规划(08-08-production-authenticated-readiness): 锁定生产登录态只读验收门禁

.trellis/tasks/08-08-production-authenticated-readiness/task.json

@@ -0,0 +1,36 @@
+{
+  "id": "production-authenticated-readiness",
+  "name": "production-authenticated-readiness",
+  "title": "生产登录态只读验收",
+  "description": "诊断生产管理员与员工验收凭据 401 的原因，在不修改账号、权限或业务数据的前提下恢复最小登录态只读验收；登录前先查锁定/失败计数和 identifier 登录语义，合同终止只验证到初始禁用按钮，并在验收前后复核回滚窗口。",
+  "status": "in_progress",
+  "dev_type": null,
+  "scope": "production-auth-diagnosis-and-authenticated-readonly-acceptance",
+  "package": null,
+  "priority": "P1",
+  "creator": "shunli",
+  "assignee": "shunli",
+  "createdAt": "2026-08-08",
+  "completedAt": null,
+  "branch": null,
+  "base_branch": "main",
+  "worktree_path": null,
+  "commit": null,
+  "pr_url": null,
+  "subtasks": [],
+  "children": [],
+  "parent": null,
+  "relatedFiles": [
+    "server/src/routes/auth.js",
+    "server/src/scripts/repair-oa-only-smoke-accounts.js",
+    "server/prisma/schema.prisma",
+    "server/src/routes/contractsRegistry.js",
+    "client/src/pages/ContractRegistryWorkspacePage.tsx",
+    "client/tests/e2e/live-smoke.spec.ts",
+    "scripts/qa/run-live-smoke-readiness.sh",
+    "deploy/trialrun/production-preflight-remote.sh",
+    ".trellis/spec/hyb-oa/deployment-trialrun.md"
+  ],
+  "notes": "仅规划，尚未启动实施。前一部署任务已完成 65 条迁移与匿名鉴权，但管理员/员工验收凭据均返回 401；本任务禁止用重复登录试错诊断，禁止修改生产账号或产生真实合同终止写入。",
+  "meta": {}
+}