wangsli/hyb-oa
1
0
派生 0
代码 工单 合并请求 工作流 8 软件包 项目 发布 百科 活动
文件
e57ed0533b2a84424ef230137d9eeed05c7a5cd3
hyb-oa/issues/2026-05-18_13-30-07-wecom-capability-poc-v1.csv
T

11 行
8.6 KiB
CSV
原始文件 Blame 文件历史

ID,Title,Description,Acceptance,Test_Method,Tools,Dev_Status,Review1_Status,Regression_Status,Files,Dependencies,Notes
"WCP1-0","合同建档","建立 WECOM-CAPABILITY-POC-V1 合同，锁定本轮只做企业微信能力 POC：Live 只读 + 测试员工优先，不迁移运行时流程，不开发 HR 主数据镜像、考勤/审批镜像、OA 应急接管、恢复回写或 RuleOps。","1) CSV 校验通过；2) 本轮不新增业务 API/schema/UI/feature flag；3) 不调用生产写接口、不写正式规则、不批量读取真实员工明细；4) 最终结论只允许 GO_TO_HR_MASTER_SYNC、PAUSE_FOR_CONFIG、PAUSE_FOR_API_POC、NO_GO_REVISE_ROADMAP。","受影响流程：WDRG 路线图 -> WECOM-CAPABILITY-POC-V1 -> 后续 HR 主数据镜像准入判断；验证步骤：python3 /home/shunli/.codex/skills/plan/scripts/validate_issues_csv.py issues/2026-05-18_13-30-07-wecom-capability-poc-v1.csv。","python3|manual","DONE","DONE","DONE","issues/2026-05-18_13-30-07-wecom-capability-poc-v1.csv","[]","回滚路径：回退本 CSV、QA-only 脚本和文档/skill 事实源回写；不涉及数据库、业务运行时或公网配置。"
"WCP1-1","基线与权限配置复核","复核 WDRG 已收口、下一阶段为 POC，并整理当前企业微信配置项、HCLT 通讯录证据、WCFB 打卡 Secret 口径和禁止跳阶段要求。","1) 路线图、PRD、企业微信规约和 skill 均显示当前阶段为 WECOM-CAPABILITY-POC-V1；2) 通讯录 HCLT 证据被纳入 POC；3) 缺 Secret、模板、可信 IP、回调或权限时记录 NEEDS_CONFIG 或 SKIP/BLOCKED_BY_EXTERNAL_CONFIG；4) 不打印 secret、token、cookie、完整手机号、完整位置或原始 payload。","受影响流程：事实源读取 -> POC 能力分类 -> 后续单功能合同准入；验证步骤：rg -n 'WECOM-CAPABILITY-POC-V1|HCLT|WCFB|SKIP/BLOCKED_BY_EXTERNAL_CONFIG|禁止跳阶段' docs issues .agents/skills/hyb-oa-delivery/SKILL.md。","rg","DONE","DONE","DONE","docs|issues|.agents/skills/hyb-oa-delivery/SKILL.md","[""WCP1-0""]","none"
"WCP1-2","QA-only POC runner","新增 scripts/qa/check-wecom-capability-poc.mjs，只读探测配置、access token、通讯录读取、测试员工状态、打卡短窗口、人事助手字段/花名册读取、审批模板/详情、假期余额和回调配置可用性，并输出脱敏报告。","1) 脚本默认不写生产数据；2) 支持 WECOM_CAPABILITY_POC_LIVE_READ=1、WECOM_CAPABILITY_POC_TEST_USERID、WECOM_CAPABILITY_POC_DAYS、WECOM_CAPABILITY_POC_JSON、--env-file、--json；3) 报告落到 artifacts/qa-flow/wecom-capability-poc-*；4) 输出不包含 Secret、access token、cookie、完整手机号、完整位置、身份证号、附件内容或原始 payload。","受影响流程：QA-only 企微能力探测 -> 脱敏能力矩阵报告；验证步骤：node --check scripts/qa/check-wecom-capability-poc.mjs；WECOM_CAPABILITY_POC_JSON=1 node scripts/qa/check-wecom-capability-poc.mjs --json。","node","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs","[""WCP1-1""]","只允许 QA-only 读取和脱敏报告；任何生产写入或规则写入必须另建合同。"
"WCP1-3","通讯录能力分类","结合 HCLT 证据和 live 只读成员/部门能力，确认通讯录读取、成员读取、部门读取和后续 HR 主数据镜像准入状态。","1) HCLT create/update/disable 真实写入证据纳入矩阵；2) 部门列表和测试成员读取若成功标 CAN_REUSE_NOW；3) 缺通讯录 Secret、测试 userid、可见范围或可信 IP 时标 NEEDS_CONFIG；4) 不保存完整手机号或成员原始 payload。","受影响流程：企微通讯录 -> OA 员工镜像准入；验证步骤：WECOM_CAPABILITY_POC_LIVE_READ=1 WECOM_CAPABILITY_POC_TEST_USERID=HRWDTEST-20260517214548 node scripts/qa/check-wecom-capability-poc.mjs --poc-env-file=deploy/trialrun/.env --json；若本地无 env 或需服务器可信 IP，则记录 PAUSE_FOR_CONFIG/PAUSE_FOR_API_POC。","node","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs|artifacts/qa-flow/wecom-capability-poc-*","[""WCP1-2""]","HCLT 测试成员已按审计要求保留离职/禁用状态，不删除。"
"WCP1-4","人事助手能力分类","探测人事助手字段配置和测试员工花名册读取能力；花名册更新仅做能力分类，不执行写入。","1) 字段配置和测试员工花名册读取有唯一状态和原因；2) 更新接口不在本轮调用，按 NEEDS_API_POC 或后续写入批准处理；3) 缺人事助手权限或 Secret 时标 NEEDS_CONFIG；4) 不打印员工完整个人信息。","受影响流程：人事助手主数据 -> OA 员工/账号/角色/绑定镜像；验证步骤：检查 POC 报告中 hr.fields_read、hr.staff_read、hr.staff_update_classification 均有状态。","node|rg","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs|artifacts/qa-flow/wecom-capability-poc-*","[""WCP1-2""]","none"
"WCP1-5","打卡能力分类","探测 getcheckindata 和员工打卡规则接口短窗口能力；优先测试员工和 1 天窗口，不读取批量真实员工明细。","1) getcheckindata 和 getcheckinoption 均有唯一状态和原因；2) 缺打卡 Secret/API 权限/可信 IP/测试员工时标 NEEDS_CONFIG；3) 测试员工无打卡数据不伪造成失败，只记录 count=0；4) 不保存完整位置、人脸、设备明文或原始 payload。","受影响流程：企微打卡采集/规则 -> OA 考勤镜像准入；验证步骤：检查 POC 报告中 checkin.records_read、checkin.rules_read 均有状态和脱敏证据。","node|rg","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs|artifacts/qa-flow/wecom-capability-poc-*","[""WCP1-2""]","none"
"WCP1-6","审批假期回调能力分类","探测审批模板详情、审批详情、假期余额和回调配置可用性；采购、合同、报销、财务继续标 KEEP_OA_PRIMARY。","1) 审批模板、审批详情、假期余额、回调配置均有唯一状态和原因；2) 缺模板 ID、审批单号、回调配置或权限时标 NEEDS_CONFIG；3) OA 主办高敏审批能力标 KEEP_OA_PRIMARY；4) 不下载或打印附件内容。","受影响流程：企微 HR/考勤审批 -> OA 镜像准入；OA 主办审批 -> 企业微信脱敏消息 deeplink；验证步骤：检查 POC 报告中 approval.template_detail、approval.instance_detail、approval.vacation_quota、callback.config、approval.oa_primary_sensitive_domains 均有状态。","node|rg","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs|artifacts/qa-flow/wecom-capability-poc-*","[""WCP1-2""]","采购、合同、报销、付款、AP、代账和高敏附件继续 OA 主办，不进入企微原生审批。"
"WCP1-7","能力矩阵与结论","汇总能力矩阵，状态只使用 CAN_REUSE_NOW、NEEDS_CONFIG、NEEDS_API_POC、KEEP_OA_PRIMARY、NOT_SUPPORTED_BY_API，并生成允许结论之一。","1) 每个能力项都有 id/domain/status/reason/evidence；2) 结论只为 GO_TO_HR_MASTER_SYNC、PAUSE_FOR_CONFIG、PAUSE_FOR_API_POC 或 NO_GO_REVISE_ROADMAP；3) 缺配置不得写 PASS；4) POC 结论不代表运行时迁移已完成。","受影响流程：POC 报告 -> 路线图下一阶段准入或暂停；验证步骤：rg -n 'CAN_REUSE_NOW|NEEDS_CONFIG|NEEDS_API_POC|KEEP_OA_PRIMARY|NOT_SUPPORTED_BY_API|GO_TO_HR_MASTER_SYNC|PAUSE_FOR_CONFIG|PAUSE_FOR_API_POC|NO_GO_REVISE_ROADMAP' docs issues scripts artifacts。","rg|node","DONE","DONE","DONE","scripts/qa/check-wecom-capability-poc.mjs|docs|issues|artifacts/qa-flow/wecom-capability-poc-*","[""WCP1-3"",""WCP1-4"",""WCP1-5"",""WCP1-6""]","none"
"WCP1-8","事实源与 skill 回写","更新路线图、企业微信规约、PRD、文档索引、事实源矩阵、人工试运行报告和项目 skill，记录 POC 只代表能力分类，不代表正式迁移。","1) 文档索引和事实源矩阵登记 WCP1；2) 路线图当前阶段更新为 WCP1 POC；3) 企业微信规约和 PRD 记录能力矩阵与后续准入；4) skill 明确后续先看 WCP1 结论再进入 HR 主数据镜像；5) 文档审计、skill 校验和 git diff --check 通过。","受影响流程：后续 agent/人工读取事实源 -> 依据 WCP1 结论拆下一阶段合同；验证步骤：node scripts/qa/audit-docs.mjs --check-registry；python3 /home/shunli/.codex/skills/.system/skill-creator/scripts/quick_validate.py .agents/skills/hyb-oa-delivery；git diff --check。","node|python3|git|rg","DONE","DONE","DONE","docs/企微优先开发路线图.md|docs/需求-企业微信基础设施规约.md|docs/海音达OA-MVP需求规格说明书.md|docs/文档索引.md|docs/文档事实源状态矩阵.md|docs/trialrun/人工试运行报告.md|.agents/skills/hyb-oa-delivery/SKILL.md","[""WCP1-7""]","本轮不部署；只新增 QA-only 脚本和文档/skill 事实源。"
在新工单中引用 查看 Git Blame 复制永久链接