zheromiku
dcdc8d1ddd
全栈知识治理平台首次入库（P1-P10 + 发布链路模拟验证闭环）： - 治理核心：源目录/变更集/人工审核/发布批次/发布执行（fail-closed 闸口） - 测试通道：WeKnora 测试 KB 上传/轮询/验收；poll 完成时写入 parser_generation/index_generation，修复 manual/seed 路径发布闸口永久拦截 - 发布适配器 v071（本地 source=测试角色 / 云端 target=生产角色 模拟验证通过）： * ES 导出/导入 mapping 自适应（.keyword 子字段、可选 tenant_id） * OSS locator 支持嵌套 scheme；chunks.seq_id 由目标序列分配 * bundle 归档同身份重试原子替换；verifier 按 bundle chunk_type 计数 * 回滚 job payload 支持 prior_execution_id（strict 解码） - 三通道发布+回滚演练实测：publish 4/4 verified，检索命中， rollback 4/4 rolled_back，目标端 PG is_enabled=false、ES is_enabled=false - 前端 A·Data-console 风格全站统一，120 用例通过 - 门禁：go vet / go test 全包通过，gofmt 干净
81 lines
2.4 KiB
Go
81 lines
2.4 KiB
Go
package governance
|
|
|
|
import (
|
|
"errors"
|
|
"strings"
|
|
"time"
|
|
"unicode"
|
|
)
|
|
|
|
type ScopeTargetType string
|
|
|
|
const (
|
|
ScopeTargetDirectory ScopeTargetType = "directory"
|
|
ScopeTargetItem ScopeTargetType = "item"
|
|
)
|
|
|
|
type ScopeRuleMutation struct {
|
|
TargetType ScopeTargetType
|
|
ConnectionID string
|
|
DirectoryPath string
|
|
SourceItemID string
|
|
Visibility Visibility
|
|
OperatorRef string
|
|
Reason string
|
|
Clear bool
|
|
Now time.Time
|
|
}
|
|
|
|
type ScopeRule struct {
|
|
TargetType ScopeTargetType `json:"target_type"`
|
|
ConnectionID string `json:"connection_id,omitempty"`
|
|
DirectoryPath string `json:"directory_path,omitempty"`
|
|
SourceItemID string `json:"source_item_id,omitempty"`
|
|
Visibility Visibility `json:"visibility"`
|
|
UpdatedBy string `json:"updated_by"`
|
|
Reason string `json:"reason"`
|
|
UpdatedAt time.Time `json:"updated_at"`
|
|
}
|
|
|
|
func (request ScopeRuleMutation) Validate() error {
|
|
if request.TargetType != ScopeTargetDirectory && request.TargetType != ScopeTargetItem {
|
|
return errors.New("scope target must be directory or item")
|
|
}
|
|
if request.TargetType == ScopeTargetDirectory {
|
|
if strings.TrimSpace(request.ConnectionID) == "" || request.SourceItemID != "" || !validScopePath(request.DirectoryPath) {
|
|
return errors.New("directory scope target is invalid")
|
|
}
|
|
} else if strings.TrimSpace(request.SourceItemID) == "" || request.ConnectionID != "" || request.DirectoryPath != "" {
|
|
return errors.New("item scope target is invalid")
|
|
}
|
|
if !request.Clear && request.Visibility != VisibilityInternal && request.Visibility != VisibilityExternal {
|
|
return errors.New("visibility must be internal or external")
|
|
}
|
|
if request.Clear && request.Visibility != "" {
|
|
return errors.New("clear scope must not include visibility")
|
|
}
|
|
operator := strings.TrimSpace(request.OperatorRef)
|
|
reason := strings.TrimSpace(request.Reason)
|
|
if operator == "" || len(operator) > 128 || reason == "" || len(reason) > 500 || request.Now.IsZero() {
|
|
return errors.New("operator, reason, and time are required")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func validScopePath(value string) bool {
|
|
if len(value) > 2048 || strings.HasPrefix(value, "/") || strings.Contains(value, "\\") {
|
|
return false
|
|
}
|
|
for _, part := range strings.Split(value, "/") {
|
|
if part == "." || part == ".." {
|
|
return false
|
|
}
|
|
}
|
|
for _, value := range value {
|
|
if unicode.IsControl(value) {
|
|
return false
|
|
}
|
|
}
|
|
return true
|
|
}
|