feat: add profile candidate review workflow

app/api/controllers/admin.py

@@ -19,6 +19,7 @@ from app.api.schemas.admin import (
 )
 from app.core.contracts import RequestContext
 from app.service.admin_service import AdminService
+from app.service.customer_profile_candidate_service import CustomerProfileCandidateService
 from app.service.customer_service_handover_admin_service import CustomerServiceHandoverAdminService
 
 router = APIRouter(prefix="/api/v1/admin", tags=["platform-admin"],
@@ -152,3 +153,24 @@ async def get_customer_service_handover_ticket(
 ) -> dict[str, Any]:
     """只读查看单个工单的脱敏转接摘要。"""
     return await CustomerServiceHandoverAdminService().get_ticket(ticket_no, context)
+
+
+@router.get("/customer-profile-candidates")
+async def list_customer_profile_candidates(
+    limit: int = Query(default=20, ge=1, le=100),
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, Any]:
+    """管理员查看待确认或待审核的画像候选。"""
+    return await CustomerProfileCandidateService().list_for_admin(context, limit=limit)
+
+
+@router.post("/customer-profile-candidates/{candidate_id}/reviews", status_code=200)
+async def review_customer_profile_candidate(
+    candidate_id: int,
+    payload: ReviewPayload,
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, Any]:
+    """管理员批准或驳回候选；批准会处理同键旧正式记忆。"""
+    return await CustomerProfileCandidateService().review_by_admin(
+        candidate_id, payload.decision, context, comment=payload.comment
+    )

app/api/controllers/public_platform.py

@@ -1,4 +1,4 @@
-from typing import Any
+from typing import Any, Literal
 
 from fastapi import APIRouter, Depends, Header
 from pydantic import Field
@@ -22,6 +22,10 @@ class Cancellation(StrictPayload):
     reason: str = Field(default="user_cancelled", max_length=128)
 
 
+class CandidateDecisionPayload(StrictPayload):
+    decision: Literal["confirmed", "rejected"]
+
+
 @router.post("/conversations", status_code=201)
 async def create_session(
     payload: SessionCreate,
@@ -90,3 +94,27 @@ async def customer_memory(
     customer_id: int, context: RequestContext = Depends(build_request_context),  # noqa: B008
 ) -> dict[str, Any]:
     return await PublicPlatformService().memory(customer_id, context)
+
+
+@router.get("/users/me/memory-candidates")
+async def my_memory_candidates(
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, Any]:
+    """返回当前用户可确认的画像候选，不返回证据原文。"""
+    from app.service.customer_profile_candidate_service import CustomerProfileCandidateService
+
+    return await CustomerProfileCandidateService().list_for_customer(context)
+
+
+@router.post("/users/me/memory-candidates/{candidate_id}/decisions")
+async def decide_memory_candidate(
+    candidate_id: int,
+    payload: CandidateDecisionPayload,
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, Any]:
+    """用户确认或拒绝自己的候选；确认后仍需管理员审核才能激活。"""
+    from app.service.customer_profile_candidate_service import CustomerProfileCandidateService
+
+    return await CustomerProfileCandidateService().decide_by_customer(
+        candidate_id, payload.decision, context
+    )