Fix strategy-logic P0s from audit: monitor false-flat, fill-confirmed open/close, mode gates.

Co-authored-by: Cursor <cursoragent@cursor.com>

lib/options/options_review_register.py

@@ -29,6 +29,28 @@ from lib.options.options_review_lib import (
 )
 
 
+def _review_source_for_mode(requested: str | None) -> str | None:
+    """按当前交易模式钳制复盘 source_type;不允许跨模式窥探."""
+    try:
+        from lib.hedge_plan.okx_trade_mode_lib import get_okx_trade_mode
+
+        mode = get_okx_trade_mode()
+    except Exception:
+        mode = "options"
+    allowed = {
+        "options": "option_spot",
+        "perp_options": "perp_options",
+        "options_options": "options_options",
+    }.get(mode, "option_spot")
+    req = (requested or "").strip()
+    if not req:
+        return allowed
+    if req == allowed:
+        return allowed
+    # 显式 all=1 仍拒绝跨模式,除非管理员扩展;此处一律钳制
+    return allowed
+
+
 def attach_options_review_templates(app: Flask, repo_root: str) -> None:
     tpl_dir = os.path.join(repo_root, "lib", "options", "templates")
     if not os.path.isdir(tpl_dir):
@@ -138,7 +160,7 @@ def register_options_review_routes(app: Flask, cfg: dict[str, Any], repo_root: s
                 ensure_local_review_synced(conn, ex=ex if ex is not None else None)
                 conn.commit()
             filt = dict(
-                source_type=(request.args.get("source_type") or "").strip() or None,
+                source_type=_review_source_for_mode(request.args.get("source_type")),
                 underlying=(request.args.get("underlying") or "").strip() or None,
                 opt_type=(request.args.get("opt_type") or "").strip() or None,
                 strategy_tag=(request.args.get("strategy_tag") or "").strip() or None,
@@ -272,7 +294,7 @@ def register_options_review_routes(app: Flask, cfg: dict[str, Any], repo_root: s
             conn.commit()
             stats = compute_review_stats(
                 conn,
-                source_type=(request.args.get("source_type") or "").strip() or None,
+                source_type=_review_source_for_mode(request.args.get("source_type")),
                 underlying=(request.args.get("underlying") or "").strip() or None,
                 include_hedge_legs=(request.args.get("include_hedge_legs") or "").strip().lower()
                 in ("1", "true", "yes"),