Archived
编排层③:活动装入/换版入口 —— 开发完能装进来,不必跑种子
此前活动只能靠 seed 装入,治理台没有任何入口 —— 这是「逐个开发活动」的拦路石。 补 POST /api/gov/activities(无代码通道:交清单 + .js 产物,都是数据), 两审在服务端跑;不过审按发布门同样的式样回 412 + ApiError.detail 带审计结论 (直接回业务体的话类型化客户端拿不到详情)。活动库给「装入 / 换版」卡:选文件或粘贴两份。 实测:0.1.0 → 0.2.0 版本并存;声明未注册的工具即 412 并点名到工具。 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m
This commit is contained in:
Claude Fable 5
@@ -1531,6 +1531,398 @@ export declare const saveWorkGroupRoute: {
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
};
|
||||
/**
|
||||
* 经安装通道装入活动包 —— **无代码通道**(ADR-004):交的是清单 + .js 产物,都是数据。
|
||||
*
|
||||
* 安装两审在服务端跑:静态审读清单(工具契约在否、模型名绑没绑、模版有没有脚本、
|
||||
* 声明与已物化的台账冲不冲),回放审重演历史(首装无历史即免,以样例集替代)。
|
||||
* **恒为新增、版本并存**:装入不覆盖旧版本,在途任务按其启动时版本跑完。
|
||||
*/
|
||||
export declare const installActivityRoute: {
|
||||
readonly method: "POST";
|
||||
readonly path: "/api/gov/activities";
|
||||
readonly body: z.ZodObject<{
|
||||
manifest: z.ZodObject<{
|
||||
identity: z.ZodObject<{
|
||||
activityId: z.core.$ZodBranded<z.ZodString, "ActivityId", "out">;
|
||||
name: z.ZodString;
|
||||
packageVersion: z.ZodString;
|
||||
category: z.ZodString;
|
||||
paradigm: z.ZodEnum<{
|
||||
loop: "loop";
|
||||
flow: "flow";
|
||||
}>;
|
||||
sdkVersion: z.ZodString;
|
||||
checksum: z.ZodString;
|
||||
signature: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>;
|
||||
contract: z.ZodObject<{
|
||||
activityId: z.core.$ZodBranded<z.ZodString, "ActivityId", "out">;
|
||||
version: z.ZodString;
|
||||
input: z.ZodObject<{
|
||||
data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
messageAllowed: z.ZodDefault<z.ZodBoolean>;
|
||||
messageHint: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>;
|
||||
output: z.ZodObject<{
|
||||
mandatory: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
description: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
selective: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
group: z.ZodString;
|
||||
ports: z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
description: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>>>;
|
||||
}, z.core.$strip>;
|
||||
requiredDeliverables: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
key: z.ZodString;
|
||||
label: z.ZodString;
|
||||
schema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
|
||||
}, z.core.$strip>>>;
|
||||
acceptanceCriteria: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
key: z.ZodString;
|
||||
label: z.ZodString;
|
||||
level: z.ZodEnum<{
|
||||
L1: "L1";
|
||||
L2: "L2";
|
||||
L3: "L3";
|
||||
L4: "L4";
|
||||
L5: "L5";
|
||||
}>;
|
||||
predicate: z.ZodOptional<z.ZodString>;
|
||||
modelRef: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
prohibitions: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
key: z.ZodString;
|
||||
statement: z.ZodString;
|
||||
}, z.core.$strip>>>;
|
||||
authorization: z.ZodObject<{
|
||||
discretion: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
key: z.ZodString;
|
||||
statement: z.ZodString;
|
||||
}, z.core.$strip>>>;
|
||||
preauthorizedActions: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
tool: z.ZodString;
|
||||
operation: z.ZodString;
|
||||
limit: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
humanCallBudget: z.ZodNumber;
|
||||
}, z.core.$strip>;
|
||||
resources: z.ZodObject<{
|
||||
tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
version: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
skills: z.ZodDefault<z.ZodArray<z.core.$ZodBranded<z.ZodString, "SkillId", "out">>>;
|
||||
models: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
budget: z.ZodObject<{
|
||||
steps: z.ZodNumber;
|
||||
tokens: z.ZodNumber;
|
||||
activeMinutes: z.ZodNumber;
|
||||
humanCalls: z.ZodNumber;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
declarations: z.ZodObject<{
|
||||
models: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
version: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
ledger: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
domain: z.ZodString;
|
||||
object: z.ZodString;
|
||||
label: z.ZodOptional<z.ZodString>;
|
||||
fields: z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
type: z.ZodEnum<{
|
||||
number: "number";
|
||||
boolean: "boolean";
|
||||
json: "json";
|
||||
text: "text";
|
||||
date: "date";
|
||||
integer: "integer";
|
||||
timestamp: "timestamp";
|
||||
}>;
|
||||
label: z.ZodOptional<z.ZodString>;
|
||||
primaryKey: z.ZodDefault<z.ZodBoolean>;
|
||||
masked: z.ZodDefault<z.ZodBoolean>;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>>>;
|
||||
listeners: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
origin: z.ZodEnum<{
|
||||
static: "static";
|
||||
dynamic: "dynamic";
|
||||
}>;
|
||||
eventType: z.ZodEnum<{
|
||||
human: "human";
|
||||
data: "data";
|
||||
time: "time";
|
||||
control: "control";
|
||||
}>;
|
||||
keyFilter: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
condition: z.ZodOptional<z.ZodString>;
|
||||
semantic: z.ZodEnum<{
|
||||
observe: "observe";
|
||||
"complete-step": "complete-step";
|
||||
}>;
|
||||
deadline: z.ZodString;
|
||||
escalation: z.ZodDefault<z.ZodArray<z.ZodEnum<{
|
||||
nudge: "nudge";
|
||||
reroute: "reroute";
|
||||
escalate: "escalate";
|
||||
}>>>;
|
||||
}, z.core.$strip>>>;
|
||||
harness: z.ZodObject<{
|
||||
memoryWindow: z.ZodDefault<z.ZodNumber>;
|
||||
stallAfter: z.ZodDefault<z.ZodString>;
|
||||
nudge: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
after: z.ZodString;
|
||||
action: z.ZodEnum<{
|
||||
nudge: "nudge";
|
||||
escalate: "escalate";
|
||||
}>;
|
||||
}, z.core.$strip>>>;
|
||||
retry: z.ZodDefault<z.ZodObject<{
|
||||
times: z.ZodDefault<z.ZodNumber>;
|
||||
backoff: z.ZodDefault<z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
assets: z.ZodObject<{
|
||||
businessModel: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
paradigm: z.ZodLiteral<"loop">;
|
||||
cmmnXml: z.ZodString;
|
||||
narrative: z.ZodString;
|
||||
dmn: z.ZodObject<{
|
||||
drd: z.ZodArray<z.ZodObject<{
|
||||
decision: z.ZodString;
|
||||
requires: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
inputs: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
}, z.core.$strip>>;
|
||||
tables: z.ZodArray<z.ZodObject<{
|
||||
id: z.ZodString;
|
||||
label: z.ZodString;
|
||||
hitPolicy: z.ZodDefault<z.ZodEnum<{
|
||||
UNIQUE: "UNIQUE";
|
||||
FIRST: "FIRST";
|
||||
PRIORITY: "PRIORITY";
|
||||
COLLECT: "COLLECT";
|
||||
}>>;
|
||||
inputs: z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
expression: z.ZodString;
|
||||
}, z.core.$strip>>;
|
||||
outputs: z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
}, z.core.$strip>>;
|
||||
rules: z.ZodArray<z.ZodObject<{
|
||||
id: z.ZodString;
|
||||
when: z.ZodArray<z.ZodString>;
|
||||
then: z.ZodArray<z.ZodUnknown>;
|
||||
annotation: z.ZodOptional<z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
paradigm: z.ZodLiteral<"flow">;
|
||||
steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
kind: z.ZodLiteral<"tool">;
|
||||
tool: z.ZodString;
|
||||
name: z.ZodString;
|
||||
label: z.ZodString;
|
||||
input: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
output: z.ZodOptional<z.ZodObject<{
|
||||
domain: z.ZodString;
|
||||
object: z.ZodString;
|
||||
key: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
fields: z.ZodRecord<z.ZodString, z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
when: z.ZodOptional<z.ZodString>;
|
||||
view: z.ZodOptional<z.ZodString>;
|
||||
failure: z.ZodObject<{
|
||||
retry: z.ZodObject<{
|
||||
times: z.ZodNumber;
|
||||
backoff: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
fallback: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
kind: z.ZodLiteral<"human">;
|
||||
workOrder: z.ZodEnum<{
|
||||
execution: "execution";
|
||||
acceptance: "acceptance";
|
||||
}>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"blocked">;
|
||||
}, z.core.$strip>], "kind">;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"llm">;
|
||||
model: z.ZodString;
|
||||
template: z.ZodString;
|
||||
outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
name: z.ZodString;
|
||||
label: z.ZodString;
|
||||
input: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
output: z.ZodOptional<z.ZodObject<{
|
||||
domain: z.ZodString;
|
||||
object: z.ZodString;
|
||||
key: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
fields: z.ZodRecord<z.ZodString, z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
when: z.ZodOptional<z.ZodString>;
|
||||
view: z.ZodOptional<z.ZodString>;
|
||||
failure: z.ZodObject<{
|
||||
retry: z.ZodObject<{
|
||||
times: z.ZodNumber;
|
||||
backoff: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
fallback: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
kind: z.ZodLiteral<"human">;
|
||||
workOrder: z.ZodEnum<{
|
||||
execution: "execution";
|
||||
acceptance: "acceptance";
|
||||
}>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"blocked">;
|
||||
}, z.core.$strip>], "kind">;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"human">;
|
||||
workOrder: z.ZodEnum<{
|
||||
execution: "execution";
|
||||
acceptance: "acceptance";
|
||||
}>;
|
||||
card: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
deadline: z.ZodString;
|
||||
name: z.ZodString;
|
||||
label: z.ZodString;
|
||||
input: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
output: z.ZodOptional<z.ZodObject<{
|
||||
domain: z.ZodString;
|
||||
object: z.ZodString;
|
||||
key: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
fields: z.ZodRecord<z.ZodString, z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
when: z.ZodOptional<z.ZodString>;
|
||||
view: z.ZodOptional<z.ZodString>;
|
||||
failure: z.ZodObject<{
|
||||
retry: z.ZodObject<{
|
||||
times: z.ZodNumber;
|
||||
backoff: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
fallback: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
kind: z.ZodLiteral<"human">;
|
||||
workOrder: z.ZodEnum<{
|
||||
execution: "execution";
|
||||
acceptance: "acceptance";
|
||||
}>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"blocked">;
|
||||
}, z.core.$strip>], "kind">;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"pure-tool">;
|
||||
tool: z.ZodString;
|
||||
name: z.ZodString;
|
||||
label: z.ZodString;
|
||||
input: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
output: z.ZodOptional<z.ZodObject<{
|
||||
domain: z.ZodString;
|
||||
object: z.ZodString;
|
||||
key: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
||||
fields: z.ZodRecord<z.ZodString, z.ZodString>;
|
||||
}, z.core.$strip>>;
|
||||
when: z.ZodOptional<z.ZodString>;
|
||||
view: z.ZodOptional<z.ZodString>;
|
||||
failure: z.ZodObject<{
|
||||
retry: z.ZodObject<{
|
||||
times: z.ZodNumber;
|
||||
backoff: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
fallback: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
||||
kind: z.ZodLiteral<"human">;
|
||||
workOrder: z.ZodEnum<{
|
||||
execution: "execution";
|
||||
acceptance: "acceptance";
|
||||
}>;
|
||||
}, z.core.$strip>, z.ZodObject<{
|
||||
kind: z.ZodLiteral<"blocked">;
|
||||
}, z.core.$strip>], "kind">;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>], "kind">>;
|
||||
parallelGroups: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
steps: z.ZodArray<z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
}, z.core.$strip>], "paradigm">;
|
||||
skills: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
id: z.core.$ZodBranded<z.ZodString, "SkillId", "out">;
|
||||
label: z.ZodString;
|
||||
applicability: z.ZodString;
|
||||
method: z.ZodString;
|
||||
crystallized: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
tool: z.ZodString;
|
||||
input: z.ZodRecord<z.ZodString, z.ZodString>;
|
||||
}, z.core.$strip>>>;
|
||||
knowledgeRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
||||
version: z.ZodString;
|
||||
}, z.core.$strip>>>;
|
||||
viewTemplates: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
html: z.ZodString;
|
||||
}, z.core.$strip>>>;
|
||||
cardSchemas: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
|
||||
distillHooks: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
||||
on: z.ZodEnum<{
|
||||
terminal: "terminal";
|
||||
milestone: "milestone";
|
||||
}>;
|
||||
milestone: z.ZodOptional<z.ZodString>;
|
||||
prompt: z.ZodString;
|
||||
}, z.core.$strip>>>;
|
||||
}, z.core.$strip>;
|
||||
samples: z.ZodArray<z.ZodObject<{
|
||||
name: z.ZodString;
|
||||
input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
|
||||
message: z.ZodOptional<z.ZodString>;
|
||||
expect: z.ZodObject<{
|
||||
ports: z.ZodArray<z.ZodString>;
|
||||
payloadShape: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>>;
|
||||
entry: z.ZodObject<{
|
||||
file: z.ZodString;
|
||||
checksum: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
artifact: z.ZodString;
|
||||
}, z.core.$strip>;
|
||||
readonly output: z.ZodObject<{
|
||||
accepted: z.ZodBoolean;
|
||||
activityId: z.ZodString;
|
||||
packageVersion: z.ZodString;
|
||||
staticFindings: z.ZodArray<z.ZodObject<{
|
||||
code: z.ZodString;
|
||||
severity: z.ZodString;
|
||||
message: z.ZodString;
|
||||
}, z.core.$strip>>;
|
||||
replay: z.ZodObject<{
|
||||
oldPassStillPass: z.ZodBoolean;
|
||||
checked: z.ZodNumber;
|
||||
skippedNoHistory: z.ZodBoolean;
|
||||
regressions: z.ZodArray<z.ZodObject<{
|
||||
taskId: z.ZodString;
|
||||
detail: z.ZodString;
|
||||
}, z.core.$strip>>;
|
||||
}, z.core.$strip>;
|
||||
}, z.core.$strip>;
|
||||
};
|
||||
/**
|
||||
* 导入自定义工具 —— 与第一方工具走**同一条门**:静态审 + 试运行审。
|
||||
*
|
||||
|
||||
@@ -19,6 +19,7 @@ import {
|
||||
listActivityMemoryRoute,
|
||||
listGovTasksRoute,
|
||||
listLedgerObjectsRoute,
|
||||
installActivityRoute,
|
||||
listProcessPackagesRoute,
|
||||
listToolsRoute,
|
||||
listTriggersRoute,
|
||||
@@ -33,6 +34,8 @@ import {
|
||||
upsertTriggerRoute,
|
||||
validateProcessRoute,
|
||||
} from '@contracts';
|
||||
import { InstallRejectedError } from '@modules/activity-registry';
|
||||
import type { InstallVerdict } from '@modules/activity-registry';
|
||||
import { NotPublishableError } from '@modules/process';
|
||||
import type { Container } from '../container.ts';
|
||||
import type { AppEnv } from '../http-env.ts';
|
||||
@@ -63,6 +66,7 @@ export function registerGovernanceOpsRoutes(app: Hono<AppEnv>, container: Contai
|
||||
const readTrigger = guard('trigger', 'read');
|
||||
const governTrigger = guard('trigger', 'govern');
|
||||
const readActivity = guard('activity', 'read');
|
||||
const governActivity = guard('activity', 'govern');
|
||||
const readTool = guard('tool', 'read');
|
||||
const governTool = guard('tool', 'govern');
|
||||
const readData = guard('data', 'read');
|
||||
@@ -351,6 +355,51 @@ export function registerGovernanceOpsRoutes(app: Hono<AppEnv>, container: Contai
|
||||
|
||||
/* ── 活动库管理:两维分类 × 两条版本序列 ─────────────────────────── */
|
||||
|
||||
/**
|
||||
* 装入 / 换版 —— 经**安装通道**,无代码通道(ADR-004):交清单 + .js 产物,都是数据。
|
||||
* 两审在这里跑;不过审即 412 并把审计结论原样回给人看,不静默失败。
|
||||
* 恒为新增、版本并存:装入不覆盖旧版本,在途任务按启动时版本跑完。
|
||||
*/
|
||||
app.post(installActivityRoute.path, async (c) => {
|
||||
const denied = await governActivity(c.get('account'));
|
||||
if (denied) return c.json(denied, denyStatus(denied));
|
||||
const parsed = installActivityRoute.body.safeParse(await c.req.json());
|
||||
if (!parsed.success) {
|
||||
const body: ApiError = { code: 'validation-failed', message: '活动清单不合 schema', detail: parsed.error.issues };
|
||||
return c.json(body, 400);
|
||||
}
|
||||
const { manifest, artifact } = parsed.data;
|
||||
const reply = (verdict: InstallVerdict, accepted: boolean) => ({
|
||||
accepted,
|
||||
activityId: manifest.identity.activityId,
|
||||
packageVersion: manifest.identity.packageVersion,
|
||||
staticFindings: verdict.staticFindings.map((f) => ({ code: f.code, severity: f.severity, message: f.message })),
|
||||
replay: {
|
||||
oldPassStillPass: verdict.replay.oldPassStillPass,
|
||||
checked: verdict.replay.checked,
|
||||
skippedNoHistory: verdict.replay.skippedNoHistory,
|
||||
regressions: verdict.replay.regressions.map((r) => ({ taskId: r.taskId, detail: r.detail })),
|
||||
},
|
||||
});
|
||||
try {
|
||||
return c.json(reply(await container.registry.install(manifest, artifact), true));
|
||||
} catch (error) {
|
||||
if (error instanceof InstallRejectedError) {
|
||||
/*
|
||||
* 两审未过:不上架。**按 ApiError 形状回**(与发布门一致)——
|
||||
* 类型化客户端只从 `detail` 取详情,直接回业务体的话前端拿不到审计结论。
|
||||
*/
|
||||
const body: ApiError = {
|
||||
code: 'precondition-failed',
|
||||
message: error.message,
|
||||
detail: reply(error.verdict, false),
|
||||
};
|
||||
return c.json(body, 412);
|
||||
}
|
||||
throw error;
|
||||
}
|
||||
});
|
||||
|
||||
app.get(listActivitiesRoute.path, async (c) => {
|
||||
const denied = await readActivity(c.get('account'));
|
||||
if (denied) return c.json(denied, denyStatus(denied));
|
||||
|
||||
@@ -6,7 +6,37 @@
|
||||
* 区首页只负责导航,治理动作一律落在下钻详情页的**就地确认带**(影响预览三必答)。
|
||||
*/
|
||||
import { Ico } from '@web-shared/Ico.tsx';
|
||||
import { Card, Chip, Clear, Entry, Note, PageHead, Prop, QueryGate, St } from '@web-shared/gov/primitives.tsx';
|
||||
import { useState } from 'react';
|
||||
import { useMutation, useQueryClient } from '@tanstack/react-query';
|
||||
import { installActivityRoute } from '@contracts';
|
||||
import { ApiCallError, call } from '@web-shared/typed-fetch.ts';
|
||||
import {
|
||||
Acts,
|
||||
Card,
|
||||
Chip,
|
||||
Clear,
|
||||
Entry,
|
||||
Field,
|
||||
Note,
|
||||
PageHead,
|
||||
Prop,
|
||||
QueryGate,
|
||||
St,
|
||||
} from '@web-shared/gov/primitives.tsx';
|
||||
|
||||
/** 装入回参 —— 与 `installActivityRoute.output` 同形 */
|
||||
type InstallReply = {
|
||||
accepted: boolean;
|
||||
activityId: string;
|
||||
packageVersion: string;
|
||||
staticFindings: ReadonlyArray<{ code: string; severity: string; message: string }>;
|
||||
replay: {
|
||||
oldPassStillPass: boolean;
|
||||
checked: number;
|
||||
skippedNoHistory: boolean;
|
||||
regressions: ReadonlyArray<{ taskId: string; detail: string }>;
|
||||
};
|
||||
};
|
||||
import { PARA } from '@web-shared/gov/tone.ts';
|
||||
import type { Nav } from '@web-shared/gov/gov-route.ts';
|
||||
import {
|
||||
@@ -27,6 +57,7 @@ export function LibraryHome({ nav }: HomeProps) {
|
||||
每活动两条版本序列——包版本走安装两审,资产版本走进化管线。
|
||||
<b>审批点与网关不在这里</b>:它们是流程层的系统内置要素,零开发、不入库。
|
||||
</Note>
|
||||
<InstallCard />
|
||||
{activities.length === 0 ? (
|
||||
<Clear>货架是空的 —— 装一个活动进来,编排里才引用得到它。</Clear>
|
||||
) : (
|
||||
@@ -187,3 +218,141 @@ export function ActPage({ id, nav }: { id: string; nav: Nav }) {
|
||||
);
|
||||
}
|
||||
|
||||
/* ---------------- 装入 / 换版(安装通道) ---------------- */
|
||||
|
||||
/**
|
||||
* 开发完一个活动,从这里装进来 —— **无代码通道**(ADR-004):交的是清单 + .js 产物,都是数据。
|
||||
*
|
||||
* 两审在服务端跑:静态审读清单,回放审重演历史(首装无历史即免)。
|
||||
* 恒为新增、版本并存:装入不覆盖旧版本,在途任务按其启动时版本跑完。
|
||||
*/
|
||||
function InstallCard() {
|
||||
const queryClient = useQueryClient();
|
||||
const [open, setOpen] = useState(false);
|
||||
const [manifestText, setManifestText] = useState('');
|
||||
const [artifact, setArtifact] = useState('');
|
||||
|
||||
const install = useMutation({
|
||||
mutationFn: () =>
|
||||
call<InstallReply>(installActivityRoute, {
|
||||
body: { manifest: JSON.parse(manifestText) as unknown, artifact },
|
||||
}),
|
||||
onSuccess: (out) => {
|
||||
if (out.accepted) {
|
||||
void queryClient.invalidateQueries({ queryKey: ['gov', 'activities'] });
|
||||
setOpen(false);
|
||||
}
|
||||
},
|
||||
});
|
||||
|
||||
const pick = (setter: (text: string) => void) => async (e: React.ChangeEvent<HTMLInputElement>) => {
|
||||
const file = e.target.files?.[0];
|
||||
if (file !== undefined) setter(await file.text());
|
||||
};
|
||||
|
||||
/** 两审未过的结论:412 走的是 ApiCallError,详情在 detail 里 */
|
||||
const rejected =
|
||||
install.error instanceof ApiCallError && install.error.status === 412
|
||||
? (install.error.detail as InstallReply | undefined)
|
||||
: install.data?.accepted === false
|
||||
? install.data
|
||||
: undefined;
|
||||
|
||||
if (!open) {
|
||||
return (
|
||||
<Card
|
||||
ico="package"
|
||||
title="装入 / 换版"
|
||||
extra={
|
||||
<button className="g-btn primary" onClick={() => setOpen(true)}>
|
||||
装一个活动
|
||||
</button>
|
||||
}
|
||||
>
|
||||
<Note>
|
||||
交<b>清单</b>(manifest.json)+ <b>产物</b>(index.js)两份文件,两审当场跑:
|
||||
静态审读清单(工具契约在否、模型名绑没绑、声明与已物化台账冲不冲),
|
||||
回放审重演历史成功单 —— <b>旧成不坏</b>是生效硬门,首装无历史即免。
|
||||
恒为新增、版本并存:装入不覆盖旧版本,在途任务按启动时版本跑完。
|
||||
</Note>
|
||||
</Card>
|
||||
);
|
||||
}
|
||||
|
||||
return (
|
||||
<Card ico="package" title="装入 / 换版">
|
||||
<Prop ico="file-text" title="清单 manifest.json" extra="身份 / 七件契约 / 声明 / 资产初始版 / 样例集 / 代码入口">
|
||||
<Field k="选文件" hint="活动包 dist/manifest.json">
|
||||
<input className="g-input" type="file" accept=".json,application/json" onChange={pick(setManifestText)} />
|
||||
</Field>
|
||||
<Field k="或直接粘贴">
|
||||
<textarea
|
||||
className="g-input"
|
||||
rows={4}
|
||||
value={manifestText}
|
||||
placeholder='{ "identity": { "activityId": "rfq-intake", … } }'
|
||||
onChange={(e) => setManifestText(e.target.value)}
|
||||
/>
|
||||
</Field>
|
||||
</Prop>
|
||||
|
||||
<Prop ico="terminal" title="产物 index.js" extra="只当数据存 —— 不 import、不 eval">
|
||||
<Field k="选文件" hint="活动包 dist/index.js">
|
||||
<input className="g-input" type="file" accept=".js,.mjs,text/javascript" onChange={pick(setArtifact)} />
|
||||
</Field>
|
||||
<Field k="或直接粘贴">
|
||||
<textarea
|
||||
className="g-input"
|
||||
rows={3}
|
||||
value={artifact}
|
||||
placeholder="export default defineActivity({ … })"
|
||||
onChange={(e) => setArtifact(e.target.value)}
|
||||
/>
|
||||
</Field>
|
||||
</Prop>
|
||||
|
||||
{rejected !== undefined && (
|
||||
<Note tone="warn">
|
||||
<b>两审未过,没有上架。</b>
|
||||
{rejected.staticFindings.length > 0 && (
|
||||
<> 静态审:{rejected.staticFindings.map((f) => f.message).join(';')}。</>
|
||||
)}
|
||||
{rejected.replay.regressions.length > 0 && (
|
||||
<> 回放审:{rejected.replay.regressions.map((r) => `${r.taskId} ${r.detail}`).join(';')}。</>
|
||||
)}
|
||||
</Note>
|
||||
)}
|
||||
{install.data?.accepted === true && (
|
||||
<Note tone="ok">
|
||||
已装入 {install.data.activityId} v{install.data.packageVersion} —— 静态审{' '}
|
||||
{install.data.staticFindings.length} 条提示;回放审
|
||||
{install.data.replay.skippedNoHistory ? '免(无历史)' : `查了 ${install.data.replay.checked} 单`}。
|
||||
</Note>
|
||||
)}
|
||||
|
||||
<Acts
|
||||
align="end"
|
||||
items={[
|
||||
{ label: '取消', ico: 'x', onClick: () => setOpen(false) },
|
||||
{
|
||||
label: install.isPending ? '两审中…' : '装入并送审',
|
||||
ico: 'circle-check',
|
||||
primary: true,
|
||||
disabled: install.isPending || manifestText.trim() === '' || artifact.trim() === '',
|
||||
ask: {
|
||||
title: '经安装通道装入活动包',
|
||||
note: <Note>无代码通道:交的是数据。两审过了才上架;不过审会把是哪一条拦的说清楚。</Note>,
|
||||
impact: {
|
||||
who: '此后新起的任务用新包版本;在途任务按启动时版本跑完',
|
||||
undo: '版本并存,可停用回退',
|
||||
when: '确认后当场跑两审',
|
||||
},
|
||||
okLabel: '确认装入',
|
||||
onOk: () => install.mutate(),
|
||||
},
|
||||
},
|
||||
]}
|
||||
/>
|
||||
</Card>
|
||||
);
|
||||
}
|
||||
|
||||
@@ -8,7 +8,7 @@ import { disableCheckSchema, grantSchema, positionSchema, staffSchema, workGroup
|
||||
import { positionIdSchema, staffIdSchema, taskIdSchema } from '../id.ts';
|
||||
import { closureReportSchema, processPackageSchema, triggerConfigSchema } from '../process-package.ts';
|
||||
import { controlSemanticSchema, taskRuntimeStateSchema, terminalStateSchema, workflowStateSchema } from '../terminal.ts';
|
||||
import { paradigmSchema } from '../manifest.ts';
|
||||
import { activityManifestSchema, paradigmSchema } from '../manifest.ts';
|
||||
import { reportMetricsSchema, reportPeriodSchema } from './workbench.ts';
|
||||
|
||||
/* ── 员工管理 ─────────────────────────────────────────────────────────── */
|
||||
@@ -278,6 +278,38 @@ export const saveWorkGroupRoute = {
|
||||
output: z.object({ group: workGroupSchema }),
|
||||
} as const satisfies RouteContract;
|
||||
|
||||
/* ── 活动库 · 装入 / 换版(安装通道) ─────────────────────────────── */
|
||||
|
||||
/**
|
||||
* 经安装通道装入活动包 —— **无代码通道**(ADR-004):交的是清单 + .js 产物,都是数据。
|
||||
*
|
||||
* 安装两审在服务端跑:静态审读清单(工具契约在否、模型名绑没绑、模版有没有脚本、
|
||||
* 声明与已物化的台账冲不冲),回放审重演历史(首装无历史即免,以样例集替代)。
|
||||
* **恒为新增、版本并存**:装入不覆盖旧版本,在途任务按其启动时版本跑完。
|
||||
*/
|
||||
export const installActivityRoute = {
|
||||
method: 'POST',
|
||||
path: '/api/gov/activities',
|
||||
body: z.object({
|
||||
/** 清单六区:身份 / 七件契约 / 声明 / 资产初始版 / 样例集 / 代码入口 */
|
||||
manifest: activityManifestSchema,
|
||||
/** .js 产物原文 —— 只当数据存,不 import、不 eval */
|
||||
artifact: z.string().min(1),
|
||||
}),
|
||||
output: z.object({
|
||||
accepted: z.boolean(),
|
||||
activityId: z.string(),
|
||||
packageVersion: z.string(),
|
||||
staticFindings: z.array(z.object({ code: z.string(), severity: z.string(), message: z.string() })),
|
||||
replay: z.object({
|
||||
oldPassStillPass: z.boolean(),
|
||||
checked: z.number().int(),
|
||||
skippedNoHistory: z.boolean(),
|
||||
regressions: z.array(z.object({ taskId: z.string(), detail: z.string() })),
|
||||
}),
|
||||
}),
|
||||
} as const satisfies RouteContract;
|
||||
|
||||
/* ── 工具管理 · 导入自定义工具 ─────────────────────────────────────── */
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user