新增

backend/models/models.py

@@ -9,7 +9,7 @@ class Role(Base):
     """Assignable role with a fixed permission-code list.
 
     ``users.role`` stores ``Role.code``.  Built-in roles are seeded on startup;
-    custom roles are owned by admins via the users.manage permission.
+    custom roles are owned by admins via the users.manage / roles.manage permissions.
     """
 
     __tablename__ = "roles"
@@ -40,6 +40,13 @@ class User(Base):
     email_verified = Column(Boolean, default=False)
     email_verified_at = Column(DateTime, nullable=True)
     max_accounts = Column(Integer, default=3)
+    # User who created this account via「用户管理」; null for self-register / seeded.
+    created_by = Column(
+        Integer,
+        ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True,
+        index=True,
+    )
     created_at = Column(DateTime, default=datetime.utcnow)
     updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)