fix(android): bound payment transition sampling (#210)

Allow up to two consecutive evidence-free PayActivity transition samples after the single safe Back; fail on the third post-Back sample (200ms cadence) to preserve a finite no-click payment boundary.

android/app/build.gradle.kts

@@ -11,8 +11,8 @@ android {
         applicationId = "cn.ilapage.goauto.agent"
         minSdk = 23
         targetSdk = 34
-        versionCode = 51
-        versionName = "0.9.38"
+        versionCode = 52
+        versionName = "0.9.39"
 
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
 

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PddProductDetailCollector.kt

@@ -123,6 +123,9 @@ data class ParsedPddScreen(
     val hasSelectionSummary: Boolean,
     val hasQuantityControls: Boolean,
     val hasOrderSubmitAction: Boolean,
+    val explicitSpecEntryCount: Int,
+    val nestedSpecEntryCount: Int,
+    val bottomPurchaseEntryCount: Int,
     val problem: PageProblem?,
     val sourceNodes: List<SnapshotNode>,
 ) {
@@ -306,6 +309,14 @@ object PddScreenParser {
             orderConfirmationEvidence -> SpecPanelType.ORDER_CONFIRMATION
             panelScrollable != null && (hasSelectionSummary || hasSubmitHint || (hasPanelTitle && hasPanelAction)) -> SpecPanelType.NORMAL_SCROLLABLE
             hasSelectionSummary && hasPanelTitle && hasPanelAction -> SpecPanelType.NON_SCROLLABLE_CONFIRMATION
+            // Some PDD builds expose the complete selector as non-scrollable
+            // before a value is selected, so an "已选" summary is absent. Two
+            // parsed dimensions with selectable values plus the unique quantity
+            // controls and lower-page order action remain required; generic
+            // product/review pages cannot satisfy this combined evidence.
+            panelScrollable == null && headings.size >= 2 && dimensions.size >= 2 &&
+                dimensions.sumOf { it.values.size } >= 2 &&
+                hasQuantityControls && hasOrderSubmitAction -> SpecPanelType.NON_SCROLLABLE_CONFIRMATION
             else -> SpecPanelType.UNKNOWN
         }
         val panelOpen = specPanelType != SpecPanelType.UNKNOWN
@@ -314,19 +325,30 @@ object PddScreenParser {
             .filter { it.bounds.top < firstHeadingTop }
             .mapNotNull { node -> pricePattern.find(node.label)?.groupValues?.get(1)?.let(::priceCent) }
             .firstOrNull()
-        val explicitSpecEntry = if (panelOpen) null else visible
+        val explicitSpecEntries = if (panelOpen) emptyList() else visible
             .filter { it.clickable && isSpecEntry(it.label, config) && !hasReviewContext(it, visibleNodes, config) }
-            .maxByOrNull { it.bounds.top }
-        val bottomSpecEntry = if (panelOpen || explicitSpecEntry != null) null else safeBottomSpecEntry(visibleNodes, visible, config)
-        val candidateSpecEntry = explicitSpecEntry ?: bottomSpecEntry?.anchor
-        val candidateClickTarget = explicitSpecEntry ?: bottomSpecEntry?.clickTarget
+        val explicitSpecEntry = explicitSpecEntries.maxByOrNull { it.bounds.top }
+        val nestedSpecEntries = if (panelOpen || explicitSpecEntry != null) emptyList() else
+            safeNestedSpecEntries(visibleNodes, visible, config)
+        // A nested selection row is accepted only when it is the single safe
+        // candidate. This covers PDD layouts that split “请选择” and the
+        // dimension name across child nodes of one clickable parent, without
+        // turning arbitrary page text into a click target.
+        val nestedSpecEntry = nestedSpecEntries.singleOrNull()
+        val bottomSpecEntries = if (panelOpen || explicitSpecEntry != null || nestedSpecEntry != null) emptyList() else
+            safeBottomSpecEntries(visibleNodes, visible, config)
+        val bottomSpecEntry = bottomSpecEntries.firstOrNull()
+        val candidateSpecEntry = explicitSpecEntry ?: nestedSpecEntry?.anchor ?: bottomSpecEntry?.anchor
+        val candidateClickTarget = explicitSpecEntry ?: nestedSpecEntry?.clickTarget ?: bottomSpecEntry?.clickTarget
         val reviewPageOpen = isReviewPage(visibleNodes, visible, screenHeight, candidateSpecEntry, config)
         val specEntry = candidateSpecEntry.takeUnless { reviewPageOpen }
         val specEntryClickTarget = candidateClickTarget.takeUnless { reviewPageOpen }
         val specEntrySource = when {
             reviewPageOpen -> null
             explicitSpecEntry != null -> "explicit_selection"
-            bottomSpecEntry != null -> "bottom_purchase"
+            nestedSpecEntry != null -> "nested_selection"
+            bottomSpecEntries.size == 1 -> "bottom_purchase"
+            bottomSpecEntry != null -> "bottom_purchase_rightmost"
             else -> null
         }
         val quickConfirmationEntry = if (quickConfirmationEvidence) quickConfirmationSpecEntry(visibleNodes, visible, config) else null
@@ -370,6 +392,9 @@ object PddScreenParser {
             hasSelectionSummary = hasSelectionSummary,
             hasQuantityControls = hasQuantityControls,
             hasOrderSubmitAction = hasOrderSubmitAction,
+            explicitSpecEntryCount = explicitSpecEntries.size,
+            nestedSpecEntryCount = nestedSpecEntries.size,
+            bottomPurchaseEntryCount = bottomSpecEntries.size,
             problem = problem,
             sourceNodes = visibleNodes,
         )
@@ -458,10 +483,40 @@ object PddScreenParser {
         return hasSpecWord && config.textAliases.selection.specEntryPrefixes.any(compact::startsWith)
     }
 
-    private fun safeBottomSpecEntry(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): SafeSpecEntry? {
-        val screenWidth = source.maxOfOrNull { it.bounds.right } ?: return null
-        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return null
-        if (screenWidth <= 0 || screenHeight <= 0) return null
+    private fun safeNestedSpecEntries(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): List<SafeSpecEntry> {
+        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return emptyList()
+        if (screenHeight <= 0) return emptyList()
+        return source.asSequence()
+            .filter { it.visible && it.enabled && it.clickable && it.bounds.width > 0 && it.bounds.height > 0 }
+            // The fixed purchase bar begins at the lower fifth of the screen.
+            // A specs row has no reason to be inside that action-only zone.
+            .filter { it.bounds.centerY.toDouble() < screenHeight * 0.8 }
+            .mapNotNull { candidate ->
+                val context = (listOf(candidate.label) + descendants(candidate, source).map(SnapshotNode::label))
+                    .joinToString("") { it.replace(Regex("\\s+"), "") }
+                if (!isSpecEntryContext(context, config) ||
+                    nonConfigurableClickDenylist.any(context::contains) ||
+                    hasReviewContext(candidate, source, config)
+                ) return@mapNotNull null
+                val anchor = visible.firstOrNull { it.path == candidate.path } ?: candidate
+                SafeSpecEntry(anchor, candidate)
+            }
+            .distinctBy { it.clickTarget.path }
+            .toList()
+    }
+
+    private fun isSpecEntryContext(compact: String, config: PddCollectorConfig): Boolean {
+        if (config.textAliases.review.entryAliases.any(compact::contains)) return false
+        val hasSpecWord = (config.colorAliases + config.sizeAliases +
+            config.textAliases.dimension.exactNames + config.textAliases.dimension.adaptiveAliases)
+            .any(compact::contains)
+        return hasSpecWord && config.textAliases.selection.specEntryPrefixes.any(compact::contains)
+    }
+
+    private fun safeBottomSpecEntries(source: List<SnapshotNode>, visible: List<SnapshotNode>, config: PddCollectorConfig): List<SafeSpecEntry> {
+        val screenWidth = source.maxOfOrNull { it.bounds.right } ?: return emptyList()
+        val screenHeight = source.maxOfOrNull { it.bounds.bottom } ?: return emptyList()
+        if (screenWidth <= 0 || screenHeight <= 0) return emptyList()
         val byPath = source.associateBy(SnapshotNode::path)
         val normalizedByPath = visible.associateBy(SnapshotNode::path)
         val buyWords = config.textAliases.purchase.buyWords
@@ -485,8 +540,10 @@ object PddScreenParser {
                 val normalizedTarget = normalizedByPath[clickTarget.path] ?: return@mapNotNull null
                 SafeSpecEntry(normalizedAnchor, normalizedTarget) to clickTarget.bounds.width.toLong() * clickTarget.bounds.height
             }
-            .minWithOrNull(compareBy<Pair<SafeSpecEntry, Long>> { it.second }.thenByDescending { it.first.clickTarget.bounds.centerX })
-            ?.first
+            .sortedWith(compareByDescending<Pair<SafeSpecEntry, Long>> { it.first.clickTarget.bounds.centerX }.thenBy { it.second })
+            .map { it.first }
+            .distinctBy { it.clickTarget.path }
+            .toList()
     }
 
     private fun hasReviewContext(node: SnapshotNode, source: List<SnapshotNode>, config: PddCollectorConfig): Boolean {

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PurchaseLiveAutomation.kt

@@ -117,10 +117,12 @@ class PurchaseLiveAutomation(
             return null
         }
         val labels = linkedSetOf<String>()
-        var backedOutOfPayment = false
+        var paymentBackAttempts = 0
+        var consecutivePaymentSamplesAfterBack = 0
         var backedOutOfChooser = false
         var restoredFromWechat = false
         var pddObservedAfterWechatRestore = false
+        var orderDetailEntryOpened = false
         var wechatRestorePendingSamples = 0
         var consecutiveEmptySnapshots = 0
         repeat(ORDER_RESULT_MAX_SAMPLES) { index ->
@@ -162,24 +164,58 @@ class PurchaseLiveAutomation(
                 return unknown("PURCHASE_ORDER_UNEXPECTED_APP", "核单期间出现未授权应用")
             }
             if (restoredFromWechat) pddObservedAfterWechatRestore = true
-            val paymentVisible = isKnownPddPaymentActivity(snapshot) ||
-                currentLabels.any { label -> PAYMENT_MARKERS.any(label::contains) }
             val orderContextVisible = currentLabels.any { label -> ORDER_CONTEXT_MARKERS.any(label::contains) }
-            if (!paymentVisible && !orderContextVisible) {
+            val unpaidContextVisible = currentLabels.any { label -> UNPAID_MARKERS.any(label::contains) }
+            // PDD can reuse its payment Activity for a read-only unpaid order page.
+            // Visible order-result evidence takes precedence over the Activity name:
+            // it permits only bounded reading gestures below, never a payment click.
+            val paymentVisible = isKnownPddPaymentActivity(snapshot) && !orderContextVisible && !unpaidContextVisible
+            if (paymentVisible) {
+                if (paymentBackAttempts == 0) {
+                    paymentBackAttempts++
+                    if (!driver.backPurchase()) {
+                        return unknown("PURCHASE_ORDER_PAYMENT_BACK_FAILED", "支付页无法安全返回订单详情")
+                    }
+                    pause(500)
+                } else {
+                    consecutivePaymentSamplesAfterBack++
+                    if (consecutivePaymentSamplesAfterBack >= ORDER_RESULT_PAYMENT_POST_BACK_MAX_SAMPLES) {
+                        return unknown(
+                            "PURCHASE_ORDER_PAYMENT_REPEATED",
+                            "支付页安全返回后持续无订单证据，已停止自动核单" +
+                                "[paymentBackAttempts=$paymentBackAttempts;" +
+                                "consecutivePaymentSamplesAfterBack=$consecutivePaymentSamplesAfterBack]",
+                        )
+                    }
+                    pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
+                }
+                return@repeat
+            }
+            consecutivePaymentSamplesAfterBack = 0
+            if (!orderContextVisible && !unpaidContextVisible) {
+                val entries = orderDetailEntryTargets(snapshot)
+                if (entries.size > 1) {
+                    return unknown("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", "订单详情入口不唯一，已停止只读核单")
+                }
+                if (entries.size == 1) {
+                    if (orderDetailEntryOpened) {
+                        return unknown("PURCHASE_ORDER_DETAIL_ENTRY_TIMEOUT", "进入订单详情后页面未出现可验证证据")
+                    }
+                    when (driver.clickFresh(entries.single())) {
+                        FreshActionResult.SUCCESS -> Unit
+                        FreshActionResult.AMBIGUOUS -> return unknown("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", "订单详情入口不唯一，已停止只读核单")
+                        else -> return unknown("PURCHASE_ORDER_DETAIL_ENTRY_FAILED", "订单详情入口点击失败，已停止只读核单")
+                    }
+                    orderDetailEntryOpened = true
+                    pause(500)
+                    return@repeat
+                }
                 pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
                 return@repeat
             }
             currentLabels.forEach(labels::add)
             parseOrderEvidence(labels)?.let { return it }
-            if (paymentVisible && !backedOutOfPayment) {
-                backedOutOfPayment = true
-                if (!driver.backPurchase()) {
-                    return unknown("PURCHASE_ORDER_PAYMENT_BACK_FAILED", "支付页无法安全返回订单详情")
-                }
-                pause(500)
-            } else if (paymentVisible) {
-                return unknown("PURCHASE_ORDER_PAYMENT_REPEATED", "支付页重复出现，已停止自动核单")
-            } else if (index > 0 && index % 15 == 0) {
+            if (index > 0 && index % ORDER_RESULT_SCROLL_SAMPLE_INTERVAL == 0) {
                 driver.swipePurchase(SwipeDirection.UP, 400)
             }
             pause(ORDER_RESULT_SAMPLE_INTERVAL_MS)
@@ -371,6 +407,14 @@ class PurchaseLiveAutomation(
         snapshot.nodes.filter { node -> node.visible && node.enabled && FINAL_SUBMIT_MARKERS.any { node.label == it || node.label.startsWith(it) } },
     )
 
+    /** A post-submit navigation target is allowed only when it is one exact, non-payment PDD order-detail entry. */
+    private fun orderDetailEntryTargets(snapshot: UiSnapshot): List<SnapshotNode> = uniqueClickable(
+        snapshot,
+        snapshot.nodes.filter { node ->
+            node.visible && node.enabled && node.label in ORDER_DETAIL_ENTRY_MARKERS
+        },
+    )
+
     private fun pageProblem(snapshot: UiSnapshot) {
         val labels = snapshot.nodes.filter { it.visible }.map { it.label }
         PddPageClassifier.classify(snapshot.packageName, snapshot.activityName, labels)?.let { fail(it.code, it.message) }
@@ -421,6 +465,7 @@ class PurchaseLiveAutomation(
         val FINAL_SUBMIT_MARKERS = listOf("提交订单", "现在买，仅", "确认购买")
         val PAYMENT_MARKERS = listOf("立即支付", "确认支付", "输入支付密码")
         val UNPAID_MARKERS = listOf("待付款", "待支付", "去支付")
+        val ORDER_DETAIL_ENTRY_MARKERS = setOf("查看订单", "订单详情")
         val ORDER_CONTEXT_MARKERS = listOf("订单编号", "订单号", "下单时间", "创建时间")
         val ORDER_NO = Regex("(?:订单编号|订单号)\\s*[:：]?\\s*([A-Za-z0-9-]{6,64})")
         val ORDER_TIME = Regex("(?:下单时间|创建时间)\\s*[:：]?\\s*(20[0-9]{2}[-/.年][0-9]{1,2}[-/.月][0-9]{1,2}日?\\s+[0-9]{1,2}:[0-9]{2}(?::[0-9]{2})?)")
@@ -435,6 +480,8 @@ class PurchaseLiveAutomation(
         const val ORDER_RESULT_MAX_SAMPLES = 60
         const val ORDER_RESULT_MAX_EMPTY_SAMPLES = 15
         const val ORDER_RESULT_WECHAT_RESTORE_MAX_SAMPLES = 15
+        const val ORDER_RESULT_PAYMENT_POST_BACK_MAX_SAMPLES = 3
+        const val ORDER_RESULT_SCROLL_SAMPLE_INTERVAL = 15
         const val ORDER_RESULT_SAMPLE_INTERVAL_MS = 200L
     }
 }

android/app/src/main/java/cn/ilapage/goauto/agent/automation/PurchaseRehearsalExecutor.kt

@@ -51,6 +51,7 @@ class PurchaseRehearsalExecutor(
     private val probeSpecs: () -> String?,
     private val pause: (Long) -> Unit = Thread::sleep,
     private val stepChanged: (String) -> Unit = {},
+    private val panelDiagnostic: (String) -> Unit = {},
     private val beforeOrderSubmit: (FinalConfirmationEvidence) -> Unit = { throw PurchaseLiveException("PURCHASE_MODE_NOT_ALLOWED", "当前执行器没有正式采购授权") },
 ) {
     fun execute(input: PurchaseExecutionInput, rule: PurchaseRule, supportedCapabilities: Set<String>): PurchaseExecutionOutcome {
@@ -123,7 +124,7 @@ class PurchaseRehearsalExecutor(
                 }
                 return failure
             }
-            applyPostAction(action)?.let { return it }
+            applyPostAction(input, action)?.let { return it }
         }
         if (input.phase == "spec_probe") return failure("PURCHASE_RULE_INVALID", "规格探测任务缺少 probeSpecs 动作")
         return if (input.executionMode == "rehearsal") PurchaseExecutionOutcome("rehearsal_completed", message = "商品、规格、数量和价格复核完成，已在下单前安全停止", actualUnitPriceCent = observedPrice)
@@ -278,24 +279,48 @@ class PurchaseRehearsalExecutor(
         val candidates = action.textAliases?.let { aliases ->
             safeCandidates.filter { (anchor, _) -> specEntryMatchesAliases(screen, anchor, aliases) }
         } ?: safeCandidates
-        if (candidates.size > 1) return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一")
-        val target = candidates.singleOrNull()?.second ?: return failure(SPEC_ENTRY_NOT_FOUND, "没有找到安全的商品规格入口")
+        if (candidates.size > 1) {
+            panelDiagnostic(specEntryEvidence(screen, candidates.size))
+            return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一 [${specEntryEvidence(screen, candidates.size)}]")
+        }
+        val target = candidates.singleOrNull()?.second ?: run {
+            panelDiagnostic(specEntryEvidence(screen, 0))
+            return failure(SPEC_ENTRY_NOT_FOUND, "没有找到安全的商品规格入口 [${specEntryEvidence(screen, 0)}]")
+        }
         val click = driver.clickFreshDetailed(target)
         when (click.result) {
-            FreshActionResult.AMBIGUOUS -> return failure(SPEC_ENTRY_TARGET_AMBIGUOUS, "规格入口候选不唯一")
+            // The parser already narrowed to a single semantic candidate; the
+            // ambiguity here comes from the live tree matching that target more
+            // than once at click time, so the wording must not claim otherwise.
+            FreshActionResult.AMBIGUOUS -> return failure(
+                SPEC_ENTRY_TARGET_AMBIGUOUS,
+                "规格入口点击目标不唯一 [${specEntryEvidence(screen, candidates.size)}]",
+            )
             FreshActionResult.SUCCESS -> Unit
             else -> return failure(SPEC_ENTRY_CLICK_FAILED, click.reason.specEntrySubreason())
         }
         repeat(30) {
             screen = currentScreen(input)
+            panelDiagnostic(panelEvidence(screen))
             if (screen.reviewPageOpen) return leaveUnexpectedReviewPage(input)
             screen.problem?.let { return failure(it.code, it.message) }
             if (screen.specPanelOpen) return null
             pause(100)
         }
-        return failure(SPEC_PANEL_NOT_OPENED, "点击后未识别到商品规格面板")
+        return failure(SPEC_PANEL_NOT_OPENED, "点击后未识别到商品规格面板 [${panelEvidence(screen)}]")
     }
 
+    private fun panelEvidence(screen: ParsedPddScreen): String =
+        "type=${screen.specPanelType};scrollables=${screen.panelScrollableCount};headings=${screen.panelHeadingCount};" +
+            "options=${screen.panelOptionCount};summary=${screen.hasSelectionSummary};quantity=${screen.hasQuantityControls};" +
+            "orderAction=${screen.hasOrderSubmitAction};pageEvidence=${screen.pageEvidenceMatched}"
+
+    private fun specEntryEvidence(screen: ParsedPddScreen, candidateCount: Int): String =
+        "specEntryCandidates=$candidateCount;explicit=${screen.explicitSpecEntryCount};" +
+            "nested=${screen.nestedSpecEntryCount};bottomPurchase=${screen.bottomPurchaseEntryCount};" +
+            "panelAlreadyOpen=${screen.specPanelOpen};reviewPage=${screen.reviewPageOpen};" +
+            "pageEvidence=${screen.pageEvidenceMatched}"
+
     private fun specEntryMatchesAliases(screen: ParsedPddScreen, candidate: SnapshotNode, aliases: List<String>): Boolean {
         val prefix = "${candidate.path}/"
         return (sequenceOf(candidate) + screen.sourceNodes.asSequence().filter { it.path.startsWith(prefix) })
@@ -590,9 +615,17 @@ class PurchaseRehearsalExecutor(
         return null
     }
 
-    private fun applyPostAction(action: PurchaseAction): PurchaseExecutionOutcome? {
+    private fun applyPostAction(input: PurchaseExecutionInput, action: PurchaseAction): PurchaseExecutionOutcome? {
         if (action.waitAfterMs > 0) pause(action.waitAfterMs)
         action.swipeAfter?.let { swipe ->
+            // The stock purchase rule asks to reveal additional selector rows after
+            // opening the sheet.  A fully-evidenced non-scrollable selector has no
+            // scroll target, and treating that absence as an action failure blocks
+            // an otherwise safe exact-spec flow.  Keep all other configured swipes
+            // mandatory; this exception is limited to that confirmed panel state.
+            if (action.type == PurchaseActionType.OPEN_SPEC_PANEL &&
+                currentScreen(input).specPanelType == SpecPanelType.NON_SCROLLABLE_CONFIRMATION
+            ) return null
             repeat(swipe.count) { index ->
                 if (!driver.swipePurchase(swipe.direction, swipe.durationMs)) {
                     return failure("RULE_ACTION_FAILED", "规则要求的有限滑动失败")

android/app/src/main/java/cn/ilapage/goauto/agent/network/AgentApiClient.kt

@@ -226,6 +226,26 @@ class AgentApiClient(private val serverUrl: String) {
         )
     }
 
+    fun recoverRegistration(info: DeviceInfo, token: String?, recoveryCode: String): RegistrationResult {
+        require(recoveryCode.isNotBlank()) { "请输入管理员恢复码" }
+        val payload = JSONObject()
+            .put("requestId", UUID.randomUUID().toString())
+            .put("installId", info.installId)
+            .put("name", info.name)
+            .put("manufacturer", info.manufacturer)
+            .put("model", info.model)
+            .put("androidVersion", info.androidVersion)
+            .put("agentVersion", info.agentVersion)
+            .put("pddVersion", info.pddVersion)
+            .put("capabilities", JSONArray(info.capabilities))
+        val data = post("/api/agent/v1/register", payload, token, recoveryCode).getJSONObject("data")
+        return RegistrationResult(
+            deviceId = data.getLong("deviceId"),
+            deviceToken = data.optString("deviceToken").takeIf { it.isNotBlank() },
+            heartbeatIntervalSeconds = data.optInt("heartbeatIntervalSeconds", 15),
+        )
+    }
+
     fun heartbeat(token: String, currentTaskId: Long?, capabilities: List<String> = emptyList()): HeartbeatResult {
         val payload = JSONObject()
             .put("requestId", UUID.randomUUID().toString())
@@ -590,11 +610,11 @@ class AgentApiClient(private val serverUrl: String) {
         leaseVersion = data.getLong("leaseVersion"),
     )
 
-    private fun post(path: String, payload: JSONObject, token: String?): JSONObject {
-        return requireNotNull(request("POST", path, payload, token))
+    private fun post(path: String, payload: JSONObject, token: String?, recoveryCode: String? = null): JSONObject {
+        return requireNotNull(request("POST", path, payload, token, recoveryCode))
     }
 
-    private fun request(method: String, path: String, payload: JSONObject?, token: String?): JSONObject? {
+    private fun request(method: String, path: String, payload: JSONObject?, token: String?, recoveryCode: String? = null): JSONObject? {
         val connection = (URL(serverUrl + path).openConnection() as HttpURLConnection).apply {
             requestMethod = method
             connectTimeout = 10_000
@@ -605,6 +625,7 @@ class AgentApiClient(private val serverUrl: String) {
             setRequestProperty("Accept", "application/json")
             setRequestProperty("Cache-Control", "no-store")
             if (!token.isNullOrBlank()) setRequestProperty("Authorization", "Bearer $token")
+            if (!recoveryCode.isNullOrBlank()) setRequestProperty("X-GoAuto-Device-Recovery-Code", recoveryCode)
         }
         try {
             if (payload != null) {

android/app/src/main/java/cn/ilapage/goauto/agent/service/AgentForegroundService.kt

@@ -187,11 +187,12 @@ class AgentForegroundService : Service() {
 
             if (!registeredThisProcess.get()) {
                 val registration = api.register(deviceInfo(), credentials?.token)
-                if (credentials == null) {
+                if (registration.deviceToken != null) {
                     val issuedToken = registration.deviceToken
-                        ?: error("注册请求已处理，但未返回新 Token；请联系管理员重新签发")
                     identityStore.saveCredentials(registration.deviceId, issuedToken)
                     credentials = identityStore.credentials() ?: error("设备凭据保存失败")
+                } else if (credentials == null) {
+                    error("注册请求已处理，但未返回新 Token；请联系管理员重新签发")
                 } else {
                     check(registration.deviceId == credentials.deviceId) { "服务端设备身份与本地不一致" }
                 }
@@ -472,6 +473,7 @@ class AgentForegroundService : Service() {
                             openLink = { PddLinkLauncher(this).open(it) },
                             probeSpecs = { collectPurchaseProbe(accessibility, task, parsedRule) },
                             stepChanged = { step -> purchaseStore.updateStep(task.taskId, task.taskAttemptId, step) },
+                            panelDiagnostic = { evidence -> Log.i("GoAutoPurchasePanel", "task=${task.taskId};$evidence") },
                             beforeOrderSubmit = { evidence ->
                                 val boundaryRequestId = UUID.randomUUID().toString()
                                 val finalEvidence = JSONObject()

android/app/src/test/java/cn/ilapage/goauto/agent/PddProductDetailCollectorTest.kt

@@ -367,6 +367,64 @@ class PddProductDetailCollectorTest {
         assertEquals("bottom_purchase", parsed.specEntrySource)
     }
 
+    @Test
+    fun bottomPurchaseEntriesPreferRightmostCandidate() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("buy-left", "单独购买", 446, 2000, 685, 2160, clickable = true),
+                node("buy-right", "发起拼单", 685, 2000, 1080, 2160, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("buy-right", parsed.specEntry?.path)
+        assertEquals("buy-right", parsed.specEntryClickTarget?.path)
+        assertEquals("bottom_purchase_rightmost", parsed.specEntrySource)
+        assertEquals(2, parsed.bottomPurchaseEntryCount)
+    }
+
+    @Test
+    fun equallyRightmostBottomPurchaseEntriesPreferSmallerArea() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("buy-large", "发起拼单", 685, 2000, 1080, 2160, clickable = true),
+                node("buy-small", "立即购买", 785, 2000, 980, 2140, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("buy-small", parsed.specEntry?.path)
+        assertEquals("bottom_purchase_rightmost", parsed.specEntrySource)
+    }
+
+    @Test
+    fun bottomPurchaseCandidatesStillExcludeReviewOrderAndPaymentContexts() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("reviews", "商品评价", 446, 1900, 685, 2160, clickable = true),
+                node("reviews/buy", "购买", 480, 2000, 650, 2100, parentPath = "reviews"),
+                node("order", "购买并提交订单", 685, 2000, 880, 2160, clickable = true),
+                node("payment", "购买后立即支付", 880, 2000, 1080, 2160, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals(null, parsed.specEntry)
+        assertEquals(0, parsed.bottomPurchaseEntryCount)
+    }
+
     @Test
     fun bottomPurchaseInsideReviewCardIsNeverSpecEntry() {
         val snapshot = UiSnapshot(
@@ -571,6 +629,74 @@ class PddProductDetailCollectorTest {
         assertTrue(parsed.dimensions.isEmpty())
     }
 
+    @Test
+    fun nonScrollableSelectorWithTwoDimensionsDoesNotRequireInitialSelectedSummary() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("color-heading", "颜色", 20, 420, 300, 470),
+                node("color", "豹纹", 20, 490, 300, 550, clickable = true),
+                node("size-heading", "尺码", 20, 650, 300, 700),
+                node("size", "均码", 20, 720, 300, 780, clickable = true),
+                node("quantity", "1", 480, 1400, 600, 1480, className = "android.widget.EditText"),
+                node("decrease", "减少数量", 360, 1400, 470, 1480, clickable = true),
+                node("increase", "增加数量", 610, 1400, 720, 1480, clickable = true),
+                node("order", "提交订单", 20, 1900, 1060, 2100, clickable = true),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertTrue(parsed.specPanelOpen)
+        assertEquals(SpecPanelType.NON_SCROLLABLE_CONFIRMATION, parsed.specPanelType)
+        assertFalse(parsed.hasSelectionSummary)
+        assertEquals(2, parsed.dimensions.size)
+        assertEquals(2, parsed.panelOptionCount)
+    }
+
+    @Test
+    fun nestedSelectionRowCombinesPrefixAndDimensionBeforeChoosingClickableParent() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("selection-row", "", 20, 720, 1060, 860, clickable = true),
+                node("selection-row/prefix", "请选择", 48, 750, 220, 810, parentPath = "selection-row"),
+                node("selection-row/dimension", "颜色分类", 240, 750, 480, 810, parentPath = "selection-row"),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals("selection-row", parsed.specEntry?.path)
+        assertEquals("selection-row", parsed.specEntryClickTarget?.path)
+        assertEquals("nested_selection", parsed.specEntrySource)
+        assertEquals(1, parsed.nestedSpecEntryCount)
+    }
+
+    @Test
+    fun nestedSelectionSemanticsNeverAcceptsOrderOrPaymentContainer() {
+        val snapshot = UiSnapshot(
+            PDD_PACKAGE,
+            ACTIVITY,
+            listOf(
+                node("content", "", 0, 0, 1080, 2200, resourceId = "android:id/content", className = "android.widget.FrameLayout"),
+                node("unsafe", "", 20, 720, 1060, 860, clickable = true),
+                node("unsafe/prefix", "请选择", 48, 750, 220, 810, parentPath = "unsafe"),
+                node("unsafe/dimension", "颜色", 240, 750, 480, 810, parentPath = "unsafe"),
+                node("unsafe/order", "提交订单", 700, 750, 1020, 810, parentPath = "unsafe"),
+            ),
+        )
+
+        val parsed = PddScreenParser.parse(snapshot, config(), GOODS_ID, evidence())
+
+        assertEquals(null, parsed.specEntry)
+        assertEquals(0, parsed.nestedSpecEntryCount)
+    }
+
     @Test
     fun genericQuantityAndBuyControlsDoNotProveQuickConfirmation() {
         val snapshot = UiSnapshot(

android/app/src/test/java/cn/ilapage/goauto/agent/PurchaseLiveAutomationTest.kt

@@ -120,6 +120,122 @@ class PurchaseLiveAutomationTest {
         assertFalse(driver.clicked.any { it.startsWith("微信") || it.contains("支付") })
     }
 
+    @Test
+    fun `payment page returns to folded unpaid order detail and scrolls to read evidence`() {
+        val driver = LiveDriver(chooserAfterSubmit = true, orderEvidenceBelowFold = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg54")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg54"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(2, driver.postSubmitBackCount)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `successful order page enters the unique order detail before reading the result`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg56")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg56"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(1, driver.orderDetailEntryClicks)
+        assertEquals("order", driver.currentPage)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `order detail entered from success page scrolls only to reveal folded result evidence`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true, orderDetailEvidenceBelowFold = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg58")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg58"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(1, driver.orderDetailEntryClicks)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `unpaid order evidence on reused payment activity scrolls read only instead of backing out`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = listOf("order-folded-payment-activity"))
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg59")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg59"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals(0, driver.postSubmitBackCount)
+        assertEquals(1, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `ambiguous order detail entries stop without navigating`() {
+        val driver = LiveDriver(orderDetailEntryAfterSubmit = true, duplicateOrderDetailEntry = true)
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg57")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg57"), address)
+        automation.submitOrderOnce()
+
+        assertEquals(null, automation.readOrderResult())
+        assertEquals("PURCHASE_ORDER_DETAIL_ENTRY_AMBIGUOUS", automation.lastOrderReadFailure?.code)
+        assertEquals(0, driver.orderDetailEntryClicks)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `payment transition frame after safe back reaches unpaid order evidence without payment clicks`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = listOf("payment", "payment", "order"))
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg55")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg55"), address)
+        automation.submitOrderOnce()
+
+        val order = automation.readOrderResult()
+
+        assertEquals("PDD-202608210001", order?.orderNo)
+        assertEquals("2026-08-21T02:30:00Z", order?.submittedAt)
+        assertEquals(1, driver.postSubmitBackCount)
+        assertEquals(0, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
+    @Test
+    fun `continuous payment activity still stops at bounded post back samples without payment clicks`() {
+        val driver = LiveDriver(postSubmitCaptureSequence = List(4) { "payment" })
+        val automation = PurchaseLiveAutomation(driver, pause = {})
+        val address = automation.updateShippingAddress("_cg55")
+        automation.finalConfirmation(input().copy(addressSuffix = "_cg55"), address)
+        automation.submitOrderOnce()
+
+        assertEquals(null, automation.readOrderResult())
+        assertEquals("PURCHASE_ORDER_PAYMENT_REPEATED", automation.lastOrderReadFailure?.code)
+        assertEquals(
+            "支付页安全返回后持续无订单证据，已停止自动核单" +
+                "[paymentBackAttempts=1;consecutivePaymentSamplesAfterBack=3]",
+            automation.lastOrderReadFailure?.message,
+        )
+        assertEquals(4, driver.postSubmitCaptureCount)
+        assertEquals(1, driver.postSubmitBackCount)
+        assertEquals(0, driver.genericSwipes)
+        assertFalse(driver.clicked.any { it.contains("支付") })
+    }
+
     @Test
     fun `WeChat login is not touched and PDD is restored once before reading order detail`() {
         val driver = LiveDriver(wechatLoginAfterSubmit = true)
@@ -310,6 +426,10 @@ class PurchaseLiveAutomationTest {
         private val savedTransitionHidesSuffix: Boolean = false,
         private val wechatLoginAfterSubmit: Boolean = false,
         private val wechatRestoreStuck: Boolean = false,
+        private val orderEvidenceBelowFold: Boolean = false,
+        private val orderDetailEntryAfterSubmit: Boolean = false,
+        private val orderDetailEvidenceBelowFold: Boolean = false,
+        private val duplicateOrderDetailEntry: Boolean = false,
         postSubmitCaptureSequence: List<String> = emptyList(),
     ) : PurchaseUiDriver {
         private var page = "confirmation"
@@ -326,6 +446,7 @@ class PurchaseLiveAutomationTest {
         var backCount = 0
         var postSubmitBackCount = 0
         var pddRestoreCount = 0
+        var orderDetailEntryClicks = 0
         var postSubmitCaptureCount = 0
         val currentPage: String get() = page
 
@@ -359,7 +480,20 @@ class PurchaseLiveAutomationTest {
                 node("address-summary", if (savedTransitionHidesSuffix) "已保存的收货信息" else address.substring(address.lastIndexOf("_cg"))),
             ))
             "order" -> snapshot(listOf(node("status", "待付款"), node("order", "订单号：PDD-202608210001"), node("time", "下单时间：2026-08-21 10:30:00"), node("pay", "立即支付", clickable = true)))
+            "order-folded" -> snapshot(listOf(node("status", "待付款"), node("pay", "立即支付", clickable = true)))
+            "order-folded-payment-activity" -> UiSnapshot(PDD, "com.xunmeng.pinduoduo.app_pay.core.PayActivity", listOf(
+                node("status", "待付款"), node("pay", "立即支付", clickable = true),
+            ))
             "order-no-time" -> snapshot(listOf(node("status", "待付款"), node("order", "订单号：PDD-202608210001"), node("pay", "去支付", clickable = true)))
+            "success" -> snapshot(buildList {
+                add(node("success-title", "购买成功"))
+                add(node("detail-parent", "", clickable = true))
+                add(node("detail", "查看订单", parentPath = "detail-parent"))
+                if (duplicateOrderDetailEntry) {
+                    add(node("detail-parent-2", "", clickable = true))
+                    add(node("detail-2", "订单详情", parentPath = "detail-parent-2"))
+                }
+            })
             "chooser" -> UiSnapshot(if (trustedChooser) "android" else "example.untrusted", "com.android.internal.app.ChooserActivity", listOf(
                 node("chooser-title", "选择要使用的应用"), node("wechat-1", "微信"), node("wechat-2", "微信分身"),
             ))
@@ -409,9 +543,14 @@ class PurchaseLiveAutomationTest {
                     page = when {
                         chooserAfterSubmit -> "chooser"
                         wechatLoginAfterSubmit -> "wechat-login"
+                        orderDetailEntryAfterSubmit -> "success"
                         else -> "order"
                     }
                 }
+                "查看订单", "订单详情" -> {
+                    orderDetailEntryClicks++
+                    page = if (orderDetailEvidenceBelowFold) "order-folded" else "order"
+                }
             }
             return FreshActionResult.SUCCESS
         }
@@ -428,7 +567,11 @@ class PurchaseLiveAutomationTest {
             address = value
             return FreshActionResult.SUCCESS
         }
-        override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean { genericSwipes++; return true }
+        override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean {
+            genericSwipes++
+            if (page in setOf("order-folded", "order-folded-payment-activity") && direction == SwipeDirection.UP) page = "order"
+            return true
+        }
         override fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean {
             scopedSwipes++
             if (target.path == "panel" && direction == SwipeDirection.DOWN) addressVisible = true
@@ -439,7 +582,7 @@ class PurchaseLiveAutomationTest {
             if (page == "chooser" || page == "payment") postSubmitBackCount++
             page = when (page) {
                 "chooser" -> "payment"
-                "payment" -> "order"
+                "payment" -> if (orderEvidenceBelowFold) "order-folded" else "order"
                 else -> "confirmation"
             }
             return true

android/app/src/test/java/cn/ilapage/goauto/agent/PurchaseRehearsalExecutorTest.kt

@@ -418,6 +418,50 @@ class PurchaseRehearsalExecutorTest {
         assertEquals(50, pauses.size)
     }
 
+    @Test
+    fun `open spec panel skips required follow-up swipe only for confirmed non-scrollable panel`() {
+        val driver = FakePurchaseDriver(nonScrollablePanel = true, purchaseSwipeSucceeds = false)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("rehearsal_completed", outcome.resultType)
+        assertEquals(0, driver.swipeCount)
+    }
+
+    @Test
+    fun `unrecognized opened panel returns only scalar panel evidence`() {
+        val driver = FakePurchaseDriver(unrecognizedPanel = true)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_PANEL_NOT_OPENED", outcome.errorCode)
+        assertEquals(
+            "点击后未识别到商品规格面板 [type=UNKNOWN;scrollables=0;headings=0;options=0;summary=false;quantity=false;orderAction=false;pageEvidence=true]",
+            outcome.message,
+        )
+        assertFalse(outcome.message.orEmpty().contains("确认款式"))
+    }
+
+    @Test
+    fun `missing spec entry emits scalar source counts without node text`() {
+        val diagnostics = mutableListOf<String>()
+        val driver = FakePurchaseDriver(missingSpecEntry = true)
+        val outcome = PurchaseRehearsalExecutor(
+            driver,
+            { driver.browser = true; true },
+            { null },
+            pause = {},
+            panelDiagnostic = diagnostics::add,
+        ).execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_NOT_FOUND", outcome.errorCode)
+        assertEquals(
+            "specEntryCandidates=0;explicit=0;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true",
+            diagnostics.single(),
+        )
+        assertFalse(diagnostics.single().contains("选择规格"))
+    }
+
     @Test
     fun `transient sold out page recovers before opening specs`() {
         val driver = FakePurchaseDriver(soldOut = true, recoverSoldOutAfterPull = true)
@@ -561,6 +605,29 @@ class PurchaseRehearsalExecutorTest {
         assertFalse(driver.clicked.contains("商品评价"))
     }
 
+    @Test
+    fun `spec entry failures include scalar diagnostics only`() {
+        val driver = FakePurchaseDriver(missingSpecEntry = true)
+        val outcome = PurchaseRehearsalExecutor(driver, { driver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_NOT_FOUND", outcome.errorCode)
+        assertEquals(
+            "没有找到安全的商品规格入口 [specEntryCandidates=0;explicit=0;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true]",
+            outcome.message,
+        )
+
+        val ambiguousDriver = FakePurchaseDriver(forcedEntryClickReason = FreshClickReason.TARGET_AMBIGUOUS)
+        val ambiguous = PurchaseRehearsalExecutor(ambiguousDriver, { ambiguousDriver.browser = true; true }, { null }, pause = {})
+            .execute(input(), PurchaseRuleParser.parse(rule()), PurchaseAgentCapabilities.supported)
+
+        assertEquals("PURCHASE_SPEC_ENTRY_TARGET_AMBIGUOUS", ambiguous.errorCode)
+        assertEquals(
+            "规格入口点击目标不唯一 [specEntryCandidates=1;explicit=1;nested=0;bottomPurchase=0;panelAlreadyOpen=false;reviewPage=false;pageEvidence=true]",
+            ambiguous.message,
+        )
+    }
+
     @Test
     fun `parser keeps type only compatibility and rejects dangerous or unknown fields`() {
         val legacy = """{"schemaVersion":1,"ruleType":"pddPurchase","requiredCapabilities":["purchase.rehearsal.v1"],"actions":[{"type":"openProduct"}]}"""
@@ -709,6 +776,7 @@ class PurchaseRehearsalExecutorTest {
         private val priceCent: Long = 2_000,
         private val duplicateOpen: Boolean = false,
         private val bottomPurchaseEntry: Boolean = false,
+        private val missingSpecEntry: Boolean = false,
         private val includeReviewEntry: Boolean = false,
         private val openReviewOnBottomClick: Boolean = false,
         private val reviewBackSucceeds: Boolean = true,
@@ -732,6 +800,9 @@ class PurchaseRehearsalExecutorTest {
         private val loseEvidenceAfterPull: Boolean = false,
         private val unavailableSizes: Set<String> = emptySet(),
         allSpecsUnavailable: Boolean = false,
+        private val nonScrollablePanel: Boolean = false,
+        private val unrecognizedPanel: Boolean = false,
+        private val purchaseSwipeSucceeds: Boolean = true,
     ) : PurchaseUiDriver {
         var browser = false
         var panel = false
@@ -784,12 +855,18 @@ class PurchaseRehearsalExecutorTest {
                     nodes += node("buy", "", 500, 1800, 1080, 2180, clickable = true)
                     nodes += node("buy/price", "¥20.00", 560, 1840, 760, 1910, parentPath = "buy")
                     nodes += node("buy/label", "免拼购买", 780, 1840, 1040, 1910, parentPath = "buy")
-                } else {
+                } else if (!missingSpecEntry) {
                     nodes += node("spec", "选择规格", 20, 1000, 900, 1100, clickable = true)
                 }
                 if (includeReviewEntry) nodes += node("review", "商品评价", 20, 1200, 900, 1300, clickable = true)
                 return UiSnapshot(PDD, ACTIVITY, nodes)
             }
+            if (unrecognizedPanel) {
+                return UiSnapshot(PDD, ACTIVITY, listOf(
+                    node("content", "", 0, 0, 1080, 2200),
+                    node("panel-title", "确认款式", 20, 396, 300, 430),
+                ))
+            }
             val hideColor = hideColorAfterQuantitySet && quantity == 2L
             val hideSize = hideSizeAfterQuantitySet && quantity == 2L
             val hideSummary = hideSelectedSummaryAfterQuantitySet && quantity == 2L
@@ -802,8 +879,8 @@ class PurchaseRehearsalExecutorTest {
                 node("content", "", 0, 0, 1080, 2200),
                 node("price", "¥${priceCent / 100}.${(priceCent % 100).toString().padStart(2, '0')}", 20, 300, 300, 360),
                 node("title", "确认款式", 20, 396, 300, 430),
-                node("scroll", "", 0, 400, 1080, 950, scrollable = true),
             )
+            if (!nonScrollablePanel) nodes += node("scroll", "", 0, 400, 1080, 950, scrollable = true)
             if (!hideSummary) {
                 nodes += node("selected", "已选 $displayedSummary", 20, 365, 700, 395)
             }
@@ -912,7 +989,7 @@ class PurchaseRehearsalExecutorTest {
         override fun swipePurchase(direction: SwipeDirection, durationMs: Long): Boolean {
             swipeCount++
             if (direction == SwipeDirection.UP) upSwipeCount++
-            return true
+            return purchaseSwipeSucceeds
         }
 
         override fun swipePurchaseIn(target: SnapshotNode, direction: SwipeDirection, durationMs: Long): Boolean =

docs/02-architecture-and-code-map.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Architecture-and-Code-Map
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Architecture-and-Code-Map.-
-wiki_revision: 2864a22f9e0f54a0663a56ab27d4b84052be3aac
-synchronized_at: 2026-09-01T15:31:13Z
+wiki_revision: de7e400503d6e7b9c335657114893de345bfead5
+synchronized_at: 2026-08-31T03:33:36Z
 <!-- gitea-wiki-mirror:end -->
 
 <!-- gitea-wiki-mirror:start -->
@@ -56,7 +56,7 @@ Android Portal/Agent
 - Android 本地互斥与服务端原子领取共同保证单设备串行。
 - 正式采购在 Android 本地 SQLite 事务中先保存不可逆状态、稳定服务端请求 ID 和脱敏最终确认快照，再通知服务端并只允许一次创建订单点击；重启后只重放服务端标记、只读核单或上报，不再次点击。
 - 原始控件树和截图不持久化；Android Agent 端第一期不使用 OCR/VLM。服务端 SYB 登录验证码识别是唯一例外，见 [#48](https://git.ilapage.cn/OPC/goauto/issues/48)。
-- 蝦皮规格映射独立保存在 `shopee_product.specs_json`：颜色只能选择关联 PDD 当前可选颜色，允许多个蝦皮颜色共用一个 PDD 颜色。Admin 商品详情的“一键匹配颜色和尺码”在服务端统一计算两个维度：保留当前仍有效的已确认映射，将唯一确定匹配及达到阈值、具备理由且候选仍有效的 AI 匹配，在重新校验规格上下文后于同一事务直接写为 `confirmed`，无需人工确认；低置信度或无结果保持未匹配，Provider 异常或上下文变化时不写入任何本次结果。PDD 目标规格消失后页面标记失效，映射保存和采购创建均拒绝继续使用；无需新增数据库表或 Android 能力。
+- 蝦皮规格映射独立保存在 `shopee_product.specs_json`：颜色只能选择关联 PDD 当前可选颜色，允许多个蝦皮颜色共用一个 PDD 颜色；尺码自动匹配只预览格式统一后的唯一确定结果。PDD 目标规格消失后页面标记失效，映射保存和采购创建均拒绝继续使用；无需新增数据库表或 Android 能力。
 
 ## 最小业务数据
 
@@ -318,11 +318,3 @@ PddProductDetailCollector
 - `GET /api/admin/v1/pdd-products/{productId}/related-syb-products` 返回统一扁平分页，参数为 `page`、`pageSize`（默认 20、最大 100）、`scope=actionable|all`（默认 actionable）和可选 `shopeeProductId`。管理员和采购员可读，其他角色由 Casbin 拒绝。
 - `purchase.Service.ProcessStages` 是 SYB 页和 PDD 关联订单共用的只读阶段入口；批量加载、不调用 AI。当前采购规则缺失或无效时仍返回基础关联、采集和已有任务事实，依赖规则才能创建的行明确标记不可采购。
 - Web 的 PDD 商品详情把“创建备货采购”保留在顶部，把“关联订单继续采购”放在关联商品区块；订单行使用统一分页，并复用既有 `batch-preview` / `batch` 创建路径。
-
-## 蝦皮规格自动匹配批处理（#195）
-
-- 服务端在 `server/app/goauto/shopeeproduct/auto_match_batch.go` 复用单商品“一键匹配颜色和尺码”原子服务，定时任务与 Admin 手动执行共用同一批处理入口。
-- `shopee_spec_auto_match_run` 保存触发来源、稳定 `requestId`、运行摘要和可空唯一 `active_slot`；活动槽与租约保证多实例、定时和手动同时触发时全局最多一个运行批次。
-- `shopee_spec_auto_match_work_item` 按蝦皮商品唯一保存输入指纹、尝试次数、下次尝试时间和逐商品租约。已完成或低置信度/无结果的相同输入不重复调用 AI；规格、关联或 AI 设置更新时间变化后才允许重新处理。
-- 迁移 `1788290000000_shopee_spec_auto_match.go` 幂等创建两张表并写入调用目标 `GoAutoShopeeSpecAutoMatch`。系统任务默认关闭，默认 Cron 为每小时第 15 分钟、每批最多 20 个商品。
-- Admin 蝦皮商品列表通过异步手动接口启动同一批次并轮询最近运行摘要；该入口仅管理员可用，不创建采购任务、订单，不调用 Android Agent，也不执行付款。

docs/03-business-rules-and-glossary.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Business-Rules-and-Glossary
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Business-Rules-and-Glossary.-
-wiki_revision: 0e1df62c48aeba32a7d5e4956783f0af68e8e658
-synchronized_at: 2026-09-01T15:31:24Z
+wiki_revision: 9b195f3c578f980b808e6eb28f36e7bf5294e75b
+synchronized_at: 2026-09-03T01:55:28Z
 <!-- gitea-wiki-mirror:end -->
 
 # 业务规则与术语
@@ -31,7 +31,7 @@ synchronized_at: 2026-09-01T15:31:24Z
 - 关联 PDD 商品时校验目标存在且非 `disabled`；不提供手工输入商品 ID 的入口，只能通过搜索选择。
 - 参考售价 `sale_price_cent` 为整数分，`currency` 为 ISO 4217 代码；币种取系统配置默认值，不逐商品选择，缺省回退为 `TWD`。
 - 规格值来源分 `import`（SYB 导入，不可人工删除，只能清除映射）与 `manual`（人工添加，可删除）；导入与人工值按「维度 + 名称」合并，不重复创建。
-- 映射来源分 `manual`（人工，允许创建时即为已确认）、`exact_match`（名称标准化后唯一一致）、`ai_match`（AI 建议）。通用 `SetMapping` 入口仍将 `exact_match` 与 `ai_match` 一律写为 `pending`，必须人工确认后才生效；#188 的 SYB 商品页批量 AI 匹配与 #194 的 Admin 蝦皮商品详情一键匹配是两个独立例外。#188 的进入条件已由 #190 放开：只要蝦皮与 PDD 关联完整、PDD 当前为 `active` 且能给出可选颜色/尺码候选、并且已解析出至少一个目标颜色或尺码，即可进入批量匹配。解析状态（含 `parse_status=uncertain` 与 `failed`）、PDD 含颜色尺码之外的可选规格、蝦皮档案中未找到目标颜色或尺码、缺少完整可售 SKU 组合证据，自 #190 起都不再阻断匹配；本项目为内部系统，由此产生的“以错误目标规格进行匹配并保存映射”的风险由人工承担。唯一确定性 `exact_match` 不调用外部 AI，可直接保存为 `confirmed`；其余结果只有在 `ai_match` 置信度存在且达到服务端阈值、理由非空、返回值属于当前可选候选并命中同一个可售颜色+尺码组合时，才可直接持久化为 `confirmed`。低置信度、无组合证据、无效组合或 Provider 异常不得改写现有映射。
+- 映射来源分 `manual`（人工，允许创建时即为已确认）、`exact_match`（名称标准化后唯一一致）、`ai_match`（AI 建议）。通用 `SetMapping` 入口仍将 `exact_match` 与 `ai_match` 一律写为 `pending`，必须人工确认后才生效；#188 的 SYB 商品页批量 AI 匹配与 #194 的 Admin 蝦皮商品详情一键匹配是两个独立例外。#188 的进入条件已由 #190 放开：只要蝦皮与 PDD 关联完整、PDD 当前为 `active` 且能给出可选颜色/尺码候选、并且已解析出至少一个目标颜色或尺码，即可进入批量匹配。解析状态（含 `parse_status=uncertain` 与 `failed`）、PDD 含颜色尺码之外的可选规格、蝦皮档案中未找到目标颜色或尺码、缺少完整可售 SKU 组合证据，自 #190 起都不再阻断匹配；本项目为内部系统，由此产生的“以错误目标规格进行匹配并保存映射”的风险由人工承担。唯一确定性 `exact_match` 不调用外部 AI，可直接保存为 `confirmed`；SYB 商品页批量 `ai_match` 只要 Provider 成功返回规格结果且理由非空、返回值属于当前可选候选即可直接持久化为 `confirmed`，置信度仅记录供审计、不作为放行门槛。若当前 PDD 档案存在完整可售颜色+尺码 SKU 组合证据，结果还必须命中其中同一个组合；人工录入或外部导入导致组合证据缺失时不阻断保存或创建采购。无结果、已有组合证据中的无效组合或 Provider 异常不得改写现有映射。
 - 颜色映射只能从关联 PDD 商品当前可选颜色中选择，不允许自由输入；未使用颜色优先显示，已被其他蝦皮颜色使用的颜色仍可选择并显示占用者，因此支持多对一。
 - Admin 蝦皮商品详情只保留一个“一键匹配颜色和尺码”入口。已确认且目标仍存在的映射保留；名称标准化后的唯一确定结果直接写为 `exact_match + confirmed`；其余只有在 AI 置信度达到服务端当前阈值、理由非空、返回值仍属于当前可选候选时才写为 `ai_match + confirmed`。低置信度或无结果保持未匹配；Provider 失败、AI 未启用、关联或规格上下文变化时本次不写入。操作前有未保存的人工修改时禁用一键匹配；保存只改映射，不改蝦皮或 PDD 原始规格。
 - PDD 重新采集或更换关联后，目标规格仍存在则映射继续有效；目标规格消失时详情标记“已失效”，服务端拒绝保存不存在的目标，采购预检和创建也拒绝使用失效映射并提示重新选择。
@@ -401,3 +401,11 @@ synchronized_at: 2026-09-01T15:31:24Z
 - 定时与管理员手动执行共用全局活动槽和逐商品工作状态。单批默认最多 20 个商品；同一规格上下文与 AI 设置更新时间未变化时，已完成、低置信度或无结果商品不重复调用 AI。
 - Provider 临时失败最多尝试 3 次，间隔至少 60 分钟；输入变化后重新计算指纹并允许重新处理。运行记录只保存结构化计数和脱敏限长错误，不保存 API Key、Provider 原始响应、商品原始 JSON 或个人数据。
 - 系统定时任务迁移后默认关闭，须由管理员明确启用。该能力仅维护蝦皮与 PDD 颜色/尺码映射，不创建采购任务、PDD 订单，不触发 Agent，也不执行付款。
+
+## SYB 异常采购规格 AI 解析（#198）
+
+- SYB 采购规格采用两阶段流程：先把货运单明细 `productSpec` 解析为目标颜色/尺码，再由 #195 把蝦皮规格匹配到 PDD 规格；两阶段不得混为同一匹配事实。
+- 定时任务只处理未人工确认且确定性解析为 `uncertain` / `failed` 的明细。每条先重跑确定性解析；空 `productSpec`、无关联蝦皮商品、无颜色/尺码候选或同一角色存在多个候选维度时不调用 AI，继续人工处理。
+- AI 只在关联蝦皮商品的封闭候选集合中返回原始颜色/尺码，并必须提供达到当前自动确认阈值的置信度和非空理由；集合外值、缺失角色、低置信度、歧义、无结果和输入漂移都不得确认。
+- `parse_status` 保留确定性解析器结论；AI 与人工确认分别记录，人工优先级最高。重复同步不得覆盖人工值；完全相同输入保留 AI 值，来源或关联变化会清除旧 AI 确认。
+- 同一输入的低置信度或无结果不重复调用 Provider；临时故障至少 60 分钟后重试，最多 3 次。任务不创建采集/采购任务、订单，不执行 Android 动作或付款。

docs/08-agent-api-contract.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Android-Agent-API-Contract
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Android-Agent-API-Contract.-
-wiki_revision: 87219820eec3964ee5379f1edba6a62e94bddd2e
-synchronized_at: 2026-09-01T15:32:52Z
+wiki_revision: c214791a0b055e5b56c0ad05e73829a1f141dd46
+synchronized_at: 2026-09-01T08:03:51Z
 <!-- gitea-wiki-mirror:end -->
 
 # MVP 共享 API 契约
@@ -49,18 +49,15 @@ DELETE /api/admin/v1/shopee-products/{productId}/specs/mapping
 POST /api/admin/v1/shopee-products/{productId}/specs/mapping/confirm
 POST /api/admin/v1/shopee-products/{productId}/specs/mapping/confirm-exact-matches
 POST /api/admin/v1/shopee-products/{productId}/specs/mapping/preview-auto-size
-POST /api/admin/v1/shopee-products/{productId}/specs/mapping/auto-match
 POST /api/admin/v1/shopee-products/batch-delete
 ```
 
 创建与关联/映射相关写操作均提交 `requestId` 做幂等重放；重放请求返回相同结果并标记 `replayed`。创建请求提交 `shopeeItemId`、`title`、`shopName`，可选 `pddProductId` 和 `specs`；`shopeeItemId` 重复时返回 `SHOPEE_ITEM_ID_EXISTS` 和已存在商品 ID。`link-pdd` 校验 PDD 商品存在且非 `disabled`，否则分别返回 `PDD_PRODUCT_NOT_FOUND` 或 `PDD_PRODUCT_DISABLED`；关联成功后返回值包含 `sharedByPddCount`，表示当前共用同一 PDD 商品的虾皮商品数。
 
-`specs` 结构同 PDD 商品的维度/规格值形状，但规格值额外携带 `source`（`import` / `manual`）与可选的 `mapping`（`pddValue`、`source`、`status`、`confidence`、`reason`）。新增规格值固定为 `manual` 来源；删除规格值仅允许 `manual` 来源，`import` 来源返回 `SPEC_VALUE_NOT_MANUAL`。设置映射时，`exact_match` 与 `ai_match` 来源一律写入 `pending` 状态，与请求体中的 `status` 无关；只有 `manual` 来源可以直接写入 `confirmed`。`confirm-exact-matches` 仅确认 `source=exact_match` 且状态为 `pending` 的映射，不影响 `ai_match`。该通用入口不因 #188 或 #194 改变；两者只能通过各自独立的服务端写入路径，将唯一确定性 `exact_match` 或通过高置信度门槛的 `ai_match` 写入 `confirmed`。
+`specs` 结构同 PDD 商品的维度/规格值形状，但规格值额外携带 `source`（`import` / `manual`）与可选的 `mapping`（`pddValue`、`source`、`status`、`confidence`、`reason`）。新增规格值固定为 `manual` 来源；删除规格值仅允许 `manual` 来源，`import` 来源返回 `SPEC_VALUE_NOT_MANUAL`。设置映射时，`exact_match` 与 `ai_match` 来源一律写入 `pending` 状态，与请求体中的 `status` 无关；只有 `manual` 来源可以直接写入 `confirmed`。`confirm-exact-matches` 仅确认 `source=exact_match` 且状态为 `pending` 的映射，不影响 `ai_match`。该通用入口不因 #188 改变；#188 仅通过下述采购批量规格匹配接口的独立写入路径，将唯一确定性 `exact_match` 或通过高置信度门槛的 `ai_match` 写入 `confirmed`。
 
 `preview-auto-size` 是只读计算接口（使用 `POST` 触发计算，不写数据库），无需 `requestId`。它读取当前蝦皮尺码与关联 PDD 的可选尺码，只返回格式统一后唯一确定的匹配；响应含 `items[]`（`valueName`、可选 `pddValue`、`status=preserved|matched|pending`、`reason`）、`pddValues`、`matchedCount` 和 `pendingCount`。已确认且目标仍存在的映射标为 `preserved`；无唯一结果标为 `pending`。Admin 的显式“保存修改”仍通过既有设置/确认接口落库。
 
-`auto-match` 是 Admin 蝦皮商品详情一键匹配颜色和尺码的独立写入接口。请求体必须提交 UUID `requestId` 和详情返回的 `specContextVersion`。服务端在事务外完成必要的 Provider 调用，入事务后重新锁定蝦皮商品与 PDD 商品，复核关联、完整规格上下文、当前可选候选、AI 开关和最新置信度阈值。保留有效的已确认映射；唯一确定结果直接保存为 `exact_match + confirmed`；置信度达标、理由非空且候选仍有效的 AI 结果保存为 `ai_match + confirmed`；其余项保持未匹配。响应含 `product`、`items[]`（`dimension`、`role`、`valueName`、可选 `pddValue`、`status=confirmed|preserved|unmatched`、可选 `source`、`confidence`、`reason`）、`confirmedCount`、`preservedCount`、`unmatchedCount` 和 `replayed`。同一 `requestId` 幂等重放；Provider 异常或 AI 未启用返回 `AI_MATCHING_UNAVAILABLE`，关联或规格变化返回 `SPEC_CONTEXT_VERSION_STALE`，两者都不写入本次结果。
-
 设置映射时，`pddValue` 必须是关联 PDD 商品同角色下当前可选的原始规格标签，否则返回 `INVALID_REQUEST`。PDD 重新采集后旧目标消失时，Admin 标记失效；采购预检与任务创建返回 `PURCHASE_SPEC_MAPPING_REQUIRED` 和“规格匹配已失效，请重新选择 PDD 规格”，不得把旧标签下发给 Agent。
 
 `batch-delete` 提交 `requestId` 和 `ids`（1～500 个），逐条校验引用后返回每条的 `status`（`deleted` / `skipped`）与 `reason`；引用检查覆盖 SYB 明细（#41）与采购任务（#33/#34），两张表落地前恒不阻塞删除。`restore` 恢复一条已软删除商品，恢复后原有 PDD 关联与规格映射保持不变。列表接口 `status=deleted` 筛选已删除商品，默认只返回存活商品。
@@ -848,17 +845,3 @@ file=<JPEG 二进制>
 | `GET` | `/api/agent/v1/app/releases/{releaseId}/download` | Device Token；私有 APK 下载 |
 
 Agent 只比较整数 `versionCode`。设备有活动任务时禁止检查、下载和安装；下载到应用私有缓存并校验响应大小与 SHA-256，失败立即删除。安装使用 FileProvider 和 Android 系统安装确认页；未知来源权限必须由用户在系统设置授权，不静默安装。
-
-## Admin 蝦皮规格自动匹配批次（#195）
-
-以下接口仅管理员可用，采购员与其他角色必须拒绝；两者不属于 Android Agent 接口，不改变任何 Agent 契约。
-
-### `POST /api/admin/v1/shopee-spec-auto-match/runs`
-
-请求：`{ "requestId": "UUID" }`。服务端以 `requestId` 幂等，异步受理默认最多 20 个商品的手动批次，并返回 HTTP 202、`data.run` 运行摘要。若已有活动批次，不再创建第二个批次，返回当前运行并标记 `alreadyRunning=true`；相同请求重放标记 `replayed=true`。
-
-### `GET /api/admin/v1/shopee-spec-auto-match/runs/latest`
-
-返回 `data.run`；从未执行时为 `null`。运行摘要包含 `id/requestId/trigger/status/batchLimit/scannedCount/eligibleCount/processedCount/confirmedCount/unmatchedCount/failedCount/startedAt/finishedAt` 和可选脱敏 `errorSummary`，不得返回 API Key、Provider 原始响应或商品原始 JSON。
-
-`status` 当前为 `running`、`completed`、`completed_partial` 或 `failed`。页面只轮询最近摘要；查询本身不调用 AI。批次只更新蝦皮商品规格映射，不创建采购任务、订单或付款动作。

docs/13-deployment-and-operations.md

@@ -2,8 +2,8 @@
 generated: true (请先修改 Gitea Wiki，禁止直接编辑本文件)
 wiki_page: Deployment-and-Operations
 wiki_url: https://git.ilapage.cn/OPC/goauto/wiki/Deployment-and-Operations.-
-wiki_revision: 929a9496d2e4aa25769351e08075dce6bd993b2d
-synchronized_at: 2026-09-02T09:40:46Z
+wiki_revision: 80ae5c8cea87c624fff63ce3e302aa7bf204811e
+synchronized_at: 2026-08-31T16:07:03Z
 <!-- gitea-wiki-mirror:end -->
 
 # 部署与运维
@@ -39,20 +39,6 @@ GOAUTO_ALLOW_INSECURE_AGENT_HTTP=true
 
 发布、重启、设置当前 Agent 版本和真机安装都属于高风险操作，必须有对应工单和人工确认。不得在部署过程中执行付款、创建订单或清理生产数据。
 
-### API 长请求超时约束
-
-Admin 蝦皮规格 AI 匹配会同步等待外部 Provider：Provider 配置允许 3～600 秒，复合的一键匹配共享 600 秒总预算，Admin 客户端等待 610 秒。因此服务端 `settings.application.writetimeout` 必须至少为 620 秒，受版本管理的标准配置固定为 `620`；启动时低于该值必须明确失败，禁止以 2 秒等短写超时运行，否则连接会在领域错误返回前被截断并表现为代理 502。反向代理的读/发送超时也必须大于服务端窗口。
-
-Provider 故障日志只允许记录调用关联 ID、操作类型、耗时、上游 HTTP 状态码或网络错误分类；不得记录 API Key、Authorization、Provider URL、模型输入、候选规格、商品原始内容或响应正文。Provider 失败时接口返回 HTTP 503 与 `AI_MATCHING_UNAVAILABLE`，供 Admin 显示安全中文提示。
-
 ## 回滚
 
 服务异常时把 `/home/goauto/current` 切回上一已验证发布目录并重启 `goauto.service`，随后复核服务状态和 Agent 接口。不要删除当前或历史 APK/发布目录来代替回滚；数据库变化如需回退必须单独评估。
-
-## 蝦皮规格自动匹配任务运维（#195）
-
-- 迁移 `1788290000000_shopee_spec_auto_match.go` 创建运行与工作状态表，并幂等写入 `sys_job.invoke_target=GoAutoShopeeSpecAutoMatch`。首次部署状态为关闭，迁移重跑不会覆盖管理员后来修改的 Cron、参数或启停状态。
-- 默认 Cron 为 `0 15 * * * *`（每小时第 15 分钟），默认 `batchLimit` 为 20，合法范围 1～100。上线后先保持关闭，在 Admin 蝦皮商品列表手动执行小批次并核对运行摘要和映射，再由管理员在定时任务页明确启用。
-- 定时和手动触发共享数据库唯一活动槽。看到“已有自动匹配正在运行”属于正常互斥结果；运行租约超过 30 分钟会在下次触发时安全释放并把旧运行标记失败。处理每个商品前会续租。
-- Provider 临时失败的商品至少 60 分钟后重试，最多 3 次；低置信度或无结果在输入指纹不变时不会重复调用。排错优先查看 `shopee_spec_auto_match_run` 的结构化计数与脱敏错误，以及 `shopee_spec_auto_match_work_item` 的状态、尝试次数、下次尝试时间和租约；不得输出或复制 API Key、Provider 原始响应、商品原始 JSON 或个人数据。
-- 紧急回退只需关闭系统任务并停止使用 Admin 手动入口；保留运行记录和既有已确认映射用于审计，不删除数据，也不回滚 #194。

server/app/goauto/access/modules.go

@@ -136,8 +136,6 @@ func moduleKeyForAPI(path string) string {
 		return ModulePDDProducts
 	case strings.HasPrefix(path, "/api/admin/v1/shopee-products"):
 		return ModuleShopeeProducts
-	case strings.HasPrefix(path, "/api/admin/v1/shopee-spec-auto-match"):
-		return ModuleShopeeProducts
 	case strings.HasPrefix(path, "/api/admin/v1/syb-products/sync-runs"):
 		return ModuleSYBSyncRuns
 	case strings.HasPrefix(path, "/api/admin/v1/syb-products"):

server/app/goauto/access/purchaser.go

@@ -48,8 +48,6 @@ var AdminAPIs = []APIPermission{
 	{"AI 建议颜色映射", "/api/admin/v1/shopee-products/:productId/specs/mapping/suggest-colors", "POST", true},
 	{"AI 建议尺码映射", "/api/admin/v1/shopee-products/:productId/specs/mapping/suggest-sizes", "POST", true},
 	{"一键匹配并确认颜色尺码", "/api/admin/v1/shopee-products/:productId/specs/mapping/auto-match", "POST", true},
-	{"手动执行虾皮规格自动匹配", "/api/admin/v1/shopee-spec-auto-match/runs", "POST", false},
-	{"查看最近虾皮规格自动匹配", "/api/admin/v1/shopee-spec-auto-match/runs/latest", "GET", false},
 
 	{"查看 SYB 商品", "/api/admin/v1/syb-products", "GET", true},
 	{"查看 SYB 商品详情", "/api/admin/v1/syb-products/:productId", "GET", true},

server/app/goauto/access/purchaser_test.go

@@ -15,12 +15,10 @@ func TestPurchaserPermissionMatrixHasNoDuplicates(t *testing.T) {
 
 func TestPurchaserExcludesAdministratorOperations(t *testing.T) {
 	denied := map[string]bool{
-		"POST /api/admin/v1/devices/:deviceId/disable":         true,
-		"POST /api/admin/v1/syb-products/import":               true,
-		"POST /api/admin/v1/collection-rules":                  true,
-		"PUT /api/admin/v1/ai-matching-settings":               true,
-		"POST /api/admin/v1/shopee-spec-auto-match/runs":       true,
-		"GET /api/admin/v1/shopee-spec-auto-match/runs/latest": true,
+		"POST /api/admin/v1/devices/:deviceId/disable": true,
+		"POST /api/admin/v1/syb-products/import":       true,
+		"POST /api/admin/v1/collection-rules":          true,
+		"PUT /api/admin/v1/ai-matching-settings":       true,
 	}
 	for _, permission := range PurchaserAPIs() {
 		if denied[permission.Method+" "+permission.Path] {

server/app/goauto/aimatching/service.go

@@ -25,28 +25,12 @@ const (
 	defaultAutoConfirmMinConfidence = 0.9
 )
 
-// MaxProviderTimeout is also the total budget used by composite synchronous
-// AI operations. This keeps their HTTP response inside the Admin and API
-// transport windows even when an operation needs more than one provider call.
-const MaxProviderTimeout = 600 * time.Second
-
 // Service owns the internal AI Provider configuration. The API key exception
 // is deliberately narrow: it is plain text only in the dedicated settings
 // table and is returned only by the administrator settings handler.
 type Service struct {
-	DB                    *gorm.DB
-	HTTPClient            *http.Client
-	ProviderFailureLogger func(ProviderFailureDiagnostic)
-}
-
-// ProviderFailureDiagnostic deliberately contains no URL, model, prompt,
-// candidates, response body or credential. It is safe for operational logs.
-type ProviderFailureDiagnostic struct {
-	CallID     string
-	Operation  string
-	Kind       string
-	StatusCode int
-	Duration   time.Duration
+	DB         *gorm.DB
+	HTTPClient *http.Client
 }
 
 func NewService(db *gorm.DB) *Service {

server/app/goauto/aimatching/suggest.go

@@ -10,9 +10,6 @@ import (
 	"net/http"
 	"strings"
 	"time"
-
-	log "github.com/go-admin-team/go-admin-core/logger"
-	"github.com/google/uuid"
 )
 
 // Suggestion limits are enforced defensively here too, even though callers
@@ -98,26 +95,18 @@ func (s *Service) SuggestBatch(ctx context.Context, request SuggestRequest) (Sug
 	}
 	httpRequest.Header.Set("Authorization", "Bearer "+apiKey)
 	httpRequest.Header.Set("Content-Type", "application/json")
-	callID, startedAt := uuid.NewString(), time.Now()
 	response, err := s.httpClient().Do(httpRequest)
 	if err != nil {
-		s.logProviderFailure(ProviderFailureDiagnostic{CallID: callID, Operation: "suggest_batch", Kind: providerNetworkErrorKind(err), Duration: time.Since(startedAt)})
 		return SuggestResult{}, &Error{Code: CodeProviderUnavailable, Message: "AI 建议服务暂时不可用", Cause: err}
 	}
 	defer response.Body.Close()
 	limited := io.LimitReader(response.Body, 1<<20)
 	responseBody, readErr := io.ReadAll(limited)
-	if readErr != nil {
-		s.logProviderFailure(ProviderFailureDiagnostic{CallID: callID, Operation: "suggest_batch", Kind: "read_error", StatusCode: response.StatusCode, Duration: time.Since(startedAt)})
-		return SuggestResult{}, fail(CodeProviderUnavailable, "AI 建议服务暂时不可用")
-	}
-	if response.StatusCode < http.StatusOK || response.StatusCode >= http.StatusMultipleChoices {
-		s.logProviderFailure(ProviderFailureDiagnostic{CallID: callID, Operation: "suggest_batch", Kind: "http_status", StatusCode: response.StatusCode, Duration: time.Since(startedAt)})
+	if readErr != nil || response.StatusCode < http.StatusOK || response.StatusCode >= http.StatusMultipleChoices {
 		return SuggestResult{}, fail(CodeProviderUnavailable, "AI 建议服务暂时不可用")
 	}
 	raw, err := parseSuggestChoices(responseBody)
 	if err != nil {
-		s.logProviderFailure(ProviderFailureDiagnostic{CallID: callID, Operation: "suggest_batch", Kind: "invalid_response", StatusCode: response.StatusCode, Duration: time.Since(startedAt)})
 		return SuggestResult{}, fail(CodeProviderUnavailable, "AI 建议响应无效")
 	}
 
@@ -156,22 +145,6 @@ func (s *Service) SuggestBatch(ctx context.Context, request SuggestRequest) (Sug
 	return SuggestResult{Decisions: decisions, Provider: ProviderOpenAICompatible, Model: setting.Model}, nil
 }
 
-func (s *Service) logProviderFailure(diagnostic ProviderFailureDiagnostic) {
-	if s.ProviderFailureLogger != nil {
-		s.ProviderFailureLogger(diagnostic)
-		return
-	}
-	log.Warnf("AI provider call failed: call_id=%s operation=%s kind=%s status=%d duration_ms=%d",
-		diagnostic.CallID, diagnostic.Operation, diagnostic.Kind, diagnostic.StatusCode, diagnostic.Duration.Milliseconds())
-}
-
-func providerNetworkErrorKind(err error) string {
-	if errors.Is(err, context.DeadlineExceeded) {
-		return "timeout"
-	}
-	return "network_error"
-}
-
 func suggestSystemPrompt(dimension string) string {
 	noun := "颜色或尺码"
 	switch dimension {

server/app/goauto/aimatching/suggest_test.go

@@ -6,9 +6,7 @@ import (
 	"fmt"
 	"net/http"
 	"net/http/httptest"
-	"strings"
 	"testing"
-	"time"
 
 	"go-admin/app/goauto/models"
 
@@ -136,93 +134,3 @@ func TestSuggestBatchRequiresConfiguredProvider(t *testing.T) {
 		t.Fatalf("expected CodeNotConfigured, got %v", target.Code)
 	}
 }
-
-func TestSuggestBatchLogsSafeDiagnosticForProvider502(t *testing.T) {
-	const sensitiveBody = "api-key-and-provider-body-must-not-be-logged"
-	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		http.Error(w, sensitiveBody, http.StatusBadGateway)
-	}))
-	defer server.Close()
-
-	db := openSuggestTestDB(t)
-	seedEnabledSetting(t, db, server.URL)
-	var diagnostic ProviderFailureDiagnostic
-	service := NewService(db)
-	service.ProviderFailureLogger = func(value ProviderFailureDiagnostic) { diagnostic = value }
-
-	_, err := service.SuggestBatch(context.Background(), SuggestRequest{
-		Sources:    []SuggestSource{{ID: "s1", Label: "sensitive-source"}},
-		Candidates: []SuggestCandidate{{ID: "c1", Label: "sensitive-candidate"}},
-	})
-	if err == nil {
-		t.Fatal("expected provider failure")
-	}
-	if diagnostic.Operation != "suggest_batch" || diagnostic.Kind != "http_status" || diagnostic.StatusCode != http.StatusBadGateway || diagnostic.CallID == "" {
-		t.Fatalf("unexpected diagnostic: %+v", diagnostic)
-	}
-	printed := fmt.Sprintf("%+v", diagnostic)
-	for _, secret := range []string{sensitiveBody, "sensitive-source", "sensitive-candidate", "test-key", server.URL} {
-		if strings.Contains(printed, secret) {
-			t.Fatalf("diagnostic leaked %q: %s", secret, printed)
-		}
-	}
-}
-
-func TestSuggestBatchClassifiesProviderTimeout(t *testing.T) {
-	db := openSuggestTestDB(t)
-	seedEnabledSetting(t, db, "http://provider.invalid")
-	var diagnostic ProviderFailureDiagnostic
-	service := NewService(db)
-	service.HTTPClient = &http.Client{Transport: roundTripFunc(func(*http.Request) (*http.Response, error) {
-		return nil, context.DeadlineExceeded
-	})}
-	service.ProviderFailureLogger = func(value ProviderFailureDiagnostic) { diagnostic = value }
-
-	_, err := service.SuggestBatch(context.Background(), SuggestRequest{
-		Sources: []SuggestSource{{ID: "s1", Label: "黑色"}}, Candidates: []SuggestCandidate{{ID: "c1", Label: "黑色"}},
-	})
-	if err == nil || diagnostic.Kind != "timeout" || diagnostic.StatusCode != 0 {
-		t.Fatalf("timeout was not safely classified: diagnostic=%+v err=%v", diagnostic, err)
-	}
-}
-
-func TestSuggestBatchClassifiesInvalidResponseWithoutLoggingBody(t *testing.T) {
-	const sensitiveBody = "not-json-with-sensitive-provider-details"
-	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		_, _ = w.Write([]byte(sensitiveBody))
-	}))
-	defer server.Close()
-	db := openSuggestTestDB(t)
-	seedEnabledSetting(t, db, server.URL)
-	var diagnostic ProviderFailureDiagnostic
-	service := NewService(db)
-	service.ProviderFailureLogger = func(value ProviderFailureDiagnostic) { diagnostic = value }
-
-	_, err := service.SuggestBatch(context.Background(), SuggestRequest{
-		Sources: []SuggestSource{{ID: "s1", Label: "黑色"}}, Candidates: []SuggestCandidate{{ID: "c1", Label: "黑色"}},
-	})
-	if err == nil || diagnostic.Kind != "invalid_response" || strings.Contains(fmt.Sprintf("%+v", diagnostic), sensitiveBody) {
-		t.Fatalf("invalid response diagnostic is unsafe or missing: diagnostic=%+v err=%v", diagnostic, err)
-	}
-}
-
-func TestSuggestBatchAllowsProviderResponseAfterTwoSeconds(t *testing.T) {
-	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		time.Sleep(2100 * time.Millisecond)
-		chatCompletionResponder(`{"suggestions":[{"sourceId":"s1","candidateId":"c1","confidence":0.95,"reason":"match"}]}`)(w, r)
-	}))
-	defer server.Close()
-
-	db := openSuggestTestDB(t)
-	seedEnabledSetting(t, db, server.URL)
-	result, err := NewService(db).SuggestBatch(context.Background(), SuggestRequest{
-		Sources: []SuggestSource{{ID: "s1", Label: "黑色"}}, Candidates: []SuggestCandidate{{ID: "c1", Label: "黑色"}},
-	})
-	if err != nil || result.Decisions["s1"].CandidateID != "c1" {
-		t.Fatalf("delayed provider response failed: result=%+v err=%v", result, err)
-	}
-}
-
-type roundTripFunc func(*http.Request) (*http.Response, error)
-
-func (fn roundTripFunc) RoundTrip(request *http.Request) (*http.Response, error) { return fn(request) }

server/app/goauto/device/handler.go

@@ -48,7 +48,7 @@ func (handler Handler) Register(context *gin.Context) {
 		writeError(context, internalError(err))
 		return
 	}
-	response, err := NewService(db).Register(context.Request.Context(), request, bearerToken(context.GetHeader("Authorization")))
+	response, err := NewService(db).Register(context.Request.Context(), request, bearerToken(context.GetHeader("Authorization")), strings.TrimSpace(context.GetHeader("X-GoAuto-Device-Recovery-Code")))
 	if err != nil {
 		writeError(context, err)
 		return
@@ -84,6 +84,26 @@ func (handler Handler) RevokeToken(context *gin.Context) {
 	handler.adminAction(context, (*Service).RevokeToken)
 }
 
+func (handler Handler) ResetIdentity(context *gin.Context) {
+	deviceID, err := strconv.ParseUint(context.Param("deviceId"), 10, 64)
+	if err != nil || deviceID == 0 {
+		writeError(context, invalidRequest("deviceId 无效"))
+		return
+	}
+	db, err := handler.database(context)
+	if err != nil {
+		writeError(context, internalError(err))
+		return
+	}
+	response, err := NewService(db).ResetIdentity(context.Request.Context(), deviceID)
+	if err != nil {
+		writeError(context, err)
+		return
+	}
+	context.Header("Cache-Control", "no-store")
+	context.JSON(http.StatusOK, gin.H{"code": http.StatusOK, "data": response})
+}
+
 func (handler Handler) adminAction(context *gin.Context, action func(*Service, stdcontext.Context, uint64) error) {
 	deviceID, err := strconv.ParseUint(context.Param("deviceId"), 10, 64)
 	if err != nil || deviceID == 0 {

server/app/goauto/device/router.go

@@ -22,5 +22,6 @@ func InitRouter(engine *gin.Engine, authMiddleware *jwt.GinJWTMiddleware) {
 	admin := engine.Group("/api/admin/v1/devices").Use(authMiddleware.MiddlewareFunc()).Use(middleware.AuthCheckRole())
 	admin.GET("", handler.List)
 	admin.POST("/:deviceId/disable", middleware.RequireRoleKey("admin"), handler.Disable)
+	admin.POST("/:deviceId/identity-reset", middleware.RequireRoleKey("admin"), handler.ResetIdentity)
 	admin.POST("/:deviceId/token/revoke", middleware.RequireRoleKey("admin"), handler.RevokeToken)
 }

server/app/goauto/device/service.go

@@ -28,8 +28,12 @@ const (
 	CodeDeviceTaskMismatch = "DEVICE_TASK_MISMATCH"
 	CodeDeviceNotFound     = "DEVICE_NOT_FOUND"
 	CodeInternal           = "INTERNAL_ERROR"
+	CodeRecoveryInvalid    = "DEVICE_RECOVERY_INVALID"
+	CodeRecoveryExpired    = "DEVICE_RECOVERY_EXPIRED"
 )
 
+const deviceRecoveryLifetime = 10 * time.Minute
+
 type ServiceError struct {
 	Code      string
 	Message   string
@@ -67,6 +71,11 @@ type RegisterResponse struct {
 	Replayed                 bool   `json:"replayed,omitempty"`
 }
 
+type ResetIdentityResponse struct {
+	DeviceID  uint64    `json:"deviceId"`
+	ExpiresAt time.Time `json:"expiresAt"`
+}
+
 type Service struct {
 	DB                *gorm.DB
 	Now               func() time.Time
@@ -108,6 +117,10 @@ func tokenMatches(token, digest string) bool {
 	return subtle.ConstantTimeCompare(got[:], want) == 1
 }
 
+func digestMatches(value string, digest *string) bool {
+	return digest != nil && tokenMatches(value, *digest)
+}
+
 // Authenticate returns the active device represented by a bearer token.
 // Agent feature packages use this method so token verification stays in one
 // place and raw tokens never leave request memory.
@@ -131,7 +144,11 @@ func (service *Service) Authenticate(ctx context.Context, token string) (models.
 	return result, nil
 }
 
-func (service *Service) Register(ctx context.Context, request RegisterRequest, presentedToken string) (RegisterResponse, error) {
+func (service *Service) Register(ctx context.Context, request RegisterRequest, presentedToken string, recoveryCodes ...string) (RegisterResponse, error) {
+	recoveryCode := ""
+	if len(recoveryCodes) > 0 {
+		recoveryCode = recoveryCodes[0]
+	}
 	request = normalizeRegisterRequest(request)
 	if err := validateRegisterRequest(request); err != nil {
 		return RegisterResponse{}, err
@@ -162,9 +179,15 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 		if existing.Status == models.DeviceStatusDisabled {
 			return RegisterResponse{}, &ServiceError{Code: CodeDeviceDisabled, Message: "设备已停用", Retryable: false}
 		}
-		if !tokenMatches(presentedToken, existing.TokenDigest) {
-			return RegisterResponse{}, &ServiceError{
-				Code: CodeInstallIDConflict, Message: "installId 已注册，需要该设备的有效 Token", Retryable: false,
+		usingRecovery := !tokenMatches(presentedToken, existing.TokenDigest)
+		if usingRecovery {
+			validCode := recoveryCode != "" && digestMatches(recoveryCode, existing.RecoveryCodeDigest)
+			autoRecovery := recoveryCode == "" && existing.RecoveryCodeDigest == nil && existing.RecoveryExpiresAt != nil && existing.RecoveryUsedAt == nil
+			if !validCode && !autoRecovery {
+				return RegisterResponse{}, &ServiceError{Code: CodeInstallIDConflict, Message: "installId 已注册，需要该设备的有效 Token", Retryable: false}
+			}
+			if existing.RecoveryExpiresAt == nil || !service.Now().Before(*existing.RecoveryExpiresAt) {
+				return RegisterResponse{}, &ServiceError{Code: CodeRecoveryExpired, Message: "设备身份重置窗口已过期，请在后台重新操作", Retryable: false}
 			}
 		}
 		updates := map[string]any{
@@ -175,6 +198,20 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 		if request.Capabilities != nil {
 			updates["capabilities_json"] = encodeCapabilities(request.Capabilities)
 		}
+		if usingRecovery {
+			newToken, generateErr := service.GenerateToken()
+			if generateErr != nil {
+				return RegisterResponse{}, internalError(generateErr)
+			}
+			now := service.Now()
+			updates["token_digest"] = tokenDigest(newToken)
+			updates["token_issued_at"] = now
+			updates["recovery_code_digest"] = nil
+			updates["recovery_expires_at"] = nil
+			updates["recovery_used_at"] = now
+			updates["status"] = models.DeviceStatusOnline
+			response.DeviceToken = newToken
+		}
 		result := db.Model(&models.AgentDevice{}).
 			Where("id = ? AND token_digest = ? AND token_revoked_at IS NULL", existing.ID, existing.TokenDigest).
 			Updates(updates)
@@ -222,6 +259,42 @@ func (service *Service) Register(ctx context.Context, request RegisterRequest, p
 	return response, nil
 }
 
+// ResetIdentity invalidates the current token and opens a short-lived automatic
+// re-registration window for the same installId. It retains the device row and
+// task bindings, so no recovery code needs to leave the Admin workflow.
+func (service *Service) ResetIdentity(ctx context.Context, deviceID uint64) (ResetIdentityResponse, error) {
+	if service.DB == nil {
+		return ResetIdentityResponse{}, internalError(errors.New("database is nil"))
+	}
+	now := service.Now()
+	expiresAt := now.Add(deviceRecoveryLifetime)
+	response := ResetIdentityResponse{DeviceID: deviceID, ExpiresAt: expiresAt}
+	err := service.DB.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
+		var device models.AgentDevice
+		if err := tx.First(&device, deviceID).Error; errors.Is(err, gorm.ErrRecordNotFound) {
+			return &ServiceError{Code: CodeDeviceNotFound, Message: "设备不存在", Retryable: false}
+		} else if err != nil {
+			return internalError(err)
+		}
+		if device.Status == models.DeviceStatusDisabled {
+			return &ServiceError{Code: CodeDeviceDisabled, Message: "设备已停用", Retryable: false}
+		}
+		invalidatedToken, generateErr := service.GenerateToken()
+		if generateErr != nil {
+			return internalError(generateErr)
+		}
+		return tx.Model(&models.AgentDevice{}).Where("id = ?", deviceID).Updates(map[string]any{
+			"token_digest": tokenDigest(invalidatedToken), "token_issued_at": now,
+			"recovery_code_digest": nil, "recovery_expires_at": expiresAt,
+			"recovery_used_at": nil, "status": models.DeviceStatusOffline,
+		}).Error
+	})
+	if err != nil {
+		return ResetIdentityResponse{}, err
+	}
+	return response, nil
+}
+
 func (service *Service) Disable(ctx context.Context, deviceID uint64) error {
 	return service.deactivate(ctx, deviceID, false)
 }

server/app/goauto/device/service_test.go

@@ -185,6 +185,72 @@ func TestDisableAndRevokePreventFurtherAuthentication(t *testing.T) {
 	}
 }
 
+func TestResetIdentityRecoversSameDeviceAndRotatesToken(t *testing.T) {
+	db := openTestDatabase(t)
+	service := newTestService(t, db)
+	tokens := []string{"original-token", "invalidated-token", "replacement-token"}
+	service.GenerateToken = func() (string, error) {
+		if len(tokens) == 0 {
+			t.Fatal("unexpected token generation")
+		}
+		value := tokens[0]
+		tokens = tokens[1:]
+		return value, nil
+	}
+	request := validRegisterRequest()
+	registered, err := service.Register(context.Background(), request, "")
+	if err != nil {
+		t.Fatalf("first registration: %v", err)
+	}
+	recovery, err := service.ResetIdentity(context.Background(), registered.DeviceID)
+	if err != nil {
+		t.Fatalf("reset identity: %v", err)
+	}
+	if !recovery.ExpiresAt.After(service.Now()) {
+		t.Fatalf("unexpected recovery response: %+v", recovery)
+	}
+	request.RequestID = uuid.NewString()
+	recovered, err := service.Register(context.Background(), request, "original-token")
+	if err != nil {
+		t.Fatalf("recover registration: %v", err)
+	}
+	if recovered.DeviceID != registered.DeviceID || recovered.DeviceToken != "replacement-token" {
+		t.Fatalf("unexpected recovery result: %+v", recovered)
+	}
+	var stored models.AgentDevice
+	if err := db.First(&stored, registered.DeviceID).Error; err != nil {
+		t.Fatalf("load recovered device: %v", err)
+	}
+	if stored.InstallID != strings.ToLower(request.InstallID) || stored.Status != models.DeviceStatusOnline || stored.RecoveryCodeDigest != nil || stored.RecoveryUsedAt == nil {
+		t.Fatalf("recovery did not retain device safely: %+v", stored)
+	}
+	request.RequestID = uuid.NewString()
+	if _, err := service.Register(context.Background(), request, "original-token"); serviceErrorCode(t, err) != CodeInstallIDConflict {
+		t.Fatal("automatic recovery window was reusable")
+	}
+}
+
+func TestResetIdentityRejectsExpiredRecoveryCode(t *testing.T) {
+	db := openTestDatabase(t)
+	service := newTestService(t, db)
+	tokens := []string{"original-token", "invalidated-token"}
+	service.GenerateToken = func() (string, error) { value := tokens[0]; tokens = tokens[1:]; return value, nil }
+	request := validRegisterRequest()
+	registered, err := service.Register(context.Background(), request, "")
+	if err != nil {
+		t.Fatal(err)
+	}
+	recovery, err := service.ResetIdentity(context.Background(), registered.DeviceID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	service.Now = func() time.Time { return recovery.ExpiresAt.Add(time.Second) }
+	request.RequestID = uuid.NewString()
+	if _, err := service.Register(context.Background(), request, ""); serviceErrorCode(t, err) != CodeRecoveryExpired {
+		t.Fatalf("expected expired recovery code, got %v", err)
+	}
+}
+
 func TestRegistrationValidationRejectsInvalidUUIDs(t *testing.T) {
 	service := newTestService(t, openTestDatabase(t))
 	request := validRegisterRequest()

server/app/goauto/migrations/migrate.go

@@ -34,8 +34,6 @@ func MigratedModels() []any {
 		&models.PDDProduct{},
 		&models.AIMatchingSetting{},
 		&models.ShopeeProduct{},
-		&models.ShopeeSpecAutoMatchRun{},
-		&models.ShopeeSpecAutoMatchWorkItem{},
 		&models.SYBProduct{},
 		&models.SYBSession{},
 		&models.SYBShop{},

server/app/goauto/models/schema.go

@@ -39,6 +39,9 @@ type AgentDevice struct {
 	TokenDigest            string     `json:"-" gorm:"size:64;not null;uniqueIndex:ux_agent_device_token_digest"`
 	TokenIssuedAt          time.Time  `json:"tokenIssuedAt" gorm:"not null"`
 	TokenRevokedAt         *time.Time `json:"tokenRevokedAt" gorm:"index"`
+	RecoveryCodeDigest     *string    `json:"-" gorm:"size:64;index"`
+	RecoveryExpiresAt      *time.Time `json:"-" gorm:"index"`
+	RecoveryUsedAt         *time.Time `json:"-"`
 	LastRegisterRequestID  *string    `json:"-" gorm:"size:36;uniqueIndex:ux_agent_device_last_register_request_id"`
 	LastHeartbeatRequestID *string    `json:"-" gorm:"size:36;uniqueIndex:ux_agent_device_last_heartbeat_request_id"`
 	LastHeartbeatAt        *time.Time `json:"lastHeartbeatAt" gorm:"index"`

server/app/goauto/models/shopee_spec_auto_match.go

@@ -1,56 +0,0 @@
-package models
-
-import "time"
-
-// ShopeeSpecAutoMatchRun is one scheduled or administrator-triggered batch.
-// ActiveSlot is 1 only while running; its nullable unique index is the
-// database-level cross-process mutex shared by both trigger paths.
-type ShopeeSpecAutoMatchRun struct {
-	ID             uint64     `json:"id" gorm:"primaryKey;autoIncrement"`
-	RequestID      string     `json:"requestId" gorm:"size:36;not null;uniqueIndex:ux_shopee_spec_auto_match_run_request"`
-	Trigger        string     `json:"trigger" gorm:"size:16;not null;index"`
-	Status         string     `json:"status" gorm:"size:24;not null;index"`
-	ActiveSlot     *uint8     `json:"-" gorm:"uniqueIndex:ux_shopee_spec_auto_match_run_active"`
-	LeaseOwner     string     `json:"-" gorm:"size:64;not null;default:''"`
-	LeaseExpiresAt *time.Time `json:"-" gorm:"index"`
-	RequestedBy    *uint64    `json:"requestedBy,omitempty"`
-	BatchLimit     int        `json:"batchLimit" gorm:"not null;default:20"`
-	ScannedCount   int        `json:"scannedCount" gorm:"not null;default:0"`
-	EligibleCount  int        `json:"eligibleCount" gorm:"not null;default:0"`
-	ProcessedCount int        `json:"processedCount" gorm:"not null;default:0"`
-	ConfirmedCount int        `json:"confirmedCount" gorm:"not null;default:0"`
-	UnmatchedCount int        `json:"unmatchedCount" gorm:"not null;default:0"`
-	FailedCount    int        `json:"failedCount" gorm:"not null;default:0"`
-	ErrorSummary   string     `json:"errorSummary,omitempty" gorm:"size:500;not null;default:''"`
-	StartedAt      time.Time  `json:"startedAt" gorm:"not null"`
-	FinishedAt     *time.Time `json:"finishedAt,omitempty"`
-	CreatedAt      time.Time  `json:"createdAt"`
-	UpdatedAt      time.Time  `json:"updatedAt"`
-}
-
-func (ShopeeSpecAutoMatchRun) TableName() string { return "shopee_spec_auto_match_run" }
-
-// ShopeeSpecAutoMatchWorkItem remembers the last input fingerprint and retry
-// state for each product, preventing unchanged low-confidence inputs from
-// repeatedly spending AI calls.
-type ShopeeSpecAutoMatchWorkItem struct {
-	ID               uint64     `json:"id" gorm:"primaryKey;autoIncrement"`
-	ShopeeProductID  uint64     `json:"shopeeProductId" gorm:"not null;uniqueIndex:ux_shopee_spec_auto_match_work_product"`
-	RunID            *uint64    `json:"runId,omitempty" gorm:"index"`
-	InputFingerprint string     `json:"inputFingerprint" gorm:"size:128;not null;default:'';index"`
-	Status           string     `json:"status" gorm:"size:24;not null;index"`
-	AttemptCount     int        `json:"attemptCount" gorm:"not null;default:0"`
-	NextAttemptAt    *time.Time `json:"nextAttemptAt,omitempty" gorm:"index"`
-	LeaseOwner       string     `json:"-" gorm:"size:64;not null;default:''"`
-	LeaseExpiresAt   *time.Time `json:"-" gorm:"index"`
-	ConfirmedCount   int        `json:"confirmedCount" gorm:"not null;default:0"`
-	UnmatchedCount   int        `json:"unmatchedCount" gorm:"not null;default:0"`
-	LastErrorCode    string     `json:"lastErrorCode,omitempty" gorm:"size:64;not null;default:''"`
-	LastError        string     `json:"lastError,omitempty" gorm:"size:500;not null;default:''"`
-	CreatedAt        time.Time  `json:"createdAt"`
-	UpdatedAt        time.Time  `json:"updatedAt"`
-}
-
-func (ShopeeSpecAutoMatchWorkItem) TableName() string {
-	return "shopee_spec_auto_match_work_item"
-}

server/app/goauto/purchase/ai_match_eligibility.go

@@ -32,7 +32,10 @@ type skuCombinationRow struct {
 }
 
 func sybSpecsTrusted(syb models.SYBProduct) bool {
-	return syb.ParseStatus == models.SYBParseStatusSuccess || syb.ManuallyConfirmed
+	if syb.ParseStatus == models.SYBParseStatusFailed {
+		return false
+	}
+	return strings.TrimSpace(syb.TargetColor) != "" || strings.TrimSpace(syb.TargetSize) != ""
 }
 
 func (s *Service) loadLatestSKUCombinations(ctx context.Context, pddIDs []uint64, dataset *batchPreviewDataset) error {
@@ -140,7 +143,10 @@ func aiMatchQualificationForDataset(id uint64, dataset batchPreviewDataset) aiMa
 		if request.TargetSize != "" {
 			size = matched.MappedSize
 		}
-		if validSKUCombination(dataset.skuCombinationsByPDD[pdd.ID], syb.TargetColor, syb.TargetSize, color, size) {
+		// 人工录入或外部导入的 PDD 档案可以没有采集任务 SKU 证据。没有
+		// 证据时只确认候选值；一旦有证据，仍必须命中同一个可售组合。
+		combinations := dataset.skuCombinationsByPDD[pdd.ID]
+		if len(combinations) == 0 || validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, color, size) {
 			return aiMatchQualification{Eligible: true, Request: request, MappedColor: mappedColor, MappedSize: mappedSize, Deterministic: &matched}
 		}
 	}

server/app/goauto/purchase/batch.go

@@ -479,8 +479,9 @@ func (s *Service) previewFromDataset(ctx context.Context, id uint64, dataset bat
 // enforcePersistedMatch is the #188 gate for the SYB list and batch-create
 // workflow. A transient deterministic result is not purchase readiness: the
 // color/size mapping must already be confirmed on the Shopee product and must
-// still identify one complete, available SKU combination from the latest
-// successful collection.
+// still identify one complete, available SKU combination when collection
+// evidence exists. Manually entered or externally imported PDD products may
+// legitimately have no such collection record.
 func (item *BatchPreviewItem) enforcePersistedMatch(id uint64, dataset batchPreviewDataset) {
 	if item.ReasonCode != "" && item.ReasonCode != CodeMappingRequired {
 		return
@@ -505,12 +506,7 @@ func (item *BatchPreviewItem) enforcePersistedMatch(id uint64, dataset batchPrev
 		return
 	}
 	combinations := dataset.skuCombinationsByPDD[pdd.ID]
-	if len(combinations) == 0 {
-		item.Eligible = false
-		item.ReasonCode, item.Reason, item.NextAction = CodeMappingRequired, "缺少当前 PDD 商品的完整可售 SKU 组合，请先重新采集", "open_pdd"
-		return
-	}
-	if !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
+	if len(combinations) > 0 && !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
 		item.Eligible = false
 		item.ReasonCode, item.Reason, item.NextAction = CodeMappingRequired, "已保存规格映射不属于当前可售的 PDD 规格组合，请重新匹配", "open_mapping"
 	}

server/app/goauto/purchase/batch_spec_match.go

@@ -50,11 +50,6 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 	if err != nil {
 		return BatchSpecMatchResponse{}, internal(err)
 	}
-	settings, err := aimatching.NewService(s.DB).Settings(ctx)
-	if err != nil {
-		return BatchSpecMatchResponse{}, internal(err)
-	}
-
 	response := BatchSpecMatchResponse{Items: make([]BatchSpecMatchItem, 0, len(ids))}
 	for _, id := range ids {
 		item := BatchSpecMatchItem{SYBProductID: id, Status: BatchSpecMatchFailed}
@@ -87,9 +82,11 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 			}
 		}
 		item.Source, item.Confidence = matched.Source, matched.Decision.Confidence
-		autoConfirm := qualification.Deterministic != nil || (matched.Source == aimatching.SourceAI && matched.Decision.Confidence != nil && *matched.Decision.Confidence >= settings.AutoConfirmMinConfidence && strings.TrimSpace(matched.Decision.Reason) != "")
+		// #200：在 SYB 批量入口，AI 只要返回了可保存的规格结果，就由后续的
+		// 候选与可售 SKU 组合校验决定是否放行；置信度仅保留为审计信息。
+		autoConfirm := qualification.Deterministic != nil || (matched.Source == aimatching.SourceAI && strings.TrimSpace(matched.Decision.Reason) != "")
 		if !autoConfirm {
-			item.Status, item.Reason = BatchSpecMatchPending, "匹配结果未达到自动确认阈值，请人工确认"
+			item.Status, item.Reason = BatchSpecMatchPending, "AI 未返回可用规格结果，请人工确认"
 			if strings.TrimSpace(matched.Decision.Reason) != "" {
 				item.Reason += "：" + strings.TrimSpace(matched.Decision.Reason)
 			}
@@ -104,7 +101,8 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 		if request.TargetSize != "" {
 			mappedSize = matched.MappedSize
 		}
-		if !mappingTargetsValid(specCandidates{Colors: request.Colors, Sizes: request.Sizes}, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) || !validSKUCombination(dataset.skuCombinationsByPDD[pdd.ID], syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) {
+		combinations := dataset.skuCombinationsByPDD[pdd.ID]
+		if !mappingTargetsValid(specCandidates{Colors: request.Colors, Sizes: request.Sizes}, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize) || (len(combinations) > 0 && !validSKUCombination(combinations, syb.TargetColor, syb.TargetSize, mappedColor, mappedSize)) {
 			item.Status, item.Reason = BatchSpecMatchPending, "AI 结果不是当前可售的 PDD 规格组合，请人工确认"
 			response.PendingCount++
 			response.Items = append(response.Items, item)
@@ -117,7 +115,7 @@ func (s *Service) BatchSpecMatch(ctx context.Context, req BatchSpecMatchRequest)
 			response.Items = append(response.Items, item)
 			continue
 		}
-		if _, err := shopeeproduct.NewService(s.DB).ApplyResolvedMappings(ctx, shopee.ID, uuid.NewString(), settings.AutoConfirmMinConfidence, writes); err != nil {
+		if _, err := shopeeproduct.NewService(s.DB).ApplyResolvedMappings(ctx, shopee.ID, uuid.NewString(), writes); err != nil {
 			item.Reason = "规格映射保存失败，请刷新后重试"
 			response.FailedCount++
 			response.Items = append(response.Items, item)

server/app/goauto/purchase/batch_spec_match_test.go

@@ -175,10 +175,10 @@ func TestBatchSpecMatchPersistsExactMatchBeforePurchaseCreation(t *testing.T) {
 	}
 }
 
-func TestManuallyConfirmedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T) {
+func TestExtractedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T) {
 	service, f := exactBatchSpecFixture(t)
 	if err := service.DB.Model(&models.SYBProduct{}).Where("id = ?", f.syb.ID).Updates(map[string]any{
-		"parse_status": models.SYBParseStatusUncertain, "manually_confirmed": true,
+		"parse_status": models.SYBParseStatusUncertain, "manually_confirmed": false,
 	}).Error; err != nil {
 		t.Fatal(err)
 	}
@@ -187,15 +187,15 @@ func TestManuallyConfirmedUncertainSpecsCanBeMatchedBeforePurchase(t *testing.T)
 
 	before, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || len(before.Items) != 1 || before.Items[0].Eligible || !before.Items[0].AIMatchEligible || before.Items[0].ProcessStage != ProcessStageColorMapping {
-		t.Fatalf("manually confirmed specs did not enter matching: %+v err=%v", before, err)
+		t.Fatalf("extracted uncertain specs did not enter matching: %+v err=%v", before, err)
 	}
 	matched, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || matched.AutoConfirmedCount != 1 || matcher.calls != 0 {
-		t.Fatalf("manual correction did not allow exact match: %+v calls=%d err=%v", matched, matcher.calls, err)
+		t.Fatalf("extracted uncertain specs did not allow exact match: %+v calls=%d err=%v", matched, matcher.calls, err)
 	}
 	after, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
 	if err != nil || !after.Items[0].Eligible || after.Items[0].ProcessStage != ProcessStagePurchaseReady {
-		t.Fatalf("saved mapping did not unlock manual correction: %+v err=%v", after, err)
+		t.Fatalf("saved mapping did not unlock extracted uncertain specs: %+v err=%v", after, err)
 	}
 }
 
@@ -265,21 +265,38 @@ func TestBatchPreviewAllowsUncertainParseAndMissingSKUCombination(t *testing.T)
 	}
 }
 
-func TestBatchSpecMatchLeavesLowConfidenceForManualHandling(t *testing.T) {
+func TestBatchSpecMatchAndPreviewAllowMissingSKUCombinationEvidence(t *testing.T) {
+	service, f := unresolvedBatchSpecFixture(t)
+	if err := service.DB.Where("pdd_product_id = ?", f.pdd.ID).Delete(&models.CollectionTask{}).Error; err != nil {
+		t.Fatal(err)
+	}
+	service.Matcher = &batchSpecMatcher{results: []aimatching.MatchResult{aiBatchResult(0.6)}}
+
+	matched, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
+	if err != nil || matched.AutoConfirmedCount != 1 || matched.PendingCount != 0 {
+		t.Fatalf("AI result without SKU evidence was not confirmed: %+v err=%v", matched, err)
+	}
+	preview, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
+	if err != nil || len(preview.Items) != 1 || !preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStagePurchaseReady {
+		t.Fatalf("missing SKU evidence unexpectedly blocked purchase: %+v err=%v", preview, err)
+	}
+}
+
+func TestBatchSpecMatchAutoConfirmsReturnedAIMatchRegardlessOfConfidence(t *testing.T) {
 	service, f := unresolvedBatchSpecFixture(t)
 	service.Matcher = &batchSpecMatcher{results: []aimatching.MatchResult{aiBatchResult(0.6)}}
 
 	response, err := service.BatchSpecMatch(context.Background(), BatchSpecMatchRequest{SYBProductIDs: []uint64{f.syb.ID}})
-	if err != nil || response.PendingCount != 1 || response.AutoConfirmedCount != 0 {
-		t.Fatalf("unexpected low-confidence result: %+v err=%v", response, err)
+	if err != nil || response.PendingCount != 0 || response.AutoConfirmedCount != 1 {
+		t.Fatalf("low-confidence AI result was not auto-confirmed: %+v err=%v", response, err)
 	}
 	mapping := savedColorMapping(t, service, f.shopee.ID)
-	if mapping == nil || mapping.PDDValue != "旧白色" || mapping.Status != shopeeproduct.MappingStatusConfirmed {
-		t.Fatalf("low-confidence result changed the saved mapping: %+v", mapping)
+	if mapping == nil || mapping.PDDValue != "米白色" || mapping.Status != shopeeproduct.MappingStatusConfirmed || mapping.Confidence == nil || *mapping.Confidence != 0.6 {
+		t.Fatalf("AI result was not saved as confirmed: %+v", mapping)
 	}
 	preview, err := service.BatchPreview(context.Background(), BatchPreviewRequest{SYBProductIDs: []uint64{f.syb.ID}})
-	if err != nil || preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStageColorMapping {
-		t.Fatalf("pending mapping unexpectedly became purchase-ready: %+v err=%v", preview, err)
+	if err != nil || !preview.Items[0].Eligible || preview.Items[0].ProcessStage != ProcessStagePurchaseReady {
+		t.Fatalf("saved AI result did not become purchase-ready: %+v err=%v", preview, err)
 	}
 }
 

server/app/goauto/purchase/batch_test.go

@@ -44,6 +44,27 @@ func TestBatchPreviewUsesPDDPriceAndExplainsIneligibleRows(t *testing.T) {
 	}
 }
 
+func TestSybSpecsTrustedOnlyBlocksFailedOrEmptyExtraction(t *testing.T) {
+	tests := []struct {
+		name  string
+		syb   models.SYBProduct
+		trust bool
+	}{
+		{"success", models.SYBProduct{ParseStatus: models.SYBParseStatusSuccess, TargetColor: "黑色", TargetSize: "XL"}, true},
+		{"uncertain with color", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain, TargetColor: "套装"}, true},
+		{"uncertain with size", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain, TargetSize: "均码"}, true},
+		{"failed with values", models.SYBProduct{ParseStatus: models.SYBParseStatusFailed, TargetColor: "黑色"}, false},
+		{"uncertain without values", models.SYBProduct{ParseStatus: models.SYBParseStatusUncertain}, false},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := sybSpecsTrusted(tt.syb); got != tt.trust {
+				t.Fatalf("sybSpecsTrusted=%v, want %v", got, tt.trust)
+			}
+		})
+	}
+}
+
 func TestBatchPreviewExposesIndependentCollectionEligibility(t *testing.T) {
 	db := testDB(t)
 	fixture := seed(t, db, liveCaps(), true)

server/app/goauto/shopeeproduct/auto_match.go

@@ -48,9 +48,6 @@ type autoMatchRef struct {
 // before the transaction; the transaction rechecks the complete spec context
 // and PDD candidate set so a stale decision can never be written.
 func (service *Service) AutoMatchMappings(ctx context.Context, id uint64, request AutoMatchRequest) (AutoMatchResponse, error) {
-	ctx, cancel := context.WithTimeout(ctx, aimatching.MaxProviderTimeout)
-	defer cancel()
-
 	requestID := strings.TrimSpace(request.RequestID)
 	if _, err := uuid.Parse(requestID); err != nil {
 		return AutoMatchResponse{}, invalidRequest("requestId 必须是 UUID")

server/app/goauto/shopeeproduct/auto_match_batch.go

@@ -1,360 +0,0 @@
-package shopeeproduct
-
-import (
-	"context"
-	"crypto/sha256"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"strings"
-	"time"
-
-	"go-admin/app/goauto/models"
-
-	"github.com/google/uuid"
-	"gorm.io/gorm"
-)
-
-const (
-	SpecAutoMatchInvokeTarget  = "GoAutoShopeeSpecAutoMatch"
-	defaultAutoMatchBatchLimit = 20
-	autoMatchLeaseDuration     = 30 * time.Minute
-	autoMatchRetryDelay        = time.Hour
-	maxAutoMatchAttempts       = 3
-)
-
-type AutoMatchRunView struct {
-	models.ShopeeSpecAutoMatchRun
-	AlreadyRunning bool `json:"alreadyRunning,omitempty"`
-	Replayed       bool `json:"replayed,omitempty"`
-}
-
-// StartAutoMatchRun acquires the single database-backed activity slot. A
-// repeated requestId is idempotent; a concurrent trigger receives the current
-// run instead of starting a second batch.
-func (service *Service) StartAutoMatchRun(ctx context.Context, trigger, requestID string, requestedBy *uint64, batchLimit int) (AutoMatchRunView, bool, error) {
-	if _, err := uuid.Parse(strings.TrimSpace(requestID)); err != nil {
-		return AutoMatchRunView{}, false, invalidRequest("requestId 必须是 UUID")
-	}
-	if trigger != "manual" && trigger != "scheduled" {
-		return AutoMatchRunView{}, false, invalidRequest("trigger 无效")
-	}
-	if batchLimit <= 0 {
-		batchLimit = defaultAutoMatchBatchLimit
-	}
-	if batchLimit > 100 {
-		return AutoMatchRunView{}, false, invalidRequest("batchLimit 不能超过 100")
-	}
-	now := time.Now().UTC()
-	lease := now.Add(autoMatchLeaseDuration)
-	owner := uuid.NewString()
-	one := uint8(1)
-	var result models.ShopeeSpecAutoMatchRun
-	created := false
-	err := service.DB.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
-		if err := tx.Model(&models.ShopeeSpecAutoMatchRun{}).
-			Where("status = ? AND active_slot = ? AND lease_expires_at < ?", "running", 1, now).
-			Updates(map[string]any{"status": "failed", "active_slot": nil, "lease_owner": "", "lease_expires_at": nil, "error_summary": "上次运行租约过期，已安全释放", "finished_at": now}).Error; err != nil {
-			return err
-		}
-		if err := tx.Where("request_id = ?", requestID).First(&result).Error; err == nil {
-			return nil
-		} else if !errors.Is(err, gorm.ErrRecordNotFound) {
-			return err
-		}
-		if err := tx.Where("status = ? AND active_slot = ?", "running", 1).First(&result).Error; err == nil {
-			result.ActiveSlot = &one
-			return nil
-		} else if !errors.Is(err, gorm.ErrRecordNotFound) {
-			return err
-		}
-		result = models.ShopeeSpecAutoMatchRun{RequestID: requestID, Trigger: trigger, Status: "running", ActiveSlot: &one, LeaseOwner: owner, LeaseExpiresAt: &lease, RequestedBy: requestedBy, BatchLimit: batchLimit, StartedAt: now}
-		if err := tx.Create(&result).Error; err != nil {
-			return err
-		}
-		created = true
-		return nil
-	})
-	if err != nil {
-		// A unique-slot race means another instance won after our read. Return
-		// its run as the stable, non-error result.
-		if findErr := service.DB.WithContext(ctx).Where("status = ? AND active_slot = ?", "running", 1).First(&result).Error; findErr == nil {
-			return AutoMatchRunView{ShopeeSpecAutoMatchRun: result, AlreadyRunning: true}, false, nil
-		}
-		return AutoMatchRunView{}, false, internalError(err)
-	}
-	view := AutoMatchRunView{ShopeeSpecAutoMatchRun: result}
-	if !created {
-		view.AlreadyRunning = result.RequestID != requestID
-		view.Replayed = result.RequestID == requestID
-	}
-	return view, created, nil
-}
-
-func (service *Service) LatestAutoMatchRun(ctx context.Context) (*AutoMatchRunView, error) {
-	var run models.ShopeeSpecAutoMatchRun
-	err := service.DB.WithContext(ctx).Order("id DESC").First(&run).Error
-	if errors.Is(err, gorm.ErrRecordNotFound) {
-		return nil, nil
-	}
-	if err != nil {
-		return nil, internalError(err)
-	}
-	return &AutoMatchRunView{ShopeeSpecAutoMatchRun: run}, nil
-}
-
-// ProcessAutoMatchRun performs a bounded batch. It is safe to call from an
-// HTTP-launched goroutine or the scheduler because only the run owning the
-// active slot may update and finish itself.
-func (service *Service) ProcessAutoMatchRun(ctx context.Context, runID uint64) error {
-	var run models.ShopeeSpecAutoMatchRun
-	if err := service.DB.WithContext(ctx).First(&run, runID).Error; err != nil {
-		return err
-	}
-	if run.Status != "running" || run.ActiveSlot == nil || *run.ActiveSlot != 1 {
-		return nil
-	}
-	limit := run.BatchLimit
-	if limit <= 0 || limit > 100 {
-		limit = defaultAutoMatchBatchLimit
-	}
-	var candidates []models.ShopeeProduct
-	queryLimit := limit * 25
-	if queryLimit < 100 {
-		queryLimit = 100
-	}
-	if queryLimit > 1000 {
-		queryLimit = 1000
-	}
-	if err := service.DB.WithContext(ctx).
-		Joins("JOIN pdd_product ON pdd_product.id = shopee_product.pdd_product_id AND pdd_product.status = ?", "active").
-		Where("shopee_product.pdd_product_id IS NOT NULL").
-		Order("shopee_product.updated_at ASC, shopee_product.id ASC").Limit(queryLimit).Find(&candidates).Error; err != nil {
-		service.finishAutoMatchRun(run, "failed", 0, 0, 0, 0, 0, 1, "扫描符合条件的商品失败")
-		return err
-	}
-
-	eligible, processed, confirmed, unmatched, failed := 0, 0, 0, 0, 0
-	firstError := ""
-	for _, product := range candidates {
-		if processed >= limit {
-			break
-		}
-		fingerprint, ok, err := service.autoMatchEligibility(ctx, product)
-		if err != nil {
-			failed++
-			if firstError == "" {
-				firstError = safeBatchError(err)
-			}
-			continue
-		}
-		if !ok {
-			continue
-		}
-		eligible++
-		work, claimed, err := service.claimAutoMatchWork(ctx, run, product.ID, fingerprint)
-		if err != nil {
-			failed++
-			if firstError == "" {
-				firstError = safeBatchError(err)
-			}
-			continue
-		}
-		if !claimed {
-			continue
-		}
-		processed++
-		service.renewAutoMatchRun(run)
-		response, matchErr := service.AutoMatchMappings(ctx, product.ID, AutoMatchRequest{RequestID: uuid.NewString(), SpecContextVersion: fingerprint[:64]})
-		// fingerprint begins with the 64-character context version.
-		postFingerprint := fingerprint
-		if next, _, nextErr := service.autoMatchEligibility(ctx, product); nextErr == nil && next != "" {
-			postFingerprint = next
-		}
-		if matchErr != nil {
-			failed++
-			if firstError == "" {
-				firstError = safeBatchError(matchErr)
-			}
-			service.completeAutoMatchWork(work, postFingerprint, 0, 0, matchErr)
-			continue
-		}
-		confirmed += response.ConfirmedCount
-		unmatched += response.UnmatchedCount
-		service.completeAutoMatchWork(work, postFingerprint, response.ConfirmedCount, response.UnmatchedCount, nil)
-	}
-	status := "completed"
-	if failed > 0 {
-		status = "completed_partial"
-	}
-	return service.finishAutoMatchRun(run, status, len(candidates), eligible, processed, confirmed, unmatched, failed, firstError)
-}
-
-func (service *Service) autoMatchEligibility(ctx context.Context, product models.ShopeeProduct) (string, bool, error) {
-	if product.PDDProductID == nil {
-		return "", false, nil
-	}
-	var pdd models.PDDProduct
-	if err := service.DB.WithContext(ctx).First(&pdd, *product.PDDProductID).Error; err != nil {
-		return "", false, err
-	}
-	if pdd.Status != "active" {
-		return "", false, nil
-	}
-	shopeeSpecs, err := Unmarshal(product.SpecsJSON)
-	if err != nil {
-		return "", false, err
-	}
-	shared, needsMatch := false, false
-	for _, role := range []string{RoleColor, RoleSize} {
-		pddValues, err := selectablePDDValues(pdd.SpecsJSON, role)
-		if err != nil {
-			return "", false, err
-		}
-		if len(pddValues) == 0 {
-			continue
-		}
-		for _, dimension := range shopeeSpecs {
-			if dimension.Role != role || len(dimension.Values) == 0 {
-				continue
-			}
-			shared = true
-			for _, value := range dimension.Values {
-				if value.Mapping == nil || value.Mapping.Status != MappingStatusConfirmed || !pddValues[value.Mapping.PDDValue] {
-					needsMatch = true
-				}
-			}
-		}
-	}
-	if !shared || !needsMatch {
-		return "", false, nil
-	}
-	contextVersion := computeSpecContextVersion(product.PDDProductID, product.SpecsJSON, pdd.SpecsJSON)
-	var setting struct{ UpdatedAt time.Time }
-	_ = service.DB.WithContext(ctx).Table((models.AIMatchingSetting{}).TableName()).Select("updated_at").Where("id = ?", 1).Scan(&setting).Error
-	h := sha256.Sum256([]byte(contextVersion + "\x00" + setting.UpdatedAt.UTC().Format(time.RFC3339Nano)))
-	// Keeping the context version as a prefix lets ProcessAutoMatchRun pass the
-	// exact version to #194 without re-reading a potentially drifting input.
-	return contextVersion + hex.EncodeToString(h[:]), true, nil
-}
-
-func (service *Service) claimAutoMatchWork(ctx context.Context, run models.ShopeeSpecAutoMatchRun, productID uint64, fingerprint string) (models.ShopeeSpecAutoMatchWorkItem, bool, error) {
-	now := time.Now().UTC()
-	lease := now.Add(autoMatchLeaseDuration)
-	var work models.ShopeeSpecAutoMatchWorkItem
-	err := service.DB.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
-		err := tx.Where("shopee_product_id = ?", productID).First(&work).Error
-		if errors.Is(err, gorm.ErrRecordNotFound) {
-			work = models.ShopeeSpecAutoMatchWorkItem{ShopeeProductID: productID, RunID: &run.ID, InputFingerprint: fingerprint, Status: "running", AttemptCount: 1, LeaseOwner: run.LeaseOwner, LeaseExpiresAt: &lease}
-			return tx.Create(&work).Error
-		}
-		if err != nil {
-			return err
-		}
-		if work.InputFingerprint == fingerprint {
-			if work.Status == "completed" || work.Status == "unmatched" || work.AttemptCount >= maxAutoMatchAttempts || (work.NextAttemptAt != nil && work.NextAttemptAt.After(now)) || (work.Status == "running" && work.LeaseExpiresAt != nil && work.LeaseExpiresAt.After(now)) {
-				return errWorkNotClaimed
-			}
-		} else {
-			work.AttemptCount = 0
-		}
-		updates := map[string]any{"run_id": run.ID, "input_fingerprint": fingerprint, "status": "running", "attempt_count": work.AttemptCount + 1, "next_attempt_at": nil, "lease_owner": run.LeaseOwner, "lease_expires_at": lease, "last_error_code": "", "last_error": ""}
-		if err := tx.Model(&models.ShopeeSpecAutoMatchWorkItem{}).Where("id = ?", work.ID).Updates(updates).Error; err != nil {
-			return err
-		}
-		return tx.First(&work, work.ID).Error
-	})
-	if errors.Is(err, errWorkNotClaimed) {
-		return work, false, nil
-	}
-	return work, err == nil, err
-}
-
-var errWorkNotClaimed = errors.New("auto match work not claimed")
-
-func (service *Service) completeAutoMatchWork(work models.ShopeeSpecAutoMatchWorkItem, fingerprint string, confirmed, unmatched int, matchErr error) {
-	now := time.Now().UTC()
-	updates := map[string]any{"input_fingerprint": fingerprint, "lease_owner": "", "lease_expires_at": nil, "confirmed_count": confirmed, "unmatched_count": unmatched}
-	if matchErr == nil {
-		if unmatched > 0 {
-			updates["status"] = "unmatched"
-		} else {
-			updates["status"] = "completed"
-		}
-		updates["next_attempt_at"], updates["last_error_code"], updates["last_error"] = nil, "", ""
-	} else {
-		code := batchErrorCode(matchErr)
-		updates["status"], updates["last_error_code"], updates["last_error"] = "failed", code, safeBatchError(matchErr)
-		if code == CodeAIUnavailable && work.AttemptCount < maxAutoMatchAttempts {
-			next := now.Add(autoMatchRetryDelay)
-			updates["next_attempt_at"] = next
-		} else {
-			updates["next_attempt_at"] = nil
-		}
-	}
-	_ = service.DB.Model(&models.ShopeeSpecAutoMatchWorkItem{}).Where("id = ?", work.ID).Updates(updates).Error
-}
-
-func (service *Service) renewAutoMatchRun(run models.ShopeeSpecAutoMatchRun) {
-	lease := time.Now().UTC().Add(autoMatchLeaseDuration)
-	_ = service.DB.Model(&models.ShopeeSpecAutoMatchRun{}).Where("id = ? AND status = ? AND lease_owner = ?", run.ID, "running", run.LeaseOwner).Update("lease_expires_at", lease).Error
-}
-
-func (service *Service) finishAutoMatchRun(run models.ShopeeSpecAutoMatchRun, status string, scanned, eligible, processed, confirmed, unmatched, failed int, summary string) error {
-	now := time.Now().UTC()
-	updates := map[string]any{"status": status, "active_slot": nil, "lease_owner": "", "lease_expires_at": nil, "scanned_count": scanned, "eligible_count": eligible, "processed_count": processed, "confirmed_count": confirmed, "unmatched_count": unmatched, "failed_count": failed, "error_summary": truncateBatchText(summary), "finished_at": now}
-	return service.DB.Model(&models.ShopeeSpecAutoMatchRun{}).Where("id = ? AND status = ? AND lease_owner = ?", run.ID, "running", run.LeaseOwner).Updates(updates).Error
-}
-
-func batchErrorCode(err error) string {
-	var serviceErr *ServiceError
-	if errors.As(err, &serviceErr) {
-		return serviceErr.Code
-	}
-	return CodeInternal
-}
-
-func safeBatchError(err error) string {
-	var serviceErr *ServiceError
-	if errors.As(err, &serviceErr) {
-		return truncateBatchText(serviceErr.Message)
-	}
-	return "服务端处理失败"
-}
-
-func truncateBatchText(value string) string {
-	runes := []rune(strings.TrimSpace(value))
-	if len(runes) > 500 {
-		runes = runes[:500]
-	}
-	return string(runes)
-}
-
-type scheduledAutoMatchArgs struct {
-	BatchLimit int `json:"batchLimit"`
-}
-
-type ScheduledAutoMatchJob struct{}
-
-func (ScheduledAutoMatchJob) Exec(_ interface{}) error {
-	return errors.New("规格自动匹配定时任务缺少数据库连接")
-}
-
-func (ScheduledAutoMatchJob) ExecWithDB(db *gorm.DB, arg interface{}) error {
-	args := scheduledAutoMatchArgs{BatchLimit: defaultAutoMatchBatchLimit}
-	if raw, ok := arg.(string); ok && strings.TrimSpace(raw) != "" {
-		if err := json.Unmarshal([]byte(raw), &args); err != nil {
-			return fmt.Errorf("规格自动匹配参数不是合法 JSON: %w", err)
-		}
-	}
-	if args.BatchLimit < 1 || args.BatchLimit > 100 {
-		return errors.New("规格自动匹配 batchLimit 必须在 1 到 100 之间")
-	}
-	service := NewService(db)
-	run, created, err := service.StartAutoMatchRun(context.Background(), "scheduled", uuid.NewString(), nil, args.BatchLimit)
-	if err != nil || !created {
-		return err
-	}
-	return service.ProcessAutoMatchRun(context.Background(), run.ID)
-}

server/app/goauto/shopeeproduct/auto_match_batch_test.go

@@ -1,86 +0,0 @@
-package shopeeproduct
-
-import (
-	"context"
-	"testing"
-
-	"go-admin/app/goauto/models"
-
-	"github.com/google/uuid"
-)
-
-func TestAutoMatchRunIsIdempotentAndGloballySerialized(t *testing.T) {
-	db := openTestDB(t)
-	service := NewService(db)
-	requestID := uuid.NewString()
-	first, created, err := service.StartAutoMatchRun(context.Background(), "manual", requestID, nil, 20)
-	if err != nil || !created {
-		t.Fatalf("first=%+v created=%v err=%v", first, created, err)
-	}
-	replay, created, err := service.StartAutoMatchRun(context.Background(), "manual", requestID, nil, 20)
-	if err != nil || created || !replay.Replayed || replay.ID != first.ID {
-		t.Fatalf("replay=%+v created=%v err=%v", replay, created, err)
-	}
-	concurrent, created, err := service.StartAutoMatchRun(context.Background(), "scheduled", uuid.NewString(), nil, 20)
-	if err != nil || created || !concurrent.AlreadyRunning || concurrent.ID != first.ID {
-		t.Fatalf("concurrent=%+v created=%v err=%v", concurrent, created, err)
-	}
-}
-
-func TestProcessAutoMatchRunConfirmsExactSizeAndFinishes(t *testing.T) {
-	db := openTestDB(t)
-	pdd := seedPDDProduct(t, db, "active")
-	service := NewService(db)
-	createdProduct, err := service.Create(context.Background(), CreateRequest{
-		RequestID: uuid.NewString(), ShopeeItemID: "SP-BATCH-EXACT", PDDProductID: &pdd.ID,
-		Specs: []SpecDimension{{Name: "尺码", Role: RoleSize, Values: []SpecValue{{Name: " xl ", Source: ValueSourceImport}}}},
-	})
-	if err != nil {
-		t.Fatal(err)
-	}
-	run, started, err := service.StartAutoMatchRun(context.Background(), "manual", uuid.NewString(), nil, 20)
-	if err != nil || !started {
-		t.Fatalf("run=%+v started=%v err=%v", run, started, err)
-	}
-	if err := service.ProcessAutoMatchRun(context.Background(), run.ID); err != nil {
-		t.Fatal(err)
-	}
-	latest, err := service.LatestAutoMatchRun(context.Background())
-	if err != nil {
-		t.Fatal(err)
-	}
-	if latest == nil || latest.Status != "completed" || latest.ProcessedCount != 1 || latest.ConfirmedCount != 1 || latest.ActiveSlot != nil {
-		t.Fatalf("latest=%+v", latest)
-	}
-	detail, err := service.Detail(context.Background(), createdProduct.Product.ID)
-	if err != nil {
-		t.Fatal(err)
-	}
-	mapping := detail.Product.Specs[0].Values[0].Mapping
-	if mapping == nil || mapping.Status != MappingStatusConfirmed || mapping.PDDValue != "XL" {
-		t.Fatalf("mapping=%+v", mapping)
-	}
-}
-
-func TestUnchangedUnmatchedWorkIsNotClaimedAgain(t *testing.T) {
-	db := openTestDB(t)
-	service := NewService(db)
-	one := uint8(1)
-	run := models.ShopeeSpecAutoMatchRun{RequestID: uuid.NewString(), Trigger: "manual", Status: "running", ActiveSlot: &one, LeaseOwner: uuid.NewString(), BatchLimit: 20}
-	if err := db.Create(&run).Error; err != nil {
-		t.Fatal(err)
-	}
-	work, claimed, err := service.claimAutoMatchWork(context.Background(), run, 99, "fingerprint")
-	if err != nil || !claimed {
-		t.Fatalf("work=%+v claimed=%v err=%v", work, claimed, err)
-	}
-	service.completeAutoMatchWork(work, "fingerprint", 0, 1, nil)
-	_, claimed, err = service.claimAutoMatchWork(context.Background(), run, 99, "fingerprint")
-	if err != nil || claimed {
-		t.Fatalf("unchanged unmatched claimed=%v err=%v", claimed, err)
-	}
-	_, claimed, err = service.claimAutoMatchWork(context.Background(), run, 99, "changed")
-	if err != nil || !claimed {
-		t.Fatalf("changed input claimed=%v err=%v", claimed, err)
-	}
-}

server/app/goauto/shopeeproduct/auto_match_test.go

@@ -5,13 +5,11 @@ import (
 	"encoding/json"
 	"net/http"
 	"net/http/httptest"
-	"strings"
 	"sync/atomic"
 	"testing"
 
 	"go-admin/app/goauto/models"
 
-	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
 )
 
@@ -118,20 +116,6 @@ func TestAutoMatchMappingsProviderFailureDoesNotWrite(t *testing.T) {
 	}
 }
 
-func TestWriteErrorMapsAIUnavailableToStructured503(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	recorder := httptest.NewRecorder()
-	context, _ := gin.CreateTestContext(recorder)
-	writeError(context, aiUnavailable("AI 匹配服务暂时不可用，请稍后重试"))
-
-	if recorder.Code != http.StatusServiceUnavailable {
-		t.Fatalf("status = %d, body = %s", recorder.Code, recorder.Body.String())
-	}
-	if !strings.Contains(recorder.Body.String(), `"code":"AI_MATCHING_UNAVAILABLE"`) {
-		t.Fatalf("response is not structured: %s", recorder.Body.String())
-	}
-}
-
 func TestAutoMatchMappingsRejectsContextDriftBeforeAtomicWrite(t *testing.T) {
 	db := openTestDB(t)
 	pdd := seedPDDProduct(t, db, "active")

server/app/goauto/shopeeproduct/batch_resolved_mapping.go

@@ -7,7 +7,8 @@ import (
 
 // ResolvedMappingItem is one mapping produced by the narrowly scoped SYB
 // batch-match entry point. Confirmed writes are restricted to auditable exact
-// matches and high-confidence AI decisions; SetMapping remains pending-first.
+// matches and AI decisions with a returned match reason; SetMapping remains
+// pending-first.
 type ResolvedMappingItem struct {
 	Dimension  string
 	ValueName  string
@@ -20,14 +21,11 @@ type ResolvedMappingItem struct {
 
 // ApplyResolvedMappings atomically applies the color/size mappings needed by
 // one SYB detail row. It is independent from SetMapping so #188's explicit
-// high-confidence exception cannot change existing callers' pending semantics.
-func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, requestID string, minimumConfidence float64, items []ResolvedMappingItem) (SaveResponse, error) {
+// confirmed-match exception cannot change existing callers' pending semantics.
+func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, requestID string, items []ResolvedMappingItem) (SaveResponse, error) {
 	if len(items) == 0 || len(items) > 2 {
 		return SaveResponse{}, invalidRequest("必须包含 1 至 2 个待写入规格映射")
 	}
-	if minimumConfidence < 0 || minimumConfidence > 1 {
-		return SaveResponse{}, invalidRequest("自动确认阈值无效")
-	}
 	seen := make(map[string]bool, len(items))
 	for _, item := range items {
 		key := strings.TrimSpace(item.Dimension) + "\x00" + strings.TrimSpace(item.ValueName)
@@ -41,9 +39,6 @@ func (service *Service) ApplyResolvedMappings(ctx context.Context, id uint64, re
 		if item.Status != MappingStatusConfirmed || strings.TrimSpace(item.Reason) == "" {
 			return SaveResponse{}, invalidRequest("自动确认映射必须包含确认状态和匹配理由")
 		}
-		if item.Source == MappingSourceAIMatch && (item.Confidence == nil || *item.Confidence < minimumConfidence) {
-			return SaveResponse{}, invalidRequest("AI 自动确认必须达到置信度阈值")
-		}
 		if err := service.validatePDDMappingTarget(ctx, id, item.Dimension, item.ValueName, strings.TrimSpace(item.PDDValue)); err != nil {
 			return SaveResponse{}, err
 		}

server/app/goauto/shopeeproduct/handler.go

@@ -1,7 +1,6 @@
 package shopeeproduct
 
 import (
-	"context"
 	"encoding/json"
 	"errors"
 	"io"
@@ -301,45 +300,6 @@ func (handler Handler) AutoMatchMappings(c *gin.Context) {
 	c.JSON(http.StatusOK, gin.H{"code": 200, "data": response})
 }
 
-func (handler Handler) StartAutoMatchRun(c *gin.Context) {
-	var request struct {
-		RequestID string `json:"requestId"`
-	}
-	if err := decodeJSON(c, &request); err != nil {
-		writeError(c, invalidRequest("请求 JSON 无效"))
-		return
-	}
-	service, ok := handler.service(c)
-	if !ok {
-		return
-	}
-	operator := currentUserID(c)
-	run, created, err := service.StartAutoMatchRun(c.Request.Context(), "manual", request.RequestID, &operator, defaultAutoMatchBatchLimit)
-	if err != nil {
-		writeError(c, err)
-		return
-	}
-	if created {
-		go func(runID uint64, db *gorm.DB) {
-			_ = NewService(db).ProcessAutoMatchRun(context.Background(), runID)
-		}(run.ID, service.DB)
-	}
-	c.JSON(http.StatusAccepted, gin.H{"code": 200, "data": gin.H{"run": run}})
-}
-
-func (handler Handler) LatestAutoMatchRun(c *gin.Context) {
-	service, ok := handler.service(c)
-	if !ok {
-		return
-	}
-	run, err := service.LatestAutoMatchRun(c.Request.Context())
-	if err != nil {
-		writeError(c, err)
-		return
-	}
-	c.JSON(http.StatusOK, gin.H{"code": 200, "data": gin.H{"run": run}})
-}
-
 func (handler Handler) BatchDelete(c *gin.Context) {
 	var request BatchDeleteRequest
 	if err := decodeJSON(c, &request); err != nil {

server/app/goauto/shopeeproduct/router.go

@@ -10,9 +10,6 @@ import (
 func InitRouter(engine *gin.Engine, auth *jwt.GinJWTMiddleware) {
 	handler := Handler{}
 	admin := engine.Group("/api/admin/v1/shopee-products").Use(auth.MiddlewareFunc()).Use(middleware.AuthCheckRole())
-	adminOnlyRuns := engine.Group("/api/admin/v1/shopee-spec-auto-match/runs").Use(auth.MiddlewareFunc()).Use(middleware.AuthCheckRole()).Use(middleware.RequireRoleKey("admin"))
-	adminOnlyRuns.POST("", handler.StartAutoMatchRun)
-	adminOnlyRuns.GET("/latest", handler.LatestAutoMatchRun)
 	admin.GET("", handler.List)
 	admin.POST("", handler.Create)
 	admin.POST("/batch-delete", handler.BatchDelete)

server/app/jobs/examples.go

@@ -4,7 +4,6 @@ import (
 	"fmt"
 	"time"
 
-	"go-admin/app/goauto/shopeeproduct"
 	"go-admin/app/goauto/sybimport"
 )
 
@@ -13,9 +12,8 @@ import (
 // 字典 key 可以配置到 自动任务 调用目标 中；
 func InitJob() {
 	jobList = map[string]JobExec{
-		"ExamplesOne":                           ExamplesOne{},
-		sybimport.HourlySyncInvokeTarget:        sybimport.HourlySyncJob{},
-		shopeeproduct.SpecAutoMatchInvokeTarget: shopeeproduct.ScheduledAutoMatchJob{},
+		"ExamplesOne":                    ExamplesOne{},
+		sybimport.HourlySyncInvokeTarget: sybimport.HourlySyncJob{},
 		// ...
 	}
 }

server/cmd/api/server.go

@@ -54,12 +54,6 @@ var (
 	}
 )
 
-// The synchronous Admin AI endpoints allow a provider timeout of up to 600
-// seconds and the browser waits 610 seconds. Keep the HTTP server alive a
-// little longer so it can return the domain response instead of truncating
-// the connection and surfacing a proxy-level 502.
-const minimumAPIWriteTimeout = 620 * time.Second
-
 var AppRouters = make([]func(), 0)
 
 func init() {
@@ -131,15 +125,11 @@ func run() error {
 		)
 	}
 
-	writeTimeout, err := validatedAPIWriteTimeout(config.ApplicationConfig.WriterTimeout)
-	if err != nil {
-		return err
-	}
 	srv := &http.Server{
 		Addr:         fmt.Sprintf("%s:%d", config.ApplicationConfig.Host, config.ApplicationConfig.Port),
 		Handler:      sdk.Runtime.GetEngine(),
 		ReadTimeout:  time.Duration(config.ApplicationConfig.ReadTimeout) * time.Second,
-		WriteTimeout: writeTimeout,
+		WriteTimeout: time.Duration(config.ApplicationConfig.WriterTimeout) * time.Second,
 	}
 
 	go func() {
@@ -203,14 +193,6 @@ func run() error {
 	return nil
 }
 
-func validatedAPIWriteTimeout(seconds int) (time.Duration, error) {
-	timeout := time.Duration(seconds) * time.Second
-	if timeout < minimumAPIWriteTimeout {
-		return 0, fmt.Errorf("application writetimeout must be at least %s for synchronous AI requests", minimumAPIWriteTimeout)
-	}
-	return timeout, nil
-}
-
 type policyLoader interface {
 	LoadPolicy() error
 }

server/cmd/api/server_timeout_test.go

@@ -1,19 +0,0 @@
-package api
-
-import (
-	"testing"
-	"time"
-)
-
-func TestValidatedAPIWriteTimeoutProtectsSynchronousAIRequests(t *testing.T) {
-	if _, err := validatedAPIWriteTimeout(2); err == nil {
-		t.Fatal("two-second write timeout must be rejected")
-	}
-	got, err := validatedAPIWriteTimeout(620)
-	if err != nil {
-		t.Fatalf("620-second write timeout should be accepted: %v", err)
-	}
-	if got != 620*time.Second {
-		t.Fatalf("write timeout = %s, want 620s", got)
-	}
-}

server/cmd/migrate/migration/version-local/1787983800000_device_identity_recovery.go

@@ -0,0 +1,25 @@
+package version_local
+
+import (
+	"runtime"
+
+	goautomigrations "go-admin/app/goauto/migrations"
+	"go-admin/cmd/migrate/migration"
+	common "go-admin/common/models"
+
+	"gorm.io/gorm"
+)
+
+func init() {
+	_, fileName, _, _ := runtime.Caller(0)
+	migration.Migrate.SetVersion(migration.GetFilename(fileName), migrateDeviceIdentityRecovery)
+}
+
+func migrateDeviceIdentityRecovery(db *gorm.DB, version string) error {
+	return db.Transaction(func(tx *gorm.DB) error {
+		if err := goautomigrations.Migrate(tx); err != nil {
+			return err
+		}
+		return tx.Create(&common.Migration{Version: version}).Error
+	})
+}

server/cmd/migrate/migration/version-local/1788290000000_shopee_spec_auto_match.go

@@ -1,47 +0,0 @@
-package version_local
-
-import (
-	"errors"
-	"runtime"
-
-	goautomigrations "go-admin/app/goauto/migrations"
-	"go-admin/app/goauto/shopeeproduct"
-	jobsmodels "go-admin/app/jobs/models"
-	"go-admin/cmd/migrate/migration"
-	common "go-admin/common/models"
-
-	"gorm.io/gorm"
-)
-
-func init() {
-	_, fileName, _, _ := runtime.Caller(0)
-	migration.Migrate.SetVersion(migration.GetFilename(fileName), migrateShopeeSpecAutoMatch)
-}
-
-func migrateShopeeSpecAutoMatch(db *gorm.DB, version string) error {
-	return db.Transaction(func(tx *gorm.DB) error {
-		if err := goautomigrations.Migrate(tx); err != nil {
-			return err
-		}
-		if err := ensureShopeeSpecAutoMatchJob(tx); err != nil {
-			return err
-		}
-		return tx.Create(&common.Migration{Version: version}).Error
-	})
-}
-
-func ensureShopeeSpecAutoMatchJob(db *gorm.DB) error {
-	var existing jobsmodels.SysJob
-	err := db.Where("invoke_target = ?", shopeeproduct.SpecAutoMatchInvokeTarget).First(&existing).Error
-	if err == nil {
-		return nil
-	}
-	if !errors.Is(err, gorm.ErrRecordNotFound) {
-		return err
-	}
-	return db.Create(&jobsmodels.SysJob{
-		JobName: "蝦皮规格自动匹配", JobGroup: "GoAuto", JobType: 2,
-		CronExpression: "0 15 * * * *", InvokeTarget: shopeeproduct.SpecAutoMatchInvokeTarget,
-		Args: `{"batchLimit":20}`, MisfirePolicy: 1, Concurrent: 1, Status: 1,
-	}).Error
-}

server/cmd/migrate/migration/version-local/1788290000000_shopee_spec_auto_match_test.go

@@ -1,50 +0,0 @@
-package version_local
-
-import (
-	"testing"
-
-	"go-admin/app/goauto/shopeeproduct"
-	jobsmodels "go-admin/app/jobs/models"
-
-	"gorm.io/driver/sqlite"
-	"gorm.io/gorm"
-)
-
-func TestEnsureShopeeSpecAutoMatchJobIsDisabledIdempotentAndPreservesChanges(t *testing.T) {
-	db, err := gorm.Open(sqlite.Open("file:shopee-spec-auto-match-job?mode=memory&cache=shared"), &gorm.Config{})
-	if err != nil {
-		t.Fatal(err)
-	}
-	if err := db.AutoMigrate(&jobsmodels.SysJob{}); err != nil {
-		t.Fatal(err)
-	}
-	if err := ensureShopeeSpecAutoMatchJob(db); err != nil {
-		t.Fatal(err)
-	}
-	var job jobsmodels.SysJob
-	if err := db.Where("invoke_target = ?", shopeeproduct.SpecAutoMatchInvokeTarget).First(&job).Error; err != nil {
-		t.Fatal(err)
-	}
-	if job.Status != 1 || job.CronExpression != "0 15 * * * *" || job.Args != `{"batchLimit":20}` {
-		t.Fatalf("unexpected seed: %+v", job)
-	}
-	if err := db.Model(&job).Updates(map[string]any{"status": 2, "cron_expression": "0 30 * * * *", "args": `{"batchLimit":5}`}).Error; err != nil {
-		t.Fatal(err)
-	}
-	if err := ensureShopeeSpecAutoMatchJob(db); err != nil {
-		t.Fatal(err)
-	}
-	var count int64
-	if err := db.Model(&jobsmodels.SysJob{}).Where("invoke_target = ?", shopeeproduct.SpecAutoMatchInvokeTarget).Count(&count).Error; err != nil {
-		t.Fatal(err)
-	}
-	if count != 1 {
-		t.Fatalf("count=%d", count)
-	}
-	if err := db.Where("invoke_target = ?", shopeeproduct.SpecAutoMatchInvokeTarget).First(&job).Error; err != nil {
-		t.Fatal(err)
-	}
-	if job.Status != 2 || job.CronExpression != "0 30 * * * *" || job.Args != `{"batchLimit":5}` {
-		t.Fatalf("admin changes overwritten: %+v", job)
-	}
-}

server/config/settings.full.yml

@@ -9,7 +9,7 @@ settings:
     # 端口号
     port: 8000 # 服务端口号
     readtimeout: 1
-    writertimeout: 620
+    writertimeout: 2
     # 数据权限功能开关
     enabledp: false
   ssl:

server/config/settings.yml

@@ -9,7 +9,7 @@ settings:
     # 端口号
     port: 8000 # 服务端口号
     readtimeout: 1
-    writertimeout: 620
+    writertimeout: 2
     # 数据权限功能开关
     enabledp: false
   logger:
@@ -84,4 +84,4 @@ settings:
 #        blockingTimeout: 5
 #        reclaimInterval: 1
   locker:
-    redis:
+    redis:

web/src/api/goauto/devices.js

@@ -21,3 +21,10 @@ export function revokeDeviceToken(deviceId) {
     method: 'post'
   })
 }
+
+export function resetDeviceIdentity(deviceId) {
+  return request({
+    url: `/api/admin/v1/devices/${deviceId}/identity-reset`,
+    method: 'post'
+  })
+}

web/src/api/goauto/shopee-products.js

@@ -70,14 +70,6 @@ export function autoMatchShopeeSpecMappings(productId, data) {
   return request({ url: `/api/admin/v1/shopee-products/${productId}/specs/mapping/auto-match`, method: 'post', data, timeout: aiSuggestTimeoutMs })
 }
 
-export function startShopeeSpecAutoMatchRun(data) {
-  return request({ url: '/api/admin/v1/shopee-spec-auto-match/runs', method: 'post', data })
-}
-
-export function getLatestShopeeSpecAutoMatchRun() {
-  return request({ url: '/api/admin/v1/shopee-spec-auto-match/runs/latest', method: 'get' })
-}
-
 export function batchDeleteShopeeProducts(data) {
   return request({ url: '/api/admin/v1/shopee-products/batch-delete', method: 'post', data })
 }

web/src/views/goauto/devices/index.vue

@@ -68,8 +68,14 @@
               </span>
             </template>
           </el-table-column>
-          <el-table-column v-if="isAdmin" label="操作" width="190" fixed="right">
+          <el-table-column v-if="isAdmin" label="操作" width="270" fixed="right">
             <template #default="{ row }">
+              <el-button
+                type="warning"
+                link
+                :disabled="row.status === 'disabled'"
+                @click="confirmIdentityReset(row)"
+              >重置设备身份</el-button>
               <el-button
                 type="danger"
                 link
@@ -116,7 +122,7 @@
 <script>
 import { ElMessage, ElMessageBox } from 'element-plus'
 import { Refresh, RefreshLeft, Search } from '@element-plus/icons-vue'
-import { disableDevice, listDevices, revokeDeviceToken } from '@/api/goauto/devices'
+import { disableDevice, listDevices, resetDeviceIdentity, revokeDeviceToken } from '@/api/goauto/devices'
 import { downloadAgentAppRelease, listAgentAppReleases, setCurrentAgentAppRelease, uploadAgentAppRelease } from '@/api/goauto/agent-app-releases'
 import { createRequestId } from '@/utils/request-id'
 
@@ -191,6 +197,16 @@ export default {
       await revokeDeviceToken(row.id)
       ElMessage.success('设备 Token 已吊销')
       await this.getList()
+    },
+    async confirmIdentityReset(row) {
+      await ElMessageBox.confirm(
+        `将立即使“${row.name}”当前 Token 失效，并开启 10 分钟自动重新注册窗口。手机 Agent 保持运行时会自动恢复原设备 #${row.id}，已分配的待领取任务保持不变。`,
+        '确认重置设备身份',
+        { type: 'warning', confirmButtonText: '确认重置', cancelButtonText: '取消', distinguishCancelAndClose: true }
+      )
+      const response = await resetDeviceIdentity(row.id)
+      ElMessage.success(`已开启自动重新注册窗口，有效至 ${new Date(response.data.expiresAt).toLocaleString()}`)
+      await this.getList()
     }
   }
 }

web/src/views/goauto/shopee-products/index.vue

@@ -1,7 +1,7 @@
 <template>
   <BasicLayout><template #wrapper>
     <el-card class="page-card" shadow="never">
-      <el-form :model="query" :inline="true" class="search-form" @submit.prevent="search"><el-form-item><el-button type="primary" :icon="Plus" @click="openCreate">添加</el-button></el-form-item><el-form-item label="搜索"><el-input v-model="query.keyword" placeholder="虾皮商品ID、标题或店铺" clearable @keyup.enter="search" /></el-form-item><el-form-item label="范围"><el-select v-model="query.status" style="width:150px"><el-option label="全部（不含已删除）" value="" /><el-option label="已删除" value="deleted" /></el-select></el-form-item><el-form-item><el-button type="primary" :icon="Search" @click="search">查询</el-button><el-button :icon="RefreshLeft" @click="reset">重置</el-button></el-form-item><el-form-item><el-button :icon="Delete" type="danger" plain :disabled="selectedProducts.length === 0" @click="openBatchDelete">删除{{ selectedProducts.length ? ` (${selectedProducts.length})` : '' }}</el-button></el-form-item><el-form-item v-if="isAdmin"><el-button type="success" plain :loading="autoMatchRun.submitting" :disabled="autoMatchRun.latest?.status === 'running'" @click="startAutoMatchRun">{{ autoMatchRun.latest?.status === 'running' ? '自动匹配进行中' : '执行规格自动匹配' }}</el-button><span class="run-summary">{{ autoMatchRunSummary }}</span></el-form-item></el-form>
+      <el-form :model="query" :inline="true" class="search-form" @submit.prevent="search"><el-form-item><el-button type="primary" :icon="Plus" @click="openCreate">添加</el-button></el-form-item><el-form-item label="搜索"><el-input v-model="query.keyword" placeholder="虾皮商品ID、标题或店铺" clearable @keyup.enter="search" /></el-form-item><el-form-item label="范围"><el-select v-model="query.status" style="width:150px"><el-option label="全部（不含已删除）" value="" /><el-option label="已删除" value="deleted" /></el-select></el-form-item><el-form-item><el-button type="primary" :icon="Search" @click="search">查询</el-button><el-button :icon="RefreshLeft" @click="reset">重置</el-button></el-form-item><el-form-item><el-button :icon="Delete" type="danger" plain :disabled="selectedProducts.length === 0" @click="openBatchDelete">删除{{ selectedProducts.length ? ` (${selectedProducts.length})` : '' }}</el-button></el-form-item></el-form>
       <el-alert v-if="query.status === 'deleted'" title="当前显示已删除商品，可逐条恢复。恢复后原有 PDD 关联与规格映射保持不变。" type="warning" :closable="false" show-icon class="notice" />
       <el-table ref="productTable" v-loading="loading" :data="products" row-key="id" border stripe empty-text="暂无虾皮商品" @selection-change="handleSelectionChange"><el-table-column v-if="query.status !== 'deleted'" type="selection" width="48" /><el-table-column label="参考图" width="76"><template #default="{ row }"><el-image v-if="row.imageUrl" :src="row.imageUrl" fit="cover" class="thumb" :preview-src-list="[row.imageUrl]" preview-teleported /><div v-else class="thumb placeholder">无图</div></template></el-table-column><el-table-column label="虾皮商品ID" prop="shopeeItemId" min-width="140" /><el-table-column label="标题 / 店铺" min-width="220"><template #default="{ row }"><div class="primary">{{ row.title || '资料待完善' }}</div><div class="muted">{{ row.shopName || '尚未填写店铺' }}</div></template></el-table-column><el-table-column label="售价" width="120"><template #default="{ row }">{{ priceText(row) }}</template></el-table-column><el-table-column label="PDD 商品" min-width="160"><template #default="{ row }"><a v-if="row.pddProductId" class="link" href="javascript:void(0)" @click="openPddDetail(row.pddProductId)">PDD-{{ row.pddProductId }} ↗</a><span v-else class="muted">未关联</span></template></el-table-column><el-table-column label="映射状态" min-width="180"><template #default="{ row }"><el-tag :type="mappingMeta(row).type">{{ mappingMeta(row).label }}</el-tag></template></el-table-column><el-table-column label="操作" width="150" fixed="right"><template #default="{ row }"><el-button v-if="row.deleted" type="primary" link @click="restore(row)">恢复</el-button><el-button v-else type="primary" link @click="openDetail(row.id)">详情</el-button></template></el-table-column></el-table>
       <pagination v-show="total > 0" v-model:current-page="query.page" v-model:page-size="query.pageSize" :total="total" @pagination="load" /><p class="scope-note">本页不支持按虾皮订单号搜索——商品档案不含订单数据；订单相关字段在 SYB 商品模块与采购任务模块查看。</p>
@@ -19,9 +19,9 @@
 </template>
 
 <script>
-import { ElMessage, ElMessageBox } from 'element-plus'
+import { ElMessage } from 'element-plus'
 import { Plus, RefreshLeft, Search, Delete } from '@element-plus/icons-vue'
-import { listShopeeProducts, createShopeeProduct, restoreShopeeProduct, batchDeleteShopeeProducts, startShopeeSpecAutoMatchRun, getLatestShopeeSpecAutoMatchRun } from '@/api/goauto/shopee-products'
+import { listShopeeProducts, createShopeeProduct, restoreShopeeProduct, batchDeleteShopeeProducts } from '@/api/goauto/shopee-products'
 import { listPddProducts } from '@/api/goauto/pdd-products'
 import { createRequestId } from '@/utils/request-id'
 import ShopeeProductDetailDrawer from './ShopeeProductDetailDrawer.vue'
@@ -29,16 +29,10 @@ import PddProductDetailDrawer from '../pdd-products/PddProductDetailDrawer.vue'
 
 export default {
   name: 'GoAutoShopeeProducts', components: { ShopeeProductDetailDrawer, PddProductDetailDrawer }, setup() { return { Plus, RefreshLeft, Search, Delete } },
-  data() { return { loading: false, products: [], selectedProducts: [], total: 0, query: { page: 1, pageSize: 20, keyword: '', status: '' }, createDialog: { open: false, saving: false }, createData: this.emptyCreate(), createRules: { shopeeItemId: [{ required: true, message: '请输入虾皮商品ID', trigger: 'blur' }, { max: 64, message: '不能超过 64 个字符', trigger: 'blur' }] }, quickColor: '', quickSize: '', colorValues: [], sizeValues: [], pddPicker: { open: false, loading: false, keyword: '', items: [] }, batchDelete: this.emptyBatchDelete(), detail: { open: false, productId: null, targetColor: '', action: '' }, pddDetail: { open: false, productId: null }, autoMatchRun: { submitting: false, latest: null }, autoMatchPollTimer: null } },
-  computed: {
-    isAdmin() { return (this.$store.getters.roles || []).includes('admin') },
-    autoMatchRunSummary() { const run = this.autoMatchRun.latest; if (!run) return '最近一次：暂无'; if (run.status === 'running') return `最近一次：运行中，已处理 ${run.processedCount || 0}`; const status = run.status === 'completed' ? '完成' : run.status === 'completed_partial' ? '部分完成' : '失败'; return `最近一次：${status}，处理 ${run.processedCount || 0}，确认 ${run.confirmedCount || 0}，未匹配 ${run.unmatchedCount || 0}` }
-  },
-  watch: { '$route.query': { deep: true, handler() { this.applyRouteDetail() } }}, created() { this.load(); this.applyRouteDetail(); if (this.isAdmin) this.loadLatestAutoMatchRun() }, activated() { this.applyRouteDetail(); if (this.isAdmin) this.loadLatestAutoMatchRun() }, beforeUnmount() { if (this.autoMatchPollTimer) clearTimeout(this.autoMatchPollTimer) },
+  data() { return { loading: false, products: [], selectedProducts: [], total: 0, query: { page: 1, pageSize: 20, keyword: '', status: '' }, createDialog: { open: false, saving: false }, createData: this.emptyCreate(), createRules: { shopeeItemId: [{ required: true, message: '请输入虾皮商品ID', trigger: 'blur' }, { max: 64, message: '不能超过 64 个字符', trigger: 'blur' }] }, quickColor: '', quickSize: '', colorValues: [], sizeValues: [], pddPicker: { open: false, loading: false, keyword: '', items: [] }, batchDelete: this.emptyBatchDelete(), detail: { open: false, productId: null, targetColor: '', action: '' }, pddDetail: { open: false, productId: null }} },
+  watch: { '$route.query': { deep: true, handler() { this.applyRouteDetail() } }}, created() { this.load(); this.applyRouteDetail() }, activated() { this.applyRouteDetail() },
   methods: {
     emptyCreate() { return { shopeeItemId: '', title: '', shopName: '', pddProductId: null } }, emptyBatchDelete() { return { open: false, saving: false, step: 'confirm', products: [], results: [], deletedCount: 0, skippedCount: 0 } },
-    async loadLatestAutoMatchRun() { if (!this.isAdmin) return; const response = await getLatestShopeeSpecAutoMatchRun(); this.autoMatchRun.latest = response.data.run || null; if (this.autoMatchPollTimer) clearTimeout(this.autoMatchPollTimer); if (this.autoMatchRun.latest?.status === 'running') this.autoMatchPollTimer = setTimeout(() => this.loadLatestAutoMatchRun(), 2000) },
-    async startAutoMatchRun() { await ElMessageBox.confirm('将在后台处理最多 20 个符合条件的商品，并可能调用 AI。不会创建采购任务或订单。是否继续？', '执行规格自动匹配', { type: 'warning', confirmButtonText: '开始执行', cancelButtonText: '取消' }); this.autoMatchRun.submitting = true; try { const response = await startShopeeSpecAutoMatchRun({ requestId: createRequestId() }); this.autoMatchRun.latest = response.data.run; ElMessage.success(response.data.run.alreadyRunning ? '已有自动匹配正在运行' : '已开始后台匹配'); await this.loadLatestAutoMatchRun() } finally { this.autoMatchRun.submitting = false } },
     applyRouteDetail() { const id = Number(this.$route.query.productId); if (!Number.isInteger(id) || id <= 0) return; this.detail = { open: true, productId: id, targetColor: String(this.$route.query.targetColor || '').trim(), action: String(this.$route.query.action || '') } },
     async load() { this.loading = true; this.selectedProducts = []; this.$refs.productTable?.clearSelection(); try { const r = await listShopeeProducts(this.query); this.products = r.data.items; this.total = r.data.total } finally { this.loading = false } }, search() { this.query.page = 1; this.load() }, reset() { this.query = { page: 1, pageSize: 20, keyword: '', status: '' }; this.load() }, handleSelectionChange(rows) { this.selectedProducts = rows },
     priceText(row) { if (row.salePriceCent === null || row.salePriceCent === undefined) return '—'; return `${row.currency || ''} ${(row.salePriceCent / 100).toFixed(2)}` }, mappingMeta(product) { if (!product.pddProductId) return { label: '未关联 PDD 商品', type: 'info' }; const values = (product.specs || []).flatMap(d => d.values); if (!values.length) return { label: '待完善', type: 'warning' }; const confirmed = values.filter(v => v.mapping?.status === 'confirmed').length; return confirmed === values.length ? { label: '可采购', type: 'success' } : { label: `待完善 · ${confirmed}/${values.length} 已确认`, type: 'warning' } },
@@ -51,5 +45,5 @@ export default {
 }
 </script>
 <style lang="scss" scoped>
-.page-card{min-height:calc(100vh - 124px)}.search-form{padding:16px 16px 0;margin-bottom:16px;border:1px solid #e5e7eb;border-radius:8px;background:#f8fafc}.run-summary{margin-left:10px;font-size:12px;color:#606266}.primary{font-weight:600;color:#1f2937}.muted{font-size:12px;color:#909399}.thumb{width:48px;height:48px;border-radius:4px;object-fit:cover}.thumb.placeholder{display:flex;align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.link{color:#1677ff;cursor:pointer}.scope-note{margin-top:12px;font-size:12px;color:#b91c1c}.notice{margin-bottom:16px}.picker-help{margin:8px 0 0}.picker-thumb,.picker-image-placeholder{display:flex;width:56px;height:56px;margin:auto;border-radius:4px}.picker-image-placeholder{align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.spec-quick-add{display:flex;flex-direction:column;gap:8px;width:100%}.quick-row{display:flex;align-items:center;gap:8px;margin:6px 0}.quick-label{font-size:12px;color:#606266;width:32px}.chips{display:flex;flex-wrap:wrap;gap:6px}.form-grid{display:grid;grid-template-columns:1fr 1fr;gap:0 20px}.create-help{margin-left:8px}@media(max-width:768px){.form-grid{grid-template-columns:1fr}}
+.page-card{min-height:calc(100vh - 124px)}.search-form{padding:16px 16px 0;margin-bottom:16px;border:1px solid #e5e7eb;border-radius:8px;background:#f8fafc}.primary{font-weight:600;color:#1f2937}.muted{font-size:12px;color:#909399}.thumb{width:48px;height:48px;border-radius:4px;object-fit:cover}.thumb.placeholder{display:flex;align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.link{color:#1677ff;cursor:pointer}.scope-note{margin-top:12px;font-size:12px;color:#b91c1c}.notice{margin-bottom:16px}.picker-help{margin:8px 0 0}.picker-thumb,.picker-image-placeholder{display:flex;width:56px;height:56px;margin:auto;border-radius:4px}.picker-image-placeholder{align-items:center;justify-content:center;background:#f1f5f9;color:#909399;font-size:11px}.spec-quick-add{display:flex;flex-direction:column;gap:8px;width:100%}.quick-row{display:flex;align-items:center;gap:8px;margin:6px 0}.quick-label{font-size:12px;color:#606266;width:32px}.chips{display:flex;flex-wrap:wrap;gap:6px}.form-grid{display:grid;grid-template-columns:1fr 1fr;gap:0 20px}.create-help{margin-left:8px}@media(max-width:768px){.form-grid{grid-template-columns:1fr}}
 </style>

web/tests/e2e/shopee-spec-auto-match-run.spec.ts

@@ -1,33 +0,0 @@
-import { expect, test } from '@playwright/test'
-
-const routes = [{ path: '/collection-purchase', component: 'Layout', menuName: 'GoAutoCollectionPurchase', title: '采集采购', visible: '0', children: [{ path: '/shopee-products', component: '/goauto/shopee-products/index', menuName: 'GoAutoShopeeProducts', title: '虾皮商品', visible: '0' }] }]
-
-test('管理员可确认并手动启动规格自动匹配且查看摘要', async({ page, context }) => {
-  await context.addCookies([{ name: 'Admin-Token', value: 'prototype-test-token', domain: 'localhost', path: '/' }])
-  let started = false
-  let requestBody: Record<string, unknown> | null = null
-  await page.route('**/api/**', async route => {
-    const url = new URL(route.request().url())
-    if (url.pathname.startsWith('/src/api/')) return route.continue()
-    if (url.pathname.endsWith('/api/v1/getinfo')) return route.fulfill({ json: { code: 200, data: { roles: ['admin'], name: '管理员', avatar: '', introduction: '', permissions: [] }}})
-    if (url.pathname.endsWith('/api/v1/menurole')) return route.fulfill({ json: { code: 200, data: routes }})
-    if (url.pathname.endsWith('/api/admin/v1/shopee-products')) return route.fulfill({ json: { code: 200, data: { items: [], total: 0, page: 1, pageSize: 20 }}})
-    if (url.pathname.endsWith('/api/admin/v1/shopee-spec-auto-match/runs/latest')) {
-      const run = started ? { id: 8, status: 'completed', processedCount: 12, confirmedCount: 9, unmatchedCount: 3 } : null
-      return route.fulfill({ json: { code: 200, data: { run }}})
-    }
-    if (url.pathname.endsWith('/api/admin/v1/shopee-spec-auto-match/runs')) {
-      requestBody = route.request().postDataJSON()
-      started = true
-      return route.fulfill({ status: 202, json: { code: 200, data: { run: { id: 8, status: 'running', processedCount: 0 }}}})
-    }
-    return route.fulfill({ json: { code: 200, data: [] }})
-  })
-
-  await page.goto('/#/shopee-products')
-  await page.getByRole('button', { name: '执行规格自动匹配', exact: true }).click()
-  await expect(page.getByText('将在后台处理最多 20 个符合条件的商品，并可能调用 AI。不会创建采购任务或订单。是否继续？', { exact: true })).toBeVisible()
-  await page.getByRole('button', { name: '开始执行', exact: true }).click()
-  await expect(page.getByText('最近一次：完成，处理 12，确认 9，未匹配 3', { exact: true })).toBeVisible()
-  expect(String(requestBody?.requestId || '')).toMatch(/^[0-9a-f-]{36}$/)
-})