feat(换货): AUG26-005 换货业务数据迁移状态与失败恢复

- 新增成对迁移 000222：tb_exchange_order 增加非空 migration_status 与
  migration_failure_reason，按既有 migrate_data/migration_completed 回填历史，
  并加四值 CHECK 约束，不新增索引
- 模型与常量定义四种迁移状态及中文名称，保留既有布尔字段兼容语义
- 物流换货创建恒 not_migrated，发货按请求落 pending/not_migrated，
  完成成功写 migrated/not_migrated 并清空失败原因、同步兼容字段
- 直接换货创建即完成，任一步失败整体回滚，不持久化换货单、不产生 failed
- 迁移失败回滚全部业务修改后，在独立短事务内条件更新 failed 与安全失败原因
  并写失败审计，RowsAffected 为 0 时跳过状态写入但仍写审计
- failed 物流单重试仅限超级管理员或平台用户，授权以锁内 FOR UPDATE 判定为准，
  重试从钱包余额起整表重跑；非 failed 单沿用既有完成门禁
- 列表与详情返回迁移状态与中文名称，仅 failed 返回失败原因；既有三字段保持兼容
- 换货导出在「状态」列后新增中文「迁移状态」列，不导出失败原因
- 同步 order-refund-exchange 主 spec 与验证证据，归档本 Change
- 登记 KNOWN-ISSUE-001：既有标签复制 OnConflict 未声明部分索引谓词（42P10），
  旧资产带标签时迁移最后一步失败，待另立变更修复

docs/engineering/工程约束.md

@@ -257,9 +257,9 @@
 - **最小正例**：事务写事实和 Audit Writer；提交后由 Outbox 外发。
 - **最小反例**：事务中等待第三方网络后再提交。
 - **机械检查/人工原因**：逐用例人工核对 Transaction 闭包、Audit Writer 和外部调用位置。
-- **例外条件**：业务回滚后的 failed/denied 审计使用独立短事务。
+- **例外条件**：业务回滚后的 failed/denied 审计，以及随之记录的回滚后失败状态事实，使用独立短事务；该短事务 MUST NOT 与已回滚的主事务共用连接或事务，且 MUST 以业务单仍处于允许该失败事实的状态为条件更新。
 - **Owner**：架构与审计负责人
-- **最后验证日期**：2026-08-07
+- **最后验证日期**：2026-09-14
 - **更新触发条件**：高风险写或外部调用变化
 
 ## ENG-AUDIT-001
@@ -326,3 +326,15 @@
 - **Owner**：基础设施负责人
 - **最后验证日期**：2026-09-08
 - **更新触发条件**：测试库、Redis DB、部署分支、测试主机或验证授权变化
+
+## KNOWN-ISSUE-001
+- **状态**：已知缺陷，待修复（当前不阻塞归档；标签功能未启用时无实际影响）
+- **适用范围**：`internal/service/exchange/migration.go` 的标签复制步骤（换货业务数据迁移的「资产标签」迁移项）
+- **问题**：标签复制使用 `clause.OnConflict{Columns: [resource_type, resource_id, tag_id], DoNothing: true}`，未声明 `tb_resource_tag` 上部分唯一索引 `idx_resource_tag_unique`（`... WHERE deleted_at IS NULL`）的谓词，PostgreSQL 返回 `42P10`。
+- **理由**：旧资产存在任意 `tb_resource_tag` 行且换货请求要求迁移时，标签步骤必然失败，导致换货完成整体回滚、迁移状态落 `failed`，「已迁移」在该情形不可达。记录于此以便由独立变更修复，避免在其它任务中顺手改动迁移项。
+- **证据**：2026-09-14 在 `junhong_cmp_test` 的 `tb_audit_event` 实测 4 条 `action_code=exchange.card.complete`、`result=failed`、`error_code=1206`，`error_summary` 含 `复制资产标签失败 ... SQLSTATE 42P10`；`tb_resource_tag` 当前 0 行，故静态库状态下不可观测。该文件自 `add-exchange-data-migration-status` 起未修改（md5 与 `git show HEAD` 一致）。
+- **例外条件**：标签功能未启用（`tb_resource_tag` 为空）时无实际影响；不影响钱包余额、有效套餐使用记录、累计充值字段、资产归属与个人客户—资产绑定，也不影响无标签资产的换货完成。
+- **修复方式**：为该 `OnConflict` 声明部分索引谓词（或调整索引），须另立 OpenSpec Change；当前按维护者决策暂不修复，仅登记待办。
+- **Owner**：数据负责人
+- **最后验证日期**：2026-09-14
+- **更新触发条件**：标签功能启用、换货迁移项变更或该缺陷修复

docs/verification/context-reset/entry-capability-requirement-matrix.json

@@ -711,7 +711,8 @@
     "capability": "order-refund-exchange",
     "requirements": [
       "identity-access::数据范围拒绝",
-      "order-refund-exchange::订单、退款与换货状态门禁"
+      "order-refund-exchange::订单、退款与换货状态门禁",
+      "order-refund-exchange::换货业务数据迁移状态与失败恢复"
     ],
     "classification": "behavior"
   },
@@ -721,7 +722,8 @@
     "capability": "order-refund-exchange",
     "requirements": [
       "identity-access::数据范围拒绝",
-      "order-refund-exchange::订单、退款与换货状态门禁"
+      "order-refund-exchange::订单、退款与换货状态门禁",
+      "order-refund-exchange::换货业务数据迁移状态与失败恢复"
     ],
     "classification": "behavior"
   },
@@ -2077,7 +2079,8 @@
     "capability": "order-refund-exchange",
     "requirements": [
       "identity-access::数据范围拒绝",
-      "order-refund-exchange::订单、退款与换货状态门禁"
+      "order-refund-exchange::订单、退款与换货状态门禁",
+      "order-refund-exchange::换货业务数据迁移状态与失败恢复"
     ],
     "classification": "behavior"
   },
@@ -2097,7 +2100,9 @@
     "capability": "order-refund-exchange",
     "requirements": [
       "identity-access::数据范围拒绝",
-      "order-refund-exchange::订单、退款与换货状态门禁"
+      "order-refund-exchange::订单、退款与换货状态门禁",
+      "order-refund-exchange::换货业务数据迁移状态与失败恢复",
+      "order-refund-exchange::换货业务数据迁移范围"
     ],
     "classification": "behavior"
   },
@@ -2117,7 +2122,8 @@
     "capability": "order-refund-exchange",
     "requirements": [
       "identity-access::数据范围拒绝",
-      "order-refund-exchange::订单、退款与换货状态门禁"
+      "order-refund-exchange::订单、退款与换货状态门禁",
+      "order-refund-exchange::换货业务数据迁移状态与失败恢复"
     ],
     "classification": "behavior"
   },
@@ -2136,7 +2142,8 @@
     "capability": "export-task",
     "requirements": [
       "export-task::导出任务终态",
-      "identity-access::数据范围拒绝"
+      "identity-access::数据范围拒绝",
+      "order-refund-exchange::换货导出业务数据迁移状态"
     ],
     "classification": "behavior"
   },

docs/verification/context-reset/requirement-evidence.json

@@ -3566,5 +3566,101 @@
       ],
       "exit_status": 0
     }
+  },
+  {
+    "capability": "order-refund-exchange",
+    "requirement": "换货业务数据迁移状态与失败恢复",
+    "spec": "openspec/specs/order-refund-exchange/spec.md",
+    "entries": [
+      "/api/admin/exchanges",
+      "/api/admin/exchanges/{id}",
+      "/api/admin/exchanges/{id}/ship",
+      "/api/admin/exchanges/{id}/complete"
+    ],
+    "handler_consumer_job": [
+      "internal/routes/exchange.go",
+      "internal/handler/admin/exchange.go"
+    ],
+    "application_service_query": [
+      "internal/service/exchange/service.go",
+      "internal/service/exchange/migration_failure.go",
+      "internal/query/exchange/list.go"
+    ],
+    "domain_state_amount": [
+      "internal/model/exchange_order.go",
+      "pkg/constants/constants.go"
+    ],
+    "store_migration_config": [
+      "migrations/000222_add_exchange_migration_status.up.sql",
+      "migrations/000222_add_exchange_migration_status.down.sql",
+      "internal/store/postgres/exchange_order_store.go"
+    ],
+    "verification": {
+      "command": "grep -n '仅超级管理员或平台用户可重试迁移失败的换货单' internal/service/exchange/service.go",
+      "literal_output": [
+        "254:\t\terr = errors.New(errors.CodeForbidden, \"仅超级管理员或平台用户可重试迁移失败的换货单\")",
+        "271:\t\t\treturn errors.New(errors.CodeForbidden, \"仅超级管理员或平台用户可重试迁移失败的换货单\")"
+      ],
+      "exit_status": 0
+    }
+  },
+  {
+    "capability": "order-refund-exchange",
+    "requirement": "换货业务数据迁移范围",
+    "spec": "openspec/specs/order-refund-exchange/spec.md",
+    "entries": [
+      "/api/admin/exchanges/{id}/complete"
+    ],
+    "handler_consumer_job": [
+      "internal/routes/exchange.go",
+      "internal/handler/admin/exchange.go"
+    ],
+    "application_service_query": [
+      "internal/service/exchange/service.go",
+      "internal/service/exchange/migration.go",
+      "internal/service/customer_binding/service.go"
+    ],
+    "domain_state_amount": [
+      "internal/model/exchange_order.go",
+      "internal/model/personal_customer_phone.go"
+    ],
+    "store_migration_config": [
+      "migrations/000222_add_exchange_migration_status.up.sql"
+    ],
+    "verification": {
+      "command": "grep -n 'errors.Wrap(errors.CodeExchangeMigrationFailed' internal/service/exchange/migration.go",
+      "literal_output": [
+        "23:\t\treturn nil, errors.Wrap(errors.CodeExchangeMigrationFailed, err, \"执行钱包迁移失败\")",
+        "27:\t\treturn nil, errors.Wrap(errors.CodeExchangeMigrationFailed, err, \"迁移套餐使用记录失败\")",
+        "30:\t\treturn nil, errors.Wrap(errors.CodeExchangeMigrationFailed, err, \"复制累计充值字段失败\")",
+        "33:\t\treturn nil, errors.Wrap(errors.CodeExchangeMigrationFailed, err, \"复制资产标签失败\")"
+      ],
+      "exit_status": 0
+    }
+  },
+  {
+    "capability": "order-refund-exchange",
+    "requirement": "换货导出业务数据迁移状态",
+    "spec": "openspec/specs/order-refund-exchange/spec.md",
+    "entries": [
+      "/api/admin/export-tasks"
+    ],
+    "handler_consumer_job": [
+      "internal/exporter/exchange_scene.go"
+    ],
+    "application_service_query": [
+      "internal/service/export_task/service.go"
+    ],
+    "domain_state_amount": [
+      "pkg/constants/constants.go"
+    ],
+    "store_migration_config": [],
+    "verification": {
+      "command": "grep -n '\"迁移状态\"' internal/exporter/exchange_scene.go",
+      "literal_output": [
+        "41:\t\t\"收货人姓名\", \"收货人电话\", \"收货地址\", \"快递公司\", \"快递单号\", \"状态\", \"迁移状态\", \"创建人\", \"创建时间\","
+      ],
+      "exit_status": 0
+    }
   }
 ]