feat(ops): ECR-007 行为分析与 ECR-008 内容运营后台

落地埋点 ingest/数据看板、首页宫格 CMS 与测评上下架；含账号引导、问答流式与免责声明去重，以及 review P1 审计同事务修复。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/ask.go

@@ -1,7 +1,10 @@
 package handler
 
 import (
+	"encoding/json"
+	"fmt"
 	"net/http"
+	"strings"
 
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
@@ -20,6 +23,7 @@ type AskHandler struct {
 func (h *AskHandler) Register(rg *gin.RouterGroup) {
 	rg.GET("/ask/quota", h.GetQuota)
 	rg.POST("/ask/threads", h.CreateThread)
+	rg.DELETE("/ask/threads/:id", h.ClearThread)
 	rg.GET("/ask/threads/:id/messages", h.ListMessages)
 	rg.POST("/ask/threads/:id/messages", h.SendMessage)
 }
@@ -69,6 +73,25 @@ func (h *AskHandler) CreateThread(c *gin.Context) {
 	response.OK(c, th)
 }
 
+// ClearThread handles DELETE /ask/threads/:id.
+func (h *AskHandler) ClearThread(c *gin.Context) {
+	userID, ok := middleware.UserIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40100, "unauthorized")
+		return
+	}
+	tid, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 10000, "invalid id")
+		return
+	}
+	if err := h.Svc.ClearThread(c.Request.Context(), userID, tid); err != nil {
+		response.Fail(c, http.StatusNotFound, 40410, err.Error())
+		return
+	}
+	response.OK(c, gin.H{"cleared": true})
+}
+
 // ListMessages handles GET /ask/threads/:id/messages.
 func (h *AskHandler) ListMessages(c *gin.Context) {
 	userID, ok := middleware.UserIDFromContext(c)
@@ -90,6 +113,7 @@ func (h *AskHandler) ListMessages(c *gin.Context) {
 }
 
 // SendMessage handles POST /ask/threads/:id/messages.
+// Use ?stream=1 (or Accept: text/event-stream) for SSE streaming.
 func (h *AskHandler) SendMessage(c *gin.Context) {
 	userID, ok := middleware.UserIDFromContext(c)
 	if !ok {
@@ -108,10 +132,18 @@ func (h *AskHandler) SendMessage(c *gin.Context) {
 		response.Fail(c, http.StatusBadRequest, 10000, "invalid request")
 		return
 	}
+
+	wantStream := c.Query("stream") == "1" ||
+		strings.Contains(c.GetHeader("Accept"), "text/event-stream")
+	if wantStream {
+		h.sendMessageStream(c, userID, tid, req.Content)
+		return
+	}
+
 	out, err := h.Svc.SendMessage(c.Request.Context(), userID, tid, req.Content)
 	if err != nil {
 		if asksvc.IsQuotaExhausted(err) {
-			response.Fail(c, http.StatusPaymentRequired, 40210, "问答次数已用完，可开通成长会员获取更多次数")
+			response.Fail(c, http.StatusPaymentRequired, 40210, "问答次数已用完，可购买额度或开通成长会员")
 			return
 		}
 		response.Fail(c, http.StatusBadRequest, 40011, err.Error())
@@ -119,3 +151,39 @@ func (h *AskHandler) SendMessage(c *gin.Context) {
 	}
 	response.OK(c, out)
 }
+
+func (h *AskHandler) sendMessageStream(c *gin.Context, userID, tid uuid.UUID, content string) {
+	c.Writer.Header().Set("Content-Type", "text/event-stream; charset=utf-8")
+	c.Writer.Header().Set("Cache-Control", "no-cache, no-transform")
+	c.Writer.Header().Set("Connection", "keep-alive")
+	c.Writer.Header().Set("X-Accel-Buffering", "no")
+	c.Status(http.StatusOK)
+	flusher, ok := c.Writer.(http.Flusher)
+	if !ok {
+		response.Fail(c, http.StatusInternalServerError, 50000, "stream unsupported")
+		return
+	}
+
+	writeEvent := func(event string, payload any) error {
+		raw, err := json.Marshal(payload)
+		if err != nil {
+			return err
+		}
+		if _, err := fmt.Fprintf(c.Writer, "event: %s\ndata: %s\n\n", event, raw); err != nil {
+			return err
+		}
+		flusher.Flush()
+		return nil
+	}
+
+	err := h.Svc.StreamMessage(c.Request.Context(), userID, tid, content, writeEvent)
+	if err != nil {
+		msg := err.Error()
+		code := 40011
+		if asksvc.IsQuotaExhausted(err) {
+			msg = "问答次数已用完，可购买额度或开通成长会员"
+			code = 40210
+		}
+		_ = writeEvent("error", map[string]any{"code": code, "message": msg})
+	}
+}