diff --git a/CLAUDE.md b/CLAUDE.md
deleted file mode 100644
index 091f3bc..0000000
--- a/CLAUDE.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# language
- 请始终使用简体中文与我对话，并保持回答专业、简洁。
-
diff --git a/docs/superpowers/plans/2026-04-09-deploy-optimization.md b/docs/superpowers/plans/2026-04-09-deploy-optimization.md
deleted file mode 100644
index 6814367..0000000
--- a/docs/superpowers/plans/2026-04-09-deploy-optimization.md
+++ /dev/null
@@ -1,517 +0,0 @@
-# Deploy Optimization Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** 将 label_backend 从 Spring Boot fat JAR 方式改造为薄 jar + Maven Assembly 分发包，并统一日志级别为 INFO。
-
-**Architecture:** 移除 `spring-boot-maven-plugin`，改用 `maven-jar-plugin`（薄 jar）+ `maven-dependency-plugin`（复制依赖到 `target/libs/`）+ `maven-assembly-plugin`（组装 zip/tar.gz）。新增 `start.sh`（Docker/VM 双模式启动）和 `logback.xml`（60 MB 滚动）。Dockerfile 改为多阶段构建，从 `target/libs/` 和 `src/main/resources/` 复制构建产物。
-
-**Tech Stack:** Maven 3.9, JDK 17, Spring Boot 3.2.5, maven-assembly-plugin 3.x, logback 1.4.x (Spring Boot 管理版本)
-
----
-
-## 文件结构
-
-| 操作 | 路径 | 说明 |
-|------|------|------|
-| 新建 | `src/main/resources/logback.xml` | INFO 级，60 MB 滚动日志配置 |
-| 新建 | `src/main/scripts/start.sh` | Docker/VM 双模式启动脚本 |
-| 新建 | `src/main/assembly/distribution.xml` | Assembly 描述符 |
-| 新建 | `src/main/assembly/empty-logs/.gitkeep` | logs/ 目录占位（Assembly 引用） |
-| 修改 | `pom.xml` | 替换 spring-boot-maven-plugin |
-| 修改 | `Dockerfile` | 多阶段构建，复制 etc/ + libs/ |
-| 批量修改 | 11 个 Service 类 | `log.debug` → `log.info`（21 处） |
-
----
-
-## Task 1: 创建 logback.xml
-
-**Files:**
-- Create: `src/main/resources/logback.xml`
-
-- [ ] **Step 1: 创建 logback.xml 文件**
-
-```xml
-
-
-
-
-
-
-
-
-
-
- ${LOG_PATTERN}
-
-
-
-
-
- ${LOG_PATH}/${APP_NAME}.log
-
- ${LOG_PATTERN}
-
-
- ${LOG_PATH}/${APP_NAME}.%d{yyyy-MM-dd}.%i.log
- 60MB
- 30
- 3GB
-
-
-
-
-
-
-
-
-
-```
-
-- [ ] **Step 2: 验证文件存在**
-
-```bash
-ls src/main/resources/logback.xml
-```
-
-预期输出：`src/main/resources/logback.xml`
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add src/main/resources/logback.xml
-git commit -m "feat(deploy): 添加 logback.xml（INFO 级，60 MB 滚动）"
-```
-
----
-
-## Task 2: 创建 start.sh 启动脚本
-
-**Files:**
-- Create: `src/main/scripts/start.sh`
-
-- [ ] **Step 1: 创建目录并写入 start.sh**
-
-```bash
-mkdir -p src/main/scripts
-```
-
-文件内容 `src/main/scripts/start.sh`：
-
-```bash
-#!/bin/bash
-# label-backend 启动脚本
-# - Docker 环境（检测 /.dockerenv）：exec 前台运行，保持容器进程存活
-# - 裸机 / VM：nohup 后台运行，日志追加至 logs/startup.log
-
-set -e
-
-BASEDIR=$(cd "$(dirname "$0")/.." && pwd)
-LIBDIR="$BASEDIR/libs"
-CONFDIR="$BASEDIR/etc"
-LOGDIR="$BASEDIR/logs"
-
-mkdir -p "$LOGDIR"
-
-JVM_OPTS="${JVM_OPTS:--Xms512m -Xmx1024m}"
-MAIN_CLASS="com.label.LabelBackendApplication"
-JAVA_ARGS="$JVM_OPTS \
- -Dspring.config.location=file:$CONFDIR/application.yml \
- -Dlogging.config=file:$CONFDIR/logback.xml \
- -cp $LIBDIR/*"
-
-if [ -f /.dockerenv ]; then
- # Docker 容器：exec 替换当前进程，PID=1 接管信号
- exec java $JAVA_ARGS $MAIN_CLASS
-else
- # 裸机 / VM：nohup 后台运行
- nohup java $JAVA_ARGS $MAIN_CLASS >> "$LOGDIR/startup.log" 2>&1 &
- echo "label-backend started, PID=$!"
-fi
-```
-
-- [ ] **Step 2: 验证文件存在**
-
-```bash
-ls src/main/scripts/start.sh
-```
-
-预期输出：`src/main/scripts/start.sh`
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add src/main/scripts/start.sh
-git commit -m "feat(deploy): 添加 start.sh（Docker exec / VM nohup 双模式）"
-```
-
----
-
-## Task 3: 创建 Assembly 描述符和目录占位
-
-**Files:**
-- Create: `src/main/assembly/distribution.xml`
-- Create: `src/main/assembly/empty-logs/.gitkeep`
-
-- [ ] **Step 1: 创建 assembly 目录结构**
-
-```bash
-mkdir -p src/main/assembly/empty-logs
-touch src/main/assembly/empty-logs/.gitkeep
-```
-
-- [ ] **Step 2: 创建 distribution.xml**
-
-文件内容 `src/main/assembly/distribution.xml`：
-
-```xml
-
- dist
-
- zip
- tar.gz
-
- true
-
-
-
-
- src/main/scripts/start.sh
- bin
- 0755
-
-
-
-
-
-
- src/main/resources
- etc
-
- application.yml
- logback.xml
-
-
-
-
-
- ${project.build.directory}/libs
- libs
-
- **/*.jar
-
-
-
-
-
- src/main/assembly/empty-logs
- logs
-
-
-
-
-```
-
-- [ ] **Step 3: 验证文件存在**
-
-```bash
-ls src/main/assembly/distribution.xml src/main/assembly/empty-logs/.gitkeep
-```
-
-预期输出：两个文件路径均显示
-
-- [ ] **Step 4: Commit**
-
-```bash
-git add src/main/assembly/
-git commit -m "feat(deploy): 添加 Assembly 描述符 distribution.xml"
-```
-
----
-
-## Task 4: 更新 pom.xml（替换 spring-boot-maven-plugin）
-
-**Files:**
-- Modify: `pom.xml`
-
-- [ ] **Step 1: 替换 `` 段落**
-
-将 `pom.xml` 的 `` 段（当前仅含 spring-boot-maven-plugin）替换为：
-
-```xml
-
-
-
-
-
- org.apache.maven.plugins
- maven-jar-plugin
-
- ${project.build.directory}/libs
-
-
- com.label.LabelBackendApplication
- false
-
-
-
-
-
-
-
- org.apache.maven.plugins
- maven-dependency-plugin
-
-
- copy-dependencies
- package
- copy-dependencies
-
- ${project.build.directory}/libs
- runtime
-
-
-
-
-
-
-
- org.apache.maven.plugins
- maven-assembly-plugin
-
-
- create-distribution
- package
- single
-
-
- src/main/assembly/distribution.xml
-
- ${project.artifactId}-${project.version}
- false
-
-
-
-
-
-
-
-```
-
-即用上述内容完整替换 `pom.xml` 中现有的 `...` 块（原内容为含 spring-boot-maven-plugin 的单插件配置）。
-
-- [ ] **Step 2: 验证语法并试构建**
-
-```bash
-mvn validate -q
-```
-
-预期输出：无错误（只做 pom.xml 解析校验，不实际编译）
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add pom.xml
-git commit -m "feat(deploy): pom.xml 替换 fat JAR → 薄 jar + maven-dependency + maven-assembly"
-```
-
----
-
-## Task 5: 更新 Dockerfile
-
-**Files:**
-- Modify: `Dockerfile`
-
-- [ ] **Step 1: 替换 Dockerfile 全文**
-
-```dockerfile
-# 构建阶段：Maven + JDK 17 编译，生成薄 jar 及依赖
-FROM maven:3.9-eclipse-temurin-17-alpine AS builder
-WORKDIR /app
-
-# 优先复制 pom.xml 利用 Docker 层缓存（依赖不变时跳过 go-offline）
-COPY pom.xml .
-RUN mvn dependency:go-offline -q
-
-COPY src ./src
-RUN mvn clean package -DskipTests -q
-
-# 运行阶段：仅含 JRE 的精简镜像
-FROM eclipse-temurin:17-jre-alpine
-WORKDIR /app
-
-# 复制部署结构：bin/ libs/ etc/
-COPY --from=builder /app/src/main/scripts/start.sh bin/start.sh
-COPY --from=builder /app/target/libs/ libs/
-COPY --from=builder /app/src/main/resources/application.yml etc/application.yml
-COPY --from=builder /app/src/main/resources/logback.xml etc/logback.xml
-
-RUN mkdir -p logs && chmod +x bin/start.sh
-
-EXPOSE 8080
-
-# start.sh 检测到 /.dockerenv 后以 exec 前台方式运行
-ENTRYPOINT ["bin/start.sh"]
-```
-
-- [ ] **Step 2: 验证 Dockerfile 语法**
-
-```bash
-docker build --no-cache --dry-run . 2>/dev/null || echo "docker not available; syntax check skipped"
-```
-
-预期：无语法错误（或 docker 不可用时跳过）
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add Dockerfile
-git commit -m "feat(deploy): Dockerfile 改为多阶段构建（薄 jar + start.sh）"
-```
-
----
-
-## Task 6: 批量替换 log.debug → log.info（11 文件，21 处）
-
-**Files:**
-- Modify: `src/main/java/com/label/module/video/service/VideoProcessService.java` (5 处)
-- Modify: `src/main/java/com/label/module/source/service/SourceService.java` (2 处)
-- Modify: `src/main/java/com/label/module/user/service/UserService.java` (3 处)
-- Modify: `src/main/java/com/label/module/user/service/AuthService.java` (2 处)
-- Modify: `src/main/java/com/label/module/config/service/SysConfigService.java` (2 处)
-- Modify: `src/main/java/com/label/module/annotation/service/ExtractionApprovedEventListener.java` (2 处)
-- Modify: `src/main/java/com/label/module/task/service/TaskService.java` (1 处)
-- Modify: `src/main/java/com/label/module/annotation/service/QaService.java` (1 处)
-- Modify: `src/main/java/com/label/module/export/service/FinetuneService.java` (1 处)
-- Modify: `src/main/java/com/label/module/task/service/TaskClaimService.java` (1 处)
-- Modify: `src/main/java/com/label/module/export/service/ExportService.java` (1 处)
-
-- [ ] **Step 1: 批量替换**
-
-```bash
-find src/main/java -name "*.java" \
- -exec sed -i 's/log\.debug(/log.info(/g' {} +
-```
-
-- [ ] **Step 2: 验证替换完整，无 log.debug 残留**
-
-```bash
-grep -r "log\.debug" src/main/java && echo "FAIL: 仍有 log.debug 残留" || echo "PASS: 无 log.debug"
-```
-
-预期输出：`PASS: 无 log.debug`
-
-- [ ] **Step 3: 验证替换数量正确（应有 21 处 log.info 新增）**
-
-```bash
-git diff --stat src/main/java | tail -1
-```
-
-预期：显示 11 个文件，21 处改动（`21 insertions(+), 21 deletions(-)`）
-
-- [ ] **Step 4: Commit**
-
-```bash
-git add src/main/java/
-git commit -m "refactor(log): log.debug 全量替换为 log.info（11 文件，21 处）"
-```
-
----
-
-## Task 7: 全量构建验证
-
-**Files:** 只读操作，不修改文件
-
-- [ ] **Step 1: 执行完整构建（跳过测试）**
-
-```bash
-mvn clean package -DskipTests
-```
-
-预期：`BUILD SUCCESS`，无 ERROR 输出
-
-- [ ] **Step 2: 验证 target/libs/ 目录存在且包含 jar**
-
-```bash
-ls target/libs/*.jar | head -5
-ls target/libs/label-backend-1.0.0-SNAPSHOT.jar
-```
-
-预期：显示薄 jar 及多个依赖 jar
-
-- [ ] **Step 3: 验证分发包已生成**
-
-```bash
-ls target/label-backend-1.0.0-SNAPSHOT.zip
-ls target/label-backend-1.0.0-SNAPSHOT.tar.gz
-```
-
-预期：两个文件均存在
-
-- [ ] **Step 4: 验证分发包内部结构**
-
-```bash
-# 使用 unzip 检查 zip 内容（Windows Git Bash 或 Linux 均可用）
-unzip -l target/label-backend-1.0.0-SNAPSHOT.zip | grep -E "bin/|etc/|libs/|logs/"
-```
-
-预期输出包含：
-```
-label-backend-1.0.0-SNAPSHOT/bin/start.sh
-label-backend-1.0.0-SNAPSHOT/etc/application.yml
-label-backend-1.0.0-SNAPSHOT/etc/logback.xml
-label-backend-1.0.0-SNAPSHOT/libs/label-backend-1.0.0-SNAPSHOT.jar
-label-backend-1.0.0-SNAPSHOT/logs/
-```
-
-- [ ] **Step 5: 验证 logback.xml 已包含在 etc/ 内**
-
-```bash
-unzip -l target/label-backend-1.0.0-SNAPSHOT.zip | grep logback
-```
-
-预期：`label-backend-1.0.0-SNAPSHOT/etc/logback.xml`
-
-- [ ] **Step 6: Commit 构建验证记录（如有必要则修正问题后提交）**
-
-若 Step 1-5 全部通过，无需额外提交。若发现问题（如缺少文件、路径错误），修正对应 Task 后重新执行本 Task。
-
----
-
-## 自检
-
-### Spec 覆盖检查
-
-| deploy.md 需求 | 对应任务 |
-|---------------|---------|
-| 1. 分发包结构 bin/etc/libs/logs | Task 3 (distribution.xml) + Task 7 验证 |
-| 2. start.sh nohup 后台启动 | Task 2 |
-| 3. logback.xml INFO + 60 MB 滚动 | Task 1 |
-| 4. logback.xml + application.yml 在 etc/ | Task 3 (distribution.xml fileSets) |
-| 5. maven-jar-plugin + maven-dependency-plugin | Task 4 |
-| 6. Maven Assembly Plugin → zip/tar.gz | Task 3 + Task 4 |
-| 7. Dockerfile 复制 etc/ + 调用 start.sh | Task 5 |
-| 8. log.debug → log.info | Task 6 |
-
-所有 8 条需求均有对应任务。✅
-
-### 类型一致性
-
-- `MAIN_CLASS="com.label.LabelBackendApplication"` — 与 `src/main/java/com/label/LabelBackendApplication.java` 一致 ✅
-- `maven-jar-plugin` 输出路径 `target/libs/` — 与 Dockerfile `COPY --from=builder /app/target/libs/` 一致 ✅
-- `distribution.xml` `${project.build.directory}/libs` — 与 `maven-dependency-plugin` 的 `outputDirectory` 一致 ✅
-
-## GSTACK REVIEW REPORT
-
-| Review | Trigger | Why | Runs | Status | Findings |
-|--------|---------|-----|------|--------|----------|
-| CEO Review | `/plan-ceo-review` | Scope & strategy | 0 | — | — |
-| Codex Review | `/codex review` | Independent 2nd opinion | 0 | — | — |
-| Eng Review | `/plan-eng-review` | Architecture & tests (required) | 0 | — | — |
-| Design Review | `/plan-design-review` | UI/UX gaps | 0 | — | — |
-
-**VERDICT:** NO REVIEWS YET — run `/autoplan` for full review pipeline, or individual reviews above.
diff --git a/docs/superpowers/plans/2026-04-09-swagger-shiro-toggle.md b/docs/superpowers/plans/2026-04-09-swagger-shiro-toggle.md
deleted file mode 100644
index 1cb3f13..0000000
--- a/docs/superpowers/plans/2026-04-09-swagger-shiro-toggle.md
+++ /dev/null
@@ -1,1411 +0,0 @@
-# Swagger + Shiro 认证开关 Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** 为所有 REST 接口添加 springdoc-openapi Swagger 文档注解，并在 application.yml 中提供 Shiro 认证鉴权开关以方便测试。
-
-**Architecture:** 通过在 `pom.xml` 引入 `springdoc-openapi-starter-webmvc-ui`，新建 `OpenApiConfig` 配置 Bearer Token 安全方案；修改 `TokenFilter` 支持 Swagger 路径白名单和 `shiro.auth.enabled=false` 时注入 mock Principal；在所有 Controller 上添加 `@Tag`/`@Operation`，核心 DTO 添加 `@Schema`。
-
-**Tech Stack:** Spring Boot 3.2.5、Apache Shiro 1.13、springdoc-openapi-starter-webmvc-ui 2.5.0、Lombok、io.swagger.v3.oas.annotations
-
----
-
-## 文件变更清单
-
-| 操作 | 文件路径 |
-|------|----------|
-| 修改 | `pom.xml` |
-| 修改 | `src/main/resources/application.yml` |
-| 修改 | `src/main/java/com/label/common/shiro/TokenFilter.java` |
-| 新建 | `src/main/java/com/label/common/config/OpenApiConfig.java` |
-| 修改 | `src/main/java/com/label/module/user/dto/LoginRequest.java` |
-| 修改 | `src/main/java/com/label/module/user/dto/LoginResponse.java` |
-| 修改 | `src/main/java/com/label/module/user/dto/UserInfoResponse.java` |
-| 修改 | `src/main/java/com/label/module/task/dto/TaskResponse.java` |
-| 修改 | `src/main/java/com/label/module/source/dto/SourceResponse.java` |
-| 修改 | `src/main/java/com/label/module/user/controller/AuthController.java` |
-| 修改 | `src/main/java/com/label/module/user/controller/UserController.java` |
-| 修改 | `src/main/java/com/label/module/source/controller/SourceController.java` |
-| 修改 | `src/main/java/com/label/module/task/controller/TaskController.java` |
-| 修改 | `src/main/java/com/label/module/annotation/controller/ExtractionController.java` |
-| 修改 | `src/main/java/com/label/module/annotation/controller/QaController.java` |
-| 修改 | `src/main/java/com/label/module/export/controller/ExportController.java` |
-| 修改 | `src/main/java/com/label/module/config/controller/SysConfigController.java` |
-| 修改 | `src/main/java/com/label/module/video/controller/VideoController.java` |
-
----
-
-## Task 1: 依赖与配置（pom.xml + application.yml）
-
-**Files:**
-- Modify: `pom.xml`
-- Modify: `src/main/resources/application.yml`
-
-- [ ] **Step 1: 在 pom.xml `` 末尾添加 springdoc 依赖**
-
-在 `` 依赖之前插入：
-
-```xml
-
-
- org.springdoc
- springdoc-openapi-starter-webmvc-ui
- 2.5.0
-
-```
-
-- [ ] **Step 2: 在 application.yml 末尾追加 springdoc 和 shiro.auth 配置**
-
-在 `logging:` 块之前插入以下内容（保留原 `logging:` 块）：
-
-```yaml
-springdoc:
- api-docs:
- enabled: true
- path: /v3/api-docs
- swagger-ui:
- enabled: true
- path: /swagger-ui.html
-
-shiro:
- auth:
- enabled: true
- mock-company-id: 1
- mock-user-id: 1
- mock-role: ADMIN
- mock-username: mock
-```
-
-- [ ] **Step 3: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`，无编译错误。
-
-- [ ] **Step 4: Commit**
-
-```bash
-cd label_backend
-git add pom.xml src/main/resources/application.yml
-git commit -m "feat: add springdoc-openapi dependency and swagger/shiro-auth config"
-```
-
----
-
-## Task 2: 修改 TokenFilter（Swagger 白名单 + 认证开关）
-
-**Files:**
-- Modify: `src/main/java/com/label/common/shiro/TokenFilter.java`
-
-- [ ] **Step 1: 用以下完整内容替换 TokenFilter.java**
-
-```java
-package com.label.common.shiro;
-
-import com.fasterxml.jackson.databind.ObjectMapper;
-import com.label.common.context.CompanyContext;
-import com.label.common.redis.RedisKeyManager;
-import com.label.common.redis.RedisService;
-import com.label.common.result.Result;
-import jakarta.servlet.FilterChain;
-import jakarta.servlet.ServletException;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
-import lombok.RequiredArgsConstructor;
-import lombok.extern.slf4j.Slf4j;
-import org.apache.shiro.SecurityUtils;
-import org.apache.shiro.util.ThreadContext;
-import org.springframework.beans.factory.annotation.Value;
-import org.springframework.http.MediaType;
-import org.springframework.web.filter.OncePerRequestFilter;
-
-import java.io.IOException;
-import java.util.Map;
-
-/**
- * JWT-style Bearer Token 过滤器。
- * 继承 Spring 的 OncePerRequestFilter（jakarta.servlet），避免与 Shiro 1.x
- * 的 PathMatchingFilter（javax.servlet）产生命名空间冲突。
- *
- * 过滤逻辑：
- * - 跳过非 /api/ 路径、/api/auth/login、Swagger UI 路径（公开端点）
- * - shiro.auth.enabled=false 时：注入 mock Principal，跳过 Redis 校验（测试模式）
- * - 解析 "Authorization: Bearer {uuid}"，查询 Redis Hash token:{uuid}
- * - Token 存在 → 注入 CompanyContext，登录 Shiro Subject，继续请求链路
- * - Token 缺失或过期 → 直接返回 401
- * - finally 块中清除 CompanyContext 和 ThreadContext Subject，防止线程池串漏
- */
-@Slf4j
-@RequiredArgsConstructor
-public class TokenFilter extends OncePerRequestFilter {
-
- private final RedisService redisService;
- private final ObjectMapper objectMapper;
-
- @Value("${shiro.auth.enabled:true}")
- private boolean authEnabled;
-
- @Value("${shiro.auth.mock-company-id:1}")
- private Long mockCompanyId;
-
- @Value("${shiro.auth.mock-user-id:1}")
- private Long mockUserId;
-
- @Value("${shiro.auth.mock-role:ADMIN}")
- private String mockRole;
-
- @Value("${shiro.auth.mock-username:mock}")
- private String mockUsername;
-
- /**
- * 公开端点跳过过滤：
- * - 非 /api/ 前缀路径
- * - 登录接口
- * - AI 服务内部回调
- * - Swagger UI / OpenAPI 文档路径
- */
- @Override
- protected boolean shouldNotFilter(HttpServletRequest request) {
- String path = request.getServletPath();
- return !path.startsWith("/api/")
- || path.equals("/api/auth/login")
- || path.equals("/api/video/callback")
- || path.startsWith("/swagger-ui")
- || path.startsWith("/v3/api-docs");
- }
-
- @Override
- protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response,
- FilterChain filterChain) throws ServletException, IOException {
- try {
- // 认证开关关闭时：注入固定测试上下文，跳过 Redis 校验
- if (!authEnabled) {
- TokenPrincipal mockPrincipal = new TokenPrincipal(
- mockUserId, mockRole, mockCompanyId, mockUsername, "mock-token");
- CompanyContext.set(mockCompanyId);
- SecurityUtils.getSubject().login(new BearerToken("mock-token", mockPrincipal));
- request.setAttribute("__token_principal__", mockPrincipal);
- filterChain.doFilter(request, response);
- return;
- }
-
- String authHeader = request.getHeader("Authorization");
- if (authHeader == null || !authHeader.startsWith("Bearer ")) {
- writeUnauthorized(response, "缺少或无效的认证令牌");
- return;
- }
-
- String token = authHeader.substring(7).trim();
- Map tokenData = redisService.hGetAll(RedisKeyManager.tokenKey(token));
-
- if (tokenData == null || tokenData.isEmpty()) {
- writeUnauthorized(response, "令牌已过期或不存在");
- return;
- }
-
- Long userId = Long.parseLong(tokenData.get("userId").toString());
- String role = tokenData.get("role").toString();
- Long companyId = Long.parseLong(tokenData.get("companyId").toString());
- String username = tokenData.get("username").toString();
-
- // 注入多租户上下文（finally 中清除，防止线程池串漏）
- CompanyContext.set(companyId);
-
- // 创建 TokenPrincipal 并登录 Shiro Subject，使 @RequiresRoles 等注解生效
- TokenPrincipal principal = new TokenPrincipal(userId, role, companyId, username, token);
- SecurityUtils.getSubject().login(new BearerToken(token, principal));
- request.setAttribute("__token_principal__", principal);
-
- filterChain.doFilter(request, response);
- } catch (Exception e) {
- log.error("解析 Token 数据失败: {}", e.getMessage());
- writeUnauthorized(response, "令牌数据格式错误");
- } finally {
- // 关键：必须清除 ThreadLocal，防止线程池复用时数据串漏
- CompanyContext.clear();
- ThreadContext.unbindSubject();
- }
- }
-
- private void writeUnauthorized(HttpServletResponse resp, String message) throws IOException {
- resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
- resp.setContentType(MediaType.APPLICATION_JSON_VALUE + ";charset=UTF-8");
- resp.getWriter().write(objectMapper.writeValueAsString(Result.failure("UNAUTHORIZED", message)));
- }
-}
-```
-
-- [ ] **Step 2: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 3: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/common/shiro/TokenFilter.java
-git commit -m "feat: add swagger path whitelist and shiro.auth.enabled toggle to TokenFilter"
-```
-
----
-
-## Task 3: 新建 OpenApiConfig
-
-**Files:**
-- Create: `src/main/java/com/label/common/config/OpenApiConfig.java`
-
-- [ ] **Step 1: 创建 OpenApiConfig.java**
-
-```java
-package com.label.common.config;
-
-import io.swagger.v3.oas.models.Components;
-import io.swagger.v3.oas.models.OpenAPI;
-import io.swagger.v3.oas.models.info.Info;
-import io.swagger.v3.oas.models.security.SecurityRequirement;
-import io.swagger.v3.oas.models.security.SecurityScheme;
-import org.springframework.context.annotation.Bean;
-import org.springframework.context.annotation.Configuration;
-
-/**
- * SpringDoc OpenAPI 全局配置：API 基本信息 + Bearer Token 安全方案。
- */
-@Configuration
-public class OpenApiConfig {
-
- @Bean
- public OpenAPI openAPI() {
- return new OpenAPI()
- .info(new Info()
- .title("Label Backend API")
- .version("1.0.0")
- .description("知识图谱智能标注平台后端接口文档"))
- .addSecurityItem(new SecurityRequirement().addList("BearerAuth"))
- .components(new Components()
- .addSecuritySchemes("BearerAuth",
- new SecurityScheme()
- .type(SecurityScheme.Type.HTTP)
- .scheme("bearer")
- .bearerFormat("UUID")
- .description("登录后返回的 Token，格式：Bearer {uuid}")));
- }
-}
-```
-
-- [ ] **Step 2: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 3: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/common/config/OpenApiConfig.java
-git commit -m "feat: add OpenApiConfig with Bearer Token security scheme"
-```
-
----
-
-## Task 4: 核心 DTO 添加 @Schema 注解
-
-**Files:**
-- Modify: `src/main/java/com/label/module/user/dto/LoginRequest.java`
-- Modify: `src/main/java/com/label/module/user/dto/LoginResponse.java`
-- Modify: `src/main/java/com/label/module/user/dto/UserInfoResponse.java`
-- Modify: `src/main/java/com/label/module/task/dto/TaskResponse.java`
-- Modify: `src/main/java/com/label/module/source/dto/SourceResponse.java`
-
-- [ ] **Step 1: 替换 LoginRequest.java**
-
-```java
-package com.label.module.user.dto;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import lombok.Data;
-
-/**
- * 登录请求体。
- */
-@Data
-@Schema(description = "登录请求")
-public class LoginRequest {
- @Schema(description = "公司代码（英文简写），用于确定租户", example = "acme")
- private String companyCode;
- @Schema(description = "登录用户名", example = "admin")
- private String username;
- @Schema(description = "明文密码（传输层应使用 HTTPS 保护）", example = "password123")
- private String password;
-}
-```
-
-- [ ] **Step 2: 替换 LoginResponse.java**
-
-```java
-package com.label.module.user.dto;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import lombok.AllArgsConstructor;
-import lombok.Data;
-
-/**
- * 登录成功响应体。
- */
-@Data
-@AllArgsConstructor
-@Schema(description = "登录响应")
-public class LoginResponse {
- @Schema(description = "Bearer Token（UUID v4），后续请求放入 Authorization 头")
- private String token;
- @Schema(description = "用户主键")
- private Long userId;
- @Schema(description = "登录用户名")
- private String username;
- @Schema(description = "角色：UPLOADER / ANNOTATOR / REVIEWER / ADMIN")
- private String role;
- @Schema(description = "Token 有效期（秒）")
- private Long expiresIn;
-}
-```
-
-- [ ] **Step 3: 替换 UserInfoResponse.java**
-
-```java
-package com.label.module.user.dto;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import lombok.AllArgsConstructor;
-import lombok.Data;
-
-/**
- * GET /api/auth/me 响应体，包含当前登录用户的详细信息。
- */
-@Data
-@AllArgsConstructor
-@Schema(description = "当前登录用户信息")
-public class UserInfoResponse {
- @Schema(description = "用户主键")
- private Long id;
- @Schema(description = "用户名")
- private String username;
- @Schema(description = "真实姓名")
- private String realName;
- @Schema(description = "角色：UPLOADER / ANNOTATOR / REVIEWER / ADMIN")
- private String role;
- @Schema(description = "所属公司 ID")
- private Long companyId;
- @Schema(description = "所属公司名称")
- private String companyName;
-}
-```
-
-- [ ] **Step 4: 替换 TaskResponse.java**
-
-```java
-package com.label.module.task.dto;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import lombok.Builder;
-import lombok.Data;
-
-import java.time.LocalDateTime;
-
-/**
- * 任务接口统一响应体（任务池、我的任务、任务详情均复用）。
- */
-@Data
-@Builder
-@Schema(description = "标注任务响应")
-public class TaskResponse {
- @Schema(description = "任务主键")
- private Long id;
- @Schema(description = "关联资料 ID")
- private Long sourceId;
- @Schema(description = "任务阶段：EXTRACTION / QA_GENERATION")
- private String taskType;
- @Schema(description = "任务状态：UNCLAIMED / IN_PROGRESS / SUBMITTED / APPROVED / REJECTED")
- private String status;
- @Schema(description = "领取人用户 ID")
- private Long claimedBy;
- @Schema(description = "领取时间")
- private LocalDateTime claimedAt;
- @Schema(description = "提交时间")
- private LocalDateTime submittedAt;
- @Schema(description = "完成时间")
- private LocalDateTime completedAt;
- @Schema(description = "驳回原因（REJECTED 状态时非空）")
- private String rejectReason;
- @Schema(description = "创建时间")
- private LocalDateTime createdAt;
-}
-```
-
-- [ ] **Step 5: 替换 SourceResponse.java**
-
-```java
-package com.label.module.source.dto;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import lombok.Builder;
-import lombok.Data;
-
-import java.time.LocalDateTime;
-
-/**
- * 资料接口统一响应体（上传、列表、详情均复用此类）。
- * 各端点按需填充字段，未填充字段序列化时因 jackson non_null 配置自动省略。
- */
-@Data
-@Builder
-@Schema(description = "原始资料响应")
-public class SourceResponse {
- @Schema(description = "资料主键")
- private Long id;
- @Schema(description = "原始文件名")
- private String fileName;
- @Schema(description = "资料类型：TEXT / IMAGE / VIDEO")
- private String dataType;
- @Schema(description = "文件大小（字节）")
- private Long fileSize;
- @Schema(description = "状态：PENDING / PREPROCESSING / EXTRACTING / QA_REVIEW / APPROVED")
- private String status;
- @Schema(description = "上传用户 ID（列表端点返回）")
- private Long uploaderId;
- @Schema(description = "15 分钟预签名下载链接（详情端点返回）")
- private String presignedUrl;
- @Schema(description = "父资料 ID（视频帧/文本片段；详情端点返回）")
- private Long parentSourceId;
- @Schema(description = "创建时间")
- private LocalDateTime createdAt;
-}
-```
-
-- [ ] **Step 6: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 7: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/module/user/dto/ \
- src/main/java/com/label/module/task/dto/ \
- src/main/java/com/label/module/source/dto/
-git commit -m "feat: add @Schema annotations to core DTOs"
-```
-
----
-
-## Task 5: AuthController + UserController 添加 Swagger 注解
-
-**Files:**
-- Modify: `src/main/java/com/label/module/user/controller/AuthController.java`
-- Modify: `src/main/java/com/label/module/user/controller/UserController.java`
-
-- [ ] **Step 1: 替换 AuthController.java**
-
-```java
-package com.label.module.user.controller;
-
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.user.dto.LoginRequest;
-import com.label.module.user.dto.LoginResponse;
-import com.label.module.user.dto.UserInfoResponse;
-import com.label.module.user.service.AuthService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.springframework.web.bind.annotation.*;
-
-/**
- * 认证接口：登录、退出、获取当前用户。
- */
-@Tag(name = "认证管理", description = "登录、退出、获取当前用户信息")
-@RestController
-@RequestMapping("/api/auth")
-@RequiredArgsConstructor
-public class AuthController {
-
- private final AuthService authService;
-
- @Operation(summary = "用户登录，返回 Bearer Token")
- @PostMapping("/login")
- public Result login(@RequestBody LoginRequest request) {
- return Result.success(authService.login(request));
- }
-
- @Operation(summary = "退出登录，立即删除 Redis Token")
- @PostMapping("/logout")
- public Result logout(HttpServletRequest request) {
- String token = extractToken(request);
- authService.logout(token);
- return Result.success(null);
- }
-
- @Operation(summary = "获取当前登录用户信息")
- @GetMapping("/me")
- public Result me(HttpServletRequest request) {
- TokenPrincipal principal = (TokenPrincipal) request.getAttribute("__token_principal__");
- return Result.success(authService.me(principal));
- }
-
- private String extractToken(HttpServletRequest request) {
- String authHeader = request.getHeader("Authorization");
- if (authHeader != null && authHeader.startsWith("Bearer ")) {
- return authHeader.substring(7).trim();
- }
- return null;
- }
-}
-```
-
-- [ ] **Step 2: 替换 UserController.java**
-
-```java
-package com.label.module.user.controller;
-
-import com.label.common.result.PageResult;
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.user.entity.SysUser;
-import com.label.module.user.service.UserService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.Map;
-
-/**
- * 用户管理接口（5 个端点，全部 ADMIN 权限）。
- */
-@Tag(name = "用户管理", description = "用户 CRUD、状态与角色变更（ADMIN 专属）")
-@RestController
-@RequestMapping("/api/users")
-@RequiredArgsConstructor
-public class UserController {
-
- private final UserService userService;
-
- @Operation(summary = "分页查询用户列表")
- @GetMapping
- @RequiresRoles("ADMIN")
- public Result> listUsers(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- HttpServletRequest request) {
- return Result.success(userService.listUsers(page, pageSize, principal(request)));
- }
-
- @Operation(summary = "创建用户")
- @PostMapping
- @RequiresRoles("ADMIN")
- public Result createUser(@RequestBody Map body,
- HttpServletRequest request) {
- return Result.success(userService.createUser(
- body.get("username"),
- body.get("password"),
- body.get("realName"),
- body.get("role"),
- principal(request)));
- }
-
- @Operation(summary = "更新用户基本信息（realName / password）")
- @PutMapping("/{id}")
- @RequiresRoles("ADMIN")
- public Result updateUser(@PathVariable Long id,
- @RequestBody Map body,
- HttpServletRequest request) {
- return Result.success(userService.updateUser(
- id,
- body.get("realName"),
- body.get("password"),
- principal(request)));
- }
-
- @Operation(summary = "变更用户状态（ACTIVE / DISABLED）")
- @PutMapping("/{id}/status")
- @RequiresRoles("ADMIN")
- public Result updateStatus(@PathVariable Long id,
- @RequestBody Map body,
- HttpServletRequest request) {
- userService.updateStatus(id, body.get("status"), principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "变更用户角色，立即驱逐权限缓存")
- @PutMapping("/{id}/role")
- @RequiresRoles("ADMIN")
- public Result updateRole(@PathVariable Long id,
- @RequestBody Map body,
- HttpServletRequest request) {
- userService.updateRole(id, body.get("role"), principal(request));
- return Result.success(null);
- }
-
- private TokenPrincipal principal(HttpServletRequest request) {
- return (TokenPrincipal) request.getAttribute("__token_principal__");
- }
-}
-```
-
-- [ ] **Step 3: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 4: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/module/user/controller/
-git commit -m "feat: add @Tag/@Operation to AuthController and UserController"
-```
-
----
-
-## Task 6: SourceController + TaskController 添加 Swagger 注解
-
-**Files:**
-- Modify: `src/main/java/com/label/module/source/controller/SourceController.java`
-- Modify: `src/main/java/com/label/module/task/controller/TaskController.java`
-
-- [ ] **Step 1: 替换 SourceController.java**
-
-```java
-package com.label.module.source.controller;
-
-import com.label.common.result.PageResult;
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.source.dto.SourceResponse;
-import com.label.module.source.service.SourceService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.http.HttpStatus;
-import org.springframework.web.bind.annotation.*;
-import org.springframework.web.multipart.MultipartFile;
-
-/**
- * 原始资料管理接口。
- */
-@Tag(name = "资料管理", description = "文件上传至 RustFS、资料元数据管理")
-@RestController
-@RequestMapping("/api/source")
-@RequiredArgsConstructor
-public class SourceController {
-
- private final SourceService sourceService;
-
- @Operation(summary = "上传文件（multipart/form-data），返回资料摘要")
- @PostMapping("/upload")
- @RequiresRoles("UPLOADER")
- @ResponseStatus(HttpStatus.CREATED)
- public Result upload(
- @RequestParam("file") MultipartFile file,
- @RequestParam("dataType") String dataType,
- HttpServletRequest request) {
- TokenPrincipal principal = (TokenPrincipal) request.getAttribute("__token_principal__");
- return Result.success(sourceService.upload(file, dataType, principal));
- }
-
- @Operation(summary = "分页查询资料列表（UPLOADER 只见自己，ADMIN 见全部）")
- @GetMapping("/list")
- @RequiresRoles("UPLOADER")
- public Result> list(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- @RequestParam(required = false) String dataType,
- @RequestParam(required = false) String status,
- HttpServletRequest request) {
- TokenPrincipal principal = (TokenPrincipal) request.getAttribute("__token_principal__");
- return Result.success(sourceService.list(page, pageSize, dataType, status, principal));
- }
-
- @Operation(summary = "查询资料详情（含 15 分钟预签名下载链接）")
- @GetMapping("/{id}")
- @RequiresRoles("UPLOADER")
- public Result findById(@PathVariable Long id) {
- return Result.success(sourceService.findById(id));
- }
-
- @Operation(summary = "删除资料（仅 PENDING 状态可删），同步删除 RustFS 文件")
- @DeleteMapping("/{id}")
- @RequiresRoles("ADMIN")
- public Result delete(@PathVariable Long id, HttpServletRequest request) {
- TokenPrincipal principal = (TokenPrincipal) request.getAttribute("__token_principal__");
- sourceService.delete(id, principal.getCompanyId());
- return Result.success(null);
- }
-}
-```
-
-- [ ] **Step 2: 替换 TaskController.java**
-
-```java
-package com.label.module.task.controller;
-
-import com.label.common.result.PageResult;
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.task.dto.TaskResponse;
-import com.label.module.task.service.TaskClaimService;
-import com.label.module.task.service.TaskService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.Map;
-
-/**
- * 任务管理接口（10 个端点）。
- */
-@Tag(name = "任务管理", description = "任务创建、领取、放弃、审批、强制转移")
-@RestController
-@RequestMapping("/api/tasks")
-@RequiredArgsConstructor
-public class TaskController {
-
- private final TaskService taskService;
- private final TaskClaimService taskClaimService;
-
- @Operation(summary = "查询可领取任务池（UNCLAIMED，ANNOTATOR 看 EXTRACTION，REVIEWER 看 SUBMITTED）")
- @GetMapping("/pool")
- @RequiresRoles("ANNOTATOR")
- public Result> getPool(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- HttpServletRequest request) {
- return Result.success(taskService.getPool(page, pageSize, principal(request)));
- }
-
- @Operation(summary = "查询我的任务（IN_PROGRESS / SUBMITTED / REJECTED）")
- @GetMapping("/mine")
- @RequiresRoles("ANNOTATOR")
- public Result> getMine(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- @RequestParam(required = false) String status,
- HttpServletRequest request) {
- return Result.success(taskService.getMine(page, pageSize, status, principal(request)));
- }
-
- @Operation(summary = "查询待审批队列（REVIEWER 专属，status=SUBMITTED）")
- @GetMapping("/pending-review")
- @RequiresRoles("REVIEWER")
- public Result> getPendingReview(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- @RequestParam(required = false) String taskType) {
- return Result.success(taskService.getPendingReview(page, pageSize, taskType));
- }
-
- @Operation(summary = "查询全部任务（ADMIN，支持状态/类型过滤）")
- @GetMapping
- @RequiresRoles("ADMIN")
- public Result> getAll(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- @RequestParam(required = false) String status,
- @RequestParam(required = false) String taskType) {
- return Result.success(taskService.getAll(page, pageSize, status, taskType));
- }
-
- @Operation(summary = "为指定资料创建标注任务（ADMIN）")
- @PostMapping
- @RequiresRoles("ADMIN")
- public Result createTask(@RequestBody Map body,
- HttpServletRequest request) {
- Long sourceId = Long.parseLong(body.get("sourceId").toString());
- String taskType = body.get("taskType").toString();
- TokenPrincipal principal = principal(request);
- return Result.success(taskService.toPublicResponse(
- taskService.createTask(sourceId, taskType, principal.getCompanyId())));
- }
-
- @Operation(summary = "查询任务详情")
- @GetMapping("/{id}")
- @RequiresRoles("ANNOTATOR")
- public Result getById(@PathVariable Long id) {
- return Result.success(taskService.toPublicResponse(taskService.getById(id)));
- }
-
- @Operation(summary = "领取任务（Redis SET NX + DB 乐观锁双重保障）")
- @PostMapping("/{id}/claim")
- @RequiresRoles("ANNOTATOR")
- public Result claim(@PathVariable Long id, HttpServletRequest request) {
- taskClaimService.claim(id, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "放弃任务，退回任务池")
- @PostMapping("/{id}/unclaim")
- @RequiresRoles("ANNOTATOR")
- public Result unclaim(@PathVariable Long id, HttpServletRequest request) {
- taskClaimService.unclaim(id, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "重领被驳回的任务（task.status=REJECTED 且 claimedBy=当前用户）")
- @PostMapping("/{id}/reclaim")
- @RequiresRoles("ANNOTATOR")
- public Result reclaim(@PathVariable Long id, HttpServletRequest request) {
- taskClaimService.reclaim(id, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "ADMIN 强制转移任务归属")
- @PutMapping("/{id}/reassign")
- @RequiresRoles("ADMIN")
- public Result reassign(@PathVariable Long id,
- @RequestBody Map body,
- HttpServletRequest request) {
- Long targetUserId = Long.parseLong(body.get("userId").toString());
- taskService.reassign(id, targetUserId, principal(request));
- return Result.success(null);
- }
-
- private TokenPrincipal principal(HttpServletRequest request) {
- return (TokenPrincipal) request.getAttribute("__token_principal__");
- }
-}
-```
-
-- [ ] **Step 3: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 4: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/module/source/controller/ \
- src/main/java/com/label/module/task/controller/
-git commit -m "feat: add @Tag/@Operation to SourceController and TaskController"
-```
-
----
-
-## Task 7: ExtractionController + QaController 添加 Swagger 注解
-
-**Files:**
-- Modify: `src/main/java/com/label/module/annotation/controller/ExtractionController.java`
-- Modify: `src/main/java/com/label/module/annotation/controller/QaController.java`
-
-- [ ] **Step 1: 替换 ExtractionController.java**
-
-```java
-package com.label.module.annotation.controller;
-
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.annotation.service.ExtractionService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.Map;
-
-/**
- * 提取阶段标注工作台接口（5 个端点）。
- */
-@Tag(name = "标注工作台", description = "EXTRACTION 阶段：AI 预标注、结果编辑、提交、审批")
-@RestController
-@RequestMapping("/api/extraction")
-@RequiredArgsConstructor
-public class ExtractionController {
-
- private final ExtractionService extractionService;
-
- @Operation(summary = "获取当前提取结果（含 AI 预标注数据）")
- @GetMapping("/{taskId}")
- @RequiresRoles("ANNOTATOR")
- public Result> getResult(@PathVariable Long taskId,
- HttpServletRequest request) {
- return Result.success(extractionService.getResult(taskId, principal(request)));
- }
-
- @Operation(summary = "更新提取结果（整体 JSONB 覆盖，PUT 语义）")
- @PutMapping("/{taskId}")
- @RequiresRoles("ANNOTATOR")
- public Result updateResult(@PathVariable Long taskId,
- @RequestBody String resultJson,
- HttpServletRequest request) {
- extractionService.updateResult(taskId, resultJson, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "提交提取结果，进入审批队列")
- @PostMapping("/{taskId}/submit")
- @RequiresRoles("ANNOTATOR")
- public Result submit(@PathVariable Long taskId,
- HttpServletRequest request) {
- extractionService.submit(taskId, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "审批通过（REVIEWER），自动触发 QA 任务创建")
- @PostMapping("/{taskId}/approve")
- @RequiresRoles("REVIEWER")
- public Result approve(@PathVariable Long taskId,
- HttpServletRequest request) {
- extractionService.approve(taskId, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "驳回提取结果（REVIEWER），标注员可重领后修改")
- @PostMapping("/{taskId}/reject")
- @RequiresRoles("REVIEWER")
- public Result reject(@PathVariable Long taskId,
- @RequestBody Map body,
- HttpServletRequest request) {
- String reason = body != null ? body.get("reason") : null;
- extractionService.reject(taskId, reason, principal(request));
- return Result.success(null);
- }
-
- private TokenPrincipal principal(HttpServletRequest request) {
- return (TokenPrincipal) request.getAttribute("__token_principal__");
- }
-}
-```
-
-- [ ] **Step 2: 替换 QaController.java**
-
-```java
-package com.label.module.annotation.controller;
-
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.annotation.service.QaService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.Map;
-
-/**
- * 问答生成阶段标注工作台接口（5 个端点）。
- */
-@Tag(name = "问答生成", description = "QA_GENERATION 阶段：查看候选问答对、修改、提交、审批")
-@RestController
-@RequestMapping("/api/qa")
-@RequiredArgsConstructor
-public class QaController {
-
- private final QaService qaService;
-
- @Operation(summary = "获取候选问答对列表")
- @GetMapping("/{taskId}")
- @RequiresRoles("ANNOTATOR")
- public Result> getResult(@PathVariable Long taskId,
- HttpServletRequest request) {
- return Result.success(qaService.getResult(taskId, principal(request)));
- }
-
- @Operation(summary = "修改问答对（整体覆盖，PUT 语义）")
- @PutMapping("/{taskId}")
- @RequiresRoles("ANNOTATOR")
- public Result updateResult(@PathVariable Long taskId,
- @RequestBody String body,
- HttpServletRequest request) {
- qaService.updateResult(taskId, body, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "提交问答对，进入审批队列")
- @PostMapping("/{taskId}/submit")
- @RequiresRoles("ANNOTATOR")
- public Result submit(@PathVariable Long taskId,
- HttpServletRequest request) {
- qaService.submit(taskId, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "审批通过（REVIEWER），写入 training_dataset，流水线完成")
- @PostMapping("/{taskId}/approve")
- @RequiresRoles("REVIEWER")
- public Result approve(@PathVariable Long taskId,
- HttpServletRequest request) {
- qaService.approve(taskId, principal(request));
- return Result.success(null);
- }
-
- @Operation(summary = "驳回问答对（REVIEWER），删除候选记录，标注员重新生成")
- @PostMapping("/{taskId}/reject")
- @RequiresRoles("REVIEWER")
- public Result reject(@PathVariable Long taskId,
- @RequestBody Map body,
- HttpServletRequest request) {
- String reason = body != null ? body.get("reason") : null;
- qaService.reject(taskId, reason, principal(request));
- return Result.success(null);
- }
-
- private TokenPrincipal principal(HttpServletRequest request) {
- return (TokenPrincipal) request.getAttribute("__token_principal__");
- }
-}
-```
-
-- [ ] **Step 3: 编译验证**
-
-```bash
-cd label_backend
-mvn compile -q
-```
-
-预期：`BUILD SUCCESS`
-
-- [ ] **Step 4: Commit**
-
-```bash
-cd label_backend
-git add src/main/java/com/label/module/annotation/controller/
-git commit -m "feat: add @Tag/@Operation to ExtractionController and QaController"
-```
-
----
-
-## Task 8: ExportController + SysConfigController + VideoController 添加 Swagger 注解
-
-**Files:**
-- Modify: `src/main/java/com/label/module/export/controller/ExportController.java`
-- Modify: `src/main/java/com/label/module/config/controller/SysConfigController.java`
-- Modify: `src/main/java/com/label/module/video/controller/VideoController.java`
-
-- [ ] **Step 1: 替换 ExportController.java**
-
-```java
-package com.label.module.export.controller;
-
-import com.label.common.result.PageResult;
-import com.label.common.result.Result;
-import com.label.common.shiro.TokenPrincipal;
-import com.label.module.annotation.entity.TrainingDataset;
-import com.label.module.export.entity.ExportBatch;
-import com.label.module.export.service.ExportService;
-import com.label.module.export.service.FinetuneService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.springframework.http.HttpStatus;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.List;
-import java.util.Map;
-
-/**
- * 训练数据导出与微调接口（5 个端点，全部 ADMIN 权限）。
- */
-@Tag(name = "导出管理", description = "训练样本查询、JSONL 批次导出、GLM 微调任务管理")
-@RestController
-@RequiredArgsConstructor
-public class ExportController {
-
- private final ExportService exportService;
- private final FinetuneService finetuneService;
-
- @Operation(summary = "分页查询已审批可导出的训练样本")
- @GetMapping("/api/training/samples")
- @RequiresRoles("ADMIN")
- public Result> listSamples(
- @RequestParam(defaultValue = "1") int page,
- @RequestParam(defaultValue = "20") int pageSize,
- @RequestParam(required = false) String sampleType,
- @RequestParam(required = false) Boolean exported,
- HttpServletRequest request) {
- return Result.success(exportService.listSamples(page, pageSize, sampleType, exported, principal(request)));
- }
-
- @Operation(summary = "创建导出批次，合并样本为 JSONL 并上传 RustFS")
- @PostMapping("/api/export/batch")
- @RequiresRoles("ADMIN")
- @ResponseStatus(HttpStatus.CREATED)
- public Result createBatch(@RequestBody Map body,
- HttpServletRequest request) {
- @SuppressWarnings("unchecked")
- List