JiuContinent
ae5990eaef
feat(core): 添加API认证主体配置和安全验证 - 在Settings中添加api_actor字段，用于标识API调用方身份 - 创建ApiPrincipal数据类来表示服务主体 - 修改require_api_key函数返回认证的服务主体信息 - 更新配置文件引入ActorValue常量 feat(ai_agent): 增强OpenClaw工具调用的安全性检查 - 实现_openclaw_allowed_tools和openclaw_allowed_actions配置项 - 添加CSV列表解析验证器 - 实现工具和操作权限检查方法_ensure_tool_allowed - 在工具调用前验证允许的工具和操作类型 feat(security): 强化API密钥认证和审计安全性 - 更新require_api_key函数在缺少API_KEY时抛出异常 - 在AI代理、审批、飞书等模块的路由中统一使用ApiPrincipal获取调用方信息 - 替换硬编码的ActorValue.API为动态的principal.actor feat(audit): 实现安全审计负载脱敏处理 - 添加敏感键名集合AI_AUDIT_SENSITIVE_KEYS - 实现审计安全负载处理函数_audit_safe_payload - 支持深度遍历、文本截断、序列限制和敏感信息脱敏 - 在AI服务的审计日志中应用安全负载处理 feat(approval): 完善审批流程的申请人身份验证 - 更新审批创建接口使用认证主体作为申请人 - 使用utc_now替换datetime.utcnow确保时间一致性 - 修复审批逻辑中的条件判断问题 feat(business): 加强业务领域高风险操作的审批控制 - 为高风险域创建统一的审批验证方法_ensure_approved - 在创建和更新操作中强制要求审批票证 - 为项目同步功能添加认证主体参数 feat(config): 统一时间处理使用UTC时间函数 - 创建并使用utc_now函数替代datetime.utcnow - 在审批、审计、业务、遗留数据等模块中更新时间戳处理 feat(constants): 扩展风险事件类型和报告指标 - 添加新风险事件类型到GENERATED_RISK_EVENT_TYPES - 为报告模块添加外部开放和高风险事件指标 refactor(feishu): 增强飞书验证令牌安全检查 - 确保飞书验证令牌配置存在时才接受请求 - 修正令牌验证逻辑以提高安全性 ```
136 lines
4.0 KiB
Python
136 lines
4.0 KiB
Python
from enum import StrEnum
|
|
|
|
|
|
class ReportType(StrEnum):
|
|
DAILY = "daily"
|
|
WEEKLY = "weekly"
|
|
|
|
|
|
class ReportTitle(StrEnum):
|
|
DAILY_BRIEF = "每日经营晨报"
|
|
PROJECT_WEEKLY = "项目周报"
|
|
ATTENDANCE_SUMMARY = "打卡汇总"
|
|
WORK_DAILY = "经营日报"
|
|
WORK_WEEKLY = "经营周报"
|
|
PROJECT_LIFECYCLE = "项目全生命周期报告"
|
|
|
|
|
|
class ReportStatus(StrEnum):
|
|
UNKNOWN = "未设置"
|
|
GENERATED = "已生成"
|
|
|
|
|
|
class LifecycleSection(StrEnum):
|
|
HEALTH = "health"
|
|
PROJECTS = "projects"
|
|
TASKS = "tasks"
|
|
PROCUREMENTS = "procurements"
|
|
EXPENSES = "expenses"
|
|
FUNDS = "funds"
|
|
SUPPLIERS = "suppliers"
|
|
ATTENDANCE = "attendance"
|
|
RISKS = "risks"
|
|
|
|
|
|
class LifecycleFilterKey(StrEnum):
|
|
PROJECT_CODE = "project_code"
|
|
OWNER = "owner"
|
|
PERIOD_START = "period_start"
|
|
PERIOD_END = "period_end"
|
|
LABELS = "labels"
|
|
|
|
|
|
class LifecycleResponseKey(StrEnum):
|
|
TITLE = "title"
|
|
FILTERS = "filters"
|
|
METRICS = "metrics"
|
|
ATTENTION = "attention"
|
|
RECOMMENDATIONS = "recommendations"
|
|
LINES = "lines"
|
|
CONTENT = "content"
|
|
AI_ANALYSIS = "ai_analysis"
|
|
PROJECT_LIFECYCLE_REPORT = "project_lifecycle_report"
|
|
|
|
|
|
class LifecycleAttentionKey(StrEnum):
|
|
DELAYED_PROJECTS = "delayed_projects"
|
|
OVER_BUDGET_PROJECTS = "over_budget_projects"
|
|
OVERDUE_TASKS = "overdue_tasks"
|
|
|
|
|
|
class MetricKey(StrEnum):
|
|
TOTAL = "total"
|
|
ACTIVE = "active"
|
|
CLOSED = "closed"
|
|
AVERAGE_PROGRESS_PERCENT = "average_progress_percent"
|
|
BY_STATUS = "by_status"
|
|
BY_RISK_LEVEL = "by_risk_level"
|
|
BUDGET_TOTAL = "budget_total"
|
|
ACTUAL_TOTAL = "actual_total"
|
|
BUDGET_USAGE_RATE = "budget_usage_rate"
|
|
DELAYED = "delayed"
|
|
OVER_BUDGET = "over_budget"
|
|
COMPLETED = "completed"
|
|
OPEN = "open"
|
|
OVERDUE = "overdue"
|
|
BLOCKED = "blocked"
|
|
COMPLETION_RATE = "completion_rate"
|
|
BY_PRIORITY = "by_priority"
|
|
PENDING_APPROVAL = "pending_approval"
|
|
PENDING_DELIVERY = "pending_delivery"
|
|
UNPAID = "unpaid"
|
|
EXPECTED_TOTAL = "expected_total"
|
|
ACTUAL_VS_EXPECTED_RATE = "actual_vs_expected_rate"
|
|
AMOUNT_TOTAL = "amount_total"
|
|
BY_TYPE = "by_type"
|
|
ACCOUNTS_TOTAL = "accounts_total"
|
|
CURRENT_BALANCE_TOTAL = "current_balance_total"
|
|
EXPECTED_RECEIVABLE_TOTAL = "expected_receivable_total"
|
|
EXPECTED_PAYABLE_TOTAL = "expected_payable_total"
|
|
SAFETY_LINE_TOTAL = "safety_line_total"
|
|
NET_POSITION = "net_position"
|
|
RISK_ACCOUNTS = "risk_accounts"
|
|
RISKY = "risky"
|
|
BLACKLISTED = "blacklisted"
|
|
ABNORMAL = "abnormal"
|
|
ABNORMAL_RATE = "abnormal_rate"
|
|
RISK_LEVEL = "risk_level"
|
|
RISK_SCORE = "risk_score"
|
|
OVERDUE_TASKS = "overdue_tasks"
|
|
DELAYED_PROJECTS = "delayed_projects"
|
|
OVER_BUDGET_PROJECTS = "over_budget_projects"
|
|
OPEN_EVENTS = "open_events"
|
|
HIGH_EVENTS = "high_events"
|
|
EXTERNAL_OPEN_EVENTS = "external_open_events"
|
|
EXTERNAL_HIGH_EVENTS = "external_high_events"
|
|
EVENTS_BY_TYPE = "events_by_type"
|
|
EVENTS_BY_LEVEL = "events_by_level"
|
|
SCORE = "score"
|
|
LEVEL = "level"
|
|
|
|
|
|
class HealthLevel(StrEnum):
|
|
HEALTHY = "healthy"
|
|
ATTENTION = "attention"
|
|
CRITICAL = "critical"
|
|
|
|
|
|
class ReportText(StrEnum):
|
|
DEFAULT_SCOPE = "全部项目"
|
|
ACTION_HEADER = "- 建议动作："
|
|
RECOMMEND_DELAYED = (
|
|
"优先组织延期项目复盘，明确新截止时间、负责人和资源缺口。"
|
|
)
|
|
RECOMMEND_OVER_BUDGET = (
|
|
"对超预算项目冻结非必要采购和费用，补齐预算调整审批依据。"
|
|
)
|
|
RECOMMEND_OVERDUE_TASKS = (
|
|
"清理逾期任务，要求负责人更新阻塞项和恢复计划。"
|
|
)
|
|
RECOMMEND_APPROVALS = "集中处理采购和费用审批，减少交付与付款等待。"
|
|
RECOMMEND_FUNDS = "复核资金安全线账户，滚动更新收付款预测。"
|
|
RECOMMEND_SUPPLIERS = "复核中高风险供应商，准备替代供应和履约跟踪。"
|
|
RECOMMEND_STABLE = (
|
|
"当前生命周期指标稳定，建议继续保持周度复盘和风险事件归档。"
|
|
)
|