diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000..a9b2e23
Binary files /dev/null and b/.DS_Store differ
diff --git a/banban-mini/config/index.js b/banban-mini/config/index.js
index 67f215a..ee013d5 100644
--- a/banban-mini/config/index.js
+++ b/banban-mini/config/index.js
@@ -1,4 +1,6 @@
-const config = {
+const path = require('path')
+
+module.exports = {
   projectName: 'banban-mini',
   date: '2025-3-3',
   designWidth: 750,
@@ -10,34 +12,31 @@ const config = {
   sourceRoot: 'src',
   outputRoot: 'dist',
   plugins: [],
-  defineConstants: {
-  },
+  defineConstants: {},
   copy: {
     patterns: [
       { from: 'src/assets/tab-icons', to: 'dist/assets/tab-icons' }
     ],
-    options: {
-    }
+    options: {}
   },
   framework: 'react',
   mini: {
+    webpackChain(chain) {
+      chain.resolve.alias.set('@', path.resolve(__dirname, '../src'))
+    },
     postcss: {
       pxtransform: {
         enable: true,
-        config: {
-
-        }
+        config: {}
       },
       url: {
         enable: true,
-        config: {
-          limit: 1024 // 设定转换尺寸上限
-        }
+        config: { limit: 1024 }
       },
       cssModules: {
-        enable: false, // 默认为 false，如需使用 css modules 功能，则设为 true
+        enable: false,
         config: {
-          namingPattern: 'module', // 转换模式，取值为 global/module
+          namingPattern: 'module',
           generateScopedName: '[name]__[local]___[hash:base64:5]'
         }
       }
@@ -46,26 +45,18 @@ const config = {
   h5: {
     publicPath: '/',
     staticDirectory: 'static',
+    webpackChain(chain) {
+      chain.resolve.alias.set('@', path.resolve(__dirname, '../src'))
+    },
     postcss: {
-      autoprefixer: {
-        enable: true,
-        config: {
-        }
-      },
+      autoprefixer: { enable: true, config: {} },
       cssModules: {
-        enable: false, // 默认为 false，如需使用 css modules 功能，则设为 true
+        enable: false,
         config: {
-          namingPattern: 'module', // 转换模式，取值为 global/module
+          namingPattern: 'module',
           generateScopedName: '[name]__[local]___[hash:base64:5]'
         }
       }
     }
   }
-}
-
-module.exports = function (merge) {
-  if (process.env.NODE_ENV === 'development') {
-    return merge({}, config, require('./dev'))
-  }
-  return merge({}, config, require('./prod'))
 }
\ No newline at end of file
diff --git a/banban-mini/package-lock.json b/banban-mini/package-lock.json
index 26b94e5..e1e4fef 100644
--- a/banban-mini/package-lock.json
+++ b/banban-mini/package-lock.json
@@ -57,7 +57,6 @@
       "resolved": "https://registry.npmmirror.com/@babel/core/-/core-7.29.0.tgz",
       "integrity": "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.0",
         "@babel/generator": "^7.29.0",
@@ -2907,7 +2906,6 @@
       "integrity": "sha512-zwE3TLgoZwJfQygdv2SdCK9mRLYluwDOM53I+dT6Z5ZvrgVENmY3txvWDvduzkV+/8IuvrRbVezMpxcojadRdQ==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
-      "peer": true,
       "dependencies": {
         "@swc/counter": "^0.1.1",
         "@swc/types": "^0.1.5"
@@ -3298,7 +3296,6 @@
       "resolved": "https://registry.npmmirror.com/@tarojs/components/-/components-3.6.38.tgz",
       "integrity": "sha512-9Ay5cZVFSSebYrbtBeSU5bT9DzUXMzgJIr/cPE9899/Ld/Z0IaVU9e5DtTOvoQEwNr7VEC8+haaLHgWcnLmrVA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@stencil/core": "^2.22.2",
         "@tarojs/components-advanced": "3.6.38",
@@ -4327,7 +4324,6 @@
       "resolved": "https://registry.npmmirror.com/@tarojs/runtime/-/runtime-3.6.38.tgz",
       "integrity": "sha512-LcENEVcsxLokNHlNbzLJesbZJvQlRNrWbr8CV/wKCFzZttRM1OmlmDbV5kxnaAqGlC2yxIg786qc2wwnAwgwuQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "lodash-es": "4.17.21",
         "tslib": "^2.6.2"
@@ -4359,15 +4355,13 @@
       "version": "3.6.38",
       "resolved": "https://registry.npmmirror.com/@tarojs/shared/-/shared-3.6.38.tgz",
       "integrity": "sha512-+bx8UdTJ5qAdFw8Xhx2/aUmw1KjEqhQ9gc7X5kE7aBuvIo+xL93HFVQ/DgJ0tNmONUQ3352g5+VdAtVeiI1xHg==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
     },
     "node_modules/@tarojs/taro": {
       "version": "3.6.38",
       "resolved": "https://registry.npmmirror.com/@tarojs/taro/-/taro-3.6.38.tgz",
       "integrity": "sha512-KG5JQxVgkCjJ/sbSEL6+fyDHU8D/zUMpLJSSw4x/sq+9wnWvG+r4dnPh2meI1LcIhMdi+0sd3MErOis1qNqQlQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@tarojs/api": "3.6.38"
       },
@@ -4931,7 +4925,6 @@
       "integrity": "sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "undici-types": "~7.18.0"
       }
@@ -5365,7 +5358,6 @@
       "resolved": "https://registry.npmmirror.com/acorn/-/acorn-8.16.0.tgz",
       "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
       "license": "MIT",
-      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -5487,7 +5479,6 @@
       "resolved": "https://registry.npmmirror.com/ajv/-/ajv-6.14.0.tgz",
       "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.1",
         "fast-json-stable-stringify": "^2.0.0",
@@ -6623,7 +6614,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.9.0",
         "caniuse-lite": "^1.0.30001759",
@@ -9853,7 +9843,6 @@
       "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.2.0",
         "@eslint-community/regexpp": "^4.6.1",
@@ -16864,7 +16853,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "nanoid": "^3.3.11",
         "picocolors": "^1.1.1",
@@ -17529,7 +17517,6 @@
       "resolved": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
       "integrity": "sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "loose-envify": "^1.1.0"
       },
@@ -18351,7 +18338,6 @@
       "resolved": "https://registry.npmmirror.com/rework/-/rework-1.0.1.tgz",
       "integrity": "sha512-eEjL8FdkdsxApd0yWVZgBGzfCQiT8yqSc2H1p4jpZpQdtz7ohETiDMoje5PlM8I9WgkqkreVxFUKYOiJdVWDXw==",
       "dev": true,
-      "peer": true,
       "dependencies": {
         "convert-source-map": "^0.3.3",
         "css": "^2.0.0"
@@ -18362,8 +18348,7 @@
       "resolved": "https://registry.npmmirror.com/rework-visit/-/rework-visit-1.0.0.tgz",
       "integrity": "sha512-W6V2fix7nCLUYX1v6eGPrBOZlc03/faqzP4sUxMAJMBMOPYhfV/RyLegTufn5gJKaOITyi+gvf0LXDZ9NzkHnQ==",
       "dev": true,
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
     },
     "node_modules/rework/node_modules/convert-source-map": {
       "version": "0.3.5",
@@ -22010,7 +21995,6 @@
       "resolved": "https://registry.npmmirror.com/webpack/-/webpack-4.47.0.tgz",
       "integrity": "sha512-td7fYwgLSrky3fI1EuU5cneU4+pbH6GgOfuKNS1tNPcfdGinGELAqsb/BP4nnvZyKSG2i/xFGU7+n2PvZA8HJQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@webassemblyjs/ast": "1.9.0",
         "@webassemblyjs/helper-module-context": "1.9.0",
diff --git a/banban-mini/src/pages/bind/index.scss b/banban-mini/src/pages/bind/index.scss
index 9f73a56..50b3718 100644
--- a/banban-mini/src/pages/bind/index.scss
+++ b/banban-mini/src/pages/bind/index.scss
@@ -6,6 +6,67 @@
   padding-bottom: calc(120px + env(safe-area-inset-bottom));
 }
 
+.loading {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  height: 400px;
+  font-size: 30px;
+  color: #999999;
+}
+
+.empty-tip {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  height: 70%;
+  font-size: 30px;
+  color: #999999;
+  padding: 0 48px;
+
+  .empty-title {
+    font-size: 36px;
+    color: #1A1A1A;
+    font-weight: 600;
+    margin-bottom: 12px;
+  }
+
+  .empty-desc {
+    font-size: 26px;
+    color: #999999;
+    margin-bottom: 48px;
+  }
+
+  .empty-input-wrap {
+    width: 100%;
+    margin-bottom: 24px;
+
+    .empty-input {
+      background: #F5F7FA;
+      border-radius: 12px;
+      padding: 24px;
+      font-size: 30px;
+      width: 100%;
+      height: 96px;
+      box-sizing: border-box;
+      text-align: center;
+    }
+  }
+
+  .empty-btn {
+    background: #FF8C42;
+    border-radius: 12px;
+    padding: 24px 64px;
+
+    .empty-btn-text {
+      color: #FFFFFF;
+      font-size: 32px;
+      font-weight: 500;
+    }
+  }
+}
+
 .icon-bg {
   width: 72px;
   height: 72px;
diff --git a/banban-mini/src/pages/bind/index.tsx b/banban-mini/src/pages/bind/index.tsx
index 0b3c571..287b0bb 100644
--- a/banban-mini/src/pages/bind/index.tsx
+++ b/banban-mini/src/pages/bind/index.tsx
@@ -1,27 +1,59 @@
-import { View, Text, Button, Image } from '@tarojs/components'
+import { View, Text, Button, Image, Input } from '@tarojs/components'
 import { useState, useEffect } from 'react'
 import Taro from '@tarojs/taro'
+import { getToken } from '@/services/api'
+import { getCurrentBinding, directBind } from '@/services/binding'
+import { getChildren, createChild } from '@/services/child'
 import './index.scss'
 
+interface Child {
+  child_id: number
+  child_name: string
+}
+
 export default function Bind() {
   const [isScanning, setIsScanning] = useState(false)
+  const [loading, setLoading] = useState(true)
+  const [children, setChildren] = useState<Child[]>([])
+  const [newChildName, setNewChildName] = useState('')
+  const [saving, setSaving] = useState(false)
 
   useEffect(() => {
-    // 检查是否已登录
-    const isLoggedIn = Taro.getStorageSync('isLoggedIn')
-    if (!isLoggedIn) {
-      // 未登录，跳转到登录页面
+    checkAuth()
+  }, [])
+
+  const checkAuth = async () => {
+    const token = getToken()
+    if (!token) {
       Taro.redirectTo({ url: '/pages/login/index' })
       return
     }
 
-    // 检查是否已绑定设备
-    const hasDevice = Taro.getStorageSync('hasDevice')
-    if (hasDevice) {
-      // 已绑定设备，跳转到首页
-      Taro.reLaunch({ url: '/pages/device/index' })
+    try {
+      const childRes = await getChildren()
+      setChildren(childRes.items || [])
+      
+      if (childRes.items?.length === 0) {
+        setLoading(false)
+        return
+      }
+    } catch (err) {
+      console.error('Get children failed:', err)
     }
-  }, [])
+
+    try {
+      const binding = await getCurrentBinding()
+      if (binding) {
+        Taro.showToast({ title: '已有设备绑定', icon: 'none' })
+        setTimeout(() => {
+          Taro.reLaunch({ url: '/pages/device/index' })
+        }, 1000)
+        return
+      }
+    } catch (err) {
+    }
+    setLoading(false)
+  }
 
   const handleScanCode = () => {
     setIsScanning(true)
@@ -29,56 +61,57 @@ export default function Bind() {
     Taro.scanCode({
       onlyFromCamera: true,
       scanType: ['qrCode', 'barCode'],
-      success: (res) => {
+      success: async (res) => {
         setIsScanning(false)
-        console.log('扫码结果：', res.result)
+        const deviceId = res.result
         
-        // 模拟绑定设备
-        Taro.showLoading({ title: '绑定中...' })
-        
-        setTimeout(() => {
-          Taro.hideLoading()
-          
-          // 保存设备信息
-          Taro.setStorageSync('hasDevice', true)
-          Taro.setStorageSync('deviceInfo', {
-            id: res.result || 'DEVICE_' + Date.now(),
-            name: '小夏的伴伴',
-            status: 'online',
-            battery: 82,
-            bindTime: new Date().toLocaleString()
-          })
-          
-          Taro.showToast({
-            title: '设备绑定成功',
-            icon: 'success',
-            duration: 2000,
-            complete: () => {
-              // 绑定成功，跳转到首页
-              setTimeout(() => {
-                Taro.reLaunch({ url: '/pages/device/index' })
-              }, 500)
-            }
-          })
-        }, 1500)
+        if (!deviceId) {
+          Taro.showToast({ title: '无效的设备码', icon: 'none' })
+          return
+        }
+
+        await doBind(deviceId)
       },
       fail: (err) => {
         setIsScanning(false)
-        console.error('扫码失败：', err)
-        
-        // 用户取消扫码，不显示错误
         if (err.errMsg && err.errMsg.includes('cancel')) {
           return
         }
-        
-        Taro.showToast({
-          title: '扫码失败，请重试',
-          icon: 'none'
-        })
+        Taro.showToast({ title: '扫码失败', icon: 'none' })
       }
     })
   }
 
+  const doBind = async (deviceId: string) => {
+    if (children.length === 0) {
+      Taro.showToast({ title: '请先添加儿童', icon: 'none' })
+      return
+    }
+
+    Taro.showLoading({ title: '绑定中...' })
+    
+    try {
+      await directBind({
+        device_id: deviceId,
+        child_id: children[0].child_id
+      })
+      Taro.hideLoading()
+      Taro.showToast({
+        title: '设备绑定成功',
+        icon: 'success',
+        duration: 1500,
+        complete: () => {
+          setTimeout(() => {
+            Taro.reLaunch({ url: '/pages/device/index' })
+          }, 500)
+        }
+      })
+    } catch (err: any) {
+      Taro.hideLoading()
+      Taro.showToast({ title: err.message || '绑定失败', icon: 'none' })
+    }
+  }
+
   const handleManualInput = () => {
     Taro.showModal({
       title: '手动输入设备码',
@@ -86,37 +119,60 @@ export default function Bind() {
       placeholderText: '请输入设备底部的设备码',
       success: (res) => {
         if (res.confirm && res.content) {
-          // 模拟绑定设备
-          Taro.showLoading({ title: '绑定中...' })
-          
-          setTimeout(() => {
-            Taro.hideLoading()
-            
-            Taro.setStorageSync('hasDevice', true)
-            Taro.setStorageSync('deviceInfo', {
-              id: res.content,
-              name: '小夏的伴伴',
-              status: 'online',
-              battery: 82,
-              bindTime: new Date().toLocaleString()
-            })
-            
-            Taro.showToast({
-              title: '设备绑定成功',
-              icon: 'success',
-              duration: 2000,
-              complete: () => {
-                setTimeout(() => {
-                  Taro.reLaunch({ url: '/pages/device/index' })
-                }, 500)
-              }
-            })
-          }, 1500)
+          doBind(res.content)
         }
       }
     })
   }
 
+  const handleAddChild = async () => {
+    if (!newChildName.trim()) {
+      Taro.showToast({ title: '请输入儿童姓名', icon: 'none' })
+      return
+    }
+    setSaving(true)
+    try {
+      await createChild({ child_name: newChildName.trim() })
+      Taro.showToast({ title: '添加成功', icon: 'success' })
+      const childRes = await getChildren()
+      setChildren(childRes.items || [])
+    } catch (err) {
+      Taro.showToast({ title: '添加失败', icon: 'none' })
+    } finally {
+      setSaving(false)
+    }
+  }
+
+  if (loading) {
+    return (
+      <View className='bind-page'>
+        <View className='loading'>加载中...</View>
+      </View>
+    )
+  }
+
+  if (children.length === 0) {
+    return (
+      <View className='bind-page'>
+        <View className='empty-tip'>
+          <Text className='empty-title'>请先添加儿童</Text>
+          <Text className='empty-desc'>绑定设备前需要先添加儿童信息</Text>
+          <View className='empty-input-wrap'>
+            <Input 
+              className='empty-input'
+              placeholder='请输入儿童姓名'
+              value={newChildName}
+              onInput={(e) => setNewChildName(e.detail.value)}
+            />
+          </View>
+          <View className='empty-btn' onClick={handleAddChild}>
+            <Text className='empty-btn-text'>{saving ? '保存中...' : '确认添加'}</Text>
+          </View>
+        </View>
+      </View>
+    )
+  }
+
   return (
     <View className='bind-page'>
       <View className='bind-header'>
@@ -170,4 +226,4 @@ export default function Bind() {
       </View>
     </View>
   )
-}
+}
\ No newline at end of file
diff --git a/banban-mini/src/pages/device/index.tsx b/banban-mini/src/pages/device/index.tsx
index df306d2..210aff6 100644
--- a/banban-mini/src/pages/device/index.tsx
+++ b/banban-mini/src/pages/device/index.tsx
@@ -1,6 +1,7 @@
 import { View, Text, Switch, Slider, Image } from '@tarojs/components'
 import { useState, useEffect } from 'react'
 import Taro from '@tarojs/taro'
+import { getCurrentBinding } from '@/services/binding'
 import './index.scss'
 
 interface DeviceData {
@@ -20,35 +21,59 @@ export default function Device() {
   const [hasDevice, setHasDevice] = useState(false)
 
   useEffect(() => {
-    // 检查登录状态
-    const isLoggedIn = Taro.getStorageSync('isLoggedIn')
-    if (!isLoggedIn) {
+    console.log('[Device] Checking login status...')
+    const token = Taro.getStorageSync('token')
+    console.log('[Device] Token exists:', !!token)
+    
+    if (!token) {
+      console.log('[Device] No token, redirecting to login')
       Taro.redirectTo({ url: '/pages/login/index' })
       return
     }
 
-    // 检查设备绑定状态
-    const deviceInfo = Taro.getStorageSync('deviceInfo')
-    const hasDeviceFlag = Taro.getStorageSync('hasDevice')
-    
-    setHasDevice(!!hasDeviceFlag)
-    
-    if (deviceInfo && hasDeviceFlag) {
-      setDevice({
-        id: deviceInfo.id,
-        name: deviceInfo.name || '小夏的伴伴',
-        status: deviceInfo.status || 'online',
-        battery: deviceInfo.battery || 82,
-        daysLeft: 4,
-        sleepEnabled: true,
-        sleepTime: '每天 22:00 - 07:00',
-        volume: 50
-      })
-    }
-    
-    setIsLoading(false)
+    loadDeviceInfo()
   }, [])
 
+  const loadDeviceInfo = async () => {
+    try {
+      const binding = await getCurrentBinding()
+      console.log('[Device] Got binding:', binding)
+      
+      if (binding) {
+        setHasDevice(true)
+        Taro.setStorageSync('hasDevice', '1')
+        Taro.setStorageSync('deviceInfo', {
+          id: binding.device_id,
+          name: '伴伴设备',
+          status: 'online',
+          battery: 82
+        })
+        setDevice({
+          id: binding.device_id,
+          name: '伴伴设备',
+          status: 'online',
+          battery: 82,
+          daysLeft: 4,
+          sleepEnabled: true,
+          sleepTime: '每天 22:00 - 07:00',
+          volume: 50
+        })
+      } else {
+        setHasDevice(false)
+        Taro.removeStorageSync('hasDevice')
+        Taro.removeStorageSync('deviceInfo')
+      }
+    } catch (err: any) {
+      console.log('[Device] No binding or error:', err?.message || err)
+      if (err?.status === 404) {
+        setHasDevice(false)
+        Taro.removeStorageSync('hasDevice')
+        Taro.removeStorageSync('deviceInfo')
+      }
+    }
+    setIsLoading(false)
+  }
+
   const handleSleepToggle = (e: any) => {
     if (!device) return
     setDevice({ ...device, sleepEnabled: e.detail.value })
diff --git a/banban-mini/src/pages/login/index.tsx b/banban-mini/src/pages/login/index.tsx
index b4b638b..694eee3 100644
--- a/banban-mini/src/pages/login/index.tsx
+++ b/banban-mini/src/pages/login/index.tsx
@@ -1,51 +1,118 @@
 import { View, Text, Button } from '@tarojs/components'
 import { useEffect } from 'react'
 import Taro from '@tarojs/taro'
+import { BASE_URL, request } from '@/services/api'
 import './index.scss'
 
 export default function Login() {
   useEffect(() => {
-    // 检查是否已登录
-    const isLoggedIn = Taro.getStorageSync('isLoggedIn')
-    
-    if (isLoggedIn) {
-      // 已登录，跳转到首页
+    console.log('[Login] Page mounted, checking token...')
+    const token = Taro.getStorageSync('token')
+    console.log('[Login] Token exists:', !!token)
+    if (token) {
+      console.log('[Login] Already logged in, redirecting to device page')
       Taro.reLaunch({ url: '/pages/device/index' })
     }
   }, [])
 
-  const handleLogin = () => {
-    Taro.showLoading({ title: '登录中...' })
-    
-    // 调用微信登录
-    Taro.login({
-      success: (loginRes) => {
-        console.log('微信登录成功:', loginRes)
-        
-        // 模拟后端验证 - 实际项目中需要将code发送到服务器
-        // 这里假设登录成功
-        Taro.setStorageSync('isLoggedIn', true)
-        Taro.setStorageSync('userInfo', {
-          nickName: '微信家长',
-          avatarUrl: '',
-          isAdmin: true,
-          openid: loginRes.code
+  const doWeChatLogin = async () => {
+    try {
+      console.log('[Login] Starting WeChat login...')
+      Taro.showLoading({ title: '登录中...' })
+
+      // 1. 调用微信登录获取 code
+      console.log('[Login] Step 1: Calling Taro.login()...')
+      const loginRes = await Taro.login()
+      const code = loginRes.code
+      console.log('[Login] Got code:', code ? 'yes' : 'no')
+
+      // 2. 获取用户头像信息 (可选)
+      let userInfo = null
+      try {
+        console.log('[Login] Step 2: Calling Taro.getUserProfile()...')
+        const profileRes = await Taro.getUserProfile({
+          desc: '用于完善用户资料'
         })
-        
-        Taro.hideLoading()
-        
-        // 登录成功后跳转到首页
+        userInfo = profileRes.userInfo
+        console.log('[Login] Got userInfo:', !!userInfo)
+      } catch (e) {
+        console.log('[Login] getUserProfile failed (expected if user denied):', e)
+      }
+
+      // 3. 调用后端登录接口 (微信登录)
+      console.log('[Login] Step 3: Calling backend /auth/login...')
+      const res = await request<{ access_token: string; expires_in: number; user_id: number }>('/auth/login', {
+        method: 'POST',
+        data: {
+          code: code,  // 微信 code
+          nickname: userInfo?.nickName,
+          avatar_url: userInfo?.avatarUrl
+        }
+      })
+      console.log('[Login] Backend login success, user_id:', res.user_id)
+
+      // 4. 保存 token 和用户信息
+      console.log('[Login] Step 4: Saving token and user info...')
+      Taro.setStorageSync('token', res.access_token)
+      Taro.setStorageSync('user_id', res.user_id)
+      Taro.setStorageSync('expires_in', res.expires_in)
+      
+      // 保存用户信息用于显示
+      if (userInfo) {
+        Taro.setStorageSync('userInfo', {
+          nickname: userInfo.nickName,
+          avatar_url: userInfo.avatarUrl
+        })
+      }
+
+      // 5. 如果获取到了用户信息，发送到后端更新
+      if (userInfo) {
+        console.log('[Login] Step 5: Updating user profile...')
+        try {
+          await request(`/parents/${res.user_id}`, {
+            method: 'PATCH',
+            data: {
+              nickname: userInfo.nickName,
+              avatar_url: userInfo.avatarUrl
+            }
+          })
+        } catch (e) {
+          console.log('[Login] Update user profile failed:', e)
+        }
+      }
+
+      Taro.hideLoading()
+      console.log('[Login] Step 6: Login complete, showing success toast')
+      Taro.showToast({ title: '登录成功', icon: 'success' })
+
+      // 6. 跳转到首页
+      console.log('[Login] Redirecting to /pages/device/index...')
+      setTimeout(() => {
         Taro.reLaunch({ url: '/pages/device/index' })
-      },
-      fail: (err) => {
-        Taro.hideLoading()
-        console.error('微信登录失败:', err)
+      }, 500)
+
+    } catch (err: any) {
+      Taro.hideLoading()
+      console.error('[Login] Login failed:', err)
+
+      // 如果是 401 错误，尝试通过创建新用户登录
+      if (err.status === 401) {
         Taro.showToast({
           title: '登录失败，请重试',
           icon: 'none'
         })
+      } else {
+        Taro.showToast({
+          title: err.message || '网络错误，请重试',
+          icon: 'none'
+        })
       }
-    })
+    }
+  }
+
+  const handleLogin = () => {
+    console.log('Button clicked, starting login...')
+    doWeChatLogin()
   }
 
   return (
@@ -77,8 +144,7 @@ export default function Login() {
         <View className='login-btn-wrapper'>
           <Button 
             className='login-btn' 
-            openType='getUserInfo'
-            onGetUserInfo={handleLogin}
+            onClick={handleLogin}
           >
             <Text className='btn-icon'>🌐</Text>
             <Text className='btn-text'>微信一键登录</Text>
diff --git a/banban-mini/src/pages/sleep/index.scss b/banban-mini/src/pages/sleep/index.scss
index 694d940..9bba1ba 100644
--- a/banban-mini/src/pages/sleep/index.scss
+++ b/banban-mini/src/pages/sleep/index.scss
@@ -160,3 +160,150 @@
     color: #999999;
   }
 }
+
+.add-input-box {
+  background: #FFFFFF;
+  border-radius: 20px;
+  margin: 0 24px 24px;
+  padding: 24px;
+  box-shadow: 0 2px 12px rgba(0, 0, 0, 0.04);
+
+  .input-row {
+    display: flex;
+    flex-direction: column;
+    gap: 16px;
+  }
+
+  .input-wrapper {
+    .name-input {
+      background: #F5F7FA;
+      border-radius: 12px;
+      padding: 20px 24px;
+      font-size: 30px;
+      width: 100%;
+      box-sizing: border-box;
+    }
+
+    .input-hint {
+      font-size: 24px;
+      color: #999999;
+      margin-top: 12px;
+      display: block;
+    }
+  }
+
+  .input-btns {
+    display: flex;
+    justify-content: flex-end;
+    gap: 24px;
+
+    .confirm-btn {
+      font-size: 30px;
+      color: #FF8C42;
+      font-weight: 500;
+    }
+
+    .cancel-btn {
+      font-size: 30px;
+      color: #999999;
+    }
+  }
+}
+
+.menu-item.disabled {
+  opacity: 0.5;
+
+  &:active {
+    background: transparent;
+  }
+}
+
+.logout-section {
+  margin: 24px;
+}
+
+.logout-btn {
+  background: #FFFFFF;
+  border-radius: 20px;
+  padding: 26px 24px;
+  text-align: center;
+  box-shadow: 0 2px 12px rgba(0, 0, 0, 0.04);
+
+  .logout-text {
+    font-size: 30px;
+    color: #FF3B30;
+    font-weight: 500;
+  }
+}
+
+.modal-mask {
+  position: fixed;
+  top: 0;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  background: rgba(0, 0, 0, 0.5);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 1000;
+}
+
+.modal-content {
+  background: #FFFFFF;
+  border-radius: 20px;
+  width: 600px;
+  margin: 0 48px;
+  overflow: hidden;
+}
+
+.modal-header {
+  padding: 32px 32px 16px;
+  text-align: center;
+
+  .modal-title {
+    font-size: 34px;
+    font-weight: 600;
+    color: #1A1A1A;
+  }
+}
+
+.modal-body {
+  padding: 16px 32px 32px;
+  display: flex;
+  align-items: center;
+
+  .modal-input {
+    background: #F5F7FA;
+    border-radius: 12px;
+    padding: 0 24px;
+    font-size: 34px;
+    width: 100%;
+    height: 96px;
+    box-sizing: border-box;
+    display: flex;
+    align-items: center;
+  }
+}
+
+.modal-footer {
+  display: flex;
+  border-top: 1px solid #F0F0F0;
+
+  .modal-btn {
+    flex: 1;
+    text-align: center;
+    padding: 24px 0;
+    font-size: 32px;
+
+    &.cancel {
+      color: #666666;
+      border-right: 1px solid #F0F0F0;
+    }
+
+    &.confirm {
+      color: #FF8C42;
+      font-weight: 500;
+    }
+  }
+}
diff --git a/banban-mini/src/pages/sleep/index.tsx b/banban-mini/src/pages/sleep/index.tsx
index 641a0fc..0fdeab9 100644
--- a/banban-mini/src/pages/sleep/index.tsx
+++ b/banban-mini/src/pages/sleep/index.tsx
@@ -1,36 +1,188 @@
-import { View, Text, Image } from '@tarojs/components'
-import { useState } from 'react'
+import { View, Text, Image, Input } from '@tarojs/components'
+import { useState, useEffect } from 'react'
 import Taro from '@tarojs/taro'
+import { getToken, getCurrentUserId } from '@/services/api'
+import { getChildren, createChild, updateChild } from '@/services/child'
+import { getCurrentBinding, unbindDevice } from '@/services/binding'
 import './index.scss'
 
-interface UserInfo {
-  name: string
-  role: string
-  isVerified: boolean
-  avatar: string
+interface Child {
+  child_id: number
+  child_name: string
+  child_gender: number
+  status: number
+}
+
+interface Binding {
+  device_id: string
+  child_id: number
+  status: number
 }
 
 interface MenuItem {
   icon: string
+  iconBgClass: string
   name: string
-  value: string
+  value?: string
   arrow?: boolean
+  disabled?: boolean
 }
 
 export default function Sleep() {
-  const [user] = useState<UserInfo>({
-    name: '微信家长',
-    role: '管理员身份',
-    isVerified: true,
-    avatar: '👤'
-  })
+  const [children, setChildren] = useState<Child[]>([])
+  const [binding, setBinding] = useState<Binding | null>(null)
+  const [loading, setLoading] = useState(true)
+  const [showModal, setShowModal] = useState(false)
+  const [modalType, setModalType] = useState<'add' | 'edit'>('add')
+  const [childName, setChildName] = useState('')
+  const [editingChildId, setEditingChildId] = useState<number | null>(null)
+  const [parentInfo, setParentInfo] = useState<{ nickname?: string; avatar_url?: string }>({})
 
-  const menuItems = [
+  const token = getToken()
+  const userId = getCurrentUserId()
+
+  useEffect(() => {
+    if (!token) {
+      Taro.reLaunch({ url: '/pages/login/index' })
+      return
+    }
+    loadData()
+  }, [])
+
+  const loadData = async () => {
+    try {
+      setLoading(true)
+      
+      // Get parent info
+      const userInfo = Taro.getStorageSync('userInfo') || {}
+      setParentInfo(userInfo)
+      
+      // Get children
+      const childRes = await getChildren()
+      setChildren(childRes.items || [])
+
+      // Get binding
+      try {
+        const bindRes = await getCurrentBinding()
+        setBinding(bindRes)
+      } catch (err: any) {
+        if (err.status === 404) {
+          setBinding(null)
+        }
+      }
+    } catch (err) {
+      console.error('Load failed:', err)
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  const handleOpenModal = (type: 'add' | 'edit', child?: Child) => {
+    setModalType(type)
+    if (type === 'edit' && child) {
+      setChildName(child.child_name)
+      setEditingChildId(child.child_id)
+    } else {
+      setChildName('')
+      setEditingChildId(null)
+    }
+    setShowModal(true)
+  }
+
+  const handleModalConfirm = async () => {
+    if (!childName.trim()) {
+      Taro.showToast({ title: '请输入昵称', icon: 'none' })
+      return
+    }
+
+    try {
+      if (modalType === 'add') {
+        await createChild({ child_name: childName.trim() })
+        Taro.showToast({ title: '添加成功', icon: 'success' })
+      } else if (editingChildId) {
+        await updateChild(editingChildId, { child_name: childName.trim() })
+        Taro.showToast({ title: '修改成功', icon: 'success' })
+      }
+      setShowModal(false)
+      setChildName('')
+      setEditingChildId(null)
+      loadData()
+    } catch (err) {
+      Taro.showToast({ title: '操作失败', icon: 'none' })
+    }
+  }
+
+  const handleModalCancel = () => {
+    setShowModal(false)
+    setChildName('')
+    setEditingChildId(null)
+  }
+
+  const handleUnbind = () => {
+    if (!binding) return
+    Taro.showModal({
+      title: '解除设备绑定',
+      content: '确定要解除当前设备的绑定吗？',
+      confirmColor: '#FF8C42',
+      success: async (res) => {
+        if (res.confirm) {
+          try {
+            await unbindDevice(binding.device_id)
+            Taro.showToast({ title: '已解绑', icon: 'success' })
+            setBinding(null)
+            loadData()
+          } catch (err) {
+            Taro.showToast({ title: '解绑失败', icon: 'none' })
+          }
+        }
+      }
+    })
+  }
+
+  const handleLogout = async () => {
+    Taro.showModal({
+      title: '退出登录',
+      content: '确定要退出登录吗？',
+      confirmColor: '#FF8C42',
+      success: (res) => {
+        if (res.confirm) {
+          Taro.removeStorageSync('token')
+          Taro.removeStorageSync('user_id')
+          Taro.removeStorageSync('userInfo')
+          Taro.reLaunch({ url: '/pages/login/index' })
+        }
+      }
+    })
+  }
+
+  const handleMenuClick = (item: MenuItem) => {
+    if (item.disabled) return
+    
+    if (item.name === '绑定新设备') {
+      if (binding) {
+        Taro.showToast({ title: '已有设备绑定', icon: 'none' })
+      } else {
+        Taro.navigateTo({ url: '/pages/bind/index' })
+      }
+    } else if (item.name === '解除设备绑定') {
+      handleUnbind()
+    } else if (item.name.includes('儿童资料')) {
+      if (children.length > 0) {
+        handleOpenModal('edit', children[0])
+      } else {
+        handleOpenModal('add')
+      }
+    }
+  }
+
+  if (!token) return null
+
+  const menuItems: MenuItem[] = [
     {
       icon: require('../../assets/tab-icons/orange-robot.png'),
       iconBgClass: 'orange',
       name: '儿童资料 (用于称呼)',
-      value: '小夏 (6岁)',
+      value: children.length > 0 ? children[0].child_name : '未设置',
       arrow: true
     },
     {
@@ -45,45 +197,13 @@ export default function Sleep() {
       iconBgClass: 'red',
       name: '解除设备绑定',
       value: '',
-      arrow: true
+      arrow: true,
+      disabled: !binding
     }
   ]
 
-  const handleMenuClick = (item: MenuItem) => {
-    if (item.name === '绑定新设备') {
-      // 跳转到绑定设备页面
-      Taro.navigateTo({ url: '/pages/bind/index' })
-    } else if (item.name === '解除设备绑定') {
-      Taro.showModal({
-        title: '解除设备绑定',
-        content: '确定要解除当前设备的绑定吗？解除后需要重新扫码绑定。',
-        confirmColor: '#FF8C42',
-        success: (res) => {
-          if (res.confirm) {
-            // 清除设备信息
-            Taro.removeStorageSync('hasDevice')
-            Taro.removeStorageSync('deviceInfo')
-            
-            Taro.showToast({
-              title: '已解除绑定',
-              icon: 'success',
-              duration: 1500,
-              complete: () => {
-                setTimeout(() => {
-                  Taro.redirectTo({ url: '/pages/bind/index' })
-                }, 500)
-              }
-            })
-          }
-        }
-      })
-    } else {
-      Taro.showToast({
-        title: `点击了 ${item.name}`,
-        icon: 'none'
-      })
-    }
-  }
+  const firstChild = children[0]
+  const childDisplayValue = firstChild ? firstChild.child_name : ''
 
   return (
     <View className='manage-page'>
@@ -93,50 +213,76 @@ export default function Sleep() {
 
       <View className='user-card'>
         <View className='user-avatar'>
-          <Text className='avatar-img'>{user.avatar}</Text>
+          {parentInfo.avatar_url ? (
+            <Image className='avatar-img' src={parentInfo.avatar_url} mode='aspectFill' />
+          ) : (
+            <Text className='avatar-img'>👤</Text>
+          )}
         </View>
         <View className='user-info'>
-          <Text className='user-name'>{user.name}</Text>
-          <Text className='user-role'>{user.role}</Text>
+          <Text className='user-name'>{parentInfo.nickname || '家长用户'}</Text>
+          <Text className='user-role'>ID: {userId}</Text>
         </View>
-        {user.isVerified && (
-          <View className='verified-badge'>
-            <Text>已实名</Text>
-          </View>
-        )}
       </View>
 
       <View className='menu-card'>
         {menuItems.map((item, index) => (
           <View key={index}>
-            <View className='menu-item' onClick={() => handleMenuClick(item)}>
+            <View 
+              className={`menu-item ${item.disabled ? 'disabled' : ''}`} 
+              onClick={() => handleMenuClick(item)}
+            >
               <View className='menu-left'>
                 <View className={`icon-bg ${item.iconBgClass}`}>
-                  <Image
-                    className='control-icon-img'
-                    src={item.icon}
-                    mode='aspectFit'
-                  />
+                  <Image className='control-icon-img' src={item.icon} mode='aspectFit' />
                 </View>
                 <Text className='menu-name'>{item.name}</Text>
               </View>
               <View className='menu-right'>
-                {item.value && (
-                  <Text className='menu-value'>{item.value}</Text>
+                {item.name.includes('儿童资料') && (
+                  <Text className='menu-value'>{childDisplayValue}</Text>
                 )}
                 {item.arrow && <Text className='arrow'>›</Text>}
               </View>
             </View>
-            {index < menuItems.length - 1 && (
-              <View className='divider'></View>
-            )}
+            {index < menuItems.length - 1 && <View className='divider'></View>}
           </View>
         ))}
       </View>
 
+      <View className='logout-section'>
+        <View className='logout-btn' onClick={handleLogout}>
+          <Text className='logout-text'>退出登录</Text>
+        </View>
+      </View>
+
       <View className='version-info'>
         <Text className='version-text'>伴伴 Companion V1.1.0</Text>
       </View>
+
+      {/* Modal */}
+      {showModal && (
+        <View className='modal-mask'>
+          <View className='modal-content'>
+            <View className='modal-header'>
+              <Text className='modal-title'>{modalType === 'add' ? '添加儿童' : '修改昵称'}</Text>
+            </View>
+            <View className='modal-body'>
+              <Input 
+                className='modal-input'
+                placeholder='请输入儿童昵称'
+                value={childName}
+                onInput={(e) => setChildName(e.detail.value)}
+                focus={true}
+              />
+            </View>
+            <View className='modal-footer'>
+              <Text className='modal-btn cancel' onClick={handleModalCancel}>取消</Text>
+              <Text className='modal-btn confirm' onClick={handleModalConfirm}>确认</Text>
+            </View>
+          </View>
+        </View>
+      )}
     </View>
   )
-}
+}
\ No newline at end of file
diff --git a/banban-mini/src/services/api.ts b/banban-mini/src/services/api.ts
new file mode 100644
index 0000000..ef3ad91
--- /dev/null
+++ b/banban-mini/src/services/api.ts
@@ -0,0 +1,56 @@
+import Taro from '@tarojs/taro'
+
+// const BASE_URL = 'http://175.24.73.253:8001' // 改为实际后端IP
+const BASE_URL = 'http://127.0.0.1:8001' 
+
+class ApiError extends Error {
+  constructor(public status: number, message: string) {
+    super(message)
+  }
+}
+
+async function request<T>(
+  url: string,
+  options: {
+    method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'
+    data?: any
+    headers?: Record<string, string>
+  } = {}
+): Promise<T> {
+  const token = Taro.getStorageSync('token')
+  console.log(`[API] ${options.method || 'GET'} ${url}`, token ? 'with token' : 'no token')
+  
+  const headers: Record<string, string> = {
+    'Content-Type': 'application/json',
+    ...options.headers,
+  }
+  if (token) {
+    headers['Authorization'] = `Bearer ${token}`
+  }
+
+  const response = await Taro.request({
+    url: `${BASE_URL}${url}`,
+    method: options.method || 'GET',
+    data: options.data,
+    header: headers,
+  })
+
+  console.log(`[API] Response status:`, response.statusCode)
+  
+  if (response.statusCode >= 400) {
+    const detail = response.data?.detail || 'Request failed'
+    throw new ApiError(response.statusCode, detail)
+  }
+
+  return response.data
+}
+
+export { request, ApiError, BASE_URL }
+
+export function getToken(): string {
+  return Taro.getStorageSync('token') || ''
+}
+
+export function getCurrentUserId(): number {
+  return Taro.getStorageSync('user_id') || 0
+}
\ No newline at end of file
diff --git a/banban-mini/src/services/auth.ts b/banban-mini/src/services/auth.ts
new file mode 100644
index 0000000..cf2511c
--- /dev/null
+++ b/banban-mini/src/services/auth.ts
@@ -0,0 +1,75 @@
+import { request, BASE_URL } from './api'
+
+export interface Parent {
+  user_id: number
+  openid: string
+  unionid?: string
+  nickname?: string
+  avatar_url?: string
+  phone?: string
+  status: number
+}
+
+// 微信登录
+export async function wechatLogin(code: string): Promise<{ token: string; user_id: number }> {
+  // TODO: 实现微信登录 - 通过 code 换取 openid，然后调用后端
+  // 这里先返回 mock 数据
+  const mockParent: Parent = {
+    user_id: 1,
+    openid: 'mock_openid_' + code,
+    nickname: '微信用户',
+    status: 1,
+  }
+  
+  // 保存模拟 token
+  const token = 'mock_token_' + Date.now()
+  Taro.setStorageSync('token', token)
+  Taro.setStorageSync('user_id', mockParent.user_id)
+  
+  return { token, user_id: mockParent.user_id }
+}
+
+// 创建家长
+export async function createParent(data: {
+  openid: string
+  unionid?: string
+  nickname?: string
+  avatar_url?: string
+}): Promise<Parent> {
+  return request<Parent>('/parents', {
+    method: 'POST',
+    data,
+  })
+}
+
+// 获取家长信息
+export async function getParent(userId: number): Promise<Parent> {
+  return request<Parent>(`/parents/${userId}`)
+}
+
+// 更新家长信息
+export async function updateParent(
+  userId: number,
+  data: { nickname?: string; avatar_url?: string; phone?: string }
+): Promise<Parent> {
+  return request<Parent>(`/parents/${userId}`, {
+    method: 'PATCH',
+    data,
+  })
+}
+
+// 获取 token
+export function getToken(): string {
+  return Taro.getStorageSync('token')
+}
+
+// 清除 token
+export function clearToken(): void {
+  Taro.removeStorageSync('token')
+  Taro.removeStorageSync('user_id')
+}
+
+// 获取当前用户ID
+export function getCurrentUserId(): number {
+  return Taro.getStorageSync('user_id') || 0
+}
\ No newline at end of file
diff --git a/banban-mini/src/services/binding.ts b/banban-mini/src/services/binding.ts
new file mode 100644
index 0000000..ee81cd8
--- /dev/null
+++ b/banban-mini/src/services/binding.ts
@@ -0,0 +1,105 @@
+import { request } from './api'
+
+export interface Binding {
+  device_id: string
+  child_id: number
+  status: number
+  bound_at: string
+}
+
+export interface BindStartResponse {
+  bind_token: string
+  expires_at: string
+}
+
+export interface BindHistoryItem {
+  device_id: string
+  child_id: number
+  bound_at: string
+  unbound_at?: string
+}
+
+export interface BindHistoryResponse {
+  items: BindHistoryItem[]
+  total: number
+  next_cursor?: string
+}
+
+// 获取当前绑定信息
+export async function getCurrentBinding(): Promise<Binding | null> {
+  try {
+    return await request<Binding>('/bindings/current')
+  } catch (err: any) {
+    if (err.status === 404) {
+      return null
+    }
+    throw err
+  }
+}
+
+// 开始绑定设备
+export async function startBind(data: {
+  device_id: string
+  child_id: number
+}): Promise<BindStartResponse> {
+  return request<BindStartResponse>('/bindings/start', {
+    method: 'POST',
+    data,
+  })
+}
+
+// 确认绑定设备
+export async function confirmBind(data: {
+  bind_token: string
+  challenge_code: string
+}): Promise<{ device_id: string; child_id: number }> {
+  return request('/bindings/confirm', {
+    method: 'POST',
+    data,
+  })
+}
+
+// 获取设备绑定信息
+export async function getBinding(deviceId: string): Promise<Binding | null> {
+  // If no deviceId, get the first binding for this user
+  if (!deviceId) {
+    try {
+      // Try to get binding list - for now return null if no specific device
+      return null
+    } catch {
+      return null
+    }
+  }
+  return request<Binding>(`/bindings/${deviceId}`)
+}
+
+// 解绑设备
+export async function unbindDevice(deviceId: string): Promise<void> {
+  return request(`/bindings/${deviceId}`, {
+    method: 'DELETE',
+  })
+}
+
+// 直接绑定设备（手动输入设备码）
+export async function directBind(data: {
+  device_id: string
+  child_id: number
+}): Promise<{ device_id: string; child_id: number }> {
+  return request('/bindings/direct', {
+    method: 'POST',
+    data,
+  })
+}
+
+// 获取绑定历史
+export async function getBindHistory(
+  deviceId: string,
+  cursor?: string,
+  limit: number = 20
+): Promise<BindHistoryResponse> {
+  const params = new URLSearchParams()
+  if (cursor) params.append('cursor', cursor)
+  params.append('limit', String(limit))
+  
+  return request<BindHistoryResponse>(`/bindings/history/${deviceId}?${params.toString()}`)
+}
\ No newline at end of file
diff --git a/banban-mini/src/services/child.ts b/banban-mini/src/services/child.ts
new file mode 100644
index 0000000..034ef59
--- /dev/null
+++ b/banban-mini/src/services/child.ts
@@ -0,0 +1,55 @@
+import { request } from './api'
+
+export interface Child {
+  child_id: number
+  child_name: string
+  child_gender: number
+  child_birthday?: string
+  status: number
+}
+
+export interface ChildListResponse {
+  items: Child[]
+  total: number
+  next_cursor?: number
+}
+
+// 创建小孩档案
+export async function createChild(data: {
+  child_name: string
+  child_gender?: number
+  child_birthday?: string
+}): Promise<Child> {
+  return request<Child>('/children', {
+    method: 'POST',
+    data,
+  })
+}
+
+// 获取小孩列表
+export async function getChildren(
+  cursor?: number,
+  limit: number = 20
+): Promise<ChildListResponse> {
+  const params = new URLSearchParams()
+  if (cursor) params.append('cursor', String(cursor))
+  params.append('limit', String(limit))
+  
+  return request<ChildListResponse>(`/children?${params.toString()}`)
+}
+
+// 获取单个小孩信息
+export async function getChild(childId: number): Promise<Child> {
+  return request<Child>(`/children/${childId}`)
+}
+
+// 更新小孩信息
+export async function updateChild(
+  childId: number,
+  data: { child_name?: string; child_gender?: number; child_birthday?: string }
+): Promise<Child> {
+  return request<Child>(`/children/${childId}`, {
+    method: 'PATCH',
+    data,
+  })
+}
\ No newline at end of file
diff --git a/mini-program/.DS_Store b/mini-program/.DS_Store
new file mode 100644
index 0000000..f2ad0e5
Binary files /dev/null and b/mini-program/.DS_Store differ
diff --git a/mini-program/.env.example b/mini-program/.env.example
index e0f8535..bc12163 100644
--- a/mini-program/.env.example
+++ b/mini-program/.env.example
@@ -4,11 +4,13 @@ APP_DESCRIPTION=Backend service for mini program
 HOST=0.0.0.0
 PORT=8001
 
+DB_TYPE=mysql
 DB_HOST=127.0.0.1
 DB_PORT=3306
 DB_USER=root
 DB_PASSWORD=change_me
 DB_NAME=mini_program
+DB_PATH=./data.db
 COS_SECRET_ID=change_me
 COS_SECRET_KEY=change_me
 COS_REGION=ap-guangzhou
diff --git a/mini-program/app/.DS_Store b/mini-program/app/.DS_Store
new file mode 100644
index 0000000..1987b75
Binary files /dev/null and b/mini-program/app/.DS_Store differ
diff --git a/mini-program/app/dao/.DS_Store b/mini-program/app/dao/.DS_Store
new file mode 100644
index 0000000..64be109
Binary files /dev/null and b/mini-program/app/dao/.DS_Store differ
diff --git a/mini-program/app/dao/__init__.py b/mini-program/app/dao/__init__.py
new file mode 100644
index 0000000..7791cde
--- /dev/null
+++ b/mini-program/app/dao/__init__.py
@@ -0,0 +1,13 @@
+from sqlalchemy import text
+from sqlalchemy.orm import Session
+
+
+class BaseDAO:
+    def __init__(self, db: Session):
+        self.db = db
+
+    def execute(self, query, params: dict = None):
+        return self.db.execute(text(query), params or {})
+
+    def commit(self):
+        self.db.commit()
\ No newline at end of file
diff --git a/mini-program/app/dao/binding.py b/mini-program/app/dao/binding.py
new file mode 100644
index 0000000..ce099d8
--- /dev/null
+++ b/mini-program/app/dao/binding.py
@@ -0,0 +1,226 @@
+import logging
+import uuid
+from collections.abc import Mapping
+from datetime import datetime, timedelta
+from typing import Optional
+
+from sqlalchemy import text
+
+from app.dao import BaseDAO
+
+logger = logging.getLogger("app.dao.binding")
+
+
+class BindingDAO(BaseDAO):
+    def start_bind(self, user_id: int, device_id: str, child_id: int) -> str:
+        bind_token = str(uuid.uuid4())
+        expires_at = datetime.utcnow() + timedelta(minutes=10)
+
+        self.db.execute(
+            text(
+                """
+                INSERT INTO device_bind_sessions (bind_token, device_id, initiator_user_id, target_child_id, expires_at, status)
+                VALUES (:bind_token, :device_id, :initiator_user_id, :target_child_id, :expires_at, 1)
+                """
+            ),
+            {
+                "bind_token": bind_token,
+                "device_id": device_id,
+                "initiator_user_id": user_id,
+                "target_child_id": child_id,
+                "expires_at": expires_at,
+            },
+        )
+        self.commit()
+        return bind_token
+
+    def get_session(self, bind_token: str, user_id: int) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text(
+                    "SELECT * FROM device_bind_sessions WHERE bind_token = :bind_token AND initiator_user_id = :user_id"
+                ),
+                {"bind_token": bind_token, "user_id": user_id},
+            )
+            .mappings()
+            .first()
+        )
+
+    def confirm_bind(self, session_id: int, device_id: str, child_id: int, user_id: int) -> None:
+        self.db.execute(
+            text("UPDATE device_bind_sessions SET status = 2, confirmed_at = CURRENT_TIMESTAMP WHERE id = :id"),
+            {"id": session_id},
+        )
+
+        existing = self.db.execute(
+            text("SELECT id FROM device_bindings WHERE device_id = :device_id OR child_id = :child_id"),
+            {"device_id": device_id, "child_id": child_id},
+        ).scalar_one_or_none()
+
+        if existing:
+            self.db.execute(
+                text(
+                    "UPDATE device_bindings SET child_id = :child_id, status = 1, unbound_at = NULL WHERE device_id = :device_id"
+                ),
+                {"device_id": device_id, "child_id": child_id},
+            )
+        else:
+            self.db.execute(
+                text(
+                    "INSERT INTO device_bindings (device_id, child_id, status, bound_at) VALUES (:device_id, :child_id, 1, CURRENT_TIMESTAMP)"
+                ),
+                {"device_id": device_id, "child_id": child_id},
+            )
+
+        self.db.execute(
+            text(
+                "INSERT INTO device_bind_history (device_id, child_id, bound_by_user_id, bind_source, bound_at) VALUES (:device_id, :child_id, :user_id, 1, CURRENT_TIMESTAMP)"
+            ),
+            {"device_id": device_id, "child_id": child_id, "user_id": user_id},
+        )
+        self.commit()
+
+    def direct_bind(self, device_id: str, child_id: int, user_id: int) -> None:
+        # Check if binding exists for this device_id
+        existing_by_device = (
+            self.db.execute(
+                text("SELECT id FROM device_bindings WHERE device_id = :device_id"),
+                {"device_id": device_id},
+            ).fetchone()
+        )
+
+        # Check if this child is already bound to a different device
+        existing_by_child = (
+            self.db.execute(
+                text("SELECT id FROM device_bindings WHERE child_id = :child_id AND status = 1"),
+                {"child_id": child_id},
+            ).fetchone()
+        )
+
+        if existing_by_device:
+            # Update existing binding for this device
+            self.db.execute(
+                text(
+                    "UPDATE device_bindings SET child_id = :child_id, status = 1, unbound_at = NULL WHERE device_id = :device_id"
+                ),
+                {"device_id": device_id, "child_id": child_id},
+            )
+            self.db.execute(
+                text(
+                    "INSERT INTO device_bind_history (device_id, child_id, bound_by_user_id, bind_source, bound_at) VALUES (:device_id, :child_id, :user_id, 2, CURRENT_TIMESTAMP)"
+                ),
+                {"device_id": device_id, "child_id": child_id, "user_id": user_id},
+            )
+            self.commit()
+            return
+        elif existing_by_child:
+            # Child already bound to another device - update that binding
+            self.db.execute(
+                text(
+                    "UPDATE device_bindings SET device_id = :device_id, status = 1, unbound_at = NULL WHERE child_id = :child_id AND status = 1"
+                ),
+                {"device_id": device_id, "child_id": child_id},
+            )
+            # Skip INSERT since we updated
+            self.db.execute(
+                text(
+                    "INSERT INTO device_bind_history (device_id, child_id, bound_by_user_id, bind_source, bound_at) VALUES (:device_id, :child_id, :user_id, 2, CURRENT_TIMESTAMP)"
+                ),
+                {"device_id": device_id, "child_id": child_id, "user_id": user_id},
+            )
+            self.commit()
+            return
+        else:
+            # Insert new binding
+            self.db.execute(
+                text(
+                    "INSERT INTO device_bindings (device_id, child_id, status, bound_at) VALUES (:device_id, :child_id, 1, CURRENT_TIMESTAMP)"
+                ),
+                {"device_id": device_id, "child_id": child_id},
+            )
+
+        # Add history
+        self.db.execute(
+            text(
+                "INSERT INTO device_bind_history (device_id, child_id, bound_by_user_id, bind_source, bound_at) VALUES (:device_id, :child_id, :user_id, 2, CURRENT_TIMESTAMP)"
+            ),
+            {"device_id": device_id, "child_id": child_id, "user_id": user_id},
+        )
+        self.commit()
+
+    def get_current_by_user(self, user_id: int) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text(
+                    """
+                    SELECT b.* FROM device_bindings b
+                    JOIN children c ON b.child_id = c.child_id
+                    WHERE c.parent_user_id = :user_id AND b.status = 1
+                    ORDER BY b.bound_at DESC
+                    LIMIT 1
+                    """
+                ),
+                {"user_id": user_id},
+            )
+            .mappings()
+            .first()
+        )
+
+    def get_by_device(self, device_id: str, user_id: int) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text(
+                    """
+                    SELECT b.* FROM device_bindings b
+                    JOIN children c ON b.child_id = c.child_id
+                    WHERE b.device_id = :device_id AND c.parent_user_id = :user_id AND b.status = 1
+                    """
+                ),
+                {"device_id": device_id, "user_id": user_id},
+            )
+            .mappings()
+            .first()
+        )
+
+    def unbind(self, device_id: str, user_id: int) -> bool:
+        row = self.get_by_device(device_id, user_id)
+        if not row:
+            return False
+
+        self.db.execute(
+            text("UPDATE device_bindings SET status = 0, unbound_at = CURRENT_TIMESTAMP WHERE id = :id"),
+            {"id": row["id"]},
+        )
+
+        self.db.execute(
+            text(
+                "INSERT INTO device_bind_history (device_id, child_id, bound_by_user_id, unbound_by_user_id, bind_source, bound_at, unbound_at, unbind_reason) SELECT device_id, child_id, bound_by_user_id, :user_id, bind_source, bound_at, CURRENT_TIMESTAMP, 'user_unbind' FROM device_bind_history WHERE device_id = :device_id AND unbound_at IS NULL"
+            ),
+            {"device_id": device_id, "user_id": user_id},
+        )
+        self.commit()
+        return True
+
+    def list_history(self, device_id: str, limit: int = 20, cursor: datetime = None) -> list[Mapping]:
+        params = {"device_id": device_id, "limit": limit + 1}
+        where = "device_id = :device_id"
+        if cursor:
+            where += " AND bound_at < :cursor"
+            params["cursor"] = cursor
+
+        rows = (
+            self.db.execute(
+                text(
+                    f"""
+                    SELECT * FROM device_bind_history
+                    WHERE {where}
+                    ORDER BY bound_at DESC
+                    LIMIT :limit
+                    """
+                ),
+                params,
+            )
+            .mappings()
+            .all()
+        )
+        return rows
\ No newline at end of file
diff --git a/mini-program/app/dao/child.py b/mini-program/app/dao/child.py
new file mode 100644
index 0000000..2a46201
--- /dev/null
+++ b/mini-program/app/dao/child.py
@@ -0,0 +1,95 @@
+from collections.abc import Mapping
+from datetime import date
+from typing import Optional
+
+from sqlalchemy import text
+
+from app.dao import BaseDAO
+
+
+class ChildDAO(BaseDAO):
+    def create(
+        self,
+        user_id: int,
+        child_name: str,
+        child_gender: int = 2,
+        child_birthday: Optional[date] = None,
+    ) -> int:
+        result = self.db.execute(
+            text(
+                """
+                INSERT INTO children (parent_user_id, child_name, child_gender, child_birthday, status)
+                VALUES (:user_id, :child_name, :child_gender, :child_birthday, 1)
+                """
+            ),
+            {"user_id": user_id, "child_name": child_name, "child_gender": child_gender, "child_birthday": child_birthday},
+        )
+        child_id = int(result.lastrowid)
+        self.commit()
+        return child_id
+
+    def get_by_id(self, child_id: int) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text("SELECT * FROM children WHERE child_id = :child_id"),
+                {"child_id": child_id},
+            )
+            .mappings()
+            .first()
+        )
+
+    def list_by_parent(self, user_id: int, limit: int = 20, cursor: int = None) -> list[Mapping]:
+        params = {"user_id": user_id, "limit": limit + 1}
+        where = "parent_user_id = :user_id AND status = 1"
+        if cursor:
+            where += " AND child_id < :cursor"
+            params["cursor"] = cursor
+
+        rows = (
+            self.db.execute(
+                text(
+                    f"""
+                    SELECT * FROM children
+                    WHERE {where}
+                    ORDER BY child_id DESC
+                    LIMIT :limit
+                    """
+                ),
+                params,
+            )
+            .mappings()
+            .all()
+        )
+        return rows
+
+    def update(
+        self,
+        child_id: int,
+        child_name: Optional[str] = None,
+        child_gender: Optional[int] = None,
+        child_birthday: Optional[date] = None,
+    ) -> None:
+        self.db.execute(
+            text(
+                """
+                UPDATE children
+                SET child_name = COALESCE(:child_name, child_name),
+                    child_gender = COALESCE(:child_gender, child_gender),
+                    child_birthday = COALESCE(:child_birthday, child_birthday)
+                WHERE child_id = :child_id
+                """
+            ),
+            {"child_id": child_id, "child_name": child_name, "child_gender": child_gender, "child_birthday": child_birthday},
+        )
+        self.commit()
+
+    def has_access(self, child_id: int, user_id: int) -> bool:
+        return (
+            self.db.execute(
+                text(
+                    "SELECT 1 FROM children WHERE child_id = :child_id AND parent_user_id = :user_id AND status = 1"
+                ),
+                {"child_id": child_id, "user_id": user_id},
+            ).scalar_one_or_none()
+            is not None
+        )
\ No newline at end of file
diff --git a/mini-program/app/dao/parent.py b/mini-program/app/dao/parent.py
new file mode 100644
index 0000000..fa1ee36
--- /dev/null
+++ b/mini-program/app/dao/parent.py
@@ -0,0 +1,100 @@
+from collections.abc import Mapping
+from typing import Optional
+
+from sqlalchemy import text
+
+from app.dao import BaseDAO
+
+
+class ParentDAO(BaseDAO):
+    def create(
+        self,
+        openid: str,
+        unionid: Optional[str] = None,
+        nickname: Optional[str] = None,
+        avatar_url: Optional[str] = None,
+    ) -> int:
+        result = self.db.execute(
+            text(
+                """
+                INSERT INTO parents (openid, unionid, nickname, avatar_url, status)
+                VALUES (:openid, :unionid, :nickname, :avatar_url, 1)
+                """
+            ),
+            {"openid": openid, "unionid": unionid, "nickname": nickname, "avatar_url": avatar_url},
+        )
+        self.commit()
+        return int(self.db.execute(text("SELECT last_insert_rowid()")).scalar_one())
+
+    def get_by_id(self, user_id: int) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text("SELECT * FROM parents WHERE user_id = :user_id"),
+                {"user_id": user_id},
+            )
+            .mappings()
+            .first()
+        )
+
+    def get_by_openid(self, openid: str) -> Optional[Mapping]:
+        return (
+            self.db.execute(
+                text("SELECT * FROM parents WHERE openid = :openid"),
+                {"openid": openid},
+            )
+            .mappings()
+            .first()
+        )
+
+    def update(
+        self,
+        user_id: int,
+        nickname: Optional[str] = None,
+        avatar_url: Optional[str] = None,
+        phone: Optional[str] = None,
+    ) -> None:
+        self.db.execute(
+            text(
+                """
+                UPDATE parents
+                SET nickname = COALESCE(:nickname, nickname),
+                    avatar_url = COALESCE(:avatar_url, avatar_url),
+                    phone = COALESCE(:phone, phone)
+                WHERE user_id = :user_id
+                """
+            ),
+            {"user_id": user_id, "nickname": nickname, "avatar_url": avatar_url, "phone": phone},
+        )
+        self.commit()
+
+    def upsert(
+        self,
+        openid: str,
+        unionid: Optional[str] = None,
+        nickname: Optional[str] = None,
+        avatar_url: Optional[str] = None,
+    ) -> int:
+        from app.settings import settings
+
+        existing = self.get_by_openid(openid)
+        if existing:
+            self.update(existing["user_id"], nickname, avatar_url)
+            return existing["user_id"]
+
+        if settings.db_type == "sqlite":
+            return self.create(openid, unionid, nickname, avatar_url)
+
+        self.db.execute(
+            text(
+                """
+                INSERT INTO parents (openid, unionid, nickname, avatar_url, status)
+                VALUES (:openid, :unionid, :nickname, :avatar_url, 1)
+                ON DUPLICATE KEY UPDATE
+                  user_id = LAST_INSERT_ID(user_id),
+                  updated_at = CURRENT_TIMESTAMP
+                """
+            ),
+            {"openid": openid, "unionid": unionid, "nickname": nickname, "avatar_url": avatar_url},
+        )
+        self.commit()
+        return int(self.db.execute(text("SELECT LAST_INSERT_ID()")).scalar_one())
\ No newline at end of file
diff --git a/mini-program/app/db.py b/mini-program/app/db.py
index 830734d..007a0d1 100644
--- a/mini-program/app/db.py
+++ b/mini-program/app/db.py
@@ -13,14 +13,34 @@ except ModuleNotFoundError:
     from settings import settings
 
 
-engine = create_engine(
-    settings.mysql_dsn,
-    pool_size=5,
-    max_overflow=10,
-    pool_pre_ping=True,
-    pool_recycle=1800,
-    future=True,
-)
+def _create_engine() -> create_engine:
+    if settings.db_type == "sqlite":
+        return create_engine(
+            settings.sqlite_dsn,
+            connect_args={"check_same_thread": False},
+            future=True,
+        )
+    return create_engine(
+        settings.mysql_dsn,
+        pool_size=5,
+        max_overflow=10,
+        pool_pre_ping=True,
+        pool_recycle=1800,
+        future=True,
+    )
+
+
+engine = _create_engine()
+
+
+@event.listens_for(engine, "connect")
+def set_sqlite_pragma(dbapi_conn, connection_record):
+    if settings.db_type == "sqlite":
+        cursor = dbapi_conn.cursor()
+        cursor.execute("PRAGMA foreign_keys=ON")
+        cursor.close()
+
+
 logger = logging.getLogger("app.db")
 
 
@@ -79,6 +99,13 @@ def get_db() -> Generator[Session, None, None]:
         db.close()
 
 
+def init_db_tables() -> None:
+    from app.models import Base
+
+    Base.metadata.create_all(bind=engine)
+    logger.info("database tables initialized", extra={"event": "db_init"})
+
+
 def check_db_connection() -> None:
     with engine.connect() as conn:
         conn.execute(text("SELECT 1"))
diff --git a/mini-program/app/main.py b/mini-program/app/main.py
index 3dba028..8279e80 100644
--- a/mini-program/app/main.py
+++ b/mini-program/app/main.py
@@ -5,23 +5,30 @@ from fastapi import FastAPI
 
 try:
     # For module mode: `uvicorn app.main:app`
-    from app.db import check_db_connection, close_db_engine
+    from app.db import check_db_connection, close_db_engine, init_db_tables
     from app.logging_setup import configure_logging
     from app.middleware.auth import install_auth_middleware
     from app.middleware.request_log import install_request_logging_middleware
     from app.routers.auth import router as auth_router
+    from app.routers.wechat_auth import router as wechat_auth_router
     from app.routers.health import router as health_router
     from app.routers.messages import router as messages_router
+    from app.routers.parents import router as parents_router
+    from app.routers.children import router as children_router
+    from app.routers.bindings import router as bindings_router
     from app.settings import settings
 except ModuleNotFoundError:
     # For script mode: `python app/main.py` or VS Code "Run Python File"
-    from db import check_db_connection, close_db_engine
+    from db import check_db_connection, close_db_engine, init_db_tables
     from logging_setup import configure_logging
     from middleware.auth import install_auth_middleware
     from middleware.request_log import install_request_logging_middleware
     from routers.auth import router as auth_router
     from routers.health import router as health_router
     from routers.messages import router as messages_router
+    from routers.parents import router as parents_router
+    from routers.children import router as children_router
+    from routers.bindings import router as bindings_router
     from settings import settings
 
 
@@ -39,6 +46,7 @@ def create_app() -> FastAPI:
     @app.on_event("startup")
     def on_startup() -> None:
         check_db_connection()
+        init_db_tables()
         logger.info("application started", extra={"event": "app_start"})
 
     @app.on_event("shutdown")
@@ -48,9 +56,15 @@ def create_app() -> FastAPI:
 
     install_auth_middleware(app)
     install_request_logging_middleware(app)
-    app.include_router(auth_router)
+    app.include_router(wechat_auth_router)
     app.include_router(health_router)
     app.include_router(messages_router)
+    try:
+        app.include_router(parents_router)
+        app.include_router(children_router)
+        app.include_router(bindings_router)
+    except NameError:
+        pass
     return app
 
 
diff --git a/mini-program/app/middleware/auth.py b/mini-program/app/middleware/auth.py
index 1c718c9..278f323 100644
--- a/mini-program/app/middleware/auth.py
+++ b/mini-program/app/middleware/auth.py
@@ -14,7 +14,7 @@ except ModuleNotFoundError:
     from security import auth_error_response, decode_access_token
 
 
-EXCLUDED_PATH_PREFIXES = (
+NO_AUTH_PATH_PREFIXES = (
     "/health",
     "/docs",
     "/redoc",
@@ -22,11 +22,22 @@ EXCLUDED_PATH_PREFIXES = (
     "/auth/login",
 )
 
-logger = logging.getLogger("app.auth")
+
+def _is_no_auth_path(path: str) -> bool:
+    for prefix in NO_AUTH_PATH_PREFIXES:
+        if path == prefix or path.startswith(f"{prefix}/"):
+            return True
+    return False
 
 
 def _is_excluded_path(path: str) -> bool:
-    for prefix in EXCLUDED_PATH_PREFIXES:
+    return _is_no_auth_path(path)
+
+logger = logging.getLogger("app.auth")
+
+
+def _is_no_auth_path(path: str) -> bool:
+    for prefix in NO_AUTH_PATH_PREFIXES:
         if path == prefix or path.startswith(f"{prefix}/"):
             return True
     return False
@@ -39,7 +50,7 @@ def install_auth_middleware(app: FastAPI) -> None:
         call_next: Callable[[Request], Awaitable],
     ):
         path = request.url.path
-        if request.method == "OPTIONS" or _is_excluded_path(path):
+        if request.method == "OPTIONS" or _is_no_auth_path(path):
             return await call_next(request)
 
         auth_header = request.headers.get("Authorization")
@@ -87,9 +98,9 @@ def install_auth_middleware(app: FastAPI) -> None:
                 db.execute(
                     text(
                         """
-                        SELECT id, status
-                        FROM chat_user
-                        WHERE id = :user_id
+                        SELECT user_id, status
+                        FROM parents
+                        WHERE user_id = :user_id
                         LIMIT 1
                         """
                     ),
diff --git a/mini-program/app/models/__init__.py b/mini-program/app/models/__init__.py
new file mode 100644
index 0000000..c1c2b5e
--- /dev/null
+++ b/mini-program/app/models/__init__.py
@@ -0,0 +1,37 @@
+from sqlalchemy.orm import DeclarativeBase
+
+
+class Base(DeclarativeBase):
+    pass
+
+
+from app.models.entities import (
+    Parent,
+    Child,
+    ParentChildRelation,
+    DeviceBinding,
+    DeviceBindSession,
+    DeviceBindHistory,
+    Card,
+    DeviceSetting,
+    IMConversation,
+    IMMessage,
+    ChildLocationCurrent,
+    ChildLocationHistory,
+)
+
+__all__ = [
+    "Base",
+    "Parent",
+    "Child",
+    "ParentChildRelation",
+    "DeviceBinding",
+    "DeviceBindSession",
+    "DeviceBindHistory",
+    "Card",
+    "DeviceSetting",
+    "IMConversation",
+    "IMMessage",
+    "ChildLocationCurrent",
+    "ChildLocationHistory",
+]
\ No newline at end of file
diff --git a/mini-program/app/models/entities.py b/mini-program/app/models/entities.py
new file mode 100644
index 0000000..600d72e
--- /dev/null
+++ b/mini-program/app/models/entities.py
@@ -0,0 +1,258 @@
+from datetime import date, datetime, time
+from typing import Optional
+
+from sqlalchemy import (
+    JSON,
+    BigInteger,
+    Boolean,
+    Date,
+    DateTime,
+    Index,
+    Integer,
+    Numeric,
+    SmallInteger,
+    String,
+    Text,
+    Time,
+    UniqueConstraint,
+)
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.models import Base
+
+
+class Parent(Base):
+    __tablename__ = "parents"
+
+    user_id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    openid: Mapped[str] = mapped_column(String(64), unique=True, nullable=False)
+    unionid: Mapped[Optional[str]] = mapped_column(String(64))
+    nickname: Mapped[Optional[str]] = mapped_column(String(64))
+    avatar_url: Mapped[Optional[str]] = mapped_column(String(255))
+    phone: Mapped[Optional[str]] = mapped_column(String(20))
+    status: Mapped[int] = mapped_column(Integer, server_default="1")
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class Child(Base):
+    __tablename__ = "children"
+    __table_args__ = (
+        Index("idx_child_parent_user_id", "parent_user_id"),
+    )
+
+    child_id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    parent_user_id: Mapped[int] = mapped_column(Integer, nullable=False)
+    child_name: Mapped[str] = mapped_column(String(32), nullable=False)
+    child_gender: Mapped[int] = mapped_column(Integer, server_default="2")
+    child_birthday: Mapped[Optional[date]] = mapped_column(Date)
+    status: Mapped[int] = mapped_column(Integer, server_default="1")
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class ParentChildRelation(Base):
+    __tablename__ = "parent_child_relations"
+    __table_args__ = (
+        UniqueConstraint("user_id", "child_id", name="uq_user_child"),
+        Index("idx_pcr_user_id", "user_id"),
+        Index("idx_pcr_child_id", "child_id"),
+    )
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    user_id: Mapped[int] = mapped_column(Integer, nullable=False, index=True)
+    child_id: Mapped[int] = mapped_column(Integer, nullable=False, index=True)
+    relation_type: Mapped[int] = mapped_column(Integer, server_default="9")
+    is_primary: Mapped[bool] = mapped_column(Boolean, server_default="0")
+    status: Mapped[int] = mapped_column(Integer, server_default="1")
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class DeviceBinding(Base):
+    __tablename__ = "device_bindings"
+    __table_args__ = (
+        UniqueConstraint("device_id", name="uq_device_binding_device"),
+    )
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    device_id: Mapped[str] = mapped_column(String(64), nullable=False, unique=True)
+    child_id: Mapped[int] = mapped_column(Integer, nullable=False)
+    status: Mapped[int] = mapped_column(Integer, server_default="1")
+    bound_at: Mapped[datetime] = mapped_column(DateTime, nullable=False)
+    unbound_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class DeviceBindSession(Base):
+    __tablename__ = "device_bind_sessions"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    bind_token: Mapped[str] = mapped_column(String(36), unique=True, nullable=False)
+    device_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    initiator_user_id: Mapped[int] = mapped_column(Integer, nullable=False)
+    target_child_id: Mapped[Optional[int]] = mapped_column(Integer)
+    challenge_code_hash: Mapped[Optional[str]] = mapped_column(String(64))
+    challenge_set_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    expires_at: Mapped[datetime] = mapped_column(DateTime, nullable=False)
+    max_attempt_count: Mapped[int] = mapped_column(Integer, server_default="5")
+    attempt_count: Mapped[int] = mapped_column(Integer, server_default="0")
+    status: Mapped[int] = mapped_column(Integer, server_default="1")
+    confirmed_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    consumed_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class DeviceBindHistory(Base):
+    __tablename__ = "device_bind_history"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    device_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    child_id: Mapped[int] = mapped_column(Integer, nullable=False)
+    bound_by_user_id: Mapped[int] = mapped_column(Integer, nullable=False)
+    unbound_by_user_id: Mapped[Optional[int]] = mapped_column(Integer)
+    bind_source: Mapped[int] = mapped_column(Integer, server_default="1")
+    bound_at: Mapped[datetime] = mapped_column(DateTime, nullable=False)
+    unbound_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    unbind_reason: Mapped[Optional[str]] = mapped_column(String(191))
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class Card(Base):
+    __tablename__ = "cards"
+
+    card_id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    card_uuid: Mapped[str] = mapped_column(String(64), unique=True, nullable=False)
+    device_id: Mapped[Optional[str]] = mapped_column(String(64), unique=True)
+    card_name: Mapped[Optional[str]] = mapped_column(String(64))
+    status: Mapped[int] = mapped_column(Integer, server_default="0")
+    total_swaps: Mapped[int] = mapped_column(Integer, server_default="0")
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+
+
+class DeviceSetting(Base):
+    __tablename__ = "device_settings"
+
+    setting_id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    device_id: Mapped[str] = mapped_column(String(64), unique=True, nullable=False)
+    sleep_mode: Mapped[int] = mapped_column(Integer, server_default="0")
+    disable_time_start: Mapped[Optional[time]] = mapped_column(Time)
+    disable_time_end: Mapped[Optional[time]] = mapped_column(Time)
+    timezone: Mapped[str] = mapped_column(String(32), server_default="'Asia/Shanghai'")
+    volume: Mapped[Optional[int]] = mapped_column(Integer)
+    brightness: Mapped[Optional[int]] = mapped_column(Integer)
+    disable_weekdays: Mapped[Optional[str]] = mapped_column(String(32))
+    created_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[Optional[datetime]] = mapped_column(DateTime, server_default="CURRENT_TIMESTAMP")
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime, default=datetime.utcnow, onupdate=datetime.utcnow
+    )
+
+
+class IMConversation(Base):
+    __tablename__ = "im_conversations"
+    __table_args__ = (
+        UniqueConstraint("conversation_type", "pair_key", name="uq_conv_type_pair"),
+        Index("idx_im_conv_participant_a", "participant_a_type", "participant_a_id"),
+        Index("idx_im_conv_participant_b", "participant_b_type", "participant_b_id"),
+        Index("idx_im_conv_last_message_at", "last_message_at"),
+    )
+
+    id: Mapped[int] = mapped_column(BigInteger, primary_key=True, autoincrement=True)
+    conversation_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    participant_a_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    participant_a_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    participant_b_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    participant_b_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    pair_key: Mapped[str] = mapped_column(String(191), nullable=False)
+    status: Mapped[int] = mapped_column(Integer, default=1)
+    last_seq: Mapped[int] = mapped_column(BigInteger, default=0, index=True)
+    message_count: Mapped[int] = mapped_column(BigInteger, default=0)
+    last_message_preview: Mapped[Optional[str]] = mapped_column(String(255))
+    last_message_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+    ext_json: Mapped[Optional[dict]] = mapped_column(JSON)
+    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime, default=datetime.utcnow, onupdate=datetime.utcnow
+    )
+
+
+class IMMessage(Base):
+    __tablename__ = "im_messages"
+    __table_args__ = (
+        UniqueConstraint("conversation_id", "seq", name="uq_im_msg_conv_seq"),
+        UniqueConstraint("conversation_id", "client_msg_id", name="uq_im_msg_client"),
+        Index("idx_im_msg_sender", "sender_type", "sender_id", "created_at"),
+        Index("idx_im_msg_receiver", "receiver_type", "receiver_id", "created_at"),
+    )
+
+    id: Mapped[int] = mapped_column(BigInteger, primary_key=True, autoincrement=True)
+    conversation_id: Mapped[int] = mapped_column(BigInteger, nullable=False)
+    seq: Mapped[int] = mapped_column(BigInteger, nullable=False)
+    sender_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    sender_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    receiver_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    receiver_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    content_type: Mapped[int] = mapped_column(Integer, nullable=False)
+    content_text: Mapped[Optional[str]] = mapped_column(Text)
+    content_json: Mapped[Optional[dict]] = mapped_column(JSON)
+    media_file_key: Mapped[Optional[str]] = mapped_column(String(255))
+    media_duration_ms: Mapped[Optional[int]] = mapped_column(Integer)
+    media_mime_type: Mapped[Optional[str]] = mapped_column(String(64))
+    media_size_bytes: Mapped[Optional[int]] = mapped_column(BigInteger)
+    media_transcript_text: Mapped[Optional[str]] = mapped_column(Text)
+    client_msg_id: Mapped[Optional[str]] = mapped_column(String(64))
+    sender_name_snapshot: Mapped[Optional[str]] = mapped_column(String(64))
+    sender_avatar_snapshot: Mapped[Optional[str]] = mapped_column(String(255))
+    receiver_name_snapshot: Mapped[Optional[str]] = mapped_column(String(64))
+    receiver_avatar_snapshot: Mapped[Optional[str]] = mapped_column(String(255))
+    ext_json: Mapped[Optional[dict]] = mapped_column(JSON)
+    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
+    deleted_at: Mapped[Optional[datetime]] = mapped_column(DateTime)
+
+
+class ChildLocationCurrent(Base):
+    __tablename__ = "child_location_current"
+
+    child_id: Mapped[int] = mapped_column(BigInteger, primary_key=True)
+    device_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    coord_type: Mapped[str] = mapped_column(String(16), default="gcj02")
+    lat: Mapped[float] = mapped_column(Numeric(10, 7), nullable=False)
+    lng: Mapped[float] = mapped_column(Numeric(10, 7), nullable=False)
+    accuracy_m: Mapped[Optional[int]] = mapped_column(Integer)
+    altitude_m: Mapped[Optional[float]] = mapped_column(Numeric(8, 2))
+    speed_mps: Mapped[Optional[float]] = mapped_column(Numeric(8, 2))
+    heading_deg: Mapped[Optional[int]] = mapped_column(SmallInteger)
+    source: Mapped[int] = mapped_column(Integer, nullable=False)
+    battery_pct: Mapped[Optional[int]] = mapped_column(Integer)
+    device_time: Mapped[datetime] = mapped_column(DateTime, nullable=False)
+    server_time: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime, default=datetime.utcnow, onupdate=datetime.utcnow
+    )
+
+
+class ChildLocationHistory(Base):
+    __tablename__ = "child_location_history"
+    __table_args__ = (
+        Index("idx_child_loc_hist_child", "child_id", "created_at"),
+    )
+
+    id: Mapped[int] = mapped_column(BigInteger, primary_key=True, autoincrement=True)
+    child_id: Mapped[int] = mapped_column(BigInteger, nullable=False)
+    device_id: Mapped[str] = mapped_column(String(64), nullable=False)
+    coord_type: Mapped[str] = mapped_column(String(16), default="gcj02")
+    lat: Mapped[float] = mapped_column(Numeric(10, 7), nullable=False)
+    lng: Mapped[float] = mapped_column(Numeric(10, 7), nullable=False)
+    accuracy_m: Mapped[Optional[int]] = mapped_column(Integer)
+    altitude_m: Mapped[Optional[float]] = mapped_column(Numeric(8, 2))
+    speed_mps: Mapped[Optional[float]] = mapped_column(Numeric(8, 2))
+    heading_deg: Mapped[Optional[int]] = mapped_column(SmallInteger)
+    source: Mapped[int] = mapped_column(Integer, nullable=False)
+    battery_pct: Mapped[Optional[int]] = mapped_column(Integer)
+    device_time: Mapped[datetime] = mapped_column(DateTime, nullable=False)
+    server_time: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
+    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
\ No newline at end of file
diff --git a/mini-program/app/routers/.DS_Store b/mini-program/app/routers/.DS_Store
new file mode 100644
index 0000000..8378412
Binary files /dev/null and b/mini-program/app/routers/.DS_Store differ
diff --git a/mini-program/app/routers/bindings.py b/mini-program/app/routers/bindings.py
new file mode 100644
index 0000000..28fcb19
--- /dev/null
+++ b/mini-program/app/routers/bindings.py
@@ -0,0 +1,164 @@
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException, Request, status
+from pydantic import BaseModel
+
+try:
+    from app.security import get_current_user_id
+    from app.service.binding import BindingService
+    from app.service import get_db_session
+except ModuleNotFoundError:
+    from security import get_current_user_id
+    from service.binding import BindingService
+    from service import get_db_session
+
+
+router = APIRouter(prefix="/bindings", tags=["bindings"])
+logger = logging.getLogger("app.bindings")
+
+
+class BindStartRequest(BaseModel):
+    device_id: str
+    child_id: int
+
+
+class BindStartResponse(BaseModel):
+    bind_token: str
+    expires_at: str
+
+
+class BindConfirmRequest(BaseModel):
+    bind_token: str
+    challenge_code: str
+
+
+class BindConfirmResponse(BaseModel):
+    device_id: str
+    child_id: int
+
+
+class BindingGetResponse(BaseModel):
+    device_id: str
+    child_id: int
+    status: int
+    bound_at: str
+
+
+class BindHistoryItem(BaseModel):
+    device_id: str
+    child_id: int
+    bound_at: str
+    unbound_at: str | None
+
+
+class BindHistoryResponse(BaseModel):
+    items: list[BindHistoryItem]
+    total: int
+    next_cursor: str | None
+
+
+@router.post("/start", response_model=BindStartResponse)
+def start_bind(
+    payload: BindStartRequest,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> BindStartResponse:
+    service = BindingService(db)
+    bind_token, expires_at = service.start_bind(current_user_id, payload.device_id, payload.child_id)
+    return BindStartResponse(bind_token=bind_token, expires_at=expires_at.isoformat())
+
+
+@router.post("/confirm", response_model=BindConfirmResponse)
+def confirm_bind(
+    payload: BindConfirmRequest,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> BindConfirmResponse:
+    service = BindingService(db)
+    try:
+        result = service.confirm_bind(payload.bind_token, current_user_id)
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))
+    return BindConfirmResponse(**result)
+
+
+class DirectBindRequest(BaseModel):
+    device_id: str
+    child_id: int
+
+
+class DirectBindResponse(BaseModel):
+    device_id: str
+    child_id: int
+
+
+@router.post("/direct", response_model=DirectBindResponse)
+def direct_bind(
+    payload: DirectBindRequest,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> DirectBindResponse:
+    service = BindingService(db)
+    result = service.direct_bind(payload.device_id, payload.child_id, current_user_id)
+    return DirectBindResponse(**result)
+
+
+@router.get("/current", response_model=BindingGetResponse)
+def get_current_binding(
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+):
+    service = BindingService(db)
+    binding = service.get_current_binding(current_user_id)
+    if not binding:
+        raise HTTPException(status_code=404, detail="no binding found")
+    return binding
+
+
+@router.get("/{device_id}", response_model=BindingGetResponse)
+def get_binding(
+    device_id: str,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> BindingGetResponse:
+    service = BindingService(db)
+    binding = service.get_binding(device_id, current_user_id)
+    if not binding:
+        raise HTTPException(status_code=404, detail="binding not found")
+    return BindingGetResponse(**binding)
+
+
+@router.delete("/{device_id}", status_code=status.HTTP_204_NO_CONTENT)
+def unbind_device(
+    device_id: str,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> None:
+    service = BindingService(db)
+    if not service.unbind(device_id, current_user_id):
+        raise HTTPException(status_code=404, detail="binding not found")
+
+
+@router.get("/history/{device_id}", response_model=BindHistoryResponse)
+def get_bind_history(
+    device_id: str,
+    request: Request,
+    cursor: str | None = None,
+    limit: int = 20,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> BindHistoryResponse:
+    from datetime import datetime
+
+    cursor_dt = datetime.fromisoformat(cursor) if cursor else None
+    service = BindingService(db)
+    rows, has_more = service.list_history(device_id, limit, cursor_dt)
+    next_cursor = rows[-1]["bound_at"].isoformat() if has_more and rows else None
+    items = [BindHistoryItem(**row) for row in rows]
+    return BindHistoryResponse(items=items, total=len(items), next_cursor=next_cursor)
\ No newline at end of file
diff --git a/mini-program/app/routers/children.py b/mini-program/app/routers/children.py
new file mode 100644
index 0000000..cde308a
--- /dev/null
+++ b/mini-program/app/routers/children.py
@@ -0,0 +1,102 @@
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException, Request, status
+from pydantic import BaseModel
+
+try:
+    from app.security import get_current_user_id
+    from app.service.child import ChildService
+    from app.service import get_db_session
+except ModuleNotFoundError:
+    from security import get_current_user_id
+    from service.child import ChildService
+    from service import get_db_session
+
+
+router = APIRouter(prefix="/children", tags=["children"])
+logger = logging.getLogger("app.children")
+
+
+class ChildCreateRequest(BaseModel):
+    child_name: str
+    child_gender: int = 2
+    child_birthday: str | None = None
+
+
+class ChildResponse(BaseModel):
+    child_id: int
+    child_name: str
+    child_gender: int
+    child_birthday: str | None = None
+    status: int
+
+
+class ChildUpdateRequest(BaseModel):
+    child_name: str | None = None
+    child_gender: int | None = None
+    child_birthday: str | None = None
+
+
+class ChildListResponse(BaseModel):
+    items: list[ChildResponse]
+    total: int
+    next_cursor: int | None = None
+
+
+@router.post("", response_model=ChildResponse, status_code=status.HTTP_201_CREATED)
+def create_child(
+    payload: ChildCreateRequest,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> ChildResponse:
+    service = ChildService(db)
+    child = service.create(current_user_id, payload.child_name, payload.child_gender, payload.child_birthday)
+    return ChildResponse(**child)
+
+
+@router.get("", response_model=ChildListResponse)
+def list_children(
+    request: Request,
+    cursor: int | None = None,
+    limit: int = 20,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> ChildListResponse:
+    service = ChildService(db)
+    rows, has_more = service.list_children(current_user_id, limit, cursor)
+    next_cursor = rows[-1]["child_id"] if has_more and rows else None
+    items = [ChildResponse(**row) for row in rows]
+    return ChildListResponse(items=items, total=len(items), next_cursor=next_cursor)
+
+
+@router.get("/{child_id}", response_model=ChildResponse)
+def get_child(
+    child_id: int,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> ChildResponse:
+    service = ChildService(db)
+    child = service.get(child_id)
+    if not child:
+        raise HTTPException(status_code=404, detail="child not found")
+    return ChildResponse(**child)
+
+
+@router.patch("/{child_id}", response_model=ChildResponse)
+def update_child(
+    child_id: int,
+    payload: ChildUpdateRequest,
+    request: Request,
+    current_user_id: int = Depends(get_current_user_id),
+    db=Depends(get_db_session),
+) -> ChildResponse:
+    service = ChildService(db)
+    try:
+        child = service.update(child_id, current_user_id, payload.child_name, payload.child_gender, payload.child_birthday)
+    except PermissionError:
+        raise HTTPException(status_code=403, detail="no permission to access this child")
+    if not child:
+        raise HTTPException(status_code=404, detail="child not found")
+    return ChildResponse(**child)
\ No newline at end of file
diff --git a/mini-program/app/routers/parents.py b/mini-program/app/routers/parents.py
new file mode 100644
index 0000000..bb2c230
--- /dev/null
+++ b/mini-program/app/routers/parents.py
@@ -0,0 +1,63 @@
+import logging
+
+from fastapi import APIRouter, Depends, HTTPException, Request, status
+from pydantic import BaseModel
+
+try:
+    from app.service.parent import ParentService
+    from app.service import get_db_session
+except ModuleNotFoundError:
+    from service.parent import ParentService
+    from service import get_db_session
+
+
+router = APIRouter(prefix="/parents", tags=["parents"])
+logger = logging.getLogger("app.parents")
+
+
+class ParentCreateRequest(BaseModel):
+    openid: str
+    unionid: str | None = None
+    nickname: str | None = None
+    avatar_url: str | None = None
+
+
+class ParentResponse(BaseModel):
+    user_id: int
+    openid: str
+    unionid: str | None = None
+    nickname: str | None = None
+    avatar_url: str | None = None
+    phone: str | None = None
+    status: int
+
+
+class ParentUpdateRequest(BaseModel):
+    nickname: str | None = None
+    avatar_url: str | None = None
+    phone: str | None = None
+
+
+@router.post("", response_model=ParentResponse, status_code=status.HTTP_201_CREATED)
+def create_parent(payload: ParentCreateRequest, request: Request, db=Depends(get_db_session)) -> ParentResponse:
+    service = ParentService(db)
+    parent = service.create(payload.openid, payload.unionid, payload.nickname, payload.avatar_url)
+    return ParentResponse(**parent)
+
+
+@router.get("/{user_id}", response_model=ParentResponse)
+def get_parent(user_id: int, request: Request, db=Depends(get_db_session)) -> ParentResponse:
+    service = ParentService(db)
+    parent = service.get(user_id)
+    if not parent:
+        raise HTTPException(status_code=404, detail="parent not found")
+    return ParentResponse(**parent)
+
+
+@router.patch("/{user_id}", response_model=ParentResponse)
+def update_parent(user_id: int, payload: ParentUpdateRequest, request: Request, db=Depends(get_db_session)) -> ParentResponse:
+    service = ParentService(db)
+    parent = service.update(user_id, payload.nickname, payload.avatar_url, payload.phone)
+    if not parent:
+        raise HTTPException(status_code=404, detail="parent not found")
+    return ParentResponse(**parent)
\ No newline at end of file
diff --git a/mini-program/app/routers/wechat_auth.py b/mini-program/app/routers/wechat_auth.py
new file mode 100644
index 0000000..4b6431a
--- /dev/null
+++ b/mini-program/app/routers/wechat_auth.py
@@ -0,0 +1,87 @@
+import logging
+from typing import Optional
+
+from fastapi import APIRouter, Depends, HTTPException, Request, status
+from pydantic import BaseModel
+from sqlalchemy import text
+from sqlalchemy.orm import Session
+
+try:
+    from app.db import get_db
+    from app.security import create_access_token
+except ModuleNotFoundError:
+    from db import get_db
+    from security import create_access_token
+
+
+router = APIRouter(prefix="/auth", tags=["auth"])
+logger = logging.getLogger("app.auth")
+
+
+class LoginRequest(BaseModel):
+    username: Optional[str] = None
+    password: Optional[str] = None
+    code: Optional[str] = None
+    nickname: Optional[str] = None
+    avatar_url: Optional[str] = None
+
+
+class LoginResponse(BaseModel):
+    access_token: str
+    expires_in: int
+    user_id: int
+
+
+@router.post("/login", response_model=LoginResponse)
+def login(
+    payload: LoginRequest,
+    request: Request,
+    db: Session = Depends(get_db),
+) -> LoginResponse:
+    logger.info(f"/auth/login called with code={payload.code[:20] if payload.code else None}...")
+    identifier = payload.code or payload.username
+    if not identifier:
+        raise HTTPException(status_code=400, detail="username or code is required")
+
+    with db.begin():
+        row = (
+            db.execute(
+                text("SELECT user_id FROM parents WHERE openid = :openid"),
+                {"openid": identifier},
+            ).mappings().first()
+        )
+
+        if row:
+            user_id = int(row["user_id"])
+            logger.info(f"Existing user found: user_id={user_id}")
+            if payload.nickname or payload.avatar_url:
+                db.execute(
+                    text(
+                        """
+                        UPDATE parents
+                        SET nickname = COALESCE(:nickname, nickname),
+                            avatar_url = COALESCE(:avatar_url, avatar_url)
+                        WHERE user_id = :user_id
+                        """
+                    ),
+                    {"user_id": user_id, "nickname": payload.nickname, "avatar_url": payload.avatar_url},
+                )
+        else:
+            logger.info("Creating new user...")
+            db.execute(
+                text(
+                    "INSERT INTO parents (openid, nickname, avatar_url, status) VALUES (:openid, :nickname, :avatar_url, 1)"
+                ),
+                {"openid": identifier, "nickname": payload.nickname, "avatar_url": payload.avatar_url},
+            )
+            user_id = int(db.execute(text("SELECT last_insert_rowid()")).scalar_one())
+            logger.info(f"New user created: user_id={user_id}")
+
+    access_token, expires_in = create_access_token(user_id=user_id)
+    logger.info(f"Login succeeded: user_id={user_id}, expires_in={expires_in}")
+    return LoginResponse(access_token=access_token, expires_in=expires_in, user_id=user_id)
+
+
+@router.post("/logout")
+def logout(request: Request):
+    return {"message": "logged out"}
\ No newline at end of file
diff --git a/mini-program/app/service/.DS_Store b/mini-program/app/service/.DS_Store
new file mode 100644
index 0000000..2b4b0c1
Binary files /dev/null and b/mini-program/app/service/.DS_Store differ
diff --git a/mini-program/app/service/__init__.py b/mini-program/app/service/__init__.py
new file mode 100644
index 0000000..ff7cc3f
--- /dev/null
+++ b/mini-program/app/service/__init__.py
@@ -0,0 +1,12 @@
+from fastapi import Depends
+from sqlalchemy.orm import Session
+
+from app.db import get_db
+
+
+def get_db_session():
+    db = next(get_db())
+    try:
+        yield db
+    finally:
+        db.close()
\ No newline at end of file
diff --git a/mini-program/app/service/binding.py b/mini-program/app/service/binding.py
new file mode 100644
index 0000000..f8ee472
--- /dev/null
+++ b/mini-program/app/service/binding.py
@@ -0,0 +1,45 @@
+from collections.abc import Mapping
+from datetime import datetime
+from typing import Optional
+
+from app.dao.binding import BindingDAO
+
+
+class BindingService:
+    def __init__(self, db):
+        self.dao = BindingDAO(db)
+
+    def start_bind(self, user_id: int, device_id: str, child_id: int) -> tuple[str, datetime]:
+        bind_token = self.dao.start_bind(user_id, device_id, child_id)
+        return bind_token, datetime.utcnow()
+
+    def confirm_bind(self, bind_token: str, user_id: int) -> Mapping:
+        session = self.dao.get_session(bind_token, user_id)
+        if not session:
+            raise ValueError("Bind session not found")
+        if datetime.utcnow() > session["expires_at"]:
+            raise ValueError("Bind session expired")
+        if session["status"] != 1:
+            raise ValueError("Bind session already processed")
+
+        self.dao.confirm_bind(session["id"], session["device_id"], session["target_child_id"], user_id)
+        return {"device_id": session["device_id"], "child_id": session["target_child_id"]}
+
+    def get_binding(self, device_id: str, user_id: int) -> Optional[Mapping]:
+        return self.dao.get_by_device(device_id, user_id)
+
+    def get_current_binding(self, user_id: int) -> Optional[Mapping]:
+        return self.dao.get_current_by_user(user_id)
+
+    def direct_bind(self, device_id: str, child_id: int, user_id: int) -> Mapping:
+        self.dao.direct_bind(device_id, child_id, user_id)
+        return {"device_id": device_id, "child_id": child_id}
+
+    def unbind(self, device_id: str, user_id: int) -> bool:
+        return self.dao.unbind(device_id, user_id)
+
+    def list_history(self, device_id: str, limit: int = 20, cursor: datetime = None) -> tuple[list, bool]:
+        rows = self.dao.list_history(device_id, limit, cursor)
+        has_more = len(rows) > limit
+        rows = rows[:limit]
+        return rows, has_more
\ No newline at end of file
diff --git a/mini-program/app/service/child.py b/mini-program/app/service/child.py
new file mode 100644
index 0000000..8637995
--- /dev/null
+++ b/mini-program/app/service/child.py
@@ -0,0 +1,42 @@
+from collections.abc import Mapping
+from datetime import date
+from typing import Optional
+
+from app.dao.child import ChildDAO
+
+
+class ChildService:
+    def __init__(self, db):
+        self.dao = ChildDAO(db)
+
+    def create(
+        self,
+        user_id: int,
+        child_name: str,
+        child_gender: int = 2,
+        child_birthday: Optional[date] = None,
+    ) -> Mapping:
+        child_id = self.dao.create(user_id, child_name, child_gender, child_birthday)
+        return self.dao.get_by_id(child_id)
+
+    def list_children(self, user_id: int, limit: int = 20, cursor: int = None) -> tuple[list, bool]:
+        rows = self.dao.list_by_parent(user_id, limit, cursor)
+        has_more = len(rows) > limit
+        rows = rows[:limit]
+        return rows, has_more
+
+    def get(self, child_id: int) -> Optional[Mapping]:
+        return self.dao.get_by_id(child_id)
+
+    def update(
+        self,
+        child_id: int,
+        user_id: int,
+        child_name: Optional[str] = None,
+        child_gender: Optional[int] = None,
+        child_birthday: Optional[date] = None,
+    ) -> Mapping:
+        if not self.dao.has_access(child_id, user_id):
+            raise PermissionError("No access to this child")
+        self.dao.update(child_id, child_name, child_gender, child_birthday)
+        return self.dao.get_by_id(child_id)
\ No newline at end of file
diff --git a/mini-program/app/service/parent.py b/mini-program/app/service/parent.py
new file mode 100644
index 0000000..a540b45
--- /dev/null
+++ b/mini-program/app/service/parent.py
@@ -0,0 +1,33 @@
+from collections.abc import Mapping
+from typing import Optional
+
+from app.dao.parent import ParentDAO
+from app.service import get_db_session
+
+
+class ParentService:
+    def __init__(self, db):
+        self.dao = ParentDAO(db)
+
+    def create(
+        self,
+        openid: str,
+        unionid: Optional[str] = None,
+        nickname: Optional[str] = None,
+        avatar_url: Optional[str] = None,
+    ) -> Mapping:
+        user_id = self.dao.upsert(openid, unionid, nickname, avatar_url)
+        return self.dao.get_by_id(user_id)
+
+    def get(self, user_id: int) -> Optional[Mapping]:
+        return self.dao.get_by_id(user_id)
+
+    def update(
+        self,
+        user_id: int,
+        nickname: Optional[str] = None,
+        avatar_url: Optional[str] = None,
+        phone: Optional[str] = None,
+    ) -> Mapping:
+        self.dao.update(user_id, nickname, avatar_url, phone)
+        return self.dao.get_by_id(user_id)
\ No newline at end of file
diff --git a/mini-program/app/settings.py b/mini-program/app/settings.py
index 528f08a..58484bb 100644
--- a/mini-program/app/settings.py
+++ b/mini-program/app/settings.py
@@ -1,4 +1,5 @@
 from functools import lru_cache
+from pathlib import Path
 from urllib.parse import quote_plus
 
 from pydantic import Field
@@ -21,11 +22,13 @@ class Settings(BaseSettings):
     host: str = Field(default="0.0.0.0", validation_alias="HOST")
     port: int = Field(default=8001, validation_alias="PORT")
 
+    db_type: str = Field(default="mysql", validation_alias="DB_TYPE")
     db_host: str = Field(default="127.0.0.1", validation_alias="DB_HOST")
     db_port: int = Field(default=3306, validation_alias="DB_PORT")
     db_user: str = Field(default="root", validation_alias="DB_USER")
     db_password: str = Field(default="", validation_alias="DB_PASSWORD")
     db_name: str = Field(default="mini_program", validation_alias="DB_NAME")
+    db_path: str = Field(default="./data.db", validation_alias="DB_PATH")
     jwt_secret: str = Field(
         default="dev_only_change_jwt_secret",
         validation_alias="JWT_SECRET",
@@ -49,6 +52,18 @@ class Settings(BaseSettings):
             f"{self.db_name}?charset=utf8mb4"
         )
 
+    @property
+    def sqlite_dsn(self) -> str:
+        db_path = Path(self.db_path)
+        db_path.parent.mkdir(parents=True, exist_ok=True)
+        return f"sqlite:///{db_path.absolute()}"
+
+    @property
+    def database_dsn(self) -> str:
+        if self.db_type == "sqlite":
+            return self.sqlite_dsn
+        return self.mysql_dsn
+
 
 @lru_cache(maxsize=1)
 def get_settings() -> Settings:
diff --git a/mini-program/data.db b/mini-program/data.db
new file mode 100644
index 0000000..faee02f
Binary files /dev/null and b/mini-program/data.db differ
diff --git a/mini-program/database/.DS_Store b/mini-program/database/.DS_Store
new file mode 100644
index 0000000..8e8d021
Binary files /dev/null and b/mini-program/database/.DS_Store differ
diff --git a/mini-program/database/sql/002_new_db.sql b/mini-program/database/sql/002_new_db.sql
new file mode 100644
index 0000000..4a2aafe
--- /dev/null
+++ b/mini-program/database/sql/002_new_db.sql
@@ -0,0 +1,227 @@
+-- 家长微信账号表
+CREATE TABLE parents (
+    user_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    openid VARCHAR(64) UNIQUE NOT NULL COMMENT '微信openid',
+    unionid VARCHAR(64) COMMENT '微信unionid',
+    nickname VARCHAR(64) COMMENT '家长昵称',
+    avatar_url VARCHAR(255),
+    phone VARCHAR(20),
+    status TINYINT DEFAULT 1 COMMENT '0禁用 1正常',
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    INDEX idx_unionid (unionid),
+    INDEX idx_phone (phone)
+) ENGINE=InnoDB COMMENT='家长用户表';
+
+CREATE TABLE children (
+    profile_id BIGINT PRIMARY KEY AUTO_INCREMENT COMMENT '档案主键',
+    user_id BIGINT NOT NULL COMMENT '所属家长ID',
+    
+    -- 核心资料
+    child_name VARCHAR(32) NOT NULL COMMENT '儿童昵称（设备唤醒名）',
+    child_gender TINYINT DEFAULT 2 COMMENT '性别：0女 1男 2保密',
+    child_birthday DATE COMMENT '出生日期',
+    child_age TINYINT UNSIGNED GENERATED ALWAYS AS (
+        TIMESTAMPDIFF(YEAR, child_birthday, CURDATE())
+    ) STORED COMMENT '自动计算年龄（用于适龄内容过滤）',
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    
+    -- 约束与索引
+    FOREIGN KEY (user_id) REFERENCES users(user_id) ON DELETE CASCADE,
+)ENGINE=InnoDB COMMENT='儿童档案表（一个家长可创建多个档案）';
+
+CREATE TABLE cards (
+    card_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    card_uuid VARCHAR(64) UNIQUE NOT NULL COMMENT 'NFC卡片UUID',
+    device_id BIGINT UNIQUE COMMENT '绑定设备ID',
+    card_name VARCHAR(64) COMMENT '名片名称',
+    status TINYINT DEFAULT 0 COMMENT '0未绑定 1已绑定 2挂失',
+    total_swaps INT DEFAULT 0 COMMENT '交换次数',
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    
+    FOREIGN KEY (device_id) REFERENCES devices(device_id),
+    INDEX idx_uuid (card_uuid),
+    INDEX idx_device (device_id)
+) ENGINE=InnoDB COMMENT='实体交友名片表';
+-- Todo 待修改
+CREATE TABLE device_settings (
+    setting_id BIGINT PRIMARY KEY AUTO_INCREMENT COMMENT '设置主键',
+    device_id BIGINT NOT NULL UNIQUE COMMENT '设备ID（一对一）',
+    
+    -- 休眠与时间管理（防熬夜）
+    sleep_mode TINYINT DEFAULT 0 COMMENT '休眠模式：0关闭 1定时休眠 2连续使用限制',
+    sleep_start TIME COMMENT '定时休眠开始时间，如 22:00:00',
+    sleep_end TIME COMMENT '定时休眠结束时间，如 07:00:00',
+    timezone VARCHAR(32) DEFAULT 'Asia/Shanghai' COMMENT '时区，解决跨时区问题',
+    
+    -- 音量与硬件控制
+    volume TINYINT UNSIGNED DEFAULT 80 COMMENT '系统音量 0-100',
+    brightness TINYINT UNSIGNED DEFAULT 100 COMMENT '指示灯亮度 0-100（0为关闭）',
+    
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+
+) ENGINE=InnoDB COMMENT='设备设置表（家长远程管控配置）';
+
+-- 初始化数据库表
+
+-- 创建device_configs表
+CREATE TABLE IF NOT EXISTS `device_configs` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `device_id` VARCHAR(64) NOT NULL,
+  `selected_role_key` VARCHAR(64) NOT NULL,
+  `preferred_language` VARCHAR(10) NULL,
+  `volume` INT NULL,
+  `last_update_time` FLOAT NOT NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `device_id_UNIQUE` (`device_id` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建conversation_histories表
+CREATE TABLE IF NOT EXISTS `conversation_histories` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `device_id` VARCHAR(64) NOT NULL,
+  `role_key` VARCHAR(64) NOT NULL,
+  `last_interaction_time` FLOAT NOT NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  INDEX `idx_device_id` (`device_id` ASC),
+  INDEX `idx_role_key` (`role_key` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建conversation_messages表
+CREATE TABLE IF NOT EXISTS `conversation_messages` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `conversation_id` INT NOT NULL,
+  `is_user` TINYINT(1) NOT NULL DEFAULT 0,
+  `content` TEXT NOT NULL,
+  `timestamp` FLOAT NOT NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  INDEX `idx_conversation_id` (`conversation_id` ASC),
+  CONSTRAINT `fk_messages_conversation`
+    FOREIGN KEY (`conversation_id`)
+    REFERENCES `conversation_histories` (`id`)
+    ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建roles表
+CREATE TABLE IF NOT EXISTS `roles` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `role_key` VARCHAR(64) NOT NULL,
+  `name` VARCHAR(128) NOT NULL,
+  `description` TEXT NULL,
+  `content` TEXT NOT NULL,
+  `default_language` VARCHAR(10) NULL,
+  `asr_provider` VARCHAR(64) NULL,
+  `llm_provider` VARCHAR(64) NULL,
+  `tts_provider` VARCHAR(64) NULL,
+  `competitive_llm_mode` TINYINT(1) NULL,
+  `volcano_model_id` VARCHAR(64) NULL,
+  `volcano_voice_type` VARCHAR(64) NULL,
+  `tencent_voice_type` VARCHAR(64) NULL,
+  `aliyun_voice_name` VARCHAR(64) NULL,
+  `minimax_voice_id` VARCHAR(64) NULL,
+  `url` VARCHAR(255) NULL,
+  `homophones` JSON NULL,
+  `enabled` TINYINT(1) NOT NULL DEFAULT 1,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `role_key_UNIQUE` (`role_key` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建role_languages表
+CREATE TABLE IF NOT EXISTS `role_languages` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `role_id` INT NOT NULL,
+  `language_code` VARCHAR(10) NOT NULL,
+  `name` VARCHAR(128) NULL,
+  `content` TEXT NULL,
+  `asr_provider` VARCHAR(64) NULL,
+  `llm_provider` VARCHAR(64) NULL,
+  `tts_provider` VARCHAR(64) NULL,
+  `volcano_voice_type` VARCHAR(64) NULL,
+  `tencent_voice_type` VARCHAR(64) NULL,
+  `aliyun_voice_name` VARCHAR(64) NULL,
+  `minimax_voice_id` VARCHAR(64) NULL,
+  `url` VARCHAR(255) NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `uix_role_language` (`role_id`, `language_code`),
+  CONSTRAINT `fk_role_languages_role`
+    FOREIGN KEY (`role_id`)
+    REFERENCES `roles` (`id`)
+    ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建device_auth表
+CREATE TABLE IF NOT EXISTS `device_auth` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `device_id` VARCHAR(64) NOT NULL,
+  `serial_number` VARCHAR(64) NOT NULL,
+  `batch_id` VARCHAR(20) NULL,
+  `is_active` TINYINT(1) NOT NULL DEFAULT 1,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `device_id_UNIQUE` (`device_id` ASC),
+  INDEX `idx_batch_id` (`batch_id` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建device_firmware_update表
+CREATE TABLE IF NOT EXISTS `device_firmware_update` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `device_id` VARCHAR(64) NOT NULL,
+  `serial_number` VARCHAR(64) NOT NULL,
+  `mac_address` VARCHAR(512) NULL,
+  `firmware_version` VARCHAR(64) NOT NULL,
+  `update_status` VARCHAR(32) NOT NULL DEFAULT 'success',
+  `progress` FLOAT NULL DEFAULT 0.0,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `device_id_UNIQUE` (`device_id` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 创建system_config表
+CREATE TABLE IF NOT EXISTS `system_config` (
+  `id` INT NOT NULL AUTO_INCREMENT,
+  `config_key` VARCHAR(128) NOT NULL,
+  `config_value` TEXT NULL,
+  `description` VARCHAR(255) NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  UNIQUE INDEX `config_key_UNIQUE` (`config_key` ASC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 添加初始角色配置
+INSERT INTO `device_configs` (`device_id`, `selected_role_key`, `preferred_language`, `last_update_time`)
+VALUES ('default', 'assistant', 'zh', UNIX_TIMESTAMP())
+ON DUPLICATE KEY UPDATE `selected_role_key`=`selected_role_key`;
+
+-- 添加默认系统配置
+INSERT INTO `system_config` (`config_key`, `config_value`, `description`)
+VALUES 
+('latest_firmware_version', '1.0.0', '最新固件版本'),
+('update_firmware_url', 'https://example.com/firmware/latest.bin', '固件更新URL')
+ON DUPLICATE KEY UPDATE `config_value`=`config_value`;
+
+-- 添加默认角色
+INSERT INTO `roles` (`role_key`, `name`, `description`, `content`, `default_language`, `enabled`)
+VALUES (
+  'assistant',
+  '智能助手',
+  '默认智能助手角色',
+  '你是一个友好的智能助手，乐于帮助用户解答问题。',
+  'zh',
+  1
+)
+ON DUPLICATE KEY UPDATE `role_key`=`role_key`;
\ No newline at end of file
diff --git a/mini-program/database/sql/003_new_tables.sql b/mini-program/database/sql/003_new_tables.sql
new file mode 100644
index 0000000..ef29f1d
--- /dev/null
+++ b/mini-program/database/sql/003_new_tables.sql
@@ -0,0 +1,214 @@
+-- New tables per design.md
+-- Supports both MySQL and SQLite
+
+-- parents table
+CREATE TABLE IF NOT EXISTS parents (
+    user_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    openid VARCHAR(64) UNIQUE NOT NULL,
+    unionid VARCHAR(64),
+    nickname VARCHAR(64),
+    avatar_url VARCHAR(255),
+    phone VARCHAR(20),
+    status TINYINT NOT NULL DEFAULT 1,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- SQLite uses TRIGGER for updated_at, MySQL uses ON UPDATE
+-- For SQLite compatibility, we'll handle in app layer
+
+CREATE INDEX IF NOT EXISTS idx_parents_unionid ON parents(unionid);
+CREATE INDEX IF NOT EXISTS idx_parents_phone ON parents(phone);
+
+-- children table
+CREATE TABLE IF NOT EXISTS children (
+    child_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    child_name VARCHAR(32) NOT NULL,
+    child_gender TINYINT NOT NULL DEFAULT 2,
+    child_birthday DATE,
+    status TINYINT NOT NULL DEFAULT 1,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- parent_child_relations table
+CREATE TABLE IF NOT EXISTS parent_child_relations (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    user_id BIGINT NOT NULL,
+    child_id BIGINT NOT NULL,
+    relation_type TINYINT NOT NULL DEFAULT 9,
+    is_primary TINYINT(1) NOT NULL DEFAULT 0,
+    status TINYINT NOT NULL DEFAULT 1,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE (user_id, child_id)
+);
+
+-- device_bindings table
+CREATE TABLE IF NOT EXISTS device_bindings (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    device_id VARCHAR(64) NOT NULL,
+    child_id BIGINT NOT NULL,
+    status TINYINT NOT NULL DEFAULT 1,
+    bound_at DATETIME NOT NULL,
+    unbound_at DATETIME,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE (device_id),
+    UNIQUE (child_id)
+);
+
+-- device_bind_sessions table
+CREATE TABLE IF NOT EXISTS device_bind_sessions (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    bind_token CHAR(36) UNIQUE NOT NULL,
+    device_id VARCHAR(64) NOT NULL,
+    initiator_user_id BIGINT NOT NULL,
+    target_child_id BIGINT,
+    challenge_code_hash CHAR(64),
+    challenge_set_at DATETIME,
+    expires_at DATETIME NOT NULL,
+    max_attempt_count TINYINT UNSIGNED NOT NULL DEFAULT 5,
+    attempt_count TINYINT UNSIGNED NOT NULL DEFAULT 0,
+    status TINYINT NOT NULL DEFAULT 1,
+    confirmed_at DATETIME,
+    consumed_at DATETIME,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- device_bind_history table
+CREATE TABLE IF NOT EXISTS device_bind_history (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    device_id VARCHAR(64) NOT NULL,
+    child_id BIGINT NOT NULL,
+    bound_by_user_id BIGINT NOT NULL,
+    unbound_by_user_id BIGINT,
+    bind_source TINYINT NOT NULL DEFAULT 1,
+    bound_at DATETIME NOT NULL,
+    unbound_at DATETIME,
+    unbind_reason VARCHAR(191),
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- cards table
+CREATE TABLE IF NOT EXISTS cards (
+    card_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    card_uuid VARCHAR(64) UNIQUE NOT NULL,
+    device_id VARCHAR(64) UNIQUE,
+    card_name VARCHAR(64),
+    status TINYINT NOT NULL DEFAULT 0,
+    total_swaps INT NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- device_settings table
+CREATE TABLE IF NOT EXISTS device_settings (
+    setting_id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    device_id VARCHAR(64) NOT NULL UNIQUE,
+    sleep_mode TINYINT NOT NULL DEFAULT 0,
+    disable_time_start TIME,
+    disable_time_end TIME,
+    timezone VARCHAR(32) NOT NULL DEFAULT 'Asia/Shanghai',
+    volume TINYINT UNSIGNED,
+    brightness TINYINT UNSIGNED,
+    disable_weekdays VARCHAR(32),
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- im_conversations table
+CREATE TABLE IF NOT EXISTS im_conversations (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    conversation_type TINYINT UNSIGNED NOT NULL,
+    participant_a_type TINYINT UNSIGNED NOT NULL,
+    participant_a_id VARCHAR(64) NOT NULL,
+    participant_b_type TINYINT UNSIGNED NOT NULL,
+    participant_b_id VARCHAR(64) NOT NULL,
+    pair_key VARCHAR(191) NOT NULL,
+    status TINYINT NOT NULL DEFAULT 1,
+    last_seq BIGINT UNSIGNED NOT NULL DEFAULT 0,
+    message_count BIGINT UNSIGNED NOT NULL DEFAULT 0,
+    last_message_preview VARCHAR(255),
+    last_message_at DATETIME,
+    ext_json JSON,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE (conversation_type, pair_key)
+);
+
+CREATE INDEX IF NOT EXISTS idx_im_conv_participant_a ON im_conversations(participant_a_type, participant_a_id);
+CREATE INDEX IF NOT EXISTS idx_im_conv_participant_b ON im_conversations(participant_b_type, participant_b_id);
+CREATE INDEX IF NOT EXISTS idx_im_conv_last_message_at ON im_conversations(last_message_at);
+
+-- im_messages table
+CREATE TABLE IF NOT EXISTS im_messages (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    conversation_id BIGINT UNSIGNED NOT NULL,
+    seq BIGINT UNSIGNED NOT NULL,
+    sender_type TINYINT UNSIGNED NOT NULL,
+    sender_id VARCHAR(64) NOT NULL,
+    receiver_type TINYINT UNSIGNED NOT NULL,
+    receiver_id VARCHAR(64) NOT NULL,
+    content_type TINYINT UNSIGNED NOT NULL,
+    content_text MEDIUMTEXT,
+    content_json JSON,
+    media_file_key VARCHAR(255),
+    media_duration_ms INT UNSIGNED,
+    media_mime_type VARCHAR(64),
+    media_size_bytes BIGINT UNSIGNED,
+    media_transcript_text TEXT,
+    client_msg_id VARCHAR(64),
+    sender_name_snapshot VARCHAR(64),
+    sender_avatar_snapshot VARCHAR(255),
+    receiver_name_snapshot VARCHAR(64),
+    receiver_avatar_snapshot VARCHAR(255),
+    ext_json JSON,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    deleted_at DATETIME,
+    UNIQUE (conversation_id, seq),
+    UNIQUE (conversation_id, client_msg_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_im_msg_sender ON im_messages(sender_type, sender_id, created_at);
+CREATE INDEX IF NOT EXISTS idx_im_msg_receiver ON im_messages(receiver_type, receiver_id, created_at);
+
+-- child_location_current table
+CREATE TABLE IF NOT EXISTS child_location_current (
+    child_id BIGINT UNSIGNED PRIMARY KEY,
+    device_id VARCHAR(64) NOT NULL,
+    coord_type VARCHAR(16) NOT NULL DEFAULT 'gcj02',
+    lat DECIMAL(10,7) NOT NULL,
+    lng DECIMAL(10,7) NOT NULL,
+    accuracy_m INT UNSIGNED,
+    altitude_m DECIMAL(8,2),
+    speed_mps DECIMAL(8,2),
+    heading_deg SMALLINT UNSIGNED,
+    source TINYINT UNSIGNED NOT NULL,
+    battery_pct TINYINT UNSIGNED,
+    device_time DATETIME NOT NULL,
+    server_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- child_location_history table
+CREATE TABLE IF NOT EXISTS child_location_history (
+    id BIGINT PRIMARY KEY AUTO_INCREMENT,
+    child_id BIGINT UNSIGNED NOT NULL,
+    device_id VARCHAR(64) NOT NULL,
+    coord_type VARCHAR(16) NOT NULL DEFAULT 'gcj02',
+    lat DECIMAL(10,7) NOT NULL,
+    lng DECIMAL(10,7) NOT NULL,
+    accuracy_m INT UNSIGNED,
+    altitude_m DECIMAL(8,2),
+    speed_mps DECIMAL(8,2),
+    heading_deg SMALLINT UNSIGNED,
+    source TINYINT UNSIGNED NOT NULL,
+    battery_pct TINYINT UNSIGNED,
+    device_time DATETIME NOT NULL,
+    server_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_child_loc_hist_child ON child_location_history(child_id, created_at);
\ No newline at end of file
diff --git a/mini-program/design.md b/mini-program/design.md
new file mode 100644
index 0000000..4570147
--- /dev/null
+++ b/mini-program/design.md
@@ -0,0 +1,379 @@
+# Banban 统一数据与接口设计文档（Mini Program + talkingq-url，V3）
+
+## 1. 目标与边界
+
+本设计用于统一 `mini-program` 与 `talkingq-url` 的数据库模型与接口语义，目标是：
+
+1. 两个服务使用同一套设备身份（`device_id`）。
+2. 保留 `talkingq-url/mysql/init/01-init.sql` 现有表结构不变。
+3. 在不改动基础表的前提下，补齐家长/小孩/绑定/聊天/定位能力。
+
+硬性边界：
+
+1. `01-init.sql` 中现有表不改表名、不改字段、不改约束。
+2. 所有新增表仅做增量扩展。
+3. 新增表字段命名风格对齐现有风格：`snake_case`、`*_id`、`is_active`、`status`、`created_at`、`updated_at`。
+
+## 2. 现有冻结表（来自 01-init.sql）
+
+以下表为设备能力基础层，保持不变：
+
+1. `device_auth`：设备身份白名单（`device_id + serial_number`）。
+2. `device_configs`：设备角色与基础配置（含 `volume`）。
+3. `conversation_histories`：设备与角色会话头。
+4. `conversation_messages`：设备与角色会话消息。
+5. `roles` / `role_languages`：角色与多语言配置。
+6. `device_firmware_update`：设备固件升级状态。
+7. `system_config`：系统配置项。
+
+职责说明：
+
+1. `conversation_histories/conversation_messages` 继续只服务“设备 <-> AI 角色”的对话，不承担家长-小孩 IM。
+2. 设备鉴权统一走 `device_auth`，`device_id` 为全局设备业务标识。
+
+## 3. 新增主体模型
+
+### 3.1 家长主体表 `parents`
+
+建议字段：
+
+1. `user_id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `openid` VARCHAR(64) UNIQUE NOT NULL
+3. `unionid` VARCHAR(64) NULL
+4. `nickname` VARCHAR(64) NULL
+5. `avatar_url` VARCHAR(255) NULL
+6. `phone` VARCHAR(20) NULL
+7. `status` TINYINT NOT NULL DEFAULT 1
+8. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+9. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+索引建议：
+
+1. `uk_openid(openid)`
+2. `idx_unionid(unionid)`
+3. `idx_phone(phone)`
+
+### 3.2 小孩主体表 `children`
+
+建议字段：
+
+1. `child_id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `child_name` VARCHAR(32) NOT NULL
+3. `child_gender` TINYINT NOT NULL DEFAULT 2
+4. `child_birthday` DATE NULL
+5. `status` TINYINT NOT NULL DEFAULT 1
+6. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+7. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+说明：
+
+1. 不在库内存储 `child_age` 计算列，年龄由查询层按时间实时计算，避免跨年缓存误差。
+
+### 3.3 家长-小孩关系表 `parent_child_relations`
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `user_id` BIGINT UNSIGNED NOT NULL
+3. `child_id` BIGINT UNSIGNED NOT NULL
+4. `relation_type` TINYINT NOT NULL DEFAULT 9
+5. `is_primary` TINYINT(1) NOT NULL DEFAULT 0
+6. `status` TINYINT NOT NULL DEFAULT 1
+7. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+8. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+约束建议：
+
+1. `UNIQUE(user_id, child_id)`
+2. `FOREIGN KEY (user_id) REFERENCES parents(user_id)`
+3. `FOREIGN KEY (child_id) REFERENCES children(child_id)`
+
+### 3.4 设备归属表 `device_bindings`
+
+用途：表达“当前哪块设备绑定到哪个小孩”，并与 `device_auth` 对齐。
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `device_id` VARCHAR(64) NOT NULL
+3. `child_id` BIGINT UNSIGNED NOT NULL
+4. `status` TINYINT NOT NULL DEFAULT 1
+5. `bound_at` DATETIME NOT NULL
+6. `unbound_at` DATETIME NULL
+7. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+8. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+约束建议：
+
+1. `UNIQUE(device_id)`
+2. `UNIQUE(child_id)`
+3. `FOREIGN KEY (device_id) REFERENCES device_auth(device_id)`
+4. `FOREIGN KEY (child_id) REFERENCES children(child_id)`
+
+### 3.5 绑定会话表 `device_bind_sessions`
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `bind_token` CHAR(36) UNIQUE NOT NULL
+3. `device_id` VARCHAR(64) NOT NULL
+4. `initiator_user_id` BIGINT UNSIGNED NOT NULL
+5. `target_child_id` BIGINT UNSIGNED NULL
+6. `challenge_code_hash` CHAR(64) NULL
+7. `challenge_set_at` DATETIME NULL
+8. `expires_at` DATETIME NOT NULL
+9. `max_attempt_count` TINYINT UNSIGNED NOT NULL DEFAULT 5
+10. `attempt_count` TINYINT UNSIGNED NOT NULL DEFAULT 0
+11. `status` TINYINT NOT NULL DEFAULT 1
+12. `confirmed_at` DATETIME NULL
+13. `consumed_at` DATETIME NULL
+14. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+15. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+约束建议：
+
+1. `FOREIGN KEY (device_id) REFERENCES device_auth(device_id)`
+2. `FOREIGN KEY (initiator_user_id) REFERENCES parents(user_id)`
+3. `FOREIGN KEY (target_child_id) REFERENCES children(child_id)`
+
+### 3.6 绑定历史表 `device_bind_history`
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `device_id` VARCHAR(64) NOT NULL
+3. `child_id` BIGINT UNSIGNED NOT NULL
+4. `bound_by_user_id` BIGINT UNSIGNED NOT NULL
+5. `unbound_by_user_id` BIGINT UNSIGNED NULL
+6. `bind_source` TINYINT NOT NULL DEFAULT 1
+7. `bound_at` DATETIME NOT NULL
+8. `unbound_at` DATETIME NULL
+9. `unbind_reason` VARCHAR(191) NULL
+10. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+
+约束建议：
+
+1. `FOREIGN KEY (device_id) REFERENCES device_auth(device_id)`
+2. `FOREIGN KEY (child_id) REFERENCES children(child_id)`
+3. `FOREIGN KEY (bound_by_user_id) REFERENCES parents(user_id)`
+4. `FOREIGN KEY (unbound_by_user_id) REFERENCES parents(user_id)`
+
+### 3.7 卡片表 `cards`
+
+建议字段：
+
+1. `card_id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `card_uuid` VARCHAR(64) UNIQUE NOT NULL
+3. `device_id` VARCHAR(64) UNIQUE NULL
+4. `card_name` VARCHAR(64) NULL
+5. `status` TINYINT NOT NULL DEFAULT 0
+6. `total_swaps` INT NOT NULL DEFAULT 0
+7. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+8. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+约束建议：
+
+1. `FOREIGN KEY (device_id) REFERENCES device_auth(device_id)`
+
+### 3.8 设备设置表 `device_settings`
+
+建议字段：
+
+1. `setting_id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `device_id` VARCHAR(64) NOT NULL UNIQUE
+3. `sleep_mode` TINYINT NOT NULL DEFAULT 0
+4. `disable_time_start` TIME NULL
+5. `disable_time_end` TIME NULL
+6. `timezone` VARCHAR(32) NOT NULL DEFAULT 'Asia/Shanghai'
+7. `volume` TINYINT UNSIGNED NULL
+8. `brightness` TINYINT UNSIGNED NULL
+9. `disable_weekdays` VARCHAR(32) NULL
+10. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+11. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+兼容规则：
+
+1. `volume` 同步写入 `device_configs.volume`，防止两服务读到不同值。
+2. 若只允许单一音量来源，则以 `device_configs.volume` 为准，`device_settings.volume` 可后续下线。
+3. `disable_time_start/disable_time_end` 与历史命名 `sleep_start/sleep_end` 一一映射。
+4. 禁用时段按 `timezone` 解释；跨天时段（如 22:00-07:00）按“跨日窗口”处理。
+
+## 4. 聊天与定位模型（新增，不改 01 现有会话表）
+
+### 4.1 IM 会话表 `im_conversations`
+
+用途：仅服务家长-小孩、小孩-小孩 1v1，不与 `conversation_histories` 混用。
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `conversation_type` TINYINT UNSIGNED NOT NULL
+3. `participant_a_type` TINYINT UNSIGNED NOT NULL
+4. `participant_a_id` VARCHAR(64) NOT NULL
+5. `participant_b_type` TINYINT UNSIGNED NOT NULL
+6. `participant_b_id` VARCHAR(64) NOT NULL
+7. `pair_key` VARCHAR(191) NOT NULL
+8. `status` TINYINT NOT NULL DEFAULT 1
+9. `last_seq` BIGINT UNSIGNED NOT NULL DEFAULT 0
+10. `message_count` BIGINT UNSIGNED NOT NULL DEFAULT 0
+11. `last_message_preview` VARCHAR(255) NULL
+12. `last_message_at` DATETIME NULL
+13. `ext_json` JSON NULL
+14. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+15. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+说明：
+
+1. 会话核心字段保持通用，不使用 `child_low_id/child_high_id` 这类场景耦合命名。
+2. `conversation_type` 使用类型码，可扩展；新增会话类型优先通过“类型码 + 业务校验 + `ext_json`”扩展，无需改核心表。
+3. 当前建议启用类型：`1-child_peer`、`2-parent_child`。
+
+约束建议：
+
+1. `UNIQUE(conversation_type, pair_key)`
+2. `INDEX idx_participant_a (participant_a_type, participant_a_id)`
+3. `INDEX idx_participant_b (participant_b_type, participant_b_id)`
+4. `INDEX idx_last_message_at (last_message_at)`
+
+### 4.2 IM 消息表 `im_messages`
+
+建议字段：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `conversation_id` BIGINT UNSIGNED NOT NULL
+3. `seq` BIGINT UNSIGNED NOT NULL
+4. `sender_type` TINYINT UNSIGNED NOT NULL
+5. `sender_id` VARCHAR(64) NOT NULL
+6. `receiver_type` TINYINT UNSIGNED NOT NULL
+7. `receiver_id` VARCHAR(64) NOT NULL
+8. `content_type` TINYINT UNSIGNED NOT NULL
+9. `content_text` MEDIUMTEXT NULL
+10. `content_json` JSON NULL
+11. `media_file_key` VARCHAR(255) NULL
+12. `media_duration_ms` INT UNSIGNED NULL
+13. `media_mime_type` VARCHAR(64) NULL
+14. `media_size_bytes` BIGINT UNSIGNED NULL
+15. `media_transcript_text` TEXT NULL
+16. `client_msg_id` VARCHAR(64) NULL
+17. `sender_name_snapshot` VARCHAR(64) NULL
+18. `sender_avatar_snapshot` VARCHAR(255) NULL
+19. `receiver_name_snapshot` VARCHAR(64) NULL
+20. `receiver_avatar_snapshot` VARCHAR(255) NULL
+21. `ext_json` JSON NULL
+22. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+23. `deleted_at` DATETIME NULL
+
+约束建议：
+
+1. `UNIQUE(conversation_id, seq)`
+2. `UNIQUE(conversation_id, client_msg_id)`
+3. `FOREIGN KEY (conversation_id) REFERENCES im_conversations(id) ON DELETE CASCADE`
+4. `INDEX idx_sender (sender_type, sender_id, created_at)`
+5. `INDEX idx_receiver (receiver_type, receiver_id, created_at)`
+
+#### 4.2.1 文本与语音消息规则
+
+1. `content_type=1(text)`：`content_text` 必填。
+2. `content_type=2(audio)`：`media_file_key` 必填，建议同时写入 `media_duration_ms`、`media_mime_type`、`media_size_bytes`。
+3. `content_type=3(image)`：`media_file_key` 必填。
+4. `content_type=4(json)`：`content_json` 必填。
+5. 语音转写内容可写入 `media_transcript_text`，用于检索与展示。
+6. 展示层优先使用 `sender_name_snapshot/sender_avatar_snapshot` 与 `receiver_*_snapshot`，减少联表查询。
+
+### 4.3 位置表
+
+`child_location_current`：
+
+1. `child_id` BIGINT UNSIGNED PK
+2. `device_id` VARCHAR(64) NOT NULL
+3. `coord_type` VARCHAR(16) NOT NULL DEFAULT 'gcj02'
+4. `lat` DECIMAL(10,7) NOT NULL
+5. `lng` DECIMAL(10,7) NOT NULL
+6. `accuracy_m` INT UNSIGNED NULL
+7. `altitude_m` DECIMAL(8,2) NULL
+8. `speed_mps` DECIMAL(8,2) NULL
+9. `heading_deg` SMALLINT UNSIGNED NULL
+10. `source` TINYINT UNSIGNED NOT NULL
+11. `battery_pct` TINYINT UNSIGNED NULL
+12. `device_time` DATETIME NOT NULL
+13. `server_time` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+14. `updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+
+`child_location_history`：
+
+1. `id` BIGINT UNSIGNED PK AUTO_INCREMENT
+2. `child_id` BIGINT UNSIGNED NOT NULL
+3. `device_id` VARCHAR(64) NOT NULL
+4. `coord_type` VARCHAR(16) NOT NULL DEFAULT 'gcj02'
+5. 其余定位字段与 `child_location_current` 对齐
+6. `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+
+#### 4.3.1 位置上报协议（统一格式）
+
+1. 上报字段：`device_id`、`child_id`、`coord_type`、`lat`、`lng`、`accuracy_m`、`source`、`device_time`、`battery_pct`。
+2. 坐标系标准：统一使用 `gcj02`。
+3. 坐标格式：统一按 `lat,lng`（纬度在前，经度在后）传输和存储。
+4. 若设备侧提供 `wgs84`，服务端需先转换到 `gcj02` 后再入库；原始坐标可选写入 `ext_json` 备查。
+5. 写入规则：同事务写 `child_location_history` 并覆盖 `child_location_current`。
+
+## 5. 核心业务流程
+
+### 5.1 设备注册与鉴权
+
+1. 生产或后台调用 `talkingq-url` 现有注册接口，写入 `device_auth`。
+2. 手表请求携带 `X-Device-ID` 与 `X-Device-Serial`。
+3. 后端基于 `device_auth` 鉴权通过后继续处理聊天/定位/绑定。
+
+### 5.2 绑定流程（扫码 + 确认码）
+
+1. 家长登录后发起 `bind/start`，创建 `device_bind_sessions`。
+2. 手表上报确认码，更新会话挑战信息。
+3. 家长提交确认码。
+4. 后端校验通过后开启事务。
+5. upsert `parent_child_relations`。
+6. upsert `device_bindings`（保证一设备一行、一小孩一行）。
+7. 追加 `device_bind_history`。
+8. 更新会话状态为 `confirmed/consumed` 并提交事务。
+
+### 5.3 聊天流程
+
+1. 设备 AI 对话仍走 `conversation_histories + conversation_messages`。
+2. 家长-小孩、小孩-小孩消息走 `im_conversations + im_messages`。
+3. IM 消息统一使用 `sender_type/sender_id + receiver_type/receiver_id`，不按场景拆专用发送者字段。
+4. 发送接口必须使用 `client_msg_id` 幂等。
+5. 查询前必须校验 `parent_child_relations` 权限。
+6. 列表展示优先读取消息快照字段，降低跨表查询成本。
+
+### 5.4 位置流程
+
+1. 手表上报定位写入 `child_location_history`。
+2. 同事务更新 `child_location_current`。
+3. 小程序查询当前定位读 `child_location_current`，轨迹读 `child_location_history`。
+4. 地址解析使用腾讯位置服务；若解析失败，前端降级展示经纬度。
+
+## 6. 统一约束与实现规则
+
+1. 所有设备引用字段统一使用 `device_id VARCHAR(64)`，不再新增 `watch_device_id BIGINT`。
+2. 设备主身份只认 `device_auth.device_id`。
+3. 跨主体通用 ID 字段统一采用字符串（如 `participant_*_id`、`sender_id`、`receiver_id`）。
+4. 所有业务表统一包含 `created_at/updated_at`（历史流水类可无 `updated_at`）。
+5. `status` 用于业务态，`is_active` 用于启停态；两者不混用。
+6. 关键写路径（绑定确认、发消息、位置写入）必须事务化。
+7. 腾讯位置服务启用前提：必须配置合法 `key`，并完成域名/来源白名单与配额设置。
+8. 地图相关接口统一使用 `gcj02` 和 `lat,lng`；禁止混用 `wgs84/bd09` 直接入库。
+
+## 7. 分阶段落地
+
+1. 第一阶段：落地 `parents/children/parent_child_relations/device_bind_*`，打通绑定链路。
+2. 第二阶段：落地 `im_conversations/im_messages`，打通家长与小孩 IM。
+3. 第三阶段：落地 `child_location_current/history`，打通定位链路。
+4. 第四阶段：补充审计、告警、实时推送和运营能力。
+
+## 8. 验收标准
+
+1. 不修改 `01-init.sql` 任一现有表，服务可正常启动。
+2. 设备鉴权、角色配置、OTA能力保持可用。
+3. 家长可完成扫码绑定、解绑、重绑，且历史保留。
+4. 家长可查看自己小孩与其他小孩完整双向消息。
+5. 小程序可查看小孩最新位置与历史轨迹。
+
diff --git a/mini-program/requirements.txt b/mini-program/requirements.txt
index a1643a5..48b1496 100644
--- a/mini-program/requirements.txt
+++ b/mini-program/requirements.txt
@@ -1,7 +1,10 @@
-fastapi==0.115.11
-uvicorn[standard]==0.34.0
+fastapi==0.135.3
+uvicorn[standard]==0.44.0
 pydantic-settings==2.8.1
 python-dotenv==1.0.1
 SQLAlchemy==2.0.38
 PyMySQL==1.1.1
 PyJWT==2.10.1
+httpx==0.28.1
+pytest==8.3.4
+pytest-asyncio==0.24.0
diff --git a/mini-program/tests/__init__.py b/mini-program/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/mini-program/tests/test_dao.py b/mini-program/tests/test_dao.py
new file mode 100644
index 0000000..969693d
--- /dev/null
+++ b/mini-program/tests/test_dao.py
@@ -0,0 +1,85 @@
+import os
+import pytest
+
+os.environ["DB_TYPE"] = "sqlite"
+os.environ["DB_PATH"] = ":memory:"
+
+
+def test_sqlite_connection():
+    """Test SQLite database works."""
+    from sqlalchemy import create_engine, text
+    from app.models import Base
+
+    engine = create_engine("sqlite:///:memory:", echo=False)
+    Base.metadata.create_all(bind=engine)
+
+    with engine.connect() as conn:
+        conn.execute(text("INSERT INTO parents (openid, nickname, status) VALUES ('test', 'Test', 1)"))
+        conn.commit()
+        result = conn.execute(text("SELECT * FROM parents")).fetchall()
+        assert len(result) == 1
+
+
+def test_parent_dao():
+    """Test ParentDAO."""
+    from sqlalchemy import create_engine
+    from sqlalchemy.orm import sessionmaker
+    from app.models import Base
+    from app.dao.parent import ParentDAO
+
+    engine = create_engine("sqlite:///:memory:", echo=False)
+    Base.metadata.create_all(bind=engine)
+    Session = sessionmaker(bind=engine)
+    db = Session()
+
+    dao = ParentDAO(db)
+    user_id = dao.create("test_openid", None, "Test User")
+    assert user_id > 0
+
+    parent = dao.get_by_id(user_id)
+    assert parent["openid"] == "test_openid"
+
+
+def test_child_dao():
+    """Test ChildDAO."""
+    from sqlalchemy import create_engine
+    from sqlalchemy.orm import sessionmaker
+    from app.models import Base
+    from app.dao.child import ChildDAO
+
+    engine = create_engine("sqlite:///:memory:", echo=False)
+    Base.metadata.create_all(bind=engine)
+    Session = sessionmaker(bind=engine)
+    db = Session()
+
+    dao = ChildDAO(db)
+    child_id = dao.create(1, "Test Child")
+    assert child_id > 0
+
+    child = dao.get_by_id(child_id)
+    assert child["child_name"] == "Test Child"
+
+
+def test_binding_dao():
+    """Test BindingDAO."""
+    from sqlalchemy import create_engine
+    from sqlalchemy.orm import sessionmaker
+    from app.models import Base
+    from app.dao.binding import BindingDAO
+
+    engine = create_engine("sqlite:///:memory:", echo=False)
+    Base.metadata.create_all(bind=engine)
+    Session = sessionmaker(bind=engine)
+    db = Session()
+
+    dao = BindingDAO(db)
+    token = dao.start_bind(1, "device_123", 1)
+    assert len(token) == 36
+
+
+if __name__ == "__main__":
+    test_sqlite_connection()
+    test_parent_dao()
+    test_child_dao()
+    test_binding_dao()
+    print("All DAO tests passed!")
\ No newline at end of file
diff --git a/talkingq-url/utils/s3storage.py b/talkingq-url/utils/s3storage.py
new file mode 100644
index 0000000..56ba3bc
--- /dev/null
+++ b/talkingq-url/utils/s3storage.py
@@ -0,0 +1,424 @@
+import os
+import re
+from pathlib import Path
+from typing import Optional, Any, Dict, List, TypedDict, Iterable
+from uuid import uuid4
+
+import boto3
+from botocore.exceptions import ClientError
+from boto3.s3.transfer import TransferConfig
+import logging
+logger = logging.getLogger(__name__)
+
+# 允许的文件名字符集（面向用户输入的约束）
+FILE_NAME_ALLOWED_RE = re.compile(r"^[A-Za-z0-9._\-/]+$")
+
+
+class ListFilesResult(TypedDict):
+    # list_files 的返回结构类型
+    keys: List[str]
+    is_truncated: bool
+    next_continuation_token: Optional[str]
+
+class S3SyncStorage:
+    """S3兼容存储实现"""
+
+    def __init__(self, *, endpoint_url: Optional[str] = None, access_key: str, secret_key: str, bucket_name: str, region: str = "cn-beijing"):
+        self.endpoint_url = os.environ.get("COZE_BUCKET_ENDPOINT_URL") or endpoint_url or ''
+        self.access_key = access_key
+        self.secret_key = secret_key
+        self.bucket_name = bucket_name
+        self.region = region
+        self._client = None
+
+    def _get_client(self):
+        if self._client is None:
+            endpoint = self.endpoint_url
+            if endpoint is None or endpoint == "":
+                try:
+                    from coze_workload_identity import Client as CozeEnvClient
+                    coze_env_client = CozeEnvClient()
+                    env_vars = coze_env_client.get_project_env_vars()
+                    coze_env_client.close()
+                    for env_var in env_vars:
+                        if env_var.key == "COZE_BUCKET_ENDPOINT_URL":
+                            endpoint = env_var.value.replace("'", "'\\''")
+                            self.endpoint_url = endpoint
+                            break
+                except Exception as e:
+                    logger.error(f"Error loading COZE_BUCKET_ENDPOINT_URL: {e}")
+                    # 保持向下校验逻辑，避免在此处中断
+            if endpoint is None or endpoint == "":
+                logger.error("未配置存储端点：请设置endpoint_url")
+                raise ValueError("未配置存储端点：请设置endpoint_url")
+
+            client = boto3.client(
+                "s3",
+                endpoint_url=endpoint,
+                aws_access_key_id=self.access_key,
+                aws_secret_access_key=self.secret_key,
+                region_name=self.region,
+            )
+
+            # 注册 before-call 钩子，发送前注入 x-storage-token 头
+            def _inject_header(**kwargs):
+                try:
+                    from coze_workload_identity import Client as CozeClient
+                    coze_client = CozeClient()
+                    try:
+                        token = coze_client.get_access_token()
+                    except Exception as e:
+                        logger.error("Error loading COZE_WORKLOAD_IDENTITY_TOKEN: %s", e)
+                        token = None
+                        raise e
+                    finally:
+                        coze_client.close()
+                    params = kwargs.get("params", {})
+                    headers = params.setdefault("headers", {})
+                    headers["x-storage-token"] = token
+                except Exception as e:
+                    logger.error("Error loading COZE_WORKLOAD_IDENTITY_TOKEN: %s", e)
+                    pass
+            client.meta.events.register("before-call.s3", _inject_header)
+            self._client = client
+        return self._client
+
+    def _generate_object_key(self, *, original_name: str) -> str:
+        suffix = Path(original_name).suffix.lower()
+        stem = Path(original_name).stem
+        uniq = uuid4().hex[:8]
+        return f"{stem}_{uniq}{suffix}"
+
+    def _extract_logid(self, e: Exception) -> Optional[str]:
+        """从 ClientError 中提取 x-tt-logid"""
+        if isinstance(e, ClientError):
+            headers = (e.response or {}).get("ResponseMetadata", {}).get("HTTPHeaders", {})
+            return headers.get("x-tt-logid")
+        return None
+
+    def _error_msg(self, msg: str, e: Exception) -> str:
+        """构建带 logid 的错误信息"""
+        logid = self._extract_logid(e)
+        if logid:
+            return f"{msg}: {e} (x-tt-logid: {logid})"
+        return f"{msg}: {e}"
+
+    def _resolve_bucket(self, bucket: Optional[str]) -> str:
+        """统一解析 bucket 来源，确保得到有效桶名。"""
+        target_bucket = bucket or os.environ.get("COZE_BUCKET_NAME") or self.bucket_name
+        if not target_bucket:
+            raise ValueError("未配置 bucket：请传入 bucket 或设置 COZE_BUCKET_NAME，或在实例化时提供 bucket_name")
+        return target_bucket
+
+    def _validate_file_name(self, name: str) -> None:
+        """校验 S3 对象命名：长度≤1024；允许 [A-Za-z0-9._-/]；不以 / 起止且不含 //。"""
+        msg = (
+            "file name invalid: 文件名需满足以下 S3 对象命名规范："
+            "1) 长度 1–1024 字节；"
+            "2) 仅允许字母、数字、点(.)、下划线(_)、短横(-)、目录分隔符(/)；"
+            "3) 不允许空格或以下特殊字符：? # & % { } ^ [ ] ` \\ < > ~ | \" ' + = : ;；"
+            "4) 不以 / 开头或结尾，且不包含连续的 //；"
+            "示例：report_2025-12-11.pdf、images/photo-01.png。"
+        )
+
+        if not name or not name.strip():
+            raise ValueError(msg + "（原因：文件名为空）")
+
+        # S3 限制对象 key 最大 1024 字节，这里沿用到输入文件名
+        if len(name.encode("utf-8")) > 1024:
+            raise ValueError(msg + "（原因：长度超过 1024 字节）")
+
+        if name.startswith("/") or name.endswith("/"):
+            raise ValueError(msg + "（原因：以 / 开头或结尾）")
+        if "//" in name:
+            raise ValueError(msg + "（原因：包含连续的 //）")
+
+        # 允许字符集校验
+        if not FILE_NAME_ALLOWED_RE.match(name):
+            bad = re.findall(r"[^A-Za-z0-9._\-/]", name)
+            example = bad[0] if bad else "非法字符"
+            raise ValueError(msg + f"（原因：包含非法字符，例如：{example}）")
+
+    def upload_file(self, *, file_content: bytes, file_name: str, content_type: str = "application/octet-stream", bucket: Optional[str] = None) -> str:
+        # 先对输入文件名做规范校验，避免生成无效对象 key
+        self._validate_file_name(file_name)
+        try:
+            client = self._get_client()
+            object_key = self._generate_object_key(original_name=file_name)
+            target_bucket = self._resolve_bucket(bucket)
+            client.put_object(Bucket=target_bucket, Key=object_key, Body=file_content, ContentType=content_type)
+            return object_key
+        except Exception as e:
+            logger.error(self._error_msg("Error uploading file to S3", e))
+            raise e
+
+    def delete_file(self, *, file_key: str, bucket: Optional[str] = None) -> bool:
+        try:
+            client = self._get_client()
+            target_bucket = self._resolve_bucket(bucket)
+            client.delete_object(Bucket=target_bucket, Key=file_key)
+            return True
+        except Exception as e:
+            logger.error(self._error_msg("Error deleting file from S3", e))
+            raise e
+
+    def file_exists(self, *, file_key: str, bucket: Optional[str] = None) -> bool:
+        try:
+            client = self._get_client()
+            target_bucket = self._resolve_bucket(bucket)
+            client.head_object(Bucket=target_bucket, Key=file_key)
+            return True
+        except ClientError as e:
+            code = (e.response or {}).get("Error", {}).get("Code", "")
+            if code in {"404", "NoSuchKey", "NotFound"}:
+                return False
+            logger.error(self._error_msg("Error checking file existence in S3", e))
+            return False
+        except Exception as e:
+            logger.error(self._error_msg("Error checking file existence in S3", e))
+            return False
+
+    def read_file(self, *, file_key: str, bucket: Optional[str] = None) -> bytes:
+        try:
+            client = self._get_client()
+            target_bucket = self._resolve_bucket(bucket)
+            resp = client.get_object(Bucket=target_bucket, Key=file_key)
+            body = resp.get("Body")
+            if body is None:
+                raise RuntimeError("S3 get_object returned no Body")
+            try:
+                return body.read()
+            finally:
+                try:
+                    body.close()
+                except Exception as ce:
+                    # 资源关闭失败不影响读取结果，仅记录以便排查
+                    logger.debug("Failed to close S3 response body: %s", ce)
+        except Exception as e:
+            logger.error(self._error_msg("Error reading file from S3", e))
+            raise e
+
+    def list_files(self, *, prefix: Optional[str] = None, bucket: Optional[str] = None, max_keys: int = 1000, continuation_token: Optional[str] = None) -> ListFilesResult:
+        """列出对象，支持前缀过滤与分页；返回 keys/is_truncated/next_continuation_token。"""
+        try:
+            client = self._get_client()
+            target_bucket = self._resolve_bucket(bucket)
+            if max_keys <= 0 or max_keys > 1000:
+                raise ValueError("max_keys 必须在 1 到 1000 之间")
+
+            kwargs: Dict[str, Any] = {
+                "Bucket": target_bucket,
+                "MaxKeys": max_keys,
+                "Prefix": prefix,
+                "ContinuationToken": continuation_token,
+            }
+            kwargs = {k: v for k, v in kwargs.items() if v is not None}
+
+            resp = client.list_objects_v2(**kwargs)
+            contents = resp.get("Contents", []) or []
+            keys: List[str] = [item.get("Key") for item in contents if isinstance(item, dict) and item.get("Key")]
+            return {
+                "keys": keys,
+                "is_truncated": bool(resp.get("IsTruncated")),
+                "next_continuation_token": resp.get("NextContinuationToken"),
+            }
+        except ClientError as e:
+            code = (e.response or {}).get("Error", {}).get("Code", "")
+            logger.error(self._error_msg(f"Error listing files in S3 (code={code})", e))
+            raise e
+        except Exception as e:
+            logger.error(self._error_msg("Error listing files in S3", e))
+            raise e
+
+    def generate_presigned_url(self, *, key: str, bucket: Optional[str] = None, expire_time: int = 1800) -> str:
+        """通过 S3 Proxy 生成签名 URL。"""
+        import json
+        import urllib.request as urllib_request
+        try:
+            from coze_workload_identity import Client as CozeClient
+            coze_client = CozeClient()
+            try:
+                token = coze_client.get_access_token()
+            finally:
+                try:
+                    coze_client.close()
+                except Exception:
+                    # 资源释放失败不影响后续流程
+                    pass
+        except Exception as e:
+            logger.error(f"Error loading x-storage-token: {e}")
+            raise RuntimeError(f"获取 x-storage-token 失败: {e}")
+        try:
+            sign_base = os.environ.get("COZE_BUCKET_ENDPOINT_URL") or self.endpoint_url
+            if not sign_base:
+                raise ValueError("未配置签名端点：请设置 COZE_BUCKET_ENDPOINT_URL 或传入 endpoint_url")
+            sign_url_endpoint = sign_base.rstrip("/") + "/sign-url"
+
+            headers = {
+                "Content-Type": "application/json",
+                "x-storage-token": token,
+            }
+
+            target_bucket = self._resolve_bucket(bucket)
+            payload = {"bucket_name": target_bucket, "path": key, "expire_time": expire_time}
+            data = json.dumps(payload).encode("utf-8")
+            request = urllib_request.Request(sign_url_endpoint, data=data, headers=headers, method="POST")
+        except Exception as e:
+            logger.error(f"Error creating request for sign-url: {e}")
+            raise RuntimeError(f"创建 sign-url 请求失败: {e}")
+
+        try:
+            with urllib_request.urlopen(request) as resp:
+                resp_bytes = resp.read()
+                content_type = resp.headers.get("Content-Type", "")
+                text = resp_bytes.decode("utf-8", errors="replace")
+                if "application/json" in content_type or text.strip().startswith("{"):
+                    try:
+                        obj = json.loads(text)
+                    except Exception:
+                        return text
+                    data = obj.get("data")
+                    if isinstance(data, dict) and "url" in data:
+                        return data["url"]
+                    url_value = obj.get("url") or obj.get("signed_url") or obj.get("presigned_url")
+                    if url_value:
+                        return url_value
+                    raise ValueError("签名服务返回缺少 data.url/url 字段")
+                return text
+        except Exception as e:
+            raise RuntimeError(f"生成签名URL失败: {e}")
+
+    def stream_upload_file(
+            self,
+            *,
+            fileobj,
+            file_name: str,
+            content_type: str = "application/octet-stream",
+            bucket: Optional[str] = None,
+            multipart_chunksize: int = 5 * 1024 * 1024,
+            multipart_threshold: int = 5 * 1024 * 1024,
+            max_concurrency: int = 1,
+            use_threads: bool = False,
+    ) -> str:
+        """流式上传（文件对象）
+        - fileobj: 任何带有 read() 方法的文件对象（如 open(..., 'rb') 返回的对象、io.BytesIO 等）
+        - file_name: 原始文件名，用于生成唯一 key
+        - content_type: MIME 类型
+        - bucket: 目标桶；为空时取环境变量或实例默认值
+        - multipart_chunksize: 分片大小（默认 5MB，以适配代理层限制）
+        - multipart_threshold: 触发分片上传的阈值（默认 5MB）
+        - max_concurrency: 并发分片上传的并发数（默认 1，避免代理层节流影响）
+        - use_threads: 是否启用线程并发（默认 False）
+        返回：最终写入的对象 key
+        """
+        try:
+            client = self._get_client()
+            target_bucket = self._resolve_bucket(bucket)
+            key = self._generate_object_key(original_name=file_name)
+
+            extra_args = {"ContentType": content_type} if content_type else {}
+            # 使用 boto3 的高阶方法执行多段上传（传入 TransferConfig 控制分片大小）
+
+            config = TransferConfig(
+                multipart_chunksize=multipart_chunksize,
+                multipart_threshold=multipart_threshold,
+                max_concurrency=max_concurrency,
+                use_threads=use_threads,
+            )
+            client.upload_fileobj(Fileobj=fileobj, Bucket=target_bucket, Key=key, ExtraArgs=extra_args, Config=config)
+            return key
+        except Exception as e:
+            logger.error(self._error_msg("Error streaming upload (fileobj) to S3", e))
+            raise e
+
+    def upload_from_url(
+            self,
+            *,
+            url: str,
+            bucket: Optional[str] = None,
+            timeout: int = 30,
+    ) -> str:
+        """从 URL 流式下载并上传到 S3
+        - url: 源文件 URL
+        - bucket: 目标桶；为空时取环境变量或实例默认值
+        - timeout: HTTP 请求超时时间（秒，默认 30）
+        返回：最终写入的对象 key
+        """
+        import urllib.request as urllib_request
+        from urllib.parse import urlparse, unquote
+        try:
+            request = urllib_request.Request(url)
+            with urllib_request.urlopen(request, timeout=timeout) as resp:
+                parsed = urlparse(url)
+                file_name = Path(unquote(parsed.path)).name or "file"
+                content_type = resp.headers.get("Content-Type", "application/octet-stream")
+                return self.stream_upload_file(
+                    fileobj=resp,
+                    file_name=file_name,
+                    content_type=content_type,
+                    bucket=bucket,
+                )
+        except Exception as e:
+            logger.error(self._error_msg("Error uploading from URL to S3", e))
+            raise e
+
+    def trunk_upload_file(self, *, chunk_iter: Iterable[bytes], file_name: str,
+                           content_type: str = "application/octet-stream", bucket: Optional[str] = None,
+                           part_size: int = 5 * 1024 * 1024) -> str:
+        """流式上传（字节迭代器，显式分片 Multipart Upload）
+        - chunk_iter: 可迭代对象，逐块产生 bytes；每块大小可变（内部累积到 part_size 再上传），最后一块可小于 5MB
+        - file_name: 原始文件名，用于生成唯一 key
+        - content_type: MIME 类型
+        - bucket: 目标桶；为空时取环境或实例默认值
+        - part_size: 每个 part 的最小大小（除最后一个）；默认 5MB
+        返回：最终写入的对象 key
+        """
+        client = self._get_client()
+        target_bucket = self._resolve_bucket(bucket)
+        key = self._generate_object_key(original_name=file_name)
+
+        # 初始化分片上传
+        try:
+            init_resp = client.create_multipart_upload(Bucket=target_bucket, Key=key, ContentType=content_type)
+            upload_id = init_resp["UploadId"]
+        except Exception as e:
+            logger.error(self._error_msg("create_multipart_upload failed", e))
+            raise e
+
+        parts = []
+        part_number = 1
+        buffer = bytearray()
+        try:
+            for chunk in chunk_iter:
+                if not chunk:
+                    continue
+                buffer.extend(chunk)
+                while len(buffer) >= part_size:
+                    data = bytes(buffer[:part_size])
+                    buffer = buffer[part_size:]
+                    resp = client.upload_part(Bucket=target_bucket, Key=key, UploadId=upload_id, PartNumber=part_number,
+                                              Body=data)
+                    parts.append({"PartNumber": part_number, "ETag": resp["ETag"]})
+                    part_number += 1
+
+            # 上传最后不足 part_size 的余量
+            if len(buffer) > 0:
+                resp = client.upload_part(Bucket=target_bucket, Key=key, UploadId=upload_id, PartNumber=part_number,
+                                          Body=bytes(buffer))
+                parts.append({"PartNumber": part_number, "ETag": resp["ETag"]})
+
+            # 完成分片
+            client.complete_multipart_upload(
+                Bucket=target_bucket,
+                Key=key,
+                UploadId=upload_id,
+                MultipartUpload={"Parts": parts},
+            )
+            return key
+        except Exception as e:
+            logger.error(self._error_msg("multipart upload failed", e))
+            try:
+                client.abort_multipart_upload(Bucket=target_bucket, Key=key, UploadId=upload_id)
+            except Exception as ae:
+                logger.error(self._error_msg("abort_multipart_upload failed", ae))
+            raise e