feat: T1.4 健康度仪表盘 — 后端聚合 API + 前端驾驶舱

- 后端：dashboard 路由（summary 聚合 + scores 列表）
- 前端：驾驶舱首页（KPI 卡片 + 健康度概览）
- 测试：4 个仪表盘测试（总计 37 tests passed）
- 前端构建 12 路由成功

backend/tests/test_dashboard.py

@@ -0,0 +1,106 @@
+"""仪表盘 API 测试。"""
+
+import pytest
+from fastapi.testclient import TestClient
+from sqlalchemy.ext.asyncio import AsyncSession, create_async_engine, async_sessionmaker
+from app.core.database import Base, get_db
+from app.main import app
+
+TEST_DATABASE_URL = "sqlite+aiosqlite:///file::memory:?cache=shared&uri=true"
+
+test_engine = create_async_engine(TEST_DATABASE_URL, echo=False)
+test_session_factory = async_sessionmaker(test_engine, class_=AsyncSession, expire_on_commit=False)
+
+
+async def override_get_db():
+    async with test_session_factory() as session:
+        try:
+            yield session
+            await session.commit()
+        except Exception:
+            await session.rollback()
+            raise
+
+
+app.dependency_overrides[get_db] = override_get_db
+
+
+@pytest.fixture(scope="module", autouse=True)
+async def setup_db():
+    async with test_engine.begin() as conn:
+        await conn.run_sync(Base.metadata.create_all)
+    yield
+    async with test_engine.begin() as conn:
+        await conn.run_sync(Base.metadata.drop_all)
+
+
+@pytest.fixture
+def client():
+    return TestClient(app)
+
+
+@pytest.fixture
+def auth_headers(client: TestClient):
+    """注册并登录。"""
+    client.post(
+        "/api/v1/auth/register",
+        json={
+            "email": "dashboard_test@example.com",
+            "password": "password123",
+            "name": "测试投资经理",
+            "tenant_name": "测试机构",
+            "role": "investor",
+        },
+    )
+    resp = client.post(
+        "/api/v1/auth/login",
+        json={"email": "dashboard_test@example.com", "password": "password123"},
+    )
+    token = resp.json()["data"]["access_token"]
+    return {"Authorization": f"Bearer {token}"}
+
+
+class TestDashboardSummary:
+    """仪表盘汇总测试。"""
+
+    def test_summary_empty(self, client: TestClient, auth_headers: dict):
+        """空租户的汇总数据。"""
+        response = client.get("/api/v1/dashboard/summary", headers=auth_headers)
+        assert response.status_code == 200
+        data = response.json()
+        assert data["code"] == 0
+        assert data["data"]["total_companies"] == 0
+        assert data["data"]["avg_health_score"] == 0.0
+        assert data["data"]["high_risk_count"] == 0
+        assert data["data"]["pending_reports"] == 0
+
+    def test_summary_without_auth(self, client: TestClient):
+        """无认证应返回 401。"""
+        response = client.get("/api/v1/dashboard/summary")
+        assert response.status_code == 401
+
+    def test_summary_with_data(self, client: TestClient, auth_headers: dict):
+        """有企业数据后的汇总。"""
+        # 创建企业
+        client.post(
+            "/api/v1/companies",
+            json={"name": "仪表盘测试公司", "industry": "AI"},
+            headers=auth_headers,
+        )
+
+        response = client.get("/api/v1/dashboard/summary", headers=auth_headers)
+        assert response.status_code == 200
+        data = response.json()
+        assert data["data"]["total_companies"] >= 1
+
+
+class TestHealthScores:
+    """健康度评分列表测试。"""
+
+    def test_list_scores_empty(self, client: TestClient, auth_headers: dict):
+        """空评分列表。"""
+        response = client.get("/api/v1/dashboard/scores", headers=auth_headers)
+        assert response.status_code == 200
+        data = response.json()
+        assert data["code"] == 0
+        assert isinstance(data["data"], list)