{
  "mapping_positioning": "Feishu readonly snapshot -> HRMS REAL_TRIAL master data staging -> HRMS master data tables",
  "why_not_csv_waiting": "当前 6 张主数据表用于承载 Feishu 到 HRMS 的真实主数据映射，CSV 仅作为 fallback，不作为优先路线。",
  "feishu_department_to_departments": {
    "feishu_department_id": "departments.feishu_department_id",
    "name": "departments.department_name",
    "parent_department_id": "departments.parent_department_id via feishu_department_id mapping",
    "status": "departments.status",
    "tenant_company": "tenant_id/company_key reserved"
  },
  "feishu_user_to_employees": {
    "feishu_user_id": "feishu_user_mappings.feishu_user_id",
    "masked_name": "employees.employee_name_masked",
    "department": "employees.department_id via feishu_department_id -> departments",
    "position": "employees.position_id after position inference or manual staging confirmation",
    "manager": "employees.manager_employee_id after reporting line staging",
    "employment_status": "employees.employment_status"
  },
  "feishu_user_to_permission_subjects": {
    "employee_id": "permission_subjects.employee_id",
    "default_subject_type": "employee",
    "role_key": "derived by staging plan and permission baseline",
    "permission_scope": "JSONB scope by department/role"
  },
  "feishu_user_to_employee_role_assignments": {
    "employee_id": "employee_role_assignments.employee_id",
    "permission_subject_id": "employee_role_assignments.permission_subject_id",
    "role_key": "HR / manager / evaluator / boss viewer baseline",
    "scope_ref": "department_id or company_key"
  },
  "feishu_identity_to_feishu_user_mappings": {
    "feishu_user_id": "feishu_user_mappings.feishu_user_id",
    "feishu_open_id": "feishu_user_mappings.feishu_open_id, stored only after readonly scope approval",
    "feishu_union_id": "metadata/sensitive_payload_ref only after token gate",
    "writeback_allowed": false,
    "dry_run_only": true
  },
  "sensitive_handling": [
    "不输出 token / secret",
    "不公开 open_id / union_id 原值",
    "页面和 public JSON 只展示 readiness 与字段映射",
    "真实值只允许在受控 staging / DB gate 内处理"
  ]
}