feat(ECR-044): RhythmConfig 写面闭环并 Closed

复用 admin.explore.write、POST/PUT+审计、C端 GET /rhythm/configs、 H5 无 active 空态/失败回退；migration 000053。ExploreConfig Loop STOP，禁自动 ECR-045。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-13 20:43:08 +08:00
parent fcc7667ba3
commit 87b463b2bb
33 changed files with 1006 additions and 35 deletions
@@ -51,7 +51,8 @@
 | [ops-privacy-request.md](ops-privacy-request.md) | AdminGovernance PrivacyRequest | §7 | `/admin/privacy/requests*` | Ops · **ECR-034** |
 | [ops-star-config.md](ops-star-config.md) | ExploreConfig StarConfig（只读） | §7 | `/admin/explore/star-configs*` | Ops · **ECR-035** |
 | [ops-star-config-write.md](ops-star-config-write.md) | StarConfig **写面** | §7 | admin 写 · `GET /star/configs` | ExploreConfig · **ECR-043** |
-| [ops-rhythm-config.md](ops-rhythm-config.md) | ExploreConfig RhythmConfig | §7 | `/admin/explore/rhythm-configs*` | Ops · **ECR-036** |
+| [ops-rhythm-config.md](ops-rhythm-config.md) | ExploreConfig RhythmConfig（只读） | §7 | `/admin/explore/rhythm-configs*` | Ops · **ECR-036** |
+| [ops-rhythm-config-write.md](ops-rhythm-config-write.md) | RhythmConfig **写面** | §7 | admin 写 · `GET /rhythm/configs` | ExploreConfig · **ECR-044** |
 | [ops-image-card-deck.md](ops-image-card-deck.md) | ExploreConfig ImageCardDeck | §7 | `/admin/explore/image-card-decks*` | Ops · **ECR-037** |
 | [ops-report-template.md](ops-report-template.md) | GrowthInsights ReportTemplate | §7 | `/admin/growth/report-templates*` | Ops · **ECR-038** |
 | [ops-funnel-definition.md](ops-funnel-definition.md) | GrowthInsights FunnelDefinition | §7 | `/admin/analytics/funnel-definitions*` | Ops · **ECR-039** |
@@ -0,0 +1,98 @@
+# Feature Spec: ExploreConfig · RhythmConfig 写面（Ops · ECR-044）
+
+> Status: `Active`（**Implemented · ECR-044 Closed**）  
+> Map: `§7` · Capability: `ExploreConfig` · BC: `Explore_Reports`  
+> Auth: `docs/WAVE0/ECR-044_WRITE_AUTHORIZATION.md`（Human 批准 · **仅 ECR-044**）  
+> Predecessor: ECR-036 Closed（只读）· ECR-043 Closed（StarConfig 写）  
+> 关联：[ops-rhythm-config.md](ops-rhythm-config.md) · [life-rhythm.md](life-rhythm.md)
+
+---
+
+## 1. 目标
+
+运营可 **创建 / 更新 / 上下架** `RhythmConfig`；写操作鉴权 + 审计；C 端可读 active 配置并影响节律入口可用性；失败回退「现网可生成」。
+
+验证 ExploreConfig 写面同构复用；**Closed 后立即 STOP**，不自动 ECR-045。
+
+## 2. In / Out
+
+| In | Out |
+|----|-----|
+| Admin POST/PUT `/admin/explore/rhythm-configs*` | **StarConfig / ImageCardDeck / ScaleDefinition** 一切 |
+| 复用权限 `admin.explore.write` | SystemPrompt · KnowledgeSource · Chunk · ToolDefinition |
+| 复用表 `rhythm_configs`（code/title/active/system） | soft-delete · 改节律引擎 · 真支付 · UGC |
+| C 端 GET active rhythm configs | Crisis / Handoff / ContentSafety 写 |
+| 节律页：无 active → 温和不可用态；API 失败 → 回退可生成 | 合并多概念 · 自动开 ECR-045 |
+| 审计 `admin_audit_logs` | 新权限子系统 |
+
+## 3. Domain
+
+| 字段 | 规则 |
+|------|------|
+| `code` | 唯一；`^[a-z][a-z0-9_]{1,62}$`；`system=true` 不可改 code |
+| `title` | 必填 · ≤128 |
+| `active` | `false` = 下架（唯一下架手段） |
+| `system` | 种子行；禁止物理删除 |
+
+## 4. API
+
+### Admin
+
+| Method | Path | 权限 |
+|--------|------|------|
+| GET | `/admin/explore/rhythm-configs` · `/{id}` | `admin.explore.read`（保持） |
+| POST | `/admin/explore/rhythm-configs` | `admin.explore.write` |
+| PUT | `/admin/explore/rhythm-configs/{id}` | `admin.explore.write` |
+
+无 DELETE。
+
+### C 端
+
+| Method | Path | Auth | 语义 |
+|--------|------|------|------|
+| GET | `/api/v1/rhythm/configs` | DeviceAuth | 仅 `active=true`；按 code 排序 |
+
+## 5. C 端生效（可观察）
+
+| 条件 | user-h5 `/rhythm` |
+|------|-------------------|
+| 至少 1 条 active | 保持现网生成路径 |
+| 成功且 0 条 active | 展示「节律配置暂未开放」类空态；禁用主生成 CTA |
+| 请求失败 | **回退**：不阻断现网生成 |
+
+不改节律引擎、不改报告 JSON 契约。
+
+## 6. Permission / Migration
+
+- Migration `000053_ops_rhythm_config_write`：幂等确认 `super_admin` → `admin.explore.write`（043 已授）  
+- 编码时占号（当前 Max=`000052`）  
+
+## 7. UI
+
+| 端 | 行为 |
+|----|------|
+| admin-h5 节律配置页 | 列表 + 新建/编辑/上下架（仅 RhythmConfig） |
+| user-h5 `/rhythm` | 按 §5 显隐 CTA |
+
+## 8. AC
+
+| ID | Then |
+|----|------|
+| AC-F-01 | POST 合法 → list/get 可见 |
+| AC-F-02 | PUT `active=false` → C 端 list 不含 |
+| AC-F-03 | 有 active → C 端 list 非空；节律页可生成 |
+| AC-F-04 | 重复 code → 409 |
+| AC-S-01/02 | 401；仅 read → POST 403 |
+| AC-A-01 | 写产生审计 |
+| AC-C-01 | 全下架后节律页空态/禁 CTA |
+| AC-C-02 | C 端 API 失败不白屏、仍可走回退生成 |
+| AC-O-01 | 无 Star/Card/Scale/Prompt 写路径；无 soft-delete |
+
+## 9. Closed 后
+
+**立即 STOP** Continuous Loop。  
+ECR-045 必须重新 Candidate Review + Human 单独拍板。
+
+## 10. Trace
+
+ECR-044 · BD-2026-044 · PRODUCT_SPEC · CONTRACT_DIFF · ECR-044_WRITE_AUTHORIZATION  
@@ -1,6 +1,7 @@
 # Feature Spec: ExploreConfig · RhythmConfig（Ops · ECR-036）

 > Status: `Active`（Loop continuous · **ECR-036 Closed**）  
+> **写面：** [ops-rhythm-config-write.md](ops-rhythm-config-write.md)（**ECR-044**）  
 > Parent: WAVE0-FROZEN · Predecessor: ECR-035 Closed  
 > Capability: `ExploreConfig` · BC: `Explore_Reports`  
 > 授权：`docs/WAVE0/LOOP_AUTHORIZATION.md`
@@ -636,9 +636,46 @@ export const adminApi = {
      updated_at: string
    }>('PUT', `/explore/star-configs/${id}`, body),
  rhythmConfigs: () =>
-    request<{ items: Array<Record<string, unknown>> }>('GET', '/explore/rhythm-configs'),
+    request<{
+      items: Array<{
+        id: string
+        code: string
+        title: string
+        active: boolean
+        system: boolean
+        updated_at: string
+      }>
+    }>('GET', '/explore/rhythm-configs'),
  rhythmConfig: (id: string) =>
-    request<Record<string, unknown>>('GET', `/explore/rhythm-configs/${id}`),
+    request<{
+      id: string
+      code: string
+      title: string
+      active: boolean
+      system: boolean
+      updated_at: string
+    }>('GET', `/explore/rhythm-configs/${id}`),
+  createRhythmConfig: (body: { code: string; title: string; active: boolean }) =>
+    request<{
+      id: string
+      code: string
+      title: string
+      active: boolean
+      system: boolean
+      updated_at: string
+    }>('POST', '/explore/rhythm-configs', body),
+  updateRhythmConfig: (
+    id: string,
+    body: { code: string; title: string; active: boolean },
+  ) =>
+    request<{
+      id: string
+      code: string
+      title: string
+      active: boolean
+      system: boolean
+      updated_at: string
+    }>('PUT', `/explore/rhythm-configs/${id}`, body),
  imageCardDecks: () =>
    request<{ items: Array<Record<string, unknown>> }>('GET', '/explore/image-card-decks'),
  imageCardDeck: (id: string) =>
@@ -36,6 +36,7 @@ async function onLogout() {
        <RouterLink to="/crisis">危机</RouterLink>
        <RouterLink to="/cms">CMS</RouterLink>
        <RouterLink to="/star-configs">星座配置</RouterLink>
+        <RouterLink to="/rhythm-configs">节律配置</RouterLink>
        <RouterLink to="/catalogs">目录仓</RouterLink>
        <RouterLink to="/orders">订单</RouterLink>
        <RouterLink v-if="auth.can('admin.membership.plans.read')" to="/pricing">定价</RouterLink>
@@ -0,0 +1,165 @@
+<script setup lang="ts">
+import { onMounted, reactive, ref } from 'vue'
+import { adminApi } from '@/api/client'
+import { useAuthStore } from '@/stores/auth'
+
+type Row = Awaited<ReturnType<typeof adminApi.rhythmConfigs>>['items'][number]
+
+const auth = useAuthStore()
+const canWrite = () => auth.can('admin.explore.write')
+
+const loading = ref(false)
+const error = ref('')
+const items = ref<Row[]>([])
+const selected = ref<Row | null>(null)
+const saving = ref(false)
+const formErr = ref('')
+const form = reactive({
+  code: '',
+  title: '',
+  active: true,
+})
+
+async function load() {
+  loading.value = true
+  error.value = ''
+  try {
+    const res = await adminApi.rhythmConfigs()
+    items.value = res.items || []
+  } catch (e) {
+    error.value = e instanceof Error ? e.message : '加载失败'
+  } finally {
+    loading.value = false
+  }
+}
+
+function resetForm() {
+  form.code = ''
+  form.title = ''
+  form.active = true
+  selected.value = null
+  formErr.value = ''
+}
+
+async function openRow(id: string) {
+  formErr.value = ''
+  try {
+    const row = await adminApi.rhythmConfig(id)
+    selected.value = row
+    form.code = row.code
+    form.title = row.title
+    form.active = row.active
+  } catch {
+    selected.value = null
+  }
+}
+
+function payload() {
+  return {
+    code: form.code.trim(),
+    title: form.title.trim(),
+    active: form.active,
+  }
+}
+
+async function createRow() {
+  if (!canWrite()) return
+  saving.value = true
+  formErr.value = ''
+  try {
+    const row = await adminApi.createRhythmConfig(payload())
+    await load()
+    await openRow(row.id)
+  } catch (e) {
+    formErr.value = e instanceof Error ? e.message : '创建失败'
+  } finally {
+    saving.value = false
+  }
+}
+
+async function saveRow() {
+  if (!selected.value || !canWrite()) return
+  saving.value = true
+  formErr.value = ''
+  try {
+    const row = await adminApi.updateRhythmConfig(selected.value.id, payload())
+    selected.value = row
+    await load()
+  } catch (e) {
+    formErr.value = e instanceof Error ? e.message : '保存失败'
+  } finally {
+    saving.value = false
+  }
+}
+
+async function toggleActive() {
+  if (!selected.value || !canWrite()) return
+  form.active = !form.active
+  await saveRow()
+}
+
+onMounted(() => {
+  void load()
+})
+</script>
+
+<template>
+  <section>
+    <h1>节律配置</h1>
+    <p class="muted">RhythmConfig 写面 · 下架仅 active=false · ECR-044</p>
+    <p v-if="!canWrite()" class="err">需要 admin.explore.write 才可写</p>
+    <p v-if="loading" class="muted">加载中…</p>
+    <p v-else-if="error" class="err">{{ error }}</p>
+    <div v-else class="layout">
+      <div class="card">
+        <h2>列表</h2>
+        <button v-if="canWrite()" class="btn" type="button" @click="resetForm">新建</button>
+        <p v-if="!items.length" class="muted">暂无</p>
+        <table v-else>
+          <thead>
+            <tr><th>代码</th><th>标题</th><th>状态</th><th></th></tr>
+          </thead>
+          <tbody>
+            <tr v-for="b in items" :key="b.id">
+              <td><code>{{ b.code }}</code></td>
+              <td>{{ b.title }}</td>
+              <td>{{ b.active ? '启用' : '停用' }}</td>
+              <td><button class="btn" type="button" @click="openRow(b.id)">编辑</button></td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+      <div class="card">
+        <h2>{{ selected ? '编辑' : '新建' }}</h2>
+        <label>代码 <input v-model="form.code" :disabled="!!selected?.system || !canWrite()" /></label>
+        <label>标题 <input v-model="form.title" :disabled="!canWrite()" /></label>
+        <label class="check"><input v-model="form.active" type="checkbox" :disabled="!canWrite()" /> 启用</label>
+        <p v-if="formErr" class="err">{{ formErr }}</p>
+        <div v-if="canWrite()" class="actions">
+          <button v-if="!selected" class="btn primary" type="button" :disabled="saving" @click="createRow">
+            创建
+          </button>
+          <template v-else>
+            <button class="btn primary" type="button" :disabled="saving" @click="saveRow">保存</button>
+            <button class="btn" type="button" :disabled="saving" @click="toggleActive">
+              {{ form.active ? '下架' : '上架' }}
+            </button>
+          </template>
+        </div>
+      </div>
+    </div>
+  </section>
+</template>
+
+<style scoped>
+h1 { margin: 0 0 0.35rem; font-size: 1.35rem; }
+h2 { margin: 0 0 0.6rem; font-size: 1.05rem; }
+.layout { display: grid; grid-template-columns: 1.2fr 1fr; gap: 1rem; margin-top: 1rem; }
+code { font-size: 0.8rem; }
+.card label { display: block; margin: 0.4rem 0; font-size: 0.9rem; }
+.card input { width: 100%; margin-top: 0.2rem; }
+.check { display: flex; align-items: center; gap: 0.4rem; }
+.actions { display: flex; gap: 0.5rem; margin-top: 0.75rem; }
+.btn.primary { font-weight: 600; }
+@media (max-width: 900px) { .layout { grid-template-columns: 1fr; } }
+</style>
@@ -30,6 +30,12 @@ const router = createRouter({
          component: () => import('@/pages/StarConfigPage.vue'),
          meta: { permission: 'admin.explore.read' },
        },
+        {
+          path: 'rhythm-configs',
+          name: 'rhythm-configs',
+          component: () => import('@/pages/RhythmConfigPage.vue'),
+          meta: { permission: 'admin.explore.read' },
+        },
        { path: 'catalogs', name: 'catalogs', component: () => import('@/pages/CatalogHubPage.vue') },
        { path: 'push', name: 'push', component: () => import('@/pages/PushJobsPage.vue') },
        { path: 'admins', name: 'admins', component: () => import('@/pages/AdminsPage.vue'), meta: { superOnly: true } },
@@ -16,6 +16,8 @@ func (h *AdminHandler) registerRhythmConfigs(authed *gin.RouterGroup) {
 	g := authed.Group("/explore")
 	g.GET("/rhythm-configs", middleware.RequireAdminPermission(h.Svc, admin.PermExploreRead), h.ListRhythmConfigs)
 	g.GET("/rhythm-configs/:id", middleware.RequireAdminPermission(h.Svc, admin.PermExploreRead), h.GetRhythmConfig)
+	g.POST("/rhythm-configs", middleware.RequireAdminPermission(h.Svc, admin.PermExploreWrite), h.CreateRhythmConfig)
+	g.PUT("/rhythm-configs/:id", middleware.RequireAdminPermission(h.Svc, admin.PermExploreWrite), h.UpdateRhythmConfig)
 }

 func (h *AdminHandler) ListRhythmConfigs(c *gin.Context) {
@@ -44,3 +46,66 @@ func (h *AdminHandler) GetRhythmConfig(c *gin.Context) {
 	}
 	response.OK(c, row)
 }
+
+func (h *AdminHandler) CreateRhythmConfig(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	var body admin.RhythmConfigWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40054, "invalid body")
+		return
+	}
+	row, err := h.Svc.CreateRhythmConfig(c.Request.Context(), adminID, body)
+	if errors.Is(err, admin.ErrInvalidRhythmConfig) {
+		response.Fail(c, http.StatusBadRequest, 40055, "invalid rhythm config")
+		return
+	}
+	if errors.Is(err, admin.ErrRhythmConfigConflict) {
+		response.Fail(c, http.StatusConflict, 40912, "rhythm config code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50052, "create rhythm config failed")
+		return
+	}
+	response.OK(c, row)
+}
+
+func (h *AdminHandler) UpdateRhythmConfig(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	id, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
+		return
+	}
+	var body admin.RhythmConfigWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40054, "invalid body")
+		return
+	}
+	row, err := h.Svc.UpdateRhythmConfig(c.Request.Context(), adminID, id, body)
+	if errors.Is(err, admin.ErrRhythmConfigNotFound) {
+		response.Fail(c, http.StatusNotFound, 40420, "rhythm-config not found")
+		return
+	}
+	if errors.Is(err, admin.ErrInvalidRhythmConfig) {
+		response.Fail(c, http.StatusBadRequest, 40055, "invalid rhythm config")
+		return
+	}
+	if errors.Is(err, admin.ErrRhythmConfigConflict) {
+		response.Fail(c, http.StatusConflict, 40912, "rhythm config code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50053, "update rhythm config failed")
+		return
+	}
+	response.OK(c, row)
+}
@@ -0,0 +1,36 @@
+package handler
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+	"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
+)
+
+// RhythmConfigPublicHandler serves GET /api/v1/rhythm/configs (DeviceAuth).
+type RhythmConfigPublicHandler struct {
+	Repo *repository.AdminRepo
+}
+
+// Register mounts public rhythm config routes.
+func (h *RhythmConfigPublicHandler) Register(api *gin.RouterGroup) {
+	api.GET("/rhythm/configs", h.ListActive)
+}
+
+func (h *RhythmConfigPublicHandler) ListActive(c *gin.Context) {
+	if h.Repo == nil {
+		response.OK(c, gin.H{"items": []repository.RhythmConfigRow{}})
+		return
+	}
+	items, err := h.Repo.ListActiveRhythmConfigs(c.Request.Context())
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50054, "rhythm configs failed")
+		return
+	}
+	if items == nil {
+		items = []repository.RhythmConfigRow{}
+	}
+	response.OK(c, gin.H{"items": items})
+}
@@ -102,6 +102,7 @@ func NewRouter(pool *pgxpool.Pool, cfg config.Config) *gin.Engine {
 	(&handler.AnalyticsHandler{Svc: analyticsSvc}).Register(authed)
 	(&handler.HomeHandler{Svc: homeSvc}).Register(authed)
 	(&handler.StarConfigPublicHandler{Repo: adminRepo}).Register(authed)
+	(&handler.RhythmConfigPublicHandler{Repo: adminRepo}).Register(authed)

 	gated := authed.Group("")
 	gated.Use(middleware.RequireRegistered(pool))
@@ -0,0 +1,116 @@
+package integration_test
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/google/uuid"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func TestExploreRhythmConfigWrite(t *testing.T) {
+	r, pool := setupAPIPool(t)
+	ctx := context.Background()
+	tok := adminLogin(t, r, "admin", "change-me")
+	devKey := fmt.Sprintf("rhythm-cfg-%d", time.Now().UnixNano())
+
+	code := fmt.Sprintf("rhythm_w_%d", time.Now().UnixNano()%1_000_000)
+	body := map[string]any{"code": code, "title": "测试节律配置", "active": true}
+	env, httpCode := doAdminJSON(t, r, http.MethodPost, "/api/v1/admin/explore/rhythm-configs", body, tok)
+	if httpCode != 200 || env.Code != 0 {
+		t.Fatalf("create http=%d code=%d msg=%s", httpCode, env.Code, env.Message)
+	}
+	var created struct {
+		ID   string `json:"id"`
+		Code string `json:"code"`
+	}
+	_ = json.Unmarshal(env.Data, &created)
+	if created.ID == "" {
+		t.Fatal("bad create")
+	}
+	t.Cleanup(func() {
+		_, _ = pool.Exec(ctx, `DELETE FROM rhythm_configs WHERE id=$1`, created.ID)
+	})
+
+	_, httpCode = doAdminJSON(t, r, http.MethodPost, "/api/v1/admin/explore/rhythm-configs", body, tok)
+	if httpCode != http.StatusConflict {
+		t.Fatalf("dup expected 409 got %d", httpCode)
+	}
+
+	env, _, httpCode = doJSONExpect(t, r, http.MethodGet, "/api/v1/rhythm/configs", nil, devKey, 0)
+	if httpCode != 200 {
+		t.Fatalf("public %d", httpCode)
+	}
+	var pub struct {
+		Items []struct {
+			Code string `json:"code"`
+		} `json:"items"`
+	}
+	_ = json.Unmarshal(env.Data, &pub)
+	found := false
+	for _, it := range pub.Items {
+		if it.Code == code {
+			found = true
+			break
+		}
+	}
+	if !found {
+		t.Fatalf("missing active %#v", pub.Items)
+	}
+
+	body["active"] = false
+	_, httpCode = doAdminJSON(t, r, http.MethodPut, "/api/v1/admin/explore/rhythm-configs/"+created.ID, body, tok)
+	if httpCode != 200 {
+		t.Fatalf("update %d", httpCode)
+	}
+	env, _, _ = doJSONExpect(t, r, http.MethodGet, "/api/v1/rhythm/configs", nil, devKey, 0)
+	_ = json.Unmarshal(env.Data, &pub)
+	for _, it := range pub.Items {
+		if it.Code == code {
+			t.Fatal("inactive still listed")
+		}
+	}
+
+	_, _ = pool.Exec(ctx, `UPDATE rhythm_configs SET active=false`)
+	t.Cleanup(func() {
+		_, _ = pool.Exec(ctx, `UPDATE rhythm_configs SET active=true WHERE system=true`)
+	})
+	env, _, _ = doJSONExpect(t, r, http.MethodGet, "/api/v1/rhythm/configs", nil, devKey, 0)
+	_ = json.Unmarshal(env.Data, &pub)
+	if len(pub.Items) != 0 {
+		t.Fatalf("expected empty after all inactive, got %#v", pub.Items)
+	}
+
+	var n int
+	_ = pool.QueryRow(ctx, `
+		SELECT COUNT(*) FROM admin_audit_logs
+		WHERE action IN ('explore.rhythm_config.create','explore.rhythm_config.update') AND target_id=$1`,
+		created.ID).Scan(&n)
+	if n < 2 {
+		t.Fatalf("audit %d", n)
+	}
+
+	limitedRoleID := uuid.New()
+	_, _ = pool.Exec(ctx, `INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`,
+		limitedRoleID, "rc_ro_"+limitedRoleID.String()[:8])
+	_, _ = pool.Exec(ctx, `INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.explore.read')`, limitedRoleID)
+	hash, _ := bcrypt.GenerateFromPassword([]byte("ro-pass"), bcrypt.DefaultCost)
+	roUser := fmt.Sprintf("rcro_%d", time.Now().UnixNano())
+	_, _ = pool.Exec(ctx, `INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`,
+		roUser, string(hash), limitedRoleID)
+	t.Cleanup(func() {
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, roUser)
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID)
+	})
+	roTok := adminLogin(t, r, roUser, "ro-pass")
+	_, httpCode = doAdminJSON(t, r, http.MethodPost, "/api/v1/admin/explore/rhythm-configs", map[string]any{
+		"code": "x_ro", "title": "no", "active": true,
+	}, roTok)
+	if httpCode != http.StatusForbidden {
+		t.Fatalf("expected 403 got %d", httpCode)
+	}
+}
@@ -0,0 +1,139 @@
+package repository
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"strings"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgconn"
+)
+
+// RhythmConfigWriteInput is create/update payload.
+type RhythmConfigWriteInput struct {
+	Code   string
+	Title  string
+	Active bool
+}
+
+// ListActiveRhythmConfigs returns active configs for C-end.
+func (r *AdminRepo) ListActiveRhythmConfigs(ctx context.Context) ([]RhythmConfigRow, error) {
+	rows, err := r.Pool.Query(ctx, `
+		SELECT id, code, title, active, system, updated_at
+		FROM rhythm_configs
+		WHERE active = true
+		ORDER BY code ASC
+		LIMIT 100`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var out []RhythmConfigRow
+	for rows.Next() {
+		var row RhythmConfigRow
+		if err := rows.Scan(&row.ID, &row.Code, &row.Title, &row.Active, &row.System, &row.UpdatedAt); err != nil {
+			return nil, err
+		}
+		out = append(out, row)
+	}
+	return out, rows.Err()
+}
+
+// CreateRhythmConfigWithAudit inserts and audits.
+func (r *AdminRepo) CreateRhythmConfigWithAudit(
+	ctx context.Context, adminID uuid.UUID, in RhythmConfigWriteInput, meta json.RawMessage,
+) (*RhythmConfigRow, error) {
+	tx, err := r.Pool.Begin(ctx)
+	if err != nil {
+		return nil, err
+	}
+	defer tx.Rollback(ctx)
+	var row RhythmConfigRow
+	err = tx.QueryRow(ctx, `
+		INSERT INTO rhythm_configs(code, title, active, system)
+		VALUES ($1,$2,$3,false)
+		RETURNING id, code, title, active, system, updated_at`,
+		in.Code, in.Title, in.Active,
+	).Scan(&row.ID, &row.Code, &row.Title, &row.Active, &row.System, &row.UpdatedAt)
+	if err != nil {
+		return nil, mapRhythmConfigWriteErr(err)
+	}
+	if meta == nil {
+		meta = json.RawMessage(`{}`)
+	}
+	if _, err := tx.Exec(ctx, `
+		INSERT INTO admin_audit_logs(admin_id, action, target_type, target_id, meta)
+		VALUES ($1,'explore.rhythm_config.create','rhythm_config',$2,$3)`,
+		adminID, row.ID.String(), meta,
+	); err != nil {
+		return nil, err
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+// UpdateRhythmConfigWithAudit updates and audits.
+func (r *AdminRepo) UpdateRhythmConfigWithAudit(
+	ctx context.Context, adminID, id uuid.UUID, in RhythmConfigWriteInput, meta json.RawMessage,
+) (*RhythmConfigRow, error) {
+	tx, err := r.Pool.Begin(ctx)
+	if err != nil {
+		return nil, err
+	}
+	defer tx.Rollback(ctx)
+	var system bool
+	var oldCode string
+	err = tx.QueryRow(ctx, `SELECT system, code FROM rhythm_configs WHERE id=$1`, id).Scan(&system, &oldCode)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, pgx.ErrNoRows
+	}
+	if err != nil {
+		return nil, err
+	}
+	code := in.Code
+	if system {
+		code = oldCode
+	}
+	var row RhythmConfigRow
+	err = tx.QueryRow(ctx, `
+		UPDATE rhythm_configs
+		SET code=$2, title=$3, active=$4, updated_at=now()
+		WHERE id=$1
+		RETURNING id, code, title, active, system, updated_at`,
+		id, code, in.Title, in.Active,
+	).Scan(&row.ID, &row.Code, &row.Title, &row.Active, &row.System, &row.UpdatedAt)
+	if err != nil {
+		return nil, mapRhythmConfigWriteErr(err)
+	}
+	if meta == nil {
+		meta = json.RawMessage(`{}`)
+	}
+	if _, err := tx.Exec(ctx, `
+		INSERT INTO admin_audit_logs(admin_id, action, target_type, target_id, meta)
+		VALUES ($1,'explore.rhythm_config.update','rhythm_config',$2,$3)`,
+		adminID, id.String(), meta,
+	); err != nil {
+		return nil, err
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+func mapRhythmConfigWriteErr(err error) error {
+	var pgErr *pgconn.PgError
+	if errors.As(err, &pgErr) && pgErr.Code == "23505" {
+		return errString("rhythm config code conflict")
+	}
+	return err
+}
+
+// RhythmConfigCodeConflict reports unique violation.
+func RhythmConfigCodeConflict(err error) bool {
+	return err != nil && strings.Contains(err.Error(), "rhythm config code conflict")
+}
@@ -0,0 +1,71 @@
+package admin
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"regexp"
+	"strings"
+	"unicode/utf8"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+)
+
+var (
+	ErrInvalidRhythmConfig  = errors.New("invalid rhythm config")
+	ErrRhythmConfigConflict = errors.New("rhythm config code conflict")
+	rhythmConfigCodeRe      = regexp.MustCompile(`^[a-z][a-z0-9_]{1,62}$`)
+)
+
+// RhythmConfigWriteBody is JSON for create/update.
+type RhythmConfigWriteBody struct {
+	Code   string `json:"code"`
+	Title  string `json:"title"`
+	Active bool   `json:"active"`
+}
+
+// CreateRhythmConfig validates, inserts, audits.
+func (s *Service) CreateRhythmConfig(ctx context.Context, adminID uuid.UUID, body RhythmConfigWriteBody) (*repository.RhythmConfigRow, error) {
+	in, err := normalizeRhythmConfigWrite(body)
+	if err != nil {
+		return nil, err
+	}
+	meta, _ := json.Marshal(map[string]any{"code": in.Code, "active": in.Active})
+	row, err := s.Repo.CreateRhythmConfigWithAudit(ctx, adminID, in, meta)
+	if repository.RhythmConfigCodeConflict(err) {
+		return nil, ErrRhythmConfigConflict
+	}
+	return row, err
+}
+
+// UpdateRhythmConfig validates, updates, audits.
+func (s *Service) UpdateRhythmConfig(ctx context.Context, adminID, id uuid.UUID, body RhythmConfigWriteBody) (*repository.RhythmConfigRow, error) {
+	in, err := normalizeRhythmConfigWrite(body)
+	if err != nil {
+		return nil, err
+	}
+	meta, _ := json.Marshal(map[string]any{"code": in.Code, "active": in.Active})
+	row, err := s.Repo.UpdateRhythmConfigWithAudit(ctx, adminID, id, in, meta)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, ErrRhythmConfigNotFound
+	}
+	if repository.RhythmConfigCodeConflict(err) {
+		return nil, ErrRhythmConfigConflict
+	}
+	return row, err
+}
+
+func normalizeRhythmConfigWrite(body RhythmConfigWriteBody) (repository.RhythmConfigWriteInput, error) {
+	code := strings.TrimSpace(body.Code)
+	title := strings.TrimSpace(body.Title)
+	if !rhythmConfigCodeRe.MatchString(code) {
+		return repository.RhythmConfigWriteInput{}, ErrInvalidRhythmConfig
+	}
+	if title == "" || utf8.RuneCountInString(title) > 128 {
+		return repository.RhythmConfigWriteInput{}, ErrInvalidRhythmConfig
+	}
+	return repository.RhythmConfigWriteInput{Code: code, Title: title, Active: body.Active}, nil
+}
@@ -0,0 +1,2 @@
+-- ECR-044 rollback marker (permission shared with StarConfig write — do not revoke explore.write)
+SELECT 1;
@@ -0,0 +1,7 @@
+-- ECR-044 ExploreConfig RhythmConfig write (reuse admin.explore.write from 000052)
+
+INSERT INTO admin_role_permissions(role_id, code)
+SELECT r.id, 'admin.explore.write'
+FROM admin_roles r
+WHERE r.name = 'super_admin'
+ON CONFLICT DO NOTHING;
@@ -21,6 +21,8 @@ export function useLifeRhythmPage() {
  const loading = ref(false)
  const needBirth = ref(true)
  const error = ref('')
+  /** Fail-open: true until proven empty; API error keeps generation. */
+  const configAvailable = ref(true)
  const report = ref<GrowthReport | null>(null)
  const paying = ref(false)
  const tab = ref<'overview' | 'wuxing' | 'tips' | 'term'>('overview')
@@ -107,7 +109,21 @@ export function useLifeRhythmPage() {
    scheduleDayRefresh()
  }

+  async function refreshConfigGate() {
+    try {
+      const res = await api.getRhythmConfigs()
+      configAvailable.value = (res.items || []).length > 0
+    } catch {
+      configAvailable.value = true
+    }
+  }
+
  async function generate(y: number, m: number, d: number) {
+    if (!configAvailable.value) {
+      error.value = '节律配置暂未开放'
+      needBirth.value = true
+      return
+    }
    loading.value = true
    error.value = ''
    needBirth.value = false
@@ -127,6 +143,10 @@ export function useLifeRhythmPage() {
  }

  async function start() {
+    if (!configAvailable.value) {
+      error.value = '节律配置暂未开放'
+      return
+    }
    const y = Number(year.value)
    const m = Number(month.value)
    const d = Number(day.value)
@@ -140,6 +160,7 @@ export function useLifeRhythmPage() {

  async function load() {
    if (!(await ensureAccount(router, route.fullPath))) return
+    await refreshConfigGate()
    const reportId = String(route.query.report_id || '')
    if (reportId) {
      loading.value = true
@@ -156,6 +177,11 @@ export function useLifeRhythmPage() {
      }
      return
    }
+    if (!configAvailable.value) {
+      needBirth.value = true
+      report.value = null
+      return
+    }
    loading.value = true
    try {
      const cached = await loadSelfLatest('rhythm')
@@ -220,6 +246,7 @@ export function useLifeRhythmPage() {
  return {
    loading,
    needBirth,
+    configAvailable,
    error,
    report,
    paying,
@@ -11,8 +11,15 @@
    </template>

    <div class="body">
+      <div v-if="!configAvailable && !report" class="empty-gate">
+        <HomeToolIcon name="rhythm" :size="56" />
+        <p class="empty-title">节律配置暂未开放</p>
+        <p class="empty-sub">运营尚未启用节律配置，请稍后再来</p>
+        <button class="cta-off" type="button" disabled>生成我的节律</button>
+      </div>
+
      <RhythmIntro
-        v-if="needBirth && !report"
+        v-else-if="needBirth && !report"
        v-model:year="year"
        v-model:month="month"
        v-model:day="day"
@@ -60,6 +67,7 @@ import { useLifeRhythmPage } from '../composables/useLifeRhythmPage'
 const {
  loading,
  needBirth,
+  configAvailable,
  error,
  report,
  paying,
@@ -103,4 +111,35 @@ const {
  margin-top: 2px;
 }
 .body { padding: 8px 16px 88px; }
+.empty-gate {
+  text-align: center;
+  padding: 28px 16px 12px;
+}
+.empty-title {
+  font-family: var(--font-display);
+  font-size: 20px;
+  font-weight: 700;
+  margin-top: 10px;
+  letter-spacing: 0.06em;
+}
+.empty-sub {
+  font-size: 13px;
+  color: rgba(0, 0, 0, 0.42);
+  margin-top: 8px;
+  line-height: 1.5;
+}
+.cta-off {
+  margin-top: 16px;
+  width: 100%;
+  max-width: 320px;
+  padding: 13px;
+  border: none;
+  border-radius: 22px;
+  color: #fff;
+  font-size: 15px;
+  font-weight: 600;
+  background: linear-gradient(135deg, #ff7a6e, var(--color-primary));
+  opacity: 0.45;
+  cursor: not-allowed;
+}
 </style>
@@ -0,0 +1,29 @@
+# Backend Design: ECR-044 RhythmConfig Write
+
+| Field | Value |
+|-------|-------|
+| ID | BD-2026-044 |
+| Status | **Approved** |
+| Coding | **AUTHORIZED** |
+| Level | L2 |
+| Migration | `000053_ops_rhythm_config_write`（编码时分配） |
+
+## Boundary
+
+```text
+Domain: RhythmConfig write + C-end active read
+API:
+  POST/PUT /api/v1/admin/explore/rhythm-configs*
+  GET /api/v1/rhythm/configs
+Permission: admin.explore.write (reuse · 043)
+Table: reuse rhythm_configs
+Audit: explore.rhythm_config.create|update
+```
+
+## Out
+
+StarConfig · ImageCardDeck · ScaleDefinition · AICoreConfig · soft-delete · payment · UGC · auto ECR-045  
+
+## Rollback
+
+migration down · 移除写路由与 C 端读 · H5 回退始终可生成  
@@ -2,6 +2,7 @@

 ## 2026-08-13

+- **ECR-044 Closed：** ExploreConfig RhythmConfig 薄写面（复用 `admin.explore.write` · POST/PUT · `GET /rhythm/configs` · `/rhythm` 空态/失败回退 · migration `000053`）· **Continuous Loop STOP** · 禁自动 ECR-045  
 - **ECR-044 Candidate Review Approved：** 首刀 = **RhythmConfig**（不预设 SystemPrompt）· Spec/Loop/Coding **未开** · Auth 草案 PENDING  
 - **ECR-043 Closed：** ExploreConfig StarConfig 薄写面（`admin.explore.write` · POST/PUT · `GET /star/configs` · `/star` 空态/失败回退 · migration `000052`）· **Continuous Loop STOP** · 禁自动 ECR-044  
 - **ECR-043 Spec Ready：** StarConfig 薄写面（Human 批准 Loop 仅 043）· Coding NOT STARTED · Closed 后禁自动 044  
@@ -0,0 +1,3 @@
+# CODE_REVIEW — ECR-044
+
+**Verdict:** Approve · RhythmConfig write only · 复用 `admin.explore.write` · 下架仅 active=false · 无 Star/Card/Scale/Prompt/Knowledge/Chunk · 无 soft-delete/支付/UGC/Crisis·Handoff · Closed 后 STOP（禁自动 ECR-045）· ECR-008 Live Promote 仍 BLOCKED
@@ -0,0 +1,20 @@
+ecr: ECR-044
+capability: ExploreConfig
+change:
+  type: additive
+breaking_change: false
+migration_required: true
+apis:
+  - method: POST
+    path: /api/v1/admin/explore/rhythm-configs
+    change: added
+  - method: PUT
+    path: /api/v1/admin/explore/rhythm-configs/{id}
+    change: added
+  - method: GET
+    path: /api/v1/rhythm/configs
+    change: added
+perms:
+  - code: admin.explore.write
+    change: reused
+migration: 000053_ops_rhythm_config_write
@@ -0,0 +1,26 @@
+# ECR-044
+
+**Title:** ExploreConfig · RhythmConfig 薄写面  
+**Status:** **Closed**（2026-08-13）  
+**Change Level:** L2  
+**Auth:** `ECR-044_WRITE_AUTHORIZATION.md` · Continuous Loop **仅本 ECR** · Closed 后 STOP  
+**Predecessor:** ECR-036 · ECR-043 · Candidate Review Approved  
+
+## Change
+
+1. Spec `ops-rhythm-config-write`  
+2. 复用 `admin.explore.write` + POST/PUT rhythm-configs + 审计  
+3. C 端 `GET /rhythm/configs`；`/rhythm` 无 active 空态、失败回退  
+4. Migration `000053` · OpenAPI · admin-h5  
+
+## Forbidden
+
+Star 再写 · Card · Scale · Prompt/Knowledge/Chunk · soft-delete · 支付 · UGC · Crisis/Handoff · **Closed 后自动 ECR-045** · ECR-008 Live Promote 解禁
+
+## Acceptance
+
+见 Spec §8 · TEST_REPORT/ECR-044 · CODE_REVIEW Approve.
+
+## Coding gate
+
+Done · Closed.
@@ -0,0 +1,6 @@
+# HANDOFF — Architect → Engineer · ECR-044
+
+**Coding AUTHORIZED** — Human「Write Auth → Spec → 开码」.
+
+Do only RhythmConfig write per Spec. Reuse `admin.explore.write`. Migration 000053.  
+After Closed: STOP — no ECR-045.
@@ -0,0 +1,4 @@
+# HANDOFF — Engineer → Reviewer · ECR-044
+
+TestExploreRhythmConfigWrite PASS · repo-governance-check PASS (max 000053) · Ready Closed.  
+禁止自动开 ECR-045 · ExploreConfig Loop STOP.
@@ -0,0 +1,3 @@
+# PRODUCT_SPEC — ECR-044
+
+对齐 `ops-rhythm-config-write.md` · Human Approved · L2 · **仅 RhythmConfig** · **Closed**.  
@@ -53,20 +53,20 @@
 - **本仓：** `ess_intake: strict` · Retro FAIL · 单 ECR Context  
 - **Ops foundation：** `docs/WAVE0/` · `.ai/domain/boundary-rules.md` · `glossary.yaml` · Loop: `docs/WAVE0/LOOP_AUTHORIZATION.md`  
 - ECR: main 线 ECR-006–016 Closed；Ops 扩展 ECR-013A/B · 017–040；分叉已固定为 `ECR-012-star` / `014-plan` / `015-code` / `016-insight`（见 TRACEABILITY）  
- **Next ECR / Max Migration：** **Next=`ECR-044`（Candidate Review Approved · RhythmConfig）** · **Max=`000052`**（编码→053）  
+- **Next ECR / Max Migration：** **Next=`ECR-045`（禁自动开）** · **Max=`000053`**  
 - **Write-Wave CMS：** 041–042 Closed · STOP  
- **ExploreConfig：** ECR-043 Closed · **ECR-044 Candidate Review Approved** · Spec/Loop **未授权** · Prompt/Knowledge/Chunk STOP  
+- **ExploreConfig：** ECR-043/044 Closed · **Loop STOP** · Prompt/Knowledge/Chunk STOP  
 - **Release：** ECR-008 Live Promote **BLOCKED**（独立门禁 · 勿与 Write-Wave 混谈）  
 - EXP: （无）  
- STATE: `docs/STATE/`（含 ECR-041…043）  
+- STATE: `docs/STATE/`（含 ECR-041…044）  
 - TRACEABILITY: `docs/TRACEABILITY.md` · 门禁 `scripts/repo-governance-check.py`  
 - ADR: `.ai/adr/0007-ess-ai-dual-track.md`  
 - Product status: `.ai/product/p1-status.md`（**P1 Complete**）· `.ai/product/p2-status.md`（**P2 Complete**）  
- Active Spec: `account-auth` · `explore-test` · `home` · `star-profile` · `life-rhythm` · `input-compliance` · `ops-system` · `profile` · `ops-banner-write` · `ops-star-config-write`  
+- Active Spec: `account-auth` · `explore-test` · `home` · `star-profile` · `life-rhythm` · `input-compliance` · `ops-system` · `profile` · `ops-banner-write` · `ops-star-config-write` · `ops-rhythm-config-write`  

 ## WIP（尚未单独 ECR）

- **ECR-044** RhythmConfig：Candidate Review Approved · **Auth Loop PENDING** · **禁止 Spec 冒充开码 / 禁止业务代码**  
+- （无 · ECR-044 Closed · Loop STOP）  

 ## Pointers

@@ -0,0 +1,7 @@
+# STATE — ECR-044
+
+| Status | **Closed** |
+| Spec | ops-rhythm-config-write |
+| Migration | 000053_ops_rhythm_config_write |
+| Closed | 2026-08-13 |
+| Next | STOP · ECR-045 禁自动开 |
@@ -0,0 +1,11 @@
+# TEST_REPORT — ECR-044 RhythmConfig Write
+
+**Commit:** (pending Close)
+
+```bash
+go test ./internal/integration/ -count=1 -run TestExploreRhythmConfigWrite
+python3 scripts/repo-governance-check.py
+```
+
+PASS · AC create/409/C-end hide inactive/empty-all/audit/403 read-only · migration 000053  
+REPO GOVERNANCE: PASS · max migration 000053 · suggested Next ECR-045（禁自动开）
@@ -4,8 +4,8 @@

 | Anchor | Value | Rule |
 |--------|-------|------|
-| **Next ECR** | `ECR-044` | Candidate Review **Approved**（RhythmConfig）· Spec/Loop **未授权** · 禁止自动开码 |
-| **Max Migration** | `000052` | 044 编码时占 `000053`；禁止凭记忆 |
+| **Next ECR** | `ECR-045` | **冻结：** 须重新 Candidate Review + Human 单独拍板；**禁止自动开刀** |
+| **Max Migration** | `000053` | 禁止凭记忆 |

 - ECR identity **全局唯一**（含已 Closed）；禁止同号双义。分叉只用 `ECR-NNN-suffix` / `ECR-NNNA`。  
 - Migration **6 位版本号唯一**。撞号修复见 `docs/MIGRATION_RENUMBER.md`。  
@@ -69,6 +69,6 @@
 | ECR-042 | OpsCMS · FeedSlot 薄写面 | **Closed** | Spec ops-feed-slot-write · BD-2026-042 · 无新 migration · 复用 cms.write |
 | EXPLORE-WRITE | ExploreConfig 写面授权 | **Approved · 仅 ECR-043 · Closed 后 STOP** | `EXPLORE_CONFIG_WRITE_AUTHORIZATION.md` |
 | ECR-043 | ExploreConfig · StarConfig 薄写面 | **Closed** | Spec ops-star-config-write · BD-2026-043 · migration **000052** · Closed 后 STOP · 禁自动 ECR-044 |
-| ECR-044 | ExploreConfig · RhythmConfig 薄写面 | **Candidate Review Approved** | `WAVE0/ECR-044-CANDIDATE_REVIEW.md` · Spec/Loop **NOT STARTED** · 禁 Prompt/Knowledge/Chunk |
+| ECR-044 | ExploreConfig · RhythmConfig 薄写面 | **Closed** | Spec ops-rhythm-config-write · BD-2026-044 · migration **000053** · Closed 后 STOP · 禁自动 ECR-045 |

 > **Migration：** 合并后 `000015`–`000023` 曾撞号，已重编号至 `000050`。以 `apps/api/migrations/` 与 `docs/MIGRATION_RENUMBER.md` 为准（文档中旧号引用可能滞后）。
@@ -1,12 +1,12 @@
 # ECR-044 Candidate Review — ExploreConfig 写面（续）

-> **RESOLVED 2026-08-13（Human: Candidate Review approve）：**  
-> 首刀 = **RhythmConfig** · **禁止**预设 SystemPrompt / Knowledge / Chunk  
-> Continuous Loop / Spec / Coding：**尚未授权**（须另开 Auth + Spec → 开码）
+> **RESOLVED 2026-08-13（Human: Candidate Review approve → Auth/Spec/开码 → Closed）：**  
+> 首刀 = **RhythmConfig** · **Closed** · Loop **STOP** · 禁自动 ECR-045  
+> Continuous Loop / Spec / Coding：本刀已完成并收口  

 **Date:** 2026-08-13  
-**Mode:** Candidate Review **Approved** · Spec **NOT STARTED** · **禁止业务代码**  
-**Anchors:** Next=`ECR-044` · Max Migration=`000052`
+**Mode:** Candidate Review **Approved** · Spec **Closed** · Coding **Closed**  
+**Anchors:** Next=`ECR-045`（禁自动开）· Max Migration=`000053`

 ## 锁定现状（评审输入）

@@ -1,32 +1,28 @@
-# ExploreConfig Write Authorization — ECR-044 only（草案）
+# ExploreConfig Write Authorization — ECR-044 only

 | Field | Value |
 |-------|-------|
 | Date | 2026-08-13 |
-| Authorizer | Human（Candidate Review 已批；**Loop 未批**） |
-| Status | **PENDING Continuous Loop** · Candidate Review = Approved |
-| Scope | **ECR-044 · RhythmConfig 薄写面 ONLY**（若本 Auth 获批） |
-| Continuous Loop | **NOT YET** |
+| Authorizer | Human |
+| Status | **Approved · ECR-044 Closed · Loop STOP** |
+| Scope | **ECR-044 · RhythmConfig 薄写面 ONLY** |
+| Continuous Loop | **Finished · STOP** |
 | After Closed | **STOP** · 禁止自动 ECR-045 |

-## 前置
+## Human 拍板（2026-08-13）

- Candidate Review：`docs/WAVE0/ECR-044-CANDIDATE_REVIEW.md` → **RhythmConfig**  
- 043 Auth **已耗尽** · 不可继承  
-
-## 待 Human 拍板（本文件生效条件）
-
-1. 确认 Continuous Loop **仅限 ECR-044**  
-2. 确认复用 `admin.explore.write`（不加新权限体系）  
-3. 确认硬 STOP 表不变  
-
-获批前：**禁止 Spec 冒充已授权开码 · 禁止改 `apps/`**。
+1. Candidate Review = RhythmConfig  
+2. Write Auth → Spec → 开码（本授权）  
+3. 复用 `admin.explore.write`（043 已授；053 幂等确认）  
+4. Continuous Loop **仅限 ECR-044**

 ## Hard STOP

-Prompt / Knowledge / Chunk · 支付 · UGC · soft-delete · Crisis/Handoff · Card/Scale 顺带 · Closed 后自动下一刀 · ECR-008 Live Promote 解禁
+Star 再写 · Card 内容编辑 · Scale · Prompt / Knowledge / Chunk · 支付 · UGC · soft-delete · Crisis/Handoff · Closed 后自动下一刀 · ECR-008 Live Promote 解禁

 ## Refs

 Candidate Review: `ECR-044-CANDIDATE_REVIEW.md`  
-Predecessor Closed: ECR-043 · Auth `EXPLORE_CONFIG_WRITE_AUTHORIZATION.md`
+Spec: `.ai/product/feature-spec/ops-rhythm-config-write.md`  
+ECR: `docs/ECR/ECR-044-rhythm-config-write.md`  
+Predecessor Auth: `EXPLORE_CONFIG_WRITE_AUTHORIZATION.md`（043 · 已耗尽）
@@ -311,6 +311,15 @@ export function createClient(opts: CreateClientOptions) {
          active: boolean
        }>
      }>('/api/v1/star/configs'),
+    getRhythmConfigs: () =>
+      call<{
+        items: Array<{
+          id: string
+          code: string
+          title: string
+          active: boolean
+        }>
+      }>('/api/v1/rhythm/configs'),
    getHomeDailyTips: () => call<HomeDailyTips>('/api/v1/home/daily-tips'),
  }
 }
@@ -1245,6 +1245,21 @@ paths:
          description: Unauthorized
        '403':
          description: Forbidden
+    post:
+      tags: [admin]
+      summary: Create RhythmConfig
+      description: Requires admin.explore.write · ECR-044
+      responses:
+        '200':
+          description: OK
+        '400':
+          description: Invalid
+        '401':
+          description: Unauthorized
+        '403':
+          description: Forbidden
+        '409':
+          description: Code conflict

  /api/v1/admin/explore/rhythm-configs/{id}:
    get:
@@ -1260,6 +1275,26 @@ paths:
          description: OK
        '404':
          description: Not found
+    put:
+      tags: [admin]
+      summary: Update RhythmConfig
+      description: Requires admin.explore.write · deactivate via active=false · ECR-044
+      parameters:
+        - in: path
+          name: id
+          required: true
+          schema: { type: string, format: uuid }
+      responses:
+        '200':
+          description: OK
+        '400':
+          description: Invalid
+        '403':
+          description: Forbidden
+        '404':
+          description: Not found
+        '409':
+          description: Code conflict

  /api/v1/admin/explore/image-card-decks:
    get:
@@ -1584,6 +1619,15 @@ paths:
        '200':
          description: OK

+  /api/v1/rhythm/configs:
+    get:
+      tags: [system]
+      summary: Active RhythmConfig list for C-end (ECR-044)
+      description: DeviceAuth · only active=true · ordered by code
+      responses:
+        '200':
+          description: OK
+
  /api/v1/home/daily-tips:
    get:
      tags: [system]