Agent OS 的诞生：从 ooderAgent 场景组看多Agent协作的权限悖论

// 开发者思维：隔离是安全
Project A → 独立的上下文、权限、配置
Project B → 独立的上下文、权限、配置
// 默认不互通，需要手动配置才能协作

// 普通人思维：协作是本能
"帮我分析一下这个股票"
  → 需要调用：量化选股器 + AI Hedge Fund + 知识图谱
  → 用户只想说一句话，让工具自己协作

apiVersion: ooder/v1
kind: SceneTemplate
metadata:
  id: daily-report
  name: 日报汇报模板
  participantMode: multi-user
spec:
  skills:
    - id: daily-collect
      required: true
    - id: report-generate
      required: true
  roles:
    - name: MANAGER
      description: 管理者，查看团队报告
    - name: EMPLOYEE
      description: 员工，提交日报
  activationSteps:
    MANAGER:
      - step: 1
        name: 配置日报模板
        required: true
      - step: 2
        name: 邀请团队成员
        required: true

public class CapabilityBindingDTO {
    private String capId;           // 能力ID
    private String capName;         // 能力名称
    private String providerType;    // SKILL / AGENT
    private String providerId;      // 提供者ID
    private int priority;           // 优先级
    private boolean fallback;       // 是否启用故障转移
    private String status;          // ACTIVE / ERROR
}

public enum KnowledgeLayer {
    GENERAL,        // 通用层：所有场景共享
    PROFESSIONAL,   // 专业层：特定领域共享
    SCENE           // 场景层：当前场景独享
}

@RestController
@RequestMapping("/api/v1/scene-groups")
public class SceneGroupController {
    
    // 创建场景组
    @PostMapping
    public ResultModel<SceneGroupDTO> create(@RequestBody CreateSceneGroupRequest request) {
        SceneGroupDTO result = sceneGroupService.create(
            request.getTemplateId(), 
            request.getConfig()
        );
        return ResultModel.success(result);
    }
    
    // 激活场景组 - 关键方法
    @PostMapping("/{sceneGroupId}/activate")
    public ResultModel<Boolean> activate(@PathVariable String sceneGroupId) {
        // 1. 激活场景组
        boolean result = sceneGroupService.activate(sceneGroupId);
        
        // 2. 自动注册菜单（根据用户角色）
        if (result) {
            menuAutoRegisterService.registerMenusOnActivation(
                sceneGroupId, templateId, userId, roleInScene
            );
        }
        return ResultModel.success(result);
    }
    
    // 邀请成员 - 协作的核心
    @PostMapping("/{sceneGroupId}/invite")
    public ResultModel<Boolean> inviteMember(@PathVariable String sceneGroupId,
                                              @RequestBody InviteMemberRequest request) {
        // 创建邀请待办事项
        todoService.createInvitationTodo(sceneGroupId, fromUserId, toUserId, role);
        return ResultModel.success(true);
    }
    
    // 委派任务 - Agent间协作
    @PostMapping("/{sceneGroupId}/delegate")
    public ResultModel<Boolean> delegateTask(@PathVariable String sceneGroupId,
                                               @RequestBody DelegateTaskRequest request) {
        todoService.createDelegationTodo(sceneGroupId, fromUserId, toUserId, title, deadline);
        return ResultModel.success(true);
    }
}

@Service
public class RoleManagementService {
    
    private void initDefaultRoles() {
        // 管理员角色
        createRole("admin", "管理员", "系统运维、能力管理、用户管理", "ri-admin-line",
            Arrays.asList(
                "system:init", "system:config",
                "capability:discover", "capability:install", "capability:distribute",
                "scene:create", "scene:manage",
                "user:manage", "org:manage",
                "llm:config", "knowledge:manage"
            ));
        
        // 普通用户角色
        createRole("user", "普通用户", "场景参与、任务执行、业务流程", "ri-user-line",
            Arrays.asList(
                "scene:view", "scene:activate", "scene:participate",
                "task:view", "task:execute", "task:submit",
                "todo:view", "todo:process"
            ));
        
        // 开发者角色
        createRole("developer", "开发者", "能力开发、测试、发布", "ri-code-line",
            Arrays.asList(
                "capability:create", "capability:edit", "capability:test", "capability:publish"
            ));
    }
}

@RestController
@RequestMapping("/api/v1/scene-groups/{sceneGroupId}/chat")
public class AgentChatController {
    
    // 获取聊天上下文
    @GetMapping("/context")
    public ResponseEntity<Map<String, Object>> getChatContext(@PathVariable String sceneGroupId) {
        SceneChatContextDTO context = chatService.getChatContext(sceneGroupId, userId);
        return ResponseEntity.ok(result);
    }
    
    // 发送消息
    @PostMapping("/messages")
    public ResponseEntity<Map<String, Object>> sendMessage(
            @PathVariable String sceneGroupId,
            @RequestBody AgentChatMessageDTO message) {
        String messageId = chatService.sendMessage(sceneGroupId, message);
        return ResponseEntity.ok(result);
    }
    
    // 执行消息动作（如审批、委派等）
    @PostMapping("/messages/{messageId}/action")
    public ResponseEntity<Map<String, Object>> executeAction(
            @PathVariable String sceneGroupId,
            @PathVariable String messageId,
            @RequestBody Map<String, Object> body) {
        Object actionResult = chatService.executeMessageAction(
            sceneGroupId, messageId, userId, actionId, actionData);
        return ResponseEntity.ok(result);
    }
    
    // 待办事项管理
    @PostMapping("/todos/{todoId}/accept")
    public ResponseEntity<Map<String, Object>> acceptTodo(@PathVariable String todoId) {
        boolean success = chatService.acceptTodo(userId, todoId);
        return ResponseEntity.ok(result);
    }
    
    @PostMapping("/todos/{todoId}/delegate")
    public ResponseEntity<Map<String, Object>> delegateTodo(
            @PathVariable String todoId,
            @RequestBody Map<String, Object> body) {
        boolean success = chatService.delegateTodo(userId, todoId, toUserId);
        return ResponseEntity.ok(result);
    }
}