JiuContinent
ae5990eaef
feat(core): 添加API认证主体配置和安全验证 - 在Settings中添加api_actor字段，用于标识API调用方身份 - 创建ApiPrincipal数据类来表示服务主体 - 修改require_api_key函数返回认证的服务主体信息 - 更新配置文件引入ActorValue常量 feat(ai_agent): 增强OpenClaw工具调用的安全性检查 - 实现_openclaw_allowed_tools和openclaw_allowed_actions配置项 - 添加CSV列表解析验证器 - 实现工具和操作权限检查方法_ensure_tool_allowed - 在工具调用前验证允许的工具和操作类型 feat(security): 强化API密钥认证和审计安全性 - 更新require_api_key函数在缺少API_KEY时抛出异常 - 在AI代理、审批、飞书等模块的路由中统一使用ApiPrincipal获取调用方信息 - 替换硬编码的ActorValue.API为动态的principal.actor feat(audit): 实现安全审计负载脱敏处理 - 添加敏感键名集合AI_AUDIT_SENSITIVE_KEYS - 实现审计安全负载处理函数_audit_safe_payload - 支持深度遍历、文本截断、序列限制和敏感信息脱敏 - 在AI服务的审计日志中应用安全负载处理 feat(approval): 完善审批流程的申请人身份验证 - 更新审批创建接口使用认证主体作为申请人 - 使用utc_now替换datetime.utcnow确保时间一致性 - 修复审批逻辑中的条件判断问题 feat(business): 加强业务领域高风险操作的审批控制 - 为高风险域创建统一的审批验证方法_ensure_approved - 在创建和更新操作中强制要求审批票证 - 为项目同步功能添加认证主体参数 feat(config): 统一时间处理使用UTC时间函数 - 创建并使用utc_now函数替代datetime.utcnow - 在审批、审计、业务、遗留数据等模块中更新时间戳处理 feat(constants): 扩展风险事件类型和报告指标 - 添加新风险事件类型到GENERATED_RISK_EVENT_TYPES - 为报告模块添加外部开放和高风险事件指标 refactor(feishu): 增强飞书验证令牌安全检查 - 确保飞书验证令牌配置存在时才接受请求 - 修正令牌验证逻辑以提高安全性 ```
256 lines
14 KiB
Python
256 lines
14 KiB
Python
from datetime import date, datetime
|
|
from decimal import Decimal
|
|
|
|
from sqlalchemy import JSON, Date, DateTime, Integer, Numeric, String, Text
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.core.constants import ActorValue
|
|
from app.core.database import Base
|
|
from app.core.time import utc_now
|
|
from app.modules.business.constants import (
|
|
AccountType,
|
|
PriorityValue,
|
|
RiskLevel,
|
|
SourceSystem,
|
|
StatusValue,
|
|
VersionValue,
|
|
)
|
|
|
|
|
|
class TimestampMixin:
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=utc_now)
|
|
updated_at: Mapped[datetime] = mapped_column(
|
|
DateTime, default=utc_now, onupdate=utc_now
|
|
)
|
|
|
|
|
|
class Project(Base, TimestampMixin):
|
|
__tablename__ = "projects"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
name: Mapped[str] = mapped_column(String(255), index=True)
|
|
owner: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.INITIATED, index=True)
|
|
priority: Mapped[str] = mapped_column(String(32), default=PriorityValue.P2)
|
|
progress_percent: Mapped[int] = mapped_column(Integer, default=0)
|
|
risk_level: Mapped[str] = mapped_column(String(32), default=RiskLevel.LOW, index=True)
|
|
budget_amount: Mapped[Decimal] = mapped_column(Numeric(14, 2), default=0)
|
|
actual_amount: Mapped[Decimal] = mapped_column(Numeric(14, 2), default=0)
|
|
start_date: Mapped[date | None] = mapped_column(Date, nullable=True)
|
|
due_date: Mapped[date | None] = mapped_column(Date, nullable=True, index=True)
|
|
description: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
source_system: Mapped[str] = mapped_column(String(64), default=SourceSystem.INTERNAL)
|
|
external_id: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
|
|
|
|
class WorkTask(Base, TimestampMixin):
|
|
__tablename__ = "work_tasks"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
title: Mapped[str] = mapped_column(String(255), index=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
owner: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.TODO, index=True)
|
|
priority: Mapped[str] = mapped_column(String(32), default=PriorityValue.P2)
|
|
due_date: Mapped[date | None] = mapped_column(Date, nullable=True, index=True)
|
|
completed_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
blocker: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
description: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
|
|
class Procurement(Base, TimestampMixin):
|
|
__tablename__ = "procurements"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
name: Mapped[str] = mapped_column(String(255), index=True)
|
|
applicant: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
supplier_name: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
budget_subject: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
expected_amount: Mapped[Decimal] = mapped_column(Numeric(14, 2), default=0)
|
|
actual_amount: Mapped[Decimal] = mapped_column(Numeric(14, 2), default=0)
|
|
approval_status: Mapped[str] = mapped_column(String(64), default=StatusValue.DRAFT, index=True)
|
|
delivery_status: Mapped[str] = mapped_column(
|
|
String(64),
|
|
default=StatusValue.UNDELIVERED,
|
|
index=True,
|
|
)
|
|
payment_status: Mapped[str] = mapped_column(String(64), default=StatusValue.UNPAID, index=True)
|
|
comparison_summary: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
|
|
class Expense(Base, TimestampMixin):
|
|
__tablename__ = "expenses"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
expense_type: Mapped[str] = mapped_column(String(128), index=True)
|
|
amount: Mapped[Decimal] = mapped_column(Numeric(14, 2), default=0)
|
|
applicant: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
department: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
budget_subject: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
payment_account: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
invoice_status: Mapped[str] = mapped_column(
|
|
String(64),
|
|
default=StatusValue.INVOICE_NOT_RECEIVED,
|
|
)
|
|
approval_status: Mapped[str] = mapped_column(String(64), default=StatusValue.DRAFT, index=True)
|
|
payment_status: Mapped[str] = mapped_column(String(64), default=StatusValue.UNPAID, index=True)
|
|
|
|
|
|
class FundAccount(Base, TimestampMixin):
|
|
__tablename__ = "fund_accounts"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
name: Mapped[str] = mapped_column(String(255), index=True)
|
|
account_type: Mapped[str] = mapped_column(String(64), default=AccountType.BANK)
|
|
current_balance: Mapped[Decimal] = mapped_column(Numeric(16, 2), default=0)
|
|
expected_receivable: Mapped[Decimal] = mapped_column(Numeric(16, 2), default=0)
|
|
expected_payable: Mapped[Decimal] = mapped_column(Numeric(16, 2), default=0)
|
|
safety_line: Mapped[Decimal] = mapped_column(Numeric(16, 2), default=0)
|
|
risk_level: Mapped[str] = mapped_column(String(32), default=RiskLevel.LOW, index=True)
|
|
note: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
|
|
class Policy(Base, TimestampMixin):
|
|
__tablename__ = "policies"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
title: Mapped[str] = mapped_column(String(255), index=True)
|
|
policy_type: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
owner_department: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
version: Mapped[str] = mapped_column(String(32), default=VersionValue.V1_0)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.POLICY_DRAFT, index=True)
|
|
effective_date: Mapped[date | None] = mapped_column(Date, nullable=True)
|
|
feishu_doc_url: Mapped[str | None] = mapped_column(String(1024), nullable=True)
|
|
summary: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
|
|
class Standard(Base, TimestampMixin):
|
|
__tablename__ = "standards"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
title: Mapped[str] = mapped_column(String(255), index=True)
|
|
standard_type: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
applies_to: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.VALID, index=True)
|
|
check_items: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
remediation: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
policy_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
|
|
|
|
class PerformanceMetric(Base, TimestampMixin):
|
|
__tablename__ = "performance_metrics"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
name: Mapped[str] = mapped_column(String(255), index=True)
|
|
applies_to_role: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
formula: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
weight: Mapped[Decimal] = mapped_column(Numeric(5, 2), default=0)
|
|
data_source: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
auto_score: Mapped[Decimal] = mapped_column(Numeric(8, 2), default=0)
|
|
confirmed_score: Mapped[Decimal | None] = mapped_column(Numeric(8, 2), nullable=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.DRAFT, index=True)
|
|
|
|
|
|
class Supplier(Base, TimestampMixin):
|
|
__tablename__ = "suppliers"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
name: Mapped[str] = mapped_column(String(255), index=True)
|
|
category: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
contact: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
quality_score: Mapped[Decimal] = mapped_column(Numeric(5, 2), default=0)
|
|
delivery_score: Mapped[Decimal] = mapped_column(Numeric(5, 2), default=0)
|
|
price_score: Mapped[Decimal] = mapped_column(Numeric(5, 2), default=0)
|
|
risk_level: Mapped[str] = mapped_column(String(32), default=RiskLevel.LOW, index=True)
|
|
blacklist_status: Mapped[str] = mapped_column(
|
|
String(32),
|
|
default=StatusValue.NORMAL,
|
|
index=True,
|
|
)
|
|
|
|
|
|
class AttendanceRecord(Base, TimestampMixin):
|
|
__tablename__ = "attendance_records"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
employee_name: Mapped[str] = mapped_column(String(128), index=True)
|
|
employee_id: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
department: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
work_date: Mapped[date] = mapped_column(Date, index=True)
|
|
check_in_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
check_out_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.NORMAL_CN, index=True)
|
|
location: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
source_system: Mapped[str] = mapped_column(String(64), default=SourceSystem.INTERNAL)
|
|
external_id: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
note: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
|
|
class WorkReport(Base, TimestampMixin):
|
|
__tablename__ = "work_reports"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
report_type: Mapped[str] = mapped_column(String(32), index=True)
|
|
title: Mapped[str] = mapped_column(String(255), index=True)
|
|
reporter: Mapped[str] = mapped_column(String(128), default=ActorValue.SYSTEM, index=True)
|
|
department: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
period_start: Mapped[date] = mapped_column(Date, index=True)
|
|
period_end: Mapped[date] = mapped_column(Date, index=True)
|
|
content: Mapped[str] = mapped_column(Text)
|
|
metrics: Mapped[dict | None] = mapped_column(JSON, nullable=True)
|
|
risk_summary: Mapped[dict | None] = mapped_column(JSON, nullable=True)
|
|
status: Mapped[str] = mapped_column(String(64), default=StatusValue.GENERATED, index=True)
|
|
source_system: Mapped[str] = mapped_column(String(64), default=SourceSystem.INTERNAL)
|
|
|
|
|
|
class RiskEvent(Base, TimestampMixin):
|
|
__tablename__ = "risk_events"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
title: Mapped[str] = mapped_column(String(255), index=True)
|
|
risk_type: Mapped[str] = mapped_column(String(64), index=True)
|
|
risk_level: Mapped[str] = mapped_column(String(32), default=RiskLevel.MEDIUM, index=True)
|
|
status: Mapped[str] = mapped_column(String(32), default=StatusValue.OPEN, index=True)
|
|
source_domain: Mapped[str] = mapped_column(String(128), index=True)
|
|
source_record_id: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
project_code: Mapped[str | None] = mapped_column(String(64), nullable=True, index=True)
|
|
owner: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
detected_at: Mapped[datetime] = mapped_column(DateTime, default=utc_now, index=True)
|
|
due_date: Mapped[date | None] = mapped_column(Date, nullable=True, index=True)
|
|
description: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
mitigation: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
evidence: Mapped[dict | None] = mapped_column(JSON, nullable=True)
|
|
|
|
|
|
class LegacySyncRun(Base, TimestampMixin):
|
|
__tablename__ = "legacy_sync_runs"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
domain: Mapped[str] = mapped_column(String(128), index=True)
|
|
source_table: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
status: Mapped[str] = mapped_column(String(32), default=StatusValue.RUNNING, index=True)
|
|
started_at: Mapped[datetime] = mapped_column(DateTime, default=utc_now, index=True)
|
|
finished_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
created_count: Mapped[int] = mapped_column(Integer, default=0)
|
|
updated_count: Mapped[int] = mapped_column(Integer, default=0)
|
|
skipped_count: Mapped[int] = mapped_column(Integer, default=0)
|
|
error_message: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
note: Mapped[str | None] = mapped_column(Text, nullable=True)
|