8629ac709b
## Phase 1-3: Control Plane + Contract System - awooop_phase1_control_plane_2026-05-04.sql: 12 張核心表 + RLS - awooop_phase1_batch1_rls_2026-05-04.sql: 全部 FORCE RLS + GRANT - packages/awooop-contracts/: 六合約 JSON Schema + golden fixtures - src/models/awooop_contracts.py: Pydantic v2 contract models（extra=forbid） - src/repositories/contract_repository.py: contract lifecycle（draft→published→active） - src/services/contract_service.py: HMAC publish sig + Redis multi-sig activate - src/services/schema_validator.py: LLM output validator（retry×3, E-SCHEMA-001） ## Phase 2: Tenant Isolation - awooop_phase2_budget_ledger_2026-05-04.sql: budget_ledger + RLS - src/services/budget_service.py: Token Budget Hard Kill 三層防線 - src/core/context.py: PROJECT_ID ContextVar（31 background loop 自動繼承） - src/db/base.py + models.py: project_id 欄位 + RLS set_config 注入 - src/hermes/nl_gateway.py: project_id Redis key 前綴（Phase A 雙寫） - src/services/anomaly_counter.py: per-project 改造（Phase A fallback） ## Phase 4: Platform Shell in Shadow Mode - awooop_phase4_run_state_2026-05-04.sql: run_state + step_journal + idempotency - src/services/run_state_machine.py: 8-state FSM + SKIP LOCKED + stale reaper - src/services/platform_runtime.py: UUID v7 + W3C trace_id + shadow_execute - src/services/audit_sink.py: PII/secret redaction 9 patterns - src/api/v1/platform/runs.py: POST/GET /v1/platform/runs（Router→Service 架構） - src/workers/platform_worker.py: SKIP LOCKED worker + heartbeat + reaper loop - src/main.py: platform router + lifespan worker start/stop ## Phase 5: MCP Gateway 五閘門 - awooop_phase5_mcp_gateway_2026-05-04.sql: 4 表 + RLS - src/plugins/mcp/gateway.py: McpGateway（Gate 1~5, E-MCP-GATE-001~009） - src/plugins/mcp/redaction_middleware.py: 雙層 redaction + 16K 截斷 - src/plugins/mcp/registry.py: __provider name mangling（ADR-116） - src/plugins/mcp/credential_resolver.py: k8s secret ref 解析 - tests/test_mcp_credential_isolation.py: 10 個迴歸測試（secret leak 防再現） ## Phase 6-8: EwoooC + Channel Hub + Approval Token - awooop_phase6_ewoooc_onboarding_2026-05-04.sql: ewoooc tenant + 4 read-only MCP tools - awooop_phase7_channel_hub_2026-05-04.sql: conversation_event + outbound_message - src/services/provider_proxy.py: ProviderProxy + PlatformEnvelope（ADR-115） - src/services/channel_hub.py: Telegram inbound mirror + Progressive Feedback（30s） - src/services/awooop_approval_token.py: HS256 + jti NX replay 防護 + suggest mode Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
95 lines
2.9 KiB
JSON
95 lines
2.9 KiB
JSON
{
|
||
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||
"$id": "https://awooop.platform/contracts/v1/channel_event",
|
||
"title": "Channel Event Contract",
|
||
"description": "AwoooP Channel Event 合約 — 定義來自外部 channel 的事件結構（冪等性 + 去重）",
|
||
"type": "object",
|
||
"required": ["event_id", "channel_type", "event_type", "project_id", "payload", "received_at"],
|
||
"additionalProperties": false,
|
||
"properties": {
|
||
"event_id": {
|
||
"type": "string",
|
||
"pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
|
||
"description": "Platform 生成的事件 UUID"
|
||
},
|
||
"project_id": {
|
||
"type": "string",
|
||
"pattern": "^[a-z0-9][a-z0-9_-]{1,63}$",
|
||
"description": "所屬租戶"
|
||
},
|
||
"channel_type": {
|
||
"type": "string",
|
||
"enum": ["telegram", "slack", "webhook", "api"],
|
||
"description": "Channel 類型"
|
||
},
|
||
"event_type": {
|
||
"type": "string",
|
||
"enum": [
|
||
"message_received",
|
||
"callback_query",
|
||
"command_invoked",
|
||
"webhook_post",
|
||
"api_request",
|
||
"approval_response"
|
||
],
|
||
"description": "事件類型"
|
||
},
|
||
"provider_event_id": {
|
||
"type": "string",
|
||
"maxLength": 256,
|
||
"description": "原始 provider 的事件 ID（去重用）"
|
||
},
|
||
"user_id": {
|
||
"type": "string",
|
||
"description": "發送事件的使用者識別符（platform_subject_id）"
|
||
},
|
||
"chat_id": {
|
||
"type": ["string", "null"],
|
||
"description": "Telegram chat_id 或 Slack channel_id"
|
||
},
|
||
"payload": {
|
||
"type": "object",
|
||
"description": "原始 channel payload（channel-specific 結構）",
|
||
"minProperties": 1
|
||
},
|
||
"text": {
|
||
"type": ["string", "null"],
|
||
"maxLength": 4096,
|
||
"description": "訊息文字（方便直接讀取，不需 parse payload）"
|
||
},
|
||
"attachments": {
|
||
"type": "array",
|
||
"items": {
|
||
"type": "object",
|
||
"required": ["attachment_type", "file_id"],
|
||
"additionalProperties": false,
|
||
"properties": {
|
||
"attachment_type": {"type": "string", "enum": ["photo", "document", "audio", "video"]},
|
||
"file_id": {"type": "string"},
|
||
"sha256": {
|
||
"type": ["string", "null"],
|
||
"pattern": "^[0-9a-f]{64}$",
|
||
"description": "下載後的附件 SHA-256"
|
||
}
|
||
}
|
||
},
|
||
"description": "附件清單"
|
||
},
|
||
"run_id": {
|
||
"type": ["string", "null"],
|
||
"pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
|
||
"description": "觸發的 run UUID（事件處理後填入）"
|
||
},
|
||
"is_duplicate": {
|
||
"type": "boolean",
|
||
"default": false,
|
||
"description": "此事件是否為重複（去重後設為 true）"
|
||
},
|
||
"received_at": {
|
||
"type": "string",
|
||
"format": "date-time",
|
||
"description": "Platform 收到事件的時間（ISO 8601）"
|
||
}
|
||
}
|
||
}
|