44 行
2.2 KiB
JSON
44 行
2.2 KiB
JSON
{
|
|
"id": "production-employee-smoke-break-glass-reset",
|
|
"name": "production-employee-smoke-break-glass-reset",
|
|
"title": "生产员工 Smoke Break-glass 重置",
|
|
"description": "为唯一专用 OA-only smoke employee 新增最窄 break-glass 密码重置工具，经正常候选发布后执行一次受控认证恢复；角色精确为 employee 且合同管理权限写后重新验证，负向业务验收仍归 08-08 task。",
|
|
"status": "in_progress",
|
|
"dev_type": "operations",
|
|
"scope": "server employee-smoke break-glass script/tests, controlled production delivery and credential reset lifecycle; no role/permission or contract writes",
|
|
"package": "hyb-oa",
|
|
"priority": "P2",
|
|
"creator": "shunli",
|
|
"assignee": "shunli",
|
|
"createdAt": "2026-08-10",
|
|
"completedAt": null,
|
|
"branch": null,
|
|
"base_branch": "main",
|
|
"worktree_path": null,
|
|
"commit": null,
|
|
"pr_url": null,
|
|
"subtasks": [],
|
|
"children": [],
|
|
"parent": null,
|
|
"relatedFiles": [
|
|
"server/src/scripts/repair-oa-only-smoke-accounts.js",
|
|
"server/tests/unit/scripts/repair-oa-only-smoke-accounts.test.js",
|
|
"server/src/scripts/reset-active-admin-password.js",
|
|
"server/tests/unit/scripts/reset-active-admin-password.test.js",
|
|
"server/src/scripts/reset-employee-smoke-password.js",
|
|
"server/tests/unit/scripts/reset-employee-smoke-password.test.js",
|
|
"server/src/constants/permissions.js",
|
|
"server/src/utils/crypto.js",
|
|
"server/src/utils/passwordPolicy.js",
|
|
"server/src/routes/auth.js",
|
|
"server/src/services/contractRegistryFilters.js",
|
|
"deploy/trialrun/deploy-existing.sh",
|
|
".trellis/tasks/08-08-production-authenticated-readiness",
|
|
".trellis/spec/hyb-oa/backend-fastify-prisma.md",
|
|
".trellis/spec/hyb-oa/deployment-trialrun.md",
|
|
".trellis/spec/hyb-oa/security-privacy.md"
|
|
],
|
|
"notes": "本地实现与用户只读审查 PASS：新增员工 smoke 专用脚本与 23 条 focused 用例，三组脚本测试 34/34、Prisma、client build 和治理门禁 PASS；reviewer 另确认 Serializable + Employee/role lock 可阻止写入窗口内权限前提漂移。当前停在 STOP A，尚未提交/推送/发布/连接生产；正常生产发布与账号写入仍分别另行批准。现有 repair helper 仅 dry-run，严禁 apply。",
|
|
"meta": {}
|
|
}
|