mirror of
https://github.com/memohai/Memoh.git
synced 2026-04-27 07:16:19 +09:00
6acdd191c7
commit bcdb026ae43e4f95d0b2c4f9bd440a2df9d6b514 Author: Ran <16112591+chen-ran@users.noreply.github.com> Date: Thu Feb 12 17:10:32 2026 +0800 chore: update DEVELOPMENT.md commit30281742efMerge:ca5c6a15b05f13Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Thu Feb 12 15:49:17 2026 +0800 merge(github/main): integrate fx dependency injection framework Merge upstream fx refactor and adapt all services to use go.uber.org/fx for dependency injection. Resolve conflicts in main.go, server.go, and service constructors while preserving our domain model changes. - Fix telegram adapter panic on shutdown (double close channel) - Fix feishu adapter processing messages after stop - Increase directory lookup timeout from 2s to 5s commitca5c6a1866Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Thu Feb 12 15:33:09 2026 +0800 refactor(core): restructure conversation, channel and message domains - Rename chat module to conversation with flow-based architecture - Move channelidentities into channel/identities subpackage - Add channel/route for routing logic - Add message service with event hub - Add MCP providers: container, directory, schedule - Refactor Feishu/Telegram adapters with directory and stream support - Add platform management page and channel badges in web UI - Update database schema for conversations, messages and channel routes - Add @memoh/shared package for cross-package type definitions commit75e2ef0467Merge:d99ba3801cb6c8Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Thu Feb 12 14:45:49 2026 +0800 merge(github): merge github/main, resolve index.ts URL conflict Keep our defensive absolute-URL check in createAuthFetcher. commitd99ba38b7dMerge:860e20f35ce7d1Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Thu Feb 12 05:20:18 2026 +0800 merge(github): merge github/main, keep our code and docs/spec commit860e20fe70Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Wed Feb 11 22:13:27 2026 +0800 docs(docs): add concepts and style guides for VitePress site - Add concepts: identity-and-binding, index (en/zh) - Add style: terminology (en/zh) - Update index and zh/index - Update .vitepress/config.ts commita75fdb8040Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Wed Feb 11 17:37:16 2026 +0800 refactor(mcp): standardize unified tool gateway on go-sdk Split business executors from federation sources and migrate unified tool/federation transports to the official go-sdk for stricter MCP compliance and safer session lifecycle handling. Add targeted regression tests for accept compatibility, initialization retries, pending cleanup, and include updated swagger artifacts. commit02b33c8e85Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Wed Feb 11 15:42:21 2026 +0800 refactor(core): finalize user-centric identity and policy cleanup Unify auth and chat identity semantics around user_id, enforce personal-bot owner-only authorization, and remove legacy compatibility branches in integration tests. commit06e8619a37Author: BBQ <bbq@BBQdeMacBook-Air.local> Date: Wed Feb 11 14:47:03 2026 +0800 refactor(core): migrate channel identity and binding across app Align channel identity and bind flow across backend and app-facing layers, including generated swagger artifacts and package lock updates while excluding docs content changes.
93 lines
2.3 KiB
Go
93 lines
2.3 KiB
Go
package policy
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"log/slog"
|
|
"strings"
|
|
|
|
"github.com/memohai/memoh/internal/bots"
|
|
"github.com/memohai/memoh/internal/settings"
|
|
)
|
|
|
|
type Decision struct {
|
|
BotID string
|
|
BotType string
|
|
AllowGuest bool
|
|
}
|
|
|
|
type Service struct {
|
|
bots *bots.Service
|
|
settings *settings.Service
|
|
logger *slog.Logger
|
|
}
|
|
|
|
func NewService(log *slog.Logger, botsService *bots.Service, settingsService *settings.Service) *Service {
|
|
if log == nil {
|
|
log = slog.Default()
|
|
}
|
|
return &Service{
|
|
bots: botsService,
|
|
settings: settingsService,
|
|
logger: log.With(slog.String("service", "policy")),
|
|
}
|
|
}
|
|
|
|
// Resolve evaluates the full access policy for a bot.
|
|
func (s *Service) Resolve(ctx context.Context, botID string) (Decision, error) {
|
|
if s == nil || s.bots == nil || s.settings == nil {
|
|
return Decision{}, fmt.Errorf("policy service not configured")
|
|
}
|
|
botID = strings.TrimSpace(botID)
|
|
if botID == "" {
|
|
return Decision{}, fmt.Errorf("bot id is required")
|
|
}
|
|
bot, err := s.bots.Get(ctx, botID)
|
|
if err != nil {
|
|
return Decision{}, err
|
|
}
|
|
botSettings, err := s.settings.GetBot(ctx, botID)
|
|
if err != nil {
|
|
return Decision{}, err
|
|
}
|
|
decision := Decision{
|
|
BotID: botID,
|
|
BotType: strings.TrimSpace(bot.Type),
|
|
AllowGuest: botSettings.AllowGuest,
|
|
}
|
|
if decision.BotType == bots.BotTypePersonal {
|
|
decision.AllowGuest = false
|
|
}
|
|
return decision, nil
|
|
}
|
|
|
|
// AllowGuest checks if the bot allows guest access. Implements router.PolicyService.
|
|
func (s *Service) AllowGuest(ctx context.Context, botID string) (bool, error) {
|
|
decision, err := s.Resolve(ctx, botID)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return decision.AllowGuest, nil
|
|
}
|
|
|
|
// BotType returns the normalized bot type. Implements router.PolicyService.
|
|
func (s *Service) BotType(ctx context.Context, botID string) (string, error) {
|
|
decision, err := s.Resolve(ctx, botID)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return decision.BotType, nil
|
|
}
|
|
|
|
// BotOwnerUserID returns bot owner's user id. Implements router.PolicyService.
|
|
func (s *Service) BotOwnerUserID(ctx context.Context, botID string) (string, error) {
|
|
if s == nil || s.bots == nil {
|
|
return "", fmt.Errorf("policy service not configured")
|
|
}
|
|
bot, err := s.bots.Get(ctx, strings.TrimSpace(botID))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return strings.TrimSpace(bot.OwnerUserID), nil
|
|
}
|