feat(api): 核心端点 — 接收/驳回/转交/打印/上传/用户/物料/记录CRUD

新增端点:
- POST /tasks/{id}/receive — 确认接收 (PENDING→WIP)
- POST /tasks/{id}/reject  — 品质驳回 + 自动返工
- POST /tasks/{id}/transfer — 完工裂变转交 (多路分支+入库)
- PATCH /tasks/{id}/records — 追加图文记录
- PATCH /products/scan/{sn}/status — 宏观状态定调
- POST /upload/ + GET /upload/files/{name} — 文件上传
- GET /users/ — MOM用户列表
- GET /materials/groups + /materials/items — BOM物料手风琴
- POST /print/preview + /execute — 标签预览/打印
- PUT/DELETE /records/{id} — 记录编辑/删除
- GET /tasks/ 新增 assignee_id 过滤

backend/app/api/v1/endpoints/users.py

@@ -0,0 +1,64 @@
+"""用户列表 — 对接 MOM sys_user"""
+from fastapi import APIRouter, Query, HTTPException, status
+from pydantic import BaseModel
+from app.core.mom_database import MomSessionLocal
+from sqlalchemy import text
+
+router = APIRouter(prefix="/users", tags=["用户"])
+
+
+class UserOption(BaseModel):
+    id: str
+    username: str
+    full_name: str
+
+    model_config = {"from_attributes": True}
+
+
+@router.get("/", response_model=list[UserOption])
+def list_users(
+    keyword: str = Query("", description="按用户名/姓名模糊搜索"),
+    limit: int = Query(100, ge=1, le=500),
+):
+    """获取 MOM 系统用户列表，供前端选人使用"""
+    db = MomSessionLocal()
+    try:
+        if keyword.strip():
+            sql = text(
+                """
+                SELECT id, username,
+                       SPLIT_PART(username, '/', 1) AS full_name
+                FROM sys_user
+                WHERE username ILIKE :kw
+                ORDER BY username
+                LIMIT :lim
+                """
+            )
+            rows = db.execute(sql, {"kw": f"%{keyword.strip()}%", "lim": limit}).fetchall()
+        else:
+            sql = text(
+                """
+                SELECT id, username,
+                       SPLIT_PART(username, '/', 1) AS full_name
+                FROM sys_user
+                ORDER BY username
+                LIMIT :lim
+                """
+            )
+            rows = db.execute(sql, {"lim": limit}).fetchall()
+
+        return [
+            UserOption(
+                id=str(row.id),
+                username=row.username.split("/")[-1] if "/" in row.username else row.username,
+                full_name=row.full_name,
+            )
+            for row in rows
+        ]
+    except Exception as e:
+        raise HTTPException(
+            status_code=status.HTTP_502_BAD_GATEWAY,
+            detail=f"MOM 用户查询失败: {str(e)}",
+        )
+    finally:
+        db.close()