Archived
JCAI Main AgentandClaude Opus 5
14d4fa046a
@contracts 首版(§8.1 九个文件): - id 品牌 ID / terminal 终态五名与归侧四标签 / envelope 信封六字段与四类事件 - card 工单两模式 + 对话卡族(形状对齐 2026-07-26 原型定稿) - contract7 契约七件 / ledger 三级寻址与写三分 / process-package 流程包 DSL 与触发器三类 - manifest 活动包清单六区(含 CMMN·DMN·步序声明的资产形状)/ org / api 路由契约 模块(L1): - event 信封存储、归属解析三级短路、投递五诺、监听注册表、三级消费裁定 - ledger schema 自生长(最大化合并/最宽类型/只增不破坏)、任务视图叠加、写三分、冲突检查 - org 岗位授权(客体三类×动作三种)、停用前置检查、会话、种子播种 - llm 四元绑定、ModelGateway 三模式(live/record/replay)—— 两缝之一 app 装配:Hono 服务 + 鉴权中间件 + 治理台/工作台路由;drizzle 迁移;AES-256-GCM 凭证密封 ADR-007 工具链与门禁 · ADR-008 投递队列 · ADR-009 凭证加密 (ADR 编号自 007 续:编码规范 §14 已用到 006,README 写「从 005 续」是笔误) 门禁五道全绿;96 个测试通过,含对真实 PG 的 ledger 集成测试 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m
110 lines
3.9 KiB
TypeScript
110 lines
3.9 KiB
TypeScript
/**
|
|
* 员工、岗位与权限(编码规范 §4 · `org`;语义出处 OS 02 员工管理)。
|
|
*
|
|
* 权限按岗位授予:客体三类(数据 域.对象[.字段] / 治理功能 / 任务)× 动作三种(读 / 写 / 治理)。
|
|
* 任务负责人与被征答人对所涉内容**天然可见**,不另行授权。
|
|
* 单组织、≤50 人:不做多租户,不引 OAuth/OIDC(编码规范 §4 鉴权定调)。
|
|
*/
|
|
import { z } from 'zod';
|
|
import { positionIdSchema, staffIdSchema } from './id.ts';
|
|
|
|
export const positionSchema = z.object({
|
|
id: positionIdSchema,
|
|
code: z.string().min(1),
|
|
name: z.string().min(1),
|
|
note: z.string().optional(),
|
|
});
|
|
export type Position = z.infer<typeof positionSchema>;
|
|
|
|
export const STAFF_STATES = ['active', 'disabled'] as const;
|
|
export const staffStateSchema = z.enum(STAFF_STATES);
|
|
export type StaffState = z.infer<typeof staffStateSchema>;
|
|
|
|
export const staffSchema = z.object({
|
|
id: staffIdSchema,
|
|
account: z.string().min(1),
|
|
name: z.string().min(1),
|
|
positionId: positionIdSchema,
|
|
state: staffStateSchema.default('active'),
|
|
});
|
|
export type Staff = z.infer<typeof staffSchema>;
|
|
|
|
/* ── 岗位授权:客体三类 × 动作三种 ─────────────────────────────────── */
|
|
|
|
export const GRANT_ACTIONS = ['read', 'write', 'govern'] as const;
|
|
export const grantActionSchema = z.enum(GRANT_ACTIONS);
|
|
export type GrantAction = z.infer<typeof grantActionSchema>;
|
|
|
|
export const GRANT_ACTION_LABEL: Readonly<Record<GrantAction, string>> = {
|
|
read: '读',
|
|
write: '写',
|
|
govern: '治理',
|
|
};
|
|
|
|
/** 治理台九功能 —— 授权客体之一 */
|
|
export const GOVERNANCE_FUNCTIONS = [
|
|
'task',
|
|
'staff',
|
|
'process',
|
|
'trigger',
|
|
'activity',
|
|
'tool',
|
|
'data',
|
|
'memory',
|
|
'system',
|
|
] as const;
|
|
export const governanceFunctionSchema = z.enum(GOVERNANCE_FUNCTIONS);
|
|
export type GovernanceFunction = z.infer<typeof governanceFunctionSchema>;
|
|
|
|
export const GOVERNANCE_FUNCTION_LABEL: Readonly<Record<GovernanceFunction, string>> = {
|
|
task: '任务管理',
|
|
staff: '员工管理',
|
|
process: '工作流管理',
|
|
trigger: '触发器配置',
|
|
activity: '活动库管理',
|
|
tool: '工具管理',
|
|
data: '数据管理',
|
|
memory: '记忆管理',
|
|
system: '系统管理',
|
|
};
|
|
|
|
export const grantObjectSchema = z.discriminatedUnion('kind', [
|
|
z.object({
|
|
kind: z.literal('data'),
|
|
domain: z.string().min(1),
|
|
object: z.string().min(1),
|
|
field: z.string().optional(),
|
|
}),
|
|
z.object({ kind: z.literal('governance'), function: governanceFunctionSchema }),
|
|
z.object({ kind: z.literal('task'), activityId: z.string().optional() }),
|
|
]);
|
|
export type GrantObject = z.infer<typeof grantObjectSchema>;
|
|
|
|
export const grantSchema = z.object({
|
|
positionId: positionIdSchema,
|
|
object: grantObjectSchema,
|
|
action: grantActionSchema,
|
|
});
|
|
export type Grant = z.infer<typeof grantSchema>;
|
|
|
|
/* ── 停用前置检查(OS 02) ─────────────────────────────────────────── */
|
|
|
|
/** 员工停用前,其在途任务与待答卡须先改派完毕 */
|
|
export const disableCheckSchema = z.object({
|
|
staffId: staffIdSchema,
|
|
blocked: z.boolean(),
|
|
openTasks: z.array(z.object({ taskId: z.string(), title: z.string() })).default([]),
|
|
openCards: z.array(z.object({ cardId: z.string(), title: z.string() })).default([]),
|
|
openApprovals: z.array(z.object({ approvalId: z.string(), title: z.string() })).default([]),
|
|
});
|
|
export type DisableCheck = z.infer<typeof disableCheckSchema>;
|
|
|
|
/* ── 会话 ─────────────────────────────────────────────────────────────── */
|
|
|
|
export const sessionSchema = z.object({
|
|
staff: staffSchema,
|
|
position: positionSchema,
|
|
grants: z.array(grantSchema),
|
|
});
|
|
export type Session = z.infer<typeof sessionSchema>;
|