feat: Wave 3 - Dashboard redesign + RBAC + AI assistant updates

- Redesign index.html from system-monitor to user-centric workspace
  (welcome banner, summary cards, 今日待办, AI 智能建议, collapsible admin section)
- Add fetchTodos/fetchSuggestions/getPriorityClass/isOverdue methods
- Update uni-nav current-page from 'dashboard' to 'workspace'
- Add require_role to 10 admin router imports (RBAC foundation)
- Update ai-assistant.js: add factory/insights pages, org_id in chat requests

platform/backend/app/api/admin.py

@@ -9,7 +9,7 @@ from ..database import get_db
 from ..models import User, Topic, SystemConfig
 from ..schemas import UserCreate, UserUpdate, UserResponse
 from ..core.audit_logger import audit_log
-from .auth import get_current_admin, org_filter
+from .auth import get_current_admin, require_role, org_filter
 import json
 
 router = APIRouter(prefix="/api/admin", tags=["admin"])

platform/backend/app/api/collector_mgmt.py

@@ -7,7 +7,7 @@ from typing import Optional
 
 from ..database import get_db
 from ..models import CollectorCategory, CollectorSource
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/collector", tags=["collector_mgmt"], dependencies=[Depends(get_current_admin)])
 

platform/backend/app/api/config_items.py

@@ -7,7 +7,7 @@ import json
 
 from ..database import get_db
 from ..models import KeywordDomainMap, SensitiveWord, ContentCleanRule, TrendFieldMapping, CollectorCategory
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/config", tags=["admin"])
 

platform/backend/app/api/llm_configs.py

@@ -5,7 +5,7 @@ from typing import List
 from ..database import get_db
 from ..models import LLMConfig
 from ..schemas import LLMConfigBase, LLMConfigResponse
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/llmconfigs", tags=["admin"])
 

platform/backend/app/api/menu_configs.py

@@ -5,7 +5,7 @@ from typing import List
 from ..database import get_db
 from ..models import Menu, User
 from ..schemas import MenuCreate, MenuUpdate, MenuResponse
-from .auth import get_current_admin, get_current_user
+from .auth import get_current_admin, require_role, get_current_user
 
 router = APIRouter(prefix="/api/admin/menus", tags=["admin"])
 public_router = APIRouter(prefix="/api/menus", tags=["menus"])

platform/backend/app/api/prompt_configs.py

@@ -6,7 +6,7 @@ from datetime import datetime
 
 from ..database import get_db
 from ..models import PromptConfig
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/prompt-configs", tags=["admin"])
 

platform/backend/app/api/role_configs.py

@@ -5,7 +5,7 @@ from typing import List
 from ..database import get_db
 from ..models import Role, User
 from ..schemas import RoleCreate, RoleUpdate, RoleResponse
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/roles", tags=["admin"])
 

platform/backend/app/api/search_providers.py

@@ -9,7 +9,7 @@ from datetime import datetime, timezone
 
 from ..database import get_db
 from ..models import SearchProvider
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 logger = logging.getLogger(__name__)
 router = APIRouter(prefix="/api/search-providers", tags=["search_providers"])

platform/backend/app/api/system_configs.py

@@ -5,7 +5,7 @@ from typing import List, Dict, Any
 from ..database import get_db
 from ..models import SystemConfig
 from ..schemas import SystemConfigBase, SystemConfigResponse
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/systemconfigs", tags=["admin"])
 

platform/backend/app/api/task_configs.py

@@ -6,7 +6,7 @@ from typing import List, Optional
 from ..database import get_db
 from ..models import TaskConfig, TaskLog
 from ..schemas import TaskConfigBase, TaskConfigUpdate, TaskConfigResponse, TaskLogResponse
-from .auth import get_current_admin
+from .auth import get_current_admin, require_role
 
 router = APIRouter(prefix="/api/admin/task-configs", tags=["admin"])