1.所有接口需要根据agent_id绑定渠道

2.移除所有记录页面的更新按钮，只能查看数据
3.将所有软删除修改为硬删除

server/app/api/controller/v1/AuthTokenController.php

@@ -6,6 +6,7 @@ namespace app\api\controller\v1;
 use app\api\cache\AuthTokenCache;
 use app\api\controller\BaseController;
 use app\api\util\ReturnCode;
+use plugin\saiadmin\app\model\system\SystemUser;
 use support\Request;
 use support\Response;
 use Tinywan\Jwt\JwtToken;
@@ -54,6 +55,14 @@ class AuthTokenController extends BaseController
             return $this->fail('Signature verification failed', ReturnCode::FORBIDDEN);
         }
 
+        $agent = SystemUser::where('agent_id', $agentId)->find();
+        if (!$agent || (int) ($agent->status ?? 0) !== 1) {
+            return $this->fail('Invalid agent_id', ReturnCode::FORBIDDEN);
+        }
+        if (empty($agent->dept_id) || (int) $agent->dept_id <= 0) {
+            return $this->fail('Agent channel is not configured', ReturnCode::FORBIDDEN);
+        }
+
         $exp = (int) config('api.auth_token_exp', 86400);
         $tokenResult = JwtToken::generateToken([
             'id' => 0,