feat: 完成 P1 全部功能 + 修复 proxy 导出 + 切换 MySQL 端口至 14013

## P1 功能（20 项）
- 站内消息系统、家长仪表盘、学生考勤管理
- Excel 导入导出、用户批量导入、成绩导出
- 排课规则+自动排课+课表调整
- 成绩趋势+对比分析、密码安全策略、速率限制
- 数据变更日志、文件预览+存储策略、全文检索
- 依赖审计集成 CI、数据库定时备份、E2E 测试完善
- 通知偏好管理

## 基础设施修复
- src/proxy.ts: 将 middleware 导出重命名为 proxy（Next.js 16 要求）
- .env: MySQL 端口从 13002 切换至 14013
- scripts/create-db.ts: 新增数据库初始化脚本

## 架构文档同步
- 004_architecture_impact_map.md 和 005_architecture_data.json
  完整记录所有新增表、模块、路由、权限、依赖关系

src/app/(dashboard)/parent/attendance/page.tsx

@@ -0,0 +1,61 @@
+import { getAuthContext } from "@/shared/lib/auth-guard"
+import { getStudentAttendanceSummary } from "@/modules/attendance/data-access-stats"
+import { StudentAttendanceView } from "@/modules/attendance/components/student-attendance-view"
+import { EmptyState } from "@/shared/components/ui/empty-state"
+import { CalendarCheck } from "lucide-react"
+
+export const dynamic = "force-dynamic"
+
+export default async function ParentAttendancePage() {
+  const ctx = await getAuthContext()
+
+  if (ctx.dataScope.type !== "children" || ctx.dataScope.childrenIds.length === 0) {
+    return (
+      <div className="h-full flex-1 flex-col space-y-8 p-8 md:flex">
+        <div>
+          <h2 className="text-2xl font-bold tracking-tight">Children Attendance</h2>
+          <p className="text-muted-foreground">View your children&apos;s attendance records.</p>
+        </div>
+        <EmptyState
+          title="No children linked"
+          description="Your account is not linked to any student accounts yet. Please contact the school administrator."
+          icon={CalendarCheck}
+          className="border-none shadow-none"
+        />
+      </div>
+    )
+  }
+
+  const summaries = await Promise.all(
+    ctx.dataScope.childrenIds.map((id) => getStudentAttendanceSummary(id))
+  )
+
+  const validSummaries = summaries.filter((s): s is NonNullable<typeof s> => s !== null)
+
+  return (
+    <div className="h-full flex-1 flex-col space-y-8 p-8 md:flex">
+      <div>
+        <h2 className="text-2xl font-bold tracking-tight">Children Attendance</h2>
+        <p className="text-muted-foreground">View your children&apos;s attendance records.</p>
+      </div>
+
+      {validSummaries.length === 0 ? (
+        <EmptyState
+          title="No attendance records"
+          description="Your children don&apos;t have any attendance records yet."
+          icon={CalendarCheck}
+          className="border-none shadow-none"
+        />
+      ) : (
+        <div className="space-y-8">
+          {validSummaries.map((summary) => (
+            <div key={summary.studentId} className="space-y-4">
+              <h3 className="text-lg font-semibold border-b pb-2">{summary.studentName}</h3>
+              <StudentAttendanceView summary={summary} />
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}

src/app/(dashboard)/parent/children/[studentId]/page.tsx

@@ -0,0 +1,71 @@
+import { notFound } from "next/navigation"
+import { eq } from "drizzle-orm"
+
+import { requireAuth } from "@/shared/lib/auth-guard"
+import { db } from "@/shared/db"
+import { parentStudentRelations } from "@/shared/db/schema"
+import { getChildDashboardData } from "@/modules/parent/data-access"
+import { ChildDetailHeader } from "@/modules/parent/components/child-detail-header"
+import { ChildDetailPanel } from "@/modules/parent/components/child-detail-panel"
+import { EmptyState } from "@/shared/components/ui/empty-state"
+import { ShieldAlert } from "lucide-react"
+
+export const dynamic = "force-dynamic"
+
+export default async function ChildDetailPage({
+  params,
+}: {
+  params: Promise<{ studentId: string }>
+}) {
+  const { studentId } = await params
+  const ctx = await requireAuth()
+
+  // Verify the student is linked to the current parent
+  const [relation] = await db
+    .select({
+      id: parentStudentRelations.id,
+      relation: parentStudentRelations.relation,
+    })
+    .from(parentStudentRelations)
+    .where(eq(parentStudentRelations.studentId, studentId))
+    .limit(1)
+
+  if (!relation) {
+    return (
+      <div className="p-6 md:p-8">
+        <EmptyState
+          icon={ShieldAlert}
+          title="Access denied"
+          description="This student is not linked to your account. Please contact the school administrator if you believe this is an error."
+          className="border-none shadow-none"
+        />
+      </div>
+    )
+  }
+
+  // Double-check the parent owns this relation
+  if (ctx.dataScope.type === "children" && !ctx.dataScope.childrenIds.includes(studentId)) {
+    return (
+      <div className="p-6 md:p-8">
+        <EmptyState
+          icon={ShieldAlert}
+          title="Access denied"
+          description="You do not have permission to view this student's data."
+          className="border-none shadow-none"
+        />
+      </div>
+    )
+  }
+
+  const child = await getChildDashboardData(studentId, relation.relation)
+  if (!child) {
+    notFound()
+  }
+
+  return (
+    <div className="p-6 md:p-8 space-y-6">
+      <ChildDetailHeader child={child} />
+      <ChildDetailPanel child={child} />
+    </div>
+  )
+}

src/app/(dashboard)/parent/dashboard/page.tsx

@@ -1,8 +1,16 @@
-export default function ParentDashboardPage() {
+import { requireAuth } from "@/shared/lib/auth-guard"
+import { getParentDashboardData } from "@/modules/parent/data-access"
+import { ParentDashboard } from "@/modules/parent/components/parent-dashboard"
+
+export const dynamic = "force-dynamic"
+
+export default async function ParentDashboardPage() {
+  const ctx = await requireAuth()
+  const data = await getParentDashboardData(ctx.userId)
+
   return (
-    <div className="p-6">
-      <h1 className="text-2xl font-bold">Parent Dashboard</h1>
-      <p className="text-muted-foreground">Welcome, Parent!</p>
+    <div className="p-6 md:p-8">
+      <ParentDashboard data={data} />
     </div>
   )
 }

src/app/(dashboard)/parent/grades/page.tsx

@@ -0,0 +1,61 @@
+import { getAuthContext } from "@/shared/lib/auth-guard"
+import { getStudentGradeSummary } from "@/modules/grades/data-access"
+import { StudentGradeSummary } from "@/modules/grades/components/student-grade-summary"
+import { EmptyState } from "@/shared/components/ui/empty-state"
+import { GraduationCap } from "lucide-react"
+
+export const dynamic = "force-dynamic"
+
+export default async function ParentGradesPage() {
+  const ctx = await getAuthContext()
+
+  if (ctx.dataScope.type !== "children" || ctx.dataScope.childrenIds.length === 0) {
+    return (
+      <div className="h-full flex-1 flex-col space-y-8 p-8 md:flex">
+        <div>
+          <h2 className="text-2xl font-bold tracking-tight">Children Grades</h2>
+          <p className="text-muted-foreground">View your children&apos;s grade records.</p>
+        </div>
+        <EmptyState
+          title="No children linked"
+          description="Your account is not linked to any student accounts yet. Please contact the school administrator."
+          icon={GraduationCap}
+          className="border-none shadow-none"
+        />
+      </div>
+    )
+  }
+
+  const summaries = await Promise.all(
+    ctx.dataScope.childrenIds.map((id) => getStudentGradeSummary(id))
+  )
+
+  const validSummaries = summaries.filter((s): s is NonNullable<typeof s> => s !== null)
+
+  return (
+    <div className="h-full flex-1 flex-col space-y-8 p-8 md:flex">
+      <div>
+        <h2 className="text-2xl font-bold tracking-tight">Children Grades</h2>
+        <p className="text-muted-foreground">View your children&apos;s grade records.</p>
+      </div>
+
+      {validSummaries.length === 0 ? (
+        <EmptyState
+          title="No grade records"
+          description="Your children don&apos;t have any grade records yet."
+          icon={GraduationCap}
+          className="border-none shadow-none"
+        />
+      ) : (
+        <div className="space-y-8">
+          {validSummaries.map((summary) => (
+            <div key={summary.studentId} className="space-y-4">
+              <h3 className="text-lg font-semibold border-b pb-2">{summary.studentName}</h3>
+              <StudentGradeSummary summary={summary} />
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}