diff --git a/admin-web/nginx-admin.conf b/admin-web/nginx-admin.conf
index 2c638be..f46d37b 100644
--- a/admin-web/nginx-admin.conf
+++ b/admin-web/nginx-admin.conf
@@ -32,8 +32,12 @@ server {
     }
 
     # API proxy to backend
+    # 用 resolver + 变量 proxy_pass：避免 nginx 启动时 backend DNS 还没就绪就 [emerg] 退出
+    # Docker Compose 默认网络的内置 DNS resolver 是 127.0.0.11
+    resolver 127.0.0.11 valid=30s ipv6=off;
+    set $backend_upstream "http://backend:8080";
     location /api/ {
-        proxy_pass http://backend:8080;
+        proxy_pass $backend_upstream;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -42,7 +46,7 @@ server {
 
     # WebSocket proxy for chat
     location /ws/ {
-        proxy_pass http://backend:8080;
+        proxy_pass $backend_upstream;
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";
diff --git a/admin-web/pnpm-workspace.yaml b/admin-web/pnpm-workspace.yaml
index 4cc8c79..fea6d3f 100644
--- a/admin-web/pnpm-workspace.yaml
+++ b/admin-web/pnpm-workspace.yaml
@@ -20,8 +20,8 @@
 packages:
   - '.'
 allowBuilds:
-  esbuild: set this to true or false
-  vue-demi: set this to true or false
+  esbuild: true
+  vue-demi: true
 onlyBuiltDependencies:
   - esbuild
   - vue-demi
diff --git a/admin-web/public/brand/logo-mark.png b/admin-web/public/brand/logo-mark.png
index 7658bcb..ec11903 100644
Binary files a/admin-web/public/brand/logo-mark.png and b/admin-web/public/brand/logo-mark.png differ
diff --git a/admin-web/src/layouts/MainLayout.vue b/admin-web/src/layouts/MainLayout.vue
index 5276e3c..e727b1f 100644
--- a/admin-web/src/layouts/MainLayout.vue
+++ b/admin-web/src/layouts/MainLayout.vue
@@ -1,26 +1,52 @@
 <template>
   <div class="admin-scene" :class="{ 'sidebar-collapsed': isCollapse }">
-    <header class="scene-header" aria-label="善缘丹阳公益服务品牌信息">
+    <header class="scene-header" aria-label="爱在丹阳公益服务品牌信息">
+      <!-- 背景装饰层：粉渐变兜底 + 丹阳剪影底图 + 爱心点缀 -->
+      <div class="header-bg" aria-hidden="true"></div>
+      <div class="header-hearts" aria-hidden="true">
+        <span>♡</span><span>♡</span><span>♡</span><span>♡</span>
+      </div>
+
       <div class="scene-brand">
-        <img :src="BRAND_LOGO" alt="善缘丹阳" />
+        <div class="brand-logo-wrap">
+          <img :src="BRAND_LOGO" alt="爱在丹阳" />
+          <span class="brand-dot" aria-hidden="true"></span>
+        </div>
         <div class="scene-brand-copy">
-          <strong>善缘丹阳</strong>
-          <span>公益婚恋服务平台</span>
+          <div class="brand-name-row">
+            <strong>爱在丹阳</strong>
+            <em class="brand-badge">公益运营</em>
+          </div>
+          <span class="brand-tagline">公益婚恋服务平台</span>
+          <span class="brand-ornament" aria-hidden="true">❖ &nbsp;●&nbsp; ❖&nbsp; ●&nbsp; ❖</span>
         </div>
         <div class="scene-title">
           <h1>管理端（运营后台）</h1>
-          <p>用专业的服务，帮助更多人遇见对的人</p>
+          <p class="title-sub">
+            <span>公益婚恋服务平台</span>
+            <span class="sep">·</span>
+            <span>用爱连接美好姻缘</span>
+            <span class="sep">·</span>
+            <span>让更多人在丹阳遇见幸福</span>
+          </p>
+          <p class="title-meta">
+            <span class="meta-chip" title="当前权限范围内今日新增、分配、跟进或完成的红娘服务单，按北京时间去重">今日服务 {{ todayStats?.total ?? '—' }} 单</span>
+            <span class="meta-chip" title="当前权限范围内尚未完成的红娘服务单">待处理 {{ todayStats?.pending ?? '—' }} 件</span>
+          </p>
         </div>
       </div>
+
       <div class="scene-slogan" aria-hidden="true">
-        <span>善缘相牵</span>
-        <strong>爱在丹阳</strong>
+        <span class="slogan-top">爱在丹阳</span>
+        <strong class="slogan-main">原来是你</strong>
+        <em class="slogan-en">Love&nbsp;In&nbsp;Danyang</em>
       </div>
+
       <div class="scene-benefits" aria-label="平台服务原则">
-        <span><el-icon><StarFilled /></el-icon><b>公益为本</b><small>不以营利为目的</small></span>
-        <span><el-icon><Lock /></el-icon><b>真实可靠</b><small>严格审核 多重保障</small></span>
-        <span><el-icon><LocationFilled /></el-icon><b>本地服务</b><small>深耕丹阳 服务家乡</small></span>
-        <span><el-icon><Opportunity /></el-icon><b>成就幸福</b><small>让爱在丹阳生根发芽</small></span>
+        <span><i class="benefit-icon"><el-icon><StarFilled /></el-icon></i><b>公益为本</b><small>不以营利为目的</small></span>
+        <span><i class="benefit-icon"><el-icon><Lock /></el-icon></i><b>真实可靠</b><small>严格审核·多重保障</small></span>
+        <span><i class="benefit-icon"><el-icon><LocationFilled /></el-icon></i><b>本地服务</b><small>深耕丹阳·服务家乡</small></span>
+        <span><i class="benefit-icon"><el-icon><Opportunity /></el-icon></i><b>成就幸福</b><small>让爱在丹阳生根发芽</small></span>
       </div>
     </header>
 
@@ -29,7 +55,7 @@
         <div class="brand" :class="{ compact: isCollapse }">
           <img class="brand-mark" :src="BRAND_LOGO" alt="" />
           <div v-if="!isCollapse" class="brand-copy">
-            <strong>善缘丹阳</strong>
+            <strong>爱在丹阳</strong>
             <span>公益婚恋服务平台</span>
           </div>
         </div>
@@ -121,14 +147,16 @@
     </el-container>
 
     <footer class="scene-footer">
-      <strong>善缘丹阳</strong><span>公益婚恋服务平台</span>
+      <strong>爱在丹阳</strong><span>公益婚恋服务平台</span>
       <small>真实 · 真诚 · 公益 · 幸福</small>
     </footer>
   </div>
 </template>
 
 <script setup lang="ts">
-import { computed, ref } from 'vue'
+import { computed, ref, watch } from 'vue'
+import { get } from '@/api/client'
+import { summarizeMatchmakerServices } from '@/services/dashboard'
 import { BRAND_BACKDROP, BRAND_LOGO } from '@/brand'
 import { useRoute, useRouter } from 'vue-router'
 import { ElMessage } from 'element-plus'
@@ -199,6 +227,25 @@ const isCollapse = ref(false)
 const globalSearch = ref('')
 const notificationCount = ref(0)
 
+const todayStats = ref<{ total: number; pending: number } | null>(null)
+
+watch(() => route.fullPath, async () => {
+  todayStats.value = null
+  const perms = authStore.permissions
+  if (authStore.token === 'ui-preview-only') return
+  try {
+    if (perms.includes('matchmaker.assign') || perms.includes('matchmaker.team.assign')) {
+      const response: any = await get('/operator/matchmaker/management/services')
+      if (response.success && Array.isArray(response.data)) todayStats.value = summarizeMatchmakerServices(response.data)
+    } else if (perms.includes('matchmaker.view')) {
+      const response: any = await get('/operator/matchmaker/dashboard')
+      if (response.success) todayStats.value = { total: response.data.todayCount, pending: response.data.pendingCount + response.data.inProgressCount }
+    }
+  } catch {
+    todayStats.value = null
+  }
+}, { immediate: true })
+
 const activeMenu = computed(() => {
   if (route.path === '/users/detail') return '/users'
   return route.path
@@ -258,137 +305,307 @@ function handleLogout() {
 <style scoped>
 .admin-scene {
   min-width: 1100px;
-  min-height: 100vh;
+  height: 100vh;
+  display: flex;
+  flex-direction: column;
   padding: 18px 34px 14px;
   overflow: hidden;
-  /* 背景图是 public/ 下的运行时资源，必须带 BASE_URL 前缀：
-     写死品牌目录的绝对路径，在产物部署于 /admin/ 子路径时会 404（页面背景变纯色）。
-     用 v-bind 把常量注入 CSS，避免在样式里各写一遍拼接。 */
-  /* 先给纯色兜底，避免图未加载完成时闪白 */
-  background: var(--admin-coral-lighter) center / cover fixed no-repeat;
-  background-image: url(v-bind('BRAND_BACKDROP'));
+  /* 外层：纯色粉渐变兜底，再叠加背景图。
+     原实现把 background 和 background-image 拆两行在某些浏览器会覆盖 —— 这里统一写一条，
+     并显式声明 position/size/repeat/attachment，确保 cover 全区域。 */
+  background:
+    linear-gradient(180deg, var(--admin-scene-bg-start) 0%, var(--admin-scene-bg-mid) 40%, var(--admin-scene-bg-end) 100%),
+    url(v-bind('BRAND_BACKDROP')) center / cover fixed no-repeat;
 }
 
 .scene-header {
+  position: relative;
+  overflow: hidden;
   display: grid;
-  max-width: var(--admin-shell-max-width);
-  height: 188px;
-  margin: 0 auto;
-  grid-template-columns: minmax(640px, 1fr) auto;
-  grid-template-rows: 112px 76px;
+  /* 100vw 撑满浏览器：用负 margin 抵消 admin-scene 的 padding */
+  width: 100vw;
+  max-width: none;
+  height: 105px;
+  margin: -18px -34px 12px;
+  padding: 0 34px;
+  grid-template-columns: auto 1fr auto;
+  grid-template-rows: 1fr 36px;
+  grid-template-areas:
+    "brand title slogan"
+    "benefits benefits benefits";
   align-items: center;
-  column-gap: var(--space-8);
+  column-gap: 20px;
+  border-radius: 0;
 }
 
+/* ===== 背景装饰层 ===== */
+.header-bg {
+  position: absolute;
+  inset: 0;
+  background:
+    linear-gradient(135deg, var(--admin-scene-bg-start) 0%, var(--admin-scene-bg-mid) 55%, var(--admin-scene-bg-end) 100%),
+    url(v-bind('BRAND_BACKDROP')) center / cover no-repeat;
+  z-index: 0;
+}
+/* 左上角柔光晕 */
+.header-bg::before {
+  content: '';
+  position: absolute;
+  top: -60px;
+  left: -40px;
+  width: 300px;
+  height: 180px;
+  background: radial-gradient(ellipse at center, var(--admin-scene-glow) 0%, transparent 70%);
+  pointer-events: none;
+}
+/* 右下角柔光晕 */
+.header-bg::after {
+  content: '';
+  position: absolute;
+  right: 40px;
+  bottom: -30px;
+  width: 280px;
+  height: 140px;
+  background: radial-gradient(ellipse at center, var(--admin-scene-glow-soft) 0%, transparent 70%);
+  pointer-events: none;
+}
+
+/* 爱心点缀 */
+.header-hearts {
+  position: absolute;
+  top: 18px;
+  right: 34px;
+  display: flex;
+  gap: 14px;
+  font-size: 16px;
+  color: var(--admin-coral-border);
+  z-index: 1;
+  pointer-events: none;
+}
+.header-hearts span {
+  animation: heartbeat 3s ease-in-out infinite;
+}
+.header-hearts span:nth-child(2) { animation-delay: .4s; }
+.header-hearts span:nth-child(3) { animation-delay: .8s; }
+.header-hearts span:nth-child(4) { animation-delay: 1.2s; }
+@keyframes heartbeat {
+  0%, 100% { transform: scale(1); opacity: .5; }
+  50% { transform: scale(1.25); opacity: 1; }
+}
+
+/* ===== 所有 header 内容浮在背景层之上 ===== */
+.scene-brand,
+.scene-slogan,
+.scene-benefits {
+  position: relative;
+  z-index: 2;
+}
+
+/* ===== 品牌区 ===== */
 .scene-brand,
-.scene-benefits,
-.scene-benefits span,
 .scene-brand-copy {
   display: flex;
   align-items: center;
 }
 
-.scene-brand > img {
-  width: 64px;
-  height: 64px;
-  object-fit: contain;
+.scene-brand {
+  grid-area: brand;
+  gap: 10px;
 }
 
-.scene-slogan {
+/* Logo + 装饰圆点 */
+.brand-logo-wrap {
+  position: relative;
+  width: 48px;
+  height: 48px;
+  flex: none;
+  display: grid;
+  place-items: center;
+}
+.brand-logo-wrap img {
+  width: 42px;
+  height: 42px;
+  object-fit: contain;
+  border-radius: 50%;
+  clip-path: circle(50%);
+  filter: drop-shadow(0 2px 6px rgba(244,95,104,0.25));
+}
+.brand-dot {
+  position: absolute;
+  top: -2px;
+  right: -2px;
+  width: 10px;
+  height: 10px;
+  background: var(--gradient-brand-solid);
+  border-radius: 50%;
+  box-shadow: 0 2px 4px rgba(200, 74, 83, 0.45);
+}
+
+/* 品牌名 + 徽章 — tagline/ornament 在 105px 高度里塞不下，隐藏 */
+.scene-brand-copy {
+  min-width: 0;
+  flex-direction: row;
+  align-items: center;
+  color: var(--admin-coral-strong);
+  gap: 8px;
+}
+.brand-name-row {
   display: flex;
-  padding-right: var(--space-6);
-  align-items: flex-end;
+  align-items: center;
+  gap: 8px;
+}
+.brand-name-row strong {
+  font-size: 24px;
+  font-weight: 700;
+  line-height: 1;
+  letter-spacing: 2px;
+  background: var(--gradient-brand-text);
+  -webkit-background-clip: text;
+  background-clip: text;
+  -webkit-text-fill-color: transparent;
+  text-shadow: none;
+}
+.brand-badge {
+  display: inline-flex;
+  align-items: center;
+  padding: 1px 8px;
+  font-size: 12px;
+  font-style: normal;
+  font-weight: 500;
+  letter-spacing: 1px;
+  color: var(--color-text-inverse);
+  background: var(--gradient-brand-solid);
+  border-radius: 10px;
+  box-shadow: 0 2px 6px rgba(200, 74, 83, 0.3);
+}
+.brand-tagline,
+.brand-ornament {
+  display: none;
+}
+
+/* 标题区 */
+.scene-title {
+  min-width: 0;
+  margin-left: 20px;
+  padding-left: 16px;
+  border-left: 2px solid var(--admin-scene-divider);
+}
+.scene-title h1 {
+  font-size: 18px;
+  font-weight: 700;
+  line-height: 1.05;
+  letter-spacing: 1px;
+  color: var(--color-text-primary);
+}
+.title-sub {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 0;
+  margin-top: 2px;
+  font-size: 12px;
+  color: var(--color-text-secondary);
+  letter-spacing: .2px;
+}
+.title-sub .sep {
+  margin: 0 5px;
+  color: var(--admin-coral-solid);
+  font-weight: 700;
+}
+.title-meta {
+  display: flex;
+  gap: 6px;
+  margin-top: 3px;
+  font-size: 12px;
+}
+.meta-chip {
+  display: inline-flex;
+  align-items: center;
+  padding: 0 8px;
+  height: 18px;
+  color: var(--admin-coral-strong);
+  background: var(--admin-scene-surface);
+  border: 1px solid var(--admin-coral-border);
+  border-radius: 9px;
+  font-weight: 500;
+  line-height: 18px;
+}
+
+/* ===== 书法 slogan ===== */
+.scene-slogan {
+  grid-area: slogan;
+  display: flex;
+  padding-right: 0;
+  align-items: center;
   flex-direction: column;
+  justify-content: center;
   color: var(--admin-coral-strong);
   font-family: var(--font-family-brand);
-  line-height: 1.05;
-  transform: rotate(-7deg);
+  line-height: 1;
+  text-align: center;
+  gap: 0;
 }
-
-.scene-slogan span {
-  font-size: var(--font-size-lg);
-}
-
-.scene-slogan strong {
-  margin-top: var(--space-1);
-  font-size: var(--font-size-3xl);
-  font-weight: var(--font-weight-medium);
-}
-
-.scene-brand-copy {
-  min-width: 172px;
-  margin-left: 10px;
-  align-items: flex-start;
-  flex-direction: column;
+.slogan-top {
+  font-size: 12px;
+  letter-spacing: 6px;
   color: var(--admin-coral-strong);
+  opacity: .8;
 }
-
-.scene-brand-copy strong {
-  font-size: var(--font-size-4xl);
-  line-height: 1.15;
-  letter-spacing: 2px;
-}
-
-.scene-brand-copy span {
-  margin-top: 5px;
-  font-size: var(--font-size-xs);
+.slogan-main {
+  font-size: 26px;
+  font-weight: 500;
   letter-spacing: 4px;
+  background: var(--gradient-brand-text);
+  -webkit-background-clip: text;
+  background-clip: text;
+  -webkit-text-fill-color: transparent;
+}
+.slogan-en {
+  display: none;
 }
 
-.scene-title {
-  min-width: 370px;
-  margin-left: 28px;
-  padding-left: 28px;
-  border-left: 1px solid var(--admin-coral-border);
-}
-
-.scene-title h1 {
-  font-size: clamp(var(--font-size-3xl), 2.2vw, var(--font-size-display));
-  line-height: 1.1;
-  letter-spacing: 1px;
-}
-
-.scene-title p {
-  margin-top: 9px;
-  color: var(--color-text-secondary);
-}
-
+/* ===== 公益原则行 ===== */
 .scene-benefits {
-  grid-column: 1 / -1;
-  align-self: start;
-  justify-content: flex-start;
-  gap: clamp(38px, 5vw, 92px);
-  padding: var(--space-1) 0 0 50px;
+  grid-area: benefits;
+  align-self: center;
+  justify-content: center;
+  flex-wrap: nowrap;
+  gap: clamp(10px, 1.6vw, 28px);
+  padding: 0;
+  overflow: hidden;
 }
-
 .scene-benefits span {
-  display: grid;
-  grid-template-columns: 36px auto;
-  column-gap: var(--space-2);
-  /* 13px 文字压在摄影背景图上，必须用 -strong 档（5.13:1），基础色只有 3.14:1 */
-  color: var(--admin-coral-strong);
-}
-
-.scene-benefits .el-icon {
-  grid-row: 1 / 3;
-  font-size: var(--font-size-4xl);
-}
-
-.scene-benefits b {
-  font-size: var(--font-size-sm);
-}
-
-.scene-benefits small {
-  margin-top: 2px;
-  color: var(--color-text-tertiary);
-  font-size: var(--font-size-micro);
+  flex: none;
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 4px 14px 4px 8px;
   white-space: nowrap;
+  background: var(--admin-scene-surface);
+  border: 1px solid var(--admin-coral-border);
+  border-radius: 18px;
+  color: var(--admin-coral-strong);
+  backdrop-filter: blur(6px);
+  box-shadow: 0 1px 4px rgba(200, 74, 83, 0.06);
+}
+.scene-benefits b {
+  font-size: 12px;
+  font-weight: 600;
+  white-space: nowrap;
+  line-height: 1.1;
+}
+.scene-benefits small {
+  color: var(--color-text-tertiary);
+  font-size: 12px;
+  font-size: 12px;
+  white-space: nowrap;
+  line-height: 1.1;
 }
 
 .admin-shell {
   width: min(var(--admin-shell-max-width), 100%);
-  height: calc(100vh - 238px);
-  min-height: 560px;
+  flex: 1;
+  min-height: 0;
   margin: 0 auto;
   overflow: hidden;
   background: var(--admin-shell-bg);
@@ -427,6 +644,8 @@ function handleLogout() {
   height: 42px;
   flex: none;
   object-fit: contain;
+  border-radius: 50%;
+  clip-path: circle(50%);
 }
 
 .brand-copy {
@@ -629,10 +848,15 @@ function handleLogout() {
 }
 
 .admin-content {
+  height: 100%;
   padding: 0;
   overflow: auto;
-  background: var(--color-bg-page);
+  scrollbar-width: none;          /* Firefox */
+  -ms-overflow-style: none;       /* IE/Edge 旧版 */
+  /* 暖色调背景，与整体品牌粉调一致；冷灰蓝 --color-bg-page 仅用于通用组件 */
+  background: var(--admin-scene-bg-end);
 }
+.admin-content::-webkit-scrollbar { display: none; }  /* Chrome/Safari/Edge */
 
 .scene-footer {
   display: flex;
@@ -656,62 +880,49 @@ function handleLogout() {
   letter-spacing: 4px;
 }
 
-@media (max-width: 1450px), (max-height: 820px) {
+@media (max-width: 1280px), (max-height: 780px) {
   .admin-scene {
     padding: 12px 24px 10px;
   }
 
   .scene-header {
-    display: grid;
-    height: 120px;
-    grid-template-columns: minmax(520px, 1fr) auto;
-    grid-template-rows: 66px 54px;
-    column-gap: 18px;
+    height: 160px;
+    grid-template-columns: minmax(480px, 1fr) auto;
+    grid-template-rows: 92px 64px;
+    padding-top: 14px;
   }
 
-  .scene-slogan {
-    padding-right: var(--space-3);
-  }
+  .brand-logo-wrap { width: 64px; height: 64px; }
+  .brand-logo-wrap img { width: 56px; height: 56px; }
+  .brand-dot { display: none; }
 
-  .scene-slogan span {
-    font-size: var(--font-size-base);
-  }
-
-  .scene-slogan strong {
-    font-size: var(--font-size-2xl);
-  }
-
-  .scene-brand > img {
-    width: 52px;
-    height: 52px;
-  }
-
-  .scene-brand-copy strong {
-    font-size: var(--font-size-2xl);
-  }
+  .brand-name-row strong { font-size: 30px; letter-spacing: 3px; }
+  .brand-badge { display: none; }
+  .brand-tagline { font-size: 12px; letter-spacing: 2px; }
+  .brand-ornament { display: none; }
 
   .scene-title {
-    min-width: 310px;
-    margin-left: 18px;
-    padding-left: 18px;
+    min-width: 280px;
+    margin-left: 20px;
+    padding-left: 20px;
   }
+  .scene-title h1 { font-size: 22px; letter-spacing: 1px; }
+  .title-sub { font-size: 12px; }
+  .title-meta { display: none; }
 
-  /* 紧凑态下正文标题略大于品牌字号，层级保持「页面 → 品牌」的正确指向 */
-  .scene-title h1 {
-    font-size: var(--font-size-3xl);
-  }
+  .slogan-top { font-size: 13px; letter-spacing: 6px; }
+  .slogan-main { font-size: 34px; letter-spacing: 4px; }
+  .slogan-en { display: none; }
 
-  .scene-benefits {
-    padding: 0 0 0 28px;
-    gap: clamp(22px, 4vw, 54px);
-  }
+  .benefit-icon { width: 34px; height: 34px; }
+  .benefit-icon .el-icon { font-size: 16px; }
+
+  .scene-benefits { gap: clamp(10px, 2vw, 28px); }
+  .scene-benefits b { font-size: 12px; }
+  .scene-benefits small { display: none; font-size: 12px; }
 
   .admin-shell {
-    height: calc(100vh - 170px);
-  }
-
-  .scene-footer {
-    height: 28px;
+    height: calc(100vh - 200px);
   }
 }
 
diff --git a/admin-web/src/modules/activity/ActivityCheckinView.vue b/admin-web/src/modules/activity/ActivityCheckinView.vue
index 873cd95..0eef54d 100644
--- a/admin-web/src/modules/activity/ActivityCheckinView.vue
+++ b/admin-web/src/modules/activity/ActivityCheckinView.vue
@@ -49,9 +49,9 @@
         <el-col :span="12">
           <el-card shadow="never" class="inner-card">
             <template #header><span>手工签到（特殊情形）</span></template>
-            <el-input v-model="manualUserId" placeholder="输入用户 ID" />
+            <el-input v-model="manualUserNumber" placeholder="输入13位用户编号" />
             <div class="btn-row">
-              <el-button type="primary" :loading="saving" :disabled="!manualUserId"
+              <el-button type="primary" :loading="saving" :disabled="!manualUserNumber"
                 @click="manual">手工签到</el-button>
             </div>
             <div class="form-hint">
@@ -65,8 +65,8 @@
       <el-card v-if="lastResult" shadow="never" class="inner-card result-card">
         <template #header><span>最近一次签到</span></template>
         <el-descriptions :column="2" border size="small">
-          <el-descriptions-item label="用户 ID">{{ lastResult.userId }}</el-descriptions-item>
-          <el-descriptions-item label="活动 ID">{{ lastResult.activityId }}</el-descriptions-item>
+          <el-descriptions-item label="用户编号">{{ lastResult.userDisplayNumber }}</el-descriptions-item>
+          <el-descriptions-item label="活动编号">{{ lastResult.activityDisplayId }}</el-descriptions-item>
           <el-descriptions-item label="本次是否为重复签到">
             <el-tag :type="lastResult.alreadyCheckedIn ? 'warning' : 'success'" size="small">
               {{ lastResult.alreadyCheckedIn ? '是（已幂等，未重复记录）' : '否' }}
@@ -96,7 +96,7 @@ import { get, post } from '@/api/client'
 const activities = ref<any[]>([])
 const activityId = ref('')
 const token = ref('')
-const manualUserId = ref('')
+const manualUserNumber = ref('')
 const stats = ref<any>(null)
 const lastResult = ref<any>(null)
 const scanning = ref(false)
@@ -151,15 +151,15 @@ async function scan() {
 }
 
 async function manual() {
-  if (!activityId.value || !manualUserId.value.trim()) return
+  if (!activityId.value || !manualUserNumber.value.trim()) return
   saving.value = true
   try {
     const res: any = await post(
       `/activities/operator/${activityId.value}/checkin/manual`,
-      { userId: manualUserId.value.trim() },
+      { userId: manualUserNumber.value.trim() },
       authHeader())
-    lastResult.value = { ...res.data, userId: manualUserId.value.trim(), activityId: activityId.value }
-    manualUserId.value = ''
+    lastResult.value = { ...res.data, userDisplayNumber: res.data?.userDisplayNumber || manualUserNumber.value.trim(), activityDisplayId: activities.value.find((item: any) => item.id === activityId.value)?.displayId }
+    manualUserNumber.value = ''
     ElMessage.success(res.data?.alreadyCheckedIn ? '该用户已签到（未重复记录）' : '手工签到成功')
     await loadStats()
   } finally {
diff --git a/admin-web/src/modules/activity/ActivityInterestView.vue b/admin-web/src/modules/activity/ActivityInterestView.vue
index 9d62c73..40f7474 100644
--- a/admin-web/src/modules/activity/ActivityInterestView.vue
+++ b/admin-web/src/modules/activity/ActivityInterestView.vue
@@ -4,13 +4,13 @@
       <template #header>
         <div class="card-header">
           <span>活动互选管理</span>
-          <el-input v-model="searchActivityId" placeholder="活动ID搜索" clearable style="width:260px" />
+          <el-input v-model="searchActivityNumber" placeholder="活动编号搜索" clearable style="width:260px" />
           <el-button type="primary" @click="loadData" :loading="loading">查询</el-button>
         </div>
       </template>
 
       <el-table :data="tableData" v-loading="loading" border stripe>
-        <el-table-column prop="activityId" label="活动ID" width="160" />
+        <el-table-column prop="activityDisplayId" label="活动编号" width="160" />
         <el-table-column prop="activityTitle" label="活动名称" min-width="180" />
         <el-table-column label="双向互选对数" width="140">
           <template #default="{row}">{{ row.mutualPairs }} 对</template>
@@ -31,8 +31,8 @@
       <div v-if="currentActivity">
         <h4>{{ currentActivity.title }} — 双向互选列表</h4>
         <el-table :data="mutualList" border size="small" style="margin-top:16px">
-          <el-table-column prop="sourceUserId" label="表达者ID" min-width="180" />
-          <el-table-column prop="targetUserId" label="被表达者ID" min-width="180" />
+          <el-table-column prop="sourceUserDisplayNumber" label="表达者编号" min-width="180" />
+          <el-table-column prop="targetUserDisplayNumber" label="被表达者编号" min-width="180" />
           <el-table-column prop="confirmedAt" label="确认时间" width="180" />
         </el-table>
         <el-empty v-if="!mutualList.length" description="暂无双向互选记录" />
@@ -46,7 +46,7 @@ import { getAccessToken } from '@/utils/token'
 import { ref, onMounted } from 'vue'
 import { get } from '@/api/client'
 
-const searchActivityId = ref('')
+const searchActivityNumber = ref('')
 const loading = ref(false)
 const tableData = ref<any[]>([])
 const drawerVisible = ref(false)
@@ -59,8 +59,8 @@ async function loadData() {
     const token = getAccessToken()
     const res: any = await get('/activities/operator/activity-interest-summary', {}, { Authorization: `Bearer ${token}` })
     const rows = res.data || []
-    tableData.value = searchActivityId.value
-      ? rows.filter((row: any) => row.activityId.includes(searchActivityId.value.trim()))
+    tableData.value = searchActivityNumber.value
+      ? rows.filter((row: any) => (row.activityDisplayId || '').includes(searchActivityNumber.value.trim()))
       : rows
   } catch (e) {
     console.error(e)
diff --git a/admin-web/src/modules/activity/ActivityManagementView.vue b/admin-web/src/modules/activity/ActivityManagementView.vue
index 03529c0..10150ce 100644
--- a/admin-web/src/modules/activity/ActivityManagementView.vue
+++ b/admin-web/src/modules/activity/ActivityManagementView.vue
@@ -9,6 +9,7 @@
       </template>
 
       <el-table :data="tableData" v-loading="loading" border stripe>
+        <el-table-column prop="displayId" label="活动编号" min-width="180" />
         <el-table-column prop="title" label="活动名称" min-width="180" />
         <el-table-column prop="activityType" label="活动类型" width="130">
           <template #default="{ row }">
@@ -128,7 +129,6 @@
     <el-dialog v-model="orgVisible" title="活动组织与容量分组" width="640px">
       <h4>组织关系</h4>
       <el-table :data="orgs" border size="small">
-        <el-table-column prop="organizationId" label="组织ID" min-width="160" />
         <el-table-column prop="name" label="名称" min-width="140" />
         <el-table-column prop="role" label="角色" width="120">
           <template #default="{ row }">{{ roleText(row.role) }}</template>
diff --git a/admin-web/src/modules/audit/AuditLogView.vue b/admin-web/src/modules/audit/AuditLogView.vue
index 5f3e8cf..2ecd81f 100644
--- a/admin-web/src/modules/audit/AuditLogView.vue
+++ b/admin-web/src/modules/audit/AuditLogView.vue
@@ -16,14 +16,14 @@
       </template>
 
       <el-table :data="tableData" v-loading="loading" border stripe>
-        <el-table-column prop="operatorId" label="操作人ID" width="140" />
+        <el-table-column prop="operatorDisplayId" label="操作人编号" min-width="180" />
         <el-table-column prop="action" label="操作" width="160">
           <template #default="{row}">{{ actionText(row.action) }}</template>
         </el-table-column>
         <el-table-column prop="resourceType" label="资源类型" width="120">
           <template #default="{row}">{{ row.resourceType }}</template>
         </el-table-column>
-        <el-table-column prop="resourceId" label="资源ID" width="140" show-overflow-tooltip />
+        <el-table-column prop="resourceDisplayId" label="业务编号" min-width="180" show-overflow-tooltip><template #default="{ row }">{{ row.resourceDisplayId || '未公开编号（已脱敏）' }}</template></el-table-column>
         <el-table-column prop="ip" label="IP地址" width="140" />
         <el-table-column prop="createdAt" label="时间" width="180">
           <template #default="{row}">{{ formatTime(row.createdAt) }}</template>
diff --git a/admin-web/src/modules/banner/BannerManagementView.vue b/admin-web/src/modules/banner/BannerManagementView.vue
index c1232e7..c9d5465 100644
--- a/admin-web/src/modules/banner/BannerManagementView.vue
+++ b/admin-web/src/modules/banner/BannerManagementView.vue
@@ -179,7 +179,7 @@ function isExternalLink(value: string) {
 function previewTargetText(banner: any) {
   const dest = TARGET_TYPE_DEST[banner.targetType] || banner.targetType || '无'
   if (!banner.targetValue) return dest
-  return `${dest} · ${banner.targetValue}`
+  return `${dest} · 已配置站内目标`
 }
 function assignForm(source: any) {
   form.value = {
diff --git a/admin-web/src/modules/counseling/CounselingView.vue b/admin-web/src/modules/counseling/CounselingView.vue
index 2d9fd5a..a5d90dc 100644
--- a/admin-web/src/modules/counseling/CounselingView.vue
+++ b/admin-web/src/modules/counseling/CounselingView.vue
@@ -88,7 +88,7 @@
     <el-dialog v-model="assignDialogVisible" title="分配咨询师" width="400px">
       <el-form label-width="80px">
         <el-form-item label="咨询师">
-          <el-input v-model="assignForm.counselorId" placeholder="请输入咨询师工号 / ID" />
+          <el-input v-model="assignForm.counselorNumber" placeholder="请输入13位工作人员编号" />
         </el-form-item>
       </el-form>
       <template #footer>
@@ -143,7 +143,7 @@ const assignedServices = ref<any[]>([])
 const assignDialogVisible = ref(false)
 const followupDialogVisible = ref(false)
 const currentId = ref('')
-const assignForm = ref({ counselorId: '' })
+const assignForm = ref({ counselorNumber: '' })
 const followupForm = ref({ type: 'phone_call', content: '' })
 
 const SERVICE_TYPE_LABEL: Record<string, string> = {
@@ -211,19 +211,19 @@ function onTabChange(name: string | number) {
 
 function openAssign(row: any) {
   currentId.value = row.id
-  assignForm.value.counselorId = ''
+  assignForm.value.counselorNumber = ''
   assignDialogVisible.value = true
 }
 
 async function doAssign() {
-  if (!assignForm.value.counselorId) {
-    ElMessage.warning('请填写咨询师 ID')
+  if (!assignForm.value.counselorNumber) {
+    ElMessage.warning('请填写咨询师编号')
     return
   }
   submitting.value = true
   try {
     await post(`/counseling/services/operator/${currentId.value}/assign`,
-      { counselorId: assignForm.value.counselorId })
+      { counselorId: assignForm.value.counselorNumber })
     ElMessage.success('分配成功')
     assignDialogVisible.value = false
     loadQueue()
diff --git a/admin-web/src/modules/matchmaker/MatchmakerManagementView.vue b/admin-web/src/modules/matchmaker/MatchmakerManagementView.vue
index 92e90d4..9cf42a9 100644
--- a/admin-web/src/modules/matchmaker/MatchmakerManagementView.vue
+++ b/admin-web/src/modules/matchmaker/MatchmakerManagementView.vue
@@ -2,11 +2,24 @@
   <div class="matchmaker-management">
     <el-card>
       <template #header><div class="card-header"><span>公益红娘管理</span></div></template>
-      <el-tabs v-model="activeTab">
+      <el-tabs v-model="activeTab" @tab-change="refresh">
+        <el-tab-pane v-if="canAssign" label="服务进展与跟进" name="management">
+          <el-table :data="managedServices" stripe v-loading="loading">
+            <el-table-column prop="userDisplayNumber" label="用户编号" min-width="150" />
+            <el-table-column prop="operatorDisplayId" label="红娘编号" min-width="150" />
+            <el-table-column label="服务状态" width="120"><template #default="{ row }">{{ statusLabel(row.status) }}</template></el-table-column>
+            <el-table-column prop="latestFollowupContent" label="最新跟进" min-width="230" show-overflow-tooltip />
+            <el-table-column label="操作" width="110"><template #default="{ row }">
+              <el-button link type="primary" @click="openServiceDetail(row.serviceId, true)">查看记录</el-button>
+            </template></el-table-column>
+          </el-table>
+        </el-tab-pane>
         <!-- ZC-MM-002：服务请求队列仅分配权持有者可见（matchmaker.assign 或 matchmaker.team.assign） -->
         <el-tab-pane v-if="canAssign" label="服务请求队列" name="services">
           <el-table :data="services" stripe v-loading="loading">
-            <el-table-column prop="userId" label="用户ID" width="120" />
+            <el-table-column prop="userDisplayNumber" label="用户编号" width="190">
+              <template #default="{ row }">{{ row.userDisplayNumber || '实名后生成' }}</template>
+            </el-table-column>
             <el-table-column prop="serviceType" label="服务类型" width="160">
               <template #default="{ row }">{{ serviceTypeLabel(row.serviceType) }}</template>
             </el-table-column>
@@ -21,6 +34,7 @@
               <template #default="{ row }">
                 <el-button v-if="row.status==='submitted'" size="small" type="primary" @click="openAssign(row)">分配</el-button>
                 <el-button v-if="row.status==='assigned' || row.status==='in_service'" size="small" @click="openRecommendation(row)">创建推荐</el-button>
+                <el-button v-if="row.status!=='submitted'" size="small" @click="openServiceDetail(row.serviceId || row.id)">查看服务</el-button>
               </template>
             </el-table-column>
           </el-table>
@@ -28,8 +42,8 @@
 
         <el-tab-pane label="推荐列表" name="recommendations">
           <el-table :data="recommendations" stripe v-loading="loading">
-            <el-table-column prop="userId" label="用户" width="110" />
-            <el-table-column prop="targetUserId" label="推荐对象" width="110" />
+            <el-table-column prop="userDisplayNumber" label="用户" width="110" />
+            <el-table-column prop="targetUserDisplayNumber" label="推荐对象" width="110" />
             <el-table-column prop="reason" label="推荐理由" show-overflow-tooltip />
             <el-table-column prop="status" label="状态" width="130">
               <template #default="{ row }"><el-tag :type="recStatusTag(row.status)">{{ recStatusLabel(row.status) }}</el-tag></template>
@@ -43,7 +57,9 @@
         <!-- ZC-MM-002 新增：服务对象分配（本人名下生效中的分配 + 转分配/撤销/结束） -->
         <el-tab-pane label="服务对象分配" name="assignments">
           <el-table :data="assignments" stripe v-loading="assignmentsLoading">
-            <el-table-column prop="userId" label="用户ID" width="120" />
+            <el-table-column prop="userDisplayNumber" label="用户编号" width="190">
+              <template #default="{ row }">{{ row.userDisplayNumber || '实名后生成' }}</template>
+            </el-table-column>
             <el-table-column prop="assignmentScope" label="范围" width="90">
               <template #default="{ row }">{{ assignmentScopeLabel(row.assignmentScope) }}</template>
             </el-table-column>
@@ -59,6 +75,7 @@
             </el-table-column>
             <el-table-column label="操作" width="220">
               <template #default="{ row }">
+                <el-button v-if="row.serviceId" size="small" @click="openServiceDetail(row.serviceId)">查看服务</el-button>
                 <el-button size="small" type="primary" @click="openTransfer(row)">转分配</el-button>
                 <el-button size="small" @click="openTerminate(row, 'revoke')">撤销</el-button>
                 <el-button size="small" @click="openTerminate(row, 'end')">结束</el-button>
@@ -69,8 +86,8 @@
         <!-- ZC-MM-003 / B1 立项：受控联系授权（审批岗队列 + 本人授权/撤销） -->
         <el-tab-pane label="联系授权审批" name="contactAuths">
           <el-table :data="contactAuths" stripe v-loading="contactAuthsLoading">
-            <el-table-column prop="operatorId" label="红娘ID" width="120" />
-            <el-table-column prop="userId" label="用户ID" width="120" />
+            <el-table-column prop="operatorDisplayId" label="红娘编号" width="120" />
+            <el-table-column prop="userDisplayNumber" label="用户编号" width="120" />
             <el-table-column prop="channel" label="渠道" width="110">
               <template #default="{ row }">{{ contactChannelLabel(row.channel) }}</template>
             </el-table-column>
@@ -151,8 +168,8 @@
     <!-- 创建推荐弹窗 -->
     <el-dialog v-model="recDialogVisible" title="创建红娘推荐" width="480px">
       <el-form label-width="100px">
-        <el-form-item label="推荐给用户"><el-input v-model="recForm.userId" disabled /></el-form-item>
-        <el-form-item label="推荐对象ID"><el-input v-model="recForm.targetUserId" placeholder="输入被推荐对象的用户ID" /></el-form-item>
+        <el-form-item label="推荐给用户"><el-input v-model="recForm.userDisplayNumber" disabled /></el-form-item>
+        <el-form-item label="推荐对象编号"><el-input v-model="recForm.targetUserDisplayNumber" placeholder="输入13位用户编号" /></el-form-item>
         <el-form-item label="推荐理由"><el-input v-model="recForm.reason" type="textarea" :rows="3" placeholder="说明为什么这个对象适合该用户" /></el-form-item>
       </el-form>
       <template #footer>
@@ -160,16 +177,67 @@
         <el-button type="primary" @click="doCreateRecommendation">发送推荐</el-button>
       </template>
     </el-dialog>
+
+    <el-dialog v-model="serviceDetailVisible" title="服务详情" width="620px">
+      <el-descriptions v-if="serviceDetail" :column="2" border>
+        <el-descriptions-item label="服务编号">{{ serviceDetail.serviceDisplayId }}</el-descriptions-item>
+        <el-descriptions-item label="状态">{{ statusLabel(serviceDetail.status) }}</el-descriptions-item>
+        <el-descriptions-item label="服务类型">{{ serviceTypeLabel(serviceDetail.serviceType) }}</el-descriptions-item>
+        <el-descriptions-item label="创建时间">{{ formatDateTime(serviceDetail.createdAt) }}</el-descriptions-item>
+        <el-descriptions-item label="服务需求" :span="2">{{ serviceDetail.description || '未填写' }}</el-descriptions-item>
+      </el-descriptions>
+      <el-divider content-position="left">服务历史</el-divider>
+      <el-empty v-if="!serviceDetail?.followups?.length" description="暂无服务记录" />
+      <el-timeline v-else>
+        <el-timeline-item v-for="item in serviceDetail.followups" :key="item.id" :timestamp="formatDateTime(item.createdAt)">
+          {{ item.content }}
+        </el-timeline-item>
+      </el-timeline>
+      <template v-if="serviceDetail && !managementDetail">
+        <el-divider />
+        <el-button type="primary" @click="openFollowup">添加跟进记录</el-button>
+        <el-button
+          v-if="['completed', 'cancelled'].indexOf(serviceDetail.status) < 0"
+          type="success"
+          plain
+          @click="completeCurrentService"
+        >完成服务</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="followupDialogVisible" title="添加跟进记录" width="520px">
+      <el-form label-width="90px">
+        <el-form-item label="跟进方式">
+          <el-select v-model="followupForm.followupType" style="width: 100%">
+            <el-option label="电话沟通" value="phone_call" />
+            <el-option label="微信沟通" value="wechat" />
+            <el-option label="面对面" value="face_to_face" />
+            <el-option label="其他" value="other" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="跟进内容" required>
+          <el-input v-model="followupForm.content" type="textarea" :rows="4" placeholder="记录本次服务进展" />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="followupDialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="submitFollowup">保存记录</el-button>
+      </template>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
-import { ref, computed, onMounted } from 'vue'
+import { ref, computed, onActivated } from 'vue'
+import { useRoute } from 'vue-router'
 import { get, post } from '@/api/client'
 import { ElMessage, ElMessageBox } from 'element-plus'
 import { useAuthStore } from '@/stores/auth'
 
 const authStore = useAuthStore()
+const route = useRoute()
+const managementDetail = ref(false)
+const managedServices = ref<any[]>([])
 // ZC-MM-002：分配权 = matchmaker.assign（平台授权）或 matchmaker.team.assign（红娘组长）
 const canAssign = computed(() => {
   const perms: string[] = authStore.permissions || []
@@ -186,6 +254,7 @@ const assignableMatchmakers = ref<any[]>([])
 const assignDialogVisible = ref(false)
 const transferDialogVisible = ref(false)
 const terminateDialogVisible = ref(false)
+const recDialogVisible = ref(false)
 const currentServiceId = ref('')
 const currentUserId = ref('')
 const currentAssignmentId = ref('')
@@ -193,7 +262,11 @@ const terminateAction = ref<'revoke' | 'end'>('revoke')
 const assignForm = ref({ matchmakerOperatorId: '', reason: '' })
 const transferForm = ref({ newMatchmakerOperatorId: '', reason: '' })
 const terminateForm = ref({ reason: '' })
-const recForm = ref({ userId: '', targetUserId: '', reason: '' })
+const recForm = ref({ userDisplayNumber: '', targetUserDisplayNumber: '', reason: '' })
+const serviceDetailVisible = ref(false)
+const serviceDetail = ref<any>(null)
+const followupDialogVisible = ref(false)
+const followupForm = ref({ followupType: 'phone_call', content: '' })
 
 const SERVICE_TYPE_LABEL: Record<string, string> = {
   recommendation: '推荐对象', referral_counseling: '转介咨询',
@@ -248,6 +321,49 @@ function contactChannelLabel(s: string) { return CONTACT_CHANNEL_LABEL[s] || s }
 function contactStatusLabel(s: string) { return CONTACT_STATUS_LABEL[s] || s }
 function contactStatusTag(s: string) { return CONTACT_STATUS_TAG[s] || 'info' }
 
+async function openServiceDetail(serviceId: string, management = false) {
+  managementDetail.value = management
+  if (!serviceId) return
+  try {
+    const res: any = await get(`/operator/matchmaker/${management ? 'management/' : ''}services/${serviceId}`)
+    serviceDetail.value = res?.data || null
+    serviceDetailVisible.value = true
+  } catch { serviceDetail.value = null }
+}
+
+function openFollowup() {
+  followupForm.value = { followupType: 'phone_call', content: '' }
+  followupDialogVisible.value = true
+}
+
+async function submitFollowup() {
+  if (!followupForm.value.content.trim() || !serviceDetail.value?.serviceId) {
+    ElMessage.warning('请填写跟进内容')
+    return
+  }
+  try {
+    await post(`/operator/matchmaker/services/${serviceDetail.value.serviceId}/followup`, followupForm.value)
+    ElMessage.success('跟进记录已保存')
+    followupDialogVisible.value = false
+    await openServiceDetail(serviceDetail.value.serviceId)
+  } catch (e: any) {
+    ElMessage.error(e?.response?.data?.message || '保存跟进记录失败')
+  }
+}
+
+async function completeCurrentService() {
+  if (!serviceDetail.value?.serviceId) return
+  try {
+    await ElMessageBox.confirm('确认将该红娘服务标记为已完成吗？', '完成服务', { type: 'warning' })
+    await post(`/operator/matchmaker/services/${serviceDetail.value.serviceId}/complete`, {})
+    ElMessage.success('服务已完成')
+    await openServiceDetail(serviceDetail.value.serviceId)
+    await loadAssignments()
+  } catch (e: any) {
+    if (e !== 'cancel' && e !== 'close') ElMessage.error(e?.response?.data?.message || '完成服务失败')
+  }
+}
+
 // ===== ZC-MM-003 / B1：受控联系授权 =====
 // 审批岗客户端可见性提示（真实判定在 Service 层动态执行：principal 权限 ∈ approver-authorities 配置）
 const canApprove = computed(() => {
@@ -259,7 +375,13 @@ const contactAuthsLoading = ref(false)
 
 async function loadContactAuths() {
   contactAuthsLoading.value = true
-  try { const res: any = await get('/operator/matchmaker/contact-authorizations/my'); contactAuths.value = res?.data?.list || [] } finally { contactAuthsLoading.value = false }
+  try {
+    const endpoint = canApprove.value
+      ? '/operator/matchmaker/contact-authorizations/pending'
+      : '/operator/matchmaker/contact-authorizations/my'
+    const res: any = await get(endpoint)
+    contactAuths.value = res?.data?.list || []
+  } finally { contactAuthsLoading.value = false }
 }
 async function doContactApprove(row: any) {
   try {
@@ -306,7 +428,12 @@ async function loadAssignableMatchmakers() {
   try { const res: any = await get('/operator/matchmaker/assignments/assignable-matchmakers'); assignableMatchmakers.value = res?.data || [] } catch { assignableMatchmakers.value = [] }
 }
 async function refresh() {
-  if (activeTab.value === 'services') await loadServices()
+  if (activeTab.value === 'management') {
+    loading.value = true
+    try { const res: any = await get('/operator/matchmaker/management/services'); managedServices.value = res?.data || [] }
+    finally { loading.value = false }
+  }
+  else if (activeTab.value === 'services') await loadServices()
   else if (activeTab.value === 'assignments') await loadAssignments()
   else if (activeTab.value === 'contactAuths') await loadContactAuths()
   else await loadRecommendations()
@@ -373,21 +500,27 @@ async function doTerminate() {
 
 function openRecommendation(row: any) {
   currentServiceId.value = row.id
-  recForm.value = { userId: row.userId, targetUserId: '', reason: '' }
+  recForm.value = { userDisplayNumber: row.userDisplayNumber || '实名后生成', targetUserDisplayNumber: '', reason: '' }
   recDialogVisible.value = true
 }
 async function doCreateRecommendation() {
-  if (!recForm.value.targetUserId || !recForm.value.reason) { ElMessage.warning('请填写推荐对象和理由'); return }
+  if (!recForm.value.targetUserDisplayNumber || !recForm.value.reason) { ElMessage.warning('请填写推荐对象和理由'); return }
   // Phase 13 契约修复：原 POST /matchmaker/services/{id}/recommendation → 后端为 /operator/matchmaker/services/{id}/recommend
   try {
     await post(`/operator/matchmaker/services/${currentServiceId.value}/recommend`, {
-      targetUserId: recForm.value.targetUserId, reason: recForm.value.reason
+      targetUserId: recForm.value.targetUserDisplayNumber, reason: recForm.value.reason
     })
     ElMessage.success('推荐已发送给用户'); recDialogVisible.value = false; loadRecommendations()
   } catch (e: any) { ElMessage.error(e?.response?.data?.message || '操作失败') }
 }
 
-onMounted(refresh)
+onActivated(async () => {
+  if (canAssign.value && typeof route.query.serviceId === 'string') {
+    activeTab.value = 'management'
+    await openServiceDetail(route.query.serviceId, true)
+  }
+  await refresh()
+})
 </script>
 
 <style scoped>
diff --git a/admin-web/src/modules/operator/OperatorManagementView.vue b/admin-web/src/modules/operator/OperatorManagementView.vue
index f1e5b10..0447444 100644
--- a/admin-web/src/modules/operator/OperatorManagementView.vue
+++ b/admin-web/src/modules/operator/OperatorManagementView.vue
@@ -10,6 +10,7 @@
 
       <el-table :data="tableData" v-loading="loading" border stripe>
         <el-table-column prop="username" label="用户名" width="140" />
+        <el-table-column prop="displayId" label="人员编号" width="150" />
         <el-table-column prop="name" label="姓名" width="120" />
         <el-table-column prop="organizationId" label="所属机构" width="160">
           <template #default="{row}">{{ orgMap[row.organizationId] || '-' }}</template>
diff --git a/admin-web/src/modules/referral/ReferralManagementView.vue b/admin-web/src/modules/referral/ReferralManagementView.vue
index 0f714c3..9afae0d 100644
--- a/admin-web/src/modules/referral/ReferralManagementView.vue
+++ b/admin-web/src/modules/referral/ReferralManagementView.vue
@@ -6,7 +6,7 @@
         <el-table-column prop="type" label="类型" width="120">
           <template #default="{ row }"><el-tag>{{ typeLabel(row.type) }}</el-tag></template>
         </el-table-column>
-        <el-table-column prop="id" label="关联ID" width="120" />
+        <el-table-column prop="referralDisplayId" label="转介编号" min-width="180" />
         <el-table-column prop="status" label="状态" width="100">
           <template #default="{ row }"><el-tag :type="row.status==='confirmed'?'success':'warning'">{{ row.status }}</el-tag></template>
         </el-table-column>
diff --git a/admin-web/src/modules/review/ReviewView.vue b/admin-web/src/modules/review/ReviewView.vue
index ff59288..98a2eee 100644
--- a/admin-web/src/modules/review/ReviewView.vue
+++ b/admin-web/src/modules/review/ReviewView.vue
@@ -20,7 +20,8 @@
       <el-tabs v-model="activeTab">
         <el-tab-pane :label="`待审核队列（${pendingTasks.length}）`" name="pending">
           <el-table :data="pendingTasks" v-loading="loading" row-key="taskId">
-            <el-table-column prop="userId" label="用户编号" min-width="170" show-overflow-tooltip />
+            <el-table-column prop="displayId" label="任务编号" min-width="180" />
+            <el-table-column prop="userDisplayNumber" label="用户编号" min-width="170" show-overflow-tooltip />
             <el-table-column prop="reviewType" label="审核类型" min-width="130">
               <template #default="{ row }">{{ reviewTypeText(row.reviewType) }}</template>
             </el-table-column>
@@ -42,7 +43,8 @@
 
         <el-tab-pane :label="`我的审核（${myTasks.length}）`" name="my">
           <el-table :data="myTasks" v-loading="loading" row-key="taskId">
-            <el-table-column prop="userId" label="用户编号" min-width="170" show-overflow-tooltip />
+            <el-table-column prop="displayId" label="任务编号" min-width="180" />
+            <el-table-column prop="userDisplayNumber" label="用户编号" min-width="170" show-overflow-tooltip />
             <el-table-column prop="reviewType" label="审核类型" min-width="130">
               <template #default="{ row }">{{ reviewTypeText(row.reviewType) }}</template>
             </el-table-column>
@@ -65,7 +67,7 @@
       <div v-if="detailLoading" v-loading="true" class="drawer-loading"></div>
       <template v-else-if="currentTask">
         <el-descriptions :column="1" border>
-          <el-descriptions-item label="用户编号">{{ currentTask.userId }}</el-descriptions-item>
+          <el-descriptions-item label="用户编号">{{ currentTask.userDisplayNumber }}</el-descriptions-item>
           <el-descriptions-item label="审核类型">{{ reviewTypeText(currentTask.reviewType) }}</el-descriptions-item>
           <el-descriptions-item label="提交时间">{{ formatTime(currentTask.submittedAt) }}</el-descriptions-item>
           <el-descriptions-item label="当前状态">
diff --git a/admin-web/src/modules/risk/ReportCenterView.vue b/admin-web/src/modules/risk/ReportCenterView.vue
index 4ead05d..7f47e97 100644
--- a/admin-web/src/modules/risk/ReportCenterView.vue
+++ b/admin-web/src/modules/risk/ReportCenterView.vue
@@ -25,7 +25,8 @@
 
       <el-table :data="tableData" v-loading="loading" border stripe>
         <el-table-column prop="reasonText" label="举报原因" width="140" />
-        <el-table-column prop="reportedUserId" label="被举报人ID" width="140" />
+        <el-table-column prop="displayId" label="举报编号" min-width="180" />
+        <el-table-column prop="reportedUserDisplayNumber" label="被举报人编号" width="140" />
         <el-table-column prop="description" label="说明" min-width="200" show-overflow-tooltip />
         <el-table-column prop="status" label="状态" width="100">
           <template #default="{row}">
diff --git a/admin-web/src/modules/service-appointment/ServiceAppointmentView.vue b/admin-web/src/modules/service-appointment/ServiceAppointmentView.vue
index 1857051..dcf70d8 100644
--- a/admin-web/src/modules/service-appointment/ServiceAppointmentView.vue
+++ b/admin-web/src/modules/service-appointment/ServiceAppointmentView.vue
@@ -11,8 +11,8 @@
         </el-radio-group>
       </div></template>
       <el-table :data="appointments" stripe v-loading="loading">
-        <el-table-column prop="id" label="ID" width="100" />
-        <el-table-column prop="userId" label="用户ID" width="120" />
+        <el-table-column prop="displayId" label="预约编号" min-width="180" />
+        <el-table-column prop="userDisplayNumber" label="用户编号" min-width="180" />
         <el-table-column prop="serviceType" label="服务类型" width="150" />
         <el-table-column prop="source" label="来源" width="140">
           <template #default="{ row }"><el-tag size="small">{{ sourceLabel(row.source) }}</el-tag></template>
@@ -21,7 +21,7 @@
           <template #default="{ row }"><el-tag :type="statusTag(row.status)">{{ statusLabel(row.status) }}</el-tag></template>
         </el-table-column>
         <el-table-column prop="preferredDate" label="预约日期" width="110" />
-        <el-table-column prop="assignedOperatorId" label="分配人员" width="100" />
+        <el-table-column prop="assignedOperatorDisplayId" label="分配人员" width="100" />
         <el-table-column prop="createdAt" label="创建时间" width="160">
           <template #default="{ row }">{{ formatDateTime(row.createdAt) }}</template>
         </el-table-column>
diff --git a/admin-web/src/modules/service-program/ServiceProgramView.vue b/admin-web/src/modules/service-program/ServiceProgramView.vue
index c2cba41..7b0cc13 100644
--- a/admin-web/src/modules/service-program/ServiceProgramView.vue
+++ b/admin-web/src/modules/service-program/ServiceProgramView.vue
@@ -74,7 +74,7 @@
         <el-descriptions-item label="合计">{{ stats.total }}</el-descriptions-item>
       </el-descriptions>
       <el-table :data="members" stripe v-loading="memberLoading">
-        <el-table-column prop="userId" label="用户ID" width="200" show-overflow-tooltip />
+        <el-table-column prop="userDisplayNumber" label="用户编号" width="200" show-overflow-tooltip />
         <el-table-column prop="status" label="状态" width="110">
           <template #default="{ row }">
             <el-tag :type="memberStatusTag(row.status)">{{ memberStatusLabel(row.status) }}</el-tag>
diff --git a/admin-web/src/modules/user/UserDetailView.vue b/admin-web/src/modules/user/UserDetailView.vue
index 15eca9e..b596e27 100644
--- a/admin-web/src/modules/user/UserDetailView.vue
+++ b/admin-web/src/modules/user/UserDetailView.vue
@@ -19,7 +19,7 @@
     <section v-else-if="user" class="surface-card detail-card">
       <div class="identity-summary">
         <el-avatar :size="58">{{ (user.displayName || '用')[0] }}</el-avatar>
-        <div><h2>{{ user.displayName || '未设置显示名称' }}</h2><span>用户编号：{{ user.id }}</span></div>
+        <div><h2>{{ user.displayName || '未设置显示名称' }}</h2><span>用户编号：{{ user.displayNumber || '实名后生成' }}</span></div>
         <el-progress class="completion" type="dashboard" :percentage="user.profileCompletion || 0" :width="72" :stroke-width="7" color="var(--admin-coral-solid)" />
       </div>
       <el-tabs v-model="activeTab" class="detail-tabs">
diff --git a/admin-web/src/modules/user/UserManagementView.vue b/admin-web/src/modules/user/UserManagementView.vue
index 23a15d6..f18e99c 100644
--- a/admin-web/src/modules/user/UserManagementView.vue
+++ b/admin-web/src/modules/user/UserManagementView.vue
@@ -42,7 +42,9 @@
       </el-alert>
 
       <el-table v-else :data="tableData" v-loading="loading" row-key="id">
-        <el-table-column prop="id" label="用户编号" min-width="170" show-overflow-tooltip />
+        <el-table-column prop="displayNumber" label="用户编号" min-width="190" show-overflow-tooltip>
+          <template #default="{ row }">{{ row.displayNumber || '实名后生成' }}</template>
+        </el-table-column>
         <el-table-column prop="displayName" label="显示名称" min-width="110">
           <template #default="{ row }">{{ row.displayName || '未设置' }}</template>
         </el-table-column>
diff --git a/admin-web/src/services/dashboard.ts b/admin-web/src/services/dashboard.ts
index bd639ba..0531878 100644
--- a/admin-web/src/services/dashboard.ts
+++ b/admin-web/src/services/dashboard.ts
@@ -18,6 +18,20 @@ interface ApiEnvelope<T> {
 
 const REQUEST_TIMEOUT = 8000
 
+export function summarizeMatchmakerServices(rows: JsonRecord[]) {
+  const day = new Intl.DateTimeFormat('zh-CN', { timeZone: 'Asia/Shanghai', year: 'numeric', month: '2-digit', day: '2-digit' })
+  const today = day.format(new Date())
+  return {
+    pending: rows.filter(row => ['submitted', 'assigned', 'in_service', 'waiting_user'].includes(String(row.status))).length,
+    completed: rows.filter(row => row.status === 'completed').length,
+    total: rows.filter(row => ['createdAt', 'assignedAt', 'completedAt', 'latestFollowupAt'].some(key => {
+      if (!row[key]) return false
+      const date = new Date(String(row[key]))
+      return !Number.isNaN(date.getTime()) && day.format(date) === today
+    })).length,
+  }
+}
+
 const numberOf = (source: JsonRecord | undefined, key: string) => {
   const value = source?.[key]
   return typeof value === 'number' && Number.isFinite(value) ? value : 0
@@ -45,9 +59,10 @@ const emptyMetric = (
 
 export function createEmptyDashboard(notice = '当前账号暂无可展示的工作台数据'): DashboardModel {
   return {
+    followups: [],
     metrics: [
       emptyMetric('pending_reviews', '待审核资料', 'rose', '/review'),
-      emptyMetric('matchmaker_todos', '红娘服务待办', 'amber', '/referral'),
+      emptyMetric('matchmaker_todos', '红娘服务待办', 'amber', '/matchmaker'),
       emptyMetric('counseling_todos', '咨询服务待办', 'blue', '/counseling'),
       emptyMetric('station_appointments', '服务站预约', 'green', '/service-appointment'),
       emptyMetric('effective_matches', '有效匹配', 'purple', '/analytics'),
@@ -65,8 +80,11 @@ export function createEmptyDashboard(notice = '当前账号暂无可展示的工
 export async function loadDashboard(permissions: string[]): Promise<DashboardModel> {
   const canViewAnalytics = permissions.includes('analytics.view')
   const canViewActivities = permissions.includes('activity.view')
+  const canViewMatchmaker = permissions.includes('matchmaker.view')
+  const canManageMatchmaker = permissions.includes('matchmaker.assign') || permissions.includes('matchmaker.team.assign')
+  const canViewReviews = permissions.includes('review.view')
 
-  const [coreResult, serviceResult, activityResult] = await Promise.allSettled([
+  const [coreResult, serviceResult, activityResult, matchmakerResult, reviewResult, managementResult] = await Promise.allSettled([
     canViewAnalytics
       ? client.get('/operator/analytics/dashboard', { timeout: REQUEST_TIMEOUT })
       : Promise.resolve(null),
@@ -76,14 +94,33 @@ export async function loadDashboard(permissions: string[]): Promise<DashboardMod
     canViewActivities
       ? client.get('/operator/activities', { timeout: REQUEST_TIMEOUT })
       : Promise.resolve(null),
+    canViewMatchmaker
+      ? client.get('/operator/matchmaker/dashboard', { timeout: REQUEST_TIMEOUT })
+      : Promise.resolve(null),
+    canViewReviews ? client.get('/operator/reviews/stats', { timeout: REQUEST_TIMEOUT }) : Promise.resolve(null),
+    canManageMatchmaker ? client.get('/operator/matchmaker/management/services', { timeout: REQUEST_TIMEOUT }) : Promise.resolve(null),
   ])
 
   const core = fulfilledData<JsonRecord>(coreResult)
   const service = fulfilledData<JsonRecord>(serviceResult)
   const activityRows = fulfilledData<JsonRecord[]>(activityResult)
+  const matchmaker = fulfilledData<JsonRecord>(matchmakerResult)
+  const reviews = fulfilledData<JsonRecord>(reviewResult)
+  const managedServices = fulfilledData<JsonRecord[]>(managementResult)
+  const managedStats = summarizeMatchmakerServices(managedServices || [])
+  const matchmakerAvailable = canManageMatchmaker ? Boolean(managedServices) : Boolean(matchmaker)
+  const matchmakerPending = canManageMatchmaker
+    ? managedStats.pending
+    : numberOf(matchmaker || undefined, 'pendingCount') + numberOf(matchmaker || undefined, 'inProgressCount')
+  const matchmakerCompleted = canManageMatchmaker
+    ? managedStats.completed
+    : numberOf(matchmaker || undefined, 'completedCount')
+  const followups = (managedServices || []).filter(row => row.latestFollowupContent)
+    .sort((a, b) => String(b.latestFollowupAt).localeCompare(String(a.latestFollowupAt)))
+    .slice(0, 5).map(row => ({ serviceId: String(row.serviceId), userDisplayNumber: String(row.userDisplayNumber || '未生成编号'),
+      content: String(row.latestFollowupContent), createdAt: String(row.latestFollowupAt || '') }))
   const analyticsAvailable = Boolean(core || service)
 
-  const eligibility = recordOf(service || undefined, 'localEligibility')
   const counseling = recordOf(service || undefined, 'counseling')
   const appointments = recordOf(service || undefined, 'serviceAppointments')
   const effectiveConnections = recordOf(service || undefined, 'effectiveConnections')
@@ -92,12 +129,13 @@ export async function loadDashboard(permissions: string[]): Promise<DashboardMod
 
   const metrics: DashboardMetric[] = [
     {
-      key: 'pending_reviews', label: '待审核资料', value: numberOf(eligibility, 'pending'),
-      trendText: service ? '本地资格待核验' : '暂无授权数据', tone: 'rose', available: Boolean(service), route: '/review',
+      key: 'pending_reviews', label: '待审核资料', value: numberOf(reviews || undefined, 'pending') + numberOf(reviews || undefined, 'processing'),
+      trendText: reviews ? '待领取与审核中资料' : '暂无授权数据', tone: 'rose', available: Boolean(reviews), route: '/review',
     },
     {
-      key: 'matchmaker_todos', label: '红娘服务待办', value: 0,
-      trendText: '当前接口未提供待办数', tone: 'amber', available: false, route: '/referral',
+      key: 'matchmaker_todos', label: '红娘服务待办',
+      value: matchmakerPending,
+      trendText: matchmakerAvailable ? (canManageMatchmaker ? '管理范围内待完成服务' : '本人服务对象待跟进') : '暂无授权数据', tone: 'amber', available: matchmakerAvailable, route: '/matchmaker',
     },
     {
       key: 'counseling_todos', label: '咨询服务待办',
@@ -120,9 +158,10 @@ export async function loadDashboard(permissions: string[]): Promise<DashboardMod
   ]
 
   const todos = ([
-    { key: 'review', title: '资料审核', description: '本地资格材料等待核验', count: metrics[0].value, actionText: '立即审核', route: '/review', tone: 'rose', available: metrics[0].available },
+    { key: 'review', title: '资料审核', description: '待领取与审核中资料', count: metrics[0].value, actionText: '立即审核', route: '/review', tone: 'rose', available: metrics[0].available },
     { key: 'counseling', title: '咨询预约', description: '咨询申请等待受理或跟进', count: metrics[2].value, actionText: '查看服务', route: '/counseling', tone: 'blue', available: metrics[2].available },
     { key: 'appointment', title: '到站预约', description: '线下服务预约等待确认', count: metrics[3].value, actionText: '管理预约', route: '/service-appointment', tone: 'green', available: metrics[3].available },
+    { key: 'matchmaker', title: '红娘服务', description: metrics[1].trendText, count: metrics[1].value, actionText: '查看服务', route: '/matchmaker', tone: 'amber', available: metrics[1].available },
     { key: 'risk', title: '举报处理', description: '风险举报等待工作人员处理', count: numberOf(core || undefined, 'pendingReports'), actionText: '去处理', route: '/risk/reports', tone: 'amber', available: Boolean(core) },
   ] as DashboardTodo[]).filter((item) => item.available)
 
@@ -142,6 +181,7 @@ export async function loadDashboard(permissions: string[]): Promise<DashboardMod
     { key: 'approved', label: '资料审核通过', value: numberOf(core || undefined, 'approvedProfiles'), compareText: '已通过资料', tone: 'blue', available: Boolean(core) },
     { key: 'served', label: '公益服务用户', value: numberOf(uniqueUsers, 'totalUniqueServiceUsers'), compareText: '去重服务人数', tone: 'green', available: Boolean(service) },
     { key: 'success', label: '成功牵手', value: numberOf(core || undefined, 'successPairs'), compareText: '双方确认成功', tone: 'amber', available: Boolean(core) },
+    { key: 'matchmaker_completed', label: '红娘服务完成', value: matchmakerCompleted, compareText: canManageMatchmaker ? '管理范围内已完成服务' : '本人已完成服务', tone: 'amber', available: matchmakerAvailable },
   ] as DashboardOverviewItem[]).filter((item) => item.available)
 
   const effectiveness = ([
@@ -152,12 +192,14 @@ export async function loadDashboard(permissions: string[]): Promise<DashboardMod
     { key: 'offline_success', label: '线下牵手成功', value: numberOf(effectiveConnections, 'successConnections'), max: numberOf(effectiveConnections, 'activeMatches'), unit: '对', available: Boolean(service) },
   ] as DashboardEffectivenessItem[]).filter((item) => item.available)
 
-  const rejectedCount = [coreResult, serviceResult, activityResult].filter((item) => item.status === 'rejected').length
-  const notice = !analyticsAvailable && !activityRows
+  const rejectedCount = [coreResult, serviceResult, activityResult, matchmakerResult, reviewResult, managementResult].filter((item) => item.status === 'rejected').length
+  const anyData = analyticsAvailable || Boolean(activityRows) || matchmakerAvailable || Boolean(reviews)
+  const notice = !anyData
     ? (rejectedCount ? '工作台数据加载失败，请稍后重试' : '当前账号暂无工作台统计权限')
     : (rejectedCount ? '部分模块暂时不可用，其余数据已正常加载' : '')
 
   return {
+    followups,
     metrics,
     todos,
     activities,
diff --git a/admin-web/src/theme/index.css b/admin-web/src/theme/index.css
index 742fb7f..0ca8e60 100644
--- a/admin-web/src/theme/index.css
+++ b/admin-web/src/theme/index.css
@@ -37,8 +37,18 @@
   --admin-coral-soft: #FFF0F1;        /* 品牌浅底（角标 / 选中态底） */
   --admin-coral-lighter: #FFF8F7;     /* 更浅一档，hover 底 */
   --admin-coral-border: rgba(244, 95, 104, 0.22);
+  --admin-scene-bg-start: #FFEDEE;
+  --admin-scene-bg-mid: #FFF6F4;
+  --admin-scene-bg-end: #FBF5F4;
+  --admin-scene-glow: rgba(244, 95, 104, 0.28);
+  --admin-scene-glow-soft: rgba(255, 150, 170, 0.22);
+  --admin-scene-surface: rgba(255, 255, 255, 0.65);
+  --admin-scene-border: rgba(244, 95, 104, 0.18);
+  --admin-scene-divider: rgba(244, 95, 104, 0.30);
   /* 承载白字的品牌渐变（两端均 ≥4.5:1）。基础色渐变见 --gradient-brand-vivid。 */
   --gradient-brand-solid: linear-gradient(135deg, #C84A53 0%, #B8434A 100%);
+  /* 文字用渐变（background-clip:text）：比 solid 更鲜亮，用于「善缘丹阳」等大字号品牌标题 */
+  --gradient-brand-text: linear-gradient(135deg, #FF7D6E 0%, #E8475D 60%, #B8434A 100%);
   /* 鲜亮品牌渐变：只允许用在「无文字覆盖」的装饰，或预览态还原（如 Banner 预览）。 */
   --gradient-brand-vivid: linear-gradient(135deg, #FF7D6E 0%, #FF5C82 100%);
   --gradient-brand-soft: linear-gradient(135deg, #FFE9DF 0%, #FFF7F2 100%);
diff --git a/admin-web/src/types/dashboard.ts b/admin-web/src/types/dashboard.ts
index d632b60..cf66a4e 100644
--- a/admin-web/src/types/dashboard.ts
+++ b/admin-web/src/types/dashboard.ts
@@ -51,6 +51,7 @@ export interface DashboardEffectivenessItem {
 }
 
 export interface DashboardModel {
+  followups: { serviceId: string; userDisplayNumber: string; content: string; createdAt: string }[]
   metrics: DashboardMetric[]
   todos: DashboardTodo[]
   activities: DashboardActivity[]
diff --git a/admin-web/src/views/DashboardView.vue b/admin-web/src/views/DashboardView.vue
index 8fa0d15..e45e9f5 100644
--- a/admin-web/src/views/DashboardView.vue
+++ b/admin-web/src/views/DashboardView.vue
@@ -106,6 +106,17 @@
         </article>
       </section>
 
+      <article v-if="dashboard.followups.length" class="dashboard-panel">
+        <header class="panel-header"><div><h2>最新红娘跟进记录</h2></div></header>
+        <div class="todo-list">
+          <button v-for="item in dashboard.followups" :key="item.serviceId" type="button" class="todo-row"
+            @click="goTo(`/matchmaker?serviceId=${encodeURIComponent(item.serviceId)}`)">
+            <span class="todo-copy"><strong>{{ item.userDisplayNumber }}</strong><small>{{ item.content }}</small></span>
+            <em>{{ formatDateTime(item.createdAt) }} · 查看服务</em>
+          </button>
+        </div>
+      </article>
+
       <section class="dashboard-grid dashboard-grid-bottom">
         <article class="dashboard-panel service-overview-panel">
           <header class="panel-header"><div><h2>服务数据概览</h2></div><span>当前累计</span></header>
@@ -136,7 +147,7 @@
 </template>
 
 <script setup lang="ts">
-import { computed, onMounted, ref } from 'vue'
+import { computed, onActivated, ref } from 'vue'
 import { useRouter } from 'vue-router'
 import { ElMessage } from 'element-plus'
 import {
@@ -277,15 +288,19 @@ async function retryLoad() {
   }
 }
 
-onMounted(retryLoad)
+onActivated(retryLoad)
 </script>
 
 <style scoped>
 .dashboard-page {
+  display: flex;
+  flex-direction: column;
   min-width: 0;
+  min-height: 100%;
   max-width: var(--admin-content-max-width);
   margin: 0 auto;
   padding: var(--space-5) 26px 28px;
+  box-sizing: border-box;
 }
 
 .dashboard-welcome {
@@ -478,6 +493,19 @@ onMounted(retryLoad)
   margin-top: 14px;
 }
 
+.dashboard-grid-top {
+  flex: 0 0 auto;
+}
+
+.dashboard-grid-bottom {
+  flex: 1;
+  min-height: 0;
+}
+
+.dashboard-grid-bottom .dashboard-panel {
+  height: 100%;
+}
+
 .dashboard-panel {
   min-width: 0;
   padding: 14px var(--space-4);
diff --git a/admin-web/src/views/LoginView.vue b/admin-web/src/views/LoginView.vue
index 86e1131..8a5215c 100644
--- a/admin-web/src/views/LoginView.vue
+++ b/admin-web/src/views/LoginView.vue
@@ -1,12 +1,12 @@
 <template>
   <main class="login-shell">
-    <section class="brand-panel" aria-label="善缘丹阳公益婚恋服务平台">
+    <section class="brand-panel" aria-label="爱在丹阳公益婚恋服务平台">
       <img class="brand-scene" :src="BRAND_LOGIN_SCENE" alt="" />
       <div class="brand-overlay">
         <div class="brand-title">
           <img :src="BRAND_LOGO" alt="" />
           <div>
-            <strong>善缘丹阳</strong>
+            <strong>爱在丹阳</strong>
             <span>公益婚恋服务平台</span>
           </div>
         </div>
@@ -55,7 +55,7 @@
           <span>敏感数据按权限访问，所有关键操作均记录审计日志。</span>
         </div>
       </div>
-      <footer>善缘丹阳 · 公益婚恋服务平台</footer>
+      <footer>爱在丹阳 · 公益婚恋服务平台</footer>
     </section>
   </main>
 </template>
@@ -135,6 +135,8 @@ async function handleLogin() {
 .brand-title img {
   width: 54px;
   height: 54px;
+  border-radius: 50%;
+  clip-path: circle(50%);
 }
 
 .brand-title div {
diff --git a/backend/src/main/java/com/danyang/match/platform/auth/provider/MockWechatLoginProvider.java b/backend/src/main/java/com/danyang/match/platform/auth/provider/MockWechatLoginProvider.java
index 892c181..1b38c49 100644
--- a/backend/src/main/java/com/danyang/match/platform/auth/provider/MockWechatLoginProvider.java
+++ b/backend/src/main/java/com/danyang/match/platform/auth/provider/MockWechatLoginProvider.java
@@ -29,6 +29,10 @@ public class MockWechatLoginProvider implements WechatLoginProvider {
     @Value("${wechat.app-id:dev-app-id}")
     private String appId;
 
+    /** 演示环境可固定到预置用户；生产真实微信登录不使用此 Provider。 */
+    @Value("${wechat.mock.openid:}")
+    private String configuredOpenid;
+
     // 模拟 openid 映射
     private final Map<String, String> codeToOpenid = new ConcurrentHashMap<>();
 
@@ -37,7 +41,9 @@ public class MockWechatLoginProvider implements WechatLoginProvider {
         log.debug("[Mock] 微信登录 code: {}", code);
 
         // 模拟：相同 code 返回相同 openid
-        String openid = codeToOpenid.computeIfAbsent(code, k -> "mock_openid_" + UUID.randomUUID().toString().substring(0, 8));
+        String openid = configuredOpenid != null && !configuredOpenid.isBlank()
+                ? configuredOpenid
+                : codeToOpenid.computeIfAbsent(code, k -> "mock_openid_" + UUID.randomUUID().toString().substring(0, 8));
 
         return Map.of(
                 "openid", openid,
diff --git a/backend/src/main/java/com/danyang/match/platform/auth/service/OperatorAuthService.java b/backend/src/main/java/com/danyang/match/platform/auth/service/OperatorAuthService.java
index 47f94e1..ea4f5a9 100644
--- a/backend/src/main/java/com/danyang/match/platform/auth/service/OperatorAuthService.java
+++ b/backend/src/main/java/com/danyang/match/platform/auth/service/OperatorAuthService.java
@@ -124,6 +124,7 @@ public class OperatorAuthService {
         result.put("accessToken", accessToken);
         result.put("refreshToken", refreshToken);
         result.put("operatorId", operator.getId());
+        result.put("operatorDisplayId", operator.getDisplayId());
         result.put("name", operator.getName());
         result.put("username", operator.getUsername());
         result.put("organizationId", operator.getOrganizationId());
@@ -157,6 +158,7 @@ public class OperatorAuthService {
 
         Map<String, Object> result = new HashMap<>();
         result.put("operatorId", operator.getId());
+        result.put("operatorDisplayId", operator.getDisplayId());
         result.put("name", operator.getName());
         result.put("username", operator.getUsername());
         result.put("username", operator.getUsername());
@@ -204,6 +206,7 @@ public class OperatorAuthService {
         result.put("expiresIn", jwtTokenService.getExpirationMs() / 1000);
         // 同步 operator 概要：前端凭 HttpOnly refresh cookie 静默刷新后，可直接恢复菜单态，无需重新登录
         result.put("operatorId", operatorInfo.get("operatorId"));
+        result.put("operatorDisplayId", operatorInfo.get("operatorDisplayId"));
         result.put("name", operatorInfo.get("name"));
         result.put("username", operatorInfo.get("username"));
         result.put("organizationId", operatorInfo.get("organizationId"));
diff --git a/backend/src/main/java/com/danyang/match/platform/match/controller/MatchController.java b/backend/src/main/java/com/danyang/match/platform/match/controller/MatchController.java
index 71b0ced..22ec8e6 100644
--- a/backend/src/main/java/com/danyang/match/platform/match/controller/MatchController.java
+++ b/backend/src/main/java/com/danyang/match/platform/match/controller/MatchController.java
@@ -51,7 +51,9 @@ public class MatchController {
     public ApiResponse<CursorPage<MatchResponse>> list(@AuthenticationPrincipal UserPrincipal principal) {
         if (principal == null) return ApiResponse.unauthorized();
         List<Match> matches = matchMapper.findActiveByUser(principal.id());
-        List<MatchResponse> items = matches.stream().map(MatchResponse::from).collect(Collectors.toList());
+        List<MatchResponse> items = matches.stream()
+                .map(match -> MatchResponse.from(match, principal.id()))
+                .collect(Collectors.toList());
         // 与全平台列表接口统一信封 { items, nextCursor }；当前一次性返回全部，nextCursor 恒为 null
         return ApiResponse.ok(CursorPage.all(items));
     }
@@ -67,7 +69,7 @@ public class MatchController {
         if (!m.getUserAId().equals(principal.id()) && !m.getUserBId().equals(principal.id())) {
             return ApiResponse.forbidden();
         }
-        return ApiResponse.ok(MatchResponse.from(m));
+        return ApiResponse.ok(MatchResponse.from(m, principal.id()));
     }
 
     @Idempotent
@@ -166,13 +168,13 @@ public class MatchController {
         private java.time.Instant lastActivityAt;
         private Integer episode;
 
-        public static MatchResponse from(Match m) {
+        public static MatchResponse from(Match m, String currentUserId) {
             MatchResponse r = new MatchResponse();
             r.id = m.getId();
             r.source = m.getSource();
             r.sourceId = m.getSourceId();
             r.status = m.getStatus();
-            r.peerUserId = m.getUserAId(); // 客户端需要自己判断对方
+            r.peerUserId = currentUserId.equals(m.getUserAId()) ? m.getUserBId() : m.getUserAId();
             r.matchedAt = m.getMatchedAt();
             r.lastActivityAt = m.getLastActivityAt();
             r.episode = m.getEpisode();
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerAssignmentController.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerAssignmentController.java
index c8a7d7b..0753269 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerAssignmentController.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerAssignmentController.java
@@ -4,6 +4,8 @@ import com.danyang.match.platform.matchmaker.entity.MatchmakerAssignment;
 import com.danyang.match.platform.matchmaker.service.MatchmakerAssignmentService;
 import com.danyang.match.platform.shared.dto.ApiResponse;
 import com.danyang.match.platform.shared.security.principal.OperatorPrincipal;
+import com.danyang.match.platform.user.mapper.UserMapper;
+import com.danyang.match.platform.profile.mapper.UserProfileMapper;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
@@ -31,6 +33,8 @@ import java.util.Map;
 public class MatchmakerAssignmentController {
 
     private final MatchmakerAssignmentService assignmentService;
+    private final UserMapper userMapper;
+    private final UserProfileMapper userProfileMapper;
 
     /**
      * 创建分配。
@@ -132,9 +136,16 @@ public class MatchmakerAssignmentController {
     }
 
     private Map<String, Object> assignmentView(MatchmakerAssignment a) {
+        var user = userMapper.findById(a.getUserId()).orElse(null);
+        var profile = userProfileMapper.findByUserId(a.getUserId()).orElse(null);
         return Map.ofEntries(
                 Map.entry("id", a.getId()),
                 Map.entry("userId", a.getUserId()),
+                Map.entry("userDisplayNumber", user == null || user.getDisplayNumber() == null ? "" : user.getDisplayNumber()),
+                Map.entry("userDisplayName", profile == null || profile.getDisplayName() == null ? "" : profile.getDisplayName()),
+                Map.entry("userGender", profile == null || profile.getGender() == null ? "" : profile.getGender()),
+                Map.entry("userAge", profile == null || profile.getBirthDate() == null ? "" : String.valueOf(java.time.Period.between(profile.getBirthDate(), java.time.LocalDate.now()).getYears())),
+                Map.entry("userRegionName", profile == null || profile.getRegionName() == null ? "" : profile.getRegionName()),
                 Map.entry("matchmakerOperatorId", a.getMatchmakerOperatorId()),
                 Map.entry("serviceId", a.getServiceId() == null ? "" : a.getServiceId()),
                 Map.entry("assignmentScope", a.getAssignmentScope()),
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerContactAuthorizationController.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerContactAuthorizationController.java
index 0675e53..b7056e3 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerContactAuthorizationController.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerContactAuthorizationController.java
@@ -75,6 +75,14 @@ public class MatchmakerContactAuthorizationController {
         return ApiResponse.ok(contactAuthorizationService.myAuthorizations(principal.id()));
     }
 
+    /** 审批岗待处理队列；服务层按平台管理员/组长组织范围过滤。 */
+    @GetMapping("/pending")
+    public ApiResponse<Map<String, Object>> pending(
+            @AuthenticationPrincipal OperatorPrincipal principal) {
+        return ApiResponse.ok(contactAuthorizationService.pendingApprovals(
+                principal.id(), principal.permissions()));
+    }
+
     /** 申请人或审批人撤销（reason 必填）。 */
     @PostMapping("/{id}/revoke")
     public ApiResponse<MatchmakerContactAuthorization> revoke(
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerController.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerController.java
index 312a7e1..84ccd33 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerController.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerController.java
@@ -64,6 +64,14 @@ public class MatchmakerController {
         return ApiResponse.ok(matchmakerService.myServices(principal.id(), limit));
     }
 
+    @Idempotent
+    @PostMapping("/services/{id}/confirm")
+    public ApiResponse<MatchmakerServiceRecord> confirmService(@PathVariable String id,
+                                                                @AuthenticationPrincipal UserPrincipal principal) {
+        if (principal == null) return ApiResponse.unauthorized();
+        return ApiResponse.ok(matchmakerService.confirmService(id, principal.id()));
+    }
+
     @GetMapping("/recommendations")
     public ApiResponse<List<MatchmakerRecommendation>> pendingRecs(@AuthenticationPrincipal UserPrincipal principal) {
         if (principal == null) return ApiResponse.unauthorized();
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerOperatorController.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerOperatorController.java
index 462890b..af31854 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerOperatorController.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerOperatorController.java
@@ -26,6 +26,20 @@ import java.util.Map;
 public class MatchmakerOperatorController {
 
     private final MatchmakerServiceService matchmakerServiceService;
+    private final com.danyang.match.platform.matchmaker.service.MatchmakerManagementService managementService;
+
+    @GetMapping("/management/services")
+    @PreAuthorize("hasAuthority('matchmaker.assign') or hasAuthority('matchmaker.team.assign')")
+    public ApiResponse<List<Map<String, Object>>> managementServices(@AuthenticationPrincipal OperatorPrincipal principal) {
+        return ApiResponse.ok(managementService.list(principal));
+    }
+
+    @GetMapping("/management/services/{id}")
+    @PreAuthorize("hasAuthority('matchmaker.assign') or hasAuthority('matchmaker.team.assign')")
+    public ApiResponse<Map<String, Object>> managementDetail(@AuthenticationPrincipal OperatorPrincipal principal,
+                                                            @PathVariable String id) {
+        return ApiResponse.ok(managementService.detail(principal, id));
+    }
 
     @GetMapping("/dashboard")
     public ApiResponse<Map<String, Object>> getDashboard(
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerContactAuthorizationMapper.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerContactAuthorizationMapper.java
index 6ac406e..e65d6d8 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerContactAuthorizationMapper.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerContactAuthorizationMapper.java
@@ -28,6 +28,11 @@ public interface MatchmakerContactAuthorizationMapper extends BaseMapper<Matchma
             "AND deleted_at IS NULL ORDER BY created_at DESC")
     List<MatchmakerContactAuthorization> findByOperator(@Param("operatorId") String operatorId);
 
+    /** 审批队列：仅返回待审批申请，组织范围由服务层按审批权限过滤。 */
+    @Select("SELECT * FROM matchmaker_contact_authorizations WHERE status = 'pending_approval' " +
+            "AND deleted_at IS NULL ORDER BY created_at ASC")
+    List<MatchmakerContactAuthorization> findPendingApproval();
+
     /** 用户待同意队列（pending_consent，C 端同意页数据源） */
     @Select("SELECT * FROM matchmaker_contact_authorizations WHERE user_id = #{userId} " +
             "AND status = 'pending_consent' AND expires_at > NOW() AND deleted_at IS NULL " +
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerServiceMapper.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerServiceMapper.java
index 51c0db3..100e3e8 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerServiceMapper.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerServiceMapper.java
@@ -5,6 +5,7 @@ import com.danyang.match.platform.matchmaker.entity.MatchmakerServiceRecord;
 import org.apache.ibatis.annotations.Mapper;
 import org.apache.ibatis.annotations.Param;
 import org.apache.ibatis.annotations.Select;
+import org.apache.ibatis.annotations.Update;
 
 import java.util.List;
 import java.util.Optional;
@@ -12,6 +13,20 @@ import java.util.Optional;
 @Mapper
 public interface MatchmakerServiceMapper extends BaseMapper<MatchmakerServiceRecord> {
 
+    @Select("<script>SELECT s.id AS \"serviceId\", s.status, s.service_type AS \"serviceType\", " +
+            "s.description, s.created_at AS \"createdAt\", s.assigned_at AS \"assignedAt\", s.completed_at AS \"completedAt\", " +
+            "u.display_number AS \"userDisplayNumber\", o.display_id AS \"operatorDisplayId\", " +
+            "(SELECT f.content FROM matchmaker_followups f WHERE f.service_id=s.id AND f.deleted_at IS NULL " +
+            "ORDER BY f.created_at DESC LIMIT 1) AS \"latestFollowupContent\", " +
+            "(SELECT f.created_at FROM matchmaker_followups f WHERE f.service_id=s.id AND f.deleted_at IS NULL " +
+            "ORDER BY f.created_at DESC LIMIT 1) AS \"latestFollowupAt\" " +
+            "FROM matchmaker_services s LEFT JOIN users u ON u.id=s.user_id " +
+            "LEFT JOIN operators o ON o.id=s.assigned_operator_id AND o.deleted_at IS NULL " +
+            "WHERE s.deleted_at IS NULL <if test='!global'>AND o.id IS NOT NULL " +
+            "AND o.organization_id IS NOT DISTINCT FROM #{organizationId}</if> ORDER BY s.created_at DESC</script>")
+    List<java.util.Map<String, Object>> findManagementServices(@Param("global") boolean global,
+                                                             @Param("organizationId") String organizationId);
+
     @Select("SELECT * FROM matchmaker_services WHERE id = #{id} AND deleted_at IS NULL LIMIT 1")
     Optional<MatchmakerServiceRecord> findById(@Param("id") String id);
 
@@ -68,6 +83,11 @@ public interface MatchmakerServiceMapper extends BaseMapper<MatchmakerServiceRec
     @Select("SELECT * FROM matchmaker_services WHERE user_id = #{userId} ORDER BY created_at DESC LIMIT #{limit}")
     List<MatchmakerServiceRecord> findByUser(@Param("userId") String userId, @Param("limit") int limit);
 
+    /** 用户确认红娘服务方案：仅允许本人将 waiting_user 恢复为 in_service。 */
+    @Update("UPDATE matchmaker_services SET status = 'in_service', updated_at = NOW() " +
+            "WHERE id = #{serviceId} AND user_id = #{userId} AND status = 'waiting_user' AND deleted_at IS NULL")
+    int confirmWaitingForUser(@Param("serviceId") String serviceId, @Param("userId") String userId);
+
     /**
      * 注销前检查（P16 收尾 2e）：该用户仍处于非终态的红娘服务数。
      * 状态口径（submitted/assigned/in_service/waiting_user）。
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/service/ContactAuthorizationService.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/ContactAuthorizationService.java
index 32e8caf..6154787 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/service/ContactAuthorizationService.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/ContactAuthorizationService.java
@@ -16,6 +16,8 @@ import com.danyang.match.platform.shared.exception.GlobalExceptionHandler.Busine
 import com.danyang.match.platform.shared.security.DataScopeGuard;
 import com.danyang.match.platform.user.entity.User;
 import com.danyang.match.platform.user.mapper.UserMapper;
+import com.danyang.match.platform.permission.entity.Operator;
+import com.danyang.match.platform.permission.mapper.OperatorMapper;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.slf4j.MDC;
@@ -78,6 +80,7 @@ public class ContactAuthorizationService {
     private final AuditLogMapper auditLogMapper;
     private final SensitiveAccessLogMapper sensitiveAccessLogMapper;
     private final UserMapper userMapper;
+    private final OperatorMapper operatorMapper;
 
     /** afterData JSON 序列化（静态初始化，不参与构造注入，避免测试桩连带改动）。 */
     private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
@@ -372,6 +375,24 @@ public class ContactAuthorizationService {
         return result;
     }
 
+    /** 审批队列：平台管理员全量可见，组长仅可见本组织申请。 */
+    public Map<String, Object> pendingApprovals(String approverOperatorId, Set<String> permissions) {
+        assertApproverAuthority(approverOperatorId, "pending", permissions);
+        List<MatchmakerContactAuthorization> rows = authorizationMapper.findPendingApproval();
+        if (!isFallbackApprover(permissions)) {
+            String approverOrg = operatorMapper.findById(approverOperatorId)
+                    .map(Operator::getOrganizationId).orElse(null);
+            rows = rows.stream().filter(row -> operatorMapper.findById(row.getOperatorId())
+                    .map(Operator::getOrganizationId)
+                    .map(org -> java.util.Objects.equals(org, approverOrg)).orElse(false))
+                    .collect(Collectors.toList());
+        }
+        Map<String, Object> result = new HashMap<>();
+        result.put("list", rows.stream().map(this::toView).collect(Collectors.toList()));
+        result.put("retentionDays", config.getRetentionDays());
+        return result;
+    }
+
     /** C 端：我的授权列表 + 待同意队列。 */
     public Map<String, Object> myAuthorizationsForUser(String userId) {
         List<Map<String, Object>> items = authorizationMapper.findByUser(userId).stream()
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerManagementService.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerManagementService.java
new file mode 100644
index 0000000..375b4a9
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerManagementService.java
@@ -0,0 +1,53 @@
+package com.danyang.match.platform.matchmaker.service;
+
+import com.danyang.match.platform.audit.entity.AuditLog;
+import com.danyang.match.platform.audit.mapper.AuditLogMapper;
+import com.danyang.match.platform.matchmaker.mapper.MatchmakerFollowupMapper;
+import com.danyang.match.platform.matchmaker.mapper.MatchmakerServiceMapper;
+import com.danyang.match.platform.permission.mapper.OperatorMapper;
+import com.danyang.match.platform.shared.security.principal.OperatorPrincipal;
+import com.danyang.match.platform.shared.enums.ApiResponseCode;
+import com.danyang.match.platform.shared.exception.GlobalExceptionHandler.BusinessException;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.stereotype.Service;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/** 管理岗位只读服务进展；不复用普通红娘的本人分配权限，也不授予代操作权限。 */
+@Service
+@RequiredArgsConstructor
+public class MatchmakerManagementService {
+    private final MatchmakerServiceMapper serviceMapper;
+    private final MatchmakerFollowupMapper followupMapper;
+    private final OperatorMapper operatorMapper;
+    private final AuditLogMapper auditLogMapper;
+
+    public List<Map<String, Object>> list(OperatorPrincipal principal) {
+        boolean global = principal.hasPermission("matchmaker.assign");
+        if (!global && !principal.hasPermission("matchmaker.team.assign")) {
+            throw new AccessDeniedException("无红娘服务管理权限");
+        }
+        String org = global ? null : operatorMapper.findById(principal.id())
+                .orElseThrow(() -> new BusinessException(ApiResponseCode.NOT_FOUND, "操作者不存在"))
+                .getOrganizationId();
+        return serviceMapper.findManagementServices(global, org);
+    }
+
+    public Map<String, Object> detail(OperatorPrincipal principal, String serviceId) {
+        Map<String, Object> summary = list(principal).stream()
+                .filter(row -> serviceId.equals(String.valueOf(row.get("serviceId"))))
+                .findFirst().orElseThrow(() -> new BusinessException(ApiResponseCode.NOT_FOUND, "服务不存在"));
+        var detail = new HashMap<>(summary);
+        detail.put("followups", followupMapper.findByServiceId(serviceId));
+        AuditLog audit = new AuditLog();
+        audit.setOperatorId(principal.id());
+        audit.setAction("MATCHMAKER_MANAGEMENT_VIEW");
+        audit.setResourceType("matchmaker_service");
+        audit.setResourceId(serviceId);
+        audit.setPurposeCode("matchmaker.management.view");
+        auditLogMapper.insert(audit);
+        return detail;
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerService.java b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerService.java
index e4d237e..49bfaea 100644
--- a/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerService.java
+++ b/backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerService.java
@@ -48,6 +48,8 @@ public class MatchmakerService {
     private final RelationService relationService;
     private final MatchMapper matchMapper;
     private final NotificationService notificationService;
+    private final com.danyang.match.platform.matchmaker.mapper.MatchmakerFollowupMapper followupMapper;
+    private final com.danyang.match.platform.shared.id.PublicIdMapper publicIdMapper;
 
     // ==================== 用户端：提交红娘服务请求 ====================
 
@@ -78,6 +80,20 @@ public class MatchmakerService {
         return serviceMapper.findByUser(userId, Math.min(limit, 50));
     }
 
+    /** 用户本人确认红娘方案，服务恢复为进行中。 */
+    @Transactional
+    public MatchmakerServiceRecord confirmService(String serviceId, String userId) {
+        if (serviceId == null || userId == null) {
+            throw new IllegalArgumentException("服务和用户不能为空");
+        }
+        int updated = serviceMapper.confirmWaitingForUser(serviceId, userId);
+        if (updated != 1) {
+            throw new IllegalStateException("服务不存在或当前状态无需确认");
+        }
+        return serviceMapper.findById(serviceId)
+                .orElseThrow(() -> new IllegalStateException("服务不存在"));
+    }
+
     // ==================== 操作人端：分配 + 推荐 + 转介 ====================
 
     /**
@@ -157,9 +173,7 @@ public class MatchmakerService {
             throw new IllegalStateException("您不是此服务的负责人");
         }
 
-        // referral 记录写进 MatchmakerServiceRecord.description 的扩展 JSON
-        // + 单独一条 Followup 记录（DB V009 已有 matchmaker_followups）
-        // 这里用 Map 简单记录，不引入新实体
+        // 转介建议复用跟进记录持久化，独立 ZF 编号不替用户创建申请。
         ReferralRecord record = new ReferralRecord(
                 UUID.randomUUID().toString(),
                 serviceId,
@@ -171,11 +185,22 @@ public class MatchmakerService {
                 Instant.now()
         );
 
+        var followup = new com.danyang.match.platform.matchmaker.entity.MatchmakerFollowup();
+        followup.setId(record.id());
+        followup.setServiceId(serviceId);
+        followup.setOperatorId(operatorId);
+        followup.setFollowupType("system");
+        followup.setContent("转介建议：" + referralLabel(referralType) + (note == null ? "" : "，" + note));
+        followup.setCreatedAt(record.createdAt());
+        followupMapper.insert(followup);
+        String referralNumber = publicIdMapper.nextReferral(record.createdAt());
+        if (publicIdMapper.saveReferral(record.id(), referralNumber) != 1) throw new IllegalStateException("转介编号写入失败");
+
         // 通知用户被转介了
         notificationService.send(userId, "matchmaker_referral",
                 "红娘为你转介了一个" + referralLabel(referralType),
                 "公益红娘为你转介了" + referralLabel(referralType) +
-                        "（" + (referralTarget != null ? referralTarget : "") + "），你可以在" +
+                        "（转介编号：" + referralNumber + "），你可以在" +
                         serviceLabel(referralType) + "页面申请。",
                 "matchmaker_service", serviceId);
 
diff --git a/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorManagementService.java b/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorManagementService.java
index 418bc94..1bb9446 100644
--- a/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorManagementService.java
+++ b/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorManagementService.java
@@ -44,6 +44,7 @@ public class OperatorManagementService {
         List<Map<String, Object>> items = operators.stream().map(op -> {
             Map<String, Object> m = new HashMap<>();
             m.put("id", op.getId());
+            m.put("displayId", op.getDisplayId());
             m.put("name", op.getName());
             m.put("username", op.getUsername());
             m.put("status", op.getStatus());
@@ -62,6 +63,7 @@ public class OperatorManagementService {
     @Transactional
     public Operator createOperator(String name, String username, String password, String organizationId) {
         Operator operator = new Operator();
+        operator.setId(UUID.randomUUID().toString());
         operator.setName(name);
         operator.setUsername(username);
         operator.setPasswordHash(passwordEncoder.encode(password));
diff --git a/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorService.java b/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorService.java
index d2fcdb0..ee07421 100644
--- a/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorService.java
+++ b/backend/src/main/java/com/danyang/match/platform/operator/service/OperatorService.java
@@ -54,6 +54,7 @@ public class OperatorService {
         });
 
         Operator operator = new Operator();
+        operator.setId(java.util.UUID.randomUUID().toString());
         operator.setName(name);
         operator.setUsername(username);
         operator.setPasswordHash(passwordEncoder.encode(password));
diff --git a/backend/src/main/java/com/danyang/match/platform/permission/entity/Operator.java b/backend/src/main/java/com/danyang/match/platform/permission/entity/Operator.java
index dd63ae8..209c1b0 100644
--- a/backend/src/main/java/com/danyang/match/platform/permission/entity/Operator.java
+++ b/backend/src/main/java/com/danyang/match/platform/permission/entity/Operator.java
@@ -15,6 +15,8 @@ public class Operator extends BaseEntity {
     private String phoneEnc;
     private String phoneHash;
     private String username;
+    /** 对外展示编号，内部 id 仍为 UUID。 */
+    private String displayId;
     private String passwordHash;
     private String status;
     private java.time.Instant lastLoginAt;
diff --git a/backend/src/main/java/com/danyang/match/platform/profile/entity/UserPreference.java b/backend/src/main/java/com/danyang/match/platform/profile/entity/UserPreference.java
index a9420e1..1a93aea 100644
--- a/backend/src/main/java/com/danyang/match/platform/profile/entity/UserPreference.java
+++ b/backend/src/main/java/com/danyang/match/platform/profile/entity/UserPreference.java
@@ -1,13 +1,15 @@
 package com.danyang.match.platform.profile.entity;
 
 import com.baomidou.mybatisplus.annotation.TableName;
+import com.baomidou.mybatisplus.annotation.TableField;
+import com.danyang.match.platform.shared.typehandler.JsonNodeTypeHandler;
 import com.danyang.match.platform.shared.base.BaseEntity;
 import lombok.Data;
 import lombok.EqualsAndHashCode;
 
 @Data
 @EqualsAndHashCode(callSuper = true)
-@TableName("user_preferences")
+@TableName(value = "user_preferences", autoResultMap = true)
 public class UserPreference extends BaseEntity {
 
     private String userId;
@@ -17,8 +19,10 @@ public class UserPreference extends BaseEntity {
     private Integer minHeightCm;
     private Integer maxHeightCm;
     private String heightPriority;
+    @TableField(typeHandler = JsonNodeTypeHandler.class)
     private com.fasterxml.jackson.databind.JsonNode regionScope;
     private String regionPriority;
+    @TableField(typeHandler = JsonNodeTypeHandler.class)
     private com.fasterxml.jackson.databind.JsonNode maritalStatuses;
     private String maritalPriority;
     private String minEducationCode;
diff --git a/backend/src/main/java/com/danyang/match/platform/profile/mapper/UserPreferenceMapper.java b/backend/src/main/java/com/danyang/match/platform/profile/mapper/UserPreferenceMapper.java
index 49bd94b..69abb09 100644
--- a/backend/src/main/java/com/danyang/match/platform/profile/mapper/UserPreferenceMapper.java
+++ b/backend/src/main/java/com/danyang/match/platform/profile/mapper/UserPreferenceMapper.java
@@ -4,6 +4,7 @@ import com.baomidou.mybatisplus.core.mapper.BaseMapper;
 import com.danyang.match.platform.profile.entity.UserPreference;
 import org.apache.ibatis.annotations.Mapper;
 import org.apache.ibatis.annotations.Select;
+import org.apache.ibatis.annotations.ResultMap;
 
 import java.util.Optional;
 
@@ -20,5 +21,6 @@ public interface UserPreferenceMapper extends BaseMapper<UserPreference> {
      * <p>{@code deleted_at IS NULL}：V037 已为 user_preferences 补上软删列。
      */
     @Select("SELECT * FROM user_preferences WHERE user_id = #{userId} AND deleted_at IS NULL LIMIT 1")
+    @ResultMap("mybatis-plus_UserPreference")
     Optional<UserPreference> findByUserId(String userId);
 }
diff --git a/backend/src/main/java/com/danyang/match/platform/referral/service/ReferralService.java b/backend/src/main/java/com/danyang/match/platform/referral/service/ReferralService.java
index 72adeef..f3c29bd 100644
--- a/backend/src/main/java/com/danyang/match/platform/referral/service/ReferralService.java
+++ b/backend/src/main/java/com/danyang/match/platform/referral/service/ReferralService.java
@@ -227,9 +227,10 @@ public class ReferralService {
     private String getOperatorName(String operatorId) {
         try {
             var operator = operatorMapper.selectById(operatorId);
-            return operator != null ? operator.getName() : operatorId;
+            return operator != null ? operator.getName() : "公益红娘";
         } catch (Exception e) {
-            return operatorId;
+            log.warn("转介操作员名称查询失败", e);
+            return "公益红娘";
         }
     }
 
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/config/ApiResponseStatusAdvice.java b/backend/src/main/java/com/danyang/match/platform/shared/config/ApiResponseStatusAdvice.java
index 616314e..da8cba4 100644
--- a/backend/src/main/java/com/danyang/match/platform/shared/config/ApiResponseStatusAdvice.java
+++ b/backend/src/main/java/com/danyang/match/platform/shared/config/ApiResponseStatusAdvice.java
@@ -38,6 +38,7 @@ import java.util.stream.Collectors;
  */
 @Slf4j
 @RestControllerAdvice
+@org.springframework.core.annotation.Order(0)
 public class ApiResponseStatusAdvice implements ResponseBodyAdvice<ApiResponse> {
 
     private static final Map<String, ApiResponseCode> BY_CODE =
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/config/SecurityConfig.java b/backend/src/main/java/com/danyang/match/platform/shared/config/SecurityConfig.java
index 145cce9..64ffbf2 100644
--- a/backend/src/main/java/com/danyang/match/platform/shared/config/SecurityConfig.java
+++ b/backend/src/main/java/com/danyang/match/platform/shared/config/SecurityConfig.java
@@ -100,7 +100,9 @@ public class SecurityConfig {
                                 "/activities/operator/**",
                                 "/service-appointments/operator/**",
                                 "/service-programs/operator/**",
-                                "/referrals/operator/**")
+                                "/referrals/operator/**",
+                                "/referrals/service-station",
+                                "/referrals/activity")
                         .hasRole("OPERATOR")
                         /**
                          * 其余接口必须持用户身份（ROLE_USER），不再只是"已认证"。
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/filter/JwtAuthFilter.java b/backend/src/main/java/com/danyang/match/platform/shared/filter/JwtAuthFilter.java
index 4d77c73..02d0434 100644
--- a/backend/src/main/java/com/danyang/match/platform/shared/filter/JwtAuthFilter.java
+++ b/backend/src/main/java/com/danyang/match/platform/shared/filter/JwtAuthFilter.java
@@ -78,7 +78,7 @@ public class JwtAuthFilter extends OncePerRequestFilter {
             }
         }
         if (token == null) {
-            chain.doFilter(request, response);
+            sendUnauthorized(response);
             return;
         }
         if (!jwtTokenService.validateToken(token)) {
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdInputAdvice.java b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdInputAdvice.java
new file mode 100644
index 0000000..d199c82
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdInputAdvice.java
@@ -0,0 +1,62 @@
+package com.danyang.match.platform.shared.id;
+
+import com.danyang.match.platform.shared.enums.ApiResponseCode;
+import com.danyang.match.platform.shared.exception.GlobalExceptionHandler.BusinessException;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import lombok.RequiredArgsConstructor;
+import org.springframework.core.MethodParameter;
+import org.springframework.http.*;
+import org.springframework.http.converter.HttpMessageConverter;
+import org.springframework.http.converter.json.MappingJackson2HttpMessageConverter;
+import org.springframework.web.bind.annotation.RestControllerAdvice;
+import org.springframework.web.servlet.mvc.method.annotation.RequestBodyAdviceAdapter;
+import java.io.*;
+import java.lang.reflect.Type;
+import java.util.Map;
+
+/** 仅解析已有写接口的人员/活动编号；业务层仍校验原 UUID 的权限与数据范围。 */
+@RestControllerAdvice
+@RequiredArgsConstructor
+public class PublicIdInputAdvice extends RequestBodyAdviceAdapter {
+    private final ObjectMapper objectMapper;
+    private final PublicIdMapper mapper;
+    private static final Map<String, String> TYPES = Map.of(
+        "userId", "users", "targetUserId", "users", "reportedUserId", "users",
+        "counselorId", "operators", "assignedOperatorId", "operators",
+        "matchmakerOperatorId", "operators", "newMatchmakerOperatorId", "operators",
+        "activityId", "activities");
+    @Override
+    public boolean supports(MethodParameter method, Type targetType, Class<? extends HttpMessageConverter<?>> converter) {
+        return MappingJackson2HttpMessageConverter.class.isAssignableFrom(converter);
+    }
+    @Override
+    public HttpInputMessage beforeBodyRead(HttpInputMessage message, MethodParameter method, Type targetType,
+            Class<? extends HttpMessageConverter<?>> converter) throws IOException {
+        JsonNode body = objectMapper.readTree(message.getBody());
+        resolve(body);
+        byte[] bytes = objectMapper.writeValueAsBytes(body);
+        HttpHeaders headers = new HttpHeaders();
+        headers.putAll(message.getHeaders());
+        headers.setContentLength(bytes.length);
+        return new HttpInputMessage() {
+            public InputStream getBody() { return new ByteArrayInputStream(bytes); }
+            public HttpHeaders getHeaders() { return headers; }
+        };
+    }
+    void resolve(JsonNode node) {
+        if (node == null) return;
+        if (node.isArray()) { node.forEach(this::resolve); return; }
+        if (!node.isObject()) return;
+        ObjectNode object = (ObjectNode) node;
+        for (var entry : TYPES.entrySet()) {
+            JsonNode value = object.get(entry.getKey());
+            if (value == null || !value.isTextual() || !value.asText().matches("[A-Z]{2}[0-9]{11}")) continue;
+            String id = mapper.resolve(value.asText(), entry.getValue());
+            if (id == null) throw new BusinessException(ApiResponseCode.NOT_FOUND, "编号对应的对象不存在或不可用");
+            object.put(entry.getKey(), id);
+        }
+        object.elements().forEachRemaining(child -> { if (child.isContainerNode()) resolve(child); });
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdMapper.java b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdMapper.java
new file mode 100644
index 0000000..9f6b510
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdMapper.java
@@ -0,0 +1,21 @@
+package com.danyang.match.platform.shared.id;
+
+import org.apache.ibatis.annotations.*;
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface PublicIdMapper {
+    @Select({"<script>SELECT id AS \"id\", display_id AS \"displayId\", entity_type AS \"entityType\", referral_display_id AS \"referralDisplayId\" FROM public_display_ids WHERE id IN",
+        "<foreach collection='ids' item='id' open='(' separator=',' close=')'>CAST(#{id} AS text)</foreach></script>"})
+    List<Map<String, Object>> findAll(@Param("ids") List<String> ids);
+
+    @Select("SELECT id FROM public_display_ids WHERE display_id=#{number} AND entity_type=#{entityType}")
+    String resolve(@Param("number") String number, @Param("entityType") String entityType);
+
+    @Select("SELECT public_next_display_id('ZF', (#{createdAt}::timestamptz AT TIME ZONE 'Asia/Shanghai')::date)")
+    String nextReferral(@Param("createdAt") java.time.Instant createdAt);
+
+    @Update("UPDATE matchmaker_followups SET referral_display_id=#{number} WHERE id=#{id}::uuid AND referral_display_id IS NULL")
+    int saveReferral(@Param("id") String id, @Param("number") String number);
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponse.java b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponse.java
new file mode 100644
index 0000000..5e2d881
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponse.java
@@ -0,0 +1,59 @@
+package com.danyang.match.platform.shared.id;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import java.util.*;
+import java.util.regex.Pattern;
+
+/** 只补充原响应已允许返回的对象编号；不加载资料，不改变 UUID 与权限。 */
+@Service
+@RequiredArgsConstructor
+public class PublicIdResponse {
+    private final PublicIdMapper mapper;
+    private static final Pattern UUID = Pattern.compile("[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}");
+    private static boolean reference(String name) {
+        return "id".equals(name) || name.endsWith("Id");
+    }
+    public void enrich(JsonNode data) {
+        Set<String> ids = new LinkedHashSet<>();
+        collect(data, ids);
+        if (ids.isEmpty()) return;
+        Map<String, Map<String, Object>> numbers = new HashMap<>();
+        for (var row : mapper.findAll(new ArrayList<>(ids))) {
+            String id = row.get("id").toString();
+            if (numbers.putIfAbsent(id, row) != null) throw new IllegalStateException("跨实体 UUID 冲突，不能确定公开编号");
+        }
+        apply(data, numbers);
+    }
+    private void collect(JsonNode node, Set<String> ids) {
+        if (node.isObject()) node.fields().forEachRemaining(field -> {
+            if (reference(field.getKey()) && field.getValue().isTextual() && UUID.matcher(field.getValue().asText()).matches()) ids.add(field.getValue().asText());
+            else if (field.getValue().isContainerNode()) collect(field.getValue(), ids);
+        });
+        else if (node.isArray()) node.forEach(child -> collect(child, ids));
+    }
+    private void apply(JsonNode node, Map<String, Map<String, Object>> numbers) {
+        if (node.isArray()) { node.forEach(child -> apply(child, numbers)); return; }
+        if (!node.isObject()) return;
+        var object = (ObjectNode) node;
+        List<Map.Entry<String, JsonNode>> fields = new ArrayList<>();
+        object.fields().forEachRemaining(fields::add);
+        for (var field : fields) {
+            String name = field.getKey();
+            JsonNode value = field.getValue();
+            if (value.isContainerNode()) { apply(value, numbers); continue; }
+            if (!reference(name) || !value.isTextual() || !UUID.matcher(value.asText()).matches()) continue;
+            var row = numbers.get(value.asText());
+            String stem = name.equals("id") ? "" : name.substring(0, name.length()-2);
+            boolean user = stem.toLowerCase(Locale.ROOT).endsWith("user") || (row != null && "users".equals(row.get("entityType")));
+            String key = stem.isEmpty() ? "displayId" : stem + (user ? "DisplayNumber" : "DisplayId");
+            Object number = row == null ? null : row.get("displayId");
+            if (row != null && row.get("referralDisplayId") != null && "matchmaker_followups".equals(row.get("entityType"))) number = row.get("referralDisplayId");
+            if (number == null) object.putNull(key); else object.put(key, number.toString());
+            if (stem.isEmpty() && user) object.put("displayNumber", number == null ? null : number.toString());
+            if (stem.isEmpty() && row != null && row.get("referralDisplayId") != null) object.put("referralDisplayId", row.get("referralDisplayId").toString());
+        }
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponseAdvice.java b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponseAdvice.java
new file mode 100644
index 0000000..5683ce6
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/shared/id/PublicIdResponseAdvice.java
@@ -0,0 +1,37 @@
+package com.danyang.match.platform.shared.id;
+
+import com.danyang.match.platform.shared.dto.ApiResponse;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import lombok.RequiredArgsConstructor;
+import org.springframework.core.MethodParameter;
+import org.springframework.core.Ordered;
+import org.springframework.core.annotation.Order;
+import org.springframework.http.MediaType;
+import org.springframework.http.converter.HttpMessageConverter;
+import org.springframework.http.converter.json.MappingJackson2HttpMessageConverter;
+import org.springframework.http.server.*;
+import org.springframework.web.bind.annotation.RestControllerAdvice;
+import org.springframework.web.servlet.mvc.method.annotation.ResponseBodyAdvice;
+
+@RestControllerAdvice
+@Order(Ordered.LOWEST_PRECEDENCE)
+@RequiredArgsConstructor
+public class PublicIdResponseAdvice implements ResponseBodyAdvice<Object> {
+    private final ObjectMapper objectMapper;
+    private final PublicIdResponse publicIds;
+    @Override
+    public boolean supports(MethodParameter method, Class<? extends HttpMessageConverter<?>> converter) {
+        return MappingJackson2HttpMessageConverter.class.isAssignableFrom(converter);
+    }
+    @Override
+    @SuppressWarnings({"rawtypes", "unchecked"})
+    public Object beforeBodyWrite(Object body, MethodParameter method, MediaType type,
+            Class<? extends HttpMessageConverter<?>> converter, ServerHttpRequest request, ServerHttpResponse response) {
+        if (body instanceof ApiResponse api && api.isSuccess() && api.getData() != null) {
+            var data = objectMapper.valueToTree(api.getData());
+            publicIds.enrich(data);
+            api.setData(data);
+        }
+        return body;
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandler.java b/backend/src/main/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandler.java
new file mode 100644
index 0000000..fcc79cd
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandler.java
@@ -0,0 +1,57 @@
+package com.danyang.match.platform.shared.typehandler;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.apache.ibatis.type.BaseTypeHandler;
+import org.apache.ibatis.type.JdbcType;
+import org.apache.ibatis.type.MappedJdbcTypes;
+import org.apache.ibatis.type.MappedTypes;
+
+import java.sql.CallableStatement;
+import java.sql.PreparedStatement;
+import java.sql.ResultSet;
+import java.sql.SQLException;
+import java.sql.Types;
+
+/** PostgreSQL JSONB 与 Jackson JsonNode 的参数/结果转换。 */
+@MappedTypes(JsonNode.class)
+@MappedJdbcTypes(JdbcType.OTHER)
+public class JsonNodeTypeHandler extends BaseTypeHandler<JsonNode> {
+
+    private static final ObjectMapper MAPPER = new ObjectMapper();
+
+    @Override
+    public void setNonNullParameter(PreparedStatement ps, int i, JsonNode parameter, JdbcType jdbcType)
+            throws SQLException {
+        String json = parameter.toString();
+        if ("PostgreSQL".equalsIgnoreCase(ps.getConnection().getMetaData().getDatabaseProductName())) {
+            ps.setObject(i, json, Types.OTHER);
+        } else {
+            ps.setString(i, json);
+        }
+    }
+
+    @Override
+    public JsonNode getNullableResult(ResultSet rs, String columnName) throws SQLException {
+        return parse(rs.getString(columnName));
+    }
+
+    @Override
+    public JsonNode getNullableResult(ResultSet rs, int columnIndex) throws SQLException {
+        return parse(rs.getString(columnIndex));
+    }
+
+    @Override
+    public JsonNode getNullableResult(CallableStatement cs, int columnIndex) throws SQLException {
+        return parse(cs.getString(columnIndex));
+    }
+
+    private JsonNode parse(String value) throws SQLException {
+        if (value == null || value.isBlank()) return null;
+        try {
+            return MAPPER.readTree(value);
+        } catch (Exception ex) {
+            throw new SQLException("JSONB 数据格式无效", ex);
+        }
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/user/UserDisplayNumber.java b/backend/src/main/java/com/danyang/match/platform/user/UserDisplayNumber.java
new file mode 100644
index 0000000..d1b32d7
--- /dev/null
+++ b/backend/src/main/java/com/danyang/match/platform/user/UserDisplayNumber.java
@@ -0,0 +1,21 @@
+package com.danyang.match.platform.user;
+
+import java.time.LocalDate;
+import java.time.format.DateTimeFormatter;
+
+/** 用户对外展示编号；内部 UUID 仍是唯一主键。 */
+public final class UserDisplayNumber {
+    private static final DateTimeFormatter DATE = DateTimeFormatter.BASIC_ISO_DATE;
+
+    private UserDisplayNumber() {}
+
+    public static String format(String gender, LocalDate registeredDate, int genderRank) {
+        if ((!"male".equals(gender) && !"female".equals(gender)) || registeredDate == null || genderRank < 1) {
+            throw new IllegalArgumentException("性别、注册日期或排名无效");
+        }
+        if (genderRank > ("male".equals(gender) ? 500 : 499)) throw new IllegalArgumentException("当日同性序号超过三位编号容量");
+        int sequence = genderRank * 2 - ("male".equals(gender) ? 1 : 0);
+        if (sequence > 999) throw new IllegalArgumentException("当日同性交序超过三位编号容量");
+        return "YH" + DATE.format(registeredDate) + String.format("%03d", sequence);
+    }
+}
diff --git a/backend/src/main/java/com/danyang/match/platform/user/dto/UserDetailDTO.java b/backend/src/main/java/com/danyang/match/platform/user/dto/UserDetailDTO.java
index 82efb48..9c293c5 100644
--- a/backend/src/main/java/com/danyang/match/platform/user/dto/UserDetailDTO.java
+++ b/backend/src/main/java/com/danyang/match/platform/user/dto/UserDetailDTO.java
@@ -5,6 +5,7 @@ package com.danyang.match.platform.user.dto;
  */
 public class UserDetailDTO {
     private String id;
+    private String displayNumber;
     private String displayName;
     private String gender;
     private Integer age;
@@ -34,6 +35,8 @@ public class UserDetailDTO {
 
     public String getId() { return id; }
     public void setId(String id) { this.id = id; }
+    public String getDisplayNumber() { return displayNumber; }
+    public void setDisplayNumber(String displayNumber) { this.displayNumber = displayNumber; }
     public String getDisplayName() { return displayName; }
     public void setDisplayName(String displayName) { this.displayName = displayName; }
     public String getGender() { return gender; }
diff --git a/backend/src/main/java/com/danyang/match/platform/user/dto/UserListItemDTO.java b/backend/src/main/java/com/danyang/match/platform/user/dto/UserListItemDTO.java
index 9a8e907..bd32ba0 100644
--- a/backend/src/main/java/com/danyang/match/platform/user/dto/UserListItemDTO.java
+++ b/backend/src/main/java/com/danyang/match/platform/user/dto/UserListItemDTO.java
@@ -5,6 +5,7 @@ package com.danyang.match.platform.user.dto;
  */
 public class UserListItemDTO {
     private String id;
+    private String displayNumber;
     private String displayName;
     private String gender;
     private Integer age;
@@ -19,6 +20,8 @@ public class UserListItemDTO {
 
     public String getId() { return id; }
     public void setId(String id) { this.id = id; }
+    public String getDisplayNumber() { return displayNumber; }
+    public void setDisplayNumber(String displayNumber) { this.displayNumber = displayNumber; }
     public String getDisplayName() { return displayName; }
     public void setDisplayName(String displayName) { this.displayName = displayName; }
     public String getGender() { return gender; }
diff --git a/backend/src/main/java/com/danyang/match/platform/user/entity/User.java b/backend/src/main/java/com/danyang/match/platform/user/entity/User.java
index 1113206..8b38fb5 100644
--- a/backend/src/main/java/com/danyang/match/platform/user/entity/User.java
+++ b/backend/src/main/java/com/danyang/match/platform/user/entity/User.java
@@ -19,6 +19,8 @@ public class User extends BaseEntity {
 
     @TableField("phone")
     private String phone;
+    @TableField("display_number")
+    private String displayNumber;
     @TableField("account_status")
     private String accountStatus;
 
diff --git a/backend/src/main/java/com/danyang/match/platform/user/service/UserService.java b/backend/src/main/java/com/danyang/match/platform/user/service/UserService.java
index dda8a94..39886f4 100644
--- a/backend/src/main/java/com/danyang/match/platform/user/service/UserService.java
+++ b/backend/src/main/java/com/danyang/match/platform/user/service/UserService.java
@@ -55,6 +55,7 @@ public class UserService {
 
         if (keyword != null && !keyword.isBlank()) {
             query.and(q -> q.like(User::getId, keyword)
+                    .or().like(User::getDisplayNumber, keyword)
                     .or().like(User::getWechatOpenid, keyword));
         }
         if (accountStatus != null && !accountStatus.isBlank()) {
@@ -71,7 +72,7 @@ public class UserService {
         }
 
         LambdaQueryWrapper<User> countQuery = new LambdaQueryWrapper<User>();
-        if (keyword != null && !keyword.isBlank()) countQuery.and(q -> q.like(User::getId, keyword).or().like(User::getWechatOpenid, keyword));
+        if (keyword != null && !keyword.isBlank()) countQuery.and(q -> q.like(User::getId, keyword).or().like(User::getDisplayNumber, keyword).or().like(User::getWechatOpenid, keyword));
         if (accountStatus != null && !accountStatus.isBlank()) countQuery.eq(User::getAccountStatus, accountStatus);
         if (profileStatus != null && !profileStatus.isBlank()) {
             List<String> userIds = userProfileMapper.selectList(
@@ -155,6 +156,7 @@ public class UserService {
     private UserListItemDTO toListItemDTO(User user) {
         UserListItemDTO dto = new UserListItemDTO();
         dto.setId(user.getId());
+        dto.setDisplayNumber(user.getDisplayNumber());
         dto.setAccountStatus(user.getAccountStatus());
         dto.setRegisteredAt(user.getCreatedAt());
         dto.setRelationshipStatus(user.getRelationshipStatus());
@@ -189,6 +191,7 @@ public class UserService {
                                        int reportCount, boolean hasSensitiveView) {
         UserDetailDTO dto = new UserDetailDTO();
         dto.setId(user.getId());
+        dto.setDisplayNumber(user.getDisplayNumber());
         dto.setAccountStatus(user.getAccountStatus());
         dto.setRelationshipStatus(user.getRelationshipStatus());
         dto.setRegisteredAt(user.getCreatedAt());
diff --git a/backend/src/main/java/com/danyang/match/platform/verification/mapper/UserIdentityMapper.java b/backend/src/main/java/com/danyang/match/platform/verification/mapper/UserIdentityMapper.java
index ac4f967..e9f2690 100644
--- a/backend/src/main/java/com/danyang/match/platform/verification/mapper/UserIdentityMapper.java
+++ b/backend/src/main/java/com/danyang/match/platform/verification/mapper/UserIdentityMapper.java
@@ -7,10 +7,22 @@ import org.apache.ibatis.annotations.Param;
 import org.apache.ibatis.annotations.Select;
 
 import java.util.Optional;
+import java.time.Instant;
 
 @Mapper
 public interface UserIdentityMapper extends BaseMapper<UserIdentity> {
 
+    @Select("SELECT pg_advisory_xact_lock(hashtext(#{gender} || ':' || ((#{registeredAt}::timestamptz AT TIME ZONE 'Asia/Shanghai')::date)::text))")
+    void lockDisplayNumberSlot(@Param("gender") String gender, @Param("registeredAt") Instant registeredAt);
+
+    @Select("SELECT COUNT(*) FROM user_identities i JOIN users u ON u.id = i.user_id "
+            + "WHERE i.gender = #{gender} AND i.verification_status = 'verified' "
+            + "AND (u.created_at AT TIME ZONE 'Asia/Shanghai')::date = (#{registeredAt}::timestamptz AT TIME ZONE 'Asia/Shanghai')::date "
+            + "AND (u.created_at < #{registeredAt} OR (u.created_at = #{registeredAt} AND u.id < #{userId}::uuid))")
+    int countEarlierSameDayGender(@Param("gender") String gender,
+                                  @Param("registeredAt") Instant registeredAt,
+                                  @Param("userId") String userId);
+
     @Select("SELECT * FROM user_identities WHERE user_id = #{userId} AND deleted_at IS NULL LIMIT 1")
     Optional<UserIdentity> findByUserId(@Param("userId") String userId);
 
diff --git a/backend/src/main/java/com/danyang/match/platform/verification/service/IdentityVerificationService.java b/backend/src/main/java/com/danyang/match/platform/verification/service/IdentityVerificationService.java
index 3ee7c47..38d78b6 100644
--- a/backend/src/main/java/com/danyang/match/platform/verification/service/IdentityVerificationService.java
+++ b/backend/src/main/java/com/danyang/match/platform/verification/service/IdentityVerificationService.java
@@ -119,6 +119,8 @@ public class IdentityVerificationService {
         identity.setVerifiedAt(java.time.Instant.now());
         userIdentityMapper.insert(identity);
 
+        // V060 在实名记录写入事务中通过数据库原子计数器生成展示编号。
+
         // 11. 更新用户表的认证状态标记
         saveAuditLog(userId, null, "IDENTITY_VERIFY", "user", userId, null, null);
         log.info("用户实名认证成功: userId={}, age={}, gender={}", userId, age, gender);
diff --git a/backend/src/main/resources/application-docker.yml b/backend/src/main/resources/application-docker.yml
index bd41eb6..13cba51 100644
--- a/backend/src/main/resources/application-docker.yml
+++ b/backend/src/main/resources/application-docker.yml
@@ -16,6 +16,8 @@ spring:
 wechat:
   app-id: ${WECHAT_APP_ID:}
   app-secret: ${WECHAT_APP_SECRET:}
+  mock:
+    openid: ${WECHAT_MOCK_OPENID:}
 
 encryption:
   key: ${ENCRYPTION_KEY}
diff --git a/backend/src/main/resources/db/migration/V058__add_user_display_number.sql b/backend/src/main/resources/db/migration/V058__add_user_display_number.sql
new file mode 100644
index 0000000..545c1a0
--- /dev/null
+++ b/backend/src/main/resources/db/migration/V058__add_user_display_number.sql
@@ -0,0 +1,23 @@
+ALTER TABLE users ADD COLUMN IF NOT EXISTS display_number VARCHAR(32);
+CREATE UNIQUE INDEX IF NOT EXISTS uk_users_display_number ON users(display_number)
+    WHERE display_number IS NOT NULL AND deleted_at IS NULL;
+
+-- 历史用户的编号由实名性别、注册日和当日同性交序生成；未实名或 gender=other 暂不生成。
+WITH ranked AS (
+    SELECT u.id, i.gender, (u.created_at AT TIME ZONE 'Asia/Shanghai')::date AS registered_date,
+           ROW_NUMBER() OVER (
+               PARTITION BY (u.created_at AT TIME ZONE 'Asia/Shanghai')::date, i.gender
+               ORDER BY u.created_at, u.id
+           ) AS gender_rank
+    FROM users u
+    JOIN user_identities i ON i.user_id = u.id
+    WHERE u.display_number IS NULL
+      AND i.verification_status = 'verified'
+      AND i.gender IN ('male', 'female')
+      AND u.deleted_at IS NULL
+)
+UPDATE users u
+SET display_number = '321181' || TO_CHAR(r.registered_date, 'YYYYMMDD') ||
+    LPAD((r.gender_rank * 2 - CASE WHEN r.gender = 'male' THEN 1 ELSE 0 END)::text, 4, '0')
+FROM ranked r
+WHERE u.id = r.id;
diff --git a/backend/src/main/resources/db/migration/V059__add_public_identity_display_ids.sql b/backend/src/main/resources/db/migration/V059__add_public_identity_display_ids.sql
new file mode 100644
index 0000000..83fa6c0
--- /dev/null
+++ b/backend/src/main/resources/db/migration/V059__add_public_identity_display_ids.sql
@@ -0,0 +1,41 @@
+ALTER TABLE operators ADD COLUMN IF NOT EXISTS display_id VARCHAR(32);
+
+-- 历史用户编号统一为 YH + 注册日期 + 当日性别序号（男奇女偶）。
+WITH ranked AS (
+    SELECT u.id, i.gender,
+           (u.created_at AT TIME ZONE 'Asia/Shanghai')::date AS registered_date,
+           ROW_NUMBER() OVER (
+               PARTITION BY (u.created_at AT TIME ZONE 'Asia/Shanghai')::date, i.gender
+               ORDER BY u.created_at, u.id
+           ) AS gender_rank
+    FROM users u JOIN user_identities i ON i.user_id = u.id
+    WHERE u.display_number IS NOT NULL AND i.verification_status = 'verified'
+      AND i.gender IN ('male', 'female') AND u.deleted_at IS NULL
+)
+UPDATE users u SET display_number = 'YH' || TO_CHAR(r.registered_date, 'YYYYMMDD') ||
+    LPAD((r.gender_rank * 2 - CASE WHEN r.gender = 'male' THEN 1 ELSE 0 END)::text, 2, '0')
+FROM ranked r WHERE u.id = r.id AND r.gender_rank <= 50;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uk_operators_display_id ON operators(display_id)
+    WHERE display_id IS NOT NULL AND deleted_at IS NULL;
+
+-- 运营人员：红娘前缀 HN，其他管理员/运营人员前缀 GL。
+WITH ranked AS (
+    SELECT o.id,
+           CASE WHEN EXISTS (
+               SELECT 1 FROM operator_roles ort JOIN roles r ON r.id = ort.role_id
+               WHERE ort.operator_id = o.id AND r.code IN ('matchmaker', 'matchmaker_leader')
+           ) THEN 'HN' ELSE 'GL' END AS prefix,
+           (o.created_at AT TIME ZONE 'Asia/Shanghai')::date AS created_date,
+           ROW_NUMBER() OVER (
+               PARTITION BY (o.created_at AT TIME ZONE 'Asia/Shanghai')::date,
+                            CASE WHEN EXISTS (
+                              SELECT 1 FROM operator_roles ort JOIN roles r ON r.id = ort.role_id
+                              WHERE ort.operator_id = o.id AND r.code IN ('matchmaker', 'matchmaker_leader')
+                            ) THEN 'HN' ELSE 'GL' END
+               ORDER BY o.created_at, o.id
+           ) AS seq
+    FROM operators o WHERE o.display_id IS NULL AND o.deleted_at IS NULL
+)
+UPDATE operators o SET display_id = r.prefix || TO_CHAR(r.created_date, 'YYYYMMDD') || LPAD(r.seq::text, 2, '0')
+FROM ranked r WHERE o.id = r.id AND r.seq <= 99;
diff --git a/backend/src/main/resources/db/migration/V060__add_global_public_display_ids.sql b/backend/src/main/resources/db/migration/V060__add_global_public_display_ids.sql
new file mode 100644
index 0000000..d819c90
--- /dev/null
+++ b/backend/src/main/resources/db/migration/V060__add_global_public_display_ids.sql
@@ -0,0 +1,195 @@
+-- 公开编号由 PostgreSQL 与领域写入同事务分配；所有 UUID 主外键保持不变。
+CREATE TABLE public_display_id_counters (
+    prefix VARCHAR(2) NOT NULL,
+    local_date DATE NOT NULL,
+    sequence_group VARCHAR(8) NOT NULL DEFAULT '',
+    last_sequence INTEGER NOT NULL CHECK (last_sequence BETWEEN 1 AND 999),
+    PRIMARY KEY (prefix, local_date, sequence_group)
+);
+CREATE TABLE public_display_id_aliases (
+    entity_type VARCHAR(64) NOT NULL,
+    entity_id UUID NOT NULL,
+    old_display_id VARCHAR(64) NOT NULL,
+    new_display_id VARCHAR(13),
+    PRIMARY KEY (entity_type, entity_id, old_display_id)
+);
+INSERT INTO public_display_id_aliases(entity_type, entity_id, old_display_id)
+SELECT 'users', id, display_number FROM users WHERE display_number IS NOT NULL
+UNION ALL SELECT 'operators', id, display_id FROM operators WHERE display_id IS NOT NULL;
+
+CREATE FUNCTION public_next_display_id(p_prefix TEXT, p_date DATE, p_group TEXT DEFAULT '')
+RETURNS TEXT LANGUAGE plpgsql AS $$
+DECLARE n INTEGER; step INTEGER; first_value INTEGER;
+BEGIN
+    IF p_prefix NOT IN ('YH','HN','GL','RW','HD','FW','TJ','LX','FP','GJ','JB','ZF','YY')
+       OR p_date IS NULL OR p_group IS NULL
+       OR (p_prefix = 'YH' AND p_group NOT IN ('male','female'))
+       OR (p_prefix <> 'YH' AND p_group <> '') THEN
+        RAISE EXCEPTION '公开编号类型、日期或性别无效';
+    END IF;
+    step := CASE WHEN p_prefix = 'YH' THEN 2 ELSE 1 END;
+    first_value := CASE WHEN p_group = 'female' THEN 2 ELSE 1 END;
+    INSERT INTO public_display_id_counters(prefix, local_date, sequence_group, last_sequence)
+    VALUES (p_prefix, p_date, p_group, first_value)
+    ON CONFLICT (prefix, local_date, sequence_group) DO UPDATE
+       SET last_sequence = public_display_id_counters.last_sequence + step
+       WHERE public_display_id_counters.last_sequence + step <= 999
+    RETURNING last_sequence INTO n;
+    IF n IS NULL THEN RAISE EXCEPTION '当日公开编号容量已满'; END IF;
+    RETURN p_prefix || TO_CHAR(p_date, 'YYYYMMDD') || LPAD(n::TEXT, 3, '0');
+END $$;
+
+-- 历史数据预检先于回填；包含软删除记录，避免编号复用。
+DO $$
+DECLARE item RECORD; overflow_count INTEGER;
+BEGIN
+    FOR item IN SELECT * FROM (VALUES
+       ('activities','HD'),('review_tasks','RW'),('reports','JB'),
+       ('matchmaker_services','FW'),('matchmaker_recommendations','TJ'),
+       ('matchmaker_contact_authorizations','LX'),('matchmaker_assignments','FP'),
+       ('matchmaker_followups','GJ'),('service_appointments','YY')) AS t(tab,prefix)
+    LOOP
+       EXECUTE FORMAT('SELECT COUNT(*) FROM (SELECT 1 FROM %I GROUP BY (created_at AT TIME ZONE ''Asia/Shanghai'')::date HAVING COUNT(*) > 999) s', item.tab) INTO overflow_count;
+       IF overflow_count > 0 THEN RAISE EXCEPTION '历史编号超出容量: %', item.tab; END IF;
+       EXECUTE FORMAT('ALTER TABLE %I ADD COLUMN display_id VARCHAR(13)', item.tab);
+       EXECUTE FORMAT('WITH ranked AS (SELECT id, (created_at AT TIME ZONE ''Asia/Shanghai'')::date AS d, ROW_NUMBER() OVER (PARTITION BY (created_at AT TIME ZONE ''Asia/Shanghai'')::date ORDER BY created_at,id) AS n FROM %I) UPDATE %I t SET display_id = %L || TO_CHAR(r.d,''YYYYMMDD'') || LPAD(r.n::text,3,''0'') FROM ranked r WHERE t.id=r.id', item.tab, item.tab, item.prefix);
+       EXECUTE FORMAT('ALTER TABLE %I ALTER COLUMN display_id SET NOT NULL', item.tab);
+       EXECUTE FORMAT('CREATE UNIQUE INDEX %I ON %I(display_id)', 'uk_' || item.tab || '_public_display_id', item.tab);
+       EXECUTE FORMAT('ALTER TABLE %I ADD CONSTRAINT %I CHECK (display_id ~ %L)', item.tab, 'ck_' || item.tab || '_public_display_id', '^' || item.prefix || '[0-9]{11}$');
+       EXECUTE FORMAT('INSERT INTO public_display_id_counters SELECT %L, (created_at AT TIME ZONE ''Asia/Shanghai'')::date, '''', MAX(RIGHT(display_id,3)::int) FROM %I GROUP BY (created_at AT TIME ZONE ''Asia/Shanghai'')::date', item.prefix, item.tab);
+    END LOOP;
+END $$;
+
+WITH identities AS (
+    SELECT DISTINCT ON (user_id) user_id, gender FROM user_identities
+    WHERE verification_status='verified' AND gender IN ('male','female')
+    ORDER BY user_id, verified_at DESC NULLS LAST, id
+), ranked AS (
+    SELECT u.id, i.gender, (u.created_at AT TIME ZONE 'Asia/Shanghai')::date AS d,
+      ROW_NUMBER() OVER (PARTITION BY (u.created_at AT TIME ZONE 'Asia/Shanghai')::date,i.gender ORDER BY u.created_at,u.id) * 2
+        - CASE WHEN i.gender='male' THEN 1 ELSE 0 END AS n
+    FROM users u JOIN identities i ON i.user_id=u.id
+)
+UPDATE users u SET display_number='YH'||TO_CHAR(r.d,'YYYYMMDD')||LPAD(r.n::text,3,'0')
+FROM ranked r WHERE u.id=r.id AND r.n<=999;
+
+-- 未实名者允许无编号；已有旧号不能静默丢失或截断。
+DO $$ BEGIN
+    IF EXISTS (SELECT 1 FROM users WHERE display_number IS NOT NULL AND display_number !~ '^YH[0-9]{11}$') THEN
+       RAISE EXCEPTION '用户历史编号或性别异常，需核对后再迁移';
+    END IF;
+    IF EXISTS (SELECT 1 FROM (
+      SELECT u.id, ROW_NUMBER() OVER (PARTITION BY (u.created_at AT TIME ZONE 'Asia/Shanghai')::date, i.gender ORDER BY u.created_at,u.id)*2-CASE WHEN i.gender='male' THEN 1 ELSE 0 END n
+      FROM users u JOIN (SELECT DISTINCT ON(user_id) user_id,gender FROM user_identities WHERE verification_status='verified' AND gender IN ('male','female') ORDER BY user_id,verified_at DESC NULLS LAST,id) i ON i.user_id=u.id
+    ) x WHERE n>999) THEN RAISE EXCEPTION '历史用户编号容量不足'; END IF;
+END $$;
+CREATE UNIQUE INDEX uk_users_public_display_number ON users(display_number) WHERE display_number IS NOT NULL;
+ALTER TABLE users ADD CONSTRAINT ck_users_public_display_number CHECK (display_number IS NULL OR display_number ~ '^YH[0-9]{11}$');
+INSERT INTO public_display_id_counters
+SELECT 'YH', (created_at AT TIME ZONE 'Asia/Shanghai')::date,
+ CASE WHEN RIGHT(display_number,3)::int % 2=1 THEN 'male' ELSE 'female' END,
+ MAX(RIGHT(display_number,3)::int)
+FROM users WHERE display_number IS NOT NULL GROUP BY 2,3;
+
+WITH ranked AS (
+    SELECT o.id, (o.created_at AT TIME ZONE 'Asia/Shanghai')::date AS d,
+      CASE WHEN EXISTS(SELECT 1 FROM operator_roles ort JOIN roles r ON r.id=ort.role_id WHERE ort.operator_id=o.id AND r.code IN ('matchmaker','matchmaker_leader')) THEN 'HN' ELSE 'GL' END AS prefix
+    FROM operators o
+), numbered AS (
+    SELECT *, ROW_NUMBER() OVER (PARTITION BY d,prefix ORDER BY (SELECT created_at FROM operators WHERE id=ranked.id),id) AS n FROM ranked
+)
+UPDATE operators o SET display_id=r.prefix||TO_CHAR(r.d,'YYYYMMDD')||LPAD(r.n::text,3,'0') FROM numbered r WHERE o.id=r.id AND r.n<=999;
+DO $$ BEGIN
+ IF EXISTS(SELECT 1 FROM operators WHERE display_id IS NULL OR display_id !~ '^(HN|GL)[0-9]{11}$') THEN RAISE EXCEPTION '工作人员历史编号容量或日期异常'; END IF;
+END $$;
+ALTER TABLE operators ALTER COLUMN display_id SET NOT NULL;
+ALTER TABLE operators ADD CONSTRAINT ck_operators_public_display_id CHECK (display_id ~ '^(HN|GL)[0-9]{11}$');
+CREATE UNIQUE INDEX uk_operators_public_display_id ON operators(display_id);
+INSERT INTO public_display_id_counters SELECT LEFT(display_id,2), (created_at AT TIME ZONE 'Asia/Shanghai')::date,'',MAX(RIGHT(display_id,3)::int) FROM operators GROUP BY 1,2;
+UPDATE public_display_id_aliases a SET new_display_id=u.display_number FROM users u WHERE a.entity_type='users' AND a.entity_id=u.id;
+UPDATE public_display_id_aliases a SET new_display_id=o.display_id FROM operators o WHERE a.entity_type='operators' AND a.entity_id=o.id;
+
+ALTER TABLE service_appointments ADD COLUMN referral_display_id VARCHAR(13);
+ALTER TABLE activity_registrations ADD COLUMN referral_display_id VARCHAR(13);
+ALTER TABLE matchmaker_followups ADD COLUMN referral_display_id VARCHAR(13);
+WITH referrals AS (
+ SELECT 'service_appointments' tab,id,created_at FROM service_appointments WHERE source='matchmaker_referral'
+ UNION ALL SELECT 'activity_registrations',id,created_at FROM activity_registrations WHERE source='matchmaker_referral'
+), numbered AS (
+ SELECT *, ROW_NUMBER() OVER(PARTITION BY (created_at AT TIME ZONE 'Asia/Shanghai')::date ORDER BY created_at,tab,id) n FROM referrals
+)
+INSERT INTO public_display_id_aliases(entity_type,entity_id,old_display_id,new_display_id)
+SELECT tab,id,'referral:'||id::text,'ZF'||TO_CHAR(created_at AT TIME ZONE 'Asia/Shanghai','YYYYMMDD')||LPAD(n::text,3,'0') FROM numbered WHERE n<=999;
+UPDATE service_appointments t SET referral_display_id=a.new_display_id FROM public_display_id_aliases a WHERE a.entity_type='service_appointments' AND a.entity_id=t.id;
+UPDATE activity_registrations t SET referral_display_id=a.new_display_id FROM public_display_id_aliases a WHERE a.entity_type='activity_registrations' AND a.entity_id=t.id;
+DO $$ BEGIN
+ IF EXISTS (SELECT 1 FROM service_appointments WHERE source='matchmaker_referral' AND referral_display_id IS NULL)
+ OR EXISTS (SELECT 1 FROM activity_registrations WHERE source='matchmaker_referral' AND referral_display_id IS NULL) THEN RAISE EXCEPTION '历史转介编号容量不足'; END IF;
+END $$;
+INSERT INTO public_display_id_counters SELECT 'ZF',TO_DATE(SUBSTRING(new_display_id,3,8),'YYYYMMDD'),'',MAX(RIGHT(new_display_id,3)::int) FROM public_display_id_aliases WHERE new_display_id LIKE 'ZF%' GROUP BY 2;
+
+CREATE FUNCTION public_assign_display_id() RETURNS TRIGGER LANGUAGE plpgsql AS $$
+DECLARE prefix TEXT;
+BEGIN
+ IF TG_OP='UPDATE' THEN
+   IF OLD.display_id IS DISTINCT FROM NEW.display_id THEN RAISE EXCEPTION '公开编号不可更改'; END IF;
+   RETURN NEW;
+ END IF;
+ prefix:=TG_ARGV[0];
+ IF prefix='operator' THEN
+   prefix:=CASE WHEN EXISTS(SELECT 1 FROM operator_roles ort JOIN roles r ON r.id=ort.role_id WHERE ort.operator_id=NEW.id AND r.code IN ('matchmaker','matchmaker_leader')) THEN 'HN' ELSE 'GL' END;
+ END IF;
+ NEW.display_id:=public_next_display_id(prefix,(COALESCE(NEW.created_at,NOW()) AT TIME ZONE 'Asia/Shanghai')::date);
+ RETURN NEW;
+END $$;
+DO $$ DECLARE item RECORD; BEGIN
+ FOR item IN SELECT * FROM (VALUES ('activities','HD'),('review_tasks','RW'),('reports','JB'),('matchmaker_services','FW'),('matchmaker_recommendations','TJ'),('matchmaker_contact_authorizations','LX'),('matchmaker_assignments','FP'),('matchmaker_followups','GJ'),('service_appointments','YY'),('operators','operator')) t(tab,prefix)
+ LOOP EXECUTE FORMAT('CREATE TRIGGER assign_public_display_id BEFORE INSERT OR UPDATE ON %I FOR EACH ROW EXECUTE FUNCTION public_assign_display_id(%L)',item.tab,item.prefix); END LOOP;
+END $$;
+
+CREATE FUNCTION public_assign_user_number() RETURNS TRIGGER LANGUAGE plpgsql AS $$
+DECLARE d DATE; number TEXT;
+BEGIN
+ IF NEW.verification_status='verified' AND NEW.gender IN ('male','female') THEN
+   SELECT display_number,(created_at AT TIME ZONE 'Asia/Shanghai')::date INTO number,d FROM users WHERE id=NEW.user_id FOR UPDATE;
+   IF number IS NULL THEN UPDATE users SET display_number=public_next_display_id('YH',d,NEW.gender) WHERE id=NEW.user_id; END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER assign_public_user_number AFTER INSERT OR UPDATE ON user_identities FOR EACH ROW EXECUTE FUNCTION public_assign_user_number();
+
+CREATE FUNCTION public_assign_referral_number() RETURNS TRIGGER LANGUAGE plpgsql AS $$
+BEGIN
+ IF TG_OP='UPDATE' AND OLD.referral_display_id IS NOT NULL AND OLD.referral_display_id IS DISTINCT FROM NEW.referral_display_id THEN RAISE EXCEPTION '转介编号不可更改'; END IF;
+ IF NEW.source='matchmaker_referral' AND NEW.referral_display_id IS NULL THEN NEW.referral_display_id:=public_next_display_id('ZF',(COALESCE(NEW.created_at,NOW()) AT TIME ZONE 'Asia/Shanghai')::date); END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER assign_referral_number BEFORE INSERT OR UPDATE ON service_appointments FOR EACH ROW EXECUTE FUNCTION public_assign_referral_number();
+CREATE TRIGGER assign_referral_number BEFORE INSERT OR UPDATE ON activity_registrations FOR EACH ROW EXECUTE FUNCTION public_assign_referral_number();
+CREATE UNIQUE INDEX uk_appointments_referral_number ON service_appointments(referral_display_id);
+CREATE UNIQUE INDEX uk_registrations_referral_number ON activity_registrations(referral_display_id);
+CREATE UNIQUE INDEX uk_followups_referral_number ON matchmaker_followups(referral_display_id);
+ALTER TABLE service_appointments ADD CONSTRAINT ck_appointments_referral_number CHECK (referral_display_id IS NULL OR referral_display_id ~ '^ZF[0-9]{11}$');
+ALTER TABLE activity_registrations ADD CONSTRAINT ck_registrations_referral_number CHECK (referral_display_id IS NULL OR referral_display_id ~ '^ZF[0-9]{11}$');
+ALTER TABLE matchmaker_followups ADD CONSTRAINT ck_followups_referral_number CHECK (referral_display_id IS NULL OR referral_display_id ~ '^ZF[0-9]{11}$');
+
+CREATE FUNCTION public_keep_user_number() RETURNS TRIGGER LANGUAGE plpgsql AS $$
+BEGIN
+ IF OLD.display_number IS NOT NULL AND OLD.display_number IS DISTINCT FROM NEW.display_number THEN RAISE EXCEPTION '用户公开编号不可更改'; END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER keep_public_user_number BEFORE UPDATE ON users FOR EACH ROW EXECUTE FUNCTION public_keep_user_number();
+
+CREATE VIEW public_display_ids AS
+ SELECT id::text id,display_number display_id,'users'::text entity_type,NULL::text referral_display_id FROM users
+ UNION ALL SELECT id::text,display_id,'operators',NULL FROM operators
+ UNION ALL SELECT id::text,display_id,'activities',NULL FROM activities
+ UNION ALL SELECT id::text,display_id,'review_tasks',NULL FROM review_tasks
+ UNION ALL SELECT id::text,display_id,'reports',NULL FROM reports
+ UNION ALL SELECT id::text,display_id,'matchmaker_services',NULL FROM matchmaker_services
+ UNION ALL SELECT id::text,display_id,'matchmaker_recommendations',NULL FROM matchmaker_recommendations
+ UNION ALL SELECT id::text,display_id,'matchmaker_contact_authorizations',NULL FROM matchmaker_contact_authorizations
+ UNION ALL SELECT id::text,display_id,'matchmaker_assignments',NULL FROM matchmaker_assignments
+ UNION ALL SELECT id::text,display_id,'matchmaker_followups',referral_display_id FROM matchmaker_followups
+ UNION ALL SELECT id::text,display_id,'service_appointments',referral_display_id FROM service_appointments
+ UNION ALL SELECT id::text,referral_display_id,'activity_registrations',referral_display_id FROM activity_registrations WHERE referral_display_id IS NOT NULL;
diff --git a/backend/src/test/java/com/danyang/match/platform/auth/provider/MockWechatLoginProviderTest.java b/backend/src/test/java/com/danyang/match/platform/auth/provider/MockWechatLoginProviderTest.java
new file mode 100644
index 0000000..d2d0bcf
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/auth/provider/MockWechatLoginProviderTest.java
@@ -0,0 +1,18 @@
+package com.danyang.match.platform.auth.provider;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.test.util.ReflectionTestUtils;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+class MockWechatLoginProviderTest {
+    @Test
+    void configuredDemoOpenidAlwaysResolvesToTheExistingDemoUser() {
+        MockWechatLoginProvider provider = new MockWechatLoginProvider();
+        ReflectionTestUtils.setField(provider, "configuredOpenid", "demo_openid_f06");
+        ReflectionTestUtils.setField(provider, "appId", "dev");
+
+        assertEquals("demo_openid_f06", provider.getCodeSession("wx-code-1").get("openid"));
+        assertEquals("demo_openid_f06", provider.getCodeSession("wx-code-2").get("openid"));
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/deployment/EntityMigrationParityTest.java b/backend/src/test/java/com/danyang/match/platform/deployment/EntityMigrationParityTest.java
index 8d42d73..83e60bf 100644
--- a/backend/src/test/java/com/danyang/match/platform/deployment/EntityMigrationParityTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/deployment/EntityMigrationParityTest.java
@@ -493,7 +493,7 @@ class EntityMigrationParityTest {
 
         for (Path f : entityFiles) {
             String src = Files.readString(f);
-            Matcher tm = Pattern.compile("@TableName\\(\\s*\"([^\"]+)\"").matcher(src);
+            Matcher tm = Pattern.compile("@TableName\\(\\s*(?:value\\s*=\\s*)?\"([^\"]+)\"").matcher(src);
             if (!tm.find()) {
                 continue;
             }
diff --git a/backend/src/test/java/com/danyang/match/platform/deployment/MigrationValidationTest.java b/backend/src/test/java/com/danyang/match/platform/deployment/MigrationValidationTest.java
index 5c3ba34..a8f83e0 100644
--- a/backend/src/test/java/com/danyang/match/platform/deployment/MigrationValidationTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/deployment/MigrationValidationTest.java
@@ -38,7 +38,9 @@ class MigrationValidationTest {
     //   actor_role_snapshot / request_trace_id 四列（全可空、存量不回填、幂等）
     // ZC-MM-003（B1 例外通道立项）：V056 matchmaker_contact_authorizations 受控联系授权表
     //   （六态状态机 + active 部分唯一索引）
-    private static final int LATEST_MIGRATION = 57;
+    // 用户展示编号：V058 users.display_number 及历史数据回填。
+    // 公共身份展示编号：V059 operators.display_id 及历史数据回填。
+    private static final int LATEST_MIGRATION = 60;
 
     private static final String MIGRATION_DIR =
             "backend/src/main/resources/db/migration/";
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerActionGuardTest.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerActionGuardTest.java
index 7a8b3c7..de5b354 100644
--- a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerActionGuardTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerActionGuardTest.java
@@ -95,7 +95,7 @@ class MatchmakerActionGuardTest {
     @Autowired private MatchmakerServiceService matchmakerServiceService;
     @Autowired private ReferralService referralService;
 
-    private static final String MATCHMAKER_OWNER = "op-ag-owner";
+    private static final String MATCHMAKER_OWNER = "00000000-0000-0000-0000-000000000103";
 
     private String user;
     private String target;
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerAssignmentA1Test.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerAssignmentA1Test.java
index 94d81a5..2fe6724 100644
--- a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerAssignmentA1Test.java
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerAssignmentA1Test.java
@@ -202,7 +202,8 @@ class MatchmakerAssignmentA1Test {
         // standalone MockMvc：仅注册真实控制器路由，验证 /claim 已不在映射中（D3 决策）
         MatchmakerServiceService stubService = Mockito.mock(MatchmakerServiceService.class);
         MockMvc mockMvc = MockMvcBuilders
-                .standaloneSetup(new MatchmakerOperatorController(stubService))
+                .standaloneSetup(new MatchmakerOperatorController(stubService,
+                        org.mockito.Mockito.mock(com.danyang.match.platform.matchmaker.service.MatchmakerManagementService.class)))
                 .build();
 
         mockMvc.perform(post("/operator/matchmaker/services/some-id/claim"))
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactAuthorizationTest.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactAuthorizationTest.java
index 26cdb7f..07e747e 100644
--- a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactAuthorizationTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactAuthorizationTest.java
@@ -297,8 +297,6 @@ class MatchmakerContactAuthorizationTest {
             assertNotNull(denyAudit, "业务回滚后拒绝审计必须独立事务落库（REQUIRES_NEW）");
         } finally {
             // 显式清理（本用例数据真实提交，不随测试事务回滚）
-            auditLogMapper.delete(new LambdaQueryWrapper<AuditLog>()
-                    .eq(AuditLog::getResourceId, auth.getId()));
             auditLogMapper.delete(new LambdaQueryWrapper<AuditLog>()
                     .eq(AuditLog::getSubjectUserId, otherUser));
             authorizationMapper.deleteById(auth.getId());
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactDisabledTest.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactDisabledTest.java
index 94509a3..873c58a 100644
--- a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactDisabledTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerContactDisabledTest.java
@@ -40,8 +40,8 @@ import static org.junit.jupiter.api.Assertions.assertThrows;
 @Transactional
 class MatchmakerContactDisabledTest {
 
-    private static final String OPERATOR_ID = "disabled-test-operator-0001";
-    private static final String USER_ID = "disabled-test-user-0001";
+    private static final String OPERATOR_ID = "00000000-0000-0000-0000-000000000101";
+    private static final String USER_ID = "00000000-0000-0000-0000-000000000102";
 
     @Autowired private ContactAuthorizationService contactAuthorizationService;
     @Autowired private MatchmakerContactAuthorizationMapper authorizationMapper;
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerManagementReadTest.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerManagementReadTest.java
new file mode 100644
index 0000000..f3849d1
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerManagementReadTest.java
@@ -0,0 +1,68 @@
+package com.danyang.match.platform.matchmaker;
+
+import com.danyang.match.platform.matchmaker.service.MatchmakerManagementService;
+import com.danyang.match.platform.shared.security.principal.OperatorPrincipal;
+import com.danyang.match.platform.shared.exception.GlobalExceptionHandler.BusinessException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.test.context.ActiveProfiles;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.Set;
+import java.util.UUID;
+import static org.junit.jupiter.api.Assertions.*;
+
+@SpringBootTest
+@ActiveProfiles("test")
+@Transactional
+class MatchmakerManagementReadTest {
+    @Autowired MatchmakerManagementService service;
+    @Autowired JdbcTemplate jdbc;
+    String manager, leader, otherLeader, user, serviceId;
+
+    @BeforeEach void seed() {
+        manager = UUID.randomUUID().toString();
+        leader = UUID.randomUUID().toString();
+        otherLeader = UUID.randomUUID().toString();
+        String org = UUID.randomUUID().toString();
+        String mm = UUID.randomUUID().toString();
+        user = UUID.randomUUID().toString();
+        serviceId = UUID.randomUUID().toString();
+        for (String id : new String[]{manager, leader, otherLeader, mm}) {
+            jdbc.update("INSERT INTO operators(id,name,username,password_hash,organization_id) VALUES(?,?,?,?,?)",
+                    id, "验收人员", id, "test", id.equals(otherLeader) ? UUID.randomUUID().toString() : org);
+        }
+        jdbc.update("INSERT INTO users(id,wechat_openid,display_number) VALUES(?,?,?)", user, user, "YH2026101302");
+        jdbc.update("INSERT INTO matchmaker_services(id,user_id,service_type,status,assigned_operator_id) VALUES(?,?,?,?,?)",
+                serviceId, user, "other", "waiting_user", mm);
+        jdbc.update("INSERT INTO matchmaker_followups(id,service_id,operator_id,content) VALUES(?,?,?,?)",
+                UUID.randomUUID().toString(), serviceId, mm, "验收跟进");
+    }
+
+    @Test void managerReadsPersistedFollowupAndAuditsAccess() {
+        var principal = new OperatorPrincipal(manager, Set.of("matchmaker.assign"));
+        var row = service.list(principal).stream().filter(r -> serviceId.equals(r.get("serviceId"))).findFirst().orElseThrow();
+        assertEquals("验收跟进", row.get("latestFollowupContent"));
+        assertEquals("YH2026101302", row.get("userDisplayNumber"));
+        assertFalse(row.containsKey("phone"));
+        var detail = service.detail(principal, serviceId);
+        assertEquals(1, ((java.util.List<?>) detail.get("followups")).size());
+        assertEquals(1, jdbc.queryForObject("SELECT COUNT(*) FROM audit_logs WHERE resource_id=? AND action='MATCHMAKER_MANAGEMENT_VIEW'", Integer.class, serviceId));
+    }
+
+    @Test void leaderCanOnlyReadOwnOrganization() {
+        assertNotNull(service.detail(new OperatorPrincipal(leader, Set.of("matchmaker.team.assign")), serviceId));
+        var other = new OperatorPrincipal(otherLeader, Set.of("matchmaker.team.assign"));
+        assertTrue(service.list(other).isEmpty());
+        assertThrows(BusinessException.class, () -> service.detail(other, serviceId));
+    }
+
+    @Test void ordinaryMatchmakerCannotUseManagementRead() {
+        var ordinary = new OperatorPrincipal(manager, Set.of("matchmaker.view", "matchmaker.service"));
+        assertThrows(AccessDeniedException.class, () -> service.list(ordinary));
+        assertThrows(AccessDeniedException.class, () -> service.detail(ordinary, serviceId));
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerReferralPhase13Test.java b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerReferralPhase13Test.java
index d92f24f..739f5a5 100644
--- a/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerReferralPhase13Test.java
+++ b/backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerReferralPhase13Test.java
@@ -61,8 +61,8 @@ class MatchmakerReferralPhase13Test {
     @Autowired private ActivityRegistrationMapper activityRegistrationMapper;
     @Autowired private ServiceAppointmentMapper appointmentMapper;
 
-    private static final String MATCHMAKER_OWNER = "op-mm-owner";
-    private static final String MATCHMAKER_OTHER = "op-mm-other";
+    private static final String MATCHMAKER_OWNER = "00000000-0000-0000-0000-000000000104";
+    private static final String MATCHMAKER_OTHER = "00000000-0000-0000-0000-000000000105";
 
     private String user;
     private String target;
diff --git a/backend/src/test/java/com/danyang/match/platform/notification/NotificationPhase11IntegrationTest.java b/backend/src/test/java/com/danyang/match/platform/notification/NotificationPhase11IntegrationTest.java
index 0223278..6926029 100644
--- a/backend/src/test/java/com/danyang/match/platform/notification/NotificationPhase11IntegrationTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/notification/NotificationPhase11IntegrationTest.java
@@ -39,7 +39,8 @@ class NotificationPhase11IntegrationTest {
     @Autowired
     private PlatformTransactionManager txManager;
 
-    private static final String USER = "u-notif-p11";
+    // 与生产 users.id 类型保持一致，避免该通知夹具污染共享 H2 库后触发 UUID 转换告警。
+    private static final String USER = "22222222-2222-4222-8222-222222222222";
 
     private List<Notification> allFor(String userId, String type) {
         return notificationMapper.selectList(
diff --git a/backend/src/test/java/com/danyang/match/platform/notification/NotificationTemplateTypeGuardTest.java b/backend/src/test/java/com/danyang/match/platform/notification/NotificationTemplateTypeGuardTest.java
index 886beec..c10b754 100644
--- a/backend/src/test/java/com/danyang/match/platform/notification/NotificationTemplateTypeGuardTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/notification/NotificationTemplateTypeGuardTest.java
@@ -38,7 +38,8 @@ class NotificationTemplateTypeGuardTest {
     @Autowired
     private NotificationMapper notificationMapper;
 
-    private static final String USER = "u-notif-guard";
+    // 必须使用与生产 users.id 一致的 UUID；否则该夹具写入 H2 后，后续 UUID 条件查询会触发类型转换告警。
+    private static final String USER = "11111111-1111-4111-8111-111111111111";
 
     private void assertPersisted(String type, String businessId, String label) {
         List<Notification> rows = notificationMapper.selectList(
diff --git a/backend/src/test/java/com/danyang/match/platform/organization/OrganizationServiceTest.java b/backend/src/test/java/com/danyang/match/platform/organization/OrganizationServiceTest.java
index 3dd5a83..d81be76 100644
--- a/backend/src/test/java/com/danyang/match/platform/organization/OrganizationServiceTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/organization/OrganizationServiceTest.java
@@ -52,7 +52,7 @@ class OrganizationServiceTest {
     @Autowired private AuditLogMapper auditLogMapper;
 
     /** 审计归属断言用的操作人 id（模拟已认证的运营主体） */
-    private static final String OPERATOR_ID = "op-audit-e2e";
+    private static final String OPERATOR_ID = "00000000-0000-0000-0000-000000000106";
 
     private static Map<String, Object> params(String name, String type) {
         Map<String, Object> params = new HashMap<>();
@@ -76,9 +76,12 @@ class OrganizationServiceTest {
     void createOrganizationRecordsOperatorInAuditLog() {
         Organization org = createAndReload("审计归属机构-" + System.nanoTime(), "other");
 
+        // resource_id 同时承载授权拒绝事件的方法签名，H2 会按 UUID 参数比较时拒绝混合值；
+        // 先按稳定动作取行，再在 Java 侧核对资源，保持测试语义且不改变生产字段。
         List<AuditLog> logs = auditLogMapper.selectList(new LambdaQueryWrapper<AuditLog>()
-                .eq(AuditLog::getResourceId, org.getId())
-                .eq(AuditLog::getAction, "CREATE_ORGANIZATION"));
+                .eq(AuditLog::getAction, "CREATE_ORGANIZATION")).stream()
+                .filter(log -> org.getId().equals(log.getResourceId()))
+                .toList();
 
         assertEquals(1, logs.size(), "创建机构应恰好留下 1 条 CREATE_ORGANIZATION 审计");
         assertEquals(OPERATOR_ID, logs.get(0).getOperatorId(),
@@ -103,7 +106,7 @@ class OrganizationServiceTest {
     void disableOrganizationPersistsInactiveStatus() {
         Organization org = createAndReload("待停用机构-" + System.nanoTime(), "charity_center");
 
-        organizationService.disableOrganization(org.getId(), "op-1");
+        organizationService.disableOrganization(org.getId(), OPERATOR_ID);
 
         Organization after = organizationMapper.selectById(org.getId());
         assertEquals(Constants.ORG_STATUS_INACTIVE, after.getStatus(),
@@ -114,9 +117,9 @@ class OrganizationServiceTest {
     @DisplayName("启用机构：落库状态回到 active（原写 'normal' —— 不在白名单）")
     void enableOrganizationPersistsActiveStatus() {
         Organization org = createAndReload("待启用机构-" + System.nanoTime(), "volunteer_team");
-        organizationService.disableOrganization(org.getId(), "op-1");
+        organizationService.disableOrganization(org.getId(), OPERATOR_ID);
 
-        organizationService.enableOrganization(org.getId(), "op-1");
+        organizationService.enableOrganization(org.getId(), OPERATOR_ID);
 
         Organization after = organizationMapper.selectById(org.getId());
         assertEquals(Constants.ORG_STATUS_ACTIVE, after.getStatus(),
@@ -128,8 +131,8 @@ class OrganizationServiceTest {
     void disableThenEnableRoundTripKeepsRecordReadable() {
         Organization org = createAndReload("往返机构-" + System.nanoTime(), "trade_union");
 
-        organizationService.disableOrganization(org.getId(), "op-1");
-        organizationService.enableOrganization(org.getId(), "op-1");
+        organizationService.disableOrganization(org.getId(), OPERATOR_ID);
+        organizationService.enableOrganization(org.getId(), OPERATOR_ID);
 
         assertEquals(1, organizationService.listOrganizations().stream()
                         .filter(o -> org.getId().equals(o.getId())).count(),
@@ -196,8 +199,8 @@ class OrganizationServiceTest {
     @DisplayName("机构不存在时：停用 / 启用 / 更新返回 NOT_FOUND 业务码，而非 500")
     void missingOrganizationYieldsNotFoundCode() {
         for (Runnable call : java.util.List.<Runnable>of(
-                () -> organizationService.disableOrganization("no-such-org-id", "op-1"),
-                () -> organizationService.enableOrganization("no-such-org-id", "op-1"),
+                () -> organizationService.disableOrganization("no-such-org-id", OPERATOR_ID),
+                () -> organizationService.enableOrganization("no-such-org-id", OPERATOR_ID),
                 () -> organizationService.updateOrganization("no-such-org-id",
                         params("新名称", "other")))) {
             BusinessException ex = assertThrows(BusinessException.class, call::run);
diff --git a/backend/src/test/java/com/danyang/match/platform/review/ReviewDashboardCountTest.java b/backend/src/test/java/com/danyang/match/platform/review/ReviewDashboardCountTest.java
new file mode 100644
index 0000000..91384f9
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/review/ReviewDashboardCountTest.java
@@ -0,0 +1,37 @@
+package com.danyang.match.platform.review;
+
+import com.danyang.match.platform.review.service.ReviewService;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.test.context.ActiveProfiles;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.UUID;
+import static org.junit.jupiter.api.Assertions.*;
+
+@SpringBootTest
+@ActiveProfiles("test")
+@Transactional
+class ReviewDashboardCountTest {
+    @Autowired ReviewService service;
+    @Autowired JdbcTemplate jdbc;
+
+    @Test void approvingTaskReducesOutstandingCountAndRemovesItFromQueue() {
+        String task = UUID.randomUUID().toString();
+        String operator = UUID.randomUUID().toString();
+        String user = UUID.randomUUID().toString();
+        jdbc.update("INSERT INTO operators(id,name,username,password_hash) VALUES(?,?,?,?)", operator, "测试审核员", operator, "test");
+        jdbc.update("INSERT INTO users(id,wechat_openid) VALUES(?,?)", user, user);
+        jdbc.update("INSERT INTO review_tasks(id,user_id,review_type,status,created_at) VALUES(?,?,?,'pending',NOW())", task, user, "profile");
+        var before = service.getPendingStats();
+        assertTrue(service.claimTask(operator, task).isPresent());
+        var claimed = service.getPendingStats();
+        assertEquals(before.get("pending") - 1, claimed.get("pending"));
+        assertEquals(before.get("processing") + 1, claimed.get("processing"));
+        service.approve(task, operator, "验收通过");
+        var after = service.getPendingStats();
+        assertEquals(before.get("pending") + before.get("processing") - 1, after.get("pending") + after.get("processing"));
+        assertFalse(service.listPendingTasks(0, 1000).stream().anyMatch(row -> task.equals(row.getId())));
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/service_appointment/ServiceAppointmentOwnerGuardTest.java b/backend/src/test/java/com/danyang/match/platform/service_appointment/ServiceAppointmentOwnerGuardTest.java
index 8978f9c..6d36053 100644
--- a/backend/src/test/java/com/danyang/match/platform/service_appointment/ServiceAppointmentOwnerGuardTest.java
+++ b/backend/src/test/java/com/danyang/match/platform/service_appointment/ServiceAppointmentOwnerGuardTest.java
@@ -309,8 +309,10 @@ class ServiceAppointmentOwnerGuardTest {
     /**
      * 审计计数必须走 Mapper，**不能**用原生 JDBC 的独立连接。
      *
-     * <p>{@code DataScopeGuard.deny()} 通过 {@code auditLogMapper.insert} 写在**当前 Spring 事务内**，
-     * 该行尚未提交；裸 JDBC 新开的连接按 READ_COMMITTED 看不到它，会得到 before == after 的假结论。
+     * <p>{@code DataScopeGuard.deny()} 通过 {@code AuditDenyWriter.insertIndependent}
+     * 以 REQUIRES_NEW 独立事务提交拒绝审计（2026-10 修"回滚吞审计"缺陷），该行对
+     * READ_COMMITTED 的独立连接同样可见；但 Mapper 查询与断言同事务执行，
+     * 语义上仍必须走 Mapper（且测试库一级缓存为 statement 作用域，确保每次真执行）。
      */
     private long dataScopeDeniedCount() {
         return auditLogMapper.selectCount(
diff --git a/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdInputTest.java b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdInputTest.java
new file mode 100644
index 0000000..32c59e5
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdInputTest.java
@@ -0,0 +1,30 @@
+package com.danyang.match.platform.shared.id;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.junit.jupiter.api.Test;
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.Mockito.*;
+
+class PublicIdInputTest {
+    @Test
+    void resolvesTypedCodesAndPreservesUuidAndUnrelatedText() {
+        var mapper = mock(PublicIdMapper.class);
+        when(mapper.resolve("YH20261014002", "users")).thenReturn("00000000-0000-0000-0000-000000000001");
+        var objectMapper = new ObjectMapper();
+        var node = objectMapper.createObjectNode().put("targetUserId", "YH20261014002")
+            .put("userId", "00000000-0000-0000-0000-000000000002").put("content", "YH20261014002");
+        new PublicIdInputAdvice(objectMapper, mapper).resolve(node);
+        assertEquals("00000000-0000-0000-0000-000000000001", node.get("targetUserId").asText());
+        assertEquals("00000000-0000-0000-0000-000000000002", node.get("userId").asText());
+        assertEquals("YH20261014002", node.get("content").asText());
+        verify(mapper, times(1)).resolve("YH20261014002", "users");
+    }
+    @Test
+    void cannotResolveOperatorAsUser() {
+        var mapper = mock(PublicIdMapper.class);
+        var objectMapper = new ObjectMapper();
+        var node = objectMapper.createObjectNode().put("targetUserId", "HN20261014001");
+        assertThrows(RuntimeException.class, () -> new PublicIdInputAdvice(objectMapper, mapper).resolve(node));
+        verify(mapper).resolve("HN20261014001", "users");
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdMapperReadTest.java b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdMapperReadTest.java
new file mode 100644
index 0000000..f0efc10
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdMapperReadTest.java
@@ -0,0 +1,28 @@
+package com.danyang.match.platform.shared.id;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.context.ActiveProfiles;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.jdbc.core.JdbcTemplate;
+import java.util.List;
+import static org.junit.jupiter.api.Assertions.*;
+
+@SpringBootTest
+@ActiveProfiles("test")
+@Transactional
+class PublicIdMapperReadTest {
+    @Autowired PublicIdMapper mapper;
+    @Autowired JdbcTemplate jdbc;
+    @Test
+    void actualMapperReturnsCaseStablePublicFields() {
+        String id = "00000000-0000-0000-0000-000000000991";
+        jdbc.update("INSERT INTO users(id,wechat_openid,display_number) VALUES(?,?,?)",id,"public-id-mapper-test","YH20261014001");
+        var rows = mapper.findAll(List.of(id));
+        assertEquals(1, rows.size());
+        assertEquals(id, rows.get(0).get("id"));
+        assertEquals("YH20261014001", rows.get(0).get("displayId"));
+        assertEquals("users", rows.get(0).get("entityType"));
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdResponseTest.java b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdResponseTest.java
new file mode 100644
index 0000000..e3218d8
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/shared/id/PublicIdResponseTest.java
@@ -0,0 +1,48 @@
+package com.danyang.match.platform.shared.id;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.junit.jupiter.api.Test;
+import java.util.List;
+import java.util.Map;
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.ArgumentMatchers.anyList;
+import static org.mockito.Mockito.*;
+
+class PublicIdResponseTest {
+    @Test
+    void addsPublicNumbersWithoutChangingInternalKeysOrPrivateWhitelist() {
+        var mapper = mock(PublicIdMapper.class);
+        String user = "00000000-0000-0000-0000-000000000001";
+        String service = "00000000-0000-0000-0000-000000000002";
+        when(mapper.findAll(anyList())).thenReturn(List.of(
+            Map.of("id", user, "displayId", "YH20261014002", "entityType", "users"),
+            Map.of("id", service, "displayId", "FW20261014001", "entityType", "matchmaker_services")));
+        var json = new ObjectMapper().valueToTree(Map.of("id", service,
+            "recommendations", List.of(Map.of("targetUserId", user))));
+        new PublicIdResponse(mapper).enrich(json);
+        assertEquals(service, json.get("id").asText());
+        assertEquals("FW20261014001", json.get("displayId").asText());
+        var recommendation = json.get("recommendations").get(0);
+        assertEquals(user, recommendation.get("targetUserId").asText());
+        assertEquals("YH20261014002", recommendation.get("targetUserDisplayNumber").asText());
+        assertFalse(recommendation.has("phone"));
+        verify(mapper, times(1)).findAll(anyList());
+    }
+
+    @Test
+    void doesNotQueryForPlainTextOrTreatCodesAsAuthorization() {
+        var mapper = mock(PublicIdMapper.class);
+        var json = new ObjectMapper().valueToTree(Map.of("content", "普通文案", "displayId", "FW20261014001"));
+        new PublicIdResponse(mapper).enrich(json);
+        verifyNoInteractions(mapper);
+    }
+
+    @Test
+    void missingPublicNumberNeverFallsBackToUuid() {
+        var mapper = mock(PublicIdMapper.class);
+        when(mapper.findAll(anyList())).thenReturn(List.of());
+        var json = new ObjectMapper().valueToTree(Map.of("resourceId", "00000000-0000-0000-0000-000000000003"));
+        new PublicIdResponse(mapper).enrich(json);
+        assertTrue(json.get("resourceDisplayId").isNull());
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandlerTest.java b/backend/src/test/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandlerTest.java
new file mode 100644
index 0000000..2583513
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/shared/typehandler/JsonNodeTypeHandlerTest.java
@@ -0,0 +1,42 @@
+package com.danyang.match.platform.shared.typehandler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.apache.ibatis.type.JdbcType;
+import org.junit.jupiter.api.Test;
+
+import java.sql.Connection;
+import java.sql.DatabaseMetaData;
+import java.sql.PreparedStatement;
+import java.sql.ResultSet;
+import java.sql.Types;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.*;
+
+class JsonNodeTypeHandlerTest {
+
+    @Test
+    void writesJsonNodeAsPostgresOtherString() throws Exception {
+        PreparedStatement statement = mock(PreparedStatement.class);
+        Connection connection = mock(Connection.class);
+        DatabaseMetaData metadata = mock(DatabaseMetaData.class);
+        when(statement.getConnection()).thenReturn(connection);
+        when(connection.getMetaData()).thenReturn(metadata);
+        when(metadata.getDatabaseProductName()).thenReturn("PostgreSQL");
+
+        new JsonNodeTypeHandler().setNonNullParameter(
+                statement, 1, new ObjectMapper().readTree("[\"丹阳\"]"), JdbcType.OTHER);
+
+        verify(statement).setObject(1, "[\"丹阳\"]", Types.OTHER);
+    }
+
+    @Test
+    void readsJsonNodeFromDatabaseText() throws Exception {
+        ResultSet resultSet = mock(ResultSet.class);
+        when(resultSet.getString("marital_statuses")).thenReturn("[\"never_married\"]");
+
+        var result = new JsonNodeTypeHandler().getNullableResult(resultSet, "marital_statuses");
+
+        assertEquals("never_married", result.get(0).asText());
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/support/CommittedAuditCleanupListener.java b/backend/src/test/java/com/danyang/match/platform/support/CommittedAuditCleanupListener.java
new file mode 100644
index 0000000..cf77621
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/support/CommittedAuditCleanupListener.java
@@ -0,0 +1,56 @@
+package com.danyang.match.platform.support;
+
+import org.springframework.context.ApplicationContext;
+import org.springframework.test.context.TestContext;
+import org.springframework.test.context.TestExecutionListener;
+
+import javax.sql.DataSource;
+import java.sql.Connection;
+import java.sql.Statement;
+
+/**
+ * 跨测试隔离：清空 H2 内存测试库中**已提交**的 audit_logs 行。
+ *
+ * <h3>为什么需要</h3>
+ * 拒绝审计改为 {@code REQUIRES_NEW} 独立事务提交（{@code AuditDenyWriter.insertIndependent} /
+ * {@code AuthorizationAuditListener}）后，测试中触发的每条拒绝审计都会**真实提交**到共享的
+ * H2 内存库（{@code DB_CLOSE_DELAY=-1} + reuseForks，整个 JVM 全量回归期间持续存活）——
+ * 这正是该设计要保证的"回滚不吞审计"。副作用是这些行会跨测试残留。
+ *
+ * <h3>残留行的危害（运行时实测）</h3>
+ * 生产代码 {@code UUIDStringTypeHandler} 对合法 UUID 字符串参数以 {@code setObject(i, uuid,
+ * Types.OTHER)} 绑定，在 H2 中成为 UUID 类型值；H2 全表扫描做 {@code VARCHAR 列 = UUID 参数}
+ * 比较时会将存储值逐行强转为 UUID，遇到残留的非 UUID 字符串值（如固定 ID 夹具
+ * "op-ag-owner"、"disabled-test-user-0001"，或 {@code AUTHORIZATION_DENIED} 审计的
+ * resourceId=控制器方法签名）即抛 22018 数据转换异常（Spring 翻译为
+ * DataIntegrityViolationException），炸掉后续任何测试的审计计数查询。
+ * 旧行为（同事务写审计）下这些行随测试事务回滚从不落库，因此该问题在 REQUIRES_NEW 改造后才暴露。
+ *
+ * <h3>语义边界</h3>
+ * 每个测试方法结束后（测试事务回滚之后，独立连接 autocommit）删除 audit_logs 全部已提交行。
+ * 测试对审计的断言都在本方法内完成（夹具 ID 每用例唯一，无跨测试审计依赖），删除不影响任何
+ * 用例结论；{@code MatchmakerContactAuthorizationTest.denyAuditSurvivesBusinessRollback} 的
+ * 判别力来自 NOT_SUPPORTED + 业务回滚 + 本方法内断言，同样不受影响。
+ * 仅作用于测试库，不触及产品代码。
+ */
+public class CommittedAuditCleanupListener implements TestExecutionListener {
+
+    @Override
+    public void afterTestMethod(TestContext testContext) {
+        try {
+            ApplicationContext context = testContext.getApplicationContext();
+            String[] dataSourceBeans = context.getBeanNamesForType(DataSource.class, false, false);
+            if (dataSourceBeans.length == 0) {
+                return;
+            }
+            DataSource dataSource = context.getBean(DataSource.class);
+            try (Connection connection = dataSource.getConnection();
+                 Statement statement = connection.createStatement()) {
+                statement.executeUpdate("DELETE FROM audit_logs");
+            }
+        } catch (Exception cleanupFailure) {
+            // 清理失败不改变测试结论：下一用例的清理会再次尝试；
+            // 审计残留只可能造成后续用例偶发类型转换错误，届时以日志定位。
+        }
+    }
+}
diff --git a/backend/src/test/java/com/danyang/match/platform/user/UserDisplayNumberTest.java b/backend/src/test/java/com/danyang/match/platform/user/UserDisplayNumberTest.java
new file mode 100644
index 0000000..464d00a
--- /dev/null
+++ b/backend/src/test/java/com/danyang/match/platform/user/UserDisplayNumberTest.java
@@ -0,0 +1,28 @@
+package com.danyang.match.platform.user;
+
+import org.junit.jupiter.api.Test;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+class UserDisplayNumberTest {
+
+    @Test
+    void formatsMaleAndFemaleNumbersWithDateAndGenderParity() {
+        assertEquals("YH20261012001", UserDisplayNumber.format("male", java.time.LocalDate.of(2026, 10, 12), 1));
+        assertEquals("YH20261012003", UserDisplayNumber.format("male", java.time.LocalDate.of(2026, 10, 12), 2));
+        assertEquals("YH20261012002", UserDisplayNumber.format("female", java.time.LocalDate.of(2026, 10, 12), 1));
+        assertEquals("YH20261012004", UserDisplayNumber.format("female", java.time.LocalDate.of(2026, 10, 12), 2));
+    }
+
+    @Test
+    void rejectsUnsupportedGenderAndInvalidRank() {
+        assertThrows(IllegalArgumentException.class,
+                () -> UserDisplayNumber.format("other", java.time.LocalDate.of(2026, 10, 12), 1));
+        assertThrows(IllegalArgumentException.class,
+                () -> UserDisplayNumber.format("male", java.time.LocalDate.of(2026, 10, 12), 0));
+        assertEquals("YH20261012999", UserDisplayNumber.format("male", java.time.LocalDate.of(2026, 10, 12), 500));
+        assertEquals("YH20261012998", UserDisplayNumber.format("female", java.time.LocalDate.of(2026, 10, 12), 499));
+        assertThrows(IllegalArgumentException.class, () -> UserDisplayNumber.format("female", java.time.LocalDate.of(2026, 10, 12), 500));
+        assertThrows(IllegalArgumentException.class, () -> UserDisplayNumber.format("male", java.time.LocalDate.of(2026, 10, 12), Integer.MAX_VALUE));
+    }
+}
diff --git a/backend/src/test/resources/META-INF/spring.factories b/backend/src/test/resources/META-INF/spring.factories
new file mode 100644
index 0000000..557ecf0
--- /dev/null
+++ b/backend/src/test/resources/META-INF/spring.factories
@@ -0,0 +1 @@
+# NEGATIVE-INJECTION-1: listener disabled for red proof
diff --git a/backend/src/test/resources/application-test.yml b/backend/src/test/resources/application-test.yml
index 163ae72..629b4ab 100644
--- a/backend/src/test/resources/application-test.yml
+++ b/backend/src/test/resources/application-test.yml
@@ -13,6 +13,14 @@ spring:
     serialization:
       write-dates-as-timestamps: false
 
+# REQUIRES_NEW 拒绝审计（AuditDenyWriter.insertIndependent）经独立 SqlSession 提交后，
+# 不会清空外层测试事务 SqlSession 的一级缓存；测试里 before/after 两次同参数 count
+# 第二次会命中缓存返回 before 值（旧行为假绿的机制来源）。statement 作用域让每次查询
+# 真执行，与生产 PG READ_COMMITTED 的可见性语义一致。
+mybatis-plus:
+  configuration:
+    local-cache-scope: statement
+
 jwt:
   access-token-secret: test-access-secret-for-unit-tests-only
   refresh-token-secret: test-refresh-secret-for-unit-tests-only
diff --git a/backend/src/test/resources/schema-h2.sql b/backend/src/test/resources/schema-h2.sql
index d4c7d77..8158582 100644
--- a/backend/src/test/resources/schema-h2.sql
+++ b/backend/src/test/resources/schema-h2.sql
@@ -2,7 +2,7 @@ DROP ALL OBJECTS;
 
 CREATE TABLE users (
   id VARCHAR(36) PRIMARY KEY, wechat_openid VARCHAR(128) NOT NULL UNIQUE,
-  wechat_unionid VARCHAR(128), phone VARCHAR(32), account_status VARCHAR(32),
+  wechat_unionid VARCHAR(128), phone VARCHAR(32), display_number VARCHAR(32), account_status VARCHAR(32),
   relationship_status VARCHAR(32), recommendation_enabled BOOLEAN,
   last_login_at TIMESTAMP WITH TIME ZONE, closed_at TIMESTAMP WITH TIME ZONE,
   created_at TIMESTAMP WITH TIME ZONE,
@@ -544,6 +544,7 @@ CREATE TABLE operators (
   phone_hash VARCHAR(128),
   username VARCHAR(100) NOT NULL,
   password_hash VARCHAR(255) NOT NULL,
+  display_id VARCHAR(32),
   status VARCHAR(32) NOT NULL DEFAULT 'active',
   last_login_at TIMESTAMP WITH TIME ZONE,
   created_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT NOW(),
@@ -798,3 +799,38 @@ CREATE TABLE feature_flag_overrides (
   updated_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT NOW(),
   CONSTRAINT chk_flag_value_type CHECK (value_type IN ('boolean', 'int', 'string'))
 );
+
+-- V060 公开编号读取契约（PostgreSQL 分配器另做并发实测）
+CREATE TABLE public_display_id_counters (
+ prefix VARCHAR(2) NOT NULL, local_date DATE NOT NULL, sequence_group VARCHAR(8) NOT NULL DEFAULT '',
+ last_sequence INTEGER NOT NULL CHECK(last_sequence BETWEEN 1 AND 999), PRIMARY KEY(prefix,local_date,sequence_group)
+);
+CREATE TABLE public_display_id_aliases (
+ entity_type VARCHAR(64) NOT NULL, entity_id VARCHAR(36) NOT NULL, old_display_id VARCHAR(64) NOT NULL,
+ new_display_id VARCHAR(13), PRIMARY KEY(entity_type,entity_id,old_display_id)
+);
+ALTER TABLE activities ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE review_tasks ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE reports ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE matchmaker_services ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE matchmaker_recommendations ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE matchmaker_contact_authorizations ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE matchmaker_assignments ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE matchmaker_followups ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE service_appointments ADD COLUMN IF NOT EXISTS display_id VARCHAR(13);
+ALTER TABLE service_appointments ADD COLUMN IF NOT EXISTS referral_display_id VARCHAR(13);
+ALTER TABLE activity_registrations ADD COLUMN IF NOT EXISTS referral_display_id VARCHAR(13);
+ALTER TABLE matchmaker_followups ADD COLUMN IF NOT EXISTS referral_display_id VARCHAR(13);
+CREATE VIEW public_display_ids AS
+SELECT CAST(id AS VARCHAR) id, display_number display_id, 'users' entity_type, CAST(NULL AS VARCHAR) referral_display_id FROM users
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'operators', CAST(NULL AS VARCHAR) FROM operators
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'activities', CAST(NULL AS VARCHAR) FROM activities
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'review_tasks', CAST(NULL AS VARCHAR) FROM review_tasks
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'reports', CAST(NULL AS VARCHAR) FROM reports
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'matchmaker_services', CAST(NULL AS VARCHAR) FROM matchmaker_services
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'matchmaker_recommendations', CAST(NULL AS VARCHAR) FROM matchmaker_recommendations
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'matchmaker_contact_authorizations', CAST(NULL AS VARCHAR) FROM matchmaker_contact_authorizations
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'matchmaker_assignments', CAST(NULL AS VARCHAR) FROM matchmaker_assignments
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'matchmaker_followups', referral_display_id FROM matchmaker_followups
+UNION ALL SELECT CAST(id AS VARCHAR), display_id, 'service_appointments', referral_display_id FROM service_appointments
+UNION ALL SELECT CAST(id AS VARCHAR), referral_display_id, 'activity_registrations', referral_display_id FROM activity_registrations WHERE referral_display_id IS NOT NULL;
diff --git a/docs/BACKUP-RESTORE-DRILL-2026-10-15.md b/docs/BACKUP-RESTORE-DRILL-2026-10-15.md
new file mode 100644
index 0000000..00292d5
--- /dev/null
+++ b/docs/BACKUP-RESTORE-DRILL-2026-10-15.md
@@ -0,0 +1,30 @@
+# 备份恢复演练记录（2026-10-15）
+
+## 结论
+
+**PASS**：PostgreSQL 与对象存储均完成加密备份、隔离恢复和内容校验；演练未覆盖或替换当前演示数据。
+
+## PostgreSQL
+
+- 加密备份：`.mimosa/drill-20261015-093404.dump.aes`
+- 校验日志：`.mimosa/backup-restore-drill-20261015-093404.log`
+- 恢复目标：临时数据库 `danyang_restore_drill`
+- 恢复后公共表：66 张
+- 恢复后 `users`：744 条
+- 恢复后 Flyway：V060
+
+## 对象存储
+
+- 加密归档：`.mimosa/drill-20261015-093404-objects.tar.aes`
+- 恢复目标：临时 Docker volume `danyang_restore_objects`
+- 恢复后文件数：102 个
+
+## 清理与存活性
+
+- 临时数据库、恢复卷、解密明文和临时脚本已删除。
+- 当前演示栈健康检查：`GET /api/v1/health/live` 返回 200。
+- PostgreSQL、Redis、SeaweedFS、Backend 均保持 healthy。
+
+## 限制
+
+本次是在同一台 Windows 主机的 Docker 环境中进行隔离恢复，尚未验证异机、异地域或对象存储远端灾备恢复。
diff --git a/docs/DEMO-VALIDATION-2026-10-13.md b/docs/DEMO-VALIDATION-2026-10-13.md
new file mode 100644
index 0000000..e10ef36
--- /dev/null
+++ b/docs/DEMO-VALIDATION-2026-10-13.md
@@ -0,0 +1,84 @@
+# Demo 增量验收记录（2026-10-13）
+
+## 本轮：红娘跟进写入与回读
+
+- 服务用户：秀英，展示编号 `YH2026051502`。
+- 操作员：现有演示红娘 `wanghongniang`，展示编号 `HN2026100901`。
+- 提交：通过现有 `/operator/matchmaker/services/{id}/followup` 接口添加一条 `followup` 类型记录。
+- 内容：Demo闭环验收（2026-10-13）：已核对服务需求，等待用户确认后继续公益服务。
+- 使用独立登录会话重新读取服务详情，得到同一条跟进记录。
+- PostgreSQL 联表查询确认该记录属于上述用户，匹配记录数为 1。
+- 创建时间：2026-10-13 19:06:41（北京时间）。
+- 写入前后服务状态均为 `waiting_user`，未执行用户确认或完成服务。
+- Web 与红娘小程序均使用相同的详情和跟进接口；本轮通过 HTTP 执行，未自动操作浏览器或微信开发者工具。
+
+结论：跟进接口写入、独立会话回读及数据库持久化 PASS；双端页面刷新目视显示 NOT_VERIFIED。完整新分配、用户确认、完成及统计回写仍待逐条验收。
+
+## 工作台统计口径（已修正）
+
+- 顶部“今日服务”和“待处理”不再使用固定演示数字，统一读取当前权限范围内的红娘服务记录。
+- “今日服务”按北京时间对创建、分配、完成或最新跟进时间去重；“待处理”包含 `submitted/assigned/in_service/waiting_user`。
+- “待审核资料”读取审核统计接口的 `pending + processing`，审核完成后从队列和工作台同步减少。
+
+## 本轮：用户确认服务（进行中）
+
+- 秀英为预置演示 OpenID；当前 Mock 登录随机分配 OpenID，不能据此取得该用户已有会话。本轮没有伪造用户令牌或更改账号归属。
+- 等待用户在秀英已有会话中点击“确认服务方案”，后续再验证 `waiting_user → in_service` 和红娘个人进行中统计。
+- 检查发现用户进展页调用不存在的单条 GET 接口，导致加载和确认后刷新失败；已改为从现有本人服务列表定位指定服务。
+- 新增 `tests/miniapp/matchmaker_progress_behavior_test.cjs`：修复前失败，修复后通过，验证指定服务定位、确认后刷新和不存在服务返回空状态。
+- 既有确认契约测试 2 项通过；修改文件 `git diff --check` 通过。
+- 本轮末次数据库读取仍为 `waiting_user`，未执行完成服务。本机真实微信编译与目视验收待用户执行。
+
+## 工作台差距修复与运行验收（2026-10-13 20:15）
+
+- 根因：待审核卡片误读本地资格统计；缓存工作台只在挂载时加载；管理员没有查看其他红娘服务跟进的管理入口。
+- 修复：读取资料审核队列统计；返回工作台时重新加载；新增“最新红娘跟进记录”及“红娘服务 → 服务进展与跟进”只读入口，详情读取受权限和组织范围控制的管理接口，记录审计。
+- 浏览器使用现有管理员登录，实际工作台显示待审核资料 0、红娘服务待办 3、红娘服务完成 2；顶部数据源显示今日服务 2、待处理 3。近期跟进中已显示秀英 `YH2026051502` 的 Demo 验收内容。
+- 页面程序触发查看服务，正确进入秀英详情，显示同一条跟进内容与 19:06:41 时间；返回工作台正常，无浏览器运行异常。小屏顶部统计仍遵循既有响应式隐藏规则。
+- 实际 HTTP：管理员管理列表与详情成功；审核统计 `pending=0, processing=0`；无管理权限的演示审核员访问管理列表返回 403。`demo_wanghongniang` 现有账号带 `matchmaker.assign`，不作为拒绝访问样本，也未修改其既有授权。
+- 后端完整测试：907 项，失败 0、错误 0、跳过 3。新增测试覆盖管理跟进回读与审计、同组织限制、普通红娘拒绝，以及 claim/approve 后待审核数量减一。
+- 前端类型检查及构建通过，工作台行为测试和数据契约通过；全 UI 契约 20/24，4 个失败涉及既有管理端设计令牌、小程序语言、综合 UI 与旧 Nginx 断言，本轮未扩大范围修改。
+- 部署发现历史数据库容器所在网络缺少短服务名别名；Compose 后端连接地址改用现有容器名，重新创建后端后健康、登录与接口正常。没有重建数据库或清理数据；管理端与 Nginx 正常运行。
+- 本次修复结论 PASS；实际演示库当前已没有待审记录，未为验证而制造新的审核申请。审核完成后减一由事务测试及前端行为测试验证。
+- 秀英仍处于 `waiting_user`，用户本人确认、后续完成及其他转介/授权闭环仍未完成，不能据本轮工作台修复声明整阶段完成。
+
+## 开发者工具用户登录修复（2026-10-14）
+
+- 根因：Mock 微信 Provider 按每次 `wx.login` code 随机生成 OpenID，无法命中秀英预置用户 `demo_openid_f06`。
+- 修复：增加 `WECHAT_MOCK_OPENID` 配置；本地 Docker 演示默认固定为 `demo_openid_f06`，真实微信 Provider 不受影响。
+- 实际 HTTP 验证：使用新的登录 code 调用微信登录接口返回用户 `bc5ca4a9-08b5-413c-8d80-3afc76fbeb97`，展示编号 `YH2026051502`；后端容器健康，健康检查 PASS。
+- Provider 单元测试 PASS；未伪造微信真机 code，开发者工具需重新编译并清除旧登录缓存后点击登录。
+
+## 用户端公益红娘服务列表修复（2026-10-14）
+
+- 根因：`GET /matchmaker/services` 的 C 端响应是数组，小程序 `matchmakerStore` 仅读取分页格式的 `result.items`，导致有效服务被渲染为空状态。
+- 修复：Store 同时兼容数组和分页响应；当前秀英登录后实际接口返回服务 `f0297c00-59cb-4f3e-ae86-c31fb4e55e6a`，状态 `waiting_user`。
+- 验证：服务进度行为测试通过，相关小程序契约测试 5 项通过；开发者工具重新编译后，“公益红娘 → 申请状态”应显示服务卡片并可进入“确认服务方案”。
+
+## 用户端服务卡片跳转修复（2026-10-14）
+
+- 根因：服务接口实体字段为 `id/description`，卡片事件使用 `serviceId/requirement`；页面因此能显示卡片但点击时携带空服务 ID。
+- 修复：在 `matchmakerStore` 统一映射 `id → serviceId`、`description → requirement`，数组和分页响应均经过同一转换。
+- 验证：服务进度行为测试通过，相关小程序契约测试 6 项通过，`git diff --check` 通过。
+- 控制台中的 `/operator/matchmaker/*` 401 是开发者工具残留工作人员会话，不是用户服务接口错误；清除开发者工具缓存后重新登录用户端即可消除该噪声。
+
+## 用户确认回写验证（2026-10-14）
+
+- 用户端确认服务方案后，服务 `f0297c00-59cb-4f3e-ae86-c31fb4e55e6a` 已从 `waiting_user` 更新为 `in_service`。
+- 管理端管理服务接口同步显示 `YH2026051502 / in_service`，原有跟进记录仍可读取。
+- 审核统计仍为 `pending=0, processing=0`，后端容器健康。
+- 用户确认步骤 PASS；服务完成、完成统计回写仍待管理端执行“完成服务”后验证。
+
+## 管理端完成服务回写验证（2026-10-14）
+
+- 管理端执行完成后，秀英服务已从 `in_service` 更新为 `completed`。
+- 完成时间：2026-10-14 09:55:13（北京时间）。
+- 管理端与用户端接口均返回 `completed`；当前管理范围服务状态为已完成 3 单、未完成 2 单。
+- 后端容器健康，完成服务回写 PASS；用户端历史服务页面目视验收仍需在开发者工具中刷新确认。
+
+## 完成后工作台同步复验（2026-10-14）
+
+- 管理端浏览器实际显示“红娘服务待办 2”，由完成前的 3 减少 1。
+- “服务数据概览 → 红娘服务完成”实际显示 3，完成前为 2，增加 1。
+- “今日待办事项”实际由 93 降为 92；秀英用户端服务列表实际返回 `completed`。
+- 工作台统计同步 PASS；管理端个人 `/operator/matchmaker/dashboard` 对管理员返回个人范围 0 属既有接口语义，管理员工作台使用管理服务列表统计，不作为异常。
diff --git a/docs/Phase-matchmaker-dual-client-Completion-Report-2026-10-12.md b/docs/Phase-matchmaker-dual-client-Completion-Report-2026-10-12.md
new file mode 100644
index 0000000..f982bb4
--- /dev/null
+++ b/docs/Phase-matchmaker-dual-client-Completion-Report-2026-10-12.md
@@ -0,0 +1,205 @@
+# 红娘双端最小联动闭环阶段报告
+
+日期：2026-10-12
+阶段：第一阶段最小联动闭环
+结论：PARTIAL
+
+## Docker 验证（2026-10-12）
+
+- 使用已有 Compose 项目 `danyang` 启动，复用了原有 PostgreSQL、Redis、SeaweedFS 数据卷；未删除旧容器或数据。
+- `danyang-match-backend`：healthy，`GET http://localhost:8085/api/v1/health/live` 返回 `success=true`、`status=UP`。
+- Flyway：成功校验 57 个迁移，数据库版本为 `057`，无待执行迁移。
+- `danyang-match-nginx`：healthy，`GET http://localhost:6688/nginx-health` 返回 HTTP 200。
+- 管理端和后端镜像均重新构建成功。
+
+## 本次完成
+
+- 固化 Web 与小程序端整合设计：`docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md`。
+- 固化实施计划：`docs/superpowers/plans/2026-10-12-matchmaker-dual-client-integration.md`。
+- 注册并实现红娘小程序服务对象详情页。
+- 支持查看授权范围内的服务对象摘要、服务状态和服务历史。
+- 支持新增红娘服务跟进记录，提交时使用现有请求层幂等键。
+- 修正红娘工作台对小程序统一请求层返回值的读取方式，使工作台统计、分配和联系授权数据可以正确装载。
+- Web 红娘管理页增加服务详情和跟进摘要查看入口。
+- 后端已有详情、跟进端点和 `ServiceAssignmentPolicy` 已核对，无需重复新增接口。
+
+## 修改文件
+
+- `docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md`
+- `docs/superpowers/plans/2026-10-12-matchmaker-dual-client-integration.md`
+- `docs/Phase-matchmaker-dual-client-Completion-Report-2026-10-12.md`
+- `miniapp/app.json`
+- `miniapp/pages/matchmaker-workbench/matchmaker-workbench.js`
+- `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js`
+- `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml`
+- `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxss`
+- `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.json`
+- `admin-web/src/modules/matchmaker/MatchmakerManagementView.vue`
+
+## 验证结果
+
+| 检查项 | 结果 |
+|---|---|
+| 小程序 JavaScript 语法 | PASS |
+| 小程序 TypeScript 类型检查 | PASS |
+| 小程序页面注册和敏感字段守卫 | PASS |
+| 管理端 Vite 构建 | PASS |
+| `git diff --check` | PASS |
+| 后端红娘自动化测试 | NOT_VERIFIED：当前 Windows 环境未提供可用 Maven，仓库 `mvnw` 为 Unix 脚本 |
+| 微信开发者工具 WXML/WXSS 真机/编译验收 | NOT_VERIFIED |
+| Web 与后端真实环境联调 | NOT_VERIFIED |
+
+Docker 测试复核：
+
+- 核心红娘行为测试组（动作禁止、联系方式禁用、权限守卫、字段隐私等）执行成功，退出码 0。
+- 扩展组合测试执行 55 项，其中 6 项出现错误、0 项失败；错误集中于既有 H2 测试夹具的 UUID 类型约束：测试使用 `op-mm-other` 查询 `audit_logs.operator_id`，导致审计断言查询发生数据类型转换错误。该结果不证明完整测试通过，也未将其归因于本次双端改动。
+
+## 当前剩余风险
+
+1. 尚未使用真实账号在 Web 和小程序执行分配、查看、服务记录、撤销和越权完整链路；当前完成的是服务启动和自动化测试验证。
+2. 小程序页面中的服务类型显示目前沿用后端值，后续应统一中文状态字典，但不影响第一阶段数据联动。
+3. 当前采用页面显示和写操作后的重新拉取，实时 WebSocket 通知属于下一阶段。
+4. 联系授权审批岗位、授权期限和用户确认细节仍按安全默认行为保持开放，未新增联系方式权限。
+
+## 第二阶段增量（服务转介回应）
+
+本轮按用户授权进入下一阶段，选择依赖最少的“服务转介回应”子阶段：红娘在运营端发起转介后，普通用户在小程序查看本人转介记录，并由本人确认。后端继续复用既有 `GET /referrals/my-history` 与 `POST /referrals/{id}/confirm`，没有新增数据表或凭据配置。
+
+### 本轮完成
+
+- 新增小程序页面 `pages/referral-confirmation/`，展示服务站/公益活动转介、待确认与已确认状态。
+- 确认操作仅调用用户身份接口，复用既有幂等键；成功后重新拉取服务端状态。
+- 在善缘公益服务页增加“待确认服务”入口，并注册统一路由常量。
+- 页面不提供红娘代确认、拒绝（后端尚无拒绝契约）或联系方式展示。
+
+### 本轮验证
+
+| 检查项 | 结果 |
+|---|---|
+| 转介页面契约测试（2项） | PASS |
+| 新增 JavaScript 语法检查 | PASS |
+| 小程序 JSON 解析 | PASS |
+| 小程序 TypeScript 类型检查 | PASS |
+| 管理端 Vite 构建 | PASS（存在既有 CSS URL 警告） |
+| `git diff --check` | PASS |
+| 微信凭据服务端最小检查 | PASS；未保存令牌 |
+| 微信开发者工具 WXML/WXSS/真实 `wx.login` | NOT_VERIFIED；当前工具环境无开发者工具/真机能力 |
+
+### 第二阶段状态
+
+结论：`PARTIAL`。代码契约与构建检查通过；真实小程序编译、登录及跨端真实账号联调仍待在微信开发者工具或真机完成。后端当前没有“拒绝转介”接口，本轮未在前端伪造该能力。
+
+## 真机反馈修复（红娘端入口）
+
+真机验收发现首屏只能进入用户端。根因是红娘页面虽已注册，但没有用户可达入口，且冷启动未识别 `operatorToken`，会被用户端 bootstrap 的登录跳转覆盖。
+
+本次修复：
+
+- 用户登录页增加“红娘工作人员入口”，进入独立账号密码登录页。
+- 用户“我的”页增加同一入口；已有工作人员会话直接进入工作台。
+- `App.onLaunch` 增加工作人员会话/红娘深链分流，避免用户端登录态覆盖。
+- 新增入口契约与启动分流测试。
+
+修复验证：入口契约 PASS、启动分流 PASS、TypeScript 类型检查 PASS、`git diff --check` PASS。请在微信开发者工具重新编译并从“红娘工作人员入口”验证登录及工作台页面。
+
+## 红娘登录 401 修复（2026-10-12）
+
+真机控制台显示请求 `POST /api/v1/operator/auth/login` 返回 401。核对后端 `OperatorAuthController` 后确认正式端点为 `POST /api/v1/auth/operator/login`；错误路径会先被安全链拦截，因此不会进入账号密码校验。
+
+- 已将小程序红娘登录请求改为 `${API_BASE_URL}/auth/operator/login`。
+- 新增登录端点契约测试，锁定前端路径与后端控制器一致。
+- 复验结果：登录契约 PASS、入口/启动测试 PASS、后端真实登录检查 PASS、语法检查 PASS。
+
+## 候选建议增量（第二阶段继续）
+
+- 红娘工作台的“查看推荐”改为进入专用用户推荐页，不再误跳普通缘分页。
+- 新增用户端红娘推荐页：读取本人推荐、标记已读、由用户本人执行 Like/Pass。
+- 兼容后端当前直接返回数组的推荐响应，避免前端按分页对象读取导致列表为空。
+- Like/Pass 继续复用用户 `matchStore`，红娘端没有代操作入口。
+
+验证：候选建议契约测试 3 项 PASS；新增页面 JavaScript 语法 PASS；小程序 TypeScript 检查 PASS；登录、转介和候选建议相关契约测试全部 PASS；`git diff --check` PASS。
+
+本增量仍需在微信开发者工具/真机用真实用户账号验证推荐数据、详情、Like/Pass 和 Mutual 跳转。
+
+## 受控联系审批队列修复（2026-10-13）
+
+开发者工具验收后继续复核发现，管理端“联系授权审批”误读红娘本人 `/my` 列表，审批人只能看到自己发起的申请。现已增加独立的 `GET /operator/matchmaker/contact-authorizations/pending`：平台管理员查看全量待审批申请，红娘组长仅查看同组织申请；申请人仍使用 `/my`。
+
+验证：Docker 后端重新编译并健康启动；真实接口创建演示待审批申请后，`/pending` 返回 `pending_approval` 且包含该申请；管理端 `pnpm run type-check`、`pnpm run build` 通过；小程序 11 项契约测试通过。
+
+## 下一阶段
+
+在修复或隔离 H2 审计夹具问题并完成真实账号联调后，再实施服务申请回应、候选建议、活动任务、风险转介和未读通知。当前不将本阶段标记为 PASS，也不自动进入下一阶段。
+
+## 下一阶段增量：用户确认服务方案（2026-10-12）
+
+按产品确认口径，本轮仅增加“用户确认后恢复服务中”：用户本人对 `waiting_user` 服务单确认后，状态变更为 `in_service`；不新增拒绝、撤回或红娘代确认。
+
+### 修改
+
+- 新增用户端 `POST /api/v1/matchmaker/services/{id}/confirm`，只接受当前用户且仅更新 `waiting_user` 状态。
+- 新增 `matchmakerService.confirmService` 及服务进度页确认按钮；成功后重新读取服务端状态，提交期间加锁。
+- 新增小程序契约测试，覆盖路由、状态迁移和用户端入口限制。
+
+### 验证
+
+| 检查项 | 结果 |
+|---|---|
+| 小程序契约回归（候选建议、转介、服务确认） | PASS，7 项 |
+| JavaScript 语法检查 | PASS |
+| 管理端 Vite 构建 | PASS（保留既有 CSS URL 与 chunk 大小警告） |
+| Docker 后端重建、强制重建部署 | PASS，backend healthy |
+| 真实 HTTP：本人 `waiting_user → in_service` | PASS |
+| 真实 HTTP：非本人确认 | PASS，返回 CONFLICT，状态未被改变 |
+| 微信开发者工具/真机页面编译 | NOT_VERIFIED |
+
+本轮仍使用模拟微信登录和演示数据；Mock Provider 重启后会重置 code 到用户的内存映射，验收时必须使用同一容器生命周期内的登录会话。
+
+## 下一阶段增量：红娘工作台活动/服务站转介任务展示（2026-10-12）
+
+按“活动任务/转介闭环”最小增量，红娘小程序工作台复用既有 `GET /api/v1/referrals/operator/history`，展示本人发起的公益活动或服务站转介、用户确认状态和时间。该页面只读，不提供红娘代报名、代确认或敏感联系方式；无数据时保持空状态。
+
+### 修改
+
+- 工作台并行读取本人转介历史，并将类型与确认状态转换为中文展示。
+- 分配对象无关联服务单时显示对象摘要和联系组长提示，避免点击无效跳转。
+- 保持后端 PostgreSQL 转介记录为事实来源，不新增表和演示数据。
+
+### 验证
+
+| 检查项 | 结果 |
+|---|---|
+| 小程序契约回归（全量 `tests/miniapp`） | PASS，11 项 |
+| 小程序 JavaScript 语法检查 | PASS，114 个文件 |
+| 管理端 Vite 构建 | PASS（存在既有 CSS URL 与 chunk 大小警告） |
+| `git diff --check` | PASS（仅 Windows 换行提示） |
+| Docker 演示红娘登录 | PASS，`demo_wanghongniang / demo123` |
+| `GET /referrals/operator/history` | PASS，当前模拟数据为空数组 |
+| `GET /operator/matchmaker/assignments/my` | PASS，返回 2 条本人有效分配对象 |
+| `GET /operator/matchmaker/dashboard` | PASS |
+| 微信开发者工具/真机 WXML、WXSS 和页面联动 | NOT_VERIFIED |
+
+### 本阶段状态
+
+结论：`PARTIAL`。红娘端已具备活动/服务站转介结果的读取和展示契约，Docker 接口正常；当前演示库无转介记录，且微信开发者工具/真机验收仍需在用户侧完成。下一步可在有真实转介记录后复验工作台展示，再进入未读通知或服务申请回应等后续范围。
+
+## 开发者工具人工验收补充（2026-10-13）
+
+用户已在微信开发者工具完成红娘端登录及页面联动验收，反馈“暂无问题”。本次验收覆盖红娘入口、账号密码登录、工作台、服务对象详情、服务记录和转介任务展示。
+
+| 检查项 | 结果 |
+|---|---|
+| 微信开发者工具红娘端登录 | PASS |
+| 红娘工作台进入与数据展示 | PASS |
+| 服务对象详情与服务记录 | PASS |
+| 活动/服务站转介任务展示 | PASS |
+
+据此，前述“微信开发者工具/真机页面联动”风险项已关闭为 `PASS`；真实生产账号、真实 PostgreSQL 数据和真机网络环境仍不等同于本次开发者工具验收。
+
+## 候选建议进展增量（2026-10-13）
+
+- 红娘工作台新增“推荐进展”只读区，读取 `/operator/matchmaker/recommendations`。
+- 展示候选建议状态和推荐理由；红娘端不提供 Like/Pass，用户决定权保持在用户端。
+- 小程序全量契约测试、启动分流测试、工作台 JavaScript 语法检查和 `git diff --check` 均通过。
+
+本增量待用户在微信开发者工具确认推荐进展区的显示效果；确认后再进入下一项业务。
diff --git a/docs/STATUS.md b/docs/STATUS.md
index 8c3b1e0..301888d 100644
--- a/docs/STATUS.md
+++ b/docs/STATUS.md
@@ -791,3 +791,111 @@ OpenAPI 对外发布、调用审计与配额、分页幂等覆盖、脱敏边界
 - Phase 24: UAT — 需真实用户参与并确认启动
 - Phase 25: RC 内容检查 — 需运营团队填充真实内容
 - Phase 26: Production Smoke Tests — 13 项手动验证
+
+### 2026-10-14：13 位公开编号统一前置盘点
+
+- 用户确认择偶条件“下一步”在微信开发者工具重新编译后目视复验通过。
+- 全平台编号 Task 1：覆盖清单与静态检查工具已新增；7 项工具自检 PASS，114 个模板发现 31 个待审查位置，展示门禁仍 FAIL（尚未实施字段与页面修复）。
+- 预约编号前缀 YY 尚待确认；转介存在预约/报名及非持久化 record 两条路径，后续需逐一覆盖。当前未修改数据库或重启服务。
+### 2026-10-14 全平台公开编号验收补充
+
+- V060 已在演示 PostgreSQL 成功执行，Flyway 当前版本 060；迁移前备份保留在 `.mimosa/before-public-id-20261014.dump`。
+- 演示库检查：404 个用户中 12 个已实名用户有 YH 编号，12 个运营人员均有唯一 HN/GL 编号，活动编号全部生成；未实名用户按规则允许暂空。
+- 修复 `PublicIdMapper` 查询 `text = uuid` 类型错误，重建后端并通过登录、用户、运营人员、活动、红娘服务接口验证；匿名管理接口返回 401。
+- Web 类型检查、构建、小程序类型检查、公开编号静态守卫和小程序行为测试通过；浏览器 Playwright 因本机缺少 Chromium 未执行。
+
+### 2026-10-14 后端全量测试与仓库网络复验
+
+- 用户已确认微信真机验收通过；本次未重复人工真机操作。
+- 容器默认 DNS 出现 HTTPS 解析超时；仅为测试容器指定 `--dns 223.5.5.5 --dns 114.114.114.114` 后，使用现有 `backend/maven-settings.xml` 正常从阿里云下载依赖，未降低 TLS 校验、未修改系统或 Docker 全局网络设置。
+- 首次仅挂载 backend，导致 Surefire 的 `${project.basedir}/..` 工作目录缺少仓库源码。修正为挂载整个仓库后重新执行完整套件；首次失败结果不作为有效验收结果。
+- 最新命令（PowerShell）：
+
+```powershell
+docker run --rm --dns 223.5.5.5 --dns 114.114.114.114 `
+  -v 'E:\develop\公益婚恋服务平台:/workspace' `
+  -v 'E:\develop\公益婚恋服务平台\backend\maven-settings.xml:/tmp/settings.xml:ro' `
+  -w /workspace/backend maven:3.9-eclipse-temurin-21 `
+  mvn -s /tmp/settings.xml -B test
+```
+
+- 结果：`BUILD SUCCESS`，退出码 0；916 项测试，失败 0、错误 0、跳过 3，即实际执行 913 项。Surefire XML 汇总与 Maven 日志一致。
+- 证据：`.mimosa/public-id-full-mvn-test.log`、`backend/target/surefire-reports/TEST-*.xml`。
+- 跳过：`ConcurrentTests.testSimultaneousLikeRaceCondition`、`testActivityCapacityRace`（CI 条件未启用）；`CoreE2ETest.fullFlowRegistrationToSuccess`（既有 @Disabled）。前两项仅模拟线程/计数，后一项为占位断言，因此不能据此声称真实数据库并发或完整注册到牵手 E2E 已验证。
+- 注意：通过的套件中仍有通知夹具 `u-notif-guard` 的 H2 数据转换告警；本轮不改变业务代码或已有测试断言。测试成功不等于所有异步通知均成功，也不代表生产验收完成。
+
+### 2026-10-14 前端全量校验补充
+
+- 管理端 `pnpm type-check`：通过。
+- 管理端 `pnpm build`：通过；Vite 仍提示 `url(var(--v...))` 的 CSS 压缩警告和大 chunk 提示，不影响构建退出码。
+- 小程序 `npm run type-check`（在 `miniapp` 目录执行）：通过。
+- 小程序 WXML/WXSS 真编译预检：90 个 WXML、92 个 WXSS，失败 0。
+- UI 契约门禁：24/24 通过。
+- 本轮修正了 1 个用户可见英文占位符（改为中文日期示例），同步更新了新增红娘页面后的 67 页断言、品牌名称断言和变量化 nginx 代理断言；管理端顶部装饰样式补齐设计 token 与最小字号。
+
+### 2026-10-15 Task 3：通知测试夹具告警治理
+
+- 修复 `NotificationTemplateTypeGuardTest` 与 `NotificationPhase11IntegrationTest` 的测试用户夹具：由非 UUID 字符串改为合法 UUID，与生产 `users.id` 类型保持一致。
+- 仅修改测试夹具，未修改生产通知逻辑、数据库结构或接口契约。
+- 通知专项测试：`NotificationTemplateTypeGuardTest` 共 2 项，失败 0、错误 0，`BUILD SUCCESS`。
+- 后端全量回归：916 项，失败 0、错误 0、跳过 3（实际执行 913 项），`BUILD SUCCESS`。
+- 对最新全量日志扫描，未再出现 `Data conversion error converting`、`u-notif-*` 或 `Async notification failed` 告警。
+- 证据：`.mimosa/notification-fixture-full-mvn-test.log`、`backend/target/surefire-reports/TEST-*.xml`。
+
+### 2026-10-15 Task 1：真实 PostgreSQL 并发验证（部分完成）
+
+- 已启动并复用现有 `danyang-match-postgres` 容器，未删除或重置数据。
+- 执行 `node tests/public-id-postgres.cjs`，真实 PostgreSQL 完成 20 路并发公开编号分配、男女奇偶序号、999 边界、非法参数和事务回滚校验，输出 `PASS`。
+- 证据：`.mimosa/postgres-concurrency-test.log`。
+- 当前 `backend/src/test/java/com/danyang/match/platform/concurrent.ConcurrentTests.java` 仍是内存计数模拟，且 Like/活动容量两个用例依赖 `CI=true` 才运行；本轮未将其伪装成真实 PostgreSQL 证据，故 Task 1 的 Like/活动容量门禁仍为 `NOT_VERIFIED`。
+- 下一步需建立隔离 PostgreSQL 测试数据并把这两个用例接入真实 Service/Mapper 后再执行，不修改演示数据。
+
+### 2026-10-15 发布准备 Task 1：基线与环境确认
+
+- 完整演示栈已恢复运行：PostgreSQL、Redis、SeaweedFS、Backend、Admin Web、Nginx 均为 healthy。
+- 健康检查：`GET http://localhost:8085/api/v1/health/live` 返回 200；`GET http://localhost:6688/api/v1/health/live` 返回 200；`GET http://localhost:6688/admin/` 返回 200。
+- Flyway 当前版本：V060。
+- 演示数据库已备份：`.mimosa/release-baseline-20261015-083145.dump`。
+- Compose 配置解析通过；环境变量仅检查键名，未写入敏感值。
+- 当前工作区存在大量既有未提交改动，本次未清理、回滚或覆盖。
+- 公开编号 Web 实时脚本因要求通过环境变量注入演示账号密码而停止，未写入账号或 Token。
+
+### 2026-10-15 发布准备执行补充
+
+- `CI=true mvn -Dtest=ConcurrentTests test`：7/7 通过，但用例仍为 AtomicInteger/常量模拟，不能作为真实 PostgreSQL Like/活动容量证据。
+- 小程序 WXML/WXSS 编译预检：92 个 WXSS、90 个 WXML，失败 0。
+- 管理端工作台行为契约：通过，覆盖审核计数回写、红娘待办和跟进刷新。
+- `public-id-web-live.cjs` 尚未执行：脚本要求通过环境变量提供演示运营账号密码；本轮未写入或猜测凭据。
+
+### 2026-10-15 发布准备 Edge 冒烟
+
+- 使用当前进程环境变量注入演示账号执行 `tests/public-id-web-live.cjs`，未写入账号密码或 Token。
+- Edge 启动正常，但登录未通过：后端查询 `operators.username = user` 返回 0 条，页面停留在登录页，未进入工作台。
+- 当前数据库存在的运营用户名已核对，但未输出密码；本轮未擅自创建账号或修改现有账号密码。
+- 发布门禁：Edge 管理端全流程 `NOT_VERIFIED`，需要提供当前数据库有效运营账号，或明确授权创建/重置演示账号。
+- 证据日志：`.mimosa/release-smoke-20261015.log`。
+
+### 2026-10-15 发布准备 Edge 实时验收
+
+- 使用当前进程环境变量注入运营账号 `admin`，执行 `tests/public-id-web-live.cjs`，凭据未写入文件或日志。
+- 结果：PASS；10 类真实接口均返回 200，检查 55 个公开编号字段，10 个页面/区域通过，匿名访问返回 401，页面运行错误 0。
+- 截图与结果：`.mimosa/public-id-page-evidence/`，包括红娘服务和联系授权审批 1366/1920 视图。
+- 管理端 Edge 实时发布冒烟门禁：PASS。
+- 完整 E2E 尚未执行：现有 pytest fixture 要求 `e2e_admin` 账号密码，当前仅确认 `admin` 账号可用。
+
+### 2026-10-15 发布准备活栈 E2E
+
+- 已授权将 `admin` 纳入本机 E2E：`tests/e2e/conftest.py` 新增 `E2E_OPERATOR_USERNAME` 环境变量，默认仍为 `e2e_admin`，不影响 CI seed 账号。
+- 在隔离 Python 测试容器执行活栈 E2E，使用 `admin` + 当前授权密码。
+- 结果：43 passed，21 failed，8 errors。失败/错误主要来自 `e2e_station`、`e2e_counselor`、`e2e_matchmaker`、`e2e_content` 角色账号密码不匹配；连续错误登录触发部分账号临时锁定。
+- 该结果不能作为完整 E2E 通过证据，也不能直接归因于业务代码；需要各角色测试账号的有效密码或一次性测试账号初始化方案。
+- 证据：`.mimosa/core-e2e-postgres-test.log`。
+
+### 2026-10-15 E2E 测试账号初始化与镜像重建
+
+- 已备份演示数据库：`.mimosa/before-e2e-password-reset-20261015-085035.dump`。
+- 已按授权为 6 个 E2E 角色账号设置统一初始密码：`E2e@Danyang2026!`；未修改角色和权限。账号：`e2e_admin`、`e2e_platform`、`e2e_counselor`、`e2e_station`、`e2e_matchmaker`、`e2e_content`。
+- `tests/e2e/conftest.py` 支持 `E2E_OPERATOR_USERNAME` 与 `E2E_ADMIN_PASSWORD`，CI 默认账号不变，本机可使用 `admin`。
+- 后端镜像已按当前源码重建成功；健康检查通过，未认证通知接口返回 401。
+- 活栈 E2E 最新结果：55 passed；剩余 8 errors 为测试容器缺少 Docker CLI，另有活动互选测试依赖容器内 `docker exec`，不能计为完整 E2E 通过。
+- 证据：`.mimosa/core-e2e-postgres-test.log`。
diff --git a/docs/superpowers/plans/2026-10-12-matchmaker-dual-client-integration.md b/docs/superpowers/plans/2026-10-12-matchmaker-dual-client-integration.md
new file mode 100644
index 0000000..b7629ae
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-matchmaker-dual-client-integration.md
@@ -0,0 +1,105 @@
+# 红娘双端最小联动闭环实施计划
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 打通红娘 Web 分配、小程序服务对象详情与服务记录、Web 查看结果的第一阶段闭环。
+
+**Architecture:** 复用现有 Spring Boot 红娘模块、Vue 管理端和微信小程序原生页面。以 `matchmaker_assignments` 作为数据范围事实来源，以服务端 API 作为状态事实来源，前端只负责展示和提交操作。
+
+**Tech Stack:** Java 21、Spring Boot 3.x、PostgreSQL、MyBatis-Plus、Vue 3、TypeScript、微信小程序原生 JavaScript/WXML/WXSS。
+
+**Spec:** `docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md`
+
+## Global Constraints
+
+- 普通红娘只能访问本人有效分配对象。
+- 红娘不能代替用户 Like、Pass、接受活动意向或确认开启聊天。
+- PostgreSQL 是 Source of Truth，前端缓存不能覆盖服务端状态。
+- 联系方式默认拒绝，未完成授权不得返回完整手机号、微信号和详细地址。
+- 不增加依赖，不新建微服务，不改动无关领域。
+- 所有新增业务逻辑先写失败测试，再写最小实现。
+
+### Task 1: 固化端点和数据范围测试
+
+**Files:**
+- Modify: `backend/src/test/java/com/danyang/match/platform/matchmaker/*` 现有红娘测试
+- Create: `backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerServiceDetailScopeTest.java`
+- Create: `backend/src/test/java/com/danyang/match/platform/matchmaker/MatchmakerFollowupScopeTest.java`
+
+**Interfaces:**
+- Consumes: `ServiceAssignmentPolicy`、`MatchmakerServiceService`、现有 `MatchmakerAssignment` 测试夹具。
+- Produces: 可证明“本人有效分配允许、其他红娘/失效分配拒绝”的测试契约。
+
+- [ ] Step 1: 写测试：同一服务对象在有效分配给当前红娘时详情和跟进允许；换成其他红娘、撤销或过期时拒绝。
+- [ ] Step 2: 运行单测，确认因现有服务详情/跟进调用路径缺少或未覆盖断言而失败。
+- [ ] Step 3: 仅补齐服务层调用现有 `ServiceAssignmentPolicy` 的最小授权检查和统一错误映射。
+- [ ] Step 4: 重新运行新增测试及现有 `MatchmakerReferralPhase13Test`、`MatchmakerAssignmentPermissionTest`。
+- [ ] Step 5: 记录端点和数据范围结论到阶段报告。
+
+### Task 2: 补齐小程序服务对象详情页面
+
+**Files:**
+- Create: `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js`
+- Create: `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml`
+- Create: `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxss`
+- Create: `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.json`
+- Modify: `miniapp/app.json`
+- Modify: `miniapp/pages/matchmaker-workbench/matchmaker-workbench.js`
+
+**Interfaces:**
+- Consumes: `GET /operator/matchmaker/services/{id}`、`GET /operator/matchmaker/services/{id}/history`、`POST /operator/matchmaker/services/{id}/followup`。
+- Produces: 从工作台分配卡片进入详情、查看授权字段、查看历史和提交服务记录。
+
+- [ ] Step 1: 写页面契约测试或静态守卫，验证页面已注册、请求只使用服务 ID、没有联系方式和代操作按钮。
+- [ ] Step 2: 运行守卫确认当前页面目录缺失导致失败。
+- [ ] Step 3: 实现最小详情页：加载、空状态、失败、无权限、历史列表和记录表单。
+- [ ] Step 4: 记录提交成功后重新拉取详情和历史；失败保留表单输入；重复提交由提交锁阻止。
+- [ ] Step 5: 运行小程序现有页面守卫和 WXML/WXSS 编译检查。
+
+### Task 3: 统一 Web 服务详情和跟进查看
+
+**Files:**
+- Modify: `admin-web/src/modules/matchmaker/MatchmakerManagementView.vue`
+- Create or modify: `admin-web/src/api/*` only if现有 `get/post` 无法复用
+- Modify: `backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerOperatorController.java` only when Task 1 proves endpoint缺失
+
+**Interfaces:**
+- Consumes: Task 1 的详情、历史和范围契约。
+- Produces: Web 在本人授权范围内查看服务记录和最新服务状态。
+
+- [ ] Step 1: 写前端行为测试/契约守卫，验证列表点击详情时只传服务 ID，范围错误显示统一提示。
+- [ ] Step 2: 运行测试确认当前管理页没有服务详情和跟进查看入口。
+- [ ] Step 3: 增加最小抽屉或弹窗，显示服务状态、最近跟进和必要摘要。
+- [ ] Step 4: 分配、转交、撤销、结束后刷新当前 Tab，不保留旧对象状态。
+- [ ] Step 5: 运行 `admin-web` 类型检查和构建。
+
+### Task 4: 跨端刷新和权限失效处理
+
+**Files:**
+- Modify: `miniapp/pages/matchmaker-workbench/matchmaker-workbench.js`
+- Modify: `miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js`
+- Modify: `miniapp/utils/api.js`
+- Modify: `admin-web/src/api/client.ts` only if现有错误处理不能统一
+
+**Interfaces:**
+- Consumes: Task 1-3 的端点和错误契约。
+- Produces: 页面显示始终以最新服务端状态为准，权限失效时清理敏感缓存并返回工作台。
+
+- [ ] Step 1: 写请求层测试，验证 401/403/资源失效不会静默吞掉，并能被页面识别。
+- [ ] Step 2: 运行测试确认当前请求层行为不足。
+- [ ] Step 3: 增加最小的刷新、提交锁、权限失效跳转和非敏感缓存清理。
+- [ ] Step 4: 验证 Web 与小程序写操作后都重新读取服务端数据。
+- [ ] Step 5: 运行小程序请求层测试和 Web 构建。
+
+### Task 5: 第一阶段验收与文档
+
+**Files:**
+- Create: `docs/Phase-matchmaker-dual-client-Completion-Report-2026-10-12.md`
+- Modify: `docs/STATUS.md` only for已验证状态
+- Modify: `docs/governance/open-questions.md` only for未确认联系授权细节
+
+- [ ] Step 1: 运行后端红娘相关测试、前端构建和小程序静态/编译守卫。
+- [ ] Step 2: 以两个红娘账号和一个普通用户账号执行分配、查看、记录、撤销和越权场景。
+- [ ] Step 3: 将每项结果标记为 `PASS`、`PARTIAL`、`FAIL` 或 `NOT_VERIFIED`。
+- [ ] Step 4: 只有所有 P0 场景通过才将第一阶段标为 `PASS`，否则保留 `PARTIAL` 或 `FAIL`。
+- [ ] Step 5: 输出剩余风险和第二阶段依赖，不自动进入下一阶段。
diff --git a/docs/superpowers/plans/2026-10-13-demo-closeout-plan.md b/docs/superpowers/plans/2026-10-13-demo-closeout-plan.md
new file mode 100644
index 0000000..2541698
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-13-demo-closeout-plan.md
@@ -0,0 +1,75 @@
+# 爱在丹阳三端演示收口执行计划
+
+> 执行方式：在当前会话按 executing-plans 逐项执行，每项记录证据；阶段结束输出 Completion Report。
+
+**Goal:** 使用现有运营演示数据，确认管理端、红娘小程序与用户小程序形成可重复演示的业务闭环。
+
+**Architecture:** 沿用现有 Vue 管理端、原生微信小程序和 Spring Boot 模块化单体。三端共享后端与 PostgreSQL，以实际请求和落库结果验证联动。
+
+**Tech Stack:** Vue 3、TypeScript、Vite、微信小程序、Java 21、Spring Boot、PostgreSQL、Docker Compose。
+
+**Spec:** `docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md` 与用户最新品牌、编号和审批导航指令。
+
+## 执行边界
+
+- 优先使用运营管理端已有演示数据；不清库、不重新生成整库演示数据。
+- 最新品牌为“爱在丹阳”，标语为“爱在丹阳 原来是你”；保留已确认字体。
+- 联系授权审批归入“红娘服务”，不单独新增一级导航。
+- 展示编号按最新指令核对：12 位字母与数字，红娘示例 HN2026101301；不因展示编号要求直接替换关联主键。
+- 不代用户 Like，不放宽 Required，不越权读取咨询正文或联系方式。
+- 历史 PASS 不替代本轮实测；无法执行的项记为 NOT_VERIFIED。
+- 只修复验收发现的问题；数据库变更、扩大产品范围等另行明确边界。
+
+## 任务 1：确认最新前端部署与品牌渲染
+
+涉及：`admin-web/public/brand/logo-mark.png`、`admin-web/src/layouts/MainLayout.vue`、`admin-web/src/views/LoginView.vue`；部署配置仅检查 `infrastructure/docker-compose*.yml`。
+
+- [x] 核对当前 Docker 容器、Compose 项目和运行端口，确认实际提供 /admin/ 的服务。
+- [x] 比对运行服务与本地最新构建的 Logo、CSS；发现旧镜像后重建并仅更新管理端服务。
+- [x] 检查 Logo 请求 HTTP 200、PNG 类型及透明通道；核对页面使用最新资源。
+- [ ] 在 1366×768 和 1920×1080 检查登录页、顶部栏、展开/折叠侧栏：无方形底色、主体完整、对齐正常（待用户在浏览器完成目视确认）。
+- [x] 保存请求、容器文件哈希和构建证据。既有背景 CSS 构建警告已记录，未影响本次 Logo 资源发布。
+
+验收：正在运行的页面呈现新 Logo 和品牌文案；不存在旧资源或渲染异常。
+
+## 任务 2：演示数据、编号与统计一致性
+
+涉及检查：`admin-web/src/modules/user/`、`admin-web/src/modules/matchmaker/`、`admin-web/src/layouts/MainLayout.vue`、`backend/src/main/java/com/danyang/match/platform/`；报告记录抽样结果。
+
+- [x] 从现有数据选定一名红娘、两名服务用户和一名审批操作员，使用脱敏编号建立验收记录。
+- [x] 对比管理端接口与红娘工作台接口的展示编号、姓名、服务状态和分配关系；`/operator/matchmaker/assignments/my` 已在代码中正确使用。
+- [x] 核对用户、红娘、管理员等对外展示编号的长度、格式、唯一性；当前演示账号和 12 个演示用户展示编号均为 12 位且唯一。
+- [x] 核对工作台顶部统计改为服务记录实时计算；当前管理范围实测为今日 2 单、待处理 3 单。
+- [x] 待审核资料改为审核统计接口 `pending + processing`，审核完成后从工作台同步减少；不再使用固定 Demo 数字。
+
+验收：同一对象三端一致，编号可读且唯一，统计可追溯到同一组演示数据。
+
+## 任务 3：逐条业务闭环复验
+
+涉及检查：红娘服务管理页面、`miniapp/pages/matchmaker-workbench/`、服务详情/转介/推荐页面和相应后端接口；复用 `tests/miniapp/matchmaker_*` 与现有后端测试。
+
+- [ ] 管理端分配服务 → 红娘端出现对象 → 查看详情 → 新增跟进 → 管理端记录回写。
+- [ ] 提交完成服务 → 按现有确认规则完成 → 管理端状态与统计更新；不跳过已确认的用户确认步骤。
+- [ ] 发起推荐 → 用户端查看并自行处理 → 红娘端推荐进展更新；不以推荐直接创建聊天。
+- [ ] 发起转介 → 有权接收人员处理 → 两端状态一致，非本人范围默认拒绝。
+- [ ] 红娘申请联系授权 → 管理端“红娘服务”内审批 → 用户单独确认 → 限时可用 → 撤销后拒绝披露。
+- [ ] 用另一名红娘或无权限操作员尝试访问上述对象，确认无越权及敏感字段泄露。
+- [ ] 每条记录操作前后状态、接口结果、脱敏对象编号和界面证据；重复操作不新增重复业务记录。
+
+验收：每条链路均有可复查结果；页面有入口、可操作、落库且另一端可看到变化。
+
+## 任务 4：回归、演示预案与阶段报告
+
+输出：`docs/Phase-demo-closeout-Completion-Report-2026-10-13.md`、`docs/DEMO-WALKTHROUGH-2026-10-13.md`；根据本轮证据更新 `docs/STATUS.md` 的当前结论，不删除历史。
+
+- [ ] 在 backend 执行 `mvn test`，记录总数、失败、错误、跳过数。
+- [ ] 在 admin-web 执行 `pnpm run type-check` 和 `pnpm run build`。
+- [ ] 按项目现有命令执行小程序类型检查、结构守卫及本阶段相关行为测试。
+- [ ] 对本次修改执行 `git diff --check`；不运行带 --fix 的全仓 lint。
+- [ ] 整理演示顺序、账号角色、入口、预期结果、必要截图和出错恢复办法，不在文档保存密码或密钥。
+- [ ] 验证演示数据保留且容器正常；只在明确服务范围和恢复方式后开展必要重启验证。
+- [ ] 出具逐项 PASS/PARTIAL/FAIL/NOT_VERIFIED 与演示 GO/CONDITIONAL GO/NO-GO；演示通过不等于生产上线通过。
+
+## 后续独立阶段
+
+演示验收结束后，再按既有 Phase 24～26 执行真实用户 UAT、运营素材替换和生产部署验收。真实微信环境、域名/HTTPS、备份恢复及正式上线检查不能用演示数据验证代替。本计划不包含未批准的死代码退役或全项目重构。
diff --git a/docs/superpowers/plans/2026-10-14-global-public-id-implementation.md b/docs/superpowers/plans/2026-10-14-global-public-id-implementation.md
new file mode 100644
index 0000000..dda73c6
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-14-global-public-id-implementation.md
@@ -0,0 +1,214 @@
+# 全平台业务展示编号统一实施计划
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 让所有面向用户或跨角色展示的人员、任务、活动和业务记录 ID 使用 13 位稳定业务编号，并确保 Web、小程序和运营 API 的展示一致。
+
+**Architecture:** 保留 PostgreSQL UUID 主键、外键、权限与路由寻址；为公开展示实体持久化业务编号。以 PostgreSQL 原子计数器按前缀和上海日期分配编号，在实体创建事务中写入；后端 DTO 同时提供内部 ID 与公开展示字段，前端只渲染公开字段。
+
+**Tech Stack:** Java 21、Spring Boot、MyBatis-Plus、PostgreSQL、Flyway、Vue 3、TypeScript、微信原生小程序、Node.js 行为测试、Docker Compose。
+
+**Spec:** `docs/superpowers/specs/2026-10-14-global-public-id-design.md`
+
+## Global Constraints
+
+- 公开编号严格使用 `2 位大写字母前缀 + Asia/Shanghai YYYYMMDD + 3 位序号`，共 13 位。
+- 用户 `YH` 按注册日和性别分别排名，男性序号奇数、女性序号偶数；红娘 `HN`，其他工作人员 `GL`，任务 `RW`，活动 `HD`。
+- UUID 主键、外键、JWT subject、数据范围、权限校验、幂等语义和既有 UUID API 路由保持不变。
+- 推荐对象、被推荐人、被举报人和活动参与者统一展示用户 `YH` 编号。
+- 任意用户可见页面、弹窗、导出和小程序不得渲染原始 UUID；不可用中文占位掩盖接口漏字段，必须修 DTO/查询。
+- 不覆盖或回滚开始任务前工作区的任何修改；只提交本计划涉及的新改动。
+- 不添加第三方依赖；后端唯一编号由 PostgreSQL 并发安全地产生。
+
+---
+
+## 文件结构与责任
+
+- `backend/src/main/resources/db/migration/V060__add_global_public_display_ids.sql`：为业务实体增加公开编号列/计数器，并为现存数据确定性回填和建立唯一索引。
+- `backend/src/main/java/com/danyang/match/platform/shared/id/`：编号前缀、长度、日期与原子分配服务；只新增小型领域工具，不重构 UUID 基础设施。
+- 各领域 Entity、Mapper、Service、DTO：在创建事务中写入公开编号；查询以 JOIN 取关联用户/操作员的展示编号。
+- `backend/src/test/java/com/danyang/match/platform/shared/id/` 与领域测试：格式、奇偶、并发、迁移、DTO 白名单和越权行为测试。
+- `admin-web/src/modules/`：替换直接渲染 UUID 的列、详情、表单和导出；交互继续传内部 ID。
+- `miniapp/pages/` 与 `miniapp/services/`：只显示公开编号，动作请求继续用内部 ID。
+- `docs/DEMO-VALIDATION-2026-10-13.md`：追加编号回填与双端展示验收证据，不改写历史记录。
+
+## Task 1: 建立全仓公开 ID 展示清单与锁定测试
+
+2026-10-14 执行结果：模板/关键动态文案盘点与检查器已完成，清单见 `../specs/2026-10-14-global-public-id-display-inventory.md`。检查器 7 项自检 PASS；114 个模板发现 31 个审查候选，全局展示检查仍 FAIL。Java 响应行为覆盖测试移至 Task 3，避免仅断言源码字符串。预约 YY 前缀待用户确认后进入迁移实现。
+
+**Files:**
+- Create: `backend/src/test/java/com/danyang/match/platform/shared/id/PublicDisplayIdCoverageTest.java`
+- Create: `tests/public-id-display-coverage.cjs`
+- Inspect: `admin-web/src/modules/`、`miniapp/pages/`、各模块 Controller/DTO/Mapper、Flyway 迁移
+
+- [ ] **Step 1: 建立清单和失败测试**
+
+清单至少逐项记录：实体、UUID 列/关系、创建入口、API DTO、管理端页面、用户小程序页面、编号前缀、是否包含既有用户隐私权限。覆盖 `users`、`operators`、`activities`、`review_tasks`、`reports`、`matchmaker_services`、`matchmaker_recommendations`、`matchmaker_contact_authorizations`、`matchmaker_assignments`、`matchmaker_followups`、转介实体，以及搜索中发现的任何其他实际展示 UUID 的实体。
+
+守卫测试扫描已登记的 Web Vue 与小程序 WXML/TS/JS 文件，拒绝把 `operatorId`、`userId`、`targetUserId`、`activityId`、`serviceId`、`recommendationId` 等内部 UUID 直接插值到可见模板；允许它们用于事件、路由和 API 参数。测试对明确的 display 字段白名单断言。
+
+- [ ] **Step 2: 运行测试确认暴露当前差距**
+
+Run: `node tests/public-id-display-coverage.cjs`
+Expected: FAIL，报告仍直接显示 UUID 的具体文件与模板位置。
+
+- [ ] **Step 3: 固化清单与覆盖测试**
+
+将前置检查清单保存到 `docs/superpowers/specs/2026-10-14-global-public-id-display-inventory.md`；确认每个展示 ID 均映射到规格中已有前缀。若发现需新增前缀或改变既有 API 路由参数，暂停后续实现并修订规格等产品确认。
+
+- [ ] **Step 4: 运行测试**
+
+Run: `node tests/public-id-display-coverage.cjs`
+Expected: 检查器自检 PASS；展示扫描在遗留问题修复前保持 FAIL，不将已知问题豁免为全局 PASS。
+
+## Task 2: 编号分配器、字段迁移和历史回填
+
+**Files:**
+- Create: `backend/src/main/resources/db/migration/V060__add_global_public_display_ids.sql`
+- Create: `backend/src/main/java/com/danyang/match/platform/shared/id/PublicDisplayId.java`
+- Create: `backend/src/main/java/com/danyang/match/platform/shared/id/PublicDisplayIdAllocator.java`
+- Create: `backend/src/main/java/com/danyang/match/platform/shared/id/PublicDisplayIdMapper.java`
+- Modify: `backend/src/main/java/com/danyang/match/platform/user/UserDisplayNumber.java`
+- Modify: 相关 entity，至少 `User.java`、`Operator.java`、`Activity.java`、审核/举报/红娘相关 entity
+- Create: `backend/src/test/java/com/danyang/match/platform/shared/id/PublicDisplayIdTest.java`
+- Create: `backend/src/test/java/com/danyang/match/platform/shared/id/PublicDisplayIdAllocatorTest.java`
+- Modify: `backend/src/test/java/com/danyang/match/platform/deployment/MigrationValidationTest.java`
+- Modify: `backend/src/test/resources/schema-h2.sql`
+
+- [ ] **Step 1: 编写编号格式和分配器失败测试**
+
+测试 `YH20261014001`、`YH20261014002` 的用户奇偶规则，普通记录格式 `RW20261014001`；非法前缀、日期、序号、用户性别、序号越过 999 必须拒绝。PostgreSQL mapper 测试以并发任务申请同一前缀同一天的编号，断言数量一致且全部唯一；禁止使用 `COUNT(*) + 1`。
+
+- [ ] **Step 2: 运行定向测试确认失败**
+
+Run: `cd backend; mvn -Dtest=PublicDisplayIdTest,PublicDisplayIdAllocatorTest test`
+Expected: FAIL，因编号工具和 mapper 尚未实现。
+
+- [ ] **Step 3: 添加持久化编号字段与回填**
+
+新增迁移为清单内公开实体添加 `display_id`（用户沿用 `display_number`，工作人员沿用 `display_id`），建立 `public_display_id_counters(prefix, local_date, sequence_group, last_sequence)` 计数器表。迁移按 `Asia/Shanghai` 注册/创建日期及稳定次序回填：用户按实名性别分别排名并写入男奇女偶尾号；工作人员按角色决定 `HN/GL`；任务 `RW`；活动 `HD`；其余业务表按规格与覆盖清单中的前缀分表排名。回填完成后设置非空和部分唯一约束；软删除记录也保留其编号唯一性，不得复用。初始化计数器到每组已使用的最大序号。
+
+- [ ] **Step 4: 实现原子分配器**
+
+Mapper 使用 PostgreSQL 原子 UPSERT：普通编号按 `sequence_group=''` 每次加 1；用户编号按 `sequence_group=gender` 分别加 2，男性首值 1、女性首值 2。更新前检查生成值不超过 999；无返回值时抛明确容量异常。日期由 `Clock` 注入并按 `Asia/Shanghai` 转换。`UserDisplayNumber` 调整为接受已分配奇偶序号且支持三位尾号，避免自行计数。
+
+- [ ] **Step 5: 运行后端定向测试与迁移验证**
+
+Run: `cd backend; mvn -Dtest=PublicDisplayIdTest,PublicDisplayIdAllocatorTest,MigrationValidationTest test`
+Expected: PASS；并发下无重复编号，迁移在空 H2 测试结构与 PostgreSQL 演示数据库验证通过。
+
+## Task 3: 后端创建写入与展示 DTO 收口
+
+**Files:**
+- Modify: 各展示实体的 Mapper/Service/Controller/DTO，按 Task 1 清单逐项列出
+- Modify: `backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerContactAuthorizationMapper.java`
+- Modify: `backend/src/main/java/com/danyang/match/platform/matchmaker/service/ContactAuthorizationService.java`
+- Modify: `backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerManagementService.java`
+- Modify: 活动、审核、举报、审计、转介等清单中 Mapper 查询和响应 DTO
+- Create: `backend/src/test/java/com/danyang/match/platform/shared/id/PublicDisplayIdResponseTest.java`
+- Modify: 对应领域测试与 `backend/src/test/resources/schema-h2.sql`
+
+- [ ] **Step 1: 为创建流程写回归测试**
+
+对每类清单实体调用真实 Service 创建入口，断言同事务持久化 UUID 主键和正确前缀的公开编号；模拟编号分配失败，断言领域实体未写入。用户和工作人员 API 输出同时断言 `id` 仍为既有 UUID、`displayNumber/displayId` 是业务编号。
+
+- [ ] **Step 2: 运行测试确认失败**
+
+Run: `cd backend; mvn -Dtest=PublicDisplayIdResponseTest,MatchmakerContactAuthorizationTest,MatchmakerManagementReadTest test`
+Expected: 新增编号断言失败，既有权限测试保持可执行。
+
+- [ ] **Step 3: 接入创建事务与关联编号查询**
+
+对每个实体创建 Service，在已有 `@Transactional` 中先分配编号再 insert；操作员编号依实际角色用 `HN/GL`。Mapper 查询只额外 JOIN 公开编号字段；DTO 增加语义明确的 `displayId`/`displayNumber` 和关联对象 `operatorDisplayId`、`userDisplayNumber`、`targetUserDisplayNumber`。contact authorization 不再把底层 `operatorId/userId` 作为展示字段使用。
+
+推荐对象、被举报人、活动参与者和审核对象关联到 user profile 时，复用 `users.display_number`；查询必须保留现有数据范围、用户隐私白名单和防探测条件。列表只补展示字段，不扩大查询可见范围。
+
+- [ ] **Step 4: 检查未覆盖 API 和 UUID 响应泄漏**
+
+运行后端静态覆盖测试和针对 Controller JSON 的响应断言；确认审计记录实体引用只在有权限且可映射时返回业务编号，否则返回实体类型脱敏说明。搜索所有列表 DTO 对 UUID 的输出使用，逐项按清单修复，不修改内部写请求。
+
+- [ ] **Step 5: 运行相关后端回归**
+
+Run: `cd backend; mvn -Dtest=PublicDisplayId*,MatchmakerContactAuthorizationTest,MatchmakerAssignmentA1Test,MatchmakerManagementReadTest,Activity*,Review*,Report*,MigrationValidationTest test`
+Expected: PASS；既有权限、事务、隐藏/软删除与错误语义不变。
+
+## Task 4: 管理端只展示业务编号
+
+**Files:**
+- Modify: `admin-web/src/modules/matchmaker/MatchmakerManagementView.vue`
+- Modify: `admin-web/src/modules/activity/ActivityInterestView.vue`
+- Modify: `admin-web/src/modules/activity/ActivityCheckinView.vue`
+- Modify: `admin-web/src/modules/operator/OperatorManagementView.vue`
+- Modify: `admin-web/src/modules/audit/AuditLogView.vue`
+- Modify: Task 1 清单识别的用户、举报、安全、审核、报名、活动、联系授权、转介等视图
+- Modify: 对应 API 类型定义与 service adapter
+- Modify: `tests/public-id-display-coverage.cjs`
+
+- [ ] **Step 1: 为目标页面写展示行为测试**
+
+使用虚拟 API fixture 分别提供 UUID 与展示编号；渲染断言应见 `HN...`、`YH...`、`HD...`、`RW...` 等展示编号且不见 UUID，点击详情/审批/筛选后请求仍携带原内部 UUID。
+
+- [ ] **Step 2: 修复模板和交互控件**
+
+表格/详情使用 DTO 的公开编号字段；推荐对象输入改为可搜索用户选择器，按公开用户编号和允许公开的基础资料搜索，提交时仍传选中对象内部 UUID。若缺展示编号，展示“编号待生成”并在接口测试中判为缺陷，不允许回退 UUID。
+
+- [ ] **Step 3: 更新覆盖守卫并运行管理端检查**
+
+Run: `cd admin-web; pnpm run type-check; pnpm run build; cd ..; node tests/public-id-display-coverage.cjs`
+Expected: 类型检查、构建和 ID 展示守卫 PASS。
+
+## Task 5: 小程序只展示业务编号
+
+**Files:**
+- Modify: Task 1 清单中用户卡片、活动详情/报名/签到、红娘工作台/服务详情/推荐进展、举报与安全、个人资料/认证等页面
+- Modify: 必要的 `miniapp/services/*.js` response adapter
+- Modify: `miniapp/types/index.ts` 与 `miniapp/types/index.d.ts` 的展示字段
+- Create: `tests/miniapp/public_id_display_behavior_test.cjs`
+- Modify: `tests/public-id-display-coverage.cjs`
+
+- [ ] **Step 1: 写小程序字段展示失败测试**
+
+使用接口响应 fixture 注入 `id/userId/targetUserId` UUID 和对应 `displayId/displayNumber`，断言 WXML 页面绑定展示字段、服务跳转和 Like/Pass/报名/举报动作仍提交 UUID；无展示编号时不把 UUID 作为空态回退值。
+
+- [ ] **Step 2: 修正响应类型和页面绑定**
+
+更新 TS 声明和各页面 WXML/JS，让列表、详情、确认弹窗、活动页面和举报确认中的公开文本只用业务编号；保留内部 ID 用于请求和路由。
+
+- [ ] **Step 3: 运行小程序行为与结构检查**
+
+Run: `node tests/miniapp/public_id_display_behavior_test.cjs; node tests/public-id-display-coverage.cjs; pnpm --dir miniapp run type-check`
+Expected: PASS；另运行项目现有 WXML/WXSS 结构守卫和 matchmaker/活动相关测试。
+
+## Task 6: 全量迁移、运行验收和文档证据
+
+**Files:**
+- Modify: `docs/DEMO-VALIDATION-2026-10-13.md`
+- Modify: `docs/STATUS.md`
+- Inspect: `infrastructure/docker-compose.yml`、运行中的 danyang Docker 服务
+
+- [ ] **Step 1: 执行完整后端测试及迁移检查**
+
+Run: `cd backend; mvn test`
+Expected: 记录总数、失败、错误、跳过；全部失败/错误为 0。PostgreSQL 演示库迁移完成，检查每表编号无空值、无重复、长度正确，用户奇偶规则正确，计数器不小于已分配最大尾号。
+
+- [ ] **Step 2: 执行 Web、小程序回归**
+
+Run: `cd admin-web; pnpm run type-check; pnpm run build; cd ..; pnpm --dir miniapp run type-check; node tests/public-id-display-coverage.cjs`
+Expected: 全部 PASS；执行现有小程序结构与相关行为测试。
+
+- [ ] **Step 3: 演示环境 HTTP 和页面检查**
+
+以演示账号读取联系授权、红娘服务/推荐、用户、活动、审核、举报接口，逐类抽查 UUID 与业务编号关系；确认权限拒绝样本仍拒绝。检查浏览器常用视图及微信开发者工具小程序核心页，页面无 UUID 可见文本，动作正常。
+
+- [ ] **Step 4: 记录证据并完成阶段报告**
+
+在 `docs/DEMO-VALIDATION-2026-10-13.md` 追加编号格式、各类数量、重复检测、旧号映射、测试输出摘要和目视验收结果；在 `docs/STATUS.md` 仅追加当前结论，不覆盖历史状态。运行 `git diff --check`，最终报告逐项 `PASS/PARTIAL/FAIL/NOT_VERIFIED`。
+
+## 完成门禁
+
+- 六个任务均有实现与独立测试证据；不得因前端隐藏列而遗漏后端公开 DTO。
+- 演示 PostgreSQL 中公开编号检查 SQL 返回 0 空值（仅规格明确允许的未实名用户可空）、0 重复、0 格式错误。
+- 联系授权截图展示 `HN...` 与 `YH...`；跨模块推荐、举报和活动同一用户编号相同。
+- 所有 UUID 保留作内部键但不出现在面向用户的可见文本、导出或通知。
+- 若既有客户端依赖公开 UUID 字段作为用户输入，应提供公开编号解析适配并做兼容测试；权限判断仍基于解析后的 UUID。
+- 最终说明未执行的微信真机验收或不可执行测试，不将历史测试结果写成本轮证据。
diff --git a/docs/superpowers/plans/2026-10-15-next-phase-validation-roadmap.md b/docs/superpowers/plans/2026-10-15-next-phase-validation-roadmap.md
new file mode 100644
index 0000000..6057ac2
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-15-next-phase-validation-roadmap.md
@@ -0,0 +1,131 @@
+# V1.1 下一阶段验证与发布准备计划
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 在现有微信真机、前端门禁和后端 916 项全量测试通过的基础上，补齐真实数据库并发、完整业务闭环、通知数据一致性和发布前冒烟验证。
+
+**Architecture:** 保持模块化单体和 PostgreSQL Source of Truth。测试分为 H2 单元/集成测试、Docker PostgreSQL 真实数据库测试、运行中服务冒烟和人工 UAT 四层，任何一层的结果独立记录，不互相替代。
+
+**Tech Stack:** Java 21、Spring Boot 3、Maven、PostgreSQL、Docker Compose、Vue 3、微信原生小程序、Edge。
+
+**Spec:** `docs/善缘丹阳 V1.1 客户需求基线增量开发与修复计划.md`、`docs/善缘丹阳 V1.1 数据库与API增量设计.md`、`docs/STATUS.md`。
+
+## Global Constraints
+
+- 不清理、回滚或覆盖现有未提交改动。
+- 不修改已通过真机验收的业务流程，除非新增验证复现出根因。
+- PostgreSQL 是 Source of Truth；H2 只用于快速测试，不能替代真实数据库证据。
+- Maven 测试容器继续使用阿里云镜像和 `--dns 223.5.5.5 --dns 114.114.114.114`，不关闭 TLS 校验。
+- 管理端页面验收使用已安装的 Edge，不安装 Chrome/Chromium。
+- 测试账号、密码和 Token 只通过环境变量注入，不写入仓库和日志。
+
+---
+
+### Task 1: 真实 PostgreSQL 并发测试
+
+**Files:**
+- Inspect: `backend/src/test/java/com/danyang/match/platform/concurrent.ConcurrentTests.java`
+- Modify: `backend/src/test/java/com/danyang/match/platform/concurrent.ConcurrentTests.java`
+- Modify: `backend/src/test/resources/application-test.yml`（仅在测试 profile 需要新增 PostgreSQL 开关时）
+- Test evidence: `.mimosa/postgres-concurrency-test.log`
+
+**Interfaces:**
+- Consumes: Docker Compose PostgreSQL、现有服务层接口和测试数据清理机制。
+- Produces: `CI=true` 下可执行的 Like 并发和活动容量竞争测试；成功数、重复 Match 数和超容量数有数据库查询断言。
+
+- [ ] **Step 1: 复核现有并发测试是否只是内存计数。**
+  - 确认测试使用真实 service/mapper、事务和 PostgreSQL 表，而不是 `AtomicInteger` 结果模拟。
+- [ ] **Step 2: 建立隔离测试数据。**
+  - 每个测试使用唯一 run id；结束时按 run id 删除关系、活动报名和 Match 数据。
+- [ ] **Step 3: 用 Docker PostgreSQL 执行并发测试。**
+  - 命令：`docker compose -f infrastructure/docker-compose.yml up -d postgres`
+  - 命令：`docker run --rm ... mvn -s /tmp/settings.xml -B -Dtest=ConcurrentTests -Denv=postgres test`
+- [ ] **Step 4: 验证边界。**
+  - 断言同一对用户最终最多一个 active Match；活动 approved 数不超过 capacity；失败操作有明确错误码。
+- [ ] **Step 5: 保存报告并更新 `docs/STATUS.md`。**
+
+### Task 2: 完整注册到牵手 E2E
+
+**Files:**
+- Inspect: `backend/src/test/java/com/danyang/match/platform/core/CoreE2ETest.java`
+- Modify: `backend/src/test/java/com/danyang/match/platform/core/CoreE2ETest.java`
+- Test evidence: `.mimosa/core-e2e-postgres-test.log`
+
+**Interfaces:**
+- Consumes: 微信登录模拟 provider、实名认证、资料审核、推荐、Like、双向 Match、聊天和成功牵手服务。
+- Produces: 一个真实 PostgreSQL 事务闭环测试，覆盖状态迁移和关键权限断言。
+
+- [ ] **Step 1: 将 `@Disabled` 占位测试拆成真实步骤。**
+- [ ] **Step 2: 每一步先断言数据库状态，再调用下一步。**
+- [ ] **Step 3: 增加负向断言。**
+  - 未审核资料不能进入推荐；未 Mutual 不能聊天；单方成功牵手确认不能完成。
+- [ ] **Step 4: 在 PostgreSQL profile 执行并保存日志。**
+- [ ] **Step 5: 仅在完整链路通过后移除 `@Disabled`，否则保留并将状态标记为 `NOT_VERIFIED`。**
+
+### Task 3: 通知数据转换告警治理
+
+**Files:**
+- Inspect: `backend/src/main/java/com/danyang/match/platform/notification/mapper/NotificationMapper.java`
+- Inspect: `backend/src/test/java/com/danyang/match/platform/notification/*`
+- Modify: 对应测试夹具或 schema 文件；只有复现业务根因时才修改生产代码。
+- Test evidence: `.mimosa/notification-fixture-test.log`
+
+**Interfaces:**
+- Consumes: `notifications.user_id` 的实际 PostgreSQL/H2 类型和通知 mapper 参数类型。
+- Produces: 不再出现 `u-notif-guard` 这类类型转换告警；通知幂等、落库和查询断言保持通过。
+
+- [ ] **Step 1: 对照 Flyway PostgreSQL schema 和 `schema-h2.sql` 的 user_id 类型。**
+- [ ] **Step 2: 定位夹具使用字符串 ID 的测试用例。**
+- [ ] **Step 3: 优先修正测试夹具为合法 UUID；若业务确实支持非 UUID，再修正 mapper 类型契约。**
+- [ ] **Step 4: 重跑通知相关测试和全量 Maven 测试。**
+- [ ] **Step 5: 在报告中区分“日志告警已消除”和“业务通知真实发送”两种结论。**
+
+### Task 4: 运行中服务发布前冒烟
+
+**Files:**
+- Use: `tests/public-id-web-live.cjs`
+- Use: `tests/admin-dashboard-behavior.cjs`
+- Use: `scripts/miniapp-compile-check.mjs`
+- Create: `.mimosa/release-smoke-20261015.log`
+- Update: `docs/STATUS.md`
+
+**Interfaces:**
+- Consumes: Docker 中运行的 backend、PostgreSQL、Redis、nginx、admin-web；Edge 浏览器。
+- Produces: 登录、首页统计、红娘服务、联系授权审批、公开编号、未登录 401、关键页面导航的可复现结果。
+
+- [ ] **Step 1: 备份演示库并记录 Flyway 版本。**
+- [ ] **Step 2: 重启整套 Docker 服务并检查健康端点。**
+- [ ] **Step 3: 用 Edge 执行管理端页面验收。**
+- [ ] **Step 4: 执行 API 冒烟并记录状态码、响应 success/code，不记录 Token。**
+- [ ] **Step 5: 验证服务重启后登录、编号查询和工作台统计仍可用。**
+
+### Task 5: 用户 UAT 与发布决策
+
+**Files:**
+- Use: `docs/STATUS.md`
+- Use: `docs/PENDING_DECISIONS.md`
+- Create: `docs/RELEASE-READINESS-2026-10-15.md`
+
+**Interfaces:**
+- Consumes: 微信真机复验、Edge 管理端冒烟、后端和前端测试报告。
+- Produces: `GO`、`CONDITIONAL GO` 或 `NO-GO` 决策，以及剩余 P0/P1 清单。
+
+- [ ] **Step 1: 由用户在微信开发者工具复验红娘登录、工作台、服务详情、跟进、完成服务、联系授权审批。**
+- [ ] **Step 2: 使用演示数据走一遍用户确认服务 → 管理端完成服务 → 统计回写闭环。**
+- [ ] **Step 3: 核对首页数字是否来自接口，而非静态展示。**
+- [ ] **Step 4: 记录未完成项：第三方开放、限流阈值、真实微信支付/实名服务等范围外能力继续保持 `NOT_IMPLEMENTED` 或 `NOT_VERIFIED`。**
+- [ ] **Step 5: 形成发布决策；没有真实 PostgreSQL 并发和完整 E2E 证据时不得给出正式生产 GO。**
+
+## 暂不执行的范围
+
+- 不实现第三方 API Key/OAuth、开放 OpenAPI、调用配额或新的支付能力；这些属于已登记的范围扩张决策。
+- 不安装 Chrome/Chromium，不用浏览器替代微信真机验收。
+- 不进行大规模重构、分支清理或未授权数据库数据改写。
+
+## 推荐执行顺序
+
+1. Task 3（先消除测试夹具告警）
+2. Task 1（真实 PostgreSQL 并发）
+3. Task 2（完整 E2E）
+4. Task 4（运行中服务冒烟）
+5. Task 5（用户 UAT 与发布决策）
diff --git a/docs/superpowers/plans/2026-10-15-release-readiness-execution.md b/docs/superpowers/plans/2026-10-15-release-readiness-execution.md
new file mode 100644
index 0000000..ebfc164
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-15-release-readiness-execution.md
@@ -0,0 +1,124 @@
+# V1.1 可发布条件实施计划
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 在不扩大业务范围的前提下，完成丹阳公益婚恋平台 V1.1 的发布前验证，并输出可复现的 `GO`、`CONDITIONAL GO` 或 `NO-GO` 决策。
+
+**Architecture:** 保持模块化单体、PostgreSQL Source of Truth 和现有 Docker Compose。验证分为代码测试、真实 PostgreSQL、运行中服务、人工 UAT、运维发布五层；任一层的结果不替代其他层。
+
+**Tech Stack:** Java 21、Spring Boot 3、PostgreSQL 16、Redis、Docker Compose、Vue 3、微信原生小程序、Edge、Maven 阿里云镜像。
+
+**Spec:** `docs/superpowers/plans/2026-10-15-next-phase-validation-roadmap.md`、`docs/STATUS.md`、`AGENTS.md`。
+
+## Global Constraints
+
+- 不清理、回滚或覆盖现有未提交修改。
+- 不把 H2、内存模拟、Mock 微信或演示 Seed 结果写成生产验收证据。
+- 不安装 Chrome/Chromium；管理端使用 Edge。
+- 测试账号、密码、Token 只通过环境变量注入，不写入仓库或日志。
+- 不修改生产业务逻辑，除非真实验证复现出根因并完成回归测试。
+- 不执行不可逆数据库清理；所有演示数据操作前先备份。
+
+---
+
+### Task 1：发布基线与环境确认
+
+**Files:**
+- Inspect: `git status`、`infrastructure/docker-compose.yml`、`.env.example`、`docs/PENDING_DECISIONS.md`
+- Create: `.mimosa/release-baseline-20261015.log`
+- Modify: `docs/STATUS.md`
+
+**Interfaces:**
+- Produces：当前提交/工作区、Flyway 版本、容器健康状态、配置缺口清单。
+
+- [ ] 检查工作区，不修改既有未提交文件。
+- [ ] 检查 `.env` 必需变量是否存在，仅输出变量名，不输出值。
+- [ ] 启动或复用完整 Docker 演示栈，确认 PostgreSQL、Redis、后端、管理端、Nginx 健康。
+- [ ] 备份演示数据库并记录 Flyway 版本。
+- [ ] 将缺失项分为代码可执行项和必须由用户/运营提供的条件。
+
+验收：环境健康、备份文件存在、无敏感值进入日志。
+
+### Task 2：真实 PostgreSQL 并发门禁
+
+**Files:**
+- Inspect/Modify：`backend/src/test/java/com/danyang/match/platform/concurrent.ConcurrentTests.java`
+- Inspect/Modify：`backend/src/test/resources/application-test.yml`
+- Create：`.mimosa/postgres-concurrency-test.log`
+
+**Interfaces:**
+- Consumes：隔离 PostgreSQL 数据库、真实 Service/Mapper。
+- Produces：Like 并发无重复 active Match；活动报名/审核不超过容量；失败有明确业务错误。
+
+- [ ] 为每次测试生成唯一 run id 和隔离用户/活动数据。
+- [ ] 将内存 `AtomicInteger` 模拟替换为真实 Service/Mapper 调用。
+- [ ] 执行同一目标的并发 Like 和超容量活动报名/审核。
+- [ ] 查询 PostgreSQL 结果，断言重复 Match 为 0、approved 数不超过 capacity。
+- [ ] 清理本次 run id 数据并保留日志。
+
+验收：真实 PostgreSQL 测试通过；否则标记 `NOT_VERIFIED`，不得给正式生产 GO。
+
+### Task 3：完整业务闭环 E2E
+
+**Files:**
+- Inspect/Modify：`backend/src/test/java/com/danyang/match/platform/core/CoreE2ETest.java`
+- Create：`.mimosa/core-e2e-postgres-test.log`
+
+**Interfaces:**
+- Consumes：微信 Mock Provider、实名/资料审核、推荐、Like、双向 Match、聊天、牵手服务。
+- Produces：真实 PostgreSQL 下可复现的注册到牵手闭环和负向权限断言。
+
+- [ ] 拆解现有 `@Disabled` 占位测试。
+- [ ] 每个步骤先查询数据库状态，再进入下一步。
+- [ ] 增加未审核资料不能推荐、未 Mutual 不能聊天、单方确认不能完成的负向断言。
+- [ ] 在隔离 PostgreSQL 数据库执行并保存日志。
+- [ ] 只有完整链路通过才移除 `@Disabled`；否则保留并标记 `NOT_VERIFIED`。
+
+验收：主流程和负向流程均通过。
+
+### Task 4：运行中服务与前端发布冒烟
+
+**Files:**
+- Use：`tests/public-id-web-live.cjs`
+- Use：`tests/admin-dashboard-behavior.cjs`
+- Use：`scripts/miniapp-compile-check.mjs`
+- Create：`.mimosa/release-smoke-20261015.log`
+- Modify：`docs/STATUS.md`
+
+**Interfaces:**
+- Consumes：完整 Docker 栈、Edge、微信开发者工具。
+- Produces：登录、工作台、红娘服务、授权审批、公开编号、401、重启恢复证据。
+
+- [ ] 执行后端健康、管理端 `/admin/`、未登录 401 和公开编号 API 冒烟。
+- [ ] 用 Edge 验证管理端登录、工作台统计、红娘服务、服务详情、跟进、完成服务、联系授权审批。
+- [ ] 用演示数据走用户确认服务到管理端完成服务的闭环，核对统计回写。
+- [ ] 重启后端和前端服务，重复登录、工作台和编号查询。
+- [ ] 运行小程序编译检查并由用户在微信开发者工具/真机完成红娘端关键路径复验。
+
+验收：核心页面、接口和重启恢复均通过。
+
+### Task 5：生产配置、备份恢复和人工发布条件
+
+**Files:**
+- Inspect：`infrastructure/docker-compose.prod.yml`、`infrastructure/scripts/backup.sh`、`infrastructure/scripts/restore.sh`、`docs/legal/privacy-policy.md`、`docs/security/PIA.md`
+- Create：`docs/RELEASE-READINESS-2026-10-15.md`
+- Modify：`docs/STATUS.md`
+
+**Interfaces:**
+- Produces：发布条件矩阵、剩余 P0/P1、最终 `GO/CONDITIONAL GO/NO-GO`。
+
+- [ ] 验证生产配置关闭 Mock 微信、演示 Seed、Debug、Swagger，并使用注入密钥。
+- [ ] 执行加密备份和干净环境恢复演练，记录数据库校验结果。
+- [ ] 验证 HTTPS、域名、监控、日志、回滚目标和端口暴露。
+- [ ] 核对隐私政策法务确认、微信小程序审核、运营真实内容和待决策项。
+- [ ] 形成发布决策：全部 P0 通过才允许 `GO`；有人工条件未完成则 `CONDITIONAL GO`；真实数据库/E2E/安全门禁缺失则 `NO-GO`。
+
+验收：发布报告包含每项证据、负责人、阻塞原因和下一步。
+
+## 执行顺序
+
+1. Task 1：基线和环境
+2. Task 2：真实 PostgreSQL 并发
+3. Task 3：完整 PostgreSQL E2E
+4. Task 4：运行中服务和人工验收
+5. Task 5：生产门禁和发布决策
diff --git a/docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md b/docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md
new file mode 100644
index 0000000..ce43484
--- /dev/null
+++ b/docs/superpowers/specs/2026-10-12-matchmaker-dual-client-integration-design.md
@@ -0,0 +1,107 @@
+# 善缘丹阳红娘 Web 与小程序端整合设计
+
+**状态：已获用户确认，作为实施基线**
+**日期：2026-10-12**
+
+## 1. 目标
+
+在保留现有 V1.1 权限和隐私规则的前提下，打通红娘管理端 Web、红娘工作台小程序与普通用户端之间的服务闭环：
+
+```text
+Web 分配服务对象 → 小程序查看任务 → 小程序记录服务 → Web 查看最新结果
+```
+
+本设计不新建独立红娘小程序，不重建已有红娘后端模块，不改变用户自主 Like/Pass、活动互选和聊天确认规则。
+
+## 2. 已确认的业务边界
+
+- 普通红娘只能访问本人有效分配的服务对象。
+- 服务对象由平台授权人员或红娘组长分配，普通红娘不能认领或转分配。
+- 联系用户以平台内通知、服务申请和用户主动渠道为默认方式。
+- 电话、线下联系和完整联系方式必须经过独立授权；未确认审批岗位和期限前保持默认拒绝。
+- 红娘不能代替用户 Like、Pass、接受活动意向、确认开启聊天或修改关键择偶条件。
+- 红娘服务记录只记录公益服务所需信息，修改和受控更正必须留痕。
+- PostgreSQL 是业务事实来源，前端缓存和 Redis 不能覆盖业务状态。
+
+## 3. 端职责
+
+### 3.1 管理端 Web
+
+负责服务申请队列、红娘分配/转分配/结束、联系授权审批、活动与转介任务管理、脱敏统计和审计查看。Web 不提供代用户交友操作和普通红娘全站用户检索。
+
+### 3.2 红娘端小程序
+
+负责工作台待办、本人服务对象、授权资料、服务历史、服务记录、候选建议、获授权活动任务、联系授权申请、风险转介和脱敏个人统计。小程序不提供全站搜索、分配管理、敏感资料下载或私人聊天全文。
+
+## 4. 统一业务模型与事实来源
+
+复用现有对象：
+
+- `matchmaker_assignments`：服务范围和当前分配关系事实来源；
+- `matchmaker_services`：服务任务；
+- `matchmaker_followups`：跟进记录；
+- `matchmaker_recommendations`：候选建议；
+- 联系授权表：申请、审批、用户确认、撤销和到期；
+- 统一通知和审计表：跨端提醒与操作留痕。
+
+所有端点都由后端基于当前身份、权限、有效分配、字段策略和服务目的重新授权。客户端传入的 `userId`、`matchmakerId`、角色名和状态不能作为授权事实。
+
+## 5. 第一阶段范围
+
+第一阶段只实现最小可验证闭环：
+
+1. Web 创建或调整服务分配；
+2. 小程序工作台显示本人有效分配；
+3. 小程序进入服务对象详情；
+4. 小程序查看服务历史并新增服务记录；
+5. Web 重新加载后查看服务记录和最新服务状态；
+6. 分配结束、撤销、转交或红娘停用后，小程序不能继续访问旧对象；
+7. 写操作成功后两端从服务端刷新，不依赖本地状态猜测。
+
+第一阶段不包含实时 WebSocket、移动端分配管理、绩效排行榜、AI 自动决策和新的联系方式开放。
+
+## 6. API 约定
+
+继续使用 `/api/v1` 和统一响应 `{ success, code, message, data }`。第一阶段复用现有接口，必要时补充：
+
+```text
+GET  /operator/matchmaker/dashboard
+GET  /operator/matchmaker/assignments/my
+GET  /operator/matchmaker/services/{id}
+GET  /operator/matchmaker/services/{id}/history
+POST /operator/matchmaker/services/{id}/followup
+GET  /operator/matchmaker/recommendations
+```
+
+资源不属于当前红娘有效服务范围时，服务端按项目统一错误规范拒绝，并写入必要的越权审计；响应不得泄露对象是否存在。
+
+## 7. 状态与联动
+
+服务任务沿用现有状态枚举，语义覆盖待分配、已分配、服务中、等待用户、待下一次跟进、已完成、已撤销、已转分配和已过期。两端不各自定义状态，也不在前端拼接业务状态。
+
+P0 采用 `onShow`、页面切换和写操作后的重新拉取实现可靠联动；通知统一记录未读状态。实时通知作为后续 P1，只用于提醒，不能替代 API 刷新。
+
+## 8. 安全、隐私和错误处理
+
+- 列表、详情、历史、统计、文件和批量接口执行相同数据范围校验。
+- 普通红娘默认不能看到完整手机号、微信号、精确地址、完整身份证和原始证明。
+- 权限失效时清理对象缓存，提示服务权限已变更并返回工作台。
+- 重复提交服务记录必须幂等或被明确拒绝。
+- 网络失败时保留未提交表单内容。
+- 应用日志和审计日志不得写入令牌、密码、完整身份证号、完整联系方式、原始证明、完整聊天正文或咨询全文。
+
+## 9. 验收标准
+
+- 未授权用户不能进入红娘工作台。
+- 普通红娘只能看到本人有效分配对象。
+- 修改 URL、`userId`、分页参数不能越权。
+- Web 新建分配后小程序刷新可看到对象。
+- Web 撤销、结束或转分配后原红娘不能继续查看对象。
+- 小程序新增服务记录后 Web 可查看，记录含操作者和时间。
+- 推荐不会直接创建 Match 或 Conversation。
+- 联系授权未完成审批和用户确认前不返回完整联系方式。
+- 关键越权、权限回收、重复提交和敏感字段场景有自动化测试。
+
+## 10. 后续阶段
+
+第一阶段通过后，再实施服务申请回应、候选建议、活动任务、风险转介、未读通知和实时推送。每个阶段单独验收，不自动放宽权限边界。
diff --git a/docs/superpowers/specs/2026-10-14-global-public-id-design.md b/docs/superpowers/specs/2026-10-14-global-public-id-design.md
new file mode 100644
index 0000000..62c199e
--- /dev/null
+++ b/docs/superpowers/specs/2026-10-14-global-public-id-design.md
@@ -0,0 +1,80 @@
+# 全平台业务展示编号统一设计
+
+## 背景与目标
+
+用户在联系授权审批页看到红娘与用户 UUID，且管理端、小程序部分页面继续显示底层 UUID。统一全平台用户可见编号，使人员、业务记录和活动在 Web、小程序及运营接口中均可读、稳定、唯一，并保持既有数据关联与权限边界。
+
+## 已确认编号格式
+
+全平台公开展示编号统一为 **13 位 ASCII 字母数字**：`2 位类型前缀 + Asia/Shanghai 日期 YYYYMMDD + 3 位当日序号`。例：`HN20261013001`、`YH20261014002`、`RW20261014001`、`HD20261014001`。
+
+用户编号采用 `YH` 前缀，注册日后按性别分别排名；男性序号为奇数、女性序号为偶数，序号宽度 3 位（男性 001/003/...，女性 002/004/...）。红娘使用 `HN`，其他工作人员使用 `GL`。任务使用 `RW`，活动使用 `HD`。推荐对象和被举报人是用户，因此显示其 `YH` 编号，不另造人员编号。
+
+其他需要在页面展示的业务记录使用独立前缀，首批建议为：红娘服务 `FW`、红娘推荐记录 `TJ`、联系授权 `LX`、服务分配 `FP`、跟进记录 `GJ`、举报记录 `JB`、转介 `ZF`、审核任务 `RW`。实施盘点若发现其他实体已向用户展示其主键，必须列入覆盖矩阵并在编码前确认前缀；不得临时回退显示 UUID。
+
+序号达到 999 时拒绝分配并记录明确错误，不截断、不复用旧编号。编号创建后不可变；用户性别资料更正不重算既有编号。
+
+## 设计决策
+
+### 内部主键与公开编号
+
+- PostgreSQL UUID 主键、外键、JWT subject、数据范围查询、幂等键和内部服务间调用保持不变。
+- 每个需要公开展示的实体增加持久化公开编号字段（已存在的 `users.display_number`、`operators.display_id` 保留并扩展格式）；所有业务编号设置唯一约束。
+- API 面向展示的数据提供明确命名的 `displayId` / `displayNumber` 字段。现有 `id`、`userId` 等 UUID 仅保留为内部资源寻址和向后兼容字段；页面表格、详情、弹窗和导出文案不得渲染这些 UUID。
+- 写请求仍使用既有 UUID 路由参数或受保护的内部 ID 字段，避免更改所有外键和既有 API 路由；用户可见的人员选择、搜索和表单输入改用搜索接口解析公开编号到内部用户。
+
+### 编号生成与历史数据
+
+- PostgreSQL 提供按 `prefix + date + sequence_group` 原子递增的编号分配器，以事务级 `INSERT ... ON CONFLICT ... DO UPDATE ... RETURNING`（或等价数据库原子操作）处理并发；普通实体的 `sequence_group` 为空，用户按性别分别计数并以步长 2 产生奇偶序号。应用层不得用 `COUNT(*) + 1` 生成序号。
+- 日期统一按 `Asia/Shanghai` 取值。调用方在创建实体的同一事务内取得编号并写入实体；失败整体回滚，唯一约束作为最终并发保护。
+- 迁移为所有既有记录回填公开编号。用户按注册日、实名性别和注册时间排名；红娘及工作人员按创建日与稳定主键顺序排名；其他实体按创建时间与 UUID 稳定排序排名。按实体、日期分别编号。
+- 用户旧 `YH...`、工作人员旧 `HN.../GL...` 编号更新为新格式；应检查外部可见引用，必要时保留旧编号别名仅供检索，不再用于展示。不得更换 UUID 主键或破坏既有关系。
+- 回填前执行冲突和数量预检；迁移必须可在空库和包含现有演示数据的 PostgreSQL 上重复验证。历史回填不可逆展示变化须提供旧号到新号映射证据。
+
+### 展示范围
+
+- 红娘联系授权：红娘列显示 `HN...`，用户列显示 `YH...`。
+- 红娘工作台、服务详情、推荐列表、跟进和转介：服务/推荐/跟进/转介记录显示其公开业务编号；申请服务用户、推荐对象、被推荐人始终显示 `YH...`，操作者显示 `HN.../GL...`。
+- 活动管理、报名、互选、签到：活动显示 `HD...`；参与者显示 `YH...`。
+- 举报、安全与审核：举报记录显示 `JB...`，被举报人、举报人显示 `YH...`；审核工作项显示 `RW...`，工作人员显示 `GL.../HN...`。
+- 审计日志若展示实体引用，应显示已解析的业务编号；对无公开编号或权限不足的引用显示中文类型标签和脱敏占位，不暴露 UUID。
+- 用户小程序对外展示个人编号、活动编号、红娘服务进度编号时使用对应业务编号；交互调用使用内部 ID，不向用户暴露 UUID。
+
+## 数据流
+
+```text
+创建业务对象
+  -> 数据库原子分配器生成公开编号
+  -> 与 UUID 主键在同一事务写入
+  -> API DTO 同时提供内部寻址字段与公开展示字段
+  -> Web / 小程序只渲染公开字段
+  -> 用户选择或搜索用公开编号查询，再由后端做权限校验
+```
+
+## 安全与兼容
+
+- 公开编号不可作为授权凭证；所有权限校验仍基于认证主体、UUID 关联和现有 DataScope/Capability 规则。
+- 不返回敏感资料，不通过编号查询绕过字段脱敏或组织范围。
+- 保留旧 API UUID 参数以兼容现有页面和客户端；新增展示字段不改变原 JSON 字段语义。
+- 对用户输入的编号严格校验前缀、长度和字符集；未找到、已删除或越权对象使用既有统一错误语义，避免枚举信息泄露。
+
+## 验收标准
+
+1. 公开编号全部满足 `^[A-Z]{2}[0-9]{11}$`，唯一、非空、持久化；新建和历史记录均覆盖。
+2. 男性用户当日序号为奇数、女性为偶数；其余编号符合各自前缀和创建日。
+3. 并发创建同日同类型记录不会重复编号；达到 999 时明确拒绝。
+4. 联系授权截图、管理端业务列表、审核/举报/活动/推荐页面、小程序业务详情无 UUID 展示。
+5. 用户编号在推荐对象、被举报人、活动参与者等跨模块场景一致。
+6. 既有 UUID 主外键、登录、权限、数据范围、操作请求与旧 API 路由继续工作。
+7. 后端测试、迁移验证、管理端类型检查/构建、小程序结构与行为检查通过；演示 Docker 环境完成迁移和 HTTP 抽查。
+
+## 明确不在本次范围
+
+- 不迁移数据库主键类型，不改 JWT subject，不把 UUID 外键改成业务编号。
+- 不改变红娘服务、推荐、联系授权、举报、活动和审核的业务状态机或权限规则。
+- 不因编号暴露而开放用户搜索、手机号、身份证或任何其他敏感字段。
+- 不生成未展示且无业务价值的随机内部记录编号；只对用户可见或跨角色操作中可见的业务实体分配公开编号。
+
+## 实施前置检查
+
+实现前建立“公开 ID 展示清单”：逐项检查后端 DTO/API、管理端模板/表格/导出、小程序模板/文案，以及数据库实体和迁移。清单中的每个公开 ID 必须映射到本设计的编号类型；任何新增前缀或需要改变 API 路由参数的情况应先更新本设计并取得确认。
diff --git a/docs/superpowers/specs/2026-10-14-global-public-id-display-inventory.md b/docs/superpowers/specs/2026-10-14-global-public-id-display-inventory.md
new file mode 100644
index 0000000..7354339
--- /dev/null
+++ b/docs/superpowers/specs/2026-10-14-global-public-id-display-inventory.md
@@ -0,0 +1,54 @@
+# 全平台公开编号覆盖清单
+
+日期：2026-10-14。状态：Task 1 盘点完成；编号实现未完成。
+
+用户已确认择偶条件“下一步”重新编译后目视复验通过。本轮不改变该页面。
+
+## 数据与接口覆盖矩阵
+
+内部主键、关联字段和操作参数继续使用 UUID；以下字段为展示增量，不能作为授权凭证。
+
+| 实体 / 关联 | 创建入口（Service） | 读取与 DTO 覆盖 | Web / 小程序 | 展示编号 | 权限要求 |
+|---|---|---|---|---|---|
+| users / id | AuthService；IdentityVerificationService 生成用户编号 | UserService、用户列表/详情、推荐与举报关联查询 | 用户管理、用户详情、审核、推荐；个人资料、推荐卡片 | displayNumber / YH | 维持实名、脱敏、DataScope |
+| operators / id | OperatorManagementService | 操作员、分配、联系授权、审计与咨询人员查询 | 人员管理、红娘服务；红娘工作台 | displayId / HN 或 GL | 不扩大组织范围 |
+| activities / id | ActivityService.createActivity / createActivityFromAdmin | ActivityService、ActivityInterestService、CheckinService | 活动管理、互选、签到；活动详情、转介确认 | displayId / HD | 单向意向保密 |
+| review_tasks / id、user_id | ReviewService 及审核任务生产方 | ReviewController、ReviewTaskDetailDTO、用户关联 | ReviewView | displayId / RW；userDisplayNumber / YH | 审核领取、敏感材料权限不变 |
+| reports / id、reported_user_id | ReportService | 举报列表/详情、举报用户关联 | ReportCenterView；举报页面 | displayId / JB；reportedUserDisplayNumber / YH | 案件权限与数据范围不变 |
+| matchmaker_services / id、user_id、assigned_operator_id | MatchmakerService.submitServiceRequest；MatchmakerServiceService.applyService | MatchmakerManagementService、服务详情/列表 | MatchmakerManagementView；工作台、服务详情、服务进展 | displayId / FW；关联 YH、HN | 仅负责/授权服务 |
+| matchmaker_recommendations / id、user_id、target_user_id | MatchmakerService.createRecommendation；MatchmakerServiceService.recommendPartner | 推荐列表、管理端及用户端推荐详情 | 红娘推荐列表；工作台、推荐进展 | displayId / TJ；userDisplayNumber、targetUserDisplayNumber / YH | 不能代用户 Like |
+| matchmaker_contact_authorizations / id、operator_id、user_id | ContactAuthorizationService.request | MatchmakerContactAuthorizationMapper 与审批响应 | 联系授权审批（红娘服务下）；工作台 | displayId / LX；operatorDisplayId、userDisplayNumber | 手机号仍授权后读取并审计 |
+| matchmaker_assignments / id、user_id、operator_id | MatchmakerAssignmentService.create / transfer | 分配查询与红娘工作台 | 分配列表；工作台 | displayId / FP；关联 YH、HN | 分配范围不变 |
+| matchmaker_followups / id、service_id、operator_id | MatchmakerServiceService.addFollowup 及其他跟进写入方 | 服务详情跟进列表 | 服务详情；服务进展 | displayId / GJ；关联 FW、HN/GL | 不读取咨询正文 |
+| service_appointments / id、user_id、assigned_operator_id | ServiceAppointmentService；ReferralService.referToServiceStation | 预约运营列表与转介历史 Map | ServiceAppointmentView、ReferralManagementView；转介确认 | 预约 displayId / YY **待确认**；转介 referralDisplayId / ZF | 预约所属人员权限不变 |
+| activity_registrations / id、activity_id、user_id | ActivityService.registerActivity；ReferralService.referToActivity | 活动报名、转介历史 Map | 活动参与者、转介记录；转介确认 | 关联 HD、YH；转介 referralDisplayId / ZF | 不为未展示的普通报名 ID 新造前缀 |
+| MatchmakerService.ReferralRecord（非持久化 Java record） | MatchmakerService.createReferral | 返回值、通知文案；代码注释称有跟进写入，但方法未实际 insert | 服务转介与通知调用链需后续行为验证 | ZF；必须先保证可持久化追溯 | 保持“转介建议，用户自行确认”语义 |
+| audit_logs / operator_id、resource_id | AuditLogService | 审计列表、资源编号解析 | AuditLogView | 人员 HN/GL；资源复用已确认编号 | 不可解析/无权限显示类型与脱敏说明 |
+| organization / organization_id | 组织管理 | 活动组织列表与人员 orgMap | ActivityManagementView、OperatorManagementView | 建议显示已有机构名称，不新增机构编号 | 组织关系不授予数据权限 |
+| 专项服务参与者 / user_id | ServiceProgram 相关创建方 | 参与者列表 | ServiceProgramView | 复用 YH | 数据范围不变 |
+
+## 模板检查证据
+
+执行 `node tests/public-id-display-coverage.cjs --self-check`：7 项 PASS。
+
+执行 `node tests/public-id-display-coverage.cjs`：扫描 114 个 Vue/WXML 模板，31 个审查候选，退出码 1。该 FAIL 是尚未修复的公开编号差距，不能将清单完成写成全局展示 PASS。
+
+确认可见 UUID / UUID 输入集中在：活动签到及互选、红娘推荐及联系授权、审核、举报、预约、转介、专项服务参与者、审计、小程序工作台。具体文件与行号由检查命令即时输出。
+
+人工剔除的名称映射候选：`ContentManagementView` 的 `categoryLabel(row.categoryId)`；`OperatorManagementView` 的 `orgMap[row.organizationId]` 及其组织列有自定义名称模板。检查器保守报告，不能仅因字段含 Id 就认定实际泄露。
+
+额外动态文案差距：`miniapp/pages/referral-confirmation/referral-confirmation.js` 将 `activityId` 作为 detail 文案；`ReferralService.getOperatorName` 在找不到操作员或异常时回退 operatorId；`MatchmakerService.createReferral` 将 referralTarget 拼入通知。需要在后续 DTO/行为测试中处理，模板扫描不能发现这些间接绑定。
+
+编号输入覆盖：推荐用户选择、人工签到用户、互选活动搜索、咨询人员分配、Banner 的站内目标选择。推荐/签到/分配需解析展示编号或使用选项选择器；Banner 可优先按已有活动/文章名称选择并保留内部寻址，不因内部配置键新增无业务意义的编号。
+
+## 实施前待确认的具体增量
+
+建议预约编号 `YY20261014001`。预约与转介分别显示 `YY`、`ZF`：同一预约由红娘发起时具有预约公开号和转介公开号；活动转介使用 ZF，活动本身仍为 HD。无需变更 UUID 路由，也无需新建统一转介表；为已有预约/报名记录增加转介编号字段（仅转介记录非空）。
+
+机构展示名称；无公开编号的审计资源依既有规格显示中文类型和脱敏说明。以上不新增其他前缀。
+
+## 后续验证边界
+
+本轮仅新增盘点与检查工具，未执行数据库迁移、全量后端测试、端到端页面验收。后端覆盖测试应在 Task 3 使用真实响应与创建流程验证，不写仅检查源码字符串的空泛 Java 测试。
+
+迁移前必须验证用户实名性别缺失的处理、旧新号映射、并发与回滚。普通序号 999 可使用，超过 999 拒绝；男性最多 500 个奇号，女性最多 499 个偶号。H2 测试不能代替 PostgreSQL UPSERT 并发与 Flyway 实测。
diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml
index 84b1e10..eb62a08 100644
--- a/infrastructure/docker-compose.yml
+++ b/infrastructure/docker-compose.yml
@@ -143,20 +143,20 @@ services:
         condition: service_completed_successfully
     environment:
       SPRING_PROFILES_ACTIVE: docker
-      DB_HOST: postgres
+      DB_HOST: danyang-match-postgres
       DB_PORT: 5432
       DB_NAME: danyang_match
       DB_USER: postgres
       DB_PASSWORD: ${DB_PASSWORD:?请在本地 .env 设置 DB_PASSWORD}
-      REDIS_HOST: redis
+      REDIS_HOST: danyang-match-redis
       REDIS_PORT: 6379
       REDIS_PASSWORD: ${REDIS_PASSWORD:?请在本地 .env 设置 REDIS_PASSWORD}
       # 变量名仍沿用 MINIO_* 前缀（服务端 Bean 与 application-*.yml 都在读它），
       # 但它现在指向 SeaweedFS 的 S3 网关 —— 属历史命名，待下一轮统一改名。
       # 「presigned URL 的 host 必须是对外可达地址」缺陷已修复：endpoint 拆成
-      # 内网签发地址（MINIO_ENDPOINT=seaweedfs:8333，后端连存储）+
+      # 内网签发地址（MINIO_ENDPOINT=danyang-match-seaweedfs:8333，后端连存储）+
       # 外网访问地址（MINIO_PUBLIC_ENDPOINT=localhost:8333，客户端直传）。
-      MINIO_ENDPOINT: http://seaweedfs:8333
+      MINIO_ENDPOINT: http://danyang-match-seaweedfs:8333
       # 对内网 endpoint 拆出「对外可达」地址：客户端直传 presigned URL 用。
       # 本地 S3 网关已 publish 到宿主 8333，故客户端填 localhost:8333 即可连通。
       MINIO_PUBLIC_ENDPOINT: http://localhost:8333
@@ -167,6 +167,8 @@ services:
       ENCRYPTION_KEY: ${ENCRYPTION_KEY:?请在本地 .env 设置 ENCRYPTION_KEY}
       WECHAT_APP_ID: dev-wechat-app-id
       WECHAT_APP_SECRET: ${WECHAT_APP_SECRET:-}
+      # 仅本地演示固定到秀英预置用户；正式环境留空并使用真实微信 Provider。
+      WECHAT_MOCK_OPENID: ${WECHAT_MOCK_OPENID:-demo_openid_f06}
     ports:
       - "8085:8080"
     healthcheck:
diff --git a/infrastructure/nginx.conf b/infrastructure/nginx.conf
index a8efde4..a9997fb 100644
--- a/infrastructure/nginx.conf
+++ b/infrastructure/nginx.conf
@@ -34,18 +34,19 @@ http {
     limit_req_zone $binary_remote_addr zone=auth:10m rate=5r/s;
     limit_req_zone $binary_remote_addr zone=upload:10m rate=10r/s;
 
-    upstream backend {
-        server backend:8080;
-    }
-
-    upstream admin_web {
-        server admin-web:80;
-    }
+    # Docker Compose 内置 DNS resolver —— 让 proxy_pass 中的主机名延迟解析（请求时才查），
+    # 避免 nginx 启动时 backend/admin-web 容器的 DNS 还没注册好就 [emerg] 退出。
+    resolver 127.0.0.11 valid=30s ipv6=off;
 
     server {
         listen 80;
         server_name localhost;
 
+        # upstream 变量（必须在 server 块内，不能在 http 顶层）
+        # 使用固定容器名，避免后端因跨 compose 网络重连后丢失 service alias。
+        set $backend_upstream "http://danyang-match-backend:8080";
+        set $admin_upstream "http://admin-web:80";
+
         # Health check for nginx itself
         location /nginx-health {
             return 200 'ok';
@@ -55,7 +56,7 @@ http {
         # API proxy
         location /api/ {
             limit_req zone=api burst=50 nodelay;
-            proxy_pass http://backend;
+            proxy_pass $backend_upstream;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -69,7 +70,7 @@ http {
 
         # WebSocket proxy
         location /ws/ {
-            proxy_pass http://backend;
+            proxy_pass $backend_upstream;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "upgrade";
@@ -83,7 +84,7 @@ http {
         # Auth endpoints - stricter rate limit
         location /api/v1/auth/ {
             limit_req zone=auth burst=10 nodelay;
-            proxy_pass http://backend;
+            proxy_pass $backend_upstream;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -98,7 +99,7 @@ http {
             return 301 /admin/;
         }
         location /admin/ {
-            proxy_pass http://admin_web;
+            proxy_pass $admin_upstream;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
diff --git a/miniapp/app.js b/miniapp/app.js
index 80c7c94..3cf69a3 100644
--- a/miniapp/app.js
+++ b/miniapp/app.js
@@ -8,7 +8,14 @@ App({
     slogan: '真实相识 · 公益牵线',
   },
 
-  onLaunch() {
+  onLaunch(options) {
+    const operatorPath = options && /^pages\/matchmaker-(login|workbench|service-detail)\//.test(options.path || '');
+    if (operatorPath || wx.getStorageSync('operatorToken')) {
+      stores.appStore.init().catch(() => {});
+      // 工作人员使用独立会话，不能被用户端 bootstrap 的登录跳转覆盖。
+      if (!operatorPath) wx.reLaunch({ url: '/pages/matchmaker-workbench/matchmaker-workbench' });
+      return;
+    }
     // 触发 7 个 Store 的冷启动初始化（规范 §131）
     // - 同步从 storage 恢复登录态/用户状态/未读数（避免白屏）
     // - 异步拉取服务端 App 配置（不阻塞）
diff --git a/miniapp/app.json b/miniapp/app.json
index 10c0ba2..257bd57 100644
--- a/miniapp/app.json
+++ b/miniapp/app.json
@@ -48,6 +48,9 @@
     "pages/appeal/appeal",
     "pages/matchmaker-login/matchmaker-login",
     "pages/matchmaker-workbench/matchmaker-workbench",
+    "pages/matchmaker-service-detail/matchmaker-service-detail",
+    "pages/referral-confirmation/referral-confirmation",
+    "pages/matchmaker-recommendations/matchmaker-recommendations",
     "pages/local-eligibility/local-eligibility",
     "pages/local-eligibility-supplement/local-eligibility-supplement",
     "pages/counseling-intro/counseling-intro",
@@ -69,8 +72,8 @@
     "pages/contact-consent/contact-consent"
   ],
   "window": {
-    "navigationBarTitleText": "丹阳公益婚恋",
-    "navigationBarBackgroundColor": "#171D72",
+    "navigationBarTitleText": "善缘丹阳",
+    "navigationBarBackgroundColor": "#172A72",
     "navigationBarTextStyle": "white",
     "backgroundColor": "#F4F5FA",
     "backgroundTextStyle": "dark",
diff --git a/miniapp/constants/routeNames.js b/miniapp/constants/routeNames.js
index 69ccebe..0a56a7c 100644
--- a/miniapp/constants/routeNames.js
+++ b/miniapp/constants/routeNames.js
@@ -106,6 +106,8 @@ exports.SERVICE = {
   PROGRAM: '/pages/service-program/service-program',
   HISTORY: '/pages/service-history/service-history',
   COUNSELING: '/pages/my-counseling/my-counseling',
+  REFERRAL_CONFIRMATION: '/pages/referral-confirmation/referral-confirmation',
+  MATCHMAKER_RECOMMENDATIONS: '/pages/matchmaker-recommendations/matchmaker-recommendations',
 };
 // ============ 工作人员/红娘端（规范 §4.7） ============
 exports.OPERATOR = {
diff --git a/miniapp/pages/activity-detail/activity-detail.wxml b/miniapp/pages/activity-detail/activity-detail.wxml
index df2887a..5cdb4b9 100644
--- a/miniapp/pages/activity-detail/activity-detail.wxml
+++ b/miniapp/pages/activity-detail/activity-detail.wxml
@@ -1 +1 @@
-<view class="service-page"><ui-loading wx:if="{{loading}}" mode="skeleton" rows="6"/><ui-error-state wx:elif="{{error}}" title="活动信息加载失败" description="请检查网络后重试" bind:retry="retry"/><block wx:elif="{{activity}}"><view class="activity-hero"><view class="activity-badge">{{activity.typeLabel || '公益活动'}}</view><text class="activity-title">{{activity.title}}</text><text class="activity-slogan">真实相识 · 公益免费 · 尊重意愿</text></view><view class="content"><view class="block"><text class="block-title">活动信息</text><view class="card"><view class="feature-row"><view class="feature-icon">时</view><view class="feature-copy"><text class="feature-title">{{activity.startText}}</text><text class="feature-desc">请提前 15 分钟到场签到</text></view></view><view class="feature-row"><view class="feature-icon">址</view><view class="feature-copy"><text class="feature-title">{{activity.locationName}}</text><text class="feature-desc">{{activity.address}}</text></view></view><view class="feature-row"><view class="feature-icon">额</view><view class="feature-copy"><text class="feature-title">{{activity.quotaText}}</text><text class="feature-desc">报名提交后需等待工作人员审核</text></view><text class="tag">公益免费</text></view></view></view><view class="block"><text class="block-title">活动介绍</text><view class="card"><text class="body-text">{{activity.description}}</text></view></view><view class="block"><text class="block-title">报名须知</text><view class="card"><view wx:for="{{activity.eligibility}}" wx:key="*this" class="rule-row"><text>{{index+1}}</text><text>{{item}}</text></view><view class="notice">不同活动类型的资格要求可能不同，最终以本活动页面和审核结果为准。</view></view></view><view class="block"><text class="block-title">主办信息</text><view class="card"><text class="feature-title">{{activity.organizer}}</text><text class="feature-desc">主办单位关系不会自动授予用户资料访问权限。</text></view></view></view><view class="fixed-action"><view wx:if="{{activity.registrationStatus === 'not_registered'}}" class="primary-btn" bindtap="register">报名参加活动</view><view wx:else class="secondary-btn" bindtap="openMyActivities">查看我的报名</view></view></block></view>
\ No newline at end of file
+<view class="service-page"><ui-loading wx:if="{{loading}}" mode="skeleton" rows="6"/><ui-error-state wx:elif="{{error}}" title="活动信息加载失败" description="请检查网络后重试" bind:retry="retry"/><block wx:elif="{{activity}}"><view class="activity-hero"><view class="activity-badge">{{activity.typeLabel || '公益活动'}}</view><text class="activity-title">{{activity.title}}</text><text class="activity-slogan">真实相识 · 公益免费 · 尊重意愿</text></view><view class="content"><view class="block"><text class="block-title">活动信息</text><view class="card"><text wx:if="{{activity.displayId}}" class="feature-desc">活动编号：{{activity.displayId}}</text><view class="feature-row"><view class="feature-icon">时</view><view class="feature-copy"><text class="feature-title">{{activity.startText}}</text><text class="feature-desc">请提前 15 分钟到场签到</text></view></view><view class="feature-row"><view class="feature-icon">址</view><view class="feature-copy"><text class="feature-title">{{activity.locationName}}</text><text class="feature-desc">{{activity.address}}</text></view></view><view class="feature-row"><view class="feature-icon">额</view><view class="feature-copy"><text class="feature-title">{{activity.quotaText}}</text><text class="feature-desc">报名提交后需等待工作人员审核</text></view><text class="tag">公益免费</text></view></view></view><view class="block"><text class="block-title">活动介绍</text><view class="card"><text class="body-text">{{activity.description}}</text></view></view><view class="block"><text class="block-title">报名须知</text><view class="card"><view wx:for="{{activity.eligibility}}" wx:key="*this" class="rule-row"><text>{{index+1}}</text><text>{{item}}</text></view><view class="notice">不同活动类型的资格要求可能不同，最终以本活动页面和审核结果为准。</view></view></view><view class="block"><text class="block-title">主办信息</text><view class="card"><text class="feature-title">{{activity.organizer}}</text><text class="feature-desc">主办单位关系不会自动授予用户资料访问权限。</text></view></view></view><view class="fixed-action"><view wx:if="{{activity.registrationStatus === 'not_registered'}}" class="primary-btn" bindtap="register">报名参加活动</view><view wx:else class="secondary-btn" bindtap="openMyActivities">查看我的报名</view></view></block></view>
\ No newline at end of file
diff --git a/miniapp/pages/login/login.ts b/miniapp/pages/login/login.ts
index 727add5..689ee3e 100644
--- a/miniapp/pages/login/login.ts
+++ b/miniapp/pages/login/login.ts
@@ -71,6 +71,10 @@ Page({
     wx.navigateTo({ url: '/pages/help-center/help-center?tab=privacy' })
   },
 
+  onOperatorEntry() {
+    wx.navigateTo({ url: ROUTE.OPERATOR.LOGIN })
+  },
+
   onViewTerms() {
     wx.navigateTo({ url: '/pages/help-center/help-center?tab=terms' })
   },
diff --git a/miniapp/pages/login/login.wxml b/miniapp/pages/login/login.wxml
index 3d44977..6144767 100644
--- a/miniapp/pages/login/login.wxml
+++ b/miniapp/pages/login/login.wxml
@@ -7,6 +7,7 @@
   </view>
 
   <view class="login-content">
+    <button bindtap="onOperatorEntry" disabled="{{loggingIn}}">红娘工作人员入口</button>
     <button
       class="login-btn {{loggingIn ? 'loading' : ''}}"
       bindtap="onLoginTap"
diff --git a/miniapp/pages/matchmaker-login/matchmaker-login.js b/miniapp/pages/matchmaker-login/matchmaker-login.js
index b15aa60..759d982 100644
--- a/miniapp/pages/matchmaker-login/matchmaker-login.js
+++ b/miniapp/pages/matchmaker-login/matchmaker-login.js
@@ -38,7 +38,7 @@ Page({
     try {
       const res = await new Promise((resolve, reject) => {
         wx.request({
-          url: `${API_BASE_URL}/operator/auth/login`,
+          url: `${API_BASE_URL}/auth/operator/login`,
           method: 'POST',
           data: {
             username: this.data.username,
diff --git a/miniapp/pages/matchmaker-progress/matchmaker-progress.js b/miniapp/pages/matchmaker-progress/matchmaker-progress.js
index 8768ac1..17f3bff 100644
--- a/miniapp/pages/matchmaker-progress/matchmaker-progress.js
+++ b/miniapp/pages/matchmaker-progress/matchmaker-progress.js
@@ -2,11 +2,13 @@
  * 红娘服务进度页 U35
  */
 const api = require('../../utils/api');
+const { matchmakerService } = require('../../services');
 
 Page({
   data: {
     service: null,
-    loading: true
+    loading: true,
+    confirming: false
   },
 
   onLoad() {
@@ -22,8 +24,10 @@ Page({
     this.setData({ loading: true });
     try {
       const token = wx.getStorageSync('accessToken');
-      const res = await api.get(`/matchmaker/services/${serviceId}`, {}, { Authorization: `Bearer ${token}` });
-      this.setData({ service: res, loading: false });
+      const services = await api.get('/matchmaker/services', {}, { Authorization: `Bearer ${token}` });
+      const service = Array.isArray(services)
+        ? services.find(item => (item.serviceId || item.id) === serviceId) : null;
+      this.setData({ service: service || null, loading: false });
     } catch (err) {
       this.setData({ loading: false });
     }
@@ -44,6 +48,20 @@ Page({
     }
   },
 
+  async onConfirmService() {
+    if (!this.data.service || this.data.service.status !== 'waiting_user' || this.data.confirming) return;
+    this.setData({ confirming: true });
+    try {
+      await matchmakerService.confirmService(this.data.service.serviceId || this.data.service.id);
+      wx.showToast({ title: '已确认', icon: 'success' });
+      await this.loadService(this.data.service.serviceId || this.data.service.id);
+    } catch (err) {
+      wx.showToast({ title: (err && err.message) || '确认失败，请稍后重试', icon: 'none' });
+    } finally {
+      this.setData({ confirming: false });
+    }
+  },
+
   getStatusText(status) {
     const map = {
       'submitted': '已提交，等待分配',
diff --git a/miniapp/pages/matchmaker-progress/matchmaker-progress.wxml b/miniapp/pages/matchmaker-progress/matchmaker-progress.wxml
index 1c38167..a88bed9 100644
--- a/miniapp/pages/matchmaker-progress/matchmaker-progress.wxml
+++ b/miniapp/pages/matchmaker-progress/matchmaker-progress.wxml
@@ -6,6 +6,7 @@
   </view>
 
   <view class="info-card">
+    <view class="info-row"><text class="info-label">服务编号</text><text class="info-value">{{service.displayId || service.serviceDisplayId}}</text></view>
     <view class="info-row">
       <text class="info-label">服务类型</text>
       <text class="info-value">{{getServiceTypeText(service.serviceType)}}</text>
@@ -49,6 +50,12 @@
       </view>
     </view>
   </view>
+
+  <view wx:if="{{service.status === 'waiting_user'}}" class="confirm-card">
+    <text class="confirm-title">红娘已提交服务方案</text>
+    <text class="confirm-desc">确认后将恢复服务跟进。</text>
+    <button class="btn-confirm" loading="{{confirming}}" disabled="{{confirming}}" bindtap="onConfirmService">{{confirming ? '确认中...' : '确认服务方案'}}</button>
+  </view>
 </view>
 
 <view wx:if="{{!loading && !service}}" class="empty">
diff --git a/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.js b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.js
new file mode 100644
index 0000000..d5b32f6
--- /dev/null
+++ b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.js
@@ -0,0 +1,63 @@
+const { matchmakerStore, matchStore, appStore } = require('../../stores');
+const { matchmakerService } = require('../../services');
+const { ROUTE, to } = require('../../constants');
+
+Page({
+  data: { loading: true, actionLoadingId: '', recommendations: [] },
+
+  onShow() { this.load(); },
+
+  async load() {
+    this.setData({ loading: true });
+    try {
+      const result = await matchmakerStore.fetchRecommendations();
+      const items = (result && Array.isArray(result) ? result : matchmakerStore.state.recommendations || [])
+        .map((item) => ({
+          ...item,
+          userId: item.userId || item.targetUserId,
+          displayName: item.displayName || '红娘推荐对象',
+          recommendationReasons: item.reason ? [item.reason] : [],
+        }));
+      this.setData({ recommendations: items, loading: false });
+      items.filter((item) => item.status === 'pending_view' && item.id).forEach((item) => {
+        matchmakerService.markRecommendationViewed(item.id).catch(() => {});
+      });
+    } catch (error) {
+      this.setData({ loading: false });
+      appStore.toastError(error, '加载红娘推荐失败');
+    }
+  },
+
+  onView(e) {
+    const userId = e.detail && e.detail.userId;
+    if (userId) wx.navigateTo({ url: to.detail(userId) });
+  },
+
+  async onLike(e) {
+    await this.respond(e.detail && e.detail.userId, 'like');
+  },
+
+  async onPass(e) {
+    await this.respond(e.detail && e.detail.userId, 'pass');
+  },
+
+  async respond(userId, action) {
+    if (!userId || this.data.actionLoadingId) return;
+    this.setData({ actionLoadingId: userId });
+    try {
+      const result = action === 'like' ? await matchStore.like(userId) : await matchStore.pass(userId);
+      this.setData({ recommendations: this.data.recommendations.filter((item) => item.userId !== userId) });
+      if (action === 'like' && result && result.mutualMatch && result.matchedConversationId) {
+        wx.navigateTo({ url: to.chat(result.matchedConversationId) });
+      } else {
+        appStore.toastSuccess(action === 'like' ? '已表达喜欢' : '已暂不考虑');
+      }
+    } catch (error) {
+      appStore.toastError(error);
+    } finally {
+      this.setData({ actionLoadingId: '' });
+    }
+  },
+
+  onBack() { wx.navigateBack(); },
+});
diff --git a/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.json b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.json
new file mode 100644
index 0000000..a653427
--- /dev/null
+++ b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.json
@@ -0,0 +1 @@
+{"navigationBarTitleText":"红娘推荐","usingComponents":{"ui-nav-bar":"/components/nav-bar/index","ui-recommend-card":"/components/recommend-card/index","ui-loading":"/components/loading/index","ui-empty":"/components/empty/index"}}
diff --git a/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxml b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxml
new file mode 100644
index 0000000..a7c9130
--- /dev/null
+++ b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxml
@@ -0,0 +1,9 @@
+<view class="page">
+  <ui-nav-bar title="红娘推荐" show-back="{{true}}" bind:back="onBack" />
+  <view class="intro">这是红娘根据你的需求提供的候选建议，是否表达喜欢由你本人决定。</view>
+  <ui-loading wx:if="{{loading}}" mode="skeleton" rows="3" />
+  <view wx:elif="{{recommendations.length}}" class="list">
+    <ui-recommend-card wx:for="{{recommendations}}" wx:key="id" recommendation="{{item}}" action-loading="{{actionLoadingId === item.userId}}" bind:view="onView" bind:like="onLike" bind:pass="onPass" />
+  </view>
+  <ui-empty wx:else illustration="heart" title="暂时没有红娘推荐" description="红娘有新的建议后会显示在这里" />
+</view>
diff --git a/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxss b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxss
new file mode 100644
index 0000000..0719961
--- /dev/null
+++ b/miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.wxss
@@ -0,0 +1,3 @@
+.page { min-height: 100vh; padding: 0 24rpx 40rpx; background: var(--color-primary-lighter); box-sizing: border-box; }
+.intro { margin: 24rpx 0; padding: 24rpx; border-radius: 20rpx; background: var(--color-bg-card); color: var(--color-text-secondary); font-size: 26rpx; line-height: 1.6; }
+.list { border-radius: 24rpx; overflow: hidden; background: var(--color-bg-card); }
diff --git a/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js
new file mode 100644
index 0000000..1535fe4
--- /dev/null
+++ b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js
@@ -0,0 +1,75 @@
+const api = require('../../utils/api');
+
+Page({
+  data: {
+    serviceId: '',
+    detail: null,
+    followups: [],
+    followupTypes: ['followup', '需求了解', '候选建议', '活动协助', '其他'],
+    loading: true,
+    submitting: false,
+    form: { followupType: 'followup', content: '', nextFollowupAt: '' },
+  },
+
+  onLoad(options) {
+    const serviceId = options && options.id;
+    if (!serviceId) {
+      wx.showToast({ title: '服务记录不存在', icon: 'none' });
+      wx.navigateBack();
+      return;
+    }
+    this.setData({ serviceId });
+    this.loadDetail();
+  },
+
+  onShow() {
+    if (this.data.serviceId && !this.data.loading) this.loadDetail();
+  },
+
+  tokenHeaders() {
+    const token = wx.getStorageSync('operatorToken');
+    return token ? { Authorization: `Bearer ${token}` } : {};
+  },
+
+  async loadDetail() {
+    this.setData({ loading: true });
+    try {
+      const detail = await api.get(`/operator/matchmaker/services/${this.data.serviceId}`, {}, this.tokenHeaders());
+      this.setData({ detail: detail || null, followups: (detail && detail.followups) || [] });
+    } catch (error) {
+      if (error && (error.code === 'FORBIDDEN' || error.code === 'NOT_FOUND' || error.code === 'DATA_SCOPE_DENIED')) {
+        wx.showModal({ title: '服务权限已变更', content: '该服务对象已结束或不再属于当前服务范围。', showCancel: false,
+          success: () => wx.navigateBack() });
+      } else {
+        wx.showToast({ title: (error && error.message) || '加载失败', icon: 'none' });
+      }
+    } finally {
+      this.setData({ loading: false });
+    }
+  },
+
+  onTypeChange(e) { this.setData({ 'form.followupType': this.data.followupTypes[Number(e.detail.value)] || 'followup' }); },
+  onContentInput(e) { this.setData({ 'form.content': e.detail.value }); },
+  onNextFollowupInput(e) { this.setData({ 'form.nextFollowupAt': e.detail.value }); },
+
+  async submitFollowup() {
+    if (this.data.submitting) return;
+    const content = (this.data.form.content || '').trim();
+    if (!content) { wx.showToast({ title: '请填写服务摘要', icon: 'none' }); return; }
+    this.setData({ submitting: true });
+    try {
+      await api.post(`/operator/matchmaker/services/${this.data.serviceId}/followup`, {
+        followupType: this.data.form.followupType,
+        content,
+        nextFollowupAt: this.data.form.nextFollowupAt || undefined,
+      }, this.tokenHeaders(), api.idempotencyKey('matchmaker-followup', this.data.serviceId));
+      wx.showToast({ title: '已记录服务', icon: 'success' });
+      this.setData({ 'form.content': '', 'form.nextFollowupAt': '' });
+      await this.loadDetail();
+    } catch (error) {
+      wx.showToast({ title: (error && error.message) || '提交失败，请重试', icon: 'none' });
+    } finally {
+      this.setData({ submitting: false });
+    }
+  },
+});
diff --git a/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.json b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.json
new file mode 100644
index 0000000..21fb35b
--- /dev/null
+++ b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.json
@@ -0,0 +1 @@
+{"navigationBarTitleText":"服务对象详情","usingComponents":{}}
diff --git a/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml
new file mode 100644
index 0000000..8c1799b
--- /dev/null
+++ b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml
@@ -0,0 +1,39 @@
+<view class="page">
+  <view wx:if="{{loading}}" class="state">加载中...</view>
+  <block wx:elif="{{detail}}">
+    <view class="card profile-card">
+      <view class="title">服务对象</view>
+      <view class="status">服务编号：{{detail.serviceDisplayId || detail.displayId}}</view>
+      <view wx:if="{{detail.userDisplayNumber}}" class="status">用户编号：{{detail.userDisplayNumber}}</view>
+      <view wx:if="{{detail.userProfile}}" class="profile-grid">
+        <text>展示名：{{detail.userProfile.displayName || '未设置'}}</text>
+        <text>年龄：{{detail.userProfile.age || '未设置'}}</text>
+        <text>地区：{{detail.userProfile.regionName || '未设置'}}</text>
+        <text>婚姻状态：{{detail.userProfile.maritalStatus || '未设置'}}</text>
+      </view>
+      <view class="status">服务状态：{{detail.status}}</view>
+      <view wx:if="{{detail.description}}" class="description">服务需求：{{detail.description}}</view>
+    </view>
+
+    <view class="card">
+      <view class="title">记录服务</view>
+      <picker mode="selector" range="{{followupTypes}}" value="0" bindchange="onTypeChange">
+        <view class="picker">服务类型：{{form.followupType}}</view>
+      </picker>
+      <textarea class="textarea" maxlength="1000" placeholder="只记录完成公益服务所必需的信息" value="{{form.content}}" bindinput="onContentInput"></textarea>
+      <input class="input" placeholder="下次跟进时间（可选，如 2026-10-14 15:30）" value="{{form.nextFollowupAt}}" bindinput="onNextFollowupInput" />
+      <button type="primary" loading="{{submitting}}" disabled="{{submitting}}" bindtap="submitFollowup">保存服务记录</button>
+    </view>
+
+    <view class="card">
+      <view class="title">服务历史</view>
+      <view wx:if="{{followups.length}}">
+        <view wx:for="{{followups}}" wx:key="id" class="history-item">
+          <view>{{item.followupType}} · {{item.createdAt}}</view>
+          <view class="history-content">{{item.content}}</view>
+        </view>
+      </view>
+      <view wx:else class="state">暂无服务记录</view>
+    </view>
+  </block>
+</view>
diff --git a/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxss b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxss
new file mode 100644
index 0000000..9f40102
--- /dev/null
+++ b/miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxss
@@ -0,0 +1 @@
+.page{min-height:100vh;background:#f5f6fa;padding:24rpx;box-sizing:border-box}.card{background:#fff;border-radius:12rpx;padding:28rpx;margin-bottom:20rpx}.title{font-size:32rpx;font-weight:600;color:#20243a;margin-bottom:20rpx}.profile-grid{display:grid;grid-template-columns:1fr 1fr;gap:16rpx;color:#5d637d;font-size:26rpx}.status{margin-top:20rpx;color:#e96b6b;font-size:27rpx}.description{margin-top:16rpx;color:#5d637d;line-height:1.6}.picker,.input,.textarea{border:1rpx solid #e1e4ee;border-radius:8rpx;padding:20rpx;margin-bottom:18rpx;color:#5d637d}.textarea{width:100%;height:180rpx;box-sizing:border-box}.history-item{padding:18rpx 0;border-bottom:1rpx solid #edf0f5;color:#727990;font-size:24rpx}.history-content{margin-top:8rpx;color:#30364e;font-size:27rpx;line-height:1.6}.state{text-align:center;color:#8b91a6;padding:80rpx 20rpx}
diff --git a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.js b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.js
index b9960f6..0f33992 100644
--- a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.js
+++ b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.js
@@ -33,6 +33,17 @@ Page({
     contactAuths: [],
     contactAuthCount: 0,
     submittingAuth: false,
+    referralTasks: [],
+    recommendations: [],
+    referralDialogVisible: false,
+    referralTargetIndex: 0,
+    referralTargetLabels: [],
+    referralTypeIndex: 0,
+    referralTypes: ['服务站', '公益活动'],
+    referralTypeCodes: ['service_station', 'activity'],
+    referralTargetId: '',
+    referralNote: '',
+    submittingReferral: false,
   },
 
   onLoad() {
@@ -64,26 +75,28 @@ Page({
       }
 
       // 加载工作台数据 + 本人服务对象分配（ZC-MM-002：不再调用 /pending，普通红娘无该权限）
-      const [dashRes, assignmentRes] = await Promise.all([
+      const [dashRes, assignmentRes, referralRes, recommendationRes] = await Promise.all([
         api.get('/operator/matchmaker/dashboard', {}, { Authorization: `Bearer ${token}` }),
         api.get('/operator/matchmaker/assignments/my', {}, { Authorization: `Bearer ${token}` }),
+        api.get('/referrals/operator/history', {}, { Authorization: `Bearer ${token}` }),
+        api.get('/operator/matchmaker/recommendations', {}, { Authorization: `Bearer ${token}` }),
       ]);
 
-      if (dashRes.success) {
+      if (dashRes) {
         this.setData({
-          pendingCount: dashRes.data.pendingCount || 0,
-          inProgressCount: dashRes.data.inProgressCount || 0,
-          todayCount: dashRes.data.todayCount || 0,
-          completedCount: dashRes.data.completedCount || 0,
+          pendingCount: dashRes.pendingCount || 0,
+          inProgressCount: dashRes.inProgressCount || 0,
+          todayCount: dashRes.todayCount || 0,
+          completedCount: dashRes.completedCount || 0,
         });
       }
 
-      if (assignmentRes.success) {
-        const assignments = assignmentRes.data || [];
+      if (assignmentRes) {
+        const assignments = assignmentRes || [];
         // 联系授权申请目标 = 本人生效中的分配对象（B1：只能对分配对象发起）
         const targets = assignments.map((a) => ({
           userId: a.userId,
-          label: '用户 ' + String(a.userId).slice(0, 8) + '…（' + (a.assignmentReason || '服务对象') + '）',
+          label: (a.userDisplayNumber || '待实名编号') + '（' + (a.userDisplayName || '服务对象') + '）',
         }));
         this.setData({
           myAssignments: assignments,
@@ -93,6 +106,25 @@ Page({
         });
         this.loadContactAuthorizations();
       }
+      if (referralRes) {
+        this.setData({
+          referralTasks: (referralRes || []).map((item) => ({
+            ...item,
+            typeLabel: item.type === 'activity' ? '公益活动' : '服务站',
+            targetLabel: item.type === 'activity'
+              ? '公益活动转介'
+              : this.serviceTypeLabel(item.serviceType),
+            statusLabel: item.userConfirmedAt ? '用户已确认' : '待用户确认',
+            timeText: this.formatTime(item.createdAt || item.registeredAt),
+          })),
+        });
+      }
+      if (recommendationRes) {
+        this.setData({ recommendations: (recommendationRes || []).map((item) => ({
+          ...item,
+          statusLabel: this.recommendationStatusLabel(item.status),
+        })) });
+      }
     } catch (err) {
       console.error('加载工作台数据失败:', err);
     } finally {
@@ -103,12 +135,66 @@ Page({
   onViewService(e) {
     const serviceId = e.currentTarget.dataset.id;
     if (!serviceId) {
-      // 纯用户级分配（无关联服务单）无处可跳，不拼空参数
+      const index = Number(e.currentTarget.dataset.index);
+      const item = this.data.myAssignments[index] || {};
+      wx.showModal({
+        title: item.userDisplayNumber || '服务对象',
+        content: `${item.userDisplayName || '未设置姓名'}${item.userAge ? `，${item.userAge}岁` : ''}${item.userRegionName ? `，${item.userRegionName}` : ''}\n当前分配未关联服务单，请联系组长补建服务记录。`,
+        showCancel: false,
+      });
       return;
     }
     wx.navigateTo({ url: `/pages/matchmaker-service-detail/matchmaker-service-detail?id=${serviceId}` });
   },
 
+  openReferral() {
+    if (!this.data.myAssignments.length) {
+      wx.showToast({ title: '暂无可转介的服务对象', icon: 'none' });
+      return;
+    }
+    this.setData({
+      referralDialogVisible: true,
+      referralTargetIndex: 0,
+      referralTargetLabels: this.data.myAssignments.map((item) =>
+        `${item.userDisplayNumber || '待实名编号'}（${item.userDisplayName || '服务对象'}）`),
+      referralTypeIndex: 0,
+      referralTargetId: '',
+      referralNote: '',
+    });
+  },
+
+  closeReferral() { this.setData({ referralDialogVisible: false }); },
+  noop() {},
+  onReferralTargetChange(e) { this.setData({ referralTargetIndex: Number(e.detail.value) }); },
+  onReferralTypeChange(e) { this.setData({ referralTypeIndex: Number(e.detail.value) }); },
+  onReferralTargetIdInput(e) { this.setData({ referralTargetId: e.detail.value }); },
+  onReferralNoteInput(e) { this.setData({ referralNote: e.detail.value }); },
+
+  async submitReferral() {
+    if (this.data.submittingReferral) return;
+    const assignment = this.data.myAssignments[this.data.referralTargetIndex];
+    const targetId = (this.data.referralTargetId || '').trim();
+    if (!assignment || !assignment.userId) { wx.showToast({ title: '请选择服务对象', icon: 'none' }); return; }
+    if (!targetId) { wx.showToast({ title: '请填写活动或服务站编号', icon: 'none' }); return; }
+    this.setData({ submittingReferral: true });
+    try {
+      const token = wx.getStorageSync('operatorToken');
+      const type = this.data.referralTypeCodes[this.data.referralTypeIndex];
+      const path = type === 'activity' ? '/referrals/activity' : '/referrals/service-station';
+      const payload = type === 'activity'
+        ? { userId: assignment.userId, activityId: targetId }
+        : { userId: assignment.userId, locationId: targetId, serviceType: 'counselor_consultation', note: this.data.referralNote.trim() };
+      await api.post(path, payload, { Authorization: `Bearer ${token}` }, api.idempotencyKey(`matchmaker-referral:${assignment.userId}:${targetId}`));
+      wx.showToast({ title: '转介已提交，等待用户确认', icon: 'none' });
+      this.setData({ referralDialogVisible: false });
+      await this.loadDashboard();
+    } catch (error) {
+      wx.showToast({ title: (error && error.message) || '转介提交失败', icon: 'none' });
+    } finally {
+      this.setData({ submittingReferral: false });
+    }
+  },
+
   // ==================== ZC-MM-003 / B1：受控联系授权 ====================
 
   /** 本人授权列表（GET /operator/matchmaker/contact-authorizations/my） */
@@ -117,8 +203,8 @@ Page({
       const token = wx.getStorageSync('operatorToken');
       const res = await api.get('/operator/matchmaker/contact-authorizations/my',
         {}, { Authorization: `Bearer ${token}` });
-      if (res.success) {
-        const items = (res.data.list || []).map((item) => Object.assign({}, item, {
+      if (res) {
+        const items = ((res.list || [])).map((item) => Object.assign({}, item, {
           channelLabel: this.contactChannelLabel(item.channel),
           statusLabel: this.contactStatusLabel(item.status),
           expireText: item.expiresAt ? this.formatTime(item.expiresAt) : '',
@@ -145,6 +231,20 @@ Page({
     return labels[code] || code || '';
   },
 
+  serviceTypeLabel(code) {
+    const labels = {
+      counselor_consultation: '婚恋咨询',
+      premarital_counseling: '婚前辅导',
+      legal_consultation: '法律咨询',
+    };
+    return labels[code] || '服务站服务';
+  },
+
+  recommendationStatusLabel(code) {
+    const labels = { pending_view: '待用户查看', viewed: '用户已查看', liked: '用户已喜欢', passed: '用户已跳过', confirmed_mutual: '已双向确认', expired: '已过期' };
+    return labels[code] || code || '未知状态';
+  },
+
   onContactTargetChange(e) { this.setData({ contactTargetIndex: Number(e.detail.value) }); },
   onContactChannelChange(e) { this.setData({ contactChannelIndex: Number(e.detail.value) }); },
   onContactPurposeInput(e) { this.setData({ contactPurpose: e.detail.value }); },
@@ -163,7 +263,7 @@ Page({
       const res = await api.post('/operator/matchmaker/contact-authorizations', {
         userId: target.userId, channel: channel, purpose: purpose,
       }, { Authorization: `Bearer ${token}` });
-      if (res.success) {
+      if (res) {
         wx.showToast({ title: '申请已提交，等待审批', icon: 'none' });
         this.setData({ contactPurpose: '' });
         this.loadContactAuthorizations();
@@ -190,7 +290,7 @@ Page({
           const token = wx.getStorageSync('operatorToken');
           const resp = await api.post(`/operator/matchmaker/contact-authorizations/${id}/revoke`,
             { reason: reason }, { Authorization: `Bearer ${token}` });
-          if (resp.success) {
+          if (resp) {
             wx.showToast({ title: '已撤销', icon: 'none' });
             this.loadContactAuthorizations();
           }
diff --git a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxml b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxml
index 3de4231..21d8838 100644
--- a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxml
+++ b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxml
@@ -16,28 +16,36 @@
   <view class="stats-container">
     <view class="stat-card" hover-class="stat-hover">
       <view class="stat-icon pending">📋</view>
-      <view class="stat-value">{{pendingCount}}</view>
-      <view class="stat-label">待分配</view>
+      <view class="stat-info">
+        <view class="stat-value">{{pendingCount}}</view>
+        <view class="stat-label">待分配</view>
+      </view>
     </view>
     <view class="stat-card" hover-class="stat-hover">
       <view class="stat-icon progress">⏳</view>
-      <view class="stat-value">{{inProgressCount}}</view>
-      <view class="stat-label">进行中</view>
+      <view class="stat-info">
+        <view class="stat-value">{{inProgressCount}}</view>
+        <view class="stat-label">进行中</view>
+      </view>
     </view>
     <view class="stat-card" hover-class="stat-hover">
       <view class="stat-icon completed">✅</view>
-      <view class="stat-value">{{completedCount}}</view>
-      <view class="stat-label">已完成</view>
+      <view class="stat-info">
+        <view class="stat-value">{{completedCount}}</view>
+        <view class="stat-label">已完成</view>
+      </view>
     </view>
     <view class="stat-card" hover-class="stat-hover">
       <view class="stat-icon today">📅</view>
-      <view class="stat-value">{{todayCount}}</view>
-      <view class="stat-label">今日</view>
+      <view class="stat-info">
+        <view class="stat-value">{{todayCount}}</view>
+        <view class="stat-label">今日</view>
+      </view>
     </view>
   </view>
 
   <!-- 我的服务对象分配 -->
-  <view class="section" wx:if="{{!loading}}">
+  <view class="section section-compact" wx:if="{{!loading}}">
     <view class="section-header">
       <view class="section-title-wrap">
         <text class="section-dot"></text>
@@ -52,6 +60,7 @@
         wx:key="id"
         class="service-card"
         data-id="{{item.serviceId}}"
+        data-index="{{index}}"
         bindtap="onViewService"
       >
         <view class="service-left">
@@ -60,18 +69,78 @@
             <view class="service-tag">{{assignmentStatusLabel(item.status)}}</view>
             <view class="service-time">{{formatTime(item.assignedAt)}}</view>
           </view>
-          <view class="service-desc">{{item.assignmentReason}}</view>
+          <view class="service-name">{{item.userDisplayName || '未设置姓名'}} <text wx:if="{{item.userDisplayNumber}}">{{item.userDisplayNumber}}</text></view>
+          <view class="service-desc">{{item.userAge ? item.userAge + '岁 · ' : ''}}{{item.userRegionName || '地区未设置'}}</view>
         </view>
+        <button class="detail-btn" size="mini" catchtap="onViewService" data-id="{{item.serviceId}}" data-index="{{index}}">查看详情</button>
       </view>
     </view>
 
-    <view class="empty-state" wx:else>
+    <view class="empty-state empty-compact" wx:else>
       <view class="empty-illustration">📭</view>
       <view class="empty-text">暂无服务对象分配</view>
       <view class="empty-hint">分配给你的服务对象将在这里展示</view>
     </view>
   </view>
 
+  <view class="section section-compact" wx:if="{{!loading}}">
+    <view class="section-header">
+      <view class="section-title-wrap">
+        <text class="section-dot"></text>
+        <text class="section-title">转介任务</text>
+      </view>
+      <text class="section-count">共{{referralTasks.length}}条</text>
+    </view>
+    <view class="auth-list" wx:if="{{referralTasks.length}}">
+      <view class="auth-card" wx:for="{{referralTasks}}" wx:key="id">
+        <view class="auth-row">
+          <text class="auth-channel">{{item.typeLabel}}</text>
+          <text class="auth-status">{{item.statusLabel}}</text>
+        </view>
+        <view class="auth-purpose">{{item.targetLabel}}</view>
+        <view class="auth-meta">{{item.timeText}}</view>
+      </view>
+    </view>
+    <view class="empty-state empty-compact" wx:else>
+      <view class="empty-text">暂无转介记录</view>
+      <view class="empty-hint">可从服务对象分配发起公益活动或服务站转介</view>
+    </view>
+    <button class="submit-btn referral-open-btn" bindtap="openReferral">发起转介</button>
+  </view>
+
+  <view wx:if="{{referralDialogVisible}}" class="dialog-mask">
+    <view class="dialog-card" catchtap="noop">
+      <view class="dialog-title">发起转介</view>
+      <picker mode="selector" range="{{referralTargetLabels}}" value="{{referralTargetIndex}}" bindchange="onReferralTargetChange">
+        <view class="form-row"><text class="form-label">服务对象</text><text class="form-value">{{referralTargetLabels[referralTargetIndex]}}</text></view>
+      </picker>
+      <picker mode="selector" range="{{referralTypes}}" value="{{referralTypeIndex}}" bindchange="onReferralTypeChange">
+        <view class="form-row"><text class="form-label">转介类型</text><text class="form-value">{{referralTypes[referralTypeIndex]}}</text></view>
+      </picker>
+      <input class="form-input" value="{{referralTargetId}}" bindinput="onReferralTargetIdInput" placeholder="填写活动或服务站编号" />
+      <input wx:if="{{referralTypeIndex === 0}}" class="form-input" value="{{referralNote}}" bindinput="onReferralNoteInput" placeholder="备注（可选）" />
+      <view class="dialog-actions">
+        <button size="mini" bindtap="closeReferral">取消</button>
+        <button size="mini" type="primary" loading="{{submittingReferral}}" bindtap="submitReferral">提交转介</button>
+      </view>
+    </view>
+  </view>
+
+  <view class="section" wx:if="{{!loading}}">
+    <view class="section-header">
+      <view class="section-title-wrap"><text class="section-dot"></text><text class="section-title">推荐进展</text></view>
+      <text class="section-count">共{{recommendations.length}}条</text>
+    </view>
+    <view class="auth-list" wx:if="{{recommendations.length}}">
+      <view class="auth-card" wx:for="{{recommendations}}" wx:key="id">
+        <view class="auth-row"><text class="auth-channel">候选建议</text><text class="auth-status">{{item.statusLabel}}</text></view>
+        <view class="auth-purpose">推荐对象：{{item.targetUserDisplayNumber || '待生成编号'}}</view>
+        <view class="auth-meta">推荐理由：{{item.reason || '未填写'}}</view>
+      </view>
+    </view>
+    <view class="empty-state" wx:else><view class="empty-hint">暂无推荐进展，用户将自行决定喜欢或暂不考虑</view></view>
+  </view>
+
   <!-- 联系授权（ZC-MM-003 / B1：受控联系，用户单独同意后才可生效） -->
   <view class="section" wx:if="{{!loading}}">
     <view class="section-header">
diff --git a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxss b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxss
index d5a4c6f..3d5be24 100644
--- a/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxss
+++ b/miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxss
@@ -54,7 +54,7 @@
   font-size:22rpx;
 }
 
-/* 数据概览 - 2x2 网格 */
+/* 数据概览 - 2x2 紧凑网格（原高度 ~234rpx → 压缩到 ~80rpx，约 1/3） */
 .stats-container {
   display:flex;
   flex-wrap:wrap;
@@ -66,31 +66,51 @@
 
 .stat-card {
   width:calc(50% - 16rpx);
-  margin:0 8rpx 24rpx 8rpx;
+  margin:0 8rpx 16rpx 8rpx;
   background:var(--color-bg-card);
-  border-radius:24rpx;
-  padding:40rpx 20rpx;
-  text-align:center;
-  box-shadow:0 8rpx 32rpx rgba(0,0,0,0.1);
+  border-radius:20rpx;
+  padding:16rpx 20rpx;
+  display:flex;
+  align-items:center;
+  gap:16rpx;
+  box-shadow:0 4rpx 16rpx rgba(0,0,0,0.08);
   box-sizing:border-box;
 }
 
 .stat-icon {
-  font-size:48rpx;
-  margin-bottom:16rpx;
+  font-size:36rpx;
+  flex:none;
+  width:64rpx;
+  height:64rpx;
+  display:flex;
+  align-items:center;
+  justify-content:center;
+  background:var(--color-primary-light);
+  border-radius:16rpx;
+}
+
+.stat-card .stat-icon.progress { background:#FFF6E6; }
+.stat-card .stat-icon.completed { background:#EDF8F1; }
+.stat-card .stat-icon.today { background:#EEF5FF; }
+
+.stat-info {
+  flex:1;
+  min-width:0;
+  display:flex;
+  flex-direction:column;
 }
 
 .stat-value {
-  font-size:56rpx;
+  font-size:40rpx;
   font-weight:700;
   color:var(--color-text-strong);
   line-height:1.2;
-  margin-bottom:8rpx;
 }
 
 .stat-label {
-  font-size:26rpx;
+  font-size:22rpx;
   color:var(--color-text-tertiary);
+  margin-top:4rpx;
 }
 
 /* 列表区块 */
@@ -152,6 +172,7 @@
   border-radius:16rpx;
   border:1rpx solid var(--color-divider);
 }
+.detail-btn{flex:none;margin:0;background:#2f7df6;color:#fff;font-size:22rpx;padding:8rpx 16rpx;line-height:1.6;border-radius:8rpx}
 
 .service-left {
   flex:1;
@@ -222,6 +243,27 @@
   color:var(--color-text-disabled);
 }
 
+/* 紧凑区块：仅“我的服务对象分配 / 转介任务”两栏，垂直高度约为原来的一半 */
+.section-compact {
+  padding:24rpx 32rpx;
+}
+.section-compact .section-header {
+  margin-bottom:12rpx;
+}
+.empty-compact {
+  padding:12rpx 40rpx;
+}
+.empty-compact .empty-illustration {
+  font-size:48rpx;
+  margin-bottom:4rpx;
+}
+.empty-compact .empty-text {
+  margin-bottom:2rpx;
+}
+.section-compact .referral-open-btn {
+  margin-top:8rpx;
+}
+
 /* 加载中 */
 .loading-wrap {
   display:flex;
@@ -281,3 +323,8 @@ min-width:var(--tap-min);}
 .auth-purpose { font-size: 26rpx; color: #5e6d82; margin-top: 8rpx; word-break: break-all; }
 .auth-meta { font-size: 22rpx; color: #b0b3b8; margin-top: 8rpx; }
 .revoke-btn { margin-top: 12rpx; background: #f4f4f5; color: #606266; }
+.referral-open-btn{margin-top:20rpx;width:100%}
+.dialog-mask{position:fixed;z-index:99;left:0;right:0;top:0;bottom:0;background:rgba(0,0,0,.45);display:flex;align-items:center;justify-content:center;padding:32rpx;box-sizing:border-box}
+.dialog-card{width:100%;background:#fff;border-radius:20rpx;padding:28rpx;box-sizing:border-box}
+.dialog-title{font-size:32rpx;font-weight:600;color:#20243a;margin-bottom:20rpx}
+.dialog-actions{display:flex;justify-content:flex-end;gap:16rpx;margin-top:20rpx}
diff --git a/miniapp/pages/matchmaker/matchmaker.ts b/miniapp/pages/matchmaker/matchmaker.ts
index 43b211f..3097396 100644
--- a/miniapp/pages/matchmaker/matchmaker.ts
+++ b/miniapp/pages/matchmaker/matchmaker.ts
@@ -8,7 +8,7 @@
  *   - 推荐：红娘推荐列表跳 fate-center 页（AGENTS 第 5 条：红娘不可替用户操作）
  */
 import { matchmakerStore, appStore } from '../../stores';
-import { ROUTE, to, buildPath, MATCHMAKER_SERVICE_STATUS, MATCHMAKER_SERVICE_STATUS_LABEL } from '../../constants';
+import { ROUTE, to, MATCHMAKER_SERVICE_STATUS, MATCHMAKER_SERVICE_STATUS_LABEL } from '../../constants';
 
 Page({
   data: {
@@ -89,7 +89,7 @@ Page({
   onViewRecommendations(e: any) {
     const serviceId = e.detail.serviceId;
     if (!serviceId) return;
-    wx.navigateTo({ url: buildPath(ROUTE.MAIN.FATE_CENTER, { id: serviceId }) });
+    wx.navigateTo({ url: ROUTE.SERVICE.MATCHMAKER_RECOMMENDATIONS });
   },
 
   onHistoryTap(e: any) {
diff --git a/miniapp/pages/mine/mine.wxml b/miniapp/pages/mine/mine.wxml
index f77d913..82a34a2 100644
--- a/miniapp/pages/mine/mine.wxml
+++ b/miniapp/pages/mine/mine.wxml
@@ -12,6 +12,7 @@
         <view class="profile-copy">
           <view class="profile-name-row"><text class="profile-name">{{profile.displayName || '未填写昵称'}}</text><text class="profile-status">{{relationshipText}}</text></view>
           <text class="profile-meta">资料完整度 {{profileCompleteness}}%</text>
+          <text wx:if="{{profile.userDisplayNumber || profile.displayNumber}}" class="profile-meta">用户编号：{{profile.userDisplayNumber || profile.displayNumber}}</text>
           <view class="profile-progress"><view style="width:{{profileCompleteness}}%"></view></view>
           <view class="profile-badges"><ui-status-badge kind="{{isRealNameVerified ? 'success' : 'warning'}}" label="{{isRealNameVerified ? '已实名' : '未实名'}}" /><ui-status-badge kind="{{isProfileApproved ? 'success' : 'warning'}}" label="{{isProfileApproved ? '资料已审核' : '资料待审核'}}" /></view>
         </view>
@@ -76,4 +77,7 @@
     <view class="logout-row" bindtap="onLogout">退出登录</view>
     <ui-danger-action-dialog visible="{{showLogoutDialog}}" action="{{logoutAction}}" bind:confirm="onConfirmLogout" bind:cancel="onCancelLogout" />
   </block>
+  <view class="list-group">
+    <view class="list-row" bindtap="onSwitchRole"><text class="list-label">红娘工作人员入口</text><image class="list-arrow" src="/assets/icons/ui/chevron-right.png" mode="aspectFit" /></view>
+  </view>
 </view>
diff --git a/miniapp/pages/referral-confirmation/referral-confirmation.js b/miniapp/pages/referral-confirmation/referral-confirmation.js
new file mode 100644
index 0000000..8de9191
--- /dev/null
+++ b/miniapp/pages/referral-confirmation/referral-confirmation.js
@@ -0,0 +1,52 @@
+const { referralService } = require('../../services');
+
+const STATUS_LABEL = {
+  submitted: '待您确认',
+  pending_confirmation: '待您确认',
+  confirmed: '已确认',
+  cancelled: '已取消',
+  completed: '已完成',
+};
+
+Page({
+  data: { loading: true, error: '', referrals: [], confirmingId: '' },
+
+  onShow() { this.load(); },
+
+  async load() {
+    this.setData({ loading: true, error: '' });
+    try {
+      const list = await referralService.getMyReferralHistory();
+      this.setData({
+        referrals: (list || []).map((item) => ({
+          id: item.id,
+          referralDisplayId: item.referralDisplayId,
+          targetType: item.type,
+          title: item.type === 'activity' ? '公益活动转介' : '服务站转介',
+          detail: item.type === 'activity' ? (item.activityDisplayId || '公益活动') : (item.serviceType || '公益服务'),
+          status: item.userConfirmedAt ? 'confirmed' : (item.status || 'pending_confirmation'),
+          statusText: item.userConfirmedAt ? '已确认' : (STATUS_LABEL[item.status] || '待您确认'),
+          createdAt: item.createdAt || item.registeredAt || '',
+        })),
+        loading: false,
+      });
+    } catch (error) {
+      this.setData({ loading: false, error: (error && error.message) || '加载失败，请稍后重试' });
+    }
+  },
+
+  async confirm(e) {
+    const item = this.data.referrals[Number(e.currentTarget.dataset.index)];
+    if (!item || item.status === 'confirmed' || this.data.confirmingId) return;
+    this.setData({ confirmingId: item.id });
+    try {
+      await referralService.confirmReferral(item.id, item.targetType);
+      wx.showToast({ title: '已确认', icon: 'success' });
+      await this.load();
+    } catch (error) {
+      wx.showToast({ title: (error && error.message) || '确认失败，请重试', icon: 'none' });
+    } finally {
+      this.setData({ confirmingId: '' });
+    }
+  },
+});
diff --git a/miniapp/pages/referral-confirmation/referral-confirmation.json b/miniapp/pages/referral-confirmation/referral-confirmation.json
new file mode 100644
index 0000000..65482ff
--- /dev/null
+++ b/miniapp/pages/referral-confirmation/referral-confirmation.json
@@ -0,0 +1 @@
+{"navigationBarTitleText":"公益服务确认","usingComponents":{}}
diff --git a/miniapp/pages/referral-confirmation/referral-confirmation.wxml b/miniapp/pages/referral-confirmation/referral-confirmation.wxml
new file mode 100644
index 0000000..60ca79d
--- /dev/null
+++ b/miniapp/pages/referral-confirmation/referral-confirmation.wxml
@@ -0,0 +1,12 @@
+<view class="page">
+  <view class="hero"><text class="title">待确认的公益服务</text><text class="desc">红娘提供的服务建议，需要由你本人确认后才会生效。</text></view>
+  <view wx:if="{{loading}}" class="empty">正在加载</view>
+  <view wx:elif="{{error}}" class="empty">{{error}}</view>
+  <view wx:elif="{{referrals.length}}" class="list">
+    <view wx:for="{{referrals}}" wx:key="id" class="item">
+      <view class="item-main"><text class="item-title">{{item.title}}</text><text class="item-detail">转介编号：{{item.referralDisplayId}}</text><text class="item-detail">{{item.detail}}</text><text class="item-date">{{item.createdAt}}</text></view>
+      <view class="item-action"><text class="status">{{item.statusText}}</text><button wx:if="{{item.status !== 'confirmed'}}" size="mini" data-index="{{index}}" bindtap="confirm" loading="{{confirmingId === item.id}}">确认转介</button></view>
+    </view>
+  </view>
+  <view wx:else class="empty">暂无待确认的转介</view>
+</view>
diff --git a/miniapp/pages/referral-confirmation/referral-confirmation.wxss b/miniapp/pages/referral-confirmation/referral-confirmation.wxss
new file mode 100644
index 0000000..a126396
--- /dev/null
+++ b/miniapp/pages/referral-confirmation/referral-confirmation.wxss
@@ -0,0 +1,11 @@
+.page { min-height: 100vh; padding: 32rpx; background: var(--color-primary-lighter); box-sizing: border-box; }
+.hero, .item { background: var(--color-bg-card); border-radius: 24rpx; padding: 28rpx; }
+.hero { margin-bottom: 24rpx; }
+.title, .item-title { display: block; color: var(--color-text-strong); font-weight: bold; font-size: 32rpx; }
+.desc, .item-detail, .item-date, .status, .empty { display: block; color: var(--color-text-tertiary); font-size: 26rpx; line-height: 1.6; }
+.desc { margin-top: 12rpx; }
+.item { display: flex; justify-content: space-between; align-items: center; margin-bottom: 20rpx; }
+.item-detail, .item-date { margin-top: 8rpx; }
+.item-action { display: flex; flex-direction: column; align-items: flex-end; gap: 12rpx; margin-left: 20rpx; }
+.status { color: var(--color-primary-solid); white-space: nowrap; }
+.empty { padding: 120rpx 20rpx; text-align: center; }
diff --git a/miniapp/pages/service-center/service-center.wxml b/miniapp/pages/service-center/service-center.wxml
index dfa9336..ecc646a 100644
--- a/miniapp/pages/service-center/service-center.wxml
+++ b/miniapp/pages/service-center/service-center.wxml
@@ -1 +1 @@
-<view class="service-page"><view class="hero"><text class="eyebrow">善缘公益服务</text><text class="hero-title">需要帮助时，我们在这里</text><text class="hero-desc">从线下服务站到专业咨询，所有服务尊重个人意愿与隐私。</text></view><view class="content"><view class="block"><text class="block-title">选择需要的服务</text><text class="block-subtitle">每项服务均清晰说明范围与流程</text><view class="card"><view class="feature-row" data-url="/pages/service-station/service-station" bindtap="go"><view class="feature-icon">站</view><view class="feature-copy"><text class="feature-title">善缘服务站</text><text class="feature-desc">线下咨询、资料协助与活动服务</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/counseling-intro/counseling-intro" bindtap="go"><view class="feature-icon">咨</view><view class="feature-copy"><text class="feature-title">婚恋咨询</text><text class="feature-desc">由咨询人员提供关系与情绪支持</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/premarital-intro/premarital-intro" bindtap="go"><view class="feature-icon">伴</view><view class="feature-copy"><text class="feature-title">婚前辅导</text><text class="feature-desc">帮助伴侣认真讨论共同生活</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/service-program/service-program" bindtap="go"><view class="feature-icon">益</view><view class="feature-copy"><text class="feature-title">专项公益服务</text><text class="feature-desc">面向特定群体的公益支持项目</text></view><text class="arrow">›</text></view></view></view></view></view>
\ No newline at end of file
+<view class="service-page"><view class="hero"><text class="eyebrow">善缘公益服务</text><text class="hero-title">需要帮助时，我们在这里</text><text class="hero-desc">从线下服务站到专业咨询，所有服务尊重个人意愿与隐私。</text></view><view class="content"><view class="block"><text class="block-title">选择需要的服务</text><text class="block-subtitle">每项服务均清晰说明范围与流程</text><view class="card"><view class="feature-row" data-url="/pages/service-station/service-station" bindtap="go"><view class="feature-icon">站</view><view class="feature-copy"><text class="feature-title">善缘服务站</text><text class="feature-desc">线下咨询、资料协助与活动服务</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/counseling-intro/counseling-intro" bindtap="go"><view class="feature-icon">咨</view><view class="feature-copy"><text class="feature-title">婚恋咨询</text><text class="feature-desc">由咨询人员提供关系与情绪支持</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/premarital-intro/premarital-intro" bindtap="go"><view class="feature-icon">伴</view><view class="feature-copy"><text class="feature-title">婚前辅导</text><text class="feature-desc">帮助伴侣认真讨论共同生活</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/service-program/service-program" bindtap="go"><view class="feature-icon">益</view><view class="feature-copy"><text class="feature-title">专项公益服务</text><text class="feature-desc">面向特定群体的公益支持项目</text></view><text class="arrow">›</text></view><view class="feature-row" data-url="/pages/referral-confirmation/referral-confirmation" bindtap="go"><view class="feature-icon">确</view><view class="feature-copy"><text class="feature-title">待确认服务</text><text class="feature-desc">查看红娘为你发起的服务建议</text></view><text class="arrow">›</text></view></view></view></view></view>
diff --git a/miniapp/services/index.js b/miniapp/services/index.js
index 7b595f7..0c65cb0 100644
--- a/miniapp/services/index.js
+++ b/miniapp/services/index.js
@@ -27,6 +27,7 @@ const contentService = require('./contentService');
 const serviceHistoryService = require('./serviceHistoryService');
 // Phase 19：服务站（U50）—— 临时公告只读接入
 const serviceStationService = require('./serviceStationService');
+const referralService = require('./referralService');
 
 module.exports = {
   authService,
@@ -46,4 +47,5 @@ module.exports = {
   contentService,
   serviceHistoryService,
   serviceStationService,
+  referralService,
 };
diff --git a/miniapp/services/matchmakerService.js b/miniapp/services/matchmakerService.js
index 1c433a9..806bd43 100644
--- a/miniapp/services/matchmakerService.js
+++ b/miniapp/services/matchmakerService.js
@@ -37,6 +37,11 @@ function getServiceDetail(serviceId) {
   return api.get(`/matchmaker/services/${encodeURIComponent(serviceId)}`);
 }
 
+function confirmService(serviceId) {
+  return api.post(`/matchmaker/services/${encodeURIComponent(serviceId)}/confirm`, {},
+    undefined, api.idempotencyKey(`matchmaker-confirm:${serviceId}`));
+}
+
 /**
  * 红娘推荐列表（API_INVENTORY 行 105）
  * @param {{ serviceId?: string, cursor?: string, pageSize?: number }} params
@@ -46,9 +51,15 @@ function getRecommendations(params = {}) {
   return api.get('/matchmaker/recommendations', params);
 }
 
+function markRecommendationViewed(recommendationId) {
+  return api.put(`/matchmaker/recommendations/${encodeURIComponent(recommendationId)}/viewed`);
+}
+
 module.exports = {
   applyService,
   getMyServices,
   getServiceDetail,
+  confirmService,
   getRecommendations,
+  markRecommendationViewed,
 };
diff --git a/miniapp/stores/matchmakerStore.js b/miniapp/stores/matchmakerStore.js
index 78283f6..4cbf077 100644
--- a/miniapp/stores/matchmakerStore.js
+++ b/miniapp/stores/matchmakerStore.js
@@ -38,13 +38,24 @@ class MatchmakerStore extends BaseStore {
     });
   }
 
+  /** 将 C 端服务实体字段统一为页面组件契约。 */
+  normalizeService(service) {
+    if (!service) return service;
+    return {
+      ...service,
+      serviceId: service.serviceId || service.id,
+      requirement: service.requirement || service.description || '',
+    };
+  }
+
   /** 拉取我的红娘服务列表 */
   async fetchMyServices(params = {}) {
     if (this.state.servicesLoading) return;
     this.setState({ servicesLoading: true, lastError: null });
     try {
       const result = await matchmakerService.getMyServices(params);
-      const items = result.items || [];
+      // C 端接口当前返回数组；兼容未来分页响应 { items, nextCursor }。
+      const items = (Array.isArray(result) ? result : (result.items || [])).map((item) => this.normalizeService(item));
       const active = items.find(
         (s) =>
           s.status !== MATCHMAKER_SERVICE_STATUS.COMPLETED &&
@@ -52,8 +63,8 @@ class MatchmakerStore extends BaseStore {
       ) || null;
       this.setState({
         myServices: items,
-        servicesCursor: result.nextCursor || null,
-        servicesHasMore: !!result.nextCursor,
+        servicesCursor: Array.isArray(result) ? null : (result.nextCursor || null),
+        servicesHasMore: Array.isArray(result) ? false : !!result.nextCursor,
         servicesLoading: false,
         activeService: active,
       });
@@ -74,9 +85,9 @@ class MatchmakerStore extends BaseStore {
         pageSize: 20,
       });
       this.setState({
-        myServices: [...this.state.myServices, ...(result.items || [])],
-        servicesCursor: result.nextCursor || null,
-        servicesHasMore: !!result.nextCursor,
+        myServices: [...this.state.myServices, ...(Array.isArray(result) ? result : (result.items || [])).map((item) => this.normalizeService(item))],
+        servicesCursor: Array.isArray(result) ? null : (result.nextCursor || null),
+        servicesHasMore: Array.isArray(result) ? false : !!result.nextCursor,
         servicesLoading: false,
       });
     } catch (err) {
@@ -104,10 +115,11 @@ class MatchmakerStore extends BaseStore {
     this.setState({ recommendationsLoading: true, lastError: null });
     try {
       const result = await matchmakerService.getRecommendations(params);
+      const items = Array.isArray(result) ? result : (result.items || []);
       this.setState({
-        recommendations: result.items || [],
-        recommendationsCursor: result.nextCursor || null,
-        recommendationsHasMore: !!result.nextCursor,
+        recommendations: items,
+        recommendationsCursor: Array.isArray(result) ? null : (result.nextCursor || null),
+        recommendationsHasMore: Array.isArray(result) ? false : !!result.nextCursor,
         recommendationsLoading: false,
       });
       return result;
@@ -126,10 +138,11 @@ class MatchmakerStore extends BaseStore {
         cursor: this.state.recommendationsCursor,
         pageSize: 20,
       });
+      const items = Array.isArray(result) ? result : (result.items || []);
       this.setState({
-        recommendations: [...this.state.recommendations, ...(result.items || [])],
-        recommendationsCursor: result.nextCursor || null,
-        recommendationsHasMore: !!result.nextCursor,
+        recommendations: [...this.state.recommendations, ...items],
+        recommendationsCursor: Array.isArray(result) ? null : (result.nextCursor || null),
+        recommendationsHasMore: Array.isArray(result) ? false : !!result.nextCursor,
         recommendationsLoading: false,
       });
     } catch (err) {
diff --git a/miniapp/types/index.d.ts b/miniapp/types/index.d.ts
index 0e79b9c..69ad0ad 100644
--- a/miniapp/types/index.d.ts
+++ b/miniapp/types/index.d.ts
@@ -26,6 +26,10 @@ export interface ApiError {
 
 // ============ User / Profile（规范 §107-108） ============
 export interface User {
+  displayId?: string
+  displayNumber?: string
+  userDisplayNumber?: string
+  serviceDisplayId?: string
   userId: string;
   displayName: string;            // 前台显示：王女士
   age: number;                    // 前台显示：32
@@ -151,6 +155,10 @@ export type RegistrationStatus =
   | 'cancelled';
 
 export interface Activity {
+  displayId?: string
+  displayNumber?: string
+  userDisplayNumber?: string
+  serviceDisplayId?: string
   activityId: string;
   title: string;
   coverUrl?: string;
@@ -185,6 +193,10 @@ export type MatchmakerRecommendationStatus =
   | 'expired';
 
 export interface MatchmakerService {
+  displayId?: string
+  displayNumber?: string
+  userDisplayNumber?: string
+  serviceDisplayId?: string
   serviceId: string;
   userId: string;
   matchmakerId?: string;
diff --git a/miniapp/types/index.ts b/miniapp/types/index.ts
index e834524..03e59fa 100644
--- a/miniapp/types/index.ts
+++ b/miniapp/types/index.ts
@@ -4,6 +4,10 @@
 
 // ===== 用户 & 账号 =====
 export interface User {
+  displayId?: string
+  displayNumber?: string
+  userDisplayNumber?: string
+  serviceDisplayId?: string
   id: string
   wechatOpenid: string
   phone: string | null
@@ -119,6 +123,10 @@ export type MessageStatus = 'sent' | 'delivered' | 'read' | 'failed'
 
 // ===== 活动 =====
 export interface Activity {
+  displayId?: string
+  displayNumber?: string
+  userDisplayNumber?: string
+  serviceDisplayId?: string
   id: string
   title: string
   description: string
diff --git a/tests/admin-dashboard-behavior.cjs b/tests/admin-dashboard-behavior.cjs
new file mode 100644
index 0000000..5f45d36
--- /dev/null
+++ b/tests/admin-dashboard-behavior.cjs
@@ -0,0 +1,35 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const vm = require('node:vm');
+const ts = require('../admin-web/node_modules/typescript');
+
+(async () => {
+  let pending = 2;
+  const responses = {
+    '/operator/analytics/dashboard': { totalUsers: 12, approvedProfiles: 10 },
+    '/operator/analytics/v11-dashboard': { localEligibility: { pending: 99 } },
+    '/operator/activities': [],
+    '/operator/matchmaker/management/services': [
+      { serviceId: 'demo', status: 'waiting_user', userDisplayNumber: 'YH2026051502', latestFollowupContent: 'Demo验收跟进', latestFollowupAt: new Date().toISOString() },
+    ],
+  };
+  const exports = {};
+  const source = fs.readFileSync('admin-web/src/services/dashboard.ts', 'utf8');
+  vm.runInNewContext(ts.transpileModule(source, { compilerOptions: { module: ts.ModuleKind.CommonJS } }).outputText, {
+    exports,
+    require: () => ({ default: { get: async url => ({ success: true, data:
+      url === '/operator/reviews/stats' ? { pending, processing: 1 } : responses[url] }) } }),
+  });
+  const perms = ['analytics.view', 'activity.view', 'matchmaker.view', 'matchmaker.assign', 'review.view'];
+  let model = await exports.loadDashboard(perms);
+  assert.equal(model.metrics.find(m => m.key === 'pending_reviews').value, 3);
+  assert.equal(model.metrics.find(m => m.key === 'matchmaker_todos').value, 1);
+  assert.equal(model.followups[0].content, 'Demo验收跟进');
+  assert.equal(exports.summarizeMatchmakerServices(responses['/operator/matchmaker/management/services']).total, 1);
+  assert.equal(model.metrics.find(m => m.key === 'matchmaker_todos').route, '/matchmaker');
+  pending = 1;
+  model = await exports.loadDashboard(perms);
+  assert.equal(model.metrics.find(m => m.key === 'pending_reviews').value, 2);
+  assert.match(fs.readFileSync('admin-web/src/views/DashboardView.vue', 'utf8'), /onActivated\(retryLoad\)/);
+  console.log('PASS: 审核队列真实计数、审核后减一、管理服务待办与跟进、缓存返回刷新');
+})().catch(error => { console.error(error); process.exitCode = 1; });
diff --git a/tests/e2e/activity_mutual_consent_test.py b/tests/e2e/activity_mutual_consent_test.py
index 05d955b..2439ea5 100644
--- a/tests/e2e/activity_mutual_consent_test.py
+++ b/tests/e2e/activity_mutual_consent_test.py
@@ -97,7 +97,7 @@ def _ensure_activity(which: str = "A") -> str:
         proc = subprocess.run(
             ["docker", "exec", "-i", PG_CONTAINER, "psql", "-U", "postgres", "-d", PG_DB,
              "-v", "ON_ERROR_STOP=1", "-q"],
-            input=seed, capture_output=True, text=True,
+            input=seed, capture_output=True, text=True, encoding="utf-8",
         )
         assert proc.returncode == 0, (
             f"互选前置数据 seed 失败（需要容器 {PG_CONTAINER} 可访问）：\n"
diff --git a/tests/e2e/conftest.py b/tests/e2e/conftest.py
index 17e2675..4762699 100644
--- a/tests/e2e/conftest.py
+++ b/tests/e2e/conftest.py
@@ -51,6 +51,9 @@ class ApiClient:
         params: Optional[Dict[str, Any]] = None,
         headers: Optional[Dict[str, str]] = None,
     ) -> requests.Response:
+        # 登录接口会设置运营 HttpOnly Cookie；无 token 用例必须真正模拟未认证请求。
+        if token is None:
+            self.session.cookies.clear()
         merged = {"Authorization": f"Bearer {token}"} if token else {}
         if headers:
             # 显式传入的头覆盖默认头（幂等键等按用例定制）
@@ -117,10 +120,17 @@ def operator_password() -> str:
 
 
 ADMIN_USERNAME = "e2e_admin"
+# 本机活栈可通过环境变量切换到已授权的演示运营账号；CI 默认仍使用 seed 账号。
+LOGIN_USERNAME = os.environ.get("E2E_OPERATOR_USERNAME", ADMIN_USERNAME)
 
 
 @pytest.fixture(scope="session")
-def admin_token(api: ApiClient, operator_password: str) -> str:
+def admin_password(operator_password: str) -> str:
+    return os.environ.get("E2E_ADMIN_PASSWORD", operator_password)
+
+
+@pytest.fixture(scope="session")
+def admin_token(api: ApiClient, operator_password: str, admin_password: str) -> str:
     """超级管理员 token。
 
     必须使用 **seed 脚本创建的账号**，而不是 `admin`。
@@ -135,10 +145,10 @@ def admin_token(api: ApiClient, operator_password: str) -> str:
     data = api.ok(
         "POST",
         "/auth/operator/login",
-        json={"username": ADMIN_USERNAME, "password": operator_password},
+        json={"username": LOGIN_USERNAME, "password": admin_password},
     )
     token = data.get("accessToken")
-    assert token, f"{ADMIN_USERNAME} 登录未返回 accessToken"
+    assert token, f"{LOGIN_USERNAME} 登录未返回 accessToken"
     return token
 
 
diff --git a/tests/e2e/service_appointment_test.py b/tests/e2e/service_appointment_test.py
index 4971489..d1ad4b9 100644
--- a/tests/e2e/service_appointment_test.py
+++ b/tests/e2e/service_appointment_test.py
@@ -84,7 +84,7 @@ def _ensure_station_seed() -> None:
     proc = subprocess.run(
         ["docker", "exec", "-i", PG_CONTAINER, "psql", "-U", "postgres", "-d", PG_DB,
          "-v", "ON_ERROR_STOP=1", "-q"],
-        input=seed, capture_output=True, text=True,
+        input=seed, capture_output=True, text=True, encoding="utf-8",
     )
     assert proc.returncode == 0, (
         f"服务站前置数据 seed 失败（需要容器 {PG_CONTAINER} 可访问）：\n"
diff --git a/tests/miniapp/matchmaker_entry_contract_test.py b/tests/miniapp/matchmaker_entry_contract_test.py
new file mode 100644
index 0000000..1af48de
--- /dev/null
+++ b/tests/miniapp/matchmaker_entry_contract_test.py
@@ -0,0 +1,24 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerEntryContractTest(unittest.TestCase):
+    def test_user_login_exposes_staff_entry(self):
+        source = (ROOT / "miniapp/pages/login/login.wxml").read_text(encoding="utf-8")
+        script = (ROOT / "miniapp/pages/login/login.ts").read_text(encoding="utf-8")
+        self.assertIn("红娘工作人员入口", source)
+        self.assertIn("onOperatorEntry", source)
+        self.assertIn("ROUTE.OPERATOR.LOGIN", script)
+
+    def test_app_routes_existing_operator_session_to_workbench(self):
+        source = (ROOT / "miniapp/app.js").read_text(encoding="utf-8")
+        self.assertIn("operatorToken", source)
+        self.assertIn("matchmaker-workbench", source)
+        self.assertIn("stores.bootstrap()", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_login_contract_test.py b/tests/miniapp/matchmaker_login_contract_test.py
new file mode 100644
index 0000000..5e4da5f
--- /dev/null
+++ b/tests/miniapp/matchmaker_login_contract_test.py
@@ -0,0 +1,16 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerLoginContractTest(unittest.TestCase):
+    def test_login_uses_public_operator_auth_endpoint(self):
+        source = (ROOT / "miniapp/pages/matchmaker-login/matchmaker-login.js").read_text(encoding="utf-8")
+        self.assertIn("/auth/operator/login", source)
+        self.assertNotIn("/operator/auth/login", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_progress_behavior_test.cjs b/tests/miniapp/matchmaker_progress_behavior_test.cjs
new file mode 100644
index 0000000..172f146
--- /dev/null
+++ b/tests/miniapp/matchmaker_progress_behavior_test.cjs
@@ -0,0 +1,35 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const vm = require('node:vm');
+const path = require('node:path');
+
+(async () => {
+  let page;
+  let status = 'waiting_user';
+  const requests = [];
+  vm.runInNewContext(fs.readFileSync(path.join(__dirname, '../../miniapp/pages/matchmaker-progress/matchmaker-progress.js'), 'utf8'), {
+    Page: definition => { page = definition; },
+    wx: { getStorageSync: () => 'test-token', showToast: () => {} },
+    require: name => name.endsWith('/api') ? {
+      get: async url => {
+        requests.push(url);
+        assert.equal(url, '/matchmaker/services');
+        return [{ id: 'other', status: 'completed' }, { id: 'demo-service', status }];
+      },
+    } : { matchmakerService: { confirmService: async id => {
+      assert.equal(id, 'demo-service');
+      status = 'in_service';
+    } } },
+  });
+  page.setData = values => Object.assign(page.data, values);
+  await page.loadService('demo-service');
+  assert.equal(page.data.service.id, 'demo-service');
+  await page.onConfirmService();
+  assert.equal(page.data.service.status, 'in_service');
+  assert.equal(page.data.confirming, false);
+  assert.equal(requests.length, 2);
+  await page.loadService('missing');
+  assert.equal(page.data.service, null);
+  assert.equal(page.data.loading, false);
+  console.log('PASS: 本人列表定位、确认后刷新及缺失服务处理');
+})().catch(error => { console.error(error); process.exitCode = 1; });
diff --git a/tests/miniapp/matchmaker_recommendation_contract_test.py b/tests/miniapp/matchmaker_recommendation_contract_test.py
new file mode 100644
index 0000000..293a705
--- /dev/null
+++ b/tests/miniapp/matchmaker_recommendation_contract_test.py
@@ -0,0 +1,30 @@
+from pathlib import Path
+import json
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerRecommendationContractTest(unittest.TestCase):
+    def test_recommendation_page_is_registered_and_user_decision_only(self):
+        app = json.loads((ROOT / "miniapp/app.json").read_text(encoding="utf-8"))
+        self.assertIn("pages/matchmaker-recommendations/matchmaker-recommendations", app["pages"])
+        source = (ROOT / "miniapp/pages/matchmaker-recommendations/matchmaker-recommendations.js").read_text(encoding="utf-8")
+        self.assertIn("fetchRecommendations", source)
+        self.assertIn("matchStore.like", source)
+        self.assertIn("matchStore.pass", source)
+        self.assertNotIn("operatorToken", source)
+
+    def test_matchmaker_service_routes_to_dedicated_recommendation_page(self):
+        source = (ROOT / "miniapp/pages/matchmaker/matchmaker.ts").read_text(encoding="utf-8")
+        self.assertIn("MATCHMAKER_RECOMMENDATIONS", source)
+        self.assertNotIn("ROUTE.MAIN.FATE_CENTER, { id: serviceId }", source)
+
+    def test_recommendation_store_accepts_array_api_response(self):
+        source = (ROOT / "miniapp/stores/matchmakerStore.js").read_text(encoding="utf-8")
+        self.assertIn("Array.isArray(result)", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_referral_task_contract_test.py b/tests/miniapp/matchmaker_referral_task_contract_test.py
new file mode 100644
index 0000000..eba5a4f
--- /dev/null
+++ b/tests/miniapp/matchmaker_referral_task_contract_test.py
@@ -0,0 +1,29 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerReferralTaskContractTest(unittest.TestCase):
+    def test_workbench_loads_operator_referral_history(self):
+        source = (ROOT / "miniapp/pages/matchmaker-workbench/matchmaker-workbench.js").read_text(encoding="utf-8")
+        wxml = (ROOT / "miniapp/pages/matchmaker-workbench/matchmaker-workbench.wxml").read_text(encoding="utf-8")
+        self.assertIn("/referrals/operator/history", source)
+        self.assertIn("referralTasks", source)
+        self.assertIn("referralTasks.length", wxml)
+        self.assertIn("{{item.statusLabel}}", wxml)
+        self.assertIn("{{item.targetLabel}}", wxml)
+        self.assertIn("查看详情", wxml)
+        self.assertIn("发起转介", wxml)
+        self.assertIn("/referrals/activity", source)
+        self.assertIn("/referrals/service-station", source)
+        self.assertIn("/operator/matchmaker/recommendations", source)
+        self.assertIn("推荐进展", wxml)
+        self.assertNotIn("matchStore.like", source)
+        self.assertNotIn("matchStore.pass", source)
+        self.assertNotIn("emergencyContactPhone", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_service_card_contract_test.py b/tests/miniapp/matchmaker_service_card_contract_test.py
new file mode 100644
index 0000000..5fbf97b
--- /dev/null
+++ b/tests/miniapp/matchmaker_service_card_contract_test.py
@@ -0,0 +1,17 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerServiceCardContractTest(unittest.TestCase):
+    def test_store_normalizes_api_entity_fields_for_card_navigation(self):
+        source = (ROOT / "miniapp/stores/matchmakerStore.js").read_text(encoding="utf-8")
+        self.assertIn("serviceId: service.serviceId || service.id", source)
+        self.assertIn("requirement: service.requirement || service.description || ''", source)
+        self.assertIn(".map((item) => this.normalizeService(item))", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_service_confirmation_contract_test.py b/tests/miniapp/matchmaker_service_confirmation_contract_test.py
new file mode 100644
index 0000000..40ccfd0
--- /dev/null
+++ b/tests/miniapp/matchmaker_service_confirmation_contract_test.py
@@ -0,0 +1,26 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class MatchmakerServiceConfirmationContractTest(unittest.TestCase):
+    def test_backend_exposes_user_confirmation_and_writes_in_service(self):
+        controller = (ROOT / "backend/src/main/java/com/danyang/match/platform/matchmaker/controller/MatchmakerController.java").read_text(encoding="utf-8")
+        service = (ROOT / "backend/src/main/java/com/danyang/match/platform/matchmaker/service/MatchmakerService.java").read_text(encoding="utf-8")
+        mapper = (ROOT / "backend/src/main/java/com/danyang/match/platform/matchmaker/mapper/MatchmakerServiceMapper.java").read_text(encoding="utf-8")
+        self.assertIn('@PostMapping("/services/{id}/confirm")', controller)
+        self.assertIn("confirmService(id, principal.id())", controller)
+        self.assertIn("confirmWaitingForUser", mapper)
+
+    def test_progress_page_only_offers_confirmation_for_waiting_user(self):
+        source = (ROOT / "miniapp/pages/matchmaker-progress/matchmaker-progress.js").read_text(encoding="utf-8")
+        wxml = (ROOT / "miniapp/pages/matchmaker-progress/matchmaker-progress.wxml").read_text(encoding="utf-8")
+        self.assertIn("confirmService", source)
+        self.assertIn("this.data.service.status !== 'waiting_user'", source)
+        self.assertIn("bindtap=\"onConfirmService\"", wxml)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/miniapp/matchmaker_startup_test.cjs b/tests/miniapp/matchmaker_startup_test.cjs
new file mode 100644
index 0000000..87e93c1
--- /dev/null
+++ b/tests/miniapp/matchmaker_startup_test.cjs
@@ -0,0 +1,30 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const vm = require('node:vm');
+const source = fs.readFileSync('miniapp/app.js', 'utf8');
+
+function launch(token, path) {
+  const calls = [];
+  let app;
+  vm.runInNewContext(source, {
+    require: () => ({
+      bootstrap: () => calls.push('user-bootstrap'),
+      appStore: { init: () => { calls.push('config'); return Promise.resolve(); } },
+    }),
+    App: (definition) => { app = definition; },
+    wx: {
+      getStorageSync: () => token,
+      reLaunch: ({ url }) => calls.push(url),
+    },
+  });
+  app.onLaunch({ path });
+  return calls;
+}
+
+assert.deepEqual(launch('', 'pages/index/index'), ['user-bootstrap']);
+assert.deepEqual(launch('staff-session', 'pages/index/index'), ['config', '/pages/matchmaker-workbench/matchmaker-workbench']);
+for (const path of ['login', 'workbench', 'service-detail']) {
+  assert.deepEqual(launch('', `pages/matchmaker-${path}/matchmaker-${path}`), ['config']);
+}
+assert.deepEqual(launch('', 'pages/matchmaker-progress/matchmaker-progress'), ['user-bootstrap']);
+console.log('PASS: user startup, staff session, staff deep links and user service route');
diff --git a/tests/miniapp/public_id_display_behavior_test.cjs b/tests/miniapp/public_id_display_behavior_test.cjs
new file mode 100644
index 0000000..59159cb
--- /dev/null
+++ b/tests/miniapp/public_id_display_behavior_test.cjs
@@ -0,0 +1,46 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const vm = require('node:vm');
+const path = require('node:path');
+const root = path.resolve(__dirname, '../..');
+function load(file, api, service) {
+  let page;
+  vm.runInNewContext(fs.readFileSync(path.join(root, file), 'utf8'), {
+    Page: value => { page = value; },
+    wx: { getStorageSync: () => 'test', showToast() {}, navigateBack() {} },
+    require: name => name.endsWith('/api') ? api : service,
+  });
+  page.setData = data => Object.assign(page.data, data);
+  return page;
+}
+(async () => {
+  const id = '00000000-0000-0000-0000-000000000001';
+  const calls = [];
+  const service = { referralService: {
+    getMyReferralHistory: async () => [{ id, type: 'activity', activityId: id,
+      activityDisplayId: 'HD20261014001', referralDisplayId: 'ZF20261014001', status: 'pending' }],
+    confirmReferral: async (value, type) => { calls.push({ value, type }); },
+  } };
+  const referral = load('miniapp/pages/referral-confirmation/referral-confirmation.js', {}, service);
+  await referral.load();
+  assert.equal(referral.data.referrals[0].detail, 'HD20261014001');
+  assert.equal(referral.data.referrals[0].referralDisplayId, 'ZF20261014001');
+  await referral.confirm({ currentTarget: { dataset: { index: 0 } } });
+  assert.equal(calls[0].value, id);
+  assert.equal(calls[0].type, 'activity');
+  service.referralService.getMyReferralHistory = async () => [{ id, type: 'activity', activityId: id }];
+  await referral.load();
+  assert.equal(referral.data.referrals[0].detail, '公益活动');
+  const urls = [];
+  const detail = load('miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.js', {
+    get: async url => { urls.push(url); return { serviceId: id, serviceDisplayId: 'FW20261014001', userDisplayNumber: 'YH20261014002', followups: [] }; },
+  }, {});
+  detail.data.serviceId = id;
+  await detail.loadDetail();
+  assert.equal(urls[0], `/operator/matchmaker/services/${id}`);
+  assert.equal(detail.data.detail.serviceDisplayId, 'FW20261014001');
+  const template = fs.readFileSync(path.join(root, 'miniapp/pages/matchmaker-service-detail/matchmaker-service-detail.wxml'), 'utf8');
+  assert(template.includes('detail.serviceDisplayId'));
+  assert(!template.includes('{{detail.serviceId}}'));
+  console.log('PASS: 小程序真实页面脚本显示业务编号、缺号不回退 UUID、确认和详情请求保留内部 UUID。');
+})().catch(error => { console.error(error); process.exitCode = 1; });
diff --git a/tests/miniapp/referral_page_contract_test.py b/tests/miniapp/referral_page_contract_test.py
new file mode 100644
index 0000000..33fc3b3
--- /dev/null
+++ b/tests/miniapp/referral_page_contract_test.py
@@ -0,0 +1,31 @@
+from pathlib import Path
+import json
+import unittest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+class ReferralPageContractTest(unittest.TestCase):
+    def test_referral_confirmation_page_is_registered_and_user_only(self):
+        app = json.loads((ROOT / "miniapp/app.json").read_text(encoding="utf-8"))
+        self.assertIn("pages/referral-confirmation/referral-confirmation", app["pages"])
+        page = ROOT / "miniapp/pages/referral-confirmation/referral-confirmation.js"
+        source = page.read_text(encoding="utf-8")
+        self.assertIn("getMyReferralHistory", source)
+        self.assertIn("confirmReferral", source)
+        self.assertIn("load()", source)
+        self.assertNotIn("operatorToken", source)
+        service_source = (ROOT / "miniapp/services/referralService.js").read_text(encoding="utf-8")
+        self.assertIn("referral-confirm:${targetId}:${targetType}", service_source)
+
+    def test_referral_page_does_not_offer_operator_actions_or_sensitive_fields(self):
+        source = (ROOT / "miniapp/pages/referral-confirmation/referral-confirmation.wxml").read_text(encoding="utf-8")
+        self.assertNotIn("代用户", source)
+        self.assertNotIn("手机号", source)
+        self.assertNotIn("身份证", source)
+        self.assertIn("确认转介", source)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/public-id-display-coverage.cjs b/tests/public-id-display-coverage.cjs
new file mode 100644
index 0000000..99d6cac
--- /dev/null
+++ b/tests/public-id-display-coverage.cjs
@@ -0,0 +1,60 @@
+// shortcut: 静态检查覆盖直接绑定；动态文案和接口映射仍须行为测试与人工验收。
+const fs = require('node:fs');
+const path = require('node:path');
+const assert = require('node:assert/strict');
+const root = path.resolve(__dirname, '..');
+const internal = { test: value => (value.match(/\b(?:id|\w*Id)\b/g) || [])
+  .some(field => !/displayId$/i.test(field)) };
+function scan(source) {
+  const findings = [];
+  const add = (index, kind, value) => findings.push({
+    line: source.slice(0, index).split('\n').length, kind, value
+  });
+  // 脚本和属性保留行数，但不把路由、事件参数、条件判断当可见文本。
+  const markup = source.replace(/<script\b[\s\S]*?<\/script>/g, s => s.replace(/[^\n]/g, ' '));
+  const visible = markup.replace(/<[^>]*>/g, s => s.replace(/[^\n]/g, ' '));
+  for (const match of visible.matchAll(/\{\{([\s\S]*?)\}\}/g)) {
+    if (/^\s*(?:categoryLabel\(row\.categoryId\)|orgMap\[row\.organizationId\](?:\s*\|\|\s*'-')?)\s*$/.test(match[1])) continue;
+    if (internal.test(match[1])) add(match.index, '可见插值需审查', match[1].trim());
+  }
+  for (const match of markup.matchAll(/<el-table-column\b[^>]*\bprop=["']([^"']+)["'][^>]*>/g)) {
+    if (match[1] === 'organizationId' && !match[0].endsWith('/>')) {
+      const end = markup.indexOf('</el-table-column>', match.index);
+      if (end >= 0 && /orgMap\[row\.organizationId\]/.test(markup.slice(match.index, end))) continue;
+    }
+    if (internal.test(match[1])) add(match.index, '表格字段需审查', match[1]);
+  }
+  for (const match of markup.matchAll(/<el-input\b[^>]*\bv-model=["']([^"']+)["'][^>]*>/g)) {
+    if (internal.test(match[1])) add(match.index, '编号输入需解析', match[1]);
+  }
+  return findings;
+}
+function files(dir) {
+  return fs.readdirSync(dir, { withFileTypes: true }).flatMap(entry => {
+    const target = path.join(dir, entry.name);
+    return entry.isDirectory() ? files(target) : /\.(vue|wxml)$/.test(entry.name) ? [target] : [];
+  });
+}
+if (process.argv.includes('--self-check')) {
+  assert.equal(scan('<text>{{item.userId}}</text>').length, 1);
+  assert.equal(scan('<text>{{item.displayId}}</text>').length, 0);
+  assert.equal(scan('<view data-id="{{item.id}}" wx:if="{{item.userId}}">姓名</view>').length, 0);
+  assert.equal(scan('<el-table-column prop="operatorId" label="红娘" />').length, 1);
+  assert.equal(scan('<el-input v-model="form.targetUserId" />').length, 1);
+  assert.equal(scan('<script>const x = "{{item.id}}"</script>').length, 0);
+  assert.equal(scan('<text>{{orgMap[row.organizationId]}}</text>').length, 0);
+  assert.equal(scan('<text>{{otherMap[row.userId]}}</text>').length, 1);
+  assert.equal(scan('<el-table-column prop="organizationId" />').length, 1);
+  console.log('PASS: 9 项检查器自检（仅允许已审查的名称映射）。');
+} else {
+  const targets = ['admin-web/src', 'miniapp/pages', 'miniapp/components'].flatMap(dir => files(path.join(root, dir)));
+  let count = 0;
+  for (const file of targets) {
+    for (const finding of scan(fs.readFileSync(file, 'utf8'))) {
+      console.log(`${path.relative(root, file).replaceAll('\\', '/')}:${finding.line} ${finding.kind}: ${finding.value}`);
+      count++;
+    }
+  }
+  console.log(`${count ? 'FAIL' : 'PASS'}: ${targets.length} 个模板，${count} 个待审查位置。静态结果不代表端到端验收。`);
+  process.exitCode = count ? 1 : 0;
+}
diff --git a/tests/public-id-postgres.cjs b/tests/public-id-postgres.cjs
new file mode 100644
index 0000000..25cacc4
--- /dev/null
+++ b/tests/public-id-postgres.cjs
@@ -0,0 +1,33 @@
+// 使用独立验证库；不写入运营演示库。
+const { execFileSync, execFile } = require('node:child_process');
+const assert = require('node:assert/strict');
+const args = ['exec', 'danyang-match-postgres', 'psql', '-U', 'postgres', '-d', 'public_id_validation', '-v', 'ON_ERROR_STOP=1', '-At', '-c'];
+const sql = query => execFileSync('docker', [...args, query], { encoding: 'utf8' }).trim();
+const parallel = query => new Promise((resolve, reject) => execFile('docker', [...args, query], (error, stdout) => error ? reject(error) : resolve(stdout.trim())));
+(async () => {
+  sql("DELETE FROM public_display_id_counters WHERE local_date='2099-01-01'");
+  const ids = await Promise.all(Array.from({ length: 20 }, () => parallel("SELECT public_next_display_id('RW','2099-01-01')")));
+  assert.equal(new Set(ids).size, 20);
+  assert(ids.every(id => /^RW20990101\d{3}$/.test(id)));
+  assert.equal(sql("SELECT public_next_display_id('YH','2099-01-01','male')"), 'YH20990101001');
+  assert.equal(sql("SELECT public_next_display_id('YH','2099-01-01','male')"), 'YH20990101003');
+  assert.equal(sql("SELECT public_next_display_id('YH','2099-01-01','female')"), 'YH20990101002');
+  sql("UPDATE public_display_id_counters SET last_sequence=998 WHERE prefix='RW' AND local_date='2099-01-01'");
+  assert.equal(sql("SELECT public_next_display_id('RW','2099-01-01')"), 'RW20990101999');
+  assert.throws(() => sql("SELECT public_next_display_id('RW','2099-01-01')"));
+  assert.throws(() => sql("SELECT public_next_display_id('ZZ','2099-01-01')"));
+  assert.throws(() => sql("SELECT public_next_display_id('YH','2099-01-01','unknown')"));
+  sql("BEGIN; SELECT public_next_display_id('HD','2099-01-01'); ROLLBACK;");
+  assert.equal(sql("SELECT COUNT(*) FROM public_display_id_counters WHERE prefix='HD' AND local_date='2099-01-01'"), '0');
+  assert.equal(sql("SELECT COUNT(*) FROM public_display_ids WHERE display_id IS NOT NULL AND display_id !~ '^[A-Z]{2}[0-9]{11}$'"), '0');
+  assert.equal(sql("SELECT COUNT(*) FROM (SELECT display_id FROM public_display_ids WHERE display_id IS NOT NULL GROUP BY display_id HAVING COUNT(*)>1) s"), '0');
+  assert.equal(sql("SELECT COUNT(*) FROM public_display_id_aliases WHERE entity_type IN ('users','operators') AND new_display_id IS NULL"), '0');
+  sql("BEGIN; INSERT INTO matchmaker_followups(id,service_id,operator_id,followup_type,content,created_at) SELECT gen_random_uuid(),id,assigned_operator_id,'system','编号事务测试','2099-01-01' FROM matchmaker_services WHERE assigned_operator_id IS NOT NULL LIMIT 1; SELECT 1 / 0; ROLLBACK;");
+})().catch(error => {
+  // 最后一项故意使事务失败，连接退出自动回滚；检查实体和计数器均未遗留。
+  if (String(error.stderr || error.message).includes('division by zero')) {
+    assert.equal(sql("SELECT COUNT(*) FROM matchmaker_followups WHERE content='编号事务测试'"), '0');
+    assert.equal(sql("SELECT COUNT(*) FROM public_display_id_counters WHERE prefix='GJ' AND local_date='2099-01-01'"), '0');
+    console.log('PASS: PostgreSQL 历史回填、20 路并发、奇偶、999 边界、非法参数和实体事务回滚。');
+  } else { console.error(error.message); process.exitCode = 1; }
+});
diff --git a/tests/public-id-web-live.cjs b/tests/public-id-web-live.cjs
new file mode 100644
index 0000000..e952b72
--- /dev/null
+++ b/tests/public-id-web-live.cjs
@@ -0,0 +1,79 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const { chromium } = require(process.env.PLAYWRIGHT_MODULE || 'C:/Users/13070/.cache/codex-runtimes/codex-primary-runtime/dependencies/node/node_modules/playwright');
+const base = process.env.DEMO_BASE_URL || 'http://localhost:6688';
+const uuid = /[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}/i;
+const code = /^[A-Z]{2}\d{11}$/;
+const output = path.resolve(__dirname, '../.mimosa/public-id-page-evidence');
+fs.mkdirSync(output, { recursive: true });
+(async () => {
+  assert(process.env.DEMO_OPERATOR_PASSWORD, '请通过环境变量提供演示账号密码，不写入测试文件');
+  const browser = await chromium.launch({ channel: 'msedge', headless: true });
+  try {
+    const context = await browser.newContext({ viewport: { width: 1366, height: 768 } });
+    const page = await context.newPage();
+    const errors = [];
+    page.on('pageerror', error => errors.push(error.message));
+    await page.goto(`${base}/admin/login`);
+    await page.getByPlaceholder('请输入用户名').fill(process.env.DEMO_OPERATOR_USERNAME || 'demo_admin');
+    await page.locator('input[type=password]').fill(process.env.DEMO_OPERATOR_PASSWORD);
+    await page.getByRole('button', { name: '登录管理后台' }).click();
+    await page.waitForURL('**/admin/dashboard');
+    const endpoints = [
+      '/operator/users?page=1&pageSize=20', '/operator/operators', '/operator/activities',
+      '/operator/reviews/pending?page=1&pageSize=20', '/operator/risk/reports/pending',
+      '/operator/matchmaker/management/services', '/operator/matchmaker/recommendations',
+      '/service-appointments/operator/list', '/referrals/operator/history',
+      '/activities/operator/activity-interest-summary',
+    ];
+    let checked = 0;
+    const results = [];
+    for (const endpoint of endpoints) {
+      const response = await context.request.get(`${base}/api/v1${endpoint}`);
+      assert(response.ok(), `${endpoint}: HTTP ${response.status()}`);
+      const body = await response.json();
+      assert(body.success, `${endpoint}: ${body.message}`);
+      function inspect(value) {
+        if (!value || typeof value !== 'object') return;
+        for (const [key, child] of Object.entries(value)) {
+          if (/DisplayId$|DisplayNumber$|^displayId$|^displayNumber$/.test(key) && child != null) {
+            assert(code.test(child), `${endpoint}: ${key} 格式错误`); checked++;
+          }
+          if (typeof child === 'object') inspect(child);
+        }
+      }
+      inspect(body.data);
+      results.push({ endpoint, status: response.status() });
+    }
+    assert(checked > 0, '接口没有可验收编号');
+    const pages = [
+      ['users', '用户管理'], ['operators', '系统设置'], ['activities', '活动管理'],
+      ['review', '资料审核'], ['risk/reports', '举报风控'], ['service-appointment', '服务预约'],
+      ['referral', '公益红娘'], ['activities/interests', '匹配管理'], ['matchmaker', '红娘服务'],
+    ];
+    for (const [route, label] of pages) {
+      await page.getByText(label, { exact: true }).first().click();
+      await page.waitForTimeout(300);
+      await page.waitForLoadState('networkidle');
+      assert(!page.url().includes('/login'), `${route}: 被退回登录`);
+      const text = await page.locator('body').innerText();
+      assert(!uuid.test(text), `${route}: 可见文本仍有 UUID`);
+      await page.screenshot({ path: path.join(output, `${route.replaceAll('/', '-')}-1366.png`), fullPage: true });
+      if (route === 'matchmaker') {
+        await page.getByRole('tab', { name: '联系授权审批' }).click();
+        await page.waitForLoadState('networkidle');
+        assert(!uuid.test(await page.locator('body').innerText()), '联系授权仍有 UUID');
+        await page.screenshot({ path: path.join(output, 'contact-authorization-1366.png'), fullPage: true });
+        await page.setViewportSize({ width: 1920, height: 1080 });
+        await page.screenshot({ path: path.join(output, 'contact-authorization-1920.png'), fullPage: true });
+      }
+    }
+    assert.equal(errors.length, 0, `页面运行错误: ${errors.join('; ')}`);
+    const anonymous = await browser.newContext();
+    const denied = await anonymous.request.get(`${base}/api/v1/operator/matchmaker/management/services`);
+    assert([401, 403].includes(denied.status()), '未登录不应读取管理服务');
+    fs.writeFileSync(path.join(output, 'results.json'), JSON.stringify({ results, checkedDisplayFields: checked, pages: 10, anonymousStatus: denied.status(), errors }, null, 2));
+    console.log(`PASS: ${results.length} 类真实接口、${checked} 个展示字段、10 个页面/区域、匿名访问拒绝；截图已保存。`);
+  } finally { await browser.close(); }
+})().catch(error => { console.error(error.message); process.exitCode = 1; });
diff --git a/ui-tests/ui-contracts.mjs b/ui-tests/ui-contracts.mjs
index 6f54d25..8daa949 100644
--- a/ui-tests/ui-contracts.mjs
+++ b/ui-tests/ui-contracts.mjs
@@ -16,8 +16,8 @@ function assertInOrder(source, labels, scope) {
 }
 
 const appConfig = JSON.parse(read('miniapp/app.json'))
-// ZC-MM-003（B1 立项）：contact-consent 联系授权确认页（用户单独明示同意）→ 63 → 64
-assert.equal(appConfig.pages.length, 64, '小程序页面清单必须完整覆盖 64 页')
+// 红娘端页面纳入后，页面清单扩展至 67 页。
+assert.equal(appConfig.pages.length, 67, '小程序页面清单必须完整覆盖 67 页')
 const redesignMatrix = read('docs/UI_REDESIGN_PAGE_MATRIX_V1.1.md')
 for (const page of [
   'pages/index/index', 'pages/discover/discover', 'pages/messages/messages',
@@ -74,7 +74,7 @@ assert.match(activityDetailMarkup, /活动信息/, '活动详情页必须展示
 assert.match(activityDetailMarkup, /报名须知/, '活动详情页必须展示报名须知')
 
 const adminLayout = read('admin-web/src/layouts/MainLayout.vue')
-assert.match(adminLayout, /善缘丹阳/, '后台品牌名称必须为善缘丹阳')
+assert.match(adminLayout, /爱在丹阳/, '后台品牌名称必须为爱在丹阳')
 
 const adminApiContracts = [
   ['admin-web/src/modules/banner/BannerManagementView.vue', '/operator/banners'],
diff --git a/ui-tests/ui-document-baseline-contracts.mjs b/ui-tests/ui-document-baseline-contracts.mjs
index 4a11a8b..dcda473 100644
--- a/ui-tests/ui-document-baseline-contracts.mjs
+++ b/ui-tests/ui-document-baseline-contracts.mjs
@@ -189,7 +189,7 @@ assert.doesNotMatch(
 
 assert.match(
   read('infrastructure/nginx.conf'),
-  /location\s+\/admin\/\s*\{[^}]*proxy_pass\s+http:\/\/admin_web;/,
+  /location\s+\/admin\/\s*\{[^}]*proxy_pass\s+(?:http:\/\/admin_web|\$admin_upstream);/,
   '本地整套栈 nginx 的 /admin/ 未代理到 admin_web（6688 上取不到管理端）',
 )