oa-frontend-postdeploy-public-verification 归档公网稳态验证任务

这个提交包含在:
2026-05-26 17:54:21 +08:00
父节点 fe0780c551
当前提交 74f8410f99
共修改 17 个文件,包含 3 行新增和 3 行删除
@@ -0,0 +1,4 @@
{"file": ".trellis/spec/hyb-oa/deployment-trialrun.md", "reason": "核对部署命令、部署后 smoke、生产操作边界"}
{"file": ".trellis/spec/hyb-oa/frontend-react-vite-design.md", "reason": "核对前端构建、UI 规则和视觉验证要求"}
{"file": ".trellis/spec/hyb-oa/security-privacy.md", "reason": "核对报告、证据和输出不泄露敏感信息"}
{"file": ".trellis/spec/hyb-oa/docs-and-evidence.md", "reason": "核对证据落点、相对路径和任务归档规则"}
@@ -0,0 +1,4 @@
{"file": ".trellis/spec/hyb-oa/deployment-trialrun.md", "reason": "公网部署、安全模式、部署后 smoke 和生产边界"}
{"file": ".trellis/spec/hyb-oa/frontend-react-vite-design.md", "reason": "前端设计规则和部署前 UI 检查"}
{"file": ".trellis/spec/hyb-oa/security-privacy.md", "reason": "报告和聊天中的敏感信息排除规则"}
{"file": ".trellis/spec/hyb-oa/docs-and-evidence.md", "reason": "验证证据、报告引用和 Trellis task 记录规则"}
@@ -0,0 +1,39 @@
# Implementation Plan
## Sequence
1. Confirm explicit user approval for public deployment.
2. Run deployment preflight checks:
- clean working tree
- client build
- UI design rules
- `git diff --check`
3. Deploy with safe env boundary:
- `SYNC_ENV=0 bash deploy/trialrun/deploy.sh`
- do not sync or overwrite remote `.env`
4. Run post-deploy public checks:
- live smoke readiness
- permission matrix
- OAFRONT3 PC readonly visual matrix
- mobile entry matrix
- WeCom rendering matrix
5. Save/redact report references under this task research directory.
6. If green, conclude `READY_FOR_TRIAL_START_CONFIRMATION`.
## Stop Conditions
- User has not explicitly approved deployment.
- Working tree is dirty outside the task.
- Deployment script fails.
- Public `/ready` fails.
- Permission matrix has issues.
- PC visual matrix has P1 blocker.
- Any report contains sensitive data.
## Safety Boundaries
- No production `.env` overwrite.
- No real payment.
- No Enterprise WeChat writes.
- No true business write automation.
- No database reset, restore, or manual migration.
@@ -0,0 +1,126 @@
# OA 前端清障部署后公网稳态验证
## Goal
将已完成并提交的 PC 前端试运行前清障改动部署到公网试运行环境,并完成部署后公网稳态验证,确保真实 7 天试运行启动前的公网版本已经覆盖最新前端改动,且 `/ready`、live smoke、权限矩阵、PC 只读视觉矩阵、移动/企业微信入口和基础隐私扫描均可解释通过。
本任务只做受控部署和只读验证;不改生产 `.env`,不写真实业务数据,不写企业微信,不执行真实付款,不做生产数据库恢复或重置。
## Scope
- 部署当前 `main` 上已提交的前端清障改动到公网试运行环境。
- 使用既有部署脚本和 `SYNC_ENV=0` 安全模式完成远端同步、构建、迁移状态检查、runtime smoke 和 public bundle 扫描。
- 部署后执行公网只读验证矩阵,并保存脱敏证据引用。
- 只处理部署后验证发现的阻断分类和证据记录;如需修复代码,另建最小修复任务。
- 不扩大前端体验改造范围,不启动真实 7 天计数。
## What I Already Know
- 当前本地 `main` 已包含前端清障提交:
- `66b3ceb oa-frontend-pretrial-cleanup 收敛PC试运行前页面风格`
- `6a99d86 oa-frontend-pretrial-cleanup 归档PC前端清障任务`
- OAOPS1 7 天试运行准备任务已完成并归档:
- `2f5c992 oaops1-seven-day-trial-prep 完成启动准备复核`
- `892de7d oaops1-seven-day-trial-prep 归档7天试运行准备任务`
- 准备任务的只读复核已通过:公网 `/ready`、live smoke/OCR 条件、企业微信配置、权限矩阵均满足启动前自动化条件。
- 前端清障改动已在本地通过:
- `cd client && npm run build`
- `node scripts/qa/check-ui-design-rules.mjs --strict`
- `bash scripts/qa/run-web-gates.sh r106-visual-local`
- Trellis task validate / governance / `git diff --check`
- 还缺部署后公网验证;此前 PC 只读视觉矩阵通过的是当时公网版本,不能证明最新本地前端改动已经在公网生效。
## Requirements
- 部署前必须确认工作区干净,并复跑必要本地门禁:
- `cd client && npm run build`
- `node scripts/qa/check-ui-design-rules.mjs --strict`
- `git diff --check`
- 部署必须使用安全模式:
- `SYNC_ENV=0 bash deploy/trialrun/deploy.sh`
- 不覆盖远端 `.env`
- 不启用额外 worker/minio,除非另行确认
- 部署后必须记录:
- 本地部署 commit hash
- 部署脚本输出结论
- 公网 `/ready` 结果
- public bundle 文案扫描结果
- 部署后必须执行公网只读验证:
- live smoke / OCR readiness
- OA 权限矩阵只读检查
- OAFRONT3 PC 只读视觉矩阵
- 移动入口矩阵与企业微信渲染矩阵
- 发现 blocker 时:
- 不启动 7 天试运行
- 不用前端隐藏或临时配置绕过
- 记录 blocker 证据并拆最小修复任务
## Acceptance Criteria
- [x] 用户明确批准执行公网部署。
- [x] 部署前本地门禁通过。
- [x] `SYNC_ENV=0 bash deploy/trialrun/deploy.sh` 成功,不覆盖远端 `.env`。
- [x] 部署后公网 `/ready` 通过。
- [x] 部署后 live smoke / OCR readiness 通过或可解释。
- [x] 部署后权限矩阵 `PASS_PERMISSION_MATRIX_READY`。
- [x] 部署后 PC 只读视觉矩阵无 P1 blocker。
- [x] 部署后移动入口和企业微信渲染矩阵通过。
- [x] 所有报告保存到当前 task 的 `research/` 或既有 `artifacts/qa-flow/`,且只在 task 中引用脱敏相对路径。
- [x] Trellis validate、governance 和 `git diff --check` 通过。
## Definition Of Done
- 公网试运行环境已部署到包含最新前端清障改动的 commit。
- 部署后公网验证报告齐全,并能说明是否允许进入真实 7 天试运行人工启动确认。
- 没有密码、token、Secret、完整账号、完整本地路径、合同正文、银行资料、原始票据或 raw payload 写入 Trellis task、docs、报告摘要或聊天。
- 本任务归档前明确结论:`READY_FOR_TRIAL_START_CONFIRMATION`、`READY_WITH_FINDINGS` 或 `BLOCKED_POSTDEPLOY_VERIFICATION`。
## Out Of Scope
- 不启动真实 7 天计数。
- 不创建、提交、审批、付款任何真实业务单据。
- 不写企业微信消息、通讯录、审批或回调数据。
- 不改远端 `.env` 或生产配置。
- 不做数据库恢复、重置、手工迁移或真实回滚。
- 不执行真实付款、银行流水导入、ERP 写入或支付接口联调。
- 不继续扩大前端改版范围;本任务只验证已提交的前端清障改动。
## Test Plan
部署前:
```bash
cd client && npm run build
node scripts/qa/check-ui-design-rules.mjs --strict
git diff --check
```
部署:
```bash
SYNC_ENV=0 bash deploy/trialrun/deploy.sh
```
部署后:
```bash
set -a && source ~/.hyb-oa/live-smoke.env && set +a
LIVE_SMOKE_BASE_URL=https://oa.hyinda.com bash scripts/qa/run-live-smoke-readiness.sh
LIVE_SMOKE_BASE_URL=https://oa.hyinda.com OA_PERMISSION_MATRIX_REPORT_DIR=<task-research-dir> node scripts/qa/check-oa-permission-matrix.mjs
bash scripts/qa/run-oafront3-pc-readonly-visual.sh
cd client && E2E_BASE_URL=https://oa.hyinda.com npx playwright test tests/e2e/dg7-mobile-information-dedupe.spec.ts tests/e2e/r124-mobile-entry-matrix.spec.ts --workers=1 --reporter=list
cd client && E2E_BASE_URL=https://oa.hyinda.com npx playwright test tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts --workers=1 --reporter=list
python3 ./.trellis/scripts/task.py validate 05-26-oa-frontend-postdeploy-public-verification
node scripts/qa/check-trellis-governance.mjs
git diff --check
```
## Technical Notes
- Deployment spec: `.trellis/spec/hyb-oa/deployment-trialrun.md`
- Frontend design spec: `.trellis/spec/hyb-oa/frontend-react-vite-design.md`
- Privacy spec: `.trellis/spec/hyb-oa/security-privacy.md`
- Trial run docs: `docs/trialrun/发布试运行准备清单.md`
- Deploy script: `deploy/trialrun/deploy.sh`
- PC visual script: `scripts/qa/run-oafront3-pc-readonly-visual.sh`
- Live readiness script: `scripts/qa/run-live-smoke-readiness.sh`
@@ -0,0 +1,42 @@
{
"checkedAt": "2026-05-26T09:45:41.133Z",
"baseUrl": "https://oa.hyinda.com",
"liveSmokeReady": true,
"liveSmoke": {
"LIVE_SMOKE_ADMIN_IDENTIFIER": true,
"LIVE_SMOKE_ADMIN_PASSWORD": true,
"LIVE_SMOKE_EMPLOYEE_IDENTIFIER": true,
"LIVE_SMOKE_EMPLOYEE_PASSWORD": true
},
"liveSmokeOptional": {
"LIVE_EXPECT_WECOM_STATUS": true,
"LIVE_SMOKE_MANAGER_IDENTIFIER": true,
"LIVE_SMOKE_MANAGER_PASSWORD": true,
"LIVE_SMOKE_FINANCE_IDENTIFIER": true,
"LIVE_SMOKE_FINANCE_PASSWORD": true
},
"liveOcrReady": true,
"liveOcr": {
"userReady": true,
"invoiceSampleReady": true,
"invoiceFileProvided": true,
"invoiceFileReady": true,
"invoiceBatchDirProvided": false,
"invoiceBatchDirReady": false,
"allowDuplicate": true
},
"missing": [],
"publicReady": {
"ok": true,
"status": 200
},
"wecomConfig": {
"ok": true,
"status": 200,
"statusText": "ready",
"entryEnabled": true,
"oauthEnabled": true,
"defaultReturnTo": "/mobile",
"loginUrl": "/api/auth/wecom/login?returnTo=%2Fmobile"
}
}
@@ -0,0 +1,7 @@
Running 1 test using 1 worker
[live-ocr] {"alias":"SAMPLE-PDF-001","status":"ocr_failed","durationMs":634,"transport":"ui","timings":{"uploadMs":634,"terminalWaitMs":0},"reasonCategory":"duplicate_or_same_invoice","fieldHits":{"invoiceId":false,"invoiceCodeOrNumber":false,"sellerName":false,"totalAmount":false,"invoiceDate":false}}
✓ 1 tests/e2e/manual/live-invoice-ocr.spec.ts:8:1 › 手工 live 腾讯 OCR 辅助复核:真实 VAT 发票上传后进入可处理状态 (6.0s)
1 passed (9.6s)
@@ -0,0 +1,14 @@
>>> 探活 live /ready: https://oa.hyinda.com/ready
>>> 执行 live smoke Playwright
> [email protected] test:e2e:live
> playwright test tests/e2e/live-smoke.spec.ts
Running 3 tests using 1 worker
✓ 1 tests/e2e/live-smoke.spec.ts:43:3 › live smoke › 公网基础探活与企微配置状态 (1.8s)
✓ 2 tests/e2e/live-smoke.spec.ts:64:3 › live smoke › 管理员只读网页 smoke (11.6s)
✓ 3 tests/e2e/live-smoke.spec.ts:106:3 › live smoke › 员工只读网页 smoke (10.5s)
3 passed (27.7s)
@@ -0,0 +1 @@
[public-bundle-copy] base=https://oa.hyinda.com scanned=92 focused=2 findings=0
@@ -0,0 +1,11 @@
{
"issueId": null,
"baseURL": "https://oa.hyinda.com",
"commit": "d829e44",
"checkedAt": "2026-05-26T09:46:31.838Z",
"status": "PASS",
"mode": "live-smoke-readiness",
"reportDir": ".trellis/tasks/05-26-oa-frontend-postdeploy-public-verification/research/postdeploy-live-smoke-readiness",
"groups": null,
"notes": "公网 /ready、public bundle、pending OCR、live smoke 和真实 OCR 可用性检查;缺少凭据或样票时按脚本规则记录 SKIP。"
}
@@ -0,0 +1,15 @@
Running 6 tests using 1 worker
(node:1644539) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.
(Use `node --trace-warnings ...` to show where the warning was created)
(node:1644539) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.
(Use `node --trace-warnings ...` to show where the warning was created)
✓ 1 tests/e2e/dg7-mobile-information-dedupe.spec.ts:884:3 › MIF7 移动信息架构整改 › 首页常用入口不重复底部 Tab,员工进度页按状态分标签 (35.6s)
✓ 2 tests/e2e/dg7-mobile-information-dedupe.spec.ts:933:3 › MIF7 移动信息架构整改 › 审批人首页只保留轻待办摘要,审批页按待我审批和已处理分组 (5.4s)
✓ 3 tests/e2e/dg7-mobile-information-dedupe.spec.ts:1008:3 › MIF7 移动信息架构整改 › 通知中心事件化,点击通知直达业务详情且返回来源页 (7.7s)
✓ 4 tests/e2e/dg7-mobile-information-dedupe.spec.ts:1056:3 › MIF7 移动信息架构整改 › 报销详情统一详情壳,直接进入请假详情返回进度标签 (7.1s)
✓ 5 tests/e2e/dg7-mobile-information-dedupe.spec.ts:1112:3 › MIF7 移动信息架构整改 › 财务首页角色化摘要只对财务角色展示 (7.2s)
✓ 6 tests/e2e/r124-mobile-entry-matrix.spec.ts:486:3 › R124 企业微信移动入口矩阵 › 底部入口、我的二级入口、PDF 上传和草稿删除不回退到 PC 体验 (12.9s)
6 passed (1.3m)
@@ -0,0 +1,892 @@
{
"issueId": "OAFRONT3-1",
"mode": "pc-readonly-visual-evidence",
"status": "PASS_PC_READONLY_VISUAL_READY",
"conclusion": "PASS_PC_READONLY_VISUAL_READY",
"baseUrl": "https://oa.hyinda.com",
"checkedAt": "2026-05-26T09:49:00.322Z",
"readOnly": true,
"viewport": "1440x960",
"roleCount": 7,
"routeCount": 32,
"screenshotDir": "output/playwright/oafront3-pc-readonly-postdeploy",
"reportDir": ".trellis/tasks/05-26-oa-frontend-postdeploy-public-verification/research/postdeploy-oafront3-pc-readonly",
"roles": [
{
"role": "employee",
"login": "PASS"
},
{
"role": "manager",
"login": "PASS"
},
{
"role": "finance",
"login": "PASS"
},
{
"role": "finance_mgr",
"login": "PASS"
},
{
"role": "admin",
"login": "PASS"
},
{
"role": "ceo",
"login": "PASS"
},
{
"role": "hr",
"login": "PASS"
}
],
"routes": [
{
"role": "employee",
"route": "/portal",
"label": "员工工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 786,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "employee",
"route": "/reimbursements",
"label": "员工报销列表",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/reimbursements",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-reimbursements.png",
"metrics": {
"title": "海音达工作台",
"textLength": 718,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "employee",
"route": "/invoice-pool",
"label": "员工票据中心",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/invoice-pool",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-invoice-pool.png",
"metrics": {
"title": "海音达工作台",
"textLength": 3447,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "employee",
"route": "/purchase-requests",
"label": "员工采购申请",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/purchase-requests",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-purchase-requests.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1085,
"headingCount": 1,
"tableCount": 3,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "employee",
"route": "/assets",
"label": "员工资产台账",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/assets",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-assets.png",
"metrics": {
"title": "海音达工作台",
"textLength": 830,
"headingCount": 1,
"tableCount": 2,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "employee",
"route": "/payment-batches",
"label": "员工付款权限负例",
"layer": "B",
"expectation": "forbidden_ok",
"status": "FORBIDDEN_EXPECTED",
"finalPath": "/403",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/employee-payment-batches.png",
"metrics": {
"title": "海音达工作台",
"textLength": 56,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": true,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "manager",
"route": "/portal",
"label": "主管工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/manager-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 984,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "manager",
"route": "/workflow/tasks",
"label": "主管审批待办",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/workflow/tasks",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/manager-workflow-tasks.png",
"metrics": {
"title": "海音达工作台",
"textLength": 550,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "manager",
"route": "/purchase-requests",
"label": "主管采购申请",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/purchase-requests",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/manager-purchase-requests.png",
"metrics": {
"title": "海音达工作台",
"textLength": 475,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "manager",
"route": "/projects",
"label": "主管项目列表",
"layer": "B",
"expectation": "optional",
"status": "PASS",
"finalPath": "/projects",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/manager-projects.png",
"metrics": {
"title": "海音达工作台",
"textLength": 777,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance",
"route": "/portal",
"label": "财务工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1009,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance",
"route": "/invoice-pool",
"label": "财务票据中心",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/invoice-pool",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance-invoice-pool.png",
"metrics": {
"title": "海音达工作台",
"textLength": 526,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance",
"route": "/payment-batches",
"label": "财务付款批次",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/payment-batches",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance-payment-batches.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1726,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance",
"route": "/ap-operations",
"label": "财务 AP 运营",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/ap-operations",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance-ap-operations.png",
"metrics": {
"title": "海音达工作台",
"textLength": 736,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance",
"route": "/reimbursements",
"label": "财务报销列表",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/reimbursements",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance-reimbursements.png",
"metrics": {
"title": "海音达工作台",
"textLength": 453,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance_mgr",
"route": "/portal",
"label": "财务负责人工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance_mgr-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1111,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance_mgr",
"route": "/workflow/tasks",
"label": "财务负责人审批待办",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/workflow/tasks",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance_mgr-workflow-tasks.png",
"metrics": {
"title": "海音达工作台",
"textLength": 839,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance_mgr",
"route": "/payment-batches",
"label": "财务负责人付款批次",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/payment-batches",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance_mgr-payment-batches.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1792,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance_mgr",
"route": "/ap-operations",
"label": "财务负责人 AP 运营",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/ap-operations",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance_mgr-ap-operations.png",
"metrics": {
"title": "海音达工作台",
"textLength": 809,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "finance_mgr",
"route": "/audit-logs",
"label": "财务负责人审计日志",
"layer": "C",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/audit-logs",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/finance_mgr-audit-logs.png",
"metrics": {
"title": "海音达工作台",
"textLength": 3519,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 40,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/portal",
"label": "管理员工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 896,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/assets",
"label": "管理员资产台账",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/assets",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-assets.png",
"metrics": {
"title": "海音达工作台",
"textLength": 3586,
"headingCount": 1,
"tableCount": 2,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/contracts-registry",
"label": "管理员合同台账",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/contracts-registry",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-contracts-registry.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1612,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/system/workspace",
"label": "管理员工作区设置",
"layer": "C",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/system/workspace",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-system-workspace.png",
"metrics": {
"title": "海音达工作台",
"textLength": 1718,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/system/approval-rules",
"label": "管理员审批规则",
"layer": "C",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/system/approval-rules",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-system-approval-rules.png",
"metrics": {
"title": "海音达工作台",
"textLength": 983,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 3,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "admin",
"route": "/system/feature-flags",
"label": "管理员功能开关",
"layer": "C",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/system/feature-flags",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/admin-system-feature-flags.png",
"metrics": {
"title": "海音达工作台",
"textLength": 4638,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "ceo",
"route": "/portal",
"label": "负责人工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/ceo-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 928,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "ceo",
"route": "/workflow/tasks",
"label": "负责人审批待办",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/workflow/tasks",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/ceo-workflow-tasks.png",
"metrics": {
"title": "海音达工作台",
"textLength": 465,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "ceo",
"route": "/budgets",
"label": "负责人预算视图",
"layer": "B",
"expectation": "optional",
"status": "PASS",
"finalPath": "/budgets",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/ceo-budgets.png",
"metrics": {
"title": "海音达工作台",
"textLength": 493,
"headingCount": 1,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "hr",
"route": "/portal",
"label": "HR 工作台",
"layer": "A",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/portal",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/hr-portal.png",
"metrics": {
"title": "海音达工作台",
"textLength": 926,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "hr",
"route": "/people",
"label": "HR 人员管理",
"layer": "C",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/people",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/hr-people.png",
"metrics": {
"title": "海音达工作台",
"textLength": 2822,
"headingCount": 2,
"tableCount": 1,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 5,
"rawJsonBlockCount": 0,
"englishFound": [
"Employee",
"Admin"
],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
},
{
"role": "hr",
"route": "/wecom-approval-archive",
"label": "HR 企微归档",
"layer": "B",
"expectation": "accessible",
"status": "PASS",
"finalPath": "/wecom-approval-archive",
"screenshot": "output/playwright/oafront3-pc-readonly-postdeploy/hr-wecom-approval-archive.png",
"metrics": {
"title": "海音达工作台",
"textLength": 728,
"headingCount": 1,
"tableCount": 0,
"uuidCount": 0,
"rawStatusTokenCount": 0,
"longNumberCount": 0,
"rawJsonBlockCount": 0,
"englishFound": [],
"datePlaceholderCount": 0,
"clippedCount": 0,
"forbiddenLike": false,
"appErrorLike": false,
"navPortalCopy": false
}
}
],
"findingCount": 0,
"findings": [],
"boundaries": {
"noBusinessWrites": true,
"noFileUploads": true,
"noFormSubmits": true,
"noExports": true,
"noWeComWrites": true,
"noRealPaymentExecution": true
},
"privacy": "no password/token/secret/full email/full phone/full local sensitive path/raw invoice/contract body/bank receipt/raw payload in JSON report"
}
@@ -0,0 +1,28 @@
# OA 权限矩阵脱敏自动验证报告
生成时间:2026-05-26T09:46:58.583Z
结论:PASS_PERMISSION_MATRIX_READY
## 统计
- 角色数:7
- 正向探针:43
- 负向探针:42
- 问题数:0
## 角色结果
| 角色 | 登录 | 角色匹配 | 探针通过/总数 |
| --- | --- | --- | ---: |
| employee | PASS | PASS | 17/17 |
| manager | PASS | PASS | 13/13 |
| finance | PASS | PASS | 14/14 |
| finance_mgr | PASS | PASS | 10/10 |
| hr | PASS | PASS | 11/11 |
| ceo | PASS | PASS | 9/9 |
| admin | PASS | PASS | 11/11 |
## 说明
- 本报告只输出角色、HTTP 状态、脱敏账号和摘要计数,不输出密码、token、Secret、完整账号、合同正文、票据内容或原始 payload。
- 409 表示功能门禁关闭且未泄露数据;对财务/AP/付款等冻结或受控功能可作为可解释拒绝。
@@ -0,0 +1,43 @@
# Postdeploy Public Verification Summary
## Conclusion
`READY_FOR_TRIAL_START_CONFIRMATION`
The public trial environment has been deployed from commit `d829e44` with
`SYNC_ENV=0`. The deployment did not overwrite the remote `.env`. Public
post-deploy checks passed, and the latest PC frontend cleanup is now covered by
public visual and smoke evidence.
## Checks
| Check | Status | Evidence |
| --- | --- | --- |
| Pre-deploy client build | PASS | command output in session |
| UI design rules | PASS | `check-ui-design-rules --strict`, 0 findings |
| Deploy script | PASS | `SYNC_ENV=0 bash deploy/trialrun/deploy.sh` |
| Deploy live smoke | PASS | deploy script live smoke, 3 passed |
| Public bundle copy scan | PASS | deploy script scanned 92 resources, 0 findings |
| Live smoke readiness | PASS | `research/postdeploy-live-smoke-readiness/summary.json` |
| Permission matrix | PASS | `research/postdeploy-permission-matrix/summary.json` |
| PC readonly visual matrix | PASS | `research/postdeploy-oafront3-pc-readonly/summary.json` |
| Mobile entry matrix | PASS | `research/postdeploy-mobile-entry-matrix/output.log` |
| WeCom rendering matrix | PASS | `research/postdeploy-wecom-rendering-matrix/output.log` |
## Notes
- Live OCR sample ended in a duplicate/same-invoice terminal category and the
Playwright check passed; this is a known acceptable live sample outcome.
- Pending OCR helper scan was `SKIP` because local `DATABASE_URL` was not loaded
for that helper. This did not block readiness because live smoke and live OCR
checks passed.
- During rsync, deployment printed a non-blocking cleanup warning for an old
remote `artifacts/` directory. The deployment script continued and completed
all runtime checks.
## Boundaries
- No real business write automation was executed.
- No Enterprise WeChat write was executed.
- No payment, bank import, ERP write, database reset, restore, or remote `.env`
overwrite was executed.
@@ -0,0 +1,17 @@
Running 8 tests using 1 worker
(node:1648689) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.
(Use `node --trace-warnings ...` to show where the warning was created)
(node:1648689) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.
(Use `node --trace-warnings ...` to show where the warning was created)
✓ 1 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 320 iPhone 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.2s)
✓ 2 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 360 Android 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.4s)
✓ 3 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 375 iPhone 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.6s)
✓ 4 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 390 iPhone12 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.6s)
✓ 5 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 393 Android 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.1s)
✓ 6 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 414 iPhone 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.4s)
✓ 7 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:572:7 › WCM6 企业微信多手机移动渲染稳定化 › 430 iPhone 企业微信 › 核心移动入口使用 SVG 图标且跨视口不挤压 (7.1s)
✓ 8 tests/e2e/r6-wecom-mobile-rendering-hardening.spec.ts:588:5 › WCM6 企业微信多手机移动渲染稳定化 › 390 iPhone12 企业微信 字体失败 › Material Symbols 字体失败时核心移动入口仍稳定 (7.1s)
8 passed (1.0m)
@@ -0,0 +1,32 @@
{
"id": "oa-frontend-postdeploy-public-verification",
"name": "oa-frontend-postdeploy-public-verification",
"title": "OA 前端清障部署后公网稳态验证",
"description": "部署已提交的 PC 前端试运行清障改动,并完成部署后公网 live smoke、权限矩阵、PC 视觉、移动入口和企业微信渲染验证。",
"status": "completed",
"dev_type": null,
"scope": "postdeploy-public-verification",
"package": null,
"priority": "P2",
"creator": "shunli",
"assignee": "shunli",
"createdAt": "2026-05-26",
"completedAt": "2026-05-26",
"branch": null,
"base_branch": "main",
"worktree_path": null,
"commit": null,
"pr_url": null,
"subtasks": [],
"children": [],
"parent": null,
"relatedFiles": [
"deploy/trialrun/deploy.sh",
"scripts/qa/run-live-smoke-readiness.sh",
"scripts/qa/run-oafront3-pc-readonly-visual.sh",
"scripts/qa/check-oa-permission-matrix.mjs",
"docs/trialrun/发布试运行准备清单.md"
],
"notes": "",
"meta": {}
}