chenxin
684261f4b4
- 百工域 domains/baigong：capabilities（统一能力契约：执行类型 builtin/qiankun/mcp/http + 四维风险标注 + 来源版本）、mandates（授契 grant / 行契 charter 预算时间窗，撤销立即生效）、tool_calls（净化摘要 + 观察标证）；请命复用 pending_confirmations 加 expires_at/brief_json（超时=拒绝执行 HJ-1302，六要素说明） - 司命裁决器 siming.py：四维取最高档（能力/数据/后果/情境）；禁域为代码常量不可配置（递归删根/格式化/写裸设备/fork 炸弹、file:// 协议、密钥材料外发）——专项测试断言恶意标注与篡改对象仍拒 HJ-1301 - 执行链：禁域→裁决（HJ-1303 未授契拒且双留痕）→请命→执行（乾坤经 SandboxClient HMAC；MCP 经 call_tool；内置无副作用）→净化标证（观察非事实，敏感遮蔽+体量截断）→行动账 - MCP 登记/启停/刷新自动派生与撤下 capabilities（博闻登记接入点）；内置能力种子（echo/datetime/qiankun.shell/web.fetch） - 端点：/capabilities /mandates /petitions /tool-calls + /tools 兼容投影；前端百工页四区（能力目录四维标注/授契行契/请命批准拒绝/行动账观察标证） - 退役：modules/safety|skills|tool_runtime|agent、application/tool_runtime、services/skills|safety、tool_policies/skills/model_endpoint_overrides 表（迁移 006）、前端 SkillManager/ToolsConsole/旧 tools 页 - 验收（test_baigong_siming 四用例）：未授契被拒留痕、请命超时不执行、禁域不可关闭、结果为观察不入忆；后端 454、前端 220、BFF 4、神识 5 包全绿（2 个预存环境失败不变）
371 lines
14 KiB
Python
371 lines
14 KiB
Python
"""司命台管理聚合服务（api-spec §19.1–§19.3）。
|
||
|
||
九枢健康度由各枢运行/治理数据派生（不落长期状态，§19.1）；朱批待办复用
|
||
待决请命（§19.2）；起居注审计复用 audit_events（§19.3）。
|
||
"""
|
||
|
||
import json
|
||
|
||
from sqlalchemy import func, select
|
||
|
||
from app.core.config import settings
|
||
from app.core.security import redact_text
|
||
from app.core.time import to_iso, utc_now
|
||
from app.db.session import AsyncSessionLocal
|
||
from app.models.governance import (
|
||
AgentRosterEntry,
|
||
Goal,
|
||
PerceptionChannel,
|
||
Plan,
|
||
WorldEntity,
|
||
)
|
||
from app.models.idempotency import IdempotencyKey
|
||
from app.models.xirang import Memory
|
||
from app.models.runtime import Event, Run
|
||
from app.models.safety import AuditEvent, PendingConfirmationRecord
|
||
from app.repositories import audit as audit_repo
|
||
from app.repositories import characters as character_repo
|
||
from app.repositories import governance as governance_repo
|
||
from app.repositories import idempotency as idempotency_repo
|
||
from app.repositories import runtime as runtime_repo
|
||
from app.schemas.admin import (
|
||
AuditEntry,
|
||
PendingApproval,
|
||
PivotHealthReport,
|
||
PivotHealthSummary,
|
||
TraceDetail,
|
||
TraceItem,
|
||
TraceListResponse,
|
||
TraceSummary,
|
||
)
|
||
from app.schemas.common import Page
|
||
from app.services.serializers import audit_to_response
|
||
|
||
# 九枢全集（契约字典 §5.9）：枢标识、中文名、工程模块名。
|
||
_PIVOT_REGISTRY: list[tuple[str, str, str]] = [
|
||
("personality_core", "灵核枢", "Personality Core"),
|
||
("goal_orchestrator", "太一枢", "Goal Orchestrator"),
|
||
("safety_governor", "司命枢", "Safety Governor"),
|
||
("perception", "烛照枢", "Perception Layer"),
|
||
("world_model", "河图枢", "World Model"),
|
||
("planner", "洛书枢", "Planner"),
|
||
("memory", "息壤枢", "Memory System"),
|
||
("tool_runtime", "百工枢", "Tool Runtime"),
|
||
("agent_society", "天工阁枢", "Agent Society"),
|
||
]
|
||
|
||
|
||
def _summarize_input(value: dict | None) -> str:
|
||
if not value:
|
||
return ""
|
||
text = json.dumps(value, ensure_ascii=False, default=str)
|
||
return redact_text(text)[:200]
|
||
|
||
|
||
async def get_pivots_health(
|
||
*,
|
||
owner_scope: str = settings.default_owner_scope,
|
||
) -> PivotHealthReport:
|
||
async with AsyncSessionLocal() as session:
|
||
pending_count = len(
|
||
list(
|
||
(
|
||
await session.execute(
|
||
select(PendingConfirmationRecord).where(
|
||
PendingConfirmationRecord.status == "pending"
|
||
)
|
||
)
|
||
)
|
||
.scalars()
|
||
.all()
|
||
)
|
||
)
|
||
goals_n = await governance_repo.count(session, Goal)
|
||
world_n = await governance_repo.count(session, WorldEntity)
|
||
plans_n = await governance_repo.count(session, Plan)
|
||
perception_n = await governance_repo.count(session, PerceptionChannel)
|
||
agents_n = await governance_repo.count(session, AgentRosterEntry)
|
||
memories_n = await governance_repo.count(session, Memory, Memory.status != "tombstoned")
|
||
character = await character_repo.get_active_character(session, owner_scope)
|
||
has_personality = bool(character and character.current_personality_version_id)
|
||
tool_enabled = True # 百工域常驻（乾坤可用性按端点区分）
|
||
now = to_iso(utc_now())
|
||
|
||
raw: list[tuple[str, str, str, bool, str]] = [
|
||
(
|
||
"personality_core",
|
||
"steady" if has_personality else "void",
|
||
"人格版本已就绪" if has_personality else "人格未初始化",
|
||
),
|
||
("goal_orchestrator", "steady" if goals_n else "void", f"目标 {goals_n} 项"),
|
||
(
|
||
"safety_governor",
|
||
"cracked" if pending_count else "steady",
|
||
f"{pending_count} 项工具调用待裁定" if pending_count else "无待裁定",
|
||
),
|
||
("perception", "steady" if perception_n else "void", f"感知通道 {perception_n} 项"),
|
||
("world_model", "steady" if world_n else "void", f"世界实体 {world_n} 项"),
|
||
("planner", "steady" if plans_n else "void", f"计划 {plans_n} 项"),
|
||
("memory", "steady" if memories_n else "void", f"记忆 {memories_n} 条"),
|
||
(
|
||
"tool_runtime",
|
||
"breathing" if tool_enabled else "void",
|
||
"沙箱运行时在线" if tool_enabled else "工具运行时未启用",
|
||
),
|
||
("agent_society", "steady" if agents_n else "void", f"在岗角色 {agents_n} 位"),
|
||
]
|
||
|
||
name_map = {pivot: (name, module) for pivot, name, module in _PIVOT_REGISTRY}
|
||
pivots: list[PivotHealthSummary] = []
|
||
for pivot, health, summary in raw:
|
||
name, module = name_map[pivot]
|
||
pivots.append(
|
||
PivotHealthSummary(
|
||
pivot=pivot,
|
||
name=name,
|
||
module=module,
|
||
health=health,
|
||
summary=summary,
|
||
updated_at=now,
|
||
)
|
||
)
|
||
|
||
alerts = sum(1 for item in pivots if item.health == "cracked")
|
||
return PivotHealthReport(
|
||
overall="cracked" if alerts else "steady", alerts=alerts, pivots=pivots
|
||
)
|
||
|
||
|
||
async def get_pending_approvals() -> list[PendingApproval]:
|
||
async with AsyncSessionLocal() as session:
|
||
records = (
|
||
(
|
||
await session.execute(
|
||
select(PendingConfirmationRecord)
|
||
.where(PendingConfirmationRecord.status == "pending")
|
||
.order_by(PendingConfirmationRecord.created_at.asc())
|
||
)
|
||
)
|
||
.scalars()
|
||
.all()
|
||
)
|
||
approvals: list[PendingApproval] = []
|
||
for record in records:
|
||
try:
|
||
input_payload = json.loads(record.input_json) if record.input_json else {}
|
||
except ValueError:
|
||
input_payload = {}
|
||
approvals.append(
|
||
PendingApproval(
|
||
confirmation_id=record.id,
|
||
character_id=record.character_id,
|
||
tool=record.tool,
|
||
risk_level=record.risk_level,
|
||
permission_policy="ask",
|
||
action_summary=f"调用能力 {record.tool}",
|
||
input_summary=_summarize_input(input_payload),
|
||
possible_impact=None,
|
||
reason=record.reason,
|
||
created_at=record.created_at.isoformat() if record.created_at else "",
|
||
)
|
||
)
|
||
return approvals
|
||
|
||
|
||
async def get_audit_timeline(
|
||
*,
|
||
pivot: str | None = None,
|
||
page: int = 1,
|
||
page_size: int = 50,
|
||
) -> Page[AuditEntry]:
|
||
async with AsyncSessionLocal() as session:
|
||
events, total = await audit_repo.list_audit_events(
|
||
session, pivot=pivot, page=page, page_size=page_size
|
||
)
|
||
return Page(
|
||
items=[audit_to_response(event) for event in events],
|
||
page=page,
|
||
page_size=page_size,
|
||
total=total,
|
||
)
|
||
|
||
|
||
# —— §19.5 链路追踪（按 trace_id 聚合 events / audit_events / idempotency_keys）——
|
||
|
||
|
||
def _event_to_item(event: Event) -> TraceItem:
|
||
try:
|
||
payload = json.loads(event.payload_json) if event.payload_json else {}
|
||
except (json.JSONDecodeError, TypeError):
|
||
payload = {}
|
||
return TraceItem(
|
||
kind="event",
|
||
id=event.id,
|
||
created_at=event.created_at,
|
||
source_label=f"运行事件 / {event.type}",
|
||
summary=event.type,
|
||
detail={
|
||
"run_id": event.run_id,
|
||
"source": event.source,
|
||
"type": event.type,
|
||
"payload": payload,
|
||
"sequence": event.sequence,
|
||
"parent_id": event.parent_id,
|
||
},
|
||
)
|
||
|
||
|
||
def _audit_to_item(audit: AuditEvent) -> TraceItem:
|
||
parts = [audit.decision, audit.risk_level]
|
||
if audit.reason:
|
||
parts.append(audit.reason[:60])
|
||
return TraceItem(
|
||
kind="audit",
|
||
id=audit.id,
|
||
created_at=audit.created_at,
|
||
source_label=f"安全审计 / {audit.action}",
|
||
summary=" · ".join(parts),
|
||
detail={
|
||
"pivot": audit.pivot,
|
||
"action": audit.action,
|
||
"actor": audit.actor,
|
||
"decision": audit.decision,
|
||
"risk_level": audit.risk_level,
|
||
"reason": audit.reason,
|
||
"resource_type": audit.resource_type,
|
||
"resource_id": audit.resource_id,
|
||
},
|
||
)
|
||
|
||
|
||
def _idempotency_to_item(idem: IdempotencyKey) -> TraceItem:
|
||
return TraceItem(
|
||
kind="idempotency",
|
||
id=idem.id,
|
||
created_at=idem.created_at,
|
||
source_label=f"请求幂等 / {idem.method}",
|
||
summary=f"{idem.method} {idem.path} → {idem.response_status_code}",
|
||
detail={
|
||
"method": idem.method,
|
||
"path": idem.path,
|
||
"status": idem.status,
|
||
"response_status_code": idem.response_status_code,
|
||
"scope": idem.scope,
|
||
},
|
||
)
|
||
|
||
|
||
async def get_trace(trace_id: str) -> TraceDetail:
|
||
"""按 trace_id 聚合 events / audit_events / idempotency_keys 三表为升序时间线。"""
|
||
async with AsyncSessionLocal() as session:
|
||
events = await runtime_repo.list_events_by_trace(session, trace_id)
|
||
audits = await audit_repo.list_audit_events_by_trace(session, trace_id)
|
||
idempotencies = await idempotency_repo.list_by_trace(session, trace_id)
|
||
|
||
items: list[TraceItem] = [_event_to_item(event) for event in events]
|
||
items.extend(_audit_to_item(audit) for audit in audits)
|
||
items.extend(_idempotency_to_item(idem) for idem in idempotencies)
|
||
items.sort(key=lambda item: item.created_at)
|
||
|
||
run_ids = sorted({event.run_id for event in events if event.run_id})
|
||
character_ids = sorted(
|
||
{
|
||
*[event.character_id for event in events if event.character_id],
|
||
*[audit.character_id for audit in audits if audit.character_id],
|
||
}
|
||
)
|
||
return TraceDetail(
|
||
trace_id=trace_id,
|
||
character_ids=character_ids,
|
||
run_ids=run_ids,
|
||
session_ids=[],
|
||
items=items,
|
||
)
|
||
|
||
|
||
async def list_time_events(*, limit: int = 100, offset: int = 0) -> tuple[list[Event], int]:
|
||
"""列出辰正 time.* 事件（source='time_sense'），供起居注时间河展示（设计 §8 司命台）。"""
|
||
async with AsyncSessionLocal() as session:
|
||
result = await session.execute(
|
||
select(Event)
|
||
.where(Event.source == "time_sense")
|
||
.order_by(Event.created_at.desc())
|
||
.limit(limit)
|
||
.offset(offset)
|
||
)
|
||
items = list(result.scalars().all())
|
||
count_result = await session.execute(
|
||
select(func.count()).select_from(Event).where(Event.source == "time_sense")
|
||
)
|
||
total = int(count_result.scalar_one())
|
||
return items, total
|
||
|
||
|
||
async def list_traces(*, limit: int = 50) -> TraceListResponse:
|
||
"""列出最近活动的 trace_id 概览（跨 events / audit_events / idempotency_keys 聚合），
|
||
含每条链路涉及的人物与对话归属。"""
|
||
async with AsyncSessionLocal() as session:
|
||
merged: dict[str, dict[str, object]] = {}
|
||
|
||
def _entry(tid: str) -> dict[str, object]:
|
||
return merged.setdefault(
|
||
tid,
|
||
{
|
||
"trace_id": tid,
|
||
"last_seen": None,
|
||
"event_count": 0,
|
||
"audit_count": 0,
|
||
"idempotency_count": 0,
|
||
"character_ids": set(),
|
||
"session_ids": set(),
|
||
},
|
||
)
|
||
|
||
def _absorb(stats: list[tuple[str, int, object]], count_key: str) -> None:
|
||
for tid, cnt, last in stats:
|
||
entry = _entry(tid)
|
||
entry[count_key] = cnt
|
||
if last is not None and (entry["last_seen"] is None or last > entry["last_seen"]):
|
||
entry["last_seen"] = last
|
||
|
||
_absorb(await runtime_repo.summarize_by_trace(session), "event_count")
|
||
_absorb(await audit_repo.summarize_by_trace(session), "audit_count")
|
||
_absorb(await idempotency_repo.summarize_by_trace(session), "idempotency_count")
|
||
|
||
# 人物归属（events + audits 的 character_id）
|
||
for tid, cid in (
|
||
await session.execute(
|
||
select(Event.trace_id, Event.character_id).where(
|
||
Event.trace_id.is_not(None), Event.character_id.is_not(None)
|
||
)
|
||
)
|
||
).all():
|
||
_entry(tid)["character_ids"].add(cid)
|
||
for tid, cid in (
|
||
await session.execute(
|
||
select(AuditEvent.trace_id, AuditEvent.character_id).where(
|
||
AuditEvent.trace_id.is_not(None),
|
||
AuditEvent.character_id.is_not(None),
|
||
)
|
||
)
|
||
).all():
|
||
_entry(tid)["character_ids"].add(cid)
|
||
|
||
# 对话归属随线性会话模型退役；镜树归属随 M2c 司命台重设计接入（tree_id 聚合）
|
||
|
||
total = len(merged)
|
||
ordered = sorted(merged.values(), key=lambda e: e["last_seen"], reverse=True)
|
||
items = [
|
||
TraceSummary(
|
||
trace_id=str(entry["trace_id"]),
|
||
last_seen=entry["last_seen"], # type: ignore[arg-type]
|
||
character_ids=sorted(entry["character_ids"]), # type: ignore[arg-type]
|
||
session_ids=sorted(entry["session_ids"]), # type: ignore[arg-type]
|
||
event_count=int(entry["event_count"]),
|
||
audit_count=int(entry["audit_count"]),
|
||
idempotency_count=int(entry["idempotency_count"]),
|
||
)
|
||
for entry in ordered[:limit]
|
||
]
|
||
return TraceListResponse(items=items, total=total)
|