AIclinicalresearch/docs/03-业务模块/ADMIN-运营管理端/00-系统设计/00-权限与角色体系梳理报告_v1.0.md

*AIclinicalresearch 譚<>剞荳手ｧ定牡菴鍋ｳｻ譴ｳ逅<EFBDB3>冠蜻?

*譁<EFBFBD>｡｣迚域悽<EFBFBD>? v1.1<EFBFBD>域紛蜷<EFBFBD>rompt邂｡逅<EFBFBD>怙豎ゑｼ<EFBFBD>
*蛻帛ｻｺ譌･譛滂ｼ? 2026-01-11
譛€蜷取峩譁ｰ<EFBFBD><EFBFBD> 2026-01-11
菴懆€<EFBFBD>ｼ<EFBFBD> AI譫ｶ譫<EFBDB6>ｸ? *逶ｮ逧<EFBFBD>ｼ? 邉ｻ扈滓€ｧ譴ｳ逅<EFBDB3>ｽ灘燕譚<E78795>剞螳樒鴫迥ｶ蜀ｵ<E89C80>御ｸｺ霑占是邂｡逅<EFBDA1>ｫｯ蜥梧惻譫<E683BB>ｮ｡逅<EFBDA1>ｫｯ蠑€蜿大★蜃<E29885>､<EFBFBD>
*蜿俶峩隸ｴ譏趣ｼ? 謨ｴ蜷亥渚鬥亥ｻｺ隶ｮ + Prompt邂｡逅<EFBDA1>ｳｻ扈滄怙豎?

---

<EFBFBD>搭 逶ｮ蠖<EFBDAE>

1. [蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫疹(#1-蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫?
2. [謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅<EFBDB3>(#2-謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅?
3. [蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>(#3-蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>)
4. [蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>(#4-蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>)
5. [蟾ｮ霍晏<E99C8D>譫疹(#5-蟾ｮ霍晏<E99C8D>譫<EFBFBD>)
6. [譁ｰPRD髴€豎りｧ｣隸ｻ](#6-譁ｰprd髴€豎りｧ｣隸?
7. 譫ｶ譫<EFBFBD>ｮｾ隶｡蟒ｺ隶ｮ
8. [螳樊命霍ｯ郤ｿ蝗ｾ](#8-螳樊命霍ｯ郤ｿ蝗?
9. [<5B><> Prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>(#9-prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>)
10. [<5B><> 蜿埼ｦ磯㊦郤ｳ隸ｴ譏讃(#10-蜿埼ｦ磯㊦郤ｳ隸ｴ譏<EFBDB4>)

---

1. 蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫?

1.1 譬ｸ蠢<EFBDB8>書邇ｰ <20>剥

笨?蟾ｲ譛牙渕遑€<EFBFBD>?

• 謨ｰ謐ｮ蠎捺怏蝓ｺ遑€逧Фser陦ｨ<EFBFBD><EFBFBD>platform_schema.users 蜥?public.users`荳､荳ｪ迚域悽<E59F9F>?
• 譛牙渕譛ｬ逧вole蟄玲ｮｵ<EFBFBD>磯ｻ倩ｮ､蛟ｼ<EFBFBD><EFBFBD>"user"<22>?
• 蜑咲ｫｯ譛画揀髯先｡<EFBFBD>楔<EFBFBD><EFBFBD>PermissionContext`<60>会ｼ御ｽ?莉<EFBFBD>ock謨ｰ謐ｮ*
• 蜷守ｫｯ螳悟<EFBFBD>豐｡譛芽ｮ､隸<EFBFBD>/謗域揀邉ｻ扈<EFBDBB>

笶?郛ｺ螟ｱ蜈ｳ髞ｮ閭ｽ蜉<EFBDBD><EFBFBD>?

1. 豐｡譛臥匳蠖<EFBFBD>/豕ｨ蜀窟PI
2. *豐｡譛雨WT隶､隸∽ｸｭ髣ｴ莉?
3. 豐｡譛臥ｧ滓姐(Tenant)菴鍋ｳｻ
4. 豐｡譛芽ｧ定牡譚<EFBFBD>剞邉ｻ扈<EFBFBD>(RBAC)
5. 豐｡譛宇eature Flag謗ｧ蛻ｶ
6. 豐｡譛牙ｮ｡隶｡譌･蠢礼ｳｻ扈<EFBFBD>

**<2A>識 蠖灘燕迥ｶ諤?*<2A>?

• 邉ｻ扈溷､<EFBFBD>ｺ<EFBFBD>**蜊墓ｵ玖ｯ戊ｴｦ蜿?*髦ｶ谿ｵ
• 謇€譛陰PI驛ｽ譏ｯ**譌<>隶､隸√€∵裏驩ｴ譚<EFBDB4>**迥ｶ諤?
• 蜑咲ｫｯ譚<EFBFBD>剞謗ｧ蛻ｶ譏?*郤ｯ螻慕､ｺ諤?*逧<>ock螳樒鴫

---

2. 謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅?

2.1 蠖灘燕User陦ｨ扈捺<E68988>?

platform_schema.users 笨?譁ｰ譫ｶ譫<EFBDB6>ｼ<EFBFBD>risma螳壻ｹ会ｼ?

model User {
  id          String    @id @default(uuid())
  email       String    @unique
  password    String
  name        String?
  avatarUrl   String?   @map("avatar_url")
  role        String    @default("user")          // 笞<><E7AC9E><EFBFBD> 邂€蜊募ｭ礼ｬｦ荳ｲ<E88DB3>御ｸ榊､溽畑
  status      String    @default("active")
  kbQuota     Int       @default(3)
  kbUsed      Int       @default(0)
  trialEndsAt DateTime? @map("trial_ends_at")
  isTrial     Boolean   @default(true)
  lastLoginAt DateTime? @map("last_login_at")
  createdAt   DateTime  @default(now())
  updatedAt   DateTime  @updatedAt
  
  @@schema("platform_schema")
}

public.users 笶?譌ｧ陦ｨ<E999A6>亥紙蜿ｲ驕礼蕗<E7A4BC><E89597>

model users {
  id            String
  email         String @unique
  password      String
  name          String?
  avatar_url    String?
  role          String @default("user")       // 笞<><E7AC9E><EFBFBD> 蜷梧<E89CB7>ｷ邂€蜊?
  status        String @default("active")
  kb_quota      Int @default(3)
  kb_used       Int @default(0)
  // ... 蜈ｶ莉門ｭ玲ｮｵ
  
  @@schema("public")
}

*笞<EFBFBD><EFBFBD><EFBFBD> 髣ｮ鬚假ｼ?

• 荳､荳ｪUser陦ｨ蟷ｶ蟄假ｼ悟多蜷堺ｸ堺ｸ€閾ｴ<EFBFBD><EFBFBD>sers vs User<65>?
• role蟄玲ｮｵ莉<EFBFBD>ｸｺ蟄礼ｬｦ荳ｲ<EFBFBD>梧裏enum郤ｦ譚<EFBFBD>
• *豐｡譛臥ｧ滓姐蜈ｳ閨泌ｭ玲ｮｵ<EFBFBD><EFBFBD>enantId<EFBFBD>?
• *豐｡譛蛾Κ髣ｨ蟄玲ｮｵ<EFBFBD><EFBFBD>epartment<EFBFBD>?
• 豐｡譛画揀髯宣<EFBFBD>鄂ｮ蟄玲ｮｵ

2.2 郛ｺ螟ｱ逧<EFBDB1><E980A7>ｸ蠢<EFBDB8>｡ｨ

譬ｹ謐ｮPRD髴€豎ゑｼ碁怙隕∵眠蠅樔ｻ･荳玖｡ｨ<EFBFBD>?

陦ｨ蜷<EFBFBD>	Schema菴咲ｽｮ	逕ｨ騾?	莨伜<EFBFBD>郤?
tenants	platform_schema	遘滓姐荳ｻ陦ｨ<EFBFBD>亥現髯｢縲∬艮莨√€∵悄蛻奇ｼ<EFBFBD>	P0
tenant_users	platform_schema	遘滓姐-逕ｨ謌ｷ蜈ｳ閨碑｡?	P0
departments	platform_schema	驛ｨ髣ｨ/遘大ｮ､陦?	P1
feature_flags	platform_schema	Feature Flag驟咲ｽｮ	P0
tenant_modules	platform_schema	遘滓姐隶｢髦<EFBFBD>ｨ｡蝮鈴<EFBFBD>鄂ｮ	P0
tenant_quotas	platform_schema	遘滓姐驟埼｢晉ｮ｡逅<EFBFBD>	P1
admin_operation_logs	admin_schema	霑占是謫堺ｽ懈律蠢<EFBFBD>	P1

*豕ｨ諢擾ｼ? 蠖灘燕譛我ｸ€荳ｪAdminLog陦ｨ蝨ｨpublicschema<EFBFBD>御ｽ<EFBFBD>ｸ榊ｮ梧紛縲?

2.3 蟾ｲ譛臥噪螳｡隶｡譌･蠢?

*IIT讓｡蝮礼噪螳｡隶｡譌･蠢? 笨?<3F>亥庄蜿り€<E3828A>ｼ会ｼ?

model IitAuditLog {
  id          String    @id @default(uuid())
  projectId   String
  userId      String
  actionType  String
  entityType  String
  entityId    String
  details     Json?
  traceId     String
  createdAt   DateTime  @default(now())
  
  @@schema("iit_schema")
}

蜿ｯ螟咲畑諤ｧ<EFBFBD><EFBFBD> 笨?譫ｶ譫<EFBDB6>ｮｾ隶｡莨倡ｧ€<EFBDA7>悟庄菴應ｸｺ蜈ｨ螻€螳｡隶｡譌･蠢礼噪蜿り€<E3828A>€?

---

3. 蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>

3.1 隶､隸∫ｳｻ扈溽憾諤?笶?*譛ｪ螳樒<EFBFBD>?

*謳懃ｴ｢扈捺棡<EFBFBD>?

• 笶?豐｡譛画伽蛻ｰ /api/auth/login 謌?/api/auth/register
• 笶?豐｡譛雨WT逕滓<E98095>/鬪瑚ｯ∝ｷ･蜈ｷ
• 笶?豐｡譛芽ｮ､隸∽ｸｭ髣ｴ莉ｶ<E88E89>亥ｦ?requireAuth<EFBFBD>?

蟇ｹ豈泌<EFBFBD>莉夜｡ｹ逶ｮ<EFBFBD>井ｻ残odebase_search扈捺棡<EFBFBD>会ｼ<EFBFBD>

• ODJ鬘ｹ逶ｮ譛牙ｮ梧紛逧Пassport JWT隶､隸<EFBDA4> 笨?
• BYSY鬘ｹ逶ｮ譛雨WT隶､隸∽ｸｭ髣ｴ莉?笨?
• 譛ｬ鬘ｹ逶ｮ<EFBFBD>壼ｮ悟<EFBFBD>遨ｺ逋ｽ 笶?

3.2 謗域揀邉ｻ扈溽憾諤?笶?*譛ｪ螳樒<EFBFBD>?

*郛ｺ螟ｱ蜀<EFBFBD>ｮｹ<EFBFBD>?

• 笶?豐｡譛芽ｧ定牡譽€譟･荳ｭ髣ｴ莉ｶ<E88E89>亥ｦ<E4BAA5> requireRole(['admin'])<EFBFBD>?
• 笶?豐｡譛画揀髯先丐蟆<E4B890>｡ｨ<EFBDA1><EFBDA8>OLE_PERMISSIONS<4E>?
• 笶?豐｡譛宇eature Flag譽€譟･騾ｻ霎<EFBDBB>

*蠖ｱ蜩搾ｼ?

• 謇€譛陰PI遶ｯ轤ｹ驛ｽ譏ｯ蜈ｬ蠑€逧<EFBFBD>ｼ梧裏譚<EFBFBD>剞菫晄<EFBFBD>?
• 譌<EFBFBD>豕募玄蛻<EFBFBD>ｮ｡逅<EFBFBD>遭蜥梧勸騾夂畑謌?
• 譌<EFBFBD>豕募ｮ樒鴫螟夂ｧ滓姐謨ｰ謐ｮ髫皮ｦ?

3.3 蠖灘燕API扈捺桷

Legacy Routes (譌<>隶､隸?<3F>?

/api/v1/aia/*     - AI譎ｺ閭ｽ髣ｮ遲費ｼ域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>
/api/v1/pkb/*     - 荳ｪ莠ｺ遏･隸<EFBDA5>ｺ難ｼ域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>
/api/v1/rvw/*     - 遞ｿ莉ｶ螳｡譟･<E8AD9F>域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>

*髣ｮ鬚假ｼ?

• 莉ｻ菴穂ｺｺ驛ｽ蜿ｯ莉･隶ｿ髣ｮ莉ｻ菴慕畑謌ｷ逧<EFBFBD>焚謐?
• 豐｡譛<EFBFBD> userId 驩ｴ譚<EFBDB4>€ｻ霎<EFBDBB>
• 豐｡譛臥ｧ滓姐謨ｰ謐ｮ髫皮ｦｻ

---

4. 蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>

4.1 譚<>剞譯<E5899E>楔蟄伜惠 笨?菴<>ｻ<EFBFBD>ｸｺMock

*譁<EFBFBD>ｻｶ菴咲ｽｮ<EFBFBD>? frontend-v2/src/framework/permission/PermissionContext.tsx

*譬ｸ蠢<EFBFBD>ｻ｣遐<EFBFBD>ｼ?

// 笞<><E7AC9E><EFBFBD> 遑ｬ郛也<E9839B>∽ｸｺ譛€鬮俶揀髯撰ｼ御ｻ<E5BEA1>ｾ帛ｼ€蜿第ｵ玖ｯ?
const MOCK_USER: UserInfo = {
  id: 'test-user-001',
  name: '豬玖ｯ慕<EFBDAF>皮ｩｶ蜻?,
  email: 'test@example.com',
  version: 'premium',  // <20>争 遑ｬ郛也<E9839B>?
  avatar: null,
  isTrial: false,
}

// 譚<>剞譽€譟･蜃ｽ謨ｰ<E8ACA8>亥渕莠散serVersion遲臥ｺｧ<EFBDBA>?
const checkModulePermission = (requiredVersion?: UserVersion): boolean => {
  if (!user) return false
  if (!requiredVersion) return true
  return checkVersionLevel(user.version, requiredVersion)
}

*UserVersion螳壻ｹ会ｼ?

// framework/permission/types.ts
export type UserVersion = 'free' | 'basic' | 'professional' | 'premium'

4.2 譚<>剞譽€譟･騾ｻ霎<EFBDBB> 笨?譫ｶ譫<EFBDB6>ｮ梧紛

*讓｡蝮玲ｳｨ蜀梧慮逧<EFBFBD>揀髯仙｣ｰ譏趣ｼ?

// 讓｡蝮怜ｮ壻ｹ画磁蜿｣
interface ModuleDefinition {
  id: string
  name: string
  path: string
  requiredVersion?: UserVersion  // <20>識 譚<>剞隕∵ｱ<E288B5>
  // ...
}

*霍ｯ逕ｱ螳亥梱<EFBFBD>?

// RouteGuard.tsx
if (module.requiredVersion && !checkModulePermission(module.requiredVersion)) {
  return <PermissionDenied />
}

*笨?莨倡せ<E580A1>?

• 譚<EFBFBD>剞譯<EFBFBD>楔隶ｾ隶｡螳悟埋
• 譏謎ｺ取黄螻募芦逵溷ｮ櫁ｮ､隸?

*笶?郛ｺ轤ｹ<E8BDA4>?

• 逕ｨ謌ｷ菫｡諱ｯ螳悟<EFBFBD>hardcode
• 豐｡譛牙ｯｹ謗･蜷守ｫｯAPI
• 豐｡譛臥匳蠖<EFBFBD>/逋ｻ蜃ｺUI

---

5. 蟾ｮ霍晏<E99C8D>譫<EFBFBD>

5.1 荳傘RD髴€豎ら噪蟾ｮ霍<EFBDAE>

PRD髴€豎?	蠖灘燕迥ｶ諤?	蟾ｮ霍<EFBFBD>	莨伜<EFBFBD>郤?
遘滓姐邂｡逅<EFBFBD>	笶?譌?	髴€螳梧紛螳樒鴫Tenant菴鍋ｳｻ	P0
*4遘崎ｧ定<EFBFBD>? (SUPER_ADMIN/HOSPITAL_ADMIN/PHARMA_ADMIN/USER)	笶?蜿ｪ譛臥ｮ€蜊瓶ole蟄礼ｬｦ荳?	髴€RBAC菴鍋ｳｻ	P0
蜩∫煙螳壼宛 (Logo/逋ｻ蠖暮｡?	笶?譌?	髴€tenant.config JSONB蟄玲ｮｵ	P0
逋ｻ蠖慕ｳｻ扈<EFBFBD>	笶?譌?	髴€JWT隶､隸∫ｳｻ扈<EFBFBD>	P0
譚<EFBFBD>剞謗ｧ蛻ｶ	笨?蜑咲ｫｯMock / 笶?蜷守ｫｯ譌?	髴€蜷守ｫｯ荳ｭ髣ｴ莉?	P0
Feature Flag	笶?譌?	髴€驟咲ｽｮ陦?譽€譟･騾ｻ霎<EFBDBB>	P0
*霑占是遶? (/admin/*)	笶?譌?	髴€蜈ｨ譁ｰ蠑€蜿?	P0
*譛ｺ譫<EFBFBD>ｫ? (/org/hospital/, /org/pharma/)	笶?譌?	髴€蜈ｨ譁ｰ蠑€蜿?	P1
螳｡隶｡譌･蠢<EFBFBD>	笞<EFBFBD><EFBFBD><EFBFBD> 莉<>IT讓｡蝮<EFBDA1>	髴€蜈ｨ螻€螳｡隶｡邉ｻ扈<EFBFBD>	P1

5.2 譫ｶ譫<EFBDB6>ｱる擇蟾ｮ霍<EFBDAE>

*蠖灘燕譫ｶ譫<EFBFBD>ｼ? 蜊慕畑謌ｷ縲∵裏遘滓姐縲∵裏譚<E8A38F>剞

User (蜊戊｡ｨ)
  竊?
  Projects/KnowledgeBases/... (逶ｴ謗･蜈ｳ閨<EFBDB3> userId)

*逶ｮ譬<EFBFBD>楔譫<EFBFBD>ｼ? 螟夂ｧ滓姐縲ヽBAC縲∵焚謐ｮ髫皮ｦ?

Tenant (遘滓姐)
  竊?
  Department (驛ｨ髣ｨ/遘大ｮ､)
  竊?
  User (逕ｨ謌ｷ) + Role (隗定牡)
  竊?
  Projects/KnowledgeBases/... (tenant_id + user_id)

---

6. 譁ｰPRD髴€豎りｧ｣隸?

6.1 譬ｸ蠢<EFBDB8>ｧ定牡螳壻ｹ会ｼ域擂閾ｪPRD v2.1<EFBFBD>?

隗定牡Code	蠖貞ｱ<EFBFBD>	譚<EFBFBD>剞闌<EFBFBD>峩	URL蜑咲ｼ€	譬ｸ蠢<EFBFBD>′雍｣
SUPER_ADMIN	蟷ｳ蜿ｰ	蜈ｨ螻€謨ｰ謐ｮ	/admin	遘滓姐蠑€騾壹€∝刀迚碁<EFBFBD>鄂ｮ縲￣rompt隹<EFBFBD>ｼ<EFBFBD>
HOSPITAL_ADMIN	蛹ｻ髯｢遘滓姐	譛ｬ髯｢謨ｰ謐ｮ	/org/hospital	遘大ｮ､邂｡逅<EFBFBD>€<EFBFBD><EFBFBD>鬚晏<EFBFBD>驟?
PHARMA_ADMIN	闕ｯ莨∫ｧ滓姐	譛ｬ莨<EFBFBD>｡ｹ逶ｮ	/org/pharma	鬘ｹ逶ｮ逶第而縲，RO邂｡逅<EFBFBD>€∝ｮ｡隶?
USER	莉ｻ諢冗ｧ滓姐	荳ｪ莠ｺ/陲ｫ謗域揀謨ｰ謐?	/app	遘醍<EFBFBD>比ｸ壼苅謫堺ｽ<EFBFBD>

6.2 遘滓姐邀ｻ蝙具ｼ<E585B7>enant Type<70>?

enum TenantType {
  HOSPITAL = 'HOSPITAL',  // 蛹ｻ髯｢螳｢謌ｷ
  PHARMA   = 'PHARMA',    // 闕ｯ莨∝ｮ｢謌ｷ
  JOURNAL  = 'JOURNAL',   // 譛溷<E8AD9B>螳｢謌ｷ
}

6.3 蜩∫煙螳壼宛髴€豎?<3F><>

*URL遲也払<EFBFBD>?

騾夂畑逋ｻ蠖包ｼ喇ttps://app.yizhengxun.com/auth/login
荳灘ｱ樒匳蠖包ｼ喇ttps://app.yizhengxun.com/t/{tenant_code}/login

遘滓姐驟咲ｽｮ<EFBFBD><EFBFBD>SONB<EFBFBD>会ｼ<EFBFBD>

{
  "branding": {
    "logoUrl": "https://oss.../jst_logo.png",
    "loginBackgroundUrl": "https://oss.../jst_bldg.jpg",
    "primaryColor": "#0056b3",
    "welcomeTitle": "蛹嶺ｺｬ遘ｯ豌ｴ貎ｭ蛹ｻ髯?AI 荳ｴ蠎顔ｧ醍<EFBDA7>泌ｹｳ蜿ｰ",
    "welcomeSubTitle": "譎ｺ閭ｽ蛹?ﾂｷ 隗<EFBFBD>激蛹?ﾂｷ 鬮俶譜邇?
  }
}

6.4 譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBDB1>書<EFBFBD>育匳蠖募錘霍ｳ霓ｬ<E99C93>?

function getRedirectPath(user, tenant) {
  if (user.role === 'SUPER_ADMIN') return '/admin/dashboard';
  
  if (user.role === 'TENANT_ADMIN') {
    if (tenant.type === 'HOSPITAL') return '/org/hospital/dashboard';
    if (tenant.type === 'PHARMA')   return '/org/pharma/dashboard';
  }
  
  if (tenant.type === 'JOURNAL') return '/app/rvw/dashboard';
  
  return '/app/dashboard';  // 鮟倩ｮ､<EFBDAE>壽勸騾夂畑謌?
}

---

7. 譫ｶ譫<EFBDB6>ｮｾ隶｡蟒ｺ隶ｮ

7.1 謨ｰ謐ｮ蠎鉄chema隶ｾ隶｡

*7.1.1 platform_schema<6D>亥ｹｳ蜿ｰ譬ｸ蠢<EFBDB8>｡ｨ<EFBDA1>?

*A. tenants 陦? <20><>0<EFBFBD>?

model Tenant {
  id              String    @id @default(uuid())
  name            String                                 // 遘滓姐蜷咲ｧｰ<EFBDA7>亥ｦゑｼ壼圏莠ｬ遘ｯ豌ｴ貎ｭ蛹ｻ髯｢<E9ABAF>?
  code            String    @unique                      // 遘滓姐莉｣遐<EFBDA3>ｼ亥ｦゑｼ嗚st-hospital<61>檎畑莠散RL<52>?
  type            TenantType                             // 遘滓姐邀ｻ蝙具ｼ唏OSPITAL/PHARMA/JOURNAL
  status          String    @default("active")           // active/suspended/expired
  
  // 蜩∫煙驟咲ｽｮ<EFBDBD><EFBDAE>SONB<4E>?
  config          Json      @default("{}")               // branding驟咲ｽｮ縲∵ｨ｡蝮苓ｮ｢髦<EFBDA2>ｭ<EFBFBD>
  
  // 驟埼｢晉ｮ｡逅<EFBDA1>
  tokenQuota      Int?                                   // 諤ｻToken鬚晏ｺｦ
  tokenUsed       Int       @default(0)                  // 蟾ｲ菴ｿ逕ｨToken
  
  // 譌ｶ髣ｴ謌?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  expiresAt       DateTime?                              // 隶｢髦<EFBDA2>芦譛滓慮髣ｴ
  
  // 蜈ｳ邉ｻ
  users           TenantUser[]
  departments     Department[]
  modules         TenantModule[]
  
  @@index([code])
  @@index([type])
  @@index([status])
  @@map("tenants")
  @@schema("platform_schema")
}

enum TenantType {
  HOSPITAL
  PHARMA
  JOURNAL
  
  @@schema("platform_schema")
}

*B. users 陦ｨ謇ｩ螻? <20><>0<EFBFBD>?

model User {
  id              String    @id @default(uuid())
  email           String    @unique
  password        String
  name            String?
  avatarUrl       String?   @map("avatar_url")
  
  // <20><> 螟夂ｧ滓姐謾ｯ謖?
  tenantId        String?   @map("tenant_id")           // 謇€螻樒ｧ滓姐<E6BB93><E5A790>ULL=蟷ｳ蜿ｰ邂｡逅<EFBDA1>遭<EFBFBD><E981AD>
  departmentId    String?   @map("department_id")       // 謇€螻樣Κ髣?遘大ｮ､
  
  // <20><> 隗定牡邉ｻ扈<EFBDBB>
  role            UserRole                               // SUPER_ADMIN/TENANT_ADMIN/USER
  
  // 蜈ｶ莉門ｭ玲ｮｵ菫晄戟荳榊序...
  status          String    @default("active")
  kbQuota         Int       @default(3)
  trialEndsAt     DateTime?
  lastLoginAt     DateTime?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  // 蜈ｳ邉ｻ
  tenant          Tenant?   @relation(fields: [tenantId], references: [id])
  department      Department? @relation(fields: [departmentId], references: [id])
  
  @@index([tenantId])
  @@index([departmentId])
  @@index([role])
  @@map("users")
  @@schema("platform_schema")
}

enum UserRole {
  SUPER_ADMIN      // 蟷ｳ蜿ｰ雜<EFBDB0>ｺｧ邂｡逅<EFBDA1><E98085>?
  TENANT_ADMIN     // 遘滓姐邂｡逅<EFBDA1>遭<EFBFBD>亥現髯｢/闕ｯ莨<EFBDAF>ｼ?
  USER             // 譎ｮ騾夂畑謌ｷ<E8AC8C>亥現逕<E78FBE>/遐皮ｩｶ蜻假ｼ<E58187>
  
  @@schema("platform_schema")
}

*C. tenant_members 陦? <20><>0<EFBFBD>俄恟<E4BF84>?驥<>ｺｳ蜿埼ｦ茨ｼ壽隼蜷堺ｸｺTenantMember

model TenantMember {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  userId          String    @map("user_id")
  role            String                                 // 蝨ｨ隸･遘滓姐荳ｭ逧<EFBDAD>ｧ定牡
  joinedAt        DateTime  @default(now()) @map("joined_at")
  
  tenant          Tenant    @relation(fields: [tenantId], references: [id])
  
  @@unique([tenantId, userId])
  @@map("tenant_members")                                // 隸ｭ荵画峩貂<E5B3A9><E8B282>?
  @@schema("platform_schema")
}

*D. departments 陦? <20><>1<EFBFBD>?

model Department {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  name            String                                 // 遘大ｮ､蜷咲ｧｰ<EFBDA7>亥ｦゑｼ壼ｿ<E5A3BC><EFBDBF>遘托ｼ?
  parentId        String?   @map("parent_id")           // 荳顔ｺｧ遘大ｮ､<EFBDAE>域髪謖∵<E8AC96>大ｽ｢扈捺桷<E68DBA><E6A1B7>
  tokenQuota      Int?      @map("token_quota")         // 遘大ｮ､Token鬚晏ｺｦ
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  tenant          Tenant       @relation(fields: [tenantId], references: [id])
  users           User[]
  parent          Department?  @relation("DepartmentHierarchy", fields: [parentId], references: [id])
  children        Department[] @relation("DepartmentHierarchy")
  
  @@index([tenantId])
  @@map("departments")
  @@schema("platform_schema")
}

*E. feature_flags 陦? <20><>0<EFBFBD>?

model FeatureFlag {
  id              String    @id @default(uuid())
  featureKey      String    @unique @map("feature_key") // 蜉溯<E89C89>譬<EFBFBD>ｯ<EFBFBD>ｼ亥ｦゑｼ嗽se_gpt_5<5F>?
  displayName     String    @map("display_name")
  description     String?
  isEnabled       Boolean   @default(false) @map("is_enabled")
  targetRoles     String[]  @map("target_roles")        // 蜈∬ｮｸ逧<EFBDB8>ｧ定牡蛻苓｡?
  targetTenants   String[]  @default([]) @map("target_tenants") // 蜈∬ｮｸ逧<EFBDB8>ｧ滓姐ID蛻苓｡ｨ
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  @@map("feature_flags")
  @@schema("platform_schema")
}

*F. tenant_modules 陦? <20><>0<EFBFBD>?

model TenantModule {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  moduleCode      String    @map("module_code")         // 讓｡蝮嶺ｻ｣遐<EFBDA3>ｼ<EFBFBD>SL/DC/IIT遲会ｼ<E4BC9A>
  isEnabled       Boolean   @default(true) @map("is_enabled")
  expiresAt       DateTime? @map("expires_at")          // 讓｡蝮苓ｮ｢髦<EFBDA2>芦譛滓慮髣ｴ
  createdAt       DateTime  @default(now())
  
  tenant          Tenant    @relation(fields: [tenantId], references: [id])
  
  @@unique([tenantId, moduleCode])
  @@map("tenant_modules")
  @@schema("platform_schema")
}

*G. tenant_quota_allocations 陦? <20><>0<EFBFBD>解氣?驥<>ｺｳ蜿埼ｦ茨ｼ夂ｲｾ扈<EFBDBE>喧驟埼｢晏<EFBDA2>驟<EFBFBD>

model TenantQuotaAllocation {
  id              Int       @id @default(autoincrement())
  tenantId        String    @map("tenant_id")
  targetType      String    @map("target_type")         // 'DEPARTMENT' | 'USER'
  targetKey       String    @map("target_key")          // DepartmentID 謌?UserID
  limitAmount     BigInt    @map("limit_amount")        // 蛻<><E89BBB>逧Уoken鬚晏ｺｦ
  usedAmount      BigInt    @default(0) @map("used_amount") // 蟾ｲ菴ｿ逕?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  @@unique([tenantId, targetType, targetKey])
  @@index([tenantId])
  @@index([targetType, targetKey])
  @@map("tenant_quota_allocations")
  @@schema("platform_schema")
}

逕ｨ騾費ｼ<EFBFBD> 蛹ｻ髯｢遶ｯ蜿ｯ莉･蟆<EFBDA5>€ｻToken鬚晏ｺｦ蛻<EFBDA6><E89BBB>扈?蠢<><E8A0A2>遘?<3F><>epartment<6E>画<EFBFBD>"蠑<>蛹ｻ逕?<3F><>ser<65>?

7.1.2 admin_schema<6D>郁ｿ占是邂｡逅<EFBDA1>ｼ<EFBFBD>

*H. admin_operation_logs 陦? <20><>1<EFBFBD>俄恟<E4BF84>?驥<>ｺｳ蜿埼ｦ茨ｼ壼｢槫刈module蟄玲ｮｵ

model AdminOperationLog {
  id              Int       @id @default(autoincrement())
  adminId         String    @map("admin_id")
  operationType   String    @map("operation_type")      // CREATE_TENANT/UPDATE_FEATURE_FLAG遲?
  targetType      String    @map("target_type")         // tenant/user/config
  targetId        String    @map("target_id")
  module          String?   @map("module")              // <20><> 謇€螻樊ｨ｡蝮暦ｼ<E69AA6>IT/ASL/邉ｻ扈滄<E68988>鄂ｮ遲会ｼ<E4BC9A>
  beforeData      Json?     @map("before_data")
  afterData       Json?     @map("after_data")
  ipAddress       String?   @map("ip_address")
  userAgent       String?   @map("user_agent")
  createdAt       DateTime  @default(now())
  
  @@index([adminId])
  @@index([operationType])
  @@index([module])                                     // <20><> 闕ｯ莨∫ｫｯ謖画ｨ｡蝮玲衍隸｢
  @@index([createdAt])
  @@map("admin_operation_logs")
  @@schema("admin_schema")
}

7.2 蜷守ｫｯAPI譫ｶ譫<EFBDB6>ｮｾ隶｡

A. 隶､隸∫ｳｻ扈<EFBDBB> <20><>0<EFBFBD>?

*霍ｯ逕ｱ<EFBFBD>? /api/v1/auth/*

// backend/src/platform/auth/routes.ts

POST   /api/v1/auth/register          // 逕ｨ謌ｷ豕ｨ蜀<EFBDA8>
POST   /api/v1/auth/login             // 逋ｻ蠖包ｼ郁ｿ泌屓JWT<57>?
POST   /api/v1/auth/logout            // 逋ｻ蜃ｺ
POST   /api/v1/auth/refresh           // 蛻ｷ譁ｰToken
GET    /api/v1/auth/me                // 闔ｷ蜿門ｽ灘燕逕ｨ謌ｷ菫｡諱ｯ

*JWT Payload扈捺桷<E68DBA>?

interface JWTPayload {
  userId: string
  email: string
  role: UserRole
  tenantId?: string
  tenantType?: TenantType
  exp: number  // 霑<>悄譌ｶ髣ｴ
}

*B. 隶､隸∽ｸｭ髣ｴ莉? <20><>0<EFBFBD>?

// backend/src/common/middleware/auth.ts

/**
 * JWT隶､隸∽ｸｭ髣ｴ莉?
 * 鬪瑚ｯゝoken蟷ｶ蟆<EFBDB6>畑謌ｷ菫｡諱ｯ謖りｽｽ蛻?req.user
 */
export const requireAuth = async (req, res, next) => {
  const token = extractToken(req)
  if (!token) return res.status(401).send({ error: 'Unauthorized' })
  
  try {
    const payload = verifyJWT(token)
    req.user = await prisma.user.findUnique({ where: { id: payload.userId } })
    if (!req.user) return res.status(401).send({ error: 'User not found' })
    next()
  } catch (error) {
    return res.status(401).send({ error: 'Invalid token' })
  }
}

/**
 * 隗定牡譚<E789A1>剞荳ｭ髣ｴ莉?
 * 譽€譟･逕ｨ謌ｷ譏ｯ蜷ｦ蜈ｷ譛画欠螳夊ｧ定<EFBDA7>?
 */
export const requireRole = (...allowedRoles: UserRole[]) => {
  return (req, res, next) => {
    if (!req.user) return res.status(401).send({ error: 'Unauthorized' })
    if (!allowedRoles.includes(req.user.role)) {
      return res.status(403).send({ error: 'Forbidden' })
    }
    next()
  }
}

/**
 * 遘滓姐謨ｰ謐ｮ髫皮ｦｻ荳ｭ髣ｴ莉?
 * 遑ｮ菫晉畑謌ｷ蜿ｪ閭ｽ隶ｿ髣ｮ閾ｪ蟾ｱ遘滓姐逧<E5A790>焚謐?
 */
export const requireTenantAccess = (req, res, next) => {
  if (!req.user) return res.status(401).send({ error: 'Unauthorized' })
  
  // SUPER_ADMIN蜿ｯ莉･隶ｿ髣ｮ謇€譛臥ｧ滓姐謨ｰ謐?
  if (req.user.role === 'SUPER_ADMIN') return next()
  
  // 蜈ｶ莉也畑謌ｷ蜿ｪ閭ｽ隶ｿ髣ｮ閾ｪ蟾ｱ遘滓姐逧<E5A790>焚謐?
  req.tenantId = req.user.tenantId
  next()
}

C. 霑占是邂｡逅<EFBDA1>ｫｯAPI <20><>0<EFBFBD>?

*霍ｯ逕ｱ<EFBFBD>? /api/v1/admin/*

// 遘滓姐邂｡逅<EFBDA1>
POST   /api/v1/admin/tenants                    // 蛻帛ｻｺ遘滓姐
GET    /api/v1/admin/tenants                    // 遘滓姐蛻苓｡ｨ
GET    /api/v1/admin/tenants/:id                // 遘滓姐隸ｦ諠<EFBDA6>
PUT    /api/v1/admin/tenants/:id                // 譖ｴ譁ｰ遘滓姐
DELETE /api/v1/admin/tenants/:id                // 蛻<>髯､遘滓姐

// Feature Flag邂｡逅<EFBDA1>
GET    /api/v1/admin/feature-flags              // 闔ｷ蜿匁園譛宇eature Flag
PUT    /api/v1/admin/feature-flags/:key         // 譖ｴ譁ｰFeature Flag

// 逕ｨ謌ｷ邂｡逅<EFBDA1>
GET    /api/v1/admin/users                      // 蜈ｨ螻€逕ｨ謌ｷ蛻苓｡ｨ
POST   /api/v1/admin/users/:id/assign-tenant    // 蛻<><E89BBB>遘滓姐

*譚<EFBFBD>剞隕∵ｱゑｼ? 蜈ｨ驛ｨ髴€隕?requireRole('SUPER_ADMIN')

D. 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯAPI <20><>1<EFBFBD>?

*霍ｯ逕ｱ<EFBFBD>? /api/v1/org/*

// 蛹ｻ髯｢邂｡逅<EFBDA1>ｫ?
GET    /api/v1/org/hospital/departments         // 遘大ｮ､蛻苓｡ｨ
POST   /api/v1/org/hospital/departments         // 蛻帛ｻｺ遘大ｮ､
GET    /api/v1/org/hospital/members             // 謌仙遭蛻苓｡ｨ
POST   /api/v1/org/hospital/members/import      // 謇ｹ驥丞ｯｼ蜈･謌仙遭

// 闕ｯ莨∫ｮ｡逅<EFBDA1>ｫ?
GET    /api/v1/org/pharma/projects              // 鬘ｹ逶ｮ蛻苓｡ｨ
GET    /api/v1/org/pharma/audit-logs            // 螳｡隶｡譌･蠢<EFBDA5>

*譚<EFBFBD>剞隕∵ｱゑｼ? requireRole('TENANT_ADMIN') + requireTenantAccess

E. 蜈ｬ蠑€API <20><>0<EFBFBD>?

*霍ｯ逕ｱ<EFBFBD>? /api/public/*

// 遘滓姐蜩∫煙驟咲ｽｮ<EFBDBD>域裏髴€逋ｻ蠖包ｼ?
GET    /api/public/tenant-config?code={code}    // 闔ｷ蜿也ｧ滓姐蜩∫煙驟咲ｽｮ

7.3 蜑咲ｫｯ譫ｶ譫<EFBDB6>ｮｾ隶｡

A. 隶､隸∵ｨ｡蝮<EFBDA1> <20><>0<EFBFBD>?

*逶ｮ蠖慕ｻ捺桷<EFBFBD>?

frontend-v2/src/modules/auth/
  笏懌楳笏€ pages/
  笏?  笏懌楳笏€ LoginPage.tsx              # 騾夂畑逋ｻ蠖暮｡?
  笏?  笏懌楳笏€ TenantLoginPage.tsx        # 遘滓姐荳灘ｱ樒匳蠖暮｡ｵ<EFBDA1>亥勘諤∝刀迚鯉ｼ<E9AF89>
  笏?  笏披楳笏€ RegisterPage.tsx           # 豕ｨ蜀碁｡?
  笏懌楳笏€ api/
  笏?  笏披楳笏€ authApi.ts                 # 隶､隸、PI隹<49>畑
  笏懌楳笏€ hooks/
  笏?  笏披楳笏€ useAuth.ts                 # 隶､隸？ook
  笏披楳笏€ routes.tsx                     # 隶､隸∬ｷｯ逕ｱ

*B. 霑占是邂｡逅<EFBDA1>ｫｯ讓｡蝮? <20><>0<EFBFBD>?

*逶ｮ蠖慕ｻ捺桷<EFBFBD>?

frontend-v2/src/modules/admin/
  笏懌楳笏€ pages/
  笏?  笏懌楳笏€ Dashboard.tsx              # 霑占是莉ｪ陦ｨ逶?
  笏?  笏懌楳笏€ TenantManagement/          # 遘滓姐邂｡逅<EFBDA1>
  笏?  笏?  笏懌楳笏€ TenantList.tsx
  笏?  笏?  笏懌楳笏€ TenantCreate.tsx
  笏?  笏?  笏懌楳笏€ TenantEdit.tsx
  笏?  笏?  笏披楳笏€ BrandingConfig.tsx     # 蜩∫煙驟咲ｽｮ
  笏?  笏懌楳笏€ FeatureFlagManagement.tsx  # Feature Flag邂｡逅<EFBDA1>
  笏?  笏披楳笏€ UserManagement.tsx         # 逕ｨ謌ｷ邂｡逅<EFBDA1>
  笏懌楳笏€ api/
  笏?  笏披楳笏€ adminApi.ts
  笏披楳笏€ index.tsx                      # 讓｡蝮怜ｮ壻ｹ<E5A3BB>

*讓｡蝮玲ｳｨ蜀鯉ｼ?

const AdminModule: ModuleDefinition = {
  id: 'admin',
  name: '霑占是邂｡逅<EFBDA1>',
  path: '/admin',
  requiredVersion: undefined,          // 荳榊渕莠思ersion譽€譟?
  requireRole: ['SUPER_ADMIN'],        // <20><> 蝓ｺ莠手ｧ定牡譽€譟?
  component: lazy(() => import('./layouts/AdminLayout')),
}

*C. 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯ讓｡蝮? <20><>1<EFBFBD>?

*逶ｮ蠖慕ｻ捺桷<EFBFBD>?

frontend-v2/src/modules/org/
  笏懌楳笏€ hospital/                      # 蛹ｻ髯｢邂｡逅<EFBDA1>ｫ?
  笏?  笏懌楳笏€ pages/
  笏?  笏?  笏懌楳笏€ Dashboard.tsx
  笏?  笏?  笏懌楳笏€ DepartmentManagement.tsx
  笏?  笏?  笏披楳笏€ MemberManagement.tsx
  笏?  笏披楳笏€ index.tsx
  笏披楳笏€ pharma/                        # 闕ｯ莨∫ｮ｡逅<EFBDA1>ｫ?
      笏懌楳笏€ pages/
      笏?  笏懌楳笏€ Dashboard.tsx
      笏?  笏懌楳笏€ ProjectManagement.tsx
      笏?  笏披楳笏€ AuditLogs.tsx
      笏披楳笏€ index.tsx

---

8. 螳樊命霍ｯ郤ｿ蝗?

8.1 Phase 0<>壼㊥螟<E38AA5>ｷ･菴懶ｼ<E687B6>1螟ｩ<E89E9F><EFBDA9>

*逶ｮ譬<EFBFBD>ｼ? 扈滉ｸ€謨ｰ謐ｮ蠎楢｡ｨ扈捺桷<E68DBA>梧ｸ<E6A2A7>炊蜴<E7828A>彰驕礼<E9A995>?

• *莉ｻ蜉｡1<EFBFBD>? 蜀ｳ遲紋ｿ晉蕗 platform_schema.users 霑俶弍 public.users

  • 蟒ｺ隶ｮ<EFBFBD>壻ｿ晉<EFBFBD>?platform_schema.users<EFBFBD>域眠譫ｶ譫<EFBFBD>ｼ?
  • 霑∫ｧｻ public.users 逧<>紙蜿ｲ謨ｰ謐ｮ蛻ｰ platform_schema.users
  • 蛻<EFBFBD>髯､ public.users 陦?

• *莉ｻ蜉｡2<EFBFBD>? 蛻帛ｻｺ霑∫ｧｻ譁<EFBDBB>｡｣

  • 譴ｳ逅<EFBFBD>園譛我ｸ壼苅讓｡蝮怜ｯｹ User 陦ｨ逧<EFBDA8>ｼ慕畑
  • 蛻ｶ螳壽焚謐ｮ霑∫ｧｻ閼壽悽

8.2 Phase 1<>壽焚謐ｮ蠎鉄chema隶ｾ隶｡<E99AB6>?螟ｩ<E89E9F><EFBDA9>

P0 譬ｸ蠢<EFBDB8>｡ｨ<EFBDA1><EFBDA8>

• *Day 1荳雁壕<E99B81>? 隶ｾ隶｡蟷ｶ蛻帛ｻ?tenants 陦?
• *Day 1荳句壕<E58FA5>? 謇ｩ螻<EFBDA9> users 陦ｨ<E999A6>亥｢槫刈 tenantId, departmentId, role enum<75>?
• *Day 2荳雁壕<E99B81>? 蛻帛ｻｺ tenant_users, feature_flags, tenant_modules 陦?
• *Day 2荳句壕<E58FA5>? 蛻帛ｻｺ Prisma Schema 蟷ｶ霑占｡瑚ｿ∫ｧ?

莠､莉倡黄<EFBFBD><EFBFBD>

• 笨?Prisma Schema螳梧紛螳壻ｹ<E5A3BB>
• 笨?霑∫ｧｻ閼壽悽霑占｡碁€夊ｿ<E5A48A>
• 笨?豬玖ｯ墓焚謐ｮ謠貞<E8ACA0>鬪瑚ｯ<E7919A>

8.3 Phase 2<>壼錘遶ｯ隶､隸∫ｳｻ扈滂ｼ<E6BB82>3螟ｩ<E89E9F><EFBDA9>

• *Day 1<>? 螳樒鴫JWT蟾･蜈ｷ邀?

  • generateToken()
  • verifyToken()
  • refreshToken()

• *Day 2<>? 螳樒鴫隶､隸、PI

  • POST /api/v1/auth/register
  • POST /api/v1/auth/login
  • GET /api/v1/auth/me

• *Day 3<>? 螳樒鴫隶､隸∽ｸｭ髣ｴ莉?

  • requireAuth
  • requireRole
  • requireTenantAccess
  • 蠎皮畑蛻ｰ邇ｰ譛鵜egacy API

莠､莉倡黄<EFBFBD><EFBFBD>

• 笨?螳梧紛逧<E7B49B>ｮ､隸∫ｳｻ扈?
• 笨?謇€譛陰PI蜉<49>荳願ｮ､隸∽ｿ晄侃
• 笨?Postman豬玖ｯ暮€夊ｿ<E5A48A>

8.4 Phase 3<>壼燕遶ｯ隶､隸∝ｯｹ謗･<E8AC97><EFBDA5>2螟ｩ<E89E9F><EFBDA9>

• *Day 1<>? 螳樒鴫逋ｻ蠖暮｡ｵ髱｢

  • LoginPage.tsx
  • useAuth Hook
  • Token蟄伜お<EFBFBD><EFBFBD>ocalStorage<EFBFBD>?

• *Day 2<>? 蟇ｹ謗･譚<EFBDA5>剞譯<E5899E>楔

  • 譖ｿ謐｢PermissionContext荳ｭ逧<EFBFBD>ock謨ｰ謐ｮ
  • 螳樒鴫莉主錘遶ｯ闔ｷ蜿也畑謌ｷ菫｡諱?
  • 螳樒鴫逋ｻ蜃ｺ蜉溯<EFBFBD>

莠､莉倡黄<EFBFBD><EFBFBD>

• 笨?蜿ｯ逕ｨ逧<EFBDA8>匳蠖?逋ｻ蜃ｺ豬∫ｨ<E288AB>
• 笨?蜑咲ｫｯ譚<EFBDAF>剞謗ｧ蛻ｶ逕滓譜

8.5 Phase 4<>夊ｿ占是邂｡逅<EFBDA1>ｫｯMVP<56>?螟ｩ<E89E9F><EFBDA9>

*P0 譬ｸ蠢<EFBDB8>粥閭ｽ<E996AD>?

• *Day 1-2<>? 遘滓姐邂｡逅<EFBDA1>

  • 遘滓姐蛻苓｡ｨ鬘?
  • 蛻帛ｻｺ遘滓姐陦ｨ蜊包ｼ亥渕譛ｬ菫｡諱?遘滓姐邀ｻ蝙具ｼ?
  • 遘滓姐隸ｦ諠<EFBFBD>｡?

• *Day 3<>? 蜩∫煙驟咲ｽｮ

  • Logo荳贋ｼ<EFBFBD>蛻ｰOSS
  • 逋ｻ蠖暮｡ｵ閭梧勹蝗ｾ荳贋ｼ<EFBFBD>
  • 驟咲ｽｮ鬚<EFBFBD>ｧ<EFBFBD>

• *Day 4<>? Feature Flag邂｡逅<EFBDA1>

  • Feature Flag蛻苓｡ｨ
  • 蠑€蜈ｳ蛻<EFBFBD><EFBFBD>?
  • 逶ｮ譬<EFBFBD>ｧ滓姐驟咲ｽｮ

• *Day 5<>? 髮<><E9ABAE>豬玖ｯ<E78E96>

  • 霑占是遶ｯ螳梧紛豬∫ｨ区ｵ玖ｯ?
  • 譚<EFBFBD>剞謗ｧ蛻ｶ豬玖ｯ<EFBFBD>

莠､莉倡黄<EFBFBD><EFBFBD>

• 笨?霑占是邂｡逅<EFBDA1>ｫｯMVP蜿ｯ逕ｨ
• 笨?蜿ｯ莉･蛻帛ｻｺ遘滓姐
• 笨?蜿ｯ莉･驟咲ｽｮ蜩∫煙
• 笨?蜿ｯ莉･邂｡逅<EFBDA1>eature Flag

8.6 Phase 5<>夂ｧ滓姐荳灘ｱ樒匳蠖包ｼ<E58C85>2螟ｩ<E89E9F><EFBDA9>

• *Day 1<>? 螳樒鴫TenantLoginPage

  • 蜉ｨ諤∝刈霓ｽ遘滓姐蜩∫煙驟咲ｽ?
  • 譖ｿ謐｢Logo蜥瑚レ譎ｯ蝗ｾ
  • 蜉ｨ諤∽ｸｻ鬚倩牡

• *Day 2<>? 螳樒鴫譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBDB1>書

  • 逋ｻ蠖募錘譬ｹ謐ｮrole+tenantType霍ｳ霓ｬ
  • 豬玖ｯ穂ｸ榊酔隗定牡逧<EFBFBD>ｷｳ霓ｬ騾ｻ霎<EFBFBD>

莠､莉倡黄<EFBFBD><EFBFBD>

• 笨?遘滓姐荳灘ｱ樒匳蠖暮｡ｵ蜿ｯ逕?
• 笨?URL<52>啻/t/{code}/login` 逕滓譜

8.7 Phase 6<>壽惻譫<E683BB>ｮ｡逅<EFBDA1>ｫｯ<EFBDAB>域潔髴€蠑€蜿托ｼ<E68998>

*P1 蜉溯<E89C89><E6BAAF>亥錘扈ｭ謗呈悄<E59188>会ｼ?

• 蛹ｻ髯｢邂｡逅<EFBFBD>ｫｯ<EFBFBD>夂ｧ大ｮ､邂｡逅<EFBFBD>€∵<EFBFBD>蜻倡ｮ｡逅<EFBFBD>€<EFBFBD><EFBFBD>鬚晏<EFBFBD>驟?
• 闕ｯ莨∫ｮ｡逅<EFBFBD>ｫｯ<EFBFBD>夐｡ｹ逶ｮ逶第而縲∝ｮ｡隶｡譌･蠢?

---

9. 蜈ｳ髞ｮ蜀ｳ遲也<E981B2>?

9.1 謚€譛ｯ蜀ｳ遲?

蜀ｳ遲也<EFBFBD>?	騾蛾｡ｹ	蟒ｺ隶ｮ	逅<EFBFBD>罰
User陦ｨ騾画叫	platform_schema.users vs public.users	笨?platform_schema.users	隨ｦ蜷域眠譫ｶ譫<EFBFBD>ｼ郡chema髫皮ｦｻ貂<EFBFBD>匆
JWT蠎馴€画叫	jsonwebtoken vs jose	笨?jsonwebtoken	謌千<EFBFBD>遞ｳ螳夲ｼ檎､ｾ蛹ｺ豢ｻ霍?
蟇<EFBFBD><EFBFBD>∝刈蟇<EFBFBD>	bcrypt vs argon2	笨?bcrypt	鬘ｹ逶ｮ蟾ｲ譛我ｾ晁ｵ厄ｼ郁ｧ！IT讓｡蝮暦ｼ?
Token蟄伜お	localStorage vs httpOnly Cookie	笨?localStorage	蜑榊錘遶ｯ蛻<EFBFBD>ｦｻ<EFBFBD>瑚ｷｨ蝓溷暑螂ｽ
隗定牡螳壻ｹ画婿蠑<EFBFBD>	蟄礼ｬｦ荳?vs Enum	笨?Prisma Enum	邀ｻ蝙句ｮ牙<EFBFBD><EFBFBD>碁∩蜈肴蕎蜀咎漠隸?

9.2 荳壼苅蜀ｳ遲<EFBDB3>

蜀ｳ遲也<EFBFBD>?	騾蛾｡ｹ	蟒ｺ隶ｮ	逅<EFBFBD>罰
*遘滓姐莉｣遐∝髪荳€諤?	蜈ｨ螻€蜚ｯ荳€ vs 邀ｻ蝙句<E89D99>蜚ｯ荳€	笨?蜈ｨ螻€蜚ｯ荳€	URL /t/{code} 髴€蜈ｨ螻€蜚ｯ荳€
*驛ｨ髣ｨ譬大ｱらｺ?	蝗ｺ螳<EFBFBD>2螻?vs 譌<>髯仙ｱらｺｧ	笨?譌<>髯仙ｱらｺｧ	謾ｯ謖∝､肴揩扈<EFBFBD>ｻ<EFBFBD>楔譫<EFBFBD>
Feature Flag邊貞ｺｦ	遘滓姐郤?vs 逕ｨ謌ｷ郤?	笨?遘滓姐郤?	隨ｦ蜷亥膚荳壽ｨ｡蠑擾ｼ檎ｮ｡逅<EFBFBD>ｮ€蜊?

---

10. 鬟朱勦荳取倦謌?

10.1 謚€譛ｯ鬟朱<E9AC9F>?

鬟朱勦	蠖ｱ蜩<EFBFBD>	郛楢ｧ｣謗ｪ譁ｽ
*邇ｰ譛陰PI譌<EFBFBD>隶､隸?	髴€隕∝<EFBFBD>髱｢謾ｹ騾?	貂占ｿ帛ｼ丞刈蜈･隶､隸<EFBFBD>ｼ御ｼ伜<EFBFBD>菫晄侃謨乗─API
*荳､荳ｪUser陦?	謨ｰ謐ｮ荳堺ｸ€閾?	蟆ｽ蠢ｫ扈滉ｸ€<EFBFBD>檎ｼ門<EFBFBD>霑∫ｧｻ閼壽<EFBFBD>?
遘滓姐謨ｰ謐ｮ髫皮ｦｻ	蜿ｯ閭ｽ豕<EFBFBD>愆謨ｰ謐ｮ	荳･譬ｼ豬玖ｯ<EFBFBD> requireTenantAccess 荳ｭ髣ｴ莉?

10.2 蠑€蜿第倦謌?

謖第<EFBFBD>	髫ｾ蠎ｦ	蠎泌ｯｹ譁ｹ譯<EFBFBD>
JWT隶､隸∫ｳｻ扈<EFBFBD>	荳ｭ遲<EFBFBD>	蜿り€グDJ/BYSY鬘ｹ逶ｮ螳樒鴫
*蜩∫煙蜉ｨ諤∝刈霓?	荳ｭ遲<EFBFBD>	菴ｿ逕ｨCSS蜿倬㍼+OSS蝗ｾ迚ⅡRL
譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBFBD>書	邂€蜊?	蝓ｺ莠屍ole+tenantType逧<65>f-else

---

11. 蠑€蜿題ｵ<E9A18C>ｺ宣怙豎?

11.1 莠ｺ蜉幃怙豎?

• 蜷守ｫｯ蠑€蜿托ｼ<EFBFBD> 1莠?ﾃ<> 10螟ｩ<E89E9F><EFBDA9>hase 0-3<>?
• 蜑咲ｫｯ蠑€蜿托ｼ<EFBFBD> 1莠?ﾃ<> 7螟ｩ<E89E9F><EFBDA9>hase 3-5<>?
• *豬玖ｯ包ｼ? 0.5莠?ﾃ<> 3螟ｩ<E89E9F>磯寔謌先ｵ玖ｯ包ｼ?

*諤ｻ隶｡<EFBFBD>? 郤?0莠ｺ螟ｩ<E89E9F>育ｺｦ3蜻ｨ<E89CBB><EFBDA8>

11.2 謚€譛ｯ萓晁ｵ?

譁ｰ蠅柤pm蛹<EFBFBD>ｼ<EFBFBD>

{
  "dependencies": {
    "jsonwebtoken": "^9.0.0",
    "bcryptjs": "^2.4.3"
  },
  "devDependencies": {
    "@types/jsonwebtoken": "^9.0.0",
    "@types/bcryptjs": "^2.4.2"
  }
}

---

12. 諤ｻ扈<EFBDBB>

12.1 譬ｸ蠢<EFBDB8>ｻ楢ｮｺ

1. 蠖灘燕邉ｻ扈溷ｮ悟<EFBFBD>豐｡譛芽ｮ､隸<EFBFBD>/謗域揀邉ｻ扈<EFBDBB> 笶?
2. 謨ｰ謐ｮ蠎捺怏荳､荳ｪUser陦ｨ<EFBFBD>碁怙扈滉ｸ€ 笞<><E7AC9E><EFBFBD>
3. 蜑咲ｫｯ譚<EFBFBD>剞譯<EFBFBD>楔隶ｾ隶｡螳悟埋<EFBFBD>御ｽ<EFBFBD>ｻ<EFBFBD>ｸｺmock 笞<><E7AC9E><EFBFBD>
4. *遘滓姐菴鍋ｳｻ螳悟<EFBFBD>郛ｺ螟ｱ<EFBFBD>碁怙莉朱峺蠑€蜿? 笶?

12.2 莨伜<E88EA8>郤ｧ蟒ｺ隶?

P0<EFBFBD><EFBFBD>eek 1-2<>会ｼ<E4BC9A> 謳ｭ蟒ｺ蝓ｺ遑€譫ｶ譫<EFBDB6>

• 謨ｰ謐ｮ蠎鉄chema隶ｾ隶｡ + 霑∫ｧｻ
• JWT隶､隸∫ｳｻ扈<EFBFBD>
• 隶､隸∽ｸｭ髣ｴ莉?
• 逋ｻ蠖<EFBFBD>/逋ｻ蜃ｺ蜉溯<E89C89>
• 霑占是邂｡逅<EFBFBD>ｫｯMVP<EFBFBD>育ｧ滓姐邂｡逅?蜩∫煙驟咲ｽｮ<EFBDBD>?

P1<EFBFBD><EFBFBD>eek 3-4<>会ｼ<E4BC9A> 螳悟埋譬ｸ蠢<EFBDB8>粥閭ｽ

• Feature Flag邂｡逅<EFBDA1>
• 遘滓姐荳灘ｱ樒匳蠖暮｡?
• 譛ｺ譫<EFBFBD>ｮ｡逅<EFBFBD>ｫｯ<EFBFBD>亥現髯｢迚茨ｼ<EFBFBD>

P2<EFBFBD><EFBFBD>eek 5+<2B>会ｼ<E4BC9A> 謇ｩ螻募粥閭ｽ

• 譛ｺ譫<EFBFBD>ｮ｡逅<EFBFBD>ｫｯ<EFBFBD>郁艮莨∫沿<EFBFBD><EFBFBD>
• 鬮倡ｺｧ螳｡隶｡譌･蠢<EFBFBD>
• 譚<EFBFBD>剞扈<EFBFBD>ｲ貞ｺｦ謗ｧ蛻?

12.3 荳倶ｸ€豁･陦悟<E999A6>?

1. 笨?**Review譛ｬ謚･蜻?*<2A>檎｡ｮ隶､謚€譛ｯ譁ｹ譯?
2. 笨?**遑ｮ螳壼ｼ€蜿第賜譛?*<2A>亥ｻｺ隶?蜻ｨ蜀ｲ蛻ｺ<E89BBB><EFBDBA>
3. 笨?蜷ｯ蜉ｨPhase 0<EFBFBD>壽焚謐ｮ蠎楢｡ｨ扈滉ｸ€蜥郡chema隶ｾ隶｡
4. 笨?**蟷ｶ陦悟星蜉ｨ蜑咲ｫｯ逋ｻ蠖暮｡ｵ隶ｾ隶?*<2A><>I隶ｾ隶｡蟶茨ｼ<E88CA8>

---

9. <20><> Prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>

9.1 荳ｺ莉€荵<C280>rompt邂｡逅<EFBDA1>弍霑占是邂｡逅<EFBDA1>ｫｯ逧<EFBDAF><E980A7>鬲?

譬ｹ謐ｮ縲?2-騾夂畑閭ｽ蜉帛ｱ<E5B89B>03-Prompt邂｡逅<EFBDA1>ｳｻ扈滉ｸ守<EFBDB8>蠎ｦ鬚<EFBDA6>ｧ郁ｮｾ隶｡譁ｹ譯?md縲具ｼ<E585B7>Prompt邂｡逅<EFBFBD>ｸ肴弍蜿ｯ騾牙粥閭ｽ<EFBFBD>瑚€梧弍霑占是邂｡逅<EFBFBD>ｫｯ蟄伜惠逧<EFBFBD><EFBFBD>ｸ蠢<EFBFBD>炊逕ｱ荵倶ｸ€縲?

*荳壼苅逞帷せ<EFBFBD>?

1. 豬玖ｯ慕識蠅<EFBFBD>裏豕墓ｨ｡諡溽悄螳樊焚謐ｮ

   • ASL逧<EFBFBD>枚迪ｮ遲幃€蛾怙隕?0遽<30>悄螳槫現蟄ｦ隶ｺ譁<EFBDBA>ｪ瑚ｯ∝㊥遑ｮ邇<EFBDAE>
   • DC逧<EFBFBD>焚謐ｮ貂<EFBFBD>ｴ鈴怙隕∫悄螳樒羅蜴<EFBFBD>焚謐ｮ鬪瑚ｯ∵歓蜿匁譜譫?
   • 豬玖ｯ慕識蠅<EFBFBD>噪蛛<EFBFBD>焚謐ｮ螳悟<EFBFBD>譌<EFBFBD>豕墓垓髴ｲPrompt逧<EFBFBD>悄螳樣琉鬚?

2. *蠖灘燕蠑€蜿第ｵ∫ｨ区譜邇<EFBFBD>栫菴?

   • 豈乗ｬ｡隹<EFBFBD>紛Prompt髴€隕<EFBFBD>ｼ壽隼莉｣遐?竊?commit 竊?驛ｨ鄂ｲ 竊?遲牙ｾ<E78999>AE驥榊星<E6A68A>育ｺｦ5蛻<35>帖<EFBFBD>?
   • 荳ｴ蠎贋ｸ灘ｮｶ譌<EFBFBD>豕募盾荳手ｰ<EFBFBD>ｯ包ｼ井ｻ紋ｻｬ荳堺ｼ壼<EFBFBD>莉｣遐<EFBFBD>ｼ?
   • 譌<EFBFBD>豕募ｿｫ騾溯ｿｭ莉｣<EFBFBD>御ｸ€螟ｩ蜿ｪ閭ｽ蟆晁ｯ募<EFBFBD>谺?

3. *逕滉ｺｧ莠区腐鬟朱勦鬮?

   • 荳€譌ｦPrompt蜿醍沿<EFBFBD>梧園譛臥畑謌ｷ遶句叉蜿怜ｽｱ蜩<EFBFBD>
   • 豐｡譛臥<EFBFBD>蠎ｦ譛ｺ蛻ｶ<EFBFBD>梧裏豕募ｰ剰激蝗ｴ鬪瑚ｯ<EFBFBD>

*隗｣蜀ｳ譁ｹ譯茨ｼ夂函莠ｧ邇ｯ蠅<EFBFBD><EFBFBD>蠎ｦ鬚<EFBFBD>ｧ?

隹<EFBFBD>ｯ戊€<EFBFBD>ｼ€蜷ｯDebug讓｡蠑丞錘<EFBFBD>瑚<EFBFBD>蜉ｨ霍ｯ逕ｱ蛻ｰDRAFT迚<EFBFBD>rompt<EFBFBD>碁ｪ瑚ｯ<EFBFBD>€夊ｿ<EFBFBD>錘荳€髞ｮ蜿大ｸ<EFBFBD>ｸｺACTIVE迚医€?

9.2 Prompt邂｡逅<EFBDA1>ｳｻ扈滓楔譫<E6A594>

*9.2.1 謨ｰ謐ｮ蠎楢ｮｾ隶｡<E99AB6><EFBDA1>apability_schema<6D>?

// --- Prompt Management System ---

model PromptTemplate {
  id          Int       @id @default(autoincrement())
  code        String    @unique                       // 蜚ｯ荳€譬<C280>ｯ<EFBFBD>: 'ASL_SCREENING_TitleAbstract'
  name        String                                  // 莠ｺ邀ｻ蜿ｯ隸ｻ蜷咲ｧｰ
  module      String                                  // 謇€螻樊ｨ｡蝮? ASL, DC, AIA, IIT
  description String?
  variables   Json?                                   // 鬚<>悄蜿倬㍼: ["title", "abstract"]
  
  versions    PromptVersion[]

  createdAt   DateTime  @default(now()) @map("created_at")
  updatedAt   DateTime  @updatedAt @map("updated_at")

  @@map("prompt_templates")
  @@schema("capability_schema")
}

model PromptVersion {
  id          Int            @id @default(autoincrement())
  templateId  Int            @map("template_id")
  version     Int                                     // 迚域悽蜿?1, 2, 3...
  content     String         @db.Text                 // Prompt蜀<74>ｮｹ<EFBDAE>域髪謖？andlebars讓｡譚ｿ<E8AD9A>?
  modelConfig Json?                                   // {"temperature": 0.1, "model": "deepseek-chat"}
  status      PromptStatus   @default(DRAFT)
  changelog   String?                                 // 菫ｮ謾ｹ隸ｴ譏<EFBDB4>
  createdBy   String?        @map("created_by")      // <20>剥 螳｡隶｡<E99AB6>夊ｰ∽ｿｮ謾ｹ逧?
  
  template    PromptTemplate @relation(fields: [templateId], references: [id])

  createdAt   DateTime       @default(now()) @map("created_at")

  @@map("prompt_versions")
  @@schema("capability_schema")
  
  @@index([templateId, status])                       // 鬮倬｢第衍隸｢莨伜喧
}

enum PromptStatus {
  DRAFT       // 闕臥ｨｿ<EFBDA8>井ｻ<E4BA95>ebug讓｡蠑丞庄隗<E5BA84>ｼ?
  ACTIVE      // 郤ｿ荳顔函謨茨ｼ磯ｻ倩ｮ､<EFBDAE><EFBDA4>
  ARCHIVED    // 蠖呈｡｣
  
  @@schema("capability_schema")
}

*9.2.2 譁ｰ蠅櫁ｧ定牡荳取揀髯?

隗定牡	譚<EFBFBD>剞 Code	隸ｴ譏<EFBFBD>
SUPER_ADMIN	prompt:*	雜<EFBFBD>ｺｧ邂｡逅<EFBFBD>遭諡･譛画園譛画揀髯?
PROMPT_ENGINEER <20><>	prompt:view prompt:edit prompt:debug prompt:publish	<EFBFBD>識 譬ｸ蠢<EFBFBD>ｧ定牡<EFBFBD>壻ｸ謎ｸ啀rompt蟾･遞句ｸ域<EFBFBD>荳ｴ蠎贋ｸ灘ｮｶ
HOSPITAL_ADMIN	-	譛ｺ譫<EFBFBD>ｮ｡逅<EFBFBD>遭譌<EFBFBD>Prompt譚<EFBFBD>剞
PHARMA_ADMIN	-	闕ｯ莨∫ｮ｡逅<EFBFBD>遭譌<EFBFBD>Prompt譚<EFBFBD>剞

*譚<EFBFBD>剞隸ｦ隗｣<EFBFBD>?

• prompt:view - 譟･逵輝rompt蛻苓｡ｨ蜥悟紙蜿ｲ迚域<E8BF9A>?
• prompt:edit - 蛻帛ｻｺ/菫ｮ謾ｹDRAFT迚域悽
• prompt:debug - 箝?譬ｸ蠢<EFBDB8>ｼ壼ｼ€蜷ｯ隹<EFBDAF>ｯ墓ｨ｡蠑?
• prompt:publish - 蜿大ｸゥRAFT荳ｺACTIVE

*9.2.3 譬ｸ蠢<EFBDB8>橿譛ｯ螳樒<E89EB3>?

A. PromptService<63>亥錘遶ｯ<E981B6><EFBDAF>

// backend/src/common/capabilities/prompt/prompt.service.ts

export class PromptService {
  private debugUsers = new Set<string>();              // 蜀<>ｭ伜ｭ伜お隹<E3818A>ｯ慕畑謌ｷ
  private activeCache = new Map<string, string>();     // ACTIVE迚域悽郛灘ｭ<E78198>
  
  /**
   * 隶ｾ鄂ｮ隹<EFBDAE>ｯ墓ｨ｡蠑<EFBDA1>
   * @requires Permission: prompt:debug
   */
  async setDebugMode(userId: string, enabled: boolean) {
    if (enabled) {
      this.debugUsers.add(userId);
    } else {
      this.debugUsers.delete(userId);
    }
  }
  
  /**
   * 闔ｷ蜿鳳rompt<70>域<EFBFBD>ｸ蠢<EFBDB8><E8A0A2>蠎ｦ騾ｻ霎托ｼ?
   */
  async get(code: string, variables: any, userId: string): Promise<string> {
    // 1. 譽€譟･譏ｯ蜷ｦ荳ｺ隹<EFBDBA>ｯ戊€?
    if (this.debugUsers.has(userId)) {
      // 莨伜<E88EA8>闔ｷ蜿縫RAFT迚域悽
      const draft = await this.getDraftVersion(code);
      if (draft) {
        return this.render(draft.content, variables);
      }
    }
    
    // 2. 譎ｮ騾夂畑謌ｷ謌匁裏DRAFT譌ｶ<E8AD8C>瑚執蜿泡CTIVE迚域悽
    let active = this.activeCache.get(code);
    if (!active) {
      const version = await prisma.promptVersion.findFirst({
        where: { 
          template: { code },
          status: 'ACTIVE'
        },
        orderBy: { version: 'desc' }
      });
      active = version?.content || this.getFallback(code);
      this.activeCache.set(code, active);
    }
    
    return this.render(active, variables);
  }
  
  /**
   * Postgres LISTEN/NOTIFY 辜ｭ譖ｴ譁?
   */
  async initHotReload() {
    const client = await pool.connect();
    await client.query('LISTEN prompt_update');
    
    client.on('notification', (msg) => {
      console.log('[PromptService] Received update:', msg.payload);
      this.activeCache.clear();  // 貂<>ｩｺ郛灘ｭ<E78198>
    });
  }
}

B. API遶ｯ轤ｹ隶ｾ隶｡

譁ｹ豕<EFBFBD>	霍ｯ蠕<EFBFBD>	譚<EFBFBD>剞	謠剰ｿｰ
GET	/api/admin/prompts	prompt:view	闔ｷ蜿匁園譛臼rompt讓｡譚ｿ蛻苓｡ｨ
GET	/api/admin/prompts/:id	prompt:view	闔ｷ蜿冶ｯｦ諠<EFBFBD>ｼ亥性蜴<EFBFBD>彰迚域悽<EFBFBD>?
POST	/api/admin/prompts/draft	prompt:edit	菫晏ｭ倩拷遞ｿ<EFBFBD>育函謌先眠迚域悽<EFBFBD>茎tatus=DRAFT<46>?
POST	/api/admin/prompts/publish	prompt:publish	蜿大ｸ<EFBFBD>沿譛ｬ<EFBFBD><EFBFBD>RAFT竊但CTIVE<EFBFBD>瑚ｧｦ蜿鮮OTIFY<EFBFBD>?
POST	/api/admin/prompts/debug	prompt:debug	*蠑€蜈ｳ隹<EFBFBD>ｯ墓ｨ｡蠑?

*C. 蜑咲ｫｯ蜈ｨ螻€隹<C280>ｯ募ｼ€蜈?

// frontend-v2/src/modules/admin/components/PromptDebugSwitch.tsx

export const PromptDebugSwitch = () => {
  const { hasPermission } = usePermission();
  const [debugMode, setDebugMode] = useState(false);
  
  // <20>白 譚<>剞謗ｧ蛻ｶ<E89BBB>壻ｻ<E5A3BB>rompt:debug譚<67>剞逕ｨ謌ｷ蜿ｯ隗<EFBDAF>
  if (!hasPermission('prompt:debug')) {
    return null;
  }
  
  const handleToggle = async (enabled: boolean) => {
    await api.post('/api/admin/prompts/debug', { enabled });
    setDebugMode(enabled);
  };
  
  return (
    <>
      <Switch 
        checked={debugMode} 
        onChange={handleToggle}
        checkedChildren="<22>菅 隹<>ｯ墓ｨ｡蠑<EFBDA1>"
        unCheckedChildren="逕滉ｺｧ讓｡蠑<EFBDA1>"
      />
      {debugMode && (
        <Alert
          type="warning"
          message="笞<><E7AC9E><EFBFBD> 隹<>ｯ墓ｨ｡蠑丞ｷｲ蠑€蜷ｯ<E89CB7>壽お蠖灘燕豁｣蝨ｨ菴ｿ逕ｨ闕臥ｨｿ迚茨ｼ<E88CA8>RAFT<46>画署遉ｺ隸<EFBDBA>"
          banner
          closable={false}
        />
      )}
    </>
  );
};

9.3 豸牙所逧<E68980>園譛我ｸ壼苅讓｡蝮?

譬ｹ謐ｮ譁<EFBFBD>｡｣隨?闃ゑｼ碁怙隕￣rompt邂｡逅<EFBDA1>噪讓｡蝮暦ｼ<E69AA6>

讓｡蝮<EFBFBD>	譬ｸ蠢<EFBFBD>惻譎ｯ	Prompt螟肴揩蠎?	莨伜<EFBFBD>郤?
ASL	譬<EFBFBD>｢俶遭隕∝<EFBFBD>遲帙€∝<EFBFBD>譁<EFBFBD>､咲ｭ帙€∬ｯ∵紺蜷域<EFBFBD>?	箝絶ｭ絶ｭ絶ｭ絶ｭ?	P0
DC	Tool B謠仙叙縲ゝool C貂<43>ｴ励€∝<C280>遯∵｣€豬?	箝絶ｭ絶ｭ絶ｭ絶ｭ?	P0
IIT	雍ｨ謗ｧ譽€譟･縲∵э蝗ｾ隸<EFBFBD>悪縲∵衍隸｢逕滓<EFBFBD>?	箝絶ｭ絶ｭ絶ｭ絶ｭ?	P1
PKB	RAG髣ｮ遲斐€∵音螟<EFBFBD>炊髦<EFBFBD>ｯｻ	箝絶ｭ絶ｭ絶ｭ<EFBFBD>	P1
AIA	10+譎ｺ閭ｽ菴薙€∵э蝗ｾ隸<EFBDBE><E99AB8>?	箝絶ｭ絶ｭ?	P2
RVW	隗<EFBFBD>激諤ｧ譽€譟?	箝絶ｭ絶ｭ?	P2

9.4 Prompt邂｡逅<EFBDA1>ｼ€蜿題ｮ｡蛻?

Phase 0: 蝓ｺ遑€隶ｾ譁ｽ<E8AD81>?螟ｩ<E89E9F><EFBDA9>

1. 蛻帛ｻｺcapability_schema逧Пrompt逶ｸ蜈ｳ陦?
2. 豺ｻ蜉<EFBFBD>prompt:*譚<EFBFBD>剞蛻ｰplatform_schema.permissions
3. 蛻帛ｻｺPROMPT_ENGINEER隗定牡
4. 螳樒鴫PromptService譬ｸ蠢<EFBFBD>€ｻ霎<EFBFBD>

Phase 1: 霑占是遶ｯMVP<56>?螟ｩ<E89E9F><EFBDA9>

1. 蜑咲ｫｯ邂｡逅<EFBFBD>阜髱｢<EFBFBD>亥<EFBFBD>陦ｨ縲∫ｼ冶ｾ大勣縲∫沿譛ｬ蜴<EFBFBD>彰<EFBFBD><EFBFBD>
2. 蜈ｨ螻€隹<EFBFBD>ｯ募ｼ€蜈ｳ扈<EFBFBD>ｻ?
3. 闕臥ｨｿ菫晏ｭ<EFBFBD>/蜿大ｸ<E5A4A7>粥閭ｽ

Phase 2: 荳壼苅讓｡蝮玲磁蜈･<E89C88>磯囂荳壼苅蠑€蜿托ｼ<E68998>

• ASL遲幃€画ｨ｡蝮苓ｰ<EFBFBD>畑promptService.get()
• DC謨ｰ謐ｮ貂<EFBFBD>ｴ玲ｨ｡蝮苓ｰ<EFBFBD>畑promptService.get()
• 蜈ｶ莉匁ｨ｡蝮玲潔髴€謗･蜈･

9.5 螳牙<E89EB3>荳朱｣取<EFBDA3>?

1. 譚<EFBFBD>剞髫皮ｦｻ

   • 荳･譬ｼ譽€譟･prompt:debug譚<EFBFBD>剞<EFBFBD>碁亟豁｢譎ｮ騾夂畑謌ｷ隸ｯ蜈･隹<EFBFBD>ｯ墓ｨ｡蠑?
   • 隹<EFBFBD>ｯ墓ｨ｡蠑冗憾諤∝ｭ伜お蝨ｨ蜀<EFBFBD>ｭ假ｼ育畑謌ｷ逋ｻ蜃ｺ閾ｪ蜉ｨ螟ｱ謨茨ｼ<EFBFBD>

2. 螳｡隶｡譌･蠢<EFBFBD>

   • PromptVersion.createdBy隶ｰ蠖穂ｿｮ謾ｹ莠?
   • AdminOperationLog隶ｰ蠖募書蟶<EFBFBD>｡御ｸｺ

3. 蜈懷ｺ墓惻蛻ｶ

   • 莉｣遐∽ｸｭ菫晉蕗Hardcoded Prompt菴應ｸｺ邉ｻ扈溽ｺｧ蜈懷ｺ?
   • 謨ｰ謐ｮ蠎捺衍隸｢螟ｱ雍･譌ｶ霑泌屓鮟倩ｮ､迚域悽

---

10. <20><> 蜿埼ｦ磯㊦郤ｳ隸ｴ譏<EFBDB4>

10.1 驥<>ｺｳ逧<EFBDB3><E980A7>髞ｮ蟒ｺ隶?

蝓ｺ莠弱€?2-騾夂畑閭ｽ蜉帛ｱ<E5B89B>10-譚<>剞菴鍋ｳｻ譴ｳ逅<EFBDB3>渚鬥井ｸ惹ｿｮ豁｣蟒ｺ隶?md縲具ｼ御ｻ･荳句ｻｺ隶ｮ蟾ｲ謨ｴ蜷亥芦譛ｬ譁<EFBDAC>｡｣<EFBDA1><EFBDA3>

笨?*1. 蠅槫刈TenantQuotaAllocation陦ｨ<E999A6><EFBDA8>0<EFBFBD>?

*蜴溷屏<EFBFBD>? PRD譏守｡ｮ隕∵ｱょ現髯｢遶ｯ謖臥ｧ大ｮ､/荳ｪ莠ｺ蛻<EFBDBA><E89BBB>驟埼｢<E59FBC>

*螳樊命<EFBFBD>? 蟾ｲ蝨ｨ7.1.1遶<EFBFBD>闃よ眠蠅杼tenant_quota_allocations`陦?

model TenantQuotaAllocation {
  targetType  String  // 'DEPARTMENT' | 'USER'
  targetKey   String  // DepartmentID 謌?UserID
  limitAmount BigInt  // 蛻<><E89BBB>逧<EFBFBD>｢晏ｺ?
  usedAmount  BigInt  // 蟾ｲ菴ｿ逕?
}

笨?*2. 陦ｨ蜷肴隼荳ｺTenantMember<65><72>1<EFBFBD>?

*蜴溷屏<EFBFBD>? "Member"隸ｭ荵牙ｼｺ隹<EFBDBA>ｻ<EFBFBD>ｻ<EFBFBD><EFBDBB>邉ｻ<E98289>?User"騾壼ｸｸ謖<EFBDB8>匳蠖戊ｴｦ蜿ｷ螳樔ｽ?

*螳樊命<EFBFBD>? 蟾ｲ蟆<EFBDB2>TenantUser謾ｹ荳ｺTenantMember`

笨?*3. 螳｡隶｡譌･蠢怜｢槫刈module蟄玲ｮｵ<EFBDAE><EFBDB5>1<EFBFBD>?

*蜴溷屏<EFBFBD>? 闕ｯ莨∫ｫｯ髴€隕∵衍隸｢IIT讓｡蝮嶺ｸ灘ｱ樊律蠢暦ｼ<E69AA6>DA 21 CFR Part 11蜷郁ｧ<E98381>ｼ?

*螳樊命<EFBFBD>? 蟾ｲ蝨ｨAdminOperationLog陦ｨ蠅槫刈module蟄玲ｮｵ蜥檎ｴ｢蠑?

笨?*4. Prompt蟾･遞句喧譚<E596A7>剞<EFBFBD><E5899E>0<EFBFBD>?

*蜴溷屏<EFBFBD>? 霑占是邂｡逅<EFBDA1>ｫｯ譬ｸ蠢<EFBDB8>粥閭?

*螳樊命<EFBFBD>? 蟾ｲ蝨ｨ隨?遶<>螳梧紛隶ｾ隶｡Prompt邂｡逅<EFBDA1>ｳｻ扈<EFBDBB>

笨?*5. 雜<>ｺｧ邂｡逅<EFBDA1>遭遘榊ｭ先焚謐ｮ<E8AC90><EFBDAE>0<EFBFBD>?

*蜴溷屏<EFBFBD>? 蜷ｦ蛻咏ｳｻ扈滉ｸ顔ｺｿ蜷取裏豕戊ｿ帛<EFBDBF>蜷主<E89CB7>?

*螳樊命<EFBFBD>? 蟆<>惠Phase 0螳樒鴫Prisma Seed閼壽悽

笨?*6. Phase 0蝗樊ｻ壽婿譯茨ｼ<E88CA8>0<EFBFBD>?

*蜴溷屏<EFBFBD>? 謨ｰ謐ｮ螳牙<E89EB3>蝓ｺ譛ｬ蜴溷<E89CB4>

*螳樊命<EFBFBD>? 霑∫ｧｻ閼壽悽蟆<E682BD><E89F86>驥榊多蜷港public.users荳ｺpublic.users_backup`<60>御ｿ晉<EFBDBF>?蜻?

笨?*7. 遘滓姐驟咲ｽｮAPI郛灘ｭ假ｼ<E58187>1<EFBFBD>?

*蜴溷屏<EFBFBD>? 豈丈ｸｪ逕ｨ謌ｷ謇灘ｼ€逋ｻ蠖暮｡ｵ驛ｽ莨夊ｰ<E5A48A>畑<EFBFBD>碁ｫ伜ｹｶ蜿台ｸ矩怙隕∫ｼ灘ｭ?

*螳樊命<EFBFBD>? 蟆<>惠螳樊命譌ｶ豺ｻ蜉<EFBDBB>Cache-Control: public, max-age=3600

10.2 蜷守ｻｭ謾ｹ霑帛ｻｺ隶ｮ

莉･荳句ｻｺ隶ｮ證ゆｸ榊惠MVP髦ｶ谿ｵ螳樊命<EFBFBD>御ｽ<EFBFBD><EFBFBD>蜈･謚€譛ｯ蛟ｺ蜉｡貂<EFBFBD>黒<EFBFBD>?

<EFBFBD>売 *1. JWT螳牙<E89EB3>諤ｧ<E8ABA4><EFBDA7>2<EFBFBD>?

*蟒ｺ隶ｮ<EFBFBD>? 菴ｿ逕ｨHttpOnly Cookie譖ｿ莉｣localStorage

*逅<EFBFBD>罰<EFBFBD>? localStorage螳ｹ譏灘女XSS謾ｻ蜃ｻ

*隶｡蛻抵ｼ? 蝨ｨ闕ｯ莨∫ｫｯ荳顔ｺｿ蜑搾ｼ磯怙譖ｴ鬮伜ｮ牙<EFBDAE>諤ｧ<E8ABA4>牙ｮ樊命

<EFBFBD>売 *2. Prisma Extension螟夂ｧ滓姐髫皮ｦｻ<EFBDA6><EFBDBB>1<EFBFBD>?

*蟒ｺ隶ｮ<EFBFBD>? 蝨ｨORM螻ょｼｺ蛻ｶ蜉<EFBDB6>蜈･tenantId霑<EFBFBD>ｻ､

*逅<EFBFBD>罰<EFBFBD>? 髦ｲ豁｢蠑€蜿台ｺｺ蜻伜ｿ倩ｮｰ蝨ｨController螻ょ刈荳ｭ髣ｴ莉?

*隶｡蛻抵ｼ? Phase 2蠑募<E8A091>

const prismaExtended = prisma.$extends({
  query: {
    $allModels: {
      async findMany({ args, query }) {
        args.where = { ...args.where, tenantId: currentTenantId };
        return query(args);
      }
    }
  }
});

10.3 蜿埼ｦ郁ｴｨ驥剰ｯ<E589B0>ｻｷ

*諤ｻ菴楢ｯ<EFBFBD>ｼｰ<EFBFBD>? 莨倡ｧ€ 箝絶ｭ絶ｭ絶ｭ絶ｭ?

• 笨?9譚｡蟒ｺ隶ｮ荳ｭ<E88DB3>?譚｡遶句叉驥<E58F89>ｺｳ<EFBDBA><EFBDB3>2譚｡郤ｳ蜈･蜷守ｻｭ隶｡蛻?
• 笨?蜿醍鴫莠<E9B4AB><E88EA0>鬚晏<E9AC9A>驟肴ｨ｡蝙狗噪隶ｾ隶｡郛ｺ髯ｷ<E9ABAF><EFBDB7>ritical<61>?
• 笨?蠑ｺ隹<EFBDBA>ｺ<EFBFBD>rompt邂｡逅<EFBDA1>噪譬ｸ蠢<EFBDB8>慍菴?
• 笨?謠仙<E8ACA0>莠<EFBFBD>ｮ樒畑逧<E79591>ｷ･遞句ｮ櫁ｷｵ蟒ｺ隶ｮ<E99AB6>亥屓貊壽婿譯医€∫ｧ榊ｭ先焚謐ｮ<E8AC90><EFBDAE>

*扈楢ｮｺ<EFBFBD>? 譁<>｡｣雍ｨ驥城ｫ假ｼ碁｣朱勦蜿ｯ謗ｧ<E8AC97>?*蜿ｯ莉･蠑€蟋句ｼ€蜿?*縲?

---

謚･蜻雁ｮ梧ｯ輔€ょ㊥螟<EFBFBD>･ｽ蠑€蟋句ｼ€蜿台ｺ<EFBFBD>雛<EFBFBD><EFBFBD> <20>噫