57 lines
2.2 KiB
TypeScript
57 lines
2.2 KiB
TypeScript
|
/**
|
|||
|
|
* 控制面（A4）：身份、策略、凭据、确认、审计五块绑在一起的入口。
|
|||
|
|
*
|
|||
|
|
* 它们不是五个独立功能，而是同一条链上的五道关：
|
|||
|
|
* 身份（以谁的身份调） → 策略（这次调用允不允许） → 凭据（拿什么去调）
|
|||
|
|
* → 确认（写操作要不要人点头） → 审计（发生后留痕）
|
|||
|
|
* 任何一块缺失都会让「可控」变成空话，所以绑在一起注入 Core。
|
|||
|
|
*
|
|||
|
|
* 这一层与引擎无关：Pi 还是 Codex，走的都是 Core.invoke 这一个出口。
|
|||
|
|
*/
|
|||
|
|
import type { Capability } from '@aps/provider-sdk';
|
|||
|
|
|
|||
|
|
import type { AuditLog } from '../audit/log.js';
|
|||
|
|
import type { CredentialBroker } from '../credentials/broker.js';
|
|||
|
|
import type { IdentityContext } from '../identity/context.js';
|
|||
|
|
import type { PendingActionStore } from '../approval/store.js';
|
|||
|
|
import type { PolicyEngine } from '../policy/engine.js';
|
|||
|
|
import { createRulePolicy } from '../policy/engine.js';
|
|||
|
|
|
|||
|
|
export interface ControlPlaneOptions {
|
|||
|
|
identity: IdentityContext;
|
|||
|
|
credentials: CredentialBroker;
|
|||
|
|
approvals: PendingActionStore;
|
|||
|
|
audit: AuditLog;
|
|||
|
|
/** 能力可见性（A3.5）：能力清单与这里必须是同一次过滤 */
|
|||
|
|
isVisible: (capability: Capability, subject: { userId: string; tenantId: string }) => boolean;
|
|||
|
|
policy?: PolicyEngine;
|
|||
|
|
/** 确认卡有效期；超过就失效，必须重新发起 */
|
|||
|
|
approvalTtlMs?: number;
|
|||
|
|
now?: () => number;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
export interface ControlPlane {
|
|||
|
|
identity: IdentityContext;
|
|||
|
|
credentials: CredentialBroker;
|
|||
|
|
approvals: PendingActionStore;
|
|||
|
|
audit: AuditLog;
|
|||
|
|
policy: PolicyEngine;
|
|||
|
|
isVisible: (capability: Capability, subject: { userId: string; tenantId: string }) => boolean;
|
|||
|
|
approvalTtlMs: number;
|
|||
|
|
now(): number;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const DEFAULT_APPROVAL_TTL_MS = 15 * 60_000;
|
|||
|
|
|
|||
|
|
export function createControlPlane(options: ControlPlaneOptions): ControlPlane {
|
|||
|
|
return {
|
|||
|
|
identity: options.identity,
|
|||
|
|
credentials: options.credentials,
|
|||
|
|
approvals: options.approvals,
|
|||
|
|
audit: options.audit,
|
|||
|
|
policy: options.policy ?? createRulePolicy(),
|
|||
|
|
isVisible: options.isVisible,
|
|||
|
|
approvalTtlMs: options.approvalTtlMs ?? DEFAULT_APPROVAL_TTL_MS,
|
|||
|
|
now: options.now ?? Date.now,
|
|||
|
|
};
|
|||
|
|
}
|