上线版: 产品表单统一+form嵌套修复+用户管理+部署+三套叙事

- 产品编辑入口统一走 ProductFormFull(卖点/风格/人群/品牌词全字段);
  修复开任务页 <form> 套 <form> 致"编辑产品"报错、改不了、跳回首个产品
- dashboard 入口卡片对齐实际路由: 系统管理(/config) 与 工作配置(/settings) 分开;
  settings ?tab=products 直达改用挂载后读 URL, 消除 hydration mismatch
- 新增用户管理(users API/admin service/改密页) + alembic 022/023/024
- 上线部署: Dockerfile / docker-compose.prod+https / nginx https / .env.example
- A8 三套正交叙事(痛点/场景/成分背书) + beige 调色去AI化 + 飞轮 text_import 高权重信号

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/app/api/v1/delivery.py

@@ -1,8 +1,9 @@
 """
 app/api/v1/delivery.py — 交付包路由
 POST /tasks/{id}/package — 生成达人素材交付包
-GET /delivery-packages/{id}/download — 下载（status: pending/ready/downloaded）
+GET /delivery-packages/{id}/download — 查询下载状态（无副作用）
 POST /delivery-packages/{id}/download-token — 签发60s一次性下载令牌（C1坑修复）
+POST /delivery-packages/{id}/mark-downloaded — 显式标记已下载
 GET /delivery-packages/{id}/download-file?token= — 带令牌下载，前端可用 window.open
 """
 
@@ -78,7 +79,7 @@ def get_package_download(
     current_user: Annotated[CurrentUser, Depends(require_write_permission)] = None,
     db: Session = Depends(get_db),
 ):
-    """下载交付包（status: pending/ready/downloaded）。"""
+    """查询交付包下载状态。GET 只读，实际下载由 download-file 完成。"""
     pkg = db.query(DeliveryPackage).filter(
         DeliveryPackage.id == package_id,
         DeliveryPackage.workspace_id == current_user.workspace_id,
@@ -86,11 +87,6 @@ def get_package_download(
     if not pkg:
         raise_not_found("交付包不存在")
 
-    if pkg.status == "ready" and pkg.download_url:
-        # 标记为 downloaded（只能下一次，防重复公开 URL）
-        pkg.status = "downloaded"
-        db.commit()
-
     return ok(_fmt_package(pkg))
 
 
@@ -124,6 +120,26 @@ def create_download_token(
     return ok({"token": token, "expires_in": 60})
 
 
+@router.post("/delivery-packages/{package_id}/mark-downloaded")
+def mark_package_downloaded(
+    package_id: int,
+    current_user: Annotated[CurrentUser, Depends(require_write_permission)] = None,
+    db: Session = Depends(get_db),
+):
+    """显式标记交付包已下载。所有 GET 下载接口保持只读。"""
+    pkg = db.query(DeliveryPackage).filter(
+        DeliveryPackage.id == package_id,
+        DeliveryPackage.workspace_id == current_user.workspace_id,
+    ).first()
+    if not pkg:
+        raise_not_found("交付包不存在")
+    if pkg.status == "ready":
+        pkg.status = "downloaded"
+        db.commit()
+        db.refresh(pkg)
+    return ok(_fmt_package(pkg))
+
+
 @router.get("/delivery-packages/{package_id}/download-file")
 def download_package_file(
     package_id: int,