Pine
b90539a013
- 登录：/auth/send-code·phone-login·wx-login·wx-phone（复用 RBAC 签发） - 算力：services/compute_client（loopback :3000）+ /admin/compute/ping·provision - /v1 relay 改走 compute-engine（前端不直连引擎） - 模型：User 补 wx_openid/phone；仓储 async create+新方法 - 契约：api/schemas（auth/compute）Pydantic
212 lines
8.5 KiB
Python
212 lines
8.5 KiB
Python
# -*- coding: utf-8 -*-
|
||
"""运营端业务管理端点：任务 / 服务商 / 内容 / 系统配置 / 数据统计。
|
||
|
||
全部要求 operator 角色（内部子角色再按权限细分），并写审计日志。
|
||
"""
|
||
from __future__ import annotations
|
||
|
||
from fastapi import APIRouter, Depends, HTTPException, Request
|
||
from pydantic import BaseModel
|
||
|
||
from ..dependencies import get_db
|
||
from ..schemas.operator import TaskCreateRequest, TaskStatusRequest, ProviderCreateRequest, ProviderUpdateRequest, ContentCreateRequest, ContentStatusRequest, ConfigUpdateRequest, ComputePingResponse, ComputeProvisionRequest, ComputeProvisionResponse
|
||
from ...rbac import require_permission, require_roles, write_audit
|
||
from ...infrastructure.repositories import Database
|
||
from ...services import compute_client
|
||
|
||
router = APIRouter(prefix="/admin", tags=["admin-op"])
|
||
|
||
|
||
@router.get("/tasks", summary="任务列表")
|
||
async def list_tasks(
|
||
status: str | None = None,
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
return await db.tasks.list(status=status)
|
||
|
||
|
||
@router.post("/tasks", summary="创建任务")
|
||
async def create_task(
|
||
req: TaskCreateRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:task.manage")),
|
||
):
|
||
task = await db.tasks.create(req.model_dump(exclude_none=True))
|
||
await write_audit(db, action="task.create", resource="task", resource_id=task["id"],
|
||
detail=task["title"], user=actor, request=request)
|
||
return task
|
||
|
||
|
||
@router.post("/tasks/{task_id}/status", summary="更新任务状态")
|
||
async def set_task_status(
|
||
task_id: str,
|
||
req: TaskStatusRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:task.manage")),
|
||
):
|
||
if await db.tasks.get(task_id) is None:
|
||
raise HTTPException(status_code=404, detail="Task not found")
|
||
task = await db.tasks.set_status(task_id, req.status)
|
||
await write_audit(db, action="task.status", resource="task", resource_id=task_id,
|
||
detail=req.status, user=actor, request=request)
|
||
return task
|
||
|
||
|
||
# ── 服务商管理 ────────────────────────────────────────────────────────────
|
||
@router.get("/providers", summary="服务商列表")
|
||
async def list_providers(
|
||
status: str | None = None,
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
return await db.providers.list(status=status)
|
||
|
||
|
||
@router.post("/providers", summary="创建服务商")
|
||
async def create_provider(
|
||
req: ProviderCreateRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:provider.manage")),
|
||
):
|
||
prov = await db.providers.create(req.model_dump(exclude_none=True))
|
||
await write_audit(db, action="provider.create", resource="provider", resource_id=prov["id"],
|
||
detail=prov["name"], user=actor, request=request)
|
||
return prov
|
||
|
||
|
||
@router.post("/providers/{provider_id}/update", summary="更新服务商（评级/状态）")
|
||
async def update_provider(
|
||
provider_id: str,
|
||
req: ProviderUpdateRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:provider.manage")),
|
||
):
|
||
updated = await db.providers.update(provider_id, req.model_dump(exclude_none=True))
|
||
if updated is None:
|
||
raise HTTPException(status_code=404, detail="Provider not found")
|
||
await write_audit(db, action="provider.update", resource="provider", resource_id=provider_id,
|
||
detail=str(req.model_dump(exclude_none=True)), user=actor, request=request)
|
||
return updated
|
||
|
||
|
||
# ── 内容管理 ──────────────────────────────────────────────────────────────
|
||
@router.get("/content", summary="内容列表")
|
||
async def list_content(
|
||
ctype: str | None = None,
|
||
status: str | None = None,
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
return await db.content.list(ctype=ctype, status=status)
|
||
|
||
|
||
@router.post("/content", summary="创建内容")
|
||
async def create_content(
|
||
req: ContentCreateRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:content.manage")),
|
||
):
|
||
item = await db.content.create(req.model_dump(exclude_none=True))
|
||
await write_audit(db, action="content.create", resource="content", resource_id=item["id"],
|
||
detail=item["title"], user=actor, request=request)
|
||
return item
|
||
|
||
|
||
@router.post("/content/{content_id}/status", summary="发布/下架内容")
|
||
async def set_content_status(
|
||
content_id: str,
|
||
req: ContentStatusRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:content.manage")),
|
||
):
|
||
item = await db.content.set_status(content_id, req.status)
|
||
if item is None:
|
||
raise HTTPException(status_code=404, detail="Content not found")
|
||
await write_audit(db, action="content.status", resource="content", resource_id=content_id,
|
||
detail=req.status, user=actor, request=request)
|
||
return item
|
||
|
||
|
||
# ── 系统配置 ──────────────────────────────────────────────────────────────
|
||
@router.get("/config", summary="系统配置列表")
|
||
async def list_config(
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
return await db.config.all()
|
||
|
||
|
||
@router.put("/config/{key}", summary="更新系统配置")
|
||
async def set_config(
|
||
key: str,
|
||
req: ConfigUpdateRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_permission("action:config.manage")),
|
||
):
|
||
cfg = await db.config.set(key, req.value, req.description)
|
||
await write_audit(db, action="config.update", resource="config", resource_id=key,
|
||
detail=req.value, user=actor, request=request)
|
||
return cfg
|
||
|
||
|
||
# ── 数据统计 ──────────────────────────────────────────────────────────────
|
||
@router.get("/stats/overview", summary="运营数据总览")
|
||
async def stats_overview(
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
return await db.stats.overview()
|
||
|
||
|
||
# ── 算力对接（compute-engine） ─────────────────────────────────────────────
|
||
@router.post("/compute/ping", response_model=ComputePingResponse, summary="算力引擎连通性检查")
|
||
async def compute_ping(
|
||
db: Database = Depends(get_db),
|
||
_u: dict = Depends(require_roles("operator")),
|
||
):
|
||
data = await compute_client.ping()
|
||
status = str(data.get("status", "")).lower()
|
||
return ComputePingResponse(
|
||
ok=status in ("ok", "success") or "success" in status or not data.get("detail"),
|
||
version=data.get("version"),
|
||
detail=data.get("detail"),
|
||
)
|
||
|
||
|
||
@router.post("/compute/provision", response_model=ComputeProvisionResponse, summary="开通算力（建号+发PAT）")
|
||
async def compute_provision(
|
||
req: ComputeProvisionRequest,
|
||
request: Request,
|
||
db: Database = Depends(get_db),
|
||
actor: dict = Depends(require_roles("operator")),
|
||
):
|
||
"""为平台用户开通算力：引擎建号 + 签发 PAT，返回给前端注入 provider。"""
|
||
user = await db.users.get_by_id(req.user_id)
|
||
if user is None:
|
||
raise HTTPException(status_code=404, detail="用户不存在")
|
||
username = user.get("username") or user["id"]
|
||
try:
|
||
await compute_client.create_user(username)
|
||
pat = await compute_client.issue_pat(username)
|
||
created = True
|
||
except compute_client.ComputeError as exc:
|
||
raise HTTPException(status_code=502, detail=f"算力引擎对接失败: {exc}") from exc
|
||
await write_audit(db, action="compute.provision", resource="compute",
|
||
resource_id=req.user_id,
|
||
detail=f"engine user {username} provisioned",
|
||
user=actor, request=request)
|
||
return ComputeProvisionResponse(
|
||
engine_user_id=username,
|
||
engine_username=username,
|
||
pat=pat,
|
||
created=created,
|
||
)
|