feat: add scoped read-only audio preview and isolated Dify transport

admin/src/views/tcm/diagnosis/components/followupAudioState.ts

@@ -107,8 +107,21 @@ export function rebaseReviewItems(local: FollowupReviewItem[], fresh: FollowupRe
             time_period: edit.time_period, target_id: edit.target_id, selected: false, needs_review: true } : item
     })
 }
+/** Missing preview readiness/scope fails closed; normal deployments retain their full-verification rules. */
+export function followupFeatureEnabled(caps: FollowupCapabilities | null): boolean {
+    return !!caps?.enabled && (!caps.preview_only || caps.test_scope_allowed === true)
+}
+export function followupAudioReady(caps: FollowupCapabilities | null): boolean {
+    return !!caps && (caps.preview_only ? caps.preview_ready === true && caps.test_scope_allowed === true : caps.audio_verified)
+}
+export function followupCanReview(caps: FollowupCapabilities | null, previewTask = false): boolean {
+    return followupFeatureEnabled(caps) && !!caps && (caps.preview_only || previewTask ? caps.can_review === true : caps.can_apply)
+}
+export function followupCanApply(caps: FollowupCapabilities | null, previewTask = false): boolean {
+    return followupFeatureEnabled(caps) && !!caps && !caps.preview_only && !previewTask && caps.can_apply
+}
 export function uploadIssue(file: Pick<File, 'size' | 'name'> | null, recordedAt: string, model: string, caps: FollowupCapabilities | null, viewOnly: boolean): string {
-    if (viewOnly || !caps?.enabled || !caps.audio_verified || !caps.can_upload) return '当前不可上传录音'
+    if (viewOnly || !caps || !followupFeatureEnabled(caps) || !followupAudioReady(caps) || !caps.can_upload) return '当前不可上传录音'
     if (!file || !file.size) return '请选择非空录音文件'
     if (file.size > caps.limits.max_bytes) return '录音文件超过大小限制'
     if (!/\.(mp3|wav|m4a|amr)$/i.test(file.name)) return '请选择支持的录音格式'