渲染错误: Mermaid 渲染失败: Parse error on line 32: ... string 用户类型（医生/护士/患者/管理员） -----------------------^ Expecting 'BLOCK_STOP', 'ATTRIBUTE_WORD', 'ATTRIBUTE_KEY', 'COMMENT', got '/'

from pydantic import BaseModel, ValidationError
from typing import List, Dict, Optional
import jmespath
import openfga_sdk
from openfga_sdk.client import OpenFgaClient
from gmssl import sm3, func

# 合规规则基础模型
class MedicalComplianceRule(BaseModel):
    rule_id: str
    rule_name: str
    scenario: str
    rule_type: str  # data/process/output
    condition: str  # JMESPath表达式，用于判断规则是否触发
    action: str  # allow/deny/transfer_to_human/revise_output
    severity: int  # 1-5，5为最高风险
    weight: float  # 规则权重，用于计算合规分数

# 预问诊场景默认规则库
PRE_CONSULT_DEFAULT_RULES: List[MedicalComplianceRule] = [
    # 数据安全类规则
    MedicalComplianceRule(
        rule_id="D001",
        rule_name="禁止查询非接诊患者的病历数据",
        scenario="pre_consult",
        rule_type="data",
        condition="user.role == 'doctor' && query.patient_id != current_patient_id",
        action="deny",
        severity=5,
        weight=0.3
    ),
    MedicalComplianceRule(
        rule_id="D002",
        rule_name="禁止传输患者身份证号、住址等隐私信息",
        scenario="pre_consult",
        rule_type="data",
        condition="contains(output, '身份证号') || contains(output, '家庭住址')",
        action="revise_output",
        severity=4,
        weight=0.2
    ),
    # 流程合规类规则
    MedicalComplianceRule(
        rule_id="P001",
        rule_name="危重症状直接转急诊",
        scenario="pre_consult",
        rule_type="process",
        condition="contains(symptoms, '胸痛') && duration >= 30 || contains(symptoms, '昏迷') || contains(symptoms, '呼吸困难')",
        action="transfer_to_human",
        severity=5,
        weight=0.3
    ),
    MedicalComplianceRule(
        rule_id="P002",
        rule_name="预问诊必须采集核心症状、持续时间、既往史三个字段",
        scenario="pre_consult",
        rule_type="process",
        condition="len(symptoms) == 0 || duration == null || past_history == null",
        action="revise_output",
        severity=3,
        weight=0.1
    ),
    # 输出规范类规则
    MedicalComplianceRule(
        rule_id="O001",
        rule_name="禁止给出诊断结论、治疗建议、处方建议",
        scenario="pre_consult",
        rule_type="output",
        condition="contains(output, '诊断为') || contains(output, '你得了') || contains(output, '建议服用') || contains(output, '建议治疗')",
        action="revise_output",
        severity=4,
        weight=0.2
    ),
    MedicalComplianceRule(
        rule_id="O002",
        rule_name="必须明确提示AI仅为辅助工具，最终结论以医生为准",
        scenario="pre_consult",
        rule_type="output",
        condition="!contains(output, '本次服务为AI辅助，最终诊疗意见请以医生为准')",
        action="revise_output",
        severity=2,
        weight=0.1
    )
]

class ComplianceRuleEngine:
    def __init__(self, fga_config: Dict, rules: Optional[List[MedicalComplianceRule]] = None):
        # 初始化权限管控客户端
        self.fga_client = OpenFgaClient(fga_config)
        # 加载规则库
        self.rules = rules or PRE_CONSULT_DEFAULT_RULES
        # 按场景分组规则
        self.rules_by_scenario = {}
        for rule in self.rules:
            if rule.scenario not in self.rules_by_scenario:
                self.rules_by_scenario[rule.scenario] = []
            self.rules_by_scenario[rule.scenario].append(rule)

    def validate_data_permission(self, user_id: str, patient_id: str, operation: str) -> bool:
        """校验用户对患者数据的操作权限，基于OpenFGA实现"""
        try:
            response = self.fga_client.check({
                "tuple_key": {
                    "user": f"user:{user_id}",
                    "relation": operation,
                    "object": f"patient:{patient_id}"
                }
            })
            return response.allowed
        except Exception as e:
            print(f"权限校验异常: {e}")
            return False

    def calculate_compliance_score(self, scenario: str, context: Dict) -> tuple[float, List[MedicalComplianceRule]]:
        """计算当前操作的合规分数，返回分数和触发的违规规则"""
        rules = self.rules_by_scenario.get(scenario, [])
        total_weight = sum(rule.weight for rule in rules)
        passed_weight = 0.0
        violated_rules = []

        for rule in rules:
            # 执行规则条件判断
            try:
                condition_met = jmespath.search(rule.condition, context)
            except Exception as e:
                print(f"规则{rule.rule_id}条件判断异常: {e}")
                condition_met = False

            if condition_met:
                # 规则触发，记录违规
                violated_rules.append(rule)
            else:
                # 规则未触发，累加权重
                passed_weight += rule.weight

        score = (passed_weight / total_weight) * 100 if total_weight > 0 else 100
        return round(score, 2), violated_rules

    def generate_audit_log_hash(self, log_content: Dict) -> str:
        """生成审计日志的SM3哈希值，确保日志不可篡改"""
        log_str = str(sorted(log_content.items())).encode('utf-8')
        hash_value = sm3.sm3_hash(func.bytes_to_list(log_str))
        return hash_value

渲染错误: Mermaid 渲染失败: Parsing failed: Lexer error on line 2, column 11: unexpected character: ->医<- at offset: 28, skipped 5 characters. Lexer error on line 2, column 23: unexpected character: ->[<- at offset: 40, skipped 13 characters. Lexer error on line 3, column 11: unexpected character: ->数<- at offset: 64, skipped 4 characters. Lexer error on line 3, column 23: unexpected character: ->[<- at offset: 76, skipped 8 characters. Lexer error on line 3, column 35: unexpected character: ->医<- at offset: 88, skipped 5 characters. Lexer error on line 4, column 30: unexpected character: ->[<- at offset: 123, skipped 1 characters. Lexer error on line 4, column 34: unexpected character: ->电<- at offset: 127, skipped 7 characters. Lexer error on line 4, column 45: unexpected character: ->数<- at offset: 138, skipped 4 characters. Lexer error on line 5, column 30: unexpected character: ->[<- at offset: 172, skipped 1 characters. Lexer error on line 5, column 34: unexpected character: ->医<- at offset: 176, skipped 7 characters. Lexer error on line 5, column 45: unexpected character: ->数<- at offset: 187, skipped 4 characters. Lexer error on line 6, column 30: unexpected character: ->[<- at offset: 221, skipped 1 characters. Lexer error on line 6, column 34: unexpected character: ->医<- at offset: 225, skipped 7 characters. Lexer error on line 6, column 45: unexpected character: ->数<- at offset: 236, skipped 4 characters. Lexer error on line 7, column 30: unexpected character: ->[<- at offset: 270, skipped 1 characters. Lexer error on line 7, column 34: unexpected character: ->临<- at offset: 274, skipped 7 characters. Lexer error on line 7, column 45: unexpected character: ->数<- at offset: 285, skipped 4 characters. Lexer error on line 9, column 18: unexpected character: ->核<- at offset: 312, skipped 3 characters. Lexer error on line 9, column 29: unexpected character: ->[<- at offset: 323, skipped 1 characters. Lexer error on line 9, column 46: unexpected character: ->核<- at offset: 340, skipped 4 characters. Lexer error on line 9, column 54: unexpected character: ->医<- at offset: 348, skipped 5 characters. Lexer error on line 10, column 32: unexpected character: ->[<- at offset: 385, skipped 8 characters. Lexer error on line 10, column 51: unexpected character: ->核<- at offset: 404, skipped 3 characters. Lexer error on line 11, column 35: unexpected character: ->[<- at offset: 442, skipped 8 characters. Lexer error on line 11, column 54: unexpected character: ->核<- at offset: 461, skipped 3 characters. Lexer error on line 12, column 40: unexpected character: ->[<- at offset: 504, skipped 8 characters. Lexer error on line 12, column 59: unexpected character: ->核<- at offset: 523, skipped 3 characters. Lexer error on line 13, column 36: unexpected character: ->[<- at offset: 562, skipped 8 characters. Lexer error on line 13, column 55: unexpected character: ->核<- at offset: 581, skipped 3 characters. Lexer error on line 14, column 30: unexpected character: ->[<- at offset: 614, skipped 8 characters. Lexer error on line 14, column 49: unexpected character: ->核<- at offset: 633, skipped 3 characters. Lexer error on line 15, column 33: unexpected character: ->[<- at offset: 669, skipped 8 characters. Lexer error on line 15, column 52: unexpected character: ->核<- at offset: 688, skipped 3 characters. Lexer error on line 17, column 16: unexpected character: ->层<- at offset: 712, skipped 1 characters. Lexer error on line 17, column 25: unexpected character: ->[<- at offset: 721, skipped 7 characters. Lexer error on line 17, column 37: unexpected character: ->层<- at offset: 733, skipped 2 characters. Lexer error on line 17, column 43: unexpected character: ->医<- at offset: 739, skipped 5 characters. Lexer error on line 18, column 36: unexpected character: ->[<- at offset: 780, skipped 6 characters. Lexer error on line 18, column 47: unexpected character: ->]<- at offset: 791, skipped 1 characters. Lexer error on line 18, column 57: unexpected character: ->层<- at offset: 801, skipped 1 characters. Lexer error on line 19, column 36: unexpected character: ->[<- at offset: 838, skipped 7 characters. Lexer error on line 19, column 48: unexpected character: ->]<- at offset: 850, skipped 1 characters. Lexer error on line 19, column 58: unexpected character: ->层<- at offset: 860, skipped 1 characters. Lexer error on line 20, column 40: unexpected character: ->[<- at offset: 901, skipped 7 characters. Lexer error on line 20, column 52: unexpected character: ->]<- at offset: 913, skipped 1 characters. Lexer error on line 20, column 62: unexpected character: ->层<- at offset: 923, skipped 1 characters. Lexer error on line 21, column 33: unexpected character: ->[<- at offset: 957, skipped 5 characters. Lexer error on line 21, column 43: unexpected character: ->]<- at offset: 967, skipped 1 characters. Lexer error on line 21, column 53: unexpected character: ->层<- at offset: 977, skipped 1 characters. Lexer error on line 23, column 11: unexpected character: ->业<- at offset: 994, skipped 5 characters. Lexer error on line 23, column 24: unexpected character: ->[<- at offset: 1007, skipped 7 characters. Lexer error on line 23, column 35: unexpected character: ->医<- at offset: 1018, skipped 5 characters. Lexer error on line 24, column 28: unexpected character: ->[<- at offset: 1051, skipped 7 characters. Lexer error on line 24, column 39: unexpected character: ->业<- at offset: 1062, skipped 5 characters. Lexer error on line 25, column 27: unexpected character: ->[<- at offset: 1094, skipped 7 characters. Lexer error on line 25, column 38: unexpected character: ->业<- at offset: 1105, skipped 5 characters. Lexer error on line 26, column 29: unexpected character: ->[<- at offset: 1139, skipped 7 characters. Lexer error on line 26, column 40: unexpected character: ->业<- at offset: 1150, skipped 5 characters. Lexer error on line 27, column 27: unexpected character: ->[<- at offset: 1182, skipped 8 characters. Lexer error on line 27, column 39: unexpected character: ->业<- at offset: 1194, skipped 5 characters. Lexer error on line 29, column 11: unexpected character: ->监<- at offset: 1215, skipped 3 characters. Lexer error on line 29, column 22: unexpected character: ->[<- at offset: 1226, skipped 5 characters. Lexer error on line 29, column 31: unexpected character: ->医<- at offset: 1235, skipped 5 characters. Lexer error on line 30, column 36: unexpected character: ->[<- at offset: 1276, skipped 6 characters. Lexer error on line 30, column 46: unexpected character: ->监<- at offset: 1286, skipped 3 characters. Lexer error on line 31, column 30: unexpected character: ->[<- at offset: 1319, skipped 8 characters. Lexer error on line 31, column 42: unexpected character: ->监<- at offset: 1331, skipped 3 characters. Lexer error on line 32, column 31: unexpected character: ->[<- at offset: 1365, skipped 8 characters. Lexer error on line 32, column 43: unexpected character: ->监<- at offset: 1377, skipped 3 characters. Lexer error on line 41, column 28: unexpected character: ->层<- at offset: 1615, skipped 1 characters. Lexer error on line 42, column 10: unexpected character: ->层<- at offset: 1628, skipped 1 characters. Lexer error on line 44, column 20: unexpected character: ->业<- at offset: 1690, skipped 5 characters. Lexer error on line 45, column 17: unexpected character: ->监<- at offset: 1714, skipped 3 characters. Parse error on line 2, column 16: Expecting token of type 'ID' but found `(cloud)`. Parse error on line 3, column 15: Expecting token of type 'ID' but found `(server)`. Parse error on line 3, column 40: Expecting token of type 'ID' but found ` `. Parse error on line 4, column 31: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'EMR' Parse error on line 4, column 42: Expecting token of type ':' but found `in`. Parse error on line 5, column 31: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'HIS' Parse error on line 5, column 42: Expecting token of type ':' but found `in`. Parse error on line 6, column 31: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'DRG' Parse error on line 6, column 42: Expecting token of type ':' but found `in`. Parse error on line 7, column 31: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'CIS' Parse error on line 7, column 42: Expecting token of type ':' but found `in`. Parse error on line 9, column 30: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'AI' Parse error on line 9, column 33: Expecting token of type ':' but found `Agent`. Parse error on line 9, column 39: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Harness' Parse error on line 9, column 51: Expecting token of type ':' but found `in`. Parse error on line 17, column 32: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Agent' Parse error on line 17, column 40: Expecting token of type ':' but found `in`. Parse error on line 18, column 42: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Agent' Parse error on line 18, column 49: Expecting token of type ':' but found `in`. Parse error on line 19, column 43: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Agent' Parse error on line 19, column 50: Expecting token of type ':' but found `in`. Parse error on line 20, column 47: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Agent' Parse error on line 20, column 54: Expecting token of type ':' but found `in`. Parse error on line 21, column 38: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: 'Agent' Parse error on line 21, column 45: Expecting token of type ':' but found `in`. Parse error on line 23, column 16: Expecting token of type 'ID' but found `(server)`. Parse error on line 23, column 40: Expecting token of type 'ID' but found ` `. Parse error on line 24, column 44: Expecting token of type 'ID' but found ` `. Parse error on line 25, column 43: Expecting token of type 'ID' but found ` `. Parse error on line 26, column 45: Expecting token of type 'ID' but found ` `. Parse error on line 27, column 44: Expecting token of type 'ID' but found ` `. Parse error on line 29, column 14: Expecting token of type 'ID' but found `(server)`. Parse error on line 29, column 36: Expecting token of type 'ID' but found ` `. Parse error on line 30, column 49: Expecting token of type 'ID' but found ` `. Parse error on line 31, column 45: Expecting token of type 'ID' but found ` `. Parse error on line 32, column 46: Expecting token of type 'ID' but found ` `. Parse error on line 34, column 15: Expecting token of type 'ARROW_DIRECTION' but found `adaptor`. Parse error on line 34, column 22: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 35, column 15: Expecting token of type 'ARROW_DIRECTION' but found `adaptor`. Parse error on line 35, column 22: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 36, column 15: Expecting token of type 'ARROW_DIRECTION' but found `adaptor`. Parse error on line 36, column 22: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 37, column 15: Expecting token of type 'ARROW_DIRECTION' but found `adaptor`. Parse error on line 37, column 22: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 38, column 19: Expecting token of type 'ARROW_DIRECTION' but found `permission`. Parse error on line 38, column 29: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 39, column 22: Expecting token of type 'ARROW_DIRECTION' but found `desensitization`. Parse error on line 39, column 37: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 40, column 27: Expecting token of type 'ARROW_DIRECTION' but found `rule_engine`. Parse error on line 40, column 38: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 41, column 23: Expecting token of type 'ARROW_DIRECTION' but found `Agent`. Parse error on line 41, column 29: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 42, column 18: Expecting token of type 'ARROW_DIRECTION' but found `audit`. Parse error on line 42, column 23: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 43, column 17: Expecting token of type 'ARROW_DIRECTION' but found `fallback`. Parse error on line 43, column 25: Expecting: one of these possible Token sequences: 1. [NEWLINE] 2. [EOF] but found: ':' Parse error on line 44, column 25: Expecting token of type 'ARROW_DIRECTION' but found `:`. Parse error on line 44, column 26: Expecting token of type 'ID' but found `L`. Parse error on line 45, column 20: Expecting token of type 'ARROW_DIRECTION' but found `:`. Parse error on line 45, column 21: Expecting token of type 'ID' but found `L`.