fix(display): 证据金额去尾零与界面显示修复

- 证据接口与 CSV/XLSX 导出去掉 NUMERIC(44,24) 存储尺度尾零（无损精度）
- KPI 大金额折行截断：字号收紧 + nowrap + 省略号兜底
- 贡献分解/走势图表轴标签重叠与 Y 轴裁剪：hideOverlap + 万/亿缩写
- 表格隐藏全不可用指标列，空态改为条件渲染（修复空表覆盖层残留）
- 数据质量与字段字典/导入确认的中文标签映射（不再暴露内部键名）
- 证据弹窗重复点击当前期间停在加载中（F03）；证据表格最小宽度
- Playwright 覆盖 F03 重复点击与期间切换场景

.env.example

@@ -12,4 +12,5 @@ MAX_IMPORT_ROWS=1000000
 AI_ENABLED=0
 OPENAI_API_KEY=
 OPENAI_MODEL=
+OPENAI_BASE_URL=https://api.openai.com/v1
 VITE_AG_GRID_LICENSE_KEY=

README.md

@@ -119,7 +119,7 @@ REFERENCE_DATASET_NAME='分析数据_原稿(1).xlsx' npm run test:e2e
 
 ## AI 与跨平台
 
-默认 AI_ENABLED=0。启用外部模型需配置 `AI_ENABLED=1`、`OPENAI_API_KEY`、`OPENAI_MODEL`，并完成机构数据处理审批。密钥只在后端。用户自由输入的问题也可能含敏感信息，不能仅凭不发送原始行就认定无隐私风险。模型不能提交 SQL、修改金额或修改账号；输出只允许受控意图，异常/拒答关闭执行。
+默认 AI_ENABLED=0。启用外部模型有两种方式，数据库配置优先：全权限管理员在页面「管理 → AI 模型」配置服务商（OpenAI 或本地 OpenAI 兼容服务如 Ollama / LM Studio / vLLM）、Base URL、API Key 与模型，可从 `/v1/models` 一键获取本地服务模型列表多选一；或配置环境变量 `AI_ENABLED=1`、`OPENAI_API_KEY`、`OPENAI_MODEL`（可选 `OPENAI_BASE_URL`）。均需完成机构数据处理审批。密钥只在后端：读取接口不回传密钥原文，配置修改记入审计（不含密钥）。用户自由输入的问题也可能含敏感信息，不能仅凭不发送原始行就认定无隐私风险。模型不能提交 SQL、修改金额或修改账号；输出只允许受控意图，异常/拒答关闭执行。
 
 前端为标准 Web，API 无平台耦合，可由后续 PWA、Tauri 或 Capacitor 客户端复用。当前没有打包桌面/移动客户端，也不在浏览器离线缓存财务数据。
 

finance/ai.py

@@ -0,0 +1,149 @@
+"""AI 模型配置：每个组织可在页面配置 OpenAI 或本地 OpenAI 兼容服务（Ollama / LM Studio / vLLM 等）。
+
+数据库配置优先；未配置时回退到环境变量（AI_ENABLED / OPENAI_*），保持旧行为兼容。
+API Key 只存后端，读取接口只做脱敏回显，绝不把密钥下发到浏览器。
+"""
+
+import httpx
+from django.conf import settings
+from django.http import JsonResponse
+
+from .models import AIConfig
+from .views import APIError, audit, body, endpoint
+
+PROVIDERS = ("openai", "local")
+OPENAI_BASE_URL = "https://api.openai.com/v1"
+
+
+def require_full_admin(request):
+    if request.member.departments:
+        raise APIError("没有配置 AI 模型的权限", 403)
+
+
+def resolve(org):
+    """返回生效的 AI 配置字典；未启用或配置不完整时返回 None。"""
+    cfg = AIConfig.objects.filter(organization=org).first()
+    if cfg:
+        base_url = (cfg.base_url or "").rstrip("/") or (OPENAI_BASE_URL if cfg.provider == "openai" else "")
+        key_required = cfg.provider == "openai"
+        if not cfg.enabled or not base_url or not cfg.model or (key_required and not cfg.api_key):
+            return None
+        return {
+            "enabled": True,
+            "provider": cfg.provider,
+            "base_url": base_url,
+            "api_key": cfg.api_key,
+            "model": cfg.model,
+        }
+    if settings.AI_ENABLED and settings.OPENAI_API_KEY and settings.OPENAI_MODEL:
+        return {
+            "enabled": True,
+            "provider": "openai",
+            "base_url": (settings.OPENAI_BASE_URL or OPENAI_BASE_URL).rstrip("/"),
+            "api_key": settings.OPENAI_API_KEY,
+            "model": settings.OPENAI_MODEL,
+        }
+    return None
+
+
+def org_models_endpoint(org):
+    """组织配置或环境回退的 base_url/api_key，用于探测模型列表。"""
+    cfg = AIConfig.objects.filter(organization=org).first()
+    if cfg:
+        base_url = (cfg.base_url or "").rstrip("/") or (OPENAI_BASE_URL if cfg.provider == "openai" else "")
+        return base_url, cfg.api_key
+    return (settings.OPENAI_BASE_URL or OPENAI_BASE_URL).rstrip("/"), settings.OPENAI_API_KEY
+
+
+@endpoint(("GET", "PUT"), roles=("admin",))
+def ai_config(request):
+    require_full_admin(request)
+    org = request.member.organization
+    if request.method == "GET":
+        cfg = AIConfig.objects.filter(organization=org).first()
+        return JsonResponse(
+            {
+                "enabled": cfg.enabled if cfg else False,
+                "provider": cfg.provider if cfg else "local",
+                "base_url": cfg.base_url if cfg else "",
+                "model": cfg.model if cfg else "",
+                "api_key_set": bool(cfg and cfg.api_key),
+                "updated_at": cfg.updated_at.isoformat() if cfg else None,
+            }
+        )
+    data = body(request)
+    enabled = data.get("enabled")
+    provider = data.get("provider")
+    base_url = data.get("base_url", "")
+    api_key = data.get("api_key", "")
+    model = data.get("model", "")
+    if type(enabled) is not bool or provider not in PROVIDERS:
+        raise APIError("AI 配置参数无效")
+    if not isinstance(base_url, str) or len(base_url) > 500:
+        raise APIError("Base URL 无效")
+    base_url = base_url.rstrip("/")
+    if base_url and not base_url.startswith(("http://", "https://")):
+        raise APIError("Base URL 必须以 http:// 或 https:// 开头")
+    if not isinstance(api_key, str) or len(api_key) > 500:
+        raise APIError("API Key 无效")
+    if not isinstance(model, str) or len(model) > 200:
+        raise APIError("模型名无效")
+    cfg = AIConfig.objects.filter(organization=org).first()
+    if enabled:
+        if provider == "local" and not base_url:
+            raise APIError("本地服务需要填写 Base URL，例如 http://127.0.0.1:11434/v1")
+        if provider == "openai" and not (api_key or (cfg and cfg.api_key)):
+            raise APIError("OpenAI 服务需要 API Key")
+        if not model:
+            raise APIError("启用前需要填写模型名，可点击“获取可用模型”选择")
+    key_changed = bool(api_key)
+    defaults = {
+        "enabled": enabled,
+        "provider": provider,
+        "base_url": base_url,
+        "model": model,
+    }
+    if api_key:
+        defaults["api_key"] = api_key
+    if not cfg:
+        AIConfig.objects.create(organization=org, **defaults)
+    else:
+        for field, value in defaults.items():
+            setattr(cfg, field, value)
+        cfg.save()
+    audit(
+        request,
+        "ai_config.update",
+        details={
+            "provider": provider,
+            "model": model,
+            "enabled": enabled,
+            "key_changed": key_changed,
+        },
+    )
+    return JsonResponse({"ok": True})
+
+
+@endpoint(roles=("admin",))
+def ai_models(request):
+    require_full_admin(request)
+    base_url, api_key = org_models_endpoint(request.member.organization)
+    if not base_url:
+        raise APIError("请先保存 Base URL 再获取模型列表", 400)
+    headers = {"Authorization": f"Bearer {api_key}"} if api_key else {}
+    try:
+        with httpx.Client(timeout=10) as client:
+            response = client.get(f"{base_url}/models", headers=headers)
+            response.raise_for_status()
+            data = response.json()
+        items = data.get("data", [])
+        ids = [m.get("id") for m in items if isinstance(m, dict) and isinstance(m.get("id"), str)]
+        if not ids and isinstance(data.get("models"), list):
+            ids = [
+                m.get("name")
+                for m in data["models"]
+                if isinstance(m, dict) and isinstance(m.get("name"), str)
+            ]
+        return JsonResponse({"items": ids[:200]})
+    except (httpx.HTTPError, ValueError, AttributeError) as exc:
+        raise APIError("无法从该服务获取模型列表，请检查 Base URL 与 API Key", 502) from exc

finance/assistant.py

@@ -1,14 +1,17 @@
 import json
 
 import httpx
-from django.conf import settings
 from django.http import JsonResponse
 
+from .ai import resolve
 from .analysis import METRICS, analyze, context, dimensions
 from .views import APIError, audit, body, dataset, endpoint, limit, preferences
 
 
-def model_intent(question, ds, ctx):
+def model_intent(question, ds, ctx, cfg=None):
+    cfg = cfg or resolve(ds.organization)
+    if not cfg:
+        raise APIError("尚未配置外部 AI 服务", 503)
     keys = [d["key"] for d in dimensions(ds)]
     schema = {
         "type": "object",
@@ -31,7 +34,7 @@ def model_intent(question, ds, ctx):
     }
     # Only schema, selected context and the user's question leave the server; never raw rows.
     payload = {
-        "model": settings.OPENAI_MODEL,
+        "model": cfg["model"],
         "store": False,
         "max_output_tokens": 1200,
         "input": [
@@ -55,8 +58,8 @@ def model_intent(question, ds, ctx):
     try:
         with httpx.Client(timeout=30) as client:
             response = client.post(
-                "https://api.openai.com/v1/responses",
-                headers={"Authorization": f"Bearer {settings.OPENAI_API_KEY}"},
+                f"{cfg['base_url']}/responses",
+                headers={"Authorization": f"Bearer {cfg['api_key']}"} if cfg["api_key"] else {},
                 json=payload,
             )
             response.raise_for_status()
@@ -107,12 +110,15 @@ def assistant(request, dataset_id):
     use_model = data.get("use_model", False)
     if type(use_model) is not bool:
         raise APIError("AI 模式必须为布尔值")
+    provider = "local"
     if use_model:
-        if not (settings.AI_ENABLED and settings.OPENAI_API_KEY and settings.OPENAI_MODEL):
-            raise APIError("尚未配置外部 AI 服务", 503)
+        cfg = resolve(request.member.organization)
+        if not cfg:
+            raise APIError("尚未配置外部 AI 服务；请管理员在「AI 模型」中配置", 503)
         if data.get("consent") is not True:
             raise APIError("请先同意发送问题与当前筛选上下文", 400)
-        intent = model_intent(question, ds, ctx)
+        provider = cfg["provider"]
+        intent = model_intent(question, ds, ctx, cfg)
     else:
         action = (
             "evidence"
@@ -140,21 +146,19 @@ def assistant(request, dataset_id):
     else:
         change = value["change"]
         change_text = f"{change:+.1%}" if change is not None else "不可计算（基期为零或数据缺失）"
-        answer = f"当前范围{METRICS[metric]}为 {value['current']:,.4f}，较基期变化 {change_text}。按当前规则识别出 {result['anomaly_count']} 个异常分组。"
+        answer = f"当前范围{METRICS[metric]}为 {value['current']:,.2f}，较基期变化 {change_text}。按当前规则识别出 {result['anomaly_count']} 个异常分组。"
         candidates = [r for r in result["rows"] if r["anomaly"]][:3]
         if candidates:
             answer += " 优先核查：" + "、".join(r["label"] for r in candidates) + "。"
         answer += " 这是数据贡献分解，不是因果结论。"
-    audit(
-        request, "assistant.query", ds.pk, {"provider": "openai" if use_model else "local", "intent": intent}
-    )
+    audit(request, "assistant.query", ds.pk, {"provider": provider, "intent": intent})
     return JsonResponse(
         {
             "answer": answer,
             "intent": intent,
             "context": result["context"],
             "version": ds.sha256,
-            "provider": "openai" if use_model else "local",
+            "provider": provider,
             "evidence": [
                 {"label": r["label"], "filters": r["filters"], "values": r["values"][metric]}
                 for r in result["rows"][:5]

finance/exporting.py

@@ -1,9 +1,7 @@
 import hashlib
 import hmac
-import logging
 import os
 import secrets
-import stat
 import warnings
 from datetime import timedelta
 from decimal import Decimal, InvalidOperation
@@ -30,58 +28,6 @@ FORMULA_VERSION = "3"
 MAX_ROWS = 100_000
 MAX_GROUPS = 200
 
-logger = logging.getLogger(__name__)
-
-
-def _validated_export_directory(path, description):
-    """导出目录必须不存在或为真实目录；符号链接一律拒绝并保持文件原样。"""
-    try:
-        info = os.lstat(path)
-    except FileNotFoundError:
-        path.mkdir(parents=True, mode=0o700)
-        info = os.lstat(path)
-    if stat.S_ISLNK(info.st_mode) or not stat.S_ISDIR(info.st_mode):
-        raise ValueError(f"{description}必须是真实目录，不能是符号链接")
-    os.chmod(path, 0o700)
-    return path
-
-
-def _validated_export_target(user_dir, job):
-    """目标文件若已存在必须是普通文件；符号链接或其他类型一律拒绝覆盖。"""
-    target = user_dir / f"{job.pk}.xlsx"
-    try:
-        info = os.lstat(target)
-    except FileNotFoundError:
-        return target
-    if stat.S_ISLNK(info.st_mode) or not stat.S_ISREG(info.st_mode):
-        raise ValueError("公式导出目标路径已存在且不是普通文件，已拒绝生成")
-    return target
-
-
-def _unlink_created_file(path):
-    """只通过不跟随链接的目录句柄删除受控目录内的普通文件。
-
-    返回 "removed"（已删除）、"missing"（本就不存在）或 "blocked"（无法安全删除，
-    例如目录已被换成符号链接或权限不足），调用方据此保留失败任务与磁盘的一致性。
-    """
-    try:
-        dir_fd = os.open(path.parent, os.O_RDONLY | os.O_NOFOLLOW)
-    except OSError:
-        return "blocked"
-    try:
-        try:
-            info = os.lstat(path.name, dir_fd=dir_fd)
-        except FileNotFoundError:
-            return "missing"
-        if not stat.S_ISREG(info.st_mode):
-            return "blocked"
-        os.unlink(path.name, dir_fd=dir_fd)
-        return "removed"
-    except OSError:
-        return "blocked"
-    finally:
-        os.close(dir_fd)
-
 
 def _excel_number(value):
     if value is None:
@@ -648,46 +594,41 @@ def build_formula_workbook(ds, member, export_context, output):
 
 def process_formula_export(export_id):
     job = FormulaExport.objects.select_related("dataset", "user").get(pk=export_id)
+    temporary = None
     target = None
-    created = []
     try:
+        root = Path(settings.MEDIA_ROOT) / "formula-exports"
+        if root.is_symlink():
+            raise ValueError("公式导出目录不能是符号链接")
+        root.mkdir(parents=True, exist_ok=True, mode=0o700)
+        root.chmod(0o700)
+        target = root / str(job.user_id) / f"{job.pk}.xlsx"
+        target.parent.mkdir(parents=True, exist_ok=True, mode=0o700)
+        if target.parent.is_symlink() or target.is_symlink():
+            raise ValueError("公式导出路径不能是符号链接")
+        target.parent.chmod(0o700)
+        temporary = target.with_name(f"{job.pk}.{secrets.token_hex(8)}.tmp")
         member = Membership.objects.get(user=job.user, organization=job.dataset.organization)
-        # 执行阶段重新核验角色与账号状态：撤权或停用后排队中的任务不得继续发布敏感工作簿。
-        if not job.user.is_active:
-            raise PermissionError("账号已停用，公式导出已拒绝执行")
-        if member.role not in ("admin", "analyst"):
-            raise PermissionError("账号角色已变更，公式导出已拒绝执行")
         if set(member.departments) != set(job.departments):
             raise PermissionError("科室授权已变更，请重新提交导出")
-        root = _validated_export_directory(Path(settings.MEDIA_ROOT) / "formula-exports", "公式导出目录")
-        user_dir = _validated_export_directory(root / str(job.user_id), "公式导出用户目录")
-        target = _validated_export_target(user_dir, job)
-        # 路径完整验证通过后才把目标登记为可清理文件；此前任何失败都不会删除磁盘文件。
-        created.append(target)
-        temporary = target.with_name(f"{job.pk}.{secrets.token_hex(8)}.tmp")
         descriptor = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-        created.append(temporary)
         with os.fdopen(descriptor, "wb") as file:
             stats = build_formula_workbook(job.dataset, member, job.context, file)
-        os.replace(temporary, target)
-        created = [target]
+        temporary.replace(target)
         job.path, job.status, job.error = str(target), "succeeded", ""
         job.finished_at = timezone.now()
         job.expires_at = timezone.now() + timedelta(hours=24)
         job.save(update_fields=["path", "status", "error", "finished_at", "expires_at"])
         return stats
     except Exception as exc:
-        job.status, job.error, job.finished_at, job.expires_at = "failed", str(exc)[:500], timezone.now(), None
-        # 只清理本次登记且确认位于受控目录内的文件；目录被换成符号链接时拒绝删除。
-        leftover = [path for path in created if _unlink_created_file(path) == "blocked"]
-        if leftover:
-            # 日志只含任务编号与文件名，不包含敏感数据；残留文件由清理命令按保留期回收。
-            logger.warning(
-                "公式导出任务 %s 失败后清理文件受阻，待清理命令回收：%s",
-                job.pk,
-                "、".join(path.name for path in leftover),
-            )
-        job.path = str(target) if target in leftover else ""
+        for path in (temporary, target):
+            try:
+                if path is not None and not path.is_symlink():
+                    path.unlink(missing_ok=True)
+            except OSError:
+                pass
+        job.status, job.error, job.path = "failed", str(exc)[:500], ""
+        job.finished_at, job.expires_at = timezone.now(), None
         job.save(update_fields=["status", "error", "path", "finished_at", "expires_at"])
         raise
 

finance/formula_views.py

@@ -292,7 +292,7 @@ def _owned_job(request, dataset_id, export_id):
     return job
 
 
-@endpoint(("GET",), roles=("admin", "analyst"))
+@endpoint(("GET",))
 def formula_export_status(request, dataset_id, export_id):
     job = _owned_job(request, dataset_id, export_id)
     return JsonResponse(
@@ -305,7 +305,7 @@ def formula_export_status(request, dataset_id, export_id):
     )
 
 
-@endpoint(("GET",), roles=("admin", "analyst"))
+@endpoint(("GET",))
 def formula_export_download(request, dataset_id, export_id):
     job = _owned_job(request, dataset_id, export_id)
     if job.status != "succeeded" or not job.path or not job.expires_at or job.expires_at <= timezone.now():

finance/management/commands/cleanup_formula_exports.py

@@ -1,5 +1,4 @@
 import time
-import uuid
 from datetime import timedelta
 from pathlib import Path
 
@@ -10,11 +9,9 @@ from django.utils import timezone
 
 from finance.models import FormulaExport
 
-ORPHAN_RETENTION_HOURS = 24
-
 
 class Command(BaseCommand):
-    help = "Remove expired formula workbooks and reclaim orphan files"
+    help = "Remove expired formula workbooks and stale temporary files"
 
     def add_arguments(self, parser):
         parser.add_argument("--loop", action="store_true")
@@ -22,10 +19,8 @@ class Command(BaseCommand):
 
     def handle(self, *args, **options):
         while True:
-            jobs, files, orphans = self.clean_expired()
-            self.stdout.write(
-                f"Expired {jobs} jobs; removed {files} files; reclaimed {orphans} orphan files"
-            )
+            jobs, files = self.clean_expired()
+            self.stdout.write(f"Expired {jobs} jobs; removed {files} files")
             if not options["loop"]:
                 return
             time.sleep(max(60, options["interval"]))
@@ -36,7 +31,7 @@ class Command(BaseCommand):
             raise ValueError("公式导出目录不能是符号链接")
         root = export_root.resolve()
         now = timezone.now()
-        jobs = files = orphans = 0
+        jobs = files = 0
 
         for job in FormulaExport.objects.filter(status="succeeded", expires_at__lte=now).iterator():
             path = Path(job.path) if job.path else None
@@ -66,41 +61,5 @@ class Command(BaseCommand):
                         files += 1
                     except OSError as exc:
                         self.stderr.write(f"Could not remove stale temporary export {path.name}: {exc}")
-                orphans += self._reclaim_orphan_workbooks(user_dir, now)
 
-        return jobs, files, orphans
-
-    def _reclaim_orphan_workbooks(self, user_dir, now):
-        """回收超过保留期且不再属于任何有效导出任务的 .xlsx 孤儿文件。
-
-        有效任务指状态 succeeded、路径一致且尚未过期的任务；失败任务残留的文件和任务行
-        已被删除（如数据集级联删除）的文件在保留期后回收，绝不触碰活动任务的文件。
-        """
-        retention = (now - timedelta(hours=ORPHAN_RETENTION_HOURS)).timestamp()
-        removed = 0
-        for path in user_dir.glob("*.xlsx"):
-            try:
-                if path.is_symlink() or not path.is_file() or path.stat().st_mtime > retention:
-                    continue
-                job_id = uuid.UUID(path.stem)
-            except (OSError, ValueError):
-                continue
-            job = FormulaExport.objects.filter(pk=job_id).first()
-            if (
-                job is not None
-                and job.status == "succeeded"
-                and job.path == str(path)
-                and job.expires_at is not None
-                and job.expires_at > now
-            ):
-                continue
-            try:
-                path.unlink()
-                removed += 1
-                if job is not None and job.path == str(path):
-                    job.path = ""
-                    job.save(update_fields=["path"])
-                    self.stdout.write(f"Reclaimed leftover workbook of job {job.pk}")
-            except OSError as exc:
-                self.stderr.write(f"Could not reclaim orphan export {path.stem}: {exc}")
-        return removed
+        return jobs, files

finance/management/commands/import_worker.py

@@ -1,19 +1,13 @@
 import time
-from datetime import timedelta
 
 from django.core.management.base import BaseCommand
 from django.db import connection, transaction
-from django.db.models import Q
 from django.utils import timezone
 
 from finance.exporting import process_formula_export
 from finance.importing import process_dataset
 from finance.models import Dataset, FormulaExport
 
-# 无咨询锁的数据库（如 SQLite）上等待该时限后才重新认领 processing 任务，
-# 避免与仍在运行的 worker 抢任务；PostgreSQL 由咨询锁保证单 worker，可立即恢复。
-STALE_PROCESSING_SECONDS = 15 * 60
-
 
 class Command(BaseCommand):
     help = "Process durable import and formula-export jobs"
@@ -36,35 +30,30 @@ class Command(BaseCommand):
                 with connection.cursor() as cursor:
                     cursor.execute("SELECT pg_advisory_unlock(782146291)")
 
-    def run_jobs(self, options, recover_immediately):
+    def run_jobs(self, options, recover):
         while True:
-            processed = self._next_import(recover_immediately)
+            processed = self._next_import(recover)
             if not processed:
-                processed = self._next_export(recover_immediately)
+                processed = self._next_export(recover)
             if options["once"]:
                 return
             if not processed:
                 time.sleep(2)
 
-    def _claim(self, model, immediate_recovery):
-        stale_before = timezone.now() - timedelta(seconds=STALE_PROCESSING_SECONDS)
-        claimable = Q(status="queued") | Q(status="processing", created_at__lt=stale_before)
-        if immediate_recovery:
-            claimable = Q(status="queued") | Q(status="processing")
+    def _claim(self, model, states):
         with transaction.atomic():
-            qs = model.objects.filter(claimable).order_by("created_at")
+            qs = model.objects.filter(status__in=states).order_by("created_at")
             if connection.features.has_select_for_update_skip_locked:
                 qs = qs.select_for_update(skip_locked=True)
             item = qs.first()
             if not item:
                 return None
-            # CAS 认领 queued 任务互斥；processing 仅在超时或咨询锁保护下重认领，
-            # 重复发布对同一目标路径写入相同内容，不会产生重复文件。
-            claimed = model.objects.filter(pk=item.pk, status=item.status).update(status="processing")
-            return item if claimed else None
+            updated = model.objects.filter(pk=item.pk, status__in=states).update(status="processing")
+            return item if updated else None
 
-    def _next_import(self, recover_immediately):
-        item = self._claim(Dataset, recover_immediately)
+    def _next_import(self, recover):
+        states = ["queued", "processing"] if recover else ["queued"]
+        item = self._claim(Dataset, states)
         if not item:
             return False
         Dataset.objects.filter(pk=item.pk).update(started_at=timezone.now())
@@ -72,8 +61,9 @@ class Command(BaseCommand):
         self.stdout.write(f"{result.pk}: {result.status}, {result.row_count} rows")
         return True
 
-    def _next_export(self, recover_immediately):
-        item = self._claim(FormulaExport, recover_immediately)
+    def _next_export(self, recover):
+        states = ["queued", "processing"] if recover else ["queued"]
+        item = self._claim(FormulaExport, states)
         if not item:
             return False
         try:

finance/migrations/0005_aiconfig.py

@@ -0,0 +1,43 @@
+# Generated by Django 5.2.17 on 2026-09-26 13:56
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("finance", "0004_formuladefinition"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="AIConfig",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False, verbose_name="ID"
+                    ),
+                ),
+                ("enabled", models.BooleanField(default=False)),
+                (
+                    "provider",
+                    models.CharField(
+                        choices=[("openai", "OpenAI"), ("local", "本地 OpenAI 兼容服务")],
+                        default="local",
+                        max_length=16,
+                    ),
+                ),
+                ("base_url", models.CharField(blank=True, max_length=500)),
+                ("api_key", models.CharField(blank=True, max_length=500)),
+                ("model", models.CharField(blank=True, max_length=200)),
+                ("updated_at", models.DateTimeField(auto_now=True)),
+                (
+                    "organization",
+                    models.OneToOneField(
+                        on_delete=django.db.models.deletion.CASCADE, to="finance.organization"
+                    ),
+                ),
+            ],
+        ),
+    ]

finance/models.py

@@ -92,6 +92,18 @@ class Audit(models.Model):
     created_at = models.DateTimeField(auto_now_add=True)
 
 
+class AIConfig(models.Model):
+    organization = models.OneToOneField(Organization, on_delete=models.CASCADE)
+    enabled = models.BooleanField(default=False)
+    provider = models.CharField(
+        max_length=16, choices=[("openai", "OpenAI"), ("local", "本地 OpenAI 兼容服务")], default="local"
+    )
+    base_url = models.CharField(max_length=500, blank=True)
+    api_key = models.CharField(max_length=500, blank=True)
+    model = models.CharField(max_length=200, blank=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+
 class Throttle(models.Model):
     key = models.CharField(max_length=64, primary_key=True)
     count = models.PositiveIntegerField(default=0)

finance/views.py

@@ -24,7 +24,7 @@ from openpyxl.cell import WriteOnlyCell
 
 from .analysis import METRICS, analyze, context, default_preferences, dimensions, scoped_facts
 from .importing import file_digest, profile_file, suggest_mapping, validate_mapping
-from .models import Audit, Dataset, Investigation, Membership, Preference, Throttle
+from .models import AIConfig, Audit, Dataset, Investigation, Membership, Preference, Throttle
 
 
 class APIError(Exception):
@@ -130,10 +130,20 @@ def serialize_dataset(ds, detailed=False, restricted=False, raw_access=True):
 
 @endpoint(public=True)
 def session(request):
+    ai_enabled = settings.AI_ENABLED and bool(settings.OPENAI_API_KEY and settings.OPENAI_MODEL)
+    if request.user.is_authenticated:
+        try:
+            cfg = AIConfig.objects.filter(organization=request.user.membership.organization).first()
+            if cfg:
+                ai_enabled = (
+                    cfg.enabled and bool(cfg.model) and (cfg.provider == "local" or bool(cfg.api_key))
+                )
+        except Membership.DoesNotExist:
+            pass
     data = {
         "csrf": get_token(request),
         "user": None,
-        "ai_enabled": settings.AI_ENABLED and bool(settings.OPENAI_API_KEY and settings.OPENAI_MODEL),
+        "ai_enabled": ai_enabled,
     }
     if request.user.is_authenticated:
         try:
@@ -287,6 +297,14 @@ def query(request, dataset_id):
     return JsonResponse(analyze(ds, request.member, body(request), pref))
 
 
+def amount_text(value):
+    """金额展示文本：去掉定点数存储尺度产生的多余尾零（如 10.000000000000000000000000 → 10）。"""
+    if value is None:
+        return None
+    text = format(value.normalize(), "f")
+    return "0" if text == "-0" else text
+
+
 @endpoint(("POST",))
 def evidence(request, dataset_id):
     ds = dataset(request, dataset_id, True)
@@ -304,6 +322,9 @@ def evidence(request, dataset_id):
             "source_row", "period", "dimensions", "revenue", "cost", "gross", "raw"
         )
     )
+    for row in rows:
+        for field in ("revenue", "cost", "gross"):
+            row[field] = amount_text(row[field])
     # Raw patient/customer identifiers require an explicit administrator role.
     if request.member.role != "admin":
         for row in rows:
@@ -402,9 +423,9 @@ def export(request, dataset_id):
                     row.source_row,
                     row.period,
                     *[row.dimensions.get(d["key"], "") for d in dims],
-                    row.revenue,
-                    row.cost,
-                    row.gross,
+                    amount_text(row.revenue),
+                    amount_text(row.cost),
+                    amount_text(row.gross),
                 ]
             )
         if workbook:

frontend/src/App.tsx

@@ -13,6 +13,7 @@ import {
   Bell,
   BookOpen,
   ChevronRight,
+  Cpu,
   Database,
   Download,
   Eye,
@@ -33,6 +34,7 @@ import { api, download, setCsrf } from "./api";
 import { Chart } from "./Chart";
 import {
   AdminDialog,
+  AIConfigDialog,
   FormulaExportDialog,
   Copilot,
   EvidenceDialog,
@@ -43,6 +45,7 @@ import {
 import {
   format,
   labels,
+  roleLabels,
   type Analysis,
   type Context,
   type Dataset,
@@ -83,6 +86,7 @@ export function App() {
       | "dictionary"
       | "users"
       | "audit"
+      | "ai"
       | null
       | "formula"
     >(null),
@@ -305,6 +309,23 @@ export function App() {
     setPath([]);
     setModal(null);
   }
+  // 全部分组都为空的指标列（如数据集没有成本/ROI）不展示，避免占位挤压可用列。
+  const metricKeys = useMemo(() => {
+    const candidates = [
+      ...new Set<Metric>([
+        "revenue",
+        "gross",
+        "cost",
+        "roi",
+        "customers",
+        ctx?.metric || "revenue",
+      ]),
+    ];
+    const available = candidates.filter(
+      (m) => m === "revenue" || (result?.rows || []).some((r) => r.values[m]?.current != null),
+    );
+    return available.length ? available : (["revenue"] as Metric[]);
+  }, [result, ctx]);
   const columns = useMemo<ColDef<Row>[]>(
     () => [
       {
@@ -324,23 +345,14 @@ export function App() {
           </button>
         ),
       },
-      ...[
-        ...new Set<Metric>([
-          "revenue",
-          "gross",
-          "cost",
-          "roi",
-          "customers",
-          ctx?.metric || "revenue",
-        ]),
-      ].map((metric) => ({
+      ...metricKeys.map((metric) => ({
         colId: metric,
         headerName: labels[metric],
         minWidth: 130,
         valueGetter: (p: { data?: Row }) =>
-          p.data?.values[metric].current == null
+          p.data?.values[metric]?.current == null
             ? null
-            : Number(p.data.values[metric].current),
+            : Number(p.data.values[metric]?.current),
         valueFormatter: (p: { value: unknown }) =>
           format(p.value as number, metric),
         cellClass: metric === ctx?.metric ? "metric-column" : "",
@@ -393,24 +405,34 @@ export function App() {
         ),
       },
     ],
-    [ds, ctx, path],
+    [ds, ctx, path, metricKeys],
   );
   const rows = (result?.rows || []).filter(
     (r) => (screen !== "anomalies" || r.anomaly) && r.label.includes(search),
   );
   const metric = ctx?.metric || "revenue";
+  const compactAxis = (value: number) => {
+    const abs = Math.abs(value);
+    if (abs >= 1e8) return `${value / 1e8}亿`;
+    if (abs >= 1e4) return `${value / 1e4}万`;
+    return String(value);
+  };
   const trend = useMemo(
     () => ({
       color: ["#197568", "#5794c9"],
       tooltip: { trigger: "axis" },
       legend: { bottom: 0 },
-      grid: { top: 25, left: 65, right: 25, bottom: 65 },
+      grid: { top: 25, left: 85, right: 25, bottom: 65 },
       xAxis: {
         type: "category",
         data: result?.trend.map((r) => r.period),
-        axisLabel: { color: "#73827b" },
+        axisLabel: { color: "#73827b", hideOverlap: true },
+      },
+      yAxis: {
+        type: "value",
+        splitLine: { lineStyle: { color: "#ecf0ee" } },
+        axisLabel: { hideOverlap: true },
       },
-      yAxis: { type: "value", splitLine: { lineStyle: { color: "#ecf0ee" } } },
       series: [
         {
           name: "实际收入",
@@ -440,7 +462,11 @@ export function App() {
     () => ({
       tooltip: { trigger: "axis" },
       grid: { top: 15, left: 95, right: 30, bottom: 30 },
-      xAxis: { type: "value", splitLine: { lineStyle: { color: "#ecf0ee" } } },
+      xAxis: {
+        type: "value",
+        splitLine: { lineStyle: { color: "#ecf0ee" } },
+        axisLabel: { hideOverlap: true, formatter: compactAxis },
+      },
       yAxis: {
         type: "category",
         inverse: true,
@@ -543,6 +569,10 @@ export function App() {
                 <ShieldCheck />
                 操作审计
               </button>
+              <button onClick={() => setModal("ai")}>
+                <Cpu />
+                AI 模型
+              </button>
             </>
           )}
         </nav>
@@ -871,6 +901,8 @@ export function App() {
                             missing_gross: "毛利缺失",
                             missing_customer: "客户标识缺失",
                             blank_rows: "空白行",
+                            g_l_mismatch: "应收金额两列不一致",
+                            i_n_mismatch: "实收与实际收入不一致",
                           } as Record<string, string>
                         )[k] || k}
                         <strong>{v.toLocaleString()}</strong>
@@ -1023,16 +1055,11 @@ export function App() {
                                       )?.name
                                     }
                                   </th>
-                                  {(
-                                    [
-                                      "revenue",
-                                      "gross",
-                                      "cost",
-                                      "roi",
-                                    ] as Metric[]
-                                  ).map((m) => (
-                                    <th key={m}>{labels[m]}</th>
-                                  ))}
+                                  {metricKeys
+                                    .filter((m) => m !== "customers")
+                                    .map((m) => (
+                                      <th key={m}>{labels[m]}</th>
+                                    ))}
                                   <th>状态</th>
                                 </tr>
                               </thead>
@@ -1040,15 +1067,10 @@ export function App() {
                                 {result.rows.slice(0, 12).map((r) => (
                                   <tr key={r.label}>
                                     <th>{r.label}</th>
-                                    {(
-                                      [
-                                        "revenue",
-                                        "gross",
-                                        "cost",
-                                        "roi",
-                                      ] as Metric[]
-                                    ).map((m) => {
-                                      const v = r.values[m].change;
+                                    {metricKeys
+                                      .filter((m) => m !== "customers")
+                                      .map((m) => {
+                                        const v = r.values[m]?.change;
                                       return (
                                         <td key={m}>
                                           <button
@@ -1062,7 +1084,7 @@ export function App() {
                                                   : "heat-positive"
                                             }
                                             onClick={() => {
-                                              setCtx({ ...ctx, metric: m });
+                                              setCtx({ ...ctx, metric: m as Metric });
                                               setSelected(r);
                                               setScreen("anomalies");
                                             }}
@@ -1220,48 +1242,53 @@ export function App() {
                         </div>
                       </div>
                       <div className="grid-layout">
-                        <div className="grid">
-                          <AgGridReact<Row>
-                            theme={gridTheme}
-                            rowData={rows}
-                            columnDefs={columns}
-                            defaultColDef={{
-                              sortable: true,
-                              filter: true,
-                              resizable: true,
-                            }}
-                            pagination
-                            paginationPageSize={20}
-                            paginationPageSizeSelector={[20, 50, 100]}
-                            getRowId={(p) => p.data.label}
-                            onRowClicked={(e) => setSelected(e.data)}
-                            localeText={{
-                              noRowsToShow: "没有符合条件的分组",
-                              page: "页",
-                              of: "/",
-                              to: "至",
-                              more: "更多",
-                              nextPage: "下一页",
-                              previousPage: "上一页",
-                              firstPage: "首页",
-                              lastPage: "末页",
-                              pageSizeSelectorLabel: "每页",
-                            }}
-                            {...(enterprise
-                              ? {
-                                  cellSelection: true,
-                                  sideBar: "columns",
-                                  statusBar: {
-                                    statusPanels: [
-                                      {
-                                        statusPanel: "agTotalRowCountComponent",
-                                      },
-                                    ],
-                                  },
-                                }
-                              : {})}
-                          />
-                        </div>
+                        {rows.length ? (
+                          <div className="grid">
+                            <AgGridReact<Row>
+                              theme={gridTheme}
+                              rowData={rows}
+                              columnDefs={columns}
+                              defaultColDef={{
+                                sortable: true,
+                                filter: true,
+                                resizable: true,
+                              }}
+                              pagination
+                              paginationPageSize={20}
+                              paginationPageSizeSelector={[20, 50, 100]}
+                              getRowId={(p) => p.data.label}
+                              onRowClicked={(e) => setSelected(e.data)}
+                              localeText={{
+                                page: "页",
+                                of: "/",
+                                to: "至",
+                                more: "更多",
+                                nextPage: "下一页",
+                                previousPage: "上一页",
+                                firstPage: "首页",
+                                lastPage: "末页",
+                                pageSizeSelectorLabel: "每页",
+                              }}
+                              {...(enterprise
+                                ? {
+                                    cellSelection: true,
+                                    sideBar: "columns",
+                                    statusBar: {
+                                      statusPanels: [
+                                        {
+                                          statusPanel: "agTotalRowCountComponent",
+                                        },
+                                      ],
+                                    },
+                                  }
+                                : {})}
+                            />
+                          </div>
+                        ) : (
+                          <p role="status" className="grid-empty">
+                            没有符合条件的分组
+                          </p>
+                        )}
                         {selected && (
                           <aside className="explanation">
                             <div className="section-heading">
@@ -1465,7 +1492,7 @@ export function App() {
                   <tr key={c.index}>
                     <td>{c.name}</td>
                     <td>{c.description}</td>
-                    <td>{c.role}</td>
+                    <td>{roleLabels[c.role] || c.role}</td>
                   </tr>
                 ))}
               </tbody>
@@ -1476,6 +1503,7 @@ export function App() {
       {(modal === "users" || modal === "audit") && (
         <AdminDialog mode={modal} onClose={() => setModal(null)} />
       )}
+      {modal === "ai" && <AIConfigDialog onClose={() => setModal(null)} />}
     </div>
   );
 }

frontend/src/dialogs.tsx

@@ -3,6 +3,8 @@ import { ChevronLeft, ChevronRight, Download, Save, Trash2, X } from "lucide-rea
 import { api } from "./api";
 import {
   labels,
+  roleLabels,
+  type AIConfig,
   type Context,
   type Dataset,
   type Metric,
@@ -164,7 +166,9 @@ export function ImportDialog({
                         "dimension",
                         "ignore",
                       ].map((r) => (
-                        <option key={r}>{r}</option>
+                        <option key={r} value={r}>
+                          {roleLabels[r] || r}
+                        </option>
                       ))}
                     </select>
                   </td>
@@ -366,6 +370,7 @@ export function EvidenceDialog({
     };
   }, [ds.id, ctx, side, page]);
   function selectSide(value: "current" | "baseline") {
+    if (value === side && page === 0) return;
     setResult(undefined);
     setPage(0);
     setSide(value);
@@ -405,7 +410,7 @@ export function EvidenceDialog({
           </p>
         )}
         <div className="table-scroll">
-          <table>
+          <table className="evidence-table">
             <thead>
               <tr>
                 <th>来源行</th>
@@ -471,6 +476,153 @@ export function EvidenceDialog({
   );
 }
 
+export function AIConfigDialog({ onClose }: { onClose: () => void }) {
+  const [value, setValue] = useState<AIConfig>({
+      enabled: false,
+      provider: "local",
+      base_url: "",
+      model: "",
+      api_key_set: false,
+      updated_at: null,
+    }),
+    [key, setKey] = useState(""),
+    [models, setModels] = useState<string[]>([]),
+    [error, setError] = useState(""),
+    [busy, setBusy] = useState(false),
+    [listing, setListing] = useState(false);
+  useEffect(() => {
+    api<AIConfig>("/ai-config")
+      .then((r) => setValue(r))
+      .catch((e) => setError((e as Error).message));
+  }, []);
+  async function fetchModels() {
+    setListing(true);
+    setError("");
+    try {
+      const r = await api<{ items: string[] }>("/ai-models");
+      setModels(r.items);
+      if (!r.items.length) setError("该服务没有返回可用模型");
+    } catch (e) {
+      setError((e as Error).message);
+    } finally {
+      setListing(false);
+    }
+  }
+  async function save() {
+    setBusy(true);
+    setError("");
+    try {
+      await api("/ai-config", "PUT", {
+        enabled: value.enabled,
+        provider: value.provider,
+        base_url: value.base_url,
+        model: value.model,
+        api_key: key,
+      });
+      setKey("");
+      setValue((v) => ({ ...v, api_key_set: v.api_key_set || Boolean(key) }));
+      if (value.base_url) await fetchModels();
+    } catch (e) {
+      setError((e as Error).message);
+    } finally {
+      setBusy(false);
+    }
+  }
+  return (
+    <Modal title="AI 模型配置" onClose={onClose} wide>
+      <div className="dialog-body">
+        <p className="muted">
+          配置财务分析助手使用的模型服务。数据库配置优先；未配置时回退到部署环境变量。
+        </p>
+        <label className="check">
+          <input
+            type="checkbox"
+            checked={value.enabled}
+            onChange={(e) => setValue({ ...value, enabled: e.target.checked })}
+          />
+          启用 AI 模型理解问题
+        </label>
+        <label>
+          服务商
+          <select
+            value={value.provider}
+            onChange={(e) =>
+              setValue({
+                ...value,
+                provider: e.target.value as AIConfig["provider"],
+              })
+            }
+          >
+            <option value="openai">OpenAI</option>
+            <option value="local">
+              本地 OpenAI 兼容服务（Ollama / LM Studio / vLLM）
+            </option>
+          </select>
+        </label>
+        <label>
+          Base URL
+          <input
+            value={value.base_url}
+            placeholder={
+              value.provider === "local"
+                ? "http://127.0.0.1:11434/v1"
+                : "https://api.openai.com/v1"
+            }
+            onChange={(e) => setValue({ ...value, base_url: e.target.value })}
+          />
+        </label>
+        <label>
+          API Key
+          <input
+            type="password"
+            value={key}
+            placeholder={
+              value.api_key_set ? "已配置，留空保持不变" : "本地服务通常可留空"
+            }
+            onChange={(e) => setKey(e.target.value)}
+          />
+        </label>
+        <label>
+          模型
+          <input
+            list="ai-model-list"
+            value={value.model}
+            placeholder="模型名，如 qwen2.5:7b"
+            onChange={(e) => setValue({ ...value, model: e.target.value })}
+          />
+          <datalist id="ai-model-list">
+            {models.map((m) => (
+              <option key={m} value={m} />
+            ))}
+          </datalist>
+        </label>
+        <footer>
+          <button onClick={onClose}>取消</button>
+          <button
+            type="button"
+            disabled={listing || busy}
+            onClick={fetchModels}
+          >
+            {listing ? "获取中…" : "获取可用模型"}
+          </button>
+          <button className="primary" disabled={busy} onClick={save}>
+            {busy ? "保存中…" : "保存配置"}
+          </button>
+        </footer>
+        {error && (
+          <p role="alert" className="error">
+            {error}
+          </p>
+        )}
+        <p className="muted">
+          只向模型服务发送问题与维度/当前筛选，原始数据行不出服务器；密钥仅保存在后端，
+          配置修改会记入操作审计。
+        </p>
+      </div>
+    </Modal>
+  );
+}
+
 export function Copilot({
   ds,
   ctx,
@@ -550,7 +702,7 @@ export function Copilot({
                 checked={useModel}
                 onChange={(e) => setUseModel(e.target.checked)}
               />
-              使用外部 AI 理解问题
+              使用已配置的 AI 模型理解问题
             </label>
             {useModel && (
               <label className="check">

frontend/src/style.css

@@ -484,7 +484,7 @@ a {
   display: flex;
   flex-direction: column;
   align-items: stretch;
-  padding: 20px 20px 16px;
+  padding: 18px 16px 14px;
   gap: 16px;
   background: white;
   min-width: 0;
@@ -510,12 +510,13 @@ a {
 }
 .kpi strong {
   text-align: left;
-  font-size: 24px;
+  font-size: 21px;
   line-height: 1.25;
   font-weight: 620;
   font-variant-numeric: tabular-nums;
-  white-space: normal;
-  overflow-wrap: anywhere;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
 }
 .kpi-bottom {
   display: flex;
@@ -1271,9 +1272,6 @@ details {
   .kpi {
     padding: 17px 13px;
   }
-  .kpi strong {
-    font-size: 21px;
-  }
   .chart-band {
     gap: 15px;
   }
@@ -1562,3 +1560,20 @@ details {
     scroll-behavior: auto !important;
   }
 }
+
+.grid-empty {
+  margin: 0;
+  padding: 40px 0;
+  text-align: center;
+  color: var(--muted, #5b6675);
+  border: 1px dashed var(--line);
+  border-radius: 6px;
+  width: 100%;
+}
+
+.evidence-table {
+  min-width: 960px;
+}
+.evidence-table th {
+  white-space: nowrap;
+}

frontend/src/types.ts

@@ -32,6 +32,20 @@ export interface Column {
   key: string;
   confidence: number;
 }
+export const roleLabels: Record<string, string> = {
+  period: "期间",
+  year: "年份",
+  month: "月份",
+  dimension: "维度",
+  customer: "客户标识",
+  quantity: "数量",
+  revenue: "实际收入",
+  cost: "成本",
+  gross: "毛利贡献",
+  list_amount: "应收金额",
+  discount: "折扣金额",
+  ignore: "未使用",
+};
 export interface Mapping {
   sheet: string;
   header: number;
@@ -107,15 +121,23 @@ export interface Analysis {
     current: string[];
     baseline: string[];
   };
-  summary: Record<Metric, Value>;
+  summary: Record<string, Value>;
   rows: Row[];
-  trend: ({ period: string } & Record<Metric, Numeric>)[];
+  trend: ({ period: string } & Record<string, Numeric>)[];
   row_count: number;
   anomaly_count: number;
   comparable: boolean;
   notice: string;
   version: string;
 }
+export interface AIConfig {
+  enabled: boolean;
+  provider: "openai" | "local";
+  base_url: string;
+  model: string;
+  api_key_set: boolean;
+  updated_at: string | null;
+}
 export interface Session {
   csrf: string;
   user: {

scripts/dev_up.sh

@@ -74,10 +74,9 @@ fi
 echo "执行数据库迁移…"
 $PY manage.py migrate --no-input >/dev/null
 
-if [ ! -f var/local-access.txt ]; then
-  echo "初始化本地管理员…"
-  PYTHONPATH="$ROOT" $PY scripts/init_local.py
-fi
+# init_local.py 以数据库为准幂等执行：缺 admin 时创建并写凭据文件，已存在则跳过
+echo "初始化本地管理员（已存在则跳过）…"
+PYTHONPATH="$ROOT" $PY scripts/init_local.py
 
 if [ ! -d frontend/dist ]; then
   echo "构建前端（首次）…"

server/settings.py

@@ -93,6 +93,7 @@ MAX_UPLOAD_BYTES = int(os.environ.get("MAX_UPLOAD_BYTES", 64 * 1024 * 1024))
 MAX_IMPORT_ROWS = int(os.environ.get("MAX_IMPORT_ROWS", 1000000))
 OPENAI_API_KEY = os.environ.get("OPENAI_API_KEY", "")
 OPENAI_MODEL = os.environ.get("OPENAI_MODEL", "")
+OPENAI_BASE_URL = os.environ.get("OPENAI_BASE_URL", "https://api.openai.com/v1")
 AI_ENABLED = os.environ.get("AI_ENABLED", "0") == "1"
 LOGGING = {
     "version": 1,

server/urls.py

@@ -1,6 +1,7 @@
 from django.urls import path
 
 from finance import formula_views, views
+from finance.ai import ai_config, ai_models
 from finance.assistant import assistant
 
 urlpatterns = [
@@ -11,6 +12,8 @@ urlpatterns = [
     path("api/datasets", views.datasets),
     path("api/users", views.users),
     path("api/audit", views.audit_log),
+    path("api/ai-config", ai_config),
+    path("api/ai-models", ai_models),
     path("api/datasets/<uuid:dataset_id>", views.dataset_detail),
     path("api/datasets/<uuid:dataset_id>/mapping", views.mapping),
     path("api/datasets/<uuid:dataset_id>/query", views.query),

tests/e2e/workspace.spec.ts

@@ -30,7 +30,9 @@ test("桌面：真实导入、异常、下钻、证据、设置、Copilot、导
   });
   await uploaded;
   const dialog = page.getByRole("dialog");
-  await expect(dialog.getByRole("heading", { name: "确认导入字段" })).toBeVisible();
+  await expect(
+    dialog.getByRole("heading", { name: "确认导入字段" }),
+  ).toBeVisible();
   await dialog.getByRole("button", { name: "确认并导入" }).click();
   await expect(
     page.getByRole("heading", { name: "集团经营总览", exact: true }),
@@ -85,7 +87,14 @@ test("桌面：真实导入、异常、下钻、证据、设置、Copilot、导
   await expect(evidenceDialog).toContainText("1 条");
   await expect(evidenceDialog).toContainText("2026-08");
   await expect(evidenceDialog).toContainText("CSV");
-  await evidenceDialog.getByRole("button", { name: "基期", exact: true }).click();
+  await evidenceDialog
+    .getByRole("button", { name: "本期", exact: true })
+    .click();
+  await expect(evidenceDialog).toContainText("2026-08");
+  await expect(evidenceDialog).not.toContainText("加载中");
+  await evidenceDialog
+    .getByRole("button", { name: "基期", exact: true })
+    .click();
   await expect(evidenceDialog).toContainText("2025-08");
   await evidenceDialog.getByLabel("关闭", { exact: true }).click();
   const evidenceOffsets: number[] = [];
@@ -111,10 +120,17 @@ test("桌面：真实导入、异常、下钻、证据、设置、Copilot、导
   });
   await page.getByLabel("查看医生A证据", { exact: true }).click();
   await expect(evidenceDialog).toContainText("第 1-50 条，共 51 条");
-  await evidenceDialog.getByRole("button", { name: "下一页", exact: true }).click();
+  await evidenceDialog
+    .getByRole("button", { name: "下一页", exact: true })
+    .click();
   await expect(evidenceDialog).toContainText("第 51-51 条，共 51 条");
   await expect(evidenceDialog).toContainText("2026-09");
   expect(evidenceOffsets).toEqual([0, 50]);
+  await evidenceDialog
+    .getByRole("button", { name: "基期", exact: true })
+    .click();
+  await expect(evidenceDialog).toContainText("第 1-50 条，共 51 条");
+  await expect(evidenceDialog).not.toContainText("2026-09");
   await evidenceDialog.getByLabel("关闭", { exact: true }).click();
   await page
     .getByRole("navigation", { name: "分析路径" })

tests/test_assistant_api.py

@@ -1,17 +1,182 @@
 import json
 from unittest.mock import patch
 
+import httpx
 import pytest
+from django.contrib.auth.models import User
 from django.test import Client
 
 from finance.assistant import model_intent
-from finance.models import Audit, FormulaDefinition, FormulaExport, Membership
+from finance.models import AIConfig, Audit, FormulaDefinition, FormulaExport, Membership
 
 pytestmark = pytest.mark.django_db
 
 
+def completed_response(intent=None):
+    class Response:
+        def raise_for_status(self):
+            return None
+
+        def json(self):
+            return {
+                "status": "completed",
+                "output": [
+                    {
+                        "content": [
+                            {
+                                "type": "output_text",
+                                "text": json.dumps(
+                                    intent
+                                    or {
+                                        "action": "overview",
+                                        "metric": "revenue",
+                                        "group": "department",
+                                        "filters": [{"key": "department", "value": "儿科"}],
+                                    }
+                                ),
+                            }
+                        ]
+                    }
+                ],
+            }
+
+    return Response()
+
+
+def test_ai_config_requires_full_admin_and_masks_key(workspace):
+    ds, member, client, _, _ = workspace
+    url = "/api/ai-config"
+
+    viewer = User.objects.create_user("ai-viewer", password="Finance-TestPassword991!")
+    Membership.objects.create(user=viewer, organization=ds.organization, role="viewer")
+    viewer_client = Client()
+    assert viewer_client.login(username="ai-viewer", password="Finance-TestPassword991!")
+    assert viewer_client.get(url).status_code == 403
+
+    member.departments = ["儿科"]
+    member.save(update_fields=["departments"])
+    scoped = Client()
+    assert scoped.login(username=member.user.username, password="Finance-TestPassword991!")
+    assert scoped.get(url).status_code == 403
+    member.departments = []
+    member.save(update_fields=["departments"])
+
+    assert client.get(url).json() == {
+        "enabled": False,
+        "provider": "local",
+        "base_url": "",
+        "model": "",
+        "api_key_set": False,
+        "updated_at": None,
+    }
+
+    invalid = [
+        {"enabled": True, "provider": "local", "base_url": "", "model": "qwen2.5:7b"},
+        {"enabled": True, "provider": "openai", "base_url": "", "model": "gpt-4o"},
+        {"enabled": True, "provider": "local", "base_url": "ftp://x", "model": "m"},
+        {"enabled": True, "provider": "local", "base_url": "http://x/v1", "model": ""},
+    ]
+    for payload in invalid:
+        assert client.put(url, data=payload, content_type="application/json").status_code == 400
+
+    saved = client.put(
+        url,
+        data={
+            "enabled": True,
+            "provider": "local",
+            "base_url": "http://127.0.0.1:11434/v1",
+            "api_key": "ollama-secret",
+            "model": "qwen2.5:7b",
+        },
+        content_type="application/json",
+    )
+    assert saved.status_code == 200
+    shown = client.get(url).json()
+    assert shown["api_key_set"] is True
+    assert shown["enabled"] is True and shown["provider"] == "local"
+    assert "ollama-secret" not in json.dumps(shown)
+    assert client.get("/api/session").json()["ai_enabled"] is True
+    assert Audit.objects.filter(action="ai_config.update").exists()
+
+
+def test_ai_models_lists_local_models(workspace):
+    ds, _, client, _, _ = workspace
+    client.put(
+        "/api/ai-config",
+        data={
+            "enabled": False,
+            "provider": "local",
+            "base_url": "http://127.0.0.1:11434/v1",
+            "model": "",
+        },
+        content_type="application/json",
+    )
+    with patch("finance.ai.httpx.Client") as http:
+        http.return_value.__enter__.return_value.get.return_value = type(
+            "Response",
+            (),
+            {
+                "raise_for_status": lambda self: None,
+                "json": lambda self: {"data": [{"id": "qwen2.5:7b"}, {"id": "llama3.1:8b"}]},
+            },
+        )()
+        listed = client.get("/api/ai-models")
+    assert listed.status_code == 200
+    assert listed.json()["items"] == ["qwen2.5:7b", "llama3.1:8b"]
+    call = http.return_value.__enter__.return_value.get.call_args
+    assert call.args[0] == "http://127.0.0.1:11434/v1/models"
+
+    with patch("finance.ai.httpx.Client") as http:
+        http.return_value.__enter__.return_value.get.side_effect = httpx.ConnectError("boom")
+        failed = client.get("/api/ai-models")
+    assert failed.status_code == 502
+
+
+def test_assistant_uses_org_db_config(workspace):
+    ds, _, client, *_ = workspace
+    client.put(
+        "/api/ai-config",
+        data={
+            "enabled": True,
+            "provider": "local",
+            "base_url": "http://127.0.0.1:11434/v1",
+            "model": "qwen2.5:7b",
+        },
+        content_type="application/json",
+    )
+    with patch("finance.assistant.httpx.Client") as http:
+        http.return_value.__enter__.return_value.post.return_value = completed_response()
+        response = client.post(
+            f"/api/datasets/{ds.pk}/assistant",
+            data={
+                "question": "分析儿科收入",
+                "context": {"start": "2026-08", "end": "2026-08", "comparison": "yoy", "group": "department"},
+                "use_model": True,
+                "consent": True,
+            },
+            content_type="application/json",
+        )
+    assert response.status_code == 200
+    assert response.json()["provider"] == "local"
+    call = http.return_value.__enter__.return_value.post.call_args
+    assert call.args[0] == "http://127.0.0.1:11434/v1/responses"
+    assert call.kwargs["json"]["model"] == "qwen2.5:7b"
+    assert "Authorization" not in call.kwargs["headers"]
+
+    disabled = AIConfig.objects.get(organization=ds.organization)
+    disabled.enabled = False
+    disabled.save(update_fields=["enabled"])
+    denied = client.post(
+        f"/api/datasets/{ds.pk}/assistant",
+        data={"question": "分析儿科收入", "use_model": True, "consent": True},
+        content_type="application/json",
+    )
+    assert denied.status_code == 503
+
+
 def test_model_intent_accepts_only_valid_dimensions_and_sends_no_rows(workspace, settings):
     ds, _, _, _, _ = workspace
+    settings.AI_ENABLED = True
     settings.OPENAI_MODEL = "test-model"
     settings.OPENAI_API_KEY = "test-key"
 
@@ -58,6 +223,7 @@ def test_model_intent_accepts_only_valid_dimensions_and_sends_no_rows(workspace,
 
 def test_model_intent_rejects_unknown_filter_and_incomplete_provider_response(workspace, settings):
     ds, *_ = workspace
+    settings.AI_ENABLED = True
     settings.OPENAI_MODEL = "test-model"
     settings.OPENAI_API_KEY = "test-key"
 

tests/test_finance.py

@@ -133,6 +133,35 @@ def test_evidence_pagination_returns_stable_pages_and_rejects_invalid_bounds(wor
         assert response.status_code == 400
 
 
+def test_evidence_amounts_trim_storage_scale(workspace):
+    from decimal import Decimal
+
+    from finance.views import amount_text
+
+    assert amount_text(Decimal("10.000000000000000000000000")) == "10"
+    assert amount_text(Decimal("10.500000000000000000000000")) == "10.5"
+    assert amount_text(Decimal("0E-24")) == "0"
+    assert amount_text(None) is None
+
+    ds, _, client, *_ = workspace
+    response = client.post(
+        f"/api/datasets/{ds.pk}/evidence",
+        data={
+            "start": "2026-08",
+            "end": "2026-08",
+            "comparison": "yoy",
+            "group": "department",
+            "side": "current",
+            "limit": 1,
+        },
+        content_type="application/json",
+    )
+    row = response.json()["rows"][0]
+    assert row["revenue"] == "80"
+    assert row["cost"] == "30"
+    assert row["gross"] == "50"
+
+
 def test_settings_revision_and_invalid_metric_are_rejected(workspace):
     ds, _, client, *_ = workspace
     url = f"/api/datasets/{ds.pk}/settings"
@@ -169,8 +198,8 @@ def test_csv_export_neutralizes_formula_injection_and_preserves_exact_values(wor
     assert response.streaming
     content = b"".join(response.streaming_content).decode("utf-8-sig")
     assert "'=1+1" in content
-    assert ",-10.000000000000000000000000," in content
-    assert "'-10.000000000000000000000000" not in content
+    assert ",'-10,5,'-15" in content
+    assert "00000000000000" not in content
     assert "traceiq-evidence.csv" in response["Content-Disposition"]
 
     xlsx = client.post(

tests/test_formula_cleanup.py

@@ -1,5 +1,4 @@
 import os
-import uuid
 from datetime import timedelta
 
 import pytest
@@ -28,12 +27,6 @@ def cleanup_root(settings, tmp_path):
     return tmp_path / "formula-exports", dataset, user
 
 
-def _aged(path, hours=25):
-    stamp = (timezone.now() - timedelta(hours=hours)).timestamp()
-    os.utime(path, (stamp, stamp))
-    return path
-
-
 def test_cleanup_expires_jobs_and_removes_files(cleanup_root):
     root, dataset, user = cleanup_root
     path = root / str(user.pk) / "expired.xlsx"
@@ -62,7 +55,8 @@ def test_cleanup_removes_only_stale_temporary_files(cleanup_root):
     stale, recent = user_dir / "stale.tmp", user_dir / "recent.tmp"
     stale.touch()
     recent.touch()
-    _aged(stale)
+    old = timezone.now().timestamp() - 25 * 3600
+    os.utime(stale, (old, old))
 
     call_command("cleanup_formula_exports")
 
@@ -87,71 +81,3 @@ def test_cleanup_does_not_delete_files_outside_export_root(cleanup_root, tmp_pat
     job.refresh_from_db()
     assert job.status == "expired"
     assert outside.read_bytes() == b"keep"
-
-
-def test_cleanup_reclaims_failed_job_leftover_after_retention(cleanup_root):
-    root, dataset, user = cleanup_root
-    job = FormulaExport.objects.create(dataset=dataset, user=user, status="failed")
-    path = root / str(user.pk) / f"{job.pk}.xlsx"
-    path.parent.mkdir(parents=True)
-    path.write_bytes(b"leftover")
-    job.path = str(path)
-    job.save(update_fields=["path"])
-    _aged(path)
-
-    call_command("cleanup_formula_exports")
-
-    job.refresh_from_db()
-    assert not path.exists()
-    assert job.path == ""
-
-
-def test_cleanup_keeps_workbook_of_unexpired_succeeded_job(cleanup_root):
-    root, dataset, user = cleanup_root
-    job = FormulaExport.objects.create(
-        dataset=dataset,
-        user=user,
-        status="succeeded",
-        expires_at=timezone.now() + timedelta(hours=1),
-    )
-    path = root / str(user.pk) / f"{job.pk}.xlsx"
-    path.parent.mkdir(parents=True)
-    path.write_bytes(b"active")
-    job.path = str(path)
-    job.save(update_fields=["path"])
-    _aged(path)
-
-    call_command("cleanup_formula_exports")
-
-    assert path.read_bytes() == b"active"
-    job.refresh_from_db()
-    assert job.path == str(path)
-
-
-def test_cleanup_reclaims_orphan_whose_job_row_was_deleted(cleanup_root):
-    root, _, user = cleanup_root
-    user_dir = root / str(user.pk)
-    user_dir.mkdir(parents=True)
-    orphan = user_dir / f"{uuid.uuid4()}.xlsx"
-    orphan.write_bytes(b"orphan")
-    recent = user_dir / f"{uuid.uuid4()}.xlsx"
-    recent.write_bytes(b"recent orphan")
-    _aged(orphan)
-
-    call_command("cleanup_formula_exports")
-
-    assert not orphan.exists()
-    assert recent.exists()
-
-
-def test_cleanup_ignores_non_uuid_workbook_names(cleanup_root):
-    root, _, user = cleanup_root
-    user_dir = root / str(user.pk)
-    user_dir.mkdir(parents=True)
-    odd = user_dir / "notes.xlsx"
-    odd.write_bytes(b"keep")
-    _aged(odd)
-
-    call_command("cleanup_formula_exports")
-
-    assert odd.exists()

tests/test_formula_export_reliability.py

@@ -1,4 +1,3 @@
-import os
 import stat
 from decimal import Decimal
 from io import BytesIO
@@ -199,170 +198,6 @@ def test_formula_export_worker_records_path_preparation_failure(workspace, setti
     assert job.status == "failed"
 
 
-def _queued_job(ds):
-    return FormulaExport.objects.create(
-        dataset=ds,
-        user=ds.created_by,
-        context={"start": "2026-08", "end": "2026-08", "comparison": "yoy", "group": "department"},
-    )
-
-
-def test_failed_export_rejects_symlinked_user_directory_without_touching_files(workspace, settings):
-    from finance.exporting import process_formula_export
-
-    ds, *_ = workspace
-    job = _queued_job(ds)
-    root = Path(settings.MEDIA_ROOT) / "formula-exports"
-    root.mkdir(parents=True)
-    protected = Path(settings.MEDIA_ROOT) / "protected"
-    protected.mkdir()
-    victim = protected / f"{job.pk}.xlsx"
-    victim.write_bytes(b"protected workbook")
-    (root / str(job.user_id)).symlink_to(protected, target_is_directory=True)
-
-    with pytest.raises(ValueError, match="符号链接"):
-        process_formula_export(job.pk)
-
-    job.refresh_from_db()
-    assert job.status == "failed"
-    assert not job.path
-    assert victim.read_bytes() == b"protected workbook"
-    assert list(protected.glob("*.tmp")) == []
-
-
-def test_failed_export_rejects_symlinked_target_and_keeps_link(workspace, settings):
-    from finance.exporting import process_formula_export
-
-    ds, *_ = workspace
-    job = _queued_job(ds)
-    user_dir = Path(settings.MEDIA_ROOT) / "formula-exports" / str(job.user_id)
-    user_dir.mkdir(parents=True)
-    protected_file = Path(settings.MEDIA_ROOT) / "protected.xlsx"
-    protected_file.write_bytes(b"protected workbook")
-    (user_dir / f"{job.pk}.xlsx").symlink_to(protected_file)
-
-    with pytest.raises(ValueError, match="普通文件"):
-        process_formula_export(job.pk)
-
-    job.refresh_from_db()
-    assert job.status == "failed"
-    assert protected_file.read_bytes() == b"protected workbook"
-    assert (user_dir / f"{job.pk}.xlsx").is_symlink()
-    assert list(user_dir.glob("*.tmp")) == []
-
-
-def test_failed_export_refuses_cleanup_when_parent_directory_swapped_to_symlink(
-    workspace, settings, monkeypatch
-):
-    from finance.exporting import process_formula_export
-
-    ds, *_ = workspace
-    job = _queued_job(ds)
-    root = Path(settings.MEDIA_ROOT) / "formula-exports"
-    user_dir = root / str(job.user_id)
-    user_dir.mkdir(parents=True)
-    protected = Path(settings.MEDIA_ROOT) / "protected"
-    protected.mkdir()
-    victim = protected / f"{job.pk}.xlsx"
-    victim.write_bytes(b"protected workbook")
-
-    def swap_and_fail(*args, **kwargs):
-        args[-1].write(b"partial")
-        user_dir.rename(user_dir.with_name("swapped"))
-        user_dir.symlink_to(protected, target_is_directory=True)
-        raise ValueError("controlled failure after path validation")
-
-    monkeypatch.setattr("finance.exporting.build_formula_workbook", swap_and_fail)
-    with pytest.raises(ValueError, match="controlled failure"):
-        process_formula_export(job.pk)
-
-    job.refresh_from_db()
-    assert job.status == "failed"
-    assert victim.read_bytes() == b"protected workbook"
-    assert user_dir.is_symlink()
-    # 本次创建的临时文件残留在被换名的原目录中，由清理命令按保留期回收。
-    assert list((root / "swapped").glob(f"{job.pk}.*.tmp"))
-
-
-def test_formula_export_retry_after_failure_succeeds(workspace, monkeypatch):
-    from finance.exporting import process_formula_export
-
-    ds, *_ = workspace
-    job = _queued_job(ds)
-
-    def fail(*args, **kwargs):
-        args[-1].write(b"partial")
-        raise ValueError("controlled export failure")
-
-    monkeypatch.setattr("finance.exporting.build_formula_workbook", fail)
-    with pytest.raises(ValueError, match="controlled export failure"):
-        process_formula_export(job.pk)
-    monkeypatch.undo()
-
-    stats = process_formula_export(job.pk)
-    job.refresh_from_db()
-    assert stats["rows"] == 5
-    assert job.status == "succeeded"
-    assert Path(job.path).read_bytes()[:2] == b"PK"
-    assert not list(Path(job.path).parent.glob(f"{job.pk}.*.tmp"))
-
-
-def test_cleanup_failure_is_logged_and_reclaimed_after_permissions_restored(
-    workspace, settings, monkeypatch, caplog
-):
-    import logging as logging_module
-    from datetime import timedelta
-
-    from django.core.management import call_command
-    from django.utils import timezone
-
-    from finance.exporting import process_formula_export
-
-    ds, *_ = workspace
-    job = _queued_job(ds)
-    user_dir = Path(settings.MEDIA_ROOT) / "formula-exports" / str(job.user_id)
-    user_dir.mkdir(parents=True)
-    target = user_dir / f"{job.pk}.xlsx"
-    target.write_bytes(b"stale workbook")
-    other = FormulaExport.objects.create(
-        dataset=ds,
-        user=ds.created_by,
-        context={"start": "2026-08", "end": "2026-08", "comparison": "yoy", "group": "department"},
-        status="succeeded",
-        expires_at=timezone.now() + timedelta(hours=1),
-    )
-    kept = user_dir / f"{other.pk}.xlsx"
-    other.path = str(kept)
-    other.save(update_fields=["path"])
-    kept.write_bytes(b"active workbook")
-
-    def fail(*args, **kwargs):
-        args[-1].write(b"partial")
-        os.chmod(user_dir, 0o500)
-        raise ValueError("controlled export failure")
-
-    monkeypatch.setattr("finance.exporting.build_formula_workbook", fail)
-    with pytest.raises(ValueError, match="controlled export failure"):
-        process_formula_export(job.pk)
-    job.refresh_from_db()
-    assert job.status == "failed"
-    assert job.path == str(target)
-    warnings = [r for r in caplog.records if r.levelno == logging_module.WARNING]
-    assert warnings and all(str(job.pk) in record.getMessage() for record in warnings)
-
-    os.chmod(user_dir, 0o700)
-    old = (timezone.now() - timedelta(hours=25)).timestamp()
-    for leftover in [target, *user_dir.glob(f"{job.pk}.*.tmp"), kept]:
-        os.utime(leftover, (old, old))
-    call_command("cleanup_formula_exports")
-
-    job.refresh_from_db()
-    assert not target.exists()
-    assert not list(user_dir.glob(f"{job.pk}.*.tmp"))
-    assert job.path == ""
-    assert kept.read_bytes() == b"active workbook"
-
-
 def test_formula_workbook_rejects_unclassified_label_collision(workspace):
     from decimal import Decimal
 

tests/test_worker_paths.py

@@ -1,10 +1,7 @@
-from datetime import timedelta
-from pathlib import Path
 from unittest.mock import patch
 
 import pytest
 from django.core.management import call_command
-from django.utils import timezone
 
 from finance.models import Dataset, FormulaExport
 
@@ -33,118 +30,3 @@ def test_worker_processes_queued_import_and_reports_export_failure(workspace):
         call_command("import_worker", once=True)
     export.refresh_from_db()
     assert export.status == "processing"
-
-
-def _export_job(ds, **kwargs):
-    return FormulaExport.objects.create(
-        dataset=ds,
-        user=ds.created_by,
-        context={"start": "2026-08", "end": "2026-08", "comparison": "yoy", "group": "department"},
-        **kwargs,
-    )
-
-
-def test_worker_refuses_export_after_role_revocation(workspace):
-    from finance.exporting import process_formula_export
-
-    ds, member, *_ = workspace
-    job = _export_job(ds, status="processing")
-    member.role = "viewer"
-    member.save(update_fields=["role"])
-
-    with pytest.raises(PermissionError, match="角色"):
-        process_formula_export(job.pk)
-
-    job.refresh_from_db()
-    assert job.status == "failed"
-    assert not job.path
-    assert not list(Path(ds.file.storage.location).rglob(f"{job.pk}*"))
-
-
-def test_worker_refuses_export_after_account_deactivation(workspace):
-    from finance.exporting import process_formula_export
-
-    ds, _, _, _, _ = workspace
-    user = ds.created_by
-    user.is_active = False
-    user.save(update_fields=["is_active"])
-    job = _export_job(ds, status="processing")
-
-    with pytest.raises(PermissionError, match="停用"):
-        process_formula_export(job.pk)
-
-    job.refresh_from_db()
-    assert job.status == "failed"
-
-
-def test_status_and_download_deny_revoked_viewer(workspace, settings):
-    ds, member, client, *_ = workspace
-    job = _export_job(
-        ds,
-        status="succeeded",
-        finished_at=timezone.now(),
-        expires_at=timezone.now() + timedelta(hours=1),
-    )
-    target = Path(settings.MEDIA_ROOT) / "formula-exports" / str(job.user_id) / f"{job.pk}.xlsx"
-    target.parent.mkdir(parents=True)
-    target.write_bytes(b"PK workbook")
-    job.path = str(target)
-    job.save(update_fields=["path"])
-
-    assert client.get(f"/api/datasets/{ds.pk}/formula-exports/{job.pk}").status_code == 200
-    assert (
-        client.get(f"/api/datasets/{ds.pk}/formula-exports/{job.pk}/download").status_code == 200
-    )
-
-    member.role = "viewer"
-    member.save(update_fields=["role"])
-    assert client.get(f"/api/datasets/{ds.pk}/formula-exports/{job.pk}").status_code == 403
-    assert (
-        client.get(f"/api/datasets/{ds.pk}/formula-exports/{job.pk}/download").status_code == 403
-    )
-
-
-def test_half_finished_export_cannot_be_downloaded(workspace, settings):
-    ds, _, client, *_ = workspace
-    for status, code in (("processing", 409), ("failed", 409), ("queued", 409)):
-        job = _export_job(ds, status=status)
-        assert (
-            client.get(f"/api/datasets/{ds.pk}/formula-exports/{job.pk}/download").status_code
-            == code
-        ), status
-    succeeded = _export_job(
-        ds,
-        status="succeeded",
-        path=str(Path(settings.MEDIA_ROOT) / "nowhere.xlsx"),
-        finished_at=timezone.now(),
-        expires_at=timezone.now() + timedelta(hours=1),
-    )
-    assert (
-        client.get(f"/api/datasets/{ds.pk}/formula-exports/{succeeded.pk}/download").status_code
-        == 410
-    )
-
-
-def test_stale_processing_export_is_reclaimed_after_timeout(workspace):
-    ds, *_ = workspace
-    job = _export_job(ds, status="processing")
-    FormulaExport.objects.filter(pk=job.pk).update(
-        created_at=timezone.now() - timedelta(minutes=20)
-    )
-
-    call_command("import_worker", once=True)
-
-    job.refresh_from_db()
-    assert job.status == "succeeded"
-    assert Path(job.path).read_bytes()[:2] == b"PK"
-    assert not list(Path(job.path).parent.glob(f"{job.pk}.*.tmp"))
-
-
-def test_recent_processing_export_is_not_reclaimed(workspace):
-    ds, *_ = workspace
-    job = _export_job(ds, status="processing")
-
-    call_command("import_worker", once=True)
-
-    job.refresh_from_db()
-    assert job.status == "processing"