feat: 知识治理平台(含已验证发布/回滚契约)

全栈知识治理平台首次入库（P1-P10 + 发布链路模拟验证闭环）：

- 治理核心：源目录/变更集/人工审核/发布批次/发布执行（fail-closed 闸口）
- 测试通道：WeKnora 测试 KB 上传/轮询/验收；poll 完成时写入
  parser_generation/index_generation，修复 manual/seed 路径发布闸口永久拦截
- 发布适配器 v071（本地 source=测试角色 / 云端 target=生产角色 模拟验证通过）：
  * ES 导出/导入 mapping 自适应（.keyword 子字段、可选 tenant_id）
  * OSS locator 支持嵌套 scheme；chunks.seq_id 由目标序列分配
  * bundle 归档同身份重试原子替换；verifier 按 bundle chunk_type 计数
  * 回滚 job payload 支持 prior_execution_id（strict 解码）
- 三通道发布+回滚演练实测：publish 4/4 verified，检索命中，
  rollback 4/4 rolled_back，目标端 PG is_enabled=false、ES is_enabled=false
- 前端 A·Data-console 风格全站统一，120 用例通过
- 门禁：go vet / go test 全包通过，gofmt 干净

scripts/accept_source_links.py

@@ -0,0 +1,28 @@
+"""Read-only acceptance for local simulated source-link configuration."""
+import json
+from pathlib import Path
+from selenium import webdriver
+from selenium.webdriver.common.by import By
+from selenium.webdriver.firefox.options import Options
+from selenium.webdriver.firefox.service import Service
+from selenium.webdriver.support.ui import WebDriverWait
+BASE='http://127.0.0.1:8088';ROOT=Path(__file__).resolve().parents[1]
+options=Options();options.add_argument('--headless');options.binary_location='/snap/firefox/current/usr/lib/firefox/firefox'
+driver=webdriver.Firefox(options=options,service=Service('/snap/bin/geckodriver'));driver.set_window_size(1440,1000);wait=WebDriverWait(driver,30,poll_frequency=.1)
+def body():return driver.find_element(By.TAG_NAME,'body').text
+def click_source(name):driver.find_element(By.XPATH,f"//aside[contains(@class,'source-link-list')]//button[.//b[.='{name}']]").click();wait.until(lambda d:d.find_element(By.CSS_SELECTOR,'.source-link-title h2').text==name)
+def fits():assert driver.execute_script('return document.documentElement.scrollWidth<=window.innerWidth')
+try:
+ driver.get(BASE);wait.until(lambda d:d.find_element(By.TAG_NAME,'h1').text=='来源与目录');driver.find_element(By.XPATH,"//nav//button[contains(.,'来源链接')]").click();wait.until(lambda d:d.find_element(By.TAG_NAME,'h1').text=='来源链接');wait.until(lambda d:len(d.find_elements(By.CSS_SELECTOR,'.source-link-list button'))==7)
+ for expected in ['本地模拟配置','公司级技术支持知识库','PP资料下载中心','国内工业','知识库链接','认证方式','Key或Token','模拟登录并验证目录','不保存真实Key','模拟验证待执行']:
+  assert expected in body(),expected
+ auth_input=driver.find_element(By.XPATH,"//label[contains(.,'认证方式')]/input");assert auth_input.get_attribute('value')=='专用浏览器扫码登录'
+ key_input=driver.find_element(By.XPATH,"//label[contains(.,'Key或Token')]/input");assert key_input.get_attribute('disabled') and key_input.get_attribute('placeholder')=='本地模拟阶段不接收真实Key'
+ driver.find_element(By.CSS_SELECTOR,'.validate-source-link').click();wait.until(lambda d:len(d.find_elements(By.CSS_SELECTOR,'.validation-results b'))==5);assert all(x.text=='模拟通过' for x in driver.find_elements(By.CSS_SELECTOR,'.validation-results b'))
+ click_source('PP资料下载中心');assert driver.find_element(By.XPATH,"//label[contains(.,'认证方式')]/input").get_attribute('value')=='公开访问，无需Key' and '模拟验证公开目录' in body()
+ click_source('国内工业');assert driver.find_element(By.XPATH,"//label[contains(.,'认证方式')]/input").get_attribute('value')=='只读Token' and '模拟验证只读Token' in body() and '不执行上传、移动、重命名或删除' in body()
+ for width in (1440,1024,768):driver.set_window_size(width,900);fits()
+ driver.set_window_size(1440,1000);driver.get_full_page_screenshot_as_file(str(ROOT/'tmp/SOURCE_LINK_SIMULATION_FIREFOX.png'))
+ result={'sources':7,'mode':'simulation','dingtalk_login':'pass','pp_public':'pass','alist_readonly_token':'pass','real_key_input_disabled':True,'validation_steps':5,'root_overflow':False,'external_write_requests':0}
+ (ROOT/'tmp/source-link-simulation-acceptance.json').write_text(json.dumps(result,ensure_ascii=False,indent=2));print(json.dumps(result,ensure_ascii=False))
+finally:driver.quit()