fix:小组件- PUSH

Merge pull request 'docs: 更新隐私协议与用户使用协议' (#16 ) from lei into main
Reviewed-on: #16
2026-02-03 17:43:58 +08:00 · 2026-02-03 05:51:54 +00:00 · 2026-02-03 13:50:58 +08:00 · 2026-02-03 11:19:25 +08:00 · 2026-02-03 02:36:42 +08:00 · 2026-02-02 18:13:13 +00:00
84 changed files with 6086 additions and 725 deletions
--- a/.cursor/commands/myspec.code.md
+++ b/.cursor/commands/myspec.code.md
@@ -1,5 +1,69 @@
 请开始完成编码
 客户端请按照标准的RN架构目录写代码
+客户端API请求 统一使用utlis中封装的请求
+客户端的架构目录参考
+project-root
+├── android/                  # Android 原生工程
+├── ios/                      # iOS 原生工程
+├── src/                      # 业务代码主目录 ⭐⭐⭐
+│   ├── app.tsx               # App 入口（注册 Provider / Navigation）
+│   ├── navigation/           # 路由导航
+│   │   ├── index.tsx
+│   │   ├── RootNavigator.tsx
+│   │   └── types.ts
+│   ├── screens/              # 页面（Screen 级别）
+│   │   ├── Home/
+│   │   │   ├── index.tsx
+│   │   │   ├── styles.ts
+│   │   │   └── hooks.ts
+│   │   └── Profile/
+│   ├── components/           # 通用 UI 组件（无业务）
+│   │   ├── Button/
+│   │   │   ├── index.tsx
+│   │   │   └── styles.ts
+│   │   └── Empty/
+│   ├── modules/              # 业务模块（强烈推荐）
+│   │   ├── user/
+│   │   │   ├── api.ts
+│   │   │   ├── model.ts
+│   │   │   ├── store.ts
+│   │   │   └── index.ts
+│   │   └── emotion/
+│   ├── services/             # 跨模块服务（网络、存储等）
+│   │   ├── http.ts           # axios/fetch 封装
+│   │   ├── storage.ts        # AsyncStorage 封装
+│   │   └── logger.ts
+│   ├── store/                # 全局状态（Redux / Zustand / Jotai）
+│   │   ├── index.ts
+│   │   └── middleware.ts
+│   ├── hooks/                # 全局通用 hooks
+│   │   ├── useTheme.ts
+│   │   └── useDebounce.ts
+│   ├── utils/                # 工具函数
+│   │   ├── date.ts
+│   │   └── uuid.ts
+│   ├── constants/            # 常量
+│   │   ├── colors.ts
+│   │   ├── env.ts
+│   │   └── storageKeys.ts
+│   ├── assets/               # 静态资源
+│   │   ├── images/
+│   │   ├── icons/
+│   │   └── fonts/
+│   ├── theme/                # 主题系统
+│   │   ├── index.ts
+│   │   └── dark.ts
+│   └── types/                # 全局 TS 类型
+│       └── index.d.ts
+│
+├── __tests__/                # 测试
+├── .env                      # 环境变量
+├── babel.config.js
+├── metro.config.js
+├── tsconfig.json
+├── package.json
+└── index.js                  # RN 启动入口
+
 后端请按照标准的python FastAPI 架构目录写代码
 现在多语言仅支持 EN / TC
 整个task.md执行完毕后需要在对应的overview.md标记，并且说明变更的文件名
--- a/.gitea/workflows/README.md
+++ b/.gitea/workflows/README.md
@@ -0,0 +1,5 @@
+docker exec -it gitea-runner bash
+# 然后在容器里安装 Node.js
+curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
+apt-get install -y nodejs
+node -v
--- a/.gitea/workflows/server-build.yml
+++ b/.gitea/workflows/server-build.yml
@@ -0,0 +1,104 @@
+name: Build and Push Server Docker Image
+
+# 手动触发 workflow：从哪个分支运行，就打包哪个分支的代码
+on:
+  workflow_dispatch:
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+      # 1️⃣ Checkout 仓库代码
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          # 需要能 push tag（请在仓库 Secrets 配置 RUNNER_TOKEN）
+          token: ${{ secrets.RUNNER_TOKEN }}
+          persist-credentials: true
+
+      # 2️⃣ 自动递增 tag 并推送回 Gitea 仓库（默认按 vX.Y.Z 的 patch +1）
+      - name: Auto bump tag and push to repository
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          # 配置提交信息（用于创建注释 tag）
+          git config user.name "gitea-actions"
+          git config user.email "actions@local"
+
+          # 确保本地有最新 tags
+          git fetch --tags --force
+
+          # 取最新的 semver tag（vX.Y.Z），按版本号排序
+          LATEST_TAG="$(git tag --list 'v*' --sort=-v:refname | head -n 1 || true)"
+          echo "LATEST_TAG=${LATEST_TAG}"
+
+          if [[ -z "${LATEST_TAG}" ]]; then
+            NEXT_TAG="v1.0.0"
+          else
+            if [[ "${LATEST_TAG}" =~ ^v([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
+              MAJOR="${BASH_REMATCH[1]}"
+              MINOR="${BASH_REMATCH[2]}"
+              PATCH="${BASH_REMATCH[3]}"
+              NEXT_TAG="v${MAJOR}.${MINOR}.$((PATCH + 1))"
+            else
+              # 如果最新 tag 不符合 vX.Y.Z，回退到 v1.0.0，避免误解析
+              NEXT_TAG="v1.0.0"
+            fi
+          fi
+
+          echo "NEXT_TAG=${NEXT_TAG}"
+
+          # 如果 tag 已存在则直接复用（避免重复运行失败）
+          if git rev-parse -q --verify "refs/tags/${NEXT_TAG}" >/dev/null; then
+            echo "Tag ${NEXT_TAG} 已存在，跳过创建。"
+          else
+            git tag -a "${NEXT_TAG}" -m "Release ${NEXT_TAG}"
+            git push origin "${NEXT_TAG}"
+          fi
+
+          # 输出给后续步骤使用
+          if [[ -n "${GITHUB_ENV:-}" ]]; then
+            echo "IMAGE_TAG=${NEXT_TAG}" >> "$GITHUB_ENV"
+          fi
+          # 兼容部分 Gitea Runner 环境变量命名
+          if [[ -n "${GITEA_ENV:-}" ]]; then
+            echo "IMAGE_TAG=${NEXT_TAG}" >> "$GITEA_ENV"
+          fi
+
+      # 3️⃣ 设置镜像仓库与镜像名称（自建 Registry / Docker Hub 都可）
+      - name: Set image variables
+        shell: bash
+        run: |
+          # 直接写死：推送到自建仓库
+          IMAGE_NAME="docker.damer.fun/damer/mindfulness-server"
+
+          if [[ -n "${GITHUB_ENV:-}" ]]; then
+            echo "IMAGE_NAME=$IMAGE_NAME" >> "$GITHUB_ENV"
+          fi
+          if [[ -n "${GITEA_ENV:-}" ]]; then
+            echo "IMAGE_NAME=$IMAGE_NAME" >> "$GITEA_ENV"
+          fi
+
+      # 4️⃣ 登录镜像仓库（自建 Registry / Docker Hub）
+      - name: Login to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          # 与 IMAGE_NAME 的 registry 保持一致
+          registry: docker.damer.fun
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_TOKEN }}
+
+      # 5️⃣ 构建 Docker 镜像（使用 server/ 作为构建上下文）
+      - name: Build Docker Image
+        shell: bash
+        run: |
+          docker build -f server/Dockerfile -t "$IMAGE_NAME:$IMAGE_TAG" server
+
+      # 6️⃣ 推送 Docker 镜像到镜像仓库
+      - name: Push Docker Image
+        shell: bash
+        run: |
+          docker push "$IMAGE_NAME:$IMAGE_TAG"
--- a/.gitea/workflows/server-deploy.yml
+++ b/.gitea/workflows/server-deploy.yml
@@ -0,0 +1,431 @@
+name: Deploy Server (SSH + Nginx 蓝绿)
+
+# 手动触发：选择部署环境（dev/pro）并输入要部署的镜像 tag
+on:
+  workflow_dispatch:
+    inputs:
+      env:
+        description: '部署环境'
+        type: choice
+        required: true
+        options:
+          - dev
+          - pro
+      tag:
+        description: '要部署的镜像 Tag（例如：v1.2.7）'
+        required: true
+
+# 同一环境同一时间只允许一个部署在跑，避免互相覆盖
+concurrency:
+  group: deploy-server-${{ github.event.inputs.env }}
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      # 统一在 env 中注入变量，减少 runner 差异带来的兼容性问题
+      DEPLOY_ENV: ${{ github.event.inputs.env }}
+      DEPLOY_TAG: ${{ github.event.inputs.tag }}
+
+      # 镜像名（优先 vars.DOCKER_IMAGE；未配置则步骤里兜底）
+      DOCKER_IMAGE: ${{ vars.DOCKER_IMAGE }}
+
+      # 可选：明确 registry（私有仓库用）。未配置会从 DOCKER_IMAGE 推断
+      DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
+
+      # SSH：dev 用 secrets，pro 用 vars（按你现有用法）
+      SSH_HOST: ${{ github.event.inputs.env == 'dev' && secrets.DEV_SSH_HOST || vars.PRO_SSH_HOST }}
+      SSH_USER: ${{ github.event.inputs.env == 'dev' && secrets.DEV_SSH_USER || vars.PRO_SSH_USER }}
+      SSH_PORT: ${{ github.event.inputs.env == 'dev' && secrets.DEV_SSH_PORT || vars.PRO_SSH_PORT }}
+      SSH_KEY: ${{ github.event.inputs.env == 'dev' && secrets.DEV_SSH_KEY || secrets.PRO_SSH_KEY }}
+      # 推荐把私钥做成 base64（单行）存到 Secrets，避免多行变量丢换行
+      SSH_KEY_B64: ${{ github.event.inputs.env == 'dev' && secrets.DEV_SSH_KEY_B64 || secrets.PRO_SSH_KEY_B64 }}
+
+      # Nginx upstream 配置（建议放到 vars）
+      NGINX_UPSTREAM_FILE: ${{ vars.NGINX_UPSTREAM_FILE }}
+      NGINX_UPSTREAM_NAME: ${{ vars.NGINX_UPSTREAM_NAME }}
+
+      # 蓝绿端口（宿主机端口，建议放到 vars；未配置则脚本内有默认值）
+      BLUE_PORT: ${{ vars.BLUE_PORT }}
+      GREEN_PORT: ${{ vars.GREEN_PORT }}
+
+      # 容器内监听端口（FastAPI 常用 8000；未配置则默认 8000）
+      CONTAINER_PORT: ${{ vars.CONTAINER_PORT }}
+
+      # 健康检查路径（未配置则默认 /health；如果你没有 health 接口，可改为 /docs 或 /）
+      HEALTHCHECK_PATH: ${{ vars.HEALTHCHECK_PATH }}
+
+      # 可选：远端 env 文件路径（例如 /opt/mindfulness-server/.env.prod），存在则 docker run --env-file
+      REMOTE_ENV_FILE: ${{ vars.REMOTE_ENV_FILE }}
+
+    steps:
+      - name: 配置 SSH Key（密钥登陆）
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          # 镜像名兜底（与 .gitea/workflows/server-build.yml 的默认一致）
+          if [[ -z "${DOCKER_IMAGE:-}" ]]; then
+            DOCKER_IMAGE="docker.damer.fun/damer/mindfulness-server"
+          fi
+          if [[ -n "${GITHUB_ENV:-}" ]]; then
+            echo "DOCKER_IMAGE=${DOCKER_IMAGE}" >> "$GITHUB_ENV"
+          fi
+          if [[ -n "${GITEA_ENV:-}" ]]; then
+            echo "DOCKER_IMAGE=${DOCKER_IMAGE}" >> "$GITEA_ENV"
+          fi
+
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+
+          # 从 Secrets 写入私钥（推荐使用 *_SSH_KEY_B64）
+          SSH_KEY_PATH="${HOME}/.ssh/id_rsa"
+          if [[ -n "${SSH_KEY_B64:-}" ]]; then
+            # 兼容两种常见误配置：
+            # 1) *_SSH_KEY_B64 里其实粘贴的是“原始私钥”（包含 -----BEGIN ... PRIVATE KEY-----）
+            # 2) base64 值在粘贴/保存过程中混入空白或其他无关字符
+            if printf '%s' "${SSH_KEY_B64}" | grep -qE 'BEGIN[[:space:]].*PRIVATE[[:space:]]KEY'; then
+              echo "提示：检测到 *_SSH_KEY_B64 看起来是原始私钥内容，将按原始私钥写入（建议你改用真正的 base64 单行值）。"
+              echo "SSH_KEY_B64 字符数（原始）：${#SSH_KEY_B64}"
+              printf '%s' "${SSH_KEY_B64}" | tr -d '\r' > "${SSH_KEY_PATH}"
+            else
+              CLEAN_B64="$(printf '%s' "${SSH_KEY_B64}" | tr -d '\r\n\t ')"
+              echo "SSH_KEY_B64 字符数（原始/清理后）：${#SSH_KEY_B64}/${#CLEAN_B64}"
+              if ! printf '%s' "${CLEAN_B64}" | base64 -d -i | tr -d '\r' > "${SSH_KEY_PATH}"; then
+                echo "私钥 base64 解码失败："
+                echo "- 请确认你在 Gitea Secrets 配置的 *_SSH_KEY_B64 是“单行 base64 字符串”，不要带引号/前后空格。"
+                echo "- 推荐用仓库里的脚本生成并复制：node scripts/ssh-key-to-b64.mjs ~/.ssh/你的私钥 --clipboard"
+                exit 1
+              fi
+            fi
+          else
+            echo "使用 SSH_KEY（原始私钥）写入。SSH_KEY 字符数：${#SSH_KEY}"
+            printf '%s' "${SSH_KEY}" | tr -d '\r' > "${SSH_KEY_PATH}"
+          fi
+          chmod 600 "${SSH_KEY_PATH}"
+
+          # 自检（不输出私钥内容，仅输出元信息，方便定位是否写入了错误文件/被截断）
+          echo "SSH_KEY_PATH=${SSH_KEY_PATH}"
+          KEY_BYTES="$(wc -c < "${SSH_KEY_PATH}" | tr -d ' ')"
+          KEY_LINES="$(wc -l < "${SSH_KEY_PATH}" | tr -d ' ')"
+          echo "SSH key 字节数：${KEY_BYTES}"
+          echo "SSH key 行数：${KEY_LINES}"
+          echo "SSH key 首行：$(head -n 1 "${SSH_KEY_PATH}" | tr -d '\r')"
+          echo "SSH key 末行：$(tail -n 1 "${SSH_KEY_PATH}" | tr -d '\r')"
+          if command -v stat >/dev/null 2>&1; then
+            # Ubuntu runner: stat -c；不同系统做兼容
+            if stat -c '%a %U %G %n' "${SSH_KEY_PATH}" >/dev/null 2>&1; then
+              echo "SSH key 权限：$(stat -c '%a %U %G %n' "${SSH_KEY_PATH}")"
+            else
+              echo "SSH key 权限：$(stat -f '%Lp %Su %Sg %N' "${SSH_KEY_PATH}" 2>/dev/null || true)"
+            fi
+          fi
+          if command -v file >/dev/null 2>&1; then
+            echo "file(1) 识别：$(file "${SSH_KEY_PATH}")"
+          fi
+          if command -v sha256sum >/dev/null 2>&1; then
+            echo "SSH key sha256(前12位)：$(sha256sum "${SSH_KEY_PATH}" | awk '{print substr($1,1,12)}')"
+          fi
+          echo "ssh 版本：$(ssh -V 2>&1 || true)"
+          echo "ssh-keygen 版本：$(ssh-keygen -V 2>&1 || true)"
+          echo "openssl 版本：$(openssl version 2>&1 || true)"
+
+          # 进一步校验：OpenSSH 私钥中间的 base64 块是否可解码（不输出内容）
+          if grep -q '^-----BEGIN OPENSSH PRIVATE KEY-----$' "${SSH_KEY_PATH}" && grep -q '^-----END OPENSSH PRIVATE KEY-----$' "${SSH_KEY_PATH}"; then
+            # 注意：不要用变量名 in（是 awk 关键字，部分实现会报语法错）
+            OPENSSH_B64_LEN="$(
+              awk '
+                BEGIN{in_block=0; n=0}
+                /^-----BEGIN OPENSSH PRIVATE KEY-----$/{in_block=1; next}
+                /^-----END OPENSSH PRIVATE KEY-----$/{in_block=0; exit}
+                in_block==1{gsub(/\r/,""); n+=length($0)}
+                END{print n}
+              ' "${SSH_KEY_PATH}" 2>/dev/null || true
+            )"
+            if [[ -n "${OPENSSH_B64_LEN:-}" ]]; then
+              echo "OpenSSH base64 块字符数（合计）：${OPENSSH_B64_LEN}"
+            fi
+
+            # 该校验仅用于提示，不应阻断部署流程
+            if ! awk '
+              BEGIN{in_block=0}
+              /^-----BEGIN OPENSSH PRIVATE KEY-----$/{in_block=1; next}
+              /^-----END OPENSSH PRIVATE KEY-----$/{in_block=0; exit}
+              in_block==1{gsub(/\r/,""); print}
+            ' "${SSH_KEY_PATH}" 2>/dev/null | tr -d '\n' | base64 -d >/dev/null 2>&1; then
+              echo "提示：OpenSSH 私钥的 base64 块无法解码（疑似内容被截断/损坏），将继续执行 ssh-keygen 校验定位。"
+            fi
+          fi
+
+          # 额外信息：ssh-keygen -lf 的报错（不输出私钥内容）
+          if ! ssh-keygen -lf "${SSH_KEY_PATH}" >/dev/null 2>~/.ssh/ssh_key_fingerprint.err; then
+            echo "ssh-keygen -lf 报错："
+            cat ~/.ssh/ssh_key_fingerprint.err || true
+          fi
+
+          # 快速校验私钥是否可解析（不会输出私钥内容）
+          if ! ssh-keygen -y -f "${SSH_KEY_PATH}" >/dev/null 2>~/.ssh/ssh_key_check.err; then
+            echo "SSH 私钥无法解析。下面是 ssh-keygen 的报错（不包含私钥内容）："
+            cat ~/.ssh/ssh_key_check.err || true
+            echo
+            echo "常见原因："
+            echo "- 你填的是公钥（.pub），不是私钥"
+            echo "- 私钥带口令（CI 无法交互输入 passphrase）"
+            echo "- 内容复制丢换行/被截断/不是正确的 base64"
+            echo
+            echo "推荐：生成一把“无口令”的部署专用私钥，并用 base64 存储到 Secrets（*_SSH_KEY_B64）。"
+            exit 1
+          fi
+
+          SSH_PORT="${SSH_PORT:-22}"
+          if [[ -n "${GITHUB_ENV:-}" ]]; then
+            echo "SSH_PORT=${SSH_PORT}" >> "$GITHUB_ENV"
+          fi
+          if [[ -n "${GITEA_ENV:-}" ]]; then
+            echo "SSH_PORT=${SSH_PORT}" >> "$GITEA_ENV"
+          fi
+
+          # 预写 known_hosts，避免交互
+          ssh-keyscan -p "${SSH_PORT}" -H "${SSH_HOST}" >> ~/.ssh/known_hosts 2>/dev/null
+
+      - name: 验证 SSH 连接（快速定位公钥/用户/端口问题）
+        shell: bash
+        run: |
+          set -euo pipefail
+          SSH_PORT="${SSH_PORT:-22}"
+          ssh -p "${SSH_PORT}" \
+            -i ~/.ssh/id_rsa \
+            -o StrictHostKeyChecking=yes \
+            -o BatchMode=yes \
+            -o IdentitiesOnly=yes \
+            "${SSH_USER}@${SSH_HOST}" 'echo "SSH_OK $(whoami)@$(hostname)"'
+
+      - name: 远程登录 Docker Registry（如需私有镜像）
+        shell: bash
+        env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          # 如果镜像是公开的，可不配 DOCKER_USERNAME/DOCKER_TOKEN；此步骤会自动跳过
+          if [[ -z "${DOCKER_USERNAME:-}" || -z "${DOCKER_TOKEN:-}" ]]; then
+            echo "未配置 DOCKER_USERNAME/DOCKER_TOKEN，跳过远程 docker login。"
+            exit 0
+          fi
+
+          SSH_PORT="${SSH_PORT:-22}"
+
+          # 推断 registry：优先使用 DOCKER_REGISTRY；否则从 DOCKER_IMAGE 的第一个段推断
+          REG="${DOCKER_REGISTRY:-}"
+          if [[ -z "${REG}" ]]; then
+            FIRST_SEG="${DOCKER_IMAGE%%/*}"
+            if [[ "${FIRST_SEG}" == *.* || "${FIRST_SEG}" == *:* || "${FIRST_SEG}" == "localhost" ]]; then
+              REG="${FIRST_SEG}"
+            fi
+          fi
+          if [[ -z "${REG}" ]]; then
+            echo "无法推断 registry（看起来像 Docker Hub 公有镜像），跳过 docker login。"
+            exit 0
+          fi
+
+          ssh -p "${SSH_PORT}" -i ~/.ssh/id_rsa -o StrictHostKeyChecking=yes -o IdentitiesOnly=yes \
+            "${SSH_USER}@${SSH_HOST}" bash -s -- "${DOCKER_TOKEN}" "${DOCKER_USERNAME}" "${REG}" <<'REMOTE'
+          set -euo pipefail
+
+          TOKEN="$1"
+          USERNAME="$2"
+          REGISTRY="$3"
+
+          SUDO=""
+          if [[ "$(id -u)" -ne 0 ]] && command -v sudo >/dev/null 2>&1; then
+            SUDO="sudo"
+          fi
+
+          printf '%s' "$TOKEN" | ${SUDO} docker login "${REGISTRY}" -u "$USERNAME" --password-stdin
+          REMOTE
+
+      - name: SSH 部署（Nginx 蓝绿切换）
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          SSH_PORT="${SSH_PORT:-22}"
+          NGINX_UPSTREAM_NAME="${NGINX_UPSTREAM_NAME:-mindfulness_backend}"
+          NGINX_UPSTREAM_FILE="${NGINX_UPSTREAM_FILE:-/etc/nginx/conf.d/api.damer.fun.conf}"
+          BLUE_PORT="${BLUE_PORT:-8001}"
+          GREEN_PORT="${GREEN_PORT:-8002}"
+          CONTAINER_PORT="${CONTAINER_PORT:-8000}"
+          HEALTHCHECK_PATH="${HEALTHCHECK_PATH:-/health}"
+
+          echo "准备部署：${DOCKER_IMAGE}:${DEPLOY_TAG} -> ${DEPLOY_ENV} (${SSH_USER}@${SSH_HOST}:${SSH_PORT})"
+
+          ssh -p "${SSH_PORT}" -i ~/.ssh/id_rsa -o StrictHostKeyChecking=yes -o IdentitiesOnly=yes "${SSH_USER}@${SSH_HOST}" bash -s -- \
+            "${DOCKER_IMAGE}" "${DEPLOY_TAG}" "${NGINX_UPSTREAM_FILE}" "${NGINX_UPSTREAM_NAME}" "${BLUE_PORT}" "${GREEN_PORT}" "${CONTAINER_PORT}" "${HEALTHCHECK_PATH}" "${REMOTE_ENV_FILE:-}" <<'REMOTE'
+          set -euo pipefail
+
+          IMAGE="$1"
+          TAG="$2"
+          UPSTREAM_FILE="$3"
+          UPSTREAM_NAME="$4"
+          BLUE_PORT="$5"
+          GREEN_PORT="$6"
+          CONTAINER_PORT="$7"
+          HEALTHCHECK_PATH="$8"
+          REMOTE_ENV_FILE="$9"
+
+          APP_DIR="/opt/mindfulness-server"
+          ACTIVE_FILE="${APP_DIR}/active_color"
+          mkdir -p "${APP_DIR}"
+
+          # 判断 sudo（如果非 root 且存在 sudo，则使用 sudo）
+          SUDO=""
+          if [[ "$(id -u)" -ne 0 ]] && command -v sudo >/dev/null 2>&1; then
+            SUDO="sudo"
+          fi
+
+          ACTIVE_COLOR="blue"
+          if [[ -f "${ACTIVE_FILE}" ]]; then
+            ACTIVE_COLOR="$(cat "${ACTIVE_FILE}" || echo blue)"
+          fi
+
+          if [[ "${ACTIVE_COLOR}" == "blue" ]]; then
+            NEW_COLOR="green"
+            NEW_PORT="${GREEN_PORT}"
+            OLD_COLOR="blue"
+            OLD_PORT="${BLUE_PORT}"
+          else
+            NEW_COLOR="blue"
+            NEW_PORT="${BLUE_PORT}"
+            OLD_COLOR="green"
+            OLD_PORT="${GREEN_PORT}"
+          fi
+
+          echo "当前在线：${ACTIVE_COLOR}（${OLD_PORT}），准备发布：${NEW_COLOR}（${NEW_PORT}）"
+
+          # 拉取镜像
+          ${SUDO} docker pull "${IMAGE}:${TAG}"
+
+          # 启动新颜色容器
+          ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" >/dev/null 2>&1 || true
+
+          ENV_FILE_ARGS=()
+          if [[ -n "${REMOTE_ENV_FILE}" && -f "${REMOTE_ENV_FILE}" ]]; then
+            ENV_FILE_ARGS=(--env-file "${REMOTE_ENV_FILE}")
+            echo "将使用远端 env 文件：${REMOTE_ENV_FILE}"
+          elif [[ -n "${REMOTE_ENV_FILE}" ]]; then
+            echo "提示：REMOTE_ENV_FILE 已配置但文件不存在：${REMOTE_ENV_FILE}（将忽略 env-file）"
+          fi
+
+          ${SUDO} docker run -d \
+            --name "mindfulness-server-${NEW_COLOR}" \
+            --restart=always \
+            -p "${NEW_PORT}:${CONTAINER_PORT}" \
+            "${ENV_FILE_ARGS[@]}" \
+            "${IMAGE}:${TAG}"
+
+          # 健康检查
+          if [[ "${HEALTHCHECK_PATH}" != /* ]]; then
+            HEALTHCHECK_PATH="/${HEALTHCHECK_PATH}"
+          fi
+          HEALTH_URL="http://127.0.0.1:${NEW_PORT}${HEALTHCHECK_PATH}"
+          echo "健康检查：${HEALTH_URL}"
+
+          for i in $(seq 1 30); do
+            if command -v curl >/dev/null 2>&1; then
+              if curl -fsS "${HEALTH_URL}" >/dev/null; then
+                echo "健康检查通过"
+                break
+              fi
+            elif command -v wget >/dev/null 2>&1; then
+              if wget -q -O /dev/null "${HEALTH_URL}"; then
+                echo "健康检查通过"
+                break
+              fi
+            else
+              echo "远端缺少 curl/wget，跳过 HTTP 健康检查"
+              break
+            fi
+
+            if [[ "$i" -eq 30 ]]; then
+              echo "健康检查失败：新版本未就绪，回滚并退出"
+              ${SUDO} docker logs --tail 200 "mindfulness-server-${NEW_COLOR}" || true
+              ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+              exit 1
+            fi
+            sleep 2
+          done
+
+          # 切换 Nginx upstream（在同一个 conf 文件中通过 backup 做主备切换）
+          if [[ ! -f "${UPSTREAM_FILE}" ]]; then
+            echo "未找到 Nginx upstream 配置文件：${UPSTREAM_FILE}"
+            ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+            exit 1
+          fi
+
+          if ! ${SUDO} grep -qE "upstream[[:space:]]+${UPSTREAM_NAME}[[:space:]]*\\{" "${UPSTREAM_FILE}"; then
+            echo "在 ${UPSTREAM_FILE} 中未找到 upstream：${UPSTREAM_NAME}"
+            ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+            exit 1
+          fi
+
+          if ! ${SUDO} grep -qE "server[[:space:]]+127\\.0\\.0\\.1:${BLUE_PORT}" "${UPSTREAM_FILE}"; then
+            echo "在 ${UPSTREAM_FILE} 中未找到 server 127.0.0.1:${BLUE_PORT}（请先按参考配置写入 upstream）"
+            ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+            exit 1
+          fi
+          if ! ${SUDO} grep -qE "server[[:space:]]+127\\.0\\.0\\.1:${GREEN_PORT}" "${UPSTREAM_FILE}"; then
+            echo "在 ${UPSTREAM_FILE} 中未找到 server 127.0.0.1:${GREEN_PORT}（请先按参考配置写入 upstream）"
+            ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+            exit 1
+          fi
+
+          # 备份（回滚用）
+          BACKUP_FILE="${UPSTREAM_FILE}.bak.$(date +%s)"
+          ${SUDO} cp -f "${UPSTREAM_FILE}" "${BACKUP_FILE}"
+
+          echo "切换 upstream：${UPSTREAM_NAME}（${OLD_PORT} -> ${NEW_PORT}）通过 backup 切换"
+
+          TMP_FILE="$(mktemp)"
+          ${SUDO} awk -v name="${UPSTREAM_NAME}" -v old="${OLD_PORT}" -v new="${NEW_PORT}" '
+            BEGIN { in_up = 0 }
+            $0 ~ ("^[[:space:]]*upstream[[:space:]]+" name "[[:space:]]*\\{[[:space:]]*$") { in_up = 1 }
+            in_up == 1 {
+              # 新端口：主（去掉 backup）
+              if ($0 ~ ("server[[:space:]]+127\\.0\\.0\\.1:" new)) {
+                gsub(/[[:space:]]+backup[[:space:]]*;/, ";")
+              }
+              # 旧端口：备（确保有 backup;）
+              if ($0 ~ ("server[[:space:]]+127\\.0\\.0\\.1:" old)) {
+                gsub(/[[:space:]]+backup[[:space:]]*;/, ";")
+                sub(/;[[:space:]]*$/, " backup;")
+              }
+            }
+            in_up == 1 && $0 ~ /^[[:space:]]*\}[[:space:]]*$/ { in_up = 0 }
+            { print }
+          ' "${UPSTREAM_FILE}" > "${TMP_FILE}"
+
+          ${SUDO} cp -f "${TMP_FILE}" "${UPSTREAM_FILE}"
+          rm -f "${TMP_FILE}"
+
+          # 校验并 reload nginx（失败则回滚并退出）
+          if ${SUDO} nginx -t; then
+            ${SUDO} nginx -s reload
+          else
+            echo "Nginx 配置校验失败，回滚 upstream 配置并退出"
+            ${SUDO} cp -f "${BACKUP_FILE}" "${UPSTREAM_FILE}" || true
+            ${SUDO} nginx -t && ${SUDO} nginx -s reload || true
+            ${SUDO} docker rm -f "mindfulness-server-${NEW_COLOR}" || true
+            exit 1
+          fi
+
+          # 记录当前在线颜色
+          echo "${NEW_COLOR}" | ${SUDO} tee "${ACTIVE_FILE}" >/dev/null
+
+          # 下线旧容器（切流后再停旧的）
+          ${SUDO} docker rm -f "mindfulness-server-${OLD_COLOR}" >/dev/null 2>&1 || true
+
+          echo "部署完成：${NEW_COLOR} 已上线"
+          REMOTE
+
--- a/README.md
+++ b/README.md
@@ -13,7 +13,9 @@ git pull

 # 创建自己的分支
 git checkout -b 姓名拼写
+# 生产密钥

+ssh-keygen -t rsa -b 4096 -m PEM -N '' -f deploy_key_rsa
 # 目录结构

 /mindfulness
--- a/client/app.json
+++ b/client/app.json
@@ -1,6 +1,6 @@
 {
  "expo": {
-    "name": "client",
+    "name": "Hey Mama",
    "slug": "client",
    "version": "1.0.0",
    "orientation": "portrait",
@@ -15,7 +15,7 @@
    },
    "ios": {
      "supportsTablet": true,
-      "bundleIdentifier": "com.anonymous.client"
+      "bundleIdentifier": "com.damer.mindfulness"
    },
    "android": {
      "adaptiveIcon": {
--- a/client/app/(app)/_layout.tsx
+++ b/client/app/(app)/_layout.tsx
@@ -1,9 +1,22 @@
+import { useEffect } from 'react';
 import { Stack } from 'expo-router';
 import { useTranslation } from 'react-i18next';

+import { ensureDailyWidgetRecoUpToDate, syncWidgetConfig, syncWidgetUserProfileFromStorage } from '@/src/modules/dailyWidgetReco';
+
 export default function AppLayout() {
  const { t } = useTranslation();

+  useEffect(() => {
+    // 小组件数据同步（仅 iOS 生效；内部会判断原生模块是否可用）
+    // 目的：避免“仅 Onboarding 写入一次”导致老用户小组件一直显示兜底文案
+    void (async () => {
+      await syncWidgetConfig();
+      await syncWidgetUserProfileFromStorage();
+      await ensureDailyWidgetRecoUpToDate({ reason: 'app_start' });
+    })();
+  }, []);
+
  return (
    <Stack
      screenOptions={{
@@ -13,6 +26,8 @@ export default function AppLayout() {
      <Stack.Screen
        name="home"
        options={{
+          // Home 页不使用系统 Header，避免 iOS 原生导航栏自带的“毛玻璃/液玻璃”材质
+          headerShown: false,
          // 卡片页标题按设计留空（右上角为 icon 按钮）
          title: '',
          headerShadowVisible: false,
--- a/client/app/(app)/home.tsx
+++ b/client/app/(app)/home.tsx
@@ -1,7 +1,8 @@
 import { useEffect, useLayoutEffect, useMemo, useState, useCallback, useRef } from 'react';
 import { StyleSheet, View, Dimensions, Text, Pressable, PanResponder, Animated as RNAnimated, ImageBackground } from 'react-native';
 import { useTranslation } from 'react-i18next';
-import { useNavigation, useFocusEffect } from 'expo-router';
+import { useFocusEffect } from 'expo-router';
+import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import Animated, {
  Easing,
  runOnJS,
@@ -78,7 +79,7 @@ export default function HomeScreen() {
  const { t, i18n } = useTranslation();
  const isEnglish = i18n.language?.startsWith('en');
  const recoLang: 'en' | 'tc' = i18n.language?.toLowerCase().startsWith('zh') ? 'tc' : 'en';
-  const navigation = useNavigation();
+  const insets = useSafeAreaInsets();
  const [index, setIndex] = useState(0);
  const [themeMode, setThemeModeState] = useState<ThemeMode>('scenery');
  const [themeOpen, setThemeOpen] = useState(false);
@@ -210,32 +211,6 @@ export default function HomeScreen() {

  const currentNatureImage = NATURE_IMAGES[natureImageIndex];

-  useLayoutEffect(() => {
-    navigation.setOptions({
-      headerShadowVisible: false,
-      // 为了让风景/颜色两种主题下“文案的视觉居中位置”一致，统一使用透明 Header
-      // 颜色主题下 Header 透明也不会影响观感（背景就是纯色）
-      headerStyle: { backgroundColor: 'transparent' },
-      headerTransparent: true,
-      headerRight: () => (
-        <View style={styles.headerRight}>
-          <CircleIconButton
-            onPress={() => setThemeOpen(true)}
-            accessibilityLabel={t('home.theme')}
-          >
-            <ThemeIcon width={18} height={18} />
-          </CircleIconButton>
-          <CircleIconButton
-            onPress={() => setProfileOpen(true)}
-            accessibilityLabel={t('home.profile')}
-          >
-            <MyIcon width={18} height={18} />
-          </CircleIconButton>
-        </View>
-      ),
-    });
-  }, [backgroundColor, themeMode, navigation, t]);
-
  const textAnimatedStyle = useAnimatedStyle(() => ({
    transform: [{ translateY: translateY.value }],
    opacity: opacity.value,
@@ -368,6 +343,23 @@ export default function HomeScreen() {
          resizeMode="cover"
        />
      )}
+
+      {/* 自绘顶部按钮：不使用系统 Header，彻底避免 iOS 导航栏的毛玻璃/液玻璃材质 */}
+      <View style={[styles.topRight, { top: insets.top + 8 }]}>
+        <CircleIconButton
+          onPress={() => setThemeOpen(true)}
+          accessibilityLabel={t('home.theme')}
+        >
+          <ThemeIcon width={18} height={18} />
+        </CircleIconButton>
+        <CircleIconButton
+          onPress={() => setProfileOpen(true)}
+          accessibilityLabel={t('home.profile')}
+        >
+          <MyIcon width={18} height={18} />
+        </CircleIconButton>
+      </View>
+
      <Animated.View style={[styles.card, textAnimatedStyle, themeMode === 'scenery' && styles.sceneryCard]}>
        <Text style={[styles.text, isEnglish && styles.textEnglish, themeMode === 'scenery' && styles.sceneryText]}>
          {item.text}
@@ -384,12 +376,12 @@ export default function HomeScreen() {
            style={styles.reactionInner}
          >
            {likeFilled ? (
-              <LikeFilledIcon width={35} height={36} style={{ color: '#EA6969' }} />
+              <LikeFilledIcon width={35} height={36} color="#EA6969" />
            ) : (
              <LikeIcon 
                width={35} 
                height={36} 
-                style={{ color: themeMode === 'scenery' ? '#FFFFFF' : '#5E2A28' }}
+                color={themeMode === 'scenery' ? '#FFFFFF' : '#5E2A28'}
              />
            )}
          </Pressable>
@@ -435,10 +427,12 @@ const styles = StyleSheet.create({
    justifyContent: 'center',
    alignItems: 'center',
  },
-  headerRight: {
+  topRight: {
+    position: 'absolute',
+    right: 20,
    flexDirection: 'row',
    gap: 10,
-    paddingRight: 10,
+    zIndex: 30,
  },
  circleBtn: {
    width: 34,
--- a/client/app/(onboarding)/_layout.tsx
+++ b/client/app/(onboarding)/_layout.tsx
@@ -12,7 +12,6 @@ export default function OnboardingLayout() {
      }}
    >
      <Stack.Screen name="onboarding" options={{ title: t('onboarding.title') }} />
-      <Stack.Screen name="push-prompt" options={{ title: t('push.title') }} />
    </Stack>
  );
 }
--- a/client/app/(onboarding)/onboarding.tsx
+++ b/client/app/(onboarding)/onboarding.tsx
@@ -1,13 +1,17 @@
 import { useMemo, useState } from 'react';
 import { useRouter } from 'expo-router';
-import * as Notifications from 'expo-notifications';
 import { useTranslation } from 'react-i18next';
+import { Alert } from 'react-native';
+import * as Notifications from 'expo-notifications';
+import * as Device from 'expo-device';
 import { OnboardingLayout } from '@/components/onboarding/OnboardingLayout';
 import { NameInputStep } from '@/components/onboarding/NameInputStep';
 import { SelectionStep } from '@/components/onboarding/SelectionStep';
 import { ReminderStep } from '@/components/onboarding/ReminderStep';
 import { buildUserProfileFromQuestionnaire, mapOnboardingSelectionsToQuestionnaireAnswers } from '@/src/features/userProfileScoring';
+import { ensureDailyWidgetRecoUpToDate, syncWidgetConfig, syncWidgetUserProfileFromScoring } from '@/src/modules/dailyWidgetReco';
 import { fetchRecoFeed } from '@/src/services/recoApi';
+import { getExpoPushTokenOrThrow, registerPushToken, setPushPreferences } from '@/src/services/pushApi';
 import {
  recordRecoFeedServed,
  setOnboardingCompleted,
@@ -15,6 +19,7 @@ import {
  setDailyReminderSettings,
  setUserProfileScoring,
  setRecoFeedCache,
+  setPushPromptState,
 } from '@/src/storage/appStorage';

 type Step =
@@ -50,9 +55,8 @@ export default function OnboardingScreen() {
  }, [t, currentStep]);

  async function onFinish() {
-    // 请求推送权限
-    const { status } = await Notifications.requestPermissionsAsync();
-    const pushEnabled = status === 'granted';
+    // 用户选择每日次数 > 0：在此页直接触发系统通知权限（已移除单独的 push 引导页）。
+    const wantsPush = reminderTimes > 0;

    // 将 Onboarding 选择映射为标准问卷枚举（允许跳过）
    const answers = mapOnboardingSelectionsToQuestionnaireAnswers(selections);
@@ -61,6 +65,13 @@ export default function OnboardingScreen() {
    const scoringProfile = buildUserProfileFromQuestionnaire(answers);
    await setUserProfileScoring(scoringProfile);

+    // 同步到 App Group：供 iOS Widget 拉取与展示
+    await syncWidgetConfig();
+    await syncWidgetUserProfileFromScoring(scoringProfile);
+
+    // 可选：前台辅助拉取一次“每日推荐”，提升小组件首次展示的成功率与一致性（失败不阻塞）
+    await ensureDailyWidgetRecoUpToDate({ reason: 'onboarding_finish', scoringProfile });
+
    // Onboarding 结束后预拉取一次 Feed 文案（失败不阻塞进入首页）
    try {
      const lang = i18n.language?.toLowerCase().startsWith('zh') ? 'tc' : 'en';
@@ -96,10 +107,49 @@ export default function OnboardingScreen() {
    });
    await setDailyReminderSettings({
      timesPerDay: reminderTimes,
-      pushEnabled: pushEnabled
+      // 这里表示“用户意愿”，不代表系统权限一定已 granted
+      pushEnabled: wantsPush,
    });
    await setOnboardingCompleted(true);
+
+    // 用户选择 0 次（关闭）或跳过：直接进入首页
+    if (!wantsPush) {
+      await setPushPromptState('skipped');
      router.replace('/(app)/home');
+      return;
+    }
+
+    // 用户想要 Push：请求系统权限并尽量完成 token/偏好上报（失败不阻塞进入首页）
+    await setPushPromptState('unknown');
+    try {
+      const { status } = await Notifications.requestPermissionsAsync();
+      if (status !== 'granted') {
+        await setPushPromptState('skipped');
+        return;
+      }
+
+      // iOS 模拟器通常无法获取 Expo Push Token（系统限制），此时不要提示“失败”，而是明确告知需要真机测试。
+      if (Device.osName === 'iOS' && !Device.isDevice) {
+        Alert.alert('提示', '当前为 iOS 模拟器，无法获取推送 Token。请使用真机测试推送功能。');
+        await setPushPromptState('unknown');
+        return;
+      }
+
+      // 1) 获取 Expo Push Token
+      const expoPushToken = await getExpoPushTokenOrThrow();
+      // 2) 上报 token 到后端（幂等）
+      await registerPushToken({ pushToken: expoPushToken });
+      // 3) 上报推送偏好（幂等）
+      await setPushPreferences({ enabled: wantsPush, timesPerDay: reminderTimes });
+
+      await setPushPromptState('enabled');
+    } catch (e) {
+      // 失败不阻塞进入首页；但这里给出更明确的文案（常见原因：模拟器/网络/后端异常）
+      Alert.alert(t('push.errorTitle'), t('push.errorDesc'));
+      await setPushPromptState('unknown');
+    } finally {
+      router.replace('/(app)/home');
+    }
  }

  const onNext = () => {
@@ -121,6 +171,10 @@ export default function OnboardingScreen() {
    const scoringProfile = buildUserProfileFromQuestionnaire({});
    await setUserProfileScoring(scoringProfile);

+    // 同步到 App Group：供 iOS Widget 使用（失败不阻塞）
+    await syncWidgetConfig();
+    await syncWidgetUserProfileFromScoring(scoringProfile);
+
    // 标记已完成，避免下次启动再次进入 Onboarding
    await setOnboardingCompleted(true);
    router.replace('/(app)/home');
@@ -173,6 +227,11 @@ export default function OnboardingScreen() {
          value={reminderTimes}
          onChange={setReminderTimes}
          onFinish={onFinish}
+          onSkip={() => {
+            // 跳过每日提醒：视为 0 次（关闭）
+            setReminderTimes(0);
+            onFinish();
+          }}
        />
      )}
    </OnboardingLayout>
--- a/client/app/(onboarding)/push-prompt.tsx
+++ b/client/app/(onboarding)/push-prompt.tsx
@@ -1,74 +0,0 @@
-import { useState } from 'react';
-import { Alert, Pressable, StyleSheet, Text, View } from 'react-native';
-import { useRouter } from 'expo-router';
-import { useTranslation } from 'react-i18next';
-import * as Notifications from 'expo-notifications';
-
-import { setPushPromptState } from '@/src/storage/appStorage';
-
-export default function PushPromptScreen() {
-  const router = useRouter();
-  const { t } = useTranslation();
-  const [loading, setLoading] = useState(false);
-
-  async function goHome() {
-    router.replace('/(app)/home');
-  }
-
-  async function onLater() {
-    await setPushPromptState('skipped');
-    await goHome();
-  }
-
-  async function onEnableNow() {
-    // 触发系统权限申请（可失败，但不阻塞进入主功能）
-    setLoading(true);
-    try {
-      await Notifications.requestPermissionsAsync();
-      await setPushPromptState('enabled');
-      await goHome();
-    } catch (e) {
-      Alert.alert(t('push.errorTitle'), t('push.errorDesc'));
-      await goHome();
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  return (
-    <View style={styles.container}>
-      <View style={styles.card}>
-        <Text style={styles.title}>{t('push.cardTitle')}</Text>
-        <Text style={styles.desc}>{t('push.cardDesc')}</Text>
-      </View>
-
-      <View style={styles.actions}>
-        <Pressable style={[styles.btn, styles.secondary]} onPress={onLater} disabled={loading}>
-          <Text style={[styles.btnText, styles.secondaryText]}>{t('push.later')}</Text>
-        </Pressable>
-        <Pressable style={[styles.btn, styles.primary]} onPress={onEnableNow} disabled={loading}>
-          <Text style={styles.btnText}>{loading ? t('push.loading') : t('push.enable')}</Text>
-        </Pressable>
-      </View>
-    </View>
-  );
-}
-
-const styles = StyleSheet.create({
-  container: { flex: 1, padding: 20, justifyContent: 'center', gap: 16 },
-  card: {
-    borderRadius: 18,
-    padding: 20,
-    backgroundColor: '#111827',
-    gap: 10
-  },
-  title: { color: 'white', fontSize: 20, fontWeight: '700' },
-  desc: { color: '#E5E7EB', fontSize: 15, lineHeight: 21 },
-  actions: { flexDirection: 'row', gap: 12 },
-  btn: { flex: 1, paddingVertical: 14, borderRadius: 14, alignItems: 'center' },
-  primary: { backgroundColor: '#16A34A' },
-  secondary: { backgroundColor: '#F3F4F6' },
-  btnText: { fontSize: 16, fontWeight: '600', color: '#FFFFFF' },
-  secondaryText: { color: '#111827' }
-});
-
--- a/client/app/(splash)/splash.tsx
+++ b/client/app/(splash)/splash.tsx
@@ -5,6 +5,7 @@ import * as WebBrowser from 'expo-web-browser';
 import { useTranslation } from 'react-i18next';
 import { SafeAreaView } from 'react-native-safe-area-context';
 import { setConsentAccepted, getConsentAccepted } from '../../src/storage/appStorage';
+import { fetchLegalLinks } from '@/src/services/legalApi';

 // 导入 SVG 组件
 import FlowersBg from '../../assets/images/index/flowers_endbg.svg';
@@ -16,6 +17,7 @@ export default function SplashScreen() {
  const router = useRouter();
  const { t } = useTranslation();
  const [showConsent, setShowConsent] = useState(false);
+  const [links, setLinks] = useState<{ privacy?: string; terms?: string }>({});

  useEffect(() => {
    checkConsent();
@@ -44,6 +46,25 @@ export default function SplashScreen() {
    }
  };

+  // 拉取协议链接（由后端按语言下发；默认 EN）
+  useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      try {
+        const res = await fetchLegalLinks();
+        if (cancelled) return;
+        setLinks({ privacy: res.privacyPolicyUrl, terms: res.termsOfUseUrl });
+      } catch (e) {
+        // 不阻塞主流程：失败时不崩溃，链接入口可不展示
+        if (__DEV__) console.log('[LegalLinks] 拉取失败（splash）:', e);
+        if (!cancelled) setLinks({});
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
  const bgDecorationTop = 363;
  const bgDecorationHeight = height * 0.6;
  const contentTop = bgDecorationTop + (bgDecorationHeight * 0.25);
@@ -81,11 +102,17 @@ export default function SplashScreen() {
            </TouchableOpacity>

            <View style={styles.linksContainer}>
-              <TouchableOpacity onPress={() => openLink('https://example.com/privacy')}>
+              <TouchableOpacity
+                disabled={!links.privacy}
+                onPress={() => (links.privacy ? openLink(links.privacy) : undefined)}
+              >
                <Text style={styles.linkText}>{t('consent.privacy')}</Text>
              </TouchableOpacity>
              <View style={styles.divider} />
-              <TouchableOpacity onPress={() => openLink('https://example.com/terms')}>
+              <TouchableOpacity
+                disabled={!links.terms}
+                onPress={() => (links.terms ? openLink(links.terms) : undefined)}
+              >
                <Text style={styles.linkText}>{t('consent.terms')}</Text>
              </TouchableOpacity>
            </View>
--- a/client/app/_layout.tsx
+++ b/client/app/_layout.tsx
@@ -6,9 +6,12 @@ import * as SplashScreen from 'expo-splash-screen';
 import * as Notifications from 'expo-notifications';
 import { useEffect, useState } from 'react';
 import 'react-native-reanimated';
+import { AppState } from 'react-native';

 import { useColorScheme } from '@/components/useColorScheme';
 import { initI18n } from '@/src/i18n';
+import { ensureDailyWidgetRecoUpToDate, syncWidgetConfig, syncWidgetUserProfileFromStorage } from '@/src/modules/dailyWidgetReco';
+import { getOrCreateClientUserId } from '@/src/storage/appStorage';

 // 配置通知处理方式（即使不发送也建议配置，以确保权限接口正常）
 Notifications.setNotificationHandler({
@@ -53,6 +56,17 @@ export default function RootLayout() {
      .finally(() => setI18nReady(true));
  }, []);

+  useEffect(() => {
+    // 尽早生成 client_user_id，便于后续任意时刻与后端建立关联（Push Token/偏好等）
+    getOrCreateClientUserId()
+      .then((id) => {
+        if (__DEV__) console.log('[client_user_id]', id);
+      })
+      .catch((e) => {
+      console.warn('[client_user_id] 生成失败（不阻塞启动）', e);
+      });
+  }, []);
+
  useEffect(() => {
    // 等字体与 i18n 都准备好后再隐藏启动页，避免文案闪烁
    if (loaded && i18nReady) {
@@ -70,6 +84,21 @@ export default function RootLayout() {
 function RootLayoutNav() {
  const colorScheme = useColorScheme();

+  useEffect(() => {
+    // iOS 小组件：启动时把必要信息写入共享区，并尽力刷新一次“每日推荐”
+    syncWidgetConfig().catch(() => {});
+    syncWidgetUserProfileFromStorage().catch(() => {});
+    ensureDailyWidgetRecoUpToDate({ reason: 'app_start' }).catch(() => {});
+
+    const sub = AppState.addEventListener('change', (state) => {
+      if (state === 'active') {
+        // App 回到前台时尝试刷新（失败不阻塞）
+        ensureDailyWidgetRecoUpToDate({ reason: 'app_active' }).catch(() => {});
+      }
+    });
+    return () => sub.remove();
+  }, []);
+
  return (
    <ThemeProvider value={colorScheme === 'dark' ? DarkTheme : DefaultTheme}>
      <Stack screenOptions={{ headerShown: false }}>
--- a/client/components/home/DailyReminderModal.tsx
+++ b/client/components/home/DailyReminderModal.tsx
@@ -39,13 +39,17 @@ export default function DailyReminderModal({ visible, onClose }: Props) {
  }, [visible]);

  function clamp(next: number) {
-    return Math.min(10, Math.max(1, next));
+    // 需求：0～5（0 表示关闭）
+    return Math.min(5, Math.max(0, next));
  }

  async function onOk() {
    if (loading) return;
    setLoading(true);
-    const next: DailyReminderSettings = { timesPerDay, pushEnabled };
+    const next: DailyReminderSettings = {
+      timesPerDay: Math.min(5, Math.max(0, Math.round(timesPerDay))),
+      pushEnabled: Boolean(pushEnabled) && timesPerDay > 0,
+    };
    await setDailyReminderSettings(next);
    setLoading(false);
    onClose();
--- a/client/components/home/ProfileModal.tsx
+++ b/client/components/home/ProfileModal.tsx
@@ -3,6 +3,7 @@ import { Alert, FlatList, Image, Pressable, StyleSheet, Text, View, Platform, Di
 import { useTranslation } from 'react-i18next';
 import { LinearGradient } from 'expo-linear-gradient';
 import { Switch } from 'react-native';
+import * as WebBrowser from 'expo-web-browser';
 import Animated, {
  Easing,
  FadeIn,
@@ -39,6 +40,8 @@ import SelectedIcon from '@/assets/images/icon/selected_icon.svg';
 import QuestionIcon from '@/assets/images/home/Profile/widget/question_icon.svg';
 import * as Notifications from 'expo-notifications';
 import { changeLanguage } from '@/src/i18n';
+import { fetchLegalLinks } from '@/src/services/legalApi';
+import { getExpoPushTokenOrThrow, registerPushToken, setPushPreferences } from '@/src/services/pushApi';

 const { width } = Dimensions.get('window');

@@ -80,6 +83,7 @@ export default function ProfileModal({ visible, name: propName, onClose }: Props
  const [page, setPage] = useState<Page>('root');
  const [navDirection, setNavDirection] = useState<NavDirection>('forward');
  const [currentName, setCurrentName] = useState(propName);
+  const [legalLinks, setLegalLinks] = useState<{ privacy?: string; terms?: string }>({});
  const isRoot = page === 'root';

  // 当弹窗打开时，尝试从存储中获取最新的昵称，确保与 onboarding 同步
@@ -90,6 +94,16 @@ export default function ProfileModal({ visible, name: propName, onClose }: Props
          setCurrentName(profile.name);
        }
      });
+
+      // 打开弹窗时拉取协议链接（由后端按语言下发；默认 EN）
+      fetchLegalLinks()
+        .then((res) => {
+          setLegalLinks({ privacy: res.privacyPolicyUrl, terms: res.termsOfUseUrl });
+        })
+        .catch((e) => {
+          if (__DEV__) console.log('[LegalLinks] 拉取失败（ProfileModal）:', e);
+          setLegalLinks({});
+        });
    } else {
      setNavDirection('back');
      setPage('root');
@@ -123,6 +137,18 @@ export default function ProfileModal({ visible, name: propName, onClose }: Props
    handleClose();
  }

+  const openLink = useCallback(
+    async (url?: string) => {
+      if (!url) return;
+      try {
+        await WebBrowser.openBrowserAsync(url);
+      } catch (error) {
+        Alert.alert(t('common.error'), t('common.openLinkError'));
+      }
+    },
+    [t],
+  );
+
  const title = useMemo(() => {
    if (page === 'favorites') return t('profile.favorites');
    if (page === 'dailyReminder') return t('dailyReminder.title');
@@ -182,6 +208,8 @@ export default function ProfileModal({ visible, name: propName, onClose }: Props
              onOpenWidget={() => go('widget', 'forward')}
              onOpenDailyReminder={() => go('dailyReminder', 'forward')}
              onOpenLanguage={() => go('language', 'forward')}
+              onOpenPrivacy={() => openLink(legalLinks.privacy)}
+              onOpenTerms={() => openLink(legalLinks.terms)}
            />
          ) : page === 'favorites' ? (
            <FavoritesPage visible={visible} page={page} />
@@ -211,12 +239,16 @@ function RootPage({
  onOpenWidget,
  onOpenDailyReminder,
  onOpenLanguage,
+  onOpenPrivacy,
+  onOpenTerms,
 }: {
  name?: string;
  onOpenFavorites: () => void;
  onOpenWidget: () => void;
  onOpenDailyReminder: () => void;
  onOpenLanguage: () => void;
+  onOpenPrivacy: () => void;
+  onOpenTerms: () => void;
 }) {
  const { t } = useTranslation();
  return (
@@ -244,12 +276,12 @@ function RootPage({
        <ListItem
          icon={<PrivacyIcon width={22} height={22} />}
          title={t('profile.privacy')}
-          onPress={() => toastTodo(t)}
+          onPress={onOpenPrivacy}
        />
        <ListItem
          icon={<TermsIcon width={22} height={22} />}
          title={t('profile.terms')}
-          onPress={() => toastTodo(t)}
+          onPress={onOpenTerms}
        />
        <ListItem
          icon={<LanguageIcon width={22} height={22} />}
@@ -374,12 +406,14 @@ function DailyReminderPage({ visible, onDone }: { visible: boolean; onDone: () =
      // 1. 获取本地存储设置
      const s = await getDailyReminderSettings();

-      // 【测试模式】：强制模拟无权限状态
-      const granted = false; 
+      // 2. 获取系统通知权限（用于 UI 展示/引导）
+      const settings = await Notifications.getPermissionsAsync();
+      const granted = settings.status === 'granted';

      if (cancelled) return;
      setTimesPerDay(s.timesPerDay);
-      setPushEnabled(granted); 
+      // pushEnabled 表示用户意愿；若系统未授权则强制展示为关闭
+      setPushEnabled(Boolean(s.pushEnabled) && granted);
      setHasSystemPermission(granted);
      setLoading(false);
    })();
@@ -412,6 +446,16 @@ function DailyReminderPage({ visible, onDone }: { visible: boolean; onDone: () =
      if (status === 'granted') {
        setPushEnabled(true);
        setHasSystemPermission(true);
+
+        // 获取 token 并上报后端（幂等）
+        try {
+          const expoPushToken = await getExpoPushTokenOrThrow();
+          await registerPushToken({ pushToken: expoPushToken });
+          await setPushPreferences({ enabled: true, timesPerDay });
+        } catch (e) {
+          const msg = e instanceof Error ? e.message : String(e);
+          Alert.alert(t('common.notice'), msg);
+        }
      } else {
        setPushEnabled(false);
        setHasSystemPermission(false);
@@ -419,18 +463,35 @@ function DailyReminderPage({ visible, onDone }: { visible: boolean; onDone: () =
      }
    } else {
      setPushEnabled(false);
+      // 关闭时尝试同步到后端（不阻塞）
+      try {
+        await setPushPreferences({ enabled: false, timesPerDay: 0 });
+      } catch {
+        // ignore
+      }
    }
  };

  function clamp(next: number) {
-    return Math.min(10, Math.max(1, next));
+    // 需求：0～5（0 表示关闭）
+    return Math.min(5, Math.max(0, next));
  }

  async function onOk() {
    if (loading) return;
    setLoading(true);
-    const next: DailyReminderSettings = { timesPerDay, pushEnabled };
+    const nextTimes = Math.min(5, Math.max(0, Math.round(timesPerDay)));
+    const nextEnabled = Boolean(pushEnabled) && nextTimes > 0;
+    const next: DailyReminderSettings = { timesPerDay: nextTimes, pushEnabled: nextEnabled };
    await setDailyReminderSettings(next);
+
+    // 同步后端偏好（幂等；失败不阻塞）
+    try {
+      await setPushPreferences({ enabled: nextEnabled, timesPerDay: nextTimes });
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      console.warn('[PushPreferences] 同步失败', msg);
+    }
    setLoading(false);
    onDone();
  }
@@ -464,7 +525,6 @@ function DailyReminderPage({ visible, onDone }: { visible: boolean; onDone: () =
        </Pressable>
      </View>

-      {!hasSystemPermission && (
      <View style={styles.remindRow}>
        <View style={styles.rowLeft}>
          <View style={styles.rowIcon}>
@@ -481,7 +541,6 @@ function DailyReminderPage({ visible, onDone }: { visible: boolean; onDone: () =
          />
        </View>
      </View>
-      )}

      <Pressable onPress={onOk} disabled={loading} style={styles.okPressable}>
        <LinearGradient
@@ -537,7 +596,8 @@ function WidgetHowToPage() {
  const flatListRef = useRef<FlatList>(null);
  const [activeIndex, setActiveIndex] = useState(0);
  const [isManual, setIsManual] = useState(false);
-  const timerRef = useRef<NodeJS.Timeout | null>(null);
+  // React Native 环境下 setInterval 返回值类型与 Node 不同，这里用 ReturnType 兼容
+  const timerRef = useRef<ReturnType<typeof setInterval> | null>(null);

  const images = currentLang === 'en' ? [
    { id: '1', src: require('@/assets/images/home/Profile/widget/Widget_description1_en.png'), desc: t('widget.howToDesc1') },
--- a/client/components/onboarding/ReminderStep.tsx
+++ b/client/components/onboarding/ReminderStep.tsx
@@ -1,5 +1,6 @@
 import React from 'react';
 import { View, StyleSheet, TouchableOpacity, Text, Platform, Dimensions } from 'react-native';
+import { useTranslation } from 'react-i18next';
 import { OnboardingColors } from '@/constants/OnboardingTheme';
 import AddIcon from '@/assets/images/icon/add_icon.svg';
 import ReduceIcon from '@/assets/images/icon/reduce_icon.svg';
@@ -11,11 +12,15 @@ interface ReminderStepProps {
  value: number;
  onChange: (value: number) => void;
  onFinish: () => void;
+  onSkip: () => void;
 }

-export function ReminderStep({ value, onChange, onFinish }: ReminderStepProps) {
+export function ReminderStep({ value, onChange, onFinish, onSkip }: ReminderStepProps) {
+  const { t } = useTranslation();
+
  const handleReduce = () => {
-    if (value > 1) onChange(value - 1);
+    // 允许 0～5；0 表示关闭每日提醒
+    if (value > 0) onChange(value - 1);
  };

  const handleAdd = () => {
@@ -31,7 +36,7 @@ export function ReminderStep({ value, onChange, onFinish }: ReminderStepProps) {

        <View style={styles.numberWrapper}>
          <Text style={styles.numberText}>{value}</Text>
-          <Text style={styles.unitText}>次</Text>
+          <Text style={styles.unitText}>{t('dailyReminder.timesUnit')}</Text>
        </View>

        <TouchableOpacity onPress={handleAdd} activeOpacity={0.7}>
@@ -43,6 +48,10 @@ export function ReminderStep({ value, onChange, onFinish }: ReminderStepProps) {
        <TouchableOpacity onPress={onFinish} activeOpacity={0.8}>
          <BtnClicked width={87} height={57} />
        </TouchableOpacity>
+
+        <TouchableOpacity onPress={onSkip} activeOpacity={0.8} style={styles.skipBtn}>
+          <Text style={styles.skipText}>{t('onboarding.skip')}</Text>
+        </TouchableOpacity>
      </View>
    </View>
  );
@@ -86,4 +95,16 @@ const styles = StyleSheet.create({
    bottom: height * 0.12,
    alignItems: 'center',
  }
+  ,
+  skipBtn: {
+    marginTop: 14,
+    paddingVertical: 10,
+    paddingHorizontal: 18,
+  },
+  skipText: {
+    color: OnboardingColors.textPrimary,
+    fontSize: 15,
+    fontWeight: '600',
+    opacity: 0.85,
+  },
 });
--- a/client/global.d.ts
+++ b/client/global.d.ts
@@ -0,0 +1,8 @@
+/**
+ * React Native 全局常量声明。
+ *
+ * 说明：`__DEV__` 在运行时由 RN 注入，用于区分开发/生产环境。
+ * 这里补充 TypeScript 声明，避免在代码里使用时出现类型报错。
+ */
+declare const __DEV__: boolean;
+
--- a/client/ios/MindfulnessWidget/MindfulnessWidget.swift
+++ b/client/ios/MindfulnessWidget/MindfulnessWidget.swift
@@ -1,128 +0,0 @@
-import WidgetKit
-import SwiftUI
-
-struct Provider: TimelineProvider {
-    func placeholder(in context: Context) -> SimpleEntry {
-        SimpleEntry(date: Date())
-    }
-
-    func getSnapshot(in context: Context, completion: @escaping (SimpleEntry) -> ()) {
-        completion(SimpleEntry(date: Date()))
-    }
-
-    func getTimeline(in context: Context, completion: @escaping (Timeline<SimpleEntry>) -> ()) {
-        // V1：写死内容，不做数据更新；给一个很长的刷新间隔（系统仍可能自行调度）
-        let entry = SimpleEntry(date: Date())
-        let nextUpdate = Calendar.current.date(byAdding: .day, value: 7, to: Date()) ?? Date().addingTimeInterval(60 * 60 * 24 * 7)
-        completion(Timeline(entries: [entry], policy: .after(nextUpdate)))
-    }
-}
-
-struct SimpleEntry: TimelineEntry {
-    let date: Date
-}
-
-struct MindfulnessWidgetEntryView: View {
-    var entry: Provider.Entry
-    @Environment(\.widgetFamily) var family
-
-    private let title = "正念"
-    private let text = "你已经很努力了，今天也值得被温柔对待。"
-    private let deepLink = URL(string: "client:///(app)/home")
-
-    var body: some View {
-        switch family {
-        case .systemSmall:
-            smallView()
-        case .systemMedium:
-            mediumView()
-        case .systemLarge:
-            largeView()
-        default:
-            smallView()
-        }
-    }
-
-    private func smallView() -> some View {
-        ZStack {
-            LinearGradient(
-                colors: [Color(red: 0.07, green: 0.09, blue: 0.13), Color(red: 0.15, green: 0.18, blue: 0.26)],
-                startPoint: .topLeading,
-                endPoint: .bottomTrailing
-            )
-            VStack(alignment: .leading, spacing: 8) {
-                Text(title).font(.headline).foregroundStyle(.white)
-                Text(text)
-                    .font(.system(size: 14, weight: .semibold))
-                    .foregroundStyle(Color.white.opacity(0.92))
-                    .lineLimit(4)
-                Spacer(minLength: 0)
-            }
-            .padding(14)
-        }
-        .widgetURL(deepLink)
-    }
-
-    private func mediumView() -> some View {
-        ZStack {
-            LinearGradient(
-                colors: [Color(red: 0.07, green: 0.09, blue: 0.13), Color(red: 0.10, green: 0.12, blue: 0.18)],
-                startPoint: .topLeading,
-                endPoint: .bottomTrailing
-            )
-            HStack(spacing: 14) {
-                VStack(alignment: .leading, spacing: 8) {
-                    Text(title).font(.headline).foregroundStyle(.white)
-                    Text(text)
-                        .font(.system(size: 16, weight: .semibold))
-                        .foregroundStyle(Color.white.opacity(0.92))
-                        .lineLimit(5)
-                    Spacer(minLength: 0)
-                }
-                Spacer(minLength: 0)
-            }
-            .padding(16)
-        }
-        .widgetURL(deepLink)
-    }
-
-    private func largeView() -> some View {
-        ZStack {
-            LinearGradient(
-                colors: [Color(red: 0.07, green: 0.09, blue: 0.13), Color(red: 0.17, green: 0.22, blue: 0.32)],
-                startPoint: .topLeading,
-                endPoint: .bottomTrailing
-            )
-            VStack(alignment: .leading, spacing: 12) {
-                Text(title)
-                    .font(.title3)
-                    .foregroundStyle(.white)
-                    .bold()
-                Text(text)
-                    .font(.system(size: 18, weight: .semibold))
-                    .foregroundStyle(Color.white.opacity(0.92))
-                    .lineLimit(7)
-                Spacer(minLength: 0)
-                Text("轻轻呼吸，回到当下")
-                    .font(.footnote)
-                    .foregroundStyle(Color.white.opacity(0.7))
-            }
-            .padding(18)
-        }
-        .widgetURL(deepLink)
-    }
-}
-
-struct MindfulnessWidget: Widget {
-    let kind: String = "MindfulnessWidget"
-
-    var body: some WidgetConfiguration {
-        StaticConfiguration(kind: kind, provider: Provider()) { entry in
-            MindfulnessWidgetEntryView(entry: entry)
-        }
-        .configurationDisplayName("正念")
-        .description("一段温柔提醒，陪你回到当下。")
-        .supportedFamilies([.systemSmall, .systemMedium, .systemLarge])
-    }
-}
-
--- a/client/ios/MindfulnessWidget/MindfulnessWidgetBundle.swift
+++ b/client/ios/MindfulnessWidget/MindfulnessWidgetBundle.swift
@@ -1,12 +0,0 @@
-import WidgetKit
-import SwiftUI
-
-// 统一的 Widget Extension 入口（模块内只能有一个 @main）
-@main
-struct MindfulnessWidgetBundle: WidgetBundle {
-    var body: some Widget {
-        MindfulnessWidget()
-        EmotionWidget()
-    }
-}
-
--- a/client/ios/MindfulnessWidget/README.md
+++ b/client/ios/MindfulnessWidget/README.md
@@ -1,12 +0,0 @@
-# MindfulnessWidget（WidgetKit 扩展骨架）
-
-本目录提供 iOS Widget（V1 写死文案）的 SwiftUI 代码骨架。
-
-注意：**仅把文件放进仓库还不够**，你还需要在 Xcode 中创建 Widget Extension target，并把这些文件加入 target。
-
-## 目标
-
- 支持 Small/Medium/Large 三种尺寸
- 展示写死文案
- 点击小组件跳转到 App 的 Home：`client:///(app)/home`
-
--- a/client/ios/Podfile
+++ b/client/ios/Podfile
@@ -59,5 +59,92 @@ target 'client' do
      :mac_catalyst_enabled => false,
      :ccache_enabled => ccache_enabled?(podfile_properties),
    )
+
+    # 生成并随归档产物携带 dSYM（用于崩溃符号化与 Upload Symbols Failed 修复）
+    installer.pods_project.targets.each do |target|
+      target.build_configurations.each do |build_config|
+        build_config.build_settings['DEBUG_INFORMATION_FORMAT'] = 'dwarf-with-dsym'
+        build_config.build_settings['DWARF_DSYM_FILE_SHOULD_ACCOMPANY_PRODUCT'] = 'YES'
+      end
+    end
+
+    # 修复：Xcode 编译阶段找不到 Expo 相关 modulemap
+    # 现象：PrecompileSwiftBridgingHeader 报错 module map file '.../Build/Products/.../Expo/Expo.modulemap' not found
+    # 原因：Pods-client 的 xcconfig 把 -fmodule-map-file 指向了 ${PODS_CONFIGURATION_BUILD_DIR}，但该文件在构建早期并不存在。
+    # 方案：将这些 modulemap 路径改为 Pods 内稳定存在的 Target Support Files 路径。
+    def patch_pods_client_xcconfig!(path)
+      return unless File.exist?(path)
+      s = File.read(path)
+
+      # expo-dev-* 的 modulemap 文件名与 module 名不同，需要单独映射
+      s = s.gsub('${PODS_CONFIGURATION_BUILD_DIR}/expo-dev-launcher/EXDevLauncher.modulemap',
+                 '${PODS_ROOT}/Target Support Files/expo-dev-launcher/expo-dev-launcher.modulemap')
+      s = s.gsub('${PODS_CONFIGURATION_BUILD_DIR}/expo-dev-menu/EXDevMenu.modulemap',
+                 '${PODS_ROOT}/Target Support Files/expo-dev-menu/expo-dev-menu.modulemap')
+      s = s.gsub('${PODS_CONFIGURATION_BUILD_DIR}/expo-dev-menu-interface/EXDevMenuInterface.modulemap',
+                 '${PODS_ROOT}/Target Support Files/expo-dev-menu-interface/expo-dev-menu-interface.modulemap')
+
+      # 通用映射：${PODS_CONFIGURATION_BUILD_DIR}/<Pod>/<Pod>.modulemap -> ${PODS_ROOT}/Target Support Files/<Pod>/<Pod>.modulemap
+      s = s.gsub(/\$\{PODS_CONFIGURATION_BUILD_DIR\}\/([^\/]+)\/\1\.modulemap/,
+                 '${PODS_ROOT}/Target Support Files/\1/\1.modulemap')
+
+      File.write(path, s)
+    end
+
+    support_dir = File.join(__dir__, 'Pods', 'Target Support Files', 'Pods-client')
+    patch_pods_client_xcconfig!(File.join(support_dir, 'Pods-client.debug.xcconfig'))
+    patch_pods_client_xcconfig!(File.join(support_dir, 'Pods-client.release.xcconfig'))
+
+    # 修复：缺失 [CP] Copy XCFrameworks 阶段时，React/Expo 的 XCFramework 中间产物不会生成，
+    # 导致 Swift 报 no such module 'React' 等。
+    # 方案：在 [CP] Embed Pods Frameworks 脚本中，先执行各个 *-xcframeworks.sh 生成中间产物。
+    def patch_pods_client_frameworks_sh!(path)
+      return unless File.exist?(path)
+      s = File.read(path)
+      marker = "# [Mindfulness Fix] Prepare XCFramework intermediates\n"
+      return if s.include?(marker)
+
+      insert = marker +
+               "if [ -r \"${PODS_ROOT}/Target Support Files/React-Core-prebuilt/React-Core-prebuilt-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/React-Core-prebuilt/React-Core-prebuilt-xcframeworks.sh\"\n" \
+               "fi\n" \
+               "if [ -r \"${PODS_ROOT}/Target Support Files/ReactNativeDependencies/ReactNativeDependencies-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/ReactNativeDependencies/ReactNativeDependencies-xcframeworks.sh\"\n" \
+               "fi\n" \
+               "if [ -r \"${PODS_ROOT}/Target Support Files/hermes-engine/hermes-engine-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/hermes-engine/hermes-engine-xcframeworks.sh\"\n" \
+               "fi\n\n"
+
+      s = s.sub(/^if \[\[ \"\$CONFIGURATION\" == \"Debug\" \]\]; then\n/, insert + "if [[ \"$CONFIGURATION\" == \"Debug\" ]]; then\n")
+      File.write(path, s)
+    end
+
+    patch_pods_client_frameworks_sh!(File.join(support_dir, 'Pods-client-frameworks.sh'))
+
+    # 让 React/ReactNativeDependencies/hermes 的 XCFramework 切片在编译 Swift 之前就准备好，
+    # 否则会在 AppDelegate.swift 的 `import React` 阶段报 no such module。
+    def patch_expo_configure_project_sh!(path)
+      return unless File.exist?(path)
+      s = File.read(path)
+      marker = "# [Mindfulness Fix] Prepare XCFramework intermediates (before Swift compile)\n"
+      return if s.include?(marker)
+
+      insert = marker +
+               "if [ -r \"${PODS_ROOT}/Target Support Files/React-Core-prebuilt/React-Core-prebuilt-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/React-Core-prebuilt/React-Core-prebuilt-xcframeworks.sh\"\n" \
+               "fi\n" \
+               "if [ -r \"${PODS_ROOT}/Target Support Files/ReactNativeDependencies/ReactNativeDependencies-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/ReactNativeDependencies/ReactNativeDependencies-xcframeworks.sh\"\n" \
+               "fi\n" \
+               "if [ -r \"${PODS_ROOT}/Target Support Files/hermes-engine/hermes-engine-xcframeworks.sh\" ]; then\n" \
+               "  /bin/sh \"${PODS_ROOT}/Target Support Files/hermes-engine/hermes-engine-xcframeworks.sh\"\n" \
+               "fi\n\n"
+
+      # 插在首次调用 with_node 之前即可（不能用 ^，因为 with_node 不在文件开头）
+      s = s.sub("with_node \\\n", insert + "with_node \\\n")
+      File.write(path, s)
+    end
+
+    patch_expo_configure_project_sh!(File.join(support_dir, 'expo-configure-project.sh'))
  end
 end
--- a/client/ios/Podfile.lock
+++ b/client/ios/Podfile.lock
@@ -206,6 +206,8 @@ PODS:
    - Yoga
  - ExpoAsset (12.0.12):
    - ExpoModulesCore
+  - ExpoCrypto (15.0.8):
+    - ExpoModulesCore
  - ExpoFileSystem (19.0.21):
    - ExpoModulesCore
  - ExpoFont (14.0.11):
@@ -2240,18 +2242,19 @@ DEPENDENCIES:
  - "EXConstants (from `../node_modules/.pnpm/expo-constants@18.0.13_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0_/node_modules/expo-constants/ios`)"
  - "EXJSONUtils (from `../node_modules/.pnpm/expo-json-utils@0.15.0/node_modules/expo-json-utils/ios`)"
  - "EXManifests (from `../node_modules/.pnpm/expo-manifests@1.0.10_expo@54.0.32/node_modules/expo-manifests/ios`)"
-  - "EXNotifications (from `../node_modules/.pnpm/expo-notifications@0.32.16_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+r_758952db70529f49bda448def1c13c49/node_modules/expo-notifications/ios`)"
-  - "Expo (from `../node_modules/.pnpm/expo@54.0.32_@babel+core@7.28.6_@expo+metro-runtime@6.1.2_expo-router@6.0.22_react-nati_18ad48ba284ee86e6eb1cb0f939697b0/node_modules/expo`)"
+  - "EXNotifications (from `../node_modules/.pnpm/expo-notifications@0.32.16_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@1_nvlvke5tn7wk5pigfsu7j4ieeq/node_modules/expo-notifications/ios`)"
+  - "Expo (from `../node_modules/.pnpm/expo@54.0.32_@babel+core@7.28.6_@expo+metro-runtime@6.1.2_expo-router@6.0.22_react-native@0.8_7rhpxisdkrzvrgzbu7ct455kta/node_modules/expo`)"
  - "expo-dev-client (from `../node_modules/.pnpm/expo-dev-client@6.0.20_expo@54.0.32/node_modules/expo-dev-client/ios`)"
  - "expo-dev-launcher (from `../node_modules/.pnpm/expo-dev-launcher@6.0.20_expo@54.0.32/node_modules/expo-dev-launcher`)"
  - "expo-dev-menu (from `../node_modules/.pnpm/expo-dev-menu@7.0.18_expo@54.0.32/node_modules/expo-dev-menu`)"
  - "expo-dev-menu-interface (from `../node_modules/.pnpm/expo-dev-menu-interface@2.0.0_expo@54.0.32/node_modules/expo-dev-menu-interface/ios`)"
  - "ExpoAsset (from `../node_modules/.pnpm/expo-asset@12.0.12_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-asset/ios`)"
+  - "ExpoCrypto (from `../node_modules/.pnpm/expo-crypto@15.0.8_expo@54.0.32/node_modules/expo-crypto/ios`)"
  - "ExpoFileSystem (from `../node_modules/.pnpm/expo-file-system@19.0.21_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0_/node_modules/expo-file-system/ios`)"
  - "ExpoFont (from `../node_modules/.pnpm/expo-font@14.0.11_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-font/ios`)"
-  - "ExpoHead (from `../node_modules/.pnpm/expo-router@6.0.22_@expo+metro-runtime@6.1.2_@types+react@19.1.17_expo-constants@18.0.1_bd9aa16746ed7110429f931eb008e6d2/node_modules/expo-router/ios`)"
+  - "ExpoHead (from `../node_modules/.pnpm/expo-router@6.0.22_@expo+metro-runtime@6.1.2_@types+react@19.1.17_expo-constants@18.0.13_expo_mxedi6ntnfsoyp6zijog4pvdsy/node_modules/expo-router/ios`)"
  - "ExpoKeepAwake (from `../node_modules/.pnpm/expo-keep-awake@15.0.8_expo@54.0.32_react@19.1.0/node_modules/expo-keep-awake/ios`)"
-  - "ExpoLinearGradient (from `../node_modules/.pnpm/expo-linear-gradient@15.0.8_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+_53aef72480df9baa4504f4743d9c64bb/node_modules/expo-linear-gradient/ios`)"
+  - "ExpoLinearGradient (from `../node_modules/.pnpm/expo-linear-gradient@15.0.8_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@_e6k2hjkd5k4lph2ersbp3gfshy/node_modules/expo-linear-gradient/ios`)"
  - "ExpoLinking (from `../node_modules/.pnpm/expo-linking@8.0.11_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-linking/ios`)"
  - "ExpoLocalization (from `../node_modules/.pnpm/expo-localization@17.0.8_expo@54.0.32_react@19.1.0/node_modules/expo-localization/ios`)"
  - "ExpoModulesCore (from `../node_modules/.pnpm/expo-modules-core@3.0.29_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-modules-core`)"
@@ -2294,7 +2297,7 @@ DEPENDENCIES:
  - "React-logger (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/logger`)"
  - "React-Mapbuffer (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon`)"
  - "React-microtasksnativemodule (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/react/nativemodule/microtasks`)"
-  - "react-native-safe-area-context (from `../node_modules/.pnpm/react-native-safe-area-context@5.6.2_react-native@0.81.5_@babel+core@7.28.6_@types+reac_14122a3aa345cfabcc022a0f638ef16d/node_modules/react-native-safe-area-context`)"
+  - "react-native-safe-area-context (from `../node_modules/.pnpm/react-native-safe-area-context@5.6.2_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1_azuxgonsvxb2yngtegtuvyxcpi/node_modules/react-native-safe-area-context`)"
  - "React-NativeModulesApple (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/react/nativemodule/core/platform/ios`)"
  - "React-oscompat (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/oscompat`)"
  - "React-perflogger (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/reactperflogger`)"
@@ -2326,12 +2329,12 @@ DEPENDENCIES:
  - ReactCodegen (from `build/generated/ios`)
  - "ReactCommon/turbomodule/core (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon`)"
  - "ReactNativeDependencies (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/third-party-podspecs/ReactNativeDependencies.podspec`)"
-  - "RNCAsyncStorage (from `../node_modules/.pnpm/@react-native-async-storage+async-storage@2.2.0_react-native@0.81.5_@babel+core@7.28.6__ce3c4972004f3d6791573ec5b64bee38/node_modules/@react-native-async-storage/async-storage`)"
-  - "RNGestureHandler (from `../node_modules/.pnpm/react-native-gesture-handler@2.30.0_react-native@0.81.5_@babel+core@7.28.6_@types+react_39cf7da47c9c8531caaa923ee740e293/node_modules/react-native-gesture-handler`)"
-  - "RNReanimated (from `../node_modules/.pnpm/react-native-reanimated@4.1.6_@babel+core@7.28.6_react-native-worklets@0.5.1_@babel+cor_c7c888bd389fb93c9cfe2d3c1c8b0777/node_modules/react-native-reanimated`)"
+  - "RNCAsyncStorage (from `../node_modules/.pnpm/@react-native-async-storage+async-storage@2.2.0_react-native@0.81.5_@babel+core@7.28.6_@types_fp4qq3a7mejmut52v6jrlvxlzi/node_modules/@react-native-async-storage/async-storage`)"
+  - "RNGestureHandler (from `../node_modules/.pnpm/react-native-gesture-handler@2.30.0_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1._tylda4qoo2jtxaj3472gn4luma/node_modules/react-native-gesture-handler`)"
+  - "RNReanimated (from `../node_modules/.pnpm/react-native-reanimated@4.1.6_@babel+core@7.28.6_react-native-worklets@0.5.1_@babel+core@7.28_ky3sbxf6i7nkyacc2hzg3xcz4q/node_modules/react-native-reanimated`)"
  - "RNScreens (from `../node_modules/.pnpm/react-native-screens@4.16.0_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/react-native-screens`)"
  - "RNSVG (from `../node_modules/.pnpm/react-native-svg@15.12.1_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/react-native-svg`)"
-  - "RNWorklets (from `../node_modules/.pnpm/react-native-worklets@0.5.1_@babel+core@7.28.6_react-native@0.81.5_@babel+core@7.28.6_@_40f69326ce21d3f9f6d74d3965fd9adf/node_modules/react-native-worklets`)"
+  - "RNWorklets (from `../node_modules/.pnpm/react-native-worklets@0.5.1_@babel+core@7.28.6_react-native@0.81.5_@babel+core@7.28.6_@types+_5atwepuw3zy3crkgvetf35tkve/node_modules/react-native-worklets`)"
  - "Yoga (from `../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/yoga`)"

 EXTERNAL SOURCES:
@@ -2344,9 +2347,9 @@ EXTERNAL SOURCES:
  EXManifests:
    :path: "../node_modules/.pnpm/expo-manifests@1.0.10_expo@54.0.32/node_modules/expo-manifests/ios"
  EXNotifications:
-    :path: "../node_modules/.pnpm/expo-notifications@0.32.16_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+r_758952db70529f49bda448def1c13c49/node_modules/expo-notifications/ios"
+    :path: "../node_modules/.pnpm/expo-notifications@0.32.16_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@1_nvlvke5tn7wk5pigfsu7j4ieeq/node_modules/expo-notifications/ios"
  Expo:
-    :path: "../node_modules/.pnpm/expo@54.0.32_@babel+core@7.28.6_@expo+metro-runtime@6.1.2_expo-router@6.0.22_react-nati_18ad48ba284ee86e6eb1cb0f939697b0/node_modules/expo"
+    :path: "../node_modules/.pnpm/expo@54.0.32_@babel+core@7.28.6_@expo+metro-runtime@6.1.2_expo-router@6.0.22_react-native@0.8_7rhpxisdkrzvrgzbu7ct455kta/node_modules/expo"
  expo-dev-client:
    :path: "../node_modules/.pnpm/expo-dev-client@6.0.20_expo@54.0.32/node_modules/expo-dev-client/ios"
  expo-dev-launcher:
@@ -2357,16 +2360,18 @@ EXTERNAL SOURCES:
    :path: "../node_modules/.pnpm/expo-dev-menu-interface@2.0.0_expo@54.0.32/node_modules/expo-dev-menu-interface/ios"
  ExpoAsset:
    :path: "../node_modules/.pnpm/expo-asset@12.0.12_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-asset/ios"
+  ExpoCrypto:
+    :path: "../node_modules/.pnpm/expo-crypto@15.0.8_expo@54.0.32/node_modules/expo-crypto/ios"
  ExpoFileSystem:
    :path: "../node_modules/.pnpm/expo-file-system@19.0.21_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0_/node_modules/expo-file-system/ios"
  ExpoFont:
    :path: "../node_modules/.pnpm/expo-font@14.0.11_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-font/ios"
  ExpoHead:
-    :path: "../node_modules/.pnpm/expo-router@6.0.22_@expo+metro-runtime@6.1.2_@types+react@19.1.17_expo-constants@18.0.1_bd9aa16746ed7110429f931eb008e6d2/node_modules/expo-router/ios"
+    :path: "../node_modules/.pnpm/expo-router@6.0.22_@expo+metro-runtime@6.1.2_@types+react@19.1.17_expo-constants@18.0.13_expo_mxedi6ntnfsoyp6zijog4pvdsy/node_modules/expo-router/ios"
  ExpoKeepAwake:
    :path: "../node_modules/.pnpm/expo-keep-awake@15.0.8_expo@54.0.32_react@19.1.0/node_modules/expo-keep-awake/ios"
  ExpoLinearGradient:
-    :path: "../node_modules/.pnpm/expo-linear-gradient@15.0.8_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+_53aef72480df9baa4504f4743d9c64bb/node_modules/expo-linear-gradient/ios"
+    :path: "../node_modules/.pnpm/expo-linear-gradient@15.0.8_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@_e6k2hjkd5k4lph2ersbp3gfshy/node_modules/expo-linear-gradient/ios"
  ExpoLinking:
    :path: "../node_modules/.pnpm/expo-linking@8.0.11_expo@54.0.32_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/expo-linking/ios"
  ExpoLocalization:
@@ -2451,7 +2456,7 @@ EXTERNAL SOURCES:
  React-microtasksnativemodule:
    :path: "../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/react/nativemodule/microtasks"
  react-native-safe-area-context:
-    :path: "../node_modules/.pnpm/react-native-safe-area-context@5.6.2_react-native@0.81.5_@babel+core@7.28.6_@types+reac_14122a3aa345cfabcc022a0f638ef16d/node_modules/react-native-safe-area-context"
+    :path: "../node_modules/.pnpm/react-native-safe-area-context@5.6.2_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1_azuxgonsvxb2yngtegtuvyxcpi/node_modules/react-native-safe-area-context"
  React-NativeModulesApple:
    :path: "../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/react/nativemodule/core/platform/ios"
  React-oscompat:
@@ -2515,43 +2520,44 @@ EXTERNAL SOURCES:
  ReactNativeDependencies:
    :podspec: "../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/third-party-podspecs/ReactNativeDependencies.podspec"
  RNCAsyncStorage:
-    :path: "../node_modules/.pnpm/@react-native-async-storage+async-storage@2.2.0_react-native@0.81.5_@babel+core@7.28.6__ce3c4972004f3d6791573ec5b64bee38/node_modules/@react-native-async-storage/async-storage"
+    :path: "../node_modules/.pnpm/@react-native-async-storage+async-storage@2.2.0_react-native@0.81.5_@babel+core@7.28.6_@types_fp4qq3a7mejmut52v6jrlvxlzi/node_modules/@react-native-async-storage/async-storage"
  RNGestureHandler:
-    :path: "../node_modules/.pnpm/react-native-gesture-handler@2.30.0_react-native@0.81.5_@babel+core@7.28.6_@types+react_39cf7da47c9c8531caaa923ee740e293/node_modules/react-native-gesture-handler"
+    :path: "../node_modules/.pnpm/react-native-gesture-handler@2.30.0_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1._tylda4qoo2jtxaj3472gn4luma/node_modules/react-native-gesture-handler"
  RNReanimated:
-    :path: "../node_modules/.pnpm/react-native-reanimated@4.1.6_@babel+core@7.28.6_react-native-worklets@0.5.1_@babel+cor_c7c888bd389fb93c9cfe2d3c1c8b0777/node_modules/react-native-reanimated"
+    :path: "../node_modules/.pnpm/react-native-reanimated@4.1.6_@babel+core@7.28.6_react-native-worklets@0.5.1_@babel+core@7.28_ky3sbxf6i7nkyacc2hzg3xcz4q/node_modules/react-native-reanimated"
  RNScreens:
    :path: "../node_modules/.pnpm/react-native-screens@4.16.0_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/react-native-screens"
  RNSVG:
    :path: "../node_modules/.pnpm/react-native-svg@15.12.1_react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0__react@19.1.0/node_modules/react-native-svg"
  RNWorklets:
-    :path: "../node_modules/.pnpm/react-native-worklets@0.5.1_@babel+core@7.28.6_react-native@0.81.5_@babel+core@7.28.6_@_40f69326ce21d3f9f6d74d3965fd9adf/node_modules/react-native-worklets"
+    :path: "../node_modules/.pnpm/react-native-worklets@0.5.1_@babel+core@7.28.6_react-native@0.81.5_@babel+core@7.28.6_@types+_5atwepuw3zy3crkgvetf35tkve/node_modules/react-native-worklets"
  Yoga:
    :path: "../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native/ReactCommon/yoga"

 SPEC CHECKSUMS:
-  EXApplication: 1e98d4b1dccdf30627f92917f4b2c5a53c330e5f
-  EXConstants: fce59a631a06c4151602843667f7cfe35f81e271
+  EXApplication: 13420f8139864183f8a04fd6099077bdf8cfb186
+  EXConstants: 3feb66fd1d94202fc1f0946d74e029d8b224b60e
  EXJSONUtils: 1d3e4590438c3ee593684186007028a14b3686cd
-  EXManifests: a8d97683e5c7a3b026ffbd58559c64dc655b747b
-  EXNotifications: 9eec98712cc814ceff916d876cb53859003b0597
-  Expo: 4e503a041c59c4e34c8be262a135848ad5cd3710
-  expo-dev-client: 425ee077d6754a98cfe3a2e2410d29b440b24c9d
-  expo-dev-launcher: a4f4cdef064ab1fb8621e5b8c7c457cd6e9568c3
-  expo-dev-menu: 05b18812110c175814c6af0d09dd658abcc5e00d
+  EXManifests: 83ef0844fcf06d6099b12a7bdbd7d36fc0e1dd16
+  EXNotifications: 2a3feb7af6194828d9aafda72f63a9a03866230a
+  Expo: b8d64eb9a496ebe8c71e3dae7eeb7f394b146b80
+  expo-dev-client: 12ef7d5b14d93e309922acea78dcd851db583a87
+  expo-dev-launcher: 47994056008ffdc30a6a5e328a375b3e30a8db05
+  expo-dev-menu: ea4fb803ace52e60d7cd8060c7cd379612a140b2
  expo-dev-menu-interface: 600df12ea01efecdd822daaf13cc0ac091775533
-  ExpoAsset: f867e55ceb428aab99e1e8c082b5aee7c159ea18
-  ExpoFileSystem: 858a44267a3e6e9057e0888ad7c7cfbf55d52063
-  ExpoFont: f543ce20a228dd702813668b1a07b46f51878d47
-  ExpoHead: 4425246bc93411f0fe7f6945f95f698e91db8780
-  ExpoKeepAwake: 55f75eca6499bb9e4231ebad6f3e9cb8f99c0296
-  ExpoLinearGradient: 809102bdb979f590083af49f7fa4805cd931bd58
-  ExpoLinking: 8f0aaf69aa56f832913030503b6263dc6f647f37
-  ExpoLocalization: d9168d5300a5b03e5e78b986124d11fb6ec3ebbd
-  ExpoModulesCore: f3da4f1ab5a8375d0beafab763739dbee8446583
-  ExpoSplashScreen: bc3cffefca2716e5f22350ca109badd7e50ec14d
-  ExpoWebBrowser: 17b064c621789e41d4816c95c93f429b84971f52
-  EXUpdatesInterface: 5adf50cb41e079c861da6d9b4b954c3db9a50734
+  ExpoAsset: d999f3bbd998a750f3b74cb913229848901b926b
+  ExpoCrypto: 4d23a9ff67c25e2ed23ca792d81e58817a7ea1b9
+  ExpoFileSystem: aefcd337b94b874f88752ebefc52813b84992fad
+  ExpoFont: c625dbd97ed57e9089b172b2a7bb99003d074664
+  ExpoHead: b691a2ed7ab02ed820b6c6468941832d34969c29
+  ExpoKeepAwake: 44bf6715bc1d2ddb17afe19d927cd039cda123f0
+  ExpoLinearGradient: 814a21fc4056c3cf606e4f19e31e47074c5b5a86
+  ExpoLinking: ebf543fd411d56375cb4eee07f6ab4e31c7ad959
+  ExpoLocalization: 6ac6f326210f0a3141ef6f58ab8f8f4ed003b485
+  ExpoModulesCore: 77496909fd3c800f97f7f2007dd26aeac4bb3798
+  ExpoSplashScreen: 72fbc6dd9d6404dd9d0725a56c9ac1383bc0b14f
+  ExpoWebBrowser: 88b116cd378d9609c776c0903fe4070fca461588
+  EXUpdatesInterface: 1436757deb0d574b84bba063bd024c315e0ec08b
  FBLazyVector: e95a291ad2dadb88e42b06e0c5fb8262de53ec12
  hermes-engine: 9f4dfe93326146a1c99eb535b1cb0b857a3cd172
  RCTDeprecation: 943572d4be82d480a48f4884f670135ae30bf990
@@ -2559,74 +2565,74 @@ SPEC CHECKSUMS:
  RCTTypeSafety: 16a4144ca3f959583ab019b57d5633df10b5e97c
  React: 914f8695f9bf38e6418228c2ffb70021e559f92f
  React-callinvoker: 1c0808402aee0c6d4a0d8e7220ce6547af9fba71
-  React-Core: c61410ef0ca6055e204a963992e363227e0fd1c5
-  React-Core-prebuilt: 02f0ad625ddd47463c009c2d0c5dd35c0d982599
-  React-CoreModules: 1f6d1744b5f9f2ec684a4bb5ced25370f87e5382
-  React-cxxreact: 3af79478e8187b63ffc22b794cd42d3fc1f1f2da
+  React-Core: 4ae98f9e8135b8ddbd7c98730afb6fdae883db90
+  React-Core-prebuilt: 8f4cca589c14e8cf8fc6db4587ef1c2056b5c151
+  React-CoreModules: e878a90bb19b8f3851818af997dbae3b3b0a27ac
+  React-cxxreact: 28af9844f6dc87be1385ab521fbfb3746f19563c
  React-debug: 6328c2228e268846161f10082e80dc69eac2e90a
-  React-defaultsnativemodule: d635ef36d755321e5d6fc065bd166b2c5a0e9833
-  React-domnativemodule: dd28f6d96cd21236e020be2eff6fe0b7d4ec3b66
-  React-Fabric: 2e32c3fdbb1fbcf5fde54607e3abe453c6652ce2
-  React-FabricComponents: 5ed0cdb81f6b91656cb4d3be432feaa28a58071a
-  React-FabricImage: 2bc714f818cb24e454f5d3961864373271b2faf8
-  React-featureflags: 847642f41fa71ad4eec5e0351badebcad4fe6171
-  React-featureflagsnativemodule: c868a544b2c626fa337bcbd364b1befe749f0d3f
-  React-graphics: 192ec701def5b3f2a07db2814dfba5a44986cff6
-  React-hermes: e875778b496c86d07ab2ccaa36a9505d248a254b
-  React-idlecallbacksnativemodule: 4d57965cdf82c14ee3b337189836cd8491632b76
-  React-ImageManager: bd0b99e370b13de82c9cd15f0f08144ff3de079e
-  React-jserrorhandler: a2fdef4cbcfdcdf3fa9f5d1f7190f7fd4535248d
-  React-jsi: 89d43d1e7d4d0663f8ba67e0b39eb4e4672c27de
-  React-jsiexecutor: abe4874aaab90dfee5dec480680220b2f8af07e3
-  React-jsinspector: a0b3e051aef842b0b2be2353790ae2b2a5a65a8f
-  React-jsinspectorcdp: 6346013b2247c6263fbf5199adf4a8751e53bd89
-  React-jsinspectornetwork: 26281aa50d49fc1ec93abf981d934698fa95714f
-  React-jsinspectortracing: 55eedf6d57540507570259a778663b90060bbd6e
-  React-jsitooling: 0e001113fa56d8498aa8ac28437ac0d36348e51a
-  React-jsitracing: b713793eb8a5bbc4d86a84e9d9e5023c0f58cbaf
-  React-logger: 50fdb9a8236da90c0b1072da5c32ee03aeb5bf28
-  React-Mapbuffer: 9050ee10c19f4f7fca8963d0211b2854d624973e
-  React-microtasksnativemodule: f775db9e991c6f3b8ccbc02bfcde22770f96e23b
-  react-native-safe-area-context: 37e680fc4cace3c0030ee46e8987d24f5d3bdab2
-  React-NativeModulesApple: 8969913947d5b576de4ed371a939455a8daf28aa
+  React-defaultsnativemodule: afc9d809ec75780f39464a6949c07987fbea488c
+  React-domnativemodule: 91a233260411d41f27f67aa1358b7f9f0bfd101d
+  React-Fabric: 21f349b5e93f305a3c38c885902683a9c79cf983
+  React-FabricComponents: 47ac634cc9ecc64b30a9997192f510eebe4177e4
+  React-FabricImage: 21873acd6d4a51a0b97c133141051c7acb11cc86
+  React-featureflags: 653f469f0c3c9dc271d610373e3b6e66a9fd847d
+  React-featureflagsnativemodule: c91a8a3880e0f4838286402241ead47db43aed28
+  React-graphics: b4bdb0f635b8048c652a5d2b73eb8b1ddd950f24
+  React-hermes: fcfad3b917400f49026f3232561e039c9d1c34bf
+  React-idlecallbacksnativemodule: 8cb83207e39f8179ac1d344b6177c6ab3ccebcdc
+  React-ImageManager: 396128004783fc510e629124dce682d38d1088e7
+  React-jserrorhandler: b58b788d788cdbf8bda7db74a88ebfcffc8a0795
+  React-jsi: d2c3f8555175371c02da6dfe7ed1b64b55a9d6c0
+  React-jsiexecutor: ba537434eb45ee018b590ed7d29ee233fddb8669
+  React-jsinspector: f21b6654baf96cb9f71748844a32468a5f73ad51
+  React-jsinspectorcdp: 3f8be4830694c3c1c39442e50f8db877966d43f0
+  React-jsinspectornetwork: 70e41469565712ad60e11d9c8b8f999b9f7f61eb
+  React-jsinspectortracing: eccf9bfa4ec7f130d514f215cfb2222dc3c0e270
+  React-jsitooling: b376a695f5a507627f7934748533b24eed1751ca
+  React-jsitracing: 5c8c3273dda2d95191cc0612fb5e71c4d9018d2a
+  React-logger: c3e2f8a2e284341205f61eef3d4677ab5a309dfd
+  React-Mapbuffer: 603c18db65844bb81dbe62fee8fcc976eaeb7108
+  React-microtasksnativemodule: d77e0c426fce34c23227394c96ca1033b30c813c
+  react-native-safe-area-context: 53f796cb6c814661bbe99fbdfd0585d07b996cdd
+  React-NativeModulesApple: 1664340b8750d64e0ef3907c5e53d9481f74bcbd
  React-oscompat: ce47230ed20185e91de62d8c6d139ae61763d09c
-  React-perflogger: 02b010e665772c7dcb859d85d44c1bfc5ac7c0e4
-  React-performancetimeline: 130db956b5a83aa4fb41ddf5ae68da89f3fb1526
+  React-perflogger: b1af3cfb3f095f819b2814910000392a8e17ba9f
+  React-performancetimeline: f9ec65b77bcadbc7bd8b47a6f4b4b697da7b1490
  React-RCTActionSheet: 0b14875b3963e9124a5a29a45bd1b22df8803916
-  React-RCTAnimation: a7b90fd2af7bb9c084428867445a1481a8cb112e
-  React-RCTAppDelegate: 3262bedd01263f140ec62b7989f4355f57cec016
-  React-RCTBlob: c17531368702f1ebed5d0ada75a7cf5915072a53
-  React-RCTFabric: 6409edd8cfdc3133b6cc75636d3b858fdb1d11ea
-  React-RCTFBReactNativeSpec: c004b27b4fa3bd85878ad2cf53de3bbec85da797
-  React-RCTImage: c68078a120d0123f4f07a5ac77bea3bb10242f32
-  React-RCTLinking: cf8f9391fe7fe471f96da3a5f0435235eca18c5b
-  React-RCTNetwork: ca31f7c879355760c2d9832a06ee35f517938a20
-  React-RCTRuntime: a6cf4a1e42754fc87f493e538f2ac6b820e45418
-  React-RCTSettings: e0e140b2ff4bf86d34e9637f6316848fc00be035
-  React-RCTText: 75915bace6f7877c03a840cc7b6c622fb62bfa6b
-  React-RCTVibration: 25f26b85e5e432bb3c256f8b384f9269e9529f25
+  React-RCTAnimation: 60f6eca214a62b9673f64db6df3830cee902b5af
+  React-RCTAppDelegate: 37734b39bac108af30a0fd9d3e1149ec68b82c28
+  React-RCTBlob: 83fbcbd57755caf021787324aac2fe9b028cc264
+  React-RCTFabric: a05cb1df484008db3753c8b4a71e4c6d9f1e43a6
+  React-RCTFBReactNativeSpec: d58d7ae9447020bbbac651e3b0674422aba18266
+  React-RCTImage: 47aba3be7c6c64f956b7918ab933769602406aac
+  React-RCTLinking: 2dbaa4df2e4523f68baa07936bd8efdfa34d5f31
+  React-RCTNetwork: 1fca7455f9dedf7de2b95bec438da06680f3b000
+  React-RCTRuntime: 17819dd1dfc8613efaf4cbb9d8686baae4a83e5b
+  React-RCTSettings: 01bf91c856862354d3d2f642ccb82f3697a4284a
+  React-RCTText: cb576a3797dcb64933613c522296a07eaafc0461
+  React-RCTVibration: 560af8c086741f3525b8456a482cdbe27f9d098e
  React-rendererconsistency: 2dac03f448ff337235fd5820b10f81633328870d
-  React-renderercss: 477da167bb96b5ac86d30c5d295412fb853f5453
-  React-rendererdebug: 2a1798c6f3ef5f22d466df24c33653edbabb5b89
-  React-RuntimeApple: 28cf4d8eb18432f6a21abbed7d801ab7f6b6f0b4
-  React-RuntimeCore: 41bf0fd56a00de5660f222415af49879fa49c4f0
-  React-runtimeexecutor: 1afb774dde3011348e8334be69d2f57a359ea43e
-  React-RuntimeHermes: f3b158ea40e8212b1a723a68b4315e7a495c5fc6
-  React-runtimescheduler: 3e1e2bec7300bae512533107d8e54c6e5c63fe0f
-  React-timing: 6fa9883de2e41791e5dc4ec404e5e37f3f50e801
-  React-utils: 6e2035b53d087927768649a11a26c4e092448e34
-  ReactAppDependencyProvider: 1bcd3527ac0390a1c898c114f81ff954be35ed79
-  ReactCodegen: fffa79906f5866f6a5ab5d98480b375191190271
-  ReactCommon: 08810150b1206cc44aecf5f6ae19af32f29151a8
+  React-renderercss: c5c6b7a15948dd28facca39a18ac269073718490
+  React-rendererdebug: 3c9d5e1634273f5a24d84cc5669f290ce0bdc812
+  React-RuntimeApple: 887637d1e12ea8262df7d32bc100467df2302613
+  React-RuntimeCore: 91f779835dc4f8f84777fe5dd24f1a22f96454e4
+  React-runtimeexecutor: 8bb6b738f37b0ada4a6269e6f8ab1133dea0285c
+  React-RuntimeHermes: 4cb93de9fa8b1cc753d200dbe61a01b9ec5f5562
+  React-runtimescheduler: 83dc28f530bfbd2fce84ed13aa7feebdc24e5af7
+  React-timing: 03c7217455d2bff459b27a3811be25796b600f47
+  React-utils: 6d46795ae0444ec8a5d9a5f201157b286bf5250a
+  ReactAppDependencyProvider: c277c5b231881ad4f00cd59e3aa0671b99d7ebee
+  ReactCodegen: 88a1f4643f15841573f833b895bfa2a0c6cb4e7f
+  ReactCommon: e6e232202a447d353e5531f2be82f50f47cbaa9a
  ReactNativeDependencies: 71ce9c28beb282aa720ea7b46980fff9669f428a
-  RNCAsyncStorage: 3a4f5e2777dae1688b781a487923a08569e27fe4
-  RNGestureHandler: e0d0bce5599f6120b7adf90c38d2805e2935795f
-  RNReanimated: 9c6a550b41de91cf374e60afd79db93a362f1126
-  RNScreens: d8d6f1792f6e7ac12b0190d33d8d390efc0c1845
-  RNSVG: 31d6639663c249b7d5abc9728dde2041eb2a3c34
-  RNWorklets: 1b50cb7595142f95e70518196ba247ad7f46a52e
+  RNCAsyncStorage: e85a99325df9eb0191a6ee2b2a842644c7eb29f4
+  RNGestureHandler: 40c2d1c168e54715fe52e0fb16cb38c54611e4f3
+  RNReanimated: 10415bc8396eaeac0d7b2c9a1538eae7e607ec9c
+  RNScreens: dd61bc3a3e6f6901ad833efa411917d44827cf51
+  RNSVG: 2825ee146e0f6a16221e852299943e4cceef4528
+  RNWorklets: 9ccdc8112b17af6eee2c85a233891cb80db150ad
  Yoga: 5934998fbeaef7845dbf698f698518695ab4cd1a

-PODFILE CHECKSUM: dfe3cc75dee014a0abd367bc9e1bdbab0ba64ee3
+PODFILE CHECKSUM: c2c3838f0b2a579fef2350bff2ecaa005e27145d

 COCOAPODS: 1.16.2
--- a/client/ios/client.xcodeproj/project.pbxproj
+++ b/client/ios/client.xcodeproj/project.pbxproj
@@ -3,7 +3,7 @@
 	archiveVersion = 1;
 	classes = {
 	};
-	objectVersion = 56;
+	objectVersion = 77;
 	objects = {

 /* Begin PBXBuildFile section */
@@ -12,6 +12,9 @@
 		1A1DE01D4133812B2E2BA692 /* libPods-client.a in Frameworks */ = {isa = PBXBuildFile; fileRef = E3328F0E595C1F4A244DF238 /* libPods-client.a */; };
 		3E461D99554A48A4959DE609 /* SplashScreen.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = AA286B85B6C04FC6940260E9 /* SplashScreen.storyboard */; };
 		A1B2C3D4E5F60718293A4B5C /* EmotionWidget.swift in Sources */ = {isa = PBXBuildFile; fileRef = A1B2C3D4E5F60718293A4B5B /* EmotionWidget.swift */; };
+		A8C1D2E3F4A5B6C7D8E9F0A2 /* AppGroupStorage.swift in Sources */ = {isa = PBXBuildFile; fileRef = A8C1D2E3F4A5B6C7D8E9F0A1 /* AppGroupStorage.swift */; };
+		A8C1D2E3F4A5B6C7D8E9F0B2 /* AppGroupStorageBridge.m in Sources */ = {isa = PBXBuildFile; fileRef = A8C1D2E3F4A5B6C7D8E9F0B1 /* AppGroupStorageBridge.m */; };
+		A8C1D2E3F4A5B6C7D8E9F0A3 /* WidgetKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = EB3DAF802F2A4B8D00450593 /* WidgetKit.framework */; };
 		B5A7FE9A125F7C79753EC5BF /* ExpoModulesProvider.swift in Sources */ = {isa = PBXBuildFile; fileRef = C7DB40C26E3A46F6D06769EA /* ExpoModulesProvider.swift */; };
 		BB2F792D24A3F905000567C9 /* Expo.plist in Resources */ = {isa = PBXBuildFile; fileRef = BB2F792C24A3F905000567C9 /* Expo.plist */; };
 		EB3DAF812F2A4B8E00450593 /* WidgetKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = EB3DAF802F2A4B8D00450593 /* WidgetKit.framework */; };
@@ -45,12 +48,14 @@
 /* End PBXCopyFilesBuildPhase section */

 /* Begin PBXFileReference section */
-		13B07F961A680F5B00A75B9A /* client.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = client.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		13B07F961A680F5B00A75B9A /* HeyMama.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = HeyMama.app; sourceTree = BUILT_PRODUCTS_DIR; };
 		13B07FB51A68108700A75B9A /* Images.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; name = Images.xcassets; path = client/Images.xcassets; sourceTree = "<group>"; };
 		13B07FB61A68108700A75B9A /* Info.plist */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text.plist.xml; name = Info.plist; path = client/Info.plist; sourceTree = "<group>"; };
 		3C76CA16D0801CBF0D731C7C /* Pods-client.release.xcconfig */ = {isa = PBXFileReference; includeInIndex = 1; lastKnownFileType = text.xcconfig; name = "Pods-client.release.xcconfig"; path = "Target Support Files/Pods-client/Pods-client.release.xcconfig"; sourceTree = "<group>"; };
 		75F52ADE07CAE9D9736D7671 /* PrivacyInfo.xcprivacy */ = {isa = PBXFileReference; includeInIndex = 1; lastKnownFileType = text.xml; name = PrivacyInfo.xcprivacy; path = client/PrivacyInfo.xcprivacy; sourceTree = "<group>"; };
 		A1B2C3D4E5F60718293A4B5B /* EmotionWidget.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = "情绪小组件/EmotionWidget.swift"; sourceTree = "<group>"; };
+		A8C1D2E3F4A5B6C7D8E9F0A1 /* AppGroupStorage.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; name = AppGroupStorage.swift; path = client/AppGroupStorage.swift; sourceTree = "<group>"; };
+		A8C1D2E3F4A5B6C7D8E9F0B1 /* AppGroupStorageBridge.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; name = AppGroupStorageBridge.m; path = client/AppGroupStorageBridge.m; sourceTree = "<group>"; };
 		AA286B85B6C04FC6940260E9 /* SplashScreen.storyboard */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = file.storyboard; name = SplashScreen.storyboard; path = client/SplashScreen.storyboard; sourceTree = "<group>"; };
 		BB2F792C24A3F905000567C9 /* Expo.plist */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text.plist.xml; path = Expo.plist; sourceTree = "<group>"; };
 		C7DB40C26E3A46F6D06769EA /* ExpoModulesProvider.swift */ = {isa = PBXFileReference; includeInIndex = 1; lastKnownFileType = sourcecode.swift; name = ExpoModulesProvider.swift; path = "Pods/Target Support Files/Pods-client/ExpoModulesProvider.swift"; sourceTree = "<group>"; };
@@ -58,7 +63,8 @@
 		EB3DAF7F2F2A4B8D00450593 /* 情绪小组件Extension.appex */ = {isa = PBXFileReference; explicitFileType = "wrapper.app-extension"; includeInIndex = 0; path = "情绪小组件Extension.appex"; sourceTree = BUILT_PRODUCTS_DIR; };
 		EB3DAF802F2A4B8D00450593 /* WidgetKit.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = WidgetKit.framework; path = System/Library/Frameworks/WidgetKit.framework; sourceTree = SDKROOT; };
 		EB3DAF822F2A4B8E00450593 /* SwiftUI.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = SwiftUI.framework; path = System/Library/Frameworks/SwiftUI.framework; sourceTree = SDKROOT; };
-		EB3DAF9A2F2A4D0900450593 /* MindfulnessWidget.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = MindfulnessWidget.swift; sourceTree = "<group>"; };
+		EBEEC7562F31D82700C68C1A /* clientRelease.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; name = clientRelease.entitlements; path = client/clientRelease.entitlements; sourceTree = "<group>"; };
+		EBEEC7572F31D84B00C68C1A /* 情绪小组件ExtensionRelease.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = "情绪小组件ExtensionRelease.entitlements"; sourceTree = "<group>"; };
 		ED297162215061F000B7C4FE /* JavaScriptCore.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = JavaScriptCore.framework; path = System/Library/Frameworks/JavaScriptCore.framework; sourceTree = SDKROOT; };
 		F11748412D0307B40044C1D9 /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; name = AppDelegate.swift; path = client/AppDelegate.swift; sourceTree = "<group>"; };
 		F11748442D0722820044C1D9 /* client-Bridging-Header.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = "client-Bridging-Header.h"; path = "client/client-Bridging-Header.h"; sourceTree = "<group>"; };
@@ -97,6 +103,7 @@
 			buildActionMask = 2147483647;
 			files = (
 				1A1DE01D4133812B2E2BA692 /* libPods-client.a in Frameworks */,
+				A8C1D2E3F4A5B6C7D8E9F0A3 /* WidgetKit.framework in Frameworks */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -115,8 +122,10 @@
 		13B07FAE1A68108700A75B9A /* client */ = {
 			isa = PBXGroup;
 			children = (
-				EB3DAF9A2F2A4D0900450593 /* MindfulnessWidget.swift */,
+				EBEEC7562F31D82700C68C1A /* clientRelease.entitlements */,
 				F11748412D0307B40044C1D9 /* AppDelegate.swift */,
+				A8C1D2E3F4A5B6C7D8E9F0A1 /* AppGroupStorage.swift */,
+				A8C1D2E3F4A5B6C7D8E9F0B1 /* AppGroupStorageBridge.m */,
 				F11748442D0722820044C1D9 /* client-Bridging-Header.h */,
 				BB2F792B24A3F905000567C9 /* Supporting */,
 				13B07FB51A68108700A75B9A /* Images.xcassets */,
@@ -156,6 +165,7 @@
 		83CBB9F61A601CBA00E9B192 = {
 			isa = PBXGroup;
 			children = (
+				EBEEC7572F31D84B00C68C1A /* 情绪小组件ExtensionRelease.entitlements */,
 				13B07FAE1A68108700A75B9A /* client */,
 				832341AE1AAA6A7D00B99B32 /* Libraries */,
 				EB3DAF842F2A4B8E00450593 /* 情绪小组件 */,
@@ -173,7 +183,7 @@
 		83CBBA001A601CBA00E9B192 /* Products */ = {
 			isa = PBXGroup;
 			children = (
-				13B07F961A680F5B00A75B9A /* client.app */,
+				13B07F961A680F5B00A75B9A /* HeyMama.app */,
 				EB3DAF7F2F2A4B8D00450593 /* 情绪小组件Extension.appex */,
 			);
 			name = Products;
@@ -237,7 +247,7 @@
 			);
 			name = client;
 			productName = client;
-			productReference = 13B07F961A680F5B00A75B9A /* client.app */;
+			productReference = 13B07F961A680F5B00A75B9A /* HeyMama.app */;
 			productType = "com.apple.product-type.application";
 		};
 		EB3DAF7E2F2A4B8D00450593 /* 情绪小组件Extension */ = {
@@ -266,8 +276,12 @@
 		83CBB9F71A601CBA00E9B192 /* Project object */ = {
 			isa = PBXProject;
 			attributes = {
+				BuildIndependentTargetsInParallel = YES;
+				KnownAssetTags = (
+					New,
+				);
 				LastSwiftUpdateCheck = 2620;
-				LastUpgradeCheck = 1130;
+				LastUpgradeCheck = 2620;
 				TargetAttributes = {
 					13B07F861A680F5B00A75B9A = {
 						LastSwiftMigration = 1250;
@@ -452,6 +466,8 @@
 			files = (
 				F11748422D0307B40044C1D9 /* AppDelegate.swift in Sources */,
 				B5A7FE9A125F7C79753EC5BF /* ExpoModulesProvider.swift in Sources */,
+				A8C1D2E3F4A5B6C7D8E9F0A2 /* AppGroupStorage.swift in Sources */,
+				A8C1D2E3F4A5B6C7D8E9F0B2 /* AppGroupStorageBridge.m in Sources */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -479,10 +495,12 @@
 			baseConfigurationReference = FFF632A94C7A551AAA096858 /* Pods-client.debug.xcconfig */;
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				ASSETCATALOG_COMPILER_INCLUDE_ALL_APPICON_ASSETS = YES;
 				CLANG_ENABLE_MODULES = YES;
 				CODE_SIGN_ENTITLEMENTS = client/client.entitlements;
-				CURRENT_PROJECT_VERSION = 1;
+				CURRENT_PROJECT_VERSION = 4;
 				ENABLE_BITCODE = NO;
+				"EXCLUDED_ARCHS[sdk=iphonesimulator*]" = x86_64;
 				GCC_PREPROCESSOR_DEFINITIONS = (
 					"$(inherited)",
 					"FB_SONARKIT_ENABLED=1",
@@ -493,15 +511,16 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 1.0;
+				MARKETING_VERSION = 1.0.1;
 				OTHER_LDFLAGS = (
 					"$(inherited)",
 					"-ObjC",
 					"-lc++",
 				);
 				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_DEBUG";
-				PRODUCT_BUNDLE_IDENTIFIER = com.anonymous.client;
-				PRODUCT_NAME = client;
+				PRODUCT_BUNDLE_IDENTIFIER = com.damer.mindfulness;
+				PRODUCT_NAME = HeyMama;
+				SKIP_INSTALL = NO;
 				SUPPORTED_PLATFORMS = "iphoneos iphonesimulator";
 				SUPPORTS_MACCATALYST = NO;
 				SUPPORTS_MAC_DESIGNED_FOR_IPHONE_IPAD = NO;
@@ -509,7 +528,7 @@
 				SWIFT_OBJC_BRIDGING_HEADER = "client/client-Bridging-Header.h";
 				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
 				SWIFT_VERSION = 5.0;
-				TARGETED_DEVICE_FAMILY = "1,2";
+				TARGETED_DEVICE_FAMILY = 1;
 				VERSIONING_SYSTEM = "apple-generic";
 			};
 			name = Debug;
@@ -519,31 +538,37 @@
 			baseConfigurationReference = 3C76CA16D0801CBF0D731C7C /* Pods-client.release.xcconfig */;
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				ASSETCATALOG_COMPILER_INCLUDE_ALL_APPICON_ASSETS = YES;
 				CLANG_ENABLE_MODULES = YES;
-				CODE_SIGN_ENTITLEMENTS = client/client.entitlements;
-				CURRENT_PROJECT_VERSION = 1;
+				CODE_SIGN_ENTITLEMENTS = client/clientRelease.entitlements;
+				CURRENT_PROJECT_VERSION = 4;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				DEVELOPMENT_TEAM = WS92GPX9H2;
+				DWARF_DSYM_FILE_SHOULD_ACCOMPANY_PRODUCT = YES;
+				"EXCLUDED_ARCHS[sdk=iphonesimulator*]" = x86_64;
 				INFOPLIST_FILE = client/Info.plist;
 				IPHONEOS_DEPLOYMENT_TARGET = 15.1;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 1.0;
+				MARKETING_VERSION = 1.0.1;
 				OTHER_LDFLAGS = (
 					"$(inherited)",
 					"-ObjC",
 					"-lc++",
 				);
 				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_RELEASE";
-				PRODUCT_BUNDLE_IDENTIFIER = com.anonymous.client;
-				PRODUCT_NAME = client;
+				PRODUCT_BUNDLE_IDENTIFIER = com.damer.mindfulness;
+				PRODUCT_NAME = HeyMama;
+				SKIP_INSTALL = NO;
 				SUPPORTED_PLATFORMS = "iphoneos iphonesimulator";
 				SUPPORTS_MACCATALYST = NO;
 				SUPPORTS_MAC_DESIGNED_FOR_IPHONE_IPAD = NO;
 				SUPPORTS_XR_DESIGNED_FOR_IPHONE_IPAD = NO;
 				SWIFT_OBJC_BRIDGING_HEADER = "client/client-Bridging-Header.h";
 				SWIFT_VERSION = 5.0;
-				TARGETED_DEVICE_FAMILY = "1,2";
+				TARGETED_DEVICE_FAMILY = 1;
 				VERSIONING_SYSTEM = "apple-generic";
 			};
 			name = Release;
@@ -571,6 +596,7 @@
 				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
 				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
 				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
 				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
 				CLANG_WARN_STRICT_PROTOTYPES = YES;
 				CLANG_WARN_SUSPICIOUS_MOVE = YES;
@@ -602,9 +628,11 @@
 				);
 				LIBRARY_SEARCH_PATHS = "$(SDKROOT)/usr/lib/swift\"$(inherited)\"";
 				MTL_ENABLE_DEBUG_INFO = YES;
-				ONLY_ACTIVE_ARCH = YES;
+				ONLY_ACTIVE_ARCH = NO;
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native";
 				SDKROOT = iphoneos;
+				SKIP_INSTALL = NO;
+				STRING_CATALOG_GENERATE_SYMBOLS = YES;
 				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "$(inherited) DEBUG";
 				SWIFT_ENABLE_EXPLICIT_MODULES = NO;
 				USE_HERMES = true;
@@ -634,6 +662,7 @@
 				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
 				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
 				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
 				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
 				CLANG_WARN_STRICT_PROTOTYPES = YES;
 				CLANG_WARN_SUSPICIOUS_MOVE = YES;
@@ -657,9 +686,13 @@
 					"$(inherited)",
 				);
 				LIBRARY_SEARCH_PATHS = "$(SDKROOT)/usr/lib/swift\"$(inherited)\"";
-				MTL_ENABLE_DEBUG_INFO = NO;
+				MTL_ENABLE_DEBUG_INFO = YES;
+				ONLY_ACTIVE_ARCH = YES;
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/.pnpm/react-native@0.81.5_@babel+core@7.28.6_@types+react@19.1.17_react@19.1.0/node_modules/react-native";
 				SDKROOT = iphoneos;
+				SKIP_INSTALL = NO;
+				STRING_CATALOG_GENERATE_SYMBOLS = YES;
+				SWIFT_COMPILATION_MODE = wholemodule;
 				SWIFT_ENABLE_EXPLICIT_MODULES = NO;
 				USE_HERMES = true;
 				VALIDATE_PRODUCT = YES;
@@ -680,7 +713,7 @@
 				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
 				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 1;
+				CURRENT_PROJECT_VERSION = 4;
 				DEBUG_INFORMATION_FORMAT = dwarf;
 				ENABLE_USER_SCRIPT_SANDBOXING = YES;
 				GCC_C_LANGUAGE_STANDARD = gnu17;
@@ -695,11 +728,11 @@
 					"@executable_path/../../Frameworks",
 				);
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
-				MARKETING_VERSION = 1.0.0;
+				MARKETING_VERSION = 1.0.1;
 				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
 				MTL_FAST_MATH = YES;
 				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_DEBUG";
-				PRODUCT_BUNDLE_IDENTIFIER = com.anonymous.client.emotionwidget;
+				PRODUCT_BUNDLE_IDENTIFIER = com.damer.mindfulness.emotionwidget;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SKIP_INSTALL = YES;
 				STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -713,7 +746,7 @@
 				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
 				SWIFT_UPCOMING_FEATURE_MEMBER_IMPORT_VISIBILITY = YES;
 				SWIFT_VERSION = 5.0;
-				TARGETED_DEVICE_FAMILY = "1,2";
+				TARGETED_DEVICE_FAMILY = 1;
 			};
 			name = Debug;
 		};
@@ -730,10 +763,12 @@
 				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
 				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
 				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CODE_SIGN_ENTITLEMENTS = "情绪小组件ExtensionRelease.entitlements";
 				CODE_SIGN_STYLE = Automatic;
 				COPY_PHASE_STRIP = NO;
-				CURRENT_PROJECT_VERSION = 1;
+				CURRENT_PROJECT_VERSION = 4;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				DEVELOPMENT_TEAM = WS92GPX9H2;
 				ENABLE_USER_SCRIPT_SANDBOXING = YES;
 				GCC_C_LANGUAGE_STANDARD = gnu17;
 				GENERATE_INFOPLIST_FILE = YES;
@@ -747,10 +782,10 @@
 					"@executable_path/../../Frameworks",
 				);
 				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
-				MARKETING_VERSION = 1.0.0;
+				MARKETING_VERSION = 1.0.1;
 				MTL_FAST_MATH = YES;
 				OTHER_SWIFT_FLAGS = "$(inherited) -D EXPO_CONFIGURATION_RELEASE";
-				PRODUCT_BUNDLE_IDENTIFIER = com.anonymous.client.emotionwidget;
+				PRODUCT_BUNDLE_IDENTIFIER = com.damer.mindfulness.emotionwidget;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SKIP_INSTALL = YES;
 				STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -763,7 +798,7 @@
 				SWIFT_EMIT_LOC_STRINGS = YES;
 				SWIFT_UPCOMING_FEATURE_MEMBER_IMPORT_VISIBILITY = YES;
 				SWIFT_VERSION = 5.0;
-				TARGETED_DEVICE_FAMILY = "1,2";
+				TARGETED_DEVICE_FAMILY = 1;
 			};
 			name = Release;
 		};
--- a/client/ios/client.xcodeproj/xcshareddata/xcschemes/client.xcscheme
+++ b/client/ios/client.xcodeproj/xcshareddata/xcschemes/client.xcscheme
@@ -1,10 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <Scheme
-   LastUpgradeVersion = "1130"
-   version = "1.3">
+   LastUpgradeVersion = "2620"
+   version = "1.7">
   <BuildAction
      parallelizeBuildables = "YES"
-      buildImplicitDependencies = "YES">
+      buildImplicitDependencies = "YES"
+      buildArchitectures = "Automatic">
      <BuildActionEntries>
         <BuildActionEntry
            buildForTesting = "YES"
@@ -15,7 +16,7 @@
            <BuildableReference
               BuildableIdentifier = "primary"
               BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
-               BuildableName = "client.app"
+               BuildableName = "HeyMama.app"
               BlueprintName = "client"
               ReferencedContainer = "container:client.xcodeproj">
            </BuildableReference>
@@ -26,19 +27,8 @@
      buildConfiguration = "Debug"
      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
-      shouldUseLaunchSchemeArgsEnv = "YES">
-      <Testables>
-         <TestableReference
-            skipped = "NO">
-            <BuildableReference
-               BuildableIdentifier = "primary"
-               BlueprintIdentifier = "00E356ED1AD99517003FC87E"
-               BuildableName = "clientTests.xctest"
-               BlueprintName = "clientTests"
-               ReferencedContainer = "container:client.xcodeproj">
-            </BuildableReference>
-         </TestableReference>
-      </Testables>
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      shouldAutocreateTestPlan = "YES">
   </TestAction>
   <LaunchAction
      buildConfiguration = "Debug"
@@ -55,7 +45,7 @@
         <BuildableReference
            BuildableIdentifier = "primary"
            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
-            BuildableName = "client.app"
+            BuildableName = "HeyMama.app"
            BlueprintName = "client"
            ReferencedContainer = "container:client.xcodeproj">
         </BuildableReference>
@@ -72,7 +62,7 @@
         <BuildableReference
            BuildableIdentifier = "primary"
            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
-            BuildableName = "client.app"
+            BuildableName = "HeyMama.app"
            BlueprintName = "client"
            ReferencedContainer = "container:client.xcodeproj">
         </BuildableReference>
@@ -83,6 +73,7 @@
   </AnalyzeAction>
   <ArchiveAction
      buildConfiguration = "Release"
+      customArchiveName = "Hey Mama"
      revealArchiveInOrganizer = "YES">
   </ArchiveAction>
 </Scheme>
--- a/client/ios/client.xcodeproj/xcshareddata/xcschemes/Copy
+++ b/client/ios/client.xcodeproj/xcshareddata/xcschemes/Copy
@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "2620"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES"
+      buildArchitectures = "Automatic">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+               BuildableName = "HeyMama.app"
+               BlueprintName = "client"
+               ReferencedContainer = "container:client.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      shouldAutocreateTestPlan = "YES">
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+            BuildableName = "HeyMama.app"
+            BlueprintName = "client"
+            ReferencedContainer = "container:client.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+            BuildableName = "HeyMama.app"
+            BlueprintName = "client"
+            ReferencedContainer = "container:client.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
--- a/client/ios/client.xcodeproj/xcshareddata/xcschemes/Hey
+++ b/client/ios/client.xcodeproj/xcshareddata/xcschemes/Hey
@@ -0,0 +1,100 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "2620"
+   version = "2.2">
+   <BuildAction
+      parallelizeBuildables = "NO"
+      buildImplicitDependencies = "YES">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <AutocreatedTestPlanReference>
+            </AutocreatedTestPlanReference>
+         </BuildActionEntry>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "E99E52E7F84CEF53B06494B581AFB6E4"
+               BuildableName = "libPods-client.a"
+               BlueprintName = "Pods-client"
+               ReferencedContainer = "container:Pods/Pods.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+               BuildableName = "HeyMama.app"
+               BlueprintName = "client"
+               ReferencedContainer = "container:client.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      shouldAutocreateTestPlan = "YES">
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+            BuildableName = "HeyMama.app"
+            BlueprintName = "client"
+            ReferencedContainer = "container:client.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
+            BuildableName = "HeyMama.app"
+            BlueprintName = "client"
+            ReferencedContainer = "container:client.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
--- a/client/ios/client/AppGroupStorage.swift
+++ b/client/ios/client/AppGroupStorage.swift
@@ -0,0 +1,57 @@
+import Foundation
+import React
+import WidgetKit
+
+/**
+ * App Group 共享存储（RN Bridge）
+ *
+ * 约定：
+ * - suiteName：group.com.damer.mindfulness（已在主 App 与 Widget Extension 的 entitlements 配置）
+ * - 值统一使用字符串（通常是 JSON），由 JS 侧负责序列化与反序列化
+ */
+@objc(AppGroupStorage)
+final class AppGroupStorage: NSObject, RCTBridgeModule {
+  static func moduleName() -> String! {
+    "AppGroupStorage"
+  }
+
+  static func requiresMainQueueSetup() -> Bool {
+    false
+  }
+
+  private let suiteName = "group.com.damer.mindfulness"
+
+  private func defaults() -> UserDefaults? {
+    UserDefaults(suiteName: suiteName)
+  }
+
+  @objc(setString:value:resolver:rejecter:)
+  func setString(_ key: String, value: String, resolver resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) {
+    guard let d = defaults() else {
+      reject("E_APP_GROUP", "无法初始化 App Group UserDefaults（suiteName=\(suiteName)）", nil)
+      return
+    }
+    d.set(value, forKey: key)
+    resolve(nil)
+  }
+
+  @objc(getString:resolver:rejecter:)
+  func getString(_ key: String, resolver resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) {
+    guard let d = defaults() else {
+      reject("E_APP_GROUP", "无法初始化 App Group UserDefaults（suiteName=\(suiteName)）", nil)
+      return
+    }
+    let v = d.string(forKey: key)
+    resolve(v)
+  }
+
+  /**
+   * 触发 Widget 刷新（系统仍可能延迟）
+   */
+  @objc(reloadAllTimelines:rejecter:)
+  func reloadAllTimelines(_ resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) {
+    WidgetCenter.shared.reloadAllTimelines()
+    resolve(nil)
+  }
+}
+
--- a/client/ios/client/AppGroupStorageBridge.m
+++ b/client/ios/client/AppGroupStorageBridge.m
@@ -0,0 +1,26 @@
+#import <React/RCTBridgeModule.h>
+
+/**
+ * Swift 模块桥接导出文件（必须）
+ *
+ * 说明：
+ * - React Native 对 Swift 的方法导出通常需要通过 RCT_EXTERN_MODULE / RCT_EXTERN_METHOD
+ * - 否则 JS 侧可能能拿到 NativeModules.AppGroupStorage，但方法为 undefined
+ */
+
+@interface RCT_EXTERN_MODULE(AppGroupStorage, NSObject)
+
+RCT_EXTERN_METHOD(setString:(NSString *)key
+                  value:(NSString *)value
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(getString:(NSString *)key
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(reloadAllTimelines:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+@end
+
--- a/client/ios/client/Images.xcassets/AppIcon.appiconset/App-Icon-1024x1024@1x.png
+++ b/client/ios/client/Images.xcassets/AppIcon.appiconset/App-Icon-1024x1024@1x.png
--- a/client/ios/client/Info.plist
+++ b/client/ios/client/Info.plist
@@ -7,7 +7,7 @@
 	<key>CFBundleDevelopmentRegion</key>
 	<string>$(DEVELOPMENT_LANGUAGE)</string>
 	<key>CFBundleDisplayName</key>
-    <string>client</string>
+	<string>Hey Mama</string>
 	<key>CFBundleExecutable</key>
 	<string>$(EXECUTABLE_NAME)</string>
 	<key>CFBundleIdentifier</key>
@@ -19,7 +19,7 @@
 	<key>CFBundlePackageType</key>
 	<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
 	<key>CFBundleShortVersionString</key>
-    <string>1.0.0</string>
+	<string>$(MARKETING_VERSION)</string>
 	<key>CFBundleSignature</key>
 	<string>????</string>
 	<key>CFBundleURLTypes</key>
@@ -28,12 +28,12 @@
 			<key>CFBundleURLSchemes</key>
 			<array>
 				<string>client</string>
-          <string>com.anonymous.client</string>
+				<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
 			</array>
 		</dict>
 	</array>
 	<key>CFBundleVersion</key>
-    <string>1</string>
+	<string>$(CURRENT_PROJECT_VERSION)</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>12.0</string>
 	<key>LSRequiresIPhoneOS</key>
--- a/client/ios/client/client-Bridging-Header.h
+++ b/client/ios/client/client-Bridging-Header.h
@@ -1,3 +1,10 @@
 //
 // Use this file to import your target's public headers that you would like to expose to Swift.
 //
+
+// 说明：
+// - 部分环境下仅 `import React` 可能无法在 Swift 中解析到 RCTBridge 等类型
+// - 通过 Bridging Header 显式引入需要的 React 头文件，保证 AppDelegate.swift 可编译
+#import <React/RCTBridge.h>
+#import <React/RCTBundleURLProvider.h>
+#import <React/RCTLinkingManager.h>
--- a/client/ios/client/client.entitlements
+++ b/client/ios/client/client.entitlements
@@ -3,6 +3,11 @@
 <plist version="1.0">
  <dict>
    <key>aps-environment</key>
-    <string>development</string>
+    <string>production</string>
+    <!-- iOS 小组件需要通过 App Group 与主 App 共享数据 -->
+    <key>com.apple.security.application-groups</key>
+    <array>
+      <string>group.com.damer.mindfulness</string>
+    </array>
  </dict>
 </plist>
--- a/client/ios/client/clientRelease.entitlements
+++ b/client/ios/client/clientRelease.entitlements
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>aps-environment</key>
+	<string>production</string>
+	<key>com.apple.security.application-groups</key>
+	<array>
+		<string>group.com.damer.mindfulness</string>
+	</array>
+</dict>
+</plist>
--- a/client/ios/scripts/fix-xcarchive-header.sh
+++ b/client/ios/scripts/fix-xcarchive-header.sh
@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# 修复 Xcode Organizer 显示 “Generic Xcode Archive” 的问题：
+# - 某些情况下 xcodebuild 生成的 .xcarchive/Info.plist 缺少 ApplicationProperties
+# - Organizer 无法识别归档中的主 App（即使 Products/Applications/*.app 存在）
+#
+# 用法：
+#   ./scripts/fix-xcarchive-header.sh "/path/to/xxx.xcarchive"
+
+ARCHIVE_PATH="${1:-}"
+if [[ -z "$ARCHIVE_PATH" ]]; then
+  echo "用法: $0 \"/path/to/xxx.xcarchive\"" >&2
+  exit 2
+fi
+
+if [[ ! -d "$ARCHIVE_PATH" ]]; then
+  echo "错误：找不到归档目录：$ARCHIVE_PATH" >&2
+  exit 2
+fi
+
+ARCHIVE_INFO_PLIST="$ARCHIVE_PATH/Info.plist"
+if [[ ! -f "$ARCHIVE_INFO_PLIST" ]]; then
+  echo "错误：找不到归档 Info.plist：$ARCHIVE_INFO_PLIST" >&2
+  exit 2
+fi
+
+# 取第一个 App（归档里通常只有一个主 App）
+APP_PLIST="$(/usr/bin/find "$ARCHIVE_PATH/Products/Applications" -maxdepth 2 -name Info.plist -path "*.app/Info.plist" 2>/dev/null | /usr/bin/head -n 1 || true)"
+if [[ -z "$APP_PLIST" ]]; then
+  echo "错误：归档中未找到 Products/Applications/*.app/Info.plist（请先确保归档产出包含 .app）" >&2
+  exit 2
+fi
+
+APP_DIR="$(/usr/bin/dirname "$APP_PLIST")"
+APP_NAME="$(/usr/bin/basename "$APP_DIR")" # 例如 HeyMama.app
+APP_REL_PATH="Applications/$APP_NAME"
+
+bundle_id="$(/usr/bin/plutil -extract CFBundleIdentifier raw -o - "$APP_PLIST" 2>/dev/null || true)"
+short_version="$(/usr/bin/plutil -extract CFBundleShortVersionString raw -o - "$APP_PLIST" 2>/dev/null || true)"
+build_version="$(/usr/bin/plutil -extract CFBundleVersion raw -o - "$APP_PLIST" 2>/dev/null || true)"
+
+if [[ -z "$bundle_id" || -z "$short_version" || -z "$build_version" ]]; then
+  echo "错误：无法从 App Info.plist 读取 bundle/version/build：$APP_PLIST" >&2
+  exit 2
+fi
+
+# 解析 embedded.mobileprovision（若存在）
+profile_name=""
+profile_uuid=""
+team_id=""
+provision_path="$APP_DIR/embedded.mobileprovision"
+if [[ -f "$provision_path" ]]; then
+  decoded="$(/usr/bin/security cms -D -i "$provision_path" 2>/dev/null || true)"
+  if [[ -n "$decoded" ]]; then
+    # 使用 plutil 从 xml 中提取字段
+    profile_name="$(printf "%s" "$decoded" | /usr/bin/plutil -extract Name raw -o - - 2>/dev/null || true)"
+    profile_uuid="$(printf "%s" "$decoded" | /usr/bin/plutil -extract UUID raw -o - - 2>/dev/null || true)"
+    team_id="$(printf "%s" "$decoded" | /usr/bin/plutil -extract TeamIdentifier.0 raw -o - - 2>/dev/null || true)"
+  fi
+fi
+
+# 备份一份，防止误操作
+cp -f "$ARCHIVE_INFO_PLIST" "$ARCHIVE_INFO_PLIST.bak"
+
+# 如果已有 ApplicationProperties，直接更新关键字段即可
+if /usr/bin/plutil -extract ApplicationProperties xml1 -o - "$ARCHIVE_INFO_PLIST" >/dev/null 2>&1; then
+  /usr/bin/plutil -replace ApplicationProperties.ApplicationPath -string "$APP_REL_PATH" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -replace ApplicationProperties.CFBundleIdentifier -string "$bundle_id" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -replace ApplicationProperties.CFBundleShortVersionString -string "$short_version" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -replace ApplicationProperties.CFBundleVersion -string "$build_version" "$ARCHIVE_INFO_PLIST"
+else
+  # 新增 ApplicationProperties（注意：plutil 的空字典/数组类型是 -dictionary / -array）
+  /usr/bin/plutil -insert ApplicationProperties -dictionary "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.ApplicationPath -string "$APP_REL_PATH" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.CFBundleIdentifier -string "$bundle_id" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.CFBundleShortVersionString -string "$short_version" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.CFBundleVersion -string "$build_version" "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.Architectures -array "$ARCHIVE_INFO_PLIST"
+  /usr/bin/plutil -insert ApplicationProperties.Architectures.0 -string "arm64" "$ARCHIVE_INFO_PLIST"
+fi
+
+# 可选字段：Provisioning Profile 信息（不保证一定存在）
+if [[ -n "$profile_name" ]]; then
+  /usr/bin/plutil -replace ApplicationProperties.ProvisioningProfileName -string "$profile_name" "$ARCHIVE_INFO_PLIST" 2>/dev/null || \
+  /usr/bin/plutil -insert ApplicationProperties.ProvisioningProfileName -string "$profile_name" "$ARCHIVE_INFO_PLIST"
+fi
+if [[ -n "$profile_uuid" ]]; then
+  /usr/bin/plutil -replace ApplicationProperties.ProvisioningProfileUUID -string "$profile_uuid" "$ARCHIVE_INFO_PLIST" 2>/dev/null || \
+  /usr/bin/plutil -insert ApplicationProperties.ProvisioningProfileUUID -string "$profile_uuid" "$ARCHIVE_INFO_PLIST"
+fi
+if [[ -n "$team_id" ]]; then
+  /usr/bin/plutil -replace ApplicationProperties.Team -string "$team_id" "$ARCHIVE_INFO_PLIST" 2>/dev/null || \
+  /usr/bin/plutil -insert ApplicationProperties.Team -string "$team_id" "$ARCHIVE_INFO_PLIST"
+fi
+
+echo "已修复归档 header：$ARCHIVE_INFO_PLIST"
+echo "主 App：$APP_REL_PATH"
+echo "Bundle：$bundle_id"
+echo "Version/Build：$short_version/$build_version"
--- a/client/ios/情绪小组件/EmotionWidget.swift
+++ b/client/ios/情绪小组件/EmotionWidget.swift
@@ -1,49 +1,261 @@
+import Foundation
 import WidgetKit
 import SwiftUI

-// V1：写死文案的小组件（Small/Medium/Large + 点击跳转 Home）
+// Daily Widget Reco：从 App Group 读取缓存；过期则请求后端 /v1/reco/widget；每日刷新（尽力而为）
+
+private let appGroupSuiteName = "group.com.damer.mindfulness"
+private let keyWidgetConfig = "widget.config.v1"
+private let keyWidgetUserProfile = "widget.userProfile.v1_2"
+private let keyWidgetDailyReco = "widget.dailyReco.v1"
+
+private let fallbackTextTC = "你已经很努力了，今天也值得被温柔对待。"
+private let fallbackTextEN = "You’ve been doing great — you deserve kindness today."
+
+private func defaults() -> UserDefaults? {
+    UserDefaults(suiteName: appGroupSuiteName)
+}
+
+private func isoNow() -> String {
+    ISO8601DateFormatter().string(from: Date())
+}
+
+private func localDayKey(_ date: Date = Date()) -> String {
+    let fmt = DateFormatter()
+    fmt.calendar = Calendar.current
+    fmt.timeZone = TimeZone.current
+    fmt.dateFormat = "yyyy-MM-dd"
+    return fmt.string(from: date)
+}
+
+private func resolveLang() -> String {
+    // 仅支持 en/tc
+    let preferred = Locale.preferredLanguages.first?.lowercased() ?? "en"
+    return preferred.hasPrefix("zh") ? "tc" : "en"
+}
+
+private func resolveTitle(lang: String) -> String {
+    lang == "en" ? "Mindfulness" : "正念"
+}
+
+private func resolveFooterHint(lang: String) -> String {
+    lang == "en" ? "Tap to open the app" : "点我回到 App"
+}
+
+private func joinUrl(base: String, path: String) -> String {
+    let b = base.trimmingCharacters(in: .whitespacesAndNewlines).replacingOccurrences(of: "/+$", with: "", options: .regularExpression)
+    if path.hasPrefix("/") { return "\(b)\(path)" }
+    return "\(b)/\(path)"
+}
+
+private func nextDailyRefreshDate(from now: Date) -> Date {
+    // 下一天 00:10～01:00 之间随机一个时间点（用户本地时区）
+    var cal = Calendar.current
+    cal.timeZone = TimeZone.current
+    guard let tomorrow = cal.date(byAdding: .day, value: 1, to: now) else {
+        return now.addingTimeInterval(60 * 60 * 6)
+    }
+    let start = cal.startOfDay(for: tomorrow)
+    let minDate = cal.date(byAdding: .minute, value: 10, to: start) ?? start.addingTimeInterval(60 * 10)
+    let maxDate = cal.date(byAdding: .hour, value: 1, to: start) ?? start.addingTimeInterval(60 * 60)
+    let interval = max(0, maxDate.timeIntervalSince(minDate))
+    let jitter = interval > 0 ? Double.random(in: 0..<interval) : 0
+    return minDate.addingTimeInterval(jitter)
+}
+
+private func readJsonDict(forKey key: String) -> [String: Any]? {
+    guard let raw = defaults()?.string(forKey: key) else { return nil }
+    guard let data = raw.data(using: .utf8) else { return nil }
+    let obj = try? JSONSerialization.jsonObject(with: data, options: [])
+    return obj as? [String: Any]
+}
+
+private func writeJsonDict(_ dict: [String: Any], forKey key: String) {
+    guard let data = try? JSONSerialization.data(withJSONObject: dict, options: []) else { return }
+    guard let raw = String(data: data, encoding: .utf8) else { return }
+    defaults()?.set(raw, forKey: key)
+}
+
+private func readCachedText() -> (dayKey: String?, lang: String, text: String)? {
+    guard let d = readJsonDict(forKey: keyWidgetDailyReco) else { return nil }
+    let lang = (d["lang"] as? String) ?? resolveLang()
+    let dayKey = d["day_key"] as? String
+    if let item = d["item"] as? [String: Any], let text = item["text"] as? String, !text.isEmpty {
+        return (dayKey: dayKey, lang: lang, text: text)
+    }
+    return nil
+}
+
+private func readApiBaseUrl() -> String? {
+    guard let d = readJsonDict(forKey: keyWidgetConfig) else { return nil }
+    let base = d["apiBaseUrl"] as? String
+    return base?.trimmingCharacters(in: .whitespacesAndNewlines)
+}
+
+private func readUserProfileDict() -> [String: Any]? {
+    guard let d = readJsonDict(forKey: keyWidgetUserProfile) else { return nil }
+    return d["user_profile"] as? [String: Any]
+}
+
+private func saveDailyReco(lang: String, dayKey: String, contentId: Int, text: String, meta: [String: Any]?) {
+    var dict: [String: Any] = [
+        "schema_version": 1,
+        "saved_at": isoNow(),
+        "day_key": dayKey,
+        "lang": lang,
+        "source": "widget",
+        "item": [
+            "content_id": contentId,
+            "text": text
+        ]
+    ]
+    if let meta = meta { dict["meta"] = meta }
+    writeJsonDict(dict, forKey: keyWidgetDailyReco)
+}
+
+private func fetchDailyRecoFromServer() async -> (lang: String, text: String, contentId: Int, meta: [String: Any]?)? {
+    guard let baseUrl = readApiBaseUrl(), !baseUrl.isEmpty else { return nil }
+    guard let userProfile = readUserProfileDict() else { return nil }
+
+    let lang = resolveLang()
+    let urlStr = joinUrl(base: baseUrl, path: "/v1/reco/widget")
+    guard let url = URL(string: urlStr) else { return nil }
+
+    var req = URLRequest(url: url)
+    req.httpMethod = "POST"
+    req.timeoutInterval = 12
+    req.setValue("application/json", forHTTPHeaderField: "Content-Type")
+    req.setValue(lang, forHTTPHeaderField: "Accept-Language")
+
+    let body: [String: Any] = [
+        "k": 1,
+        "user_profile": userProfile,
+        "already_recommended_ids": [],
+        "touched_or_viewed_ids": []
+    ]
+    req.httpBody = try? JSONSerialization.data(withJSONObject: body, options: [])
+
+    do {
+        let (data, res) = try await URLSession.shared.data(for: req)
+        guard let httpRes = res as? HTTPURLResponse, (200..<300).contains(httpRes.statusCode) else { return nil }
+
+        let obj = try JSONSerialization.jsonObject(with: data, options: [])
+        guard let root = obj as? [String: Any] else { return nil }
+        guard let items = root["items"] as? [[String: Any]], let first = items.first else { return nil }
+        guard let text = first["text"] as? String, !text.isEmpty else { return nil }
+        let contentId = (first["content_id"] as? Int) ?? Int((first["content_id"] as? NSNumber)?.intValue ?? -1)
+        if contentId < 0 { return nil }
+        let meta = root["meta"] as? [String: Any]
+        return (lang: lang, text: text, contentId: contentId, meta: meta)
+    } catch {
+        return nil
+    }
+}

 struct EmotionProvider: TimelineProvider {
    func placeholder(in context: Context) -> EmotionEntry {
-        EmotionEntry(date: Date())
+        let lang = resolveLang()
+        return EmotionEntry(
+            date: Date(),
+            lang: lang,
+            title: resolveTitle(lang: lang),
+            text: lang == "en" ? fallbackTextEN : fallbackTextTC,
+            footerHint: resolveFooterHint(lang: lang)
+        )
    }

    func getSnapshot(in context: Context, completion: @escaping (EmotionEntry) -> ()) {
-        completion(EmotionEntry(date: Date()))
+        completion(placeholder(in: context))
    }

    func getTimeline(in context: Context, completion: @escaping (Timeline<EmotionEntry>) -> ()) {
-        // V1：内容写死，不做数据更新；给一个较长的刷新间隔（系统仍可能自行调度）
-        let entry = EmotionEntry(date: Date())
-        let nextUpdate = Calendar.current.date(byAdding: .day, value: 7, to: Date())
-            ?? Date().addingTimeInterval(60 * 60 * 24 * 7)
-        completion(Timeline(entries: [entry], policy: .after(nextUpdate)))
+        Task {
+            let lang = resolveLang()
+            let today = localDayKey(Date())
+
+            // 1) 今日缓存优先
+            if let cached = readCachedText(), cached.dayKey == today {
+                let entry = EmotionEntry(
+                    date: Date(),
+                    lang: cached.lang,
+                    title: resolveTitle(lang: cached.lang),
+                    text: cached.text,
+                    footerHint: resolveFooterHint(lang: cached.lang)
+                )
+                completion(Timeline(entries: [entry], policy: .after(nextDailyRefreshDate(from: Date()))))
+                return
+            }
+
+            // 2) 过期/缺失：尝试拉取后端
+            if let fetched = await fetchDailyRecoFromServer() {
+                saveDailyReco(lang: fetched.lang, dayKey: today, contentId: fetched.contentId, text: fetched.text, meta: fetched.meta)
+                let entry = EmotionEntry(
+                    date: Date(),
+                    lang: fetched.lang,
+                    title: resolveTitle(lang: fetched.lang),
+                    text: fetched.text,
+                    footerHint: resolveFooterHint(lang: fetched.lang)
+                )
+                completion(Timeline(entries: [entry], policy: .after(nextDailyRefreshDate(from: Date()))))
+                return
+            }
+
+            // 3) 网络失败：用最近缓存或兜底
+            if let cached = readCachedText() {
+                let entry = EmotionEntry(
+                    date: Date(),
+                    lang: cached.lang,
+                    title: resolveTitle(lang: cached.lang),
+                    text: cached.text,
+                    footerHint: resolveFooterHint(lang: cached.lang)
+                )
+                completion(Timeline(entries: [entry], policy: .after(nextDailyRefreshDate(from: Date()))))
+                return
+            }
+
+            let entry = EmotionEntry(
+                date: Date(),
+                lang: lang,
+                title: resolveTitle(lang: lang),
+                text: lang == "en" ? fallbackTextEN : fallbackTextTC,
+                footerHint: resolveFooterHint(lang: lang)
+            )
+            completion(Timeline(entries: [entry], policy: .after(nextDailyRefreshDate(from: Date()))))
+        }
    }
 }

 struct EmotionEntry: TimelineEntry {
    let date: Date
+    let lang: String
+    let title: String
+    let text: String
+    let footerHint: String
 }

 struct EmotionWidgetView: View {
    var entry: EmotionProvider.Entry
    @Environment(\.widgetFamily) var family
-
-    private let title = "正念"
-    private let text = "你已经很努力了，今天也值得被温柔对待。"
    private let deepLink = URL(string: "client:///(app)/home")

    var body: some View {
-        switch family {
-        case .systemSmall:
-            smallView()
-        case .systemMedium:
-            mediumView()
-        case .systemLarge:
-            largeView()
-        default:
-            smallView()
+        ZStack {
+            cardBackground(colors: [
+                Color(red: 0.06, green: 0.08, blue: 0.12),
+                Color(red: 0.14, green: 0.18, blue: 0.28),
+            ])
+
+            // 只显示一句话（不显示标题/提示/时间等装饰元素）
+            Text(entry.text)
+                .font(fontForFamily())
+                .foregroundColor(Color.white.opacity(0.92))
+                .multilineTextAlignment(.leading)
+                .lineSpacing(lineSpacingForFamily())
+                .lineLimit(lineLimitForFamily())
+                .minimumScaleFactor(0.78)
+                .padding(paddingForFamily())
        }
+        .widgetURL(deepLink)
    }

    // 统一的“卡片背景”风格（iOS 15 兼容）
@@ -69,122 +281,52 @@ struct EmotionWidgetView: View {
        .cornerRadius(18)
    }

-    private func chip(_ text: String) -> some View {
-        Text(text)
-            .font(.system(size: 12, weight: .semibold))
-            .foregroundColor(Color.white.opacity(0.9))
-            .padding(.horizontal, 10)
-            .padding(.vertical, 6)
-            .background(Color.white.opacity(0.14))
-            .cornerRadius(999)
-    }
-
-    private func smallView() -> some View {
-        ZStack {
-            cardBackground(colors: [
-                Color(red: 0.06, green: 0.08, blue: 0.12),
-                Color(red: 0.13, green: 0.16, blue: 0.22),
-            ])
-
-            VStack(alignment: .leading, spacing: 10) {
-                HStack {
-                    chip(title)
-                    Spacer(minLength: 0)
-                }
-
-                Text(text)
-                    .font(.system(size: 15, weight: .semibold))
-                    .foregroundColor(Color.white.opacity(0.92))
-                    .lineSpacing(2)
-                    .lineLimit(4)
-
-                Spacer(minLength: 0)
-
-                Text("点我回到 App")
-                    .font(.system(size: 11, weight: .medium))
-                    .foregroundColor(Color.white.opacity(0.65))
-            }
-            .padding(14)
-        }
-        .widgetURL(deepLink)
-    }
-
-    private func mediumView() -> some View {
-        ZStack {
-            cardBackground(colors: [
-                Color(red: 0.06, green: 0.08, blue: 0.12),
-                Color(red: 0.09, green: 0.11, blue: 0.17),
-            ])
-
-            HStack(alignment: .top, spacing: 14) {
-                VStack(alignment: .leading, spacing: 10) {
-                    chip(title)
-                    Text(text)
-                        .font(.system(size: 17, weight: .semibold))
-                        .foregroundColor(Color.white.opacity(0.92))
-                        .lineSpacing(3)
-                        .lineLimit(5)
-
-                    Spacer(minLength: 0)
-
-                    Text("轻轻呼吸，回到当下")
-                        .font(.system(size: 12, weight: .medium))
-                        .foregroundColor(Color.white.opacity(0.7))
-                }
-
-                // 右侧装饰区：让版面更饱满
-                VStack(alignment: .trailing, spacing: 8) {
-                    Text(entry.date, style: .time)
-                        .font(.system(size: 12, weight: .semibold))
-                        .foregroundColor(Color.white.opacity(0.8))
-                    Spacer(minLength: 0)
-                    Text("今日")
-                        .font(.system(size: 28, weight: .bold))
-                        .foregroundColor(Color.white.opacity(0.12))
+    private func fontForFamily() -> Font {
+        switch family {
+        case .systemSmall:
+            return .system(size: 16, weight: .semibold)
+        case .systemMedium:
+            return .system(size: 18, weight: .semibold)
+        case .systemLarge:
+            return .system(size: 22, weight: .semibold)
+        default:
+            return .system(size: 16, weight: .semibold)
        }
    }
-            .padding(16)
+
+    private func lineSpacingForFamily() -> CGFloat {
+        switch family {
+        case .systemLarge:
+            return 4
+        default:
+            return 3
        }
-        .widgetURL(deepLink)
    }

-    private func largeView() -> some View {
-        ZStack {
-            cardBackground(colors: [
-                Color(red: 0.06, green: 0.08, blue: 0.12),
-                Color(red: 0.14, green: 0.18, blue: 0.28),
-            ])
-
-            VStack(alignment: .leading, spacing: 14) {
-                HStack {
-                    chip(title)
-                    Spacer(minLength: 0)
-                    Text(entry.date, style: .time)
-                        .font(.system(size: 12, weight: .semibold))
-                        .foregroundColor(Color.white.opacity(0.78))
-                }
-
-                Text(text)
-                    .font(.system(size: 20, weight: .semibold))
-                    .foregroundColor(Color.white.opacity(0.92))
-                    .lineSpacing(4)
-                    .lineLimit(8)
-
-                Spacer(minLength: 0)
-
-                HStack {
-                    Text("点我回到 Home")
-                        .font(.system(size: 12, weight: .medium))
-                        .foregroundColor(Color.white.opacity(0.7))
-                    Spacer(minLength: 0)
-                    Text("🌿")
-                        .font(.system(size: 18))
-                        .opacity(0.9)
+    private func lineLimitForFamily() -> Int {
+        switch family {
+        case .systemSmall:
+            return 5
+        case .systemMedium:
+            return 6
+        case .systemLarge:
+            return 8
+        default:
+            return 5
        }
    }
-            .padding(18)
+
+    private func paddingForFamily() -> CGFloat {
+        switch family {
+        case .systemSmall:
+            return 14
+        case .systemMedium:
+            return 16
+        case .systemLarge:
+            return 18
+        default:
+            return 14
        }
-        .widgetURL(deepLink)
    }
 }

--- a/client/ios/情绪小组件ExtensionRelease.entitlements
+++ b/client/ios/情绪小组件ExtensionRelease.entitlements
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.application-groups</key>
+	<array>
+		<string>group.com.damer.mindfulness</string>
+	</array>
+</dict>
+</plist>
--- a/client/package.json
+++ b/client/package.json
@@ -5,7 +5,7 @@
  "scripts": {
    "start": "expo start",
    "android": "expo run:android",
-    "ios": "expo run:ios",
+    "ios": "expo run:ios --scheme \"Hey Mama\"",
    "web": "expo start --web",
    "test": "vitest run"
  },
@@ -15,7 +15,9 @@
    "@react-navigation/native": "^7.1.8",
    "expo": "~54.0.32",
    "expo-constants": "~18.0.13",
+    "expo-crypto": "^15.0.8",
    "expo-dev-client": "^6.0.20",
+    "expo-device": "^8.0.10",
    "expo-font": "~14.0.11",
    "expo-linear-gradient": "^15.0.8",
    "expo-linking": "~8.0.11",
--- a/client/pnpm-lock.yaml
+++ b/client/pnpm-lock.yaml
@@ -23,9 +23,15 @@ importers:
      expo-constants:
        specifier: ~18.0.13
        version: 18.0.13(expo@54.0.32)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-crypto:
+        specifier: ^15.0.8
+        version: 15.0.8(expo@54.0.32)
      expo-dev-client:
        specifier: ^6.0.20
        version: 6.0.20(expo@54.0.32)
+      expo-device:
+        specifier: ^8.0.10
+        version: 8.0.10(expo@54.0.32)
      expo-font:
        specifier: ~14.0.11
        version: 14.0.11(expo@54.0.32)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -2229,6 +2235,11 @@ packages:
      expo: '*'
      react-native: '*'

+  expo-crypto@15.0.8:
+    resolution: {integrity: sha512-aF7A914TB66WIlTJvl5J6/itejfY78O7dq3ibvFltL9vnTALJ/7LYHvLT4fwmx9yUNS6ekLBtDGWivFWnj2Fcw==}
+    peerDependencies:
+      expo: '*'
+
  expo-dev-client@6.0.20:
    resolution: {integrity: sha512-5XjoVlj1OxakNxy55j/AUaGPrDOlQlB6XdHLLWAw61w5ffSpUDHDnuZzKzs9xY1eIaogOqTOQaAzZ2ddBkdXLA==}
    peerDependencies:
@@ -2249,6 +2260,11 @@ packages:
    peerDependencies:
      expo: '*'

+  expo-device@8.0.10:
+    resolution: {integrity: sha512-jd5BxjaF7382JkDMaC+P04aXXknB2UhWaVx5WiQKA05ugm/8GH5uaz9P9ckWdMKZGQVVEOC8MHaUADoT26KmFA==}
+    peerDependencies:
+      expo: '*'
+
  expo-file-system@19.0.21:
    resolution: {integrity: sha512-s3DlrDdiscBHtab/6W1osrjGL+C2bvoInPJD7sOwmxfJ5Woynv2oc+Fz1/xVXaE/V7HE/+xrHC/H45tu6lZzzg==}
    peerDependencies:
@@ -3811,6 +3827,10 @@ packages:
    engines: {node: '>=14.17'}
    hasBin: true

+  ua-parser-js@0.7.41:
+    resolution: {integrity: sha512-O3oYyCMPYgNNHuO7Jjk3uacJWZF8loBgwrfd/5LE/HyZ3lUIOdniQ7DNXJcIgZbwioZxk0fLfI4EVnetdiX5jg==}
+    hasBin: true
+
  ua-parser-js@1.0.41:
    resolution: {integrity: sha512-LbBDqdIC5s8iROCUjMbW1f5dJQTEFB1+KO9ogbvlb3nm9n4YHa5p4KTvFPWvh2Hs8gZMBuiB1/8+pdfe/tDPug==}
    hasBin: true
@@ -6537,6 +6557,11 @@ snapshots:
    transitivePeerDependencies:
      - supports-color

+  expo-crypto@15.0.8(expo@54.0.32):
+    dependencies:
+      base64-js: 1.5.1
+      expo: 54.0.32(@babel/core@7.28.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.22)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+
  expo-dev-client@6.0.20(expo@54.0.32):
    dependencies:
      expo: 54.0.32(@babel/core@7.28.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.22)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -6566,6 +6591,11 @@ snapshots:
      expo: 54.0.32(@babel/core@7.28.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.22)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
      expo-dev-menu-interface: 2.0.0(expo@54.0.32)

+  expo-device@8.0.10(expo@54.0.32):
+    dependencies:
+      expo: 54.0.32(@babel/core@7.28.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.22)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      ua-parser-js: 0.7.41
+
  expo-file-system@19.0.21(expo@54.0.32)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0)):
    dependencies:
      expo: 54.0.32(@babel/core@7.28.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.22)(react-native@0.81.5(@babel/core@7.28.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -8282,6 +8312,8 @@ snapshots:

  typescript@5.9.3: {}

+  ua-parser-js@0.7.41: {}
+
  ua-parser-js@1.0.41: {}

  undici-types@7.16.0: {}
--- a/client/src/constants/env.ts
+++ b/client/src/constants/env.ts
@@ -34,13 +34,33 @@ function getApiBaseUrl(env: AppRuntimeEnv): string {
    return getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_LOCAL', 'http://localhost:8000');
  }
  if (env === 'dev') {
-    return getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_DEV', getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_LOCAL', 'http://localhost:8000'));
+    return getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_DEV', getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_LOCAL', 'https://api.damer.fun'));
  }
-  return getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_PROD', getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_LOCAL', 'http://localhost:8000'));
+  return getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_PROD', getOptionalEnv('EXPO_PUBLIC_API_BASE_URL_LOCAL', 'https://api.damer.fun'));
 }

 export const API_BASE_URL = getApiBaseUrl(APP_ENV);

+/**
+ * 调试：打印环境变量注入结果（仅开发环境）
+ *
+ * 用途：排查「为什么 API_BASE_URL 不是预期值」的问题（例如 .env.local/命令行注入/缓存导致）。
+ *
+ * 注意：在某些测试环境（如 vitest）里 `__DEV__` 可能不存在，需做兼容判断。
+ */
+if (typeof __DEV__ !== 'undefined' && __DEV__) {
+  const injected = {
+    EXPO_PUBLIC_ENV: process.env.EXPO_PUBLIC_ENV,
+    EXPO_PUBLIC_API_BASE_URL: process.env.EXPO_PUBLIC_API_BASE_URL,
+    EXPO_PUBLIC_API_BASE_URL_LOCAL: process.env.EXPO_PUBLIC_API_BASE_URL_LOCAL,
+    EXPO_PUBLIC_API_BASE_URL_DEV: process.env.EXPO_PUBLIC_API_BASE_URL_DEV,
+    EXPO_PUBLIC_API_BASE_URL_PROD: process.env.EXPO_PUBLIC_API_BASE_URL_PROD,
+  };
+  console.log('[Env] 注入的 EXPO_PUBLIC_*（用于 API_BASE_URL 计算）:', injected);
+  console.log('[Env] 解析得到 APP_ENV:', APP_ENV);
+  console.log('[Env] 解析得到 API_BASE_URL:', API_BASE_URL);
+}
+
 /**
 * 默认语言策略：
 * - auto：优先设备语言（支持列表内时），否则回退 en
--- a/client/src/i18n/locales/zh-CN.json
+++ b/client/src/i18n/locales/zh-CN.json
@@ -30,7 +30,7 @@
    "later": "稍后",
    "loading": "处理中…",
    "errorTitle": "提示",
-    "errorDesc": "开启失败也没关系，你仍然可以继续使用应用。"
+    "errorDesc": "开启失败，请稍后重试（模拟器可能无法获取推送 Token，建议用真机测试）。"
  },
  "home": {
    "title": "正念",
--- a/client/src/modules/dailyWidgetReco/index.ts
+++ b/client/src/modules/dailyWidgetReco/index.ts
@@ -0,0 +1,173 @@
+import { API_BASE_URL } from '@/src/constants/env';
+import type { UserProfileV1_2, UserProfileV1_2_Extended } from '@/src/features/userProfileScoring/types';
+import { fetchRecoWidget } from '@/src/services/recoApi';
+import i18n from 'i18next';
+import { getUserProfileScoring } from '@/src/storage/appStorage';
+import { getLocalDayKey } from '@/src/utils/date';
+
+import {
+  appGroupGetString,
+  appGroupReloadAllTimelines,
+  appGroupSetString,
+  isAppGroupStorageAvailable,
+} from '@/src/services/appGroupStorage';
+
+/**
+ * App Group 共享 key（App ↔ Widget 共通）
+ */
+export const WIDGET_CONFIG_KEY = 'widget.config.v1';
+export const WIDGET_USER_PROFILE_KEY = 'widget.userProfile.v1_2';
+export const WIDGET_DAILY_RECO_KEY = 'widget.dailyReco.v1';
+
+export type WidgetConfigV1 = {
+  schema_version: 1;
+  saved_at: string; // ISO8601
+  apiBaseUrl: string;
+};
+
+export type WidgetUserProfileV1_2 = {
+  schema_version: 1;
+  saved_at: string; // ISO8601
+  user_profile: UserProfileV1_2;
+};
+
+export type WidgetDailyRecoV1 = {
+  schema_version: 1;
+  saved_at: string; // ISO8601
+  day_key: string; // YYYY-MM-DD（用户时区）
+  lang: 'en' | 'tc';
+  item: null | {
+    content_id: number;
+    text: string;
+    final_score?: number;
+    fallback_level_final?: number;
+  };
+  meta?: Record<string, unknown>;
+  source?: 'app' | 'widget';
+};
+
+function safeJsonParse<T>(raw: string | null): T | null {
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw) as T;
+  } catch {
+    return null;
+  }
+}
+
+function pickUserProfileV1_2(scoringProfile: UserProfileV1_2_Extended): UserProfileV1_2 {
+  return {
+    profile_version: scoringProfile.profile_version,
+    profile_source: scoringProfile.profile_source,
+    profile_generated_at: scoringProfile.profile_generated_at,
+    profile_confidence: scoringProfile.profile_confidence,
+    profile_answered: scoringProfile.profile_answered,
+    stage: scoringProfile.stage,
+    emotion_score: scoringProfile.emotion_score,
+    context: scoringProfile.context,
+    need: scoringProfile.need,
+  };
+}
+
+export async function syncWidgetConfig(): Promise<void> {
+  if (!isAppGroupStorageAvailable()) return;
+  const payload: WidgetConfigV1 = {
+    schema_version: 1,
+    saved_at: new Date().toISOString(),
+    apiBaseUrl: API_BASE_URL,
+  };
+  await appGroupSetString(WIDGET_CONFIG_KEY, JSON.stringify(payload));
+}
+
+export async function syncWidgetUserProfileFromScoring(scoringProfile: UserProfileV1_2_Extended): Promise<void> {
+  if (!isAppGroupStorageAvailable()) return;
+  const payload: WidgetUserProfileV1_2 = {
+    schema_version: 1,
+    saved_at: new Date().toISOString(),
+    user_profile: pickUserProfileV1_2(scoringProfile),
+  };
+  await appGroupSetString(WIDGET_USER_PROFILE_KEY, JSON.stringify(payload));
+}
+
+export async function syncWidgetUserProfileFromStorage(): Promise<void> {
+  const scoringProfile = await getUserProfileScoring();
+  if (!scoringProfile) return;
+  await syncWidgetUserProfileFromScoring(scoringProfile);
+}
+
+export async function getWidgetDailyRecoCache(): Promise<WidgetDailyRecoV1 | null> {
+  if (!isAppGroupStorageAvailable()) return null;
+  const raw = await appGroupGetString(WIDGET_DAILY_RECO_KEY);
+  return safeJsonParse<WidgetDailyRecoV1>(raw);
+}
+
+export async function setWidgetDailyRecoCache(cache: WidgetDailyRecoV1): Promise<void> {
+  if (!isAppGroupStorageAvailable()) return;
+  await appGroupSetString(WIDGET_DAILY_RECO_KEY, JSON.stringify(cache));
+}
+
+/**
+ * App 前台辅助刷新（不保证准点，但能提升更新及时性与一致性）
+ *
+ * 规则：
+ * - 若共享缓存 `day_key` 已是今天 → 不请求
+ * - 若缺少用户画像 → 不请求（交给 Widget 走兜底/下次重试）
+ * - 成功后写入共享缓存并触发 Widget reload（系统仍可能延迟）
+ */
+export async function ensureDailyWidgetRecoUpToDate(args?: {
+  reason?: string;
+  scoringProfile?: UserProfileV1_2_Extended | null;
+}): Promise<void> {
+  if (!isAppGroupStorageAvailable()) return;
+
+  // 先确保 Widget 能拿到 baseURL（dev/pro 切换时很关键）
+  await syncWidgetConfig();
+
+  const today = getLocalDayKey(new Date());
+  const cached = await getWidgetDailyRecoCache();
+  if (cached?.schema_version === 1 && cached.day_key === today && cached.item?.text) return;
+
+  const scoringProfile = args?.scoringProfile ?? (await getUserProfileScoring());
+  if (!scoringProfile) return;
+
+  // 同步画像给 Widget（保证 Widget 独立拉取也有输入）
+  await syncWidgetUserProfileFromScoring(scoringProfile);
+
+  try {
+    const { items, meta } = await fetchRecoWidget({
+      k: 1,
+      user_profile: pickUserProfileV1_2(scoringProfile),
+      already_recommended_ids: [],
+      touched_or_viewed_ids: [],
+    });
+
+    const top = items?.[0];
+    if (!top?.text) return;
+
+    const lang = i18n.language?.toLowerCase().startsWith('zh') ? 'tc' : 'en';
+    await setWidgetDailyRecoCache({
+      schema_version: 1,
+      saved_at: new Date().toISOString(),
+      day_key: today,
+      // 语言策略：与后端 Accept-Language 保持一致（目前只区分 en/tc）
+      lang,
+      item: {
+        content_id: top.content_id,
+        text: top.text,
+        final_score: top.final_score,
+        fallback_level_final: top.fallback_level_final,
+      },
+      meta: meta as Record<string, unknown>,
+      source: 'app',
+    });
+
+    // 触发 Widget 刷新（系统仍可能延迟）
+    await appGroupReloadAllTimelines();
+  } catch (e) {
+    // 失败不阻塞主流程；Widget 将使用缓存或兜底文案
+    if (typeof __DEV__ !== 'undefined' && __DEV__) {
+      console.log('[DailyWidgetReco] App 前台刷新失败：', args?.reason ?? 'unknown', e);
+    }
+  }
+}
+
--- a/client/src/services/tests/legalApi.test.ts
+++ b/client/src/services/tests/legalApi.test.ts
@@ -0,0 +1,39 @@
+import { describe, expect, it } from 'vitest';
+
+import i18n from 'i18next';
+
+import { buildAcceptLanguage } from '../legalApi';
+
+describe('legalApi.buildAcceptLanguage', () => {
+  function setLang(lang: string) {
+    Object.defineProperty(i18n, 'language', {
+      value: lang,
+      configurable: true,
+    });
+  }
+
+  it('非中文语言回退为 en', () => {
+    setLang('en');
+    expect(buildAcceptLanguage()).toBe('en');
+
+    setLang('es');
+    expect(buildAcceptLanguage()).toBe('en');
+  });
+
+  it('任意 zh* 归一为 tc', () => {
+    setLang('zh-CN');
+    expect(buildAcceptLanguage()).toBe('tc');
+
+    setLang('zh-TW');
+    expect(buildAcceptLanguage()).toBe('tc');
+  });
+
+  it('显式 tc / hant 等归一为 tc', () => {
+    setLang('tc');
+    expect(buildAcceptLanguage()).toBe('tc');
+
+    setLang('zh-Hant');
+    expect(buildAcceptLanguage()).toBe('tc');
+  });
+});
+
--- a/client/src/services/appGroupStorage.ts
+++ b/client/src/services/appGroupStorage.ts
@@ -0,0 +1,53 @@
+import { NativeModules, Platform } from 'react-native';
+
+type AppGroupStorageNativeModule = {
+  /**
+   * 写入 App Group 的 UserDefaults（值为字符串，通常是 JSON）
+   */
+  setString(key: string, value: string): Promise<void>;
+  /**
+   * 读取 App Group 的 UserDefaults（值为字符串，通常是 JSON）
+   */
+  getString(key: string): Promise<string | null>;
+  /**
+   * 触发 Widget 刷新（iOS 系统仍可能延迟）
+   */
+  reloadAllTimelines(): Promise<void>;
+};
+
+function getNativeModule(): AppGroupStorageNativeModule | null {
+  if (Platform.OS !== 'ios') return null;
+  const raw = (NativeModules as Record<string, unknown>)?.AppGroupStorage as unknown;
+  if (!raw || typeof raw !== 'object') return null;
+
+  // 注意：若 iOS 原生模块没有正确导出方法（例如缺少 RCT_EXTERN_METHOD 桥接）
+  // JS 侧可能能拿到模块对象，但方法会是 undefined，这里需要做运行时校验避免崩溃。
+  const m = raw as Partial<AppGroupStorageNativeModule>;
+  if (typeof m.setString !== 'function') return null;
+  if (typeof m.getString !== 'function') return null;
+  if (typeof m.reloadAllTimelines !== 'function') return null;
+  return m as AppGroupStorageNativeModule;
+}
+
+export function isAppGroupStorageAvailable(): boolean {
+  return Boolean(getNativeModule());
+}
+
+export async function appGroupSetString(key: string, value: string): Promise<void> {
+  const m = getNativeModule();
+  if (!m) return;
+  await m.setString(key, value);
+}
+
+export async function appGroupGetString(key: string): Promise<string | null> {
+  const m = getNativeModule();
+  if (!m) return null;
+  return await m.getString(key);
+}
+
+export async function appGroupReloadAllTimelines(): Promise<void> {
+  const m = getNativeModule();
+  if (!m) return;
+  await m.reloadAllTimelines();
+}
+
--- a/client/src/services/legalApi.ts
+++ b/client/src/services/legalApi.ts
@@ -0,0 +1,37 @@
+import i18n from 'i18next';
+
+import { httpJson } from '../utils/http';
+
+export type LegalLinks = {
+  privacyPolicyUrl: string;
+  termsOfUseUrl: string;
+  resolvedLang: 'en' | 'tc';
+};
+
+export function buildAcceptLanguage(): 'en' | 'tc' {
+  const lang = (i18n.language || '').trim();
+  const lower = lang.toLowerCase();
+
+  // 当前多语言仅支持 EN / TC（与 reco 链路一致）；其他语言统一回退到 en
+  if (lower.startsWith('zh')) {
+    return 'tc';
+  }
+  if (lower.includes('tc') || lower.includes('hant') || lower.includes('hk') || lower.includes('mo') || lower.includes('tw')) {
+    return 'tc';
+  }
+  return 'en';
+}
+
+export async function fetchLegalLinks(): Promise<LegalLinks> {
+  const headers: Record<string, string> = {
+    'Accept-Language': buildAcceptLanguage(),
+  };
+  return await httpJson<LegalLinks>({
+    path: '/v1/legal/links',
+    method: 'GET',
+    headers,
+    timeoutMs: 8_000,
+    debugLabel: 'LegalLinks',
+  });
+}
+
--- a/client/src/services/pushApi.ts
+++ b/client/src/services/pushApi.ts
@@ -0,0 +1,210 @@
+import i18n from 'i18next';
+import Constants from 'expo-constants';
+import * as Notifications from 'expo-notifications';
+import { Platform } from 'react-native';
+
+import { httpJson } from '../utils/http';
+import { APP_ENV } from '../constants/env';
+import { getDailyReminderSettings, getOrCreateClientUserId, getUserProfileScoring } from '../storage/appStorage';
+import type { UserProfileScoring } from '../storage/appStorage';
+
+export type PushEnv = 'dev' | 'prod';
+
+export type PushPlatform = 'ios' | 'android';
+
+export type PushDeviceMeta = {
+  model?: string;
+  os_version?: string;
+  app_version?: string;
+  locale?: string;
+  timezone?: string;
+};
+
+export type PushRegisterRequest = {
+  client_user_id: string;
+  platform: PushPlatform;
+  push_token: string;
+  app_id: string;
+  env: PushEnv;
+  device_meta?: PushDeviceMeta;
+};
+
+export type PushPreferencesRequest = {
+  client_user_id: string;
+  enabled: boolean;
+  times_per_day: number; // 0～5
+  timezone?: string;
+  locale?: string;
+  // 可选：用户画像（用于后端 Push 场景推荐文案生成）
+  user_profile?: UserProfileScoring;
+};
+
+export type PushPreferencesResponse = PushPreferencesRequest & {
+  updated_at?: string;
+};
+
+export function buildAcceptLanguage(): 'en' | 'tc' {
+  const lang = (i18n.language || '').trim();
+  const lower = lang.toLowerCase();
+  if (lower.startsWith('zh')) return 'tc';
+  if (lower.includes('tc') || lower.includes('hant') || lower.includes('hk') || lower.includes('mo') || lower.includes('tw')) return 'tc';
+  return 'en';
+}
+
+function toPushEnv(appEnv: typeof APP_ENV): PushEnv {
+  // 客户端 APP_ENV: local/dev/prod → 后端推送 env: dev/prod
+  if (appEnv === 'prod') return 'prod';
+  return 'dev';
+}
+
+function pickAppId(): string {
+  // 优先按平台取 bundleId/package；拿不到则回退到 slug
+  if (Platform.OS === 'ios') {
+    return (
+      Constants.expoConfig?.ios?.bundleIdentifier ||
+      Constants.easConfig?.projectId ||
+      Constants.expoConfig?.slug ||
+      'unknown'
+    );
+  }
+  if (Platform.OS === 'android') {
+    return (
+      Constants.expoConfig?.android?.package ||
+      Constants.easConfig?.projectId ||
+      Constants.expoConfig?.slug ||
+      'unknown'
+    );
+  }
+  return Constants.expoConfig?.slug || 'unknown';
+}
+
+function pickTimezone(): string | undefined {
+  try {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    return tz && String(tz).trim() ? String(tz).trim() : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function pickLocale(): string | undefined {
+  const lang = (i18n.language || '').trim();
+  return lang ? lang : undefined;
+}
+
+function pickPlatform(): PushPlatform {
+  return Platform.OS === 'ios' ? 'ios' : 'android';
+}
+
+function getExpoProjectId(): string | undefined {
+  // Expo 官方推荐读取 projectId（EAS/Dev Client 下通常需要）
+  return (
+    Constants.easConfig?.projectId ||
+    // 兼容 app.json / app.config.ts 的 extra.eas.projectId
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    (Constants.expoConfig as any)?.extra?.eas?.projectId ||
+    undefined
+  );
+}
+
+export async function getExpoPushTokenOrThrow(): Promise<string> {
+  const projectId = getExpoProjectId();
+  try {
+    const res = projectId
+      ? await Notifications.getExpoPushTokenAsync({ projectId })
+      : await Notifications.getExpoPushTokenAsync();
+    return res.data;
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    const hint = projectId
+      ? ''
+      : '（可能缺少 EAS projectId，建议在 app.json 的 extra.eas.projectId 配置后重试）';
+    throw new Error(`获取 Expo Push Token 失败：${msg}${hint}`);
+  }
+}
+
+export async function registerPushToken(args: { pushToken: string }): Promise<void> {
+  const clientUserId = await getOrCreateClientUserId();
+  const headers: Record<string, string> = {
+    'Accept-Language': buildAcceptLanguage(),
+  };
+
+  const deviceMeta: PushDeviceMeta = {
+    os_version: String(Platform.Version ?? ''),
+    app_version: Constants.expoConfig?.version,
+    locale: pickLocale(),
+    timezone: pickTimezone(),
+  };
+
+  const body: PushRegisterRequest = {
+    client_user_id: clientUserId,
+    platform: pickPlatform(),
+    push_token: args.pushToken,
+    app_id: pickAppId(),
+    env: toPushEnv(APP_ENV),
+    device_meta: deviceMeta,
+  };
+
+  await httpJson<void>({
+    path: '/v1/push/register',
+    method: 'POST',
+    headers,
+    body,
+    timeoutMs: 10_000,
+    debugLabel: 'PushRegister',
+  });
+}
+
+export async function setPushPreferences(args: { enabled: boolean; timesPerDay: number }): Promise<PushPreferencesResponse> {
+  const clientUserId = await getOrCreateClientUserId();
+  const tz = pickTimezone();
+  const locale = pickLocale();
+  const scoringProfile = await getUserProfileScoring().catch(() => null);
+  const headers: Record<string, string> = {
+    'Accept-Language': buildAcceptLanguage(),
+  };
+
+  const body: PushPreferencesRequest = {
+    client_user_id: clientUserId,
+    enabled: Boolean(args.enabled) && args.timesPerDay > 0,
+    times_per_day: Math.min(5, Math.max(0, Math.round(args.timesPerDay))),
+    timezone: tz,
+    locale,
+    user_profile: scoringProfile ?? undefined,
+  };
+
+  return await httpJson<PushPreferencesResponse>({
+    path: '/v1/push/preferences',
+    method: 'PUT',
+    headers,
+    body,
+    timeoutMs: 10_000,
+    debugLabel: 'PushPreferences',
+  });
+}
+
+export async function getPushPreferences(): Promise<PushPreferencesResponse> {
+  const clientUserId = await getOrCreateClientUserId();
+  const headers: Record<string, string> = {
+    'Accept-Language': buildAcceptLanguage(),
+  };
+  const qs = `client_user_id=${encodeURIComponent(clientUserId)}`;
+  return await httpJson<PushPreferencesResponse>({
+    path: `/v1/push/preferences?${qs}`,
+    method: 'GET',
+    headers,
+    timeoutMs: 8_000,
+    debugLabel: 'PushPreferencesGet',
+  });
+}
+
+// 预留：未来推送文案个性化需要上报用户画像时使用（本期先不强制依赖）
+export async function setPushProfileHint(_profile: UserProfileScoring | null): Promise<void> {
+  // 本期不实现：后端通过现有推荐模块自行拉取/计算 push 文案
+}
+
+export async function syncPushPreferencesFromLocal(): Promise<void> {
+  const s = await getDailyReminderSettings();
+  await setPushPreferences({ enabled: s.pushEnabled, timesPerDay: s.timesPerDay });
+}
+
--- a/client/src/services/recoApi.ts
+++ b/client/src/services/recoApi.ts
@@ -1,7 +1,7 @@
 import i18n from 'i18next';

-import { API_BASE_URL } from '@/src/constants/env';
-import type { UserProfileV1_2 } from '@/src/features/userProfileScoring';
+import type { UserProfileV1_2 } from '../features/userProfileScoring';
+import { httpJson } from '../utils/http';

 export type RecommendedItem = {
  content_id: number;
@@ -26,39 +26,54 @@ export type RecoRequest = {
  now?: string; // ISO8601（可选）
 };

-function withTimeout(ms: number): AbortController {
-  const controller = new AbortController();
-  setTimeout(() => controller.abort(), ms);
-  return controller;
-}
-
 export async function fetchRecoFeed(req: RecoRequest): Promise<RecoEngineResult> {
-  const controller = withTimeout(12_000);
-  const url = `${API_BASE_URL}/v1/reco/feed`;
  const acceptLanguage = i18n.language?.toLowerCase().startsWith('zh') ? 'tc' : 'en';

-  const res = await fetch(url, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
+  const headers: Record<string, string> = {
    // 让后端做 locale 选择（目前后端只区分 en/tc）
    'Accept-Language': acceptLanguage,
-    },
-    body: JSON.stringify({
+  };
+  const bodyObj = {
    k: req.k,
    user_profile: req.user_profile,
    already_recommended_ids: req.already_recommended_ids ?? [],
    touched_or_viewed_ids: req.touched_or_viewed_ids ?? [],
    now: req.now,
-    }),
-    signal: controller.signal,
+  };
+
+  return await httpJson<RecoEngineResult>({
+    path: '/v1/reco/feed',
+    method: 'POST',
+    headers,
+    body: bodyObj,
+    timeoutMs: 12_000,
+    debugLabel: 'Feed API',
  });
-
-  if (!res.ok) {
-    const text = await res.text().catch(() => '');
-    throw new Error(`推荐接口请求失败：${res.status} ${res.statusText} ${text}`.trim());
 }

-  return (await res.json()) as RecoEngineResult;
+export async function fetchRecoWidget(req: RecoRequest): Promise<RecoEngineResult> {
+  const acceptLanguage = i18n.language?.toLowerCase().startsWith('zh') ? 'tc' : 'en';
+
+  const headers: Record<string, string> = {
+    // 让后端做 locale 选择（目前后端只区分 en/tc）
+    'Accept-Language': acceptLanguage,
+  };
+
+  const bodyObj = {
+    k: req.k ?? 1,
+    user_profile: req.user_profile,
+    already_recommended_ids: req.already_recommended_ids ?? [],
+    touched_or_viewed_ids: req.touched_or_viewed_ids ?? [],
+    now: req.now,
+  };
+
+  return await httpJson<RecoEngineResult>({
+    path: '/v1/reco/widget',
+    method: 'POST',
+    headers,
+    body: bodyObj,
+    timeoutMs: 12_000,
+    debugLabel: 'Widget API',
+  });
 }

--- a/client/src/storage/appStorage.ts
+++ b/client/src/storage/appStorage.ts
@@ -1,9 +1,11 @@
 import AsyncStorage from '@react-native-async-storage/async-storage';
+import * as Crypto from 'expo-crypto';
 import type { UserProfileV1_2_Extended } from '@/src/features/userProfileScoring';

 /**
 * 本地存储 key 统一管理，避免 UI 里散落硬编码
 */
+const KEY_CLIENT_USER_ID = 'client.userId';
 const KEY_ONBOARDING_COMPLETED = 'onboarding.completed';
 const KEY_PUSH_PROMPT_STATE = 'push.promptState';
 const KEY_CONTENT_REACTIONS = 'content.reactions';
@@ -31,7 +33,16 @@ export type UserProfile = {
 */
 export type UserProfileScoring = UserProfileV1_2_Extended;
 export type DailyReminderSettings = {
+  /**
+   * 每天推送次数：
+   * - 0：关闭
+   * - 1～5：每天推送 1～5 次
+   */
  timesPerDay: number;
+  /**
+   * 仅用于 UI 展示与交互（开关）。
+   * 后端偏好建议使用：enabled = pushEnabled && timesPerDay > 0
+   */
  pushEnabled: boolean;
 };

@@ -81,6 +92,49 @@ async function setJson<T>(key: string, value: T): Promise<void> {
  await AsyncStorage.setItem(key, JSON.stringify(value));
 }

+function looksLikeUuid(v: string): boolean {
+  // 宽松校验：8-4-4-4-12（不强依赖大小写）
+  return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v);
+}
+
+function uuidV4FromBytes(bytes: Uint8Array): string {
+  // RFC 4122 v4：设置 version 与 variant
+  const b = new Uint8Array(bytes);
+  b[6] = (b[6] & 0x0f) | 0x40;
+  b[8] = (b[8] & 0x3f) | 0x80;
+
+  const hex = Array.from(b)
+    .map((x) => x.toString(16).padStart(2, '0'))
+    .join('');
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+
+async function generateUuidV4(): Promise<string> {
+  // 1) 优先使用运行时提供的 randomUUID（如可用）
+  const maybeCrypto = (globalThis as unknown as { crypto?: { randomUUID?: () => string } }).crypto;
+  if (maybeCrypto?.randomUUID) return maybeCrypto.randomUUID();
+
+  // 2) 使用 expo-crypto 生成安全随机数（推荐）
+  const bytes = await Crypto.getRandomBytesAsync(16);
+  return uuidV4FromBytes(bytes);
+}
+
+/**
+ * 获取或生成客户端用户标识（UUID）。
+ *
+ * 说明：
+ * - `client_user_id` 用于与后端关联 Push Token 与用户推送偏好
+ * - 它是“安装实例标识”，不等同真实用户账号
+ */
+export async function getOrCreateClientUserId(): Promise<string> {
+  const raw = await AsyncStorage.getItem(KEY_CLIENT_USER_ID);
+  if (raw && looksLikeUuid(raw)) return raw;
+
+  const next = await generateUuidV4();
+  await AsyncStorage.setItem(KEY_CLIENT_USER_ID, next);
+  return next;
+}
+
 export async function getOnboardingCompleted(): Promise<boolean> {
  const raw = await AsyncStorage.getItem(KEY_ONBOARDING_COMPLETED);
  return raw === 'true';
@@ -272,13 +326,15 @@ export async function getDailyReminderSettings(): Promise<DailyReminderSettings>
  });
  const timesPerDay = Number.isFinite(s.timesPerDay) ? s.timesPerDay : 3;
  return {
-    timesPerDay: Math.min(10, Math.max(1, Math.round(timesPerDay))),
+    // 需求：0～5（0 表示关闭）
+    timesPerDay: Math.min(5, Math.max(0, Math.round(timesPerDay))),
    pushEnabled: Boolean(s.pushEnabled),
  };
 }

 export async function setDailyReminderSettings(settings: DailyReminderSettings): Promise<void> {
-  const timesPerDay = Math.min(10, Math.max(1, Math.round(settings.timesPerDay)));
+  // 需求：0～5（0 表示关闭）
+  const timesPerDay = Math.min(5, Math.max(0, Math.round(settings.timesPerDay)));
  await setJson(KEY_DAILY_REMINDER_SETTINGS, {
    timesPerDay,
    pushEnabled: Boolean(settings.pushEnabled),
--- a/client/src/utils/date.ts
+++ b/client/src/utils/date.ts
@@ -0,0 +1,14 @@
+/**
+ * 生成本地日维度 key（用户时区）：YYYY-MM-DD
+ *
+ * 说明：
+ * - 使用 JS Date 的本地时间字段（getFullYear/getMonth/getDate）
+ * - 不依赖额外库，避免时区坑扩大化
+ */
+export function getLocalDayKey(date: Date = new Date()): string {
+  const y = date.getFullYear();
+  const m = String(date.getMonth() + 1).padStart(2, '0');
+  const d = String(date.getDate()).padStart(2, '0');
+  return `${y}-${m}-${d}`;
+}
+
--- a/client/src/utils/http.ts
+++ b/client/src/utils/http.ts
@@ -0,0 +1,146 @@
+import { API_BASE_URL } from '../constants/env';
+
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+
+export class HttpError extends Error {
+  readonly name = 'HttpError';
+  readonly url: string;
+  readonly status: number;
+  readonly statusText: string;
+  readonly responseText?: string;
+
+  constructor(args: { message: string; url: string; status: number; statusText: string; responseText?: string }) {
+    super(args.message);
+    this.url = args.url;
+    this.status = args.status;
+    this.statusText = args.statusText;
+    this.responseText = args.responseText;
+  }
+}
+
+export type HttpJsonOptions = {
+  /**
+   * 支持传入完整 URL 或以 / 开头的 path（会自动拼到 API_BASE_URL）
+   */
+  path: string;
+  method?: HttpMethod;
+  headers?: Record<string, string>;
+  /**
+   * 将对象自动 JSON.stringify；GET 请求请不要传 body
+   */
+  body?: unknown;
+  /**
+   * 超时（毫秒），默认 10 秒
+   */
+  timeoutMs?: number;
+  /**
+   * 外部 signal（例如上层取消请求）
+   */
+  signal?: AbortSignal;
+  /**
+   * 仅开发环境日志：便于联调排查
+   */
+  debugLabel?: string;
+};
+
+function isAbsoluteUrl(path: string): boolean {
+  return /^https?:\/\//i.test(path);
+}
+
+function joinUrl(baseUrl: string, path: string): string {
+  const base = (baseUrl || '').replace(/\/+$/, '');
+  const p = (path || '').trim();
+  if (!p) return base;
+  if (p.startsWith('/')) return `${base}${p}`;
+  return `${base}/${p}`;
+}
+
+function createTimeoutAbortSignal(timeoutMs: number, external?: AbortSignal): AbortController {
+  const controller = new AbortController();
+
+  const t = setTimeout(() => controller.abort(), timeoutMs);
+
+  // 避免 Node/Vitest 下悬挂定时器影响退出
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  (t as any)?.unref?.();
+
+  if (external) {
+    if (external.aborted) {
+      controller.abort();
+    } else {
+      external.addEventListener(
+        'abort',
+        () => {
+          controller.abort();
+        },
+        { once: true },
+      );
+    }
+  }
+
+  return controller;
+}
+
+function isDev(): boolean {
+  return typeof __DEV__ !== 'undefined' && __DEV__;
+}
+
+export async function httpJson<T>(opts: HttpJsonOptions): Promise<T> {
+  const method = opts.method ?? 'GET';
+  const timeoutMs = opts.timeoutMs ?? 10_000;
+  const url = isAbsoluteUrl(opts.path) ? opts.path : joinUrl(API_BASE_URL, opts.path);
+
+  const headers: Record<string, string> = {
+    ...(opts.headers ?? {}),
+  };
+
+  const hasBody = typeof opts.body !== 'undefined' && opts.body !== null;
+  const body = hasBody ? JSON.stringify(opts.body) : undefined;
+
+  // 仅在有 body 时默认补齐 Content-Type，避免 GET 请求无意义携带
+  if (hasBody && !headers['Content-Type']) {
+    headers['Content-Type'] = 'application/json';
+  }
+
+  if (isDev() && opts.debugLabel) {
+    console.log(`[${opts.debugLabel}] 请求地址:`, url);
+    console.log(`[${opts.debugLabel}] 请求方法:`, method);
+    console.log(`[${opts.debugLabel}] 请求头:`, headers);
+    if (hasBody) console.log(`[${opts.debugLabel}] 请求体:`, opts.body);
+  }
+
+  const controller = createTimeoutAbortSignal(timeoutMs, opts.signal);
+
+  let res: Response;
+  try {
+    res = await fetch(url, {
+      method,
+      headers,
+      body,
+      signal: controller.signal,
+    });
+  } catch (e) {
+    // RN 下 AbortError 文案不完全一致，这里统一对外语义
+    const msg = e instanceof Error ? e.message : String(e);
+    throw new Error(`网络请求失败：${msg}`);
+  }
+
+  if (!res.ok) {
+    const text = await res.text().catch(() => '');
+    throw new HttpError({
+      message: `HTTP 请求失败：${res.status} ${res.statusText} ${text}`.trim(),
+      url,
+      status: res.status,
+      statusText: res.statusText,
+      responseText: text,
+    });
+  }
+
+  // 204/205 无内容时不要强行 parse
+  if (res.status === 204 || res.status === 205) {
+    return undefined as unknown as T;
+  }
+
+  return (await res.json()) as T;
+}
+
--- a/scripts/ssh-key-to-b64.mjs
+++ b/scripts/ssh-key-to-b64.mjs
@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+/**
+ * 把 SSH 私钥转换为“单行 base64”，用于放入 Gitea Secrets（例如 DEV_SSH_KEY_B64）。
+ *
+ * 用法：
+ * 1) 从文件读取：
+ *    node scripts/ssh-key-to-b64.mjs ~/.ssh/deploy_key
+ *
+ * 2) 从 stdin 读取（直接粘贴私钥内容，结束后按 Ctrl+D）：
+ *    node scripts/ssh-key-to-b64.mjs -
+ *
+ * 3) 输出同时复制到剪贴板（仅 macOS，需系统自带 pbcopy）：
+ *    node scripts/ssh-key-to-b64.mjs ~/.ssh/deploy_key --clipboard
+ *
+ * 注意：
+ * - 请不要把输出写入仓库或提交到 git。
+ * - 工作流会优先使用 *_SSH_KEY_B64（更稳，避免多行换行丢失）。
+ */
+
+import fs from 'node:fs';
+import { spawnSync } from 'node:child_process';
+
+function printHelp() {
+  console.log(`用法：
+  node scripts/ssh-key-to-b64.mjs <私钥文件路径> [--clipboard] [--stdout]
+  node scripts/ssh-key-to-b64.mjs - [--clipboard] [--stdout]
+
+示例：
+  node scripts/ssh-key-to-b64.mjs ~/.ssh/deploy_key
+  node scripts/ssh-key-to-b64.mjs - --clipboard
+  node scripts/ssh-key-to-b64.mjs ~/.ssh/deploy_key --clipboard --stdout
+`);
+}
+
+const args = process.argv.slice(2);
+const clipboard = args.includes('--clipboard') || args.includes('-c');
+const forceStdout = args.includes('--stdout');
+const help = args.includes('--help') || args.includes('-h');
+const input = args.find((a) => !a.startsWith('-'));
+
+if (help || !input) {
+  printHelp();
+  process.exit(help ? 0 : 1);
+}
+
+function readAllStdin() {
+  return fs.readFileSync(0);
+}
+
+let buf;
+try {
+  if (input === '-') {
+    buf = readAllStdin();
+  } else {
+    buf = fs.readFileSync(input);
+  }
+} catch (e) {
+  console.error(`读取失败：${String(e?.message || e)}`);
+  process.exit(1);
+}
+
+// 重要：按“原始字节”做 base64，避免任何编码/换行处理导致私钥内容变化
+// 这样工作流解码后能 100% 还原原文件内容
+const asText = buf.toString('utf8');
+if (!asText.includes('BEGIN') || !asText.includes('PRIVATE KEY')) {
+  console.error('提示：输入内容看起来不像 SSH 私钥（未检测到 PRIVATE KEY 头部）。仍会继续转换，但请确认输入正确。');
+}
+
+const b64 = buf.toString('base64');
+
+if (clipboard) {
+  if (process.platform !== 'darwin') {
+    console.error('当前不是 macOS，无法使用 --clipboard（需要 pbcopy）。将仅输出到 stdout。');
+  } else {
+    const r = spawnSync('pbcopy', [], { input: b64, encoding: 'utf8' });
+    if (r.status !== 0) {
+      console.error(`复制到剪贴板失败：pbcopy 退出码=${r.status}`);
+    } else {
+      console.error('已复制到剪贴板：请粘贴到 Gitea Secrets（例如 DEV_SSH_KEY_B64）。');
+    }
+  }
+}
+
+// 默认：如果使用了 --clipboard，就不再把超长 base64 打到终端（避免影响后续命令输出）。
+// 如需同时打印，请加 --stdout。
+if (!clipboard || forceStdout || process.platform !== 'darwin') {
+  process.stdout.write(b64 + '\n');
+}
+
--- a/server/.dockerignore
+++ b/server/.dockerignore
@@ -0,0 +1,20 @@
+.venv
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+
+# 本地/测试数据
+.test.db
+*.db
+
+# 测试与开发脚本（按需移除）
+tests/
+.env*
+
+# Git 元数据
+.git/
+.gitignore
--- a/server/Dockerfile
+++ b/server/Dockerfile
@@ -0,0 +1,32 @@
+FROM python:3.11-slim
+
+# 运行时基础环境
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+# 系统依赖（按需扩展；多数依赖为纯 Python）
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends build-essential curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# 先复制依赖清单以利用 Docker layer cache
+COPY requirements.txt /app/requirements.txt
+RUN python -m pip install -U pip \
+    && pip install --no-cache-dir -r /app/requirements.txt
+
+# 复制后端代码与迁移配置
+COPY app /app/app
+COPY alembic /app/alembic
+COPY alembic.ini /app/alembic.ini
+
+EXPOSE 8000
+
+# 注意：
+# - 镜像内不会打包 `.env.dev/.env.prod`（避免把敏感信息烘焙进镜像）
+# - 运行容器时请通过 `--env-file` 或 `-e` 注入 DATABASE_URL / REDIS_URL / CELERY_BROKER_URL
+# - 参考文档：server/README.md
+
+# 生产镜像默认不开启 reload
+CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
--- a/server/README.md
+++ b/server/README.md
@@ -82,6 +82,11 @@ CELERY_BROKER_URL=redis://dev_user:devpassword@127.0.0.1:6379/0

 `.env.prod` 同理，替换为生产环境地址与密钥即可。

+补充：
+
+- 仓库内提供了一个不包含真实值的模板文件 `server/env.example`，可复制为 `.env.dev/.env.prod` 后再填写。
+- **Docker 不会自动读取 `.env.*`**，容器运行时需要通过 `--env-file` 或 `-e` 注入环境变量（见下方 Docker 运行）。
+
 ### 1.1 MySQL 命名与 dev/pro 区分（约定）

 - **生产库（prod）**：`mindfulness`
@@ -146,6 +151,38 @@ uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
 - OpenAPI 文档：`/docs`
 - ReDoc：`/redoc`

+## Docker 运行
+
+后端启动至少需要以下 3 个环境变量：
+
+- `DATABASE_URL`
+- `REDIS_URL`
+- `CELERY_BROKER_URL`
+
+### 方式 A：使用 env 文件（推荐）
+
+1) 在宿主机准备 `server/.env.prod`（或 `.env.dev`），内容为 `KEY=value`：
+
+- 可从 `server/env.example` 复制后填写
+
+2) 运行容器时通过 `--env-file` 注入：
+
+```bash
+docker run --rm -p 8000:8000 \
+  --env-file server/.env.prod \
+  mindfulness-server:latest
+```
+
+### 方式 B：直接用 -e 注入
+
+```bash
+docker run --rm -p 8000:8000 \
+  -e DATABASE_URL="mysql+aiomysql://用户名:密码@mysql:3306/mindfulness?charset=utf8mb4" \
+  -e REDIS_URL="redis://:密码@redis:6379/0" \
+  -e CELERY_BROKER_URL="redis://:密码@redis:6379/0" \
+  mindfulness-server:latest
+```
+
 ## 数据库迁移（Alembic）

 > 若你采用 Alembic：建议把迁移脚本放在 `server/alembic/`，并在 `alembic.ini` 中配置数据库连接（或从环境变量读取）。
--- a/server/alembic/versions/0002_init_push_tables.py
+++ b/server/alembic/versions/0002_init_push_tables.py
@@ -0,0 +1,123 @@
+"""init push tables
+
+Revision ID: 0002_init_push_tables
+Revises: 0001_init_content_tables
+Create Date: 2026-02-03
+
+"""
+
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import mysql
+
+
+# revision identifiers, used by Alembic.
+revision = "0002_init_push_tables"
+down_revision = "0001_init_content_tables"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # push_tokens
+    op.create_table(
+        "push_tokens",
+        sa.Column(
+            "id",
+            mysql.BIGINT(unsigned=True),
+            primary_key=True,
+            autoincrement=True,
+            comment="主键",
+        ),
+        sa.Column("client_user_id", sa.String(length=64), nullable=False, comment="客户端用户标识（UUID）"),
+        sa.Column(
+            "platform",
+            sa.Enum("ios", "android", name="push_platform"),
+            nullable=False,
+            comment="平台",
+        ),
+        sa.Column("push_token", sa.String(length=255), nullable=False, comment="Expo Push Token"),
+        sa.Column("app_id", sa.String(length=255), nullable=False, comment="bundle id / package name（用于隔离）"),
+        sa.Column(
+            "env",
+            sa.Enum("dev", "prod", name="push_env"),
+            nullable=False,
+            comment="环境隔离",
+        ),
+        sa.Column(
+            "is_active",
+            sa.Boolean(),
+            server_default=sa.text("1"),
+            nullable=False,
+            comment="是否有效（发送失败且不可恢复时置为 false）",
+        ),
+        sa.Column("last_seen_at", sa.DateTime(), server_default=sa.func.now(), nullable=False, comment="最后一次上报时间"),
+        sa.UniqueConstraint("env", "app_id", "push_token", name="uniq_env_app_token"),
+        mysql_charset="utf8mb4",
+    )
+    op.create_index("idx_push_tokens_client_user_id", "push_tokens", ["client_user_id"], unique=False)
+    op.create_index("idx_push_tokens_is_active", "push_tokens", ["is_active"], unique=False)
+
+    # push_preferences
+    op.create_table(
+        "push_preferences",
+        sa.Column("client_user_id", sa.String(length=64), primary_key=True, comment="客户端用户标识（UUID）"),
+        sa.Column(
+            "enabled",
+            sa.Boolean(),
+            server_default=sa.text("0"),
+            nullable=False,
+            comment="是否开启每日提醒（enabled=false 或 times_per_day=0 均视为关闭）",
+        ),
+        sa.Column(
+            "times_per_day",
+            sa.SmallInteger(),
+            server_default="0",
+            nullable=False,
+            comment="每天推送次数（0～5）",
+        ),
+        sa.Column("timezone", sa.String(length=64), nullable=True, comment="IANA 时区（例如 Asia/Shanghai），来自客户端上报"),
+        sa.Column("locale", sa.String(length=32), nullable=True, comment="客户端语言（例如 zh-CN/en/zh-TW），用于文案语言选择"),
+        sa.Column("user_profile_json", sa.JSON(), nullable=True, comment="用户画像（V1.2；可选）。用于 Push 场景推荐文案生成。"),
+        sa.Column("updated_at", sa.DateTime(), server_default=sa.func.now(), nullable=False, comment="更新时间"),
+        mysql_charset="utf8mb4",
+    )
+
+    # push_send_log
+    op.create_table(
+        "push_send_log",
+        sa.Column(
+            "id",
+            mysql.BIGINT(unsigned=True),
+            primary_key=True,
+            autoincrement=True,
+            comment="主键",
+        ),
+        sa.Column("client_user_id", sa.String(length=64), nullable=False, comment="客户端用户标识（UUID）"),
+        sa.Column("local_date", sa.Date(), nullable=False, comment="用户时区的本地日期（用于幂等）"),
+        sa.Column("slot_index", sa.SmallInteger(), nullable=False, comment="当天第几条（1..times_per_day）"),
+        sa.Column("scheduled_at", sa.DateTime(), nullable=False, comment="计划发送时间（UTC）"),
+        sa.Column("sent_at", sa.DateTime(), nullable=True, comment="实际发送时间（UTC）"),
+        sa.Column("status", sa.String(length=16), server_default="scheduled", nullable=False, comment="scheduled/sent/failed"),
+        sa.Column("error", sa.Text(), nullable=True, comment="失败原因（可选）"),
+        sa.Column("created_at", sa.DateTime(), server_default=sa.func.now(), nullable=False, comment="创建时间"),
+        sa.UniqueConstraint("client_user_id", "local_date", "slot_index", name="uniq_user_date_slot"),
+        mysql_charset="utf8mb4",
+    )
+    op.create_index("idx_push_log_user_date", "push_send_log", ["client_user_id", "local_date"], unique=False)
+    op.create_index("idx_push_log_status", "push_send_log", ["status"], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index("idx_push_log_status", table_name="push_send_log")
+    op.drop_index("idx_push_log_user_date", table_name="push_send_log")
+    op.drop_table("push_send_log")
+
+    op.drop_table("push_preferences")
+
+    op.drop_index("idx_push_tokens_is_active", table_name="push_tokens")
+    op.drop_index("idx_push_tokens_client_user_id", table_name="push_tokens")
+    op.drop_table("push_tokens")
+
--- a/server/app/api/limits.py
+++ b/server/app/api/limits.py
@@ -47,6 +47,7 @@ class FixedWindowRateLimiter:


 _reco_rate_limiter = FixedWindowRateLimiter(limit=10, window_seconds=60)
+_push_rate_limiter = FixedWindowRateLimiter(limit=30, window_seconds=60)


 async def rate_limit_reco_by_ip(request: Request) -> None:
@@ -60,3 +61,19 @@ async def rate_limit_reco_by_ip(request: Request) -> None:

    _reco_rate_limiter.allow(key=ip, now_ts=time.time())

+
+async def rate_limit_push_by_ip(request: Request) -> None:
+    """
+    推送相关接口限流：按 IP，1 分钟 30 次。
+
+    说明：
+    - register/preferences 等接口可能在客户端反复重试
+    - 本期先用内存固定窗口限流做基础保护
+    """
+
+    ip = "unknown"
+    if request.client and request.client.host:
+        ip = str(request.client.host)
+
+    _push_rate_limiter.allow(key=ip, now_ts=time.time())
+
--- a/server/app/api/v1/legal.py
+++ b/server/app/api/v1/legal.py
@@ -0,0 +1,131 @@
+from __future__ import annotations
+
+from typing import Literal, Optional
+
+from fastapi import APIRouter, Request
+from fastapi.responses import HTMLResponse
+from pydantic import BaseModel, HttpUrl
+
+from app.core.config import get_settings
+from app.legal_docs import PRIVACY_POLICY_MD, TERMS_OF_USE_MD, choose_content_by_lang, render_as_simple_html
+
+
+router = APIRouter(prefix="/v1/legal", tags=["legal"])
+
+INTERNAL_SENTINEL = "__internal__"
+
+
+# 当前多语言仅支持 EN / TC（繁体）
+ResolvedLang = Literal["en", "tc"]
+
+
+class LegalLinksResponse(BaseModel):
+    privacyPolicyUrl: HttpUrl
+    termsOfUseUrl: HttpUrl
+    resolvedLang: ResolvedLang
+
+
+def _resolve_lang(accept_language: Optional[str]) -> ResolvedLang:
+    """
+    从 Accept-Language 里做一个轻量语言解析。
+
+    说明：
+    - 只关心：en / tc（繁体）
+    - 解析失败或缺失：回退 en
+    """
+
+    if not accept_language:
+        return "en"
+    s = accept_language.lower()
+
+    # 目前只支持 EN / TC：只要是中文或显式 tc，都归到 tc
+    if "tc" in s:
+        return "tc"
+    if "zh" in s or "hant" in s or "tw" in s or "hk" in s or "mo" in s:
+        return "tc"
+
+    return "en"
+
+
+def _pick_urls(lang: ResolvedLang) -> tuple[str, str, ResolvedLang]:
+    settings = get_settings()
+
+    if lang == "tc":
+        privacy = settings.legal_privacy_url_tc or settings.legal_privacy_url_en
+        terms = settings.legal_terms_url_tc or settings.legal_terms_url_en
+        # 如果未配置 tc 链接：
+        # - 若走内置页面（__internal__），可直接展示 tc 内容，因此 resolved=tc
+        # - 否则回退到 en 链接，因此 resolved=en
+        if settings.legal_privacy_url_tc or settings.legal_terms_url_tc:
+            resolved: ResolvedLang = "tc"
+        elif privacy == INTERNAL_SENTINEL or terms == INTERNAL_SENTINEL:
+            resolved = "tc"
+        else:
+            resolved = "en"
+        return privacy, terms, resolved
+
+    return settings.legal_privacy_url_en, settings.legal_terms_url_en, "en"
+
+
+def _join_base_url(base_url: str, path: str) -> str:
+    base = (base_url or "").rstrip("/")
+    p = (path or "").strip()
+    if not p.startswith("/"):
+        p = "/" + p
+    return base + p
+
+
+def _normalize_internal_url(request: Request, url: str, internal_path: str) -> str:
+    """
+    将内置哨兵值替换为当前服务的可访问绝对 URL。
+    """
+
+    if url != INTERNAL_SENTINEL:
+        return url
+    return _join_base_url(str(request.base_url), internal_path)
+
+
+@router.get("/links", response_model=LegalLinksResponse)
+async def get_legal_links(request: Request) -> LegalLinksResponse:
+    """
+    获取协议链接（隐私协议 / 使用协议）。
+
+    - 语言来源：Accept-Language
+    - 默认兜底：en
+    """
+
+    accept_language = request.headers.get("accept-language")
+    lang = _resolve_lang(accept_language)
+    privacy, terms, resolved = _pick_urls(lang)
+    privacy = _normalize_internal_url(request, privacy, "/v1/legal/privacy")
+    terms = _normalize_internal_url(request, terms, "/v1/legal/terms")
+    return LegalLinksResponse(privacyPolicyUrl=privacy, termsOfUseUrl=terms, resolvedLang=resolved)
+
+
+@router.get("/privacy", response_class=HTMLResponse)
+async def get_privacy_policy(request: Request) -> HTMLResponse:
+    """
+    内置隐私协议页面（用于未配置外部托管链接时的兜底）。
+    """
+
+    accept_language = request.headers.get("accept-language")
+    lang = _resolve_lang(accept_language)
+    content, resolved = choose_content_by_lang(PRIVACY_POLICY_MD, lang)
+    title = "Hey Mama | Privacy Policy" if resolved == "en" else "Hey Mama｜隱私權政策"
+    page = render_as_simple_html(title=title, content=content)
+    return HTMLResponse(content=page, headers={"Content-Language": "en" if resolved == "en" else "zh-Hant"})
+
+
+@router.get("/terms", response_class=HTMLResponse)
+async def get_terms_of_use(request: Request) -> HTMLResponse:
+    """
+    内置使用协议页面（用于未配置外部托管链接时的兜底）。
+    """
+
+    accept_language = request.headers.get("accept-language")
+    lang = _resolve_lang(accept_language)
+    content, resolved = choose_content_by_lang(TERMS_OF_USE_MD, lang)
+    title = "Hey Mama – Terms of Use" if resolved == "en" else "Hey Mama 使用條款"
+    page = render_as_simple_html(title=title, content=content)
+    return HTMLResponse(content=page, headers={"Content-Language": "en" if resolved == "en" else "zh-Hant"})
+
--- a/server/app/api/v1/push.py
+++ b/server/app/api/v1/push.py
@@ -0,0 +1,262 @@
+from __future__ import annotations
+
+from datetime import datetime, timezone
+from typing import Any, Literal, Optional
+
+import httpx
+from fastapi import APIRouter, Depends, Header, HTTPException, Query
+from pydantic import BaseModel, Field
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.api.limits import rate_limit_push_by_ip
+from app.core.config import get_settings
+from app.db.models.push_preference import PushPreference
+from app.db.models.push_token import PushToken
+from app.db.session import get_db
+from app.features.user_profile_scoring.types import UserProfileV1_2
+
+
+router = APIRouter(
+    prefix="/v1/push",
+    tags=["push"],
+    dependencies=[Depends(rate_limit_push_by_ip)],
+)
+
+
+PushEnv = Literal["dev", "prod"]
+PushPlatform = Literal["ios", "android"]
+
+
+class PushDeviceMeta(BaseModel):
+    model: Optional[str] = None
+    os_version: Optional[str] = None
+    app_version: Optional[str] = None
+    locale: Optional[str] = None
+    timezone: Optional[str] = None
+
+
+class PushRegisterRequest(BaseModel):
+    client_user_id: str = Field(min_length=8, max_length=64)
+    platform: PushPlatform
+    push_token: str = Field(min_length=8, max_length=255)
+    app_id: str = Field(min_length=1, max_length=255)
+    env: PushEnv
+    device_meta: Optional[PushDeviceMeta] = None
+
+
+class PushPreferencesRequest(BaseModel):
+    client_user_id: str = Field(min_length=8, max_length=64)
+    enabled: bool
+    times_per_day: int = Field(ge=0, le=5)
+    timezone: Optional[str] = None
+    locale: Optional[str] = None
+    # 可选：用户画像（用于 Push 场景推荐文案生成）
+    user_profile: Optional[UserProfileV1_2] = None
+
+
+class PushPreferencesResponse(BaseModel):
+    client_user_id: str
+    enabled: bool
+    times_per_day: int
+    timezone: Optional[str] = None
+    locale: Optional[str] = None
+    updated_at: Optional[str] = None
+
+
+class PushTestRequest(BaseModel):
+    client_user_id: str = Field(min_length=8, max_length=64)
+    title: Optional[str] = None
+    body: Optional[str] = None
+
+
+def _ensure_utc(dt: datetime) -> datetime:
+    if dt.tzinfo is None:
+        return dt.replace(tzinfo=timezone.utc)
+    return dt.astimezone(timezone.utc)
+
+
+async def _pick_active_token(db: AsyncSession, *, client_user_id: str) -> Optional[PushToken]:
+    # 取最近一次上报的 active token
+    q = (
+        select(PushToken)
+        .where(PushToken.client_user_id == client_user_id, PushToken.is_active == True)  # noqa: E712
+        .order_by(PushToken.last_seen_at.desc())
+        .limit(1)
+    )
+    row = await db.execute(q)
+    return row.scalar_one_or_none()
+
+
+async def _send_expo_push(*, to: str, title: str, body: str, data: Optional[dict[str, Any]] = None) -> dict[str, Any]:
+    """
+    发送 Expo Push。
+
+    说明：
+    - V1：最小可用实现，满足 test 与后续定时任务调用
+    - 失败处理与 token 停用在后续任务逻辑中完善
+    """
+
+    settings = get_settings()
+    url = "https://exp.host/--/api/v2/push/send"
+
+    headers: dict[str, str] = {
+        "Content-Type": "application/json",
+    }
+    if settings.expo_access_token:
+        headers["Authorization"] = f"Bearer {settings.expo_access_token}"
+
+    payload: dict[str, Any] = {"to": to, "title": title, "body": body}
+    if data:
+        payload["data"] = data
+
+    async with httpx.AsyncClient(timeout=10.0) as client:
+        res = await client.post(url, headers=headers, json=payload)
+        if res.status_code >= 400:
+            raise HTTPException(status_code=502, detail=f"expo_push_failed:{res.status_code}")
+        return res.json()
+
+
+@router.post("/register")
+async def register(req: PushRegisterRequest, db: AsyncSession = Depends(get_db)) -> dict[str, str]:
+    """
+    注册/更新 Push Token（幂等）。
+    """
+
+    now = datetime.now(timezone.utc)
+
+    # 以 env+app_id+push_token 唯一：存在则更新归属与 last_seen
+    q = select(PushToken).where(
+        PushToken.env == req.env,
+        PushToken.app_id == req.app_id,
+        PushToken.push_token == req.push_token,
+    )
+    row = await db.execute(q)
+    token = row.scalar_one_or_none()
+    if token is None:
+        token = PushToken(
+            client_user_id=req.client_user_id,
+            platform=req.platform,
+            push_token=req.push_token,
+            app_id=req.app_id,
+            env=req.env,
+            is_active=True,
+            last_seen_at=_ensure_utc(now),
+        )
+        db.add(token)
+    else:
+        token.client_user_id = req.client_user_id
+        token.platform = req.platform
+        token.is_active = True
+        token.last_seen_at = _ensure_utc(now)
+
+    await db.commit()
+    return {"status": "ok"}
+
+
+@router.put("/preferences", response_model=PushPreferencesResponse)
+async def put_preferences(req: PushPreferencesRequest, db: AsyncSession = Depends(get_db)) -> PushPreferencesResponse:
+    """
+    设置每日提醒偏好（幂等）。
+    """
+
+    # 规范化：enabled=false 或 times=0 均视为关闭
+    times = int(req.times_per_day)
+    enabled = bool(req.enabled) and times > 0
+
+    q = select(PushPreference).where(PushPreference.client_user_id == req.client_user_id)
+    row = await db.execute(q)
+    pref = row.scalar_one_or_none()
+
+    if pref is None:
+        pref = PushPreference(
+            client_user_id=req.client_user_id,
+            enabled=enabled,
+            times_per_day=times,
+            timezone=req.timezone,
+            locale=req.locale,
+            # 注意：Pydantic 会把 ISO8601 字符串解析成 datetime；
+            # SQLAlchemy JSON 列默认使用 json.dumps，无法序列化 datetime。
+            # 这里用 mode="json" 保证写库内容都是可 JSON 序列化的基础类型（datetime → ISO 字符串）。
+            user_profile_json=req.user_profile.model_dump(mode="json") if req.user_profile else None,
+        )
+        db.add(pref)
+    else:
+        pref.enabled = enabled
+        pref.times_per_day = times
+        pref.timezone = req.timezone
+        pref.locale = req.locale
+        if req.user_profile is not None:
+            pref.user_profile_json = req.user_profile.model_dump(mode="json")
+
+    await db.commit()
+
+    # 返回更新时间（从 ORM 读取到的可能不包含 server_onupdate，这里用 now 兜底）
+    updated_at = getattr(pref, "updated_at", None)
+    updated_at_iso = updated_at.isoformat() if isinstance(updated_at, datetime) else None
+
+    return PushPreferencesResponse(
+        client_user_id=req.client_user_id,
+        enabled=enabled,
+        times_per_day=times,
+        timezone=req.timezone,
+        locale=req.locale,
+        updated_at=updated_at_iso,
+    )
+
+
+@router.get("/preferences", response_model=PushPreferencesResponse)
+async def get_preferences(
+    client_user_id: str = Query(min_length=8, max_length=64),
+    db: AsyncSession = Depends(get_db),
+) -> PushPreferencesResponse:
+    q = select(PushPreference).where(PushPreference.client_user_id == client_user_id)
+    row = await db.execute(q)
+    pref = row.scalar_one_or_none()
+    if pref is None:
+        return PushPreferencesResponse(client_user_id=client_user_id, enabled=False, times_per_day=0)
+    updated_at_iso = pref.updated_at.isoformat() if pref.updated_at else None
+    return PushPreferencesResponse(
+        client_user_id=client_user_id,
+        enabled=bool(pref.enabled) and int(pref.times_per_day) > 0,
+        times_per_day=int(pref.times_per_day),
+        timezone=pref.timezone,
+        locale=pref.locale,
+        updated_at=updated_at_iso,
+    )
+
+
+@router.post("/test")
+async def test_push(
+    req: PushTestRequest,
+    db: AsyncSession = Depends(get_db),
+    accept_language: Optional[str] = Header(default=None, alias="Accept-Language"),
+) -> dict[str, Any]:
+    """
+    立即测试推送（仅用于 dev 联调）。
+    """
+
+    settings = get_settings()
+    if settings.app_env != "dev":
+        raise HTTPException(status_code=403, detail="test_only_in_dev")
+
+    token = await _pick_active_token(db, client_user_id=req.client_user_id)
+    if token is None:
+        raise HTTPException(status_code=404, detail="no_active_token")
+
+    # 如果没有用户画像，也不影响 test 推送；文案按请求/默认文案发送。
+    q = select(PushPreference).where(PushPreference.client_user_id == req.client_user_id)
+    row = await db.execute(q)
+    pref = row.scalar_one_or_none()
+
+    if pref and pref.user_profile_json:
+        _ = UserProfileV1_2.model_validate(pref.user_profile_json)
+
+    # V1：先发固定测试文案；后续在定时任务中替换为推荐模块的 push 场景模板
+    title = req.title or "Hey Mama"
+    body = req.body or "这是一条测试推送（dev）。"
+
+    expo_res = await _send_expo_push(to=token.push_token, title=title, body=body, data={"client_user_id": req.client_user_id})
+    _ = accept_language
+    return {"status": "ok", "expo": expo_res}
+
--- a/server/app/core/config.py
+++ b/server/app/core/config.py
@@ -4,6 +4,7 @@ from functools import lru_cache
 from pathlib import Path
 from typing import Literal, Optional

+from pydantic import ValidationError
 from pydantic_settings import BaseSettings, SettingsConfigDict


@@ -45,6 +46,24 @@ class Settings(BaseSettings):
    celery_broker_url: str
    celery_result_backend: Optional[str] = None

+    # 法务协议链接（由后端统一托管并下发给客户端）
+    # 说明：
+    # - 当前仅支持 EN / TC 两种语言（与客户端现状一致）
+    # - 若未显式配置 LEGAL_*，后端会使用“内置协议页面”（/v1/legal/privacy、/v1/legal/terms）
+    # - 线上建议配置为你们的官网/托管页/静态站点 HTTPS 链接，避免与 API 域名强绑定
+    #
+    # 这里用一个内部哨兵值表示“走内置页面”，避免默认值误导为可用的公网链接。
+    legal_privacy_url_en: str = "__internal__"
+    legal_terms_url_en: str = "__internal__"
+    legal_privacy_url_tc: Optional[str] = None
+    legal_terms_url_tc: Optional[str] = None
+
+    # Expo Push（可选）
+    # 说明：
+    # - 不填也能调用 Expo Push API，但会受更严格的速率限制
+    # - 建议生产环境配置 EXPO_ACCESS_TOKEN，便于稳定性与配额
+    expo_access_token: Optional[str] = None
+
    model_config = SettingsConfigDict(
        env_prefix="",
        case_sensitive=False,
@@ -67,5 +86,41 @@ def get_settings() -> Settings:
    env = os.getenv("APP_ENV", "dev").strip() or "dev"
    env_file = _guess_env_file(env)

+    try:
        return Settings(_env_file=env_file)
+    except ValidationError as e:
+        # 给出更可执行的错误信息，避免只看到一串校验栈。
+        missing_fields: list[str] = []
+        for err in e.errors():
+            if err.get("type") == "missing":
+                loc = err.get("loc") or ()
+                if loc:
+                    missing_fields.append(str(loc[0]))
+
+        # 将字段名映射为常见的环境变量名（默认规则：字段名大写）
+        missing_env_keys = [f.upper() for f in missing_fields] if missing_fields else []
+
+        env_file_hint = env_file or f".env.{env}（未找到，已回退到系统环境变量）"
+        required_hint = (
+            "、".join(missing_env_keys)
+            if missing_env_keys
+            else "DATABASE_URL、REDIS_URL、CELERY_BROKER_URL"
+        )
+
+        msg = (
+            "应用启动失败：缺少必填配置。\n\n"
+            f"- 当前 APP_ENV：{env}\n"
+            f"- 期望读取的 env 文件：{env_file_hint}\n"
+            f"- 缺少的环境变量：{required_hint}\n\n"
+            "修复方式（任选其一）：\n"
+            "1) 直接注入环境变量（推荐）：\n"
+            "   - DATABASE_URL=...\n"
+            "   - REDIS_URL=...\n"
+            "   - CELERY_BROKER_URL=...\n"
+            "2) 使用 env 文件：在 `server/` 下准备 `.env.dev` 或 `.env.prod`（KEY=value 格式），\n"
+            "   本地可通过 `server/run.sh --env dev|prod` 自动加载；Docker 运行可用 `--env-file` 传入。\n"
+        )
+        # 不附带原始 ValidationError 的异常上下文，减少日志噪音；
+        # msg 已包含缺失项与修复方式，足够定位问题。
+        raise RuntimeError(msg) from None

--- a/server/app/db/models/init.py
+++ b/server/app/db/models/init.py
@@ -9,6 +9,9 @@
 from app.db.models.content import Content
 from app.db.models.content_profile import ContentProfile
 from app.db.models.content_risk_flag import ContentRiskFlag
+from app.db.models.push_preference import PushPreference
+from app.db.models.push_send_log import PushSendLog
+from app.db.models.push_token import PushToken

-__all__ = ["Content", "ContentProfile", "ContentRiskFlag"]
+__all__ = ["Content", "ContentProfile", "ContentRiskFlag", "PushPreference", "PushSendLog", "PushToken"]

--- a/server/app/db/models/push_preference.py
+++ b/server/app/db/models/push_preference.py
@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+from datetime import datetime
+
+from sqlalchemy import Boolean, DateTime, JSON, SmallInteger, String, func
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.db.base import Base
+
+
+class PushPreference(Base):
+    """
+    用户推送偏好（以 client_user_id 为主键）。
+    """
+
+    __tablename__ = "push_preferences"
+
+    client_user_id: Mapped[str] = mapped_column(
+        String(length=64),
+        primary_key=True,
+        comment="客户端用户标识（UUID）",
+    )
+
+    enabled: Mapped[bool] = mapped_column(
+        Boolean,
+        nullable=False,
+        server_default="0",
+        comment="是否开启每日提醒（enabled=false 或 times_per_day=0 均视为关闭）",
+    )
+
+    times_per_day: Mapped[int] = mapped_column(
+        SmallInteger,
+        nullable=False,
+        server_default="0",
+        comment="每天推送次数（0～5）",
+    )
+
+    timezone: Mapped[str | None] = mapped_column(
+        String(length=64),
+        nullable=True,
+        comment="IANA 时区（例如 Asia/Shanghai），来自客户端上报",
+    )
+
+    locale: Mapped[str | None] = mapped_column(
+        String(length=32),
+        nullable=True,
+        comment="客户端语言（例如 zh-CN/en/zh-TW），用于文案语言选择",
+    )
+
+    user_profile_json: Mapped[dict | None] = mapped_column(
+        JSON,
+        nullable=True,
+        comment="用户画像（V1.2；可选）。用于 Push 场景推荐文案生成。",
+    )
+
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime,
+        nullable=False,
+        server_default=func.now(),
+        server_onupdate=func.now(),
+        comment="更新时间",
+    )
+
--- a/server/app/db/models/push_send_log.py
+++ b/server/app/db/models/push_send_log.py
@@ -0,0 +1,37 @@
+from __future__ import annotations
+
+from datetime import date, datetime
+
+from sqlalchemy import Date, DateTime, Index, SmallInteger, String, Text, UniqueConstraint, func
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.db.base import Base
+
+
+class PushSendLog(Base):
+    """
+    推送发送日志（用于幂等防重复 + 可观测）。
+    """
+
+    __tablename__ = "push_send_log"
+
+    __table_args__ = (
+        UniqueConstraint("client_user_id", "local_date", "slot_index", name="uniq_user_date_slot"),
+        Index("idx_push_log_user_date", "client_user_id", "local_date"),
+        Index("idx_push_log_status", "status"),
+    )
+
+    id: Mapped[int] = mapped_column(primary_key=True, autoincrement=True, comment="主键")
+
+    client_user_id: Mapped[str] = mapped_column(String(length=64), nullable=False, comment="客户端用户标识（UUID）")
+    local_date: Mapped[date] = mapped_column(Date, nullable=False, comment="用户时区的本地日期（用于幂等）")
+    slot_index: Mapped[int] = mapped_column(SmallInteger, nullable=False, comment="当天第几条（1..times_per_day）")
+
+    scheduled_at: Mapped[datetime] = mapped_column(DateTime, nullable=False, comment="计划发送时间（UTC）")
+    sent_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True, comment="实际发送时间（UTC）")
+
+    status: Mapped[str] = mapped_column(String(length=16), nullable=False, server_default="scheduled", comment="scheduled/sent/failed")
+    error: Mapped[str | None] = mapped_column(Text, nullable=True, comment="失败原因（可选）")
+
+    created_at: Mapped[datetime] = mapped_column(DateTime, nullable=False, server_default=func.now(), comment="创建时间")
+
--- a/server/app/db/models/push_token.py
+++ b/server/app/db/models/push_token.py
@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+from datetime import datetime
+from typing import Literal
+
+from sqlalchemy import Boolean, DateTime, Enum, Index, String, UniqueConstraint, func
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.db.base import Base
+
+PushEnv = Literal["dev", "prod"]
+PushPlatform = Literal["ios", "android"]
+
+
+class PushToken(Base):
+    """
+    Push Token 绑定表（Expo Push Token）。
+
+    约束：
+    - token 在同一 env + app_id 下必须唯一（避免重复推送）
+    - 同一 client_user_id 可能会更新 token（重装/轮换/重新授权）
+    """
+
+    __tablename__ = "push_tokens"
+
+    __table_args__ = (
+        UniqueConstraint("env", "app_id", "push_token", name="uniq_env_app_token"),
+        Index("idx_push_tokens_client_user_id", "client_user_id"),
+        Index("idx_push_tokens_is_active", "is_active"),
+    )
+
+    id: Mapped[int] = mapped_column(primary_key=True, autoincrement=True, comment="主键")
+
+    client_user_id: Mapped[str] = mapped_column(String(length=64), nullable=False, comment="客户端用户标识（UUID）")
+    platform: Mapped[PushPlatform] = mapped_column(
+        Enum("ios", "android", name="push_platform"),
+        nullable=False,
+        comment="平台",
+    )
+
+    push_token: Mapped[str] = mapped_column(String(length=255), nullable=False, comment="Expo Push Token")
+    app_id: Mapped[str] = mapped_column(String(length=255), nullable=False, comment="bundle id / package name（用于隔离）")
+    env: Mapped[PushEnv] = mapped_column(
+        Enum("dev", "prod", name="push_env"),
+        nullable=False,
+        comment="环境隔离",
+    )
+
+    is_active: Mapped[bool] = mapped_column(
+        Boolean,
+        nullable=False,
+        server_default="1",
+        comment="是否有效（发送失败且不可恢复时置为 false）",
+    )
+
+    last_seen_at: Mapped[datetime] = mapped_column(
+        DateTime,
+        nullable=False,
+        server_default=func.now(),
+        server_onupdate=func.now(),
+        comment="最后一次上报时间",
+    )
+
--- a/server/app/legal_docs.py
+++ b/server/app/legal_docs.py
@@ -0,0 +1,305 @@
+from __future__ import annotations
+
+import html
+import re
+from typing import Literal
+
+
+ResolvedLang = Literal["en", "tc"]
+
+
+# 协议原文（直接来自仓库中的 Markdown 文档）。
+# 说明：为了保证“点击一定有内容”，这里在后端内置了一份可展示的协议文本。
+# 线上若你们有官网/静态站点托管页面，可通过环境变量 LEGAL_* 覆盖为外部链接。
+PRIVACY_POLICY_MD = """Hey Mama | Privacy Policy
+Last updated: February 2026
+
+1. Introduction
+Welcome to Hey Mama (“the App,” “we,” “us”).
+We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use the App.
+By downloading, accessing, or using the App, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
+
+2. Data Controller and Scope
+The App is operated and maintained by the Hey Mama team.
+This Privacy Policy applies to information processing activities related to your use of the App.
+
+3. Information We Collect
+3.1 Information You Provide
+Hey Mama does not require account registration and does not require you to provide personally identifiable information.
+During your use of the App, you may optionally provide or generate the following information:
+- Reminder settings (e.g., reminder frequency)
+- Text content you view, save as favorites, or create within the App (if available)
+This information is used only to operate core App features and provide a personalized experience.
+
+3.2 Information Collected Automatically
+When you use the App, we may automatically collect certain non-identifiable technical information, including but not limited to:
+- Device type and operating system version
+- App version
+- Device language settings
+- Basic usage status (e.g., whether the App is opened, whether reminders are enabled)
+This information does not directly identify you and is primarily used to maintain App stability, troubleshoot issues, and improve user experience.
+The App does not collect precise location information for the purposes described in this policy, does not engage in cross-app tracking, and does not use your data for third-party advertising.
+
+4. Push Notifications
+With your permission, the App may send you reminder notifications, such as daily affirmations.
+- Notifications contain general text information only
+- Notifications do not include sensitive personal data
+- You can disable notifications at any time in your device settings
+
+5. Home Screen Widgets
+If you choose to use home screen widgets, the displayed content comes from the App’s text-based affirmations. Widgets do not collect or transmit additional personal data.
+
+6. How We Use Information
+We use collected information only for the following purposes:
+- To provide and maintain core App functionality
+- To improve content presentation and user experience
+- To fix bugs and enhance system stability
+We do not:
+- Sell, rent, or trade your personal data
+- Use your data for third-party advertising purposes
+
+7. Third-Party Services
+Hey Mama currently does not integrate third-party advertising or marketing services.
+The App may rely on necessary operating system and app store services to provide functionality (for example, push notification delivery mechanisms).
+If we later integrate third-party analytics or technical services, we will update this Privacy Policy accordingly.
+
+8. Data Retention and Security
+We retain information only for as long as necessary to achieve the purposes described above. We implement reasonable technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or loss.
+
+9. Minors
+Hey Mama is not designed for children, and we do not knowingly collect personal information from users under the age of 13.
+If you are a minor, please use the App with the consent and supervision of a parent or guardian.
+
+10. Changes to This Privacy Policy
+We may update this Privacy Policy from time to time. The updated version will be made available within the App or through related pages. If you continue to use the App after updates take effect, you are deemed to have accepted the updated policy.
+
+
+---
+Hey Mama｜隱私權政策
+最後更新日期：2026 年 2 月
+
+一、前言
+歡迎使用 Hey Mama（以下簡稱「本 App」、「我們」）。
+我們重視您的隱私，並致力於保護您的個人資料安全。本隱私權政策說明您在使用 Hey Mama 時，我們如何收集、使用、保存與保護相關資訊。
+當您下載、存取或使用本 App，即表示您已閱讀、理解並同意本隱私權政策之內容。
+
+二、我們收集的資訊
+1. 使用者主動提供的資訊
+Hey Mama 不要求建立帳號，亦不強制使用者提供可識別個人身分的資料。
+在使用過程中，您可能會選擇性提供或產生以下資訊：
+- 提醒設定（例如提醒頻率）
+- 使用者在 App 內閱讀、收藏或建立的文字內容（如有）
+上述資訊僅用於 App 功能運作與個人化體驗。
+2. 自動收集的資訊
+當您使用本 App 時，我們可能會自動收集部分非識別性技術資訊，包括但不限於：
+- 裝置類型與作業系統版本
+- App 版本
+- 裝置語言設定
+- 基本使用行為（例如是否開啟 App、是否啟用提醒）
+這些資訊無法直接識別您的身分，僅用於維持 App 穩定性與改善使用體驗。
+
+三、推送通知
+在取得您同意後，Hey Mama 可能會向您發送提醒推送，例如每日肯定語提示。
+- 推送內容僅包含一般文字資訊
+- 不包含任何敏感個人資料
+- 您可隨時於裝置系統設定中關閉通知功能
+
+四、桌面小組件
+若您選擇使用桌面小組件，其顯示內容僅來自 App 內的文字肯定語，不會額外收集或傳送新的個人資料。
+
+五、資訊使用方式
+我們僅於下列目的範圍內使用所收集的資訊：
+- 提供與維護 App 的基本功能
+- 改善內容呈現與使用體驗
+- 修復錯誤與提升系統穩定性
+我們不會：
+- 出售、出租或交換您的個人資料
+- 將資料用於第三方廣告投放
+
+六、第三方服務
+目前 Hey Mama 未整合第三方廣告或行銷服務。
+ 如未來整合第三方分析或技術服務，我們將於本政策中另行說明並更新。
+
+七、資料保存與安全
+我們僅在達成上述目的所需期間內保存相關資訊，並採取合理的技術與管理措施，以防止資料遭未經授權存取、洩漏、竄改或遺失。
+
+八、未成年人說明
+Hey Mama 並非專為兒童設計，亦不刻意收集未滿 13 歲使用者的個人資料。
+若您為未成年人，請在監護人同意與陪同下使用本 App。
+
+九、隱私權政策的變更
+我們可能會不定期更新本隱私權政策。
+更新後的版本將公布於 App 內或相關頁面，您於政策更新後繼續使用本 App，即視為同意更新內容。
+"""
+
+TERMS_OF_USE_MD = """Hey Mama – Terms of Use
+Last updated: February 2026
+Welcome to Hey Mama (“the App,” “we,” or “us”).
+Please read these Terms of Use carefully before downloading, accessing, or using the App. By using the App, you agree to be bound by these Terms.
+
+1. Intended Audience
+Hey Mama is intended for adults only.
+The App is not designed for children, and users must ensure they have the legal capacity to use the App under applicable laws.
+
+2. Services Provided
+Hey Mama provides text-based content and features, including but not limited to:
+- Daily affirmations and mindfulness text
+- User-configured reminders and push notifications
+- Home screen widgets displaying affirmation text
+- Personalized reading or saving experiences (where applicable)
+All content is provided for general emotional support and self-reflection purposes only and does not constitute medical, psychological, or professional advice.
+
+3. Acceptable Use
+You agree to:
+- Use the App for personal, non-commercial purposes only
+- Not copy, reproduce, distribute, sell, modify, reverse engineer, or attempt to extract the source code of the App
+- Not engage in any activity that may interfere with the App’s functionality, stability, or user experience
+We reserve the right to restrict or terminate access if these Terms are violated.
+
+4. Push Notifications
+The App may send push notifications based on your settings (e.g. daily affirmation reminders).
+- Notifications contain general text only
+- No sensitive personal data is included
+- You may disable notifications at any time through your device settings
+
+5. Intellectual Property
+All content, design elements, interfaces, and materials within the App are owned by us or our licensors and are protected by applicable intellectual property laws.
+Unauthorized use, reproduction, or distribution is strictly prohibited.
+
+6. Disclaimer
+The App and its content are provided for informational and self-support purposes only.
+- We do not guarantee specific emotional or psychological outcomes
+- The App does not replace professional medical, mental health, or legal advice
+- You are solely responsible for how you use the content
+
+7. Service Availability
+We may modify, suspend, or discontinue any part of the App at any time due to maintenance, updates, or circumstances beyond our control.
+We are not liable for any loss or damage resulting from such interruptions or changes.
+
+8. Changes to These Terms
+We may update these Terms of Use from time to time.
+Updated versions will be made available within the App or related pages. Continued use of the App after changes indicates acceptance of the revised Terms.
+
+9. Governing Law
+These Terms shall be governed by and construed in accordance with the applicable laws of our operating jurisdiction.
+
+---
+Hey Mama 使用條款
+最後更新日期：2026 年 2 月
+歡迎使用 Hey Mama（以下簡稱「本 App」、「我們」）。
+在下載、存取或使用本 App 前，請您仔細閱讀本使用條款。當您開始使用本 App，即表示您已閱讀、理解並同意遵守本條款。
+
+1. 服務對象與使用資格
+Hey Mama 僅供成年人使用（intended for adults）。
+ 本 App 並非為兒童設計，使用者應確認自己具備依所在地法律使用本服務的完全行為能力。
+
+2. 服務內容
+Hey Mama 提供以文字形式為主的內容與功能，包括但不限於：
+- 每日肯定語與正念文字內容
+- 使用者設定的提醒與推送通知
+- 桌面小組件顯示肯定語文字
+- 內容閱讀與收藏等個人化體驗（如適用）
+本 App 所提供之內容僅作為日常情緒支持與自我提醒用途，不構成任何形式的醫療、心理諮商或專業建議。
+
+3. 使用方式與限制
+使用者同意：
+- 僅將本 App 用於個人、非商業用途
+- 不以任何方式複製、重製、散布、出售、反編譯或試圖取得本 App 之原始碼
+- 不進行任何可能影響 App 正常運作、穩定性或其他使用者體驗之行為
+如有違反，我們有權在不另行通知的情況下限制或終止使用權限。
+
+4. 推送通知
+本 App 可能依使用者設定發送推送通知（例如每日肯定語提醒）。
+- 推送內容僅為一般文字資訊
+- 不包含個人化敏感資料
+- 您可隨時透過裝置系統設定關閉通知功能
+
+5. 智慧財產權
+本 App 及其所有內容（包含但不限於文字、設計、介面、版面配置與視覺元素）之智慧財產權，均屬於我們或合法授權方所有。
+未經事前書面同意，任何形式之使用、修改、重製或散布皆屬禁止。
+
+6. 免責聲明
+本 App 所提供之內容僅供一般參考與自我提醒之用。
+- 我們不保證內容能產生特定心理、情緒或行為結果
+- 本 App 不取代任何專業醫療、心理或法律建議
+- 使用者應自行判斷內容是否適合自身狀況
+
+7. 服務中斷與變更
+我們可能因系統維護、功能調整、更新或其他不可抗力因素，暫時中斷或變更本 App 之全部或部分功能。
+對於因此可能造成的任何直接或間接損失，我們不負任何責任。
+
+8. 條款修改
+我們可能不定期更新本使用條款。
+ 更新後的版本將公布於 App 內或相關頁面，您於條款更新後繼續使用本 App，即視為同意更新內容。
+
+9. 準據法與管轄
+本使用條款之解釋與適用，悉依我們所在地之相關法律規定處理。
+"""
+
+
+def split_bilingual_markdown(text: str) -> tuple[str, str | None]:
+    """
+    按文档中的 `---` 分隔符将内容拆成两段。
+
+    返回：
+    - 第一段：默认视为英文
+    - 第二段：默认视为繁体（可为空）
+    """
+
+    parts = re.split(r"^\s*---\s*$", text, maxsplit=1, flags=re.MULTILINE)
+    if not parts:
+        return "", None
+    if len(parts) == 1:
+        return parts[0].strip(), None
+    return parts[0].strip(), parts[1].strip()
+
+
+def choose_content_by_lang(text: str, lang: ResolvedLang) -> tuple[str, ResolvedLang]:
+    """
+    根据 lang 选择展示内容。若 tc 内容缺失则回退 en。
+    """
+
+    en, tc = split_bilingual_markdown(text)
+    if lang == "tc" and tc:
+        return tc, "tc"
+    return en, "en"
+
+
+def render_as_simple_html(title: str, content: str) -> str:
+    """
+    将文本以简单 HTML 的方式展示（使用 pre 保留换行并自动换行）。
+    不做 Markdown 渲染，避免引入额外依赖，确保“最小可用、必有内容”。
+    """
+
+    safe_title = html.escape(title)
+    safe_content = html.escape(content)
+    return f"""<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>{safe_title}</title>
+    <style>
+      :root {{
+        color-scheme: light dark;
+      }}
+      body {{
+        margin: 0;
+        padding: 16px;
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, "PingFang TC", "PingFang SC", "Noto Sans CJK TC", "Noto Sans CJK SC", sans-serif;
+        line-height: 1.6;
+      }}
+      pre {{
+        white-space: pre-wrap;
+        word-break: break-word;
+        margin: 0;
+        font-size: 15px;
+      }}
+    </style>
+  </head>
+  <body>
+    <pre>{safe_content}</pre>
+  </body>
+</html>
+"""
+
--- a/server/app/main.py
+++ b/server/app/main.py
@@ -3,13 +3,15 @@ from fastapi import FastAPI
 from app.core.config import get_settings
 from app.api.v1.reco import router as reco_router
 from app.api.v1.user_profile_scoring import router as user_profile_router
+from app.api.v1.legal import router as legal_router
+from app.api.v1.push import router as push_router


 def create_app() -> FastAPI:
    """
    创建 FastAPI 应用实例。

-    说明：目前仅提供最小可运行骨架（health check），后续逐步加入路由与中间件。
+    说明：目前仅提供最小可运行骨架（健康检查），后续逐步加入路由与中间件。
    """

    settings = get_settings()
@@ -19,6 +21,15 @@ def create_app() -> FastAPI:
    # 业务路由
    app.include_router(user_profile_router)
    app.include_router(reco_router)
+    app.include_router(legal_router)
+    app.include_router(push_router)
+
+    @app.get("/health")
+    async def health() -> dict:
+        """
+        部署健康检查（兼容常见探针路径）。
+        """
+        return {"status": "ok", "env": settings.app_env}

    @app.get("/healthz")
    async def healthz() -> dict:
--- a/server/app/tasks/init.py
+++ b/server/app/tasks/init.py
@@ -2,3 +2,12 @@
 Celery 任务集合。
 """

+# 重要：
+# - 本项目的任务按文件拆分在 app/tasks/*.py 中
+# - Celery autodiscover 通常只会导入 app.tasks（即本包），不会自动递归导入子模块
+# - 因此这里需要显式导入各任务模块，确保 shared_task 被注册
+
+from app.tasks import ping as _ping  # noqa: F401
+from app.tasks import reco as _reco  # noqa: F401
+from app.tasks import push as _push  # noqa: F401
+
--- a/server/app/tasks/push.py
+++ b/server/app/tasks/push.py
@@ -0,0 +1,312 @@
+from __future__ import annotations
+
+import asyncio
+import random
+from dataclasses import dataclass
+from datetime import date, datetime, time, timedelta, timezone
+from typing import Any, Optional
+from zoneinfo import ZoneInfo
+
+import httpx
+from celery import current_app, shared_task
+from sqlalchemy import select
+
+from app.core.config import get_settings
+from app.db.models.push_preference import PushPreference
+from app.db.models.push_send_log import PushSendLog
+from app.db.models.push_token import PushToken
+from app.db.session import AsyncSessionLocal
+from app.features.personalized_reco.content_repository.types import normalize_locale
+from app.features.user_profile_scoring.scoring import build_user_profile_from_questionnaire
+from app.features.user_profile_scoring.types import QuestionnaireAnswersV1_2, UserProfileV1_2
+
+
+def _ensure_tz(tz_name: Optional[str]) -> ZoneInfo:
+    raw = (tz_name or "").strip()
+    if not raw:
+        return ZoneInfo("UTC")
+    try:
+        return ZoneInfo(raw)
+    except Exception:
+        return ZoneInfo("UTC")
+
+
+def _pick_reco_locale(pref_locale: Optional[str]) -> str:
+    """
+    将客户端 locale（如 zh-CN/en/zh-TW）映射到推荐系统 locale（en/tc）。
+    """
+
+    raw = (pref_locale or "").strip().lower()
+    if raw.startswith("zh"):
+        return "tc"
+    # 其他语言在当前版本统一回退到 en（与现有 reco/ legal 链路一致）
+    return "en"
+
+
+def _pick_title(locale: str) -> str:
+    return "每日提醒" if str(locale) == "tc" else "Daily Reminder"
+
+
+async def _send_expo_push(*, to: str, title: str, body: str, data: Optional[dict[str, Any]] = None) -> dict[str, Any]:
+    settings = get_settings()
+    url = "https://exp.host/--/api/v2/push/send"
+
+    headers: dict[str, str] = {"Content-Type": "application/json"}
+    if settings.expo_access_token:
+        headers["Authorization"] = f"Bearer {settings.expo_access_token}"
+
+    payload: dict[str, Any] = {"to": to, "title": title, "body": body}
+    if data:
+        payload["data"] = data
+
+    async with httpx.AsyncClient(timeout=10.0) as client:
+        res = await client.post(url, headers=headers, json=payload)
+        res.raise_for_status()
+        return res.json()
+
+
+def _uniform_jitter_times(*, start: datetime, end: datetime, n: int) -> list[datetime]:
+    """
+    将窗口均匀切分为 n 个区间，并在每段内随机取一个时间点（抖动）。
+    """
+
+    if n <= 0:
+        return []
+    total = (end - start).total_seconds()
+    if total <= 0:
+        return []
+
+    out: list[datetime] = []
+    for i in range(n):
+        seg_start = start + timedelta(seconds=total * i / n)
+        seg_end = start + timedelta(seconds=total * (i + 1) / n)
+        seg = (seg_end - seg_start).total_seconds()
+        if seg <= 0:
+            out.append(seg_start)
+            continue
+        jitter = random.random() * seg
+        out.append(seg_start + timedelta(seconds=jitter))
+    return out
+
+
+@dataclass(frozen=True)
+class _ScheduleTarget:
+    local_date: date
+    start_local: datetime
+    end_local: datetime
+
+
+def _pick_schedule_target(*, now_utc: datetime, tz: ZoneInfo) -> _ScheduleTarget:
+    """
+    为某个用户选择“要生成计划的本地日期”：
+    - 若当前本地时间 < 09:00：生成“今天”
+    - 否则：生成“明天”
+
+    目的：确保生成的时间点尽量都在未来，避免任务 ETA 立刻触发导致体验异常。
+    """
+
+    now_local = now_utc.astimezone(tz)
+    today = now_local.date()
+    day = today if now_local.time() < time(9, 0) else (today + timedelta(days=1))
+    start_local = datetime.combine(day, time(9, 0), tzinfo=tz)
+    end_local = datetime.combine(day + timedelta(days=1), time(0, 0), tzinfo=tz)  # 24:00
+    return _ScheduleTarget(local_date=day, start_local=start_local, end_local=end_local)
+
+
+async def _generate_schedule_once(*, now_utc: datetime, max_users: int = 5000) -> dict[str, int]:
+    """
+    为所有开启每日提醒的用户生成当天/明天的推送计划，并投递 ETA 发送任务。
+
+    幂等：
+    - `push_send_log` 唯一键（client_user_id + local_date + slot_index）保证同一天不会重复排程
+    - 即使重复运行，最多只会补齐缺失 slot
+    """
+
+    created = 0
+    scheduled = 0
+
+    async with AsyncSessionLocal() as session:
+        q = (
+            select(PushPreference)
+            .where(PushPreference.enabled == True, PushPreference.times_per_day > 0)  # noqa: E712
+            .limit(int(max_users))
+        )
+        rows = await session.execute(q)
+        prefs = list(rows.scalars().all())
+
+        for pref in prefs:
+            tz = _ensure_tz(pref.timezone)
+            target = _pick_schedule_target(now_utc=now_utc, tz=tz)
+
+            n = int(pref.times_per_day or 0)
+            n = max(0, min(5, n))
+            if n <= 0:
+                continue
+
+            times_local = _uniform_jitter_times(start=target.start_local, end=target.end_local, n=n)
+
+            for idx, dt_local in enumerate(times_local, start=1):
+                dt_utc = dt_local.astimezone(timezone.utc)
+
+                # 先尝试插入日志（幂等）
+                log = PushSendLog(
+                    client_user_id=pref.client_user_id,
+                    local_date=target.local_date,
+                    slot_index=int(idx),
+                    scheduled_at=dt_utc.replace(tzinfo=None),  # DB 存 naive（约定为 UTC）
+                    status="scheduled",
+                )
+                session.add(log)
+                try:
+                    await session.commit()
+                except Exception:
+                    await session.rollback()
+                    # 可能已存在（唯一键冲突），跳过
+                    continue
+
+                created += 1
+
+                # 投递 ETA 发送任务
+                current_app.send_task(
+                    "tasks.push.send_scheduled",
+                    kwargs={
+                        "client_user_id": pref.client_user_id,
+                        "local_date": target.local_date.isoformat(),
+                        "slot_index": int(idx),
+                    },
+                    eta=dt_utc,
+                )
+                scheduled += 1
+
+    return {"created": created, "scheduled": scheduled}
+
+
+@shared_task(name="tasks.push.generate_daily_schedule")
+def generate_daily_schedule(*, max_users: int = 5000) -> dict[str, int]:
+    """
+    生成每日推送计划（入口任务）。
+
+    说明：
+    - 建议由 celery beat 定时触发（见 app/worker.py）
+    - 入参尽量小，避免 Redis 队列膨胀
+    """
+
+    now_utc = datetime.now(timezone.utc)
+    return asyncio.run(_generate_schedule_once(now_utc=now_utc, max_users=int(max_users)))
+
+
+async def _send_once_async(*, client_user_id: str, local_date: date, slot_index: int) -> dict[str, Any]:
+    async with AsyncSessionLocal() as session:
+        # 1) 查 log，避免重复发送
+        qlog = select(PushSendLog).where(
+            PushSendLog.client_user_id == client_user_id,
+            PushSendLog.local_date == local_date,
+            PushSendLog.slot_index == int(slot_index),
+        )
+        rlog = await session.execute(qlog)
+        log = rlog.scalar_one_or_none()
+        if log is None:
+            return {"status": "noop", "reason": "no_log"}
+        if str(log.status) == "sent":
+            return {"status": "noop", "reason": "already_sent"}
+
+        # 2) 当前偏好检查（用户可能中途关闭/改次数）
+        qpref = select(PushPreference).where(PushPreference.client_user_id == client_user_id)
+        rpref = await session.execute(qpref)
+        pref = rpref.scalar_one_or_none()
+        if pref is None or (not bool(pref.enabled)) or int(pref.times_per_day or 0) < int(slot_index):
+            log.status = "skipped"
+            log.error = "disabled_or_reduced"
+            await session.commit()
+            return {"status": "skipped"}
+
+        # 3) 找 token
+        qtok = (
+            select(PushToken)
+            .where(PushToken.client_user_id == client_user_id, PushToken.is_active == True)  # noqa: E712
+            .order_by(PushToken.last_seen_at.desc())
+            .limit(1)
+        )
+        rtok = await session.execute(qtok)
+        token = rtok.scalar_one_or_none()
+        if token is None:
+            log.status = "failed"
+            log.error = "no_active_token"
+            await session.commit()
+            return {"status": "failed", "reason": "no_active_token"}
+
+        # 4) 生成文案（复用推荐模块 push 场景）
+        reco_locale = str(normalize_locale(_pick_reco_locale(pref.locale)))
+        title = _pick_title(reco_locale)
+
+        if pref.user_profile_json:
+            user_profile = UserProfileV1_2.model_validate(pref.user_profile_json)
+        else:
+            # 无画像：用“全跳过”的默认画像（降个性化/降风险）
+            user_profile = UserProfileV1_2.model_validate(
+                build_user_profile_from_questionnaire(QuestionnaireAnswersV1_2()).model_dump()
+            )
+
+        # 直接复用 reco 的 Celery 任务实现（同步函数）
+        from app.tasks.reco import generate as reco_generate
+
+        reco_payload = reco_generate(scene="push", user_profile=user_profile.model_dump(), k=1, locale=reco_locale)
+        body = ""
+        try:
+            items = (reco_payload or {}).get("items") or []
+            if items and isinstance(items, list):
+                body = str(items[0].get("text") or "").strip()
+        except Exception:
+            body = ""
+
+        if not body:
+            body = "给自己一句温柔的话。"
+
+        # 5) 发送
+        try:
+            expo_res = await _send_expo_push(
+                to=str(token.push_token),
+                title=title,
+                body=body,
+                data={"client_user_id": client_user_id, "scene": "push"},
+            )
+        except Exception as e:
+            log.status = "failed"
+            log.error = f"send_failed:{type(e).__name__}"
+            await session.commit()
+            return {"status": "failed", "error": str(e)}
+
+        # 6) 解析 Expo 回执，必要时停用 token
+        try:
+            data_list = (expo_res or {}).get("data") or []
+            if data_list and isinstance(data_list, list):
+                first = data_list[0] or {}
+                if first.get("status") == "error":
+                    details = first.get("details") or {}
+                    err = str(details.get("error") or first.get("message") or "expo_error")
+                    log.status = "failed"
+                    log.error = err
+                    if "DeviceNotRegistered" in err:
+                        token.is_active = False
+                    await session.commit()
+                    return {"status": "failed", "expo": expo_res}
+        except Exception:
+            # 忽略解析异常，继续按成功处理
+            pass
+
+        log.status = "sent"
+        log.sent_at = datetime.now(timezone.utc).replace(tzinfo=None)
+        log.error = None
+        await session.commit()
+        return {"status": "sent", "expo": expo_res}
+
+
+@shared_task(name="tasks.push.send_scheduled")
+def send_scheduled(*, client_user_id: str, local_date: str, slot_index: int) -> dict[str, Any]:
+    """
+    ETA 发送任务：发送某用户某天第 slot 条推送。
+    """
+
+    d = date.fromisoformat(str(local_date))
+    return asyncio.run(_send_once_async(client_user_id=str(client_user_id), local_date=d, slot_index=int(slot_index)))
+
--- a/server/app/worker.py
+++ b/server/app/worker.py
@@ -1,6 +1,7 @@
 from __future__ import annotations

 from celery import Celery
+from celery.schedules import crontab

 from app.core.config import get_settings

@@ -38,6 +39,20 @@ celery_app.conf.update(
    task_default_routing_key=f"{prefix}:celery",
 )

-# 自动发现任务（app/tasks 下的 shared_task）
-celery_app.autodiscover_tasks(["app.tasks"])
+# 定时任务（Celery Beat）
+# 说明：
+# - 每天运行一次“生成推送计划”，为所有开启每日提醒的用户生成当天/明天的随机抖动时间点，并投递 ETA 发送任务
+# - 这里按 UTC 00:10 触发一次；具体时间可按运维习惯调整
+celery_app.conf.timezone = "UTC"
+celery_app.conf.beat_schedule = {
+    "push-generate-daily-schedule": {
+        "task": "tasks.push.generate_daily_schedule",
+        "schedule": crontab(minute=10, hour=0),
+        "kwargs": {"max_users": 5000},
+        "options": {"queue": f"{prefix}:celery"},
+    }
+}
+
+# 自动发现任务（约定：导入 app.tasks 触发其内部对子模块的显式导入）
+celery_app.autodiscover_tasks(["app"])

--- a/server/env.example
+++ b/server/env.example
@@ -1,3 +1,34 @@
+# 说明：
+# - 这是后端环境变量模板，请复制为 `.env.dev` 或 `.env.prod` 再填写真实值
+# - 请勿把包含真实账号密码/Token 的 `.env.*` 提交到仓库
+#
+# 用法示例：
+# - 本地：`./run.sh --env dev`
+# - Docker：`docker run --env-file server/.env.prod ...`
+
+# 运行环境
+APP_ENV=dev
+APP_NAME=mindfulness-server
+APP_HOST=0.0.0.0
+APP_PORT=8000
+
+# 数据库（SQLAlchemy 异步连接串）
+# MySQL 示例（aiomysql）：
+# DATABASE_URL=mysql+aiomysql://用户名:密码@127.0.0.1:3306/mindfulness_dev?charset=utf8mb4
+DATABASE_URL=
+
+# Redis（缓存/任务队列）
+# 示例：
+# REDIS_URL=redis://:密码@127.0.0.1:6379/0
+REDIS_URL=
+
+# Celery（建议先只配 broker；如需结果存储可另配 CELERY_RESULT_BACKEND）
+# 示例：
+# CELERY_BROKER_URL=redis://:密码@127.0.0.1:6379/0
+CELERY_BROKER_URL=
+
+# 可选：Celery 结果存储
+# CELERY_RESULT_BACKEND=redis://:密码@127.0.0.1:6379/0
 # 运行环境：dev 或 prod
 APP_ENV=dev

@@ -18,3 +49,17 @@ CELERY_BROKER_URL=redis://<REDIS_USER>:<REDIS_PASSWORD>@<REDIS_HOST>:6379/0

 # 推送（Expo）
 # EXPO_ACCESS_TOKEN=
+
+# 法务协议链接（由后端统一托管并下发给客户端）
+# 说明：
+# - 当前仅支持 EN / TC 两种语言（与客户端现状一致）
+# - 不配置时：后端会自动使用内置协议页面（/v1/legal/privacy、/v1/legal/terms），保证点击有内容
+# - 线上建议配置为你们的官网/静态站点 HTTPS 链接，便于独立更新
+#
+# 可选：英文（EN）
+# LEGAL_PRIVACY_URL_EN=
+# LEGAL_TERMS_URL_EN=
+#
+# 可选：繁体（TC）
+# LEGAL_PRIVACY_URL_TC=
+# LEGAL_TERMS_URL_TC=
--- a/server/tests/test_legal_links_unittest.py
+++ b/server/tests/test_legal_links_unittest.py
@@ -0,0 +1,72 @@
+import os
+import unittest
+
+
+class TestLegalLinksLangResolution(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls) -> None:
+        # 让 Settings 能顺利构造（避免因必填 env 缺失导致导入时报错）
+        os.environ.setdefault("DATABASE_URL", "mysql+aiomysql://u:p@127.0.0.1:3306/mindfulness_dev?charset=utf8mb4")
+        os.environ.setdefault("REDIS_URL", "redis://:p@127.0.0.1:6379/0")
+        os.environ.setdefault("CELERY_BROKER_URL", "redis://:p@127.0.0.1:6379/0")
+
+    def setUp(self) -> None:
+        # 每个用例都清理 settings 缓存，避免环境变量修改不生效
+        from app.core.config import get_settings
+
+        get_settings.cache_clear()
+
+    def test_resolve_lang_default_en(self) -> None:
+        from app.api.v1.legal import _resolve_lang
+
+        self.assertEqual(_resolve_lang(None), "en")
+        self.assertEqual(_resolve_lang(""), "en")
+
+    def test_resolve_lang_tc_for_zh(self) -> None:
+        from app.api.v1.legal import _resolve_lang
+
+        self.assertEqual(_resolve_lang("zh"), "tc")
+        self.assertEqual(_resolve_lang("zh-Hant"), "tc")
+        self.assertEqual(_resolve_lang("zh-TW"), "tc")
+        self.assertEqual(_resolve_lang("zh-HK"), "tc")
+        self.assertEqual(_resolve_lang("tc"), "tc")
+
+    def test_pick_urls_fallback_to_en(self) -> None:
+        # 不配置 tc 链接时，应回退到 en
+        os.environ["LEGAL_PRIVACY_URL_EN"] = "https://example.com/en-privacy"
+        os.environ["LEGAL_TERMS_URL_EN"] = "https://example.com/en-terms"
+        os.environ.pop("LEGAL_PRIVACY_URL_TC", None)
+        os.environ.pop("LEGAL_TERMS_URL_TC", None)
+
+        from app.core.config import get_settings
+
+        get_settings.cache_clear()
+
+        from app.api.v1.legal import _pick_urls
+
+        privacy, terms, resolved = _pick_urls("tc")
+        self.assertEqual(privacy, "https://example.com/en-privacy")
+        self.assertEqual(terms, "https://example.com/en-terms")
+        self.assertEqual(resolved, "en")
+
+    def test_pick_urls_tc_when_configured(self) -> None:
+        os.environ["LEGAL_PRIVACY_URL_EN"] = "https://example.com/en-privacy"
+        os.environ["LEGAL_TERMS_URL_EN"] = "https://example.com/en-terms"
+        os.environ["LEGAL_PRIVACY_URL_TC"] = "https://example.com/tc-privacy"
+        os.environ["LEGAL_TERMS_URL_TC"] = "https://example.com/tc-terms"
+
+        from app.core.config import get_settings
+
+        get_settings.cache_clear()
+
+        from app.api.v1.legal import _pick_urls
+
+        privacy, terms, resolved = _pick_urls("tc")
+        self.assertEqual(privacy, "https://example.com/tc-privacy")
+        self.assertEqual(terms, "https://example.com/tc-terms")
+        self.assertEqual(resolved, "tc")
+
+
+if __name__ == "__main__":
+    unittest.main()
+
--- a/Push/plan.md
+++ b/Push/plan.md
@@ -0,0 +1,169 @@
+# App Push｜每日提醒推送（客户端 + 后端）｜Plan
+
+> 阶段：技术计划（plan）
+>
+> 依据：`spec_kit/App Push/spec.md`
+
+---
+
+## 1. 总体思路
+
+本期以 **Expo Push（Expo Push Token + Expo Push Service）** 为推送通道，实现“每日提醒”闭环：
+
+- **客户端**：负责
+  - 生成/持久化 `client_user_id`（UUID）
+  - 引导用户设置每日次数（0～5，可跳过）
+  - 申请通知权限、获取 Expo Push Token、并上报后端
+  - 在个人主页的“每日提醒”弹窗修改次数或关闭，并同步到后端
+  - 上报 `timezone`（IANA）与 `locale`（用于文案语言）
+- **后端**：负责
+  - 保存 token 绑定与用户推送偏好
+  - 每日按用户时区在 9:00～24:00 窗口内生成 \(N\in[0,5]\) 个随机抖动时间点
+  - 在这些时间点向用户发送推送（使用后端 `@overview.md` 约定的个性化推荐模板/文案策略）
+  - 幂等防重复（同一用户同一天同一序号只发一次）
+
+---
+
+## 2. 客户端设计
+
+### 2.1 UUID（client_user_id）
+
+- 复用 `spec_kit/Client User Identity/spec.md` 的结论：
+  - 默认 UUID v4
+  - 本地稳定持久化
+- 获取时机：
+  - App 启动即确保已生成（便于后续任何上报都可带上）
+
+### 2.2 Push 权限与 token 获取策略
+
+- 在 Onboarding 的“每日提醒”设置页（或 push 引导页）进行权限申请：
+  - 先说明 → 再弹系统权限框
+- token 获取与上报触发：
+  - 权限 granted 后立即获取 token 并上报
+  - 后续冷启动时可“补偿上报”（避免首轮失败导致后端缺 token）
+
+### 2.3 每日提醒设置（0～5 次）
+
+#### Onboarding
+
+- 新增或复用一个 Onboarding 步骤：
+  - 0～5 次选择
+  - “跳过”按钮（跳过不阻塞）
+- 当用户选择 `times_per_day > 0`：
+  - 引导用户开启系统通知权限
+  - 成功与否都进入主功能
+
+#### 个人主页弹窗（Daily Reminder）
+
+- 现有弹窗：
+  - 次数 +/-（限制 0～5）
+  - 开关（关闭等价 `times_per_day=0`）
+  - 权限 denied：给出清晰提示
+- 修复：移除/关闭“测试模式强制无权限”逻辑（该逻辑会导致永远表现为无法开启）
+
+### 2.4 客户端与后端接口调用
+
+- 新增 `client/src/services/pushApi.ts`（参考现有 `legalApi.ts` / `recoApi.ts` 的风格），并使用统一 HTTP 封装 `client/src/utils/http.ts`
+- 接口调用点：
+  - register：拿到 token 后
+  - preferences：用户完成选择或在个人主页修改后
+
+---
+
+## 3. 后端设计
+
+### 3.1 数据模型（最小可用）
+
+1) `push_tokens`
+- 唯一键：`env + app_id + push_token`
+- 字段：
+  - `client_user_id`（UUID string）
+  - `platform`（ios/android）
+  - `push_token`
+  - `app_id`
+  - `env`
+  - `is_active`
+  - `last_seen_at`
+
+2) `push_preferences`
+- 主键：`client_user_id`（或加 `env + app_id` 做隔离）
+- 字段：
+  - `enabled`
+  - `times_per_day`（0～5）
+  - `timezone`（IANA，来自客户端）
+  - `locale`（用于文案选择）
+  - `updated_at`
+
+3) `push_send_log`（幂等防重复）
+- 目的：保证“同一用户同一天第 k 条只发一次”
+- 唯一键：
+  - `client_user_id + local_date + slot_index`（slot_index=1..times_per_day）
+- 字段：
+  - `scheduled_at`（用户时区的时间点）
+  - `sent_at`
+  - `status`（scheduled/sent/failed）
+  - `error`（可选）
+
+> 注：不直接对数据库执行破坏性操作；通过迁移脚本落地表结构，执行迁移需你显式允许后才进行。
+
+### 3.2 API
+
+按 `spec_kit/App Push/spec.md`：
+
+- `POST /v1/push/register`
+- `PUT /v1/push/preferences`
+- `GET /v1/push/preferences`
+- `POST /v1/push/test`（仅 dev）
+
+### 3.3 推送发送器（Expo）
+
+- 使用 `https://exp.host/--/api/v2/push/send`
+- 最小 payload：
+  - `to`：Expo Push Token
+  - `title/body`：来自个性化推荐模板
+  - `data`：深链路参数（可选）
+- 失败处理：
+  - 对 “DeviceNotRegistered”等不可恢复错误，将 token 标记为 inactive
+  - 记录失败原因到 `push_send_log`
+
+### 3.4 定时任务（每日 9～24，随机抖动）
+
+策略：**每日“生成当天计划 + 分发 ETA 任务”**（推荐）
+
+- 每日固定时刻（例如 UTC 00:10 或服务器本地时间某个点）执行一次“生成计划任务”：
+  - 对每个 `enabled && times_per_day>0` 的用户：
+    - 将用户时区当天的 9:00～24:00 转换为 UTC
+    - 随机生成 \(N\) 个时间点：
+      - 均匀切分窗口为 \(N\) 个区间
+      - 每个区间内随机选一个时间（抖动）
+    - 对每个 slot 写入 `push_send_log`（唯一键保证幂等）
+    - 再投递 Celery ETA 任务，到点调用“发送 push”
+
+这样可以避免 worker 长时间 sleep，也便于观察“今天会推哪些”。
+
+---
+
+## 4. 个性化推荐模板（后端 @overview.md）
+
+推送文案生成使用后端推荐模块中 “Push 场景模板/策略”：
+
+- 输入：`client_user_id`、（可选）用户画像/行为统计
+- 输出：`title/body`（多语言）
+- 风险控制：Push 场景默认“降个性化/降风险”，避免敏感/医疗类文案（遵守后端已定义的安全规则）
+
+> plan 阶段仅明确“调用点与输入输出”，具体实现复用后端推荐模块现有能力，避免重复逻辑。
+
+---
+
+## 5. 测试与验收（落地检查清单）
+
+- 客户端：
+  - 首次进入可选择次数/跳过
+  - 权限 granted 时能拿到 Expo token 并上报
+  - 设置页改次数/关闭会调用 preferences 接口并持久化
+- 后端：
+  - register/preferences 接口幂等可重试
+  - test 接口可在 dev 环境立刻推送到真机
+  - 每日计划生成不会重复排程（`push_send_log` 唯一键）
+  - token 失效可自动停用
+
--- a/Push/spec.md
+++ b/Push/spec.md
@@ -0,0 +1,220 @@
+# App Push｜每日提醒推送（客户端 + 后端）｜Spec
+
+> 阶段：高层规范（spec）
+>
+> 目标：实现“每日提醒”推送闭环：用户在首次进入 Onboarding 可选择每天推送次数（0～5，可跳过），并可在个人主页的“每日提醒”弹窗随时调整次数或关闭；客户端使用首次生成的 UUID 作为用户标识与后端关联；后端按用户配置定时下发推送。
+
+---
+
+## 1. 背景与动机（摘要）
+
+当前客户端已有 Push 引导页（可跳过）与“每日提醒”设置入口，但尚未形成完整闭环：
+
+- 需要一个稳定的匿名用户标识（UUID）将“提醒配置”与“推送 token”绑定到后端
+- 需要后端能够按用户选择的每日次数（0～5）进行定时推送
+- 本期不追求高级推送能力（富媒体、复杂分群、到达率分析等）
+
+---
+
+## 2. 目标（Goals）
+
+- **G1：Onboarding 选择**：用户首次进入 Onboarding 可设置“每日提醒次数”（0～5），可跳过且不阻塞进入主功能。
+- **G2：设置页可改可关**：用户可在个人主页的“每日提醒”弹窗调整次数（0～5）或关闭推送。
+- **G3：UUID 关联**：客户端首次进入生成 `client_user_id`（UUID），用于与后端关联用户配置与推送 token（见 `spec_kit/Client User Identity/spec.md`）。
+- **G4：推送闭环**：客户端拿到推送权限与 Push Token 后上报后端；后端存储并按计划每日推送。
+- **G5：幂等与可恢复**：重复上报、token 轮换、用户反复开关不应导致重复推送或“僵尸任务”。
+- **G6：多语言**：推送文案至少支持当前客户端语言体系（`zh-CN/en/es/pt/zh-TW`），或以安全默认语言回退。
+
+---
+
+## 3. 非目标（Non-goals）
+
+- 不接入高级推送能力（富媒体、通知分类/动作按钮、复杂分群、A/B 实验、到达率看板等）。
+- 不引入账号体系与“多设备同人合并”策略（未来可基于 `account_id` 扩展）。
+- 不在本阶段做精细化内容策略（例如千人千面的复杂推荐推送）；仅保证“按次数定时发送”与文案安全合规。
+
+---
+
+## 4. 技术选型（高层）
+
+### 4.1 客户端
+
+- 继续使用 **Expo** 的 `expo-notifications`
+- Push 权限申请：通过引导页解释后再触发系统弹窗（降低拒绝率）
+- Token 获取：使用 Expo Push Token（后续计划阶段细化获取与上报时机）
+
+### 4.2 后端
+
+- 推送通道：**Expo Push Service**（与客户端 `expo-notifications` 配套）
+- 定时任务：使用现有后端技术栈约定（Celery + Redis / 或等价调度器），每日按用户时区/策略触发推送
+
+> 说明：若未来需要更高上限（自建 APNs/FCM 直连），可在后续模块升级，不影响本期 API 字段语义（`client_user_id`、`push_token`、偏好配置）的大框架。
+
+---
+
+## 5. 用户流程（User Flows）
+
+### 5.1 首次进入（Onboarding）
+
+1. App 首次启动 → 进入 Onboarding 流程
+2. 在 Onboarding 某一页提供“每日提醒次数”选择（0～5）
+   - 0 表示不接收每日提醒（等同关闭）
+   - 可点击“跳过”（不设置/不打扰）
+3. 若用户选择次数 > 0：
+   - 展示 Push 引导说明页
+   - 用户点击“立即开启”触发系统权限申请
+4. 无论是否开启成功，均可进入主功能（不阻塞）
+
+### 5.2 个人主页（每日提醒弹窗）
+
+- 用户可：
+  - 调整每日次数（0～5）
+  - 开启/关闭提醒（关闭等价次数=0）
+  - 若系统权限为 denied：提示用户前往系统设置开启（不做强制跳转要求，按平台能力实现）
+
+### 5.3 后端推送执行
+
+- 后端按用户配置与时区，在每日窗口内发送 \(N\) 次推送（\(N\in[0,5]\)）
+- 若用户关闭或次数=0：不再推送
+
+---
+
+## 6. 数据与持久化（高层）
+
+### 6.1 客户端本地存储（最小集合）
+
+- `client_user_id`: string（UUID，稳定持久化；见用户标识 spec）
+- `push.permission_state`: `unknown | granted | denied`（用于 UI 显示与引导）
+- `daily_reminder.enabled`: boolean（可选；或由次数是否为 0 推导）
+- `daily_reminder.times_per_day`: number（0～5）
+- `daily_reminder.updated_at`: ISO string（可选，用于排障/幂等）
+
+### 6.2 后端持久化（逻辑约束）
+
+最小需要表达两类信息：
+
+1) **设备/Token 绑定**
+- `client_user_id`
+- `platform`（ios/android）
+- `push_token`（Expo Push Token）
+- `app_id`（bundle id / package name）
+- `env`（dev/prod）
+- `last_seen_at`
+- `is_active`
+
+2) **用户推送偏好**
+- `client_user_id`
+- `enabled`
+- `times_per_day`（0～5）
+- `timezone`（建议 IANA，如 `Asia/Shanghai`；若拿不到则回退为服务器默认策略）
+- `locale`（用于推送文案语言选择；可从客户端上报或推送时推断）
+- `updated_at`
+
+---
+
+## 7. API 契约（高层）
+
+> 说明：路由名可在 plan 阶段对齐现有服务结构；此处先固定“字段语义 + 幂等行为”。
+
+### 7.1 注册/更新 Push Token（幂等）
+
+- `POST /v1/push/register`
+- 请求体（最小集，继承用户标识 spec）：
+  - `client_user_id`: string（UUID）
+  - `platform`: `"ios" | "android"`
+  - `push_token`: string（Expo Push Token）
+  - `app_id`: string
+  - `env`: `"dev" | "prod"`
+  - `device_meta`（可选）：`{ model, os_version, app_version, locale, timezone }`
+- 行为：
+  - 幂等：重复上报同一 token 不产生多条“有效绑定”
+  - token 变更：同一 `client_user_id` 上报新 token 后，后端应更新“当前有效 token”
+
+### 7.2 设置每日提醒偏好（幂等）
+
+- `PUT /v1/push/preferences`
+- 请求体：
+  - `client_user_id`: string
+  - `enabled`: boolean
+  - `times_per_day`: number（0～5；若 enabled=false 则可强制视为 0）
+  - `timezone`: string（可选）
+  - `locale`: string（可选）
+- 行为：
+  - 幂等：相同配置重复提交不改变结果
+  - `enabled=false` 或 `times_per_day=0`：必须停止后续推送（不再产生新的发送任务）
+
+### 7.3 查询当前偏好（可选但建议）
+
+- `GET /v1/push/preferences?client_user_id=...`
+- 返回：
+  - `enabled`
+  - `times_per_day`
+  - `timezone`
+  - `locale`
+  - `updated_at`
+
+### 7.4 立即测试推送（仅 dev，可选）
+
+- `POST /v1/push/test`
+- 请求体：
+  - `client_user_id`
+  - `title` / `body`（可选）
+- 用途：联调排障（token 绑定、证书/通道、Expo 配置）
+
+---
+
+## 8. 推送策略（高层）
+
+### 8.1 发送次数与窗口
+
+- 每日发送次数：0～5
+- 建议定义“允许发送的时间窗口”（例如 09:00～21:00），避免深夜打扰
+- 当 `times_per_day > 0` 时，在窗口内生成 \(N\) 个时间点并发送
+
+> 时间点生成策略（均匀分布/固定时刻/随机抖动）在 plan 阶段确定；本期只要求“次数正确、用户可控、不会超发”。
+
+### 8.2 文案来源与语言
+
+- 文案可先采用后端配置的模板（按 `locale` 选择，失败回退 `en` 或 `zh-CN`）
+- 若未来要接入推荐系统，可在后续迭代按用户画像生成更个性化文案（不在本期范围）
+
+---
+
+## 9. 边界场景与处理原则
+
+- **用户跳过 Onboarding**：不强制开启；可在个人主页再次设置。
+- **系统权限 denied**：客户端提示引导去系统设置；后端保存偏好但不保证可推送（无有效 token 时不发送）。
+- **token 缺失/过期**：后端发送失败时应标记 token 为不可用，并等待客户端下次上报更新。
+- **重复开关/改次数**：后端必须幂等更新，避免同一用户一天内重复排程导致超发。
+- **环境隔离**：dev/prod 的 token 与配置必须隔离（`env + app_id` 维度）。
+- **卸载/重装**：`client_user_id` 可能变化；视为新用户实例（符合匿名策略）。
+
+---
+
+## 10. 验收标准（Acceptance Criteria）
+
+- 首次进入 Onboarding：
+  - 用户可选择每日次数（0～5）或跳过
+  - 选择后不阻塞进入主功能
+- 个人主页每日提醒弹窗：
+  - 可设置次数（0～5）与关闭
+  - 权限 denied 时有明确提示
+- 客户端：
+  - `client_user_id` 稳定持久化
+  - 在获得权限与 token 后能上报后端（幂等）
+  - 修改偏好会同步到后端（幂等）
+- 后端：
+  - 能保存 token 与偏好
+  - 能按用户配置每日推送（次数正确、不会超发）
+  - token 失效可被识别并停止对失效 token 推送
+
+---
+
+## 11. 待确认问题清单（进入 plan/tasks 前必须确认）
+
+1. **“0～5 次”的含义**：是否严格表示“每天发送 0～5 条通知”（看起来是），还是“提醒强度档位”？
+2. **发送时间策略**：默认窗口与时间点生成方式（固定时刻 vs 均匀分布 vs 随机抖动）选哪一种？
+3. **时区来源**：以客户端上报的 IANA 时区为准吗？若缺失回退到什么策略？
+4. **推送文案**：本期文案是否完全由后端模板控制（便于随时调整），还是前端上报“文案 key/参数”由后端拼装？
+5. **Push 允许发送的静默规则**：是否需要“勿扰时间段/睡眠模式”开关（例如 22:00～08:00 不推）？
+
--- a/Push/tasks.md
+++ b/Push/tasks.md
@@ -0,0 +1,127 @@
+# App Push｜每日提醒推送（客户端 + 后端）｜Tasks
+
+> 阶段：任务清单（tasks）
+>
+> 依赖：`spec_kit/App Push/spec.md`、`spec_kit/App Push/plan.md`
+
+---
+
+## 0. 约束与共识（本期已确认）
+
+- 每日次数：**0～5 条/天**
+- 发送窗口：**9:00～24:00（按客户端上报时区）**
+- 时间点：窗口内 **随机抖动**
+- 勿扰：**不做**
+- 文案：使用后端推荐模块的 **Push 场景个性化模板（降风险）**
+
+---
+
+## 1. 客户端（Expo RN）
+
+### 1.1 UUID（client_user_id）
+
+- [ ] 在 `client/src/storage/appStorage.ts`（或新模块）实现：
+  - `getOrCreateClientUserId(): Promise<string>`
+  - 首次生成 UUID 并持久化，后续复用
+
+### 1.2 Push 权限与 token
+
+- [ ] 接入获取 Expo Push Token 的封装（例如 `src/features/push/`）：
+  - 获取权限状态
+  - 请求权限
+  - 获取 Expo Push Token
+- [ ] 在 Onboarding / push 引导完成后：
+  - granted 时：获取 token + 调 `register`
+  - 未 granted：仅保存本地设置，不阻塞进入主功能
+
+### 1.3 “每日提醒次数”入口
+
+- [ ] Onboarding：新增/复用一个步骤页面
+  - 选择 0～5 次（0 表示关闭）
+  - 支持跳过
+  - 完成后写本地存储，并调用后端 `preferences`
+- [ ] 个人主页弹窗：
+  - 修复“测试模式强制无权限”的逻辑
+  - 次数限制 0～5；关闭等价 0
+  - denied 时提示去系统设置
+  - 修改后写本地存储，并调用后端 `preferences`
+
+### 1.4 接口封装
+
+- [ ] 新增 `client/src/services/pushApi.ts`
+  - `registerPushToken(...)`
+  - `setPushPreferences(...)`
+  - `getPushPreferences(...)`（可选）
+- [ ] 统一使用 `client/src/utils/http.ts` 的请求封装
+
+### 1.5 联调开关与日志
+
+- [ ] 开发环境输出必要日志（不打印敏感信息）：
+  - client_user_id 生成结果
+  - 权限状态与 token 是否获取成功
+  - register/preferences 的请求是否成功与错误原因
+
+---
+
+## 2. 后端（FastAPI）
+
+### 2.1 数据模型与迁移
+
+- [ ] 新增表（或等价模型）：
+  - `push_tokens`
+  - `push_preferences`
+  - `push_send_log`（幂等防重复）
+- [ ] 增加迁移脚本（Alembic 或项目现有迁移机制）
+
+> 注意：不执行任何破坏性数据库操作；运行迁移前若涉及真实库，需要你明确回复“允许操作数据库”。
+
+### 2.2 API
+
+- [ ] `POST /v1/push/register`
+  - 幂等：`env + app_id + push_token` 唯一
+  - 更新 `client_user_id` 归属与 `last_seen_at`
+- [ ] `PUT /v1/push/preferences`
+  - 校验 `times_per_day` ∈ [0,5]
+  - `enabled=false` 或 `times_per_day=0` 时停止后续推送
+- [ ] `GET /v1/push/preferences`
+  - 返回当前偏好与更新时间
+- [ ] `POST /v1/push/test`（仅 dev）
+  - 立即向该用户发送一条测试推送（用于真机联调）
+
+### 2.3 Expo 推送发送器
+
+- [ ] 实现 `send_expo_push(token, title, body, data?)`
+  - 处理 Expo 返回错误并对不可恢复错误停用 token
+  - 记录发送结果到 `push_send_log`
+
+### 2.4 推送文案（推荐模板）
+
+- [ ] 在推送任务中调用后端推荐模块的 Push 场景模板：
+  - 输入：`client_user_id`、语言/时区（可选）
+  - 输出：`title/body`
+  - 默认“降个性化/降风险”
+
+---
+
+## 3. 定时任务（每日计划 + ETA 发送）
+
+- [ ] 每日“计划生成任务”
+  - 扫描 `enabled && times_per_day>0` 用户
+  - 按用户时区在 9:00～24:00 生成 N 个随机抖动时间点
+  - 写入 `push_send_log`（唯一键保证幂等）
+  - 投递 ETA 发送任务（或按项目现有任务系统实现）
+- [ ] ETA “发送任务”
+  - 拉取当次发送所需 token/偏好
+  - 生成文案（推荐模板）
+  - 调用 Expo push 发送
+  - 更新 `push_send_log` 状态
+
+---
+
+## 4. 验收与回归
+
+- [ ] iOS 真机：权限申请、token 获取、test 推送可达
+- [ ] Android 真机：权限申请、token 获取、test 推送可达
+- [ ] 修改次数：后端计划生成正确（一天内不超发）
+- [ ] 关闭：后端停止后续推送（不再生成计划/不再发送）
+
--- a/Reco/overflow.md
+++ b/Reco/overflow.md
@@ -0,0 +1,24 @@
+# Daily Widget Reco（补充说明 / Overflow）
+
+## 1. 关键配置
+
+- **App Group suiteName**：`group.com.damer.mindfulness`
+- **后端鉴权**：无
+- **多语言**：仅 `en / tc`
+
+## 2. 共享存储 Key（App ↔ Widget）
+
+- `widget.config.v1`
+  - 字段：`schema_version=1`、`saved_at`、`apiBaseUrl`
+- `widget.userProfile.v1_2`
+  - 字段：`schema_version=1`、`saved_at`、`user_profile`（结构对齐 `UserProfileV1_2`）
+- `widget.dailyReco.v1`
+  - 字段：`schema_version=1`、`saved_at`、`day_key`（本地日 `YYYY-MM-DD`）、`lang`、`item{content_id,text}`、`source`
+
+## 3. 更新策略（双通道）
+
+- **Widget 主动拉取**：缓存过期时请求 `POST /v1/reco/widget`，写回 `widget.dailyReco.v1`，并使用 `TimelinePolicy.after` 设定次日刷新
+- **App 辅助刷新**：
+  - 启动与回到前台时调用 `ensureDailyWidgetRecoUpToDate`
+  - 成功写入缓存后调用 `WidgetCenter.reloadAllTimelines()`（系统仍可能延迟）
+
--- a/spec_kit/Daily
+++ b/spec_kit/Daily
@@ -0,0 +1,176 @@
+# Daily Widget Reco（技术计划）
+
+> 对应规范：`spec_kit/Daily Widget Reco/spec.md`
+>
+> 已确认输入（来自澄清）：
+>
+> - 更新责任：**App 与 Widget 都需要**（双通道：Widget 主动拉取 + App 辅助刷新）
+> - App Group suiteName：`group.com.damer.mindfulness`
+> - 后端鉴权：不需要
+> - baseURL：由 **App 写入共享区** 提供给 Widget
+> - “每日”口径：用户本地时区
+> - 画像来源：App 写入共享区（Onboarding 完成后写入）
+
+---
+
+## 1. 计划目标
+
+- 打通 `POST /v1/reco/widget`，让客户端与 Widget 都能获取每日推荐（Top1）。
+- 通过 App Group 共享存储，保证 **App 与 Widget 当天展示一致**。
+- 实现“每日更新（尽力而为）”：用户添加小组件后，即使不打开 App，也能依赖 WidgetKit Timeline 在每日范围内刷新。
+- 完整回退链路：今日缓存 → 最近缓存 → 兜底文案；任何失败不 crash、不阻塞主流程。
+
+---
+
+## 2. 总体方案（双通道更新）
+
+### 2.1 核心结论
+
+- **Widget 主动拉取**是满足“添加小组件后每日更新”的必要条件（仅靠 App 前台触发无法覆盖用户不打开 App 的情况）。
+- 同时保留 **App 辅助拉取与 reload**：
+  - App 启动/进入前台/画像更新后可主动拉取并写缓存，提升即时性与一致性。
+  - App 在写入共享缓存后调用 `WidgetCenter.reloadAllTimelines()`，加速 Widget 读取到新数据（系统仍可能延迟）。
+
+### 2.2 数据流（高层）
+
+- App（RN）：
+  - 写入共享配置（`apiBaseUrl` 等）→ 写入共享画像 →（可选）拉取 `widget` 推荐 → 写入共享每日缓存 → reload Widget
+- Widget（Swift）：
+  - 读取共享每日缓存，若过期则读取共享配置+画像并请求后端 → 写入共享缓存 → 输出 timeline
+
+---
+
+## 3. 客户端（React Native / Expo）改动点
+
+### 3.1 新增 Widget 场景 API 封装
+
+- 在 `client/src/services/recoApi.ts` 新增：
+  - `fetchRecoWidget(req: RecoRequest): Promise<RecoEngineResult>`
+  - Header `Accept-Language` 逻辑沿用 Feed（`zh* -> tc` else `en`）
+  - path：`/v1/reco/widget`
+
+### 3.2 共享存储：新增 App Group 写入能力
+
+> 目标：RN 侧将必要数据写入 `UserDefaults(suiteName: "group.com.damer.mindfulness")`，供 Widget 读取。
+
+建议实现路径（两种任选其一，按当前工程实际选型落地）：
+
+- 方案 A（推荐）：引入一个“App Group UserDefaults 读写”的 RN 原生桥/插件（Swift/ObjC 模块 + JS 封装）。
+- 方案 B：若项目已存在可用能力（例如已接入 `react-native-shared-group-preferences` 或自研模块），直接复用并统一 key。
+
+需要写入的共享 key（与 spec 对齐）：
+
+- `widget.config.v1`：包含 `apiBaseUrl`（以及未来灰度字段）
+- `widget.userProfile.v1_2`：用户画像快照（JSON）
+- `widget.dailyReco.v1`：每日推荐缓存（JSON）
+
+### 3.3 App 侧写入与刷新触发时机
+
+- **画像写入**：
+  - Onboarding 完成后（或画像更新后）写入 `widget.userProfile.v1_2`
+- **配置写入**：
+  - App 启动时（或 `API_BASE_URL` 计算完成后）写入 `widget.config.v1`
+- **主动拉取每日推荐（可选但建议）**：
+  - App 启动或进入前台时：
+    - 读取共享 `widget.dailyReco.v1`，若 `day_key` 不是今天则调用 `fetchRecoWidget` 拉取 Top1
+    - 成功写入共享缓存，失败不影响 UI
+- **触发 Widget 刷新**：
+  - 当 App 写入 `widget.dailyReco.v1` 成功后，调用 `WidgetCenter.reloadAllTimelines()`（通过原生桥触发）
+
+> day_key 计算：以用户本地时区生成 `YYYY-MM-DD`（例如 `2026-02-03`）。
+
+---
+
+## 4. iOS Widget（Swift / WidgetKit）改动点
+
+### 4.1 共享存储读取
+
+- 统一使用：
+  - `UserDefaults(suiteName: "group.com.damer.mindfulness")`
+- 读取并解析：
+  - `widget.dailyReco.v1`
+  - `widget.userProfile.v1_2`
+  - `widget.config.v1`
+
+解析失败必须容错：视为缺失，走回退策略。
+
+### 4.2 Timeline 刷新策略（每日）
+
+- `getTimeline` 流程：
+  1. 读 `widget.dailyReco.v1`
+  2. 若 `day_key` 为今天且文案存在 → 直接出 timeline
+  3. 否则尝试网络拉取（需要 config + userProfile 均存在）：
+     - 请求 `POST {apiBaseUrl}/v1/reco/widget`
+     - `Accept-Language`：从缓存 lang 或系统语言映射到 `en/tc`（优先与 App 一致）
+     - `k=1`
+  4. 成功：写入共享缓存并出 timeline
+  5. 失败：用“最近缓存/兜底文案”出 timeline
+
+- `policy`：
+  - `TimelinePolicy.after(nextRefreshDate)`
+  - `nextRefreshDate`：下一天本地时间的一个随机刷新点（例如 00:10～01:00 随机），减少集中刷新与被系统限流概率
+
+### 4.3 网络实现注意事项
+
+- 使用 `URLSession`，超时建议 8～12 秒（与 RN 对齐即可）
+- 无鉴权
+- 失败不抛出 crash：打印有限日志（或仅在 Debug）
+
+---
+
+## 5. 共享数据结构与一致性规则
+
+### 5.1 `widget.dailyReco.v1`（v1）
+
+按 `spec.md` 定义字段，重点：
+
+- `day_key`：本地日 key（用户时区）
+- `lang`：`en|tc`
+- `item.content_id + item.text`：Widget 展示必须字段
+- `source`：标记由 `app` 还是 `widget` 写入（便于排查）
+
+### 5.2 一致性策略（同一天同一条）
+
+规则：
+
+- Widget 展示以 `widget.dailyReco.v1` 为准（共享缓存是单一事实来源）。
+- App 若拉取到新结果，应覆盖写入共享缓存，并触发 reload，保证 Widget 同步。
+- 若当天出现“不同条”风险（并发写入）：
+  - 以最后写入者为准（last-write-wins）
+  - 通过 `saved_at` + `source` 辅助排查
+
+---
+
+## 6. 回退策略（必须实现）
+
+- 今日缓存存在且有效 → 展示
+- 今日缓存无效但有最近缓存 → 展示最近缓存
+- 无任何缓存 → 展示兜底安全文案（写死）
+
+同时：
+
+- 后端返回 `items=[]` 视为失败
+- JSON 解析失败视为无缓存
+
+---
+
+## 7. 实施顺序（建议）
+
+1. **补齐客户端 API**：新增 `fetchRecoWidget`，并在本地可通过 Postman/或 RN 调用验证返回。
+2. **落地 App Group 共享读写（RN → iOS）**：先能写入/读取一个测试 key，确保 suiteName 正确。
+3. **写入共享配置与画像**：保证 Widget 侧具备发起请求所需输入。
+4. **Widget 侧读取缓存并展示**：先用共享缓存驱动 UI（不接网络也能跑通）。
+5. **Widget 侧网络拉取 + 写回缓存**：实现每日更新主链路。
+6. **App 辅助刷新**：App 前台拉取（可选）+ 写缓存 + reloadAllTimelines。
+
+---
+
+## 8. 验收与测试建议
+
+- **联调验收**：
+  - 手动清空共享缓存 → 添加 Widget → 观察首次拉取并展示（或先展示兜底再更新）
+  - 修改设备日期到次日（或模拟 day_key 变化）→ 触发 `getTimeline`，确认会重新拉取
+  - 断网 → 应展示最近缓存/兜底文案，不崩溃
+- **一致性验收**：
+  - App 拉取后写入共享缓存，Widget 在 reload 后显示同一条
+
--- a/spec_kit/Daily
+++ b/spec_kit/Daily
@@ -0,0 +1,197 @@
+# Daily Widget Reco（高层规范）
+
+> 阶段：高层规范（spec）
+>
+> 背景引用：
+>
+> - `spec_kit/Personalized Reco/overview.md`：后端已实现可复用推荐流程（Feed / Push / Widget）
+> - `spec_kit/iOS Widget/spec.md`：已完成 WidgetKit Extension V1（写死文案）
+>
+> 本需求聚焦：**iOS 小组件“每日推荐”与 App 数据共通**，以及**客户端与后端推荐接口的串联**。
+
+---
+
+## 1. 背景与动机
+
+后端已实现推荐接口（含 `widget` 场景），但客户端目前只接入了 Feed 推荐（`POST /v1/reco/feed`），iOS 小组件仍是 V1 写死文案。
+
+现在需要实现：
+
+- iOS 小组件展示“每日推荐”（每天一条），从后端获取。
+- App 与 Widget 的推荐内容数据共通（同一天展示同一条），并支持在用户添加小组件后开始每日更新。
+- 推荐链路具备可回退能力：网络失败、画像缺失、接口异常时不崩溃、仍有可展示内容。
+
+---
+
+## 2. 目标（Goals）
+
+- **后端串联**：客户端与 iOS WidgetKit 能稳定调用后端 `widget` 场景推荐接口获取每日文案。
+- **数据共通**：App 与 Widget 通过 **App Group 共享存储**读写同一份“每日推荐缓存”，保证展示一致。
+- **每日更新（尽力而为）**：
+  - 小组件添加到桌面后，系统开始调度 Widget Timeline；Widget 能在**每天**刷新一次内容（受系统限制，允许延迟）。
+  - App 在合适时机触发更新与 `WidgetCenter.reload`，提高准时性（但不承诺“严格准点”）。
+- **安全与回退**：出现失败时按回退梯度展示（今日缓存 → 最近一次缓存 → 兜底安全文案），且不阻塞 App 主流程。
+
+---
+
+## 3. 非目标（Non-goals）
+
+- 不做 Android Widget。
+- 不在本需求内改动后端推荐算法逻辑与 DB（后端已实现接口）。
+- 不承诺高频刷新（例如分钟级），遵循 iOS WidgetKit 刷新限制。
+- 不在本需求内实现复杂的“用户自定义小组件配置”（例如选择主题/类型）；仅做“每日一句”。
+
+---
+
+## 4. 范围与交付物
+
+### 4.1 范围
+
+- 客户端（React Native / Expo）：
+  - 增加 `POST /v1/reco/widget` 的请求封装（与 Feed 形态一致）。
+  - 负责把“用户画像快照/必要上下文”写入 App Group（供 Widget 拉取/请求）。
+  - 在合适时机触发“写缓存 + 通知 Widget 刷新”。
+- iOS Widget（Swift / WidgetKit Extension）：
+  - 从 App Group 读取“每日推荐缓存”并展示。
+  - 在需要时（缓存过期/缺失）发起网络请求从后端拉取，并写回缓存（或由 App 拉取并写回，见第 8 节决策）。
+- 共享数据契约：
+  - 定义 App 与 Widget 共用的数据结构（版本化、可演进）。
+
+### 4.2 交付物
+
+- 客户端：推荐接口封装 + 共享存储写入 + 刷新触发。
+- iOS：Widget Timeline Provider 支持每日推荐（读取共享缓存/必要时拉取）。
+- 文档：本 `spec.md`。
+
+---
+
+## 5. 术语与关键约束
+
+- **Daily Reco（每日推荐）**：Widget 场景 Top1 文案（每天一条）。
+- **App Group**：iOS 用于 App 与 Extension 共享数据的机制（建议使用共享 `UserDefaults(suiteName:)`）。
+- **Widget 刷新限制**：刷新由系统调度，**不可保证准点**；需要设计缓存与兜底展示。
+
+---
+
+## 6. 后端接口契约（Client ↔ Server）
+
+### 6.1 接口
+
+- `POST /v1/reco/widget`
+
+### 6.2 Header
+
+- `Accept-Language`：
+  - 客户端沿用既有策略：当前仅区分 `en/tc`
+  - 规则：`i18n.language` 以 `zh` 开头 → `tc`，否则 `en`
+
+### 6.3 Request Body（与 Feed 一致）
+
+- `k?: number`（Widget 默认 1；建议不传或显式传 `1`）
+- `user_profile: UserProfileV1_2`（必填）
+- `already_recommended_ids?: (string|number)[]`（可选，默认 `[]`）
+- `touched_or_viewed_ids?: (string|number)[]`（可选，默认 `[]`）
+- `now?: string`（ISO8601，可选，用于测试/确定性）
+
+### 6.4 Response Body
+
+- `items: RecommendedItem[]`（Widget 预期取 `items[0]`；允许为空）
+- `meta: Record<string, unknown>`（用于可观测/调参；客户端可选择性落地）
+
+---
+
+## 7. 共享数据契约（App ↔ Widget）
+
+> 原则：结构**版本化**、字段可缺省、读取端容错；避免把整个业务状态塞进共享区。
+
+### 7.1 共享 Key（建议）
+
+- `widget.dailyReco.v1`：每日推荐缓存（Widget 展示的主数据）
+- `widget.userProfile.v1_2`：用户画像快照（供 Widget 发起请求使用）
+- `widget.recoHistory.v1`：去重/频控所需的最小历史（可选，控制大小）
+- `widget.config.v1`：Widget 端需要的配置（例如 `apiBaseUrl`、灰度开关等）
+
+### 7.2 `widget.dailyReco.v1` 数据结构（JSON）
+
+- `schema_version: 1`
+- `saved_at: string`（ISO8601）
+- `day_key: string`（本地日维度 key，例如 `2026-02-03`；用于“今天是否已刷新”的判断）
+- `lang: "en" | "tc"`
+- `item`（可为空）：
+  - `content_id: number`
+  - `text: string`
+  - `final_score?: number`
+  - `fallback_level_final?: number`
+- `meta?: Record<string, unknown>`（可选，用于排查；注意体积）
+- `source: "app" | "widget"`（可选：谁写入的）
+
+### 7.3 读写规则
+
+- Widget 展示优先级：
+  1. `day_key` 为今天且 `item.text` 非空 → 直接展示
+  2. 否则展示最近一次缓存（若存在）
+  3. 否则展示兜底安全文案（写死）
+- 写入要求：
+  - 写入必须原子化（一次性写完整 JSON），避免部分字段缺失导致解析失败
+  - 解析失败时当作“无缓存”，走兜底策略
+
+---
+
+## 8. 每日更新策略（刷新触发与责任划分）
+
+### 8.1 关键结论
+
+为满足“用户添加小组件后可每日更新”，需要依赖 WidgetKit 自身的 Timeline 调度。仅靠 App 在前台触发更新，无法保证用户不打开 App 时也能更新。
+
+### 8.2 推荐实现（V1.5：Widget 主动拉取）
+
+- **Widget Timeline Provider**：
+  - 每次 `getTimeline`：
+    - 先读 `widget.dailyReco.v1`
+    - 若 `day_key` 不是今天 → 尝试从后端请求 `POST /v1/reco/widget` 获取今日内容
+    - 成功后写入 `widget.dailyReco.v1` 并返回 timeline
+    - 失败则返回“最近一次缓存/兜底文案”的 timeline
+  - Timeline 刷新策略：
+    - `policy = .after(nextRefreshDate)`，`nextRefreshDate` 设为“下一天的本地 00:10～01:00 之间随机一个时间”（减少集中刷新）
+
+- **App（RN）**：
+  - 在 Onboarding 完成或画像更新时，把 `widget.userProfile.v1_2` 写入共享区
+  - 当 App 成功拉取到推荐（可选）时，也可写入 `widget.dailyReco.v1` 并触发 `WidgetCenter.reloadAllTimelines()`，提升即时性
+
+### 8.3 备选实现（App 主动拉取 + Widget 仅展示）
+
+若团队希望 Widget 端完全不发网络请求，则：
+
+- App 负责在“启动/前台/每天首次打开”等时机拉取 `POST /v1/reco/widget` 并写入共享缓存
+- Widget 仅读取缓存展示
+
+缺点：用户不打开 App 时，小组件可能长期不更新（不满足“每日更新”的强诉求）
+
+---
+
+## 9. 失败回退与稳定性
+
+- **网络失败**：使用最近一次缓存；若无缓存，展示兜底安全文案。
+- **接口返回 items 为空**：视为失败，走同样回退。
+- **画像缺失**：
+  - App 侧应尽量在首次进入完成问卷后写入 `widget.userProfile.v1_2`
+  - 若仍缺失，Widget 端不崩溃，直接展示缓存/兜底文案；并在下一次 timeline 继续尝试
+- **数据损坏/解析失败**：清空本次读取结果，走兜底策略（不可 crash）。
+
+---
+
+## 10. 验收标准（Acceptance Criteria）
+
+- **接口串联**：客户端/Widget 能成功请求 `POST /v1/reco/widget` 并解析返回。
+- **数据共通**：同一天内，App 与 Widget 展示的“每日推荐”一致（以共享缓存为准）。
+- **每日更新**：用户把小组件添加到桌面后，小组件在后续每天能更新到新的推荐（允许系统延迟，但应在一天内更新）。
+- **可用性**：断网/后端不可用/返回异常时，Widget 仍能展示最近缓存或兜底文案，App 不崩溃。
+
+---
+
+## 11. 风险与注意事项
+
+- iOS Widget 刷新由系统调度，无法承诺“严格 00:00 更新”；需接受“尽力而为 + 缓存兜底”。
+- App Group 的 suiteName / entitlements 配置错误会导致 Widget 读不到共享数据；必须在实现阶段统一校验。
+- Widget 端直连后端需要维护 baseURL 与环境切换策略（dev/pro）；建议通过 `widget.config.v1` 注入，避免写死。
+
--- a/spec_kit/Daily
+++ b/spec_kit/Daily
@@ -0,0 +1,144 @@
+# Daily Widget Reco（任务清单）
+
+> 对应计划：`spec_kit/Daily Widget Reco/plan.md`
+>
+> 标记规则：
+>
+> - 执行完成后将对应项从 `- [ ]` 改为 `- [x]`，并把“状态”改为 **已完成**
+> - 进行中改为 **进行中**
+> - 阻塞写明原因与解除条件
+
+---
+
+## 0. 清单状态说明
+
+- **状态**：未开始 / 进行中 / 已完成 / 阻塞
+- **阻塞**：必须写明阻塞点与解除条件
+
+---
+
+## 1. 客户端：补齐 Widget 场景 API（RN）
+
+- [ ] **新增 `fetchRecoWidget`（`POST /v1/reco/widget`）**  
+  - **状态**：未开始  
+  - **文件**：`client/src/services/recoApi.ts`  
+  - **要求**：
+    - Header `Accept-Language` 逻辑沿用 `fetchRecoFeed`
+    - body 结构沿用 `RecoRequest`
+    - timeout 建议 12s
+  - **验收**：在 App 内调用可拿到 `items[0].text`（允许为空但不报错）
+
+---
+
+## 2. iOS 原生能力：App Group 共享读写（suiteName 已确认）
+
+> suiteName：`group.com.damer.mindfulness`
+
+- [ ] **新增 App Group 共享存储原生模块（RN Bridge）**  
+  - **状态**：未开始  
+  - **目标**：RN 可写/读共享 `UserDefaults(suiteName:)`  
+  - **要求**：
+    - 支持 `setString(key, value)` / `getString(key)`（最小闭环）
+    - 以 JSON 字符串形式存储（上层 JS 自行 `JSON.stringify/parse`）
+  - **验收**：
+    - RN 写入后，Widget 侧能读到同一 key
+    - 解析失败不 crash（返回 `null`/空字符串均可，按上层回退）
+
+- [ ] **新增触发 Widget 刷新的原生方法（可选但建议）**  
+  - **状态**：未开始  
+  - **目标**：App 写入缓存后触发 `WidgetCenter.reloadAllTimelines()`  
+  - **验收**：App 调用后，Widget 在合理时间内刷新显示新内容（允许系统延迟）
+
+---
+
+## 3. 客户端：写入共享配置/画像/每日缓存（App ↔ Widget 共通）
+
+- [ ] **写入共享配置 `widget.config.v1`（包含 `apiBaseUrl`）**  
+  - **状态**：未开始  
+  - **要求**：
+    - App 启动后（或 baseURL 计算完成后）写入
+    - JSON 字段最少包含：`schema_version`、`apiBaseUrl`、`saved_at`
+  - **验收**：Widget 侧可读到正确 baseURL（dev/pro 随 App 切换）
+
+- [ ] **写入共享画像 `widget.userProfile.v1_2`（Onboarding 完成后）**  
+  - **状态**：未开始  
+  - **依赖**：客户端已能获取/持久化用户画像（本地存储已有 `user.profileScoring`）  
+  - **要求**：
+    - 结构以现有 `UserProfileV1_2` 输出为准
+    - JSON 字段建议包含：`schema_version`、`saved_at`、`user_profile`
+  - **验收**：Widget 侧可读到 `user_profile`，且可用于请求后端
+
+- [ ] **实现 App 前台“可选主动拉取”并写入 `widget.dailyReco.v1`**  
+  - **状态**：未开始  
+  - **要求**：
+    - 判断 `day_key`（用户时区 `YYYY-MM-DD`）不是今天时才拉取
+    - 调用 `fetchRecoWidget(k=1)`，成功写入缓存
+    - 失败不影响 UI，不阻塞主流程
+  - **验收**：App 打开后能把今日推荐写入共享缓存，Widget reload 后展示一致
+
+---
+
+## 4. iOS Widget：读取共享缓存并展示（先不接网络也能跑通）
+
+- [ ] **Widget 读取 `widget.dailyReco.v1` 并展示**  
+  - **状态**：未开始  
+  - **要求**：
+    - JSON 解析失败容错：视为无缓存
+    - 展示优先级：今日缓存 → 最近缓存 → 兜底文案
+  - **验收**：手动写入共享缓存后，Widget 立即能展示对应文案（或在下一次 reload 展示）
+
+---
+
+## 5. iOS Widget：网络拉取每日推荐 + Timeline 每日刷新（核心）
+
+- [ ] **Widget 在缓存过期时请求 `POST /v1/reco/widget` 并写回缓存**  
+  - **状态**：未开始  
+  - **依赖**：可读到 `widget.config.v1`（apiBaseUrl）与 `widget.userProfile.v1_2`（user_profile）  
+  - **要求**：
+    - 无鉴权
+    - 超时建议 8～12s
+    - `Accept-Language` 与 App 保持一致（`en/tc`）
+    - `items=[]` 视为失败，走回退
+  - **验收**：清空今日缓存后，Widget 能在一次 timeline 请求内拉取并展示今日推荐（允许先兜底再更新）
+
+- [ ] **实现每日刷新调度（TimelinePolicy）**  
+  - **状态**：未开始  
+  - **要求**：
+    - `nextRefreshDate` 设置为“下一天本地时间 00:10～01:00 随机”之一
+    - 不追求严格准点，但确保每日范围内能更新
+  - **验收**：通过修改系统日期/模拟 day_key 变化，可观察到会进入“过期→重新拉取”逻辑
+
+---
+
+## 6. 联调与验收验证（必须）
+
+- [ ] **联调：添加小组件后，未打开 App 也能每日更新（尽力而为）**  
+  - **状态**：未开始  
+  - **步骤**：
+    - 安装带 Widget 的开发包
+    - 在桌面添加 Widget
+    - 清空今日缓存并等待 Widget 刷新（或手动触发 reload）
+  - **验收**：Widget 能从后端拉取并展示；隔天能更新到新内容（允许系统延迟）
+
+- [ ] **回退验证：断网/后端不可用/返回异常**  
+  - **状态**：未开始  
+  - **验收**：
+    - Widget 不崩溃
+    - 展示最近缓存或兜底文案
+
+- [ ] **一致性验证：App 与 Widget 当天展示一致**  
+  - **状态**：未开始  
+  - **验收**：App 主动拉取并写入缓存后，Widget reload 后展示同一条 `content_id/text`
+
+---
+
+## 7. 文档与总览更新
+
+- [ ] **补充实现说明（可放入客户端 README 或本需求 overflow）**  
+  - **状态**：未开始  
+  - **要求**：记录 suiteName、共享 key、如何本地验证
+
+- [ ] **更新 `spec_kit/overview.md`**  
+  - **状态**：未开始  
+  - **要求**：在“Spec Kit Overview”中新增本需求摘要（目标/产物/已完成编码变更）
+
--- a/spec_kit/Policy
+++ b/spec_kit/Policy
@@ -0,0 +1,122 @@
+# Policy Links（技术计划）
+
+## 1. 目标与原则
+
+**目标**：让客户端所有「隐私协议 / 使用协议」入口（至少包含：首次同意页 + 个人主页弹窗）统一通过后端接口获取链接，并支持按设备语言分发，缺省回退 EN。
+
+**原则**：
+
+- 客户端不写死协议 URL（避免发版更新）
+- 请求失败不阻塞主流程（尤其是首次同意页）
+- 语言选择策略一致、可解释、可排查（返回 `resolvedLang`）
+
+## 2. 接口与契约
+
+### 2.1 HTTP 接口
+
+- **方法与路径**：`GET /v1/legal/links`
+- **请求头**：
+  - `Accept-Language`: `en` / `tc`（当前仅支持 EN / TC；客户端可按 i18n/设备语言映射为其中之一）
+- **响应**（JSON）：
+  - `privacyPolicyUrl: string`
+  - `termsOfUseUrl: string`
+  - `resolvedLang: "en" | "tc"`
+
+### 2.2 语言回退（服务端决策）
+
+- 若 `Accept-Language` 缺失/无法解析：回退 `en`
+- 若目标语言的链接未配置：回退 `en`
+- `resolvedLang` 表示服务端最终命中的语言（用于排查）
+
+## 3. 后端实现方案（FastAPI）
+
+### 3.1 配置来源
+
+采用环境变量（Pydantic Settings）承载各语言链接配置：
+
+- 推荐配置（EN）：
+  - `LEGAL_PRIVACY_URL_EN`
+  - `LEGAL_TERMS_URL_EN`
+- 可选：
+  - `LEGAL_PRIVACY_URL_TC` / `LEGAL_TERMS_URL_TC`
+
+> 补充：若未配置 `LEGAL_*`，后端将使用**内置协议内容页**作为兜底，保证客户端点击后“必有内容”。
+
+### 3.2 路由与业务逻辑
+
+- 新增 `v1/legal` 路由模块
+- 读取 `Accept-Language` 做轻量解析（只关心 en/tc，其他回退 en）
+- 根据解析结果选择 URL；如缺失则回退到 EN URL
+
+### 3.3 内置协议内容页（兜底，保证有内容）
+
+- **页面接口**：
+  - `GET /v1/legal/privacy`：隐私协议（HTML）
+  - `GET /v1/legal/terms`：使用协议（HTML）
+- **内容来源**：
+  - 直接使用仓库文档：`设计说明文档/隐私协议.md`、`设计说明文档/用户使用协议.md`
+- **语言策略**：
+  - 仍按 `Accept-Language` 解析 `en/tc`；若文档缺少 tc 段落则回退 en
+- **链接下发回退**：
+  - 当 `LEGAL_*` 未配置（或显式走内置）时，`GET /v1/legal/links` 返回当前服务域名下的上述内置页面绝对 URL
+
+### 3.4 兼容性与安全
+
+- 要求链接为 HTTPS（推荐）；返回前做基本 URL 校验（通过响应模型约束）
+- 不引入数据库变更
+
+### 3.5 后端测试（建议）
+
+- 单测覆盖：
+  - `Accept-Language` 缺失 → `resolvedLang=en`
+  - `tc` 命中/缺失回退
+  - `zh-hant/zh-hk/zh-tw` 等输入能解析为 `tc`
+
+## 4. 客户端实现方案（React Native + Expo）
+
+### 4.1 统一 service
+
+- 新增 `src/services/legalApi.ts`：
+  - 统一拼接 `API_BASE_URL + /v1/legal/links`
+  - 统一设置 `Accept-Language`
+  - 统一超时与错误处理（抛错由调用方兜底）
+
+### 4.2 接入点
+
+- **首次同意页**（`app/(splash)/splash.tsx`）：
+  - 页面展示时拉取链接
+  - 拉取失败：不崩溃、不阻塞「同意并继续」
+  - 点击协议入口：使用 `expo-web-browser` 打开下发链接
+- **个人主页弹窗**（`components/home/ProfileModal.tsx`）：
+  - 弹窗打开时拉取链接
+  - 点击「隐私协议/使用协议」时打开下发链接（不再 `toastTodo`）
+
+### 4.3 语言映射策略（客户端）
+
+- 将客户端当前语言映射到 `en / tc` 二选一：
+  - 任意 `zh*` → `tc`
+  - 其他语言 → `en`
+
+## 5. 可观测与排障
+
+- 开发环境打印：
+  - 请求地址、请求头（含 `Accept-Language`）
+  - 拉取失败原因（仅 dev）
+- 线上环境：
+  - 不打印用户相关敏感信息（本接口仅链接配置，风险较低，但仍应克制日志）
+
+## 6. 发布与回滚策略
+
+- **灰度**：dev 环境可先不配 `LEGAL_*`，直接验证内置页面能打开；再逐步切到外部托管链接
+- **补齐多语言**：逐步补齐 `zh-CN` / `zh-TW` 链接配置
+- **回滚**：
+  - 后端：回滚到仅 EN 配置仍可运行（客户端自动回退）
+  - 客户端：即使接口失败也不阻塞主流程（保持可用）
+
+## 7. 验收映射（对应 spec）
+
+- 首次同意页 + 个人主页弹窗均从 API 获取链接
+- 设备语言为 EN/TC 时分别打开对应链接
+- 不支持语言回退 EN
+- 后端不可达时 App 不崩溃，且同意流程可继续
+
--- a/spec_kit/Policy
+++ b/spec_kit/Policy
@@ -0,0 +1,127 @@
+# Policy Links（高层规范）
+
+## 1. 背景与目标
+
+当前客户端首次进入的同意页（Splash Consent）需要在底部提供「隐私协议」「用户使用协议」的查看入口。为避免协议链接写死在客户端、并支持多语言分发，本需求将**协议链接放到后端统一管理与下发**，客户端按设备语言展示对应链接。
+
+### 目标
+
+- **首进页补充协议链接**：在客户端首次进入的同意页底部展示「隐私协议」「用户使用协议」链接入口
+- **后端托管与可配置**：协议链接由后端配置与下发，支持后续更新而无需发版
+- **按设备语言下发**：后端根据客户端设备语言返回对应语言的链接
+- **默认 EN**：当语言缺失/不支持/无法识别时，回退为英文（EN）链接
+
+### 非目标（本阶段不做）
+
+- 不做复杂的协议版本强制重同意机制（例如协议更新后要求重新同意）
+- 不规定协议内容必须以何种格式（Markdown/HTML/PDF）存储；本需求仅要求“链接由后端提供并可访问”
+
+## 2. 需求范围与交付物
+
+### 范围
+
+- 客户端：
+  - 首次进入同意页底部展示 2 个协议链接入口，并在点击时打开对应链接
+  - **个人主页弹窗（ProfileModal）**中「隐私协议」「用户使用协议」入口也必须使用同一套后端下发链接（不再写死/不再 TODO）
+- 后端：提供可被客户端请求的协议链接下发能力，并支持按语言返回不同链接
+
+### 交付物
+
+- 后端：新增/扩展一个“协议链接配置与下发”的接口（或纳入现有配置接口），并可按语言返回
+- 客户端：同意页 UI 补充协议链接入口，且链接来源改为后端下发（含兜底策略）
+- 文档：本 spec
+
+## 3. 用户体验与交互（高层）
+
+### 3.1 展示位置
+
+- 位置：客户端**首次进入同意页**底部，「同意并继续」按钮下方（或同等位置）展示：
+  - **隐私协议**
+  - **用户使用协议**
+
+### 3.2 点击行为
+
+- 点击后打开对应链接内容：
+  - 推荐使用 App 内 WebView（不离开 App），也允许外部浏览器打开（实现阶段在客户端方案中确定）
+- 若链接无法获取或打开失败：
+  - 仍允许用户继续使用“同意并继续”（不阻塞主流程）
+  - 入口可隐藏或展示为不可点击状态（实现阶段确定，但需保持体验一致且不崩溃）
+
+## 4. 语言策略
+
+### 4.1 语言来源
+
+- 客户端以**设备语言/应用当前语言**作为请求依据（优先级由客户端既有 i18n 策略决定）
+- 客户端请求应携带语言信息（例如 `Accept-Language` 头或显式参数）
+
+### 4.2 默认与回退
+
+- 默认语言：**EN**
+- 回退策略（必须满足）：
+  - 语言缺失/空值 → EN
+  - 语言不支持 → EN
+  - 后端配置缺失对应语言 → EN
+
+### 4.3 支持语言（建议）
+
+当前多语言仅支持 **EN / TC**，建议最少覆盖：
+
+- `en`
+- `tc`
+
+> 说明：当前协议文档可能包含英文与繁体版本；当 tc 版本缺失时，系统会回退到 EN。
+
+## 5. 后端职责（高层）
+
+### 5.1 配置管理
+
+- 后端存储并维护协议链接配置，至少包含：
+  - `privacy_policy_url`
+  - `terms_of_use_url`
+- 配置需支持按语言维度区分（例如每个语言各一套 URL）
+- **兜底要求**：当外部托管链接未配置或不可用时，后端应提供可访问的内置协议页面（保证客户端点击“必有内容”）
+
+### 5.2 下发接口（建议形态）
+
+- 提供一个可被客户端调用的接口，用于获取协议链接（示例，仅表达形态，不强制路径）：
+  - `GET /v1/legal/links`
+- 输入（建议）：
+  - 语言：通过 `Accept-Language` 或 `lang` 参数（例如 `en`/`tc`）
+  - 可选：平台、App 版本（用于灰度/差异化配置）
+- 输出（建议）：
+  - `privacyPolicyUrl: string`
+  - `termsOfUseUrl: string`
+  - `resolvedLang: string`（后端最终命中的语言，便于排查）
+
+### 5.3 可用性与安全
+
+- 链接必须可被公网访问（或在 App 可访问的网络环境可达）
+- 推荐使用 HTTPS
+- 若后端短时不可用，不应导致客户端首进流程崩溃
+
+## 6. 客户端职责（高层）
+
+- 在首次进入同意页渲染时，向后端请求协议链接
+- 根据返回结果渲染「隐私协议」「用户使用协议」入口
+- 若请求失败或返回缺失：
+  - 按本 spec 的默认回退策略处理（最终保证 EN）
+  - 不阻塞“同意并继续”主流程
+- （建议）对获取到的链接做轻量校验（非空字符串、看起来是 URL），避免渲染异常
+
+## 7. 验收标准
+
+- **首进展示**：首次进入同意页时，底部出现「隐私协议」「用户使用协议」入口
+- **语言分发**：
+  - 设备语言为 EN 时，打开英文链接
+  - 设备语言为已支持的其他语言（如 `zh-CN`/`zh-TW`）时，打开对应语言链接
+  - 设备语言为不支持语言时，默认回退打开 EN 链接
+- **稳定性**：后端不可达/返回异常时：
+  - App 不崩溃
+  - “同意并继续”仍可正常进入后续流程
+
+## 8. 风险与注意事项
+
+- **法务一致性**：各语言协议内容差异需要法务确认；若部分语言缺失，需明确 `zh-CN` 的回退策略（到 EN 还是 `zh-TW`）
+- **链接长期可用**：后端配置的 URL 需保证稳定与可访问性（避免过期链接导致合规风险）
+- **缓存与更新**：若客户端做本地缓存，需要确保更新后能及时刷新（本期不强制，后续可扩展）
+
--- a/spec_kit/Policy
+++ b/spec_kit/Policy
@@ -0,0 +1,68 @@
+# Policy Links（任务清单）
+
+> 说明：本清单按 `plan.md` 拆分为可执行任务。  
+> 状态含义：`[ ]` 未完成，`[x]` 已完成。
+
+## 0. 前置检查
+
+- [x] 确认客户端存在至少两处协议入口：首次同意页、个人主页弹窗（ProfileModal）
+- [x] 确认后端路由前缀体系为 `/v1/*`
+
+## 1. 后端（FastAPI）——协议链接下发
+
+### 1.1 配置项（环境变量）
+
+- [x] 在后端配置类中新增协议链接配置（EN 兜底 + 可选 TC）
+- [x] 在 `server/env.example` 补充 `LEGAL_*` 配置示例与注释
+
+### 1.2 API 路由与返回结构
+
+- [x] 新增 `GET /v1/legal/links` 接口
+- [x] 解析 `Accept-Language`（轻量：只关心 `en/tc`，其他回退 `en`）
+- [x] 支持语言缺失/未配置时回退 EN
+- [x] 返回 `resolvedLang` 便于排查
+- [x] 在 `app/main.py` 注册 legal router
+
+### 1.3 代码质量与最小校验
+
+- [x] 确保后端代码可被 `python3 -m compileall` 编译通过
+- [x] （可选）补充单测：覆盖缺省、tc、zh-hant/zh-hk/zh-tw 等输入解析与回退（unittest）
+
+### 1.4 内置协议内容页（兜底，保证有内容）
+
+- [x] 新增 `GET /v1/legal/privacy`、`GET /v1/legal/terms` 两个 HTML 页面接口
+- [x] 未配置 `LEGAL_*` 时，`GET /v1/legal/links` 自动回退到内置页面绝对 URL
+- [x] 更新后端配置默认值：`LEGAL_*` 未配置时使用内置页面（`__internal__` 哨兵）
+
+## 2. 客户端（React Native + Expo）——统一获取并打开链接
+
+### 2.1 新增统一请求封装
+
+- [x] 新增 `client/src/services/legalApi.ts`
+- [x] 统一设置 `Accept-Language`（将客户端当前语言映射到 `en/tc`）
+- [x] 统一超时与错误处理（抛错给调用方兜底）
+
+### 2.2 首次同意页接入
+
+- [x] 将 `client/app/(splash)/splash.tsx` 的写死 URL 改为调用 `fetchLegalLinks()`
+- [x] 拉取失败不崩溃、不阻塞「同意并继续」
+- [x] 点击协议入口用 `expo-web-browser` 打开后端下发链接
+
+### 2.3 个人主页弹窗接入
+
+- [x] 将 `client/components/home/ProfileModal.tsx` 的 `toastTodo` 替换为打开后端下发链接
+- [x] 弹窗打开时拉取链接（失败不影响其他功能）
+- [x] 修复 TypeScript 定时器类型（RN 环境兼容）
+
+### 2.4 客户端最小验证
+
+- [x] 运行现有 `vitest` 测试通过（`npm test`）
+- [x] （可选）补充一个轻量测试：`buildAcceptLanguage()` 映射规则（en/tc）
+
+## 3. 文档与追踪
+
+- [x] `spec_kit/Policy Links/spec.md` 增补：个人主页弹窗也必须使用同一 API；接口路径统一为 `GET /v1/legal/links`
+- [x] 生成 `spec_kit/Policy Links/plan.md`
+- [x] 生成 `spec_kit/Policy Links/tasks.md`
+- [x] 在 `spec_kit/overview.md` 的 `Policy Links` 条目下标记“任务清单已执行完毕（已完成编码）”
+
--- a/Widget/plan.md
+++ b/Widget/plan.md
@@ -46,5 +46,5 @@
 ## 6. 风险与注意事项

 - **Expo Go 不支持**：必须用 Xcode 运行预构建后的 App（或后续 EAS Build）
- **Bundle Identifier**：当前 `client/app.json` 使用 `com.anonymous.client`，仅适合本地验证；上线前需替换为真实 bundle id，并同步证书/签名
+- **Bundle Identifier**：当前工程已统一为主 App `com.damer.mindfulness`，Widget Extension `com.damer.mindfulness.emotionwidget`；上线前仍需在 Apple Developer / App Store Connect 侧确保 App ID、证书与签名匹配

--- a/Widget/tasks.md
+++ b/Widget/tasks.md
@@ -65,7 +65,7 @@ npx expo prebuild -p ios
  - **排查**：
    - 桌面搜索不到：通常是没有 Run 安装过主 App，或 Widget target 未加入编译
    - 点击不跳转：确认 Widget 里 `widgetURL` 为 `client:///(app)/home`，且 `app.json` 的 `scheme` 为 `client`
-    - 仍然搜不到：检查 Widget Extension 的 Bundle Identifier 是否有效（本仓库已修正为 `com.anonymous.client.emotionwidget`），然后 Clean + 重新安装 App
+    - 仍然搜不到：检查 Widget Extension 的 Bundle Identifier 是否有效（本仓库已修正为 `com.damer.mindfulness.emotionwidget`），然后 Clean + 重新安装 App

 ## 6. 文档补充（可选但建议）

--- a/spec_kit/overview.md
+++ b/spec_kit/overview.md
@@ -18,6 +18,8 @@
 - **已完成编码（阶段性）**：
  - Expo 工程已在 `client/` 初始化，并完成 `pnpm install`
  - i18n 基座已接入：5 份语言资源 + 设备语言优先/设置可切换/持久化 + 入口初始化
+  - 推荐 Feed 请求链路增加调试日志（仅开发环境）：打印 Feed API 请求头与请求体，便于联调排查
+  - 环境变量注入增加调试日志（仅开发环境）：打印参与 `API_BASE_URL` 计算的 `EXPO_PUBLIC_*` 与最终解析结果，便于定位“打到哪个后端”

 ## Client User Identity

@@ -26,6 +28,27 @@
 - **阶段产物**：
  - `spec_kit/Client User Identity/spec.md`

+## App Push
+
+- **目标**：实现“每日提醒”推送闭环：首次进入 Onboarding 可选择每日推送次数（0～5，可跳过），个人主页每日提醒弹窗可改次数/关闭；客户端使用首次生成 UUID（`client_user_id`）与后端关联；后端按用户配置定时推送
+- **关键选型**：客户端继续使用 `expo-notifications`；后端使用 Expo Push Service + 定时任务（Celery/等价方案）按用户偏好发送
+- **阶段产物**：
+  - `spec_kit/App Push/spec.md`
+  - `spec_kit/App Push/plan.md`
+  - `spec_kit/App Push/tasks.md`
+- **已完成编码（阶段性）**：
+  - 客户端：新增 `client_user_id`（UUID v4）生成与持久化；每日提醒次数范围修正为 **0～5**（0 表示关闭）
+  - 客户端：Onboarding 结束页（每日提醒）在用户选择次数 > 0 时**直接触发系统权限申请**；授权后获取 Expo Push Token 并调用后端 `register/preferences`（移除单独的 push 引导页）
+  - 客户端：个人主页“每日提醒”弹窗移除测试模式强制无权限逻辑，改为真实读取系统权限；并在开关/点击 OK 时同步后端偏好
+  - 客户端：新增推送接口封装 `client/src/services/pushApi.ts`（token 获取、register/preferences/get、自动上报时区与 locale，并携带用户画像供后端 Push 模板使用）
+  - 后端：新增 Push 数据模型 + Alembic 迁移（`push_tokens` / `push_preferences` / `push_send_log`）
+  - 后端：新增 Push API（`/v1/push/register`、`/v1/push/preferences`、`/v1/push/test`（dev）），并新增基础限流
+  - 后端：实现 Celery 定时任务
+    - 每日生成计划（按用户时区在 9:00～24:00 均匀分段随机抖动生成 0～5 个时间点）
+    - ETA 发送任务（幂等：同一用户同一天同一 slot 只发一次；用户中途关闭/降次数会跳过）
+    - 发送文案复用推荐模块 `scene="push"`（降风险）
+  - 后端：`pytest` 全量通过（27 passed）
+
 ## Project Bootstrap

 - **目标**：完成项目仓库初始化与工程约定落地，明确 client/server 结构、dev/pro 环境隔离、MySQL/Redis 资源命名与访问边界
@@ -36,11 +59,16 @@
  - 安全：真实 IP/账号/密码/Token 不写入仓库，仅提供 `.env.example` 结构
 - **阶段产物**：
  - `spec_kit/Project Bootstrap/spec.md`
+- **近期变更**：
+  - 新增后端镜像构建基础：`server/Dockerfile`、`server/.dockerignore`
+  - 新增后端镜像打包与推送工作流：`.gitea/workflows/server-build.yml`（自动递增 semver tag 并推送到 Docker Hub）
+  - 新增后端蓝绿部署工作流：`.gitea/workflows/server-deploy.yml`（SSH 上机 + Docker 蓝绿启动 + Nginx upstream 切流 + 健康检查与失败回滚）
+  - 后端配置缺失时报错增强：`app/core/config.py` 将缺失的必填环境变量用中文提示并给出注入方式；补充 `server/env.example` 与 Docker 运行说明

 ## Onboarding App Shell

- **目标**：落地首次进入体验（Onboarding 3–5 页可跳过 + Push 设置可跳过）与主应用壳（点赞/讨厌、收藏夹入口、通用设置入口）
- **核心范围**：Onboarding 多页流程、Push 引导页、主界面反应操作（Like/Dislike）、收藏夹、设置页（版本、iOS 小组件入口/说明）
+- **目标**：落地首次进入体验（Onboarding 3–5 页可跳过 + 每日提醒可跳过/可关闭）与主应用壳（点赞/讨厌、收藏夹入口、通用设置入口）
+- **核心范围**：Onboarding 多页流程、主界面反应操作（Like/Dislike）、收藏夹、设置页（版本、iOS 小组件入口/说明）
 - **阶段产物**：
  - `spec_kit/Onboarding App Shell/spec.md`
  - `spec_kit/Onboarding App Shell/plan.md`
@@ -54,6 +82,12 @@
  - `spec_kit/iOS Widget/spec.md`
  - `spec_kit/iOS Widget/plan.md`
  - `spec_kit/iOS Widget/tasks.md`
+- **近期变更**：
+  - iOS 主 App Bundle ID 已统一为 `com.damer.mindfulness`，Widget Extension 为 `com.damer.mindfulness.emotionwidget`
+  - 修复 iOS 签名 Team 配置不一致：为主 App（Debug）与 Widget Extension（Debug/Release）显式补齐 `DEVELOPMENT_TEAM=WS92GPX9H2`，避免打包/上传过程中回退到默认 Team 导致显示 “Other Team”
+  - iOS 构建号已提升到 `2`，并将 `client/ios/client/Info.plist` 改为自动跟随 `MARKETING_VERSION` / `CURRENT_PROJECT_VERSION`
+  - 推送 entitlements 的 `aps-environment` 已切到 `production`（用于 TestFlight/线上包）
+  - 清理未接入编译的 WidgetKit 骨架残留：移除磁盘上的 `client/ios/MindfulnessWidget/` 文件，并从 `client/ios/client.xcodeproj/project.pbxproj` 删除对应工程引用（避免 Xcode 显示幽灵文件）

 ## Splash Consent

@@ -64,6 +98,38 @@
  - `spec_kit/Splash Consent/plan.md`
  - `spec_kit/Splash Consent/tasks.md`

+## Policy Links
+
+- **目标**：在客户端首次进入同意页底部补充「隐私协议/用户使用协议」入口，并将协议链接改为**由后端托管与按设备语言下发**（默认回退 EN）
+- **核心范围**：后端提供协议链接下发接口（可配置、可多语言）；客户端按设备语言请求并展示链接，失败不阻塞“同意并继续”
+- **阶段产物**：
+  - `spec_kit/Policy Links/spec.md`
+  - `spec_kit/Policy Links/plan.md`
+  - `spec_kit/Policy Links/tasks.md`
+- **已完成编码（任务清单已执行完毕）**：
+  - 后端新增 `GET /v1/legal/links`（按 `Accept-Language` 分发，默认回退 EN，返回 `resolvedLang`）
+  - 后端配置：`LEGAL_*` 环境变量（`server/env.example` 已补齐示例；不配置时走内置协议页兜底）
+  - 后端新增内置协议内容页：
+    - `GET /v1/legal/privacy`
+    - `GET /v1/legal/terms`
+  - 客户端新增协议接口封装 `client/src/services/legalApi.ts`
+  - 客户端工程化：新增统一 HTTP 封装 `client/src/utils/http.ts`（baseURL/超时/JSON/统一错误），并将 `legalApi.ts` / `recoApi.ts` 接入
+  - 客户端接入两处入口：`app/(splash)/splash.tsx`、`components/home/ProfileModal.tsx`
+  - **变更文件清单**：
+    - `server/app/api/v1/legal.py`
+    - `server/app/core/config.py`
+    - `server/app/legal_docs.py`
+    - `server/app/main.py`
+    - `server/env.example`
+    - `server/tests/test_legal_links_unittest.py`
+    - `client/src/services/legalApi.ts`
+    - `client/src/services/__tests__/legalApi.test.ts`
+    - `client/app/(splash)/splash.tsx`
+    - `client/components/home/ProfileModal.tsx`
+    - `spec_kit/Policy Links/spec.md`
+    - `spec_kit/Policy Links/plan.md`
+    - `spec_kit/Policy Links/tasks.md`
+
 ## Card UI

 - **目标**：优化卡片页 UI 与交互，支持右上角主题切换与个人主页弹窗，并将喜欢/讨厌改为 icon + 动效
--- a/设计说明文档/用户使用协议.md
+++ b/设计说明文档/用户使用协议.md
@@ -1,29 +1,102 @@
-欢迎使用本App（情绪推送应用）。请仔细阅读以下协议内容：
+Hey Mama – Terms of Use
+Last updated: February 2026
+Welcome to Hey Mama (“the App,” “we,” or “us”).
+Please read these Terms of Use carefully before downloading, accessing, or using the App. By using the App, you agree to be bound by these Terms.

-适用范围与接受：本协议适用于您下载、安装、登录或使用本App时的全部行为。您在使用本App前，应仔细阅读并充分理解本协议的各项条款。一旦您下载、安装或使用本App，即表示您已阅读并同意接受本协议的全部内容；如果您不同意，请立即停止使用。
+1. Intended Audience
+Hey Mama is intended for adults only.
+The App is not designed for children, and users must ensure they have the legal capacity to use the App under applicable laws.

-服务内容：本App致力于为宝妈群体提供情绪关怀和正能量内容，包括通过定时推送名人励志语句、个性化推荐情绪正向内容等功能。您无需注册或登录即可使用本App，可选择提供昵称改善使用体验。通过参与问卷调查和点击操作，您可帮助我们了解您的内容偏好，以获得更符合您需求的推荐内容。
+2. Services Provided
+Hey Mama provides text-based content and features, including but not limited to:
+- Daily affirmations and mindfulness text
+- User-configured reminders and push notifications
+- Home screen widgets displaying affirmation text
+- Personalized reading or saving experiences (where applicable)
+All content is provided for general emotional support and self-reflection purposes only and does not constitute medical, psychological, or professional advice.

-使用规范：
+3. Acceptable Use
+You agree to:
+- Use the App for personal, non-commercial purposes only
+- Not copy, reproduce, distribute, sell, modify, reverse engineer, or attempt to extract the source code of the App
+- Not engage in any activity that may interfere with the App’s functionality, stability, or user experience
+We reserve the right to restrict or terminate access if these Terms are violated.

-您承诺遵守中华人民共和国相关法律法规，不得利用本App从事任何违法犯罪或侵权行为。
+4. Push Notifications
+The App may send push notifications based on your settings (e.g. daily affirmation reminders).
+- Notifications contain general text only
+- No sensitive personal data is included
+- You may disable notifications at any time through your device settings

-您不得干扰本App的正常运行，不得攻击、破坏应用系统或试图绕过使用限制。
+5. Intellectual Property
+All content, design elements, interfaces, and materials within the App are owned by us or our licensors and are protected by applicable intellectual property laws.
+Unauthorized use, reproduction, or distribution is strictly prohibited.

-您不得未经授权破解、反编译、反向工程、篡改本App软件，也不得删除或篡改本App内的任何版权、商标或所有权声明。
+6. Disclaimer
+The App and its content are provided for informational and self-support purposes only.
+- We do not guarantee specific emotional or psychological outcomes
+- The App does not replace professional medical, mental health, or legal advice
+- You are solely responsible for how you use the content

-本App及其中的素材、内容（包括但不限于名人句子、图文等）版权归开发者或原作者所有，仅供个人学习交流使用。您不得擅自复制、传播、演绎或用于商业目的。若您使用内容时涉及版权问题，请自行妥善处理或联系我们协助。
+7. Service Availability
+We may modify, suspend, or discontinue any part of the App at any time due to maintenance, updates, or circumstances beyond our control.
+We are not liable for any loss or damage resulting from such interruptions or changes.

-隐私保护：本App不要求注册登录，也不采集敏感个人信息。您自愿提供的昵称和偏好数据仅用于在本地设备上为您推荐内容，不会上传或共享给任何第三方。您可以选择不提供昵称，我们的核心功能不会因此受影响。
+8. Changes to These Terms
+We may update these Terms of Use from time to time.
+Updated versions will be made available within the App or related pages. Continued use of the App after changes indicates acceptance of the revised Terms.

-版权声明：本App内所有内容（包括界面设计、程序代码、文字、图片、音视频等）及软件著作权均归开发者或相关权利人所有，受著作权法等法律保护。未经许可，任何个人或组织不得以任何形式复制、发行、展示、播发、修改、链接、转载或建立镜像。您仅可在个人使用的前提下使用本App及其内容。
+9. Governing Law
+These Terms shall be governed by and construed in accordance with the applicable laws of our operating jurisdiction.

-免责声明：本App按“现状”和“可用”原则向您提供服务，对服务不作任何形式的担保（包括但不限于准确性、可靠性或持续可用性）。对于因网络故障、通信线路等客观原因导致的应用功能异常或信息延迟，我们不承担责任。您使用本App过程中应自行承担风险；在法律允许的范围内，对于您因使用本App而可能产生的任何直接或间接损失，我们不承担责任。
+---
+Hey Mama 使用條款
+最後更新日期：2026 年 2 月
+歡迎使用 Hey Mama（以下簡稱「本 App」、「我們」）。
+在下載、存取或使用本 App 前，請您仔細閱讀本使用條款。當您開始使用本 App，即表示您已閱讀、理解並同意遵守本條款。

-协议的变更和终止：我们保留随时修改、更新本协议条款和/或终止本App运营的权利。如协议条款发生变更，我们将在应用更新或官网渠道公布最新协议内容，并提示用户注意更新。修改后的协议一经公布即生效，您继续使用本App即视为接受修改后的协议。
+1. 服務對象與使用資格
+Hey Mama 僅供成年人使用（intended for adults）。
+ 本 App 並非為兒童設計，使用者應確認自己具備依所在地法律使用本服務的完全行為能力。

-法律适用和争议解决：本协议的订立、生效、解释及争议解决均适用中华人民共和国法律。因本协议或使用本App引起的任何争议，双方应友好协商解决；协商不成时，任何一方均可向开发者所在地有管辖权的法院提起诉讼。
+2. 服務內容
+Hey Mama 提供以文字形式為主的內容與功能，包括但不限於：
+- 每日肯定語與正念文字內容
+- 使用者設定的提醒與推送通知
+- 桌面小組件顯示肯定語文字
+- 內容閱讀與收藏等個人化體驗（如適用）
+本 App 所提供之內容僅作為日常情緒支持與自我提醒用途，不構成任何形式的醫療、心理諮商或專業建議。

-其他：本协议与本隐私政策共同构成本App服务的完整规则。若本协议条款与隐私政策存在不一致之处，以隐私政策为准。本协议条款标题仅为阅读方便而设，不影响条款含义的解释。本协议最终解释权归开发者所有。如您对本协议内容有任何疑问或建议，请通过应用商店提供的联系方式与我们联系。
+3. 使用方式與限制
+使用者同意：
+- 僅將本 App 用於個人、非商業用途
+- 不以任何方式複製、重製、散布、出售、反編譯或試圖取得本 App 之原始碼
+- 不進行任何可能影響 App 正常運作、穩定性或其他使用者體驗之行為
+如有違反，我們有權在不另行通知的情況下限制或終止使用權限。

-感谢您使用本App！我们将持续优化服务体验，努力为您提供温暖和支持。
+4. 推送通知
+本 App 可能依使用者設定發送推送通知（例如每日肯定語提醒）。
+- 推送內容僅為一般文字資訊
+- 不包含個人化敏感資料
+- 您可隨時透過裝置系統設定關閉通知功能
+
+5. 智慧財產權
+本 App 及其所有內容（包含但不限於文字、設計、介面、版面配置與視覺元素）之智慧財產權，均屬於我們或合法授權方所有。
+未經事前書面同意，任何形式之使用、修改、重製或散布皆屬禁止。
+
+6. 免責聲明
+本 App 所提供之內容僅供一般參考與自我提醒之用。
+- 我們不保證內容能產生特定心理、情緒或行為結果
+- 本 App 不取代任何專業醫療、心理或法律建議
+- 使用者應自行判斷內容是否適合自身狀況
+
+7. 服務中斷與變更
+我們可能因系統維護、功能調整、更新或其他不可抗力因素，暫時中斷或變更本 App 之全部或部分功能。
+對於因此可能造成的任何直接或間接損失，我們不負任何責任。
+
+8. 條款修改
+我們可能不定期更新本使用條款。
+ 更新後的版本將公布於 App 內或相關頁面，您於條款更新後繼續使用本 App，即視為同意更新內容。
+
+9. 準據法與管轄
+本使用條款之解釋與適用，悉依我們所在地之相關法律規定處理。
--- a/设计说明文档/隐私协议.md
+++ b/设计说明文档/隐私协议.md
@@ -1,21 +1,119 @@
-隐私政策
+Hey Mama | Privacy Policy
+Last updated: February 2026

-我们尊重并保护您的隐私。根据《个人信息保护法》《网络安全法》等法律法规的规定，以及 Apple App Store 审核指南要求，我们制定本隐私政策，帮助您了解我们如何收集、使用和保护您的信息：
+1. Introduction
+Welcome to Hey Mama (“the App,” “we,” “us”).
+We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use the App.
+By downloading, accessing, or using the App, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

-信息收集：本应用无需注册或登录，也不使用任何第三方授权。用户可自愿提供昵称，仅用于界面展示和个性化服务标识；通过问卷或点击行为记录您的内容偏好（如“喜欢/不喜欢”标签）。我们不会收集您的身份信息、地理位置、通讯录等敏感个人信息。
+2. Data Controller and Scope
+The App is operated and maintained by the Hey Mama team.
+This Privacy Policy applies to information processing activities related to your use of the App.

-信息使用：我们仅使用上述收集的信息进行个性化推荐和名人句子定时推送，不用于其他任何目的，不进行广告或营销投放。所有个性化功能均基于您在应用中的操作和偏好生成。
+3. Information We Collect
+3.1 Information You Provide
+Hey Mama does not require account registration and does not require you to provide personally identifiable information.
+During your use of the App, you may optionally provide or generate the following information:
+- Reminder settings (e.g., reminder frequency)
+- Text content you view, save as favorites, or create within the App (if available)
+This information is used only to operate core App features and provide a personalized experience.

-数据存储和安全：所有数据均存储在您设备本地，不上传至服务器；本应用不接入任何第三方 SDK。我们采用系统加密和权限隔离等安全机制保护本地数据，防止未经授权的访问。您可以随时通过清除应用数据或卸载应用来删除您的个人信息。
+3.2 Information Collected Automatically
+When you use the App, we may automatically collect certain non-identifiable technical information, including but not limited to:
+- Device type and operating system version
+- App version
+- Device language settings
+- Basic usage status (e.g., whether the App is opened, whether reminders are enabled)
+This information does not directly identify you and is primarily used to maintain App stability, troubleshoot issues, and improve user experience.
+The App does not collect precise location information for the purposes described in this policy, does not engage in cross-app tracking, and does not use your data for third-party advertising.

-信息共享：我们不会向任何无关第三方提供、出售、出租或分享您的个人信息。未经您明确同意，我们绝不公开您的任何信息，除非法律法规要求或为维护您合法权益所必需。
+4. Push Notifications
+With your permission, the App may send you reminder notifications, such as daily affirmations.
+- Notifications contain general text information only
+- Notifications do not include sensitive personal data
+- You can disable notifications at any time in your device settings

-用户权利与选择：您有权自主决定是否提供个人信息，并可对已提供的信息进行查询、修改或删除。您可以随时在应用中清除偏好设置，或卸载应用以删除所有本地数据。根据法律法规，您还可以通过我们的客服途径要求访问、更正或删除您的信息。
+5. Home Screen Widgets
+If you choose to use home screen widgets, the displayed content comes from the App’s text-based affirmations. Widgets do not collect or transmit additional personal data.

-未成年人保护：本应用主要面向成人用户设计，不针对未成年人提供特殊服务。如 18 岁以下用户使用，请在监护人陪同下进行。我们不会在未征得监护人同意的情况下收集或使用未成年人的个人信息。
+6. How We Use Information
+We use collected information only for the following purposes:
+- To provide and maintain core App functionality
+- To improve content presentation and user experience
+- To fix bugs and enhance system stability
+We do not:
+- Sell, rent, or trade your personal data
+- Use your data for third-party advertising purposes

-隐私政策更新：我们可能会根据产品功能变化或法律法规要求更新本隐私政策，并在应用内或相关页面公布最新版本。您继续使用本应用即视为接受更新后的隐私政策。如有重大变更，我们会适当提示您。
+7. Third-Party Services
+Hey Mama currently does not integrate third-party advertising or marketing services.
+The App may rely on necessary operating system and app store services to provide functionality (for example, push notification delivery mechanisms).
+If we later integrate third-party analytics or technical services, we will update this Privacy Policy accordingly.

-我们承诺在此过程中严格遵守相关法律法规和行业标准，切实保护您的个人信息安全。本隐私政策与用户使用协议共同构成本应用合法合规运营的基础。
+8. Data Retention and Security
+We retain information only for as long as necessary to achieve the purposes described above. We implement reasonable technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or loss.
+
+9. Minors
+Hey Mama is not designed for children, and we do not knowingly collect personal information from users under the age of 13.
+If you are a minor, please use the App with the consent and supervision of a parent or guardian.
+
+10. Changes to This Privacy Policy
+We may update this Privacy Policy from time to time. The updated version will be made available within the App or through related pages. If you continue to use the App after updates take effect, you are deemed to have accepted the updated policy.


+---
+Hey Mama｜隱私權政策
+最後更新日期：2026 年 2 月
+
+一、前言
+歡迎使用 Hey Mama（以下簡稱「本 App」、「我們」）。
+我們重視您的隱私，並致力於保護您的個人資料安全。本隱私權政策說明您在使用 Hey Mama 時，我們如何收集、使用、保存與保護相關資訊。
+當您下載、存取或使用本 App，即表示您已閱讀、理解並同意本隱私權政策之內容。
+
+二、我們收集的資訊
+1. 使用者主動提供的資訊
+Hey Mama 不要求建立帳號，亦不強制使用者提供可識別個人身分的資料。
+在使用過程中，您可能會選擇性提供或產生以下資訊：
+- 提醒設定（例如提醒頻率）
+- 使用者在 App 內閱讀、收藏或建立的文字內容（如有）
+上述資訊僅用於 App 功能運作與個人化體驗。
+2. 自動收集的資訊
+當您使用本 App 時，我們可能會自動收集部分非識別性技術資訊，包括但不限於：
+- 裝置類型與作業系統版本
+- App 版本
+- 裝置語言設定
+- 基本使用行為（例如是否開啟 App、是否啟用提醒）
+這些資訊無法直接識別您的身分，僅用於維持 App 穩定性與改善使用體驗。
+
+三、推送通知
+在取得您同意後，Hey Mama 可能會向您發送提醒推送，例如每日肯定語提示。
+- 推送內容僅包含一般文字資訊
+- 不包含任何敏感個人資料
+- 您可隨時於裝置系統設定中關閉通知功能
+
+四、桌面小組件
+若您選擇使用桌面小組件，其顯示內容僅來自 App 內的文字肯定語，不會額外收集或傳送新的個人資料。
+
+五、資訊使用方式
+我們僅於下列目的範圍內使用所收集的資訊：
+- 提供與維護 App 的基本功能
+- 改善內容呈現與使用體驗
+- 修復錯誤與提升系統穩定性
+我們不會：
+- 出售、出租或交換您的個人資料
+- 將資料用於第三方廣告投放
+
+六、第三方服務
+目前 Hey Mama 未整合第三方廣告或行銷服務。
+ 如未來整合第三方分析或技術服務，我們將於本政策中另行說明並更新。
+
+七、資料保存與安全
+我們僅在達成上述目的所需期間內保存相關資訊，並採取合理的技術與管理措施，以防止資料遭未經授權存取、洩漏、竄改或遺失。
+
+八、未成年人說明
+Hey Mama 並非專為兒童設計，亦不刻意收集未滿 13 歲使用者的個人資料。
+若您為未成年人，請在監護人同意與陪同下使用本 App。
+
+九、隱私權政策的變更
+我們可能會不定期更新本隱私權政策。
+更新後的版本將公布於 App 內或相關頁面，您於政策更新後繼續使用本 App，即視為同意更新內容。
Author	SHA1	Message	Date
吕新雨	c1c2c6197d	fix:小组件- PUSH	2026-02-03 17:43:58 +08:00
damer	d742b398ef	Merge pull request 'docs: 更新隐私协议与用户使用协议' (#16 ) from lei into main Reviewed-on: #16	2026-02-03 05:51:54 +00:00
吕新雨	d525c6b939	fix:test打包	2026-02-03 13:50:58 +08:00
吕新雨	c37bb2e2a5	fix:打包	2026-02-03 11:19:25 +08:00
吕新雨	4c450db9b2	fix:环境变量	2026-02-03 02:36:42 +08:00
damer	8c02c5b9a0	Merge pull request 'feat(client): i18n copy + reco lang refresh + home polish' (#15 ) from Hao into main Reviewed-on: #15	2026-02-02 18:13:13 +00:00
吕新雨	90cbde1bac	fix:部署	2026-02-03 02:04:48 +08:00
吕新雨	bb7a4c7361	fix:main.py	2026-02-03 01:44:25 +08:00
吕新雨	17d19f9172	更新蓝v	2026-02-03 01:36:35 +08:00
吕新雨	b35b71470d	upload	2026-02-03 01:25:47 +08:00
吕新雨	ccdc6350a1	最后一班	2026-02-03 01:22:25 +08:00
吕新雨	7fea799087	最后一班	2026-02-03 01:21:10 +08:00
吕新雨	e6b64b39f2	最后一班	2026-02-03 01:18:47 +08:00
吕新雨	a457186f46	放在宿主机	2026-02-03 01:07:06 +08:00
吕新雨	2d5b8b094f	fix:upload	2026-02-03 00:44:00 +08:00
吕新雨	ef7c4e774d	end	2026-02-03 00:41:38 +08:00
吕新雨	cc36301638	u	2026-02-03 00:36:48 +08:00
吕新雨	5dd632d4d3	fix:更新	2026-02-03 00:26:13 +08:00
吕新雨	4d70f16b69	更新部署工作了	2026-02-03 00:23:48 +08:00
吕新雨	2ddee6b8f8	fix:更新runner	2026-02-02 23:02:49 +08:00
吕新雨	aa530b0ce3	fix:更新runner	2026-02-02 22:58:42 +08:00
damer	cdd0ac32de	Merge pull request 'fix:更新自建仓库' (#13 ) from damer into main Reviewed-on: #13	2026-02-02 14:50:28 +00:00
吕新雨	d98ec76dc0	fix:更新自建仓库	2026-02-02 22:50:11 +08:00
damer	3c35e14c3d	Merge pull request 'damer' (#12 ) from damer into main Reviewed-on: #12	2026-02-02 14:47:30 +00:00
吕新雨	c0deea9318	fix:更新自建仓库	2026-02-02 22:47:09 +08:00
damer	915e995ab7	Merge pull request 'fix:更新' (#11 ) from damer into main Reviewed-on: #11	2026-02-02 14:26:16 +00:00
吕新雨	0e42e6f2a9	fix:更新	2026-02-02 22:25:48 +08:00
damer	39e4bcab6c	Merge pull request 'fix:更新server' (#10 ) from damer into main Reviewed-on: #10	2026-02-02 14:22:49 +00:00
吕新雨	69a1046ff4	fix:更新server	2026-02-02 22:22:20 +08:00
damer	ceaf459d97	Merge pull request 'damer' (#9 ) from damer into main Reviewed-on: #9	2026-02-02 14:01:03 +00:00
吕新雨	d9a5dbafd6	fix:新增工作流	2026-02-02 21:59:15 +08:00
雷汀岚	3f91e734fa	docs: 更新隐私协议与用户使用协议	2026-02-02 18:58:12 +08:00
吕新雨	86e4853709	Merge branch 'main' into damer	2026-02-02 18:37:44 +08:00
吕新雨	2adf2475fa	fix:git忽略文件	2026-02-02 18:37:00 +08:00
Hao	9dbba04408	Merge pull request 'Hao' (#8 ) from Hao into main Reviewed-on: #8	2026-02-02 09:33:41 +00:00
吕新雨	240cdda68f	Merge branch 'main' into damer	2026-02-02 16:54:51 +08:00
吕新雨	ce48e54c03	增加git忽略	2026-02-02 16:53:26 +08:00