diff --git a/Local-Development-and-Verification.-.md b/Local-Development-and-Verification.-.md index 2e8a9e6..6bae0b3 100644 --- a/Local-Development-and-Verification.-.md +++ b/Local-Development-and-Verification.-.md @@ -808,3 +808,33 @@ git diff --check 已验证范围不包含真实 GPU/生产模型、真实摄像头、通知供应商、生产迁移、16 路长稳和客户现场效果;这些项目必须在对应环境和独立工单中验收。 + + +## 验证 Bell 联系人与值班排班 + +后端与 PostgreSQL 集成验证: + +```powershell +Set-Location Bell/server +$env:GOTOOLCHAIN = 'go1.26.5' +go test ./... -count=1 +pwsh ./tests/bell_contact_schedule/run-postgres.ps1 +``` + +前端验证: + +```powershell +Set-Location Bell/ui +corepack pnpm lint +corepack pnpm build:prod +``` + +联系人通道加密需要在运行进程中配置 `BELL_CONTACT_CHANNEL_KEY`。它必须是 Base64 编码的 32 字节随机值,不得提交到 Git、Wiki、工单或日志。仅为当前 PowerShell 进程生成测试密钥: + +```powershell +$keyBytes = [Security.Cryptography.RandomNumberGenerator]::GetBytes(32) +$env:BELL_CONTACT_CHANNEL_KEY = [Convert]::ToBase64String($keyBytes) +``` + +PostgreSQL 脚本会验证密文保存、写接口不回显地址、验证与启用状态分离、过期版本冲突、完整周覆盖、已发布历史不可修改、临时替班不重叠、不可变事实约束、操作员只读权限,以及操作日志不含通道明文。当前范围不连接真实外部消息提供商。 +