From e206153ad46c8ae00318629b562d533e95101a3b Mon Sep 17 00:00:00 2001 From: yuqei Date: Mon, 13 Jul 2026 12:01:54 +0800 Subject: [PATCH] feat: harden RC prompt assets and tenant authentication --- ...-operations-launch-readiness-2026-07-13.md | 116 + .../src/yuqei_ai_platform_api/api/legal.py | 26 +- .../src/yuqei_ai_platform_api/api/system.py | 9 + .../src/yuqei_ai_platform_api/config.py | 2 + .../src/yuqei_ai_platform_api/main.py | 8 + .../v1_phase15/default-prompt-assets.json | 3069 +++++++++++++++++ .../src/yuqei_ai_platform_api/prompts.py | 122 +- .../src/yuqei_ai_platform_api/schema_check.py | 110 +- .../src/yuqei_ai_platform_api/service_auth.py | 16 + .../v1_prompt_assets_import.py | 13 +- .../ai-platform-api/tests/test_health.py | 48 + .../tests/test_provider_flow.py | 156 +- .../tests/test_v1_prompt_assets_import.py | 18 + .../src/yuqei_sdk/ai_platform.py | 2 + yuqei-ai-sdk-python/tests/test_ai_platform.py | 2 + .../apps/contract-web/.env.example | 4 + .../quality-labels/[labelCode]/route.ts | 3 +- .../audit/ai-runs/[runId]/route.ts | 3 +- .../api/ai-platform/audit/ai-runs/route.ts | 7 +- .../audit/quality-dashboard/route.ts | 3 +- .../[actionId]/executions/route.ts | 3 +- .../[actionId]/route.ts | 5 +- .../quality-improvement-actions/route.ts | 5 +- .../[knowledgeBaseId]/documents/route.ts | 3 +- .../ai-platform/knowledge-documents/route.ts | 3 +- .../[batchId]/chunks/route.ts | 3 +- .../[batchId]/documents/route.ts | 3 +- .../[batchId]/reindex/route.ts | 3 +- .../[batchId]/route.ts | 3 +- .../knowledge-import-batches/route.ts | 5 +- .../[jobId]/retry/route.ts | 3 +- .../knowledge-ingestion-jobs/route.ts | 3 +- .../model-configs/changes/route.ts | 3 +- .../api/ai-platform/model-configs/route.ts | 5 +- .../prompt-templates/[name]/publish/route.ts | 3 +- .../prompt-templates/[name]/rollback/route.ts | 3 +- .../prompt-templates/changes/route.ts | 3 +- .../api/ai-platform/prompt-templates/route.ts | 5 +- .../quality-rules/default/route.ts | 5 +- .../quality/golden-samples/evaluate/route.ts | 3 +- .../quality/golden-samples/route.ts | 3 +- .../runtime/object-storage/check/route.ts | 3 +- .../runtime/ocr-provider/check/route.ts | 3 +- .../ai-platform/runtime/ocr-provider/route.ts | 5 +- .../runtime/trace-governance/policy/route.ts | 5 +- .../trace-governance/run-once/route.ts | 3 +- .../runtime/worker-health/route.ts | 3 +- .../ai-platform/runtime/worker-runs/route.ts | 3 +- .../runtime/worker-runs/run-once/route.ts | 3 +- .../src/app/api/auth/invite/accept/route.ts | 4 +- .../src/app/api/auth/login/route.ts | 4 +- .../api/auth/password-reset/confirm/route.ts | 4 +- .../api/auth/password-reset/request/route.ts | 6 +- .../src/app/api/auth/register/route.ts | 4 +- .../contract-web/src/lib/ai-platform-api.ts | 28 + .../apps/contract-web/src/lib/contract-api.ts | 34 +- .../contract-web/src/lib/contract-session.ts | 42 +- .../yuqei_contract_api/api/contracts_core.py | 3 +- .../src/yuqei_contract_api/api/identity.py | 143 +- .../src/yuqei_contract_api/config.py | 45 + .../src/yuqei_contract_api/main.py | 9 + .../src/yuqei_contract_api/proxy_auth.py | 18 + .../src/yuqei_contract_api/review_worker.py | 10 +- .../tests/test_contract_workflow.py | 2 + .../contract-api/tests/test_health.py | 2 +- .../contract-api/tests/test_proxy_auth.py | 85 + yuqei-infra/compose/.env.example | 6 + yuqei-infra/compose/.env.production.example | 9 +- yuqei-infra/compose/docker-compose.yml | 27 + yuqei-infra/scripts/compare-v1-v2-assets.py | 248 +- .../scripts/deploy-v2-smoke-docker.ps1 | 9 + 71 files changed, 4427 insertions(+), 155 deletions(-) create mode 100644 project-docs/V2-operations-launch-readiness-2026-07-13.md create mode 100644 yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompt_assets/v1_phase15/default-prompt-assets.json create mode 100644 yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/service_auth.py create mode 100644 yuqei-contract-platform/apps/contract-web/src/lib/ai-platform-api.ts create mode 100644 yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/proxy_auth.py create mode 100644 yuqei-contract-platform/services/contract-api/tests/test_proxy_auth.py diff --git a/project-docs/V2-operations-launch-readiness-2026-07-13.md b/project-docs/V2-operations-launch-readiness-2026-07-13.md new file mode 100644 index 00000000..a2568003 --- /dev/null +++ b/project-docs/V2-operations-launch-readiness-2026-07-13.md @@ -0,0 +1,116 @@ +# AI 合同平台 V2 运营上线评估 + +日期：2026-07-13 + +## 结论 + +- **内部 UAT / 受控单租户试点：有条件可进入。** 当前版本需先部署到 `192.168.3.90` smoke，并通过本文列出的安全、身份和真实 AI 抽样门槛。 +- **公开多企业 SaaS 生产：当前 No-Go。** 阻断项不是模板或 Prompt 数量，而是真实邮件交付、真实 AI Provider 评估、内容法务签批和本轮身份安全改动尚未完成远端验证。 +- 不建议继续横向增加模板数量。下一阶段应优先完成内容治理、真实模型质量评估和生产运行保障。 + +## 当前能力 + +| 领域 | 当前状态 | 运营判断 | +| --- | --- | --- | +| 合同模板 | V1 / 打包资产 / smoke 运行时均为 30，30 个模板可全量生成 | 数量和工程完整性达标，外部商用前仍需法务签批 | +| 标准条款 / 审查规则 | 8 / 8，具备草稿、校验、发布、下线、回滚和推荐闭环 | 可试点，需要明确业务负责人和复审周期 | +| Prompt | V1 / 打包资产 / smoke 已发布资产均为 46 | 资产齐套；本轮已修正法律问答和行业审查 Prompt 选择，但尚未在真实模型上验收 | +| 法律全文库 | smoke 运行时 789,867 条，已有版本表和法规影响扫描 | 规模达标；重点转为时效性、来源、失效标记和抽样准确性 | +| 合同主链路 | 起草、审批、审查、条款修复、版本、归档、Word/PDF 报告、文件仓库已闭环 | 可进入 UAT | +| 租户与账号 | 注册公司、邀请、登录、密码重置和管理页已具备 | 邮件仍是开发交付模式；SSO 仅有配置存储，不是完整登录流程 | +| AI 运行 | smoke Provider 调用关闭并启用 fallback | 只能验证工程链路，不能作为生产 AI 质量证据 | + +资产精确核对证据： + +- `project-docs/qa-artifacts/v2-asset-count/v2-asset-count-2026-07-13T02-53-18.128434+00-00.json` +- 模板：`30 / 30 / 30` +- 标准条款：`8 / 8 / 8` +- 审查规则：`8 / 8 / 8` +- Prompt：`46 / 46 / 46` + +## 本轮安全硬化 + +本轮本地代码已完成： + +1. Web 会话从可篡改的 Base64 JSON 改为带有效期的 HMAC 签名 cookie，并启用 `HttpOnly`、`SameSite=Lax` 和生产 `Secure`。 +2. Contract API 不再在生产环境无条件信任 `X-Tenant-Id` / `X-User-Id`，由受控 Web 代理密钥建立信任边界。 +3. 身份管理接口锁定当前租户，普通租户不能通过 `tenant_id` 查询参数访问其他企业。 +4. AI Platform 增加服务密钥；33 个 Web AI 代理路由统一从签名会话注入租户和用户身份。 +5. Contract API、审查 worker 和 Python SDK 支持向 AI Platform 传递服务密钥。 +6. 生产响应不再返回邀请原始 token 和邮箱开发验证码。 + +这些变更在本地测试和生产构建通过，但在部署到 smoke 前仍属于“本地已修、远端待验”。 + +## 生产阻断项 + +### P0-1 远端发布候选验证 + +- 部署当前代码到 `192.168.3.90` smoke。 +- 验证无代理密钥直连 Contract API / AI Platform 数据接口返回 `401`。 +- 验证 Web 登录后合同、模板、文件、AI Trace、知识库均正常。 +- 复跑两套 schema-check、资产精确核对、Docker smoke、核心接口压测和安全扫描。 + +### P0-2 真实 AI Provider 与质量验收 + +- 配置可用 Provider、base URL 和 secret ref。 +- `AI_PLATFORM_PROVIDER_CALL_MODE=enabled`。 +- `AI_PLATFORM_PROVIDER_FALLBACK_ENABLED=false`。 +- 用真实模型复跑 generation / review / legal QA / clause recommendation 黄金样本。 +- 每个高风险模板至少由法务抽样一次，检查风险命中、引用准确、建议可执行和幻觉。 + +### P0-3 邮件与账号安全 + +- 接入真实邮件服务，发送验证码、密码重置和邀请链接。 +- 增加验证码错误次数、发送频率、IP / 账号限流和通用防枚举响应。 +- 当前 runtime config 在 production 会明确报错 `identity_email_delivery`，不能通过改一个布尔配置假装完成。 +- SSO 未实现实际 SAML/OIDC 发起、回调和账号绑定。生产首发可禁用 SSO，但不能对外宣称已支持。 + +### P0-4 内容法务签批 + +30 个模板不需要继续扩容，需补齐运营治理信息： + +- 内容负责人和法务审批人。 +- 审批日期、生效版本、适用法域、最近复审日期。 +- 关键法律依据及其有效性。 +- 高风险模板至少覆盖劳动、股权转让、投资、对赌、股东会决议。 +- 条款、规则和 Prompt 同样需要 owner、发布审批和回滚责任人。 + +### P0-5 生产运行保障 + +- 正式域名 HTTPS、反向代理、CORS 和后端端口暴露策略确认。 +- 生产 secrets 与 smoke secrets 完全隔离。 +- PostgreSQL、文件仓库备份恢复和应用回滚再演练一次。 +- API 错误率、p95/p99、数据库连接、worker 心跳、AI 失败率和备份结果接入告警。 +- 明确隐私政策、数据保留期、客户数据删除流程和人工支持责任人。 + +## 模板与 Prompt 优化策略 + +### 模板 + +工程质量门已覆盖变量完整性、正文生成和格式，不再以“再加模板”作为上线进度。上线前重点是： + +- 删除业务不理解、重复或无法可靠填写的变量。 +- 对必填字段提供明确业务名称和填写约束。 +- 用真实业务样本检查生成正文，而不是只检查能否生成。 +- 对高风险模板建立季度或法规变更触发复审。 + +### Prompt + +46 个 Prompt 已齐套，当前不建议继续堆数量。下一步应建立真实模型评估矩阵： + +- 任务：合同生成、审查、法律问答、条款推荐。 +- 指标：引用准确率、风险召回率、误报率、建议可执行率、结构化输出成功率、成本和延迟。 +- 分层：合同类型、风险等级、文本长度、是否有知识库依据。 +- 每次 Prompt 发布必须记录评估结果、审批人和回滚版本。 + +## 上线决策门 + +满足以下条件后，才建议创建新的不可变 RC tag 并进入生产发布审批： + +1. 本轮身份 / AI 服务鉴权代码已提交、CI 全绿并完成远端 smoke。 +2. 真实 AI Provider 黄金样本通过，fallback 关闭。 +3. 真实邮件发送、限流和防枚举回归通过。 +4. 30 个模板和关键 Prompt 有具名法务签批记录。 +5. 安全扫描、接口压测、备份恢复、回滚和监控告警均有最新证据。 + +在这些条件完成前，系统可以用于内部验收和受控试点，但不应开放公开多企业注册和正式付费承诺。 diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/legal.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/legal.py index f4a6cf88..3b5fb996 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/legal.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/legal.py @@ -11,7 +11,12 @@ from yuqei_ai_platform_api.contract_review import ( review_contract, ) from yuqei_ai_platform_api.legal_qa import LegalCitation, LegalQaRequest, LegalQaResponse, answer_legal_question -from yuqei_ai_platform_api.prompts import render_contract_review_prompt, render_legal_qa_prompt +from yuqei_ai_platform_api.prompts import ( + contract_review_prompt_candidates, + legal_qa_prompt_candidates, + render_contract_review_prompt, + render_legal_qa_prompt, +) from yuqei_ai_platform_api.providers import ModelProviderAdapter, ProviderRequest from yuqei_ai_platform_api.repository import ( AiPlatformRepository, @@ -21,6 +26,7 @@ from yuqei_ai_platform_api.repository import ( KnowledgeDocument, KnowledgeSearchExplain, KnowledgeSearchResult, + PromptTemplate, chunk_to_citation, document_to_citation, search_result_to_retrieval_source, @@ -93,7 +99,7 @@ def register_legal_routes( strategy=request.retrieval_strategy, ) provider_config = store.get_default_provider_config() - prompt_template = store.get_prompt_template("legal_qa.default") + prompt_template = _first_published_prompt(store, legal_qa_prompt_candidates()) prompt = render_legal_qa_prompt( request, citations=citations, @@ -191,7 +197,10 @@ def register_legal_routes( strategy=request.retrieval_strategy, ) provider_config = store.get_default_provider_config() - prompt_template = store.get_prompt_template("contract_review.default") + prompt_template = _first_published_prompt( + store, + contract_review_prompt_candidates(request.contract_type), + ) prompt = render_contract_review_prompt( request, citations=citations, @@ -266,6 +275,17 @@ def register_legal_routes( return response.model_copy(update={"audit_run_id": audit.id}) +def _first_published_prompt( + store: AiPlatformRepository, + candidates: tuple[str, ...], +) -> PromptTemplate | None: + for name in candidates: + prompt = store.get_prompt_template(name) + if prompt is not None: + return prompt + return None + + def _preview_text(value: str, *, limit: int = 4000) -> str: if len(value) <= limit: return value diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/system.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/system.py index 089bad7a..12ee1d8a 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/system.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/api/system.py @@ -76,11 +76,20 @@ def register_system_routes( tags=["runtime"], ) def runtime_schema_check() -> RuntimeSchemaStatus: + try: + default_provider_config = store.get_default_provider_config() + except Exception: # pragma: no cover - driver errors vary for incomplete schemas. + default_provider_config = None return check_ai_platform_schema( settings.database_url, environment=settings.environment, repository_backend=settings.repository_backend, engine=getattr(store, "_engine", None), + provider_call_mode=settings.provider_call_mode, + provider_fallback_enabled=settings.provider_fallback_enabled, + default_provider_config=default_provider_config, + service_auth_required=settings.require_service_auth, + service_secret_configured=len(settings.service_shared_secret.strip()) >= 32, ) @app.get( diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/config.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/config.py index f3f8603b..6668a061 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/config.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/config.py @@ -20,6 +20,8 @@ class AiPlatformSettings(BaseSettings): provider_base_url: str | None = None provider_request_timeout_seconds: float = 30.0 provider_fallback_enabled: bool = True + service_shared_secret: str = "" + require_service_auth: bool = False provider_prompt_token_cost_per_1k: float = 0.0 provider_completion_token_cost_per_1k: float = 0.0 embedding_provider: Literal["local-hash", "openai-compatible"] = "local-hash" diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/main.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/main.py index 25bc3de3..ef287f51 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/main.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/main.py @@ -1,4 +1,5 @@ from fastapi import FastAPI +from fastapi.responses import JSONResponse from yuqei_ai_platform_api import __version__ from yuqei_ai_platform_api.api.audit import register_audit_routes @@ -14,6 +15,7 @@ from yuqei_ai_platform_api.object_storage import build_object_storage from yuqei_ai_platform_api.providers import build_provider_adapter from yuqei_ai_platform_api.repository import AiPlatformRepository from yuqei_ai_platform_api.state import get_repository +from yuqei_ai_platform_api.service_auth import SERVICE_HEADER, is_public_path, is_valid_service_key from yuqei_ai_platform_api.tenant_context import current_tenant_id, reset_current_tenant_id, set_current_tenant_id @@ -45,6 +47,12 @@ def create_app( @app.middleware("http") async def tenant_context_middleware(request, call_next): + if resolved_settings.require_service_auth and not is_public_path(request.url.path, resolved_settings.api_prefix): + if not is_valid_service_key(request.headers.get(SERVICE_HEADER), resolved_settings.service_shared_secret): + return JSONResponse( + status_code=401, + content={"detail": "Authenticated AI Platform service access is required."}, + ) token = set_current_tenant_id(request.headers.get("X-Tenant-Id")) try: response = await call_next(request) diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompt_assets/v1_phase15/default-prompt-assets.json b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompt_assets/v1_phase15/default-prompt-assets.json new file mode 100644 index 00000000..d40f352a --- /dev/null +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompt_assets/v1_phase15/default-prompt-assets.json @@ -0,0 +1,3069 @@ +{ + "schema_version": "phase15-default-prompt-assets.v1", + "description": "AI合同起草与审查助手默认 Prompt 资产，用于正式种入、黄金样本评测和发布。", + "assets": [ + { + "prompt_key": "contract_generation_default", + "prompt_type": "contract_generation", + "name": "合同文书生成默认 Prompt", + "description": "用于根据文书类型、动态要素、模板、法条来源生成合同或法律文书初稿。", + "target_scene": "合同起草与法律文书生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请根据以下变量生成合同或法律文书初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。请先依据 document_type_code 判断文书类型并套用该类型的必备条款结构，覆盖主体、标的/服务、价款/对价、履行与交付、验收、违约责任、解除、争议解决、通知送达与电子签署等关键条款。缺失要素在 missing_fields 中列出，不得编造。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级默认合同生成 Prompt（强化类型识别、必备条款与边界）" + }, + { + "prompt_key": "technical_service_default", + "prompt_type": "contract_generation", + "name": "技术服务合同起草专项 Prompt", + "description": "用于技术服务合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "技术服务合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《技术服务合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：服务范围、服务内容与不包含事项；交付成果、服务期限、服务级别(SLA)与响应时效；费用与结算、发票、付款前置条件；验收标准、验收期限与整改闭环；知识产权与技术成果归属、使用许可；保密义务与数据接触边界；违约责任、责任上限、解除条件；争议解决、通知送达与电子签署。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》技术合同章（第843条、第878-887条技术服务合同，第847-850条职务技术成果与权属）；《最高人民法院关于审理技术合同纠纷案件适用法律若干问题的解释》；《中华人民共和国民法典》第509条、第577条、第585条（履行与违约）。风险与合规边界：涉及个人信息、重要数据或受监管数据处理时，须提示补充数据合规专项条款并复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级技术服务合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "software_development_default", + "prompt_type": "contract_generation", + "name": "软件开发合同起草专项 Prompt", + "description": "用于软件开发合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "软件开发合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《软件开发合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：需求范围与需求确认机制、技术规格附件；开发里程碑、交付物清单与交付时间；变更控制流程与费用调整；测试、交付验收标准与异议期；源代码交付范围、知识产权归属与许可；开源组件披露与开源合规；数据安全与个人信息保护；缺陷修复、维护期与保修；违约责任、责任上限、解除与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》技术开发合同（第851-861条，第859-860条开发成果权属）；《中华人民共和国著作权法》（软件著作权归属与许可）、《计算机软件保护条例》；《中华人民共和国数据安全法》《个人信息保护法》（涉数据处理时）。风险与合规边界：高风险：源代码与知识产权归属、开源传染性许可、数据出境须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级软件开发合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "lease_house_default", + "prompt_type": "contract_generation", + "name": "房屋租赁合同起草专项 Prompt", + "description": "用于房屋租赁合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "房屋租赁合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《房屋租赁合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：房屋信息、用途与出租权属/授权证明；租赁期限、免租期与续租；租金、押金、付款周期与逾期责任；押金退还条件；交付标准与返还条件；维修责任、装修与添附；转租限制；解除与违约责任、消防与安全；争议解决与送达。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》租赁合同章（第703-734条，第707条租期超6个月应书面、第716条转租、第722条欠租解除、第725条买卖不破租赁、第728条优先购买权）；《中华人民共和国民法典》第577条、第585条（违约）。风险与合规边界：住房租赁、商铺/产业园租赁、转租、共有产权、抵押查封、消防审批等须按实际情况专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级房屋租赁合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "property_service_default", + "prompt_type": "contract_generation", + "name": "物业服务合同起草专项 Prompt", + "description": "用于物业服务合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "物业服务合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《物业服务合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：服务区域、物业类型与服务内容标准；物业服务费标准、计收方式与缴费期限；公共收益管理；共用部位/设施设备维护与专项维修资金；公共秩序与安全协助事项（边界与免责）；环境卫生与绿化；业主/使用人义务；服务质量考核；合同解除、交接验收与资料移交；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》物业服务合同章（第937-950条，第944条物业费、第946条业主解除权、第948-950条续聘与交接）；《物业管理条例》《物业服务收费管理办法》《住宅专项维修资金管理办法》《保安服务管理条例》。风险与合规边界：高风险：安全协助义务边界、专项维修资金动用、公共收益归属与业主大会授权须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级物业服务合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "equity_transfer_default", + "prompt_type": "contract_generation", + "name": "股权转让协议起草专项 Prompt", + "description": "用于股权转让协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "股权转让协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《股权转让协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：转让方、受让方与目标公司信息；标的股权（比例、对应出资额、权属无瑕疵保证）；转让价款与支付方式、支付节点；交割安排与交割先决条件；其他股东放弃优先购买权/同意的确认方式；工商变更登记期限与配合义务；陈述与保证、过渡期安排；税费承担；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国公司法》（有限责任公司股权转让、其他股东优先购买权、股东名册与登记对抗）；《中华人民共和国民法典》第577条、第585条（违约）；《中华人民共和国市场主体登记管理条例》（工商变更登记）。风险与合规边界：高风险：优先购买权程序、权属瑕疵、税务（个税/印花税）、国资/外资/反垄断审批须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级股权转让协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "investment_agreement_default", + "prompt_type": "contract_generation", + "name": "投资协议起草专项 Prompt", + "description": "用于投资协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "投资协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《投资协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：投资方、目标公司、创始股东信息；投资方式、投前/投后估值与投资金额、持股比例；投资款用途与监管；交割先决条件与交割安排；公司治理权利（董事席位、信息权、否决权/保护性条款）；陈述与保证、过渡期承诺；反稀释、优先权（清算优先、优先认购）；退出机制与回购、对赌（如有，注意公司履行边界）；保密、违约与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国公司法》（增资、股东权利、董事会与治理、利润分配）；《中华人民共和国民法典》合同编通则；《全国法院民商事审判工作会议纪要》（对赌与回购的公司履行边界）；《中华人民共和国外商投资法》《反垄断法》（涉外资或经营者集中时）。风险与合规边界：高风险：估值调整/回购的公司履行限制、外资准入、经营者集中申报、特殊权利可执行性须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级投资协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "intercompany_loan_agreement_default", + "prompt_type": "contract_generation", + "name": "企业间借款合同起草专项 Prompt", + "description": "用于企业间借款合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "企业间借款合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《企业间借款合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：借贷双方与关联关系说明、内部审批确认；借款金额、用途与资金划付/到账确认；借款期限、起息日、年化利率与计息方式；利息支付方式（注意利率上限）；还款方式、还款计划与提前还款；担保方式与担保文件；资金用途限制与合规；违约责任、提前到期与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》借款合同章（第667-680条，第680条禁止高利放贷、利息约定）；《最高人民法院关于审理民间借贷案件适用法律若干问题的规定》（企业间资金拆借效力与利率上限）；《最高人民法院关于适用民法典有关担保制度的解释》（担保）。风险与合规边界：极高风险：企业间借贷效力、利率上限（不得超过法定上限）、关联交易审批、以贷转贷无效情形须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级企业间借款合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "valuation_adjustment_agreement_default", + "prompt_type": "contract_generation", + "name": "估值调整协议起草专项 Prompt", + "description": "用于对赌/估值调整协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "估值调整协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《对赌/估值调整协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：投资方、目标公司与原股东/实际控制人信息；估值调整目标与基础投资协议关联；业绩承诺指标、考核期间与指标确认方式（审计机构）；补偿触发条件、补偿方式与计算公式；补偿履行期限、补偿上限/下限；股权回购安排（主体、价格、触发）；公司履行限制说明（与股东对赌 vs 与公司对赌的边界）；信息披露与审计权、争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《全国法院民商事审判工作会议纪要》（九民纪要）第5条（对赌协议效力与履行：与股东对赌有效，与公司对赌须经减资/利润分配程序）；《中华人民共和国公司法》（减资程序、利润分配、资本维持）；《中华人民共和国民法典》合同编。风险与合规边界：极高风险：与目标公司对赌的可履行性受资本维持原则限制，补偿/回购条款须区分主体并提示减资程序；须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级对赌/估值调整协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "shareholder_resolution_default", + "prompt_type": "contract_generation", + "name": "股东会决议起草专项 Prompt", + "description": "用于股东会决议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "股东会决议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《股东会决议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：公司信息、会议类型与届次/决议编号；会议召集（召集人、通知时间与方式）；出席情况与表决权比例；审议议案内容；表决结果与表决比例（注意特别决议2/3以上）；决议事项（董监高任免、注册资本/经营范围/章程修改等）；公司章程依据与关联交易回避；授权办理与登记备案、签署盖章。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国公司法》（股东会职权、召集通知程序、表决比例、特别决议事项、决议效力与可撤销情形）；《中华人民共和国市场主体登记管理条例》（变更登记/备案）。风险与合规边界：高风险：召集程序瑕疵、表决比例不足、章程特别约定会导致决议可撤销或不成立；登记备案材料须专项核验。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级股东会决议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "power_of_attorney_default", + "prompt_type": "contract_generation", + "name": "授权委托书起草专项 Prompt", + "description": "用于授权委托书的专项起草与初稿生成（生产级中国法）。", + "target_scene": "授权委托书生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《授权委托书》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：委托人与受托人身份信息；授权事项与具体权限范围（明确列举，避免概括授权）；授权期限；是否允许转委托；权限证明文件与签署盖章要求；撤销授权的通知方式；使用限制与免责边界。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》第161-175条（代理：委托代理、代理权范围、转委托、表见代理、代理终止）；《中华人民共和国民事诉讼法》（诉讼代理授权，特别授权须明确）；《中华人民共和国电子签名法》（电子签署时）。风险与合规边界：须明确授权范围与期限，避免概括授权与越权代理风险；诉讼/不动产/重大处分等须特别授权并提示公证。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级授权委托书生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "legal_opinion_default", + "prompt_type": "contract_generation", + "name": "法律意见书起草专项 Prompt", + "description": "用于法律意见书的专项起草与初稿生成（生产级中国法）。", + "target_scene": "法律意见书生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《法律意见书》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：出具机构（律所）与经办律师、委托人；出具目的与使用范围/分发对象；核查范围与已核查文件清单；事实基础与前提假设；法律问题与法律分析；结论意见；风险提示、保留事项与使用限制；待核验事项与待补材料。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国律师法》（律师执业与法律意见出具）；《律师事务所从事证券法律业务管理办法》（涉证券/上市业务时）；依据具体法律问题援引的实体法（须来自检索结果，不得编造）。风险与合规边界：极高风险：AI 初稿不得替代律师最终意见；材料不足时必须列出前提假设与待核验事项，结论须经执业律师复核签发。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级法律意见书生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "cooperation_framework_default", + "prompt_type": "contract_generation", + "name": "合作框架协议起草专项 Prompt", + "description": "用于合作框架协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "合作框架协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《合作框架协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：合作背景与合作目标；合作范围与合作模式；实施机制与后续具体协议/订单的关系；费用或分成安排；排他性安排（如有）；知识产权与成果归属；保密义务；期限、退出与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》合同编通则（第509条履行原则、预约合同第495条）；《中华人民共和国反垄断法》（涉排他/限制竞争安排时）。风险与合规边界：须区分框架性约定与具有约束力的具体义务；涉股权、加盟、经销、代理或投融资场景应转用专项合同并复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级合作框架协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "demand_letter_default", + "prompt_type": "contract_generation", + "name": "催告函起草专项 Prompt", + "description": "用于催告函的专项起草与初稿生成（生产级中国法）。", + "target_scene": "催告函生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《催告函》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：发函方与收函方、原合同信息（名称、编号）；违约事实简述；催告事项与履行要求；宽限/履行期限；逾期法律后果（解除、追责、保留权利）；送达方式与送达地址；证据留存方式；后续措施声明。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》第563条（催告后解除）、第565条（解除通知到达生效）、第577-585条（违约责任）；《中华人民共和国民事诉讼法》（送达与证据）。风险与合规边界：须确保送达可证、措辞保留权利；解除催告须给予合理宽限期，避免程序瑕疵影响后续解除效力。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级催告函生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "rescission_notice_default", + "prompt_type": "contract_generation", + "name": "解除合同通知书起草专项 Prompt", + "description": "用于解除合同通知书的专项起草与初稿生成（生产级中国法）。", + "target_scene": "解除合同通知书生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《解除合同通知书》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：发函方与收函方、原合同信息；解除事由与解除依据（约定解除/法定解除）；解除生效时间（通知到达）；结算与返还/清算事项；损失主张与责任保留；交接安排；送达方式与证据留存。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》第562-563条（约定与法定解除）、第565条（解除通知到达生效、异议起诉）、第566-567条（解除后果与结算条款效力）；《中华人民共和国民事诉讼法》（送达）。风险与合规边界：高风险：解除权基础（约定/法定）须充分，解除事由不足可能构成违约；通知到达与异议期须留痕，建议律师复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级解除合同通知书生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "sales_default", + "prompt_type": "contract_generation", + "name": "销售合同起草专项 Prompt", + "description": "用于销售合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "销售合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《销售合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：标的（名称、数量、质量标准）与价款；交付与风险转移、运输方式、随附单证；验收标准与质量异议期；付款节点、发票类型与逾期付款责任；质量保证、退换货与售后；违约责任与违约金、责任上限；解除条件、争议解决与电子签署。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》买卖合同章（第595条、第599条、第601-604条、第610-617条、第626-634条）；《中华人民共和国民法典》第577条、第585条（违约责任）；《中华人民共和国消费者权益保护法》（如面向消费者销售）。风险与合规边界：面向消费者的销售须提示《消费者权益保护法》七日无理由退货、三包等强制规定；特殊许可商品须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级销售合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "commission_service_default", + "prompt_type": "contract_generation", + "name": "委托服务合同起草专项 Prompt", + "description": "用于委托服务合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "委托服务合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《委托服务合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：委托事项与服务标准；受托人权限与授权边界；费用结算与报销标准；报告义务与过程留痕；成果归属与知识产权；保密义务；转委托限制；解除（任意解除权及后果）与违约责任。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》委托合同章（第919-936条，第922条指示、第923条转委托、第929条受托人责任、第933条任意解除权及赔偿）。风险与合规边界：须提示委托合同任意解除权及其赔偿后果；强监管委托事项（如金融、医疗、法律服务）须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级委托服务合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "agency_distribution_default", + "prompt_type": "contract_generation", + "name": "代理经销协议起草专项 Prompt", + "description": "用于代理/经销协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "代理经销协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《代理/经销协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：合作产品/服务范围与合作模式（代理 vs 经销）；授权区域与独家性安排；价格体系与最低销售/采购目标；返利与结算规则、订单与交付规则；库存与窜货管理；品牌/商标使用许可与边界；售后与消费者责任；合规边界（反垄断、纵向价格限制）；期限、解除与违约责任。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》合同编（买卖、委托相关规定）；《中华人民共和国反垄断法》（纵向垄断协议、固定转售价格、限定最低价格的合规风险）；《中华人民共和国反不正当竞争法》《商标法》（品牌使用）。风险与合规边界：高风险：独家区域、限定转售价格、最低采购目标可能触及反垄断；窜货与品牌授权边界须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级代理/经销协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "franchise_default", + "prompt_type": "contract_generation", + "name": "加盟合同起草专项 Prompt", + "description": "用于加盟（商业特许经营）合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "加盟合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《加盟（商业特许经营）合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：特许人资质（两店一年、备案）与品牌授权范围；授权区域与门店标准；特许经营费、保证金与供货/结算规则；信息披露确认（披露义务履行）；培训与督导安排；商标许可与经营资源使用；区域保护与线上经营规则；备案办理、消费者投诉与售后机制；终止后清理退出与违约责任。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《商业特许经营管理条例》（特许人资质“两店一年”、信息披露、备案、冷静期）；《商业特许经营信息披露管理办法》《商业特许经营备案管理办法》；《中华人民共和国商标法》（商标许可）、《消费者权益保护法》。风险与合规边界：高风险：特许人“两店一年”资质、信息披露义务、备案、加盟商单方解除冷静期须专项复核；不得替代纯经销或合伙协议。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级加盟（商业特许经营）合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "software_saas_default", + "prompt_type": "contract_generation", + "name": "软件 SaaS 合同起草专项 Prompt", + "description": "用于软件/SaaS 服务合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "软件 SaaS 合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《软件/SaaS 服务合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：服务内容、账号与权限范围；服务可用性(SLA)与服务中断处理；数据处理范围、数据权属与个人信息保护；网络安全与安全事件响应、安全联系人；审计权与合规；知识产权与许可边界；退出与数据迁移/删除；费用、责任限制、解除与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》合同编通则与技术/服务相关规定；《中华人民共和国个人信息保护法》（处理者义务、告知同意、委托处理）；《中华人民共和国数据安全法》《网络安全法》（数据分类分级、安全义务、数据出境）。风险与合规边界：高风险：个人信息委托处理协议、数据出境、重要数据、SLA 与责任限制须专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级软件/SaaS 服务合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "labor_service_default", + "prompt_type": "contract_generation", + "name": "劳务服务合同起草专项 Prompt", + "description": "用于劳务服务合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "劳务服务合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《劳务服务合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：劳务内容、服务标准与交付要求；服务期限与工作方式；劳务报酬、结算方式与发票/税费安排；管理关系边界（避免被认定为劳动关系）；安全责任与工伤风险承担；成果验收与质量；保密范围、解除与违约责任。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》合同编通则与承揽/委托相关规定（第509条、第770条以下）；《中华人民共和国劳动合同法》（用于区分劳动关系与劳务关系的边界提示）。风险与合规边界：高风险提示：须明确为劳务关系而非劳动关系，避免社保、工伤和经济补偿争议；个人提供劳务的安全责任须明确。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单快照" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "升级劳务服务合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "contract_review_default", + "prompt_type": "contract_review", + "name": "合同自动审查默认 Prompt", + "description": "用于识别合同风险、输出风险等级、修改建议和法律依据。", + "target_scene": "合同审查与报告生成", + "system_prompt": "你是 AI 合同审查助手。你必须以审慎、可核验、可解释的方式审查合同文本。不得输出无法追溯的法律结论；风险项必须说明触发原因、影响范围、建议修改方向和可引用法条。", + "prompt_content": "请 review 以下合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、legal_article_refs。请给出风险边界、谈判建议和法律依据。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同类型" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "Phase15 默认合同审查 Prompt 正式种入" + }, + { + "prompt_key": "legal_chat_default", + "prompt_type": "legal_chat", + "name": "法律问答默认 Prompt", + "description": "用于 Chat 场景回答合同、法条、审查报告相关问题。", + "target_scene": "法律问答与合同上下文追问", + "system_prompt": "你是 AI 法律问答助手。你只能基于用户问题、合同上下文、审查报告和系统检索到的法条来源作答。不能确认的信息必须说明限制，不得编造法律条文。", + "prompt_content": "请以 chat answer question reply 的方式回答用户问题。question={{question}}，review_context={{review_context}}，legal_article_refs={{legal_article_refs}}。回答必须包含结论、理由、可操作建议、法律依据和来源列表。若资料不足，请说明还需要哪些合同信息或法条来源。输出可读中文，必要时返回 JSON source 列表。legal law source article citation basis output return。", + "variables": [ + { + "name": "question", + "required": true, + "description": "用户问题" + }, + { + "name": "review_context", + "required": false, + "description": "审查报告或合同上下文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "检索到的相关法条" + } + ], + "output_schema": { + "type": "object", + "required": [ + "answer", + "legal_basis", + "next_actions" + ], + "properties": { + "answer": { + "type": "string" + }, + "legal_basis": { + "type": "array" + }, + "next_actions": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "Phase15 默认法律问答 Prompt 正式种入" + }, + { + "prompt_key": "obligation_extraction_default", + "prompt_type": "business_auxiliary", + "name": "履约义务提取 Prompt", + "description": "用于从合同文本、审查结果或业务背景中提取双方履约义务、期限、触发条件和证据留存要求。", + "target_scene": "合同履约管理与义务清单提取", + "system_prompt": "你是 AI 合同履约辅助助手。你只能基于输入的合同文本、审查上下文和法条来源提取义务，不得新增合同没有约定的事实。对无法确认的事项必须列入 missing_fields 或 verification_items。", + "prompt_content": "请 extract obligations from contract_text={{contract_text}}，review_context={{review_context}}，party_position={{party_position}}，legal_article_refs={{legal_article_refs}}。输出 return JSON，字段包括 obligations、timeline、evidence_requirements、risk_flags、missing_fields、verification_items、legal_basis、quality_notes。每项 obligations 必须包含 obligor、beneficiary、obligation_text、trigger_condition、deadline、performance_standard、evidence_to_keep、breach_consequence、source_clause、risk_boundary。必须标注 legal law source article citation，并说明不确定项。output return JSON risk boundary legal law source article citation", + "variables": [ + { + "name": "contract_text", + "required": true, + "description": "待提取义务的合同或法律文书文本" + }, + { + "name": "review_context", + "required": false, + "description": "审查结果或业务上下文" + }, + { + "name": "party_position", + "required": false, + "description": "提取视角，例如甲方、乙方、平台方、投资方" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条来源列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "obligations", + "missing_fields", + "legal_basis" + ], + "properties": { + "obligations": { + "type": "array" + }, + "timeline": { + "type": "array" + }, + "evidence_requirements": { + "type": "array" + }, + "risk_flags": { + "type": "array" + }, + "missing_fields": { + "type": "array" + }, + "verification_items": { + "type": "array" + }, + "legal_basis": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补齐业务辅助履约义务提取 Prompt" + }, + { + "prompt_key": "filing_materials_checklist_default", + "prompt_type": "business_auxiliary", + "name": "工商/备案材料清单 Prompt", + "description": "用于根据交易、公司治理或变更事项输出工商登记、备案、内部审批和材料准备清单。", + "target_scene": "工商登记备案材料清单生成", + "system_prompt": "你是 AI 工商备案材料辅助助手。你必须区分内部审批材料、工商登记材料、备案材料、签署文件和待人工核验事项。不得承诺登记机关一定受理或通过。", + "prompt_content": "请 generate filing materials checklist。matter_type={{matter_type}}，document_type_code={{document_type_code}}，contract_text={{contract_text}}，company_context={{company_context}}，legal_article_refs={{legal_article_refs}}。输出 return JSON，字段包括 matter_summary、preconditions、materials、signing_requirements、filing_authority、sequence、missing_fields、verification_items、risk_boundary、legal_basis。materials 每项必须包含 material_name、purpose、provider、signatory_or_seal、copy_or_original、required_or_optional、notes。必须标注 legal law source article citation，说明工商/备案口径可能因地区和登记机关要求变化。output return JSON risk boundary legal law source article citation", + "variables": [ + { + "name": "matter_type", + "required": false, + "description": "事项类型，例如股权转让、增资、章程修订、法定代表人变更" + }, + { + "name": "document_type_code", + "required": false, + "description": "文书类型编码" + }, + { + "name": "contract_text", + "required": false, + "description": "合同或决议文本" + }, + { + "name": "company_context", + "required": false, + "description": "公司主体、股东、章程和登记背景" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条来源列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "materials", + "missing_fields", + "legal_basis" + ], + "properties": { + "matter_summary": { + "type": "string" + }, + "preconditions": { + "type": "array" + }, + "materials": { + "type": "array" + }, + "signing_requirements": { + "type": "array" + }, + "filing_authority": { + "type": "string" + }, + "sequence": { + "type": "array" + }, + "missing_fields": { + "type": "array" + }, + "verification_items": { + "type": "array" + }, + "risk_boundary": { + "type": "string" + }, + "legal_basis": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补齐业务辅助工商备案材料清单 Prompt" + }, + { + "prompt_key": "negotiation_strategy_default", + "prompt_type": "business_auxiliary", + "name": "谈判策略 Prompt", + "description": "用于根据合同文本、风险审查结果和我方立场输出可执行的谈判策略、底线、让步阶梯和备选条款。", + "target_scene": "合同谈判策略与条款改写建议", + "system_prompt": "你是 AI 合同谈判策略助手。你必须把商业目标、法律风险、证据条件和谈判筹码分开表达，不得建议违法、失衡或无法履行的条款。", + "prompt_content": "请 provide negotiation strategy。contract_text={{contract_text}}，review_context={{review_context}}，party_position={{party_position}}，business_goal={{business_goal}}，legal_article_refs={{legal_article_refs}}。输出 return JSON，字段包括 strategy_summary、must_hold_positions、negotiable_positions、concession_ladder、fallback_clauses、red_flags、talking_points、risk_boundaries、legal_basis、next_actions。必须说明 negotiate strategy risk boundary，给出可落地话术和备选条款，但不得删除法定义务或必要责任边界。必须标注 legal law source article citation。output return JSON risk boundary negotiate legal law source article citation", + "variables": [ + { + "name": "contract_text", + "required": false, + "description": "合同文本或关键条款" + }, + { + "name": "review_context", + "required": false, + "description": "审查结果或风险项" + }, + { + "name": "party_position", + "required": false, + "description": "谈判立场，例如甲方、乙方、投资方、融资方" + }, + { + "name": "business_goal", + "required": false, + "description": "业务目标和谈判优先级" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条来源列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "strategy_summary", + "must_hold_positions", + "risk_boundaries", + "legal_basis" + ], + "properties": { + "strategy_summary": { + "type": "string" + }, + "must_hold_positions": { + "type": "array" + }, + "negotiable_positions": { + "type": "array" + }, + "concession_ladder": { + "type": "array" + }, + "fallback_clauses": { + "type": "array" + }, + "red_flags": { + "type": "array" + }, + "talking_points": { + "type": "array" + }, + "risk_boundaries": { + "type": "array" + }, + "legal_basis": { + "type": "array" + }, + "next_actions": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "补齐业务辅助谈判策略 Prompt" + }, + { + "prompt_key": "legal_opinion_boundary_fallback_default", + "prompt_type": "business_auxiliary", + "name": "法律意见书强边界兜底 Prompt", + "description": "用于法律意见书场景下材料不足、事实未核验或风险过高时输出强边界兜底说明和人工复核清单。", + "target_scene": "法律意见书边界兜底与人工复核", + "system_prompt": "你是 AI 法律意见书边界兜底助手。你不得替代律师出具最终法律意见，不得对未核验事实作确定性结论。必须优先输出边界、假设、无法判断事项和人工复核要求。", + "prompt_content": "请 generate legal opinion boundary fallback。matter_summary={{matter_summary}}，facts={{facts}}，materials={{materials}}，draft_opinion={{draft_opinion}}，legal_article_refs={{legal_article_refs}}。输出 return JSON，字段包括 boundary_notice、assumptions、cannot_conclude_items、missing_materials、human_review_required、safe_response、risk_boundary、legal_basis、next_actions。必须明确：AI 输出仅为辅助草稿，不构成正式法律意见；材料不足时只能给出条件性意见或拒绝确定性结论。必须标注 legal law source article citation。output return JSON risk boundary fallback legal law source article citation", + "variables": [ + { + "name": "matter_summary", + "required": false, + "description": "事项概述" + }, + { + "name": "facts", + "required": false, + "description": "已知事实和待核验事实" + }, + { + "name": "materials", + "required": false, + "description": "用户提供的材料清单" + }, + { + "name": "draft_opinion", + "required": false, + "description": "已有法律意见书草稿或拟输出内容" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条来源列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "boundary_notice", + "cannot_conclude_items", + "human_review_required", + "legal_basis" + ], + "properties": { + "boundary_notice": { + "type": "string" + }, + "assumptions": { + "type": "array" + }, + "cannot_conclude_items": { + "type": "array" + }, + "missing_materials": { + "type": "array" + }, + "human_review_required": { + "type": "array" + }, + "safe_response": { + "type": "string" + }, + "risk_boundary": { + "type": "string" + }, + "legal_basis": { + "type": "array" + }, + "next_actions": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补齐业务辅助法律意见书强边界兜底 Prompt" + }, + { + "prompt_key": "clause_recommendation_default", + "prompt_type": "clause_recommendation", + "name": "条款推荐默认 Prompt", + "description": "用于根据文书类型、合同正文和行业惯例推荐缺失条款或优化条款。", + "target_scene": "条款推荐与行业惯例补强", + "system_prompt": "你是 AI 条款推荐助手。你必须结合合同类型、现有正文、标准条款库、行业惯例和法律依据提出可落地条款。推荐内容要说明适用场景、插入位置、风险边界和法律依据。", + "prompt_content": "请根据 contract_text={{contract_text}}、document_type_code={{document_type_code}}、standard_clauses={{standard_clauses}}、legal_article_refs={{legal_article_refs}} 推荐缺失条款或优化条款。输出 JSON 数组 items，每项包含 clause_key、clause_title、recommendation_kind、priority、suggested_text、reason、legal_basis、legal_article_refs、insert_position。必须说明 risk、boundary、negotiate、风险边界、谈判建议和法律依据。output return legal law source article citation。", + "variables": [ + { + "name": "contract_text", + "required": true, + "description": "合同正文" + }, + { + "name": "document_type_code", + "required": false, + "description": "文书类型编码" + }, + { + "name": "standard_clauses", + "required": false, + "description": "标准条款候选" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "法条依据" + } + ], + "output_schema": { + "type": "object", + "required": [ + "items" + ], + "properties": { + "items": { + "type": "array" + }, + "summary": { + "type": "object" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "Phase15 默认条款推荐 Prompt 正式种入" + }, + { + "prompt_key": "wording_rewrite_default", + "prompt_type": "wording_rewrite", + "name": "条款措辞优化默认 Prompt", + "description": "用于对合同条款进行稳健、可谈判、可解释的措辞优化。", + "target_scene": "条款优化与合同编辑器 AI 侧边栏", + "system_prompt": "你是 AI 合同措辞优化助手。你必须在不改变交易事实的前提下优化条款表达，保留法律安全边界，并说明修改理由。", + "prompt_content": "请 rewrite wording optimize revise 以下条款。clause_text={{clause_text}}，rewrite_goal={{rewrite_goal}}，party_position={{party_position}}，legal_article_refs={{legal_article_refs}}。输出 JSON，字段包括 rewritten_text、change_summary、risk_boundary、negotiation_note、legal_basis。不得改变事实，不得删除必要责任边界。必须说明 risk、boundary、negotiate、legal law source article citation。output return。", + "variables": [ + { + "name": "clause_text", + "required": true, + "description": "原条款文本" + }, + { + "name": "rewrite_goal", + "required": false, + "description": "优化目标" + }, + { + "name": "party_position", + "required": false, + "description": "我方立场" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "法条依据" + } + ], + "output_schema": { + "type": "object", + "required": [ + "rewritten_text", + "change_summary", + "risk_boundary" + ], + "properties": { + "rewritten_text": { + "type": "string" + }, + "change_summary": { + "type": "array" + }, + "risk_boundary": { + "type": "string" + }, + "negotiation_note": { + "type": "string" + }, + "legal_basis": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "Phase15 默认措辞优化 Prompt 正式种入" + }, + { + "prompt_key": "regulation_impact_default", + "prompt_type": "regulation_impact", + "name": "法规影响扫描默认 Prompt", + "description": "用于分析法规变化对模板、审查规则、知识库和合同资产的影响。", + "target_scene": "法规变更影响扫描", + "system_prompt": "你是 AI 法规影响分析助手。你必须根据新增或变更法条，判断它可能影响哪些模板、审查规则、标准条款、知识库文档和合同文书生成逻辑。", + "prompt_content": "请分析 regulation_change={{regulation_change}} 对 templates={{templates}}、review_rules={{review_rules}}、knowledge_bases={{knowledge_bases}}、prompt_assets={{prompt_assets}} 的影响。输出 JSON，字段包括 impacted_assets、impact_level、reason、recommended_actions、legal_basis、verification_tasks。必须引用 legal law source article citation，并说明不确定项。output return。", + "variables": [ + { + "name": "regulation_change", + "required": true, + "description": "法规变化内容" + }, + { + "name": "templates", + "required": false, + "description": "模板候选" + }, + { + "name": "review_rules", + "required": false, + "description": "审查规则候选" + }, + { + "name": "knowledge_bases", + "required": false, + "description": "知识库候选" + }, + { + "name": "prompt_assets", + "required": false, + "description": "Prompt 资产候选" + } + ], + "output_schema": { + "type": "object", + "required": [ + "impacted_assets", + "impact_level", + "recommended_actions" + ], + "properties": { + "impacted_assets": { + "type": "array" + }, + "impact_level": { + "type": "string" + }, + "reason": { + "type": "string" + }, + "recommended_actions": { + "type": "array" + }, + "legal_basis": { + "type": "array" + }, + "verification_tasks": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "Phase15 默认法规影响扫描 Prompt 正式种入" + }, + { + "prompt_key": "contract_review_investment_finance", + "prompt_type": "contract_review", + "name": "投融资专项审查 Prompt", + "description": "用于投资协议、股权转让、企业间借款、对赌协议等投融资交易的专项风险审查。", + "target_scene": "投融资合同审查", + "system_prompt": "你是投融资交易合同审查助手。你必须围绕投资结构、估值、交割、先决条件、公司治理权利、股权转让限制、回购/补偿、关联交易、担保、资金合规和退出安排进行审慎审查。不得输出无法追溯的法律结论；所有风险结论必须说明触发条款、影响范围、谈判边界和可引用法律依据。", + "prompt_content": "请 review 以下投融资类合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查估值与交易价格、交割与先决条件、陈述保证、投资人保护权、清算优先、回购/赎回/对赌补偿、股权限制、关联交易、担保和资金合规。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如投资方、融资方、转让方、受让方" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充投融资专项审查 Prompt" + }, + { + "prompt_key": "contract_review_corporate_governance", + "prompt_type": "contract_review", + "name": "公司治理专项审查 Prompt", + "description": "用于股东会决议、授权委托、公司治理安排、法律意见书相关材料的专项审查。", + "target_scene": "公司治理文书审查", + "system_prompt": "你是公司治理法律文书审查助手。你必须围绕主体资格、召集程序、表决程序、授权范围、签章权限、公司章程约束、工商登记/备案材料、董事监事高管责任和决议效力进行审查。不得替代律师作最终法律意见；对事实材料不足的事项必须列为待核验清单。", + "prompt_content": "请 review 以下公司治理类文书并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查主体资格、会议通知和召集程序、表决比例、章程/协议冲突、授权权限、签章真实性、登记备案材料、决议效力、法律意见边界和人工复核项。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如公司、股东、受托人、外部审查人" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查文书正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充公司治理专项审查 Prompt" + }, + { + "prompt_key": "contract_review_employment_hr", + "prompt_type": "contract_review", + "name": "劳动人事专项审查 Prompt", + "description": "用于劳动合同、劳务协议、竞业限制、保密、人事管理相关协议的专项审查。", + "target_scene": "劳动人事合同审查", + "system_prompt": "你是劳动人事合同审查助手。你必须围绕劳动关系认定、岗位职责、工作地点、工时休假、工资奖金、社保公积金、试用期、培训服务期、竞业限制、保密、解除终止和经济补偿进行审查。必须提示劳动强制性规范边界和用工合规风险。", + "prompt_content": "请 review 以下劳动人事类合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查劳动关系/劳务关系边界、试用期、薪酬结构、社保公积金、工时休假、绩效奖金、保密竞业、培训服务期、解除终止、经济补偿、规章制度适用和证据留存。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如用人单位、劳动者、劳务提供方" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充劳动人事专项审查 Prompt" + }, + { + "prompt_key": "contract_review_real_estate_property", + "prompt_type": "contract_review", + "name": "不动产/物业专项审查 Prompt", + "description": "用于房屋租赁、物业服务、园区服务、不动产配套协议的专项审查。", + "target_scene": "不动产与物业合同审查", + "system_prompt": "你是不动产与物业服务合同审查助手。你必须围绕房屋权属、租赁期限、交付状态、租金押金、物业费、维修资金、公共收益、安全责任、业委会/业主大会授权、解除退场和证据交接进行审查。必须提示权属和公共管理事项的人工核验边界。", + "prompt_content": "请 review 以下不动产/物业类合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查权属/授权、租赁或服务范围、交付与验收、费用计费、押金和保证金、维修责任、专项维修资金、公共收益、安全保障、业主委员会授权、提前解除、退场交接和证据留存。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如出租方、承租方、物业公司、业主方" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充不动产/物业专项审查 Prompt" + }, + { + "prompt_key": "contract_review_channel_franchise", + "prompt_type": "contract_review", + "name": "渠道/加盟专项审查 Prompt", + "description": "用于代理、经销、渠道合作、加盟、特许经营和商业合作框架协议的专项审查。", + "target_scene": "渠道加盟合同审查", + "system_prompt": "你是渠道、经销、加盟和特许经营合同审查助手。你必须围绕授权范围、区域保护、价格政策、返利结算、库存和窜货、品牌使用、商业特许经营备案、培训支持、信息披露、保证金、解除退出和消费者/第三方责任进行审查。", + "prompt_content": "请 review 以下渠道/加盟类合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查授权区域、独家/非独家限制、价格和返利、最低采购、库存与窜货、品牌和知识产权使用、加盟资质、信息披露、备案义务、培训支持、保证金、违约解除、售后和消费者责任。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如品牌方、加盟商、代理商、经销商" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充渠道/加盟专项审查 Prompt" + }, + { + "prompt_key": "contract_review_tech_saas_data_compliance", + "prompt_type": "contract_review", + "name": "技术/SaaS/数据合规专项审查 Prompt", + "description": "用于技术服务、软件开发、SaaS、数据处理、个人信息保护和网络安全相关合同的专项审查。", + "target_scene": "技术 SaaS 与数据合规合同审查", + "system_prompt": "你是技术、SaaS 和数据合规合同审查助手。你必须围绕交付验收、服务等级、源代码/成果归属、知识产权许可、开源软件、数据处理角色、个人信息处理、重要数据、跨境传输、网络安全、等保、审计权、服务中断和责任上限进行审查。", + "prompt_content": "请 review 以下技术/SaaS/数据合规类合同文本并识别 risk、issue、finding。contract_type={{contract_type}}，party_position={{party_position}}，contract_text={{contract_text}}，legal_article_refs={{legal_article_refs}}。重点审查交付物、验收标准、SLA、可用性、数据处理角色、个人信息授权同意、委托处理、重要数据、跨境传输、网络安全和等保、日志与审计、开源软件、知识产权归属/许可、责任限制、服务中断和退出迁移。输出 JSON，字段包括 basic_info、clauses、risk_items、risk_summary、review_opinion、recommendation、rendered_report。每个 risk_items 必须包含 severity、clause_title、issue、legal_basis、suggestion、risk_boundary、negotiation_note、legal_article_refs。review risk issue finding legal law basis source article citation output return。", + "variables": [ + { + "name": "contract_type", + "required": false, + "description": "合同或文书类型" + }, + { + "name": "party_position", + "required": false, + "description": "审查立场，如甲方、乙方、服务商、客户、数据处理者" + }, + { + "name": "contract_text", + "required": true, + "description": "待审查合同正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "risk_items", + "risk_summary", + "review_opinion", + "recommendation" + ], + "properties": { + "risk_items": { + "type": "array" + }, + "risk_summary": { + "type": "object" + }, + "review_opinion": { + "type": "string" + }, + "recommendation": { + "type": "string" + }, + "rendered_report": { + "type": "string" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.1 + }, + "change_summary": "补充技术/SaaS/数据合规专项审查 Prompt" + }, + { + "prompt_key": "procurement_goods_default", + "prompt_type": "contract_generation", + "name": "货物采购合同起草专项 Prompt", + "description": "用于货物采购合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "货物采购合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《货物采购合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：标的货物（名称、规格型号、数量、计量单位、质量标准、技术附件）；价款与支付（单价、合同总价、付款节点、发票类型、付款前置条件、收款账户）；包装、运输与交付（交付期限、交付地点、风险转移节点、随附文件清单、分批交付）；验收（验收标准、验收期限、质量异议期、不合格处理）；质量保证与售后（质保期、响应时效、维修/更换/退货）；违约责任（逾期交付/付款违约金计算口径、赔偿范围、责任上限）；合同解除（触发条件、通知方式、解除后结算）；争议解决与通知送达、电子签署与证据留存。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》合同编买卖合同相关规定（第595条、第599条交付与单证、第601-603条交付时间地点、第610-617条质量与瑕疵担保、第626-629条价款支付）；《中华人民共和国民法典》第577条、第584-585条（违约责任与违约金）；《中华人民共和国电子签名法》第13-14条（可靠电子签名效力）。风险与合规边界：政府采购、招投标、强监管或特殊许可商品（如医疗器械、危化品）须提示适用《政府采购法》《招标投标法》并专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增货物采购合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "labor_contract_default", + "prompt_type": "contract_generation", + "name": "劳动合同起草专项 Prompt", + "description": "用于劳动合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "劳动合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《劳动合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：用人单位与劳动者基本信息；合同期限与试用期（试用期上限及工资不低于法定下限）；工作内容、工作地点与岗位调整；工作时间与休息休假、加班与加班工资；劳动报酬、支付周期与支付方式；社会保险与住房公积金；劳动保护、劳动条件与职业危害防护；保密、知识产权与竞业限制（经济补偿、期限不超过2年）；合同变更、解除终止与经济补偿；劳动争议处理。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国劳动合同法》第17条（必备条款）、第19条（试用期）、第20条（试用期工资）、第23-24条（保密与竞业限制）、第36-50条（解除终止与经济补偿）；《中华人民共和国劳动法》第36-45条（工时与休假）；《中华人民共和国社会保险法》（社保缴纳）。风险与合规边界：高风险：试用期、竞业限制、解除事由与经济补偿不得违反法律强制性规定；须经法务与人力资源复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增劳动合同生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "nda_commercial_default", + "prompt_type": "contract_generation", + "name": "保密协议起草专项 Prompt", + "description": "用于保密协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "商业保密协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《保密协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：保密信息定义与范围（含书面、口头、电子形式）；披露目的与使用限制、允许披露对象；保密义务与保密措施；例外信息（已公开、独立开发、合法第三方获得、法定披露）；保密期限；资料返还与销毁；知识产权及衍生资料归属；违约责任与救济（含停止侵害、损害赔偿）；争议解决与电子签署。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《中华人民共和国民法典》第501条（缔约保密义务）、第509条、第577条；《中华人民共和国反不正当竞争法》第9条（商业秘密保护）。风险与合规边界：须明确商业秘密的范围与保密措施，否则不利于举证；涉及个人信息的保密须叠加数据合规要求。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增保密协议生成 Prompt（生产级中国法必备条款与法源）" + }, + { + "prompt_key": "guarantee_contract_default", + "prompt_type": "contract_generation", + "name": "担保合同起草专项 Prompt", + "description": "用于担保合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "担保合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《担保合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：主合同与主债权信息(主债权种类、数额、履行期限)；担保方式(一般保证/连带责任保证/抵押/质押)；保证范围(主债权、利息、违约金、实现债权费用)；保证期间(约定不明依《民法典》第692条为主债务履行期届满之日起六个月)；抵押/质押财产信息与登记(第402、403、429条登记生效/对抗)；公司对外担保的决议程序(《公司法》第15条、担保解释第7条)；反担保安排；担保人权利(先诉抗辩权、追偿权第700条)；违约与实现担保、争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《民法典》担保制度(第386-394条担保物权、第681-702条保证合同:第686条一般保证与连带责任保证、第692-694条保证期间与诉讼时效、第699-700条共同保证与追偿)；《最高人民法院关于适用民法典有关担保制度的解释》(公司对外担保决议、上市公司担保、独立担保);《公司法》第15条对外担保决议程序。风险与合规边界：适用于为主债权提供保证、抵押或质押担保的场景；涉及最高额担保、上市公司/国资对外担保、关联担保需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增担保合同生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "ip_license_default", + "prompt_type": "contract_generation", + "name": "知识产权许可合同起草专项 Prompt", + "description": "用于知识产权许可合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "知识产权许可合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《知识产权许可合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：许可标的知识产权(权利类型、权属证明、注册/登记号、有效期)；许可方式(独占/排他/普通)与许可权利范围；许可地域与许可期限；许可使用费与支付(一次性/提成/混合)；质量监督与标识要求(商标须标注被许可人名称、保证商品质量)；再许可(分许可)限制；权利瑕疵担保与侵权处理(维权主体、配合义务)；改进成果归属；备案办理(商标许可备案、专利许可备案登记)；违约、解除与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《商标法》第43条商标使用许可(独占/排他/普通、备案、质量监督、标注被许可人名称)；《专利法》第12条专利实施许可(书面许可、许可费);《著作权法》第26-27条著作权许可使用(权利种类、地域、期间、付酬);《民法典》合同编通则。风险与合规边界：适用于商标、专利、著作权、软件等知识产权的许可使用场景；独占许可、商标/专利许可备案、跨境许可需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增知识产权许可合同生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "data_processing_agreement_default", + "prompt_type": "contract_generation", + "name": "数据处理协议起草专项 Prompt", + "description": "用于数据处理协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "数据处理协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《数据处理协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：处理者与受托人角色界定、主合同关联；委托处理的目的、期限、方式；个人信息种类、范围与数据主体类型；受托人义务(按约定处理、不得超范围、协助履行)；技术与组织安全措施(加密、访问控制、最小授权)；再委托(次级受托人)的事前同意与背靠背义务；数据主体权利响应协助(查阅复制更正删除)；个人信息保护影响评估与配合监督审计；安全事件通知时限与处置；敏感个人信息与数据出境专项约束；委托终止后的数据返还或删除；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《个人信息保护法》第21条委托处理(约定目的期限方式、个人信息种类、保护措施、双方权利义务、监督、受托人不得超范围)、第55-56条个人信息保护影响评估、第38-39条出境;《数据安全法》数据分类分级与安全义务;《网络安全法》第21条等保与第42条安全事件;《民法典》第1034-1038条个人信息保护。风险与合规边界：适用于个人信息处理者委托受托方处理个人信息的场景，作为主服务合同的数据合规附件；涉及敏感个人信息、数据出境需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增数据处理协议生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "works_contract_default", + "prompt_type": "contract_generation", + "name": "承揽合同起草专项 Prompt", + "description": "用于承揽合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "承揽合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《承揽合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：承揽工作内容(加工/定作/修理等)与工作成果；材料提供(定作人/承揽人)与材料检验；技术标准、规格与质量要求；完成期限与交付方式；验收标准与质量异议；报酬与支付、承揽人留置权(第783条)；承揽人主要工作不得擅自转承揽(第772-773条)；定作人变更与中途检查(第775-779条)；定作人任意解除权及损失赔偿(第787条护栏)；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《民法典》承揽合同章(第770-787条:第772条自有设备技术完成、第773条转承揽需同意、第777条定作人变更、第781条质量不符责任、第782-783条报酬支付与留置权、第787条定作人任意解除权及赔偿)。风险与合规边界：适用于加工、定作、修理、复制、测试、检验等承揽工作并交付工作成果的场景；建设工程不适用本模板。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增承揽合同生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "intermediary_contract_default", + "prompt_type": "contract_generation", + "name": "居间合同起草专项 Prompt", + "description": "用于居间合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "居间合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。", + "prompt_content": "请基于输入要素生成《居间合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：居间事项与服务类型(报告订约机会/媒介促成)；居间人如实报告义务(第962条,不得隐瞒或提供虚假情况)；委托人配合与信息提供义务；居间报酬标准、计算与支付条件(以促成合同成立为前提,第963条)；未促成时的费用承担；防跳单条款(第965条,绕开居间直接订约仍付报酬)；保密义务；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《民法典》中介合同章(第961-966条:第962条如实报告义务及故意隐瞒赔偿、第963条促成合同成立的报酬与费用、第965条委托人跳单直接订立仍应付报酬)。风险与合规边界：适用于居间人报告订约机会或提供订立合同媒介服务并收取报酬的场景；房产、金融等强监管居间需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增居间合同生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "financial_lease_contract_default", + "prompt_type": "contract_generation", + "name": "融资租赁合同起草专项 Prompt", + "description": "用于融资租赁合同的专项起草与初稿生成（生产级中国法）。", + "target_scene": "融资租赁合同生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《融资租赁合同》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：出租人、承租人、出卖人三方关系与租赁物；租赁物的选定与买卖合同(承租人选定供货人和租赁物)；租赁物交付、瑕疵担保与索赔权转移(第750-751条)；租金构成(购买成本+合理利润)、支付与计算；租赁期间租赁物所有权归出租人、占有使用归承租人；租赁物登记对抗善意第三人(第745条)；保险、维修保养与风险负担；承租人违约欠租与出租人解除/取回(第752条)；租赁期满租赁物归属与留购价款(第757-758条)；售后回租与虚构租赁物无效护栏(第737条)；违约责任与争议解决。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《民法典》融资租赁合同章(第735-760条:第737条以虚构租赁物认定无效、第745条租赁物登记对抗、第748条出租人保证占有使用、第752条承租人欠租解除、第757-758条租赁物归属、第760条合同无效时租赁物归属);售后回租及金融监管规则。风险与合规边界：适用于出租人根据承租人选择购买租赁物并出租给承租人的融资租赁场景（含售后回租）；金融监管与登记需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增融资租赁合同生成 Prompt（Phase3 生产级中国法）" + }, + { + "prompt_key": "partnership_agreement_default", + "prompt_type": "contract_generation", + "name": "合伙协议起草专项 Prompt", + "description": "用于合伙协议的专项起草与初稿生成（生产级中国法）。", + "target_scene": "合伙协议生成", + "system_prompt": "你是面向中国大陆企业的 AI 合同与法律文书起草助手。必须依据输入的文书类型、结构化要素、模板正文和法律依据，生成结构完整、条款清晰、权利义务均衡、可交付的中文文书初稿。严守边界：不得编造未提供的金额、日期、主体、事实或不存在的法条编号；信息缺失时必须在 missing_fields 中列出待补项，不得以占位内容蒙混。所有法律依据只能来自输入的 legal_article_refs 或系统检索结果。凡涉及高风险、重大交易或强监管事项，必须在 ai_hints 中给出明确的律师复核与合规提示。本类型属于高风险/强监管文书：必须在 ai_hints 中明确提示由执业律师复核后再定稿，AI 初稿不得作为最终签署版本。", + "prompt_content": "请基于输入要素生成《合伙协议》初稿。document_type_code={{document_type_code}}，elements={{elements}}，template_content={{template_content}}，legal_article_refs={{legal_article_refs}}。必备条款（须逐项覆盖，缺失要素在 missing_fields 中列出）：合伙企业类型(普通/有限)、名称与经营范围；合伙人信息与出资(方式、数额、期限、评估)；合伙事务执行(执行人/委托执行、有限合伙人不执行事务)；损益分配与亏损分担比例；合伙人权利义务与竞业禁止；合伙债务承担(普通合伙人无限连带、有限合伙人以出资为限)；入伙、退伙与财产份额转让；利润分配与表决机制；合伙企业解散与清算；违约、争议解决与登记。法律依据（引用须可追溯，只能来自 legal_article_refs 或系统检索，不得编造法条编号）：《合伙企业法》(普通合伙第14-53条:出资、事务执行、损益分配、入伙退伙、债务连带责任;有限合伙第60-85条:GP/LP、有限合伙人不执行事务及责任限于出资);《民法典》合伙合同章(第967-978条);涉私募基金《证券投资基金法》。风险与合规边界：适用于设立普通合伙或有限合伙企业、约定出资、损益分配、事务执行和退伙的场景；有限合伙、私募基金合伙需专项复核。输出必须返回 JSON，字段包括 title、html、missing_fields、ai_hints、related_legal_articles、quality_notes。html 为完整合同/文书正文，使用规范的中文条款分条编号；missing_fields 列出缺失或需补充的要素；ai_hints 给出不确定项、谈判提示与风险提醒；related_legal_articles 标注引用的法律依据（须来自 legal_article_refs 或系统检索，不得编造法条编号）。请确保 legal law source article citation 与 generate output return 的可追溯性。", + "variables": [ + { + "name": "document_type_code", + "required": true, + "description": "文书类型编码" + }, + { + "name": "elements", + "required": true, + "description": "动态要素表单数据" + }, + { + "name": "template_content", + "required": false, + "description": "匹配到的模板正文" + }, + { + "name": "legal_article_refs", + "required": false, + "description": "相关法条引用列表" + } + ], + "output_schema": { + "type": "object", + "required": [ + "title", + "html", + "missing_fields", + "ai_hints", + "related_legal_articles" + ], + "properties": { + "title": { + "type": "string" + }, + "html": { + "type": "string" + }, + "missing_fields": { + "type": "array" + }, + "ai_hints": { + "type": "array" + }, + "related_legal_articles": { + "type": "array" + }, + "quality_notes": { + "type": "array" + } + } + }, + "model_config": { + "provider": "shared-ai-platform", + "model": "platform-default", + "temperature": 0.2 + }, + "change_summary": "新增合伙协议生成 Prompt（Phase3 生产级中国法）" + } + ] +} \ No newline at end of file diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompts.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompts.py index 6e7a9c7f..fc8481da 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompts.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/prompts.py @@ -1,22 +1,91 @@ from __future__ import annotations +import json +import re +from typing import Any + from yuqei_ai_platform_api.contract_review import ContractReviewRequest from yuqei_ai_platform_api.legal_qa import LegalCitation, LegalQaRequest from yuqei_ai_platform_api.repository import PromptTemplate +LEGAL_QA_PROMPT_CANDIDATES = ("legal_chat_default", "legal_qa.default") +DEFAULT_CONTRACT_REVIEW_PROMPT_CANDIDATES = ("contract_review_default", "contract_review.default") + +REVIEW_PROMPT_DOMAIN_KEY_BY_CONTRACT_TYPE = { + "investment": "contract_review_investment_finance", + "investment_agreement": "contract_review_investment_finance", + "equity_transfer": "contract_review_investment_finance", + "equity_transfer_agreement": "contract_review_investment_finance", + "intercompany_loan": "contract_review_investment_finance", + "intercompany_loan_agreement": "contract_review_investment_finance", + "valuation_adjustment": "contract_review_investment_finance", + "valuation_adjustment_agreement": "contract_review_investment_finance", + "financial_lease": "contract_review_investment_finance", + "guarantee": "contract_review_investment_finance", + "shareholder_resolution": "contract_review_corporate_governance", + "power_of_attorney": "contract_review_corporate_governance", + "legal_opinion": "contract_review_corporate_governance", + "partnership": "contract_review_corporate_governance", + "labor": "contract_review_employment_hr", + "employment": "contract_review_employment_hr", + "labor_contract": "contract_review_employment_hr", + "labor_service": "contract_review_employment_hr", + "labor_service_agreement": "contract_review_employment_hr", + "lease": "contract_review_real_estate_property", + "lease_house": "contract_review_real_estate_property", + "property_service": "contract_review_real_estate_property", + "property_service_agreement": "contract_review_real_estate_property", + "cooperation_framework": "contract_review_channel_franchise", + "agency_distribution": "contract_review_channel_franchise", + "agency_distribution_agreement": "contract_review_channel_franchise", + "franchise": "contract_review_channel_franchise", + "franchise_agreement": "contract_review_channel_franchise", + "cooperation": "contract_review_channel_franchise", + "framework": "contract_review_channel_franchise", + "sales": "contract_review_channel_franchise", + "technical_service": "contract_review_tech_saas_data_compliance", + "software_development": "contract_review_tech_saas_data_compliance", + "technology_development": "contract_review_tech_saas_data_compliance", + "software_saas": "contract_review_tech_saas_data_compliance", + "nda": "contract_review_tech_saas_data_compliance", + "nda_commercial": "contract_review_tech_saas_data_compliance", + "license": "contract_review_tech_saas_data_compliance", + "ip_license": "contract_review_tech_saas_data_compliance", + "data_processing": "contract_review_tech_saas_data_compliance", +} + +_V1_PROMPT_TOKEN = re.compile(r"{{\s*([A-Za-z0-9_]+)\s*}}") + + +def legal_qa_prompt_candidates() -> tuple[str, ...]: + return LEGAL_QA_PROMPT_CANDIDATES + + +def contract_review_prompt_candidates(contract_type: str | None) -> tuple[str, ...]: + normalized_type = re.sub(r"[^a-z0-9]+", "_", (contract_type or "").strip().casefold()).strip("_") + domain_key = REVIEW_PROMPT_DOMAIN_KEY_BY_CONTRACT_TYPE.get(normalized_type) + return tuple(dict.fromkeys(filter(None, (domain_key, *DEFAULT_CONTRACT_REVIEW_PROMPT_CANDIDATES)))) + + def render_legal_qa_prompt( request: LegalQaRequest, *, citations: list[LegalCitation], prompt_template: PromptTemplate | None, ) -> str: - template = prompt_template.content if prompt_template else _default_legal_qa_template() variables = { "question": request.question.strip(), "matter_context": (request.matter_context or "").strip() or "无补充背景", + "review_context": (request.matter_context or "").strip() or "无补充背景", "citations": _format_citations(citations), + "legal_article_refs": _format_citations(citations), } + if prompt_template: + imported_prompt = _render_v1_prompt_asset(prompt_template.content, variables) + if imported_prompt: + return imported_prompt + template = prompt_template.content if prompt_template else _default_legal_qa_template() return _render_template(template, _default_legal_qa_template(), variables) @@ -26,7 +95,6 @@ def render_contract_review_prompt( citations: list[LegalCitation], prompt_template: PromptTemplate | None, ) -> str: - template = prompt_template.content if prompt_template else _default_contract_review_template() variables = { "contract_title": request.contract_title.strip(), "contract_type": (request.contract_type or "").strip() or "未指定", @@ -34,10 +102,60 @@ def render_contract_review_prompt( "review_focus": (request.review_focus or "").strip() or "全面风险审查", "contract_text": request.contract_text.strip(), "citations": _format_citations(citations), + "legal_article_refs": _format_citations(citations), + "party_position": "未指定审查立场，请按权利义务平衡原则审查", } + if prompt_template: + imported_prompt = _render_v1_prompt_asset( + prompt_template.content, + variables, + supplemental_context=( + "补充审查上下文：\n" + f"合同名称：{variables['contract_title']}\n" + f"相对方：{variables['counterparty']}\n" + f"审查重点：{variables['review_focus']}" + ), + ) + if imported_prompt: + return imported_prompt + template = prompt_template.content if prompt_template else _default_contract_review_template() return _render_template(template, _default_contract_review_template(), variables) +def _render_v1_prompt_asset( + content: str, + variables: dict[str, str], + *, + supplemental_context: str | None = None, +) -> str | None: + try: + payload = json.loads(content) + except (TypeError, ValueError): + return None + if not isinstance(payload, dict): + return None + asset = payload.get("asset") + if not isinstance(asset, dict): + return None + prompt_content = _optional_text(asset.get("prompt_content")) + if not prompt_content: + return None + system_prompt = _optional_text(asset.get("system_prompt")) + rendered_content = _V1_PROMPT_TOKEN.sub( + lambda match: variables.get(match.group(1), "未提供"), + prompt_content, + ) + sections = [item for item in (system_prompt, rendered_content, supplemental_context) if item] + return "\n\n".join(sections) + + +def _optional_text(value: Any) -> str | None: + if not isinstance(value, str): + return None + normalized = value.strip() + return normalized or None + + def _render_template(template: str, default_template: str, variables: dict[str, str]) -> str: effective_template = template if "{" not in effective_template: diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/schema_check.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/schema_check.py index 100897a3..8e634558 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/schema_check.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/schema_check.py @@ -1,5 +1,5 @@ from pathlib import Path -from typing import Literal +from typing import Any, Literal from alembic.config import Config from alembic.script import ScriptDirectory @@ -95,6 +95,11 @@ def check_ai_platform_schema( environment: str, repository_backend: str, engine: Engine | None = None, + provider_call_mode: str | None = None, + provider_fallback_enabled: bool | None = None, + default_provider_config: Any | None = None, + service_auth_required: bool | None = None, + service_secret_configured: bool | None = None, ) -> RuntimeSchemaStatus: if repository_backend != "sqlalchemy" and engine is None: return RuntimeSchemaStatus( @@ -111,6 +116,23 @@ def check_ai_platform_schema( strict = environment in {"staging", "production"} checks: list[RuntimeSchemaCheck] = [] + if provider_call_mode is not None: + checks.append( + _check_provider_runtime( + environment=environment, + provider_call_mode=provider_call_mode, + provider_fallback_enabled=provider_fallback_enabled, + default_provider_config=default_provider_config, + ) + ) + if service_auth_required is not None: + checks.append( + _check_service_auth( + environment=environment, + service_auth_required=service_auth_required, + service_secret_configured=bool(service_secret_configured), + ) + ) owned_engine: Engine | None = None if engine is None: @@ -184,6 +206,92 @@ def check_ai_platform_schema( return RuntimeSchemaStatus(status=_aggregate_status(checks), checks=checks) +def _check_service_auth( + *, + environment: str, + service_auth_required: bool, + service_secret_configured: bool, +) -> RuntimeSchemaCheck: + if environment in {"staging", "production"} and (not service_auth_required or not service_secret_configured): + return RuntimeSchemaCheck( + name="service_auth", + status="error" if environment == "production" else "warning", + message="Staging and production require an AI Platform service secret.", + details={ + "service_auth_required": service_auth_required, + "service_secret_configured": service_secret_configured, + }, + ) + return RuntimeSchemaCheck( + name="service_auth", + status="ok", + message="AI Platform service authentication configuration is acceptable.", + details={ + "service_auth_required": service_auth_required, + "service_secret_configured": service_secret_configured, + }, + ) + + +def _check_provider_runtime( + *, + environment: str, + provider_call_mode: str, + provider_fallback_enabled: bool | None, + default_provider_config: Any | None, +) -> RuntimeSchemaCheck: + details: dict[str, SchemaCheckDetailValue] = { + "environment": environment, + "provider_call_mode": provider_call_mode, + "provider_fallback_enabled": provider_fallback_enabled, + "default_provider_present": default_provider_config is not None, + "default_provider_enabled": bool(getattr(default_provider_config, "enabled", False)), + "default_provider_has_base_url": bool(getattr(default_provider_config, "base_url", None)), + "default_provider_has_secret_ref": bool( + getattr(default_provider_config, "api_key_secret_ref", None) + ), + "default_provider_has_api_key": bool(getattr(default_provider_config, "api_key_set", False)), + } + if environment not in {"staging", "production"}: + return RuntimeSchemaCheck( + name="provider_runtime", + status="ok", + message="Provider runtime readiness is informational outside staging and production.", + details=details, + ) + + problems: list[str] = [] + if provider_call_mode != "enabled": + problems.append("provider_call_mode must be enabled") + if provider_fallback_enabled is not False: + problems.append("provider fallback must be disabled") + if default_provider_config is None: + problems.append("an enabled default provider is required") + else: + if not bool(getattr(default_provider_config, "enabled", False)): + problems.append("default provider must be enabled") + if not bool(getattr(default_provider_config, "base_url", None)): + problems.append("default provider base_url is required") + if not ( + bool(getattr(default_provider_config, "api_key_secret_ref", None)) + or bool(getattr(default_provider_config, "api_key_set", False)) + ): + problems.append("default provider secret ref is required") + if problems: + return RuntimeSchemaCheck( + name="provider_runtime", + status="error" if environment == "production" else "warning", + message="Provider runtime is not ready for the target environment.", + details={**details, "problems": "; ".join(problems)}, + ) + return RuntimeSchemaCheck( + name="provider_runtime", + status="ok", + message="Provider runtime is configured for the target environment.", + details=details, + ) + + def ai_platform_schema_head() -> str: migrations_dir = Path(__file__).resolve().parents[2] / "migrations" config = Config() diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/service_auth.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/service_auth.py new file mode 100644 index 00000000..12dfcbb8 --- /dev/null +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/service_auth.py @@ -0,0 +1,16 @@ +from __future__ import annotations + +from hmac import compare_digest + + +SERVICE_HEADER = "X-AI-Platform-Service-Key" + + +def is_valid_service_key(candidate: str | None, expected: str) -> bool: + if not candidate or not expected: + return False + return compare_digest(candidate, expected) + + +def is_public_path(path: str, api_prefix: str) -> bool: + return path in {"/health", f"{api_prefix}/health", f"{api_prefix}/runtime/schema-check"} diff --git a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/v1_prompt_assets_import.py b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/v1_prompt_assets_import.py index 883e6d6f..53490043 100644 --- a/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/v1_prompt_assets_import.py +++ b/yuqei-ai-platform/services/ai-platform-api/src/yuqei_ai_platform_api/v1_prompt_assets_import.py @@ -18,6 +18,12 @@ from yuqei_ai_platform_api.repository import build_sqlalchemy_engine DEFAULT_VERSION = "v1-phase15" DEFAULT_CHANGED_BY = "v1-prompt-assets-import" +DEFAULT_SOURCE_FILE = ( + Path(__file__).resolve().parent + / "prompt_assets" + / "v1_phase15" + / "default-prompt-assets.json" +) @dataclass(frozen=True) @@ -219,7 +225,12 @@ def import_v1_prompt_assets( def build_parser() -> argparse.ArgumentParser: parser = argparse.ArgumentParser(description="Import V1 Phase15 default prompt assets into V2 prompt_templates.") - parser.add_argument("--source-file", type=Path, required=True, help="V1 default-prompt-assets.json path.") + parser.add_argument( + "--source-file", + type=Path, + default=DEFAULT_SOURCE_FILE, + help="Prompt asset JSON path. Defaults to the packaged V1 Phase15 asset file.", + ) parser.add_argument("--database-url", default=None, help="Override AI_PLATFORM_DATABASE_URL.") parser.add_argument("--version", default=DEFAULT_VERSION, help="Prompt template version to upsert.") parser.add_argument("--apply", action="store_true", help="Write changes. Omit for dry-run.") diff --git a/yuqei-ai-platform/services/ai-platform-api/tests/test_health.py b/yuqei-ai-platform/services/ai-platform-api/tests/test_health.py index 16a1e966..859fafaf 100644 --- a/yuqei-ai-platform/services/ai-platform-api/tests/test_health.py +++ b/yuqei-ai-platform/services/ai-platform-api/tests/test_health.py @@ -30,6 +30,30 @@ def test_versioned_health_endpoint_matches_ai_platform_prefix() -> None: assert response.json()["service"] == "ai-platform-api" +def test_service_auth_blocks_direct_ai_data_access() -> None: + auth_value = "x" * 48 + settings = AiPlatformSettings( + environment="staging", + repository_backend="memory", + require_service_auth=True, + service_shared_secret=auth_value, + ) + client = TestClient(create_app(settings)) + + public_health = client.get("/health") + missing = client.get("/api/v1/model-configs") + wrong = client.get("/api/v1/model-configs", headers={"X-AI-Platform-Service-Key": "wrong"}) + valid = client.get( + "/api/v1/model-configs", + headers={"X-AI-Platform-Service-Key": settings.service_shared_secret}, + ) + + assert public_health.status_code == 200 + assert missing.status_code == 401 + assert wrong.status_code == 401 + assert valid.status_code == 200 + + def test_runtime_schema_check_warns_for_memory_repository() -> None: app = create_app(AiPlatformSettings(environment="test", repository_backend="memory")) client = TestClient(app) @@ -102,3 +126,27 @@ def test_runtime_schema_check_errors_for_missing_core_tables(tmp_path) -> None: assert "ai_run_audits.redaction_status" in checks["trace_governance_columns"]["details"]["missing_columns"] assert "trace_governance_policies.enabled" in checks["trace_governance_columns"]["details"]["missing_columns"] assert "ai_provider_configs.api_key_secret_ref" in checks["secret_ref_columns"]["details"]["missing_columns"] + + +def test_production_schema_check_rejects_disabled_or_unconfigured_provider(tmp_path) -> None: + database_path = tmp_path / "production-ai-platform.sqlite3" + app = create_app( + AiPlatformSettings( + environment="production", + repository_backend="sqlalchemy", + database_url=f"sqlite+pysqlite:///{database_path.as_posix()}", + database_auto_create=True, + provider_call_mode="disabled", + provider_fallback_enabled=True, + ) + ) + client = TestClient(app) + + response = client.get("/api/v1/runtime/schema-check") + + assert response.status_code == 200 + checks = {item["name"]: item for item in response.json()["checks"]} + assert checks["provider_runtime"]["status"] == "error" + assert "provider_call_mode must be enabled" in checks["provider_runtime"]["details"]["problems"] + assert "provider fallback must be disabled" in checks["provider_runtime"]["details"]["problems"] + assert checks["service_auth"]["status"] == "error" diff --git a/yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py b/yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py index ae240aa3..7ed73a2f 100644 --- a/yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py +++ b/yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py @@ -1,12 +1,24 @@ +import json + import httpx from fastapi.testclient import TestClient from yuqei_ai_platform_api.config import AiPlatformSettings +from yuqei_ai_platform_api.contract_review import ContractReviewRequest from yuqei_ai_platform_api.legal_qa import LegalCitation, LegalQaRequest from yuqei_ai_platform_api.main import create_app -from yuqei_ai_platform_api.prompts import render_legal_qa_prompt +from yuqei_ai_platform_api.prompts import ( + contract_review_prompt_candidates, + render_contract_review_prompt, + render_legal_qa_prompt, +) from yuqei_ai_platform_api.providers import OpenAICompatibleProviderAdapter, ProviderRequest -from yuqei_ai_platform_api.repository import InMemoryAiPlatformRepository, ProviderConfigCreate +from yuqei_ai_platform_api.repository import ( + InMemoryAiPlatformRepository, + PromptTemplateCreate, + PromptTemplatePublishRequest, + ProviderConfigCreate, +) def test_legal_qa_uses_provider_answer_when_enabled(monkeypatch) -> None: @@ -247,3 +259,143 @@ def test_render_legal_qa_prompt_includes_question_context_and_citations() -> Non assert "租赁合同押金如何约定" in prompt assert "房屋租赁" in prompt assert "第七百零三条" in prompt + + +def test_legal_qa_prefers_published_v1_prompt_asset() -> None: + repository = InMemoryAiPlatformRepository() + repository.seed_defaults() + created = repository.upsert_prompt_template( + PromptTemplateCreate( + name="legal_chat_default", + version="v1-phase15", + content=_v1_prompt_content( + system_prompt="V1 法律问答专项系统提示。", + prompt_content=( + "问题={{question}}；背景={{review_context}}；依据={{legal_article_refs}}。" + ), + ), + ) + ) + repository.publish_prompt_template( + created.name, + PromptTemplatePublishRequest(version=created.version), + ) + app = create_app(AiPlatformSettings(environment="test"), repository=repository) + client = TestClient(app) + + response = client.post( + "/api/v1/legal/qa", + json={"question": "劳动合同试用期如何约定？", "matter_context": "两年固定期限合同"}, + ) + + assert response.status_code == 200 + audit = client.get("/api/v1/audit/ai-runs").json()[0] + assert audit["prompt_template_id"] == created.id + assert "V1 法律问答专项系统提示" in audit["prompt_preview"] + assert "两年固定期限合同" in audit["prompt_preview"] + assert "{{" not in audit["prompt_preview"] + + +def test_contract_review_selects_and_renders_domain_prompt_asset() -> None: + repository = InMemoryAiPlatformRepository() + repository.seed_defaults() + created = repository.upsert_prompt_template( + PromptTemplateCreate( + name="contract_review_investment_finance", + version="v1-phase15", + content=_v1_prompt_content( + system_prompt="V1 投融资专项审查提示。", + prompt_content=( + "类型={{contract_type}}；立场={{party_position}}；" + "正文={{contract_text}}；依据={{legal_article_refs}}。" + ), + ), + ) + ) + repository.publish_prompt_template( + created.name, + PromptTemplatePublishRequest(version=created.version), + ) + app = create_app(AiPlatformSettings(environment="test"), repository=repository) + client = TestClient(app) + + response = client.post( + "/api/v1/legal/contract-review", + json={ + "contract_title": "A轮投资协议", + "contract_text": "投资人支付投资款并约定交割条件。", + "contract_type": "investment-agreement", + "counterparty": "星河科技有限公司", + "review_focus": "交割条件与回购安排", + }, + ) + + assert response.status_code == 200 + audit = client.get("/api/v1/audit/ai-runs").json()[0] + assert audit["prompt_template_id"] == created.id + assert "V1 投融资专项审查提示" in audit["prompt_preview"] + assert "investment-agreement" in audit["prompt_preview"] + assert "交割条件与回购安排" in audit["prompt_preview"] + assert "{{" not in audit["prompt_preview"] + + +def test_contract_review_prompt_candidates_cover_v1_business_domains() -> None: + expected = { + "investment-agreement": "contract_review_investment_finance", + "shareholder-resolution": "contract_review_corporate_governance", + "labor": "contract_review_employment_hr", + "property-service": "contract_review_real_estate_property", + "franchise": "contract_review_channel_franchise", + "data-processing": "contract_review_tech_saas_data_compliance", + } + for contract_type, prompt_key in expected.items(): + candidates = contract_review_prompt_candidates(contract_type) + assert candidates[0] == prompt_key + assert candidates[-2:] == ("contract_review_default", "contract_review.default") + + +def test_render_contract_review_prompt_supports_v1_asset_json() -> None: + repository = InMemoryAiPlatformRepository() + created = repository.upsert_prompt_template( + PromptTemplateCreate( + name="contract_review_default", + version="v1-phase15", + content=_v1_prompt_content( + system_prompt="审慎审查并保留依据。", + prompt_content="类型={{contract_type}}；正文={{contract_text}}；依据={{legal_article_refs}}。", + ), + ) + ) + prompt = render_contract_review_prompt( + ContractReviewRequest( + contract_title="服务合同", + contract_text="服务完成并验收后付款。", + contract_type="service", + review_focus="付款与验收", + ), + citations=[], + prompt_template=created, + ) + + assert "审慎审查并保留依据" in prompt + assert "类型=service" in prompt + assert "服务完成并验收后付款" in prompt + assert "付款与验收" in prompt + assert "{{" not in prompt + + +def _v1_prompt_content(*, system_prompt: str, prompt_content: str) -> str: + return json.dumps( + { + "source": { + "system": "ai-contract-platform-v1", + "phase": "phase15-prompt-assets", + "schema_version": "phase15-default-prompt-assets.v1", + }, + "asset": { + "system_prompt": system_prompt, + "prompt_content": prompt_content, + }, + }, + ensure_ascii=False, + ) diff --git a/yuqei-ai-platform/services/ai-platform-api/tests/test_v1_prompt_assets_import.py b/yuqei-ai-platform/services/ai-platform-api/tests/test_v1_prompt_assets_import.py index 6508cf93..ff9c816e 100644 --- a/yuqei-ai-platform/services/ai-platform-api/tests/test_v1_prompt_assets_import.py +++ b/yuqei-ai-platform/services/ai-platform-api/tests/test_v1_prompt_assets_import.py @@ -6,6 +6,7 @@ from sqlalchemy.orm import sessionmaker from yuqei_ai_platform_api.models import Base, PromptTemplateChangeModel, PromptTemplateModel from yuqei_ai_platform_api.v1_prompt_assets_import import ( + DEFAULT_SOURCE_FILE, import_v1_prompt_assets, load_v1_prompt_assets, ) @@ -53,6 +54,23 @@ def test_load_v1_prompt_assets_dedupes_by_prompt_key(tmp_path: Path) -> None: assert rendered["asset"]["prompt_content"] == "second" +def test_packaged_v1_prompt_asset_file_is_complete() -> None: + assets, schema_version, duplicate_keys = load_v1_prompt_assets(DEFAULT_SOURCE_FILE) + + assert DEFAULT_SOURCE_FILE.exists() + assert schema_version == "phase15-default-prompt-assets.v1" + assert duplicate_keys == [] + assert len(assets) == 46 + assert {asset.prompt_key for asset in assets} >= { + "contract_generation_default", + "contract_review_default", + "legal_chat_default", + "clause_recommendation_default", + "wording_rewrite_default", + "regulation_impact_default", + } + + def test_import_v1_prompt_assets_is_idempotent_and_publishes(tmp_path: Path) -> None: source_file = tmp_path / "default-prompt-assets.json" source_file.write_text( diff --git a/yuqei-ai-sdk-python/src/yuqei_sdk/ai_platform.py b/yuqei-ai-sdk-python/src/yuqei_sdk/ai_platform.py index 15ca13f3..6276ea64 100644 --- a/yuqei-ai-sdk-python/src/yuqei_sdk/ai_platform.py +++ b/yuqei-ai-sdk-python/src/yuqei_sdk/ai_platform.py @@ -628,12 +628,14 @@ class AiPlatformClient: api_prefix: str = "/api/v1", timeout: float = 30.0, transport: httpx.BaseTransport | None = None, + service_key: str | None = None, ) -> None: self._api_prefix = api_prefix.rstrip("/") self._client = httpx.Client( base_url=base_url.rstrip("/"), timeout=timeout, transport=transport, + headers={"X-AI-Platform-Service-Key": service_key} if service_key else None, ) def close(self) -> None: diff --git a/yuqei-ai-sdk-python/tests/test_ai_platform.py b/yuqei-ai-sdk-python/tests/test_ai_platform.py index 3ac6a460..b18e5b96 100644 --- a/yuqei-ai-sdk-python/tests/test_ai_platform.py +++ b/yuqei-ai-sdk-python/tests/test_ai_platform.py @@ -77,6 +77,7 @@ def test_ai_platform_client_posts_legal_qa_with_context_headers() -> None: client = AiPlatformClient( "http://ai-platform.test", transport=httpx.MockTransport(handler), + service_key="ai-platform-service-key", ) response = client.run_legal_qa( @@ -93,6 +94,7 @@ def test_ai_platform_client_posts_legal_qa_with_context_headers() -> None: assert captured_request.headers["X-Trace-Id"] == "trace-1" assert captured_request.headers["X-Tenant-Id"] == "tenant-1" assert captured_request.headers["X-User-Id"] == "user-1" + assert captured_request.headers["X-AI-Platform-Service-Key"] == "ai-platform-service-key" def test_ai_platform_client_posts_contract_review_with_context_headers() -> None: diff --git a/yuqei-contract-platform/apps/contract-web/.env.example b/yuqei-contract-platform/apps/contract-web/.env.example index d87fd5e8..1d508cb4 100644 --- a/yuqei-contract-platform/apps/contract-web/.env.example +++ b/yuqei-contract-platform/apps/contract-web/.env.example @@ -1 +1,5 @@ NEXT_PUBLIC_CONTRACT_API_BASE_URL=http://localhost:8100 +CONTRACT_API_PROXY_SECRET=local-only-proxy-secret-change-me-32 +CONTRACT_WEB_SESSION_SECRET=local-only-session-secret-change-me-32 +CONTRACT_WEB_SESSION_SECURE=false +AI_PLATFORM_PROXY_SECRET=local-only-ai-service-secret-change-me-32 diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/quality-labels/[labelCode]/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/quality-labels/[labelCode]/route.ts index ce6fd3d9..0af9de80 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/quality-labels/[labelCode]/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/quality-labels/[labelCode]/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -17,7 +18,7 @@ export async function PATCH( const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "PATCH", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/route.ts index 35af762f..3119030c 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/[runId]/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET( const targetUrl = new URL(`/api/v1/audit/ai-runs/${encodeURIComponent(runId)}`, aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/route.ts index a574ec39..9a38c9fa 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/ai-runs/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,11 +17,7 @@ export async function GET(request: Request) { } try { - const tenantId = request.headers.get("X-Tenant-Id"); - const response = await fetch(targetUrl, { - cache: "no-store", - headers: tenantId ? { "X-Tenant-Id": tenantId } : undefined - }); + const response = await fetchAiPlatform(targetUrl); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-dashboard/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-dashboard/route.ts index b9ced065..b5cf9c1e 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-dashboard/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-dashboard/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -14,7 +15,7 @@ export async function GET(request: Request) { targetUrl.searchParams.set("pending_limit", pendingLimit); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/executions/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/executions/route.ts index 35dd4e13..24f23f37 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/executions/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/executions/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,7 +17,7 @@ export async function GET( ); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/route.ts index c97945ee..5f7abf45 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/[actionId]/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,7 +17,7 @@ export async function GET( ); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -52,7 +53,7 @@ export async function PATCH( const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "PATCH", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/route.ts index a19208dc..aa3e5eeb 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/audit/quality-improvement-actions/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -18,7 +19,7 @@ export async function GET(request: Request) { } try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -47,7 +48,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-bases/[knowledgeBaseId]/documents/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-bases/[knowledgeBaseId]/documents/route.ts index 5f71893f..ad64858c 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-bases/[knowledgeBaseId]/documents/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-bases/[knowledgeBaseId]/documents/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -20,7 +21,7 @@ export async function POST(request: Request, context: RouteContext) { const body = await request.formData(); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", body, cache: "no-store" diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-documents/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-documents/route.ts index 00cc625d..1f9bb5b3 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-documents/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-documents/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -10,7 +11,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/chunks/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/chunks/route.ts index fa5ff809..43b2a720 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/chunks/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/chunks/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,7 +17,7 @@ export async function GET( ); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/documents/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/documents/route.ts index f63401ce..bc2f22e4 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/documents/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/documents/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -20,7 +21,7 @@ export async function GET( }); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/reindex/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/reindex/route.ts index ae77d7ad..12fbb25b 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/reindex/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/reindex/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,7 +17,7 @@ export async function POST( ); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, cache: "no-store" diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/route.ts index 1d7331c1..05031fe5 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/[batchId]/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -16,7 +17,7 @@ export async function GET( ); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/route.ts index 620a1118..26e39358 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-import-batches/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET(request: Request) { }); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -42,7 +43,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/[jobId]/retry/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/[jobId]/retry/route.ts index 519fc022..8074f3a3 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/[jobId]/retry/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/[jobId]/retry/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -23,7 +24,7 @@ export async function POST(request: Request, context: RouteContext) { }); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", cache: "no-store" }); diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/route.ts index 2ab30727..ccb5da67 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/knowledge-ingestion-jobs/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET(request: Request) { }); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/changes/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/changes/route.ts index 3aecfc00..dd91f864 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/changes/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/changes/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET(request: Request) { }); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/route.ts index cc475e85..c31ab9c5 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/model-configs/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/model-configs", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -38,7 +39,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/publish/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/publish/route.ts index 22927c76..9519660e 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/publish/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/publish/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -17,7 +18,7 @@ export async function POST( const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/rollback/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/rollback/route.ts index 508bf5d3..a66b6fe5 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/rollback/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/[name]/rollback/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -17,7 +18,7 @@ export async function POST( const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/changes/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/changes/route.ts index e794a1f5..d52eac6c 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/changes/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/changes/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET(request: Request) { }); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/route.ts index 7cca4c5e..9ef12ee8 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/prompt-templates/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/prompt-templates", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -38,7 +39,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality-rules/default/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality-rules/default/route.ts index 3c9c581e..9f6b3af6 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality-rules/default/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality-rules/default/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/quality-rules/default", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( @@ -38,7 +39,7 @@ export async function PUT(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "PUT", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/evaluate/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/evaluate/route.ts index b76cf0a6..60a3b156 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/evaluate/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/evaluate/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function POST() { const targetUrl = new URL("/api/v1/quality/golden-samples/evaluate", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", cache: "no-store" }); diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/route.ts index d99c05f4..e5bdd096 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/quality/golden-samples/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/quality/golden-samples", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); if (!response.ok) { return NextResponse.json( diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/object-storage/check/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/object-storage/check/route.ts index 989addc1..acfaeab8 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/object-storage/check/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/object-storage/check/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/runtime/object-storage/check", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/check/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/check/route.ts index d726197e..b6d49c4c 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/check/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/check/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/runtime/ocr-provider/check", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/route.ts index 4bd75c68..bc0fd2e7 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/ocr-provider/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/runtime/ocr-provider", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { @@ -28,7 +29,7 @@ export async function PUT(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "PUT", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/policy/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/policy/route.ts index b76f9129..05c73a22 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/policy/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/policy/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/runtime/trace-governance/policy", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { @@ -28,7 +29,7 @@ export async function PUT(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "PUT", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body ?? {}), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/run-once/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/run-once/route.ts index 0226bc89..aa6de934 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/run-once/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/trace-governance/run-once/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -10,7 +11,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body ?? {}), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-health/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-health/route.ts index 7a4070af..1d173396 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-health/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-health/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -9,7 +10,7 @@ export async function GET() { const targetUrl = new URL("/api/v1/runtime/worker-health", aiPlatformBaseUrl); try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/route.ts index 0147fabe..6752639d 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -13,7 +14,7 @@ export async function GET(request: Request) { } try { - const response = await fetch(targetUrl, { cache: "no-store" }); + const response = await fetchAiPlatform(targetUrl, { cache: "no-store" }); const payload: unknown = await response.json().catch(() => null); return NextResponse.json(payload, { status: response.status }); } catch (error) { diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/run-once/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/run-once/route.ts index b02afee8..6eed4eb2 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/run-once/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/ai-platform/runtime/worker-runs/run-once/route.ts @@ -1,3 +1,4 @@ +import { fetchAiPlatform } from "@/lib/ai-platform-api"; import { NextResponse } from "next/server"; const aiPlatformBaseUrl = @@ -10,7 +11,7 @@ export async function POST(request: Request) { const body: unknown = await request.json().catch(() => null); try { - const response = await fetch(targetUrl, { + const response = await fetchAiPlatform(targetUrl, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body ?? {}), diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/invite/accept/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/invite/accept/route.ts index a71751fe..f677a5f0 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/invite/accept/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/invite/accept/route.ts @@ -1,4 +1,4 @@ -import { buildContractApiUrl } from "@/lib/contract-api"; +import { buildContractApiUrl, fetchContractApi } from "@/lib/contract-api"; import { setContractWebSession } from "@/lib/contract-session"; type IdentitySessionPayload = { @@ -16,7 +16,7 @@ type IdentitySessionPayload = { export async function POST(request: Request) { const body = await request.text(); - const response = await fetch(buildContractApiUrl("/api/v1/identity/invitations/accept"), { + const response = await fetchContractApi(buildContractApiUrl("/api/v1/identity/invitations/accept"), { method: "POST", headers: { "Content-Type": "application/json" }, body, diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/login/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/login/route.ts index a8730605..cbbfc861 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/login/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/login/route.ts @@ -1,4 +1,4 @@ -import { buildContractApiUrl } from "@/lib/contract-api"; +import { buildContractApiUrl, fetchContractApi } from "@/lib/contract-api"; import { setContractWebSession } from "@/lib/contract-session"; type IdentitySessionPayload = { @@ -16,7 +16,7 @@ type IdentitySessionPayload = { export async function POST(request: Request) { const body = await request.text(); - const response = await fetch(buildContractApiUrl("/api/v1/identity/login"), { + const response = await fetchContractApi(buildContractApiUrl("/api/v1/identity/login"), { method: "POST", headers: { "Content-Type": "application/json" }, body, diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/confirm/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/confirm/route.ts index ae126bd6..7aa6b0c4 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/confirm/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/confirm/route.ts @@ -1,4 +1,4 @@ -import { buildContractApiUrl } from "@/lib/contract-api"; +import { buildContractApiUrl, fetchContractApi } from "@/lib/contract-api"; import { setContractWebSession } from "@/lib/contract-session"; type IdentitySessionPayload = { @@ -16,7 +16,7 @@ type IdentitySessionPayload = { export async function POST(request: Request) { const body = await request.text(); - const response = await fetch(buildContractApiUrl("/api/v1/identity/password-reset/confirm"), { + const response = await fetchContractApi(buildContractApiUrl("/api/v1/identity/password-reset/confirm"), { method: "POST", headers: { "Content-Type": "application/json" }, body, diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/request/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/request/route.ts index 9462d128..bc00c563 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/request/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/password-reset/request/route.ts @@ -1,10 +1,12 @@ -import { buildContractApiUrl, proxyContractApiResponse } from "@/lib/contract-api"; +import { buildContractApiUrl, fetchContractApi } from "@/lib/contract-api"; export async function POST(request: Request) { const body = await request.text(); - return proxyContractApiResponse(buildContractApiUrl("/api/v1/identity/password-reset/request"), { + const response = await fetchContractApi(buildContractApiUrl("/api/v1/identity/password-reset/request"), { method: "POST", headers: { "Content-Type": "application/json" }, body, }); + const payload = await response.json().catch(() => null); + return Response.json(payload, { status: response.status }); } diff --git a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/register/route.ts b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/register/route.ts index 68d01430..69fa0c07 100644 --- a/yuqei-contract-platform/apps/contract-web/src/app/api/auth/register/route.ts +++ b/yuqei-contract-platform/apps/contract-web/src/app/api/auth/register/route.ts @@ -1,4 +1,4 @@ -import { buildContractApiUrl } from "@/lib/contract-api"; +import { buildContractApiUrl, fetchContractApi } from "@/lib/contract-api"; import { setContractWebSession } from "@/lib/contract-session"; type IdentitySessionPayload = { @@ -16,7 +16,7 @@ type IdentitySessionPayload = { export async function POST(request: Request) { const body = await request.text(); - const response = await fetch(buildContractApiUrl("/api/v1/identity/register-company"), { + const response = await fetchContractApi(buildContractApiUrl("/api/v1/identity/register-company"), { method: "POST", headers: { "Content-Type": "application/json" }, body, diff --git a/yuqei-contract-platform/apps/contract-web/src/lib/ai-platform-api.ts b/yuqei-contract-platform/apps/contract-web/src/lib/ai-platform-api.ts new file mode 100644 index 00000000..ccc6cd09 --- /dev/null +++ b/yuqei-contract-platform/apps/contract-web/src/lib/ai-platform-api.ts @@ -0,0 +1,28 @@ +import { getContractWebSession } from "@/lib/contract-session"; + +const aiPlatformBaseUrl = + process.env.AI_PLATFORM_API_BASE_URL ?? + process.env.NEXT_PUBLIC_AI_PLATFORM_API_BASE_URL ?? + "http://localhost:8101"; + +export function buildAiPlatformApiUrl(pathname: string) { + return new URL(pathname, aiPlatformBaseUrl); +} + +export async function fetchAiPlatform(targetUrl: URL, init?: RequestInit) { + const session = await getContractWebSession(); + if (!session) { + return Response.json({ message: "请先登录。" }, { status: 401 }); + } + + const headers = new Headers(init?.headers); + headers.delete("X-Tenant-Id"); + headers.delete("X-User-Id"); + headers.set("X-Tenant-Id", session.tenant_id); + headers.set("X-User-Id", session.user_id); + const serviceSecret = process.env.AI_PLATFORM_PROXY_SECRET?.trim(); + if (serviceSecret) { + headers.set("X-AI-Platform-Service-Key", serviceSecret); + } + return fetch(targetUrl, { cache: "no-store", ...init, headers }); +} diff --git a/yuqei-contract-platform/apps/contract-web/src/lib/contract-api.ts b/yuqei-contract-platform/apps/contract-web/src/lib/contract-api.ts index d9cb17e2..dde694ce 100644 --- a/yuqei-contract-platform/apps/contract-web/src/lib/contract-api.ts +++ b/yuqei-contract-platform/apps/contract-web/src/lib/contract-api.ts @@ -9,17 +9,33 @@ export function buildContractApiUrl(pathname: string) { return new URL(pathname, contractApiBaseUrl); } +export async function fetchContractApi(targetUrl: URL, init?: RequestInit) { + const session = await getContractWebSession(); + const headers = new Headers(init?.headers); + const proxySecret = process.env.CONTRACT_API_PROXY_SECRET?.trim(); + + headers.delete("X-Tenant-Id"); + headers.delete("X-User-Id"); + if (session?.tenant_id) { + headers.set("X-Tenant-Id", session.tenant_id); + } + if (session?.user_id) { + headers.set("X-User-Id", session.user_id); + } + if (proxySecret) { + headers.set("X-Contract-Proxy-Key", proxySecret); + } + + return fetch(targetUrl, { cache: "no-store", ...init, headers }); +} + export async function proxyContractApiResponse(targetUrl: URL, init?: RequestInit) { try { const session = await getContractWebSession(); - const headers = new Headers(init?.headers); - if (session?.tenant_id && !headers.has("X-Tenant-Id")) { - headers.set("X-Tenant-Id", session.tenant_id); + if (!session && !isPublicContractApiPath(targetUrl.pathname)) { + return Response.json({ message: "请先登录。" }, { status: 401 }); } - if (session?.user_id && !headers.has("X-User-Id")) { - headers.set("X-User-Id", session.user_id); - } - const response = await fetch(targetUrl, { cache: "no-store", ...init, headers }); + const response = await fetchContractApi(targetUrl, init); const payload: unknown = await response.json().catch(() => null); return Response.json(payload, { status: response.status }); } catch (error) { @@ -32,3 +48,7 @@ export async function proxyContractApiResponse(targetUrl: URL, init?: RequestIni ); } } + +function isPublicContractApiPath(pathname: string) { + return pathname === "/health" || pathname === "/api/v1/health"; +} diff --git a/yuqei-contract-platform/apps/contract-web/src/lib/contract-session.ts b/yuqei-contract-platform/apps/contract-web/src/lib/contract-session.ts index dd3819f1..a2136dad 100644 --- a/yuqei-contract-platform/apps/contract-web/src/lib/contract-session.ts +++ b/yuqei-contract-platform/apps/contract-web/src/lib/contract-session.ts @@ -1,6 +1,8 @@ import { cookies } from "next/headers"; +import { createHmac, timingSafeEqual } from "node:crypto"; export const CONTRACT_SESSION_COOKIE = "yuqei_contract_session"; +const SESSION_TTL_SECONDS = 60 * 60 * 24 * 7; export type ContractWebSession = { tenant_id: string; @@ -18,7 +20,17 @@ export async function getContractWebSession(): Promise; + const [encodedPayload, encodedSignature] = rawValue.split("."); + const secret = getSessionSecret(); + if (!encodedPayload || !encodedSignature || !secret || !isValidSignature(encodedPayload, encodedSignature, secret)) { + return null; + } + const parsed = JSON.parse(Buffer.from(encodedPayload, "base64url").toString("utf8")) as Partial & { + exp?: number; + }; + if (!parsed.exp || parsed.exp <= Math.floor(Date.now() / 1000)) { + return null; + } if (!parsed.tenant_id || !parsed.user_id || !parsed.email) { return null; } @@ -41,7 +53,8 @@ export async function setContractWebSession(session: ContractWebSession) { httpOnly: true, sameSite: "lax", path: "/", - maxAge: 60 * 60 * 24 * 7, + secure: process.env.CONTRACT_WEB_SESSION_SECURE === "true", + maxAge: SESSION_TTL_SECONDS, }); } @@ -51,5 +64,28 @@ export async function clearContractWebSession() { } function encodeSession(session: ContractWebSession) { - return Buffer.from(JSON.stringify(session), "utf8").toString("base64url"); + const secret = getSessionSecret(); + if (!secret) { + throw new Error("CONTRACT_WEB_SESSION_SECRET is required to create a session."); + } + const payload = Buffer.from( + JSON.stringify({ ...session, iat: Math.floor(Date.now() / 1000), exp: Math.floor(Date.now() / 1000) + SESSION_TTL_SECONDS }), + "utf8", + ).toString("base64url"); + return `${payload}.${signPayload(payload, secret)}`; +} + +function getSessionSecret() { + const secret = process.env.CONTRACT_WEB_SESSION_SECRET?.trim(); + return secret && secret.length >= 32 ? secret : null; +} + +function signPayload(payload: string, secret: string) { + return createHmac("sha256", secret).update(payload).digest("base64url"); +} + +function isValidSignature(payload: string, signature: string, secret: string) { + const expected = Buffer.from(signPayload(payload, secret), "utf8"); + const actual = Buffer.from(signature, "utf8"); + return expected.length === actual.length && timingSafeEqual(expected, actual); } diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/contracts_core.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/contracts_core.py index edd17680..dc5dc885 100644 --- a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/contracts_core.py +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/contracts_core.py @@ -269,7 +269,8 @@ def register_contract_core_routes( tags=["legal"], ) def proxy_legal_qa(request: LegalQaRequest) -> LegalQaResponse: - with AiPlatformClient(settings.ai_platform_base_url) as client: + client_options = {"service_key": settings.ai_platform_service_key} if settings.ai_platform_service_key else {} + with AiPlatformClient(settings.ai_platform_base_url, **client_options) as client: return client.run_legal_qa( request, context=RequestContext(tenant_id=get_request_tenant_id() or "default", user_id="contract-api"), diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/identity.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/identity.py index 00bab58e..b9d05693 100644 --- a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/identity.py +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/api/identity.py @@ -54,6 +54,10 @@ def register_identity_routes( tags=["identity"], ) def list_tenants(status: TenantStatus | None = None) -> TenantPage: + if settings.require_web_proxy_auth and not _is_platform_admin(): + tenant = identity_repository.get_current_tenant(_current_tenant_id()) + items = [tenant] if status is None or tenant.status == status else [] + return TenantPage(items=items, total=len(items)) return identity_repository.list_tenants(status=status) @app.get( @@ -70,6 +74,7 @@ def register_identity_routes( tags=["identity"], ) def create_tenant(request: TenantCreateRequest) -> TenantInfo: + _require_platform_admin(settings) try: return identity_repository.create_tenant(request) except IdentityConflictError as exc: @@ -109,8 +114,15 @@ def register_identity_routes( tags=["identity"], ) def create_invitation(request: TenantInvitationCreateRequest) -> TenantInvitationItem: + _require_tenant_admin(identity_repository, settings) + request = request.model_copy( + update={"tenant_id": _resolve_tenant_id(request.tenant_id, settings=settings)} + ) try: - return identity_repository.create_invitation(request, tenant_id=_current_tenant_id()) + return _redact_invitation( + identity_repository.create_invitation(request, tenant_id=_current_tenant_id()), + settings, + ) except IdentityConflictError as exc: raise HTTPException(status_code=409, detail=str(exc)) from exc except ValueError as exc: @@ -133,11 +145,18 @@ def register_identity_routes( tags=["identity"], ) def send_email_verification(request: EmailVerificationSendRequest) -> EmailChallengeItem: + _require_tenant_admin(identity_repository, settings) + request = request.model_copy( + update={"tenant_id": _resolve_tenant_id(request.tenant_id, settings=settings)} + ) try: - return identity_repository.send_email_challenge( - request, - tenant_id=_current_tenant_id(), - purpose=request.purpose, + return _redact_email_challenge( + identity_repository.send_email_challenge( + request, + tenant_id=_current_tenant_id(), + purpose=request.purpose, + ), + settings, ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc @@ -149,7 +168,7 @@ def register_identity_routes( ) def confirm_email_verification(request: EmailVerificationConfirmRequest) -> EmailVerificationResult: try: - return identity_repository.confirm_email_challenge(request) + return _redact_email_result(identity_repository.confirm_email_challenge(request), settings) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc @@ -160,10 +179,13 @@ def register_identity_routes( ) def request_password_reset(request: PasswordResetRequest) -> EmailChallengeItem: try: - return identity_repository.send_email_challenge( - request, - tenant_id=_current_tenant_id(), - purpose="password_reset", + return _redact_email_challenge( + identity_repository.send_email_challenge( + request, + tenant_id=_current_tenant_id(), + purpose="password_reset", + ), + settings, ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc @@ -185,7 +207,11 @@ def register_identity_routes( tags=["identity"], ) def get_sso_config(provider: SsoProvider = "saml", tenant_id: str | None = None) -> TenantSsoConfig: - return identity_repository.get_sso_config(tenant_id=tenant_id or _current_tenant_id(), provider=provider) + _require_tenant_admin(identity_repository, settings) + return identity_repository.get_sso_config( + tenant_id=_resolve_tenant_id(tenant_id, settings=settings), + provider=provider, + ) @app.put( f"{settings.api_prefix}/identity/sso-config", @@ -193,8 +219,12 @@ def register_identity_routes( tags=["identity"], ) def update_sso_config(request: TenantSsoConfigUpdateRequest, tenant_id: str | None = None) -> TenantSsoConfig: + _require_tenant_admin(identity_repository, settings) try: - return identity_repository.update_sso_config(request, tenant_id=tenant_id or _current_tenant_id()) + return identity_repository.update_sso_config( + request, + tenant_id=_resolve_tenant_id(tenant_id, settings=settings), + ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc @@ -204,7 +234,11 @@ def register_identity_routes( tags=["identity"], ) def update_tenant(tenant_id: str, request: TenantUpdateRequest) -> TenantInfo: - item = identity_repository.update_tenant(tenant_id, request) + _require_tenant_admin(identity_repository, settings) + item = identity_repository.update_tenant( + _resolve_tenant_id(tenant_id, settings=settings), + request, + ) if item is None: raise HTTPException(status_code=404, detail="Tenant not found") return item @@ -218,7 +252,11 @@ def register_identity_routes( tenant_id: str | None = None, status: TenantUserStatus | None = None, ) -> TenantUserPage: - return identity_repository.list_users(tenant_id=tenant_id or _current_tenant_id(), status=status) + _require_tenant_admin(identity_repository, settings) + return identity_repository.list_users( + tenant_id=_resolve_tenant_id(tenant_id, settings=settings), + status=status, + ) @app.post( f"{settings.api_prefix}/identity/users", @@ -226,6 +264,10 @@ def register_identity_routes( tags=["identity"], ) def create_user(request: TenantUserCreateRequest) -> TenantUserItem: + _require_tenant_admin(identity_repository, settings) + request = request.model_copy( + update={"tenant_id": _resolve_tenant_id(request.tenant_id, settings=settings)} + ) try: return identity_repository.create_user(request, tenant_id=_current_tenant_id()) except IdentityConflictError as exc: @@ -239,6 +281,8 @@ def register_identity_routes( tags=["identity"], ) def update_user(user_id: str, request: TenantUserUpdateRequest) -> TenantUserItem: + _require_tenant_admin(identity_repository, settings) + _require_user_in_tenant(identity_repository, user_id, settings) item = identity_repository.update_user(user_id, request) if item is None: raise HTTPException(status_code=404, detail="User not found") @@ -253,9 +297,12 @@ def register_identity_routes( tenant_id: str | None = None, user_id: str | None = None, ) -> AccountSettings: + resolved_tenant_id = _resolve_tenant_id(tenant_id, settings=settings) + resolved_user_id = user_id or _current_user_id() + _require_self_or_platform_admin(resolved_user_id, settings) return identity_repository.get_account_settings( - tenant_id=tenant_id or _current_tenant_id(), - user_id=user_id or _current_user_id(), + tenant_id=resolved_tenant_id, + user_id=resolved_user_id, ) @app.patch( @@ -264,11 +311,13 @@ def register_identity_routes( tags=["identity"], ) def update_account_settings(request: AccountSettingsUpdateRequest) -> AccountSettings: + resolved_user_id = request.user_id or _current_user_id() + _require_self_or_platform_admin(resolved_user_id, settings) try: return identity_repository.update_account_settings( request, tenant_id=_current_tenant_id(), - user_id=request.user_id or _current_user_id(), + user_id=resolved_user_id, ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc @@ -288,3 +337,63 @@ def _current_tenant_id() -> str: def _current_user_id() -> str: return get_user_context() or "current-admin" + + +def _is_platform_admin() -> bool: + return _current_tenant_id() == DEFAULT_TENANT_ID and _current_user_id() in { + "current-admin", + "user-current-admin", + } + + +def _require_platform_admin(settings: ContractApiSettings) -> None: + if settings.require_web_proxy_auth and not _is_platform_admin(): + raise HTTPException(status_code=403, detail="Platform administrator access is required.") + + +def _resolve_tenant_id(requested_tenant_id: str | None, *, settings: ContractApiSettings) -> str: + current_tenant_id = _current_tenant_id() + resolved_tenant_id = requested_tenant_id or current_tenant_id + if settings.require_web_proxy_auth and resolved_tenant_id != current_tenant_id and not _is_platform_admin(): + raise HTTPException(status_code=403, detail="Cross-tenant identity access is not allowed.") + return resolved_tenant_id + + +def _require_tenant_admin(identity_repository, settings: ContractApiSettings) -> None: + if not settings.require_web_proxy_auth or _is_platform_admin(): + return + user_id = _current_user_id() + users = identity_repository.list_users(tenant_id=_current_tenant_id()).items + current_user = next((item for item in users if item.id == user_id), None) + if current_user is None or current_user.status != "active" or current_user.role != "admin": + raise HTTPException(status_code=403, detail="Tenant administrator access is required.") + + +def _require_user_in_tenant(identity_repository, user_id: str, settings: ContractApiSettings) -> None: + if not settings.require_web_proxy_auth or _is_platform_admin(): + return + users = identity_repository.list_users(tenant_id=_current_tenant_id()).items + if not any(item.id == user_id for item in users): + raise HTTPException(status_code=403, detail="Cross-tenant user access is not allowed.") + + +def _require_self_or_platform_admin(user_id: str, settings: ContractApiSettings) -> None: + if settings.require_web_proxy_auth and user_id != _current_user_id() and not _is_platform_admin(): + raise HTTPException(status_code=403, detail="Account access is limited to the signed-in user.") + + +def _redact_invitation(item: TenantInvitationItem, settings: ContractApiSettings) -> TenantInvitationItem: + if settings.environment == "production": + payload = item.model_dump(exclude={"invite_token"}) + return TenantInvitationItem.model_validate(payload) + return item + + +def _redact_email_challenge(item: EmailChallengeItem, settings: ContractApiSettings) -> EmailChallengeItem: + if settings.environment == "production": + return item.model_copy(update={"dev_code": None}) + return item + + +def _redact_email_result(result: EmailVerificationResult, settings: ContractApiSettings) -> EmailVerificationResult: + return result.model_copy(update={"challenge": _redact_email_challenge(result.challenge, settings)}) diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/config.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/config.py index 8f9ff8c3..88060263 100644 --- a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/config.py +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/config.py @@ -17,6 +17,9 @@ class ContractApiSettings(BaseSettings): file_storage_dir: str = ".runtime/contract-files" redis_url: str = "redis://localhost:6379/0" ai_platform_base_url: str = "http://localhost:8101" + ai_platform_service_key: str = "" + web_proxy_shared_secret: str = "" + require_web_proxy_auth: bool = False review_worker_name: str = "contract-review-worker-1" review_worker_poll_interval_seconds: float = 5.0 review_worker_batch_limit: int = 5 @@ -45,6 +48,8 @@ def check_runtime_config(settings: ContractApiSettings) -> RuntimeConfigStatus: _check_database_config(settings), _check_seed_config(settings), _check_ai_platform_config(settings), + _check_web_proxy_auth_config(settings), + _check_identity_delivery_config(settings), _check_worker_config(settings), _check_file_storage_config(settings), ] @@ -155,6 +160,30 @@ def _check_worker_config(settings: ContractApiSettings) -> RuntimeConfigCheck: ) +def _check_web_proxy_auth_config(settings: ContractApiSettings) -> RuntimeConfigCheck: + secret_length = len(settings.web_proxy_shared_secret.strip()) + if settings.environment == "production" and not settings.require_web_proxy_auth: + return RuntimeConfigCheck( + name="web_proxy_auth", + status="error", + message="Production must require authenticated requests from the web proxy.", + details={"require_web_proxy_auth": settings.require_web_proxy_auth}, + ) + if settings.require_web_proxy_auth and secret_length < 32: + return RuntimeConfigCheck( + name="web_proxy_auth", + status="error", + message="Web proxy authentication requires a shared secret of at least 32 characters.", + details={"require_web_proxy_auth": settings.require_web_proxy_auth, "secret_configured": bool(secret_length)}, + ) + return RuntimeConfigCheck( + name="web_proxy_auth", + status="ok", + message="Web proxy authentication configuration is acceptable.", + details={"require_web_proxy_auth": settings.require_web_proxy_auth, "secret_configured": bool(secret_length)}, + ) + + def _check_file_storage_config(settings: ContractApiSettings) -> RuntimeConfigCheck: if not settings.file_storage_dir.strip(): return RuntimeConfigCheck( @@ -170,6 +199,22 @@ def _check_file_storage_config(settings: ContractApiSettings) -> RuntimeConfigCh ) +def _check_identity_delivery_config(settings: ContractApiSettings) -> RuntimeConfigCheck: + if settings.environment == "production": + return RuntimeConfigCheck( + name="identity_email_delivery", + status="error", + message="Production identity email delivery is not implemented yet.", + details={"delivery_mode": "development_only"}, + ) + return RuntimeConfigCheck( + name="identity_email_delivery", + status="warning", + message="Email verification and password reset use development delivery behavior.", + details={"delivery_mode": "development_only"}, + ) + + @lru_cache def get_settings() -> ContractApiSettings: return ContractApiSettings() diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/main.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/main.py index 43d9a7bf..a9c1374c 100644 --- a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/main.py +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/main.py @@ -1,6 +1,7 @@ from datetime import UTC, datetime from fastapi import FastAPI, HTTPException, Request +from fastapi.responses import JSONResponse from yuqei_contract_api import __version__ from yuqei_contract_api.api.contracts_core import register_contract_core_routes @@ -20,6 +21,7 @@ from yuqei_contract_api.logging import ( ) from yuqei_contract_api.repository_base import ContractRepository from yuqei_contract_api.repository_factory import build_contract_repository +from yuqei_contract_api.proxy_auth import PROXY_HEADER, is_public_path, is_valid_proxy_key from yuqei_contract_api.tenant_context import clear_tenant_context, clear_user_context, set_tenant_context, set_user_context @@ -69,6 +71,13 @@ def create_app( trace_id = request.headers.get("X-Trace-Id") or f"trace-{uuid.uuid4().hex[:16]}" set_trace_id(trace_id) + if resolved_settings.require_web_proxy_auth and not is_public_path(request.url.path, resolved_settings.api_prefix): + if not is_valid_proxy_key(request.headers.get(PROXY_HEADER), resolved_settings.web_proxy_shared_secret): + return JSONResponse( + status_code=401, + content={"detail": "Authenticated web proxy access is required."}, + ) + tenant_id = request.headers.get("X-Tenant-Id") or "default" user_id = request.headers.get("X-User-Id") set_tenant_context(tenant_id) diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/proxy_auth.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/proxy_auth.py new file mode 100644 index 00000000..46172f06 --- /dev/null +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/proxy_auth.py @@ -0,0 +1,18 @@ +from __future__ import annotations + +from hmac import compare_digest + + +PROXY_HEADER = "X-Contract-Proxy-Key" + + +def is_valid_proxy_key(candidate: str | None, expected: str) -> bool: + """Validate the server-to-server key without exposing key length timing.""" + if not candidate or not expected: + return False + return compare_digest(candidate, expected) + + +def is_public_path(path: str, api_prefix: str) -> bool: + """Keep liveness endpoints reachable by Docker and load balancers.""" + return path in {"/health", f"{api_prefix}/health"} diff --git a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/review_worker.py b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/review_worker.py index 39af5243..cbc7fbbc 100644 --- a/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/review_worker.py +++ b/yuqei-contract-platform/services/contract-api/src/yuqei_contract_api/review_worker.py @@ -26,6 +26,7 @@ def run_review_worker_once( *, repository: ContractRepository, ai_platform_base_url: str, + ai_platform_service_key: str | None = None, options: ReviewWorkerOptions, ) -> ReviewWorkerRun: max_tasks = max(options.limit, 1) @@ -44,6 +45,7 @@ def run_review_worker_once( repository=repository, task=task, ai_platform_base_url=ai_platform_base_url, + ai_platform_service_key=ai_platform_service_key, options=options, ) if result.status == "succeeded": @@ -64,6 +66,7 @@ def execute_review_task( repository: ContractRepository, task: ReviewTask, ai_platform_base_url: str, + ai_platform_service_key: str | None = None, options: ReviewWorkerOptions, ) -> ReviewTask: contract = repository.get_contract(task.contract_id) @@ -85,12 +88,13 @@ def execute_review_task( return failed or task try: - with AiPlatformClient(ai_platform_base_url) as client: + client_options = {"service_key": ai_platform_service_key} if ai_platform_service_key else {} + with AiPlatformClient(ai_platform_base_url, **client_options) as client: review = client.run_contract_review( ContractReviewRequest( contract_title=contract.title, contract_text=source_document.text, - contract_type=None, + contract_type=contract.contract_type, counterparty=contract.counterparty, review_focus=build_review_focus(options.review_focus or task.summary, source_document), knowledge_base_ids=list(options.knowledge_base_ids), @@ -215,6 +219,7 @@ def main() -> None: run_review_worker_once( repository=repository, ai_platform_base_url=settings.ai_platform_base_url, + ai_platform_service_key=settings.ai_platform_service_key, options=ReviewWorkerOptions( worker_name=settings.review_worker_name, limit=settings.review_worker_batch_limit, @@ -229,6 +234,7 @@ def run_once(settings: ContractApiSettings | None = None, *, limit: int | None = return run_review_worker_once( repository=repository, ai_platform_base_url=resolved_settings.ai_platform_base_url, + ai_platform_service_key=resolved_settings.ai_platform_service_key, options=ReviewWorkerOptions( worker_name=resolved_settings.review_worker_name, limit=limit or resolved_settings.review_worker_batch_limit, diff --git a/yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py b/yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py index 5d32230d..2a613ac5 100644 --- a/yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py +++ b/yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py @@ -2287,6 +2287,7 @@ def test_review_worker_calls_ai_platform_and_persists_result(tmp_path: Path, mon def run_contract_review(self, request, *, context=None): assert request.contract_title == "\u9700 AI \u5ba1\u67e5\u7684\u5408\u540c" assert "\u4ed8\u6b3e" in request.contract_text + assert request.contract_type == "investment-agreement" assert request.knowledge_base_ids == ["enterprise"] assert context is not None assert context.tenant_id == "default" @@ -2323,6 +2324,7 @@ def test_review_worker_calls_ai_platform_and_persists_result(tmp_path: Path, mon "/api/v1/contracts", json={ "title": "\u9700 AI \u5ba1\u67e5\u7684\u5408\u540c", + "contract_type": "investment-agreement", "source_text": "\u4ed8\u6b3e\u5728\u9a8c\u6536\u540e\u652f\u4ed8\uff0c\u4f46\u672a\u5199\u660e\u9a8c\u6536\u6807\u51c6\u3002", }, ) diff --git a/yuqei-contract-platform/services/contract-api/tests/test_health.py b/yuqei-contract-platform/services/contract-api/tests/test_health.py index 0fb2e739..3286babf 100644 --- a/yuqei-contract-platform/services/contract-api/tests/test_health.py +++ b/yuqei-contract-platform/services/contract-api/tests/test_health.py @@ -28,7 +28,7 @@ def test_health_endpoint_returns_contract_api_status() -> None: "service": "contract-api", "version": "0.1.0", "environment": "test", - "config_status": "ok", + "config_status": "warning", "database_backend": "sqlite+pysqlite", "database_auto_create": True, "seed_demo_data": True, diff --git a/yuqei-contract-platform/services/contract-api/tests/test_proxy_auth.py b/yuqei-contract-platform/services/contract-api/tests/test_proxy_auth.py new file mode 100644 index 00000000..e065ac0f --- /dev/null +++ b/yuqei-contract-platform/services/contract-api/tests/test_proxy_auth.py @@ -0,0 +1,85 @@ +from pathlib import Path + +from fastapi.testclient import TestClient + +from yuqei_contract_api.config import ContractApiSettings, check_runtime_config +from yuqei_contract_api.main import create_app + + +AUTH_VALUE = "x" * 48 + + +def make_settings(tmp_path: Path) -> ContractApiSettings: + return ContractApiSettings( + environment="staging", + database_url=f"sqlite+pysqlite:///{tmp_path / 'proxy-auth.db'}", + database_auto_create=True, + seed_demo_data=False, + file_storage_dir=str(tmp_path / "files"), + web_proxy_shared_secret=AUTH_VALUE, + require_web_proxy_auth=True, + ) + + +def test_health_remains_public_for_container_liveness(tmp_path: Path) -> None: + client = TestClient(create_app(make_settings(tmp_path))) + + response = client.get("/health") + + assert response.status_code == 200 + + +def test_non_public_requests_require_the_server_side_proxy_key(tmp_path: Path) -> None: + client = TestClient(create_app(make_settings(tmp_path))) + + missing = client.get("/api/v1/contracts") + wrong = client.get("/api/v1/contracts", headers={"X-Contract-Proxy-Key": "wrong"}) + valid = client.get("/api/v1/contracts", headers={"X-Contract-Proxy-Key": AUTH_VALUE}) + + assert missing.status_code == 401 + assert wrong.status_code == 401 + assert valid.status_code == 200 + + +def test_production_config_requires_proxy_auth() -> None: + settings = ContractApiSettings( + environment="production", + database_url="postgresql+psycopg://contract@postgres:5432/yuqei_contract", + database_auto_create=False, + seed_demo_data=False, + ) + + checks = {item.name: item for item in check_runtime_config(settings).checks} + + assert checks["web_proxy_auth"].status == "error" + + +def test_authenticated_tenant_cannot_override_identity_scope(tmp_path: Path) -> None: + client = TestClient(create_app(make_settings(tmp_path))) + proxy_headers = {"X-Contract-Proxy-Key": AUTH_VALUE} + credential_value = "S" * 8 + "1" * 4 + + registered = client.post( + "/api/v1/identity/register-company", + headers=proxy_headers, + json={ + "tenant_id": "tenant-secure", + "company_name": "Secure Tenant", + "admin_email": "owner@secure.example", + "admin_display_name": "Tenant Owner", + "admin_password": credential_value, + }, + ) + assert registered.status_code == 200 + session = registered.json() + tenant_headers = { + **proxy_headers, + "X-Tenant-Id": session["tenant"]["id"], + "X-User-Id": session["user"]["id"], + } + + own_scope = client.get("/api/v1/identity/users?tenant_id=tenant-secure", headers=tenant_headers) + foreign_scope = client.get("/api/v1/identity/users?tenant_id=default", headers=tenant_headers) + + assert own_scope.status_code == 200 + assert foreign_scope.status_code == 403 diff --git a/yuqei-infra/compose/.env.example b/yuqei-infra/compose/.env.example index 298465e3..42d65eb2 100644 --- a/yuqei-infra/compose/.env.example +++ b/yuqei-infra/compose/.env.example @@ -25,12 +25,18 @@ CONTRACT_API_SEED_DEMO_DATA=true CONTRACT_API_FILE_STORAGE_DIR=/data/contract-files CONTRACT_API_REDIS_URL=redis://redis:6379/0 CONTRACT_API_AI_PLATFORM_BASE_URL=http://ai-platform-api:8101 +CONTRACT_API_WEB_PROXY_SHARED_SECRET=local-only-proxy-secret-change-me-32 +CONTRACT_API_REQUIRE_WEB_PROXY_AUTH=false CONTRACT_API_UVICORN_WORKERS=1 CONTRACT_API_READ_CACHE_TTL_SECONDS=2 CONTRACT_API_REVIEW_WORKER_NAME=contract-review-worker-1 CONTRACT_API_REVIEW_WORKER_POLL_INTERVAL_SECONDS=5 CONTRACT_API_REVIEW_WORKER_BATCH_LIMIT=5 CONTRACT_REVIEW_WORKER_SEED_DEMO_DATA=false +CONTRACT_WEB_SESSION_SECRET=local-only-session-secret-change-me-32 +CONTRACT_WEB_SESSION_SECURE=false +AI_PLATFORM_SERVICE_SHARED_SECRET=local-only-ai-service-secret-change-me-32 +AI_PLATFORM_REQUIRE_SERVICE_AUTH=false AI_PLATFORM_ENVIRONMENT=local AI_PLATFORM_DATABASE_URL=postgresql+psycopg://yuqei:yuqei-local@postgres:5432/yuqei_ai diff --git a/yuqei-infra/compose/.env.production.example b/yuqei-infra/compose/.env.production.example index 3bf0f5a5..43360be4 100644 --- a/yuqei-infra/compose/.env.production.example +++ b/yuqei-infra/compose/.env.production.example @@ -27,12 +27,18 @@ CONTRACT_API_SEED_DEMO_DATA=false CONTRACT_API_FILE_STORAGE_DIR=/data/contract-files CONTRACT_API_REDIS_URL=redis://redis:6379/0 CONTRACT_API_AI_PLATFORM_BASE_URL=http://ai-platform-api:8101 +CONTRACT_API_WEB_PROXY_SHARED_SECRET=CHANGE_ME_USE_A_RANDOM_32_BYTE_SECRET +CONTRACT_API_REQUIRE_WEB_PROXY_AUTH=true CONTRACT_API_UVICORN_WORKERS=1 CONTRACT_API_READ_CACHE_TTL_SECONDS=2 CONTRACT_API_REVIEW_WORKER_NAME=contract-review-worker-1 CONTRACT_API_REVIEW_WORKER_POLL_INTERVAL_SECONDS=5 CONTRACT_API_REVIEW_WORKER_BATCH_LIMIT=5 CONTRACT_REVIEW_WORKER_SEED_DEMO_DATA=false +CONTRACT_WEB_SESSION_SECRET=CHANGE_ME_USE_A_DIFFERENT_RANDOM_32_BYTE_SECRET +CONTRACT_WEB_SESSION_SECURE=true +AI_PLATFORM_SERVICE_SHARED_SECRET=CHANGE_ME_USE_A_THIRD_RANDOM_32_BYTE_SECRET +AI_PLATFORM_REQUIRE_SERVICE_AUTH=true AI_PLATFORM_ENVIRONMENT=production AI_PLATFORM_DATABASE_URL=postgresql+psycopg://CHANGE_ME:CHANGE_ME@postgres:5432/yuqei_ai @@ -40,7 +46,8 @@ AI_PLATFORM_DATABASE_AUTO_CREATE=false AI_PLATFORM_REPOSITORY_BACKEND=sqlalchemy AI_PLATFORM_REDIS_URL=redis://redis:6379/1 AI_PLATFORM_PROVIDER_CONFIG_SOURCE=database -AI_PLATFORM_PROVIDER_CALL_MODE=live +# `enabled` activates the configured OpenAI-compatible provider. `disabled` is smoke-only. +AI_PLATFORM_PROVIDER_CALL_MODE=enabled AI_PLATFORM_PROVIDER_FALLBACK_ENABLED=false AI_PLATFORM_UVICORN_WORKERS=1 diff --git a/yuqei-infra/compose/docker-compose.yml b/yuqei-infra/compose/docker-compose.yml index d02fc93b..3a52fbc4 100644 --- a/yuqei-infra/compose/docker-compose.yml +++ b/yuqei-infra/compose/docker-compose.yml @@ -108,6 +108,9 @@ services: CONTRACT_API_FILE_STORAGE_DIR: ${CONTRACT_API_FILE_STORAGE_DIR:-/data/contract-files} CONTRACT_API_REDIS_URL: ${CONTRACT_API_REDIS_URL:-redis://redis:6379/0} CONTRACT_API_AI_PLATFORM_BASE_URL: ${CONTRACT_API_AI_PLATFORM_BASE_URL:-http://ai-platform-api:8101} + CONTRACT_API_AI_PLATFORM_SERVICE_KEY: ${AI_PLATFORM_SERVICE_SHARED_SECRET:-local-only-ai-service-secret-change-me-32} + CONTRACT_API_WEB_PROXY_SHARED_SECRET: ${CONTRACT_API_WEB_PROXY_SHARED_SECRET:-local-only-proxy-secret-change-me-32} + CONTRACT_API_REQUIRE_WEB_PROXY_AUTH: ${CONTRACT_API_REQUIRE_WEB_PROXY_AUTH:-false} CONTRACT_API_UVICORN_WORKERS: ${CONTRACT_API_UVICORN_WORKERS:-1} CONTRACT_API_DB_POOL_SIZE: ${CONTRACT_API_DB_POOL_SIZE:-10} CONTRACT_API_DB_MAX_OVERFLOW: ${CONTRACT_API_DB_MAX_OVERFLOW:-20} @@ -149,6 +152,7 @@ services: CONTRACT_API_FILE_STORAGE_DIR: ${CONTRACT_API_FILE_STORAGE_DIR:-/data/contract-files} CONTRACT_API_REDIS_URL: ${CONTRACT_API_REDIS_URL:-redis://redis:6379/0} CONTRACT_API_AI_PLATFORM_BASE_URL: ${CONTRACT_API_AI_PLATFORM_BASE_URL:-http://ai-platform-api:8101} + CONTRACT_API_AI_PLATFORM_SERVICE_KEY: ${AI_PLATFORM_SERVICE_SHARED_SECRET:-local-only-ai-service-secret-change-me-32} CONTRACT_API_REVIEW_WORKER_NAME: ${CONTRACT_API_REVIEW_WORKER_NAME:-contract-review-worker-1} CONTRACT_API_REVIEW_WORKER_POLL_INTERVAL_SECONDS: ${CONTRACT_API_REVIEW_WORKER_POLL_INTERVAL_SECONDS:-5} CONTRACT_API_REVIEW_WORKER_BATCH_LIMIT: ${CONTRACT_API_REVIEW_WORKER_BATCH_LIMIT:-5} @@ -191,6 +195,21 @@ services: condition: service_completed_successfully restart: "no" + ai-platform-prompt-assets-import: + build: + context: ../.. + dockerfile: yuqei-infra/docker/ai-platform-api.Dockerfile + working_dir: /app/yuqei-ai-platform/services/ai-platform-api + command: ["python", "-m", "yuqei_ai_platform_api.v1_prompt_assets_import", "--apply"] + environment: + AI_PLATFORM_ENVIRONMENT: ${AI_PLATFORM_ENVIRONMENT:-local} + AI_PLATFORM_DATABASE_URL: ${AI_PLATFORM_DATABASE_URL:-postgresql+psycopg://yuqei:yuqei-local@postgres:5432/yuqei_ai} + AI_PLATFORM_DATABASE_AUTO_CREATE: ${AI_PLATFORM_DATABASE_AUTO_CREATE:-false} + depends_on: + ai-platform-api-migrate: + condition: service_completed_successfully + restart: "no" + ai-platform-api: build: context: ../.. @@ -205,6 +224,8 @@ services: AI_PLATFORM_PROVIDER_CONFIG_SOURCE: ${AI_PLATFORM_PROVIDER_CONFIG_SOURCE:-database} AI_PLATFORM_PROVIDER_CALL_MODE: ${AI_PLATFORM_PROVIDER_CALL_MODE:-disabled} AI_PLATFORM_PROVIDER_FALLBACK_ENABLED: ${AI_PLATFORM_PROVIDER_FALLBACK_ENABLED:-true} + AI_PLATFORM_SERVICE_SHARED_SECRET: ${AI_PLATFORM_SERVICE_SHARED_SECRET:-local-only-ai-service-secret-change-me-32} + AI_PLATFORM_REQUIRE_SERVICE_AUTH: ${AI_PLATFORM_REQUIRE_SERVICE_AUTH:-false} AI_PLATFORM_UVICORN_WORKERS: ${AI_PLATFORM_UVICORN_WORKERS:-1} AI_PLATFORM_DB_POOL_SIZE: ${AI_PLATFORM_DB_POOL_SIZE:-10} AI_PLATFORM_DB_MAX_OVERFLOW: ${AI_PLATFORM_DB_MAX_OVERFLOW:-20} @@ -234,6 +255,8 @@ services: condition: service_healthy ai-platform-api-migrate: condition: service_completed_successfully + ai-platform-prompt-assets-import: + condition: service_completed_successfully worker: build: @@ -284,8 +307,12 @@ services: restart: unless-stopped environment: CONTRACT_API_BASE_URL: http://contract-api:8100 + CONTRACT_API_PROXY_SECRET: ${CONTRACT_API_WEB_PROXY_SHARED_SECRET:-local-only-proxy-secret-change-me-32} + CONTRACT_WEB_SESSION_SECRET: ${CONTRACT_WEB_SESSION_SECRET:-local-only-session-secret-change-me-32} + CONTRACT_WEB_SESSION_SECURE: ${CONTRACT_WEB_SESSION_SECURE:-false} NEXT_PUBLIC_CONTRACT_API_BASE_URL: http://localhost:8100 AI_PLATFORM_API_BASE_URL: http://ai-platform-api:8101 + AI_PLATFORM_PROXY_SECRET: ${AI_PLATFORM_SERVICE_SHARED_SECRET:-local-only-ai-service-secret-change-me-32} NEXT_PUBLIC_AI_PLATFORM_API_BASE_URL: http://localhost:8101 ports: - "${CONTRACT_WEB_HOST_PORT:-3000}:3000" diff --git a/yuqei-infra/scripts/compare-v1-v2-assets.py b/yuqei-infra/scripts/compare-v1-v2-assets.py index 77a57e91..824327cf 100644 --- a/yuqei-infra/scripts/compare-v1-v2-assets.py +++ b/yuqei-infra/scripts/compare-v1-v2-assets.py @@ -1,8 +1,4 @@ -"""Compare V1 source assets with V2 local/runtime assets. - -This is a lightweight release-readiness helper. It intentionally counts stable -asset units instead of trying to assert semantic equivalence. -""" +"""Compare V1 source assets with V2 packaged and runtime assets.""" from __future__ import annotations @@ -18,12 +14,14 @@ from urllib.request import urlopen REPO_ROOT = Path(__file__).resolve().parents[2] DEFAULT_V1_ROOT = Path("D:/yuqei-project/ai-contract-platform-v1") DEFAULT_CONTRACT_API_BASE = "http://localhost:8101" +DEFAULT_AI_PLATFORM_API_BASE = "http://localhost:8102" def main() -> int: parser = argparse.ArgumentParser(description="Compare V1 and V2 release assets.") parser.add_argument("--v1-root", type=Path, default=DEFAULT_V1_ROOT) parser.add_argument("--contract-api-base", default=DEFAULT_CONTRACT_API_BASE) + parser.add_argument("--ai-platform-api-base", default=DEFAULT_AI_PLATFORM_API_BASE) parser.add_argument( "--artifact-dir", type=Path, @@ -35,107 +33,225 @@ def main() -> int: artifact_dir = args.artifact_dir artifact_dir.mkdir(parents=True, exist_ok=True) stamp = checked_at.replace(":", "-").replace("+00:00", "Z") + contract_api_base = args.contract_api_base.rstrip("/") + ai_platform_api_base = args.ai_platform_api_base.rstrip("/") + counts, parity = build_asset_report(args.v1_root, contract_api_base, ai_platform_api_base) result = { - "status": "pass", + "status": derive_status(counts, parity), "checked_at": checked_at, "v1_root": str(args.v1_root), - "contract_api_base": args.contract_api_base.rstrip("/"), - "counts": build_counts(args.v1_root, args.contract_api_base.rstrip("/")), + "contract_api_base": contract_api_base, + "ai_platform_api_base": ai_platform_api_base, + "counts": counts, + "parity": parity, "notes": [ - "Counts verify asset coverage shape only; legal/semantic parity still needs sampled review.", - "Runtime API totals depend on the target database behind contract-api-base.", + "Template, clause, rule, and Prompt parity compares stable IDs, not only file counts.", + "Runtime totals depend on the target databases behind the supplied API bases.", + "Semantic legal review and model-output quality still require sampled human approval.", ], } - result["status"] = derive_status(result["counts"]) json_path = artifact_dir / f"v2-asset-count-{stamp}.json" md_path = artifact_dir / f"v2-asset-count-{stamp}.md" json_path.write_text(json.dumps(result, ensure_ascii=False, indent=2), encoding="utf-8") md_path.write_text(render_markdown(result), encoding="utf-8") - print(json.dumps({"status": result["status"], "json": str(json_path), "markdown": str(md_path)}, ensure_ascii=False)) + print( + json.dumps( + {"status": result["status"], "json": str(json_path), "markdown": str(md_path)}, + ensure_ascii=False, + ) + ) return 0 if result["status"] in {"pass", "warning"} else 1 -def build_counts(v1_root: Path, contract_api_base: str) -> dict[str, Any]: +def build_asset_report( + v1_root: Path, + contract_api_base: str, + ai_platform_api_base: str, +) -> tuple[dict[str, Any], dict[str, Any]]: v1_phase13 = v1_root / "project-docs" / "phase13-legal-knowledge-template-library" v1_templates = v1_phase13 / "contract-templates" - v2_templates = ( - REPO_ROOT - / "yuqei-contract-platform" - / "services" - / "contract-api" - / "src" - / "yuqei_contract_api" - / "template_assets" - / "v1_contract_templates" - ) + v1_clauses = v1_phase13 / "clause-library" + v1_rules = v1_phase13 / "review-rules" v1_phase14 = v1_root / "project-docs" / "phase14-legal-fulltext-library" v1_prompt_golden = v1_root / "project-docs" / "phase15-prompt-golden-samples" - v2_golden_assets = ( + v1_prompt_assets_file = v1_root / "project-docs" / "phase15-prompt-assets" / "default-prompt-assets.json" + + v2_asset_root = REPO_ROOT / "yuqei-contract-platform" / "services" / "contract-api" / "src" / "yuqei_contract_api" / "template_assets" + v2_templates = v2_asset_root / "v1_contract_templates" + v2_clauses = v2_asset_root / "v1_clause_library" + v2_rules = v2_asset_root / "v1_review_rules" + v2_prompt_assets_file = ( REPO_ROOT / "yuqei-ai-platform" / "services" / "ai-platform-api" / "src" / "yuqei_ai_platform_api" - / "golden_assets" + / "prompt_assets" + / "v1_phase15" + / "default-prompt-assets.json" + ) + v2_golden_assets = v2_prompt_assets_file.parents[2] / "golden_assets" + + v1_template_ids = asset_ids(v1_templates, "*.md") + v2_template_ids = asset_ids(v2_templates, "*.md") + v1_clause_ids = asset_ids(v1_clauses, "*.md") + v2_clause_ids = asset_ids(v2_clauses, "*.md") + v1_rule_ids = asset_ids(v1_rules, "*.md") + v2_rule_ids = asset_ids(v2_rules, "*.md") + v1_prompt_keys = prompt_keys(read_json_file(v1_prompt_assets_file)) + v2_prompt_keys = prompt_keys(read_json_file(v2_prompt_assets_file)) + + runtime_payloads = { + "templates": api_json(contract_api_base, "/api/v1/templates?page_size=100"), + "clauses": api_json(contract_api_base, "/api/v1/standard-clauses?page_size=100"), + "rules": api_json(contract_api_base, "/api/v1/review-rules?page_size=100"), + "legal_articles": api_json(contract_api_base, "/api/v1/legal-articles?page_size=1"), + "contracts": api_json(contract_api_base, "/api/v1/contracts?page_size=1"), + "prompts": api_json(ai_platform_api_base, "/api/v1/prompt-templates"), + } + runtime_template_ids = item_ids(runtime_payloads["templates"]) + runtime_clause_ids = item_ids(runtime_payloads["clauses"]) + runtime_rule_ids = item_ids(runtime_payloads["rules"]) + runtime_prompt_items = payload_items(runtime_payloads["prompts"]) + runtime_prompt_keys = sorted( + str(item.get("name")) + for item in runtime_prompt_items + if item.get("version") == "v1-phase15" + and item.get("status") == "published" + and item.get("enabled") is True + and item.get("name") ) - runtime = { - "templates_total": api_total(contract_api_base, "/api/v1/templates/tree"), - "standard_clauses_total": api_total(contract_api_base, "/api/v1/standard-clauses"), - "review_rules_total": api_total(contract_api_base, "/api/v1/review-rules"), - "legal_articles_total": api_total(contract_api_base, "/api/v1/legal-articles?page_size=1"), - "contracts_total": api_total(contract_api_base, "/api/v1/contracts?page_size=1"), - } - - return { + counts = { "v1_template_variable_schema_files": count_files(v1_templates, "*-variables.json"), "v2_template_variable_schema_files": count_files(v2_templates, "*-variables.json"), - "v1_template_markdown_files": count_files(v1_templates, "*.md", exclude_names={"README.md"}), - "v2_template_markdown_files": count_files(v2_templates, "*.md", exclude_names={"README.md"}), - "v1_clause_library_markdown_files": count_files(v1_phase13 / "clause-library", "*.md"), - "v1_review_rule_markdown_files": count_files(v1_phase13 / "review-rules", "*.md"), + "v1_template_markdown_files": len(v1_template_ids), + "v2_template_markdown_files": len(v2_template_ids), + "v1_clause_library_markdown_files": len(v1_clause_ids), + "v2_clause_library_markdown_files": len(v2_clause_ids), + "v1_review_rule_markdown_files": len(v1_rule_ids), + "v2_review_rule_markdown_files": len(v2_rule_ids), "v1_phase14_legal_files": count_files(v1_phase14, "*"), "v1_prompt_golden_files": count_files(v1_prompt_golden, "*"), + "v1_prompt_asset_keys": len(v1_prompt_keys), + "v2_packaged_prompt_asset_keys": len(v2_prompt_keys), "v2_ai_golden_asset_files": count_files(v2_golden_assets, "*"), - "v2_runtime": runtime, + "v2_runtime": { + "templates_total": payload_total(runtime_payloads["templates"]), + "standard_clauses_total": payload_total(runtime_payloads["clauses"]), + "review_rules_total": payload_total(runtime_payloads["rules"]), + "legal_articles_total": payload_total(runtime_payloads["legal_articles"]), + "contracts_total": payload_total(runtime_payloads["contracts"]), + "prompt_templates_total": len(runtime_prompt_items), + "v1_phase15_prompt_templates_published": len(runtime_prompt_keys), + }, + } + parity = { + "templates": compare_ids(v1_template_ids, v2_template_ids, runtime_template_ids), + "standard_clauses": compare_ids(v1_clause_ids, v2_clause_ids, runtime_clause_ids), + "review_rules": compare_ids(v1_rule_ids, v2_rule_ids, runtime_rule_ids), + "prompts": compare_ids(v1_prompt_keys, v2_prompt_keys, runtime_prompt_keys), + } + return counts, parity + + +def asset_ids(root: Path, pattern: str) -> list[str]: + if not root.exists(): + return [] + return sorted( + path.stem + for path in root.rglob(pattern) + if path.is_file() and path.name.upper() != "README.MD" + ) + + +def prompt_keys(payload: Any) -> list[str]: + if not isinstance(payload, dict): + return [] + assets = payload.get("assets") + if not isinstance(assets, list): + return [] + return sorted( + str(item["prompt_key"]) + for item in assets + if isinstance(item, dict) and item.get("prompt_key") + ) + + +def compare_ids(expected: list[str], packaged: list[str], runtime: list[str]) -> dict[str, Any]: + expected_set = set(expected) + packaged_set = set(packaged) + runtime_set = set(runtime) + return { + "expected_count": len(expected), + "packaged_count": len(packaged), + "runtime_count": len(runtime), + "missing_in_packaged": sorted(expected_set - packaged_set), + "missing_in_runtime": sorted(expected_set - runtime_set), + "extra_in_packaged": sorted(packaged_set - expected_set), + "extra_in_runtime": sorted(runtime_set - expected_set), + "status": "pass" if expected_set <= packaged_set and expected_set <= runtime_set else "fail", } -def count_files(root: Path, pattern: str, *, exclude_names: set[str] | None = None) -> int: +def count_files(root: Path, pattern: str) -> int: if not root.exists(): return -1 - exclude_names = exclude_names or set() - return sum(1 for path in root.rglob(pattern) if path.is_file() and path.name not in exclude_names) + return sum(1 for path in root.rglob(pattern) if path.is_file()) -def api_total(base_url: str, path: str) -> int | str: - url = f"{base_url}{path}" +def read_json_file(path: Path) -> Any: + if not path.exists(): + return {"__error__": f"Missing file: {path}"} try: - with urlopen(url, timeout=20) as response: - payload = json.loads(response.read().decode("utf-8")) + return json.loads(path.read_text(encoding="utf-8-sig")) + except (OSError, ValueError) as exc: + return {"__error__": f"Unable to read {path}: {exc}"} + + +def api_json(base_url: str, path: str) -> Any: + try: + with urlopen(f"{base_url}{path}", timeout=20) as response: + return json.loads(response.read().decode("utf-8")) except (OSError, URLError, TimeoutError, json.JSONDecodeError) as exc: - return f"ERROR: {exc}" - total = payload.get("total") - if total is not None: - return int(total) - if "types" in payload: - return int(payload.get("total", 0)) + return {"__error__": f"{base_url}{path}: {exc}"} + + +def payload_items(payload: Any) -> list[dict[str, Any]]: + if isinstance(payload, list): + return [item for item in payload if isinstance(item, dict)] + if isinstance(payload, dict) and isinstance(payload.get("items"), list): + return [item for item in payload["items"] if isinstance(item, dict)] + return [] + + +def item_ids(payload: Any) -> list[str]: + return sorted(str(item["id"]) for item in payload_items(payload) if item.get("id")) + + +def payload_total(payload: Any) -> int | str: + if isinstance(payload, dict) and "__error__" in payload: + return str(payload["__error__"]) + if isinstance(payload, dict) and payload.get("total") is not None: + return int(payload["total"]) + if isinstance(payload, list): + return len(payload) return "ERROR: missing total" -def derive_status(counts: dict[str, Any]) -> str: +def derive_status(counts: dict[str, Any], parity: dict[str, Any]) -> str: if any(value == -1 for value in counts.values() if isinstance(value, int)): return "fail" + if any(item["status"] == "fail" for item in parity.values()): + return "fail" runtime = counts.get("v2_runtime", {}) - if any(isinstance(value, str) and value.startswith("ERROR:") for value in runtime.values()): + if any(isinstance(value, str) and (value.startswith("ERROR:") or value.startswith("Missing")) for value in runtime.values()): return "warning" if counts["v1_template_variable_schema_files"] != counts["v2_template_variable_schema_files"]: return "warning" - if counts["v1_template_markdown_files"] != counts["v2_template_markdown_files"]: - return "warning" return "pass" @@ -147,15 +263,20 @@ def render_markdown(result: dict[str, Any]) -> str: ("V2 template variable schemas", counts["v2_template_variable_schema_files"]), ("V1 template markdown", counts["v1_template_markdown_files"]), ("V2 template markdown", counts["v2_template_markdown_files"]), - ("V1 clause library markdown", counts["v1_clause_library_markdown_files"]), + ("V1 clause markdown", counts["v1_clause_library_markdown_files"]), + ("V2 clause markdown", counts["v2_clause_library_markdown_files"]), ("V1 review rule markdown", counts["v1_review_rule_markdown_files"]), - ("V1 phase14 legal files", counts["v1_phase14_legal_files"]), - ("V1 prompt golden files", counts["v1_prompt_golden_files"]), + ("V2 review rule markdown", counts["v2_review_rule_markdown_files"]), + ("V1 Prompt asset keys", counts["v1_prompt_asset_keys"]), + ("V2 packaged Prompt asset keys", counts["v2_packaged_prompt_asset_keys"]), + ("V1 Prompt golden files", counts["v1_prompt_golden_files"]), ("V2 AI golden asset files", counts["v2_ai_golden_asset_files"]), ("V2 runtime templates", runtime["templates_total"]), ("V2 runtime standard clauses", runtime["standard_clauses_total"]), ("V2 runtime review rules", runtime["review_rules_total"]), ("V2 runtime legal articles", runtime["legal_articles_total"]), + ("V2 runtime Prompt templates", runtime["prompt_templates_total"]), + ("V2 published V1 Phase15 Prompts", runtime["v1_phase15_prompt_templates_published"]), ("V2 runtime contracts", runtime["contracts_total"]), ] lines = [ @@ -169,6 +290,15 @@ def render_markdown(result: dict[str, Any]) -> str: "| --- | ---: |", ] lines.extend(f"| {name} | {value} |" for name, value in rows) + lines.extend(["", "## ID Parity", "", "| Asset | Expected | Packaged | Runtime | Status |", "| --- | ---: | ---: | ---: | --- |"]) + for name, item in result["parity"].items(): + lines.append( + f"| {name} | {item['expected_count']} | {item['packaged_count']} | {item['runtime_count']} | {item['status']} |" + ) + if item["missing_in_packaged"]: + lines.append(f"| {name} missing packaged | - | `{', '.join(item['missing_in_packaged'])}` | - | fail |") + if item["missing_in_runtime"]: + lines.append(f"| {name} missing runtime | - | - | `{', '.join(item['missing_in_runtime'])}` | fail |") lines.extend(["", "## Notes", ""]) lines.extend(f"- {note}" for note in result["notes"]) lines.append("") diff --git a/yuqei-infra/scripts/deploy-v2-smoke-docker.ps1 b/yuqei-infra/scripts/deploy-v2-smoke-docker.ps1 index 1dd1383c..b4b4bdfe 100644 --- a/yuqei-infra/scripts/deploy-v2-smoke-docker.ps1 +++ b/yuqei-infra/scripts/deploy-v2-smoke-docker.ps1 @@ -44,6 +44,9 @@ $remoteArchive = "/tmp/$archiveName" $envFileName = ".env.smoke" $remoteEnvPath = "$RemoteProjectPath/yuqei-infra/compose/$envFileName" $composeFile = "$RemoteProjectPath/yuqei-infra/compose/docker-compose.yml" +$webProxySharedSecret = "$([guid]::NewGuid().ToString('N'))$([guid]::NewGuid().ToString('N'))" +$webSessionSecret = "$([guid]::NewGuid().ToString('N'))$([guid]::NewGuid().ToString('N'))" +$aiPlatformServiceSecret = "$([guid]::NewGuid().ToString('N'))$([guid]::NewGuid().ToString('N'))" New-Item -ItemType Directory -Force -Path $artifactDir | Out-Null @@ -343,12 +346,18 @@ CONTRACT_API_SEED_DEMO_DATA=true CONTRACT_API_FILE_STORAGE_DIR=/data/contract-files CONTRACT_API_REDIS_URL=redis://redis:6379/0 CONTRACT_API_AI_PLATFORM_BASE_URL=http://ai-platform-api:8101 +AI_PLATFORM_SERVICE_SHARED_SECRET=$aiPlatformServiceSecret +AI_PLATFORM_REQUIRE_SERVICE_AUTH=true +CONTRACT_API_WEB_PROXY_SHARED_SECRET=$webProxySharedSecret +CONTRACT_API_REQUIRE_WEB_PROXY_AUTH=true CONTRACT_API_UVICORN_WORKERS=1 CONTRACT_API_READ_CACHE_TTL_SECONDS=2 CONTRACT_API_REVIEW_WORKER_NAME=contract-review-worker-smoke-1 CONTRACT_API_REVIEW_WORKER_POLL_INTERVAL_SECONDS=5 CONTRACT_API_REVIEW_WORKER_BATCH_LIMIT=5 CONTRACT_REVIEW_WORKER_SEED_DEMO_DATA=false +CONTRACT_WEB_SESSION_SECRET=$webSessionSecret +CONTRACT_WEB_SESSION_SECURE=false AI_PLATFORM_ENVIRONMENT=staging AI_PLATFORM_DATABASE_URL=postgresql+psycopg://yuqei:yuqei-local-smoke@postgres:5432/yuqei_ai AI_PLATFORM_DATABASE_AUTO_CREATE=false