M1: 底座 —— @contracts 首版 + event / ledger / org / llm

@contracts 首版(§8.1 九个文件): - id 品牌 ID / terminal 终态五名与归侧四标签 / envelope 信封六字段与四类事件 - card 工单两模式 + 对话卡族(形状对齐 2026-07-26 原型定稿) - contract7 契约七件 / ledger 三级寻址与写三分 / process-package 流程包 DSL 与触发器三类 - manifest 活动包清单六区(含 CMMN·DMN·步序声明的资产形状)/ org / api 路由契约模块(L1): - event 信封存储、归属解析三级短路、投递五诺、监听注册表、三级消费裁定 - ledger schema 自生长(最大化合并/最宽类型/只增不破坏)、任务视图叠加、写三分、冲突检查 - org 岗位授权(客体三类×动作三种)、停用前置检查、会话、种子播种 - llm 四元绑定、ModelGateway 三模式(live/record/replay)—— 两缝之一 app 装配:Hono 服务 + 鉴权中间件 + 治理台/工作台路由;drizzle 迁移;AES-256-GCM 凭证密封 ADR-007 工具链与门禁 · ADR-008 投递队列 · ADR-009 凭证加密 (ADR 编号自 007 续:编码规范 §14 已用到 006,README 写「从 005 续」是笔误) 门禁五道全绿;96 个测试通过,含对真实 PG 的 ledger 集成测试 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m
2026-07-27 00:59:14 +08:00
parent 7cd664af3a
commit 14d4fa046a
120 changed files with 15236 additions and 78 deletions
@@ -0,0 +1,52 @@
+/**
+ * module: org —— 对外类型(编码规范 §10.1)。只有类型和常量,没有实现。
+ */
+import type { DisableCheck, Grant, GrantAction, GrantObject, Position, Session, Staff, StaffId } from '@contracts';
+export type { DisableCheck, Grant, GrantAction, GrantObject, Position, Session, Staff };
+/** 员工连同其岗位的读模型 —— 治理台员工管理列表用 */
+export type StaffWithPosition = Staff & {
+    readonly position: Position;
+};
+export type CreateStaffInput = {
+    readonly account: string;
+    readonly name: string;
+    readonly positionId: string;
+};
+export declare class StaffNotFoundError extends Error {
+    readonly staffId: StaffId;
+    constructor(staffId: StaffId);
+}
+export declare class PositionNotFoundError extends Error {
+    readonly positionCode: string;
+    constructor(positionCode: string);
+}
+export declare class AccountTakenError extends Error {
+    readonly account: string;
+    constructor(account: string);
+}
+/** 停用前置检查未过:在途任务与待答卡须先改派完毕(OS 02) */
+export declare class DisableBlockedError extends Error {
+    readonly check: DisableCheck;
+    constructor(check: DisableCheck);
+}
+export type OrgService = {
+    listStaff(): Promise<{
+        staff: StaffWithPosition[];
+        positions: Position[];
+    }>;
+    getStaff(staffId: StaffId): Promise<StaffWithPosition>;
+    findByAccount(account: string): Promise<StaffWithPosition | undefined>;
+    createStaff(input: CreateStaffInput): Promise<Staff>;
+    /** 停用前置检查 —— 只读,治理台先看再点 */
+    checkDisable(staffId: StaffId): Promise<DisableCheck>;
+    /** 停用 —— 前置检查不过即抛 DisableBlockedError,不做部分执行 */
+    disableStaff(staffId: StaffId): Promise<void>;
+    listGrants(positionId: string): Promise<Grant[]>;
+    setGrants(positionId: string, grants: readonly Grant[]): Promise<Grant[]>;
+    /** 岗位权限校验 —— app 层鉴权中间件读它 */
+    authorize(staffId: StaffId, object: GrantObject, action: GrantAction): Promise<boolean>;
+    loadSession(account: string): Promise<Session | undefined>;
+    /** 岗位在岗人员 —— 负责人四策略解析的候选集来源(由 process 调用) */
+    staffOfPosition(positionCode: string): Promise<StaffWithPosition[]>;
+    ensureSeeded(): Promise<void>;
+};
@@ -0,0 +1,12 @@
+/**
+ * module: org —— 唯一出口。只做 re-export,不写逻辑(编码规范 §10.1)。
+ */
+export type { CreateStaffInput, DisableCheck, Grant, GrantAction, GrantObject, OrgService, Position, Session, Staff, StaffWithPosition, } from './contract.ts';
+export { AccountTakenError, DisableBlockedError, PositionNotFoundError, StaffNotFoundError, } from './contract.ts';
+export type { Clock, GrantRepository, IdGenerator, InFlightWorkProbe, PositionRepository, StaffRepository, } from './port.ts';
+export type { OrgServiceDeps } from './internal/usecase/org-service.ts';
+export { createOrgService } from './internal/usecase/org-service.ts';
+export { isAuthorized, actionCovers, objectCovers } from './internal/domain/authorization.ts';
+export { DEFAULT_LOGIN_ACCOUNT, POSITION_SEED, STAFF_SEED } from './internal/domain/seed-data.ts';
+export { createGrantRepository, createPositionRepository, createStaffRepository, objectKeyOf, } from './internal/adapter/org-repository.ts';
+export { grantTable, positionTable, staffTable } from './internal/adapter/org-schema.ts';
@@ -0,0 +1,50 @@
+/**
+ * module: org —— 本模块要外界提供的能力(编码规范 §10.1 / §5.3)。
+ * adapter 实现之,usecase 依赖之,app 装配之。
+ */
+import type { Grant, Position, PositionId, Staff, StaffId } from '@contracts';
+export type Clock = {
+    now(): Date;
+};
+export type PositionRepository = {
+    list(): Promise<Position[]>;
+    findByCode(code: string): Promise<Position | undefined>;
+    findById(id: PositionId): Promise<Position | undefined>;
+    upsert(position: Omit<Position, 'id'> & {
+        id?: PositionId;
+    }): Promise<Position>;
+};
+export type StaffRepository = {
+    list(): Promise<Staff[]>;
+    findById(id: StaffId): Promise<Staff | undefined>;
+    findByAccount(account: string): Promise<Staff | undefined>;
+    listByPosition(positionId: PositionId): Promise<Staff[]>;
+    insert(staff: Staff): Promise<Staff>;
+    setState(id: StaffId, state: Staff['state']): Promise<void>;
+};
+export type GrantRepository = {
+    listByPosition(positionId: PositionId): Promise<Grant[]>;
+    replaceForPosition(positionId: PositionId, grants: readonly Grant[]): Promise<Grant[]>;
+};
+/**
+ * 在途工作探针 —— 停用前置检查要问的是 L6 `task` 与 L3 `human-tool`,
+ * 二者层级高于 org,故一律经本端口由 app 注入(编码规范 §5.2 同层/跨层协作规矩)。
+ */
+export type InFlightWorkProbe = {
+    openTasksOf(staffId: StaffId): Promise<Array<{
+        taskId: string;
+        title: string;
+    }>>;
+    openCardsOf(staffId: StaffId): Promise<Array<{
+        cardId: string;
+        title: string;
+    }>>;
+    openApprovalsOf(staffId: StaffId): Promise<Array<{
+        approvalId: string;
+        title: string;
+    }>>;
+};
+/** ID 生成 —— domain 零随机(§5.3) */
+export type IdGenerator = {
+    next(): string;
+};