feat: add AI Digital Employee agent orchestrator with pipeline tracking

- New AgentPipeline model with JSONB pipeline_data for stages/leads/summary
- AgentOrchestrator service chains DiscoveryService search→analyze→outreach→auto-save
- 3 new API endpoints: POST /agent/start, GET /agent/pipelines, GET /agent/{id}
- Full Agent dashboard Vue component with stats, pipeline grid, leads table, outreach preview
- Sidebar redesigned with AI Agent as primary entry point
- Updated PROGRESS.md, AGENTS.md, DATABASE_SCHEMA.md with latest state

AGENTS.md

@@ -10,6 +10,23 @@
 - **Quick questions**: configurable via `ai_assistant_quick_questions` `SystemConfig` key
 - **System prompt**: configurable via `ai_assistant_prompt` `SystemConfig` key
 
+## AI 数字员工 (Agent Orchestrator) 🆕
+
+- **Dashboard**: `user-frontend/src/views/Agent.vue` — 全功能仪表盘，位于 `/agent` 路由
+- **编排服务**: `backend/app/services/agent_orchestrator.py` — `AgentOrchestrator` 类
+  - `start_pipeline(user_id, product_name, product_description, target_market)` — 启动完整流程
+  - `get_pipeline(pipeline_id, user_id)` — 获取流水线详情
+  - `list_pipelines(user_id, page, size)` — 分页列表
+- **数据模型**: `backend/app/models/agent_pipeline.py` — `AgentPipeline` (表: `agent_pipelines`)
+  - JSONB `pipeline_data` 存储 stages + leads + summary
+- **API 端点**: `backend/app/api/v1/agent.py` — 3 个端点
+  - `POST /api/v1/agent/start` — 启动新任务 (timeout: 300s)
+  - `GET /api/v1/agent/pipelines` — 任务列表
+  - `GET /api/v1/agent/{pipeline_id}` — 任务详情
+- **流程**: 用户输入产品+市场 → AgentOrchestrator 串接 DiscoveryService.search() → analyze() → outreach() → 自动保存高匹配客户
+- **前端入口**: `UserLayout.vue` 侧边栏首位 "AI数字员工" (MagicStick 图标)
+- **迁移**: 需要运行 `alembic revision --autogenerate -m "add agent_pipelines"` 创建 `agent_pipelines` 表
+
 ## Architecture
 
 - **Backend**: `backend/` — FastAPI + SQLAlchemy 1.4 async + asyncpg, single `app.main:app`
@@ -97,12 +114,9 @@ alembic revision --autogenerate -m "desc"
 - **Stripe**: `STRIPE_SECRET_KEY`, `STRIPE_WEBHOOK_SECRET` in `.env`. `StripePaymentService` via Checkout Sessions. Selected when `pay_type` is `card`/`stripe`. Webhook `POST /api/v1/payment/stripe-webhook`.
 - **PayPal**: `PAYPAL_CLIENT_ID`, `PAYPAL_CLIENT_SECRET`, `PAYPAL_WEBHOOK_ID`, `PAYPAL_SANDBOX=True` in `.env`. `PayPalPaymentService` via Orders v2 API. Selected when `pay_type` is `paypal`. Webhook `POST /api/v1/payment/paypal-webhook`.
 - **Credit purchase**: `POST /api/v1/credits/stripe-purchase` with `gateway: "stripe"|"paypal"` for overseas payments (USD), returns `session_url` for redirect. Gateway-agnostic: `gateway` param selects the provider.
-- **Manual auth on some endpoints**: `keywords` and `competitor-analysis` endpoints use `authorization: str = Header(None)` instead of `Depends(get_current_user_id)`.
-- **MarketingService fallback**: When no AI providers initialized, returns template content instead of crashing.
-- **Onboarding service**: calls `mkt.generate(product_info={"name": ..., ...})`, not keyword args. Check `onboarding.py` for the exact dict shape.
-- **CustomerHealthService**: `get_health_overview` endpoint must use `CustomerHealthService(db)` not `CustomerService(db)`.
-- **CSRF**: Sensitive endpoints (auth/payment/profile) require `X-CSRF-Token` header. Token available via `csrf_token` cookie / `X-CSRF-Token` response header.
-- **AI Router reload**: After modifying AI providers via admin API, call `POST /api/v1/admin/ai/reload` to refresh in-memory providers.
+- **Agent Pipeline timeout**: `POST /api/v1/agent/start` may take 2-3 minutes to complete (it chains search → analyze → outreach synchronously). Frontend timeout set to 300s.
+- **Agent auto-save**: High-scoring leads (>=70 match_score) are auto-saved as Customer records with `source='ai_agent:{pipeline_id}'`. Duplicate check by name+user_id.
+- **Agent pipeline_data JSONB**: Contains stages progress, leads array (with outreach content), and summary stats. This is the source of truth for the frontend dashboard rendering.
 
 ## Project Conventions
 
@@ -110,7 +124,7 @@ alembic revision --autogenerate -m "desc"
 - **Chinese UI** — mobile-first, for foreign-trade SOHOs/small teams
 - **No comments in code** unless explicitly asked
 - **Commit messages** focus on "why" not "what", in English
-- **Services** instantiate `MarketingService()` (no db needed). For customer health: `CustomerHealthService(db)`
+- **Services** instantiate `MarketingService()` (no db needed). For customer health: `CustomerHealthService(db)`. For agent: `AgentOrchestrator(db)`.
 - **AI providers** in `backend/app/ai/providers/` — inherit from `OpenAIProvider` if compatible with OpenAI API format
 - **Static assets** go in `uni-app/src/static/`
 - **Test DB**: `foreign_trade_test` (uses credentials from `conftest.py`, not `.env`)