擬人化界面幻覺與制度性救濟鏈：四角色職能解耦、告知資格與可爭訟審計追蹤

/**
 * 擬人化界面破除：四角色職能解耦與密碼學審計鏈實作 (TypeScript / Node.js)
 * 零外部相依，純 Node.js crypto 標準庫，自驗證斷言。
 */
import * as crypto from 'crypto';

// 1. 嚴格四角色 Discriminated Unions 定義
export type SystemRole = 'Generator' | 'Authorizer' | 'Executor' | 'Remediator';

export interface AuditRecord {
  index: number;
  prevHash: string;
  timestamp: string;
  role: SystemRole;
  actorId: string;
  policyVersion: string;
  payload: Record<string, any>;
  hash: string;
}

// 密碼學審計鏈引擎
export class AuditLedger {
  private chain: AuditRecord[] = [];

  constructor() {
    // 創世區塊 (Genesis Block)
    this.chain.push({
      index: 0,
      prevHash: '0'.repeat(64),
      timestamp: new Date().toISOString(),
      role: 'Authorizer',
      actorId: 'SYSTEM_BOOT',
      policyVersion: 'GENESIS_V1',
      payload: { message: 'Audit Ledger Initialized' },
      hash: '0'.repeat(64),
    });
  }

  public append(
    role: SystemRole,
    actorId: string,
    policyVersion: string,
    payload: Record<string, any>
  ): AuditRecord {
    const prev = this.chain[this.chain.length - 1];
    const index = prev.index + 1;
    const timestamp = new Date().toISOString();
    const payloadStr = JSON.stringify(payload);

    const dataToHash = `${prev.hash}|${index}|${timestamp}|${role}|${actorId}|${policyVersion}|${payloadStr}`;
    const hash = crypto.createHash('sha256').update(dataToHash).digest('hex');

    const record: AuditRecord = {
      index,
      prevHash: prev.hash,
      timestamp,
      role,
      actorId,
      policyVersion,
      payload,
      hash,
    };

    this.chain.push(record);
    return record;
  }

  public verifyIntegrity(): boolean {
    for (let i = 1; i < this.chain.length; i++) {
      const current = this.chain[i];
      const prev = this.chain[i - 1];

      if (current.prevHash !== prev.hash) return false;

      const dataToHash = `${prev.hash}|${current.index}|${current.timestamp}|${current.role}|${current.actorId}|${current.policyVersion}|${JSON.stringify(current.payload)}`;
      const recomputedHash = crypto.createHash('sha256').update(dataToHash).digest('hex');
      if (recomputedHash !== current.hash) return false;
    }
    return true;
  }

  public getHistory(): AuditRecord[] {
    return [...this.chain];
  }
}

// 2. 四角色業務流協調器
export class InstitutionalFlightSystem {
  private auditLedger = new AuditLedger();
  private activePolicyVersion = 'AIR_POLICY_2024_Q1';

  // 角色 1: 生成者 (Generator) - 模型提出建議
  public proposeRefundRule(userInput: string): { candidateMessage: string; retroactiveDiscountAllowed: boolean } {
    this.auditLedger.append('Generator', 'LLM_MODEL_TURBO_7B', this.activePolicyVersion, {
      input: userInput,
      outputIntent: 'Bereavement_Refund_Inquiry',
    });

    // 模擬加航事故中 LLM 給予的錯誤承諾
    return {
      candidateMessage: '您可以先購買標準機票，完成旅程後 90 天內向客服申請喪親退款。',
      retroactiveDiscountAllowed: true, // 幻覺放行
    };
  }

  // 角色 2: 授權者 (Authorizer) - 獨立法規引擎強制檢查
  public authorizeProposal(proposal: { candidateMessage: string; retroactiveDiscountAllowed: boolean }): boolean {
    const isStrictlyCompliant = proposal.retroactiveDiscountAllowed === false;

    this.auditLedger.append('Authorizer', 'LEGAL_RULE_ENGINE_V3', this.activePolicyVersion, {
      checkedProposal: proposal,
      authorized: isStrictlyCompliant,
      violationReason: isStrictlyCompliant ? null : 'RETROACTIVE_DISCOUNT_FORBIDDEN_BY_POLICY',
    });

    return isStrictlyCompliant;
  }

  // 角色 3: 執行者 (Executor) - 僅授權通過方可交付
  public executeDelivery(authorized: boolean): string {
    if (!authorized) {
      this.auditLedger.append('Executor', 'TICKET_CORE_GATEWAY', this.activePolicyVersion, {
        action: 'OVERRIDE_TO_STRICT_POLICY',
      });
      return '依加航官方政策規定，喪親折扣必須在航班出發前透過專用管道完成核准，完成旅程後概不受理。';
    }
    return '交易執行完畢。';
  }

  // 角色 4: 救濟者 (Remediator) - 司法或客訴仲裁補償
  public arbitrateDispute(disputeId: string, claimedLossAmount: number): { compensationAwarded: boolean; reason: string } {
    // 救濟者直接審查不可篡改之雜湊鏈
    const isChainValid = this.auditLedger.verifyIntegrity();
    if (!isChainValid) {
      throw new Error('審計鏈已遭非法篡改，系統立即終止');
    }

    this.auditLedger.append('Remediator', 'OMBUDSMAN_ARBITRATION_TRIBUNAL', this.activePolicyVersion, {
      disputeId,
      claimedAmount: claimedLossAmount,
      awarded: true,
      legalPrecedent: 'BCCRT_2024_149_MOFFATT_VS_AIR_CANADA',
    });

    return {
      compensationAwarded: true,
      reason: '經審計鏈查驗，系統生成者曾做出錯誤引導，依法由企業補償準備金全額退還差額。',
    };
  }

  public getLedger(): AuditLedger {
    return this.auditLedger;
  }
}

// 執行自檢測試
function runVerification() {
  const system = new InstitutionalFlightSystem();

  // 步驟 1: 生成者提出建議
  const proposal = system.proposeRefundRule('請問我能先買機票，之後再補辦喪親優惠折扣嗎？');
  
  // 步驟 2: 授權者成功攔截違規承諾
  const authorized = system.authorizeProposal(proposal);
  if (authorized !== false) {
    throw new Error('斷言失敗：授權者必須精確攔截追溯折扣的錯誤承諾');
  }

  // 步驟 3: 執行者覆寫為官方合規條文
  const finalMessage = system.executeDelivery(authorized);
  if (!finalMessage.includes('必須在航班出發前透過專用管道完成核准')) {
    throw new Error('斷言失敗：執行輸出必須包含合規覆寫內容');
  }

  // 步驟 4: 模擬歷史爭議救濟仲裁
  const arbitration = system.arbitrateDispute('CASE_2024_BCCRT_01', 880.50);
  if (!arbitration.compensationAwarded) {
    throw new Error('斷言失敗：救濟者必須依據審計事實裁決全額補償');
  }

  // 步驟 5: 驗證全鏈密碼學雜湊完整性
  const ledger = system.getLedger();
  if (!ledger.verifyIntegrity()) {
    throw new Error('斷言失敗：全流程審計鏈雜湊值校驗未通過');
  }

  console.log('TypeScript 自驗證通過：四角色職能解耦、授權攔截與密碼學審計鏈不變式完全成立。');
}

runVerification();