feat: 2026-07-11 全量更新 - 代办集成+会议室预定+知识迭代修复+UI统一+Bug修复

== 已部署上线 (9项) ==
- 代办事项真实数据源集成 (企微审批API 8bug修复链)
- H5/坐席端 Logo样式统一+绿色背景
- 视频引导页修复 (localStorage key v2)
- 坐席端 v9 Vue版本修复 (ElMessage._context)
- 截图按钮 v10 修复 (getDisplayMedia user gesture)
- 扫码样式恢复+H5扫码登录跳转修复
- H5截图快捷键提示

== 代码完成待部署 (3项) ==
- 知识迭代3Bug修复 (#8 POST端点/#7 MERGE幂等/#6 过期检查)
- 会议室预定-小鱼易联终端 (40文件, 40/40测试通过)
- IT资产升级审批推送 (asset_service.py)

== 需求文档 (2项) ==
- 坐席端AI辅助消息框-PRD (4项新功能确认)
- 坐席端布局优化建议 v2.0 (7天计划)

== 新增文档 ==
- 日报-2026-07-11.md
- 知识迭代Bug修复报告-20260711.md
- 会议室预定-部署指南.md
- CHANGELOG.md 更新

== 测试 ==
- test_todo_integration.py: 40/40
- test_meetingroom.py: 40/40
- test_bugfix_ki_suggestions.py: 21/21

deploy-server/nginx/nginx.conf

@@ -108,9 +108,13 @@ http {
         add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
         add_header Referrer-Policy "strict-origin-when-cross-origin" always;
         add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' https://res.wx.qq.com; style-src 'self' 'unsafe-inline' https://res.wx.qq.com; connect-src 'self' wss://itsupport.servyou.com.cn https://itsupport.servyou.com.cn https://qyapi.weixin.qq.com; img-src 'self' data: https://res.wx.qq.com; font-src 'self' data:;" always;
-        add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()" always;
+        # 修复：microphone=() 完全禁用麦克风，导致坐席端 Web Speech API 无法使用
+        # 改为 microphone=(self) 允许同源页面使用麦克风（浏览器仍会弹窗询问用户）
+        add_header Permissions-Policy "camera=(), microphone=(self), geolocation=(), payment=()" always;
         add_header Cross-Origin-Opener-Policy "same-origin" always;
-        add_header Cross-Origin-Embedder-Policy "require-corp" always;
+        # 修复：COEP require-corp 阻止加载企微 JS-SDK 跨域脚本（res.wx.qq.com 不发 CORP 头）
+        # 本应用不使用 SharedArrayBuffer / cross-origin isolation，移除 COEP 不影响功能
+        # add_header Cross-Origin-Embedder-Policy "require-corp" always;
         add_header Cross-Origin-Resource-Policy "same-origin" always;
         server_tokens off;
         location = /health {
@@ -125,7 +129,7 @@ http {
         location /itagent/ {
             alias /usr/share/nginx/html/itagent/;
             index index.html;
-            try_files $uri $uri/ /index.html;
+            try_files $uri $uri/ /itagent/index.html;
         }
         location /itadmin/ {
             allow 10.0.0.0/8;
@@ -206,7 +210,7 @@ http {
             proxy_read_timeout    300s;
         }
         location = / {
-            return 302 /itportal/;
+            return 302 /itagent/;
         }
     }
 }