jack/digital-psychology
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(ECR-022): CrisisCare CrisisPolicy 只读并 Closed

Browse Source 
新增 crisis_policies、admin.crisis.read、列表/试匹配 API 与 admin-h5「危机」页；禁 CrisisEvent 写/UGC/真支付。

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
jackyu66git
2026-08-08 01:28:45 +08:00
co-authored by Cursor
parent 4b5e5bc63d
commit de224184a6
33 changed files with 746 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/admin-h5/src/api/client.ts
+38
View File
@@ -321,6 +321,44 @@ export const adminApi = {
system: boolean
updated_at: string
}>('GET', `/ai/system-prompts/${id}`),
crisisPolicies: () =>
request<{
items: Array<{
id: string
code: string
title: string
severity: string
pattern: string
action: string
helpline_text?: string
active: boolean
system: boolean
updated_at: string
}>
}>('GET', '/crisis/policies'),
crisisPolicy: (id: string) =>
request<{
id: string
code: string
title: string
severity: string
pattern: string
action: string
helpline_text?: string
active: boolean
system: boolean
updated_at: string
}>('GET', `/crisis/policies/${id}`),
evaluateCrisis: (text: string) =>
request<{
matches: Array<{
code: string
title: string
severity: string
action: string
helpline_text?: string
}>
}>('POST', '/crisis/evaluate', { text }),
orders: () =>
request<{
items: Array<{
apps/admin-h5/src/layouts/AdminShell.vue
+1
View File
@@ -33,6 +33,7 @@ async function onLogout() {
<RouterLink to="/ask">问答</RouterLink>
<RouterLink to="/safety">安全</RouterLink>
<RouterLink to="/ai">AI</RouterLink>
<RouterLink to="/crisis">危机</RouterLink>
<RouterLink to="/orders">订单</RouterLink>
<RouterLink to="/audit">审计</RouterLink>
</nav>
apps/admin-h5/src/pages/CrisisPage.vue
+103
View File
@@ -0,0 +1,103 @@
<script setup lang="ts">
import { onMounted, ref } from 'vue'
import { adminApi } from '@/api/client'
type Policy = Awaited<ReturnType<typeof adminApi.crisisPolicies>>['items'][number]
const loading = ref(false)
const error = ref('')
const items = ref<Policy[]>([])
const sample = ref('真的不想活了，怎么办')
const matches = ref<
Array<{ code: string; title: string; severity: string; action: string; helpline_text?: string }>
>([])
const evalMsg = ref('')
async function load() {
loading.value = true
error.value = ''
try {
const res = await adminApi.crisisPolicies()
items.value = res.items || []
} catch (e) {
error.value = e instanceof Error ? e.message : '加载失败'
} finally {
loading.value = false
}
}
async function runEval() {
evalMsg.value = ''
try {
const res = await adminApi.evaluateCrisis(sample.value)
matches.value = res.matches || []
evalMsg.value = matches.value.length ? `命中 ${matches.value.length} 条` : '未命中'
} catch (e) {
evalMsg.value = e instanceof Error ? e.message : '试匹配失败'
matches.value = []
}
}
onMounted(load)
</script>
<template>
<section>
<h1>危机策略</h1>
<p class="muted">CrisisPolicy 只读 · 试匹配不写 CrisisEvent · 非医疗诊断</p>
<p v-if="loading" class="muted">加载中…</p>
<p v-else-if="error" class="err">{{ error }}</p>
<div v-else class="layout">
<div class="card">
<h2>策略目录</h2>
<p v-if="!items.length" class="muted">暂无</p>
<table v-else>
<thead>
<tr><th>代码</th><th>严重度</th><th>动作</th><th>模式</th></tr>
</thead>
<tbody>
<tr v-for="p in items" :key="p.id">
<td>{{ p.title }} <code>{{ p.code }}</code></td>
<td>{{ p.severity }}</td>
<td>{{ p.action }}</td>
<td>{{ p.pattern }}</td>
</tr>
</tbody>
</table>
</div>
<div class="card">
<h2>试匹配</h2>
<textarea v-model="sample" rows="4" />
<div class="row">
<button class="btn" type="button" @click="runEval">试匹配</button>
<span class="muted">{{ evalMsg }}</span>
</div>
<ul v-if="matches.length" class="hits">
<li v-for="m in matches" :key="m.code">
<strong>{{ m.title }}</strong> · {{ m.severity }} · {{ m.action }}
<p v-if="m.helpline_text" class="help">{{ m.helpline_text }}</p>
</li>
</ul>
</div>
</div>
</section>
</template>
<style scoped>
h1 { margin: 0 0 0.35rem; font-size: 1.35rem; }
h2 { margin: 0 0 0.6rem; font-size: 1.05rem; }
.layout { display: grid; grid-template-columns: 1.2fr 1fr; gap: 1rem; margin-top: 1rem; }
textarea {
width: 100%;
border: 1px solid var(--line);
border-radius: 8px;
padding: 0.55rem 0.7rem;
resize: vertical;
font: inherit;
}
.row { display: flex; gap: 0.6rem; align-items: center; margin-top: 0.6rem; }
.hits { margin: 0.75rem 0 0; padding-left: 1.1rem; }
.help { margin: 0.35rem 0 0; color: var(--muted); font-size: 0.85rem; }
code { font-size: 0.75rem; color: var(--muted); margin-left: 0.25rem; }
@media (max-width: 900px) { .layout { grid-template-columns: 1fr; } }
</style>
apps/admin-h5/src/router/index.ts
+1
View File
@@ -20,6 +20,7 @@ const router = createRouter({
{ path: 'ask', name: 'ask', component: () => import('@/pages/AskPage.vue') },
{ path: 'safety', name: 'safety', component: () => import('@/pages/SafetyPage.vue') },
{ path: 'ai', name: 'ai', component: () => import('@/pages/AIConfigPage.vue') },
{ path: 'crisis', name: 'crisis', component: () => import('@/pages/CrisisPage.vue') },
{ path: 'audit', name: 'audit', component: () => import('@/pages/AuditPage.vue') },
],
},
apps/api/internal/handler/admin.go
+1
View File
@@ -52,6 +52,7 @@ func (h *AdminHandler) Register(api *gin.RouterGroup) {
h.registerEntitlement(authed)
h.registerContentSafety(authed)
h.registerAIConfig(authed)
h.registerCrisis(authed)
}
func (h *AdminHandler) Login(c *gin.Context) {
apps/api/internal/handler/admin_crisis.go
+63
View File
@@ -0,0 +1,63 @@
package handler
import (
"errors"
"net/http"
"github.com/gin-gonic/gin"
"github.com/google/uuid"
"github.com/yuxingu/digital-psychology/apps/api/internal/middleware"
"github.com/yuxingu/digital-psychology/apps/api/internal/service/admin"
"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
)
func (h *AdminHandler) registerCrisis(authed *gin.RouterGroup) {
g := authed.Group("/crisis")
g.GET("/policies", middleware.RequireAdminPermission(h.Svc, admin.PermCrisisRead), h.ListCrisisPolicies)
g.GET("/policies/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCrisisRead), h.GetCrisisPolicy)
g.POST("/evaluate", middleware.RequireAdminPermission(h.Svc, admin.PermCrisisRead), h.EvaluateCrisis)
}
func (h *AdminHandler) ListCrisisPolicies(c *gin.Context) {
items, err := h.Svc.ListCrisisPolicies(c.Request.Context())
if err != nil {
response.Fail(c, http.StatusInternalServerError, 50029, "list crisis policies failed")
return
}
response.OK(c, gin.H{"items": items})
}
func (h *AdminHandler) GetCrisisPolicy(c *gin.Context) {
id, err := uuid.Parse(c.Param("id"))
if err != nil {
response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
return
}
row, err := h.Svc.GetCrisisPolicy(c.Request.Context(), id)
if errors.Is(err, admin.ErrCrisisPolicyNotFound) {
response.Fail(c, http.StatusNotFound, 40405, "crisis policy not found")
return
}
if err != nil {
response.Fail(c, http.StatusInternalServerError, 50030, "get crisis policy failed")
return
}
response.OK(c, row)
}
func (h *AdminHandler) EvaluateCrisis(c *gin.Context) {
var body struct {
Text string `json:"text"`
}
if err := c.ShouldBindJSON(&body); err != nil {
response.Fail(c, http.StatusBadRequest, 40000, "invalid body")
return
}
matches, err := h.Svc.EvaluateCrisis(c.Request.Context(), body.Text)
if err != nil {
response.Fail(c, http.StatusInternalServerError, 50031, "evaluate failed")
return
}
response.OK(c, gin.H{"matches": matches})
}
apps/api/internal/integration/crisis_test.go
+103
View File
@@ -0,0 +1,103 @@
package integration_test
import (
"context"
"encoding/json"
"fmt"
"net/http"
"testing"
"time"
"github.com/google/uuid"
"golang.org/x/crypto/bcrypt"
)
func TestCrisisCarePolicies(t *testing.T) {
r, pool := setupAPIPool(t)
ctx := context.Background()
tok := adminLogin(t, r, "admin", "change-me")
_, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/crisis/policies", nil, "")
if code != http.StatusUnauthorized {
t.Fatalf("expected 401, got %d", code)
}
limitedRoleID := uuid.New()
_, err := pool.Exec(ctx, `
INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`,
limitedRoleID, "cr_lim_"+limitedRoleID.String()[:8])
if err != nil {
t.Fatal(err)
}
_, err = pool.Exec(ctx, `
INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID)
if err != nil {
t.Fatal(err)
}
hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost)
if err != nil {
t.Fatal(err)
}
limUser := fmt.Sprintf("crlim_%d", time.Now().UnixNano())
_, err = pool.Exec(ctx, `
INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`,
limUser, string(hash), limitedRoleID)
if err != nil {
t.Fatal(err)
}
t.Cleanup(func() {
_, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser)
_, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID)
})
limTok := adminLogin(t, r, limUser, "limited-pass")
_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/crisis/policies", nil, limTok)
if code != http.StatusForbidden {
t.Fatalf("expected 403, got %d", code)
}
start := time.Now()
env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/crisis/policies", nil, tok)
if code != 200 || env.Code != 0 {
t.Fatalf("list http=%d msg=%s", code, env.Message)
}
if time.Since(start) > 500*time.Millisecond {
t.Fatalf("list too slow %v", time.Since(start))
}
var list struct {
Items []struct {
ID string `json:"id"`
Code string `json:"code"`
System bool `json:"system"`
} `json:"items"`
}
_ = json.Unmarshal(env.Data, &list)
if len(list.Items) < 1 {
t.Fatal("expected seeded crisis policies")
}
firstID := list.Items[0].ID
env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/crisis/policies/"+firstID, nil, tok)
if code != 200 {
t.Fatalf("get %d", code)
}
_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/crisis/policies/"+fakeUUID(), nil, tok)
if code != http.StatusNotFound {
t.Fatalf("expected 404, got %d", code)
}
env, code = doAdminJSON(t, r, http.MethodPost, "/api/v1/admin/crisis/evaluate",
map[string]string{"text": "我真的不想活了"}, tok)
if code != 200 {
t.Fatalf("evaluate %d msg=%s", code, env.Message)
}
var ev struct {
Matches []struct {
Code string `json:"code"`
} `json:"matches"`
}
_ = json.Unmarshal(env.Data, &ev)
if len(ev.Matches) < 1 {
t.Fatalf("expected match, got %#v", ev)
}
}
apps/api/internal/repository/crisis_repo.go
+102
View File
@@ -0,0 +1,102 @@
package repository
import (
"context"
"errors"
"strings"
"time"
"github.com/google/uuid"
"github.com/jackc/pgx/v5"
)
// CrisisPolicyRow is CrisisCare CrisisPolicy catalog.
type CrisisPolicyRow struct {
ID uuid.UUID `json:"id"`
Code string `json:"code"`
Title string `json:"title"`
Severity string `json:"severity"`
Pattern string `json:"pattern"`
Action string `json:"action"`
HelplineText *string `json:"helpline_text,omitempty"`
Active bool `json:"active"`
System bool `json:"system"`
UpdatedAt time.Time `json:"updated_at"`
}
// CrisisMatch is one evaluate hit.
type CrisisMatch struct {
Code string `json:"code"`
Title string `json:"title"`
Severity string `json:"severity"`
Action string `json:"action"`
HelplineText *string `json:"helpline_text,omitempty"`
}
// ListCrisisPolicies returns policies active-first.
func (r *AdminRepo) ListCrisisPolicies(ctx context.Context) ([]CrisisPolicyRow, error) {
rows, err := r.Pool.Query(ctx, `
SELECT id, code, title, severity, pattern, action, helpline_text, active, system, updated_at
FROM crisis_policies
ORDER BY active DESC, severity DESC, code ASC`)
if err != nil {
return nil, err
}
defer rows.Close()
var out []CrisisPolicyRow
for rows.Next() {
var p CrisisPolicyRow
if err := rows.Scan(
&p.ID, &p.Code, &p.Title, &p.Severity, &p.Pattern, &p.Action, &p.HelplineText,
&p.Active, &p.System, &p.UpdatedAt,
); err != nil {
return nil, err
}
out = append(out, p)
}
return out, rows.Err()
}
// GetCrisisPolicy loads one policy.
func (r *AdminRepo) GetCrisisPolicy(ctx context.Context, id uuid.UUID) (*CrisisPolicyRow, error) {
var p CrisisPolicyRow
err := r.Pool.QueryRow(ctx, `
SELECT id, code, title, severity, pattern, action, helpline_text, active, system, updated_at
FROM crisis_policies WHERE id=$1`, id,
).Scan(
&p.ID, &p.Code, &p.Title, &p.Severity, &p.Pattern, &p.Action, &p.HelplineText,
&p.Active, &p.System, &p.UpdatedAt,
)
if errors.Is(err, pgx.ErrNoRows) {
return nil, err
}
if err != nil {
return nil, err
}
return &p, nil
}
// EvaluateCrisisPolicies runs substring match preview (ops only).
func (r *AdminRepo) EvaluateCrisisPolicies(ctx context.Context, text string) ([]CrisisMatch, error) {
policies, err := r.ListCrisisPolicies(ctx)
if err != nil {
return nil, err
}
lower := strings.ToLower(text)
var out []CrisisMatch
for _, p := range policies {
if !p.Active || p.Pattern == "" {
continue
}
if strings.Contains(lower, strings.ToLower(p.Pattern)) {
out = append(out, CrisisMatch{
Code: p.Code, Title: p.Title, Severity: p.Severity,
Action: p.Action, HelplineText: p.HelplineText,
})
}
}
if out == nil {
out = []CrisisMatch{}
}
return out, nil
}
apps/api/internal/service/admin/crisis.go
+39
View File
@@ -0,0 +1,39 @@
package admin
import (
"context"
"errors"
"github.com/google/uuid"
"github.com/jackc/pgx/v5"
"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
)
var ErrCrisisPolicyNotFound = errString("crisis policy not found")
// ListCrisisPolicies returns CrisisPolicy catalog.
func (s *Service) ListCrisisPolicies(ctx context.Context) ([]repository.CrisisPolicyRow, error) {
items, err := s.Repo.ListCrisisPolicies(ctx)
if err != nil {
return nil, err
}
if items == nil {
items = []repository.CrisisPolicyRow{}
}
return items, nil
}
// GetCrisisPolicy loads one policy.
func (s *Service) GetCrisisPolicy(ctx context.Context, id uuid.UUID) (*repository.CrisisPolicyRow, error) {
row, err := s.Repo.GetCrisisPolicy(ctx, id)
if errors.Is(err, pgx.ErrNoRows) {
return nil, ErrCrisisPolicyNotFound
}
return row, err
}
// EvaluateCrisis runs read-only policy preview.
func (s *Service) EvaluateCrisis(ctx context.Context, text string) ([]repository.CrisisMatch, error) {
return s.Repo.EvaluateCrisisPolicies(ctx, text)
}
apps/api/internal/service/admin/rbac.go
+2 -1
View File
@@ -28,6 +28,7 @@ const (
PermAskFeedbackWrite = "admin.ask.feedback.write"
PermContentSafetyRead = "admin.content_safety.read"
PermAIConfigRead = "admin.ai_config.read"
PermCrisisRead = "admin.crisis.read"
)
var knownPermissions = map[string]struct{}{
@@ -37,7 +38,7 @@ var knownPermissions = map[string]struct{}{
PermUsersStatusWrite: {}, PermMembershipPlansRead: {}, PermMembershipPlansWrite: {},
PermMembershipCodesRead: {}, PermMembershipCodesWrite: {},
PermAskRead: {}, PermAskFeedbackWrite: {}, PermContentSafetyRead: {},
PermAIConfigRead: {},
PermAIConfigRead: {}, PermCrisisRead: {},
}
var (
apps/api/migrations/000023_crisis_policies.down.sql
+4
View File
@@ -0,0 +1,4 @@
-- ECR-022 down
DELETE FROM admin_role_permissions WHERE code = 'admin.crisis.read';
DROP TABLE IF EXISTS crisis_policies;
apps/api/migrations/000023_crisis_policies.up.sql
+49
View File
@@ -0,0 +1,49 @@
-- ECR-022 CrisisCare CrisisPolicy
CREATE TABLE IF NOT EXISTS crisis_policies (
id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
code varchar(64) NOT NULL UNIQUE,
title varchar(128) NOT NULL,
severity varchar(16) NOT NULL
CHECK (severity IN ('high','critical')),
pattern text NOT NULL,
action varchar(32) NOT NULL
CHECK (action IN ('escalate','block','show_helpline')),
helpline_text text NULL,
active boolean NOT NULL DEFAULT true,
system boolean NOT NULL DEFAULT false,
created_at timestamptz NOT NULL DEFAULT now(),
updated_at timestamptz NOT NULL DEFAULT now()
);
CREATE INDEX IF NOT EXISTS idx_crisis_policies_active ON crisis_policies(active);
INSERT INTO crisis_policies(code, title, severity, pattern, action, helpline_text, active, system)
VALUES
(
'self_harm_critical',
'自伤/轻生危机',
'critical',
'不想活了',
'show_helpline',
'若你正处于危机，请立即联系身边可信的人，或拨打当地紧急援助/心理援助热线。愈心谷不能替代急救与专业干预。',
true,
true
),
(
'violence_threat',
'暴力伤害威胁',
'high',
'弄死你',
'escalate',
NULL,
true,
true
)
ON CONFLICT (code) DO NOTHING;
INSERT INTO admin_role_permissions(role_id, code)
SELECT r.id, 'admin.crisis.read'
FROM admin_roles r
WHERE r.name = 'super_admin'
ON CONFLICT DO NOTHING;