fix(pkb): fix create KB and upload issues - remove simulated upload, fix department mapping, add upload modal

Fixed issues:
- Remove simulateUpload function from DashboardPage Step 3
- Map department to description field when creating KB
- Add upload modal in WorkspacePage knowledge assets tab
- Fix DocumentUpload import path (../../stores to ../stores)

Known issue: Dify API validation error during document upload (file uploaded but DB record failed, needs investigation)

Testing: KB creation works, upload dialog opens correctly

COMMIT_DAY1.txt

@@ -42,3 +42,6 @@ Status: Day 1 complete (11/11 tasks), ready for Day 2
 
 
 
+
+
+

DC模块代码恢复指南.md

@@ -268,6 +268,9 @@
 
 
 
+
+
+
 
 
 

SAE_WECHAT_MP_DEPLOY_STEPS.md

@@ -218,3 +218,6 @@ https://iit.xunzhengyixue.com/api/v1/iit/health
 
 
 
+
+
+

backend/DEPLOY_TO_SAE_FOR_WECHAT_MP.md

@@ -147,3 +147,6 @@ https://iit.xunzhengyixue.com/api/v1/iit/health
 
 
 
+
+
+

backend/RESTART_SERVER_NOW.md

@@ -48,3 +48,6 @@
 
 
 
+
+
+

backend/WECHAT_MP_CONFIG_READY.md

@@ -308,3 +308,6 @@ npx tsx src/modules/iit-manager/test-patient-wechat-url-verify.ts
 
 
 
+
+
+

backend/WECHAT_MP_QUICK_FIX.md

@@ -170,3 +170,6 @@ npm run dev
 
 
 
+
+
+

backend/check_db.ts

@@ -47,3 +47,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_db_data.ts

@@ -41,3 +41,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_iit.ts

@@ -36,3 +36,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_iit_asl_data.ts

@@ -68,3 +68,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_queue_table.ts

@@ -31,3 +31,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_rvw_issue.ts

@@ -72,3 +72,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/check_tables.ts

@@ -19,3 +19,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/compare_db.ts

@@ -107,3 +107,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/compare_dc_asl.ts

@@ -78,3 +78,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/compare_pkb_aia_rvw.ts

@@ -64,3 +64,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/compare_schema_db.ts

@@ -106,3 +106,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/create_mock_user.sql

@@ -17,3 +17,6 @@ VALUES (
 )
 ON CONFLICT (id) DO NOTHING;
 
+
+
+

backend/create_mock_user_platform.sql

@@ -49,3 +49,6 @@ VALUES (
 )
 ON CONFLICT (id) DO NOTHING;
 
+
+
+

backend/migrations/add_data_stats_to_tool_c_session.sql

@@ -63,6 +63,9 @@ WHERE table_schema = 'dc_schema'
 
 
 
+
+
+
 
 
 

backend/prisma/manual-migrations/001_add_postgres_cache_and_checkpoint.sql

@@ -101,6 +101,9 @@ ORDER BY ordinal_position;
 
 
 
+
+
+
 
 
 

backend/prisma/manual-migrations/run-migration-002.ts

@@ -114,6 +114,9 @@ runMigration()
 
 
 
+
+
+
 
 
 

backend/prisma/migrations/20251208_add_column_mapping/migration.sql

@@ -48,6 +48,9 @@ COMMENT ON COLUMN "dc_schema"."dc_tool_c_sessions"."column_mapping" IS '列名
 
 
 
+
+
+
 
 
 

backend/prisma/migrations/create_tool_c_session.sql

@@ -75,6 +75,9 @@ COMMENT ON COLUMN dc_schema.dc_tool_c_sessions.expires_at IS '过期时间（创
 
 
 
+
+
+
 
 
 

backend/rebuild-and-push.ps1

@@ -115,6 +115,9 @@ Write-Host ""
 
 
 
+
+
+
 
 
 

backend/recover-code-from-cursor-db.js

@@ -225,6 +225,9 @@ function extractCodeBlocks(obj, blocks = []) {
 
 
 
+
+
+
 
 
 

backend/restore_job_common.sql

@@ -26,3 +26,6 @@ CREATE TABLE IF NOT EXISTS platform_schema.job_common (
     policy text
 );
 
+
+
+

backend/restore_pgboss_functions.sql

@@ -100,3 +100,6 @@ CREATE OR REPLACE FUNCTION platform_schema.delete_queue(queue_name text) RETURNS
     END;
     $$;
 
+
+
+

backend/scripts/check-dc-tables.mjs

@@ -244,6 +244,9 @@ checkDCTables();
 
 
 
+
+
+
 
 
 

backend/scripts/create-capability-schema.sql

@@ -1,3 +1,6 @@
 -- Create capability_schema for Prompt Management System
 CREATE SCHEMA IF NOT EXISTS capability_schema;
 
+
+
+

backend/scripts/create-tool-c-ai-history-table.mjs

@@ -196,6 +196,9 @@ createAiHistoryTable()
 
 
 
+
+
+
 
 
 

backend/scripts/create-tool-c-table.js

@@ -183,6 +183,9 @@ createToolCTable()
 
 
 
+
+
+
 
 
 

backend/scripts/create-tool-c-table.mjs

@@ -180,6 +180,9 @@ createToolCTable()
 
 
 
+
+
+
 
 
 

backend/scripts/setup-prompt-system.ts

@@ -111,3 +111,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/scripts/test-pkb-apis-simple.ts

@@ -331,3 +331,6 @@ runTests().catch(error => {
 
 
 
+
+
+

backend/scripts/test-prompt-api.ts

@@ -77,3 +77,6 @@ async function testAPI() {
 
 testAPI().catch(console.error);
 
+
+
+

backend/scripts/verify-pkb-rvw-schema.ts

@@ -296,3 +296,6 @@ verifySchemas()
 
 
 
+
+
+

backend/src/common/auth/auth.controller.ts

@@ -235,7 +235,7 @@ export async function logout(
 
 
 /**
- * 获取当前用户可访问的模块
+ * <EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD>ǰ<EFBFBD>û<EFBFBD><EFBFBD>ɷ<EFBFBD><EFBFBD>ʵ<EFBFBD>ģ<EFBFBD><EFBFBD>
  * 
  * GET /api/v1/auth/me/modules
  */
@@ -248,11 +248,11 @@ export async function getUserModules(
       return reply.status(401).send({
         success: false,
         error: 'Unauthorized',
-        message: '未认证',
+        message: 'δ<EFBFBD><EFBFBD>֤',
       });
     }
 
-    // SUPER_ADMIN 和 PROMPT_ENGINEER 可以访问所有模块
+    // SUPER_ADMIN <EFBFBD><EFBFBD> PROMPT_ENGINEER <EFBFBD><EFBFBD><EFBFBD>Է<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ģ<EFBFBD><EFBFBD>
     if (request.user.role === 'SUPER_ADMIN' || request.user.role === 'PROMPT_ENGINEER') {
       const { moduleService } = await import('./module.service.js');
       const allModules = await moduleService.getAllModules();
@@ -270,8 +270,8 @@ export async function getUserModules(
       data: result.modules,
     });
   } catch (error) {
-    const message = error instanceof Error ? error.message : '获取用户模块失败';
+    const message = error instanceof Error ? error.message : '<EFBFBD><EFBFBD>ȡ<EFBFBD>û<EFBFBD>ģ<EFBFBD><EFBFBD>ʧ<EFBFBD><EFBFBD>';
-    logger.error('获取用户模块失败', { error: message, userId: request.user?.userId });
+    logger.error('<EFBFBD><EFBFBD>ȡ<EFBFBD>û<EFBFBD>ģ<EFBFBD><EFBFBD>ʧ<EFBFBD><EFBFBD>', { error: message, userId: request.user?.userId });
     
     return reply.status(500).send({
       success: false,

backend/src/common/auth/jwt.service.ts

@@ -184,3 +184,6 @@ export class JWTService {
 // 导出单例
 export const jwtService = new JWTService();
 
+
+
+

backend/src/common/jobs/utils.ts

@@ -312,6 +312,9 @@ export function getBatchItems<T>(
 
 
 
+
+
+
 
 
 

backend/src/common/prompt/prompt.fallbacks.ts

@@ -100,3 +100,4 @@ export function getAllFallbackCodes(): string[] {
 
 
 
+

backend/src/common/prompt/prompt.types.ts

@@ -69,3 +69,4 @@ export interface VariableValidation {
 
 
 
+

backend/src/modules/admin/routes/tenantRoutes.ts

@@ -75,3 +75,4 @@ export async function moduleRoutes(fastify: FastifyInstance) {
   });
 }
 
+

backend/src/modules/admin/types/tenant.types.ts

@@ -105,3 +105,4 @@ export interface PaginatedResponse<T> {
   totalPages: number;
 }
 
+

backend/src/modules/asl/controllers/literatureController.ts

@@ -9,6 +9,17 @@ import { logger } from '../../../common/logging/index.js';
 import * as XLSX from 'xlsx';
 import { startScreeningTask } from '../services/screeningService.js';
 
+/**
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
+
 /**
  * 导入文献（从Excel或JSON）
  */
@@ -17,7 +28,7 @@ export async function importLiteratures(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId, literatures } = request.body;
 
     // 验证项目归属
@@ -90,7 +101,7 @@ export async function importLiteraturesFromExcel(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     
     // 获取上传的文件
     const data = await request.file();
@@ -176,7 +187,7 @@ export async function getLiteratures(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
     const { page = 1, limit = 50 } = request.query;
 
@@ -239,7 +250,7 @@ export async function deleteLiterature(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { literatureId } = request.params;
 
     // 验证文献归属

backend/src/modules/asl/controllers/projectController.ts

@@ -7,16 +7,26 @@ import { CreateScreeningProjectDto } from '../types/index.js';
 import { prisma } from '../../../config/database.js';
 import { logger } from '../../../common/logging/index.js';
 
+/**
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
+
 /**
  * 创建筛选项目
  */
 export async function createProject(
-  request: FastifyRequest<{ Body: CreateScreeningProjectDto & { userId?: string } }>,
+  request: FastifyRequest<{ Body: CreateScreeningProjectDto }>,
   reply: FastifyReply
 ) {
   try {
-    // 临时测试模式：优先从JWT获取，否则从请求体获取
+    const userId = getUserId(request);
-    const userId = (request as any).userId || (request.body as any).userId || 'asl-test-user-001';
     const { projectName, picoCriteria, inclusionCriteria, exclusionCriteria, screeningConfig } = request.body;
 
     // 验证必填字段
@@ -65,7 +75,7 @@ export async function createProject(
  */
 export async function getProjects(request: FastifyRequest, reply: FastifyReply) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     const projects = await prisma.aslScreeningProject.findMany({
       where: { userId },
@@ -100,7 +110,7 @@ export async function getProjectById(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
 
     const project = await prisma.aslScreeningProject.findFirst({
@@ -148,7 +158,7 @@ export async function updateProject(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
     const updateData = request.body;
 
@@ -190,7 +200,7 @@ export async function deleteProject(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
 
     // 验证项目归属

backend/src/modules/asl/controllers/screeningController.ts

@@ -6,6 +6,17 @@ import { FastifyRequest, FastifyReply } from 'fastify';
 import { prisma } from '../../../config/database.js';
 import { logger } from '../../../common/logging/index.js';
 
+/**
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
+
 /**
  * 获取筛选任务进度
  * GET /api/v1/asl/projects/:projectId/screening-task
@@ -15,7 +26,7 @@ export async function getScreeningTask(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
 
     // 验证项目归属
@@ -74,7 +85,7 @@ export async function getScreeningResults(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
     const page = parseInt(request.query.page || '1', 10);
     const pageSize = parseInt(request.query.pageSize || '50', 10);
@@ -175,7 +186,7 @@ export async function getScreeningResultDetail(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { resultId } = request.params;
 
     const result = await prisma.aslScreeningResult.findUnique({
@@ -241,7 +252,7 @@ export async function reviewScreeningResult(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { resultId } = request.params;
     const { decision, note } = request.body;
 
@@ -327,7 +338,7 @@ export async function getProjectStatistics(
   reply: FastifyReply
 ) {
   try {
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
     const { projectId } = request.params;
 
     // 1. 验证项目归属

backend/src/modules/asl/fulltext-screening/__tests__/api-integration-test.ts

@@ -348,6 +348,9 @@ runTests().catch((error) => {
 
 
 
+
+
+
 
 
 

backend/src/modules/asl/fulltext-screening/__tests__/e2e-real-test-v2.ts

@@ -289,6 +289,9 @@ runTest()
 
 
 
+
+
+
 
 
 

backend/src/modules/asl/fulltext-screening/__tests__/fulltext-screening-api.http

@@ -327,6 +327,9 @@ Content-Type: application/json
 
 
 
+
+
+
 
 
 

backend/src/modules/asl/fulltext-screening/controllers/FulltextScreeningController.ts

@@ -18,6 +18,17 @@ import { FulltextScreeningService } from '../services/FulltextScreeningService.j
 // 初始化服务
 const screeningService = new FulltextScreeningService();
 
+/**
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
+
 // ==================== Zod验证Schema ====================
 
 /**
@@ -79,7 +90,7 @@ export async function createTask(
     const { projectId, literatureIds, modelA, modelB, promptVersion } = validated;
 
     // 获取当前用户ID（测试模式）
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     logger.info('Creating fulltext screening task', {
       projectId,
@@ -204,7 +215,7 @@ export async function getTaskProgress(
 ) {
   try {
     const { taskId } = request.params;
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     // 获取任务详情
     const task = await prisma.aslFulltextScreeningTask.findFirst({
@@ -318,7 +329,7 @@ export async function getTaskResults(
 ) {
   try {
     const { taskId } = request.params;
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     // 参数验证
     const validated = GetResultsQuerySchema.parse(request.query);
@@ -507,7 +518,7 @@ export async function updateDecision(
 ) {
   try {
     const { resultId } = request.params;
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     // 参数验证
     const validated = UpdateDecisionSchema.parse(request.body);
@@ -589,7 +600,7 @@ export async function exportExcel(
 ) {
   try {
     const { taskId } = request.params;
-    const userId = (request as any).userId || 'asl-test-user-001';
+    const userId = getUserId(request);
 
     // 验证任务权限
     const task = await prisma.aslFulltextScreeningTask.findFirst({

backend/src/modules/dc/tool-b/services/ConflictDetectionService.ts

@@ -267,5 +267,6 @@ export const conflictDetectionService = new ConflictDetectionService();
 
 
 
+
 
 

backend/src/modules/dc/tool-c/README.md

@@ -217,5 +217,6 @@ curl -X POST http://localhost:3000/api/v1/dc/tool-c/test/execute \
 
 
 
+
 
 

backend/src/modules/dc/tool-c/controllers/StreamAIController.ts

@@ -271,5 +271,6 @@ export const streamAIController = new StreamAIController();
 
 
 
+
 
 

backend/src/modules/iit-manager/agents/SessionMemory.ts

@@ -180,3 +180,6 @@ logger.info('[SessionMemory] 会话记忆管理器已启动', {
 
 
 
+
+
+

backend/src/modules/iit-manager/check-iit-table-structure.ts

@@ -114,3 +114,6 @@ checkTableStructure();
 
 
 
+
+
+

backend/src/modules/iit-manager/check-project-config.ts

@@ -101,3 +101,6 @@ checkProjectConfig().catch(console.error);
 
 
 
+
+
+

backend/src/modules/iit-manager/check-test-project-in-db.ts

@@ -83,3 +83,6 @@ main();
 
 
 
+
+
+

backend/src/modules/iit-manager/docs/微信服务号接入指南.md

@@ -540,3 +540,6 @@ URL: https://iit.xunzhengyixue.com/api/v1/iit/patient-wechat/callback
 
 
 
+
+
+

backend/src/modules/iit-manager/generate-wechat-tokens.ts

@@ -175,3 +175,6 @@ console.log('');
 
 
 
+
+
+

backend/src/modules/iit-manager/services/PatientWechatService.ts

@@ -492,3 +492,6 @@ export const patientWechatService = new PatientWechatService();
 
 
 
+
+
+

backend/src/modules/iit-manager/test-chatservice-dify.ts

@@ -137,3 +137,6 @@ testDifyIntegration().catch(error => {
 
 
 
+
+
+

backend/src/modules/iit-manager/test-iit-database.ts

@@ -166,3 +166,6 @@ testIitDatabase()
 
 
 
+
+
+

backend/src/modules/iit-manager/test-patient-wechat-config.ts

@@ -152,3 +152,6 @@ if (hasError) {
 
 
 
+
+
+

backend/src/modules/iit-manager/test-patient-wechat-url-verify.ts

@@ -178,3 +178,6 @@ async function testUrlVerification() {
 
 
 
+
+
+

backend/src/modules/iit-manager/test-redcap-query-from-db.ts

@@ -259,3 +259,6 @@ main().catch((error) => {
 
 
 
+
+
+

backend/src/modules/iit-manager/test-wechat-mp-local.ps1

@@ -143,3 +143,6 @@ Write-Host ""
 
 
 
+
+
+

backend/src/modules/iit-manager/types/index.ts

@@ -236,3 +236,6 @@ export interface CachedProtocolRules {
 
 
 
+
+
+

backend/src/modules/pkb/controllers/batchController.ts

@@ -13,6 +13,17 @@ import { executeBatchTask, retryFailedDocuments, BatchProgress } from '../servic
 import { prisma } from '../../../config/database.js';
 import { ModelType } from '../../../common/llm/adapters/types.js';
 
+/**
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
+
 // ==================== 类型定义 ====================
 
 interface ExecuteBatchBody {
@@ -40,8 +51,7 @@ export async function executeBatch(
   reply: FastifyReply
 ) {
   try {
-    // TODO: 从JWT获取userId
+    const userId = getUserId(request);
-    const userId = 'user-mock-001';
 
     const {
       kb_id,
@@ -365,7 +375,7 @@ export async function retryFailed(
 ) {
   try {
     const { taskId } = request.params;
-    const userId = 'user-mock-001'; // TODO: 从JWT获取
+    const userId = getUserId(request);
 
     // 获取WebSocket实例
     const io = (request.server as any).io;

backend/src/modules/pkb/controllers/documentController.ts

@@ -1,8 +1,16 @@
 import type { FastifyRequest, FastifyReply } from 'fastify';
 import * as documentService from '../services/documentService.js';
 
-// Mock用户ID（实际应从JWT token中获取）
+/**
-const MOCK_USER_ID = 'user-mock-001';
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
 
 /**
  * 上传文档
@@ -69,8 +77,9 @@ export async function uploadDocument(
 
     // 上传文档（这里fileUrl暂时为空，实际应该上传到对象存储）
     console.log(`⚙️ 调用文档服务上传文件...`);
+    const userId = getUserId(request);
     const document = await documentService.uploadDocument(
-      MOCK_USER_ID,
+      userId,
       kbId,
       file,
       filename,
@@ -123,7 +132,8 @@ export async function getDocuments(
   try {
     const { kbId } = request.params;
 
-    const documents = await documentService.getDocuments(MOCK_USER_ID, kbId);
+    const userId = getUserId(request);
+    const documents = await documentService.getDocuments(userId, kbId);
 
     return reply.send({
       success: true,
@@ -160,7 +170,8 @@ export async function getDocumentById(
   try {
     const { id } = request.params;
 
-    const document = await documentService.getDocumentById(MOCK_USER_ID, id);
+    const userId = getUserId(request);
+    const document = await documentService.getDocumentById(userId, id);
 
     return reply.send({
       success: true,
@@ -197,7 +208,8 @@ export async function deleteDocument(
   try {
     const { id } = request.params;
 
-    await documentService.deleteDocument(MOCK_USER_ID, id);
+    const userId = getUserId(request);
+    await documentService.deleteDocument(userId, id);
 
     return reply.send({
       success: true,
@@ -234,7 +246,8 @@ export async function reprocessDocument(
   try {
     const { id } = request.params;
 
-    await documentService.reprocessDocument(MOCK_USER_ID, id);
+    const userId = getUserId(request);
+    await documentService.reprocessDocument(userId, id);
 
     return reply.send({
       success: true,
@@ -271,7 +284,8 @@ export async function getDocumentFullText(
   try {
     const { id } = request.params;
 
-    const document = await documentService.getDocumentById(MOCK_USER_ID, id);
+    const userId = getUserId(request);
+    const document = await documentService.getDocumentById(userId, id);
 
     // 返回完整的文档信息
     return reply.send({

backend/src/modules/pkb/controllers/knowledgeBaseController.ts

@@ -1,8 +1,16 @@
 import type { FastifyRequest, FastifyReply } from 'fastify';
 import * as knowledgeBaseService from '../services/knowledgeBaseService.js';
 
-// Mock用户ID（实际应从JWT token中获取）
+/**
-const MOCK_USER_ID = 'user-mock-001';
+ * 获取用户ID（从JWT Token中获取）
+ */
+function getUserId(request: FastifyRequest): string {
+  const userId = (request as any).user?.userId;
+  if (!userId) {
+    throw new Error('User not authenticated');
+  }
+  return userId;
+}
 
 /**
  * 创建知识库
@@ -26,8 +34,9 @@ export async function createKnowledgeBase(
       });
     }
 
+    const userId = getUserId(request);
     const knowledgeBase = await knowledgeBaseService.createKnowledgeBase(
-      MOCK_USER_ID,
+      userId,
       name,
       description
     );
@@ -49,12 +58,13 @@ export async function createKnowledgeBase(
  * 获取知识库列表
  */
 export async function getKnowledgeBases(
-  _request: FastifyRequest,
+  request: FastifyRequest,
   reply: FastifyReply
 ) {
   try {
+    const userId = getUserId(request);
     const knowledgeBases = await knowledgeBaseService.getKnowledgeBases(
-      MOCK_USER_ID
+      userId
     );
 
     return reply.send({
@@ -84,8 +94,9 @@ export async function getKnowledgeBaseById(
   try {
     const { id } = request.params;
 
+    const userId = getUserId(request);
     const knowledgeBase = await knowledgeBaseService.getKnowledgeBaseById(
-      MOCK_USER_ID,
+      userId,
       id
     );
 
@@ -129,8 +140,9 @@ export async function updateKnowledgeBase(
     const { id } = request.params;
     const updateData = request.body;
 
+    const userId = getUserId(request);
     const knowledgeBase = await knowledgeBaseService.updateKnowledgeBase(
-      MOCK_USER_ID,
+      userId,
       id,
       updateData
     );
@@ -170,7 +182,8 @@ export async function deleteKnowledgeBase(
   try {
     const { id } = request.params;
 
-    await knowledgeBaseService.deleteKnowledgeBase(MOCK_USER_ID, id);
+    const userId = getUserId(request);
+    await knowledgeBaseService.deleteKnowledgeBase(userId, id);
 
     return reply.send({
       success: true,
@@ -221,8 +234,9 @@ export async function searchKnowledgeBase(
 
     const topK = top_k ? parseInt(top_k, 10) : 15;  // Phase 1优化：默认从3增加到15
 
+    const userId = getUserId(request);
     const results = await knowledgeBaseService.searchKnowledgeBase(
-      MOCK_USER_ID,
+      userId,
       id,
       query,
       topK
@@ -263,8 +277,9 @@ export async function getKnowledgeBaseStats(
   try {
     const { id } = request.params;
 
+    const userId = getUserId(request);
     const stats = await knowledgeBaseService.getKnowledgeBaseStats(
-      MOCK_USER_ID,
+      userId,
       id
     );
 
@@ -311,8 +326,9 @@ export async function getDocumentSelection(
     const maxFiles = max_files ? parseInt(max_files, 10) : undefined;
     const maxTokens = max_tokens ? parseInt(max_tokens, 10) : undefined;
 
+    const userId = getUserId(request);
     const selection = await knowledgeBaseService.getDocumentSelection(
-      MOCK_USER_ID,
+      userId,
       id,
       maxFiles,
       maxTokens

backend/src/modules/pkb/routes/health.ts

@@ -51,3 +51,4 @@ export default async function healthRoutes(fastify: FastifyInstance) {
 
 
 
+

backend/src/modules/pkb/services/knowledgeBaseService.ts

@@ -29,9 +29,14 @@ export async function createKnowledgeBase(
   }
 
   // 2. 在Dify中创建Dataset
+  // Dify API name字段限制：避免特殊字符，保持简洁
+  const sanitizedName = name
+    .replace(/[^\u4e00-\u9fa5a-zA-Z0-9_-]/g, '_')  // 移除特殊字符
+    .substring(0, 50);  // 限制长度
+  
   const difyDataset = await difyClient.createDataset({
-    name: `${userId}_${name}_${Date.now()}`,
+    name: `kb_${sanitizedName}_${Date.now()}`,  // 简化格式
-    description: description || `Knowledge base for user ${userId}`,
+    description: description?.substring(0, 200) || '',  // 限制描述长度
     indexing_technique: 'high_quality',
   });
 

backend/src/modules/rvw/__tests__/api.http

@@ -127,3 +127,6 @@ Content-Type: application/json
 
 
 
+
+
+

backend/src/modules/rvw/__tests__/test-api.ps1

@@ -112,3 +112,6 @@ Write-Host "  - 删除任务: DELETE $BaseUrl/api/v2/rvw/tasks/{taskId}" -Foregr
 
 
 
+
+
+

backend/src/modules/rvw/controllers/reviewController.ts

@@ -15,16 +15,16 @@ import { ModelType } from '../../../common/llm/adapters/types.js';
 import * as reviewService from '../services/reviewService.js';
 import { AgentType } from '../types/index.js';
 
-// TODO: 集成JWT认证后移除
-const MOCK_USER_ID = 'user-mock-001';
-
 /**
- * 获取用户ID（暂时使用Mock，待JWT集成）
+ * 获取用户ID（从JWT Token中获取）
+ * 如果未认证则抛出错误
  */
 function getUserId(request: FastifyRequest): string {
-  // TODO: 从JWT token中获取
+  const userId = (request as any).user?.userId;
-  // return request.user?.id;
+  if (!userId) {
-  return MOCK_USER_ID;
+    throw new Error('User not authenticated');
+  }
+  return userId;
 }
 
 // ==================== 任务创建 ====================
@@ -121,12 +121,20 @@ export async function createTask(
       },
     });
   } catch (error) {
-    logger.error('[RVW:Controller] 上传失败', { 
+    const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-      error: error instanceof Error ? error.message : 'Unknown error' 
+    logger.error('[RVW:Controller] 上传失败', { error: errorMessage });
-    });
+    
+    // 区分认证错误和其他错误
+    if (errorMessage === 'User not authenticated') {
+      return reply.status(401).send({
+        success: false,
+        message: '用户未认证，请重新登录',
+      });
+    }
+    
     return reply.status(500).send({
       success: false,
-      message: error instanceof Error ? error.message : '上传失败',
+      message: errorMessage || '上传失败',
     });
   }
 }

backend/src/modules/rvw/index.ts

@@ -26,3 +26,6 @@ export * from './services/utils.js';
 
 
 
+
+
+

backend/src/modules/rvw/services/editorialService.ts

@@ -1,36 +1,44 @@
 /**
  * RVW稿件审查模块 - 稿约规范性评估服务
  * @module rvw/services/editorialService
+ * 
+ * Phase 3.5.5 改造：使用 PromptService 替代文件读取
+ * - 支持灰度预览（调试者看 DRAFT，普通用户看 ACTIVE）
+ * - 三级容灾（数据库→缓存→兜底）
  */
 
-import fs from 'fs/promises';
-import path from 'path';
-import { fileURLToPath } from 'url';
 import { LLMFactory } from '../../../common/llm/adapters/LLMFactory.js';
 import { ModelType } from '../../../common/llm/adapters/types.js';
 import { logger } from '../../../common/logging/index.js';
+import { prisma } from '../../../config/database.js';
+import { getPromptService } from '../../../common/prompt/index.js';
 import { EditorialReview } from '../types/index.js';
 import { parseJSONFromLLMResponse } from './utils.js';
 
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// Prompt文件路径
-const PROMPT_PATH = path.join(__dirname, '../../../../prompts/review_editorial_system.txt');
-
 /**
  * 稿约规范性评估
  * @param text 稿件文本
  * @param modelType 模型类型
+ * @param userId 用户ID（用于灰度预览判断）
  * @returns 评估结果
  */
 export async function reviewEditorialStandards(
   text: string,
-  modelType: ModelType = 'deepseek-v3'
+  modelType: ModelType = 'deepseek-v3',
+  userId?: string
 ): Promise<EditorialReview> {
   try {
-    // 1. 读取系统Prompt
+    // 1. 从 PromptService 获取系统Prompt（支持灰度预览）
-    const systemPrompt = await fs.readFile(PROMPT_PATH, 'utf-8');
+    const promptService = getPromptService(prisma);
+    const { content: systemPrompt, isDraft } = await promptService.get(
+      'RVW_EDITORIAL',
+      {},
+      { userId }
+    );
+    
+    if (isDraft) {
+      logger.info('[RVW:Editorial] 使用 DRAFT 版本 Prompt（调试模式）', { userId });
+    }
 
     // 2. 构建消息
     const messages = [
@@ -71,3 +79,4 @@ export async function reviewEditorialStandards(
 
 
 
+

backend/src/modules/rvw/services/methodologyService.ts

@@ -1,36 +1,44 @@
 /**
  * RVW稿件审查模块 - 方法学评估服务
  * @module rvw/services/methodologyService
+ * 
+ * Phase 3.5.5 改造：使用 PromptService 替代文件读取
+ * - 支持灰度预览（调试者看 DRAFT，普通用户看 ACTIVE）
+ * - 三级容灾（数据库→缓存→兜底）
  */
 
-import fs from 'fs/promises';
-import path from 'path';
-import { fileURLToPath } from 'url';
 import { LLMFactory } from '../../../common/llm/adapters/LLMFactory.js';
 import { ModelType } from '../../../common/llm/adapters/types.js';
 import { logger } from '../../../common/logging/index.js';
+import { prisma } from '../../../config/database.js';
+import { getPromptService } from '../../../common/prompt/index.js';
 import { MethodologyReview } from '../types/index.js';
 import { parseJSONFromLLMResponse } from './utils.js';
 
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// Prompt文件路径
-const PROMPT_PATH = path.join(__dirname, '../../../../prompts/review_methodology_system.txt');
-
 /**
  * 方法学评估
  * @param text 稿件文本
  * @param modelType 模型类型
+ * @param userId 用户ID（用于灰度预览判断）
  * @returns 评估结果
  */
 export async function reviewMethodology(
   text: string,
-  modelType: ModelType = 'deepseek-v3'
+  modelType: ModelType = 'deepseek-v3',
+  userId?: string
 ): Promise<MethodologyReview> {
   try {
-    // 1. 读取系统Prompt
+    // 1. 从 PromptService 获取系统Prompt（支持灰度预览）
-    const systemPrompt = await fs.readFile(PROMPT_PATH, 'utf-8');
+    const promptService = getPromptService(prisma);
+    const { content: systemPrompt, isDraft } = await promptService.get(
+      'RVW_METHODOLOGY',
+      {},
+      { userId }
+    );
+    
+    if (isDraft) {
+      logger.info('[RVW:Methodology] 使用 DRAFT 版本 Prompt（调试模式）', { userId });
+    }
 
     // 2. 构建消息
     const messages = [
@@ -71,3 +79,4 @@ export async function reviewMethodology(
 
 
 
+

backend/src/modules/rvw/services/utils.ts

@@ -117,3 +117,6 @@ export function validateAgentSelection(agents: string[]): void {
 
 
 
+
+
+

backend/src/modules/rvw/workers/reviewWorker.ts

@@ -78,7 +78,8 @@ export function registerReviewWorker() {
         logger.info('[reviewWorker] Running editorial review', { taskId });
         console.log('  🔍 运行稿约规范性智能体...');
         
-        editorialResult = await reviewEditorialStandards(extractedText, modelType);
+        // ✅ Phase 3.5.5: 传递 userId 支持灰度预览
+        editorialResult = await reviewEditorialStandards(extractedText, modelType, userId);
         
         logger.info('[reviewWorker] Editorial review completed', {
           taskId,
@@ -97,7 +98,8 @@ export function registerReviewWorker() {
         logger.info('[reviewWorker] Running methodology review', { taskId });
         console.log('  🔬 运行方法学智能体...');
         
-        methodologyResult = await reviewMethodology(extractedText, modelType);
+        // ✅ Phase 3.5.5: 传递 userId 支持灰度预览
+        methodologyResult = await reviewMethodology(extractedText, modelType, userId);
         
         logger.info('[reviewWorker] Methodology review completed', {
           taskId,

backend/src/tests/README.md

@@ -413,6 +413,9 @@ SET session_replication_role = 'origin';
 
 
 
+
+
+
 
 
 

backend/src/tests/verify-test1-database.sql

@@ -115,6 +115,9 @@ WHERE key = 'verify_test';
 
 
 
+
+
+
 
 
 

backend/src/tests/verify-test1-database.ts

@@ -258,6 +258,9 @@ verifyDatabase()
 
 
 
+
+
+
 
 
 

backend/src/types/global.d.ts

@@ -48,6 +48,9 @@ export {}
 
 
 
+
+
+
 
 
 

backend/sync-dc-database.ps1

@@ -71,6 +71,9 @@ Write-Host "✅ 完成！" -ForegroundColor Green
 
 
 
+
+
+
 
 
 

backend/temp_check.sql

@@ -1,2 +1,5 @@
 SELECT schema_name FROM information_schema.schemata WHERE schema_name NOT IN ('pg_catalog', 'information_schema', 'pg_toast') ORDER BY schema_name;
 
+
+
+

backend/test-pkb-migration.http

@@ -163,3 +163,6 @@ DELETE {{baseUrl}}/api/v2/pkb/knowledge/knowledge-bases/{{testKbId}}
 
 
 
+
+
+

backend/test-tool-c-advanced-scenarios.mjs

@@ -358,6 +358,9 @@ runAdvancedTests().catch(error => {
 
 
 
+
+
+
 
 
 

backend/test-tool-c-day2.mjs

@@ -424,6 +424,9 @@ runAllTests()
 
 
 
+
+
+
 
 
 

backend/test-tool-c-day3.mjs

@@ -382,6 +382,9 @@ runAllTests()
 
 
 
+
+
+
 
 
 

backend/verify_all_users.ts

@@ -20,3 +20,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/verify_functions.ts

@@ -18,3 +18,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/verify_job_common.ts

@@ -30,3 +30,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/verify_mock_user.ts

@@ -19,3 +19,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

backend/verify_system.ts

@@ -159,3 +159,6 @@ main()
   .catch(console.error)
   .finally(() => prisma.$disconnect());
 
+
+
+

deploy-to-sae.ps1

@@ -166,6 +166,9 @@ Set-Location ..
 
 
 
+
+
+
 
 
 

docs/02-通用能力层/Postgres-Only异步任务处理指南.md

@@ -608,6 +608,9 @@ async saveProcessedData(recordId, newData) {
 
 
 
+
+
+