merge: 合入本地 Ops 扩展与 origin/main（ECR-009–016）

保留远程用户侧 ECR-009–016 与本地 Ops 目录/RBAC/CMS/危机等能力；文档标注分叉期间 ECR 编号冲突。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-13 01:45:53 +08:00
parent 89756f65b4 1026cd0596
commit 4889ff5916
593 changed files with 21918 additions and 328 deletions
@@ -16,3 +16,7 @@
 ## Ask

 Reviewer 勾选 Approve；可将 ECR-007 标 Closed。
+
+## Closed
+
+2026-08-07 Reviewer：**Approve → Closed**（STATE · TRACEABILITY · ECR Status）。
@@ -15,3 +15,7 @@
 ## Ask

 Reviewer Approve；可将 ECR-008 标 Closed。
+
+## Closed
+
+2026-08-07 Reviewer：**Approve → Closed**（STATE · TRACEABILITY · ECR Status）。
@@ -0,0 +1,31 @@
+# HANDOFF — ECR-013A Architect → Engineer
+
+## Gate
+
+**Parent:** WAVE0-FROZEN (`27f27a1`)
+
+**ECR-013A + BD-2026-013A = Approved（2026-08-07 Human）**  
+**Coding Start Authorization: 2026-08-07（Human）→ Engineer 可改 `apps/`。**
+
+## Consume
+
+1. `.ai/product/feature-spec/ops-rbac.md`  
+2. ECR / PRODUCT / ENGINEERING / BD / `docs/CONTRACT_DIFF/ECR-013A.yaml`  
+3. `.ai/domain/boundary-rules.md` · `glossary.yaml`  
+
+## Do
+
+按 ENGINEERING_SPEC Implement order。
+
+## Do not
+
+- UserStatus / ECR-013B  
+- 真支付 · UGC · Prompt  
+- 跳过 Security AC  
+
+## Return
+
+1. HANDOFF engineer→reviewer  
+2. TEST_REPORT 映射全部 AC-ID  
+3. CODE_REVIEW  
+4. `ess-validate --phase review --ecr ECR-013A`  
@@ -0,0 +1,19 @@
+# HANDOFF — ECR-013A Engineer → Reviewer
+
+## Done
+
+- Migration `000015_admin_rbac`：roles / permissions / `admin_accounts.role_id` + 种子 `super_admin`
+- Middleware `RequireAdminPermission`；既有 admin 读写路由挂权限
+- API：`GET /roles` · `GET /roles/:id` · `PUT /roles/:id/permissions`；`GET /me` + login 返回 `role` + `permissions[]`
+- OpenAPI + admin-h5 me/store 最小展示
+- Integration `TestAdminRBAC` 映射 AC-F/S/P/O
+- `docs/TEST_REPORT/ECR-013A.md`
+
+## Evidence
+
+`docs/TEST_REPORT/ECR-013A.md` · Spec `.ai/product/feature-spec/ops-rbac.md`
+
+## Ask
+
+Reviewer 勾选 `docs/CODE_REVIEW/ECR-013A.md`；Approve 后可将 ECR-013A 标 Closed。  
+**勿自动启动 ECR-013B**（需另次 Human Start Authorization）。
@@ -0,0 +1,33 @@
+# HANDOFF — ECR-013B Architect → Engineer
+
+## Gate
+
+**Parent:** WAVE0-FROZEN (`27f27a1`)  
+**Predecessor:** ECR-013A **Closed**
+
+**ECR-013B + BD-2026-013B = Approved（2026-08-07 Human）**  
+**Coding Start Authorization: 2026-08-07（Human）→ Engineer 可改 `apps/`。**
+
+## Consume
+
+1. `.ai/product/feature-spec/ops-account-lifecycle.md`  
+2. ECR / PRODUCT / ENGINEERING / BD / `docs/CONTRACT_DIFF/ECR-013B.yaml`  
+3. `.ai/domain/boundary-rules.md` · `glossary.yaml` · `entity-catalog.md`  
+
+## Do
+
+按 ENGINEERING_SPEC Implement order。
+
+## Do not
+
+- soft-delete / `deleted`  
+- 真支付 · UGC · Prompt  
+- 跳过 Security AC（含 C 端拒绝）  
+- 重做 RBAC（仅 additive permission）  
+
+## Return
+
+1. HANDOFF engineer→reviewer  
+2. TEST_REPORT 映射全部 AC-ID  
+3. CODE_REVIEW  
+4. `ess-validate --phase review --ecr ECR-013B`  
@@ -0,0 +1,20 @@
+# HANDOFF — ECR-013B Engineer → Reviewer
+
+## Done
+
+- Migration `000016`：`account_state_transitions` + `admin.users.status.write` 种子
+- Admin API：`POST /users/:id/status` · `GET .../status-transitions`
+- DeviceAuth / Bearer：非 `active` → **401**（code 40113）
+- Auth OpenLogin 拒绝非 active 账户发 session
+- admin-h5 用户详情：状态 CTA + 迁移列表（权限门控）
+- Integration `TestAccountLifecycle` 映射 AC-F/S/P/O
+- `docs/TEST_REPORT/ECR-013B.md`
+
+## Evidence
+
+`docs/TEST_REPORT/ECR-013B.md` · Spec `ops-account-lifecycle.md`
+
+## Ask
+
+Reviewer 勾选 `docs/CODE_REVIEW/ECR-013B.md`；Approve 后 Closed。  
+勿自动开下一 ECR。
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-017 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000019 permission only. Forbidden: 改消息/UGC/真支付/Prompt 配置.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-017 Engineer → Reviewer
+
+TestAskOperations PASS · admin-h5 /ask · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-018 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration NO. Forbidden: 真支付/UGC/改订单.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-018 Engineer → Reviewer
+
+TestUserEntitlements PASS · 权益 Tab · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-019 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000020. Forbidden: ModerationCase写/UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-019 Engineer → Reviewer
+
+TestContentSafetyFilterRules PASS · /safety · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-020 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000021. Forbidden: 改消息/UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-020 Engineer → Reviewer
+
+TestQualityFeedback PASS · Ask 页反馈 · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-021 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000022. Forbidden: Prompt写/UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-021 Engineer → Reviewer
+
+TestAICoreSystemPrompts PASS · /ai · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-022 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000023. Forbidden: CrisisEvent写/UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-022 Engineer → Reviewer
+
+TestCrisisCarePolicies PASS · /crisis · Ready for Closed.
@@ -0,0 +1,4 @@
+# HANDOFF — ECR-023 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000024. Forbidden: Chunk/Embedding/UGC/真支付.
+复用 admin.ai_config.read。
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-023 Engineer → Reviewer
+
+TestAICoreKnowledgeSources PASS · /ai 知识源区 · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-024 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000025. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-024 Engineer → Reviewer
+
+TestOpsCMSBanners PASS · /cms · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-025 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000026. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-025 Engineer → Reviewer
+
+TestOpsCMSFeedSlots PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-026 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000027. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-026 Engineer → Reviewer
+
+TestOpsCMSPublications PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-027 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000028. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-027 Engineer → Reviewer
+
+TestAICoreKnowledgeChunks PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-028 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000029. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-028 Engineer → Reviewer
+
+TestAICoreToolDefinitions PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-029 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000030. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-029 Engineer → Reviewer
+
+TestContentSafetyBlockPolicies PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-030 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000031. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-030 Engineer → Reviewer
+
+TestContentSafetyModerationCases PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-031 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000032. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-031 Engineer → Reviewer
+
+TestCrisisCareEvents PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-032 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000033. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-032 Engineer → Reviewer
+
+TestCrisisCareInterventions PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-033 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000034. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-033 Engineer → Reviewer
+
+TestAskOpsHandoffs PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-034 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000035. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-034 Engineer → Reviewer
+
+TestAdminPrivacyRequests PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-035 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000036. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-035 Engineer → Reviewer
+
+TestExploreStarConfigs PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-036 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000037. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-036 Engineer → Reviewer
+
+TestExploreRhythmConfigs PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-037 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000038. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-037 Engineer → Reviewer
+
+TestExploreImageCardDecks PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-038 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000039. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-038 Engineer → Reviewer
+
+TestGrowthReportTemplates PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-039 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000040. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-039 Engineer → Reviewer
+
+TestGrowthFunnelDefinitions PASS · Ready for Closed.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-040 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration NO. Forbidden: UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-040 Engineer → Reviewer
+
+TestExploreScaleDefinitions PASS · Ready for Closed.