UserStatus 迁移、DeviceAuth 拒绝非 active、admin-h5 CTA; Reviewer Closed。Human 授权 LOOP_AUTHORIZATION(免逐闸确认)。 Co-authored-by: Cursor <cursoragent@cursor.com>
1.1 KiB
1.1 KiB
ENGINEERING_SPEC — ECR-013B AccountLifecycle
权威设计:docs/BACKEND_DESIGN/BD-2026-013B-account-lifecycle.md
产品:.ai/product/feature-spec/ops-account-lifecycle.md
当前:Implemented · awaiting Reviewer。
Implement order(已执行)
- Migration:
account_state_transitions;admin.users.status.write种子;必要时 status CHECK - Service:合法边校验 · 写 status + transition + audit(同事务)
- DeviceAuth / session 解析:User.status ≠ active → 拒绝
- Admin handlers:POST status · GET transitions;挂
RequireAdminPermission - OpenAPI
- admin-h5:用户详情最小状态 CTA(依赖
can('admin.users.status.write')) - Integration:AC-F/S/O;Perf 抽样 AC-P-01
- TEST_REPORT · CODE_REVIEW · TRACEABILITY
Constraints
- 函数 ≤50 · 文件 ≤400
- Handler → Service → Repository
- 禁止 soft-delete
- 禁止改 RBAC 模型(仅 additive permission)
- 不提交密钥
Done when
ECR Acceptance + 四类 AC 映射绿 + ess-validate --phase review + boundary-rules 无回归