From a467b6f6edfff3766d7263b41259ff60ce47616d Mon Sep 17 00:00:00 2001
From: ymq <ymq@opencomputing.net>
Date: Mon, 17 Aug 2026 12:18:34 +0800
Subject: [PATCH] =?UTF-8?q?feat(llm):=20cockpit=E6=A8=A1=E5=9E=8B=E4=B8=8B?=
 =?UTF-8?q?=E6=8B=89=E6=8C=89org=5Fid=E8=BF=87=E6=BB=A4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 wwwroot/api/cockpit_model_options.dspy | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/wwwroot/api/cockpit_model_options.dspy b/wwwroot/api/cockpit_model_options.dspy
index 8bb29d5..fd6f18d 100644
--- a/wwwroot/api/cockpit_model_options.dspy
+++ b/wwwroot/api/cockpit_model_options.dspy
@@ -1,13 +1,18 @@
 # cockpit_model_options.dspy - Returns active models with capabilities for dropdown
 # Used by cockpit model selector
+# org_id 多租户隔离：非系统级机构只看到「本机构 + 系统级(org_id='0')」的模型
 
 dbname = get_module_dbname('pipeline-sdlc')
+org_id = (await get_userorgid()) or ''
 
 async with DBPools().sqlorContext(dbname) as sor:
-    recs = await sor.sqlExe(
-        "SELECT id, name, provider, model_id, capabilities FROM llm WHERE status='active' ORDER BY name",
-        {}
-    )
+    sql = "SELECT id, name, provider, model_id, capabilities FROM llm WHERE status='active'"
+    params = {}
+    if org_id and org_id != '0':
+        sql += " AND (org_id=${org}$ OR org_id='0')"
+        params['org'] = org_id
+    sql += " ORDER BY (org_id='0') ASC, name"
+    recs = await sor.sqlExe(sql, params)
 
 rows = []
 for r in recs: