From 6b106062b63b04c7b502e0b5bb54687c5ac6e183 Mon Sep 17 00:00:00 2001
From: xiangning <xiangning@buildflow.local>
Date: Fri, 17 Jul 2026 12:19:34 +0800
Subject: [PATCH] =?UTF-8?q?refactor(rag):=20=E6=9B=B4=E6=96=B0AI=E6=A8=A1?=
 =?UTF-8?q?=E5=9E=8B=E5=92=8CRAG=E7=AB=AF=E7=82=B9=E7=9A=84=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 移除FastEndpoints命名空间引用
- 移除Microsoft.Extensions.AI命名空间引用
- 将AI模型端点的AllowAnonymous替换为ai-model:read权限
- 将AI模型创建、更新、删除端点的AllowAnonymous替换为ai-model:write权限
- 将RAG流查询端点的AllowAnonymous替换为rag:query权限
- 统一端点安全性配置以符合权限管理要求
---
 .../Endpoints/rag/AiModel/AiModelEndpoints.cs         | 11 +++++------
 .../Endpoints/rag/RAG/RAGStreamEndpoint.cs            |  3 +--
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs b/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
index 8a06845..b99f533 100644
--- a/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
+++ b/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
@@ -1,4 +1,3 @@
-using FastEndpoints;
 using MediatR;
 using BuildFlow.Application.AiModel.Commands;
 using BuildFlow.Application.AiModel.DTOs;
@@ -12,7 +11,7 @@ public class GetAiModelsEndpoint(IMediator mediator) : EndpointWithoutRequest<Li
     public override void Configure()
     {
         Get("/ai/models");
-        AllowAnonymous();
+        Permissions("ai-model:read");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
@@ -30,7 +29,7 @@ public class CreateAiModelEndpoint(IMediator mediator) : Endpoint<CreateAiModelR
     public override void Configure()
     {
         Post("/ai/models");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CreateAiModelRequest req, CancellationToken ct)
@@ -48,7 +47,7 @@ public class UpdateAiModelEndpoint(IMediator mediator) : Endpoint<UpdateAiModelR
     public override void Configure()
     {
         Put("/ai/models/{Id}");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(UpdateAiModelRequest req, CancellationToken ct)
@@ -67,7 +66,7 @@ public class DeleteAiModelEndpoint(IMediator mediator) : EndpointWithoutRequest<
     public override void Configure()
     {
         Delete("/ai/models/{Id}");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
@@ -84,7 +83,7 @@ public class SetDefaultAiModelEndpoint(IMediator mediator) : EndpointWithoutRequ
     public override void Configure()
     {
         Post("/ai/models/{Id}/default");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
diff --git a/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs b/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
index 26c2fe8..7e6609d 100644
--- a/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
+++ b/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
@@ -1,6 +1,5 @@
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.AI;
 using BuildFlow.Application.RagQA.DTOs;
 using BuildFlow.Domain.Interfaces;
 using BuildFlow.Infrastructure.Persistence;
@@ -24,7 +23,7 @@ public class RAGStreamEndpoint(
     public override void Configure()
     {
         Post("/rag/stream");
-        AllowAnonymous();
+        Permissions("rag:query");
     }
 
     public override async Task HandleAsync(RAGQueryRequest req, CancellationToken ct)