8 行
6.3 KiB
CSV
8 行
6.3 KiB
CSV
"ID","Title","Description","Acceptance","Test_Method","Tools","Dev_Status","Review1_Status","Regression_Status","Files","Dependencies","Notes"
|
|
"WTCLOSE2F-0","修正 WTCLOSE2 远端可信 IP 执行口径","修正 WTCLOSE2 的执行边界：企微 API 已限制只能由部署服务器访问，本地不得复跑企微 live/read runner，也不得把本地缺 env/DB 误判为业务阻断。","1) 新合同使用 WTCLOSE2F-0..WTCLOSE2F-5；2) 明确本地只做合同、语法、文档和静态门禁；3) 企微 API、OA 远端归档 DB 和 WTCLOSE2 live/read 收口必须在部署服务器执行；固定 WECOM_AGENT_SECRET，不尝试其他 Secret；权限、可信 IP、模板、env 或可见范围缺口统一记录为 NEEDS_CONFIG 或 SKIP/BLOCKED_BY_EXTERNAL_CONFIG；4) 旧本地 WTCLOSE2 阻断结论不得作为企微业务阻断事实。","受影响流程：本地门禁 -> 远端可信 IP WTCLOSE2 -> WEXT1-LIVE 问答；验证步骤：python3 /home/shunli/.codex/skills/plan/scripts/validate_issues_csv.py issues/2026-05-22_11-10-06-wecom-test-account-closeout-remote-only-v1.csv；node scripts/qa/check-process-contract.mjs --issue issues/2026-05-22_11-10-06-wecom-test-account-closeout-remote-only-v1.csv --profile wecom --json。","python3|node","DONE","DONE","DONE","issues/2026-05-22_11-10-06-wecom-test-account-closeout-remote-only-v1.csv","[]","回滚/清理：恢复本轮合同、脚本和文档改动；不修改远端配置、不写企业微信、不新增 Prisma schema。"
|
|
"WTCLOSE2F-1","WTCLOSE2 脚本增加 remote-only 保护","修改 scripts/qa/run-wecom-test-account-final-closeout.sh：默认本地直接执行时拒绝跑企微链路；新增 --remote，经 SSH 到部署服务器后在 server 容器里执行同一脚本。","1) 本地直接执行输出错误并提示 --remote；2) --remote 使用 DEPLOY_SERVER、REMOTE_DIR、REMOTE_ENV_FILE 和 docker compose exec server；3) 远端容器内设置 WTCLOSE2_EXECUTION_MODE=remote；4) summary 记录 executionMode 和 trustedIpBoundary；5) 脚本不新增企微写入开关。","受影响流程：WTCLOSE2 运行入口 -> 部署服务器可信 IP -> 远端 env/DB 证据；验证步骤：bash -n scripts/qa/run-wecom-test-account-final-closeout.sh；bash scripts/qa/run-wecom-test-account-final-closeout.sh --help；本地直接执行应返回非 0 且提示 --remote。","bash|ssh","DONE","DONE","DONE","scripts/qa/run-wecom-test-account-final-closeout.sh","[""WTCLOSE2F-0""]","回滚/清理：恢复脚本；远端 --remote 只执行 dry-run/只读收口，不创建企微模板或审批单。"
|
|
"WTCLOSE2F-2","事实源更新远端执行边界","更新路线图、管理员手册、统一审批规约、试运行报告、文档索引、事实源矩阵和项目 skill，固化 WTCLOSE2 必须部署服务器执行。","1) 事实源写清企微 API 受可信 IP 限制；2) WTCLOSE2 命令改为 --remote；3) 本地 WTCLOSE2 只能作为脚本开发/静态检查，不能作为业务证据；4) WEXT1-LIVE 仍需远端 WTCLOSE2 可解释通过和人工确认。","受影响流程：后续执行者读取事实源 -> 正确选择远端运行；验证步骤：rg -n ""WTCLOSE2F|trusted IP|可信 IP|--remote|本地不得"" docs .agents/skills/hyb-oa-delivery/SKILL.md；node scripts/qa/audit-docs.mjs --check-registry；quick_validate.py .agents/skills/hyb-oa-delivery。","rg|node|python3","DONE","DONE","DONE","docs/企微优先开发路线图.md|docs/管理员手册.md|docs/trialrun/人工试运行报告.md|docs/文档索引.md|docs/文档事实源状态矩阵.md|docs/需求-统一审批中心规约.md|.agents/skills/hyb-oa-delivery/SKILL.md","[""WTCLOSE2F-1""]","回滚/清理：恢复本轮文档和 skill 改动；不修改历史事实源之外的业务代码。"
|
|
"WTCLOSE2F-3","只读 reviewer 审查远端门禁","审批规则和 WEXT1-LIVE/WREAL1 准入属于高风险治理项，修正后由只读 reviewer 检查是否仍可能误用本地结果。","1) reviewer 只读；2) 审查本地执行是否默认阻断；3) 审查 --remote 是否仍保持不写企微、不启用真实员工；4) 审查文档是否明确旧本地结果不可作为业务阻断；5) blocker 必须修复。","受影响流程：脚本/文档修正 -> 独立评审 -> 门禁回填；验证步骤：reviewer subagent 输出无 blocker 或 blocker 已处理。","subagent|manual","DONE","DONE","DONE","N/A","[""WTCLOSE2F-2""]","回滚/清理：reviewer 不修改文件；如发现风险，暂停 WEXT1-LIVE/WREAL1。reviewer 无 blocker；旧路线句和归档写库口径已按意见修正。"
|
|
"WTCLOSE2F-4","本地静态门禁复跑","复跑合同、process gate、脚本语法、文档审计、skill 校验、diff 检查和最小回归，确认修正不破坏现有系统。","1) validate_issues_csv 通过；2) process gate baseline 与 issue-specific 通过；3) bash -n 通过；4) audit-docs、quick_validate、git diff --check 通过；5) bash scripts/check-minimal.sh 通过。","受影响流程：本地静态门禁 -> 提交；验证步骤：validate_issues_csv.py <csv>；node scripts/qa/check-process-contract.mjs --baseline --json；node scripts/qa/check-process-contract.mjs --issue <csv> --profile wecom --json；bash -n scripts/qa/run-wecom-test-account-final-closeout.sh；bash scripts/check-minimal.sh。","python3|node|bash|git","DONE","DONE","DONE","scripts/qa/run-wecom-test-account-final-closeout.sh|docs/*|.agents/skills/hyb-oa-delivery/SKILL.md","[""WTCLOSE2F-3""]","回滚/清理：若门禁失败，恢复本轮改动或保留 TODO；不部署。"
|
|
"WTCLOSE2F-5","提交远端执行口径修正","回填 WTCLOSE2F 状态并中文提交。远端实际 WTCLOSE2 运行需在部署同步后另行执行，不在本地伪造。","1) CSV 状态回填；2) git diff --check 通过；3) 中文提交包含 WTCLOSE2F；4) 最终说明本轮未部署，远端执行需先 SYNC_ENV=0 部署或确认远端代码已同步。","受影响流程：提交 -> 后续部署/远端 WTCLOSE2 问答；验证步骤：git status --short；git log -1 --oneline。","git","DONE","DONE","DONE","issues/2026-05-22_11-10-06-wecom-test-account-closeout-remote-only-v1.csv|scripts/qa/run-wecom-test-account-final-closeout.sh|docs/*|.agents/skills/hyb-oa-delivery/SKILL.md","[""WTCLOSE2F-4""]","回滚/清理：revert 本提交；远端部署和远端 WTCLOSE2 执行需单独确认。本轮未部署、未远端执行业务证据。"
|