fix(goal): v0.18.2 审查即修——编辑回弹/重复建目标/规划并发互斥/白名单守卫/坏快照降级

- P1：GoalPlanApprovalDialog 标题编辑被原题覆盖（...editingTitles, ...m 展开顺序）
  ——编辑优先 + 3 项组件测试回归
- P1：InterviewDialog AI 路径重复建目标——失败回滚新建（delete_goal+置空）/
  确认成功 onCreated 收口结束向导
- P1：ai_goal_plan 无并发互斥（双击/多窗口重复扣费）——AppState
  Arc<AtomicBool> swap 占位 + BusyGuard Drop 释放（async Send 兼容）
- P2：goal_apply_plan 里程碑白名单与周界再校验（防任意请求直写 self_test 占位）
- P2：ai_goal_plan 状态守卫（仅 active/paused 可规划——毕业/放弃无实际意义防误操作）
- P3：毕业档案坏快照单条跳过+日志（原整命令失败——归档可读性优先）
- P3：goal_summary 历法换算已知锚点回归（1700000000=2023-11-14 UTC）

Author: Aparencia

app/src-tauri/src/app_setup.rs

@@ -236,6 +236,8 @@ pub fn setup_app_state(app: &mut tauri::App) -> Result<(), String> {
         live_session: LiveSessionManager::new(),
         model_downloader: ModelDownloader::new(),
         app: app.handle().clone(),
+        // v0.18.2（REQ-251）：目标规划互斥占位（初值 false——未占用）
+        goal_plan_busy: std::sync::Arc::new(std::sync::atomic::AtomicBool::new(false)),
         ocr_device_config_path,
         ocr_device_config,
         ocr_models,

app/src-tauri/src/commands.rs

@@ -88,6 +88,11 @@ pub struct AppState {
     pub model_downloader: ModelDownloader,
     /// 应用句柄（事件推送 live:* / model:*）
     pub app: tauri::AppHandle,
+    /// v0.18.2（REQ-251）：目标规划并发互斥——防多窗口/双击重复扣费。
+    /// 同步规划调用无任务去重表（ai_refine_start 的按会话去重先例）；
+    /// Arc<AtomicBool>（AppState Clone 传播）+ swap 占位（async command
+    /// 跨 await 需 Send，不用 MutexGuard）。
+    pub goal_plan_busy: std::sync::Arc<std::sync::atomic::AtomicBool>,
     /// OCR 设备配置文件路径（ADR-009：模式/校准持久化，应用数据目录）
     pub ocr_device_config_path: std::path::PathBuf,
     /// OCR 模型标识（ADR-009 校准"重新检测"用；与引擎池启动同源）

app/src-tauri/src/commands_goals_lifecycle.rs

@@ -149,10 +149,15 @@ pub(crate) fn goal_abandon_inner(db: &Db, id: i64, reason: Option<&str>) -> Resu
 
 pub(crate) fn list_goal_graduations_inner(db: &Db) -> Result<Vec<GraduationReport>, String> {
     let jsons = db.list_graduation_reports_json().map_err(|e| e.to_string())?;
-    jsons
-        .into_iter()
-        .map(|json| serde_json::from_str::<GraduationReport>(&json).map_err(|e| e.to_string()))
-        .collect()
+    let mut out = Vec::new();
+    for json in jsons {
+        match serde_json::from_str::<GraduationReport>(&json) {
+            Ok(report) => out.push(report),
+            // 审查修复：单条快照损坏不阻塞档案区（跳过+日志——归档可读性优先）
+            Err(e) => eprintln!("[Goal] 毕业报告快照损坏跳过（id 不可定位，保留原文供排查）: {}", e),
+        }
+    }
+    Ok(out)
 }
 
 #[cfg(test)]

app/src-tauri/src/commands_goals_plan.rs

@@ -79,6 +79,31 @@ pub async fn ai_goal_plan(
     authorized: bool,
 ) -> Result<GoalPlanView, String> {
     require_goal(&state.db, goal_id)?;
+    // 审查修复：状态守卫——仅进行中/已暂停可规划（已毕业/放弃无规划意义，
+    // 防误操作与无谓成本）
+    let goal_status = state
+        .db
+        .get_goal(goal_id)
+        .map_err(|e| e.to_string())?
+        .ok_or_else(|| format!("目标不存在: {}", goal_id))?
+        .status;
+    if goal_status != "active" && goal_status != "paused" {
+        return Err(format!("仅进行中/已暂停目标可 AI 规划（当前: {}）", goal_status));
+    }
+    // 并发互斥：同步规划无任务去重表——多窗口/双击防重复扣费
+    if state
+        .goal_plan_busy
+        .swap(true, std::sync::atomic::Ordering::SeqCst)
+    {
+        return Err("已有 AI 规划进行中——请等待完成（防重复扣费）".to_string());
+    }
+    struct BusyGuard<'a>(&'a std::sync::atomic::AtomicBool);
+    impl Drop for BusyGuard<'_> {
+        fn drop(&mut self) {
+            self.0.store(false, std::sync::atomic::Ordering::SeqCst);
+        }
+    }
+    let _busy = BusyGuard(&state.goal_plan_busy);
     let budget = plan_budget(tier.as_deref().unwrap_or("standard"));
     let settings: AiSettings = state
         .ai_settings
@@ -327,7 +352,15 @@ pub fn goal_apply_plan(
         }
     }
     let mut new_milestones = Vec::new();
+    // 审查修复：apply 为确认流落点——白名单再校验（协议校验在草案侧，此处
+    // 防任意请求直写：self_test 占位契约 M3 前不可写；周界与 add_goal_milestone 同口径）
     for m in &request.milestones {
+        if !matches!(m.criteria_type.as_str(), "manual" | "group_settled") {
+            return Err(format!("不支持的里程碑判据类型: {}", m.criteria_type));
+        }
+        if m.due_weeks > 520 {
+            return Err("里程碑期限超出合理范围（>10 年）".to_string());
+        }
         if let Some(ref_id) = m.ref_group_id {
             if db.get_group(ref_id).map_err(|e| e.to_string())?.is_none() {
                 return Err(format!("里程碑绑定组不存在: {}", ref_id));

app/src-tauri/src/goal_summary_tests.rs

@@ -53,6 +53,13 @@ fn civil_days_roundtrip_known_epochs() {
         created_at: 0, ..Default::default()
     });
     assert!(zero.contains("—"), "epoch 前回退");
+    // 已知锚点：1700000000 = 2023-11-14 UTC（civil_from_days 换算回归护栏）
+    let known = crate::goal_summary::build_summary(&GoalSummaryInput {
+        name: "x".to_string(),
+        created_at: 1_700_000_000,
+        ..Default::default()
+    });
+    assert!(known.contains("2023-11-14"), "历法换算: {}", known);
 }
 
 #[test]

app/src/components/GoalPlanApprovalDialog.test.tsx

@@ -0,0 +1,58 @@
+// @vitest-environment jsdom
+/**
+ * GoalPlanApprovalDialog.test.tsx — 草案确认流关键交互（v0.18.2 审查修复回归：
+ * 标题编辑不回弹（展开顺序）/勾选排除/确认提交契约）。
+ */
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import GoalPlanApprovalDialog from "./GoalPlanApprovalDialog";
+import type { GoalPlanView } from "../types/goals";
+
+const view: GoalPlanView = {
+  proposal: {
+    milestones: [
+      { title: "基础入门", dueWeeks: 4, criteriaType: "manual", refGroupId: null, note: "" },
+      { title: "项目实战", dueWeeks: 12, criteriaType: "group_settled", refGroupId: 5, note: "" },
+    ],
+    groups: [{ groupId: 5, reason: "素材命中" }],
+    systems: [{ action: "create", systemId: null, name: "Python 基础", coreQuestion: "怎么把语法变成工具？", domainEntries: ["语言基础"], concepts: [], reason: "" }],
+    weeklyContract: { targetDays: 3, targetCards: 20 },
+    summary: "8 周从基础到项目",
+  },
+  dropped: { droppedMilestones: [], droppedGroups: [], droppedSystems: [] },
+  honestNote: "",
+  costYuan: 0.1,
+  model: "m",
+};
+
+afterEach(() => cleanup());
+
+describe("GoalPlanApprovalDialog 确认流", () => {
+  it("标题编辑不回弹（仅修改 draft 对应项）", () => {
+    render(<GoalPlanApprovalDialog view={view} onConfirm={vi.fn()} onClose={vi.fn()} onUseRules={vi.fn()} />);
+    const input = screen.getByTestId("plan-milestone-0") as HTMLInputElement;
+    fireEvent.change(input, { target: { value: "修改后的标题" } });
+    expect((screen.getByTestId("plan-milestone-0") as HTMLInputElement).value).toBe("修改后的标题");
+    expect((screen.getByTestId("plan-milestone-1") as HTMLInputElement).value).toBe("项目实战");
+  });
+
+  it("取消勾选后确认提交排除该项", async () => {
+    const onConfirm = vi.fn().mockResolvedValue(undefined);
+    render(<GoalPlanApprovalDialog view={view} onConfirm={onConfirm} onClose={vi.fn()} onUseRules={vi.fn()} />);
+    // 取消第 2 条里程碑
+    fireEvent.click(screen.getAllByRole("checkbox")[1]);
+    fireEvent.click(screen.getByTestId("plan-confirm"));
+    await waitFor(() => expect(onConfirm).toHaveBeenCalledTimes(1));
+    const req = onConfirm.mock.calls[0][0];
+    expect(req.milestones).toHaveLength(1);
+    expect(req.milestones[0].title).toBe("基础入门");
+    expect(req.weeklyContract.targetDays).toBe(3);
+  });
+
+  it("「改用规则草案」回调可用（不关闭——调用方决定）", () => {
+    const onUseRules = vi.fn();
+    render(<GoalPlanApprovalDialog view={view} onConfirm={vi.fn()} onClose={vi.fn()} onUseRules={onUseRules} />);
+    fireEvent.click(screen.getByText("改用规则草案"));
+    expect(onUseRules).toHaveBeenCalledTimes(1);
+  });
+});

app/src/components/GoalPlanApprovalDialog.tsx

@@ -43,10 +43,11 @@ export default function GoalPlanApprovalDialog({ view, onConfirm, onClose, onUse
   const [saving, setSaving] = useState(false);
   const [err, setErr] = useState("");
 
+  // 里程碑标题：编辑覆盖优先（原实现 ...editingTitles, ...m 后展开 m 覆盖编辑——输入被拉回原文）
   const milestoneTitles = useMemo(() => {
     const m: Record<number, string> = {};
     view.proposal.milestones.forEach((ms, i) => { m[i] = ms.title; });
-    return { ...editingTitles, ...m };
+    return { ...m, ...editingTitles };
   }, [view, editingTitles]);
 
   const confirm = async () => {

app/src/components/InterviewDialog.tsx

@@ -110,23 +110,32 @@ export default function InterviewDialog({ mode, groups, onClose, onCreated, goal
   };
 
   // v0.18.2：✨ AI 规划——先按当前答案建目标（规则基线），再 AI 规划 →
-  // 确认对话框（替换里程碑草案——建议制语义：人类确认后落库）
+  // 确认对话框（替换里程碑草案——建议制语义：人类确认后落库）。
+  // @审查修复：AI 失败回滚本次新建的目标（防"再点确认创建"重复建目标）；
+  // 确认成功由 onConfirm 收口结束向导（同一路径不可能再 create_goal）。
   const runAiPlan = async () => {
     setAiPlanning(true);
     setErr("");
+    let createdHere = false;
     try {
       let gid = plannedGoalId;
       if (gid == null) {
         const input = toCreateInput(name, effectiveHorizon, a, []);
         const goal = await invoke<Goal>("create_goal", { input });
         gid = goal.id;
+        createdHere = true;
         setPlannedGoalId(gid);
       }
       const view = await invoke<GoalPlanView>("ai_goal_plan", {
         goalId: gid, tier: null, authorized: true,
       });
       setAiPlan(view);
     } catch (e) {
+      if (createdHere) {
+        // 回滚基线目标——AI 失败不应留下空目标（规则草案路径由用户主动继续）
+        await invoke("delete_goal", { id: plannedGoalId }).catch(() => undefined);
+        setPlannedGoalId(null);
+      }
       setErr(`AI 规划失败: ${e}`);
     } finally {
       setAiPlanning(false);
@@ -245,6 +254,8 @@ export default function InterviewDialog({ mode, groups, onClose, onCreated, goal
               goalId: plannedGoalId,
               request: { ...req, replaceMilestones: true },
             });
+            // AI 确认成功：目标已建+规划已落库——结束向导（防再点"确认创建"重复建）
+            onCreated();
           }}
         />
       )}