feat: add scoped read-only audio preview and isolated Dify transport

2026-10-09 16:10:59 +08:00
parent 27772bec61
commit 4d0af7f3f4
36 changed files with 1517 additions and 68 deletions
@@ -40,8 +40,9 @@ final class FollowupAudioAccess
        return in_array(strtolower($permission), array_map('strtolower', $permissions), true);
    }

-    public static function diagnosis(int $diagnosisId, int $actor, array $info, bool $daily = false): array
+    public static function diagnosis(int $diagnosisId, int $actor, array $info, bool $daily = false, bool $enforcePreviewScope = true): array
    {
+        if ($enforcePreviewScope) { FollowupAudioGate::assertScope($diagnosisId, $actor); }
        if ($diagnosisId <= 0) {
            throw new DomainException('诊单不存在或无权操作');
        }