merge team review p1 reviewer routing on p7

# Conflicts:
#	CLAUDE.md
#	backend/tests/test_pmflow_os_projection_api.py
#	docs/PMFLOW_PRODUCT_DELIVERY_STANDARD.md
#	docs/architecture/ARCHITECTURE_INVENTORY.md
#	docs/architecture/CODE_REFERENCE_INDEX.md

CLAUDE.md

@@ -115,6 +115,8 @@ frontend/
   - `frontend/src/features/account-settings/`（`/me` 个人中心与设置；通过 `frontend/src/api/accountSettings.ts` 管理个人资料、默认语言、AI 回答深度、证据展示偏好和通知偏好，移动端使用分组列表与 bottom sheet，不进入 auth core）
   - `frontend/src/features/pmflow-os/`（PMFlow OS 前端产品域；共享 truth store 已支持 `?projectId=<id>` 读取真实后端 projection，真实模式下 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet `commit`、单条 iteration recommendation -> ChangeSet draft 与同组 iteration recommendation 批量 -> ChangeSet draft 均调后端，显式 `?demo=1` 才启用本地演示状态机）
   - `backend/app/api/pmflow_os_api/` + `backend/app/services/pmflow_os_projection_service.py` + `backend/app/services/pmflow_change_review_service.py` + `backend/app/schemas/pmflow_os.py` + `backend/app/models/pmflow_change_review.py`（PMFlow OS A3/C1/C2 真实路径；提供 `truth-state`、`execution-summary`、thread message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`、ChangeSet `commit`、execution handoff/progress writeback、release validation run、release feedback ingest、recommendation change-set draft 与 recommendation group change-set draft；复用 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync / FeedbackIngest / IterationRecommendation` 并投影 `pmflow_threads / pmflow_thread_messages / pmflow_change_sets / pmflow_change_items / pmflow_approvals / pmflow_evidence_links`；C2 commit 默认 atomic，`ModelDecision / MetricSignal` 暂 fail-closed）
+  - `frontend/src/features/pmflow-os/`（PMFlow OS 前端产品域；共享 truth store 已支持 `?projectId=<id>` 读取真实后端 projection，真实模式下 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet `commit`、Team reviewer routing 与 iteration recommendation -> ChangeSet draft 调后端，显式 `?demo=1` 才启用本地演示状态机）
+  - `backend/app/api/pmflow_os_api/` + `backend/app/services/pmflow_os_projection_service.py` + `backend/app/services/pmflow_change_review_service.py` + `backend/app/schemas/pmflow_os.py` + `backend/app/models/pmflow_change_review.py`（PMFlow OS A3/C1/C2 真实路径；提供 `truth-state`、`execution-summary`、thread message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`、ChangeSet `commit`、execution handoff/progress writeback、release validation run、release feedback ingest、Team reviewer routing 与 recommendation change-set draft；复用 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync / FeedbackIngest / IterationRecommendation` 并投影 `pmflow_threads / pmflow_thread_messages / pmflow_change_sets / pmflow_change_items / pmflow_approvals / pmflow_evidence_links`；`truth-state.reviewerRouting` 是 `{status, warningCode, summary, items}` 只读合同，生成建议审查人/原因/来源/风险/跳转 URL，不写 approval、不自动 assign reviewer；C2 commit 默认 atomic，`ModelDecision / MetricSignal` 暂 fail-closed）
   - `backend/app/api/pmflow_launch_api/` + `backend/app/services/pmflow_launch_service.py` + `backend/app/schemas/pmflow_launch.py` + `backend/app/models/pmflow_launch.py`（Project Launch Phase B 真实创建链；`drafts` 只写 `pmflow_launch_drafts`，`confirm` 在同一事务写真实 Project、启动线程、启动消息、初始 truth_nodes、tasks 与 semantic_facts seed）
   - `docs/architecture/PMFLOW_OS_PRODUCT_CONTRACT.md`（PMFlow OS 产品合同真源；真实后端接入前先读，锁定本地 truth store 对象与 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync` 的映射；Phase C1 review 表和审查 API 已实现，Phase C2 backend/frontend commit 已实现）
   - `frontend/src/pages/inbox/`（消息台）
@@ -135,6 +137,9 @@ frontend/
 - `frontend/src/features/personal-space/` 是空间层入口：`PersonalSpacePage.tsx` 承接桌面个人工作面与独立移动单手布局，`frontend/src/api/space.ts` 只读聚合 `projects` summary、PMFlow OS `truth-state`、`execution-summary` 并生成 `nextActionQueue` 我的下一步队列、继续推进、待确认、发布关注、发布后反馈关注、下一轮迭代草稿关注、AI 正在推进、草案箱、最近项目摘要；Space P6 的下一步队列按高风险待确认、发布阻塞/失败证据、handoff consumed 后缺少后续 progress、下一轮 draft、发布后反馈/收入/合规信号排序，点击只跳 `/change-review?projectId=<id>&changeSetId=<id>`、`/execution-bridge?projectId=<id>` 或 `/release-growth?projectId=<id>`；Space P3 的发布关注优先消费 `truth-state.releases` 的 release validation 投影，没有验证投影时才回落 `execution-summary.releaseGate`；Space P4/P5 的发布后反馈/下一轮草稿关注只读消费 `execution-summary.releaseSignals`；不在 Space 写 Project Memory、ProgressEvent、ReleaseValidationRun、FeedbackIngest、RevenueEvent、ComplianceCheckRun、ChangeSet 状态或发布执行。`components/SpaceChrome.tsx` 承接空间层左侧栏、顶部条与空间用量组件，并被 `/project-launch` 桌面首次新建壳复用；`frontend/src/pages/PersonalSpacePage.tsx` 仅做薄入口。
 - `frontend/src/features/account-settings/` 是 Account Settings 独立产品域：`AccountSettingsPanel.tsx` 承接 `/me` 桌面设置页、移动端分组列表与 bottom sheet，`frontend/src/api/accountSettings.ts` 定义个人资料、默认语言、AI 回答深度、证据展示偏好和四类通知偏好合同；当前已有账号同步 API fallback、本地 UI 通知消费模型、Release/Growth 偏好 helper、post-release / next change review 偏好 helper，以及 `getAccountReminderConsumption(settings, event)` 提醒强度消费合同，支持 `reminderIntensity=silent|normal|prominent` 与 `evidenceDisplay=compact|expanded`；`releaseGate / failureAlert / pendingConfirmation / executionWriteback` 只影响页面内提醒表达强度和证据展开方式，不代表真实邮件、桌面推送或系统通知中心已接入，也不得隐藏真实业务证据或审计状态，不改 OAuth/JWT/auth core；`frontend/src/features/pmflow-os/pages/AccountPage.tsx` 仅做薄入口并复用既有退出登录 bottom sheet。
 - `frontend/src/features/pmflow-os/` 当前承载新的对话驱动前端产品域：`store.tsx` 提供共享 truth store；真实模式通过 `?projectId=<id>` 调用 `frontend/src/api/pmflowOs.ts` 读取后端 `ProjectTruthState` projection，并调用真实 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet `commit`、Execution Handoff create/consume、execution progress writeback、release validation run create、release feedback ingest、单条 iteration recommendation -> ChangeSet draft 与同组 iteration recommendation 批量 -> ChangeSet draft API，成功后 refetch truth-state / execution-summary；显式 `?demo=1` 才启用 `command_idle -> ai_extracting -> extraction_ready -> review_open -> writeback_success` 本地演示状态机，以及本地 `promoteAcceptedToGraph` 等演示动作。`pages/` 下包含 `CommandCenter / StructuredExtraction / ChangeReview / MemoryWritebackResult / WorkGraph / ExecutionBridge / ReleaseGrowth / TeamLayer / ProjectMemory / Account` 主页面；`ExecutionBridgePage` 已支持创建 handoff、运行端领取确认和执行进度回写；`ReleaseGrowthPage` 真实模式展示 `execution-summary.releaseGate`、execution evidence、阻塞原因、下一步动作、`latestValidationRun` 和 `releaseSignals`，可创建 release validation run、摄取发布后 feedback、展示 recommendation quality grouping、从真实 recommendation 单条或同组批量生成下一轮待确认 ChangeSet draft，并消费 Account notification preference 静默强调型提醒，但不隐藏真实证据、审计状态或发布后信号；`ChangeReviewPage` 会展示来自 release feedback recommendation group 的组、反馈、风险、影响和审查优先级，帮助 reviewer 判断为什么生成这一组待确认变更；静态发布/增长原型仅保留在显式 demo 模式；后端只记录 progress/release gate/release validation/release feedback/recommendation draft 元数据，不执行本机命令、真实发布命令、外部支付、真实推送、自动 Project Memory commit 或正式任务创建；`ProjectMemoryPage` 在真实模式消费后端 `truth_nodes + semantic_facts` 的 `projectMemory` 投影，真实模式下 accepted/edited ChangeItem 只有 commit 成功后才进入 Project Memory。`components/` 下除了 `ProjectStageRail / ThreadComposer / ExtractionRail / ChangeGroupPanel / ObjectGraphSection / ContextPacketPanel / ExecutionTimeline / ReleaseGatePanel / TeamFeedPanel` 之外，新增 `ProjectStructuredLoop / PMFlowOsFrame / AccountControls / FeedbackPrimitives` 等行为组件，用来承接项目指挥台、结构化提取、待确认审查、项目记忆写入结果、项目内面包屑、项目切换器、账号退出登录交互，以及 `PageBanner / InlineNotice / HumanDecisionBar / ConfirmDialog / MobileBottomSheet` 这组契约化提示提醒组件；`components/MobileBottomNav.tsx` 是正式应用壳唯一移动底部导航，固定为 `空间 / 指挥台 / 待确认 / 动态 / 我的`。
+- `frontend/src/features/personal-space/` 是空间层入口：`PersonalSpacePage.tsx` 承接桌面个人工作面与独立移动单手布局，`frontend/src/api/space.ts` 只读聚合 `projects` summary、PMFlow OS `truth-state`、`execution-summary` 并生成继续推进、待确认、发布关注、发布后反馈关注、下一轮迭代草稿关注、AI 正在推进、草案箱、最近项目摘要；Space P3 的发布关注优先消费 `truth-state.releases` 的 release validation 投影，没有验证投影时才回落 `execution-summary.releaseGate`；Space P4/P5 的发布后反馈/下一轮草稿关注只读消费 `execution-summary.releaseSignals`，点击只跳 `/release-growth?projectId=<id>` 或 `/change-review?projectId=<id>&changeSetId=<id>`；不在 Space 写 Project Memory、ProgressEvent、ReleaseValidationRun、FeedbackIngest、RevenueEvent、ComplianceCheckRun、ChangeSet 状态或发布执行。`components/SpaceChrome.tsx` 承接空间层左侧栏、顶部条与空间用量组件，并被 `/project-launch` 桌面首次新建壳复用；`frontend/src/pages/PersonalSpacePage.tsx` 仅做薄入口。
+- `frontend/src/features/account-settings/` 是 Account Settings 独立产品域：`AccountSettingsPanel.tsx` 承接 `/me` 桌面设置页、移动端分组列表与 bottom sheet，`frontend/src/api/accountSettings.ts` 定义个人资料、默认语言、AI 回答深度、证据展示偏好和四类通知偏好合同；当前已有账号同步 API fallback、本地 UI 通知消费模型、Release/Growth 偏好 helper 和 post-release / next change review 偏好 helper，`releaseGate / failureAlert / pendingConfirmation` 只影响页面内提醒表达，不代表真实邮件、桌面推送或系统通知中心已接入，不改 OAuth/JWT/auth core；`frontend/src/features/pmflow-os/pages/AccountPage.tsx` 仅做薄入口并复用既有退出登录 bottom sheet。
+- `frontend/src/features/pmflow-os/` 当前承载新的对话驱动前端产品域：`store.tsx` 提供共享 truth store；真实模式通过 `?projectId=<id>` 调用 `frontend/src/api/pmflowOs.ts` 读取后端 `ProjectTruthState` projection，并调用真实 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet `commit`、Execution Handoff create/consume、execution progress writeback、release validation run create、release feedback ingest 与 iteration recommendation -> ChangeSet draft API，成功后 refetch truth-state / execution-summary；显式 `?demo=1` 才启用 `command_idle -> ai_extracting -> extraction_ready -> review_open -> writeback_success` 本地演示状态机，以及本地 `promoteAcceptedToGraph` 等演示动作。`pages/` 下包含 `CommandCenter / StructuredExtraction / ChangeReview / MemoryWritebackResult / WorkGraph / ExecutionBridge / ReleaseGrowth / TeamLayer / ProjectMemory / Account` 主页面；`TeamLayerPage` 真实模式读取 `state.reviewerRouting` 展示 ready/empty/warning、待审 ChangeSet、来源、风险等级、建议审查人或 fallback role、审查原因、待审 item 数和证据数，动作只跳转 `/change-review?projectId=<id>&changeSetId=<id>`，不自动分派 reviewer；`ExecutionBridgePage` 已支持创建 handoff、运行端领取确认和执行进度回写；`ReleaseGrowthPage` 真实模式展示 `execution-summary.releaseGate`、execution evidence、阻塞原因、下一步动作、`latestValidationRun` 和 `releaseSignals`，可创建 release validation run、摄取发布后 feedback、从真实 recommendation 生成下一轮待确认 ChangeSet draft，并消费 Account notification preference 静默强调型提醒，但不隐藏真实证据、审计状态或发布后信号；静态发布/增长原型仅保留在显式 demo 模式；后端只记录 progress/release gate/release validation/release feedback/recommendation draft 元数据，不执行本机命令、真实发布命令、外部支付、真实推送、自动 Project Memory commit 或正式任务创建；`ProjectMemoryPage` 在真实模式消费后端 `truth_nodes + semantic_facts` 的 `projectMemory` 投影，真实模式下 accepted/edited ChangeItem 只有 commit 成功后才进入 Project Memory。`components/` 下除了 `ProjectStageRail / ThreadComposer / ExtractionRail / ChangeGroupPanel / ObjectGraphSection / ContextPacketPanel / ExecutionTimeline / ReleaseGatePanel / TeamFeedPanel` 之外，新增 `ProjectStructuredLoop / PMFlowOsFrame / AccountControls / FeedbackPrimitives` 等行为组件，用来承接项目指挥台、结构化提取、待确认审查、项目记忆写入结果、项目内面包屑、项目切换器、账号退出登录交互，以及 `PageBanner / InlineNotice / HumanDecisionBar / ConfirmDialog / MobileBottomSheet` 这组契约化提示提醒组件；`components/MobileBottomNav.tsx` 是正式应用壳唯一移动底部导航，固定为 `空间 / 指挥台 / 待确认 / 动态 / 我的`。
 - 旧登录实现 `frontend/src/components/ui/sign-in.tsx` 与 `frontend/src/components/ui/demo.tsx` 已移除，`frontend/src/components/login/` 是当前唯一登录真源。
 
 ### 5.1 `frontend/src/components/sstc/` 目录说明（模块化拆分后）

backend/app/schemas/pmflow_os.py

@@ -33,6 +33,11 @@ PMFlowReleaseValidationDecision = Literal["enter_release_candidate", "keep_block
 ProjectLoopStage = Literal["command_idle", "ai_extracting", "extraction_ready", "review_open", "writeback_success"]
 PMFlowChangeGroup = Literal["new_object", "field_update", "risk", "decision"]
 PMFlowChangeStatus = Literal["pending_review", "accepted", "edited", "deferred", "committed", "skipped"]
+PMFlowReviewerRoutingStatus = Literal["empty", "ready", "warning"]
+PMFlowReviewerRoutingSourceType = Literal["manual", "ai_extraction", "iteration_recommendation", "unknown"]
+PMFlowReviewerRoutingPriority = Literal["normal", "elevated", "urgent"]
+PMFlowReviewerConfidence = Literal["low", "medium", "high"]
+PMFlowFallbackReviewerRole = Literal["OWNER", "REVIEWER", "MEMBER"]
 PMFlowObjectType = Literal[
     "Requirement",
     "Decision",
@@ -281,6 +286,48 @@ class PMFlowTeamInbox(BaseModel):
     growth: list[str] = Field(default_factory=list)
 
 
+class PMFlowReviewerSuggestion(BaseModel):
+    userId: Optional[str] = None
+    displayName: Optional[str] = None
+    role: Optional[str] = None
+    reason: str
+    confidence: PMFlowReviewerConfidence = "low"
+
+
+class PMFlowReviewerRoutingItem(BaseModel):
+    projectId: str
+    changeSetId: str
+    changeSetTitle: str
+    changeSetStatus: str
+    sourceType: PMFlowReviewerRoutingSourceType = "unknown"
+    reviewReason: str
+    riskLevel: PMFlowRiskLevel = "low"
+    priority: PMFlowReviewerRoutingPriority = "normal"
+    changeTypes: list[str] = Field(default_factory=list)
+    itemCount: int = 0
+    pendingItemCount: int = 0
+    evidenceCount: int = 0
+    suggestedReviewer: Optional[PMFlowReviewerSuggestion] = None
+    fallbackReviewerRole: Optional[PMFlowFallbackReviewerRole] = None
+    targetUrl: str
+    createdAt: Optional[str] = None
+    updatedAt: Optional[str] = None
+
+
+class PMFlowReviewerRoutingSummary(BaseModel):
+    totalPendingReview: int = 0
+    highRiskCount: int = 0
+    missingReviewerCount: int = 0
+    iterationDraftCount: int = 0
+
+
+class PMFlowReviewerRoutingProjection(BaseModel):
+    status: PMFlowReviewerRoutingStatus = "empty"
+    warningCode: Optional[str] = None
+    items: list[PMFlowReviewerRoutingItem] = Field(default_factory=list)
+    summary: PMFlowReviewerRoutingSummary = Field(default_factory=PMFlowReviewerRoutingSummary)
+
+
 class PMFlowProjectMemory(BaseModel):
     truthNodeFacts: list[dict[str, Any]] = Field(default_factory=list)
     semanticFacts: list[dict[str, Any]] = Field(default_factory=list)
@@ -307,6 +354,7 @@ class ProjectTruthStateProjection(BaseModel):
     approvals: list[dict[str, Any]] = Field(default_factory=list)
     feed: list[PMFlowFeedEvent] = Field(default_factory=list)
     teamInbox: PMFlowTeamInbox = Field(default_factory=PMFlowTeamInbox)
+    reviewerRouting: PMFlowReviewerRoutingProjection = Field(default_factory=PMFlowReviewerRoutingProjection)
     activeChangeSetId: Optional[str] = None
     selectedTaskId: Optional[str] = None
     execution: PMFlowExecutionContext = Field(default_factory=PMFlowExecutionContext)

backend/app/services/pmflow_os_projection_service.py

@@ -34,6 +34,7 @@ from ..models import (
     Task,
     TruthNode,
     User,
+    UserProject,
 )
 from ..schemas.pmflow_os import (
     ExecutionSummaryProjection,
@@ -99,6 +100,14 @@ class PMFlowOSProjectionService:
         )
         review_projection = await self._load_review_projection(project_id=project_id)
         active_change_set_id = self._active_change_set_id(review_projection["change_sets"])
+        project_members = await self._load_project_members(project=project)
+        reviewer_routing, reviewer_warnings = self._project_reviewer_routing(
+            project_id=project_id,
+            change_sets=review_projection["change_sets"],
+            change_items=review_projection["change_items"],
+            evidence=review_projection["evidence"],
+            members=project_members,
+        )
         loop_stage = self._review_loop_stage(
             change_sets=review_projection["change_sets"],
             change_items=review_projection["change_items"],
@@ -150,11 +159,12 @@ class PMFlowOSProjectionService:
                 metric_signals=metric_signals,
             ),
             approvals=review_projection["approvals"],
+            reviewerRouting=reviewer_routing,
             activeChangeSetId=active_change_set_id,
             selectedTaskId=execution_summary.execution.taskId,
             execution=execution_summary.execution,
             projectMemory=memory,
-            projectionWarnings=warnings + execution_summary.warnings,
+            projectionWarnings=warnings + reviewer_warnings + execution_summary.warnings,
         )
 
     async def get_execution_summary(
@@ -794,6 +804,24 @@ class PMFlowOSProjectionService:
         )
         return [(task, user) for task, user in result.all()]
 
+    async def _load_project_members(self, *, project: Project) -> list[User]:
+        result = await self.db.execute(
+            select(User)
+            .outerjoin(UserProject, and_(UserProject.user_id == User.id, UserProject.project_id == int(project.id)))
+            .where(
+                and_(
+                    User.tenant_id == self.tenant_id,
+                    or_(UserProject.project_id == int(project.id), User.id == project.owner_id),
+                    User.is_active.is_(True),
+                )
+            )
+            .order_by(User.id.asc())
+        )
+        members: dict[int, User] = {}
+        for user in result.scalars().all():
+            members[int(user.id)] = user
+        return list(members.values())
+
     async def _load_project_task(self, *, project_id: int, task_id: str) -> Task:
         try:
             normalized_task_id = int(str(task_id).strip())
@@ -1252,6 +1280,193 @@ class PMFlowOSProjectionService:
             "approvals": [PMFlowChangeReviewService.serialize_approval(row) for row in approval_rows],
         }
 
+    def _project_reviewer_routing(
+        self,
+        *,
+        project_id: int,
+        change_sets: list[dict[str, Any]],
+        change_items: list[dict[str, Any]],
+        evidence: list[dict[str, Any]],
+        members: list[User],
+    ) -> tuple[dict[str, Any], list[str]]:
+        items_by_set: dict[str, list[dict[str, Any]]] = {}
+        for item in change_items:
+            if item.get("status") != "pending_review":
+                continue
+            items_by_set.setdefault(str(item.get("changeSetId")), []).append(item)
+
+        evidence_by_set: dict[str, list[dict[str, Any]]] = {}
+        for row in evidence:
+            evidence_by_set.setdefault(str(row.get("changeSetId") or ""), []).append(row)
+
+        routing_items: list[dict[str, Any]] = []
+        warnings: list[str] = []
+        for change_set in change_sets:
+            change_set_id = str(change_set.get("id") or "")
+            pending_items = items_by_set.get(change_set_id, [])
+            if not change_set_id or not pending_items:
+                continue
+            change_set_evidence = evidence_by_set.get(change_set_id, [])
+            risk_levels = [str(item.get("riskLevel") or "medium") for item in pending_items]
+            object_types = sorted({str(item.get("objectType") or "Unknown") for item in pending_items})
+            risk_groups = sorted({str(item.get("group") or "unknown") for item in pending_items})
+            high_risk_signal = any(str(item.get("objectType") or "").lower() == "risk" or str(item.get("group") or "").lower() == "risk" for item in pending_items)
+            highest_risk = "high" if high_risk_signal else self._highest_risk_level(risk_levels)
+            cross_domain = len(object_types) > 1 or len(risk_groups) > 1
+            review_reasons = self._review_routing_reasons(
+                pending_count=len(pending_items),
+                highest_risk=highest_risk,
+                object_types=object_types,
+                risk_groups=risk_groups,
+                cross_domain=cross_domain,
+            )
+            suggested_reviewer = self._suggest_reviewer(
+                members=members,
+                highest_risk=highest_risk,
+                cross_domain=cross_domain,
+            )
+            warning = None
+            fallback_role = None
+            if not members:
+                warning = "reviewer_missing"
+                fallback_role = "OWNER"
+            elif suggested_reviewer is None:
+                warning = "reviewer_missing"
+                fallback_role = "OWNER"
+            elif not change_set_evidence:
+                warning = "evidence_missing"
+            if warning:
+                warnings.append(f"reviewer_routing_warning:{change_set_id}:{warning}")
+            source_type = self._reviewer_routing_source_type(change_set_evidence)
+            priority = self._reviewer_routing_priority(highest_risk=highest_risk, cross_domain=cross_domain)
+            routing_items.append(
+                {
+                    "projectId": str(project_id),
+                    "changeSetId": change_set_id,
+                    "changeSetTitle": str(change_set.get("headline") or "待审 ChangeSet"),
+                    "changeSetStatus": str(change_set.get("status") or change_set.get("rawStatus") or "open"),
+                    "sourceType": source_type,
+                    "reviewReason": "；".join(review_reasons),
+                    "riskLevel": highest_risk,
+                    "priority": priority,
+                    "changeTypes": object_types,
+                    "itemCount": len(change_set.get("itemIds") or pending_items),
+                    "pendingItemCount": len(pending_items),
+                    "evidenceCount": len(change_set_evidence),
+                    "suggestedReviewer": suggested_reviewer,
+                    "fallbackReviewerRole": fallback_role,
+                    "targetUrl": f"/change-review?projectId={int(project_id)}&changeSetId={change_set_id}",
+                    "createdAt": change_set.get("createdAt"),
+                    "updatedAt": change_set.get("updatedAt") or change_set.get("createdAt"),
+                }
+            )
+        missing_reviewer_count = sum(1 for item in routing_items if item.get("suggestedReviewer") is None)
+        warning_code = self._reviewer_routing_warning_code(routing_items)
+        status = "empty" if not routing_items else ("warning" if warning_code else "ready")
+        return (
+            {
+                "status": status,
+                "warningCode": warning_code,
+                "items": routing_items,
+                "summary": {
+                    "totalPendingReview": sum(int(item.get("pendingItemCount") or 0) for item in routing_items),
+                    "highRiskCount": sum(1 for item in routing_items if item.get("riskLevel") == "high"),
+                    "missingReviewerCount": missing_reviewer_count,
+                    "iterationDraftCount": sum(1 for item in routing_items if item.get("sourceType") == "iteration_recommendation"),
+                },
+            },
+            warnings,
+        )
+
+    @staticmethod
+    def _highest_risk_level(levels: list[str]) -> str:
+        rank = {"low": 0, "medium": 1, "high": 2}
+        highest = "low"
+        for level in levels:
+            normalized = str(level or "medium").lower()
+            if rank.get(normalized, 1) > rank[highest]:
+                highest = normalized
+        return highest
+
+    @staticmethod
+    def _review_routing_reasons(
+        *,
+        pending_count: int,
+        highest_risk: str,
+        object_types: list[str],
+        risk_groups: list[str],
+        cross_domain: bool,
+    ) -> list[str]:
+        reasons = [f"{pending_count} 个变更项仍处于待审状态。"]
+        if highest_risk == "high":
+            reasons.append("包含 high risk 变更，需要 REVIEWER 或 OWNER 复核。")
+        if cross_domain:
+            reasons.append(f"变更跨越 {' / '.join(object_types)}，需要项目 owner 统一审查口径。")
+        if "risk" in {group.lower() for group in risk_groups}:
+            reasons.append("包含风险类变更，审查时需要确认缓解策略是否足够。")
+        if "decision" in {group.lower() for group in risk_groups}:
+            reasons.append("包含决策类变更，审查时需要确认拍板依据。")
+        return reasons
+
+    @staticmethod
+    def _reviewer_routing_priority(*, highest_risk: str, cross_domain: bool) -> str:
+        if highest_risk == "high":
+            return "urgent"
+        if cross_domain:
+            return "elevated"
+        return "normal"
+
+    @staticmethod
+    def _reviewer_routing_source_type(evidence: list[dict[str, Any]]) -> str:
+        source_types = {str(row.get("sourceType") or "").strip() for row in evidence}
+        if "iteration_recommendation" in source_types:
+            return "iteration_recommendation"
+        if "thread_message" in source_types:
+            return "ai_extraction"
+        if source_types:
+            return "manual"
+        return "unknown"
+
+    @staticmethod
+    def _reviewer_routing_warning_code(items: list[dict[str, Any]]) -> Optional[str]:
+        if not items:
+            return None
+        if any(item.get("suggestedReviewer") is None for item in items):
+            return "reviewer_missing"
+        if any(int(item.get("evidenceCount") or 0) == 0 for item in items):
+            return "evidence_missing"
+        return None
+
+    @staticmethod
+    def _suggest_reviewer(
+        *,
+        members: list[User],
+        highest_risk: str,
+        cross_domain: bool,
+    ) -> Optional[dict[str, str]]:
+        reviewers = [user for user in members if str(user.role or "").upper() == "REVIEWER"]
+        owners = [user for user in members if str(user.role or "").upper() == "OWNER"]
+        if reviewers:
+            return PMFlowOSProjectionService._reviewer_payload(
+                reviewers[0],
+                "REVIEWER 角色，优先复核 high risk / 跨类型 ChangeSet。",
+                "high" if highest_risk == "high" else "medium",
+            )
+        if owners:
+            reason = "项目 OWNER，适合统一跨对象变更审查口径。" if cross_domain else "项目 OWNER，可作为本轮变更审查负责人。"
+            return PMFlowOSProjectionService._reviewer_payload(owners[0], reason, "medium")
+        return None
+
+    @staticmethod
+    def _reviewer_payload(user: User, reason: str, confidence: str) -> dict[str, str]:
+        return {
+            "userId": str(user.id),
+            "displayName": user.name or user.username or f"User#{user.id}",
+            "role": str(user.role or "MEMBER"),
+            "reason": reason,
+            "confidence": confidence,
+        }
+
     @staticmethod
     def _active_change_set_id(change_sets: list[dict[str, Any]]) -> Optional[str]:
         for row in change_sets:

backend/tests/test_pmflow_os_projection_api.py

@@ -1189,6 +1189,257 @@ async def test_iteration_recommendation_group_batches_quality_and_reuses_changes
     assert tasks == []
 
 
+@pytest.mark.asyncio
+async def test_truth_state_projects_reviewer_routing_for_pending_changesets(db_env) -> None:
+    session = db_env
+    user, project = await _seed_user_project(session)
+    reviewer = User(
+        tenant_id=1,
+        username="reviewer",
+        email="reviewer@example.com",
+        password_hash="hashed",
+        name="审查负责人",
+        role="REVIEWER",
+        assigned_domains=[],
+        workload=0,
+        status="active",
+        is_active=True,
+    )
+    owner = User(
+        tenant_id=1,
+        username="project-owner",
+        email="project-owner@example.com",
+        password_hash="hashed",
+        name="项目 Owner",
+        role="OWNER",
+        assigned_domains=[],
+        workload=0,
+        status="active",
+        is_active=True,
+    )
+    session.add_all([reviewer, owner])
+    await session.flush()
+    session.add_all(
+        [
+            UserProject(tenant_id=1, user_id=reviewer.id, project_id=project.id),
+            UserProject(tenant_id=1, user_id=owner.id, project_id=project.id),
+        ]
+    )
+    thread = PMFlowThread(
+        tenant_id=1,
+        project_id=project.id,
+        title="审查线程",
+        objective="验证 reviewer routing",
+        status="active",
+        source="project_launch",
+    )
+    session.add(thread)
+    await session.flush()
+    message = PMFlowThreadMessage(
+        tenant_id=1,
+        thread_id=thread.id,
+        project_id=project.id,
+        role="user",
+        content="本轮包含高风险和跨对象变更。",
+        source="web",
+        attachments=[],
+        message_metadata={},
+        status="sent",
+    )
+    session.add(message)
+    await session.flush()
+    change_set = PMFlowChangeSet(
+        tenant_id=1,
+        project_id=project.id,
+        thread_id=thread.id,
+        source_message_id=message.id,
+        status="open",
+        summary="高风险跨域变更待审",
+        headline="跨域高风险 ChangeSet",
+        extraction_scope="latest_message",
+        routing_meta={},
+        created_by=user.id,
+    )
+    session.add(change_set)
+    await session.flush()
+    risk_item = PMFlowChangeItem(
+        tenant_id=1,
+        change_set_id=change_set.id,
+        project_id=project.id,
+        group="risk",
+        object_type="Risk",
+        object_id=None,
+        title="新增风险：权限收敛失败",
+        summary="需要审查权限和数据暴露风险。",
+        diff="新增 high risk。",
+        payload={},
+        confidence=0.92,
+        risk_level="high",
+        status="pending_review",
+    )
+    task_item = PMFlowChangeItem(
+        tenant_id=1,
+        change_set_id=change_set.id,
+        project_id=project.id,
+        group="field_update",
+        object_type="Task",
+        object_id=None,
+        title="更新任务：补审查口径",
+        summary="任务验收增加 review gate。",
+        diff="更新验收标准。",
+        payload={},
+        confidence=0.86,
+        risk_level="medium",
+        status="pending_review",
+    )
+    session.add_all([risk_item, task_item])
+    await session.flush()
+    session.add(
+        PMFlowEvidenceLink(
+            tenant_id=1,
+            project_id=project.id,
+            change_set_id=change_set.id,
+            change_item_id=risk_item.id,
+            source_type="iteration_recommendation",
+            source_id="iteration-1",
+            title="迭代建议证据",
+            excerpt="发布后反馈建议下一轮修复权限风险。",
+            display_label="Iteration recommendation",
+            evidence_metadata={},
+        )
+    )
+    await session.commit()
+    app = _build_app(session, SimpleNamespace(id=user.id, tenant_id=1, role="MEMBER"))
+
+    async with AsyncClient(transport=ASGITransport(app=app), base_url="http://test") as client:
+        response = await client.get(f"/pmflow-os/projects/{project.id}/truth-state")
+
+    assert response.status_code == 200
+    payload = response.json()["data"]
+    routing = payload["reviewerRouting"]
+    assert routing["status"] == "ready"
+    assert routing["warningCode"] is None
+    assert routing["summary"]["totalPendingReview"] == 2
+    assert routing["summary"]["highRiskCount"] == 1
+    assert routing["summary"]["missingReviewerCount"] == 0
+    assert routing["summary"]["iterationDraftCount"] == 1
+    item = routing["items"][0]
+    assert item["projectId"] == str(project.id)
+    assert item["changeSetId"] == str(change_set.id)
+    assert item["sourceType"] == "iteration_recommendation"
+    assert item["pendingItemCount"] == 2
+    assert item["evidenceCount"] == 1
+    assert item["riskLevel"] == "high"
+    assert item["priority"] == "urgent"
+    assert item["changeTypes"] == ["Risk", "Task"]
+    assert item["suggestedReviewer"]["role"] == "REVIEWER"
+    assert item["suggestedReviewer"]["displayName"] == "审查负责人"
+    assert item["targetUrl"] == f"/change-review?projectId={project.id}&changeSetId={change_set.id}"
+    assert "high risk" in item["reviewReason"]
+    assert payload["approvals"] == []
+    assert not any("reviewer_routing_warning" in warning for warning in payload["projectionWarnings"])
+
+
+@pytest.mark.asyncio
+async def test_truth_state_reviewer_routing_warns_without_owner_or_reviewer_role(db_env) -> None:
+    session = db_env
+    user, project = await _seed_user_project(session)
+    thread = PMFlowThread(
+        tenant_id=1,
+        project_id=project.id,
+        title="审查线程",
+        objective="验证 reviewer routing warning",
+        status="active",
+        source="project_launch",
+    )
+    session.add(thread)
+    await session.flush()
+    message = PMFlowThreadMessage(
+        tenant_id=1,
+        thread_id=thread.id,
+        project_id=project.id,
+        role="user",
+        content="本轮缺少审查角色。",
+        source="web",
+        attachments=[],
+        message_metadata={},
+        status="sent",
+    )
+    session.add(message)
+    await session.flush()
+    change_set = PMFlowChangeSet(
+        tenant_id=1,
+        project_id=project.id,
+        thread_id=thread.id,
+        source_message_id=message.id,
+        status="open",
+        summary="缺少 reviewer",
+        headline="待审但无审查角色",
+        extraction_scope="latest_message",
+        routing_meta={},
+        created_by=user.id,
+    )
+    session.add(change_set)
+    await session.flush()
+    session.add(
+        PMFlowChangeItem(
+            tenant_id=1,
+            change_set_id=change_set.id,
+            project_id=project.id,
+            group="risk",
+            object_type="Risk",
+            object_id=None,
+            title="新增风险：缺少审查角色",
+            summary="应提示 warning，不虚构 reviewer。",
+            diff="新增 high risk。",
+            payload={},
+            confidence=0.92,
+            risk_level="high",
+            status="pending_review",
+        )
+    )
+    await session.commit()
+    app = _build_app(session, SimpleNamespace(id=user.id, tenant_id=1, role="MEMBER"))
+
+    async with AsyncClient(transport=ASGITransport(app=app), base_url="http://test") as client:
+        response = await client.get(f"/pmflow-os/projects/{project.id}/truth-state")
+
+    assert response.status_code == 200
+    payload = response.json()["data"]
+    routing = payload["reviewerRouting"]
+    assert routing["status"] == "warning"
+    assert routing["warningCode"] == "reviewer_missing"
+    assert routing["summary"]["missingReviewerCount"] == 1
+    item = routing["items"][0]
+    assert item["suggestedReviewer"] is None
+    assert item["fallbackReviewerRole"] == "OWNER"
+    assert any("reviewer_routing_warning" in warning for warning in payload["projectionWarnings"])
+
+
+@pytest.mark.asyncio
+async def test_truth_state_reviewer_routing_empty_without_pending_changesets(db_env) -> None:
+    session = db_env
+    user, project = await _seed_user_project(session)
+    app = _build_app(session, SimpleNamespace(id=user.id, tenant_id=1, role="MEMBER"))
+
+    async with AsyncClient(transport=ASGITransport(app=app), base_url="http://test") as client:
+        response = await client.get(f"/pmflow-os/projects/{project.id}/truth-state")
+
+    assert response.status_code == 200
+    routing = response.json()["data"]["reviewerRouting"]
+    assert routing == {
+        "status": "empty",
+        "warningCode": None,
+        "items": [],
+        "summary": {
+            "totalPendingReview": 0,
+            "highRiskCount": 0,
+            "missingReviewerCount": 0,
+            "iterationDraftCount": 0,
+        },
+    }
+
+
 @pytest.mark.asyncio
 async def test_execution_progress_writeback_rejects_repo_outside_project(db_env) -> None:
     session = db_env

docs/PMFLOW_PRODUCT_DELIVERY_STANDARD.md

@@ -88,6 +88,9 @@
 5. `ExecutionBridge` 已接入真实 execution-summary/dev-sync、execution handoff、运行端领取和 progress writeback；当前缺口不再是执行桥读写合同，而是执行质量、审查责任和个人队列的产品化。
 6. `ReleaseGrowth` 已接入 execution evidence gate、release validation run、feedback ingest 和 recommendation -> ChangeSet draft 回流；revenue、ROI、compliance 还没有串成完整发布后反馈循环。
 7. `TeamLayer` 仍是产品表达层，缺少真实成员角色、Role Inbox、Decision Desk、Team Feed 的数据模型和审查流程。
+5. `ExecutionBridge` 页面还没有消费 dev-sync / GitHub / PromptPackage 真实接口。
+6. `ReleaseGrowth` 已接入 execution evidence gate、release validation run 与 feedback ingest；revenue、ROI、compliance 还没有串成完整发布后反馈循环。
+7. `TeamLayer` 已接入 reviewer routing 读模型，能展示待审 ChangeSet、建议审查人、审查原因、风险类型和缺角色 warning；Role Inbox、Decision Desk、Team Feed 仍缺完整真实数据模型。
 
 ## 2. 下一步推进方向
 
@@ -299,7 +302,7 @@
 验收：
 
 - 不同角色看到不同待处理项。
-- 高风险 ChangeSet 能指定 reviewer/owner。
+- 高风险 ChangeSet 能先展示建议 reviewer/owner 与审查原因；自动指定或权限化分派不属于当前最小闭环。
 - Team Feed 展示 AI 提取、人工确认、执行回写、测试/发布变化。
 
 ## 4. 单次任务范围标准
@@ -822,7 +825,6 @@ Shell / Integration owner 负责：
 - 新建 `codex/big-module-integration-p7`，从 `codex/big-module-integration-p6` 依次收口 `shell-p7-rebaseline-next-plan`、`iteration-loop-p2-recommendation-quality-batch`、`space-p6-personal-next-action-queue`、`account-p7-review-notification-intensity`。
 - 确认本轮未新增 route/nav，仍使用既有 `/release-growth`、`/change-review`、`/space`、`/me` 表面；`frontend/src/router/index.tsx` 与 `frontend/src/features/pmflow-os/components/MobileBottomNav.tsx` 未进入 P7 集成 diff。
 - Main Flow 已把同组 recommendation 批量生成 ChangeSet draft、recommendation quality grouping、Change Review 来源解释接入集成线；Space 已把“我的下一步”队列接入 `/space` 只读聚合；Account 已把提醒强度和证据展示偏好合同接入 `/me`。
-- 检查到 `codex/team-review-p1-change-review-routing` 分支已存在并有实现提交，但该分支当前未基于 P7 integration，且尚未合入 `codex/big-module-integration-p7`；下一步应单独执行 team-review rebase / integration，不把它混进 P7。
 
 涉及文件：
 
@@ -835,20 +837,59 @@ Shell / Integration owner 负责：
 验证：
 
 - P7 integration 分支已形成 merge commits：`86c6ec7 merge shell p7 rebaseline`、`8d60b18 merge iteration loop p2 recommendation quality`、`4a74eea merge space p6 personal next action queue`、`77fa288 merge account p7 notification intensity`。
-- `git diff --name-only` 已执行，最终待提交 diff 仅为 P7 integration 台账更新。
-- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m py_compile backend/app/api/pmflow_os_api/__init__.py backend/app/services/pmflow_os_projection_service.py backend/app/schemas/pmflow_os.py` 通过。
-- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m pytest backend/tests/test_pmflow_os_projection_api.py backend/tests/test_account_settings_api.py -q` 通过：`24 passed`；仍有既有 `backend/app/schemas/recipe.py` Pydantic V2 class-based config deprecation warning。
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m pytest backend/tests/test_pmflow_os_projection_api.py backend/tests/test_account_settings_api.py -q` 通过：`24 passed`。
 - `cd frontend && npm run test -- src/features/pmflow-os` 通过：`10 passed`。
-- `cd frontend && npm run test -- src/features/personal-space/PersonalSpacePage.test.tsx` 通过：`2 passed`；仍有既有 React Router v7 future flag warning。
+- `cd frontend && npm run test -- src/features/personal-space/PersonalSpacePage.test.tsx` 通过：`2 passed`。
 - `cd frontend && npm run test -- src/features/account-settings/accountSettings.test.ts` 通过：`11 passed`。
 - `cd frontend && npm run typecheck` 通过。
 - `cd frontend && npm run build` 通过；Vite 仍提示既有 manual chunk circular warning（`ai-steward / sstc / charts / governance` chunk 环）。
 - `docker compose restart backend` 已执行，`docker compose ps backend` 确认 `pmflow-backend` 恢复 `healthy`。
+- `docker compose restart backend` 已执行，`docker compose ps backend` 确认 `pmflow-backend` 恢复 `healthy`。
 
 未完成或风险：
 
-- `team-review-p1-change-review-routing` 只确认已有独立实现分支，不算 P7 integration 的一部分。
-- 下一步如推进 Team Review，必须从 `codex/big-module-integration-p7` 作为 base，解决与 Iteration Loop P2 在 `pmflow_os_projection_service.py / schemas / store` 上的重叠。
+- P7 本身不包含 Team Review；Team Review 已由后续 `team-review-p1-change-review-routing-p7` 从 P7 base 单独收口。
+
+### 2026-04-26 / team-review-p1-change-review-routing-p7 / done
+
+完成内容：
+
+- 从 `codex/big-module-integration-p7` 新开 `codex/team-review-p1-change-review-routing-p7`，合入既有 `codex/team-review-p1-change-review-routing` 实现，解决与 Iteration Loop P2 在 schema、projection、store 和测试上的重叠。
+- 在 `ProjectTruthState` 新增 `reviewerRouting(status, warningCode, summary, items)` 只读投影，从 open/pending ChangeSet、待审 item 风险、跨对象类型、`iteration_recommendation` evidence、项目成员与 `OWNER / REVIEWER` 角色生成建议审查人、来源、风险等级、优先级、审查原因、fallback role 和目标跳转 URL。
+- `TeamLayerPage` 真实模式展示待审 ChangeSet reviewer routing：ready / empty / warning、来源（下一轮迭代 / AI 提取 / 手动）、风险等级、建议审查人或 fallback role、审查原因、待审 item 数、证据数，并跳转 `/change-review?projectId=<id>&changeSetId=<id>`。
+- 保持监督式边界：不新增 route，不新增 migration，不做复杂权限系统，不自动 assign reviewer，不写 approval；缺成员、缺 `OWNER / REVIEWER` 角色或缺 evidence 时只显示 warning，不虚构 reviewer。
+- 保留 P7 的 recommendation group 批量 ChangeSet draft 合同和测试，没有用 reviewer routing 覆盖 Iteration Loop P2。
+
+涉及文件：
+
+- `backend/app/schemas/pmflow_os.py`
+- `backend/app/services/pmflow_os_projection_service.py`
+- `backend/tests/test_pmflow_os_projection_api.py`
+- `frontend/src/api/pmflowOs.ts`
+- `frontend/src/features/pmflow-os/store.tsx`
+- `frontend/src/features/pmflow-os/types.ts`
+- `frontend/src/features/pmflow-os/pages/TeamLayerPage.tsx`
+- `frontend/src/features/pmflow-os/store.api.test.tsx`
+- `CLAUDE.md`
+- `docs/PMFLOW_PRODUCT_DELIVERY_STANDARD.md`
+- `docs/architecture/CODE_REFERENCE_INDEX.md`
+- `docs/architecture/ARCHITECTURE_INVENTORY.md`
+
+验证：
+
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m py_compile backend/app/services/pmflow_os_projection_service.py backend/app/schemas/pmflow_os.py backend/tests/test_pmflow_os_projection_api.py` 通过。
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m pytest backend/tests/test_pmflow_os_projection_api.py -q` 通过：`23 passed`；仍有既有 `backend/app/schemas/recipe.py` Pydantic V2 class-based config deprecation warning。
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m pytest backend/tests/test_pmflow_os_projection_api.py backend/tests/test_account_settings_api.py -q` 通过：`27 passed`；仍有同一 Pydantic warning。
+- `cd frontend && npm run test -- src/features/pmflow-os` 通过：`12 passed`；仍有既有 React Router v7 future flag warning。
+- `cd frontend && npm run test -- src/features/personal-space/PersonalSpacePage.test.tsx` 通过：`2 passed`；仍有既有 React Router v7 future flag warning。
+- `cd frontend && npm run test -- src/features/account-settings/accountSettings.test.ts` 通过：`11 passed`。
+- `cd frontend && npm run typecheck` 通过。
+- `cd frontend && npm run build` 通过；Vite 仍提示既有 manual chunk circular warning（`ai-steward / sstc / charts / governance` chunk 环）。
+
+未完成或风险：
+
+- 当前只是 reviewer routing 读模型与 TeamLayer 展示，不代表正式 reviewer assignment、权限审批流、通知或自动审查任务已接入。
+- Role Inbox、Decision Desk、Team Feed 的完整真实数据模型仍是后续 Team lane 工作。
 
 ### 2026-04-26 / shell-p7-rebaseline-next-plan / implemented
 
@@ -919,6 +960,18 @@ Shell / Integration owner 负责：
 - `cd frontend && npm run test -- src/features/account-settings/accountSettings.test.ts` 通过：`11 passed`。
 - `cd frontend && npm run typecheck` 通过。
 - `cd frontend && npm run build` 通过；Vite 仍提示既有 manual chunk circular warning（`ai-steward / sstc / charts / governance` chunk 环），构建成功。
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m py_compile backend/app/services/pmflow_os_projection_service.py backend/app/schemas/pmflow_os.py` 通过。
+- `PYTHONPATH=backend /opt/homebrew/bin/python3.11 -m pytest backend/tests/test_pmflow_os_projection_api.py -q` 通过：`22 passed`；仍有既有 `backend/app/schemas/recipe.py` Pydantic V2 class-based config deprecation warning。
+- `cd frontend && npm run test -- src/features/pmflow-os` 通过：`11 passed`；仍有既有 React Router v7 future flag warning。
+- `cd frontend && npm run typecheck` 通过。
+- `cd frontend && npm run build` 通过；Vite 仍提示既有 manual chunk circular warning（`ai-steward / sstc / charts / governance` chunk 环）。
+- `docker compose restart backend` 已执行，`docker compose ps backend` 确认 `pmflow-backend` 恢复 `healthy`。
+- `git diff --name-only` 已执行，diff 均在本 Packet write scope 内。
+
+未完成或风险：
+
+- 当前只是 reviewer routing 读模型与 TeamLayer 展示，不代表正式 reviewer assignment、权限审批流、通知或自动审查任务已接入。
+- Role Inbox、Decision Desk、Team Feed 的完整真实数据模型仍是后续 Team lane 工作。
 
 ### 2026-04-26 / big-module-integration-p6 / done
 

docs/architecture/ARCHITECTURE_INVENTORY.md

@@ -195,6 +195,8 @@
 - 登录页与营销页仍共享 `frontend/src/components/marketing/` 的部分视觉基线；公开登录页现改由 `frontend/src/components/login/` 目录承载，其中 `LoginExperience.tsx` 负责登录壳层、`LoginWorkflowVisual.tsx` 负责左侧场景、`loginScene.ts` / `loginMath.ts` 拆出展示配置与路径几何、`login.css` 负责登录页专属样式边界，`frontend/src/pages/login/LoginPage.tsx` 继续负责真实鉴权、错误态和 redirect 提示；未登录访问 `/` 会经 `frontend/src/router/index.tsx` 直接重定向到 `/login`，无显式 `redirect` 的成功登录现在默认进入 `/command-center`。
 - 前端主包治理已切到“同步首屏最小集 + route/page-section lazy”模式：`frontend/src/router/index.tsx` 保留 `LoginPage / Layout` 这组同步入口，其余后台重页面通过 `React.lazy + Suspense` 懒加载；统一 fallback 在 `frontend/src/components/layout/LazyBoundary.tsx`。P0 公共壳冻结后，大模块 route 归属为：`/space` 归 Space lane，`/project-launch` 是启动层入口，`/pmflow-os` 与 `/command-center / /change-review / /execution-bridge / /release-growth` 归 Main Flow lane，`/me` 归 Account Settings lane，`/settings` 当前仅为 reserved route、尚未实现，新增必须由 Shell / Integration owner 串行处理。`frontend/src/features/personal-space/` 作为空间层入口，通过 `/space` 提供可直接打开的本地预览入口，承载继续推进、待我确认、AI 正在推进、暂存想法、草案箱与新建项目入口。`frontend/src/features/project-launch/` 作为首次进入页 / 新项目启动台产品域，通过 `/project-launch` 提供可直接打开的入口；Phase B 后默认调用真实 `pmflow-launch` draft/confirm API，创建成功态主动作跳转后端返回的 `/pmflow-os?projectId=<id>`，只有显式 `?demo=1` 或 `?dataSource=demo` 才启用本地 mock 状态机。`frontend/src/features/account-settings/` 作为 Account Settings 产品域，通过 `/me` 提供个人资料、默认语言、AI 回答深度、证据展示偏好、待确认/执行回写/发布门禁/失败提醒通知偏好和账户操作入口；该域通过 `frontend/src/api/accountSettings.ts` 建立前端合同，有 token 时优先调用已挂入 `backend/app/api/router.py` 的 `backend/app/api/account_settings_api/` `GET /account-settings/me` / `PUT /account-settings/me` 同步当前账号偏好，后端不可用时明确回落本机暂存，不修改 OAuth/JWT/auth core。`frontend/src/features/pmflow-os/` 作为新产品域，通过 `PMFlowOsProvider` 在应用根部挂载共享 truth store，并提供 `CommandCenter / ChangeReview / WorkGraph / ExecutionBridge / ReleaseGrowth / TeamLayer / ProjectMemory / Account` 主入口；当前 PMFlow OS 页面已切到专属轻壳，桌面端默认隐藏旧 TopBar，并由 `frontend/src/features/pmflow-os/components/PMFlowOsFrame.tsx` 统一承接“左侧稳定导航 + 顶部上下文条 + 中央视图 + 右侧 AI 副驾”的全局骨架，同时承接项目内 `个人空间 / 当前项目名` 面包屑和项目切换器；账号退出登录由 `frontend/src/features/pmflow-os/components/AccountControls.tsx` 统一承接桌面头像下拉、退出确认与移动端 bottom sheet，`frontend/src/features/pmflow-os/pages/AccountPage.tsx` 提供 `/me` 入口并委托 Account Settings 域渲染设置页；正式应用壳移动端底部导航统一由 `frontend/src/features/pmflow-os/components/MobileBottomNav.tsx` 承接，固定为 `空间 / 指挥台 / 待确认 / 动态 / 我的`，其中 `动态` 当前仍是 `/command-center` 占位。`/command-center` 额外提供免登录产品预览壳，`/pmflow-os` 是真实项目上下文 alias。主视觉按 `#2463EB + 白色` 的 Linear-like 高密度原型展开。`UsersPage` 把创建/删除/重置/导入/批量分配对话框拆为按需 chunk，`UserSkillsPage` 与 `WorkloadDetailPage` 的图表也分别拆到了 `frontend/src/pages/user-skills/components/UserSkillsRadarPanel.tsx` 与 `frontend/src/pages/workload-detail/components/WorkloadTrendChart.tsx`。
 - `frontend/src/features/personal-space/PersonalSpacePage.tsx` 是空间首页视图层，`frontend/src/api/space.ts` 是空间工作面只读聚合 API：从 `projects` summary、PMFlow OS `truth-state` 与 `execution-summary` 生成 `nextActionQueue` 我的下一步队列、继续推进、待确认、发布关注、发布后反馈关注、下一轮迭代草稿关注、执行中 / AI 正在推进、暂存想法、草案箱、最近项目摘要；Space P6 的 `nextActionQueue` 按高风险 ChangeSet 待确认、release blocked / failed evidence、handoff consumed 但无后续 progress、iteration draft 待确认、feedback/revenue/compliance 信号待处理排序，并只提供 `/change-review`、`/execution-bridge`、`/release-growth` 跳转。Space P3 的 `releaseAttention` 优先消费 `truth-state.releases` 中由 release validation run 投影出的 release 状态与检查项，把“发布验证阻塞 / 发布验证待确认”显示到 `/space`，没有发布验证投影时才回落到 `execution-summary.releaseGate` 的发布候选或发布门禁阻塞；Space P4/P5 的 `feedbackAttention` 只读消费 `execution-summary.releaseSignals`，把发布后 feedback、revenue、ROI、compliance、iteration recommendation 与已生成的下一轮 ChangeSet draft 关注项显示到 `/space`。发布验证、发布后信号或下一轮 draft 缺失时显示明确空态，不虚构验证、反馈、收入、ROI、合规、建议或 ChangeSet draft 结果。项目主动作进入 `/pmflow-os?projectId=<id>`，待确认项进入 `/change-review?projectId=<id>&changeSetId=<id>`，发布关注和发布后反馈关注项进入 `/release-growth?projectId=<id>`，下一轮 draft 关注项进入 `/change-review?projectId=<id>&changeSetId=<id>`，执行中项进入 `/execution-bridge?projectId=<id>`；暂存想法后端只读聚合尚未接入时只显示 empty/warning，不使用 mock 数据冒充真实内容；移动端为空间首页独立 App 布局，不直接压缩桌面卡片，并保留最近项目区块；`frontend/src/pages/PersonalSpacePage.tsx` 是薄入口。该域只表达个人空间和主流程导航，不做团队空间强切换、企业组织管理、Project Memory 写入、ChangeSet 状态写入、ProgressEvent 写入、ReleaseValidationRun 写入、FeedbackIngest 写入或发布执行。
+- 前端主包治理已切到“同步首屏最小集 + route/page-section lazy”模式：`frontend/src/router/index.tsx` 保留 `LoginPage / Layout` 这组同步入口，其余后台重页面通过 `React.lazy + Suspense` 懒加载；统一 fallback 在 `frontend/src/components/layout/LazyBoundary.tsx`。P0 公共壳冻结后，大模块 route 归属为：`/space` 归 Space lane，`/project-launch` 是启动层入口，`/pmflow-os` 与 `/command-center / /change-review / /execution-bridge / /release-growth` 归 Main Flow lane，`/me` 归 Account Settings lane，`/settings` 当前仅为 reserved route、尚未实现，新增必须由 Shell / Integration owner 串行处理。`frontend/src/features/personal-space/` 作为空间层入口，通过 `/space` 提供可直接打开的本地预览入口，承载继续推进、待我确认、AI 正在推进、暂存想法、草案箱与新建项目入口。`frontend/src/features/project-launch/` 作为首次进入页 / 新项目启动台产品域，通过 `/project-launch` 提供可直接打开的入口；Phase B 后默认调用真实 `pmflow-launch` draft/confirm API，创建成功态主动作跳转后端返回的 `/pmflow-os?projectId=<id>`，只有显式 `?demo=1` 或 `?dataSource=demo` 才启用本地 mock 状态机。`frontend/src/features/account-settings/` 作为 Account Settings 产品域，通过 `/me` 提供个人资料、默认语言、AI 回答深度、证据展示偏好、待确认/执行回写/发布门禁/失败提醒通知偏好和账户操作入口；该域通过 `frontend/src/api/accountSettings.ts` 建立前端合同，有 token 时优先调用已挂入 `backend/app/api/router.py` 的 `backend/app/api/account_settings_api/` `GET /account-settings/me` / `PUT /account-settings/me` 同步当前账号偏好，后端不可用时明确回落本机暂存，不修改 OAuth/JWT/auth core。`frontend/src/features/pmflow-os/` 作为新产品域，通过 `PMFlowOsProvider` 在应用根部挂载共享 truth store，并提供 `CommandCenter / ChangeReview / WorkGraph / ExecutionBridge / ReleaseGrowth / TeamLayer / ProjectMemory / Account` 主入口；当前 PMFlow OS 页面已切到专属轻壳，桌面端默认隐藏旧 TopBar，并由 `frontend/src/features/pmflow-os/components/PMFlowOsFrame.tsx` 统一承接“左侧稳定导航 + 顶部上下文条 + 中央视图 + 右侧 AI 副驾”的全局骨架，同时承接项目内 `个人空间 / 当前项目名` 面包屑和项目切换器；`TeamLayerPage.tsx` 现在消费 `ProjectTruthState.reviewerRouting(status/summary/items)` 展示待审 ChangeSet、来源、风险等级、建议审查人或 fallback role、审查原因、待审 item 数、证据数和 warning，动作只跳 `/change-review?projectId=<id>&changeSetId=<id>`，不自动 assign reviewer；账号退出登录由 `frontend/src/features/pmflow-os/components/AccountControls.tsx` 统一承接桌面头像下拉、退出确认与移动端 bottom sheet，`frontend/src/features/pmflow-os/pages/AccountPage.tsx` 提供 `/me` 入口并委托 Account Settings 域渲染设置页；正式应用壳移动端底部导航统一由 `frontend/src/features/pmflow-os/components/MobileBottomNav.tsx` 承接，固定为 `空间 / 指挥台 / 待确认 / 动态 / 我的`，其中 `动态` 当前仍是 `/command-center` 占位。`/command-center` 额外提供免登录产品预览壳，`/pmflow-os` 是真实项目上下文 alias。主视觉按 `#2463EB + 白色` 的 Linear-like 高密度原型展开。`UsersPage` 把创建/删除/重置/导入/批量分配对话框拆为按需 chunk，`UserSkillsPage` 与 `WorkloadDetailPage` 的图表也分别拆到了 `frontend/src/pages/user-skills/components/UserSkillsRadarPanel.tsx` 与 `frontend/src/pages/workload-detail/components/WorkloadTrendChart.tsx`。
+- `frontend/src/features/personal-space/PersonalSpacePage.tsx` 是空间首页视图层，`frontend/src/api/space.ts` 是空间工作面只读聚合 API：从 `projects` summary、PMFlow OS `truth-state` 与 `execution-summary` 生成继续推进、待确认、发布关注、发布后反馈关注、下一轮迭代草稿关注、执行中 / AI 正在推进、暂存想法、草案箱、最近项目摘要；Space P3 的 `releaseAttention` 优先消费 `truth-state.releases` 中由 release validation run 投影出的 release 状态与检查项，把“发布验证阻塞 / 发布验证待确认”显示到 `/space`，没有发布验证投影时才回落到 `execution-summary.releaseGate` 的发布候选或发布门禁阻塞；Space P4/P5 的 `feedbackAttention` 只读消费 `execution-summary.releaseSignals`，把发布后 feedback、revenue、ROI、compliance、iteration recommendation 与已生成的下一轮 ChangeSet draft 关注项显示到 `/space`。发布验证、发布后信号或下一轮 draft 缺失时显示明确空态，不虚构验证、反馈、收入、ROI、合规、建议或 ChangeSet draft 结果。项目主动作进入 `/pmflow-os?projectId=<id>`，待确认项进入 `/change-review?projectId=<id>&changeSetId=<id>`，发布关注和发布后反馈关注项进入 `/release-growth?projectId=<id>`，下一轮 draft 关注项进入 `/change-review?projectId=<id>&changeSetId=<id>`，执行中项进入 `/execution-bridge?projectId=<id>`；暂存想法后端只读聚合尚未接入时只显示 empty/warning，不使用 mock 数据冒充真实内容；移动端为空间首页独立 App 布局，不直接压缩桌面卡片，并保留最近项目区块；`frontend/src/pages/PersonalSpacePage.tsx` 是薄入口。该域只表达个人空间和主流程导航，不做团队空间强切换、企业组织管理、Project Memory 写入、ChangeSet 状态写入、ProgressEvent 写入、ReleaseValidationRun 写入、FeedbackIngest 写入或发布执行。
 - `frontend/src/features/project-launch/types.ts`、`mockData.ts`、`useProjectLaunchState.ts` 是新项目启动台状态层；默认真实模式通过 `frontend/src/api/pmflowLaunch.ts` 生成草案并确认创建真实项目，API 失败进入明确失败态，不静默 fallback 成 mock 成功；`mockData.ts` 仅在显式 `?demo=1` 或 `?dataSource=demo` 下作为演示状态机使用。`components/LaunchShell.tsx` 负责桌面/移动分流，桌面端复用 `frontend/src/features/personal-space/components/SpaceChrome.tsx` 的空间左侧栏和顶部条，`LaunchCanvases.tsx` 和 `MobileLaunchLayout.tsx` 承接高保真图中的意图输入、AI 工作、人类确认、草案修改、生成失败、创建成功过渡与移动端 bottom sheet 交互。
 - `frontend/src/features/account-settings/AccountSettingsPanel.tsx` 是 `/me` 设置页实现：桌面端为个人资料摘要 + 分区设置面板，移动端为分组列表 + `MobileBottomSheet` 编辑；当前覆盖个人资料、默认语言、AI 回答深度、证据展示偏好、待确认、执行回写、发布门禁和失败提醒通知偏好，并在通知偏好区展示页面内提醒消费说明。`frontend/src/api/accountSettings.ts` 是前端合同层；有 token 时优先调用 `backend/app/api/account_settings_api/`，失败时回落浏览器本机暂存；P2 新增 `shouldShowAccountNotification` 与 `getAccountNotificationConsumption`，将四类通知偏好映射为本地 UI 的待确认、Execution Bridge、Release/Growth 和失败提醒显示/静默状态；P3 新增 `getReleaseGateNotificationPreference(settings, event)`，把 Release/Growth 的 `release_gate_* / release_validation_*` 事件映射到 `releaseGate` 偏好，把 `failed_event` 映射到 `failureAlert` 偏好；P5/P6 的 `getPostReleaseNotificationPreference(settings, event)` 把发布后 `feedback_received / revenue_signal / compliance_blocked` 映射到 `releaseGate` 偏好，把 `iteration_recommendation / next_change_review` 映射到 `pendingConfirmation` 偏好和 `change_review` surface，并返回 `spaceReadable / evidencePolicy / reminderPolicy` 供 Main Flow 与 Space 消费。该合同只控制页面内提醒表达，不代表邮件、桌面推送或系统通知中心已接入；偏好关闭也不得隐藏业务证据、recommendation 或 ChangeSet。`backend/app/schemas/account_settings.py` 定义账号偏好合同，`backend/app/services/account_settings_service.py` 当前复用既有 `integrations` 表按 `tenant_id + user_id` 保存 `account_settings_preferences` 配置包，`backend/app/api/router.py` 已挂载该 API；未改用户表、OAuth/JWT/auth core 或 PMFlow OS truth store。
 - `frontend/src/features/pmflow-os/store.tsx` 当前是 PMFlow OS 共享 truth store：`?projectId=<id>` 时通过 React Query 调用 `frontend/src/api/pmflowOs.ts` 读取真实 `GET /pmflow-os/projects/{project_id}/truth-state` 与 `GET /pmflow-os/projects/{project_id}/execution-summary`，真实模式下项目内 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet commit、Execution Handoff create/consume、execution progress writeback、release validation run create、release feedback ingest、单条 iteration recommendation -> ChangeSet draft 与同组 iteration recommendation 批量 -> ChangeSet draft 均调用 `/pmflow-os` 后端并 refetch；只有显式 `?demo=1` 或 `?dataSource=demo` 时才启用本地 mock 演示状态机。真实读取/动作失败会进入错误/空态，不静默 fallback 成 mock 成功。
@@ -203,7 +205,7 @@
 - `frontend/src/features/account-settings/AccountSettingsPanel.tsx` 是 `/me` 设置页实现：桌面端为个人资料摘要 + 分区设置面板，移动端为分组列表 + `MobileBottomSheet` 编辑；当前覆盖个人资料、默认语言、AI 回答深度、证据展示偏好、待确认、执行回写、发布门禁和失败提醒通知偏好，并在通知偏好区展示页面内提醒消费说明、提醒强度和证据展示配置。`frontend/src/api/accountSettings.ts` 是前端合同层；有 token 时优先调用 `backend/app/api/account_settings_api/`，失败时回落浏览器本机暂存；P2 新增 `shouldShowAccountNotification` 与 `getAccountNotificationConsumption`，将四类通知偏好映射为本地 UI 的待确认、Execution Bridge、Release/Growth 和失败提醒显示/静默状态；P3 新增 `getReleaseGateNotificationPreference(settings, event)`，把 Release/Growth 的 `release_gate_* / release_validation_*` 事件映射到 `releaseGate` 偏好，把 `failed_event` 映射到 `failureAlert` 偏好；P5/P6 的 `getPostReleaseNotificationPreference(settings, event)` 把发布后 `feedback_received / revenue_signal / compliance_blocked` 映射到 `releaseGate` 偏好，把 `iteration_recommendation / next_change_review` 映射到 `pendingConfirmation` 偏好和 `change_review` surface，并返回 `spaceReadable / evidencePolicy / reminderPolicy` 供 Main Flow 与 Space 消费；P7 将通知偏好扩展为 `reminderIntensity=silent|normal|prominent` 与 `evidenceDisplay=compact|expanded`，并新增 `getAccountReminderConsumption(settings, event)` 覆盖 `change_review_high_risk / iteration_draft_ready / release_blocked / execution_stalled`，输出 `notificationTransport=in_app_only / evidencePolicy=preserve_business_evidence / auditPolicy=preserve_audit_state`。该合同只控制页面内提醒表达，不代表邮件、桌面推送或系统通知中心已接入；偏好关闭也不得隐藏业务证据、recommendation、ChangeSet、执行状态或审计状态。`backend/app/schemas/account_settings.py` 定义账号偏好合同，`backend/app/services/account_settings_service.py` 当前复用既有 `integrations` 表按 `tenant_id + user_id` 保存 `account_settings_preferences` 配置包，`backend/app/api/router.py` 已挂载该 API；未改用户表、OAuth/JWT/auth core 或 PMFlow OS truth store。
 - `frontend/src/features/pmflow-os/store.tsx` 当前是 PMFlow OS 共享 truth store：`?projectId=<id>` 时通过 React Query 调用 `frontend/src/api/pmflowOs.ts` 读取真实 `GET /pmflow-os/projects/{project_id}/truth-state` 与 `GET /pmflow-os/projects/{project_id}/execution-summary`，真实模式下项目内 message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet commit、Execution Handoff create/consume、execution progress writeback、release validation run create、release feedback ingest 与 iteration recommendation -> ChangeSet draft 均调用 `/pmflow-os` 后端并 refetch；只有显式 `?demo=1` 或 `?dataSource=demo` 时才启用本地 mock 演示状态机。真实读取/动作失败会进入错误/空态，不静默 fallback 成 mock 成功。
 - `frontend/src/features/pmflow-os/store.tsx` 仍保留演示用项目内 AI 结构化闭环状态机：`command_idle / ai_extracting / extraction_ready / review_open / writeback_success`。`frontend/src/features/pmflow-os/pages/StructuredExtractionPage.tsx` 是本轮结构化提取页，`ChangeReviewPage.tsx` 是决策与待确认中心，`MemoryWritebackResultPage.tsx` 是项目记忆写入结果页，`WorkGraphPage.tsx` 是项目工作台关系总览与对象投影视图，`ExecutionBridgePage.tsx` 是执行桥上下文包、交接按钮、运行端领取确认、PR/测试与回写状态页；`ReleaseGrowthPage.tsx` 真实模式读取 `execution-summary.releaseGate`、`latestValidationRun` 与 `releaseSignals`，从 branch、commit、PR、test、failed evidence 展示 `可发布 / 阻塞 / 需要人工确认 / 缺少证据` 判断、阻塞原因、下一步动作、发布验证记录和发布后 feedback/revenue/recommendation 信号，缺少发布后信号时显示 empty/warning，不执行发布命令、不展示 mock 发布结果；页面可把真实 recommendation 生成下一轮待确认 ChangeSet draft，生成后仍进入 Change Review accept/edit/defer，不自动 commit、不写 Project Memory、不创建正式任务；同时读取 Account notification preference helper，用 `releaseGate` 偏好控制发布门禁强调提醒，用 `failureAlert` 偏好控制失败强调提醒，偏好关闭时只静默提醒表达强度，不隐藏 release evidence、阻塞原因、审计状态、validation run 或 releaseSignals；静态发布/增长原型只保留在显式 demo 模式。A3 已接入后端 truth-state，C1 已接入真实 message/extraction/review 状态机，C2 已接入真实 ChangeSet commit，Phase D 已接入真实 execution-summary/dev-sync，D.2 已接入 `POST /execution-handoffs` 创建 PromptPackage + handoff_created progress event，P1 已接入 `POST /execution-handoffs/{prompt_package_id}/consume` 创建 handoff_consumed progress event 并把 execution status 投影为 coding，Release Growth P1 已接入 execution evidence gate，Release Validation P1 已接入 `POST /release-validation-runs` 创建 `ReleaseValidationRun` 快照，Release Feedback P1 已接入 `POST /release-feedback-ingests` 写入 `FeedbackIngest` 并生成 `IterationRecommendation`，Iteration Loop P1 已接入 `POST /iteration-recommendations/{recommendation_id}/change-set-drafts` 把 recommendation 回流到 Change Review；当前仍不调用真实 AI 提取，不把 mock 当真实失败 fallback。`ProjectMemoryPage.tsx` 在真实模式下展示后端 `truth_nodes + semantic_facts` 的 `projectMemory` 投影，accepted/edited ChangeItem 只有 commit 成功后才进入 Project Memory。`frontend/src/features/pmflow-os/components/ProjectStructuredLoop.tsx` 提供 `StatusLabel / EvidenceSnippet / ObjectChangeCard / ProjectConversationPanel / StructuredExtractionPanel / ProjectAICopilotPanel` 等闭环组件，并复用契约化 `InlineNotice` 表达“未确认不得写入”的局部提示。
-- PMFlow OS 后端入口位于 `backend/app/api/pmflow_os_api/`，projection service 位于 `backend/app/services/pmflow_os_projection_service.py`，Change Review / commit 服务位于 `backend/app/services/pmflow_change_review_service.py`，Pydantic 合同位于 `backend/app/schemas/pmflow_os.py`；当前聚合 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync`，`Thread / Message` 来自 `pmflow_threads / pmflow_thread_messages`，`ChangeSet / ChangeItem / Approval / EvidenceLink` 来自 `backend/app/models/pmflow_change_review.py` 对应真实表。C1 已实现 message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`；C2 backend/frontend 已实现 `POST /pmflow-os/change-sets/{change_set_id}/commit` 与真实模式前端接入，默认 atomic，将 `Requirement / Decision / Risk` 写入 `truth_nodes`，将 `Task` 写入 `truth_nodes(node_type='task') + tasks`，高风险项强制 approval gate；D.2 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs`，校验 task/repo project 边界，生成/复用 `PromptPackage(package_kind='execution_handoff')` 并写 `ProgressEvent(event_type='handoff_created')` 起点；P1 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs/{prompt_package_id}/consume`，校验 execution handoff package 后更新 `PromptPackage.package_payload.latest_handoff.handoff_state=consumed` 并写 `ProgressEvent(event_type='handoff_consumed', derived_task_status='coding')`；Release Growth P1 在 `ExecutionSummaryProjection.releaseGate` 中从 `ProgressEvent` 推导发布门禁状态，失败事件 fail-closed 阻塞发布，无证据返回 empty/warning；Release Validation P1 新增 `POST /pmflow-os/projects/{project_id}/release-validation-runs`，复用现有 `ReleaseValidationRun` 模型固化当前 `releaseGate` 快照、人工决策、证据、阻塞原因和下一步动作，并在 `releaseGate.latestValidationRun` 返回最新记录；Release Feedback P1 新增 `POST /pmflow-os/projects/{project_id}/release-feedback-ingests`，复用现有 `FeedbackIngest / IterationRecommendation`，在 `ExecutionSummaryProjection.releaseSignals` 中返回真实发布后 feedback、revenue event 和 iteration recommendation 读模型；Iteration Loop P1 新增 `POST /pmflow-os/projects/{project_id}/iteration-recommendations/{recommendation_id}/change-set-drafts`，把真实 recommendation 转为 open ChangeSet、pending_review Requirement/Task/Risk/Decision items 与 `iteration_recommendation` evidence，重复调用复用既有 draft 并在 `releaseSignals` 标记 `changeSetCreated/changeSetId`；这些步骤都不直接执行本机命令、真实发布命令、外部支付、真实推送、自动 Project Memory commit 或正式任务创建；`ModelDecision / MetricSignal` 在 C2 V1 仍 fail-closed。
+- PMFlow OS 后端入口位于 `backend/app/api/pmflow_os_api/`，projection service 位于 `backend/app/services/pmflow_os_projection_service.py`，Change Review / commit 服务位于 `backend/app/services/pmflow_change_review_service.py`，Pydantic 合同位于 `backend/app/schemas/pmflow_os.py`；当前聚合 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync`，`Thread / Message` 来自 `pmflow_threads / pmflow_thread_messages`，`ChangeSet / ChangeItem / Approval / EvidenceLink` 来自 `backend/app/models/pmflow_change_review.py` 对应真实表。`ProjectTruthState.reviewerRouting` 是 Team layer 的 reviewer routing 读模型：从 open/pending ChangeSet、待审 item 风险、跨对象类型、`iteration_recommendation` evidence、项目成员与 `OWNER / REVIEWER` 角色推导 `{status, warningCode, summary, items}`；item 内含 `sourceType / riskLevel / priority / suggestedReviewer / fallbackReviewerRole / targetUrl`；缺成员、缺角色或缺证据时 fail-closed 给 warning，不虚构 reviewer，不写 approval，不自动 assign。C1 已实现 message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`；C2 backend/frontend 已实现 `POST /pmflow-os/change-sets/{change_set_id}/commit` 与真实模式前端接入，默认 atomic，将 `Requirement / Decision / Risk` 写入 `truth_nodes`，将 `Task` 写入 `truth_nodes(node_type='task') + tasks`，高风险项强制 approval gate；D.2 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs`，校验 task/repo project 边界，生成/复用 `PromptPackage(package_kind='execution_handoff')` 并写 `ProgressEvent(event_type='handoff_created')` 起点；P1 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs/{prompt_package_id}/consume`，校验 execution handoff package 后更新 `PromptPackage.package_payload.latest_handoff.handoff_state=consumed` 并写 `ProgressEvent(event_type='handoff_consumed', derived_task_status='coding')`；Release Growth P1 在 `ExecutionSummaryProjection.releaseGate` 中从 `ProgressEvent` 推导发布门禁状态，失败事件 fail-closed 阻塞发布，无证据返回 empty/warning；Release Validation P1 新增 `POST /pmflow-os/projects/{project_id}/release-validation-runs`，复用现有 `ReleaseValidationRun` 模型固化当前 `releaseGate` 快照、人工决策、证据、阻塞原因和下一步动作，并在 `releaseGate.latestValidationRun` 返回最新记录；Release Feedback P1 新增 `POST /pmflow-os/projects/{project_id}/release-feedback-ingests`，复用现有 `FeedbackIngest / IterationRecommendation`，在 `ExecutionSummaryProjection.releaseSignals` 中返回真实发布后 feedback、revenue event 和 iteration recommendation 读模型；Iteration Loop P1 新增 `POST /pmflow-os/projects/{project_id}/iteration-recommendations/{recommendation_id}/change-set-drafts`，把真实 recommendation 转为 open ChangeSet、pending_review Requirement/Task/Risk/Decision items 与 `iteration_recommendation` evidence，重复调用复用既有 draft 并在 `releaseSignals` 标记 `changeSetCreated/changeSetId`；这些步骤都不直接执行本机命令、真实发布命令、外部支付、真实推送、自动 Project Memory commit 或正式任务创建；`ModelDecision / MetricSignal` 在 C2 V1 仍 fail-closed。
 - PMFlow Launch 后端 Phase B 创建链位于 `backend/app/api/pmflow_launch_api/`、`backend/app/services/pmflow_launch_service.py`、`backend/app/schemas/pmflow_launch.py` 与 `backend/app/models/pmflow_launch.py`；`POST /pmflow-launch/drafts` 只写 `pmflow_launch_drafts`，`POST /pmflow-launch/drafts/{draft_id}/confirm` 在同一事务内写 `projects / user_projects / pmflow_threads / pmflow_thread_messages / truth_nodes / tasks / semantic_facts seed / operation_logs`，并把 `launch_draft_id / thread_id / thread_message_id` 写入正式对象 metadata。
 - `frontend/src/features/pmflow-os/components/ChangeReviewGroup.tsx`、`WorkbenchPanel.tsx`、`ExecutionBridgeCards.tsx`、`PMFlowOsFrame.tsx`、`AccountControls.tsx`、`FeedbackPrimitives.tsx` 是高保真原型新增的行为组件层：分别承载变更 diff 审查块、工作台对象卡组、执行桥上下文/日志卡片、全局上下文条与 AI 副驾、账号菜单/退出登录确认交互，以及 `PageBanner / InlineNotice / HumanDecisionBar / ConfirmDialog / MobileBottomSheet` 这组提示、提醒、确认与移动端 bottom sheet 基础组件，避免再把这些业务片段内联塞回 `pages/`。
 - `frontend/vite.config.ts` 现补了固定 vendor chunk 分组（`framework / state-query / ui-radix / icons / charts / markdown`）与业务 chunk 分组（`ai-steward / sstc / governance`），目标是让登录页与基础导航不再背 AI Steward、SSTC、治理页和图表代码。

docs/architecture/CODE_REFERENCE_INDEX.md

@@ -90,6 +90,7 @@
 - SSTC 任务更新接口：参考 `PATCH /projects/{project_id}/tasks/{task_id}`
 - SSTC 发布创建接口：参考 `POST /projects/{project_id}/releases`
 - PMFlow OS 真实读路径、C1 Change Review API、C2 backend commit、Execution Handoff、Release Evidence Gate、Release Validation Run、Release Feedback Signal 与 Iteration Loop draft：参考 `backend/app/api/pmflow_os_api/`、`backend/app/services/pmflow_os_projection_service.py`、`backend/app/services/pmflow_change_review_service.py`、`backend/app/schemas/pmflow_os.py`；只读提供 `GET /pmflow-os/projects/{project_id}/truth-state` 与 `GET /pmflow-os/projects/{project_id}/execution-summary`，复用 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync`，并读取 `pmflow_threads / pmflow_thread_messages / pmflow_change_sets / pmflow_change_items / pmflow_approvals / pmflow_evidence_links`；C1 写 API 包括 thread message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`；C2 backend 已实现 `POST /pmflow-os/change-sets/{change_set_id}/commit`，默认 `mode=atomic`，将 `Requirement / Decision / Risk` 写入 `truth_nodes`，将 `Task` 写入 `truth_nodes(node_type='task') + tasks`，高风险项强制 approval gate；D.2 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs`，对已确认任务生成/复用 `PromptPackage` 并创建 `ProgressEvent(event_type='handoff_created')` 起点；P1 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs/{prompt_package_id}/consume`，记录运行端领取、更新 `PromptPackage.package_payload.latest_handoff.handoff_state=consumed` 并创建 `ProgressEvent(event_type='handoff_consumed', derived_task_status='coding')`；Release Growth P1 已在 `execution-summary.releaseGate` 中从 branch / commit / PR / test_passed / checks_passed / failed / blocked 等 `ProgressEvent` 推导 `ready / blocked / needs_confirmation / empty`；Release Validation P1 新增 `POST /pmflow-os/projects/{project_id}/release-validation-runs`，从当前 `releaseGate` 固化 `ReleaseValidationRun` 快照并在 `releaseGate.latestValidationRun` 返回最新记录，无 evidence 时返回 `release_validation_evidence_empty`；Release Feedback P1 新增 `POST /pmflow-os/projects/{project_id}/release-feedback-ingests`，复用 `FeedbackIngest / IterationRecommendation` 写入真实发布后反馈，并在 `execution-summary.releaseSignals` 投影真实 `feedback / revenueEvents / recommendations` 与 release gate / validation run 关系；Iteration Loop P1 新增 `POST /pmflow-os/projects/{project_id}/iteration-recommendations/{recommendation_id}/change-set-drafts`，把真实 `IterationRecommendation` 转为 open ChangeSet、pending_review Requirement/Task/Risk/Decision items 与 iteration evidence，重复调用复用既有 draft；Iteration Loop P2 新增 `POST /pmflow-os/projects/{project_id}/iteration-recommendation-groups/{group_key}/change-set-drafts`，并在 `execution-summary.releaseSignals.recommendations` 补 `groupKey / duplicateOf / mergedCount / impactLevel / riskLevel / suggestedChangeTypes / reviewPriority`，在 `recommendationGroups` 聚合同组建议，支持同组 recommendation 批量生成一个可复用 ChangeSet draft 与 `iteration_recommendation_group` evidence；这些步骤均不执行发布命令、外部支付、真实推送、自动 Project Memory commit 或正式 Task 创建
+- PMFlow OS 真实读路径、C1 Change Review API、C2 backend commit、Execution Handoff、Release Evidence Gate、Release Validation Run、Release Feedback Signal、Iteration Loop draft 与 Team reviewer routing：参考 `backend/app/api/pmflow_os_api/`、`backend/app/services/pmflow_os_projection_service.py`、`backend/app/services/pmflow_change_review_service.py`、`backend/app/schemas/pmflow_os.py`；只读提供 `GET /pmflow-os/projects/{project_id}/truth-state` 与 `GET /pmflow-os/projects/{project_id}/execution-summary`，复用 `truth_nodes / tasks / semantic_facts / ai_project_control / dev_sync`，并读取 `pmflow_threads / pmflow_thread_messages / pmflow_change_sets / pmflow_change_items / pmflow_approvals / pmflow_evidence_links`；`truth-state.reviewerRouting` 是 `{status, warningCode, summary, items}` 读模型，会从 open/pending ChangeSet、待审 item 风险、跨对象类型、evidence source、项目成员与 `OWNER / REVIEWER` 角色生成 `sourceType / riskLevel / priority / suggestedReviewer / fallbackReviewerRole / targetUrl`，只读展示，不写 approval、不自动 assign reviewer；C1 写 API 包括 thread message、`proposed_items` extraction、ChangeSet detail、ChangeItem `accept/edit/defer`；C2 backend 已实现 `POST /pmflow-os/change-sets/{change_set_id}/commit`，默认 `mode=atomic`，将 `Requirement / Decision / Risk` 写入 `truth_nodes`，将 `Task` 写入 `truth_nodes(node_type='task') + tasks`，高风险项强制 approval gate；D.2 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs`，对已确认任务生成/复用 `PromptPackage` 并创建 `ProgressEvent(event_type='handoff_created')` 起点；P1 已实现 `POST /pmflow-os/projects/{project_id}/execution-handoffs/{prompt_package_id}/consume`，记录运行端领取、更新 `PromptPackage.package_payload.latest_handoff.handoff_state=consumed` 并创建 `ProgressEvent(event_type='handoff_consumed', derived_task_status='coding')`；Release Growth P1 已在 `execution-summary.releaseGate` 中从 branch / commit / PR / test_passed / checks_passed / failed / blocked 等 `ProgressEvent` 推导 `ready / blocked / needs_confirmation / empty`；Release Validation P1 新增 `POST /pmflow-os/projects/{project_id}/release-validation-runs`，从当前 `releaseGate` 固化 `ReleaseValidationRun` 快照并在 `releaseGate.latestValidationRun` 返回最新记录，无 evidence 时返回 `release_validation_evidence_empty`；Release Feedback P1 新增 `POST /pmflow-os/projects/{project_id}/release-feedback-ingests`，复用 `FeedbackIngest / IterationRecommendation` 写入真实发布后反馈，并在 `execution-summary.releaseSignals` 投影真实 `feedback / revenueEvents / recommendations` 与 release gate / validation run 关系；Iteration Loop P1 新增 `POST /pmflow-os/projects/{project_id}/iteration-recommendations/{recommendation_id}/change-set-drafts`，把真实 `IterationRecommendation` 转为 open ChangeSet、pending_review Requirement/Task/Risk/Decision items 与 iteration evidence，重复调用复用既有 draft；这些步骤均不执行发布命令、外部支付、真实推送或自动 Project Memory commit
 - Project Launch 真实创建链：参考 `backend/app/api/pmflow_launch_api/`、`backend/app/services/pmflow_launch_service.py`、`backend/app/schemas/pmflow_launch.py` 与模型 `backend/app/models/pmflow_launch.py`；接口为 `POST /pmflow-launch/drafts` 与 `POST /pmflow-launch/drafts/{draft_id}/confirm`，draft 只写 `pmflow_launch_drafts`，confirm 在同一事务内创建 `projects / user_projects / pmflow_threads / pmflow_thread_messages / truth_nodes / tasks / semantic_facts seed / operation_logs`
 - PMFlow Change Review 模型与 migration：参考 `backend/app/models/pmflow_change_review.py` 与 `backend/alembic/versions/20260426_add_pmflow_change_review_tables.py`；只包含 `pmflow_change_sets / pmflow_change_items / pmflow_approvals / pmflow_evidence_links`，本阶段不得新增或依赖 `/commit`
 
@@ -113,7 +114,7 @@
 - PMFlow OS 产品页入口：参考 `frontend/src/features/pmflow-os/pages/CommandCenterPage.tsx`、`StructuredExtractionPage.tsx`、`ChangeReviewPage.tsx`、`MemoryWritebackResultPage.tsx`、`WorkGraphPage.tsx`、`ExecutionBridgePage.tsx`、`ReleaseGrowthPage.tsx`、`TeamLayerPage.tsx`、`ProjectMemoryPage.tsx`、`AccountPage.tsx`；`ReleaseGrowthPage.tsx` 真实模式展示 `execution-summary.releaseGate`、execution evidence、阻塞原因、下一步动作、`latestValidationRun` 和 `releaseSignals`，缺证据或缺发布后信号时显示 empty/warning，不展示 mock 发布结果；页面可调用真实 API 创建 release validation run、摄取 release feedback，从真实 recommendation 生成下一轮待确认 ChangeSet draft，并按 `recommendationGroups` 批量生成同组下一轮 ChangeSet draft；`ChangeReviewPage.tsx` 会解释来自 `iteration_recommendation_group` evidence 的组、反馈、风险、影响和审查优先级；生成后仍进入 Change Review accept/edit/defer，不自动 commit、不写 Project Memory、不执行部署命令、不接外部支付；同时消费 Account notification preference helper，`releaseGate` 关闭时静默发布门禁强调提醒，`failureAlert` 关闭时静默失败强调提醒，所有真实证据和审计状态仍可见；静态高保真发布/增长数据仅保留在显式 demo 模式
 - Account Settings / `/me` 前端产品域与 P1-P7 偏好合同：参考 `frontend/src/features/account-settings/AccountSettingsPanel.tsx`、`frontend/src/features/pmflow-os/pages/AccountPage.tsx`、`frontend/src/api/accountSettings.ts`、`backend/app/api/account_settings_api/`、`backend/app/schemas/account_settings.py` 与 `backend/app/services/account_settings_service.py`；当前覆盖个人资料、默认语言、AI 回答深度、证据展示偏好、待确认、执行回写、发布门禁和失败提醒通知偏好，移动端使用分组列表与 bottom sheet，账户退出仍复用 `AccountControls.tsx`，不改 OAuth/JWT/auth core；P1 后端合同提供 `GET /account-settings/me` 与 `PUT /account-settings/me`，已由 `backend/app/api/router.py` 挂入核心路由组，按当前 `tenant_id + user_id` 保存账号偏好，前端有 token 时优先账号同步，后端不可用时明确回落 `仅本机暂存 / 保存失败`；P2 在 `frontend/src/api/accountSettings.ts` 提供 `shouldShowAccountNotification` 与 `getAccountNotificationConsumption`，把通知偏好映射为页面内提醒消费模型；P3 新增 `getReleaseGateNotificationPreference(settings, event)` 供 Release/Growth 后续消费：`release_gate_*` 与 `release_validation_*` 使用 `releaseGate` 偏好，`failed_event` 使用 `failureAlert` 偏好；P5/P6 的 `getPostReleaseNotificationPreference(settings, event)` 供发布后反馈与下一轮待确认消费：`feedback_received / revenue_signal / compliance_blocked` 使用 `releaseGate` 偏好，`iteration_recommendation / next_change_review` 使用 `pendingConfirmation` 偏好并落到 `change_review` surface；P7 将每类通知偏好扩展为 `reminderIntensity=silent|normal|prominent` 与 `evidenceDisplay=compact|expanded`，并新增 `getAccountReminderConsumption(settings, event)` 覆盖 `change_review_high_risk / iteration_draft_ready / release_blocked / execution_stalled`，稳定返回 `notificationTransport=in_app_only / evidencePolicy=preserve_business_evidence / auditPolicy=preserve_audit_state`；ReleaseGrowthPage 当前消费 `releaseGate` 与 `failureAlert` 两个偏好，只静默强调型提醒，不隐藏 release evidence、阻塞原因、审计状态、validation run、releaseSignals 或下一轮 ChangeSet draft；这些 helper 只控制本地 UI 提醒消费合同，不代表真实邮件、桌面推送或系统通知中心已接入
 - PMFlow OS 共享 truth store 与主链状态动作：参考 `frontend/src/features/pmflow-os/store.tsx`；当前支持 `?projectId=<id>` 走 React Query 读取真实 `truth-state` 与 `execution-summary`，真实模式下 thread message、`proposed_items` extraction、ChangeItem `accept/edit/defer`、ChangeSet commit、Execution Handoff create/consume、execution progress writeback、release validation run create、release feedback ingest 与 iteration recommendation -> ChangeSet draft 均调后端并 refetch，不本地 promote 入 Project Memory、不伪造 execution event、发布验证记录、发布后信号或下一轮 draft；`?demo=1` 才启用本地 mock 演示状态机和本地动作；项目内 AI 结构化闭环状态机为 `command_idle / ai_extracting / extraction_ready / review_open / writeback_success`
-- PMFlow OS 产品页入口：参考 `frontend/src/features/pmflow-os/pages/CommandCenterPage.tsx`、`StructuredExtractionPage.tsx`、`ChangeReviewPage.tsx`、`MemoryWritebackResultPage.tsx`、`WorkGraphPage.tsx`、`ExecutionBridgePage.tsx`、`ReleaseGrowthPage.tsx`、`TeamLayerPage.tsx`、`ProjectMemoryPage.tsx`、`AccountPage.tsx`；`ReleaseGrowthPage.tsx` 真实模式展示 `execution-summary.releaseGate`、execution evidence、阻塞原因、下一步动作、`latestValidationRun` 和 `releaseSignals`，缺证据或缺发布后信号时显示 empty/warning，不展示 mock 发布结果；页面可调用真实 API 创建 release validation run、摄取 release feedback，并从真实 recommendation 生成下一轮待确认 ChangeSet draft，生成后仍进入 Change Review accept/edit/defer，不自动 commit、不写 Project Memory、不执行部署命令、不接外部支付；同时消费 Account notification preference helper，`releaseGate` 关闭时静默发布门禁强调提醒，`failureAlert` 关闭时静默失败强调提醒，所有真实证据和审计状态仍可见；静态高保真发布/增长数据仅保留在显式 demo 模式
+- PMFlow OS 产品页入口：参考 `frontend/src/features/pmflow-os/pages/CommandCenterPage.tsx`、`StructuredExtractionPage.tsx`、`ChangeReviewPage.tsx`、`MemoryWritebackResultPage.tsx`、`WorkGraphPage.tsx`、`ExecutionBridgePage.tsx`、`ReleaseGrowthPage.tsx`、`TeamLayerPage.tsx`、`ProjectMemoryPage.tsx`、`AccountPage.tsx`；`TeamLayerPage.tsx` 真实模式读取 `state.reviewerRouting` 展示 ready/empty/warning、待审 ChangeSet、来源（下一轮迭代 / AI 提取 / 手动）、风险等级、建议审查人或 fallback role、审查原因、待审 item 数、证据数，并只跳转 `/change-review?projectId=<id>&changeSetId=<id>`，不自动分派 reviewer；`ReleaseGrowthPage.tsx` 真实模式展示 `execution-summary.releaseGate`、execution evidence、阻塞原因、下一步动作、`latestValidationRun` 和 `releaseSignals`，缺证据或缺发布后信号时显示 empty/warning，不展示 mock 发布结果；页面可调用真实 API 创建 release validation run、摄取 release feedback，并从真实 recommendation 生成下一轮待确认 ChangeSet draft，生成后仍进入 Change Review accept/edit/defer，不自动 commit、不写 Project Memory、不执行部署命令、不接外部支付；同时消费 Account notification preference helper，`releaseGate` 关闭时静默发布门禁强调提醒，`failureAlert` 关闭时静默失败强调提醒，所有真实证据和审计状态仍可见；静态高保真发布/增长数据仅保留在显式 demo 模式
 - PMFlow OS 行为组件：参考 `frontend/src/features/pmflow-os/components/ProjectStructuredLoop.tsx`、`ProjectStageRail.tsx`、`ThreadComposer.tsx`、`ExtractionRail.tsx`、`ChangeGroupPanel.tsx`、`ObjectGraphSection.tsx`、`ContextPacketPanel.tsx`、`ExecutionTimeline.tsx`、`ReleaseGatePanel.tsx`、`TeamFeedPanel.tsx`、`ChangeReviewGroup.tsx`、`WorkbenchPanel.tsx`、`ExecutionBridgeCards.tsx`、`PMFlowOsFrame.tsx`、`AccountControls.tsx`、`FeedbackPrimitives.tsx`、`MobileBottomNav.tsx`；其中 `ProjectStructuredLoop.tsx` 承接 `StatusLabel / EvidenceSnippet / ObjectChangeCard / ProjectConversationPanel / StructuredExtractionPanel / ProjectAICopilotPanel`，`PMFlowOsFrame.tsx` 承接项目内面包屑和项目切换器，`AccountControls.tsx` 承接桌面头像菜单、退出登录确认与移动端 bottom sheet，`FeedbackPrimitives.tsx` 承接 `PageBanner / InlineNotice / HumanDecisionBar / ConfirmDialog / MobileBottomSheet`，`MobileBottomNav.tsx` 承接正式应用壳移动端固定底部导航
 - PMFlow OS 原型状态回归测试：参考 `frontend/src/features/pmflow-os/store.test.ts`；真实 API 动作回归参考 `frontend/src/features/pmflow-os/store.api.test.tsx`
 - Project Launch 真实/演示分支回归测试：参考 `frontend/src/features/project-launch/useProjectLaunchState.test.ts`

frontend/src/api/pmflowOs.ts

@@ -1,4 +1,5 @@
 import type { ChangeItem, PMFlowExecutionContext, PMFlowRiskLevel, ProjectTruthState } from "@/features/pmflow-os/types";
+export type { PMFlowReviewerRouting, PMFlowReviewerRoutingItem, PMFlowReviewerSuggestion } from "@/features/pmflow-os/types";
 
 type ApiEnvelope<T> = { code: number; message: string; data: T };
 const API_BASE = "/api";

frontend/src/features/pmflow-os/pages/TeamLayerPage.tsx

@@ -17,6 +17,9 @@ import {
   TrendingUp,
   X,
 } from "lucide-react";
+import { useNavigate } from "react-router-dom";
+import { usePMFlowOsStore } from "@/features/pmflow-os/store";
+import type { PMFlowReviewerRouting, PMFlowReviewerRoutingItem, PMFlowRiskLevel } from "@/features/pmflow-os/types";
 import { cn } from "@/lib/utils";
 
 const activityItems = [
@@ -49,10 +52,26 @@ const agentCards = [
 ] as const;
 
 export default function TeamLayerPage() {
+  const navigate = useNavigate();
+  const { state, openReview, projectionWarnings } = usePMFlowOsStore();
+  const reviewerRouting = state.reviewerRouting || emptyReviewerRouting();
+  const pendingReviewCount = state.changeItems.filter((item) => item.status === "pending_review").length;
+  const reviewerWarnings = projectionWarnings.filter((warning) => warning.includes("reviewer_routing_warning"));
+  const handleOpenReview = (item: PMFlowReviewerRoutingItem) => {
+    openReview(item.changeSetId);
+    navigate(item.targetUrl || `/change-review?projectId=${item.projectId}&changeSetId=${item.changeSetId}`);
+  };
+
   return (
     <div className="min-h-full bg-white pb-6 text-slate-950">
       <div className="flex flex-col gap-4 min-[1440px]:flex-row min-[1440px]:items-start">
         <main className="min-w-0 flex-1 space-y-4">
+          <ReviewerRoutingPanel
+            pendingReviewCount={pendingReviewCount}
+            routings={reviewerRouting}
+            warnings={reviewerWarnings}
+            onOpenReview={handleOpenReview}
+          />
           <div className="grid gap-4 lg:grid-cols-3">
             <TeamActivityPanel />
             <DecisionPanel />
@@ -68,6 +87,120 @@ export default function TeamLayerPage() {
   );
 }
 
+function ReviewerRoutingPanel({
+  pendingReviewCount,
+  routings,
+  warnings,
+  onOpenReview,
+}: {
+  pendingReviewCount: number;
+  routings: PMFlowReviewerRouting;
+  warnings: string[];
+  onOpenReview: (item: PMFlowReviewerRoutingItem) => void;
+}) {
+  const visibleRoutings = routings.items.slice(0, 3);
+  return (
+    <Panel>
+      <div className="flex flex-col gap-3 lg:flex-row lg:items-start lg:justify-between">
+        <div>
+          <div className="flex items-center gap-2 text-xs font-semibold uppercase tracking-[0.18em] text-[#2463EB]">
+            <ShieldAlert className="h-4 w-4" />
+            审查路由
+          </div>
+          <h2 className="mt-2 text-xl font-semibold text-slate-800">待审 ChangeSet 审查路由</h2>
+          <p className="mt-2 max-w-3xl text-sm leading-6 text-slate-500">
+            基于项目成员角色、待审变更风险和跨对象影响生成建议审查人；这里只展示建议，不自动分派审查人。
+          </p>
+        </div>
+        <div className="grid grid-cols-2 gap-2 text-sm sm:grid-cols-3">
+          <MetricPill label="待审变更" value={String(pendingReviewCount)} />
+          <MetricPill label="高风险" value={String(routings.summary.highRiskCount)} />
+          <MetricPill label="缺审查人" value={String(routings.summary.missingReviewerCount)} />
+        </div>
+      </div>
+      {routings.status === "warning" ? (
+        <div className="mt-4 rounded-xl border border-orange-200 bg-orange-50 px-4 py-3 text-sm leading-6 text-orange-700">
+          {reviewerRoutingWarningText(routings.warningCode, warnings)}
+        </div>
+      ) : null}
+      {visibleRoutings.length > 0 ? (
+        <div className="mt-5 grid gap-4 xl:grid-cols-3">
+          {visibleRoutings.map((routing) => (
+            <article key={routing.changeSetId} className="rounded-xl border border-[#e2e9f5] bg-[#fbfdff] p-4">
+              <div className="flex items-start justify-between gap-3">
+                <div className="min-w-0">
+                  <div className="flex flex-wrap items-center gap-2">
+                    <span className={cn("rounded-lg px-2 py-1 text-xs font-semibold", riskTone(routing.riskLevel))}>
+                      {riskLabel(routing.riskLevel)}
+                    </span>
+                    <span className="rounded-lg bg-[#eef4ff] px-2 py-1 text-xs font-semibold text-[#2463EB]">
+                      {sourceLabel(routing.sourceType)}
+                    </span>
+                    <span className="rounded-lg bg-slate-100 px-2 py-1 text-xs font-semibold text-slate-600">
+                      {priorityLabel(routing.priority)}
+                    </span>
+                  </div>
+                  <h3 className="mt-3 text-base font-semibold text-slate-800">{routing.changeSetTitle}</h3>
+                  <p className="mt-2 text-sm leading-6 text-slate-500">{routing.reviewReason}</p>
+                </div>
+                <button
+                  type="button"
+                  onClick={() => onOpenReview(routing)}
+                  className="inline-flex shrink-0 items-center gap-1 rounded-lg border border-[#cfe0ff] bg-white px-3 py-2 text-sm font-semibold text-[#2463EB] transition hover:border-[#2463EB] hover:bg-[#eef4ff] focus:outline-none focus:ring-2 focus:ring-[#2463EB]/20"
+                >
+                  去审查 <ArrowRight className="h-4 w-4" />
+                </button>
+              </div>
+              <div className="mt-4 flex flex-wrap gap-2">
+                {routing.changeTypes.map((type) => (
+                  <span key={type} className="rounded-lg border border-[#e2e9f5] bg-white px-2 py-1 text-xs font-semibold text-slate-500">
+                    {type}
+                  </span>
+                ))}
+                <span className="rounded-lg border border-[#e2e9f5] bg-white px-2 py-1 text-xs font-semibold text-slate-500">
+                  待审 {routing.pendingItemCount}
+                </span>
+                <span className="rounded-lg border border-[#e2e9f5] bg-white px-2 py-1 text-xs font-semibold text-slate-500">
+                  证据 {routing.evidenceCount}
+                </span>
+              </div>
+              <div className="mt-4 space-y-2">
+                <div className="text-xs font-semibold text-slate-400">建议审查人</div>
+                {routing.suggestedReviewer ? (
+                  <div className="rounded-lg border border-[#e2e9f5] bg-white px-3 py-3">
+                    <div className="flex items-center justify-between gap-3">
+                      <span className="font-semibold text-slate-800">{routing.suggestedReviewer.displayName}</span>
+                      <span className="rounded-md bg-slate-100 px-2 py-1 text-xs font-semibold text-slate-600">{routing.suggestedReviewer.role}</span>
+                    </div>
+                    <p className="mt-2 text-xs leading-5 text-slate-500">{routing.suggestedReviewer.reason}</p>
+                  </div>
+                ) : (
+                  <div className="rounded-lg border border-orange-200 bg-orange-50 px-3 py-3 text-sm leading-6 text-orange-700">
+                    当前项目缺少 REVIEWER/OWNER，建议先补充项目审查人。兜底角色：{routing.fallbackReviewerRole || "OWNER"}
+                  </div>
+                )}
+              </div>
+            </article>
+          ))}
+        </div>
+      ) : (
+        <div className="mt-5 rounded-xl border border-[#e2e9f5] bg-[#fbfdff] px-4 py-5 text-sm leading-6 text-slate-500">
+          {routings.status === "empty" ? "当前没有待团队审查的变更。" : "团队审查路由暂时不可用，请稍后重试。"}
+        </div>
+      )}
+    </Panel>
+  );
+}
+
+function MetricPill({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="rounded-lg border border-[#e2e9f5] bg-[#fbfdff] px-3 py-2">
+      <div className="text-xs font-semibold text-slate-400">{label}</div>
+      <div className="mt-1 text-lg font-semibold text-slate-800">{value}</div>
+    </div>
+  );
+}
+
 function TeamActivityPanel() {
   return (
     <Panel className="overflow-hidden" style={{ height: 640 }}>
@@ -310,3 +443,49 @@ function iconTone(tone: string) {
   if (tone === "warning") return "bg-orange-500";
   return "bg-[#2463EB]";
 }
+
+function riskLabel(level: PMFlowRiskLevel) {
+  if (level === "high") return "高风险";
+  if (level === "medium") return "中风险";
+  return "低风险";
+}
+
+function riskTone(level: PMFlowRiskLevel) {
+  if (level === "high") return "bg-red-50 text-red-600";
+  if (level === "medium") return "bg-orange-50 text-orange-600";
+  return "bg-emerald-50 text-emerald-600";
+}
+
+function sourceLabel(sourceType: PMFlowReviewerRoutingItem["sourceType"]) {
+  if (sourceType === "iteration_recommendation") return "下一轮迭代";
+  if (sourceType === "ai_extraction") return "AI 提取";
+  if (sourceType === "manual") return "手动";
+  return "来源未知";
+}
+
+function priorityLabel(priority: PMFlowReviewerRoutingItem["priority"]) {
+  if (priority === "urgent") return "紧急";
+  if (priority === "elevated") return "需关注";
+  return "常规";
+}
+
+function reviewerRoutingWarningText(code: string | null | undefined, warnings: string[]) {
+  if (code === "reviewer_missing") return "当前项目缺少 REVIEWER/OWNER，建议先补充项目审查人。";
+  if (code === "evidence_missing") return "待审变更缺少足够证据，建议回到 Change Review 查看来源。";
+  if (warnings.length > 0) return "团队审查路由存在 warning，请优先检查 reviewer 和证据。";
+  return "团队审查路由暂时不可用，请稍后重试。";
+}
+
+function emptyReviewerRouting(): PMFlowReviewerRouting {
+  return {
+    status: "empty",
+    warningCode: null,
+    items: [],
+    summary: {
+      totalPendingReview: 0,
+      highRiskCount: 0,
+      missingReviewerCount: 0,
+      iterationDraftCount: 0,
+    },
+  };
+}

frontend/src/features/pmflow-os/store.api.test.tsx

@@ -1,6 +1,7 @@
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { act, cleanup, fireEvent, render, renderHook, screen, waitFor } from "@testing-library/react";
 import type { ReactNode } from "react";
+import { MemoryRouter, useLocation } from "react-router-dom";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import { getAccountSettings } from "@/api/accountSettings";
@@ -23,8 +24,9 @@ import {
   type PMFlowReleaseGate,
 } from "@/api/pmflowOs";
 import { createInitialPMFlowState } from "@/features/pmflow-os/mockData";
+import TeamLayerPage from "@/features/pmflow-os/pages/TeamLayerPage";
 import { PMFlowOsProvider, usePMFlowOsStore } from "@/features/pmflow-os/store";
-import type { ProjectTruthState } from "@/features/pmflow-os/types";
+import type { PMFlowReviewerRouting, ProjectTruthState } from "@/features/pmflow-os/types";
 
 vi.mock("@/lib/utils", () => ({
   cn: (...inputs: Array<string | false | null | undefined>) => inputs.filter(Boolean).join(" "),
@@ -115,9 +117,55 @@ function realState(): ProjectTruthState {
       sourceLabel: "项目线程",
     },
   ];
+  state.reviewerRouting = reviewerRoutingFixture();
   return state;
 }
 
+function reviewerRoutingFixture(): PMFlowReviewerRouting {
+  return {
+    status: "ready",
+    warningCode: null,
+    summary: {
+      totalPendingReview: 1,
+      highRiskCount: 1,
+      missingReviewerCount: 0,
+      iterationDraftCount: 1,
+    },
+    items: [
+      {
+        projectId: "123",
+        changeSetId: "11",
+        changeSetTitle: "真实变更集",
+        changeSetStatus: "open",
+        sourceType: "iteration_recommendation",
+        reviewReason: "包含 high risk 变更，需要 REVIEWER 或 OWNER 复核。",
+        riskLevel: "high",
+        priority: "urgent",
+        changeTypes: ["Risk", "Task"],
+        itemCount: 2,
+        pendingItemCount: 1,
+        evidenceCount: 1,
+        suggestedReviewer: {
+          userId: "9",
+          displayName: "审查负责人",
+          role: "REVIEWER",
+          reason: "REVIEWER 角色，优先复核 high risk 变更。",
+          confidence: "high",
+        },
+        fallbackReviewerRole: null,
+        targetUrl: "/change-review?projectId=123&changeSetId=11",
+        createdAt: "2026-04-26T00:00:00",
+        updatedAt: "2026-04-26T00:00:00",
+      },
+    ],
+  };
+}
+
+function LocationProbe() {
+  const location = useLocation();
+  return <div data-testid="location">{`${location.pathname}${location.search}`}</div>;
+}
+
 function releaseGate(status: "ready" | "blocked" | "needs_confirmation" | "empty" = "needs_confirmation"): PMFlowReleaseGate {
   return {
     status,
@@ -465,6 +513,37 @@ describe("PMFlowOsProvider real change review actions", () => {
     vi.clearAllMocks();
   });
 
+  it("renders reviewer routing on team layer without assigning reviewers", async () => {
+    render(
+      <MemoryRouter>
+        <TeamLayerPage />
+        <LocationProbe />
+      </MemoryRouter>,
+      { wrapper: wrapper() }
+    );
+
+    expect(await screen.findByText("待审 ChangeSet 审查路由")).toBeInTheDocument();
+    expect(await screen.findByText("真实变更集")).toBeInTheDocument();
+    expect(screen.getByText("审查负责人")).toBeInTheDocument();
+    expect(screen.getByText("REVIEWER")).toBeInTheDocument();
+    expect(screen.getByText("下一轮迭代")).toBeInTheDocument();
+    expect(screen.getByText("证据 1")).toBeInTheDocument();
+    fireEvent.click(screen.getByRole("button", { name: /去审查/ }));
+    await waitFor(() => expect(screen.getByTestId("location").textContent).toBe("/change-review?projectId=123&changeSetId=11"));
+    expect(acceptItemMock).not.toHaveBeenCalled();
+    expect(commitChangeSetMock).not.toHaveBeenCalled();
+  });
+
+  it("keeps reviewer routing empty when payload omits it", async () => {
+    const state = realState();
+    delete state.reviewerRouting;
+    getTruthStateMock.mockResolvedValueOnce(state);
+    const { result } = renderHook(() => usePMFlowOsStore(), { wrapper: wrapper() });
+
+    await waitFor(() => expect(result.current.dataSourceStatus).toBe("success"));
+    expect(result.current.state.reviewerRouting).toBeUndefined();
+  });
+
   it("calls real message and review APIs in api mode and does not locally promote to project memory", async () => {
     const { result } = renderHook(() => usePMFlowOsStore(), { wrapper: wrapper() });
 

frontend/src/features/pmflow-os/store.tsx

@@ -96,6 +96,17 @@ function createEmptyPMFlowState(projectId: string | null, label = "未选择项
       qa: [],
       growth: [],
     },
+    reviewerRouting: {
+      status: "empty",
+      warningCode: null,
+      items: [],
+      summary: {
+        totalPendingReview: 0,
+        highRiskCount: 0,
+        missingReviewerCount: 0,
+        iterationDraftCount: 0,
+      },
+    },
     activeChangeSetId: null,
     selectedTaskId: null,
     execution: {

frontend/src/features/pmflow-os/types.ts

@@ -199,6 +199,54 @@ export interface PMFlowTeamInbox {
   growth: string[];
 }
 
+export type PMFlowReviewerRoutingStatus = "empty" | "ready" | "warning";
+export type PMFlowReviewerRoutingSourceType = "manual" | "ai_extraction" | "iteration_recommendation" | "unknown";
+export type PMFlowReviewerRoutingPriority = "normal" | "elevated" | "urgent";
+export type PMFlowReviewerConfidence = "low" | "medium" | "high";
+export type PMFlowFallbackReviewerRole = "OWNER" | "REVIEWER" | "MEMBER";
+
+export interface PMFlowReviewerSuggestion {
+  userId?: string | null;
+  displayName?: string | null;
+  role?: string | null;
+  reason: string;
+  confidence: PMFlowReviewerConfidence;
+}
+
+export interface PMFlowReviewerRoutingItem {
+  projectId: string;
+  changeSetId: string;
+  changeSetTitle: string;
+  changeSetStatus: string;
+  sourceType: PMFlowReviewerRoutingSourceType;
+  reviewReason: string;
+  riskLevel: PMFlowRiskLevel;
+  priority: PMFlowReviewerRoutingPriority;
+  changeTypes: string[];
+  itemCount: number;
+  pendingItemCount: number;
+  evidenceCount: number;
+  suggestedReviewer?: PMFlowReviewerSuggestion | null;
+  fallbackReviewerRole?: PMFlowFallbackReviewerRole | null;
+  targetUrl: string;
+  createdAt?: string | null;
+  updatedAt?: string | null;
+}
+
+export interface PMFlowReviewerRoutingSummary {
+  totalPendingReview: number;
+  highRiskCount: number;
+  missingReviewerCount: number;
+  iterationDraftCount: number;
+}
+
+export interface PMFlowReviewerRouting {
+  status: PMFlowReviewerRoutingStatus;
+  warningCode?: string | null;
+  items: PMFlowReviewerRoutingItem[];
+  summary: PMFlowReviewerRoutingSummary;
+}
+
 export interface ProjectTruthState {
   loopStage: ProjectLoopStage;
   lastWritebackAt: string | null;
@@ -225,6 +273,7 @@ export interface ProjectTruthState {
   approvals: Approval[];
   feed: PMFlowFeedEvent[];
   teamInbox: PMFlowTeamInbox;
+  reviewerRouting?: PMFlowReviewerRouting;
   activeChangeSetId: string | null;
   selectedTaskId: string | null;
   execution: PMFlowExecutionContext;