M6(2/n): 治理台九功能 + SSE 订阅层 + 读/治分权

治理台按 §9.1 拆成九个 gov-* feature,共用件落 shared/gov:
  · 外壳(左轨/顶栏/面包屑/页签/整页下钻)自原型 Governance.tsx 平移,
    DOM 与 g-* 类名原样;路由状态即应用状态,区/页签/下钻栈全编码进 hash 可深链
  · 编排画布 diagram-js 画布件 1:1 平移(flow-layout/flow-node-paint/FlowDiagram),
    新增 pkg-to-graph 把 ProcessPackage 转成画布图模型;统一报价 v1 全图 12 节点 15 边渲染通过
  · 后端补四路由:审批单 / 工作流下钻 / 通道实例 / 度量仪表

SSE 订阅层(§9.2):app 层单一连接,按信封目标失效缓存;
组件不再自行轮询(去掉 refetchInterval)。广播只说「哪个目标动了」,不带业务载荷,
且在投递已落库已送达之后才发 —— 不是第二条投递链路。

两处实质修正:
  · 治理路由一律要 govern → 读路由改要 read。客体三类 × 动作三种的分法就是为此:
    BD 有 task:read 能看在途、动不了控制事件;一律 govern 等于把三种动作压成一种
  · 控制事件/恢复/改派原记为 engine-transition(归机器产出)→ 新增 control 条目种类,
    归人裁决侧。归侧是按动作类型的纯推导,所以「谁干的」必须体现在 kind 上;
    否则人的叫停会被算进自主率的机器分子

判据 ⑩ 治理台一半跑通:在途监控 / 叫停 / 恢复,治理动作留痕可查。
无权查看不再画成空清单,按岗位说明缺哪一项。

gates: tsc / eslint / depcruise(286 模块)/ api-report / 360 测试 全绿

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m

apps/web/src/shared/gov/gov-api.ts

@@ -0,0 +1,118 @@
+/**
+ * 治理台取数 —— 每个查询一把键,写动作后按键失效。
+ * 前端零过程状态:所有画面都是服务端投影的函数,刷新即重建(§9.2)。
+ */
+import { useQuery } from '@tanstack/react-query';
+import type { UseQueryResult } from '@tanstack/react-query';
+import type {
+  GovActivitiesOutput,
+  GovApprovalsOutput,
+  GovChannelsOutput,
+  GovGrantsOutput,
+  GovLedgerPageOutput,
+  GovLlmOutput,
+  GovMemoryOutput,
+  GovMetricsOutput,
+  GovObjectsOutput,
+  GovPackagesOutput,
+  GovStaffOutput,
+  GovTaskLogOutput,
+  GovTasksOutput,
+  GovToolsOutput,
+  GovTriggersOutput,
+  GovWorkflowOutput,
+} from '@contracts';
+import {
+  browseLedgerRoute,
+  govMetricsRoute,
+  govTaskLogRoute,
+  govWorkflowRoute,
+  listActivitiesRoute,
+  listActivityMemoryRoute,
+  listApprovalsRoute,
+  listChannelsRoute,
+  listGovTasksRoute,
+  listGrantsRoute,
+  listLedgerObjectsRoute,
+  listLlmInstancesRoute,
+  listProcessPackagesRoute,
+  listStaffRoute,
+  listToolsRoute,
+  listTriggersRoute,
+} from '@contracts';
+import { call } from '@web-shared/typed-fetch.ts';
+
+export type GovTasks = GovTasksOutput;
+export type GovApprovals = GovApprovalsOutput;
+export type GovStaff = GovStaffOutput;
+export type GovActivities = GovActivitiesOutput;
+export type GovTools = GovToolsOutput;
+export type GovObjects = GovObjectsOutput;
+export type GovLedgerPage = GovLedgerPageOutput;
+export type GovMemory = GovMemoryOutput;
+export type GovMetrics = GovMetricsOutput;
+export type GovChannels = GovChannelsOutput;
+export type GovLlm = GovLlmOutput;
+export type GovWorkflow = GovWorkflowOutput;
+export type GovTaskLog = GovTaskLogOutput;
+export type GovGrants = GovGrantsOutput;
+
+export const useGovTasks = (): UseQueryResult<GovTasks> =>
+  useQuery({ queryKey: ['gov', 'tasks'], queryFn: () => call<GovTasks>(listGovTasksRoute) });
+
+export const useGovApprovals = (): UseQueryResult<GovApprovals> =>
+  useQuery({ queryKey: ['gov', 'approvals'], queryFn: () => call<GovApprovals>(listApprovalsRoute) });
+
+export const useGovStaff = (): UseQueryResult<GovStaff> =>
+  useQuery({ queryKey: ['gov', 'staff'], queryFn: () => call<GovStaff>(listStaffRoute) });
+
+export const useGovGrants = (positionId: string | undefined): UseQueryResult<GovGrants> =>
+  useQuery({
+    queryKey: ['gov', 'grants', positionId],
+    queryFn: () => call<GovGrants>(listGrantsRoute, { params: { positionId: positionId! } }),
+    enabled: positionId !== undefined,
+  });
+
+export const useGovPackages = (): UseQueryResult<GovPackagesOutput> =>
+  useQuery({ queryKey: ['gov', 'process'], queryFn: () => call<GovPackagesOutput>(listProcessPackagesRoute) });
+
+export const useGovTriggers = (): UseQueryResult<GovTriggersOutput> =>
+  useQuery({ queryKey: ['gov', 'triggers'], queryFn: () => call<GovTriggersOutput>(listTriggersRoute) });
+
+export const useGovActivities = (): UseQueryResult<GovActivities> =>
+  useQuery({ queryKey: ['gov', 'activities'], queryFn: () => call<GovActivities>(listActivitiesRoute) });
+
+export const useGovTools = (): UseQueryResult<GovTools> =>
+  useQuery({ queryKey: ['gov', 'tools'], queryFn: () => call<GovTools>(listToolsRoute) });
+
+export const useGovObjects = (): UseQueryResult<GovObjects> =>
+  useQuery({ queryKey: ['gov', 'objects'], queryFn: () => call<GovObjects>(listLedgerObjectsRoute) });
+
+export const useGovLedger = (domain: string | undefined, object: string | undefined): UseQueryResult<GovLedgerPage> =>
+  useQuery({
+    queryKey: ['gov', 'ledger', domain, object],
+    queryFn: () => call<GovLedgerPage>(browseLedgerRoute, { params: { domain: domain!, object: object! } }),
+    enabled: domain !== undefined && object !== undefined,
+  });
+
+export const useGovMemory = (activityId: string | undefined): UseQueryResult<GovMemory> =>
+  useQuery({
+    queryKey: ['gov', 'memory', activityId],
+    queryFn: () => call<GovMemory>(listActivityMemoryRoute, { params: { activityId: activityId! } }),
+    enabled: activityId !== undefined,
+  });
+
+export const useGovMetrics = (): UseQueryResult<GovMetrics> =>
+  useQuery({ queryKey: ['gov', 'metrics'], queryFn: () => call<GovMetrics>(govMetricsRoute) });
+
+export const useGovChannels = (): UseQueryResult<GovChannels> =>
+  useQuery({ queryKey: ['gov', 'channels'], queryFn: () => call<GovChannels>(listChannelsRoute) });
+
+export const useGovLlm = (): UseQueryResult<GovLlm> =>
+  useQuery({ queryKey: ['gov', 'llm'], queryFn: () => call<GovLlm>(listLlmInstancesRoute) });
+
+export const useGovWorkflow = (id: string): UseQueryResult<GovWorkflow> =>
+  useQuery({ queryKey: ['gov', 'workflow', id], queryFn: () => call<GovWorkflow>(govWorkflowRoute, { params: { id } }) });
+
+export const useGovTaskLog = (taskId: string): UseQueryResult<GovTaskLog> =>
+  useQuery({ queryKey: ['gov', 'tasklog', taskId], queryFn: () => call<GovTaskLog>(govTaskLogRoute, { params: { taskId } }) });