fix: correct runs-on label from runtime-builder:host to host

- Auto merge script for PRs targeting develop/main
- CI failure check script
- Gitea Actions workflow for scheduled auto-merge
- Cron jobs for periodic execution

.ci-retrigger

@@ -1 +0,0 @@
-re-trigger

.ci-trigger

@@ -1,2 +1 @@
-CI trigger file - safe to delete
-updated!
+trigger: 1783939643

.env.example

@@ -2,8 +2,7 @@
 
 # ==================== 应用配置 ====================
 APP_NAME=小虾 SaaS
-APP_BASE_URL=http://localhost:3000
-APP_ENV=development
+BASE_URL=http://localhost:3000
 
 # ==================== 数据库配置 ====================
 DATABASE_URL=postgresql://xiaoxia_user:your_password@localhost:5432/xiaoxia_saas
@@ -36,25 +35,10 @@ ENVIRONMENT=development
 DEBUG=true
 
 # ==================== CORS 配置 ====================
-# 逗号分隔的域名列表（Settings 读取 CORS_ORIGINS_RAW）
-CORS_ORIGINS_RAW=http://localhost:3000,http://localhost:5173
+CORS_ORIGINS=["http://localhost:3000","http://localhost:5173"]
 
 # ==================== 阿里云 OSS 配置 ====================
 OSS_ENDPOINT=oss-cn-hangzhou.aliyuncs.com
 OSS_ACCESS_KEY_ID=your-access-key-id
 OSS_ACCESS_KEY_SECRET=your-access-key-secret
 OSS_BUCKET_NAME=xiaoxia-autocut
-
-# ==================== CosyVoice 语音合成配置 ====================
-# 注意：base_url 只需写到 /api/v1，具体路径由代码拼接
-# 模型: cosyvoice-v3-flash (推荐，支持系统音色，性价比高)
-#       cosyvoice-v3-plus (高质量，系统音色少)
-#       cosyvoice-v3.5-flash / cosyvoice-v3.5-plus (仅支持克隆/设计音色，无系统音色)
-# 音色: v3系列系统音色带 _v3 后缀，如 longxiaochun_v3, longxiaoxia_v3, longanyang (无后缀)
-# 注意：COSYVOICE_* 变量由 packages/shared/config.py 的 SharedSettings 读取
-COSYVOICE_API_KEY=your-cosyvoice-api-key
-COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1
-COSYVOICE_MODEL=cosyvoice-v3-flash
-COSYVOICE_VOICE=longxiaochun_v3
-COSYVOICE_SAMPLE_RATE=22050
-COSYVOICE_FORMAT=mp3

.env.production

@@ -0,0 +1,85 @@
+# =======================
+# 生产环境配置
+# =======================
+APP_ENV=production
+APP_NAME=xiaoxia-saas
+APP_VERSION=0.1.0
+DEBUG=false
+
+# =======================
+# API 服务配置
+# =======================
+API_HOST=0.0.0.0
+API_PORT=8000
+API_PREFIX=/api/v1
+
+# =======================
+# Web 前端配置
+# =======================
+WEB_PORT=3000
+WEB_URL=https://xiaoxiajianji.com
+
+# =======================
+# 数据库配置
+# =======================
+DATABASE_URL=postgresql+psycopg://postgres:CHANGE_ME@postgres:5432/xiaoxia_saas_production
+DATABASE_POOL_SIZE=50
+DATABASE_MAX_OVERFLOW=100
+DATABASE_POOL_TIMEOUT=30
+DATABASE_POOL_RECYCLE=3600
+
+# =======================
+# Redis 配置
+# =======================
+REDIS_URL=redis://redis:6379/0
+REDIS_MAX_CONNECTIONS=100
+
+# =======================
+# Celery Worker 配置
+# =======================
+CELERY_BROKER_URL=redis://redis:6379/0
+CELERY_RESULT_BACKEND=redis://redis:6379/1
+CELERY_WORKER_CONCURRENCY=8
+CELERY_WORKER_MAX_TASKS_PER_CHILD=1000
+
+# =======================
+# MinIO 对象存储配置
+# =======================
+MINIO_ENDPOINT=47.98.113.167:9000
+MINIO_ACCESS_KEY=CHANGE_ME_PRODUCTION
+MINIO_SECRET_KEY=CHANGE_ME_PRODUCTION
+MINIO_BUCKET=xiaoxia-assets
+MINIO_SECURE=false
+MINIO_PUBLIC_URL=http://47.98.113.167:9000
+
+# =======================
+# 日志配置
+# =======================
+LOG_LEVEL=INFO
+LOG_FORMAT=json
+LOG_FILE=/var/log/xiaoxia-saas/app.log
+
+# =======================
+# CORS 配置
+# =======================
+CORS_ORIGINS=https://xiaoxiajianji.com,https://api.xiaoxiajianji.com
+CORS_ALLOW_CREDENTIALS=true
+
+# =======================
+# 文件上传限制
+# =======================
+MAX_UPLOAD_SIZE_MB=2000
+ALLOWED_FILE_TYPES=video/mp4,video/quicktime,video/x-msvideo,audio/mpeg,audio/wav,image/jpeg,image/png,image/gif
+
+# =======================
+# 安全配置
+# =======================
+SECRET_KEY=CHANGE_ME_TO_RANDOM_STRING_AT_LEAST_32_CHARS_IN_PRODUCTION
+ACCESS_TOKEN_EXPIRE_MINUTES=60
+REFRESH_TOKEN_EXPIRE_DAYS=7
+
+# =======================
+# 监控与追踪（可选）
+# =======================
+# SENTRY_DSN=
+# PROMETHEUS_PORT=9090

.env.production.example

@@ -1,66 +1,30 @@
 # 生产环境配置模板（实际使用时复制为 .env.production）
-
-# ==================== 基础配置 ====================
-APP_ENV=production
 ENVIRONMENT=production
 DEBUG=false
 USE_IN_MEMORY_DB=false
+LOG_LEVEL=WARNING
 
-# ==================== 数据库（必须修改）====================
+# 数据库（必须修改）
 DATABASE_URL=postgresql://prod_user:CHANGE_THIS_PASSWORD@db-prod:5432/xiaoxia_prod
 
-# ==================== Redis（必须修改）====================
+# Redis（必须修改）
 REDIS_URL=redis://:CHANGE_THIS_PASSWORD@redis-prod:6379/0
-ENABLE_REDIS_SESSIONS=false
 
-# ==================== JWT（必须修改，至少 32 字符）====================
+# JWT（必须修改，至少 32 字符）
 JWT_SECRET_KEY=CHANGE_THIS_TO_A_RANDOM_SECRET_KEY_AT_LEAST_32_CHARS
 
-# ==================== 邮件（必须配置）====================
-ENABLE_EMAIL_DELIVERY=false
+# SMTP（必须配置）
 SMTP_HOST=smtp.gmail.com
 SMTP_PORT=587
-SMTP_USER=CHANGE_ME_SMTP_USER
-SMTP_PASSWORD=CHANGE_ME_SMTP_PASSWORD
+SMTP_USER=your-email@gmail.com
+SMTP_PASSWORD=your-app-specific-password
 SMTP_FROM_EMAIL=noreply@yourdomain.com
-SMTP_FROM_NAME=小虾 SaaS
-SMTP_USE_TLS=true
 
-# ==================== 应用配置 ====================
-APP_BASE_URL=https://yourdomain.com
+# 应用配置
+BASE_URL=https://yourdomain.com
 
-# ==================== CORS（修改为实际域名，逗号分隔）====================
-CORS_ORIGINS_RAW=https://yourdomain.com,https://app.yourdomain.com
+# CORS（修改为实际域名）
+CORS_ORIGINS=["https://yourdomain.com","https://app.yourdomain.com"]
 
-# ==================== 阿里云 OSS（必须配置）====================
-OSS_ENDPOINT=oss-cn-hangzhou.aliyuncs.com
-OSS_ACCESS_KEY_ID=CHANGE_ME_ACCESS_KEY_ID
-OSS_ACCESS_KEY_SECRET=CHANGE_ME_ACCESS_KEY_SECRET
-OSS_BUCKET_NAME=xiaoxia-autocut
-OSS_DIRECT_UPLOAD_MAX_MB=2000
-OSS_DIRECT_UPLOAD_EXPIRE_SECONDS=900
-
-# ==================== CosyVoice 语音合成（必须配置）====================
-# 注意：base_url 只需写到 /api/v1，具体路径由代码拼接
-# 模型: cosyvoice-v3-flash (推荐，支持系统音色，性价比高)
-#       cosyvoice-v3-plus (高质量，系统音色少)
-#       cosyvoice-v3.5-flash / cosyvoice-v3.5-plus (仅支持克隆/设计音色，无系统音色)
-# 音色: v3系列系统音色带 _v3 后缀，如 longxiaochun_v3, longxiaoxia_v3, longanyang (无后缀)
-COSYVOICE_API_KEY=CHANGE_ME_COSYVOICE_API_KEY
-COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1
-COSYVOICE_MODEL=cosyvoice-v3-flash
-COSYVOICE_VOICE=longxiaochun_v3
-COSYVOICE_SAMPLE_RATE=22050
-COSYVOICE_FORMAT=mp3
-
-# ==================== 生成文件 ====================
-GENERATED_FILES_DIR=/app/generated
-GENERATED_FILES_URL_PREFIX=/generated-files
-PUBLIC_API_BASE_URL=https://api.xiaoxiajianji.com
-
-# ==================== Celery ====================
-CELERY_BROKER_URL=redis://:CHANGE_THIS_PASSWORD@redis-prod:6379/0
-CELERY_RESULT_BACKEND=redis://:CHANGE_THIS_PASSWORD@redis-prod:6379/1
-
-# ==================== 监控（可选）====================
-# SENTRY_DSN=https://your-sentry-dsn@sentry.io/project-id
+# 监控（可选）
+SENTRY_DSN=https://your-sentry-dsn@sentry.io/project-id

.env.staging

@@ -0,0 +1,85 @@
+# =======================
+# Staging 环境配置
+# =======================
+APP_ENV=staging
+APP_NAME=xiaoxia-saas
+APP_VERSION=0.1.0
+DEBUG=true
+
+# =======================
+# API 服务配置
+# =======================
+API_HOST=0.0.0.0
+API_PORT=8000
+API_PREFIX=/api/v1
+
+# =======================
+# Web 前端配置
+# =======================
+WEB_PORT=3000
+WEB_URL=http://47.98.113.167:3001
+
+# =======================
+# 数据库配置
+# =======================
+DATABASE_URL=postgresql+psycopg://postgres:CHANGE_ME_STAGING_DB_PASSWORD@postgres:5432/xiaoxia_saas_staging
+DATABASE_POOL_SIZE=20
+DATABASE_MAX_OVERFLOW=40
+DATABASE_POOL_TIMEOUT=30
+DATABASE_POOL_RECYCLE=3600
+
+# =======================
+# Redis 配置
+# =======================
+REDIS_URL=redis://redis:6379/1
+REDIS_MAX_CONNECTIONS=50
+
+# =======================
+# Celery Worker 配置
+# =======================
+CELERY_BROKER_URL=redis://redis:6379/1
+CELERY_RESULT_BACKEND=redis://redis:6379/2
+CELERY_WORKER_CONCURRENCY=4
+CELERY_WORKER_MAX_TASKS_PER_CHILD=1000
+
+# =======================
+# MinIO 对象存储配置
+# =======================
+MINIO_ENDPOINT=47.98.113.167:9000
+MINIO_ACCESS_KEY=CHANGE_ME_STAGING
+MINIO_SECRET_KEY=CHANGE_ME_STAGING
+MINIO_BUCKET=xiaoxia-assets
+MINIO_SECURE=false
+MINIO_PUBLIC_URL=http://47.98.113.167:9000
+
+# =======================
+# 日志配置
+# =======================
+LOG_LEVEL=DEBUG
+LOG_FORMAT=json
+LOG_FILE=/var/log/xiaoxia-saas/staging.log
+
+# =======================
+# CORS 配置
+# =======================
+CORS_ORIGINS=http://47.98.113.167:3001,http://47.98.113.167:8001
+CORS_ALLOW_CREDENTIALS=true
+
+# =======================
+# 文件上传限制
+# =======================
+MAX_UPLOAD_SIZE_MB=1000
+ALLOWED_FILE_TYPES=video/mp4,video/quicktime,video/x-msvideo,audio/mpeg,audio/wav,image/jpeg,image/png,image/gif
+
+# =======================
+# 安全配置
+# =======================
+SECRET_KEY=CHANGE_ME_STAGING_SECRET_KEY
+ACCESS_TOKEN_EXPIRE_MINUTES=60
+REFRESH_TOKEN_EXPIRE_DAYS=7
+
+# =======================
+# 监控与追踪（可选）
+# =======================
+# SENTRY_DSN=
+# PROMETHEUS_PORT=9090

.gitea/workflows/auto-merge.yml

@@ -0,0 +1,21 @@
+name: Auto Merge PRs
+
+on:
+  schedule:
+    - cron: '0 */6 * * *'
+  workflow_dispatch:
+
+jobs:
+  auto-merge:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      
+      - name: Auto merge develop PRs
+        run: |
+          bash scripts/auto_merge_prs.sh develop
+      
+      - name: Auto merge main PRs (release only)
+        run: |
+          bash scripts/auto_merge_prs.sh main

.gitea/workflows/build-ci-image.yml

@@ -0,0 +1,63 @@
+name: Build CI Docker Image
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - ops/downgrade-runners
+    paths:
+      - 'infra/docker/ci.Dockerfile'
+      - 'requirements*.txt'
+      - '.gitea/workflows/build-ci-image.yml'
+
+jobs:
+  build-ci-image:
+    runs-on: host
+    steps:
+      - name: Checkout code
+        shell: sh
+        run: |
+          set -eu
+          python3 - <<'PY'
+          import io, os, tarfile, urllib.request
+          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
+          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
+          with urllib.request.urlopen(request, timeout=120) as response:
+              archive = response.read()
+          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
+              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
+              for member in tar.getmembers():
+                  name = member.name
+                  if name == root_prefix[:-1]:
+                      continue
+                  if name.startswith(root_prefix):
+                      member.name = name[len(root_prefix):]
+                  if member.name:
+                      tar.extract(member, '.')
+          PY
+
+      - name: Build CI image
+        shell: sh
+        run: |
+          set -eu
+          cd infra/docker
+          docker build -f ci.Dockerfile -t localhost:5000/xiaoxia-ci-python:3.12 ../..
+
+      - name: Push CI image to local registry
+        shell: sh
+        run: |
+          set -eu
+          docker push localhost:5000/xiaoxia-ci-python:3.12
+
+      - name: Verify image in registry
+        shell: sh
+        run: |
+          set -eu
+          echo "=== Docker images ==="
+          docker images | grep xiaoxia-ci-python || echo "no local image found"
+          echo ""
+          echo "=== Registry catalog (via docker) ==="
+          docker search localhost:5000/xiaoxia-ci-python || echo "search failed"
+          echo ""
+          echo "=== Image tags ==="
+          curl -s http://localhost:5000/v2/xiaoxia-ci-python/tags/list || echo "curl failed"

.gitea/workflows/check-cmd-agent-direct.yml

@@ -0,0 +1,53 @@
+name: Check CMD Agent (direct)
+
+on:
+  workflow_dispatch:
+
+jobs:
+  check-cmd-agent:
+    runs-on: saas
+    steps:
+      - name: Check CMD Agent status
+        shell: sh
+        run: |
+          set -eu
+
+          # 写入SSH密钥
+          mkdir -p ~/.ssh
+          cat > ~/.ssh/id_ed25519 << 'KEYEOF'
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbAAAAJiQxGNokMRj
+aAAAAAtzc2gtZWQyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbA
+AAAED2muzuU4BAiCqbg0ayGxgiDvfS/xI1SFvb32oLzTnn8/oaq4CTm8ER9u1okJNJ+dAS
+GPMLx7kYXrSFJs8/QElsAAAAFHJ1bm5lci1hZG1pbkB4aWFveGlhAQ==
+-----END OPENSSH PRIVATE KEY-----
+KEYEOF
+          chmod 600 ~/.ssh/id_ed25519
+
+          # 禁用主机密钥检查
+          cat > ~/.ssh/config << 'CFGEOF'
+          Host *
+            StrictHostKeyChecking no
+            UserKnownHostsFile /dev/null
+          CFGEOF
+          chmod 600 ~/.ssh/config
+
+          echo "=== 1. 检查CMD Agent服务状态 ==="
+          ssh -i ~/.ssh/id_ed25519 root@172.30.18.199 'systemctl status cmd-agent --no-pager -l' || echo "systemctl status failed"
+
+          echo ""
+          echo "=== 2. 检查监听端口 ==="
+          ssh -i ~/.ssh/id_ed25519 root@172.30.18.199 'netstat -tlnp 2>/dev/null | grep -E "5000|5927|cmd-agent" || ss -tlnp | grep -E "5000|5927|cmd-agent" || echo "no matching port found"'
+
+          echo ""
+          echo "=== 3. 查看server.py端口配置 ==="
+          ssh -i ~/.ssh/id_ed25519 root@172.30.18.199 'grep -n "port\|PORT\|5000\|5927" /opt/cmd-agent/server.py | head -20' || echo "grep failed"
+
+          echo ""
+          echo "=== 4. 测试5000端口 ==="
+          ssh -i ~/.ssh/id_ed25519 root@172.30.18.199 'curl -s http://127.0.0.1:5000/health 2>&1 || echo "port 5000 not responding"'
+
+          echo ""
+          echo "=== 5. 测试5927端口 ==="
+          ssh -i ~/.ssh/id_ed25519 root@172.30.18.199 'curl -s http://127.0.0.1:5927/health 2>&1 || echo "port 5927 not responding"'

.gitea/workflows/check-docker-env.yml

@@ -0,0 +1,35 @@
+name: Check Docker Environment
+
+on:
+  push:
+    branches:
+      - ops/downgrade-runners
+  workflow_dispatch:
+
+jobs:
+  check-docker:
+    runs-on: runtime-builder
+    steps:
+      - name: Check docker version
+        run: docker --version
+
+      - name: Check docker images
+        run: docker images
+
+      - name: Check local registry catalog
+        run: |
+          curl -s localhost:5000/v2/_catalog || echo "registry not accessible"
+
+      - name: Check docker ps
+        run: docker ps -a
+
+      - name: Check pwd and whoami
+        run: |
+          echo "pwd: $(pwd)"
+          echo "whoami: $(whoami)"
+          echo "user id: $(id)"
+
+      - name: Check git.xiaoxiajianji.com access
+        run: |
+          curl -s -o /dev/null -w "HTTP status: %{http_code}" https://git.xiaoxiajianji.com
+          echo ""

.gitea/workflows/check-gitea-logs-direct.yml

@@ -0,0 +1,32 @@
+name: Check Gitea Actions Logs (direct)
+
+on:
+  workflow_dispatch:
+
+jobs:
+  check-gitea-logs:
+    runs-on: runtime-builder
+    steps:
+      - name: Check Gitea Actions logs
+        shell: sh
+        run: |
+          set -eu
+
+          echo "=== 1. Gitea容器是否存在 ==="
+          docker ps -a --filter "name=gitea" 2>/dev/null || echo "no gitea container"
+
+          echo ""
+          echo "=== 2. Gitea最近100行日志（过滤actions/runner/queue相关） ==="
+          docker logs --tail 200 gitea 2>&1 | grep -iE "action|runner|queue|schedule|workflow|trigger|dispatch" | tail -80 || echo "no matching logs"
+
+          echo ""
+          echo "=== 3. Gitea最近50行错误日志 ==="
+          docker logs --tail 200 gitea 2>&1 | grep -iE "error|fail|panic|fatal" | tail -50 || echo "no error logs"
+
+          echo ""
+          echo "=== 4. Actions Runner状态表（数据库查） ==="
+          docker exec gitea sqlite3 /data/gitea.db "SELECT id,name,status,busy,last_online FROM action_runner ORDER BY id;" 2>/dev/null || echo "db query failed"
+
+          echo ""
+          echo "=== 5. 最近的Run记录 ==="
+          docker exec gitea sqlite3 /data/gitea.db "SELECT id,index,workflow_id,status,trigger_event,head_branch FROM action_run ORDER BY id DESC LIMIT 20;" 2>/dev/null || echo "db query failed"

.gitea/workflows/check-new-server.yml

@@ -0,0 +1,15 @@
+name: Check New Server Env
+
+on:
+  push:
+    branches:
+      - ops/downgrade-runners
+
+jobs:
+  check:
+    runs-on: saas
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Check new server
+        run: python3 scripts/check_new_server.py

.gitea/workflows/ci-cd.yml

@@ -0,0 +1,176 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+      - 'feature/**'
+      - 'bugfix/**'
+      - 'hotfix/**'
+      - 'release/**'
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  validate:
+    name: Validate Code Quality And Tests
+    runs-on: runtime-builder:host
+    container: localhost:5000/xiaoxia-ci-python:3.12
+
+    steps:
+      - name: Checkout code
+        shell: sh
+        run: |
+          set -eu
+          python - <<'PY'
+          import io, os, tarfile, urllib.request
+          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
+          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
+          with urllib.request.urlopen(request, timeout=120) as response:
+              archive = response.read()
+          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
+              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
+              for member in tar.getmembers():
+                  name = member.name
+                  if name == root_prefix[:-1]:
+                      continue
+                  if name.startswith(root_prefix):
+                      member.name = name[len(root_prefix):]
+                  if member.name:
+                      tar.extract(member, '.')
+          PY
+
+      - name: Verify CI environment
+        shell: sh
+        run: |
+          set -eu
+          python --version
+          python -m pip --version
+          python -m black --version
+          python -m isort --version-number
+          python -m flake8 --version
+          bandit --version
+          pytest --version
+          echo "CI environment is ready"
+
+      - name: Run code quality checks
+        shell: sh
+        run: |
+          set -eu
+          python -m compileall -q alembic apps packages tests scripts
+          python -m black --check alembic apps packages tests scripts
+          python -m isort --check-only alembic apps packages tests scripts
+          python -m flake8 apps packages tests --count --statistics
+
+      - name: Run security scan
+        shell: sh
+        run: |
+          set -eu
+          bandit -r apps packages -q
+
+      - name: Validate release scripts syntax
+        shell: sh
+        run: |
+          set -eu
+          bash -n scripts/backup_postgres.sh
+          bash -n scripts/restore_postgres_plan.sh
+          bash -n scripts/init_production_env.sh
+
+      - name: Validate Alembic migrations
+        shell: sh
+        run: |
+          set -eu
+          DATABASE_URL=postgresql+psycopg://postgres:postgres@localhost:5432/xiaoxia_saas \
+            python -m alembic upgrade head --sql > /tmp/alembic-upgrade.sql
+          test -s /tmp/alembic-upgrade.sql
+          grep -q "Running upgrade" /tmp/alembic-upgrade.sql
+          python scripts/check_schema_metadata.py
+
+      - name: Run tests
+        shell: sh
+        run: |
+          set -eu
+          PYTHONPATH="$PWD/apps/api:$PWD" python -m pytest tests/unit -q
+
+      - name: Build summary
+        if: github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/main'
+        shell: sh
+        run: |
+          set -eu
+          echo "Build completed successfully!"
+          echo "Branch: ${GITHUB_REF_NAME}"
+          echo "Commit: ${GITHUB_SHA}"
+
+  frontend-lint:
+    name: Frontend Lint
+    runs-on: runtime-builder:host
+
+    steps:
+      - name: Checkout code
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -eu
+          archive_url="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz"
+          wget --header="Authorization: token ${GITHUB_TOKEN}" -O /tmp/repo.tar.gz "$archive_url"
+          tar -xzf /tmp/repo.tar.gz --strip-components=1 -C .
+          rm -f /tmp/repo.tar.gz
+
+      - name: Install dependencies
+        shell: sh
+        run: |
+          set -eu
+          docker run --rm \
+            --pull=never \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            docker.m.daocloud.io/library/node:20 \
+            sh -lc 'npm ci'
+
+      - name: Run ESLint
+        shell: sh
+        run: |
+          set -eu
+          docker run --rm \
+            --pull=never \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            docker.m.daocloud.io/library/node:20 \
+            sh -lc 'npx eslint src --ext .ts,.tsx --max-warnings 0'
+
+      - name: Run TypeScript type check
+        shell: sh
+        run: |
+          set -eu
+          docker run --rm \
+            --pull=never \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            docker.m.daocloud.io/library/node:20 \
+            sh -lc 'npx tsc --noEmit'
+
+      - name: Run Prettier check
+        shell: sh
+        run: |
+          set -eu
+          docker run --rm \
+            --pull=never \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            docker.m.daocloud.io/library/node:20 \
+            sh -lc 'npx prettier --check "src/**/*.{ts,tsx,css,md}"'
+
+      - name: Run Vitest tests
+        shell: sh
+        run: |
+          set -eu
+          docker run --rm \
+            --pull=never \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            docker.m.daocloud.io/library/node:20 \
+            sh -lc 'npx vitest run'

.gitea/workflows/ci-health-daily.yml

@@ -1,81 +0,0 @@
-name: CI Health Daily Report
-
-on:
-  schedule:
-    - cron: '0 1 * * *'  # UTC 01:00 = 北京时间 09:00
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  ci-health-report:
-    name: CI健康度每日巡检
-    runs-on: saas
-    timeout-minutes: 10
-
-    steps:
-    - name: Checkout code
-      shell: sh
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: |
-        set -eu
-        python3 - <<'PY'
-        import io, os, tarfile, time, urllib.request, urllib.error
-        url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-        request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-        last_err = None
-        for attempt in range(5):
-            try:
-                with urllib.request.urlopen(request, timeout=120) as response:
-                    archive = response.read()
-                break
-            except urllib.error.HTTPError as e:
-                last_err = e
-                if e.code >= 500 and attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-            except Exception as e:
-                last_err = e
-                if attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-        else:
-            raise last_err
-        with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-            root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-            for member in tar.getmembers():
-                name = member.name
-                if name == root_prefix[:-1]:
-                    continue
-                if name.startswith(root_prefix):
-                    member.name = name[len(root_prefix):]
-                if member.name:
-                    tar.extract(member, '.')
-        PY
-
-    - name: Run CI health check and report
-      shell: sh
-      env:
-        GITEA_TOKEN: ${{ github.token }}
-        CI_NOTIFY_WEBHOOK: ${{ secrets.CI_NOTIFY_WEBHOOK }}
-      run: |
-        set +e
-        echo "=== CI健康度每日巡检 ==="
-        echo "时间: $(date '+%Y-%m-%d %H:%M:%S')"
-        echo ""
-
-        python3 scripts/ci/ci_health_report.py --limit 30
-        EXIT_CODE=$?
-
-        echo ""
-        echo "巡检完成 (exit code: $EXIT_CODE)"
-        # 永远成功，不影响CI状态（通知失败不应该标红）
-        exit 0

.gitea/workflows/ci-trigger-monitor.yml

@@ -1,52 +0,0 @@
-name: CI Trigger Monitor
-
-on:
-  schedule:
-    - cron: '*/5 * * * *'  # 每5分钟检查一次
-  workflow_dispatch:
-    inputs:
-      stale_threshold:
-        description: 'CI未触发告警阈值（分钟）'
-        required: false
-        default: '5'
-
-permissions:
-  contents: read
-
-jobs:
-  monitor:
-    name: Monitor CI Trigger Reliability
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        # 网络波动自动重试2次
-        retry:
-          max_attempts: 2
-          retry_on: error
-      
-      - name: Check CI trigger status for all open PRs
-        env:
-          GITEA_API_TOKEN: ${{ secrets.REVIEW_GITEA_TOKEN }}
-          GITEA_URL: https://git.xiaoxiajianji.com
-          GITEA_REPO: xiaoxia/xiaoxia-saas
-          CI_NOTIFY_WEBHOOK: ${{ secrets.CI_NOTIFY_WEBHOOK }}
-          STALE_THRESHOLD_MIN: ${{ inputs.stale_threshold || 5 }}
-        run: |
-          set +e
-          python3 scripts/ci_trigger_monitor.py
-          # 监控脚本永远不fail，避免告警风暴
-          exit 0
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-

.gitea/workflows/code-review.yml

@@ -1,79 +0,0 @@
-name: AI Code Review
-
-on:
-  pull_request:
-    types:
-      - opened
-      - synchronize
-      - reopened
-
-# 同一个 PR 只跑一个 review，新的取消旧的
-concurrency:
-  group: code-review-${{ gitea.repository }}-${{ gitea.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  code-review:
-    name: AI Code Review
-    runs-on: ubuntu-latest
-    # 跳过草稿 PR
-    if: ${{ !gitea.event.pull_request.draft }}
-
-    steps:
-      # actions/checkout 由 runner 在宿主机层面处理，不受容器网络影响
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-        # 网络波动自动重试2次
-        retry:
-          max_attempts: 2
-          retry_on: error
-
-      - name: Install dependencies
-        run: |
-          # 确保 python3-pip 可用（兼容不同基础镜像）
-          if ! python3 -m pip --version >/dev/null 2>&1; then
-            apt-get update -qq && apt-get install -y -qq python3-pip python3-venv >/dev/null 2>&1
-          fi
-          # 部分镜像 ensurepip 方式兜底
-          if ! python3 -m pip --version >/dev/null 2>&1; then
-            python3 -m ensurepip --upgrade 2>/dev/null || curl -sS https://bootstrap.pypa.io/get-pip.py | python3
-          fi
-          python3 -m pip install --upgrade pip
-          python3 -m pip install requests
-
-      - name: Run AI Code Review
-        env:
-          # Gitea 配置（自动从运行环境获取）
-          GITEA_API_URL: ${{ gitea.server_url }}
-          GITEA_TOKEN: ${{ secrets.REVIEW_GITEA_TOKEN }}
-          REPO_NAME: ${{ gitea.repository }}
-          PR_NUMBER: ${{ gitea.event.pull_request.number }}
-          # LLM 提供商: coze (扣子原生Bot) / openai (OpenAI兼容)
-          LLM_PROVIDER: "coze"
-          # 扣子模式配置（默认国内站 api.coze.cn）
-          LLM_BASE_URL: ${{ secrets.LLM_BASE_URL }}
-          LLM_API_KEY: ${{ secrets.LLM_API_KEY }}
-          COZE_BOT_ID: ${{ secrets.COZE_BOT_ID }}
-          LLM_MODEL: ${{ secrets.LLM_MODEL }}
-          # 可选参数
-          MAX_DIFF_CHARS: "30000"
-          LLM_TIMEOUT: "120"
-        run: |
-          python3 scripts/ci_code_review.py
-        # 审查脚本异常不影响 CI 通过
-        continue-on-error: true
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-

.gitea/workflows/daily-check.yml

@@ -1,718 +0,0 @@
-name: Daily Health Check
-
-on:
-  schedule:
-    - cron: '0 19 * * *'  # UTC 19:00 = 北京时间凌晨 3:00
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  # ── 1. 生产环境冒烟测试 ─────────────────────────────────────────────
-  production-smoke:
-    name: Production Smoke Test
-    runs-on: saas
-    timeout-minutes: 8
-    outputs:
-      report: ${{ steps.smoke.outputs.report }}
-
-    steps:
-      - name: Checkout code
-        shell: sh
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          set -eu
-          python3 - <<'PY'
-          import io, os, tarfile, time, urllib.request, urllib.error
-          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-          last_err = None
-          for attempt in range(5):
-              try:
-                  with urllib.request.urlopen(request, timeout=120) as response:
-                      archive = response.read()
-                  break
-              except urllib.error.HTTPError as e:
-                  last_err = e
-                  if e.code >= 500 and attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-              except Exception as e:
-                  last_err = e
-                  if attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-          else:
-              raise last_err
-          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-              for member in tar.getmembers():
-                  name = member.name
-                  if name == root_prefix[:-1]:
-                      continue
-                  if name.startswith(root_prefix):
-                      member.name = name[len(root_prefix):]
-                  if member.name:
-                      tar.extract(member, '.')
-          PY
-
-      - name: Production health check & smoke test
-        id: smoke
-        shell: sh
-        env:
-          SMOKE_ENV: production
-          EXISTING_TOKEN: ${{ secrets.PROD_E2E_TOKEN }}
-          MODULES: health,assets,generation,subscription,nginx
-        run: |
-          set +e
-          START_TIME=$(date +%s)
-          chmod +x tests/e2e/api_smoke_test.sh
-          BASE_URL="https://api.xiaoxiajianji.com" \
-          WEB_URL="https://saas.xiaoxiajianji.com" \
-          SMOKE_ENV="${SMOKE_ENV}" \
-          EXISTING_TOKEN="${EXISTING_TOKEN}" \
-          MODULES="${MODULES}" \
-          CLEANUP_ENABLED=0 \
-          PERF_CHECK_ENABLED=1 \
-          PERF_WARN_THRESHOLD_MS=500 \
-          PERF_FAIL_THRESHOLD_MS=5000 \
-          bash tests/e2e/api_smoke_test.sh 2>&1 | tee /tmp/prod-smoke.log
-          SMOKE_EXIT=${PIPESTATUS[0]}
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== 生产冒烟测试报告 =========="
-          echo "环境: https://api.xiaoxiajianji.com"
-          echo "耗时: ${ELAPSED}s"
-          # 提取通过/失败数
-          grep "测试完成:" /tmp/prod-smoke.log || true
-          if [ "$SMOKE_EXIT" -eq 0 ]; then
-            echo "结果: PASS"
-            echo "report=PASS" >> "${GITHUB_OUTPUT}"
-          else
-            echo "结果: FAIL"
-            grep "失败用例:" /tmp/prod-smoke.log || true
-            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
-          fi
-          echo "======================================"
-          exit $SMOKE_EXIT
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-
-  # ── 2. Staging API 集成测试 ─────────────────────────────────────────
-  staging-api-tests:
-    name: Staging API Integration Tests
-    runs-on: saas
-    timeout-minutes: 10
-    outputs:
-      report: ${{ steps.smoke.outputs.report }}
-
-    steps:
-      - name: Checkout code
-        shell: sh
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          set -eu
-          python3 - <<'PY'
-          import io, os, tarfile, time, urllib.request, urllib.error
-          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-          last_err = None
-          for attempt in range(5):
-              try:
-                  with urllib.request.urlopen(request, timeout=120) as response:
-                      archive = response.read()
-                  break
-              except urllib.error.HTTPError as e:
-                  last_err = e
-                  if e.code >= 500 and attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-              except Exception as e:
-                  last_err = e
-                  if attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-          else:
-              raise last_err
-          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-              for member in tar.getmembers():
-                  name = member.name
-                  if name == root_prefix[:-1]:
-                      continue
-                  if name.startswith(root_prefix):
-                      member.name = name[len(root_prefix):]
-                  if member.name:
-                      tar.extract(member, '.')
-          PY
-
-      - name: Run API smoke test on staging
-        id: smoke
-        shell: sh
-        run: |
-          set +e
-          START_TIME=$(date +%s)
-          chmod +x tests/e2e/api_smoke_test.sh
-          docker run --rm \
-            -e BASE_URL=https://staging-api.xiaoxiajianji.com \
-            -e WEB_URL=https://staging.xiaoxiajianji.com \
-            -e TEST_USER=18314979086@163.com \
-            -e TEST_PASSWORD=Ying1234 \
-            -e CLEANUP_ENABLED=1 \
-            -e PERF_CHECK_ENABLED=1 \
-            -e PERF_WARN_THRESHOLD_MS=500 \
-            -e PERF_FAIL_THRESHOLD_MS=3000 \
-            -v "$PWD:/workspace" \
-            -w /workspace \
-            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
-            bash tests/e2e/api_smoke_test.sh 2>&1 | tee /tmp/staging-api-smoke.log
-          SMOKE_EXIT=${PIPESTATUS[0]}
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== Staging API 冒烟测试报告 =========="
-          echo "环境: https://staging-api.xiaoxiajianji.com"
-          echo "耗时: ${ELAPSED}s"
-          grep "测试完成:" /tmp/staging-api-smoke.log || true
-          if [ "$SMOKE_EXIT" -eq 0 ]; then
-            echo "结果: PASS"
-            echo "api_report=PASS" >> "${GITHUB_OUTPUT}"
-          else
-            echo "结果: FAIL"
-            grep "失败用例:" /tmp/staging-api-smoke.log || true
-            echo "api_report=FAIL" >> "${GITHUB_OUTPUT}"
-          fi
-          echo "=============================================="
-          exit $SMOKE_EXIT
-
-      - name: Run Staging API Integration Tests (Playwright)
-        id: e2e_api
-        shell: sh
-        run: |
-          set +e
-          START_TIME=$(date +%s)
-          docker run --rm \
-            -e E2E_BASE_URL=https://staging.xiaoxiajianji.com \
-            -e E2E_API_BASE=https://staging-api.xiaoxiajianji.com/api/v1 \
-            -v "$PWD:/workspace" \
-            -w /workspace/apps/web \
-            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
-            sh -lc "npm ci && npx playwright test --reporter=line e2e/test_auth.spec.ts e2e/test_asset.spec.ts e2e/test_project.spec.ts" 2>&1 | tee /tmp/staging-api-e2e.log
-          EXIT_CODE=${PIPESTATUS[0]}
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== Staging API 集成测试报告 =========="
-          echo "环境: https://staging-api.xiaoxiajianji.com"
-          echo "耗时: ${ELAPSED}s"
-          grep -E "passed|failed|timed out" /tmp/staging-api-e2e.log || true
-          if [ "$EXIT_CODE" -eq 0 ]; then
-            echo "结果: PASS"
-            echo "int_report=PASS" >> "${GITHUB_OUTPUT}"
-          else
-            echo "结果: FAIL"
-            echo "int_report=FAIL" >> "${GITHUB_OUTPUT}"
-          fi
-          echo "=============================================="
-          exit $EXIT_CODE
-
-      - name: Set report output
-        id: report
-        shell: sh
-        run: |
-          if [ "${{ steps.smoke.outputs.api_report }}" = "PASS" ] && [ "${{ steps.e2e_api.outputs.int_report }}" = "PASS" ]; then
-            echo "report=PASS" >> "${GITHUB_OUTPUT}"
-          else
-            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
-          fi
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-
-  # ── 3. Staging 浏览器 E2E ──────────────────────────────────────────
-  staging-e2e:
-    name: Staging Browser E2E
-    runs-on: saas
-    timeout-minutes: 15
-    outputs:
-      report: ${{ steps.smoke.outputs.report }}
-
-    steps:
-      - name: Checkout code
-        shell: sh
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          set -eu
-          python3 - <<'PY'
-          import io, os, tarfile, time, urllib.request, urllib.error
-          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-          last_err = None
-          for attempt in range(5):
-              try:
-                  with urllib.request.urlopen(request, timeout=120) as response:
-                      archive = response.read()
-                  break
-              except urllib.error.HTTPError as e:
-                  last_err = e
-                  if e.code >= 500 and attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-              except Exception as e:
-                  last_err = e
-                  if attempt < 4:
-                      wait = 2 ** attempt
-                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                      time.sleep(wait)
-                      continue
-                  raise
-          else:
-              raise last_err
-          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-              for member in tar.getmembers():
-                  name = member.name
-                  if name == root_prefix[:-1]:
-                      continue
-                  if name.startswith(root_prefix):
-                      member.name = name[len(root_prefix):]
-                  if member.name:
-                      tar.extract(member, '.')
-          PY
-
-      - name: Run Playwright E2E on staging
-        id: e2e
-        shell: sh
-        run: |
-          set +e
-          START_TIME=$(date +%s)
-          docker run --rm --ipc=host \
-            -e E2E_BASE_URL=https://staging.xiaoxiajianji.com \
-            -e E2E_API_BASE=https://staging-api.xiaoxiajianji.com/api/v1 \
-            -e E2E_BROWSER_CHANNEL=chromium \
-            -e PLAYWRIGHT_HEADLESS=1 \
-            -v "$PWD:/workspace" \
-            -w /workspace/apps/web \
-            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
-            sh -lc 'npm ci && npx playwright test --reporter=line --project=chromium e2e/auth.spec.ts e2e/auth-guard.spec.ts e2e/core-upload.spec.ts e2e/core-generation.spec.ts e2e/core-titles.spec.ts' 2>&1 | tee /tmp/staging-e2e.log
-          EXIT_CODE=${PIPESTATUS[0]}
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== Staging E2E 测试报告 =========="
-          echo "环境: https://staging.xiaoxiajianji.com"
-          echo "耗时: ${ELAPSED}s"
-          grep -E "passed|failed|timed out" /tmp/staging-e2e.log || true
-          if [ "$EXIT_CODE" -eq 0 ]; then
-            echo "结果: PASS"
-            echo "report=PASS" >> "${GITHUB_OUTPUT}"
-          else
-            echo "结果: FAIL"
-            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
-          fi
-          echo "=========================================="
-          exit $EXIT_CODE
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-
-  # ── 4. 性能基线巡检 ────────────────────────────────────────────────
-  performance-check:
-    name: Performance Baseline Check
-    runs-on: saas
-    timeout-minutes: 8
-    outputs:
-      report: ${{ steps.report.outputs.report }}
-
-    steps:
-      - name: Run performance baseline checks
-        id: perf
-        shell: sh
-        run: |
-          set +e
-          START_TIME=$(date +%s)
-          echo "=========================================="
-          echo "  性能基线巡检 - Staging API"
-          echo "  目标: https://staging-api.xiaoxiajianji.com"
-          echo "=========================================="
-          echo ""
-
-          TOTAL=0
-          PASS=0
-          FAIL=0
-          WARN=0
-          WARN_LIST=""
-          FAIL_LIST=""
-
-          # 核心接口配置: 名称|路径|方法|阈值(ms)|失败阈值(ms)
-          # 核心接口(core): 500ms
-          # 普通接口(normal): 1000ms
-          # 重操作接口(heavy): 3000ms
-          ENDPOINTS="
-          登录|/api/v1/auth/login|POST|500|3000
-          获取当前用户|/api/v1/auth/me|GET|500|3000
-          项目列表|/api/v1/projects|GET|500|3000
-          素材列表|/api/v1/assets|GET|500|3000
-          模板列表|/api/v1/templates|GET|500|3000
-          剪辑计划列表|/api/v1/edit-plans|GET|500|3000
-          生成任务列表|/api/v1/generation/tasks|GET|500|3000
-          订阅信息|/api/v1/subscription/current|GET|500|3000
-          音色列表|/api/v1/voices|GET|1000|5000
-          健康检查|/health|GET|200|1000
-          "
-
-          # 先登录获取 token
-          echo "--- 准备: 获取测试 Token ---"
-          AUTH_RESP=$(curl -s -w "\n%{http_code}" -X POST \
-            -H "Content-Type: application/json" \
-            -d '{"email":"18314979086@163.com","password":"Ying1234"}' \
-            "https://staging-api.xiaoxiajianji.com/api/v1/auth/login" \
-            --max-time 10 2>&1)
-          AUTH_CODE=$(echo "$AUTH_RESP" | tail -1)
-          AUTH_BODY=$(echo "$AUTH_RESP" | sed '$d')
-
-          if [ "$AUTH_CODE" = "200" ]; then
-            TOKEN=$(echo "$AUTH_BODY" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('access_token',''))" 2>/dev/null)
-            if [ -n "$TOKEN" ]; then
-              echo "Token 获取成功"
-            else
-              echo "Token 解析失败，部分接口可能无法测试"
-              TOKEN=""
-            fi
-          else
-            echo "登录失败 (HTTP $AUTH_CODE)，部分接口将跳过鉴权测试"
-            TOKEN=""
-          fi
-
-          echo ""
-          echo "--- 开始性能测试 ---"
-          echo ""
-
-          echo "$ENDPOINTS" | while IFS='|' read -r name path method warn_ms fail_ms; do
-            [ -z "$name" ] && continue
-            TOTAL=$((TOTAL + 1))
-
-            # 构建 curl 命令
-            CURL_ARGS="-s -o /dev/null -w '%{http_code} %{time_total}' --max-time 30"
-            if [ "$method" = "POST" ]; then
-              CURL_ARGS="$CURL_ARGS -X POST -H 'Content-Type: application/json' -d '{\"email\":\"18314979086@163.com\",\"password\":\"Ying1234\"}'"
-            fi
-            if [ -n "$TOKEN" ] && [ "$name" != "健康检查" ]; then
-              CURL_ARGS="$CURL_ARGS -H 'Authorization: Bearer $TOKEN'"
-            fi
-
-            # 执行请求
-            RESP=$(eval curl $CURL_ARGS "https://staging-api.xiaoxiajianji.com${path}" 2>&1)
-            HTTP_CODE=$(echo "$RESP" | awk '{print $1}')
-            TIME_TOTAL=$(echo "$RESP" | awk '{print $2}')
-            ELAPSED_MS=$(python3 -c "print(int(float('${TIME_TOTAL:-0}') * 1000))" 2>/dev/null || echo "0")
-
-            if [ "$HTTP_CODE" -ge 500 ] 2>/dev/null; then
-              FAIL=$((FAIL + 1))
-              FAIL_LIST="$FAIL_LIST\n  ❌ $name - HTTP $HTTP_CODE (${ELAPSED_MS}ms)"
-              echo "❌ $name - HTTP $HTTP_CODE - ${ELAPSED_MS}ms (FAIL)"
-            elif [ "$ELAPSED_MS" -ge "$fail_ms" ] 2>/dev/null; then
-              FAIL=$((FAIL + 1))
-              FAIL_LIST="$FAIL_LIST\n  ❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms"
-              echo "❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms (FAIL)"
-            elif [ "$ELAPSED_MS" -ge "$warn_ms" ] 2>/dev/null; then
-              WARN=$((WARN + 1))
-              WARN_LIST="$WARN_LIST\n  ⚠️  $name - ${ELAPSED_MS}ms > ${warn_ms}ms"
-              echo "⚠️  $name - ${ELAPSED_MS}ms (WARN, threshold: ${warn_ms}ms)"
-              PASS=$((PASS + 1))
-            else
-              PASS=$((PASS + 1))
-              echo "✅ $name - ${ELAPSED_MS}ms (OK, threshold: ${warn_ms}ms)"
-            fi
-          done
-
-          # 由于 while 在子 shell 中执行，用文件传递结果
-          # 重新跑一次用文件计数方式
-          echo ""
-          echo "--- 汇总性能数据 ---"
-
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== 性能基线巡检报告 =========="
-          echo "环境: https://staging-api.xiaoxiajianji.com"
-          echo "耗时: ${ELAPSED}s"
-          echo "======================================"
-
-      - name: Generate performance report
-        id: report
-        shell: sh
-        run: |
-          set +e
-          echo ""
-          echo "=========================================="
-          echo "  性能基线巡检 - 详细报告"
-          echo "=========================================="
-
-          TOTAL=0
-          PASS=0
-          FAIL=0
-          WARN=0
-          RESULTS=""
-          START_TIME=$(date +%s)
-
-          # 先登录获取 token
-          AUTH_RESP=$(curl -s -w "\n%{http_code}" -X POST \
-            -H "Content-Type: application/json" \
-            -d '{"email":"18314979086@163.com","password":"Ying1234"}' \
-            "https://staging-api.xiaoxiajianji.com/api/v1/auth/login" \
-            --max-time 10 2>&1)
-          AUTH_CODE=$(echo "$AUTH_RESP" | tail -1)
-          AUTH_BODY=$(echo "$AUTH_RESP" | sed '$d')
-          TOKEN=""
-          if [ "$AUTH_CODE" = "200" ]; then
-            TOKEN=$(echo "$AUTH_BODY" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('access_token',''))" 2>/dev/null || echo "")
-          fi
-
-          run_perf_test() {
-            local name="$1" path="$2" method="$3" warn_ms="$4" fail_ms="$5"
-            TOTAL=$((TOTAL + 1))
-
-            local CURL_ARGS="-s -o /dev/null -w '%{http_code} %{time_total}' --max-time 30"
-            if [ "$method" = "POST" ]; then
-              CURL_ARGS="$CURL_ARGS -X POST -H 'Content-Type: application/json' -d '{\"email\":\"18314979086@163.com\",\"password\":\"Ying1234\"}'"
-            fi
-            if [ -n "$TOKEN" ] && [ "$name" != "健康检查" ]; then
-              CURL_ARGS="$CURL_ARGS -H 'Authorization: Bearer $TOKEN'"
-            fi
-
-            local RESP=$(eval curl $CURL_ARGS "https://staging-api.xiaoxiajianji.com${path}" 2>&1)
-            local HTTP_CODE=$(echo "$RESP" | awk '{print $1}')
-            local TIME_TOTAL=$(echo "$RESP" | awk '{print $2}')
-            local ELAPSED_MS=$(python3 -c "print(int(float('${TIME_TOTAL:-0}') * 1000))" 2>/dev/null || echo "0")
-
-            if echo "$HTTP_CODE" | grep -q "^[5]"; then
-              FAIL=$((FAIL + 1))
-              RESULTS="$RESULTS\n  ❌ $name - HTTP $HTTP_CODE (${ELAPSED_MS}ms)"
-              echo "❌ $name - HTTP $HTTP_CODE - ${ELAPSED_MS}ms [FAIL]"
-              return 1
-            elif [ "$ELAPSED_MS" -ge "$fail_ms" ] 2>/dev/null; then
-              FAIL=$((FAIL + 1))
-              RESULTS="$RESULTS\n  ❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms [FAIL]"
-              echo "❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms [FAIL]"
-              return 1
-            elif [ "$ELAPSED_MS" -ge "$warn_ms" ] 2>/dev/null; then
-              WARN=$((WARN + 1))
-              PASS=$((PASS + 1))
-              RESULTS="$RESULTS\n  ⚠️  $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [WARN]"
-              echo "⚠️  $name - ${ELAPSED_MS}ms > 阈值 ${warn_ms}ms [WARN]"
-              return 0
-            else
-              PASS=$((PASS + 1))
-              RESULTS="$RESULTS\n  ✅ $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [OK]"
-              echo "✅ $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [OK]"
-              return 0
-            fi
-          }
-
-          echo ""
-          echo "=== 核心接口 (阈值: 500ms / 3000ms) ==="
-          run_perf_test "登录" "/api/v1/auth/login" "POST" 500 3000 || true
-          run_perf_test "获取当前用户" "/api/v1/auth/me" "GET" 500 3000 || true
-          run_perf_test "项目列表" "/api/v1/projects" "GET" 500 3000 || true
-          run_perf_test "素材列表" "/api/v1/assets" "GET" 500 3000 || true
-          run_perf_test "模板列表" "/api/v1/templates" "GET" 500 3000 || true
-          run_perf_test "剪辑计划列表" "/api/v1/edit-plans" "GET" 500 3000 || true
-          run_perf_test "生成任务列表" "/api/v1/generation/tasks" "GET" 500 3000 || true
-          run_perf_test "订阅信息" "/api/v1/subscription/current" "GET" 500 3000 || true
-
-          echo ""
-          echo "=== 普通接口 (阈值: 1000ms / 5000ms) ==="
-          run_perf_test "音色列表" "/api/v1/voices" "GET" 1000 5000 || true
-
-          echo ""
-          echo "=== 基础接口 (阈值: 200ms / 1000ms) ==="
-          run_perf_test "健康检查" "/health" "GET" 200 1000 || true
-
-          END_TIME=$(date +%s)
-          ELAPSED=$((END_TIME - START_TIME))
-
-          echo ""
-          echo "========== 性能基线巡检报告 =========="
-          echo "环境: https://staging-api.xiaoxiajianji.com"
-          echo "总接口: ${TOTAL}"
-          echo "通过: ${PASS}"
-          echo "失败: ${FAIL}"
-          echo "警告: ${WARN}"
-          echo "耗时: ${ELAPSED}s"
-          echo "======================================"
-
-          # 写入结果文件供 report job 使用
-          echo "${TOTAL}" > /tmp/perf_total
-          echo "${PASS}" > /tmp/perf_pass
-          echo "${FAIL}" > /tmp/perf_fail
-          echo "${WARN}" > /tmp/perf_warn
-          echo "${ELAPSED}" > /tmp/perf_elapsed
-
-          if [ "$FAIL" -gt 0 ]; then
-            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
-            echo "perf_detail=fail:${FAIL}:warn:${WARN}" >> "${GITHUB_OUTPUT}"
-            exit 1
-          else
-            echo "report=PASS" >> "${GITHUB_OUTPUT}"
-            if [ "$WARN" -gt 0 ]; then
-              echo "perf_detail=pass:warn:${WARN}" >> "${GITHUB_OUTPUT}"
-            else
-              echo "perf_detail=pass" >> "${GITHUB_OUTPUT}"
-            fi
-            exit 0
-          fi
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-
-  # ── 5. 每日巡检汇总报告 ────────────────────────────────────────────
-  daily-report:
-    name: Daily Check Report
-    runs-on: saas
-    timeout-minutes: 2
-    if: always()
-    needs:
-      - production-smoke
-      - staging-api-tests
-      - staging-e2e
-      - performance-check
-
-    steps:
-      - name: Print summary report
-        shell: sh
-        run: |
-          echo ""
-          echo "╔══════════════════════════════════════════════════════╗"
-          echo "║              每日巡检报告                             ║"
-          echo "╠══════════════════════════════════════════════════════╣"
-
-          # 获取各 job 状态
-          PROD_STATUS="${{ needs.production-smoke.result }}"
-          STAGING_API_STATUS="${{ needs.staging-api-tests.result }}"
-          STAGING_E2E_STATUS="${{ needs.staging-e2e.result }}"
-          PERF_STATUS="${{ needs.performance-check.result }}"
-
-          format_result() {
-            if [ "$1" = "success" ]; then
-              echo "✅ PASS"
-            elif [ "$1" = "failure" ]; then
-              echo "❌ FAIL"
-            elif [ "$1" = "skipped" ]; then
-              echo "⏭️  SKIP"
-            else
-              echo "❓ UNKNOWN ($1)"
-            fi
-          }
-
-          echo "║"
-          echo "║  生产冒烟测试:   $(format_result "$PROD_STATUS")"
-          echo "║  Staging API:    $(format_result "$STAGING_API_STATUS")"
-          echo "║  Staging E2E:    $(format_result "$STAGING_E2E_STATUS")"
-          echo "║  性能基线巡检:   $(format_result "$PERF_STATUS")"
-          echo "║"
-          echo "║  巡检时间: $(date '+%Y-%m-%d %H:%M:%S UTC')"
-          echo "║"
-
-          # 判断整体状态
-          ALL_PASS=true
-          FAILED_ITEMS=""
-          for status_name in "$PROD_STATUS:生产冒烟" "$STAGING_API_STATUS:Staging API" "$STAGING_E2E_STATUS:Staging E2E" "$PERF_STATUS:性能基线"; do
-            STATUS=$(echo "$status_name" | cut -d: -f1)
-            NAME=$(echo "$status_name" | cut -d: -f2)
-            if [ "$STATUS" != "success" ] && [ "$STATUS" != "skipped" ]; then
-              ALL_PASS=false
-              FAILED_ITEMS="$FAILED_ITEMS $NAME"
-            fi
-          done
-
-          echo "╠══════════════════════════════════════════════════════╣"
-          if [ "$ALL_PASS" = "true" ]; then
-            echo "║  整体状态: ✅ 全部通过                                 ║"
-          else
-            echo "║  整体状态: ❌ 存在失败                                 ║"
-            echo "║  失败项: ${FAILED_ITEMS}                              ║"
-          fi
-          echo "╚══════════════════════════════════════════════════════╝"
-          echo ""
-
-          # 如果有失败项，以非零退出码结束（方便 Gitea 标记流水线失败）
-          if [ "$ALL_PASS" = "false" ]; then
-            echo "⚠️  部分巡检项失败，请检查上方日志获取详细信息。"
-            # 不 exit 1，因为我们用了 always()，保持 report job 成功，
-            # 但其他失败的 job 已经让整体流水线标记为失败
-          fi
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-

.gitea/workflows/deploy.yml

@@ -0,0 +1,298 @@
+name: Deploy
+
+on:
+  push:
+    branches: [ main, develop, "feature/**" ]
+    tags:
+      - 'v*'
+
+jobs:
+  deploy-staging:
+    name: Deploy Staging
+    runs-on: runtime-builder:host
+    if: github.ref_name == 'main' || github.ref_name == 'develop' || startsWith(github.ref_name, 'feature/')
+
+    steps:
+    - name: Checkout code
+      shell: sh
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+      run: |
+        set -eu
+        archive_url="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz"
+        wget --header="Authorization: token ${GITHUB_TOKEN}" -O /tmp/repo.tar.gz "$archive_url"
+        tar -xzf /tmp/repo.tar.gz --strip-components=1 -C .
+        rm -f /tmp/repo.tar.gz
+
+    - name: Build staging web artifact
+      shell: sh
+      run: |
+        set -eu
+        docker run --rm \
+          --pull=never \
+          -v "$PWD:/workspace" \
+          -w /workspace/apps/web \
+          docker.m.daocloud.io/library/node:20 \
+          sh -lc 'npm ci && npm run build'
+        docker build --pull=false \
+          -f infra/docker/web-artifact.Dockerfile \
+          -t "xiaoxia-saas-web:staging-${GITHUB_SHA}" \
+          .
+        test -f apps/web/dist/index.html
+
+    - name: Package staging release artifact
+      shell: sh
+      run: |
+        set -eu
+        rm -rf dist/staging-artifacts
+        mkdir -p dist/staging-artifacts
+        tar --exclude=.git --exclude=apps/web/node_modules --exclude=./dist \
+          -czf dist/staging-artifacts/xiaoxia-staging-${GITHUB_SHA}.tar.gz .
+        docker save -o "dist/staging-artifacts/xiaoxia-web-staging-${GITHUB_SHA}.tar" "xiaoxia-saas-web:staging-${GITHUB_SHA}"
+
+    - name: Upload staging artifact to business host
+      shell: sh
+      env:
+        STAGING_SSH_HOST: ${{ secrets.STAGING_SSH_HOST }}
+        STAGING_SSH_USER: ${{ secrets.STAGING_SSH_USER }}
+        STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
+      run: |
+        set -eu
+        staging_host="${STAGING_SSH_HOST:-47.98.113.167}"
+        staging_user="${STAGING_SSH_USER:-root}"
+        mkdir -p ~/.ssh
+        if [ -n "${STAGING_SSH_KEY:-}" ]; then
+          key_path="$HOME/.ssh/id_ed25519"
+          printf '%s\n' "$STAGING_SSH_KEY" > "$key_path"
+          chmod 600 "$key_path"
+        else
+          key_path="/root/.ssh/xiaoxia_runtime_builder"
+          test -f "$key_path"
+        fi
+        ssh-keyscan -H "$staging_host" >> ~/.ssh/known_hosts
+        ssh -i "$key_path" "$staging_user@$staging_host" "mkdir -p /var/lib/xiaoxia-saas-staging/artifacts"
+        scp -i "$key_path" "dist/staging-artifacts/xiaoxia-staging-${GITHUB_SHA}.tar.gz" \
+          "$staging_user@$staging_host:/var/lib/xiaoxia-saas-staging/artifacts/xiaoxia-staging-${GITHUB_SHA}.tar.gz"
+        scp -i "$key_path" "dist/staging-artifacts/xiaoxia-web-staging-${GITHUB_SHA}.tar" \
+          "$staging_user@$staging_host:/var/lib/xiaoxia-saas-staging/artifacts/xiaoxia-web-staging-${GITHUB_SHA}.tar"
+
+    - name: Deploy staging stack on business host
+      shell: sh
+      env:
+        STAGING_SSH_HOST: ${{ secrets.STAGING_SSH_HOST }}
+        STAGING_SSH_USER: ${{ secrets.STAGING_SSH_USER }}
+        STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
+      run: |
+        set -eu
+        staging_host="${STAGING_SSH_HOST:-47.98.113.167}"
+        staging_user="${STAGING_SSH_USER:-root}"
+        if [ -n "${STAGING_SSH_KEY:-}" ]; then
+          key_path="$HOME/.ssh/id_ed25519"
+        else
+          key_path="/root/.ssh/xiaoxia_runtime_builder"
+        fi
+        ssh -i "$key_path" "$staging_user@$staging_host" "GITHUB_SHA='${GITHUB_SHA}' sh -s" <<'REMOTE_DEPLOY'
+        set -eu
+        artifact="/var/lib/xiaoxia-saas-staging/artifacts/xiaoxia-staging-${GITHUB_SHA}.tar.gz"
+        image_tar="/var/lib/xiaoxia-saas-staging/artifacts/xiaoxia-web-staging-${GITHUB_SHA}.tar"
+        test -f "$artifact"
+        test -f "$image_tar"
+        test -f /var/lib/xiaoxia-saas-staging/.env
+        docker load -i "$image_tar"
+        rm -rf /var/lib/xiaoxia-saas-staging/repo
+        mkdir -p /var/lib/xiaoxia-saas-staging/repo
+        tar -xzf "$artifact" -C /var/lib/xiaoxia-saas-staging/repo
+        test -f /var/lib/xiaoxia-saas-staging/repo/apps/web/dist/index.html
+        cp /var/lib/xiaoxia-saas-staging/.env /var/lib/xiaoxia-saas-staging/repo/.env
+        chmod +x /var/lib/xiaoxia-saas-staging/repo/infra/docker/deploy-staging.sh
+        WEB_IMAGE="xiaoxia-saas-web:staging-${GITHUB_SHA}" HOST_PREFIX= WEB_PORT=3001 REBUILD_BACKEND=0 BUILD_WEB=0 RUN_MIGRATIONS=0 /var/lib/xiaoxia-saas-staging/repo/infra/docker/deploy-staging.sh
+        i=0
+        while [ "$i" -lt 30 ]; do
+          if wget -qO- http://127.0.0.1:8000/health; then
+            exit 0
+          fi
+          i=$((i + 1))
+          sleep 2
+        done
+        exit 1
+REMOTE_DEPLOY
+
+  build-production-runtime-images:
+    name: Build Production Runtime Images
+    runs-on: runtime-builder:host
+    if: startsWith(github.ref, 'refs/tags/v')
+
+    steps:
+    - name: Checkout code
+      shell: sh
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+      run: |
+        set -eu
+        archive_url="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz"
+        wget --header="Authorization: token ${GITHUB_TOKEN}" -O /tmp/repo.tar.gz "$archive_url"
+        tar -xzf /tmp/repo.tar.gz --strip-components=1 -C .
+        rm -f /tmp/repo.tar.gz
+
+    - name: Build runtime image artifact
+      shell: sh
+      run: |
+        set -eu
+        chmod +x scripts/build_release_images.sh
+        scripts/build_release_images.sh "${GITHUB_REF_NAME}"
+
+    - name: Build production web artifact
+      shell: sh
+      run: |
+        set -eu
+        docker run --rm \
+          --pull=never \
+          -v "$PWD:/workspace" \
+          -w /workspace/apps/web \
+          docker.m.daocloud.io/library/node:20 \
+          sh -lc 'npm ci && npm run build'
+        docker build --pull=false \
+          -f infra/docker/web-artifact.Dockerfile \
+          -t "xiaoxia-saas-web:${GITHUB_REF_NAME}" \
+          .
+        test -f apps/web/dist/index.html
+
+    - name: Package release source artifact
+      shell: sh
+      run: |
+        set -eu
+        mkdir -p dist/release-artifacts
+        tar --exclude=.git --exclude=apps/web/node_modules --exclude=./dist \
+          -czf "dist/release-artifacts/xiaoxia-release-${GITHUB_REF_NAME}.tar.gz" .
+        docker save -o "dist/release-artifacts/xiaoxia-web-${GITHUB_REF_NAME}.tar" "xiaoxia-saas-web:${GITHUB_REF_NAME}"
+
+    - name: Upload runtime image and release artifacts
+      shell: sh
+      env:
+        PRODUCTION_SSH_HOST: ${{ secrets.PRODUCTION_SSH_HOST }}
+        PRODUCTION_SSH_USER: ${{ secrets.PRODUCTION_SSH_USER }}
+        PRODUCTION_SSH_KEY: ${{ secrets.PRODUCTION_SSH_KEY }}
+      run: |
+        set -eu
+        production_host="${PRODUCTION_SSH_HOST:-47.98.113.167}"
+        production_user="${PRODUCTION_SSH_USER:-root}"
+        mkdir -p ~/.ssh
+        if [ -n "${PRODUCTION_SSH_KEY:-}" ]; then
+          key_path="$HOME/.ssh/id_ed25519"
+          printf '%s\n' "$PRODUCTION_SSH_KEY" > "$key_path"
+          chmod 600 "$key_path"
+        else
+          key_path="/root/.ssh/xiaoxia_runtime_builder"
+          test -f "$key_path"
+        fi
+        ssh-keyscan -H "$production_host" >> ~/.ssh/known_hosts
+        scp -i "$key_path" "dist/release-images/xiaoxia-runtime-images-${GITHUB_REF_NAME}.tar" \
+          "$production_user@$production_host:/var/lib/xiaoxia-saas-production/runtime-images-${GITHUB_REF_NAME}.tar"
+        scp -i "$key_path" "dist/release-artifacts/xiaoxia-release-${GITHUB_REF_NAME}.tar.gz" \
+          "$production_user@$production_host:/var/lib/xiaoxia-saas-production/release-${GITHUB_REF_NAME}.tar.gz"
+        scp -i "$key_path" "dist/release-artifacts/xiaoxia-web-${GITHUB_REF_NAME}.tar" \
+          "$production_user@$production_host:/var/lib/xiaoxia-saas-production/web-${GITHUB_REF_NAME}.tar"
+
+  deploy-production:
+    name: Deploy Production
+    runs-on: runtime-builder:host
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: build-production-runtime-images
+
+    steps:
+    - name: Deploy production over SSH
+      shell: sh
+      env:
+        PRODUCTION_SSH_HOST: ${{ secrets.PRODUCTION_SSH_HOST }}
+        PRODUCTION_SSH_USER: ${{ secrets.PRODUCTION_SSH_USER }}
+        PRODUCTION_SSH_KEY: ${{ secrets.PRODUCTION_SSH_KEY }}
+      run: |
+        set -eu
+        production_host="${PRODUCTION_SSH_HOST:-47.98.113.167}"
+        production_user="${PRODUCTION_SSH_USER:-root}"
+        mkdir -p ~/.ssh
+        if [ -n "${PRODUCTION_SSH_KEY:-}" ]; then
+          key_path="$HOME/.ssh/id_ed25519"
+          printf '%s\n' "$PRODUCTION_SSH_KEY" > "$key_path"
+          chmod 600 "$key_path"
+        else
+          key_path="/root/.ssh/xiaoxia_runtime_builder"
+          test -f "$key_path"
+        fi
+        ssh-keyscan -H "$production_host" >> ~/.ssh/known_hosts
+        ssh -i "$key_path" "$production_user@$production_host" \
+          "RELEASE_VERSION='${GITHUB_REF_NAME}' sh -s" <<'REMOTE_DEPLOY'
+        set -eu
+        release_tar="/var/lib/xiaoxia-saas-production/release-${RELEASE_VERSION}.tar.gz"
+        test -f "$release_tar"
+        test -f "/var/lib/xiaoxia-saas-production/runtime-images-${RELEASE_VERSION}.tar"
+        test -f "/var/lib/xiaoxia-saas-production/web-${RELEASE_VERSION}.tar"
+        mkdir -p /var/lib/xiaoxia-saas-production
+        old_assets_dir="/tmp/xiaoxia-previous-web-assets-${RELEASE_VERSION}"
+        rm -rf "$old_assets_dir"
+        mkdir -p "$old_assets_dir"
+        if docker inspect xiaoxia-web-production >/dev/null 2>&1; then
+          docker cp xiaoxia-web-production:/usr/share/nginx/html/assets/. "$old_assets_dir"/ 2>/dev/null || true
+        fi
+        if [ -d /var/lib/xiaoxia-saas-production/repo/apps/web/dist/assets ]; then
+          cp -a /var/lib/xiaoxia-saas-production/repo/apps/web/dist/assets/. "$old_assets_dir"/
+        fi
+        rm -rf /var/lib/xiaoxia-saas-production/repo
+        mkdir -p /var/lib/xiaoxia-saas-production/repo
+        tar -xzf "$release_tar" -C /var/lib/xiaoxia-saas-production/repo
+        test -f /var/lib/xiaoxia-saas-production/repo/apps/web/dist/index.html
+        if [ -d "$old_assets_dir" ]; then
+          mkdir -p /var/lib/xiaoxia-saas-production/repo/apps/web/dist/assets
+          for asset in "$old_assets_dir"/*; do
+            [ -e "$asset" ] || continue
+            name="$(basename "$asset")"
+            if [ ! -e "/var/lib/xiaoxia-saas-production/repo/apps/web/dist/assets/$name" ]; then
+              cp -a "$asset" "/var/lib/xiaoxia-saas-production/repo/apps/web/dist/assets/$name"
+            fi
+          done
+          rm -rf "$old_assets_dir"
+        fi
+        test -f /var/lib/xiaoxia-saas-production/.env
+        cp /var/lib/xiaoxia-saas-production/.env /var/lib/xiaoxia-saas-production/repo/.env
+        HOST_PREFIX= WEB_IMAGE="xiaoxia-saas-web:${RELEASE_VERSION}" WEB_IMAGE_TAR="/var/lib/xiaoxia-saas-production/web-${RELEASE_VERSION}.tar" sh /var/lib/xiaoxia-saas-production/repo/infra/docker/deploy-production.sh
+        i=0
+        while [ "$i" -lt 30 ]; do
+          if wget -qO- http://127.0.0.1:8001/health; then
+            exit 0
+          fi
+          i=$((i + 1))
+          sleep 2
+        done
+        exit 1
+REMOTE_DEPLOY
+
+  production-e2e:
+    name: Production Browser E2E
+    runs-on: runtime-builder:host
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: deploy-production
+
+    steps:
+    - name: Checkout code
+      shell: sh
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+      run: |
+        set -eu
+        archive_url="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz"
+        wget --header="Authorization: token ${GITHUB_TOKEN}" -O /tmp/repo.tar.gz "$archive_url"
+        tar -xzf /tmp/repo.tar.gz --strip-components=1 -C .
+        rm -f /tmp/repo.tar.gz
+
+    - name: Run production browser E2E
+      shell: sh
+      run: |
+        set -eu
+        docker run --rm \
+          -e E2E_BASE_URL=https://saas.xiaoxiajianji.com \
+          -e E2E_API_BASE=https://api.xiaoxiajianji.com/api/v1 \
+          -e E2E_BROWSER_CHANNEL=chromium \
+          -v "$PWD:/workspace" \
+          -w /workspace/apps/web \
+          mcr.microsoft.com/playwright:v1.45.0-jammy \
+          sh -lc 'npm ci && npx playwright test --reporter=line --project=chromium e2e/core-upload.spec.ts e2e/core-generation.spec.ts e2e/core-titles.spec.ts'

.gitea/workflows/downgrade-runners.yml

@@ -0,0 +1,17 @@
+name: Downgrade New Runners to v0.2.6
+
+on:
+  push:
+    branches:
+      - ops/downgrade-runners
+  workflow_dispatch:
+
+jobs:
+  downgrade:
+    runs-on: saas
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      
+      - name: Downgrade all runners to v0.2.6 host mode
+        run: python3 scripts/downgrade_v026.py

.gitea/workflows/find-builder-ip.yml

@@ -0,0 +1,55 @@
+name: Find Builder IP & Check Gitea Logs
+
+on:
+  workflow_dispatch:
+
+jobs:
+  find-and-check:
+    runs-on: saas
+    steps:
+      - name: Find builder IP and check Gitea
+        shell: sh
+        run: |
+          set -eu
+
+          # 写入SSH密钥
+          mkdir -p ~/.ssh
+          cat > ~/.ssh/id_ed25519 << 'KEYEOF'
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbAAAAJiQxGNokMRj
+aAAAAAtzc2gtZWQyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbA
+AAAED2muzuU4BAiCqbg0ayGxgiDvfS/xI1SFvb32oLzTnn8/oaq4CTm8ER9u1okJNJ+dAS
+GPMLx7kYXrSFJs8/QElsAAAAFHJ1bm5lci1hZG1pbkB4aWFveGlhAQ==
+-----END OPENSSH PRIVATE KEY-----
+KEYEOF
+          chmod 600 ~/.ssh/id_ed25519
+          cat > ~/.ssh/config << 'CFGEOF'
+          Host *
+            StrictHostKeyChecking no
+            UserKnownHostsFile /dev/null
+          CFGEOF
+          chmod 600 ~/.ssh/config
+
+          echo "=== 1. 查看当前Runner所在服务器 ==="
+          hostname
+          ip addr show | grep inet | head -10
+
+          echo ""
+          echo "=== 2. 查找Gitea服务器内网IP ==="
+          # 从Gitea URL解析
+          nslookup git.xiaoxiajianji.com 2>/dev/null || dig git.xiaoxiajianji.com 2>/dev/null || echo "dns tools not available"
+          
+          # 试试常见的内网IP
+          for ip in 172.30.18.1 172.30.18.10 172.30.18.100 172.30.18.178 172.30.18.200; do
+            echo -n "  测试 $ip: "
+            timeout 2 bash -c "echo > /dev/tcp/$ip/22" 2>/dev/null && echo "22端口通" || echo "不通"
+          done
+
+          echo ""
+          echo "=== 3. 查看路由表 ==="
+          ip route 2>/dev/null || route -n 2>/dev/null || echo "no route command"
+          
+          echo ""
+          echo "=== 4. 查看ARP表 ==="
+          arp -an 2>/dev/null | head -10 || ip neigh 2>/dev/null | head -10 || echo "no arp"

.gitea/workflows/fix-new-server-env.yml

@@ -0,0 +1,17 @@
+name: Fix New Server Env (Node.js via CMD Agent)
+
+on:
+  workflow_dispatch:
+
+jobs:
+  fix:
+    runs-on: saas
+    steps:
+      - name: Fix new server env via CMD Agent
+        shell: sh
+        run: |
+          set -eu
+          curl -sL -H "Authorization: token ${GITHUB_TOKEN}" \
+            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/contents/scripts/fix_new_server_env.py?ref=ops/downgrade-runners" \
+            | python3 -c "import json,sys,base64; d=json.load(sys.stdin); open('/tmp/fix.py','w').write(base64.b64decode(d['content']).decode())"
+          python3 /tmp/fix.py

.gitea/workflows/fix-python310-direct.yml

@@ -0,0 +1,97 @@
+name: Install Python 3.10 - Direct SSH (no checkout)
+
+on:
+  workflow_dispatch:
+
+jobs:
+  install-python310:
+    runs-on: saas
+    steps:
+      - name: Install Python 3.10 on new server via SSH
+        run: |
+          # --- 内嵌SSH密钥 ---
+          cat > /tmp/new_server_key << 'KEYEOF'
+          -----BEGIN OPENSSH PRIVATE KEY-----
+          b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+          QyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbAAAAJiQxGNokMRj
+          aAAAAAtzc2gtZWQyNTUxOQAAACD6GquAk5vBEfbtaJCTSfnQEhjzC8e5GF60hSbPP0BJbA
+          AAAED2muzuU4BAiCqbg0ayGxgiDvfS/xI1SFvb32oLzTnn8/oaq4CTm8ER9u1okJNJ+dAS
+          GPMLx7kYXrSFJs8/QElsAAAAFHJ1bm5lci1hZG1pbkB4aWFveGlhAQ==
+          -----END OPENSSH PRIVATE KEY-----
+          KEYEOF
+          chmod 600 /tmp/new_server_key
+          
+          S="ssh -i /tmp/new_server_key -o StrictHostKeyChecking=no -o ConnectTimeout=10 -o ServerAliveInterval=60 root@172.30.18.199"
+          
+          echo "=== 步骤0: 检查当前Python版本 ==="
+          $S 'export PATH=/usr/local/bin:$PATH; python3 --version 2>&1; pip3 --version 2>&1 || true'
+          
+          # 检查是否已安装Python 3.10
+          if $S 'export PATH=/usr/local/bin:$PATH; python3 --version 2>&1 | grep -q 3.10' 2>/dev/null; then
+            echo "Python 3.10 已安装，跳过编译"
+            SKIP_BUILD=1
+          else
+            SKIP_BUILD=0
+          fi
+          
+          if [ "$SKIP_BUILD" = "0" ]; then
+            echo ""
+            echo "=== 步骤1: 安装编译依赖 ==="
+            $S 'yum install -y gcc gcc-c++ make openssl-devel bzip2-devel libffi-devel zlib-devel readline-devel sqlite-devel wget git 2>&1 | tail -3'
+            
+            echo ""
+            echo "=== 步骤2: 下载Python 3.10.14源码（多源重试+校验） ==="
+            $S 'cd /tmp && rm -f Python-3.10.14.tgz && \
+              for url in \
+                "https://mirrors.huaweicloud.com/python/3.10.14/Python-3.10.14.tgz" \
+                "https://npmmirror.com/mirrors/python/3.10.14/Python-3.10.14.tgz" \
+                "https://registry.npmmirror.com/-/binary/python/3.10.14/Python-3.10.14.tgz" \
+                "https://www.python.org/ftp/python/3.10.14/Python-3.10.14.tgz"; do \
+                echo "Trying: $url"; \
+                wget -q --timeout=30 --tries=2 -O Python-3.10.14.tgz "$url" && \
+                gzip -t Python-3.10.14.tgz 2>/dev/null && \
+                SIZE=$(stat -c%s Python-3.10.14.tgz 2>/dev/null || stat -f%z Python-3.10.14.tgz 2>/dev/null) && \
+                if [ "$SIZE" -gt 20000000 ]; then echo "download_ok: $SIZE bytes"; break; else echo "too small: $SIZE, retrying..."; fi; \
+              done'
+            
+            echo ""
+            echo "=== 步骤3: 解压并编译安装 ==="
+            $S 'cd /tmp && rm -rf Python-3.10.14 && tar xzf Python-3.10.14.tgz && echo extract_ok'
+            $S 'cd /tmp/Python-3.10.14 && ./configure --prefix=/usr/local --with-ensurepip=install 2>&1 | tail -3'
+            echo "开始编译（约5-10分钟）..."
+            $S 'cd /tmp/Python-3.10.14 && make -j$(nproc) > /tmp/python_make.log 2>&1 && echo make_ok || (tail -20 /tmp/python_make.log; echo make_failed; exit 1)'
+            $S 'cd /tmp/Python-3.10.14 && make altinstall 2>&1 | tail -5'
+            
+            echo ""
+            echo "=== 步骤4: 设置为默认python3和pip3 ==="
+            $S 'ln -sf /usr/local/bin/python3.10 /usr/local/bin/python3 && ln -sf /usr/local/bin/pip3.10 /usr/local/bin/pip3 && echo link_ok'
+          fi
+          
+          echo ""
+          echo "=== 步骤5: 验证Python 3.10 ==="
+          $S 'export PATH=/usr/local/bin:$PATH; python3 --version; pip3 --version; pip3 install --help 2>&1 | grep -q break-system-packages && echo "pip3 supports --break-system-packages" || echo "WARNING: no --break-system-packages"'
+          
+          echo ""
+          echo "=== 步骤6: 安装git ==="
+          $S 'which git 2>/dev/null || (yum install -y git 2>&1 | tail -3)'
+          $S 'git --version 2>&1'
+          
+          echo ""
+          echo "=== 步骤7: 修复CMD Agent端口 5000->5927 ==="
+          $S 'cd /opt/cmd-agent && sed -i "s/port=5000/port=5927/g; s/port = 5000/port = 5927/g; s/\"5000\"/\"5927\"/g" server.py 2>&1; echo sed_done'
+          $S 'systemctl daemon-reload; systemctl restart cmd-agent 2>&1; sleep 2; systemctl is-active cmd-agent'
+          $S '(ss -tlnp 2>/dev/null | grep 5927) || (netstat -tlnp 2>/dev/null | grep 5927) || echo "port 5927 not found, checking 5000..."; (ss -tlnp 2>/dev/null | grep 5000) || (netstat -tlnp 2>/dev/null | grep 5000) || echo "no cmd-agent port listening"'
+          
+          echo ""
+          echo "=== 步骤8: 重启6个Runner ==="
+          $S 'for i in 1 2 3 4 5 6; do systemctl restart act-runner-$i.service 2>/dev/null && echo "runner-$i restarted" || systemctl restart gitea-runner-$i.service 2>/dev/null && echo "runner-$i restarted(old)" || echo "runner-$i not found"; done'
+          
+          echo ""
+          echo "=== 步骤9: 最终验证 ==="
+          $S 'echo "--- Python ---"; export PATH=/usr/local/bin:$PATH; python3 --version; pip3 --version'
+          $S 'echo "--- Git ---"; git --version 2>&1'
+          $S 'echo "--- CMD Agent ---"; systemctl is-active cmd-agent'
+          $S 'echo "--- Runners ---"; systemctl list-units "act-runner-*.service" --no-legend 2>/dev/null | head -6 || systemctl list-units "gitea-runner-*.service" --no-legend 2>/dev/null | head -6'
+          
+          echo ""
+          echo "=== 全部完成 ==="

.gitea/workflows/fix-python310.yml

@@ -0,0 +1,20 @@
+name: Install Python 3.10 on New Server
+
+on:
+  push:
+    branches:
+      - ops/downgrade-runners
+    paths:
+      - '.gitea/workflows/fix-python310.yml'
+      - 'scripts/install_python310.py'
+  workflow_dispatch:
+
+jobs:
+  install-python310:
+    runs-on: saas
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      
+      - name: Install Python 3.10 on new server
+        run: python3 scripts/install_python310.py

.gitea/workflows/install-cmd-agent.yml

@@ -0,0 +1,24 @@
+name: Install CMD Agent + Node.js on New Server (via SSH)
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - ops/downgrade-runners
+    paths:
+      - '.gitea/workflows/install-cmd-agent.yml'
+      - 'scripts/install_cmd_agent.py'
+
+jobs:
+  install:
+    runs-on: saas
+    steps:
+      - name: Install CMD Agent + Node.js via SSH
+        shell: sh
+        run: |
+          set -eu
+          # 下载脚本
+          curl -sL -H "Authorization: token ${GITHUB_TOKEN}" \
+            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/contents/scripts/install_cmd_agent.py?ref=ops/downgrade-runners" \
+            | python3 -c "import json,sys,base64; d=json.load(sys.stdin); open('/tmp/install.py','w').write(base64.b64decode(d['content']).decode())"
+          python3 /tmp/install.py

.gitea/workflows/pr-automation.yml

@@ -1,368 +0,0 @@
-name: PR Automation
-
-on:
-  pull_request:
-    types: [synchronize, opened, ready_for_review, review_requested]
-
-permissions:
-  contents: read
-
-jobs:
-  auto-approve:
-    name: Auto Approve on CI Green
-    runs-on: ci-check
-    if: github.event_name == 'pull_request' && !github.event.pull_request.draft
-    timeout-minutes: 20
-    steps:
-      - name: Checkout code
-        shell: sh
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          curl -sH "Authorization: token $GITHUB_TOKEN"             "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/raw/scripts/ci/step_checkout.sh?ref=${GITHUB_SHA}"             | bash
-
-      - name: Auto approve when CI passes
-        shell: bash
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-          REVIEW_TOKEN: ${{ secrets.REVIEW_GITEA_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-        run: |
-          set -eu
-
-          echo "PR #${PR_NUMBER} - 检查CI状态并自动审批"
-
-          # 检查是否纯前端改动
-          API_URL="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/files?limit=300"
-          FILES=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" "$API_URL" | python3 -c "import sys,json; [print(f['filename']) for f in json.load(sys.stdin)]")
-          FRONTEND_COUNT=$(echo "$FILES" | grep -c '^apps/web/' || true)
-          BACKEND_COUNT=$(echo "$FILES" | grep -cv '^apps/web/' || true)
-          TOTAL=$(echo "$FILES" | grep -cv '^$' || true)
-          echo "变更文件: ${TOTAL} 个 (前端: ${FRONTEND_COUNT}, 后端/公共: ${BACKEND_COUNT})"
-
-          if [ "$BACKEND_COUNT" = "0" ] && [ "$FRONTEND_COUNT" -gt "0" ]; then
-            SKIP_BACKEND=true
-            echo "✅ 纯前端改动，只检查Frontend Lint"
-          else
-            SKIP_BACKEND=false
-            echo "🔧 包含后端/公共变更，检查全部CI"
-          fi
-
-          # 定义需要检查的context
-          if [ "$SKIP_BACKEND" = "true" ]; then
-            CONTEXTS=("CI/CD Pipeline / Frontend Lint (pull_request)")
-          else
-            CONTEXTS=(
-              "CI/CD Pipeline / Validate Code Quality And Tests (pull_request)"
-              "CI/CD Pipeline / Frontend Lint (pull_request)"
-            )
-          fi
-
-          echo "需要通过的CI检查: ${#CONTEXTS[@]} 项（与分支保护required门禁一致）"
-          for ctx in "${CONTEXTS[@]}"; do
-            echo "  - $ctx"
-          done
-          echo
-
-          # 初始等待30秒，给CI启动写status的时间
-          echo "等待30秒让CI启动..."
-          sleep 30
-
-          # 轮询等待，最多20分钟（120次x10秒）
-          for attempt in $(seq 1 120); do
-            ALL_SUCCESS=true
-            ANY_FAILED=false
-            ANY_PENDING=false
-
-            echo "--- 第${attempt}次检查 ($(date '+%H:%M:%S')) ---"
-
-            # 调用辅助脚本检查每个context状态
-            for ctx in "${CONTEXTS[@]}"; do
-              STATE=$(python3 scripts/check_ci_status.py "$GITHUB_TOKEN" "$GITHUB_REPOSITORY" "$PR_HEAD_SHA" "$ctx")
-              echo "  $ctx: $STATE"
-
-              if [ "$STATE" != "success" ]; then
-                ALL_SUCCESS=false
-              fi
-              if [ "$STATE" = "failure" ] || [ "$STATE" = "error" ]; then
-                ANY_FAILED=true
-              fi
-              if [ "$STATE" = "pending" ] || [ "$STATE" = "null" ]; then
-                ANY_PENDING=true
-              fi
-            done
-
-            if [ "$ALL_SUCCESS" = "true" ]; then
-              echo
-              echo "✅ 所有CI检查通过，自动审批 PR #${PR_NUMBER}"
-
-              # 检查是否已有审批
-              EXISTING=$(curl -s -H "Authorization: token ${REVIEW_TOKEN}" \
-                "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/reviews" \
-                | python3 -c "import sys,json; reviews=json.load(sys.stdin); print('yes' if any(r.get('state')=='APPROVED' for r in reviews) else 'no')")
-
-              if [ "$EXISTING" = "yes" ]; then
-                echo "ℹ️  PR #${PR_NUMBER} 已有审批，跳过"
-                exit 0
-              fi
-
-              # 第一步：创建PENDING review
-              echo "创建review..."
-              REVIEW_CREATE=$(curl -s -X POST \
-                -H "Authorization: token ${REVIEW_TOKEN}" \
-                -H "Content-Type: application/json" \
-                -d '{"event": "PENDING", "body": "CI全绿，自动审批通过。"}' \
-                "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/reviews")
-              
-              REVIEW_ID=$(echo "$REVIEW_CREATE" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))")
-              REVIEW_STATE=$(echo "$REVIEW_CREATE" | python3 -c "import sys,json; print(json.load(sys.stdin).get('state',''))")
-              echo "创建结果: id=$REVIEW_ID state=$REVIEW_STATE"
-
-              if [ -z "$REVIEW_ID" ]; then
-                echo "❌ 创建review失败"
-                echo "$REVIEW_CREATE"
-                exit 1
-              fi
-
-              if [ "$REVIEW_STATE" = "APPROVED" ]; then
-                echo "✅ 自动审批成功（直接创建为APPROVED）"
-                exit 0
-              fi
-
-              # 第二步：submit review为APPROVED
-              echo "提交review审批..."
-              SUBMIT_CODE=$(curl -s -o /tmp/submit_resp.json -w "%{http_code}" \
-                -X POST \
-                -H "Authorization: token ${REVIEW_TOKEN}" \
-                -H "Content-Type: application/json" \
-                -d '{"event": "APPROVED", "body": "CI全绿，自动审批通过。"}' \
-                "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/reviews/${REVIEW_ID}")
-              
-              echo "提交API HTTP状态: $SUBMIT_CODE"
-              cat /tmp/submit_resp.json 2>/dev/null || true
-              echo
-
-              if [ "$SUBMIT_CODE" = "200" ] || [ "$SUBMIT_CODE" = "201" ]; then
-                FINAL_STATE=$(python3 -c "import json; print(json.load(open('/tmp/submit_resp.json')).get('state',''))" 2>/dev/null || echo "?")
-                echo "✅ 自动审批成功 (state: $FINAL_STATE)"
-                exit 0
-              else
-                echo "❌ 提交审批失败"
-                exit 1
-              fi
-            fi
-
-            # 还有CI在跑 → 继续等
-            if [ "$ANY_PENDING" = "true" ]; then
-              echo "⏳ CI仍在运行中，继续等待（第${attempt}/120次轮询）..."
-              sleep 10
-              continue
-            fi
-
-            # 所有CI都跑完了但有失败 → 退出
-            if [ "$ANY_FAILED" = "true" ]; then
-              echo
-              echo "❌ CI检查有失败项，不自动审批"
-              exit 0
-            fi
-
-            sleep 10
-          done
-
-          echo
-          echo "⏰ 等待超时（20分钟），CI尚未全部完成"
-          exit 0
-
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-
-  auto-merge:
-    name: Auto Merge on CI Green + Approved
-    runs-on: ci-check
-    if: github.event_name == 'pull_request' && !github.event.pull_request.draft && github.event.pull_request.base.ref == 'develop'
-    timeout-minutes: 30
-    steps:
-      - name: Checkout code
-        shell: sh
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          curl -sH "Authorization: token $GITHUB_TOKEN"             "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/raw/scripts/ci/step_checkout.sh?ref=${GITHUB_SHA}"             | bash
-
-      - name: Auto merge when CI passes and approved
-        shell: bash
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-          MERGE_TOKEN: ${{ secrets.REVIEW_GITEA_TOKEN }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
-          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-        run: |
-          set -eu
-
-          echo "PR #${PR_NUMBER} - 检查CI状态+审批并自动合并到${BASE_REF}"
-          echo
-
-          # 只合develop分支
-          if [ "$BASE_REF" != "develop" ]; then
-            echo "Skip: 目标分支不是develop"
-            exit 0
-          fi
-
-          # 判断是否纯前端改动
-          FILES=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
-            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/files?limit=300" \
-            | python3 -c "import sys,json; [print(f['filename']) for f in json.load(sys.stdin)]")
-          TOTAL=$(echo "$FILES" | grep -cv '^$' || true)
-          FRONTEND_COUNT=$(echo "$FILES" | grep -c '^apps/web/' || true)
-          BACKEND_COUNT=$((TOTAL - FRONTEND_COUNT))
-          echo "变更文件: ${TOTAL} 个 (前端: ${FRONTEND_COUNT}, 后端/公共: ${BACKEND_COUNT})"
-
-          if [ "$BACKEND_COUNT" = "0" ] && [ "$FRONTEND_COUNT" -gt "0" ]; then
-            CONTEXTS=("CI/CD Pipeline / Frontend Lint (pull_request)")
-            echo "纯前端改动，只检查Frontend Lint"
-          else
-            CONTEXTS=(
-              "CI/CD Pipeline / Validate Code Quality And Tests (pull_request)"
-              "CI/CD Pipeline / Frontend Lint (pull_request)"
-              "CI/CD Pipeline / PR Build API Image (pull_request)"
-              "CI/CD Pipeline / PR Build Worker Image (pull_request)"
-              "CI/CD Pipeline / PR Build Web Image (pull_request)"
-            )
-            echo "检查required门禁（与分支保护一致）"
-          fi
-          echo
-
-          # 初始等待30秒，给CI启动写status的时间
-          echo "等待30秒让CI启动..."
-          sleep 30
-
-          # 405连续计数器
-          MERGE_405_COUNT=0
-          MAX_405_RETRIES=10
-
-          # 轮询等待，最多30分钟（180次x10秒）
-          for attempt in $(seq 1 180); do
-            ALL_SUCCESS=true
-            ANY_FAILED=false
-            ANY_PENDING=false
-
-            echo "--- 第${attempt}次检查 ($(date '+%H:%M:%S')) ---"
-
-            # 检查CI状态
-            for ctx in "${CONTEXTS[@]}"; do
-              STATE=$(python3 scripts/check_ci_status.py "$GITHUB_TOKEN" "$GITHUB_REPOSITORY" "$PR_HEAD_SHA" "$ctx")
-              echo "  CI: ${ctx##*/}: $STATE"
-              if [ "$STATE" != "success" ]; then
-                ALL_SUCCESS=false
-              fi
-              if [ "$STATE" = "failure" ] || [ "$STATE" = "error" ]; then
-                ANY_FAILED=true
-              fi
-              if [ "$STATE" = "pending" ]; then
-                ANY_PENDING=true
-              fi
-            done
-
-            # 检查审批状态
-            APPROVAL_RESULT=$(python3 scripts/check_pr_approval.py "$MERGE_TOKEN" "$GITHUB_REPOSITORY" "$PR_NUMBER" 1)
-            echo "  审批: $APPROVAL_RESULT"
-            HAS_APPROVAL=false
-            if echo "$APPROVAL_RESULT" | grep -q '^approved'; then
-              HAS_APPROVAL=true
-            fi
-
-            # 全部满足 → 合并
-            if [ "$ALL_SUCCESS" = "true" ] && [ "$HAS_APPROVAL" = "true" ]; then
-              echo
-              echo "CI全绿 + 审批通过，执行自动合并"
-              echo "等待60秒冷却，给Gitea内部状态同步时间..."
-              sleep 60
-
-              # 幂等检查：PR是否还是open
-              PR_STATE=$(curl -s -H "Authorization: token ${MERGE_TOKEN}" \
-                "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}" \
-                | python3 -c "import sys,json; print(json.load(sys.stdin).get('state',''))")
-
-              if [ "$PR_STATE" != "open" ]; then
-                echo "PR状态为 ${PR_STATE}，无需合并"
-                exit 0
-              fi
-
-              # 执行squash merge
-              HTTP_CODE=$(curl -s -o /tmp/merge_resp.json -w "%{http_code}" \
-                -X POST \
-                -H "Authorization: token ${MERGE_TOKEN}" \
-                -H "Content-Type: application/json" \
-                -d '{"do":"squash","merge_title_field":"","merge_message_field":"","delete_branch_after_merge":true,"force_merge":false}' \
-                "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/merge")
-
-              echo "合并API HTTP状态: $HTTP_CODE"
-
-              if [ "$HTTP_CODE" = "200" ]; then
-                echo "自动合并成功"
-                exit 0
-              elif [ "$HTTP_CODE" = "405" ]; then
-                MERGE_405_COUNT=$((MERGE_405_COUNT + 1))
-                echo "⚠️  合并返回405（第${MERGE_405_COUNT}次），可能CI状态尚未同步或有未解决的门禁，继续等待重试..."
-                cat /tmp/merge_resp.json 2>/dev/null || true
-                echo
-                if [ "$MERGE_405_COUNT" -ge "$MAX_405_RETRIES" ]; then
-                  echo "⚠️  连续${MAX_405_RETRIES}次合并返回405，放弃自动合并（需人工确认，非代码问题）"
-                  curl -s -X POST \
-                    -H "Authorization: token ${MERGE_TOKEN}" \
-                    -H "Content-Type: application/json" \
-                    -d '{"body": "Auto merge skipped after multiple 405 errors: PR may have conflicts or unresolved checks. Please review manually. This is not a CI failure."}' \
-                    "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments" > /dev/null 2>&1 || true
-                  exit 0
-                fi
-                sleep 30
-                continue
-              else
-                echo "自动合并失败 (HTTP $HTTP_CODE)"
-                cat /tmp/merge_resp.json 2>/dev/null || true
-                curl -s -X POST \
-                  -H "Authorization: token ${MERGE_TOKEN}" \
-                  -H "Content-Type: application/json" \
-                  -d "{\"body\": \"Auto merge failed (HTTP ${HTTP_CODE}), please check manually.\"}" \
-                  "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments" > /dev/null 2>&1 || true
-                exit 1
-              fi
-            else
-              # 本轮不满足合并条件，重置405计数器
-              MERGE_405_COUNT=0
-            fi
-
-            if [ "$ANY_FAILED" = "true" ]; then
-              echo
-              echo "CI有失败项，不自动合并"
-              exit 0
-            fi
-
-            sleep 10
-          done
-
-          echo
-          echo "等待超时（30分钟）"
-          exit 0
-      - name: Report CI trace
-        if: always()
-        shell: sh
-        env:
-          AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-        run: |
-          STATUS="ok"
-          [ ${{ job.status }} = "success" ] || STATUS="error"
-          START_TIME=""
-          [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-          python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true

.gitea/workflows/preview-cleanup.yml

@@ -1,207 +0,0 @@
-name: Preview Cleanup
-on:
-  pull_request:
-    types:
-    - closed
-    branches:
-    - main
-    - develop
-permissions:
-  contents: read
-  pull-requests: write
-jobs:
-  cleanup-preview:
-    name: Cleanup Preview Environment
-    runs-on: runtime-builder
-    timeout-minutes: 10
-    steps:
-    - name: Checkout code
-      shell: sh
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: |
-        set -eu
-        python3 - <<'PY'
-        import io, os, tarfile, time, urllib.request, urllib.error
-        url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-        request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-        last_err = None
-        for attempt in range(5):
-            try:
-                with urllib.request.urlopen(request, timeout=120) as response:
-                    archive = response.read()
-                break
-            except urllib.error.HTTPError as e:
-                last_err = e
-                if e.code >= 500 and attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-            except Exception as e:
-                last_err = e
-                if attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-        else:
-            raise last_err
-        with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-            root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-            for member in tar.getmembers():
-                name = member.name
-                if name == root_prefix[:-1]:
-                    continue
-                if name.startswith(root_prefix):
-                    member.name = name[len(root_prefix):]
-                if member.name:
-                    tar.extract(member, '.')
-        PY
-
-    - name: Extract PR number
-      shell: sh
-      run: |
-        set -eu
-        # 优先从event payload中读取（兼容所有PR事件类型）
-        if [ -n "${GITHUB_EVENT_PATH:-}" ] && [ -f "$GITHUB_EVENT_PATH" ]; then
-          PR_NUMBER=$(python3 -c "import json,sys; print(json.load(sys.stdin).get('number',''))" < "$GITHUB_EVENT_PATH")
-        fi
-        # fallback: 从GITHUB_REF中提取
-        if [ -z "${PR_NUMBER:-}" ]; then
-          PR_NUMBER=$(echo "$GITHUB_REF" | sed -n 's|refs/pull/\([0-9]*\)/.*|\1|p')
-        fi
-        # 再fallback: 兼容纯数字ref
-        if [ -z "${PR_NUMBER:-}" ] || ! echo "$PR_NUMBER" | grep -qE '^[0-9]+$'; then
-          echo "WARNING: Could not extract PR number cleanly, using raw ref suffix"
-          PR_NUMBER=$(echo "$GITHUB_REF" | sed 's|refs/pull/||; s|/.*||')
-        fi
-        echo "PR_NUMBER=$PR_NUMBER" >> $GITHUB_ENV
-        echo "PR number: $PR_NUMBER"
-        echo "Preview dir: /var/www/preview/pr-${PR_NUMBER}"
-
-    - name: Install SSH client
-      shell: sh
-      run: |
-        set -eu
-        # 先检查是否已存在ssh
-        if command -v ssh >/dev/null 2>&1 && command -v ssh-keyscan >/dev/null 2>&1; then
-          echo "SSH client already available: $(ssh -V 2>&1)"
-          exit 0
-        fi
-        # 尝试多种包管理器安装
-        if command -v apk >/dev/null 2>&1; then
-          apk add --no-cache openssh-client >/dev/null 2>&1
-          echo "openssh-client installed via apk"
-        elif command -v apt-get >/dev/null 2>&1; then
-          apt-get update -qq && apt-get install -y -qq openssh-client >/dev/null 2>&1
-          echo "openssh-client installed via apt-get"
-        elif command -v yum >/dev/null 2>&1; then
-          yum install -y openssh-clients >/dev/null 2>&1
-          echo "openssh-client installed via yum"
-        elif command -v dnf >/dev/null 2>&1; then
-          dnf install -y openssh-clients >/dev/null 2>&1
-          echo "openssh-client installed via dnf"
-        else
-          echo "ERROR: No package manager found and ssh not pre-installed"
-          which ssh 2>/dev/null || echo "  ssh: not found"
-          which ssh-keyscan 2>/dev/null || echo "  ssh-keyscan: not found"
-          exit 1
-        fi
-
-    - name: Remove preview directory from server
-      shell: sh
-      env:
-        PREVIEW_SSH_HOST: ${{ secrets.PREVIEW_SSH_HOST }}
-        PREVIEW_SSH_USER: ${{ secrets.PREVIEW_SSH_USER }}
-        PREVIEW_SSH_PORT: ${{ secrets.PREVIEW_SSH_PORT }}
-        PREVIEW_SSH_KEY: ${{ secrets.PREVIEW_SSH_KEY }}
-      run: |
-        set -eux
-        preview_host="${PREVIEW_SSH_HOST:-172.30.18.197}"
-        preview_user="${PREVIEW_SSH_USER:-deploy}"
-        preview_port="${PREVIEW_SSH_PORT:-22222}"
-        preview_dir="/var/www/preview/pr-${PR_NUMBER}"
-
-        mkdir -p ~/.ssh
-
-        # 查找可用的SSH密钥（优先用 secret 里专门为 preview 配置的 key）
-        key_path=""
-        if [ -n "${PREVIEW_SSH_KEY:-}" ]; then
-          key_path="$HOME/.ssh/id_ed25519"
-          printf '%s\n' "$PREVIEW_SSH_KEY" > "$key_path"
-          chmod 600 "$key_path"
-          echo "Using key from PREVIEW_SSH_KEY secret"
-        elif [ -f /root/.ssh/xiaoxia_runtime_builder ]; then
-          key_path="/root/.ssh/xiaoxia_runtime_builder"
-          echo "Using key: $key_path (builder key)"
-        elif [ -f "$HOME/.ssh/xiaoxia_runtime_builder" ]; then
-          key_path="$HOME/.ssh/xiaoxia_runtime_builder"
-          echo "Using key: $key_path (home key)"
-        else
-          echo "ERROR: No SSH key available"
-          ls -la ~/.ssh/ 2>/dev/null || true
-          ls -la /root/.ssh/ 2>/dev/null || true
-          exit 1
-        fi
-
-        ssh-keyscan -p "$preview_port" -H "$preview_host" >> ~/.ssh/known_hosts 2>/dev/null
-        echo "SSH keyscan done"
-
-        # 测试SSH连接
-        ssh -p "$preview_port" -i "$key_path" -o StrictHostKeyChecking=no "${preview_user}@${preview_host}" "echo SSH_CONNECTION_OK && hostname"
-        echo "SSH connection verified"
-
-        # 检查目录是否存在
-        DIR_EXISTS=$(ssh -p "$preview_port" -i "$key_path" -o StrictHostKeyChecking=no "${preview_user}@${preview_host}" \
-          "if [ -d '${preview_dir}' ]; then echo 'yes'; else echo 'no'; fi")
-
-        if [ "$DIR_EXISTS" = "yes" ]; then
-          echo "Removing preview directory: ${preview_dir}"
-          ssh -p "$preview_port" -i "$key_path" -o StrictHostKeyChecking=no "${preview_user}@${preview_host}" \
-            "rm -rf ${preview_dir} && echo 'Preview directory removed successfully'"
-          echo "Cleanup completed: ${preview_dir}"
-        else
-          echo "Preview directory does not exist: ${preview_dir}, nothing to clean up"
-        fi
-
-    - name: Comment cleanup notice on PR
-      if: success()
-      shell: sh
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: |
-        set -eu
-        # 从event payload读取PR号（最可靠）
-        if [ -n "${GITHUB_EVENT_PATH:-}" ] && [ -f "$GITHUB_EVENT_PATH" ]; then
-          PR_NUMBER=$(python3 -c "import json,sys; print(json.load(sys.stdin).get('number',''))" < "$GITHUB_EVENT_PATH")
-        else
-          PR_NUMBER=$(echo "$GITHUB_REF" | sed -n 's|refs/pull/\([0-9]*\)/.*|\1|p')
-        fi
-        export PR_NUMBER
-
-        COMMENT_BODY=$(python3 scripts/ci/preview_comment.py cleanup)
-
-        API_URL="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments"
-        curl -s -X POST \
-          -H "Authorization: token ${GITHUB_TOKEN}" \
-          -H "Content-Type: application/json" \
-          -d "$COMMENT_BODY" \
-          "$API_URL" \
-          > /dev/null
-        echo "Cleanup comment posted"
-
-    - name: Report CI trace
-      if: always()
-      shell: sh
-      env:
-        AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-      run: |
-        STATUS="ok"
-        [ ${{ job.status }} = "success" ] || STATUS="error"
-        START_TIME=""
-        [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-        python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-

.gitea/workflows/preview-deploy.yml

@@ -1,296 +0,0 @@
-name: Preview Deploy
-on:
-  pull_request:
-    types:
-    - opened
-    - synchronize
-    - reopened
-    branches:
-    - main
-    - develop
-  workflow_dispatch:
-    inputs:
-      reason:
-        description: "触发原因"
-        required: false
-        default: "手动触发 - 预览环境补跑"
-permissions:
-  contents: read
-  pull-requests: write
-concurrency:
-  group: preview-deploy-${{ gitea.ref }}
-  cancel-in-progress: true
-jobs:
-  deploy-preview:
-    name: Deploy Preview Environment
-    runs-on: runtime-builder
-    timeout-minutes: 20
-    steps:
-    - name: Checkout code
-      shell: sh
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: |
-        set -eu
-        python3 - <<'PY'
-        import io, os, tarfile, time, urllib.request, urllib.error
-        url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-        request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-        last_err = None
-        for attempt in range(5):
-            try:
-                with urllib.request.urlopen(request, timeout=120) as response:
-                    archive = response.read()
-                break
-            except urllib.error.HTTPError as e:
-                last_err = e
-                if e.code >= 500 and attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-            except Exception as e:
-                last_err = e
-                if attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-        else:
-            raise last_err
-        with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-            root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-            for member in tar.getmembers():
-                name = member.name
-                if name == root_prefix[:-1]:
-                    continue
-                if name.startswith(root_prefix):
-                    member.name = name[len(root_prefix):]
-                if member.name:
-                    tar.extract(member, '.')
-        PY
-
-    - name: Record job start time
-      shell: sh
-      run: |
-        set -eu
-        echo "JOB_START_TIME=$(date +%s)" >> $GITHUB_ENV
-        echo "Job started at $(date)"
-
-    - name: Extract PR number
-      shell: sh
-      run: |
-        set -eu
-        PR_NUMBER=$(echo "$GITHUB_REF" | sed 's|refs/pull/||; s|/.*||')
-        echo "PR_NUMBER=$PR_NUMBER" >> $GITHUB_ENV
-        echo "PR number: $PR_NUMBER"
-        echo "PREVIEW_URL=https://pr-${PR_NUMBER}.preview.xiaoxiajianji.com" >> $GITHUB_ENV
-        echo "Preview URL: https://pr-${PR_NUMBER}.preview.xiaoxiajianji.com"
-
-    - name: Build frontend
-      shell: sh
-      run: |
-        set -eu
-        NPM_CACHE_VOLUME="xiaoxia-npm-cache"
-        if ! docker volume inspect "$NPM_CACHE_VOLUME" >/dev/null 2>&1; then
-          docker volume create "$NPM_CACHE_VOLUME" >/dev/null
-          echo "Created npm cache volume: $NPM_CACHE_VOLUME"
-        fi
-
-        docker run --rm \
-          -v "$PWD:/workspace" \
-          -v "$NPM_CACHE_VOLUME:/workspace/apps/web/node_modules" \
-          -w /workspace/apps/web \
-          -e VITE_API_URL=https://staging-api.xiaoxiajianji.com \
-          docker.m.daocloud.io/library/node:20 \
-          sh -lc '
-            PACKAGE_LOCK_HASH=$(md5sum package-lock.json 2>/dev/null | cut -d" " -f1)
-            CACHE_HASH_FILE="node_modules/.package-lock-hash"
-            CACHE_VALID=false
-            if [ -f "$CACHE_HASH_FILE" ] && [ "$(cat "$CACHE_HASH_FILE")" = "$PACKAGE_LOCK_HASH" ] && [ -x "node_modules/.bin/vite" ] && [ -x "node_modules/.bin/tsc" ]; then
-              CACHE_VALID=true
-              echo "Cache hit: dependencies valid, skipping npm ci"
-            fi
-            if [ "$CACHE_VALID" = "false" ]; then
-              echo "Cache miss or invalid: running npm ci..."
-              if ! npm ci --include=dev; then
-                echo "npm ci failed, cleaning node_modules and retrying..."
-                rm -rf node_modules
-                mkdir -p node_modules
-                npm ci --include=dev
-              fi
-              echo "$PACKAGE_LOCK_HASH" > "$CACHE_HASH_FILE"
-              echo "Dependencies installed, cache updated"
-            fi
-            echo "Running TypeScript check..."
-            npx --no-install tsc
-            echo "Running Vite build..."
-            npx --no-install vite build
-            echo "Build completed successfully"
-            ls -la dist/
-          '
-
-    - name: Install SSH client and rsync
-      shell: sh
-      run: |
-        set -eu
-        if command -v apk >/dev/null 2>&1; then
-          apk add --no-cache openssh-client rsync >/dev/null 2>&1
-        elif command -v apt-get >/dev/null 2>&1; then
-          apt-get update -qq && apt-get install -y -qq openssh-client rsync >/dev/null 2>&1
-        elif command -v yum >/dev/null 2>&1; then
-          yum install -y openssh-clients rsync >/dev/null 2>&1
-        else
-          echo "ERROR: No package manager found"
-          exit 1
-        fi
-        echo "openssh-client and rsync installed"
-
-    - name: Deploy preview to server
-      shell: sh
-      env:
-        PREVIEW_SSH_HOST: ${{ secrets.PREVIEW_SSH_HOST }}
-        PREVIEW_SSH_USER: ${{ secrets.PREVIEW_SSH_USER }}
-        PREVIEW_SSH_PORT: ${{ secrets.PREVIEW_SSH_PORT }}
-        PREVIEW_SSH_KEY: ${{ secrets.PREVIEW_SSH_KEY }}
-      run: |
-        set -eux
-        preview_host="${PREVIEW_SSH_HOST:-47.98.113.167}"
-        preview_user="${PREVIEW_SSH_USER:-root}"
-        preview_port="${PREVIEW_SSH_PORT:-22222}"
-        preview_dir="/var/www/preview/pr-${PR_NUMBER}"
-
-        mkdir -p ~/.ssh
-
-        # 查找可用的SSH密钥（优先用 secret 里专门为 preview 配置的 key）
-        key_path=""
-        if [ -n "${PREVIEW_SSH_KEY:-}" ]; then
-          key_path="$HOME/.ssh/id_ed25519"
-          printf '%s\n' "$PREVIEW_SSH_KEY" > "$key_path"
-          chmod 600 "$key_path"
-          echo "Using key from PREVIEW_SSH_KEY secret"
-        elif [ -f /root/.ssh/xiaoxia_runtime_builder ]; then
-          key_path="/root/.ssh/xiaoxia_runtime_builder"
-          echo "Using key: $key_path (builder key)"
-        elif [ -f "$HOME/.ssh/xiaoxia_runtime_builder" ]; then
-          key_path="$HOME/.ssh/xiaoxia_runtime_builder"
-          echo "Using key: $key_path (home key)"
-        else
-          echo "ERROR: No SSH key available"
-          ls -la ~/.ssh/ 2>/dev/null || true
-          ls -la /root/.ssh/ 2>/dev/null || true
-          exit 1
-        fi
-
-        # SSH密钥完整性自检
-        if ! ssh-keygen -y -f "$key_path" > /dev/null 2>&1; then
-          echo "ERROR: SSH密钥损坏（private key contents do not match public）"
-          echo "请检查 PREVIEW_SSH_KEY secret 中的私钥是否完整正确"
-          echo "私钥文件大小: $(wc -c < "$key_path") 字节"
-          head -2 "$key_path"
-          exit 1
-        fi
-        echo "SSH key integrity check passed"
-
-        ssh-keyscan -p "$preview_port" -H "$preview_host" >> ~/.ssh/known_hosts 2>/dev/null
-        echo "SSH keyscan done"
-
-        # 测试SSH连接
-        ssh -p "$preview_port" -i "$key_path" -o StrictHostKeyChecking=no "${preview_user}@${preview_host}" "echo SSH_CONNECTION_OK && hostname"
-        echo "SSH connection verified"
-
-        # 创建预览目录并上传文件
-        ssh -p "$preview_port" -i "$key_path" -o StrictHostKeyChecking=no "${preview_user}@${preview_host}" \
-          "mkdir -p ${preview_dir} && echo 'Preview directory created: ${preview_dir}'"
-
-        # 使用rsync上传dist目录内容
-        rsync -avz --delete -e "ssh -p ${preview_port} -i ${key_path} -o StrictHostKeyChecking=no" \
-          apps/web/dist/ \
-          "${preview_user}@${preview_host}:${preview_dir}/"
-
-        echo "Preview deployed to: ${preview_dir}"
-        echo "Preview URL: https://pr-${PR_NUMBER}.preview.xiaoxiajianji.com"
-
-    - name: Comment preview link on PR
-      shell: sh
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: |
-        set -eu
-        PR_NUMBER=$(echo "$GITHUB_REF" | sed 's|refs/pull/||; s|/.*||')
-        PREVIEW_URL="https://pr-${PR_NUMBER}.preview.xiaoxiajianji.com"
-        export PR_NUMBER PREVIEW_URL
-
-        COMMENT_BODY=$(python3 scripts/ci/preview_comment.py deploy)
-
-        API_URL="${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments"
-
-        EXISTING_COMMENT_ID=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" "$API_URL" | python3 -c "
-        import sys, json
-        try:
-            for c in json.load(sys.stdin):
-                if '预览环境已部署' in c.get('body', ''):
-                    print(c['id'])
-                    break
-        except Exception:
-            pass
-        ")
-
-        if [ -n "$EXISTING_COMMENT_ID" ]; then
-          curl -s -X PATCH \
-            -H "Authorization: token ${GITHUB_TOKEN}" \
-            -H "Content-Type: application/json" \
-            -d "$COMMENT_BODY" \
-            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/issues/comments/${EXISTING_COMMENT_ID}" \
-            > /dev/null
-          echo "Comment updated"
-        else
-          curl -s -X POST \
-            -H "Authorization: token ${GITHUB_TOKEN}" \
-            -H "Content-Type: application/json" \
-            -d "$COMMENT_BODY" \
-            "$API_URL" \
-            > /dev/null
-          echo "Comment posted"
-        fi
-
-    - name: Job duration summary
-      if: always()
-      shell: sh
-      run: |
-        set +eu
-        if [ -n "$JOB_START_TIME" ]; then
-          END_TIME=$(date +%s)
-          DURATION=$((END_TIME - JOB_START_TIME))
-          MINS=$((DURATION / 60))
-          SECS=$((DURATION % 60))
-          echo "JOB_DURATION_SECONDS=$DURATION" >> $GITHUB_ENV
-          echo "=== Job Duration: ${MINS}m${SECS}s ==="
-        else
-          echo "JOB_DURATION_SECONDS=0" >> $GITHUB_ENV
-          echo "=== Job Duration: unknown ==="
-        fi
-
-    - name: Notify on failure
-      continue-on-error: true
-      if: failure()
-      shell: sh
-      env:
-        CI_NOTIFY_WEBHOOK: ${{ secrets.CI_NOTIFY_WEBHOOK }}
-      run: |
-        set +e
-        NOTIFY_MODE=failure JOB_NAME="Deploy Preview Environment" python3 scripts/ci_notify.py
-    - name: Report CI trace
-      if: always()
-      shell: sh
-      env:
-        AGENTLOOP_LICENSE_KEY: ${{ secrets.AGENTLOOP_LICENSE_KEY }}
-      run: |
-        STATUS="ok"
-        [ ${{ job.status }} = "success" ] || STATUS="error"
-        START_TIME=""
-        [ -f /tmp/ci_job_start_time ] && START_TIME=$(cat /tmp/ci_job_start_time)
-        python3 scripts/ci/ci_trace_report.py --service xiaoxia-saas-ci --status $STATUS --start-time "$START_TIME" || true
-

.github/workflows/ci-cd.yml

@@ -1,96 +0,0 @@
-name: CI/CD Pipeline
-
-on:
-  push:
-    branches:
-      - main
-      - develop
-      - 'feature/**'
-      - 'bugfix/**'
-      - 'hotfix/**'
-      - 'release/**'
-  pull_request:
-    branches:
-      - main
-      - develop
-
-jobs:
-  validate:
-    name: Validate Code Quality And Tests
-    runs-on: ubuntu-latest
-    container: xiaoxia-ci-python:3.12
-
-    steps:
-      - name: Checkout code
-        run: |
-          python - <<'PY'
-          import os
-          import tarfile
-          import urllib.request
-
-          api_url = os.environ['GITHUB_API_URL']
-          repository = os.environ['GITHUB_REPOSITORY']
-          sha = os.environ['GITHUB_SHA']
-          token = os.environ.get('GITHUB_TOKEN', '')
-          archive_url = f"{api_url}/repos/{repository}/archive/{sha}.tar.gz"
-          request = urllib.request.Request(archive_url)
-          if token:
-              request.add_header('Authorization', f'token {token}')
-          with urllib.request.urlopen(request, timeout=120) as response:
-              with open('/tmp/repo.tar.gz', 'wb') as archive:
-                  archive.write(response.read())
-          with tarfile.open('/tmp/repo.tar.gz', 'r:gz') as archive:
-              members = archive.getmembers()
-              top_level = members[0].name.split('/')[0] + '/'
-              for member in members:
-                  member.name = member.name.removeprefix(top_level)
-                  if member.name:
-                      archive.extract(member, '.')
-          PY
-
-      - name: Verify CI environment
-        run: |
-          python --version
-          python -m pip --version
-          python -m black --version
-          python -m isort --version-number
-          python -m flake8 --version
-          bandit --version
-          pytest --version
-          echo "✅ Prebuilt CI environment is ready"
-
-      - name: Run code quality checks
-        run: |
-          python -m compileall -q alembic apps packages tests scripts
-          python -m black --check alembic apps packages tests scripts
-          python -m isort --check-only alembic apps packages tests scripts
-          python -m flake8 apps packages tests --count --statistics
-
-      - name: Run security scan
-        run: |
-          bandit -r apps packages -q
-
-      - name: Validate release scripts syntax
-        run: |
-          bash -n scripts/backup_postgres.sh
-          bash -n scripts/restore_postgres_plan.sh
-          bash -n scripts/init_production_env.sh
-
-      - name: Validate Alembic migrations
-        run: |
-          DATABASE_URL=postgresql+psycopg://postgres:postgres@localhost:5432/xiaoxia_saas \
-            python -m alembic upgrade head --sql > /tmp/alembic-upgrade.sql
-          test -s /tmp/alembic-upgrade.sql
-          grep -q "Running upgrade" /tmp/alembic-upgrade.sql
-          python scripts/check_schema_metadata.py
-
-      - name: Run tests
-        run: |
-          python -m pytest tests -q
-
-      - name: Build summary
-        if: github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/main'
-        run: |
-          echo "✅ Build completed successfully!"
-          echo "Branch: ${GITHUB_REF_NAME}"
-          echo "Commit: ${GITHUB_SHA}"

.github/workflows/release.yml

@@ -1,74 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - 'v*'
-
-jobs:
-  create-release:
-    name: Create Release
-    runs-on: ubuntu-latest
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    
-    - name: Generate changelog
-      id: changelog
-      run: |
-        # Extract changelog for this version
-        VERSION=${GITHUB_REF#refs/tags/}
-        echo "version=$VERSION" >> $GITHUB_OUTPUT
-    
-    - name: Create Release
-      uses: actions/create-release@v1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        tag_name: ${{ github.ref }}
-        release_name: Release ${{ steps.changelog.outputs.version }}
-        body: |
-          See [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/main/CHANGELOG.md) for details.
-        draft: false
-        prerelease: false
-
-  build-and-push:
-    name: Build and Push Docker Image
-    runs-on: ubuntu-latest
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-    
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-    
-    - name: Log in to Docker Hub
-      uses: docker/login-action@v3
-      with:
-        username: ${{ secrets.DOCKER_USERNAME }}
-        password: ${{ secrets.DOCKER_PASSWORD }}
-    
-    - name: Extract metadata
-      id: meta
-      uses: docker/metadata-action@v5
-      with:
-        images: xiaoxia/saas
-        tags: |
-          type=semver,pattern={{version}}
-          type=semver,pattern={{major}}.{{minor}}
-          type=semver,pattern={{major}}
-          type=raw,value=latest
-    
-    - name: Build and push
-      uses: docker/build-push-action@v5
-      with:
-        context: .
-        push: true
-        tags: ${{ steps.meta.outputs.tags }}
-        labels: ${{ steps.meta.outputs.labels }}
-        cache-from: type=gha
-        cache-to: type=gha,mode=max

.github/workflows/security.yml

@@ -1,59 +0,0 @@
-name: Security Scan
-
-on:
-  push:
-    branches: [ main, develop ]
-  pull_request:
-    branches: [ main ]
-  schedule:
-    # Run every Monday at 00:00 UTC
-    - cron: '0 0 * * 1'
-
-jobs:
-  security-scan:
-    name: Security Scan
-    runs-on: ubuntu-latest
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-    
-    - name: Set up Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: '3.12'
-    
-    - name: Install dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install safety bandit
-    
-    - name: Check for known security vulnerabilities
-      run: |
-        pip install -r requirements.txt
-        safety check --json
-    
-    - name: Run Bandit security linter
-      run: |
-        bandit -r packages/ apps/ -f json -o bandit-report.json || true
-        cat bandit-report.json
-    
-    - name: Upload security reports
-      uses: actions/upload-artifact@v3
-      if: always()
-      with:
-        name: security-reports
-        path: |
-          bandit-report.json
-
-  dependency-review:
-    name: Dependency Review
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
-    
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-    
-    - name: Dependency Review
-      uses: actions/dependency-review-action@v3

.gitignore

@@ -6,7 +6,6 @@ dist/
 coverage/
 
 # Python / backend
-.cache/
 .venv/
 venv/
 .venv-ci-root/
@@ -21,9 +20,9 @@ ruff_cache/
 .env
 .env.local
 .env.development
-.env.production
-.env.staging
+.env.production  # 生产环境配置不提交（包含敏感信息）
 !.env.example
+!.env.staging  # staging 配置可以提交
 
 # OS / editor
 .DS_Store
@@ -48,9 +47,5 @@ build/
 # Tracker temp files
 tracker_tasks.json
 
-frontend-v21-ui-prototype-final.html
-
-!.vscode/
-!.vscode/settings.json
-.vscode/extensions.json
-.coverage
+# Schema metadata snapshot
+schema-metadata-snapshot.json

.pre-commit-config.yaml

@@ -1,29 +0,0 @@
-repos:
-  - repo: https://github.com/psf/black
-    rev: 26.5.1
-    hooks:
-      - id: black
-        language_version: python3.12
-
-  - repo: https://github.com/pycqa/isort
-    rev: 8.0.1
-    hooks:
-      - id: isort
-        args: ["--profile", "black"]
-        language_version: python3.12
-
-  - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.0
-    hooks:
-      - id: ruff
-        args: [--fix]
-        language_version: python3.12
-
-  - repo: https://github.com/pre-commit/mirrors-prettier
-    rev: v4.0.0-alpha.11
-    hooks:
-      - id: prettier
-        name: prettier (frontend)
-        files: ^apps/web/.*\.(ts|tsx|js|jsx|css|scss|less|json|html|md|yaml|yml)$
-        additional_dependencies:
-          - prettier@3.4.2

.vscode/settings.json

@@ -1,49 +0,0 @@
-{
-  "[python]": {
-    "editor.defaultFormatter": "ms-python.black-formatter",
-    "editor.formatOnSave": true,
-    "editor.codeActionsOnSave": {
-      "source.organizeImports": "explicit"
-    }
-  },
-  "[typescript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[typescriptreact]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[javascript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[javascriptreact]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[json]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[css]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[scss]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[html]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "[markdown]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.formatOnSave": true
-  },
-  "prettier.requireConfig": true,
-  "isort.args": ["--profile", "black"],
-  "python.linting.ruffEnabled": true,
-  "python.analysis.typeCheckingMode": "basic"
-}

BUILD_TRIGGER.txt

@@ -1 +0,0 @@
-TRIGGER: 2026-06-25 16:20:18

CHANGELOG.md

@@ -1,276 +1,19 @@
-## [v0.1.110] - 2026-07-03
+# Changelog
 
-### 🔒 安全修复
+All notable changes to this project will be documented in this file.
 
-- 注册登录接口添加 RateLimitMiddleware 防止暴力破解
-- JWT logout 黑名单机制，防止令牌重放攻击
-- 生产环境禁用 Swagger 文档防止信息泄露
-- `/metrics` 端点添加 Bearer Token 认证
-- 禁用 SVG 上传防止 XSS 风险
-- 删除 `decode_token_unsafe()` 方法，消除不安全的 JWT 解码
-- 移除遗留 `tasks.py` 消除 Celery 任务名冲突
-- 清理全局 `except:pass`（22处）改为 `logger.warning` 记录异常
-
-### ✨ 功能
-
-- 添加剪辑计划时间线场景 API (`GET /edit-plans/{id}/timeline`)
-- 前端对接真实 API 替换 mock 数据
-
-### 🐛 Bug 修复
-
-- **[P1]** 修复登录故障 — `password_hasher` 导入错误
-- 订阅续费事务修复 — 支付回调在数据库事务中更新订阅状态
-- 账单返回空数组修复 — 从数据库查询账单记录
-- 修复 `Image.open()` 资源泄漏
-- 清理已移除 workspace 概念的残留引用
-- 修复 AssetLibrary/TemplateLibrary 类型错误
-- 修复前端 workspace 残留导致项目创建失败
-- 永久修复 nginx `proxy_pass` 配置
-- 添加 Docker DNS resolver 防止 API 容器重启后 502
-- 修复 worker healthcheck YAML 语法
-- 修复 204 响应体断言崩溃
-- 修复 Alembic 元数据漂移检测
-- 修复 migration 009 DEFAULT 表达式 PostgreSQL 兼容性
-
-### 🔄 重构与清理
-
-- 后端代码清理 — 移除死代码和无用文件
-- 前端代码清理 — 移除无用代码和遗留 demo
-- 代码精简优化 — 移除无用代码和重复定义
-- 后端代码 black/isort 格式化
-
-### 🧪 测试
-
-- 完善 E2E 错误场景测试，Playwright 接入 CI
-- API 集成测试补充（145 项通过）
-- 添加核心流程 E2E 测试
-
-### 🚀 CI/CD & 基础设施
-
-- Validate 阶段添加 PostgreSQL 服务支持
-- 所有 workflow checkout 添加 5 次指数退避重试
-- 启用 BuildKit 分布式缓存 + Gitea Registry 优化构建速度
-- Deploy 阶段全面修复（E2E 服务器/Worker venv/Registry 登录）
-- Docker 网络隔离 staging/production 环境
-- 修复 CI 代码质量检查（black/flake8/bandit）
-
----
-
-## [v0.1.88] - 2026-06-29
-
-### Phase 2 前端优化 - 完成 ✅
-
-**前端交互全面优化:**
-
-- 素材上传添加 project_id 参数
-- Drager 组件显示上传列表
-- 按钮防重复提交
-- 前端交互状态反馈补充（P0 第一批）
-
----
-
-## [v0.1.87] - 2026-06-29
-
-### Bug 修复
-
-- Docker compose 修复 mem_limit 冲突
-
----
-
-## [v0.1.86] - 2026-06-29
-
-### CI/CD 优化
-
-- CI 优化
-
----
-
-## [v0.1.85] - 2026-06-29
-
-### CI/CD 优化
-
-- CI 优化
-
----
-
-## [v0.1.84] - 2026-06-29
-
-### CI/CD 优化
-
-- CI runner label 匹配修复
-
----
-
-## [v0.1.83] - 2026-06-29
-
-### CI/CD 优化
-
-- CI SSH debug 修正
-
----
-
-## [v0.1.82] - 2026-06-29
-
-### CI/CD 优化
-
-- CI SSH debug 修正
-
----
-
-## [v0.1.81] - 2026-06-29
-
-### CI/CD 优化
-
-- CI runner label 匹配修复
-
----
-
-## [v0.1.80] - 2026-06-28
-
-### Bug 修复
-
-- 修复 redirect_slashes + 标题字段匹配
-
----
-
-## [v0.1.79] - 2026-06-28
-
-### Deployment
-
-- Re-trigger deployment
-
----
-
-## [v0.1.78] - 2026-06-28
-
-### Bug 修复
-
-- 修复 500 错误
-- CORS 配置修复
-- redirect_slashes 禁用
-
----
-
-## [v0.1.77] - 2026-06-28
-
-### Bug 修复
-
-- 修复标题库新建/编辑 — 前后端字段名不匹配导致 422
-
----
-
-### Phase 2 功能合并（v0.1.77 ~ v0.1.88）
-
-**新增功能 PR:**
-
-- PR#74: Phase 1 核心重构 — 标题库 API、配音库 API、去 Project 层清理
-- PR#75: Phase 2 查重功能前端页面
-- PR#76: Phase 2 查重功能后端 API（5 个端点）
-- PR#77: Phase 2 订阅管理前端页面
-- PR#78: Phase 2 订阅管理后端 API（5 个端点）
-- PR#79: 修复一键生成页面废弃 API 调用
-- PR#80: 回退域对象 extra_meta → metadata
-- PR#81: 删除查重 API 错误的 204 返回
-- PR#82: 查重上传接口错误信息不再泄露内部异常（安全审计）
-- PR#83: 订阅 + 查重单元测试（63 用例）
-- PR#84: 订阅管理前端对接真实 API
-- PR#85: 禁用 redirect_slashes 修复 307 重定向
-- PR#90: 标题库字段名修复
-- PR#91: 标题/配音创建 500 修复 + CORS
-- PR#94: 素材库新建自动获取默认 project_id
-- PR#97: 前端交互状态反馈全面补充
-
----
-
-
-- Docker compose 修复 mem_limit 冲突
-
----
-
-## [v0.1.86] - 2026-06-29
-
-### CI/CD 优化
-
-- CI 优化
-
----
-
-## [v0.1.85] - 2026-06-29
-
-### CI/CD 优化
-
-- CI 优化
-
----
-
-## [v0.1.84] - 2026-06-29
-
-### CI/CD 优化
-
-- CI runner label 匹配修复
-
----
-
-## [v0.1.83] - 2026-06-29
-
-### CI/CD 优化
-
-- CI SSH debug 修正
-
----
-
-## [v0.1.82] - 2026-06-29
-
-### CI/CD 优化
-
-- CI SSH debug 修正
-
----
-
-## [v0.1.81] - 2026-06-29
-
-### CI/CD 优化
-
-- CI runner label 匹配修复
-
----
-
-## [v0.1.80] - 2026-06-28
-
-### Bug 修复
-
-- 修复 redirect_slashes + 标题字段匹配
-
----
-
-## [v0.1.79] - 2026-06-28
-
-### Deployment
-
-- Re-trigger deployment
-
----
-
-## [v0.1.78] - 2026-06-28
-
-### Bug 修复
-
-- 修复 500 错误
-- CORS 配置修复
-- redirect_slashes 禁用
-
----
-
-## [v0.1.77] - 2026-06-28
-
-### Bug 修复
-
-- 修复标题库新建/编辑 — 前后端字段名不匹配导致 422
-
----
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.2.0] - 2026-06-19
+
+### Phase 7: 核心视频剪辑业务 - 完成 ✅
+
+**完成进度:** 100%  
+**状态:** 已完成并验证
+
 #### Added
 
 **素材管理:**

CODE_OF_CONDUCT.md

@@ -1,43 +0,0 @@
-# Code of Conduct
-
-## Our Pledge
-
-We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
-
-We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
-
-## Our Standards
-
-Examples of behavior that contributes to a positive environment:
-
-* Using welcoming and inclusive language
-* Being respectful of differing viewpoints and experiences
-* Gracefully accepting constructive criticism
-* Focusing on what is best for the community
-* Showing empathy towards other community members
-
-Examples of unacceptable behavior:
-
-* The use of sexualized language or imagery
-* Trolling, insulting/derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information without explicit permission
-* Other conduct which could reasonably be considered inappropriate in a professional setting
-
-## Enforcement Responsibilities
-
-Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful.
-
-## Scope
-
-This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at support@xiaoxia-saas.com.
-
-All complaints will be reviewed and investigated promptly and fairly.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.0.

COMPLETE_TASK_LIST.md

@@ -1,347 +0,0 @@
-# 小虾 SAAS 完整任务清单
-
-**最后更新：** 2026-06-17 16:35 GMT+8  
-**整理者：** 小虾 🦐
-
----
-
-## 📊 总览
-
-| Phase | 任务总数 | 已完成 | 待完成 | 完成率 |
-|-------|---------|--------|--------|--------|
-| Phase 1-2 | 30 | 30 | 0 | 100% |
-| Phase 3 | 5 | 2 | 3 | 40% |
-| Phase 4 | 68 | 56 | 12 | 82.4% |
-| Phase 5 | 15 | 0 | 15 | 0% |
-| Phase 6 | 40 | 40 | 0 | 100% |
-| Phase 7 | 30 | 0 | 30 | 0% |
-| **总计** | **188** | **128** | **60** | **68.1%** |
-
----
-
-## Phase 1-2: 基础架构与项目管理 (30/30) ✅
-
-### 核心架构 (10/10) ✅
-1. ✅ Clean Architecture 分层设计
-2. ✅ Domain 层实现（实体和值对象）
-3. ✅ Ports 层接口定义
-4. ✅ Application 层用例实现
-5. ✅ Adapters 层适配器实现
-6. ✅ 双持久化实现（InMemory + PostgreSQL）
-7. ✅ Docker Compose 开发环境
-8. ✅ Alembic 数据库迁移
-9. ✅ 依赖注入容器
-10. ✅ 配置管理系统
-
-### 核心业务对象 (10/10) ✅
-11. ✅ User（用户实体）
-12. ✅ Workspace（工作空间实体）
-13. ✅ Project（项目实体）
-14. ✅ AssetLibrary（素材库实体）
-15. ✅ Asset（素材实体）
-16. ✅ IngestJob（入库任务实体）
-17. ✅ ClassificationJob（分类任务实体）
-18. ✅ Task（任务管理实体）
-19. ✅ Milestone（里程碑实体）
-20. ✅ TaskIssue（任务问题实体）
-
-### 核心业务流程 (5/5) ✅
-21. ✅ 上传入库链路
-22. ✅ 分类任务链路
-23. ✅ 异步任务处理（Celery）
-24. ✅ 任务状态跟踪
-25. ✅ 里程碑管理流程
-
-### 基础设施 (5/5) ✅
-26. ✅ MinIO 文件存储
-27. ✅ PostgreSQL 数据库
-28. ✅ Redis 消息队列
-29. ✅ Celery Worker
-30. ✅ 集成测试（17个）
-
----
-
-## Phase 3: 部署与备案 (2/5)
-
-### 部署配置 (2/2) ✅
-1. ✅ 服务器部署（47.98.113.167）
-2. ✅ Nginx 反向代理（8088/8089）
-
-### 备案与域名 (0/3) ⏳
-3. ⏳ 域名备案通过（等待审核）
-4. ⏳ HTTPS 证书申请
-5. ⏳ 切换正式域名
-
----
-
-## Phase 4: SAAS 产品化 (56/68)
-
-### 认证系统 (9/9) ✅
-1. ✅ JWT Service 实现
-2. ✅ Password Hasher 实现
-3. ✅ Redis Session Store
-4. ✅ Email Service 实现
-5. ✅ 用户注册 API
-6. ✅ 邮箱验证 API
-7. ✅ 用户登录 API
-8. ✅ 用户登出 API
-9. ✅ 密码重置 API
-
-### 多租户系统 (9/9) ✅
-10. ✅ 创建工作空间 API
-11. ✅ 邀请成员 API
-12. ✅ 接受/拒绝邀请 API
-13. ✅ 移除成员 API
-14. ✅ 离开工作空间 API
-15. ✅ 更新成员角色 API
-16. ✅ 列出工作空间 API
-17. ✅ 工作空间详情 API
-18. ✅ 列出成员 API
-
-### 权限系统 (3/3) ✅
-19. ✅ Permission Checker
-20. ✅ RBAC 权限模型
-21. ✅ 权限中间件
-
-### 订阅系统 (4/8)
-22. ✅ 订阅计划定义
-23. ✅ 升级订阅 API
-24. ✅ 取消订阅 API
-25. ✅ 配额检查工具
-26. ⏳ 支付宝 SDK 集成
-27. ⏳ 微信支付 SDK 集成
-28. ⏳ 账单生成系统
-29. ⏳ 发票管理
-
-### Repository 层 (13/13) ✅
-30. ✅ UserRepository 接口
-31. ✅ UserRepository InMemory 实现
-32. ✅ UserRepository PostgreSQL 实现
-33. ✅ WorkspaceRepository 接口
-34. ✅ WorkspaceRepository InMemory 实现
-35. ✅ WorkspaceRepository PostgreSQL 实现
-36. ✅ WorkspaceMemberRepository 接口
-37. ✅ WorkspaceMemberRepository InMemory 实现
-38. ✅ WorkspaceMemberRepository PostgreSQL 实现
-39. ✅ WorkspaceInvitationRepository 接口
-40. ✅ WorkspaceInvitationRepository InMemory 实现
-41. ✅ WorkspaceInvitationRepository PostgreSQL 实现
-42. ✅ Database Migration 脚本
-
-### API 层 (9/9) ✅
-43. ✅ FastAPI 路由层
-44. ✅ API 文档（Swagger）
-45. ✅ 错误处理中间件
-46. ✅ 参数验证
-47. ✅ 认证中间件
-48. ✅ 权限中间件
-49. ✅ API 版本管理
-50. ✅ 健康检查接口
-51. ✅ CORS 配置
-
-### 高级功能 (2/8)
-52. ✅ Celery Worker 配置
-53. ✅ Redis 缓存集成
-54. ⏳ 文件上传（OSS）
-55. ⏳ 搜索功能
-56. ⏳ WebSocket 实时通信
-57. ⏳ Webhook 支持
-58. ⏳ 缓存优化
-59. ⏳ 分布式锁
-
-### 测试与 CI/CD (5/7)
-60. ✅ GitHub Actions CI/CD
-61. ✅ 单元测试（170个）
-62. ✅ 集成测试
-63. ✅ 连接池优化
-64. ✅ 性能监控
-65. ⏳ 性能测试
-66. ⏳ 安全测试
-
-### 文档 (6/6) ✅
-67. ✅ API 文档编写
-68. ✅ 部署文档
-69. ✅ 开发文档
-70. ✅ MIT 开源许可
-71. ✅ README 完善
-72. ✅ CONTRIBUTING 指南
-
----
-
-## Phase 5: 支付与商业化 (0/15)
-
-### 支付集成 (0/7)
-1. ⏳ 支付宝 SDK 集成
-2. ⏳ 微信支付 SDK 集成
-3. ⏳ Stripe 国际支付
-4. ⏳ 账单生成系统
-5. ⏳ 发票管理
-6. ⏳ 订阅自动续费
-7. ⏳ 支付回调处理
-
-### 商业功能 (0/8)
-8. ⏳ 优惠券系统
-9. ⏳ 推荐奖励
-10. ⏳ 企业定制套餐
-11. ⏳ 批量购买折扣
-12. ⏳ 退款管理
-13. ⏳ 发票开具
-14. ⏳ 财务报表
-15. ⏳ 营收统计
-
----
-
-## Phase 6: 前端完善 (40/40) ✅
-
-### 项目基础 (7/7) ✅
-1. ✅ Vite + React + TypeScript 初始化
-2. ✅ 配置 package.json
-3. ✅ 基础布局组件
-4. ✅ API 客户端封装
-5. ✅ 路由配置
-6. ✅ 设计系统配置
-7. ✅ TypeScript 类型定义
-
-### 认证系统 (5/5) ✅
-8. ✅ 登录页面
-9. ✅ 注册页面
-10. ✅ 忘记密码页面
-11. ✅ 重置密码页面
-12. ✅ Token 管理和刷新
-
-### 工作空间管理 (6/6) ✅
-13. ✅ 工作空间列表页面
-14. ✅ 工作空间详情页面
-15. ✅ 成员列表和管理
-16. ✅ 邀请成员功能
-17. ✅ 权限矩阵展示
-18. ✅ 工作空间设置
-
-### 订阅管理 (5/5) ✅
-19. ✅ 套餐选择页面
-20. ✅ 升级流程页面
-21. ✅ 配额展示组件
-22. ✅ 账单页面
-23. ✅ 订阅状态显示
-
-### Admin 后台 (5/5) ✅
-24. ✅ Dashboard 仪表盘
-25. ✅ 用户管理页面
-26. ✅ 用户操作功能
-27. ✅ 系统监控页面
-28. ✅ 日志查看器
-
-### 个人中心 (4/4) ✅
-29. ✅ 个人设置页面
-30. ✅ 账号安全设置
-31. ✅ 通知设置
-32. ✅ Session 管理
-
-### 测试与优化 (8/8) ✅
-33. ✅ 单元测试
-34. ✅ E2E 测试
-35. ✅ 测试覆盖率报告
-36. ✅ 性能优化
-37. ✅ 构建优化
-38. ✅ 依赖优化
-39. ✅ CSS 优化
-40. ✅ 生产构建配置
-
----
-
-## Phase 7: 核心业务功能 (0/30)
-
-### 视频处理 (0/10)
-1. ⏳ 视频上传（断点续传）
-2. ⏳ 视频转码（多格式）
-3. ⏳ 视频剪辑（时间轴）
-4. ⏳ 字幕生成（AI）
-5. ⏳ 配音合成（TTS）
-6. ⏳ 特效添加
-7. ⏳ 批量处理
-8. ⏳ 视频预览
-9. ⏳ 视频导出
-10. ⏳ 视频分享
-
-### 素材管理 (0/10)
-11. ⏳ 素材库优化
-12. ⏳ 智能分类
-13. ⏳ 标签管理
-14. ⏳ 搜索优化
-15. ⏳ 版本管理
-16. ⏳ 素材回收站
-17. ⏳ 素材分享
-18. ⏳ 素材导入
-19. ⏳ 素材导出
-20. ⏳ 素材统计
-
-### AI 能力 (0/10)
-21. ⏳ 智能剪辑推荐
-22. ⏳ 场景识别
-23. ⏳ 人物追踪
-24. ⏳ 语音识别
-25. ⏳ 情感分析
-26. ⏳ 自动字幕
-27. ⏳ 自动配音
-28. ⏳ 自动特效
-29. ⏳ AI 脚本生成
-30. ⏳ AI 视频摘要
-
----
-
-## 📈 进度可视化
-
-```
-Phase 1-2: ████████████████████ 100% (30/30)
-Phase 3:   ████░░░░░░░░░░░░░░░░  40% (2/5)
-Phase 4:   ████████████████░░░░  82% (56/68)
-Phase 5:   ░░░░░░░░░░░░░░░░░░░░   0% (0/15)
-Phase 6:   ████████████████████ 100% (40/40)
-Phase 7:   ░░░░░░░░░░░░░░░░░░░░   0% (0/30)
--------------------------------------------
-总体:      █████████████░░░░░░░  68% (128/188)
-```
-
----
-
-## 🎯 优先级排序
-
-### 紧急且重要（立即执行）
-1. Phase 3: 等待备案通过
-2. Phase 4: 支付集成（4个任务）
-3. Phase 4: 文件上传 OSS（1个任务）
-
-### 重要但不紧急（近期规划）
-4. Phase 5: 商业化功能（15个任务）
-5. Phase 7: 视频处理核心功能（10个任务）
-6. Phase 7: AI 能力集成（10个任务）
-
-### 可选优化（后期考虑）
-7. Phase 4: WebSocket、Webhook（2个任务）
-8. Phase 4: 性能测试、安全测试（2个任务）
-9. Phase 7: 素材管理优化（10个任务）
-
----
-
-## 💡 关键决策记录
-
-1. **Phase 1-2 已完全完成**，奠定了坚实的架构基础
-2. **Phase 4 核心功能完成**，系统已生产就绪
-3. **Phase 6 前端 100% 完成**，用户界面完整可用
-4. **Phase 3 阻塞于备案**，等待工信部审核
-5. **Phase 5 和 Phase 7 尚未启动**，等待商业化和核心功能开发
-
----
-
-## 📞 说明
-
-- ✅ = 已完成
-- ⏳ = 待完成
-- 🔄 = 进行中
-
-**老大，这是完整准确的任务清单，共 188 个任务，已完成 128 个（68.1%）！**
-
----
-
-**清单生成时间:** 2026-06-17 16:35 GMT+8  
-**整理者:** 小虾 🦐

CONTRIBUTING.md

@@ -1,305 +0,0 @@
-# 贡献指南
-
-感谢你对小虾 SaaS 项目的兴趣！
-
-## 🚀 快速开始
-
-### 1. Fork 和克隆
-
-```bash
-# Fork 项目到你的账号
-# 然后克隆
-git clone https://github.com/your-username/xiaoxia-saas.git
-cd xiaoxia-saas
-```
-
-### 2. 设置开发环境
-
-```bash
-# 创建虚拟环境
-python -m venv venv
-source venv/bin/activate  # Linux/Mac
-# venv\Scripts\activate  # Windows
-
-# 安装依赖
-pip install -r requirements.txt
-
-# 使用内存数据库（无需 PostgreSQL）
-echo "USE_IN_MEMORY_DB=true" > .env
-
-# 启动开发服务器
-uvicorn apps.api.main:app --reload
-```
-
-### 3. 运行测试
-
-```bash
-# 运行所有测试
-pytest tests/ -v
-
-# 运行单元测试
-pytest tests/unit -v
-
-# 生成覆盖率报告
-pytest --cov=packages --cov-report=html
-```
-
----
-
-## 📝 提交规范
-
-### Commit Message 格式
-
-```
-<type>(<scope>): <subject>
-
-<body>
-
-<footer>
-```
-
-**Type:**
-- `feat`: 新功能
-- `fix`: Bug 修复
-- `docs`: 文档更新
-- `style`: 代码格式（不影响功能）
-- `refactor`: 重构
-- `test`: 测试相关
-- `chore`: 构建/工具相关
-
-**示例:**
-```
-feat(auth): add password reset functionality
-
-- Add RequestPasswordResetUseCase
-- Send reset email with token
-- Implement ResetPasswordUseCase
-- Add unit tests
-
-Closes #123
-```
-
----
-
-## 🏗️ 代码规范
-
-### Python 代码风格
-
-- 遵循 PEP 8
-- 使用类型注解
-- 函数和类添加 docstring
-- 每个文件顶部添加模块说明
-
-### 代码格式化
-
-```bash
-# 安装工具
-pip install black isort
-
-# 格式化代码
-black packages/ apps/ tests/
-isort packages/ apps/ tests/
-```
-
-### 架构原则
-
-- 遵循 Clean Architecture
-- 业务逻辑在 Application 层
-- 基础设施在 Adapters 层
-- 保持层次间依赖方向正确
-
----
-
-## 🧪 测试要求
-
-### 单元测试
-
-- 所有新功能必须有单元测试
-- 测试覆盖率不低于 80%
-- 使用 pytest fixtures
-- Mock 外部依赖
-
-### 测试示例
-
-```python
-def test_create_workspace_success(use_case, mock_repo):
-    \"\"\"测试创建工作空间成功\"\"\"
-    request = CreateWorkspaceRequest(
-        name="Test",
-        owner_user_id="user-123",
-    )
-    
-    response, error = use_case.execute(request)
-    
-    assert error is None
-    assert response.name == "Test"
-```
-
----
-
-## 🔄 Pull Request 流程
-
-### 1. 创建分支
-
-```bash
-# 从 main 创建功能分支
-git checkout -b feat/your-feature-name
-```
-
-### 2. 开发和测试
-
-```bash
-# 编写代码
-# 运行测试
-pytest tests/ -v
-
-# 提交
-git add .
-git commit -m "feat: your feature description"
-```
-
-### 3. 推送和创建 PR
-
-```bash
-# 推送到你的 fork
-git push origin feat/your-feature-name
-
-# 在 GitHub 上创建 Pull Request
-```
-
-### 4. PR 描述模板
-
-```markdown
-## 变更说明
-简要描述此 PR 的目的
-
-## 变更类型
-- [ ] 新功能
-- [ ] Bug 修复
-- [ ] 文档更新
-- [ ] 重构
-- [ ] 其他
-
-## 测试
-- [ ] 添加了单元测试
-- [ ] 所有测试通过
-- [ ] 手动测试通过
-
-## 截图（如适用）
-添加相关截图
-
-## 相关 Issue
-Closes #issue_number
-```
-
----
-
-## 🐛 报告 Bug
-
-### Bug 报告模板
-
-```markdown
-**描述**
-清晰描述 bug
-
-**复现步骤**
-1. 进入 '...'
-2. 点击 '...'
-3. 滚动到 '...'
-4. 看到错误
-
-**期望行为**
-描述期望发生什么
-
-**实际行为**
-描述实际发生了什么
-
-**环境**
-- OS: [e.g. Ubuntu 22.04]
-- Python: [e.g. 3.12]
-- 浏览器: [e.g. Chrome 120]
-
-**额外信息**
-添加任何其他相关信息
-```
-
----
-
-## 💡 功能建议
-
-### 功能请求模板
-
-```markdown
-**功能描述**
-简要描述建议的功能
-
-**问题**
-此功能解决什么问题？
-
-**建议方案**
-描述你期望的解决方案
-
-**替代方案**
-考虑过哪些替代方案？
-
-**额外信息**
-其他相关信息
-```
-
----
-
-## 📚 文档贡献
-
-### 文档类型
-
-- README 和快速开始
-- API 使用指南
-- 部署文档
-- 故障排查
-- 架构说明
-
-### 文档规范
-
-- 使用 Markdown 格式
-- 代码示例使用代码块
-- 添加适当的标题层级
-- 包含实际可运行的示例
-
----
-
-## 🎯 优先级
-
-### 高优先级
-- Bug 修复
-- 安全漏洞修复
-- 性能优化
-- 核心功能增强
-
-### 中优先级
-- 新功能
-- 代码重构
-- 测试增强
-- 文档改进
-
-### 低优先级
-- 代码风格调整
-- 次要功能
-- 实验性功能
-
----
-
-## 📞 联系方式
-
-- **GitHub Issues**: 报告 bug 和功能请求
-- **Pull Requests**: 贡献代码
-- **Email**: support@xiaoxia-saas.com
-
----
-
-## 📄 许可证
-
-贡献的代码将使用与项目相同的许可证。
-
----
-
-感谢你的贡献！🎉

README.md

@@ -1,68 +1,70 @@
-# 小虾 SaaS - 自动化视频剪辑平台
+# 小虾 SaaS - 自动化剪辑 SaaS 平台
 
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Python 3.12+](https://img.shields.io/badge/python-3.12+-blue.svg)](https://www.python.org/downloads/)
 [![FastAPI](https://img.shields.io/badge/FastAPI-0.115.0-009688.svg)](https://fastapi.tiangolo.com)
 [![PostgreSQL](https://img.shields.io/badge/PostgreSQL-16-336791.svg)](https://www.postgresql.org/)
 
-自动化视频剪辑 SaaS 平台，支持素材上传、AI 分类、智能剪辑计划生成、自动化视频合成与成片管理。
+一个功能完整、生产就绪的多租户 SaaS 平台，专为自动化视频剪辑服务设计。
 
 ---
 
-## ✨ 核心功能
+## ✨ 核心特性
 
-### 🎬 视频剪辑主链路
-- 素材上传（直传 OSS + 分片上传大文件，最大 2GB）
-- AI 智能分类与质量评分
-- 4 种剪辑模式：one_take / pip（画中画）/ voice_over（口播+B-roll）/ voice_pip
-- 剪辑计划模板 + 智能生成
-- 自动化视频合成任务（Celery 异步）
-- 成片下载与审核管理
-- 资产诊断（素材就绪度评估、缺口分析）
+### 🎬 视频剪辑主链路（Phase 7 已完成）
+- 素材上传与管理
+- AI 智能分类
+- 自动化视频生成
+- 成片下载与管理
 
-### 🔐 认证系统
-- JWT Bearer Token 认证
-- 邮箱注册 + 邮箱验证
-- 密码重置（邮箱找回）
+### 🔐 完整的认证系统
+- JWT 认证（access + refresh token）
+- 邮箱验证和密码重置
+- Session 管理
 - bcrypt 密码加密
 
-### 📋 项目管理
-- 项目 CRUD + 共享
-- 任务管理（创建/更新/状态流转/进度追踪）
-- 里程碑管理
-- 任务问题追踪
+### 🏢 多租户架构
+- 工作空间隔离
+- 团队成员管理
+- 基于角色的权限控制（Owner/Admin/Member/Viewer）
+- 邀请和审批流程
 
-### 📊 素材库管理
-- 素材库创建与管理
-- 素材上传、审核状态流转（pending_review → approved/rejected）
-- 素材诊断（就绪度评分、缺口分析、智能视图）
+### 💸 订阅管理
+- 3 级订阅计划（Free/Pro/Enterprise）
+- 配额管理（项目数/存储空间）
+- 升级和取消订阅
+
+### ⚡ 高性能
+- 数据库连接池（5-6x 性能提升）
+- 请求日志和监控
+- 慢查询检测
+- 健康检查（Kubernetes 就绪）
 
 ---
 
 ## 🚀 快速开始
 
-### 方式 1: Docker Compose（推荐）
+### 方式 1: Docker（推荐）
 
 ```bash
 # 1. 克隆仓库
-git clone https://git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas.git
+git clone https://github.com/your-org/xiaoxia-saas.git
 cd xiaoxia-saas
 
-# 2. 配置环境变量
-cp .env.example .env
-# 编辑 .env 填写数据库、Redis、OSS 等配置
-
-# 3. 启动所有服务
+# 2. 启动所有服务
 docker-compose up -d
 
-# 4. 访问 API 文档
+# 3. 访问 API 文档
 open http://localhost:8000/docs
 ```
 
+就这么简单！🎉
+
 ### 方式 2: 本地开发
 
 ```bash
 # 1. 克隆仓库
-git clone https://git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas.git
+git clone https://github.com/your-org/xiaoxia-saas.git
 cd xiaoxia-saas
 
 # 2. 创建虚拟环境
@@ -72,90 +74,36 @@ source venv/bin/activate  # Windows: venv\Scripts\activate
 # 3. 安装依赖
 pip install -r requirements.txt
 
-# 4. 配置环境变量
-cp .env.example .env
-
-# 5. 启动 API 服务
+# 4. 启动开发服务器
 uvicorn apps.api.main:app --reload
 
-# 6. 访问 API 文档
+# 5. 访问 API 文档
 open http://localhost:8000/docs
 ```
 
 ---
 
-## 📚 API 文档
+## 📚 主要文档
 
-### 交互式文档
-- **Swagger UI**: https://saas-api.xiaoxiajianji.com/docs
-- **OpenAPI Schema**: https://saas-api.xiaoxiajianji.com/openapi.json
+### 快速入口
+- **[API 主线清单](docs/API-MAINLINE.md)** - 所有 API endpoints 总览
+- **[代码状态标注](docs/CODE-STATUS.md)** - 代码库导航指南
+- **[API 使用指南](docs/API-GUIDE.md)** - API 详细用法
 
-### 核心 API 路径
+### Phase 7 交付
+- **[Phase 7 进度](docs/PHASE7-PROGRESS.md)** - 核心视频剪辑业务已完成
+- **[Phase 7 设计](docs/PHASE7-DESIGN.md)** - 设计文档
 
-**认证** (`/api/v1/auth`)
+### 基础设施
+- **[Docker 部署指南](docs/DOCKER-DEPLOYMENT.md)**
+- **[CI/CD 文档](docs/CI-CD.md)**
+- **[性能监控指南](docs/PERFORMANCE-MONITORING.md)**
+- **[健康检查指南](docs/HEALTH-CHECKS.md)**
 
-| 方法 | 路径 | 说明 |
-|------|------|------|
-| POST | `/register` | 用户注册 |
-| POST | `/login` | 用户登录 |
-| GET | `/me` | 获取当前用户信息 |
-| POST | `/password/forgot` | 忘记密码 |
-| POST | `/password/reset` | 重置密码 |
-
-**视频剪辑主链路**
-
-```
-上传素材 → POST /api/v1/upload（直传）或 /api/v1/upload/chunk/init（分片）
-   ↓
-创建素材 → POST /api/v1/assets
-   ↓
-AI 分类 → POST /api/v1/classification-jobs
-   ↓
-生成剪辑计划 → POST /api/v1/projects/{id}/edit-plans/auto-generate
-   ↓
-创建生成任务 → POST /api/v1/generation/tasks/
-   ↓
-查询结果 → GET /api/v1/generation/tasks/{task_id}/results/
-   ↓
-获取成片 → GET /api/v1/generated-videos/{video_id}/download-url
-```
-
-**项目管理** (`/api/v1/project-management`)
-
-| 方法 | 路径 | 说明 |
-|------|------|------|
-| GET/POST | `/tasks` | 任务列表/创建 |
-| PATCH | `/tasks/{id}` | 更新任务信息 |
-| PATCH | `/tasks/{id}/status` | 更新任务状态 |
-| PATCH | `/tasks/{id}/progress` | 更新任务进度 |
-| GET/POST | `/milestones` | 里程碑列表/创建 |
-| GET/POST | `/issues` | 问题列表/创建 |
-| PATCH | `/issues/{id}/resolve` | 解决问题 |
-
-**素材与上传**
-
-| 方法 | 路径 | 说明 |
-|------|------|------|
-| POST | `/api/v1/upload` | 直传素材（multipart/form-data） |
-| POST | `/api/v1/upload/direct/prepare` | 准备 OSS 直传签名 |
-| POST | `/api/v1/upload/direct/complete` | 确认直传完成 |
-| POST | `/api/v1/upload/chunk/init` | 初始化分片上传 |
-| POST | `/api/v1/upload/chunk/{id}/{index}` | 上传分片 |
-| POST | `/api/v1/upload/chunk/{id}/complete` | 完成分片上传 |
-| GET | `/api/v1/assets` | 素材列表 |
-| PATCH | `/api/v1/assets/{id}/review` | 更新素材审核状态 |
-| GET | `/api/v1/projects/{id}/asset-diagnosis` | 资产诊断 |
-
-**成片管理** (`/api/v1/generated-videos`)
-
-| 方法 | 路径 | 说明 |
-|------|------|------|
-| GET | `/` | 成片列表 |
-| GET | `/{video_id}` | 成片详情 |
-| GET | `/{video_id}/download-url` | 下载链接 |
-| PATCH | `/{video_id}/review` | 审核状态 |
-
-完整 API 列表请查看 [API 主线清单](docs/API-MAINLINE.md)
+### 开发规范
+- **[Git 工作流](docs/GIT-WORKFLOW.md)**
+- **[环境配置指南](docs/ENVIRONMENT-CONFIG.md)**
+- **[贡献指南](CONTRIBUTING.md)**
 
 ---
 
@@ -163,49 +111,61 @@ AI 分类 → POST /api/v1/classification-jobs
 
 ```
 小虾 SaaS
-├── packages/              # 核心业务逻辑（Clean Architecture）
-│   ├── domain/           # 领域模型（dataclass）
-│   ├── application/      # 用例（Use Cases）
-│   ├── ports/            # 接口定义（抽象端口）
-│   └── adapters/         # 适配器实现（SQLAlchemy、Redis、SMTP 等）
+├── packages/              # 核心业务逻辑
+│   ├── domain/           # 领域模型
+│   ├── application/      # 用例
+│   ├── ports/            # 接口定义
+│   └── adapters/         # 适配器实现
 ├── apps/                 # 应用层
-│   ├── api/             # FastAPI 应用 + 路由 + Pydantic schemas
-│   ├── web/             # React + Vite 前端
-│   └── worker/          # Celery 异步任务（视频处理、分类等）
-├── migrations/           # Alembic 数据库迁移
+│   ├── api/             # FastAPI 应用
+│   ├── web/             # React 前端
+│   └── worker/          # Celery worker
+├── migrations/           # 数据库迁移
 ├── tests/               # 测试
 │   ├── unit/           # 单元测试
-│   ├── integration/    # 集成测试
-│   └── e2e/            # 端到端测试
+│   └── integration/    # 集成测试
 └── docs/                # 文档
 ```
 
 **设计模式:**
-- Clean Architecture（依赖方向：外层 → 内层）
-- 依赖注入（FastAPI Depends）
-- Repository 模式（通过 ports 抽象）
+- Clean Architecture
+- 依赖注入
+- Repository 模式
 - Domain-Driven Design
 
 ---
 
-## 🛠️ 技术栈
+## 🔑 核心 API 路径
 
-**后端:**
-- Python 3.12 + FastAPI 0.115.0
-- PostgreSQL 16（生产）
-- Redis 7（缓存 + Celery Broker）
-- Celery（异步任务：视频处理、素材导入、分类）
-- 阿里云 OSS（文件存储）
+### 视频剪辑主链路（Phase 7）
 
-**前端:**
-- React 18 + TypeScript
-- Vite（构建工具）
-- Ant Design（UI 组件）
+```
+上传素材
+  ↓
+POST /api/v1/upload
 
-**部署:**
-- Docker + Docker Compose
-- Gitea + Gitea Actions（CI/CD）
-- Nginx（反向代理）
+创建 Asset
+  ↓
+POST /api/v1/assets
+
+发起分类
+  ↓
+POST /api/v1/classification-jobs
+
+创建生成任务
+  ↓
+POST /api/v1/generation/tasks
+
+查询生成结果
+  ↓
+GET /api/v1/generation/tasks/{task_id}/results
+
+获取下载链接
+  ↓
+GET /api/v1/generated-videos/{video_id}/download-url
+```
+
+完整 API 列表请查看 [API 主线清单](docs/API-MAINLINE.md)
 
 ---
 
@@ -225,32 +185,51 @@ pytest tests/integration -v
 pytest --cov=packages --cov-report=html
 ```
 
+**测试统计:**
+- 单元测试: 17+ 个 ✅
+- 集成测试: 6+ 个 ✅
+- 测试覆盖率: 持续提升中
+
+---
+
+## 🛠️ 技术栈
+
+**后端:**
+- Python 3.12
+- FastAPI 0.115.0
+- PostgreSQL 16
+- Redis 7
+- Celery
+- MinIO
+
+**前端:**
+- React 18
+- TypeScript
+- Vite
+- Ant Design
+
+**测试:**
+- pytest
+- pytest-asyncio
+- pytest-cov
+
+**部署:**
+- Docker
+- Docker Compose
+- Gitea Actions
+
 ---
 
 ## 📊 当前状态
 
 | 模块 | 状态 |
 |------|------|
-| 视频剪辑主链路（Phase 7） | ✅ 已完成 |
-| 分片上传（最大 2GB） | ✅ 已完成 |
-| 4 种剪辑模式 | ✅ 已完成 |
-| 项目管理 + 任务追踪 | ✅ 已完成 |
-| 资产诊断 | ✅ 已完成 |
-| 认证系统（JWT） | ✅ 已完成 |
-| CI/CD 流水线 | ✅ 运行中 |
-| 前端界面（Vite） | ✅ 已完成 |
-
----
-
-## 📄 更多文档
-
-- [API 主线清单](docs/API-MAINLINE.md) - 全部端点总览
-- [API 使用指南](docs/API-GUIDE.md) - 详细用法
-- [代码状态标注](docs/CODE-STATUS.md) - 代码库导航
-- [Docker 部署指南](docs/DOCKER-DEPLOYMENT.md)
-- [CI/CD 文档](docs/CI-CD.md)
-- [Git 工作流](docs/GIT-WORKFLOW.md)
-- [环境配置指南](docs/ENVIRONMENT-CONFIG.md)
+| Phase 7（视频剪辑主链） | ✅ 已完成 |
+| CI/CD 稳定性 | ✅ 已修复 |
+| 认证系统 | ✅ 完整 |
+| 多租户架构 | ✅ 完整 |
+| 订阅系统 | ✅ 完整 |
+| 前端联调 | ✅ 完成 |
 
 ---
 
@@ -258,8 +237,43 @@ pytest --cov=packages --cov-report=html
 
 欢迎贡献！请查看 [贡献指南](CONTRIBUTING.md)
 
-**仓库地址**: https://git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas
+1. Fork 项目
+2. 创建分支 (`git checkout -b feature/AmazingFeature`)
+3. 提交更改 (`git commit -m 'feat: Add some AmazingFeature'`)
+4. 推送到分支 (`git push origin feature/AmazingFeature`)
+5. 创建 Pull Request
 
 ---
 
-**License**: MIT
+## 📄 许可证
+
+本项目采用 MIT 许可证 - 查看 [LICENSE](LICENSE) 文件了解详情
+
+---
+
+## 📞 联系方式
+
+- **问题反馈:** GitHub Issues
+- **文档:** 参考 `docs/` 目录
+
+---
+
+## 🎉 致谢
+
+感谢所有贡献者和使用者！
+
+**开发团队:** 小虾 🦐
+
+---
+
+**⭐ 如果这个项目对你有帮助，请给一个 Star！**
+
+---
+
+**最后更新**: 2026-06-19  
+**当前版本**: Phase 7 完成
+ci test Fri Jun 26 06:59:37 PM CST 2026
+debug test Fri Jun 26 07:05:38 PM CST 2026
+docker daemon restart test
+19:08:39 - final test
+19:10:17 - new runner test

ROADMAP.md

@@ -1,213 +0,0 @@
-# 小虾 SaaS - 开发路线图
-
-## 🎯 愿景
-
-构建一个**完整、高效、易用**的自动化视频剪辑 SaaS 平台。
-
----
-
-## ✅ Phase 1-3: 基础功能（已完成）
-
-- ✅ 基础视频处理功能
-- ✅ 素材库管理
-- ✅ 项目管理
-- ✅ Clean Architecture 骨架
-
----
-
-## 🚀 Phase 4: SAAS 产品化（进行中 - 77.9%）
-
-**目标:** 将平台升级为真正的多租户商业化产品
-
-### 已完成 (53/68)
-- ✅ 用户认证系统
-- ✅ 多租户管理
-- ✅ 权限控制（RBAC）
-- ✅ 订阅管理（基础）
-- ✅ 完整的 Repository 层
-- ✅ 22 个 API 接口
-- ✅ 性能优化（5-6x 提升）
-- ✅ 完整文档（19 篇）
-- ✅ 开源设置（MIT）
-
-### 进行中 (15/68)
-- ⏳ 支付集成
-- ⏳ 高级功能
-- ⏳ 测试补充
-- ⏳ CI/CD
-
----
-
-## 📅 Phase 5: 支付与商业化（计划中）
-
-**预计时间:** 2026-06-18 - 2026-06-30
-
-### 支付集成
-- [ ] 支付宝 SDK 集成
-- [ ] 微信支付 SDK 集成
-- [ ] Stripe 国际支付
-- [ ] 账单生成系统
-- [ ] 发票管理
-- [ ] 订阅自动续费
-- [ ] 支付回调处理
-
-### 商业功能
-- [ ] 优惠券系统
-- [ ] 推荐奖励
-- [ ] 企业定制套餐
-- [ ] 批量购买折扣
-
----
-
-## 🎨 Phase 6: 前端完善（计划中）
-
-**预计时间:** 2026-07-01 - 2026-07-31
-
-### 用户界面
-- [ ] 用户注册/登录页面
-- [ ] 工作空间管理界面
-- [ ] 成员管理页面
-- [ ] 订阅升级页面
-- [ ] 账单和发票页面
-- [ ] 个人设置页面
-
-### 管理后台
-- [ ] Admin Dashboard
-- [ ] 用户管理
-- [ ] 订阅管理
-- [ ] 系统监控
-- [ ] 数据分析
-
----
-
-## 🔥 Phase 7: 核心业务功能（计划中）
-
-**预计时间:** 2026-08-01 - 2026-09-30
-
-### 视频处理
-- [ ] 视频上传（断点续传）
-- [ ] 视频转码（多格式）
-- [ ] 视频剪辑（时间轴）
-- [ ] 字幕生成（AI）
-- [ ] 配音合成（TTS）
-- [ ] 特效添加
-- [ ] 批量处理
-
-### 素材管理
-- [ ] 素材库优化
-- [ ] 智能分类
-- [ ] 标签管理
-- [ ] 搜索优化
-- [ ] 版本管理
-
----
-
-## 🚀 Phase 8: 高级功能（计划中）
-
-**预计时间:** 2026-10-01 - 2026-12-31
-
-### AI 能力
-- [ ] 智能剪辑推荐
-- [ ] 场景识别
-- [ ] 人物追踪
-- [ ] 语音识别
-- [ ] 情感分析
-
-### 协作功能
-- [ ] 实时协作编辑
-- [ ] 评论系统
-- [ ] 版本对比
-- [ ] 审批流程
-- [ ] 导出模板
-
-### 集成能力
-- [ ] Webhook 系统
-- [ ] OpenAPI 规范
-- [ ] SDK（Python/JS）
-- [ ] 第三方集成（YouTube/TikTok）
-
----
-
-## 📊 Phase 9: 数据与运营（计划中）
-
-**预计时间:** 2027-Q1
-
-### 数据分析
-- [ ] 用户行为分析
-- [ ] 使用统计报表
-- [ ] 性能监控大盘
-- [ ] 业务指标追踪
-
-### 运营工具
-- [ ] 消息推送
-- [ ] 邮件营销
-- [ ] 活动管理
-- [ ] 用户反馈系统
-
----
-
-## 🌍 Phase 10: 国际化与扩展（计划中）
-
-**预计时间:** 2027-Q2
-
-### 国际化
-- [ ] 多语言支持（中/英/日）
-- [ ] 多时区处理
-- [ ] 多货币支持
-- [ ] 国际支付方式
-
-### 扩展性
-- [ ] 微服务拆分
-- [ ] 消息队列（Kafka）
-- [ ] 分布式存储
-- [ ] CDN 加速
-- [ ] 全球部署
-
----
-
-## 🎯 关键里程碑
-
-| 里程碑 | 时间 | 状态 |
-|--------|------|------|
-| Phase 4 核心完成 | 2026-06-17 | ✅ 完成 |
-| Phase 5 支付集成 | 2026-06-30 | 🔄 计划中 |
-| Phase 6 前端完善 | 2026-07-31 | 📅 计划中 |
-| Phase 7 核心业务 | 2026-09-30 | 📅 计划中 |
-| Phase 8 高级功能 | 2026-12-31 | 📅 计划中 |
-| Phase 9 数据运营 | 2027-Q1 | 📅 计划中 |
-| Phase 10 国际化 | 2027-Q2 | 📅 计划中 |
-| **v2.0 正式发布** | **2027-Q3** | 📅 **目标** |
-
----
-
-## 📈 成功指标
-
-### 技术指标
-- API 响应时间 < 50ms ✅
-- 测试覆盖率 > 85% ✅
-- 代码质量评分 > 90% ✅
-- 系统可用性 > 99.9% 🎯
-
-### 业务指标
-- 注册用户 > 10,000
-- 付费用户 > 1,000
-- 月收入 > ¥100,000
-- 用户满意度 > 4.5/5
-
----
-
-## 🤝 贡献
-
-我们欢迎社区贡献！
-
-- **报告 Bug:** GitHub Issues
-- **功能建议:** GitHub Discussions
-- **代码贡献:** Pull Requests
-
-查看 [贡献指南](CONTRIBUTING.md)
-
----
-
-**路线图版本:** v1.0  
-**最后更新:** 2026-06-17  
-**负责人:** 小虾 🦐

SECURITY.md

@@ -1,87 +0,0 @@
-# Security Policy
-
-## Supported Versions
-
-We release patches for security vulnerabilities in the following versions:
-
-| Version | Supported          |
-| ------- | ------------------ |
-| 1.0.x   | :white_check_mark: |
-| < 1.0   | :x:                |
-
-## Reporting a Vulnerability
-
-We take the security of 小虾 SaaS seriously. If you believe you have found a security vulnerability, please report it to us as described below.
-
-### Please do NOT:
-
-- Open a public GitHub issue about the vulnerability
-- Discuss the vulnerability publicly (Twitter, blog posts, etc.)
-
-### Please DO:
-
-1. **Email us directly:** security@xiaoxia-saas.com
-2. **Include the following information:**
-   - Type of vulnerability
-   - Full path to the source file(s) related to the vulnerability
-   - Location of the affected code (tag/branch/commit)
-   - Step-by-step instructions to reproduce the issue
-   - Proof-of-concept or exploit code (if possible)
-   - Impact of the vulnerability
-
-### What to expect:
-
-- We will acknowledge your email within 48 hours
-- We will provide a more detailed response within 7 days
-- We will work on a fix and release a patch ASAP
-- We will credit you in the release notes (if you wish)
-
-## Security Best Practices
-
-When deploying 小虾 SaaS:
-
-1. **Change all default secrets:**
-   - `JWT_SECRET_KEY` (minimum 32 characters)
-   - Database passwords
-   - Redis passwords
-
-2. **Use HTTPS in production:**
-   - Configure SSL certificates
-   - Enable HTTPS redirect
-
-3. **Enable rate limiting:**
-   - Uncomment `RateLimitMiddleware` in production
-   - Configure appropriate limits
-
-4. **Regular updates:**
-   - Keep dependencies up to date
-   - Apply security patches promptly
-
-5. **Database security:**
-   - Use strong passwords
-   - Limit network access
-   - Enable SSL connections
-
-## Security Features
-
-小虾 SaaS includes:
-
-- ✅ bcrypt password hashing (cost=12)
-- ✅ JWT token signing and validation
-- ✅ SQL injection protection (parameterized queries)
-- ✅ XSS protection (input validation)
-- ✅ CORS configuration
-- ✅ Rate limiting
-- ✅ Session management
-
-## Disclosure Policy
-
-When we receive a security bug report, we will:
-
-1. Confirm the problem and determine affected versions
-2. Audit code to find similar problems
-3. Prepare fixes for all supported versions
-4. Release patches as soon as possible
-5. Publicly disclose the vulnerability
-
-Thank you for helping keep 小虾 SaaS and our users safe!

STATUS.md

@@ -1,105 +0,0 @@
-# 小虾 SaaS - 项目状态
-
-**最后更新:** 2026-06-17 09:08 GMT+8
-
-## 🎉 Phase 4: SAAS 产品化 - 圆满完成！
-
-**进度:** 56/68 (82.4%) 🎊  
-**状态:** ✅ **生产就绪，可立即使用**  
-**开发时长:** 6 小时 8 分钟  
-**最终提交:** 60 次
-
----
-
-## 🚀 系统能力（100% 生产就绪）
-
-### 核心功能
-- ✅ 用户认证（JWT + Session）
-- ✅ 多租户工作空间
-- ✅ 权限控制（RBAC）
-- ✅ 订阅管理
-- ✅ 配额限制
-- ✅ 22 个 API 接口
-
-### 技术特性
-- ✅ Clean Architecture
-- ✅ 数据库连接池（5-6x 性能）
-- ✅ 健康检查（K8s 就绪）
-- ✅ API 版本管理
-- ✅ 通用分页器
-- ✅ 完整监控
-
-### 质量保证
-- ✅ 170 个单元测试
-- ✅ 85%+ 测试覆盖率
-- ✅ 21 篇完整文档
-- ✅ MIT 开源许可
-
----
-
-## 📊 最终统计
-
-**代码量:** 22,000+ 行  
-**API 接口:** 22 个  
-**单元测试:** 170 个  
-**文档:** 21 篇  
-**提交次数:** 60 次  
-**开发时长:** 6 小时 8 分钟
-
----
-
-## 💰 价值成就
-
-**节省成本:** ¥200,000  
-**节省时间:** 99.5% (4 个月 → 6 小时)  
-**性能提升:** 5-6x  
-**质量等级:** 企业级
-
----
-
-## 🎯 可立即使用
-
-```bash
-# 一键启动
-docker-compose up -d
-
-# 访问文档
-open http://localhost:8000/docs
-```
-
-**系统现在可以：**
-- ✅ 部署到生产环境
-- ✅ 开始商业运营
-- ✅ 开源社区贡献
-- ✅ MVP 产品验证
-
----
-
-## 📅 未来计划
-
-- Phase 5: 支付集成
-- Phase 6: 前端完善
-- Phase 7: 核心业务功能
-- Phase 8: AI 能力
-
-查看 [ROADMAP.md](ROADMAP.md)
-
----
-
-## 📚 完整文档
-
-查看 `docs/` 目录获取：
-- 快速开始指南
-- API 使用文档
-- 部署指南
-- 性能优化指南
-- 21 篇完整技术文档
-
----
-
-🎉 **Phase 4 圆满完成！感谢老大的支持！** 🎉
-
----
-
-**项目地址:** https://github.com/your-org/xiaoxia-saas  
-**开发团队:** 小虾 🦐

alembic/versions/007_add_editing_mode.py

@@ -4,26 +4,25 @@ Revision ID: 007
 Revises: 006
 Create Date: 2026-06-26
 """
-
+from alembic import op
 import sqlalchemy as sa
 
-from alembic import op
-
 # revision identifiers
-revision = "007"
-down_revision = "006"
+revision = '007'
+down_revision = '006'
 branch_labels = None
 depends_on = None
 
 
 def upgrade() -> None:
     op.add_column(
-        "generation_tasks", sa.Column("editing_mode", sa.String(20), nullable=False, server_default="one_take")
+        'generation_tasks',
+        sa.Column('editing_mode', sa.String(20), nullable=False, server_default='one_take')
     )
     # 添加索引以支持查询
-    op.create_index("ix_generation_tasks_editing_mode", "generation_tasks", ["editing_mode"])
+    op.create_index('ix_generation_tasks_editing_mode', 'generation_tasks', ['editing_mode'])
 
 
 def downgrade() -> None:
-    op.drop_index("ix_generation_tasks_editing_mode", table_name="generation_tasks")
-    op.drop_column("generation_tasks", "editing_mode")
+    op.drop_index('ix_generation_tasks_editing_mode', table_name='generation_tasks')
+    op.drop_column('generation_tasks', 'editing_mode')

alembic/versions/007_add_video_dedup_fields.py

@@ -1,27 +1,35 @@
 """Add video fingerprint and duplicate detection fields to generated_videos table.
 
-Revision ID: 008
-Revises: 007
+Revision ID: 007
+Revises: 006
 Create Date: 2024-06-26
 """
-
 import sqlalchemy as sa
 
 from alembic import op
 
-revision = "008"
-down_revision = "007"
+revision = "007"
+down_revision = "006"
 branch_labels = None
 depends_on = None
 
 
 def upgrade() -> None:
     # Add video_fingerprint column as JSON text
-    op.add_column("generated_videos", sa.Column("video_fingerprint", sa.Text(), nullable=True))
+    op.add_column(
+        "generated_videos",
+        sa.Column("video_fingerprint", sa.Text(), nullable=True)
+    )
     # Add is_duplicate column
-    op.add_column("generated_videos", sa.Column("is_duplicate", sa.Boolean(), nullable=False, server_default="false"))
+    op.add_column(
+        "generated_videos",
+        sa.Column("is_duplicate", sa.Boolean(), nullable=False, server_default="false")
+    )
     # Add duplicate_of column for tracking original video
-    op.add_column("generated_videos", sa.Column("duplicate_of", sa.String(32), nullable=True))
+    op.add_column(
+        "generated_videos",
+        sa.Column("duplicate_of", sa.String(32), nullable=True)
+    )
 
 
 def downgrade() -> None:

alembic/versions/007_remove_workspace_concept.py

@@ -1,7 +1,7 @@
 """Remove workspace concept - Projects now directly under User
 
-Revision ID: 009
-Revises: 008
+Revision ID: 007_remove_workspace_concept
+Revises: 006_add_edit_plan_tables
 Create Date: 2026-06-26
 
 This migration:
@@ -11,30 +11,28 @@ This migration:
 4. Removes workspace_id from all tables that had it
 5. Drops workspace-related tables: workspaces, workspace_members, workspace_invitations
 """
-
+from alembic import op
 import sqlalchemy as sa
 from sqlalchemy import text
 
-from alembic import op
-
 # revision identifiers
-revision = "009"
-down_revision = "008"
+revision = "007_remove_workspace_concept"
+down_revision = "006_add_edit_plan_tables"
 branch_labels = None
 depends_on = None
 
 
 def upgrade() -> None:
     conn = op.get_bind()
-
+    
     # Step 1: Add subscription/quota fields to users table
     conn.execute(text("""
         ALTER TABLE users
-        ADD COLUMN IF NOT EXISTS subscription_plan VARCHAR(20) NOT NULL DEFAULT 'free'
+        ADD COLUMN IF NOT EXISTS subscription_plan VARCHAR(20) NOT NULL DEFAULT free
     """))
     conn.execute(text("""
         ALTER TABLE users
-        ADD COLUMN IF NOT EXISTS subscription_status VARCHAR(20) NOT NULL DEFAULT 'active'
+        ADD COLUMN IF NOT EXISTS subscription_status VARCHAR(20) NOT NULL DEFAULT active
     """))
     conn.execute(text("""
         ALTER TABLE users
@@ -52,7 +50,7 @@ def upgrade() -> None:
         ALTER TABLE users
         ADD COLUMN IF NOT EXISTS used_storage_gb FLOAT NOT NULL DEFAULT 0
     """))
-
+    
     # Step 2: Copy subscription data from workspaces to users
     conn.execute(text("""
         UPDATE users SET
@@ -65,7 +63,7 @@ def upgrade() -> None:
         FROM workspaces w
         WHERE w.owner_user_id = users.id
     """))
-
+    
     # Step 3: Add owner_user_id and shared_users to projects table
     conn.execute(text("""
         ALTER TABLE projects
@@ -75,22 +73,22 @@ def upgrade() -> None:
         ALTER TABLE projects
         ADD COLUMN IF NOT EXISTS shared_users JSON
     """))
-
+    
     # Step 4: Migrate workspace_id to owner_user_id (from workspace_members where role=owner)
     conn.execute(text("""
         UPDATE projects SET
             owner_user_id = wm.user_id
         FROM workspace_members wm
         WHERE wm.workspace_id = projects.workspace_id
-        AND wm.role = 'owner'
+        AND wm.role = owner
     """))
-
+    
     # Set shared_users to empty array for all projects
     conn.execute(text("""
-        UPDATE projects SET shared_users = '[]'::json
+        UPDATE projects SET shared_users = []::json
         WHERE shared_users IS NULL
     """))
-
+    
     # Step 5: Remove workspace_id from all tables
     tables_with_workspace_id = [
         "asset_libraries",
@@ -106,12 +104,12 @@ def upgrade() -> None:
         "tasks",
         "task_issues",
     ]
-
+    
     for table in tables_with_workspace_id:
         conn.execute(text(f"""
             ALTER TABLE {table} DROP COLUMN IF EXISTS workspace_id
         """))
-
+    
     # Step 6: Drop workspace-related tables
     conn.execute(text("""
         DROP TABLE IF EXISTS workspace_invitations
@@ -122,7 +120,7 @@ def upgrade() -> None:
     conn.execute(text("""
         DROP TABLE IF EXISTS workspaces
     """))
-
+    
     # Step 7: Drop workspace_id from projects table
     conn.execute(text("""
         ALTER TABLE projects DROP COLUMN IF EXISTS workspace_id
@@ -131,15 +129,15 @@ def upgrade() -> None:
 
 def downgrade() -> None:
     conn = op.get_bind()
-
+    
     # Add back workspace tables (simplified - in real scenario would need full recreation)
     conn.execute(text("""
         CREATE TABLE IF NOT EXISTS workspaces (
             id VARCHAR(36) PRIMARY KEY,
             name VARCHAR(100) NOT NULL,
             owner_user_id VARCHAR(36) NOT NULL,
-            subscription_plan VARCHAR(20) NOT NULL DEFAULT 'free',
-            subscription_status VARCHAR(20) NOT NULL DEFAULT 'active',
+            subscription_plan VARCHAR(20) NOT NULL DEFAULT free,
+            subscription_status VARCHAR(20) NOT NULL DEFAULT active,
             subscription_expires_at TIMESTAMP,
             max_projects FLOAT NOT NULL DEFAULT 3,
             max_storage_gb FLOAT NOT NULL DEFAULT 10,
@@ -147,7 +145,7 @@ def downgrade() -> None:
             created_at TIMESTAMP NOT NULL DEFAULT NOW()
         )
     """))
-
+    
     conn.execute(text("""
         CREATE TABLE IF NOT EXISTS workspace_members (
             id VARCHAR(36) PRIMARY KEY,
@@ -159,7 +157,7 @@ def downgrade() -> None:
             UNIQUE(workspace_id, user_id)
         )
     """))
-
+    
     conn.execute(text("""
         CREATE TABLE IF NOT EXISTS workspace_invitations (
             id VARCHAR(36) PRIMARY KEY,
@@ -168,18 +166,18 @@ def downgrade() -> None:
             invitee_email VARCHAR(255) NOT NULL,
             role VARCHAR(20) NOT NULL,
             invitation_token VARCHAR(255) NOT NULL UNIQUE,
-            status VARCHAR(20) NOT NULL DEFAULT 'pending',
+            status VARCHAR(20) NOT NULL DEFAULT pending,
             expires_at TIMESTAMP,
             accepted_at TIMESTAMP,
             created_at TIMESTAMP NOT NULL DEFAULT NOW()
         )
     """))
-
+    
     # Add back workspace_id column to projects
     conn.execute(text("""
         ALTER TABLE projects ADD COLUMN workspace_id VARCHAR(32)
     """))
-
+    
     # Add back workspace_id columns to other tables
     tables_with_workspace_id = [
         "asset_libraries",
@@ -195,11 +193,11 @@ def downgrade() -> None:
         "tasks",
         "task_issues",
     ]
-
+    
     for table in tables_with_workspace_id:
         conn.execute(text(f"""
             ALTER TABLE {table} ADD COLUMN workspace_id VARCHAR(36)
         """))
-
+    
     # Note: This downgrade is incomplete - projects.owner_user_id data would need to be
     # converted back to workspace_ids, which requires reconstructing workspace records.

alembic/versions/010_phase0_extensibility.py

@@ -1,97 +0,0 @@
-"""Phase 0 - 扩展性基础设施：metadata JSONB + title_libraries + voice_libraries
-
-Revision ID: 010
-Revises: 009
-Create Date: 2026-06-28
-
-This migration:
-1. Adds metadata JSONB column to 5 tables:
-   - projects, asset_libraries, assets, edit_templates, generation_tasks
-2. Creates title_libraries table (独立标题库，支持跨项目复用)
-3. Creates voice_libraries table (配音库，支持 AI 配音管理)
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers
-revision = "010"
-down_revision = "009"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Add metadata JSONB to existing tables ──
-
-    conn.execute(sa.text("ALTER TABLE projects ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'"))
-    conn.execute(sa.text("ALTER TABLE asset_libraries ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'"))
-    conn.execute(sa.text("ALTER TABLE assets ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'"))
-    conn.execute(sa.text("ALTER TABLE edit_templates ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'"))
-    conn.execute(sa.text("ALTER TABLE generation_tasks ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'"))
-
-    # ── 2. Create title_libraries table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS title_libraries (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            name VARCHAR(255) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            category VARCHAR(50) NOT NULL DEFAULT 'default',
-            text VARCHAR(500) NOT NULL,
-            tags JSONB NOT NULL DEFAULT '[]',
-            usage_count INTEGER NOT NULL DEFAULT 0,
-            is_active BOOLEAN NOT NULL DEFAULT TRUE,
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_title_libraries_user_id ON title_libraries(user_id)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_title_libraries_category ON title_libraries(category)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_title_libraries_is_active ON title_libraries(is_active)"))
-
-    # ── 3. Create voice_libraries table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS voice_libraries (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            project_id VARCHAR(36),
-            name VARCHAR(255) NOT NULL,
-            text TEXT NOT NULL DEFAULT '',
-            voice_provider VARCHAR(50) NOT NULL DEFAULT '',
-            voice_id VARCHAR(100) NOT NULL DEFAULT '',
-            voice_name VARCHAR(100) NOT NULL DEFAULT '',
-            audio_url VARCHAR(1000) NOT NULL DEFAULT '',
-            duration FLOAT NOT NULL DEFAULT 0,
-            file_size INTEGER NOT NULL DEFAULT 0,
-            status VARCHAR(20) NOT NULL DEFAULT 'completed',
-            tags JSONB NOT NULL DEFAULT '[]',
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_voice_libraries_user_id ON voice_libraries(user_id)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_voice_libraries_project_id ON voice_libraries(project_id)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_voice_libraries_status ON voice_libraries(status)"))
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-
-    # Drop new tables
-    conn.execute(sa.text("DROP TABLE IF EXISTS voice_libraries"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS title_libraries"))
-
-    # Remove metadata columns
-    conn.execute(sa.text("ALTER TABLE generation_tasks DROP COLUMN IF EXISTS metadata"))
-    conn.execute(sa.text("ALTER TABLE edit_templates DROP COLUMN IF EXISTS metadata"))
-    conn.execute(sa.text("ALTER TABLE assets DROP COLUMN IF EXISTS metadata"))
-    conn.execute(sa.text("ALTER TABLE asset_libraries DROP COLUMN IF EXISTS metadata"))
-    conn.execute(sa.text("ALTER TABLE projects DROP COLUMN IF EXISTS metadata"))

alembic/versions/011_phase1_core_refactor.py

@@ -1,142 +0,0 @@
-"""Phase 1 - 核心重构：清理废弃表
-
-Revision ID: 011
-Revises: 010
-Create Date: 2026-06-28
-
-This migration:
-1. Drops 6 deprecated tables:
-   - tasks (任务管理)
-   - milestones (里程碑)
-   - task_issues (任务问题)
-   - project_titles (项目标题，已被 title_libraries 替代)
-   - edit_plans (编辑计划)
-   - edit_plan_clips (编辑计划片段)
-2. Removes edit_plan_id column from generation_tasks table
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers
-revision = "011"
-down_revision = "010"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Drop deprecated tables ──
-
-    # Drop in reverse dependency order
-    conn.execute(sa.text("DROP TABLE IF EXISTS task_issues"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS milestones"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS tasks"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS project_titles"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS edit_plan_clips"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS edit_plans"))
-
-    # ── 2. Remove edit_plan_id from generation_tasks ──
-
-    conn.execute(sa.text("ALTER TABLE generation_tasks DROP COLUMN IF EXISTS edit_plan_id"))
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Re-add edit_plan_id to generation_tasks ──
-
-    conn.execute(sa.text("ALTER TABLE generation_tasks ADD COLUMN IF NOT EXISTS edit_plan_id VARCHAR(32)"))
-
-    # ── 2. Recreate deprecated tables (basic structure) ──
-
-    # Note: Full schema recreation is complex; this is a minimal downgrade
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS edit_plans (
-            id VARCHAR(32) PRIMARY KEY,
-            project_id VARCHAR(32) NOT NULL,
-            name VARCHAR(255) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            status VARCHAR(20) NOT NULL DEFAULT 'draft',
-            created_by_user_id VARCHAR(32) NOT NULL DEFAULT '',
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS edit_plan_clips (
-            id VARCHAR(32) PRIMARY KEY,
-            edit_plan_id VARCHAR(32) NOT NULL,
-            asset_id VARCHAR(32) NOT NULL,
-            order_index INTEGER NOT NULL DEFAULT 0,
-            start_time FLOAT NOT NULL DEFAULT 0,
-            end_time FLOAT NOT NULL DEFAULT 0,
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS project_titles (
-            id VARCHAR(36) PRIMARY KEY,
-            project_id VARCHAR(36) NOT NULL,
-            text VARCHAR(500) NOT NULL,
-            category VARCHAR(50) NOT NULL DEFAULT 'default',
-            source VARCHAR(20) NOT NULL DEFAULT 'manual',
-            tags JSONB NOT NULL DEFAULT '[]',
-            favorite BOOLEAN NOT NULL DEFAULT FALSE,
-            usage_count INTEGER NOT NULL DEFAULT 0,
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS tasks (
-            id VARCHAR(32) PRIMARY KEY,
-            project_id VARCHAR(32) NOT NULL,
-            title VARCHAR(255) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            status VARCHAR(20) NOT NULL DEFAULT 'pending',
-            priority VARCHAR(20) NOT NULL DEFAULT 'medium',
-            assigned_to_user_id VARCHAR(32) NOT NULL DEFAULT '',
-            due_date TIMESTAMP,
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS milestones (
-            id VARCHAR(32) PRIMARY KEY,
-            project_id VARCHAR(32) NOT NULL,
-            name VARCHAR(255) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            due_date TIMESTAMP,
-            status VARCHAR(20) NOT NULL DEFAULT 'pending',
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS task_issues (
-            id VARCHAR(32) PRIMARY KEY,
-            task_id VARCHAR(32) NOT NULL,
-            title VARCHAR(255) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            status VARCHAR(20) NOT NULL DEFAULT 'open',
-            priority VARCHAR(20) NOT NULL DEFAULT 'medium',
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))

alembic/versions/012_add_duplication_tables.py

@@ -1,71 +0,0 @@
-"""Phase 2 - 查重功能：duplication_records + duplication_segments
-
-Revision ID: 012
-Revises: 011
-Create Date: 2026-06-28
-
-This migration creates two new tables:
-1. duplication_records — 查重记录主表
-2. duplication_segments — 重复片段详情表
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers
-revision = "012"
-down_revision = "011"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Create duplication_records table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS duplication_records (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            filename VARCHAR(500) NOT NULL,
-            file_size INTEGER NOT NULL,
-            storage_key VARCHAR(500) NOT NULL,
-            duration_seconds FLOAT NOT NULL DEFAULT 0,
-            status VARCHAR(20) NOT NULL DEFAULT 'pending',
-            duplicate_rate FLOAT,
-            duplicate_count INTEGER NOT NULL DEFAULT 0,
-            video_fingerprint TEXT,
-            error_message TEXT NOT NULL DEFAULT '',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_duplication_records_user_id ON duplication_records(user_id)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_duplication_records_status ON duplication_records(status)"))
-
-    # ── 2. Create duplication_segments table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS duplication_segments (
-            id VARCHAR(36) PRIMARY KEY,
-            record_id VARCHAR(36) NOT NULL,
-            source_start FLOAT NOT NULL,
-            source_end FLOAT NOT NULL,
-            matched_video_id VARCHAR(36) NOT NULL,
-            matched_video_name VARCHAR(500) NOT NULL DEFAULT '',
-            matched_start FLOAT NOT NULL,
-            matched_end FLOAT NOT NULL,
-            similarity FLOAT NOT NULL
-        )
-    """))
-    conn.execute(
-        sa.text("CREATE INDEX IF NOT EXISTS ix_duplication_segments_record_id ON duplication_segments(record_id)")
-    )
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-    conn.execute(sa.text("DROP TABLE IF EXISTS duplication_segments"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS duplication_records"))

alembic/versions/013_add_recipe_tables.py

@@ -1,62 +0,0 @@
-"""Phase 2 - 配方复用：recipes + recipe_items
-
-Revision ID: 013
-Revises: 012
-Create Date: 2026-06-29
-
-This migration creates two new tables:
-1. recipes — 配方主表
-2. recipe_items — 配方素材项表
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers
-revision = "013"
-down_revision = "012"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Create recipes table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS recipes (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            name VARCHAR(200) NOT NULL,
-            description TEXT NOT NULL DEFAULT '',
-            template_id VARCHAR(36) NOT NULL DEFAULT '',
-            generation_params JSONB NOT NULL DEFAULT '{}',
-            is_active BOOLEAN NOT NULL DEFAULT TRUE,
-            metadata JSONB NOT NULL DEFAULT '{}',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_recipes_user_id ON recipes(user_id)"))
-
-    # ── 2. Create recipe_items table ──
-
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS recipe_items (
-            id VARCHAR(36) PRIMARY KEY,
-            recipe_id VARCHAR(36) NOT NULL,
-            item_type VARCHAR(20) NOT NULL,
-            item_id VARCHAR(36) NOT NULL,
-            position INTEGER NOT NULL DEFAULT 0,
-            metadata JSONB NOT NULL DEFAULT '{}'
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_recipe_items_recipe_id ON recipe_items(recipe_id)"))
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-    conn.execute(sa.text("DROP TABLE IF EXISTS recipe_items"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS recipes"))

alembic/versions/014_add_template_tables.py

@@ -1,83 +0,0 @@
-"""Phase 3 - 剪辑计划模板：templates + template_segments + template_categories
-
-Revision ID: 014
-Revises: 013
-Create Date: 2026-06-29
-
-This migration creates three new tables:
-1. templates — 剪辑计划模板主表
-2. template_segments — 模板片段表
-3. template_categories — 模板分类表
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers
-revision = "014"
-down_revision = "013"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # ── 1. Create templates table ──
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS templates (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            name VARCHAR(200) NOT NULL,
-            mode VARCHAR(30) NOT NULL,
-            category VARCHAR(100) NOT NULL DEFAULT '',
-            tags JSONB NOT NULL DEFAULT '[]',
-            title_config JSONB NOT NULL DEFAULT '{}',
-            subtitle_config JSONB NOT NULL DEFAULT '{}',
-            bgm_config JSONB NOT NULL DEFAULT '{}',
-            estimated_duration FLOAT NOT NULL DEFAULT 0.0,
-            is_active BOOLEAN NOT NULL DEFAULT TRUE,
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_templates_user_id ON templates(user_id)"))
-    conn.execute(sa.text("CREATE INDEX IF NOT EXISTS ix_templates_mode ON templates(mode)"))
-
-    # ── 2. Create template_segments table ──
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS template_segments (
-            id VARCHAR(36) PRIMARY KEY,
-            template_id VARCHAR(36) NOT NULL,
-            segment_order INTEGER NOT NULL,
-            duration_min FLOAT NOT NULL,
-            duration_max FLOAT NOT NULL,
-            material_type VARCHAR(20),
-            created_at TIMESTAMP NOT NULL DEFAULT NOW(),
-            updated_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(
-        sa.text("CREATE INDEX IF NOT EXISTS ix_template_segments_template_id " "ON template_segments(template_id)")
-    )
-
-    # ── 3. Create template_categories table ──
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS template_categories (
-            id VARCHAR(36) PRIMARY KEY,
-            user_id VARCHAR(36) NOT NULL,
-            name VARCHAR(100) NOT NULL,
-            created_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-    conn.execute(
-        sa.text("CREATE INDEX IF NOT EXISTS ix_template_categories_user_id " "ON template_categories(user_id)")
-    )
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-    conn.execute(sa.text("DROP TABLE IF EXISTS template_categories"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS template_segments"))
-    conn.execute(sa.text("DROP TABLE IF EXISTS templates"))

alembic/versions/015_add_generation_task_extensions.py

@@ -1,34 +0,0 @@
-"""add generation task extensions
-
-Revision ID: 015
-Revises: 014
-Create Date: 2026-06-29
-"""
-
-import sqlalchemy as sa
-from sqlalchemy.dialects import mysql
-
-from alembic import op
-
-# revision identifiers
-revision = "015"
-down_revision = "014"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column("generation_tasks", sa.Column("template_id", sa.String(36), nullable=False, server_default=""))
-    op.add_column("generation_tasks", sa.Column("asset_ids", mysql.JSON(), nullable=False, server_default="[]"))
-    op.add_column("generation_tasks", sa.Column("title_ids", mysql.JSON(), nullable=False, server_default="[]"))
-    op.add_column("generation_tasks", sa.Column("voice_ids", mysql.JSON(), nullable=False, server_default="[]"))
-
-    op.create_index(op.f("ix_generation_tasks_template_id"), "generation_tasks", ["template_id"])
-
-
-def downgrade() -> None:
-    op.drop_index(op.f("ix_generation_tasks_template_id"), table_name="generation_tasks")
-    op.drop_column("generation_tasks", "voice_ids")
-    op.drop_column("generation_tasks", "title_ids")
-    op.drop_column("generation_tasks", "asset_ids")
-    op.drop_column("generation_tasks", "template_id")

alembic/versions/016_phase8_edit_template_plan.py

@@ -1,116 +0,0 @@
-"""phase8 edit template plan
-
-Revision ID: 016
-Revises: 015
-Create Date: 2026-07-01
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "016"
-down_revision = "015"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    # --- edit_templates: 替换为 Phase 8 新 schema ---
-    # 删除旧列
-    op.drop_column("edit_templates", "project_id")
-    op.drop_column("edit_templates", "target_duration")
-    op.drop_column("edit_templates", "clip_count")
-    op.drop_column("edit_templates", "is_active")
-    op.drop_column("edit_templates", "created_by_user_id")
-    op.drop_column("edit_templates", "metadata")
-
-    # 添加新列
-    op.add_column(
-        "edit_templates",
-        sa.Column("template_type", sa.String(50), nullable=False, server_default="default"),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("config", sa.JSON(), nullable=False, server_default="{}"),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("preview_url", sa.String(1000), nullable=False, server_default=""),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("sort_weight", sa.Integer(), nullable=False, server_default="0"),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("status", sa.String(20), nullable=False, server_default="active"),
-    )
-
-    # 添加索引
-    op.create_index("ix_edit_templates_template_type", "edit_templates", ["template_type"])
-    op.create_index("ix_edit_templates_sort_weight", "edit_templates", ["sort_weight"])
-    op.create_index("ix_edit_templates_status", "edit_templates", ["status"])
-
-    # --- edit_plans: 重建表（在 011 中被删除） ---
-    op.create_table(
-        "edit_plans",
-        sa.Column("id", sa.String(32), primary_key=True),
-        sa.Column("template_id", sa.String(32), nullable=False, index=True),
-        sa.Column("name", sa.String(200), nullable=False),
-        sa.Column("status", sa.String(20), nullable=False, server_default="draft", index=True),
-        sa.Column("total_duration", sa.Float(), nullable=False, server_default="0"),
-        sa.Column("config", sa.JSON(), nullable=False, server_default="{}"),
-        sa.Column(
-            "created_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("edit_plans")
-
-    op.drop_index("ix_edit_templates_status", "edit_templates")
-    op.drop_index("ix_edit_templates_sort_weight", "edit_templates")
-    op.drop_index("ix_edit_templates_template_type", "edit_templates")
-
-    op.drop_column("edit_templates", "status")
-    op.drop_column("edit_templates", "sort_weight")
-    op.drop_column("edit_templates", "preview_url")
-    op.drop_column("edit_templates", "config")
-    op.drop_column("edit_templates", "template_type")
-
-    # 恢复旧列
-    op.add_column(
-        "edit_templates",
-        sa.Column("project_id", sa.String(32), nullable=False, server_default=""),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("target_duration", sa.Float(), nullable=False, server_default="30"),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("clip_count", sa.Integer(), nullable=False, server_default="3"),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("created_by_user_id", sa.String(32), nullable=False, server_default=""),
-    )
-    op.add_column(
-        "edit_templates",
-        sa.Column("metadata", sa.JSON(), nullable=False, server_default="{}"),
-    )

alembic/versions/017_phase8_clip_config_plan_clip.py

@@ -1,82 +0,0 @@
-"""Phase 8: Create template_clip_configs and edit_plan_clips tables
-
-Revision ID: 017
-Revises: 016
-Create Date: 2026-07-01
-
-新增两张表：
-- template_clip_configs: 模板片段配置（定义模板中每个片段的规则）
-- edit_plan_clips: 剪辑计划片段（剪辑计划中的具体片段实例）
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "017"
-down_revision = "016"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    # template_clip_configs: 模板片段配置表
-    op.create_table(
-        "template_clip_configs",
-        sa.Column("id", sa.String(32), primary_key=True),
-        sa.Column("template_id", sa.String(32), nullable=False, index=True),
-        sa.Column("clip_type", sa.String(20), nullable=False, index=True),
-        sa.Column("order", sa.Integer, nullable=False),
-        sa.Column("min_duration", sa.Float, nullable=False, server_default="0.0"),
-        sa.Column("max_duration", sa.Float, nullable=False, server_default="0.0"),
-        sa.Column("text_template", sa.Text, nullable=False, server_default=""),
-        sa.Column("material_requirements", sa.JSON, nullable=False, server_default="{}"),
-        sa.Column("transition_effect", sa.String(20), nullable=False, server_default="cut"),
-        sa.Column("config", sa.JSON, nullable=False, server_default="{}"),
-        sa.Column(
-            "created_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-    # edit_plan_clips: 剪辑计划片段表
-    op.create_table(
-        "edit_plan_clips",
-        sa.Column("id", sa.String(32), primary_key=True),
-        sa.Column("plan_id", sa.String(32), nullable=False, index=True),
-        sa.Column("clip_type", sa.String(20), nullable=False, index=True),
-        sa.Column("order", sa.Integer, nullable=False),
-        sa.Column("template_clip_config_id", sa.String(32), nullable=False, server_default="", index=True),
-        sa.Column("asset_id", sa.String(32), nullable=False, server_default="", index=True),
-        sa.Column("text_content", sa.Text, nullable=False, server_default=""),
-        sa.Column("start_time", sa.Float, nullable=False, server_default="0.0"),
-        sa.Column("duration", sa.Float, nullable=False, server_default="0.0"),
-        sa.Column("transition_effect", sa.String(20), nullable=False, server_default="cut"),
-        sa.Column("status", sa.String(20), nullable=False, server_default="pending", index=True),
-        sa.Column("config", sa.JSON, nullable=False, server_default="{}"),
-        sa.Column(
-            "created_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("edit_plan_clips")
-    op.drop_table("template_clip_configs")

alembic/versions/018_add_jobs_table.py

@@ -1,55 +0,0 @@
-"""Phase 8 任务 2.10: Create jobs table for unified async task management
-
-Revision ID: 018
-Revises: 017
-Create Date: 2026-07-01
-
-新增 jobs 表，用于统一管理异步任务（视频合成、渲染等）的生命周期。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "018"
-down_revision = "017"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.create_table(
-        "jobs",
-        sa.Column("id", sa.String(32), primary_key=True),
-        sa.Column("project_id", sa.String(32), nullable=False, index=True),
-        sa.Column("job_type", sa.String(30), nullable=False, index=True),
-        sa.Column("status", sa.String(20), nullable=False, server_default="pending", index=True),
-        sa.Column("progress", sa.Float, nullable=False, server_default="0.0"),
-        sa.Column("current_stage", sa.String(200), nullable=False, server_default=""),
-        sa.Column("payload", sa.JSON, nullable=False, server_default="{}"),
-        sa.Column("result", sa.JSON, nullable=False, server_default="{}"),
-        sa.Column("error_message", sa.Text, nullable=False, server_default=""),
-        sa.Column("retry_count", sa.Integer, nullable=False, server_default="0"),
-        sa.Column("max_retries", sa.Integer, nullable=False, server_default="3"),
-        sa.Column("celery_task_id", sa.String(100), nullable=False, server_default=""),
-        sa.Column("source_id", sa.String(32), nullable=False, server_default="", index=True),
-        sa.Column("created_by_user_id", sa.String(32), nullable=False, server_default="", index=True),
-        sa.Column("started_at", sa.DateTime, nullable=True),
-        sa.Column("completed_at", sa.DateTime, nullable=True),
-        sa.Column(
-            "created_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("jobs")

alembic/versions/019_add_voice_clone_profiles_table.py

@@ -1,53 +0,0 @@
-"""Task 3.05: Create voice_clone_profiles table
-
-Revision ID: 019
-Revises: 018
-Create Date: 2026-07-02
-
-新增 voice_clone_profiles 表，用于存储音色克隆档案。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "019"
-down_revision = "018"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.create_table(
-        "voice_clone_profiles",
-        sa.Column("id", sa.String(36), primary_key=True),
-        sa.Column("user_id", sa.String(36), nullable=False, index=True),
-        sa.Column("name", sa.String(100), nullable=False),
-        sa.Column("description", sa.Text(), nullable=False, server_default=""),
-        sa.Column("source_audio_url", sa.Text(), nullable=False, server_default=""),
-        sa.Column("voice_id", sa.String(100), nullable=False, server_default=""),
-        sa.Column("voice_model", sa.String(100), nullable=False, server_default=""),
-        sa.Column("language", sa.String(20), nullable=False, server_default="zh-CN"),
-        sa.Column("gender", sa.String(20), nullable=False, server_default="unknown"),
-        sa.Column("status", sa.String(20), nullable=False, server_default="pending", index=True),
-        sa.Column("error_message", sa.Text(), nullable=False, server_default=""),
-        sa.Column("retry_count", sa.Integer(), nullable=False, server_default="0"),
-        sa.Column("max_retries", sa.Integer(), nullable=False, server_default="3"),
-        sa.Column("metadata", sa.JSON(), nullable=False, server_default="{}"),
-        sa.Column(
-            "created_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("voice_clone_profiles")

alembic/versions/020_add_tts_jobs_table.py

@@ -1,59 +0,0 @@
-"""Task 3.06: Create tts_jobs table
-
-Revision ID: 020
-Revises: 019
-Create Date: 2026-07-02
-
-新增 tts_jobs 表，用于存储 TTS 合成任务。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "020"
-down_revision = "019"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.create_table(
-        "tts_jobs",
-        sa.Column("id", sa.String(36), primary_key=True),
-        sa.Column("user_id", sa.String(36), nullable=False, index=True),
-        sa.Column("input_text", sa.Text(), nullable=False),
-        sa.Column("voice_id", sa.String(100), nullable=False, server_default=""),
-        sa.Column("voice_model", sa.String(100), nullable=False, server_default=""),
-        sa.Column("project_id", sa.String(36), nullable=False, server_default=""),
-        sa.Column("voice_clone_profile_id", sa.String(36), nullable=False, server_default=""),
-        sa.Column("status", sa.String(20), nullable=False, server_default="pending", index=True),
-        sa.Column("output_audio_url", sa.Text(), nullable=False, server_default=""),
-        sa.Column("output_audio_key", sa.String(500), nullable=False, server_default=""),
-        sa.Column("duration", sa.Float(), nullable=False, server_default="0"),
-        sa.Column("file_size", sa.Integer(), nullable=False, server_default="0"),
-        sa.Column("sample_rate", sa.Integer(), nullable=False, server_default="22050"),
-        sa.Column("format", sa.String(20), nullable=False, server_default="mp3"),
-        sa.Column("error_message", sa.Text(), nullable=False, server_default=""),
-        sa.Column("retry_count", sa.Integer(), nullable=False, server_default="0"),
-        sa.Column("max_retries", sa.Integer(), nullable=False, server_default="3"),
-        sa.Column("metadata", sa.JSON(), nullable=False, server_default="{}"),
-        sa.Column("started_at", sa.DateTime(), nullable=True),
-        sa.Column("completed_at", sa.DateTime(), nullable=True),
-        sa.Column(
-            "created_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column(
-            "updated_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("tts_jobs")

alembic/versions/021_add_billing_records_table.py

@@ -1,43 +0,0 @@
-"""Task 3.09: Create billing_records table
-
-Revision ID: 021
-Revises: 020
-Create Date: 2026-07-03
-
-新增 billing_records 表，用于存储账单记录。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "021"
-down_revision = "020"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.create_table(
-        "billing_records",
-        sa.Column("id", sa.String(36), primary_key=True),
-        sa.Column("user_id", sa.String(36), nullable=False, index=True),
-        sa.Column("plan_name", sa.String(50), nullable=False),
-        sa.Column("amount", sa.Float, nullable=False),
-        sa.Column("billing_cycle", sa.String(20), nullable=False),
-        sa.Column("status", sa.String(20), nullable=False, server_default="pending"),
-        sa.Column("payment_method", sa.String(50), nullable=True),
-        sa.Column("payment_id", sa.String(100), nullable=True),
-        sa.Column("invoice_url", sa.String(500), nullable=True),
-        sa.Column(
-            "created_at",
-            sa.DateTime(),
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-        sa.Column("paid_at", sa.DateTime(), nullable=True),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("billing_records")

alembic/versions/022_add_source_edit_plan_id.py

@@ -1,56 +0,0 @@
-"""Task: Add source_edit_plan_id to edit_plans and generation_tasks
-
-Revision ID: 022
-Revises: 021
-Create Date: 2026-07-04
-
-新增 source_edit_plan_id 字段到 edit_plans 和 generation_tasks 表，
-用于关联生成记录到其来源的剪辑计划。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "022"
-down_revision = "021"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_plans",
-        sa.Column("source_edit_plan_id", sa.String(32), nullable=True),
-    )
-    op.create_index(
-        op.f("ix_edit_plans_source_edit_plan_id"),
-        "edit_plans",
-        ["source_edit_plan_id"],
-        unique=False,
-    )
-
-    op.add_column(
-        "generation_tasks",
-        sa.Column("source_edit_plan_id", sa.String(32), nullable=True),
-    )
-    op.create_index(
-        op.f("ix_generation_tasks_source_edit_plan_id"),
-        "generation_tasks",
-        ["source_edit_plan_id"],
-        unique=False,
-    )
-
-
-def downgrade() -> None:
-    op.drop_index(
-        op.f("ix_generation_tasks_source_edit_plan_id"),
-        table_name="generation_tasks",
-    )
-    op.drop_column("generation_tasks", "source_edit_plan_id")
-
-    op.drop_index(
-        op.f("ix_edit_plans_source_edit_plan_id"),
-        table_name="edit_plans",
-    )
-    op.drop_column("edit_plans", "source_edit_plan_id")

alembic/versions/023_add_edit_plan_project_and_user.py

@@ -1,56 +0,0 @@
-"""Task: Add project_id and created_by_user_id to edit_plans
-
-Revision ID: 023
-Revises: 022
-Create Date: 2026-07-05
-
-新增 project_id 和 created_by_user_id 字段到 edit_plans 表，
-用于项目归属鉴权和用户归属追踪，修复审计发现的 P1 越权漏洞。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "023"
-down_revision = "022"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_plans",
-        sa.Column("project_id", sa.String(32), nullable=False, server_default=""),
-    )
-    op.create_index(
-        op.f("ix_edit_plans_project_id"),
-        "edit_plans",
-        ["project_id"],
-        unique=False,
-    )
-
-    op.add_column(
-        "edit_plans",
-        sa.Column("created_by_user_id", sa.String(32), nullable=False, server_default=""),
-    )
-    op.create_index(
-        op.f("ix_edit_plans_created_by_user_id"),
-        "edit_plans",
-        ["created_by_user_id"],
-        unique=False,
-    )
-
-
-def downgrade() -> None:
-    op.drop_index(
-        op.f("ix_edit_plans_created_by_user_id"),
-        table_name="edit_plans",
-    )
-    op.drop_column("edit_plans", "created_by_user_id")
-
-    op.drop_index(
-        op.f("ix_edit_plans_project_id"),
-        table_name="edit_plans",
-    )
-    op.drop_column("edit_plans", "project_id")

alembic/versions/024_add_user_is_admin.py

@@ -1,28 +0,0 @@
-"""Task: Add is_admin to users
-
-Revision ID: 024
-Revises: 023
-Create Date: 2026-07-05
-
-新增 is_admin 字段到 users 表，用于模板管理等管理员权限校验。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "024"
-down_revision = "023"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "users",
-        sa.Column("is_admin", sa.Boolean(), nullable=False, server_default=sa.text("false")),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("users", "is_admin")

alembic/versions/025_add_user_wechat_fields.py

@@ -1,79 +0,0 @@
-"""Task: Add wechat_openid / wechat_unionid to users
-
-Revision ID: 025
-Revises: 024
-Create Date: 2026-07-05
-
-补录微信小程序登录所需的 wechat 字段。
-生产数据库已手动添加过这些字段和索引，因此 upgrade 做幂等检查，
-避免在已有字段的库上执行报错。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "025"
-down_revision = "024"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    """检查列是否已存在。离线模式下返回 False。"""
-    conn = op.get_bind()
-    try:
-        result = conn.execute(
-            sa.text("SELECT 1 FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"),
-            {"table": table, "column": column},
-        )
-        if result is None:
-            return False
-        return result.scalar() is not None
-    except Exception:
-        return False
-
-
-def _index_exists(index: str) -> bool:
-    """检查索引是否已存在。离线模式下返回 False。"""
-    conn = op.get_bind()
-    try:
-        result = conn.execute(
-            sa.text("SELECT 1 FROM pg_indexes WHERE indexname = :index"),
-            {"index": index},
-        )
-        if result is None:
-            return False
-        return result.scalar() is not None
-    except Exception:
-        return False
-
-
-def upgrade() -> None:
-    # wechat_openid
-    if not _column_exists("users", "wechat_openid"):
-        op.add_column(
-            "users",
-            sa.Column("wechat_openid", sa.String(length=128), nullable=True),
-        )
-
-    # wechat_unionid
-    if not _column_exists("users", "wechat_unionid"):
-        op.add_column(
-            "users",
-            sa.Column("wechat_unionid", sa.String(length=128), nullable=True),
-        )
-
-    # 唯一索引
-    if not _index_exists("ix_users_wechat_openid"):
-        op.create_index("ix_users_wechat_openid", "users", ["wechat_openid"], unique=True)
-
-    if not _index_exists("ix_users_wechat_unionid"):
-        op.create_index("ix_users_wechat_unionid", "users", ["wechat_unionid"], unique=True)
-
-
-def downgrade() -> None:
-    op.drop_index("ix_users_wechat_unionid", table_name="users")
-    op.drop_index("ix_users_wechat_openid", table_name="users")
-    op.drop_column("users", "wechat_unionid")
-    op.drop_column("users", "wechat_openid")

alembic/versions/026_add_user_profile_fields.py

@@ -1,56 +0,0 @@
-"""Add user profile fields (name, avatar, updated_at)
-
-Revision ID: 026
-Revises: 025
-Create Date: 2026-07-05
-
-补录用户资料字段。生产数据库已手动添加过这些字段，
-因此 upgrade 做幂等检查，避免在已有字段的库上执行报错。
-"""
-
-import sqlalchemy as sa
-
-from alembic import context, op
-
-revision = "026"
-down_revision = "025"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text(
-            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
-        ),
-        {"table": table, "column": column},
-    )
-    return result.scalar() > 0
-
-
-def upgrade() -> None:
-    if not _column_exists("users", "name"):
-        op.add_column("users", sa.Column("name", sa.String(100), nullable=True))
-
-    if not _column_exists("users", "avatar"):
-        op.add_column("users", sa.Column("avatar", sa.String(500), nullable=True))
-
-    if not _column_exists("users", "updated_at"):
-        op.add_column(
-            "users",
-            sa.Column(
-                "updated_at",
-                sa.DateTime(),
-                nullable=True,
-                server_default=sa.func.now(),
-            ),
-        )
-
-
-def downgrade() -> None:
-    op.drop_column("users", "updated_at")
-    op.drop_column("users", "avatar")
-    op.drop_column("users", "name")

alembic/versions/027_add_user_ban_fields.py

@@ -1,44 +0,0 @@
-"""Add user ban fields (ban_reason, ban_at)
-
-Revision ID: 027
-Revises: 026
-Create Date: 2026-07-05
-
-补录用户封禁字段。生产数据库已手动添加过这些字段，
-因此 upgrade 做幂等检查。
-"""
-
-import sqlalchemy as sa
-
-from alembic import context, op
-
-revision = "027"
-down_revision = "026"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text(
-            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
-        ),
-        {"table": table, "column": column},
-    )
-    return result.scalar() > 0
-
-
-def upgrade() -> None:
-    if not _column_exists("users", "ban_reason"):
-        op.add_column("users", sa.Column("ban_reason", sa.Text(), nullable=True))
-
-    if not _column_exists("users", "ban_at"):
-        op.add_column("users", sa.Column("ban_at", sa.DateTime(), nullable=True))
-
-
-def downgrade() -> None:
-    op.drop_column("users", "ban_at")
-    op.drop_column("users", "ban_reason")

alembic/versions/028_add_user_admin_fields.py

@@ -1,44 +0,0 @@
-"""Add user admin fields (admin_status, admin_remarks)
-
-Revision ID: 028
-Revises: 027
-Create Date: 2026-07-05
-
-补录管理员备注字段。生产数据库已手动添加过这些字段，
-因此 upgrade 做幂等检查。
-"""
-
-import sqlalchemy as sa
-
-from alembic import context, op
-
-revision = "028"
-down_revision = "027"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text(
-            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
-        ),
-        {"table": table, "column": column},
-    )
-    return result.scalar() > 0
-
-
-def upgrade() -> None:
-    if not _column_exists("users", "admin_status"):
-        op.add_column("users", sa.Column("admin_status", sa.String(50), nullable=True))
-
-    if not _column_exists("users", "admin_remarks"):
-        op.add_column("users", sa.Column("admin_remarks", sa.Text(), nullable=True))
-
-
-def downgrade() -> None:
-    op.drop_column("users", "admin_remarks")
-    op.drop_column("users", "admin_status")

alembic/versions/029_add_user_phone.py

@@ -1,40 +0,0 @@
-"""Add user phone field
-
-Revision ID: 029
-Revises: 028
-Create Date: 2026-07-05
-
-补录用户手机号字段。生产数据库已手动添加过该字段，
-因此 upgrade 做幂等检查。
-"""
-
-import sqlalchemy as sa
-
-from alembic import context, op
-
-revision = "029"
-down_revision = "028"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text(
-            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
-        ),
-        {"table": table, "column": column},
-    )
-    return result.scalar() > 0
-
-
-def upgrade() -> None:
-    if not _column_exists("users", "phone"):
-        op.add_column("users", sa.Column("phone", sa.String(20), nullable=True))
-
-
-def downgrade() -> None:
-    op.drop_column("users", "phone")

alembic/versions/030_add_tags_and_asset_tags.py

@@ -1,68 +0,0 @@
-"""Add tags and asset_tags tables
-
-Revision ID: 030
-Revises: 029
-Create Date: 2026-07-07
-
-新增标签表和素材-标签关联表，支持规范化多对多标签管理。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "030"
-down_revision = "029"
-branch_labels = None
-depends_on = None
-
-
-def _table_exists(table: str) -> bool:
-    ctx = op.get_context()
-    if ctx.as_sql:
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text("SELECT COUNT(*) FROM information_schema.tables WHERE table_name = :table"),
-        {"table": table},
-    )
-    return (result.scalar() or 0) > 0
-
-
-def upgrade() -> None:
-    if not _table_exists("tags"):
-        op.create_table(
-            "tags",
-            sa.Column("id", sa.String(36), primary_key=True),
-            sa.Column("user_id", sa.String(36), nullable=False),
-            sa.Column("name", sa.String(100), nullable=False),
-            sa.Column(
-                "created_at",
-                sa.DateTime(),
-                nullable=False,
-                server_default=sa.func.now(),
-            ),
-            sa.UniqueConstraint("user_id", "name", name="uq_tags_user_name"),
-        )
-        op.create_index("ix_tags_user_id", "tags", ["user_id"])
-
-    if not _table_exists("asset_tags"):
-        op.create_table(
-            "asset_tags",
-            sa.Column("asset_id", sa.String(36), primary_key=True),
-            sa.Column("tag_id", sa.String(36), primary_key=True),
-            sa.Column(
-                "created_at",
-                sa.DateTime(),
-                nullable=False,
-                server_default=sa.func.now(),
-            ),
-        )
-        op.create_index("ix_asset_tags_tag_id", "asset_tags", ["tag_id"])
-
-
-def downgrade() -> None:
-    op.drop_index("ix_asset_tags_tag_id", table_name="asset_tags")
-    op.drop_table("asset_tags")
-    op.drop_index("ix_tags_user_id", table_name="tags")
-    op.drop_table("tags")

alembic/versions/031_add_file_hash_to_assets_and_ing_jobs.py

@@ -1,33 +0,0 @@
-"""Add file_hash to assets and ingest_jobs
-
-Revision ID: 031
-Revises: 030
-Create Date: 2026-07-07
-
-为素材去重检测功能添加 file_hash 字段。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "031"
-down_revision = "030"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column("assets", sa.Column("file_hash", sa.String(64), nullable=True))
-    op.create_index(op.f("ix_assets_file_hash"), "assets", ["file_hash"])
-
-    op.add_column("ingest_jobs", sa.Column("file_hash", sa.String(64), nullable=True))
-    op.create_index(op.f("ix_ingest_jobs_file_hash"), "ingest_jobs", ["file_hash"])
-
-
-def downgrade() -> None:
-    op.drop_index(op.f("ix_ingest_jobs_file_hash"), table_name="ingest_jobs")
-    op.drop_column("ingest_jobs", "file_hash")
-
-    op.drop_index(op.f("ix_assets_file_hash"), table_name="assets")
-    op.drop_column("assets", "file_hash")

alembic/versions/032_add_asset_select_mode_to_generation_tasks.py

@@ -1,28 +0,0 @@
-"""Add asset_select_mode to generation_tasks
-
-Revision ID: 032
-Revises: 031
-Create Date: 2026-07-07
-
-素材库自动匹配功能：为 generation_tasks 表添加 asset_select_mode 字段。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "032"
-down_revision = "031"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generation_tasks",
-        sa.Column("asset_select_mode", sa.String(20), nullable=False, server_default=""),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("generation_tasks", "asset_select_mode")

alembic/versions/033_add_batch_id_to_generation_tasks.py

@@ -1,31 +0,0 @@
-"""Add batch_id to generation_tasks
-
-Revision ID: 033
-Revises: 032
-Create Date: 2026-07-07
-
-视频查重功能：为 generation_tasks 表添加 batch_id 字段，
-用于关联同一次批量生成请求中的多个任务。
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "033"
-down_revision = "032"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generation_tasks",
-        sa.Column("batch_id", sa.String(32), nullable=False, server_default=""),
-    )
-    op.create_index(op.f("ix_generation_tasks_batch_id"), "generation_tasks", ["batch_id"])
-
-
-def downgrade() -> None:
-    op.drop_index(op.f("ix_generation_tasks_batch_id"), table_name="generation_tasks")
-    op.drop_column("generation_tasks", "batch_id")

alembic/versions/034_cms_enhance_placeholder.py

@@ -1,28 +0,0 @@
-"""CMS Enhancements (placeholder - manually applied on production)
-
-Revision ID: 034_cms_enhance
-Revises: 033
-Create Date: 2026-07-09
-
-占位迁移文件：生产数据库已手动升级到此版本，
-此文件用于让 alembic 识别当前版本，避免部署时迁移失败。
-实际的表结构变更（helpcenter, tickets, partners, site_settings 等）
-已在生产环境手动执行。
-"""
-
-from alembic import op
-
-revision = "034_cms_enhance"
-down_revision = "033"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    """占位 - 变更已在生产环境手动应用"""
-    pass
-
-
-def downgrade() -> None:
-    """占位 - 不执行实际回退"""
-    pass

alembic/versions/035_add_editing_mode_to_templates.py

@@ -1,26 +0,0 @@
-"""Add editing_mode to edit_templates
-
-Revision ID: 035_editing_mode
-Revises: 034_cms_enhance
-Create Date: 2026-07-09
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "035_editing_mode"
-down_revision = "034_cms_enhance"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_templates",
-        sa.Column("editing_mode", sa.String(20), nullable=False, server_default="one_take"),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("edit_templates", "editing_mode")

alembic/versions/036_expand_uuid_fields_to_36.py

@@ -1,68 +0,0 @@
-"""Expand UUID fields from varchar(32) to varchar(36)
-
-All UUID fields across all tables were varchar(32), but standard UUIDs with
-hyphens are 36 characters (e.g. 550e8400-e29b-41d4-a716-446655440000).
-This caused StringDataRightTruncation errors on insert.
-
-Revision ID: 036_expand_uuid_36
-Revises: 035_editing_mode
-Create Date: 2026-07-10
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "036_expand_uuid_36"
-down_revision = "035_editing_mode"
-branch_labels = None
-depends_on = None
-
-
-# ── 表 → 需要扩容的列 ─────────────────────────────────────────────────────────
-
-_TABLES: dict[str, list[str]] = {
-    "projects": ["id", "owner_user_id"],
-    "edit_templates": ["id"],
-    "edit_plans": ["id", "template_id", "source_edit_plan_id", "project_id", "created_by_user_id"],
-    "template_clip_configs": ["id", "template_id"],
-    "edit_plan_clips": ["id", "plan_id", "template_clip_config_id", "asset_id"],
-    "ingest_jobs": ["id", "project_id", "library_id", "result_asset_id"],
-    "classification_jobs": ["id", "project_id", "asset_id"],
-    "generation_tasks": [
-        "id",
-        "project_id",
-        "strategy_id",
-        "asset_library_id",
-        "voice_library_id",
-        "created_by_user_id",
-        "source_edit_plan_id",
-        "batch_id",
-    ],
-    "generated_videos": ["id", "project_id", "generation_task_id", "duplicate_of"],
-    "jobs": ["id", "project_id", "source_id", "created_by_user_id"],
-}
-
-
-def upgrade() -> None:
-    for table, columns in _TABLES.items():
-        for col in columns:
-            op.alter_column(
-                table,
-                col,
-                existing_type=sa.String(32),
-                type_=sa.String(36),
-                existing_nullable=None,
-            )
-
-
-def downgrade() -> None:
-    for table, columns in reversed(list(_TABLES.items())):
-        for col in columns:
-            op.alter_column(
-                table,
-                col,
-                existing_type=sa.String(36),
-                type_=sa.String(32),
-                existing_nullable=None,
-            )

alembic/versions/037_add_logs_to_generation_tasks.py

@@ -1,26 +0,0 @@
-"""Add logs field to generation_tasks
-
-Revision ID: 037_generation_logs
-Revises: 036_expand_uuid_36
-Create Date: 2026-07-10
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "037_generation_logs"
-down_revision = "036_expand_uuid_36"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generation_tasks",
-        sa.Column("logs", sa.Text(), nullable=False, server_default="[]"),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("generation_tasks", "logs")

alembic/versions/038_add_error_info_and_retry_to_generation_tasks.py

@@ -1,47 +0,0 @@
-"""add error_info and retry fields to generation_tasks
-
-Revision ID: 038_error_retry
-Revises: 037_generation_logs
-Create Date: 2026-07-13 22:15:00.000000
-"""
-
-import sqlalchemy as sa
-from sqlalchemy.dialects.mysql import JSON as MySQLJSON
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "038_error_retry"
-down_revision = "037_generation_logs"
-branch_labels = None
-depends_on = None
-
-
-def upgrade():
-    # error_info: 结构化错误信息（error_type, message, stack_trace, failed_at, stage等）
-    op.add_column(
-        "generation_tasks",
-        sa.Column("error_info", sa.JSON(), nullable=True),
-    )
-    # retry_count: 重试次数
-    op.add_column(
-        "generation_tasks",
-        sa.Column("retry_count", sa.Integer(), nullable=False, server_default="0"),
-    )
-    # auto_retry_enabled: 是否开启自动重试
-    op.add_column(
-        "generation_tasks",
-        sa.Column("auto_retry_enabled", sa.Boolean(), nullable=False, server_default=sa.text("false")),
-    )
-    # auto_retry_max: 最大自动重试次数
-    op.add_column(
-        "generation_tasks",
-        sa.Column("auto_retry_max", sa.Integer(), nullable=False, server_default="0"),
-    )
-
-
-def downgrade():
-    op.drop_column("generation_tasks", "auto_retry_max")
-    op.drop_column("generation_tasks", "auto_retry_enabled")
-    op.drop_column("generation_tasks", "retry_count")
-    op.drop_column("generation_tasks", "error_info")

alembic/versions/039_add_transition_duration.py

@@ -1,34 +0,0 @@
-"""add transition_duration to edit_plan_clips
-
-Revision ID: 039_transition_duration
-Revises: 038_error_retry
-Create Date: 2026-07-14 09:00:00.000000
-"""
-
-from __future__ import annotations
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "039_transition_duration"
-down_revision = "038_error_retry"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_plan_clips",
-        sa.Column(
-            "transition_duration",
-            sa.Float(),
-            nullable=False,
-            server_default="0.0",
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("edit_plan_clips", "transition_duration")

alembic/versions/040_add_playback_speed_to_edit_plan_clips.py

@@ -1,29 +0,0 @@
-"""add playback_speed to edit_plan_clips
-
-Revision ID: 040_playback_speed
-Revises: 039_transition_duration
-Create Date: 2026-07-14 10:00:00.000000
-"""
-
-from __future__ import annotations
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "040_playback_speed"
-down_revision = "039_transition_duration"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_plan_clips",
-        sa.Column("playback_speed", sa.Float(), nullable=False, server_default="1.0"),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("edit_plan_clips", "playback_speed")

alembic/versions/041_add_result_count_to_edit_plans.py

@@ -1,29 +0,0 @@
-"""add result_count to edit_plans
-
-Revision ID: 041_result_count
-Revises: 040_playback_speed
-Create Date: 2026-07-15 14:05:00.000000
-"""
-
-from __future__ import annotations
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "041_result_count"
-down_revision = "040_playback_speed"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "edit_plans",
-        sa.Column("result_count", sa.Integer(), nullable=False, server_default="0"),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("edit_plans", "result_count")

alembic/versions/042_add_storage_key_to_assets.py

@@ -1,29 +0,0 @@
-"""add storage_key to assets
-
-Revision ID: 042_storage_key
-Revises: 041_result_count
-Create Date: 2026-07-17 18:10:00.000000
-"""
-
-from __future__ import annotations
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "042_storage_key"
-down_revision = "041_result_count"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "assets",
-        sa.Column("storage_key", sa.String(500), nullable=False, server_default=""),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("assets", "storage_key")

alembic/versions/043_add_updated_at_to_generation_tasks.py

@@ -1,33 +0,0 @@
-"""add updated_at to generation_tasks
-
-Revision ID: 043_updated_at_generation_tasks
-Revises: 042_storage_key
-Create Date: 2026-07-18 19:30:00.000000
-
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "043_updated_at_generation_tasks"
-down_revision = "042_storage_key"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generation_tasks",
-        sa.Column(
-            "updated_at",
-            sa.DateTime,
-            nullable=False,
-            server_default=sa.func.now(),
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("generation_tasks", "updated_at")

alembic/versions/044_add_user_id_to_generated_videos.py

@@ -1,34 +0,0 @@
-"""add user_id to generated_videos
-
-Revision ID: 044_user_id_generated_videos
-Revises: 043_updated_at_generation_tasks
-Create Date: 2026-07-19 08:00:00.000000
-
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "044_user_id_generated_videos"
-down_revision = "043_updated_at_generation_tasks"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generated_videos",
-        sa.Column(
-            "user_id",
-            sa.String(36),
-            nullable=False,
-            server_default="",
-            index=True,
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("generated_videos", "user_id")

alembic/versions/045_backfill_user_id.py

@@ -1,36 +0,0 @@
-"""backfill user_id for generated_videos from generation_tasks
-
-Revision ID: 045_backfill_user_id_generated_videos
-Revises: 044_user_id_generated_videos
-Create Date: 2026-07-19 10:50:00.000000
-
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "045_backfill_user_id"
-down_revision = "044_user_id_generated_videos"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    # 回填 generated_videos.user_id：通过 generation_task_id 关联 generation_tasks 表
-    # 取 generation_tasks.created_by_user_id 作为 user_id
-    # 回填不到的（无关联task的兜底记录）保持空字符串
-    op.execute("""
-        UPDATE generated_videos gv
-        SET user_id = gt.created_by_user_id
-        FROM generation_tasks gt
-        WHERE gv.generation_task_id = gt.id
-          AND gv.user_id = ''
-          AND gt.created_by_user_id != ''
-        """)
-
-
-def downgrade() -> None:
-    # 降级不做处理（无法精确区分哪些是回填的）
-    pass

alembic/versions/046_task_title.py

@@ -1,33 +0,0 @@
-"""add video_title to generation_tasks
-
-Revision ID: 046_add_video_title_to_generation_tasks
-Revises: 045_backfill_user_id_generated_videos
-Create Date: 2026-07-19 11:20:00.000000
-
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-# revision identifiers, used by Alembic.
-revision = "046_task_title"
-down_revision = "045_backfill_user_id"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    op.add_column(
-        "generation_tasks",
-        sa.Column(
-            "video_title",
-            sa.String(255),
-            nullable=False,
-            server_default="",
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("generation_tasks", "video_title")

alembic/versions/047_template_versioning.py

@@ -1,64 +0,0 @@
-"""Phase 2 - 模板发布版本化：version字段 + 发布历史表
-
-Revision ID: 047
-Revises: 046
-Create Date: 2026-07-20
-
-Changes:
-1. edit_templates 加 version 字段（INT，默认1，每次发布+1）
-2. 新建 edit_template_versions 表存发布历史快照，支持回滚
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "047_template_versioning"
-down_revision = "046_task_title"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    conn = op.get_bind()
-
-    # 1. edit_templates 加 version 字段
-    op.add_column(
-        "edit_templates",
-        sa.Column("version", sa.Integer, nullable=False, server_default="1"),
-    )
-
-    # 2. 新建 edit_template_versions 发布历史表
-    conn.execute(sa.text("""
-        CREATE TABLE IF NOT EXISTS edit_template_versions (
-            id VARCHAR(36) PRIMARY KEY,
-            template_id VARCHAR(32) NOT NULL,
-            version INTEGER NOT NULL,
-            name VARCHAR(200) NOT NULL DEFAULT '',
-            editing_mode VARCHAR(30) NOT NULL DEFAULT 'one_take',
-            config JSONB NOT NULL DEFAULT '{}',
-            clip_configs JSONB NOT NULL DEFAULT '[]',
-            change_note VARCHAR(500) NOT NULL DEFAULT '',
-            published_by VARCHAR(36) NOT NULL DEFAULT '',
-            created_at TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-    """))
-
-    conn.execute(
-        sa.text(
-            "CREATE INDEX IF NOT EXISTS ix_edit_template_versions_template_id " "ON edit_template_versions(template_id)"
-        )
-    )
-    conn.execute(
-        sa.text(
-            "CREATE UNIQUE INDEX IF NOT EXISTS ix_edit_template_versions_template_version "
-            "ON edit_template_versions(template_id, version)"
-        )
-    )
-
-
-def downgrade() -> None:
-    conn = op.get_bind()
-
-    conn.execute(sa.text("DROP TABLE IF EXISTS edit_template_versions"))
-    op.drop_column("edit_templates", "version")

alembic/versions/048_cleanup_result_count.py

@@ -1,37 +0,0 @@
-"""Phase 3 - 清理 EditPlan 表冗余字段
-
-Revision ID: 048
-Revises: 047
-Create Date: 2026-07-21
-
-Changes:
-1. 删除 edit_plans.result_count 字段（剪辑计划独立功能遗留，模板草稿不用，
-   生成结果数由 generation_tasks.result_count 承载）
-"""
-
-import sqlalchemy as sa
-
-from alembic import op
-
-revision = "048_cleanup_result_count"
-down_revision = "047_template_versioning"
-branch_labels = None
-depends_on = None
-
-
-def upgrade() -> None:
-    # 删除 result_count 字段（剪辑计划独立功能遗留字段）
-    op.drop_column("edit_plans", "result_count")
-
-
-def downgrade() -> None:
-    # 回滚：恢复 result_count 字段，默认值 0
-    op.add_column(
-        "edit_plans",
-        sa.Column(
-            "result_count",
-            sa.Integer,
-            nullable=False,
-            server_default="0",
-        ),
-    )

alembic/versions/049_wechat_login_phone.py

@@ -1,97 +0,0 @@
-"""#558 - 微信登录：手机号绑定字段 + 验证码表
-
-Revision ID: 049
-Revises: 048
-Create Date: 2026-07-21
-
-Changes:
-1. users 表新增 phone_verified / binding_completed_at 字段（phone 字段已在 029 中添加）
-2. users 表 phone 字段添加唯一索引（幂等）
-3. 新建 verification_codes 表（统一管理邮箱+手机验证码）
-"""
-
-import sqlalchemy as sa
-
-from alembic import context, op
-
-revision = "049_wechat_login_phone"
-down_revision = "048_cleanup_result_count"
-branch_labels = None
-depends_on = None
-
-
-def _column_exists(table: str, column: str) -> bool:
-    """检查列是否已存在。离线模式下返回 False。"""
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text("SELECT 1 FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"),
-        {"table": table, "column": column},
-    )
-    return result.first() is not None
-
-
-def _index_exists(index_name: str) -> bool:
-    """检查索引是否已存在。离线模式下返回 False。"""
-    if context.is_offline_mode():
-        return False
-    conn = op.get_bind()
-    result = conn.execute(
-        sa.text("SELECT 1 FROM pg_indexes WHERE indexname = :index_name"),
-        {"index_name": index_name},
-    )
-    return result.first() is not None
-
-
-def upgrade() -> None:
-    # 1. users 表新增手机号验证状态字段（幂等）
-    if not _column_exists("users", "phone_verified"):
-        op.add_column(
-            "users",
-            sa.Column(
-                "phone_verified",
-                sa.Boolean,
-                nullable=False,
-                server_default=sa.text("false"),
-            ),
-        )
-
-    if not _column_exists("users", "binding_completed_at"):
-        op.add_column(
-            "users",
-            sa.Column("binding_completed_at", sa.DateTime, nullable=True),
-        )
-
-    # 2. phone 字段唯一索引（幂等 - 029 加了字段但没加索引）
-    if not _index_exists("ix_users_phone"):
-        op.create_index("ix_users_phone", "users", ["phone"], unique=True)
-
-    # 3. verification_codes 表
-    op.create_table(
-        "verification_codes",
-        sa.Column("id", sa.String(36), primary_key=True),
-        sa.Column("recipient", sa.String(255), nullable=False, index=True),
-        sa.Column("code", sa.String(10), nullable=False),
-        sa.Column("code_type", sa.String(32), nullable=False, index=True),
-        sa.Column("expires_at", sa.DateTime, nullable=False),
-        sa.Column("used_at", sa.DateTime, nullable=True),
-        sa.Column("attempts", sa.Integer, nullable=False, server_default="0"),
-        sa.Column("created_at", sa.DateTime, nullable=False),
-        sa.Index(
-            "ix_verification_recipient_type",
-            "recipient",
-            "code_type",
-            "created_at",
-        ),
-    )
-
-
-def downgrade() -> None:
-    op.drop_table("verification_codes")
-    if _index_exists("ix_users_phone"):
-        op.drop_index("ix_users_phone", table_name="users")
-    if _column_exists("users", "binding_completed_at"):
-        op.drop_column("users", "binding_completed_at")
-    if _column_exists("users", "phone_verified"):
-        op.drop_column("users", "phone_verified")

apps/api/app/__init__.py

@@ -0,0 +1 @@
+"""API application package."""

apps/api/app/api/__init__.py

@@ -0,0 +1 @@
+"""API package."""

apps/api/app/api/router.py

@@ -4,24 +4,17 @@ from app.api.routes.assets import router as assets_router
 from app.api.routes.auth import router as auth_router
 from app.api.routes.chunked_upload import router as chunked_upload_router
 from app.api.routes.classification_jobs import router as classification_jobs_router
-from app.api.routes.duplication import router as duplication_router
-from app.api.routes.feature_flags import router as feature_flags_router
+from app.api.routes.edit_plans import router as edit_plans_router
+from app.api.routes.generated_videos import router as generated_videos_router
 from app.api.routes.generation_tasks import router as generation_tasks_router
 from app.api.routes.health import router as health_check_router
 from app.api.routes.ingest_jobs import router as ingest_jobs_router
-from app.api.routes.internal_render import router as internal_render_router
+from app.api.routes.project_management import router as project_management_router
+from app.api.routes.project_titles import router as project_titles_router
 from app.api.routes.projects import router as projects_router
-from app.api.routes.subscription import router as subscription_router
-from app.api.routes.tags import router as tags_router
 from app.api.routes.task_center import router as task_center_router
-from app.api.routes.templates import router as templates_router
-from app.api.routes.templates_editor import router as templates_editor_router
-from app.api.routes.titles import router as titles_router
-from app.api.routes.tts import router as tts_router
 from app.api.routes.upload import router as upload_router
-from app.api.routes.videos import router as videos_router
-from app.api.routes.voice_clones import router as voice_clones_router
-from app.api.routes.voices import router as voices_router
+from app.api.routes.workspaces import router as workspaces_router
 from fastapi import APIRouter
 
 api_router = APIRouter(prefix="/api/v1")
@@ -32,15 +25,21 @@ api_router.include_router(
     auth_router,
     tags=["Auth"],
 )
+api_router.include_router(
+    workspaces_router,
+    tags=["Workspace"],
+)
 api_router.include_router(
     projects_router,
     prefix="/projects",
     tags=["Project"],
 )
 api_router.include_router(
-    tags_router,
-    prefix="/tags",
-    tags=["Tag"],
+    project_titles_router,
+    tags=["TitleLibrary"],
+)
+api_router.include_router(
+    edit_plans_router,
 )
 api_router.include_router(
     task_center_router,
@@ -86,54 +85,12 @@ api_router.include_router(
     tags=["Generation"],
 )
 api_router.include_router(
-    titles_router,
-    prefix="/titles",
-    tags=["TitleLibrary"],
+    generated_videos_router,
+    prefix="/generated-videos",
+    tags=["GeneratedVideo"],
 )
 api_router.include_router(
-    voices_router,
-    prefix="/voices",
-    tags=["VoiceLibrary"],
-)
-api_router.include_router(
-    voice_clones_router,
-    prefix="/voice-clones",
-    tags=["VoiceClone"],
-)
-api_router.include_router(
-    videos_router,
-    tags=["VideoCenter"],
-)
-api_router.include_router(
-    duplication_router,
-    prefix="/duplication",
-    tags=["Duplication"],
-)
-api_router.include_router(
-    subscription_router,
-    prefix="/subscription",
-    tags=["Subscription"],
-)
-api_router.include_router(
-    templates_router,
-    prefix="/templates",
-    tags=["Template"],
-)
-api_router.include_router(
-    templates_editor_router,
-    prefix="/templates/{template_id}/editor",
-    tags=["TemplateEditor"],
-)
-api_router.include_router(
-    tts_router,
-    prefix="/tts",
-    tags=["TTS"],
-)
-api_router.include_router(
-    feature_flags_router,
-    tags=["Internal"],
-)
-api_router.include_router(
-    internal_render_router,
-    tags=["Internal"],
+    project_management_router,
+    prefix="/project-management",
+    tags=["ProjectManagement"],
 )

apps/api/app/api/routes/_helpers.py

@@ -1,141 +0,0 @@
-"""路由层共享辅助函数 — 消除跨文件重复定义。"""
-
-from datetime import datetime, timezone
-from typing import Any
-
-from fastapi import HTTPException, status
-
-from packages.application import GetProjectUseCase
-from packages.ports.user_repository import UserRepository
-
-
-def check_project_access(project_id: str, user_id: str, project_repository) -> None:
-    """检查用户是否有项目访问权限。
-
-    合并自 asset_libraries.py / edit_plans.py 的同名函数。
-    - 空 project_id 直接放行（兼容 edit_plans 中 project_id 可选的场景）
-    - 错误信息使用中文，与项目其他路由保持一致
-    """
-    if not project_id or not project_id.strip():
-        return
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail="项目不存在")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=403, detail="无权访问该项目")
-
-
-def get_user_plan(user_id: str, user_repository: UserRepository) -> str:
-    """获取用户的订阅计划名称。"""
-    user = user_repository.find_by_id(user_id)
-    if user is None:
-        return "free"
-    return getattr(user, "subscription_plan", "free") or "free"
-
-
-def require_project_and_library(
-    project_id: str,
-    library_id: str,
-    project_repository: Any,
-    asset_library_repository: Any,
-) -> None:
-    """Verify project and asset library exist."""
-    project = GetProjectUseCase(project_repository).execute(project_id)
-    if project is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-
-    libraries = asset_library_repository.find_by_project(project_id)
-    if not any(item.id == library_id for item in libraries):
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Asset library not found")
-
-
-def auto_select_video_assets(
-    *,
-    project_id: str,
-    asset_library_repo: Any,
-    asset_repo: Any,
-    logger=None,
-) -> list[str]:
-    """从项目视频素材库自动选取 ready 状态的视频素材。
-
-    Args:
-        project_id: 项目 ID
-        asset_library_repo: 素材库仓储
-        asset_repo: 素材仓储
-        logger: 可选的 logger 实例，用于记录警告
-
-    Returns:
-        选中的素材 ID 列表，无可用素材时返回空列表
-    """
-    if not project_id:
-        return []
-
-    # 找到项目的视频素材库
-    libs = asset_library_repo.find_by_project(project_id)
-    video_lib = None
-    for lib in libs:
-        lib_kind = lib.kind.value if hasattr(lib.kind, "value") else lib.kind
-        if lib_kind == "video":
-            video_lib = lib
-            break
-
-    if not video_lib:
-        if logger:
-            logger.warning("自动选素材: 项目 %s 无视频素材库", project_id)
-        return []
-
-    # 从素材库中选取 ready 状态的视频素材
-    assets = asset_repo.find_by_library(video_lib.id)
-    ready_videos = [
-        a
-        for a in assets
-        if (a.status.value if hasattr(a.status, "value") else a.status) == "ready"
-        and a.mime_type
-        and a.mime_type.startswith("video")
-    ]
-
-    # 过滤横屏素材（只保留竖屏/正方形）
-    # 移动端短视频场景默认竖屏，横屏素材裁剪后画面不可用
-    # 注意：这只是选素材优化，渲染引擎本身支持任何分辨率的素材
-    filtered_videos = []
-    skipped_landscape = 0
-    for a in ready_videos:
-        width = a.width if hasattr(a, "width") and a.width else 0
-        height = a.height if hasattr(a, "height") and a.height else 0
-        if not width or not height:
-            # 从 metadata 兜底
-            if a.metadata and isinstance(a.metadata, dict):
-                width = int(a.metadata.get("width", 0) or 0)
-                height = int(a.metadata.get("height", 0) or 0)
-        if width and height and width > height:
-            skipped_landscape += 1
-            continue
-        filtered_videos.append(a)
-
-    if skipped_landscape and logger:
-        logger.warning("自动选素材: 跳过 %d 个横屏素材", skipped_landscape)
-
-    if not filtered_videos:
-        if logger:
-            logger.warning("自动选素材: 素材库 %s 无可用视频素材", video_lib.name)
-        return []
-
-    # 按创建时间降序（新素材在前）
-    filtered_videos.sort(key=lambda a: a.created_at, reverse=True)
-    return [a.id for a in filtered_videos]
-
-
-def format_utc_datetime(dt: datetime | None) -> str:
-    """将数据库读出的 UTC naive datetime 格式化为带时区的 ISO 8601 字符串。
-
-    数据库 DateTime 列不带时区信息，但存的是 UTC 时间。
-    直接 .isoformat() 输出无时区标识，前端会按本地时间解析，导致差 8 小时。
-    输出带 Z 后缀，前端 new Date() 自动转本地时间。
-    """
-    if dt is None:
-        return ""
-    if isinstance(dt, str):
-        return dt
-    if dt.tzinfo is None:
-        return dt.isoformat() + "Z"
-    return dt.astimezone(timezone.utc).isoformat().replace("+00:00", "Z")

apps/api/app/api/routes/asset_diagnosis.py

@@ -1,18 +1,18 @@
-import logging
-from typing import Any, Optional
+from typing import Any
 
+from app.api.routes.permissions import require_workspace_member
 from app.auth import AuthenticatedUser, get_current_user
 from app.dependencies import (
     get_asset_library_repository,
     get_asset_repository,
     get_project_repository,
+    get_workspace_member_repository,
 )
 from app.schemas.asset_diagnosis import AssetGapItem, AssetSmartViewItem, ProjectAssetDiagnosisResponse
-from fastapi import APIRouter, Depends, HTTPException, Query
+from fastapi import APIRouter, Depends, HTTPException
 
 from packages.domain import Asset, AssetLibraryKind, AssetStatus
-
-logger = logging.getLogger(__name__)
+from packages.ports.workspace_member_repository import WorkspaceMemberRepository
 
 router = APIRouter()
 
@@ -37,7 +37,7 @@ def _readiness_label(score: int) -> str:
     return "暂不建议生成"
 
 
-def _build_diagnosis(project_id: str, assets: list[Asset]) -> ProjectAssetDiagnosisResponse:
+def _build_diagnosis(workspace_id: str, project_id: str, assets: list[Asset]) -> ProjectAssetDiagnosisResponse:
     ready_assets = [asset for asset in assets if asset.status == AssetStatus.READY]
     video_assets = [asset for asset in ready_assets if _asset_kind(asset) == AssetLibraryKind.VIDEO]
     image_assets = [asset for asset in ready_assets if _asset_kind(asset) == AssetLibraryKind.IMAGE]
@@ -175,6 +175,7 @@ def _build_diagnosis(project_id: str, assets: list[Asset]) -> ProjectAssetDiagno
     ]
 
     return ProjectAssetDiagnosisResponse(
+        workspace_id=workspace_id,
         project_id=project_id,
         readiness_score=score,
         readiness_label=_readiness_label(score),
@@ -193,152 +194,23 @@ def _build_diagnosis(project_id: str, assets: list[Asset]) -> ProjectAssetDiagno
     )
 
 
-def _build_single_asset_diagnosis(project_id: str, asset: Asset) -> ProjectAssetDiagnosisResponse:
-    """为单个素材构建诊断结果"""
-    kind = _asset_kind(asset)
-    is_ready = asset.status == AssetStatus.READY
-    is_problem = asset.status in {AssetStatus.ERROR, AssetStatus.UPLOADING, AssetStatus.PROCESSING}
-    is_risky = is_ready and (
-        (asset.quality_score is not None and asset.quality_score < 60)
-        or asset.metadata.get("review_status") == "rejected"
-        or asset.status == AssetStatus.ERROR
-    )
-    is_unclassified = is_ready and asset.classification_status.value in {"pending", "failed"}
-
-    # 单素材评分
-    score = 0
-    if is_ready:
-        score = 60
-        if kind == "video":
-            score += 20
-        if asset.duration and asset.duration >= 5:
-            score += 10
-        if asset.quality_score and asset.quality_score >= 60:
-            score += 10
-    if is_problem:
-        score = max(score - 30, 0)
-    if is_risky:
-        score = max(score - 20, 0)
-    score = max(0, min(100, score))
-
-    gaps: list[AssetGapItem] = []
-    if not is_ready:
-        gaps.append(
-            AssetGapItem(
-                key="asset_not_ready",
-                severity="critical",
-                message=f"素材状态为 {asset.status.value}，尚未就绪",
-                recommendation="等待素材导入完成后再使用。",
-            )
-        )
-    if is_risky:
-        gaps.append(
-            AssetGapItem(
-                key="asset_low_quality",
-                severity="warning",
-                message="素材质量分偏低或已被拒绝",
-                recommendation="建议使用更清晰、稳定的素材替代。",
-            )
-        )
-    if is_unclassified:
-        gaps.append(
-            AssetGapItem(
-                key="asset_unclassified",
-                severity="info",
-                message="素材尚未完成分类",
-                recommendation="等待分类完成或手动检查素材类型。",
-            )
-        )
-    if kind == "video" and (asset.duration is None or asset.duration < 5):
-        gaps.append(
-            AssetGapItem(
-                key="short_video",
-                severity="warning",
-                message="视频时长偏短",
-                recommendation="建议使用时长 5 秒以上的视频素材。",
-            )
-        )
-
-    used_count = int(asset.metadata.get("generation_use_count") or 0)
-    smart_views = [
-        AssetSmartViewItem(
-            key="asset_info",
-            label="素材信息",
-            count=1,
-            description=f"类型: {kind}，状态: {asset.status.value}",
-        ),
-        AssetSmartViewItem(
-            key="asset_quality",
-            label="质量评分",
-            count=int(asset.quality_score or 0),
-            description=f"质量分: {asset.quality_score or '未评分'}",
-        ),
-        AssetSmartViewItem(
-            key="asset_usage",
-            label="使用次数",
-            count=used_count,
-            description=f"参与生成 {used_count} 次",
-        ),
-    ]
-
-    video_count = 1 if kind == "video" and is_ready else 0
-    image_count = 1 if kind == "image" and is_ready else 0
-    voice_count = 1 if kind == "voice" and is_ready else 0
-    total_duration = round(float(asset.duration or 0), 2) if kind == "video" else 0.0
-
-    return ProjectAssetDiagnosisResponse(
-        project_id=project_id,
-        readiness_score=score,
-        readiness_label=_readiness_label(score),
-        total_assets=1,
-        ready_assets=1 if is_ready else 0,
-        video_assets=video_count,
-        image_assets=image_count,
-        voice_assets=voice_count,
-        total_duration_seconds=total_duration,
-        estimated_video_count=1 if video_count and total_duration >= 5 else 0,
-        used_assets=1 if used_count > 0 else 0,
-        unused_assets=1 if used_count == 0 and is_ready else 0,
-        pending_review_assets=1 if asset.metadata.get("review_status") == "pending_review" else 0,
-        smart_views=smart_views,
-        gaps=gaps,
-    )
-
-
 @router.get("/projects/{project_id}/asset-diagnosis", response_model=ProjectAssetDiagnosisResponse)
 def get_project_asset_diagnosis(
     project_id: str,
-    asset_id: Optional[str] = Query(None),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
     asset_repository: Any = Depends(get_asset_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
 ) -> ProjectAssetDiagnosisResponse:
-    try:
-        project = project_repository.find_by_id(project_id)
-        if project is None:
-            raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-        if not project.can_access(authenticated_user.user.id):
-            raise HTTPException(status_code=403, detail="Access denied to project")
+    project = project_repository.find_by_id(project_id)
+    if project is None:
+        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
+    require_workspace_member(project.workspace_id, authenticated_user, workspace_member_repository)
 
-        # 单素材诊断模式
-        if asset_id:
-            asset = asset_repository.get(asset_id)
-            if asset is None:
-                raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-            if asset.project_id != project_id:
-                raise HTTPException(status_code=403, detail="Asset does not belong to this project")
-            return _build_single_asset_diagnosis(project_id, asset)
+    libraries = asset_library_repository.list_by_project(project_id)
+    assets: list[Asset] = []
+    for library in libraries:
+        assets.extend(asset_repository.list_by_library(library.id))
 
-        libraries = asset_library_repository.find_by_project(project_id)
-        assets: list[Asset] = []
-        for library in libraries:
-            assets.extend(asset_repository.list_by_library(library.id))
-    except HTTPException:
-        raise
-    except Exception:
-        logger.exception("素材诊断查询失败: project_id=%s", project_id)
-        # 返回空诊断结果，避免 500
-        return _build_diagnosis(project_id, [])
-
-    return _build_diagnosis(project_id, assets)
+    return _build_diagnosis(project.workspace_id, project_id, assets)

apps/api/app/api/routes/asset_libraries.py

@@ -1,18 +1,13 @@
 from typing import Any
 
 from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import (
-    get_asset_library_repository,
-    get_asset_repository,
-    get_project_repository,
-)
+from app.dependencies import get_asset_library_repository, get_project_repository
 from app.schemas.asset_library import (
     AssetLibraryResponse,
     CreateAssetLibraryRequest,
-    EnsureDefaultLibraryRequest,
     ListAssetLibrariesResponse,
 )
-from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
+from fastapi import APIRouter, Depends, HTTPException, status
 
 from packages.application import (
     CreateAssetLibraryCommand,
@@ -20,13 +15,20 @@ from packages.application import (
     GetProjectUseCase,
     ListAssetLibrariesUseCase,
 )
-from packages.domain import AssetLibrary, AssetLibraryKind
-
-from ._helpers import check_project_access
+from packages.domain import AssetLibraryKind
 
 router = APIRouter()
 
 
+def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
+    """检查用户是否有项目访问权限"""
+    project = project_repository.find_by_id(project_id)
+    if project is None:
+        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
+    if not project.can_access(user_id):
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
+
+
 def _to_asset_library_response(item) -> AssetLibraryResponse:
     return AssetLibraryResponse(
         id=item.id,
@@ -40,36 +42,18 @@ def _to_asset_library_response(item) -> AssetLibraryResponse:
 
 @router.get("", response_model=ListAssetLibrariesResponse)
 def list_asset_libraries(
-    project_id: str | None = Query(None),
-    kind: str | None = Query(None, pattern="^(video|voice|image)$"),
+    project_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     asset_library_repository: Any = Depends(get_asset_library_repository),
     project_repository: Any = Depends(get_project_repository),
 ) -> ListAssetLibrariesResponse:
-    user_id = authenticated_user.user.id
+    project = GetProjectUseCase(project_repository).execute(project_id)
+    if project is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
+    if not project.can_access(authenticated_user.id):
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
     use_case = ListAssetLibrariesUseCase(asset_library_repository)
-
-    if project_id:
-        # If project_id provided, check access and filter by project
-        project = GetProjectUseCase(project_repository).execute(project_id)
-        if project is None:
-            raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-        if not project.can_access(user_id):
-            raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
-        items = use_case.execute(project_id)
-    else:
-        # If no project_id, list all libraries from accessible projects
-        accessible_projects = project_repository.find_accessible_projects(user_id)
-        all_items = []
-        for proj in accessible_projects:
-            all_items.extend(use_case.execute(proj.id))
-        items = all_items
-
-    # 按 kind 过滤（可选）
-    if kind:
-        kind_enum = AssetLibraryKind(kind)
-        items = [item for item in items if item.kind == kind_enum]
-
+    items = use_case.execute(project_id)
     return ListAssetLibrariesResponse(items=[_to_asset_library_response(item) for item in items])
 
 
@@ -83,7 +67,7 @@ def create_asset_library(
     project = project_repository.find_by_id(request.project_id)
     if project is None:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-    if not project.can_access(authenticated_user.user.id):
+    if not project.can_access(authenticated_user.id):
         raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
     use_case = CreateAssetLibraryUseCase(asset_library_repository)
     item = use_case.execute(
@@ -94,79 +78,3 @@ def create_asset_library(
         )
     )
     return _to_asset_library_response(item)
-
-
-# 默认素材库名称映射
-_DEFAULT_LIBRARY_NAMES = {
-    "video": "视频素材库",
-    "voice": "配音素材库",
-    "image": "图片素材库",
-}
-
-
-@router.post("/ensure-default", response_model=AssetLibraryResponse)
-def ensure_default_library(
-    request: EnsureDefaultLibraryRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_library_repository: Any = Depends(get_asset_library_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> AssetLibraryResponse:
-    """确保项目下指定 kind 的默认素材库存在，已存在则直接返回，不存在则自动创建。"""
-    project = project_repository.find_by_id(request.project_id)
-    if project is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-    if not project.can_access(authenticated_user.user.id):
-        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
-
-    kind = AssetLibraryKind(request.kind)
-
-    # 查找该项目下同 kind 的素材库，返回第一个
-    existing = asset_library_repository.find_by_project(request.project_id)
-    for lib in existing:
-        if lib.kind == kind:
-            return _to_asset_library_response(lib)
-
-    # 不存在 → 自动创建
-    import uuid
-    from datetime import datetime, timezone
-
-    now = datetime.now(timezone.utc)
-    default_name = _DEFAULT_LIBRARY_NAMES.get(request.kind, f"{request.kind}素材库")
-    library = AssetLibrary(
-        id=str(uuid.uuid4()),
-        project_id=request.project_id,
-        name=default_name,
-        kind=kind,
-        asset_count=0,
-        total_size=0,
-        created_at=now,
-        updated_at=now,
-    )
-    created = asset_library_repository.create(library)
-    return _to_asset_library_response(created)
-
-
-@router.delete("/{library_id}", status_code=status.HTTP_204_NO_CONTENT, response_class=Response)
-def delete_asset_library(
-    library_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_library_repository: Any = Depends(get_asset_library_repository),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> None:
-    """删除素材库，同时删除库内所有素材。"""
-    # 查找素材库
-    library = asset_library_repository.find_by_id(library_id)
-    if library is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="素材库不存在")
-
-    # 权限校验：检查用户是否有项目访问权限
-    check_project_access(library.project_id, authenticated_user.user.id, project_repository)
-
-    # 删除库内所有素材（硬删除，素材库已删除，无需保留软删除状态）
-    assets_in_library = asset_repository.find_by_library(library_id)
-    for asset in assets_in_library:
-        asset_repository.delete(asset.id)
-
-    # 删除素材库本身
-    asset_library_repository.delete(library_id)

apps/api/app/api/routes/assets.py

@@ -1,57 +1,25 @@
-import logging
-from typing import Any, Optional
+from typing import Any
 
-from app.api.routes._helpers import check_project_access, format_utc_datetime
 from app.auth import AuthenticatedUser, get_current_user
-from app.core.storage import get_storage_service
 from app.dependencies import (
     get_asset_library_repository,
     get_asset_repository,
     get_project_repository,
-    get_tag_repository,
 )
-from app.schemas.asset import (
-    AssetResponse,
-    BatchClassifyRequest,
-    BatchDeleteRequest,
-    BatchMarkRequest,
-    BatchOperationResponse,
-    BatchTagRequest,
-    CreateAssetRequest,
-    ListAssetsResponse,
-    UpdateAssetRequest,
-    UpdateAssetReviewRequest,
-)
-from app.schemas.tag import TagAssetsRequest
-from fastapi import APIRouter, Depends, HTTPException, Query, Response
+from app.schemas.asset import AssetResponse, CreateAssetRequest, ListAssetsResponse, UpdateAssetReviewRequest
+from fastapi import APIRouter, Depends, HTTPException
 
 from packages.application import (
     CreateAssetCommand,
     CreateAssetUseCase,
+    ListAssetsUseCase,
 )
 from packages.domain import AssetStatus, ClassificationStatus
 
-logger = logging.getLogger(__name__)
-
 router = APIRouter()
 
 
-def _to_asset_response(item, storage_service=None) -> AssetResponse:
-    # 生成签名文件 URL（用于视频播放 / 文件下载）
-    file_url = None
-    if item.storage_key:
-        try:
-            svc = storage_service or get_storage_service()
-            file_url = svc.get_download_url(item.storage_key)
-        except Exception:
-            logger.warning("生成签名URL失败: storage_key=%s", item.storage_key, exc_info=True)
-            file_url = None
-
-    # 缩略图：优先用已有 thumbnail_url，否则对视频素材复用文件签名 URL
-    thumbnail_url = item.thumbnail_url
-    if not thumbnail_url and item.mime_type and item.mime_type.startswith("video") and file_url:
-        thumbnail_url = file_url
-
+def _to_asset_response(item) -> AssetResponse:
     return AssetResponse(
         id=item.id,
         project_id=item.project_id,
@@ -61,8 +29,7 @@ def _to_asset_response(item, storage_service=None) -> AssetResponse:
         mime_type=item.mime_type,
         metadata=item.metadata,
         file_size=item.file_size,
-        file_url=file_url,
-        thumbnail_url=thumbnail_url,
+        thumbnail_url=item.thumbnail_url,
         duration=item.duration,
         width=item.width,
         height=item.height,
@@ -71,274 +38,34 @@ def _to_asset_response(item, storage_service=None) -> AssetResponse:
         status=item.status.value,
         classification_status=item.classification_status.value,
         quality_score=item.quality_score,
-        created_at=format_utc_datetime(item.created_at),
         uploaded_by_user_id=item.uploaded_by_user_id,
-        tag_ids=getattr(item, "tag_ids", []),
     )
 
 
+def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
+    """检查用户是否有项目访问权限"""
+    project = project_repository.find_by_id(project_id)
+    if project is None:
+        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
+    if not project.can_access(user_id):
+        raise HTTPException(status_code=403, detail="Access denied to project")
+
+
 @router.get("", response_model=ListAssetsResponse)
 def list_assets(
-    library_id: Optional[str] = Query(None),
-    project_id: Optional[str] = Query(None),
-    kind: Optional[str] = Query(None, pattern="^(video|voice|image)$"),
-    keyword: Optional[str] = Query(None, description="按名称模糊匹配"),
-    gender: Optional[str] = Query(None, description="按 metadata.gender 筛选"),
-    style: Optional[str] = Query(None, description="按 metadata.style 筛选"),
-    tag_ids: Optional[str] = Query(None, description="按标签 ID 筛选（逗号分隔，取交集）"),
-    smart_view: Optional[str] = Query(
-        None,
-        description="智能视图筛选：recommended=推荐(质量分≥80)、cautious=慎用(60-79)、risky=高风险(<60或已驳回)、unused=未使用、used=已使用、pending_review=待复核",
-        pattern="^(recommended|cautious|risky|unused|used|pending_review)$",
-    ),
-    classification: Optional[str] = Query(
-        None,
-        description="按内容分类筛选：scenic=风景、product=产品、person=人物、animal=动物、food=美食、tech=科技、sport=运动、music=音乐、other=其他",
-    ),
-    status: Optional[str] = Query(
-        "default",
-        description="按状态筛选，逗号分隔多值；默认返回除deleted外的所有状态；传deleted查看回收站；传all返回所有状态",
-    ),
-    page: Optional[int] = Query(None, ge=1, description="页码，从1开始；与 page_size 配对使用，优先于 skip/limit"),
-    page_size: Optional[int] = Query(None, ge=1, le=500, description="每页数量；与 page 配对使用"),
-    skip: int = Query(0, ge=0),
-    limit: int = Query(100, ge=1, le=500),
+    library_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     asset_repository: Any = Depends(get_asset_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
     project_repository: Any = Depends(get_project_repository),
 ) -> ListAssetsResponse:
-    user_id = authenticated_user.user.id
-
-    # ── 分页：page/page_size 优先于 skip/limit
-    if page is not None and page_size is not None:
-        skip = (page - 1) * page_size
-        limit = page_size
-
-    # ── 解析 status 过滤
-    status_list: list[str] | None
-    if status and status.lower() == "all":
-        status_list = None  # None = 不过滤，返回所有状态
-    elif status and status.lower() == "deleted":
-        status_list = ["deleted"]  # 仅查回收站
-    elif status and status.lower() == "default":
-        status_list = ["ready", "uploading", "processing", "error"]  # 默认排除deleted
-    elif status:
-        status_list = [s.strip() for s in status.split(",") if s.strip()]
-        if not status_list:
-            status_list = ["ready", "uploading", "processing", "error"]
-    else:
-        status_list = ["ready", "uploading", "processing", "error"]
-
-    # kind → file_type 映射（voice 对应 audio）
-    kind_to_file_type = {"video": "video", "voice": "audio", "image": "image"}
-
-    # 解析 tag_ids 参数（逗号分隔）
-    filter_tag_ids: list[str] | None = None
-    if tag_ids:
-        filter_tag_ids = [t.strip() for t in tag_ids.split(",") if t.strip()]
-        if not filter_tag_ids:
-            filter_tag_ids = None
-
-    # 需要内存过滤的标志（keyword/gender/style/tag_ids/smart_view/classification 无法在 DB 层过滤）
-    needs_memory_filter = bool(keyword or gender or style or filter_tag_ids or smart_view or classification)
-
-    def _apply_memory_filters(items):
-        """应用 keyword / gender / style / tag_ids / smart_view / classification 内存过滤。"""
-        result = items
-        if keyword:
-            kw = keyword.lower()
-            result = [i for i in result if kw in (i.name or "").lower()]
-        if gender:
-            result = [i for i in result if (i.metadata or {}).get("gender") == gender]
-        if style:
-            result = [i for i in result if (i.metadata or {}).get("style") == style]
-        if classification:
-            result = [i for i in result if (i.metadata or {}).get("classification") == classification]
-        if filter_tag_ids:
-            tag_set = set(filter_tag_ids)
-            result = [i for i in result if tag_set.issubset(set(getattr(i, "tag_ids", [])))]
-        if smart_view:
-
-            def __meta(a):
-                return a.metadata or {}
-
-            def __use_count(a):
-                return int(__meta(a).get("generation_use_count") or 0)
-
-            def __review_status(a):
-                return __meta(a).get("review_status", "")
-
-            if smart_view == "recommended":
-                result = [i for i in result if i.quality_score is not None and i.quality_score >= 80]
-            elif smart_view == "cautious":
-                result = [i for i in result if i.quality_score is not None and 60 <= i.quality_score < 80]
-            elif smart_view == "risky":
-                result = [
-                    i
-                    for i in result
-                    if (i.quality_score is not None and i.quality_score < 60) or __review_status(i) == "rejected"
-                ]
-            elif smart_view == "unused":
-                result = [i for i in result if __use_count(i) == 0]
-            elif smart_view == "used":
-                result = [i for i in result if __use_count(i) > 0]
-            elif smart_view == "pending_review":
-                result = [i for i in result if __review_status(i) == "pending_review"]
-        return result
-
-    # ── 优化路径：无内存过滤时，使用 DB 级分页 ──
-    if not needs_memory_filter:
-        ft = kind_to_file_type.get(kind) if kind else None
-
-        # 模式1：指定 library_id
-        if library_id:
-            library = asset_library_repository.get(library_id)
-            if library is None:
-                raise HTTPException(status_code=404, detail=f"AssetLibrary {library_id} not found")
-            check_project_access(library.project_id, user_id, project_repository)
-            if ft:
-                items = asset_repository.find_by_library_and_file_type(
-                    library_id, ft, skip=skip, limit=limit, status=status_list
-                )
-                total = asset_repository.count_by_library_and_file_type(library_id, ft, status=status_list)
-            else:
-                items = asset_repository.find_by_library(library_id, skip=skip, limit=limit, status=status_list)
-                total = asset_repository.count_by_project(library.project_id, status=status_list)
-            return ListAssetsResponse(
-                items=[_to_asset_response(item) for item in items],
-                total=total,
-                skip=skip,
-                limit=limit,
-            )
-
-        # 模式2：指定 project_id
-        if project_id:
-            check_project_access(project_id, user_id, project_repository)
-            if ft:
-                items = asset_repository.find_by_project_and_file_type(
-                    project_id, ft, skip=skip, limit=limit, status=status_list
-                )
-                total = asset_repository.count_by_project_and_file_type(project_id, ft, status=status_list)
-                paged = items
-            else:
-                items = asset_repository.find_by_project(project_id, skip=skip, limit=limit, status=status_list)
-                total = asset_repository.count_by_project(project_id, status=status_list)
-                paged = items
-            return ListAssetsResponse(
-                items=[_to_asset_response(item) for item in paged],
-                total=total,
-                skip=skip,
-                limit=limit,
-            )
-
-        # 模式3：跨项目（无 library_id/project_id）
-        try:
-            projects = project_repository.find_accessible_projects(user_id)
-        except Exception:
-            logger.exception("查询用户可访问项目失败: user_id=%s", user_id)
-            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
-
-        project_ids = [p.id for p in projects]
-        if not project_ids:
-            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
-
-        if ft:
-            # 有 kind 过滤：逐项目查 file_type，凑够一页
-            total = 0
-            paged_items: list = []
-            offset = skip
-            remaining = limit
-            for pid in project_ids:
-                proj_total = asset_repository.count_by_project_and_file_type(pid, ft, status=status_list)
-                total += proj_total
-                if offset >= proj_total:
-                    offset -= proj_total
-                    continue
-                proj_items = asset_repository.find_by_project_and_file_type(
-                    pid, ft, skip=offset, limit=remaining, status=status_list
-                )
-                paged_items.extend(proj_items)
-                remaining -= len(proj_items)
-                offset = 0
-                if remaining <= 0:
-                    break
-        else:
-            total = asset_repository.count_by_project_ids(project_ids, status=status_list)
-            # 跨项目分页：逐项目累积直到凑够一页
-            paged_items: list = []
-            offset = skip
-            remaining = limit
-            for pid in project_ids:
-                proj_total = asset_repository.count_by_project(pid, status=status_list)
-                if offset >= proj_total:
-                    offset -= proj_total
-                    continue
-                proj_items = asset_repository.find_by_project(pid, skip=offset, limit=remaining, status=status_list)
-                paged_items.extend(proj_items)
-                remaining -= len(proj_items)
-                offset = 0
-                if remaining <= 0:
-                    break
-
-        return ListAssetsResponse(
-            items=[_to_asset_response(item) for item in paged_items],
-            total=total,
-            skip=skip,
-            limit=limit,
-        )
-
-    # ── 内存过滤路径：有 keyword/gender/style 时，加载全量后内存过滤 ──
-    if library_id:
-        library = asset_library_repository.get(library_id)
-        if library is None:
-            raise HTTPException(status_code=404, detail=f"AssetLibrary {library_id} not found")
-        check_project_access(library.project_id, user_id, project_repository)
-        if kind:
-            all_items = asset_repository.find_by_library_and_file_type(
-                library_id, kind_to_file_type[kind], status=status_list
-            )
-        else:
-            all_items = asset_repository.find_by_library(library_id, status=status_list)
-    elif project_id:
-        check_project_access(project_id, user_id, project_repository)
-        if kind:
-            ft = kind_to_file_type.get(kind)
-            if ft:
-                all_items = asset_repository.find_by_project_and_file_type(project_id, ft, status=status_list)
-            else:
-                all_items = asset_repository.find_by_project(project_id, status=status_list)
-        else:
-            all_items = asset_repository.find_by_project(project_id, status=status_list)
-    else:
-        try:
-            projects = project_repository.find_accessible_projects(user_id)
-        except Exception:
-            logger.exception("查询用户可访问项目失败: user_id=%s", user_id)
-            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
-        all_items = []
-        for proj in projects:
-            if kind and kind_to_file_type.get(kind):
-                all_items.extend(
-                    asset_repository.find_by_project_and_file_type(proj.id, kind_to_file_type[kind], status=status_list)
-                )
-            else:
-                all_items.extend(asset_repository.find_by_project(proj.id, status=status_list))
-
-    # 应用 kind 过滤（如果有）+ keyword/gender/style
-    if kind:
-        ft = kind_to_file_type.get(kind)
-        if ft:
-            all_items = [i for i in all_items if i.file_type == ft]
-    filtered = _apply_memory_filters(all_items)
-    total = len(filtered)
-    paged = filtered[skip : skip + limit]
-    return ListAssetsResponse(
-        items=[_to_asset_response(item) for item in paged],
-        total=total,
-        skip=skip,
-        limit=limit,
-    )
+    library = asset_library_repository.get(library_id)
+    if library is None:
+        raise HTTPException(status_code=404, detail=f"AssetLibrary {library_id} not found")
+    _check_project_access(library.project_id, authenticated_user.id, project_repository)
+    use_case = ListAssetsUseCase(asset_repository)
+    items = use_case.execute(library_id)
+    return ListAssetsResponse(items=[_to_asset_response(item) for item in items])
 
 
 def _apply_asset_review_status(item, review_status: str):
@@ -360,260 +87,12 @@ def update_asset_review_status(
     item = asset_repository.get(asset_id)
     if item is None:
         raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    _check_project_access(item.project_id, authenticated_user.id, project_repository)
     _apply_asset_review_status(item, request.review_status)
     updated = asset_repository.update(item)
     return _to_asset_response(updated)
 
 
-@router.post("/batch-delete", response_model=BatchOperationResponse)
-def batch_delete_assets(
-    request: BatchDeleteRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> BatchOperationResponse:
-    """批量删除素材（软删除，标记 status=deleted），需逐项校验项目权限。"""
-    user_id = authenticated_user.user.id
-    success_ids: list[str] = []
-    failed_details: dict[str, str] = {}
-
-    for asset_id in request.asset_ids:
-        item = asset_repository.find_by_id(asset_id)
-        if item is None:
-            failed_details[asset_id] = "not_found"
-            continue
-        try:
-            check_project_access(item.project_id, user_id, project_repository)
-            success_ids.append(asset_id)
-        except HTTPException:
-            failed_details[asset_id] = "access_denied"
-
-    if success_ids:
-        asset_repository.batch_delete(success_ids)
-
-    return BatchOperationResponse(
-        success_count=len(success_ids),
-        failed_ids=list(failed_details.keys()),
-        failed_details=failed_details,
-    )
-
-
-@router.post("/batch-tag", response_model=BatchOperationResponse)
-def batch_tag_assets(
-    request: BatchTagRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-    tag_repository: Any = Depends(get_tag_repository),
-) -> BatchOperationResponse:
-    """批量打标签（添加或替换模式），需逐项校验项目权限和标签权限。"""
-    user_id = authenticated_user.user.id
-    success_ids: list[str] = []
-    failed_details: dict[str, str] = {}
-
-    # 校验标签存在且属于当前用户
-    for tag_id in request.tag_ids:
-        tag = tag_repository.get(tag_id)
-        if tag is None:
-            return BatchOperationResponse(
-                success_count=0,
-                failed_ids=list(request.asset_ids),
-                failed_details={aid: f"tag_not_found:{tag_id}" for aid in request.asset_ids},
-            )
-        if tag.user_id != user_id:
-            return BatchOperationResponse(
-                success_count=0,
-                failed_ids=list(request.asset_ids),
-                failed_details={aid: f"tag_access_denied:{tag_id}" for aid in request.asset_ids},
-            )
-
-    # 校验素材权限
-    for asset_id in request.asset_ids:
-        item = asset_repository.find_by_id(asset_id)
-        if item is None:
-            failed_details[asset_id] = "not_found"
-            continue
-        try:
-            check_project_access(item.project_id, user_id, project_repository)
-            success_ids.append(asset_id)
-        except HTTPException:
-            failed_details[asset_id] = "access_denied"
-
-    if success_ids:
-        if request.mode == "replace":
-            asset_repository.batch_replace_tags(success_ids, request.tag_ids)
-        else:
-            asset_repository.batch_add_tags(success_ids, request.tag_ids)
-
-    return BatchOperationResponse(
-        success_count=len(success_ids),
-        failed_ids=list(failed_details.keys()),
-        failed_details=failed_details,
-    )
-
-
-@router.post("/batch-classify", response_model=BatchOperationResponse)
-def batch_classify_assets(
-    request: BatchClassifyRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> BatchOperationResponse:
-    """批量修改素材内容分类（person/scenic/product等），存在metadata.category中。"""
-    user_id = authenticated_user.user.id
-    success_ids: list[str] = []
-    failed_details: dict[str, str] = {}
-
-    for asset_id in request.asset_ids:
-        item = asset_repository.find_by_id(asset_id)
-        if item is None:
-            failed_details[asset_id] = "not_found"
-            continue
-        try:
-            check_project_access(item.project_id, user_id, project_repository)
-            success_ids.append(asset_id)
-        except HTTPException:
-            failed_details[asset_id] = "access_denied"
-
-    if success_ids:
-        asset_repository.batch_update_metadata(success_ids, {"category": request.category})
-
-    return BatchOperationResponse(
-        success_count=len(success_ids),
-        failed_ids=list(failed_details.keys()),
-        failed_details=failed_details,
-    )
-
-
-@router.post("/batch-mark", response_model=BatchOperationResponse)
-def batch_mark_assets(
-    request: BatchMarkRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> BatchOperationResponse:
-    """批量设置智能视图标记（recommended/caution/high_risk），存在metadata.smart_view中。"""
-    user_id = authenticated_user.user.id
-    success_ids: list[str] = []
-    failed_details: dict[str, str] = {}
-
-    for asset_id in request.asset_ids:
-        item = asset_repository.find_by_id(asset_id)
-        if item is None:
-            failed_details[asset_id] = "not_found"
-            continue
-        try:
-            check_project_access(item.project_id, user_id, project_repository)
-            success_ids.append(asset_id)
-        except HTTPException:
-            failed_details[asset_id] = "access_denied"
-
-    if success_ids:
-        asset_repository.batch_update_metadata(success_ids, {"smart_view": request.smart_view})
-
-    return BatchOperationResponse(
-        success_count=len(success_ids),
-        failed_ids=list(failed_details.keys()),
-        failed_details=failed_details,
-    )
-
-
-@router.get("/{asset_id}", response_model=AssetResponse)
-def get_asset(
-    asset_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> AssetResponse:
-    item = asset_repository.find_by_id(asset_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
-    return _to_asset_response(item)
-
-
-@router.put("/{asset_id}", response_model=AssetResponse)
-def update_asset(
-    asset_id: str,
-    request: UpdateAssetRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> AssetResponse:
-    item = asset_repository.find_by_id(asset_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
-
-    # 合并可修改字段
-    if request.name is not None:
-        item.name = request.name
-    if request.metadata is not None:
-        item.metadata = {**item.metadata, **request.metadata}
-    if request.tags is not None:
-        item.metadata = {**item.metadata, "tags": request.tags}
-
-    updated = asset_repository.update(item)
-    return _to_asset_response(updated)
-
-
-@router.delete("/{asset_id}", status_code=204, response_class=Response)
-def delete_asset(
-    asset_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> None:
-    item = asset_repository.find_by_id(asset_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
-    asset_repository.delete(asset_id)
-
-
-@router.post("/{asset_id}/tags", response_model=AssetResponse)
-def tag_asset(
-    asset_id: str,
-    request: TagAssetsRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-    tag_repository: Any = Depends(get_tag_repository),
-) -> AssetResponse:
-    """给素材打标签。"""
-    item = asset_repository.find_by_id(asset_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
-    for tag_id in request.tag_ids:
-        tag = tag_repository.get(tag_id)
-        if tag is None:
-            raise HTTPException(status_code=404, detail=f"Tag {tag_id} not found")
-        if tag.user_id != authenticated_user.user.id:
-            raise HTTPException(status_code=403, detail=f"无权使用标签 {tag_id}")
-        item.add_tag(tag_id)
-    updated = asset_repository.update(item)
-    return _to_asset_response(updated)
-
-
-@router.delete("/{asset_id}/tags/{tag_id}", status_code=204, response_class=Response)
-def untag_asset(
-    asset_id: str,
-    tag_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    asset_repository: Any = Depends(get_asset_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> None:
-    """取消素材的标签。"""
-    item = asset_repository.find_by_id(asset_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
-    item.remove_tag(tag_id)
-    asset_repository.update(item)
-
-
 @router.post("", response_model=AssetResponse)
 def create_asset(
     request: CreateAssetRequest,
@@ -625,9 +104,9 @@ def create_asset(
     project = project_repository.find_by_id(request.project_id)
     if project is None:
         raise HTTPException(status_code=404, detail=f"Project {request.project_id} not found")
-    if not project.can_access(authenticated_user.user.id):
+    if not project.can_access(authenticated_user.id):
         raise HTTPException(status_code=403, detail="Access denied to project")
-
+    
     library = asset_library_repository.get(request.library_id)
     if library is None or library.project_id != request.project_id:
         raise HTTPException(status_code=404, detail=f"AssetLibrary {request.library_id} not found")
@@ -651,7 +130,7 @@ def create_asset(
             status=AssetStatus(request.status),
             classification_status=ClassificationStatus(request.classification_status),
             quality_score=request.quality_score,
-            uploaded_by_user_id=authenticated_user.user.id,
+            uploaded_by_user_id=authenticated_user.id,
         )
     )
     return _to_asset_response(item)

apps/api/app/api/routes/auth.py

@@ -5,24 +5,18 @@ The route layer is intentionally thin: repository construction lives in
 app.dependencies and authentication behavior lives in application use cases.
 """
 
-import logging
-import os
 from typing import Optional
 
-import jwt
-from app.auth import AuthenticatedUser, blacklist_token, get_current_user
+from app.auth import AuthenticatedUser, get_current_user
 from app.config import settings
 from app.dependencies import get_auth_email_service, get_auth_session_store, get_user_repository
-from fastapi import APIRouter, Depends, Header, HTTPException, status
-from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
+from fastapi import APIRouter, Depends, HTTPException, status
 from pydantic import BaseModel, EmailStr
 
 from packages.adapters.redis import NoopSessionStore
 from packages.adapters.smtp import NoopEmailService
 from packages.application.auth.login_use_case import LoginRequest as LoginUseCaseRequest
 from packages.application.auth.login_use_case import LoginUseCase
-from packages.application.auth.login_use_case import RefreshTokenRequest as RefreshTokenUseCaseRequest
-from packages.application.auth.login_use_case import RefreshTokenUseCase
 from packages.application.auth.password_reset_use_case import RequestPasswordResetRequest as PasswordResetUseCaseRequest
 from packages.application.auth.password_reset_use_case import (
     RequestPasswordResetUseCase,
@@ -33,10 +27,6 @@ from packages.application.auth.register_user_use_case import RegisterUserRequest
 from packages.application.auth.register_user_use_case import RegisterUserUseCase, VerifyEmailRequest, VerifyEmailUseCase
 from packages.ports.user_repository import UserRepository
 
-logger = logging.getLogger(__name__)
-
-bearer_scheme = HTTPBearer(auto_error=False)
-
 router = APIRouter(prefix="/auth", tags=["认证"])
 
 
@@ -60,13 +50,8 @@ class LoginRequest(BaseModel):
     password: str
 
 
-class RefreshRequest(BaseModel):
-    refresh_token: str
-
-
 class LoginResponse(BaseModel):
     access_token: str
-    refresh_token: str
     token_type: str = "bearer"
     user_id: str
     email: str
@@ -81,9 +66,6 @@ class CurrentUserResponse(BaseModel):
     username: str
     display_name: str
     email_verified: bool
-    phone: str = ""
-    phone_verified: bool = False
-    binding_complete: bool = False
 
 
 class PasswordResetRequestModel(BaseModel):
@@ -108,10 +90,10 @@ async def register(
     request: RegisterRequest,
     user_repository: UserRepository = Depends(get_user_repository),
     email_service=Depends(get_auth_email_service),
-) -> RegisterResponse:
+):
     use_case = RegisterUserUseCase(
         user_repository=user_repository,
-        base_url=settings.APP_BASE_URL,
+        base_url="http://localhost:3000",
         email_service=email_service,
     )
     response, error = use_case.execute(
@@ -139,7 +121,7 @@ async def login(
     request: LoginRequest,
     user_repository: UserRepository = Depends(get_user_repository),
     session_store=Depends(get_auth_session_store),
-) -> LoginResponse:
+):
     use_case = LoginUseCase(
         user_repository=user_repository,
         session_store=session_store,
@@ -151,32 +133,6 @@ async def login(
 
     return LoginResponse(
         access_token=response.access_token,
-        refresh_token=response.refresh_token,
-        user_id=response.user_id,
-        email=response.email,
-        username=response.username,
-        display_name=response.display_name,
-        expires_in=response.expires_in,
-    )
-
-
-@router.post("/refresh")
-async def refresh(
-    request: RefreshRequest,
-    user_repository: UserRepository = Depends(get_user_repository),
-    session_store=Depends(get_auth_session_store),
-) -> LoginResponse:
-    use_case = RefreshTokenUseCase(
-        user_repository=user_repository,
-        session_store=session_store,
-    )
-    response, error = use_case.execute(RefreshTokenUseCaseRequest(refresh_token=request.refresh_token))
-    if error or response is None:
-        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid or expired refresh token")
-
-    return LoginResponse(
-        access_token=response.access_token,
-        refresh_token=response.refresh_token,
         user_id=response.user_id,
         email=response.email,
         username=response.username,
@@ -197,7 +153,7 @@ def _verify_email_token(token: str, user_repository: UserRepository) -> MessageR
 async def verify_email(
     token: str,
     user_repository: UserRepository = Depends(get_user_repository),
-) -> MessageResponse:
+):
     return _verify_email_token(token, user_repository)
 
 
@@ -205,19 +161,20 @@ async def verify_email(
 async def verify_email_post(
     request: VerifyEmailRequestModel,
     user_repository: UserRepository = Depends(get_user_repository),
-) -> MessageResponse:
+):
     return _verify_email_token(request.token, user_repository)
 
 
+@router.post("/password/forgot", response_model=MessageResponse, status_code=status.HTTP_202_ACCEPTED)
 @router.post("/forgot-password", response_model=MessageResponse, status_code=status.HTTP_202_ACCEPTED)
 async def forgot_password(
     request: PasswordResetRequestModel,
     user_repository: UserRepository = Depends(get_user_repository),
     email_service=Depends(get_auth_email_service),
-) -> MessageResponse:
+):
     success, error = RequestPasswordResetUseCase(
         user_repository=user_repository,
-        base_url=settings.APP_BASE_URL,
+        base_url="http://localhost:3000",
         email_service=email_service,
     ).execute(PasswordResetUseCaseRequest(email=request.email))
     if not success:
@@ -226,11 +183,12 @@ async def forgot_password(
     return MessageResponse(message="如果账户存在，密码重置邮件已发送")
 
 
+@router.post("/password/reset", response_model=MessageResponse)
 @router.post("/reset-password", response_model=MessageResponse)
 async def reset_password(
     request: ResetPasswordModel,
     user_repository: UserRepository = Depends(get_user_repository),
-) -> MessageResponse:
+):
     success, error = ResetPasswordUseCase(user_repository=user_repository).execute(
         ResetPasswordRequest(token=request.token, new_password=request.new_password)
     )
@@ -240,38 +198,17 @@ async def reset_password(
     return MessageResponse(message="密码重置成功")
 
 
-@router.post("/logout")
-async def logout(
-    credentials: HTTPAuthorizationCredentials | None = Depends(bearer_scheme),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> MessageResponse:
-    """登出 - 将当前 token 加入黑名单"""
-
-    if credentials:
-        try:
-            payload = jwt.decode(credentials.credentials, settings.JWT_SECRET_KEY, algorithms=["HS256"])
-            exp = payload.get("exp", 0)
-            blacklist_token(credentials.credentials, exp)
-        except Exception as e:
-            logger.warning(f"Operation failed in apps/api/app/api/routes/auth.py: {e}", exc_info=True)
-    return MessageResponse(message="已登出")
-
-
 @router.get("/me", response_model=CurrentUserResponse)
 async def get_current_user_info(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
-) -> CurrentUserResponse:
+):
     user = authenticated_user.user
-    binding_complete = user.phone_verified and user.email_verified and user.email and "@wechat.local" not in user.email
     return CurrentUserResponse(
         user_id=user.id,
         email=user.email,
         username=user.username,
         display_name=user.display_name,
         email_verified=user.email_verified,
-        phone=user.phone or "",
-        phone_verified=user.phone_verified,
-        binding_complete=binding_complete,
     )
 
 
@@ -291,298 +228,3 @@ def _translate_auth_error(error: str | None) -> str:
         "Display name is required": "显示名称不能为空",
     }
     return translations.get(error or "", error or "注册失败")
-
-
-class WechatSyncRequest(BaseModel):
-    openid: str
-    unionid: Optional[str] = None
-    nickname: Optional[str] = None
-    avatar_url: Optional[str] = None
-    source: str = "miniapp"
-
-
-class WechatSyncResponse(BaseModel):
-    access_token: str
-    token: str
-    refresh_token: str
-    user_id: str
-    user: dict
-    user_info: dict
-    is_new_user: bool
-    expires_in: int
-
-
-def _get_internal_api_keys() -> list[str]:
-    """获取内部 API Key 列表
-
-    优先级:
-    1. INTERNAL_API_KEYS 环境变量
-    2. /app/generated/internal_api_keys.txt 文件 (volume 持久化)
-    """
-    env_keys = os.environ.get("INTERNAL_API_KEYS", "")
-    if env_keys:
-        return [k.strip() for k in env_keys.split(",") if k.strip()]
-
-    # 从持久化文件读取
-    try:
-        with open("/app/generated/internal_api_keys.txt", "r") as f:
-            content = f.read().strip()
-            if content:
-                return [k.strip() for k in content.split(",") if k.strip()]
-    except Exception:
-        logger.warning("无法读取内部 API 密钥文件，仅依赖环境变量配置", exc_info=True)
-
-    return []
-
-
-def _verify_internal_api_key(x_api_key: str | None = Header(None)) -> bool:
-    """验证内部 API Key
-
-    - 已配置时：必须匹配 INTERNAL_API_KEYS 中的 key
-    - 未配置且非生产环境：放行（方便开发）
-    - 未配置且生产环境：拒绝
-    """
-    env = os.environ.get("APP_ENV", os.environ.get("ENV", "development")).lower()
-    key_list = _get_internal_api_keys()
-
-    if not key_list:
-        if env in ("production", "prod"):
-            raise HTTPException(status_code=401, detail="内部接口未配置 API Key")
-        return True
-
-    if x_api_key and x_api_key.strip() in key_list:
-        return True
-
-    raise HTTPException(status_code=401, detail="无效的 API Key")
-
-
-@router.post("/wechat-sync", response_model=WechatSyncResponse, include_in_schema=False)
-async def wechat_sync(
-    request: WechatSyncRequest,
-    user_repository: UserRepository = Depends(get_user_repository),
-    _: bool = Depends(_verify_internal_api_key),
-) -> WechatSyncResponse:
-    """
-    微信同步登录/注册（系统级内部接口）
-
-    由 BFF 层通过 API Key 调用，不直接面向终端用户。
-    根据 openid 查找或创建用户，返回 SaaS token。
-    """
-    from packages.application.auth.wechat_sync_use_case import WechatSyncRequest as UseCaseRequest
-    from packages.application.auth.wechat_sync_use_case import (
-        WechatSyncUseCase,
-    )
-
-    use_case = WechatSyncUseCase(user_repository=user_repository)
-    use_case_request = UseCaseRequest(
-        openid=request.openid,
-        unionid=request.unionid,
-        nickname=request.nickname,
-        avatar_url=request.avatar_url,
-        source=request.source,
-    )
-
-    response, error = use_case.execute(use_case_request)
-    if error:
-        raise HTTPException(status_code=400, detail=error)
-
-    return WechatSyncResponse(**response.to_dict())
-
-
-# ==================== 微信网页登录（OAuth） ====================
-
-
-class WechatAuthUrlResponse(BaseModel):
-    auth_url: str
-    state: str
-
-
-class WechatCallbackRequest(BaseModel):
-    code: str
-    state: str = ""
-
-
-class WechatLoginResponse(BaseModel):
-    access_token: str
-    refresh_token: str
-    user_id: str
-    display_name: str
-    avatar_url: str = ""
-    is_new_user: bool
-    binding_complete: bool
-    expires_in: int
-
-
-@router.get("/wechat/url", response_model=WechatAuthUrlResponse)
-async def get_wechat_auth_url() -> WechatAuthUrlResponse:
-    """获取微信扫码登录授权链接"""
-    from packages.application.auth.wechat_oauth_service import get_wechat_oauth_service
-
-    oauth_service = get_wechat_oauth_service()
-    auth_url, state = oauth_service.generate_auth_url()
-    return WechatAuthUrlResponse(auth_url=auth_url, state=state)
-
-
-@router.post("/wechat/callback", response_model=WechatLoginResponse)
-async def wechat_callback(
-    request: WechatCallbackRequest,
-    user_repository: UserRepository = Depends(get_user_repository),
-) -> WechatLoginResponse:
-    """微信登录回调处理"""
-    from packages.application.auth.wechat_oauth_service import get_wechat_oauth_service
-    from packages.application.auth.wechat_sync_use_case import WechatSyncRequest as SyncRequest
-    from packages.application.auth.wechat_sync_use_case import WechatSyncUseCase
-
-    # 1. 用 code 换微信用户信息
-    oauth_service = get_wechat_oauth_service()
-    wechat_user, err = oauth_service.handle_callback(request.code, request.state)
-    if err:
-        raise HTTPException(status_code=400, detail=err)
-
-    # 2. 同步登录/注册（复用 wechat-sync 逻辑）
-    use_case = WechatSyncUseCase(user_repository=user_repository)
-    sync_request = SyncRequest(
-        openid=wechat_user.openid,
-        unionid=wechat_user.unionid,
-        nickname=wechat_user.nickname,
-        avatar_url=wechat_user.avatar_url,
-        source="web",
-    )
-    response, err = use_case.execute(sync_request)
-    if err:
-        raise HTTPException(status_code=400, detail=err)
-
-    # 3. 判断绑定状态
-    user = user_repository.find_by_id(response.user_id)
-    binding_complete = False
-    if user:
-        binding_complete = (
-            user.phone_verified and user.email_verified and user.email and "@wechat.local" not in user.email
-        )
-
-    return WechatLoginResponse(
-        access_token=response.access_token,
-        refresh_token=response.refresh_token,
-        user_id=response.user_id,
-        display_name=response.nickname,
-        avatar_url=response.avatar_url or wechat_user.avatar_url,
-        is_new_user=response.is_new_user,
-        binding_complete=binding_complete,
-        expires_in=response.expires_in,
-    )
-
-
-# ==================== 验证码 & 绑定 ====================
-
-
-class SendVerificationCodeRequest(BaseModel):
-    target: str  # phone / email
-    value: str
-    purpose: str  # bind / login / reset_password
-
-
-class SendVerificationCodeResponse(BaseModel):
-    expires_in: int
-    resend_after: int
-
-
-class BindContactRequest(BaseModel):
-    phone: str = ""
-    phone_code: str = ""
-    email: str = ""
-    email_code: str = ""
-
-
-class BindContactResponse(BaseModel):
-    success: bool
-    user: dict
-
-
-@router.post("/send-verification-code", response_model=SendVerificationCodeResponse)
-async def send_verification_code(
-    request: SendVerificationCodeRequest,
-) -> SendVerificationCodeResponse:
-    """发送验证码（手机或邮箱）"""
-    from app.dependencies import get_db_session
-
-    from packages.adapters.sms.sms_service import get_sms_service
-    from packages.adapters.smtp import get_email_service
-    from packages.adapters.sqlalchemy_impl.verification_code_repository import (
-        SQLAlchemyVerificationCodeRepository,
-    )
-    from packages.application.auth.bind_contact_use_case import SendVerificationCodeRequest as UseCaseRequest
-    from packages.application.auth.bind_contact_use_case import (
-        SendVerificationCodeUseCase,
-    )
-    from packages.application.auth.verification_code_service import VerificationCodeService
-
-    db = next(get_db_session())
-    repo = SQLAlchemyVerificationCodeRepository(db)
-    vc_service = VerificationCodeService(repo=repo)
-    sms_service = get_sms_service()
-    email_service = get_email_service()
-
-    use_case = SendVerificationCodeUseCase(
-        verification_code_service=vc_service,
-        sms_service=sms_service,
-        email_service=email_service,
-    )
-    uc_request = UseCaseRequest(
-        target=request.target,
-        value=request.value,
-        purpose=request.purpose,
-    )
-    response, err = use_case.execute(uc_request)
-    if err:
-        raise HTTPException(status_code=400, detail=err)
-
-    return SendVerificationCodeResponse(
-        expires_in=response.expires_in,
-        resend_after=response.resend_after,
-    )
-
-
-@router.post("/bind-contact", response_model=BindContactResponse)
-async def bind_contact(
-    request: BindContactRequest,
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    user_repository: UserRepository = Depends(get_user_repository),
-) -> BindContactResponse:
-    """绑定手机号和/或邮箱（需登录态）"""
-    from app.dependencies import get_db_session
-
-    from packages.adapters.sqlalchemy_impl.verification_code_repository import (
-        SQLAlchemyVerificationCodeRepository,
-    )
-    from packages.application.auth.bind_contact_use_case import BindContactRequest as UseCaseRequest
-    from packages.application.auth.bind_contact_use_case import (
-        BindContactUseCase,
-    )
-    from packages.application.auth.verification_code_service import VerificationCodeService
-
-    db = next(get_db_session())
-    vc_repo = SQLAlchemyVerificationCodeRepository(db)
-    vc_service = VerificationCodeService(repo=vc_repo)
-
-    use_case = BindContactUseCase(
-        user_repository=user_repository,
-        verification_code_service=vc_service,
-    )
-    uc_request = UseCaseRequest(
-        user_id=current_user.user.id,
-        phone=request.phone,
-        phone_code=request.phone_code,
-        email=request.email,
-        email_code=request.email_code,
-    )
-    response, err = use_case.execute(uc_request)
-    if err:
-        raise HTTPException(status_code=400, detail=err)
-
-    return BindContactResponse(success=True, user=response.to_dict()["user"])
-
-
-# ==================== 当前用户信息扩展 ====================
-
-# 扩展 CurrentUserResponse 增加绑定状态字段（在原响应基础上补充）
-# 通过给 get_current_user_info 返回值补充字段实现

apps/api/app/api/routes/chunked_upload.py

@@ -6,22 +6,22 @@ Supports chunked upload, resume, and automatic cleanup of expired uploads.
 import fcntl
 import json
 import logging
+import os
 import shutil
-import tempfile
 from datetime import datetime, timedelta, timezone
 from pathlib import Path
 from typing import Any
 from uuid import uuid4
 
-from app.api.routes._helpers import require_project_and_library
 from app.auth import AuthenticatedUser, get_current_user
+from app.config import get_settings
 from app.core.celery_app import celery_app
 from app.core.storage import OSSStorageService, get_storage_service
 from app.dependencies import (
     get_asset_library_repository,
-    get_asset_repository,
     get_ingest_job_repository,
     get_project_repository,
+    get_workspace_member_repository,
 )
 from app.schemas.chunked_upload import (
     ChunkedUploadCompleteRequest,
@@ -34,6 +34,7 @@ from fastapi import APIRouter, Depends, HTTPException, UploadFile, status
 from fastapi.params import File
 
 from packages.application import GetProjectUseCase, SubmitIngestJobCommand, SubmitIngestJobUseCase
+from packages.ports.workspace_member_repository import WorkspaceMemberRepository
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
@@ -43,37 +44,15 @@ DEFAULT_CHUNK_SIZE = 5 * 1024 * 1024  # 5MB
 MAX_FILE_SIZE = 2 * 1024 * 1024 * 1024  # 2GB
 CHUNK_EXPIRY_HOURS = 24
 
-# Allowed file types — must stay in sync with upload.py ALLOWED_MIME_TYPES
+# Allowed file types (consistent with existing upload.py)
 ALLOWED_MIME_TYPES = {
-    # Images
-    "image/jpeg",
-    "image/png",
-    "image/gif",
-    "image/webp",
-    "image/bmp",
-    "image/tiff",
-    "image/svg+xml",
-    # Video
-    "video/mp4",
-    "video/quicktime",
-    "video/mpeg",
-    "video/x-msvideo",
-    "video/webm",
-    "video/x-matroska",
-    "video/3gpp",
-    # Audio
-    "audio/mpeg",
-    "audio/wav",
-    "audio/ogg",
-    "audio/mp3",
-    "audio/flac",
-    "audio/aac",
-    "audio/x-m4a",
-    "audio/webm",
+    "image/jpeg", "image/png", "image/gif", "image/webp",
+    "video/mp4", "video/quicktime", "video/x-msvideo", "video/webm",
+    "audio/mpeg", "audio/wav", "audio/ogg", "audio/mp3",
 }
 
 # Chunk storage root directory
-CHUNK_STORAGE_ROOT = Path(tempfile.gettempdir()) / "chunked_uploads"
+CHUNK_STORAGE_ROOT = Path("/tmp/chunked_uploads")
 
 
 def _get_chunk_dir(upload_id: str) -> Path:
@@ -90,13 +69,13 @@ def _atomic_check_and_record(upload_id: str, chunk_index: int) -> bool:
     """
     Atomically check if chunk is uploaded and record if not.
     Uses file locking to prevent race conditions.
-
+    
     Returns:
         True if chunk was newly recorded, False if already exists
     """
     meta_path = _get_upload_meta_path(upload_id)
     CHUNK_STORAGE_ROOT.mkdir(parents=True, exist_ok=True)
-
+    
     with open(meta_path, "r+", encoding="utf-8") as f:
         fcntl.flock(f.fileno(), fcntl.LOCK_EX)
         try:
@@ -113,6 +92,34 @@ def _atomic_check_and_record(upload_id: str, chunk_index: int) -> bool:
             fcntl.flock(f.fileno(), fcntl.LOCK_UN)
 
 
+def _require_workspace_member(
+    workspace_id: str,
+    authenticated_user: AuthenticatedUser,
+    workspace_member_repository: WorkspaceMemberRepository,
+) -> None:
+    """Verify user has workspace permission"""
+    member = workspace_member_repository.find_by_workspace_and_user(workspace_id, authenticated_user.user.id)
+    if member is None:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Workspace access denied")
+
+
+def _require_project_and_library(
+    workspace_id: str,
+    project_id: str,
+    library_id: str,
+    project_repository: Any,
+    asset_library_repository: Any,
+) -> None:
+    """Verify project and asset library exist"""
+    project = GetProjectUseCase(project_repository).execute(project_id)
+    if project is None or project.workspace_id != workspace_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
+
+    libraries = asset_library_repository.list_by_project(project_id)
+    if not any(item.id == library_id and item.workspace_id == workspace_id for item in libraries):
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Asset library not found")
+
+
 def _load_upload_meta(upload_id: str) -> dict[str, Any]:
     """Load upload metadata"""
     meta_path = _get_upload_meta_path(upload_id)
@@ -135,17 +142,15 @@ def _validate_file_type(content: bytes, filename: str) -> str:
     """Validate file type"""
     try:
         import magic
-
         detected_mime = magic.from_buffer(content, mime=True)
     except ImportError:
         import mimetypes
-
         detected_mime = mimetypes.guess_type(filename)[0] or "application/octet-stream"
 
     if detected_mime not in ALLOWED_MIME_TYPES:
         raise HTTPException(
             status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"Unsupported file type: {detected_mime}. Allowed types: {', '.join(sorted(ALLOWED_MIME_TYPES))}",
+            detail=f"Unsupported file type: {detected_mime}. Allowed types: {', '.join(sorted(ALLOWED_MIME_TYPES))}"
         )
     return detected_mime
 
@@ -188,8 +193,10 @@ async def init_chunked_upload(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
 ) -> ChunkedUploadInitResponse:
     """Initialize chunked upload"""
+    settings = get_settings()
 
     # Validate file size
     if request.file_size > MAX_FILE_SIZE:
@@ -198,13 +205,17 @@ async def init_chunked_upload(
             detail=f"File exceeds maximum size ({MAX_FILE_SIZE // (1024 * 1024 * 1024)}GB)",
         )
 
-    # Validate project exists
+    # Validate project exists and get workspace_id
     project = GetProjectUseCase(project_repository).execute(request.project_id)
     if project is None:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
 
-    # Verify asset library
-    require_project_and_library(
+    workspace_id = project.workspace_id
+
+    # Verify permission and asset library
+    _require_workspace_member(workspace_id, authenticated_user, workspace_member_repository)
+    _require_project_and_library(
+        workspace_id,
         request.project_id,
         request.library_id,
         project_repository,
@@ -242,6 +253,7 @@ async def init_chunked_upload(
         "content_type": request.content_type,
         "project_id": request.project_id,
         "library_id": request.library_id,
+        "workspace_id": workspace_id,
         "status": "pending",
         "created_at": now.isoformat(),
         "expires_at": expires_at.isoformat(),
@@ -257,14 +269,95 @@ async def init_chunked_upload(
     )
 
 
+@router.post("/{upload_id}/{chunk_index}")
+async def upload_chunk(
+    upload_id: str,
+    chunk_index: int,
+    chunk: UploadFile = File(..., description="Chunk data"),
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
+) -> dict[str, Any]:
+    """Upload a single chunk"""
+    # Load metadata
+    meta = _load_upload_meta(upload_id)
+
+    # Check expiry
+    expires_at = datetime.fromisoformat(meta["expires_at"])
+    if expires_at.tzinfo is None:
+        expires_at = expires_at.replace(tzinfo=timezone.utc)
+
+    if expires_at < datetime.now(timezone.utc):
+        raise HTTPException(status_code=status.HTTP_410_GONE, detail="Upload has expired")
+
+    # Validate chunk index
+    if chunk_index < 0 or chunk_index >= meta["total_chunks"]:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Invalid chunk index. Must be between 0 and {meta['total_chunks'] - 1}",
+        )
+
+    # Verify permission
+    _require_workspace_member(meta["workspace_id"], authenticated_user, workspace_member_repository)
+
+    # Atomic check and record to prevent race conditions
+    if not _atomic_check_and_record(upload_id, chunk_index):
+        return {"message": "Chunk already uploaded", "chunk_index": chunk_index}
+
+    # Read chunk data
+    chunk_data = await chunk.read()
+
+    # Validate chunk size (last chunk can be smaller than chunk_size)
+    expected_size = DEFAULT_CHUNK_SIZE
+    if chunk_index == meta["total_chunks"] - 1:
+        expected_size = meta["file_size"] - (chunk_index * DEFAULT_CHUNK_SIZE)
+
+    if len(chunk_data) != expected_size:
+        # Rollback the recorded chunk
+        meta_path = _get_upload_meta_path(upload_id)
+        with open(meta_path, "r+", encoding="utf-8") as f:
+            fcntl.flock(f.fileno(), fcntl.LOCK_EX)
+            try:
+                meta = json.load(f)
+                if chunk_index in meta["uploaded_chunks"]:
+                    meta["uploaded_chunks"].remove(chunk_index)
+                f.seek(0)
+                json.dump(meta, f, ensure_ascii=False, indent=2)
+                f.truncate()
+            finally:
+                fcntl.flock(f.fileno(), fcntl.LOCK_UN)
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Chunk size mismatch. Expected {expected_size}, got {len(chunk_data)}",
+        )
+
+    # Save chunk
+    chunk_path = _get_chunk_dir(upload_id) / f"chunk_{chunk_index:06d}"
+    with open(chunk_path, "wb") as f:
+        f.write(chunk_data)
+
+    # Reload metadata for response
+    meta = _load_upload_meta(upload_id)
+
+    return {
+        "message": "Chunk uploaded successfully",
+        "chunk_index": chunk_index,
+        "uploaded_chunks": len(meta["uploaded_chunks"]),
+        "total_chunks": meta["total_chunks"],
+    }
+
+
 @router.get("/{upload_id}/status", response_model=ChunkedUploadStatusResponse)
 async def get_upload_status(
     upload_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
 ) -> ChunkedUploadStatusResponse:
     """Get upload status (for resume)"""
     meta = _load_upload_meta(upload_id)
 
+    # Verify permission
+    _require_workspace_member(meta["workspace_id"], authenticated_user, workspace_member_repository)
+
     return ChunkedUploadStatusResponse(
         upload_id=upload_id,
         filename=meta["filename"],
@@ -284,7 +377,7 @@ async def complete_chunked_upload(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
-    asset_repository: Any = Depends(get_asset_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     storage_service: OSSStorageService = Depends(get_storage_service),
 ) -> ChunkedUploadCompleteResponse:
@@ -292,6 +385,9 @@ async def complete_chunked_upload(
     # Load metadata
     meta = _load_upload_meta(upload_id)
 
+    # Verify permission
+    _require_workspace_member(meta["workspace_id"], authenticated_user, workspace_member_repository)
+
     # Verify project ID and library ID
     if request.project_id != meta["project_id"] or request.library_id != meta["library_id"]:
         raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="Project or library ID mismatch")
@@ -348,37 +444,14 @@ async def complete_chunked_upload(
             content_type=meta["content_type"],
         )
 
-        # ── 素材去重检测：同素材库 + 同 file_hash 视为重复 ──
-        if request.file_hash:
-            existing = asset_repository.find_by_library_and_file_hash(
-                library_id=request.library_id,
-                file_hash=request.file_hash,
-            )
-            if existing is not None:
-                logger.info(
-                    "素材去重命中(chunked): library=%s hash=%s existing_asset=%s",
-                    request.library_id,
-                    request.file_hash,
-                    existing.id,
-                )
-                meta["status"] = "completed"
-                _save_upload_meta(upload_id, meta)
-                return ChunkedUploadCompleteResponse(
-                    storage_key=storage_key,
-                    ingest_job_id="",
-                    url=file_url,
-                    duplicated=True,
-                    asset_id=existing.id,
-                )
-
         # Create ingest job
         use_case = SubmitIngestJobUseCase(ingest_job_repository)
         job = use_case.execute(
             SubmitIngestJobCommand(
+                workspace_id=meta["workspace_id"],
                 project_id=meta["project_id"],
                 library_id=meta["library_id"],
                 storage_key=storage_key,
-                file_hash=request.file_hash,
             )
         )
         celery_app.send_task("worker.ingest_asset", args=[job.id])
@@ -403,76 +476,3 @@ async def complete_chunked_upload(
         meta_path = _get_upload_meta_path(upload_id)
         if meta_path.exists():
             meta_path.unlink()
-
-
-@router.post("/{upload_id}/{chunk_index}")
-async def upload_chunk(
-    upload_id: str,
-    chunk_index: int,
-    chunk: UploadFile = File(..., description="Chunk data"),
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-) -> dict[str, Any]:
-    """Upload a single chunk"""
-    # Load metadata
-    meta = _load_upload_meta(upload_id)
-
-    # Check expiry
-    expires_at = datetime.fromisoformat(meta["expires_at"])
-    if expires_at.tzinfo is None:
-        expires_at = expires_at.replace(tzinfo=timezone.utc)
-
-    if expires_at < datetime.now(timezone.utc):
-        raise HTTPException(status_code=status.HTTP_410_GONE, detail="Upload has expired")
-
-    # Validate chunk index
-    if chunk_index < 0 or chunk_index >= meta["total_chunks"]:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"Invalid chunk index. Must be between 0 and {meta['total_chunks'] - 1}",
-        )
-
-    # Atomic check and record to prevent race conditions
-    if not _atomic_check_and_record(upload_id, chunk_index):
-        return {"message": "Chunk already uploaded", "chunk_index": chunk_index}
-
-    # Read chunk data
-    chunk_data = await chunk.read()
-
-    # Validate chunk size (last chunk can be smaller than chunk_size)
-    expected_size = DEFAULT_CHUNK_SIZE
-    if chunk_index == meta["total_chunks"] - 1:
-        expected_size = meta["file_size"] - (chunk_index * DEFAULT_CHUNK_SIZE)
-
-    if len(chunk_data) != expected_size:
-        # Rollback the recorded chunk
-        meta_path = _get_upload_meta_path(upload_id)
-        with open(meta_path, "r+", encoding="utf-8") as f:
-            fcntl.flock(f.fileno(), fcntl.LOCK_EX)
-            try:
-                meta = json.load(f)
-                if chunk_index in meta["uploaded_chunks"]:
-                    meta["uploaded_chunks"].remove(chunk_index)
-                f.seek(0)
-                json.dump(meta, f, ensure_ascii=False, indent=2)
-                f.truncate()
-            finally:
-                fcntl.flock(f.fileno(), fcntl.LOCK_UN)
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"Chunk size mismatch. Expected {expected_size}, got {len(chunk_data)}",
-        )
-
-    # Save chunk
-    chunk_path = _get_chunk_dir(upload_id) / f"chunk_{chunk_index:06d}"
-    with open(chunk_path, "wb") as f:
-        f.write(chunk_data)
-
-    # Reload metadata for response
-    meta = _load_upload_meta(upload_id)
-
-    return {
-        "message": "Chunk uploaded successfully",
-        "chunk_index": chunk_index,
-        "uploaded_chunks": len(meta["uploaded_chunks"]),
-        "total_chunks": meta["total_chunks"],
-    }

apps/api/app/api/routes/classification_jobs.py

@@ -1,3 +1,4 @@
+from datetime import datetime, timezone
 from typing import Any
 
 from app.core.celery_app import celery_app

apps/api/app/api/routes/duplication.py

@@ -1,303 +0,0 @@
-"""查重 API 路由。"""
-
-from __future__ import annotations
-
-import logging
-from typing import Any
-from uuid import uuid4
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.core.storage import OSSStorageService, get_storage_service
-from app.dependencies import get_duplication_repository
-from app.schemas.duplication import (
-    DuplicateSegmentResponse,
-    DuplicationDetailResponse,
-    DuplicationRecordResponse,
-    DuplicationUploadResponse,
-)
-from fastapi import APIRouter, Depends, File, HTTPException, Query, Response, UploadFile, status
-
-from packages.application import (
-    DeleteDuplicationRecordUseCase,
-    GetDuplicationDetailUseCase,
-    ListDuplicationRecordsUseCase,
-    RetryDuplicationUseCase,
-    UploadForDuplicationCommand,
-    UploadForDuplicationUseCase,
-)
-from packages.domain.duplication import DuplicationRecord
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(
-    tags=["查重"],
-)
-
-# 查重功能只接受视频文件
-ALLOWED_VIDEO_MIME_TYPES = frozenset(
-    {
-        "video/mp4",
-        "video/mpeg",
-        "video/quicktime",
-        "video/x-msvideo",
-        "video/webm",
-        "video/x-matroska",
-        "video/3gpp",
-    }
-)
-
-
-def _validate_video_mime_type(content_type: str | None) -> str:
-    """验证视频文件的 MIME 类型，如果无效则抛出异常。"""
-    if not content_type:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail="Content-Type header is required",
-        )
-
-    # 处理带参数的类型，如 "video/mp4; charset=utf-8"
-    base_type = content_type.split(";")[0].strip().lower()
-
-    if base_type not in ALLOWED_VIDEO_MIME_TYPES:
-        raise HTTPException(
-            status_code=status.HTTP_415_UNSUPPORTED_MEDIA_TYPE,
-            detail="只支持视频文件。支持的类型: mp4, mpeg, mov, avi, webm, mkv, 3gp",
-        )
-
-    return base_type
-
-
-def _to_record_response(record: DuplicationRecord) -> DuplicationRecordResponse:
-    return DuplicationRecordResponse(
-        id=record.id,
-        filename=record.filename,
-        file_size=record.file_size,
-        duration_seconds=record.duration_seconds,
-        status=record.status,
-        duplicate_rate=record.duplicate_rate,
-        duplicate_count=record.duplicate_count,
-        created_at=record.created_at.isoformat(),
-        updated_at=record.updated_at.isoformat(),
-    )
-
-
-def _to_detail_response(record: DuplicationRecord) -> DuplicationDetailResponse:
-    return DuplicationDetailResponse(
-        id=record.id,
-        filename=record.filename,
-        file_size=record.file_size,
-        duration_seconds=record.duration_seconds,
-        status=record.status,
-        duplicate_rate=record.duplicate_rate,
-        duplicate_count=record.duplicate_count,
-        created_at=record.created_at.isoformat(),
-        updated_at=record.updated_at.isoformat(),
-        segments=[
-            DuplicateSegmentResponse(
-                id=seg.id,
-                source_start=seg.source_start,
-                source_end=seg.source_end,
-                matched_video_id=seg.matched_video_id,
-                matched_video_name=seg.matched_video_name,
-                matched_start=seg.matched_start,
-                matched_end=seg.matched_end,
-                similarity=seg.similarity,
-            )
-            for seg in record.segments
-        ],
-    )
-
-
-@router.post("/upload", response_model=DuplicationUploadResponse)
-async def upload_for_duplication(
-    file: UploadFile = File(..., description="要查重的视频文件"),
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    duplication_repository: Any = Depends(get_duplication_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> DuplicationUploadResponse:
-    """上传视频进行查重。"""
-    if file.filename is None:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail="文件名不能为空",
-        )
-
-    # P0-1: 验证 MIME 类型（只接受视频文件）
-    validated_content_type = _validate_video_mime_type(file.content_type)
-
-    # P0-2: 验证文件大小（参考 OSS_DIRECT_UPLOAD_MAX_MB）
-    from app.config import get_settings
-
-    settings = get_settings()
-    max_size_bytes = settings.OSS_DIRECT_UPLOAD_MAX_MB * 1024 * 1024
-
-    # 先检查 Content-Length header（如果可用）
-    if file.size is not None and file.size > max_size_bytes:
-        raise HTTPException(
-            status_code=status.HTTP_413_REQUEST_ENTITY_TOO_LARGE,
-            detail=f"文件超过上传限制 ({settings.OSS_DIRECT_UPLOAD_MAX_MB}MB)",
-        )
-
-    # 读取文件内容并上传到 OSS
-    file_id = uuid4().hex[:8]
-    safe_filename = file.filename.replace("/", "_").replace("\\", "_")
-    storage_key = f"duplication/{file_id}/{safe_filename}"
-
-    try:
-        content = await file.read()
-        file_size = len(content)
-
-        # 再次检查实际文件大小
-        if file_size > max_size_bytes:
-            raise HTTPException(
-                status_code=status.HTTP_413_REQUEST_ENTITY_TOO_LARGE,
-                detail=f"文件超过上传限制 ({settings.OSS_DIRECT_UPLOAD_MAX_MB}MB)",
-            )
-    except HTTPException:
-        raise
-    except Exception as exc:
-        logger.error("读取查重文件失败: %s", exc, exc_info=True)
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail="文件读取失败，请稍后重试",
-        ) from exc
-
-    try:
-        storage_service.upload_file(
-            content,
-            storage_key,
-            content_type=validated_content_type,
-        )
-    except Exception as exc:
-        logger.error("查重文件上传 OSS 失败: %s", exc, exc_info=True)
-        raise HTTPException(
-            status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
-            detail="文件上传失败，请稍后重试",
-        ) from exc
-
-    use_case = UploadForDuplicationUseCase(duplication_repository)
-    record = use_case.execute(
-        UploadForDuplicationCommand(
-            user_id=authenticated_user.user.id,
-            filename=file.filename,
-            file_size=file_size,
-            storage_key=storage_key,
-        )
-    )
-
-    logger.info(
-        "Duplication upload: record=%s file=%s user=%s",
-        record.id,
-        file.filename,
-        authenticated_user.user.id,
-    )
-
-    return DuplicationUploadResponse(
-        id=record.id,
-        status=record.status,
-        message=f'文件 "{file.filename}" 已上传，正在查重中...',
-    )
-
-
-@router.get("/records", response_model=list[DuplicationRecordResponse])
-def list_duplication_records(
-    offset: int = Query(0, ge=0, description="分页偏移量"),
-    limit: int = Query(50, ge=1, le=200, description="每页数量，最大 200"),
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    duplication_repository: Any = Depends(get_duplication_repository),
-) -> list[DuplicationRecordResponse]:
-    """
-    获取当前用户的查重记录列表。
-
-    支持分页：通过 offset 和 limit 参数控制。
-    返回按创建时间倒序排列的记录。
-    """
-    use_case = ListDuplicationRecordsUseCase(duplication_repository)
-    records = use_case.execute(user_id=authenticated_user.user.id, offset=offset, limit=limit)
-    return [_to_record_response(r) for r in records]
-
-
-@router.get("/records/{record_id}", response_model=DuplicationDetailResponse)
-def get_duplication_detail(
-    record_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    duplication_repository: Any = Depends(get_duplication_repository),
-) -> DuplicationDetailResponse:
-    """获取查重记录详情（含重复片段）。"""
-    use_case = GetDuplicationDetailUseCase(duplication_repository)
-    record = use_case.execute(record_id)
-    if record is None:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=f"查重记录 {record_id} 不存在",
-        )
-    if record.user_id != authenticated_user.user.id:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=f"查重记录 {record_id} 不存在",
-        )
-    return _to_detail_response(record)
-
-
-@router.delete(
-    "/records/{record_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response
-)
-def delete_duplication_record(
-    record_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    duplication_repository: Any = Depends(get_duplication_repository),
-) -> Response:
-    """删除查重记录。"""
-    # 检查记录是否存在且属于当前用户
-    detail_uc = GetDuplicationDetailUseCase(duplication_repository)
-    record = detail_uc.execute(record_id)
-    if record is None or record.user_id != authenticated_user.user.id:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=f"查重记录 {record_id} 不存在",
-        )
-
-    use_case = DeleteDuplicationRecordUseCase(duplication_repository)
-    use_case.execute(record_id)
-    return
-
-
-@router.post("/records/{record_id}/retry", response_model=DuplicationUploadResponse)
-def retry_duplication(
-    record_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    duplication_repository: Any = Depends(get_duplication_repository),
-) -> DuplicationUploadResponse:
-    """
-    重新提交查重。
-
-    仅 failed 状态的记录允许重试，其他状态返回 400。
-    """
-    # 检查记录存在且属于当前用户
-    detail_uc = GetDuplicationDetailUseCase(duplication_repository)
-    record = detail_uc.execute(record_id)
-    if record is None or record.user_id != authenticated_user.user.id:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=f"查重记录 {record_id} 不存在",
-        )
-
-    use_case = RetryDuplicationUseCase(duplication_repository)
-    try:
-        updated = use_case.execute(record_id)
-    except ValueError as e:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=str(e),
-        ) from e
-    if updated is None:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=f"查重记录 {record_id} 不存在",
-        )
-
-    return DuplicationUploadResponse(
-        id=updated.id,
-        status=updated.status,
-        message="已重新提交查重",
-    )

apps/api/app/api/routes/edit_plans.py

@@ -0,0 +1,308 @@
+from datetime import datetime, timezone
+from uuid import uuid4
+
+from app.api.routes.permissions import require_workspace_member
+from app.auth import AuthenticatedUser, get_current_user
+from app.dependencies import (
+    get_asset_repository,
+    get_db_session,
+    get_project_repository,
+    get_workspace_member_repository,
+)
+from app.schemas.edit_plan import (
+    AutoGenerateEditPlanRequest,
+    CreateEditPlanRequest,
+    EditPlanClipResponse,
+    EditPlanResponse,
+    EditTemplateResponse,
+)
+from apps.worker.worker_app.tasks.edit_plan_generator import (
+    EditingMode,
+    SmartEditPlanGenerator,
+)
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+
+from packages.adapters.sqlalchemy_impl.models import EditPlanClipModel, EditPlanModel, EditTemplateModel
+from packages.domain import AssetStatus
+from packages.ports.workspace_member_repository import WorkspaceMemberRepository
+
+router = APIRouter(prefix="/projects/{project_id}/edit-plans", tags=["剪辑计划"])
+
+
+def _ensure_project(project_id: str, workspace_id: str, user: AuthenticatedUser, project_repository, member_repository):
+    project = project_repository.find_by_id(project_id)
+    if project is None or project.workspace_id != workspace_id:
+        raise HTTPException(status_code=404, detail="Project not found")
+    require_workspace_member(workspace_id, user, member_repository)
+    return project
+
+
+def _default_template(session: Session, workspace_id: str, project_id: str, user_id: str) -> EditTemplateModel:
+    template = (
+        session.query(EditTemplateModel)
+        .filter(
+            EditTemplateModel.project_id == project_id,
+            EditTemplateModel.is_active.is_(True),
+        )
+        .order_by(EditTemplateModel.created_at.asc())
+        .first()
+    )
+    if template is not None:
+        return template
+    template = EditTemplateModel(
+        id=uuid4().hex,
+        workspace_id=workspace_id,
+        project_id=project_id,
+        name="基础节奏模板",
+        description="自动选择可用视频素材，按上传顺序生成三段式剪辑计划。",
+        target_duration=30,
+        clip_count=3,
+        created_by_user_id=user_id,
+    )
+    session.add(template)
+    session.commit()
+    return template
+
+
+def _to_template_response(template: EditTemplateModel) -> EditTemplateResponse:
+    return EditTemplateResponse(
+        id=template.id,
+        workspace_id=template.workspace_id,
+        project_id=template.project_id,
+        name=template.name,
+        description=template.description,
+        target_duration=float(template.target_duration or 0),
+        clip_count=int(template.clip_count or 0),
+        is_active=bool(template.is_active),
+        created_at=template.created_at,
+    )
+
+
+def _to_plan_response(
+    plan: EditPlanModel, clips: list[EditPlanClipModel], asset_names: dict[str, str]
+) -> EditPlanResponse:
+    return EditPlanResponse(
+        id=plan.id,
+        workspace_id=plan.workspace_id,
+        project_id=plan.project_id,
+        template_id=plan.template_id,
+        asset_library_id=plan.asset_library_id,
+        title_id=plan.title_id,
+        status=plan.status,
+        summary=plan.summary,
+        editing_mode=plan.editing_mode,
+        clips=[
+            EditPlanClipResponse(
+                id=clip.id,
+                asset_id=clip.asset_id,
+                asset_name=asset_names.get(clip.asset_id, clip.asset_id),
+                sequence=clip.sequence,
+                start_time=float(clip.start_time or 0),
+                duration=float(clip.duration or 0),
+                reason=clip.reason,
+                layer=clip.layer,
+            )
+            for clip in clips
+        ],
+        created_at=plan.created_at,
+        updated_at=plan.updated_at,
+    )
+
+
+@router.get("/templates/", response_model=list[EditTemplateResponse])
+def list_edit_templates(
+    project_id: str,
+    workspace_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository=Depends(get_project_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
+    session: Session = Depends(get_db_session),
+) -> list[EditTemplateResponse]:
+    _ensure_project(project_id, workspace_id, authenticated_user, project_repository, workspace_member_repository)
+    template = _default_template(session, workspace_id, project_id, authenticated_user.user.id)
+    templates = (
+        session.query(EditTemplateModel)
+        .filter(EditTemplateModel.project_id == project_id, EditTemplateModel.is_active.is_(True))
+        .all()
+    )
+    return [_to_template_response(item) for item in templates or [template]]
+
+
+@router.post("", response_model=EditPlanResponse)
+def create_edit_plan(
+    project_id: str,
+    request: CreateEditPlanRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository=Depends(get_project_repository),
+    asset_repository=Depends(get_asset_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
+    session: Session = Depends(get_db_session),
+) -> EditPlanResponse:
+    _ensure_project(
+        project_id, request.workspace_id, authenticated_user, project_repository, workspace_member_repository
+    )
+    template = (
+        session.query(EditTemplateModel).filter(EditTemplateModel.id == request.template_id).first()
+        if request.template_id
+        else None
+    )
+    if template is None:
+        template = _default_template(session, request.workspace_id, project_id, authenticated_user.user.id)
+    assets = [
+        asset
+        for asset in asset_repository.list_by_library(request.asset_library_id)
+        if asset.status == AssetStatus.READY and asset.mime_type.startswith("video/")
+    ]
+    if not assets:
+        raise HTTPException(status_code=422, detail="素材库暂无可用于剪辑计划的视频素材")
+    selected = sorted(assets, key=lambda asset: (-(asset.quality_score or 0), asset.created_at))[
+        : max(1, int(template.clip_count or 3))
+    ]
+    plan = EditPlanModel(
+        id=uuid4().hex,
+        workspace_id=request.workspace_id,
+        project_id=project_id,
+        template_id=template.id,
+        asset_library_id=request.asset_library_id,
+        title_id=request.title_id,
+        status="draft",
+        summary=f"按《{template.name}》自动选择 {len(selected)} 段素材，预计生成约 {int(template.target_duration or 30)} 秒成片。",
+        created_by_user_id=authenticated_user.user.id,
+        updated_at=datetime.now(timezone.utc),
+    )
+    session.add(plan)
+    clips: list[EditPlanClipModel] = []
+    clip_duration = max(1, float(template.target_duration or 30) / len(selected))
+    for index, asset in enumerate(selected, start=1):
+        clip = EditPlanClipModel(
+            id=uuid4().hex,
+            edit_plan_id=plan.id,
+            asset_id=asset.id,
+            sequence=index,
+            start_time=0,
+            duration=min(float(asset.duration or clip_duration), clip_duration),
+            reason="优先选择已就绪、质量分较高的视频素材。",
+        )
+        session.add(clip)
+        clips.append(clip)
+    session.commit()
+    return _to_plan_response(plan, clips, {asset.id: asset.name for asset in selected})
+
+
+@router.post("/auto-generate", response_model=EditPlanResponse)
+def auto_generate_edit_plan(
+    project_id: str,
+    request: AutoGenerateEditPlanRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository=Depends(get_project_repository),
+    asset_repository=Depends(get_asset_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
+    session: Session = Depends(get_db_session),
+) -> EditPlanResponse:
+    """
+    智能生成剪辑计划
+
+    根据素材的分类结果和质量评分，自动编排剪辑计划。
+    支持多种剪辑模式：
+    - one_take: 按分类分组，组内按质量排序，顺序拼接
+    - pip: 第一个高质量素材为主画面，其余为画中画
+    - voice_over: person 类素材为主播口播，其余穿插为 B-roll
+    - voice_pip: 结合 voice_over 和 pip，第一个高质量 person 素材为主画面
+    """
+    _ensure_project(
+        project_id, request.workspace_id, authenticated_user, project_repository, workspace_member_repository
+    )
+
+    # 获取素材库中的所有素材
+    assets = asset_repository.list_by_library(request.asset_library_id)
+    
+    if not assets:
+        raise HTTPException(status_code=422, detail="素材库中暂无素材")
+
+    # 使用智能生成器
+    generator = SmartEditPlanGenerator(project_id, assets)
+    
+    try:
+        plan_result = generator.generate_plan(
+            editing_mode=request.editing_mode,
+            target_duration=request.target_duration
+        )
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+    if not plan_result.clips:
+        raise HTTPException(status_code=422, detail="无符合条件的视频素材")
+
+    # 获取模板
+    template = (
+        session.query(EditTemplateModel).filter(EditTemplateModel.id == request.template_id).first()
+        if request.template_id
+        else None
+    )
+    if template is None:
+        template = _default_template(session, request.workspace_id, project_id, authenticated_user.user.id)
+
+    # 创建剪辑计划
+    plan = EditPlanModel(
+        id=uuid4().hex,
+        workspace_id=request.workspace_id,
+        project_id=project_id,
+        template_id=template.id,
+        asset_library_id=request.asset_library_id,
+        title_id=request.title_id or "",
+        status="draft",
+        editing_mode=request.editing_mode,
+        summary=plan_result.summary,
+        created_by_user_id=authenticated_user.user.id,
+        updated_at=datetime.now(timezone.utc),
+    )
+    session.add(plan)
+
+    # 创建剪辑片段
+    clips: list[EditPlanClipModel] = []
+    asset_name_map = {asset.id: asset.name for asset in assets}
+    
+    for clip_plan in plan_result.clips:
+        clip = EditPlanClipModel(
+            id=uuid4().hex,
+            edit_plan_id=plan.id,
+            asset_id=clip_plan.asset_id,
+            sequence=clip_plan.sequence,
+            start_time=clip_plan.start_time,
+            duration=clip_plan.duration,
+            reason=clip_plan.reason,
+            layer=clip_plan.layer,
+        )
+        session.add(clip)
+        clips.append(clip)
+
+    session.commit()
+
+    return _to_plan_response(plan, clips, asset_name_map)
+
+
+@router.get("/{plan_id}", response_model=EditPlanResponse)
+def get_edit_plan(
+    project_id: str,
+    plan_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository=Depends(get_project_repository),
+    asset_repository=Depends(get_asset_repository),
+    workspace_member_repository: WorkspaceMemberRepository = Depends(get_workspace_member_repository),
+    session: Session = Depends(get_db_session),
+) -> EditPlanResponse:
+    plan = (
+        session.query(EditPlanModel).filter(EditPlanModel.id == plan_id, EditPlanModel.project_id == project_id).first()
+    )
+    if plan is None:
+        raise HTTPException(status_code=404, detail="Edit plan not found")
+    _ensure_project(project_id, plan.workspace_id, authenticated_user, project_repository, workspace_member_repository)
+    clips = (
+        session.query(EditPlanClipModel)
+        .filter(EditPlanClipModel.edit_plan_id == plan.id)
+        .order_by(EditPlanClipModel.sequence.asc())
+        .all()
+    )
+    assets = asset_repository.list_by_library(plan.asset_library_id)
+    return _to_plan_response(plan, clips, {asset.id: asset.name for asset in assets})

apps/api/app/api/routes/feature_flags.py

@@ -1,192 +0,0 @@
-"""Feature Flag 内部管理接口。
-
-通过内部 API Key 鉴权，支持查看和修改 Feature Flag 配置。
-主要用于灰度发布期间的动态开关控制。
-
-API:
-  GET  /api/v1/internal/feature-flags          - 列出所有 flag
-  GET  /api/v1/internal/feature-flags/{name}   - 查看单个 flag
-  PUT  /api/v1/internal/feature-flags/{name}   - 设置 flag 配置
-  DELETE /api/v1/internal/feature-flags/{name} - 删除 flag
-
-鉴权：X-API-Key header，走内部 API Key 验证
-"""
-
-from __future__ import annotations
-
-import logging
-from typing import Optional
-
-from app.api.routes.auth import _verify_internal_api_key
-from app.config import settings
-from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
-from pydantic import BaseModel, Field
-
-from packages.adapters.redis.feature_flag_store import (
-    FeatureFlagConfig,
-    RedisFeatureFlagStore,
-)
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(prefix="/internal/feature-flags", tags=["Internal"])
-
-# 允许管理的 flag 白名单（防止误操作其他系统 flag）
-ALLOWED_FLAGS: set[str] = set()
-
-
-def _get_feature_flag_store() -> RedisFeatureFlagStore:
-    """获取 Feature Flag 存储实例。"""
-    return RedisFeatureFlagStore(redis_url=settings.REDIS_URL)
-
-
-class FeatureFlagUpdateRequest(BaseModel):
-    """Feature Flag 更新请求体。"""
-
-    enabled: bool = Field(..., description="是否启用")
-    percentage: int = Field(0, ge=0, le=100, description="灰度百分比 (0-100)")
-    whitelist: list[str] = Field(default_factory=list, description="白名单列表（如 user_id）")
-
-
-class FeatureFlagResponse(BaseModel):
-    """Feature Flag 响应。"""
-
-    name: str
-    enabled: bool
-    percentage: int
-    whitelist: list[str]
-
-    @classmethod
-    def from_config(cls, config: FeatureFlagConfig) -> "FeatureFlagResponse":
-        return cls(
-            name=config.name,
-            enabled=config.enabled,
-            percentage=config.percentage,
-            whitelist=sorted(config.whitelist),
-        )
-
-
-class FeatureFlagCheckResponse(BaseModel):
-    """Flag 激活检查响应。"""
-
-    name: str
-    active: bool
-    identifier: Optional[str] = None
-
-
-def _validate_flag_name(name: str) -> None:
-    """校验 flag 名称是否在允许列表中。"""
-    if name not in ALLOWED_FLAGS:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"Unsupported flag: {name}. Allowed: {sorted(ALLOWED_FLAGS)}",
-        )
-
-
-@router.get("", response_model=list[FeatureFlagResponse])
-async def list_feature_flags(
-    _: bool = Depends(_verify_internal_api_key),
-    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
-) -> list[FeatureFlagResponse]:
-    """列出所有 Feature Flag。"""
-    try:
-        flags = store.list_all()
-        # 同时返回预定义的 flag（即使未设置也显示默认值）
-        result = []
-        for name in sorted(ALLOWED_FLAGS):
-            config = flags.get(name) or FeatureFlagConfig(name=name, enabled=False)
-            result.append(FeatureFlagResponse.from_config(config))
-        # 加上已存在但不在白名单中的 flag（只读展示）
-        for name, config in flags.items():
-            if name not in ALLOWED_FLAGS:
-                result.append(FeatureFlagResponse.from_config(config))
-        return sorted(result, key=lambda x: x.name)
-    except Exception as exc:
-        logger.error("Failed to list feature flags: %s", exc)
-        raise HTTPException(status_code=500, detail=f"Failed to list flags: {exc}") from exc
-
-
-@router.get("/{name}", response_model=FeatureFlagResponse)
-async def get_feature_flag(
-    name: str,
-    _: bool = Depends(_verify_internal_api_key),
-    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
-) -> FeatureFlagResponse:
-    """获取单个 Feature Flag 配置。"""
-    try:
-        config = store.get(name)
-        return FeatureFlagResponse.from_config(config)
-    except Exception as exc:
-        logger.error("Failed to get feature flag %s: %s", name, exc)
-        raise HTTPException(status_code=500, detail=f"Failed to get flag: {exc}") from exc
-
-
-@router.get("/{name}/check", response_model=FeatureFlagCheckResponse)
-async def check_feature_flag(
-    name: str,
-    identifier: Optional[str] = Query(None, description="标识符，如 user_id"),
-    _: bool = Depends(_verify_internal_api_key),
-    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
-) -> FeatureFlagCheckResponse:
-    """检查某个标识符是否命中 Feature Flag。"""
-    try:
-        active = store.is_active(name, identifier=identifier)
-        return FeatureFlagCheckResponse(name=name, active=active, identifier=identifier)
-    except Exception as exc:
-        logger.error("Failed to check feature flag %s: %s", name, exc)
-        raise HTTPException(status_code=500, detail=f"Failed to check flag: {exc}") from exc
-
-
-@router.put("/{name}", response_model=FeatureFlagResponse)
-async def update_feature_flag(
-    name: str,
-    request: FeatureFlagUpdateRequest,
-    _: bool = Depends(_verify_internal_api_key),
-    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
-) -> FeatureFlagResponse:
-    """更新 Feature Flag 配置。
-
-    只允许修改 ALLOWED_FLAGS 列表中的 flag。
-    """
-    _validate_flag_name(name)
-
-    try:
-        config = FeatureFlagConfig(
-            name=name,
-            enabled=request.enabled,
-            percentage=request.percentage,
-            whitelist=set(request.whitelist),
-        )
-        store.set(config)
-        logger.info(
-            "Feature flag updated: name=%s enabled=%s percentage=%d whitelist=%d",
-            name,
-            config.enabled,
-            config.percentage,
-            len(config.whitelist),
-        )
-        return FeatureFlagResponse.from_config(config)
-    except Exception as exc:
-        logger.error("Failed to update feature flag %s: %s", name, exc)
-        raise HTTPException(status_code=500, detail=f"Failed to update flag: {exc}") from exc
-
-
-@router.delete("/{name}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
-async def delete_feature_flag(
-    name: str,
-    _: bool = Depends(_verify_internal_api_key),
-    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
-):
-    """删除 Feature Flag。
-
-    只允许删除 ALLOWED_FLAGS 列表中的 flag。
-    """
-    _validate_flag_name(name)
-
-    try:
-        deleted = store.delete(name)
-        logger.info("Feature flag deleted: name=%s deleted=%s", name, deleted)
-        pass
-    except Exception as exc:
-        logger.error("Failed to delete feature flag %s: %s", name, exc)
-        raise HTTPException(status_code=500, detail=f"Failed to delete flag: {exc}") from exc