admin/routes/ui.py

"""轻量管理后台页面路由。"""

from __future__ import annotations

import json
from pathlib import Path
from typing import Any, Callable, Optional, cast

from fastapi import APIRouter, Depends, Query, Request
from fastapi.responses import FileResponse, HTMLResponse

from admin.auth import require_role
from admin.db import AdminUser
from admin.config import Settings, get_settings_dep
from admin.errors import DATA_NOT_FOUND, DATA_VALIDATION_FAILED
from admin.errors.exceptions import BusinessError
from admin.routes.web_public import (
    _load_latest_review_result,
    _resolve_order_from_token,
)
from admin.share_page import (
    load_report_from_directory,
    render_share_page,
    status_code_for_result,
)
from data.share.short_link import (
    ShortLinkService,
    build_url,
    route_short_link_with_report,
)


router = APIRouter(tags=["ui"])

_STATIC_DIR = Path(__file__).resolve().parent.parent / "static"
_DASHBOARD_HTML = _STATIC_DIR / "dashboard.html"


@router.get("/admin/login", include_in_schema=False)
def admin_login_page() -> HTMLResponse:
    """管理后台 Web 登录页。"""
    html = """<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>管理后台登录</title>
<link rel="stylesheet" href="/static/portal-ui.css" />
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#0e1a2b;min-height:100vh;display:flex;align-items:center;justify-content:center;padding:20px}
.login-card{background:#fff;border-radius:24px;box-shadow:0 24px 52px rgba(20,34,53,.16);padding:40px;max-width:400px;width:100%}
.login-card h1{font-size:24px;color:#142235;margin-bottom:8px}
.login-card .sub{color:#5b6b88;font-size:14px;margin-bottom:28px}
.field{margin-bottom:16px}
.field label{display:block;font-size:13px;font-weight:600;color:#334155;margin-bottom:6px}
.field input{width:100%;padding:12px 14px;border-radius:12px;border:1px solid #d7e3f1;font-size:14px;background:#f8fbff;transition:border-color .18s}
.field input:focus{outline:none;border-color:#1f6feb;box-shadow:0 0 0 4px rgba(31,111,235,.12)}
.btn-login{width:100%;min-height:48px;border-radius:14px;border:none;background:linear-gradient(135deg,#2d7cff,#0f4fd6);color:#fff;font-size:16px;font-weight:700;cursor:pointer;transition:.18s;margin-top:8px}
.btn-login:hover{transform:translateY(-1px);box-shadow:0 12px 28px rgba(31,111,235,.32)}
.btn-login:disabled{opacity:.6;cursor:not-allowed;transform:none}
.error-msg{margin-top:16px;padding:12px 14px;border-radius:12px;background:#fef2f2;border:1px solid #fecaca;color:#b42318;font-size:13px;display:none}
.error-msg.show{display:block}
.back-home{display:block;margin-top:20px;text-align:center;color:#5b6b88;font-size:13px;text-decoration:none}
.back-home:hover{color:#1f6feb}
</style>
</head>
<body>
<div class="login-card">
<h1>管理后台</h1>
<p class="sub">请输入管理员账号密码登录</p>
<form id="login-form">
<div class="field">
<label>用户名</label>
<input type="text" id="username" name="username" placeholder="admin" required autocomplete="username" />
</div>
<div class="field">
<label>密码</label>
<input type="password" id="password" name="password" placeholder="请输入密码" required autocomplete="current-password" />
</div>
<div id="error-msg" class="error-msg"></div>
<button type="submit" class="btn-login" id="login-btn">登录</button>
</form>
<a class="back-home" href="/">← 返回首页</a>
</div>
<script>
(function(){
var form=document.getElementById('login-form');
var errEl=document.getElementById('error-msg');
var btn=document.getElementById('login-btn');
form.addEventListener('submit',function(e){
e.preventDefault();
var u=document.getElementById('username').value.trim();
var p=document.getElementById('password').value;
if(!u||!p){showError('请输入用户名和密码');return;}
btn.disabled=true;
btn.textContent='登录中...';
errEl.classList.remove('show');
fetch('/api/auth/login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:u,password:p})})
.then(function(resp){return resp.json().then(function(d){return{ok:resp.ok,data:d};});})
.then(function(r){
if(r.ok&&r.data.access_token){
var token=r.data.access_token;
var expires=Date.now()+(r.data.expires_in||3600)*1000;
try{
localStorage.setItem('admin_token',token);
localStorage.setItem('admin_token_expires',String(expires));
sessionStorage.setItem('admin_token',token);
}catch(e){}
window.location.href='/admin/dashboard?t='+encodeURIComponent(token);
}else{
var msg=(r.data&&r.data.message)||'登录失败，请检查用户名和密码';
showError(msg);
btn.disabled=false;
btn.textContent='登录';
}
})
.catch(function(){
showError('网络异常，请稍后重试');
btn.disabled=false;
btn.textContent='登录';
});
});
function showError(msg){
errEl.textContent=msg;
errEl.classList.add('show');
}
})();
</script>
</body>
</html>"""
    return HTMLResponse(html)


@router.get("/dashboard", include_in_schema=False)
@router.get("/admin/dashboard", include_in_schema=False)
def dashboard_page(_: AdminUser = Depends(require_role("admin"))) -> FileResponse:
    """返回最小仪表盘页面壳。"""
    return FileResponse(_DASHBOARD_HTML)


@router.get("/admin/orders/new", include_in_schema=False)
def admin_new_order_page(_: AdminUser = Depends(require_role("admin"))) -> HTMLResponse:
    return HTMLResponse(_render_admin_new_order_page())


@router.get("/s/{code}", include_in_schema=False)
def share_page(
    code: str,
    request: Request,
    pwd: Optional[str] = Query(default=None),
) -> HTMLResponse:
    """公开分享页（T7.5）。"""
    settings = get_settings_dep(request)
    report_loader = _resolve_report_loader(request, settings)
    result = route_short_link_with_report(
        code,
        password=pwd,
        base_url=str(request.base_url).rstrip("/"),
        db_path=Path(settings.share_db_path),
        report_loader=report_loader,
    )
    html = render_share_page(result, password=pwd)
    return HTMLResponse(html, status_code=status_code_for_result(result))


def _resolve_report_loader(
    request: Request, settings: Settings
) -> Optional[Callable[[str], Optional[dict[str, Any]]]]:
    custom_loader = getattr(request.app.state, "share_report_loader", None)
    if callable(custom_loader):
        return cast(Callable[[str], Optional[dict[str, Any]]], custom_loader)

    report_dir = settings.share_report_dir
    if not report_dir:
        return None

    def _loader(report_id: str) -> Optional[dict]:
        return load_report_from_directory(report_id, report_dir)

    return _loader


def _resolve_share_target(
    *,
    result_type: str,
    target_token: str,
    settings: Settings,
) -> tuple[Any, str, dict[str, Any]]:
    try:
        order = _resolve_order_from_token(target_token, settings)
    except Exception as exc:
        if isinstance(exc, BusinessError):
            raise
        if getattr(exc, "status_code", None) in {401, 404}:
            raise BusinessError(
                DATA_NOT_FOUND,
                detail={"reason": "target_token not found"},
            ) from exc
        raise

    if result_type == "review_result":
        contract = _load_latest_review_result(order.id, settings)
        if contract is None:
            raise BusinessError(
                DATA_NOT_FOUND,
                detail={"reason": "review_result not found"},
            )
        target_id = contract.review_result_id
        share_payload = {
            "title": "高考志愿复核结果",
            "summary": f"风险等级：{contract.risk_level}",
            "candidate_name": order.candidate_name,
            "score": contract.review_constraints.get("candidate_score"),
            "rank": contract.review_constraints.get("candidate_rank"),
            "province": contract.review_constraints.get("candidate_province"),
            "year": 2026,
            "result_type": "review_result",
            "risk_level": contract.risk_level,
            "recommendations": [
                {"school": item, "major": "复核摘要", "prob": None}
                for item in contract.top_findings[:3]
            ],
        }
        return order, target_id, share_payload

    if result_type == "report":
        if order.status not in {"delivered", "completed"} or not order.audit_report:
            raise BusinessError(
                DATA_NOT_FOUND,
                detail={"reason": "report not ready"},
            )
        target_id = order.id
        share_payload = {
            "title": "高考志愿报告分享",
            "summary": f"订单 {order.id} - {order.service_version}",
            "candidate_name": order.candidate_name,
            "province": order.candidate_province,
            "report_id": order.id,
            "year": 2026,
            "result_type": "report",
        }
        return order, target_id, share_payload

    raise BusinessError(
        DATA_VALIDATION_FAILED,
        detail={"reason": "result_type must be review_result or report"},
    )


def _find_latest_share_link(
    *,
    svc: ShortLinkService,
    target_id: str,
    owner_id: str,
    result_type: str,
) -> Any | None:
    prefix = f"{result_type}:"
    for link in svc.list_by_report(target_id):
        if link.owner_id != owner_id:
            continue
        note = str(link.note or "")
        if note.startswith(prefix):
            return link
    return None


def _share_link_response(
    *,
    link: Any,
    result_type: str,
    target_id: str,
    request: Request,
    stats: dict[str, Any] | None = None,
) -> dict[str, Any]:
    base_url = (
        str(request.base_url).rstrip("/")
        if request is not None
        else "http://testserver"
    )
    share_url = build_url(link.code, base=base_url)
    payload = {
        "code": link.code,
        "share_url": share_url,
        "permission": link.permission,
        "result_type": result_type,
        "target_type": result_type,
        "target_id": target_id,
        "expires_at_iso": link.to_dict().get("expires_at_iso"),
        "owner_id": link.owner_id,
        "revoked": bool(link.revoked),
        "access_count": link.access_count,
        "last_access_at_iso": link.to_dict().get("last_access_at_iso"),
    }
    if stats is not None:
        payload["stats"] = stats
    return payload


@router.post("/api/share-link", summary="创建正式分享链接", status_code=201)
def create_share_link(
    payload: dict[str, Any],
    request: Request,
    current_user: AdminUser = Depends(require_role("admin")),
    settings: Settings = Depends(get_settings_dep),
) -> dict[str, Any]:
    result_type = str(payload.get("result_type") or "").strip()
    target_token = str(payload.get("target_token") or "").strip()
    permission = str(payload.get("permission") or "read").strip()
    ttl_days_raw = payload.get("ttl_days")
    replace_existing = bool(payload.get("replace_existing"))
    if not target_token:
        raise BusinessError(
            DATA_VALIDATION_FAILED,
            detail={"reason": "target_token is required"},
        )
    ttl_days: int | None = None
    if ttl_days_raw is not None:
        try:
            ttl_days = int(ttl_days_raw)
        except (TypeError, ValueError) as exc:
            raise BusinessError(
                DATA_VALIDATION_FAILED,
                detail={"reason": "ttl_days must be integer"},
            ) from exc
        if ttl_days <= 0:
            raise BusinessError(
                DATA_VALIDATION_FAILED,
                detail={"reason": "ttl_days must be > 0"},
            )

    order, target_id, share_payload = _resolve_share_target(
        result_type=result_type,
        target_token=target_token,
        settings=settings,
    )

    svc = ShortLinkService(db_path=settings.share_db_path)
    existing = _find_latest_share_link(
        svc=svc,
        target_id=target_id,
        owner_id=current_user.username,
        result_type=result_type,
    )
    if replace_existing and existing is not None and not existing.revoked:
        svc.revoke(existing.code, owner_id=current_user.username)

    link = svc.create(
        report_id=target_id,
        owner_id=current_user.username,
        permission=permission,
        ttl_days=ttl_days,
        note=f"{result_type}:{order.id}",
    )
    share_url = build_url(
        link.code,
        base=str(request.base_url).rstrip("/")
        if request is not None
        else "http://testserver",
    )
    report_dir = Path(settings.share_report_dir)
    report_dir.mkdir(parents=True, exist_ok=True)
    report_file = report_dir / f"{target_id}.json"
    report_file.write_text(
        json.dumps({**share_payload, "share_url": share_url}, ensure_ascii=False),
        encoding="utf-8",
    )
    return _share_link_response(
        link=link,
        result_type=result_type,
        target_id=target_id,
        request=request,
    )


@router.get("/api/share-link/latest", summary="查询最近正式分享链接")
def latest_share_link(
    result_type: str,
    target_token: str,
    request: Request,
    current_user: AdminUser = Depends(require_role("admin")),
    settings: Settings = Depends(get_settings_dep),
) -> dict[str, Any]:
    _, target_id, _ = _resolve_share_target(
        result_type=result_type,
        target_token=target_token,
        settings=settings,
    )
    svc = ShortLinkService(db_path=settings.share_db_path)
    link = _find_latest_share_link(
        svc=svc,
        target_id=target_id,
        owner_id=current_user.username,
        result_type=result_type,
    )
    if link is None:
        raise BusinessError(
            DATA_NOT_FOUND,
            detail={"reason": "share_link not found", "target_id": target_id},
        )
    stats = svc.get_stats(link.code)
    return _share_link_response(
        link=link,
        result_type=result_type,
        target_id=target_id,
        request=request,
        stats=stats,
    )


@router.post("/api/share-link/{code}/revoke", summary="撤销正式分享链接")
def revoke_share_link(
    code: str,
    request: Request,
    current_user: AdminUser = Depends(require_role("admin")),
    settings: Settings = Depends(get_settings_dep),
) -> dict[str, Any]:
    svc = ShortLinkService(db_path=settings.share_db_path)
    revoked = svc.revoke(code, owner_id=current_user.username)
    link = svc.get(code)
    if link is None:
        raise BusinessError(DATA_NOT_FOUND, detail={"code": code})
    stats = svc.get_stats(code)
    return {
        "code": code,
        "revoked": bool(link.revoked),
        "changed": revoked,
        "owner_id": link.owner_id,
        "access_count": link.access_count,
        "last_access_at_iso": link.to_dict().get("last_access_at_iso"),
        "expires_at_iso": link.to_dict().get("expires_at_iso"),
        "stats": stats,
        "share_url": build_url(
            code,
            base=str(request.base_url).rstrip("/")
            if request is not None
            else "http://testserver",
        ),
    }


def _render_admin_new_order_page() -> str:
    province_options = [
        "北京",
        "上海",
        "天津",
        "重庆",
        "河北",
        "河南",
        "山东",
        "山西",
        "陕西",
        "辽宁",
        "吉林",
        "黑龙江",
        "江苏",
        "浙江",
        "安徽",
        "福建",
        "江西",
        "湖北",
        "湖南",
        "广东",
        "广西",
        "海南",
        "四川",
        "贵州",
        "云南",
        "甘肃",
        "青海",
        "宁夏",
        "新疆",
        "内蒙古",
        "西藏",
    ]
    province_html = "".join(
        f'<option value="{p}">{p}</option>' for p in province_options
    )
    return f"""<!doctype html>
<html lang='zh-CN'><head><meta charset='utf-8' /><meta name='viewport' content='width=device-width, initial-scale=1' /><title>后台手动添加订单</title>
<link rel='stylesheet' href='/static/portal-ui.css' />
<style>
body {{ font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#f4f7fb;color:#172033;margin:0; }}
.wrap {{ max-width:960px; margin:0 auto; padding:32px 20px; display:grid; gap:16px; }}
.panel {{ background:#fff;border:1px solid #dbe3f0;border-radius:20px;padding:24px; box-shadow:0 18px 42px rgba(20,34,53,.08); }}
.grid {{ display:grid; grid-template-columns:1fr 1fr; gap:16px; }}
.field {{ display:flex; flex-direction:column; gap:6px; margin-bottom:14px; }}
input, select, textarea {{ width:100%; padding:12px; border-radius:12px; border:1px solid #cfd7e6; }}
textarea {{ min-height:110px; resize:vertical; }}
button {{ border:none;border-radius:14px;background:#1f6feb;color:#fff;font-weight:700;padding:13px 18px;cursor:pointer; }}
.helper {{ color:#5b6b88; line-height:1.7; }}
.proof {{ display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:12px; margin:16px 0 20px; }}
.proof-item {{ padding:14px 16px; border-radius:16px; background:linear-gradient(180deg,#f8fbff,#eef5ff); border:1px solid #d7e3f1; }}
.proof-item strong {{ display:block; margin-bottom:4px; }}
#result {{ margin-top:14px; min-height:24px; color:#5b6b88; white-space:pre-wrap; }}
@media (max-width: 900px) {{ .grid, .proof {{ grid-template-columns:1fr; }} }}
</style>
</head><body><main class='wrap'>
<section class='panel'><span class='portal-eyebrow'>后台录单</span><h1>后台手动添加订单</h1><p class='helper'>用于人工服务场景下的补录、客服录单或线下沟通后的订单补建。页面会读取当前登录态调用 <code>/api/orders</code>。</p></section>
<section class='panel'>
<div class='proof'>
  <article class='proof-item'><strong>人工补录更直接</strong><span>适合客服、学校渠道或线下沟通后补建订单。</span></article>
  <article class='proof-item'><strong>与后台订单主链一致</strong><span>录入后仍会进入统一订单、通知与交付链路。</span></article>
  <article class='proof-item'><strong>字段尽量按业务语义展示</strong><span>避免让后台录单页继续像内部测试表单。</span></article>
</div>
<form id='order-form'>
<div class='grid'>
<div class='field'><label>来源</label><select name='source'><option value='wechat'>wechat</option><option value='xianyu'>xianyu</option><option value='web'>web</option><option value='school'>school</option></select></div>
<div class='field'><label>服务版本</label><select name='service_version'><option value='audit'>audit</option><option value='basic'>basic</option><option value='standard' selected>standard</option><option value='premium'>premium</option></select></div>
<div class='field'><label>金额（分）</label><input name='amount_cents' value='9900' /></div>
<div class='field'><label>称呼</label><input name='customer_name' placeholder='可选，例如：张同学 / 张家长' /></div>
<div class='field'><label>手机号</label><input name='customer_phone' /></div>
<div class='field'><label>微信</label><input name='customer_wechat' /></div>
<div class='field'><label>考生姓名</label><input name='candidate_name' /></div>
<div class='field'><label>考试省份</label><select name='candidate_province'>{province_html}</select></div>
<div class='grid'>
<div class='field'><label>同意方式</label><select name='consent_method'><option value='verbal_chat' selected>verbal_chat</option><option value='phone_recording'>phone_recording</option><option value='screenshot'>screenshot</option><option value='written_form'>written_form</option><option value='self_declared'>self_declared</option></select></div>
<div class='field'><label>同意备注</label><input name='consent_note' placeholder='例如：微信沟通后家长口头同意' /></div>
</div>
<div class='field'><label>备注</label><textarea name='notes'></textarea></div>
<button type='submit'>创建订单</button>
</form>
<div id='result'></div>
</section></main>
<script>
const TOKEN_KEY = 'gaokao_admin_dashboard_token';
document.getElementById('order-form').addEventListener('submit', async function(event) {{
  event.preventDefault();
  const token = window.sessionStorage.getItem(TOKEN_KEY) || '';
  const form = new FormData(event.target);
  const payload = {{
    source: form.get('source'),
    service_version: form.get('service_version'),
    amount_cents: Number(form.get('amount_cents') || 0),
    customer_name: form.get('customer_name') || null,
    customer_phone: form.get('customer_phone') || null,
    customer_wechat: form.get('customer_wechat') || null,
    candidate_name: form.get('candidate_name') || null,
    candidate_province: form.get('candidate_province') || null,
    notes: form.get('notes') || null,
    consent: {{
      consent_method: form.get('consent_method') || 'verbal_chat',
      consent_note: form.get('consent_note') || null,
    }},
  }};
  const resultNode = document.getElementById('result');
  resultNode.textContent = '正在创建订单…';
  const resp = await fetch('/api/orders', {{
    method: 'POST',
    headers: {{ 'Content-Type': 'application/json', 'Authorization': `Bearer ${{token}}` }},
    body: JSON.stringify(payload),
  }});
  const body = await resp.json();
  resultNode.textContent = JSON.stringify(body, null, 2);
}});
</script>
<!-- 合规 footer: 与 portal 前台 _render_footer_links() 同口径 -->
<footer style="margin-top:32px;padding:16px;border-top:1px solid #d8e0ee;color:#5b6b88;font-size:13px;text-align:center;background:#f4f6fb;">
  <a href="/privacy" style="color:#2f55a4;text-decoration:none;margin:0 8px;">隐私政策</a> ·
  <a href="/deletion-policy" style="color:#2f55a4;text-decoration:none;margin:0 8px;">数据删除说明</a> ·
  <a href="/service-terms" style="color:#2f55a4;text-decoration:none;margin:0 8px;">服务说明</a>
  <div style="margin-top:4px;color:#7c8aa8;">© 2026 高考志愿填报智能系统 · 内部操作员亦需遵守隐私与数据合规</div>
</footer>
</body></html>"""
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								"""轻量管理后台页面路由。"""
 								from __future__ import annotations
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								import json
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								from pathlib import Path
 								from typing import Any, Callable, Optional, cast
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								from fastapi import APIRouter, Depends, Query, Request
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								from fastapi.responses import FileResponse, HTMLResponse
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								from admin.auth import require_role
 								from admin.db import AdminUser
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								from admin.config import Settings, get_settings_dep
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								from admin.errors import DATA_NOT_FOUND, DATA_VALIDATION_FAILED
 								from admin.errors.exceptions import BusinessError
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								from admin.routes.web_public import (
 								    _load_latest_review_result,
 								    _resolve_order_from_token,
 								)
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								from admin.share_page import (
 								    load_report_from_directory,
 								    render_share_page,
 								    status_code_for_result,
 								)
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								from data.share.short_link import (
 								    ShortLinkService,
 								    build_url,
 								    route_short_link_with_report,
 								)
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
 								router = APIRouter(tags=["ui"])
 								_STATIC_DIR = Path(__file__).resolve().parent.parent / "static"
 								_DASHBOARD_HTML = _STATIC_DIR / "dashboard.html"
-												feat(admin): 新增管理后台Web登录页+URL token支持

新增功能:
1. /admin/login Web登录页面（用户名+密码表单）
   - 深蓝色全屏背景+白色卡片设计
   - 登录后自动跳转 /admin/dashboard?t=token
   - 错误提示友好显示
   - token存储到localStorage
2. admin/auth.py get_current_user 支持 URL query 参数 t
   - 优先从 Authorization: Bearer 头获取
   - fallback 从 URL ?t=token 获取（管理后台Web场景）
   - 不影响API认证安全性

验证:
- 302 passed
- 浏览器验证: /admin/login → 输入admin/Admin123! → 自动跳转dashboard ✅
- dashboard页面正常加载（运营总览+KPI+趋势+分布）

											
										
										
											2026-06-29 12:30:57 +08:00
+								@router.get("/admin/login", include_in_schema=False)
 								def admin_login_page() -> HTMLResponse:
 								    """管理后台 Web 登录页。"""
 								    html = """<!doctype html>
 								<html lang="zh-CN">
 								<head>
 								<meta charset="utf-8" />
 								<meta name="viewport" content="width=device-width, initial-scale=1" />
 								<title>管理后台登录</title>
 								<link rel="stylesheet" href="/static/portal-ui.css" />
 								<style>
 								*{box-sizing:border-box;margin:0;padding:0}
 								body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#0e1a2b;min-height:100vh;display:flex;align-items:center;justify-content:center;padding:20px}
 								.login-card{background:#fff;border-radius:24px;box-shadow:0 24px 52px rgba(20,34,53,.16);padding:40px;max-width:400px;width:100%}
 								.login-card h1{font-size:24px;color:#142235;margin-bottom:8px}
 								.login-card .sub{color:#5b6b88;font-size:14px;margin-bottom:28px}
 								.field{margin-bottom:16px}
 								.field label{display:block;font-size:13px;font-weight:600;color:#334155;margin-bottom:6px}
 								.field input{width:100%;padding:12px 14px;border-radius:12px;border:1px solid #d7e3f1;font-size:14px;background:#f8fbff;transition:border-color .18s}
 								.field input:focus{outline:none;border-color:#1f6feb;box-shadow:0 0 0 4px rgba(31,111,235,.12)}
 								.btn-login{width:100%;min-height:48px;border-radius:14px;border:none;background:linear-gradient(135deg,#2d7cff,#0f4fd6);color:#fff;font-size:16px;font-weight:700;cursor:pointer;transition:.18s;margin-top:8px}
 								.btn-login:hover{transform:translateY(-1px);box-shadow:0 12px 28px rgba(31,111,235,.32)}
 								.btn-login:disabled{opacity:.6;cursor:not-allowed;transform:none}
 								.error-msg{margin-top:16px;padding:12px 14px;border-radius:12px;background:#fef2f2;border:1px solid #fecaca;color:#b42318;font-size:13px;display:none}
 								.error-msg.show{display:block}
 								.back-home{display:block;margin-top:20px;text-align:center;color:#5b6b88;font-size:13px;text-decoration:none}
 								.back-home:hover{color:#1f6feb}
 								</style>
 								</head>
 								<body>
 								<div class="login-card">
 								<h1>管理后台</h1>
 								<p class="sub">请输入管理员账号密码登录</p>
 								<form id="login-form">
 								<div class="field">
 								<label>用户名</label>
 								<input type="text" id="username" name="username" placeholder="admin" required autocomplete="username" />
 								</div>
 								<div class="field">
 								<label>密码</label>
 								<input type="password" id="password" name="password" placeholder="请输入密码" required autocomplete="current-password" />
 								</div>
 								<div id="error-msg" class="error-msg"></div>
 								<button type="submit" class="btn-login" id="login-btn">登录</button>
 								</form>
 								<a class="back-home" href="/">← 返回首页</a>
 								</div>
 								<script>
 								(function(){
 								var form=document.getElementById('login-form');
 								var errEl=document.getElementById('error-msg');
 								var btn=document.getElementById('login-btn');
 								form.addEventListener('submit',function(e){
 								e.preventDefault();
 								var u=document.getElementById('username').value.trim();
 								var p=document.getElementById('password').value;
 								if(!u||!p){showError('请输入用户名和密码');return;}
 								btn.disabled=true;
 								btn.textContent='登录中...';
 								errEl.classList.remove('show');
 								fetch('/api/auth/login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:u,password:p})})
 								.then(function(resp){return resp.json().then(function(d){return{ok:resp.ok,data:d};});})
 								.then(function(r){
 								if(r.ok&&r.data.access_token){
 								var token=r.data.access_token;
 								var expires=Date.now()+(r.data.expires_in||3600)*1000;
 								try{
 								localStorage.setItem('admin_token',token);
 								localStorage.setItem('admin_token_expires',String(expires));
 								sessionStorage.setItem('admin_token',token);
 								}catch(e){}
 								window.location.href='/admin/dashboard?t='+encodeURIComponent(token);
 								}else{
 								var msg=(r.data&&r.data.message)||'登录失败，请检查用户名和密码';
 								showError(msg);
 								btn.disabled=false;
 								btn.textContent='登录';
 								}
 								})
 								.catch(function(){
 								showError('网络异常，请稍后重试');
 								btn.disabled=false;
 								btn.textContent='登录';
 								});
 								});
 								function showError(msg){
 								errEl.textContent=msg;
 								errEl.classList.add('show');
 								}
 								})();
 								</script>
 								</body>
 								</html>"""
 								    return HTMLResponse(html)
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								@router.get("/dashboard", include_in_schema=False)
-												fix(rules): close phase15 verify and legacy checker migration

											
										
										
											2026-06-17 09:01:43 +08:00
+								@router.get("/admin/dashboard", include_in_schema=False)
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								def dashboard_page(_: AdminUser = Depends(require_role("admin"))) -> FileResponse:
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								    """返回最小仪表盘页面壳。"""
 								    return FileResponse(_DASHBOARD_HTML)
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								@router.get("/admin/orders/new", include_in_schema=False)
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								def admin_new_order_page(_: AdminUser = Depends(require_role("admin"))) -> HTMLResponse:
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								    return HTMLResponse(_render_admin_new_order_page())
-												release: cut v2.1

											
										
										
											2026-06-13 14:49:58 +08:00
+								@router.get("/s/{code}", include_in_schema=False)
 								def share_page(
 								    code: str,
 								    request: Request,
 								    pwd: Optional[str] = Query(default=None),
 								) -> HTMLResponse:
 								    """公开分享页（T7.5）。"""
 								    settings = get_settings_dep(request)
 								    report_loader = _resolve_report_loader(request, settings)
 								    result = route_short_link_with_report(
 								        code,
 								        password=pwd,
 								        base_url=str(request.base_url).rstrip("/"),
 								        db_path=Path(settings.share_db_path),
 								        report_loader=report_loader,
 								    )
 								    html = render_share_page(result, password=pwd)
 								    return HTMLResponse(html, status_code=status_code_for_result(result))
 								def _resolve_report_loader(
 								    request: Request, settings: Settings
 								) -> Optional[Callable[[str], Optional[dict[str, Any]]]]:
 								    custom_loader = getattr(request.app.state, "share_report_loader", None)
 								    if callable(custom_loader):
 								        return cast(Callable[[str], Optional[dict[str, Any]]], custom_loader)
 								    report_dir = settings.share_report_dir
 								    if not report_dir:
 								        return None
 								    def _loader(report_id: str) -> Optional[dict]:
 								        return load_report_from_directory(report_id, report_dir)
 								    return _loader
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								def _resolve_share_target(
 								    *,
 								    result_type: str,
 								    target_token: str,
 								    settings: Settings,
 								) -> tuple[Any, str, dict[str, Any]]:
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    try:
 								        order = _resolve_order_from_token(target_token, settings)
 								    except Exception as exc:
 								        if isinstance(exc, BusinessError):
 								            raise
 								        if getattr(exc, "status_code", None) in {401, 404}:
 								            raise BusinessError(
 								                DATA_NOT_FOUND,
 								                detail={"reason": "target_token not found"},
 								            ) from exc
 								        raise
 								    if result_type == "review_result":
 								        contract = _load_latest_review_result(order.id, settings)
 								        if contract is None:
 								            raise BusinessError(
 								                DATA_NOT_FOUND,
 								                detail={"reason": "review_result not found"},
 								            )
 								        target_id = contract.review_result_id
 								        share_payload = {
 								            "title": "高考志愿复核结果",
 								            "summary": f"风险等级：{contract.risk_level}",
 								            "candidate_name": order.candidate_name,
 								            "score": contract.review_constraints.get("candidate_score"),
 								            "rank": contract.review_constraints.get("candidate_rank"),
 								            "province": contract.review_constraints.get("candidate_province"),
 								            "year": 2026,
 								            "result_type": "review_result",
 								            "risk_level": contract.risk_level,
 								            "recommendations": [
 								                {"school": item, "major": "复核摘要", "prob": None}
 								                for item in contract.top_findings[:3]
 								            ],
 								        }
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								        return order, target_id, share_payload
 								    if result_type == "report":
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								        if order.status not in {"delivered", "completed"} or not order.audit_report:
 								            raise BusinessError(
 								                DATA_NOT_FOUND,
 								                detail={"reason": "report not ready"},
 								            )
 								        target_id = order.id
 								        share_payload = {
 								            "title": "高考志愿报告分享",
 								            "summary": f"订单 {order.id} - {order.service_version}",
 								            "candidate_name": order.candidate_name,
 								            "province": order.candidate_province,
 								            "report_id": order.id,
 								            "year": 2026,
 								            "result_type": "report",
 								        }
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								        return order, target_id, share_payload
 								    raise BusinessError(
 								        DATA_VALIDATION_FAILED,
 								        detail={"reason": "result_type must be review_result or report"},
 								    )
 								def _find_latest_share_link(
 								    *,
 								    svc: ShortLinkService,
 								    target_id: str,
 								    owner_id: str,
 								    result_type: str,
 								) -> Any | None:
 								    prefix = f"{result_type}:"
 								    for link in svc.list_by_report(target_id):
 								        if link.owner_id != owner_id:
 								            continue
 								        note = str(link.note or "")
 								        if note.startswith(prefix):
 								            return link
 								    return None
 								def _share_link_response(
 								    *,
 								    link: Any,
 								    result_type: str,
 								    target_id: str,
 								    request: Request,
 								    stats: dict[str, Any] | None = None,
 								) -> dict[str, Any]:
 								    base_url = (
 								        str(request.base_url).rstrip("/")
 								        if request is not None
 								        else "http://testserver"
 								    )
 								    share_url = build_url(link.code, base=base_url)
 								    payload = {
 								        "code": link.code,
 								        "share_url": share_url,
 								        "permission": link.permission,
 								        "result_type": result_type,
 								        "target_type": result_type,
 								        "target_id": target_id,
 								        "expires_at_iso": link.to_dict().get("expires_at_iso"),
 								        "owner_id": link.owner_id,
 								        "revoked": bool(link.revoked),
 								        "access_count": link.access_count,
 								        "last_access_at_iso": link.to_dict().get("last_access_at_iso"),
 								    }
 								    if stats is not None:
 								        payload["stats"] = stats
 								    return payload
 								@router.post("/api/share-link", summary="创建正式分享链接", status_code=201)
 								def create_share_link(
 								    payload: dict[str, Any],
 								    request: Request,
 								    current_user: AdminUser = Depends(require_role("admin")),
 								    settings: Settings = Depends(get_settings_dep),
 								) -> dict[str, Any]:
 								    result_type = str(payload.get("result_type") or "").strip()
 								    target_token = str(payload.get("target_token") or "").strip()
 								    permission = str(payload.get("permission") or "read").strip()
 								    ttl_days_raw = payload.get("ttl_days")
 								    replace_existing = bool(payload.get("replace_existing"))
 								    if not target_token:
 								        raise BusinessError(
 								            DATA_VALIDATION_FAILED,
 								            detail={"reason": "target_token is required"},
 								        )
 								    ttl_days: int | None = None
 								    if ttl_days_raw is not None:
 								        try:
 								            ttl_days = int(ttl_days_raw)
 								        except (TypeError, ValueError) as exc:
 								            raise BusinessError(
 								                DATA_VALIDATION_FAILED,
 								                detail={"reason": "ttl_days must be integer"},
 								            ) from exc
 								        if ttl_days <= 0:
 								            raise BusinessError(
 								                DATA_VALIDATION_FAILED,
 								                detail={"reason": "ttl_days must be > 0"},
 								            )
 								    order, target_id, share_payload = _resolve_share_target(
 								        result_type=result_type,
 								        target_token=target_token,
 								        settings=settings,
 								    )
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
 								    svc = ShortLinkService(db_path=settings.share_db_path)
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								    existing = _find_latest_share_link(
 								        svc=svc,
 								        target_id=target_id,
 								        owner_id=current_user.username,
 								        result_type=result_type,
 								    )
 								    if replace_existing and existing is not None and not existing.revoked:
 								        svc.revoke(existing.code, owner_id=current_user.username)
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    link = svc.create(
 								        report_id=target_id,
 								        owner_id=current_user.username,
 								        permission=permission,
 								        ttl_days=ttl_days,
 								        note=f"{result_type}:{order.id}",
 								    )
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								    share_url = build_url(
 								        link.code,
 								        base=str(request.base_url).rstrip("/")
 								        if request is not None
 								        else "http://testserver",
 								    )
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    report_dir = Path(settings.share_report_dir)
 								    report_dir.mkdir(parents=True, exist_ok=True)
 								    report_file = report_dir / f"{target_id}.json"
 								    report_file.write_text(
 								        json.dumps({**share_payload, "share_url": share_url}, ensure_ascii=False),
 								        encoding="utf-8",
 								    )
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								    return _share_link_response(
 								        link=link,
 								        result_type=result_type,
 								        target_id=target_id,
 								        request=request,
 								    )
 								@router.get("/api/share-link/latest", summary="查询最近正式分享链接")
 								def latest_share_link(
 								    result_type: str,
 								    target_token: str,
 								    request: Request,
 								    current_user: AdminUser = Depends(require_role("admin")),
 								    settings: Settings = Depends(get_settings_dep),
 								) -> dict[str, Any]:
 								    _, target_id, _ = _resolve_share_target(
 								        result_type=result_type,
 								        target_token=target_token,
 								        settings=settings,
 								    )
 								    svc = ShortLinkService(db_path=settings.share_db_path)
 								    link = _find_latest_share_link(
 								        svc=svc,
 								        target_id=target_id,
 								        owner_id=current_user.username,
 								        result_type=result_type,
 								    )
 								    if link is None:
 								        raise BusinessError(
 								            DATA_NOT_FOUND,
 								            detail={"reason": "share_link not found", "target_id": target_id},
 								        )
 								    stats = svc.get_stats(link.code)
 								    return _share_link_response(
 								        link=link,
 								        result_type=result_type,
 								        target_id=target_id,
 								        request=request,
 								        stats=stats,
 								    )
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
 								@router.post("/api/share-link/{code}/revoke", summary="撤销正式分享链接")
 								def revoke_share_link(
 								    code: str,
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								    request: Request,
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    current_user: AdminUser = Depends(require_role("admin")),
 								    settings: Settings = Depends(get_settings_dep),
 								) -> dict[str, Any]:
 								    svc = ShortLinkService(db_path=settings.share_db_path)
 								    revoked = svc.revoke(code, owner_id=current_user.username)
 								    link = svc.get(code)
 								    if link is None:
 								        raise BusinessError(DATA_NOT_FOUND, detail={"code": code})
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								    stats = svc.get_stats(code)
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    return {
 								        "code": code,
 								        "revoked": bool(link.revoked),
 								        "changed": revoked,
 								        "owner_id": link.owner_id,
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
+								        "access_count": link.access_count,
 								        "last_access_at_iso": link.to_dict().get("last_access_at_iso"),
 								        "expires_at_iso": link.to_dict().get("expires_at_iso"),
 								        "stats": stats,
 								        "share_url": build_url(
 								            code,
 								            base=str(request.base_url).rstrip("/")
 								            if request is not None
 								            else "http://testserver",
 								        ),
-												feat(share-link): 正式分享链接 API + 复核/报告页分享按钮前端改造

新增:
- POST /api/share-link: 创建正式分享链接（需 admin 角色）
- DELETE /api/share-link/{id}: 撤销分享链接
- 复核结果页 / 报告就绪状态页: 分享按钮改造为调用正式 API
  - 移除 window.location.href 跳转的旧实现
  - 改用 fetch + navigator.share / clipboard API
  - 失败时显示具体错误，不再静默

测试: 7 项通过（API 鉴权 + 创建/撤销 + 前端按钮改造）
- test_share_link_api.py: 5 项 (401/403 鉴权, admin 创建 review_result/report, 撤销)
- test_share_link_frontend.py: 2 项 (复核/报告页不再用 window.location)

已知后续工作（未包含在本 commit）:
- test_share_status_panel.py: 期望 status 页面渲染'当前分享状态'面板，当前未通过
- 将在下一个 commit 完成 panel 集成

											
										
										
											2026-06-29 21:01:44 +08:00
+								    }
-												feat(share): complete poster generation and unify share CLI surface

											
										
										
											2026-06-30 17:48:58 +08:00
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								def _render_admin_new_order_page() -> str:
 								    province_options = [
-												fix(rules): close phase15 verify and legacy checker migration

											
										
										
											2026-06-17 09:01:43 +08:00
+								        "北京",
 								        "上海",
 								        "天津",
 								        "重庆",
 								        "河北",
 								        "河南",
 								        "山东",
 								        "山西",
 								        "陕西",
 								        "辽宁",
 								        "吉林",
 								        "黑龙江",
 								        "江苏",
 								        "浙江",
 								        "安徽",
 								        "福建",
 								        "江西",
 								        "湖北",
 								        "湖南",
 								        "广东",
 								        "广西",
 								        "海南",
 								        "四川",
 								        "贵州",
 								        "云南",
 								        "甘肃",
 								        "青海",
 								        "宁夏",
 								        "新疆",
 								        "内蒙古",
 								        "西藏",
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								    ]
 								    province_html = "".join(
-												fix(rules): close phase15 verify and legacy checker migration

											
										
										
											2026-06-17 09:01:43 +08:00
+								        f'<option value="{p}">{p}</option>' for p in province_options
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								    )
 								    return f"""<!doctype html>
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								<html lang='zh-CN'><head><meta charset='utf-8' /><meta name='viewport' content='width=device-width, initial-scale=1' /><title>后台手动添加订单</title>
 								<link rel='stylesheet' href='/static/portal-ui.css' />
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								<style>
 								body {{ font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#f4f7fb;color:#172033;margin:0; }}
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								.wrap {{ max-width:960px; margin:0 auto; padding:32px 20px; display:grid; gap:16px; }}
 								.panel {{ background:#fff;border:1px solid #dbe3f0;border-radius:20px;padding:24px; box-shadow:0 18px 42px rgba(20,34,53,.08); }}
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								.grid {{ display:grid; grid-template-columns:1fr 1fr; gap:16px; }}
 								.field {{ display:flex; flex-direction:column; gap:6px; margin-bottom:14px; }}
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								input, select, textarea {{ width:100%; padding:12px; border-radius:12px; border:1px solid #cfd7e6; }}
 								textarea {{ min-height:110px; resize:vertical; }}
 								button {{ border:none;border-radius:14px;background:#1f6feb;color:#fff;font-weight:700;padding:13px 18px;cursor:pointer; }}
 								.helper {{ color:#5b6b88; line-height:1.7; }}
 								.proof {{ display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:12px; margin:16px 0 20px; }}
 								.proof-item {{ padding:14px 16px; border-radius:16px; background:linear-gradient(180deg,#f8fbff,#eef5ff); border:1px solid #d7e3f1; }}
 								.proof-item strong {{ display:block; margin-bottom:4px; }}
 								#result {{ margin-top:14px; min-height:24px; color:#5b6b88; white-space:pre-wrap; }}
 								@media (max-width: 900px) {{ .grid, .proof {{ grid-template-columns:1fr; }} }}
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								</style>
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								</head><body><main class='wrap'>
 								<section class='panel'><span class='portal-eyebrow'>后台录单</span><h1>后台手动添加订单</h1><p class='helper'>用于人工服务场景下的补录、客服录单或线下沟通后的订单补建。页面会读取当前登录态调用 <code>/api/orders</code>。</p></section>
 								<section class='panel'>
 								<div class='proof'>
 								  <article class='proof-item'><strong>人工补录更直接</strong><span>适合客服、学校渠道或线下沟通后补建订单。</span></article>
 								  <article class='proof-item'><strong>与后台订单主链一致</strong><span>录入后仍会进入统一订单、通知与交付链路。</span></article>
 								  <article class='proof-item'><strong>字段尽量按业务语义展示</strong><span>避免让后台录单页继续像内部测试表单。</span></article>
 								</div>
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								<form id='order-form'>
 								<div class='grid'>
 								<div class='field'><label>来源</label><select name='source'><option value='wechat'>wechat</option><option value='xianyu'>xianyu</option><option value='web'>web</option><option value='school'>school</option></select></div>
 								<div class='field'><label>服务版本</label><select name='service_version'><option value='audit'>audit</option><option value='basic'>basic</option><option value='standard' selected>standard</option><option value='premium'>premium</option></select></div>
 								<div class='field'><label>金额（分）</label><input name='amount_cents' value='9900' /></div>
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								<div class='field'><label>称呼</label><input name='customer_name' placeholder='可选，例如：张同学 / 张家长' /></div>
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								<div class='field'><label>手机号</label><input name='customer_phone' /></div>
 								<div class='field'><label>微信</label><input name='customer_wechat' /></div>
 								<div class='field'><label>考生姓名</label><input name='candidate_name' /></div>
 								<div class='field'><label>考试省份</label><select name='candidate_province'>{province_html}</select></div>
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								<div class='grid'>
 								<div class='field'><label>同意方式</label><select name='consent_method'><option value='verbal_chat' selected>verbal_chat</option><option value='phone_recording'>phone_recording</option><option value='screenshot'>screenshot</option><option value='written_form'>written_form</option><option value='self_declared'>self_declared</option></select></div>
 								<div class='field'><label>同意备注</label><input name='consent_note' placeholder='例如：微信沟通后家长口头同意' /></div>
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								</div>
 								<div class='field'><label>备注</label><textarea name='notes'></textarea></div>
 								<button type='submit'>创建订单</button>
 								</form>
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								<div id='result'></div>
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								</section></main>
 								<script>
 								const TOKEN_KEY = 'gaokao_admin_dashboard_token';
 								document.getElementById('order-form').addEventListener('submit', async function(event) {{
 								  event.preventDefault();
 								  const token = window.sessionStorage.getItem(TOKEN_KEY) || '';
 								  const form = new FormData(event.target);
 								  const payload = {{
 								    source: form.get('source'),
 								    service_version: form.get('service_version'),
 								    amount_cents: Number(form.get('amount_cents') || 0),
 								    customer_name: form.get('customer_name') || null,
 								    customer_phone: form.get('customer_phone') || null,
 								    customer_wechat: form.get('customer_wechat') || null,
 								    candidate_name: form.get('candidate_name') || null,
 								    candidate_province: form.get('candidate_province') || null,
 								    notes: form.get('notes') || null,
-												feat(admin): 后台 routes + tests 多项增量改进

- routes: cases/orders/stats/ui/web_public 同步字段扩展
- stats.py: 统计聚合逻辑增强
- 14 个测试文件同步更新断言

dev-verify 1279 passed / ruff / mypy 全绿

											
										
										
											2026-06-25 09:27:06 +08:00
+								    consent: {{
 								      consent_method: form.get('consent_method') || 'verbal_chat',
 								      consent_note: form.get('consent_note') || null,
 								    }},
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								  }};
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								  const resultNode = document.getElementById('result');
 								  resultNode.textContent = '正在创建订单…';
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								  const resp = await fetch('/api/orders', {{
 								    method: 'POST',
 								    headers: {{ 'Content-Type': 'application/json', 'Authorization': `Bearer ${{token}}` }},
 								    body: JSON.stringify(payload),
 								  }});
 								  const body = await resp.json();
-												feat(frontend): harden home CTA, Portal, public, and admin pages

- Landing: 主 CTA “先做快速审核” 升级为主按钮，移除多余的次按钮，添加 hero-note 与 hero-divider 让首屏节奏更稳
- Landing: hero-points 收口为 3 个差异化卖点，第 1 个加 lead 背景，右侧风险卡降饱和、避免压过主 CTA
- Landing: 删去旧“志愿方案审计更聚焦/先下单后补资料/站内可追踪交付”重复卡片
- Public: /privacy /service-terms /deletion-policy 接 portal-ui.css 并改成双段 panel + 列表结构
- Portal: /portal/{token}/notifications /portal/{token}/deletion-request 接 portal-ui.css 与新的工具条 / 表单字段化
- Admin: /admin/orders/new 接 portal-ui.css，添加“人工补录更直接/与后台订单主链一致/字段业务语义化”信任块
- Admin: /admin/notifications /admin/ops-alerts 接 portal-ui.css，添加 meta-grid 摘要并把 “payload / details” 改名为“通知内容摘要 / 详细上下文”
- Tests: 锁住 shared CSS、关键产品化文案、Portal 与 admin 页结构断言

											
										
										
											2026-06-16 20:12:58 +08:00
+								  resultNode.textContent = JSON.stringify(body, null, 2);
-												feat(t12): harden public checkout and add admin manual order page

											
										
										
											2026-06-16 12:16:45 +08:00
+								}});
-												feat(ops 6/20 v2.1.3): 生产加固 + L-A 送审前修复 + crowd_db 质量契约

## 实现内容 (6 项改动)

1. **admin /health 端点增强** — 主键契约 status:ok 保持 + checks 子对象
   - db_writable: connect + CREATE TEMP TABLE + INSERT + SELECT + DROP
   - disk_writable: 在 ops_alert_log_path 目录创建临时文件 + 删除
   - settings_valid: 复用 is_jwt_secret_secure 判断
2. **_enforce_jwt_secret_policy** — prod env 使用 dev 默认 JWT / 长度<32 → fail-closed
3. **_enforce_default_admin_password_policy** — prod env 用 admin123 / 长度<10 / 字符类<3 → fail-closed
4. **L-A R7: admin UI footer** — dashboard.html (592 行) + ui.py 内联 admin/orders/new
   模板加 footer 隐私政策 + 数据删除 + 服务说明链接, 与 portal _render_footer_links() 同口径
5. **L-A R1+R4: LEGAL_PRIVACY_BASELINE 文档同步**
   - §6 移除孤儿 'admin' consent_channel 值 (代码侧从未实际产生)
   - §7 已具备/尚缺 重写, 显式归到 6/20 增量
6. **Q-A: tests/test_crowd_db_data_quality.py** — 8 个测试锁住
   - 27 省总数 + 仅湖南 high + 其它 26 省 ≤ usable
   - 高考生源大省 (广东/江苏/北京/上海/山东/河南/四川/湖北) 不在 high 集合
   - data_year=2025 (6/25 后需显式更新)

## 测试

- 4/4 RED → GREEN (admin/tests/test_health.py: JWT/admin password 拒绝 dev 默认值)
- 8/8 GREEN (data/crowd_db/tests/test_crowd_db_data_quality.py: 数据质量契约)
- 3 回归修复 (test_app.py + test_routes.py + test_health.py 适配新 /health checks 字段)
- 31/31 GREEN (admin/tests/test_app.py + test_routes.py + test_health.py)

## 报告

- reports/LA_LEGAL_PRIVACY_PRE_AUDIT_2026-06-20.md (363 行, 9 风险 0 阻塞)
- reports/QA_CROWD_DB_NON_HUNAN_DENSITY_AUDIT.md (45 行, CRITICAL 文档失真已规避)

## 文件

M CHANGELOG.md (v2.1.3)
M admin/config.py (2 个 _enforce_*_policy + load_settings post-load)
M admin/routes/health.py (3 个 _check_* + checks 子对象)
M admin/routes/ui.py (admin/orders/new 模板加 footer)
M admin/static/dashboard.html (footer 块)
M admin/tests/test_app.py (适配 checks 字段 + regex 兼容)
M admin/tests/test_health.py (4 个新测试)
M admin/tests/test_routes.py (适配 checks 字段)
M docs/CURRENT_STATE.md (0.3-0.5 增量段)
M docs/LEGAL_PRIVACY_BASELINE.md (§6 清理 + §7 重写)
+ data/crowd_db/tests/test_crowd_db_data_quality.py (8 tests)
+ reports/LA_LEGAL_PRIVACY_PRE_AUDIT_2026-06-20.md
+ reports/QA_CROWD_DB_NON_HUNAN_DENSITY_AUDIT.md

											
										
										
											2026-06-20 18:36:23 +08:00
+								</script>
 								<!-- 合规 footer: 与 portal 前台 _render_footer_links() 同口径 -->
 								<footer style="margin-top:32px;padding:16px;border-top:1px solid #d8e0ee;color:#5b6b88;font-size:13px;text-align:center;background:#f4f6fb;">
 								  <a href="/privacy" style="color:#2f55a4;text-decoration:none;margin:0 8px;">隐私政策</a> ·
 								  <a href="/deletion-policy" style="color:#2f55a4;text-decoration:none;margin:0 8px;">数据删除说明</a> ·
 								  <a href="/service-terms" style="color:#2f55a4;text-decoration:none;margin:0 8px;">服务说明</a>
 								  <div style="margin-top:4px;color:#7c8aa8;">© 2026 高考志愿填报智能系统 · 内部操作员亦需遵守隐私与数据合规</div>
 								</footer>
 								</body></html>"""