feat: Add SHZ log inspection and HighGo database querying capabilities

- Introduced `inspect-shz-logs` skill for inspecting local and production logs with bounded read-only commands.
- Added `view.sh` script for log viewing with options for following logs and filtering by keywords.
- Created `query-shz-highgo` skill for querying the SHZ HighGo database through an SSH gateway.
- Implemented read-only SQL execution with strict controls on allowed statements and query structure.
- Added new domain and mapper classes for managing outdoor fair job associations.
- Enhanced `OutdoorFairController` to support job listing and management for outdoor fairs.
- Created SQL scripts for initializing outdoor fair job data and managing menu visibility.

.claude/skills/inspect-shz-logs/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: inspect-shz-logs
+description: Inspect and follow the SHZ backend's local and production logs through bounded, read-only commands. Use when Claude Code is working in the shz-backend project and needs to diagnose startup failures, exceptions, request behavior, scheduled jobs, or runtime incidents from local backend.log or the production backend, error, info, and user logs on the shz server.
+---
+
+# Inspect SHZ Logs
+
+Use the bundled script instead of assembling SSH commands manually. Keep every initial read bounded; follow logs only when the user explicitly asks to monitor live activity.
+
+## Inspect local logs
+
+Read the last 200 lines:
+
+```bash
+.claude/skills/inspect-shz-logs/scripts/view.sh local 200
+```
+
+Follow the local log interactively:
+
+```bash
+.claude/skills/inspect-shz-logs/scripts/view.sh local 200 --follow
+```
+
+## Inspect production logs
+
+Read the main application log:
+
+```bash
+.claude/skills/inspect-shz-logs/scripts/view.sh online backend 200
+```
+
+Read the current error log:
+
+```bash
+.claude/skills/inspect-shz-logs/scripts/view.sh online error 200
+```
+
+Choose only one production log type: `backend`, `error`, `info`, or `user`. Add `--follow` as the final argument only for an explicit live-monitoring request.
+
+For keyword analysis, fetch a bounded window and filter locally, for example:
+
+```bash
+.claude/skills/inspect-shz-logs/scripts/view.sh online error 1000 | rg -i 'exception|error|failed'
+```
+
+## Diagnose from logs
+
+1. Establish whether the request concerns local or production behavior.
+2. Read 100–300 recent lines from the relevant log.
+3. Expand up to the script's 5,000-line cap only when timestamps or stack traces require more context.
+4. Correlate timestamps, thread names, exception causes, and nearby requests.
+5. Report the evidence and likely cause without exposing tokens, passwords, personal data, or unrelated log content.
+
+Treat production access as read-only. Never restart services, edit files, deploy code, truncate logs, or run arbitrary remote commands through this skill.
+
+Read [references/log-locations.md](references/log-locations.md) only when checking server identity, paths, or supported log types.

.claude/skills/inspect-shz-logs/references/log-locations.md

@@ -0,0 +1,19 @@
+# Log locations
+
+## Local
+
+- Main log: `<project>/.local/logs/backend.log`
+- Producer: `<project>/local.sh`
+
+## Production: shz
+
+- SSH: `root@39.98.44.136:6022`
+- Application: `/opt/service/project/shz-backend/ruoyi-admin/target/ruoyi-admin.jar`
+- Profile: `dev`
+- HTTP port: `9091`
+- Main process log: `/opt/service/project/shz-backend/logs/backend.log`
+- Current error log: `/opt/service/project/shz-backend/logs/sys-error.log`
+- Current info log: `/opt/service/project/shz-backend/logs/sys-info.log`
+- Current user log: `/opt/service/project/shz-backend/logs/sys-user.log`
+
+Use only the bundled read-only viewer. Rotated files use date suffixes but are intentionally not exposed by the default script.

.claude/skills/inspect-shz-logs/scripts/view.sh

@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+skill_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+project_dir="$(cd "${skill_dir}/../../.." && pwd)"
+local_log="${project_dir}/.local/logs/backend.log"
+
+ssh_host="root@39.98.44.136"
+ssh_port="6022"
+remote_log_dir="/opt/service/project/shz-backend/logs"
+
+usage() {
+  cat <<'EOF'
+Usage:
+  view.sh local [lines] [--follow]
+  view.sh online [backend|error|info|user] [lines] [--follow]
+
+Examples:
+  view.sh local 200
+  view.sh local 100 --follow
+  view.sh online backend 200
+  view.sh online error 500 --follow
+EOF
+}
+
+validate_lines() {
+  local lines="$1"
+  if [[ ! "${lines}" =~ ^[0-9]+$ ]] || (( lines < 1 || lines > 5000 )); then
+    echo "Lines must be an integer between 1 and 5000: ${lines}" >&2
+    exit 2
+  fi
+}
+
+validate_follow() {
+  local follow="${1:-}"
+  if [[ -n "${follow}" && "${follow}" != "--follow" ]]; then
+    echo "Unknown option: ${follow}" >&2
+    usage >&2
+    exit 2
+  fi
+}
+
+view_local() {
+  local lines="${1:-200}"
+  local follow="${2:-}"
+  validate_lines "${lines}"
+  validate_follow "${follow}"
+
+  if [[ ! -f "${local_log}" ]]; then
+    echo "Local log does not exist: ${local_log}" >&2
+    echo "Start the project first with: ./local.sh start" >&2
+    exit 1
+  fi
+
+  if [[ "${follow}" == "--follow" ]]; then
+    tail -n "${lines}" -F -- "${local_log}"
+  else
+    tail -n "${lines}" -- "${local_log}"
+  fi
+}
+
+view_online() {
+  local kind="${1:-backend}"
+  local lines="${2:-200}"
+  local follow="${3:-}"
+  local remote_file
+
+  case "${kind}" in
+    backend) remote_file="${remote_log_dir}/backend.log" ;;
+    error) remote_file="${remote_log_dir}/sys-error.log" ;;
+    info) remote_file="${remote_log_dir}/sys-info.log" ;;
+    user) remote_file="${remote_log_dir}/sys-user.log" ;;
+    *)
+      echo "Unknown online log type: ${kind}" >&2
+      usage >&2
+      exit 2
+      ;;
+  esac
+
+  validate_lines "${lines}"
+  validate_follow "${follow}"
+
+  if [[ "${follow}" == "--follow" ]]; then
+    ssh -p "${ssh_port}" -o BatchMode=yes -o ConnectTimeout=10 "${ssh_host}" \
+      tail -n "${lines}" -F -- "${remote_file}"
+  else
+    ssh -p "${ssh_port}" -o BatchMode=yes -o ConnectTimeout=10 "${ssh_host}" \
+      tail -n "${lines}" -- "${remote_file}"
+  fi
+}
+
+target="${1:-}"
+case "${target}" in
+  local)
+    [[ $# -le 3 ]] || { usage >&2; exit 2; }
+    view_local "${2:-200}" "${3:-}"
+    ;;
+  online)
+    [[ $# -le 4 ]] || { usage >&2; exit 2; }
+    view_online "${2:-backend}" "${3:-200}" "${4:-}"
+    ;;
+  help|-h|--help)
+    usage
+    ;;
+  *)
+    usage >&2
+    exit 2
+    ;;
+esac

.claude/skills/query-shz-highgo/.password

@@ -0,0 +1 @@
+Hello@2026

.claude/skills/query-shz-highgo/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: query-shz-highgo
+description: Query the SHZ HighGo Security Enterprise Edition database through its SSH gateway using a guarded read-only psql workflow. Use when Claude Code is working in the shz-backend project and needs to inspect database schemas, tables, columns, row counts, or application data; diagnose data-related behavior; or execute SELECT, WITH, SHOW, or EXPLAIN statements against the project's HighGo database.
+---
+
+# Query SHZ HighGo
+
+Use the bundled script to run read-only SQL through the configured SSH gateway.
+
+## Query workflow
+
+1. Form the narrowest useful query. Add a small `LIMIT` when inspecting rows.
+2. For unfamiliar tables, inspect `information_schema.columns` before selecting business data.
+3. Run:
+
+   ```bash
+   .claude/skills/query-shz-highgo/scripts/query.sh 'SELECT current_database(), current_user, current_schema()'
+   ```
+
+4. Summarize the result and distinguish returned facts from inferences.
+
+The script accepts only statements beginning with `SELECT`, `WITH`, `SHOW`, or `EXPLAIN`, rejects multiple statements, sets `search_path` to `shz,public`, enforces database-level read-only mode, and applies a 30-second timeout. Never bypass these controls or perform writes unless the user explicitly requests a separate write-capable workflow.
+
+## Schema discovery
+
+List user tables:
+
+```bash
+.claude/skills/query-shz-highgo/scripts/query.sh "SELECT table_schema, table_name FROM information_schema.tables WHERE table_schema NOT IN ('pg_catalog', 'information_schema') ORDER BY 1, 2"
+```
+
+Inspect columns:
+
+```bash
+.claude/skills/query-shz-highgo/scripts/query.sh "SELECT column_name, data_type, is_nullable FROM information_schema.columns WHERE table_schema = 'shz' AND table_name = 'lowercase_table_name' ORDER BY ordinal_position"
+```
+
+HighGo may expose unquoted identifiers in lowercase and quoted identifiers with exact case. Query `information_schema` first when the spelling is uncertain.
+
+## Connection details
+
+Read [references/connection.md](references/connection.md) only when troubleshooting connectivity or updating the endpoint. Do not print, quote, or expose the password file.

.claude/skills/query-shz-highgo/references/connection.md

@@ -0,0 +1,12 @@
+# Connection reference
+
+- SSH gateway: `root@124.243.245.42`
+- HighGo client: `/opt/HighGo4.5.7-see/bin/psql`
+- Database endpoint: `39.98.44.136:6023`
+- Database: `highgo`
+- User: `sysdba`
+- Default schemas: `shz,public`
+- Detected server: HighGo Security Enterprise Edition Database System 4.5.10
+- Password source: `../.password`, mode `600`; override with `HIGHGO_PASSWORD_FILE`
+
+The SSH gateway must be reachable with the workstation's existing SSH key. Keep credentials out of commands, logs, responses, and `SKILL.md`.

.claude/skills/query-shz-highgo/scripts/query.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+skill_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+password_file="${HIGHGO_PASSWORD_FILE:-$skill_dir/.password}"
+
+ssh_host="root@124.243.245.42"
+psql_path="/opt/HighGo4.5.7-see/bin/psql"
+db_host="39.98.44.136"
+db_port="6023"
+db_name="highgo"
+db_user="sysdba"
+
+if [[ ! -r "$password_file" ]]; then
+  echo "HighGo password file is missing or unreadable: $password_file" >&2
+  exit 2
+fi
+
+if [[ $# -eq 0 ]]; then
+  echo "Usage: $0 'SELECT ...'" >&2
+  exit 2
+fi
+
+sql="$*"
+if [[ ! "$sql" =~ ^[[:space:]]*(SELECT|select|WITH|with|SHOW|show|EXPLAIN|explain)([[:space:]]|$) ]]; then
+  echo "Rejected: only SELECT, WITH, SHOW, and EXPLAIN queries are allowed." >&2
+  exit 3
+fi
+
+sql_without_final_semicolon="${sql%;}"
+if [[ "$sql_without_final_semicolon" == *';'* ]]; then
+  echo "Rejected: multiple SQL statements are not allowed." >&2
+  exit 3
+fi
+
+password="$(<"$password_file")"
+sql_base64="$(printf '%s' "$sql" | base64 | tr -d '\n')"
+
+{
+  printf '%s\n' "$password"
+  printf '%s\n' "$sql_base64"
+} | ssh -o BatchMode=yes -o ConnectTimeout=10 "$ssh_host" \
+  "read -r PGPASSWORD; read -r SQL_BASE64; export PGPASSWORD; export PGOPTIONS='-c default_transaction_read_only=on -c search_path=shz,public -c statement_timeout=30000'; SQL=\$(printf '%s' \"\$SQL_BASE64\" | base64 -d); exec '$psql_path' -X --no-psqlrc -h '$db_host' -p '$db_port' -U '$db_user' -d '$db_name' -v ON_ERROR_STOP=1 -P pager=off -c \"\$SQL\""