feat(ECR-021): AICoreConfig SystemPrompt 只读并 Closed

新增 system_prompts 目录、admin.ai_config.read 与 admin-h5「AI」页；本切片不改运行时 Prompt、禁写发布/UGC/真支付。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-08 00:27:17 +08:00
parent 22f9e358ae
commit 140b08ca01
33 changed files with 649 additions and 5 deletions
@@ -51,6 +51,7 @@ func (h *AdminHandler) Register(api *gin.RouterGroup) {
 	h.registerQualityFeedback(authed)
 	h.registerEntitlement(authed)
 	h.registerContentSafety(authed)
+	h.registerAIConfig(authed)
 }

 func (h *AdminHandler) Login(c *gin.Context) {
@@ -0,0 +1,46 @@
+package handler
+
+import (
+	"errors"
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+	"github.com/google/uuid"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/middleware"
+	"github.com/yuxingu/digital-psychology/apps/api/internal/service/admin"
+	"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
+)
+
+func (h *AdminHandler) registerAIConfig(authed *gin.RouterGroup) {
+	g := authed.Group("/ai")
+	g.GET("/system-prompts", middleware.RequireAdminPermission(h.Svc, admin.PermAIConfigRead), h.ListSystemPrompts)
+	g.GET("/system-prompts/:id", middleware.RequireAdminPermission(h.Svc, admin.PermAIConfigRead), h.GetSystemPrompt)
+}
+
+func (h *AdminHandler) ListSystemPrompts(c *gin.Context) {
+	items, err := h.Svc.ListSystemPrompts(c.Request.Context())
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50027, "list system prompts failed")
+		return
+	}
+	response.OK(c, gin.H{"items": items})
+}
+
+func (h *AdminHandler) GetSystemPrompt(c *gin.Context) {
+	id, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
+		return
+	}
+	row, err := h.Svc.GetSystemPrompt(c.Request.Context(), id)
+	if errors.Is(err, admin.ErrSystemPromptNotFound) {
+		response.Fail(c, http.StatusNotFound, 40404, "system prompt not found")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50028, "get system prompt failed")
+		return
+	}
+	response.OK(c, row)
+}
@@ -0,0 +1,105 @@
+package integration_test
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/google/uuid"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func TestAICoreSystemPrompts(t *testing.T) {
+	r, pool := setupAPIPool(t)
+	ctx := context.Background()
+	tok := adminLogin(t, r, "admin", "change-me")
+
+	_, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/ai/system-prompts", nil, "")
+	if code != http.StatusUnauthorized {
+		t.Fatalf("expected 401, got %d", code)
+	}
+
+	limitedRoleID := uuid.New()
+	_, err := pool.Exec(ctx, `
+		INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`,
+		limitedRoleID, "ai_lim_"+limitedRoleID.String()[:8])
+	if err != nil {
+		t.Fatal(err)
+	}
+	_, err = pool.Exec(ctx, `
+		INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost)
+	if err != nil {
+		t.Fatal(err)
+	}
+	limUser := fmt.Sprintf("ailim_%d", time.Now().UnixNano())
+	_, err = pool.Exec(ctx, `
+		INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`,
+		limUser, string(hash), limitedRoleID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser)
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID)
+	})
+	limTok := adminLogin(t, r, limUser, "limited-pass")
+	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/ai/system-prompts", nil, limTok)
+	if code != http.StatusForbidden {
+		t.Fatalf("expected 403, got %d", code)
+	}
+
+	start := time.Now()
+	env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/ai/system-prompts", nil, tok)
+	if code != 200 || env.Code != 0 {
+		t.Fatalf("list http=%d msg=%s", code, env.Message)
+	}
+	if time.Since(start) > 500*time.Millisecond {
+		t.Fatalf("list too slow %v", time.Since(start))
+	}
+	var list struct {
+		Items []struct {
+			ID   string `json:"id"`
+			Code string `json:"code"`
+			Body string `json:"body"`
+		} `json:"items"`
+	}
+	_ = json.Unmarshal(env.Data, &list)
+	var askID string
+	for _, it := range list.Items {
+		if it.Code == "ask_default" {
+			askID = it.ID
+			if it.Body == "" {
+				t.Fatal("ask_default body empty in list")
+			}
+			break
+		}
+	}
+	if askID == "" {
+		t.Fatalf("missing ask_default: %#v", list.Items)
+	}
+
+	env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/ai/system-prompts/"+askID, nil, tok)
+	if code != 200 {
+		t.Fatalf("get %d", code)
+	}
+	var detail struct {
+		Body string `json:"body"`
+		Code string `json:"code"`
+	}
+	_ = json.Unmarshal(env.Data, &detail)
+	if detail.Code != "ask_default" || detail.Body == "" {
+		t.Fatalf("bad detail %#v", detail)
+	}
+
+	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/ai/system-prompts/"+fakeUUID(), nil, tok)
+	if code != http.StatusNotFound {
+		t.Fatalf("expected 404, got %d", code)
+	}
+}
@@ -0,0 +1,62 @@
+package repository
+
+import (
+	"context"
+	"errors"
+	"time"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+)
+
+// SystemPromptRow is AICoreConfig SystemPrompt catalog row.
+type SystemPromptRow struct {
+	ID        uuid.UUID `json:"id"`
+	Code      string    `json:"code"`
+	Title     string    `json:"title"`
+	Scene     *string   `json:"scene,omitempty"`
+	Body      string    `json:"body"`
+	Version   int       `json:"version"`
+	Active    bool      `json:"active"`
+	System    bool      `json:"system"`
+	UpdatedAt time.Time `json:"updated_at"`
+}
+
+// ListSystemPrompts returns prompt catalog (body included for ops read).
+func (r *AdminRepo) ListSystemPrompts(ctx context.Context) ([]SystemPromptRow, error) {
+	rows, err := r.Pool.Query(ctx, `
+		SELECT id, code, title, scene, body, version, active, system, updated_at
+		FROM system_prompts
+		ORDER BY active DESC, code ASC`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var out []SystemPromptRow
+	for rows.Next() {
+		var p SystemPromptRow
+		if err := rows.Scan(
+			&p.ID, &p.Code, &p.Title, &p.Scene, &p.Body, &p.Version, &p.Active, &p.System, &p.UpdatedAt,
+		); err != nil {
+			return nil, err
+		}
+		out = append(out, p)
+	}
+	return out, rows.Err()
+}
+
+// GetSystemPrompt loads one prompt by id.
+func (r *AdminRepo) GetSystemPrompt(ctx context.Context, id uuid.UUID) (*SystemPromptRow, error) {
+	var p SystemPromptRow
+	err := r.Pool.QueryRow(ctx, `
+		SELECT id, code, title, scene, body, version, active, system, updated_at
+		FROM system_prompts WHERE id=$1`, id,
+	).Scan(&p.ID, &p.Code, &p.Title, &p.Scene, &p.Body, &p.Version, &p.Active, &p.System, &p.UpdatedAt)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, err
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &p, nil
+}
@@ -0,0 +1,34 @@
+package admin
+
+import (
+	"context"
+	"errors"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+)
+
+var ErrSystemPromptNotFound = errString("system prompt not found")
+
+// ListSystemPrompts returns SystemPrompt catalog.
+func (s *Service) ListSystemPrompts(ctx context.Context) ([]repository.SystemPromptRow, error) {
+	items, err := s.Repo.ListSystemPrompts(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if items == nil {
+		items = []repository.SystemPromptRow{}
+	}
+	return items, nil
+}
+
+// GetSystemPrompt loads one prompt.
+func (s *Service) GetSystemPrompt(ctx context.Context, id uuid.UUID) (*repository.SystemPromptRow, error) {
+	row, err := s.Repo.GetSystemPrompt(ctx, id)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, ErrSystemPromptNotFound
+	}
+	return row, err
+}
@@ -27,6 +27,7 @@ const (
 	PermAskRead              = "admin.ask.read"
 	PermAskFeedbackWrite     = "admin.ask.feedback.write"
 	PermContentSafetyRead    = "admin.content_safety.read"
+	PermAIConfigRead         = "admin.ai_config.read"
 )

 var knownPermissions = map[string]struct{}{
@@ -36,6 +37,7 @@ var knownPermissions = map[string]struct{}{
 	PermUsersStatusWrite: {}, PermMembershipPlansRead: {}, PermMembershipPlansWrite: {},
 	PermMembershipCodesRead: {}, PermMembershipCodesWrite: {},
 	PermAskRead: {}, PermAskFeedbackWrite: {}, PermContentSafetyRead: {},
+	PermAIConfigRead: {},
 }

 var (
@@ -0,0 +1,4 @@
+-- ECR-021 down
+
+DELETE FROM admin_role_permissions WHERE code = 'admin.ai_config.read';
+DROP TABLE IF EXISTS system_prompts;
@@ -0,0 +1,42 @@
+-- ECR-021 AICoreConfig SystemPrompt (read catalog)
+
+CREATE TABLE IF NOT EXISTS system_prompts (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  code varchar(64) NOT NULL UNIQUE,
+  title varchar(128) NOT NULL,
+  scene varchar(32) NULL,
+  body text NOT NULL,
+  version int NOT NULL DEFAULT 1 CHECK (version > 0),
+  active boolean NOT NULL DEFAULT true,
+  system boolean NOT NULL DEFAULT false,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_system_prompts_active ON system_prompts(active);
+
+INSERT INTO system_prompts(code, title, scene, body, version, active, system)
+VALUES (
+  'ask_default',
+  '问答默认系统提示',
+  NULL,
+  $prompt$你是「愈心谷」的 AI 成长助手。
+
+定位：陪伴式成长对话，非医疗诊断、非心理咨询执业替代。
+语气：温和、具体、可执行；避免恐吓与宿命论话术。
+
+运行时将注入：档案称呼、关系、生日、场景、已有报告摘要（若有）。
+占位约定：{{display_name}} · {{relation}} · {{birth_date}} · {{scene}} · {{report_ctx}}
+
+禁止：承诺疗效、开药、鼓励自伤、编造未生成的测评结论。$prompt$,
+  1,
+  true,
+  true
+)
+ON CONFLICT (code) DO NOTHING;
+
+INSERT INTO admin_role_permissions(role_id, code)
+SELECT r.id, 'admin.ai_config.read'
+FROM admin_roles r
+WHERE r.name = 'super_admin'
+ON CONFLICT DO NOTHING;