zizi 00327749a2 test(p1r): 收口 Market 第一批 completed approval 门禁

只推进 Market 4 个 operation-level completed approval，保持 market domain-level allowlist 关闭，并保留剩余 28 个 Market operation 为 needs_verification。

2026-06-11 18:56:54 +08:00

19 KiB

Raw Blame History

P1R Market Completed Approval 审阅版

日期：2026-06-11

结论

不建议把 Market 32 个 operation 一次性整域推进 completed。

推荐把 Market Completed Approval 拆成 operation-level 或证据切片推进。第一候选是 Marketplace 浏览/收藏切片，但它还不能直接进入实现：favoriteAsset / unfavoriteAsset 的实现要求 X-Command-Id，而当前 OpenAPI 与 coverage report 仍显示这两个 operation requiresCommandId=false。这是合同不一致，必须在执行版中单独审批修正或把首批降级为纯读 operation。

本审阅版只冻结 Market completed approval 的范围判断、证据缺口、推荐审批粒度和后续执行版要求。不修改 OpenAPI，不修改 scanner，不修改 coverage report，不修改业务实现，也不把 Market 或其它 domain 推进 completed。

flowchart TB
    Start["当前 coverage<br/>Market 32 dedicated / needs_verification"] --> Review["Market completed approval 审阅版<br/>冻结证据标准"]
    Review --> Split{"是否整域 32/32 completed?"}
    Split -->|否，推荐| Slice["按证据切片 operation-level approval"]
    Split -->|是，不推荐| Domain["domain-level approval<br/>需购买/安装/handoff/发布/治理/申诉全闭环"]
    Slice --> Candidate["第一候选<br/>Marketplace 浏览/收藏"]
    Candidate --> Contract{"favorite/unfavorite 合同一致?"}
    Contract -->|否| ReadOnly["降级为纯读候选<br/>或先审批 OpenAPI 合同修正"]
    Contract -->|是| Exec["执行版<br/>列出 operation、allowed diff、fresh 验证"]
    Exec --> FreshReview["fresh spec/scope review<br/>fresh quality/feasibility review"]
    FreshReview --> UserApproval{"用户明确批准<br/>Market 状态推进?"}
    UserApproval -->|否| Stay["保持 Market 32 needs_verification"]
    UserApproval -->|是| Change["最小修改 scanner/report/gates<br/>运行 focused + P1R + _test + XML 防空跑"]

当前事实状态

工作区：

/Users/qingse/.config/superpowers/worktrees/oh-my-muse/dev-1.0.0

当前分支与远端同步，HEAD 为：

f18116a test(p1r): 收口 Account 第一批 completed approval 门禁

当前 coverage summary：

total=233
completed=127
needsVerification=106
incomplete=0
genericPersistence=0
ssePlaceholder=0

当前按 domain 聚合：

account   total=33 completed=10 needsVerification=23
ai        total=41 completed=41 needsVerification=0
content   total=51 completed=0  needsVerification=51
events    total=1  completed=1  needsVerification=0
knowledge total=59 completed=59 needsVerification=0
market    total=32 completed=0  needsVerification=32
meta      total=16 completed=16 needsVerification=0

Market 32 个 operation 当前全部为 dedicated / needs_verification：

operationId	Method	Path	当前状态
`adminListAppeals`	`GET`	`/admin-api/muse/market/appeals`	`dedicated / needs_verification`
`adminGetAppeal`	`GET`	`/admin-api/muse/market/appeals/{appealId}`	`dedicated / needs_verification`
`adminResolveAppeal`	`POST`	`/admin-api/muse/market/appeals/{appealId}/resolve`	`dedicated / needs_verification`
`adminListMarketAssets`	`GET`	`/admin-api/muse/market/assets`	`dedicated / needs_verification`
`adminGetMarketAsset`	`GET`	`/admin-api/muse/market/assets/{assetId}`	`dedicated / needs_verification`
`adminDelistAsset`	`POST`	`/admin-api/muse/market/assets/{assetId}/delist`	`dedicated / needs_verification`
`adminPreviewGovernanceImpact`	`POST`	`/admin-api/muse/market/assets/{assetId}/governance-impact`	`dedicated / needs_verification`
`adminRecallAsset`	`POST`	`/admin-api/muse/market/assets/{assetId}/recall`	`dedicated / needs_verification`
`adminListPublishRequests`	`GET`	`/admin-api/muse/market/publish-requests`	`dedicated / needs_verification`
`adminApprovePublishRequest`	`POST`	`/admin-api/muse/market/publish-requests/{requestId}/approve`	`dedicated / needs_verification`
`adminRejectPublishRequest`	`POST`	`/admin-api/muse/market/publish-requests/{requestId}/reject`	`dedicated / needs_verification`
`submitAppeal`	`POST`	`/app-api/muse/marketplace/appeals`	`dedicated / needs_verification`
`supplementAppeal`	`POST`	`/app-api/muse/marketplace/appeals/{appealId}/supplements`	`dedicated / needs_verification`
`withdrawAppeal`	`POST`	`/app-api/muse/marketplace/appeals/{appealId}/withdraw`	`dedicated / needs_verification`
`listMarketplaceAssets`	`GET`	`/app-api/muse/marketplace/assets`	`dedicated / needs_verification`
`getMarketplaceAsset`	`GET`	`/app-api/muse/marketplace/assets/{assetId}`	`dedicated / needs_verification`
`createBindPrecheck`	`POST`	`/app-api/muse/marketplace/assets/{assetId}/bind-precheck`	`dedicated / needs_verification`
`unfavoriteAsset`	`DELETE`	`/app-api/muse/marketplace/assets/{assetId}/favorite`	`dedicated / needs_verification`
`favoriteAsset`	`POST`	`/app-api/muse/marketplace/assets/{assetId}/favorite`	`dedicated / needs_verification`
`getGovernanceImpact`	`GET`	`/app-api/muse/marketplace/assets/{assetId}/governance-impact`	`dedicated / needs_verification`
`installMarketplaceAsset`	`POST`	`/app-api/muse/marketplace/assets/{assetId}/install`	`dedicated / needs_verification`
`purchaseAsset`	`POST`	`/app-api/muse/marketplace/assets/{assetId}/purchase`	`dedicated / needs_verification`
`listMarketplaceCategories`	`GET`	`/app-api/muse/marketplace/categories`	`dedicated / needs_verification`
`createMarketplaceHandoff`	`POST`	`/app-api/muse/marketplace/handoffs`	`dedicated / needs_verification`
`getHandoffStatus`	`GET`	`/app-api/muse/marketplace/handoffs/{handoffToken}`	`dedicated / needs_verification`
`cancelHandoff`	`POST`	`/app-api/muse/marketplace/handoffs/{handoffToken}/cancel`	`dedicated / needs_verification`
`listMyPublishRecords`	`GET`	`/app-api/muse/marketplace/my-publish-records`	`dedicated / needs_verification`
`savePublishDraft`	`POST`	`/app-api/muse/marketplace/publish-drafts`	`dedicated / needs_verification`
`runPublishCheck`	`POST`	`/app-api/muse/marketplace/publish-drafts/{draftId}/checks`	`dedicated / needs_verification`
`submitPublishRequest`	`POST`	`/app-api/muse/marketplace/publish-requests`	`dedicated / needs_verification`
`withdrawPublishRequest`	`POST`	`/app-api/muse/marketplace/publish-requests/{requestId}/withdraw`	`dedicated / needs_verification`
`listMarketplaceRecommendations`	`GET`	`/app-api/muse/marketplace/recommendations`	`dedicated / needs_verification`

已验证实现证据

Market owner 与入口

Market owner 当前位于 muse-module-market，负责市场来源侧事实、授权、安装、handoff、发布、治理、申诉、浏览和收藏。

现有 dedicated Controller 覆盖 Market 32 个 operation：

AppMuseMarketplaceAssetController
AppMuseMarketLicenseController
AppMuseMarketHandoffController
AppMuseMarketPublishController
AppMuseMarketAppealController
AdminMuseMarketAssetController
AdminMuseMarketReviewController
AdminMuseMarketAppealController

P1rMarketRouteOwnershipTest 已证明 Market 路由由 dedicated controller 持有，不再走 MuseContractPersistenceService 旧合同兜底。

数据库与迁移证据

V15 Market Real API schema 已存在：

muse-cloud/sql/muse/V15__extend_market_real_api_schema.sql

历史留痕记录 V15 已在真实 PostgreSQL _test 库通过 Flyway：

flyway_success=true
migrations_executed=15
successful_migration_count=15
target_schema_version=15
flyway_latest=15:extend market real api schema
schema_version=15

历史 Market focused tests 记录为 191/191 pass，P1R Market gates 记录为 24/24 pass。但这些证据只证明 P1R-6 已把 Market 32 个 operation 收口到 dedicated / needs_verification，不能作为本轮 completed approval 的 fresh runtime 证据。

子代理只读盘点结论

本轮按 Market 业务切片并行只读复核，结论如下：

Marketplace 浏览/收藏 6 个 operation 是第一批 operation-level completed 候选，但仍缺合同一致性和真实 HTTP + DB 闭环。
purchase / install / handoff / bind-precheck / governanceImpact 7 个 operation 不适合作为第一批；缺目标 owner 消费 handoff token、回写 completed、Account 读侧 E2E 和跨 owner governance 影响闭环。
publish / review / governance 13 个 operation 的实现和测试证据较强，可作为后续候选切片；但当前仍缺审阅版/执行版冻结、fresh completed 级验证和 Market 整域覆盖，不应直接推进 completed。
appeal / events / projection 6 个申诉相关 operation 不适合作为第一批；申诉事件是 muse_market_appeal_event 审计事实，不是统一 Events publish outbox；restore 治理 action 当前不进入 MarketEventPublishOutbox；MarketAccountProjectionProvider 不覆盖申诉。

暂不推荐的切片

purchase / install / handoff / governanceImpact

以下 operation 暂不推荐第一批 completed：

purchaseAsset
installMarketplaceAsset
createBindPrecheck
createMarketplaceHandoff
getHandoffStatus
cancelHandoff
getGovernanceImpact

主要缺口：

purchaseAsset 只证明本地授权、purchase fact 和 Account projection 写入，不证明真实支付或 Account 读侧 E2E。
installMarketplaceAsset 明确不写目标 owner canonical facts，targetFactsWritten=false。
handoff token 只落 hash，缺真实目标 owner 消费 token、创建 owner precheck、回写 owner confirm result 或推进 handoff completed 的公开链路。
MarketTargetOwnerFacade 当前只生成目标页并做 owner/action 白名单，接口边界明确不消费 token、不写目标 owner facts。
getGovernanceImpact 当前主要聚合 Market 自有 authorization / installation / handoff / governance facts，不证明 AI / Knowledge / Content 目标 owner 的真实影响闭环。

publish / review / governance

以下 operation 可作为后续强候选，但不推荐直接作为第一批：

savePublishDraft
runPublishCheck
submitPublishRequest
withdrawPublishRequest
listMyPublishRecords
adminListPublishRequests
adminApprovePublishRequest
adminRejectPublishRequest
adminListMarketAssets
adminGetMarketAsset
adminPreviewGovernanceImpact
adminDelistAsset
adminRecallAsset

已有证据显示它们具备草稿、检查、提交、审核、上架、治理 preview、delist/recall 和部分 Events outbox 链路。但它们仍不应直接 completed：

当前没有 Market Completed Approval 执行版冻结这 13 个 operation 的审批范围和 allowed diff。
仍缺 fresh focused tests、P1R mixed gates、真实 _test、XML 防空跑和必要的 HTTP/API 或跨 owner runtime 验收。
MarketEventPublishOutboxService 当前 allowlist 是 delist / recall，不能把所有发布/审核/治理操作都等同于 Events 可见闭环。
该切片不能代表 Market 32/32 domain completed。

appeals / restore / projection

以下 operation 暂不推荐 first batch：

submitAppeal
supplementAppeal
withdrawAppeal
adminListAppeals
adminGetAppeal
adminResolveAppeal