feat(ECR-017): AskOperations 问答会话只读并 Closed

新增 admin.ask.read、GET /admin/ask/threads*（AskSessionView）与 admin-h5「问答」页；禁改消息/UGC/真支付。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-07 18:39:37 +08:00
parent 1c157a0e46
commit 00a798bd85
33 changed files with 722 additions and 5 deletions
@@ -0,0 +1,24 @@
+# Backend Design: ECR-017 AskOperations
+
+| ID | BD-2026-017 |
+| Status | Approved |
+| Coding | Loop authorized |
+| Level | L2 |
+| Migration | YES 000019（权限 only） |
+
+## Backend Change Boundary
+
+```text
+Domain: AskSessionView (read)
+App: AdminHandler → admin.Service → AdminRepo
+API: GET /api/v1/admin/ask/threads[+/:id]
+Permission: admin.ask.read
+Migration: 000019 grant to super_admin
+UI: admin-h5 /ask
+```
+
+## Out of boundary
+
+Message write/delete · SystemPrompt · Knowledge* · QualityFeedback write · UGC · Payment
+
+Rollback: down migration revoke permission + remove routes/UI