```

feat: 添加公司AI管理平台基础架构

添加了完整的FastAPI后端项目结构，包括：
- 环境配置文件(.env.example)和项目说明文档(README.md、AGENTS.md)
- Dockerfile用于容器化部署
- 核心基础设施：配置管理、数据库连接、调度器、安全认证
- 模块化设计：AI代理、审批流程、审计日志、业务台账等功能模块
- 支持多数据库连接(主库和遗留系统只读库)
- AI适配器支持OpenClaw、Hermes、OpenAI兼容接口
- 飞书集成、报表生成、风险监控等企业级功能
- 完整的依赖管理和测试指南
```

app/modules/audit/__init__.py

@@ -0,0 +1 @@
+"""Audit module."""

app/modules/audit/models.py

@@ -0,0 +1,22 @@
+from datetime import datetime
+
+from sqlalchemy import DateTime, Integer, String, Text
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.core.database import Base
+
+
+class AuditLog(Base):
+    __tablename__ = "audit_logs"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
+    actor: Mapped[str] = mapped_column(String(128), default="system", index=True)
+    source: Mapped[str] = mapped_column(String(64), default="api", index=True)
+    action: Mapped[str] = mapped_column(String(128), index=True)
+    target_type: Mapped[str | None] = mapped_column(String(128), nullable=True)
+    target_id: Mapped[str | None] = mapped_column(String(128), nullable=True)
+    risk_level: Mapped[str] = mapped_column(String(32), default="low", index=True)
+    request_payload: Mapped[str | None] = mapped_column(Text, nullable=True)
+    response_payload: Mapped[str | None] = mapped_column(Text, nullable=True)
+    status: Mapped[str] = mapped_column(String(32), default="success", index=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, index=True)

app/modules/audit/routes.py

@@ -0,0 +1,14 @@
+from fastapi import APIRouter, Depends
+from sqlalchemy.orm import Session
+
+from app.core.database import get_db
+from app.core.security import require_api_key
+from app.modules.audit.schemas import AuditLogRead
+from app.modules.audit.service import AuditService
+
+router = APIRouter(dependencies=[Depends(require_api_key)])
+
+
+@router.get("/logs", response_model=list[AuditLogRead])
+def list_audit_logs(limit: int = 100, db: Session = Depends(get_db)) -> list:
+    return AuditService(db).list_logs(limit=limit)

app/modules/audit/schemas.py

@@ -0,0 +1,32 @@
+from datetime import datetime
+from typing import Any
+
+from pydantic import BaseModel, ConfigDict
+
+
+class AuditLogCreate(BaseModel):
+    actor: str = "system"
+    source: str = "api"
+    action: str
+    target_type: str | None = None
+    target_id: str | None = None
+    risk_level: str = "low"
+    request_payload: Any | None = None
+    response_payload: Any | None = None
+    status: str = "success"
+
+
+class AuditLogRead(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: int
+    actor: str
+    source: str
+    action: str
+    target_type: str | None
+    target_id: str | None
+    risk_level: str
+    request_payload: str | None
+    response_payload: str | None
+    status: str
+    created_at: datetime

app/modules/audit/service.py

@@ -0,0 +1,46 @@
+import json
+from typing import Any
+
+from sqlalchemy import select
+from sqlalchemy.orm import Session
+
+from app.modules.audit.models import AuditLog
+from app.modules.audit.schemas import AuditLogCreate
+
+
+def _dump(value: Any | None) -> str | None:
+    """Serialize audit payloads while preserving existing strings."""
+
+    if value is None:
+        return None
+    if isinstance(value, str):
+        return value
+    return json.dumps(value, ensure_ascii=False, default=str)
+
+
+class AuditService:
+    """Persist and query audit log entries."""
+
+    def __init__(self, db: Session):
+        self.db = db
+
+    def log(self, payload: AuditLogCreate) -> AuditLog:
+        record = AuditLog(
+            actor=payload.actor,
+            source=payload.source,
+            action=payload.action,
+            target_type=payload.target_type,
+            target_id=payload.target_id,
+            risk_level=payload.risk_level,
+            request_payload=_dump(payload.request_payload),
+            response_payload=_dump(payload.response_payload),
+            status=payload.status,
+        )
+        self.db.add(record)
+        self.db.commit()
+        self.db.refresh(record)
+        return record
+
+    def list_logs(self, limit: int = 100) -> list[AuditLog]:
+        stmt = select(AuditLog).order_by(AuditLog.id.desc()).limit(min(limit, 500))
+        return list(self.db.execute(stmt).scalars())