feat(analytics): 数据分析板块四新表+迁移——stat_daily_staff/敏感词三表/fetched_at 索引

Co-Authored-By: Claude Code <noreply@anthropic.com>

yunke-server/app/db/models.py

@@ -441,6 +441,13 @@ class Message(Base):
             "owner_account_id",
             "timestamp",
         ),
+        # C1 敏感词增量扫描水位:MAX(fetched_at) / fetched_at > 水位 定位新入库
+        # 消息(按消息 timestamp 做水位会永久漏扫增量拉回的历史消息,spec §3.6)。
+        # 「模型+迁移双声明」防 alembic autogenerate 反 DROP。
+        Index(
+            "ix_message_fetched_at",
+            "fetched_at",
+        ),
     )
 
 
@@ -780,6 +787,117 @@ class MsgDailyStats(Base):
     updated_at: Mapped[dt.datetime] = _updated_at()
 
 
+class StatDailyStaff(Base):
+    """员工×日 汇总(stat_daily_staff)— msg_daily_stats 按账号→员工映射的 rollup。
+
+    数据分析板块 v1 地基(2026-09-04 spec §3.1):A1 员工指标直读;A2 绩效
+    (二批)零基建直读。维护见 app/storage/staff_summary.py——4h 调度刷
+    当日+滚动 3 天 + 夜间全量自愈,**不挂写钩子**(rollup-of-rollup 无需
+    实时,滞后语义与「数据截至」角标一致)。映射不上的账号 user_id 存
+    owner_account_id 原值(读侧标注未映射)。day 口径同 msg_daily_stats
+    (Asia/Shanghai yyyymmdd,Python 侧计算)。
+    """
+
+    __tablename__ = "stat_daily_staff"
+
+    day: Mapped[int] = mapped_column(Integer, primary_key=True)
+    channel: Mapped[str] = mapped_column(String(16), primary_key=True)
+    user_id: Mapped[str] = mapped_column(String(64), primary_key=True)
+    msg_sent: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    msg_recv: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    # 当日活跃去重数(账号合并到员工后跨账号去重 peer)
+    active_friends: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    active_rooms: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    updated_at: Mapped[dt.datetime] = _updated_at()
+
+
+class SensitiveWord(Base):
+    """敏感词库(C1)——词库内容是高敏数据,日志禁止输出词内容。"""
+
+    __tablename__ = "sensitive_word"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    word: Mapped[str] = mapped_column(String(64), unique=True)
+    category: Mapped[str | None] = mapped_column(String(32), nullable=True)
+    enabled: Mapped[bool] = mapped_column(
+        Boolean, nullable=False, default=True, server_default=sa.text("1")
+    )
+    # 短于此长度不入库(防单字误报;单字词走 LIKE 回退扫描)
+    min_len: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=2, server_default=sa.text("2")
+    )
+    # JSON 数组:命中行文本含任一排除词则跳过(误报抑制)
+    exclude_words: Mapped[list[Any] | dict[str, Any] | None] = mapped_column(
+        JSON, nullable=True
+    )
+    created_at: Mapped[dt.datetime] = _updated_at()
+    updated_at: Mapped[dt.datetime] = _updated_at()
+
+
+class SensitiveHit(Base):
+    """敏感词命中——冗余 channel/owner/talker/room 跳转字段(不回查 message)。
+
+    UNIQUE(word_id, msg_id) 防重扫重复膨胀;disposition ∈
+    pending/confirmed/false_positive/ignored。
+    """
+
+    __tablename__ = "sensitive_hit"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    word_id: Mapped[int] = mapped_column(
+        sa.ForeignKey("sensitive_word.id", ondelete="CASCADE"), nullable=False
+    )
+    msg_id: Mapped[str] = mapped_column(String(128), nullable=False)
+    channel: Mapped[str] = mapped_column(String(16), nullable=False)
+    owner_account_id: Mapped[str | None] = mapped_column(String(128), nullable=True)
+    talker_id: Mapped[str | None] = mapped_column(String(128), nullable=True)
+    room_id: Mapped[str | None] = mapped_column(String(128), nullable=True)
+    ts: Mapped[int | None] = mapped_column(BigInteger, nullable=True)
+    # 命中词前后文片段(不含全文,控敏)
+    snippet: Mapped[str | None] = mapped_column(String(255), nullable=True)
+    disposition: Mapped[str] = mapped_column(
+        String(16), nullable=False, default="pending", server_default="pending"
+    )
+    created_at: Mapped[dt.datetime] = _updated_at()
+
+    __table_args__ = (
+        sa.UniqueConstraint("word_id", "msg_id", name="uq_sensitive_hit_word_msg"),
+        sa.Index("ix_sensitive_hit_disp_ts", "disposition", "ts"),
+    )
+
+
+class SensitiveScanState(Base):
+    """敏感词扫描水位——entity v1 只有 'message_text'。
+
+    水位存 message.fetched_at(入库时间,DateTime)而非消息 timestamp:
+    增量补扫拉回的历史消息 timestamp 早于水位但 fetched_at 是新的,按
+    timestamp 做水位会永久漏扫(spec §3.6 P2)。
+    """
+
+    __tablename__ = "sensitive_scan_state"
+
+    entity: Mapped[str] = mapped_column(String(32), primary_key=True)
+    last_fetched_at: Mapped[dt.datetime | None] = mapped_column(
+        sa.DateTime, nullable=True
+    )
+    last_run_at: Mapped[dt.datetime | None] = mapped_column(sa.DateTime, nullable=True)
+    scanned: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    hits: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0, server_default=sa.text("0")
+    )
+    updated_at: Mapped[dt.datetime] = _updated_at()
+
+
 __all__ = [
     "ChatGroup",
     "Customer",
@@ -790,8 +908,12 @@ __all__ = [
     "MomentsPost",
     "MsgDailyStats",
     "PhoneCall",
+    "SensitiveHit",
+    "SensitiveScanState",
+    "SensitiveWord",
     "Sms",
     "Staff",
+    "StatDailyStaff",
     "SyncRun",
     "SyncState",
     "VoiceClip",