账号匹配不能出现多候选。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'EmployeeDirectory_dingtalkUnionId_normalized_key',
+    relationName: 'EmployeeDirectory',
+    predicatePattern: 'NULLIF(btrim',
+    definitionPattern: 'btrim',
+    purpose: '员工钉钉 unionId 非空时必须语义唯一，跨应用匹配不能出现多候选。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'EmployeeDirectory_jobNumber_normalized_key',
+    relationName: 'EmployeeDirectory',
+    predicatePattern: 'NULLIF(btrim',
+    definitionPattern: 'btrim',
+    purpose: '员工工号非空时必须语义唯一，后台创建账号和手动匹配不能命中不稳定记录。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'EmployeeDirectory_mobile_normalized_key',
+    relationName: 'EmployeeDirectory',
+    predicatePattern: 'NULLIF(btrim',
+    definitionPattern: 'btrim',
+    purpose: '员工手机号非空时必须语义唯一，钉钉匹配和花名册匹配不能出现多候选。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'WarehouseLocation_active_position_key',
+    relationName: 'WarehouseLocation',
+    predicatePattern: '"isActive" = true',
+    definitionPattern: 'lower(btrim',
+    purpose: '活动库位的区/巷道/货架/箱位组合必须唯一，避免同一物理位置被重复建档。',
+  },
+  {
+    type: 'unique-index',
+    name: 'PackagedItem_code_key',
+    relationName: 'PackagedItem',
+    purpose: '包装成品编号必须唯一，轻仓库成品不能产生重复身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'PreSku_draftGroupId_sequence_key',
+    relationName: 'PreSku',
+    purpose: '同一草稿组内准 SKU 序号必须唯一，避免入库前清单重复行。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSku_identity_valid',
+    relationName: 'PreSku',
+    expressionPattern: 'sourceCandidateKey',
+    purpose: '准 SKU 序号、默认名称和来源候选 key 是草稿承接身份，必须稳定非空。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSku_process_snapshots_shape_valid',
+    relationName: 'PreSku',
+    expressionPattern: 'familySelection',
+    purpose: '准 SKU 过程快照 JSON 形态必须稳定，避免展示/入库生成链路吞掉坏结构。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSku_weight_valid',
+    relationName: 'PreSku',
+    expressionPattern: 'weightPreview',
+    purpose: '准 SKU 预估重量不能为负，草稿承接层不能沉淀异常重量。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSku_component_codes_valid',
+    relationName: 'PreSku',
+    expressionPattern: 'componentCodes',
+    purpose: '准 SKU 组件编码数组不能包含空白元素，避免组件身份池出现隐形空值。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSku_optional_text_not_blank',
+    relationName: 'PreSku',
+    expressionPattern: 'customName',
+    purpose: '准 SKU 可选文本只能是 NULL 或有效文本，避免空字符串和 NULL 形成两套缺失状态。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Product_modelNumber_key',
+    relationName: 'Product',
+    purpose: '正式产品型号必须唯一，是正式产品主数据身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ProductSKU_skuCode_key',
+    relationName: 'ProductSKU',
+    purpose: '正式 SKU 编码必须唯一，是正式商品对内对外稳定身份。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'ProductSKU_active_skuCode_normalized_key',
+    relationName: 'ProductSKU',
+    predicatePattern: '"deletedAt" IS NULL',
+    definitionPattern: 'upper(btrim(',
+    purpose: '活动正式 SKU 编码必须按大写去空格后的语义唯一，删除态墓碑不参与活动池。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ProductSKU_sourcePreSkuId_key',
+    relationName: 'ProductSKU',
+    purpose: '一个准 SKU 只能正式入库一次，不能被重复转成多个正式 SKU。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_price_cost_stock_non_negative',
+    relationName: 'ProductSKU',
+    expressionPattern: '"costPrice"',
+    purpose: '正式 SKU 售价、成本价和库存不能为负，正式成本口径必须落在结构化 ProductSKU 字段而不是过程估算。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeNonIntegratedProduct_spu_brand_key',
+    relationName: 'IntakeNonIntegratedProduct',
+    purpose: '非集成开品 SPU 在同一品牌池内必须唯一，避免产品资料入口重复身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeNonIntegratedProduct_spu_brand_normalized_key',
+    relationName: 'IntakeNonIntegratedProduct',
+    definitionPattern: 'upper(btrim(',
+    purpose: '非集成开品 SPU 在同一品牌池内必须按大写去空格后的语义唯一。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ProductSkuAssetProfile_skuId_key',
+    relationName: 'ProductSkuAssetProfile',
+    purpose: '正式 SKU 到资产资料同步副本必须一对一。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'ProductSkuAssetProfile_barcode_active_non_empty_key',
+    relationName: 'ProductSkuAssetProfile',
+    predicatePattern: '"skuDeletedAt" IS NULL',
+    definitionPattern: 'upper(btrim(',
+    purpose: '正式 SKU 资产资料同步副本的非空活动条码必须唯一，且软删除 SKU 必须释放条码池。',
+  },
+  {
+    type: 'unique-index',
+    name: 'PreSkuBasicInfo_preSkuId_key',
+    relationName: 'PreSkuBasicInfo',
+    purpose: '准 SKU 基础资料必须一对一，不能产生第二份真相。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'PreSkuBasicInfo_formalSkuCode_non_empty_key',
+    relationName: 'PreSkuBasicInfo',
+    predicatePattern: 'NULLIF(btrim(',
+    definitionPattern: 'upper(btrim(',
+    purpose: '准 SKU 非空正式规格码必须唯一，不能只靠页面冲突检测。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'PreSkuBasicInfo_barcode_non_empty_key',
+    relationName: 'PreSkuBasicInfo',
+    predicatePattern: 'NULLIF(btrim(',
+    definitionPattern: 'upper(btrim(',
+    purpose: '准 SKU 非空条码必须唯一，进入正式产品前先锁住冲突池。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeNonIntegratedProductProfile_productId_key',
+    relationName: 'IntakeNonIntegratedProductProfile',
+    purpose: '非集成产品头结构化 profile 必须一对一。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeNonIntegratedSkuItem_productId_skuItemId_key',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    purpose: '非集成 SKU 明细必须和 payload 的 skuItemId 稳定对账。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'IntakeNonIntegratedSkuItem_skuCode_non_empty_key',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    predicatePattern: 'NULLIF(btrim(',
+    definitionPattern: 'upper(btrim(',
+    purpose: '非空 SKU 编码必须全局唯一，空值只允许作为待补齐状态。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'IntakeNonIntegratedSkuItem_barcode_non_empty_key',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    predicatePattern: 'NULLIF(btrim(',
+    definitionPattern: 'upper(btrim(',
+    purpose: '非空条码必须全局唯一，空值只允许作为待补齐状态。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ProductPatentRecord_patentGroupKey_key',
+    relationName: 'ProductPatentRecord',
+    purpose: '专利台账按产品分组一对一保存，不能让同一分组被多行重复表达。',
+  },
+  {
+    type: 'trigger',
+    name: 'IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items',
+    relationName: 'IntakeNonIntegratedProduct',
+    purpose: '非集成产品软删除后释放结构化 SKU 编码和条码唯一池。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeReferenceLibraryItem_libraryType_itemKey_key',
+    relationName: 'IntakeReferenceLibraryItem',
+    purpose: '资料库型条目必须在服务端拥有稳定身份，不能继续只靠浏览器本地 ID。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'IntakeReferenceLibraryItem_libraryType_code_non_empty_key',
+    relationName: 'IntakeReferenceLibraryItem',
+    predicatePattern: 'NULLIF(btrim(code),',
+    definitionPattern: 'upper(btrim(',
+    purpose: '同一资料库内非空编码必须唯一，为后续替换 localStorage 资料库提供硬约束。',
+  },
+  {
+    type: 'unique-index',
+    name: 'IntakeReferenceLibraryItem_libraryType_itemKey_normalized_key',
+    relationName: 'IntakeReferenceLibraryItem',
+    definitionPattern: 'lower(btrim(',
+    purpose: '同一资料库内 itemKey 必须按大小写和空格归一后唯一，避免本地缓存旧键制造第二份真相。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'IntakeReferenceLibraryItem_spu_rule_name_non_empty_key',
+    relationName: 'IntakeReferenceLibraryItem',
+    predicatePattern: '"libraryType" = \'SPU_RULE\'',
+    purpose: 'SPU 规则按产品品类一对一，避免正式号段计数器初始化来源不确定。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'IntakeReferenceLibraryItem_spu_rule_name_normalized_key',
+    relationName: 'IntakeReferenceLibraryItem',
+    predicatePattern: '"libraryType" = \'SPU_RULE\'',
+    definitionPattern: 'lower(btrim(',
+    purpose: 'SPU 规则产品品类必须按去空格和大小写归一后一对一，和正式 SPU 计数器查找语义保持一致。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SpuNumberCounter_productCategory_key',
+    relationName: 'SpuNumberCounter',
+    purpose: 'SPU 正式号段计数器必须按产品品类一对一锁定，不能继续依赖前端本地缓存占号。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SpuNumberCounter_productCategory_normalized_key',
+    relationName: 'SpuNumberCounter',
+    definitionPattern: 'lower(btrim(',
+    purpose: 'SPU 号段计数器产品品类必须按去空格和大小写归一后唯一，避免同品类双号池。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SpuNumberCounter_prefix_key',
+    relationName: 'SpuNumberCounter',
+    purpose: 'SPU 正式号段前缀必须唯一，避免不同品类并发占用同一个前缀导致撞号。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Material_code_key',
+    relationName: 'Material',
+    purpose: '材质花色编码必须唯一，资产和正式 SKU 不能引用重复花色身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Hardware_code_key',
+    relationName: 'Hardware',
+    purpose: '标准五金编码必须唯一，孔位匹配和 BOM 不能引用重复五金身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'CommonComponent_code_key',
+    relationName: 'CommonComponent',
+    purpose: '通用组件编码必须唯一，辅助装配组件池不能产生重复组件身份。',
+  },
+  {
+    type: 'unique-index',
+    name: 'BrandMaterialBinding_brand_material_normalized_key',
+    relationName: 'BrandMaterialBinding',
+    definitionPattern: 'lower(btrim',
+    purpose: '品牌物料准备项必须按品牌和物料类型的规范化身份唯一，避免同一品牌同一资料重复绑定。',
+  },
+  {
+    type: 'unique-index',
+    name: 'Panel_product_sku_code_normalized_key',
+    relationName: 'Panel',
+    definitionPattern: 'upper(btrim',
+    purpose: '同一产品/SKU 范围内板件编号必须按大写去空格后唯一，旧 CAD 板件清单不能重复身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeProductProfile_developmentKind_allowed',
+    relationName: 'IntakeNonIntegratedProductProfile',
+    expressionPattern: '"productDevelopmentKind" = \'\'',
+    purpose: '非集成产品开发类型只能为空草稿、product 或 series，避免旁路写入随手文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNonIntegratedSkuItem_missingRequiredFields_allowed',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    expressionPattern: 'missingRequiredFields',
+    purpose: '非集成 SKU 缺失字段枚举只能使用统一质量规则定义的字段名。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNonIntegratedSkuItem_quality_state_required_fields',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    expressionPattern: 'dataQualityStatus',
+    purpose: '非集成 SKU 的 READY/INCOMPLETE 状态必须和必填字段、缺失字段数组一致。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'MasterDataQualityDecision_open_target_key',
+    relationName: 'MasterDataQualityDecision',
+    predicatePattern: 'status = \'APPROVED_INCOMPLETE\'',
+    purpose: '同一主数据对象同一时间只能有一条未解决的不完整审批，避免分阶段清洗原因互相覆盖。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_target_not_blank',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: 'targetType',
+    purpose: '主数据质量决策必须绑定明确目标对象，不能留下游离审批记录。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_status_allowed',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: 'APPROVED_INCOMPLETE',
+    purpose: '主数据质量决策状态只能使用受控枚举文本，避免随手状态绕开 readiness 语义。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_reason_not_blank',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: 'reason',
+    purpose: '允许分阶段不完整时必须保留业务确认原因，不能只有一个布尔开关。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_decidedBy_not_blank',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: 'decidedBy',
+    purpose: '主数据质量决策必须记录确认人，后续清洗和问责可追溯。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_reason_not_placeholder',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: '待确认',
+    purpose: '主数据质量决策原因不能是待确认、UNKNOWN 或默认值这类占位文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_decidedBy_not_placeholder',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: '待确认',
+    purpose: '主数据质量决策确认人不能是待确认、UNKNOWN 或默认值这类占位文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_resolvedBy_not_placeholder',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: '待确认',
+    purpose: '主数据质量决策解决人不能是待确认、UNKNOWN 或默认值这类占位文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MasterDataQualityDecision_resolved_state_valid',
+    relationName: 'MasterDataQualityDecision',
+    expressionPattern: 'resolvedAt',
+    purpose: '已解决的质量决策必须记录解决人和时间，未解决记录不能伪装成已关闭。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_productCategory_not_blank',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'productCategory',
+    purpose: '正式 SPU 号段计数器必须绑定非空产品品类，不能产生游离号池。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_productCategory_normalized',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'btrim',
+    purpose: '正式 SPU 号段计数器产品品类必须无首尾空格，不能绕过服务层制造第二号池。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_prefix_not_blank',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'prefix',
+    purpose: '正式 SPU 号段计数器必须有非空前缀，不能生成无业务含义编号。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_prefix_normalized',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'upper(btrim',
+    purpose: 'SPU 正式号段前缀必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_lastUsedIndex_non_negative',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'lastUsedIndex',
+    purpose: '正式 SPU 号段计数器不能回到负数，防止重新占用历史编号。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SpuNumberCounter_sourceLibraryItemId_normalized',
+    relationName: 'SpuNumberCounter',
+    expressionPattern: 'sourceLibraryItemId',
+    purpose: 'SPU 号段计数器关联的规则来源 id 非空时必须可追溯且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_active_skuCode_not_deleted_marker',
+    relationName: 'ProductSKU',
+    expressionPattern: '__deleted__',
+    purpose: '活动正式 SKU 编码不能带软删除墓碑标记，防止旁路写入污染正式编码池。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_soft_delete_identity_valid',
+    relationName: 'ProductSKU',
+    expressionPattern: 'originalSkuCode',
+    purpose: '正式 SKU 软删除生命周期身份必须落结构化字段，活动 SKU 不得残留删除态身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_no_soft_delete_lifecycle_attributes',
+    relationName: 'ProductSKU',
+    expressionPattern: '_originalSkuCode',
+    purpose: '正式 SKU attributes 不能再承载软删除生命周期元数据，防止 JSON 兼容字段重新成为第二真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_soft_delete_tombstone_valid',
+    relationName: 'ProductSKU',
+    expressionPattern: 'deletedCodeAt',
+    purpose: '正式 SKU 删除态必须保留结构化删除编码时间，随产品删除的归属字段必须成对出现。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_no_formal_truth_attributes',
+    relationName: 'ProductSKU',
+    expressionPattern: 'skuName',
+    purpose: '正式 SKU attributes 不得保存名称、型号、规格码、条码、品类、颜色、材质和尺寸等正式资料字段。',
+  },
+  {
+    type: 'trigger',
+    name: 'ProductSKU_sync_asset_profile_deleted_at',
+    relationName: 'ProductSKU',
+    purpose: '正式 SKU 软删除生命周期必须自动同步到 ProductSkuAssetProfile.skuDeletedAt，避免条码活动池与 SKU 删除态漂移。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSeries_code_normalized',
+    relationName: 'AssetSeries',
+    expressionPattern: 'upper(btrim',
+    purpose: '资产系列编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetFamily_code_normalized',
+    relationName: 'AssetFamily',
+    expressionPattern: 'upper(btrim',
+    purpose: '资产族编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'DraftGroup_code_normalized',
+    relationName: 'DraftGroup',
+    expressionPattern: 'upper(btrim',
+    purpose: '草稿组编号必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_code_normalized',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'upper(btrim',
+    purpose: '资料库条目编码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_code_required',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'NULLIF(btrim',
+    purpose: '资料库条目编码必须非空且大写归一，payload 扩展不能替代结构化 code 身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_libraryType_allowed',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'PACKAGING_MATERIAL',
+    purpose: '资料库类型必须固定在后端支持的类型枚举内，不能由手工 SQL 或新入口写出游离类型。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_itemKey_required',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'btrim',
+    purpose: '资料库条目 itemKey 必须非空且无首尾空格，不能用空键或空格键作为主数据身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_letter_normalized',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'upper(btrim',
+    purpose: '资料库字母索引非空时必须大写且无首尾空格，避免筛选和排序出现语义重复。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeReferenceLibraryItem_spu_rule_name_normalized',
+    relationName: 'IntakeReferenceLibraryItem',
+    expressionPattern: 'SPU_RULE',
+    purpose: 'SPU 规则产品品类不能为空且不能带首尾空格，避免号段规则和计数器查找漂移。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningTemplate_code_normalized',
+    relationName: 'PlanningTemplate',
+    expressionPattern: 'upper(btrim',
+    purpose: '规划模板编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningTemplate_name_not_blank',
+    relationName: 'PlanningTemplate',
+    expressionPattern: 'name',
+    purpose: '规划模板名称必须非空且无首尾空格，模板编码不能指向无语义名称。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningTemplate_slots_array',
+    relationName: 'PlanningTemplate',
+    expressionPattern: 'jsonb_array_length',
+    purpose: '规划模板槽位定义必须是非空数组，JSON 只承载受控模板结构。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningTemplate_rules_object',
+    relationName: 'PlanningTemplate',
+    expressionPattern: 'rules',
+    purpose: '规划模板规则只能是对象或空值，不能写成第二套游离结构。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningTemplate_optional_text_not_blank',
+    relationName: 'PlanningTemplate',
+    expressionPattern: 'namePattern',
+    purpose: '规划模板可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningWorkspace_name_not_blank',
+    relationName: 'PlanningWorkspace',
+    expressionPattern: 'name',
+    purpose: '规划工作台名称必须非空且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningWorkspace_visibility_allowed',
+    relationName: 'PlanningWorkspace',
+    expressionPattern: 'DEPARTMENT',
+    purpose: '规划工作台可见范围只能来自固定枚举，不能成为游离权限状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningWorkspace_slotSelections_object',
+    relationName: 'PlanningWorkspace',
+    expressionPattern: 'slotSelections',
+    purpose: '规划工作台槽位选择只能是对象，明确作为过程筛选 JSON。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningWorkspace_metadata_object',
+    relationName: 'PlanningWorkspace',
+    expressionPattern: 'metadata',
+    purpose: '规划工作台元数据只能是对象或空值，不能承载结构化主数据真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningWorkspace_optional_text_not_blank',
+    relationName: 'PlanningWorkspace',
+    expressionPattern: 'description',
+    purpose: '规划工作台可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_identity_not_blank',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'selectedCandidateKey',
+    purpose: '规划草稿名称和候选 key 必须非空且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_selectedAssets_object',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'selectedAssets',
+    purpose: '规划草稿选中资产快照只能是对象，不能反向成为资产中心主数据。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_previewNodes_array',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'previewNodes',
+    purpose: '规划草稿 3D 预览节点快照只能是数组。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_summary_array',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'summary',
+    purpose: '规划草稿摘要快照只能是数组。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_warnings_array',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'warnings',
+    purpose: '规划草稿生成警告只能是数组或空值。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_sourceSnapshot_object',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'sourceSnapshot',
+    purpose: '规划草稿来源快照只能是对象或空值，用于追溯而不是主数据真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PlanningDraft_optional_text_not_blank',
+    relationName: 'PlanningDraft',
+    expressionPattern: 'notes',
+    purpose: '规划草稿可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Substrate_code_normalized',
+    relationName: 'Substrate',
+    expressionPattern: 'upper(btrim',
+    purpose: '基材编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'WarehouseLocation_code_normalized',
+    relationName: 'WarehouseLocation',
+    expressionPattern: 'upper(btrim',
+    purpose: '库位编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_code_normalized',
+    relationName: 'PackagedItem',
+    expressionPattern: 'upper(btrim',
+    purpose: '包装成品编号必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuPackagingPlan_status_allowed',
+    relationName: 'PreSkuPackagingPlan',
+    expressionPattern: 'CONFIRMED',
+    purpose: '准 SKU 包装方案状态只能来自固定生命周期，不能用自由字符串变成第二套流程。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuPackagingPlan_boxes_array',
+    relationName: 'PreSkuPackagingPlan',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '准 SKU 包装箱规必须保持数组结构，不能用对象或文本污染结构化 JSON。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuPackagingPlan_costSummary_object',
+    relationName: 'PreSkuPackagingPlan',
+    expressionPattern: 'costSummary',
+    purpose: '准 SKU 包装成本摘要只能是对象或空值，避免正式入库读取到非结构化成本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuPackagingPlan_processDraft_object',
+    relationName: 'PreSkuPackagingPlan',
+    expressionPattern: 'processDraft',
+    purpose: '准 SKU 包装过程草稿只能是对象或空值，并明确不作为正式主数据。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuPackagingPlan_optional_text_not_blank',
+    relationName: 'PreSkuPackagingPlan',
+    expressionPattern: 'sourceRefId',
+    purpose: '准 SKU 包装方案可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'WarehouseLocation_name_not_blank',
+    relationName: 'WarehouseLocation',
+    expressionPattern: 'name',
+    purpose: '库位名称必须非空，库位编码不能指向无语义的空名称。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'WarehouseLocation_optional_text_not_blank',
+    relationName: 'WarehouseLocation',
+    expressionPattern: 'zone',
+    purpose: '库位区/巷道/货架/箱位等可缺字段必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'BrandMaterialBinding_materialType_allowed',
+    relationName: 'BrandMaterialBinding',
+    expressionPattern: 'CARTON_PRINT',
+    purpose: '品牌物料类型必须来自固定枚举，避免轻仓库资料准备项变成自由文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'BrandMaterialBinding_identity_not_blank',
+    relationName: 'BrandMaterialBinding',
+    expressionPattern: 'materialType',
+    purpose: '品牌物料准备项必须有品牌和物料类型身份，不能保存空身份行。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'BrandMaterialBinding_file_metadata_consistent',
+    relationName: 'BrandMaterialBinding',
+    expressionPattern: 'fileSize',
+    purpose: '品牌物料文件元数据必须成套出现，不能只保存孤立 URL、文件名或大小。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_status_allowed',
+    relationName: 'PackagedItem',
+    expressionPattern: 'ACTIVE',
+    purpose: '包装成品状态必须来自固定生命周期，轻仓库不能出现不可解释状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_name_not_blank',
+    relationName: 'PackagedItem',
+    expressionPattern: 'name',
+    purpose: '包装成品名称必须非空，库存项不能只有编号没有名称。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_quantities_valid',
+    relationName: 'PackagedItem',
+    expressionPattern: 'stockQuantity',
+    purpose: '包装成品装箱数量必须大于 0，库存数量不能为负数。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_dimensions_valid',
+    relationName: 'PackagedItem',
+    expressionPattern: 'weight',
+    purpose: '包装成品尺寸必须为正数，重量不能为负数。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagedItem_payload_object',
+    relationName: 'PackagedItem',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '包装成品扩展载荷只能是对象或空值，避免过程快照变成任意 JSON 形态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Material_code_normalized',
+    relationName: 'Material',
+    expressionPattern: 'upper(btrim',
+    purpose: '材质花色编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Hardware_code_normalized',
+    relationName: 'Hardware',
+    expressionPattern: 'upper(btrim',
+    purpose: '标准五金编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'CommonComponent_code_normalized',
+    relationName: 'CommonComponent',
+    expressionPattern: 'upper(btrim',
+    purpose: '通用组件编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNonIntegratedProduct_spu_brand_normalized',
+    relationName: 'IntakeNonIntegratedProduct',
+    expressionPattern: 'upper(btrim',
+    purpose: '非集成开品 SPU、SPU 基础号和品牌作用域必须由数据库兜底为规范化身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Product_modelNumber_normalized',
+    relationName: 'Product',
+    expressionPattern: 'upper(btrim',
+    purpose: '正式产品型号必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Product_name_not_blank',
+    relationName: 'Product',
+    expressionPattern: 'name',
+    purpose: '正式产品名称必须非空且无首尾空格，上传链路不能写入无语义产品头。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Product_visibility_allowed',
+    relationName: 'Product',
+    expressionPattern: 'DEPARTMENT',
+    purpose: '正式产品可见范围只能来自固定枚举，不能成为游离权限状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Product_optional_text_not_blank',
+    relationName: 'Product',
+    expressionPattern: 'description',
+    purpose: '正式产品可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductCollaborator_identity_not_blank',
+    relationName: 'ProductCollaborator',
+    expressionPattern: 'productId',
+    purpose: '产品协作者关系必须绑定有效产品和用户身份，不能保存空关系行。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductCollaborator_role_allowed',
+    relationName: 'ProductCollaborator',
+    expressionPattern: 'viewer',
+    purpose: '协作者角色只能是 editor/viewer，权限关系不能使用自由字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductCollaborator_addedBy_not_blank',
+    relationName: 'ProductCollaborator',
+    expressionPattern: 'addedBy',
+    purpose: '协作者添加人可缺时必须使用 NULL，不能用空字符串表达缺失。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ShareLink_token_not_blank',
+    relationName: 'ShareLink',
+    expressionPattern: 'token',
+    purpose: '分享链接 token 必须非空且无首尾空格，公开访问入口不能出现空身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ShareLink_viewCount_non_negative',
+    relationName: 'ShareLink',
+    expressionPattern: 'viewCount',
+    purpose: '分享链接访问次数不能为负，访问统计只能单向累加。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ShareLink_expiresAt_after_createdAt',
+    relationName: 'ShareLink',
+    expressionPattern: 'expiresAt',
+    purpose: '分享链接过期时间必须晚于创建时间，避免产生创建即异常的公开入口。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Panel_identity_dimensions_valid',
+    relationName: 'Panel',
+    expressionPattern: 'gltfNodeName',
+    purpose: '旧 CAD 板件必须有规范编号、名称、节点名和正数尺寸，不能把无效几何作为板件真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Panel_explosionDirection_allowed',
+    relationName: 'Panel',
+    expressionPattern: 'explosionDirection',
+    purpose: '板件爆炸方向只能使用固定枚举，避免装配动画写入自由文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Panel_assemblySemantic_object',
+    relationName: 'Panel',
+    expressionPattern: 'assemblySemantic',
+    purpose: '板件装配语义 JSON 只允许对象快照，不能成为无形态约束的第二套结构。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Panel_optional_text_not_blank',
+    relationName: 'Panel',
+    expressionPattern: 'partType',
+    purpose: '板件可缺文本必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Hole_geometry_quality',
+    relationName: 'Hole',
+    expressionPattern: 'normalX',
+    purpose: '孔位坐标、直径、深度、法线和置信度必须有效，吸附和孔位高亮不能依赖脏几何。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Hole_type_allowed',
+    relationName: 'Hole',
+    expressionPattern: 'shelf_pin',
+    purpose: '孔位类型只能使用固定枚举，孔位匹配不能被自由字符串污染。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Hole_optional_text_not_blank',
+    relationName: 'Hole',
+    expressionPattern: 'groupId',
+    purpose: '孔组可缺时必须使用 NULL，不能用空字符串表达缺失。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_match_status_allowed',
+    relationName: 'ProductHardware',
+    expressionPattern: 'unmatched',
+    purpose: '产品五金匹配状态只能来自固定枚举，BOM 和装配匹配不能出现游离状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_match_confidence_valid',
+    relationName: 'ProductHardware',
+    expressionPattern: 'matchConfidence',
+    purpose: '产品五金匹配置信度必须在 0 到 1 之间。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_match_method_allowed',
+    relationName: 'ProductHardware',
+    expressionPattern: 'blockName',
+    purpose: '产品五金匹配方式只能来自固定枚举，不能把导入来源写成自由文本。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_quantities_geometry_valid',
+    relationName: 'ProductHardware',
+    expressionPattern: 'holeDistance',
+    purpose: '产品五金安装序号和孔距不能为负，装配排序和关联质量必须可解释。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_transform_object',
+    relationName: 'ProductHardware',
+    expressionPattern: 'transform',
+    purpose: '产品五金位姿 JSON 必须是对象，不能存入不可解释快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_sourceSignature_object',
+    relationName: 'ProductHardware',
+    expressionPattern: 'sourceSignature',
+    purpose: '产品五金 CAD 源签名只允许对象快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductHardware_optional_text_not_blank',
+    relationName: 'ProductHardware',
+    expressionPattern: 'sourceBlockName',
+    purpose: '产品五金可缺文本必须使用 NULL，不能用空字符串表达缺失。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_identity_order_valid',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'order',
+    purpose: '装配步骤必须有非负顺序和非空标题，安装流程不能出现无身份步骤。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_type_allowed',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'hardware',
+    purpose: '装配步骤类型只能是板件、五金或自定义，不能用自由文本驱动流程。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_animation_valid',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'cameraTransition',
+    purpose: '装配步骤动画时长、镜头切换和关联 ID 数组必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_transform_object',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'transform',
+    purpose: '装配步骤目标变换 JSON 必须是对象。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_cameraPosition_object',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'cameraPosition',
+    purpose: '装配步骤镜头位置 JSON 只允许对象快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_infoCardData_object',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'infoCardData',
+    purpose: '装配步骤信息卡 JSON 只允许对象快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyStep_optional_text_not_blank',
+    relationName: 'AssemblyStep',
+    expressionPattern: 'description',
+    purpose: '装配步骤可缺文本必须使用 NULL，不能用空字符串表达缺失。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyVersion_snapshot_array',
+    relationName: 'AssemblyVersion',
+    expressionPattern: 'snapshot',
+    purpose: '装配版本快照必须是步骤数组，版本历史不能保存任意 JSON 形态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyVersion_version_positive',
+    relationName: 'AssemblyVersion',
+    expressionPattern: 'version',
+    purpose: '装配版本号必须为正数，版本历史不能倒退到无效编号。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssemblyVersion_optional_text_not_blank',
+    relationName: 'AssemblyVersion',
+    expressionPattern: 'createdBy',
+    purpose: '装配版本可缺文本必须使用 NULL，不能用空字符串表达缺失。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_skuCode_normalized',
+    relationName: 'ProductSKU',
+    expressionPattern: 'upper(btrim',
+    purpose: '活动正式 SKU 编码必须由数据库兜底为大写且无首尾空格，删除态墓碑除外。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSKU_active_skuCode_no_deleted_marker_ci',
+    relationName: 'ProductSKU',
+    expressionPattern: 'lower',
+    purpose: '活动正式 SKU 编码不能用大小写变体绕过软删除墓碑标记检查。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_code_normalized',
+    relationName: 'AssetVariant',
+    expressionPattern: 'upper(btrim',
+    purpose: '资产规格款编码必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariant_barcode_normalized',
+    relationName: 'AssetVariant',
+    expressionPattern: 'upper(btrim',
+    purpose: '资产规格款条码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_formalSkuCode_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 正式规格码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_barcode_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 条码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_model_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 型号非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_versionNo_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 版本号非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_attributeCode_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 属性码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_drawingId_normalized',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'upper(btrim',
+    purpose: '准 SKU 图纸号非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_source_allowed',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'DRAFT_GROUP',
+    purpose: '准 SKU 基础资料来源只能是系统承接或人工维护，避免随意字符串变成第二套状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuBasicInfo_optional_text_not_blank',
+    relationName: 'PreSkuBasicInfo',
+    expressionPattern: 'formalSkuCode',
+    purpose: '准 SKU 基础资料可缺失但不能用空字符串表示缺失，避免 NULL 和空值形成两套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSkuSyncEvent_reason_allowed',
+    relationName: 'AssetSkuSyncEvent',
+    expressionPattern: 'VARIANT_UPDATED',
+    purpose: '资产 SKU 同步事件原因必须来自固定枚举，不能让自由字符串变成不可调度任务。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSkuSyncEvent_counts_non_negative',
+    relationName: 'AssetSkuSyncEvent',
+    expressionPattern: 'retryCount',
+    purpose: '资产 SKU 同步事件计数器必须非负，数据库层阻断异常进度。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSkuSyncEvent_synced_not_over_affected',
+    relationName: 'AssetSkuSyncEvent',
+    expressionPattern: 'syncedCount',
+    purpose: '资产 SKU 同步事件已同步数量不能超过受影响数量。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetSkuSyncEvent_completed_has_processed_at',
+    relationName: 'AssetSkuSyncEvent',
+    expressionPattern: 'processedAt',
+    purpose: '资产 SKU 同步事件完成后必须记录处理时间，便于追溯资料同步状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_barcode_normalized',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'upper(btrim',
+    purpose: '正式 SKU 资产资料副本条码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_model_normalized',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'upper(btrim',
+    purpose: '正式 SKU 资产资料副本型号非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_specCode_normalized',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'upper(btrim',
+    purpose: '正式 SKU 资产资料副本规格码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_primary_source_required',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'primarySourceAssetVariantId',
+    purpose: '正式 SKU 资产资料副本必须有主来源规格款，不能产生来源不明的对外资料。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_source_variant_ids_required',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'sourceAssetVariantIds',
+    purpose: '正式 SKU 资产资料副本必须保留来源规格款集合，不能用空数组表达来源。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_primary_source_in_source_ids',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'primarySourceAssetVariantId',
+    purpose: '正式 SKU 资产资料副本的主来源必须包含在来源规格款集合内。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductSkuAssetProfile_optional_text_not_blank',
+    relationName: 'ProductSkuAssetProfile',
+    expressionPattern: 'specCode',
+    purpose: '正式 SKU 资产资料副本可缺字段必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_patentGroupKey_normalized',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'upper(btrim',
+    purpose: '专利台账分组键必须非空、大写且无首尾空格，避免浏览器缓存旧值或手工 SQL 绕过。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_productId_required',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'btrim',
+    purpose: '专利台账必须保留来源产品 id，不能产生无法追溯的孤儿专利记录。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_applicationNo_normalized',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'upper(btrim',
+    purpose: '专利申请号非空时必须数据库级规范化，避免大小写和空格造成重复身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_patentNo_normalized',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'upper(btrim',
+    purpose: '专利号非空时必须数据库级规范化，避免大小写和空格造成重复身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_spu_normalized',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'upper(btrim',
+    purpose: '专利台账展示 SPU 非空时必须规范化，避免对账和外部只读消费出现同号不同写法。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductPatentRecord_patent_identity_required',
+    relationName: 'ProductPatentRecord',
+    expressionPattern: 'patentName',
+    purpose: '专利台账至少要有专利名称、申请号或专利号之一，不能保存空身份记录。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNonIntegratedSkuItem_skuCode_normalized',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    expressionPattern: 'upper(btrim',
+    purpose: '非集成 SKU 编码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNonIntegratedSkuItem_barcode_normalized',
+    relationName: 'IntakeNonIntegratedSkuItem',
+    expressionPattern: 'upper(btrim',
+    purpose: '非集成条码非空时必须由数据库兜底为大写且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_approvalNumber_normalized',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'upper(btrim',
+    purpose: '审批编号必须由数据库兜底为大写且无首尾空格，避免同一流程出现多种写法。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_title_not_blank',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'title',
+    purpose: '审批流程标题必须非空，流程记录不能只有编号没有业务语义。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_productId_not_blank',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'productId',
+    purpose: '审批流程必须绑定产品资料来源，不能产生无来源的流程记录。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_accessKey_not_blank',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'accessKey',
+    purpose: '审批流程访问密钥必须非空，链接入口不能产生空身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_participant_user_ids_valid',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'text_array_distinct_non_blank',
+    purpose: '审批流程参与人列表不能包含空值或重复值，避免权限范围失真。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_business_roles_distinct',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'array_positions',
+    purpose: '审批流程业务角色列表不能重复，避免责任矩阵和权限判断出现重复语义。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_fieldMatrix_array',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '审批字段矩阵只能是数组或空值，防止过程配置 JSON 形态漂移。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_summary_object',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '审批摘要只能是对象或空值，正式产品资料承接时不能读到非对象快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflow_metadata_object',
+    relationName: 'ApprovalWorkflow',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '审批流程扩展元数据只能是对象或空值，避免无边界 JSON 成为第二套真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflowFieldChange_fieldKey_not_blank',
+    relationName: 'ApprovalWorkflowFieldChange',
+    expressionPattern: 'fieldKey',
+    purpose: '审批字段变更必须记录非空字段 key，审计日志不能失去字段指向。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflowFieldChange_source_not_blank',
+    relationName: 'ApprovalWorkflowFieldChange',
+    expressionPattern: 'source',
+    purpose: '审批字段变更必须记录非空来源，后续追溯不能只看到值变化。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflowFieldChange_optional_text_not_blank',
+    relationName: 'ApprovalWorkflowFieldChange',
+    expressionPattern: 'sourcePage',
+    purpose: '审批字段变更可缺来源页面必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ApprovalWorkflowFieldChange_metadata_object',
+    relationName: 'ApprovalWorkflowFieldChange',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '审批字段变更元数据只能是对象或空值，审计载荷保持可解释。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'User_email_normalized',
+    relationName: 'User',
+    expressionPattern: 'lower(btrim',
+    purpose: '用户邮箱必须小写且无首尾空格，登录身份和唯一池保持同一语义。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'User_name_not_blank',
+    relationName: 'User',
+    expressionPattern: 'btrim',
+    purpose: '用户花名必须非空且无首尾空格，权限与协作记录不能指向空身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'User_loginSource_not_blank',
+    relationName: 'User',
+    expressionPattern: 'loginSource',
+    purpose: '用户登录来源必须非空，账号来源不能出现第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'User_business_roles_distinct',
+    relationName: 'User',
+    expressionPattern: 'array_positions',
+    purpose: '用户业务类型不能重复，权限判断和业务归属不能出现重复语义。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'User_optional_text_not_blank',
+    relationName: 'User',
+    expressionPattern: 'dingtalkUserId',
+    purpose: '用户可缺身份字段必须使用 NULL，不能用空字符串制造第二套缺失状态。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Department_identity_not_blank',
+    relationName: 'Department',
+    expressionPattern: 'fullPath',
+    purpose: '部门名称和完整路径必须非空且无首尾空格，组织树不能出现空身份节点。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Department_optional_text_not_blank',
+    relationName: 'Department',
+    expressionPattern: 'externalId',
+    purpose: '部门外部 ID 和描述可缺时必须使用 NULL，不能用空字符串污染同步身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Department_orderIndex_non_negative',
+    relationName: 'Department',
+    expressionPattern: 'orderIndex',
+    purpose: '部门排序值不能为负数，组织树排序保持可解释。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Team_identity_not_blank',
+    relationName: 'Team',
+    expressionPattern: 'orderIndex',
+    purpose: '小组名称必须非空且排序值非负，组织小组不能保存空身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeDirectory_name_not_blank',
+    relationName: 'EmployeeDirectory',
+    expressionPattern: 'btrim',
+    purpose: '员工目录姓名必须非空且无首尾空格，花名册不能出现空员工身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeDirectory_optional_text_not_blank',
+    relationName: 'EmployeeDirectory',
+    expressionPattern: 'primaryDepartmentExternalId',
+    purpose: '员工目录可缺身份字段必须使用 NULL，不能用空字符串影响匹配。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeDirectory_email_normalized',
+    relationName: 'EmployeeDirectory',
+    expressionPattern: 'lower(btrim',
+    purpose: '员工目录邮箱非空时必须小写且无首尾空格，外部资料匹配口径稳定。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeDirectory_departmentExternalIds_array',
+    relationName: 'EmployeeDirectory',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '员工外部部门 ID 集合必须是数组或空值，不能让自由 JSON 影响主部门选择。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeDirectory_rawSnapshot_object',
+    relationName: 'EmployeeDirectory',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '员工目录原始快照只能是对象或空值，集成缓存保持可解释。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeLookupCache_identity_not_blank',
+    relationName: 'EmployeeLookupCache',
+    expressionPattern: 'lookupValue',
+    purpose: '员工查找缓存键必须非空，缓存不能产生空身份项。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'EmployeeLookupCache_result_object',
+    relationName: 'EmployeeLookupCache',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '员工查找缓存结果只能是对象或空值，避免缓存载荷形态漂移。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ProductCategory_name_normalized_key',
+    relationName: 'ProductCategory',
+    definitionPattern: 'lower(btrim',
+    purpose: '产品分类名称按去空格小写后的语义唯一，不能用大小写或空格制造重复分类。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductCategory_identity_valid',
+    relationName: 'ProductCategory',
+    expressionPattern: 'sortOrder',
+    purpose: '产品分类名称和排序是基础资料真相，必须非空、去空格且排序非负。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProductCategory_optional_text_not_blank',
+    relationName: 'ProductCategory',
+    expressionPattern: 'description',
+    purpose: '产品分类可选说明和图标不能保存空字符串。',
+  },
+  {
+    type: 'unique-index',
+    name: 'MaterialCategory_name_normalized_key',
+    relationName: 'MaterialCategory',
+    definitionPattern: 'lower(btrim',
+    purpose: '材质分类名称按规范化语义唯一，花色资料不能分叉到重复分类。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MaterialCategory_identity_valid',
+    relationName: 'MaterialCategory',
+    expressionPattern: 'sortOrder',
+    purpose: '材质分类名称和排序必须由数据库兜底保证有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'MaterialCategory_optional_text_not_blank',
+    relationName: 'MaterialCategory',
+    expressionPattern: 'icon',
+    purpose: '材质分类图标不能保存空字符串。',
+  },
+  {
+    type: 'unique-index',
+    name: 'HardwareCategory_name_normalized_key',
+    relationName: 'HardwareCategory',
+    definitionPattern: 'lower(btrim',
+    purpose: '五金分类名称按规范化语义唯一，自动匹配和五金库不能出现重复分类。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'HardwareCategory_identity_valid',
+    relationName: 'HardwareCategory',
+    expressionPattern: 'sortOrder',
+    purpose: '五金分类名称和排序必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'HardwareCategory_optional_text_not_blank',
+    relationName: 'HardwareCategory',
+    expressionPattern: 'description',
+    purpose: '五金分类说明和图标不能保存空字符串。',
+  },
+  {
+    type: 'unique-index',
+    name: 'CommonComponentCategory_name_normalized_key',
+    relationName: 'CommonComponentCategory',
+    definitionPattern: 'lower(btrim',
+    purpose: '通用组件分类名称按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'CommonComponentCategory_identity_valid',
+    relationName: 'CommonComponentCategory',
+    expressionPattern: 'sortOrder',
+    purpose: '通用组件分类名称和排序必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'CommonComponentCategory_optional_text_not_blank',
+    relationName: 'CommonComponentCategory',
+    expressionPattern: 'description',
+    purpose: '通用组件分类说明和图标不能保存空字符串。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SubstrateCategory_name_normalized_key',
+    relationName: 'SubstrateCategory',
+    definitionPattern: 'lower(btrim',
+    purpose: '基材主类名称按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateCategory_identity_valid',
+    relationName: 'SubstrateCategory',
+    expressionPattern: 'sortOrder',
+    purpose: '基材主类名称和排序必须有效。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SubstrateEnvironmentGrade_name_normalized_key',
+    relationName: 'SubstrateEnvironmentGrade',
+    definitionPattern: 'lower(btrim',
+    purpose: '环保等级名称按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateEnvironmentGrade_identity_valid',
+    relationName: 'SubstrateEnvironmentGrade',
+    expressionPattern: 'sortOrder',
+    purpose: '环保等级名称和排序必须有效。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SubstrateSurfaceOption_name_normalized_key',
+    relationName: 'SubstrateSurfaceOption',
+    definitionPattern: 'lower(btrim',
+    purpose: '贴面类型名称按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateSurfaceOption_identity_valid',
+    relationName: 'SubstrateSurfaceOption',
+    expressionPattern: 'sortOrder',
+    purpose: '贴面类型名称和排序必须有效。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SubstrateSystemNameOption_name_normalized_key',
+    relationName: 'SubstrateSystemNameOption',
+    definitionPattern: 'lower(btrim',
+    purpose: '系统名称选项按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateSystemNameOption_identity_valid',
+    relationName: 'SubstrateSystemNameOption',
+    expressionPattern: 'sortOrder',
+    purpose: '系统名称选项名称和排序必须有效。',
+  },
+  {
+    type: 'unique-index',
+    name: 'SubstrateThicknessSpec_name_normalized_key',
+    relationName: 'SubstrateThicknessSpec',
+    definitionPattern: 'lower(btrim',
+    purpose: '厚度规格名称按规范化语义唯一。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateThicknessSpec_identity_dimensions_valid',
+    relationName: 'SubstrateThicknessSpec',
+    expressionPattern: 'thicknessMm',
+    purpose: '厚度规格名称、排序、厚度和板材尺寸必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'HardwareMapping_match_key_exactly_one',
+    relationName: 'HardwareMapping',
+    expressionPattern: 'signatureHash',
+    purpose: '五金匹配记忆每行只能表达一个匹配键，避免图块名和尺寸哈希混成一条模糊真相。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'HardwareMapping_usage_source_valid',
+    relationName: 'HardwareMapping',
+    expressionPattern: 'usageCount',
+    purpose: '五金匹配记忆使用次数和来源必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SubstrateFinish_relation_ids_not_blank',
+    relationName: 'SubstrateFinish',
+    expressionPattern: 'substrateId',
+    purpose: '基材和花色绑定关系不能保存空引用。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PanelMaterial_relation_ids_not_blank',
+    relationName: 'PanelMaterial',
+    expressionPattern: 'materialId',
+    purpose: '旧 CAD 板件材质绑定不能保存空引用。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssetVariantLocationBinding_relation_ids_not_blank',
+    relationName: 'AssetVariantLocationBinding',
+    expressionPattern: 'warehouseLocationId',
+    purpose: '规格款库位绑定不能保存空引用。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PreSkuLocationBinding_relation_ids_not_blank',
+    relationName: 'PreSkuLocationBinding',
+    expressionPattern: 'warehouseLocationId',
+    purpose: '准 SKU 库位绑定不能保存空引用。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagingPlan_identity_counts_valid',
+    relationName: 'PackagingPlan',
+    expressionPattern: 'boxCount',
+    purpose: '旧正式产品包装方案名称和箱数必须有效。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagingPlan_boxes_array',
+    relationName: 'PackagingPlan',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '旧正式产品包装方案 boxes 只能是数组快照。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagingPlan_totals_valid',
+    relationName: 'PackagingPlan',
+    expressionPattern: 'totalWeight',
+    purpose: '旧正式产品包装方案重量和体积不能为负数。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'PackagingPlan_optional_text_not_blank',
+    relationName: 'PackagingPlan',
+    expressionPattern: 'description',
+    purpose: '旧正式产品包装方案可选文本不能保存空字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SystemConfig_key_valid',
+    relationName: 'SystemConfig',
+    expressionPattern: 'btrim',
+    purpose: '系统配置 key 是配置真相身份，必须非空且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'SystemConfig_description_not_blank',
+    relationName: 'SystemConfig',
+    expressionPattern: 'description',
+    purpose: '系统配置说明不能保存空字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProviderConfig_identity_valid',
+    relationName: 'ProviderConfig',
+    expressionPattern: 'serviceType',
+    purpose: 'AI 服务商配置的服务类型、名称、地址、密钥和排序必须有结构化物理护栏。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ProviderConfig_optional_fields_valid',
+    relationName: 'ProviderConfig',
+    expressionPattern: 'jsonb_typeof',
+    purpose: 'AI 服务商配置扩展字段必须是对象，模型名不能保存空字符串。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'ProviderConfig_active_service_key',
+    relationName: 'ProviderConfig',
+    predicatePattern: '"isActive" = true',
+    purpose: '同一个服务类型只能有一份激活配置，避免运行时读取到不确定配置。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ThemeConfig_identity_valid',
+    relationName: 'ThemeConfig',
+    expressionPattern: 'createdBy',
+    purpose: '主题配置名称和创建来源必须非空且无首尾空格。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ThemeConfig_optional_config_valid',
+    relationName: 'ThemeConfig',
+    expressionPattern: 'homeBackground',
+    purpose: '主题配置时间窗口和 JSON 配置形态必须可靠。',
+  },
+  {
+    type: 'unique-index',
+    name: 'ThemeConfig_name_normalized_key',
+    relationName: 'ThemeConfig',
+    definitionPattern: 'lower(btrim',
+    purpose: '主题配置名称按归一化语义唯一，避免同名主题重复。',
+  },
+  {
+    type: 'partial-unique-index',
+    name: 'ThemeConfig_default_key',
+    relationName: 'ThemeConfig',
+    predicatePattern: '"isDefault" = true',
+    purpose: '系统默认主题只能有一份，避免 fallback 不确定。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNodePermissionOverride_identity_valid',
+    relationName: 'IntakeNodePermissionOverride',
+    expressionPattern: 'targetKey',
+    purpose: '产品资料节点权限覆盖的目标、主体和动作必须是非空结构化身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'IntakeNodePermissionOverride_audit_text_not_blank',
+    relationName: 'IntakeNodePermissionOverride',
+    expressionPattern: 'createdBy',
+    purpose: '产品资料节点权限覆盖的审计字段不能保存空字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssistedAssemblyAiRender_identity_valid',
+    relationName: 'AssistedAssemblyAiRender',
+    expressionPattern: 'prompt',
+    purpose: '辅助装配 AI 生图记录必须有用户和提示词身份。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssistedAssemblyAiRender_json_shape_valid',
+    relationName: 'AssistedAssemblyAiRender',
+    expressionPattern: 'workspaceSnapshot',
+    purpose: '辅助装配 AI 生图参数、结果和快照 JSON 形态必须稳定。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssistedAssemblyAiRender_status_duration_valid',
+    relationName: 'AssistedAssemblyAiRender',
+    expressionPattern: 'durationMs',
+    purpose: '辅助装配 AI 生图状态、结果和耗时不能互相矛盾。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'AssistedAssemblyAiRender_optional_text_not_blank',
+    relationName: 'AssistedAssemblyAiRender',
+    expressionPattern: 'negativePrompt',
+    purpose: '辅助装配 AI 生图可选文本不能保存空字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Feedback_identity_valid',
+    relationName: 'Feedback',
+    expressionPattern: 'description',
+    purpose: '反馈标题、描述和分类必须是非空结构化字段。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Feedback_images_valid',
+    relationName: 'Feedback',
+    expressionPattern: 'text_array_all_trimmed_non_blank',
+    purpose: '反馈图片数组不能保存空字符串。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Feedback_comments_array',
+    relationName: 'Feedback',
+    expressionPattern: 'jsonb_typeof',
+    purpose: '反馈评论 JSON 必须是数组过程记录。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'Feedback_resolution_state_valid',
+    relationName: 'Feedback',
+    expressionPattern: 'resolvedAt',
+    purpose: '反馈解决状态必须和解决时间、解决说明保持一致。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ActivityLog_identity_valid',
+    relationName: 'ActivityLog',
+    expressionPattern: 'action',
+    purpose: '操作日志必须有操作者和动作说明。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ActivityLog_target_pair_valid',
+    relationName: 'ActivityLog',
+    expressionPattern: 'targetType',
+    purpose: '操作日志目标类型和目标 ID 必须同时存在或同时为空。',
+  },
+  {
+    type: 'check-constraint',
+    name: 'ActivityLog_json_shape_valid',
+    relationName: 'ActivityLog',
+    expressionPattern: 'metadata',
+    purpose: '操作日志变更和元数据 JSON 必须是对象。',
+  },
+]
+
+function loadDatabaseUrl() {
+  if (process.env.DATABASE_URL) {
+    return process.env.DATABASE_URL
+  }
+
+  const envPath = path.join(ROOT_DIR, '.env')
+  if (!fs.existsSync(envPath)) {
+    return ''
+  }
+
+  const content = fs.readFileSync(envPath, 'utf8')
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+
+    const separatorIndex = trimmed.indexOf('=')
+    if (separatorIndex <= 0) continue
+
+    const key = trimmed.slice(0, separatorIndex).trim()
+    if (key !== 'DATABASE_URL') continue
+
+    let value = trimmed.slice(separatorIndex + 1).trim()
+    if (
+      (value.startsWith('"') && value.endsWith('"')) ||
+      (value.startsWith("'") && value.endsWith("'"))
+    ) {
+      value = value.slice(1, -1)
+    }
+    return value
+  }
+
+  return ''
+}
+
+function normalizeSqlFragment(value) {
+  return String(value ?? '')
+    .replace(/\s+/g, ' ')
+    .replace(/""/g, '"')
+    .trim()
+}
+
+function loadExternalReadonlyContractExpectedColumns() {
+  const sqlPath = path.join(ROOT_DIR, 'scripts/sql/check-external-readonly-contract.sql')
+  const sql = fs.readFileSync(sqlPath, 'utf8')
+  const expectedColumns = new Map()
+  const tuplePattern = /\('([^']+_v1)',\s*'([^']+)'\)/g
+
+  for (const match of sql.matchAll(tuplePattern)) {
+    const viewName = match[1]
+    const columnName = match[2]
+    const columns = expectedColumns.get(viewName) ?? new Set()
+    columns.add(columnName)
+    expectedColumns.set(viewName, columns)
+  }
+
+  return expectedColumns
+}
+
+const EXTERNAL_STABLE_KEY_RULES = [
+  {
+    viewName: 'materials_v1',
+    requiredColumns: ['material_code', 'material_name'],
+    uniqueColumns: ['material_code'],
+  },
+  {
+    viewName: 'asset_variants_v1',
+    requiredColumns: ['spec_code', 'spec_name', 'asset_family_code'],
+    uniqueColumns: ['spec_code'],
+  },
+  {
+    viewName: 'product_skus_v1',
+    requiredColumns: ['product_business_key', 'sku_business_key', 'sku_code'],
+    uniqueColumns: ['sku_business_key', 'sku_code'],
+  },
+  {
+    viewName: 'product_assets_v1',
+    requiredColumns: ['product_business_key', 'sku_business_key', 'asset_url'],
+    uniqueColumns: [],
+  },
+  {
+    viewName: 'product_bom_v1',
+    requiredColumns: ['product_business_key', 'item_code', 'item_name'],
+    conditionalRequiredColumns: [
+      {
+        columnName: 'material_code',
+        conditionSql: "item_type = 'PANEL'",
+      },
+    ],
+    uniqueColumns: [],
+  },
+  {
+    viewName: 'intake_products_ready_v1',
+    requiredColumns: ['product_business_key'],
+    uniqueColumns: ['product_business_key'],
+  },
+  {
+    viewName: 'intake_sku_items_ready_v1',
+    requiredColumns: ['product_business_key', 'sku_business_key', 'sku_code'],
+    uniqueColumns: ['sku_business_key'],
+  },
+]
+
+function assertSafeExternalIdentifier(identifier) {
+  if (!/^[a-z][a-z0-9_]*$/.test(identifier)) {
+    throw new Error(`外部只读契约包含非法标识符：${identifier}`)
+  }
+}
+
+function quoteExternalIdentifier(identifier) {
+  assertSafeExternalIdentifier(identifier)
+  return `"${identifier}"`
+}
+
+async function getExternalReadonlyContractSummary(client) {
+  const expectedColumns = loadExternalReadonlyContractExpectedColumns()
+  const expectedViewNames = Array.from(expectedColumns.keys()).sort()
+  const existingViewsResult = await client.query(
+    `
+      SELECT table_name
+      FROM information_schema.views
+      WHERE table_schema = 'external'
+        AND table_name = ANY($1)
+    `,
+    [expectedViewNames],
+  )
+  const existingViews = new Set(existingViewsResult.rows.map((row) => row.table_name))
+  const existingColumnsResult = await client.query(
+    `
+      SELECT table_name, column_name
+      FROM information_schema.columns
+      WHERE table_schema = 'external'
+        AND table_name = ANY($1)
+    `,
+    [expectedViewNames],
+  )
+  const existingColumns = new Set(
+    existingColumnsResult.rows.map((row) => `${row.table_name}.${row.column_name}`),
+  )
+  const missingViews = expectedViewNames.filter((viewName) => !existingViews.has(viewName))
+  const missingColumns = []
+  const extraColumns = []
+
+  for (const [viewName, columns] of expectedColumns.entries()) {
+    for (const columnName of columns) {
+      if (!existingColumns.has(`${viewName}.${columnName}`)) {
+        missingColumns.push({ viewName, columnName })
+      }
+    }
+  }
+  existingColumnsResult.rows.forEach((row) => {
+    const expectedViewColumns = expectedColumns.get(row.table_name)
+    if (expectedViewColumns && !expectedViewColumns.has(row.column_name)) {
+      extraColumns.push({ viewName: row.table_name, columnName: row.column_name })
+    }
+  })
+
+  return {
+    expectedViews: expectedViewNames.length,
+    expectedColumns: Array.from(expectedColumns.values()).reduce(
+      (total, columns) => total + columns.size,
+      0,
+    ),
+    missingViews,
+    missingColumns,
+    extraColumns,
+  }
+}
+
+async function getExternalStableKeyQualitySummary(client) {
+  const missingRequired = []
+  const duplicateGroups = []
+  const skippedViews = []
+
+  for (const rule of EXTERNAL_STABLE_KEY_RULES) {
+    const relationName = `external.${rule.viewName}`
+    if (!(await relationExists(client, relationName))) {
+      skippedViews.push({ viewName: rule.viewName, reason: 'missing_view' })
+      continue
+    }
+
+    for (const columnName of rule.requiredColumns) {
+      const column = quoteExternalIdentifier(columnName)
+      const result = await client.query(`
+        SELECT COUNT(*)::integer AS row_count
+        FROM external.${quoteExternalIdentifier(rule.viewName)}
+        WHERE NULLIF(btrim(COALESCE(${column}::text, '')), '') IS NULL
+      `)
+      const rowCount = result.rows[0]?.row_count ?? 0
+      if (rowCount > 0) {
+        missingRequired.push({ viewName: rule.viewName, columnName, rowCount })
+      }
+    }
+
+    for (const conditionalRule of rule.conditionalRequiredColumns ?? []) {
+      const column = quoteExternalIdentifier(conditionalRule.columnName)
+      const result = await client.query(`
+        SELECT COUNT(*)::integer AS row_count
+        FROM external.${quoteExternalIdentifier(rule.viewName)}
+        WHERE ${conditionalRule.conditionSql}
+          AND NULLIF(btrim(COALESCE(${column}::text, '')), '') IS NULL
+      `)
+      const rowCount = result.rows[0]?.row_count ?? 0
+      if (rowCount > 0) {
+        missingRequired.push({
+          viewName: rule.viewName,
+          columnName: conditionalRule.columnName,
+          condition: conditionalRule.conditionSql,
+          rowCount,
+        })
+      }
+    }
+
+    for (const columnName of rule.uniqueColumns) {
+      const column = quoteExternalIdentifier(columnName)
+      const result = await client.query(`
+        SELECT COUNT(*)::integer AS duplicate_groups
+        FROM (
+          SELECT upper(btrim(${column}::text)) AS normalized_value
+          FROM external.${quoteExternalIdentifier(rule.viewName)}
+          WHERE NULLIF(btrim(COALESCE(${column}::text, '')), '') IS NOT NULL
+          GROUP BY upper(btrim(${column}::text))
+          HAVING COUNT(*) > 1
+        ) duplicate_groups
+      `)
+      const groupCount = result.rows[0]?.duplicate_groups ?? 0
+      if (groupCount > 0) {
+        duplicateGroups.push({ viewName: rule.viewName, columnName, groupCount })
+      }
+    }
+  }
+
+  return {
+    ruleCount: EXTERNAL_STABLE_KEY_RULES.length,
+    missingRequired,
+    duplicateGroups,
+    skippedViews,
+  }
+}
+
+async function getIndexGuard(client, guard) {
+  const result = await client.query(`
+    SELECT
+      cls.relname AS index_name,
+      table_cls.relname AS table_name,
+      idx.indisunique AS is_unique,
+      pg_get_expr(idx.indpred, idx.indrelid) AS predicate,
+      pg_get_indexdef(cls.oid) AS definition
+    FROM pg_index idx
+    JOIN pg_class cls ON cls.oid = idx.indexrelid
+    JOIN pg_class table_cls ON table_cls.oid = idx.indrelid
+    JOIN pg_namespace ns ON ns.oid = table_cls.relnamespace
+    WHERE ns.nspname = 'public'
+      AND cls.relname = $1
+      AND table_cls.relname = $2
+    LIMIT 1
+  `, [guard.name, guard.relationName])
+  const row = result.rows[0]
+  const predicate = normalizeSqlFragment(row?.predicate)
+  const definition = normalizeSqlFragment(row?.definition)
+  const hasExpectedPredicate =
+    guard.type !== 'partial-unique-index' ||
+    (predicate && predicate.includes(guard.predicatePattern))
+  const hasExpectedDefinition =
+    !guard.definitionPattern || definition.includes(guard.definitionPattern)
+
+  return {
+    ...guard,
+    exists: Boolean(row),
+    isUnique: Boolean(row?.is_unique),
+    predicate,
+    definition,
+    ok:
+      Boolean(row) &&
+      (guard.type === 'index' || Boolean(row?.is_unique)) &&
+      hasExpectedPredicate &&
+      hasExpectedDefinition,
+  }
+}
+
+async function getTriggerGuard(client, guard) {
+  const result = await client.query(`
+    SELECT
+      trigger_name,
+      event_object_table,
+      action_timing,
+      event_manipulation
+    FROM information_schema.triggers
+    WHERE trigger_schema = 'public'
+      AND trigger_name = $1
+      AND event_object_table = $2
+    LIMIT 1
+  `, [guard.name, guard.relationName])
+  const row = result.rows[0]
+  return {
+    ...guard,
+    exists: Boolean(row),
+    actionTiming: row?.action_timing ?? '',
+    eventManipulation: row?.event_manipulation ?? '',
+    ok: Boolean(row),
+  }
+}
+
+async function getCheckConstraintGuard(client, guard) {
+  const result = await client.query(`
+    SELECT
+      con.conname AS constraint_name,
+      table_cls.relname AS table_name,
+      pg_get_constraintdef(con.oid) AS definition
+    FROM pg_constraint con
+    JOIN pg_class table_cls ON table_cls.oid = con.conrelid
+    JOIN pg_namespace ns ON ns.oid = table_cls.relnamespace
+    WHERE ns.nspname = 'public'
+      AND con.contype = 'c'
+      AND con.conname = $1
+      AND table_cls.relname = $2
+    LIMIT 1
+  `, [guard.name, guard.relationName])
+  const row = result.rows[0]
+  const definition = normalizeSqlFragment(row?.definition)
+  const hasExpectedExpression =
+    !guard.expressionPattern || definition.includes(guard.expressionPattern)
+
+  return {
+    ...guard,
+    exists: Boolean(row),
+    definition,
+    ok: Boolean(row) && hasExpectedExpression,
+  }
+}
+
+async function getDatabaseGuardSummary(client) {
+  const checks = []
+  for (const guard of REQUIRED_DATABASE_GUARDS) {
+    if (guard.type === 'trigger') {
+      checks.push(await getTriggerGuard(client, guard))
+    } else if (guard.type === 'check-constraint') {
+      checks.push(await getCheckConstraintGuard(client, guard))
+    } else {
+      checks.push(await getIndexGuard(client, guard))
+    }
+  }
+
+  return {
+    total: checks.length,
+    ok: checks.filter((guard) => guard.ok).length,
+    missingOrInvalid: checks.filter((guard) => !guard.ok),
+    checks,
+  }
+}
+
+async function getAssetCenterSourceDataSummary(client) {
+  const result = await client.query(`
+    SELECT
+      (SELECT COUNT(*)::integer FROM "AssetSeries") AS asset_series_total,
+      (SELECT COUNT(*)::integer FROM "AssetSeries" WHERE "isActive" = true) AS active_asset_series,
+      (SELECT COUNT(*)::integer FROM "AssetFamily" WHERE "deletedAt" IS NULL) AS active_asset_families,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssetFamily"
+        WHERE "deletedAt" IS NULL
+          AND "assetSeriesId" IS NULL
+      ) AS active_asset_families_without_series,
+      (SELECT COUNT(*)::integer FROM "AssetVariant" WHERE "deletedAt" IS NULL) AS active_asset_variants,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssetVariant"
+        WHERE "deletedAt" IS NULL
+          AND NULLIF(btrim("modelUrl"), '') IS NULL
+      ) AS active_asset_variants_without_model_url,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssetVariant"
+        WHERE "deletedAt" IS NULL
+          AND NULLIF(btrim("thumbnailUrl"), '') IS NULL
+      ) AS active_asset_variants_without_thumbnail_url
+  `)
+  return result.rows[0]
+}
+
+async function getAssetVariantDuplicateBarcodeGroupCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS duplicate_groups
+    FROM (
+      SELECT upper(btrim("barcode")) AS barcode
+      FROM "AssetVariant"
+      WHERE "deletedAt" IS NULL
+        AND NULLIF(btrim(COALESCE("barcode", '')), '') IS NOT NULL
+      GROUP BY upper(btrim("barcode"))
+      HAVING COUNT(*) > 1
+    ) duplicate_groups
+  `)
+  return result.rows[0]?.duplicate_groups ?? 0
+}
+
+function assertNoPendingMigrationDryRun(appliedMigrations, options = {}) {
+  if (!options.requireApplied || appliedMigrations.length === 0) return
+  const pendingMigrations = getPendingStructureMigrationPaths(appliedMigrations)
+  if (pendingMigrations.length === 0) return
+  throw new Error(
+    `数据库治理迁移尚未真实落库，严格模式拒绝通过：${pendingMigrations.join(', ')}`,
+  )
+}
+
+function getMigrationApplicationStatus(
+  appliedMigrations,
+  migrationReplay = classifyAppliedMigrationPaths(appliedMigrations),
+) {
+  return {
+    appliedMigrationCount: appliedMigrations.length,
+    pendingStructureMigrationCount: migrationReplay.structureMigrations.length,
+    replayableIdempotentMigrationCount: migrationReplay.idempotentMigrations.length,
+    pendingStructureMigrationPaths: migrationReplay.structureMigrations,
+    replayableIdempotentMigrationPaths: migrationReplay.idempotentMigrations,
+    strictReady: migrationReplay.structureMigrations.length === 0,
+    fullyReady: appliedMigrations.length === 0,
+  }
+}
+
+function shouldApplyMissingMigrationFiles(migrationReadiness) {
+  return Number(migrationReadiness?.pendingMigrationCount ?? 0) > 0
+}
+
+async function getMigrationHistoryStatus(client) {
+  const tableResult = await client.query(`
+    SELECT to_regclass('_prisma_migrations') AS relation_name
+  `)
+  const tableExists = tableResult.rows[0]?.relation_name !== null
+
+  if (!tableExists) {
+    return {
+      tableExists: false,
+      totalMigrationRows: 0,
+      appliedMigrationRows: 0,
+      unfinishedMigrationRows: 0,
+      rolledBackMigrationRows: 0,
+    }
+  }
+
+  const historyResult = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total_migration_rows,
+      COUNT(*) FILTER (
+        WHERE finished_at IS NOT NULL AND rolled_back_at IS NULL
+      )::integer AS applied_migration_rows,
+      COUNT(*) FILTER (
+        WHERE finished_at IS NULL AND rolled_back_at IS NULL
+      )::integer AS unfinished_migration_rows,
+      COUNT(*) FILTER (
+        WHERE rolled_back_at IS NOT NULL
+      )::integer AS rolled_back_migration_rows
+    FROM _prisma_migrations
+  `)
+  const row = historyResult.rows[0] ?? {}
+
+  return {
+    tableExists: true,
+    totalMigrationRows: row.total_migration_rows ?? 0,
+    appliedMigrationRows: row.applied_migration_rows ?? 0,
+    unfinishedMigrationRows: row.unfinished_migration_rows ?? 0,
+    rolledBackMigrationRows: row.rolled_back_migration_rows ?? 0,
+  }
+}
+
+async function getRequiredMigrationReadiness(client, migrations = REQUIRED_MIGRATIONS) {
+  const checks = []
+  const migrationHistory = await getMigrationHistoryStatus(client)
+
+  for (const migration of migrations) {
+    const targetRelations = getMigrationTargetRelations(migration)
+    const relationChecks = await Promise.all(
+      targetRelations.map(async (relationName) => ({
+        relationName,
+        exists: await relationExists(client, relationName),
+      })),
+    )
+    const columnCheck = migration.columnCheck
+      ? {
+          ...migration.columnCheck,
+          exists: await columnExists(
+            client,
+            migration.columnCheck.tableName,
+            migration.columnCheck.columnName,
+          ),
+        }
+      : null
+    const columnDefaultChecks = Array.isArray(migration.columnDefaultChecks)
+      ? await Promise.all(
+          migration.columnDefaultChecks.map(async (check) => ({
+            ...check,
+            matches: await columnDefaultMatches(
+              client,
+              check.tableName,
+              check.columnName,
+              check.expectedDefault,
+            ),
+          })),
+        )
+      : []
+    const guardChecks = Array.isArray(migration.guardChecks)
+      ? await Promise.all(
+          migration.guardChecks.map(async (check) => ({
+            ...check,
+            exists: await guardExists(client, check),
+          })),
+        )
+      : []
+    const relationColumnChecks = Array.isArray(migration.relationColumnChecks)
+      ? await Promise.all(
+          migration.relationColumnChecks.map(async (check) => ({
+            ...check,
+            columns: await Promise.all(
+              check.columnNames.map(async (columnName) => ({
+                columnName,
+                exists: await relationColumnExists(client, check.relationName, columnName),
+              })),
+            ),
+          })),
+        )
+      : []
+    const missingRelations = relationChecks
+      .filter((check) => !check.exists)
+      .map((check) => check.relationName)
+    const dataChecks = Array.isArray(migration.dataChecks)
+      ? await Promise.all(
+          migration.dataChecks.map(async (check) => ({
+            name: check.name,
+            expectedValue: check.expectedValue,
+            matches: missingRelations.length === 0
+              ? await dataCheckPasses(client, check)
+              : false,
+          })),
+        )
+      : []
+    const ready =
+      missingRelations.length === 0 &&
+      (!columnCheck || columnCheck.exists) &&
+      columnDefaultChecks.every((check) => check.matches) &&
+      guardChecks.every((check) => check.exists) &&
+      relationColumnChecks.every((check) => check.columns.every((column) => column.exists)) &&
+      dataChecks.every((check) => check.matches)
+
+    checks.push({
+      path: migration.path,
+      kind: migration.alwaysApply ? 'idempotent' : 'structure',
+      ready,
+      targetRelations: relationChecks,
+      ...(columnCheck && { columnCheck }),
+      ...(columnDefaultChecks.length > 0 && { columnDefaultChecks }),
+      ...(guardChecks.length > 0 && { guardChecks }),
+      ...(relationColumnChecks.length > 0 && { relationColumnChecks }),
+      ...(dataChecks.length > 0 && { dataChecks }),
+    })
+  }
+
+  const pendingChecks = checks.filter((check) => !check.ready)
+  const pendingStructureMigrationPaths = pendingChecks
+    .filter((check) => check.kind === 'structure')
+    .map((check) => check.path)
+  const pendingIdempotentMigrationPaths = pendingChecks
+    .filter((check) => check.kind === 'idempotent')
+    .map((check) => check.path)
+  const migrationHistoryReady =
+    migrationHistory.tableExists &&
+    migrationHistory.unfinishedMigrationRows === 0 &&
+    migrationHistory.rolledBackMigrationRows === 0
+
+  return {
+    mode: 'read-only-migration-status',
+    migrationHistory,
+    migrationCount: checks.length,
+    readyMigrationCount: checks.length - pendingChecks.length,
+    pendingMigrationCount: pendingChecks.length,
+    pendingStructureMigrationCount: pendingStructureMigrationPaths.length,
+    pendingIdempotentMigrationCount: pendingIdempotentMigrationPaths.length,
+    pendingStructureMigrationPaths,
+    pendingIdempotentMigrationPaths,
+    strictReady: pendingStructureMigrationPaths.length === 0 && migrationHistoryReady,
+    fullyReady: pendingChecks.length === 0 && migrationHistoryReady,
+    checks,
+  }
+}
+
+function assertNoMasterDataTruthDrift(report) {
+  const driftChecks = [
+    {
+      value: report.payloadSyncDiffCount,
+      message: '非集成 SKU 明细结构化表与 payload.skuItems 快照不一致，详见 payloadSyncDiffCount。',
+    },
+    {
+      value: report.productSkuProfileSnapshotDiffCount,
+      message: '正式 SKU 资产 profile 与 attributes.assetSkuSnapshot 兼容快照不一致，详见 productSkuProfileSnapshotDiffCount。',
+    },
+    {
+      value: report.productSkuProfileDeletedAtMismatchCount,
+      message: '正式 SKU 资产 profile 的 skuDeletedAt 与 ProductSKU.deletedAt 不一致，详见 productSkuProfileDeletedAtMismatchCount。',
+    },
+    {
+      value: report.productSkuSoftDeleteTombstoneRiskCount,
+      message: '正式 SKU 软删除墓碑资料不完整，详见 productSkuSoftDeleteTombstoneRiskCount。',
+    },
+    {
+      value: report.preSkuBasicInfoSnapshotDiffCount,
+      message: '准 SKU 基础资料结构化表与 displaySummary/familySelection 旧快照不一致，详见 preSkuBasicInfoSnapshotDiffCount。',
+    },
+    {
+      value: report.nonIntegratedProductProfilePayloadDiffCount,
+      message: '非集成产品 profile 与 payload 产品头快照不一致，详见 nonIntegratedProductProfilePayloadDiffCount。',
+    },
+    {
+      value: report.nonIntegratedProductStockSourcePayloadDiffCount,
+      message: '非集成存量来源字段 profile 与 payload.metadata 快照不一致，详见 nonIntegratedProductStockSourcePayloadDiffCount。',
+    },
+  ]
+
+  const drift = driftChecks.find((check) => Number(check.value ?? 0) > 0)
+  if (drift) {
+    throw new Error(drift.message)
+  }
+
+  if (Number(report.duplicateSkuCodeGroups ?? 0) > 0) {
+    throw new Error('非集成 SKU 明细存在重复 skuCode，详见 duplicateSkuCodeGroups。')
+  }
+  if (Number(report.duplicateBarcodeGroups ?? 0) > 0) {
+    throw new Error('非集成 SKU 明细存在重复 barcode，详见 duplicateBarcodeGroups。')
+  }
+  if (Number(report.productSkuPriceCostStockRiskCount ?? 0) > 0) {
+    throw new Error('正式 SKU 存在负售价、负成本或负库存，详见 productSkuPriceCostStockRiskCount。')
+  }
+  if (Number(report.productSkuFormalTruthAttributeRiskCount ?? 0) > 0) {
+    throw new Error('正式 SKU attributes 仍保存正式资料字段，详见 productSkuFormalTruthAttributeRiskCount。')
+  }
+}
+
+function asCount(value) {
+  const count = Number(value ?? 0)
+  return Number.isFinite(count) ? count : 0
+}
+
+function collectFoundationHardReadyBlockers(report) {
+  const blockers = []
+  const add = (source, key, value, message) => {
+    blockers.push({ source, key, value, message })
+  }
+  const addCount = (source, key, value, message) => {
+    const count = asCount(value)
+    if (count > 0) add(source, key, count, message)
+  }
+  const addBoolean = (source, key, ok, message) => {
+    if (!ok) add(source, key, ok, message)
+  }
+
+  addBoolean(
+    'migrationApplicationStatus',
+    'fullyReady',
+    report.migrationApplicationStatus?.fullyReady === true,
+    '治理迁移必须真实落库且没有 dry-run replay 缺口。',
+  )
+  addCount(
+    'databaseGuards',
+    'missingOrInvalid',
+    report.databaseGuards?.missingOrInvalid?.length,
+    '数据库物理护栏缺失或失效。',
+  )
+  addCount(
+    'assetCenterSourceData',
+    'active_asset_families_without_series',
+    report.assetCenterSourceData?.active_asset_families_without_series,
+    '活动资产族必须归属到结构化系列。',
+  )
+  addCount(
+    'assetCenterSourceData',
+    'active_asset_variants_without_model_url',
+    report.assetCenterSourceData?.active_asset_variants_without_model_url,
+    '活动规格款必须有模型 URL。',
+  )
+  addCount(
+    'assetCenterSourceData',
+    'active_asset_variants_without_thumbnail_url',
+    report.assetCenterSourceData?.active_asset_variants_without_thumbnail_url,
+    '活动规格款必须有预览图。',
+  )
+  addCount(
+    'assetVariantDuplicateBarcodeGroups',
+    'duplicateGroups',
+    report.assetVariantDuplicateBarcodeGroups,
+    '活动资产规格款条码不能重复。',
+  )
+  addCount(
+    'structuredSkuItems',
+    'incomplete',
+    report.structuredSkuItems?.incomplete,
+    '非集成 SKU 明细必须全部 READY。',
+  )
+  addCount(
+    'structuredSkuItems',
+    'duplicateSkuCodeGroups',
+    report.duplicateSkuCodeGroups,
+    '非集成 SKU 明细 skuCode 不能重复。',
+  )
+  addCount(
+    'structuredSkuItems',
+    'duplicateBarcodeGroups',
+    report.duplicateBarcodeGroups,
+    '非集成 SKU 明细 barcode 不能重复。',
+  )
+  addCount(
+    'productSkuAssetProfiles',
+    'productSkuWithoutAssetProfileCount',
+    report.productSkuWithoutAssetProfileCount,
+    '带资产快照的正式 SKU 必须有结构化资产 profile。',
+  )
+  addCount(
+    'productSkuAssetProfiles',
+    'productSkuProfileDuplicateBarcodeGroups',
+    report.productSkuProfileDuplicateBarcodeGroups,
+    '正式 SKU 资产 profile 活动条码不能重复。',
+  )
+  addCount(
+    'productSkuAssetProfiles',
+    'productSkuProfileDeletedAtMismatchCount',
+    report.productSkuProfileDeletedAtMismatchCount,
+    '正式 SKU 资产 profile 删除状态必须和 SKU 删除状态一致。',
+  )
+  addCount(
+    'productSkuAssetProfiles',
+    'productSkuSoftDeleteTombstoneRiskCount',
+    report.productSkuSoftDeleteTombstoneRiskCount,
+    '正式 SKU 软删除墓碑资料必须完整。',
+  )
+  addCount(
+    'productSkuTruth',
+    'productSkuMissingNameCount',
+    report.productSkuMissingNameCount,
+    '活动正式 SKU 必须有结构化名称。',
+  )
+  addCount(
+    'productSkuTruth',
+    'productSkuPriceCostStockRiskCount',
+    report.productSkuPriceCostStockRiskCount,
+    '正式 SKU 售价、成本和库存不能为负。',
+  )
+  addCount(
+    'productSkuTruth',
+    'productSkuFormalTruthAttributeRiskCount',
+    report.productSkuFormalTruthAttributeRiskCount,
+    '正式 SKU attributes 不能保存正式资料字段。',
+  )
+  addCount(
+    'preSkuBasicInfo',
+    'preSkuMissingBasicInfoCount',
+    report.preSkuMissingBasicInfoCount,
+    '准 SKU 必须有结构化基础资料。',
+  )
+  addCount(
+    'preSkuBasicInfo',
+    'preSkuDuplicateFormalSkuCodeGroups',
+    report.preSkuDuplicateFormalSkuCodeGroups,
+    '准 SKU 正式规格码不能重复。',
+  )
+  addCount(
+    'preSkuBasicInfo',
+    'preSkuDuplicateBarcodeGroups',
+    report.preSkuDuplicateBarcodeGroups,
+    '准 SKU 条码不能重复。',
+  )
+  addCount(
+    'preSkuLifecycle',
+    'preSkuFormalizationLifecycleMismatchCount',
+    report.preSkuFormalizationLifecycleMismatchCount,
+    '准 SKU 正式化状态必须和正式 SKU 来源关系一致。',
+  )
+  addCount(
+    'draftProcessSnapshots',
+    'draftGroupInvalidProcessShapeCount',
+    report.draftGroupInvalidProcessShapeCount,
+    '草稿组过程快照形态必须稳定。',
+  )
+  addCount(
+    'draftProcessSnapshots',
+    'preSkuInvalidProcessShapeCount',
+    report.preSkuInvalidProcessShapeCount,
+    '准 SKU 过程快照形态必须稳定。',
+  )
+  addCount(
+    'nonIntegratedProductProfiles',
+    'nonIntegratedProductMissingProfileCount',
+    report.nonIntegratedProductMissingProfileCount,
+    '非集成产品必须有结构化产品 profile。',
+  )
+  addCount(
+    'nonIntegratedProductProfiles',
+    'missing_product_name',
+    report.nonIntegratedProductProfiles?.missing_product_name,
+    '非集成产品 profile 必须有产品名称。',
+  )
+  addCount(
+    'nonIntegratedProductProfiles',
+    'missing_product_category',
+    report.nonIntegratedProductProfiles?.missing_product_category,
+    '非集成产品 profile 必须有品类。',
+  )
+  addCount(
+    'nonIntegratedProductProfiles',
+    'missing_development_kind',
+    report.nonIntegratedProductProfiles?.missing_development_kind,
+    '非集成产品 profile 必须有开发类型。',
+  )
+  addCount(
+    'productPatentRecords',
+    'temporary_id_count',
+    report.productPatentRecords?.temporary_id_count,
+    '专利台账不能保留草稿态临时随机 id。',
+  )
+
+  const qualityDecisionRisks = report.masterDataQualityDecisions || {}
+  for (const key of [
+    'openApprovedIncomplete',
+    'blankReasonRisk',
+    'placeholderReasonRisk',
+    'placeholderDecidedByRisk',
+    'placeholderResolvedByRisk',
+    'duplicateOpenTargetRisk',
+  ]) {
+    addCount(
+      'masterDataQualityDecisions',
+      key,
+      qualityDecisionRisks[key],
+      '主数据质量决策只能作为分阶段审计线索，不能保留开放缺口或占位内容。',
+    )
+  }
+
+  const driftChecks = [
+    ['snapshotDrift', 'payloadSyncDiffCount', report.payloadSyncDiffCount],
+    ['snapshotDrift', 'productSkuProfileSnapshotDiffCount', report.productSkuProfileSnapshotDiffCount],
+    ['snapshotDrift', 'preSkuBasicInfoSnapshotDiffCount', report.preSkuBasicInfoSnapshotDiffCount],
+    ['snapshotDrift', 'nonIntegratedProductProfilePayloadDiffCount', report.nonIntegratedProductProfilePayloadDiffCount],
+    ['snapshotDrift', 'nonIntegratedProductStockSourcePayloadDiffCount', report.nonIntegratedProductStockSourcePayloadDiffCount],
+  ]
+  for (const [source, key, value] of driftChecks) {
+    addCount(source, key, value, '结构化主数据和兼容/过程快照不能漂移。')
+  }
+
+  addBoolean(
+    'externalReadonlyContract',
+    'externalIntakeSkuItemsView.exists',
+    report.externalIntakeSkuItemsView?.exists === true,
+    '外部只读 SKU 明细视图必须存在。',
+  )
+  addBoolean(
+    'externalReadonlyContract',
+    'externalIntakeReadyViews.exists',
+    report.externalIntakeReadyViews?.exists === true,
+    '外部只读 ready 视图必须存在。',
+  )
+  addBoolean(
+    'externalReadonlyContract',
+    'externalProductSkusView.exists',
+    report.externalProductSkusView?.exists === true,
+    '外部正式 SKU 视图必须存在。',
+  )
+  addBoolean(
+    'externalReadonlyContract',
+    'externalProductDetailViews.exists',
+    report.externalProductDetailViews?.exists === true,
+    '外部正式产品素材/BOM 明细视图必须存在。',
+  )
+  addCount(
+    'externalReadonlyContract',
+    'missingViews',
+    report.externalReadonlyContract?.missingViews?.length,
+    '外部只读契约视图不能缺失。',
+  )
+  addCount(
+    'externalReadonlyContract',
+    'missingColumns',
+    report.externalReadonlyContract?.missingColumns?.length,
+    '外部只读视图不能缺少字段字典承诺列。',
+  )
+  addCount(
+    'externalReadonlyContract',
+    'extraColumns',
+    report.externalReadonlyContract?.extraColumns?.length,
+    '外部只读视图不能暴露字段字典未登记列。',
+  )
+  addCount(
+    'externalStableKeyQuality',
+    'missingRequired',
+    report.externalStableKeyQuality?.missingRequired?.length,
+    '外部只读视图稳定业务键不能缺失。',
+  )
+  addCount(
+    'externalStableKeyQuality',
+    'duplicateGroups',
+    report.externalStableKeyQuality?.duplicateGroups?.length,
+    '外部只读视图稳定业务键不能重复。',
+  )
+  addCount(
+    'externalViewJsonSourceDependencyRisks',
+    'rowCount',
+    report.externalViewJsonSourceDependencyRisks?.length,
+    '外部只读视图不能依赖内部 JSON 源。',
+  )
+  addCount(
+    'externalViewIdFallbackRisks',
+    'rowCount',
+    report.externalViewIdFallbackRisks?.length,
+    '外部只读视图业务编码字段不能用内部 id 兜底。',
+  )
+  addCount(
+    'externalIntakeProductPeopleSourceRisks',
+    'rowCount',
+    report.externalIntakeProductPeopleSourceRisks?.length,
+    '外部非集成产品负责人字段必须优先读取结构化 profile。',
+  )
+
+  return blockers
+}
+
+function buildFoundationHardReadyGate(report) {
+  const blockers = collectFoundationHardReadyBlockers(report)
+  return {
+    hardReady: blockers.length === 0,
+    blockerCount: blockers.length,
+    blockerSourceCounts: blockers.reduce((counts, blocker) => {
+      counts[blocker.source] = (counts[blocker.source] || 0) + 1
+      return counts
+    }, {}),
+    blockers,
+  }
+}
+
+function assertFoundationHardReadyGate(report) {
+  const gate = report.foundationHardReadyGate || buildFoundationHardReadyGate(report)
+  if (gate.hardReady) return
+  const first = gate.blockers[0]
+  throw new Error(
+    `数据库主数据地基尚未 hard-ready：${first?.source || 'unknown'}.${first?.key || 'unknown'}，详见 foundationHardReadyGate.blockers。`,
+  )
+}
+
+async function getStructuredSkuSummary(client) {
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE "dataQualityStatus" = 'READY')::integer AS ready,
+      COUNT(*) FILTER (WHERE "dataQualityStatus" = 'INCOMPLETE')::integer AS incomplete
+    FROM "IntakeNonIntegratedSkuItem" sku
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+    WHERE product."deletedAt" IS NULL
+  `)
+  return result.rows[0]
+}
+
+async function getIncompleteSkuItemSamples(client) {
+  const result = await client.query(`
+    SELECT
+      sku."id",
+      sku."productId",
+      product."spu",
+      sku."skuItemId",
+      sku."skuCode",
+      sku."specName",
+      sku."model",
+      sku."barcode",
+      sku."missingRequiredFields"
+    FROM "IntakeNonIntegratedSkuItem" sku
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+    WHERE product."deletedAt" IS NULL
+      AND sku."dataQualityStatus" = 'INCOMPLETE'
+    ORDER BY product."spu", sku."sortOrder", sku."id"
+    LIMIT 20
+  `)
+  return result.rows
+}
+
+async function getDuplicateGroupCount(client, columnName) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS duplicate_groups
+    FROM (
+      SELECT upper(btrim("${columnName}")) AS normalized_value
+      FROM "IntakeNonIntegratedSkuItem" sku
+      JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+      WHERE product."deletedAt" IS NULL
+        AND NULLIF(btrim("${columnName}"), '') IS NOT NULL
+      GROUP BY upper(btrim("${columnName}"))
+      HAVING COUNT(*) > 1
+    ) duplicate_groups
+  `)
+  return result.rows[0]?.duplicate_groups ?? 0
+}
+
+async function getPayloadSyncDiffCount(client) {
+  const result = await client.query(`
+    WITH payload_sku_items AS (
+      SELECT
+        p."id" AS product_id,
+        item.sku_item,
+        item.ordinality::integer AS sort_order,
+        COALESCE(NULLIF(btrim(item.sku_item ->> 'id'), ''), 'sku-' || item.ordinality::text) AS raw_sku_item_id
+      FROM "IntakeNonIntegratedProduct" p
+      CROSS JOIN LATERAL jsonb_array_elements(
+        CASE
+          WHEN jsonb_typeof(p."payload"::jsonb -> 'skuItems') = 'array'
+            THEN p."payload"::jsonb -> 'skuItems'
+          ELSE '[]'::jsonb
+        END
+      ) WITH ORDINALITY AS item(sku_item, ordinality)
+      WHERE p."deletedAt" IS NULL
+    ),
+    deduped_payload_sku_items AS (
+      SELECT
+        payload_sku_items.*,
+        CASE
+          WHEN COUNT(*) OVER (PARTITION BY product_id, raw_sku_item_id) = 1
+            THEN raw_sku_item_id
+          ELSE raw_sku_item_id || '-' || ROW_NUMBER() OVER (
+            PARTITION BY product_id, raw_sku_item_id
+            ORDER BY sort_order
+          )::text
+        END AS sku_item_id
+      FROM payload_sku_items
+    ),
+    payload_snapshot AS (
+      SELECT
+        product_id,
+        sku_item_id,
+        sort_order,
+        COALESCE(sku_item ->> 'skuCode', '') AS sku_code,
+        COALESCE(sku_item ->> 'specName', '') AS spec_name,
+        COALESCE(sku_item ->> 'model', '') AS model,
+        COALESCE(sku_item ->> 'barcode', '') AS barcode
+      FROM deduped_payload_sku_items
+    ),
+    structured_snapshot AS (
+      SELECT
+        sku."productId" AS product_id,
+        sku."skuItemId" AS sku_item_id,
+        sku."sortOrder" AS sort_order,
+        sku."skuCode" AS sku_code,
+        sku."specName" AS spec_name,
+        sku."model" AS model,
+        sku."barcode" AS barcode
+      FROM "IntakeNonIntegratedSkuItem" sku
+      JOIN "IntakeNonIntegratedProduct" product ON product."id" = sku."productId"
+      WHERE product."deletedAt" IS NULL
+    )
+    SELECT COUNT(*)::integer AS row_count
+    FROM payload_snapshot payload
+    FULL JOIN structured_snapshot structured
+      ON structured.product_id = payload.product_id
+     AND structured.sku_item_id = payload.sku_item_id
+    WHERE payload.product_id IS NULL
+       OR structured.product_id IS NULL
+       OR payload.sort_order IS DISTINCT FROM structured.sort_order
+       OR payload.sku_code IS DISTINCT FROM structured.sku_code
+       OR payload.spec_name IS DISTINCT FROM structured.spec_name
+       OR payload.model IS DISTINCT FROM structured.model
+       OR payload.barcode IS DISTINCT FROM structured.barcode
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getExternalViewSummary(client) {
+  const exists = await relationExists(client, 'external.intake_sku_items_v1')
+  if (!exists) {
+    return { exists: false }
+  }
+
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE data_quality_status = 'READY')::integer AS ready,
+      COUNT(*) FILTER (WHERE data_quality_status = 'INCOMPLETE')::integer AS incomplete
+    FROM external.intake_sku_items_v1
+  `)
+  return {
+    exists: true,
+    ...result.rows[0],
+  }
+}
+
+async function getExternalReadyViewSummary(client) {
+  const productsExists = await relationExists(client, 'external.intake_products_ready_v1')
+  const skuItemsExists = await relationExists(client, 'external.intake_sku_items_ready_v1')
+  if (!productsExists || !skuItemsExists) {
+    return { exists: false, productsExists, skuItemsExists }
+  }
+
+  const result = await client.query(`
+    SELECT
+      (SELECT COUNT(*)::integer FROM external.intake_products_ready_v1) AS ready_products,
+      (SELECT COUNT(*)::integer FROM external.intake_sku_items_ready_v1) AS ready_sku_items,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.intake_sku_items_ready_v1
+        WHERE data_quality_status <> 'READY'
+      ) AS ready_sku_quality_violations,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.intake_products_ready_v1
+        WHERE NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NULL
+      ) AS ready_product_business_key_missing,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.intake_sku_items_ready_v1
+        WHERE NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NULL
+          OR NULLIF(btrim(COALESCE(sku_business_key, '')), '') IS NULL
+      ) AS ready_sku_business_key_missing,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT product_business_key
+          FROM external.intake_products_ready_v1
+          GROUP BY product_business_key
+          HAVING COUNT(*) > 1
+        ) duplicate_groups
+      ) AS ready_product_business_key_duplicate_groups,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT sku_business_key
+          FROM external.intake_sku_items_ready_v1
+          GROUP BY sku_business_key
+          HAVING COUNT(*) > 1
+        ) duplicate_groups
+      ) AS ready_sku_business_key_duplicate_groups
+  `)
+  return {
+    exists: true,
+    ...result.rows[0],
+  }
+}
+
+async function getProductSkuAssetProfileSummary(client) {
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE "sourceStatus" = 'ACTIVE')::integer AS active,
+      COUNT(*) FILTER (WHERE "sourceStatus" = 'DELETED')::integer AS deleted,
+      COUNT(*) FILTER (WHERE "sourceStatus" = 'MISSING')::integer AS missing
+    FROM "ProductSkuAssetProfile"
+  `)
+  return result.rows[0]
+}
+
+async function getProductSkuWithoutAssetProfileCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU" sku
+    JOIN "Product" product ON product."id" = sku."productId"
+    LEFT JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+    WHERE sku."deletedAt" IS NULL
+      AND product."deletedAt" IS NULL
+      AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+      AND profile."id" IS NULL
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuMissingNameCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU" sku
+    JOIN "Product" product ON product."id" = sku."productId"
+    WHERE sku."deletedAt" IS NULL
+      AND product."deletedAt" IS NULL
+      AND NULLIF(btrim(COALESCE(sku."name", '')), '') IS NULL
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuPriceCostStockRiskCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU"
+    WHERE "price" < 0
+       OR ("costPrice" IS NOT NULL AND "costPrice" < 0)
+       OR "stock" < 0
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuFormalTruthAttributeRiskCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU"
+    WHERE attributes ?| ARRAY[
+      'skuName',
+      'model',
+      'specCode',
+      'barcode',
+      'category',
+      'color',
+      'material',
+      'size'
+    ]
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuProfileSnapshotDiffCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU" sku
+    JOIN "Product" product ON product."id" = sku."productId"
+    JOIN "ProductSkuAssetProfile" profile ON profile."skuId" = sku."id"
+    WHERE sku."deletedAt" IS NULL
+      AND product."deletedAt" IS NULL
+      AND jsonb_typeof(sku."attributes"::jsonb -> 'assetSkuSnapshot') = 'object'
+      AND (
+        COALESCE(profile."model", '') IS DISTINCT FROM COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'model', '')
+        OR COALESCE(profile."specCode", '') IS DISTINCT FROM COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'specCode', '')
+        OR COALESCE(profile."barcode", '') IS DISTINCT FROM COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'barcode', '')
+        OR COALESCE(profile."imageUrl", '') IS DISTINCT FROM COALESCE(sku."attributes"::jsonb -> 'assetSkuSnapshot' ->> 'imageUrl', '')
+      )
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuProfileDuplicateBarcodeGroupCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS duplicate_groups
+    FROM (
+      SELECT upper(btrim(profile."barcode")) AS barcode
+      FROM "ProductSkuAssetProfile" profile
+      JOIN "ProductSKU" sku ON sku."id" = profile."skuId"
+      JOIN "Product" product ON product."id" = sku."productId"
+      WHERE sku."deletedAt" IS NULL
+        AND product."deletedAt" IS NULL
+        AND profile."sourceStatus" = 'ACTIVE'
+        AND NULLIF(btrim(COALESCE(profile."barcode", '')), '') IS NOT NULL
+      GROUP BY upper(btrim(profile."barcode"))
+      HAVING COUNT(*) > 1
+    ) duplicate_groups
+  `)
+  return result.rows[0]?.duplicate_groups ?? 0
+}
+
+async function getProductSkuProfileDeletedAtMismatchCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSkuAssetProfile" profile
+    JOIN "ProductSKU" sku ON sku."id" = profile."skuId"
+    WHERE profile."skuDeletedAt" IS DISTINCT FROM sku."deletedAt"
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getProductSkuSoftDeleteTombstoneRiskCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "ProductSKU"
+    WHERE "deletedAt" IS NOT NULL
+      AND (
+        "deletedCodeAt" IS NULL
+        OR (
+          ("deletedByProductId" IS NULL AND "productDeletedAt" IS NOT NULL)
+          OR ("deletedByProductId" IS NOT NULL AND "productDeletedAt" IS NULL)
+          OR ("deletedByProductId" IS NOT NULL AND NULLIF(btrim("deletedByProductId"), '') IS NULL)
+        )
+      )
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuMissingBasicInfoCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "PreSku" pre_sku
+    LEFT JOIN "PreSkuBasicInfo" basic_info ON basic_info."preSkuId" = pre_sku."id"
+    WHERE basic_info."id" IS NULL
+      AND (
+        NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), '') IS NOT NULL
+        OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), '') IS NOT NULL
+        OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), '') IS NOT NULL
+        OR NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), '') IS NOT NULL
+      )
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuBasicInfoSnapshotDiffCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "PreSku" pre_sku
+    JOIN "PreSkuBasicInfo" basic_info ON basic_info."preSkuId" = pre_sku."id"
+    WHERE COALESCE(basic_info."model", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'model', pre_sku."familySelection"::jsonb ->> 'model', '')), ''), '')
+       OR COALESCE(basic_info."formalSkuCode", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'formalSkuCode', pre_sku."familySelection"::jsonb ->> 'formalSkuCode', '')), ''), '')
+       OR COALESCE(basic_info."barcode", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'barcode', pre_sku."familySelection"::jsonb ->> 'barcode', '')), ''), '')
+       OR COALESCE(basic_info."specName", '') IS DISTINCT FROM COALESCE(NULLIF(btrim(COALESCE(pre_sku."displaySummary"::jsonb ->> 'specName', pre_sku."familySelection"::jsonb ->> 'specName', '')), ''), '')
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuBasicInfoDuplicateGroupCount(client, columnName) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS duplicate_groups
+    FROM (
+      SELECT upper(btrim(basic_info."${columnName}")) AS normalized_value
+      FROM "PreSkuBasicInfo" basic_info
+      JOIN "PreSku" pre_sku ON pre_sku."id" = basic_info."preSkuId"
+      WHERE pre_sku."status" <> 'ARCHIVED'
+        AND NULLIF(btrim(basic_info."${columnName}"), '') IS NOT NULL
+      GROUP BY upper(btrim(basic_info."${columnName}"))
+      HAVING COUNT(*) > 1
+    ) duplicate_groups
+  `)
+  return result.rows[0]?.duplicate_groups ?? 0
+}
+
+async function getDraftGroupInvalidProcessShapeCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "DraftGroup"
+    WHERE NULLIF(btrim(code), '') IS NULL
+       OR code <> btrim(code)
+       OR NULLIF(btrim(name), '') IS NULL
+       OR name <> btrim(name)
+       OR jsonb_typeof(summary::jsonb) <> 'object'
+       OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+       OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuInvalidProcessShapeCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "PreSku"
+    WHERE sequence <= 0
+       OR NULLIF(btrim("defaultName"), '') IS NULL
+       OR "defaultName" <> btrim("defaultName")
+       OR NULLIF(btrim("sourceCandidateKey"), '') IS NULL
+       OR "sourceCandidateKey" <> btrim("sourceCandidateKey")
+       OR jsonb_typeof("familySelection"::jsonb) <> 'object'
+       OR jsonb_typeof("variantSelection"::jsonb) <> 'object'
+       OR jsonb_typeof("previewNodes"::jsonb) <> 'array'
+       OR jsonb_typeof("displaySummary"::jsonb) <> 'object'
+       OR jsonb_typeof("bomPreview"::jsonb) <> 'array'
+       OR (
+         "recommendedHardware" IS NOT NULL
+         AND jsonb_typeof("recommendedHardware"::jsonb) NOT IN ('array', 'null')
+       )
+       OR (
+         "explosionPreview" IS NOT NULL
+         AND jsonb_typeof("explosionPreview"::jsonb) NOT IN ('array', 'null')
+       )
+       OR jsonb_typeof("installStepPreview"::jsonb) <> 'array'
+       OR (
+         "packagingSnapshot" IS NOT NULL
+         AND jsonb_typeof("packagingSnapshot"::jsonb) NOT IN ('object', 'null')
+       )
+       OR ("weightPreview" IS NOT NULL AND "weightPreview" < 0)
+       OR EXISTS (
+         SELECT 1
+         FROM unnest("componentCodes") AS item
+         WHERE NULLIF(btrim(item), '') IS NULL
+       )
+       OR ("customName" IS NOT NULL AND NULLIF(btrim("customName"), '') IS NULL)
+       OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuFormalizationLifecycleMismatchCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM (
+      SELECT pre_sku."id"
+      FROM "PreSku" pre_sku
+      LEFT JOIN "ProductSKU" sku ON sku."sourcePreSkuId" = pre_sku."id"
+      WHERE pre_sku.status = 'FORMALIZED'::"PreSkuStatus"
+        AND sku."id" IS NULL
+
+      UNION ALL
+
+      SELECT pre_sku."id"
+      FROM "ProductSKU" sku
+      JOIN "PreSku" pre_sku ON pre_sku."id" = sku."sourcePreSkuId"
+      WHERE sku."deletedAt" IS NULL
+        AND pre_sku.status <> 'FORMALIZED'::"PreSkuStatus"
+    ) mismatches
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getPreSkuFormalizationLifecycleMismatchSamples(client) {
+  const result = await client.query(`
+    SELECT
+      mismatches."mismatchReason",
+      mismatches."preSkuId",
+      draft_group."id" AS "draftGroupId",
+      draft_group."code" AS "draftGroupCode",
+      pre_sku."sequence",
+      pre_sku."status"::text AS "status",
+      mismatches."linkedFormalSkuId",
+      mismatches."linkedSkuCode",
+      mismatches."linkedSkuDeletedAt",
+      mismatches."linkedProductId",
+      mismatches."linkedProductDeletedAt"
+    FROM (
+      SELECT
+        'formalized_without_product_sku' AS "mismatchReason",
+        pre_sku."id" AS "preSkuId",
+        NULL::text AS "linkedFormalSkuId",
+        NULL::text AS "linkedSkuCode",
+        NULL::timestamp AS "linkedSkuDeletedAt",
+        NULL::text AS "linkedProductId",
+        NULL::timestamp AS "linkedProductDeletedAt"
+      FROM "PreSku" pre_sku
+      LEFT JOIN "ProductSKU" sku ON sku."sourcePreSkuId" = pre_sku."id"
+      WHERE pre_sku.status = 'FORMALIZED'::"PreSkuStatus"
+        AND sku."id" IS NULL
+
+      UNION ALL
+
+      SELECT
+        'active_product_sku_points_to_unformalized_pre_sku' AS "mismatchReason",
+        pre_sku."id" AS "preSkuId",
+        sku."id" AS "linkedFormalSkuId",
+        sku."skuCode" AS "linkedSkuCode",
+        sku."deletedAt" AS "linkedSkuDeletedAt",
+        product."id" AS "linkedProductId",
+        product."deletedAt" AS "linkedProductDeletedAt"
+      FROM "ProductSKU" sku
+      JOIN "PreSku" pre_sku ON pre_sku."id" = sku."sourcePreSkuId"
+      JOIN "Product" product ON product."id" = sku."productId"
+      WHERE sku."deletedAt" IS NULL
+        AND pre_sku.status <> 'FORMALIZED'::"PreSkuStatus"
+    ) mismatches
+    JOIN "PreSku" pre_sku ON pre_sku."id" = mismatches."preSkuId"
+    JOIN "DraftGroup" draft_group ON draft_group."id" = pre_sku."draftGroupId"
+    ORDER BY draft_group."code", pre_sku."sequence", mismatches."mismatchReason"
+    LIMIT 20
+  `)
+  return result.rows
+}
+
+async function getNonIntegratedProductProfileSummary(client) {
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("productName"), '') IS NULL)::integer AS missing_product_name,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("productCategory"), '') IS NULL)::integer AS missing_product_category,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("productDevelopmentKind"), '') IS NULL)::integer AS missing_development_kind
+    FROM "IntakeNonIntegratedProductProfile"
+  `)
+  return result.rows[0]
+}
+
+async function getNonIntegratedProductProfileQualitySamples(client) {
+  const result = await client.query(`
+    SELECT
+      product."id",
+      product."spu",
+      profile."productName",
+      profile."productCategory",
+      profile."productDevelopmentKind",
+      ARRAY_REMOVE(ARRAY[
+        CASE WHEN NULLIF(btrim(profile."productName"), '') IS NULL THEN 'productName' END,
+        CASE WHEN NULLIF(btrim(profile."productCategory"), '') IS NULL THEN 'productCategory' END,
+        CASE WHEN NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL THEN 'productDevelopmentKind' END
+      ], NULL) AS "missingFields"
+    FROM "IntakeNonIntegratedProduct" product
+    JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+    WHERE product."deletedAt" IS NULL
+      AND (
+        NULLIF(btrim(profile."productName"), '') IS NULL
+        OR NULLIF(btrim(profile."productCategory"), '') IS NULL
+        OR NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL
+      )
+    ORDER BY product."spu", product."id"
+    LIMIT 20
+  `)
+  return result.rows
+}
+
+async function getNonIntegratedProductMissingProfileCount(client) {
+  const result = await client.query(`
+    SELECT COUNT(*)::integer AS row_count
+    FROM "IntakeNonIntegratedProduct" product
+    LEFT JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = product."id"
+    WHERE product."deletedAt" IS NULL
+      AND profile."id" IS NULL
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getNonIntegratedProductProfilePayloadDiffCount(client) {
+  const result = await client.query(`
+    WITH payload_profile AS (
+      SELECT
+        product."id" AS product_id,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productName'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'previewImageName'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'spu'), ''), '') AS product_name,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productImage'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'previewImage'), ''), '') AS product_image_url,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'productCategory'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'productCategory'), ''), '') AS product_category,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'salesCategory'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'salesCategory'), ''), '') AS sales_category,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'year'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'year'), ''), '') AS product_year,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'currentStage'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'projectStatus'), ''), '') AS product_status,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productDevelopmentKind'), ''), '') AS product_development_kind,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'goodsType'), ''), '') AS goods_type,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'materialType'), ''), '') AS material_type,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productionType'), ''), '') AS production_type,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'size'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'size'), ''), '') AS size,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'color'), ''), '') AS color,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'tagMaterial'), ''), '') AS tag_material,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'priceBand'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'targetPriceBand'), ''), '') AS price_band,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandFlowNo'), ''), '') AS demand_flow_no,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'processTemplate'), ''), '') AS process_template,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'productPlanning'), ''), NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'planningOwner'), ''), '') AS product_planning,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'brandPlanning'), ''), '') AS brand_planning,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'demandDepartment'), ''), '') AS demand_department,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'spuOwner'), ''), '') AS spu_owner,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'operationsOwner'), ''), '') AS operations_owner,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'purchaseOwner'), ''), NULLIF(btrim(product."payload"::jsonb ->> 'purchaser'), ''), '') AS purchase_owner,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualDirector'), ''), '') AS visual_director,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb ->> 'visualPlanning'), ''), '') AS visual_planning,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'openingReference' ->> 'structureDesigner'), ''), '') AS structure_designer
+      FROM "IntakeNonIntegratedProduct" product
+      WHERE product."deletedAt" IS NULL
+    )
+    SELECT COUNT(*)::integer AS row_count
+    FROM payload_profile payload
+    JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = payload.product_id
+    WHERE COALESCE(profile."productName", '') IS DISTINCT FROM payload.product_name
+       OR COALESCE(profile."productImageUrl", '') IS DISTINCT FROM payload.product_image_url
+       OR COALESCE(profile."productCategory", '') IS DISTINCT FROM payload.product_category
+       OR COALESCE(profile."salesCategory", '') IS DISTINCT FROM payload.sales_category
+       OR COALESCE(profile."productYear", '') IS DISTINCT FROM payload.product_year
+       OR COALESCE(profile."productStatus", '') IS DISTINCT FROM payload.product_status
+       OR COALESCE(profile."productDevelopmentKind", '') IS DISTINCT FROM payload.product_development_kind
+       OR COALESCE(profile."goodsType", '') IS DISTINCT FROM payload.goods_type
+       OR COALESCE(profile."materialType", '') IS DISTINCT FROM payload.material_type
+       OR COALESCE(profile."productionType", '') IS DISTINCT FROM payload.production_type
+       OR COALESCE(profile."size", '') IS DISTINCT FROM payload.size
+       OR COALESCE(profile."color", '') IS DISTINCT FROM payload.color
+       OR COALESCE(profile."tagMaterial", '') IS DISTINCT FROM payload.tag_material
+       OR COALESCE(profile."priceBand", '') IS DISTINCT FROM payload.price_band
+       OR COALESCE(profile."demandFlowNo", '') IS DISTINCT FROM payload.demand_flow_no
+       OR COALESCE(profile."processTemplate", '') IS DISTINCT FROM payload.process_template
+       OR COALESCE(profile."productPlanning", '') IS DISTINCT FROM payload.product_planning
+       OR COALESCE(profile."brandPlanning", '') IS DISTINCT FROM payload.brand_planning
+       OR COALESCE(profile."demandDepartment", '') IS DISTINCT FROM payload.demand_department
+       OR COALESCE(profile."spuOwner", '') IS DISTINCT FROM payload.spu_owner
+       OR COALESCE(profile."operationsOwner", '') IS DISTINCT FROM payload.operations_owner
+       OR COALESCE(profile."purchaseOwner", '') IS DISTINCT FROM payload.purchase_owner
+       OR COALESCE(profile."visualDirector", '') IS DISTINCT FROM payload.visual_director
+       OR COALESCE(profile."visualPlanning", '') IS DISTINCT FROM payload.visual_planning
+       OR COALESCE(profile."structureDesigner", '') IS DISTINCT FROM payload.structure_designer
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getNonIntegratedProductStockSourcePayloadDiffCount(client) {
+  const result = await client.query(`
+    WITH payload_stock_source AS (
+      SELECT
+        product."id" AS product_id,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSpu'), ''), '') AS source_spu,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSkuId'), ''), '') AS source_sku_id,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceCategory'), ''), '') AS source_category,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceItemType'), ''), '') AS source_item_type,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') AS source_sales_status,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceEnabled'), ''), '') AS source_enabled,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceStockDisabled'), ''), '') AS source_stock_disabled,
+        CASE
+          WHEN jsonb_typeof(product."payload"::jsonb -> 'skuItems') = 'array'
+            THEN jsonb_array_length(product."payload"::jsonb -> 'skuItems')
+          ELSE 0
+        END AS stock_sku_count,
+        COALESCE(NULLIF(btrim(product."payload"::jsonb -> 'metadata' ->> 'sourceSalesStatus'), ''), '') = '销售' AS stock_has_on_sale_sku
+      FROM "IntakeNonIntegratedProduct" product
+      WHERE product."deletedAt" IS NULL
+    )
+    SELECT COUNT(*)::integer AS row_count
+    FROM payload_stock_source payload
+    JOIN "IntakeNonIntegratedProductProfile" profile ON profile."productId" = payload.product_id
+    WHERE COALESCE(profile."sourceSpu", '') IS DISTINCT FROM payload.source_spu
+       OR COALESCE(profile."sourceSkuId", '') IS DISTINCT FROM payload.source_sku_id
+       OR COALESCE(profile."sourceCategory", '') IS DISTINCT FROM payload.source_category
+       OR COALESCE(profile."sourceItemType", '') IS DISTINCT FROM payload.source_item_type
+       OR COALESCE(profile."sourceSalesStatus", '') IS DISTINCT FROM payload.source_sales_status
+       OR COALESCE(profile."sourceEnabled", '') IS DISTINCT FROM payload.source_enabled
+       OR COALESCE(profile."sourceStockDisabled", '') IS DISTINCT FROM payload.source_stock_disabled
+       OR COALESCE(profile."stockSkuCount", 0) IS DISTINCT FROM payload.stock_sku_count
+       OR COALESCE(profile."stockHasOnSaleSku", false) IS DISTINCT FROM payload.stock_has_on_sale_sku
+  `)
+  return result.rows[0]?.row_count ?? 0
+}
+
+async function getExternalProductSkusSummary(client) {
+  const exists = await relationExists(client, 'external.product_skus_v1')
+  if (!exists) {
+    return { exists: false }
+  }
+
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(sku_code, '')), '') IS NULL)::integer AS missing_sku_code,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(sku_name, '')), '') IS NULL)::integer AS missing_sku_name,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(spec_code, '')), '') IS NULL)::integer AS missing_spec_code,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(barcode, '')), '') IS NULL)::integer AS missing_barcode,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NULL)::integer AS missing_product_business_key,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(COALESCE(sku_business_key, '')), '') IS NULL)::integer AS missing_sku_business_key,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT sku_business_key
+          FROM external.product_skus_v1
+          GROUP BY sku_business_key
+          HAVING COUNT(*) > 1
+        ) duplicate_groups
+      ) AS duplicate_sku_business_key_groups
+    FROM external.product_skus_v1
+  `)
+  return {
+    exists: true,
+    ...result.rows[0],
+  }
+}
+
+async function getExternalProductDetailViewsSummary(client) {
+  const productAssetsExists = await relationExists(client, 'external.product_assets_v1')
+  const productBomExists = await relationExists(client, 'external.product_bom_v1')
+  if (!productAssetsExists || !productBomExists) {
+    return { exists: false, productAssetsExists, productBomExists }
+  }
+
+  const result = await client.query(`
+    SELECT
+      (SELECT COUNT(*)::integer FROM external.product_assets_v1) AS product_assets_total,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.product_assets_v1
+        WHERE NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NULL
+      ) AS product_assets_missing_product_business_key,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.product_assets_v1
+        WHERE NULLIF(btrim(COALESCE(sku_business_key, '')), '') IS NULL
+      ) AS product_assets_missing_sku_business_key,
+      (SELECT COUNT(*)::integer FROM external.product_bom_v1) AS product_bom_total,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.product_bom_v1
+        WHERE NULLIF(btrim(COALESCE(product_business_key, '')), '') IS NULL
+      ) AS product_bom_missing_product_business_key,
+      (
+        SELECT COUNT(*)::integer
+        FROM external.product_bom_v1
+        WHERE sku_id IS NOT NULL
+          AND NULLIF(btrim(COALESCE(sku_business_key, '')), '') IS NULL
+      ) AS product_bom_missing_sku_business_key_with_sku_id
+  `)
+  return {
+    exists: true,
+    ...result.rows[0],
+  }
+}
+
+async function getProductPatentRecordSummary(client) {
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("productId"), '') IS NULL)::integer AS missing_product_id,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("patentGroupKey"), '') IS NULL)::integer AS missing_group_key,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("patentName"), '') IS NULL AND NULLIF(btrim("patentNo"), '') IS NULL AND NULLIF(btrim("applicationNo"), '') IS NULL)::integer AS missing_patent_identity,
+      COUNT(*) FILTER (WHERE btrim(id) ~ '^patent-[0-9]+-[A-Za-z0-9]+$')::integer AS temporary_id_count
+    FROM "ProductPatentRecord"
+  `)
+  return result.rows[0]
+}
+
+async function getIntakeReferenceLibrarySummary(client) {
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE "isActive" = true)::integer AS active,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("itemKey"), '') IS NULL)::integer AS missing_item_key,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("code"), '') IS NULL)::integer AS missing_code
+    FROM "IntakeReferenceLibraryItem"
+  `)
+  return result.rows[0]
+}
+
+async function getSpuNumberCounterSummary(client) {
+  const exists = await relationExists(client, '"SpuNumberCounter"')
+  if (!exists) {
+    return { exists: false }
+  }
+
+  const result = await client.query(`
+    SELECT
+      COUNT(*)::integer AS total,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("productCategory"), '') IS NULL)::integer AS missing_product_category,
+      COUNT(*) FILTER (WHERE NULLIF(btrim("prefix"), '') IS NULL)::integer AS missing_prefix,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT upper(btrim("prefix")) AS normalized_prefix
+          FROM "SpuNumberCounter"
+          WHERE NULLIF(btrim("prefix"), '') IS NOT NULL
+          GROUP BY upper(btrim("prefix"))
+          HAVING COUNT(*) > 1
+        ) duplicate_prefixes
+      ) AS duplicate_prefix_groups,
+      COUNT(*) FILTER (WHERE "lastUsedIndex" < 0)::integer AS invalid_index
+    FROM "SpuNumberCounter"
+  `)
+  return {
+    exists: true,
+    ...result.rows[0],
+  }
+}
+
+async function getExternalViewJsonSourceDependencyRisks(client) {
+  const result = await client.query(`
+    SELECT
+      viewname AS view_name,
+      CASE
+        WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"payload"' THEN 'payload'
+        WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"attributes"' THEN 'attributes'
+        WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"businessData"' THEN 'businessData'
+        WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"displaySummary"' THEN 'displaySummary'
+        WHEN pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"familySelection"' THEN 'familySelection'
+        ELSE 'json_operator'
+      END AS dependency_hint
+    FROM pg_views
+    WHERE schemaname = 'external'
+      AND (
+        pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '"(payload|attributes|businessData|displaySummary|familySelection)"'
+        OR pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) ~ '(->>|->|jsonb_array_elements)'
+      )
+    ORDER BY viewname, dependency_hint
+  `)
+  return result.rows
+}
+
+async function getExternalViewIdFallbackRisks(client) {
+  const result = await client.query(`
+    SELECT
+      viewname AS view_name,
+      pg_get_viewdef(format('%I.%I', schemaname, viewname)::regclass) AS view_definition
+    FROM pg_views
+    WHERE schemaname = 'external'
+    ORDER BY viewname
+  `)
+  const risks = []
+
+  for (const row of result.rows) {
+    const viewDefinition = normalizeSqlFragment(row.view_definition)
+    const aliasPattern = /\bAS\s+([a-z_]+(?:_code|_business_key))\b/gi
+    for (const match of viewDefinition.matchAll(aliasPattern)) {
+      const aliasStart = match.index ?? 0
+      const expressionStart = Math.max(
+        viewDefinition.lastIndexOf(',', aliasStart),
+        viewDefinition.lastIndexOf(' SELECT ', aliasStart),
+        viewDefinition.lastIndexOf(' UNION ALL SELECT ', aliasStart),
+      )
+      const expression = viewDefinition.slice(expressionStart + 1, aliasStart).trim()
+      if (!/(?:^|[^\w])(?:[a-z_]+\.)?"?id"?(?:[^\w]|$)/i.test(expression)) {
+        continue
+      }
+      risks.push({
+        view_name: row.view_name,
+        column_name: match[1],
+        risk: 'id_fallback_in_business_column',
+        expression,
+      })
+    }
+  }
+
+  return risks
+}
+
+async function getExternalIntakeProductPeopleSourceRisks(client) {
+  const exists = await relationExists(client, 'external.intake_products_v1')
+  if (!exists) {
+    return [{ view_name: 'intake_products_v1', column_name: '*', risk: 'missing_view' }]
+  }
+
+  const result = await client.query(`
+    SELECT pg_get_viewdef('external.intake_products_v1'::regclass) AS view_definition
+  `)
+  const viewDefinition = normalizeSqlFragment(result.rows[0]?.view_definition)
+  const requiredSources = [
+    {
+      columnName: 'designer',
+      sourcePattern: /profile\."structureDesigner"/,
+      risk: 'designer_must_prefer_profile_structure_designer',
+    },
+    {
+      columnName: 'operator',
+      sourcePattern: /profile\."productPlanning"/,
+      risk: 'operator_must_prefer_profile_product_planning',
+    },
+    {
+      columnName: 'purchaser',
+      sourcePattern: /profile\."purchaseOwner"/,
+      risk: 'purchaser_must_prefer_profile_purchase_owner',
+    },
+  ]
+
+  return requiredSources
+    .filter((source) => !source.sourcePattern.test(viewDefinition))
+    .map((source) => ({
+      view_name: 'intake_products_v1',
+      column_name: source.columnName,
+      risk: source.risk,
+    }))
+}
+
+async function getLegacyCadStructureSummary(client) {
+  const result = await client.query(`
+    WITH panel_duplicate_code_scope_risk AS (
+      SELECT COUNT(*)::integer AS row_count
+      FROM (
+        SELECT "productId", COALESCE("skuId", '') AS sku_scope, upper(btrim(code)) AS normalized_code
+        FROM "Panel"
+        GROUP BY "productId", COALESCE("skuId", ''), upper(btrim(code))
+        HAVING COUNT(*) > 1
+      ) duplicate_panel_codes
+    )
+    SELECT
+      (
+        SELECT COUNT(*)::integer
+        FROM "Panel"
+        WHERE NULLIF(btrim(code), '') IS NULL
+           OR code <> upper(btrim(code))
+           OR NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR NULLIF(btrim("gltfNodeName"), '') IS NULL
+           OR "gltfNodeName" <> btrim("gltfNodeName")
+           OR length <= 0
+           OR width <= 0
+           OR thickness <= 0
+           OR COALESCE("installOrder", 0) < 0
+           OR ("partType" IS NOT NULL AND NULLIF(btrim("partType"), '') IS NULL)
+           OR ("explosionDirection" IS NOT NULL AND "explosionDirection" NOT IN ('auto', 'up', 'down', 'left', 'right', 'front', 'back'))
+           OR ("assemblySemantic" IS NOT NULL AND jsonb_typeof("assemblySemantic") NOT IN ('object', 'null'))
+      ) AS panel_identity_dimension_risk,
+      (SELECT row_count FROM panel_duplicate_code_scope_risk) AS panel_duplicate_code_scope_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "Hole"
+        WHERE "positionX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR "positionY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR "positionZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR diameter <= 0
+           OR depth < 0
+           OR "normalX" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR "normalY" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR "normalZ" IN ('Infinity'::float8, '-Infinity'::float8, 'NaN'::float8)
+           OR ("normalX" = 0 AND "normalY" = 0 AND "normalZ" = 0)
+           OR confidence < 0
+           OR confidence > 1
+           OR ("holeType" IS NOT NULL AND "holeType" NOT IN ('hinge', 'connector', 'shelf_pin', 'screw', 'dowel', 'cable', 'unknown'))
+           OR ("groupId" IS NOT NULL AND NULLIF(btrim("groupId"), '') IS NULL)
+      ) AS hole_geometry_quality_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "ProductHardware"
+        WHERE jsonb_typeof(transform) <> 'object'
+           OR "matchStatus" NOT IN ('matched', 'pending', 'unmatched')
+           OR ("matchConfidence" IS NOT NULL AND ("matchConfidence" < 0 OR "matchConfidence" > 1))
+           OR ("matchMethod" IS NOT NULL AND "matchMethod" NOT IN ('blockName', 'mapping', 'size', 'manual'))
+           OR ("installOrder" IS NOT NULL AND "installOrder" < 0)
+           OR ("holeDistance" IS NOT NULL AND "holeDistance" < 0)
+           OR ("sourceSignature" IS NOT NULL AND jsonb_typeof("sourceSignature") NOT IN ('object', 'null'))
+           OR ("sourceBlockName" IS NOT NULL AND NULLIF(btrim("sourceBlockName"), '') IS NULL)
+           OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+           OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+           OR ("connectedPanelId" IS NOT NULL AND NULLIF(btrim("connectedPanelId"), '') IS NULL)
+           OR ("associatedHoleId" IS NOT NULL AND NULLIF(btrim("associatedHoleId"), '') IS NULL)
+           OR ("parentHardwareId" IS NOT NULL AND NULLIF(btrim("parentHardwareId"), '') IS NULL)
+      ) AS product_hardware_quality_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssemblyStep"
+        WHERE "order" < 0
+           OR NULLIF(btrim(title), '') IS NULL
+           OR title <> btrim(title)
+           OR "stepType" NOT IN ('panel', 'hardware', 'custom')
+           OR duration <= 0
+           OR NULLIF(btrim(easing), '') IS NULL
+           OR "cameraTransition" NOT IN ('smooth', 'cut', 'orbit')
+           OR jsonb_typeof(transform) <> 'object'
+           OR ("cameraPosition" IS NOT NULL AND jsonb_typeof("cameraPosition") NOT IN ('object', 'null'))
+           OR ("infoCardData" IS NOT NULL AND jsonb_typeof("infoCardData") NOT IN ('object', 'null'))
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+           OR ("panelId" IS NOT NULL AND NULLIF(btrim("panelId"), '') IS NULL)
+           OR EXISTS (SELECT 1 FROM unnest("hardwareIds") AS item WHERE NULLIF(btrim(item), '') IS NULL)
+           OR cardinality("hardwareIds") <> (SELECT COUNT(DISTINCT btrim(item))::integer FROM unnest("hardwareIds") AS item)
+           OR EXISTS (SELECT 1 FROM unnest("partIds") AS item WHERE NULLIF(btrim(item), '') IS NULL)
+           OR cardinality("partIds") <> (SELECT COUNT(DISTINCT btrim(item))::integer FROM unnest("partIds") AS item)
+      ) AS assembly_step_quality_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssemblyVersion"
+        WHERE version <= 0
+           OR jsonb_typeof(snapshot) <> 'array'
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+           OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL)
+      ) AS assembly_version_snapshot_risk
+  `)
+  return result.rows[0]
+}
+
+async function getReferenceOptionAndMappingSummary(client) {
+  const result = await client.query(`
+    WITH duplicate_reference_option_names AS (
+      SELECT COUNT(*)::integer AS row_count
+      FROM (
+        SELECT 'ProductCategory' AS table_name, lower(btrim(name)) AS normalized_name FROM "ProductCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'MaterialCategory', lower(btrim(name)) FROM "MaterialCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'HardwareCategory', lower(btrim(name)) FROM "HardwareCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'CommonComponentCategory', lower(btrim(name)) FROM "CommonComponentCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'SubstrateCategory', lower(btrim(name)) FROM "SubstrateCategory" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'SubstrateEnvironmentGrade', lower(btrim(name)) FROM "SubstrateEnvironmentGrade" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'SubstrateSurfaceOption', lower(btrim(name)) FROM "SubstrateSurfaceOption" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'SubstrateSystemNameOption', lower(btrim(name)) FROM "SubstrateSystemNameOption" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+        UNION ALL SELECT 'SubstrateThicknessSpec', lower(btrim(name)) FROM "SubstrateThicknessSpec" GROUP BY lower(btrim(name)) HAVING COUNT(*) > 1
+      ) duplicated
+    )
+    SELECT
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT name, "sortOrder", description, icon FROM "ProductCategory"
+          UNION ALL SELECT name, "sortOrder", NULL::text AS description, icon FROM "MaterialCategory"
+          UNION ALL SELECT name, "sortOrder", description, icon FROM "HardwareCategory"
+          UNION ALL SELECT name, "sortOrder", description, icon FROM "CommonComponentCategory"
+          UNION ALL SELECT name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateCategory"
+          UNION ALL SELECT name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateEnvironmentGrade"
+          UNION ALL SELECT name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateSurfaceOption"
+          UNION ALL SELECT name, "sortOrder", NULL::text AS description, NULL::text AS icon FROM "SubstrateSystemNameOption"
+        ) options
+        WHERE NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR "sortOrder" < 0
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+           OR (icon IS NOT NULL AND NULLIF(btrim(icon), '') IS NULL)
+      ) AS reference_option_identity_risk,
+      (SELECT row_count FROM duplicate_reference_option_names) AS duplicate_reference_option_name_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "SubstrateThicknessSpec"
+        WHERE NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR "sortOrder" < 0
+           OR "thicknessMm" <= 0
+           OR "sheetLengthMm" <= 0
+           OR "sheetWidthMm" <= 0
+      ) AS substrate_thickness_spec_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "HardwareMapping"
+        WHERE (
+            CASE WHEN NULLIF(btrim(COALESCE("blockName", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+            + CASE WHEN NULLIF(btrim(COALESCE("signatureHash", '')), '') IS NOT NULL THEN 1 ELSE 0 END
+          ) <> 1
+          OR "usageCount" < 0
+          OR NULLIF(btrim("createdBy"), '') IS NULL
+          OR "createdBy" <> btrim("createdBy")
+      ) AS hardware_mapping_identity_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "SubstrateFinish"
+        WHERE NULLIF(btrim("substrateId"), '') IS NULL
+           OR NULLIF(btrim("finishId"), '') IS NULL
+      ) AS substrate_finish_relation_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "PanelMaterial"
+        WHERE NULLIF(btrim("panelId"), '') IS NULL
+           OR NULLIF(btrim("materialId"), '') IS NULL
+      ) AS panel_material_relation_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssetVariantLocationBinding"
+        WHERE NULLIF(btrim("assetVariantId"), '') IS NULL
+           OR NULLIF(btrim("warehouseLocationId"), '') IS NULL
+      ) AS asset_variant_location_binding_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "PreSkuLocationBinding"
+        WHERE NULLIF(btrim("preSkuId"), '') IS NULL
+           OR NULLIF(btrim("warehouseLocationId"), '') IS NULL
+      ) AS pre_sku_location_binding_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "PackagingPlan"
+        WHERE NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR "boxCount" <= 0
+           OR jsonb_typeof(boxes) <> 'array'
+           OR ("totalWeight" IS NOT NULL AND "totalWeight" < 0)
+           OR ("totalVolume" IS NOT NULL AND "totalVolume" < 0)
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+           OR (notes IS NOT NULL AND NULLIF(btrim(notes), '') IS NULL)
+      ) AS packaging_plan_quality_risk
+  `)
+  return result.rows[0]
+}
+
+async function getConfigAuditPermissionSummary(client) {
+  const result = await client.query(`
+    SELECT
+      (
+        SELECT COUNT(*)::integer
+        FROM "SystemConfig"
+        WHERE NULLIF(btrim(key), '') IS NULL
+           OR key <> btrim(key)
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+      ) AS system_config_identity_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "ProviderConfig"
+        WHERE NULLIF(btrim("serviceType"), '') IS NULL
+           OR "serviceType" <> btrim("serviceType")
+           OR NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR NULLIF(btrim("baseUrl"), '') IS NULL
+           OR "baseUrl" <> regexp_replace(btrim("baseUrl"), '/+$', '')
+           OR NULLIF(btrim("apiKey"), '') IS NULL
+           OR "apiKey" <> btrim("apiKey")
+           OR "sortOrder" < 0
+           OR (model IS NOT NULL AND NULLIF(btrim(model), '') IS NULL)
+           OR (extra IS NOT NULL AND jsonb_typeof(extra) <> 'object')
+      ) AS provider_config_identity_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT "serviceType"
+          FROM "ProviderConfig"
+          WHERE "isActive" = true
+          GROUP BY "serviceType"
+          HAVING COUNT(*) > 1
+        ) duplicated_active
+      ) AS provider_config_active_conflict_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "ThemeConfig"
+        WHERE NULLIF(btrim(name), '') IS NULL
+           OR name <> btrim(name)
+           OR NULLIF(btrim("createdBy"), '') IS NULL
+           OR "createdBy" <> btrim("createdBy")
+           OR (description IS NOT NULL AND NULLIF(btrim(description), '') IS NULL)
+           OR ("startDate" IS NOT NULL AND "endDate" IS NOT NULL AND "startDate" >= "endDate")
+           OR ("homeBackground" IS NOT NULL AND jsonb_typeof("homeBackground") <> 'object')
+           OR ("loginPanel" IS NOT NULL AND jsonb_typeof("loginPanel") <> 'object')
+      ) AS theme_config_identity_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT lower(btrim(name))
+          FROM "ThemeConfig"
+          GROUP BY lower(btrim(name))
+          HAVING COUNT(*) > 1
+        ) duplicated_names
+      ) AS theme_config_duplicate_name_risk,
+      (
+        SELECT GREATEST(COUNT(*)::integer - 1, 0)
+        FROM "ThemeConfig"
+        WHERE "isDefault" = true
+      ) AS theme_config_default_conflict_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "IntakeNodePermissionOverride"
+        WHERE NULLIF(btrim("targetKey"), '') IS NULL
+           OR "targetKey" <> btrim("targetKey")
+           OR NULLIF(btrim("subjectKey"), '') IS NULL
+           OR "subjectKey" <> btrim("subjectKey")
+           OR NULLIF(btrim(action), '') IS NULL
+           OR action <> btrim(action)
+           OR ("createdBy" IS NOT NULL AND NULLIF(btrim("createdBy"), '') IS NULL)
+           OR ("updatedBy" IS NOT NULL AND NULLIF(btrim("updatedBy"), '') IS NULL)
+      ) AS intake_node_permission_override_identity_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "AssistedAssemblyAiRender"
+        WHERE NULLIF(btrim("createdBy"), '') IS NULL
+           OR "createdBy" <> btrim("createdBy")
+           OR NULLIF(btrim(prompt), '') IS NULL
+           OR prompt <> btrim(prompt)
+           OR jsonb_typeof(params) <> 'object'
+           OR jsonb_typeof("resultImages") <> 'array'
+           OR jsonb_typeof("workspaceSnapshot") <> 'object'
+           OR jsonb_typeof("assetSnapshot") <> 'object'
+           OR ("attempts" IS NOT NULL AND jsonb_typeof("attempts") <> 'array')
+           OR ("durationMs" IS NOT NULL AND "durationMs" < 0)
+           OR ("negativePrompt" IS NOT NULL AND NULLIF(btrim("negativePrompt"), '') IS NULL)
+           OR ("referenceImageUrl" IS NOT NULL AND NULLIF(btrim("referenceImageUrl"), '') IS NULL)
+           OR ("externalRequestId" IS NOT NULL AND NULLIF(btrim("externalRequestId"), '') IS NULL)
+           OR ("errorMessage" IS NOT NULL AND NULLIF(btrim("errorMessage"), '') IS NULL)
+           OR (status = 'SUCCEEDED' AND jsonb_array_length("resultImages") = 0)
+           OR (status = 'FAILED' AND NULLIF(btrim(COALESCE("errorMessage", '')), '') IS NULL)
+      ) AS assisted_assembly_ai_render_quality_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "Feedback"
+        WHERE NULLIF(btrim(title), '') IS NULL
+           OR title <> btrim(title)
+           OR NULLIF(btrim(description), '') IS NULL
+           OR description <> btrim(description)
+           OR NULLIF(btrim(category), '') IS NULL
+           OR category <> btrim(category)
+           OR array_position(images, '') IS NOT NULL
+           OR EXISTS (SELECT 1 FROM unnest(images) AS image WHERE NULLIF(btrim(image), '') IS NULL OR image <> btrim(image))
+           OR ("comments" IS NOT NULL AND jsonb_typeof("comments") <> 'array')
+           OR (resolution IS NOT NULL AND NULLIF(btrim(resolution), '') IS NULL)
+           OR (status = 'RESOLVED' AND ("resolvedAt" IS NULL OR NULLIF(btrim(COALESCE(resolution, '')), '') IS NULL))
+      ) AS feedback_quality_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM "ActivityLog"
+        WHERE NULLIF(btrim("userId"), '') IS NULL
+           OR "userId" <> btrim("userId")
+           OR NULLIF(btrim(action), '') IS NULL
+           OR action <> btrim(action)
+           OR (("targetType" IS NULL) <> ("targetId" IS NULL))
+           OR ("targetType" IS NOT NULL AND NULLIF(btrim("targetType"), '') IS NULL)
+           OR ("targetId" IS NOT NULL AND NULLIF(btrim("targetId"), '') IS NULL)
+           OR ("changes" IS NOT NULL AND jsonb_typeof("changes") <> 'object')
+           OR ("metadata" IS NOT NULL AND jsonb_typeof("metadata") <> 'object')
+      ) AS activity_log_quality_risk
+  `)
+  return result.rows[0]
+}
+
+async function getMasterDataQualityDecisionSummary(client) {
+  if (!await relationExists(client, '"MasterDataQualityDecision"')) {
+    return {
+      tableExists: false,
+      openApprovedIncomplete: 0,
+      resolved: 0,
+      blankReasonRisk: 0,
+      placeholderReasonRisk: 0,
+      placeholderDecidedByRisk: 0,
+      placeholderResolvedByRisk: 0,
+      duplicateOpenTargetRisk: 0,
+    }
+  }
+
+  const result = await client.query(`
+    WITH placeholder_tokens AS (
+      SELECT unnest(ARRAY[
+        'unknown', 'unk', 'n/a', 'na', 'null', 'none', 'todo', 'tbd',
+        'default', 'test', '测试', '待补', '待补齐', '待确认', '未知',
+        '默认', '默认值', '暂无'
+      ]) AS token
+    )
+    SELECT
+      COUNT(*) FILTER (WHERE "status" = 'APPROVED_INCOMPLETE')::integer AS open_approved_incomplete,
+      COUNT(*) FILTER (WHERE "status" = 'RESOLVED')::integer AS resolved,
+      COUNT(*) FILTER (
+        WHERE NULLIF(btrim(COALESCE("reason", '')), '') IS NULL
+           OR NULLIF(btrim(COALESCE("decidedBy", '')), '') IS NULL
+      )::integer AS blank_reason_risk,
+      COUNT(*) FILTER (
+        WHERE NULLIF(btrim(COALESCE("reason", '')), '') IS NOT NULL
+          AND (
+            lower(regexp_replace(btrim("reason"), '\\s+', '', 'g')) IN (
+              SELECT token FROM placeholder_tokens
+            )
+            OR regexp_replace(btrim("reason"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+          )
+      )::integer AS placeholder_reason_risk,
+      COUNT(*) FILTER (
+        WHERE NULLIF(btrim(COALESCE("decidedBy", '')), '') IS NOT NULL
+          AND (
+            lower(regexp_replace(btrim("decidedBy"), '\\s+', '', 'g')) IN (
+              SELECT token FROM placeholder_tokens
+            )
+            OR regexp_replace(btrim("decidedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+          )
+      )::integer AS placeholder_decided_by_risk,
+      COUNT(*) FILTER (
+        WHERE NULLIF(btrim(COALESCE("resolvedBy", '')), '') IS NOT NULL
+          AND (
+            lower(regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g')) IN (
+              SELECT token FROM placeholder_tokens
+            )
+            OR regexp_replace(btrim("resolvedBy"), '\\s+', '', 'g') ~ '(待补|待确认|默认值)'
+          )
+      )::integer AS placeholder_resolved_by_risk,
+      (
+        SELECT COUNT(*)::integer
+        FROM (
+          SELECT "targetType", "targetId"
+          FROM "MasterDataQualityDecision"
+          WHERE "status" = 'APPROVED_INCOMPLETE'
+          GROUP BY "targetType", "targetId"
+          HAVING COUNT(*) > 1
+        ) duplicate_open_targets
+      ) AS duplicate_open_target_risk
+    FROM "MasterDataQualityDecision"
+  `)
+  const row = result.rows[0]
+  return {
+    tableExists: true,
+    openApprovedIncomplete: row.open_approved_incomplete,
+    resolved: row.resolved,
+    blankReasonRisk: row.blank_reason_risk,
+    placeholderReasonRisk: row.placeholder_reason_risk,
+    placeholderDecidedByRisk: row.placeholder_decided_by_risk,
+    placeholderResolvedByRisk: row.placeholder_resolved_by_risk,
+    duplicateOpenTargetRisk: row.duplicate_open_target_risk,
+  }
+}
+
+async function buildReport(client, mode, appliedMigrations, migrationReplay = classifyAppliedMigrationPaths(appliedMigrations)) {
+  const report = {
+    mode,
+    appliedMigrations,
+    migrationReplay,
+    migrationApplicationStatus: getMigrationApplicationStatus(appliedMigrations, migrationReplay),
+    databaseGuards: await getDatabaseGuardSummary(client),
+    assetCenterSourceData: await getAssetCenterSourceDataSummary(client),
+    assetVariantDuplicateBarcodeGroups: await getAssetVariantDuplicateBarcodeGroupCount(client),
+    structuredSkuItems: await getStructuredSkuSummary(client),
+    incompleteSkuItemSamples: await getIncompleteSkuItemSamples(client),
+    duplicateSkuCodeGroups: await getDuplicateGroupCount(client, 'skuCode'),
+    duplicateBarcodeGroups: await getDuplicateGroupCount(client, 'barcode'),
+    payloadSyncDiffCount: await getPayloadSyncDiffCount(client),
+    productSkuAssetProfiles: await getProductSkuAssetProfileSummary(client),
+    productSkuMissingNameCount: await getProductSkuMissingNameCount(client),
+    productSkuPriceCostStockRiskCount: await getProductSkuPriceCostStockRiskCount(client),
+    productSkuFormalTruthAttributeRiskCount: await getProductSkuFormalTruthAttributeRiskCount(client),
+    productSkuWithoutAssetProfileCount: await getProductSkuWithoutAssetProfileCount(client),
+    productSkuProfileSnapshotDiffCount: await getProductSkuProfileSnapshotDiffCount(client),
+    productSkuProfileDuplicateBarcodeGroups: await getProductSkuProfileDuplicateBarcodeGroupCount(client),
+    productSkuProfileDeletedAtMismatchCount: await getProductSkuProfileDeletedAtMismatchCount(client),
+    productSkuSoftDeleteTombstoneRiskCount: await getProductSkuSoftDeleteTombstoneRiskCount(client),
+    preSkuMissingBasicInfoCount: await getPreSkuMissingBasicInfoCount(client),
+    preSkuBasicInfoSnapshotDiffCount: await getPreSkuBasicInfoSnapshotDiffCount(client),
+    preSkuDuplicateFormalSkuCodeGroups: await getPreSkuBasicInfoDuplicateGroupCount(client, 'formalSkuCode'),
+    preSkuDuplicateBarcodeGroups: await getPreSkuBasicInfoDuplicateGroupCount(client, 'barcode'),
+    draftGroupInvalidProcessShapeCount: await getDraftGroupInvalidProcessShapeCount(client),
+    preSkuInvalidProcessShapeCount: await getPreSkuInvalidProcessShapeCount(client),
+    preSkuFormalizationLifecycleMismatchCount: await getPreSkuFormalizationLifecycleMismatchCount(client),
+    preSkuFormalizationLifecycleMismatchSamples: await getPreSkuFormalizationLifecycleMismatchSamples(client),
+    nonIntegratedProductProfiles: await getNonIntegratedProductProfileSummary(client),
+    nonIntegratedProductProfileQualitySamples: await getNonIntegratedProductProfileQualitySamples(client),
+    nonIntegratedProductMissingProfileCount: await getNonIntegratedProductMissingProfileCount(client),
+    nonIntegratedProductProfilePayloadDiffCount: await getNonIntegratedProductProfilePayloadDiffCount(client),
+    nonIntegratedProductStockSourcePayloadDiffCount: await getNonIntegratedProductStockSourcePayloadDiffCount(client),
+    productPatentRecords: await getProductPatentRecordSummary(client),
+    intakeReferenceLibraryItems: await getIntakeReferenceLibrarySummary(client),
+    spuNumberCounters: await getSpuNumberCounterSummary(client),
+    externalIntakeSkuItemsView: await getExternalViewSummary(client),
+    externalIntakeReadyViews: await getExternalReadyViewSummary(client),
+    externalReadonlyContract: await getExternalReadonlyContractSummary(client),
+    externalStableKeyQuality: await getExternalStableKeyQualitySummary(client),
+    externalProductSkusView: await getExternalProductSkusSummary(client),
+    externalProductDetailViews: await getExternalProductDetailViewsSummary(client),
+    externalViewJsonSourceDependencyRisks: await getExternalViewJsonSourceDependencyRisks(client),
+    externalViewIdFallbackRisks: await getExternalViewIdFallbackRisks(client),
+    externalIntakeProductPeopleSourceRisks: await getExternalIntakeProductPeopleSourceRisks(client),
+    legacyCadStructure: await getLegacyCadStructureSummary(client),
+    referenceOptionAndMapping: await getReferenceOptionAndMappingSummary(client),
+    configAuditPermission: await getConfigAuditPermissionSummary(client),
+    masterDataQualityDecisions: await getMasterDataQualityDecisionSummary(client),
+  }
+  return {
+    ...report,
+    foundationHardReadyGate: buildFoundationHardReadyGate(report),
+  }
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2))
+  validateRequiredMigrationCatalog()
+  const databaseUrl = loadDatabaseUrl()
+  if (!databaseUrl) {
+    throw new Error('DATABASE_URL 未配置，无法验证数据库主数据地基。')
+  }
+
+  const pool = new Pool({ connectionString: databaseUrl, connectionTimeoutMillis: 5000 })
+  const client = await pool.connect()
+  let transactionStarted = false
+
+  try {
+    if (args.readOnlyMigrationStatus) {
+      const migrationReadiness = await getRequiredMigrationReadiness(client)
+      writeJsonReport(args.outputFile, migrationReadiness)
+      console.log(JSON.stringify(migrationReadiness, null, 2))
+      if (!migrationReadiness.fullyReady) {
+        throw new Error(
+          `数据库治理迁移尚未全部真实落库：${[
+            ...migrationReadiness.pendingStructureMigrationPaths,
+            ...migrationReadiness.pendingIdempotentMigrationPaths,
+          ].join(', ')}`,
+        )
+      }
+      return
+    }
+
+    if (args.requireApplied) {
+      const migrationReadiness = await getRequiredMigrationReadiness(client)
+      if (!migrationReadiness.fullyReady) {
+        console.log(JSON.stringify(migrationReadiness, null, 2))
+        throw new Error(
+          `数据库治理迁移尚未全部真实落库，严格模式拒绝通过：${[
+            ...migrationReadiness.pendingStructureMigrationPaths,
+            ...migrationReadiness.pendingIdempotentMigrationPaths,
+          ].join(', ')}`,
+        )
+      }
+    }
+
+    await client.query('BEGIN')
+    transactionStarted = true
+    const migrationReadinessBeforeReplay = await getRequiredMigrationReadiness(client)
+    const appliedMigrations = shouldApplyMissingMigrationFiles(migrationReadinessBeforeReplay)
+      ? await applyMissingMigrationFiles(client)
+      : []
+    const migrationReplay = classifyAppliedMigrationPaths(appliedMigrations)
+    const mode = migrationReplay.structureMigrations.length > 0
+      ? 'migration-dry-run'
+      : migrationReplay.idempotentMigrations.length > 0
+        ? 'idempotent-migration-replay'
+        : 'current'
+    const migrationApplicationStatus = getMigrationApplicationStatus(
+      appliedMigrations,
+      migrationReplay,
+    )
+    if (args.requireApplied && !migrationApplicationStatus.strictReady) {
+      const blockedReport = {
+        mode,
+        appliedMigrations,
+        migrationReplay,
+        migrationApplicationStatus,
+        rolledBack: true,
+      }
+      await client.query('ROLLBACK')
+      writeFoundationHardReadyOutputs(args, blockedReport)
+      printFoundationHardReadyReport(args, blockedReport)
+      assertNoPendingMigrationDryRun(appliedMigrations, args)
+    }
+    assertNoPendingMigrationDryRun(appliedMigrations, args)
+
+    const report = await buildReport(client, mode, appliedMigrations, migrationReplay)
+    await client.query('ROLLBACK')
+    const reportWithRollback = { ...report, rolledBack: true }
+    writeFoundationHardReadyOutputs(args, reportWithRollback)
+    printFoundationHardReadyReport(args, reportWithRollback)
+    if (report.databaseGuards.missingOrInvalid.length > 0) {
+      throw new Error('数据库主数据物理护栏缺失或失效，详见 databaseGuards.missingOrInvalid。')
+    }
+    if (
+      !report.externalIntakeSkuItemsView.exists ||
+      !report.externalIntakeReadyViews.exists ||
+      report.externalReadonlyContract.missingViews.length > 0 ||
+      !report.externalProductSkusView.exists ||
+      !report.externalProductDetailViews.exists
+    ) {
+      throw new Error('外部只读核心视图缺失，详见 externalIntakeSkuItemsView / externalIntakeReadyViews / externalReadonlyContract / externalProductSkusView / externalProductDetailViews。')
+    }
+    if (report.externalReadonlyContract.missingColumns.length > 0) {
+      throw new Error('外部只读视图缺少字段字典承诺列，详见 externalReadonlyContract.missingColumns。')
+    }
+    if (report.externalReadonlyContract.extraColumns.length > 0) {
+      throw new Error('外部只读视图暴露了字段字典未登记列，详见 externalReadonlyContract.extraColumns。')
+    }
+    if (
+      report.externalStableKeyQuality.missingRequired.length > 0 ||
+      report.externalStableKeyQuality.duplicateGroups.length > 0
+    ) {
+      throw new Error('外部只读视图稳定业务键缺失或重复，详见 externalStableKeyQuality。')
+    }
+    if (report.externalViewJsonSourceDependencyRisks.length > 0) {
+      throw new Error('外部只读视图仍依赖内部 JSON 源，详见 externalViewJsonSourceDependencyRisks。')
+    }
+    if (report.externalViewIdFallbackRisks.length > 0) {
+      throw new Error('外部只读视图业务编码字段仍使用内部 id 兜底，详见 externalViewIdFallbackRisks。')
+    }
+    if (
+      report.externalProductSkusView.missing_product_business_key > 0 ||
+      report.externalProductSkusView.missing_sku_business_key > 0
+    ) {
+      throw new Error('外部正式 SKU 视图缺少稳定业务键，详见 externalProductSkusView。')
+    }
+    if (report.externalProductSkusView.duplicate_sku_business_key_groups > 0) {
+      throw new Error('外部正式 SKU 视图存在重复稳定业务键，详见 externalProductSkusView。')
+    }
+    if (
+      report.externalProductDetailViews.product_assets_missing_product_business_key > 0 ||
+      report.externalProductDetailViews.product_assets_missing_sku_business_key > 0 ||
+      report.externalProductDetailViews.product_bom_missing_product_business_key > 0 ||
+      report.externalProductDetailViews.product_bom_missing_sku_business_key_with_sku_id > 0
+    ) {
+      throw new Error('外部正式产品素材/BOM 明细视图缺少稳定业务键，详见 externalProductDetailViews。')
+    }
+    if (report.externalIntakeProductPeopleSourceRisks.length > 0) {
+      throw new Error(
+        '外部非集成产品负责人字段没有优先读取结构化 profile，详见 externalIntakeProductPeopleSourceRisks。',
+      )
+    }
+    if (report.externalIntakeReadyViews.ready_sku_quality_violations > 0) {
+      throw new Error('外部 ready SKU 视图混入非 READY 明细，详见 externalIntakeReadyViews.ready_sku_quality_violations。')
+    }
+    if (
+      report.externalIntakeReadyViews.ready_product_business_key_missing > 0 ||
+      report.externalIntakeReadyViews.ready_sku_business_key_missing > 0
+    ) {
+      throw new Error('外部 ready 视图缺少稳定业务键，详见 externalIntakeReadyViews。')
+    }
+    if (
+      report.externalIntakeReadyViews.ready_product_business_key_duplicate_groups > 0 ||
+      report.externalIntakeReadyViews.ready_sku_business_key_duplicate_groups > 0
+    ) {
+      throw new Error('外部 ready 视图存在重复稳定业务键，详见 externalIntakeReadyViews。')
+    }
+    if (report.productPatentRecords.temporary_id_count > 0) {
+      throw new Error('专利台账仍存在草稿态临时随机 id，详见 productPatentRecords.temporary_id_count。')
+    }
+    assertNoMasterDataTruthDrift(report)
+    assertFoundationHardReadyGate(report)
+  } catch (error) {
+    if (transactionStarted) {
+      await client.query('ROLLBACK').catch(() => undefined)
+    }
+    throw error
+  } finally {
+    client.release()
+    await pool.end()
+  }
+}
+
+function formatError(error) {
+  if (!(error instanceof Error)) {
+    return String(error)
+  }
+
+  const details = [
+    error.message,
+    error.name ? `name=${error.name}` : '',
+    error.code ? `code=${error.code}` : '',
+    error.cause ? `cause=${error.cause}` : '',
+  ].filter(Boolean)
+
+  return details.length > 0 ? details.join('\n') : error.stack || String(error)
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(formatError(error))
+    process.exit(1)
+  })
+}
+
+module.exports = {
+  REQUIRED_MIGRATIONS,
+  REQUIRED_DATABASE_GUARDS,
+  parseArgs,
+  assertNoPendingMigrationDryRun,
+  getMigrationApplicationStatus,
+  shouldApplyMissingMigrationFiles,
+  getRequiredMigrationReadiness,
+  getExternalReadonlyContractSummary,
+  getExternalStableKeyQualitySummary,
+  getExternalViewIdFallbackRisks,
+  getPreSkuFormalizationLifecycleMismatchSamples,
+  assertNoMasterDataTruthDrift,
+  buildFoundationHardReadyGate,
+  buildFoundationHardReadySummary,
+  assertFoundationHardReadyGate,
+  printFoundationHardReadyReport,
+  getStructuredSkuSummary,
+  getDuplicateGroupCount,
+  buildReport,
+  getMigrationHistoryStatus,
+  getPendingStructureMigrationPaths,
+  validateRequiredMigrationCatalog,
+}
diff --git a/furniture-3d-system/scripts/verify-master-data-readiness.js b/furniture-3d-system/scripts/verify-master-data-readiness.js
new file mode 100644
index 00000000..28222d3b
--- /dev/null
+++ b/furniture-3d-system/scripts/verify-master-data-readiness.js
@@ -0,0 +1,898 @@
+const { spawnSync } = require('node:child_process')
+const fs = require('node:fs')
+const path = require('node:path')
+const { hasSqlDiff } = require('./diagnose-prisma-migration-baseline')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_CLI = path.join(ROOT_DIR, 'node_modules/prisma/build/index.js')
+
+const COMMANDS = [
+  {
+    id: 'prisma-validate',
+    label: 'Prisma schema 校验',
+    command: process.execPath,
+    args: [PRISMA_CLI, 'validate'],
+  },
+  {
+    id: 'prisma-migrate-status',
+    label: 'Prisma 官方迁移状态',
+    command: process.execPath,
+    args: [PRISMA_CLI, 'migrate', 'status'],
+  },
+  {
+    id: 'current-schema-diff',
+    label: '当前库到 Prisma schema 差异',
+    command: process.execPath,
+    args: [
+      PRISMA_CLI,
+      'migrate',
+      'diff',
+      '--from-config-datasource',
+      '--to-schema',
+      'prisma/schema.prisma',
+      '--script',
+      '--exit-code',
+    ],
+  },
+  {
+    id: 'truth-sources',
+    label: '真相源矩阵',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-truth-sources.js'],
+  },
+  {
+    id: 'code-boundaries',
+    label: '代码层主数据边界',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-code-boundaries.js'],
+  },
+  {
+    id: 'compatibility-snapshot-read',
+    label: '兼容快照读点专项',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-code-boundaries.js', '--mode', 'compatibility-snapshot-read'],
+  },
+  {
+    id: 'process-snapshot-read',
+    label: '过程快照读点专项',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-code-boundaries.js', '--mode', 'process-snapshot-read'],
+  },
+  {
+    id: 'product-sku-attributes-write',
+    label: '正式 SKU attributes 写入专项',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-code-boundaries.js', '--mode', 'product-sku-attributes-write'],
+  },
+  {
+    id: 'reference-estimator-cost-boundary',
+    label: '参考图预估成本边界专项',
+    command: process.execPath,
+    args: [
+      'scripts/verify-master-data-code-boundaries.js',
+      '--mode',
+      'reference-estimator-cost-boundary',
+    ],
+  },
+  {
+    id: 'filesystem-master-data-source',
+    label: '文件系统反向造数边界专项',
+    command: process.execPath,
+    args: [
+      'scripts/verify-master-data-code-boundaries.js',
+      '--mode',
+      'filesystem-master-data-source',
+    ],
+  },
+  {
+    id: 'migration-status',
+    label: '治理迁移真实落库状态',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-foundation.js', '--read-only-migration-status'],
+  },
+  {
+    id: 'foundation-dry-run',
+    label: '数据库地基 dry-run 巡检',
+    command: process.execPath,
+    args: ['scripts/verify-master-data-foundation.js'],
+  },
+]
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value) {
+        throw new Error('--output 需要提供输出文件路径。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('--output 需要提供输出文件路径。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function writeJsonReport(outputPath, data, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(data, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function extractJson(stdout) {
+  const text = String(stdout ?? '').trim()
+  if (!text) return null
+  const jsonStartLineIndex = text
+    .split(/\r?\n/)
+    .findIndex((line) => {
+      const trimmed = line.trim()
+      return trimmed.startsWith('{') || trimmed.startsWith('[')
+    })
+  if (jsonStartLineIndex === -1) return null
+
+  const jsonText = text.split(/\r?\n/).slice(jsonStartLineIndex).join('\n').trim()
+  if (jsonText.startsWith('[')) return JSON.parse(jsonText)
+
+  const firstBrace = jsonText.indexOf('{')
+  const lastBrace = jsonText.lastIndexOf('}')
+  if (firstBrace === -1 || lastBrace === -1 || lastBrace < firstBrace) {
+    return null
+  }
+
+  return JSON.parse(jsonText.slice(firstBrace, lastBrace + 1))
+}
+
+function runCommand(commandConfig) {
+  const result = spawnSync(commandConfig.command, commandConfig.args, {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+    windowsHide: true,
+  })
+
+  return evaluateCommandResult(commandConfig, result)
+}
+
+function evaluateCommandResult(commandConfig, result) {
+  let data = null
+  let jsonError = ''
+
+  try {
+    data = extractJson(result.stdout)
+  } catch (error) {
+    jsonError = error instanceof Error ? error.message : String(error)
+  }
+
+  return {
+    id: commandConfig.id,
+    label: commandConfig.label,
+    command: [commandConfig.command, ...commandConfig.args].join(' '),
+    ok: result.status === 0,
+    status: result.status,
+    data,
+    jsonError,
+    error: result.error ? String(result.error.message ?? result.error) : '',
+    stdout: String(result.stdout ?? '').trim(),
+    stderr: String(result.stderr ?? '').trim(),
+  }
+}
+
+function countPendingPrismaMigrations(stdout) {
+  return listPendingPrismaMigrations(stdout).length
+}
+
+function listPendingPrismaMigrations(stdout) {
+  const lines = String(stdout ?? '').split(/\r?\n/)
+  const startIndex = lines.findIndex((line) =>
+    line.includes('Following migrations have not yet been applied:'),
+  )
+  if (startIndex === -1) return []
+
+  const migrations = []
+  for (let index = startIndex + 1; index < lines.length; index += 1) {
+    const line = lines[index].trim()
+    if (!line) continue
+    if (line.startsWith('To apply migrations')) break
+    if (line.startsWith('Loaded Prisma config')) break
+    migrations.push(line)
+  }
+  return migrations
+}
+
+function addPositiveCounterBlocker(blockers, source, data, keyPath, message) {
+  const value = keyPath.reduce((current, key) => current?.[key], data)
+  if (typeof value === 'number' && value > 0) {
+    const blocker = {
+      source,
+      key: keyPath.join('.'),
+      value,
+      message,
+    }
+    blockers.push(blocker)
+    return blocker
+  }
+  return null
+}
+
+function addNonEmptyArrayBlocker(blockers, source, data, keyPath, message) {
+  const value = keyPath.reduce((current, key) => current?.[key], data)
+  if (Array.isArray(value) && value.length > 0) {
+    blockers.push({
+      source,
+      key: keyPath.join('.'),
+      value: value.length,
+      message,
+    })
+  }
+}
+
+function summarizeSamples(samples = [], limit = 5) {
+  if (!Array.isArray(samples)) return { sampleCount: 0, samples: [] }
+  return {
+    sampleCount: samples.length,
+    samples: samples.slice(0, limit),
+    truncated: samples.length > limit,
+  }
+}
+
+function summarizeSamplesByMissingField(samples = [], fieldName, limit = 5) {
+  if (!Array.isArray(samples)) return { sampleCount: 0, samples: [] }
+  const matchedSamples = samples.filter((sample) =>
+    Array.isArray(sample?.missingFields) && sample.missingFields.includes(fieldName),
+  )
+  return summarizeSamples(matchedSamples, limit)
+}
+
+function summarizePaths(paths = [], limit = 20) {
+  if (!Array.isArray(paths)) return { pathCount: 0, paths: [] }
+  return {
+    pathCount: paths.length,
+    paths: paths.slice(0, limit),
+    truncated: paths.length > limit,
+  }
+}
+
+function summarizeSqlDiff(stdout = '', limit = 5) {
+  const meaningfulLines = String(stdout ?? '')
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter((line) =>
+      line &&
+      !line.startsWith('--') &&
+      !line.startsWith('Loaded Prisma config') &&
+      !line.startsWith('Prisma schema loaded'),
+    )
+  const normalizedSql = meaningfulLines.join('\n')
+  const statements = normalizedSql.match(/\b(?:CREATE|ALTER|DROP)\b[\s\S]*?;/gi) ?? []
+  const previews = statements.map((statement) => statement.replace(/\s+/g, ' ').trim())
+
+  if (previews.length > 0) {
+    return {
+      sqlStatementCount: previews.length,
+      statements: previews.slice(0, limit),
+      truncated: previews.length > limit,
+    }
+  }
+
+  return {
+    sqlStatementCount: 0,
+    statements: meaningfulLines.slice(0, limit),
+    truncated: meaningfulLines.length > limit,
+  }
+}
+
+function buildMissingMigrationHistoryEvidence(data = {}) {
+  return {
+    migrationHistory: {
+      tableExists: false,
+      totalMigrationRows: Number(data.migrationHistory?.totalMigrationRows ?? 0),
+      unfinishedMigrationRows: Number(data.migrationHistory?.unfinishedMigrationRows ?? 0),
+      rolledBackMigrationRows: Number(data.migrationHistory?.rolledBackMigrationRows ?? 0),
+    },
+    requiredSequence: [
+      '重新生成可校验数据库备份。',
+      '重新运行数据库地基 preflight，确认目标库身份和结构 diff。',
+      '结构 diff 未归零前，先走授权结构修复演练和 apply-structure。',
+      '当前库到 schema、migrations 到当前库的 diff 都归零后，再按演练清单逐项 baseline resolve。',
+      'baseline resolve 完成后，再应用治理护栏迁移并重跑 readiness。',
+    ],
+    forbiddenShortcut: '禁止在结构 diff 未归零或没有演练证据时直接整批 migrate resolve / migrate deploy。',
+  }
+}
+
+function collectCommandFailureBlockers(results) {
+  return results
+    .filter((result) => !result.ok)
+    .map((result) => ({
+      source: result.id,
+      key: 'command',
+      value: result.status,
+      message: `${result.label} 未通过。`,
+    }))
+}
+
+function collectMigrationBlockers(migrationStatus) {
+  if (!migrationStatus?.data) {
+    return [{
+      source: 'migration-status',
+      key: 'data',
+      value: null,
+      message: '没有拿到治理迁移只读状态 JSON，不能判断真实落库状态。',
+    }]
+  }
+
+  const data = migrationStatus.data
+  const blockers = []
+  if (!data.migrationHistory?.tableExists) {
+    blockers.push({
+      source: 'migration-status',
+      key: 'migrationHistory.tableExists',
+      value: false,
+      message: '数据库缺少 Prisma _prisma_migrations 历史，不能把现有结构视为可审计迁移结果。',
+      evidence: buildMissingMigrationHistoryEvidence(data),
+    })
+  }
+  addPositiveCounterBlocker(
+    blockers,
+    'migration-status',
+    data,
+    ['migrationHistory', 'unfinishedMigrationRows'],
+    '存在未完成的 Prisma migration。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'migration-status',
+    data,
+    ['migrationHistory', 'rolledBackMigrationRows'],
+    '存在已回滚的 Prisma migration。',
+  )
+  const pendingStructureBlocker = addPositiveCounterBlocker(
+    blockers,
+    'migration-status',
+    data,
+    ['pendingStructureMigrationCount'],
+    '仍有结构治理迁移没有真实落库。',
+  )
+  if (pendingStructureBlocker) {
+    pendingStructureBlocker.evidence = summarizePaths(data.pendingStructureMigrationPaths)
+  }
+  const pendingIdempotentBlocker = addPositiveCounterBlocker(
+    blockers,
+    'migration-status',
+    data,
+    ['pendingIdempotentMigrationCount'],
+    '仍有幂等视图或护栏迁移没有真实存在，strict 前不能进入历史清洗。',
+  )
+  if (pendingIdempotentBlocker) {
+    pendingIdempotentBlocker.evidence = summarizePaths(data.pendingIdempotentMigrationPaths)
+  }
+  if (data.fullyReady !== true) {
+    blockers.push({
+      source: 'migration-status',
+      key: 'fullyReady',
+      value: data.fullyReady,
+      message: '治理迁移只读状态未达到 fullyReady。',
+    })
+  }
+  return blockers
+}
+
+function collectPrismaMigrateStatusBlockers(prismaMigrateStatus) {
+  if (!prismaMigrateStatus) return []
+
+  const pendingMigrations = listPendingPrismaMigrations(prismaMigrateStatus.stdout)
+  const pendingCount = pendingMigrations.length
+  if (pendingCount <= 0) return []
+
+  return [{
+    source: 'prisma-migrate-status',
+    key: 'pendingMigrations',
+    value: pendingCount,
+    message: 'Prisma 官方迁移状态仍显示未应用 migration，数据库历史不能视为稳固。',
+    evidence: {
+      migrationCount: pendingCount,
+      migrations: pendingMigrations.slice(0, 20),
+      truncated: pendingCount > 20,
+    },
+  }]
+}
+
+function collectCurrentSchemaDiffBlockers(currentSchemaDiff) {
+  if (!currentSchemaDiff) return []
+
+  if (hasSqlDiff(currentSchemaDiff.stdout)) {
+    return [{
+      source: 'current-schema-diff',
+      key: 'hasSqlDiff',
+      value: true,
+      message: '当前数据库结构和 schema.prisma 不一致，底层结构未补齐。',
+      evidence: summarizeSqlDiff(currentSchemaDiff.stdout),
+    }]
+  }
+
+  if (!currentSchemaDiff.ok) {
+    return [{
+      source: 'current-schema-diff',
+      key: 'command',
+      value: currentSchemaDiff.status,
+      message: '当前库到 schema.prisma 的 diff 执行失败，不能证明结构一致。',
+    }]
+  }
+
+  return []
+}
+
+function collectDryRunQualityBlockers(dryRun) {
+  if (!dryRun?.data) {
+    return [{
+      source: 'foundation-dry-run',
+      key: 'data',
+      value: null,
+      message: '没有拿到数据库地基 dry-run JSON，不能判断历史质量阻断项。',
+    }]
+  }
+
+  const blockers = []
+  const data = dryRun.data
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['assetCenterSourceData', 'active_asset_families_without_series'],
+    '仍有活动资产族缺少系列归属，资产中心源数据不能视为十分稳固。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['assetCenterSourceData', 'active_asset_variants_without_model_url'],
+    '仍有活动规格款缺少模型文件，资产中心源数据不能视为十分稳固。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['assetCenterSourceData', 'active_asset_variants_without_thumbnail_url'],
+    '仍有活动规格款缺少预览图，资产中心源数据不能视为十分稳固。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['assetVariantDuplicateBarcodeGroups'],
+    '资产中心规格款存在重复条码组，源头条码池不能视为十分稳固。',
+  )
+  const incompleteSkuBlocker = addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['structuredSkuItems', 'incomplete'],
+    '仍有非集成 SKU 明细是 INCOMPLETE，不能视为十分稳固。',
+  )
+  if (incompleteSkuBlocker) {
+    incompleteSkuBlocker.evidence = summarizeSamples(data.incompleteSkuItemSamples)
+  }
+  const missingProductCategoryBlocker = addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['nonIntegratedProductProfiles', 'missing_product_category'],
+    '仍有非集成产品头缺品类。',
+  )
+  if (missingProductCategoryBlocker) {
+    missingProductCategoryBlocker.evidence = summarizeSamplesByMissingField(
+      data.nonIntegratedProductProfileQualitySamples,
+      'productCategory',
+    )
+  }
+  const missingDevelopmentKindBlocker = addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['nonIntegratedProductProfiles', 'missing_development_kind'],
+    '仍有非集成产品头缺开发类型。',
+  )
+  if (missingDevelopmentKindBlocker) {
+    missingDevelopmentKindBlocker.evidence = summarizeSamplesByMissingField(
+      data.nonIntegratedProductProfileQualitySamples,
+      'productDevelopmentKind',
+    )
+  }
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['nonIntegratedProductMissingProfileCount'],
+    '仍有非集成产品缺少结构化产品头 profile，不能只依赖 payload 快照。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['duplicateSkuCodeGroups'],
+    '非集成 SKU 明细存在重复 skuCode 组。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['duplicateBarcodeGroups'],
+    '非集成 SKU 明细存在重复 barcode 组。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['payloadSyncDiffCount'],
+    '非集成 SKU 结构化表与 payload.skuItems 快照不一致，单一真相源尚未收口。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['nonIntegratedProductProfilePayloadDiffCount'],
+    '非集成产品 profile 与 payload 产品头快照不一致，单一真相源尚未收口。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['nonIntegratedProductStockSourcePayloadDiffCount'],
+    '非集成存量来源字段 profile 与 payload.metadata 快照不一致。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuMissingNameCount'],
+    '仍有活动正式 SKU 缺少名称，正式商品资料不能视为十分稳固。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuPriceCostStockRiskCount'],
+    '仍有正式 SKU 售价、成本价或库存为负，正式成本地基不能视为十分稳固。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuFormalTruthAttributeRiskCount'],
+    '正式 SKU attributes 仍保存正式资料字段，JSON 兼容袋尚未退出主数据真相。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuWithoutAssetProfileCount'],
+    '仍有正式 SKU 缺少资产资料结构化同步副本。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuMissingBasicInfoCount'],
+    '仍有准 SKU 缺少基础资料结构化记录。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuProfileSnapshotDiffCount'],
+    '正式 SKU 资产 profile 与 attributes.assetSkuSnapshot 兼容快照不一致。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuProfileDuplicateBarcodeGroups'],
+    '正式 SKU 资产资料同步副本存在重复活动条码组。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuProfileDeletedAtMismatchCount'],
+    '正式 SKU 资产 profile 的 skuDeletedAt 与 ProductSKU.deletedAt 不一致，软删除生命周期副本尚未收口。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['productSkuSoftDeleteTombstoneRiskCount'],
+    '正式 SKU 软删除墓碑资料不完整，条码释放、恢复冲突检查和级联恢复不能视为可审计。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuBasicInfoSnapshotDiffCount'],
+    '准 SKU 基础资料结构化表与旧快照不一致。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuDuplicateFormalSkuCodeGroups'],
+    '准 SKU 基础资料存在重复规格款编码组。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuDuplicateBarcodeGroups'],
+    '准 SKU 基础资料存在重复条码组。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['draftGroupInvalidProcessShapeCount'],
+    '草稿组本体存在身份、可选文本或 summary JSON 形态问题。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuInvalidProcessShapeCount'],
+    '准 SKU 本体存在身份、过程快照、组件编码或重量形态问题。',
+  )
+  const preSkuFormalizationBlocker = addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['preSkuFormalizationLifecycleMismatchCount'],
+    '准 SKU 正式化状态与正式 SKU 来源关系不一致。',
+  )
+  if (preSkuFormalizationBlocker) {
+    preSkuFormalizationBlocker.evidence = summarizeSamples(
+      data.preSkuFormalizationLifecycleMismatchSamples,
+    )
+  }
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'openApprovedIncomplete'],
+    '仍有开放的主数据不完整批准记录；hard-ready 前必须补齐真实主数据或关闭决策。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'blankReasonRisk'],
+    '主数据质量决策存在空原因或空确认人，审计证据不完整。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'placeholderReasonRisk'],
+    '主数据质量决策原因存在 UNKNOWN/待补齐/默认值等占位文本，不能作为真实业务确认依据。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'placeholderDecidedByRisk'],
+    '主数据质量决策确认人存在 UNKNOWN/待补齐/默认值等占位文本，审计责任链不可信。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'placeholderResolvedByRisk'],
+    '主数据质量决策解决人存在 UNKNOWN/待补齐/默认值等占位文本，关闭记录不可追溯。',
+  )
+  addPositiveCounterBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['masterDataQualityDecisions', 'duplicateOpenTargetRisk'],
+    '主数据质量决策存在同一目标多条开放记录，清洗审计链不唯一。',
+  )
+  addNonEmptyArrayBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['externalViewJsonSourceDependencyRisks'],
+    '外部只读视图仍依赖内部 JSON 源。',
+  )
+  addNonEmptyArrayBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['externalViewIdFallbackRisks'],
+    '外部只读视图业务编码字段仍使用内部 id 兜底。',
+  )
+  addNonEmptyArrayBlocker(
+    blockers,
+    'foundation-dry-run',
+    data,
+    ['externalIntakeProductPeopleSourceRisks'],
+    '外部非集成产品负责人字段没有优先读取结构化 profile。',
+  )
+  return blockers
+}
+
+function buildReadinessNextActionPlan(blockers = []) {
+  const keySet = new Set(blockers.map((blocker) => blocker.key))
+  const sourceKeySet = new Set(blockers.map((blocker) => `${blocker.source}:${blocker.key}`))
+  const stages = []
+
+  if (
+    sourceKeySet.has('current-schema-diff:hasSqlDiff') ||
+    sourceKeySet.has('migration-status:migrationHistory.tableExists') ||
+    sourceKeySet.has('prisma-migrate-status:pendingMigrations')
+  ) {
+    stages.push({
+      id: 'repair-prisma-structure-and-history',
+      status: 'required-before-any-cleanup',
+      reason: '当前库结构、Prisma 迁移历史或官方 pending migration 未对齐。',
+      commands: [
+        'npm run db:backup:postgres',
+        'npm run db:preflight-database-foundation-change:audit',
+        'npm run db:foundation:rehearse-structure-repair',
+        'npm run db:foundation:apply-structure-repair:audit',
+        'npm run db:foundation:apply-structure-repair -- --phase=apply-structure --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        'npm run db:preflight-database-foundation-change:audit',
+        'npm run db:foundation:apply-structure-repair -- --phase=resolve-baseline --apply --confirm=apply-prisma-structure-repair --expected-sha256 <repair-sql-sha256> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      guard: '没有新鲜备份、preflight、结构修复演练和用户明确授权前，不能真实写库。',
+    })
+  }
+
+  if (
+    keySet.has('pendingStructureMigrationCount') ||
+    keySet.has('pendingIdempotentMigrationCount') ||
+    keySet.has('fullyReady')
+  ) {
+    stages.push({
+      id: 'apply-governance-migrations',
+      status: 'after-prisma-history-ready',
+      reason: '治理结构、外部只读视图、约束或触发器尚未真实落库。',
+      commands: [
+        'npm run db:foundation:apply-required:audit',
+        'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      guard: '必须在结构修复和 baseline resolve 完成后执行；不能代替 Prisma 结构修复。',
+    })
+  }
+
+  if (
+    keySet.has('structuredSkuItems.incomplete') ||
+    keySet.has('nonIntegratedProductProfiles.missing_product_category') ||
+    keySet.has('nonIntegratedProductProfiles.missing_development_kind') ||
+    keySet.has('masterDataQualityDecisions.openApprovedIncomplete') ||
+    keySet.has('masterDataQualityDecisions.blankReasonRisk') ||
+    keySet.has('masterDataQualityDecisions.placeholderReasonRisk') ||
+    keySet.has('masterDataQualityDecisions.placeholderDecidedByRisk') ||
+    keySet.has('masterDataQualityDecisions.placeholderResolvedByRisk') ||
+    keySet.has('masterDataQualityDecisions.duplicateOpenTargetRisk')
+  ) {
+    stages.push({
+      id: 'clean-historical-master-data-fields',
+      status: 'after-governance-migrations-ready',
+      reason: '历史 SKU 明细或产品头缺少业务确认后的结构化主数据。',
+      commands: [
+        'npm run db:foundation:audit:cleanup-template',
+        'npm run db:cleanup-master-data:validate -- --plan <confirmed-cleanup-plan.json> --output .master-data-audits/cleanup-plan-validation-current.json',
+        'npm run db:cleanup-master-data -- --plan <confirmed-cleanup-plan.json>',
+        'npm run db:cleanup-master-data -- --apply --plan <confirmed-cleanup-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      guard:
+        '计划只能填写业务确认后的真实值；validate-plan/resultSummary 中 approvedIncompleteRows 必须为 0，remainingMissingFieldCounts 必须为空，UNKNOWN/待补齐/默认值不能让 readiness 变绿。',
+    })
+  }
+
+  if (keySet.has('preSkuFormalizationLifecycleMismatchCount')) {
+    stages.push({
+      id: 'resolve-pre-sku-formalization-lifecycle',
+      status: 'dedicated-plan-required',
+      reason: '准 SKU FORMALIZED 状态和正式 SKU 来源关系不一致。',
+      commands: [
+        'npm run db:foundation:plan-pre-sku-formalization-repair -- --output .master-data-audits/pre-sku-formalization-repair-plan-current.json',
+        'npm run db:foundation:validate-pre-sku-formalization-repair -- --plan .master-data-audits/pre-sku-formalization-repair-plan-current.json --output .master-data-audits/pre-sku-formalization-repair-plan-validation-current.json',
+        'npm run db:foundation:apply-pre-sku-formalization-repair -- --template --output .master-data-audits/pre-sku-formalization-repair-execution-template-current.json',
+        'npm run db:foundation:apply-pre-sku-formalization-repair -- --plan <confirmed-pre-sku-lifecycle-plan.json> --output .master-data-audits/pre-sku-formalization-repair-execution-dry-run-current.json',
+        'npm run db:foundation:apply-pre-sku-formalization-repair -- --apply --confirm=I_UNDERSTAND_THIS_UPDATES_PRE_SKU_LIFECYCLE --plan <confirmed-pre-sku-lifecycle-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ],
+      guard: '不能由通用主数据清洗脚本处理；必须走专用执行计划，校验 currentEvidence/evidenceFingerprint、数据库身份、备份 SHA 和业务确认原因。',
+    })
+  }
+
+  return {
+    stageCount: stages.length,
+    stages,
+  }
+}
+
+function buildReadinessReport(results) {
+  const byId = new Map(results.map((result) => [result.id, result]))
+  const prismaMigrateStatus = byId.get('prisma-migrate-status')
+  const currentSchemaDiff = byId.get('current-schema-diff')
+  const migrationStatus = byId.get('migration-status')
+  const dryRun = byId.get('foundation-dry-run')
+  const blockers = [
+    ...collectCommandFailureBlockers(results),
+    ...collectPrismaMigrateStatusBlockers(prismaMigrateStatus),
+    ...collectCurrentSchemaDiffBlockers(currentSchemaDiff),
+    ...collectMigrationBlockers(migrationStatus),
+    ...collectDryRunQualityBlockers(dryRun),
+  ]
+
+  const uniqueBlockers = blockers.filter((blocker, index, list) => {
+    const key = `${blocker.source}:${blocker.key}:${blocker.message}`
+    return list.findIndex((item) => `${item.source}:${item.key}:${item.message}` === key) === index
+  })
+  const nextActionPlan = buildReadinessNextActionPlan(uniqueBlockers)
+
+  return {
+    status: uniqueBlockers.length === 0 ? 'hard-ready' : 'not-hard-ready',
+    hardReady: uniqueBlockers.length === 0,
+    checkedAt: new Date().toISOString(),
+    commandCount: results.length,
+    passedCommandCount: results.filter((result) => result.ok).length,
+    blockerCount: uniqueBlockers.length,
+    blockers: uniqueBlockers,
+    nextActionPlan,
+    commandSummaries: results.map((result) => ({
+      id: result.id,
+      label: result.label,
+      ok: result.ok,
+      status: result.status,
+      jsonParsed: Boolean(result.data),
+      jsonError: result.jsonError,
+      error: result.error,
+      stdoutPreview: result.stdout.slice(0, 240),
+    })),
+  }
+}
+
+function main() {
+  const options = parseArgs()
+  const results = COMMANDS.map(runCommand)
+  const report = buildReadinessReport(results)
+  writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.hardReady) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main()
+}
+
+module.exports = {
+  COMMANDS,
+  addPositiveCounterBlocker,
+  addNonEmptyArrayBlocker,
+  buildReadinessReport,
+  countPendingPrismaMigrations,
+  evaluateCommandResult,
+  extractJson,
+  listPendingPrismaMigrations,
+  parseArgs,
+  buildMissingMigrationHistoryEvidence,
+  summarizeSqlDiff,
+  buildReadinessNextActionPlan,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/scripts/verify-master-data-truth-sources.js b/furniture-3d-system/scripts/verify-master-data-truth-sources.js
new file mode 100644
index 00000000..5cf8fd15
--- /dev/null
+++ b/furniture-3d-system/scripts/verify-master-data-truth-sources.js
@@ -0,0 +1,510 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { CORE_MASTER_DATA_TRUTH_SOURCES } = require('./master-data-truth-sources')
+const { REQUIRED_DATABASE_GUARDS } = require('./verify-master-data-foundation')
+const {
+  approvedRawSqlMasterDataWritePaths,
+  approvedRawSqlMasterDataWriteTableScopes,
+  approvedServerMasterDataWriteModelScopes,
+  getSchemaJsonFieldInventory,
+  getApprovedMasterDataWriteBoundaryFiles,
+} = require('./verify-master-data-code-boundaries')
+
+const ROOT_DIR = path.resolve(__dirname, '..')
+const PRISMA_SCHEMA_PATH = path.join(ROOT_DIR, 'prisma/schema.prisma')
+
+function parseArgs(argv = process.argv.slice(2)) {
+  const options = {
+    outputPath: '',
+  }
+
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index]
+    if (arg === '--output') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      options.outputPath = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--output=')) {
+      options.outputPath = arg.slice('--output='.length)
+      if (!options.outputPath) {
+        throw new Error('缺少 --output <json-file>。')
+      }
+      continue
+    }
+    throw new Error(`未知参数：${arg}`)
+  }
+
+  return options
+}
+
+function writeJsonReport(outputPath, payload, rootDir = ROOT_DIR) {
+  if (!outputPath) return ''
+  const absolutePath = path.resolve(rootDir, outputPath)
+  fs.mkdirSync(path.dirname(absolutePath), { recursive: true })
+  fs.writeFileSync(absolutePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf8')
+  return absolutePath
+}
+
+function readPrismaModels(schemaPath = PRISMA_SCHEMA_PATH) {
+  return new Set(Object.keys(readPrismaModelFields(schemaPath)))
+}
+
+function readPrismaModelFields(schemaPath = PRISMA_SCHEMA_PATH) {
+  const content = fs.readFileSync(schemaPath, 'utf8')
+  const modelFields = {}
+  let currentModel = ''
+
+  for (const line of content.split(/\r?\n/)) {
+    const modelMatch = line.match(/^model\s+(\w+)\s*\{/)
+    if (modelMatch) {
+      currentModel = modelMatch[1]
+      modelFields[currentModel] = new Set()
+      continue
+    }
+    if (currentModel && /^}/.test(line)) {
+      currentModel = ''
+      continue
+    }
+    if (!currentModel) continue
+
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('//') || trimmed.startsWith('@@')) continue
+    const fieldName = trimmed.split(/\s+/)[0]
+    if (fieldName && !fieldName.startsWith('@')) {
+      modelFields[currentModel].add(fieldName)
+    }
+  }
+
+  return modelFields
+}
+
+function resolveSchemaFieldReference(value) {
+  if (typeof value !== 'string') return null
+  const match = value.match(/^([A-Z]\w*)\.(\w+)/)
+  if (!match) return null
+  return {
+    modelName: match[1],
+    fieldName: match[2],
+  }
+}
+
+function toPrismaDelegateName(modelName) {
+  if (typeof modelName !== 'string' || modelName.length === 0) return ''
+  return `${modelName[0].toLowerCase()}${modelName.slice(1)}`
+}
+
+function buildDelegateToModelNameMap(prismaModelFields) {
+  return new Map(
+    Object.keys(prismaModelFields).map((modelName) => [
+      toPrismaDelegateName(modelName),
+      modelName,
+    ]),
+  )
+}
+
+function approvedTableScopeIncludes(scope, relationName) {
+  if (scope === '*') return true
+  return Boolean(scope?.has?.(relationName))
+}
+
+function collectTruthSourceSchemaSnapshotFields(truthSources) {
+  const fields = new Set()
+
+  for (const entry of truthSources) {
+    for (const snapshot of entry.compatibilitySnapshots ?? []) {
+      const reference = resolveSchemaFieldReference(snapshot)
+      if (!reference) continue
+      fields.add(`${reference.modelName}.${reference.fieldName}`)
+    }
+  }
+
+  return fields
+}
+
+function collectTruthSourceWriteScopeCoverage(truthSources) {
+  const coverage = new Set()
+  for (const entry of truthSources) {
+    for (const filePath of entry.writeBoundary ?? []) {
+      for (const relationName of entry.primaryRelations ?? []) {
+        coverage.add(`${filePath}::${relationName}`)
+      }
+    }
+  }
+  return coverage
+}
+
+function collectUnmappedApprovedWriteScopes({
+  truthSources,
+  prismaModelFields,
+  approvedWriteBoundaryFileSet,
+  approvedWriteBoundaryModelScopes,
+  approvedRawSqlWriteBoundaryFiles,
+  approvedRawSqlWriteTableScopes,
+}) {
+  const coverage = collectTruthSourceWriteScopeCoverage(truthSources)
+  const delegateToModelName = buildDelegateToModelNameMap(prismaModelFields)
+  const issues = []
+  const approvedRawSqlWriteBoundaryFileSet = new Set(approvedRawSqlWriteBoundaryFiles ?? [])
+
+  for (const [filePath, scopes] of approvedWriteBoundaryModelScopes.entries()) {
+    if (!approvedWriteBoundaryFileSet.has(filePath)) continue
+    for (const scope of scopes) {
+      const relationName = delegateToModelName.get(scope)
+      if (!relationName || coverage.has(`${filePath}::${relationName}`)) continue
+      issues.push({
+        filePath,
+        relationName,
+        scope,
+        source: 'server-model-scope',
+        reason:
+          '代码层批准写入该主数据表，但真相源矩阵没有反向声明这个写入口，容易形成隐形第二入口。',
+      })
+    }
+  }
+
+  for (const [filePath, tableScopes] of approvedRawSqlWriteTableScopes.entries()) {
+    if (!approvedRawSqlWriteBoundaryFileSet.has(filePath) || tableScopes === '*') continue
+    for (const relationName of tableScopes) {
+      if (!Object.prototype.hasOwnProperty.call(prismaModelFields, relationName)) continue
+      if (coverage.has(`${filePath}::${relationName}`)) continue
+      issues.push({
+        filePath,
+        relationName,
+        scope: relationName,
+        source: 'raw-sql-table-scope',
+        reason:
+          'Raw SQL 白名单允许写入该主数据表，但真相源矩阵没有反向声明这个写入口。',
+      })
+    }
+  }
+
+  return issues.sort((left, right) =>
+    `${left.filePath}:${left.relationName}`.localeCompare(`${right.filePath}:${right.relationName}`),
+  )
+}
+
+function addEntryIssue(issuesById, id, type, detail) {
+  if (!id) return
+  if (!issuesById.has(id)) issuesById.set(id, [])
+  issuesById.get(id).push({ type, detail })
+}
+
+function buildTruthSourceEntryAudits(truthSources, issueReport) {
+  const issuesById = new Map()
+
+  for (const id of issueReport.duplicateIds ?? []) {
+    addEntryIssue(issuesById, id, 'duplicate-id', { id })
+  }
+  for (const issue of issueReport.missingPrimaryRelations ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-primary-relation', issue)
+  }
+  for (const issue of issueReport.missingRequiredGuards ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-required-guard', issue)
+  }
+  for (const issue of issueReport.misassignedRequiredGuards ?? []) {
+    addEntryIssue(issuesById, issue.id, 'misassigned-required-guard', issue)
+  }
+  for (const issue of issueReport.missingSnapshotFields ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-snapshot-field', issue)
+  }
+  for (const issue of issueReport.missingWriteBoundaryFiles ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-write-boundary-file', issue)
+  }
+  for (const issue of issueReport.missingWriteBoundaryClassifications ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-write-boundary-classification', issue)
+  }
+  for (const issue of issueReport.missingPrimaryRelationWriteScopes ?? []) {
+    addEntryIssue(issuesById, issue.id, 'missing-primary-relation-write-scope', issue)
+  }
+  for (const issue of issueReport.incompleteEntries ?? []) {
+    addEntryIssue(issuesById, issue.id, 'incomplete-entry', issue)
+  }
+
+  return truthSources.map((entry) => {
+    const issues = issuesById.get(entry.id) ?? []
+    return {
+      id: entry.id,
+      layer: entry.layer,
+      ok: issues.length === 0,
+      issueCount: issues.length,
+      issues,
+      primaryRelationCount: (entry.primaryRelations ?? []).length,
+      compatibilitySnapshotCount: (entry.compatibilitySnapshots ?? []).length,
+      writeBoundaryCount: (entry.writeBoundary ?? []).length,
+      requiredGuardCount: (entry.requiredGuardNames ?? []).length,
+    }
+  })
+}
+
+function validateTruthSourceManifest({
+  truthSources = CORE_MASTER_DATA_TRUTH_SOURCES,
+  prismaModelFields = readPrismaModelFields(),
+  schemaJsonFields = getSchemaJsonFieldInventory(),
+  databaseGuards = REQUIRED_DATABASE_GUARDS,
+  approvedWriteBoundaryFiles = getApprovedMasterDataWriteBoundaryFiles(),
+  approvedWriteBoundaryModelScopes = approvedServerMasterDataWriteModelScopes,
+  approvedRawSqlWriteBoundaryFiles = Array.from(approvedRawSqlMasterDataWritePaths.keys()),
+  approvedRawSqlWriteTableScopes = approvedRawSqlMasterDataWriteTableScopes,
+  rootDir = ROOT_DIR,
+  fileExists = (relativePath) => fs.existsSync(path.join(rootDir, relativePath)),
+} = {}) {
+  const prismaModels = new Set(Object.keys(prismaModelFields))
+  const guardNames = new Set(databaseGuards.map((guard) => guard.name))
+  const guardRelationByName = new Map(
+    databaseGuards.map((guard) => [guard.name, guard.relationName ?? '']),
+  )
+  const truthSourceSchemaSnapshotFields =
+    collectTruthSourceSchemaSnapshotFields(truthSources)
+  const compatibilitySnapshotSchemaFields = schemaJsonFields.filter(
+    (field) => field.category === 'compatibility-snapshot',
+  )
+  const unmappedCompatibilitySnapshotFields =
+    compatibilitySnapshotSchemaFields
+      .filter((field) => !truthSourceSchemaSnapshotFields.has(field.id))
+      .map((field) => ({
+        id: field.id,
+        model: field.model,
+        field: field.field,
+        category: field.category,
+        targetState: field.targetState,
+        reason:
+          '代码层 JSON 字段分类标为兼容快照，但真相源矩阵未声明该 Model.field，容易形成第二套快照台账。',
+      }))
+  const seenIds = new Set()
+  const duplicateIds = []
+  const missingPrimaryRelations = []
+  const missingRequiredGuards = []
+  const misassignedRequiredGuards = []
+  const missingSnapshotFields = []
+  const missingWriteBoundaryFiles = []
+  const missingWriteBoundaryClassifications = []
+  const missingPrimaryRelationWriteScopes = []
+  const incompleteEntries = []
+  const coveredPrimaryRelations = new Set()
+  const approvedWriteBoundaryFileSet = new Set([
+    ...(approvedWriteBoundaryFiles.server ?? []),
+    ...(approvedWriteBoundaryFiles.script ?? []),
+    ...(approvedRawSqlWriteBoundaryFiles ?? []),
+  ])
+  const unmappedApprovedWriteScopes = collectUnmappedApprovedWriteScopes({
+    truthSources,
+    prismaModelFields,
+    approvedWriteBoundaryFileSet,
+    approvedWriteBoundaryModelScopes,
+    approvedRawSqlWriteBoundaryFiles,
+    approvedRawSqlWriteTableScopes,
+  })
+
+  for (const entry of truthSources) {
+    if (seenIds.has(entry.id)) duplicateIds.push(entry.id)
+    seenIds.add(entry.id)
+
+    const requiredArrayFields = [
+      'primaryRelations',
+      'compatibilitySnapshots',
+      'notTruthSources',
+      'writeBoundary',
+      'requiredGuardNames',
+    ]
+    for (const field of requiredArrayFields) {
+      if (!Array.isArray(entry[field]) || entry[field].length === 0) {
+        incompleteEntries.push({ id: entry.id, field })
+      }
+    }
+    if (!entry.layer) {
+      incompleteEntries.push({ id: entry.id, field: 'layer' })
+    }
+
+    for (const relationName of entry.primaryRelations ?? []) {
+      coveredPrimaryRelations.add(relationName)
+      if (!prismaModels.has(relationName)) {
+        missingPrimaryRelations.push({ id: entry.id, relationName })
+      }
+    }
+
+    const entryPrimaryRelations = new Set(entry.primaryRelations ?? [])
+    for (const guardName of entry.requiredGuardNames ?? []) {
+      if (!guardNames.has(guardName)) {
+        missingRequiredGuards.push({ id: entry.id, guardName })
+        continue
+      }
+
+      const relationName = guardRelationByName.get(guardName)
+      if (relationName && !entryPrimaryRelations.has(relationName)) {
+        misassignedRequiredGuards.push({
+          id: entry.id,
+          guardName,
+          relationName,
+          primaryRelations: Array.from(entryPrimaryRelations),
+        })
+      }
+    }
+
+    for (const snapshot of entry.compatibilitySnapshots ?? []) {
+      const reference = resolveSchemaFieldReference(snapshot)
+      if (!reference) continue
+
+      const fields = prismaModelFields[reference.modelName]
+      if (!fields?.has(reference.fieldName)) {
+        missingSnapshotFields.push({
+          id: entry.id,
+          snapshot,
+          modelName: reference.modelName,
+          fieldName: reference.fieldName,
+        })
+      }
+    }
+
+    for (const filePath of entry.writeBoundary ?? []) {
+      if (!fileExists(filePath)) {
+        missingWriteBoundaryFiles.push({ id: entry.id, filePath })
+        continue
+      }
+      if (!approvedWriteBoundaryFileSet.has(filePath)) {
+        missingWriteBoundaryClassifications.push({
+          id: entry.id,
+          filePath,
+          reason:
+            '真相源矩阵声明的写入边界必须同时进入代码层主数据写入口批准表。',
+        })
+      }
+    }
+
+    const approvedModelsForEntry = new Set()
+    const approvedRawSqlTablesForEntry = new Set()
+    for (const filePath of entry.writeBoundary ?? []) {
+      const scopes = approvedWriteBoundaryModelScopes.get?.(filePath)
+      if (scopes) {
+        for (const model of scopes) {
+          approvedModelsForEntry.add(model)
+        }
+      }
+
+      const tableScopes = approvedRawSqlWriteTableScopes.get?.(filePath)
+      if (tableScopes === '*') {
+        approvedRawSqlTablesForEntry.add('*')
+        continue
+      }
+      if (tableScopes) {
+        for (const relationName of tableScopes) {
+          approvedRawSqlTablesForEntry.add(relationName)
+        }
+      }
+    }
+
+    for (const relationName of entry.primaryRelations ?? []) {
+      if (!prismaModels.has(relationName)) continue
+      const model = toPrismaDelegateName(relationName)
+      if (
+        !approvedModelsForEntry.has(model) &&
+        !approvedTableScopeIncludes(approvedRawSqlTablesForEntry, relationName)
+      ) {
+        missingPrimaryRelationWriteScopes.push({
+          id: entry.id,
+          relationName,
+          model,
+          writeBoundary: entry.writeBoundary ?? [],
+          approvedModels: Array.from(approvedModelsForEntry).sort(),
+          reason:
+            '真相源主表必须被至少一个声明的写入边界批准写入，不能只批准文件名。',
+        })
+      }
+    }
+  }
+
+  const uncoveredGuardRelations = Array.from(
+    new Set(
+      databaseGuards
+        .map((guard) => guard.relationName)
+        .filter((relationName) => relationName && !coveredPrimaryRelations.has(relationName)),
+    ),
+  ).sort()
+
+  const report = {
+    truthSourceCount: truthSources.length,
+    prismaModelCount: prismaModels.size,
+    databaseGuardCount: databaseGuards.length,
+    truthSourceEntries: truthSources.map((entry) => ({
+      id: entry.id,
+      layer: entry.layer,
+      primaryRelations: entry.primaryRelations ?? [],
+      compatibilitySnapshots: entry.compatibilitySnapshots ?? [],
+      notTruthSources: entry.notTruthSources ?? [],
+      writeBoundary: entry.writeBoundary ?? [],
+      requiredGuardNames: entry.requiredGuardNames ?? [],
+    })),
+    duplicateIds,
+    missingPrimaryRelations,
+    missingRequiredGuards,
+    misassignedRequiredGuards,
+    missingSnapshotFields,
+    missingWriteBoundaryFiles,
+    missingWriteBoundaryClassifications,
+    missingPrimaryRelationWriteScopes,
+    unmappedApprovedWriteScopes,
+    uncoveredGuardRelations,
+    incompleteEntries,
+    compatibilitySnapshotSchemaFieldCount: compatibilitySnapshotSchemaFields.length,
+    unmappedCompatibilitySnapshotFields,
+  }
+  const truthSourceEntryAudits = buildTruthSourceEntryAudits(truthSources, report)
+
+  return {
+    ...report,
+    truthSourceEntryAuditCount: truthSourceEntryAudits.length,
+    truthSourceEntryIssueCount: truthSourceEntryAudits.reduce(
+      (total, entry) => total + entry.issueCount,
+      0,
+    ),
+    truthSourceEntryAudits,
+    ok:
+      duplicateIds.length === 0 &&
+      missingPrimaryRelations.length === 0 &&
+      missingRequiredGuards.length === 0 &&
+      misassignedRequiredGuards.length === 0 &&
+      missingSnapshotFields.length === 0 &&
+      missingWriteBoundaryFiles.length === 0 &&
+      missingWriteBoundaryClassifications.length === 0 &&
+      missingPrimaryRelationWriteScopes.length === 0 &&
+      unmappedApprovedWriteScopes.length === 0 &&
+      uncoveredGuardRelations.length === 0 &&
+      incompleteEntries.length === 0 &&
+      unmappedCompatibilitySnapshotFields.length === 0,
+  }
+}
+
+function main() {
+  const options = parseArgs()
+  const report = validateTruthSourceManifest()
+  writeJsonReport(options.outputPath, report)
+  console.log(JSON.stringify(report, null, 2))
+  if (!report.ok) {
+    process.exit(1)
+  }
+}
+
+if (require.main === module) {
+  main()
+}
+
+module.exports = {
+  PRISMA_SCHEMA_PATH,
+  parseArgs,
+  readPrismaModelFields,
+  readPrismaModels,
+  collectTruthSourceSchemaSnapshotFields,
+  buildTruthSourceEntryAudits,
+  buildDelegateToModelNameMap,
+  collectTruthSourceWriteScopeCoverage,
+  collectUnmappedApprovedWriteScopes,
+  approvedTableScopeIncludes,
+  resolveSchemaFieldReference,
+  toPrismaDelegateName,
+  validateTruthSourceManifest,
+  writeJsonReport,
+}
diff --git a/furniture-3d-system/src/app/api/intake/product-patents/route.ts b/furniture-3d-system/src/app/api/intake/product-patents/route.ts
new file mode 100644
index 00000000..10f4ac2f
--- /dev/null
+++ b/furniture-3d-system/src/app/api/intake/product-patents/route.ts
@@ -0,0 +1,41 @@
+import { NextRequest } from 'next/server'
+import { ErrorCode } from '@/server/core/errors'
+import { handleRequest, jsonError, jsonSuccess } from '@/server/core/response'
+import { productPatentService } from '@/server/services'
+
+export async function GET(request: NextRequest) {
+  return handleRequest(
+    request,
+    async (ctx) => {
+      const records = await productPatentService.list()
+      return jsonSuccess({ records }, 200, ctx.requestId)
+    },
+    { requireAuth: true },
+  )
+}
+
+export async function PUT(request: NextRequest) {
+  return handleRequest(
+    request,
+    async (ctx) => {
+      const rawBody = await request.json().catch(() => null)
+      const records =
+        rawBody && typeof rawBody === 'object' && Array.isArray((rawBody as { records?: unknown }).records)
+          ? (rawBody as { records: unknown[] }).records
+          : null
+
+      if (!records) {
+        return jsonError(
+          ErrorCode.VALIDATION_FAILED,
+          '专利台账参数不正确：records 必须是数组',
+          400,
+          ctx.requestId,
+        )
+      }
+
+      const savedRecords = await productPatentService.replaceAll(records)
+      return jsonSuccess({ records: savedRecords }, 200, ctx.requestId)
+    },
+    { requireAuth: true },
+  )
+}
diff --git a/furniture-3d-system/src/app/api/intake/reference-library/route.ts b/furniture-3d-system/src/app/api/intake/reference-library/route.ts
new file mode 100644
index 00000000..8c1037bc
--- /dev/null
+++ b/furniture-3d-system/src/app/api/intake/reference-library/route.ts
@@ -0,0 +1,69 @@
+import { NextRequest } from 'next/server'
+import { ErrorCode } from '@/server/core/errors'
+import { handleRequest, jsonError, jsonSuccess } from '@/server/core/response'
+import { intakeReferenceLibraryService } from '@/server/services'
+
+function readLibraryTypeFromRequest(request: NextRequest) {
+  return request.nextUrl.searchParams.get('type') ?? ''
+}
+
+export async function GET(request: NextRequest) {
+  return handleRequest(
+    request,
+    async (ctx) => {
+      const libraryType = readLibraryTypeFromRequest(request)
+      if (!libraryType) {
+        return jsonError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少资料库类型 type', 400, ctx.requestId)
+      }
+
+      try {
+        const items = await intakeReferenceLibraryService.list(libraryType)
+        return jsonSuccess({ items }, 200, ctx.requestId)
+      } catch (error) {
+        return jsonError(
+          ErrorCode.VALIDATION_FAILED,
+          error instanceof Error ? error.message : '资料库类型不正确',
+          400,
+          ctx.requestId,
+        )
+      }
+    },
+    { requireAuth: true },
+  )
+}
+
+export async function PUT(request: NextRequest) {
+  return handleRequest(
+    request,
+    async (ctx) => {
+      const rawBody = await request.json().catch(() => null)
+      const body = rawBody && typeof rawBody === 'object' ? rawBody as { type?: unknown; items?: unknown } : null
+      const libraryType = typeof body?.type === 'string' ? body.type : readLibraryTypeFromRequest(request)
+      const items = Array.isArray(body?.items) ? body.items : null
+
+      if (!libraryType) {
+        return jsonError(ErrorCode.VALIDATION_REQUIRED_FIELD, '缺少资料库类型 type', 400, ctx.requestId)
+      }
+      if (!items) {
+        return jsonError(ErrorCode.VALIDATION_FAILED, '资料库 items 必须是数组', 400, ctx.requestId)
+      }
+
+      try {
+        const savedItems = await intakeReferenceLibraryService.replaceAll({
+          libraryType,
+          items,
+          userId: ctx.user.id,
+        })
+        return jsonSuccess({ items: savedItems }, 200, ctx.requestId)
+      } catch (error) {
+        return jsonError(
+          ErrorCode.VALIDATION_FAILED,
+          error instanceof Error ? error.message : '资料库保存失败',
+          400,
+          ctx.requestId,
+        )
+      }
+    },
+    { requireAuth: true, requireInternalContentWrite: true },
+  )
+}
diff --git a/furniture-3d-system/src/app/api/intake/spu-reservations/route.test.ts b/furniture-3d-system/src/app/api/intake/spu-reservations/route.test.ts
new file mode 100644
index 00000000..27331bce
--- /dev/null
+++ b/furniture-3d-system/src/app/api/intake/spu-reservations/route.test.ts
@@ -0,0 +1,54 @@
+export {}
+
+import { beforeEach, describe, expect, it, jest } from '@jest/globals'
+
+const mockHandleRequest: any = jest.fn()
+const mockJsonError: any = jest.fn()
+
+jest.mock('@/server/core/response', () => ({
+  handleRequest: (...args: unknown[]) => mockHandleRequest(...args),
+  jsonError: (...args: unknown[]) => mockJsonError(...args),
+}))
+
+const { POST } = require('./route')
+
+describe('POST /api/intake/spu-reservations', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockHandleRequest.mockImplementation(async (_request: unknown, handler: any) =>
+      handler({
+        requestId: 'req-spu-reservation',
+        user: { id: 'user-1' },
+      }),
+    )
+    mockJsonError.mockImplementation((code, message, status, requestId) => ({
+      success: false,
+      code,
+      message,
+      status,
+      requestId,
+    }))
+  })
+
+  it('阻断单独 SPU 占号，避免号段和产品保存事务断裂', async () => {
+    const request = {
+      json: jest.fn(async () => ({ productCategory: '书架' })),
+    }
+
+    const response = await POST(request as any)
+
+    expect(mockHandleRequest).toHaveBeenCalledWith(
+      request,
+      expect.any(Function),
+      { requireAuth: true, requireInternalContentWrite: true },
+    )
+    expect(response).toEqual(
+      expect.objectContaining({
+        success: false,
+        status: 409,
+        message: expect.stringContaining('同一事务内分配 SPU 并落库'),
+      }),
+    )
+    expect(request.json).not.toHaveBeenCalled()
+  })
+})
diff --git a/furniture-3d-system/src/app/api/intake/spu-reservations/route.ts b/furniture-3d-system/src/app/api/intake/spu-reservations/route.ts
new file mode 100644
index 00000000..ecb6df5e
--- /dev/null
+++ b/furniture-3d-system/src/app/api/intake/spu-reservations/route.ts
@@ -0,0 +1,18 @@
+import { NextRequest } from 'next/server'
+import { ErrorCode } from '@/server/core/errors'
+import { handleRequest, jsonError } from '@/server/core/response'
+
+export async function POST(request: NextRequest) {
+  return handleRequest(
+    request,
+    async (ctx) => {
+      return jsonError(
+        ErrorCode.VALIDATION_FAILED,
+        '正式 SPU 不支持单独占号；请保存产品资料，由后端在同一事务内分配 SPU 并落库',
+        409,
+        ctx.requestId,
+      )
+    },
+    { requireAuth: true, requireInternalContentWrite: true },
+  )
+}
diff --git a/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.test.tsx b/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.test.tsx
new file mode 100644
index 00000000..b99376b0
--- /dev/null
+++ b/furniture-3d-system/src/app/intake/EdgeBandingLibraryPanel.test.tsx
@@ -0,0 +1,180 @@
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import EdgeBandingLibraryPanel from '@/app/intake/EdgeBandingLibraryPanel'
+import { createEdgeBandingLibraryItem } from '@/lib/edge-banding-library'
+
+const LEGACY_EDGE_BANDING_LIBRARY_STORAGE_KEY =
+  'formal-intake-edge-banding-library-items'
+
+function createApiResponse(data: unknown, init?: ResponseInit) {
+  const status = init?.status ?? 200
+  return {
+    ok: status >= 200 && status < 300,
+    status,
+    json: async () => data,
+  } as Response
+}
+
+function spyOnFetch() {
+  if (!('fetch' in global)) {
+    Object.defineProperty(global, 'fetch', {
+      configurable: true,
+      writable: true,
+      value: jest.fn(),
+    })
+  }
+  return jest.spyOn(global, 'fetch' as never)
+}
+
+function createServerEdgeBandingRow(overrides: Record<string, unknown> = {}) {
+  const item = {
+    id: 'edge-a0',
+    name: 'PVC封边条',
+    spec: '22×1',
+    unit: '米',
+    unitPrice: '0.35',
+    compatibleThicknessMm: '12',
+    updatedAt: '2026-05-30T00:00:00.000Z',
+    ...(overrides.item as Record<string, unknown> | undefined),
+  }
+
+  return {
+    id: 'server-edge-a0',
+    libraryType: 'EDGE_BANDING',
+    itemKey: `item:${item.id}`,
+    code: `item:${item.id}`,
+    name: '22×1 PVC封边条',
+    category: 'ITEM',
+    letter: '',
+    payload: {
+      kind: 'ITEM',
+      item,
+    },
+    sortOrder: 0,
+    isActive: true,
+    createdBy: null,
+    updatedBy: null,
+    createdAt: '2026-05-30T00:00:00.000Z',
+    updatedAt: '2026-05-30T00:00:00.000Z',
+    ...overrides,
+  }
+}
+
+describe('EdgeBandingLibraryPanel', () => {
+  beforeEach(() => {
+    window.localStorage.clear()
+  })
+
+  afterEach(() => {
+    jest.restoreAllMocks()
+  })
+
+  async function waitEdgeBandingLibraryReady() {
+    return screen.findByText(/已接入服务端资料库|服务端暂无封边资料/)
+  }
+
+  it('loads edge banding library from the server', async () => {
+    spyOnFetch().mockResolvedValue(
+      createApiResponse({
+        success: true,
+        data: { items: [createServerEdgeBandingRow()] },
+      }),
+    )
+
+    render(<EdgeBandingLibraryPanel />)
+
+    expect((await screen.findAllByText('22×1 PVC封边条')).length).toBeGreaterThan(0)
+  })
+
+  it('ignores the legacy local edge banding cache when the server library is empty', async () => {
+    const fetchSpy = spyOnFetch().mockResolvedValue(
+      createApiResponse({
+        success: true,
+        data: { items: [] },
+      }),
+    )
+    const localItem = createEdgeBandingLibraryItem({
+      name: 'ABS封边条',
+      spec: '18×1',
+      unit: '米',
+      unitPrice: '0.28',
+      compatibleThicknessMm: '18',
+    })
+    window.localStorage.setItem(
+      LEGACY_EDGE_BANDING_LIBRARY_STORAGE_KEY,
+      JSON.stringify([localItem]),
+    )
+
+    render(<EdgeBandingLibraryPanel />)
+
+    expect(
+      await screen.findByText('服务端暂无封边资料，新增后写入服务端资料库'),
+    ).toBeInTheDocument()
+    expect(screen.queryByText('18×1 ABS封边条')).not.toBeInTheDocument()
+    expect(
+      fetchSpy.mock.calls.some(([, init]) => (init as RequestInit | undefined)?.method === 'PUT'),
+    ).toBe(false)
+  })
+
+  it('saves edge banding library changes through the server before updating the local cache', async () => {
+    const actor = userEvent.setup()
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValueOnce(createApiResponse({ success: true, data: { items: [] } }))
+    fetchSpy.mockResolvedValueOnce(
+      createApiResponse({
+        success: true,
+        data: { items: [createServerEdgeBandingRow()] },
+      }),
+    )
+
+    render(<EdgeBandingLibraryPanel />)
+
+    await waitEdgeBandingLibraryReady()
+    await actor.click(screen.getByRole('button', { name: '新建封边' }))
+    expect(await screen.findByText('新建封边条')).toBeInTheDocument()
+    fireEvent.change(screen.getByPlaceholderText('例如：PVC封边条'), {
+      target: { value: 'PVC封边条' },
+    })
+    fireEvent.change(screen.getByPlaceholderText('例如：22×1'), {
+      target: { value: '22×1' },
+    })
+    fireEvent.change(screen.getByPlaceholderText('例如：米'), {
+      target: { value: '米' },
+    })
+    fireEvent.change(screen.getByPlaceholderText('例如：0.35'), {
+      target: { value: '0.35' },
+    })
+    fireEvent.change(screen.getAllByPlaceholderText('例如：12MM').at(-1)!, {
+      target: { value: '12' },
+    })
+    await actor.click(screen.getByRole('button', { name: '保存' }))
+
+    await waitFor(() => {
+      expect(fetchSpy).toHaveBeenLastCalledWith(
+        '/api/intake/reference-library',
+        expect.objectContaining({ method: 'PUT' }),
+      )
+    })
+    const requestBody = JSON.parse(String((fetchSpy.mock.calls.at(-1)?.[1] as RequestInit).body))
+    expect(requestBody).toMatchObject({
+      type: 'EDGE_BANDING',
+      items: [
+        expect.objectContaining({
+          itemKey: 'ITEM:22-1:12',
+          code: 'ITEM:22-1:12',
+          category: 'ITEM',
+          payload: expect.objectContaining({
+            kind: 'ITEM',
+            item: expect.objectContaining({
+              name: 'PVC封边条',
+              spec: '22×1',
+              unitPrice: '0.35',
+              compatibleThicknessMm: '12',
+            }),
+          }),
+        }),
+      ],
+    })
+    expect(await screen.findByText('封边资料已保存。')).toBeInTheDocument()
+  })
+})
diff --git a/furniture-3d-system/src/app/intake/productPatentStorage.test.ts b/furniture-3d-system/src/app/intake/productPatentStorage.test.ts
new file mode 100644
index 00000000..bdea1162
--- /dev/null
+++ b/furniture-3d-system/src/app/intake/productPatentStorage.test.ts
@@ -0,0 +1,88 @@
+import {
+  clearProductPatentRecordsRuntimeCache,
+  createEmptyProductPatentRecord,
+  listProductPatentRecords,
+  saveProductPatentRecords,
+} from './productPatentStorage'
+
+describe('productPatentStorage persistence guards', () => {
+  beforeEach(() => {
+    clearProductPatentRecordsRuntimeCache()
+  })
+
+  it('保存专利台账时规范化关键身份字段', () => {
+    saveProductPatentRecords([
+      createEmptyProductPatentRecord({
+        id: ' patent-1 ',
+        productId: ' product-1 ',
+        patentGroupKey: ' spu001 ',
+        linkedProductIds: [' product-1 ', 'product-1'],
+        linkedSpus: [' spu001 ', 'SPU001'],
+        patentName: '测试专利',
+        patentNo: ' zl001 ',
+        applicationNo: ' app001 ',
+        spu: ' spu001 ',
+      }),
+    ])
+
+    expect(listProductPatentRecords()[0]).toMatchObject({
+      id: 'patent-1',
+      productId: 'product-1',
+      patentGroupKey: 'SPU001',
+      linkedProductIds: ['product-1'],
+      linkedSpus: ['SPU001'],
+      patentNo: 'ZL001',
+      applicationNo: 'APP001',
+      spu: 'SPU001',
+    })
+  })
+
+  it('保存专利台账时把临时随机 id 收敛为分组稳定 id', () => {
+    saveProductPatentRecords([
+      createEmptyProductPatentRecord({
+        id: 'patent-1770000000000-abc123',
+        productId: 'product-1',
+        patentGroupKey: 'spu001',
+        patentName: '测试专利',
+      }),
+    ])
+
+    expect(listProductPatentRecords()[0]?.id).toBe('product-patent-group-SPU001')
+  })
+
+  it('保存专利台账时不能静默丢弃缺少关键身份的记录', () => {
+    expect(() =>
+      saveProductPatentRecords([
+        createEmptyProductPatentRecord({
+          id: 'patent-without-identity',
+          productId: 'product-1',
+          patentGroupKey: 'SPU001',
+          patentName: '',
+          patentNo: '',
+          applicationNo: '',
+        }),
+      ]),
+    ).toThrow('缺少专利名称、申请号或专利号')
+
+    expect(listProductPatentRecords()).toEqual([])
+  })
+
+  it('保存专利台账时阻断规范化后重复的分组键', () => {
+    expect(() =>
+      saveProductPatentRecords([
+        createEmptyProductPatentRecord({
+          id: 'patent-1',
+          productId: 'product-1',
+          patentGroupKey: 'spu001',
+          patentName: '测试专利 A',
+        }),
+        createEmptyProductPatentRecord({
+          id: 'patent-2',
+          productId: 'product-2',
+          patentGroupKey: ' SPU001 ',
+          patentName: '测试专利 B',
+        }),
+      ]),
+    ).toThrow('专利台账分组重复：SPU001')
+  })
+})
diff --git a/furniture-3d-system/src/app/intake/seriesComponentDetails.test.ts b/furniture-3d-system/src/app/intake/seriesComponentDetails.test.ts
new file mode 100644
index 00000000..2a876435
--- /dev/null
+++ b/furniture-3d-system/src/app/intake/seriesComponentDetails.test.ts
@@ -0,0 +1,121 @@
+import { readPreSkuComponentDetails, readPreSkuSkuFields } from './seriesComponentDetails'
+
+describe('readPreSkuSkuFields', () => {
+  it('reads formal SKU fields only from structured basicInfo', () => {
+    const result = readPreSkuSkuFields({
+      basicInfo: {
+        model: 'DBZ-SPJK001',
+        formalSkuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        specName: '桌面 1200 柚木色',
+        versionNo: 'V01',
+      },
+      displaySummary: {
+        model: 'OLD-MODEL',
+        formalSkuCode: 'OLD-FORMAL',
+        skuCode: 'OLD-SKU',
+        barcode: 'OLD-BARCODE',
+        specName: '旧规格',
+      },
+      familySelection: {
+        model: 'FAMILY-MODEL',
+        formalSkuCode: 'FAMILY-FORMAL',
+      },
+    })
+
+    expect(result).toEqual(
+      expect.objectContaining({
+        model: 'DBZ-SPJK001',
+        skuCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+        specName: '桌面 1200 柚木色',
+        versionNo: 'V01',
+      }),
+    )
+  })
+
+  it('does not fall back to displaySummary or familySelection for formal SKU fields', () => {
+    const result = readPreSkuSkuFields({
+      basicInfo: null,
+      displaySummary: {
+        skuCode: 'OLD-SKU',
+        barcode: 'OLD-BARCODE',
+      },
+      familySelection: {
+        model: 'FAMILY-MODEL',
+      },
+    })
+
+    expect(result.skuCode).toBe('')
+    expect(result.barcode).toBe('')
+    expect(result.model).toBe('')
+  })
+})
+
+describe('readPreSkuComponentDetails', () => {
+  it('prefers structured bomPreview over legacy displaySummary componentDetails', () => {
+    const result = readPreSkuComponentDetails({
+      bomPreview: [
+        {
+          code: 'BOM-BOARD-001',
+          name: '结构化板件',
+          quantity: 2,
+          role: 'desktop',
+          assetType: 'BOARD',
+        },
+      ],
+      displaySummary: {
+        componentDetails: [
+          {
+            code: 'OLD-COMPONENT',
+            name: '旧摘要组件',
+            quantity: 1,
+          },
+        ],
+      },
+    })
+
+    expect(result).toEqual([
+      expect.objectContaining({
+        code: 'BOM-BOARD-001',
+        name: '结构化板件',
+      }),
+    ])
+  })
+
+  it('does not promote legacy displaySummary componentDetails when no structured process source exists', () => {
+    const result = readPreSkuComponentDetails({
+      displaySummary: {
+        componentDetails: [
+          {
+            code: 'OLD-COMPONENT',
+            name: '旧摘要组件',
+            quantity: 1,
+          },
+        ],
+      },
+    })
+
+    expect(result).toEqual([])
+  })
+
+  it('falls back to componentCodes as process identity when bomPreview is missing', () => {
+    const result = readPreSkuComponentDetails({
+      componentCodes: [' BOARD-001 ', '', 'HARDWARE-002'],
+      displaySummary: {
+        componentDetails: [
+          {
+            code: 'OLD-COMPONENT',
+            name: '旧摘要组件',
+            quantity: 1,
+          },
+        ],
+      },
+    })
+
+    expect(result).toEqual([
+      expect.objectContaining({ code: 'BOARD-001' }),
+      expect.objectContaining({ code: 'HARDWARE-002' }),
+    ])
+  })
+})
diff --git a/furniture-3d-system/src/app/intake/seriesComponentDetails.ts b/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
index 7c73917d..247d8a7c 100644
--- a/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
+++ b/furniture-3d-system/src/app/intake/seriesComponentDetails.ts
@@ -82,15 +82,7 @@ function readPreSkuStringField(
 ) {
   const basicInfoKey = key === "skuCode" ? "formalSkuCode" : key;
   const basicInfoValue = preSku.basicInfo?.[basicInfoKey as keyof NonNullable<PreSkuComponentDetailSource["basicInfo"]>];
-  const normalizedBasicInfoValue = normalizePreSkuTextValue(basicInfoValue);
-  if (normalizedBasicInfoValue) return normalizedBasicInfoValue;
-
-  const summaryValue = preSku.displaySummary?.[key];
-  const normalizedSummaryValue = normalizePreSkuTextValue(summaryValue);
-  if (normalizedSummaryValue) return normalizedSummaryValue;
-
-  const familyValue = preSku.familySelection?.[key];
-  return normalizePreSkuTextValue(familyValue);
+  return normalizePreSkuTextValue(basicInfoValue);
 }
 
 function readPreSkuFirstStringField(
diff --git a/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.test.ts b/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.test.ts
new file mode 100644
index 00000000..967fd223
--- /dev/null
+++ b/furniture-3d-system/src/app/intake/spuRuleLibraryLogic.test.ts
@@ -0,0 +1,319 @@
+import {
+  clearSpuRuleLibraryRuntimeCache,
+  getEstimatedSpuAssignment,
+  listSpuRuleLibraryRulesFromServer,
+  replaceSpuRuleLibraryRulesOnServer,
+  syncSpuRuleLibraryRulesFromServer,
+  writeSpuRuleLibraryRules,
+} from './spuRuleLibraryLogic'
+
+function createApiResponse(data: unknown, init?: ResponseInit) {
+  const status = init?.status ?? 200
+  return {
+    ok: status >= 200 && status < 300,
+    status,
+    json: async () => data,
+  } as Response
+}
+
+function spyOnFetch() {
+  if (!('fetch' in global)) {
+    Object.defineProperty(global, 'fetch', {
+      configurable: true,
+      writable: true,
+      value: jest.fn(),
+    })
+  }
+  const fetchSpy = jest.spyOn(global, 'fetch' as never)
+  fetchSpy.mockClear()
+  return fetchSpy
+}
+
+describe('spuRuleLibraryLogic service-backed rules', () => {
+  beforeEach(() => {
+    clearSpuRuleLibraryRuntimeCache()
+    window.localStorage.clear()
+  })
+
+  afterEach(() => {
+    jest.restoreAllMocks()
+  })
+
+  it('loads SPU rules from the server without treating local cache as truth', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValue(
+      createApiResponse({
+        success: true,
+        data: {
+          items: [
+            {
+              id: 'spu-rule-desk',
+              libraryType: 'SPU_RULE',
+              itemKey: 'rule-desk',
+              code: 'SZ',
+              name: '书桌',
+              category: '桌类',
+              payload: {
+                kind: 'SPU_RULE',
+                rule: {
+                  id: 'rule-desk',
+                  productCategory: '书桌',
+                  categoryCode: 'SZ',
+                  spuIndex: 240,
+                  enabled: true,
+                },
+              },
+              sortOrder: 0,
+              isActive: true,
+              createdBy: null,
+              updatedBy: null,
+              createdAt: '2026-05-31T00:00:00.000Z',
+              updatedAt: '2026-05-31T00:00:00.000Z',
+            },
+          ],
+        },
+      }),
+    )
+
+    const snapshot = await syncSpuRuleLibraryRulesFromServer()
+
+    expect(snapshot.hasServerRows).toBe(true)
+    expect(snapshot.rules).toEqual([
+      expect.objectContaining({
+        productCategory: '书桌',
+        categoryCode: 'SZ',
+        spuIndex: 240,
+      }),
+    ])
+    window.localStorage.setItem('intake.spuRuleLibrary.rules', JSON.stringify([
+      {
+        id: 'stale-local-rule',
+        productCategory: '书桌',
+        categoryCode: 'OLD',
+        spuIndex: 999,
+        enabled: true,
+      },
+    ]))
+    expect(
+      getEstimatedSpuAssignment({
+        productCategory: '书桌',
+        products: [],
+      }),
+    ).toMatchObject({
+      prefix: 'SZ',
+      index: 241,
+      spu: 'SZ0241',
+    })
+  })
+
+  it('uses seed rules instead of legacy browser cache when the server has no SPU rules yet', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValue(
+      createApiResponse({ success: true, data: { items: [] } }),
+    )
+    window.localStorage.setItem('intake.spuRuleLibrary.rules', JSON.stringify([
+      {
+        id: 'local-rule',
+        productCategory: '茶几',
+        categoryCode: 'OLD',
+        spuIndex: 999,
+        enabled: true,
+      },
+    ]))
+
+    const snapshot = await syncSpuRuleLibraryRulesFromServer()
+
+    expect(snapshot.hasServerRows).toBe(false)
+    expect(
+      getEstimatedSpuAssignment({
+        productCategory: '茶几',
+        products: [],
+      }),
+    ).toMatchObject({
+      prefix: 'CJ',
+      index: 266,
+      spu: 'CJ0266',
+    })
+    expect(window.localStorage.getItem('intake.spuRuleLibrary.rules')).toBeTruthy()
+  })
+
+  it('saves SPU rules through the shared reference-library API', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockImplementation(async (input, init) => {
+      const body = JSON.parse(String(init?.body ?? '{}')) as {
+        type: string
+        items: Array<Record<string, unknown>>
+      }
+      return createApiResponse({
+        success: true,
+        data: {
+          items: body.items.map((item, index) => ({
+            id: `server-${item.itemKey}`,
+            libraryType: body.type,
+            itemKey: item.itemKey,
+            code: item.code,
+            name: item.name,
+            category: item.category,
+            payload: item.payload,
+            sortOrder: index,
+            isActive: true,
+            createdBy: null,
+            updatedBy: null,
+            createdAt: '2026-05-31T00:00:00.000Z',
+            updatedAt: '2026-05-31T00:00:00.000Z',
+          })),
+        },
+      })
+    })
+
+    const snapshot = await replaceSpuRuleLibraryRulesOnServer([
+      {
+        id: 'rule-desk',
+        productCategory: '书桌',
+        categoryCode: 'SZ',
+        spuIndex: 241,
+        enabled: true,
+      },
+    ])
+
+    expect(fetchSpy).toHaveBeenCalledWith(
+      '/api/intake/reference-library',
+      expect.objectContaining({
+        method: 'PUT',
+      }),
+    )
+    const body = JSON.parse(String((fetchSpy.mock.calls[0][1] as RequestInit).body))
+    expect(body).toMatchObject({
+      type: 'SPU_RULE',
+      items: [
+        {
+          itemKey: 'rule-desk',
+          code: 'SZ',
+          name: '书桌',
+          payload: {
+            kind: 'SPU_RULE',
+            rule: expect.objectContaining({
+              productCategory: '书桌',
+              categoryCode: 'SZ',
+              spuIndex: 241,
+            }),
+          },
+        },
+      ],
+    })
+    expect(snapshot.rules[0]).toMatchObject({
+      productCategory: '书桌',
+      categoryCode: 'SZ',
+      spuIndex: 241,
+    })
+  })
+
+  it('can list SPU rules from the server directly for the maintenance workspace', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValue(
+      createApiResponse({ success: true, data: { items: [] } }),
+    )
+
+    await listSpuRuleLibraryRulesFromServer()
+
+    expect(fetchSpy).toHaveBeenCalledWith(
+      '/api/intake/reference-library?type=SPU_RULE',
+      expect.objectContaining({
+        headers: expect.objectContaining({ Accept: 'application/json' }),
+      }),
+    )
+  })
+
+  it('decodes SPU rule prefix from structured row code when payload is stale', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValue(
+      createApiResponse({
+        success: true,
+        data: {
+          items: [
+            {
+              id: 'spu-rule-desk',
+              libraryType: 'SPU_RULE',
+              itemKey: 'rule-desk',
+              code: 'SZ',
+              name: '书桌',
+              category: '桌类',
+              payload: {
+                kind: 'SPU_RULE',
+                rule: {
+                  id: 'old-rule-desk',
+                  productCategory: '旧品类',
+                  categoryCode: 'OLD',
+                  spuIndex: 240,
+                  enabled: true,
+                },
+              },
+              sortOrder: 0,
+              isActive: true,
+              createdBy: null,
+              updatedBy: null,
+              createdAt: '2026-05-31T00:00:00.000Z',
+              updatedAt: '2026-05-31T00:00:00.000Z',
+            },
+          ],
+        },
+      }),
+    )
+
+    const snapshot = await syncSpuRuleLibraryRulesFromServer()
+
+    expect(snapshot.rules[0]).toMatchObject({
+      productCategory: '书桌',
+      id: 'rule-desk',
+      categoryCode: 'SZ',
+      spuIndex: 240,
+    })
+  })
+
+  it('does not mix seed rules into runtime cache when the server has invalid SPU rows', async () => {
+    const fetchSpy = spyOnFetch()
+    fetchSpy.mockResolvedValue(
+      createApiResponse({
+        success: true,
+        data: {
+          items: [
+            {
+              id: 'invalid-spu-rule',
+              libraryType: 'SPU_RULE',
+              itemKey: 'invalid-spu-rule',
+              code: 'CZ',
+              name: '',
+              category: '桌类',
+              payload: {
+                kind: 'SPU_RULE',
+                rule: {
+                  productCategory: '',
+                  categoryCode: 'CZ',
+                  spuIndex: 7,
+                  enabled: true,
+                },
+              },
+              sortOrder: 0,
+              isActive: true,
+              createdBy: null,
+              updatedBy: null,
+              createdAt: '2026-05-31T00:00:00.000Z',
+              updatedAt: '2026-05-31T00:00:00.000Z',
+            },
+          ],
+        },
+      }),
+    )
+
+    const snapshot = await syncSpuRuleLibraryRulesFromServer()
+
+    expect(snapshot.hasServerRows).toBe(true)
+    expect(snapshot.rules).toEqual([])
+    expect(
+      getEstimatedSpuAssignment({
+        productCategory: '茶几',
+        products: [],
+      }),
+    ).toBeNull()
+  })
+})
diff --git a/furniture-3d-system/src/app/warehouse/page.test.tsx b/furniture-3d-system/src/app/warehouse/page.test.tsx
new file mode 100644
index 00000000..b04fcbe6
--- /dev/null
+++ b/furniture-3d-system/src/app/warehouse/page.test.tsx
@@ -0,0 +1,116 @@
+import { render, screen } from '@testing-library/react'
+import WarehousePage from './page'
+
+jest.mock('@/lib/server-session', () => ({
+  requireSession: jest.fn().mockResolvedValue({
+    user: {
+      id: 'user-1',
+      name: '测试用户',
+      email: 'test@example.com',
+      role: 'SUPER_ADMIN',
+      avatar: null,
+      department: null,
+    },
+  }),
+}))
+
+jest.mock('@/server/services', () => ({
+  warehouseService: {
+    getOverview: jest.fn().mockResolvedValue({
+      locations: [],
+      stockItems: [],
+      packageItems: [],
+      stats: {
+        totalLocations: 0,
+        totalStockQuantity: 0,
+        activeSkuCount: 0,
+        packagedItemCount: 0,
+      },
+    }),
+    getBindingsForVariants: jest.fn().mockResolvedValue([]),
+    getBindingsForPreSkus: jest.fn().mockResolvedValue([]),
+  },
+  assetCenterService: {
+    listFamilies: jest.fn().mockResolvedValue([]),
+    listVariantsByFamilyIds: jest.fn().mockResolvedValue([]),
+  },
+  draftGroupService: {
+    list: jest.fn().mockResolvedValue([
+      {
+        id: 'draft-1',
+        code: 'DG-001',
+        name: '结构化草稿组',
+        status: 'PACKAGING',
+      },
+    ]),
+    getById: jest.fn().mockResolvedValue({
+      draftGroup: {
+        id: 'draft-1',
+        code: 'DG-001',
+        name: '结构化草稿组',
+        status: 'PACKAGING',
+      },
+      preSkus: [
+        {
+          id: 'pre-sku-1',
+          sequence: 1,
+          defaultName: '默认准 SKU',
+          customName: null,
+          status: 'PACKAGING',
+          componentCodes: [],
+          basicInfo: {
+            model: 'DBZ-SPJK001',
+            formalSkuCode: 'STRUCTURED-SKU',
+            barcode: 'STRUCTURED-BARCODE',
+            size: '',
+            color: '',
+            material: '',
+            specName: '',
+            versionNo: 'V01',
+            setCount: '',
+            attributeCode: '',
+            drawingId: '',
+            installMethod: '',
+            manualUpdatedAt: null,
+            manualUpdatedBy: null,
+            manualUpdatedByName: null,
+          },
+          displaySummary: {
+            skuCode: 'LEGACY-SKU',
+          },
+          familySelection: {},
+          variantSelection: {
+            slots: [],
+            hardwareSelections: [],
+          },
+          previewNodes: [],
+        },
+      ],
+    }),
+  },
+}))
+
+jest.mock('./WarehouseClient', () => ({
+  __esModule: true,
+  default: ({
+    workbenchSkuList,
+  }: {
+    workbenchSkuList?: Array<{ id: string; code: string }>
+  }) => (
+    <div>
+      <div>WarehouseClient</div>
+      {workbenchSkuList?.map((sku) => (
+        <div key={sku.id}>{sku.code}</div>
+      ))}
+    </div>
+  ),
+}))
+
+describe('WarehousePage', () => {
+  it('uses structured PreSkuBasicInfo as workbench SKU code source', async () => {
+    render(await WarehousePage())
+
+    expect(screen.getByText('STRUCTURED-SKU')).toBeInTheDocument()
+    expect(screen.queryByText('LEGACY-SKU')).not.toBeInTheDocument()
+  })
+})
diff --git a/furniture-3d-system/src/lib/__tests__/permissions.test.ts b/furniture-3d-system/src/lib/__tests__/permissions.test.ts
new file mode 100644
index 00000000..410ebd09
--- /dev/null
+++ b/furniture-3d-system/src/lib/__tests__/permissions.test.ts
@@ -0,0 +1,18 @@
+import { describe, expect, it } from '@jest/globals'
+import { normalizeCollaboratorUsers } from '../permissions'
+
+describe('normalizeCollaboratorUsers', () => {
+  it('只接受固定协作者角色，避免非法角色被提升为编辑权限', () => {
+    expect(
+      normalizeCollaboratorUsers([
+        { userId: ' user-editor ', role: ' EDITOR ' },
+        { userId: 'user-viewer', role: 'viewer' },
+        { userId: 'user-owner', role: 'owner' },
+        { userId: 'user-empty', role: '' },
+      ]),
+    ).toEqual([
+      { userId: 'user-editor', role: 'editor' },
+      { userId: 'user-viewer', role: 'viewer' },
+    ])
+  })
+})
diff --git a/furniture-3d-system/src/lib/__tests__/sku-display-tags.test.ts b/furniture-3d-system/src/lib/__tests__/sku-display-tags.test.ts
new file mode 100644
index 00000000..a945175b
--- /dev/null
+++ b/furniture-3d-system/src/lib/__tests__/sku-display-tags.test.ts
@@ -0,0 +1,41 @@
+import {
+  buildSkuDisplayTags,
+  toLegacySkuDisplayAttributes,
+} from '../sku-display-tags'
+
+describe('sku display tags', () => {
+  it('filters internal JSON keys from legacy attributes', () => {
+    expect(toLegacySkuDisplayAttributes({
+      color: ' oak ',
+      material: '',
+      _skuCadData: { nodes: ['internal'] },
+      assetSkuSnapshot: 'hidden snapshot',
+      variantSelectionSummary: 'hidden selection',
+      bomPreview: 'hidden bom',
+      internalCount: 2,
+    })).toEqual({ color: 'oak' })
+  })
+
+  it('uses structured asset profile before legacy attributes', () => {
+    expect(buildSkuDisplayTags({
+      assetProfile: {
+        specName: '1200 teak',
+        color: 'teak',
+        material: 'wood',
+      },
+      legacyAttributes: {
+        color: 'legacy-oak',
+      },
+    })).toEqual(['1200 teak', 'teak', 'wood'])
+  })
+
+  it('falls back to legacy attributes when profile has no display fields', () => {
+    expect(buildSkuDisplayTags({
+      assetProfile: { specName: '', color: null, material: undefined },
+      legacyAttributes: {
+        color: 'oak',
+        material: 'wood',
+      },
+    })).toEqual(['oak', 'wood'])
+  })
+})
diff --git a/furniture-3d-system/src/lib/intake-reference-library-client.ts b/furniture-3d-system/src/lib/intake-reference-library-client.ts
new file mode 100644
index 00000000..5e2da8fc
--- /dev/null
+++ b/furniture-3d-system/src/lib/intake-reference-library-client.ts
@@ -0,0 +1,166 @@
+'use client'
+
+import type {
+  IntakeReferenceLibraryItemDTO,
+  IntakeReferenceLibraryType,
+} from '@/server/services'
+
+type ApiEnvelope<T> = {
+  success?: boolean
+  data?: T
+  error?: {
+    message?: string
+  }
+}
+
+export type AlphabetReferenceLibraryItem = {
+  id: string
+  letter: string
+  code: string
+  name: string
+  color?: string
+  material?: string
+  price: string
+  imageUrl: string
+  imageName: string
+  updatedAt: string
+}
+
+export type IntakeReferenceLibraryClientItem = {
+  itemKey: string
+  code?: string
+  name?: string
+  category?: string
+  letter?: string
+  payload?: unknown
+  sortOrder?: number
+  isActive?: boolean
+}
+
+function readText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function readPayload(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return {}
+  return value as Record<string, unknown>
+}
+
+function toAlphabetReferenceLibraryItem(
+  item: IntakeReferenceLibraryItemDTO,
+): AlphabetReferenceLibraryItem | null {
+  const payload = readPayload(item.payload)
+  const id = item.itemKey || item.id
+  const letter = item.letter.toUpperCase()
+  const code = item.code
+  const name = item.name
+
+  if (!id || !letter || !code || !name) {
+    return null
+  }
+
+  return {
+    id,
+    letter,
+    code,
+    name,
+    color: readText(payload.color),
+    material: readText(payload.material),
+    price: readText(payload.price),
+    imageUrl: readText(payload.imageUrl),
+    imageName: readText(payload.imageName),
+    updatedAt: readText(payload.updatedAt) || item.updatedAt,
+  }
+}
+
+async function requestReferenceLibrary<T>(
+  input: RequestInfo,
+  init?: RequestInit,
+): Promise<T> {
+  const response = await fetch(input, {
+    ...init,
+    headers: {
+      Accept: 'application/json',
+      ...(init?.body ? { 'Content-Type': 'application/json' } : {}),
+      ...(init?.headers ?? {}),
+    },
+  })
+  const payload = (await response.json().catch(() => null)) as ApiEnvelope<T> | null
+
+  if (!response.ok || !payload?.success || payload.data === undefined) {
+    throw new Error(payload?.error?.message || '资料库请求失败')
+  }
+
+  return payload.data
+}
+
+export async function listAlphabetReferenceLibraryItems(
+  libraryType: IntakeReferenceLibraryType,
+): Promise<AlphabetReferenceLibraryItem[]> {
+  const items = await listIntakeReferenceLibraryItems(libraryType)
+
+  return items
+    .filter((item) => item.isActive !== false)
+    .map(toAlphabetReferenceLibraryItem)
+    .filter((item): item is AlphabetReferenceLibraryItem => Boolean(item))
+}
+
+export async function replaceAlphabetReferenceLibraryItems(
+  libraryType: IntakeReferenceLibraryType,
+  items: AlphabetReferenceLibraryItem[],
+): Promise<AlphabetReferenceLibraryItem[]> {
+  const savedItems = await replaceIntakeReferenceLibraryItems(
+    libraryType,
+    items.map((item, index) => ({
+      itemKey: item.code.trim().toUpperCase(),
+      code: item.code,
+      name: item.name,
+      letter: item.letter,
+      payload: item,
+      sortOrder: index,
+      isActive: true,
+    })),
+  )
+
+  return savedItems
+    .filter((item) => item.isActive !== false)
+    .map(toAlphabetReferenceLibraryItem)
+    .filter((item): item is AlphabetReferenceLibraryItem => Boolean(item))
+}
+
+export async function listIntakeReferenceLibraryItems(
+  libraryType: IntakeReferenceLibraryType,
+): Promise<IntakeReferenceLibraryItemDTO[]> {
+  const data = await requestReferenceLibrary<{ items: IntakeReferenceLibraryItemDTO[] }>(
+    `/api/intake/reference-library?type=${encodeURIComponent(libraryType)}`,
+  )
+  return data.items
+}
+
+export async function replaceIntakeReferenceLibraryItems(
+  libraryType: IntakeReferenceLibraryType,
+  items: IntakeReferenceLibraryClientItem[],
+): Promise<IntakeReferenceLibraryItemDTO[]> {
+  const data = await requestReferenceLibrary<{ items: IntakeReferenceLibraryItemDTO[] }>(
+    '/api/intake/reference-library',
+    {
+      method: 'PUT',
+      body: JSON.stringify({
+        type: libraryType,
+        items: items.map((item, index) => ({
+          itemKey: item.itemKey,
+          code: item.code ?? '',
+          name: item.name ?? '',
+          category: item.category ?? '',
+          letter: item.letter ?? '',
+          payload: item.payload ?? {},
+          sortOrder: item.sortOrder ?? index,
+          isActive: item.isActive ?? true,
+        })),
+      }),
+    },
+  )
+  return data.items
+}
+
+export type { IntakeReferenceLibraryType }
diff --git a/furniture-3d-system/src/lib/sku-display-tags.ts b/furniture-3d-system/src/lib/sku-display-tags.ts
new file mode 100644
index 00000000..45924223
--- /dev/null
+++ b/furniture-3d-system/src/lib/sku-display-tags.ts
@@ -0,0 +1,54 @@
+export interface SkuAssetProfileDisplaySource {
+  specName?: string | null
+  color?: string | null
+  material?: string | null
+}
+
+const INTERNAL_LEGACY_ATTRIBUTE_KEYS = new Set([
+  'assetSkuSnapshot',
+  'variantSelectionSummary',
+  'bomPreview',
+])
+
+export function toLegacySkuDisplayAttributes(attributes: unknown): Record<string, string> | null {
+  if (!attributes || typeof attributes !== 'object' || Array.isArray(attributes)) {
+    return null
+  }
+
+  const display = Object.fromEntries(
+    Object.entries(attributes as Record<string, unknown>)
+      .filter(
+        ([key, value]) =>
+          !key.startsWith('_') &&
+          !INTERNAL_LEGACY_ATTRIBUTE_KEYS.has(key) &&
+          typeof value === 'string',
+      )
+      .map(([key, value]) => [key, (value as string).trim()])
+      .filter(([, value]) => value.length > 0),
+  ) as Record<string, string>
+
+  return Object.keys(display).length > 0 ? display : null
+}
+
+export function buildSkuDisplayTags(params: {
+  assetProfile?: SkuAssetProfileDisplaySource | null
+  legacyAttributes?: Record<string, string> | null
+}): string[] {
+  const profileTags = [
+    params.assetProfile?.specName,
+    params.assetProfile?.color,
+    params.assetProfile?.material,
+  ]
+    .map((item) => item?.trim())
+    .filter((item): item is string => Boolean(item))
+
+  if (profileTags.length > 0) {
+    return Array.from(new Set(profileTags))
+  }
+
+  return Array.from(new Set(
+    Object.values(params.legacyAttributes ?? {})
+      .map((item) => item.trim())
+      .filter((item) => item.length > 0),
+  ))
+}
diff --git a/furniture-3d-system/src/server/dto/__tests__/sku.dto.test.ts b/furniture-3d-system/src/server/dto/__tests__/sku.dto.test.ts
new file mode 100644
index 00000000..b1b5daf5
--- /dev/null
+++ b/furniture-3d-system/src/server/dto/__tests__/sku.dto.test.ts
@@ -0,0 +1,126 @@
+import { toSKUDetailDTO, toSKUListItemDTO } from '../sku.dto'
+
+const now = new Date('2026-05-30T00:00:00.000Z')
+
+function buildSku(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'sku-1',
+    productId: 'product-1',
+    skuCode: 'DBZ-SPJ00001',
+    name: 'Desk variant',
+    attributes: {
+      skuName: 'Legacy name',
+      assetSkuSnapshot: {
+        barcode: 'OLD-BARCODE',
+      },
+    },
+    price: 199,
+    costPrice: 120,
+    stock: 8,
+    images: ['/images/sku.png'],
+    modelUrl: '/models/sku.glb',
+    ownerId: 'user-1',
+    owner: { id: 'user-1', name: 'Owner', avatar: null },
+    transferHistory: null,
+    isActive: true,
+    sourcePreSkuId: null,
+    sourceAssetVariantId: 'variant-1',
+    sourceAssetVariantIds: ['variant-1'],
+    warehouseLocationId: null,
+    createdAt: now,
+    updatedAt: now,
+    deletedAt: null,
+    assetProfile: {
+      id: 'profile-1',
+      skuId: 'sku-1',
+      primarySourceAssetVariantId: 'variant-1',
+      sourceAssetVariantIds: ['variant-1'],
+      sourceAssetFamilyId: 'family-1',
+      sourceAssetSeriesId: 'series-1',
+      model: 'DBZ-SPJK001',
+      modelName: 'Desk',
+      specCode: 'DBZ-SPJ00001',
+      specName: '1200 teak',
+      barcode: 'DBZ-SPJ00001N05V01',
+      size: { width: 1200 },
+      color: 'teak',
+      material: 'wood',
+      imageUrl: '/images/profile.png',
+      sourceStatus: 'ACTIVE',
+      syncedAt: now,
+      lockedFields: ['color'],
+      lockedReasons: {},
+      sourceVariants: [],
+      createdAt: now,
+      updatedAt: now,
+    },
+    ...overrides,
+  }
+}
+
+describe('sku dto truth-source boundary', () => {
+  it('returns structure-first list dto and keeps legacy JSON clearly named', () => {
+    const dto = toSKUListItemDTO({
+      ...buildSku(),
+      product: { name: 'Product', modelNumber: 'MODEL-1' },
+    } as Parameters<typeof toSKUListItemDTO>[0])
+
+    expect(dto).toMatchObject({
+      skuCode: 'DBZ-SPJ00001',
+      name: 'Desk variant',
+      legacyAttributes: expect.objectContaining({ skuName: 'Legacy name' }),
+      assetProfile: expect.objectContaining({
+        specCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+      }),
+      displayTags: ['1200 teak', 'teak', 'wood'],
+    })
+    expect('attributes' in dto).toBe(false)
+  })
+
+  it('returns structure-first detail dto and does not expose attributes as the contract name', () => {
+    const dto = toSKUDetailDTO({
+      ...buildSku(),
+      product: {
+        id: 'product-1',
+        modelNumber: 'MODEL-1',
+        name: 'Product',
+        modelUrl: '/models/product.glb',
+        category: { id: 'category-1', name: 'Category' },
+      },
+    } as Parameters<typeof toSKUDetailDTO>[0])
+
+    expect(dto.name).toBe('Desk variant')
+    expect(dto.assetProfile?.specName).toBe('1200 teak')
+    expect(dto.displayTags).toEqual(['1200 teak', 'teak', 'wood'])
+    expect(dto.legacyAttributes?.skuName).toBe('Legacy name')
+    expect('attributes' in dto).toBe(false)
+  })
+
+  it('filters internal JSON evidence from legacy display attributes', () => {
+    const dto = toSKUDetailDTO({
+      ...buildSku({
+        assetProfile: null,
+        attributes: {
+          skuName: 'Legacy name',
+          _skuCadData: { nodes: ['internal'] },
+          _cadExcludedHoles: ['hole-1'],
+          assetSkuSnapshot: { barcode: 'internal-barcode' },
+          numberValue: 1,
+        },
+      }),
+      product: {
+        id: 'product-1',
+        modelNumber: 'MODEL-1',
+        name: 'Product',
+        modelUrl: '/models/product.glb',
+        category: null,
+      },
+    } as Parameters<typeof toSKUDetailDTO>[0])
+
+    expect(dto.legacyAttributes).toEqual({ skuName: 'Legacy name' })
+    expect(JSON.stringify(dto)).not.toContain('_skuCadData')
+    expect(JSON.stringify(dto)).not.toContain('assetSkuSnapshot')
+    expect(dto.displayTags).toEqual(['Legacy name'])
+  })
+})
diff --git a/furniture-3d-system/src/server/repositories/__tests__/product-upload.repository.test.ts b/furniture-3d-system/src/server/repositories/__tests__/product-upload.repository.test.ts
new file mode 100644
index 00000000..7ac891c8
--- /dev/null
+++ b/furniture-3d-system/src/server/repositories/__tests__/product-upload.repository.test.ts
@@ -0,0 +1,66 @@
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    product: {
+      findUnique: jest.fn(),
+    },
+    productCategory: {
+      findFirst: jest.fn(),
+    },
+    $transaction: jest.fn(),
+  },
+}))
+
+import { prisma } from '@/lib/prisma'
+import { ProductUploadRepository } from '../product-upload.repository'
+
+describe('ProductUploadRepository master data guards', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('上传链创建 SKU 时不让 attributes.skuName 反写结构化名称', async () => {
+    const productSKUCreate = jest.fn().mockResolvedValue({ id: 'sku-1', skuCode: 'MODEL-01' })
+    jest.mocked(prisma.$transaction).mockImplementation(async (callback) =>
+      callback({
+        product: {
+          create: jest.fn().mockResolvedValue({ id: 'product-1' }),
+        },
+        productSKU: {
+          create: productSKUCreate,
+        },
+        panel: {
+          createMany: jest.fn(),
+          findMany: jest.fn().mockResolvedValue([]),
+        },
+      }),
+    )
+
+    const repository = new ProductUploadRepository()
+    await repository.createUploadedProduct({
+      modelNumber: 'MODEL',
+      name: '模型产品',
+      visibility: 'TEAM',
+      modelUrl: '/uploads/models/model.glb',
+      thumbnailUrl: null,
+      createdBy: 'user-1',
+      panels: [],
+      skuCode: 'MODEL-01',
+      skuAttributes: {
+        skuName: '旧 JSON 名称',
+        fileName: 'model.glb',
+      },
+    })
+
+    expect(productSKUCreate).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          skuCode: 'MODEL-01',
+          name: 'MODEL-01',
+          attributes: expect.objectContaining({
+            skuName: '旧 JSON 名称',
+          }),
+        }),
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/src/server/repositories/sku-quality-inspection.repository.ts b/furniture-3d-system/src/server/repositories/sku-quality-inspection.repository.ts
index f2df1946..9ed0ca79 100644
--- a/furniture-3d-system/src/server/repositories/sku-quality-inspection.repository.ts
+++ b/furniture-3d-system/src/server/repositories/sku-quality-inspection.repository.ts
@@ -1,4 +1,10 @@
-import { Prisma, ProductSKU, ProductSkuQualityInspection } from '@prisma/client'
+import {
+  Prisma,
+  ProductSKU,
+  ProductSkuAssetProfile,
+  ProductSkuQualityInspection,
+} from '@prisma/client'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { prisma } from '@/lib/prisma'
 
 type FormalProductSourceInput = {
@@ -12,12 +18,14 @@ type FormalSkuSourceInput = {
   productId: string
   skuCode: string
   attributes: Prisma.InputJsonValue
+  assetProfile: Prisma.ProductSkuAssetProfileCreateWithoutSkuInput
   images: string[]
   modelUrl?: string | null
   ownerId: string
 }
 
 export type SkuQualityArchiveRecord = ProductSKU & {
+  assetProfile: ProductSkuAssetProfile | null
   product: {
     id: string
     name: string
@@ -49,6 +57,7 @@ export type SkuQualityInspectionRecordWithSku = ProductSkuQualityInspection & {
 class SkuQualityInspectionRepositoryClass {
   async findSkuArchives(search?: string): Promise<SkuQualityArchiveRecord[]> {
     const normalizedSearch = search?.trim()
+    const normalizedIdentity = normalizeCoreIdentity(normalizedSearch)
     const where: Prisma.ProductSKUWhereInput = {
       deletedAt: null,
       isActive: true,
@@ -66,18 +75,8 @@ class SkuQualityInspectionRepositoryClass {
                   modelNumber: { contains: normalizedSearch, mode: 'insensitive' },
                 },
               },
-              {
-                attributes: {
-                  path: ['barcode'],
-                  equals: normalizedSearch,
-                },
-              },
-              {
-                attributes: {
-                  path: ['assetSkuSnapshot', 'barcode'],
-                  equals: normalizedSearch,
-                },
-              },
+              { assetProfile: { is: { barcode: normalizedIdentity } } },
+              { assetProfile: { is: { specCode: normalizedIdentity } } },
             ],
           }
         : {}),
@@ -94,6 +93,7 @@ class SkuQualityInspectionRepositoryClass {
             modelNumber: true,
           },
         },
+        assetProfile: true,
         warehouseLocation: {
           select: {
             id: true,
@@ -139,13 +139,13 @@ class SkuQualityInspectionRepositoryClass {
     barcode?: string | null
   }) {
     const skuCodes = Array.from(
-      new Set(input.skuCodes.map((code) => code.trim()).filter(Boolean)),
+      new Set(input.skuCodes.map((code) => normalizeCoreIdentity(code)).filter(Boolean)),
     )
 
-    for (const skuCode of skuCodes) {
+    for (const normalizedSkuCode of skuCodes) {
       const sku = await prisma.productSKU.findFirst({
         where: {
-          skuCode,
+          skuCode: normalizedSkuCode,
           deletedAt: null,
           isActive: true,
         },
@@ -153,31 +153,16 @@ class SkuQualityInspectionRepositoryClass {
       if (sku) return sku
     }
 
-    const barcode = input.barcode?.trim()
-    if (!barcode) return null
+    const normalizedBarcode = normalizeCoreIdentity(input.barcode)
+    if (!normalizedBarcode) return null
 
-    return (
-      (await prisma.productSKU.findFirst({
-        where: {
-          deletedAt: null,
-          isActive: true,
-          attributes: {
-            path: ['assetSkuSnapshot', 'barcode'],
-            equals: barcode,
-          },
-        },
-      })) ??
-      (await prisma.productSKU.findFirst({
-        where: {
-          deletedAt: null,
-          isActive: true,
-          attributes: {
-            path: ['barcode'],
-            equals: barcode,
-          },
-        },
-      }))
-    )
+    return prisma.productSKU.findFirst({
+      where: {
+        deletedAt: null,
+        isActive: true,
+        assetProfile: { is: { barcode: normalizedBarcode } },
+      },
+    })
   }
 
   async findActiveOwnerCandidate(preferredUserId?: string | null) {
@@ -222,8 +207,9 @@ class SkuQualityInspectionRepositoryClass {
   }
 
   async findProductByModelNumber(modelNumber: string) {
+    const normalizedModelNumber = normalizeCoreIdentity(modelNumber)
     return prisma.product.findUnique({
-      where: { modelNumber },
+      where: { modelNumber: normalizedModelNumber },
       select: {
         id: true,
         name: true,
@@ -261,7 +247,7 @@ class SkuQualityInspectionRepositoryClass {
 
     return prisma.product.create({
       data: {
-        modelNumber: input.modelNumber,
+        modelNumber: normalizeCoreIdentity(input.modelNumber),
         name: input.name,
         thumbnailUrl: input.thumbnailUrl ?? null,
         visibility: 'TEAM',
@@ -282,6 +268,9 @@ class SkuQualityInspectionRepositoryClass {
           productId: input.productId,
           skuCode: input.skuCode,
           attributes: input.attributes,
+          assetProfile: {
+            create: input.assetProfile,
+          },
           price: 0,
           costPrice: null,
           stock: 0,
diff --git a/furniture-3d-system/src/server/services/__tests__/approval-workflow.service.test.ts b/furniture-3d-system/src/server/services/__tests__/approval-workflow.service.test.ts
new file mode 100644
index 00000000..e536cb52
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/approval-workflow.service.test.ts
@@ -0,0 +1,346 @@
+import { Prisma } from '@prisma/client'
+import { ErrorCode } from '@/server/core/errors'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    approvalWorkflow: {
+      create: jest.fn(),
+      findUnique: jest.fn(),
+      findMany: jest.fn(),
+      update: jest.fn(),
+    },
+    approvalWorkflowFieldChange: {
+      create: jest.fn(),
+    },
+    activityLog: {
+      create: jest.fn(),
+    },
+    $transaction: jest.fn(),
+  },
+}))
+
+jest.mock('@/lib/role-scope', () => ({
+  canCreateContent: jest.fn(() => true),
+}))
+
+jest.mock('@/app/intake/non-integrated/nonIntegratedStorage', () => ({
+  getNonIntegratedFormalSpu: jest.fn(() => ''),
+  normalizeNonIntegratedOpeningReference: jest.fn((value) => ({
+    temporaryCode: value?.temporaryCode ?? '',
+    productName: value?.productName ?? '',
+    productImage: value?.productImage ?? '',
+    reason: value?.reason ?? '',
+  })),
+  normalizeNonIntegratedProductRecord: jest.fn((value) => value ?? null),
+}))
+
+import { prisma } from '@/lib/prisma'
+import { approvalWorkflowService } from '../approval-workflow.service'
+
+describe('approvalWorkflowService', () => {
+  const mockedPrisma = jest.mocked(prisma)
+  const currentUser = {
+    id: 'user-1',
+    email: 'planner@example.com',
+    name: '企划',
+    role: 'USER' as const,
+    businessRoles: ['PLANNING'] as const,
+    status: 'ACTIVE' as const,
+  }
+
+  function workflowRecord(overrides: Record<string, unknown> = {}) {
+    return {
+      id: 'workflow-1',
+      approvalNumber: 'KK202605001',
+      title: '开品审批',
+      status: 'DRAFT',
+      productId: 'product-1',
+      accessKey: 'access-1',
+      businessRoles: ['PLANNING'],
+      participantUserIds: [],
+      initiatorId: 'user-1',
+      lastSyncedAt: null,
+      fieldMatrix: null,
+      summary: {},
+      metadata: null,
+      product: {
+        id: 'product-1',
+        spu: 'SPU001',
+        payload: {
+          openingReference: {
+            temporaryCode: 'KK202605001',
+            productName: '开品',
+            reason: '',
+            productImage: '',
+          },
+        },
+        profile: {
+          productName: '开品',
+          productImageUrl: null,
+        },
+      },
+      initiator: {
+        id: 'user-1',
+        name: '企划',
+        role: 'USER',
+      },
+      createdAt: new Date('2026-05-01T00:00:00.000Z'),
+      updatedAt: new Date('2026-05-01T00:00:00.000Z'),
+      ...overrides,
+    }
+  }
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockedPrisma.$transaction.mockImplementation(async (callback: any) => callback(mockedPrisma))
+  })
+
+  it('create 会规范化审批编号、标题和参与人，并拒绝重复空参与人进入数据库', async () => {
+    mockedPrisma.approvalWorkflow.create.mockResolvedValue({ id: 'workflow-1' } as never)
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(workflowRecord() as never)
+
+    await approvalWorkflowService.create(
+      {
+        approvalNumber: ' kk202605001 ',
+        title: ' 开品审批 ',
+        productId: ' product-1 ',
+        participantUserIds: [' user-2 ', '', 'user-2', 'user-3'],
+        summary: { referenceOverview: '已确认' },
+        metadata: { source: 'test' },
+      },
+      currentUser,
+    )
+
+    expect(mockedPrisma.approvalWorkflow.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        approvalNumber: 'KK202605001',
+        title: '开品审批',
+        productId: 'product-1',
+        participantUserIds: ['user-2', 'user-3'],
+      }),
+    })
+  })
+
+  it('create 拒绝空标题、空编号和非对象摘要', async () => {
+    await expect(
+      approvalWorkflowService.create(
+        {
+          approvalNumber: ' ',
+          title: '审批',
+          productId: 'product-1',
+        },
+        currentUser,
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    await expect(
+      approvalWorkflowService.create(
+        {
+          approvalNumber: 'KK202605001',
+          title: ' ',
+          productId: 'product-1',
+        },
+        currentUser,
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    await expect(
+      approvalWorkflowService.create(
+        {
+          approvalNumber: 'KK202605001',
+          title: '审批',
+          productId: 'product-1',
+          summary: ['bad'] as unknown as Prisma.InputJsonValue,
+        },
+        currentUser,
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+  })
+
+  it('getByApprovalNumber 使用同一套编号规范化查询', async () => {
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(workflowRecord() as never)
+
+    await approvalWorkflowService.getByApprovalNumber(' kk202605001 ')
+
+    expect(mockedPrisma.approvalWorkflow.findUnique).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { approvalNumber: 'KK202605001' },
+      }),
+    )
+  })
+
+  it('审批产品身份优先读取结构化列和 profile，存在 profile 时不再用旧 payload 补产品资料', async () => {
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(
+      workflowRecord({
+        product: {
+          id: 'product-structured',
+          spu: 'STRUCTURED-SPU',
+          payload: {
+            id: 'payload-product',
+            spu: 'LEGACY-SPU',
+            openingReference: {
+              temporaryCode: 'LEGACY-TEMP',
+              productName: '旧开品名称',
+              productImage: '/legacy.png',
+              reason: '旧开品说明',
+            },
+          },
+          profile: {
+            productName: '结构化产品名称',
+            productImageUrl: '/structured.png',
+          },
+        },
+      }) as never,
+    )
+
+    const workflow = await approvalWorkflowService.getByApprovalNumber('KK202605001')
+
+    expect(workflow.product).toEqual(
+      expect.objectContaining({
+        id: 'product-structured',
+        modelNumber: 'STRUCTURED-SPU',
+        name: '结构化产品名称',
+        thumbnailUrl: '/structured.png',
+        description: null,
+      }),
+    )
+  })
+
+  it('审批产品缺少结构化 profile 时才读取旧 payload 作为历史兼容展示', async () => {
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(
+      workflowRecord({
+        product: {
+          id: 'product-legacy',
+          spu: '',
+          payload: {
+            openingReference: {
+              temporaryCode: 'LEGACY-TEMP',
+              productName: '旧开品名称',
+              productImage: '/legacy.png',
+              reason: '旧开品说明',
+            },
+            previewImage: '/legacy-preview.png',
+          },
+          profile: null,
+        },
+      }) as never,
+    )
+
+    const workflow = await approvalWorkflowService.getByApprovalNumber('KK202605001')
+
+    expect(workflow.product).toEqual(
+      expect.objectContaining({
+        id: 'product-legacy',
+        modelNumber: 'LEGACY-TEMP',
+        name: '旧开品名称',
+        thumbnailUrl: '/legacy.png',
+        description: '旧开品说明',
+      }),
+    )
+  })
+
+  it('updateField 会规范化字段 key 和来源，并过滤非法 editableStatuses', async () => {
+    mockedPrisma.approvalWorkflow.findUnique
+      .mockResolvedValueOnce(workflowRecord({
+        businessRoles: ['PLANNING'],
+        fieldMatrix: [
+          {
+            key: ' referenceOverview ',
+            label: ' 开品参考 ',
+            businessRole: 'PLANNING',
+            editableStatuses: ['DRAFT', 'BROKEN'],
+          },
+        ],
+        summary: {},
+      }) as never)
+      .mockResolvedValueOnce(workflowRecord({
+        summary: { referenceOverview: '已填写' },
+      }) as never)
+
+    await approvalWorkflowService.updateField(
+      ' workflow-1 ',
+      {
+        fieldKey: ' referenceOverview ',
+        value: '已填写',
+        source: ' approval-page ',
+        sourcePage: ' /approval-workflows/access-1 ',
+      },
+      {
+        ...currentUser,
+        businessRoles: ['PLANNING'],
+      },
+    )
+
+    expect(mockedPrisma.approvalWorkflow.update).toHaveBeenCalledWith({
+      where: { id: 'workflow-1' },
+      data: expect.objectContaining({
+        summary: { referenceOverview: '已填写' },
+      }),
+    })
+    expect(mockedPrisma.approvalWorkflowFieldChange.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        workflowId: 'workflow-1',
+        fieldKey: 'referenceOverview',
+        source: 'approval-page',
+        sourcePage: '/approval-workflows/access-1',
+      }),
+    })
+  })
+
+  it('updateField 不从 fieldMatrix 过程快照反推流程访问权限', async () => {
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(
+      workflowRecord({
+        businessRoles: [],
+        participantUserIds: [],
+        fieldMatrix: [
+          {
+            key: 'referenceOverview',
+            label: '开品参考',
+            businessRole: 'PLANNING',
+          },
+        ],
+        summary: {},
+      }) as never,
+    )
+
+    await expect(
+      approvalWorkflowService.updateField(
+        'workflow-1',
+        {
+          fieldKey: 'referenceOverview',
+          value: '已填写',
+        },
+        { ...currentUser, businessRoles: ['PLANNING'] },
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.AUTH_PERMISSION_DENIED })
+
+    expect(mockedPrisma.approvalWorkflow.update).not.toHaveBeenCalled()
+  })
+
+  it('updateField 拒绝空字段 key 和空来源', async () => {
+    mockedPrisma.approvalWorkflow.findUnique.mockResolvedValue(workflowRecord() as never)
+
+    await expect(
+      approvalWorkflowService.updateField(
+        'workflow-1',
+        {
+          fieldKey: ' ',
+          value: 'bad',
+        },
+        { ...currentUser, businessRoles: ['PLANNING'] },
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    await expect(
+      approvalWorkflowService.updateField(
+        'workflow-1',
+        {
+          fieldKey: 'referenceOverview',
+          value: 'bad',
+          source: ' ',
+        },
+        { ...currentUser, businessRoles: ['PLANNING'] },
+      ),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/asset-sku-snapshot.test.ts b/furniture-3d-system/src/server/services/__tests__/asset-sku-snapshot.test.ts
new file mode 100644
index 00000000..2d521d6d
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/asset-sku-snapshot.test.ts
@@ -0,0 +1,84 @@
+import {
+  buildAssetSkuSnapshotFromProfile,
+  buildProductSkuAssetProfileData,
+  type AssetSkuSnapshot,
+} from '../asset-sku-snapshot'
+
+describe('asset-sku-snapshot', () => {
+  it('规范化来源规格款集合并保证主来源包含在来源数组内', () => {
+    const snapshot: AssetSkuSnapshot = {
+      sourceAssetVariantId: ' variant-primary ',
+      sourceAssetFamilyId: 'family-1',
+      sourceAssetSeriesId: 'series-1',
+      model: ' dbz-spjk001 ',
+      modelName: '桌面板',
+      specCode: ' dbz-spj00001 ',
+      specName: '1200 柚木色',
+      barcode: ' dbz-spj00001n05v01 ',
+      size: { length: 1200 },
+      color: '柚木色',
+      material: '颗粒板',
+      imageUrl: '/thumb.webp',
+      sourceStatus: 'ACTIVE',
+      sourceAssetVariantIds: ['variant-secondary', ' variant-secondary ', ''],
+      sourceVariants: [
+        {
+          sourceAssetVariantId: 'variant-secondary',
+          sourceAssetFamilyId: 'family-2',
+          sourceAssetSeriesId: 'series-1',
+          model: 'dbz-spjk002',
+          modelName: '桌腿',
+          specCode: 'dbz-spj00002',
+          specName: '桌腿',
+          barcode: null,
+          size: {},
+          color: null,
+          material: null,
+          imageUrl: null,
+          sourceStatus: 'ACTIVE',
+        },
+      ],
+      syncedAt: '2026-05-31T10:00:00.000Z',
+      lockedFields: [],
+      lockedReasons: {},
+    }
+
+    expect(buildProductSkuAssetProfileData(snapshot)).toEqual(
+      expect.objectContaining({
+        primarySourceAssetVariantId: 'variant-primary',
+        sourceAssetVariantIds: ['variant-primary', 'variant-secondary'],
+        model: 'DBZ-SPJK001',
+        specCode: 'DBZ-SPJ00001',
+        barcode: 'DBZ-SPJ00001N05V01',
+      }),
+    )
+  })
+
+  it('从旧 profile 读取快照时也会补齐主来源到来源数组', () => {
+    const profile = {
+      primarySourceAssetVariantId: 'variant-primary',
+      sourceAssetVariantIds: ['variant-secondary'],
+      sourceAssetFamilyId: 'family-1',
+      sourceAssetSeriesId: 'series-1',
+      model: 'dbz-spjk001',
+      modelName: '桌面板',
+      specCode: 'dbz-spj00001',
+      specName: '1200 柚木色',
+      barcode: null,
+      size: {},
+      color: null,
+      material: null,
+      imageUrl: null,
+      sourceStatus: 'ACTIVE',
+      syncedAt: new Date('2026-05-31T10:00:00.000Z'),
+      lockedFields: [],
+      lockedReasons: {},
+      sourceVariants: [],
+    }
+
+    expect(buildAssetSkuSnapshotFromProfile(profile as never)?.sourceAssetVariantIds).toEqual([
+      'variant-primary',
+      'variant-secondary',
+    ])
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/intake-contract-docx.service.test.ts b/furniture-3d-system/src/server/services/__tests__/intake-contract-docx.service.test.ts
new file mode 100644
index 00000000..4ca2bde4
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/intake-contract-docx.service.test.ts
@@ -0,0 +1,71 @@
+import type { NonIntegratedProductRecord } from '@/app/intake/non-integrated/nonIntegratedStorage'
+import { createIntakeProductFactoryContractDocx } from '../intake-contract-docx.service'
+
+function createProductWithSku(
+  sku: Partial<NonIntegratedProductRecord['skuItems'][number]>,
+): NonIntegratedProductRecord {
+  return {
+    spu: 'DNZ0001',
+    productCode: 'DNZ0001',
+    openingReference: {
+      productName: '默认产品',
+      productCategory: '桌类',
+    },
+    productDevelopmentKind: 'product',
+    skuItems: [
+      {
+        id: 'sku-1',
+        skuSequence: 1,
+        batchNo: 1,
+        packageGroupId: '',
+        packageSuffix: '',
+        image: '',
+        imageName: '',
+        model: 'MODEL-001',
+        skuCode: 'SKU-001',
+        setCount: '1',
+        specName: '默认规格',
+        barcode: 'BAR-001',
+        size: '',
+        color: '',
+        material: '',
+        boardMaterialType: '',
+        versionNo: 'V01',
+        attributeCode: '',
+        drawingId: '',
+        installMethod: '',
+        executeStandard: '',
+        nationalStandardCompliant: '',
+        manufacturer: '',
+        manufacturerCode: '',
+        salesStatus: '',
+        tagMaterial: '',
+        model3dFileName: '',
+        model3dDataUrl: '',
+        source: '',
+        sourceTable: '',
+        sourceSkuId: '',
+        ...sku,
+      },
+    ],
+    factoryRows: [],
+  } as NonIntegratedProductRecord
+}
+
+describe('createIntakeProductFactoryContractDocx', () => {
+  it('rejects incomplete SKU master data before generating formal contracts', async () => {
+    const product = createProductWithSku({
+      skuCode: '',
+      specName: '',
+      model: '',
+    })
+
+    await expect(
+      createIntakeProductFactoryContractDocx({
+        product,
+        contractType: 'monthly',
+        batch: 'all',
+      }),
+    ).rejects.toThrow('产品定厂合同存在未补齐的 SKU 主数据')
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/intake-reference-library.service.test.ts b/furniture-3d-system/src/server/services/__tests__/intake-reference-library.service.test.ts
new file mode 100644
index 00000000..8e6ad0c8
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/intake-reference-library.service.test.ts
@@ -0,0 +1,318 @@
+import { prisma } from '@/lib/prisma'
+import { intakeReferenceLibraryService } from '../intake-reference-library.service'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    intakeReferenceLibraryItem: {
+      findMany: jest.fn(),
+      deleteMany: jest.fn(),
+      upsert: jest.fn(),
+    },
+    $transaction: jest.fn(),
+  },
+}))
+
+const mockedPrisma = jest.mocked(prisma)
+
+function createLibraryRow(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'PACKAGING_MATERIAL-A001',
+    libraryType: 'PACKAGING_MATERIAL',
+    itemKey: 'A001',
+    code: 'A001',
+    name: '纸箱',
+    category: '包装材料',
+    letter: 'A',
+    payload: { price: '1.2' },
+    sortOrder: 0,
+    isActive: true,
+    createdBy: 'user-1',
+    updatedBy: 'user-1',
+    createdAt: new Date('2026-05-30T10:00:00.000Z'),
+    updatedAt: new Date('2026-05-30T10:00:00.000Z'),
+    ...overrides,
+  }
+}
+
+describe('IntakeReferenceLibraryService', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockedPrisma.$transaction.mockImplementation(async (callback) =>
+      callback({
+        intakeReferenceLibraryItem: {
+          deleteMany: mockedPrisma.intakeReferenceLibraryItem.deleteMany,
+          upsert: mockedPrisma.intakeReferenceLibraryItem.upsert,
+        },
+      } as never),
+    )
+    mockedPrisma.intakeReferenceLibraryItem.findMany.mockResolvedValue([createLibraryRow()] as never)
+  })
+
+  it('replaceAll 使用数据库事务保存资料库条目，而不是浏览器本地缓存', async () => {
+    const result = await intakeReferenceLibraryService.replaceAll({
+      libraryType: 'PACKAGING_MATERIAL',
+      userId: 'user-1',
+      items: [
+        {
+          id: 'packaging-material-A001',
+          itemKey: 'A001',
+          code: 'A001',
+          name: '纸箱',
+          category: '包装材料',
+          letter: 'A',
+          payload: { price: '1.2' },
+        },
+      ],
+    })
+
+    expect(mockedPrisma.$transaction).toHaveBeenCalled()
+    expect(mockedPrisma.intakeReferenceLibraryItem.deleteMany).toHaveBeenCalledWith({
+      where: {
+        libraryType: 'PACKAGING_MATERIAL',
+        itemKey: { notIn: ['A001'] },
+      },
+    })
+    expect(mockedPrisma.intakeReferenceLibraryItem.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: {
+          libraryType_itemKey: {
+            libraryType: 'PACKAGING_MATERIAL',
+            itemKey: 'A001',
+          },
+        },
+        create: expect.objectContaining({
+          id: 'packaging-material-A001',
+          libraryType: 'PACKAGING_MATERIAL',
+          itemKey: 'A001',
+          code: 'A001',
+          name: '纸箱',
+          createdBy: 'user-1',
+        }),
+        update: expect.objectContaining({
+          code: 'A001',
+          name: '纸箱',
+          updatedBy: 'user-1',
+        }),
+      }),
+    )
+    expect(result[0]).toEqual(expect.objectContaining({
+      libraryType: 'PACKAGING_MATERIAL',
+      itemKey: 'A001',
+      code: 'A001',
+      name: '纸箱',
+    }))
+  })
+
+  it('replaceAll 拒绝同一资料库内重复编码，避免服务端继续制造脏数据', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'ACCESSORY',
+        items: [
+          { itemKey: 'screw-a', code: 'A001', name: '螺丝 A' },
+          { itemKey: 'screw-b', code: 'A001', name: '螺丝 B' },
+        ],
+      }),
+    ).rejects.toThrow('资料库记录 code 重复')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+
+  it('replaceAll 拒绝用列表顺序兜底 itemKey，避免资料身份漂移', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'ACCESSORY',
+        items: [
+          { name: '缺少稳定身份的配件' },
+        ],
+      }),
+    ).rejects.toThrow('缺少 itemKey/code')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+
+  it('replaceAll 不允许用数据库 id 兜底业务身份，避免前端临时 id 变成资料主键', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'ACCESSORY',
+        items: [
+          { id: 'temporary-client-id', name: '临时配件' },
+        ],
+      }),
+    ).rejects.toThrow('缺少 itemKey/code')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+
+  it('replaceAll 拒绝只有 itemKey 但缺少 code 的资料行', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'ACCESSORY',
+        items: [
+          { itemKey: 'ACC001', name: '缺少编码的配件' },
+        ],
+      }),
+    ).rejects.toThrow('缺少 code')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+
+  it('replaceAll 缺少 itemKey 时只允许用稳定 code 兜底业务身份', async () => {
+    await intakeReferenceLibraryService.replaceAll({
+      libraryType: 'ACCESSORY',
+      userId: 'user-1',
+      items: [
+        { id: 'database-row-id', code: ' acc001 ', name: '配件 A' },
+      ],
+    })
+
+    expect(mockedPrisma.intakeReferenceLibraryItem.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: {
+          libraryType_itemKey: {
+            libraryType: 'ACCESSORY',
+            itemKey: 'ACC001',
+          },
+        },
+        create: expect.objectContaining({
+          id: 'database-row-id',
+          itemKey: 'ACC001',
+          code: 'ACC001',
+          name: '配件 A',
+        }),
+      }),
+    )
+  })
+
+  it('replaceAll 保存资料库时用结构化列覆盖 payload 里的旧身份字段', async () => {
+    await intakeReferenceLibraryService.replaceAll({
+      libraryType: 'ACCESSORY',
+      userId: 'user-1',
+      items: [
+        {
+          itemKey: 'ACC001',
+          code: 'ACC001',
+          name: '结构化螺丝',
+          category: '螺丝',
+          letter: 'A',
+          payload: {
+            kind: 'ACCESSORY',
+            item: {
+              id: 'legacy-payload-id',
+              code: 'OLD001',
+              name: '旧 payload 螺丝',
+              letter: 'Z',
+              price: '0.12',
+            },
+          },
+        },
+      ],
+    })
+
+    expect(mockedPrisma.intakeReferenceLibraryItem.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        create: expect.objectContaining({
+          code: 'ACC001',
+          name: '结构化螺丝',
+          letter: 'A',
+          payload: expect.objectContaining({
+            kind: 'ACCESSORY',
+            item: expect.objectContaining({
+              id: 'ACC001',
+              code: 'ACC001',
+              name: '结构化螺丝',
+              letter: 'A',
+              price: '0.12',
+            }),
+          }),
+        }),
+      }),
+    )
+  })
+
+  it('SPU_RULE 必须有产品品类和有效号段前缀', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'SPU_RULE',
+        items: [
+          { itemKey: '餐桌', code: '12', name: '餐桌' },
+        ],
+      }),
+    ).rejects.toThrow('SPU 规则号段前缀无效')
+
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'SPU_RULE',
+        items: [
+          { itemKey: '餐桌', code: 'CZ', name: '' },
+        ],
+      }),
+    ).rejects.toThrow('SPU 规则缺少产品品类名称')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+
+  it('SPU_RULE 保存时用结构化 code/name 规范化 payload，并拒绝重复产品品类', async () => {
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'SPU_RULE',
+        items: [
+          { itemKey: '餐桌-a', code: 'CZA', name: '餐桌' },
+          { itemKey: '餐桌-b', code: 'CZB', name: '餐桌' },
+        ],
+      }),
+    ).rejects.toThrow('SPU 规则产品品类重复')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+
+    await expect(
+      intakeReferenceLibraryService.replaceAll({
+        libraryType: 'SPU_RULE',
+        items: [
+          { itemKey: 'desk-a', code: 'DSA', name: 'Desk' },
+          { itemKey: 'desk-b', code: 'DSB', name: ' desk ' },
+        ],
+      }),
+    ).rejects.toThrow('SPU 规则产品品类重复')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+
+    await intakeReferenceLibraryService.replaceAll({
+      libraryType: 'SPU_RULE',
+      userId: 'user-1',
+      items: [
+        {
+          itemKey: '餐桌',
+          code: 'CZ',
+          name: '餐桌',
+          payload: {
+            kind: 'SPU_RULE',
+            rule: {
+              id: 'legacy-rule',
+              productCategory: '旧品类',
+              categoryCode: 'OLD',
+              spuIndex: 7,
+            },
+          },
+        },
+      ],
+    })
+
+    expect(mockedPrisma.intakeReferenceLibraryItem.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        create: expect.objectContaining({
+          code: 'CZ',
+          name: '餐桌',
+          payload: expect.objectContaining({
+            kind: 'SPU_RULE',
+            rule: expect.objectContaining({
+              id: '餐桌',
+              productCategory: '餐桌',
+              categoryCode: 'CZ',
+              spuIndex: 7,
+            }),
+          }),
+        }),
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/jst-sku-stock-sync.service.test.ts b/furniture-3d-system/src/server/services/__tests__/jst-sku-stock-sync.service.test.ts
new file mode 100644
index 00000000..9edc3269
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/jst-sku-stock-sync.service.test.ts
@@ -0,0 +1,378 @@
+import mysql from 'mysql2/promise'
+import { prisma } from '@/lib/prisma'
+import { syncJstSkuStockProducts } from '../jst-sku-stock-sync.service'
+
+jest.mock('mysql2/promise', () => ({
+  __esModule: true,
+  default: {
+    createConnection: jest.fn(),
+  },
+}))
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    intakeNonIntegratedProduct: {
+      findUnique: jest.fn(),
+      findFirst: jest.fn(),
+      create: jest.fn(),
+      update: jest.fn(),
+    },
+  },
+}))
+
+const mockedMysql = jest.mocked(mysql)
+const mockedPrisma = jest.mocked(prisma)
+
+type MockConnection = {
+  query: jest.Mock
+  execute: jest.Mock
+  end: jest.Mock
+}
+
+const sourceColumns = [
+  'sku_id',
+  'i_id',
+  'name',
+  'properties_value',
+  'category',
+  'item_type',
+  'enabled',
+  'stock_disabled',
+  'other_5',
+  'other_7',
+  'other_8',
+  'other_9',
+  'other_10',
+  'pic',
+  'pic_big',
+].map((Field) => ({ Field }))
+
+function createConnectionMock(row: Record<string, unknown>) {
+  const connection: MockConnection = {
+    query: jest.fn().mockResolvedValue([sourceColumns]),
+    execute: jest
+      .fn()
+      .mockResolvedValueOnce([[{ source_spu: row.i_id }]])
+      .mockResolvedValueOnce([[{ __source_spu: row.i_id, ...row }]]),
+    end: jest.fn().mockResolvedValue(undefined),
+  }
+  mockedMysql.createConnection.mockResolvedValue(connection as never)
+  return connection
+}
+
+function createSourceRow(overrides: Record<string, unknown> = {}) {
+  return {
+    sku_id: 'BAR001',
+    i_id: 'SPU001',
+    name: '测试存量商品 1200*600*750',
+    properties_value: '柚木色',
+    category: '桌类',
+    item_type: '成品',
+    enabled: '1',
+    stock_disabled: '0',
+    other_5: '销售',
+    other_7: 'SPJ00001',
+    other_8: '1',
+    other_9: 'DRAW-001',
+    other_10: '颗粒板',
+    pic: '',
+    pic_big: 'https://cdn.example.com/stock-a.jpg',
+    ...overrides,
+  }
+}
+
+function createExistingPayload(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'jst-stock-existing',
+    productDevelopmentKind: 'product',
+    spu: 'SPU001',
+    projectStatus: 'approved',
+    openingReference: {
+      productImage: 'https://cdn.example.com/old.jpg',
+      productImageName: 'old.jpg',
+      productName: '旧存量商品',
+      temporaryCode: 'SPU001',
+      brand: '基本盘',
+      adaptableBrands: ['基本盘'],
+      productCategory: '',
+      salesCategory: '',
+      designer: '',
+      planningOwner: '',
+      structureDesigner: '',
+      currentStage: '存量商品',
+      year: '',
+      competitorLink: '',
+      targetPriceBand: '',
+      size: '1000*500*700',
+      material: '旧材质',
+      urgent: '',
+      reason: '',
+    },
+    brand: '基本盘',
+    adaptableBrands: ['基本盘'],
+    designer: '',
+    operator: '',
+    purchaser: '',
+    previewImage: 'https://cdn.example.com/old.jpg',
+    previewImageName: 'old.jpg',
+    year: '',
+    demandFlowNo: '',
+    processTemplate: '存量商品',
+    productCategory: '',
+    salesCategory: '',
+    productPlanning: '',
+    demandDepartment: '',
+    spuOwner: '',
+    operationsOwner: '',
+    purchaseOwner: '',
+    goodsType: '',
+    materialType: '旧材质',
+    productionType: '',
+    visualDirector: '',
+    priceBand: '',
+    visualPlanning: '',
+    size: '1000*500*700',
+    color: '旧颜色',
+    material: '旧材质',
+    installMethod: '',
+    installSteps: '',
+    tagMaterial: '',
+    packageDetail: '',
+    craftDetail: '',
+    styleDetails: [],
+    bomDetails: [],
+    reviewSheet: {
+      productName: '旧存量商品',
+      productImage: 'https://cdn.example.com/old.jpg',
+      productImageName: 'old.jpg',
+      size: '1000*500*700',
+      material: '旧材质',
+      barcode: 'OLD-BAR',
+      color: '旧颜色',
+      issues: [],
+    },
+    reviewSheets: [],
+    qualityInspectionSheet: { rows: [] },
+    productCode: 'SPU001',
+    skuItems: [
+      {
+        id: 'jst-stock-sku-old',
+        skuSequence: 1,
+        batchNo: 1,
+        packageGroupId: '',
+        packageSuffix: '',
+        image: 'https://cdn.example.com/old.jpg',
+        imageName: 'old.jpg',
+        model: '',
+        skuCode: 'OLD-SPJ',
+        setCount: '1',
+        specName: '旧存量商品',
+        barcode: 'BAR001',
+        size: '1000*500*700',
+        color: '旧颜色',
+        material: '旧材质',
+        boardMaterialType: '',
+        versionNo: 'V01',
+        attributeCode: '',
+        drawingId: '',
+        installMethod: '',
+        executeStandard: '',
+        nationalStandardCompliant: '',
+        manufacturer: '',
+        manufacturerCode: '',
+        salesStatus: '销售',
+        tagMaterial: '',
+        model3dFileName: '',
+        model3dDataUrl: '',
+        componentDetails: [],
+        source: 'jst_sku',
+        sourceTable: 'jst_sku',
+        sourceSkuId: 'BAR001',
+      },
+    ],
+    skuBatchCount: 1,
+    uploadFiles: [],
+    documentWorkspaceConfirmations: {},
+    documentWorkspaceApprovedAt: {},
+    createdAt: '2026-05-30T10:00:00.000Z',
+    updatedAt: '2026-05-30T10:00:00.000Z',
+    source: 'jst_sku',
+    sourceTable: 'jst_sku',
+    importSource: 'jst_sku',
+    externalSource: 'jst_sku',
+    metadata: {
+      source: 'jst_sku',
+      sourceTable: 'jst_sku',
+      sourceSpu: 'SPU001',
+    },
+    ...overrides,
+  }
+}
+
+describe('syncJstSkuStockProducts', () => {
+  const originalDatabaseUrl = process.env.JST_SKU_DATABASE_URL
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+    process.env.JST_SKU_DATABASE_URL = 'mysql://user:pass@example.com:3306/source'
+    mockedPrisma.intakeNonIntegratedProduct.findUnique.mockResolvedValue(null)
+    mockedPrisma.intakeNonIntegratedProduct.findFirst.mockResolvedValue(null)
+    mockedPrisma.intakeNonIntegratedProduct.create.mockResolvedValue({ id: 'created' } as never)
+    mockedPrisma.intakeNonIntegratedProduct.update.mockResolvedValue({ id: 'updated' } as never)
+  })
+
+  afterAll(() => {
+    if (originalDatabaseUrl === undefined) {
+      delete process.env.JST_SKU_DATABASE_URL
+    } else {
+      process.env.JST_SKU_DATABASE_URL = originalDatabaseUrl
+    }
+  })
+
+  it('apply 创建存量商品时同时写入产品 profile 和结构化 SKU 明细', async () => {
+    const connection = createConnectionMock(
+      createSourceRow({
+        sku_id: 'bar001',
+        other_7: 'spj00001',
+      }),
+    )
+
+    const result = await syncJstSkuStockProducts({ apply: true, batchSize: 1, limit: 1 })
+
+    expect(result.created).toBe(1)
+    expect(connection.end).toHaveBeenCalled()
+    expect(mockedPrisma.intakeNonIntegratedProduct.findFirst).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({
+          OR: expect.arrayContaining([
+            { spu: 'SPU001' },
+            { profile: { is: { sourceSpu: 'SPU001' } } },
+          ]),
+        }),
+      }),
+    )
+    expect(
+      JSON.stringify(mockedPrisma.intakeNonIntegratedProduct.findFirst.mock.calls[0]?.[0]?.where),
+    ).not.toContain('payload')
+    expect(mockedPrisma.intakeNonIntegratedProduct.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          payload: expect.objectContaining({
+            source: 'jst_sku',
+            skuItems: expect.arrayContaining([
+              expect.objectContaining({
+                barcode: 'BAR001',
+                skuCode: 'SPJ00001',
+                sourceTable: 'jst_sku',
+              }),
+            ]),
+          }),
+          profile: {
+            create: expect.objectContaining({
+              productName: '测试存量商品 1200*600*750',
+              productImageUrl: 'https://cdn.example.com/stock-a.jpg',
+              productDevelopmentKind: 'product',
+              materialType: '颗粒板',
+              sourceSpu: 'SPU001',
+              sourceSkuId: 'BAR001',
+              sourceCategory: '桌类',
+              sourceItemType: '成品',
+              sourceSalesStatus: '销售',
+              sourceEnabled: '1',
+              sourceStockDisabled: '0',
+              stockSkuCount: 1,
+              stockHasOnSaleSku: true,
+              source: 'PAYLOAD_SYNC',
+            }),
+          },
+          skuItems: {
+            createMany: {
+              data: expect.arrayContaining([
+                expect.objectContaining({
+                  skuCode: 'SPJ00001',
+                  specName: '测试存量商品 1200*600*750',
+                  barcode: 'BAR001',
+                  sourceTable: 'jst_sku',
+                }),
+              ]),
+            },
+          },
+        }),
+      }),
+    )
+  })
+
+  it('apply 更新存量商品时 upsert 产品 profile 并刷新结构化 SKU 明细', async () => {
+    createConnectionMock(createSourceRow({ name: '更新后的存量商品 1200*600*750' }))
+    mockedPrisma.intakeNonIntegratedProduct.findUnique.mockResolvedValue({
+      id: 'jst-stock-existing',
+      spu: 'SPU001',
+      payload: createExistingPayload(),
+      deletedAt: null,
+    } as never)
+
+    const result = await syncJstSkuStockProducts({ apply: true, batchSize: 1, limit: 1 })
+
+    expect(result.updated).toBe(1)
+    expect(mockedPrisma.intakeNonIntegratedProduct.update).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'jst-stock-existing' },
+        data: expect.objectContaining({
+          profile: {
+            upsert: {
+              create: expect.objectContaining({
+                productName: '更新后的存量商品 1200*600*750',
+                materialType: '颗粒板',
+                sourceSpu: 'SPU001',
+                sourceSkuId: 'BAR001',
+              }),
+              update: expect.objectContaining({
+                productName: '更新后的存量商品 1200*600*750',
+                materialType: '颗粒板',
+                sourceSpu: 'SPU001',
+                sourceSkuId: 'BAR001',
+              }),
+            },
+          },
+          skuItems: {
+            deleteMany: {},
+            createMany: {
+              data: expect.arrayContaining([
+                expect.objectContaining({
+                  barcode: 'BAR001',
+                  skuCode: 'SPJ00001',
+                  sourceTable: 'jst_sku',
+                }),
+              ]),
+            },
+          },
+        }),
+      }),
+    )
+  })
+
+  it('来源分类变为排除项时软删除产品并清空结构化 SKU 明细', async () => {
+    createConnectionMock(createSourceRow({ category: '其他 - 配件' }))
+    mockedPrisma.intakeNonIntegratedProduct.findUnique.mockResolvedValue({
+      id: 'jst-stock-existing',
+      spu: 'SPU001',
+      payload: createExistingPayload(),
+      deletedAt: null,
+    } as never)
+
+    const result = await syncJstSkuStockProducts({ apply: true, batchSize: 1, limit: 1 })
+
+    expect(result.updated).toBe(1)
+    expect(mockedPrisma.intakeNonIntegratedProduct.update).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'jst-stock-existing' },
+        data: expect.objectContaining({
+          deletedAt: expect.any(Date),
+          skuItems: {
+            deleteMany: {},
+          },
+        }),
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/panel-validation.service.test.ts b/furniture-3d-system/src/server/services/__tests__/panel-validation.service.test.ts
new file mode 100644
index 00000000..05dc039c
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/panel-validation.service.test.ts
@@ -0,0 +1,85 @@
+import { ErrorCode } from '@/server/core/errors'
+import { PanelValidationService } from '../panel-validation.service'
+
+describe('PanelValidationService foundation guards', () => {
+  const service = new PanelValidationService()
+
+  it('创建板件时规范化编号和可缺文本，并要求尺寸有效', () => {
+    const result = service.normalizeCreateInput({
+      code: '  p-001  ',
+      name: '  左侧板  ',
+      gltfNodeName: '  node_left  ',
+      partType: '   ',
+      length: 1200,
+      width: 450,
+      thickness: 18,
+      explosionDirection: 'up',
+    })
+
+    expect(result).toMatchObject({
+      code: 'P-001',
+      name: '左侧板',
+      gltfNodeName: 'node_left',
+      partType: undefined,
+      materialId: undefined,
+      length: 1200,
+      width: 450,
+      thickness: 18,
+      explosionDirection: 'up',
+    })
+  })
+
+  it('板件尺寸必须大于 0', () => {
+    expect(() =>
+      service.normalizeCreateInput({
+        code: 'P-002',
+        name: '顶板',
+        gltfNodeName: 'node_top',
+        length: 0,
+        width: 450,
+        thickness: 18,
+      }),
+    ).toThrow(expect.objectContaining({ code: ErrorCode.VALIDATION_FAILED }))
+  })
+
+  it('同批导入 normalized code 重复时直接拒绝', () => {
+    expect(() =>
+      service.normalizeImportItems([
+        {
+          code: 'p-003',
+          name: '顶板',
+          gltfNodeName: 'node_top',
+          length: 1200,
+          width: 450,
+          thickness: 18,
+        },
+        {
+          code: ' P-003 ',
+          name: '底板',
+          gltfNodeName: 'node_bottom',
+          length: 1200,
+          width: 450,
+          thickness: 18,
+        },
+      ]),
+    ).toThrow(expect.objectContaining({ code: ErrorCode.VALIDATION_FAILED }))
+  })
+
+  it('板件材质绑定 ID 会被规范化，空值不会写成空字符串', () => {
+    const createResult = service.normalizeCreateInput({
+      code: 'P-004',
+      name: '层板',
+      gltfNodeName: 'node_shelf',
+      length: 800,
+      width: 300,
+      thickness: 18,
+      materialId: ' material-1 ',
+    })
+    const updateResult = service.normalizeUpdateInput({
+      materialId: '   ',
+    })
+
+    expect(createResult.materialId).toBe('material-1')
+    expect(updateResult.materialId).toBeNull()
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/product-hardware.service.test.ts b/furniture-3d-system/src/server/services/__tests__/product-hardware.service.test.ts
new file mode 100644
index 00000000..402cfebb
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/product-hardware.service.test.ts
@@ -0,0 +1,107 @@
+import { ErrorCode } from '@/server/core/errors'
+import { hardwareRepository } from '@/server/repositories/hardware.repository'
+import { panelRepository } from '@/server/repositories/panel.repository'
+import { productRepository } from '@/server/repositories/product.repository'
+import { productHardwareRepository } from '@/server/repositories/product-hardware.repository'
+import { ProductHardwareService } from '../product-hardware.service'
+
+jest.mock('@/server/repositories/hardware.repository', () => ({
+  hardwareRepository: {
+    findById: jest.fn(),
+  },
+}))
+
+jest.mock('@/server/repositories/panel.repository', () => ({
+  panelRepository: {
+    findById: jest.fn(),
+  },
+}))
+
+jest.mock('@/server/repositories/product.repository', () => ({
+  productRepository: {
+    findByIdForCollaborators: jest.fn(),
+  },
+}))
+
+jest.mock('@/server/repositories/product-hardware.repository', () => ({
+  productHardwareRepository: {
+    findById: jest.fn(),
+    findByIdWithRelations: jest.fn(),
+    updateWithRelations: jest.fn(),
+    delete: jest.fn(),
+  },
+}))
+
+describe('ProductHardwareService foundation guards', () => {
+  const service = new ProductHardwareService()
+  const user = {
+    id: 'creator-1',
+    email: 'creator@test.com',
+    name: '创建者',
+    role: 'USER',
+    status: 'ACTIVE',
+    businessRoles: ['DESIGN'],
+  } as any
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+    ;(productHardwareRepository.findById as jest.Mock).mockResolvedValue({
+      id: 'product-hardware-1',
+      productId: 'product-1',
+    })
+    ;(productRepository.findByIdForCollaborators as jest.Mock).mockResolvedValue({
+      id: 'product-1',
+      createdBy: 'creator-1',
+      departmentId: null,
+      collaboratorUsers: [],
+      creator: null,
+      deletedAt: null,
+    })
+  })
+
+  it('非法匹配状态会在服务层拒绝，不写入 repository', async () => {
+    await expect(
+      service.update('product-hardware-1', { matchStatus: 'done' as never }, { user }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    expect(productHardwareRepository.updateWithRelations).not.toHaveBeenCalled()
+  })
+
+  it('匹配置信度必须在 0 到 1 之间', async () => {
+    await expect(
+      service.update('product-hardware-1', { matchConfidence: 1.2 }, { user }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    expect(productHardwareRepository.updateWithRelations).not.toHaveBeenCalled()
+  })
+
+  it('安装序号必须是非负整数', async () => {
+    await expect(
+      service.update('product-hardware-1', { installOrder: -1 }, { user }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    expect(productHardwareRepository.updateWithRelations).not.toHaveBeenCalled()
+  })
+
+  it('空字符串五金和匹配方式会规范为清空，不查找空五金 ID', async () => {
+    ;(productHardwareRepository.updateWithRelations as jest.Mock).mockResolvedValue({
+      id: 'product-hardware-1',
+    })
+
+    await service.update(
+      'product-hardware-1',
+      { hardwareId: '   ', matchMethod: '   ' as never },
+      { user },
+    )
+
+    expect(hardwareRepository.findById).not.toHaveBeenCalled()
+    expect(panelRepository.findById).not.toHaveBeenCalled()
+    expect(productHardwareRepository.updateWithRelations).toHaveBeenCalledWith(
+      'product-hardware-1',
+      expect.objectContaining({
+        hardware: { disconnect: true },
+        matchMethod: null,
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/product-patent.service.test.ts b/furniture-3d-system/src/server/services/__tests__/product-patent.service.test.ts
new file mode 100644
index 00000000..0e241ebb
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/product-patent.service.test.ts
@@ -0,0 +1,212 @@
+import { prisma } from '@/lib/prisma'
+import { productPatentService } from '../product-patent.service'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    productPatentRecord: {
+      findMany: jest.fn(),
+      deleteMany: jest.fn(),
+      upsert: jest.fn(),
+    },
+    $transaction: jest.fn(),
+  },
+}))
+
+const mockedPrisma = jest.mocked(prisma)
+
+function createPatentRecord(overrides: Record<string, unknown> = {}) {
+  return {
+    id: 'patent-1',
+    patentGroupKey: 'SPU001',
+    productId: 'product-1',
+    linkedProductIds: ['product-1'],
+    linkedProductNames: ['测试产品'],
+    linkedSpus: ['SPU001'],
+    linkedBrands: ['基本盘'],
+    productDisplayName: '测试产品',
+    productImage: '/image.jpg',
+    productImageName: 'image.jpg',
+    patentStatus: '已有专利',
+    patentType: '外观设计',
+    patentName: '测试产品外观专利',
+    spu: 'SPU001',
+    saRequired: '否',
+    salesStatus: '在售',
+    designer: '设计师',
+    applicationNo: 'APP001',
+    patentNo: 'ZL001',
+    applicationDate: '2026-05-01',
+    authorizationDate: '2026-05-10',
+    firstFeeDate: '2026-05-12',
+    annualFees: { 第1年: '已缴' },
+    annualFeeDates: { 第1年: '2026-05-12' },
+    nextFeeDueDate: '2027-05-12',
+    feeAmount: '100',
+    patentCertificateFileName: 'certificate.pdf',
+    patentCertificateFileUrl: '/api/assets/certificate.pdf',
+    patentCertificateFileMimeType: 'application/pdf',
+    patentCertificateStorageKey: 'certificate.pdf',
+    annualFeeNote: '已缴首年',
+    continueDecision: '继续缴费',
+    decisionReason: '',
+    owner: '采购',
+    remark: '',
+    createdAt: '2026-05-30T10:00:00.000Z',
+    updatedAt: '2026-05-30T10:00:00.000Z',
+    ...overrides,
+  }
+}
+
+describe('ProductPatentService', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockedPrisma.$transaction.mockImplementation(async (callback) =>
+      callback({
+        productPatentRecord: {
+          deleteMany: mockedPrisma.productPatentRecord.deleteMany,
+          upsert: mockedPrisma.productPatentRecord.upsert,
+        },
+      } as never),
+    )
+    mockedPrisma.productPatentRecord.findMany.mockResolvedValue([
+      {
+        ...createPatentRecord(),
+        productImage: '/image.jpg',
+        patentCertificateFileUrl: '/api/assets/certificate.pdf',
+        sortOrder: 0,
+        createdAt: new Date('2026-05-30T10:00:00.000Z'),
+        updatedAt: new Date('2026-05-30T10:00:00.000Z'),
+      },
+    ] as never)
+  })
+
+  it('replaceAll 使用数据库事务保存专利台账，而不是浏览器本地缓存', async () => {
+    const records = [
+      createPatentRecord({ id: 'patent-1', patentGroupKey: 'SPU001' }),
+      createPatentRecord({ id: 'patent-2', patentGroupKey: 'SPU002', productId: 'product-2' }),
+    ]
+
+    await productPatentService.replaceAll(records)
+
+    expect(mockedPrisma.$transaction).toHaveBeenCalled()
+    expect(mockedPrisma.productPatentRecord.deleteMany).toHaveBeenCalledWith({
+      where: {
+        id: {
+          notIn: ['patent-1', 'patent-2'],
+        },
+      },
+    })
+    expect(mockedPrisma.productPatentRecord.upsert).toHaveBeenNthCalledWith(
+      1,
+      expect.objectContaining({
+        where: { id: 'patent-1' },
+        create: expect.objectContaining({
+          id: 'patent-1',
+          patentGroupKey: 'SPU001',
+          patentName: '测试产品外观专利',
+          annualFees: expect.objectContaining({ 第1年: '已缴' }),
+          sortOrder: 0,
+        }),
+        update: expect.objectContaining({
+          patentGroupKey: 'SPU001',
+          patentName: '测试产品外观专利',
+          annualFees: expect.objectContaining({ 第1年: '已缴' }),
+          sortOrder: 0,
+        }),
+      }),
+    )
+    expect(mockedPrisma.productPatentRecord.upsert).toHaveBeenNthCalledWith(
+      2,
+      expect.objectContaining({
+        where: { id: 'patent-2' },
+        create: expect.objectContaining({
+          id: 'patent-2',
+          patentGroupKey: 'SPU002',
+          productId: 'product-2',
+          sortOrder: 1,
+        }),
+      }),
+    )
+  })
+
+  it('replaceAll 保存前统一规范化关键身份字段', async () => {
+    await productPatentService.replaceAll([
+      createPatentRecord({
+        id: ' patent-1 ',
+        patentGroupKey: ' spu001 ',
+        linkedSpus: [' spu001 ', 'SPU001'],
+        applicationNo: ' app001 ',
+        patentNo: ' zl001 ',
+        spu: ' spu001 ',
+      }),
+    ])
+
+    expect(mockedPrisma.productPatentRecord.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'patent-1' },
+        create: expect.objectContaining({
+          id: 'patent-1',
+          patentGroupKey: 'SPU001',
+          linkedSpus: ['SPU001'],
+          applicationNo: 'APP001',
+          patentNo: 'ZL001',
+          spu: 'SPU001',
+        }),
+      }),
+    )
+  })
+
+  it('replaceAll 保存前把临时随机 id 收敛为专利分组稳定 id', async () => {
+    await productPatentService.replaceAll([
+      createPatentRecord({
+        id: 'patent-1770000000000-abc123',
+        patentGroupKey: ' spu001 ',
+      }),
+    ])
+
+    expect(mockedPrisma.productPatentRecord.deleteMany).toHaveBeenCalledWith({
+      where: {
+        id: {
+          notIn: ['product-patent-group-SPU001'],
+        },
+      },
+    })
+    expect(mockedPrisma.productPatentRecord.upsert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'product-patent-group-SPU001' },
+        create: expect.objectContaining({
+          id: 'product-patent-group-SPU001',
+          patentGroupKey: 'SPU001',
+        }),
+      }),
+    )
+  })
+
+  it('replaceAll 遇到缺少关键身份字段的记录时阻断保存，不能静默丢行', async () => {
+    await expect(
+      productPatentService.replaceAll([
+        createPatentRecord({
+          id: 'patent-without-identity',
+          patentName: '',
+          applicationNo: '',
+          patentNo: '',
+        }),
+      ]),
+    ).rejects.toThrow('缺少专利名称、申请号或专利号')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+    expect(mockedPrisma.productPatentRecord.deleteMany).not.toHaveBeenCalled()
+    expect(mockedPrisma.productPatentRecord.upsert).not.toHaveBeenCalled()
+  })
+
+  it('replaceAll 阻断重复专利分组，避免一个分组被多行表达', async () => {
+    await expect(
+      productPatentService.replaceAll([
+        createPatentRecord({ id: 'patent-1', patentGroupKey: 'spu001' }),
+        createPatentRecord({ id: 'patent-2', patentGroupKey: ' SPU001 ' }),
+      ]),
+    ).rejects.toThrow('专利台账分组重复：SPU001')
+
+    expect(mockedPrisma.$transaction).not.toHaveBeenCalled()
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/sku-cad-import.helper.test.ts b/furniture-3d-system/src/server/services/__tests__/sku-cad-import.helper.test.ts
new file mode 100644
index 00000000..0b27f874
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/sku-cad-import.helper.test.ts
@@ -0,0 +1,79 @@
+import { createSkuWithImportedHolesTx } from '../sku-cad-import.helper'
+
+describe('createSkuWithImportedHolesTx', () => {
+  function buildTxMock() {
+    return {
+      productSKU: {
+        create: jest.fn().mockResolvedValue({ id: 'sku-created' }),
+      },
+      productHardware: {
+        deleteMany: jest.fn().mockResolvedValue({ count: 0 }),
+      },
+      hole: {
+        deleteMany: jest.fn().mockResolvedValue({ count: 0 }),
+      },
+      panel: {
+        deleteMany: jest.fn().mockResolvedValue({ count: 0 }),
+      },
+    }
+  }
+
+  const baseInput = {
+    productId: 'product-1',
+    skuCode: 'SKU-CAD-001',
+    attributes: {
+      skuName: '旧 JSON 名称',
+      color: 'black',
+    },
+    price: 99,
+    costPrice: null,
+    stock: 0,
+    modelUrl: null,
+    images: [],
+    cadVersion: 'v1',
+    cadPanels: [],
+    cadHoles: [],
+    cadSourceData: null,
+  }
+
+  it('未显式传 name 时使用 skuCode，不让 attributes.skuName 反写结构化名称', async () => {
+    const tx = buildTxMock()
+
+    await createSkuWithImportedHolesTx({
+      tx: tx as never,
+      ownerId: 'user-1',
+      input: baseInput,
+    })
+
+    expect(tx.productSKU.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          skuCode: 'SKU-CAD-001',
+          name: 'SKU-CAD-001',
+        }),
+      }),
+    )
+  })
+
+  it('显式传 name 时使用结构化 name', async () => {
+    const tx = buildTxMock()
+
+    await createSkuWithImportedHolesTx({
+      tx: tx as never,
+      ownerId: 'user-1',
+      input: {
+        ...baseInput,
+        name: '  结构化 SKU 名称  ',
+      },
+    })
+
+    expect(tx.productSKU.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        data: expect.objectContaining({
+          skuCode: 'SKU-CAD-001',
+          name: '结构化 SKU 名称',
+        }),
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/sku-query.service.test.ts b/furniture-3d-system/src/server/services/__tests__/sku-query.service.test.ts
new file mode 100644
index 00000000..fc55d4d9
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/sku-query.service.test.ts
@@ -0,0 +1,67 @@
+import { Prisma } from '@prisma/client'
+import type { CacheService } from '@/server/cache'
+import { SKUQueryService } from '../sku-query.service'
+import type { SKURepositoryClass } from '@/server/repositories/sku.repository'
+import type { SKUServiceContext } from '../sku.service.types'
+
+describe('SKUQueryService', () => {
+  const user: SKUServiceContext['user'] = {
+    id: 'user-1',
+    email: 'user@example.com',
+    name: '测试用户',
+    role: 'ADMIN',
+    status: 'ACTIVE',
+  }
+
+  function createService(records: unknown[]) {
+    const repository = {
+      findDeleted: jest.fn().mockResolvedValue(records),
+    } as unknown as SKURepositoryClass
+    const cache = {
+      get: jest.fn(),
+      set: jest.fn(),
+    } as unknown as CacheService
+
+    return {
+      service: new SKUQueryService(repository, cache),
+      repository,
+    }
+  }
+
+  it('删除态 SKU 契约只输出 legacyAttributes，不暴露裸 attributes 和内部快照', async () => {
+    const { service } = createService([
+      {
+        id: 'sku-1',
+        skuCode: 'DBZ-SPJ00001__deleted__1770000000000_sku-1',
+        originalSkuCode: 'DBZ-SPJ00001',
+        deletedAt: new Date('2026-05-30T00:00:00.000Z'),
+        price: new Prisma.Decimal(199),
+        attributes: {
+          skuName: '旧款展示名',
+          color: '柚木色',
+          numberValue: 1,
+          _originalSkuCode: 'DBZ-SPJ00001',
+          _skuCadData: { nodes: ['internal'] },
+          assetSkuSnapshot: { barcode: 'internal-barcode' },
+        },
+        owner: { id: 'user-1', name: '测试用户', avatar: null },
+        product: { id: 'product-1', name: '单板桌', modelNumber: 'DBZ-SPJK001' },
+      },
+    ])
+
+    const result = await service.getDeletedSKUs({ user })
+
+    expect(result).toHaveLength(1)
+    expect(result[0]).toMatchObject({
+      skuCode: 'DBZ-SPJ00001',
+      legacyAttributes: {
+        skuName: '旧款展示名',
+        color: '柚木色',
+      },
+    })
+    expect(result[0]).not.toHaveProperty('attributes')
+    expect(JSON.stringify(result[0])).not.toContain('_skuCadData')
+    expect(JSON.stringify(result[0])).not.toContain('assetSkuSnapshot')
+    expect(JSON.stringify(result[0])).not.toContain('numberValue')
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/sku-soft-delete.helper.test.ts b/furniture-3d-system/src/server/services/__tests__/sku-soft-delete.helper.test.ts
new file mode 100644
index 00000000..3ef05a56
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/sku-soft-delete.helper.test.ts
@@ -0,0 +1,215 @@
+import { prisma } from '@/lib/prisma'
+import {
+  buildRestoreSkuUpdateData,
+  buildSoftDeleteSkuUpdateData,
+  buildDeletedSkuCode,
+  getRestorableSkuCode,
+  readDeletedSkuDisplayState,
+  releaseSkuCodeFromDeletedRecords,
+} from '../sku-soft-delete.helper'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    productSKU: {
+      findMany: jest.fn(),
+      update: jest.fn(),
+    },
+  },
+}))
+
+const productSKU = prisma.productSKU as unknown as {
+  findMany: jest.Mock
+  update: jest.Mock
+}
+
+describe('sku-soft-delete.helper', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('能从删除态编码恢复原始 SKU 编码', () => {
+    expect(getRestorableSkuCode('SKU-001__deleted__1770000000000_abcdefgh')).toBe(
+      'SKU-001',
+    )
+  })
+
+  it('优先使用结构化原始 SKU 编码', () => {
+    expect(
+      getRestorableSkuCode('SKU-001__deleted__1770000000000_abcdefgh', 'SKU-RESTORE'),
+    ).toBe('SKU-RESTORE')
+  })
+
+  it('恢复原始 SKU 编码时会统一去空格并大写', () => {
+    expect(
+      getRestorableSkuCode('sku-001__deleted__1770000000000_abcdefgh', '  sku-restore  '),
+    ).toBe('SKU-RESTORE')
+  })
+
+  it('软删除更新数据把生命周期身份写入结构化字段并清理旧 attributes 元数据', () => {
+    const deletedAt = new Date('2026-05-31T09:00:00.000Z')
+
+    expect(
+      buildSoftDeleteSkuUpdateData(
+        {
+          id: 'sku-record-abcdefghi',
+          skuCode: 'sku-003',
+          deletedAt: null,
+          originalSkuCode: null,
+          attributes: {
+            _originalSkuCode: 'legacy-code',
+            _deletedCodeAt: '2026-05-30T00:00:00.000Z',
+            color: 'black',
+          },
+        },
+        deletedAt,
+      ),
+    ).toEqual({
+      deletedAt,
+      skuCode: buildDeletedSkuCode('SKU-003', 'sku-record-abcdefghi', deletedAt),
+      originalSkuCode: 'SKU-003',
+      deletedCodeAt: deletedAt,
+      attributes: {
+        color: 'black',
+      },
+    })
+  })
+
+  it('恢复更新数据会清空结构化生命周期字段和旧 attributes 元数据', () => {
+    expect(
+      buildRestoreSkuUpdateData({
+        skuCode: 'SKU-004__deleted__1770000000000_abcdefgh',
+        originalSkuCode: 'SKU-004',
+        attributes: {
+          _originalSkuCode: 'SKU-004',
+          _deletedByProductId: 'product-1',
+          color: 'white',
+        },
+      }),
+    ).toEqual({
+      skuCode: 'SKU-004',
+      originalSkuCode: null,
+      deletedCodeAt: null,
+      deletedByProductId: null,
+      productDeletedAt: null,
+      attributes: {
+        color: 'white',
+      },
+    })
+  })
+
+  it('删除态展示只返回结构化原始编码并过滤旧 attributes 生命周期元数据', () => {
+    expect(
+      readDeletedSkuDisplayState({
+        skuCode: 'SKU-005__deleted__1770000000000_abcdefgh',
+        originalSkuCode: ' sku-restore ',
+        attributes: {
+          _originalSkuCode: 'SKU-OLD',
+          _deletedCodeAt: '2026-05-30T00:00:00.000Z',
+          _deletedByProductId: 'product-1',
+          _productDeletedAt: '2026-05-30T00:00:00.000Z',
+          color: 'walnut',
+        },
+      }),
+    ).toEqual({
+      skuCode: 'SKU-RESTORE',
+      attributes: {
+        color: 'walnut',
+      },
+    })
+  })
+
+  it('释放已带墓碑标记的删除态 SKU 时不会重复追加墓碑', async () => {
+    const deletedAt = new Date('2026-05-31T10:00:00.000Z')
+    productSKU.findMany.mockResolvedValue([
+      {
+        id: 'sku-record-123456789',
+        skuCode: 'SKU-001__deleted__1760000000000_oldmark',
+        attributes: {
+          _originalSkuCode: 'SKU-001',
+          color: 'black',
+        },
+        deletedAt,
+        originalSkuCode: 'SKU-001',
+        deletedCodeAt: deletedAt,
+      },
+    ])
+
+    await releaseSkuCodeFromDeletedRecords('SKU-001')
+
+    expect(productSKU.findMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({
+          OR: [
+            { skuCode: { equals: 'SKU-001', mode: 'insensitive' } },
+            {
+              skuCode: {
+                startsWith: 'SKU-001__deleted__',
+                mode: 'insensitive',
+              },
+            },
+          ],
+        }),
+      }),
+    )
+    expect(productSKU.update).toHaveBeenCalledWith({
+      where: { id: 'sku-record-123456789' },
+      data: {
+        skuCode: buildDeletedSkuCode('SKU-001', 'sku-record-123456789', deletedAt),
+        originalSkuCode: 'SKU-001',
+        deletedCodeAt: deletedAt,
+        attributes: {
+          color: 'black',
+        },
+      },
+    })
+    expect(productSKU.update.mock.calls[0][0].data.skuCode.match(/__deleted__/g)).toHaveLength(1)
+  })
+
+  it('保留从编码中恢复出的原始 SKU 编码', async () => {
+    const deletedAt = new Date('2026-05-31T11:00:00.000Z')
+    productSKU.findMany.mockResolvedValue([
+      {
+        id: 'sku-record-222222222',
+        skuCode: 'SKU-002__deleted__1760000000000_oldmark',
+        attributes: {
+          color: 'white',
+        },
+        deletedAt,
+        originalSkuCode: null,
+        deletedCodeAt: null,
+      },
+    ])
+
+    await releaseSkuCodeFromDeletedRecords('SKU-002')
+
+    expect(productSKU.update).toHaveBeenCalledWith({
+      where: { id: 'sku-record-222222222' },
+      data: {
+        skuCode: buildDeletedSkuCode('SKU-002', 'sku-record-222222222', deletedAt),
+        originalSkuCode: 'SKU-002',
+        deletedCodeAt: deletedAt,
+        attributes: {
+          color: 'white',
+        },
+      },
+    })
+  })
+
+  it('不会处理原始编码不匹配的删除态 SKU', async () => {
+    productSKU.findMany.mockResolvedValue([
+      {
+        id: 'sku-record-333333333',
+        skuCode: 'SKU-001__deleted__1760000000000_oldmark',
+        attributes: {
+          _originalSkuCode: 'SKU-OTHER',
+        },
+        deletedAt: new Date('2026-05-31T12:00:00.000Z'),
+        originalSkuCode: 'SKU-OTHER',
+      },
+    ])
+
+    await releaseSkuCodeFromDeletedRecords('SKU-001')
+
+    expect(productSKU.update).not.toHaveBeenCalled()
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/spu-number-reservation.service.test.ts b/furniture-3d-system/src/server/services/__tests__/spu-number-reservation.service.test.ts
new file mode 100644
index 00000000..9c70d98f
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/spu-number-reservation.service.test.ts
@@ -0,0 +1,229 @@
+import { SpuNumberReservationService } from '../spu-number-reservation.service'
+
+function createTxMock() {
+  return {
+    $queryRaw: jest.fn(),
+    $executeRaw: jest.fn().mockResolvedValue(1),
+    intakeReferenceLibraryItem: {
+      findUnique: jest.fn(),
+      update: jest.fn().mockResolvedValue({}),
+    },
+  }
+}
+
+describe('SpuNumberReservationService', () => {
+  it('locks an existing category counter and reserves the next database-safe SPU', async () => {
+    const tx = createTxMock()
+    tx.$queryRaw
+      .mockResolvedValueOnce([
+        {
+          id: 'counter-1',
+          productCategory: '书架',
+          prefix: 'SJ',
+          lastUsedIndex: 12,
+          sourceLibraryItemId: null,
+        },
+      ])
+      .mockResolvedValueOnce([{ maxIndex: 14 }])
+
+    const service = new SpuNumberReservationService()
+    const result = await service.reserveInTransaction(tx as never, {
+      productCategory: '书架',
+      userId: 'user-1',
+    })
+
+    expect(result).toEqual({
+      productCategory: '书架',
+      prefix: 'SJ',
+      index: 15,
+      spu: 'SJ0015',
+    })
+    expect(tx.$executeRaw).toHaveBeenCalledTimes(1)
+  })
+
+  it('normalizes the requested product category before reserving', async () => {
+    const tx = createTxMock()
+    tx.$queryRaw
+      .mockResolvedValueOnce([
+        {
+          id: 'counter-1',
+          productCategory: '书架',
+          prefix: 'SJ',
+          lastUsedIndex: 1,
+          sourceLibraryItemId: null,
+        },
+      ])
+      .mockResolvedValueOnce([{ maxIndex: 1 }])
+
+    const service = new SpuNumberReservationService()
+    const result = await service.reserveInTransaction(tx as never, {
+      productCategory: ' 书架 ',
+      userId: 'user-1',
+    })
+
+    expect(result.productCategory).toBe('书架')
+    expect(result.spu).toBe('SJ0002')
+  })
+
+  it('initializes a counter from SPU_RULE reference-library row before reserving', async () => {
+    const tx = createTxMock()
+    const rulePayload = {
+      kind: 'SPU_RULE',
+      rule: {
+        productCategory: '餐桌',
+        categoryCode: 'CZ',
+        spuIndex: 7,
+      },
+    }
+    tx.$queryRaw
+      .mockResolvedValueOnce([])
+      .mockResolvedValueOnce([
+        {
+          id: 'spu-rule-1',
+          itemKey: '餐桌',
+          code: 'CZ',
+          name: '餐桌',
+          payload: rulePayload,
+        },
+      ])
+      .mockResolvedValueOnce([
+        {
+          id: 'counter-2',
+          productCategory: '餐桌',
+          prefix: 'CZ',
+          lastUsedIndex: 7,
+          sourceLibraryItemId: 'spu-rule-1',
+        },
+      ])
+      .mockResolvedValueOnce([{ maxIndex: 9 }])
+    tx.intakeReferenceLibraryItem.findUnique.mockResolvedValue({
+      id: 'spu-rule-1',
+      payload: rulePayload,
+    })
+
+    const service = new SpuNumberReservationService()
+    const result = await service.reserveInTransaction(tx as never, {
+      productCategory: '餐桌',
+      userId: 'user-1',
+    })
+
+    expect(result.spu).toBe('CZ0010')
+    expect(tx.$executeRaw).toHaveBeenCalledTimes(2)
+    expect(tx.intakeReferenceLibraryItem.update).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { id: 'spu-rule-1' },
+        data: expect.objectContaining({
+          payload: expect.objectContaining({
+            rule: expect.objectContaining({ spuIndex: 10 }),
+          }),
+        }),
+      }),
+    )
+  })
+
+  it('initializes the counter prefix from the structured SPU_RULE code instead of stale payload', async () => {
+    const tx = createTxMock()
+    tx.$queryRaw
+      .mockResolvedValueOnce([])
+      .mockResolvedValueOnce([
+        {
+          id: 'spu-rule-1',
+          itemKey: '餐桌',
+          code: 'CZ',
+          name: '餐桌',
+          payload: {
+            kind: 'SPU_RULE',
+            rule: {
+              productCategory: '餐桌',
+              categoryCode: 'OLD',
+              spuIndex: 7,
+            },
+          },
+        },
+      ])
+      .mockResolvedValueOnce([
+        {
+          id: 'counter-2',
+          productCategory: '餐桌',
+          prefix: 'CZ',
+          lastUsedIndex: 7,
+          sourceLibraryItemId: 'spu-rule-1',
+        },
+      ])
+      .mockResolvedValueOnce([{ maxIndex: 7 }])
+
+    const service = new SpuNumberReservationService()
+    const result = await service.reserveInTransaction(tx as never, {
+      productCategory: '餐桌',
+      userId: 'user-1',
+    })
+
+    expect(result).toMatchObject({
+      prefix: 'CZ',
+      index: 8,
+      spu: 'CZ0008',
+    })
+    expect(String(tx.$executeRaw.mock.calls[0][0])).toContain('INSERT INTO "SpuNumberCounter"')
+  })
+
+  it('uses normalized category semantics when locating SPU_RULE and counter rows', async () => {
+    const tx = createTxMock()
+    tx.$queryRaw
+      .mockResolvedValueOnce([])
+      .mockResolvedValueOnce([
+        {
+          id: 'spu-rule-desk',
+          itemKey: 'Desk',
+          code: 'DBZ',
+          name: 'Desk',
+          payload: {
+            kind: 'SPU_RULE',
+            rule: {
+              productCategory: 'Desk',
+              categoryCode: 'DBZ',
+              spuIndex: 1,
+            },
+          },
+        },
+      ])
+      .mockResolvedValueOnce([
+        {
+          id: 'counter-desk',
+          productCategory: 'Desk',
+          prefix: 'DBZ',
+          lastUsedIndex: 1,
+          sourceLibraryItemId: 'spu-rule-desk',
+        },
+      ])
+      .mockResolvedValueOnce([{ maxIndex: 1 }])
+
+    const service = new SpuNumberReservationService()
+    const result = await service.reserveInTransaction(tx as never, {
+      productCategory: ' desk ',
+      userId: 'user-1',
+    })
+
+    expect(result).toEqual({
+      productCategory: 'Desk',
+      prefix: 'DBZ',
+      index: 2,
+      spu: 'DBZ0002',
+    })
+    expect(String(tx.$queryRaw.mock.calls[0][0])).toContain('lower(btrim("productCategory"))')
+    expect(String(tx.$queryRaw.mock.calls[1][0])).toContain('lower(btrim("name"))')
+    expect(String(tx.$executeRaw.mock.calls[0][0])).toContain('ON CONFLICT DO NOTHING')
+  })
+
+  it('rejects formal reservation when no enabled SPU rule exists for the category', async () => {
+    const tx = createTxMock()
+    tx.$queryRaw.mockResolvedValueOnce([]).mockResolvedValueOnce([])
+
+    const service = new SpuNumberReservationService()
+
+    await expect(
+      service.reserveInTransaction(tx as never, {
+        productCategory: '未知品类',
+      }),
+    ).rejects.toThrow('当前品类还没有配置 SPU 规则')
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/system-provider-config.service.test.ts b/furniture-3d-system/src/server/services/__tests__/system-provider-config.service.test.ts
new file mode 100644
index 00000000..bd0505eb
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/system-provider-config.service.test.ts
@@ -0,0 +1,153 @@
+import { ErrorCode } from '@/server/core/errors'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    systemConfig: {
+      findUnique: jest.fn(),
+      upsert: jest.fn(),
+    },
+    providerConfig: {
+      count: jest.fn(),
+      create: jest.fn(),
+      findMany: jest.fn(),
+      findFirst: jest.fn(),
+      findUnique: jest.fn(),
+      update: jest.fn(),
+      updateMany: jest.fn(),
+      delete: jest.fn(),
+    },
+    $transaction: jest.fn(),
+  },
+}))
+
+import { prisma } from '@/lib/prisma'
+import { providerConfigService } from '../provider-config.service'
+import { systemConfigService } from '../system-config.service'
+
+const mockedPrisma = jest.mocked(prisma)
+
+describe('systemConfigService', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('set 会规范化 key 和 description，并保存 JSON 兼容值', async () => {
+    await systemConfigService.set(' aiRenderApi ', { enabled: true }, '  AI 生图  ')
+
+    expect(mockedPrisma.systemConfig.upsert).toHaveBeenCalledWith({
+      where: { key: 'aiRenderApi' },
+      create: {
+        key: 'aiRenderApi',
+        value: { enabled: true },
+        description: 'AI 生图',
+      },
+      update: {
+        value: { enabled: true },
+        description: 'AI 生图',
+      },
+    })
+  })
+
+  it('set 会拒绝空 key 和不可序列化 JSON', async () => {
+    await expect(systemConfigService.set('  ', { enabled: true })).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_REQUIRED_FIELD,
+    })
+    await expect(systemConfigService.set('bad', BigInt(1))).rejects.toMatchObject({
+      code: ErrorCode.VALIDATION_INVALID_FORMAT,
+    })
+  })
+})
+
+describe('providerConfigService', () => {
+  const providerRecord = {
+    id: 'provider-1',
+    serviceType: 'ai-render',
+    name: '生产',
+    baseUrl: 'https://image.example.com',
+    apiKey: 'secret',
+    model: null,
+    extra: null,
+    isActive: true,
+    sortOrder: 0,
+    createdAt: new Date('2026-05-01T00:00:00.000Z'),
+    updatedAt: new Date('2026-05-01T00:00:00.000Z'),
+  }
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockedPrisma.providerConfig.count.mockResolvedValue(0 as never)
+    mockedPrisma.providerConfig.create.mockResolvedValue(providerRecord as never)
+    mockedPrisma.providerConfig.update.mockResolvedValue(providerRecord as never)
+    mockedPrisma.providerConfig.findUnique.mockResolvedValue(providerRecord as never)
+    mockedPrisma.providerConfig.updateMany.mockResolvedValue({ count: 1 } as never)
+    mockedPrisma.$transaction.mockImplementation(async (operations: unknown) => {
+      if (Array.isArray(operations)) return Promise.all(operations)
+      if (typeof operations === 'function') return operations(mockedPrisma)
+      return operations as never
+    })
+  })
+
+  it('create 会规范化服务类型、名称、地址、密钥和扩展对象', async () => {
+    await providerConfigService.create({
+      serviceType: ' ai-render ',
+      name: ' 生产 ',
+      baseUrl: 'https://image.example.com///',
+      apiKey: ' secret ',
+      model: ' ',
+      extra: { timeout: 30 },
+    })
+
+    expect(mockedPrisma.providerConfig.count).toHaveBeenCalledWith({
+      where: { serviceType: 'ai-render' },
+    })
+    expect(mockedPrisma.providerConfig.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        serviceType: 'ai-render',
+        name: '生产',
+        baseUrl: 'https://image.example.com',
+        apiKey: 'secret',
+        model: null,
+        extra: { timeout: 30 },
+        isActive: true,
+        sortOrder: 0,
+      }),
+    })
+  })
+
+  it('create 会拒绝非法地址和非对象 extra', async () => {
+    await expect(
+      providerConfigService.create({
+        serviceType: 'ai-render',
+        name: '生产',
+        baseUrl: 'ftp://image.example.com',
+        apiKey: 'secret',
+      }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_INVALID_FORMAT })
+
+    await expect(
+      providerConfigService.create({
+        serviceType: 'ai-render',
+        name: '生产',
+        baseUrl: 'https://image.example.com',
+        apiKey: 'secret',
+        extra: [] as unknown as Record<string, unknown>,
+      }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_INVALID_FORMAT })
+  })
+
+  it('activate 会在事务里保证同服务类型只有一个激活配置', async () => {
+    await providerConfigService.activate(' provider-1 ')
+
+    expect(mockedPrisma.providerConfig.findUnique).toHaveBeenCalledWith({
+      where: { id: 'provider-1' },
+    })
+    expect(mockedPrisma.providerConfig.updateMany).toHaveBeenCalledWith({
+      where: { serviceType: 'ai-render', isActive: true },
+      data: { isActive: false },
+    })
+    expect(mockedPrisma.providerConfig.update).toHaveBeenCalledWith({
+      where: { id: 'provider-1' },
+      data: { isActive: true },
+    })
+  })
+})
diff --git a/furniture-3d-system/src/server/services/__tests__/user.service.test.ts b/furniture-3d-system/src/server/services/__tests__/user.service.test.ts
new file mode 100644
index 00000000..bf7ffbe2
--- /dev/null
+++ b/furniture-3d-system/src/server/services/__tests__/user.service.test.ts
@@ -0,0 +1,150 @@
+import { ErrorCode } from '@/server/core/errors'
+
+const mockHashPassword = jest.fn(async () => 'hashed-password')
+const mockValidatePasswordStrength = jest.fn(() => ({ isValid: true, errors: [] }))
+const mockVerifyPassword = jest.fn(async () => true)
+const mockFindById = jest.fn()
+const mockFindByIdWithRelations = jest.fn()
+const mockFindByEmailWithRelations = jest.fn()
+const mockFindByNameWithRelations = jest.fn()
+const mockFindByIdentifier = jest.fn()
+const mockEmailExists = jest.fn()
+const mockNameExists = jest.fn()
+const mockCreateWithScalars = jest.fn()
+const mockUpdateWithScalars = jest.fn()
+const mockDepartmentExistsById = jest.fn()
+
+jest.mock('@/lib/password', () => ({
+  hashPassword: (...args: unknown[]) => mockHashPassword(...args),
+  validatePasswordStrength: (...args: unknown[]) => mockValidatePasswordStrength(...args),
+  verifyPassword: (...args: unknown[]) => mockVerifyPassword(...args),
+}))
+
+jest.mock('../../repositories/user.repository', () => ({
+  userRepository: {
+    findById: (...args: unknown[]) => mockFindById(...args),
+    findByIdWithRelations: (...args: unknown[]) => mockFindByIdWithRelations(...args),
+    findByEmailWithRelations: (...args: unknown[]) => mockFindByEmailWithRelations(...args),
+    findByNameWithRelations: (...args: unknown[]) => mockFindByNameWithRelations(...args),
+    findByIdentifier: (...args: unknown[]) => mockFindByIdentifier(...args),
+    emailExists: (...args: unknown[]) => mockEmailExists(...args),
+    nameExists: (...args: unknown[]) => mockNameExists(...args),
+    createWithScalars: (...args: unknown[]) => mockCreateWithScalars(...args),
+    updateWithScalars: (...args: unknown[]) => mockUpdateWithScalars(...args),
+  },
+}))
+
+jest.mock('../../repositories/department.repository', () => ({
+  departmentRepository: {
+    existsById: (...args: unknown[]) => mockDepartmentExistsById(...args),
+    findAllChildrenIds: jest.fn(),
+  },
+}))
+
+import { userService } from '../user.service'
+
+describe('userService master-data normalization', () => {
+  const userRecord = {
+    id: 'user-1',
+    email: 'buyer@example.com',
+    name: '采购甲',
+    role: 'USER',
+    businessRoles: ['PURCHASING'],
+    status: 'ACTIVE',
+    loginSource: 'LOCAL',
+    employeeDirectoryId: null,
+    employeeDirectory: null,
+    avatar: null,
+    phone: null,
+    departmentId: null,
+    department: null,
+    teamId: null,
+    team: null,
+    createdAt: new Date('2026-05-01T00:00:00.000Z'),
+    lastLoginAt: null,
+  }
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockEmailExists.mockResolvedValue(false)
+    mockNameExists.mockResolvedValue(false)
+    mockDepartmentExistsById.mockResolvedValue(true)
+    mockCreateWithScalars.mockResolvedValue({ id: 'user-1' })
+    mockFindByIdWithRelations.mockResolvedValue(userRecord)
+    mockFindById.mockResolvedValue(userRecord)
+  })
+
+  it('create 会规范化邮箱、姓名、业务类型和可选身份字段', async () => {
+    await userService.create({
+      email: ' Buyer@Example.COM ',
+      name: ' 采购甲 ',
+      password: 'abc12345',
+      businessRoles: ['PURCHASING', 'PURCHASING'],
+      phone: ' 13800000000 ',
+      loginSource: ' LOCAL ',
+      employeeDirectoryId: ' emp-1 ',
+      dingtalkUserId: ' dt-1 ',
+      dingtalkUnionId: ' union-1 ',
+      avatar: ' /avatar.png ',
+      status: 'ACTIVE',
+    })
+
+    expect(mockEmailExists).toHaveBeenCalledWith('buyer@example.com')
+    expect(mockNameExists).toHaveBeenCalledWith('采购甲')
+    expect(mockCreateWithScalars).toHaveBeenCalledWith(expect.objectContaining({
+      email: 'buyer@example.com',
+      name: '采购甲',
+      businessRoles: ['PURCHASING'],
+      phone: '13800000000',
+      loginSource: 'LOCAL',
+      employeeDirectoryId: 'emp-1',
+      dingtalkUserId: 'dt-1',
+      dingtalkUnionId: 'union-1',
+      avatar: '/avatar.png',
+    }))
+  })
+
+  it('update 会用规范化后的邮箱和姓名做冲突检测并落库', async () => {
+    await userService.update('user-1', {
+      email: ' Buyer@Example.COM ',
+      name: ' 采购甲 ',
+      businessRoles: ['DESIGN', 'DESIGN'],
+      phone: ' ',
+      avatar: ' ',
+    })
+
+    expect(mockUpdateWithScalars).toHaveBeenCalledWith('user-1', expect.objectContaining({
+      email: 'buyer@example.com',
+      name: '采购甲',
+      businessRoles: ['DESIGN'],
+      phone: null,
+      avatar: null,
+    }))
+  })
+
+  it('业务类型出现游离值时拒绝写入', async () => {
+    await expect(
+      userService.create({
+        email: 'buyer@example.com',
+        name: '采购甲',
+        password: 'abc12345',
+        businessRoles: ['BROKEN' as never],
+      }),
+    ).rejects.toMatchObject({ code: ErrorCode.VALIDATION_FAILED })
+
+    expect(mockCreateWithScalars).not.toHaveBeenCalled()
+  })
+
+  it('登录邮箱会先规范化再查询', async () => {
+    mockFindByIdentifier.mockResolvedValue({
+      ...userRecord,
+      password: 'hashed-password',
+      status: 'ACTIVE',
+    })
+    mockFindByIdWithRelations.mockResolvedValue(userRecord)
+
+    await userService.verifyCredentials(' Buyer@Example.COM ', 'abc12345')
+
+    expect(mockFindByIdentifier).toHaveBeenCalledWith('buyer@example.com')
+  })
+})
diff --git a/furniture-3d-system/src/server/services/intake-reference-library.service.ts b/furniture-3d-system/src/server/services/intake-reference-library.service.ts
new file mode 100644
index 00000000..29015d19
--- /dev/null
+++ b/furniture-3d-system/src/server/services/intake-reference-library.service.ts
@@ -0,0 +1,340 @@
+import { Prisma } from '@prisma/client'
+import { prisma } from '@/lib/prisma'
+
+export const INTAKE_REFERENCE_LIBRARY_TYPES = [
+  'PACKAGING_MATERIAL',
+  'ACCESSORY',
+  'EDGE_BANDING',
+  'STEEL_FRAME',
+  'SPU_RULE',
+  'ALPHABET_LIBRARY',
+] as const
+
+export type IntakeReferenceLibraryType = (typeof INTAKE_REFERENCE_LIBRARY_TYPES)[number]
+
+const PAYLOAD_IDENTITY_MIRROR_LIBRARY_TYPES = new Set<IntakeReferenceLibraryType>([
+  'PACKAGING_MATERIAL',
+  'ACCESSORY',
+  'ALPHABET_LIBRARY',
+])
+
+export type IntakeReferenceLibraryItemDTO = {
+  id: string
+  libraryType: IntakeReferenceLibraryType
+  itemKey: string
+  code: string
+  name: string
+  category: string
+  letter: string
+  payload: Prisma.JsonValue
+  sortOrder: number
+  isActive: boolean
+  createdBy: string | null
+  updatedBy: string | null
+  createdAt: string
+  updatedAt: string
+}
+
+export type ReplaceIntakeReferenceLibraryInput = {
+  libraryType: string
+  items: unknown[]
+  userId?: string | null
+}
+
+type NormalizedReferenceLibraryItem = {
+  id?: string
+  itemKey: string
+  code: string
+  name: string
+  category: string
+  letter: string
+  payload: Prisma.InputJsonValue
+  sortOrder: number
+  isActive: boolean
+}
+
+function normalizeLibraryType(value: string): IntakeReferenceLibraryType {
+  const normalized = value.trim().toUpperCase()
+  if (!INTAKE_REFERENCE_LIBRARY_TYPES.includes(normalized as IntakeReferenceLibraryType)) {
+    throw new Error(`未知资料库类型：${value}`)
+  }
+  return normalized as IntakeReferenceLibraryType
+}
+
+function readText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizeIdentityText(value: string) {
+  return value.trim().toLowerCase()
+}
+
+function readBoolean(value: unknown, fallback: boolean) {
+  return typeof value === 'boolean' ? value : fallback
+}
+
+function readSortOrder(value: unknown, fallback: number) {
+  return typeof value === 'number' && Number.isFinite(value) ? Math.trunc(value) : fallback
+}
+
+function toJsonPayload(value: unknown): Prisma.InputJsonValue {
+  if (value && typeof value === 'object') {
+    return value as Prisma.InputJsonValue
+  }
+  return {}
+}
+
+function isValidSpuRulePrefix(value: string) {
+  return /^[A-Z][A-Z0-9]*$/.test(value)
+}
+
+function readJsonRecord(value: unknown): Record<string, unknown> {
+  return value && typeof value === 'object' && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : {}
+}
+
+function normalizeSpuRulePayload(input: {
+  rawPayload: unknown
+  itemKey: string
+  code: string
+  name: string
+}): Prisma.InputJsonValue {
+  const payload = readJsonRecord(input.rawPayload)
+  const rule = readJsonRecord(payload.rule)
+  const source = Object.keys(rule).length > 0 ? rule : payload
+
+  return {
+    ...payload,
+    kind: 'SPU_RULE',
+    rule: {
+      ...source,
+      id: input.itemKey,
+      productCategory: input.name,
+      categoryCode: input.code,
+      enabled: readBoolean(source.enabled, true),
+    },
+  }
+}
+
+function normalizePayloadIdentityMirror(
+  payloadInput: Prisma.InputJsonValue,
+  item: Pick<NormalizedReferenceLibraryItem, 'itemKey' | 'code' | 'name' | 'letter'>,
+  libraryType: IntakeReferenceLibraryType,
+): Prisma.InputJsonValue {
+  if (!PAYLOAD_IDENTITY_MIRROR_LIBRARY_TYPES.has(libraryType)) {
+    return payloadInput
+  }
+
+  const payload = readJsonRecord(payloadInput)
+  const nestedItem = readJsonRecord(payload.item)
+  const identityPatch = {
+    id: item.itemKey,
+    code: item.code,
+    name: item.name,
+    letter: item.letter,
+  }
+
+  if (Object.keys(nestedItem).length > 0) {
+    return {
+      ...payload,
+      item: {
+        ...nestedItem,
+        ...identityPatch,
+      },
+    }
+  }
+
+  return {
+    ...payload,
+    ...identityPatch,
+  }
+}
+
+function normalizeItem(
+  rawItem: unknown,
+  index: number,
+  libraryType: IntakeReferenceLibraryType,
+): NormalizedReferenceLibraryItem {
+  if (!rawItem || typeof rawItem !== 'object' || Array.isArray(rawItem)) {
+    throw new Error(`第 ${index + 1} 条资料库记录不是对象`)
+  }
+
+  const item = rawItem as Record<string, unknown>
+  const code = readText(item.code).toUpperCase()
+  const name = readText(item.name)
+  const category = readText(item.category)
+  const letter = readText(item.letter).toUpperCase()
+  const explicitItemKey = readText(item.itemKey)
+  const id = readText(item.id)
+  const itemKey = explicitItemKey || code
+
+  if (!itemKey) {
+    throw new Error(`第 ${index + 1} 条资料库记录缺少 itemKey/code`)
+  }
+  if (!code) {
+    throw new Error(`第 ${index + 1} 条资料库记录缺少 code`)
+  }
+
+  let payload = toJsonPayload(item.payload ?? item)
+
+  if (libraryType === 'SPU_RULE') {
+    if (!name) {
+      throw new Error(`第 ${index + 1} 条 SPU 规则缺少产品品类名称`)
+    }
+    if (!code) {
+      throw new Error(`第 ${index + 1} 条 SPU 规则缺少号段前缀 code`)
+    }
+    if (!isValidSpuRulePrefix(code)) {
+      throw new Error(`第 ${index + 1} 条 SPU 规则号段前缀无效：${code}`)
+    }
+    payload = normalizeSpuRulePayload({
+      rawPayload: item.payload ?? item,
+      itemKey,
+      code,
+      name,
+    })
+  }
+
+  const normalizedItem = {
+    ...(id ? { id } : {}),
+    itemKey,
+    code,
+    name,
+    category,
+    letter,
+    payload,
+    sortOrder: readSortOrder(item.sortOrder, index),
+    isActive: readBoolean(item.isActive, true),
+  }
+
+  return {
+    ...normalizedItem,
+    payload: normalizePayloadIdentityMirror(payload, normalizedItem, libraryType),
+  }
+}
+
+function assertNoDuplicateKeys(
+  items: NormalizedReferenceLibraryItem[],
+  libraryType: IntakeReferenceLibraryType,
+) {
+  const itemKeys = new Set<string>()
+  const codes = new Set<string>()
+  const spuRuleNames = new Set<string>()
+
+  for (const item of items) {
+    const itemKey = item.itemKey.toLowerCase()
+    if (itemKeys.has(itemKey)) {
+      throw new Error(`资料库记录 itemKey 重复：${item.itemKey}`)
+    }
+    itemKeys.add(itemKey)
+
+    const code = item.code.trim().toUpperCase()
+    if (!code) continue
+    if (codes.has(code)) {
+      throw new Error(`资料库记录 code 重复：${item.code}`)
+    }
+    codes.add(code)
+
+    if (libraryType === 'SPU_RULE') {
+      const name = normalizeIdentityText(item.name)
+      if (spuRuleNames.has(name)) {
+        throw new Error(`SPU 规则产品品类重复：${item.name}`)
+      }
+      spuRuleNames.add(name)
+    }
+  }
+}
+
+function toDTO(row: Awaited<ReturnType<typeof prisma.intakeReferenceLibraryItem.findMany>>[number]): IntakeReferenceLibraryItemDTO {
+  return {
+    id: row.id,
+    libraryType: row.libraryType as IntakeReferenceLibraryType,
+    itemKey: row.itemKey,
+    code: row.code,
+    name: row.name,
+    category: row.category,
+    letter: row.letter,
+    payload: row.payload,
+    sortOrder: row.sortOrder,
+    isActive: row.isActive,
+    createdBy: row.createdBy,
+    updatedBy: row.updatedBy,
+    createdAt: row.createdAt.toISOString(),
+    updatedAt: row.updatedAt.toISOString(),
+  }
+}
+
+class IntakeReferenceLibraryService {
+  async list(libraryTypeInput: string): Promise<IntakeReferenceLibraryItemDTO[]> {
+    const libraryType = normalizeLibraryType(libraryTypeInput)
+    const rows = await prisma.intakeReferenceLibraryItem.findMany({
+      where: { libraryType },
+      orderBy: [{ sortOrder: 'asc' }, { code: 'asc' }, { name: 'asc' }, { itemKey: 'asc' }],
+    })
+    return rows.map(toDTO)
+  }
+
+  async replaceAll(input: ReplaceIntakeReferenceLibraryInput): Promise<IntakeReferenceLibraryItemDTO[]> {
+    const libraryType = normalizeLibraryType(input.libraryType)
+    const items = input.items.map((item, index) => normalizeItem(item, index, libraryType))
+    assertNoDuplicateKeys(items, libraryType)
+
+    const itemKeys = items.map((item) => item.itemKey)
+    const userId = input.userId?.trim() || null
+
+    await prisma.$transaction(async (tx) => {
+      if (itemKeys.length > 0) {
+        await tx.intakeReferenceLibraryItem.deleteMany({
+          where: {
+            libraryType,
+            itemKey: { notIn: itemKeys },
+          },
+        })
+      } else {
+        await tx.intakeReferenceLibraryItem.deleteMany({ where: { libraryType } })
+      }
+
+      for (const [index, item] of items.entries()) {
+        const id = item.id || `${libraryType.toLowerCase()}-${item.itemKey}`
+        await tx.intakeReferenceLibraryItem.upsert({
+          where: {
+            libraryType_itemKey: {
+              libraryType,
+              itemKey: item.itemKey,
+            },
+          },
+          create: {
+            id,
+            libraryType,
+            itemKey: item.itemKey,
+            code: item.code,
+            name: item.name,
+            category: item.category,
+            letter: item.letter,
+            payload: item.payload,
+            sortOrder: item.sortOrder ?? index,
+            isActive: item.isActive,
+            createdBy: userId,
+            updatedBy: userId,
+          },
+          update: {
+            code: item.code,
+            name: item.name,
+            category: item.category,
+            letter: item.letter,
+            payload: item.payload,
+            sortOrder: item.sortOrder ?? index,
+            isActive: item.isActive,
+            updatedBy: userId,
+          },
+        })
+      }
+    })
+
+    return this.list(libraryType)
+  }
+}
+
+export const intakeReferenceLibraryService = new IntakeReferenceLibraryService()
+export { IntakeReferenceLibraryService }
diff --git a/furniture-3d-system/src/server/services/non-integrated-sku-quality.ts b/furniture-3d-system/src/server/services/non-integrated-sku-quality.ts
new file mode 100644
index 00000000..2ea5cb2f
--- /dev/null
+++ b/furniture-3d-system/src/server/services/non-integrated-sku-quality.ts
@@ -0,0 +1,152 @@
+import type { NonIntegratedProductRecord } from '@/app/intake/non-integrated/nonIntegratedStorage'
+import { AppError, ErrorCode } from '@/server/core/errors'
+
+export const NON_INTEGRATED_SKU_REQUIRED_FIELDS = [
+  { key: 'skuCode', missingField: 'sku_code', label: 'SKU编码' },
+  { key: 'specName', missingField: 'spec_name', label: '规格名称' },
+  { key: 'model', missingField: 'model', label: '型号' },
+] as const
+
+export const NON_INTEGRATED_PRODUCT_REQUIRED_FIELDS = [
+  { missingField: 'product_name', label: '产品名称' },
+  { missingField: 'product_category', label: '品类' },
+  { missingField: 'product_development_kind', label: '开发类型' },
+] as const
+
+type NonIntegratedSkuItem = NonIntegratedProductRecord['skuItems'][number]
+
+function trimSkuText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function readRecordText(value: unknown, key: string) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return ''
+  return trimSkuText((value as Record<string, unknown>)[key])
+}
+
+function readNonIntegratedProductName(product: Partial<NonIntegratedProductRecord>) {
+  return (
+    readRecordText(product.openingReference, 'productName') ||
+    trimSkuText(product.previewImageName) ||
+    trimSkuText(product.spu)
+  )
+}
+
+function readNonIntegratedProductCategory(product: Partial<NonIntegratedProductRecord>) {
+  return (
+    readRecordText(product.openingReference, 'productCategory') ||
+    trimSkuText(product.productCategory)
+  )
+}
+
+export function resolveNonIntegratedSkuMissingRequiredFields(
+  item: NonIntegratedSkuItem,
+) {
+  return NON_INTEGRATED_SKU_REQUIRED_FIELDS
+    .filter((field) => trimSkuText(item[field.key]).length === 0)
+    .map((field) => field.missingField)
+}
+
+export function resolveNonIntegratedSkuQuality(item: NonIntegratedSkuItem) {
+  const missingRequiredFields = resolveNonIntegratedSkuMissingRequiredFields(item)
+
+  return {
+    dataQualityStatus: missingRequiredFields.length === 0 ? 'READY' : 'INCOMPLETE',
+    missingRequiredFields,
+  } as const
+}
+
+export function resolveNonIntegratedProductMissingRequiredFields(
+  product: Partial<NonIntegratedProductRecord>,
+) {
+  return [
+    readNonIntegratedProductName(product) ? null : 'product_name',
+    readNonIntegratedProductCategory(product) ? null : 'product_category',
+    trimSkuText(product.productDevelopmentKind) ? null : 'product_development_kind',
+  ].filter((item): item is string => Boolean(item))
+}
+
+function describeMissingFields(missingFields: string[]) {
+  const labels = missingFields.map((missingField) => {
+    const field =
+      NON_INTEGRATED_SKU_REQUIRED_FIELDS.find(
+        (item) => item.missingField === missingField,
+      ) ??
+      NON_INTEGRATED_PRODUCT_REQUIRED_FIELDS.find(
+        (item) => item.missingField === missingField,
+      )
+
+    return field?.label ?? missingField
+  })
+  return labels.join('、')
+}
+
+export function assertNonIntegratedProductProfileReadyForFormalUse(
+  product: Partial<NonIntegratedProductRecord>,
+  options: {
+    usageLabel?: string
+  } = {},
+) {
+  const missingFields = resolveNonIntegratedProductMissingRequiredFields(product)
+  if (missingFields.length === 0) return
+
+  throw new AppError(
+    ErrorCode.VALIDATION_REQUIRED_FIELD,
+    `${options.usageLabel ?? '正式流转'}存在未补齐的产品主数据，不能继续：缺少 ${describeMissingFields(
+      missingFields,
+    )}`,
+  )
+}
+
+export function assertNonIntegratedSkuItemsReadyForFormalUse(
+  product: Pick<NonIntegratedProductRecord, 'skuItems'>,
+  options: {
+    batch?: number | 'all'
+    usageLabel?: string
+  } = {},
+) {
+  const batch = options.batch ?? 'all'
+  const targetSkuItems = product.skuItems.filter((item) =>
+    batch === 'all' ? true : (item.batchNo || 1) === batch,
+  )
+  const incompleteItems = targetSkuItems
+    .map((item, index) => ({
+      index,
+      item,
+      missingFields: resolveNonIntegratedSkuMissingRequiredFields(item),
+    }))
+    .filter((entry) => entry.missingFields.length > 0)
+
+  if (incompleteItems.length === 0) {
+    return
+  }
+
+  const sample = incompleteItems
+    .slice(0, 3)
+    .map((entry) => {
+      const rowLabel =
+        trimSkuText(entry.item.skuCode) ||
+        trimSkuText(entry.item.model) ||
+        trimSkuText(entry.item.specName) ||
+        `第 ${entry.index + 1} 行`
+      return `${rowLabel} 缺少 ${describeMissingFields(entry.missingFields)}`
+    })
+    .join('；')
+
+  throw new AppError(
+    ErrorCode.VALIDATION_REQUIRED_FIELD,
+    `${options.usageLabel ?? '正式流转'}存在未补齐的 SKU 主数据，不能继续：${sample}`,
+  )
+}
+
+export function assertNonIntegratedProductMasterDataReadyForFormalUse(
+  product: Partial<NonIntegratedProductRecord> &
+    Pick<NonIntegratedProductRecord, 'skuItems'>,
+  options: {
+    batch?: number | 'all'
+    usageLabel?: string
+  } = {},
+) {
+  assertNonIntegratedProductProfileReadyForFormalUse(product, options)
+  assertNonIntegratedSkuItemsReadyForFormalUse(product, options)
+}
diff --git a/furniture-3d-system/src/server/services/product-patent.service.ts b/furniture-3d-system/src/server/services/product-patent.service.ts
new file mode 100644
index 00000000..32dd6db3
--- /dev/null
+++ b/furniture-3d-system/src/server/services/product-patent.service.ts
@@ -0,0 +1,215 @@
+import { Prisma } from '@prisma/client'
+import { prisma } from '@/lib/prisma'
+import {
+  normalizeProductPatentRecord,
+  type ProductPatentRecord,
+} from '@/app/intake/productPatentStorage'
+
+type ProductPatentRecordRow = Awaited<
+  ReturnType<typeof prisma.productPatentRecord.findMany>
+>[number]
+
+function toJsonValue(value: unknown): Prisma.InputJsonValue {
+  return (value && typeof value === 'object' ? value : {}) as Prisma.InputJsonValue
+}
+
+function normalizeIdentityText(value: string): string {
+  return value.trim().toUpperCase()
+}
+
+function normalizeProductPatentIdentity(record: ProductPatentRecord): ProductPatentRecord {
+  const patentGroupKey = normalizeIdentityText(record.patentGroupKey)
+  const normalizedId = /^patent-\d+-[a-z0-9]+$/i.test(record.id.trim()) && patentGroupKey
+    ? `product-patent-group-${patentGroupKey}`
+    : record.id.trim()
+
+  return {
+    ...record,
+    id: normalizedId,
+    patentGroupKey,
+    productId: record.productId.trim(),
+    linkedProductIds: Array.from(new Set(record.linkedProductIds.map((item) => item.trim()).filter(Boolean))),
+    linkedSpus: Array.from(new Set(record.linkedSpus.map(normalizeIdentityText).filter(Boolean))),
+    applicationNo: normalizeIdentityText(record.applicationNo),
+    patentNo: normalizeIdentityText(record.patentNo),
+    spu: normalizeIdentityText(record.spu),
+  }
+}
+
+function getProductPatentRecordIdentity(record: ProductPatentRecord): string {
+  return record.patentNo || record.applicationNo || record.patentName.trim()
+}
+
+function normalizeRecordsForPersist(records: unknown[]): ProductPatentRecord[] {
+  const normalizedRecords = records.map((record, index) => {
+    const normalized = normalizeProductPatentRecord(record)
+    if (!normalized) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少稳定 id，已阻止保存`)
+    }
+    return normalizeProductPatentIdentity(normalized)
+  })
+
+  const seenIds = new Set<string>()
+  const seenGroupKeys = new Set<string>()
+
+  normalizedRecords.forEach((record, index) => {
+    if (!record.productId) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少来源产品 id，已阻止保存`)
+    }
+    if (!record.patentGroupKey) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少专利分组键，已阻止保存`)
+    }
+    if (!getProductPatentRecordIdentity(record)) {
+      throw new Error(`第 ${index + 1} 条专利台账记录缺少专利名称、申请号或专利号，已阻止保存`)
+    }
+    if (seenIds.has(record.id)) {
+      throw new Error(`专利台账记录 id 重复：${record.id}`)
+    }
+    if (seenGroupKeys.has(record.patentGroupKey)) {
+      throw new Error(`专利台账分组重复：${record.patentGroupKey}`)
+    }
+    seenIds.add(record.id)
+    seenGroupKeys.add(record.patentGroupKey)
+  })
+
+  return normalizedRecords
+}
+
+function toProductPatentRecord(row: ProductPatentRecordRow): ProductPatentRecord {
+  const normalized = normalizeProductPatentRecord({
+    id: row.id,
+    patentGroupKey: row.patentGroupKey,
+    productId: row.productId,
+    linkedProductIds: row.linkedProductIds,
+    linkedProductNames: row.linkedProductNames,
+    linkedSpus: row.linkedSpus,
+    linkedBrands: row.linkedBrands,
+    productDisplayName: row.productDisplayName,
+    productImage: row.productImage ?? '',
+    productImageName: row.productImageName,
+    patentStatus: row.patentStatus,
+    patentType: row.patentType,
+    patentName: row.patentName,
+    spu: row.spu,
+    saRequired: row.saRequired,
+    salesStatus: row.salesStatus,
+    designer: row.designer,
+    applicationNo: row.applicationNo,
+    patentNo: row.patentNo,
+    applicationDate: row.applicationDate,
+    authorizationDate: row.authorizationDate,
+    firstFeeDate: row.firstFeeDate,
+    annualFees: row.annualFees,
+    annualFeeDates: row.annualFeeDates,
+    nextFeeDueDate: row.nextFeeDueDate,
+    feeAmount: row.feeAmount,
+    patentCertificateFileName: row.patentCertificateFileName,
+    patentCertificateFileUrl: row.patentCertificateFileUrl ?? '',
+    patentCertificateFileMimeType: row.patentCertificateFileMimeType,
+    patentCertificateStorageKey: row.patentCertificateStorageKey,
+    annualFeeNote: row.annualFeeNote,
+    continueDecision: row.continueDecision,
+    decisionReason: row.decisionReason,
+    owner: row.owner,
+    remark: row.remark,
+    createdAt: row.createdAt.toISOString(),
+    updatedAt: row.updatedAt.toISOString(),
+  })
+
+  if (!normalized) {
+    throw new Error(`Invalid product patent record in database: ${row.id}`)
+  }
+  return normalizeProductPatentIdentity(normalized)
+}
+
+function toProductPatentRecordUpsertData(
+  record: ProductPatentRecord,
+  sortOrder: number,
+): Prisma.ProductPatentRecordUncheckedCreateInput {
+  return {
+    id: record.id,
+    patentGroupKey: record.patentGroupKey,
+    productId: record.productId,
+    linkedProductIds: record.linkedProductIds,
+    linkedProductNames: record.linkedProductNames,
+    linkedSpus: record.linkedSpus,
+    linkedBrands: record.linkedBrands,
+    productDisplayName: record.productDisplayName,
+    productImage: record.productImage || null,
+    productImageName: record.productImageName,
+    patentStatus: record.patentStatus,
+    patentType: record.patentType,
+    patentName: record.patentName,
+    spu: record.spu,
+    saRequired: record.saRequired,
+    salesStatus: record.salesStatus,
+    designer: record.designer,
+    applicationNo: record.applicationNo,
+    patentNo: record.patentNo,
+    applicationDate: record.applicationDate,
+    authorizationDate: record.authorizationDate,
+    firstFeeDate: record.firstFeeDate,
+    annualFees: toJsonValue(record.annualFees),
+    annualFeeDates: toJsonValue(record.annualFeeDates),
+    nextFeeDueDate: record.nextFeeDueDate,
+    feeAmount: record.feeAmount,
+    patentCertificateFileName: record.patentCertificateFileName,
+    patentCertificateFileUrl: record.patentCertificateFileUrl || null,
+    patentCertificateFileMimeType: record.patentCertificateFileMimeType,
+    patentCertificateStorageKey: record.patentCertificateStorageKey,
+    annualFeeNote: record.annualFeeNote,
+    continueDecision: record.continueDecision,
+    decisionReason: record.decisionReason,
+    owner: record.owner,
+    remark: record.remark,
+    sortOrder,
+  }
+}
+
+class ProductPatentService {
+  async list(): Promise<ProductPatentRecord[]> {
+    const rows = await prisma.productPatentRecord.findMany({
+      orderBy: [{ sortOrder: 'asc' }, { updatedAt: 'desc' }],
+    })
+    return rows.map(toProductPatentRecord)
+  }
+
+  async replaceAll(records: unknown): Promise<ProductPatentRecord[]> {
+    if (!Array.isArray(records)) {
+      throw new Error('专利台账记录必须是数组')
+    }
+
+    const normalizedRecords = normalizeRecordsForPersist(records)
+
+    const ids = normalizedRecords.map((record) => record.id)
+
+    await prisma.$transaction(async (tx) => {
+      if (ids.length > 0) {
+        await tx.productPatentRecord.deleteMany({
+          where: {
+            id: {
+              notIn: ids,
+            },
+          },
+        })
+      } else {
+        await tx.productPatentRecord.deleteMany()
+      }
+
+      for (const [index, record] of normalizedRecords.entries()) {
+        const data = toProductPatentRecordUpsertData(record, index)
+        const { id: _id, createdAt: _createdAt, ...updateData } = data
+        await tx.productPatentRecord.upsert({
+          where: { id: record.id },
+          create: data,
+          update: updateData,
+        })
+      }
+    })
+
+    return this.list()
+  }
+}
+
+export const productPatentService = new ProductPatentService()
+export { ProductPatentService }
diff --git a/furniture-3d-system/src/server/services/sku-quality-inspection.service.ts b/furniture-3d-system/src/server/services/sku-quality-inspection.service.ts
index aad6adac..224af314 100644
--- a/furniture-3d-system/src/server/services/sku-quality-inspection.service.ts
+++ b/furniture-3d-system/src/server/services/sku-quality-inspection.service.ts
@@ -1,5 +1,6 @@
 import { Prisma, ProductSkuQualityInspection } from '@prisma/client'
 import { hasBusinessRole } from '@/lib/role-scope'
+import { normalizeCoreIdentity } from '@/lib/open-product/asset-coding'
 import { AppError, ErrorCode } from '@/server/core/errors'
 import type { AuthUser } from '@/server/core/types'
 import {
@@ -181,27 +182,6 @@ function toRecordDTO(record: ProductSkuQualityInspection): SkuQualityInspectionR
   }
 }
 
-function readTextFromAttributes(attributes: unknown, keys: string[]) {
-  if (!isRecord(attributes)) return ''
-
-  for (const key of keys) {
-    const value = attributes[key]
-    if (typeof value === 'string' && value.trim()) return value.trim()
-  }
-
-  const snapshot = isRecord(attributes.assetSkuSnapshot)
-    ? attributes.assetSkuSnapshot
-    : null
-  if (snapshot) {
-    for (const key of keys) {
-      const value = snapshot[key]
-      if (typeof value === 'string' && value.trim()) return value.trim()
-    }
-  }
-
-  return ''
-}
-
 function readNestedText(value: unknown, key: string) {
   return isRecord(value) ? trimText(value[key]) : ''
 }
@@ -307,6 +287,40 @@ function buildFormalSkuAttributes(input: {
   } as unknown as Prisma.InputJsonValue
 }
 
+function buildFormalSkuAssetProfile(input: {
+  productSpu: string
+  productName: string
+  skuItem: RecordLike
+  skuCode: string
+  barcode: string
+  imageUrl: string
+}) {
+  const skuName = trimText(input.skuItem.specName) || input.skuCode
+  const model = trimText(input.skuItem.model) || input.productSpu
+  const size = trimText(input.skuItem.size)
+
+  return {
+    primarySourceAssetVariantId: null,
+    sourceAssetVariantIds: [],
+    sourceAssetFamilyId: null,
+    sourceAssetSeriesId: null,
+    model: normalizeCoreIdentity(model) || null,
+    modelName: input.productName || null,
+    specCode: normalizeCoreIdentity(input.skuCode) || null,
+    specName: skuName || null,
+    barcode: normalizeCoreIdentity(input.barcode) || null,
+    size: (size ? { label: size } : {}) as Prisma.InputJsonValue,
+    color: optionalText(input.skuItem.color),
+    material: optionalText(input.skuItem.material),
+    imageUrl: input.imageUrl || null,
+    sourceStatus: 'ACTIVE',
+    syncedAt: new Date(),
+    lockedFields: [],
+    lockedReasons: {} as Prisma.InputJsonValue,
+    sourceVariants: [] as unknown as Prisma.InputJsonValue,
+  } satisfies Prisma.ProductSkuAssetProfileCreateWithoutSkuInput
+}
+
 function toArchiveDTO(record: SkuQualityArchiveRecord): SkuQualityArchiveDTO {
   const records = record.qualityInspections.map((item) => toRecordDTO(item))
   const firstBatchRecord =
@@ -317,15 +331,10 @@ function toArchiveDTO(record: SkuQualityArchiveRecord): SkuQualityArchiveDTO {
   return {
     skuId: record.id,
     skuCode: record.skuCode,
-    barcode: readTextFromAttributes(record.attributes, ['barcode']),
-    imageUrl:
-      readTextFromAttributes(record.attributes, ['imageUrl', 'thumbnailUrl']) ||
-      record.images[0] ||
-      null,
-    skuName:
-      readTextFromAttributes(record.attributes, ['skuName', 'name', 'displayName']) ||
-      record.skuCode,
-    color: readTextFromAttributes(record.attributes, ['color', 'colour', 'finish']),
+    barcode: record.assetProfile?.barcode?.trim() ?? '',
+    imageUrl: record.assetProfile?.imageUrl?.trim() || record.images[0] || null,
+    skuName: record.assetProfile?.specName?.trim() || record.name?.trim() || record.skuCode,
+    color: record.assetProfile?.color?.trim() ?? '',
     stock: record.stock,
     productId: record.product.id,
     productName: record.product.name,
@@ -494,6 +503,14 @@ class SkuQualityInspectionService {
         barcode: input.barcode,
         imageUrl,
       }),
+      assetProfile: buildFormalSkuAssetProfile({
+        productSpu: input.productSpu,
+        productName: formalProduct.name,
+        skuItem: input.skuItem,
+        skuCode: input.skuCode,
+        barcode: input.barcode,
+        imageUrl,
+      }),
       images,
       modelUrl: trimText(input.skuItem.model3dDataUrl) || trimText(input.product.model3dDataUrl) || null,
       ownerId: input.ownerId,
diff --git a/furniture-3d-system/src/server/services/spu-number-reservation.service.ts b/furniture-3d-system/src/server/services/spu-number-reservation.service.ts
new file mode 100644
index 00000000..3535cb32
--- /dev/null
+++ b/furniture-3d-system/src/server/services/spu-number-reservation.service.ts
@@ -0,0 +1,253 @@
+import { randomUUID } from 'crypto'
+import { Prisma } from '@prisma/client'
+import { AppError, ErrorCode } from '@/server/core/errors'
+
+type ReservationTx = Prisma.TransactionClient
+
+type CounterRow = {
+  id: string
+  productCategory: string
+  prefix: string
+  lastUsedIndex: number
+  sourceLibraryItemId: string | null
+}
+
+type RuleRow = {
+  id: string
+  itemKey: string
+  code: string
+  name: string
+  payload: Prisma.JsonValue
+}
+
+export type SpuNumberReservation = {
+  productCategory: string
+  prefix: string
+  index: number
+  spu: string
+}
+
+function normalizeText(value: unknown) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+function normalizePrefix(value: unknown) {
+  const prefix = normalizeText(value).toUpperCase()
+  return /^[A-Z][A-Z0-9]*$/.test(prefix) ? prefix : ''
+}
+
+function normalizeIndex(value: unknown) {
+  const numericValue =
+    typeof value === 'number' ? value : Number.parseInt(String(value ?? ''), 10)
+  if (!Number.isFinite(numericValue) || numericValue <= 0) return 0
+  return Math.trunc(numericValue)
+}
+
+function formatSpu(prefix: string, index: number) {
+  return `${prefix}${String(index).padStart(4, '0')}`
+}
+
+function readRecord(value: unknown): Record<string, unknown> {
+  return value && typeof value === 'object' && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : {}
+}
+
+function readRulePayload(row: RuleRow) {
+  const payload = readRecord(row.payload)
+  const rule = readRecord(payload.rule)
+  return Object.keys(rule).length > 0 ? rule : payload
+}
+
+function buildCounterId() {
+  return `spu-counter-${randomUUID()}`
+}
+
+function normalizeProductCategory(value: unknown) {
+  return normalizeText(value)
+}
+
+class SpuNumberReservationService {
+  async reserveInTransaction(
+    tx: ReservationTx,
+    input: {
+      productCategory: string
+      currentProductId?: string | null
+      userId?: string | null
+    },
+  ): Promise<SpuNumberReservation> {
+    const requestedProductCategory = normalizeProductCategory(input.productCategory)
+    if (!requestedProductCategory) {
+      throw new AppError(ErrorCode.VALIDATION_REQUIRED_FIELD, '产品品类不能为空，无法分配 SPU')
+    }
+
+    let counter = await this.lockCounter(tx, requestedProductCategory)
+    let sourceRule: RuleRow | null = null
+
+    if (!counter) {
+      sourceRule = await this.findSourceRule(tx, requestedProductCategory)
+      if (!sourceRule) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, '当前品类还没有配置 SPU 规则，无法分配正式 SPU')
+      }
+
+      const rulePayload = readRulePayload(sourceRule)
+      const productCategory = normalizeProductCategory(sourceRule.name) || requestedProductCategory
+      const prefix = normalizePrefix(sourceRule.code)
+      if (!prefix) {
+        throw new AppError(ErrorCode.VALIDATION_FAILED, '当前品类的 SPU 前缀无效，无法分配正式 SPU')
+      }
+
+      await tx.$executeRaw`
+        INSERT INTO "SpuNumberCounter" (
+          "id",
+          "productCategory",
+          "prefix",
+          "lastUsedIndex",
+          "sourceLibraryItemId",
+          "createdBy",
+          "updatedBy",
+          "createdAt",
+          "updatedAt"
+        )
+        VALUES (
+          ${buildCounterId()},
+          ${productCategory},
+          ${prefix},
+          ${normalizeIndex(rulePayload.spuIndex)},
+          ${sourceRule.id},
+          ${input.userId ?? null},
+          ${input.userId ?? null},
+          CURRENT_TIMESTAMP,
+          CURRENT_TIMESTAMP
+        )
+        ON CONFLICT DO NOTHING
+      `
+      counter = await this.lockCounter(tx, requestedProductCategory)
+    }
+
+    if (!counter) {
+      throw new AppError(ErrorCode.SYSTEM_INTERNAL, 'SPU 计数器初始化后读取失败')
+    }
+
+    const productCategory = normalizeProductCategory(counter.productCategory) || requestedProductCategory
+    const prefix = normalizePrefix(counter.prefix)
+    if (!prefix) {
+      throw new AppError(ErrorCode.VALIDATION_FAILED, '当前品类的 SPU 计数器前缀无效')
+    }
+
+    const maxUsedIndex = await this.getMaxUsedIndex(tx, {
+      prefix,
+      currentProductId: input.currentProductId ?? null,
+    })
+    const index = Math.max(normalizeIndex(counter.lastUsedIndex), maxUsedIndex) + 1
+
+    await tx.$executeRaw`
+      UPDATE "SpuNumberCounter"
+      SET
+        "lastUsedIndex" = ${index},
+        "updatedBy" = ${input.userId ?? null},
+        "updatedAt" = CURRENT_TIMESTAMP
+      WHERE "id" = ${counter.id}
+    `
+
+    await this.syncSourceRuleIndex(tx, {
+      sourceLibraryItemId: counter.sourceLibraryItemId,
+      index,
+      userId: input.userId ?? null,
+    })
+
+    return {
+      productCategory,
+      prefix,
+      index,
+      spu: formatSpu(prefix, index),
+    }
+  }
+
+  private async lockCounter(tx: ReservationTx, productCategory: string) {
+    const rows = await tx.$queryRaw<CounterRow[]>`
+      SELECT
+        "id",
+        "productCategory",
+        "prefix",
+        "lastUsedIndex",
+        "sourceLibraryItemId"
+      FROM "SpuNumberCounter"
+      WHERE lower(btrim("productCategory")) = lower(btrim(${productCategory}))
+      FOR UPDATE
+    `
+    return rows[0] ?? null
+  }
+
+  private async findSourceRule(tx: ReservationTx, productCategory: string) {
+    const rows = await tx.$queryRaw<RuleRow[]>`
+      SELECT "id", "itemKey", "code", "name", "payload"
+      FROM "IntakeReferenceLibraryItem"
+      WHERE "libraryType" = 'SPU_RULE'
+        AND "isActive" = true
+        AND lower(btrim("name")) = lower(btrim(${productCategory}))
+      ORDER BY "sortOrder" ASC, "updatedAt" DESC
+      LIMIT 1
+      FOR UPDATE
+    `
+    return rows[0] ?? null
+  }
+
+  private async getMaxUsedIndex(
+    tx: ReservationTx,
+    input: { prefix: string; currentProductId: string | null },
+  ) {
+    const pattern = `^${input.prefix}([0-9]{4})$`
+    const rows = await tx.$queryRaw<Array<{ maxIndex: number | null }>>`
+      SELECT COALESCE(MAX((substring("spuBase" from ${pattern}))::integer), 0)::integer AS "maxIndex"
+      FROM "IntakeNonIntegratedProduct"
+      WHERE "deletedAt" IS NULL
+        AND "spuBase" ~ ${`^${input.prefix}[0-9]{4}$`}
+        AND (${input.currentProductId}::text IS NULL OR "id" <> ${input.currentProductId})
+    `
+    return normalizeIndex(rows[0]?.maxIndex)
+  }
+
+  private async syncSourceRuleIndex(
+    tx: ReservationTx,
+    input: {
+      sourceLibraryItemId: string | null
+      index: number
+      userId: string | null
+    },
+  ) {
+    if (!input.sourceLibraryItemId) return
+
+    const row = await tx.intakeReferenceLibraryItem.findUnique({
+      where: { id: input.sourceLibraryItemId },
+    })
+    if (!row) return
+
+    const payload = readRecord(row.payload)
+    const rule = readRecord(payload.rule)
+    const nextPayload =
+      Object.keys(rule).length > 0
+        ? {
+            ...payload,
+            rule: {
+              ...rule,
+              spuIndex: input.index,
+            },
+          }
+        : {
+            ...payload,
+            spuIndex: input.index,
+          }
+
+    await tx.intakeReferenceLibraryItem.update({
+      where: { id: row.id },
+      data: {
+        payload: nextPayload as Prisma.InputJsonValue,
+        updatedBy: input.userId,
+      },
+    })
+  }
+}
+
+export const spuNumberReservationService = new SpuNumberReservationService()
+export { SpuNumberReservationService }
diff --git a/furniture-3d-system/tests/scripts/apply-master-data-cleanup-plan.test.js b/furniture-3d-system/tests/scripts/apply-master-data-cleanup-plan.test.js
new file mode 100644
index 00000000..0677ed68
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/apply-master-data-cleanup-plan.test.js
@@ -0,0 +1,1841 @@
+const {
+  parseArgs,
+  writeJsonReport,
+  readPlan,
+  CLEANUP_ACTOR_FALLBACK,
+  REQUIRED_MIGRATIONS,
+  assertNoUnknownFillKeys,
+  assertOnlyMissingFieldsArePatched,
+  assertCleanupEvidencePresent,
+  assertValidProductProfilePatch,
+  assertValidTextPatch,
+  assertValidAuditText,
+  assertValidIncompleteApproval,
+  validateCleanupPlanForApply,
+  updateProductProfilePayload,
+  buildResultSummary,
+  countApprovedIncompleteRows,
+  countRemainingMissingFields,
+  assertPostCleanupMasterDataTruth,
+  assertNoApplyWithPendingMigrations,
+  assertApplyExecutionEvidence,
+  cleanupDatabaseIdentity,
+  getBackupFingerprint,
+  resolveMigrationReplayMode,
+  assertNoUnknownCleanupPlanTopLevelKeys,
+  getPreSkuFormalizationMismatchActions,
+  assertNoPreSkuFormalizationMismatchActions,
+  recordMasterDataQualityDecision,
+  resolveMasterDataQualityDecisions,
+  applySkuItemPatch,
+  applyProductProfilePatch,
+  applyQualityDecisionRepairPatch,
+  buildCleanupTemplate,
+} = require('../../scripts/apply-master-data-cleanup-plan')
+const {
+  REQUIRED_MIGRATIONS: FOUNDATION_REQUIRED_MIGRATIONS,
+  REQUIRED_DATABASE_GUARDS,
+} = require('../../scripts/verify-master-data-foundation')
+const {
+  REQUIRED_MIGRATIONS: SHARED_REQUIRED_MIGRATIONS,
+} = require('../../scripts/master-data-required-migrations')
+const fs = require('node:fs')
+const path = require('node:path')
+const os = require('node:os')
+const { execFileSync } = require('node:child_process')
+
+function createMockClient(queryHandler) {
+  return {
+    queries: [],
+    query: jest.fn((sql, values = []) => {
+      const normalizedSql = String(sql).replace(/\s+/g, ' ').trim()
+      const result = queryHandler(normalizedSql, values)
+      return Promise.resolve(result)
+    }),
+  }
+}
+
+function sqlLiteral(value) {
+  return `'${String(value).replace(/'/g, "''")}'`
+}
+
+function sqlEscapedFragment(value) {
+  return String(value).replace(/'/g, "''")
+}
+
+function extractSqlBlock(sql, startMarker, endMarker) {
+  const normalizedSql = sql.replace(/\r\n/g, '\n')
+  const startIndex = normalizedSql.indexOf(startMarker)
+  const endIndex = normalizedSql.indexOf(endMarker, startIndex + startMarker.length)
+  if (startIndex < 0 || endIndex < 0) {
+    throw new Error(`SQL block not found: ${startMarker} -> ${endMarker}`)
+  }
+  return normalizedSql.slice(startIndex, endIndex)
+}
+
+describe('apply-master-data-cleanup-plan', () => {
+  it('rejects applying in template mode', () => {
+    expect(() => parseArgs(['--template', '--apply'])).toThrow('--template')
+    expect(() => parseArgs(['--template', '--plan', 'cleanup.json'])).toThrow('--template')
+    expect(() => parseArgs(['--apply'])).toThrow('--apply')
+    expect(() => parseArgs(['--validate-plan'])).toThrow('--validate-plan')
+    expect(() =>
+      parseArgs(['--validate-plan', '--apply', '--plan', 'cleanup.json']),
+    ).toThrow('--apply')
+    expect(parseArgs(['--validate-plan', '--plan', 'cleanup.json'])).toEqual({
+      allowMigrationDryRun: false,
+      apply: false,
+      outputPath: '',
+      template: false,
+      planPath: 'cleanup.json',
+      validatePlan: true,
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(parseArgs(['--template', '--allow-migration-dry-run'])).toEqual({
+      allowMigrationDryRun: true,
+      apply: false,
+      outputPath: '',
+      template: true,
+      planPath: '',
+      validatePlan: false,
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(() =>
+      parseArgs(['--apply', '--allow-migration-dry-run', '--plan', 'cleanup.json']),
+    ).toThrow('--allow-migration-dry-run')
+    expect(parseArgs([
+      '--validate-plan',
+      '--plan',
+      'cleanup.json',
+      '--output',
+      '.master-data-audits/cleanup-plan-validation.json',
+    ])).toEqual({
+      allowMigrationDryRun: false,
+      apply: false,
+      outputPath: '.master-data-audits/cleanup-plan-validation.json',
+      template: false,
+      planPath: 'cleanup.json',
+      validatePlan: true,
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(parseArgs(['--template', '--output', '.master-data-cleanup/plan.json'])).toEqual({
+      allowMigrationDryRun: false,
+      apply: false,
+      outputPath: '.master-data-cleanup/plan.json',
+      template: true,
+      planPath: '',
+      validatePlan: false,
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(() => parseArgs(['--output', 'plan.json'])).toThrow('--output')
+    expect(parseArgs([
+      '--apply',
+      '--plan',
+      'cleanup.json',
+      '--expected-database-identity',
+      'postgresql|furniture|localhost|5432|furniture_3d|',
+      '--expected-backup-sha256=backup-sha',
+    ])).toEqual({
+      allowMigrationDryRun: false,
+      apply: true,
+      outputPath: '',
+      template: false,
+      planPath: 'cleanup.json',
+      validatePlan: false,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+    })
+  })
+
+  it('can write cleanup templates to a local audit file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-cleanup-output-'))
+    const outputPath = path.join(tempDir, 'nested/plan.json')
+
+    expect(writeJsonReport(outputPath, { mode: 'template', skuItems: [] })).toBe(outputPath)
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'template',
+      skuItems: [],
+    })
+  })
+
+  it('includes PreSku formalization lifecycle mismatches in cleanup templates as manual decisions', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem"')) {
+        return { rows: [] }
+      }
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product')) {
+        return { rows: [] }
+      }
+      if (sql.includes('FROM "MasterDataQualityDecision"')) {
+        return { rows: [] }
+      }
+      if (sql.includes('formalized_without_product_sku')) {
+        return {
+          rows: [
+            {
+              mismatchReason: 'formalized_without_product_sku',
+              preSkuId: 'pre_sku_1',
+              draftGroupId: 'draft_1',
+              draftGroupCode: 'DG-001',
+              sequence: 1,
+              status: 'FORMALIZED',
+              linkedFormalSkuId: null,
+              linkedSkuCode: null,
+              linkedSkuDeletedAt: null,
+              linkedProductId: null,
+              linkedProductDeletedAt: null,
+            },
+          ],
+        }
+      }
+      throw new Error(`unexpected sql: ${sql}`)
+    })
+
+    await expect(buildCleanupTemplate(client)).resolves.toEqual(
+      expect.objectContaining({
+        preSkuFormalizationMismatches: [
+          expect.objectContaining({
+            preSkuId: 'pre_sku_1',
+            draftGroupCode: 'DG-001',
+            action: expect.objectContaining({
+              decision: '',
+            }),
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('blocks generic cleanup plans from applying PreSku formalization lifecycle decisions', () => {
+    const plan = {
+      preSkuFormalizationMismatches: [
+        {
+          mismatchReason: 'formalized_without_product_sku',
+          preSkuId: 'pre_sku_1',
+          draftGroupCode: 'DG-001',
+          action: { decision: 'rollback_to_draft' },
+        },
+      ],
+    }
+
+    expect(getPreSkuFormalizationMismatchActions(plan)).toEqual([
+      {
+        mismatchReason: 'formalized_without_product_sku',
+        preSkuId: 'pre_sku_1',
+        draftGroupCode: 'DG-001',
+        decision: 'rollback_to_draft',
+      },
+    ])
+    expect(() => assertNoPreSkuFormalizationMismatchActions(plan)).toThrow(
+      '不能由通用主数据清洗脚本处理',
+    )
+    expect(() =>
+      assertNoPreSkuFormalizationMismatchActions({
+        preSkuFormalizationMismatches: [
+          {
+            mismatchReason: 'formalized_without_product_sku',
+            preSkuId: 'pre_sku_1',
+            draftGroupCode: 'DG-001',
+            action: { decision: '' },
+          },
+        ],
+      }),
+    ).not.toThrow()
+  })
+
+  it('rejects apply-mode cleanup when required governance migrations are only dry-run applied', () => {
+    expect(() =>
+      assertNoApplyWithPendingMigrations(
+        { apply: true },
+        ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+      ),
+    ).toThrow('仍有治理迁移需要执行')
+
+    expect(() =>
+      assertNoApplyWithPendingMigrations(
+        { apply: false },
+        ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+      ),
+    ).not.toThrow()
+
+    expect(
+      assertNoApplyWithPendingMigrations(
+        { apply: false },
+        ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+      ),
+    ).toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        replayableIdempotentMigrationCount: 0,
+        strictReady: false,
+      }),
+    )
+  })
+
+  it('rejects apply-mode cleanup when idempotent view or guard migrations would be replayed', () => {
+    expect(() =>
+      assertNoApplyWithPendingMigrations(
+        { apply: true },
+        ['prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql'],
+      ),
+    ).toThrow('不能在 --apply 清洗时顺带应用任何迁移')
+
+    expect(
+      assertNoApplyWithPendingMigrations(
+        { apply: false },
+        ['prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql'],
+      ),
+    ).toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 0,
+        replayableIdempotentMigrationCount: 1,
+        strictReady: true,
+      }),
+    )
+  })
+
+  it('requires database identity and backup evidence for apply-mode cleanup', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-cleanup-backup-'))
+    fs.writeFileSync(path.join(tempDir, 'backup.dump'), 'backup')
+    const databaseUrl = 'postgresql://furniture:secret@localhost:5432/furniture_3d'
+    const actualDatabaseIdentity = cleanupDatabaseIdentity(databaseUrl)
+    const backupSha256 = getBackupFingerprint(
+      { DATABASE_BACKUP_FILE: 'backup.dump' },
+      tempDir,
+    ).sha256
+
+    expect(() =>
+      assertApplyExecutionEvidence(
+        {
+          apply: true,
+          expectedDatabaseIdentity: '',
+          expectedBackupSha256: '',
+        },
+        {
+          databaseUrl,
+          env: { DATABASE_BACKUP_FILE: 'backup.dump' },
+          rootDir: tempDir,
+        },
+      ),
+    ).toThrow('expected-database-identity')
+
+    expect(() =>
+      assertApplyExecutionEvidence(
+        {
+          apply: true,
+          expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|wrong_db|',
+          expectedBackupSha256: 'wrong-sha',
+        },
+        {
+          databaseUrl,
+          env: { DATABASE_BACKUP_FILE: 'backup.dump' },
+          rootDir: tempDir,
+        },
+      ),
+    ).toThrow('expected-database-identity-mismatch')
+
+    expect(
+      assertApplyExecutionEvidence(
+        {
+          apply: true,
+          expectedDatabaseIdentity: actualDatabaseIdentity,
+          expectedBackupSha256: backupSha256,
+        },
+        {
+          databaseUrl,
+          env: { DATABASE_BACKUP_FILE: 'backup.dump' },
+          rootDir: tempDir,
+        },
+      ),
+    ).toEqual(
+      expect.objectContaining({
+        actualDatabaseIdentity,
+        backupFingerprint: expect.objectContaining({ sha256: backupSha256 }),
+      }),
+    )
+  })
+
+  it('reports structure migration dry-run separately from idempotent migration replay', () => {
+    expect(
+      resolveMigrationReplayMode('template', {
+        structureMigrations: ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+        idempotentMigrations: ['prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql'],
+      }),
+    ).toBe('template-migration-dry-run')
+
+    expect(
+      resolveMigrationReplayMode('template', {
+        structureMigrations: [],
+        idempotentMigrations: ['prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql'],
+      }),
+    ).toBe('template-idempotent-migration-replay')
+  })
+
+  it('reads confirmedBy from cleanup plans for auditable apply runs', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-cleanup-'))
+    const planPath = path.join(tempDir, 'plan.json')
+    fs.writeFileSync(
+      planPath,
+      JSON.stringify({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [],
+        productProfiles: [],
+      }),
+    )
+
+    expect(readPlan(planPath)).toEqual(
+      expect.objectContaining({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+      }),
+    )
+  })
+
+  it('rejects unknown top-level cleanup plan fields instead of silently ignoring typos', () => {
+    expect(() =>
+      assertNoUnknownCleanupPlanTopLevelKeys({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [],
+        productProfiles: [],
+        preSkuFormalizationMismatch: [],
+      }),
+    ).toThrow('preSkuFormalizationMismatch')
+
+    expect(() =>
+      assertNoUnknownCleanupPlanTopLevelKeys({
+        mode: 'template-migration-dry-run',
+        appliedMigrations: [],
+        migrationReplay: {},
+        migrationApplicationStatus: {},
+        currentSummary: {},
+        rolledBack: true,
+        confirmation: '',
+        confirmedBy: '',
+        skuItems: [],
+        productProfiles: [],
+        preSkuFormalizationMismatches: [],
+      }),
+    ).not.toThrow()
+  })
+
+  it('validates cleanup plans statically before any database dry-run', () => {
+    expect(validateCleanupPlanForApply({
+      confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+      confirmedBy: '企划负责人',
+      skuItems: [
+        {
+          id: 'sku-row-1',
+          productId: 'product-1',
+          spu: 'SPU001',
+          skuItemId: 'sku-item-1',
+          current: {
+            skuCode: '',
+            specName: '',
+            model: '',
+            barcode: '',
+            missingRequiredFields: ['sku_code', 'spec_name', 'model'],
+          },
+          fill: {
+            skuCode: 'sku001',
+            specName: '1200 柚木色',
+            model: 'DBZ-SPJK001',
+            barcode: 'bar001',
+          },
+        },
+      ],
+      productProfiles: [
+        {
+          productId: 'product-1',
+          spu: 'SPU001',
+          current: {
+            productName: '产品A',
+            productCategory: '',
+            productDevelopmentKind: '',
+            missingFields: ['productCategory', 'productDevelopmentKind'],
+          },
+          fill: {
+            productCategory: '餐桌',
+            productDevelopmentKind: 'product',
+          },
+        },
+      ],
+    })).toEqual({
+      mode: 'validate-plan',
+      valid: true,
+      committed: false,
+      requiresDatabase: false,
+      confirmedBy: '企划负责人',
+      skuItems: {
+        total: 1,
+        actionableRows: 1,
+        appliedFields: 4,
+        approvedIncompleteRows: 0,
+        remainingMissingFieldCounts: {},
+      },
+        productProfiles: {
+          total: 1,
+          actionableRows: 1,
+          appliedFields: 2,
+          approvedIncompleteRows: 0,
+          remainingMissingFieldCounts: {},
+        },
+        qualityDecisionRepairs: {
+          total: 0,
+          actionableRows: 0,
+          appliedFields: 0,
+        },
+      })
+  })
+
+  it('runs validate-plan from the CLI without requiring DATABASE_URL and can write audit JSON', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-cleanup-cli-'))
+    const planPath = path.join(tempDir, 'plan.json')
+    fs.writeFileSync(
+      planPath,
+      JSON.stringify({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [
+          {
+            id: 'sku-row-1',
+            productId: 'product-1',
+            spu: 'SPU001',
+            skuItemId: 'sku-item-1',
+            current: {
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              missingRequiredFields: ['sku_code', 'spec_name', 'model'],
+            },
+            fill: {
+              skuCode: 'sku001',
+              specName: '1200 柚木色',
+              model: 'DBZ-SPJK001',
+            },
+          },
+        ],
+        productProfiles: [],
+      }),
+    )
+
+    const env = { ...process.env }
+    delete env.DATABASE_URL
+    const output = execFileSync(
+      process.execPath,
+      [
+        path.resolve(__dirname, '../../scripts/apply-master-data-cleanup-plan.js'),
+        '--validate-plan',
+        '--plan',
+        planPath,
+        '--output',
+        path.join(tempDir, 'validation.json'),
+      ],
+      {
+        cwd: path.resolve(__dirname, '../..'),
+        env,
+        encoding: 'utf8',
+      },
+    )
+
+    expect(JSON.parse(output)).toEqual(
+      expect.objectContaining({
+        mode: 'validate-plan',
+        valid: true,
+        requiresDatabase: false,
+        committed: false,
+        outputFile: path.join(tempDir, 'validation.json'),
+      }),
+    )
+    expect(JSON.parse(fs.readFileSync(path.join(tempDir, 'validation.json'), 'utf8'))).toEqual(
+      expect.objectContaining({
+        mode: 'validate-plan',
+        valid: true,
+        requiresDatabase: false,
+        committed: false,
+      }),
+    )
+  })
+
+  it('allows cleanup plans to repair placeholder quality decision audit text only', () => {
+    expect(validateCleanupPlanForApply({
+      confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+      confirmedBy: '企划负责人',
+      skuItems: [],
+      productProfiles: [],
+      qualityDecisionRepairs: [
+        {
+          id: 'decision-1',
+          targetType: 'IntakeNonIntegratedSkuItem',
+          targetId: 'sku-row-1',
+          current: {
+            reason: '待确认',
+            decidedBy: 'UNKNOWN',
+            resolvedBy: null,
+            status: 'APPROVED_INCOMPLETE',
+            placeholderFields: ['reason', 'decidedBy'],
+          },
+          fill: {
+            reason: '业务确认分阶段补齐型号',
+            decidedBy: '企划负责人',
+          },
+        },
+      ],
+    })).toEqual(
+      expect.objectContaining({
+        qualityDecisionRepairs: {
+          total: 1,
+          actionableRows: 1,
+          appliedFields: 2,
+        },
+      }),
+    )
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [],
+        productProfiles: [],
+        qualityDecisionRepairs: [
+          {
+            id: 'decision-1',
+            targetType: 'IntakeNonIntegratedSkuItem',
+            targetId: 'sku-row-1',
+            current: {
+              reason: '业务已经确认',
+              decidedBy: '企划负责人',
+              resolvedBy: null,
+              status: 'APPROVED_INCOMPLETE',
+              placeholderFields: [],
+            },
+            fill: {
+              reason: '换成另一段原因',
+            },
+          },
+        ],
+      }),
+    ).toThrow('不能覆盖真实审计内容')
+  })
+
+  it('rejects static cleanup plans without confirmation, evidence, or real values', () => {
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: '',
+        confirmedBy: '企划负责人',
+        skuItems: [],
+        productProfiles: [],
+      }),
+    ).toThrow('confirmation')
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '',
+        skuItems: [],
+        productProfiles: [],
+      }),
+    ).toThrow('confirmedBy')
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '待确认',
+        skuItems: [],
+        productProfiles: [],
+      }),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [
+          {
+            id: 'sku-row-1',
+            current: {
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+            },
+            fill: { skuCode: 'UNKNOWN' },
+          },
+        ],
+        productProfiles: [],
+      }),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [
+          {
+            id: 'sku-row-1',
+            current: {
+              skuCode: 'SKU001',
+              specName: '',
+              model: '',
+              barcode: '',
+              missingRequiredFields: ['spec_name', 'model'],
+            },
+            productId: 'product-1',
+            spu: 'SPU001',
+            skuItemId: 'sku-item-1',
+            fill: { skuCode: 'SKU002' },
+          },
+        ],
+        productProfiles: [],
+      }),
+    ).toThrow('不能覆盖已有主数据')
+
+    expect(() =>
+      validateCleanupPlanForApply({
+        confirmation: 'I_UNDERSTAND_THIS_UPDATES_MASTER_DATA',
+        confirmedBy: '企划负责人',
+        skuItems: [
+          {
+            id: 'sku-row-1',
+            productId: 'product-1',
+            spu: 'SPU001',
+            skuItemId: 'sku-item-1',
+            current: {
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              missingRequiredFields: ['sku_code', 'spec_name', 'model'],
+            },
+            fill: { skuCode: 'SPU00101' },
+            allowIncomplete: true,
+            incompleteReason: '待确认',
+          },
+        ],
+        productProfiles: [],
+      }),
+    ).toThrow('占位值或默认值')
+  })
+
+  it('keeps cleanup dry-run migrations aligned with the master-data foundation verifier', () => {
+    expect(REQUIRED_MIGRATIONS).toBe(SHARED_REQUIRED_MIGRATIONS)
+    expect(FOUNDATION_REQUIRED_MIGRATIONS).toBe(SHARED_REQUIRED_MIGRATIONS)
+    expect(REQUIRED_MIGRATIONS).toEqual(FOUNDATION_REQUIRED_MIGRATIONS)
+  })
+
+  it('keeps the read-only SQL foundation check aligned with required database guards', () => {
+    const sql = fs.readFileSync(
+      path.resolve(__dirname, '../../scripts/sql/check-internal-master-data-foundation.sql'),
+      'utf8',
+    )
+    const indexGuardBlock = extractSqlBlock(
+      sql,
+      'WITH required_index_guards',
+      'WITH required_constraint_guards',
+    )
+    const constraintGuardBlock = extractSqlBlock(
+      sql,
+      'WITH required_constraint_guards',
+      "SELECT\n  'missing_required_trigger_guard'",
+    )
+    const triggerGuardBlock = extractSqlBlock(
+      sql,
+      "SELECT\n  'missing_required_trigger_guard'",
+      "SELECT\n  'asset_series_duplicate_code_risk'",
+    )
+
+    REQUIRED_DATABASE_GUARDS.forEach((guard) => {
+      expect(sql).toContain(guard.name)
+      if (guard.type === 'unique-index' || guard.type === 'partial-unique-index') {
+        expect(indexGuardBlock).toContain(sqlLiteral(guard.name))
+        expect(indexGuardBlock).toContain(sqlLiteral(guard.relationName))
+        if (guard.predicatePattern) {
+          expect(indexGuardBlock).toContain(sqlEscapedFragment(guard.predicatePattern))
+        }
+        if (guard.definitionPattern) {
+          expect(indexGuardBlock).toContain(sqlEscapedFragment(guard.definitionPattern))
+        }
+        return
+      }
+      if (guard.type === 'check-constraint') {
+        expect(constraintGuardBlock).toContain(sqlLiteral(guard.name))
+        expect(constraintGuardBlock).toContain(sqlLiteral(guard.relationName))
+        if (guard.expressionPattern) {
+          expect(constraintGuardBlock).toContain(sqlEscapedFragment(guard.expressionPattern))
+        }
+        return
+      }
+      if (guard.type === 'trigger') {
+        expect(triggerGuardBlock).toContain(sqlLiteral(guard.name))
+        expect(triggerGuardBlock).toContain(sqlLiteral(guard.relationName))
+        return
+      }
+      throw new Error(`未覆盖的数据库护栏类型：${guard.type}`)
+    })
+  })
+
+  it('rejects unknown cleanup fields instead of silently ignoring typos', () => {
+    expect(() =>
+      assertNoUnknownFillKeys({ skuCode: 'SKU001', typoField: 'x' }, ['skuCode'], 'SKU 明细 sku-1'),
+    ).toThrow('typoField')
+  })
+
+  it('only allows cleanup patches to fill currently empty fields', () => {
+    expect(() =>
+      assertOnlyMissingFieldsArePatched(
+        { skuCode: 'SKU001', specName: '', model: '' },
+        { skuCode: 'SKU002' },
+        ['skuCode', 'specName', 'model'],
+        'SKU 明细 sku-1',
+      ),
+    ).toThrow('不能覆盖已有主数据')
+  })
+
+  it('requires template current-value evidence for apply-mode cleanup plans', () => {
+    expect(() =>
+      assertCleanupEvidencePresent(
+        {
+          id: 'row-1',
+          productId: 'product-1',
+          spu: 'SPU001',
+          skuItemId: 'sku-item-1',
+          current: {
+            skuCode: '',
+            specName: '',
+            model: '',
+            barcode: '',
+          },
+        },
+        ['skuCode', 'specName', 'model', 'barcode', 'missingRequiredFields'],
+        ['productId', 'spu', 'skuItemId'],
+        'SKU 明细 row-1',
+      ),
+    ).toThrow('missingRequiredFields')
+
+    expect(() =>
+      assertCleanupEvidencePresent(
+        {
+          productId: 'product-1',
+          current: {
+            productName: '产品A',
+            productCategory: '',
+            productDevelopmentKind: '',
+            missingFields: ['productCategory', 'productDevelopmentKind'],
+          },
+        },
+        ['productName', 'productCategory', 'productDevelopmentKind', 'missingFields'],
+        ['spu'],
+        '产品 product-1',
+      ),
+    ).toThrow('spu')
+  })
+
+  it('rejects product profile enum values outside the formal domain', () => {
+    expect(() =>
+      assertValidProductProfilePatch({ productDevelopmentKind: 'draft' }, 'product-1'),
+    ).toThrow('只能填写 product 或 series')
+  })
+
+  it('rejects placeholder cleanup values instead of treating them as confirmed master data', () => {
+    expect(() =>
+      assertValidTextPatch({ skuCode: 'UNKNOWN' }, 'SKU 明细 sku-1'),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      assertValidTextPatch({ productCategory: '待补齐' }, '产品 product-1'),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      assertValidTextPatch({ specName: '默认值-规格' }, 'SKU 明细 sku-1'),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      assertValidAuditText('UNKNOWN', '主数据不完整决策 reason'),
+    ).toThrow('占位值或默认值')
+
+    expect(() =>
+      assertValidIncompleteApproval(
+        { allowIncomplete: true, incompleteReason: '默认值' },
+        'SKU 明细 sku-1',
+      ),
+    ).toThrow('占位值或默认值')
+  })
+
+  it('syncs manually confirmed productName back to the compatibility payload', () => {
+    expect(
+      updateProductProfilePayload(
+        { openingReference: { productCategory: '旧品类' } },
+        { productName: '餐桌A', productCategory: '餐桌', productDevelopmentKind: 'product' },
+      ),
+    ).toEqual({
+      productCategory: '餐桌',
+      productDevelopmentKind: 'product',
+      openingReference: {
+        productName: '餐桌A',
+        productCategory: '餐桌',
+      },
+    })
+  })
+
+  it('reports applied and skipped cleanup work separately', () => {
+    expect(countRemainingMissingFields([
+      { missingRequiredFields: ['model', 'specName'] },
+      { missingRequiredFields: ['model'] },
+      { skipped: true, missingRequiredFields: ['skuCode'] },
+    ], 'missingRequiredFields')).toEqual({
+      model: 2,
+      skuCode: 1,
+      specName: 1,
+    })
+    expect(countApprovedIncompleteRows([
+      { missingRequiredFields: ['model'] },
+      { skipped: true, missingRequiredFields: ['skuCode'] },
+      { missingRequiredFields: [] },
+    ], 'missingRequiredFields')).toBe(1)
+
+    expect(
+      buildResultSummary(
+        [
+          { id: 'sku-1', appliedFields: ['skuCode', 'model'] },
+          { id: 'sku-2', skipped: true },
+          { id: 'sku-3', appliedFields: ['skuCode'], missingRequiredFields: ['model'] },
+        ],
+        [
+          { productId: 'product-1', appliedFields: ['productCategory'] },
+          {
+            productId: 'product-2',
+            appliedFields: ['productName'],
+            missingFields: ['productDevelopmentKind'],
+          },
+        ],
+      ),
+    ).toEqual({
+      skuItems: {
+        total: 3,
+        appliedRows: 2,
+        skippedRows: 1,
+        appliedFields: 3,
+        approvedIncompleteRows: 1,
+        remainingMissingFieldCounts: { model: 1 },
+      },
+      productProfiles: {
+        total: 2,
+        appliedRows: 2,
+        skippedRows: 0,
+        appliedFields: 2,
+        approvedIncompleteRows: 1,
+        remainingMissingFieldCounts: { productDevelopmentKind: 1 },
+      },
+      qualityDecisionRepairs: {
+        total: 0,
+        appliedRows: 0,
+        skippedRows: 0,
+        appliedFields: 0,
+      },
+    })
+  })
+
+  it('fails cleanup verification when structured data and compatibility snapshots drift', async () => {
+    await expect(
+      assertPostCleanupMasterDataTruth({}, 'post-cleanup-dry-run', [], async () => ({
+        payloadSyncDiffCount: 1,
+        productSkuProfileSnapshotDiffCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      })),
+    ).rejects.toThrow('payloadSyncDiffCount')
+  })
+
+  it('returns post-cleanup truth counters when no drift exists', async () => {
+    await expect(
+      assertPostCleanupMasterDataTruth({}, 'post-cleanup-dry-run', [], async () => ({
+        payloadSyncDiffCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      })),
+    ).resolves.toEqual({
+      payloadSyncDiffCount: 0,
+      productSkuProfileSnapshotDiffCount: 0,
+      preSkuBasicInfoSnapshotDiffCount: 0,
+      nonIntegratedProductProfilePayloadDiffCount: 0,
+      nonIntegratedProductStockSourcePayloadDiffCount: 0,
+      duplicateSkuCodeGroups: 0,
+      duplicateBarcodeGroups: 0,
+      masterDataQualityDecisionPlaceholderRisk: 0,
+    })
+  })
+
+  it('fills a SKU item and refreshes its quality state without touching existing fields', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: {
+                skuItems: [{ id: 'sku-item-1', skuCode: '', specName: '', model: '' }],
+              },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(client, {
+        id: 'row-1',
+        fill: {
+          skuCode: 'SPU00101',
+          specName: '1200 柚木色',
+          model: 'SPU001',
+          barcode: 'SPU00101N05V01',
+        },
+      }),
+    ).resolves.toEqual(
+      expect.objectContaining({
+        id: 'row-1',
+        dataQualityStatus: 'READY',
+        missingRequiredFields: [],
+        appliedFields: ['skuCode', 'specName', 'model', 'barcode'],
+      }),
+    )
+  })
+
+  it('normalizes SKU code and barcode cleanup values before writing structured rows and payload', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('sku."id" <> $1')) {
+        return { rowCount: 0, rows: [] }
+      }
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: {
+                skuItems: [{ id: 'sku-item-1', skuCode: '', specName: '', model: '', barcode: '' }],
+              },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await applySkuItemPatch(client, {
+      id: 'row-1',
+      fill: {
+        skuCode: ' spu00101 ',
+        specName: '1200 柚木色',
+        model: 'SPU001',
+        barcode: ' spu00101n05v01 ',
+      },
+    })
+
+    const skuUpdateCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('UPDATE "IntakeNonIntegratedSkuItem"'),
+    )
+    expect(skuUpdateCall[1][1]).toBe('SPU00101')
+    expect(skuUpdateCall[1][4]).toBe('SPU00101N05V01')
+
+    const productUpdateCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('UPDATE "IntakeNonIntegratedProduct"'),
+    )
+    const payload = JSON.parse(productUpdateCall[1][1])
+    expect(productUpdateCall[1][2]).toBe(CLEANUP_ACTOR_FALLBACK)
+    expect(payload.skuItems[0]).toEqual(
+      expect.objectContaining({
+        skuCode: 'SPU00101',
+        barcode: 'SPU00101N05V01',
+      }),
+    )
+  })
+
+  it('rejects SKU code conflicts with the same normalized semantics as the database index', async () => {
+    const client = createMockClient((sql, values) => {
+      if (sql.includes('sku."id" <> $1')) {
+        expect(sql).toContain('upper(btrim(sku."skuCode")) = $2')
+        expect(values[1]).toBe('ABC001')
+        return { rowCount: 1, rows: [{ id: 'row-2', spu: 'SPU002' }] }
+      }
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(client, {
+        id: 'row-1',
+        fill: {
+          skuCode: ' abc001 ',
+          specName: '1200 柚木色',
+          model: 'SPU001',
+        },
+      }),
+    ).rejects.toThrow('SPU002/row-2 冲突：ABC001')
+  })
+
+  it('rejects barcode conflicts with the same normalized semantics as the database index', async () => {
+    const client = createMockClient((sql, values) => {
+      if (sql.includes('sku."id" <> $1') && sql.includes('sku."skuCode"')) {
+        return { rowCount: 0, rows: [] }
+      }
+      if (sql.includes('sku."id" <> $1') && sql.includes('sku."barcode"')) {
+        expect(sql).toContain('upper(btrim(sku."barcode")) = $2')
+        expect(values[1]).toBe('BAR001')
+        return { rowCount: 1, rows: [{ id: 'row-2', spu: 'SPU002' }] }
+      }
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(client, {
+        id: 'row-1',
+        fill: {
+          skuCode: 'SPU00101',
+          specName: '1200 柚木色',
+          model: 'SPU001',
+          barcode: ' bar001 ',
+        },
+      }),
+    ).rejects.toThrow('SPU002/row-2 冲突：BAR001')
+  })
+
+  it('rejects stale SKU cleanup plans when current values no longer match the template', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: 'SPU00101',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(client, {
+        id: 'row-1',
+        current: {
+          skuCode: '',
+        },
+        fill: {
+          specName: '1200 柚木色',
+        },
+      }),
+    ).rejects.toThrow('清洗计划已过期')
+  })
+
+  it('requires apply-mode SKU cleanup to finish required fields unless explicitly approved', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(
+        client,
+        {
+          id: 'row-1',
+          fill: {
+            skuCode: 'SPU00101',
+          },
+        },
+        { requireComplete: true },
+      ),
+    ).rejects.toThrow('清洗后仍未补齐')
+  })
+
+  it('rejects apply-mode SKU cleanup plans without exported current evidence', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(
+        client,
+        {
+          id: 'row-1',
+          fill: {
+            skuCode: 'SPU00101',
+            specName: '1200 柚木色',
+            model: 'SPU001',
+          },
+        },
+        {
+          requireComplete: true,
+          requireCurrentEvidence: true,
+        },
+      ),
+    ).rejects.toThrow('current 当前值证据')
+
+    expect(client.query).not.toHaveBeenCalled()
+  })
+
+  it('requires an explicit reason before allowing staged incomplete SKU cleanup', async () => {
+    const createClient = () => createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applySkuItemPatch(
+        createClient(),
+        {
+          id: 'row-1',
+          fill: { skuCode: 'SPU00101' },
+          allowIncomplete: true,
+        },
+        { requireComplete: true },
+      ),
+    ).rejects.toThrow('清洗后仍未补齐')
+
+    await expect(
+      applySkuItemPatch(
+        createClient(),
+        {
+          id: 'row-1',
+          fill: { skuCode: 'SPU00101' },
+          allowIncomplete: true,
+          incompleteReason: '业务方确认分两次补齐规格名和型号',
+        },
+        { requireComplete: true },
+      ),
+    ).resolves.toEqual(
+      expect.objectContaining({
+        dataQualityStatus: 'INCOMPLETE',
+        missingRequiredFields: ['spec_name', 'model'],
+      }),
+    )
+  })
+
+  it('persists approved incomplete SKU cleanup reasons as auditable database decisions', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await applySkuItemPatch(
+      client,
+      {
+        id: 'row-1',
+        fill: { skuCode: 'SPU00101' },
+        allowIncomplete: true,
+        incompleteReason: '业务方确认规格名和型号下轮补齐',
+      },
+      { requireComplete: true, actor: '企划负责人' },
+    )
+
+    const qualityDecisionCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('INSERT INTO "MasterDataQualityDecision"'),
+    )
+    expect(qualityDecisionCall).toBeTruthy()
+    expect(qualityDecisionCall[1]).toEqual([
+      'IntakeNonIntegratedSkuItem',
+      'row-1',
+      'SPU001/sku-item-1',
+      'APPROVED_INCOMPLETE',
+      ['spec_name', 'model'],
+      '业务方确认规格名和型号下轮补齐',
+      '企划负责人',
+    ])
+  })
+
+  it('marks existing incomplete quality decisions as resolved after a SKU becomes READY', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedSkuItem" sku JOIN "IntakeNonIntegratedProduct" product')) {
+        if (sql.includes('sku."id" <> $1')) {
+          return { rowCount: 0, rows: [] }
+        }
+        return {
+          rows: [
+            {
+              id: 'row-1',
+              productId: 'product-1',
+              spu: 'SPU001',
+              skuItemId: 'sku-item-1',
+              skuCode: '',
+              specName: '',
+              model: '',
+              barcode: '',
+              payload: { skuItems: [{ id: 'sku-item-1' }] },
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await applySkuItemPatch(
+      client,
+      {
+        id: 'row-1',
+        fill: {
+          skuCode: 'SPU00101',
+          specName: '1200 柚木色',
+          model: 'DBZ-SPJK001',
+        },
+      },
+      { actor: '企划负责人' },
+    )
+
+    const resolveCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('UPDATE "MasterDataQualityDecision"'),
+    )
+    expect(resolveCall).toBeTruthy()
+    expect(resolveCall[1]).toEqual([
+      'IntakeNonIntegratedSkuItem',
+      'row-1',
+      'RESOLVED',
+      '企划负责人',
+      'APPROVED_INCOMPLETE',
+    ])
+  })
+
+  it('rejects product profile cleanup when the target field was already filled meanwhile', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: {},
+              productName: '已存在产品名',
+              productCategory: '',
+              productDevelopmentKind: '',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyProductProfilePatch(client, {
+        productId: 'product-1',
+        fill: {
+          productName: '新产品名',
+        },
+      }),
+    ).rejects.toThrow('不能覆盖已有主数据')
+  })
+
+  it('rejects stale product profile cleanup plans when current values changed', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '餐桌',
+              productDevelopmentKind: '',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyProductProfilePatch(client, {
+        productId: 'product-1',
+        spu: 'SPU001',
+        current: {
+          productName: '产品A',
+          productCategory: '',
+          productDevelopmentKind: '',
+          missingFields: ['productCategory', 'productDevelopmentKind'],
+        },
+        fill: {
+          productDevelopmentKind: 'product',
+        },
+      }),
+    ).rejects.toThrow('清洗计划已过期')
+  })
+
+  it('rejects product profile cleanup plans when product context changed', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU002',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '',
+              productDevelopmentKind: '',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyProductProfilePatch(client, {
+        productId: 'product-1',
+        spu: 'SPU001',
+        current: {
+          productName: '产品A',
+          productCategory: '',
+          productDevelopmentKind: '',
+          missingFields: ['productCategory', 'productDevelopmentKind'],
+        },
+        fill: {
+          productCategory: '餐桌',
+        },
+      }),
+    ).rejects.toThrow('清洗计划已过期')
+  })
+
+  it('records the cleanup actor on product payload updates', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '',
+              productDevelopmentKind: 'product',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await applyProductProfilePatch(
+      client,
+      {
+        productId: 'product-1',
+        fill: {
+          productCategory: '餐桌',
+        },
+      },
+      { actor: '企划负责人' },
+    )
+
+    const productUpdateCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('UPDATE "IntakeNonIntegratedProduct"'),
+    )
+    expect(productUpdateCall[1][2]).toBe('企划负责人')
+  })
+
+  it('requires an explicit reason before allowing staged incomplete product profile cleanup', async () => {
+    const createClient = () => createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '',
+              productDevelopmentKind: '',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyProductProfilePatch(
+        createClient(),
+        {
+          productId: 'product-1',
+          fill: { productCategory: '餐桌' },
+          allowIncomplete: true,
+        },
+        { requireComplete: true },
+      ),
+    ).rejects.toThrow('清洗后仍未补齐')
+
+    await expect(
+      applyProductProfilePatch(
+        createClient(),
+        {
+          productId: 'product-1',
+          fill: { productCategory: '餐桌' },
+          allowIncomplete: true,
+          incompleteReason: '业务方确认开发类型待产品经理复核',
+        },
+        { requireComplete: true },
+      ),
+    ).resolves.toEqual(
+      expect.objectContaining({
+        productId: 'product-1',
+        appliedFields: ['productCategory'],
+      }),
+    )
+  })
+
+  it('persists approved incomplete product profile cleanup reasons as auditable database decisions', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '',
+              productDevelopmentKind: '',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await applyProductProfilePatch(
+      client,
+      {
+        productId: 'product-1',
+        fill: { productCategory: '餐桌' },
+        allowIncomplete: true,
+        incompleteReason: '业务方确认开发类型待产品经理复核',
+      },
+      { requireComplete: true, actor: '企划负责人' },
+    )
+
+    const qualityDecisionCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('INSERT INTO "MasterDataQualityDecision"'),
+    )
+    expect(qualityDecisionCall).toBeTruthy()
+    expect(qualityDecisionCall[1]).toEqual([
+      'IntakeNonIntegratedProductProfile',
+      'product-1',
+      'SPU001',
+      'APPROVED_INCOMPLETE',
+      ['productDevelopmentKind'],
+      '业务方确认开发类型待产品经理复核',
+      '企划负责人',
+    ])
+  })
+
+  it('validates direct quality decision writes require a reason and actor', async () => {
+    await expect(
+      recordMasterDataQualityDecision(
+        { query: jest.fn() },
+        {
+          targetType: 'IntakeNonIntegratedSkuItem',
+          targetId: 'row-1',
+          missingFields: ['model'],
+          reason: '',
+          decidedBy: '企划负责人',
+        },
+      ),
+    ).rejects.toThrow('reason')
+
+    await expect(
+      recordMasterDataQualityDecision(
+        { query: jest.fn() },
+        {
+          targetType: 'IntakeNonIntegratedSkuItem',
+          targetId: 'row-1',
+          missingFields: ['model'],
+          reason: '业务确认',
+          decidedBy: '',
+        },
+      ),
+    ).rejects.toThrow('decidedBy')
+
+    await expect(
+      recordMasterDataQualityDecision(
+        { query: jest.fn() },
+        {
+          targetType: 'IntakeNonIntegratedSkuItem',
+          targetId: 'row-1',
+          missingFields: ['model'],
+          reason: '待确认',
+          decidedBy: '企划负责人',
+        },
+      ),
+    ).rejects.toThrow('占位值或默认值')
+
+    await expect(
+      recordMasterDataQualityDecision(
+        { query: jest.fn() },
+        {
+          targetType: 'IntakeNonIntegratedSkuItem',
+          targetId: 'row-1',
+          missingFields: ['model'],
+          reason: '业务确认分阶段处理',
+          decidedBy: 'UNKNOWN',
+        },
+      ),
+    ).rejects.toThrow('占位值或默认值')
+  })
+
+  it('can resolve an open quality decision directly', async () => {
+    const client = { query: jest.fn(() => Promise.resolve({ rowCount: 1, rows: [] })) }
+
+    await resolveMasterDataQualityDecisions(client, {
+      targetType: 'IntakeNonIntegratedSkuItem',
+      targetId: 'row-1',
+      resolvedBy: '企划负责人',
+    })
+
+    expect(client.query.mock.calls[0][1]).toEqual([
+      'IntakeNonIntegratedSkuItem',
+      'row-1',
+      'RESOLVED',
+      '企划负责人',
+      'APPROVED_INCOMPLETE',
+    ])
+  })
+
+  it('repairs placeholder quality decision audit text with current evidence', async () => {
+    const client = createMockClient((sql) => {
+      if (String(sql).includes('FROM "MasterDataQualityDecision"')) {
+        return {
+          rows: [
+            {
+              id: 'decision-1',
+              targetType: 'IntakeNonIntegratedSkuItem',
+              targetId: 'sku-row-1',
+              targetBusinessKey: 'SPU001/sku-item-1',
+              status: 'APPROVED_INCOMPLETE',
+              reason: '待确认',
+              decidedBy: 'UNKNOWN',
+              resolvedBy: null,
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyQualityDecisionRepairPatch(client, {
+        id: 'decision-1',
+        targetType: 'IntakeNonIntegratedSkuItem',
+        targetId: 'sku-row-1',
+        targetBusinessKey: 'SPU001/sku-item-1',
+        current: {
+          reason: '待确认',
+          decidedBy: 'UNKNOWN',
+          resolvedBy: null,
+          status: 'APPROVED_INCOMPLETE',
+          placeholderFields: ['reason', 'decidedBy'],
+        },
+        fill: {
+          reason: '业务确认分阶段补齐型号',
+          decidedBy: '企划负责人',
+        },
+      }),
+    ).resolves.toEqual({
+      id: 'decision-1',
+      targetType: 'IntakeNonIntegratedSkuItem',
+      targetId: 'sku-row-1',
+      appliedFields: ['reason', 'decidedBy'],
+    })
+
+    const updateCall = client.query.mock.calls.find(([sql]) =>
+      String(sql).includes('UPDATE "MasterDataQualityDecision"'),
+    )
+    expect(updateCall[1]).toEqual([
+      'decision-1',
+      '业务确认分阶段补齐型号',
+      '企划负责人',
+    ])
+  })
+
+  it('rejects apply-mode product profile cleanup plans without exported current evidence', async () => {
+    const client = createMockClient((sql) => {
+      if (sql.includes('FROM "IntakeNonIntegratedProduct" product JOIN "IntakeNonIntegratedProductProfile"')) {
+        return {
+          rows: [
+            {
+              id: 'product-1',
+              spu: 'SPU001',
+              payload: { openingReference: {} },
+              productName: '产品A',
+              productCategory: '',
+              productDevelopmentKind: 'product',
+            },
+          ],
+        }
+      }
+      return { rowCount: 1, rows: [] }
+    })
+
+    await expect(
+      applyProductProfilePatch(
+        client,
+        {
+          productId: 'product-1',
+          fill: {
+            productCategory: '餐桌',
+          },
+        },
+        {
+          requireComplete: true,
+          requireCurrentEvidence: true,
+        },
+      ),
+    ).rejects.toThrow('current 当前值证据')
+
+    expect(client.query).not.toHaveBeenCalled()
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js b/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
new file mode 100644
index 00000000..509720c8
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
@@ -0,0 +1,303 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  CONFIRM_TOKEN,
+  buildFoundationRequiredMigrationApplyPlan,
+  getBackupFingerprint,
+  migrationHistoryReady,
+  parseArgs,
+  writeJsonReport,
+} = require('../../scripts/apply-master-data-foundation-migrations')
+
+function readiness(overrides = {}) {
+  return {
+    migrationHistory: {
+      tableExists: true,
+      totalMigrationRows: 86,
+      appliedMigrationRows: 86,
+      unfinishedMigrationRows: 0,
+      rolledBackMigrationRows: 0,
+    },
+    migrationCount: 43,
+    readyMigrationCount: 11,
+    pendingMigrationCount: 32,
+    pendingStructureMigrationCount: 0,
+    pendingIdempotentMigrationCount: 32,
+    pendingStructureMigrationPaths: [],
+    pendingIdempotentMigrationPaths: [
+      'prisma/migrations/20260530143000_tighten_external_readonly_view_sources/migration.sql',
+    ],
+    ...overrides,
+  }
+}
+
+describe('apply-master-data-foundation-migrations', () => {
+  it('parses dry-run, apply, confirmation, and output flags', () => {
+    expect(parseArgs([])).toEqual({
+      apply: false,
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+      outputPath: '',
+    })
+    expect(parseArgs([
+      '--apply',
+      `--confirm=${CONFIRM_TOKEN}`,
+      '--expected-database-identity',
+      'postgresql|furniture|localhost|5432|furniture_3d|',
+      '--expected-backup-sha256=abc123',
+    ])).toEqual({
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'abc123',
+      outputPath: '',
+    })
+    expect(parseArgs(['--output=.master-data-audits/apply-plan.json'])).toEqual({
+      apply: false,
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+      outputPath: '.master-data-audits/apply-plan.json',
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--force'])).toThrow('未知参数')
+  })
+
+  it('requires clean Prisma migration history before applying foundation guards', () => {
+    expect(migrationHistoryReady(readiness().migrationHistory)).toBe(true)
+    expect(migrationHistoryReady({
+      tableExists: false,
+      unfinishedMigrationRows: 0,
+      rolledBackMigrationRows: 0,
+    })).toBe(false)
+    expect(migrationHistoryReady({
+      tableExists: true,
+      unfinishedMigrationRows: 1,
+      rolledBackMigrationRows: 0,
+    })).toBe(false)
+  })
+
+  it('builds a dry-run plan without requiring the apply confirmation token', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness())
+
+    expect(plan.dryRun).toBe(true)
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.pendingIdempotentMigrationCount).toBe(32)
+    expect(plan.blockers).toEqual([])
+    expect(plan.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          name: 'apply-required-foundation-migrations',
+          dangerous: true,
+        }),
+      ]),
+    )
+  })
+
+  it('blocks apply without the exact confirmation token', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      apply: true,
+      confirm: 'wrong-token',
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'confirm' }),
+      ]),
+    )
+  })
+
+  it('requires explicit database identity and backup fingerprint before applying', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.missing' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.missing' }),
+      ]),
+    )
+  })
+
+  it('blocks apply when database identity or backup fingerprint does not match', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|wrong_db|',
+      expectedBackupSha256: 'wrong-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.mismatch' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.mismatch' }),
+      ]),
+    )
+  })
+
+  it('blocks apply before structure migrations and baseline history are ready', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
+      migrationHistory: {
+        tableExists: false,
+        totalMigrationRows: 0,
+        appliedMigrationRows: 0,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+      },
+      pendingStructureMigrationCount: 2,
+      pendingStructureMigrationPaths: [
+        'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+      ],
+    }), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationHistory.notReady' }),
+        expect.objectContaining({ key: 'pendingStructureMigrationCount' }),
+      ]),
+    )
+  })
+
+  it('blocks apply before data-check debt is cleaned', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
+      checks: [
+        {
+          path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
+          kind: 'idempotent',
+          ready: false,
+          targetRelations: [
+            {
+              relationName: '"MasterDataQualityDecision"',
+              exists: true,
+            },
+          ],
+          dataChecks: [
+            {
+              name: 'master_data_quality_decision_placeholder_text_zero',
+              expectedValue: 0,
+              matches: false,
+            },
+          ],
+        },
+      ],
+    }), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          key: 'dataChecks.notReady',
+          value: 1,
+          evidence: [
+            {
+              path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
+              name: 'master_data_quality_decision_placeholder_text_zero',
+              expectedValue: 0,
+            },
+          ],
+        }),
+      ]),
+    )
+  })
+
+  it('does not report data-check debt before the target relation exists', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
+      checks: [
+        {
+          path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
+          kind: 'idempotent',
+          ready: false,
+          targetRelations: [
+            {
+              relationName: '"MasterDataQualityDecision"',
+              exists: false,
+            },
+          ],
+          dataChecks: [
+            {
+              name: 'master_data_quality_decision_placeholder_text_zero',
+              expectedValue: 0,
+              matches: false,
+            },
+          ],
+        },
+      ],
+    }))
+
+    expect(plan.blockers).not.toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'dataChecks.notReady' }),
+      ]),
+    )
+  })
+
+  it('allows apply only after baseline history and structure migrations are ready', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(true)
+    expect(plan.blockers).toEqual([])
+  })
+
+  it('fingerprints the declared database backup file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-required-backup-'))
+    fs.writeFileSync(path.join(tempDir, 'backup.dump'), 'backup')
+
+    expect(getBackupFingerprint({ DATABASE_BACKUP_FILE: 'backup.dump' }, tempDir)).toEqual(
+      expect.objectContaining({
+        provided: true,
+        exists: true,
+        sizeBytes: 6,
+        sha256: '54d00d867758cef816bc4685f58e327b949712b07ebd17c3485f3ffc9e9f5133',
+      }),
+    )
+    expect(getBackupFingerprint({}, tempDir)).toEqual({
+      provided: false,
+      path: '',
+      exists: false,
+      sha256: '',
+    })
+  })
+
+  it('writes apply plans to nested local audit files', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-required-apply-'))
+    const outputPath = writeJsonReport(
+      'nested/apply-plan.json',
+      { mode: 'master-data-foundation-required-migration-apply-plan' },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/apply-plan.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'master-data-foundation-required-migration-apply-plan',
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js b/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
new file mode 100644
index 00000000..245026cc
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
@@ -0,0 +1,317 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const applyPreSkuRepair = require('../../scripts/apply-pre-sku-formalization-repair')
+const preSkuRepairPlan = require('../../scripts/plan-pre-sku-formalization-repair')
+const {
+  APPLY_CONFIRMATION,
+  EXECUTION_PLAN_MODE,
+  assertApplyExecutionEvidence,
+  assertNoUnknownExecutionPlanKeys,
+  assertNoRemainingTargetMismatches,
+  assertValidationReadyForApply,
+  buildExecutionPlanTemplate,
+  findRemainingTargetMismatches,
+  isDisallowedAuditTextValue,
+  parseArgs,
+  validateExecutionPlanFreshness,
+  validateExecutionPlanShape,
+} = applyPreSkuRepair
+const {
+  buildCurrentEvidence,
+  buildEvidenceFingerprint,
+} = preSkuRepairPlan
+
+function samplePreSku(overrides = {}) {
+  return {
+    mismatchReason: 'formalized_without_product_sku',
+    preSkuId: 'pre_sku_1',
+    draftGroupId: 'draft_1',
+    draftGroupCode: 'DG-001',
+    sequence: 1,
+    status: 'FORMALIZED',
+    linkedFormalSkuId: null,
+    linkedSkuCode: null,
+    linkedSkuDeletedAt: null,
+    linkedProductId: null,
+    linkedProductDeletedAt: null,
+    ...overrides,
+  }
+}
+
+function executionDecision(sample = samplePreSku(), overrides = {}) {
+  const currentEvidence = buildCurrentEvidence(sample)
+  return {
+    preSkuId: sample.preSkuId,
+    decision: 'revert-pre-sku-status',
+    reason: '业务确认该准 SKU 未生成正式 SKU，回退后重新走入库链路',
+    currentEvidence,
+    evidenceFingerprint: buildEvidenceFingerprint(currentEvidence),
+    ...overrides,
+  }
+}
+
+function executionPlan(sample = samplePreSku(), overrides = {}) {
+  return {
+    mode: EXECUTION_PLAN_MODE,
+    confirmation: APPLY_CONFIRMATION,
+    confirmedBy: '吴勇杰',
+    decisions: [executionDecision(sample)],
+    ...overrides,
+  }
+}
+
+describe('apply-pre-sku-formalization-repair', () => {
+  it('parses dry-run and guarded apply arguments', () => {
+    expect(parseArgs(['--plan', 'plan.json'])).toEqual({
+      template: false,
+      apply: false,
+      planPath: 'plan.json',
+      outputPath: '',
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(parseArgs([
+      '--plan=plan.json',
+      '--output',
+      'report.json',
+      '--apply',
+      '--confirm',
+      APPLY_CONFIRMATION,
+      '--expected-database-identity',
+      'postgresql|furniture|localhost|5432|furniture_3d|',
+      '--expected-backup-sha256',
+      'a'.repeat(64),
+    ])).toEqual({
+      template: false,
+      apply: true,
+      planPath: 'plan.json',
+      outputPath: 'report.json',
+      confirm: APPLY_CONFIRMATION,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'a'.repeat(64),
+    })
+    expect(parseArgs(['--template', '--output', 'template.json'])).toEqual({
+      template: true,
+      apply: false,
+      planPath: '',
+      outputPath: 'template.json',
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+    })
+    expect(() => parseArgs([])).toThrow('--plan')
+    expect(() => parseArgs(['--plan', 'plan.json', '--confirm', APPLY_CONFIRMATION])).toThrow(
+      '只允许和 --apply',
+    )
+    expect(() => parseArgs(['--template', '--apply'])).toThrow('--template')
+    expect(() => parseArgs(['--template', '--plan', 'plan.json'])).toThrow('--template')
+  })
+
+  it('builds an execution template from current mismatch evidence without pretending to be confirmed', () => {
+    const sample = samplePreSku()
+    const currentEvidence = buildCurrentEvidence(sample)
+    const template = buildExecutionPlanTemplate([sample], {
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+    })
+
+    expect(template).toEqual(expect.objectContaining({
+      mode: EXECUTION_PLAN_MODE,
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      candidateCount: 1,
+      confirmation: '',
+      confirmedBy: '',
+      templateInstructions: expect.arrayContaining([
+        expect.stringContaining('待业务确认'),
+      ]),
+    }))
+    expect(template.decisions[0]).toEqual(expect.objectContaining({
+      preSkuId: 'pre_sku_1',
+      mismatchReason: 'formalized_without_product_sku',
+      decision: '',
+      reason: '',
+      formalSkuId: '',
+      currentEvidence,
+      evidenceFingerprint: buildEvidenceFingerprint(currentEvidence),
+      allowedDecisions: expect.arrayContaining([
+        expect.objectContaining({ decision: 'revert-pre-sku-status' }),
+      ]),
+    }))
+    expect(validateExecutionPlanShape(template)).toEqual(
+      expect.objectContaining({
+        valid: false,
+        blockers: expect.arrayContaining(['confirmedBy']),
+        decisionBlockers: [
+          expect.objectContaining({
+            issues: expect.arrayContaining(['decision', 'reason']),
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('rejects unknown top-level keys and placeholder audit text', () => {
+    const plan = executionPlan()
+    expect(() => assertNoUnknownExecutionPlanKeys({ ...plan, sql: 'UPDATE "PreSku"' })).toThrow(
+      '不允许的顶层字段',
+    )
+    expect(isDisallowedAuditTextValue('待补齐')).toBe(true)
+    expect(validateExecutionPlanShape({
+      ...plan,
+      confirmedBy: '默认值',
+      decisions: [
+        {
+          ...plan.decisions[0],
+          reason: '待确认',
+        },
+      ],
+    })).toEqual(
+      expect.objectContaining({
+        valid: false,
+        blockers: expect.arrayContaining(['confirmedBy.placeholder']),
+        decisionBlockers: [
+          expect.objectContaining({
+            issues: expect.arrayContaining(['reason.placeholder']),
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('validates current evidence before any lifecycle write', () => {
+    const sample = samplePreSku()
+    const plan = executionPlan(sample)
+
+    expect(validateExecutionPlanFreshness(plan, [sample], {
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+    })).toEqual(
+      expect.objectContaining({
+        mode: 'validate-pre-sku-formalization-repair-execution-plan',
+        valid: true,
+        committed: false,
+        requiresDatabase: true,
+        decisionCount: 1,
+        readyDecisionCount: 1,
+        staleDecisionCount: 0,
+        blockerCount: 0,
+      }),
+    )
+
+    expect(validateExecutionPlanFreshness(plan, [{ ...sample, status: 'PREVIEW_CONFIRMED' }])).toEqual(
+      expect.objectContaining({
+        valid: false,
+        readyDecisionCount: 0,
+        staleDecisionCount: 1,
+        blockers: expect.arrayContaining([
+          expect.objectContaining({
+            key: 'decision-not-current',
+            reason: expect.stringContaining('staleCurrentEvidence'),
+          }),
+        ]),
+      }),
+    )
+  })
+
+  it('requires formalSkuId when linking an existing ProductSKU', () => {
+    const plan = executionPlan(samplePreSku(), {
+      decisions: [
+        executionDecision(samplePreSku(), {
+          decision: 'link-existing-product-sku',
+        }),
+      ],
+    })
+    expect(validateExecutionPlanShape(plan)).toEqual(
+      expect.objectContaining({
+        valid: false,
+        decisionBlockers: [
+          expect.objectContaining({
+            issues: expect.arrayContaining(['formalSkuId']),
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('requires confirmation, database identity and backup sha before apply', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pre-sku-apply-'))
+    const backupPath = path.join(tempDir, 'backup.dump')
+    fs.writeFileSync(backupPath, 'backup-bytes')
+    const backupSha = require('node:crypto').createHash('sha256').update('backup-bytes').digest('hex')
+
+    expect(() =>
+      assertApplyExecutionEvidence({
+        apply: true,
+        confirm: '',
+        expectedDatabaseIdentity: '',
+        expectedBackupSha256: '',
+      }, {
+        databaseUrl: 'postgresql://furniture:secret@localhost:5432/furniture_3d',
+        env: { DATABASE_BACKUP_FILE: backupPath },
+        rootDir: tempDir,
+      }),
+    ).toThrow('confirm')
+
+    expect(assertApplyExecutionEvidence({
+      apply: true,
+      confirm: APPLY_CONFIRMATION,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: backupSha,
+    }, {
+      databaseUrl: 'postgresql://furniture:secret@localhost:5432/furniture_3d',
+      env: { DATABASE_BACKUP_FILE: backupPath },
+      rootDir: tempDir,
+    })).toEqual(
+      expect.objectContaining({
+        actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+        backupFingerprint: expect.objectContaining({
+          exists: true,
+          sha256: backupSha,
+        }),
+      }),
+    )
+  })
+
+  it('does not allow apply when validation still has blockers', () => {
+    expect(() =>
+      assertValidationReadyForApply({
+        valid: false,
+        blockers: [{ key: 'staleCurrentEvidence' }],
+      }, executionPlan()),
+    ).toThrow('staleCurrentEvidence')
+    expect(() =>
+      assertValidationReadyForApply({
+        valid: true,
+        blockers: [],
+      }, {
+        ...executionPlan(),
+        confirmation: '',
+      }),
+    ).toThrow('confirmation=')
+  })
+
+  it('requires planned PreSku mismatches to disappear before commit', () => {
+    const sample = samplePreSku()
+    const decisions = [executionDecision(sample)]
+
+    expect(findRemainingTargetMismatches(decisions, [
+      sample,
+      samplePreSku({ preSkuId: 'other_pre_sku' }),
+    ])).toEqual([
+      {
+        preSkuId: 'pre_sku_1',
+        mismatchReason: 'formalized_without_product_sku',
+        draftGroupCode: 'DG-001',
+        linkedFormalSkuId: '',
+      },
+    ])
+
+    expect(() => assertNoRemainingTargetMismatches(decisions, [sample])).toThrow(
+      '修复后仍存在错位',
+    )
+    expect(assertNoRemainingTargetMismatches(decisions, [])).toEqual({
+      checkedPreSkuIds: ['pre_sku_1'],
+      remainingMismatchCount: 0,
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/apply-prisma-baseline-resolve.test.js b/furniture-3d-system/tests/scripts/apply-prisma-baseline-resolve.test.js
new file mode 100644
index 00000000..d6aa0d21
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/apply-prisma-baseline-resolve.test.js
@@ -0,0 +1,168 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildBaselineResolvePlan,
+  databaseIdentityFromDescription,
+  getBackupFingerprintFromPreflight,
+  parseArgs,
+  writeJsonReport,
+} = require('../../scripts/apply-prisma-baseline-resolve')
+
+function makeRootWithMigration(migrationId = '20260529213000_add_external_readonly_contract') {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'baseline-resolve-root-'))
+  fs.mkdirSync(path.join(rootDir, 'prisma', 'migrations', migrationId), { recursive: true })
+  fs.writeFileSync(path.join(rootDir, 'prisma', 'migrations', migrationId, 'migration.sql'), '-- noop\n')
+  return rootDir
+}
+
+function preflight(overrides = {}) {
+  return {
+    recommendedAction: 'baseline-resolve-candidate',
+    database: {
+      protocol: 'postgresql',
+      username: 'app',
+      host: 'localhost',
+      port: '5432',
+      databaseName: 'furniture_3d',
+      schema: 'public',
+    },
+    backupEvidence: {
+      path: '',
+      sha256: 'backup-sha',
+      sizeBytes: 12,
+    },
+    currentSchemaDiffHasSql: false,
+    migrationDiff: { status: 0 },
+    migrationSchemaDiff: { status: 0 },
+    ...overrides,
+  }
+}
+
+describe('apply-prisma-baseline-resolve', () => {
+  it('parses baseline resolve safety arguments', () => {
+    expect(parseArgs([
+      '--apply',
+      '--confirm=apply-prisma-baseline-resolve',
+      '--preflight',
+      'preflight.json',
+      '--migration-id=20260529213000_add_external_readonly_contract',
+      '--expected-database-identity',
+      'postgresql|app|localhost|5432|furniture_3d|public',
+      '--expected-backup-sha256=backup-sha',
+      '--output',
+      'plan.json',
+    ])).toEqual({
+      apply: true,
+      confirm: 'apply-prisma-baseline-resolve',
+      preflightPath: 'preflight.json',
+      migrationId: '20260529213000_add_external_readonly_contract',
+      expectedDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      expectedBackupSha256: 'backup-sha',
+      outputPath: 'plan.json',
+    })
+    expect(() => parseArgs(['--preflight'])).toThrow('--preflight')
+    expect(() => parseArgs(['--migration-id'])).toThrow('--migration-id')
+    expect(() => parseArgs(['--expected-database-identity'])).toThrow('--expected-database-identity')
+    expect(() => parseArgs(['--expected-backup-sha256'])).toThrow('--expected-backup-sha256')
+    expect(() => parseArgs(['--unknown'])).toThrow('未知参数')
+  })
+
+  it('derives the same database identity shape as the guarded apply commands', () => {
+    expect(databaseIdentityFromDescription(preflight().database)).toBe(
+      'postgresql|app|localhost|5432|furniture_3d|public',
+    )
+  })
+
+  it('fingerprints the backup recorded in the preflight report', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'baseline-resolve-backup-'))
+    const backupPath = path.join(tempDir, 'backup.dump')
+    fs.writeFileSync(backupPath, 'backup-bytes')
+
+    const fingerprint = getBackupFingerprintFromPreflight(preflight({
+      backupEvidence: { path: backupPath, sha256: '', sizeBytes: 'backup-bytes'.length },
+    }))
+
+    expect(fingerprint).toEqual(
+      expect.objectContaining({
+        provided: true,
+        path: backupPath,
+        exists: true,
+        sizeBytes: 'backup-bytes'.length,
+      }),
+    )
+    expect(fingerprint.sha256).toMatch(/^[a-f0-9]{64}$/)
+  })
+
+  it('blocks baseline resolve unless the preflight proves structure equivalence', () => {
+    const rootDir = makeRootWithMigration()
+    const plan = buildBaselineResolvePlan(preflight({
+      currentSchemaDiffHasSql: true,
+      migrationDiff: { status: 2 },
+    }), {
+      rootDir,
+      apply: true,
+      confirm: 'apply-prisma-baseline-resolve',
+      migrationId: '20260529213000_add_external_readonly_contract',
+      expectedDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      actualDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'currentSchemaDiff.notEmpty' }),
+        expect.objectContaining({ key: 'migrationDiff.notEmpty' }),
+      ]),
+    )
+  })
+
+  it('blocks apply without confirmation, target identity, or backup sha', () => {
+    const rootDir = makeRootWithMigration()
+    const plan = buildBaselineResolvePlan(preflight(), {
+      rootDir,
+      apply: true,
+      migrationId: '20260529213000_add_external_readonly_contract',
+      actualDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      backupFingerprint: { provided: false, exists: false, sha256: '' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'confirm' }),
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.missing' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.missing' }),
+        expect.objectContaining({ key: 'backupFingerprint.missing' }),
+      ]),
+    )
+  })
+
+  it('allows apply only for one existing migration with matching identity and backup sha', () => {
+    const rootDir = makeRootWithMigration()
+    const plan = buildBaselineResolvePlan(preflight(), {
+      rootDir,
+      apply: true,
+      confirm: 'apply-prisma-baseline-resolve',
+      migrationId: '20260529213000_add_external_readonly_contract',
+      expectedDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      actualDatabaseIdentity: 'postgresql|app|localhost|5432|furniture_3d|public',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(true)
+    expect(plan.blockers).toEqual([])
+    expect(plan.commands[0].command).toContain('--migration-id <migration_id>')
+  })
+
+  it('writes local audit reports', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'baseline-resolve-plan-'))
+    const outputPath = writeJsonReport('nested/plan.json', { readyToApply: false }, tempDir)
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/plan.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({ readyToApply: false })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/apply-prisma-structure-repair.test.js b/furniture-3d-system/tests/scripts/apply-prisma-structure-repair.test.js
new file mode 100644
index 00000000..113961ac
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/apply-prisma-structure-repair.test.js
@@ -0,0 +1,684 @@
+const crypto = require('node:crypto')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  CONFIRM_TOKEN,
+  backupFingerprintFromPreflight,
+  buildAuthorizedStructureRepairPlan,
+  compareMigrationManifests,
+  databaseIdentity,
+  databaseMatches,
+  diffIsEmpty,
+  fileFingerprint,
+  parseArgs,
+  reportAgeMinutes,
+  summarizeSqlSafety,
+  writeJsonReport,
+} = require('../../scripts/apply-prisma-structure-repair')
+
+function preflight(overrides = {}) {
+  return {
+    recommendedAction: 'baseline-and-structure-repair-required',
+    database: {
+      protocol: 'postgresql',
+      host: 'localhost',
+      port: '5432',
+      databaseName: 'furniture_3d',
+    },
+    backupEvidence: {
+      usable: true,
+    },
+    backupVerification: {
+      ok: true,
+    },
+    checkedAt: new Date().toISOString(),
+    pendingMigrationCount: 86,
+    currentSchemaDiffHasSql: true,
+    migrationDiff: {
+      skipped: false,
+      status: 2,
+      stdout: 'CREATE TABLE "Missing" ("id" TEXT);',
+    },
+    migrationSchemaDiff: {
+      skipped: false,
+      status: 0,
+      stdout: '-- This is an empty migration.',
+    },
+    ...overrides,
+  }
+}
+
+function structureRehearsal(overrides = {}) {
+  return {
+    status: 'structure-repair-rehearsal-passed',
+    repairApply: { ok: true },
+    repairSqlSummary: { hasDestructiveStatements: false },
+    repairSqlArtifact: {
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+    },
+    currentSchemaDiffAfter: {
+      status: 0,
+      stdout: '-- This is an empty migration.',
+    },
+    migrationDiffAfter: {
+      status: 0,
+      stdout: '-- This is an empty migration.',
+    },
+    baselineResolvePlan: {
+      candidate: true,
+      migrationCount: 86,
+      migrationIds: ['20260101000000_init', '20260102000000_next'],
+    },
+    migrationManifest: currentMigrationManifest,
+    baselineResolveRehearsal: {
+      ok: true,
+      appliedCount: 86,
+    },
+    checkedAt: new Date().toISOString(),
+    ...overrides,
+  }
+}
+
+function options(overrides = {}) {
+  return {
+    phase: 'plan',
+    apply: false,
+    confirm: '',
+    expectedSha256: '',
+    expectedDatabaseIdentity: '',
+    expectedBackupSha256: '',
+    maxPreflightAgeMinutes: 60,
+    ...overrides,
+  }
+}
+
+const actualDatabase = {
+  protocol: 'postgresql',
+  host: 'localhost',
+  port: '5432',
+  databaseName: 'furniture_3d',
+}
+const actualDatabaseIdentity = databaseIdentity(actualDatabase)
+const backupSha256 = crypto.createHash('sha256').update('backup-content').digest('hex')
+const backupFingerprint = {
+  provided: true,
+  exists: true,
+  sizeBytes: 14,
+  sha256: backupSha256,
+}
+const currentMigrationManifest = [
+  {
+    migrationId: '20260101000000_init',
+    path: 'prisma/migrations/20260101000000_init/migration.sql',
+    exists: true,
+    sizeBytes: 11,
+    sha256: 'a'.repeat(64),
+  },
+  {
+    migrationId: '20260102000000_next',
+    path: 'prisma/migrations/20260102000000_next/migration.sql',
+    exists: true,
+    sizeBytes: 12,
+    sha256: 'b'.repeat(64),
+  },
+]
+
+describe('apply-prisma-structure-repair', () => {
+  it('parses phase, evidence, apply confirmation, sha, and output flags', () => {
+    expect(parseArgs([])).toEqual({
+      phase: 'plan',
+      apply: false,
+      confirm: '',
+      preflightPath: '',
+      structureRehearsalPath: '',
+      repairSqlPath: '',
+      expectedSha256: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+      maxPreflightAgeMinutes: 60,
+      outputPath: '',
+    })
+    expect(parseArgs([
+      '--phase=apply-structure',
+      '--apply',
+      `--confirm=${CONFIRM_TOKEN}`,
+      '--preflight',
+      'preflight.json',
+      '--structure-rehearsal=repair.json',
+      '--repair-sql',
+      'structure.sql',
+      '--expected-sha256',
+      'abc',
+      '--expected-database-identity',
+      actualDatabaseIdentity,
+      '--expected-backup-sha256',
+      backupSha256,
+      '--max-preflight-age-minutes=30',
+      '--output=plan.json',
+    ])).toEqual({
+      phase: 'apply-structure',
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      preflightPath: 'preflight.json',
+      structureRehearsalPath: 'repair.json',
+      repairSqlPath: 'structure.sql',
+      expectedSha256: 'abc',
+      expectedDatabaseIdentity: actualDatabaseIdentity,
+      expectedBackupSha256: backupSha256,
+      maxPreflightAgeMinutes: 30,
+      outputPath: 'plan.json',
+    })
+    expect(() => parseArgs(['--phase=drop-everything'])).toThrow('未知 phase')
+    expect(() => parseArgs(['--preflight'])).toThrow('--preflight')
+    expect(() => parseArgs(['--expected-database-identity'])).toThrow('--expected-database-identity')
+    expect(() => parseArgs(['--expected-backup-sha256'])).toThrow('--expected-backup-sha256')
+    expect(() => parseArgs(['--max-preflight-age-minutes=0'])).toThrow(
+      '--max-preflight-age-minutes',
+    )
+    expect(() => parseArgs(['--force'])).toThrow('未知参数')
+  })
+
+  it('detects empty Prisma diff output', () => {
+    expect(diffIsEmpty({ skipped: false, status: 0 })).toBe(true)
+    expect(diffIsEmpty({ skipped: false, status: 2, stdout: 'CREATE TABLE "A"();' })).toBe(false)
+    expect(diffIsEmpty({ skipped: true, status: 0 })).toBe(false)
+    expect(diffIsEmpty(null)).toBe(false)
+  })
+
+  it('detects destructive SQL and compares database identities', () => {
+    expect(summarizeSqlSafety('CREATE TABLE "A"();')).toEqual(
+      expect.objectContaining({ hasDestructiveStatements: false }),
+    )
+    expect(summarizeSqlSafety('DROP TABLE "A"; TRUN' + 'CATE "B";')).toEqual(
+      expect.objectContaining({
+        hasDestructiveStatements: true,
+        destructiveStatementCounts: expect.objectContaining({ dropTable: 1, clearTable: 1 }),
+      }),
+    )
+    expect(databaseMatches(actualDatabase, { ...actualDatabase, host: 'LOCALHOST' })).toBe(true)
+    expect(databaseMatches(actualDatabase, { ...actualDatabase, databaseName: 'other' })).toBe(false)
+    expect(databaseMatches({ ...actualDatabase, schema: 'public' }, { ...actualDatabase, schema: 'app' })).toBe(false)
+    expect(compareMigrationManifests(currentMigrationManifest, currentMigrationManifest)).toEqual(
+      expect.objectContaining({ matches: true }),
+    )
+    expect(compareMigrationManifests(currentMigrationManifest, [
+      { ...currentMigrationManifest[0], sha256: 'c'.repeat(64) },
+      currentMigrationManifest[1],
+    ])).toEqual(expect.objectContaining({
+      matches: false,
+      changed: ['20260101000000_init'],
+    }))
+    expect(reportAgeMinutes('2026-06-01T00:00:00.000Z', '2026-06-01T00:30:00.000Z')).toBe(30)
+  })
+
+  it('fingerprints the backup referenced by preflight evidence', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'structure-repair-backup-'))
+    const backupPath = path.join(tempDir, 'backup.dump')
+    fs.writeFileSync(backupPath, 'backup-content', 'utf8')
+
+    expect(backupFingerprintFromPreflight({ backupEvidence: { path: backupPath } })).toEqual(
+      backupFingerprint,
+    )
+    expect(backupFingerprintFromPreflight({ backupEvidence: { path: path.join(tempDir, 'missing.dump') } })).toEqual({
+      provided: true,
+      exists: false,
+      sizeBytes: 0,
+      sha256: '',
+    })
+    expect(backupFingerprintFromPreflight({ backupEvidence: {} })).toEqual({
+      provided: false,
+      exists: false,
+      sizeBytes: 0,
+      sha256: '',
+    })
+  })
+
+  it('fingerprints repair SQL without leaking local file paths into plans', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'structure-repair-'))
+    const sqlPath = path.join(tempDir, 'structure.sql')
+    fs.writeFileSync(sqlPath, 'CREATE TABLE "A"();\n', 'utf8')
+
+    const fingerprint = fileFingerprint(sqlPath)
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight(),
+      structureRehearsal: structureRehearsal(),
+      repairSql: fingerprint,
+    })
+
+    expect(fingerprint).toEqual(expect.objectContaining({
+      exists: true,
+      sizeBytes: 20,
+    }))
+    expect(plan.repairSqlArtifact).toEqual({
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: fingerprint.sha256,
+    })
+    expect(JSON.stringify(plan)).not.toContain(tempDir)
+  })
+
+  it('builds a dry-run plan that can be reviewed without apply confirmation', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        backupEvidence: {
+          usable: true,
+          sha256: backupSha256,
+        },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+    })
+
+    expect(plan.phase).toBe('plan')
+    expect(plan.dryRun).toBe(true)
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.expectedDatabaseIdentity).toBe(actualDatabaseIdentity)
+    expect(plan.expectedBackupSha256).toBe(backupSha256)
+    expect(plan.blockers).toEqual([])
+    expect(plan.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ name: 'apply-structure', dangerous: true }),
+        expect.objectContaining({ name: 'resolve-baseline', dangerous: true }),
+      ]),
+    )
+  })
+
+  it('emits exact apply-structure args with fingerprints when evidence paths are known', () => {
+    const sqlSha256 = crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex')
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        backupEvidence: {
+          usable: true,
+          sha256: backupSha256,
+        },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: {
+        provided: true,
+        exists: true,
+        sizeBytes: 20,
+        sha256: sqlSha256,
+        safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+      },
+      options: options({
+        preflightPath: '.master-data-audits/preflight.json',
+        structureRehearsalPath: '.master-data-audits/structure-repair.json',
+        repairSqlPath: '.master-data-audits/structure-repair.sql',
+      }),
+    })
+
+    expect(plan.exactPhaseCommands).toEqual(
+      expect.objectContaining({
+        available: true,
+        missing: [],
+        applyStructureDryRun: expect.objectContaining({ dangerous: false }),
+        applyStructure: expect.objectContaining({ dangerous: true }),
+      }),
+    )
+    expect(plan.exactPhaseCommands.applyStructure.args).toEqual([
+      'scripts/apply-prisma-structure-repair.js',
+      '--phase=apply-structure',
+      '--apply',
+      `--confirm=${CONFIRM_TOKEN}`,
+      '--expected-sha256',
+      sqlSha256,
+      '--expected-database-identity',
+      actualDatabaseIdentity,
+      '--expected-backup-sha256',
+      backupSha256,
+      '--preflight',
+      '.master-data-audits/preflight.json',
+      '--structure-rehearsal',
+      '.master-data-audits/structure-repair.json',
+      '--repair-sql',
+      '.master-data-audits/structure-repair.sql',
+    ])
+    expect(plan.exactPhaseCommands.resolveBaselineTemplate.args).toContain(
+      '<post-repair-preflight.json>',
+    )
+  })
+
+  it('allows apply-structure dry-run to complete final evidence checks without --apply', () => {
+    const sqlSha256 = crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex')
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        backupEvidence: {
+          usable: true,
+          sha256: backupSha256,
+        },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: {
+        provided: true,
+        exists: true,
+        sizeBytes: 20,
+        sha256: sqlSha256,
+        safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+      },
+      options: options({
+        phase: 'apply-structure',
+        apply: false,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sqlSha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+
+    expect(plan.dryRun).toBe(true)
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual([])
+  })
+
+  it('accepts passed clone rehearsal evidence when local shadow diff was skipped', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        migrationSchemaDiff: {
+          skipped: true,
+          status: null,
+          stdout: '',
+        },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+    })
+
+    expect(plan.blockers).toEqual([])
+  })
+
+  it('blocks structure apply when SQL artifact or migration count differs', () => {
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({ pendingMigrationCount: 85 }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: {
+        provided: true,
+        exists: true,
+        sizeBytes: 99,
+        sha256: 'x'.repeat(64),
+        safety: summarizeSqlSafety('CREATE TABLE "A"();'),
+      },
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: 'x'.repeat(64),
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'preflight.pendingMigrationCountMismatch' }),
+        expect.objectContaining({ key: 'repairSql.sizeMismatch' }),
+        expect.objectContaining({ key: 'repairSql.sha256Mismatch' }),
+      ]),
+    )
+  })
+
+  it('requires post-repair structure equivalence before baseline resolve', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const blocked = buildAuthorizedStructureRepairPlan({
+      preflight: preflight(),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'resolve-baseline',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sql.sha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+    const ready = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        recommendedAction: 'baseline-resolve-candidate',
+        currentSchemaDiffHasSql: false,
+        migrationDiff: { skipped: false, status: 0, stdout: '-- This is an empty migration.' },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'resolve-baseline',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sql.sha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+
+    expect(blocked.readyToApply).toBe(false)
+    expect(blocked.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'postRepairPreflight.currentSchemaDiffHasSql' }),
+        expect.objectContaining({ key: 'postRepairPreflight.migrationDiff.notEmpty' }),
+      ]),
+    )
+    expect(ready.readyToApply).toBe(true)
+  })
+
+  it('blocks real phases when reports are stale, database identity differs, or SQL file is destructive', () => {
+    const checkedAt = '2026-06-01T01:00:00.000Z'
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        checkedAt: '2026-05-31T23:00:00.000Z',
+      }),
+      structureRehearsal: structureRehearsal({
+        checkedAt: '2026-05-31T23:00:00.000Z',
+      }),
+      repairSql: {
+        provided: true,
+        exists: true,
+        sizeBytes: 20,
+        sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+        safety: summarizeSqlSafety('DROP TABLE "A";'),
+      },
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        maxPreflightAgeMinutes: 30,
+        expectedSha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase: { ...actualDatabase, databaseName: 'wrong_db' },
+      backupFingerprint: {
+        provided: true,
+        exists: true,
+        sizeBytes: 99,
+        sha256: 'wrong',
+      },
+      migrationManifest: currentMigrationManifest,
+      checkedAt,
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'repairSql.fileDestructive' }),
+        expect.objectContaining({ key: 'databaseIdentity.mismatch' }),
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.mismatch' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.mismatch' }),
+        expect.objectContaining({ key: 'preflight.stale' }),
+        expect.objectContaining({ key: 'structureRehearsal.stale' }),
+      ]),
+    )
+  })
+
+  it('blocks real phases unless explicit database identity and backup fingerprint match', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const blocked = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({ backupEvidence: { usable: true, sizeBytes: 14, sha256: backupSha256 } }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+    const ready = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({ backupEvidence: { usable: true, sizeBytes: 14, sha256: backupSha256 } }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sql.sha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+
+    expect(blocked.readyToApply).toBe(false)
+    expect(blocked.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedSha256.missing' }),
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.missing' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.missing' }),
+      ]),
+    )
+    expect(ready.readyToApply).toBe(true)
+  })
+
+  it('blocks real phases when the current backup no longer matches preflight evidence', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({
+        backupEvidence: {
+          usable: true,
+          sizeBytes: 14,
+          sha256: 'different'.padEnd(64, '0'),
+        },
+      }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sql.sha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: currentMigrationManifest,
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'backupFingerprint.sha256Mismatch' }),
+      ]),
+    )
+  })
+
+  it('blocks real phases when migration files differ from the structure rehearsal manifest', () => {
+    const sql = {
+      provided: true,
+      exists: true,
+      sizeBytes: 20,
+      sha256: crypto.createHash('sha256').update('CREATE TABLE "A"();\n').digest('hex'),
+      safety: summarizeSqlSafety('CREATE TABLE "A"();\n'),
+    }
+    const plan = buildAuthorizedStructureRepairPlan({
+      preflight: preflight({ backupEvidence: { usable: true, sizeBytes: 14, sha256: backupSha256 } }),
+      structureRehearsal: structureRehearsal(),
+      repairSql: sql,
+      options: options({
+        phase: 'apply-structure',
+        apply: true,
+        confirm: CONFIRM_TOKEN,
+        expectedSha256: sql.sha256,
+        expectedDatabaseIdentity: actualDatabaseIdentity,
+        expectedBackupSha256: backupSha256,
+      }),
+      actualDatabase,
+      backupFingerprint,
+      migrationManifest: [
+        { ...currentMigrationManifest[0], sha256: 'c'.repeat(64) },
+        currentMigrationManifest[1],
+      ],
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationManifest.mismatch' }),
+      ]),
+    )
+  })
+
+  it('writes authorized repair plans to nested audit files', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'authorized-repair-plan-'))
+    const outputPath = writeJsonReport(
+      'nested/plan.json',
+      { mode: 'authorized-prisma-structure-repair' },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/plan.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'authorized-prisma-structure-repair',
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/create-postgres-backup.test.js b/furniture-3d-system/tests/scripts/create-postgres-backup.test.js
new file mode 100644
index 00000000..00d3701f
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/create-postgres-backup.test.js
@@ -0,0 +1,151 @@
+const path = require('node:path')
+const {
+  buildBackupFilePath,
+  buildDockerEnvFlagArgs,
+  buildDockerPgDumpArgs,
+  buildDockerVolumeArg,
+  buildPgDumpArgs,
+  parseBackupCliArgs,
+  parsePostgresUrl,
+  resolveDockerDatabaseHost,
+  sanitizeFileName,
+  timestampForFile,
+} = require('../../scripts/create-postgres-backup')
+
+describe('create-postgres-backup', () => {
+  it('sanitizes backup file names and timestamps', () => {
+    expect(sanitizeFileName('furniture 3d/prod')).toBe('furniture_3d_prod')
+    expect(timestampForFile(new Date('2026-06-01T08:09:10.123Z'))).toBe('20260601T080910Z')
+    expect(buildBackupFilePath({
+      databaseName: 'furniture 3d/prod',
+      outputDir: 'backup-dir',
+      now: new Date('2026-06-01T08:09:10.123Z'),
+    })).toBe(path.resolve('backup-dir', 'furniture_3d_prod-20260601T080910Z.dump'))
+  })
+
+  it('parses postgres urls without leaking passwords into pg_dump args', () => {
+    const databaseUrl = 'postgresql://user%40corp:secret%23pwd@localhost:5432/furniture_3d'
+
+    expect(parsePostgresUrl(databaseUrl)).toEqual({
+      host: 'localhost',
+      port: '5432',
+      databaseName: 'furniture_3d',
+      username: 'user@corp',
+      password: 'secret#pwd',
+    })
+
+    const command = buildPgDumpArgs({
+      databaseUrl,
+      outputFile: 'backup.dump',
+    })
+    expect(command.args).toEqual([
+      '--format=custom',
+      '--no-owner',
+      '--no-privileges',
+      '--file',
+      'backup.dump',
+      '--host',
+      'localhost',
+      '--port',
+      '5432',
+      '--username',
+      'user@corp',
+      '--dbname',
+      'furniture_3d',
+    ])
+    expect(command.args.join(' ')).not.toContain('secret#pwd')
+    expect(command.env).toEqual({ PGPASSWORD: 'secret#pwd' })
+  })
+
+  it('parses output directory from cli args or env', () => {
+    expect(parseBackupCliArgs(['--output-dir', 'tmp-backups'], {})).toEqual({
+      allowDockerPull: false,
+      dockerImage: 'postgres:16',
+      outputDir: path.resolve(process.cwd(), 'tmp-backups'),
+      useDocker: false,
+    })
+    expect(parseBackupCliArgs(['--output-dir=tmp-backups'], {})).toEqual({
+      allowDockerPull: false,
+      dockerImage: 'postgres:16',
+      outputDir: path.resolve(process.cwd(), 'tmp-backups'),
+      useDocker: false,
+    })
+    expect(parseBackupCliArgs([], { DATABASE_BACKUP_DIR: 'env-backups' })).toEqual({
+      allowDockerPull: false,
+      dockerImage: 'postgres:16',
+      outputDir: path.resolve(process.cwd(), 'env-backups'),
+      useDocker: false,
+    })
+    expect(() => parseBackupCliArgs(['--bad'], {})).toThrow('未知参数')
+  })
+
+  it('parses Docker backup options from cli args or env', () => {
+    expect(parseBackupCliArgs([
+      '--use-docker',
+      '--allow-docker-pull',
+      '--docker-image',
+      'postgres:17',
+    ], {})).toEqual(expect.objectContaining({
+      allowDockerPull: true,
+      dockerImage: 'postgres:17',
+      useDocker: true,
+    }))
+    expect(parseBackupCliArgs([
+      '--docker-image=postgres:15',
+    ], {
+      POSTGRES_BACKUP_USE_DOCKER: '1',
+      POSTGRES_BACKUP_ALLOW_DOCKER_PULL: '1',
+    })).toEqual(expect.objectContaining({
+      allowDockerPull: true,
+      dockerImage: 'postgres:15',
+      useDocker: true,
+    }))
+    expect(() => parseBackupCliArgs(['--use-docker', '--docker-image='], {})).toThrow(
+      'Docker 备份镜像不能为空',
+    )
+  })
+
+  it('builds Docker pg_dump args without leaking passwords', () => {
+    const databaseUrl = 'postgresql://user:secret%23pwd@localhost:5432/furniture_3d'
+    const outputFile = path.resolve('tmp-backups', 'backup.dump')
+    const command = buildDockerPgDumpArgs({ databaseUrl, outputFile })
+
+    expect(command.args).toEqual([
+      'pg_dump',
+      '--format=custom',
+      '--no-owner',
+      '--no-privileges',
+      '--file',
+      '/backup/backup.dump',
+      '--host',
+      process.platform === 'win32' ? 'host.docker.internal' : 'localhost',
+      '--port',
+      '5432',
+      '--username',
+      'user',
+      '--dbname',
+      'furniture_3d',
+    ])
+    expect(command.args.join(' ')).not.toContain('secret#pwd')
+    expect(command.env).toEqual({ PGPASSWORD: 'secret#pwd' })
+    expect(command.volumeArg).toBe(buildDockerVolumeArg(path.dirname(outputFile)))
+  })
+
+  it('passes Docker env names without values to keep secrets out of command lines', () => {
+    expect(buildDockerEnvFlagArgs({ PGPASSWORD: 'secret#pwd' })).toEqual([
+      '--env',
+      'PGPASSWORD',
+    ])
+    expect(buildDockerEnvFlagArgs({ PGPASSWORD: 'secret#pwd' }).join(' ')).not.toContain(
+      'secret#pwd',
+    )
+    expect(buildDockerEnvFlagArgs({ PGPASSWORD: '' })).toEqual([])
+  })
+
+  it('maps localhost for Docker containers on Windows', () => {
+    expect(resolveDockerDatabaseHost('127.0.0.1')).toBe(
+      process.platform === 'win32' ? 'host.docker.internal' : 'localhost',
+    )
+    expect(resolveDockerDatabaseHost('db.internal')).toBe('db.internal')
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/diagnose-prisma-migration-baseline.test.js b/furniture-3d-system/tests/scripts/diagnose-prisma-migration-baseline.test.js
new file mode 100644
index 00000000..c33a53fb
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/diagnose-prisma-migration-baseline.test.js
@@ -0,0 +1,238 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildBaselineDiagnosis,
+  describeDatabaseUrl,
+  getDatabaseIdentity,
+  getDatabasePhysicalIdentity,
+  hasSqlDiff,
+  listMigrationDirectories,
+  loadDatabaseUrl,
+  loadShadowDatabaseUrl,
+  parsePendingPrismaMigrations,
+  runMigrationDiffWithShadow,
+  validateShadowDatabaseUrl,
+} = require('../../scripts/diagnose-prisma-migration-baseline')
+
+describe('diagnose-prisma-migration-baseline', () => {
+  it('loads DATABASE_URL from env before .env and redacts credentials in description', () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'prisma-baseline-env-'))
+    try {
+      fs.writeFileSync(
+        path.join(rootDir, '.env'),
+        'DATABASE_URL="postgresql://file_user:file_pass@localhost:5432/from_file"\n',
+      )
+      expect(loadDatabaseUrl(rootDir, {
+        DATABASE_URL: 'postgresql://env_user:env_pass@db.example.com:5432/from_env',
+      })).toBe('postgresql://env_user:env_pass@db.example.com:5432/from_env')
+      fs.writeFileSync(
+        path.join(rootDir, '.env'),
+        'SHADOW_DATABASE_URL="postgresql://shadow:secret@localhost:5432/shadow_db"\n',
+      )
+      expect(loadShadowDatabaseUrl(rootDir, {})).toBe(
+        'postgresql://shadow:secret@localhost:5432/shadow_db',
+      )
+      expect(describeDatabaseUrl('postgresql://user:secret@db.example.com:5432/furniture?schema=app')).toEqual({
+        protocol: 'postgresql',
+        username: 'user',
+        host: 'db.example.com',
+        port: '5432',
+        databaseName: 'furniture',
+        schema: 'app',
+      })
+      expect(getDatabaseIdentity('postgresql://user:secret@db.example.com:5432/furniture?schema=app')).toBe(
+        'postgresql|user|db.example.com|5432|furniture|app',
+      )
+      expect(getDatabasePhysicalIdentity('postgresql://other:secret@db.example.com:5432/furniture?schema=app')).toBe(
+        'postgresql|db.example.com|5432|furniture|app',
+      )
+    } finally {
+      fs.rmSync(rootDir, { recursive: true, force: true })
+    }
+  })
+
+  it('lists migration directories in stable order', () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'prisma-baseline-migrations-'))
+    try {
+      fs.mkdirSync(path.join(rootDir, 'prisma/migrations/20260102000000_b'), { recursive: true })
+      fs.mkdirSync(path.join(rootDir, 'prisma/migrations/20260101000000_a'), { recursive: true })
+
+      expect(listMigrationDirectories(rootDir)).toEqual([
+        '20260101000000_a',
+        '20260102000000_b',
+      ])
+    } finally {
+      fs.rmSync(rootDir, { recursive: true, force: true })
+    }
+  })
+
+  it('parses pending migrations from Prisma migrate status output', () => {
+    expect(parsePendingPrismaMigrations([
+      '84 migrations found in prisma/migrations',
+      'Following migrations have not yet been applied:',
+      '20260101000000_a',
+      '20260102000000_b',
+      '',
+      'To apply migrations in production run prisma migrate deploy.',
+    ].join('\n'))).toEqual([
+      '20260101000000_a',
+      '20260102000000_b',
+    ])
+    expect(parsePendingPrismaMigrations('Database schema is up to date!')).toEqual([])
+    expect(hasSqlDiff('CREATE TABLE "Product" ("id" TEXT NOT NULL);')).toBe(true)
+    expect(hasSqlDiff('-- This is an empty migration.')).toBe(false)
+  })
+
+  it('rejects unsafe shadow database urls before Prisma diff', () => {
+    const targetUrl = 'postgresql://user:secret@localhost:5432/furniture_3d'
+
+    expect(validateShadowDatabaseUrl('', targetUrl)).toEqual(expect.objectContaining({
+      ok: false,
+      reason: expect.stringContaining('SHADOW_DATABASE_URL 未配置'),
+    }))
+    expect(validateShadowDatabaseUrl(targetUrl, targetUrl)).toEqual(expect.objectContaining({
+      ok: false,
+      reason: expect.stringContaining('目标数据库本身'),
+    }))
+    expect(validateShadowDatabaseUrl(
+      'postgresql://other:secret@localhost:5432/furniture_3d',
+      targetUrl,
+    )).toEqual(expect.objectContaining({
+      ok: false,
+      reason: expect.stringContaining('目标数据库本身'),
+    }))
+    expect(validateShadowDatabaseUrl(
+      'postgresql://user:secret@localhost:5432/furniture_3d_prod',
+      targetUrl,
+    )).toEqual(expect.objectContaining({
+      ok: false,
+      reason: expect.stringContaining('必须包含 shadow/test/tmp/temp'),
+    }))
+    expect(validateShadowDatabaseUrl(
+      'postgresql://user:secret@localhost:5432/furniture_3d_shadow',
+      targetUrl,
+    )).toEqual({ ok: true, reason: '' })
+  })
+
+  it('marks missing migration history plus pending migrations as requiring baseline planning', () => {
+    const report = buildBaselineDiagnosis({
+      database: {
+        protocol: 'postgresql',
+        host: 'localhost',
+        port: '5432',
+        databaseName: 'furniture_3d',
+      },
+      migrationDirectories: ['20260101000000_a', '20260102000000_b'],
+      prismaValidate: {
+        ok: true,
+        status: 0,
+        stdout: 'schema is valid',
+        stderr: '',
+        error: '',
+      },
+      prismaMigrateStatus: {
+        ok: false,
+        status: 1,
+        stdout: [
+          'Following migrations have not yet been applied:',
+          '20260101000000_a',
+          '20260102000000_b',
+          'To apply migrations in production run prisma migrate deploy.',
+        ].join('\n'),
+        stderr: '',
+        error: '',
+      },
+      currentSchemaDiff: {
+        ok: false,
+        status: 2,
+        stdout: 'CREATE TABLE "PreSkuBasicInfo" ("id" TEXT NOT NULL);',
+        stderr: '',
+        error: '',
+      },
+      migrationDiff: runMigrationDiffWithShadow(''),
+      migrationHistory: {
+        tableExists: false,
+        totalMigrationRows: 0,
+        appliedMigrationRows: 0,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+        error: '',
+      },
+    })
+
+    expect(report.readyForHardFoundation).toBe(false)
+    expect(report.baselineRequired).toBe(true)
+    expect(report.pendingMigrationCount).toBe(2)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationHistory.tableExists' }),
+        expect.objectContaining({ key: 'pendingMigrations', value: 2 }),
+        expect.objectContaining({ key: 'currentSchemaDiff.notEmpty' }),
+        expect.objectContaining({ key: 'migrationDiff.skipped' }),
+      ]),
+    )
+    expect(report.recommendedNextSteps.join('\n')).toContain('不能直接批量 resolve')
+    expect(report.recommendedNextSteps.join('\n')).toContain('SHADOW_DATABASE_URL')
+  })
+
+  it('blocks baseline when Prisma diff reports schema differences', () => {
+    const report = buildBaselineDiagnosis({
+      database: {
+        protocol: 'postgresql',
+        host: 'localhost',
+        port: '5432',
+        databaseName: 'furniture_3d',
+      },
+      migrationDirectories: ['20260101000000_a'],
+      prismaValidate: {
+        ok: true,
+        status: 0,
+        stdout: 'schema is valid',
+        stderr: '',
+        error: '',
+      },
+      prismaMigrateStatus: {
+        ok: false,
+        status: 1,
+        stdout: [
+          'Following migrations have not yet been applied:',
+          '20260101000000_a',
+          'To apply migrations in production run prisma migrate deploy.',
+        ].join('\n'),
+        stderr: '',
+        error: '',
+      },
+      currentSchemaDiff: {
+        ok: true,
+        status: 0,
+        stdout: '',
+        stderr: '',
+        error: '',
+      },
+      migrationDiff: {
+        skipped: false,
+        ok: false,
+        status: 2,
+        stdout: 'ALTER TABLE "Product" ADD COLUMN "name" TEXT;',
+        stderr: '',
+        error: '',
+        reason: '',
+      },
+      migrationHistory: {
+        tableExists: false,
+        totalMigrationRows: 0,
+        appliedMigrationRows: 0,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+        error: '',
+      },
+    })
+
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationDiff.notEmpty' }),
+      ]),
+    )
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/plan-pre-sku-formalization-repair.test.js b/furniture-3d-system/tests/scripts/plan-pre-sku-formalization-repair.test.js
new file mode 100644
index 00000000..32519cf6
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/plan-pre-sku-formalization-repair.test.js
@@ -0,0 +1,257 @@
+const {
+  REPAIR_CURRENT_EVIDENCE_KEYS,
+  assertNoUnknownRepairPlanTopLevelKeys,
+  buildCurrentEvidence,
+  buildEvidenceFingerprint,
+  buildPreSkuFormalizationRepairPlan,
+  databaseIdentityFromUrl,
+  getAllowedDecisions,
+  parseArgs,
+  validatePreSkuFormalizationRepairPlanFreshness,
+  validatePreSkuFormalizationRepairPlanShape,
+} = require('../../scripts/plan-pre-sku-formalization-repair')
+
+describe('plan-pre-sku-formalization-repair', () => {
+  it('accepts only read-only plan and validation arguments', () => {
+    expect(parseArgs([])).toEqual({ outputPath: '', planPath: '', validatePlan: false })
+    expect(parseArgs(['--output', '.master-data-audits/pre-sku-plan.json'])).toEqual({
+      outputPath: '.master-data-audits/pre-sku-plan.json',
+      planPath: '',
+      validatePlan: false,
+    })
+    expect(parseArgs(['--output=.master-data-audits/pre-sku-plan.json'])).toEqual({
+      outputPath: '.master-data-audits/pre-sku-plan.json',
+      planPath: '',
+      validatePlan: false,
+    })
+    expect(parseArgs(['--validate-plan', '--plan', 'confirmed-plan.json'])).toEqual({
+      outputPath: '',
+      planPath: 'confirmed-plan.json',
+      validatePlan: true,
+    })
+    expect(() => parseArgs(['--validate-plan'])).toThrow('--validate-plan')
+    expect(() => parseArgs(['--plan', 'confirmed-plan.json'])).toThrow('--plan')
+    expect(() => parseArgs(['--apply'])).toThrow('不支持 apply')
+  })
+
+  it('builds read-only decisions for formalized PreSku rows without ProductSKU', () => {
+    const decisions = getAllowedDecisions({
+      mismatchReason: 'formalized_without_product_sku',
+    })
+
+    expect(decisions.map((item) => item.decision)).toEqual([
+      'revert-pre-sku-status',
+      'link-existing-product-sku',
+      'archive-invalid-pre-sku',
+    ])
+  })
+
+  it('builds a non-secret database identity for future stale-plan checks', () => {
+    expect(
+      databaseIdentityFromUrl('postgresql://Furniture:secret@LOCALHOST:5433/Furniture_3D?schema=public'),
+    ).toBe('postgresql|furniture|localhost|5433|furniture_3d|public')
+  })
+
+  it('summarizes mismatch candidates without pretending to repair them', () => {
+    const sample = {
+      mismatchReason: 'formalized_without_product_sku',
+      preSkuId: 'pre_sku_1',
+      draftGroupId: 'draft_1',
+      draftGroupCode: 'DG-001',
+      sequence: 1,
+      status: 'FORMALIZED',
+      linkedFormalSkuId: null,
+      linkedSkuCode: null,
+      linkedSkuDeletedAt: null,
+      linkedProductId: null,
+      linkedProductDeletedAt: null,
+    }
+    const plan = buildPreSkuFormalizationRepairPlan([sample], {
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+    })
+    const currentEvidence = buildCurrentEvidence(sample)
+
+    expect(plan).toEqual(expect.objectContaining({
+      mode: 'pre-sku-formalization-repair-plan',
+      readOnly: true,
+      applySupported: false,
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+      candidateCount: 1,
+      reasonCounts: { formalized_without_product_sku: 1 },
+      evidencePolicy: expect.objectContaining({
+        requiredCurrentEvidenceKeys: REPAIR_CURRENT_EVIDENCE_KEYS,
+        staleEvidenceRule: expect.stringContaining('计划过期'),
+      }),
+    }))
+    expect(plan.candidates[0]).toEqual(expect.objectContaining({
+      preSkuId: 'pre_sku_1',
+      currentEvidence,
+      evidenceFingerprint: buildEvidenceFingerprint(currentEvidence),
+      repairPreconditions: expect.arrayContaining([
+        expect.stringContaining('currentEvidence'),
+      ]),
+      allowedDecisions: expect.arrayContaining([
+        expect.objectContaining({ decision: 'revert-pre-sku-status' }),
+      ]),
+    }))
+    expect(plan.globalGuards).toEqual(expect.arrayContaining([
+      '不能在通用主数据清洗脚本里处理准 SKU 生命周期错位。',
+      '专用修复入口必须拒绝 currentEvidence 或 evidenceFingerprint 已过期的计划。',
+    ]))
+  })
+
+  it('keeps repair plan decisions as manual choices instead of direct SQL actions', () => {
+    const plan = buildPreSkuFormalizationRepairPlan([
+      {
+        mismatchReason: 'unknown',
+        preSkuId: 'pre_sku_2',
+      },
+    ])
+    const serializedDecisions = JSON.stringify(
+      plan.candidates.flatMap((candidate) => candidate.allowedDecisions),
+    )
+
+    expect(plan.readOnly).toBe(true)
+    expect(plan.applySupported).toBe(false)
+    expect(serializedDecisions).not.toMatch(/\b(UPDATE|INSERT|DELETE|UPSERT)\b/i)
+    expect(plan.candidates[0].allowedDecisions).toEqual([
+      expect.objectContaining({ decision: 'manual-investigation-required' }),
+    ])
+  })
+
+  it('validates repair plan shape and evidence fingerprints before any database write exists', () => {
+    const sample = {
+      mismatchReason: 'formalized_without_product_sku',
+      preSkuId: 'pre_sku_1',
+      draftGroupId: 'draft_1',
+      draftGroupCode: 'DG-001',
+      sequence: 1,
+      status: 'FORMALIZED',
+      linkedFormalSkuId: null,
+      linkedSkuCode: null,
+      linkedSkuDeletedAt: null,
+      linkedProductId: null,
+      linkedProductDeletedAt: null,
+    }
+    const plan = buildPreSkuFormalizationRepairPlan([sample], {
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+    })
+
+    expect(validatePreSkuFormalizationRepairPlanShape(plan)).toEqual(
+      expect.objectContaining({
+        mode: 'validate-pre-sku-formalization-repair-plan-shape',
+        valid: true,
+        committed: false,
+        requiresDatabase: false,
+        candidateCount: 1,
+        blockerCount: 0,
+      }),
+    )
+
+    expect(() =>
+      assertNoUnknownRepairPlanTopLevelKeys({
+        ...plan,
+        sql: 'UPDATE "PreSku" SET status = FORMALIZED',
+      }),
+    ).toThrow('不允许的顶层字段')
+
+    const tamperedPlan = {
+      ...plan,
+      candidates: [
+        {
+          ...plan.candidates[0],
+          currentEvidence: {
+            ...plan.candidates[0].currentEvidence,
+            status: 'PREVIEW_CONFIRMED',
+          },
+        },
+      ],
+    }
+
+    expect(validatePreSkuFormalizationRepairPlanShape(tamperedPlan)).toEqual(
+      expect.objectContaining({
+        valid: false,
+        candidateBlockers: [
+          expect.objectContaining({
+            index: 0,
+            issues: expect.arrayContaining(['evidenceFingerprint']),
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('validates repair plan freshness against current database evidence', () => {
+    const sample = {
+      mismatchReason: 'formalized_without_product_sku',
+      preSkuId: 'pre_sku_1',
+      draftGroupId: 'draft_1',
+      draftGroupCode: 'DG-001',
+      sequence: 1,
+      status: 'FORMALIZED',
+      linkedFormalSkuId: null,
+      linkedSkuCode: null,
+      linkedSkuDeletedAt: null,
+      linkedProductId: null,
+      linkedProductDeletedAt: null,
+    }
+    const plan = buildPreSkuFormalizationRepairPlan([sample], {
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+    })
+
+    expect(
+      validatePreSkuFormalizationRepairPlanFreshness(plan, [sample], {
+        databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+      }),
+    ).toEqual(
+      expect.objectContaining({
+        mode: 'validate-pre-sku-formalization-repair-plan',
+        valid: true,
+        committed: false,
+        requiresDatabase: true,
+        databaseIdentityMatched: true,
+        candidateCount: 1,
+        matchedCandidateCount: 1,
+        staleCandidateCount: 0,
+        blockerCount: 0,
+      }),
+    )
+
+    expect(
+      validatePreSkuFormalizationRepairPlanFreshness(plan, [
+        {
+          ...sample,
+          linkedFormalSkuId: 'sku_1',
+        },
+      ], {
+        databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+      }),
+    ).toEqual(
+      expect.objectContaining({
+        valid: false,
+        matchedCandidateCount: 0,
+        staleCandidateCount: 1,
+        blockers: expect.arrayContaining([
+          expect.objectContaining({
+            key: 'staleCurrentEvidence',
+            reason: 'current-evidence-changed',
+          }),
+        ]),
+      }),
+    )
+
+    expect(
+      validatePreSkuFormalizationRepairPlanFreshness(plan, [sample], {
+        databaseIdentity: 'postgresql|furniture|localhost|5432|other_db|public',
+      }),
+    ).toEqual(
+      expect.objectContaining({
+        valid: false,
+        databaseIdentityMatched: false,
+        blockers: expect.arrayContaining([
+          expect.objectContaining({ key: 'databaseIdentityMismatch' }),
+        ]),
+      }),
+    )
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js b/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
new file mode 100644
index 00000000..00dbafb8
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
@@ -0,0 +1,324 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildBaselineRepairPlan,
+  diffStatus,
+  parseArgs,
+  writeJsonReport,
+} = require('../../scripts/plan-prisma-baseline-repair')
+
+function preflight(overrides = {}) {
+  return {
+    recommendedAction: 'baseline-and-structure-repair-required',
+    database: {
+      protocol: 'postgresql',
+      host: 'localhost',
+      port: '5432',
+      databaseName: 'furniture_3d',
+    },
+    backupEvidence: {
+      usable: true,
+      path: 'backup.dump',
+    },
+    backupVerification: {
+      ok: true,
+    },
+    pendingMigrationCount: 85,
+    pendingMigrationSample: ['20260529213000_add_external_readonly_contract'],
+    currentSchemaDiffHasSql: true,
+    migrationDiff: {
+      skipped: false,
+      ok: false,
+      status: 2,
+    },
+    migrationSchemaDiff: {
+      skipped: false,
+      ok: true,
+      status: 0,
+    },
+    diagnosisBlockers: [
+      { key: 'migrationHistory.tableExists' },
+      { key: 'pendingMigrations' },
+    ],
+    blockers: [],
+    ...overrides,
+  }
+}
+
+describe('plan-prisma-baseline-repair', () => {
+  it('parses input and output paths', () => {
+    expect(parseArgs([])).toEqual({
+      preflightPath: '',
+      rehearsalPath: '',
+      structureRehearsalPath: '',
+      outputPath: '',
+    })
+    expect(parseArgs([
+      '--preflight',
+      '.master-data-audits/preflight.json',
+      '--rehearsal=.master-data-audits/rehearsal.json',
+      '--structure-rehearsal',
+      '.master-data-audits/structure-repair.json',
+      '--output',
+      '.master-data-audits/baseline-plan.json',
+    ])).toEqual({
+      preflightPath: '.master-data-audits/preflight.json',
+      rehearsalPath: '.master-data-audits/rehearsal.json',
+      structureRehearsalPath: '.master-data-audits/structure-repair.json',
+      outputPath: '.master-data-audits/baseline-plan.json',
+    })
+    expect(() => parseArgs(['--preflight'])).toThrow('--preflight')
+    expect(() => parseArgs(['--structure-rehearsal'])).toThrow('--structure-rehearsal')
+    expect(() => parseArgs(['--force'])).toThrow('未知参数')
+  })
+
+  it('normalizes Prisma diff states', () => {
+    expect(diffStatus(null)).toBe('missing')
+    expect(diffStatus({ skipped: true })).toBe('skipped')
+    expect(diffStatus({ status: 0 })).toBe('empty')
+    expect(diffStatus({ status: 2 })).toBe('not-empty')
+    expect(diffStatus({ ok: false, status: 1 })).toBe('failed')
+  })
+
+  it('requires migration replay to match schema before any baseline repair action', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        migrationSchemaDiff: {
+          skipped: false,
+          ok: false,
+          status: 2,
+        },
+      }),
+      checkedAt: '2026-06-01T10:00:00.000Z',
+    })
+
+    expect(plan.status).toBe('evidence-blocked')
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationSchemaDiff.notEmpty' }),
+      ]),
+    )
+    expect(plan.forbiddenActions.map((action) => action.name)).toContain('blind-resolve-all')
+  })
+
+  it('classifies non-equivalent current databases as manual structure repair', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight(),
+      rehearsal: {
+        migrateDeploy: {
+          p3005Detected: true,
+        },
+      },
+      checkedAt: '2026-06-01T10:00:00.000Z',
+    })
+
+    expect(plan.status).toBe('manual-structure-repair-required')
+    expect(plan.safeForProductionWrite).toBe(false)
+    expect(plan.evidence.directMigrateDeployBlockedByP3005).toBe(true)
+    expect(plan.runbook.summary).toContain('不能 baseline')
+    expect(plan.runbook.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ name: 'repair-clone-first', dangerous: true }),
+      ]),
+    )
+  })
+
+  it('promotes a passed structure repair rehearsal into an authorized repair runbook', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        pendingMigrationCount: 86,
+        migrationDiff: {
+          skipped: true,
+          ok: false,
+          status: null,
+        },
+        migrationSchemaDiff: {
+          skipped: true,
+          ok: false,
+          status: null,
+        },
+      }),
+      rehearsal: {
+        migrateDeploy: {
+          p3005Detected: true,
+        },
+      },
+      structureRehearsal: {
+        status: 'structure-repair-rehearsal-passed',
+        repairApply: { ok: true },
+        repairSqlSummary: { hasDestructiveStatements: false },
+        repairSqlArtifact: {
+          path: 'sensitive/local/structure-repair.sql',
+          sizeBytes: 17304,
+          sha256: 'b'.repeat(64),
+        },
+        currentSchemaDiffAfter: { status: 0 },
+        migrationDiffAfter: { status: 0 },
+        baselineResolvePlan: {
+          candidate: true,
+          migrationCount: 86,
+        },
+        baselineResolveRehearsal: {
+          ok: true,
+          appliedCount: 86,
+        },
+        prismaMigrateStatusAfterResolve: { status: 0 },
+        requiredMigrationApplyAfterResolve: {
+          ok: true,
+          appliedMigrationCount: 35,
+        },
+        readinessAfterRequiredMigrations: {
+          hardReady: false,
+          blockerCount: 2,
+          blockerKeys: ['command', 'structuredSkuItems.incomplete'],
+        },
+      },
+      checkedAt: '2026-06-01T10:00:00.000Z',
+    })
+
+    expect(plan.status).toBe('ready-for-authorized-structure-repair')
+    expect(plan.safeForProductionWrite).toBe(false)
+    expect(plan.blockers).toEqual([])
+    expect(plan.evidence.structureRepairRehearsal).toEqual(
+      expect.objectContaining({
+        passed: true,
+        repairApplyOk: true,
+        destructiveSqlBlocked: false,
+        baselineResolveMigrationCount: 86,
+        baselineResolveRehearsalOk: true,
+        baselineResolveAppliedCount: 86,
+        requiredMigrationApplyAfterResolveOk: true,
+        requiredMigrationApplyAfterResolveCount: 35,
+      }),
+    )
+    expect(plan.evidence.migrationSchemaDiffProvenByStructureRehearsal).toBe(true)
+    expect(plan.evidence.migrationDiffProvenByStructureRehearsal).toBe(true)
+    expect(plan.runbook.repairSqlArtifact).toEqual({
+      sizeBytes: 17304,
+      sha256: 'b'.repeat(64),
+    })
+    expect(plan.runbook.baselineResolveMigrationCount).toBe(86)
+    expect(plan.runbook.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ name: 'apply-reviewed-structure-repair-sql', dangerous: true }),
+        expect.objectContaining({ name: 'baseline-resolve-one-by-one', dangerous: true }),
+        expect.objectContaining({ name: 'apply-foundation-guards', dangerous: true }),
+      ]),
+    )
+    expect(
+      plan.runbook.commands.find((command) => command.name === 'apply-reviewed-structure-repair-sql').command,
+    ).toContain('--expected-sha256 <repair-sql-sha256>')
+    expect(
+      plan.runbook.commands.find((command) => command.name === 'baseline-resolve-one-by-one').command,
+    ).toContain('--expected-sha256 <repair-sql-sha256>')
+    expect(JSON.stringify(plan)).not.toContain('sensitive/local/structure-repair.sql')
+  })
+
+  it('blocks structure repair runbooks when preflight and rehearsal migration counts differ', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        pendingMigrationCount: 85,
+      }),
+      structureRehearsal: {
+        status: 'structure-repair-rehearsal-passed',
+        repairApply: { ok: true },
+        repairSqlSummary: { hasDestructiveStatements: false },
+        repairSqlArtifact: {
+          sizeBytes: 17304,
+          sha256: 'c'.repeat(64),
+        },
+        currentSchemaDiffAfter: { status: 0 },
+        migrationDiffAfter: { status: 0 },
+        baselineResolvePlan: {
+          candidate: true,
+          migrationCount: 86,
+        },
+        baselineResolveRehearsal: {
+          ok: true,
+          appliedCount: 86,
+        },
+        prismaMigrateStatusAfterResolve: { status: 0 },
+      },
+    })
+
+    expect(plan.status).toBe('evidence-blocked')
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          key: 'structureRepairRehearsal.baselineCountMismatch',
+        }),
+      ]),
+    )
+  })
+
+  it('allows baseline resolve only when current database is equivalent to migrations and schema', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        recommendedAction: 'baseline-resolve-candidate',
+        currentSchemaDiffHasSql: false,
+        migrationDiff: {
+          skipped: false,
+          ok: true,
+          status: 0,
+        },
+      }),
+    })
+
+    expect(plan.status).toBe('ready-for-baseline-resolve')
+    expect(plan.runbook.pendingMigrationSample).toEqual([
+      '20260529213000_add_external_readonly_contract',
+    ])
+    expect(plan.runbook.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ name: 'resolve-one-migration', dangerous: true }),
+      ]),
+    )
+    const resolveCommand = plan.runbook.commands.find((command) => command.name === 'resolve-one-migration').command
+    expect(resolveCommand).toContain('npm run db:foundation:baseline-resolve')
+    expect(resolveCommand).toContain('--expected-database-identity <database-identity>')
+    expect(resolveCommand).toContain('--expected-backup-sha256 <backup-sha256>')
+  })
+
+  it('allows standard migrate deploy when preflight recommends it', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        recommendedAction: 'migrate-deploy-required',
+        currentSchemaDiffHasSql: true,
+        migrationDiff: {
+          skipped: false,
+          ok: false,
+          status: 2,
+        },
+        diagnosisBlockers: [],
+      }),
+    })
+
+    expect(plan.status).toBe('ready-for-migrate-deploy')
+    expect(plan.runbook.commands).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ name: 'migrate-deploy', dangerous: true }),
+      ]),
+    )
+    expect(plan.runbook.commands.find((command) => command.name === 'migrate-deploy').command).toContain(
+      '--expected-database-identity <database-identity>',
+    )
+    expect(plan.runbook.commands.find((command) => command.name === 'migrate-deploy').command).toContain(
+      '--expected-backup-sha256 <backup-sha256>',
+    )
+  })
+
+  it('writes repair plans to nested local audit files', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'baseline-repair-plan-'))
+    const outputPath = writeJsonReport(
+      'nested/baseline-plan.json',
+      { mode: 'prisma-baseline-and-structure-repair-plan' },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/baseline-plan.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'prisma-baseline-and-structure-repair-plan',
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/preflight-database-foundation-change.test.js b/furniture-3d-system/tests/scripts/preflight-database-foundation-change.test.js
new file mode 100644
index 00000000..109aa22c
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/preflight-database-foundation-change.test.js
@@ -0,0 +1,377 @@
+const fs = require('node:fs')
+const crypto = require('node:crypto')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildBackupToolingHint,
+  buildDockerPgRestoreListArgs,
+  decideFoundationChangeReadiness,
+  envNameForPostgresTool,
+  findPostgresClientCandidateDirs,
+  getBackupEvidence,
+  parseArgs,
+  resolvePostgresTool,
+  summarizePrismaDiffResult,
+  writeJsonReport,
+} = require('../../scripts/preflight-database-foundation-change')
+
+function diagnosis(overrides = {}) {
+  return {
+    baselineRequired: false,
+    pendingMigrationCount: 0,
+    prismaValidate: { ok: true },
+    currentSchemaDiff: { hasSqlDiff: false },
+    migrationDiff: { skipped: false, status: 0 },
+    ...overrides,
+  }
+}
+
+describe('preflight-database-foundation-change', () => {
+  it('parses optional audit output path', () => {
+    expect(parseArgs([])).toEqual({ outputPath: '' })
+    expect(parseArgs(['--output', '.master-data-audits/preflight.json'])).toEqual({
+      outputPath: '.master-data-audits/preflight.json',
+    })
+    expect(parseArgs(['--output=.master-data-audits/preflight.json'])).toEqual({
+      outputPath: '.master-data-audits/preflight.json',
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--apply'])).toThrow('未知参数')
+  })
+
+  it('can write preflight reports to a local audit file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-preflight-output-'))
+    const outputPath = writeJsonReport(
+      'nested/preflight.json',
+      { ready: false, blockers: [{ key: 'backupEvidence' }] },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/preflight.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      ready: false,
+      blockers: [{ key: 'backupEvidence' }],
+    })
+  })
+
+  it('summarizes Prisma diff output for audit reports', () => {
+    expect(summarizePrismaDiffResult(null)).toBeNull()
+    expect(summarizePrismaDiffResult({
+      skipped: false,
+      ok: false,
+      status: 1,
+      reason: '',
+      stdout: 'x'.repeat(1200),
+      stderr: 'diff failed',
+      error: '',
+    })).toEqual({
+      skipped: false,
+      ok: false,
+      status: 1,
+      reason: '',
+      stdoutPreview: 'x'.repeat(1000),
+      stderrPreview: 'diff failed',
+      error: '',
+    })
+  })
+
+  it('requires a real backup evidence file before foundation changes', () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-preflight-'))
+    try {
+      expect(getBackupEvidence({}, rootDir)).toEqual(expect.objectContaining({
+        provided: false,
+        exists: false,
+      }))
+      expect(getBackupEvidence({ DATABASE_BACKUP_FILE: 'missing.dump' }, rootDir)).toEqual(
+        expect.objectContaining({
+          provided: true,
+          exists: false,
+          usable: false,
+        }),
+      )
+
+      fs.writeFileSync(path.join(rootDir, 'empty.dump'), '')
+      expect(getBackupEvidence({ DATABASE_BACKUP_FILE: 'empty.dump' }, rootDir)).toEqual(
+        expect.objectContaining({
+          provided: true,
+          exists: true,
+          usable: false,
+          sizeBytes: 0,
+        }),
+      )
+
+      fs.writeFileSync(path.join(rootDir, 'backup.dump'), 'backup')
+      expect(getBackupEvidence({ DATABASE_BACKUP_FILE: 'backup.dump' }, rootDir)).toEqual(
+        expect.objectContaining({
+          provided: true,
+          exists: true,
+          usable: true,
+          sizeBytes: 6,
+          sha256: crypto.createHash('sha256').update('backup').digest('hex'),
+          path: path.join(rootDir, 'backup.dump'),
+        }),
+      )
+    } finally {
+      fs.rmSync(rootDir, { recursive: true, force: true })
+    }
+  })
+
+  it('recommends migrate deploy when the current database differs from schema', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        currentSchemaDiff: { hasSqlDiff: true },
+        pendingMigrationCount: 84,
+      }),
+      backupEvidence: { exists: true, usable: true },
+    })
+
+    expect(result.ready).toBe(true)
+    expect(result.recommendedAction).toBe('migrate-deploy-required')
+    expect(result.blockers).toEqual([])
+  })
+
+  it('blocks direct migrate deploy when a non-empty database has no Prisma migration history', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        baselineRequired: true,
+        currentSchemaDiff: { hasSqlDiff: true },
+        migrationDiff: { skipped: true },
+        pendingMigrationCount: 84,
+      }),
+      backupEvidence: { exists: true, usable: true },
+      backupVerification: { ok: true },
+    })
+
+    expect(result.ready).toBe(false)
+    expect(result.recommendedAction).toBe('baseline-and-structure-repair-required')
+    expect(result.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationHistory.baselineRequired' }),
+        expect.objectContaining({ key: 'migrationDiff.skipped' }),
+      ]),
+    )
+  })
+
+  it('blocks baseline candidates without shadow diff evidence', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        pendingMigrationCount: 2,
+        migrationDiff: { skipped: true },
+      }),
+      backupEvidence: { exists: true, usable: true },
+    })
+
+    expect(result.ready).toBe(false)
+    expect(result.recommendedAction).toBe('baseline-evidence-required')
+    expect(result.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationDiff.skipped' }),
+      ]),
+    )
+  })
+
+  it('blocks every change path when backup evidence is missing', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        currentSchemaDiff: { hasSqlDiff: true },
+        pendingMigrationCount: 84,
+      }),
+      backupEvidence: { exists: false, usable: false },
+      backupTooling: {
+        pgDump: { available: false },
+      },
+      backupToolingHint: {
+        docker: { available: false },
+        dockerFallback: null,
+      },
+    })
+
+    expect(result.ready).toBe(false)
+    expect(result.recommendedAction).toBe('migrate-deploy-required')
+    expect(result.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'backupEvidence' }),
+        expect.objectContaining({ key: 'backupTooling.pgDump' }),
+      ]),
+    )
+  })
+
+  it('does not require local pg_dump when a Docker PostgreSQL client image is prepared', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        currentSchemaDiff: { hasSqlDiff: true },
+        pendingMigrationCount: 84,
+      }),
+      backupEvidence: { exists: false, usable: false },
+      backupTooling: {
+        pgDump: { available: false },
+      },
+      backupToolingHint: {
+        docker: { available: true },
+        dockerFallback: {
+          imageAvailable: true,
+          postgresImage: 'postgres:16',
+        },
+      },
+    })
+
+    expect(result.ready).toBe(false)
+    expect(result.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'backupEvidence' }),
+      ]),
+    )
+    expect(result.blockers).not.toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'backupTooling.pgDump' }),
+      ]),
+    )
+  })
+
+  it('requires existing backup evidence to be verifiable before foundation changes', () => {
+    const result = decideFoundationChangeReadiness({
+      diagnosis: diagnosis({
+        currentSchemaDiff: { hasSqlDiff: true },
+      }),
+      backupEvidence: { exists: true, usable: true },
+      backupVerification: {
+        ok: false,
+        message: 'pg_restore 不可用，无法验证 PostgreSQL custom 备份是否可读取。',
+        tooling: { command: 'pg_restore' },
+      },
+    })
+
+    expect(result.ready).toBe(false)
+    expect(result.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'backupTooling.pgRestore' }),
+      ]),
+    )
+  })
+
+  it('resolves PostgreSQL client tools from explicit env before PATH', () => {
+    expect(envNameForPostgresTool('pg_dump')).toBe('PG_DUMP_PATH')
+    expect(resolvePostgresTool('pg_dump', {
+      PG_DUMP_PATH: 'C:/PostgreSQL/bin/pg_dump.exe',
+      POSTGRES_BIN_DIR: 'C:/ignored',
+    })).toEqual({
+      command: 'pg_dump',
+      executable: 'C:/PostgreSQL/bin/pg_dump.exe',
+      configuredBy: 'PG_DUMP_PATH',
+    })
+    expect(resolvePostgresTool('psql', {
+      POSTGRES_BIN_DIR: 'C:/PostgreSQL/bin',
+    })).toEqual(expect.objectContaining({
+      command: 'psql',
+      configuredBy: 'POSTGRES_BIN_DIR',
+    }))
+    expect(resolvePostgresTool('psql', {})).toEqual({
+      command: 'psql',
+      executable: 'psql',
+      configuredBy: 'PATH',
+    })
+  })
+
+  it('finds PostgreSQL client candidate bin directories for backup tooling hints', () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'postgres-client-search-'))
+    const binDir = path.join(rootDir, 'PostgreSQL/16/bin')
+    fs.mkdirSync(binDir, { recursive: true })
+    for (const command of ['pg_dump', 'pg_restore', 'psql']) {
+      fs.writeFileSync(
+        path.join(binDir, process.platform === 'win32' ? `${command}.exe` : command),
+        '',
+      )
+    }
+
+    const candidates = findPostgresClientCandidateDirs({
+      POSTGRES_CLIENT_SEARCH_DIRS: path.join(rootDir, 'PostgreSQL'),
+    })
+
+    expect(candidates).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          dir: binDir,
+          complete: true,
+          foundCommands: ['pg_dump', 'pg_restore', 'psql'],
+        }),
+      ]),
+    )
+  })
+
+  it('suggests POSTGRES_BIN_DIR when a complete client candidate exists', () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'postgres-client-hint-'))
+    const binDir = path.join(rootDir, 'bin')
+    fs.mkdirSync(binDir, { recursive: true })
+    for (const command of ['pg_dump', 'pg_restore', 'psql']) {
+      fs.writeFileSync(
+        path.join(binDir, process.platform === 'win32' ? `${command}.exe` : command),
+        '',
+      )
+    }
+
+    const hint = buildBackupToolingHint(
+      {
+        pgDump: { command: 'pg_dump', available: false },
+        pgRestore: { command: 'pg_restore', available: false },
+        psql: { command: 'psql', available: false },
+      },
+      {
+        POSTGRES_CLIENT_SEARCH_DIRS: rootDir,
+      },
+      {
+        available: false,
+        postgresImage: 'postgres:16',
+        postgresImageAvailable: false,
+      },
+    )
+
+    expect(hint).toEqual(expect.objectContaining({
+      missingCommands: ['pg_dump', 'pg_restore', 'psql'],
+      recommendedEnv: expect.objectContaining({
+        POSTGRES_BIN_DIR: binDir,
+      }),
+    }))
+  })
+
+  it('reports Docker PostgreSQL client fallback without treating it as backup evidence', () => {
+    const hint = buildBackupToolingHint(
+      {
+        pgDump: { command: 'pg_dump', available: false },
+        pgRestore: { command: 'pg_restore', available: false },
+        psql: { command: 'psql', available: false },
+      },
+      {},
+      {
+        command: 'docker',
+        available: true,
+        postgresImage: 'postgres:16',
+        postgresImageAvailable: false,
+      },
+    )
+
+    expect(hint.dockerFallback).toEqual(expect.objectContaining({
+      postgresImage: 'postgres:16',
+      imageAvailable: false,
+    }))
+    expect(hint.dockerFallback.note).toContain('不能替代 DATABASE_BACKUP_FILE')
+  })
+
+  it('builds Docker pg_restore verification args for local backup files', () => {
+    const backupPath = path.resolve('tmp-backups', 'backup.dump')
+
+    expect(buildDockerPgRestoreListArgs(backupPath, 'postgres:16')).toEqual({
+      args: [
+        'run',
+        '--rm',
+        '-v',
+        `${path.dirname(backupPath)}:/backup`,
+        'postgres:16',
+        'pg_restore',
+        '--list',
+        '/backup/backup.dump',
+      ],
+      containerBackupPath: '/backup/backup.dump',
+      volumeArg: `${path.dirname(backupPath)}:/backup`,
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js b/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
new file mode 100644
index 00000000..43145812
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
@@ -0,0 +1,142 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  DEFAULT_MANIFEST,
+  buildCompletionChecklistReport,
+  formatDisplayPath,
+  parseArgs,
+  run,
+} = require('../../scripts/print-master-data-foundation-checklist')
+
+function createManifest(overrides = {}) {
+  return {
+    checkedAt: '2026-06-01T14:33:22.661Z',
+    hardReady: false,
+    foundationCompletionChecklist: {
+      itemCount: 2,
+      passedCount: 1,
+      blockedCount: 1,
+      missingCount: 0,
+      complete: false,
+      items: [
+        {
+          id: 'truth-source-matrix',
+          label: '核心对象唯一真相源矩阵',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {
+            truthSourceCount: 27,
+          },
+        },
+        {
+          id: 'schema-and-migration-history',
+          label: '数据库结构与 Prisma 迁移历史',
+          status: 'blocked',
+          passed: false,
+          blockedBy: ['migration-status:fullyReady'],
+          evidence: {
+            blockerValues: {
+              'migration-status:fullyReady': false,
+            },
+          },
+        },
+      ],
+    },
+    ...overrides,
+  }
+}
+
+describe('print-master-data-foundation-checklist', () => {
+  it('parses default and explicit paths', () => {
+    expect(parseArgs([])).toEqual({
+      manifestFile: path.resolve(DEFAULT_MANIFEST),
+      outputFile: '',
+    })
+    expect(parseArgs(['--manifest', 'manifest.json', '--output=result.json'])).toEqual({
+      manifestFile: path.resolve('manifest.json'),
+      outputFile: path.resolve('result.json'),
+    })
+    expect(parseArgs(['--manifest=manifest.json', '--output', 'result.json'])).toEqual({
+      manifestFile: path.resolve('manifest.json'),
+      outputFile: path.resolve('result.json'),
+    })
+    expect(() => parseArgs(['--manifest'])).toThrow('--manifest')
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--apply'])).toThrow('未知参数')
+  })
+
+  it('builds a safe completion checklist report from the audit manifest', () => {
+    const report = buildCompletionChecklistReport(createManifest(), 'manifest.json')
+
+    expect(report).toEqual({
+      mode: 'master-data-foundation-completion-checklist',
+      sourceManifest: 'manifest.json',
+      checkedAt: '2026-06-01T14:33:22.661Z',
+      hardReady: false,
+      complete: false,
+      itemCount: 2,
+      passedCount: 1,
+      blockedCount: 1,
+      missingCount: 0,
+      blockedItems: [
+        {
+          id: 'schema-and-migration-history',
+          label: '数据库结构与 Prisma 迁移历史',
+          status: 'blocked',
+          blockedBy: ['migration-status:fullyReady'],
+          evidence: {
+            blockerValues: {
+              'migration-status:fullyReady': false,
+            },
+          },
+        },
+      ],
+      items: [
+        {
+          id: 'truth-source-matrix',
+          label: '核心对象唯一真相源矩阵',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+        },
+        {
+          id: 'schema-and-migration-history',
+          label: '数据库结构与 Prisma 迁移历史',
+          status: 'blocked',
+          passed: false,
+          blockedBy: ['migration-status:fullyReady'],
+        },
+      ],
+    })
+  })
+
+  it('formats source manifest paths without leaking absolute workspace paths', () => {
+    const cwd = path.resolve('workspace')
+    expect(formatDisplayPath(path.join(cwd, '.master-data-audits/manifest.json'), cwd)).toBe(
+      path.join('.master-data-audits', 'manifest.json'),
+    )
+    expect(formatDisplayPath(path.resolve('outside/manifest.json'), cwd)).toBe('manifest.json')
+    expect(formatDisplayPath('')).toBe('')
+  })
+
+  it('rejects manifests without a completion checklist', () => {
+    expect(() => buildCompletionChecklistReport({ hardReady: true })).toThrow(
+      'foundationCompletionChecklist',
+    )
+  })
+
+  it('reads and writes checklist reports', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-checklist-'))
+    const manifestFile = path.join(tempDir, 'manifest.json')
+    const outputFile = path.join(tempDir, 'checklist.json')
+    fs.writeFileSync(manifestFile, JSON.stringify(createManifest(), null, 2), 'utf8')
+
+    const report = run({ manifestFile, outputFile })
+
+    expect(report.complete).toBe(false)
+    expect(report.sourceManifest).toBe(path.basename(manifestFile))
+    expect(JSON.parse(fs.readFileSync(outputFile, 'utf8'))).toEqual(report)
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js b/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
new file mode 100644
index 00000000..2483f60b
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
@@ -0,0 +1,395 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  DEFAULT_MANIFEST,
+  DEFAULT_OUTPUT,
+  buildDecisionPackageReport,
+  formatDisplayPath,
+  parseArgs,
+  run,
+  summarizeAuthorizedStructurePlan,
+} = require('../../scripts/print-master-data-foundation-decision-package')
+
+function createManifest(overrides = {}) {
+  return {
+    checkedAt: '2026-06-01T14:53:10.738Z',
+    hardReady: false,
+    foundationCompletionChecklist: {
+      itemCount: 8,
+      passedCount: 5,
+      blockedCount: 3,
+      missingCount: 0,
+      complete: false,
+      items: [
+        {
+          id: 'schema-and-migration-history',
+          label: '数据库结构与 Prisma 迁移历史',
+          status: 'blocked',
+          passed: false,
+          blockedBy: ['migration-status:fullyReady'],
+          evidence: {
+            blockerValues: {
+              'prisma-migrate-status:pendingMigrations': 93,
+              'current-schema-diff:hasSqlDiff': true,
+              'migration-status:migrationHistory.tableExists': false,
+              'migration-status:pendingStructureMigrationCount': 10,
+              'migration-status:pendingIdempotentMigrationCount': 28,
+              'migration-status:fullyReady': false,
+            },
+          },
+        },
+        {
+          id: 'truth-source-matrix',
+          label: '核心对象唯一真相源矩阵',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {},
+        },
+        {
+          id: 'code-write-boundaries',
+          label: '后端写入边界与受控入口',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {},
+        },
+        {
+          id: 'json-and-snapshot-boundaries',
+          label: 'JSON/快照边界不反向成为主数据',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {},
+        },
+        {
+          id: 'filesystem-master-data-boundary',
+          label: '文件系统不能反向造主数据',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {},
+        },
+        {
+          id: 'historical-master-data-quality',
+          label: '历史主数据字段清洗完成',
+          status: 'blocked',
+          passed: false,
+          blockedBy: ['structuredSkuItems.incomplete'],
+          evidence: {
+            blockerValues: {
+              'foundation-dry-run:structuredSkuItems.incomplete': 2,
+              'foundation-dry-run:nonIntegratedProductProfiles.missing_product_category': 3,
+              'foundation-dry-run:nonIntegratedProductProfiles.missing_development_kind': 3,
+            },
+          },
+        },
+        {
+          id: 'pre-sku-formalization-lifecycle',
+          label: 'PreSku 正式化生命周期一致',
+          status: 'blocked',
+          passed: false,
+          blockedBy: ['preSkuFormalizationLifecycleMismatchCount'],
+          evidence: {
+            validationValid: true,
+            staleCandidateCount: 0,
+          },
+        },
+        {
+          id: 'authorized-foundation-runbook',
+          label: '授权结构修复与 baseline 施工链',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+          evidence: {},
+        },
+      ],
+    },
+    readinessSummary: {
+      nextActionStages: [
+        {
+          id: 'repair-prisma-structure-and-history',
+          commands: ['npm run db:backup:postgres'],
+        },
+        {
+          id: 'apply-governance-migrations',
+          commands: ['npm run db:foundation:apply-required:audit'],
+        },
+        {
+          id: 'clean-historical-master-data-fields',
+          commands: ['npm run db:cleanup-master-data:validate -- --plan <plan>'],
+        },
+        {
+          id: 'resolve-pre-sku-formalization-lifecycle',
+          commands: ['npm run db:foundation:plan-pre-sku-formalization-repair'],
+        },
+      ],
+    },
+    baselineRepairPlanSummary: {
+      status: 'ready-for-authorized-structure-repair',
+      recommendedAction: 'baseline-and-structure-repair-required',
+    },
+    structureRepairRehearsalSummary: {
+      status: 'structure-repair-rehearsal-passed',
+      repairSqlArtifact: {
+        sizeBytes: 17304,
+        sha256: 'abc123',
+      },
+      destructiveSqlBlocked: false,
+      baselineResolveMigrationCount: 93,
+      baselineResolveRehearsalOk: true,
+      requiredMigrationApplyAfterResolveOk: true,
+    },
+    authorizedStructureRepairApplyPlanSummary: {
+      executionState: 'plan-only-not-applied',
+      expectedDatabaseIdentity: 'postgresql|user|localhost|5432|db|',
+      expectedBackupSha256: 'backup-sha',
+      repairSqlSafety: {
+        hasDestructiveStatements: false,
+      },
+      exactPhaseCommandAvailability: {
+        available: true,
+      },
+    },
+    foundationRequiredMigrationApplyPlanSummary: {
+      readyToApply: false,
+      pendingMigrationCount: 38,
+      pendingStructureMigrationCount: 10,
+      pendingIdempotentMigrationCount: 28,
+      migrationHistoryReady: false,
+      blockerKeys: ['migrationHistory.notReady'],
+    },
+    cleanupTemplateSummary: {
+      requiresBusinessConfirmation: true,
+      skuItemCount: 2,
+      productProfileCount: 5,
+      blankMissingFillFieldCount: 12,
+      skuBlankFillFieldCounts: {
+        skuCode: 2,
+        specName: 2,
+        model: 2,
+      },
+      productProfileBlankFillFieldCounts: {
+        productDevelopmentKind: 3,
+        productCategory: 3,
+      },
+    },
+    preSkuFormalizationRepairPlanSummary: {
+      candidateCount: 1,
+      reasonCounts: {
+        formalized_without_product_sku: 1,
+      },
+      candidateEvidenceFingerprintCount: 1,
+      requiredCurrentEvidenceKeyCount: 11,
+      globalGuardCount: 5,
+    },
+    ...overrides,
+  }
+}
+
+describe('print-master-data-foundation-decision-package', () => {
+  it('parses paths and write-default flag', () => {
+    expect(parseArgs([])).toEqual({
+      manifestFile: path.resolve(DEFAULT_MANIFEST),
+      outputFile: '',
+    })
+    expect(parseArgs(['--write-default']).outputFile).toBe(path.resolve(DEFAULT_OUTPUT))
+    expect(parseArgs(['--manifest', 'manifest.json', '--output=result.json'])).toEqual({
+      manifestFile: path.resolve('manifest.json'),
+      outputFile: path.resolve('result.json'),
+    })
+    expect(parseArgs(['--manifest=manifest.json', '--output', 'result.json'])).toEqual({
+      manifestFile: path.resolve('manifest.json'),
+      outputFile: path.resolve('result.json'),
+    })
+    expect(() => parseArgs(['--manifest'])).toThrow('--manifest')
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--apply'])).toThrow('未知参数')
+  })
+
+  it('builds a safe decision package from manifest summaries', () => {
+    const report = buildDecisionPackageReport(createManifest(), 'manifest.json')
+
+    expect(report).toMatchObject({
+      mode: 'master-data-foundation-decision-package',
+      sourceManifest: 'manifest.json',
+      hardReady: false,
+      complete: false,
+      currentState: {
+        itemCount: 8,
+        passedCount: 5,
+        blockedCount: 3,
+        missingCount: 0,
+      },
+      canClaimFoundationHardReady: false,
+      nextGate: 'schema-and-migration-history',
+    })
+    expect(report.stages).toHaveLength(5)
+    expect(report.stages[0]).toMatchObject({
+      id: 'schema-and-migration-history',
+      requiresExplicitAuthorization: true,
+      evidence: {
+        structureRepairSqlSha256: 'abc123',
+        exactPhaseCommandsAvailable: true,
+      },
+      blockerValues: {
+        pendingMigrations: 93,
+        hasSchemaDiff: true,
+      },
+    })
+    expect(report.stages[2]).toMatchObject({
+      id: 'historical-master-data-quality',
+      requiresBusinessConfirmation: true,
+      blockerValues: {
+        incompleteSkuItems: 2,
+        productProfilesMissingProductCategory: 3,
+        productProfilesMissingDevelopmentKind: 3,
+      },
+    })
+    expect(report.stages[3].allowedDecisions).toEqual([
+      'revert-pre-sku-status',
+      'link-existing-product-sku',
+      'archive-invalid-pre-sku',
+    ])
+    expect(report.executionChecklist.map((step) => step.id)).toEqual([
+      'refresh-evidence-before-apply',
+      'apply-structure',
+      'post-repair-preflight',
+      'resolve-baseline',
+      'apply-required-governance-migrations',
+      'clean-historical-quality-debt',
+      'final-hard-ready-audit',
+    ])
+    expect(report.executionChecklist[1]).toMatchObject({
+      id: 'apply-structure',
+      writeDatabase: true,
+      requiresExplicitUserAuthorization: true,
+      forbiddenNextStepsUntilPassed: ['resolve-baseline', 'apply-required', '历史清洗'],
+    })
+    expect(report.executionChecklist[2]).toMatchObject({
+      id: 'post-repair-preflight',
+      writeDatabase: false,
+      prerequisites: ['apply-structure 已成功'],
+    })
+    expect(report.executionChecklist[3]).toMatchObject({
+      id: 'resolve-baseline',
+      writeDatabase: true,
+      requiresExplicitUserAuthorization: true,
+      forbiddenNextStepsUntilPassed: ['apply-required', '历史清洗'],
+    })
+    expect(JSON.stringify(report)).not.toContain('D:\\')
+    expect(JSON.stringify(report)).not.toContain('/Users/')
+  })
+
+  it('adds same-batch authorized structure plan evidence without leaking paths', () => {
+    const report = buildDecisionPackageReport(createManifest(), 'manifest.json', {
+      authorizedStructureRepairApplyPlan: {
+        phase: 'plan',
+        dryRun: true,
+        readyToApply: false,
+        checkedAt: '2026-06-02T02:10:27.022Z',
+        expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+        expectedBackupSha256: 'backup-sha',
+        expectedSha256: 'repair-sha',
+        repairSqlArtifact: {
+          path: 'D:\\AI Code\\repo\\.master-data-audits\\structure-repair.sql',
+          sizeBytes: 17304,
+          sha256: 'repair-sha',
+        },
+        repairSqlSafety: {
+          hasDestructiveStatements: false,
+        },
+        blockers: [],
+        exactPhaseCommands: {
+          available: true,
+          applyStructure: {
+            args: ['--repair-sql', 'D:\\AI Code\\repo\\.master-data-audits\\structure-repair.sql'],
+          },
+          resolveBaselineTemplate: {
+            args: ['--preflight', '<post-repair-preflight.json>'],
+          },
+        },
+      },
+    })
+
+    const authorizedPlan = report.stages[0].evidence.authorizedPlan
+
+    expect(authorizedPlan).toMatchObject({
+      available: true,
+      phase: 'plan',
+      dryRun: true,
+      readyToApply: false,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      expectedRepairSqlSha256: 'repair-sha',
+      repairSqlSha256: 'repair-sha',
+      repairSqlSizeBytes: 17304,
+      repairSqlHasDestructiveStatements: false,
+      blockerCount: 0,
+      exactPhaseCommandsAvailable: true,
+      applyStructureCommandReady: true,
+      resolveBaselineTemplateReady: true,
+    })
+    expect(JSON.stringify(report)).not.toContain('D:\\AI Code')
+    expect(JSON.stringify(report)).not.toContain('D:\\AI Code\\repo')
+  })
+
+  it('summarizes a missing authorized structure plan as unavailable', () => {
+    expect(summarizeAuthorizedStructurePlan(null)).toEqual({
+      available: false,
+    })
+  })
+
+  it('keeps final verification as the next gate when all checklist items passed', () => {
+    const manifest = createManifest({
+      hardReady: true,
+      foundationCompletionChecklist: {
+        itemCount: 8,
+        passedCount: 8,
+        blockedCount: 0,
+        missingCount: 0,
+        complete: true,
+        items: createManifest().foundationCompletionChecklist.items.map((item) => ({
+          ...item,
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+        })),
+      },
+    })
+
+    const report = buildDecisionPackageReport(manifest, 'manifest.json')
+
+    expect(report.canClaimFoundationHardReady).toBe(true)
+    expect(report.nextGate).toBe('final-verification')
+  })
+
+  it('formats source manifest paths without leaking absolute workspace paths', () => {
+    const cwd = path.resolve('workspace')
+    expect(formatDisplayPath(path.join(cwd, '.master-data-audits/manifest.json'), cwd)).toBe(
+      path.join('.master-data-audits', 'manifest.json'),
+    )
+    expect(formatDisplayPath(path.resolve('outside/manifest.json'), cwd)).toBe('manifest.json')
+    expect(formatDisplayPath('')).toBe('')
+  })
+
+  it('rejects manifests without a completion checklist', () => {
+    expect(() => buildDecisionPackageReport({ hardReady: true })).toThrow(
+      'foundationCompletionChecklist',
+    )
+  })
+
+  it('reads and writes decision package reports', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-decision-package-'))
+    const manifestFile = path.join(tempDir, 'manifest.json')
+    const outputFile = path.join(tempDir, 'decision-package.json')
+    fs.writeFileSync(manifestFile, JSON.stringify(createManifest(), null, 2), 'utf8')
+
+    const report = run({ manifestFile, outputFile })
+
+    expect(report.nextGate).toBe('schema-and-migration-history')
+    expect(report.sourceManifest).toBe(path.basename(manifestFile))
+    expect(JSON.parse(fs.readFileSync(outputFile, 'utf8'))).toEqual(report)
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/prisma-db-push-local.test.js b/furniture-3d-system/tests/scripts/prisma-db-push-local.test.js
new file mode 100644
index 00000000..2326803a
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/prisma-db-push-local.test.js
@@ -0,0 +1,105 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const { assertLocalOnlyDbPush } = require('../../scripts/prisma-db-push-local')
+
+describe('prisma-db-push-local', () => {
+  const cleanEnv = {
+    NODE_ENV: 'development',
+    VERCEL_ENV: '',
+    ALLOW_PRISMA_DB_PUSH: '',
+  }
+
+  it('allows localhost development databases', () => {
+    expect(
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/furniture_3d', cleanEnv),
+    ).toEqual({
+      databaseName: 'furniture_3d',
+      host: 'localhost',
+      localHost: true,
+    })
+  })
+
+  it('allows IPv4 and IPv6 localhost addresses', () => {
+    expect(
+      assertLocalOnlyDbPush('postgresql://furniture:password@127.0.0.1:5432/furniture_3d', cleanEnv),
+    ).toEqual(expect.objectContaining({ host: '127.0.0.1', localHost: true }))
+    expect(
+      assertLocalOnlyDbPush('postgresql://furniture:password@[::1]:5432/furniture_3d', cleanEnv),
+    ).toEqual(expect.objectContaining({ host: '[::1]', localHost: true }))
+  })
+
+  it('rejects production environment markers before checking the database URL', () => {
+    expect(() =>
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/furniture_3d', {
+        ...cleanEnv,
+        NODE_ENV: 'production',
+      }),
+    ).toThrow('production')
+
+    expect(() =>
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/furniture_3d', {
+        ...cleanEnv,
+        VERCEL_ENV: 'production',
+      }),
+    ).toThrow('production')
+  })
+
+  it('rejects missing or malformed database urls', () => {
+    expect(() => assertLocalOnlyDbPush('', cleanEnv)).toThrow('DATABASE_URL 缺失')
+    expect(() => assertLocalOnlyDbPush('not-a-url', cleanEnv)).toThrow('DATABASE_URL 格式无效')
+  })
+
+  it('rejects non-local database hosts unless explicitly confirmed as local-only', () => {
+    expect(() =>
+      assertLocalOnlyDbPush('postgresql://furniture:password@10.0.0.8:5432/furniture_3d', cleanEnv),
+    ).toThrow('不是本机地址')
+
+    expect(
+      assertLocalOnlyDbPush('postgresql://furniture:password@10.0.0.8:5432/furniture_3d', {
+        ...cleanEnv,
+        ALLOW_PRISMA_DB_PUSH: 'LOCAL_ONLY',
+      }),
+    ).toEqual({
+      databaseName: 'furniture_3d',
+      host: '10.0.0.8',
+      localHost: false,
+    })
+  })
+
+  it('rejects production-like database names without blocking words such as product', () => {
+    expect(() =>
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/furniture3d_prod', cleanEnv),
+    ).toThrow('看起来像生产库')
+    expect(() =>
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/furniture-production', cleanEnv),
+    ).toThrow('看起来像生产库')
+
+    expect(
+      assertLocalOnlyDbPush('postgresql://furniture:password@localhost:5432/product_dev', cleanEnv),
+    ).toEqual(expect.objectContaining({ databaseName: 'product_dev' }))
+  })
+
+  it('keeps active deployment guides from documenting raw prisma db push commands', () => {
+    const rootDir = path.resolve(__dirname, '../..')
+    const activeDeploymentFiles = [
+      'docs/DEPLOYMENT.md',
+      'docs/飞牛OS部署指南.md',
+      'docs/开发指南/包装方案增强/包装方案增强-非程序员操作手册.md',
+      '../scripts/prepare-deploy-package.ps1',
+      '../scripts/部署到飞牛OS-快速指南.md',
+      '../scripts/deploy-feiniu-manual.md',
+    ]
+
+    const offenders = activeDeploymentFiles.flatMap((relativePath) =>
+      fs
+        .readFileSync(path.resolve(rootDir, relativePath), 'utf8')
+        .split(/\r?\n/)
+        .map((line, lineIndex) => ({ line, lineNumber: lineIndex + 1, relativePath }))
+        .filter(({ line }) => /\b(?:npx\s+)?prisma\s+db\s+push\b/i.test(line))
+        .filter(({ line }) => !/(禁止|不要|拒绝|不能|只作为|only|never|must not)/i.test(line))
+        .map(({ relativePath: offenderPath, lineNumber }) => `${offenderPath}:${lineNumber}`),
+    )
+
+    expect(offenders).toEqual([])
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/rehearse-database-foundation-migration.test.js b/furniture-3d-system/tests/scripts/rehearse-database-foundation-migration.test.js
new file mode 100644
index 00000000..26dea090
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/rehearse-database-foundation-migration.test.js
@@ -0,0 +1,126 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildRehearsalReport,
+  parseArgs,
+  writeJsonReport,
+} = require('../../scripts/rehearse-database-foundation-migration')
+
+function commandResult(overrides = {}) {
+  return {
+    ok: true,
+    status: 0,
+    stdout: '',
+    stderr: '',
+    error: '',
+    ...overrides,
+  }
+}
+
+describe('rehearse-database-foundation-migration', () => {
+  it('parses backup, output, docker port, and keep-container options', () => {
+    const parsed = parseArgs([
+      '--backup',
+      '.database-backups/current.dump',
+      '--output=.master-data-audits/rehearsal.json',
+      '--docker-port',
+      '65455',
+      '--keep-container',
+    ], {})
+
+    expect(parsed).toEqual({
+      backupPath: path.resolve(__dirname, '../..', '.database-backups/current.dump'),
+      outputPath: '.master-data-audits/rehearsal.json',
+      dockerImage: 'postgres:16',
+      dockerPort: '65455',
+      keepContainer: true,
+    })
+  })
+
+  it('accepts backup and Docker defaults from environment', () => {
+    expect(parseArgs([], {
+      DATABASE_BACKUP_FILE: '.database-backups/from-env.dump',
+      POSTGRES_DOCKER_IMAGE: 'postgres:17',
+      DB_FOUNDATION_REHEARSAL_PORT: '65456',
+      DB_FOUNDATION_REHEARSAL_KEEP_CONTAINER: '1',
+    })).toEqual({
+      backupPath: path.resolve(__dirname, '../..', '.database-backups/from-env.dump'),
+      outputPath: '',
+      dockerImage: 'postgres:17',
+      dockerPort: '65456',
+      keepContainer: true,
+    })
+  })
+
+  it('rejects missing backup and non-numeric Docker ports', () => {
+    expect(() => parseArgs([], {})).toThrow('DATABASE_BACKUP_FILE')
+    expect(() => parseArgs(['--backup', 'backup.dump', '--docker-port', 'abc'], {})).toThrow('端口')
+    expect(() => parseArgs(['--backup'], {})).toThrow('--backup')
+    expect(() => parseArgs(['--backup', 'backup.dump', '--unknown'], {})).toThrow('未知参数')
+  })
+
+  it('turns a clone P3005 failure into a baseline blocker', () => {
+    const report = buildRehearsalReport({
+      options: {
+        backupPath: 'backup.dump',
+        dockerImage: 'postgres:16',
+        dockerPort: '65447',
+        keepContainer: false,
+      },
+      containerName: 'clone',
+      databaseUrl: 'postgresql://postgres:pw@localhost:65447/furniture_3d_rehearsal?schema=public',
+      cleanupStatus: 'removed',
+      restore: commandResult(),
+      migrateDeploy: commandResult({
+        ok: false,
+        status: 1,
+        stderr: 'Error: P3005 The database schema is not empty.',
+      }),
+      checkedAt: '2026-06-01T00:00:00.000Z',
+    })
+
+    expect(report).toEqual(expect.objectContaining({
+      status: 'deploy-rehearsal-blocked',
+      safeForProduction: false,
+      blockers: expect.arrayContaining([
+        expect.objectContaining({ key: 'migrateDeploy.P3005' }),
+      ]),
+    }))
+    expect(report.migrateDeploy.p3005Detected).toBe(true)
+    expect(report.docker.cleanupStatus).toBe('removed')
+  })
+
+  it('marks the rehearsal passed only when restore and migrate deploy pass', () => {
+    const report = buildRehearsalReport({
+      options: {
+        backupPath: 'backup.dump',
+        dockerImage: 'postgres:16',
+        dockerPort: '65447',
+        keepContainer: false,
+      },
+      containerName: 'clone',
+      databaseUrl: 'postgresql://postgres:pw@localhost:65447/furniture_3d_rehearsal?schema=public',
+      cleanupStatus: 'removed',
+      restore: commandResult(),
+      migrateDeploy: commandResult(),
+      checkedAt: '2026-06-01T00:00:00.000Z',
+    })
+
+    expect(report.status).toBe('deploy-rehearsal-passed')
+    expect(report.blockers).toEqual([])
+  })
+
+  it('writes rehearsal reports to nested audit files', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-rehearsal-'))
+    const outputPath = writeJsonReport(
+      'nested/rehearsal.json',
+      { mode: 'database-foundation-migration-rehearsal' },
+      tempDir,
+    )
+
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'database-foundation-migration-rehearsal',
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/rehearse-prisma-structure-repair.test.js b/furniture-3d-system/tests/scripts/rehearse-prisma-structure-repair.test.js
new file mode 100644
index 00000000..37c3cee2
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/rehearse-prisma-structure-repair.test.js
@@ -0,0 +1,403 @@
+const {
+  buildBaselineResolvePlan,
+  buildMigrationManifest,
+  buildReport,
+  hasSqlDiff,
+  parseArgs,
+  summarizeReadinessAfterResolve,
+  summarizeResolveResults,
+  summarizeRepairSql,
+  writeRepairSqlArtifact,
+} = require('../../scripts/rehearse-prisma-structure-repair')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+
+function commandResult(overrides = {}) {
+  return {
+    ok: true,
+    status: 0,
+    stdout: '',
+    stderr: '',
+    error: '',
+    ...overrides,
+  }
+}
+
+function options(overrides = {}) {
+  return {
+    backupPath: __filename,
+    dockerImage: 'postgres:16',
+    dockerPort: '65448',
+    keepContainer: false,
+    ...overrides,
+  }
+}
+
+describe('rehearse-prisma-structure-repair', () => {
+  it('parses backup, output, and Docker options', () => {
+    expect(parseArgs(['--backup', 'backup.dump', '--output=repair.json', '--docker-port', '65488'])).toEqual({
+      backupPath: expect.stringContaining('backup.dump'),
+      outputPath: 'repair.json',
+      repairSqlOutputPath: 'structure-repair.sql',
+      dockerImage: 'postgres:16',
+      dockerPort: '65488',
+      keepContainer: false,
+    })
+    expect(parseArgs(['--backup=backup.dump', '--keep-container'])).toEqual(
+      expect.objectContaining({
+        keepContainer: true,
+      }),
+    )
+    expect(parseArgs([
+      '--backup=backup.dump',
+      '--output=.master-data-audits/repair/report.json',
+      '--repair-sql-output=.master-data-audits/repair/custom.sql',
+    ])).toEqual(expect.objectContaining({
+      repairSqlOutputPath: '.master-data-audits/repair/custom.sql',
+    }))
+    expect(parseArgs([
+      '--backup=backup.dump',
+      '--output=.master-data-audits/repair/report.json',
+    ])).toEqual(expect.objectContaining({
+      repairSqlOutputPath: path.join('.master-data-audits/repair', 'structure-repair.sql'),
+    }))
+    expect(() => parseArgs([], {})).toThrow('DATABASE_BACKUP_FILE')
+    expect(() => parseArgs(['--backup', 'backup.dump', '--docker-port', 'abc'])).toThrow('端口')
+    expect(() => parseArgs(['--force'], { DATABASE_BACKUP_FILE: 'backup.dump' })).toThrow('未知参数')
+  })
+
+  it('detects SQL diffs without treating comments as structure', () => {
+    expect(hasSqlDiff('-- This is an empty migration.')).toBe(false)
+    expect(hasSqlDiff('CREATE TABLE "ProductSkuAssetProfile" ("id" TEXT NOT NULL);')).toBe(true)
+  })
+
+  it('builds a stable migration manifest with relative paths and content hashes', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'migration-manifest-'))
+    try {
+      const migrationDir = path.join(tempDir, 'prisma/migrations/20260101000000_init')
+      fs.mkdirSync(migrationDir, { recursive: true })
+      fs.writeFileSync(path.join(migrationDir, 'migration.sql'), 'CREATE TABLE "A"();\n', 'utf8')
+
+      expect(buildMigrationManifest(tempDir)).toEqual([
+        expect.objectContaining({
+          migrationId: '20260101000000_init',
+          path: 'prisma/migrations/20260101000000_init/migration.sql',
+          exists: true,
+          sizeBytes: 20,
+        }),
+      ])
+      expect(JSON.stringify(buildMigrationManifest(tempDir))).not.toContain(tempDir)
+    } finally {
+      fs.rmSync(tempDir, { recursive: true, force: true })
+    }
+  })
+
+  it('summarizes repair SQL and blocks destructive statements', () => {
+    const summary = summarizeRepairSql(`
+      CREATE TYPE "ProductSkuAssetSourceStatus" AS ENUM ('ACTIVE');
+      CREATE TABLE "ProductSkuAssetProfile" ("id" TEXT NOT NULL);
+      ALTER TABLE "ProductSKU" ADD COLUMN "name" TEXT;
+      ALTER TABLE "ProductSKU" ADD CONSTRAINT "ProductSKU_pkey" PRIMARY KEY ("id");
+      CREATE UNIQUE INDEX "ProductSKU_name_key" ON "ProductSKU"("name");
+      DROP TABLE "OldTable";
+    `)
+
+    expect(summary).toEqual(expect.objectContaining({
+      hasSqlDiff: true,
+      hasDestructiveStatements: true,
+      changedRelations: expect.arrayContaining(['ProductSkuAssetProfile', 'ProductSKU', 'OldTable']),
+    }))
+    expect(summary.statementCounts).toEqual(expect.objectContaining({
+      addColumn: 1,
+      alterTable: 2,
+      createIndex: 1,
+      createTable: 1,
+      createType: 1,
+      dropTable: 1,
+    }))
+  })
+
+  it('passes only when clone repair aligns both schema and migrations', () => {
+    const report = buildReport({
+      options: options(),
+      containerName: 'container',
+      databaseUrl: 'postgresql://postgres:pass@localhost:65448/furniture_3d_structure_repair?schema=public',
+      restore: commandResult(),
+      currentSchemaDiffBefore: commandResult({ status: 2, stdout: 'CREATE TABLE "A" ("id" TEXT);' }),
+      repairSqlSummary: summarizeRepairSql('CREATE TABLE "A" ("id" TEXT);'),
+      repairApply: commandResult(),
+      currentSchemaDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      migrationDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      repairSqlArtifact: { path: 'repair.sql', sizeBytes: 10, sha256: 'abc' },
+      migrationManifest: [
+        {
+          migrationId: '20260101000000_init',
+          path: 'prisma/migrations/20260101000000_init/migration.sql',
+          exists: true,
+          sizeBytes: 20,
+          sha256: 'a'.repeat(64),
+        },
+      ],
+      migrationIds: ['20260101000000_init', '20260102000000_next'],
+      baselineResolveResults: [
+        { migrationId: '20260101000000_init', ...commandResult() },
+        { migrationId: '20260102000000_next', ...commandResult() },
+      ],
+      prismaMigrateStatusAfterResolve: commandResult({ stdout: 'Database schema is up to date!' }),
+      readinessAfterResolve: commandResult({
+        stdout: JSON.stringify({
+          status: 'not-hard-ready',
+          hardReady: false,
+          blockerCount: 2,
+          blockers: [
+            { source: 'foundation-dry-run', key: 'structuredSkuItems.incomplete' },
+            { source: 'foundation-dry-run', key: 'nonIntegratedProductProfiles.missing_product_category' },
+          ],
+        }),
+        status: 1,
+        ok: false,
+      }),
+      requiredMigrationApplyAfterResolve: {
+        attempted: true,
+        ok: true,
+        appliedMigrationCount: 8,
+        pendingStructureMigrationCount: 1,
+        replayableIdempotentMigrationCount: 7,
+        appliedMigrationPaths: ['prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql'],
+      },
+      readinessAfterRequiredMigrations: commandResult({
+        stdout: JSON.stringify({
+          status: 'not-hard-ready',
+          hardReady: false,
+          blockerCount: 1,
+          blockers: [
+            { source: 'foundation-dry-run', key: 'structuredSkuItems.incomplete' },
+          ],
+        }),
+        status: 1,
+        ok: false,
+      }),
+      cleanupStatus: 'removed',
+      checkedAt: '2026-06-01T12:00:00.000Z',
+    })
+
+    expect(report.status).toBe('structure-repair-rehearsal-passed')
+    expect(report.safeForProductionWrite).toBe(false)
+    expect(report.repairSqlArtifact).toEqual({ path: 'repair.sql', sizeBytes: 10, sha256: 'abc' })
+    expect(report.migrationManifest).toEqual([
+      expect.objectContaining({ migrationId: '20260101000000_init', sha256: 'a'.repeat(64) }),
+    ])
+    expect(report.baselineResolvePlan).toEqual(expect.objectContaining({
+      candidate: true,
+      migrationCount: 2,
+      migrationIds: ['20260101000000_init', '20260102000000_next'],
+    }))
+    expect(report.baselineResolveRehearsal).toEqual(expect.objectContaining({
+      attempted: true,
+      attemptedCount: 2,
+      appliedCount: 2,
+      failedCount: 0,
+      ok: true,
+    }))
+    expect(report.prismaMigrateStatusAfterResolve).toEqual(expect.objectContaining({
+      ok: true,
+      status: 0,
+    }))
+    expect(report.readinessAfterResolve).toEqual(expect.objectContaining({
+      jsonParsed: true,
+      readinessStatus: 'not-hard-ready',
+      hardReady: false,
+      blockerCount: 2,
+      blockerKeys: [
+        'structuredSkuItems.incomplete',
+        'nonIntegratedProductProfiles.missing_product_category',
+      ],
+    }))
+    expect(report.requiredMigrationApplyAfterResolve).toEqual(expect.objectContaining({
+      ok: true,
+      appliedMigrationCount: 8,
+    }))
+    expect(report.readinessAfterRequiredMigrations).toEqual(expect.objectContaining({
+      jsonParsed: true,
+      readinessStatus: 'not-hard-ready',
+      hardReady: false,
+      blockerCount: 1,
+      blockerKeys: ['structuredSkuItems.incomplete'],
+    }))
+    expect(report.blockers).toEqual([])
+  })
+
+  it('requires readable readiness evidence after baseline resolve succeeds', () => {
+    const report = buildReport({
+      options: options(),
+      containerName: 'container',
+      databaseUrl: 'postgresql://postgres:pass@localhost:65448/furniture_3d_structure_repair?schema=public',
+      restore: commandResult(),
+      currentSchemaDiffBefore: commandResult({ status: 2, stdout: 'CREATE TABLE "A" ("id" TEXT);' }),
+      repairSqlSummary: summarizeRepairSql('CREATE TABLE "A" ("id" TEXT);'),
+      repairApply: commandResult(),
+      currentSchemaDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      migrationDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      migrationIds: ['20260101000000_init'],
+      baselineResolveResults: [{ migrationId: '20260101000000_init', ...commandResult() }],
+      prismaMigrateStatusAfterResolve: commandResult({ stdout: 'Database schema is up to date!' }),
+      readinessAfterResolve: commandResult({ status: 1, ok: false, stdout: 'not json' }),
+      cleanupStatus: 'removed',
+    })
+
+    expect(report.status).toBe('structure-repair-rehearsal-blocked')
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'readinessAfterResolve.unreadable' }),
+      ]),
+    )
+  })
+
+  it('blocks when required governance migrations fail on the clone', () => {
+    const report = buildReport({
+      options: options(),
+      containerName: 'container',
+      databaseUrl: 'postgresql://postgres:pass@localhost:65448/furniture_3d_structure_repair?schema=public',
+      restore: commandResult(),
+      currentSchemaDiffBefore: commandResult({ status: 2, stdout: 'CREATE TABLE "A" ("id" TEXT);' }),
+      repairSqlSummary: summarizeRepairSql('CREATE TABLE "A" ("id" TEXT);'),
+      repairApply: commandResult(),
+      currentSchemaDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      migrationDiffAfter: commandResult({ stdout: '-- This is an empty migration.' }),
+      migrationIds: ['20260101000000_init'],
+      baselineResolveResults: [{ migrationId: '20260101000000_init', ...commandResult() }],
+      prismaMigrateStatusAfterResolve: commandResult({ stdout: 'Database schema is up to date!' }),
+      readinessAfterResolve: commandResult({
+        status: 1,
+        ok: false,
+        stdout: JSON.stringify({ status: 'not-hard-ready', hardReady: false, blockerCount: 1, blockers: [] }),
+      }),
+      requiredMigrationApplyAfterResolve: {
+        attempted: true,
+        ok: false,
+        appliedMigrationCount: 0,
+        pendingStructureMigrationCount: null,
+        replayableIdempotentMigrationCount: null,
+        appliedMigrationPaths: [],
+        error: 'constraint failed',
+      },
+      cleanupStatus: 'removed',
+    })
+
+    expect(report.status).toBe('structure-repair-rehearsal-blocked')
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'requiredMigrationApplyAfterResolve.failed' }),
+      ]),
+    )
+  })
+
+  it('blocks destructive repair SQL before applying it to the clone', () => {
+    const report = buildReport({
+      options: options(),
+      containerName: 'container',
+      databaseUrl: 'postgresql://postgres:pass@localhost:65448/furniture_3d_structure_repair?schema=public',
+      restore: commandResult(),
+      currentSchemaDiffBefore: commandResult({ status: 2, stdout: 'DROP TABLE "OldTable";' }),
+      repairSqlSummary: summarizeRepairSql('DROP TABLE "OldTable";'),
+      repairApply: null,
+      currentSchemaDiffAfter: null,
+      migrationDiffAfter: null,
+      cleanupStatus: 'removed',
+    })
+
+    expect(report.status).toBe('structure-repair-rehearsal-blocked')
+    expect(report.baselineResolvePlan.candidate).toBe(false)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'repairSql.destructive' }),
+      ]),
+    )
+  })
+
+  it('writes repair SQL artifacts with stable sha256 evidence', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'structure-repair-sql-'))
+    const artifact = writeRepairSqlArtifact(
+      'repair.sql',
+      'CREATE TABLE "A" ("id" TEXT);\n',
+      tempDir,
+    )
+
+    expect(artifact).toEqual(expect.objectContaining({
+      path: path.join(tempDir, 'repair.sql'),
+      sizeBytes: 30,
+      sha256: expect.stringMatching(/^[a-f0-9]{64}$/),
+    }))
+    expect(fs.readFileSync(artifact.path, 'utf8')).toBe('CREATE TABLE "A" ("id" TEXT);\n')
+  })
+
+  it('builds baseline resolve plans only after structure alignment is proven', () => {
+    expect(buildBaselineResolvePlan(['a', 'b'], false)).toEqual(expect.objectContaining({
+      candidate: false,
+      migrationIds: [],
+    }))
+    expect(buildBaselineResolvePlan(['a', 'b'], true)).toEqual(expect.objectContaining({
+      candidate: true,
+      migrationCount: 2,
+      commandsPreview: [
+        'node node_modules/prisma/build/index.js migrate resolve --applied a',
+        'node node_modules/prisma/build/index.js migrate resolve --applied b',
+      ],
+    }))
+  })
+
+  it('summarizes baseline resolve failures without exposing every command output', () => {
+    expect(summarizeResolveResults([])).toEqual({
+      attempted: false,
+      attemptedCount: 0,
+      appliedCount: 0,
+      failedCount: 0,
+      ok: false,
+      firstFailed: null,
+    })
+    expect(summarizeResolveResults([
+      { migrationId: 'a', ...commandResult() },
+      {
+        migrationId: 'b',
+        ...commandResult({
+          ok: false,
+          status: 1,
+          stderr: 'x'.repeat(800),
+        }),
+      },
+    ])).toEqual(expect.objectContaining({
+      attempted: true,
+      attemptedCount: 2,
+      appliedCount: 1,
+      failedCount: 1,
+      ok: false,
+      firstFailed: expect.objectContaining({
+        migrationId: 'b',
+        stderrPreview: 'x'.repeat(500),
+      }),
+    }))
+  })
+
+  it('summarizes readiness-after-resolve blockers from parsed JSON', () => {
+    const summary = summarizeReadinessAfterResolve(commandResult({
+      status: 1,
+      ok: false,
+      stdout: `log line\n${JSON.stringify({
+        status: 'not-hard-ready',
+        hardReady: false,
+        blockerCount: 1,
+        blockers: [{ key: 'foundation-dry-run.preSkuMissingBasicInfoCount' }],
+      })}`,
+    }))
+
+    expect(summary).toEqual(expect.objectContaining({
+      attempted: true,
+      jsonParsed: true,
+      readinessStatus: 'not-hard-ready',
+      hardReady: false,
+      blockerCount: 1,
+      blockerKeys: ['foundation-dry-run.preSkuMissingBasicInfoCount'],
+    }))
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/run-database-foundation-migrations.test.js b/furniture-3d-system/tests/scripts/run-database-foundation-migrations.test.js
new file mode 100644
index 00000000..eaabbd1f
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/run-database-foundation-migrations.test.js
@@ -0,0 +1,204 @@
+const {
+  buildFoundationMigrationPlan,
+  getBackupFingerprint,
+  parseArgs,
+  writeJsonReport,
+} = require('../../scripts/run-database-foundation-migrations')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+
+function preflight(overrides = {}) {
+  return {
+    ready: true,
+    recommendedAction: 'migrate-deploy-required',
+    database: {
+      protocol: 'postgresql',
+      host: 'localhost',
+      port: '5432',
+      databaseName: 'furniture_3d',
+    },
+    backupEvidence: {
+      usable: true,
+      path: 'backup.dump',
+      sha256: 'backup-sha',
+    },
+    pendingMigrationCount: 2,
+    currentSchemaDiffHasSql: true,
+    migrationDiffSkipped: true,
+    blockers: [],
+    ...overrides,
+  }
+}
+
+describe('run-database-foundation-migrations', () => {
+  it('parses explicit apply and confirmation flags', () => {
+    expect(parseArgs([])).toEqual({
+      apply: false,
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+      outputPath: '',
+    })
+    expect(parseArgs([
+      '--apply',
+      '--confirm=migrate-deploy',
+      '--expected-database-identity',
+      'postgresql|user|localhost|5432|furniture_3d|',
+      '--expected-backup-sha256=backup-sha',
+    ])).toEqual({
+      apply: true,
+      confirm: 'migrate-deploy',
+      expectedDatabaseIdentity: 'postgresql|user|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      outputPath: '',
+    })
+    expect(parseArgs(['--output=.master-data-audits/migrate-plan.json'])).toEqual({
+      apply: false,
+      confirm: '',
+      expectedDatabaseIdentity: '',
+      expectedBackupSha256: '',
+      outputPath: '.master-data-audits/migrate-plan.json',
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--expected-database-identity'])).toThrow('--expected-database-identity')
+    expect(() => parseArgs(['--expected-backup-sha256'])).toThrow('--expected-backup-sha256')
+    expect(() => parseArgs(['--force'])).toThrow('未知参数')
+  })
+
+  it('fingerprints the backup file selected through environment variables', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-migrate-backup-'))
+    const backupPath = path.join(tempDir, 'backup.dump')
+    fs.writeFileSync(backupPath, 'backup-content')
+
+    const fingerprint = getBackupFingerprint({ DATABASE_BACKUP_FILE: backupPath }, tempDir)
+
+    expect(fingerprint).toEqual(
+      expect.objectContaining({
+        provided: true,
+        path: backupPath,
+        exists: true,
+        sizeBytes: 'backup-content'.length,
+      }),
+    )
+    expect(fingerprint.sha256).toMatch(/^[a-f0-9]{64}$/)
+  })
+
+  it('can write migration plans to a local audit file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-migrate-plan-'))
+    const outputPath = writeJsonReport(
+      'nested/migrate-plan.json',
+      { readyToRun: false, blockers: [{ key: 'confirm' }] },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/migrate-plan.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      readyToRun: false,
+      blockers: [{ key: 'confirm' }],
+    })
+  })
+
+  it('builds a dry-run migration plan when preflight is ready', () => {
+    const plan = buildFoundationMigrationPlan(preflight())
+
+    expect(plan.dryRun).toBe(true)
+    expect(plan.readyToRun).toBe(true)
+    expect(plan.commands.map((command) => command.name)).toEqual([
+      'prisma-migrate-deploy',
+      'master-data-readiness',
+    ])
+    expect(plan.blockers).toEqual([])
+  })
+
+  it('blocks apply without explicit confirmation', () => {
+    const plan = buildFoundationMigrationPlan(preflight(), {
+      apply: true,
+      confirm: '',
+      expectedDatabaseIdentity: 'db',
+      expectedBackupSha256: 'backup-sha',
+      actualDatabaseIdentity: 'db',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToRun).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'confirm' }),
+      ]),
+    )
+  })
+
+  it('blocks apply without target database identity and backup fingerprint confirmation', () => {
+    const plan = buildFoundationMigrationPlan(preflight(), {
+      apply: true,
+      confirm: 'migrate-deploy',
+      actualDatabaseIdentity: 'postgresql|user|localhost|5432|furniture_3d|',
+      backupFingerprint: { provided: false, exists: false, sha256: '' },
+    })
+
+    expect(plan.readyToRun).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.missing' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.missing' }),
+        expect.objectContaining({ key: 'backupFingerprint.missing' }),
+      ]),
+    )
+    expect(plan.commands[0].command).toContain('--expected-database-identity <database-identity>')
+    expect(plan.commands[0].command).toContain('--expected-backup-sha256 <backup-sha256>')
+  })
+
+  it('blocks apply when target database identity or backup sha does not match', () => {
+    const plan = buildFoundationMigrationPlan(preflight(), {
+      apply: true,
+      confirm: 'migrate-deploy',
+      expectedDatabaseIdentity: 'wrong-db',
+      expectedBackupSha256: 'wrong-sha',
+      actualDatabaseIdentity: 'postgresql|user|localhost|5432|furniture_3d|',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToRun).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedDatabaseIdentity.mismatch' }),
+        expect.objectContaining({ key: 'expectedBackupSha256.mismatch' }),
+      ]),
+    )
+  })
+
+  it('allows apply only when confirmation, target identity, and backup sha all match', () => {
+    const plan = buildFoundationMigrationPlan(preflight(), {
+      apply: true,
+      confirm: 'migrate-deploy',
+      expectedDatabaseIdentity: 'postgresql|user|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      actualDatabaseIdentity: 'postgresql|user|localhost|5432|furniture_3d|',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToRun).toBe(true)
+    expect(plan.blockers).toEqual([])
+  })
+
+  it('does not run deploy for baseline-only candidates', () => {
+    const plan = buildFoundationMigrationPlan(preflight({
+      recommendedAction: 'baseline-resolve-candidate',
+    }), {
+      apply: true,
+      confirm: 'migrate-deploy',
+      expectedDatabaseIdentity: 'db',
+      expectedBackupSha256: 'backup-sha',
+      actualDatabaseIdentity: 'db',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToRun).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'recommendedAction' }),
+      ]),
+    )
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/run-master-data-foundation-audit.test.js b/furniture-3d-system/tests/scripts/run-master-data-foundation-audit.test.js
new file mode 100644
index 00000000..d86cefd4
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/run-master-data-foundation-audit.test.js
@@ -0,0 +1,1782 @@
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  auditSteps,
+  buildAuditManifest,
+  buildAuthorizedStructureRepairApplyPlanSummary,
+  buildBaselineRepairPlanSummary,
+  buildCleanupTemplateSummary,
+  buildFileSystemMasterDataSourceSummary,
+  buildFoundationCompletionChecklist,
+  buildFoundationHardReadyGateSummary,
+  buildFoundationRequiredMigrationApplyPlanSummary,
+  buildMigrationRehearsalSummary,
+  buildPreSkuFormalizationRepairPlanSummary,
+  buildPreSkuFormalizationRepairPlanValidationSummary,
+  buildPreSkuFormalizationRepairExecutionTemplateSummary,
+  buildReadinessSummary,
+  buildReferenceEstimatorCostBoundarySummary,
+  buildStructureRepairRehearsalSummary,
+  buildSnapshotReadBoundarySummary,
+  collectBlockers,
+  countBlankFillFields,
+  countBlankMissingFillFields,
+  countByField,
+  countQualityDecisionPlaceholderFields,
+  defaultOutputDir,
+  parseArgs,
+  timestampForDirectory,
+  writeJsonReport,
+} = require('../../scripts/run-master-data-foundation-audit')
+
+function stepResult(id, ok, data = {}) {
+  return {
+    id,
+    label: id,
+    command: id,
+    outputFile: `${id}.json`,
+    outputExists: true,
+    ok,
+    status: ok ? 0 : 1,
+    data,
+    jsonError: '',
+    error: '',
+    stdoutPreview: '',
+    stderrPreview: '',
+  }
+}
+
+describe('run-master-data-foundation-audit', () => {
+  it('builds stable timestamped default output directories', () => {
+    const now = new Date('2026-06-01T03:30:00.000Z')
+    expect(timestampForDirectory(now)).toBe('20260601T033000Z')
+    expect(defaultOutputDir(now)).toBe(
+      path.join('.master-data-audits', 'foundation-audit-20260601T033000Z'),
+    )
+  })
+
+  it('parses output directory from args or environment', () => {
+    expect(parseArgs(['--output-dir', '.master-data-audits/current'], {})).toEqual({
+      includeCleanupTemplate: false,
+      includeMigrationRehearsal: false,
+      includeStructureRepairRehearsal: false,
+      outputDir: path.resolve(__dirname, '../..', '.master-data-audits/current'),
+      useDockerShadow: false,
+      dockerShadowPort: '65436',
+      dockerRehearsalPort: '65447',
+      dockerStructureRepairPort: '65448',
+      dockerShadowImage: 'postgres:16',
+    })
+    expect(parseArgs(['--output-dir=.master-data-audits/current'], {})).toEqual({
+      includeCleanupTemplate: false,
+      includeMigrationRehearsal: false,
+      includeStructureRepairRehearsal: false,
+      outputDir: path.resolve(__dirname, '../..', '.master-data-audits/current'),
+      useDockerShadow: false,
+      dockerShadowPort: '65436',
+      dockerRehearsalPort: '65447',
+      dockerStructureRepairPort: '65448',
+      dockerShadowImage: 'postgres:16',
+    })
+    expect(parseArgs([], { MASTER_DATA_AUDIT_DIR: '.master-data-audits/from-env' })).toEqual({
+      includeCleanupTemplate: false,
+      includeMigrationRehearsal: false,
+      includeStructureRepairRehearsal: false,
+      outputDir: path.resolve(__dirname, '../..', '.master-data-audits/from-env'),
+      useDockerShadow: false,
+      dockerShadowPort: '65436',
+      dockerRehearsalPort: '65447',
+      dockerStructureRepairPort: '65448',
+      dockerShadowImage: 'postgres:16',
+    })
+    expect(parseArgs(['--include-cleanup-template'], {})).toEqual(
+      expect.objectContaining({
+        includeCleanupTemplate: true,
+      }),
+    )
+    expect(parseArgs([], { MASTER_DATA_AUDIT_INCLUDE_CLEANUP_TEMPLATE: '1' })).toEqual(
+      expect.objectContaining({
+        includeCleanupTemplate: true,
+      }),
+    )
+    expect(parseArgs(['--use-docker-shadow', '--docker-shadow-port', '65444'], {})).toEqual(
+      expect.objectContaining({
+        useDockerShadow: true,
+        dockerShadowPort: '65444',
+      }),
+    )
+    expect(parseArgs(['--include-migration-rehearsal', '--docker-rehearsal-port=65458'], {})).toEqual(
+      expect.objectContaining({
+        includeMigrationRehearsal: true,
+        dockerRehearsalPort: '65458',
+      }),
+    )
+    expect(parseArgs([], {
+      MASTER_DATA_AUDIT_USE_DOCKER_SHADOW: '1',
+      MASTER_DATA_AUDIT_DOCKER_SHADOW_PORT: '65445',
+      MASTER_DATA_AUDIT_INCLUDE_MIGRATION_REHEARSAL: '1',
+      MASTER_DATA_AUDIT_DOCKER_REHEARSAL_PORT: '65459',
+      MASTER_DATA_AUDIT_INCLUDE_STRUCTURE_REPAIR_REHEARSAL: '1',
+      MASTER_DATA_AUDIT_DOCKER_STRUCTURE_REPAIR_PORT: '65460',
+      POSTGRES_DOCKER_IMAGE: 'postgres:17',
+    })).toEqual(expect.objectContaining({
+      useDockerShadow: true,
+      dockerShadowPort: '65445',
+      includeMigrationRehearsal: true,
+      dockerRehearsalPort: '65459',
+      includeStructureRepairRehearsal: true,
+      dockerStructureRepairPort: '65460',
+      dockerShadowImage: 'postgres:17',
+    }))
+    expect(() => parseArgs(['--output-dir'], {})).toThrow('--output-dir')
+    expect(() => parseArgs(['--docker-shadow-port'], {})).toThrow('--docker-shadow-port')
+    expect(() => parseArgs(['--docker-rehearsal-port'], {})).toThrow('--docker-rehearsal-port')
+    expect(() => parseArgs(['--docker-structure-repair-port'], {})).toThrow(
+      '--docker-structure-repair-port',
+    )
+    expect(() => parseArgs(['--apply'], {})).toThrow('未知参数')
+  })
+
+  it('builds default audit steps that write JSON into the same output directory', () => {
+    const outputDir = path.resolve(__dirname, '../../.master-data-audits/example')
+    const steps = auditSteps(outputDir)
+
+    expect(steps.map((step) => step.id)).toEqual([
+      'readiness',
+      'foundation-hard-ready-gate',
+      'truth-sources',
+      'code-boundaries',
+      'compatibility-snapshot-read',
+      'process-snapshot-read',
+      'product-sku-attributes-write',
+      'reference-estimator-cost-boundary',
+      'filesystem-master-data-source',
+      'foundation-preflight',
+      'foundation-migrate-plan',
+      'foundation-required-migration-apply-plan',
+      'pre-sku-formalization-repair-plan',
+      'pre-sku-formalization-repair-plan-validation',
+      'pre-sku-formalization-repair-execution-template',
+      'baseline-repair-plan',
+    ])
+    steps.forEach((step) => {
+      expect(step.outputFile.startsWith(outputDir)).toBe(true)
+      expect(step.args).toContain('--output')
+      expect(step.args).toContain(step.outputFile)
+    })
+    expect(steps.find((step) => step.id === 'foundation-hard-ready-gate')).toEqual(
+      expect.objectContaining({ sensitive: true }),
+    )
+  })
+
+  it('adds the sensitive cleanup template step only when explicitly requested', () => {
+    const outputDir = path.resolve(__dirname, '../../.master-data-audits/example')
+    const defaultSteps = auditSteps(outputDir)
+    const cleanupSteps = auditSteps(outputDir, { includeCleanupTemplate: true })
+
+    expect(defaultSteps.some((step) => step.id === 'cleanup-template')).toBe(false)
+    expect(cleanupSteps).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'cleanup-template',
+          sensitive: true,
+          outputFile: path.join(outputDir, 'cleanup-template.json'),
+          args: expect.arrayContaining(['--template', '--allow-migration-dry-run']),
+        }),
+      ]),
+    )
+  })
+
+  it('adds the clone migration rehearsal step only when explicitly requested', () => {
+    const outputDir = path.resolve(__dirname, '../../.master-data-audits/example')
+    const defaultSteps = auditSteps(outputDir)
+    const rehearsalSteps = auditSteps(outputDir, {
+      includeMigrationRehearsal: true,
+      dockerRehearsalPort: '65458',
+    })
+
+    expect(defaultSteps.some((step) => step.id === 'migration-rehearsal')).toBe(false)
+    expect(rehearsalSteps).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'migration-rehearsal',
+          outputFile: path.join(outputDir, 'migration-rehearsal.json'),
+          args: expect.arrayContaining([
+            'scripts/rehearse-database-foundation-migration.js',
+            '--docker-port',
+            '65458',
+          ]),
+        }),
+        expect.objectContaining({
+          id: 'baseline-repair-plan',
+          args: expect.arrayContaining([
+            '--rehearsal',
+            path.join(outputDir, 'migration-rehearsal.json'),
+          ]),
+        }),
+      ]),
+    )
+  })
+
+  it('adds the clone structure repair rehearsal step only when explicitly requested', () => {
+    const outputDir = path.resolve(__dirname, '../../.master-data-audits/example')
+    const defaultSteps = auditSteps(outputDir)
+    const repairSteps = auditSteps(outputDir, {
+      includeStructureRepairRehearsal: true,
+      dockerStructureRepairPort: '65460',
+    })
+
+    expect(defaultSteps.some((step) => step.id === 'structure-repair-rehearsal')).toBe(false)
+    expect(repairSteps).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'structure-repair-rehearsal',
+          outputFile: path.join(outputDir, 'structure-repair-rehearsal.json'),
+          args: expect.arrayContaining([
+            'scripts/rehearse-prisma-structure-repair.js',
+            '--repair-sql-output',
+            path.join(outputDir, 'structure-repair.sql'),
+            '--docker-port',
+            '65460',
+          ]),
+        }),
+        expect.objectContaining({
+          id: 'baseline-repair-plan',
+          args: expect.arrayContaining([
+            '--structure-rehearsal',
+            path.join(outputDir, 'structure-repair-rehearsal.json'),
+          ]),
+        }),
+        expect.objectContaining({
+          id: 'authorized-structure-repair-apply-plan',
+          outputFile: path.join(outputDir, 'authorized-structure-repair-apply-plan.json'),
+          args: expect.arrayContaining([
+            'scripts/apply-prisma-structure-repair.js',
+            '--preflight',
+            path.join(outputDir, 'foundation-preflight.json'),
+            '--structure-rehearsal',
+            path.join(outputDir, 'structure-repair-rehearsal.json'),
+            '--repair-sql',
+            path.join(outputDir, 'structure-repair.sql'),
+          ]),
+        }),
+      ]),
+    )
+  })
+
+  it('collects command, report, diagnosis, and missing-output blockers', () => {
+    const blockers = collectBlockers([
+      stepResult('readiness', false, {
+        blockers: [{ source: 'prisma-migrate-status', key: 'pendingMigrations', value: 84 }],
+      }),
+      {
+        ...stepResult('foundation-preflight', true, {
+          diagnosisBlockers: [{ key: 'migrationHistory.tableExists' }],
+        }),
+        outputExists: false,
+      },
+    ])
+
+    expect(blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ source: 'readiness', key: 'command' }),
+        expect.objectContaining({ source: 'prisma-migrate-status', key: 'pendingMigrations' }),
+        expect.objectContaining({
+          source: 'foundation-preflight:diagnosis',
+          key: 'migrationHistory.tableExists',
+        }),
+        expect.objectContaining({ source: 'foundation-preflight', key: 'outputFile' }),
+      ]),
+    )
+  })
+
+  it('marks audit as hard-ready only when every step and readiness report are clean', () => {
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      checkedAt: '2026-06-01T03:30:00.000Z',
+      stepResults: [
+        stepResult('readiness', true, { hardReady: true, blockers: [] }),
+        stepResult('foundation-hard-ready-gate', true, {
+          foundationHardReadyGate: {
+            hardReady: true,
+            blockerCount: 0,
+            blockerSourceCounts: {},
+            blockers: [],
+          },
+        }),
+        stepResult('truth-sources', true, { ok: true, truthSourceEntries: [] }),
+        stepResult('code-boundaries', true, { violations: [] }),
+        stepResult('compatibility-snapshot-read', true, {
+          compatibilitySnapshotReadBlockingRiskCount: 0,
+        }),
+        stepResult('process-snapshot-read', true, {
+          processSnapshotReadBlockingRiskCount: 0,
+        }),
+        stepResult('product-sku-attributes-write', true, {
+          productSkuAttributeWriteBlockingRiskCount: 0,
+        }),
+        stepResult('foundation-preflight', true, { ready: true, blockers: [] }),
+        stepResult('baseline-repair-plan', true, {
+          status: 'ready-for-migrate-deploy',
+          blockers: [],
+        }),
+        stepResult('foundation-migrate-plan', true, { readyToRun: true, blockers: [] }),
+      ],
+    })
+
+    expect(manifest).toEqual(expect.objectContaining({
+      status: 'hard-ready',
+      hardReady: true,
+      containsSensitiveCleanupTemplate: false,
+      readyForFoundationMigration: true,
+      blockerCount: 0,
+      passedStepCount: 10,
+    }))
+  })
+
+  it('summarizes readiness next actions in the manifest without row-level data', () => {
+    const readiness = {
+      status: 'not-hard-ready',
+      hardReady: false,
+      blockerCount: 13,
+      nextActionPlan: {
+        stageCount: 1,
+        stages: [
+          {
+            id: 'repair-prisma-structure-and-history',
+            status: 'required-before-any-cleanup',
+            reason: '当前库结构、Prisma 迁移历史或官方 pending migration 未对齐。',
+            commands: ['npm run db:preflight-database-foundation-change:audit'],
+            guard: '没有新鲜备份前不能真实写库。',
+          },
+        ],
+      },
+      blockers: [
+        {
+          source: 'current-schema-diff',
+          key: 'hasSqlDiff',
+        },
+        {
+          source: 'foundation-dry-run',
+          key: 'structuredSkuItems.incomplete',
+          evidence: { samples: [{ productName: '敏感产品名' }] },
+        },
+      ],
+    }
+
+    expect(buildReadinessSummary(readiness)).toEqual({
+      status: 'not-hard-ready',
+      hardReady: false,
+      blockerCount: 13,
+      blockerSourceCounts: {
+        'current-schema-diff': 1,
+        'foundation-dry-run': 1,
+      },
+      blockerKeyCounts: {
+        hasSqlDiff: 1,
+        'structuredSkuItems.incomplete': 1,
+      },
+      blockerPairCounts: {
+        'current-schema-diff:hasSqlDiff': 1,
+        'foundation-dry-run:structuredSkuItems.incomplete': 1,
+      },
+      nextActionStageCount: 1,
+      nextActionStages: [
+        {
+          id: 'repair-prisma-structure-and-history',
+          status: 'required-before-any-cleanup',
+          reason: '当前库结构、Prisma 迁移历史或官方 pending migration 未对齐。',
+          commands: ['npm run db:preflight-database-foundation-change:audit'],
+          guard: '没有新鲜备份前不能真实写库。',
+        },
+      ],
+    })
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, readiness),
+      ],
+    })
+
+    expect(manifest.readinessSummary).toEqual(
+      expect.objectContaining({
+        nextActionStageCount: 1,
+      }),
+    )
+    expect(JSON.stringify(manifest.readinessSummary)).not.toContain('敏感产品名')
+  })
+
+  it('summarizes the sensitive foundation hard-ready gate in the manifest', () => {
+    const report = {
+      mode: 'migration-dry-run',
+      rolledBack: true,
+      migrationApplicationStatus: {
+        source: 'transactional-dry-run-replay',
+        appliedMigrationCount: 50,
+        pendingStructureMigrationCount: 11,
+        replayableIdempotentMigrationCount: 39,
+        strictReady: false,
+        fullyReady: false,
+        pendingStructureMigrationPaths: ['sensitive-path'],
+      },
+      incompleteSkuItemSamples: [{ productName: '敏感产品名' }],
+      foundationHardReadyGate: {
+        hardReady: false,
+        blockerCount: 2,
+        blockerSourceCounts: {
+          migrationApplicationStatus: 1,
+          structuredSkuItems: 1,
+        },
+        blockers: [
+          {
+            source: 'migrationApplicationStatus',
+            key: 'fullyReady',
+            value: false,
+            message: '治理迁移必须真实落库。',
+          },
+          {
+            source: 'structuredSkuItems',
+            key: 'incomplete',
+            value: 2,
+            message: '包含敏感产品名的说明不应进入汇总。',
+          },
+        ],
+      },
+    }
+
+    expect(buildFoundationHardReadyGateSummary(report)).toEqual({
+      hardReady: false,
+      blockerCount: 2,
+      blockerSourceCounts: {
+        migrationApplicationStatus: 1,
+        structuredSkuItems: 1,
+      },
+      blockerKeys: [
+        'migrationApplicationStatus:fullyReady',
+        'structuredSkuItems:incomplete',
+      ],
+      blockerValues: {
+        'migrationApplicationStatus:fullyReady': false,
+        'structuredSkuItems:incomplete': 2,
+      },
+      rolledBack: true,
+      migrationApplicationStatus: {
+        source: 'transactional-dry-run-replay',
+        appliedMigrationCount: 50,
+        pendingStructureMigrationCount: 11,
+        replayableIdempotentMigrationCount: 39,
+        strictReady: false,
+        fullyReady: false,
+      },
+    })
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        {
+          ...stepResult('foundation-hard-ready-gate', false, report),
+          sensitive: true,
+          stdoutPreview: '包含敏感产品名的总门禁输出',
+        },
+      ],
+    })
+
+    expect(manifest.containsSensitiveFoundationHardReadyGateReport).toBe(true)
+    expect(manifest.foundationHardReadyGateSummary).toEqual(
+      expect.objectContaining({
+        hardReady: false,
+        blockerCount: 2,
+        blockerKeys: [
+          'migrationApplicationStatus:fullyReady',
+          'structuredSkuItems:incomplete',
+        ],
+      }),
+    )
+    expect(manifest.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          source: 'foundation-hard-ready-gate:structuredSkuItems',
+          key: 'incomplete',
+          value: 2,
+        }),
+      ]),
+    )
+    expect(manifest.stepSummaries).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'foundation-hard-ready-gate',
+          sensitive: true,
+          stdoutPreview: '[sensitive output redacted]',
+        }),
+      ]),
+    )
+    expect(JSON.stringify(manifest.foundationHardReadyGateSummary)).not.toContain('敏感产品名')
+    expect(JSON.stringify(manifest.foundationHardReadyGateSummary)).not.toContain('sensitive-path')
+  })
+
+  it('redacts sensitive hard-ready blocker values from sharable summaries', () => {
+    const report = {
+      foundationHardReadyGate: {
+        hardReady: false,
+        blockerCount: 1,
+        blockerSourceCounts: { structuredSkuItems: 1 },
+        blockers: [
+          {
+            source: 'structuredSkuItems',
+            key: 'sampleProduct',
+            value: '敏感产品名',
+            message: '包含敏感产品名的说明不应进入汇总。',
+          },
+        ],
+      },
+    }
+
+    const summary = buildFoundationHardReadyGateSummary(report)
+    expect(summary.blockerValues).toEqual({
+      'structuredSkuItems:sampleProduct': true,
+    })
+    expect(JSON.stringify(summary)).not.toContain('敏感产品名')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        {
+          ...stepResult('foundation-hard-ready-gate', false, report),
+          sensitive: true,
+          stdoutPreview: '包含敏感产品名的总门禁输出',
+        },
+      ],
+    })
+
+    expect(JSON.stringify(manifest)).not.toContain('敏感产品名')
+    expect(manifest.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          source: 'foundation-hard-ready-gate:structuredSkuItems',
+          key: 'sampleProduct',
+          value: true,
+        }),
+      ]),
+    )
+  })
+
+  it('keeps incomplete audits not hard-ready even when JSON files were written', () => {
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, {
+          hardReady: false,
+          blockers: [{ source: 'foundation-dry-run', key: 'structuredSkuItems.incomplete' }],
+        }),
+        stepResult('truth-sources', true, { ok: true }),
+        stepResult('code-boundaries', true, { violations: [] }),
+        stepResult('compatibility-snapshot-read', true, {}),
+        stepResult('process-snapshot-read', true, {}),
+        stepResult('product-sku-attributes-write', true, {}),
+        stepResult('foundation-preflight', false, {
+          ready: false,
+          blockers: [{ key: 'backupEvidence' }],
+        }),
+        stepResult('baseline-repair-plan', false, {
+          status: 'evidence-blocked',
+          blockers: [{ key: 'backupEvidence' }],
+        }),
+        stepResult('foundation-migrate-plan', false, {
+          readyToRun: false,
+          blockers: [{ key: 'backupEvidence' }],
+        }),
+      ],
+    })
+
+    expect(manifest.hardReady).toBe(false)
+    expect(manifest.readyForFoundationMigration).toBe(false)
+    expect(manifest.blockerCount).toBeGreaterThan(0)
+  })
+
+  it('builds a completion checklist for the full foundation objective', () => {
+    const cleanStepResults = [
+      stepResult('readiness', true, { hardReady: true, blockers: [] }),
+      stepResult('foundation-preflight', true, { ready: true, blockers: [] }),
+      stepResult('foundation-migrate-plan', true, { readyToRun: true, blockers: [] }),
+      stepResult('foundation-required-migration-apply-plan', true, {
+        blockerKeys: [],
+      }),
+      stepResult('truth-sources', true, {
+        truthSourceCount: 27,
+        prismaModelCount: 65,
+        databaseGuardCount: 290,
+      }),
+      stepResult('code-boundaries', true, {
+        checkedFiles: 100,
+        checkedScriptFiles: 10,
+        violations: [],
+      }),
+      stepResult('compatibility-snapshot-read', true, {
+        compatibilitySnapshotReadBlockingRiskCount: 0,
+        unclassifiedCompatibilitySnapshotReadCount: 0,
+        compatibilitySnapshotReadBudgetViolationCount: 0,
+      }),
+      stepResult('process-snapshot-read', true, {
+        processSnapshotReadBlockingRiskCount: 0,
+        unclassifiedProcessSnapshotReadCount: 0,
+        processSnapshotReadBudgetViolationCount: 0,
+      }),
+      stepResult('filesystem-master-data-source', true, {
+        fileSystemMasterDataSourceFindingCount: 0,
+        unclassifiedFileSystemMasterDataSourceCount: 0,
+      }),
+      stepResult('pre-sku-formalization-repair-plan-validation', true, {
+        valid: true,
+        candidateCount: 0,
+        staleCandidateCount: 0,
+      }),
+      stepResult('authorized-structure-repair-apply-plan', true, {
+        exactPhaseCommands: {
+          available: true,
+          missing: [],
+          applyStructureDryRun: { name: 'apply-structure-dry-run' },
+          applyStructure: { name: 'apply-structure' },
+          resolveBaselineTemplate: { name: 'resolve-baseline-template' },
+        },
+        blockers: [],
+      }),
+    ]
+
+    const checklist = buildFoundationCompletionChecklist({
+      readiness: cleanStepResults[0].data,
+      truthSources: cleanStepResults[4].data,
+      codeBoundaries: cleanStepResults[5].data,
+      compatibilitySnapshotRead: cleanStepResults[6].data,
+      processSnapshotRead: cleanStepResults[7].data,
+      fileSystemMasterDataSource: cleanStepResults[8].data,
+      preSkuFormalizationRepairPlanValidation: cleanStepResults[9].data,
+      authorizedStructureRepairApplyPlan: cleanStepResults[10].data,
+      stepResults: cleanStepResults,
+    })
+
+    expect(checklist).toEqual(expect.objectContaining({
+      itemCount: 8,
+      passedCount: 8,
+      blockedCount: 0,
+      missingCount: 0,
+      complete: true,
+    }))
+    expect(checklist.items.map((item) => item.id)).toEqual([
+      'schema-and-migration-history',
+      'truth-source-matrix',
+      'code-write-boundaries',
+      'json-and-snapshot-boundaries',
+      'filesystem-master-data-boundary',
+      'historical-master-data-quality',
+      'pre-sku-formalization-lifecycle',
+      'authorized-foundation-runbook',
+    ])
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: cleanStepResults,
+    })
+    expect(manifest.foundationCompletionChecklist).toEqual(
+      expect.objectContaining({ complete: true, passedCount: 8 }),
+    )
+  })
+
+  it('keeps completion checklist blocked without exposing row-level evidence', () => {
+    const readiness = {
+      hardReady: false,
+      blockers: [
+        {
+          source: 'current-schema-diff',
+          key: 'hasSqlDiff',
+        },
+        {
+          source: 'foundation-dry-run',
+          key: 'structuredSkuItems.incomplete',
+          evidence: { samples: [{ productName: '敏感产品名' }] },
+        },
+        {
+          source: 'foundation-dry-run',
+          key: 'preSkuFormalizationLifecycleMismatchCount',
+          evidence: { samples: [{ preSkuId: '敏感preSku' }] },
+        },
+      ],
+    }
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, readiness),
+        stepResult('foundation-preflight', false, { ready: false }),
+        stepResult('foundation-migrate-plan', false, { readyToRun: false }),
+        stepResult('foundation-required-migration-apply-plan', true, {}),
+        stepResult('truth-sources', true, { truthSourceCount: 27 }),
+        stepResult('code-boundaries', true, { violations: [] }),
+        stepResult('compatibility-snapshot-read', true, {
+          compatibilitySnapshotReadBlockingRiskCount: 0,
+          unclassifiedCompatibilitySnapshotReadCount: 0,
+          compatibilitySnapshotReadBudgetViolationCount: 0,
+        }),
+        stepResult('process-snapshot-read', true, {
+          processSnapshotReadBlockingRiskCount: 0,
+          unclassifiedProcessSnapshotReadCount: 0,
+          processSnapshotReadBudgetViolationCount: 0,
+        }),
+        stepResult('filesystem-master-data-source', true, {
+          fileSystemMasterDataSourceFindingCount: 0,
+          unclassifiedFileSystemMasterDataSourceCount: 0,
+        }),
+        stepResult('pre-sku-formalization-repair-plan-validation', true, {
+          valid: true,
+          candidateCount: 1,
+          staleCandidateCount: 0,
+        }),
+      ],
+    })
+
+    expect(manifest.foundationCompletionChecklist.complete).toBe(false)
+    expect(manifest.foundationCompletionChecklist.items).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'schema-and-migration-history',
+          status: 'blocked',
+          blockedBy: ['current-schema-diff:hasSqlDiff'],
+          evidence: expect.objectContaining({
+            blockerCount: 1,
+            blockerValues: {
+              'current-schema-diff:hasSqlDiff': true,
+            },
+          }),
+        }),
+        expect.objectContaining({
+          id: 'historical-master-data-quality',
+          status: 'blocked',
+          blockedBy: ['structuredSkuItems.incomplete'],
+          evidence: expect.objectContaining({
+            blockerValues: {
+              'foundation-dry-run:structuredSkuItems.incomplete': true,
+            },
+          }),
+        }),
+        expect.objectContaining({
+          id: 'pre-sku-formalization-lifecycle',
+          status: 'blocked',
+          blockedBy: ['preSkuFormalizationLifecycleMismatchCount'],
+          evidence: expect.objectContaining({
+            blockerValues: {
+              'foundation-dry-run:preSkuFormalizationLifecycleMismatchCount': true,
+            },
+          }),
+        }),
+        expect.objectContaining({
+          id: 'authorized-foundation-runbook',
+          status: 'missing',
+        }),
+      ]),
+    )
+    expect(JSON.stringify(manifest.foundationCompletionChecklist)).not.toContain('敏感产品名')
+    expect(JSON.stringify(manifest.foundationCompletionChecklist)).not.toContain('敏感preSku')
+  })
+
+  it('summarizes sensitive cleanup templates without exposing row values', () => {
+    expect(countBlankFillFields([
+      { fill: { skuCode: '', specName: 'SPJ00001', model: null } },
+      { fill: { skuCode: '', specName: '', model: undefined } },
+    ])).toEqual({
+      model: 2,
+      skuCode: 2,
+      specName: 1,
+    })
+    expect(countBlankMissingFillFields([
+      {
+        current: { missingRequiredFields: ['sku_code', 'spec_name'] },
+        fill: { skuCode: '', specName: '', model: '', barcode: '' },
+      },
+      {
+        current: { missingFields: ['productCategory'] },
+        fill: { productName: '', productCategory: '', productDevelopmentKind: '' },
+      },
+      {
+        current: { missingFields: ['product_development_kind'] },
+        fill: { productName: '', productCategory: '', productDevelopmentKind: '' },
+      },
+    ])).toEqual({
+      productCategory: 1,
+      productDevelopmentKind: 1,
+      skuCode: 1,
+      specName: 1,
+    })
+    expect(countByField([
+      { mismatchReason: 'formalized_without_product_sku' },
+      { mismatchReason: 'formalized_without_product_sku' },
+      { mismatchReason: '' },
+    ], 'mismatchReason')).toEqual({
+      UNKNOWN: 1,
+      formalized_without_product_sku: 2,
+    })
+    expect(countQualityDecisionPlaceholderFields([
+      { current: { placeholderFields: ['reason', 'decidedBy'] } },
+      { current: { placeholderFields: ['reason', 'resolvedBy'] } },
+      { current: { placeholderFields: [''] } },
+    ])).toEqual({
+      UNKNOWN: 1,
+      decidedBy: 1,
+      reason: 2,
+      resolvedBy: 1,
+    })
+
+    const summary = buildCleanupTemplateSummary({
+      mode: 'template-migration-dry-run',
+      skuItems: [
+        { current: { productName: '敏感名称' }, fill: { skuCode: '', barcode: '' } },
+      ],
+      productProfiles: [
+        { current: { productName: '敏感名称' }, fill: { productCategory: '' } },
+        { current: { productName: '敏感名称2' }, fill: { productCategory: '桌类' } },
+      ],
+      preSkuFormalizationMismatches: [
+        {
+          mismatchReason: 'formalized_without_product_sku',
+          preSkuId: '敏感preSku',
+          draftGroupCode: '敏感草稿组',
+        },
+      ],
+      qualityDecisionRepairs: [
+        {
+          id: '敏感质量决策ID',
+          targetId: '敏感业务ID',
+          targetBusinessKey: '敏感业务键',
+          current: {
+            reason: '待确认',
+            decidedBy: '默认值',
+            resolvedBy: '真实处理人',
+            placeholderFields: ['reason', 'decidedBy'],
+          },
+          fill: { reason: '', decidedBy: '', resolvedBy: '' },
+        },
+        {
+          id: '敏感质量决策ID2',
+          targetId: '敏感业务ID2',
+          current: {
+            reason: '真实原因',
+            decidedBy: '真实决策人',
+            resolvedBy: '暂无',
+            placeholderFields: ['resolvedBy'],
+          },
+          fill: { reason: '', decidedBy: '', resolvedBy: '' },
+        },
+      ],
+      migrationApplicationStatus: {
+        appliedMigrationCount: 41,
+        strictReady: false,
+        fullyReady: false,
+        pendingStructureMigrationCount: 9,
+        replayableIdempotentMigrationCount: 32,
+        pendingStructureMigrationPaths: ['sensitive-path'],
+      },
+    })
+
+    expect(summary).toEqual({
+      mode: 'template-migration-dry-run',
+      readyToHardReady: false,
+      requiresBusinessConfirmation: true,
+      blankMissingFillFieldCount: 3,
+      skuItemCount: 1,
+      skuBlankFillFieldCounts: { barcode: 1, skuCode: 1 },
+      productProfileCount: 2,
+      productProfileBlankFillFieldCounts: { productCategory: 1 },
+      qualityDecisionRepairCount: 2,
+      qualityDecisionRepairPlaceholderFieldCounts: {
+        decidedBy: 1,
+        reason: 1,
+        resolvedBy: 1,
+      },
+      preSkuFormalizationMismatchCount: 1,
+      preSkuFormalizationMismatchReasonCounts: {
+        formalized_without_product_sku: 1,
+      },
+      migrationApplicationStatus: {
+        source: 'transactional-dry-run-replay',
+        appliedMigrationCount: 41,
+        strictReady: false,
+        fullyReady: false,
+        pendingStructureMigrationCount: 9,
+        replayableIdempotentMigrationCount: 32,
+      },
+    })
+    expect(JSON.stringify(summary)).not.toContain('敏感名称')
+    expect(JSON.stringify(summary)).not.toContain('敏感preSku')
+    expect(JSON.stringify(summary)).not.toContain('敏感草稿组')
+    expect(JSON.stringify(summary)).not.toContain('敏感质量决策ID')
+    expect(JSON.stringify(summary)).not.toContain('敏感业务ID')
+    expect(JSON.stringify(summary)).not.toContain('敏感业务键')
+    expect(JSON.stringify(summary)).not.toContain('待确认')
+    expect(JSON.stringify(summary)).not.toContain('默认值')
+    expect(JSON.stringify(summary)).not.toContain('sensitive-path')
+  })
+
+  it('includes a redacted cleanup summary in the manifest when template is present', () => {
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('foundation-preflight', true, { ready: true, blockers: [] }),
+        stepResult('foundation-migrate-plan', true, { readyToRun: true, blockers: [] }),
+        stepResult('cleanup-template', true, {
+          skuItems: [{ fill: { skuCode: '' } }],
+          productProfiles: [],
+        }),
+      ],
+    })
+
+    expect(manifest.cleanupTemplateSummary).toEqual(expect.objectContaining({
+      skuItemCount: 1,
+      skuBlankFillFieldCounts: { skuCode: 1 },
+    }))
+  })
+
+  it('includes a redacted PreSku formalization repair plan summary in the manifest', () => {
+    const plan = {
+      mode: 'pre-sku-formalization-repair-plan',
+      readOnly: true,
+      applySupported: false,
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+      candidateCount: 1,
+      reasonCounts: {
+        formalized_without_product_sku: 1,
+      },
+      evidencePolicy: {
+        requiredCurrentEvidenceKeys: ['preSkuId', 'draftGroupCode', 'status'],
+      },
+      candidates: [
+        {
+          preSkuId: '敏感preSku',
+          draftGroupCode: '敏感草稿组',
+          evidenceFingerprint: 'a'.repeat(64),
+          allowedDecisions: [
+            { decision: 'revert-pre-sku-status' },
+            { decision: 'link-existing-product-sku' },
+          ],
+        },
+      ],
+      globalGuards: ['不能在通用主数据清洗脚本里处理准 SKU 生命周期错位。'],
+    }
+
+    const summary = buildPreSkuFormalizationRepairPlanSummary(plan)
+
+    expect(summary).toEqual({
+      mode: 'pre-sku-formalization-repair-plan',
+      readOnly: true,
+      applySupported: false,
+      databaseIdentityPresent: true,
+      candidateCount: 1,
+      reasonCounts: {
+        formalized_without_product_sku: 1,
+      },
+      requiredCurrentEvidenceKeyCount: 3,
+      candidateEvidenceFingerprintCount: 1,
+      decisionOptionCounts: {
+        'link-existing-product-sku': 1,
+        'revert-pre-sku-status': 1,
+      },
+      globalGuardCount: 1,
+    })
+    expect(JSON.stringify(summary)).not.toContain('敏感preSku')
+    expect(JSON.stringify(summary)).not.toContain('敏感草稿组')
+    expect(JSON.stringify(summary)).not.toContain('localhost')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        {
+          ...stepResult('pre-sku-formalization-repair-plan', true, plan),
+          sensitive: true,
+          stdoutPreview: '包含敏感preSku的计划预览',
+        },
+      ],
+    })
+
+    expect(manifest.containsSensitivePreSkuFormalizationRepairPlan).toBe(true)
+    expect(manifest.preSkuFormalizationRepairPlanSummary).toEqual(
+      expect.objectContaining({
+        candidateCount: 1,
+        databaseIdentityPresent: true,
+      }),
+    )
+    expect(manifest.stepSummaries).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'pre-sku-formalization-repair-plan',
+          sensitive: true,
+          stdoutPreview: '[sensitive output redacted]',
+        }),
+      ]),
+    )
+    expect(JSON.stringify(manifest.preSkuFormalizationRepairPlanSummary)).not.toContain('敏感preSku')
+  })
+
+  it('includes a redacted PreSku formalization repair plan validation summary', () => {
+    const validation = {
+      mode: 'validate-pre-sku-formalization-repair-plan',
+      valid: false,
+      committed: false,
+      requiresDatabase: true,
+      databaseIdentityMatched: false,
+      candidateCount: 1,
+      matchedCandidateCount: 0,
+      staleCandidateCount: 1,
+      blockerCount: 2,
+      blockers: [
+        {
+          key: 'databaseIdentityMismatch',
+          message: 'contains sensitive database identity',
+        },
+        {
+          key: 'staleCurrentEvidence',
+          candidateIndex: 0,
+          reason: 'current-evidence-changed',
+          preSkuId: '敏感preSku',
+        },
+      ],
+      candidateChecks: [
+        {
+          index: 0,
+          ok: false,
+          reason: 'current-evidence-changed',
+          preSkuId: '敏感preSku',
+        },
+      ],
+    }
+
+    const summary = buildPreSkuFormalizationRepairPlanValidationSummary(validation)
+
+    expect(summary).toEqual({
+      mode: 'validate-pre-sku-formalization-repair-plan',
+      valid: false,
+      committed: false,
+      requiresDatabase: true,
+      databaseIdentityMatched: false,
+      candidateCount: 1,
+      matchedCandidateCount: 0,
+      staleCandidateCount: 1,
+      blockerCount: 2,
+      blockerKeys: ['databaseIdentityMismatch', 'staleCurrentEvidence'],
+    })
+    expect(JSON.stringify(summary)).not.toContain('敏感preSku')
+    expect(JSON.stringify(summary)).not.toContain('sensitive database identity')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('pre-sku-formalization-repair-plan-validation', false, validation),
+      ],
+    })
+
+    expect(manifest.preSkuFormalizationRepairPlanValidationSummary).toEqual(
+      expect.objectContaining({
+        valid: false,
+        staleCandidateCount: 1,
+        blockerKeys: ['databaseIdentityMismatch', 'staleCurrentEvidence'],
+      }),
+    )
+    expect(JSON.stringify(manifest.preSkuFormalizationRepairPlanValidationSummary)).not.toContain(
+      '敏感preSku',
+    )
+  })
+
+  it('includes a redacted PreSku formalization repair execution template summary', () => {
+    const template = {
+      mode: 'pre-sku-formalization-repair-execution-plan',
+      generatedAt: '2026-06-01T00:00:00.000Z',
+      databaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|public',
+      templateInstructions: ['敏感执行说明里不应进入汇总'],
+      candidateCount: 2,
+      confirmation: '',
+      confirmedBy: '',
+      decisions: [
+        {
+          preSkuId: '敏感preSku',
+          draftGroupCode: '敏感草稿组',
+          decision: '',
+          reason: '',
+          formalSkuId: '',
+          currentEvidence: {
+            preSkuId: '敏感preSku',
+            draftGroupCode: '敏感草稿组',
+            status: 'FORMALIZED',
+          },
+          evidenceFingerprint: 'a'.repeat(64),
+          allowedDecisions: [
+            { decision: 'revert-pre-sku-status' },
+            { decision: 'link-existing-product-sku' },
+          ],
+        },
+        {
+          preSkuId: '敏感preSku2',
+          draftGroupCode: '敏感草稿组2',
+          decision: 'archive-invalid-pre-sku',
+          reason: '敏感业务原因',
+          formalSkuId: '',
+          currentEvidence: {
+            preSkuId: '敏感preSku2',
+            draftGroupCode: '敏感草稿组2',
+            status: 'FORMALIZED',
+          },
+          evidenceFingerprint: 'b'.repeat(64),
+          allowedDecisions: [
+            { decision: 'revert-pre-sku-status' },
+            { decision: 'archive-invalid-pre-sku' },
+          ],
+        },
+      ],
+    }
+
+    const summary = buildPreSkuFormalizationRepairExecutionTemplateSummary(template)
+
+    expect(summary).toEqual({
+      mode: 'pre-sku-formalization-repair-execution-plan',
+      generated: true,
+      databaseIdentityPresent: true,
+      candidateCount: 2,
+      decisionCount: 2,
+      requiresBusinessDecision: true,
+      unselectedDecisionCount: 1,
+      confirmationFilled: false,
+      confirmedByFilled: false,
+      currentEvidenceCount: 2,
+      evidenceFingerprintCount: 2,
+      selectedDecisionCounts: {
+        UNSELECTED: 1,
+        'archive-invalid-pre-sku': 1,
+      },
+      allowedDecisionCounts: {
+        'archive-invalid-pre-sku': 1,
+        'link-existing-product-sku': 1,
+        'revert-pre-sku-status': 2,
+      },
+      reasonFilledCount: 1,
+      formalSkuIdFilledCount: 0,
+      templateInstructionCount: 1,
+    })
+    expect(JSON.stringify(summary)).not.toContain('敏感preSku')
+    expect(JSON.stringify(summary)).not.toContain('敏感草稿组')
+    expect(JSON.stringify(summary)).not.toContain('敏感业务原因')
+    expect(JSON.stringify(summary)).not.toContain('localhost')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        {
+          ...stepResult('pre-sku-formalization-repair-execution-template', true, template),
+          sensitive: true,
+          stdoutPreview: '包含敏感preSku的执行模板预览',
+          stderrPreview: '包含敏感业务原因',
+        },
+      ],
+    })
+
+    expect(manifest.containsSensitivePreSkuFormalizationRepairExecutionTemplate).toBe(true)
+    expect(manifest.preSkuFormalizationRepairExecutionTemplateSummary).toEqual(
+      expect.objectContaining({
+        candidateCount: 2,
+        currentEvidenceCount: 2,
+        evidenceFingerprintCount: 2,
+      }),
+    )
+    expect(manifest.stepSummaries).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'pre-sku-formalization-repair-execution-template',
+          sensitive: true,
+          stdoutPreview: '[sensitive output redacted]',
+          stderrPreview: '[sensitive output redacted]',
+        }),
+      ]),
+    )
+    expect(JSON.stringify(manifest.preSkuFormalizationRepairExecutionTemplateSummary)).not.toContain(
+      '敏感preSku',
+    )
+  })
+
+  it('redacts sensitive step stdout and stderr previews in the manifest', () => {
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        {
+          ...stepResult('cleanup-template', true, {
+            skuItems: [{ current: { productName: '敏感产品名' }, fill: { skuCode: '' } }],
+          }),
+          sensitive: true,
+          stdoutPreview: '包含敏感产品名的清洗模板预览',
+          stderrPreview: '包含敏感错误输出',
+        },
+        {
+          ...stepResult('truth-sources', true, {}),
+          stdoutPreview: '普通审计输出',
+          stderrPreview: '',
+        },
+      ],
+    })
+
+    expect(manifest.stepSummaries).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'cleanup-template',
+          sensitive: true,
+          stdoutPreview: '[sensitive output redacted]',
+          stderrPreview: '[sensitive output redacted]',
+        }),
+        expect.objectContaining({
+          id: 'truth-sources',
+          stdoutPreview: '普通审计输出',
+        }),
+      ]),
+    )
+    expect(JSON.stringify(manifest.stepSummaries)).not.toContain('敏感产品名')
+    expect(JSON.stringify(manifest.stepSummaries)).not.toContain('敏感错误输出')
+  })
+
+  it('summarizes migration rehearsal evidence in the manifest', () => {
+    const rehearsal = {
+      status: 'deploy-rehearsal-blocked',
+      restore: { ok: true },
+      migrateDeploy: { ok: false, p3005Detected: true },
+      docker: { cleanupStatus: 'removed', containerName: 'sensitive-local-container-name' },
+      blockers: [{ key: 'migrateDeploy.P3005', message: 'contains detailed output' }],
+    }
+
+    expect(buildMigrationRehearsalSummary(rehearsal)).toEqual({
+      status: 'deploy-rehearsal-blocked',
+      restoreOk: true,
+      migrateDeployOk: false,
+      p3005Detected: true,
+      dockerCleanupStatus: 'removed',
+      blockerKeys: ['migrateDeploy.P3005'],
+    })
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('foundation-preflight', false, { ready: false, blockers: [] }),
+        stepResult('foundation-migrate-plan', false, { readyToRun: false, blockers: [] }),
+        stepResult('migration-rehearsal', false, rehearsal),
+      ],
+    })
+
+    expect(manifest.migrationRehearsalSummary).toEqual(
+      expect.objectContaining({
+        p3005Detected: true,
+        dockerCleanupStatus: 'removed',
+      }),
+    )
+    expect(JSON.stringify(manifest.migrationRehearsalSummary)).not.toContain('sensitive-local-container-name')
+  })
+
+  it('summarizes baseline repair plans without exposing runbook command details', () => {
+    const baselineRepairPlan = {
+      status: 'manual-structure-repair-required',
+      recommendedAction: 'baseline-and-structure-repair-required',
+      safeForProductionWrite: false,
+      evidence: {
+        backupUsable: true,
+        backupVerified: true,
+        migrationSchemaDiffStatus: 'empty',
+        migrationDiffStatus: 'not-empty',
+        currentSchemaDiffHasSql: true,
+        pendingMigrationCount: 85,
+        directMigrateDeployBlockedByP3005: true,
+      },
+      runbook: {
+        commands: [{ command: 'contains local paths and secrets' }],
+      },
+      blockers: [{ key: 'migrationDiff.notEmpty', message: 'contains detailed diff' }],
+    }
+
+    const summary = buildBaselineRepairPlanSummary(baselineRepairPlan)
+    expect(summary).toEqual({
+      status: 'manual-structure-repair-required',
+      recommendedAction: 'baseline-and-structure-repair-required',
+      safeForProductionWrite: false,
+      blockerKeys: ['migrationDiff.notEmpty'],
+      evidence: {
+        backupUsable: true,
+        backupVerified: true,
+        migrationSchemaDiffStatus: 'empty',
+        migrationDiffStatus: 'not-empty',
+        currentSchemaDiffHasSql: true,
+        pendingMigrationCount: 85,
+        directMigrateDeployBlockedByP3005: true,
+      },
+    })
+    expect(JSON.stringify(summary)).not.toContain('contains local paths')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('foundation-preflight', false, { ready: false, blockers: [] }),
+        stepResult('baseline-repair-plan', false, baselineRepairPlan),
+        stepResult('foundation-migrate-plan', false, { readyToRun: false, blockers: [] }),
+      ],
+    })
+
+    expect(manifest.baselineRepairPlanSummary).toEqual(
+      expect.objectContaining({
+        status: 'manual-structure-repair-required',
+      }),
+    )
+  })
+
+  it('summarizes foundation required migration apply plans without exposing command details', () => {
+    const applyPlan = {
+      mode: 'master-data-foundation-required-migration-apply-plan',
+      dryRun: true,
+      readyToApply: false,
+      migrationHistory: {
+        tableExists: false,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+      },
+      pendingMigrationCount: 31,
+      pendingStructureMigrationCount: 10,
+      pendingIdempotentMigrationCount: 21,
+      blockers: [
+        { key: 'migrationHistory.notReady', message: 'contains local database detail' },
+        { key: 'pendingStructureMigrationCount', message: 'contains migration list detail' },
+      ],
+      commands: [{ command: 'contains command detail' }],
+    }
+
+    const summary = buildFoundationRequiredMigrationApplyPlanSummary(applyPlan)
+    expect(summary).toEqual({
+      mode: 'master-data-foundation-required-migration-apply-plan',
+      dryRun: true,
+      readyToApply: false,
+      pendingMigrationCount: 31,
+      pendingStructureMigrationCount: 10,
+      pendingIdempotentMigrationCount: 21,
+      migrationHistoryReady: false,
+      blockerKeys: ['migrationHistory.notReady', 'pendingStructureMigrationCount'],
+    })
+    expect(JSON.stringify(summary)).not.toContain('contains command detail')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('foundation-required-migration-apply-plan', true, applyPlan),
+      ],
+    })
+
+    expect(manifest.foundationRequiredMigrationApplyPlanSummary).toEqual(
+      expect.objectContaining({
+        readyToApply: false,
+        blockerKeys: ['migrationHistory.notReady', 'pendingStructureMigrationCount'],
+      }),
+    )
+  })
+
+  it('summarizes reference estimator and filesystem source boundaries without exposing finding rows', () => {
+    const referenceBoundary = {
+      mode: 'reference-estimator-cost-boundary',
+      approvedReferenceEstimatorCostSourcePaths: [
+        { file: 'src/app/intake/RawMaterialLibraryPanel.tsx', reason: 'contains review note' },
+      ],
+      referenceEstimatorCostBoundaryFindingCount: 32,
+      unclassifiedReferenceEstimatorCostBoundaryFindingCount: 0,
+      referenceEstimatorCostBoundaryByRuleId: {
+        'reference-estimator-cost-source-symbol': 30,
+        'reference-estimator-cost-catalog-import': 2,
+      },
+      referenceEstimatorCostBoundaryByFile: {
+        'src/app/intake/RawMaterialLibraryPanel.tsx': 26,
+        'src/lib/reference-image-cost-catalog.ts': 2,
+      },
+      approvedReferenceEstimatorCostBoundaryFindings: [
+        { text: 'contains line-level estimator detail' },
+      ],
+    }
+    const fileSystemBoundary = {
+      mode: 'filesystem-master-data-source',
+      approvedFileSystemMasterDataSourcePaths: [
+        { file: 'src/server/services/sku-upload.service.ts', reason: 'contains review note' },
+        { file: 'src/server/services/product-hardware-import.service.ts', reason: 'contains note' },
+      ],
+      fileSystemMasterDataSourceFindingCount: 1,
+      unclassifiedFileSystemMasterDataSourceCount: 0,
+      fileSystemMasterDataSourceByFile: {
+        'src/server/services/sku-upload.service.ts': 1,
+      },
+      approvedFileSystemMasterDataSources: [
+        { text: 'contains line-level filesystem detail' },
+      ],
+    }
+
+    expect(buildReferenceEstimatorCostBoundarySummary(referenceBoundary)).toEqual({
+      mode: 'reference-estimator-cost-boundary',
+      approvedSourcePathCount: 1,
+      findingCount: 32,
+      unclassifiedFindingCount: 0,
+      byRuleId: {
+        'reference-estimator-cost-source-symbol': 30,
+        'reference-estimator-cost-catalog-import': 2,
+      },
+      byFileCount: 2,
+    })
+    expect(buildFileSystemMasterDataSourceSummary(fileSystemBoundary)).toEqual({
+      mode: 'filesystem-master-data-source',
+      approvedSourcePathCount: 2,
+      findingCount: 1,
+      unclassifiedFindingCount: 0,
+      byFileCount: 1,
+    })
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('reference-estimator-cost-boundary', true, referenceBoundary),
+        stepResult('filesystem-master-data-source', true, fileSystemBoundary),
+      ],
+    })
+
+    expect(manifest.referenceEstimatorCostBoundarySummary).toEqual(
+      expect.objectContaining({
+        findingCount: 32,
+        unclassifiedFindingCount: 0,
+      }),
+    )
+    expect(manifest.fileSystemMasterDataSourceSummary).toEqual(
+      expect.objectContaining({
+        findingCount: 1,
+        unclassifiedFindingCount: 0,
+      }),
+    )
+    expect(JSON.stringify(manifest.referenceEstimatorCostBoundarySummary)).not.toContain(
+      'contains line-level estimator detail',
+    )
+    expect(JSON.stringify(manifest.fileSystemMasterDataSourceSummary)).not.toContain(
+      'contains line-level filesystem detail',
+    )
+    expect(JSON.stringify(manifest.referenceEstimatorCostBoundarySummary)).not.toContain(
+      'contains review note',
+    )
+    expect(JSON.stringify(manifest.fileSystemMasterDataSourceSummary)).not.toContain(
+      'contains note',
+    )
+  })
+
+  it('summarizes snapshot read boundaries without exposing file-level rows', () => {
+    const compatibilityReport = {
+      mode: 'compatibility-snapshot-read',
+      checkedFiles: 1033,
+      compatibilitySnapshotReadCount: 42,
+      compatibilitySnapshotReadBlockingRiskCount: 0,
+      unclassifiedCompatibilitySnapshotReadCount: 0,
+      unusedCompatibilitySnapshotReadClassificationCount: 0,
+      compatibilitySnapshotReadDebtBudget: {
+        total: 42,
+        high: 0,
+        medium: 32,
+        unknown: 0,
+      },
+      compatibilitySnapshotReadBudgetViolationCount: 0,
+      compatibilitySnapshotReadByFile: {
+        'src/server/services/sensitive.service.ts': 3,
+      },
+      compatibilitySnapshotReadClassifications: [
+        { file: 'src/server/services/sensitive.service.ts', reason: 'contains line-level detail' },
+      ],
+    }
+    const processReport = {
+      mode: 'process-snapshot-read',
+      checkedFiles: 1033,
+      processSnapshotReadCount: 35,
+      processSnapshotReadBlockingRiskCount: 0,
+      unclassifiedProcessSnapshotReadCount: 0,
+      unusedProcessSnapshotReadClassificationCount: 0,
+      processSnapshotReadDebtBudget: {
+        total: 35,
+        high: 0,
+        medium: 31,
+        unknown: 0,
+      },
+      processSnapshotReadBudgetViolationCount: 0,
+      processSnapshotReadByFile: {
+        'src/server/services/sensitive-process.service.ts': 2,
+      },
+    }
+
+    expect(buildSnapshotReadBoundarySummary(compatibilityReport, 'compatibility')).toEqual({
+      mode: 'compatibility-snapshot-read',
+      checkedFiles: 1033,
+      readCount: 42,
+      blockingRiskCount: 0,
+      unclassifiedReadCount: 0,
+      unusedClassificationCount: 0,
+      debtBudget: {
+        total: 42,
+        high: 0,
+        medium: 32,
+        unknown: 0,
+      },
+      budgetViolationCount: 0,
+    })
+    expect(buildSnapshotReadBoundarySummary(processReport, 'process')).toEqual({
+      mode: 'process-snapshot-read',
+      checkedFiles: 1033,
+      readCount: 35,
+      blockingRiskCount: 0,
+      unclassifiedReadCount: 0,
+      unusedClassificationCount: 0,
+      debtBudget: {
+        total: 35,
+        high: 0,
+        medium: 31,
+        unknown: 0,
+      },
+      budgetViolationCount: 0,
+    })
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('compatibility-snapshot-read', true, compatibilityReport),
+        stepResult('process-snapshot-read', true, processReport),
+      ],
+    })
+
+    expect(manifest.compatibilitySnapshotReadSummary).toEqual(
+      expect.objectContaining({ readCount: 42, budgetViolationCount: 0 }),
+    )
+    expect(manifest.processSnapshotReadSummary).toEqual(
+      expect.objectContaining({ readCount: 35, budgetViolationCount: 0 }),
+    )
+    expect(JSON.stringify(manifest.compatibilitySnapshotReadSummary)).not.toContain(
+      'sensitive.service',
+    )
+    expect(JSON.stringify(manifest.processSnapshotReadSummary)).not.toContain(
+      'sensitive-process',
+    )
+    expect(JSON.stringify(manifest.compatibilitySnapshotReadSummary)).not.toContain(
+      'contains line-level detail',
+    )
+  })
+
+  it('summarizes authorized structure repair apply plans without exposing command details', () => {
+    const applyPlan = {
+      mode: 'authorized-prisma-structure-repair',
+      phase: 'plan',
+      dryRun: true,
+      readyToApply: false,
+      requiresExplicitAuthorization: true,
+      executionState: 'plan-only-not-applied',
+      repairSqlArtifact: {
+        exists: true,
+        sizeBytes: 17304,
+        sha256: 'b'.repeat(64),
+        path: 'sensitive-local-path',
+      },
+      repairSqlSafety: {
+        hasDestructiveStatements: false,
+        destructiveStatementCounts: { dropTable: 0 },
+      },
+      evidenceFreshness: {
+        maxAgeMinutes: 60,
+        preflightAgeMinutes: 1.5,
+        structureRehearsalAgeMinutes: 1,
+      },
+      baselineResolveMigrationCount: 86,
+      exactPhaseCommands: {
+        available: true,
+        missing: [],
+        applyStructureDryRun: {
+          name: 'apply-structure-dry-run',
+          args: ['--preflight', 'sensitive-local-path'],
+        },
+        applyStructure: {
+          name: 'apply-structure',
+          args: ['--apply', '--expected-backup-sha256', 'secret-ish-fingerprint'],
+        },
+        resolveBaselineTemplate: {
+          name: 'resolve-baseline-template',
+          args: ['--preflight', '<post-repair-preflight.json>'],
+        },
+      },
+      blockers: [
+        { key: 'repairSql.sha256Mismatch', message: 'contains local file detail' },
+      ],
+      commands: [{ command: 'contains command detail' }],
+    }
+
+    const summary = buildAuthorizedStructureRepairApplyPlanSummary(applyPlan)
+    expect(summary).toEqual({
+      mode: 'authorized-prisma-structure-repair',
+      phase: 'plan',
+      dryRun: true,
+      readyToApply: false,
+      requiresExplicitAuthorization: true,
+      executionState: 'plan-only-not-applied',
+      repairSqlArtifact: {
+        exists: true,
+        sizeBytes: 17304,
+        sha256: 'b'.repeat(64),
+      },
+      repairSqlSafety: {
+        hasDestructiveStatements: false,
+      },
+      evidenceFreshness: {
+        maxAgeMinutes: 60,
+        preflightAgeMinutes: 1.5,
+        structureRehearsalAgeMinutes: 1,
+      },
+      baselineResolveMigrationCount: 86,
+      exactPhaseCommandAvailability: {
+        available: true,
+        missing: [],
+        applyStructureDryRun: true,
+        applyStructure: true,
+        resolveBaselineTemplate: true,
+      },
+      blockerKeys: ['repairSql.sha256Mismatch'],
+    })
+    expect(JSON.stringify(summary)).not.toContain('contains command detail')
+    expect(JSON.stringify(summary)).not.toContain('sensitive-local-path')
+    expect(JSON.stringify(summary)).not.toContain('secret-ish-fingerprint')
+
+    const manifest = buildAuditManifest({
+      outputDir: 'audit-dir',
+      stepResults: [
+        stepResult('readiness', false, { hardReady: false, blockers: [] }),
+        stepResult('authorized-structure-repair-apply-plan', true, applyPlan),
+      ],
+    })
+
+    expect(manifest.authorizedStructureRepairApplyPlanSummary).toEqual(
+      expect.objectContaining({
+        readyToApply: false,
+        requiresExplicitAuthorization: true,
+        executionState: 'plan-only-not-applied',
+        baselineResolveMigrationCount: 86,
+        exactPhaseCommandAvailability: expect.objectContaining({
+          available: true,
+          applyStructure: true,
+        }),
+      }),
+    )
+  })
+
+  it('summarizes structure repair rehearsals without exposing SQL output', () => {
+    const structureRepairRehearsal = {
+      status: 'structure-repair-rehearsal-blocked',
+      repairSqlSummary: { hasDestructiveStatements: true },
+      repairApply: { ok: false, stderrPreview: 'contains SQL detail' },
+      currentSchemaDiffAfter: { status: 2, stdoutPreview: 'contains diff detail' },
+      migrationDiffAfter: { status: 2 },
+      docker: { cleanupStatus: 'removed', containerName: 'sensitive-container' },
+      repairSqlArtifact: {
+        path: 'sensitive-local-path/structure-repair.sql',
+        sizeBytes: 2048,
+        sha256: 'a'.repeat(64),
+      },
+      baselineResolvePlan: {
+        candidate: true,
+        migrationCount: 85,
+        migrationIds: ['sensitive-details'],
+      },
+      baselineResolveRehearsal: {
+        ok: true,
+        appliedCount: 85,
+      },
+      prismaMigrateStatusAfterResolve: {
+        status: 0,
+        stdoutPreview: 'contains database status',
+      },
+      readinessAfterResolve: {
+        readinessStatus: 'not-hard-ready',
+        hardReady: false,
+        blockerCount: 2,
+        blockerKeys: [
+          'structuredSkuItems.incomplete',
+          'nonIntegratedProductProfiles.missing_product_category',
+        ],
+        stdoutPreview: 'contains row-level details',
+      },
+      requiredMigrationApplyAfterResolve: {
+        ok: true,
+        appliedMigrationCount: 8,
+        pendingStructureMigrationCount: 1,
+        replayableIdempotentMigrationCount: 7,
+        appliedMigrationPaths: ['sensitive-migration-list'],
+      },
+      readinessAfterRequiredMigrations: {
+        readinessStatus: 'not-hard-ready',
+        hardReady: false,
+        blockerCount: 1,
+        blockerKeys: ['structuredSkuItems.incomplete'],
+        stdoutPreview: 'contains post-guard row-level details',
+      },
+      blockers: [{ key: 'repairSql.destructive', message: 'contains detailed SQL' }],
+    }
+
+    const summary = buildStructureRepairRehearsalSummary(structureRepairRehearsal)
+    expect(summary).toEqual({
+      status: 'structure-repair-rehearsal-blocked',
+      repairApplyOk: false,
+      currentSchemaDiffAfterStatus: 2,
+      migrationDiffAfterStatus: 2,
+      dockerCleanupStatus: 'removed',
+      destructiveSqlBlocked: true,
+      repairSqlArtifact: {
+        sizeBytes: 2048,
+        sha256: 'a'.repeat(64),
+      },
+      baselineResolveCandidate: true,
+      baselineResolveMigrationCount: 85,
+      baselineResolveRehearsalOk: true,
+      baselineResolveAppliedCount: 85,
+      prismaMigrateStatusAfterResolveStatus: 0,
+      readinessAfterResolveStatus: 'not-hard-ready',
+      readinessAfterResolveHardReady: false,
+      readinessAfterResolveBlockerCount: 2,
+      readinessAfterResolveBlockerKeys: [
+        'structuredSkuItems.incomplete',
+        'nonIntegratedProductProfiles.missing_product_category',
+      ],
+      requiredMigrationApplyAfterResolveOk: true,
+      requiredMigrationApplyAfterResolveCount: 8,
+      requiredMigrationApplyAfterResolveStructureCount: 1,
+      requiredMigrationApplyAfterResolveIdempotentCount: 7,
+      readinessAfterRequiredMigrationsStatus: 'not-hard-ready',
+      readinessAfterRequiredMigrationsHardReady: false,
+      readinessAfterRequiredMigrationsBlockerCount: 1,
+      readinessAfterRequiredMigrationsBlockerKeys: ['structuredSkuItems.incomplete'],
+      blockerKeys: ['repairSql.destructive'],
+    })
+    expect(JSON.stringify(summary)).not.toContain('sensitive-container')
+    expect(JSON.stringify(summary)).not.toContain('contains SQL detail')
+    expect(JSON.stringify(summary)).not.toContain('sensitive-local-path')
+    expect(JSON.stringify(summary)).not.toContain('sensitive-details')
+    expect(JSON.stringify(summary)).not.toContain('contains row-level details')
+    expect(JSON.stringify(summary)).not.toContain('sensitive-migration-list')
+    expect(JSON.stringify(summary)).not.toContain('contains post-guard row-level details')
+  })
+
+  it('writes manifest JSON to nested audit directories', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'foundation-audit-manifest-'))
+    const outputPath = writeJsonReport(
+      path.join(tempDir, 'nested/manifest.json'),
+      { mode: 'master-data-foundation-audit' },
+    )
+
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      mode: 'master-data-foundation-audit',
+    })
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
new file mode 100644
index 00000000..24ca6194
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
@@ -0,0 +1,1186 @@
+const { spawnSync } = require('node:child_process')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  buildSnapshotReadBudgetViolations,
+  parseArgs,
+} = require('../../scripts/verify-master-data-code-boundaries')
+
+const ROOT_DIR = path.resolve(__dirname, '../..')
+
+function parseVerifierJson(result, label) {
+  try {
+    return JSON.parse(result.stdout)
+  } catch (error) {
+    throw new Error(
+      [
+        `${label} did not return valid JSON`,
+        `parse error: ${error.message}`,
+        result.stdout,
+        result.stderr,
+      ].join('\n'),
+    )
+  }
+}
+
+function runVerifierWithArgs(args, expectedStatus = 0) {
+  const result = spawnSync('node', ['scripts/verify-master-data-code-boundaries.js', ...args], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+  })
+
+  if (result.status !== expectedStatus) {
+    throw new Error(
+      [
+        `verifier ${args.join(' ')} failed with status ${result.status}; expected ${expectedStatus}`,
+        result.stdout,
+        result.stderr,
+      ].join('\n'),
+    )
+  }
+
+  return parseVerifierJson(result, `verifier ${args.join(' ')}`)
+}
+
+function runVerifier() {
+  const result = spawnSync('node', ['scripts/verify-master-data-code-boundaries.js'], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+  })
+
+  if (result.status !== 0) {
+    throw new Error(
+      [
+        `verifier failed with status ${result.status}`,
+        result.stdout,
+        result.stderr,
+      ].join('\n'),
+    )
+  }
+
+  return parseVerifierJson(result, 'verifier')
+}
+
+function runVerifierMode(mode) {
+  return runVerifierWithArgs(['--mode', mode])
+}
+
+function writeFixtureFile(rootDir, relativePath, content) {
+  const filePath = path.join(rootDir, relativePath)
+  fs.mkdirSync(path.dirname(filePath), { recursive: true })
+  fs.writeFileSync(filePath, content)
+}
+
+function createBoundaryViolationFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-boundary-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model UnclassifiedJsonBucket {',
+      '  id String @id @default(cuid())',
+      '  payload Json',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/app/api/bad/route.ts',
+    [
+      "import { prisma } from '@/server/db'",
+      '',
+      'export async function POST() {',
+      '  await prisma.product.create({ data: { name: "bad" } })',
+      '  return Response.json({ ok: true })',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/app/bad/page.tsx',
+    [
+      'export default function BadPage() {',
+      "  localStorage.setItem('draft-product-name', 'bad')",
+      '  return null',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/app/asset-center/AssetCenterClient.tsx',
+    [
+      'export function BadAssetCenterCache() {',
+      "  window.localStorage.setItem('asset-family-form-draft', JSON.stringify({ code: 'K001' }))",
+      '  return null',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad.service.ts',
+    [
+      'export async function saveBadProduct(prisma) {',
+      '  await prisma.product.create({ data: { name: "bad" } })',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-product-sku-attributes.service.ts',
+    [
+      'export async function saveBadSku(prisma) {',
+      '  const skuName = "旧 JSON 名称"',
+      '  await prisma.productSKU.create({',
+      '    data: {',
+      '      skuCode: "BAD-SKU",',
+      '      attributes: { skuName, barcode: "B001", color: "black" },',
+      '    },',
+      '  })',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-pre-sku-formalization.service.ts',
+    [
+      'export async function repairPreSkuLifecycle(tx) {',
+      '  await tx.preSku.update({',
+      '    where: { id: "pre_sku_1" },',
+      '    data: { status: "FORMALIZED" },',
+      '  })',
+      '  await tx.productSKU.update({',
+      '    where: { id: "sku_1" },',
+      '    data: { sourcePreSkuId: "pre_sku_1" },',
+      '  })',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-process-snapshot.service.ts',
+    [
+      'export function readBadPreSkuProcessSnapshot(preSku) {',
+      '  const selection = preSku.variantSelection',
+      '  return { barcode: selection.barcode, ownerId: selection["ownerId"] }',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-formal-cost.service.ts',
+    [
+      "import { REFERENCE_HARDWARE_ITEMS } from '@/lib/reference-image-cost-catalog'",
+      '',
+      'export function calculateFormalBomCost() {',
+      '  return REFERENCE_HARDWARE_ITEMS.reduce((sum, item) => sum + item.unitPrice, 0)',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-public-upload-reverse-source.service.ts',
+    [
+      "import { readFile } from 'node:fs/promises'",
+      '',
+      'export async function rebuildProductFromUploadDirectory(prisma) {',
+      "  const model = await readFile('public/uploads/models/products/bad.glb')",
+      '  await prisma.product.create({ data: { name: String(model.length) } })',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-approval-workflow.service.ts',
+    [
+      'export class BadApprovalWorkflowService {',
+      '  getWorkflowBusinessRoles(matrix) { return matrix.map((item) => item.businessRole) }',
+      '  getFieldMatrix(value) { return Array.isArray(value) ? value : [] }',
+      '  canRead(workflow, userRoles) {',
+      '    const workflowBusinessRoles = workflow.businessRoles.length > 0',
+      '      ? workflow.businessRoles',
+      '      : this.getWorkflowBusinessRoles(this.getFieldMatrix(workflow.fieldMatrix ?? null))',
+      '    return workflowBusinessRoles.some((role) => userRoles.includes(role))',
+      '  }',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-raw-sql.service.ts',
+    [
+      'export async function saveBadProductWithSql(client) {',
+      '  await client.query(`',
+      '    UPDATE "Product"',
+      '    SET "name" = $2',
+      '    WHERE "id" = $1',
+      '  `, ["p1", "bad"])',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-runtime-ddl.service.ts',
+    [
+      'export async function createRuntimeTable(prisma) {',
+      '  await prisma.$executeRawUnsafe(`',
+      '    CREATE TABLE IF NOT EXISTS "ProductShadow" (',
+      '      "id" TEXT PRIMARY KEY',
+      '    )',
+      '  `)',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-raw-sql-read.service.ts',
+    [
+      'export async function readBadProduct(client) {',
+      '  return client.query(`',
+      '    SELECT "id", "name"',
+      '    FROM "Product"',
+      '    WHERE "id" = $1',
+      '  `, ["p1"])',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-payload.service.ts',
+    [
+      'export function readLegacyPayload(record) {',
+      '  return record.payload',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-reference-library-payload.service.ts',
+    [
+      'function readText(value) {',
+      "  return typeof value === 'string' ? value.trim() : ''",
+      '}',
+      '',
+      'export function readReferenceIdentity(payload) {',
+      '  return readText(payload.id)',
+      '}',
+      '',
+      'export function buildBadReferenceCategoryKey(category) {',
+      '  const itemKey = `category:${category.id}`',
+      '  return itemKey',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-asset-variant-cad-data.service.ts',
+    [
+      'export function readFormalIdentityFromCadData(assetVariant) {',
+      '  return assetVariant.businessData?.cadData?.barcode',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-json-file.service.ts',
+    [
+      "import fs from 'node:fs'",
+      '',
+      'export function readJsonMasterData() {',
+      "  return fs.readFileSync('data/products.json', 'utf8')",
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-async-json-file.service.ts',
+    [
+      "import fs from 'node:fs'",
+      '',
+      'export async function readJsonMasterDataAsync() {',
+      "  return fs.promises.readFile('data/products.json', 'utf8')",
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/bad-json-import.service.ts',
+    [
+      "import products from '../../data/products.json'",
+      '',
+      'export function readImportedJsonMasterData() {',
+      '  return products',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'scripts/bad-master-data-write.js',
+    [
+      'async function seed(prisma) {',
+      '  await prisma.product.create({ data: { name: "bad" } })',
+      '}',
+      '',
+      'module.exports = { seed }',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
+function createStaleSchemaJsonClassificationFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-stale-json-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model ProductSKU {',
+      '  id String @id @default(cuid())',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
+function createStaleFileClassificationFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-stale-file-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model ProductSKU {',
+      '  id String @id @default(cuid())',
+      '  attributes Json?',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
+function createApprovedRawSqlWrongTableFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-raw-sql-scope-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model Product {',
+      '  id String @id @default(cuid())',
+      '  name String',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/spu-number-reservation.service.ts',
+    [
+      'export async function writeWrongTable(client) {',
+      '  await client.query(`',
+      '    UPDATE public."Product"',
+      '    SET "name" = $2',
+      '    WHERE "id" = $1',
+      '  `, ["p1", "bad"])',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
+function createApprovedRawSqlWrongReadTableFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-raw-sql-read-scope-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model Product {',
+      '  id String @id @default(cuid())',
+      '  name String',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/server/services/spu-number-reservation.service.ts',
+    [
+      'export async function readWrongTable(client) {',
+      '  return client.query(`',
+      '    SELECT "id", "name"',
+      '    FROM "public"."Product"',
+      '    WHERE "id" = $1',
+      '  `, ["p1"])',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
+describe('verify-master-data-code-boundaries', () => {
+  it('parses optional JSON output path', () => {
+    expect(parseArgs(['--output', '.master-data-audits/code-boundaries.json'])).toEqual({
+      mode: '',
+      outputPath: '.master-data-audits/code-boundaries.json',
+      root: ROOT_DIR,
+    })
+    expect(parseArgs(['--mode', 'process-snapshot-read', '--output=report.json'])).toEqual({
+      mode: 'process-snapshot-read',
+      outputPath: 'report.json',
+      root: ROOT_DIR,
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+  })
+
+  it('writes verifier reports to an audit JSON file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-code-boundaries-output-'))
+    const outputPath = path.join(tempDir, 'code-boundaries.json')
+    const report = runVerifierWithArgs(['--output', outputPath])
+
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual(
+      expect.objectContaining({
+        checkedFiles: report.checkedFiles,
+        violations: report.violations,
+      }),
+    )
+  })
+
+  it('keeps script direct writes to foundation tables classified', () => {
+    const report = runVerifier()
+
+    expect(report.unclassifiedScriptMasterDataDirectWriteCount).toBe(0)
+    expect(report.missingScriptSafetyGuardCount).toBe(0)
+    expect(report.scriptSafetyGuardCount).toBeGreaterThanOrEqual(16)
+    expect(report.scriptMasterDataDirectWriteCount).toBeGreaterThanOrEqual(60)
+    expect(report.unclassifiedRawSqlMasterDataWriteCount).toBe(0)
+    expect(report.rawSqlMasterDataWriteCount).toBeGreaterThanOrEqual(5)
+    expect(report.unclassifiedRawSqlMasterDataReadCount).toBe(0)
+    expect(report.rawSqlMasterDataReadCount).toBeGreaterThanOrEqual(20)
+    expect(report.unclassifiedRuntimeDatabaseDdlCount).toBe(0)
+    expect(report.runtimeDatabaseDdlCount).toBeGreaterThanOrEqual(3)
+    expect(report.unclassifiedServerMasterDataDirectWriteCount).toBe(0)
+    expect(report.serverMasterDataDirectWriteCount).toBeGreaterThanOrEqual(220)
+    expect(report.productSkuAttributeWriteRiskCount).toBe(0)
+    expect(report.productSkuAttributeWriteBlockingRiskCount).toBe(0)
+    expect(report.unclassifiedFileSystemMasterDataSourceCount).toBe(0)
+    expect(report.processSnapshotReadCount).toBeGreaterThanOrEqual(30)
+    expect(report.processSnapshotReadBlockingRiskCount).toBe(0)
+    expect(report.unclassifiedProcessSnapshotReadCount).toBe(0)
+    expect(report.unusedProcessSnapshotReadClassificationCount).toBe(0)
+    expect(report.unclassifiedSchemaJsonFieldCount).toBe(0)
+    expect(report.staleSchemaJsonFieldClassificationCount).toBe(0)
+    expect(report.staleFileClassificationCount).toBe(0)
+
+    const approvedFiles = new Set(
+      report.approvedScriptMasterDataDirectWrites.map((finding) => finding.file),
+    )
+
+    expect(Array.from(approvedFiles)).toEqual(
+      expect.arrayContaining([
+        'scripts/cleanup-legacy-product-structure.ts',
+        'scripts/sync-board-material-library.ts',
+        'scripts/sync-standard-finishes.ts',
+      ]),
+    )
+
+    expect(report.approvedScriptSafetyGuards).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ file: 'prisma/seed.ts' }),
+        expect.objectContaining({ file: 'scripts/add-more-skus.ts' }),
+        expect.objectContaining({ file: 'scripts/backfill-sku-structural-data.ts' }),
+        expect.objectContaining({ file: 'scripts/cleanup-legacy-product-structure.ts' }),
+        expect.objectContaining({ file: 'scripts/create-demo-data.js' }),
+        expect.objectContaining({ file: 'scripts/seed-test-products.ts' }),
+        expect.objectContaining({ file: 'scripts/seed-open-platform-demo.ts' }),
+        expect.objectContaining({ file: 'scripts/sync-board-material-library.ts' }),
+        expect.objectContaining({ file: 'scripts/sync-jst-sku-stock-products.ts' }),
+        expect.objectContaining({ file: 'scripts/update-demo-models.js' }),
+        expect.objectContaining({ file: 'scripts/update-model-urls.ts' }),
+        expect.objectContaining({ file: 'scripts/update-test-data.ts' }),
+        expect.objectContaining({ file: 'scripts/sync-standard-finishes.ts' }),
+        expect.objectContaining({ file: 'scripts/backfill-asset-variant-thumbnails.ts' }),
+        expect.objectContaining({ file: 'scripts/sync-employee-directory.ts' }),
+        expect.objectContaining({ file: 'scripts/performance-test.ts' }),
+      ]),
+    )
+
+    expect(report.approvedRuntimeDatabaseDdlFindings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'scripts/master-data-required-migrations.js',
+          severity: 'approved-runtime-ddl',
+        }),
+      ]),
+    )
+
+  })
+
+  it('can inventory compatibility snapshot reads for follow-up structuralization', () => {
+    const report = runVerifierMode('compatibility-snapshot-read')
+
+    expect(report.mode).toBe('compatibility-snapshot-read')
+    expect(report.compatibilitySnapshotReadCount).toBeGreaterThan(0)
+    expect(report.unclassifiedCompatibilitySnapshotReadCount).toBe(0)
+    expect(report.compatibilitySnapshotReadBlockingRiskCount).toBe(0)
+    expect(report.compatibilitySnapshotReadBudgetViolationCount).toBe(0)
+    expect(report.compatibilitySnapshotReadDebtBudget).toEqual(
+      expect.objectContaining({
+        total: 48,
+        high: 0,
+        medium: 38,
+        unknown: 0,
+      }),
+    )
+    expect(report.compatibilitySnapshotReadByPriority.high).toBe(0)
+    expect(report.compatibilitySnapshotReadByPriority.medium).toBeGreaterThan(0)
+    expect(report.compatibilitySnapshotReadByPriority.low).toBeGreaterThan(0)
+    expect(report.compatibilitySnapshotReadByPriority.unknown).toBe(0)
+    expect(report.compatibilitySnapshotReadSummary).toEqual(
+      expect.objectContaining({
+        total: report.compatibilitySnapshotReadCount,
+        high: 0,
+        unknown: 0,
+        unclassified: 0,
+      }),
+    )
+    expect(report.compatibilitySnapshotReadByCategory).toEqual(
+      expect.objectContaining({
+        'dto-compatibility-fallback': expect.any(Number),
+        'payload-hydration-compatibility': expect.any(Number),
+      }),
+    )
+    expect(report.compatibilitySnapshotReadByRuleId).toEqual(
+      expect.objectContaining({
+        'pre-sku-compatibility-snapshot-direct-read': expect.any(Number),
+        'product-sku-attributes-direct-read': expect.any(Number),
+      }),
+    )
+    expect(report.compatibilitySnapshotReadByFile).toEqual(
+      expect.objectContaining({
+        'src/server/services/draft-group.mapper.ts': expect.any(Number),
+      }),
+    )
+    expect(report.compatibilitySnapshotReadBlockingRisks).toEqual([])
+    expect(report.unusedCompatibilitySnapshotReadClassificationCount).toBe(0)
+    expect(report.unusedCompatibilitySnapshotReadClassifications).toEqual([])
+    expect(report.skippedStructuredPayloadReadCount).toBeGreaterThan(0)
+    expect(report.skippedStructuredPayloadReads).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/lib/edge-banding-library.ts',
+          ruleId: 'non-integrated-payload-direct-read',
+        }),
+      ]),
+    )
+    expect(report.compatibilitySnapshotReadFindings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'pre-sku-compatibility-snapshot-direct-read',
+          category: expect.any(String),
+          targetState: expect.any(String),
+        }),
+      ]),
+    )
+    expect(report.compatibilitySnapshotReadFindings).not.toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'non-integrated-payload-direct-read',
+          file: 'src/lib/edge-banding-library.ts',
+        }),
+        expect.objectContaining({
+          ruleId: 'non-integrated-payload-direct-read',
+          file: 'src/server/services/intake-reference-library.service.ts',
+        }),
+      ]),
+    )
+  })
+
+  it('can inventory approved PreSku process snapshot reads', () => {
+    const report = runVerifierMode('process-snapshot-read')
+
+    expect(report.mode).toBe('process-snapshot-read')
+    expect(report.processSnapshotReadCount).toBeGreaterThan(0)
+    expect(report.processSnapshotReadBlockingRiskCount).toBe(0)
+    expect(report.unclassifiedProcessSnapshotReadCount).toBe(0)
+    expect(report.unusedProcessSnapshotReadClassificationCount).toBe(0)
+    expect(report.processSnapshotReadBudgetViolationCount).toBe(0)
+    expect(report.processSnapshotReadDebtBudget).toEqual(
+      expect.objectContaining({
+        total: 37,
+        high: 0,
+        medium: 33,
+        unknown: 0,
+      }),
+    )
+    expect(report.processSnapshotReadByPriority.high).toBe(0)
+    expect(report.processSnapshotReadByPriority.unknown).toBe(0)
+    expect(report.processSnapshotReadByCategory).toEqual(
+      expect.objectContaining({
+        'formalization-process-materialization': expect.any(Number),
+        'draft-group-dto-process-output': expect.any(Number),
+      }),
+    )
+    expect(report.processSnapshotReadFindings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'pre-sku-process-snapshot-direct-read',
+          category: expect.any(String),
+          targetState: expect.any(String),
+        }),
+      ]),
+    )
+  })
+
+  it('flags snapshot read debt budget growth', () => {
+    expect(
+      buildSnapshotReadBudgetViolations(
+        { total: 49, high: 0, medium: 38, unknown: 0 },
+        { total: 48, high: 0, medium: 38, unknown: 0 },
+        'compatibilitySnapshotRead',
+      ),
+    ).toEqual([
+      expect.objectContaining({
+        label: 'compatibilitySnapshotRead',
+        key: 'total',
+        actual: 49,
+        expectedMax: 48,
+      }),
+    ])
+  })
+
+  it('can inventory approved server-side master-data write entrypoints', () => {
+    const report = runVerifierMode('server-master-data-write')
+
+    expect(report.mode).toBe('server-master-data-write')
+    expect(report.unclassifiedServerMasterDataDirectWriteCount).toBe(0)
+    expect(report.serverMasterDataDirectWriteCount).toBeGreaterThanOrEqual(220)
+
+    const approvedServerFiles = new Set(
+      report.approvedServerMasterDataDirectWrites.map((finding) => finding.file),
+    )
+    expect(Array.from(approvedServerFiles)).toEqual(
+      expect.arrayContaining([
+        'src/server/services/intake.service.ts',
+        'src/server/services/intake-non-integrated-product.service.ts',
+        'src/server/services/jst-sku-stock-sync.service.ts',
+        'src/server/repositories/log.repository.ts',
+        'src/server/repositories/product.repository.ts',
+        'src/server/repositories/warehouse.repository.ts',
+      ]),
+    )
+
+    expect(report.approvedServerMasterDataDirectWrites).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/repositories/warehouse.repository.ts',
+          model: 'assetVariantLocationBinding',
+        }),
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-direct-write',
+          file: 'src/server/repositories/log.repository.ts',
+          model: 'activityLog',
+          action: 'create',
+        }),
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-direct-write',
+          file: 'src/server/repositories/product.repository.ts',
+          model: 'productCollaborator',
+          action: 'upsert',
+        }),
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-nested-write',
+          file: 'src/server/repositories/draft-group.repository.ts',
+          model: 'preSkuBasicInfo',
+          nestedRelation: 'basicInfo',
+        }),
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-nested-write',
+          file: 'src/server/services/asset-sku-sync.service.ts',
+          model: 'productSkuAssetProfile',
+          nestedRelation: 'assetProfile',
+        }),
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-nested-write',
+          file: 'src/server/services/intake-non-integrated-product.service.ts',
+          model: 'intakeNonIntegratedSkuItem',
+          nestedRelation: 'skuItems',
+        }),
+      ]),
+    )
+  })
+
+  it('keeps ProductSKU attributes writes limited to registered compatibility keys', () => {
+    const report = runVerifierMode('product-sku-attributes-write')
+
+    expect(report.mode).toBe('product-sku-attributes-write')
+    expect(report.productSkuAttributeWriteRiskCount).toBe(0)
+    expect(report.productSkuAttributeWriteBlockingRiskCount).toBe(0)
+    expect(report.allowedProductSkuAttributeWriteKeys).toEqual(
+      expect.arrayContaining([
+        'draftGroupId',
+        'preSkuId',
+        'bomPreview',
+        'assetSkuSnapshot',
+        '_cadImport',
+      ]),
+    )
+    expect(report.reservedProductSkuAttributeWriteKeys).toEqual(
+      expect.arrayContaining(['barcode', 'model', 'specCode', 'skuName', 'color', 'material']),
+    )
+  })
+
+  it('keeps filesystem-backed master-data imports explicitly classified', () => {
+    const report = runVerifierMode('filesystem-master-data-source')
+
+    expect(report.mode).toBe('filesystem-master-data-source')
+    expect(report.unclassifiedFileSystemMasterDataSourceCount).toBe(0)
+    expect(report.fileSystemMasterDataSourceFindingCount).toBeGreaterThanOrEqual(0)
+    expect(report.approvedFileSystemMasterDataSourcePaths).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/services/product-hardware-import.service.ts',
+        }),
+      ]),
+    )
+  })
+
+  it('detects unclassified master-data boundary violations in an isolated fixture', () => {
+    const fixtureRoot = createBoundaryViolationFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.violations).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'app-route-core-master-data-direct-write',
+            file: 'src/app/api/bad/route.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'filesystem-json-master-data-source',
+            file: 'src/server/services/bad-json-file.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'filesystem-json-master-data-source',
+            file: 'src/server/services/bad-async-json-file.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'filesystem-json-master-data-source',
+            file: 'src/server/services/bad-json-import.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'reference-library-payload-identity-read',
+            file: 'src/server/services/bad-reference-library-payload.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'asset-variant-business-data-cad-data-direct-read',
+            file: 'src/server/services/bad-asset-variant-cad-data.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'approval-workflow-field-matrix-permission-fallback',
+            file: 'src/server/services/bad-approval-workflow.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'pre-sku-formalized-status-write-outside-intake',
+            file: 'src/server/services/bad-pre-sku-formalization.service.ts',
+          }),
+          expect.objectContaining({
+            ruleId: 'product-sku-source-pre-sku-write-outside-intake',
+            file: 'src/server/services/bad-pre-sku-formalization.service.ts',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedStorageFindings).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'client-storage-unclassified',
+            file: 'src/app/bad/page.tsx',
+          }),
+          expect.objectContaining({
+            ruleId: 'client-storage-unclassified',
+            file: 'src/app/asset-center/AssetCenterClient.tsx',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedScriptMasterDataDirectWrites).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'script-core-master-data-direct-write',
+            file: 'scripts/bad-master-data-write.js',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedRawSqlMasterDataWrites).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'raw-sql-master-data-write',
+            file: 'src/server/services/bad-raw-sql.service.ts',
+            tableName: 'Product',
+            operation: 'UPDATE',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedRawSqlMasterDataReads).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'raw-sql-master-data-read',
+            file: 'src/server/services/bad-raw-sql-read.service.ts',
+            tableName: 'Product',
+            operation: 'FROM',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedRuntimeDatabaseDdlFindings).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'runtime-database-ddl',
+            file: 'src/server/services/bad-runtime-ddl.service.ts',
+            operation: 'CREATE TABLE',
+          }),
+          expect.objectContaining({
+            ruleId: 'unsafe-raw-sql-runtime-entry',
+            file: 'src/server/services/bad-runtime-ddl.service.ts',
+            operation: '$executeRawUnsafe',
+          }),
+        ]),
+      )
+    expect(report.unclassifiedServerMasterDataDirectWrites).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'server-core-master-data-direct-write',
+          file: 'src/server/services/bad.service.ts',
+        }),
+      ]),
+    )
+    expect(report.unclassifiedProcessSnapshotReads).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'pre-sku-process-snapshot-direct-read',
+          file: 'src/server/services/bad-process-snapshot.service.ts',
+        }),
+      ]),
+    )
+    expect(report.processSnapshotReadBlockingRisks).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'process-snapshot-formal-field-dot-read',
+          file: 'src/server/services/bad-process-snapshot.service.ts',
+          field: 'barcode',
+        }),
+        expect.objectContaining({
+          ruleId: 'process-snapshot-formal-field-bracket-read',
+          file: 'src/server/services/bad-process-snapshot.service.ts',
+          field: 'ownerId',
+        }),
+      ]),
+    )
+    expect(report.productSkuAttributeWriteBlockingRisks).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'product-sku-attributes-reserved-key-write',
+          file: 'src/server/services/bad-product-sku-attributes.service.ts',
+          key: 'skuName',
+        }),
+        expect.objectContaining({
+          ruleId: 'product-sku-attributes-reserved-key-write',
+          file: 'src/server/services/bad-product-sku-attributes.service.ts',
+          key: 'barcode',
+        }),
+        expect.objectContaining({
+          ruleId: 'product-sku-attributes-reserved-key-write',
+          file: 'src/server/services/bad-product-sku-attributes.service.ts',
+          key: 'color',
+        }),
+      ]),
+    )
+    expect(report.unclassifiedReferenceEstimatorCostBoundaryFindings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'reference-estimator-cost-catalog-import',
+          file: 'src/server/services/bad-formal-cost.service.ts',
+        }),
+        expect.objectContaining({
+          ruleId: 'reference-estimator-cost-source-symbol',
+          file: 'src/server/services/bad-formal-cost.service.ts',
+        }),
+      ]),
+    )
+    expect(report.unclassifiedFileSystemMasterDataSources).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          ruleId: 'filesystem-master-data-source-write',
+          file: 'src/server/services/bad-public-upload-reverse-source.service.ts',
+          model: 'product',
+          action: 'create',
+        }),
+      ]),
+    )
+      expect(report.unclassifiedCompatibilitySnapshotReads).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'non-integrated-payload-direct-read',
+            file: 'src/server/services/bad-payload.service.ts',
+          }),
+        ]),
+      )
+      expect(report.unclassifiedSchemaJsonFields).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            id: 'UnclassifiedJsonBucket.payload',
+          }),
+        ]),
+      )
+
+      const compatibilityReport = runVerifierWithArgs([
+        '--root',
+        fixtureRoot,
+        '--mode',
+        'compatibility-snapshot-read',
+      ], 1)
+      expect(compatibilityReport.unclassifiedCompatibilitySnapshotReadCount).toBe(1)
+      expect(compatibilityReport.compatibilitySnapshotReadBlockingRiskCount).toBe(1)
+      expect(compatibilityReport.compatibilitySnapshotReadBlockingRisks).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            file: 'src/server/services/bad-payload.service.ts',
+          }),
+        ]),
+      )
+      expect(compatibilityReport.unclassifiedCompatibilitySnapshotReads[0]).toEqual(
+        expect.objectContaining({
+          file: 'src/server/services/bad-payload.service.ts',
+        }),
+      )
+
+    const serverWriteReport = runVerifierWithArgs([
+      '--root',
+      fixtureRoot,
+      '--mode',
+      'server-master-data-write',
+      ], 1)
+      expect(serverWriteReport.unclassifiedServerMasterDataDirectWriteCount).toBe(5)
+      expect(serverWriteReport.unclassifiedServerMasterDataDirectWrites).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            file: 'src/server/services/bad.service.ts',
+            model: 'product',
+            action: 'create',
+          }),
+          expect.objectContaining({
+            file: 'src/server/services/bad-product-sku-attributes.service.ts',
+            model: 'productSKU',
+            action: 'create',
+          }),
+          expect.objectContaining({
+            file: 'src/server/services/bad-public-upload-reverse-source.service.ts',
+            model: 'product',
+            action: 'create',
+          }),
+          expect.objectContaining({
+            file: 'src/server/services/bad-pre-sku-formalization.service.ts',
+            model: 'preSku',
+            action: 'update',
+          }),
+          expect.objectContaining({
+            file: 'src/server/services/bad-pre-sku-formalization.service.ts',
+            model: 'productSKU',
+            action: 'update',
+          }),
+        ]),
+      )
+
+    const productSkuAttributesWriteReport = runVerifierWithArgs([
+      '--root',
+      fixtureRoot,
+      '--mode',
+      'product-sku-attributes-write',
+    ], 1)
+    expect(productSkuAttributesWriteReport.productSkuAttributeWriteBlockingRiskCount).toBe(3)
+    expect(productSkuAttributesWriteReport.productSkuAttributeWriteBlockingRisks).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/services/bad-product-sku-attributes.service.ts',
+          key: 'skuName',
+        }),
+        expect.objectContaining({
+          file: 'src/server/services/bad-product-sku-attributes.service.ts',
+          key: 'barcode',
+        }),
+      ]),
+    )
+
+    const referenceEstimatorCostBoundaryReport = runVerifierWithArgs([
+      '--root',
+      fixtureRoot,
+      '--mode',
+      'reference-estimator-cost-boundary',
+    ], 1)
+    expect(
+      referenceEstimatorCostBoundaryReport
+        .unclassifiedReferenceEstimatorCostBoundaryFindingCount,
+    ).toBe(2)
+    expect(
+      referenceEstimatorCostBoundaryReport
+        .unclassifiedReferenceEstimatorCostBoundaryFindings,
+    ).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/services/bad-formal-cost.service.ts',
+        }),
+      ]),
+    )
+
+    const fileSystemMasterDataSourceReport = runVerifierWithArgs([
+      '--root',
+      fixtureRoot,
+      '--mode',
+      'filesystem-master-data-source',
+    ], 1)
+    expect(
+      fileSystemMasterDataSourceReport.unclassifiedFileSystemMasterDataSourceCount,
+    ).toBe(1)
+    expect(fileSystemMasterDataSourceReport.unclassifiedFileSystemMasterDataSources).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/services/bad-public-upload-reverse-source.service.ts',
+        }),
+      ]),
+    )
+
+    const processSnapshotReadReport = runVerifierWithArgs([
+      '--root',
+      fixtureRoot,
+      '--mode',
+      'process-snapshot-read',
+    ], 1)
+    expect(processSnapshotReadReport.processSnapshotReadBlockingRiskCount).toBeGreaterThanOrEqual(3)
+    expect(processSnapshotReadReport.unclassifiedProcessSnapshotReadCount).toBe(1)
+    expect(processSnapshotReadReport.processSnapshotReadBlockingRisks).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          file: 'src/server/services/bad-process-snapshot.service.ts',
+          field: 'barcode',
+        }),
+      ]),
+    )
+  } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
+
+  it('detects stale schema Json field classifications', () => {
+    const fixtureRoot = createStaleSchemaJsonClassificationFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.staleSchemaJsonFieldClassificationCount).toBeGreaterThan(0)
+      expect(report.staleSchemaJsonFieldClassifications).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            id: 'ProductSKU.attributes',
+            category: 'compatibility-snapshot',
+          }),
+        ]),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
+
+  it('detects stale file-level boundary classifications', () => {
+    const fixtureRoot = createStaleFileClassificationFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.staleFileClassificationCount).toBeGreaterThan(0)
+      expect(report.staleFileClassifications).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            group: 'approvedServerMasterDataWritePaths',
+            file: 'src/server/repositories/asset-center.repository.ts',
+          }),
+          expect.objectContaining({
+            group: 'compatibilitySnapshotReadClassifications',
+            file: 'src/lib/open-product/platform-view.ts',
+          }),
+        ]),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
+
+  it('detects approved raw SQL files writing tables outside their scope', () => {
+    const fixtureRoot = createApprovedRawSqlWrongTableFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.unclassifiedRawSqlMasterDataWriteCount).toBe(1)
+      expect(report.unclassifiedRawSqlMasterDataWrites[0]).toEqual(
+        expect.objectContaining({
+          file: 'src/server/services/spu-number-reservation.service.ts',
+          tableName: 'Product',
+          operation: 'UPDATE',
+          reason: expect.stringContaining('未批准原生 SQL 写入 Product'),
+        }),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
+
+  it('detects approved raw SQL files reading tables outside their scope', () => {
+    const fixtureRoot = createApprovedRawSqlWrongReadTableFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.unclassifiedRawSqlMasterDataReadCount).toBe(1)
+      expect(report.unclassifiedRawSqlMasterDataReads[0]).toEqual(
+        expect.objectContaining({
+          file: 'src/server/services/spu-number-reservation.service.ts',
+          tableName: 'Product',
+          operation: 'FROM',
+          reason: expect.stringContaining('未批准原生 SQL 读取 Product'),
+        }),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js b/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
new file mode 100644
index 00000000..cb01b214
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
@@ -0,0 +1,1523 @@
+const {
+  parseArgs,
+  REQUIRED_MIGRATIONS,
+  REQUIRED_DATABASE_GUARDS,
+  assertNoPendingMigrationDryRun,
+  getMigrationApplicationStatus,
+  shouldApplyMissingMigrationFiles,
+  getRequiredMigrationReadiness,
+  getExternalReadonlyContractSummary,
+  getExternalStableKeyQualitySummary,
+  getExternalViewIdFallbackRisks,
+  getPreSkuFormalizationLifecycleMismatchSamples,
+  assertNoMasterDataTruthDrift,
+  buildFoundationHardReadyGate,
+  buildFoundationHardReadySummary,
+  assertFoundationHardReadyGate,
+  printFoundationHardReadyReport,
+  getStructuredSkuSummary,
+  getDuplicateGroupCount,
+  getMigrationHistoryStatus,
+  validateRequiredMigrationCatalog,
+} = require('../../scripts/verify-master-data-foundation')
+const {
+  REQUIRED_MIGRATIONS: SHARED_REQUIRED_MIGRATIONS,
+  applyMissingMigrationFiles,
+  classifyAppliedMigrationPaths,
+  columnDefaultMatches,
+  guardExists,
+  LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS,
+  getPendingStructureMigrationPaths,
+  getMigrationTimestamp,
+  validatePrismaMigrationDirectories,
+} = require('../../scripts/master-data-required-migrations')
+const fs = require('node:fs')
+const path = require('node:path')
+
+const ROOT_DIR = path.resolve(__dirname, '../..')
+
+const ALWAYS_APPLY_DML_MIGRATIONS = new Set([
+  'prisma/migrations/20260531190000_add_product_sku_asset_profile_sku_deleted_guard/migration.sql',
+  'prisma/migrations/20260531203000_normalize_core_code_identity_guards/migration.sql',
+  'prisma/migrations/20260531213000_add_product_sku_asset_profile_identity_guards/migration.sql',
+  'prisma/migrations/20260531223000_add_product_patent_record_identity_guards/migration.sql',
+  'prisma/migrations/20260531233000_add_intake_reference_library_identity_guards/migration.sql',
+  'prisma/migrations/20260531234000_add_spu_number_counter_identity_guards/migration.sql',
+  'prisma/migrations/20260531235000_add_pre_sku_basic_info_extended_guards/migration.sql',
+  'prisma/migrations/20260601000000_add_asset_sku_sync_event_guards/migration.sql',
+  'prisma/migrations/20260601001000_add_product_sku_asset_profile_source_guards/migration.sql',
+  'prisma/migrations/20260601002000_add_packaging_warehouse_foundation_guards/migration.sql',
+  'prisma/migrations/20260601003000_add_approval_workflow_foundation_guards/migration.sql',
+  'prisma/migrations/20260601004000_add_people_org_foundation_guards/migration.sql',
+  'prisma/migrations/20260601005000_add_planning_foundation_guards/migration.sql',
+  'prisma/migrations/20260601006000_add_share_upload_collaboration_guards/migration.sql',
+  'prisma/migrations/20260601007000_add_legacy_cad_structure_guards/migration.sql',
+  'prisma/migrations/20260601008000_add_reference_option_and_mapping_guards/migration.sql',
+  'prisma/migrations/20260601009000_add_config_audit_permission_guards/migration.sql',
+  'prisma/migrations/20260601013000_add_spu_rule_normalized_category_guard/migration.sql',
+  'prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql',
+  'prisma/migrations/20260601023000_add_product_sku_asset_profile_deleted_at_trigger/migration.sql',
+  'prisma/migrations/20260601024000_add_product_sku_soft_delete_tombstone_guard/migration.sql',
+])
+
+const STRUCTURE_BACKFILL_MIGRATIONS = new Set([
+  'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+  'prisma/migrations/20260530103000_add_product_sku_asset_profile/migration.sql',
+  'prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql',
+  'prisma/migrations/20260530150000_add_intake_non_integrated_product_profile/migration.sql',
+  'prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql',
+  'prisma/migrations/20260531113000_add_spu_number_counter/migration.sql',
+])
+
+function toPosixPath(filePath) {
+  return filePath.replace(/\\/g, '/')
+}
+
+function listMigrationSqlFiles() {
+  return fs
+    .readdirSync(path.join(ROOT_DIR, 'prisma/migrations'), { withFileTypes: true })
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => path.join(ROOT_DIR, 'prisma/migrations', entry.name, 'migration.sql'))
+    .filter((migrationPath) => fs.existsSync(migrationPath))
+}
+
+function readMigrationSql(relativePath) {
+  return fs.readFileSync(path.join(ROOT_DIR, relativePath), 'utf8')
+}
+
+function collectFinalExternalViewDefinitions() {
+  const definitions = new Map()
+  const createExternalViewPattern =
+    /\bCREATE\s+(?:OR\s+REPLACE\s+)?VIEW\s+external\.("?)([a-z_]+_v1)\1\s+AS\b/i
+
+  for (const migrationPath of listMigrationSqlFiles()) {
+    const relativePath = toPosixPath(path.relative(ROOT_DIR, migrationPath))
+    const sql = fs.readFileSync(migrationPath, 'utf8')
+    const statements = sql
+      .split(';')
+      .map((statement) => statement.trim())
+      .filter(Boolean)
+
+    for (const statement of statements) {
+      const match = statement.match(createExternalViewPattern)
+      if (!match) continue
+      definitions.set(`external.${match[2]}`, {
+        path: relativePath,
+        sql: statement,
+      })
+    }
+  }
+
+  return definitions
+}
+
+function getExternalBusinessColumnIdFallbackRisks(viewName, sql) {
+  const risks = []
+  const linePattern = /^([\s\S]*?)\s+AS\s+([a-z_]+(?:_code|_business_key))\b/gim
+
+  for (const match of sql.matchAll(linePattern)) {
+    const expression = match[1]
+      .split(/\n/)
+      .pop()
+      ?.trim() ?? ''
+    const columnName = match[2]
+    if (!/\."id"\b|\bid\b/i.test(expression)) continue
+
+    risks.push({
+      viewName,
+      columnName,
+      expression,
+    })
+  }
+
+  return risks
+}
+
+function stripSqlLineComments(sql) {
+  return sql.replace(/--.*$/gm, '')
+}
+
+function stripSqlStringLiterals(sql) {
+  return stripSqlLineComments(sql).replace(/'(?:''|[^'])*'/g, "''")
+}
+
+function hasStatementDml(sql) {
+  return /\b(?:UPDATE|INSERT\s+INTO|DELETE\s+FROM|TRUNCATE)\b/i.test(
+    stripSqlStringLiterals(sql),
+  )
+}
+
+function loadExpectedExternalContractRows() {
+  const sql = fs.readFileSync(
+    path.join(ROOT_DIR, 'scripts/sql/check-external-readonly-contract.sql'),
+    'utf8',
+  )
+  const rows = []
+  const tuplePattern = /\('([^']+_v1)',\s*'([^']+)'\)/g
+  for (const match of sql.matchAll(tuplePattern)) {
+    rows.push({ table_name: match[1], column_name: match[2] })
+  }
+  return rows
+}
+
+function createMigrationMockClient({
+  relationExists = [],
+  columnExists = [],
+  columnDefaultMatches = [],
+  guardExists = [],
+  dataCheckMatches = [],
+  migrationHistoryTableExists = true,
+  migrationHistoryRows = {
+    total_migration_rows: 3,
+    applied_migration_rows: 3,
+    unfinished_migration_rows: 0,
+    rolled_back_migration_rows: 0,
+  },
+  sqlResult = { rowCount: 1, rows: [] },
+}) {
+  const relationQueue = [...relationExists]
+  const columnQueue = [...columnExists]
+  const columnDefaultQueue = [...columnDefaultMatches]
+  const guardQueue = [...guardExists]
+  const dataCheckQueue = [...dataCheckMatches]
+  return {
+    query: jest.fn((sql) => {
+      const text = String(sql)
+      if (text.includes("to_regclass('_prisma_migrations')")) {
+        return Promise.resolve({
+          rows: [{ relation_name: migrationHistoryTableExists ? '_prisma_migrations' : null }],
+        })
+      }
+      if (text.includes('FROM _prisma_migrations')) {
+        return Promise.resolve({ rows: [migrationHistoryRows] })
+      }
+      if (text.includes('SELECT to_regclass($1) AS relation_name')) {
+        const exists = relationQueue.shift() ?? false
+        return Promise.resolve({ rows: [{ relation_name: exists ? 'relation' : null }] })
+      }
+      if (text.includes('SELECT column_default') && text.includes('FROM information_schema.columns')) {
+        const matches = columnDefaultQueue.shift() ?? false
+        return Promise.resolve({
+          rowCount: matches ? 1 : 0,
+          rows: matches ? [{ column_default: null }] : [{ column_default: "'{}'::text[]" }],
+        })
+      }
+      if (text.includes('FROM information_schema.triggers') || text.includes('FROM pg_constraint')) {
+        const exists = guardQueue.shift() ?? false
+        return Promise.resolve({ rowCount: exists ? 1 : 0, rows: exists ? [{ '?column?': 1 }] : [] })
+      }
+      if (text.includes('FROM information_schema.columns')) {
+        const exists = columnQueue.shift() ?? false
+        return Promise.resolve({ rowCount: exists ? 1 : 0, rows: exists ? [{ '?column?': 1 }] : [] })
+      }
+      if (text.includes('/* data-check */')) {
+        const matches = dataCheckQueue.shift() ?? false
+        return Promise.resolve({ rowCount: 1, rows: [{ row_count: matches ? 0 : 1 }] })
+      }
+      return Promise.resolve(sqlResult)
+    }),
+  }
+}
+
+describe('verify-master-data-foundation', () => {
+  it('validates the required migration catalog before database verification', () => {
+    const summary = validateRequiredMigrationCatalog()
+
+    expect(summary).toEqual({
+      migrationCount: REQUIRED_MIGRATIONS.length,
+      structureMigrationCount: REQUIRED_MIGRATIONS.filter((migration) => !migration.alwaysApply).length,
+      guardMigrationCount: REQUIRED_MIGRATIONS.filter((migration) => migration.alwaysApply).length,
+      targetOnlyAlwaysApplyMigrationCount: REQUIRED_MIGRATIONS.filter(
+        (migration) =>
+          migration.alwaysApply &&
+          !(
+            migration.columnCheck ||
+            (Array.isArray(migration.columnDefaultChecks) && migration.columnDefaultChecks.length > 0) ||
+            (Array.isArray(migration.guardChecks) && migration.guardChecks.length > 0) ||
+            (Array.isArray(migration.relationColumnChecks) && migration.relationColumnChecks.length > 0) ||
+            (Array.isArray(migration.dataChecks) && migration.dataChecks.length > 0)
+          ),
+      ).length,
+    })
+  })
+
+  it('keeps required migrations in stable path order with parseable timestamps', () => {
+    const paths = REQUIRED_MIGRATIONS.map((migration) => migration.path)
+    expect(paths).toEqual([...paths].sort())
+    paths.forEach((migrationPath) => {
+      expect(getMigrationTimestamp(migrationPath)).toMatch(/^\d{14}$/)
+    })
+  })
+
+  it('keeps malformed Prisma migration directory names explicitly allowlisted as legacy debt', () => {
+    const summary = validatePrismaMigrationDirectories()
+
+    expect(summary.legacyNonStandardMigrationDirectories).toEqual([
+      '20251213_performance_optimization',
+      'add_packaging_plan',
+    ])
+    expect(new Set(summary.legacyNonStandardMigrationDirectories)).toEqual(
+      LEGACY_NON_STANDARD_PRISMA_MIGRATION_DIRS,
+    )
+  })
+
+  it('keeps governance migration files registered in the required migration catalog', () => {
+    const requiredPaths = new Set(REQUIRED_MIGRATIONS.map((migration) => migration.path))
+    const guardNames = REQUIRED_DATABASE_GUARDS.map((guard) => guard.name)
+    const missingCatalogEntries = []
+
+    for (const migrationPath of listMigrationSqlFiles()) {
+      const relativePath = toPosixPath(path.relative(ROOT_DIR, migrationPath))
+      const sql = fs.readFileSync(migrationPath, 'utf8')
+      const timestamp = getMigrationTimestamp(relativePath)
+      const isCurrentGovernanceWindow = timestamp && timestamp >= '20260529213000'
+      const touchesExternalContract = /\bexternal\.[a-z_]+_v1\b/i.test(sql)
+      const declaresRequiredGuard =
+        isCurrentGovernanceWindow && guardNames.some((guardName) => sql.includes(guardName))
+      const declaresCurrentGovernanceDdl =
+        isCurrentGovernanceWindow &&
+        /\b(?:ADD\s+CONSTRAINT|CREATE\s+(?:UNIQUE\s+)?INDEX|CREATE\s+TRIGGER)\b/i.test(sql)
+
+      if (
+        (touchesExternalContract || declaresRequiredGuard || declaresCurrentGovernanceDdl) &&
+        !requiredPaths.has(relativePath)
+      ) {
+        missingCatalogEntries.push(relativePath)
+      }
+    }
+
+    expect(missingCatalogEntries).toEqual([])
+  })
+
+  it('keeps always-apply migrations with DML explicitly classified', () => {
+    const requiredPaths = new Set(REQUIRED_MIGRATIONS.map((migration) => migration.path))
+    const unclassifiedDmlMigrations = REQUIRED_MIGRATIONS
+      .filter((migration) => migration.alwaysApply)
+      .filter((migration) => hasStatementDml(readMigrationSql(migration.path)))
+      .map((migration) => migration.path)
+      .filter((migrationPath) => !ALWAYS_APPLY_DML_MIGRATIONS.has(migrationPath))
+
+    expect(unclassifiedDmlMigrations).toEqual([])
+    expect(
+      Array.from(ALWAYS_APPLY_DML_MIGRATIONS).filter((migrationPath) => !requiredPaths.has(migrationPath)),
+    ).toEqual([])
+  })
+
+  it('keeps baseline-resolved structure backfills covered by data checks and repair SQL', () => {
+    const missingCoverage = Array.from(STRUCTURE_BACKFILL_MIGRATIONS)
+      .map((migrationPath) => REQUIRED_MIGRATIONS.find((migration) => migration.path === migrationPath))
+      .filter((migration) => {
+        return !migration ||
+          migration.alwaysApply ||
+          !Array.isArray(migration.dataChecks) ||
+          migration.dataChecks.length === 0 ||
+          typeof migration.repairSql !== 'string' ||
+          migration.repairSql.trim().length === 0
+      })
+      .map((migration) => migration?.path ?? '<missing>')
+
+    expect(missingCoverage).toEqual([])
+
+    const unexpectedStructureBackfills = REQUIRED_MIGRATIONS
+      .filter((migration) => !migration.alwaysApply)
+      .filter((migration) => STRUCTURE_BACKFILL_MIGRATIONS.has(migration.path))
+      .filter((migration) => !hasStatementDml(readMigrationSql(migration.path)))
+      .map((migration) => migration.path)
+
+    expect(unexpectedStructureBackfills).toEqual([])
+  })
+
+  it('keeps SQL helper files in their declared read-only or grant-only boundary', () => {
+    const readOnlySqlFiles = [
+      'scripts/sql/check-external-readonly-contract.sql',
+      'scripts/sql/check-internal-master-data-foundation.sql',
+      'scripts/sql/preflight-intake-non-integrated-sku-items.sql',
+      'scripts/sql/preflight-product-sku-asset-profile.sql',
+    ]
+
+    readOnlySqlFiles.forEach((relativePath) => {
+      expect(stripSqlStringLiterals(readMigrationSql(relativePath))).not.toMatch(
+        /\b(?:INSERT|UPDATE|DELETE|TRUNCATE|CREATE|ALTER|DROP|GRANT|REVOKE)\b/i,
+      )
+    })
+
+    const grantStatements = stripSqlLineComments(readMigrationSql('scripts/sql/grant-external-readonly.sql'))
+      .split(';')
+      .map((statement) => statement.replace(/\s+/g, ' ').trim())
+      .filter(Boolean)
+
+    expect(grantStatements).toEqual([
+      'GRANT USAGE ON SCHEMA external TO external_reader',
+      'GRANT SELECT ON ALL TABLES IN SCHEMA external TO external_reader',
+      'ALTER DEFAULT PRIVILEGES IN SCHEMA external GRANT SELECT ON TABLES TO external_reader',
+    ])
+  })
+
+  it('keeps final external view definitions off internal JSON and id-derived business fields', () => {
+    const finalDefinitions = collectFinalExternalViewDefinitions()
+    const jsonSourceRisks = []
+    const idFallbackRisks = []
+
+    for (const [viewName, definition] of finalDefinitions.entries()) {
+      const body = stripSqlStringLiterals(definition.sql)
+      if (
+        /"(payload|attributes|businessData|displaySummary|familySelection)"/.test(body) ||
+        /\b(?:jsonb_array_elements|->>|->)\b/.test(body)
+      ) {
+        jsonSourceRisks.push({
+          viewName,
+          path: definition.path,
+        })
+      }
+
+      for (const risk of getExternalBusinessColumnIdFallbackRisks(viewName, body)) {
+        idFallbackRisks.push({
+          ...risk,
+          path: definition.path,
+        })
+      }
+    }
+
+    expect(Array.from(finalDefinitions.keys()).sort()).toEqual(
+      expect.arrayContaining([
+        'external.asset_variants_v1',
+        'external.intake_products_v1',
+        'external.intake_products_ready_v1',
+        'external.intake_sku_items_v1',
+        'external.intake_sku_items_ready_v1',
+        'external.materials_v1',
+        'external.product_assets_v1',
+        'external.product_bom_v1',
+        'external.product_skus_v1',
+      ]),
+    )
+    expect(jsonSourceRisks).toEqual([])
+    expect(idFallbackRisks).toEqual([])
+  })
+
+  it('rejects invalid required migration catalog entries', () => {
+    expect(() =>
+      validateRequiredMigrationCatalog({
+        migrations: [
+          ...REQUIRED_MIGRATIONS,
+          REQUIRED_MIGRATIONS[0],
+        ],
+      }),
+    ).toThrow('重复 path')
+
+    expect(() =>
+      validateRequiredMigrationCatalog({
+        migrations: [
+          {
+            ...REQUIRED_MIGRATIONS[0],
+            targetRelation: '"DefinitelyMissingRelation"',
+            targetRelations: undefined,
+          },
+        ],
+      }),
+    ).toThrow('未引用声明的 targetRelation')
+
+    expect(() =>
+      validateRequiredMigrationCatalog({
+        migrations: [
+          {
+            ...REQUIRED_MIGRATIONS[0],
+            path: 'prisma/migrations/20990101000000_missing/migration.sql',
+          },
+        ],
+      }),
+    ).toThrow('迁移文件不存在')
+
+    expect(() =>
+      validateRequiredMigrationCatalog({
+        migrations: [
+          {
+            targetRelation: '"ProductSKU"',
+            path: 'prisma/migrations/20260601019000_add_formal_cost_bom_guards/migration.sql',
+            alwaysApply: true,
+          },
+        ],
+      }),
+    ).toThrow('targetOnlyReadinessAssurance')
+  })
+
+  it('parses strict migration verification mode', () => {
+    expect(parseArgs([])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--require-applied'])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '',
+      summaryStdout: false,
+      requireApplied: true,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--read-only-migration-status'])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: true,
+    })
+    expect(parseArgs(['--output', '.master-data-audits/current.json'])).toEqual({
+      outputFile: '.master-data-audits/current.json',
+      summaryOutputFile: '',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--output=.master-data-audits/current.json'])).toEqual({
+      outputFile: '.master-data-audits/current.json',
+      summaryOutputFile: '',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--summary-output', '.master-data-audits/current.summary.json'])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '.master-data-audits/current.summary.json',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--summary-output=.master-data-audits/current.summary.json'])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '.master-data-audits/current.summary.json',
+      summaryStdout: false,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(parseArgs(['--summary-stdout'])).toEqual({
+      outputFile: '',
+      summaryOutputFile: '',
+      summaryStdout: true,
+      requireApplied: false,
+      readOnlyMigrationStatus: false,
+    })
+    expect(() =>
+      parseArgs(['--require-applied', '--read-only-migration-status']),
+    ).toThrow('不能同时使用')
+    expect(() => parseArgs(['--unknown'])).toThrow('未知参数')
+  })
+
+  it('fails strict verification when migrations only pass through dry-run application', () => {
+    expect(() =>
+      assertNoPendingMigrationDryRun(
+        ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+        { requireApplied: true },
+      ),
+    ).toThrow('严格模式拒绝通过')
+
+    expect(() =>
+      assertNoPendingMigrationDryRun(
+        ['prisma/migrations/20260601010000_add_external_intake_stable_business_keys/migration.sql'],
+        { requireApplied: true },
+      ),
+    ).not.toThrow()
+
+    expect(() =>
+      assertNoPendingMigrationDryRun(
+        ['prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql'],
+        { requireApplied: false },
+      ),
+    ).not.toThrow()
+  })
+
+  it('treats only non-idempotent structure migrations as strict pending work', () => {
+    const structureMigrationPaths = REQUIRED_MIGRATIONS
+      .filter((migration) => !migration.alwaysApply)
+      .map((migration) => migration.path)
+    const guardMigrationPaths = REQUIRED_MIGRATIONS
+      .filter((migration) => migration.alwaysApply)
+      .map((migration) => migration.path)
+
+    expect(() =>
+      assertNoPendingMigrationDryRun(structureMigrationPaths, { requireApplied: true }),
+    ).toThrow('严格模式拒绝通过')
+
+    expect(() =>
+      assertNoPendingMigrationDryRun(guardMigrationPaths, { requireApplied: true }),
+    ).not.toThrow()
+
+    expect(getPendingStructureMigrationPaths([
+      structureMigrationPaths[0],
+      guardMigrationPaths[0],
+    ])).toEqual([structureMigrationPaths[0]])
+
+    expect(classifyAppliedMigrationPaths([
+      structureMigrationPaths[0],
+      guardMigrationPaths[0],
+    ])).toEqual({
+      structureMigrations: [structureMigrationPaths[0]],
+      idempotentMigrations: [guardMigrationPaths[0]],
+    })
+
+    expect(getMigrationApplicationStatus([
+      structureMigrationPaths[0],
+      guardMigrationPaths[0],
+    ])).toEqual({
+      appliedMigrationCount: 2,
+      pendingStructureMigrationCount: 1,
+      replayableIdempotentMigrationCount: 1,
+      pendingStructureMigrationPaths: [structureMigrationPaths[0]],
+      replayableIdempotentMigrationPaths: [guardMigrationPaths[0]],
+      strictReady: false,
+      fullyReady: false,
+    })
+
+    expect(getMigrationApplicationStatus(guardMigrationPaths)).toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 0,
+        replayableIdempotentMigrationCount: guardMigrationPaths.length,
+        strictReady: true,
+        fullyReady: false,
+      }),
+    )
+  })
+
+  it('replays governance migration SQL only when read-only readiness has pending targets', () => {
+    expect(shouldApplyMissingMigrationFiles({
+      pendingMigrationCount: 0,
+      migrationHistory: { tableExists: false },
+    })).toBe(false)
+    expect(shouldApplyMissingMigrationFiles({
+      pendingMigrationCount: 1,
+      migrationHistory: { tableExists: true },
+    })).toBe(true)
+  })
+
+  it('verifies required migration targets after dry-run application', async () => {
+    const migration = {
+      targetRelation: '"PreSkuBasicInfo"',
+      path: 'prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql',
+    }
+    const client = createMigrationMockClient({
+      relationExists: [false, true],
+    })
+
+    await expect(applyMissingMigrationFiles(client, [migration])).resolves.toEqual([migration.path])
+  })
+
+  it('fails dry-run application when a migration does not create its declared relation', async () => {
+    const migration = {
+      targetRelation: '"PreSkuBasicInfo"',
+      path: 'prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql',
+    }
+    const client = createMigrationMockClient({
+      relationExists: [false, false],
+    })
+
+    await expect(applyMissingMigrationFiles(client, [migration])).rejects.toThrow(
+      '未生成声明的 targetRelation',
+    )
+  })
+
+  it('verifies columnCheck targets after dry-run application', async () => {
+    const migration = {
+      targetRelation: '"IntakeNonIntegratedProductProfile"',
+      path: 'prisma/migrations/20260530172000_add_stock_source_fields_to_intake_product_profile/migration.sql',
+      columnCheck: {
+        tableName: 'IntakeNonIntegratedProductProfile',
+        columnName: 'sourceSpu',
+      },
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true, true],
+      columnExists: [false, true],
+    })
+
+    await expect(applyMissingMigrationFiles(client, [migration])).resolves.toEqual([migration.path])
+  })
+
+  it('uses columnDefaultChecks to catch migration side effects that relation checks miss', async () => {
+    const migration = {
+      targetRelation: '"AssemblyStep"',
+      path: 'prisma/migrations/20260601017000_align_migration_replay_to_current_schema/migration.sql',
+      columnDefaultChecks: [
+        {
+          tableName: 'AssemblyStep',
+          columnName: 'partIds',
+          expectedDefault: null,
+        },
+      ],
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true, true],
+      columnDefaultMatches: [false, true],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            columnDefaultChecks: [
+              expect.objectContaining({
+                tableName: 'AssemblyStep',
+                columnName: 'partIds',
+                expectedDefault: null,
+                matches: false,
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+    const applyClient = createMigrationMockClient({
+      relationExists: [true, true],
+      columnDefaultMatches: [false, true],
+    })
+    await expect(applyMissingMigrationFiles(applyClient, [migration])).resolves.toEqual([migration.path])
+  })
+
+  it('uses relationColumnChecks to catch existing external views with stale columns', async () => {
+    const migration = {
+      targetRelation: 'external.product_skus_v1',
+      path: 'prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql',
+      alwaysApply: true,
+      relationColumnChecks: [
+        {
+          relationName: 'external.product_skus_v1',
+          columnNames: ['product_business_key', 'sku_business_key'],
+        },
+      ],
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true],
+      columnExists: [false, true],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingIdempotentMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            relationColumnChecks: [
+              expect.objectContaining({
+                relationName: 'external.product_skus_v1',
+                columnNames: ['product_business_key', 'sku_business_key'],
+                columns: [
+                  expect.objectContaining({ columnName: 'product_business_key', exists: false }),
+                  expect.objectContaining({ columnName: 'sku_business_key', exists: true }),
+                ],
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+
+    const applyClient = createMigrationMockClient({
+      relationExists: [true, true],
+      columnExists: [false, true, true, true],
+    })
+    await expect(applyMissingMigrationFiles(applyClient, [migration])).resolves.toEqual([migration.path])
+  })
+
+  it('uses dataChecks to catch migration backfill side effects', async () => {
+    const migration = {
+      targetRelation: '"IntakeNonIntegratedSkuItem"',
+      path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+      dataChecks: [
+        {
+          name: 'payload_missing_rows_zero',
+          sql: 'SELECT 1 AS row_count /* data-check */',
+          expectedValue: 0,
+        },
+      ],
+      repairSql: 'INSERT INTO "IntakeNonIntegratedSkuItem" ("id") VALUES (\'repair\');',
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true],
+      dataCheckMatches: [false],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            dataChecks: [
+              expect.objectContaining({
+                name: 'payload_missing_rows_zero',
+                expectedValue: 0,
+                matches: false,
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+
+    const applyClient = createMigrationMockClient({
+      relationExists: [true, true],
+      dataCheckMatches: [false, true],
+    })
+    await expect(applyMissingMigrationFiles(applyClient, [migration])).resolves.toEqual([migration.path])
+    expect(applyClient.query).toHaveBeenCalledWith(migration.repairSql)
+  })
+
+  it('treats missing data-check relations as pending migration state', async () => {
+    const migration = {
+      targetRelation: '"IntakeNonIntegratedSkuItem"',
+      path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+      dataChecks: [
+        {
+          name: 'payload_missing_rows_zero',
+          sql: 'SELECT COUNT(*) FROM "IntakeNonIntegratedSkuItem" /* missing-relation-data-check */',
+          expectedValue: 0,
+        },
+      ],
+    }
+    const missingRelationError = new Error('relation "IntakeNonIntegratedSkuItem" does not exist')
+    missingRelationError.code = '42P01'
+    const client = {
+      query: jest.fn((sql) => {
+        const text = String(sql)
+        if (text.includes("to_regclass('_prisma_migrations')")) {
+          return Promise.resolve({ rows: [{ relation_name: '_prisma_migrations' }] })
+        }
+        if (text.includes('FROM _prisma_migrations')) {
+          return Promise.resolve({
+            rows: [{
+              total_migration_rows: 3,
+              applied_migration_rows: 3,
+              unfinished_migration_rows: 0,
+              rolled_back_migration_rows: 0,
+            }],
+          })
+        }
+        if (text.includes('SELECT to_regclass($1) AS relation_name')) {
+          return Promise.resolve({ rows: [{ relation_name: null }] })
+        }
+        if (text.includes('missing-relation-data-check')) {
+          return Promise.reject(missingRelationError)
+        }
+        return Promise.resolve({ rowCount: 0, rows: [] })
+      }),
+    }
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            targetRelations: [
+              expect.objectContaining({
+                relationName: '"IntakeNonIntegratedSkuItem"',
+                exists: false,
+              }),
+            ],
+            dataChecks: [
+              expect.objectContaining({
+                name: 'payload_missing_rows_zero',
+                matches: false,
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+  })
+
+  it('checks column defaults directly through information_schema', async () => {
+    const client = createMigrationMockClient({
+      columnDefaultMatches: [true, false],
+    })
+
+    await expect(columnDefaultMatches(client, 'AssemblyStep', 'partIds', null)).resolves.toBe(true)
+    await expect(columnDefaultMatches(client, 'AssemblyStep', 'partIds', null)).resolves.toBe(false)
+  })
+
+  it('uses guardChecks to catch trigger and check-constraint side effects', async () => {
+    const migration = {
+      targetRelation: '"ProductSKU"',
+      path: 'prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql',
+      guardChecks: [
+        {
+          type: 'check-constraint',
+          name: 'ProductSKU_soft_delete_identity_valid',
+          tableName: 'ProductSKU',
+        },
+      ],
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true, true],
+      guardExists: [false, true],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            guardChecks: [
+              expect.objectContaining({
+                type: 'check-constraint',
+                name: 'ProductSKU_soft_delete_identity_valid',
+                tableName: 'ProductSKU',
+                exists: false,
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+
+    const applyClient = createMigrationMockClient({
+      relationExists: [true, true],
+      guardExists: [false, true],
+    })
+    await expect(applyMissingMigrationFiles(applyClient, [migration])).resolves.toEqual([migration.path])
+  })
+
+  it('can use scoped repair SQL when only a guard side effect is missing', async () => {
+    const migration = {
+      targetRelation: '"IntakeNonIntegratedSkuItem"',
+      path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+      guardChecks: [
+        {
+          type: 'trigger',
+          name: 'IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items',
+          tableName: 'IntakeNonIntegratedProduct',
+        },
+      ],
+      repairSql: 'CREATE TRIGGER "IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items";',
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true, true],
+      guardExists: [false, true],
+    })
+
+    await expect(applyMissingMigrationFiles(client, [migration])).resolves.toEqual([migration.path])
+    expect(client.query).toHaveBeenCalledWith(migration.repairSql)
+    expect(client.query).not.toHaveBeenCalledWith(expect.stringContaining('CREATE TYPE'))
+  })
+
+  it('replays idempotent governance migrations when any required side effect is missing', async () => {
+    const migrations = [
+      {
+        targetRelation: '"ReadyGuardedTable"',
+        path: 'prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql',
+        alwaysApply: true,
+        guardChecks: [
+          {
+            type: 'check-constraint',
+            name: 'ReadyGuard',
+            tableName: 'ReadyGuardedTable',
+          },
+        ],
+      },
+      {
+        targetRelation: 'external.product_bom_v1',
+        path: 'prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql',
+        alwaysApply: true,
+      },
+      {
+        targetRelation: 'external.product_skus_v1',
+        path: 'prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql',
+        alwaysApply: true,
+        relationColumnChecks: [
+          {
+            relationName: 'external.product_skus_v1',
+            columnNames: ['product_business_key'],
+          },
+        ],
+      },
+    ]
+    const client = createMigrationMockClient({
+      relationExists: [true, true, true, true, true],
+      guardExists: [true],
+      columnExists: [false, true],
+    })
+
+    await expect(applyMissingMigrationFiles(client, migrations)).resolves.toEqual([
+      'prisma/migrations/20260601016000_tighten_external_material_and_bom_contract/migration.sql',
+      'prisma/migrations/20260601011000_add_external_product_sku_stable_business_keys/migration.sql',
+    ])
+    expect(client.query).not.toHaveBeenCalledWith(
+      expect.stringContaining('ProductSKU_soft_delete_identity_valid'),
+    )
+  })
+
+  it('checks guard existence directly for triggers and check constraints', async () => {
+    const client = createMigrationMockClient({
+      guardExists: [true, false],
+    })
+
+    await expect(guardExists(client, {
+      type: 'trigger',
+      name: 'SomeTrigger',
+      tableName: 'SomeTable',
+    })).resolves.toBe(true)
+    await expect(guardExists(client, {
+      type: 'check-constraint',
+      name: 'SomeConstraint',
+      tableName: 'SomeTable',
+    })).resolves.toBe(false)
+  })
+
+  it('uses the shared required migration list as the single dry-run source', () => {
+    expect(REQUIRED_MIGRATIONS).toBe(SHARED_REQUIRED_MIGRATIONS)
+  })
+
+  it('checks required migration readiness without executing migration SQL', async () => {
+    const migrations = [
+      {
+        targetRelation: '"ReadyTable"',
+        path: 'prisma/migrations/20260530000000_ready_table/migration.sql',
+      },
+      {
+        targetRelation: '"MissingColumnTable"',
+        path: 'prisma/migrations/20260530000001_missing_column/migration.sql',
+        columnCheck: {
+          tableName: 'MissingColumnTable',
+          columnName: 'sourceSpu',
+        },
+      },
+      {
+        targetRelation: 'external.missing_view_v1',
+        path: 'prisma/migrations/20260530000002_missing_view/migration.sql',
+        alwaysApply: true,
+      },
+    ]
+    const client = createMigrationMockClient({
+      relationExists: [true, true, false],
+      columnExists: [false],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, migrations)).resolves.toEqual({
+      mode: 'read-only-migration-status',
+      migrationHistory: {
+        tableExists: true,
+        totalMigrationRows: 3,
+        appliedMigrationRows: 3,
+        unfinishedMigrationRows: 0,
+        rolledBackMigrationRows: 0,
+      },
+      migrationCount: 3,
+      readyMigrationCount: 1,
+      pendingMigrationCount: 2,
+      pendingStructureMigrationCount: 1,
+      pendingIdempotentMigrationCount: 1,
+      pendingStructureMigrationPaths: [
+        'prisma/migrations/20260530000001_missing_column/migration.sql',
+      ],
+      pendingIdempotentMigrationPaths: [
+        'prisma/migrations/20260530000002_missing_view/migration.sql',
+      ],
+      strictReady: false,
+      fullyReady: false,
+      checks: [
+        {
+          path: 'prisma/migrations/20260530000000_ready_table/migration.sql',
+          kind: 'structure',
+          ready: true,
+          targetRelations: [{ relationName: '"ReadyTable"', exists: true }],
+        },
+        {
+          path: 'prisma/migrations/20260530000001_missing_column/migration.sql',
+          kind: 'structure',
+          ready: false,
+          targetRelations: [{ relationName: '"MissingColumnTable"', exists: true }],
+          columnCheck: {
+            tableName: 'MissingColumnTable',
+            columnName: 'sourceSpu',
+            exists: false,
+          },
+        },
+        {
+          path: 'prisma/migrations/20260530000002_missing_view/migration.sql',
+          kind: 'idempotent',
+          ready: false,
+          targetRelations: [{ relationName: 'external.missing_view_v1', exists: false }],
+        },
+      ],
+    })
+
+    expect(client.query).not.toHaveBeenCalledWith(
+      expect.stringContaining('CREATE'),
+    )
+  })
+
+  it('marks migration readiness unsafe when Prisma migration history is missing', async () => {
+    const migrations = [
+      {
+        targetRelation: '"ReadyTable"',
+        path: 'prisma/migrations/20260530000000_ready_table/migration.sql',
+      },
+    ]
+    const client = createMigrationMockClient({
+      migrationHistoryTableExists: false,
+      relationExists: [true],
+    })
+
+    await expect(getMigrationHistoryStatus(client)).resolves.toEqual({
+      tableExists: false,
+      totalMigrationRows: 0,
+      appliedMigrationRows: 0,
+      unfinishedMigrationRows: 0,
+      rolledBackMigrationRows: 0,
+    })
+
+    await expect(getRequiredMigrationReadiness(client, migrations)).resolves.toEqual(
+      expect.objectContaining({
+        readyMigrationCount: 1,
+        pendingMigrationCount: 0,
+        strictReady: false,
+        fullyReady: false,
+        migrationHistory: expect.objectContaining({
+          tableExists: false,
+        }),
+      }),
+    )
+  })
+
+  it('reports external read-only columns that are not in the field contract', async () => {
+    const expectedColumnRows = loadExpectedExternalContractRows()
+    const expectedViews = Array.from(new Set(expectedColumnRows.map((row) => row.table_name)))
+    const client = {
+      query: jest.fn((sql) => {
+        if (String(sql).includes('FROM information_schema.views')) {
+          return Promise.resolve({
+            rows: expectedViews.map((table_name) => ({ table_name })),
+          })
+        }
+        if (String(sql).includes('FROM information_schema.columns')) {
+          return Promise.resolve({
+            rows: [
+              ...expectedColumnRows,
+              { table_name: 'materials_v1', column_name: 'category_id' },
+            ],
+          })
+        }
+        throw new Error(`unexpected sql: ${sql}`)
+      }),
+    }
+
+    await expect(getExternalReadonlyContractSummary(client)).resolves.toEqual(
+      expect.objectContaining({
+        missingViews: [],
+        missingColumns: [],
+        extraColumns: [{ viewName: 'materials_v1', columnName: 'category_id' }],
+      }),
+    )
+  })
+
+  it('reports external stable business key gaps and duplicate groups', async () => {
+    const client = {
+      query: jest.fn((sql, params) => {
+        const query = String(sql)
+        if (query.includes('SELECT to_regclass($1) AS relation_name')) {
+          return Promise.resolve({ rows: [{ relation_name: params[0] }] })
+        }
+        if (query.includes('AS row_count')) {
+          const rowCount =
+            query.includes('FROM external."materials_v1"') &&
+            query.includes('"material_code"')
+              ? 2
+              : query.includes('FROM external."product_bom_v1"') &&
+                  query.includes('"item_code"')
+                ? 3
+                : 0
+          return Promise.resolve({ rows: [{ row_count: rowCount }] })
+        }
+        if (query.includes('AS duplicate_groups')) {
+          const duplicateGroups =
+            query.includes('FROM external."materials_v1"') &&
+            query.includes('"material_code"')
+              ? 1
+              : 0
+          return Promise.resolve({ rows: [{ duplicate_groups: duplicateGroups }] })
+        }
+        throw new Error(`unexpected sql: ${sql}`)
+      }),
+    }
+
+    await expect(getExternalStableKeyQualitySummary(client)).resolves.toEqual(
+      expect.objectContaining({
+        missingRequired: [
+          { viewName: 'materials_v1', columnName: 'material_code', rowCount: 2 },
+          { viewName: 'product_bom_v1', columnName: 'item_code', rowCount: 3 },
+        ],
+        duplicateGroups: [
+          { viewName: 'materials_v1', columnName: 'material_code', groupCount: 1 },
+        ],
+        skippedViews: [],
+      }),
+    )
+  })
+
+  it('reports external business columns derived from internal row ids beyond coalesce fallbacks', async () => {
+    const client = {
+      query: jest.fn(() =>
+        Promise.resolve({
+          rows: [
+            {
+              view_name: 'product_bom_v1',
+              view_definition: `
+                SELECT
+                  ph.id AS item_code,
+                  CASE WHEN sku.id IS NOT NULL THEN sku.id ELSE NULL END AS sku_business_key,
+                  h.code AS hardware_code
+              `,
+            },
+            {
+              view_name: 'materials_v1',
+              view_definition: `
+                SELECT
+                  m.id AS material_id,
+                  m.code AS material_code
+              `,
+            },
+          ],
+        }),
+      ),
+    }
+
+    await expect(getExternalViewIdFallbackRisks(client)).resolves.toEqual([
+      expect.objectContaining({
+        view_name: 'product_bom_v1',
+        column_name: 'item_code',
+        risk: 'id_fallback_in_business_column',
+      }),
+      expect.objectContaining({
+        view_name: 'product_bom_v1',
+        column_name: 'sku_business_key',
+        risk: 'id_fallback_in_business_column',
+      }),
+    ])
+  })
+
+  it('reports concrete PreSku formalization lifecycle mismatch samples', async () => {
+    const sampleRows = [
+      {
+        mismatchReason: 'formalized_without_product_sku',
+        preSkuId: 'pre_sku_1',
+        draftGroupId: 'draft_1',
+        draftGroupCode: 'DG-001',
+        sequence: 1,
+        status: 'FORMALIZED',
+        linkedFormalSkuId: null,
+        linkedSkuCode: null,
+        linkedSkuDeletedAt: null,
+        linkedProductId: null,
+        linkedProductDeletedAt: null,
+      },
+    ]
+    const client = {
+      query: jest.fn((sql) => {
+        const query = String(sql)
+        expect(query).toContain('formalized_without_product_sku')
+        expect(query).toContain('active_product_sku_points_to_unformalized_pre_sku')
+        expect(query).toContain('LIMIT 20')
+        return Promise.resolve({ rows: sampleRows })
+      }),
+    }
+
+    await expect(getPreSkuFormalizationLifecycleMismatchSamples(client)).resolves.toEqual(sampleRows)
+  })
+
+  it('uses the same active-product scope for structured SKU summaries and duplicate checks', async () => {
+    const client = {
+      query: jest.fn((sql) => {
+        const query = String(sql)
+        expect(query).toContain('JOIN "IntakeNonIntegratedProduct" product')
+        expect(query).toContain('product."deletedAt" IS NULL')
+        if (query.includes('duplicate_groups')) {
+          expect(query).toContain('upper(btrim("skuCode"))')
+          return Promise.resolve({ rows: [{ duplicate_groups: 0 }] })
+        }
+        return Promise.resolve({ rows: [{ total: 3, ready: 2, incomplete: 1 }] })
+      }),
+    }
+
+    await expect(getStructuredSkuSummary(client)).resolves.toEqual({
+      total: 3,
+      ready: 2,
+      incomplete: 1,
+    })
+    await expect(getDuplicateGroupCount(client, 'skuCode')).resolves.toBe(0)
+  })
+
+  it('fails when structured master data drifts from compatibility snapshots', () => {
+    expect(() =>
+      assertNoMasterDataTruthDrift({
+        payloadSyncDiffCount: 1,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      }),
+    ).toThrow('payloadSyncDiffCount')
+
+    expect(() =>
+      assertNoMasterDataTruthDrift({
+        payloadSyncDiffCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 1,
+        duplicateBarcodeGroups: 0,
+      }),
+    ).toThrow('duplicateSkuCodeGroups')
+
+    expect(() =>
+      assertNoMasterDataTruthDrift({
+        payloadSyncDiffCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDeletedAtMismatchCount: 1,
+        productSkuSoftDeleteTombstoneRiskCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      }),
+    ).toThrow('productSkuProfileDeletedAtMismatchCount')
+
+    expect(() =>
+      assertNoMasterDataTruthDrift({
+        payloadSyncDiffCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        productSkuSoftDeleteTombstoneRiskCount: 1,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      }),
+    ).toThrow('productSkuSoftDeleteTombstoneRiskCount')
+  })
+
+  it('builds a single hard-ready gate across migrations, contracts, quality debt, and snapshots', () => {
+    const cleanReport = {
+      migrationApplicationStatus: { fullyReady: true },
+      databaseGuards: { missingOrInvalid: [] },
+      assetCenterSourceData: {
+        active_asset_families_without_series: 0,
+        active_asset_variants_without_model_url: 0,
+        active_asset_variants_without_thumbnail_url: 0,
+      },
+      assetVariantDuplicateBarcodeGroups: 0,
+      structuredSkuItems: { incomplete: 0 },
+      duplicateSkuCodeGroups: 0,
+      duplicateBarcodeGroups: 0,
+      productSkuWithoutAssetProfileCount: 0,
+      productSkuProfileDuplicateBarcodeGroups: 0,
+      productSkuProfileDeletedAtMismatchCount: 0,
+      productSkuSoftDeleteTombstoneRiskCount: 0,
+      productSkuMissingNameCount: 0,
+      productSkuPriceCostStockRiskCount: 0,
+      productSkuFormalTruthAttributeRiskCount: 0,
+      preSkuMissingBasicInfoCount: 0,
+      preSkuDuplicateFormalSkuCodeGroups: 0,
+      preSkuDuplicateBarcodeGroups: 0,
+      preSkuFormalizationLifecycleMismatchCount: 0,
+      draftGroupInvalidProcessShapeCount: 0,
+      preSkuInvalidProcessShapeCount: 0,
+      nonIntegratedProductMissingProfileCount: 0,
+      nonIntegratedProductProfiles: {
+        missing_product_name: 0,
+        missing_product_category: 0,
+        missing_development_kind: 0,
+      },
+      productPatentRecords: { temporary_id_count: 0 },
+      masterDataQualityDecisions: {
+        openApprovedIncomplete: 0,
+        blankReasonRisk: 0,
+        placeholderReasonRisk: 0,
+        placeholderDecidedByRisk: 0,
+        placeholderResolvedByRisk: 0,
+        duplicateOpenTargetRisk: 0,
+      },
+      payloadSyncDiffCount: 0,
+      productSkuProfileSnapshotDiffCount: 0,
+      preSkuBasicInfoSnapshotDiffCount: 0,
+      nonIntegratedProductProfilePayloadDiffCount: 0,
+      nonIntegratedProductStockSourcePayloadDiffCount: 0,
+      externalIntakeSkuItemsView: { exists: true },
+      externalIntakeReadyViews: { exists: true },
+      externalProductSkusView: { exists: true },
+      externalProductDetailViews: { exists: true },
+      externalReadonlyContract: {
+        missingViews: [],
+        missingColumns: [],
+        extraColumns: [],
+      },
+      externalStableKeyQuality: {
+        missingRequired: [],
+        duplicateGroups: [],
+      },
+      externalViewJsonSourceDependencyRisks: [],
+      externalViewIdFallbackRisks: [],
+      externalIntakeProductPeopleSourceRisks: [],
+    }
+
+    expect(buildFoundationHardReadyGate(cleanReport)).toEqual({
+      hardReady: true,
+      blockerCount: 0,
+      blockerSourceCounts: {},
+      blockers: [],
+    })
+
+    const blockedGate = buildFoundationHardReadyGate({
+      ...cleanReport,
+      migrationApplicationStatus: { fullyReady: false },
+      structuredSkuItems: { incomplete: 2 },
+      nonIntegratedProductProfiles: {
+        missing_product_name: 0,
+        missing_product_category: 3,
+        missing_development_kind: 3,
+      },
+      preSkuFormalizationLifecycleMismatchCount: 1,
+      externalViewJsonSourceDependencyRisks: [{ viewName: 'external.sensitive_v1' }],
+    })
+
+    expect(blockedGate.hardReady).toBe(false)
+    expect(blockedGate.blockerSourceCounts).toEqual({
+      externalViewJsonSourceDependencyRisks: 1,
+      migrationApplicationStatus: 1,
+      nonIntegratedProductProfiles: 2,
+      preSkuLifecycle: 1,
+      structuredSkuItems: 1,
+    })
+    expect(blockedGate.blockers.map((blocker) => blocker.key)).toEqual(
+      expect.arrayContaining([
+        'fullyReady',
+        'incomplete',
+        'missing_product_category',
+        'missing_development_kind',
+        'preSkuFormalizationLifecycleMismatchCount',
+        'rowCount',
+      ]),
+    )
+    expect(() =>
+      assertFoundationHardReadyGate({ ...cleanReport, foundationHardReadyGate: blockedGate }),
+    ).toThrow('foundationHardReadyGate.blockers')
+
+    const summary = buildFoundationHardReadySummary({
+      ...cleanReport,
+      mode: 'migration-dry-run',
+      rolledBack: true,
+      migrationApplicationStatus: {
+        appliedMigrationCount: 50,
+        pendingStructureMigrationCount: 11,
+        replayableIdempotentMigrationCount: 39,
+        strictReady: false,
+        fullyReady: false,
+      },
+      foundationHardReadyGate: {
+        ...blockedGate,
+        blockers: [
+          ...blockedGate.blockers,
+          {
+            source: 'structuredSkuItems',
+            key: 'sensitiveSample',
+            value: '敏感产品名',
+            message: '这段说明不能进入摘要。',
+          },
+        ],
+      },
+      incompleteSkuItemSamples: [{ productName: '敏感产品名', skuCode: 'SKU001' }],
+    })
+
+    expect(summary).toEqual(
+      expect.objectContaining({
+        mode: 'migration-dry-run',
+        rolledBack: true,
+        hardReady: false,
+        blockerCount: blockedGate.blockerCount,
+        blockerKeys: expect.arrayContaining([
+          'migrationApplicationStatus:fullyReady',
+          'structuredSkuItems:incomplete',
+        ]),
+        blockerValues: expect.objectContaining({
+          'migrationApplicationStatus:fullyReady': false,
+          'structuredSkuItems:incomplete': 2,
+        }),
+        migrationApplicationStatus: {
+          source: 'transactional-dry-run-replay',
+          appliedMigrationCount: 50,
+          pendingStructureMigrationCount: 11,
+          replayableIdempotentMigrationCount: 39,
+          strictReady: false,
+          fullyReady: false,
+        },
+      }),
+    )
+    expect(JSON.stringify(summary)).not.toContain('敏感产品名')
+    expect(JSON.stringify(summary)).not.toContain('incompleteSkuItemSamples')
+  })
+
+  it('prints only the redacted hard-ready summary when summary stdout is requested', () => {
+    const logSpy = jest.spyOn(console, 'log').mockImplementation(() => undefined)
+    printFoundationHardReadyReport(
+      { summaryStdout: true },
+      {
+        mode: 'migration-dry-run',
+        rolledBack: true,
+        migrationApplicationStatus: {
+          appliedMigrationCount: 50,
+          pendingStructureMigrationCount: 11,
+          replayableIdempotentMigrationCount: 39,
+          strictReady: false,
+          fullyReady: false,
+        },
+        foundationHardReadyGate: {
+          hardReady: false,
+          blockerCount: 1,
+          blockerSourceCounts: { structuredSkuItems: 1 },
+          blockers: [
+            {
+              source: 'structuredSkuItems',
+              key: 'sampleProduct',
+              value: '敏感产品名',
+              message: '包含敏感产品名的完整说明不应进入 stdout。',
+            },
+          ],
+        },
+        incompleteSkuItemSamples: [{ productName: '敏感产品名' }],
+      },
+    )
+
+    expect(logSpy).toHaveBeenCalledTimes(1)
+    const stdout = logSpy.mock.calls[0][0]
+    expect(stdout).toContain('"blockerKeys"')
+    expect(stdout).toContain('"source": "transactional-dry-run-replay"')
+    expect(stdout).not.toContain('敏感产品名')
+    expect(stdout).not.toContain('incompleteSkuItemSamples')
+    logSpy.mockRestore()
+  })
+
+  it('allows clean structured master data drift counters', () => {
+    expect(() =>
+      assertNoMasterDataTruthDrift({
+        payloadSyncDiffCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        productSkuSoftDeleteTombstoneRiskCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+      }),
+    ).not.toThrow()
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js b/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
new file mode 100644
index 00000000..13174155
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
@@ -0,0 +1,686 @@
+const {
+  COMMANDS,
+  buildMissingMigrationHistoryEvidence,
+  buildReadinessReport,
+  buildReadinessNextActionPlan,
+  countPendingPrismaMigrations,
+  evaluateCommandResult,
+  extractJson,
+  listPendingPrismaMigrations,
+  parseArgs,
+  summarizeSqlDiff,
+  writeJsonReport,
+} = require('../../scripts/verify-master-data-readiness')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+
+function commandResult(id, ok, data) {
+  return {
+    id,
+    label: id,
+    command: id,
+    ok,
+    status: ok ? 0 : 1,
+    data,
+    jsonError: '',
+    stdout: '',
+    stderr: '',
+  }
+}
+
+function cleanResults(overrides = {}) {
+  return COMMANDS.map((command) =>
+    commandResult(command.id, true, overrides[command.id] ?? {}),
+  )
+}
+
+describe('verify-master-data-readiness', () => {
+  it('parses optional audit output path', () => {
+    expect(parseArgs([])).toEqual({ outputPath: '' })
+    expect(parseArgs(['--output', '.master-data-audits/readiness.json'])).toEqual({
+      outputPath: '.master-data-audits/readiness.json',
+    })
+    expect(parseArgs(['--output=.master-data-audits/readiness.json'])).toEqual({
+      outputPath: '.master-data-audits/readiness.json',
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--force'])).toThrow('未知参数')
+  })
+
+  it('can write readiness reports to a local audit file even when not hard-ready', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-readiness-'))
+    const outputPath = writeJsonReport(
+      'nested/readiness.json',
+      { hardReady: false, blockers: [{ key: 'pendingMigrations' }] },
+      tempDir,
+    )
+
+    expect(outputPath).toBe(path.join(tempDir, 'nested/readiness.json'))
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual({
+      hardReady: false,
+      blockers: [{ key: 'pendingMigrations' }],
+    })
+  })
+
+  it('extracts JSON from command stdout with npm noise', () => {
+    expect(extractJson('before\n{"ok":true,"count":1}\nafter')).toEqual({
+      ok: true,
+      count: 1,
+    })
+    expect(extractJson('')).toBeNull()
+    expect(extractJson('CREATE TABLE "PreSkuBasicInfo" ("id" TEXT NOT NULL);')).toBeNull()
+  })
+
+  it('evaluates command status and parsed JSON', () => {
+    expect(
+      evaluateCommandResult(
+        { id: 'sample', label: 'sample', command: 'node', args: ['x.js'] },
+        { status: 0, stdout: '{"ok":true}', stderr: '' },
+      ),
+    ).toEqual(expect.objectContaining({
+      id: 'sample',
+      ok: true,
+      data: { ok: true },
+      jsonError: '',
+    }))
+  })
+
+  it('counts pending migrations from Prisma migrate status output', () => {
+    const migrateStatusOutput = [
+      'Following migrations have not yet been applied:',
+      '20260501000000_a',
+      '20260502000000_b',
+      '',
+      'To apply migrations in development run prisma migrate dev.',
+    ].join('\n')
+
+    expect(countPendingPrismaMigrations(migrateStatusOutput)).toBe(2)
+    expect(listPendingPrismaMigrations(migrateStatusOutput)).toEqual([
+      '20260501000000_a',
+      '20260502000000_b',
+    ])
+    expect(countPendingPrismaMigrations('Database schema is up to date!')).toBe(0)
+    expect(listPendingPrismaMigrations('Database schema is up to date!')).toEqual([])
+  })
+
+  it('summarizes current schema SQL diff evidence without dumping full output', () => {
+    expect(
+      summarizeSqlDiff([
+        'Loaded Prisma config from prisma.config.ts.',
+        '-- CreateTable',
+        'CREATE TABLE "PreSkuBasicInfo" (',
+        '  "id" TEXT NOT NULL',
+        ');',
+        'ALTER TABLE "ProductSKU" ADD COLUMN "deletedAt" TIMESTAMP(3);',
+      ].join('\n')),
+    ).toEqual({
+      sqlStatementCount: 2,
+      statements: [
+        'CREATE TABLE "PreSkuBasicInfo" ( "id" TEXT NOT NULL );',
+        'ALTER TABLE "ProductSKU" ADD COLUMN "deletedAt" TIMESTAMP(3);',
+      ],
+      truncated: false,
+    })
+  })
+
+  it('explains the safe sequence when Prisma migration history is missing', () => {
+    expect(
+      buildMissingMigrationHistoryEvidence({
+        migrationHistory: {
+          tableExists: false,
+          totalMigrationRows: 0,
+          unfinishedMigrationRows: 0,
+          rolledBackMigrationRows: 0,
+        },
+      }),
+    ).toEqual(expect.objectContaining({
+      migrationHistory: expect.objectContaining({ tableExists: false }),
+      requiredSequence: expect.arrayContaining([
+        '重新生成可校验数据库备份。',
+        'baseline resolve 完成后，再应用治理护栏迁移并重跑 readiness。',
+      ]),
+      forbiddenShortcut: expect.stringContaining('禁止'),
+    }))
+  })
+
+  it('groups blockers into an ordered next action plan', () => {
+    const plan = buildReadinessNextActionPlan([
+        { source: 'current-schema-diff', key: 'hasSqlDiff' },
+        { source: 'migration-status', key: 'pendingStructureMigrationCount' },
+        { source: 'foundation-dry-run', key: 'structuredSkuItems.incomplete' },
+        { source: 'foundation-dry-run', key: 'masterDataQualityDecisions.placeholderReasonRisk' },
+        { source: 'foundation-dry-run', key: 'preSkuFormalizationLifecycleMismatchCount' },
+      ])
+
+    expect(plan).toEqual({
+      stageCount: 4,
+      stages: [
+        expect.objectContaining({ id: 'repair-prisma-structure-and-history' }),
+        expect.objectContaining({ id: 'apply-governance-migrations' }),
+        expect.objectContaining({ id: 'clean-historical-master-data-fields' }),
+        expect.objectContaining({ id: 'resolve-pre-sku-formalization-lifecycle' }),
+      ],
+    })
+    expect(plan.stages[0].commands).toEqual(expect.arrayContaining([
+      expect.stringMatching(/--phase=apply-structure .*--expected-sha256 <repair-sql-sha256>/),
+      expect.stringMatching(/--phase=resolve-baseline .*--expected-sha256 <repair-sql-sha256>/),
+    ]))
+    expect(plan.stages[2].commands).toEqual(expect.arrayContaining([
+      'npm run db:cleanup-master-data -- --plan <confirmed-cleanup-plan.json>',
+      'npm run db:cleanup-master-data:validate -- --plan <confirmed-cleanup-plan.json> --output .master-data-audits/cleanup-plan-validation-current.json',
+      'npm run db:cleanup-master-data -- --apply --plan <confirmed-cleanup-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+    ]))
+    expect(plan.stages[2].guard).toContain('approvedIncompleteRows 必须为 0')
+    expect(plan.stages[2].guard).toContain('remainingMissingFieldCounts 必须为空')
+    expect(plan.stages[3].commands).toEqual(expect.arrayContaining([
+      'npm run db:foundation:validate-pre-sku-formalization-repair -- --plan .master-data-audits/pre-sku-formalization-repair-plan-current.json --output .master-data-audits/pre-sku-formalization-repair-plan-validation-current.json',
+      'npm run db:foundation:apply-pre-sku-formalization-repair -- --template --output .master-data-audits/pre-sku-formalization-repair-execution-template-current.json',
+      'npm run db:foundation:apply-pre-sku-formalization-repair -- --plan <confirmed-pre-sku-lifecycle-plan.json> --output .master-data-audits/pre-sku-formalization-repair-execution-dry-run-current.json',
+      'npm run db:foundation:apply-pre-sku-formalization-repair -- --apply --confirm=I_UNDERSTAND_THIS_UPDATES_PRE_SKU_LIFECYCLE --plan <confirmed-pre-sku-lifecycle-plan.json> --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+    ]))
+  })
+
+  it('reports hard-ready only when commands, migrations, and quality blockers are clean', () => {
+    const report = buildReadinessReport(cleanResults({
+      'migration-status': {
+        fullyReady: true,
+        pendingStructureMigrationCount: 0,
+        pendingIdempotentMigrationCount: 0,
+        migrationHistory: {
+          tableExists: true,
+          unfinishedMigrationRows: 0,
+          rolledBackMigrationRows: 0,
+        },
+      },
+      'foundation-dry-run': {
+        assetCenterSourceData: {
+          active_asset_families_without_series: 0,
+          active_asset_variants_without_model_url: 0,
+          active_asset_variants_without_thumbnail_url: 0,
+        },
+        assetVariantDuplicateBarcodeGroups: 0,
+        structuredSkuItems: { incomplete: 0 },
+        nonIntegratedProductProfiles: {
+          missing_product_category: 0,
+          missing_development_kind: 0,
+        },
+        nonIntegratedProductMissingProfileCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+        payloadSyncDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        productSkuMissingNameCount: 0,
+        productSkuPriceCostStockRiskCount: 0,
+        productSkuFormalTruthAttributeRiskCount: 0,
+        productSkuWithoutAssetProfileCount: 0,
+        preSkuMissingBasicInfoCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDuplicateBarcodeGroups: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        preSkuDuplicateFormalSkuCodeGroups: 0,
+        preSkuDuplicateBarcodeGroups: 0,
+        draftGroupInvalidProcessShapeCount: 0,
+        preSkuInvalidProcessShapeCount: 0,
+        preSkuFormalizationLifecycleMismatchCount: 0,
+        masterDataQualityDecisions: {
+          openApprovedIncomplete: 0,
+          blankReasonRisk: 0,
+          placeholderReasonRisk: 0,
+          placeholderDecidedByRisk: 0,
+          placeholderResolvedByRisk: 0,
+          duplicateOpenTargetRisk: 0,
+        },
+        externalViewJsonSourceDependencyRisks: [],
+        externalViewIdFallbackRisks: [],
+        externalIntakeProductPeopleSourceRisks: [],
+      },
+    }))
+
+    expect(report.hardReady).toBe(true)
+    expect(report.status).toBe('hard-ready')
+    expect(report.blockers).toEqual([])
+    expect(report.nextActionPlan).toEqual({ stageCount: 0, stages: [] })
+  })
+
+  it('keeps migration history and pending migrations as hard blockers', () => {
+    const report = buildReadinessReport(cleanResults({
+      'migration-status': {
+        fullyReady: false,
+        pendingStructureMigrationCount: 2,
+        pendingIdempotentMigrationCount: 3,
+        pendingStructureMigrationPaths: [
+          'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+          'prisma/migrations/20260530130000_add_pre_sku_basic_info/migration.sql',
+        ],
+        pendingIdempotentMigrationPaths: [
+          'prisma/migrations/20260531143000_add_intake_master_data_check_constraints/migration.sql',
+          'prisma/migrations/20260531153000_add_spu_number_counter_check_constraints/migration.sql',
+          'prisma/migrations/20260531162000_add_spu_rule_product_category_unique_guard/migration.sql',
+        ],
+        migrationHistory: {
+          tableExists: false,
+          unfinishedMigrationRows: 1,
+          rolledBackMigrationRows: 1,
+        },
+      },
+      'foundation-dry-run': {
+        assetCenterSourceData: {
+          active_asset_families_without_series: 0,
+          active_asset_variants_without_model_url: 0,
+          active_asset_variants_without_thumbnail_url: 0,
+        },
+        assetVariantDuplicateBarcodeGroups: 0,
+        structuredSkuItems: { incomplete: 0 },
+        nonIntegratedProductProfiles: {
+          missing_product_category: 0,
+          missing_development_kind: 0,
+        },
+        nonIntegratedProductMissingProfileCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+        payloadSyncDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        productSkuMissingNameCount: 0,
+        productSkuPriceCostStockRiskCount: 0,
+        productSkuFormalTruthAttributeRiskCount: 0,
+        productSkuWithoutAssetProfileCount: 0,
+        preSkuMissingBasicInfoCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDuplicateBarcodeGroups: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        preSkuDuplicateFormalSkuCodeGroups: 0,
+        preSkuDuplicateBarcodeGroups: 0,
+        draftGroupInvalidProcessShapeCount: 0,
+        preSkuInvalidProcessShapeCount: 0,
+        preSkuFormalizationLifecycleMismatchCount: 0,
+        externalViewJsonSourceDependencyRisks: [],
+        externalViewIdFallbackRisks: [],
+        externalIntakeProductPeopleSourceRisks: [],
+      },
+    }))
+
+    expect(report.hardReady).toBe(false)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'migrationHistory.tableExists' }),
+        expect.objectContaining({
+          key: 'migrationHistory.tableExists',
+          evidence: expect.objectContaining({
+            requiredSequence: expect.arrayContaining([
+              '结构 diff 未归零前，先走授权结构修复演练和 apply-structure。',
+            ]),
+          }),
+        }),
+        expect.objectContaining({
+          key: 'pendingStructureMigrationCount',
+          value: 2,
+          evidence: expect.objectContaining({ pathCount: 2 }),
+        }),
+        expect.objectContaining({
+          key: 'pendingIdempotentMigrationCount',
+          value: 3,
+          evidence: expect.objectContaining({ pathCount: 3 }),
+        }),
+        expect.objectContaining({ key: 'fullyReady', value: false }),
+      ]),
+    )
+  })
+
+  it('treats Prisma pending migrations as a hard blocker', () => {
+    const results = cleanResults({
+      'migration-status': {
+        fullyReady: true,
+        pendingStructureMigrationCount: 0,
+        pendingIdempotentMigrationCount: 0,
+        migrationHistory: {
+          tableExists: true,
+          unfinishedMigrationRows: 0,
+          rolledBackMigrationRows: 0,
+        },
+      },
+      'foundation-dry-run': {
+        assetCenterSourceData: {
+          active_asset_families_without_series: 0,
+          active_asset_variants_without_model_url: 0,
+          active_asset_variants_without_thumbnail_url: 0,
+        },
+        assetVariantDuplicateBarcodeGroups: 0,
+        structuredSkuItems: { incomplete: 0 },
+        nonIntegratedProductProfiles: {
+          missing_product_category: 0,
+          missing_development_kind: 0,
+        },
+        nonIntegratedProductMissingProfileCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+        payloadSyncDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        productSkuMissingNameCount: 0,
+        productSkuPriceCostStockRiskCount: 0,
+        productSkuFormalTruthAttributeRiskCount: 0,
+        productSkuWithoutAssetProfileCount: 0,
+        preSkuMissingBasicInfoCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDuplicateBarcodeGroups: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        preSkuDuplicateFormalSkuCodeGroups: 0,
+        preSkuDuplicateBarcodeGroups: 0,
+        draftGroupInvalidProcessShapeCount: 0,
+        preSkuInvalidProcessShapeCount: 0,
+        preSkuFormalizationLifecycleMismatchCount: 0,
+        externalViewJsonSourceDependencyRisks: [],
+        externalViewIdFallbackRisks: [],
+        externalIntakeProductPeopleSourceRisks: [],
+      },
+    })
+    const prismaStatus = results.find((result) => result.id === 'prisma-migrate-status')
+    prismaStatus.ok = false
+    prismaStatus.status = 1
+    prismaStatus.stdout = [
+      'Following migrations have not yet been applied:',
+      '20260501000000_a',
+      '20260502000000_b',
+      'To apply migrations in production run prisma migrate deploy.',
+    ].join('\n')
+
+    const report = buildReadinessReport(results)
+
+    expect(report.hardReady).toBe(false)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          source: 'prisma-migrate-status',
+          key: 'pendingMigrations',
+          value: 2,
+          evidence: {
+            migrationCount: 2,
+            migrations: ['20260501000000_a', '20260502000000_b'],
+            truncated: false,
+          },
+        }),
+      ]),
+    )
+  })
+
+  it('treats current database to schema drift as a hard blocker', () => {
+    const results = cleanResults({
+      'migration-status': {
+        fullyReady: true,
+        pendingStructureMigrationCount: 0,
+        pendingIdempotentMigrationCount: 0,
+        migrationHistory: {
+          tableExists: true,
+          unfinishedMigrationRows: 0,
+          rolledBackMigrationRows: 0,
+        },
+      },
+      'foundation-dry-run': {
+        assetCenterSourceData: {
+          active_asset_families_without_series: 0,
+          active_asset_variants_without_model_url: 0,
+          active_asset_variants_without_thumbnail_url: 0,
+        },
+        assetVariantDuplicateBarcodeGroups: 0,
+        structuredSkuItems: { incomplete: 0 },
+        nonIntegratedProductProfiles: {
+          missing_product_category: 0,
+          missing_development_kind: 0,
+        },
+        nonIntegratedProductMissingProfileCount: 0,
+        duplicateSkuCodeGroups: 0,
+        duplicateBarcodeGroups: 0,
+        payloadSyncDiffCount: 0,
+        nonIntegratedProductProfilePayloadDiffCount: 0,
+        nonIntegratedProductStockSourcePayloadDiffCount: 0,
+        productSkuMissingNameCount: 0,
+        productSkuPriceCostStockRiskCount: 0,
+        productSkuFormalTruthAttributeRiskCount: 0,
+        productSkuWithoutAssetProfileCount: 0,
+        preSkuMissingBasicInfoCount: 0,
+        productSkuProfileSnapshotDiffCount: 0,
+        productSkuProfileDuplicateBarcodeGroups: 0,
+        productSkuProfileDeletedAtMismatchCount: 0,
+        preSkuBasicInfoSnapshotDiffCount: 0,
+        preSkuDuplicateFormalSkuCodeGroups: 0,
+        preSkuDuplicateBarcodeGroups: 0,
+        draftGroupInvalidProcessShapeCount: 0,
+        preSkuInvalidProcessShapeCount: 0,
+        preSkuFormalizationLifecycleMismatchCount: 0,
+        externalViewJsonSourceDependencyRisks: [],
+        externalViewIdFallbackRisks: [],
+        externalIntakeProductPeopleSourceRisks: [],
+      },
+    })
+    const currentSchemaDiff = results.find((result) => result.id === 'current-schema-diff')
+    currentSchemaDiff.ok = false
+    currentSchemaDiff.status = 2
+    currentSchemaDiff.stdout = 'CREATE TABLE "PreSkuBasicInfo" ("id" TEXT NOT NULL);'
+
+    const report = buildReadinessReport(results)
+
+    expect(report.hardReady).toBe(false)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          source: 'current-schema-diff',
+          key: 'hasSqlDiff',
+          value: true,
+          evidence: {
+            sqlStatementCount: 1,
+            statements: ['CREATE TABLE "PreSkuBasicInfo" ("id" TEXT NOT NULL);'],
+            truncated: false,
+          },
+        }),
+      ]),
+    )
+  })
+
+  it('treats visible historical data quality debt as not hard-ready', () => {
+    const report = buildReadinessReport(cleanResults({
+      'migration-status': {
+        fullyReady: true,
+        pendingStructureMigrationCount: 0,
+        pendingIdempotentMigrationCount: 0,
+        migrationHistory: {
+          tableExists: true,
+          unfinishedMigrationRows: 0,
+          rolledBackMigrationRows: 0,
+        },
+      },
+      'foundation-dry-run': {
+        assetCenterSourceData: {
+          active_asset_families_without_series: 1,
+          active_asset_variants_without_model_url: 2,
+          active_asset_variants_without_thumbnail_url: 3,
+        },
+        assetVariantDuplicateBarcodeGroups: 1,
+        structuredSkuItems: { incomplete: 2 },
+        nonIntegratedProductProfiles: {
+          missing_product_category: 3,
+          missing_development_kind: 4,
+        },
+        nonIntegratedProductMissingProfileCount: 1,
+        duplicateSkuCodeGroups: 1,
+        duplicateBarcodeGroups: 1,
+        payloadSyncDiffCount: 1,
+        nonIntegratedProductProfilePayloadDiffCount: 1,
+        nonIntegratedProductStockSourcePayloadDiffCount: 1,
+        productSkuMissingNameCount: 1,
+        productSkuPriceCostStockRiskCount: 2,
+        productSkuFormalTruthAttributeRiskCount: 1,
+        productSkuWithoutAssetProfileCount: 1,
+        preSkuMissingBasicInfoCount: 1,
+        productSkuProfileSnapshotDiffCount: 1,
+        productSkuProfileDuplicateBarcodeGroups: 1,
+        productSkuProfileDeletedAtMismatchCount: 1,
+        productSkuSoftDeleteTombstoneRiskCount: 1,
+        preSkuBasicInfoSnapshotDiffCount: 1,
+        preSkuDuplicateFormalSkuCodeGroups: 1,
+        preSkuDuplicateBarcodeGroups: 1,
+        draftGroupInvalidProcessShapeCount: 1,
+        preSkuInvalidProcessShapeCount: 1,
+        incompleteSkuItemSamples: [
+          {
+            id: 'sku-row-1',
+            productId: 'product-1',
+            spu: 'SPU001',
+            missingRequiredFields: ['sku_code', 'model'],
+          },
+        ],
+        nonIntegratedProductProfileQualitySamples: [
+          {
+            id: 'product-1',
+            spu: 'SPU001',
+            productCategory: '',
+            productDevelopmentKind: '',
+            missingFields: ['productCategory', 'productDevelopmentKind'],
+          },
+          {
+            id: 'product-2',
+            spu: 'SPU002',
+            productCategory: '书架',
+            productDevelopmentKind: '',
+            missingFields: ['productDevelopmentKind'],
+          },
+        ],
+        preSkuFormalizationLifecycleMismatchCount: 1,
+        preSkuFormalizationLifecycleMismatchSamples: [
+          {
+            mismatchReason: 'formalized_without_product_sku',
+            preSkuId: 'pre_sku_1',
+            draftGroupCode: 'DG-001',
+            sequence: 1,
+          },
+        ],
+        masterDataQualityDecisions: {
+          openApprovedIncomplete: 2,
+          blankReasonRisk: 1,
+          placeholderReasonRisk: 3,
+          placeholderDecidedByRisk: 4,
+          placeholderResolvedByRisk: 5,
+          duplicateOpenTargetRisk: 1,
+        },
+        externalViewJsonSourceDependencyRisks: [{ view: 'external.sample_v1' }],
+        externalViewIdFallbackRisks: [{ view: 'external.sample_v1' }],
+        externalIntakeProductPeopleSourceRisks: [{ view: 'external.sample_v1' }],
+      },
+    }))
+
+    expect(report.hardReady).toBe(false)
+    expect(report.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          key: 'structuredSkuItems.incomplete',
+          value: 2,
+          evidence: {
+            sampleCount: 1,
+            samples: [expect.objectContaining({ id: 'sku-row-1', spu: 'SPU001' })],
+            truncated: false,
+          },
+        }),
+        expect.objectContaining({
+          key: 'nonIntegratedProductProfiles.missing_product_category',
+          value: 3,
+          evidence: {
+            sampleCount: 1,
+            samples: [expect.objectContaining({ id: 'product-1', spu: 'SPU001' })],
+            truncated: false,
+          },
+        }),
+        expect.objectContaining({
+          key: 'nonIntegratedProductProfiles.missing_development_kind',
+          value: 4,
+          evidence: {
+            sampleCount: 2,
+            samples: [
+              expect.objectContaining({ id: 'product-1', spu: 'SPU001' }),
+              expect.objectContaining({ id: 'product-2', spu: 'SPU002' }),
+            ],
+            truncated: false,
+          },
+        }),
+        expect.objectContaining({
+          key: 'assetCenterSourceData.active_asset_families_without_series',
+          value: 1,
+        }),
+        expect.objectContaining({
+          key: 'assetCenterSourceData.active_asset_variants_without_model_url',
+          value: 2,
+        }),
+        expect.objectContaining({
+          key: 'assetCenterSourceData.active_asset_variants_without_thumbnail_url',
+          value: 3,
+        }),
+        expect.objectContaining({ key: 'assetVariantDuplicateBarcodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'nonIntegratedProductMissingProfileCount', value: 1 }),
+        expect.objectContaining({ key: 'duplicateSkuCodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'duplicateBarcodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'payloadSyncDiffCount', value: 1 }),
+        expect.objectContaining({ key: 'nonIntegratedProductProfilePayloadDiffCount', value: 1 }),
+        expect.objectContaining({ key: 'nonIntegratedProductStockSourcePayloadDiffCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuMissingNameCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuWithoutAssetProfileCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuPriceCostStockRiskCount', value: 2 }),
+        expect.objectContaining({ key: 'productSkuFormalTruthAttributeRiskCount', value: 1 }),
+        expect.objectContaining({ key: 'preSkuMissingBasicInfoCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuProfileSnapshotDiffCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuProfileDuplicateBarcodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'productSkuProfileDeletedAtMismatchCount', value: 1 }),
+        expect.objectContaining({ key: 'productSkuSoftDeleteTombstoneRiskCount', value: 1 }),
+        expect.objectContaining({ key: 'preSkuBasicInfoSnapshotDiffCount', value: 1 }),
+        expect.objectContaining({ key: 'preSkuDuplicateFormalSkuCodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'preSkuDuplicateBarcodeGroups', value: 1 }),
+        expect.objectContaining({ key: 'draftGroupInvalidProcessShapeCount', value: 1 }),
+        expect.objectContaining({ key: 'preSkuInvalidProcessShapeCount', value: 1 }),
+        expect.objectContaining({
+          key: 'preSkuFormalizationLifecycleMismatchCount',
+          value: 1,
+          evidence: {
+            sampleCount: 1,
+            samples: [
+              expect.objectContaining({
+                preSkuId: 'pre_sku_1',
+                draftGroupCode: 'DG-001',
+              }),
+            ],
+            truncated: false,
+          },
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.openApprovedIncomplete',
+          value: 2,
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.blankReasonRisk',
+          value: 1,
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.placeholderReasonRisk',
+          value: 3,
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.placeholderDecidedByRisk',
+          value: 4,
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.placeholderResolvedByRisk',
+          value: 5,
+        }),
+        expect.objectContaining({
+          key: 'masterDataQualityDecisions.duplicateOpenTargetRisk',
+          value: 1,
+        }),
+        expect.objectContaining({ key: 'externalViewJsonSourceDependencyRisks', value: 1 }),
+        expect.objectContaining({ key: 'externalViewIdFallbackRisks', value: 1 }),
+        expect.objectContaining({ key: 'externalIntakeProductPeopleSourceRisks', value: 1 }),
+      ]),
+    )
+  })
+})
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-truth-sources.test.js b/furniture-3d-system/tests/scripts/verify-master-data-truth-sources.test.js
new file mode 100644
index 00000000..b12f21ec
--- /dev/null
+++ b/furniture-3d-system/tests/scripts/verify-master-data-truth-sources.test.js
@@ -0,0 +1,505 @@
+const { spawnSync } = require('node:child_process')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const {
+  parseArgs,
+  validateTruthSourceManifest,
+} = require('../../scripts/verify-master-data-truth-sources')
+const {
+  CORE_MASTER_DATA_TRUTH_SOURCES,
+} = require('../../scripts/master-data-truth-sources')
+
+const ROOT_DIR = path.resolve(__dirname, '../..')
+
+function runVerifier() {
+  const result = spawnSync('node', ['scripts/verify-master-data-truth-sources.js'], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+  })
+
+  if (result.status !== 0) {
+    throw new Error(
+      [
+        `truth source verifier failed with status ${result.status}`,
+        result.stdout,
+        result.stderr,
+      ].join('\n'),
+    )
+  }
+
+  return JSON.parse(result.stdout)
+}
+
+function runVerifierWithArgs(args) {
+  const result = spawnSync('node', ['scripts/verify-master-data-truth-sources.js', ...args], {
+    cwd: ROOT_DIR,
+    encoding: 'utf8',
+  })
+
+  if (result.status !== 0) {
+    throw new Error(
+      [
+        `truth source verifier ${args.join(' ')} failed with status ${result.status}`,
+        result.stdout,
+        result.stderr,
+      ].join('\n'),
+    )
+  }
+
+  return JSON.parse(result.stdout)
+}
+
+describe('verify-master-data-truth-sources', () => {
+  it('parses optional JSON output path', () => {
+    expect(parseArgs(['--output', '.master-data-audits/truth-sources.json'])).toEqual({
+      outputPath: '.master-data-audits/truth-sources.json',
+    })
+    expect(parseArgs(['--output=.master-data-audits/truth-sources.json'])).toEqual({
+      outputPath: '.master-data-audits/truth-sources.json',
+    })
+    expect(() => parseArgs(['--output'])).toThrow('--output')
+  })
+
+  it('writes truth-source reports to an audit JSON file', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-truth-sources-output-'))
+    const outputPath = path.join(tempDir, 'truth-sources.json')
+    const report = runVerifierWithArgs(['--output', outputPath])
+
+    expect(JSON.parse(fs.readFileSync(outputPath, 'utf8'))).toEqual(
+      expect.objectContaining({
+        ok: true,
+        truthSourceCount: report.truthSourceCount,
+        truthSourceEntries: report.truthSourceEntries,
+      }),
+    )
+  })
+
+  it('keeps the machine-readable truth-source matrix aligned with schema and guards', () => {
+    const report = runVerifier()
+
+    expect(report.ok).toBe(true)
+    expect(report.truthSourceCount).toBeGreaterThanOrEqual(20)
+    expect(report.truthSourceEntries).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'asset-series',
+          primaryRelations: ['AssetSeries'],
+        }),
+        expect.objectContaining({
+          id: 'master-data-quality-decision',
+          primaryRelations: ['MasterDataQualityDecision'],
+          requiredGuardNames: expect.arrayContaining([
+            'MasterDataQualityDecision_reason_not_placeholder',
+            'MasterDataQualityDecision_decidedBy_not_placeholder',
+            'MasterDataQualityDecision_resolvedBy_not_placeholder',
+          ]),
+        }),
+        expect.objectContaining({
+          id: 'formal-bom-structure',
+          primaryRelations: ['Panel', 'PanelMaterial', 'ProductHardware', 'Hardware'],
+          notTruthSources: expect.arrayContaining([
+            'reference image estimator',
+            'REFERENCE_ESTIMATOR_*',
+            'reference-image-cost-catalog',
+          ]),
+          requiredGuardNames: expect.arrayContaining([
+            'Panel_identity_dimensions_valid',
+            'ProductHardware_quantities_geometry_valid',
+            'Hardware_code_key',
+          ]),
+        }),
+      ]),
+    )
+    expect(report.truthSourceEntryAuditCount).toBe(report.truthSourceCount)
+    expect(report.truthSourceEntryIssueCount).toBe(0)
+    expect(report.truthSourceEntryAudits).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'asset-series',
+          ok: true,
+          issueCount: 0,
+          primaryRelationCount: 1,
+        }),
+      ]),
+    )
+    expect(report.duplicateIds).toEqual([])
+    expect(report.missingPrimaryRelations).toEqual([])
+    expect(report.missingRequiredGuards).toEqual([])
+    expect(report.misassignedRequiredGuards).toEqual([])
+    expect(report.missingSnapshotFields).toEqual([])
+    expect(report.missingWriteBoundaryFiles).toEqual([])
+    expect(report.missingWriteBoundaryClassifications).toEqual([])
+    expect(report.missingPrimaryRelationWriteScopes).toEqual([])
+    expect(report.unmappedApprovedWriteScopes).toEqual([])
+    expect(report.uncoveredGuardRelations).toEqual([])
+    expect(report.incompleteEntries).toEqual([])
+    expect(report.compatibilitySnapshotSchemaFieldCount).toBeGreaterThanOrEqual(4)
+    expect(report.unmappedCompatibilitySnapshotFields).toEqual([])
+  })
+
+  it('fails when a truth source points to a missing Prisma model, guard, snapshot, write boundary, or omits a guarded relation', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          primaryRelations: ['MissingModel'],
+          compatibilitySnapshots: ['AssetSeries.missingField'],
+          writeBoundary: ['src/server/repositories/missing.repository.ts'],
+          requiredGuardNames: ['MissingGuard'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+      },
+      databaseGuards: [
+        { name: 'AssetSeries_code_key', relationName: 'AssetSeries' },
+        { name: 'OtherModel_guard', relationName: 'OtherModel' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: ['src/server/repositories/missing.repository.ts'],
+        script: [],
+      },
+      fileExists: () => false,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.truthSourceEntryIssueCount).toBeGreaterThan(0)
+    expect(report.truthSourceEntryAudits).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'asset-series',
+          ok: false,
+          issues: expect.arrayContaining([
+            expect.objectContaining({ type: 'missing-primary-relation' }),
+            expect.objectContaining({ type: 'missing-required-guard' }),
+            expect.objectContaining({ type: 'missing-snapshot-field' }),
+            expect.objectContaining({ type: 'missing-write-boundary-file' }),
+          ]),
+        }),
+      ]),
+    )
+    expect(report.missingPrimaryRelations).toEqual([
+      { id: 'asset-series', relationName: 'MissingModel' },
+    ])
+    expect(report.missingRequiredGuards).toEqual([
+      { id: 'asset-series', guardName: 'MissingGuard' },
+    ])
+    expect(report.misassignedRequiredGuards).toEqual([])
+    expect(report.missingSnapshotFields).toEqual([
+      {
+        id: 'asset-series',
+        snapshot: 'AssetSeries.missingField',
+        modelName: 'AssetSeries',
+        fieldName: 'missingField',
+      },
+    ])
+    expect(report.missingWriteBoundaryFiles).toEqual([
+      {
+        id: 'asset-series',
+        filePath: 'src/server/repositories/missing.repository.ts',
+      },
+    ])
+    expect(report.uncoveredGuardRelations).toEqual(['AssetSeries', 'OtherModel'])
+  })
+
+  it('fails when a truth-source write boundary is not approved by the code-boundary manifest', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          writeBoundary: ['src/server/repositories/asset-center.repository.ts'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+      },
+      databaseGuards: [
+        { name: 'AssetSeries_code_key', relationName: 'AssetSeries' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: [],
+        script: [],
+      },
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.missingWriteBoundaryFiles).toEqual([])
+    expect(report.missingWriteBoundaryClassifications).toEqual([
+      {
+        id: 'asset-series',
+        filePath: 'src/server/repositories/asset-center.repository.ts',
+        reason:
+          '真相源矩阵声明的写入边界必须同时进入代码层主数据写入口批准表。',
+      },
+    ])
+  })
+
+  it('fails when no declared write boundary is approved for a primary relation model', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          writeBoundary: ['src/server/repositories/asset-center.repository.ts'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+      },
+      databaseGuards: [
+        { name: 'AssetSeries_code_key', relationName: 'AssetSeries' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: ['src/server/repositories/asset-center.repository.ts'],
+        script: [],
+      },
+      approvedWriteBoundaryModelScopes: new Map([
+        ['src/server/repositories/asset-center.repository.ts', new Set(['assetFamily'])],
+      ]),
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.missingPrimaryRelationWriteScopes).toEqual([
+      {
+        id: 'asset-series',
+        relationName: 'AssetSeries',
+        model: 'assetSeries',
+        writeBoundary: ['src/server/repositories/asset-center.repository.ts'],
+        approvedModels: ['assetFamily'],
+        reason:
+          '真相源主表必须被至少一个声明的写入边界批准写入，不能只批准文件名。',
+      },
+    ])
+  })
+
+  it('accepts a truth-source write boundary approved by raw SQL table scope', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          id: 'master-data-quality-decision',
+          layer: 'quality-audit',
+          primaryRelations: ['MasterDataQualityDecision'],
+          compatibilitySnapshots: ['cleanup plan json'],
+          notTruthSources: ['local cleanup template'],
+          writeBoundary: ['scripts/apply-master-data-cleanup-plan.js'],
+          requiredGuardNames: [
+            'MasterDataQualityDecision_target_not_blank',
+          ],
+        },
+      ],
+      prismaModelFields: {
+        MasterDataQualityDecision: new Set(['id', 'targetType', 'targetId']),
+      },
+      schemaJsonFields: [],
+      databaseGuards: [
+        {
+          name: 'MasterDataQualityDecision_target_not_blank',
+          relationName: 'MasterDataQualityDecision',
+        },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: [],
+        script: [],
+      },
+      approvedWriteBoundaryModelScopes: new Map(),
+      approvedRawSqlWriteBoundaryFiles: ['scripts/apply-master-data-cleanup-plan.js'],
+      approvedRawSqlWriteTableScopes: new Map([
+        [
+          'scripts/apply-master-data-cleanup-plan.js',
+          new Set(['MasterDataQualityDecision']),
+        ],
+      ]),
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(true)
+    expect(report.missingWriteBoundaryClassifications).toEqual([])
+    expect(report.missingPrimaryRelationWriteScopes).toEqual([])
+  })
+
+  it('fails when an approved server write scope is not declared by any truth source', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          writeBoundary: ['src/server/repositories/asset-center.repository.ts'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+      },
+      schemaJsonFields: [],
+      databaseGuards: [
+        { name: 'AssetSeries_code_key', relationName: 'AssetSeries' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: [
+          'src/server/repositories/asset-center.repository.ts',
+          'src/server/services/asset-center.service.ts',
+        ],
+        script: [],
+      },
+      approvedWriteBoundaryModelScopes: new Map([
+        ['src/server/repositories/asset-center.repository.ts', new Set(['assetSeries'])],
+        ['src/server/services/asset-center.service.ts', new Set(['assetSeries'])],
+      ]),
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.unmappedApprovedWriteScopes).toEqual([
+      {
+        filePath: 'src/server/services/asset-center.service.ts',
+        relationName: 'AssetSeries',
+        scope: 'assetSeries',
+        source: 'server-model-scope',
+        reason:
+          '代码层批准写入该主数据表，但真相源矩阵没有反向声明这个写入口，容易形成隐形第二入口。',
+      },
+    ])
+  })
+
+  it('fails when an approved raw SQL write scope is not declared by any truth source', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          id: 'master-data-quality-decision',
+          layer: 'quality-audit',
+          primaryRelations: ['MasterDataQualityDecision'],
+          compatibilitySnapshots: ['cleanup plan json'],
+          notTruthSources: ['local cleanup template'],
+          writeBoundary: ['scripts/apply-master-data-cleanup-plan.js'],
+          requiredGuardNames: [
+            'MasterDataQualityDecision_target_not_blank',
+          ],
+        },
+      ],
+      prismaModelFields: {
+        MasterDataQualityDecision: new Set(['id', 'targetType', 'targetId']),
+      },
+      schemaJsonFields: [],
+      databaseGuards: [
+        {
+          name: 'MasterDataQualityDecision_target_not_blank',
+          relationName: 'MasterDataQualityDecision',
+        },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: [],
+        script: [],
+      },
+      approvedWriteBoundaryModelScopes: new Map(),
+      approvedRawSqlWriteBoundaryFiles: [
+        'scripts/apply-master-data-cleanup-plan.js',
+        'scripts/master-data-required-migrations.js',
+      ],
+      approvedRawSqlWriteTableScopes: new Map([
+        [
+          'scripts/apply-master-data-cleanup-plan.js',
+          new Set(['MasterDataQualityDecision']),
+        ],
+        [
+          'scripts/master-data-required-migrations.js',
+          new Set(['MasterDataQualityDecision']),
+        ],
+      ]),
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.unmappedApprovedWriteScopes).toEqual([
+      {
+        filePath: 'scripts/master-data-required-migrations.js',
+        relationName: 'MasterDataQualityDecision',
+        scope: 'MasterDataQualityDecision',
+        source: 'raw-sql-table-scope',
+        reason:
+          'Raw SQL 白名单允许写入该主数据表，但真相源矩阵没有反向声明这个写入口。',
+      },
+    ])
+  })
+
+  it('fails when a truth source claims a guard owned by another relation', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          requiredGuardNames: ['Hardware_code_key'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+        Hardware: new Set(['id', 'code']),
+      },
+      databaseGuards: [
+        { name: 'Hardware_code_key', relationName: 'Hardware' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: ['src/server/repositories/asset-center.repository.ts'],
+        script: [],
+      },
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.missingRequiredGuards).toEqual([])
+    expect(report.misassignedRequiredGuards).toEqual([
+      {
+        id: 'asset-series',
+        guardName: 'Hardware_code_key',
+        relationName: 'Hardware',
+        primaryRelations: ['AssetSeries'],
+      },
+    ])
+  })
+
+  it('fails when a JSON compatibility snapshot classification is missing from the truth-source matrix', () => {
+    const report = validateTruthSourceManifest({
+      truthSources: [
+        {
+          ...CORE_MASTER_DATA_TRUTH_SOURCES[0],
+          compatibilitySnapshots: ['AssetSeries.metadata'],
+        },
+      ],
+      prismaModelFields: {
+        AssetSeries: new Set(['id', 'code', 'metadata']),
+        ProductSKU: new Set(['id', 'attributes']),
+      },
+      schemaJsonFields: [
+        {
+          id: 'ProductSKU.attributes',
+          model: 'ProductSKU',
+          field: 'attributes',
+          category: 'compatibility-snapshot',
+          targetState: '正式 SKU 兼容属性；主读必须走结构化字段。',
+        },
+      ],
+      databaseGuards: [
+        { name: 'AssetSeries_code_key', relationName: 'AssetSeries' },
+      ],
+      approvedWriteBoundaryFiles: {
+        server: ['src/server/repositories/asset-center.repository.ts'],
+        script: [],
+      },
+      approvedWriteBoundaryModelScopes: new Map([
+        ['src/server/repositories/asset-center.repository.ts', new Set(['assetSeries'])],
+      ]),
+      fileExists: () => true,
+    })
+
+    expect(report.ok).toBe(false)
+    expect(report.unmappedCompatibilitySnapshotFields).toEqual([
+      {
+        id: 'ProductSKU.attributes',
+        model: 'ProductSKU',
+        field: 'attributes',
+        category: 'compatibility-snapshot',
+        targetState: '正式 SKU 兼容属性；主读必须走结构化字段。',
+        reason:
+          '代码层 JSON 字段分类标为兼容快照，但真相源矩阵未声明该 Model.field，容易形成第二套快照台账。',
+      },
+    ])
+  })
+})

From 0b227292250d4d6c407971d8421b9dddeb00c01b Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 13:17:30 +0800
Subject: [PATCH 09/14] chore(data-foundation): tighten client storage evidence
 gate

---
 .../verify-master-data-code-boundaries.js     | 57 ++++++++++++++-
 ...verify-master-data-code-boundaries.test.js | 72 +++++++++++++++++++
 2 files changed, 128 insertions(+), 1 deletion(-)

diff --git a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
index b46816c3..a7053136 100644
--- a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
+++ b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
@@ -1121,6 +1121,13 @@ const approvedClientStorageUsages = [
     targetState: 'database-owned-formal-package-component-details',
     reason: '草稿组正式化包内组件分配缓存只作为未推送前页面草稿；已推送 SKU 会同步到正式产品 skuItems.componentDetails。',
     patterns: [/FORMAL_PACKAGE_COMPONENT_ASSIGNMENTS_STORAGE_KEY/],
+    requiredEvidence: [
+      /async function\s+syncPushedPackageAssignments\s*\(/,
+      /saveSharedNonIntegratedProduct\s*\(/,
+      /skuItems:\s*nextSkuItems/,
+      /componentDetails/,
+      /NON_INTEGRATED_BASIC_INFO_WORKSPACE_CATEGORY/,
+    ],
   },
   {
     file: 'src/app/intake/IntakeClient.tsx',
@@ -1194,6 +1201,46 @@ function resolveApprovedClientStorageUsage({ relativePath, content, match }) {
     : null
 }
 
+function findApprovedClientStorageEvidenceIssues(rootDir = ROOT_DIR) {
+  const issues = []
+
+  for (const usage of approvedClientStorageUsages) {
+    if (!usage.requiredEvidence?.length) continue
+
+    const absolutePath = path.join(rootDir, usage.file)
+    if (!fs.existsSync(absolutePath)) {
+      issues.push({
+        ruleId: 'approved-client-storage-evidence-missing',
+        file: usage.file,
+        category: usage.category,
+        targetState: usage.targetState,
+        reason: '已批准的客户端缓存声明了数据库承接目标，但对应文件不存在，无法验证写回证据。',
+        missingEvidence: usage.requiredEvidence.map(String),
+      })
+      continue
+    }
+
+    const content = fs.readFileSync(absolutePath, 'utf8')
+    const missingEvidence = usage.requiredEvidence.filter((pattern) => {
+      pattern.lastIndex = 0
+      return !pattern.test(content)
+    })
+
+    if (missingEvidence.length === 0) continue
+
+    issues.push({
+      ruleId: 'approved-client-storage-evidence-missing',
+      file: usage.file,
+      category: usage.category,
+      targetState: usage.targetState,
+      reason: '已批准的客户端过程缓存缺少同文件数据库写回证据；不能只靠口头说明证明它不会变成第二数据真相。',
+      missingEvidence: missingEvidence.map(String),
+    })
+  }
+
+  return issues
+}
+
 const approvedServerMasterDataWritePaths = new Map([
   ['src/server/repositories/asset-center.repository.ts', '资产中心仓储层写入口，承接系列/资产族/规格款结构化主数据。'],
   ['src/server/repositories/assembly.repository.ts', '旧 CAD 装配步骤和装配版本仓储层写入口。'],
@@ -2558,6 +2605,8 @@ const unclassifiedSchemaJsonFields = schemaJsonFieldInventory.filter(
 )
 const staleSchemaJsonFieldClassifications =
   findStaleSchemaJsonFieldClassifications(schemaJsonFieldInventory)
+const approvedClientStorageEvidenceIssues =
+  findApprovedClientStorageEvidenceIssues()
 const staleFileClassifications = findStaleFileClassifications([
   {
     name: 'advisoryStoragePaths',
@@ -3447,11 +3496,16 @@ const report = {
   staleSchemaJsonFieldClassifications,
   staleFileClassificationCount: staleFileClassifications.length,
   staleFileClassifications,
+  approvedClientStorageEvidenceIssueCount:
+    approvedClientStorageEvidenceIssues.length,
+  approvedClientStorageEvidenceIssues:
+    approvedClientStorageEvidenceIssues.slice(0, 50),
   approvedClientStorageUsages: approvedClientStorageUsages.map((usage) => ({
     file: usage.file,
     category: usage.category,
     targetState: usage.targetState,
     reason: usage.reason,
+    requiredEvidenceCount: usage.requiredEvidence?.length ?? 0,
   })),
 }
 
@@ -3479,7 +3533,8 @@ if (
   snapshotReadBudgetReport.processSnapshotReadBudgetViolationCount > 0 ||
   unclassifiedSchemaJsonFields.length > 0 ||
   staleSchemaJsonFieldClassifications.length > 0 ||
-  staleFileClassifications.length > 0
+  staleFileClassifications.length > 0 ||
+  approvedClientStorageEvidenceIssues.length > 0
 ) {
   process.exit(1)
 }
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
index 24ca6194..cc1e0a0d 100644
--- a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
+++ b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
@@ -449,6 +449,39 @@ function createApprovedRawSqlWrongReadTableFixture() {
   return rootDir
 }
 
+function createApprovedClientStorageMissingEvidenceFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-client-evidence-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model ProductSKU {',
+      '  id String @id @default(cuid())',
+      '  attributes Json?',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/app/draft-groups/DraftGroupsFormalClient.tsx',
+    [
+      "const FORMAL_PACKAGE_COMPONENT_ASSIGNMENTS_STORAGE_KEY = 'draft-groups-formal-package-component-assignments'",
+      '',
+      'export function saveOnlyToLocalStorage(assignments) {',
+      '  window.localStorage.setItem(',
+      '    FORMAL_PACKAGE_COMPONENT_ASSIGNMENTS_STORAGE_KEY,',
+      '    JSON.stringify(assignments),',
+      '  )',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
 describe('verify-master-data-code-boundaries', () => {
   it('parses optional JSON output path', () => {
     expect(parseArgs(['--output', '.master-data-audits/code-boundaries.json'])).toEqual({
@@ -502,6 +535,20 @@ describe('verify-master-data-code-boundaries', () => {
     expect(report.unclassifiedSchemaJsonFieldCount).toBe(0)
     expect(report.staleSchemaJsonFieldClassificationCount).toBe(0)
     expect(report.staleFileClassificationCount).toBe(0)
+    expect(report.approvedClientStorageEvidenceIssueCount).toBe(0)
+
+    expect(report.approvedClientStorageUsages).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          targetState: 'database-owned-formal-package-component-details',
+          requiredEvidenceCount: expect.any(Number),
+        }),
+      ]),
+    )
+    const packageComponentCacheUsage = report.approvedClientStorageUsages.find(
+      (usage) => usage.targetState === 'database-owned-formal-package-component-details',
+    )
+    expect(packageComponentCacheUsage.requiredEvidenceCount).toBeGreaterThanOrEqual(4)
 
     const approvedFiles = new Set(
       report.approvedScriptMasterDataDirectWrites.map((finding) => finding.file),
@@ -1183,4 +1230,29 @@ describe('verify-master-data-code-boundaries', () => {
       fs.rmSync(fixtureRoot, { recursive: true, force: true })
     }
   })
+
+  it('rejects approved client process caches without database write-back evidence', () => {
+    const fixtureRoot = createApprovedClientStorageMissingEvidenceFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.approvedClientStorageEvidenceIssueCount).toBeGreaterThan(0)
+      expect(report.approvedClientStorageEvidenceIssues).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'approved-client-storage-evidence-missing',
+            file: 'src/app/draft-groups/DraftGroupsFormalClient.tsx',
+            targetState: 'database-owned-formal-package-component-details',
+            missingEvidence: expect.arrayContaining([
+              '/saveSharedNonIntegratedProduct\\s*\\(/',
+              '/skuItems:\\s*nextSkuItems/',
+            ]),
+          }),
+        ]),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
 })

From f0664e77ca50de00d11c4e8e03b11b91df9f7899 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 13:27:12 +0800
Subject: [PATCH 10/14] chore(data-foundation): clarify json truth boundaries

---
 .../verify-master-data-code-boundaries.js     | 186 +++++++++++++++++-
 ...verify-master-data-code-boundaries.test.js |  40 ++++
 2 files changed, 219 insertions(+), 7 deletions(-)

diff --git a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
index a7053136..62265cee 100644
--- a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
+++ b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
@@ -195,7 +195,13 @@ const schemaJsonFieldClassifications = new Map(
     ['AssetVariant.assemblyBasis', ['geometry-json', '资产规格款装配依据。']],
     ['AssetVariant.compatibilityRules', ['structured-json', '资产规格款兼容规则。']],
     ['AssetVariant.namingFields', ['structured-json', '资产规格款命名字段。']],
-    ['AssetVariant.businessData', ['structured-json', '资产规格款业务扩展资料。']],
+    [
+      'AssetVariant.businessData',
+      [
+        'structured-json',
+        '资产规格款业务扩展资料；cadData 只允许恢复装配几何 assemblyBasis，不能反推正式 SKU 身份、成本、条码或基础资料；编码、条码、成本、重量等真相必须走 AssetVariant 结构化列和 ProductSkuAssetProfile。',
+      ],
+    ],
     ['AssetSkuSyncEvent.payload', ['sync-event', '资产 SKU 同步事件载荷。']],
     ['AssetSkuSyncEvent.progress', ['sync-event', '资产 SKU 同步进度。']],
     ['DraftGroup.summary', ['process-snapshot', '草稿组摘要快照。']],
@@ -214,12 +220,36 @@ const schemaJsonFieldClassifications = new Map(
     ['PreSku.installStepPreview', ['process-snapshot', '准 SKU 安装步骤预览。']],
     ['PreSku.packagingSnapshot', ['process-snapshot', '准 SKU 包装快照。']],
     ['PreSkuPackagingPlan.boxes', ['structured-json', '准 SKU 包装箱规。']],
-    ['PreSkuPackagingPlan.costSummary', ['structured-json', '准 SKU 包装成本摘要。']],
-    ['PreSkuPackagingPlan.processDraft', ['process-snapshot', '准 SKU 包装过程草稿。']],
-    ['PackagedItem.payload', ['process-snapshot', '轻仓库包装项扩展载荷。']],
+    [
+      'PreSkuPackagingPlan.costSummary',
+      [
+        'structured-json',
+        '准 SKU 包装成本结构化摘要；只作为包装方案内部成本快照，不是正式 SKU 成本或财务成本真相；正式产品/SKU 成本必须由正式 BOM/核价结构化链路承接。',
+      ],
+    ],
+    [
+      'PreSkuPackagingPlan.processDraft',
+      [
+        'process-snapshot',
+        '准 SKU 包装过程草稿；只保存入库前包装编辑过程，不得承接正式 SKU 基础资料、库存、成本结论或权限真相。',
+      ],
+    ],
+    [
+      'PackagedItem.payload',
+      [
+        'process-snapshot',
+        '轻仓库包装项过程扩展载荷；只允许保存包装执行上下文和展示补充，不得承接成本、库存、SKU 身份或基础资料真相；包装数量、位置、状态、尺寸和正式成本应走 PackagedItem/PackagingPlan/PreSkuPackagingPlan 结构化字段。',
+      ],
+    ],
     ['ProductSkuQualityInspection.metrics', ['process-snapshot', '正式 SKU 质检指标过程证据；质检结论和数量仍以结构化列为准。']],
     ['ProductSkuQualityInspection.attachments', ['process-snapshot', '正式 SKU 质检附件过程证据；附件不能承接正式 SKU 基础资料真相。']],
-    ['EmployeeLookupCache.result', ['integration-cache', '员工匹配缓存结果。']],
+    [
+      'EmployeeLookupCache.result',
+      [
+        'integration-cache',
+        '员工外部匹配短期缓存结果；只用于花名册/钉钉匹配加速，不是人员、部门、权限或业务类型真相；真相必须写入 User/Department/EmployeeDirectory/Team 结构化表。',
+      ],
+    ],
     ['Department.rawSnapshot', ['integration-cache', '组织部门外部原始快照。']],
     ['ApprovalWorkflow.fieldMatrix', ['process-snapshot', '审批流字段矩阵。']],
     ['ApprovalWorkflow.summary', ['process-snapshot', '审批流摘要。']],
@@ -243,14 +273,146 @@ const schemaJsonFieldClassifications = new Map(
     ['CommonComponent.dimensions', ['structured-json', '通用组件尺寸对象。']],
     ['CommonComponent.specifications', ['structured-json', '通用组件规格。']],
     ['CommonComponent.mountPoints', ['geometry-json', '通用组件连接点。']],
-    ['SystemConfig.value', ['configuration', '系统配置值。']],
-    ['ProviderConfig.extra', ['configuration', '供应商配置扩展字段。']],
+    [
+      'SystemConfig.value',
+      [
+        'configuration',
+        '系统配置 JSON 值；必须按 key 由服务层 schema 校验，不得保存用户、权限、产品、SKU、资产等业务主数据；数据库只保存配置真相，敏感密钥不得写入共享文档或前端。',
+      ],
+    ],
+    [
+      'ProviderConfig.extra',
+      [
+        'configuration',
+        '供应商/AI 提供方配置扩展；只保存该 provider/serviceType 的连接附加参数，不得承接业务主数据或权限真相；结构和密钥处理必须由 ProviderConfig 服务层按类型校验。',
+      ],
+    ],
   ].map(([field, [category, targetState]]) => [
     field,
     { category, targetState },
   ]),
 )
 
+const schemaJsonFieldBoundaryRequirements = new Map([
+  [
+    'AssetVariant.businessData',
+    {
+      reason: 'AssetVariant.businessData 名称太宽，必须明确 CAD 快照和正式 SKU/成本/条码真相边界。',
+      requiredPatterns: [
+        /cadData/,
+        /assemblyBasis/,
+        /不能反推正式 SKU 身份、成本、条码或基础资料/,
+        /AssetVariant 结构化列/,
+        /ProductSkuAssetProfile/,
+      ],
+    },
+  ],
+  [
+    'PreSkuPackagingPlan.costSummary',
+    {
+      reason: '包装成本摘要容易被误当正式 SKU 成本或财务成本，必须明确只是包装方案内部快照。',
+      requiredPatterns: [
+        /包装成本/,
+        /不是正式 SKU 成本或财务成本真相/,
+        /正式 BOM\/核价结构化链路/,
+      ],
+    },
+  ],
+  [
+    'PreSkuPackagingPlan.processDraft',
+    {
+      reason: '包装过程草稿必须明确不能承接正式 SKU 基础资料、库存、成本结论或权限真相。',
+      requiredPatterns: [
+        /过程草稿/,
+        /不得承接正式 SKU 基础资料/,
+        /库存、成本结论或权限真相/,
+      ],
+    },
+  ],
+  [
+    'PackagedItem.payload',
+    {
+      reason: '轻仓库包装 payload 名称太宽，必须明确不能承接成本、库存、SKU 身份或基础资料真相。',
+      requiredPatterns: [
+        /包装项过程扩展载荷/,
+        /不得承接成本、库存、SKU 身份或基础资料真相/,
+        /PackagedItem\/PackagingPlan\/PreSkuPackagingPlan 结构化字段/,
+      ],
+    },
+  ],
+  [
+    'EmployeeLookupCache.result',
+    {
+      reason: '员工匹配缓存不能变成人员、部门、权限或业务类型真相。',
+      requiredPatterns: [
+        /短期缓存/,
+        /不是人员、部门、权限或业务类型真相/,
+        /User\/Department\/EmployeeDirectory\/Team 结构化表/,
+      ],
+    },
+  ],
+  [
+    'SystemConfig.value',
+    {
+      reason: '通用系统配置 JSON 必须按 key 校验，不能成为业务主数据万能口袋。',
+      requiredPatterns: [
+        /按 key/,
+        /服务层 schema 校验/,
+        /不得保存用户、权限、产品、SKU、资产等业务主数据/,
+      ],
+    },
+  ],
+  [
+    'ProviderConfig.extra',
+    {
+      reason: '供应商扩展配置必须绑定 provider/serviceType，不能承接业务主数据或权限真相。',
+      requiredPatterns: [
+        /provider\/serviceType/,
+        /不得承接业务主数据或权限真相/,
+        /ProviderConfig 服务层按类型校验/,
+      ],
+    },
+  ],
+])
+
+function findSchemaJsonFieldBoundaryIssues(
+  classifications = schemaJsonFieldClassifications,
+  requirements = schemaJsonFieldBoundaryRequirements,
+) {
+  const issues = []
+
+  for (const [id, requirement] of requirements.entries()) {
+    const classification = classifications.get(id)
+    if (!classification) {
+      issues.push({
+        ruleId: 'schema-json-field-boundary-missing',
+        id,
+        reason: requirement.reason,
+        missingRequiredPatterns: requirement.requiredPatterns.map(String),
+      })
+      continue
+    }
+
+    const missingRequiredPatterns = requirement.requiredPatterns.filter((pattern) => {
+      pattern.lastIndex = 0
+      return !pattern.test(classification.targetState)
+    })
+
+    if (missingRequiredPatterns.length === 0) continue
+
+    issues.push({
+      ruleId: 'schema-json-field-boundary-too-vague',
+      id,
+      category: classification.category,
+      targetState: classification.targetState,
+      reason: requirement.reason,
+      missingRequiredPatterns: missingRequiredPatterns.map(String),
+    })
+  }
+
+  return issues
+}
+
 function getSchemaJsonFieldInventory() {
   const content = fs.readFileSync(PRISMA_SCHEMA_PATH, 'utf8')
   const fields = []
@@ -1451,6 +1613,7 @@ if (require.main !== module) {
     buildSnapshotReadBudgetReport,
     buildSnapshotReadBudgetViolations,
     getApprovedMasterDataWriteBoundaryFiles,
+    findSchemaJsonFieldBoundaryIssues,
     getSchemaJsonFieldClassifications,
     getSchemaJsonFieldInventory,
     parseArgs,
@@ -2605,6 +2768,8 @@ const unclassifiedSchemaJsonFields = schemaJsonFieldInventory.filter(
 )
 const staleSchemaJsonFieldClassifications =
   findStaleSchemaJsonFieldClassifications(schemaJsonFieldInventory)
+const schemaJsonFieldBoundaryIssues =
+  findSchemaJsonFieldBoundaryIssues()
 const approvedClientStorageEvidenceIssues =
   findApprovedClientStorageEvidenceIssues()
 const staleFileClassifications = findStaleFileClassifications([
@@ -3494,6 +3659,12 @@ const report = {
   staleSchemaJsonFieldClassificationCount:
     staleSchemaJsonFieldClassifications.length,
   staleSchemaJsonFieldClassifications,
+  schemaJsonFieldBoundaryRequirementCount:
+    schemaJsonFieldBoundaryRequirements.size,
+  schemaJsonFieldBoundaryIssueCount:
+    schemaJsonFieldBoundaryIssues.length,
+  schemaJsonFieldBoundaryIssues:
+    schemaJsonFieldBoundaryIssues.slice(0, 50),
   staleFileClassificationCount: staleFileClassifications.length,
   staleFileClassifications,
   approvedClientStorageEvidenceIssueCount:
@@ -3533,6 +3704,7 @@ if (
   snapshotReadBudgetReport.processSnapshotReadBudgetViolationCount > 0 ||
   unclassifiedSchemaJsonFields.length > 0 ||
   staleSchemaJsonFieldClassifications.length > 0 ||
+  schemaJsonFieldBoundaryIssues.length > 0 ||
   staleFileClassifications.length > 0 ||
   approvedClientStorageEvidenceIssues.length > 0
 ) {
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
index cc1e0a0d..c7b4770e 100644
--- a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
+++ b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
@@ -4,6 +4,7 @@ const os = require('node:os')
 const path = require('node:path')
 const {
   buildSnapshotReadBudgetViolations,
+  findSchemaJsonFieldBoundaryIssues,
   parseArgs,
 } = require('../../scripts/verify-master-data-code-boundaries')
 
@@ -534,6 +535,8 @@ describe('verify-master-data-code-boundaries', () => {
     expect(report.unusedProcessSnapshotReadClassificationCount).toBe(0)
     expect(report.unclassifiedSchemaJsonFieldCount).toBe(0)
     expect(report.staleSchemaJsonFieldClassificationCount).toBe(0)
+    expect(report.schemaJsonFieldBoundaryRequirementCount).toBeGreaterThanOrEqual(7)
+    expect(report.schemaJsonFieldBoundaryIssueCount).toBe(0)
     expect(report.staleFileClassificationCount).toBe(0)
     expect(report.approvedClientStorageEvidenceIssueCount).toBe(0)
 
@@ -1231,6 +1234,43 @@ describe('verify-master-data-code-boundaries', () => {
     }
   })
 
+  it('rejects vague target states for high-risk JSON field classifications', () => {
+    const issues = findSchemaJsonFieldBoundaryIssues(
+      new Map([
+        [
+          'AssetVariant.businessData',
+          {
+            category: 'structured-json',
+            targetState: '资产规格款业务扩展资料。',
+          },
+        ],
+      ]),
+      new Map([
+        [
+          'AssetVariant.businessData',
+          {
+            reason: 'AssetVariant.businessData 必须写清 CAD 快照和正式 SKU 真相边界。',
+            requiredPatterns: [
+              /cadData/,
+              /不能反推正式 SKU 身份、成本、条码或基础资料/,
+            ],
+          },
+        ],
+      ]),
+    )
+
+    expect(issues).toEqual([
+      expect.objectContaining({
+        ruleId: 'schema-json-field-boundary-too-vague',
+        id: 'AssetVariant.businessData',
+        missingRequiredPatterns: expect.arrayContaining([
+          '/cadData/',
+          '/不能反推正式 SKU 身份、成本、条码或基础资料/',
+        ]),
+      }),
+    ])
+  })
+
   it('rejects approved client process caches without database write-back evidence', () => {
     const fixtureRoot = createApprovedClientStorageMissingEvidenceFixture()
 

From 0031533f97e7eaa92b7288e87682a30423fb131f Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 13:40:55 +0800
Subject: [PATCH 11/14] chore(data-foundation): prevent auth cache permission
 truth

---
 .../verify-master-data-code-boundaries.js     |  29 +++--
 .../src/hooks/__tests__/useAuth.test.tsx      |  53 ++++++++-
 furniture-3d-system/src/hooks/api/useUsers.ts |   9 +-
 furniture-3d-system/src/hooks/useAuth.ts      |  52 ++++++---
 furniture-3d-system/src/stores/auth.store.ts  | 104 ------------------
 furniture-3d-system/src/stores/index.ts       |   1 -
 ...verify-master-data-code-boundaries.test.js |  81 ++++++++++++++
 7 files changed, 189 insertions(+), 140 deletions(-)
 delete mode 100644 furniture-3d-system/src/stores/auth.store.ts

diff --git a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
index 62265cee..f649cd47 100644
--- a/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
+++ b/furniture-3d-system/scripts/verify-master-data-code-boundaries.js
@@ -1329,13 +1329,18 @@ const approvedClientStorageUsages = [
     targetState: 'server-owned-user-and-permissions',
     reason: '客户端登录态展示缓存，不作为人员或权限主数据真相。',
     patterns: [/USER_STORAGE_KEY/],
-  },
-  {
-    file: 'src/stores/auth.store.ts',
-    category: 'auth-display-cache',
-    targetState: 'server-owned-user-and-permissions',
-    reason: 'Zustand 客户端登录态会话缓存，不作为人员、权限或业务主数据真相。',
-    patterns: [/createJSONStorage\(\s*\(\s*\)\s*=>\s*sessionStorage/],
+    requiredEvidence: [
+      /fetch\(\s*['"]\/api\/auth\/me['"]/,
+      /credentials:\s*['"]include['"]/,
+      /applyCachedDisplayState/,
+      /displayUser:\s*cachedUser/,
+      /user:\s*null/,
+      /isAuthenticated:\s*false/,
+    ],
+    forbiddenEvidence: [
+      /isAuthenticated:\s*Boolean\(\s*cachedUser\s*\)/,
+      /applyAuthenticatedState\(\s*cachedUser\s*\)/,
+    ],
   },
 ]
 
@@ -1387,16 +1392,21 @@ function findApprovedClientStorageEvidenceIssues(rootDir = ROOT_DIR) {
       pattern.lastIndex = 0
       return !pattern.test(content)
     })
+    const matchedForbiddenEvidence = (usage.forbiddenEvidence ?? []).filter((pattern) => {
+      pattern.lastIndex = 0
+      return pattern.test(content)
+    })
 
-    if (missingEvidence.length === 0) continue
+    if (missingEvidence.length === 0 && matchedForbiddenEvidence.length === 0) continue
 
     issues.push({
       ruleId: 'approved-client-storage-evidence-missing',
       file: usage.file,
       category: usage.category,
       targetState: usage.targetState,
-      reason: '已批准的客户端过程缓存缺少同文件数据库写回证据；不能只靠口头说明证明它不会变成第二数据真相。',
+      reason: '已批准的客户端缓存缺少同文件权威承接证据，或仍保留会让客户端缓存变成第二数据真相的代码模式。',
       missingEvidence: missingEvidence.map(String),
+      matchedForbiddenEvidence: matchedForbiddenEvidence.map(String),
     })
   }
 
@@ -3677,6 +3687,7 @@ const report = {
     targetState: usage.targetState,
     reason: usage.reason,
     requiredEvidenceCount: usage.requiredEvidence?.length ?? 0,
+    forbiddenEvidenceCount: usage.forbiddenEvidence?.length ?? 0,
   })),
 }
 
diff --git a/furniture-3d-system/src/hooks/__tests__/useAuth.test.tsx b/furniture-3d-system/src/hooks/__tests__/useAuth.test.tsx
index 70b90a5c..2f0000b1 100644
--- a/furniture-3d-system/src/hooks/__tests__/useAuth.test.tsx
+++ b/furniture-3d-system/src/hooks/__tests__/useAuth.test.tsx
@@ -13,8 +13,14 @@ jest.mock('next/navigation', () => ({
 }))
 
 function UsersPageProbe() {
-  const { user } = useAuth()
-  return <div data-testid="user-name">{user?.name}</div>
+  const { displayUser, isAuthenticated, user } = useAuth()
+  return (
+    <div>
+      <div data-testid="user-name">{user?.name}</div>
+      <div data-testid="display-user-name">{displayUser?.name}</div>
+      <div data-testid="authenticated">{String(isAuthenticated)}</div>
+    </div>
+  )
 }
 
 describe('AuthProvider', () => {
@@ -73,4 +79,47 @@ describe('AuthProvider', () => {
     )
     expect(pushMock).not.toHaveBeenCalled()
   })
+
+  it('服务端认证失败时，不使用本地缓存用户放行认证和权限', async () => {
+    localStorage.setItem(
+      'user',
+      JSON.stringify({
+        id: 'cached-admin',
+        email: 'cached-admin@test.com',
+        name: '缓存管理员',
+        role: 'ADMIN',
+        status: 'ACTIVE',
+        isFirstLogin: false,
+        department: null,
+        team: null,
+        avatar: null,
+        lastLoginAt: null,
+      })
+    )
+    global.fetch = jest.fn().mockRejectedValue(new Error('network down'))
+
+    render(
+      <AuthProvider>
+        <RequireAuth>
+          <AdminGuard>
+            <UsersPageProbe />
+          </AdminGuard>
+        </RequireAuth>
+      </AuthProvider>
+    )
+
+    await waitFor(() => {
+      expect(pushMock).toHaveBeenCalledWith('/login')
+    })
+
+    expect(screen.queryByTestId('user-name')).not.toBeInTheDocument()
+    expect(screen.queryByTestId('authenticated')).not.toBeInTheDocument()
+    expect(global.fetch).toHaveBeenCalledWith(
+      '/api/auth/me',
+      expect.objectContaining({
+        method: 'GET',
+        credentials: 'include',
+      })
+    )
+  })
 })
diff --git a/furniture-3d-system/src/hooks/api/useUsers.ts b/furniture-3d-system/src/hooks/api/useUsers.ts
index f0a18f60..f12d91cf 100644
--- a/furniture-3d-system/src/hooks/api/useUsers.ts
+++ b/furniture-3d-system/src/hooks/api/useUsers.ts
@@ -9,7 +9,6 @@
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
 import type { UserListItemDTO, UserDetailDTO, CurrentUserDTO } from '@/server/dto/user.dto'
 import type { PaginationMeta } from '@/server/core/types'
-import { useAuthStore } from '@/stores/auth.store'
 
 // ============ Query Keys ============
 
@@ -155,15 +154,9 @@ async function deleteUser(id: string): Promise<void> {
  * 获取当前登录用户
  */
 export function useCurrentUser() {
-  const setUser = useAuthStore((state) => state.setUser)
-
   return useQuery({
     queryKey: userKeys.current(),
-    queryFn: async () => {
-      const user = await fetchCurrentUser()
-      setUser(user)
-      return user
-    },
+    queryFn: fetchCurrentUser,
     staleTime: 10 * 60 * 1000, // 10分钟
     retry: false,
   })
diff --git a/furniture-3d-system/src/hooks/useAuth.ts b/furniture-3d-system/src/hooks/useAuth.ts
index f4409303..23ab491d 100644
--- a/furniture-3d-system/src/hooks/useAuth.ts
+++ b/furniture-3d-system/src/hooks/useAuth.ts
@@ -54,6 +54,7 @@ export interface User {
  */
 export interface AuthState {
   user: User | null;
+  displayUser: User | null;
   isLoading: boolean;
   isAuthenticated: boolean;
 }
@@ -98,9 +99,10 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
   const [authState, setAuthState] = useState<AuthState>(() => {
     const cachedUser = readCachedUser();
     return {
-      user: cachedUser,
+      user: null,
+      displayUser: cachedUser,
       isLoading: true,
-      isAuthenticated: Boolean(cachedUser),
+      isAuthenticated: false,
     };
   });
   const pendingRequestRef = useRef<Promise<void> | null>(null);
@@ -109,6 +111,7 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
     persistCachedUser(user);
     setAuthState({
       user,
+      displayUser: user,
       isLoading: false,
       isAuthenticated: true,
     });
@@ -118,6 +121,16 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
     persistCachedUser(null);
     setAuthState({
       user: null,
+      displayUser: null,
+      isLoading: false,
+      isAuthenticated: false,
+    });
+  }, []);
+
+  const applyCachedDisplayState = useCallback((user: User | null) => {
+    setAuthState({
+      user: null,
+      displayUser: user,
       isLoading: false,
       isAuthenticated: false,
     });
@@ -156,7 +169,7 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
 
         const cachedUser = readCachedUser();
         if (cachedUser) {
-          applyAuthenticatedState(cachedUser);
+          applyCachedDisplayState(cachedUser);
           return;
         }
 
@@ -168,7 +181,7 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
 
     pendingRequestRef.current = request;
     return request;
-  }, [applyAuthenticatedState, applyUnauthenticatedState]);
+  }, [applyAuthenticatedState, applyCachedDisplayState, applyUnauthenticatedState]);
 
   useEffect(() => {
     void checkAuth();
@@ -195,8 +208,9 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
     persistCachedUser(user);
     setAuthState((prev) => ({
       ...prev,
-      user,
-      isAuthenticated: true,
+      user: prev.isAuthenticated ? user : null,
+      displayUser: user,
+      isAuthenticated: prev.isAuthenticated,
       isLoading: false,
     }));
   }, []);
@@ -233,35 +247,41 @@ export function usePermissions() {
   if (!context) {
     throw new Error('usePermissions 必须在 AuthProvider 内使用');
   }
-  const { user } = context;
+  const { user, isAuthenticated } = context;
+  const authenticatedUser = isAuthenticated ? user : null;
 
   /**
    * 检查是否有指定角色
    */
   const hasRole = (roles: AllowedRole[]): boolean => {
-    if (!user) return false;
-    return hasAllowedRole(user, roles);
+    if (!authenticatedUser) return false;
+    return hasAllowedRole(authenticatedUser, roles);
   };
 
   /**
    * 检查是否为管理员
    */
   const isAdmin = (): boolean => {
-    return Boolean(user && isAdminRole(user));
+    return Boolean(authenticatedUser && isAdminRole(authenticatedUser));
   };
 
   /**
    * 检查是否为部门管理员或更高
    */
   const isDepartmentManagerOrAbove = (): boolean => {
-    return Boolean(user && (isAdminRole(user) || isDepartmentSupervisor(user)));
+    return Boolean(authenticatedUser && (isAdminRole(authenticatedUser) || isDepartmentSupervisor(authenticatedUser)));
   };
 
   /**
    * 检查是否为组长或更高
    */
   const isTeamLeaderOrAbove = (): boolean => {
-    return Boolean(user && (isAdminRole(user) || isDepartmentSupervisor(user) || isTeamSupervisor(user)));
+    return Boolean(
+      authenticatedUser &&
+        (isAdminRole(authenticatedUser) ||
+          isDepartmentSupervisor(authenticatedUser) ||
+          isTeamSupervisor(authenticatedUser))
+    );
   };
 
   /**
@@ -275,8 +295,8 @@ export function usePermissions() {
    * 检查是否可以创建产品
    */
   const canCreateProduct = (): boolean => {
-    if (!user) return false;
-    return canCreateContent(user);
+    if (!authenticatedUser) return false;
+    return canCreateContent(authenticatedUser);
   };
 
   /**
@@ -297,11 +317,11 @@ export function usePermissions() {
    * 检查是否可以导出数据
    */
   const canExportData = (): boolean => {
-    return Boolean(user);
+    return Boolean(authenticatedUser);
   };
 
   return {
-    user,
+    user: authenticatedUser,
     hasRole,
     isAdmin,
     isDepartmentManagerOrAbove,
diff --git a/furniture-3d-system/src/stores/auth.store.ts b/furniture-3d-system/src/stores/auth.store.ts
deleted file mode 100644
index e012812f..00000000
--- a/furniture-3d-system/src/stores/auth.store.ts
+++ /dev/null
@@ -1,104 +0,0 @@
-/**
- * 认证状态管理
- * 
- * @created 2026-01-30
- */
-
-import { create } from 'zustand'
-import { persist, createJSONStorage } from 'zustand/middleware'
-import type { CurrentUserDTO } from '@/server/dto/user.dto'
-
-// ============ 类型定义 ============
-
-interface AuthState {
-  // 状态
-  user: CurrentUserDTO | null
-  isAuthenticated: boolean
-  isLoading: boolean
-  
-  // 操作
-  setUser: (user: CurrentUserDTO | null) => void
-  setLoading: (loading: boolean) => void
-  login: (user: CurrentUserDTO) => void
-  logout: () => void
-  
-  // 权限检查
-  hasPermission: (permission: string) => boolean
-  hasRole: (role: string | string[]) => boolean
-}
-
-// ============ Store 实现 ============
-
-export const useAuthStore = create<AuthState>()(
-  persist(
-    (set, get) => ({
-      // 初始状态
-      user: null,
-      isAuthenticated: false,
-      isLoading: true,
-
-      // 设置用户
-      setUser: (user) => {
-        set({
-          user,
-          isAuthenticated: !!user,
-          isLoading: false,
-        })
-      },
-
-      // 设置加载状态
-      setLoading: (loading) => {
-        set({ isLoading: loading })
-      },
-
-      // 登录
-      login: (user) => {
-        set({
-          user,
-          isAuthenticated: true,
-          isLoading: false,
-        })
-      },
-
-      // 登出
-      logout: () => {
-        set({
-          user: null,
-          isAuthenticated: false,
-          isLoading: false,
-        })
-      },
-
-      // 检查权限
-      hasPermission: (permission) => {
-        const { user } = get()
-        if (!user) return false
-        
-        // 超级管理员拥有所有权限
-        if (user.permissions.includes('*')) return true
-        
-        // 检查具体权限
-        return user.permissions.includes(permission)
-      },
-
-      // 检查角色
-      hasRole: (role) => {
-        const { user } = get()
-        if (!user) return false
-        
-        if (Array.isArray(role)) {
-          return role.includes(user.role)
-        }
-        return user.role === role
-      },
-    }),
-    {
-      name: 'auth-storage',
-      storage: createJSONStorage(() => sessionStorage),
-      partialize: (state) => ({
-        user: state.user,
-        isAuthenticated: state.isAuthenticated,
-      }),
-    }
-  )
-)
diff --git a/furniture-3d-system/src/stores/index.ts b/furniture-3d-system/src/stores/index.ts
index a5fc8689..0b325ffe 100644
--- a/furniture-3d-system/src/stores/index.ts
+++ b/furniture-3d-system/src/stores/index.ts
@@ -4,6 +4,5 @@
  * @created 2026-01-30
  */
 
-export { useAuthStore } from './auth.store'
 export { useUIStore, MODAL_IDS } from './ui.store'
 export { useProductStore } from './product.store'
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
index c7b4770e..ace5fdca 100644
--- a/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
+++ b/furniture-3d-system/tests/scripts/verify-master-data-code-boundaries.test.js
@@ -483,6 +483,51 @@ function createApprovedClientStorageMissingEvidenceFixture() {
   return rootDir
 }
 
+function createAuthCacheSecondTruthFixture() {
+  const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), 'master-data-auth-cache-'))
+
+  writeFixtureFile(
+    rootDir,
+    'prisma/schema.prisma',
+    [
+      'model User {',
+      '  id String @id @default(cuid())',
+      '}',
+      '',
+    ].join('\n'),
+  )
+  writeFixtureFile(
+    rootDir,
+    'src/hooks/useAuth.ts',
+    [
+      "const USER_STORAGE_KEY = 'user'",
+      '',
+      'function readCachedUser() {',
+      '  return JSON.parse(localStorage.getItem(USER_STORAGE_KEY) ?? "null")',
+      '}',
+      '',
+      'export async function checkAuth() {',
+      "  await fetch('/api/auth/me', {",
+      "    method: 'GET',",
+      "    credentials: 'include',",
+      '  })',
+      '  const cachedUser = readCachedUser()',
+      '  if (cachedUser) {',
+      '    applyAuthenticatedState(cachedUser)',
+      '  }',
+      '  return {',
+      '    displayUser: cachedUser,',
+      '    user: cachedUser,',
+      '    isAuthenticated: Boolean(cachedUser),',
+      '  }',
+      '}',
+      '',
+    ].join('\n'),
+  )
+
+  return rootDir
+}
+
 describe('verify-master-data-code-boundaries', () => {
   it('parses optional JSON output path', () => {
     expect(parseArgs(['--output', '.master-data-audits/code-boundaries.json'])).toEqual({
@@ -546,12 +591,23 @@ describe('verify-master-data-code-boundaries', () => {
           targetState: 'database-owned-formal-package-component-details',
           requiredEvidenceCount: expect.any(Number),
         }),
+        expect.objectContaining({
+          file: 'src/hooks/useAuth.ts',
+          targetState: 'server-owned-user-and-permissions',
+          requiredEvidenceCount: expect.any(Number),
+          forbiddenEvidenceCount: expect.any(Number),
+        }),
       ]),
     )
     const packageComponentCacheUsage = report.approvedClientStorageUsages.find(
       (usage) => usage.targetState === 'database-owned-formal-package-component-details',
     )
     expect(packageComponentCacheUsage.requiredEvidenceCount).toBeGreaterThanOrEqual(4)
+    const authCacheUsage = report.approvedClientStorageUsages.find(
+      (usage) => usage.file === 'src/hooks/useAuth.ts',
+    )
+    expect(authCacheUsage.requiredEvidenceCount).toBeGreaterThanOrEqual(5)
+    expect(authCacheUsage.forbiddenEvidenceCount).toBeGreaterThanOrEqual(2)
 
     const approvedFiles = new Set(
       report.approvedScriptMasterDataDirectWrites.map((finding) => finding.file),
@@ -1295,4 +1351,29 @@ describe('verify-master-data-code-boundaries', () => {
       fs.rmSync(fixtureRoot, { recursive: true, force: true })
     }
   })
+
+  it('rejects auth display caches that become authentication or permission truth', () => {
+    const fixtureRoot = createAuthCacheSecondTruthFixture()
+
+    try {
+      const report = runVerifierWithArgs(['--root', fixtureRoot], 1)
+
+      expect(report.approvedClientStorageEvidenceIssueCount).toBeGreaterThan(0)
+      expect(report.approvedClientStorageEvidenceIssues).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({
+            ruleId: 'approved-client-storage-evidence-missing',
+            file: 'src/hooks/useAuth.ts',
+            targetState: 'server-owned-user-and-permissions',
+            matchedForbiddenEvidence: expect.arrayContaining([
+              '/isAuthenticated:\\s*Boolean\\(\\s*cachedUser\\s*\\)/',
+              '/applyAuthenticatedState\\(\\s*cachedUser\\s*\\)/',
+            ]),
+          }),
+        ]),
+      )
+    } finally {
+      fs.rmSync(fixtureRoot, { recursive: true, force: true })
+    }
+  })
 })

From 64341cab7776dc712318483374fd488784dcac78 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 13:48:03 +0800
Subject: [PATCH 12/14] chore(data-foundation): require fresh audit checklist
 evidence

---
 .../print-master-data-foundation-checklist.js | 127 ++++++++++++++----
 ...t-master-data-foundation-checklist.test.js | 114 +++++++++++++++-
 2 files changed, 211 insertions(+), 30 deletions(-)

diff --git a/furniture-3d-system/scripts/print-master-data-foundation-checklist.js b/furniture-3d-system/scripts/print-master-data-foundation-checklist.js
index acb4a52a..351e9a5f 100644
--- a/furniture-3d-system/scripts/print-master-data-foundation-checklist.js
+++ b/furniture-3d-system/scripts/print-master-data-foundation-checklist.js
@@ -6,10 +6,15 @@ const DEFAULT_MANIFEST = path.join(
   'foundation-audit-current-goal',
   'manifest.json',
 )
+const DEFAULT_MAX_MANIFEST_AGE_MINUTES = 60
 
 function parseArgs(argv = process.argv.slice(2)) {
   const options = {
     manifestFile: DEFAULT_MANIFEST,
+    maxAgeMinutes: Number(
+      process.env.MASTER_DATA_CHECKLIST_MAX_AGE_MINUTES ||
+        DEFAULT_MAX_MANIFEST_AGE_MINUTES,
+    ),
     outputFile: '',
   }
 
@@ -47,11 +52,32 @@ function parseArgs(argv = process.argv.slice(2)) {
       }
       continue
     }
+    if (arg === '--max-age-minutes') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --max-age-minutes <minutes>。')
+      }
+      options.maxAgeMinutes = Number(value)
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--max-age-minutes=')) {
+      options.maxAgeMinutes = Number(arg.slice('--max-age-minutes='.length))
+      if (!Number.isFinite(options.maxAgeMinutes)) {
+        throw new Error('缺少 --max-age-minutes <minutes>。')
+      }
+      continue
+    }
     throw new Error(`未知参数：${arg}`)
   }
 
+  if (!Number.isFinite(options.maxAgeMinutes) || options.maxAgeMinutes <= 0) {
+    throw new Error('--max-age-minutes 必须是大于 0 的数字。')
+  }
+
   return {
     manifestFile: path.resolve(options.manifestFile),
+    maxAgeMinutes: options.maxAgeMinutes,
     outputFile: options.outputFile ? path.resolve(options.outputFile) : '',
   }
 }
@@ -76,42 +102,87 @@ function formatDisplayPath(filePath, cwd = process.cwd()) {
   return path.basename(filePath)
 }
 
-function buildCompletionChecklistReport(manifest, manifestFile = '') {
+function buildManifestFreshness(manifest, options = {}) {
+  const checkedAt = typeof manifest?.checkedAt === 'string' ? manifest.checkedAt : ''
+  const now = options.now instanceof Date ? options.now : new Date()
+  const maxAgeMinutes = Number(options.maxAgeMinutes ?? DEFAULT_MAX_MANIFEST_AGE_MINUTES)
+  const checkedAtMs = checkedAt ? Date.parse(checkedAt) : NaN
+  const nowMs = now.getTime()
+  const ageMinutes = Number.isFinite(checkedAtMs)
+    ? Math.max(0, (nowMs - checkedAtMs) / 60_000)
+    : null
+  const fresh =
+    Number.isFinite(maxAgeMinutes) &&
+    maxAgeMinutes > 0 &&
+    ageMinutes !== null &&
+    ageMinutes <= maxAgeMinutes
+
+  return {
+    checkedAt,
+    evaluatedAt: now.toISOString(),
+    maxAgeMinutes,
+    ageMinutes,
+    fresh,
+    stale: !fresh,
+    reason: fresh
+      ? ''
+      : checkedAt
+        ? '地基审计 manifest 已过期，必须重新运行完整地基审计后才能作为当前完成证据。'
+        : '地基审计 manifest 缺少 checkedAt，不能作为当前完成证据。',
+  }
+}
+
+function buildCompletionChecklistReport(manifest, manifestFile = '', options = {}) {
   const checklist = manifest?.foundationCompletionChecklist
   if (!checklist || typeof checklist !== 'object') {
     throw new Error('manifest 中缺少 foundationCompletionChecklist，请先运行完整地基审计。')
   }
 
+  const freshness = buildManifestFreshness(manifest, options)
+  const checklistItems = Array.isArray(checklist.items) ? checklist.items : []
+  const freshnessItem = {
+    id: 'audit-manifest-freshness',
+    label: '地基审计证据新鲜度',
+    status: freshness.fresh ? 'passed' : 'blocked',
+    passed: freshness.fresh,
+    blockedBy: freshness.fresh ? [] : ['audit-manifest-stale'],
+    evidence: {
+      checkedAt: freshness.checkedAt,
+      evaluatedAt: freshness.evaluatedAt,
+      ageMinutes: freshness.ageMinutes,
+      maxAgeMinutes: freshness.maxAgeMinutes,
+      reason: freshness.reason,
+    },
+  }
+  const items = [...checklistItems, freshnessItem]
+
   return {
     mode: 'master-data-foundation-completion-checklist',
     sourceManifest: manifestFile,
     checkedAt: manifest.checkedAt || '',
+    freshness,
     hardReady: manifest.hardReady === true,
-    complete: checklist.complete === true,
-    itemCount: Number(checklist.itemCount ?? 0),
-    passedCount: Number(checklist.passedCount ?? 0),
-    blockedCount: Number(checklist.blockedCount ?? 0),
+    complete: checklist.complete === true && freshness.fresh,
+    itemCount: Number(checklist.itemCount ?? checklistItems.length) + 1,
+    passedCount: Number(checklist.passedCount ?? 0) + (freshness.fresh ? 1 : 0),
+    blockedCount: Number(checklist.blockedCount ?? 0) + (freshness.fresh ? 0 : 1),
     missingCount: Number(checklist.missingCount ?? 0),
-    blockedItems: Array.isArray(checklist.items)
-      ? checklist.items
-          .filter((item) => item?.status !== 'passed')
-          .map((item) => ({
-            id: item.id,
-            label: item.label,
-            status: item.status,
-            blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
-            evidence: item.evidence || {},
-          }))
-      : [],
-    items: Array.isArray(checklist.items)
-      ? checklist.items.map((item) => ({
-          id: item.id,
-          label: item.label,
-          status: item.status,
-          passed: item.passed === true,
-          blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
-        }))
-      : [],
+    blockedItems: items
+      .filter((item) => item?.status !== 'passed')
+      .map((item) => ({
+        id: item.id,
+        label: item.label,
+        status: item.status,
+        blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
+        evidence: item.evidence || {},
+      })),
+    items: items.map((item) => ({
+      id: item.id,
+      label: item.label,
+      status: item.status,
+      passed: item.passed === true,
+      blockedBy: Array.isArray(item.blockedBy) ? item.blockedBy : [],
+    })),
   }
 }
 
@@ -127,6 +198,10 @@ function run(options = parseArgs()) {
   const report = buildCompletionChecklistReport(
     manifest,
     formatDisplayPath(options.manifestFile),
+    {
+      maxAgeMinutes: options.maxAgeMinutes,
+      now: options.now,
+    },
   )
   writeJsonReport(options.outputFile, report)
   return report
@@ -151,7 +226,9 @@ if (require.main === module) {
 
 module.exports = {
   DEFAULT_MANIFEST,
+  DEFAULT_MAX_MANIFEST_AGE_MINUTES,
   buildCompletionChecklistReport,
+  buildManifestFreshness,
   formatDisplayPath,
   parseArgs,
   readJsonFile,
diff --git a/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js b/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
index 43145812..33c22e80 100644
--- a/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
+++ b/furniture-3d-system/tests/scripts/print-master-data-foundation-checklist.test.js
@@ -3,7 +3,9 @@ const os = require('node:os')
 const path = require('node:path')
 const {
   DEFAULT_MANIFEST,
+  DEFAULT_MAX_MANIFEST_AGE_MINUTES,
   buildCompletionChecklistReport,
+  buildManifestFreshness,
   formatDisplayPath,
   parseArgs,
   run,
@@ -52,32 +54,48 @@ describe('print-master-data-foundation-checklist', () => {
   it('parses default and explicit paths', () => {
     expect(parseArgs([])).toEqual({
       manifestFile: path.resolve(DEFAULT_MANIFEST),
+      maxAgeMinutes: DEFAULT_MAX_MANIFEST_AGE_MINUTES,
       outputFile: '',
     })
     expect(parseArgs(['--manifest', 'manifest.json', '--output=result.json'])).toEqual({
       manifestFile: path.resolve('manifest.json'),
+      maxAgeMinutes: DEFAULT_MAX_MANIFEST_AGE_MINUTES,
       outputFile: path.resolve('result.json'),
     })
-    expect(parseArgs(['--manifest=manifest.json', '--output', 'result.json'])).toEqual({
+    expect(parseArgs(['--manifest=manifest.json', '--output', 'result.json', '--max-age-minutes=15'])).toEqual({
       manifestFile: path.resolve('manifest.json'),
+      maxAgeMinutes: 15,
       outputFile: path.resolve('result.json'),
     })
     expect(() => parseArgs(['--manifest'])).toThrow('--manifest')
     expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--max-age-minutes=0'])).toThrow('--max-age-minutes')
     expect(() => parseArgs(['--apply'])).toThrow('未知参数')
   })
 
   it('builds a safe completion checklist report from the audit manifest', () => {
-    const report = buildCompletionChecklistReport(createManifest(), 'manifest.json')
+    const report = buildCompletionChecklistReport(createManifest(), 'manifest.json', {
+      maxAgeMinutes: 60,
+      now: new Date('2026-06-01T14:43:22.661Z'),
+    })
 
     expect(report).toEqual({
       mode: 'master-data-foundation-completion-checklist',
       sourceManifest: 'manifest.json',
       checkedAt: '2026-06-01T14:33:22.661Z',
+      freshness: {
+        checkedAt: '2026-06-01T14:33:22.661Z',
+        evaluatedAt: '2026-06-01T14:43:22.661Z',
+        maxAgeMinutes: 60,
+        ageMinutes: 10,
+        fresh: true,
+        stale: false,
+        reason: '',
+      },
       hardReady: false,
       complete: false,
-      itemCount: 2,
-      passedCount: 1,
+      itemCount: 3,
+      passedCount: 2,
       blockedCount: 1,
       missingCount: 0,
       blockedItems: [
@@ -108,10 +126,91 @@ describe('print-master-data-foundation-checklist', () => {
           passed: false,
           blockedBy: ['migration-status:fullyReady'],
         },
+        {
+          id: 'audit-manifest-freshness',
+          label: '地基审计证据新鲜度',
+          status: 'passed',
+          passed: true,
+          blockedBy: [],
+        },
       ],
     })
   })
 
+  it('marks stale manifests as blocked even when their old checklist says complete', () => {
+    const manifest = createManifest({
+      checkedAt: '2026-06-01T10:00:00.000Z',
+      hardReady: true,
+      foundationCompletionChecklist: {
+        itemCount: 1,
+        passedCount: 1,
+        blockedCount: 0,
+        missingCount: 0,
+        complete: true,
+        items: [
+          {
+            id: 'truth-source-matrix',
+            label: '核心对象唯一真相源矩阵',
+            status: 'passed',
+            passed: true,
+            blockedBy: [],
+            evidence: {},
+          },
+        ],
+      },
+    })
+
+    const report = buildCompletionChecklistReport(manifest, 'manifest.json', {
+      maxAgeMinutes: 60,
+      now: new Date('2026-06-01T12:30:00.000Z'),
+    })
+
+    expect(report.complete).toBe(false)
+    expect(report.freshness).toEqual(
+      expect.objectContaining({
+        fresh: false,
+        stale: true,
+        ageMinutes: 150,
+      }),
+    )
+    expect(report.blockedItems).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'audit-manifest-freshness',
+          status: 'blocked',
+          blockedBy: ['audit-manifest-stale'],
+        }),
+      ]),
+    )
+  })
+
+  it('builds manifest freshness evidence from checkedAt and age limits', () => {
+    expect(
+      buildManifestFreshness(
+        { checkedAt: '2026-06-01T10:00:00.000Z' },
+        { maxAgeMinutes: 30, now: new Date('2026-06-01T10:20:00.000Z') },
+      ),
+    ).toEqual(
+      expect.objectContaining({
+        ageMinutes: 20,
+        fresh: true,
+        stale: false,
+      }),
+    )
+    expect(
+      buildManifestFreshness(
+        { checkedAt: '2026-06-01T10:00:00.000Z' },
+        { maxAgeMinutes: 30, now: new Date('2026-06-01T11:00:00.000Z') },
+      ),
+    ).toEqual(
+      expect.objectContaining({
+        ageMinutes: 60,
+        fresh: false,
+        stale: true,
+      }),
+    )
+  })
+
   it('formats source manifest paths without leaking absolute workspace paths', () => {
     const cwd = path.resolve('workspace')
     expect(formatDisplayPath(path.join(cwd, '.master-data-audits/manifest.json'), cwd)).toBe(
@@ -133,7 +232,12 @@ describe('print-master-data-foundation-checklist', () => {
     const outputFile = path.join(tempDir, 'checklist.json')
     fs.writeFileSync(manifestFile, JSON.stringify(createManifest(), null, 2), 'utf8')
 
-    const report = run({ manifestFile, outputFile })
+    const report = run({
+      manifestFile,
+      outputFile,
+      maxAgeMinutes: 60,
+      now: new Date('2026-06-01T14:43:22.661Z'),
+    })
 
     expect(report.complete).toBe(false)
     expect(report.sourceManifest).toBe(path.basename(manifestFile))

From ebeb7624d6fe7ac256cf25945fd3c6c89c753375 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 14:06:47 +0800
Subject: [PATCH 13/14] chore(data-foundation): clarify structure repair
 evidence

---
 .../scripts/plan-prisma-baseline-repair.js    | 15 +++++-
 .../plan-prisma-baseline-repair.test.js       | 50 +++++++++++++++++++
 2 files changed, 63 insertions(+), 2 deletions(-)

diff --git a/furniture-3d-system/scripts/plan-prisma-baseline-repair.js b/furniture-3d-system/scripts/plan-prisma-baseline-repair.js
index 585bf3f3..968ec540 100644
--- a/furniture-3d-system/scripts/plan-prisma-baseline-repair.js
+++ b/furniture-3d-system/scripts/plan-prisma-baseline-repair.js
@@ -196,12 +196,14 @@ function buildEvidenceSummary(preflight, rehearsal = null, structureRehearsal =
   const migrationDiffStatus = diffStatus(preflight.migrationDiff)
   const rehearsalP3005 = rehearsal?.migrateDeploy?.p3005Detected === true
   const structureRepairRehearsal = summarizeStructureRehearsal(structureRehearsal)
+  const postRepairEquivalenceProvenByStructureRehearsal =
+    structureRehearsalProvesMigrationSchemaEquivalence(structureRepairRehearsal)
   const migrationSchemaDiffProvenByStructureRehearsal =
     migrationSchemaDiffStatus === 'skipped' &&
-    structureRehearsalProvesMigrationSchemaEquivalence(structureRepairRehearsal)
+    postRepairEquivalenceProvenByStructureRehearsal
   const migrationDiffProvenByStructureRehearsal =
     migrationDiffStatus === 'skipped' &&
-    structureRehearsalProvesMigrationSchemaEquivalence(structureRepairRehearsal)
+    postRepairEquivalenceProvenByStructureRehearsal
   return {
     backupUsable: preflight.backupEvidence?.usable === true,
     backupVerified: preflight.backupVerification
@@ -214,6 +216,15 @@ function buildEvidenceSummary(preflight, rehearsal = null, structureRehearsal =
     migrationSchemaDiffProvenByStructureRehearsal,
     migrationDiffStatus,
     migrationDiffProvenByStructureRehearsal,
+    postRepairEquivalenceProvenByStructureRehearsal,
+    currentSchemaDiffResolvedByStructureRehearsal:
+      structureRepairRehearsal.passed &&
+      preflight.currentSchemaDiffHasSql === true &&
+      structureRepairRehearsal.currentSchemaDiffAfterStatus === 0,
+    migrationDiffResolvedByStructureRehearsal:
+      structureRepairRehearsal.passed &&
+      migrationDiffStatus === 'not-empty' &&
+      structureRepairRehearsal.migrationDiffAfterStatus === 0,
     currentSchemaDiffHasSql: preflight.currentSchemaDiffHasSql === true,
     pendingMigrationCount: preflight.pendingMigrationCount ?? 0,
     directMigrateDeployBlockedByP3005: rehearsalP3005,
diff --git a/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js b/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
index 00dbafb8..c529153e 100644
--- a/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
+++ b/furniture-3d-system/tests/scripts/plan-prisma-baseline-repair.test.js
@@ -194,6 +194,8 @@ describe('plan-prisma-baseline-repair', () => {
     )
     expect(plan.evidence.migrationSchemaDiffProvenByStructureRehearsal).toBe(true)
     expect(plan.evidence.migrationDiffProvenByStructureRehearsal).toBe(true)
+    expect(plan.evidence.postRepairEquivalenceProvenByStructureRehearsal).toBe(true)
+    expect(plan.evidence.currentSchemaDiffResolvedByStructureRehearsal).toBe(true)
     expect(plan.runbook.repairSqlArtifact).toEqual({
       sizeBytes: 17304,
       sha256: 'b'.repeat(64),
@@ -215,6 +217,54 @@ describe('plan-prisma-baseline-repair', () => {
     expect(JSON.stringify(plan)).not.toContain('sensitive/local/structure-repair.sql')
   })
 
+  it('keeps current diff evidence distinct from post-repair equivalence evidence', () => {
+    const plan = buildBaselineRepairPlan({
+      preflight: preflight({
+        pendingMigrationCount: 86,
+        currentSchemaDiffHasSql: true,
+        migrationDiff: {
+          skipped: false,
+          ok: false,
+          status: 2,
+        },
+        migrationSchemaDiff: {
+          skipped: false,
+          ok: true,
+          status: 0,
+        },
+      }),
+      structureRehearsal: {
+        status: 'structure-repair-rehearsal-passed',
+        repairApply: { ok: true },
+        repairSqlSummary: { hasDestructiveStatements: false },
+        repairSqlArtifact: {
+          sizeBytes: 17304,
+          sha256: 'd'.repeat(64),
+        },
+        currentSchemaDiffAfter: { status: 0 },
+        migrationDiffAfter: { status: 0 },
+        baselineResolvePlan: {
+          candidate: true,
+          migrationCount: 86,
+        },
+        baselineResolveRehearsal: {
+          ok: true,
+          appliedCount: 86,
+        },
+        prismaMigrateStatusAfterResolve: { status: 0 },
+      },
+    })
+
+    expect(plan.status).toBe('ready-for-authorized-structure-repair')
+    expect(plan.evidence.migrationSchemaDiffStatus).toBe('empty')
+    expect(plan.evidence.migrationDiffStatus).toBe('not-empty')
+    expect(plan.evidence.migrationSchemaDiffProvenByStructureRehearsal).toBe(false)
+    expect(plan.evidence.migrationDiffProvenByStructureRehearsal).toBe(false)
+    expect(plan.evidence.postRepairEquivalenceProvenByStructureRehearsal).toBe(true)
+    expect(plan.evidence.currentSchemaDiffResolvedByStructureRehearsal).toBe(true)
+    expect(plan.evidence.migrationDiffResolvedByStructureRehearsal).toBe(true)
+  })
+
   it('blocks structure repair runbooks when preflight and rehearsal migration counts differ', () => {
     const plan = buildBaselineRepairPlan({
       preflight: preflight({

From 545b1165c4c161745087938f913eff61edbc74c6 Mon Sep 17 00:00:00 2001
From: WuYongJie <wuyongjie@users.noreply.git.1080p.hk>
Date: Tue, 2 Jun 2026 16:05:45 +0800
Subject: [PATCH 14/14] chore(data-foundation): close master data readiness
 gaps

---
 .../docs/架构设计/内部主数据地基治理方案.md   |   4 +-
 .../docs/架构设计/数据库混乱点治理台账.md     |   2 +-
 ...apply-master-data-foundation-migrations.js | 164 ++++++++++++++--
 .../apply-pre-sku-formalization-repair.js     |  10 +-
 .../master-data-required-migrations.js        | 107 ++++++++++-
 ...master-data-foundation-decision-package.js |   2 +
 .../scripts/verify-master-data-foundation.js  |  11 +-
 .../scripts/verify-master-data-readiness.js   |   3 +-
 ...-master-data-foundation-migrations.test.js | 177 +++++++++++++++++-
 ...apply-pre-sku-formalization-repair.test.js |  26 +++
 ...r-data-foundation-decision-package.test.js |  15 +-
 .../verify-master-data-foundation.test.js     | 124 +++++++++++-
 .../verify-master-data-readiness.test.js      |   5 +
 13 files changed, 614 insertions(+), 36 deletions(-)

diff --git a/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md b/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
index 25291886..41e2a439 100644
--- a/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
+++ b/furniture-3d-system/docs/架构设计/内部主数据地基治理方案.md
@@ -76,7 +76,7 @@
 
 如果完成清单没有 8/8 通过，下一步施工判断看 `npm run db:foundation:decision-package`。它同样默认读取 `.master-data-audits/foundation-audit-current-goal/manifest.json`，只从 manifest 的脱敏摘要和完成清单生成“决策包”，把剩余阻断拆成结构修复授权、治理迁移落库、历史字段业务确认、PreSku 生命周期专用决策和最终验证五段。这个入口不写数据库、不复制敏感候选行、不输出绝对路径；用途是防止后续把 `apply-structure`、`resolve-baseline`、`apply-required`、历史清洗和 PreSku 专用修复混成一条危险捷径。决策包的 `nextGate` 只表示下一道施工门禁，不表示该门禁已经被授权或已完成。
 
-决策包还必须输出 `executionChecklist`，把真实施工拆成“授权前刷新证据 -> 真实执行结构修复 SQL -> 结构修复后重新预检 -> 逐项补齐 Prisma 迁移历史 -> 应用治理迁移/护栏 -> 业务确认后清洗历史质量债 -> 最终 hardReady 审计”。其中所有 `writeDatabase=true` 的阶段都必须有明确用户授权；`apply-structure` 成功前禁止进入 `resolve-baseline / apply-required / 历史清洗`，`post-repair preflight` 未证明结构 diff 归零前禁止 baseline resolve，治理迁移未 `fullyReady` 前禁止历史清洗。这个顺序是地基施工门禁，不是建议步骤。
+决策包还必须输出 `executionChecklist`，把真实施工拆成“授权前刷新证据 -> 真实执行结构修复 SQL -> 结构修复后重新预检 -> 逐项补齐 Prisma 迁移历史 -> 应用 bootstrap-repair 结构/回填修复 -> 应用最终治理迁移/护栏 -> 业务确认后清洗历史质量债 -> 最终 hardReady 审计”。其中所有 `writeDatabase=true` 的阶段都必须有明确用户授权；`apply-structure` 成功前禁止进入 `resolve-baseline / apply-required / 历史清洗`，`post-repair preflight` 未证明结构 diff 归零前禁止 baseline resolve，治理迁移未 `fullyReady` 前禁止历史清洗。这个顺序是地基施工门禁，不是建议步骤。
 
 如果要让批次审计同时保留 shadow diff 证据，可以显式追加 `--use-docker-shadow`，例如 `npm run db:foundation:audit:cleanup-template -- --use-docker-shadow --docker-shadow-port 65446`。该模式会启动临时 Docker PostgreSQL 作为 `SHADOW_DATABASE_URL`，审计结束后自动删除容器，并在 manifest 写入 `shadowDiffEvidence`；它不会修改目标数据库，也不会替代备份证据。默认不启用，避免普通审计命令偷偷拉起容器。
 
@@ -126,7 +126,7 @@
 
 真实库结构修复和 baseline resolve 不再建议手工复制 `psql` 或 `migrate resolve` 命令直接施工，而是走 `npm run db:foundation:apply-structure-repair`。该入口默认只输出授权计划；`apply-structure` 阶段只负责执行已经校验 SHA-256、SQL 本体安全、证据新鲜且目标库身份一致的结构修复 SQL，成功后必须重新跑 preflight；`resolve-baseline` 阶段要求 post-repair preflight 已证明当前库到 `schema.prisma`、migrations 到当前库的 diff 都为空，再按演练报告中的 migration id 清单逐项 resolve。这样把“补结构”和“补迁移历史”拆成两个可验收阶段，避免一次命令混做两件高风险动作。
 
-baseline resolve 完成后，治理迁移、外部只读视图、约束、触发器和护栏统一走 `npm run db:foundation:apply-required`。该入口默认只输出 dry-run 计划；如果 `_prisma_migrations` 不存在、存在失败/回滚记录，或仍有结构迁移未就绪，会固定阻断真实执行。真实应用必须显式传入 `--apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，并在事务里应用 `scripts/master-data-required-migrations.js` 登记的缺口；应用后若不能达到 `fullyReady` 会回滚。这个入口只服务“结构修复 + baseline resolve 之后”的治理护栏补齐，不能代替 `migrate deploy`，也不能用于绕过结构修复。
+baseline resolve 完成后，治理迁移、外部只读视图、约束、触发器和护栏统一走 `npm run db:foundation:apply-required`，但必须分阶段看待。该入口默认只输出 dry-run 计划；如果 `_prisma_migrations` 不存在、存在失败/回滚记录，仍会固定阻断真实执行。第一阶段可显式使用 `--phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`，只处理缺失目标结构和清单中登记过 `repairSql` 的真实回填；目标结构已经存在但没有 `repairSql` 的未就绪迁移会被阻断，不能盲目重跑整段 migration。第二阶段再使用不带 `--phase` 的默认 `finalize` 命令应用最终治理护栏；该阶段仍会要求结构迁移和历史数据检查全部 ready，应用后若不能达到 `fullyReady` 会回滚。这个入口只服务“结构修复 + baseline resolve 之后”的治理迁移补齐，不能代替 `migrate deploy`，也不能用于绕过结构修复或业务清洗。
 
 ## 2. 内部真相源分层
 
diff --git a/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md b/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
index 0834c7f8..d3e0918b 100644
--- a/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
+++ b/furniture-3d-system/docs/架构设计/数据库混乱点治理台账.md
@@ -33,7 +33,7 @@
 
 当前整体处于 L2，局部字段处于 L3。只要外部系统接入前先完成契约层，并让真实数据库迁移通过 strict 验收，就能避免滑向 L4。
 
-截至当前治理轮次，混乱已经不再主要表现为“没人知道该读哪里”，而是集中在两类可验证剩余项：一是治理清单里的结构迁移需要真实落库验收，二是 2 条历史 SKU 明细仍需业务确认后显式清洗。分阶段清洗原因已新增 `MasterDataQualityDecision` 作为数据库审计表，但它不改变 `INCOMPLETE` 的 hard blocker 语义。治理迁移目录已经纳入自检，新增或调整迁移必须登记在 `scripts/master-data-required-migrations.js`，并通过 path、顺序、目标 relation、SQL 引用和执行后目标存在性校验；当前治理窗口内新增外部 v1 视图、约束、唯一索引或触发器时，测试会反查是否进入该目录，`alwaysApply` 中出现 DML 也必须显式分类。迁移链已新增 shadow 重放对齐证据：`migrationSchemaDiff.status = 0` 代表 migrations 能从空库重放到当前 `schema.prisma`，但当前目标库仍缺 `_prisma_migrations`，不能直接 `prisma migrate deploy`。readiness 现在会把当前库/schema diff 的前几条 DDL、pending Prisma migration 名单、缺迁移历史的正确施工顺序，以及历史质量债样本直接写入 blocker evidence，避免只看到数量却无法施工；同时输出 `nextActionPlan`，按结构/迁移历史、治理护栏、历史字段清洗、准 SKU 生命周期错位四段排好后续动作。批次审计 `manifest.json` 也会写入脱敏 `readinessSummary`，方便不打开敏感子报告也能看到下一步顺序。本轮已用 Docker 生成并校验本地备份 `.database-backups/furniture_3d-20260531T232931Z.dump`，克隆库复现 `P3005`，并通过 `foundation-audit-current-goal/structure-repair-rehearsal.json` 演练证明：非破坏性结构修复 SQL 可让 current schema diff 和 migration diff 归零，86 条 baseline resolve 可在克隆库全量成功；同批 `baseline-repair-plan.json` 已输出 `ready-for-authorized-structure-repair`，并记录 SQL artifact 大小 17304 字节、SHA-256 `f569af9e2cf8c26e3e0e007217b9187e3d30a20aaa3dac3c5cd1db843ade6f28`。新增 `authorized-structure-repair-apply-plan.json` 和 `scripts/apply-prisma-structure-repair.js` 后，真实结构施工不再靠手工复制 `psql`/`migrate resolve`，而是先校验 preflight、演练报告、SQL 大小/SHA-256、SQL 本体安全、目标库身份、备份文件 SHA-256、报告新鲜度和 baseline migration 数，再分 `apply-structure` 与 `resolve-baseline` 两阶段执行。新增 `foundation-required-migration-apply-plan.json` 明确把治理护栏应用从 `migrate deploy` 中拆开：当前真实库因 `_prisma_migrations` 不存在且仍有结构迁移未就绪，`readyToApply = false`；只有结构修复和 baseline resolve 完成后，才允许用 `apply-master-data-foundation-migrations` 的确认口令事务性应用治理视图/约束/触发器。但真实库执行前仍必须重新生成备份、preflight、结构修复计划并取得明确授权，并且真实执行命令必须显式带上目标库身份和备份 SHA-256。当前克隆库结构修复演练已通过，说明结构缺口和迁移历史缺口有可重复修复路径，但这仍不等于真实库已经 hard ready。
+截至当前治理轮次，混乱已经不再主要表现为“没人知道该读哪里”，而是集中在两类可验证剩余项：一是治理清单里的结构迁移需要真实落库验收，二是 2 条历史 SKU 明细仍需业务确认后显式清洗。分阶段清洗原因已新增 `MasterDataQualityDecision` 作为数据库审计表，但它不改变 `INCOMPLETE` 的 hard blocker 语义。治理迁移目录已经纳入自检，新增或调整迁移必须登记在 `scripts/master-data-required-migrations.js`，并通过 path、顺序、目标 relation、SQL 引用和执行后目标存在性校验；当前治理窗口内新增外部 v1 视图、约束、唯一索引或触发器时，测试会反查是否进入该目录，`alwaysApply` 中出现 DML 也必须显式分类。迁移链已新增 shadow 重放对齐证据：`migrationSchemaDiff.status = 0` 代表 migrations 能从空库重放到当前 `schema.prisma`，但当前目标库仍缺 `_prisma_migrations`，不能直接 `prisma migrate deploy`。readiness 现在会把当前库/schema diff 的前几条 DDL、pending Prisma migration 名单、缺迁移历史的正确施工顺序，以及历史质量债样本直接写入 blocker evidence，避免只看到数量却无法施工；同时输出 `nextActionPlan`，按结构/迁移历史、治理护栏、历史字段清洗、准 SKU 生命周期错位四段排好后续动作。批次审计 `manifest.json` 也会写入脱敏 `readinessSummary`，方便不打开敏感子报告也能看到下一步顺序。本轮已用 Docker 生成并校验本地备份 `.database-backups/furniture_3d-20260531T232931Z.dump`，克隆库复现 `P3005`，并通过 `foundation-audit-current-goal/structure-repair-rehearsal.json` 演练证明：非破坏性结构修复 SQL 可让 current schema diff 和 migration diff 归零，86 条 baseline resolve 可在克隆库全量成功；同批 `baseline-repair-plan.json` 已输出 `ready-for-authorized-structure-repair`，并记录 SQL artifact 大小 17304 字节、SHA-256 `f569af9e2cf8c26e3e0e007217b9187e3d30a20aaa3dac3c5cd1db843ade6f28`。新增 `authorized-structure-repair-apply-plan.json` 和 `scripts/apply-prisma-structure-repair.js` 后，真实结构施工不再靠手工复制 `psql`/`migrate resolve`，而是先校验 preflight、演练报告、SQL 大小/SHA-256、SQL 本体安全、目标库身份、备份文件 SHA-256、报告新鲜度和 baseline migration 数，再分 `apply-structure` 与 `resolve-baseline` 两阶段执行。新增 `foundation-required-migration-apply-plan.json` 明确把治理迁移应用从 `migrate deploy` 中拆开，且进一步分成 `bootstrap-repair` 与 `finalize`：前者只处理缺失目标结构和已登记 `repairSql` 的真实回填，不允许靠“批准缺失”绕过 hard-ready；后者才应用最终治理视图/约束/触发器，并要求结构迁移、数据检查和迁移历史全部 ready。当前真实库因 `_prisma_migrations` 不存在且仍有结构迁移未就绪，`readyToApply = false`；只有结构修复和 baseline resolve 完成后，才允许用 `apply-master-data-foundation-migrations` 的确认口令事务性执行上述两阶段。但真实库执行前仍必须重新生成备份、preflight、结构修复计划并取得明确授权，并且真实执行命令必须显式带上目标库身份和备份 SHA-256。当前克隆库结构修复演练已通过，说明结构缺口和迁移历史缺口有可重复修复路径，但这仍不等于真实库已经 hard ready。
 
 ## 3. 治理台账
 
diff --git a/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js b/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
index b36f6455..d8330ec5 100644
--- a/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
+++ b/furniture-3d-system/scripts/apply-master-data-foundation-migrations.js
@@ -4,6 +4,7 @@ const path = require('node:path')
 const { Pool } = require('pg')
 const { loadDatabaseUrl, describeDatabaseUrl, getDatabaseIdentity } = require('./diagnose-prisma-migration-baseline')
 const {
+  REQUIRED_MIGRATIONS,
   applyMissingMigrationFiles,
   classifyAppliedMigrationPaths,
   validateRequiredMigrationCatalog,
@@ -14,6 +15,7 @@ const {
 
 const ROOT_DIR = path.resolve(__dirname, '..')
 const CONFIRM_TOKEN = 'apply-master-data-foundation-migrations'
+const APPLY_PHASES = new Set(['finalize', 'bootstrap-repair'])
 
 function parseArgs(argv = process.argv.slice(2)) {
   const options = {
@@ -22,6 +24,7 @@ function parseArgs(argv = process.argv.slice(2)) {
     expectedDatabaseIdentity: '',
     expectedBackupSha256: '',
     outputPath: '',
+    phase: 'finalize',
   }
 
   for (let index = 0; index < argv.length; index += 1) {
@@ -76,6 +79,26 @@ function parseArgs(argv = process.argv.slice(2)) {
       }
       continue
     }
+    if (arg === '--phase') {
+      const value = argv[index + 1]
+      if (!value || value.startsWith('--')) {
+        throw new Error('缺少 --phase <finalize|bootstrap-repair>。')
+      }
+      if (!APPLY_PHASES.has(value)) {
+        throw new Error(`未知 phase：${value}`)
+      }
+      options.phase = value
+      index += 1
+      continue
+    }
+    if (arg.startsWith('--phase=')) {
+      const value = arg.slice('--phase='.length)
+      if (!APPLY_PHASES.has(value)) {
+        throw new Error(`未知 phase：${value}`)
+      }
+      options.phase = value
+      continue
+    }
     throw new Error(`未知参数：${arg}`)
   }
 
@@ -98,6 +121,74 @@ function migrationHistoryReady(migrationHistory = {}) {
   )
 }
 
+function normalizeSha256(value) {
+  return String(value || '').trim().toLowerCase()
+}
+
+function getMigrationCatalogByPath(migrations = REQUIRED_MIGRATIONS) {
+  return new Map(migrations.map((migration) => [migration.path, migration]))
+}
+
+function targetRelationsReady(migrationReadiness = {}) {
+  return !Array.isArray(migrationReadiness.targetRelations) ||
+    migrationReadiness.targetRelations.every((relation) => relation.exists === true)
+}
+
+function getFailedDataChecks(readiness = {}) {
+  if (!Array.isArray(readiness.checks)) return []
+  return readiness.checks.flatMap((migration) => {
+    if (!targetRelationsReady(migration) || !Array.isArray(migration.dataChecks)) return []
+    return migration.dataChecks
+      .filter((check) => check.matches === false)
+      .map((check) => ({
+        path: migration.path,
+        kind: migration.kind,
+        name: check.name,
+        expectedValue: check.expectedValue,
+      }))
+  })
+}
+
+function getBootstrapRepairPlan(readiness = {}, migrations = REQUIRED_MIGRATIONS) {
+  const catalogByPath = getMigrationCatalogByPath(migrations)
+  const candidates = []
+  const blockers = []
+
+  for (const migrationReadiness of readiness.checks || []) {
+    if (migrationReadiness.kind !== 'structure' || migrationReadiness.ready === true) {
+      continue
+    }
+
+    const migration = catalogByPath.get(migrationReadiness.path)
+    if (!migration) {
+      blockers.push({
+        key: 'bootstrapRepair.catalogMissing',
+        path: migrationReadiness.path,
+        message: '结构修复阶段发现 readiness 里存在未登记的治理迁移，不能继续。'
+      })
+      continue
+    }
+
+    const targetReady = targetRelationsReady(migrationReadiness)
+    const hasRepairSql = Boolean(migration.repairSql)
+    if (!targetReady || hasRepairSql) {
+      candidates.push({
+        path: migration.path,
+        strategy: targetReady ? 'repair-sql' : 'migration-sql',
+      })
+      continue
+    }
+
+    blockers.push({
+      key: 'bootstrapRepair.unrepairableStructureMigration',
+      path: migration.path,
+      message: '结构迁移目标已存在但仍未就绪，且未声明 repairSql；不能用 bootstrap 阶段盲目执行。'
+    })
+  }
+
+  return { candidates, blockers }
+}
+
 function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
   const rawPath = env.DATABASE_BACKUP_FILE || env.DB_BACKUP_FILE || ''
   if (!rawPath) {
@@ -118,21 +209,10 @@ function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
 }
 
 function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
+  const phase = options.phase || 'finalize'
   const blockers = []
-  const failedDataChecks = Array.isArray(readiness.checks)
-    ? readiness.checks.flatMap((migration) => {
-        const targetRelationsReady = !Array.isArray(migration.targetRelations) ||
-          migration.targetRelations.every((relation) => relation.exists === true)
-        if (!targetRelationsReady || !Array.isArray(migration.dataChecks)) return []
-        return migration.dataChecks
-          .filter((check) => check.matches === false)
-          .map((check) => ({
-            path: migration.path,
-            name: check.name,
-            expectedValue: check.expectedValue,
-          }))
-      })
-    : []
+  const failedDataChecks = getFailedDataChecks(readiness)
+  const bootstrapRepairPlan = getBootstrapRepairPlan(readiness)
 
   if (!migrationHistoryReady(readiness.migrationHistory)) {
     blockers.push({
@@ -140,14 +220,14 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
       message: '治理迁移/护栏真实应用前，必须先补齐 _prisma_migrations 历史且无失败/回滚记录。',
     })
   }
-  if (readiness.pendingStructureMigrationCount > 0) {
+  if (phase === 'finalize' && readiness.pendingStructureMigrationCount > 0) {
     blockers.push({
       key: 'pendingStructureMigrationCount',
       value: readiness.pendingStructureMigrationCount,
       message: '仍有结构迁移未就绪，不能先应用治理护栏；必须先完成结构修复和 baseline resolve。',
     })
   }
-  if (failedDataChecks.length > 0) {
+  if (phase === 'finalize' && failedDataChecks.length > 0) {
     blockers.push({
       key: 'dataChecks.notReady',
       value: failedDataChecks.length,
@@ -155,6 +235,15 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
       evidence: failedDataChecks,
     })
   }
+  if (phase === 'bootstrap-repair') {
+    blockers.push(...bootstrapRepairPlan.blockers)
+    if (bootstrapRepairPlan.candidates.length === 0) {
+      blockers.push({
+        key: 'bootstrapRepair.noWork',
+        message: '当前没有可由 bootstrap-repair 阶段处理的结构迁移或历史回填。'
+      })
+    }
+  }
   if (options.apply && options.confirm !== CONFIRM_TOKEN) {
     blockers.push({
       key: 'confirm',
@@ -182,7 +271,7 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
       message: '治理迁移真实执行必须显式传入 --expected-backup-sha256，避免在没有确认备份的情况下写库。',
     })
   } else if (options.apply && options.backupFingerprint?.sha256) {
-    if (options.expectedBackupSha256 !== options.backupFingerprint.sha256) {
+    if (normalizeSha256(options.expectedBackupSha256) !== normalizeSha256(options.backupFingerprint.sha256)) {
       blockers.push({
         key: 'expectedBackupSha256.mismatch',
         message: '命令行指定的备份 sha256 和当前 DATABASE_BACKUP_FILE 不一致，禁止应用治理迁移。',
@@ -203,6 +292,7 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
 
   return {
     mode: 'master-data-foundation-required-migration-apply-plan',
+    phase,
     dryRun: !options.apply,
     readyToApply: options.apply === true && blockers.length === 0,
     confirmToken: CONFIRM_TOKEN,
@@ -214,11 +304,19 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
     pendingIdempotentMigrationCount: readiness.pendingIdempotentMigrationCount,
     pendingStructureMigrationPaths: readiness.pendingStructureMigrationPaths,
     pendingIdempotentMigrationPaths: readiness.pendingIdempotentMigrationPaths,
+    failedDataChecks,
+    bootstrapRepairCandidates: bootstrapRepairPlan.candidates,
     blockers,
     actualDatabaseIdentity: options.actualDatabaseIdentity || '',
     expectedDatabaseIdentity: options.expectedDatabaseIdentity || '',
     backupFingerprint: options.backupFingerprint || null,
     commands: [
+      {
+        name: 'apply-bootstrap-structure-and-backfill-repairs',
+        command: `node scripts/apply-master-data-foundation-migrations.js --phase=bootstrap-repair --apply --confirm=${CONFIRM_TOKEN} --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`,
+        purpose: '在 migration history 已补齐后，只应用缺失结构和可证明的 repairSql 回填，不提前应用最终治理护栏。',
+        dangerous: true,
+      },
       {
         name: 'apply-required-foundation-migrations',
         command: `node scripts/apply-master-data-foundation-migrations.js --apply --confirm=${CONFIRM_TOKEN} --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>`,
@@ -235,6 +333,18 @@ function buildFoundationRequiredMigrationApplyPlan(readiness, options = {}) {
   }
 }
 
+function getMigrationsByPaths(paths, migrations = REQUIRED_MIGRATIONS) {
+  const pathSet = new Set(paths)
+  return migrations.filter((migration) => pathSet.has(migration.path))
+}
+
+function getUnreadyPathsAfterApply(after, appliedPaths) {
+  const appliedPathSet = new Set(appliedPaths)
+  return (after.checks || [])
+    .filter((migration) => appliedPathSet.has(migration.path) && migration.ready !== true)
+    .map((migration) => migration.path)
+}
+
 async function runApply(options = parseArgs(), env = process.env) {
   validateRequiredMigrationCatalog()
   const databaseUrl = loadDatabaseUrl(ROOT_DIR, env)
@@ -263,15 +373,26 @@ async function runApply(options = parseArgs(), env = process.env) {
 
     await client.query('BEGIN')
     try {
-      const appliedMigrationPaths = await applyMissingMigrationFiles(client)
+      const targetMigrations = options.phase === 'bootstrap-repair'
+        ? getMigrationsByPaths(plan.bootstrapRepairCandidates.map((candidate) => candidate.path))
+        : REQUIRED_MIGRATIONS
+      const appliedMigrationPaths = await applyMissingMigrationFiles(client, targetMigrations)
       const after = await getRequiredMigrationReadiness(client)
-      if (!after.fullyReady) {
+      if (options.phase === 'bootstrap-repair') {
+        const unreadyAppliedPaths = getUnreadyPathsAfterApply(after, appliedMigrationPaths)
+        if (unreadyAppliedPaths.length > 0) {
+          throw new Error(
+            `bootstrap-repair 应用后仍有目标迁移未就绪，已回滚本次事务：${unreadyAppliedPaths.join(', ')}`,
+          )
+        }
+      } else if (!after.fullyReady) {
         throw new Error('治理迁移应用后仍未达到 fullyReady，已回滚本次事务。')
       }
       await client.query('COMMIT')
       return {
         ...reportBase,
         applied: {
+          phase: options.phase,
           migrationCount: appliedMigrationPaths.length,
           ...classifyAppliedMigrationPaths(appliedMigrationPaths),
           migrationPaths: appliedMigrationPaths,
@@ -307,9 +428,14 @@ if (require.main === module) {
 
 module.exports = {
   CONFIRM_TOKEN,
+  getBootstrapRepairPlan,
   buildFoundationRequiredMigrationApplyPlan,
   getBackupFingerprint,
+  getFailedDataChecks,
+  getMigrationsByPaths,
+  getUnreadyPathsAfterApply,
   migrationHistoryReady,
+  normalizeSha256,
   parseArgs,
   runApply,
   writeJsonReport,
diff --git a/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js b/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
index c414329b..01c63156 100644
--- a/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
+++ b/furniture-3d-system/scripts/apply-pre-sku-formalization-repair.js
@@ -214,6 +214,10 @@ function getBackupFingerprint(env = process.env, rootDir = ROOT_DIR) {
   }
 }
 
+function normalizeSha256(value) {
+  return String(value || '').trim().toLowerCase()
+}
+
 function assertApplyExecutionEvidence(args, options = {}) {
   if (!args.apply) return { actualDatabaseIdentity: '', backupFingerprint: null }
   const actualDatabaseIdentity = databaseIdentityFromUrl(options.databaseUrl)
@@ -228,7 +232,10 @@ function assertApplyExecutionEvidence(args, options = {}) {
   }
   if (!args.expectedBackupSha256) {
     blockers.push('expected-backup-sha256')
-  } else if (backupFingerprint.sha256 && args.expectedBackupSha256 !== backupFingerprint.sha256) {
+  } else if (
+    backupFingerprint.sha256 &&
+    normalizeSha256(args.expectedBackupSha256) !== normalizeSha256(backupFingerprint.sha256)
+  ) {
     blockers.push('expected-backup-sha256-mismatch')
   }
   if (backupFingerprint.provided !== true) {
@@ -735,6 +742,7 @@ module.exports = {
   readJsonPlan,
   writeJsonReport,
   getBackupFingerprint,
+  normalizeSha256,
   assertApplyExecutionEvidence,
   assertNoUnknownExecutionPlanKeys,
   buildExecutionPlanTemplate,
diff --git a/furniture-3d-system/scripts/master-data-required-migrations.js b/furniture-3d-system/scripts/master-data-required-migrations.js
index 4cec732a..b3bf7f41 100644
--- a/furniture-3d-system/scripts/master-data-required-migrations.js
+++ b/furniture-3d-system/scripts/master-data-required-migrations.js
@@ -12,6 +12,12 @@ const TARGET_ONLY_READINESS_ASSURANCES = new Set([
   'database-guard-summary',
   'foundation-quality-summary',
 ])
+const MIGRATION_GUARD_CHECK_TYPES = new Set([
+  'trigger',
+  'check-constraint',
+  'unique-index',
+  'partial-unique-index',
+])
 
 function hasExplicitReadinessChecks(migration) {
   return Boolean(
@@ -1087,6 +1093,69 @@ ALTER TABLE "ProductSKU"
   {
     targetRelation: '"MasterDataQualityDecision"',
     path: 'prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql',
+    guardChecks: [
+      {
+        type: 'partial-unique-index',
+        name: 'MasterDataQualityDecision_open_target_key',
+        tableName: 'MasterDataQualityDecision',
+        predicatePattern: 'status = \'APPROVED_INCOMPLETE\'',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_target_not_blank',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_status_allowed',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_reason_not_blank',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_decidedBy_not_blank',
+        tableName: 'MasterDataQualityDecision',
+      },
+      {
+        type: 'check-constraint',
+        name: 'MasterDataQualityDecision_resolved_state_valid',
+        tableName: 'MasterDataQualityDecision',
+      },
+    ],
+    repairSql: `
+ALTER TABLE "MasterDataQualityDecision"
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_target_not_blank",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_status_allowed",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_reason_not_blank",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_decidedBy_not_blank",
+  DROP CONSTRAINT IF EXISTS "MasterDataQualityDecision_resolved_state_valid",
+  ADD CONSTRAINT "MasterDataQualityDecision_target_not_blank" CHECK (
+    NULLIF(btrim("targetType"), '') IS NOT NULL
+    AND NULLIF(btrim("targetId"), '') IS NOT NULL
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_status_allowed" CHECK (
+    "status" IN ('APPROVED_INCOMPLETE', 'RESOLVED')
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_reason_not_blank" CHECK (
+    NULLIF(btrim("reason"), '') IS NOT NULL
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_decidedBy_not_blank" CHECK (
+    NULLIF(btrim("decidedBy"), '') IS NOT NULL
+  ),
+  ADD CONSTRAINT "MasterDataQualityDecision_resolved_state_valid" CHECK (
+    ("status" <> 'RESOLVED' AND "resolvedAt" IS NULL AND "resolvedBy" IS NULL)
+    OR
+    ("status" = 'RESOLVED' AND "resolvedAt" IS NOT NULL AND NULLIF(btrim(COALESCE("resolvedBy", '')), '') IS NOT NULL)
+  );
+
+CREATE UNIQUE INDEX IF NOT EXISTS "MasterDataQualityDecision_open_target_key"
+  ON "MasterDataQualityDecision"("targetType", "targetId")
+  WHERE "status" = 'APPROVED_INCOMPLETE';
+`,
   },
   {
     targetRelation: '"ProductSKU"',
@@ -1439,9 +1508,12 @@ function validateRequiredMigrationCatalog(options = {}) {
     }
     if (Array.isArray(migration.guardChecks)) {
       migration.guardChecks.forEach((check, checkIndex) => {
-        if (!['trigger', 'check-constraint'].includes(check.type) || !check.name || !check.tableName) {
+        if (!MIGRATION_GUARD_CHECK_TYPES.has(check.type) || !check.name || !check.tableName) {
           errors.push(`迁移 guardChecks[${checkIndex}] 必须声明 type、name 和 tableName：${label}`)
         }
+        if (check.type === 'partial-unique-index' && !check.predicatePattern) {
+          errors.push(`迁移 guardChecks[${checkIndex}] 的 partial-unique-index 必须声明 predicatePattern：${label}`)
+        }
       })
     }
     if (Array.isArray(migration.relationColumnChecks)) {
@@ -1628,6 +1700,13 @@ async function dataCheckPasses(client, check) {
   return firstValue === check.expectedValue
 }
 
+function normalizeSqlFragment(value) {
+  return String(value ?? '')
+    .replace(/\s+/g, ' ')
+    .replace(/""/g, '"')
+    .trim()
+}
+
 async function guardExists(client, guard) {
   if (guard.type === 'trigger') {
     const result = await client.query(`
@@ -1654,6 +1733,32 @@ async function guardExists(client, guard) {
     `, [guard.tableName, guard.name])
     return result.rowCount > 0
   }
+  if (guard.type === 'unique-index' || guard.type === 'partial-unique-index') {
+    const result = await client.query(`
+      SELECT
+        idx.indisunique AS is_unique,
+        pg_get_expr(idx.indpred, idx.indrelid) AS predicate,
+        pg_get_indexdef(cls.oid) AS definition
+      FROM pg_index idx
+      JOIN pg_class cls ON cls.oid = idx.indexrelid
+      JOIN pg_class table_cls ON table_cls.oid = idx.indrelid
+      JOIN pg_namespace ns ON ns.oid = table_cls.relnamespace
+      WHERE ns.nspname = 'public'
+        AND cls.relname = $1
+        AND table_cls.relname = $2
+      LIMIT 1
+    `, [guard.name, guard.tableName])
+    const row = result.rows[0]
+    const predicate = normalizeSqlFragment(row?.predicate)
+    const definition = normalizeSqlFragment(row?.definition)
+    const hasExpectedPredicate =
+      guard.type !== 'partial-unique-index' ||
+      (predicate && predicate.includes(normalizeSqlFragment(guard.predicatePattern)))
+    const hasExpectedDefinition =
+      !guard.definitionPattern || definition.includes(normalizeSqlFragment(guard.definitionPattern))
+
+    return Boolean(row?.is_unique) && hasExpectedPredicate && hasExpectedDefinition
+  }
   return false
 }
 
diff --git a/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js b/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
index 7ef94ec2..a0806495 100644
--- a/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
+++ b/furniture-3d-system/scripts/print-master-data-foundation-decision-package.js
@@ -436,9 +436,11 @@ function buildExecutionChecklist() {
       ],
       commands: [
         'npm run db:foundation:apply-required:audit',
+        'npm run db:foundation:apply-required -- --phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
         'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
       ],
       successCriteria: [
+        'bootstrap-repair 目标迁移 ready = true',
         'migrationApplicationStatus.fullyReady = true',
         'pendingStructureMigrationCount = 0',
         'pendingIdempotentMigrationCount = 0',
diff --git a/furniture-3d-system/scripts/verify-master-data-foundation.js b/furniture-3d-system/scripts/verify-master-data-foundation.js
index 3bb89663..96a87498 100644
--- a/furniture-3d-system/scripts/verify-master-data-foundation.js
+++ b/furniture-3d-system/scripts/verify-master-data-foundation.js
@@ -3608,10 +3608,12 @@ async function getNonIntegratedProductProfileSummary(client) {
   const result = await client.query(`
     SELECT
       COUNT(*)::integer AS total,
-      COUNT(*) FILTER (WHERE NULLIF(btrim("productName"), '') IS NULL)::integer AS missing_product_name,
-      COUNT(*) FILTER (WHERE NULLIF(btrim("productCategory"), '') IS NULL)::integer AS missing_product_category,
-      COUNT(*) FILTER (WHERE NULLIF(btrim("productDevelopmentKind"), '') IS NULL)::integer AS missing_development_kind
-    FROM "IntakeNonIntegratedProductProfile"
+      COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productName"), '') IS NULL)::integer AS missing_product_name,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productCategory"), '') IS NULL)::integer AS missing_product_category,
+      COUNT(*) FILTER (WHERE NULLIF(btrim(profile."productDevelopmentKind"), '') IS NULL)::integer AS missing_development_kind
+    FROM "IntakeNonIntegratedProductProfile" profile
+    JOIN "IntakeNonIntegratedProduct" product ON product."id" = profile."productId"
+    WHERE product."deletedAt" IS NULL
   `)
   return result.rows[0]
 }
@@ -4637,6 +4639,7 @@ module.exports = {
   assertFoundationHardReadyGate,
   printFoundationHardReadyReport,
   getStructuredSkuSummary,
+  getNonIntegratedProductProfileSummary,
   getDuplicateGroupCount,
   buildReport,
   getMigrationHistoryStatus,
diff --git a/furniture-3d-system/scripts/verify-master-data-readiness.js b/furniture-3d-system/scripts/verify-master-data-readiness.js
index 28222d3b..9daf44cb 100644
--- a/furniture-3d-system/scripts/verify-master-data-readiness.js
+++ b/furniture-3d-system/scripts/verify-master-data-readiness.js
@@ -770,9 +770,10 @@ function buildReadinessNextActionPlan(blockers = []) {
       reason: '治理结构、外部只读视图、约束或触发器尚未真实落库。',
       commands: [
         'npm run db:foundation:apply-required:audit',
+        'npm run db:foundation:apply-required -- --phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
         'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
       ],
-      guard: '必须在结构修复和 baseline resolve 完成后执行；不能代替 Prisma 结构修复。',
+      guard: '必须在结构修复和 baseline resolve 完成后执行；bootstrap-repair 只处理缺失结构和登记过 repairSql 的真实回填，finalize 才应用最终治理护栏；不能代替 Prisma 结构修复。',
     })
   }
 
diff --git a/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js b/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
index 509720c8..74345494 100644
--- a/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
+++ b/furniture-3d-system/tests/scripts/apply-master-data-foundation-migrations.test.js
@@ -5,6 +5,9 @@ const {
   CONFIRM_TOKEN,
   buildFoundationRequiredMigrationApplyPlan,
   getBackupFingerprint,
+  getBootstrapRepairPlan,
+  getMigrationsByPaths,
+  getUnreadyPathsAfterApply,
   migrationHistoryReady,
   parseArgs,
   writeJsonReport,
@@ -40,10 +43,12 @@ describe('apply-master-data-foundation-migrations', () => {
       expectedDatabaseIdentity: '',
       expectedBackupSha256: '',
       outputPath: '',
+      phase: 'finalize',
     })
     expect(parseArgs([
       '--apply',
       `--confirm=${CONFIRM_TOKEN}`,
+      '--phase=bootstrap-repair',
       '--expected-database-identity',
       'postgresql|furniture|localhost|5432|furniture_3d|',
       '--expected-backup-sha256=abc123',
@@ -53,6 +58,7 @@ describe('apply-master-data-foundation-migrations', () => {
       expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
       expectedBackupSha256: 'abc123',
       outputPath: '',
+      phase: 'bootstrap-repair',
     })
     expect(parseArgs(['--output=.master-data-audits/apply-plan.json'])).toEqual({
       apply: false,
@@ -60,8 +66,10 @@ describe('apply-master-data-foundation-migrations', () => {
       expectedDatabaseIdentity: '',
       expectedBackupSha256: '',
       outputPath: '.master-data-audits/apply-plan.json',
+      phase: 'finalize',
     })
     expect(() => parseArgs(['--output'])).toThrow('--output')
+    expect(() => parseArgs(['--phase=all-at-once'])).toThrow('未知 phase')
     expect(() => parseArgs(['--force'])).toThrow('未知参数')
   })
 
@@ -146,6 +154,24 @@ describe('apply-master-data-foundation-migrations', () => {
     )
   })
 
+  it('accepts uppercase backup sha256 from shell tooling', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'ABC123',
+      backupFingerprint: { provided: true, exists: true, sha256: 'abc123' },
+    })
+
+    expect(plan.blockers).not.toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'expectedBackupSha256.mismatch' }),
+      ]),
+    )
+    expect(plan.readyToApply).toBe(true)
+  })
+
   it('blocks apply before structure migrations and baseline history are ready', () => {
     const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
       migrationHistory: {
@@ -211,17 +237,164 @@ describe('apply-master-data-foundation-migrations', () => {
           key: 'dataChecks.notReady',
           value: 1,
           evidence: [
-            {
+            expect.objectContaining({
               path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
               name: 'master_data_quality_decision_placeholder_text_zero',
               expectedValue: 0,
-            },
+            }),
           ],
         }),
       ]),
     )
   })
 
+  it('allows explicit bootstrap repair for missing structure and repairSql backfills', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
+      pendingStructureMigrationCount: 2,
+      pendingStructureMigrationPaths: [
+        'prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql',
+        'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+      ],
+      checks: [
+        {
+          path: 'prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql',
+          kind: 'structure',
+          ready: false,
+          targetRelations: [
+            { relationName: 'external.product_skus_v1', exists: false },
+            { relationName: 'external.intake_products_v1', exists: false },
+          ],
+        },
+        {
+          path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+          kind: 'structure',
+          ready: false,
+          targetRelations: [
+            { relationName: '"IntakeNonIntegratedSkuItem"', exists: true },
+          ],
+          guardChecks: [
+            {
+              type: 'trigger',
+              name: 'IntakeNonIntegratedProduct_soft_delete_cleanup_sku_items',
+              tableName: 'IntakeNonIntegratedProduct',
+              exists: false,
+            },
+          ],
+          dataChecks: [
+            {
+              name: 'IntakeNonIntegratedSkuItem_payload_missing_rows_zero',
+              expectedValue: 0,
+              matches: false,
+            },
+          ],
+        },
+      ],
+    }), {
+      phase: 'bootstrap-repair',
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(true)
+    expect(plan.blockers).toEqual([])
+    expect(plan.bootstrapRepairCandidates).toEqual([
+      {
+        path: 'prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql',
+        strategy: 'migration-sql',
+      },
+      {
+        path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+        strategy: 'repair-sql',
+      },
+    ])
+  })
+
+  it('does not treat bootstrap repair as a shortcut when no structure work exists', () => {
+    const plan = buildFoundationRequiredMigrationApplyPlan(readiness(), {
+      phase: 'bootstrap-repair',
+      apply: true,
+      confirm: CONFIRM_TOKEN,
+      actualDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: 'backup-sha',
+      backupFingerprint: { provided: true, exists: true, sha256: 'backup-sha' },
+    })
+
+    expect(plan.readyToApply).toBe(false)
+    expect(plan.blockers).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ key: 'bootstrapRepair.noWork' }),
+      ]),
+    )
+  })
+
+  it('blocks bootstrap repair for existing structure without declared repairSql', () => {
+    const migrationPath = 'prisma/migrations/20260601021000_add_draft_pre_sku_source_guards/migration.sql'
+    const plan = getBootstrapRepairPlan({
+      checks: [
+        {
+          path: migrationPath,
+          kind: 'structure',
+          ready: false,
+          targetRelations: [{ relationName: '"PreSku"', exists: true }],
+          guardChecks: [
+            {
+              type: 'check-constraint',
+              name: 'PreSku_identity_valid',
+              tableName: 'PreSku',
+              exists: false,
+            },
+          ],
+        },
+      ],
+    }, [
+      {
+        path: migrationPath,
+        targetRelation: '"PreSku"',
+      },
+    ])
+
+    expect(plan.candidates).toEqual([])
+    expect(plan.blockers).toEqual([
+      expect.objectContaining({
+        key: 'bootstrapRepair.unrepairableStructureMigration',
+        path: migrationPath,
+      }),
+    ])
+  })
+
+  it('selects and rechecks only the bootstrap repair target migrations', () => {
+    const migrations = [
+      { path: 'prisma/migrations/20260529213000_add_external_readonly_contract/migration.sql' },
+      { path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql' },
+      { path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql' },
+    ]
+
+    expect(getMigrationsByPaths([
+      'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+    ], migrations)).toEqual([
+      { path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql' },
+    ])
+    expect(getUnreadyPathsAfterApply({
+      checks: [
+        {
+          path: 'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+          ready: true,
+        },
+        {
+          path: 'prisma/migrations/20260601025000_tighten_master_data_quality_decision_text_guards/migration.sql',
+          ready: false,
+        },
+      ],
+    }, [
+      'prisma/migrations/20260530093000_add_intake_non_integrated_sku_items/migration.sql',
+    ])).toEqual([])
+  })
+
   it('does not report data-check debt before the target relation exists', () => {
     const plan = buildFoundationRequiredMigrationApplyPlan(readiness({
       checks: [
diff --git a/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js b/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
index 245026cc..36e83539 100644
--- a/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
+++ b/furniture-3d-system/tests/scripts/apply-pre-sku-formalization-repair.test.js
@@ -13,6 +13,7 @@ const {
   buildExecutionPlanTemplate,
   findRemainingTargetMismatches,
   isDisallowedAuditTextValue,
+  normalizeSha256,
   parseArgs,
   validateExecutionPlanFreshness,
   validateExecutionPlanShape,
@@ -272,6 +273,31 @@ describe('apply-pre-sku-formalization-repair', () => {
     )
   })
 
+  it('accepts uppercase backup sha in PreSku lifecycle apply evidence', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pre-sku-apply-sha-'))
+    const backupPath = path.join(tempDir, 'backup.dump')
+    fs.writeFileSync(backupPath, 'backup-bytes')
+    const backupSha = require('node:crypto').createHash('sha256').update('backup-bytes').digest('hex')
+
+    expect(normalizeSha256(` ${backupSha.toUpperCase()} `)).toBe(backupSha)
+    expect(assertApplyExecutionEvidence({
+      apply: true,
+      confirm: APPLY_CONFIRMATION,
+      expectedDatabaseIdentity: 'postgresql|furniture|localhost|5432|furniture_3d|',
+      expectedBackupSha256: backupSha.toUpperCase(),
+    }, {
+      databaseUrl: 'postgresql://furniture:secret@localhost:5432/furniture_3d',
+      env: { DATABASE_BACKUP_FILE: backupPath },
+      rootDir: tempDir,
+    })).toEqual(
+      expect.objectContaining({
+        backupFingerprint: expect.objectContaining({
+          sha256: backupSha,
+        }),
+      }),
+    )
+  })
+
   it('does not allow apply when validation still has blockers', () => {
     expect(() =>
       assertValidationReadyForApply({
diff --git a/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js b/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
index 2483f60b..1f975106 100644
--- a/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
+++ b/furniture-3d-system/tests/scripts/print-master-data-foundation-decision-package.test.js
@@ -114,7 +114,10 @@ function createManifest(overrides = {}) {
         },
         {
           id: 'apply-governance-migrations',
-          commands: ['npm run db:foundation:apply-required:audit'],
+          commands: [
+            'npm run db:foundation:apply-required:audit',
+            'npm run db:foundation:apply-required -- --phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+          ],
         },
         {
           id: 'clean-historical-master-data-fields',
@@ -278,6 +281,16 @@ describe('print-master-data-foundation-decision-package', () => {
       requiresExplicitUserAuthorization: true,
       forbiddenNextStepsUntilPassed: ['apply-required', '历史清洗'],
     })
+    expect(report.executionChecklist[4]).toMatchObject({
+      id: 'apply-required-governance-migrations',
+      commands: expect.arrayContaining([
+        'npm run db:foundation:apply-required -- --phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+        'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      ]),
+      successCriteria: expect.arrayContaining([
+        'bootstrap-repair 目标迁移 ready = true',
+      ]),
+    })
     expect(JSON.stringify(report)).not.toContain('D:\\')
     expect(JSON.stringify(report)).not.toContain('/Users/')
   })
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js b/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
index cb01b214..e5331331 100644
--- a/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
+++ b/furniture-3d-system/tests/scripts/verify-master-data-foundation.test.js
@@ -16,6 +16,7 @@ const {
   assertFoundationHardReadyGate,
   printFoundationHardReadyReport,
   getStructuredSkuSummary,
+  getNonIntegratedProductProfileSummary,
   getDuplicateGroupCount,
   getMigrationHistoryStatus,
   validateRequiredMigrationCatalog,
@@ -202,10 +203,28 @@ function createMigrationMockClient({
           rows: matches ? [{ column_default: null }] : [{ column_default: "'{}'::text[]" }],
         })
       }
-      if (text.includes('FROM information_schema.triggers') || text.includes('FROM pg_constraint')) {
+      if (
+        text.includes('FROM information_schema.triggers') ||
+        text.includes('FROM pg_constraint')
+      ) {
         const exists = guardQueue.shift() ?? false
         return Promise.resolve({ rowCount: exists ? 1 : 0, rows: exists ? [{ '?column?': 1 }] : [] })
       }
+      if (text.includes('FROM pg_index')) {
+        const exists = guardQueue.shift() ?? false
+        return Promise.resolve({
+          rowCount: exists ? 1 : 0,
+          rows: exists
+            ? [
+                {
+                  is_unique: true,
+                  predicate: '(status = \'APPROVED_INCOMPLETE\'::text)',
+                  definition: 'CREATE UNIQUE INDEX "SomeIndex" ON public."SomeTable" USING btree ("targetType", "targetId")',
+                },
+              ]
+            : [],
+        })
+      }
       if (text.includes('FROM information_schema.columns')) {
         const exists = columnQueue.shift() ?? false
         return Promise.resolve({ rowCount: exists ? 1 : 0, rows: exists ? [{ '?column?': 1 }] : [] })
@@ -439,6 +458,24 @@ describe('verify-master-data-foundation', () => {
         ],
       }),
     ).toThrow('targetOnlyReadinessAssurance')
+
+    expect(() =>
+      validateRequiredMigrationCatalog({
+        migrations: [
+          {
+            targetRelation: '"MasterDataQualityDecision"',
+            path: 'prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql',
+            guardChecks: [
+              {
+                type: 'partial-unique-index',
+                name: 'MasterDataQualityDecision_open_target_key',
+                tableName: 'MasterDataQualityDecision',
+              },
+            ],
+          },
+        ],
+      }),
+    ).toThrow('predicatePattern')
   })
 
   it('parses strict migration verification mode', () => {
@@ -837,7 +874,7 @@ describe('verify-master-data-foundation', () => {
     await expect(columnDefaultMatches(client, 'AssemblyStep', 'partIds', null)).resolves.toBe(false)
   })
 
-  it('uses guardChecks to catch trigger and check-constraint side effects', async () => {
+  it('uses guardChecks to catch trigger, check-constraint, and index side effects', async () => {
     const migration = {
       targetRelation: '"ProductSKU"',
       path: 'prisma/migrations/20260601015000_add_product_sku_soft_delete_identity_fields/migration.sql',
@@ -880,6 +917,46 @@ describe('verify-master-data-foundation', () => {
     await expect(applyMissingMigrationFiles(applyClient, [migration])).resolves.toEqual([migration.path])
   })
 
+  it('uses guardChecks to catch missing partial unique indexes on existing tables', async () => {
+    const migration = {
+      targetRelation: '"MasterDataQualityDecision"',
+      path: 'prisma/migrations/20260601018000_add_master_data_quality_decisions/migration.sql',
+      guardChecks: [
+        {
+          type: 'partial-unique-index',
+          name: 'MasterDataQualityDecision_open_target_key',
+          tableName: 'MasterDataQualityDecision',
+          predicatePattern: 'status = \'APPROVED_INCOMPLETE\'',
+        },
+      ],
+      repairSql: 'CREATE UNIQUE INDEX IF NOT EXISTS "MasterDataQualityDecision_open_target_key";',
+    }
+    const client = createMigrationMockClient({
+      relationExists: [true],
+      guardExists: [false],
+    })
+
+    await expect(getRequiredMigrationReadiness(client, [migration])).resolves.toEqual(
+      expect.objectContaining({
+        pendingStructureMigrationCount: 1,
+        checks: [
+          expect.objectContaining({
+            ready: false,
+            guardChecks: [
+              expect.objectContaining({
+                type: 'partial-unique-index',
+                name: 'MasterDataQualityDecision_open_target_key',
+                tableName: 'MasterDataQualityDecision',
+                predicatePattern: 'status = \'APPROVED_INCOMPLETE\'',
+                exists: false,
+              }),
+            ],
+          }),
+        ],
+      }),
+    )
+  })
+
   it('can use scoped repair SQL when only a guard side effect is missing', async () => {
     const migration = {
       targetRelation: '"IntakeNonIntegratedSkuItem"',
@@ -949,9 +1026,9 @@ describe('verify-master-data-foundation', () => {
     )
   })
 
-  it('checks guard existence directly for triggers and check constraints', async () => {
+  it('checks guard existence directly for triggers, check constraints, and partial unique indexes', async () => {
     const client = createMigrationMockClient({
-      guardExists: [true, false],
+      guardExists: [true, false, true, true],
     })
 
     await expect(guardExists(client, {
@@ -964,6 +1041,18 @@ describe('verify-master-data-foundation', () => {
       name: 'SomeConstraint',
       tableName: 'SomeTable',
     })).resolves.toBe(false)
+    await expect(guardExists(client, {
+      type: 'partial-unique-index',
+      name: 'SomeIndex',
+      tableName: 'SomeTable',
+      predicatePattern: 'status = \'APPROVED_INCOMPLETE\'',
+    })).resolves.toBe(true)
+    await expect(guardExists(client, {
+      type: 'partial-unique-index',
+      name: 'SomeIndex',
+      tableName: 'SomeTable',
+      predicatePattern: '"status" = \'RESOLVED\'',
+    })).resolves.toBe(false)
   })
 
   it('uses the shared required migration list as the single dry-run source', () => {
@@ -1249,6 +1338,33 @@ describe('verify-master-data-foundation', () => {
     await expect(getDuplicateGroupCount(client, 'skuCode')).resolves.toBe(0)
   })
 
+  it('excludes soft-deleted products from non-integrated product profile hard-ready debt', async () => {
+    const client = {
+      query: jest.fn((sql) => {
+        const query = String(sql)
+        expect(query).toContain('JOIN "IntakeNonIntegratedProduct" product')
+        expect(query).toContain('product."deletedAt" IS NULL')
+        return Promise.resolve({
+          rows: [
+            {
+              total: 2,
+              missing_product_name: 0,
+              missing_product_category: 1,
+              missing_development_kind: 1,
+            },
+          ],
+        })
+      }),
+    }
+
+    await expect(getNonIntegratedProductProfileSummary(client)).resolves.toEqual({
+      total: 2,
+      missing_product_name: 0,
+      missing_product_category: 1,
+      missing_development_kind: 1,
+    })
+  })
+
   it('fails when structured master data drifts from compatibility snapshots', () => {
     expect(() =>
       assertNoMasterDataTruthDrift({
diff --git a/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js b/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
index 13174155..efc1a0d9 100644
--- a/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
+++ b/furniture-3d-system/tests/scripts/verify-master-data-readiness.test.js
@@ -166,6 +166,11 @@ describe('verify-master-data-readiness', () => {
       expect.stringMatching(/--phase=apply-structure .*--expected-sha256 <repair-sql-sha256>/),
       expect.stringMatching(/--phase=resolve-baseline .*--expected-sha256 <repair-sql-sha256>/),
     ]))
+    expect(plan.stages[1].commands).toEqual(expect.arrayContaining([
+      'npm run db:foundation:apply-required -- --phase=bootstrap-repair --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+      'npm run db:foundation:apply-required -- --apply --confirm=apply-master-data-foundation-migrations --expected-database-identity <database-identity> --expected-backup-sha256 <backup-sha256>',
+    ]))
+    expect(plan.stages[1].guard).toContain('bootstrap-repair 只处理缺失结构和登记过 repairSql')
     expect(plan.stages[2].commands).toEqual(expect.arrayContaining([
       'npm run db:cleanup-master-data -- --plan <confirmed-cleanup-plan.json>',
       'npm run db:cleanup-master-data:validate -- --plan <confirmed-cleanup-plan.json> --output .master-data-audits/cleanup-plan-validation-current.json',