BPOS-MVP/packages/contracts/src/api/governance.ts

/**
 * 治理台路由契约(编码规范 §8.1 / §9.1)。
 * 治理台九功能不设后端 governance 模块:每个功能是对应模块的管理用例 + 本文件的路由组装(§3)。
 */
import { z } from 'zod';
import type { RouteContract } from './http.ts';
import { disableCheckSchema, grantSchema, positionSchema, staffSchema, workGroupSchema } from '../org.ts';
import { positionIdSchema, staffIdSchema, taskIdSchema } from '../id.ts';
import { approvalTemplateSchema, closureReportSchema, processPackageSchema, triggerConfigSchema } from '../process-package.ts';
import { controlSemanticSchema, taskRuntimeStateSchema, terminalStateSchema, workflowStateSchema } from '../terminal.ts';
import { activityManifestSchema } from '../manifest.ts';
import { reportMetricsSchema, reportPeriodSchema } from './workbench.ts';

/* ── 员工管理 ─────────────────────────────────────────────────────────── */

export const listStaffRoute = {
  method: 'GET',
  path: '/api/gov/staff',
  output: z.object({
    staff: z.array(staffSchema.extend({ position: positionSchema })),
    positions: z.array(positionSchema),
  }),
} as const satisfies RouteContract;

export const createStaffRoute = {
  method: 'POST',
  path: '/api/gov/staff',
  body: z.object({
    account: z.string().min(1),
    name: z.string().min(1),
    positionId: positionIdSchema,
  }),
  output: staffSchema,
} as const satisfies RouteContract;

export const disableStaffCheckRoute = {
  method: 'GET',
  path: '/api/gov/staff/:staffId/disable-check',
  params: z.object({ staffId: staffIdSchema }),
  output: disableCheckSchema,
} as const satisfies RouteContract;

export const disableStaffRoute = {
  method: 'POST',
  path: '/api/gov/staff/:staffId/disable',
  params: z.object({ staffId: staffIdSchema }),
  output: z.object({ ok: z.boolean(), check: disableCheckSchema }),
} as const satisfies RouteContract;

export const listGrantsRoute = {
  method: 'GET',
  path: '/api/gov/positions/:positionId/grants',
  params: z.object({ positionId: positionIdSchema }),
  output: z.object({ grants: z.array(grantSchema) }),
} as const satisfies RouteContract;

export const setGrantsRoute = {
  method: 'POST',
  path: '/api/gov/positions/:positionId/grants',
  params: z.object({ positionId: positionIdSchema }),
  body: z.object({ grants: z.array(grantSchema) }),
  output: z.object({ grants: z.array(grantSchema) }),
} as const satisfies RouteContract;

/* ── 系统管理 · LLM 实例(四元绑定) ────────────────────────────────── */

export const LLM_PROVIDERS = ['openai-compatible', 'openai', 'deepseek', 'anthropic', 'qwen'] as const;
export const llmProviderSchema = z.enum(LLM_PROVIDERS);
export type LlmProvider = z.infer<typeof llmProviderSchema>;

/** 活动只见自定义模型名;Provider / URL / API-Key / Model 四元在系统侧绑定,活动不触厂商与密钥 */
export const llmInstanceViewSchema = z.object({
  id: z.string(),
  /** 自定义模型名(逻辑名)—— 活动以此声明引用 */
  name: z.string().min(1),
  provider: llmProviderSchema,
  baseUrl: z.string().min(1),
  model: z.string().min(1),
  /** 密钥不出治理台:只回是否已绑定,永不回明文(OS 7.3 凭证隔离) */
  apiKeyBound: z.boolean(),
  /** 系统用途绑定:叙述性小结 / 汇报生成 / 蒸馏钩子,计量入系统账 */
  systemUse: z.boolean().default(false),
  enabled: z.boolean().default(true),
});
export type LlmInstanceView = z.infer<typeof llmInstanceViewSchema>;

export const listLlmInstancesRoute = {
  method: 'GET',
  path: '/api/gov/llm',
  output: z.object({ instances: z.array(llmInstanceViewSchema) }),
} as const satisfies RouteContract;

export const upsertLlmInstanceRoute = {
  method: 'POST',
  path: '/api/gov/llm',
  body: z.object({
    id: z.string().optional(),
    name: z.string().min(1),
    provider: llmProviderSchema,
    /** 留空 = 取该 provider 的默认端点(openai-compatible 没有默认,必须自填) */
    baseUrl: z.string().default(''),
    model: z.string().min(1),
    /** 只写不读:留空表示保持原值 */
    apiKey: z.string().optional(),
    systemUse: z.boolean().default(false),
    enabled: z.boolean().default(true),
  }),
  output: llmInstanceViewSchema,
} as const satisfies RouteContract;

export const probeLlmInstanceRoute = {
  method: 'POST',
  path: '/api/gov/llm/:id/probe',
  params: z.object({ id: z.string() }),
  output: z.object({ ok: z.boolean(), latencyMs: z.number().int().optional(), error: z.string().optional() }),
} as const satisfies RouteContract;

/* ── 任务管理:在途监控 · 控制事件 · 改派 ─────────────────────────────── */

export const govTaskRowSchema = z.object({
  id: taskIdSchema,
  title: z.string(),
  activityId: z.string(),
  ownerName: z.string(),
  runtime: taskRuntimeStateSchema,
  terminal: terminalStateSchema.optional(),
  workflowId: z.string().optional(),
  usedSteps: z.number().int(),
  capSteps: z.number().int(),
  startedAt: z.string(),
});
export type GovTaskRow = z.infer<typeof govTaskRowSchema>;

export const listGovTasksRoute = {
  method: 'GET',
  path: '/api/gov/tasks',
  output: z.object({
    tasks: z.array(govTaskRowSchema),
    workflows: z.array(
      z.object({
        id: z.string(),
        subject: z.string(),
        state: workflowStateSchema,
        packageId: z.string(),
        startedAt: z.string(),
      }),
    ),
  }),
} as const satisfies RouteContract;

/** 控制三语义:暂停 / 叫停 / 终止 —— 治理台的干预面(OS 06) */
export const controlTaskRoute = {
  method: 'POST',
  path: '/api/gov/tasks/:taskId/control',
  params: z.object({ taskId: taskIdSchema }),
  body: z.object({ semantic: controlSemanticSchema, reason: z.string().optional() }),
  output: z.object({ ok: z.boolean(), resumable: z.boolean() }),
} as const satisfies RouteContract;

export const resumeTaskRoute = {
  method: 'POST',
  path: '/api/gov/tasks/:taskId/resume',
  params: z.object({ taskId: taskIdSchema }),
  output: z.object({ ok: z.boolean(), runtime: taskRuntimeStateSchema }),
} as const satisfies RouteContract;

/** 改派 —— 在途任务的负责人变更,留痕并通知双方 */
export const reassignTaskRoute = {
  method: 'POST',
  path: '/api/gov/tasks/:taskId/reassign',
  params: z.object({ taskId: taskIdSchema }),
  body: z.object({ to: staffIdSchema }),
  output: z.object({ ok: z.boolean(), ownerId: staffIdSchema }),
} as const satisfies RouteContract;

/** 任务日志 —— 治理台可查看任意任务的任务日志(OS 02) */
export const govTaskLogRoute = {
  method: 'GET',
  path: '/api/gov/tasks/:taskId/log',
  params: z.object({ taskId: taskIdSchema }),
  output: z.object({
    log: z.array(z.object({ id: z.string(), at: z.string(), sideLabel: z.string(), title: z.string() })),
  }),
} as const satisfies RouteContract;

/* ── 工作流管理:流程包编排与版本 ─────────────────────────────────────── */

export const listProcessPackagesRoute = {
  method: 'GET',
  path: '/api/gov/process',
  output: z.object({ packages: z.array(processPackageSchema) }),
} as const satisfies RouteContract;

/**
 * 保存流程包 —— **严格检查 + 保存即生效**,没有发布这一道门。
 *
 * 不闭合即拒存(412 带闭合报告):存下来的就是能起单的。
 * 保存**恒产生新版本号**,由服务端算 —— body 里的 `version` 只用于「改的是哪一版」的溯源,
 * 服务端不采信它当目标版本号。在途工作流按 (包id, 版本) 读定义,就地覆盖会改掉它们读的东西。
 * 返回的 `pkg.version` 是**实际落的新版本**,`report` 是这一版的闭合报告(必然 closed)。
 */
export const saveProcessRoute = {
  method: 'PUT',
  path: '/api/gov/process',
  /**
   * 编辑即其身:pkg.version 已存在 → 就地写回该版(号不变)。
   * `asNew: true`(或版本不存在,如新流程首版)→ 产生新版本号(服务端算,不生效)。
   * 就地写回的两道闸:在途钉版 409;写回生效版不闭合 412(带整份报告)。
   */
  body: z.object({ pkg: processPackageSchema, asNew: z.boolean().optional() }),
  output: z.object({ pkg: processPackageSchema, report: closureReportSchema }),
} as const satisfies RouteContract;

/**
 * 版本启停 —— 运行时开关,不改定义一个字。
 * 激活某版:同流其余版本一并停用(一条流恰一个生效版本);停用生效版:整条流下线,新起单被拒。
 * 在途工作流按启动时钉住的版本跑完,启停对它们零影响。
 * 返回这条流启停后的全部版本(新→旧),界面直接以它刷新版本列表。
 */
export const setProcessStateRoute = {
  method: 'POST',
  path: '/api/gov/process/:id/:version/state',
  params: z.object({ id: z.string(), version: z.string() }),
  body: z.object({ state: z.enum(['active', 'retired']) }),
  output: z.object({ packages: z.array(processPackageSchema) }),
} as const satisfies RouteContract;

/**
 * 删一版 —— 两道闸(2026-07-30):
 *   · **生效版不可删**:先停用,免得手滑把正在起单的定义删了;
 *   · **在途钉版不可删**:那些单要按它跑完,定义没了就再也推不动。
 */
export const deleteProcessVersionRoute = {
  method: 'DELETE',
  path: '/api/gov/process/:id/:version',
  params: z.object({ id: z.string(), version: z.string() }),
  output: z.object({ packages: z.array(processPackageSchema) }),
} as const satisfies RouteContract;

/* ── 审批模板(审批活动)──────────────────────────────────────────────── */

/** 审批模板一览 —— 活动库里「审批活动」那一格看的就是它 */
export const listApprovalTemplatesRoute = {
  method: 'GET',
  path: '/api/gov/approval-templates',
  output: z.object({
    templates: z.array(
      approvalTemplateSchema.extend({
        /** 被哪些流程包的审批点引着 —— 删之前要能看见 */
        usedBy: z.array(z.object({ packageId: z.string(), nodeId: z.string() })),
      }),
    ),
  }),
} as const satisfies RouteContract;

/** 建或改一张模板 —— id 已存在即覆盖(模板是配置,不长版本) */
export const upsertApprovalTemplateRoute = {
  method: 'PUT',
  path: '/api/gov/approval-templates',
  body: z.object({ template: approvalTemplateSchema }),
  output: z.object({ template: approvalTemplateSchema }),
} as const satisfies RouteContract;

/** 删一张模板 —— 还被审批点引着就拒(409):删了引它的节点会退回「载荷全摊开」 */
export const deleteApprovalTemplateRoute = {
  method: 'DELETE',
  path: '/api/gov/approval-templates/:id',
  params: z.object({ id: z.string() }),
  output: z.object({ ok: z.boolean() }),
} as const satisfies RouteContract;

/**
 * 删整条流 —— 连同它的**所有版本**。货架上一条流一张卡,删的就是那张卡。
 * 两道闸:任一版有在途单即拒(那些单要按它跑完);还有调起规则指着它也拒 ——
 * 删了包留着规则,那规则再命中就调不动任何东西,是个哑火的配置。
 */
export const deleteProcessFlowRoute = {
  method: 'DELETE',
  path: '/api/gov/process/:id',
  params: z.object({ id: z.string() }),
  output: z.object({ packages: z.array(processPackageSchema) }),
} as const satisfies RouteContract;

/**
 * 改版本记录 —— **版本号自己定**(2026-07-29 用户定)、名字随之:改哪版只动哪版。
 *
 * 号从前只能由系统递增。设计人员要能自己编号(1 / 2 / 10 都行),所以放开;
 * 两条约束是数据本身要求的:号不许撞同流已有版本;**在途钉版不许改号**
 * (那些单正按这个号找定义)。已完结的单跟着改指 —— 号只是这一版的名牌,
 * 搬号连引用一起搬,留痕仍指同一份定义。
 */
export const editProcessVersionRoute = {
  method: 'POST',
  path: '/api/gov/process/:id/:version/edit',
  params: z.object({ id: z.string(), version: z.string() }),
  body: z.object({
    version: z.number().int().min(1).max(9999).optional(),
    name: z.string().min(1).max(40).optional(),
  }),
  output: z.object({ packages: z.array(processPackageSchema) }),
} as const satisfies RouteContract;

/** 画图即校验 —— 与前端画布同源;保存前随手看还差几条,不改任何状态 */

export const validateProcessRoute = {
  method: 'POST',
  path: '/api/gov/process/validate',
  body: z.object({ pkg: processPackageSchema }),
  output: closureReportSchema,
} as const satisfies RouteContract;

/* ── 触发器配置 ──────────────────────────────────────────────────────── */

export const listTriggersRoute = {
  method: 'GET',
  path: '/api/gov/triggers',
  output: z.object({ triggers: z.array(triggerConfigSchema) }),
} as const satisfies RouteContract;

export const toggleTriggerRoute = {
  method: 'POST',
  path: '/api/gov/triggers/:id/toggle',
  params: z.object({ id: z.string() }),
  body: z.object({ enabled: z.boolean() }),
  output: z.object({ ok: z.boolean() }),
} as const satisfies RouteContract;

/**
 * 调起规则的**定义面**(设计中心):新建 / 改规则 / 改起单装配。
 *
 * 与 `toggleTriggerRoute` 分开是有意的:定义归设计,启停归运营 ——
 * 同一个触发器,「它按什么规则调起」和「今天开不开」是两个人在两个台面上做的两件事。
 * 触发器与流程包平级:改它**不动任何包版本**。
 */
export const upsertTriggerRoute = {
  method: 'PUT',
  path: '/api/gov/triggers',
  body: z.object({ trigger: triggerConfigSchema }),
  output: z.object({ trigger: triggerConfigSchema }),
} as const satisfies RouteContract;

/* ── 员工管理 · 工作组(ADR-011) ───────────────────────────────────── */

/**
 * 工作组 = 一组「岗位 → 员工」的绑定,**起单时装载、随工作流走**。
 *
 * 它是**绑定先于策略**,不是第五种负责人策略:起单人有组,整条流的岗位就按组指人;
 * 没有组才回落四策略。装进工作流的是**快照** —— 改组不改已起的单。
 */
export const listWorkGroupsRoute = {
  method: 'GET',
  path: '/api/gov/work-groups',
  /** `ownerName` 是组长姓名的呈现补充,读表时一并带出,免得前端再对一次 id */
  output: z.object({ groups: z.array(workGroupSchema.extend({ ownerName: z.string() })) }),
} as const satisfies RouteContract;

/** 一人一组:按 `ownerId` 落,已有即更新、没有即新建 */
export const saveWorkGroupRoute = {
  method: 'PUT',
  path: '/api/gov/work-groups',
  body: z.object({
    ownerId: staffIdSchema,
    name: z.string().min(1),
    /** 岗位 code → 员工 id;留空的岗位不绑定,那一位仍走四策略 */
    members: z.record(z.string().min(1), staffIdSchema),
  }),
  output: z.object({ group: workGroupSchema }),
} as const satisfies RouteContract;

/* ── 活动库 · 装入 / 换版(安装通道) ─────────────────────────────── */

/**
 * 经安装通道装入活动包 —— **无代码通道**(ADR-004):交的是清单 + .js 产物,都是数据。
 *
 * 安装两审在服务端跑:静态审读清单(工具契约在否、模型名绑没绑、模版有没有脚本、
 * 声明与已物化的台账冲不冲),回放审重演历史(首装无历史即免,以样例集替代)。
 * **恒为新增、版本并存**:装入不覆盖旧版本,在途任务按其启动时版本跑完。
 */
export const installActivityRoute = {
  method: 'POST',
  path: '/api/gov/activities',
  body: z.object({
    /** 清单六区:身份 / 七件契约 / 声明 / 资产初始版 / 样例集 / 代码入口 */
    manifest: activityManifestSchema,
    /** .js 产物原文 —— 只当数据存,不 import、不 eval */
    artifact: z.string().min(1),
  }),
  output: z.object({
    accepted: z.boolean(),
    activityId: z.string(),
    packageVersion: z.string(),
    staticFindings: z.array(z.object({ code: z.string(), severity: z.string(), message: z.string() })),
    replay: z.object({
      oldPassStillPass: z.boolean(),
      checked: z.number().int(),
      skippedNoHistory: z.boolean(),
      regressions: z.array(z.object({ taskId: z.string(), detail: z.string() })),
    }),
  }),
} as const satisfies RouteContract;

/* ── 工具管理 · 导入自定义工具 ─────────────────────────────────────── */

/**
 * 导入自定义工具 —— 与第一方工具走**同一条门**:静态审 + 试运行审。
 *
 * 工具承载权力,约束严于活动包:契约对活动、实现对系统、凭证对治理台(OS 7.3)。
 * 连接配置**只声明键**;值随本次导入送到治理台加密落库,此后只读得到「是否已绑定」。
 */
export const registerToolRoute = {
  method: 'POST',
  path: '/api/gov/tools',
  body: z.object({
    contract: z.object({
      name: z.string().min(1),
      /** 中文名 —— 治理台主显示;不给就以逻辑名兜底(界面宁可显示机器名,不显示空白) */
      displayName: z.string().min(1).optional(),
      version: z.string().min(1),
      description: z.string().min(1),
      input: z.record(z.string(), z.unknown()),
      output: z.record(z.string(), z.unknown()),
      effect: z.enum(['read', 'write']),
      errors: z
        .array(z.object({ code: z.string(), retryable: z.boolean(), message: z.string() }))
        .default([]),
      idempotent: z.boolean().default(true),
      timeoutMs: z.number().int().positive().default(10_000),
      retries: z.number().int().min(0).default(1),
      connectionKeys: z.array(z.string()).default([]),
    }),
    /** 连接值只写不读 —— 键在契约里,值密封在治理台 */
    connectionValues: z.record(z.string(), z.string()).optional(),
    /** 契约测试集:没有样例就没有试运行审,门形同虚设 */
    samples: z.array(z.object({ input: z.record(z.string(), z.unknown()) })).min(1),
  }),
  output: z.object({
    accepted: z.boolean(),
    findings: z.array(z.object({ code: z.string(), severity: z.string(), message: z.string() })),
    trialRun: z.object({ ran: z.number().int(), passed: z.number().int(), failures: z.array(z.string()) }),
  }),
} as const satisfies RouteContract;

/* ── 活动库管理:两维分类 × 包版本 × 资产版本 ─────────────────────────── */

export const listActivitiesRoute = {
  method: 'GET',
  path: '/api/gov/activities',
  output: z.object({
    activities: z.array(
      z.object({
        activityId: z.string(),
        name: z.string(),
        category: z.string(),
              enabled: z.boolean(),
        packageVersions: z.array(z.object({ version: z.string(), state: z.string(), installedAt: z.string() })),
        assetVersions: z.array(z.object({ kind: z.string(), version: z.number().int(), effective: z.boolean() })),
        /**
         * 契约面 —— 开发这个活动要照着的东西:吃什么、吐什么、用谁的工具、动哪些域对象。
         * 治理台不给这一层,「编排定契约」就只是句口号:编排的人看不到自己引用的活动要什么。
         */
        contract: z.object({
          requiredInputs: z.array(z.string()),
          inputFields: z.array(z.object({ name: z.string(), type: z.string(), required: z.boolean() })),
          outputPorts: z.array(
            z.object({
              name: z.string(),
              description: z.string().optional(),
              /** 字段名 + 类型;**数组写成 `T[]`**(如 `object[]`)—— 声明得看得出是不是一串 */
              fields: z.array(z.object({ name: z.string(), type: z.string() })),
            }),
          ),
          tools: z.array(z.string()),
          models: z.array(z.string()),
          objects: z.array(z.string()),
          roles: z.array(z.string()),
          humanCallBudget: z.number().int(),
        }),
      }),
    ),
  }),
} as const satisfies RouteContract;

/* ── 工具管理 ────────────────────────────────────────────────────────── */

export const listToolsRoute = {
  method: 'GET',
  path: '/api/gov/tools',
  output: z.object({
    tools: z.array(
      z.object({
        name: z.string(),
        /** 中文名 —— 治理台主显示;逻辑名退居副标 */
        displayName: z.string(),
        version: z.string(),
        description: z.string(),
        effect: z.enum(['read', 'write']),
        pure: z.boolean(),
        connectionKeys: z.array(z.string()),
      }),
    ),
  }),
} as const satisfies RouteContract;

/* ── 数据管理:域 / 对象目录 + 记录浏览 ───────────────────────────────── */

export const listLedgerObjectsRoute = {
  method: 'GET',
  path: '/api/gov/data/objects',
  /** `label` 是人读名(落在表注释上);缺省即没登记,呈现退回对象键 */
  output: z.object({
    objects: z.array(z.object({ domain: z.string(), object: z.string(), label: z.string().optional() })),
  }),
} as const satisfies RouteContract;

export const browseLedgerRoute = {
  method: 'GET',
  path: '/api/gov/data/:domain/:object',
  params: z.object({ domain: z.string(), object: z.string() }),
  output: z.object({
    label: z.string().optional(),
    columns: z.array(z.object({ name: z.string(), type: z.string(), label: z.string().optional() })),
    primaryKey: z.array(z.string()),
    rows: z.array(z.record(z.string(), z.unknown())),
    total: z.number().int(),
  }),
} as const satisfies RouteContract;

/* ── 记忆管理:活动记忆四层 ──────────────────────────────────────────── */

export const listActivityMemoryRoute = {
  method: 'GET',
  path: '/api/gov/memory/:activityId',
  params: z.object({ activityId: z.string() }),
  output: z.object({
    entries: z.array(
      z.object({
        id: z.string(),
        layer: z.string(),
        statement: z.string(),
        evidenceCount: z.number().int(),
        incrementState: z.string().optional(),
        createdAt: z.string(),
      }),
    ),
  }),
} as const satisfies RouteContract;

/* ── 系统管理 · 通道实例 ──────────────────────────────────────────────── */

/** 通道配置里本就没有凭证字段(凭证只在治理台的连接配置中,ADR-009);此处整体可回 */
export const listChannelsRoute = {
  method: 'GET',
  path: '/api/gov/channels',
  output: z.object({
    channels: z.array(
      z.object({
        id: z.string(),
        name: z.string(),
        kind: z.enum(['mail', 'im']),
        address: z.string(),
        enabled: z.boolean(),
        extractCount: z.number().int(),
        /**
         * 抽键规则原文 —— 测试台的**抽键预检**要在人打字时就点灯,
         * 跑的必须是与服务端同一套正则,不是前端另编的一套(正则不是密钥,回它无妨)。
         */
        extract: z
          .array(z.object({ key: z.string(), regex: z.string(), source: z.enum(['subject', 'body', 'from', 'to', 'both']) }))
          .default([]),
        mappingCount: z.number().int(),
        fallbackPosition: z.string().optional(),
        addressWindowMs: z.number().int(),
      }),
    ),
  }),
} as const satisfies RouteContract;

/* ── 任务管理 · 审批单 ────────────────────────────────────────────────── */

/** 审批单不是任务:没有预算、没有任务日志,只有批不批(卡在审批人工位的验收工单) */
export const listApprovalsRoute = {
  method: 'GET',
  path: '/api/gov/approvals',
  output: z.object({
    approvals: z.array(
      z.object({
        id: z.string(),
        workflowId: z.string(),
        workflowSubject: z.string(),
        title: z.string(),
        approverName: z.string(),
        state: z.enum(['pending', 'passed', 'rejected']),
        issuedAt: z.string(),
      }),
    ),
  }),
} as const satisfies RouteContract;

/* ── 工作流下钻:实例 × 节点 ──────────────────────────────────────────── */

/* ── 设计台 · 仿真测试台 ─────────────────────────────────────────────── */

/**
 * 起一条流(测试台专用):**带节点指派**把整条流定向到指定账号 ——
 * 真实任务照旧落到那个人的工作台,测试台只管起单与观测。
 */
/**
 * 触发器的**运营配置**:要不要人工确认、谁来确认 —— 与设计面的 upsert 分口,
 * 设计动规则不碰这两项,运营动这两项不碰规则。
 */
export const setTriggerConfirmRoute = {
  method: 'POST',
  path: '/api/gov/triggers/:id/confirm',
  params: z.object({ id: z.string() }),
  body: z.object({ required: z.boolean(), staffId: z.string().optional() }),
  output: z.object({ ok: z.boolean() }),
} as const satisfies RouteContract;

/** 节点负责人(运营配置):流程包的哪个节点归谁 —— 显式指派 > 这里 > 轮值 */
export const listNodeOwnersRoute = {
  method: 'GET',
  path: '/api/gov/packages/:id/owners',
  params: z.object({ id: z.string() }),
  output: z.object({ owners: z.array(z.object({ nodeId: z.string(), staffId: z.string() })) }),
} as const satisfies RouteContract;

export const setNodeOwnerRoute = {
  method: 'PUT',
  path: '/api/gov/packages/:id/owners/:nodeId',
  params: z.object({ id: z.string(), nodeId: z.string() }),
  /** null = 撤掉运营指定,回到轮值 */
  body: z.object({ staffId: z.string().nullable() }),
  output: z.object({ ok: z.boolean() }),
} as const satisfies RouteContract;

export const testRunRoute = {
  method: 'POST',
  path: '/api/gov/testbed/run',
  body: z.object({
    packageId: z.string(),
    /**
     * 启动输入**就是一封信** —— 这条流真实的起法即客户来信(RFQ 正文 + BOM 附件)。
     * 服务端拿**真通道的抽键规则**抽出关联键、拿**真触发器的装配映射**推出调用入参:
     * 测试台不自带一套解析,否则试通的是测试台、不是这条流。
     */
    mail: z.object({
      from: z.string().min(1),
      /**
       * 收件箱**不由界面写**(2026-07-29):投给哪个信箱是通道配置的事,不是造信的人该操心的。
       * 留空 = 服务端取在用的邮件通道(与线上真来一封信同一条路)。
       */
      to: z.string().default(''),
      subject: z.string(),
      body: z.string(),
      attachments: z
        .array(z.object({ name: z.string(), contentType: z.string(), size: z.number().int().min(0) }))
        .default([]),
    }),
    /** 节点指派 `{ 节点id → 员工id }`;不指的节点照旧轮值 */
    assignments: z.record(z.string(), z.string()).default({}),
  }),
  output: z.object({ workflowId: z.string(), state: workflowStateSchema }),
} as const satisfies RouteContract;

/**
 * 停止仿真 —— **把这一单连根拔掉**:工作流、它的活动任务、工单、实例、trace 全部销毁。
 * 仿真不是生产:试跑留下的东西不该在库里、在别人工作台上过夜。
 */
export const testStopRoute = {
  method: 'POST',
  path: '/api/gov/testbed/stop',
  body: z.object({ workflowId: z.string() }),
  output: z.object({ destroyed: z.boolean(), tasks: z.number().int() }),
} as const satisfies RouteContract;

/** 当前在跑的仿真(测试台一次只跑一条)—— 刷新页面也认得回来 */
export const testCurrentRoute = {
  method: 'GET',
  path: '/api/gov/testbed/current',
  output: z.object({ workflowId: z.string().optional(), subject: z.string().optional() }),
} as const satisfies RouteContract;

/** 全链 Trace:一条工作流的 span 树(节点 → 步骤 / 工具 / 模型 / 人卡) */
export const traceOfWorkflowRoute = {
  method: 'GET',
  path: '/api/gov/workflows/:id/trace',
  params: z.object({ id: z.string() }),
  output: z.object({
    spans: z.array(
      z.object({
        id: z.string(),
        traceId: z.string(),
        parentId: z.string().optional(),
        name: z.string(),
        kind: z.enum(['workflow', 'node', 'step', 'tool', 'model', 'human']),
        nodeId: z.string().optional(),
        taskId: z.string().optional(),
        input: z.record(z.string(), z.unknown()).optional(),
        output: z.record(z.string(), z.unknown()).optional(),
        error: z.object({ message: z.string() }).optional(),
        attributes: z.record(z.string(), z.unknown()).optional(),
        startedAt: z.string(),
        endedAt: z.string().optional(),
      }),
    ),
  }),
} as const satisfies RouteContract;

export const govWorkflowRoute = {
  method: 'GET',
  path: '/api/gov/workflows/:id',
  params: z.object({ id: z.string() }),
  output: z.object({
    workflow: z.object({
      id: z.string(),
      subject: z.string(),
      state: workflowStateSchema,
      packageId: z.string(),
      packageVersion: z.number().int(),
      source: z.object({ kind: z.string(), ref: z.string(), by: z.string().optional() }),
      startedAt: z.string(),
      finishedAt: z.string().optional(),
    }),
    pkg: processPackageSchema,
    instances: z.array(
      z.object({
        nodeId: z.string(),
        instance: z.number().int(),
        running: z.boolean(),
        waiting: z.boolean(),
        activated: z.boolean(),
        terminal: terminalStateSchema.optional(),
      }),
    ),
    tasks: z.array(z.object({ id: taskIdSchema, nodeId: z.string(), title: z.string(), ownerName: z.string() })),
  }),
} as const satisfies RouteContract;

/* ── 记忆管理 · 度量仪表 ──────────────────────────────────────────────── */

/**
 * 度量八指标(OS 8.3)—— 运营驾驶舱的仪表读数。
 *
 * 出参直接复用 `reportMetricsSchema`:**与工作台汇报同源同口径**。
 * 治理台若另算一套,同一个组织会读出两个自主率 —— 那时候争的就不是数,是谁的表准。
 * 自主率与纠正率**成对读**,复合为有效自主率 —— 单看自主率会奖励「猛冲后返工」。
 */
export const govMetricsRoute = {
  method: 'GET',
  path: '/api/gov/metrics',
  /** 统计窗口 —— 不传按月;驾驶舱可切日/周/月/年 */
  query: z.object({ period: reportPeriodSchema.optional() }),
  /** `period` 原样回声:客户端不传时,由它知道服务端用的是哪个窗口 */
  output: reportMetricsSchema.extend({ taskCount: z.number().int(), period: reportPeriodSchema }),
} as const satisfies RouteContract;

/* ── 出参类型:契约自己命名,消费方不再 `z.infer` ──────────────────────── */

export type GovTasksOutput = z.infer<typeof listGovTasksRoute.output>;
export type GovWorkGroupsOutput = z.infer<typeof listWorkGroupsRoute.output>;
export type GovApprovalsOutput = z.infer<typeof listApprovalsRoute.output>;
export type GovStaffOutput = z.infer<typeof listStaffRoute.output>;
export type GovGrantsOutput = z.infer<typeof listGrantsRoute.output>;
export type GovPackagesOutput = z.infer<typeof listProcessPackagesRoute.output>;
export type GovTriggersOutput = z.infer<typeof listTriggersRoute.output>;
export type GovActivitiesOutput = z.infer<typeof listActivitiesRoute.output>;
export type GovToolsOutput = z.infer<typeof listToolsRoute.output>;
export type GovObjectsOutput = z.infer<typeof listLedgerObjectsRoute.output>;
export type GovLedgerPageOutput = z.infer<typeof browseLedgerRoute.output>;
export type GovMemoryOutput = z.infer<typeof listActivityMemoryRoute.output>;
export type GovMetricsOutput = z.infer<typeof govMetricsRoute.output>;
export type GovChannelsOutput = z.infer<typeof listChannelsRoute.output>;
export type GovLlmOutput = z.infer<typeof listLlmInstancesRoute.output>;
export type GovWorkflowOutput = z.infer<typeof govWorkflowRoute.output>;
export type GovTaskLogOutput = z.infer<typeof govTaskLogRoute.output>;