Blizzard
819 lines
31 KiB
TypeScript
819 lines
31 KiB
TypeScript
// 运维控制台 → Gateway 控制面 API（带 JWT 鉴权；/admin 受 RequireAdmin 保护）。
|
||
export const GATEWAY: string =
|
||
(import.meta.env.VITE_GATEWAY as string | undefined) ?? "http://localhost:8080";
|
||
const ADMIN = `${GATEWAY}/api/v1/admin`;
|
||
|
||
// ---- 鉴权（JWT，存 localStorage）----
|
||
const TOKEN_KEY = "sdx_admin_token";
|
||
let token = typeof localStorage !== "undefined" ? localStorage.getItem(TOKEN_KEY) ?? "" : "";
|
||
|
||
export function setToken(t: string): void {
|
||
token = t;
|
||
try {
|
||
localStorage.setItem(TOKEN_KEY, t);
|
||
} catch {
|
||
/* ignore */
|
||
}
|
||
}
|
||
export function clearToken(): void {
|
||
token = "";
|
||
try {
|
||
localStorage.removeItem(TOKEN_KEY);
|
||
} catch {
|
||
/* ignore */
|
||
}
|
||
}
|
||
export function getToken(): string {
|
||
return token;
|
||
}
|
||
|
||
function authHeaders(json = false): Record<string, string> {
|
||
const h: Record<string, string> = token ? { Authorization: `Bearer ${token}` } : {};
|
||
if (json) h["Content-Type"] = "application/json";
|
||
return h;
|
||
}
|
||
|
||
// guard 在 401(未登录) 时清令牌并广播登出（403=已登录但非管理员，照常抛错）。
|
||
function guard(res: Response): Response {
|
||
if (res.status === 401) {
|
||
clearToken();
|
||
if (typeof window !== "undefined") window.dispatchEvent(new Event("sdx:logout"));
|
||
}
|
||
return res;
|
||
}
|
||
|
||
export interface AuthUser {
|
||
id: string;
|
||
email: string;
|
||
name?: string;
|
||
}
|
||
|
||
export async function login(email: string, password: string): Promise<AuthUser> {
|
||
const res = await fetch(`${GATEWAY}/api/v1/auth/login`, {
|
||
method: "POST",
|
||
headers: { "Content-Type": "application/json" },
|
||
body: JSON.stringify({ email, password }),
|
||
});
|
||
const data = (await res.json()) as { token?: string; user?: AuthUser; error?: string };
|
||
if (!res.ok || !data.token || !data.user) throw new Error(data.error ?? `登录失败: ${res.status}`);
|
||
setToken(data.token);
|
||
return data.user;
|
||
}
|
||
|
||
export async function me(): Promise<AuthUser | null> {
|
||
if (!token) return null;
|
||
const res = await fetch(`${GATEWAY}/api/v1/auth/me`, { headers: authHeaders() });
|
||
if (!res.ok) {
|
||
clearToken();
|
||
return null;
|
||
}
|
||
return ((await res.json()) as { user?: AuthUser }).user ?? null;
|
||
}
|
||
|
||
// ---- 模型配置（id 为雪花字符串）----
|
||
export type Kind = "chat" | "embedding";
|
||
|
||
export interface Model {
|
||
id: string;
|
||
kind: Kind;
|
||
provider: string;
|
||
base_url: string;
|
||
api_key: string; // 列表里是脱敏值
|
||
model: string;
|
||
active: boolean;
|
||
}
|
||
|
||
export interface ModelInput {
|
||
id?: string;
|
||
kind: Kind;
|
||
provider: string;
|
||
base_url: string;
|
||
api_key: string;
|
||
model: string;
|
||
}
|
||
|
||
export async function listModels(kind: Kind): Promise<Model[]> {
|
||
const res = guard(await fetch(`${ADMIN}/models?kind=${kind}`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`list failed: ${res.status}`);
|
||
return ((await res.json()) as { models: Model[] }).models;
|
||
}
|
||
|
||
export async function saveModel(m: ModelInput): Promise<string> {
|
||
const res = guard(await fetch(`${ADMIN}/models`, { method: "POST", headers: authHeaders(true), body: JSON.stringify(m) }));
|
||
const data = (await res.json()) as { id?: string; error?: string };
|
||
if (!res.ok) throw new Error(data.error ?? `save failed: ${res.status}`);
|
||
return data.id ?? "";
|
||
}
|
||
|
||
export async function setActive(id: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/models/${id}/active`, { method: "POST", headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`activate failed: ${res.status}`);
|
||
}
|
||
|
||
export async function deleteModel(id: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/models/${id}`, { method: "DELETE", headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`delete failed: ${res.status}`);
|
||
}
|
||
|
||
export async function testModel(m: ModelInput): Promise<{ ok: boolean; message: string }> {
|
||
const res = guard(await fetch(`${ADMIN}/models/test`, { method: "POST", headers: authHeaders(true), body: JSON.stringify(m) }));
|
||
return (await res.json()) as { ok: boolean; message: string };
|
||
}
|
||
|
||
// ---- 计价（token↔真钱，按模型分输入/输出）----
|
||
export interface Pricing {
|
||
model_id: string;
|
||
input_per_1k: number;
|
||
output_per_1k: number;
|
||
credit_weight: number; // 每模型积分权重（0/缺省=1.0，不加权）
|
||
currency: string;
|
||
}
|
||
|
||
export async function listPricing(): Promise<Pricing[]> {
|
||
const res = guard(await fetch(`${ADMIN}/pricing`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`list pricing failed: ${res.status}`);
|
||
return ((await res.json()) as { pricing: Pricing[] }).pricing ?? [];
|
||
}
|
||
|
||
export async function savePricing(p: Pricing): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/pricing`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify(p) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `save pricing failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
// —— 全局计费规则（token→积分汇率 + 硬拦截开关）——
|
||
export async function getBillingConfig(): Promise<{ tokens_per_credit: number; credit_enforce: boolean }> {
|
||
const res = guard(await fetch(`${ADMIN}/billing-config`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`billing config failed: ${res.status}`);
|
||
const d = (await res.json()) as { tokens_per_credit?: string; credit_enforce?: boolean };
|
||
return { tokens_per_credit: Number(d.tokens_per_credit) || 1000, credit_enforce: !!d.credit_enforce }; // 空/未设 → 回退默认
|
||
}
|
||
|
||
export async function saveBillingConfig(tokensPerCredit: number, creditEnforce: boolean): Promise<void> {
|
||
const res = guard(
|
||
await fetch(`${ADMIN}/billing-config`, {
|
||
method: "PUT",
|
||
headers: authHeaders(true),
|
||
body: JSON.stringify({ tokens_per_credit: tokensPerCredit, credit_enforce: creditEnforce }),
|
||
}),
|
||
);
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `save billing config failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
// —— 充值/发放积分（正=充值，负=校正）——
|
||
export async function grantCredits(tenantId: string, credits: number, memo: string): Promise<number> {
|
||
const res = guard(
|
||
await fetch(`${ADMIN}/credits/grant`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ tenant_id: tenantId, credits, memo }) }),
|
||
);
|
||
const d = (await res.json().catch(() => ({}))) as { balance_micro?: number; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `grant failed: ${res.status}`);
|
||
return d.balance_micro ?? 0;
|
||
}
|
||
|
||
// ---- 充值渠道（P5.1）：积分包配置 + 兑换码 ----
|
||
export interface CreditPack {
|
||
id: string;
|
||
name: string;
|
||
credits_micro: number;
|
||
price_fen: number;
|
||
active: boolean;
|
||
sort: number;
|
||
}
|
||
|
||
export async function adminPacks(): Promise<CreditPack[]> {
|
||
const res = guard(await fetch(`${ADMIN}/packs`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { packs?: CreditPack[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `packs failed: ${res.status}`);
|
||
return d.packs ?? [];
|
||
}
|
||
|
||
// savePack：id 空 = 新建。credits 单位为「积分」（面向人，服务端转 micro）。
|
||
export async function savePack(p: { id?: string; name: string; credits: number; price_fen: number; active: boolean; sort: number }): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/packs`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify(p) }));
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `save failed: ${res.status}`);
|
||
}
|
||
|
||
export interface RedeemCodeRow {
|
||
id: string;
|
||
code: string;
|
||
credits_micro: number;
|
||
status: string; // unused / used
|
||
used_tenant: string;
|
||
used_at: string | null;
|
||
memo: string;
|
||
created_at: string;
|
||
}
|
||
|
||
export async function genRedeemCodes(credits: number, count: number, memo: string): Promise<string[]> {
|
||
const res = guard(
|
||
await fetch(`${ADMIN}/redeem-codes`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ credits, count, memo }) }),
|
||
);
|
||
const d = (await res.json().catch(() => ({}))) as { codes?: string[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `生成失败: ${res.status}`);
|
||
return d.codes ?? [];
|
||
}
|
||
|
||
export async function listRedeemCodes(): Promise<RedeemCodeRow[]> {
|
||
const res = guard(await fetch(`${ADMIN}/redeem-codes`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { codes?: RedeemCodeRow[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `codes failed: ${res.status}`);
|
||
return d.codes ?? [];
|
||
}
|
||
|
||
// ---- 微信支付配置（DB 存储、热生效；APIv3 密钥密文入库、不回显）----
|
||
export interface WechatPayConfig {
|
||
mchid: string;
|
||
cert_serial: string;
|
||
private_key_path: string;
|
||
public_key_path: string; // 微信支付公钥（2024 起新商户体系；本商户 2025-09 开户）
|
||
public_key_id: string; // PUB_KEY_ID_ 开头
|
||
appid: string;
|
||
notify_url: string;
|
||
has_apiv3_key: boolean;
|
||
}
|
||
|
||
export async function getWechatPay(): Promise<{ config: WechatPayConfig; enabled: boolean; reason: string }> {
|
||
const res = guard(await fetch(`${ADMIN}/payment/wechat`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { config?: WechatPayConfig; enabled?: boolean; reason?: string; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `load failed: ${res.status}`);
|
||
return { config: d.config!, enabled: !!d.enabled, reason: d.reason ?? "" };
|
||
}
|
||
|
||
// saveWechatPay：apiv3_key 传空串 = 沿用已保存的密钥。返回热重载后的渠道状态。
|
||
export async function saveWechatPay(body: {
|
||
mchid: string;
|
||
cert_serial: string;
|
||
private_key_path: string;
|
||
public_key_path: string;
|
||
public_key_id: string;
|
||
apiv3_key: string;
|
||
appid: string;
|
||
notify_url: string;
|
||
}): Promise<{ enabled: boolean; reason: string }> {
|
||
const res = guard(await fetch(`${ADMIN}/payment/wechat`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify(body) }));
|
||
const d = (await res.json().catch(() => ({}))) as { enabled?: boolean; reason?: string; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `save failed: ${res.status}`);
|
||
return { enabled: !!d.enabled, reason: d.reason ?? "" };
|
||
}
|
||
|
||
// ---- 充值订单流 + 对账（P5.3）----
|
||
export interface PayOrder {
|
||
id: string;
|
||
tenant_id: string;
|
||
tenant_name: string;
|
||
amount_fen: number;
|
||
credits_micro: number;
|
||
channel: string;
|
||
status: string;
|
||
created_at: string;
|
||
}
|
||
export interface OrderStats {
|
||
pending: number;
|
||
paid: number;
|
||
expired: number;
|
||
paid_fen_total: number;
|
||
}
|
||
export interface ReconcileDiff {
|
||
order_id: string;
|
||
tenant_id: string;
|
||
credits_micro: number;
|
||
issue: string;
|
||
}
|
||
|
||
export async function adminOrders(status = ""): Promise<{ orders: PayOrder[]; stats: OrderStats }> {
|
||
const q = status ? `?status=${status}` : "";
|
||
const res = guard(await fetch(`${ADMIN}/orders${q}`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { orders?: PayOrder[]; stats?: OrderStats; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `orders failed: ${res.status}`);
|
||
return { orders: d.orders ?? [], stats: d.stats ?? { pending: 0, paid: 0, expired: 0, paid_fen_total: 0 } };
|
||
}
|
||
|
||
export async function adminReconcile(): Promise<{ diffs: ReconcileDiff[]; ok: boolean }> {
|
||
const res = guard(await fetch(`${ADMIN}/orders/reconcile`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { diffs?: ReconcileDiff[]; ok?: boolean; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `reconcile failed: ${res.status}`);
|
||
return { diffs: d.diffs ?? [], ok: !!d.ok };
|
||
}
|
||
|
||
// 人工退款：仅对已入账(paid)单——置 refunded + 记 adjust 负分录 + 回退余额（幂等）。
|
||
// status="noop" 表示该单本就无需退（已退/未支付）。真渠道钱的原路退回需 admin 另在商户后台操作。
|
||
export async function adminRefundOrder(id: string, memo: string): Promise<{ status: string; detail?: string }> {
|
||
const res = guard(await fetch(`${ADMIN}/orders/${id}/refund`, {
|
||
method: "POST",
|
||
headers: { ...authHeaders(), "Content-Type": "application/json" },
|
||
body: JSON.stringify({ memo }),
|
||
}));
|
||
const d = (await res.json().catch(() => ({}))) as { status?: string; detail?: string; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `refund failed: ${res.status}`);
|
||
return { status: d.status ?? "", detail: d.detail };
|
||
}
|
||
|
||
// ---- 全平台任务/运行观测（管理端，来自 sundynix_task 跨租户）----
|
||
export interface AdminTask {
|
||
task_id: string;
|
||
tenant_id: string;
|
||
tenant_name: string;
|
||
owner: string;
|
||
owner_email: string;
|
||
status: string;
|
||
detail: string;
|
||
topic: string;
|
||
at: string; // RFC3339
|
||
eval_level: string;
|
||
eval_overall: number;
|
||
}
|
||
|
||
// adminTasks 全平台任务流 + 状态计数。status 空=全部;tenant 空=全租户;含 HITL 待审批(status=waiting)。
|
||
export async function adminTasks(
|
||
status = "",
|
||
tenant = "",
|
||
limit = 50,
|
||
): Promise<{ tasks: AdminTask[]; counts: Record<string, number> }> {
|
||
const q = new URLSearchParams();
|
||
if (status) q.set("status", status);
|
||
if (tenant) q.set("tenant", tenant);
|
||
q.set("limit", String(limit));
|
||
const res = guard(await fetch(`${ADMIN}/tasks?${q.toString()}`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { tasks?: AdminTask[]; counts?: Record<string, number>; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `tasks failed: ${res.status}`);
|
||
return { tasks: d.tasks ?? [], counts: d.counts ?? {} };
|
||
}
|
||
|
||
// ---- 全平台空间(Space)观测（管理端，跨租户 sundynix_space）----
|
||
export interface AdminSpace {
|
||
id: string;
|
||
tenant_id: string;
|
||
tenant_name: string;
|
||
name: string;
|
||
kind: string; // personal / project / tenant
|
||
creator: string;
|
||
creator_email: string;
|
||
archived: boolean;
|
||
members: number;
|
||
created_at: string;
|
||
}
|
||
|
||
export async function adminSpaces(limit = 200): Promise<AdminSpace[]> {
|
||
const res = guard(await fetch(`${ADMIN}/spaces?limit=${limit}`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { spaces?: AdminSpace[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `spaces failed: ${res.status}`);
|
||
return d.spaces ?? [];
|
||
}
|
||
|
||
// ---- 自动评测观测（真数据，来自 sundynix_eval）----
|
||
export interface EvalDay {
|
||
day: string; // YYYYMMDD
|
||
avg_overall: number;
|
||
avg_faithful: number;
|
||
count: number;
|
||
poor_count: number;
|
||
}
|
||
export interface EvalSummary {
|
||
total: number;
|
||
ok: number;
|
||
warn: number;
|
||
poor: number;
|
||
corrected: number;
|
||
avg_overall: number;
|
||
}
|
||
export interface PoorEval {
|
||
task_id: string;
|
||
tenant_name: string;
|
||
owner: string;
|
||
overall: number;
|
||
rule: number;
|
||
llm: number;
|
||
faithful: number;
|
||
level: string;
|
||
reason: string;
|
||
sources: number;
|
||
corrected: boolean;
|
||
created_at: string;
|
||
}
|
||
|
||
export async function adminEvals(days = 14): Promise<{ from: string; to: string; trend: EvalDay[]; summary: EvalSummary; poor: PoorEval[] }> {
|
||
const res = guard(await fetch(`${ADMIN}/evals?days=${days}`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { from?: string; to?: string; trend?: EvalDay[]; summary?: EvalSummary; poor?: PoorEval[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `evals failed: ${res.status}`);
|
||
return {
|
||
from: d.from ?? "",
|
||
to: d.to ?? "",
|
||
trend: d.trend ?? [],
|
||
summary: d.summary ?? { total: 0, ok: 0, warn: 0, poor: 0, corrected: 0, avg_overall: 0 },
|
||
poor: d.poor ?? [],
|
||
};
|
||
}
|
||
|
||
// ---- 输入护栏安全事件（真数据，来自 guardrail_event）----
|
||
export interface GuardrailEvent {
|
||
id: string;
|
||
actor: string;
|
||
kind: string; // blocked（硬拦）/ suspect（灰区放行）
|
||
reason: string;
|
||
signals: string; // 命中软信号 JSON 数组字符串
|
||
method: string;
|
||
path: string;
|
||
ip: string;
|
||
at: string;
|
||
}
|
||
|
||
export async function guardrailEvents(limit = 100): Promise<GuardrailEvent[]> {
|
||
const res = guard(await fetch(`${ADMIN}/guardrail-events?limit=${limit}`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { events?: GuardrailEvent[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `guardrail failed: ${res.status}`);
|
||
return d.events ?? [];
|
||
}
|
||
|
||
// ---- 数据源清单（真数据，全平台知识库）----
|
||
export interface DatasourceKB {
|
||
id: string;
|
||
name: string;
|
||
kind: string;
|
||
tenant_id: string;
|
||
tenant_name: string;
|
||
owner: string;
|
||
doc_count: number;
|
||
total_words: number;
|
||
}
|
||
|
||
export async function adminDatasources(): Promise<{ counts: { users: number; kbs: number; docs: number }; datasources: DatasourceKB[] }> {
|
||
const res = guard(await fetch(`${ADMIN}/datasources`, { headers: authHeaders() }));
|
||
const d = (await res.json().catch(() => ({}))) as { counts?: { users: number; kbs: number; docs: number }; datasources?: DatasourceKB[]; error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `datasources failed: ${res.status}`);
|
||
return { counts: d.counts ?? { users: 0, kbs: 0, docs: 0 }, datasources: d.datasources ?? [] };
|
||
}
|
||
|
||
// gatewayOnline 用公开的 /healthz 探活（不受鉴权影响）。
|
||
export async function gatewayOnline(): Promise<boolean> {
|
||
try {
|
||
const res = await fetch(`${GATEWAY}/healthz`);
|
||
return res.ok;
|
||
} catch {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
// —— 服务状态：基建 / 应用服务探活 + MCP 工具注册 ——
|
||
export interface StatusItem {
|
||
name: string;
|
||
up: boolean;
|
||
detail?: string;
|
||
latency_ms?: number;
|
||
}
|
||
export interface ToolInfo {
|
||
name: string;
|
||
cn: string;
|
||
desc: string;
|
||
}
|
||
export interface ToolGroup {
|
||
server: string;
|
||
up: boolean;
|
||
tools: ToolInfo[] | null;
|
||
}
|
||
export interface SystemStatus {
|
||
checked_at: string;
|
||
infra: StatusItem[];
|
||
services: StatusItem[];
|
||
tools: ToolGroup[];
|
||
}
|
||
|
||
export async function getStatus(): Promise<SystemStatus> {
|
||
const res = guard(await fetch(`${ADMIN}/status`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`status failed: ${res.status}`);
|
||
return (await res.json()) as SystemStatus;
|
||
}
|
||
|
||
// —— 工作台概览（仪表盘聚合）——
|
||
// /api/v1/stats/overview 在 RequireAuth 组下；Task/Eval 表无 owner，故任务/评测口径为全局。
|
||
export interface DayCount {
|
||
key: string;
|
||
count: number;
|
||
}
|
||
export interface RecentRun {
|
||
task_id: string;
|
||
status: string;
|
||
detail: string;
|
||
at: string;
|
||
}
|
||
export interface Overview {
|
||
tasks_today: number;
|
||
tasks_total: number;
|
||
status_count: DayCount[]; // 近 7 天终态分布
|
||
task_trend: DayCount[]; // 近 7 天每日任务数（仅含有任务的天）
|
||
eval_avg: number;
|
||
faithful_avg: number; // 仅有来源的评测；无来源时为 0
|
||
eval_count: number;
|
||
kb_docs: number;
|
||
kb_count: number;
|
||
tokens_today: number;
|
||
daily_budget: number; // 0 = 不限额
|
||
token_trend: DayCount[];
|
||
recent_runs: RecentRun[];
|
||
services: Record<string, boolean>;
|
||
}
|
||
|
||
export async function statsOverview(): Promise<Overview> {
|
||
const res = guard(await fetch(`${GATEWAY}/api/v1/stats/overview`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`overview failed: ${res.status}`);
|
||
return (await res.json()) as Overview;
|
||
}
|
||
|
||
// —— 管理端系统级聚合（控制塔口径，RequireAdmin）——
|
||
// 区别于 statsOverview（桌面端个人工作台）：这里一律全平台口径——全部用户/任务/评测/模型态/提示词态/健康。
|
||
// 单模型运行时健康态（failover 链上主/备各一条）。
|
||
export interface ModelHealthItem {
|
||
provider: string;
|
||
model: string;
|
||
role: string; // primary / fallback
|
||
state: string; // closed(在线) / open(熔断中) / half-open(半开探测) / single(无备用链)
|
||
fails: number;
|
||
}
|
||
|
||
export interface AdminOverview {
|
||
users: number;
|
||
kb_count: number; // 全平台知识库数
|
||
kb_docs: number; // 全平台文档数
|
||
tasks_today: number;
|
||
tasks_total: number;
|
||
status_count: DayCount[];
|
||
task_trend: DayCount[];
|
||
eval_avg: number;
|
||
faithful_avg: number;
|
||
eval_count: number;
|
||
models: {
|
||
chat_count: number;
|
||
embedding_count: number;
|
||
active_chat: string;
|
||
active_embedding: string;
|
||
fallbacks: number;
|
||
health: ModelHealthItem[]; // 运行时每模型 failover/熔断态（来自 dispatcher）
|
||
};
|
||
prompts: { managed: number; overrides: number };
|
||
services: Record<string, boolean>;
|
||
checked_at: string;
|
||
}
|
||
|
||
export async function adminOverview(): Promise<AdminOverview> {
|
||
const res = guard(await fetch(`${ADMIN}/overview`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`admin overview failed: ${res.status}`);
|
||
return (await res.json()) as AdminOverview;
|
||
}
|
||
|
||
// —— 审计 / 安全事件（敏感操作留痕 + 护栏命中）——
|
||
export interface AuditEntry {
|
||
id: string;
|
||
actor: string; // 操作者 uid
|
||
action: string; // POST / PUT / DELETE / PATCH
|
||
route: string;
|
||
path: string;
|
||
status: number;
|
||
ip: string;
|
||
detail: string;
|
||
at: string;
|
||
}
|
||
export interface GuardrailEventItem {
|
||
id: string;
|
||
actor: string;
|
||
kind: string; // blocked / suspect
|
||
reason: string;
|
||
signals: string; // JSON 数组字符串
|
||
method: string;
|
||
path: string;
|
||
ip: string;
|
||
at: string;
|
||
}
|
||
|
||
export async function listAudit(limit = 50, offset = 0): Promise<AuditEntry[]> {
|
||
const res = guard(await fetch(`${ADMIN}/audit?limit=${limit}&offset=${offset}`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`audit failed: ${res.status}`);
|
||
return ((await res.json()) as { logs?: AuditEntry[] }).logs ?? [];
|
||
}
|
||
|
||
export async function listGuardrailEvents(limit = 50, offset = 0): Promise<GuardrailEventItem[]> {
|
||
const res = guard(await fetch(`${ADMIN}/guardrail-events?limit=${limit}&offset=${offset}`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`guardrail events failed: ${res.status}`);
|
||
return ((await res.json()) as { events?: GuardrailEventItem[] }).events ?? [];
|
||
}
|
||
|
||
// —— Prompt 控制面（建版本 → 激活 → 控制面热下发各服务，不重启即生效）——
|
||
// 注意：prompt 路由在 RequireAuth 组下（/api/v1/prompts），不在 /admin 前缀内。
|
||
const PROMPTS = `${GATEWAY}/api/v1/prompts`;
|
||
|
||
export interface PromptVersion {
|
||
key: string;
|
||
version: number;
|
||
active: boolean;
|
||
note: string;
|
||
content: string;
|
||
}
|
||
|
||
export interface PromptListResp {
|
||
keys: string[]; // 平台受管的全部可配 key（即便还没建过版本）
|
||
versions: PromptVersion[];
|
||
}
|
||
|
||
// 某 key 的聚合视图：版本按号倒序、当前激活版（无则 null = 回退代码内置默认）。
|
||
export interface PromptGroup {
|
||
key: string;
|
||
versions: PromptVersion[];
|
||
active: PromptVersion | null;
|
||
}
|
||
|
||
// groupPrompts 把扁平的 {keys, versions} 归并成按 key 的分组（控制面页面的事实源）。
|
||
// 纯函数：保持 keys 的注册顺序，每组版本号倒序，挑出激活版。
|
||
export function groupPrompts(resp: PromptListResp): PromptGroup[] {
|
||
const byKey = new Map<string, PromptVersion[]>();
|
||
for (const k of resp.keys) byKey.set(k, []);
|
||
for (const v of resp.versions) {
|
||
if (!byKey.has(v.key)) byKey.set(v.key, []); // 容错：DB 有但 Known 未列的 key 也展示
|
||
byKey.get(v.key)!.push(v);
|
||
}
|
||
return Array.from(byKey.entries()).map(([key, vs]) => {
|
||
const versions = [...vs].sort((a, b) => b.version - a.version);
|
||
return { key, versions, active: versions.find((v) => v.active) ?? null };
|
||
});
|
||
}
|
||
|
||
export async function listPrompts(): Promise<PromptListResp> {
|
||
const res = guard(await fetch(PROMPTS, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`list prompts failed: ${res.status}`);
|
||
const data = (await res.json()) as Partial<PromptListResp>;
|
||
return { keys: data.keys ?? [], versions: data.versions ?? [] };
|
||
}
|
||
|
||
export async function createPromptVersion(key: string, content: string, note: string): Promise<number> {
|
||
const res = guard(
|
||
await fetch(`${PROMPTS}/version`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ key, content, note }) }),
|
||
);
|
||
const data = (await res.json()) as { version?: number; error?: string };
|
||
if (!res.ok) throw new Error(data.error ?? `create version failed: ${res.status}`);
|
||
return data.version ?? 0;
|
||
}
|
||
|
||
export async function activatePrompt(key: string, version: number): Promise<void> {
|
||
const res = guard(
|
||
await fetch(`${PROMPTS}/activate`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ key, version }) }),
|
||
);
|
||
const data = (await res.json()) as { error?: string; warn?: string };
|
||
if (!res.ok) throw new Error(data.error ?? `activate failed: ${res.status}`);
|
||
if (data.warn) throw new Error(data.warn); // 已激活但广播失败 → 当作错误提示运维
|
||
}
|
||
|
||
export async function deactivatePrompt(key: string): Promise<void> {
|
||
const res = guard(await fetch(`${PROMPTS}/deactivate`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ key }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `deactivate failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
// —— 用量 / 计费（SaaS P2 计量：token / 积分 / 成本，按租户）——
|
||
// 金额与积分均为「微单位」（×10⁻⁶）：展示时 ÷1e6。走 /admin/usage（系统级，跨租户）。
|
||
export interface UsageDay {
|
||
day: string; // YYYYMMDD
|
||
total_tok: number;
|
||
credits_micro: number;
|
||
cost_micros: number;
|
||
task_count: number;
|
||
}
|
||
export interface UsageTenantSum {
|
||
tenant_id: string;
|
||
name: string;
|
||
total_tok: number;
|
||
credits_micro: number;
|
||
cost_micros: number;
|
||
task_count: number;
|
||
balance_micro: number;
|
||
}
|
||
export interface UsageReport {
|
||
from: string;
|
||
to: string;
|
||
tenant: string; // 空 = 全平台口径
|
||
trend: UsageDay[];
|
||
totals: { total_tok: number; credits_micro: number; cost_micros: number; task_count: number };
|
||
balance_micro?: number; // 仅单租户口径
|
||
tenants?: UsageTenantSum[]; // 仅全平台口径：各租户排行
|
||
}
|
||
|
||
export async function adminUsage(params?: { tenant?: string; from?: string; to?: string }): Promise<UsageReport> {
|
||
const q = new URLSearchParams();
|
||
if (params?.tenant) q.set("tenant", params.tenant);
|
||
if (params?.from) q.set("from", params.from);
|
||
if (params?.to) q.set("to", params.to);
|
||
const qs = q.toString();
|
||
const res = guard(await fetch(`${ADMIN}/usage${qs ? "?" + qs : ""}`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`usage failed: ${res.status}`);
|
||
const d = (await res.json()) as UsageReport;
|
||
return { ...d, trend: d.trend ?? [], tenants: d.tenants ?? [] }; // Go 空切片可能序列化为 null
|
||
}
|
||
|
||
// —— 多成员租户：租户目录 + 成员管理 ——
|
||
export interface TenantRow {
|
||
id: string;
|
||
name: string;
|
||
slug: string;
|
||
plan: string;
|
||
status: string;
|
||
credit_balance_micro: number;
|
||
shared_billing: boolean;
|
||
members: number;
|
||
}
|
||
export interface Member {
|
||
user_id: string;
|
||
email: string;
|
||
name: string;
|
||
role: string; // owner / admin / member / viewer / billing_admin
|
||
status: string;
|
||
joined_at: string;
|
||
}
|
||
|
||
export async function listTenants(): Promise<TenantRow[]> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`list tenants failed: ${res.status}`);
|
||
return ((await res.json()) as { tenants?: TenantRow[] }).tenants ?? [];
|
||
}
|
||
|
||
export async function createTenant(name: string, slug: string, ownerEmail?: string, plan?: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants`, {
|
||
method: "POST", headers: authHeaders(true),
|
||
body: JSON.stringify({ name, slug, owner_email: ownerEmail ?? "", plan: plan ?? "free" }),
|
||
}));
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string; warn?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `create tenant failed: ${res.status}`);
|
||
if (d.warn) throw new Error(d.warn); // 租户已建但指定 owner 失败 → 当提示
|
||
}
|
||
|
||
export async function listMembers(tenantId: string): Promise<Member[]> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/members`, { headers: authHeaders() }));
|
||
if (!res.ok) throw new Error(`list members failed: ${res.status}`);
|
||
return ((await res.json()) as { members?: Member[] }).members ?? [];
|
||
}
|
||
|
||
export async function addMember(tenantId: string, email: string, role: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/members`, { method: "POST", headers: authHeaders(true), body: JSON.stringify({ email, role }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `add member failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
export async function setMemberRole(tenantId: string, uid: string, role: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/members/${uid}`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify({ role }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `set role failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
export async function removeMember(tenantId: string, uid: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/members/${uid}`, { method: "DELETE", headers: authHeaders() }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `remove member failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
export async function setSharedBilling(tenantId: string, on: boolean): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/shared-billing`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify({ shared_billing: on }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `set shared billing failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
// —— KB 存储迁移（管理员一次性运维操作：owner/kb 作用域 → space_id/kb 作用域）——
|
||
export interface MigrateKbResult {
|
||
total: number; // 扫描文档总数
|
||
enqueued: number; // 成功入队重灌的文档数
|
||
skipped: number; // 已是新作用域跳过数
|
||
}
|
||
export async function migrateKbStorage(): Promise<MigrateKbResult> {
|
||
const res = guard(await fetch(`${ADMIN}/migrate-kb-storage`, { method: "POST", headers: authHeaders(true) }));
|
||
const d = (await res.json().catch(() => ({}))) as Partial<MigrateKbResult> & { error?: string };
|
||
if (!res.ok) throw new Error(d.error ?? `migrate kb failed: ${res.status}`);
|
||
return { total: d.total ?? 0, enqueued: d.enqueued ?? 0, skipped: d.skipped ?? 0 };
|
||
}
|
||
|
||
export async function setTenantPlan(tenantId: string, plan: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/plan`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify({ plan }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `set tenant plan failed: ${res.status}`);
|
||
}
|
||
}
|
||
|
||
export async function setTenantStatus(tenantId: string, status: string): Promise<void> {
|
||
const res = guard(await fetch(`${ADMIN}/tenants/${tenantId}/status`, { method: "PUT", headers: authHeaders(true), body: JSON.stringify({ status }) }));
|
||
if (!res.ok) {
|
||
const d = (await res.json().catch(() => ({}))) as { error?: string };
|
||
throw new Error(d.error ?? `set tenant status failed: ${res.status}`);
|
||
}
|
||
}
|
||
|