JOJO
9a17b38153
拆包时 resources.py 独立 import 头漏了 get_current_user_role：host 模式 + 非显式身份 + 存在 host 用户记录时触发 NameError，被 except 吞掉后工具分类限制与禁用模型等管理员策略静默不应用（默认无 host 记录不触发）。 - resources.py/usage.py 顺带补 TYPE_CHECKING 导入净化字符串类型注解，server/context/ 与 server/runtime/ pyflakes F821 清零 - 新增回归测试：host 模式 + HTTP 请求上下文 + host 记录存在，断言策略真正应用到 terminal；红绿验证通过（回退导入测试即红） 测试：25/25 全绿（24 + 新增 1）
538 lines
25 KiB
Python
538 lines
25 KiB
Python
"""用户终端与工作区资源装配（get_user_resources 及内部 helper）。
|
||
|
||
显式身份模式：传入 RuntimeIdentity 时完全不读写 Flask session（契约
|
||
docs/runtime_contract.md §4.1）；为 None 时保持既有 HTTP 适配层行为。
|
||
"""
|
||
from __future__ import annotations
|
||
|
||
import time
|
||
from pathlib import Path
|
||
from typing import Optional, Tuple, TYPE_CHECKING
|
||
|
||
if TYPE_CHECKING:
|
||
import modules.user_manager
|
||
|
||
from flask import session, has_request_context
|
||
|
||
from core.web_terminal import WebTerminal
|
||
from modules.personalization_manager import load_personalization_config
|
||
from modules.skills_manager import infer_private_skills_dir, sync_workspace_skills
|
||
from modules.host_workspace_manager import resolve_host_workspace
|
||
from config import (
|
||
DATA_DIR,
|
||
LOGS_DIR,
|
||
TERMINAL_SANDBOX_MODE,
|
||
UPLOAD_QUARANTINE_SUBDIR,
|
||
)
|
||
from config.model_profiles import get_registered_model_keys
|
||
from modules.i18n import tr
|
||
from server import state
|
||
from server.utils_common import debug_log
|
||
from server.auth_helpers import get_current_username, get_current_user_record, get_current_user_role
|
||
from utils.host_workspace_debug import write_host_workspace_debug
|
||
|
||
from server.context.identity import NoWorkspaceError, RuntimeIdentity, _resolve_user_role
|
||
from server.context.broadcast import make_terminal_callback, attach_user_broadcast
|
||
from server.context.personalization import _apply_workspace_personalization_preferences
|
||
from server.context.usage import get_or_create_usage_tracker, emit_user_quota_update
|
||
|
||
|
||
|
||
def _make_terminal_key(
|
||
username: str,
|
||
workspace_id: Optional[str] = None,
|
||
conversation_id: Optional[str] = None,
|
||
) -> str:
|
||
"""终端缓存键。
|
||
|
||
对话级隔离：传入 conversation_id 时键为 ``username::workspace_id::conversation_id``，
|
||
每个对话拥有独立的 WebTerminal（context/file/terminal manager、子智能体等）。
|
||
不传 conversation_id 时保持旧的两段键（工作区级服务实例，供对话列表等无对话上下文的 API 使用）。
|
||
"""
|
||
base = f"{username}::{workspace_id}" if workspace_id else username
|
||
if conversation_id:
|
||
base = f"{base}::{conversation_id}"
|
||
return base
|
||
|
||
|
||
|
||
|
||
def _touch_terminal_activity(terminal: Optional[WebTerminal], conversation_id: Optional[str]) -> None:
|
||
"""对话级 terminal：刷新最近活动时间（供 24h TTL 回收器判定）。"""
|
||
if not terminal or not conversation_id:
|
||
return
|
||
try:
|
||
terminal.last_activity_at = time.time()
|
||
except Exception:
|
||
pass
|
||
|
||
|
||
|
||
|
||
def _set_terminal_workspace_label(terminal: WebTerminal, label: Optional[str]) -> None:
|
||
label_text = str(label or "").strip()
|
||
try:
|
||
terminal.workspace_label = label_text
|
||
except Exception:
|
||
pass
|
||
try:
|
||
if getattr(terminal, "context_manager", None):
|
||
terminal.context_manager.workspace_label = label_text
|
||
except Exception:
|
||
pass
|
||
|
||
|
||
|
||
|
||
def _ensure_workspace_skills_synced(terminal: WebTerminal, workspace) -> None:
|
||
"""
|
||
确保工作区 skills 已按当前个性化配置完成同步。
|
||
使用终端实例上的路径标记避免每次请求都重复全量拷贝。
|
||
"""
|
||
try:
|
||
project_path = str(Path(workspace.project_path).resolve())
|
||
except Exception:
|
||
project_path = str(workspace.project_path)
|
||
|
||
if getattr(terminal, "_skills_synced_project_path", None) == project_path:
|
||
return
|
||
|
||
try:
|
||
config = load_personalization_config(workspace.data_dir)
|
||
enabled_skills = config.get("enabled_skills") if isinstance(config, dict) else None
|
||
result = sync_workspace_skills(
|
||
workspace.project_path,
|
||
enabled_skills,
|
||
private_dir=infer_private_skills_dir(workspace.data_dir),
|
||
)
|
||
if not result.get("success"):
|
||
debug_log(f"[Skills] 工作区同步失败: {result.get('error')}")
|
||
return
|
||
terminal._skills_synced_project_path = project_path
|
||
debug_log(f"[Skills] 工作区技能已同步: {project_path} ({result.get('copied', 0)} 项)")
|
||
except Exception as exc:
|
||
debug_log(f"[Skills] 工作区同步异常: {exc}")
|
||
|
||
|
||
|
||
def get_user_resources(
|
||
username: Optional[str] = None,
|
||
workspace_id: Optional[str] = None,
|
||
update_session: bool = True,
|
||
conversation_id: Optional[str] = None,
|
||
identity: Optional[RuntimeIdentity] = None,
|
||
) -> Tuple[Optional[WebTerminal], Optional['modules.user_manager.UserWorkspace']]:
|
||
"""获取用户终端与工作区资源。
|
||
|
||
conversation_id 非空时返回对话级 terminal（每对话独立的 shell/文件/子智能体状态，
|
||
常驻内存 + 24h 无活动回收）；为空时返回工作区级服务 terminal（对话列表等无对话
|
||
上下文的 API 使用）。容器句柄始终按工作区级共享。
|
||
|
||
identity 显式传入时（任务线程等非请求上下文场景）：身份/偏好全部来自该快照，
|
||
完全不读写 Flask session；为 None 时保持既有行为（HTTP 适配层在请求上下文内
|
||
读取 session 并回写）。
|
||
"""
|
||
from modules.user_manager import UserWorkspace
|
||
username = (username or get_current_username())
|
||
if not username:
|
||
return None, None
|
||
|
||
explicit = identity is not None
|
||
# session 回写仅在「兼容模式 + 请求上下文 + 允许回写」时启用；
|
||
# 请求上下文在单次调用期间不会变化，开头一次性求值。
|
||
can_write_session = (not explicit) and update_session and has_request_context()
|
||
|
||
# 宿主机免登录模式：根据 host_workspaces.json 选择路径，不创建 /users/<user>/project
|
||
if explicit:
|
||
host_mode_session = identity.host_mode
|
||
else:
|
||
host_mode_session = bool(session.get("host_mode")) if has_request_context() else False
|
||
sandbox_is_host = (TERMINAL_SANDBOX_MODE or "host").lower() == "host"
|
||
if host_mode_session and sandbox_is_host:
|
||
# 宿主机多工作区并行：资源选择必须优先由显式 workspace_id / 当前请求 session 决定，
|
||
# 不能被进程级 HOST_ACTIVE_WORKSPACE_ID 覆盖，否则后台任务会在用户切换视图后串到新工作区。
|
||
selected_workspace_id = workspace_id
|
||
if not selected_workspace_id:
|
||
if explicit:
|
||
selected_workspace_id = identity.host_workspace_id
|
||
else:
|
||
selected_workspace_id = (
|
||
(session.get("host_workspace_id") if has_request_context() else None)
|
||
or (session.get("workspace_id") if has_request_context() else None)
|
||
)
|
||
with state.HOST_ACTIVE_WORKSPACE_LOCK:
|
||
active_workspace_id = state.HOST_ACTIVE_WORKSPACE_ID
|
||
active_workspace_path = state.HOST_ACTIVE_WORKSPACE_PATH
|
||
active_workspace_version = state.HOST_ACTIVE_WORKSPACE_VERSION
|
||
if not selected_workspace_id and active_workspace_id:
|
||
selected_workspace_id = active_workspace_id
|
||
_, host_workspace = resolve_host_workspace(selected_workspace_id)
|
||
if not host_workspace:
|
||
raise NoWorkspaceError(tr("context.no_workspace"))
|
||
if (
|
||
active_workspace_id
|
||
and active_workspace_path
|
||
and selected_workspace_id == active_workspace_id
|
||
):
|
||
host_workspace = dict(host_workspace)
|
||
host_workspace["workspace_id"] = active_workspace_id
|
||
host_workspace["path"] = active_workspace_path
|
||
project_path = Path(host_workspace.get("path") or "").expanduser().resolve()
|
||
write_host_workspace_debug(
|
||
"context.get_user_resources.host.selected_workspace",
|
||
selected_workspace_id=selected_workspace_id,
|
||
active_workspace_id=active_workspace_id,
|
||
active_workspace_path=active_workspace_path,
|
||
active_workspace_version=active_workspace_version,
|
||
resolved_workspace_id=host_workspace.get("workspace_id"),
|
||
project_path=str(project_path),
|
||
username=username,
|
||
)
|
||
project_path.mkdir(parents=True, exist_ok=True)
|
||
data_dir = Path(DATA_DIR).expanduser().resolve()
|
||
data_dir.mkdir(parents=True, exist_ok=True)
|
||
logs_dir = Path(LOGS_DIR).expanduser().resolve()
|
||
logs_dir.mkdir(parents=True, exist_ok=True)
|
||
uploads_dir = project_path / ".astrion" / "user_upload"
|
||
uploads_dir.mkdir(parents=True, exist_ok=True)
|
||
skills_dir = project_path / ".astrion" / "skills"
|
||
skills_dir.mkdir(parents=True, exist_ok=True)
|
||
quarantine_root = Path(UPLOAD_QUARANTINE_SUBDIR).expanduser()
|
||
if not quarantine_root.is_absolute():
|
||
quarantine_root = (project_path.parent / UPLOAD_QUARANTINE_SUBDIR).resolve()
|
||
quarantine_root.mkdir(parents=True, exist_ok=True)
|
||
|
||
workspace = UserWorkspace(
|
||
username="host",
|
||
root=project_path.parent,
|
||
project_path=project_path,
|
||
data_dir=data_dir,
|
||
logs_dir=logs_dir,
|
||
uploads_dir=uploads_dir,
|
||
quarantine_dir=quarantine_root,
|
||
)
|
||
if not hasattr(workspace, "workspace_id"):
|
||
workspace.workspace_id = host_workspace.get("workspace_id") or "default"
|
||
|
||
workspace_id_value = getattr(workspace, "workspace_id", None) or host_workspace.get("workspace_id") or "default"
|
||
term_key = _make_terminal_key("host", workspace_id_value, conversation_id)
|
||
# 容器句柄始终按工作区级共享：对话级 terminal 在同一容器内起独立 shell 进程
|
||
container_key = _make_terminal_key("host", workspace_id_value)
|
||
container_handle = state.container_manager.ensure_container("host", str(project_path), container_key=container_key, preferred_mode="host")
|
||
usage_tracker = None # 宿主机模式不计配额
|
||
terminal = state.user_terminals.get(term_key)
|
||
if terminal is not None and getattr(terminal, "_reaper_closing", False):
|
||
# 回收器正在关闭该实例，视为不存在并原地重建；
|
||
# 回收器 pop 前会校验实例身份，不会误删这里新建的 terminal。
|
||
terminal = None
|
||
target_project_path = str(project_path)
|
||
if terminal:
|
||
should_recreate_terminal = False
|
||
try:
|
||
current_project_path = str(Path(getattr(terminal, "project_path", "")).expanduser().resolve())
|
||
except Exception:
|
||
current_project_path = str(getattr(terminal, "project_path", ""))
|
||
try:
|
||
current_context_project_path = str(
|
||
Path(getattr(getattr(terminal, "context_manager", None), "project_path", "")).expanduser().resolve()
|
||
)
|
||
except Exception:
|
||
current_context_project_path = str(
|
||
getattr(getattr(terminal, "context_manager", None), "project_path", "")
|
||
)
|
||
if current_project_path != target_project_path or current_context_project_path != target_project_path:
|
||
write_host_workspace_debug(
|
||
"context.get_user_resources.host.path_mismatch",
|
||
terminal_id=id(terminal),
|
||
current_project_path=current_project_path,
|
||
current_context_project_path=current_context_project_path,
|
||
target_project_path=target_project_path,
|
||
)
|
||
try:
|
||
if hasattr(terminal, "update_project_path"):
|
||
terminal.update_project_path(target_project_path)
|
||
else:
|
||
should_recreate_terminal = True
|
||
except Exception as exc:
|
||
debug_log(f"[HostWorkspace] update_project_path 失败，回退重建终端: {exc}")
|
||
should_recreate_terminal = True
|
||
|
||
if not should_recreate_terminal:
|
||
try:
|
||
updated_project_path = str(Path(getattr(terminal, "project_path", "")).expanduser().resolve())
|
||
except Exception:
|
||
updated_project_path = str(getattr(terminal, "project_path", ""))
|
||
if updated_project_path != target_project_path:
|
||
should_recreate_terminal = True
|
||
|
||
if should_recreate_terminal:
|
||
write_host_workspace_debug(
|
||
"context.get_user_resources.host.recreate_terminal",
|
||
terminal_id=id(terminal),
|
||
target_project_path=target_project_path,
|
||
)
|
||
try:
|
||
if getattr(terminal, "terminal_manager", None):
|
||
terminal.terminal_manager.close_all()
|
||
except Exception:
|
||
pass
|
||
state.user_terminals.pop(term_key, None)
|
||
terminal = None
|
||
if not terminal:
|
||
if explicit:
|
||
run_mode = identity.preferred_run_mode
|
||
thinking_mode_flag = identity.preferred_thinking_mode
|
||
else:
|
||
run_mode = session.get('run_mode') if has_request_context() else None
|
||
thinking_mode_flag = session.get('thinking_mode') if has_request_context() else None
|
||
if run_mode not in {"fast", "thinking", "deep"}:
|
||
run_mode = "fast"
|
||
thinking_mode_flag = False
|
||
thinking_mode = bool(thinking_mode_flag) if thinking_mode_flag is not None else (run_mode != "fast")
|
||
terminal = WebTerminal(
|
||
project_path=str(project_path),
|
||
thinking_mode=thinking_mode,
|
||
run_mode=run_mode,
|
||
message_callback=make_terminal_callback("host"),
|
||
data_dir=str(data_dir),
|
||
container_session=container_handle,
|
||
usage_tracker=usage_tracker,
|
||
conversation_id=conversation_id,
|
||
)
|
||
if terminal.terminal_manager:
|
||
terminal.terminal_manager.broadcast = terminal.message_callback
|
||
state.user_terminals[term_key] = terminal
|
||
terminal.username = "host"
|
||
terminal.user_role = "admin"
|
||
terminal.quota_update_callback = None
|
||
if can_write_session:
|
||
session['run_mode'] = terminal.run_mode
|
||
session['thinking_mode'] = terminal.thinking_mode
|
||
session['workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
session['host_workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
else:
|
||
terminal.update_container_session(container_handle)
|
||
attach_user_broadcast(terminal, "host")
|
||
terminal.username = "host"
|
||
terminal.user_role = "admin"
|
||
if can_write_session:
|
||
session['workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
session['host_workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
_set_terminal_workspace_label(
|
||
terminal,
|
||
host_workspace.get("label") or host_workspace.get("workspace_id") or getattr(workspace, "workspace_id", None),
|
||
)
|
||
|
||
# 宿主机模式同样需要应用管理员策略（否则前端工具菜单会退化成静态基础分类）
|
||
try:
|
||
from core.tool_config import ToolCategory
|
||
from modules import admin_policy_manager
|
||
|
||
record = None if explicit else get_current_user_record()
|
||
role = _resolve_user_role(identity, record, default="admin") if explicit else (get_current_user_role(record) if record else "admin")
|
||
invite_code = getattr(record, "invite_code", None) if record else None
|
||
policy = admin_policy_manager.get_effective_policy(
|
||
record.username if record else username,
|
||
role,
|
||
invite_code,
|
||
)
|
||
categories_map = {
|
||
cid: ToolCategory(
|
||
label=cat.get("label") or cid,
|
||
tools=list(cat.get("tools") or []),
|
||
default_enabled=bool(cat.get("default_enabled", True)),
|
||
silent_when_disabled=bool(cat.get("silent_when_disabled", False)),
|
||
)
|
||
for cid, cat in policy.get("categories", {}).items()
|
||
}
|
||
forced_states = policy.get("forced_category_states") or {}
|
||
disabled_models = policy.get("disabled_models") or []
|
||
terminal.set_admin_policy(categories_map, forced_states, disabled_models)
|
||
terminal.admin_policy_ui_blocks = policy.get("ui_blocks") or {}
|
||
terminal.admin_policy_version = policy.get("updated_at")
|
||
if terminal.model_key in disabled_models:
|
||
for candidate in get_registered_model_keys(visible_only=True):
|
||
if candidate not in disabled_models:
|
||
try:
|
||
terminal.set_model(candidate)
|
||
if can_write_session:
|
||
session["model_key"] = terminal.model_key
|
||
break
|
||
except Exception:
|
||
continue
|
||
except Exception as exc:
|
||
debug_log(f"[admin_policy][host_mode] 应用失败: {exc}")
|
||
|
||
_apply_workspace_personalization_preferences(
|
||
terminal,
|
||
workspace,
|
||
update_session=update_session,
|
||
session_model=(identity.preferred_model_key if explicit else None),
|
||
allow_session_io=not explicit,
|
||
)
|
||
_ensure_workspace_skills_synced(terminal, workspace)
|
||
_touch_terminal_activity(terminal, conversation_id)
|
||
write_host_workspace_debug(
|
||
"context.get_user_resources.host.return",
|
||
terminal_id=id(terminal),
|
||
terminal_project_path=str(getattr(terminal, "project_path", "")),
|
||
context_project_path=str(getattr(getattr(terminal, "context_manager", None), "project_path", "")),
|
||
workspace_project_path=str(getattr(workspace, "project_path", "")),
|
||
workspace_id=getattr(workspace, "workspace_id", None),
|
||
current_conversation_id=getattr(getattr(terminal, "context_manager", None), "current_conversation_id", None),
|
||
)
|
||
return terminal, workspace
|
||
|
||
is_api_user = identity.is_api_user if explicit else (bool(session.get("is_api_user")) if has_request_context() else False)
|
||
# API 用户与网页用户使用不同的 manager
|
||
if is_api_user:
|
||
record = None
|
||
if workspace_id is None:
|
||
raise RuntimeError(tr("context.missing_workspace_id"))
|
||
workspace = state.api_user_manager.ensure_workspace(username, workspace_id)
|
||
else:
|
||
record = (state.user_manager.get_user(username) if explicit else get_current_user_record())
|
||
if explicit:
|
||
selected_workspace_id = workspace_id or "default"
|
||
else:
|
||
selected_workspace_id = (
|
||
workspace_id
|
||
or (session.get("workspace_id") if has_request_context() else None)
|
||
or "default"
|
||
)
|
||
workspace = state.user_manager.ensure_user_workspace(username, selected_workspace_id)
|
||
# 为兼容后续逻辑，补充 workspace_id 属性
|
||
if not hasattr(workspace, "workspace_id"):
|
||
try:
|
||
workspace.workspace_id = selected_workspace_id or "default"
|
||
except Exception:
|
||
pass
|
||
workspace_id_value = getattr(workspace, "workspace_id", None) or "default"
|
||
term_key = _make_terminal_key(username, workspace_id_value, conversation_id)
|
||
# 容器句柄始终按工作区级共享（docker 模式：一个工作区/项目一个容器）
|
||
container_key = _make_terminal_key(username, workspace_id_value)
|
||
container_handle = state.container_manager.ensure_container(username, str(workspace.project_path), container_key=container_key, preferred_mode="docker")
|
||
usage_tracker = None if is_api_user else get_or_create_usage_tracker(username, workspace)
|
||
terminal = state.user_terminals.get(term_key)
|
||
if terminal is not None and getattr(terminal, "_reaper_closing", False):
|
||
# 回收器正在关闭该实例，视为不存在并原地重建；
|
||
# 回收器 pop 前会校验实例身份，不会误删这里新建的 terminal。
|
||
terminal = None
|
||
if not terminal:
|
||
if explicit:
|
||
run_mode = identity.preferred_run_mode
|
||
thinking_mode_flag = identity.preferred_thinking_mode
|
||
else:
|
||
run_mode = session.get('run_mode') if has_request_context() else None
|
||
thinking_mode_flag = session.get('thinking_mode') if has_request_context() else None
|
||
if run_mode not in {"fast", "thinking", "deep"}:
|
||
preferred_run_mode = None
|
||
try:
|
||
personal_config = load_personalization_config(workspace.data_dir)
|
||
candidate_mode = (personal_config or {}).get('default_run_mode')
|
||
if isinstance(candidate_mode, str) and candidate_mode.lower() in {"fast", "thinking", "deep"}:
|
||
preferred_run_mode = candidate_mode.lower()
|
||
except Exception as exc:
|
||
debug_log(f"[UserInit] 加载个性化偏好失败: {exc}")
|
||
|
||
if preferred_run_mode:
|
||
run_mode = preferred_run_mode
|
||
thinking_mode_flag = preferred_run_mode != "fast"
|
||
elif thinking_mode_flag:
|
||
run_mode = "deep"
|
||
else:
|
||
run_mode = "fast"
|
||
thinking_mode = run_mode != "fast"
|
||
terminal = WebTerminal(
|
||
project_path=str(workspace.project_path),
|
||
thinking_mode=thinking_mode,
|
||
run_mode=run_mode,
|
||
message_callback=make_terminal_callback(username),
|
||
data_dir=str(workspace.data_dir),
|
||
container_session=container_handle,
|
||
usage_tracker=usage_tracker,
|
||
conversation_id=conversation_id,
|
||
)
|
||
if terminal.terminal_manager:
|
||
terminal.terminal_manager.broadcast = terminal.message_callback
|
||
state.user_terminals[term_key] = terminal
|
||
terminal.username = username
|
||
terminal.user_role = "api" if is_api_user else _resolve_user_role(identity, record)
|
||
terminal.quota_update_callback = (lambda metric=None: emit_user_quota_update(username)) if not is_api_user else None
|
||
if can_write_session:
|
||
session['run_mode'] = terminal.run_mode
|
||
session['thinking_mode'] = terminal.thinking_mode
|
||
session['model_key'] = getattr(terminal, "model_key", None)
|
||
session['workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
else:
|
||
terminal.update_container_session(container_handle)
|
||
attach_user_broadcast(terminal, username)
|
||
terminal.username = username
|
||
terminal.user_role = "api" if is_api_user else _resolve_user_role(identity, record)
|
||
terminal.quota_update_callback = (lambda metric=None: emit_user_quota_update(username)) if not is_api_user else None
|
||
if can_write_session:
|
||
session['workspace_id'] = getattr(workspace, "workspace_id", None)
|
||
|
||
if is_api_user:
|
||
workspace_label = workspace_id_value
|
||
else:
|
||
try:
|
||
workspace_label = (
|
||
state.user_manager.list_user_workspaces(username)
|
||
.get(workspace_id_value, {})
|
||
.get("label")
|
||
) or workspace_id_value
|
||
except Exception:
|
||
workspace_label = workspace_id_value
|
||
_set_terminal_workspace_label(terminal, workspace_label)
|
||
|
||
# 应用管理员策略
|
||
if not is_api_user:
|
||
try:
|
||
from core.tool_config import ToolCategory
|
||
from modules import admin_policy_manager
|
||
policy = admin_policy_manager.get_effective_policy(
|
||
record.username if record else None,
|
||
_resolve_user_role(identity, record),
|
||
getattr(record, "invite_code", None),
|
||
)
|
||
categories_map = {
|
||
cid: ToolCategory(
|
||
label=cat.get("label") or cid,
|
||
tools=list(cat.get("tools") or []),
|
||
default_enabled=bool(cat.get("default_enabled", True)),
|
||
silent_when_disabled=bool(cat.get("silent_when_disabled", False)),
|
||
)
|
||
for cid, cat in policy.get("categories", {}).items()
|
||
}
|
||
forced_states = policy.get("forced_category_states") or {}
|
||
disabled_models = policy.get("disabled_models") or []
|
||
terminal.set_admin_policy(categories_map, forced_states, disabled_models)
|
||
terminal.admin_policy_ui_blocks = policy.get("ui_blocks") or {}
|
||
terminal.admin_policy_version = policy.get("updated_at")
|
||
if terminal.model_key in disabled_models:
|
||
for candidate in get_registered_model_keys(visible_only=True):
|
||
if candidate not in disabled_models:
|
||
try:
|
||
terminal.set_model(candidate)
|
||
if can_write_session:
|
||
session["model_key"] = terminal.model_key
|
||
break
|
||
except Exception:
|
||
continue
|
||
except Exception as exc:
|
||
debug_log(f"[admin_policy] 应用失败: {exc}")
|
||
|
||
_apply_workspace_personalization_preferences(
|
||
terminal,
|
||
workspace,
|
||
update_session=update_session,
|
||
session_model=(identity.preferred_model_key if explicit else None),
|
||
allow_session_io=not explicit,
|
||
)
|
||
_ensure_workspace_skills_synced(terminal, workspace)
|
||
_touch_terminal_activity(terminal, conversation_id)
|
||
return terminal, workspace
|
||
|
||
|