feat: 新增风险规则生成引擎与知识图谱可视化

后端新增风险规则自动生成和模板执行服务，支持从规则资产
批量生成并持久化风险规则文件；知识库入库日志增强图谱
查询和本地 RAG 回退，前端审计页面增加风险规则模型和流
程图组件，知识入库面板拆分为图谱可视化子组件，报销创
建页面增加引导式流程模型，更新知识库索引数据。

server/src/app/api/v1/endpoints/agent_assets.py

@@ -23,6 +23,7 @@ from app.schemas.agent_asset import (
     AgentAssetRead,
     AgentAssetReviewCreate,
     AgentAssetReviewRead,
+    AgentAssetRiskRuleGenerateRequest,
     AgentAssetRuleJsonRead,
     AgentAssetRuleJsonWrite,
     AgentAssetSpreadsheetChangeRecordRead,
@@ -33,6 +34,7 @@ from app.schemas.agent_asset import (
 )
 from app.schemas.common import ErrorResponse
 from app.services.agent_assets import AgentAssetService
+from app.services.risk_rule_generation import RiskRuleGenerationService
 
 router = APIRouter(prefix="/agent-assets")
 DbSession = Annotated[Session, Depends(get_db)]
@@ -154,6 +156,35 @@ def save_agent_asset_rule_json(
         _handle_asset_error(exc)
 
 
+@router.post(
+    "/risk-rules/generate",
+    response_model=AgentAssetRead,
+    status_code=status.HTTP_201_CREATED,
+    summary="根据自然语言新建风险规则草稿",
+    description="根据业务域、风险等级和自然语言描述生成 JSON 风险规则，并保存为待审核草稿资产。",
+)
+def generate_agent_asset_risk_rule(
+    payload: AgentAssetRiskRuleGenerateRequest,
+    current_user: RuleEditorUser,
+    db: DbSession,
+    x_actor: ActorHeader = None,
+    x_request_id: RequestIdHeader = None,
+) -> AgentAssetRead:
+    try:
+        actor = (x_actor or current_user.name or "system").strip() or "system"
+        asset_id = RiskRuleGenerationService(db).generate_rule_asset(
+            payload,
+            actor=actor,
+            request_id=x_request_id,
+        )
+        asset = AgentAssetService(db).get_asset(asset_id)
+        if asset is None:
+            raise LookupError("Asset not found")
+        return asset
+    except Exception as exc:
+        _handle_asset_error(exc)
+
+
 @router.get(
     "/{asset_id}/spreadsheet/onlyoffice-config",
     response_model=AgentAssetOnlyOfficeConfigRead,
@@ -508,11 +539,7 @@ def create_agent_asset_review(
     try:
         role_codes = {item.strip() for item in current_user.role_codes}
         if payload.review_status.value == "pending":
-            if not (
-                current_user.is_admin
-                or "manager" in role_codes
-                or "finance" in role_codes
-            ):
+            if not (current_user.is_admin or "manager" in role_codes or "finance" in role_codes):
                 raise PermissionError("只有财务人员或高级管理人员可以提交审核。")
         elif not (current_user.is_admin or "manager" in role_codes):
             raise PermissionError("只有高级管理人员可以审核规则。")
@@ -599,4 +626,3 @@ def get_agent_asset_version_timeline(
         return AgentAssetService(db).list_version_timeline(asset_id)
     except Exception as exc:
         _handle_asset_error(exc)
-