merge: integrate advisor capabilities on latest qyqy base

tools/seed_test_rbac.py

@@ -53,10 +53,28 @@ PERMISSIONS: tuple[tuple[int, str, str, str, str], ...] = (
     # 刻意不把 `knowledge:query`（客户角色也有）复用成管理权限：那会让客户看到整库文档清单。
     # 归属：只给 admin（ADMIN_PERMISSIONS 是全量元组，自动包含本行）。
     (9019, "knowledge:manage", "knowledge", "manage", "all"),
+    (9020, "investment-goal:write:self", "investment-goal", "write", "self"),
+    (9021, "investment-goal:confirm:self", "investment-goal", "confirm", "self"),
+    (9022, "investment-goal:read:self", "investment-goal", "read", "self"),
+    (9023, "product-recommendation:generate:self", "product-recommendation", "generate", "self"),
+    (9024, "product-recommendation:read:self", "product-recommendation", "read", "self"),
+    (9025, "portfolio-analysis:read:self", "portfolio-analysis", "read", "self"),
+    (9026, "asset-allocation:generate:self", "asset-allocation", "generate", "self"),
+    (9027, "profile-governance:read", "profile-governance", "read", "all"),
+    (9028, "profile-governance:review", "profile-governance", "review", "all"),
+    (9029, "investment-goal:review", "investment-goal", "review", "all"),
+    (9030, "investment-goal:publish", "investment-goal", "publish", "all"),
+    (9031, "product-recommendation:review", "product-recommendation", "review", "all"),
+    (9032, "product-recommendation:publish", "product-recommendation", "publish", "all"),
+    (9033, "asset-allocation:backtest", "asset-allocation", "backtest", "all"),
+    (9034, "product-comparison:read:self", "product-comparison", "read", "self"),
 )
 
 # 客户：业务侧自助能力（自己的会话、反馈、转人工、自己的记忆画像）。
-CUSTOMER_PERMISSIONS = (9001, 9002, 9003, 9004, 9005, 9006, 9007, 9008, 9009, 9011, 9018)
+CUSTOMER_PERMISSIONS = (
+    9001, 9002, 9003, 9004, 9005, 9006, 9007, 9008, 9009, 9011, 9018,
+    9020, 9021, 9022, 9023, 9024, 9025, 9026, 9034,
+)
 # 风控专员：业务侧只读 + 跨客户记忆 + 审计只读，不含配置写权限。
 RISK_PERMISSIONS = (9001, 9002, 9003, 9010, 9011, 9012)
 # 平台管理员：管理面全套（配置发布四态 + 模型端点 + 审计）。