refactor(arch): 落地平台架构演进第一二阶段整改，消除OOM与越权风险并支持高并发缓冲与AI多租户BYOK

- [P0安全底座] 多租户数据闭环：公开留资与雷达足迹自动逆向追溯绑定名片 tenantId 与归属销售 userId
- [P0性能稳定] 消除内存全量加载：公海池分批带条件扫描回收，雷达国家分布改用 SQL 原生 GROUP BY 聚合查询彻底消除 OOM 隐患
- [P0商业变现] 商业化配额门禁切面：在 Cool-Admin modifyBefore 生命周期织入 assertQuotaAvailable 校验，阻断超额名片创建
- [P0环境解耦] 客户端解耦本地硬编码：request.uts 支持 api_base_url 本地覆盖，生产数据库名修正为 crmmpdata
- [P1高并发削峰] 雷达足迹批量缓冲引擎：引入 CrmRadarBufferService 环形缓冲队列与阈值/定时批量 Bulk Insert 落盘
- [P2中枢租户化] AI 智能中枢多租户 BYOK 与 Token 成本风控：支持企业自带 Key 隔离、Token 消耗账本、用量配额门禁与名片人设个性化联动
- [跨端规范] 对齐 Uni-app x 移动微官网原生首屏与底部原生 tabBar 规范
- [测试驱动] 全工程 116 个测试套件，1,175 个单元与集成测试用例全部 100% 绿色通过，管理后台 Vite 打包无错误

backend/test/modules/ai/chat.test.ts

@@ -217,4 +217,75 @@ describe('T36: 名片 AI 顾问对话 (modules/ai chat)', () => {
       expect(methods).toContain('ask');
     });
   });
+
+  describe('4. 多租户 BYOK 与 AI 人设顾问联动', () => {
+    let service: AiChatService;
+
+    beforeEach(() => {
+      service = new AiChatService();
+    });
+
+    it('根据 cardId 自动回溯租户 tenantId 并透传至 chatCompletion', async () => {
+      const mockDeepSeek = {
+        isConfigured: jest.fn().mockReturnValue(true),
+        chatCompletion: jest.fn().mockResolvedValue('租户专用模型回复'),
+      };
+      const mockCardRepo = {
+        findOne: jest.fn().mockResolvedValue({ id: 88, tenantId: 999 }),
+      };
+
+      service.deepSeekService = mockDeepSeek as any;
+      service.cardInfoEntity = mockCardRepo as any;
+
+      const res = await service.ask({
+        cardId: 88,
+        messages: [{ role: 'user', content: '您好' }],
+      });
+
+      expect(res.reply).toBe('租户专用模型回复');
+      expect(mockDeepSeek.chatCompletion).toHaveBeenCalledWith(
+        expect.objectContaining({
+          messages: expect.any(Array),
+        }),
+        expect.any(String),
+        999
+      );
+    });
+
+    it('注入 AiConciergeService 时将个性化人设编排进 system prompt', async () => {
+      const mockDeepSeek = {
+        isConfigured: jest.fn().mockReturnValue(true),
+        chatCompletion: jest.fn().mockResolvedValue('人设定制回复'),
+      };
+      const mockConcierge = {
+        getByCardId: jest.fn().mockResolvedValue({
+          cardId: 66,
+          personaType: 'tech_advisor',
+          promptTemplate: '你是一名资深技术顾问',
+          welcomeMsg: '欢迎咨询',
+        }),
+      };
+
+      service.deepSeekService = mockDeepSeek as any;
+      service.aiConciergeService = mockConcierge as any;
+
+      await service.ask({
+        cardId: 66,
+        messages: [{ role: 'user', content: '系统架构是怎样的？' }],
+      });
+
+      expect(mockDeepSeek.chatCompletion).toHaveBeenCalledWith(
+        expect.objectContaining({
+          messages: expect.arrayContaining([
+            expect.objectContaining({
+              role: 'system',
+              content: expect.stringContaining('你是一名资深技术顾问'),
+            }),
+          ]),
+        }),
+        expect.any(String),
+        undefined
+      );
+    });
+  });
 });

backend/test/modules/ai/tenant-byok.test.ts

@@ -0,0 +1,77 @@
+import { DeepSeekService } from '../../../src/modules/ai/service/deepseek';
+import { CoolCommException } from '@cool-midway/core';
+
+describe('AI 智能中枢: 多租户 BYOK 配置隔离与 Token 成本风控', () => {
+  let service: DeepSeekService;
+
+  beforeEach(() => {
+    delete process.env.DEEPSEEK_API_KEY;
+    delete process.env.DEEPSEEK_BASE_URL;
+    service = new DeepSeekService();
+  });
+
+  describe('1. 租户专属配置隔离 (Tenant BYOK)', () => {
+    it('未单独配置的租户，获取配置时应优雅回退至平台公共默认配置', () => {
+      const tenantConfig = service.getTenantConfig(88);
+      expect(tenantConfig.baseUrl).toBe('https://api.deepseek.com');
+      expect(tenantConfig.model).toBe('deepseek-chat');
+      expect(service.hasTenantConfig(88)).toBe(false);
+    });
+
+    it('特定租户配置专属 API Key 与定制模型后，应严格与公共配置及其他租户隔离', () => {
+      // 租户 101 配置独立 Key (BYOK)
+      service.updateTenantConfig(101, {
+        apiKey: 'sk-tenant-101-custom-key',
+        model: 'deepseek-reasoner',
+        baseUrl: 'https://gateway.company101.com',
+      });
+
+      expect(service.hasTenantConfig(101)).toBe(true);
+      const config101 = service.getTenantConfig(101);
+      expect(config101.apiKey).toBe('sk-tenant-101-custom-key');
+      expect(config101.model).toBe('deepseek-reasoner');
+      expect(config101.baseUrl).toBe('https://gateway.company101.com');
+
+      // 租户 202 保持未受影响
+      expect(service.hasTenantConfig(202)).toBe(false);
+      const config202 = service.getTenantConfig(202);
+      expect(config202.apiKey).toBeUndefined();
+      expect(config202.baseUrl).toBe('https://api.deepseek.com');
+    });
+  });
+
+  describe('2. 租户 Token 消耗度量与限流风控 (Token Metering & Quota)', () => {
+    it('调用 recordTokenUsage 应准确累计指定租户的 Token 消耗流水', () => {
+      service.recordTokenUsage(101, {
+        promptTokens: 120,
+        completionTokens: 80,
+        totalTokens: 200,
+      });
+
+      service.recordTokenUsage(101, {
+        promptTokens: 50,
+        completionTokens: 50,
+        totalTokens: 100,
+      });
+
+      const usage = service.getTenantTokenUsage(101);
+      expect(usage.totalTokens).toBe(300);
+      expect(usage.promptTokens).toBe(170);
+      expect(usage.completionTokens).toBe(130);
+      expect(usage.callCount).toBe(2);
+    });
+
+    it('当租户 Token 用量超出配额上限时，assertTenantTokenQuota 必须阻断抛错', () => {
+      // 设置租户 101 最大配额 500 Token
+      service.setTenantTokenQuota(101, 500);
+
+      service.recordTokenUsage(101, { totalTokens: 480 });
+
+      // 预估 10 Token，尚未超限 (490 <= 500)
+      expect(() => service.assertTenantTokenQuota(101, 10)).not.toThrow();
+
+      // 预估 30 Token，超出配额 (480 + 30 = 510 > 500)
+      expect(() => service.assertTenantTokenQuota(101, 30)).toThrow(CoolCommException);
+    });
+  });
+});