feat(monitor): admin channel monitor MVP with SSRF protection and batch aggregation

新增 admin「渠道监控」模块(参考 BingZi-233/check-cx),独立于现有 Channel 体系。
admin 配置 + 后台定时调用上游 LLM chat completions 健康检查 + 所有登录用户只读可见。

后端:
- ent: channel_monitor + channel_monitor_history(AES-256-GCM 加密 api_key)
- service 按职责拆分:service/aggregator/validate/checker/runner/ssrf
- provider strategy map 替代 switch(openai/anthropic/gemini)
- repository batch 聚合(ListLatestForMonitorIDs + ComputeAvailabilityForMonitors)消除 N+1
- runner: ticker(5s) + pond worker pool(5) + inFlight 防并发 + TrySubmit 防雪崩
  + 凌晨 3 点 cron 清理 30 天历史
- SSRF 防护:强制 https + 私网/loopback/云元数据 IP 拒绝(127/8、10/8、172.16/12、
  192.168/16、169.254/16、100.64/10、::1、fc00::/7、fe80::/10)+ DialContext
  在 socket 层防 DNS rebinding
- API key sanitize:擦除 url.Error 与上游响应 body 中的 sk-/sk-ant-/AIza/JWT 模式
- APIKeyDecryptFailed 标志位 + 单 monitor 路径检测,避免空 key 调用上游

handler:
- admin: CRUD + 手动触发 + 历史接口(api_key 脱敏)
- user: 只读列表 + 状态详情(去除 api_key/endpoint)
- ParseChannelMonitorID 共用 + dto.ChannelMonitorExtraModelStatus 共用

前端:
- 路由 /admin/channels/{pricing,monitor} + /monitor(用户只读)
- AppSidebar 父项 expandOnly 支持
- ChannelMonitorView 拆为 8 个子组件 + ChannelStatusView 拆出 detail dialog
- composables/useChannelMonitorFormat + constants/channelMonitor 共享
- i18n monitorCommon namespace 消除 admin/user 两 view 重复

合规:所有文件符合 CLAUDE.md(Go ≤ 500 行 / Vue ≤ 300 行 / 函数 ≤ 30 行)
CI: go build / gofmt / golangci-lint(0 issues) / make test-unit / pnpm build 全绿
This commit is contained in:
erio
2026-04-20 20:21:02 +08:00
parent 0b85a8da88
commit 20a4e41872
67 changed files with 14997 additions and 32 deletions

View File

@@ -0,0 +1,208 @@
<template>
<AppLayout>
<TablePageLayout>
<template #filters>
<div class="flex flex-col justify-between gap-4 lg:flex-row lg:items-start">
<div class="flex flex-1 flex-wrap items-center gap-3">
<div class="relative w-full sm:w-64">
<Icon
name="search"
size="md"
class="absolute left-3 top-1/2 -translate-y-1/2 text-gray-400 dark:text-gray-500"
/>
<input
v-model="searchQuery"
type="text"
:placeholder="t('channelStatus.searchPlaceholder')"
class="input pl-10"
/>
</div>
<Select
v-model="providerFilter"
:options="providerFilterOptions"
:placeholder="t('channelStatus.allProviders')"
class="w-44"
/>
</div>
<div class="flex w-full flex-shrink-0 flex-wrap items-center justify-end gap-3 lg:w-auto">
<button
@click="reload"
:disabled="loading"
class="btn btn-secondary"
:title="t('common.refresh')"
>
<Icon name="refresh" size="md" :class="loading ? 'animate-spin' : ''" />
</button>
</div>
</div>
</template>
<template #table>
<DataTable :columns="columns" :data="filteredItems" :loading="loading">
<template #cell-name="{ row }">
<button
@click="openDetail(row)"
class="font-medium text-primary-600 transition-colors hover:text-primary-700 dark:text-primary-400 dark:hover:text-primary-300"
>
{{ row.name }}
</button>
</template>
<template #cell-provider="{ row }">
<span
class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium"
:class="providerBadgeClass(row.provider)"
>
{{ providerLabel(row.provider) }}
</span>
</template>
<template #cell-group_name="{ value }">
<span class="text-sm text-gray-700 dark:text-gray-300">{{ value || '-' }}</span>
</template>
<template #cell-primary_model="{ row }">
<MonitorPrimaryModelCell :row="row" />
</template>
<template #cell-availability_7d="{ row }">
<span class="text-sm text-gray-900 dark:text-gray-100">
{{ formatAvailability(row) }}
</span>
</template>
<template #cell-latency="{ row }">
<span class="text-sm text-gray-900 dark:text-gray-100">
{{ formatLatency(row.primary_latency_ms) }}
</span>
</template>
<template #empty>
<EmptyState
:title="t('channelStatus.empty.title')"
:description="t('channelStatus.empty.description')"
/>
</template>
</DataTable>
</template>
</TablePageLayout>
<MonitorDetailDialog
:show="showDetail"
:monitor-id="detailTarget?.id ?? null"
:title="detailTitle"
@close="closeDetail"
/>
</AppLayout>
</template>
<script setup lang="ts">
import { ref, computed, onMounted } from 'vue'
import { useI18n } from 'vue-i18n'
import { useAppStore } from '@/stores/app'
import { extractApiErrorMessage } from '@/utils/apiError'
import {
list as listChannelMonitorViews,
type Provider,
type UserMonitorView,
} from '@/api/channelMonitor'
import type { Column } from '@/components/common/types'
import AppLayout from '@/components/layout/AppLayout.vue'
import TablePageLayout from '@/components/layout/TablePageLayout.vue'
import DataTable from '@/components/common/DataTable.vue'
import EmptyState from '@/components/common/EmptyState.vue'
import Select from '@/components/common/Select.vue'
import Icon from '@/components/icons/Icon.vue'
import MonitorDetailDialog from '@/components/user/MonitorDetailDialog.vue'
import MonitorPrimaryModelCell from '@/components/user/MonitorPrimaryModelCell.vue'
import { useChannelMonitorFormat } from '@/composables/useChannelMonitorFormat'
import {
PROVIDER_OPENAI,
PROVIDER_ANTHROPIC,
PROVIDER_GEMINI,
} from '@/constants/channelMonitor'
const { t } = useI18n()
const appStore = useAppStore()
const {
providerLabel,
providerBadgeClass,
formatLatency,
formatAvailability,
} = useChannelMonitorFormat()
// ── State ──
const items = ref<UserMonitorView[]>([])
const loading = ref(false)
const searchQuery = ref('')
const providerFilter = ref<Provider | ''>('')
const showDetail = ref(false)
const detailTarget = ref<UserMonitorView | null>(null)
// ── Options ──
const providerFilterOptions = computed(() => [
{ value: '', label: t('channelStatus.allProviders') },
{ value: PROVIDER_OPENAI, label: providerLabel(PROVIDER_OPENAI) },
{ value: PROVIDER_ANTHROPIC, label: providerLabel(PROVIDER_ANTHROPIC) },
{ value: PROVIDER_GEMINI, label: providerLabel(PROVIDER_GEMINI) },
])
// ── Columns ──
const columns = computed<Column[]>(() => [
{ key: 'name', label: t('channelStatus.columns.name'), sortable: false },
{ key: 'provider', label: t('channelStatus.columns.provider'), sortable: false },
{ key: 'group_name', label: t('channelStatus.columns.groupName'), sortable: false },
{ key: 'primary_model', label: t('channelStatus.columns.primaryModel'), sortable: false },
{ key: 'availability_7d', label: t('channelStatus.columns.availability7d'), sortable: false },
{ key: 'latency', label: t('channelStatus.columns.latency'), sortable: false },
])
// ── Filtered data ──
const filteredItems = computed(() => {
const q = searchQuery.value.trim().toLowerCase()
return items.value.filter(it => {
if (providerFilter.value && it.provider !== providerFilter.value) return false
if (!q) return true
return (
it.name.toLowerCase().includes(q) ||
(it.group_name || '').toLowerCase().includes(q) ||
it.primary_model.toLowerCase().includes(q)
)
})
})
const detailTitle = computed(() => {
return detailTarget.value?.name || t('channelStatus.detailTitle')
})
// ── Loaders ──
async function reload() {
loading.value = true
try {
const res = await listChannelMonitorViews()
items.value = res.items || []
} catch (err: unknown) {
appStore.showError(extractApiErrorMessage(err, t('channelStatus.loadError')))
} finally {
loading.value = false
}
}
function openDetail(row: UserMonitorView) {
detailTarget.value = row
showDetail.value = true
}
function closeDetail() {
showDetail.value = false
detailTarget.value = null
}
// ── Lifecycle ──
onMounted(() => {
reload()
})
</script>