AIclinicalresearch/docs/03-业务模块/ADMIN-运营管理端/00-系统设计/00-权限与角色体系梳理报告_v1.0.md

# **AIclinicalresearch 譚<>剞荳手ｧ定牡菴鍋ｳｻ譴ｳ逅<EFBDB3>冠蜻?*

> **譁<>｡｣迚域悽<E59F9F>?* v1.1<EFBFBD>域紛蜷<EFBFBD>rompt邂｡逅<EFBFBD>怙豎ゑｼ<EFBFBD>  
> **蛻帛ｻｺ譌･譛滂ｼ?* 2026-01-11  
> **譛€蜷取峩譁ｰ<E8AD81><EFBDB0>** 2026-01-11  
> **菴懆€<E68786>ｼ<EFBFBD>** AI譫ｶ譫<EFBDB6>ｸ? 
> **逶ｮ逧<EFBDAE>ｼ?* 邉ｻ扈滓€ｧ譴ｳ逅<EFBDB3>ｽ灘燕譚<E78795>剞螳樒鴫迥ｶ蜀ｵ<E89C80>御ｸｺ霑占是邂｡逅<EFBDA1>ｫｯ蜥梧惻譫<E683BB>ｮ｡逅<EFBDA1>ｫｯ蠑€蜿大★蜃<E29885>､<EFBFBD>  
> **蜿俶峩隸ｴ譏趣ｼ?* 謨ｴ蜷亥渚鬥亥ｻｺ隶ｮ + Prompt邂｡逅<EFBDA1>ｳｻ扈滄怙豎?

---

## <20>搭 逶ｮ蠖<EFBDAE>

1. [蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫疹(#1-蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫?
2. [謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅<EFBDB3>(#2-謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅?
3. [蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>(#3-蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>)
4. [蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>(#4-蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>)
5. [蟾ｮ霍晏<E99C8D>譫疹(#5-蟾ｮ霍晏<E99C8D>譫<EFBFBD>)
6. [譁ｰPRD髴€豎りｧ｣隸ｻ](#6-譁ｰprd髴€豎りｧ｣隸?
7. [譫ｶ譫<EFBFBD>ｮｾ隶｡蟒ｺ隶ｮ](#7-譫ｶ譫<EFBDB6>ｮｾ隶｡蟒ｺ隶ｮ)
8. [螳樊命霍ｯ郤ｿ蝗ｾ](#8-螳樊命霍ｯ郤ｿ蝗?
9. [<5B><> Prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>(#9-prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>)
10. [<5B><> 蜿埼ｦ磯㊦郤ｳ隸ｴ譏讃(#10-蜿埼ｦ磯㊦郤ｳ隸ｴ譏<EFBDB4>)

---

## 1. 蠖灘燕邉ｻ扈溽憾諤∝<E8ABA4>譫?

### 1.1 譬ｸ蠢<EFBDB8>書邇ｰ <20>剥

**笨?蟾ｲ譛牙渕遑€**<EFBFBD>?
- 謨ｰ謐ｮ蠎捺怏蝓ｺ遑€逧Фser陦ｨ<E999A6><EFBDA8>platform_schema.users` 蜥?`public.users`荳､荳ｪ迚域悽<E59F9F>?
- 譛牙渕譛ｬ逧вole蟄玲ｮｵ<EFBDAE>磯ｻ倩ｮ､蛟ｼ<E89B9F><EFBDBC>"user"<22>?
- 蜑咲ｫｯ譛画揀髯先｡<E58588>楔<EFBFBD><E6A594>PermissionContext`<60>会ｼ御ｽ?*莉<>ock謨ｰ謐ｮ**
- 蜷守ｫｯ**螳悟<E89EB3>豐｡譛芽ｮ､隸<EFBDA4>/謗域揀邉ｻ扈<EFBDBB>**

**笶?郛ｺ螟ｱ蜈ｳ髞ｮ閭ｽ蜉<EFBDBD>**<EFBFBD>?
1. **豐｡譛臥匳蠖<E58CB3>/豕ｨ蜀窟PI**
2. **豐｡譛雨WT隶､隸∽ｸｭ髣ｴ莉?*
3. **豐｡譛臥ｧ滓姐(Tenant)菴鍋ｳｻ**
4. **豐｡譛芽ｧ定牡譚<E789A1>剞邉ｻ扈<EFBDBB>(RBAC)**
5. **豐｡譛宇eature Flag謗ｧ蛻ｶ**
6. **豐｡譛牙ｮ｡隶｡譌･蠢礼ｳｻ扈<EFBDBB>**

**<EFBFBD>識 蠖灘燕迥ｶ諤?*<2A>?
- 邉ｻ扈溷､<E6BAB7>ｺ<EFBFBD>**蜊墓ｵ玖ｯ戊ｴｦ蜿?*髦ｶ谿ｵ
- 謇€譛陰PI驛ｽ譏ｯ**譌<>隶､隸√€∵裏驩ｴ譚<EFBDB4>**迥ｶ諤?
- 蜑咲ｫｯ譚<EFBDAF>剞謗ｧ蛻ｶ譏?*郤ｯ螻慕､ｺ諤?*逧<>ock螳樒鴫

---

## 2. 謨ｰ謐ｮ蠎灘ｱる擇譴ｳ逅?

### 2.1 蠖灘燕User陦ｨ扈捺<E68988>?

#### **platform_schema.users** 笨?譁ｰ譫ｶ譫<EFBDB6>ｼ<EFBFBD>risma螳壻ｹ会ｼ?

```prisma
model User {
  id          String    @id @default(uuid())
  email       String    @unique
  password    String
  name        String?
  avatarUrl   String?   @map("avatar_url")
  role        String    @default("user")          // 笞<><E7AC9E><EFBFBD> 邂€蜊募ｭ礼ｬｦ荳ｲ<E88DB3>御ｸ榊､溽畑
  status      String    @default("active")
  kbQuota     Int       @default(3)
  kbUsed      Int       @default(0)
  trialEndsAt DateTime? @map("trial_ends_at")
  isTrial     Boolean   @default(true)
  lastLoginAt DateTime? @map("last_login_at")
  createdAt   DateTime  @default(now())
  updatedAt   DateTime  @updatedAt
  
  @@schema("platform_schema")
}
```

#### **public.users** 笶?譌ｧ陦ｨ<E999A6>亥紙蜿ｲ驕礼蕗<E7A4BC><E89597>

```prisma
model users {
  id            String
  email         String @unique
  password      String
  name          String?
  avatar_url    String?
  role          String @default("user")       // 笞<><E7AC9E><EFBFBD> 蜷梧<E89CB7>ｷ邂€蜊?
  status        String @default("active")
  kb_quota      Int @default(3)
  kb_used       Int @default(0)
  // ... 蜈ｶ莉門ｭ玲ｮｵ
  
  @@schema("public")
}
```

**笞<><E7AC9E><EFBFBD> 髣ｮ鬚假ｼ?*
- 荳､荳ｪUser陦ｨ蟷ｶ蟄假ｼ悟多蜷堺ｸ堺ｸ€閾ｴ<E996BE><EFBDB4>sers vs User<65>?
- `role`蟄玲ｮｵ莉<EFBFBD>ｸｺ蟄礼ｬｦ荳ｲ<EFBFBD>梧裏enum郤ｦ譚<EFBFBD>
- **豐｡譛臥ｧ滓姐蜈ｳ閨泌ｭ玲ｮｵ<EFBDAE><EFBDB5>enantId<49>?*
- **豐｡譛蛾Κ髣ｨ蟄玲ｮｵ<EFBDAE><EFBDB5>epartment<6E>?*
- **豐｡譛画揀髯宣<E9ABAF>鄂ｮ蟄玲ｮｵ**

### 2.2 郛ｺ螟ｱ逧<EFBDB1><E980A7>ｸ蠢<EFBDB8>｡ｨ

譬ｹ謐ｮPRD髴€豎ゑｼ碁怙隕∵眠蠅樔ｻ･荳玖｡ｨ<EFBFBD>?

| 陦ｨ蜷<EFBDA8> | Schema菴咲ｽｮ | 逕ｨ騾?| 莨伜<E88EA8>郤?|
|------|-----------|------|--------|
| **tenants** | platform_schema | 遘滓姐荳ｻ陦ｨ<E999A6>亥現髯｢縲∬艮莨√€∵悄蛻奇ｼ<E5A587> | P0 |
| **tenant_users** | platform_schema | 遘滓姐-逕ｨ謌ｷ蜈ｳ閨碑｡?| P0 |
| **departments** | platform_schema | 驛ｨ髣ｨ/遘大ｮ､陦?| P1 |
| **feature_flags** | platform_schema | Feature Flag驟咲ｽｮ | P0 |
| **tenant_modules** | platform_schema | 遘滓姐隶｢髦<EFBDA2>ｨ｡蝮鈴<E89DAE>鄂ｮ | P0 |
| **tenant_quotas** | platform_schema | 遘滓姐驟埼｢晉ｮ｡逅<EFBDA1> | P1 |
| **admin_operation_logs** | admin_schema | 霑占是謫堺ｽ懈律蠢<E5BE8B> | P1 |

**豕ｨ諢擾ｼ?* 蠖灘燕譛我ｸ€荳ｪ`AdminLog`陦ｨ蝨ｨ`public`schema<EFBFBD>御ｽ<EFBFBD>ｸ榊ｮ梧紛縲?

### 2.3 蟾ｲ譛臥噪螳｡隶｡譌･蠢?

**IIT讓｡蝮礼噪螳｡隶｡譌･蠢?* 笨?<3F>亥庄蜿り€<E3828A>ｼ会ｼ?

```prisma
model IitAuditLog {
  id          String    @id @default(uuid())
  projectId   String
  userId      String
  actionType  String
  entityType  String
  entityId    String
  details     Json?
  traceId     String
  createdAt   DateTime  @default(now())
  
  @@schema("iit_schema")
}
```

**蜿ｯ螟咲畑諤ｧ<E8ABA4><EFBDA7>** 笨?譫ｶ譫<EFBDB6>ｮｾ隶｡莨倡ｧ€<EFBDA7>悟庄菴應ｸｺ蜈ｨ螻€螳｡隶｡譌･蠢礼噪蜿り€<E3828A>€?

---

## 3. 蜷守ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>

### 3.1 隶､隸∫ｳｻ扈溽憾諤?笶?**譛ｪ螳樒<E89EB3>?*

**謳懃ｴ｢扈捺棡<E68DBA>?* 
- 笶?豐｡譛画伽蛻ｰ `/api/auth/login` 謌?`/api/auth/register`
- 笶?豐｡譛雨WT逕滓<E98095>/鬪瑚ｯ∝ｷ･蜈ｷ
- 笶?豐｡譛芽ｮ､隸∽ｸｭ髣ｴ莉ｶ<E88E89>亥ｦ?`requireAuth`<EFBFBD>?

**蟇ｹ豈泌<E8B188>莉夜｡ｹ逶ｮ**<EFBFBD>井ｻ残odebase_search扈捺棡<EFBFBD>会ｼ<EFBFBD>
- ODJ鬘ｹ逶ｮ譛牙ｮ梧紛逧Пassport JWT隶､隸<EFBDA4> 笨?
- BYSY鬘ｹ逶ｮ譛雨WT隶､隸∽ｸｭ髣ｴ莉?笨?
- **譛ｬ鬘ｹ逶ｮ<E980B6>壼ｮ悟<EFBDAE>遨ｺ逋ｽ** 笶?

### 3.2 謗域揀邉ｻ扈溽憾諤?笶?**譛ｪ螳樒<E89EB3>?*

**郛ｺ螟ｱ蜀<EFBDB1>ｮｹ<EFBDAE>?*
- 笶?豐｡譛芽ｧ定牡譽€譟･荳ｭ髣ｴ莉ｶ<E88E89>亥ｦ<E4BAA5> `requireRole(['admin'])`<EFBFBD>?
- 笶?豐｡譛画揀髯先丐蟆<E4B890>｡ｨ<EFBDA1><EFBDA8>OLE_PERMISSIONS<4E>?
- 笶?豐｡譛宇eature Flag譽€譟･騾ｻ霎<EFBDBB>

**蠖ｱ蜩搾ｼ?*
- 謇€譛陰PI遶ｯ轤ｹ驛ｽ譏ｯ蜈ｬ蠑€逧<C280>ｼ梧裏譚<E8A38F>剞菫晄<E88FAB>?
- 譌<>豕募玄蛻<E78E84>ｮ｡逅<EFBDA1>遭蜥梧勸騾夂畑謌?
- 譌<>豕募ｮ樒鴫螟夂ｧ滓姐謨ｰ謐ｮ髫皮ｦ?

### 3.3 蠖灘燕API扈捺桷

**Legacy Routes** (譌<>隶､隸?<3F>?

```
/api/v1/aia/*     - AI譎ｺ閭ｽ髣ｮ遲費ｼ域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>
/api/v1/pkb/*     - 荳ｪ莠ｺ遏･隸<EFBDA5>ｺ難ｼ域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>
/api/v1/rvw/*     - 遞ｿ莉ｶ螳｡譟･<E8AD9F>域裏譚<E8A38F>剞譽€譟･<E8AD9F><EFBDA5>
```

**髣ｮ鬚假ｼ?*
- 莉ｻ菴穂ｺｺ驛ｽ蜿ｯ莉･隶ｿ髣ｮ莉ｻ菴慕畑謌ｷ逧<EFBDB7>焚謐?
- 豐｡譛<EFBDA1> `userId` 驩ｴ譚<EFBDB4>€ｻ霎<EFBDBB>
- 豐｡譛臥ｧ滓姐謨ｰ謐ｮ髫皮ｦｻ

---

## 4. 蜑咲ｫｯ譚<EFBDAF>剞螳樒鴫譴ｳ逅<EFBDB3>

### 4.1 譚<>剞譯<E5899E>楔蟄伜惠 笨?菴<>ｻ<EFBFBD>ｸｺMock

**譁<>ｻｶ菴咲ｽｮ<EFBDBD>?* `frontend-v2/src/framework/permission/PermissionContext.tsx`

**譬ｸ蠢<EFBDB8>ｻ｣遐<EFBDA3>ｼ?*

```typescript
// 笞<><E7AC9E><EFBFBD> 遑ｬ郛也<E9839B>∽ｸｺ譛€鬮俶揀髯撰ｼ御ｻ<E5BEA1>ｾ帛ｼ€蜿第ｵ玖ｯ?
const MOCK_USER: UserInfo = {
  id: 'test-user-001',
  name: '豬玖ｯ慕<EFBDAF>皮ｩｶ蜻?,
  email: 'test@example.com',
  version: 'premium',  // <20>争 遑ｬ郛也<E9839B>?
  avatar: null,
  isTrial: false,
}

// 譚<>剞譽€譟･蜃ｽ謨ｰ<E8ACA8>亥渕莠散serVersion遲臥ｺｧ<EFBDBA>?
const checkModulePermission = (requiredVersion?: UserVersion): boolean => {
  if (!user) return false
  if (!requiredVersion) return true
  return checkVersionLevel(user.version, requiredVersion)
}
```

**UserVersion螳壻ｹ会ｼ?*

```typescript
// framework/permission/types.ts
export type UserVersion = 'free' | 'basic' | 'professional' | 'premium'
```

### 4.2 譚<>剞譽€譟･騾ｻ霎<EFBDBB> 笨?譫ｶ譫<EFBDB6>ｮ梧紛

**讓｡蝮玲ｳｨ蜀梧慮逧<E685AE>揀髯仙｣ｰ譏趣ｼ?*

```typescript
// 讓｡蝮怜ｮ壻ｹ画磁蜿｣
interface ModuleDefinition {
  id: string
  name: string
  path: string
  requiredVersion?: UserVersion  // <20>識 譚<>剞隕∵ｱ<E288B5>
  // ...
}
```

**霍ｯ逕ｱ螳亥梱<E4BAA5>?*

```typescript
// RouteGuard.tsx
if (module.requiredVersion && !checkModulePermission(module.requiredVersion)) {
  return <PermissionDenied />
}
```

**笨?莨倡せ<E580A1>?*
- 譚<>剞譯<E5899E>楔隶ｾ隶｡螳悟埋
- 譏謎ｺ取黄螻募芦逵溷ｮ櫁ｮ､隸?

**笶?郛ｺ轤ｹ<E8BDA4>?*
- 逕ｨ謌ｷ菫｡諱ｯ螳悟<E89EB3>hardcode
- 豐｡譛牙ｯｹ謗･蜷守ｫｯAPI
- 豐｡譛臥匳蠖<E58CB3>/逋ｻ蜃ｺUI

---

## 5. 蟾ｮ霍晏<E99C8D>譫<EFBFBD>

### 5.1 荳傘RD髴€豎ら噪蟾ｮ霍<EFBDAE>

| PRD髴€豎?| 蠖灘燕迥ｶ諤?| 蟾ｮ霍<EFBDAE> | 莨伜<E88EA8>郤?|
|---------|---------|------|--------|
| **遘滓姐邂｡逅<EFBDA1>** | 笶?譌?| 髴€螳梧紛螳樒鴫Tenant菴鍋ｳｻ | P0 |
| **4遘崎ｧ定<EFBDA7>?* (SUPER_ADMIN/HOSPITAL_ADMIN/PHARMA_ADMIN/USER) | 笶?蜿ｪ譛臥ｮ€蜊瓶ole蟄礼ｬｦ荳?| 髴€RBAC菴鍋ｳｻ | P0 |
| **蜩∫煙螳壼宛** (Logo/逋ｻ蠖暮｡? | 笶?譌?| 髴€tenant.config JSONB蟄玲ｮｵ | P0 |
| **逋ｻ蠖慕ｳｻ扈<EFBDBB>** | 笶?譌?| 髴€JWT隶､隸∫ｳｻ扈<EFBDBB> | P0 |
| **譚<>剞謗ｧ蛻ｶ** | 笨?蜑咲ｫｯMock / 笶?蜷守ｫｯ譌?| 髴€蜷守ｫｯ荳ｭ髣ｴ莉?| P0 |
| **Feature Flag** | 笶?譌?| 髴€驟咲ｽｮ陦?譽€譟･騾ｻ霎<EFBDBB> | P0 |
| **霑占是遶?* (/admin/*) | 笶?譌?| 髴€蜈ｨ譁ｰ蠑€蜿?| P0 |
| **譛ｺ譫<EFBDBA>ｫ?* (/org/hospital/*, /org/pharma/*) | 笶?譌?| 髴€蜈ｨ譁ｰ蠑€蜿?| P1 |
| **螳｡隶｡譌･蠢<EFBDA5>** | 笞<><E7AC9E><EFBFBD> 莉<>IT讓｡蝮<EFBDA1> | 髴€蜈ｨ螻€螳｡隶｡邉ｻ扈<EFBDBB> | P1 |

### 5.2 譫ｶ譫<EFBDB6>ｱる擇蟾ｮ霍<EFBDAE>

**蠖灘燕譫ｶ譫<EFBDB6>ｼ?* 蜊慕畑謌ｷ縲∵裏遘滓姐縲∵裏譚<E8A38F>剞
```
User (蜊戊｡ｨ)
  竊?
  Projects/KnowledgeBases/... (逶ｴ謗･蜈ｳ閨<EFBDB3> userId)
```

**逶ｮ譬<EFBDAE>楔譫<E6A594>ｼ?* 螟夂ｧ滓姐縲ヽBAC縲∵焚謐ｮ髫皮ｦ?
```
Tenant (遘滓姐)
  竊?
  Department (驛ｨ髣ｨ/遘大ｮ､)
  竊?
  User (逕ｨ謌ｷ) + Role (隗定牡)
  竊?
  Projects/KnowledgeBases/... (tenant_id + user_id)
```

---

## 6. 譁ｰPRD髴€豎りｧ｣隸?

### 6.1 譬ｸ蠢<EFBDB8>ｧ定牡螳壻ｹ会ｼ域擂閾ｪPRD v2.1<EFBFBD>?

| 隗定牡Code | 蠖貞ｱ<E8B29E> | 譚<>剞闌<E5899E>峩 | URL蜑咲ｼ€ | 譬ｸ蠢<EFBDB8>′雍｣ |
|---------|------|---------|---------|---------|
| **SUPER_ADMIN** | 蟷ｳ蜿ｰ | 蜈ｨ螻€謨ｰ謐ｮ | /admin | 遘滓姐蠑€騾壹€∝刀迚碁<E8BF9A>鄂ｮ縲￣rompt隹<74>ｼ<EFBFBD> |
| **HOSPITAL_ADMIN** | 蛹ｻ髯｢遘滓姐 | 譛ｬ髯｢謨ｰ謐ｮ | /org/hospital | 遘大ｮ､邂｡逅<EFBDA1>€<EFBFBD><C280>鬚晏<E9AC9A>驟?|
| **PHARMA_ADMIN** | 闕ｯ莨∫ｧ滓姐 | 譛ｬ莨<EFBDAC>｡ｹ逶ｮ | /org/pharma | 鬘ｹ逶ｮ逶第而縲，RO邂｡逅<EFBDA1>€∝ｮ｡隶?|
| **USER** | 莉ｻ諢冗ｧ滓姐 | 荳ｪ莠ｺ/陲ｫ謗域揀謨ｰ謐?| /app | 遘醍<E98198>比ｸ壼苅謫堺ｽ<E5A0BA> |

### 6.2 遘滓姐邀ｻ蝙具ｼ<E585B7>enant Type<70>?

```typescript
enum TenantType {
  HOSPITAL = 'HOSPITAL',  // 蛹ｻ髯｢螳｢謌ｷ
  PHARMA   = 'PHARMA',    // 闕ｯ莨∝ｮ｢謌ｷ
  JOURNAL  = 'JOURNAL',   // 譛溷<E8AD9B>螳｢謌ｷ
}
```

### 6.3 蜩∫煙螳壼宛髴€豎?<3F><>

**URL遲也払<E4B99F>?*
```
騾夂畑逋ｻ蠖包ｼ喇ttps://app.yizhengxun.com/auth/login
荳灘ｱ樒匳蠖包ｼ喇ttps://app.yizhengxun.com/t/{tenant_code}/login
```

**遘滓姐驟咲ｽｮ<EFBDBD><EFBDAE>SONB<4E>会ｼ<E4BC9A>**

```json
{
  "branding": {
    "logoUrl": "https://oss.../jst_logo.png",
    "loginBackgroundUrl": "https://oss.../jst_bldg.jpg",
    "primaryColor": "#0056b3",
    "welcomeTitle": "蛹嶺ｺｬ遘ｯ豌ｴ貎ｭ蛹ｻ髯?AI 荳ｴ蠎顔ｧ醍<EFBDA7>泌ｹｳ蜿ｰ",
    "welcomeSubTitle": "譎ｺ閭ｽ蛹?ﾂｷ 隗<EFBFBD>激蛹?ﾂｷ 鬮俶譜邇?
  }
}
```

### 6.4 譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBDB1>書<EFBFBD>育匳蠖募錘霍ｳ霓ｬ<E99C93>?

```typescript
function getRedirectPath(user, tenant) {
  if (user.role === 'SUPER_ADMIN') return '/admin/dashboard';
  
  if (user.role === 'TENANT_ADMIN') {
    if (tenant.type === 'HOSPITAL') return '/org/hospital/dashboard';
    if (tenant.type === 'PHARMA')   return '/org/pharma/dashboard';
  }
  
  if (tenant.type === 'JOURNAL') return '/app/rvw/dashboard';
  
  return '/app/dashboard';  // 鮟倩ｮ､<EFBDAE>壽勸騾夂畑謌?
}
```

---

## 7. 譫ｶ譫<EFBDB6>ｮｾ隶｡蟒ｺ隶ｮ

### 7.1 謨ｰ謐ｮ蠎鉄chema隶ｾ隶｡

#### **7.1.1 platform_schema<6D>亥ｹｳ蜿ｰ譬ｸ蠢<EFBDB8>｡ｨ<EFBDA1>?*

**A. tenants 陦?* <20><>0<EFBFBD>?

```prisma
model Tenant {
  id              String    @id @default(uuid())
  name            String                                 // 遘滓姐蜷咲ｧｰ<EFBDA7>亥ｦゑｼ壼圏莠ｬ遘ｯ豌ｴ貎ｭ蛹ｻ髯｢<E9ABAF>?
  code            String    @unique                      // 遘滓姐莉｣遐<EFBDA3>ｼ亥ｦゑｼ嗚st-hospital<61>檎畑莠散RL<52>?
  type            TenantType                             // 遘滓姐邀ｻ蝙具ｼ唏OSPITAL/PHARMA/JOURNAL
  status          String    @default("active")           // active/suspended/expired
  
  // 蜩∫煙驟咲ｽｮ<EFBDBD><EFBDAE>SONB<4E>?
  config          Json      @default("{}")               // branding驟咲ｽｮ縲∵ｨ｡蝮苓ｮ｢髦<EFBDA2>ｭ<EFBFBD>
  
  // 驟埼｢晉ｮ｡逅<EFBDA1>
  tokenQuota      Int?                                   // 諤ｻToken鬚晏ｺｦ
  tokenUsed       Int       @default(0)                  // 蟾ｲ菴ｿ逕ｨToken
  
  // 譌ｶ髣ｴ謌?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  expiresAt       DateTime?                              // 隶｢髦<EFBDA2>芦譛滓慮髣ｴ
  
  // 蜈ｳ邉ｻ
  users           TenantUser[]
  departments     Department[]
  modules         TenantModule[]
  
  @@index([code])
  @@index([type])
  @@index([status])
  @@map("tenants")
  @@schema("platform_schema")
}

enum TenantType {
  HOSPITAL
  PHARMA
  JOURNAL
  
  @@schema("platform_schema")
}
```

**B. users 陦ｨ謇ｩ螻?* <20><>0<EFBFBD>?

```prisma
model User {
  id              String    @id @default(uuid())
  email           String    @unique
  password        String
  name            String?
  avatarUrl       String?   @map("avatar_url")
  
  // <20><> 螟夂ｧ滓姐謾ｯ謖?
  tenantId        String?   @map("tenant_id")           // 謇€螻樒ｧ滓姐<E6BB93><E5A790>ULL=蟷ｳ蜿ｰ邂｡逅<EFBDA1>遭<EFBFBD><E981AD>
  departmentId    String?   @map("department_id")       // 謇€螻樣Κ髣?遘大ｮ､
  
  // <20><> 隗定牡邉ｻ扈<EFBDBB>
  role            UserRole                               // SUPER_ADMIN/TENANT_ADMIN/USER
  
  // 蜈ｶ莉門ｭ玲ｮｵ菫晄戟荳榊序...
  status          String    @default("active")
  kbQuota         Int       @default(3)
  trialEndsAt     DateTime?
  lastLoginAt     DateTime?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  // 蜈ｳ邉ｻ
  tenant          Tenant?   @relation(fields: [tenantId], references: [id])
  department      Department? @relation(fields: [departmentId], references: [id])
  
  @@index([tenantId])
  @@index([departmentId])
  @@index([role])
  @@map("users")
  @@schema("platform_schema")
}

enum UserRole {
  SUPER_ADMIN      // 蟷ｳ蜿ｰ雜<EFBDB0>ｺｧ邂｡逅<EFBDA1><E98085>?
  TENANT_ADMIN     // 遘滓姐邂｡逅<EFBDA1>遭<EFBFBD>亥現髯｢/闕ｯ莨<EFBDAF>ｼ?
  USER             // 譎ｮ騾夂畑謌ｷ<E8AC8C>亥現逕<E78FBE>/遐皮ｩｶ蜻假ｼ<E58187>
  
  @@schema("platform_schema")
}
```

**C. tenant_members 陦?* <20><>0<EFBFBD>俄恟<E4BF84>?驥<>ｺｳ蜿埼ｦ茨ｼ壽隼蜷堺ｸｺTenantMember

```prisma
model TenantMember {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  userId          String    @map("user_id")
  role            String                                 // 蝨ｨ隸･遘滓姐荳ｭ逧<EFBDAD>ｧ定牡
  joinedAt        DateTime  @default(now()) @map("joined_at")
  
  tenant          Tenant    @relation(fields: [tenantId], references: [id])
  
  @@unique([tenantId, userId])
  @@map("tenant_members")                                // 隸ｭ荵画峩貂<E5B3A9><E8B282>?
  @@schema("platform_schema")
}
```

**D. departments 陦?* <20><>1<EFBFBD>?

```prisma
model Department {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  name            String                                 // 遘大ｮ､蜷咲ｧｰ<EFBDA7>亥ｦゑｼ壼ｿ<E5A3BC><EFBDBF>遘托ｼ?
  parentId        String?   @map("parent_id")           // 荳顔ｺｧ遘大ｮ､<EFBDAE>域髪謖∵<E8AC96>大ｽ｢扈捺桷<E68DBA><E6A1B7>
  tokenQuota      Int?      @map("token_quota")         // 遘大ｮ､Token鬚晏ｺｦ
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  tenant          Tenant       @relation(fields: [tenantId], references: [id])
  users           User[]
  parent          Department?  @relation("DepartmentHierarchy", fields: [parentId], references: [id])
  children        Department[] @relation("DepartmentHierarchy")
  
  @@index([tenantId])
  @@map("departments")
  @@schema("platform_schema")
}
```

**E. feature_flags 陦?* <20><>0<EFBFBD>?

```prisma
model FeatureFlag {
  id              String    @id @default(uuid())
  featureKey      String    @unique @map("feature_key") // 蜉溯<E89C89>譬<EFBFBD>ｯ<EFBFBD>ｼ亥ｦゑｼ嗽se_gpt_5<5F>?
  displayName     String    @map("display_name")
  description     String?
  isEnabled       Boolean   @default(false) @map("is_enabled")
  targetRoles     String[]  @map("target_roles")        // 蜈∬ｮｸ逧<EFBDB8>ｧ定牡蛻苓｡?
  targetTenants   String[]  @default([]) @map("target_tenants") // 蜈∬ｮｸ逧<EFBDB8>ｧ滓姐ID蛻苓｡ｨ
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  @@map("feature_flags")
  @@schema("platform_schema")
}
```

**F. tenant_modules 陦?* <20><>0<EFBFBD>?

```prisma
model TenantModule {
  id              String    @id @default(uuid())
  tenantId        String    @map("tenant_id")
  moduleCode      String    @map("module_code")         // 讓｡蝮嶺ｻ｣遐<EFBDA3>ｼ<EFBFBD>SL/DC/IIT遲会ｼ<E4BC9A>
  isEnabled       Boolean   @default(true) @map("is_enabled")
  expiresAt       DateTime? @map("expires_at")          // 讓｡蝮苓ｮ｢髦<EFBDA2>芦譛滓慮髣ｴ
  createdAt       DateTime  @default(now())
  
  tenant          Tenant    @relation(fields: [tenantId], references: [id])
  
  @@unique([tenantId, moduleCode])
  @@map("tenant_modules")
  @@schema("platform_schema")
}
```

**G. tenant_quota_allocations 陦?* <20><>0<EFBFBD>解氣?驥<>ｺｳ蜿埼ｦ茨ｼ夂ｲｾ扈<EFBDBE>喧驟埼｢晏<EFBDA2>驟<EFBFBD>

```prisma
model TenantQuotaAllocation {
  id              Int       @id @default(autoincrement())
  tenantId        String    @map("tenant_id")
  targetType      String    @map("target_type")         // 'DEPARTMENT' | 'USER'
  targetKey       String    @map("target_key")          // DepartmentID 謌?UserID
  limitAmount     BigInt    @map("limit_amount")        // 蛻<><E89BBB>逧Уoken鬚晏ｺｦ
  usedAmount      BigInt    @default(0) @map("used_amount") // 蟾ｲ菴ｿ逕?
  createdAt       DateTime  @default(now())
  updatedAt       DateTime  @updatedAt
  
  @@unique([tenantId, targetType, targetKey])
  @@index([tenantId])
  @@index([targetType, targetKey])
  @@map("tenant_quota_allocations")
  @@schema("platform_schema")
}
```

**逕ｨ騾費ｼ<E8B2BB>** 蛹ｻ髯｢遶ｯ蜿ｯ莉･蟆<EFBDA5>€ｻToken鬚晏ｺｦ蛻<EFBDA6><E89BBB>扈?蠢<><E8A0A2>遘?<3F><>epartment<6E>画<EFBFBD>"蠑<>蛹ｻ逕?<3F><>ser<65>?

#### **7.1.2 admin_schema<6D>郁ｿ占是邂｡逅<EFBDA1>ｼ<EFBFBD>**

**H. admin_operation_logs 陦?* <20><>1<EFBFBD>俄恟<E4BF84>?驥<>ｺｳ蜿埼ｦ茨ｼ壼｢槫刈module蟄玲ｮｵ

```prisma
model AdminOperationLog {
  id              Int       @id @default(autoincrement())
  adminId         String    @map("admin_id")
  operationType   String    @map("operation_type")      // CREATE_TENANT/UPDATE_FEATURE_FLAG遲?
  targetType      String    @map("target_type")         // tenant/user/config
  targetId        String    @map("target_id")
  module          String?   @map("module")              // <20><> 謇€螻樊ｨ｡蝮暦ｼ<E69AA6>IT/ASL/邉ｻ扈滄<E68988>鄂ｮ遲会ｼ<E4BC9A>
  beforeData      Json?     @map("before_data")
  afterData       Json?     @map("after_data")
  ipAddress       String?   @map("ip_address")
  userAgent       String?   @map("user_agent")
  createdAt       DateTime  @default(now())
  
  @@index([adminId])
  @@index([operationType])
  @@index([module])                                     // <20><> 闕ｯ莨∫ｫｯ謖画ｨ｡蝮玲衍隸｢
  @@index([createdAt])
  @@map("admin_operation_logs")
  @@schema("admin_schema")
}
```

### 7.2 蜷守ｫｯAPI譫ｶ譫<EFBDB6>ｮｾ隶｡

#### **A. 隶､隸∫ｳｻ扈<EFBDBB>** <20><>0<EFBFBD>?

**霍ｯ逕ｱ<E98095>?* `/api/v1/auth/*`

```typescript
// backend/src/platform/auth/routes.ts

POST   /api/v1/auth/register          // 逕ｨ謌ｷ豕ｨ蜀<EFBDA8>
POST   /api/v1/auth/login             // 逋ｻ蠖包ｼ郁ｿ泌屓JWT<57>?
POST   /api/v1/auth/logout            // 逋ｻ蜃ｺ
POST   /api/v1/auth/refresh           // 蛻ｷ譁ｰToken
GET    /api/v1/auth/me                // 闔ｷ蜿門ｽ灘燕逕ｨ謌ｷ菫｡諱ｯ
```

**JWT Payload扈捺桷<E68DBA>?*

```typescript
interface JWTPayload {
  userId: string
  email: string
  role: UserRole
  tenantId?: string
  tenantType?: TenantType
  exp: number  // 霑<>悄譌ｶ髣ｴ
}
```

#### **B. 隶､隸∽ｸｭ髣ｴ莉?* <20><>0<EFBFBD>?

```typescript
// backend/src/common/middleware/auth.ts

/**
 * JWT隶､隸∽ｸｭ髣ｴ莉?
 * 鬪瑚ｯゝoken蟷ｶ蟆<EFBDB6>畑謌ｷ菫｡諱ｯ謖りｽｽ蛻?req.user
 */
export const requireAuth = async (req, res, next) => {
  const token = extractToken(req)
  if (!token) return res.status(401).send({ error: 'Unauthorized' })
  
  try {
    const payload = verifyJWT(token)
    req.user = await prisma.user.findUnique({ where: { id: payload.userId } })
    if (!req.user) return res.status(401).send({ error: 'User not found' })
    next()
  } catch (error) {
    return res.status(401).send({ error: 'Invalid token' })
  }
}

/**
 * 隗定牡譚<E789A1>剞荳ｭ髣ｴ莉?
 * 譽€譟･逕ｨ謌ｷ譏ｯ蜷ｦ蜈ｷ譛画欠螳夊ｧ定<EFBDA7>?
 */
export const requireRole = (...allowedRoles: UserRole[]) => {
  return (req, res, next) => {
    if (!req.user) return res.status(401).send({ error: 'Unauthorized' })
    if (!allowedRoles.includes(req.user.role)) {
      return res.status(403).send({ error: 'Forbidden' })
    }
    next()
  }
}

/**
 * 遘滓姐謨ｰ謐ｮ髫皮ｦｻ荳ｭ髣ｴ莉?
 * 遑ｮ菫晉畑謌ｷ蜿ｪ閭ｽ隶ｿ髣ｮ閾ｪ蟾ｱ遘滓姐逧<E5A790>焚謐?
 */
export const requireTenantAccess = (req, res, next) => {
  if (!req.user) return res.status(401).send({ error: 'Unauthorized' })
  
  // SUPER_ADMIN蜿ｯ莉･隶ｿ髣ｮ謇€譛臥ｧ滓姐謨ｰ謐?
  if (req.user.role === 'SUPER_ADMIN') return next()
  
  // 蜈ｶ莉也畑謌ｷ蜿ｪ閭ｽ隶ｿ髣ｮ閾ｪ蟾ｱ遘滓姐逧<E5A790>焚謐?
  req.tenantId = req.user.tenantId
  next()
}
```

#### **C. 霑占是邂｡逅<EFBDA1>ｫｯAPI** <20><>0<EFBFBD>?

**霍ｯ逕ｱ<E98095>?* `/api/v1/admin/*`

```typescript
// 遘滓姐邂｡逅<EFBDA1>
POST   /api/v1/admin/tenants                    // 蛻帛ｻｺ遘滓姐
GET    /api/v1/admin/tenants                    // 遘滓姐蛻苓｡ｨ
GET    /api/v1/admin/tenants/:id                // 遘滓姐隸ｦ諠<EFBDA6>
PUT    /api/v1/admin/tenants/:id                // 譖ｴ譁ｰ遘滓姐
DELETE /api/v1/admin/tenants/:id                // 蛻<>髯､遘滓姐

// Feature Flag邂｡逅<EFBDA1>
GET    /api/v1/admin/feature-flags              // 闔ｷ蜿匁園譛宇eature Flag
PUT    /api/v1/admin/feature-flags/:key         // 譖ｴ譁ｰFeature Flag

// 逕ｨ謌ｷ邂｡逅<EFBDA1>
GET    /api/v1/admin/users                      // 蜈ｨ螻€逕ｨ謌ｷ蛻苓｡ｨ
POST   /api/v1/admin/users/:id/assign-tenant    // 蛻<><E89BBB>遘滓姐
```

**譚<>剞隕∵ｱゑｼ?* 蜈ｨ驛ｨ髴€隕?`requireRole('SUPER_ADMIN')`

#### **D. 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯAPI** <20><>1<EFBFBD>?

**霍ｯ逕ｱ<E98095>?* `/api/v1/org/*`

```typescript
// 蛹ｻ髯｢邂｡逅<EFBDA1>ｫ?
GET    /api/v1/org/hospital/departments         // 遘大ｮ､蛻苓｡ｨ
POST   /api/v1/org/hospital/departments         // 蛻帛ｻｺ遘大ｮ､
GET    /api/v1/org/hospital/members             // 謌仙遭蛻苓｡ｨ
POST   /api/v1/org/hospital/members/import      // 謇ｹ驥丞ｯｼ蜈･謌仙遭

// 闕ｯ莨∫ｮ｡逅<EFBDA1>ｫ?
GET    /api/v1/org/pharma/projects              // 鬘ｹ逶ｮ蛻苓｡ｨ
GET    /api/v1/org/pharma/audit-logs            // 螳｡隶｡譌･蠢<EFBDA5>
```

**譚<>剞隕∵ｱゑｼ?* `requireRole('TENANT_ADMIN')` + `requireTenantAccess`

#### **E. 蜈ｬ蠑€API** <20><>0<EFBFBD>?

**霍ｯ逕ｱ<E98095>?* `/api/public/*`

```typescript
// 遘滓姐蜩∫煙驟咲ｽｮ<EFBDBD>域裏髴€逋ｻ蠖包ｼ?
GET    /api/public/tenant-config?code={code}    // 闔ｷ蜿也ｧ滓姐蜩∫煙驟咲ｽｮ
```

### 7.3 蜑咲ｫｯ譫ｶ譫<EFBDB6>ｮｾ隶｡

#### **A. 隶､隸∵ｨ｡蝮<EFBDA1>** <20><>0<EFBFBD>?

**逶ｮ蠖慕ｻ捺桷<E68DBA>?*

```
frontend-v2/src/modules/auth/
  笏懌楳笏€ pages/
  笏?  笏懌楳笏€ LoginPage.tsx              # 騾夂畑逋ｻ蠖暮｡?
  笏?  笏懌楳笏€ TenantLoginPage.tsx        # 遘滓姐荳灘ｱ樒匳蠖暮｡ｵ<EFBDA1>亥勘諤∝刀迚鯉ｼ<E9AF89>
  笏?  笏披楳笏€ RegisterPage.tsx           # 豕ｨ蜀碁｡?
  笏懌楳笏€ api/
  笏?  笏披楳笏€ authApi.ts                 # 隶､隸、PI隹<49>畑
  笏懌楳笏€ hooks/
  笏?  笏披楳笏€ useAuth.ts                 # 隶､隸？ook
  笏披楳笏€ routes.tsx                     # 隶､隸∬ｷｯ逕ｱ
```

#### **B. 霑占是邂｡逅<EFBDA1>ｫｯ讓｡蝮?* <20><>0<EFBFBD>?

**逶ｮ蠖慕ｻ捺桷<E68DBA>?*

```
frontend-v2/src/modules/admin/
  笏懌楳笏€ pages/
  笏?  笏懌楳笏€ Dashboard.tsx              # 霑占是莉ｪ陦ｨ逶?
  笏?  笏懌楳笏€ TenantManagement/          # 遘滓姐邂｡逅<EFBDA1>
  笏?  笏?  笏懌楳笏€ TenantList.tsx
  笏?  笏?  笏懌楳笏€ TenantCreate.tsx
  笏?  笏?  笏懌楳笏€ TenantEdit.tsx
  笏?  笏?  笏披楳笏€ BrandingConfig.tsx     # 蜩∫煙驟咲ｽｮ
  笏?  笏懌楳笏€ FeatureFlagManagement.tsx  # Feature Flag邂｡逅<EFBDA1>
  笏?  笏披楳笏€ UserManagement.tsx         # 逕ｨ謌ｷ邂｡逅<EFBDA1>
  笏懌楳笏€ api/
  笏?  笏披楳笏€ adminApi.ts
  笏披楳笏€ index.tsx                      # 讓｡蝮怜ｮ壻ｹ<E5A3BB>
```

**讓｡蝮玲ｳｨ蜀鯉ｼ?*

```typescript
const AdminModule: ModuleDefinition = {
  id: 'admin',
  name: '霑占是邂｡逅<EFBDA1>',
  path: '/admin',
  requiredVersion: undefined,          // 荳榊渕莠思ersion譽€譟?
  requireRole: ['SUPER_ADMIN'],        // <20><> 蝓ｺ莠手ｧ定牡譽€譟?
  component: lazy(() => import('./layouts/AdminLayout')),
}
```

#### **C. 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯ讓｡蝮?* <20><>1<EFBFBD>?

**逶ｮ蠖慕ｻ捺桷<E68DBA>?*

```
frontend-v2/src/modules/org/
  笏懌楳笏€ hospital/                      # 蛹ｻ髯｢邂｡逅<EFBDA1>ｫ?
  笏?  笏懌楳笏€ pages/
  笏?  笏?  笏懌楳笏€ Dashboard.tsx
  笏?  笏?  笏懌楳笏€ DepartmentManagement.tsx
  笏?  笏?  笏披楳笏€ MemberManagement.tsx
  笏?  笏披楳笏€ index.tsx
  笏披楳笏€ pharma/                        # 闕ｯ莨∫ｮ｡逅<EFBDA1>ｫ?
      笏懌楳笏€ pages/
      笏?  笏懌楳笏€ Dashboard.tsx
      笏?  笏懌楳笏€ ProjectManagement.tsx
      笏?  笏披楳笏€ AuditLogs.tsx
      笏披楳笏€ index.tsx
```

---

## 8. 螳樊命霍ｯ郤ｿ蝗?

### 8.1 Phase 0<>壼㊥螟<E38AA5>ｷ･菴懶ｼ<E687B6>1螟ｩ<E89E9F><EFBDA9>

**逶ｮ譬<EFBDAE>ｼ?* 扈滉ｸ€謨ｰ謐ｮ蠎楢｡ｨ扈捺桷<E68DBA>梧ｸ<E6A2A7>炊蜴<E7828A>彰驕礼<E9A995>?

- [ ] **莉ｻ蜉｡1<EFBDA1>?* 蜀ｳ遲紋ｿ晉蕗 `platform_schema.users` 霑俶弍 `public.users`
  - 蟒ｺ隶ｮ<E99AB6>壻ｿ晉<EFBDBF>?`platform_schema.users`<EFBFBD>域眠譫ｶ譫<EFBFBD>ｼ?
  - 霑∫ｧｻ `public.users` 逧<>紙蜿ｲ謨ｰ謐ｮ蛻ｰ `platform_schema.users`
  - 蛻<>髯､ `public.users` 陦?

- [ ] **莉ｻ蜉｡2<EFBDA1>?* 蛻帛ｻｺ霑∫ｧｻ譁<EFBDBB>｡｣
  - 譴ｳ逅<EFBDB3>園譛我ｸ壼苅讓｡蝮怜ｯｹ User 陦ｨ逧<EFBDA8>ｼ慕畑
  - 蛻ｶ螳壽焚謐ｮ霑∫ｧｻ閼壽悽

### 8.2 Phase 1<>壽焚謐ｮ蠎鉄chema隶ｾ隶｡<E99AB6>?螟ｩ<E89E9F><EFBDA9>

**P0 譬ｸ蠢<EFBDB8>｡ｨ<EFBDA1><EFBDA8>**

- [ ] **Day 1荳雁壕<E99B81>?* 隶ｾ隶｡蟷ｶ蛻帛ｻ?`tenants` 陦?
- [ ] **Day 1荳句壕<E58FA5>?* 謇ｩ螻<EFBDA9> `users` 陦ｨ<E999A6>亥｢槫刈 tenantId, departmentId, role enum<75>?
- [ ] **Day 2荳雁壕<E99B81>?* 蛻帛ｻｺ `tenant_users`, `feature_flags`, `tenant_modules` 陦?
- [ ] **Day 2荳句壕<E58FA5>?* 蛻帛ｻｺ Prisma Schema 蟷ｶ霑占｡瑚ｿ∫ｧ?

**莠､莉倡黄<E580A1><E9BB84>**
- 笨?Prisma Schema螳梧紛螳壻ｹ<E5A3BB>
- 笨?霑∫ｧｻ閼壽悽霑占｡碁€夊ｿ<E5A48A>
- 笨?豬玖ｯ墓焚謐ｮ謠貞<E8ACA0>鬪瑚ｯ<E7919A>

### 8.3 Phase 2<>壼錘遶ｯ隶､隸∫ｳｻ扈滂ｼ<E6BB82>3螟ｩ<E89E9F><EFBDA9>

- [ ] **Day 1<>?* 螳樒鴫JWT蟾･蜈ｷ邀?
  - `generateToken()`
  - `verifyToken()`
  - `refreshToken()`

- [ ] **Day 2<>?* 螳樒鴫隶､隸、PI
  - POST `/api/v1/auth/register`
  - POST `/api/v1/auth/login`
  - GET `/api/v1/auth/me`

- [ ] **Day 3<>?* 螳樒鴫隶､隸∽ｸｭ髣ｴ莉?
  - `requireAuth`
  - `requireRole`
  - `requireTenantAccess`
  - 蠎皮畑蛻ｰ邇ｰ譛鵜egacy API

**莠､莉倡黄<E580A1><E9BB84>**
- 笨?螳梧紛逧<E7B49B>ｮ､隸∫ｳｻ扈?
- 笨?謇€譛陰PI蜉<49>荳願ｮ､隸∽ｿ晄侃
- 笨?Postman豬玖ｯ暮€夊ｿ<E5A48A>

### 8.4 Phase 3<>壼燕遶ｯ隶､隸∝ｯｹ謗･<E8AC97><EFBDA5>2螟ｩ<E89E9F><EFBDA9>

- [ ] **Day 1<>?* 螳樒鴫逋ｻ蠖暮｡ｵ髱｢
  - LoginPage.tsx
  - useAuth Hook
  - Token蟄伜お<E4BC9C><E3818A>ocalStorage<67>?

- [ ] **Day 2<>?* 蟇ｹ謗･譚<EFBDA5>剞譯<E5899E>楔
  - 譖ｿ謐｢PermissionContext荳ｭ逧<EFBDAD>ock謨ｰ謐ｮ
  - 螳樒鴫莉主錘遶ｯ闔ｷ蜿也畑謌ｷ菫｡諱?
  - 螳樒鴫逋ｻ蜃ｺ蜉溯<E89C89>

**莠､莉倡黄<E580A1><E9BB84>**
- 笨?蜿ｯ逕ｨ逧<EFBDA8>匳蠖?逋ｻ蜃ｺ豬∫ｨ<E288AB>
- 笨?蜑咲ｫｯ譚<EFBDAF>剞謗ｧ蛻ｶ逕滓譜

### 8.5 Phase 4<>夊ｿ占是邂｡逅<EFBDA1>ｫｯMVP<56>?螟ｩ<E89E9F><EFBDA9>

**P0 譬ｸ蠢<EFBDB8>粥閭ｽ<E996AD>?*

- [ ] **Day 1-2<>?* 遘滓姐邂｡逅<EFBDA1>
  - 遘滓姐蛻苓｡ｨ鬘?
  - 蛻帛ｻｺ遘滓姐陦ｨ蜊包ｼ亥渕譛ｬ菫｡諱?遘滓姐邀ｻ蝙具ｼ?
  - 遘滓姐隸ｦ諠<EFBDA6>｡?

- [ ] **Day 3<>?* 蜩∫煙驟咲ｽｮ
  - Logo荳贋ｼ<E8B48B>蛻ｰOSS
  - 逋ｻ蠖暮｡ｵ閭梧勹蝗ｾ荳贋ｼ<E8B48B>
  - 驟咲ｽｮ鬚<EFBDAE>ｧ<EFBFBD>

- [ ] **Day 4<>?* Feature Flag邂｡逅<EFBDA1>
  - Feature Flag蛻苓｡ｨ
  - 蠑€蜈ｳ蛻<EFBDB3><E89BBB>?
  - 逶ｮ譬<EFBDAE>ｧ滓姐驟咲ｽｮ

- [ ] **Day 5<>?* 髮<><E9ABAE>豬玖ｯ<E78E96>
  - 霑占是遶ｯ螳梧紛豬∫ｨ区ｵ玖ｯ?
  - 譚<>剞謗ｧ蛻ｶ豬玖ｯ<E78E96>

**莠､莉倡黄<E580A1><E9BB84>**
- 笨?霑占是邂｡逅<EFBDA1>ｫｯMVP蜿ｯ逕ｨ
- 笨?蜿ｯ莉･蛻帛ｻｺ遘滓姐
- 笨?蜿ｯ莉･驟咲ｽｮ蜩∫煙
- 笨?蜿ｯ莉･邂｡逅<EFBDA1>eature Flag

### 8.6 Phase 5<>夂ｧ滓姐荳灘ｱ樒匳蠖包ｼ<E58C85>2螟ｩ<E89E9F><EFBDA9>

- [ ] **Day 1<>?* 螳樒鴫TenantLoginPage
  - 蜉ｨ諤∝刈霓ｽ遘滓姐蜩∫煙驟咲ｽ?
  - 譖ｿ謐｢Logo蜥瑚レ譎ｯ蝗ｾ
  - 蜉ｨ諤∽ｸｻ鬚倩牡

- [ ] **Day 2<>?* 螳樒鴫譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBDB1>書
  - 逋ｻ蠖募錘譬ｹ謐ｮrole+tenantType霍ｳ霓ｬ
  - 豬玖ｯ穂ｸ榊酔隗定牡逧<E789A1>ｷｳ霓ｬ騾ｻ霎<EFBDBB>

**莠､莉倡黄<E580A1><E9BB84>**
- 笨?遘滓姐荳灘ｱ樒匳蠖暮｡ｵ蜿ｯ逕?
- 笨?URL<52>啻/t/{code}/login` 逕滓譜

### 8.7 Phase 6<>壽惻譫<E683BB>ｮ｡逅<EFBDA1>ｫｯ<EFBDAB>域潔髴€蠑€蜿托ｼ<E68998>

**P1 蜉溯<E89C89><E6BAAF>亥錘扈ｭ謗呈悄<E59188>会ｼ?*

- [ ] 蛹ｻ髯｢邂｡逅<EFBDA1>ｫｯ<EFBDAB>夂ｧ大ｮ､邂｡逅<EFBDA1>€∵<C280>蜻倡ｮ｡逅<EFBDA1>€<EFBFBD><C280>鬚晏<E9AC9A>驟?
- [ ] 闕ｯ莨∫ｮ｡逅<EFBDA1>ｫｯ<EFBDAB>夐｡ｹ逶ｮ逶第而縲∝ｮ｡隶｡譌･蠢?

---

## 9. 蜈ｳ髞ｮ蜀ｳ遲也<E981B2>?

### 9.1 謚€譛ｯ蜀ｳ遲?

| 蜀ｳ遲也<E981B2>?| 騾蛾｡ｹ | 蟒ｺ隶ｮ | 逅<>罰 |
|--------|------|------|------|
| **User陦ｨ騾画叫** | platform_schema.users vs public.users | 笨?platform_schema.users | 隨ｦ蜷域眠譫ｶ譫<EFBDB6>ｼ郡chema髫皮ｦｻ貂<EFBDBB>匆 |
| **JWT蠎馴€画叫** | jsonwebtoken vs jose | 笨?jsonwebtoken | 謌千<E8AC8C>遞ｳ螳夲ｼ檎､ｾ蛹ｺ豢ｻ霍?|
| **蟇<><E89F87>∝刈蟇<E58888>** | bcrypt vs argon2 | 笨?bcrypt | 鬘ｹ逶ｮ蟾ｲ譛我ｾ晁ｵ厄ｼ郁ｧ！IT讓｡蝮暦ｼ?|
| **Token蟄伜お** | localStorage vs httpOnly Cookie | 笨?localStorage | 蜑榊錘遶ｯ蛻<EFBDAF>ｦｻ<EFBDA6>瑚ｷｨ蝓溷暑螂ｽ |
| **隗定牡螳壻ｹ画婿蠑<E5A9BF>** | 蟄礼ｬｦ荳?vs Enum | 笨?Prisma Enum | 邀ｻ蝙句ｮ牙<EFBDAE><E78999>碁∩蜈肴蕎蜀咎漠隸?|

### 9.2 荳壼苅蜀ｳ遲<EFBDB3>

| 蜀ｳ遲也<E981B2>?| 騾蛾｡ｹ | 蟒ｺ隶ｮ | 逅<>罰 |
|--------|------|------|------|
| **遘滓姐莉｣遐∝髪荳€諤?* | 蜈ｨ螻€蜚ｯ荳€ vs 邀ｻ蝙句<E89D99>蜚ｯ荳€ | 笨?蜈ｨ螻€蜚ｯ荳€ | URL `/t/{code}` 髴€蜈ｨ螻€蜚ｯ荳€ |
| **驛ｨ髣ｨ譬大ｱらｺ?* | 蝗ｺ螳<EFBDBA>2螻?vs 譌<>髯仙ｱらｺｧ | 笨?譌<>髯仙ｱらｺｧ | 謾ｯ謖∝､肴揩扈<E68FA9>ｻ<EFBFBD>楔譫<E6A594> |
| **Feature Flag邊貞ｺｦ** | 遘滓姐郤?vs 逕ｨ謌ｷ郤?| 笨?遘滓姐郤?| 隨ｦ蜷亥膚荳壽ｨ｡蠑擾ｼ檎ｮ｡逅<EFBDA1>ｮ€蜊?|

---

## 10. 鬟朱勦荳取倦謌?

### 10.1 謚€譛ｯ鬟朱<E9AC9F>?

| 鬟朱勦 | 蠖ｱ蜩<EFBDB1> | 郛楢ｧ｣謗ｪ譁ｽ |
|------|------|---------|
| **邇ｰ譛陰PI譌<49>隶､隸?* | 髴€隕∝<E99A95>髱｢謾ｹ騾?| 貂占ｿ帛ｼ丞刈蜈･隶､隸<EFBDA4>ｼ御ｼ伜<EFBDBC>菫晄侃謨乗─API |
| **荳､荳ｪUser陦?* | 謨ｰ謐ｮ荳堺ｸ€閾?| 蟆ｽ蠢ｫ扈滉ｸ€<EFBDB8>檎ｼ門<EFBDBC>霑∫ｧｻ閼壽<E996BC>?|
| **遘滓姐謨ｰ謐ｮ髫皮ｦｻ** | 蜿ｯ閭ｽ豕<EFBDBD>愆謨ｰ謐ｮ | 荳･譬ｼ豬玖ｯ<E78E96> `requireTenantAccess` 荳ｭ髣ｴ莉?|

### 10.2 蠑€蜿第倦謌?

| 謖第<E8AC96> | 髫ｾ蠎ｦ | 蠎泌ｯｹ譁ｹ譯<EFBDB9> |
|------|------|---------|
| **JWT隶､隸∫ｳｻ扈<EFBDBB>** | 荳ｭ遲<EFBDAD> | 蜿り€グDJ/BYSY鬘ｹ逶ｮ螳樒鴫 |
| **蜩∫煙蜉ｨ諤∝刈霓?* | 荳ｭ遲<EFBDAD> | 菴ｿ逕ｨCSS蜿倬㍼+OSS蝗ｾ迚ⅡRL |
| **譎ｺ閭ｽ霍ｯ逕ｱ蛻<EFBDB1>書** | 邂€蜊?| 蝓ｺ莠屍ole+tenantType逧<65>f-else |

---

## 11. 蠑€蜿題ｵ<E9A18C>ｺ宣怙豎?

### 11.1 莠ｺ蜉幃怙豎?

- **蜷守ｫｯ蠑€蜿托ｼ<E68998>** 1莠?ﾃ<> 10螟ｩ<E89E9F><EFBDA9>hase 0-3<>?
- **蜑咲ｫｯ蠑€蜿托ｼ<E68998>** 1莠?ﾃ<> 7螟ｩ<E89E9F><EFBDA9>hase 3-5<>?
- **豬玖ｯ包ｼ?* 0.5莠?ﾃ<> 3螟ｩ<E89E9F>磯寔謌先ｵ玖ｯ包ｼ?

**諤ｻ隶｡<E99AB6>?* 郤?0莠ｺ螟ｩ<E89E9F>育ｺｦ3蜻ｨ<E89CBB><EFBDA8>

### 11.2 謚€譛ｯ萓晁ｵ?

**譁ｰ蠅柤pm蛹<6D>ｼ<EFBFBD>**

```json
{
  "dependencies": {
    "jsonwebtoken": "^9.0.0",
    "bcryptjs": "^2.4.3"
  },
  "devDependencies": {
    "@types/jsonwebtoken": "^9.0.0",
    "@types/bcryptjs": "^2.4.2"
  }
}
```

---

## 12. 諤ｻ扈<EFBDBB>

### 12.1 譬ｸ蠢<EFBDB8>ｻ楢ｮｺ

1. **蠖灘燕邉ｻ扈溷ｮ悟<EFBDAE>豐｡譛芽ｮ､隸<EFBDA4>/謗域揀邉ｻ扈<EFBDBB>** 笶?
2. **謨ｰ謐ｮ蠎捺怏荳､荳ｪUser陦ｨ<E999A6>碁怙扈滉ｸ€** 笞<><E7AC9E><EFBFBD>
3. **蜑咲ｫｯ譚<EFBDAF>剞譯<E5899E>楔隶ｾ隶｡螳悟埋<E6829F>御ｽ<E5BEA1>ｻ<EFBFBD>ｸｺmock** 笞<><E7AC9E><EFBFBD>
4. **遘滓姐菴鍋ｳｻ螳悟<E89EB3>郛ｺ螟ｱ<E89E9F>碁怙莉朱峺蠑€蜿?* 笶?

### 12.2 莨伜<E88EA8>郤ｧ蟒ｺ隶?

**P0<50><30>eek 1-2<>会ｼ<E4BC9A>** 謳ｭ蟒ｺ蝓ｺ遑€譫ｶ譫<EFBDB6>
- 謨ｰ謐ｮ蠎鉄chema隶ｾ隶｡ + 霑∫ｧｻ
- JWT隶､隸∫ｳｻ扈<EFBDBB>
- 隶､隸∽ｸｭ髣ｴ莉?
- 逋ｻ蠖<EFBDBB>/逋ｻ蜃ｺ蜉溯<E89C89>
- 霑占是邂｡逅<EFBDA1>ｫｯMVP<56>育ｧ滓姐邂｡逅?蜩∫煙驟咲ｽｮ<EFBDBD>?

**P1<50><31>eek 3-4<>会ｼ<E4BC9A>** 螳悟埋譬ｸ蠢<EFBDB8>粥閭ｽ
- Feature Flag邂｡逅<EFBDA1>
- 遘滓姐荳灘ｱ樒匳蠖暮｡?
- 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯ<EFBDAB>亥現髯｢迚茨ｼ<E88CA8>

**P2<50><32>eek 5+<2B>会ｼ<E4BC9A>** 謇ｩ螻募粥閭ｽ
- 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>ｫｯ<EFBDAB>郁艮莨∫沿<E288AB><E6B2BF>
- 鬮倡ｺｧ螳｡隶｡譌･蠢<EFBDA5>
- 譚<>剞扈<E5899E>ｲ貞ｺｦ謗ｧ蛻?

### 12.3 荳倶ｸ€豁･陦悟<E999A6>?

1. 笨?**Review譛ｬ謚･蜻?*<2A>檎｡ｮ隶､謚€譛ｯ譁ｹ譯?
2. 笨?**遑ｮ螳壼ｼ€蜿第賜譛?*<2A>亥ｻｺ隶?蜻ｨ蜀ｲ蛻ｺ<E89BBB><EFBDBA>
3. 笨?**蜷ｯ蜉ｨPhase 0**<2A>壽焚謐ｮ蠎楢｡ｨ扈滉ｸ€蜥郡chema隶ｾ隶｡
4. 笨?**蟷ｶ陦悟星蜉ｨ蜑咲ｫｯ逋ｻ蠖暮｡ｵ隶ｾ隶?*<2A><>I隶ｾ隶｡蟶茨ｼ<E88CA8>

---

## 9. <20><> Prompt邂｡逅<EFBDA1>ｳｻ扈滓紛蜷<E7B49B>

### 9.1 荳ｺ莉€荵<C280>rompt邂｡逅<EFBDA1>弍霑占是邂｡逅<EFBDA1>ｫｯ逧<EFBDAF><E980A7>鬲?

譬ｹ謐ｮ縲?2-騾夂畑閭ｽ蜉帛ｱ<E5B89B>03-Prompt邂｡逅<EFBDA1>ｳｻ扈滉ｸ守<EFBDB8>蠎ｦ鬚<EFBDA6>ｧ郁ｮｾ隶｡譁ｹ譯?md縲具ｼ<E585B7>**Prompt邂｡逅<EFBDA1>ｸ肴弍蜿ｯ騾牙粥閭ｽ<E996AD>瑚€梧弍霑占是邂｡逅<EFBDA1>ｫｯ蟄伜惠逧<E683A0><E980A7>ｸ蠢<EFBDB8>炊逕ｱ荵倶ｸ€**縲?

#### **荳壼苅逞帷せ<E5B8B7>?*

1. **豬玖ｯ慕識蠅<E8AD98>裏豕墓ｨ｡諡溽悄螳樊焚謐ｮ**  
   - ASL逧<4C>枚迪ｮ遲幃€蛾怙隕?0遽<30>悄螳槫現蟄ｦ隶ｺ譁<EFBDBA>ｪ瑚ｯ∝㊥遑ｮ邇<EFBDAE>
   - DC逧<43>焚謐ｮ貂<EFBDAE>ｴ鈴怙隕∫悄螳樒羅蜴<E7BE85>焚謐ｮ鬪瑚ｯ∵歓蜿匁譜譫?
   - 豬玖ｯ慕識蠅<E8AD98>噪蛛<E599AA>焚謐ｮ螳悟<E89EB3>譌<EFBFBD>豕墓垓髴ｲPrompt逧<74>悄螳樣琉鬚?

2. **蠖灘燕蠑€蜿第ｵ∫ｨ区譜邇<E8AD9C>栫菴?*  
   - 豈乗ｬ｡隹<EFBDA1>紛Prompt髴€隕<C280>ｼ壽隼莉｣遐?竊?commit 竊?驛ｨ鄂ｲ 竊?遲牙ｾ<E78999>AE驥榊星<E6A68A>育ｺｦ5蛻<35>帖<EFBFBD>?
   - 荳ｴ蠎贋ｸ灘ｮｶ譌<EFBDB6>豕募盾荳手ｰ<E6898B>ｯ包ｼ井ｻ紋ｻｬ荳堺ｼ壼<EFBDBC>莉｣遐<EFBDA3>ｼ?
   - 譌<>豕募ｿｫ騾溯ｿｭ莉｣<E88E89>御ｸ€螟ｩ蜿ｪ閭ｽ蟆晁ｯ募<EFBDAF>谺?

3. **逕滉ｺｧ莠区腐鬟朱勦鬮?*  
   - 荳€譌ｦPrompt蜿醍沿<E9868D>梧園譛臥畑謌ｷ遶句叉蜿怜ｽｱ蜩<EFBDB1>
   - 豐｡譛臥<E8AD9B>蠎ｦ譛ｺ蛻ｶ<E89BBB>梧裏豕募ｰ剰激蝗ｴ鬪瑚ｯ<E7919A>

#### **隗｣蜀ｳ譁ｹ譯茨ｼ夂函莠ｧ邇ｯ蠅<EFBDAF><E8A085>蠎ｦ鬚<EFBDA6>ｧ?*

隹<EFBFBD>ｯ戊€<EFBFBD>ｼ€蜷ｯDebug讓｡蠑丞錘<EFBFBD>瑚<EFBFBD>蜉ｨ霍ｯ逕ｱ蛻ｰDRAFT迚<EFBFBD>rompt<EFBFBD>碁ｪ瑚ｯ<EFBFBD>€夊ｿ<EFBFBD>錘荳€髞ｮ蜿大ｸ<EFBFBD>ｸｺACTIVE迚医€?

### 9.2 Prompt邂｡逅<EFBDA1>ｳｻ扈滓楔譫<E6A594>

#### **9.2.1 謨ｰ謐ｮ蠎楢ｮｾ隶｡<E99AB6><EFBDA1>apability_schema<6D>?*

```prisma
// --- Prompt Management System ---

model PromptTemplate {
  id          Int       @id @default(autoincrement())
  code        String    @unique                       // 蜚ｯ荳€譬<C280>ｯ<EFBFBD>: 'ASL_SCREENING_TitleAbstract'
  name        String                                  // 莠ｺ邀ｻ蜿ｯ隸ｻ蜷咲ｧｰ
  module      String                                  // 謇€螻樊ｨ｡蝮? ASL, DC, AIA, IIT
  description String?
  variables   Json?                                   // 鬚<>悄蜿倬㍼: ["title", "abstract"]
  
  versions    PromptVersion[]

  createdAt   DateTime  @default(now()) @map("created_at")
  updatedAt   DateTime  @updatedAt @map("updated_at")

  @@map("prompt_templates")
  @@schema("capability_schema")
}

model PromptVersion {
  id          Int            @id @default(autoincrement())
  templateId  Int            @map("template_id")
  version     Int                                     // 迚域悽蜿?1, 2, 3...
  content     String         @db.Text                 // Prompt蜀<74>ｮｹ<EFBDAE>域髪謖？andlebars讓｡譚ｿ<E8AD9A>?
  modelConfig Json?                                   // {"temperature": 0.1, "model": "deepseek-chat"}
  status      PromptStatus   @default(DRAFT)
  changelog   String?                                 // 菫ｮ謾ｹ隸ｴ譏<EFBDB4>
  createdBy   String?        @map("created_by")      // <20>剥 螳｡隶｡<E99AB6>夊ｰ∽ｿｮ謾ｹ逧?
  
  template    PromptTemplate @relation(fields: [templateId], references: [id])

  createdAt   DateTime       @default(now()) @map("created_at")

  @@map("prompt_versions")
  @@schema("capability_schema")
  
  @@index([templateId, status])                       // 鬮倬｢第衍隸｢莨伜喧
}

enum PromptStatus {
  DRAFT       // 闕臥ｨｿ<EFBDA8>井ｻ<E4BA95>ebug讓｡蠑丞庄隗<E5BA84>ｼ?
  ACTIVE      // 郤ｿ荳顔函謨茨ｼ磯ｻ倩ｮ､<EFBDAE><EFBDA4>
  ARCHIVED    // 蠖呈｡｣
  
  @@schema("capability_schema")
}
```

#### **9.2.2 譁ｰ蠅櫁ｧ定牡荳取揀髯?*

| 隗定牡 | 譚<>剞 Code | 隸ｴ譏<EFBDB4> |
|------|-----------|------|
| **SUPER_ADMIN** | prompt:\* | 雜<>ｺｧ邂｡逅<EFBDA1>遭諡･譛画園譛画揀髯?|
| **PROMPT_ENGINEER** <20><> | prompt:view<br>prompt:edit<br>prompt:debug<br>prompt:publish | <20>識 **譬ｸ蠢<EFBDB8>ｧ定牡**<EFBFBD>壻ｸ謎ｸ啀rompt蟾･遞句ｸ域<EFBFBD>荳ｴ蠎贋ｸ灘ｮｶ |
| HOSPITAL_ADMIN | - | 譛ｺ譫<EFBDBA>ｮ｡逅<EFBDA1>遭譌<E981AD>Prompt譚<74>剞 |
| PHARMA_ADMIN | - | 闕ｯ莨∫ｮ｡逅<EFBDA1>遭譌<E981AD>Prompt譚<74>剞 |

**譚<>剞隸ｦ隗｣<E99A97>?*

- `prompt:view` - 譟･逵輝rompt蛻苓｡ｨ蜥悟紙蜿ｲ迚域<E8BF9A>?
- `prompt:edit` - 蛻帛ｻｺ/菫ｮ謾ｹDRAFT迚域悽
- `prompt:debug` - 箝?譬ｸ蠢<EFBDB8>ｼ壼ｼ€蜷ｯ隹<EFBDAF>ｯ墓ｨ｡蠑?
- `prompt:publish` - 蜿大ｸゥRAFT荳ｺACTIVE

#### **9.2.3 譬ｸ蠢<EFBDB8>橿譛ｯ螳樒<E89EB3>?*

**A. PromptService<63>亥錘遶ｯ<E981B6><EFBDAF>**

```typescript
// backend/src/common/capabilities/prompt/prompt.service.ts

export class PromptService {
  private debugUsers = new Set<string>();              // 蜀<>ｭ伜ｭ伜お隹<E3818A>ｯ慕畑謌ｷ
  private activeCache = new Map<string, string>();     // ACTIVE迚域悽郛灘ｭ<E78198>
  
  /**
   * 隶ｾ鄂ｮ隹<EFBDAE>ｯ墓ｨ｡蠑<EFBDA1>
   * @requires Permission: prompt:debug
   */
  async setDebugMode(userId: string, enabled: boolean) {
    if (enabled) {
      this.debugUsers.add(userId);
    } else {
      this.debugUsers.delete(userId);
    }
  }
  
  /**
   * 闔ｷ蜿鳳rompt<70>域<EFBFBD>ｸ蠢<EFBDB8><E8A0A2>蠎ｦ騾ｻ霎托ｼ?
   */
  async get(code: string, variables: any, userId: string): Promise<string> {
    // 1. 譽€譟･譏ｯ蜷ｦ荳ｺ隹<EFBDBA>ｯ戊€?
    if (this.debugUsers.has(userId)) {
      // 莨伜<E88EA8>闔ｷ蜿縫RAFT迚域悽
      const draft = await this.getDraftVersion(code);
      if (draft) {
        return this.render(draft.content, variables);
      }
    }
    
    // 2. 譎ｮ騾夂畑謌ｷ謌匁裏DRAFT譌ｶ<E8AD8C>瑚執蜿泡CTIVE迚域悽
    let active = this.activeCache.get(code);
    if (!active) {
      const version = await prisma.promptVersion.findFirst({
        where: { 
          template: { code },
          status: 'ACTIVE'
        },
        orderBy: { version: 'desc' }
      });
      active = version?.content || this.getFallback(code);
      this.activeCache.set(code, active);
    }
    
    return this.render(active, variables);
  }
  
  /**
   * Postgres LISTEN/NOTIFY 辜ｭ譖ｴ譁?
   */
  async initHotReload() {
    const client = await pool.connect();
    await client.query('LISTEN prompt_update');
    
    client.on('notification', (msg) => {
      console.log('[PromptService] Received update:', msg.payload);
      this.activeCache.clear();  // 貂<>ｩｺ郛灘ｭ<E78198>
    });
  }
}
```

**B. API遶ｯ轤ｹ隶ｾ隶｡**

| 譁ｹ豕<EFBDB9> | 霍ｯ蠕<EFBDAF> | 譚<>剞 | 謠剰ｿｰ |
|------|------|------|------|
| GET | /api/admin/prompts | prompt:view | 闔ｷ蜿匁園譛臼rompt讓｡譚ｿ蛻苓｡ｨ |
| GET | /api/admin/prompts/:id | prompt:view | 闔ｷ蜿冶ｯｦ諠<EFBDA6>ｼ亥性蜴<E680A7>彰迚域悽<E59F9F>?|
| POST | /api/admin/prompts/draft | prompt:edit | 菫晏ｭ倩拷遞ｿ<E9819E>育函謌先眠迚域悽<E59F9F>茎tatus=DRAFT<46>?|
| POST | /api/admin/prompts/publish | prompt:publish | 蜿大ｸ<E5A4A7>沿譛ｬ<E8AD9B><EFBDAC>RAFT竊但CTIVE<56>瑚ｧｦ蜿鮮OTIFY<46>?|
| POST | /api/admin/prompts/debug | **prompt:debug** | **蠑€蜈ｳ隹<EFBDB3>ｯ墓ｨ｡蠑?* |

**C. 蜑咲ｫｯ蜈ｨ螻€隹<C280>ｯ募ｼ€蜈?*

```tsx
// frontend-v2/src/modules/admin/components/PromptDebugSwitch.tsx

export const PromptDebugSwitch = () => {
  const { hasPermission } = usePermission();
  const [debugMode, setDebugMode] = useState(false);
  
  // <20>白 譚<>剞謗ｧ蛻ｶ<E89BBB>壻ｻ<E5A3BB>rompt:debug譚<67>剞逕ｨ謌ｷ蜿ｯ隗<EFBDAF>
  if (!hasPermission('prompt:debug')) {
    return null;
  }
  
  const handleToggle = async (enabled: boolean) => {
    await api.post('/api/admin/prompts/debug', { enabled });
    setDebugMode(enabled);
  };
  
  return (
    <>
      <Switch 
        checked={debugMode} 
        onChange={handleToggle}
        checkedChildren="<22>菅 隹<>ｯ墓ｨ｡蠑<EFBDA1>"
        unCheckedChildren="逕滉ｺｧ讓｡蠑<EFBDA1>"
      />
      {debugMode && (
        <Alert
          type="warning"
          message="笞<><E7AC9E><EFBFBD> 隹<>ｯ墓ｨ｡蠑丞ｷｲ蠑€蜷ｯ<E89CB7>壽お蠖灘燕豁｣蝨ｨ菴ｿ逕ｨ闕臥ｨｿ迚茨ｼ<E88CA8>RAFT<46>画署遉ｺ隸<EFBDBA>"
          banner
          closable={false}
        />
      )}
    </>
  );
};
```

### 9.3 豸牙所逧<E68980>園譛我ｸ壼苅讓｡蝮?

譬ｹ謐ｮ譁<EFBFBD>｡｣隨?闃ゑｼ碁怙隕￣rompt邂｡逅<EFBDA1>噪讓｡蝮暦ｼ<E69AA6>

| 讓｡蝮<EFBDA1> | 譬ｸ蠢<EFBDB8>惻譎ｯ | Prompt螟肴揩蠎?| 莨伜<E88EA8>郤?|
|------|---------|-------------|--------|
| **ASL** | 譬<>｢俶遭隕∝<E99A95>遲帙€∝<C280>譁<EFBFBD>､咲ｭ帙€∬ｯ∵紺蜷域<E89CB7>?| 箝絶ｭ絶ｭ絶ｭ絶ｭ?| P0 |
| **DC** | Tool B謠仙叙縲ゝool C貂<43>ｴ励€∝<C280>遯∵｣€豬?| 箝絶ｭ絶ｭ絶ｭ絶ｭ?| P0 |
| **IIT** | 雍ｨ謗ｧ譽€譟･縲∵э蝗ｾ隸<EFBDBE>悪縲∵衍隸｢逕滓<E98095>?| 箝絶ｭ絶ｭ絶ｭ絶ｭ?| P1 |
| **PKB** | RAG髣ｮ遲斐€∵音螟<E99FB3>炊髦<E7828A>ｯｻ | 箝絶ｭ絶ｭ絶ｭ<E7B5B6> | P1 |
| **AIA** | 10+譎ｺ閭ｽ菴薙€∵э蝗ｾ隸<EFBDBE><E99AB8>?| 箝絶ｭ絶ｭ?| P2 |
| **RVW** | 隗<>激諤ｧ譽€譟?| 箝絶ｭ絶ｭ?| P2 |

### 9.4 Prompt邂｡逅<EFBDA1>ｼ€蜿題ｮ｡蛻?

#### **Phase 0: 蝓ｺ遑€隶ｾ譁ｽ<E8AD81>?螟ｩ<E89E9F><EFBDA9>**

1. 蛻帛ｻｺ`capability_schema`逧Пrompt逶ｸ蜈ｳ陦?
2. 豺ｻ蜉<EFBDBB>`prompt:*`譚<EFBFBD>剞蛻ｰ`platform_schema.permissions`
3. 蛻帛ｻｺ`PROMPT_ENGINEER`隗定牡
4. 螳樒鴫`PromptService`譬ｸ蠢<EFBFBD>€ｻ霎<EFBFBD>

#### **Phase 1: 霑占是遶ｯMVP<56>?螟ｩ<E89E9F><EFBDA9>**

1. 蜑咲ｫｯ邂｡逅<EFBDA1>阜髱｢<E9ABB1>亥<EFBFBD>陦ｨ縲∫ｼ冶ｾ大勣縲∫沿譛ｬ蜴<EFBDAC>彰<EFBFBD><E5BDB0>
2. 蜈ｨ螻€隹<C280>ｯ募ｼ€蜈ｳ扈<EFBDB3>ｻ?
3. 闕臥ｨｿ菫晏ｭ<E6998F>/蜿大ｸ<E5A4A7>粥閭ｽ

#### **Phase 2: 荳壼苅讓｡蝮玲磁蜈･<E89C88>磯囂荳壼苅蠑€蜿托ｼ<E68998>**

- ASL遲幃€画ｨ｡蝮苓ｰ<E88B93>畑`promptService.get()`
- DC謨ｰ謐ｮ貂<EFBDAE>ｴ玲ｨ｡蝮苓ｰ<E88B93>畑`promptService.get()`
- 蜈ｶ莉匁ｨ｡蝮玲潔髴€謗･蜈･

### 9.5 螳牙<E89EB3>荳朱｣取<EFBDA3>?

1. **譚<>剞髫皮ｦｻ**  
   - 荳･譬ｼ譽€譟･`prompt:debug`譚<EFBFBD>剞<EFBFBD>碁亟豁｢譎ｮ騾夂畑謌ｷ隸ｯ蜈･隹<EFBFBD>ｯ墓ｨ｡蠑?
   - 隹<>ｯ墓ｨ｡蠑冗憾諤∝ｭ伜お蝨ｨ蜀<EFBDA8>ｭ假ｼ育畑謌ｷ逋ｻ蜃ｺ閾ｪ蜉ｨ螟ｱ謨茨ｼ<E88CA8>

2. **螳｡隶｡譌･蠢<EFBDA5>**  
   - `PromptVersion.createdBy`隶ｰ蠖穂ｿｮ謾ｹ莠?
   - `AdminOperationLog`隶ｰ蠖募書蟶<EFBFBD>｡御ｸｺ

3. **蜈懷ｺ墓惻蛻ｶ**  
   - 莉｣遐∽ｸｭ菫晉蕗Hardcoded Prompt菴應ｸｺ邉ｻ扈溽ｺｧ蜈懷ｺ?
   - 謨ｰ謐ｮ蠎捺衍隸｢螟ｱ雍･譌ｶ霑泌屓鮟倩ｮ､迚域悽

---

## 10. <20><> 蜿埼ｦ磯㊦郤ｳ隸ｴ譏<EFBDB4>

### 10.1 驥<>ｺｳ逧<EFBDB3><E980A7>髞ｮ蟒ｺ隶?

蝓ｺ莠弱€?2-騾夂畑閭ｽ蜉帛ｱ<E5B89B>10-譚<>剞菴鍋ｳｻ譴ｳ逅<EFBDB3>渚鬥井ｸ惹ｿｮ豁｣蟒ｺ隶?md縲具ｼ御ｻ･荳句ｻｺ隶ｮ蟾ｲ謨ｴ蜷亥芦譛ｬ譁<EFBDAC>｡｣<EFBDA1><EFBDA3>

#### 笨?**1. 蠅槫刈TenantQuotaAllocation陦ｨ<E999A6><EFBDA8>0<EFBFBD>?*

**蜴溷屏<E6BAB7>?* PRD譏守｡ｮ隕∵ｱょ現髯｢遶ｯ謖臥ｧ大ｮ､/荳ｪ莠ｺ蛻<EFBDBA><E89BBB>驟埼｢<E59FBC>

**螳樊命<E6A88A>?* 蟾ｲ蝨ｨ7.1.1遶<EFBFBD>闃よ眠蠅杼tenant_quota_allocations`陦?

```prisma
model TenantQuotaAllocation {
  targetType  String  // 'DEPARTMENT' | 'USER'
  targetKey   String  // DepartmentID 謌?UserID
  limitAmount BigInt  // 蛻<><E89BBB>逧<EFBFBD>｢晏ｺ?
  usedAmount  BigInt  // 蟾ｲ菴ｿ逕?
}
```

#### 笨?**2. 陦ｨ蜷肴隼荳ｺTenantMember<65><72>1<EFBFBD>?*

**蜴溷屏<E6BAB7>?* "Member"隸ｭ荵牙ｼｺ隹<EFBDBA>ｻ<EFBFBD>ｻ<EFBFBD><EFBDBB>邉ｻ<E98289>?User"騾壼ｸｸ謖<EFBDB8>匳蠖戊ｴｦ蜿ｷ螳樔ｽ?

**螳樊命<E6A88A>?* 蟾ｲ蟆<EFBDB2>TenantUser`謾ｹ荳ｺ`TenantMember`

#### 笨?**3. 螳｡隶｡譌･蠢怜｢槫刈module蟄玲ｮｵ<EFBDAE><EFBDB5>1<EFBFBD>?*

**蜴溷屏<E6BAB7>?* 闕ｯ莨∫ｫｯ髴€隕∵衍隸｢IIT讓｡蝮嶺ｸ灘ｱ樊律蠢暦ｼ<E69AA6>DA 21 CFR Part 11蜷郁ｧ<E98381>ｼ?

**螳樊命<E6A88A>?* 蟾ｲ蝨ｨ`AdminOperationLog`陦ｨ蠅槫刈`module`蟄玲ｮｵ蜥檎ｴ｢蠑?

#### 笨?**4. Prompt蟾･遞句喧譚<E596A7>剞<EFBFBD><E5899E>0<EFBFBD>?*

**蜴溷屏<E6BAB7>?* 霑占是邂｡逅<EFBDA1>ｫｯ譬ｸ蠢<EFBDB8>粥閭?

**螳樊命<E6A88A>?* 蟾ｲ蝨ｨ隨?遶<>螳梧紛隶ｾ隶｡Prompt邂｡逅<EFBDA1>ｳｻ扈<EFBDBB>

#### 笨?**5. 雜<>ｺｧ邂｡逅<EFBDA1>遭遘榊ｭ先焚謐ｮ<E8AC90><EFBDAE>0<EFBFBD>?*

**蜴溷屏<E6BAB7>?* 蜷ｦ蛻咏ｳｻ扈滉ｸ顔ｺｿ蜷取裏豕戊ｿ帛<EFBDBF>蜷主<E89CB7>?

**螳樊命<E6A88A>?* 蟆<>惠Phase 0螳樒鴫Prisma Seed閼壽悽

#### 笨?**6. Phase 0蝗樊ｻ壽婿譯茨ｼ<E88CA8>0<EFBFBD>?*

**蜴溷屏<E6BAB7>?* 謨ｰ謐ｮ螳牙<E89EB3>蝓ｺ譛ｬ蜴溷<E89CB4>

**螳樊命<E6A88A>?* 霑∫ｧｻ閼壽悽蟆<E682BD><E89F86>驥榊多蜷港public.users`荳ｺ`public.users_backup`<60>御ｿ晉<EFBDBF>?蜻?

#### 笨?**7. 遘滓姐驟咲ｽｮAPI郛灘ｭ假ｼ<E58187>1<EFBFBD>?*

**蜴溷屏<E6BAB7>?* 豈丈ｸｪ逕ｨ謌ｷ謇灘ｼ€逋ｻ蠖暮｡ｵ驛ｽ莨夊ｰ<E5A48A>畑<EFBFBD>碁ｫ伜ｹｶ蜿台ｸ矩怙隕∫ｼ灘ｭ?

**螳樊命<E6A88A>?* 蟆<>惠螳樊命譌ｶ豺ｻ蜉<EFBDBB>`Cache-Control: public, max-age=3600`

### 10.2 蜷守ｻｭ謾ｹ霑帛ｻｺ隶ｮ

莉･荳句ｻｺ隶ｮ證ゆｸ榊惠MVP髦ｶ谿ｵ螳樊命<EFBFBD>御ｽ<EFBFBD><EFBFBD>蜈･謚€譛ｯ蛟ｺ蜉｡貂<EFBFBD>黒<EFBFBD>?

#### <20>売 **1. JWT螳牙<E89EB3>諤ｧ<E8ABA4><EFBDA7>2<EFBFBD>?*

**蟒ｺ隶ｮ<E99AB6>?* 菴ｿ逕ｨHttpOnly Cookie譖ｿ莉｣localStorage

**逅<>罰<EFBFBD>?* localStorage螳ｹ譏灘女XSS謾ｻ蜃ｻ

**隶｡蛻抵ｼ?* 蝨ｨ闕ｯ莨∫ｫｯ荳顔ｺｿ蜑搾ｼ磯怙譖ｴ鬮伜ｮ牙<EFBDAE>諤ｧ<E8ABA4>牙ｮ樊命

#### <20>売 **2. Prisma Extension螟夂ｧ滓姐髫皮ｦｻ<EFBDA6><EFBDBB>1<EFBFBD>?*

**蟒ｺ隶ｮ<E99AB6>?* 蝨ｨORM螻ょｼｺ蛻ｶ蜉<EFBDB6>蜈･`tenantId`霑<>ｻ､

**逅<>罰<EFBFBD>?* 髦ｲ豁｢蠑€蜿台ｺｺ蜻伜ｿ倩ｮｰ蝨ｨController螻ょ刈荳ｭ髣ｴ莉?

**隶｡蛻抵ｼ?* Phase 2蠑募<E8A091>

```typescript
const prismaExtended = prisma.$extends({
  query: {
    $allModels: {
      async findMany({ args, query }) {
        args.where = { ...args.where, tenantId: currentTenantId };
        return query(args);
      }
    }
  }
});
```

### 10.3 蜿埼ｦ郁ｴｨ驥剰ｯ<E589B0>ｻｷ

**諤ｻ菴楢ｯ<E6A5A2>ｼｰ<EFBDBC>?* 莨倡ｧ€ 箝絶ｭ絶ｭ絶ｭ絶ｭ?

- 笨?9譚｡蟒ｺ隶ｮ荳ｭ<E88DB3>?譚｡遶句叉驥<E58F89>ｺｳ<EFBDBA><EFBDB3>2譚｡郤ｳ蜈･蜷守ｻｭ隶｡蛻?
- 笨?蜿醍鴫莠<E9B4AB><E88EA0>鬚晏<E9AC9A>驟肴ｨ｡蝙狗噪隶ｾ隶｡郛ｺ髯ｷ<E9ABAF><EFBDB7>ritical<61>?
- 笨?蠑ｺ隹<EFBDBA>ｺ<EFBFBD>rompt邂｡逅<EFBDA1>噪譬ｸ蠢<EFBDB8>慍菴?
- 笨?謠仙<E8ACA0>莠<EFBFBD>ｮ樒畑逧<E79591>ｷ･遞句ｮ櫁ｷｵ蟒ｺ隶ｮ<E99AB6>亥屓貊壽婿譯医€∫ｧ榊ｭ先焚謐ｮ<E8AC90><EFBDAE>

**扈楢ｮｺ<EFBDAE>?* 譁<>｡｣雍ｨ驥城ｫ假ｼ碁｣朱勦蜿ｯ謗ｧ<E8AC97>?*蜿ｯ莉･蠑€蟋句ｼ€蜿?*縲?

---

**謚･蜻雁ｮ梧ｯ輔€ょ㊥螟<E38AA5>･ｽ蠑€蟋句ｼ€蜿台ｺ<E58FB0>雛<EFBFBD><E99B9B>** <20>噫