feat:新增接口

api/deps.py

@@ -44,3 +44,12 @@ async def require_customer(user: SysUser = Depends(get_current_user)) -> SysUser
     if user.user_type != "CUSTOMER":
         raise ForbiddenError("仅客户用户可以访问 client_agent")
     return user
+
+
+async def require_risk_officer(user: SysUser = Depends(get_current_user)) -> SysUser:
+    """仅允许管理员或风控专员执行风控处置/工单操作。"""
+    if user.user_type == "ADMIN":
+        return user
+    if user.user_type != "EMPLOYEE" or user.employee_role != "风控专员":
+        raise ForbiddenError("仅风控专员可执行风控处置")
+    return user

api/router.py

@@ -5,7 +5,7 @@ from fastapi import APIRouter
 
 from api.chat import client_agent, customer_agent, knowledge
 from api.routers import product, questionnaire
-from api.routers import account, auth, holdings, purchase, redeem
+from api.routers import account, auth, holdings, purchase, redeem, risk, work_order
 
 api_router = APIRouter()
 api_router.include_router(auth.router, prefix="/api", tags=["认证"])
@@ -13,6 +13,8 @@ api_router.include_router(account.router, prefix="/api", tags=["资金账户"])
 api_router.include_router(holdings.router, prefix="/api", tags=["持仓"])
 api_router.include_router(purchase.router, prefix="/api", tags=["交易"])
 api_router.include_router(redeem.router, prefix="/api", tags=["交易"])
+api_router.include_router(risk.router, prefix="/api", tags=["风控"])
+api_router.include_router(work_order.router, prefix="/api", tags=["工单"])
 api_router.include_router(customer_agent.router, prefix="/api/agent/customer", tags=["客服Agent"])
 api_router.include_router(client_agent.router, prefix="/api/agent/client", tags=["ClientAgent"])
 api_router.include_router(knowledge.router, prefix="/api/knowledge", tags=["知识库"])