feat: expand companion platform, device controls, and memoir workflows
ci / verify (push) Canceled after 0s
ci / verify (push) Canceled after 0s
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
This commit is contained in:
Codex Local
@@ -0,0 +1,203 @@
|
||||
package callmemory
|
||||
|
||||
import (
|
||||
"context"
|
||||
"data-terminal-cloud/internal/identity"
|
||||
"data-terminal-cloud/internal/memoryidentity"
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"github.com/jackc/pgx/v5"
|
||||
"strings"
|
||||
"time"
|
||||
)
|
||||
|
||||
// These records come directly from the native chat namespace, never the memoir mirror.
|
||||
type VikingRecord struct {
|
||||
ID string `json:"id"`
|
||||
Kind string `json:"kind"`
|
||||
Time int64 `json:"time_ms"`
|
||||
SessionID string `json:"session_id"`
|
||||
Content string `json:"content"`
|
||||
MemoryInfo map[string]json.RawMessage `json:"memory_info"`
|
||||
Digest string `json:"digest"`
|
||||
}
|
||||
type VikingConsoleProvider interface {
|
||||
ChatMemories(context.Context, string, string, string, int, int64, int64) ([]VikingRecord, bool, error)
|
||||
DeleteChatMemory(context.Context, string, string) error
|
||||
}
|
||||
|
||||
func (s *Service) ConfigureVikingConsole(p VikingConsoleProvider) { s.vikingConsole = p }
|
||||
|
||||
type VikingQuery struct {
|
||||
ElderID string `json:"elder_id"`
|
||||
Kind string `json:"kind"`
|
||||
Query string `json:"query"`
|
||||
Limit int `json:"limit"`
|
||||
Start int64 `json:"start_time_ms"`
|
||||
End int64 `json:"end_time_ms"`
|
||||
}
|
||||
type VikingDelete struct {
|
||||
ElderID string `json:"elder_id"`
|
||||
OperationID string `json:"operation_id"`
|
||||
Kind string `json:"kind"`
|
||||
ID string `json:"id"`
|
||||
Digest string `json:"digest"`
|
||||
Time int64 `json:"time_ms"`
|
||||
Reason string `json:"reason"`
|
||||
}
|
||||
|
||||
func (s *Service) vikingRequest(ctx context.Context, p identity.Principal, op string, raw []byte) (any, error) {
|
||||
ctx, cancel := context.WithTimeout(ctx, 30*time.Second)
|
||||
defer cancel()
|
||||
if op == "viking/query" {
|
||||
var in VikingQuery
|
||||
if e := StrictJSON(raw, &in); e != nil {
|
||||
return nil, e
|
||||
}
|
||||
if in.Kind != "event" && in.Kind != "profile" || len([]rune(in.Query)) > 500 || in.Start < 0 || in.End < 0 || in.End > 0 && in.Start > in.End || in.Kind == "profile" && (in.Start != 0 || in.End != 0) {
|
||||
return nil, fault(400, "INVALID_VIKING_QUERY")
|
||||
}
|
||||
if in.Limit == 0 {
|
||||
in.Limit = 100
|
||||
}
|
||||
if in.Limit < 1 || in.Limit > 1000 {
|
||||
return nil, fault(400, "INVALID_VIKING_QUERY")
|
||||
}
|
||||
a, e := ResolveAccess(ctx, s.pool, p, in.ElderID, false)
|
||||
if e != nil {
|
||||
return nil, e
|
||||
}
|
||||
if !a.Sensitive {
|
||||
return nil, fault(403, "VIKING_SENSITIVE_ACCESS_REQUIRED")
|
||||
}
|
||||
if s.vikingConsole == nil {
|
||||
return nil, fault(503, "VIKING_NOT_CONFIGURED")
|
||||
}
|
||||
items, limited, e := s.vikingConsole.ChatMemories(ctx, memoryidentity.UserID(a.Tenant, a.Subject), in.Kind, strings.TrimSpace(in.Query), in.Limit, in.Start, in.End)
|
||||
if e != nil {
|
||||
return nil, fault(503, "VIKING_QUERY_FAILED")
|
||||
}
|
||||
return map[string]any{"items": items, "can_write": a.Write, "limited": limited, "limit": in.Limit, "source": "VIKING_NATIVE_CHAT"}, nil
|
||||
}
|
||||
var in VikingDelete
|
||||
if e := StrictJSON(raw, &in); e != nil {
|
||||
return nil, e
|
||||
}
|
||||
in.Reason = strings.TrimSpace(in.Reason)
|
||||
if !validUUID(in.OperationID) || !short(in.ID) || (in.Kind != "event" && in.Kind != "profile") || len(in.Digest) != 64 || in.Time < 0 || in.Reason == "" || len([]rune(in.Reason)) > 500 {
|
||||
return nil, fault(400, "INVALID_VIKING_DELETE")
|
||||
}
|
||||
conn, e := s.pool.Acquire(ctx)
|
||||
if e != nil {
|
||||
return nil, e
|
||||
}
|
||||
defer conn.Release()
|
||||
a, e := ResolveAccess(ctx, conn, p, in.ElderID, true)
|
||||
if e != nil {
|
||||
return nil, e
|
||||
}
|
||||
if !a.Sensitive {
|
||||
return nil, fault(403, "VIKING_SENSITIVE_ACCESS_REQUIRED")
|
||||
}
|
||||
if s.vikingConsole == nil {
|
||||
return nil, fault(503, "VIKING_NOT_CONFIGURED")
|
||||
}
|
||||
// A session lock spans the durable request receipt and the external deletion.
|
||||
lock := a.Subject + ":" + in.Kind + ":" + in.ID
|
||||
var locked bool
|
||||
if e = conn.QueryRow(ctx, `SELECT pg_try_advisory_lock(hashtextextended($1,93))`, lock).Scan(&locked); e != nil {
|
||||
return nil, e
|
||||
}
|
||||
if !locked {
|
||||
return nil, fault(409, "VIKING_DELETE_BUSY")
|
||||
}
|
||||
defer func() {
|
||||
c, cancel := context.WithTimeout(context.Background(), 3*time.Second)
|
||||
defer cancel()
|
||||
if _, e := conn.Exec(c, `SELECT pg_advisory_unlock(hashtextextended($1,93))`, lock); e != nil {
|
||||
_ = conn.Hijack().Close(c)
|
||||
}
|
||||
}()
|
||||
fingerprint := hash(jsonBytes(struct {
|
||||
Subject, Actor string
|
||||
Input VikingDelete
|
||||
}{a.Subject, a.User, in}))
|
||||
var receipt []byte
|
||||
e = conn.QueryRow(ctx, `SELECT detail FROM audit_event WHERE id=$1::uuid AND action='viking.memory.delete'`, in.OperationID).Scan(&receipt)
|
||||
existing := e == nil
|
||||
if e != nil && !errors.Is(e, pgx.ErrNoRows) {
|
||||
return nil, e
|
||||
}
|
||||
if existing {
|
||||
var prior struct {
|
||||
Fingerprint string `json:"fingerprint"`
|
||||
State string `json:"state"`
|
||||
}
|
||||
if json.Unmarshal(receipt, &prior) != nil || prior.Fingerprint != fingerprint {
|
||||
return nil, fault(409, "VIKING_OPERATION_CONFLICT")
|
||||
}
|
||||
if prior.State == "DELETED" {
|
||||
return map[string]any{"deleted": true, "operation_id": in.OperationID}, nil
|
||||
}
|
||||
}
|
||||
user := memoryidentity.UserID(a.Tenant, a.Subject)
|
||||
// Verify by ID across the scope. A changed timestamp must not look deleted.
|
||||
start, end := int64(0), int64(0)
|
||||
items, limited, e := s.vikingConsole.ChatMemories(ctx, user, in.Kind, "", 5000, start, end)
|
||||
if e != nil {
|
||||
return nil, fault(503, "VIKING_QUERY_FAILED")
|
||||
}
|
||||
var current *VikingRecord
|
||||
for i := range items {
|
||||
if items[i].ID == in.ID {
|
||||
current = &items[i]
|
||||
break
|
||||
}
|
||||
}
|
||||
if current == nil && (!existing || limited) {
|
||||
return nil, fault(404, "VIKING_RECORD_NOT_FOUND")
|
||||
}
|
||||
if current != nil && current.Digest != in.Digest {
|
||||
return nil, fault(409, "VIKING_RECORD_CHANGED")
|
||||
}
|
||||
if !existing {
|
||||
// Fail closed if recording the request fails. The receipt contains no memory body.
|
||||
detail := jsonBytes(map[string]any{"fingerprint": fingerprint, "state": "REQUESTED", "subject_id": a.Subject, "record_id": in.ID, "kind": in.Kind, "digest": in.Digest, "reason": in.Reason, "actor_id": a.User})
|
||||
tag, e := conn.Exec(ctx, `INSERT INTO audit_event(id,tenant_id,actor_type,action,resource_type,resource_id,request_id,purpose,result,detail) VALUES($1::uuid,$2::uuid,'user','viking.memory.delete','subject',$3::uuid,$1,'用户删除聊天记忆','failure',$4::jsonb) ON CONFLICT(id) DO NOTHING`, in.OperationID, a.Tenant, a.Subject, detail)
|
||||
if e != nil {
|
||||
return nil, e
|
||||
}
|
||||
if tag.RowsAffected() != 1 {
|
||||
return nil, fault(409, "VIKING_OPERATION_CONFLICT")
|
||||
}
|
||||
}
|
||||
finish := func(state, result string) error {
|
||||
_, e := conn.Exec(ctx, `UPDATE audit_event SET result=$2,detail=jsonb_set(detail,'{state}',to_jsonb($3::text)) WHERE id=$1::uuid AND action='viking.memory.delete'`, in.OperationID, result, state)
|
||||
return e
|
||||
}
|
||||
if current != nil {
|
||||
if e = s.vikingConsole.DeleteChatMemory(ctx, in.Kind, in.ID); e != nil {
|
||||
_ = finish("UNKNOWN", "failure")
|
||||
return nil, fault(503, "VIKING_DELETE_UNCONFIRMED")
|
||||
}
|
||||
items, limited, e = s.vikingConsole.ChatMemories(ctx, user, in.Kind, "", 5000, start, end)
|
||||
if e != nil {
|
||||
_ = finish("UNKNOWN", "failure")
|
||||
return nil, fault(503, "VIKING_DELETE_UNCONFIRMED")
|
||||
}
|
||||
for _, item := range items {
|
||||
if item.ID == in.ID {
|
||||
_ = finish("UNKNOWN", "failure")
|
||||
return nil, fault(503, "VIKING_DELETE_UNCONFIRMED")
|
||||
}
|
||||
}
|
||||
if limited {
|
||||
_ = finish("UNKNOWN", "failure")
|
||||
return nil, fault(503, "VIKING_DELETE_UNCONFIRMED")
|
||||
}
|
||||
}
|
||||
if e = finish("DELETED", "success"); e != nil {
|
||||
return nil, e
|
||||
}
|
||||
return map[string]any{"deleted": true, "operation_id": in.OperationID}, nil
|
||||
}
|
||||
Reference in New Issue
Block a user