M1: 底座 —— @contracts 首版 + event / ledger / org / llm

@contracts 首版(§8.1 九个文件): - id 品牌 ID / terminal 终态五名与归侧四标签 / envelope 信封六字段与四类事件 - card 工单两模式 + 对话卡族(形状对齐 2026-07-26 原型定稿) - contract7 契约七件 / ledger 三级寻址与写三分 / process-package 流程包 DSL 与触发器三类 - manifest 活动包清单六区(含 CMMN·DMN·步序声明的资产形状)/ org / api 路由契约模块(L1): - event 信封存储、归属解析三级短路、投递五诺、监听注册表、三级消费裁定 - ledger schema 自生长(最大化合并/最宽类型/只增不破坏)、任务视图叠加、写三分、冲突检查 - org 岗位授权(客体三类×动作三种)、停用前置检查、会话、种子播种 - llm 四元绑定、ModelGateway 三模式(live/record/replay)—— 两缝之一 app 装配:Hono 服务 + 鉴权中间件 + 治理台/工作台路由;drizzle 迁移;AES-256-GCM 凭证密封 ADR-007 工具链与门禁 · ADR-008 投递队列 · ADR-009 凭证加密 (ADR 编号自 007 续:编码规范 §14 已用到 006,README 写「从 005 续」是笔误) 门禁五道全绿;96 个测试通过,含对真实 PG 的 ledger 集成测试 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m
2026-07-27 00:59:14 +08:00
parent 7cd664af3a
commit 14d4fa046a
120 changed files with 15236 additions and 78 deletions
@@ -0,0 +1,111 @@
+/**
+ * 治理台路由契约(编码规范 §8.1 / §9.1)。
+ * 治理台九功能不设后端 governance 模块:每个功能是对应模块的管理用例 + 本文件的路由组装(§3)。
+ */
+import { z } from 'zod';
+import type { RouteContract } from './http.ts';
+import { disableCheckSchema, grantSchema, positionSchema, staffSchema } from '../org.ts';
+import { positionIdSchema, staffIdSchema } from '../id.ts';
+
+/* ── 员工管理 ─────────────────────────────────────────────────────────── */
+
+export const listStaffRoute = {
+  method: 'GET',
+  path: '/api/gov/staff',
+  output: z.object({
+    staff: z.array(staffSchema.extend({ position: positionSchema })),
+    positions: z.array(positionSchema),
+  }),
+} as const satisfies RouteContract;
+
+export const createStaffRoute = {
+  method: 'POST',
+  path: '/api/gov/staff',
+  body: z.object({
+    account: z.string().min(1),
+    name: z.string().min(1),
+    positionId: positionIdSchema,
+  }),
+  output: staffSchema,
+} as const satisfies RouteContract;
+
+export const disableStaffCheckRoute = {
+  method: 'GET',
+  path: '/api/gov/staff/:staffId/disable-check',
+  params: z.object({ staffId: staffIdSchema }),
+  output: disableCheckSchema,
+} as const satisfies RouteContract;
+
+export const disableStaffRoute = {
+  method: 'POST',
+  path: '/api/gov/staff/:staffId/disable',
+  params: z.object({ staffId: staffIdSchema }),
+  output: z.object({ ok: z.boolean(), check: disableCheckSchema }),
+} as const satisfies RouteContract;
+
+export const listGrantsRoute = {
+  method: 'GET',
+  path: '/api/gov/positions/:positionId/grants',
+  params: z.object({ positionId: positionIdSchema }),
+  output: z.object({ grants: z.array(grantSchema) }),
+} as const satisfies RouteContract;
+
+export const setGrantsRoute = {
+  method: 'POST',
+  path: '/api/gov/positions/:positionId/grants',
+  params: z.object({ positionId: positionIdSchema }),
+  body: z.object({ grants: z.array(grantSchema) }),
+  output: z.object({ grants: z.array(grantSchema) }),
+} as const satisfies RouteContract;
+
+/* ── 系统管理 · LLM 实例(四元绑定) ────────────────────────────────── */
+
+export const LLM_PROVIDERS = ['openai-compatible', 'openai', 'deepseek', 'anthropic', 'qwen'] as const;
+export const llmProviderSchema = z.enum(LLM_PROVIDERS);
+export type LlmProvider = z.infer<typeof llmProviderSchema>;
+
+/** 活动只见自定义模型名;Provider / URL / API-Key / Model 四元在系统侧绑定,活动不触厂商与密钥 */
+export const llmInstanceViewSchema = z.object({
+  id: z.string(),
+  /** 自定义模型名(逻辑名)—— 活动以此声明引用 */
+  name: z.string().min(1),
+  provider: llmProviderSchema,
+  baseUrl: z.string().min(1),
+  model: z.string().min(1),
+  /** 密钥不出治理台:只回是否已绑定,永不回明文(OS 7.3 凭证隔离) */
+  apiKeyBound: z.boolean(),
+  /** 系统用途绑定:叙述性小结 / 汇报生成 / 蒸馏钩子,计量入系统账 */
+  systemUse: z.boolean().default(false),
+  enabled: z.boolean().default(true),
+});
+export type LlmInstanceView = z.infer<typeof llmInstanceViewSchema>;
+
+export const listLlmInstancesRoute = {
+  method: 'GET',
+  path: '/api/gov/llm',
+  output: z.object({ instances: z.array(llmInstanceViewSchema) }),
+} as const satisfies RouteContract;
+
+export const upsertLlmInstanceRoute = {
+  method: 'POST',
+  path: '/api/gov/llm',
+  body: z.object({
+    id: z.string().optional(),
+    name: z.string().min(1),
+    provider: llmProviderSchema,
+    baseUrl: z.string().min(1),
+    model: z.string().min(1),
+    /** 只写不读:留空表示保持原值 */
+    apiKey: z.string().optional(),
+    systemUse: z.boolean().default(false),
+    enabled: z.boolean().default(true),
+  }),
+  output: llmInstanceViewSchema,
+} as const satisfies RouteContract;
+
+export const probeLlmInstanceRoute = {
+  method: 'POST',
+  path: '/api/gov/llm/:id/probe',
+  params: z.object({ id: z.string() }),
+  output: z.object({ ok: z.boolean(), latencyMs: z.number().int().optional(), error: z.string().optional() }),
+} as const satisfies RouteContract;
@@ -0,0 +1,51 @@
+/**
+ * 路由契约的形状(编码规范 §8.1 / §9.2)。
+ *
+ * 前端只经 `shared/typed-fetch` + 本目录的路由契约与服务端交互;组件内禁止裸 fetch。
+ * **禁止 Hono RPC 客户端** —— 它要求前端 import 后端类型,违反 §5.1。
+ */
+import type { z } from 'zod';
+
+export const HTTP_METHODS = ['GET', 'POST', 'PATCH', 'DELETE'] as const;
+export type HttpMethod = (typeof HTTP_METHODS)[number];
+
+/**
+ * 一条路由契约。`path` 用 `:name` 表示路径参数,与 `params` 的键一一对应。
+ * body 只在 POST/PATCH 上有意义;GET 用 query。
+ */
+export type RouteContract<
+  TParams extends z.ZodTypeAny = z.ZodTypeAny,
+  TQuery extends z.ZodTypeAny = z.ZodTypeAny,
+  TBody extends z.ZodTypeAny = z.ZodTypeAny,
+  TOutput extends z.ZodTypeAny = z.ZodTypeAny,
+> = {
+  readonly method: HttpMethod;
+  readonly path: string;
+  readonly params?: TParams;
+  readonly query?: TQuery;
+  readonly body?: TBody;
+  readonly output: TOutput;
+};
+
+export type RouteOutput<R extends RouteContract> = z.infer<R['output']>;
+export type RouteBody<R extends RouteContract> = R['body'] extends z.ZodTypeAny
+  ? z.infer<R['body']>
+  : never;
+
+/** 结构化错误:前端按 code 分辨,不解析文案 */
+export const API_ERROR_CODES = [
+  'unauthenticated',
+  'forbidden',
+  'not-found',
+  'validation-failed',
+  'conflict',
+  'precondition-failed',
+  'internal',
+] as const;
+export type ApiErrorCode = (typeof API_ERROR_CODES)[number];
+
+export type ApiError = {
+  readonly code: ApiErrorCode;
+  readonly message: string;
+  readonly detail?: unknown;
+};
@@ -0,0 +1,4 @@
+export * from './http.ts';
+export * from './workbench.ts';
+export * from './governance.ts';
+export * from './ingest.ts';
@@ -0,0 +1,41 @@
+/**
+ * 入站路由契约(编码规范 §8.1)。
+ *
+ * 通道入站 → 归属解析 → 统一事件流(OS 06)。MVP 的邮件通道以**模拟通道**接入:
+ * mock 只允许出现在**外界**(邮件通道与外部系统),系统内部机制不得 mock(README MVP 完成判据)。
+ */
+import { z } from 'zod';
+import type { RouteContract } from './http.ts';
+import { channelIdSchema, eventIdSchema } from '../id.ts';
+import { ownershipResolutionSchema } from '../envelope.ts';
+
+/** 一封入站邮件的归一形状 —— 真实邮件通道与模拟通道共用 */
+export const inboundMailSchema = z.object({
+  messageId: z.string().min(1),
+  threadId: z.string().optional(),
+  from: z.string().min(1),
+  to: z.array(z.string().min(1)).min(1),
+  cc: z.array(z.string()).default([]),
+  subject: z.string(),
+  body: z.string(),
+  receivedAt: z.iso.datetime(),
+  attachments: z
+    .array(z.object({ name: z.string(), contentType: z.string(), size: z.number().int().min(0), ref: z.string() }))
+    .default([]),
+});
+export type InboundMail = z.infer<typeof inboundMailSchema>;
+
+export const ingestMailRoute = {
+  method: 'POST',
+  path: '/api/ingest/channel/:channelId/mail',
+  params: z.object({ channelId: channelIdSchema }),
+  body: inboundMailSchema,
+  output: z.object({
+    eventId: eventIdSchema,
+    resolution: ownershipResolutionSchema,
+    /** 三级消费的判定结果:命中的任务监听数 / 命中的触发器数;皆零则入消息兜底 */
+    listenersHit: z.number().int().min(0),
+    triggersHit: z.number().int().min(0),
+    fellBackToMessage: z.boolean(),
+  }),
+} as const satisfies RouteContract;
@@ -0,0 +1,23 @@
+/**
+ * 工作台路由契约(编码规范 §8.1 / §9.1)。
+ * 工作台五要素:任务 / 审批 / 消息 / 纪要 / 汇报 —— 同一份过程事实的五种投影。
+ */
+import { z } from 'zod';
+import type { RouteContract } from './http.ts';
+import { sessionSchema } from '../org.ts';
+
+export const sessionRoute = {
+  method: 'GET',
+  path: '/api/session',
+  output: sessionSchema,
+} as const satisfies RouteContract;
+
+export const healthRoute = {
+  method: 'GET',
+  path: '/api/health',
+  output: z.object({
+    ok: z.boolean(),
+    version: z.string(),
+    db: z.enum(['up', 'down']),
+  }),
+} as const satisfies RouteContract;