半自动+人工”链路已经落下第一版

apps/backend/src/routes/admin/inventory.js

@@ -11,6 +11,8 @@ import { createJsonHandler, requireAdminRoles } from './shared.js'
 
 const router = Router()
 
+router.use(requireAdminRoles(['admin', 'operator']))
+
 router.get('/inventory', createJsonHandler(
   (req) => getAdminInventoryItems(req.query),
   {

apps/backend/src/routes/admin/tasks.js

@@ -2,12 +2,14 @@ import { Router } from 'express'
 
 import {
   closeAdminTask,
+  confirmAdminTaskAssistedRole,
   completeAdminTaskManualDispatch,
   getAdminTaskDetail,
   getAdminTaskScreenshotPath,
   getAdminTasks,
   markAdminTaskManualReview,
   regenerateAdminTaskClaimLink,
+  redeemAdminTaskAssisted,
   releaseAdminTaskInventoryBinding,
   releaseAdminTaskInventory,
   retryAdminTask,
@@ -17,7 +19,7 @@ import { createFileHandler, createJsonHandler, requireAdminRoles } from './share
 const router = Router()
 
 router.get('/tasks', createJsonHandler(
-  (req) => getAdminTasks(req.query),
+  (req) => getAdminTasks(req.query, req.adminSession),
   {
     successMessage: 'ok',
     errorMessage: '读取任务列表失败',
@@ -26,7 +28,7 @@ router.get('/tasks', createJsonHandler(
 ))
 
 router.get('/tasks/:taskId', createJsonHandler(
-  (req) => getAdminTaskDetail(req.params.taskId),
+  (req) => getAdminTaskDetail(req.params.taskId, req.adminSession),
   {
     successMessage: 'ok',
     errorMessage: '读取任务详情失败',
@@ -35,14 +37,14 @@ router.get('/tasks/:taskId', createJsonHandler(
 ))
 
 router.get('/tasks/:taskId/screenshot', createFileHandler(
-  (req) => getAdminTaskScreenshotPath(req.params.taskId),
+  (req) => getAdminTaskScreenshotPath(req.params.taskId, req.adminSession),
   {
     errorMessage: '读取任务截图失败',
     scope: '[admin/tasks/:taskId/screenshot]',
   },
 ))
 
-router.post('/tasks/:taskId/retry', createJsonHandler(
+router.post('/tasks/:taskId/retry', requireAdminRoles(['admin', 'operator']), createJsonHandler(
   (req) => retryAdminTask(req.params.taskId),
   {
     successMessage: '任务已重试',
@@ -90,8 +92,8 @@ router.post('/tasks/:taskId/inventory-bindings/:bindingId/release', requireAdmin
   },
 ))
 
-router.post('/tasks/:taskId/regenerate-claim-link', requireAdminRoles(['admin']), createJsonHandler(
-  (req) => regenerateAdminTaskClaimLink(req.params.taskId),
+router.post('/tasks/:taskId/regenerate-claim-link', requireAdminRoles(['admin', 'operator', 'support']), createJsonHandler(
+  (req) => regenerateAdminTaskClaimLink(req.params.taskId, req.adminSession),
   {
     successMessage: '领取链接已重新生成',
     errorMessage: '重新生成领取链接失败',
@@ -109,7 +111,46 @@ router.post('/tasks/:taskId/regenerate-claim-link', requireAdminRoles(['admin'])
   },
 ))
 
-router.post('/tasks/:taskId/close', requireAdminRoles(['admin']), createJsonHandler(
+router.post('/tasks/:taskId/support-confirm-role', requireAdminRoles(['admin', 'operator', 'support']), createJsonHandler(
+  (req) => confirmAdminTaskAssistedRole(req.params.taskId, req.adminSession),
+  {
+    successMessage: '角色已确认',
+    errorMessage: '客服确认角色失败',
+    scope: '[admin/tasks/:taskId/support-confirm-role]',
+    audit: (req, data) => ({
+      action: 'task_support_confirm_role',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        status: data.task.status,
+      },
+    }),
+  },
+))
+
+router.post('/tasks/:taskId/support-redeem', requireAdminRoles(['admin', 'operator', 'support']), createJsonHandler(
+  (req) => redeemAdminTaskAssisted(req.params.taskId, req.adminSession),
+  {
+    successMessage: '兑换任务已启动',
+    errorMessage: '客服发起兑换失败',
+    scope: '[admin/tasks/:taskId/support-redeem]',
+    audit: (req, data) => ({
+      action: 'task_support_redeem',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        status: data.task.status,
+        deliveryStatus: data.task.deliveryStatus,
+      },
+    }),
+  },
+))
+
+router.post('/tasks/:taskId/close', requireAdminRoles(['admin', 'operator']), createJsonHandler(
   (req) => closeAdminTask(req.params.taskId),
   {
     successMessage: '任务已关闭',
@@ -128,7 +169,7 @@ router.post('/tasks/:taskId/close', requireAdminRoles(['admin']), createJsonHand
   },
 ))
 
-router.post('/tasks/:taskId/mark-manual-review', requireAdminRoles(['admin']), createJsonHandler(
+router.post('/tasks/:taskId/mark-manual-review', requireAdminRoles(['admin', 'operator']), createJsonHandler(
   (req) => markAdminTaskManualReview(req.params.taskId),
   {
     successMessage: '任务已转人工处理',
@@ -147,7 +188,7 @@ router.post('/tasks/:taskId/mark-manual-review', requireAdminRoles(['admin']), c
   },
 ))
 
-router.post('/tasks/:taskId/complete-manual-dispatch', requireAdminRoles(['admin']), createJsonHandler(
+router.post('/tasks/:taskId/complete-manual-dispatch', requireAdminRoles(['admin', 'operator']), createJsonHandler(
   (req) => completeAdminTaskManualDispatch(req.params.taskId, req.body, req.adminSession),
   {
     successMessage: '人工履约结果已回写',

apps/backend/src/routes/admin/webhook-events.js

@@ -9,6 +9,8 @@ import { createJsonHandler, requireAdminRoles } from './shared.js'
 
 const router = Router()
 
+router.use(requireAdminRoles(['admin', 'operator']))
+
 router.get('/webhook-events', createJsonHandler(
   (req) => getAdminWebhookEvents(req.query),
   {