From b904e6b04f8471b655b725430c9849f81f362b95 Mon Sep 17 00:00:00 2001 From: jackyu66git Date: Sat, 8 Aug 2026 03:15:00 +0800 Subject: [PATCH] =?UTF-8?q?feat(ECR-030):=20ContentSafety=20ModerationCase?= =?UTF-8?q?=20=E5=8F=AA=E8=AF=BB=E5=B9=B6=20Closed?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ModerationCase catalog (000031) · Loop continuous. --- .ai/product/feature-spec/README.md | 1 + .../feature-spec/ops-moderation-case.md | 41 +++++++++ apps/admin-h5/src/api/client.ts | 4 + apps/api/internal/handler/admin.go | 1 + .../internal/handler/admin_moderation_case.go | 46 ++++++++++ .../integration/moderation_case_test.go | 88 +++++++++++++++++++ .../repository/moderation_case_repo.go | 58 ++++++++++++ .../internal/service/admin/moderation_case.go | 34 +++++++ .../000031_moderation_cases.down.sql | 1 + .../migrations/000031_moderation_cases.up.sql | 18 ++++ .../BD-2026-030-moderation-case.md | 23 +++++ docs/CHANGELOG.md | 1 + docs/CODE_REVIEW/ECR-030.md | 8 ++ docs/CONTRACT_DIFF/ECR-030.yaml | 22 +++++ docs/ECR/ECR-030-moderation-case.md | 15 ++++ .../ECR-030-moderation-case.md | 6 ++ docs/HANDOFF/ECR-030-architect-to-engineer.md | 3 + docs/HANDOFF/ECR-030-engineer-to-reviewer.md | 3 + docs/PRODUCT_SPEC/ECR-030-moderation-case.md | 3 + docs/STATE/ECR-030.md | 6 ++ docs/TASKS/TASK-030-ECR030.yaml | 12 +++ docs/TEST_REPORT/ECR-030.md | 33 +++++++ docs/TRACEABILITY.md | 1 + docs/WAVE0/LOOP_AUTHORIZATION.md | 2 +- proto/openapi.yaml | 28 ++++++ 25 files changed, 457 insertions(+), 1 deletion(-) create mode 100644 .ai/product/feature-spec/ops-moderation-case.md create mode 100644 apps/api/internal/handler/admin_moderation_case.go create mode 100644 apps/api/internal/integration/moderation_case_test.go create mode 100644 apps/api/internal/repository/moderation_case_repo.go create mode 100644 apps/api/internal/service/admin/moderation_case.go create mode 100644 apps/api/migrations/000031_moderation_cases.down.sql create mode 100644 apps/api/migrations/000031_moderation_cases.up.sql create mode 100644 docs/BACKEND_DESIGN/BD-2026-030-moderation-case.md create mode 100644 docs/CODE_REVIEW/ECR-030.md create mode 100644 docs/CONTRACT_DIFF/ECR-030.yaml create mode 100644 docs/ECR/ECR-030-moderation-case.md create mode 100644 docs/ENGINEERING_SPEC/ECR-030-moderation-case.md create mode 100644 docs/HANDOFF/ECR-030-architect-to-engineer.md create mode 100644 docs/HANDOFF/ECR-030-engineer-to-reviewer.md create mode 100644 docs/PRODUCT_SPEC/ECR-030-moderation-case.md create mode 100644 docs/STATE/ECR-030.md create mode 100644 docs/TASKS/TASK-030-ECR030.yaml create mode 100644 docs/TEST_REPORT/ECR-030.md diff --git a/.ai/product/feature-spec/README.md b/.ai/product/feature-spec/README.md index 70e2478..fad0dab 100644 --- a/.ai/product/feature-spec/README.md +++ b/.ai/product/feature-spec/README.md @@ -39,6 +39,7 @@ | [ops-knowledge-chunk.md](ops-knowledge-chunk.md) | AICoreConfig KnowledgeChunk | §7 | `GET /admin/ai/knowledge-chunks*` | Ops-D · **ECR-027 Closed** | | [ops-tool-definition.md](ops-tool-definition.md) | AICoreConfig ToolDefinition | §7 | `GET /admin/ai/tools*` | Ops-D · **ECR-028 Closed** | | [ops-block-policy.md](ops-block-policy.md) | ContentSafety BlockPolicy | §7 | `GET /admin/content-safety/block-policies*` | Ops-D · **ECR-029 Closed** | +| [ops-moderation-case.md](ops-moderation-case.md) | ContentSafety ModerationCase | §7 | `GET /admin/content-safety/cases*` | Ops-D · **ECR-030 Closed** | 新功能：复制 `_TEMPLATE.md` → 填满 → 在本表登记 → 再编码。 diff --git a/.ai/product/feature-spec/ops-moderation-case.md b/.ai/product/feature-spec/ops-moderation-case.md new file mode 100644 index 0000000..bade415 --- /dev/null +++ b/.ai/product/feature-spec/ops-moderation-case.md @@ -0,0 +1,41 @@ +# Feature Spec: ContentSafety · ModerationCase（Ops · ECR-030） + +> Status: `Active`（Loop continuous · **ECR-030 Closed**） +> Parent: WAVE0-FROZEN · Predecessor: ECR-029 Closed +> Capability: `ContentSafety` · BC: `Content_Safety` +> 授权：`docs/WAVE0/LOOP_AUTHORIZATION.md` + +## Non-goals + +审核写回 · 真 NLP 厂商 · UGC · 真支付 + +## L2 Domain + +| 概念 | 语义 | +|------|------| +| `ModerationCase` | 本切片只读目录；code 唯一（若适用） | + +## L3 API + +| Method | Path | 权限 | 语义 | +|--------|------|------|------| +| GET | `/admin/content-safety/cases` | `admin.content_safety.read` | 只读 | +| GET | `/admin/content-safety/cases/{id}` | `admin.content_safety.read` | 只读 | + +## Migration + +`000031`：表 + 种子（若有）（权限复用） + +## L4 AC + +| ID | Then | +|----|------| +| AC-F-01 | list 含种子或空列表合法 | +| AC-F-02 | 已知 id get 200 | +| AC-F-03 | 未知 id → 404 | +| AC-S-01 | 无 Admin → 401 | +| AC-S-02 | 无权限 → 403 | +| AC-P-01 | list < 500ms | +| AC-O-01 | N/A 只读 | + +contract_diff: `docs/CONTRACT_DIFF/ECR-030.yaml` diff --git a/apps/admin-h5/src/api/client.ts b/apps/admin-h5/src/api/client.ts index f357e7d..753ddf2 100644 --- a/apps/admin-h5/src/api/client.ts +++ b/apps/admin-h5/src/api/client.ts @@ -453,6 +453,10 @@ export const adminApi = { request<{ items: Array> }>('GET', '/content-safety/block-policies'), blockPolicie: (id: string) => request>('GET', `/content-safety/block-policies/${id}`), + cases: () => + request<{ items: Array> }>('GET', '/content-safety/cases'), + case: (id: string) => + request>('GET', `/content-safety/cases/${id}`), orders: () => request<{ items: Array<{ diff --git a/apps/api/internal/handler/admin.go b/apps/api/internal/handler/admin.go index 411c9e2..6bda826 100644 --- a/apps/api/internal/handler/admin.go +++ b/apps/api/internal/handler/admin.go @@ -58,6 +58,7 @@ func (h *AdminHandler) Register(api *gin.RouterGroup) { h.registerKnowledgeChunks(authed) h.registerToolDefinitions(authed) h.registerBlockPolicies(authed) + h.registerModerationCases(authed) } func (h *AdminHandler) Login(c *gin.Context) { diff --git a/apps/api/internal/handler/admin_moderation_case.go b/apps/api/internal/handler/admin_moderation_case.go new file mode 100644 index 0000000..15f6ead --- /dev/null +++ b/apps/api/internal/handler/admin_moderation_case.go @@ -0,0 +1,46 @@ +package handler + +import ( + "errors" + "net/http" + + "github.com/gin-gonic/gin" + "github.com/google/uuid" + + "github.com/yuxingu/digital-psychology/apps/api/internal/middleware" + "github.com/yuxingu/digital-psychology/apps/api/internal/service/admin" + "github.com/yuxingu/digital-psychology/apps/api/pkg/response" +) + +func (h *AdminHandler) registerModerationCases(authed *gin.RouterGroup) { + g := authed.Group("/content-safety") + g.GET("/cases", middleware.RequireAdminPermission(h.Svc, admin.PermContentSafetyRead), h.ListModerationCases) + g.GET("/cases/:id", middleware.RequireAdminPermission(h.Svc, admin.PermContentSafetyRead), h.GetModerationCase) +} + +func (h *AdminHandler) ListModerationCases(c *gin.Context) { + items, err := h.Svc.ListModerationCases(c.Request.Context()) + if err != nil { + response.Fail(c, http.StatusInternalServerError, 50050, "list moderation-case failed") + return + } + response.OK(c, gin.H{"items": items}) +} + +func (h *AdminHandler) GetModerationCase(c *gin.Context) { + id, err := uuid.Parse(c.Param("id")) + if err != nil { + response.Fail(c, http.StatusBadRequest, 40002, "invalid id") + return + } + row, err := h.Svc.GetModerationCase(c.Request.Context(), id) + if errors.Is(err, admin.ErrModerationCaseNotFound) { + response.Fail(c, http.StatusNotFound, 40420, "moderation-case not found") + return + } + if err != nil { + response.Fail(c, http.StatusInternalServerError, 50051, "get moderation-case failed") + return + } + response.OK(c, row) +} diff --git a/apps/api/internal/integration/moderation_case_test.go b/apps/api/internal/integration/moderation_case_test.go new file mode 100644 index 0000000..812f8eb --- /dev/null +++ b/apps/api/internal/integration/moderation_case_test.go @@ -0,0 +1,88 @@ +package integration_test + +import ( + "context" + "encoding/json" + "fmt" + "net/http" + "testing" + "time" + + "github.com/google/uuid" + "golang.org/x/crypto/bcrypt" +) + +func TestContentSafetyModerationCases(t *testing.T) { + r, pool := setupAPIPool(t) + ctx := context.Background() + tok := adminLogin(t, r, "admin", "change-me") + + _, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/content-safety/cases", nil, "") + if code != http.StatusUnauthorized { + t.Fatalf("expected 401, got %d", code) + } + + limitedRoleID := uuid.New() + _, err := pool.Exec(ctx, `INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`, + limitedRoleID, "lim_"+limitedRoleID.String()[:8]) + if err != nil { + t.Fatal(err) + } + _, err = pool.Exec(ctx, `INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID) + if err != nil { + t.Fatal(err) + } + hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost) + if err != nil { + t.Fatal(err) + } + limUser := fmt.Sprintf("lim_%d", time.Now().UnixNano()) + _, err = pool.Exec(ctx, `INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`, + limUser, string(hash), limitedRoleID) + if err != nil { + t.Fatal(err) + } + t.Cleanup(func() { + _, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser) + _, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID) + }) + limTok := adminLogin(t, r, limUser, "limited-pass") + _, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/content-safety/cases", nil, limTok) + if code != http.StatusForbidden { + t.Fatalf("expected 403, got %d", code) + } + + start := time.Now() + env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/content-safety/cases", nil, tok) + if code != 200 || env.Code != 0 { + t.Fatalf("list http=%d msg=%s", code, env.Message) + } + if time.Since(start) > 500*time.Millisecond { + t.Fatalf("list too slow %v", time.Since(start)) + } + var list struct { + Items []struct { + ID string `json:"id"` + Code string `json:"code"` + } `json:"items"` + } + _ = json.Unmarshal(env.Data, &list) + var id string + for _, it := range list.Items { + if it.Code == "demo_case_seed" { + id = it.ID + break + } + } + if id == "" { + t.Fatalf("missing demo_case_seed: %#v", list.Items) + } + env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/content-safety/cases/"+id, nil, tok) + if code != 200 { + t.Fatalf("get %d", code) + } + _, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/content-safety/cases/"+fakeUUID(), nil, tok) + if code != http.StatusNotFound { + t.Fatalf("expected 404, got %d", code) + } +} diff --git a/apps/api/internal/repository/moderation_case_repo.go b/apps/api/internal/repository/moderation_case_repo.go new file mode 100644 index 0000000..826e66d --- /dev/null +++ b/apps/api/internal/repository/moderation_case_repo.go @@ -0,0 +1,58 @@ +package repository + +import ( + "context" + "errors" + "time" + + "github.com/google/uuid" + "github.com/jackc/pgx/v5" +) + +// ModerationCaseRow is ModerationCase catalog row. +type ModerationCaseRow struct { + ID uuid.UUID `json:"id"` + Code string `json:"code"` + Title string `json:"title"` + Status string `json:"status"` + Active bool `json:"active"` + System bool `json:"system"` + UpdatedAt time.Time `json:"updated_at"` +} + +// ListModerationCases returns ModerationCase catalog. +func (r *AdminRepo) ListModerationCases(ctx context.Context) ([]ModerationCaseRow, error) { + rows, err := r.Pool.Query(ctx, ` + SELECT id, code, title, status, active, system, updated_at + FROM moderation_cases + ORDER BY active DESC, code ASC`) + if err != nil { + return nil, err + } + defer rows.Close() + var out []ModerationCaseRow + for rows.Next() { + var row ModerationCaseRow + if err := rows.Scan(&row.ID, &row.Code, &row.Title, &row.Status, &row.Active, &row.System, &row.UpdatedAt); err != nil { + return nil, err + } + out = append(out, row) + } + return out, rows.Err() +} + +// GetModerationCase loads one by id. +func (r *AdminRepo) GetModerationCase(ctx context.Context, id uuid.UUID) (*ModerationCaseRow, error) { + var row ModerationCaseRow + err := r.Pool.QueryRow(ctx, ` + SELECT id, code, title, status, active, system, updated_at + FROM moderation_cases WHERE id=$1`, id, + ).Scan(&row.ID, &row.Code, &row.Title, &row.Status, &row.Active, &row.System, &row.UpdatedAt) + if errors.Is(err, pgx.ErrNoRows) { + return nil, err + } + if err != nil { + return nil, err + } + return &row, nil +} diff --git a/apps/api/internal/service/admin/moderation_case.go b/apps/api/internal/service/admin/moderation_case.go new file mode 100644 index 0000000..5aec510 --- /dev/null +++ b/apps/api/internal/service/admin/moderation_case.go @@ -0,0 +1,34 @@ +package admin + +import ( + "context" + "errors" + + "github.com/google/uuid" + "github.com/jackc/pgx/v5" + + "github.com/yuxingu/digital-psychology/apps/api/internal/repository" +) + +var ErrModerationCaseNotFound = errString("moderation case not found") + +// ListModerationCases returns catalog. +func (s *Service) ListModerationCases(ctx context.Context) ([]repository.ModerationCaseRow, error) { + items, err := s.Repo.ListModerationCases(ctx) + if err != nil { + return nil, err + } + if items == nil { + items = []repository.ModerationCaseRow{} + } + return items, nil +} + +// GetModerationCase loads one. +func (s *Service) GetModerationCase(ctx context.Context, id uuid.UUID) (*repository.ModerationCaseRow, error) { + row, err := s.Repo.GetModerationCase(ctx, id) + if errors.Is(err, pgx.ErrNoRows) { + return nil, ErrModerationCaseNotFound + } + return row, err +} diff --git a/apps/api/migrations/000031_moderation_cases.down.sql b/apps/api/migrations/000031_moderation_cases.down.sql new file mode 100644 index 0000000..ae1cc95 --- /dev/null +++ b/apps/api/migrations/000031_moderation_cases.down.sql @@ -0,0 +1 @@ +DROP TABLE IF EXISTS moderation_cases; diff --git a/apps/api/migrations/000031_moderation_cases.up.sql b/apps/api/migrations/000031_moderation_cases.up.sql new file mode 100644 index 0000000..8f2a2d8 --- /dev/null +++ b/apps/api/migrations/000031_moderation_cases.up.sql @@ -0,0 +1,18 @@ +-- ECR-030 ModerationCase (read catalog) + +CREATE TABLE IF NOT EXISTS moderation_cases ( + id uuid PRIMARY KEY DEFAULT gen_random_uuid(), + code varchar(64) NOT NULL UNIQUE, + title varchar(128) NOT NULL, + status varchar(32) NOT NULL CHECK (status IN ('open','closed')), + active boolean NOT NULL DEFAULT true, + system boolean NOT NULL DEFAULT false, + created_at timestamptz NOT NULL DEFAULT now(), + updated_at timestamptz NOT NULL DEFAULT now() +); + +CREATE INDEX IF NOT EXISTS idx_moderation_cases_active ON moderation_cases(active); + +INSERT INTO moderation_cases(code, title, status, active, system) +VALUES ('demo_case_seed', '示例审核案', 'closed', true, true) +ON CONFLICT (code) DO NOTHING; diff --git a/docs/BACKEND_DESIGN/BD-2026-030-moderation-case.md b/docs/BACKEND_DESIGN/BD-2026-030-moderation-case.md new file mode 100644 index 0000000..ebc98d1 --- /dev/null +++ b/docs/BACKEND_DESIGN/BD-2026-030-moderation-case.md @@ -0,0 +1,23 @@ +# Backend Design: ECR-030 ModerationCase + +| ID | BD-2026-030 | +| Status | Approved | +| Coding | Loop authorized | +| Level | L2 | +| Migration | YES 000031 | + +## Backend Change Boundary + +```text +Domain: ModerationCase (read) +App: AdminHandler → admin.Service → AdminRepo +API: GET /admin/content-safety/cases; GET /admin/content-safety/cases/{id} +Permission: admin.content_safety.read +Migration: 000031 +``` + +## Out of boundary + +审核写回 · 真 NLP 厂商 · UGC · 真支付 + +Rollback: down migration + remove routes/UI diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 53e4848..e15a74b 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -2,6 +2,7 @@ ## 2026-08-08 +- **ECR-030 Closed**：ContentSafety ModerationCase（migration 000031 · admin client · /content-safety/cases · 只读） - **ECR-029 Closed**：ContentSafety BlockPolicy（migration 000030 · admin client · /content-safety/block-policies · 只读） - **ECR-028 Closed**：AICoreConfig ToolDefinition（migration 000029 · admin client · /ai/tools · 只读） - **ECR-027 Closed**：AICoreConfig KnowledgeChunk（migration 000028 · admin client · /ai/knowledge-chunks · 只读） diff --git a/docs/CODE_REVIEW/ECR-030.md b/docs/CODE_REVIEW/ECR-030.md new file mode 100644 index 0000000..c935f73 --- /dev/null +++ b/docs/CODE_REVIEW/ECR-030.md @@ -0,0 +1,8 @@ +# CODE_REVIEW — ECR-030 + +**Verdict:** Approve → Closed + +Date: 2026-08-08 · Loop continuous + +- ModerationCase 只读；无 UGC/真支付 +- Integration AC mapped · OpenAPI updated diff --git a/docs/CONTRACT_DIFF/ECR-030.yaml b/docs/CONTRACT_DIFF/ECR-030.yaml new file mode 100644 index 0000000..3727203 --- /dev/null +++ b/docs/CONTRACT_DIFF/ECR-030.yaml @@ -0,0 +1,22 @@ +ecr: ECR-030 +capability: ContentSafety +bounded_context: Content_Safety +parent: WAVE0-FROZEN +predecessor: ECR-029 +change: + type: additive +breaking_change: false +migration_required: true +compatibility_notes: > + Adds ModerationCase read catalog. Forbidden: UGC / real payment. + +apis: + - method: GET + path: /api/v1/admin/content-safety/cases + change: added + - method: GET + path: /api/v1/admin/content-safety/cases/{id} + change: added +perms: + - code: admin.content_safety.read + change: unchanged diff --git a/docs/ECR/ECR-030-moderation-case.md b/docs/ECR/ECR-030-moderation-case.md new file mode 100644 index 0000000..a9c82e4 --- /dev/null +++ b/docs/ECR/ECR-030-moderation-case.md @@ -0,0 +1,15 @@ +# ECR-030 + +**Title:** ContentSafety · ModerationCase（只读薄切片） +**Status:** **Closed** +**Closed:** 2026-08-08（Loop continuous） +**Parent:** WAVE0-FROZEN · **Predecessor:** ECR-029 Closed +**Change Level:** L2 + +## Change + +ModerationCase 只读 · migration 000031 · admin client · /content-safety/cases + +## Linked + +Spec `ops-moderation-case.md` · BD-2026-030 · CONTRACT_DIFF/ECR-030.yaml · TEST_REPORT/ECR-030.md diff --git a/docs/ENGINEERING_SPEC/ECR-030-moderation-case.md b/docs/ENGINEERING_SPEC/ECR-030-moderation-case.md new file mode 100644 index 0000000..e51db82 --- /dev/null +++ b/docs/ENGINEERING_SPEC/ECR-030-moderation-case.md @@ -0,0 +1,6 @@ +# ENGINEERING_SPEC — ECR-030 + +1. migration 000031 +2. AdminRepo/Service/Handler +3. OpenAPI + admin-h5 +4. Integration · Closed diff --git a/docs/HANDOFF/ECR-030-architect-to-engineer.md b/docs/HANDOFF/ECR-030-architect-to-engineer.md new file mode 100644 index 0000000..3eea937 --- /dev/null +++ b/docs/HANDOFF/ECR-030-architect-to-engineer.md @@ -0,0 +1,3 @@ +# HANDOFF — ECR-030 Architect → Engineer + +Loop continuous · Approved + Coding. Migration 000031. Forbidden: UGC/真支付. diff --git a/docs/HANDOFF/ECR-030-engineer-to-reviewer.md b/docs/HANDOFF/ECR-030-engineer-to-reviewer.md new file mode 100644 index 0000000..591c331 --- /dev/null +++ b/docs/HANDOFF/ECR-030-engineer-to-reviewer.md @@ -0,0 +1,3 @@ +# HANDOFF — ECR-030 Engineer → Reviewer + +TestContentSafetyModerationCases PASS · Ready for Closed. diff --git a/docs/PRODUCT_SPEC/ECR-030-moderation-case.md b/docs/PRODUCT_SPEC/ECR-030-moderation-case.md new file mode 100644 index 0000000..8919f31 --- /dev/null +++ b/docs/PRODUCT_SPEC/ECR-030-moderation-case.md @@ -0,0 +1,3 @@ +# PRODUCT_SPEC — ECR-030 + +对齐 ops-moderation-case.md · Approved · Loop · L2 · ModerationCase 只读 diff --git a/docs/STATE/ECR-030.md b/docs/STATE/ECR-030.md new file mode 100644 index 0000000..9f09958 --- /dev/null +++ b/docs/STATE/ECR-030.md @@ -0,0 +1,6 @@ +# STATE — ECR-030 + +| Status | **Closed** | +| Phase | closed | +| Spec | ops-moderation-case.md | +| Updated | 2026-08-08 | diff --git a/docs/TASKS/TASK-030-ECR030.yaml b/docs/TASKS/TASK-030-ECR030.yaml new file mode 100644 index 0000000..7559a29 --- /dev/null +++ b/docs/TASKS/TASK-030-ECR030.yaml @@ -0,0 +1,12 @@ +id: TASK-030-ECR030 +ecr: ECR-030 +title: ContentSafety · ModerationCase（只读薄切片） +role: engineer +status: closed +change_level: L2 +parent: WAVE0-FROZEN +predecessor: ECR-029 +acceptance: + - Spec AC mapped + - ModerationCase read only + - No UGC / payment diff --git a/docs/TEST_REPORT/ECR-030.md b/docs/TEST_REPORT/ECR-030.md new file mode 100644 index 0000000..d761b01 --- /dev/null +++ b/docs/TEST_REPORT/ECR-030.md @@ -0,0 +1,33 @@ +# TEST_REPORT — ECR-030 ModerationCase + +Date: 2026-08-08 · Loop continuous · commit: `PENDING` + +## Commands + +```bash +cd apps/api && go test ./internal/integration/ -run TestContentSafetyModerationCases -count=1 +npm run build:admin +python3 scripts/ess-validate.py --phase review --ecr ECR-030 +python3 scripts/ess-gate-check.py --ecr ECR-030 +``` + +## Results + +| Check | Result | +|-------|--------| +| TestContentSafetyModerationCases | PASS | +| build:admin | PASS | +| ess-validate review | PASS | +| ess-gate-check | PASS | + +## AC + +| ID | Evidence | +|----|----------| +| AC-F-01 | list seed/empty ok | +| AC-F-02 | get 200 | +| AC-F-03 | 未知 id → 404 | +| AC-S-01 | 401 | +| AC-S-02 | 403 | +| AC-P-01 | list < 500ms | +| AC-O-01 | N/A 只读 | diff --git a/docs/TRACEABILITY.md b/docs/TRACEABILITY.md index 6dd489a..b94cf87 100644 --- a/docs/TRACEABILITY.md +++ b/docs/TRACEABILITY.md @@ -34,3 +34,4 @@ | ECR-027 | AICoreConfig · KnowledgeChunk | **Closed** | Spec ops-knowledge-chunk.md · BD-2026-027 · migration 000028 · TEST_REPORT · CODE_REVIEW · Loop continuous | | ECR-028 | AICoreConfig · ToolDefinition | **Closed** | Spec ops-tool-definition.md · BD-2026-028 · migration 000029 · TEST_REPORT · CODE_REVIEW · Loop continuous | | ECR-029 | ContentSafety · BlockPolicy | **Closed** | Spec ops-block-policy.md · BD-2026-029 · migration 000030 · TEST_REPORT · CODE_REVIEW · Loop continuous | +| ECR-030 | ContentSafety · ModerationCase | **Closed** | Spec ops-moderation-case.md · BD-2026-030 · migration 000031 · TEST_REPORT · CODE_REVIEW · Loop continuous | diff --git a/docs/WAVE0/LOOP_AUTHORIZATION.md b/docs/WAVE0/LOOP_AUTHORIZATION.md index 5b3713d..f5e445b 100644 --- a/docs/WAVE0/LOOP_AUTHORIZATION.md +++ b/docs/WAVE0/LOOP_AUTHORIZATION.md @@ -55,4 +55,4 @@ Human 明文：**直接用 Loop，不用人工确认。** | Done | Next | |------|------| -| ECR-013A…029 Closed | **ECR-030** ModerationCase | +| ECR-013A…030 Closed | **ECR-031** CrisisEvent | diff --git a/proto/openapi.yaml b/proto/openapi.yaml index b195602..a9f0e0f 100644 --- a/proto/openapi.yaml +++ b/proto/openapi.yaml @@ -751,6 +751,34 @@ paths: '404': description: Not found + /api/v1/admin/content-safety/cases: + get: + tags: [admin] + summary: List ModerationCase catalog + description: Requires admin.content_safety.read + responses: + '200': + description: OK + '401': + description: Unauthorized + '403': + description: Forbidden + + /api/v1/admin/content-safety/cases/{id}: + get: + tags: [admin] + summary: Get ModerationCase + parameters: + - in: path + name: id + required: true + schema: { type: string, format: uuid } + responses: + '200': + description: OK + '404': + description: Not found + /api/v1/admin/crisis/policies: get: tags: [admin]