refactor(api): 使用常量替代硬编码字符串 - 在health_check接口中使用ApiResponseKey.STATUS和ApiStatus.OK常量 - 替换硬编码的状态返回值为枚举常量 refactor(core): 配置模块错误信息统一使用常量 - 从constants模块导入ConfigErrorDetail并替换CORS_ORIGINS和LEGACY_ALLOWED_QUERIES的验证错误信息 - 配置类中的默认值使用constants中定义的常量 feat(constants): 添加API响应、安全错误和配置错误常量类 - 新增ApiResponseKey用于API状态键名 - 新增ApiStatus用于API状态值 - 新增SecurityErrorDetail用于安全认证错误详情 - 新增ConfigErrorDetail用于配置验证错误详情 - 添加DEFAULT_MODEL_PROVIDER和DEFAULT_OPENCLAW_ACTION_JSON常量 refactor(security): 安全认证模块使用错误常量 - 将硬编码的安全错误信息替换为SecurityErrorDetail常量 - 包括API密钥、审批密钥和审计密钥的相关错误信息 refactor(ai-agent): AI代理适配器改进错误处理 - 将HTTP状态码替换为FastAPI状态常量 - 添加OpenClaw工具和操作的错误常量 - 修复健康检查和工具调用中的状态码比较逻辑 - 添加AIToolAuditKey用于工具审计键名 feat(ai-agent): 扩展AI代理常量定义 - 新增AIToolAuditKey用于工具审计字段 - 添加OpenClaw相关的错误常量如OPENCLAW_CHAT_PROVIDER_REQUIRED等 - 添加UNSUPPORTED_AI_SKILL_TEMPLATE模板字符串 refactor(approvals): 审批模块常量化重构 - 新增ApprovalPayloadKey用于审批载荷字段 - 添加approval_action函数和APPROVAL_ACTION_SEPARATOR分隔符 - 使用常量替换字面量值 feat(audit): 审计模块新增飞书事件动作类型 - 添加FEISHU_WEBHOOK_EVENT和FEISHU_LONG_CONNECTION_EVENT审计动作 refactor(business): 业务模块全面常量化 - 新增BusinessDomain枚举包含所有业务域 - 添加BusinessResponseKey、BusinessPayloadKey等常量类 - 重构DOMAIN_MODELS为frozenset以提高性能 - 添加normalize_domain等辅助函数用于域标准化 - 使用常量替换路由和业务服务中的硬编码字符串 - 添加业务错误常量和字段验证模板 refactor(feishu): 飞书客户端错误处理优化 - 将HTTP状态码替换为FastAPI标准状态常量 - 改进错误处理的一致性 refactor(approvals): 审批服务使用新常量结构 - 使用ApprovalPayloadKey常量重构载荷字段 - 使用approval_action函数统一动作命名格式 - 优化高风险域判断逻辑 ```
112 lines
3.9 KiB
Python
112 lines
3.9 KiB
Python
from secrets import compare_digest
|
|
from typing import Any
|
|
|
|
from fastapi import HTTPException, status
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.constants import ActorValue
|
|
from app.core.config import get_settings
|
|
from app.modules.audit.constants import AuditAction, AuditSource
|
|
from app.modules.audit.schemas import AuditLogCreate
|
|
from app.modules.audit.service import AuditService
|
|
from app.modules.feishu.client import FeishuClient
|
|
from app.modules.feishu.constants import (
|
|
FEISHU_EMPTY_CARD_TEXT,
|
|
FEISHU_INVALID_TOKEN,
|
|
FEISHU_VERIFICATION_TOKEN_REQUIRED,
|
|
FeishuPayloadKey,
|
|
FeishuReceiveIdType,
|
|
)
|
|
|
|
|
|
class FeishuService:
|
|
"""Send Feishu messages and record audit entries for outbound actions."""
|
|
|
|
def __init__(self, db: Session):
|
|
self.db = db
|
|
self.audit = AuditService(db)
|
|
self.client = FeishuClient()
|
|
|
|
def verify_event(self, payload: dict[str, Any]) -> None:
|
|
settings = get_settings()
|
|
expected = settings.feishu_verification_token
|
|
header = payload.get(FeishuPayloadKey.HEADER) or {}
|
|
token = payload.get(FeishuPayloadKey.TOKEN) or header.get(FeishuPayloadKey.TOKEN)
|
|
if not expected:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
|
|
detail=FEISHU_VERIFICATION_TOKEN_REQUIRED,
|
|
)
|
|
if not token or not compare_digest(str(token), expected):
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail=FEISHU_INVALID_TOKEN,
|
|
)
|
|
|
|
def send_text(
|
|
self,
|
|
text: str,
|
|
receive_id: str | None = None,
|
|
receive_id_type: str = FeishuReceiveIdType.CHAT_ID,
|
|
actor: str = ActorValue.SYSTEM,
|
|
) -> dict[str, Any]:
|
|
result = self.client.send_text(text, receive_id, receive_id_type)
|
|
self.audit.log(
|
|
AuditLogCreate(
|
|
actor=actor,
|
|
source=AuditSource.FEISHU,
|
|
action=AuditAction.FEISHU_SEND_TEXT,
|
|
request_payload={
|
|
FeishuPayloadKey.RECEIVE_ID: receive_id,
|
|
FeishuPayloadKey.RECEIVE_ID_TYPE: receive_id_type,
|
|
FeishuPayloadKey.TEXT: text,
|
|
},
|
|
response_payload=result,
|
|
)
|
|
)
|
|
return result
|
|
|
|
def send_card(
|
|
self,
|
|
card: dict[str, Any],
|
|
receive_id: str | None = None,
|
|
receive_id_type: str = FeishuReceiveIdType.CHAT_ID,
|
|
actor: str = ActorValue.SYSTEM,
|
|
) -> dict[str, Any]:
|
|
result = self.client.send_card(card, receive_id, receive_id_type)
|
|
self.audit.log(
|
|
AuditLogCreate(
|
|
actor=actor,
|
|
source=AuditSource.FEISHU,
|
|
action=AuditAction.FEISHU_SEND_CARD,
|
|
request_payload={
|
|
FeishuPayloadKey.RECEIVE_ID: receive_id,
|
|
FeishuPayloadKey.RECEIVE_ID_TYPE: receive_id_type,
|
|
FeishuPayloadKey.CARD: card,
|
|
},
|
|
response_payload=result,
|
|
)
|
|
)
|
|
return result
|
|
|
|
@staticmethod
|
|
def build_basic_card(title: str, lines: list[str]) -> dict[str, Any]:
|
|
return {
|
|
FeishuPayloadKey.CONFIG: {FeishuPayloadKey.WIDE_SCREEN_MODE: True},
|
|
FeishuPayloadKey.HEADER: {
|
|
FeishuPayloadKey.TITLE: {
|
|
FeishuPayloadKey.TAG: FeishuPayloadKey.PLAIN_TEXT,
|
|
FeishuPayloadKey.CONTENT: title,
|
|
}
|
|
},
|
|
FeishuPayloadKey.ELEMENTS: [
|
|
{
|
|
FeishuPayloadKey.TAG: FeishuPayloadKey.DIV,
|
|
FeishuPayloadKey.TEXT: {
|
|
FeishuPayloadKey.TAG: FeishuPayloadKey.LARK_MARKDOWN,
|
|
FeishuPayloadKey.CONTENT: "\n".join(lines) or FEISHU_EMPTY_CARD_TEXT,
|
|
},
|
|
}
|
|
],
|
|
}
|