吸收数字员工管理端审计归档账单预览

This commit is contained in:
baiyanyun
2026-06-14 13:21:51 +08:00
parent dd6c10f44b
commit 8b651e4ae1
7 changed files with 111 additions and 23 deletions

View File

@@ -2385,10 +2385,28 @@ function checkDigitalAdminAuditDiagnosticsWorkbench() {
"service",
"DigitalEmployeeSyncApplicationServiceImplTest.java",
);
const dtoPath = path.join(
backendRoot,
"app-platform-modules",
"app-platform-agent",
"app-platform-agent-core-adapter",
"src",
"main",
"java",
"com",
"xspaceagi",
"agent",
"core",
"adapter",
"dto",
"digital",
"DigitalEmployeeAdminWorkbenchRowDto.java",
);
const qimingOpsPath = path.join(qimingRoot, "src", "pages", "SystemManagement", "Content", "DigitalEmployeeOps", "index.tsx");
const qimingTypesPath = path.join(qimingRoot, "src", "types", "interfaces", "systemManage.ts");
const docsPath = path.resolve(packageRoot, "..", "..", "docs", "digital-employee-frontend-integration-plan.md");
const service = fs.readFileSync(servicePath, "utf8");
const dto = fs.readFileSync(dtoPath, "utf8");
const test = fs.readFileSync(testPath, "utf8");
const qimingOps = fs.readFileSync(qimingOpsPath, "utf8");
const qimingTypes = fs.readFileSync(qimingTypesPath, "utf8");
@@ -2400,14 +2418,28 @@ function checkDigitalAdminAuditDiagnosticsWorkbench() {
[service, "token_cost", "backend token cost category"],
[service, "tool_call_audit", "backend tool call audit category"],
[service, "sync_failure", "backend sync failure audit category"],
[service, "audit_archive", "backend audit archive category"],
[service, "billing_estimate", "backend billing estimate category"],
[dto, "audit_archive_id", "backend audit archive id row field"],
[dto, "archive_status", "backend archive status row field"],
[dto, "archive_location", "backend archive location row field"],
[dto, "billing_estimate_id", "backend billing estimate id row field"],
[dto, "billing_source", "backend billing source row field"],
[test, "queryAdminWorkbenchAuditsReturnsAuditRowsOnly", "backend audit diagnostics test"],
[test, "getAuditArchiveId", "backend audit archive assertion"],
[test, "getBillingEstimateId", "backend billing estimate assertion"],
[test, "doesNotContainKeys(\"token\", \"authorization\", \"raw_input\", \"command\", \"prompt\")", "backend audit redaction assertion"],
[qimingTypes, "audits", "qiming audits view type"],
[qimingTypes, "audit_archive_id", "qiming audit archive id field"],
[qimingTypes, "billing_source", "qiming billing source field"],
[qimingOps, "审计诊断", "qiming audit diagnostics tab"],
[qimingOps, "归档位置", "qiming audit archive location copy"],
[qimingOps, "估算来源", "qiming billing source copy"],
[qimingOps, "标记复核", "qiming audit reviewed action"],
[qimingOps, "忽略", "qiming audit dismiss action"],
[qimingOps, "标记归档", "qiming audit archive action"],
[docs, "正式管理端审计诊断预览", "docs audit diagnostics absorption"],
[docs, "正式管理端审计归档账单预览", "docs audit archive billing absorption"],
];
const missing = requiredSnippets
.filter(([content, snippet]) => !content.includes(snippet))

View File

@@ -604,7 +604,7 @@ GET /api/digital-employee/approvals
- 建议:下一轮围绕管理端正式路由 UI 和跨设备冲突可视化,把 embedded 批量干预入口推进到管理端运营台。
11. **诊断 / 成本 / 审计视图**
- 已吸收:同步失败诊断较完整,部分 sandbox / memory / service 日志在 qimingclaw 其他模块中存在embedded adapter 已接管 `/api/doctor``/api/cost``/api/audit`,从 snapshot、runtime records、sync status、managed services 和 artifact delivery facts 生成诊断、估算成本和审计投影sandbox audit、token/cost 和 CLI/tool 调用事件已开始通过 `digital_events` 与 outbox `business_view` 提炼为 `sandbox_audit``token_cost``tool_call_audit` 分类,并只同步 session、tool、server、operation、status、exit code、duration、model、token 计数和估算成本等安全字段;数字员工首页已展示诊断/审计/Token/估算成本摘要,`/api/digital-employee/audits` 已提供本地审计业务视图诊断与审计风险通知联动已开始闭环。管理端正式审计视图预览和正式管理端审计诊断预览已开始吸收qiming-backend 的 `audits` 运营台视图会聚合 sandbox / token cost / tool call / sync failure / governance 审计业务视图qiming“数字员工运营台”的“审计诊断”tab 可标记复核、忽略和脱敏归档。诊断修复动作预览已开始吸收,“处置台”可把 doctor/audit/service/policy 风险转为可筛选、可标记和可安全重试的运营事项。发送账单审计外壳已开始吸收后端提供估算账单查询和审计归档记录接口qiming 运营台可显示 Token/估算成本并标记脱敏归档;归档记录会剔除 token、authorization、raw_input、prompt 和 command 等敏感字段。
- 已吸收:同步失败诊断较完整,部分 sandbox / memory / service 日志在 qimingclaw 其他模块中存在embedded adapter 已接管 `/api/doctor``/api/cost``/api/audit`,从 snapshot、runtime records、sync status、managed services 和 artifact delivery facts 生成诊断、估算成本和审计投影sandbox audit、token/cost 和 CLI/tool 调用事件已开始通过 `digital_events` 与 outbox `business_view` 提炼为 `sandbox_audit``token_cost``tool_call_audit` 分类,并只同步 session、tool、server、operation、status、exit code、duration、model、token 计数和估算成本等安全字段;数字员工首页已展示诊断/审计/Token/估算成本摘要,`/api/digital-employee/audits` 已提供本地审计业务视图诊断与审计风险通知联动已开始闭环。管理端正式审计视图预览和正式管理端审计诊断预览已开始吸收qiming-backend 的 `audits` 运营台视图会聚合 sandbox / token cost / tool call / sync failure / governance 审计业务视图qiming“数字员工运营台”的“审计诊断”tab 可标记复核、忽略和脱敏归档。诊断修复动作预览已开始吸收,“处置台”可把 doctor/audit/service/policy 风险转为可筛选、可标记和可安全重试的运营事项。发送账单审计外壳已开始吸收后端提供估算账单查询和审计归档记录接口qiming 运营台可显示 Token/估算成本并标记脱敏归档;归档记录会剔除 token、authorization、raw_input、prompt 和 command 等敏感字段。正式管理端审计归档账单预览已开始吸收,审计诊断详情可展示 `audit_archive_id``archive_status``archive_location``billing_estimate_id``billing_source``estimated`,用于解释脱敏归档位置与账单估算来源。
- 缺口:真实计费账单、独立 sandbox audit 文件归档、自动诊断修复动作和正式外部管理端审计视图尚未统一吸收;当前账单仍是估算,审计归档只记录脱敏摘要和归档位置。
- 建议:下一轮围绕管理端正式审计视图和诊断修复动作,把本地可追溯审计继续推进到可运营处置。