v3.1 + 批次0: 智能回复重构基线 - ApprovalMatcher + 关键词降级 + 文档速修 + v4.0任务书面化

deploy-server/nginx/nginx.conf

@@ -107,7 +107,7 @@ http {
         add_header X-XSS-Protection "1; mode=block" always;
         add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
         add_header Referrer-Policy "strict-origin-when-cross-origin" always;
-        add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' https://res.wx.qq.com; style-src 'self' 'unsafe-inline' https://res.wx.qq.com; connect-src 'self' wss://itsupport.servyou.com.cn https://itsupport.servyou.com.cn https://qyapi.weixin.qq.com; img-src 'self' data: https://res.wx.qq.com; font-src 'self' data:;" always;
+        add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://res.wx.qq.com; style-src 'self' 'unsafe-inline' https://res.wx.qq.com https://at.alicdn.com; connect-src 'self' wss://itsupport.servyou.com.cn https://itsupport.servyou.com.cn https://qyapi.weixin.qq.com; img-src 'self' data: https://res.wx.qq.com; font-src 'self' data: https://at.alicdn.com;" always;
         # 修复：microphone=() 完全禁用麦克风，导致坐席端 Web Speech API 无法使用
         # 改为 microphone=(self) 允许同源页面使用麦克风（浏览器仍会弹窗询问用户）
         add_header Permissions-Policy "camera=(), microphone=(self), geolocation=(), payment=()" always;
@@ -122,9 +122,9 @@ http {
             return 200 "healthy\n";
             add_header Content-Type text/plain;
         }
-        # 员工端：/itdesk/ -> 重定向到 /itagent/（保持前端路由 base 一致）
+        # 员工端：/itdesk/ -> 重定向到 /h5/（H5 员工端）
         location /itdesk/ {
-            return 301 /itagent/;
+            return 301 /h5/;
         }
         location /itagent/ {
             alias /usr/share/nginx/html/itagent/;