erio 20a4e41872 feat(monitor): admin channel monitor MVP with SSRF protection and batch aggregation ...

新增 admin「渠道监控」模块（参考 BingZi-233/check-cx），独立于现有 Channel 体系。
admin 配置 + 后台定时调用上游 LLM chat completions 健康检查 + 所有登录用户只读可见。

后端：
- ent: channel_monitor + channel_monitor_history（AES-256-GCM 加密 api_key）
- service 按职责拆分：service/aggregator/validate/checker/runner/ssrf
- provider strategy map 替代 switch（openai/anthropic/gemini）
- repository batch 聚合（ListLatestForMonitorIDs + ComputeAvailabilityForMonitors）消除 N+1
- runner: ticker(5s) + pond worker pool(5) + inFlight 防并发 + TrySubmit 防雪崩
  + 凌晨 3 点 cron 清理 30 天历史
- SSRF 防护：强制 https + 私网/loopback/云元数据 IP 拒绝（127/8、10/8、172.16/12、
  192.168/16、169.254/16、100.64/10、::1、fc00::/7、fe80::/10）+ DialContext
  在 socket 层防 DNS rebinding
- API key sanitize：擦除 url.Error 与上游响应 body 中的 sk-/sk-ant-/AIza/JWT 模式
- APIKeyDecryptFailed 标志位 + 单 monitor 路径检测，避免空 key 调用上游

handler:
- admin: CRUD + 手动触发 + 历史接口（api_key 脱敏）
- user: 只读列表 + 状态详情（去除 api_key/endpoint）
- ParseChannelMonitorID 共用 + dto.ChannelMonitorExtraModelStatus 共用

前端：
- 路由 /admin/channels/{pricing,monitor} + /monitor（用户只读）
- AppSidebar 父项 expandOnly 支持
- ChannelMonitorView 拆为 8 个子组件 + ChannelStatusView 拆出 detail dialog
- composables/useChannelMonitorFormat + constants/channelMonitor 共享
- i18n monitorCommon namespace 消除 admin/user 两 view 重复

合规：所有文件符合 CLAUDE.md（Go ≤ 500 行 / Vue ≤ 300 行 / 函数 ≤ 30 行）
CI: go build / gofmt / golangci-lint(0 issues) / make test-unit / pnpm build 全绿

2026-04-20 20:21:02 +08:00

..

account_repo_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

account_repo_sort_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

account_repo.go

fix: delete scheduled test plans when account is deleted

2026-04-19 20:38:57 +08:00

aes_encryptor.go

merge upstream main

2026-02-02 22:13:50 +08:00

allowed_groups_contract_integration_test.go

fix: correct migration 061 checksum and add missing BillingCache mock methods

2026-03-03 16:11:05 +08:00

announcement_read_repo.go

Fix user profile writes on postgres conflicts

2026-04-21 10:13:28 -07:00

announcement_repo_sort_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

announcement_repo.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

api_key_cache_integration_test.go

…

api_key_cache_test.go

…

api_key_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_repo_integration_test.go

fix: preserve messages dispatch config in repository hydration

2026-04-10 18:13:18 +08:00

api_key_repo_last_used_unit_test.go

feat(api-key): 增加 API Key 上次使用时间并补齐测试

2026-02-22 22:07:17 +08:00

api_key_repo_messages_dispatch_unit_test.go

fix: preserve messages dispatch config in repository hydration

2026-04-10 18:13:18 +08:00

api_key_repo_sort_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

api_key_repo.go

feat: rebuild auth identity foundation flow

2026-04-20 17:39:57 +08:00

auth_identity_compat_backfill_integration_test.go

fix(ci): run 108a migration before 109 in backfill integration test

2026-04-22 18:36:44 +08:00

auth_identity_legacy_migration_integration_test.go

fix(auth): harden oauth identity upgrade paths

2026-04-22 14:56:56 +08:00

backup_pg_dumper.go

fix: 按 review 意见重构数据库备份服务（安全性 + 架构 + 健壮性）

2026-03-14 17:48:21 +08:00

backup_s3_store.go

feat(backup): 备份/恢复异步化，解决 504 超时

2026-03-16 20:22:10 +08:00

billing_cache_integration_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

billing_cache_jitter_test.go

test: 完善自动化测试体系（7个模块，73个任务）

2026-02-08 12:05:39 +08:00

billing_cache_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

billing_cache.go

fix(billing): add window expiration check to Redis rate limit Lua script

2026-03-16 13:39:50 +08:00

channel_monitor_repo.go

feat(monitor): admin channel monitor MVP with SSRF protection and batch aggregation

2026-04-20 20:21:02 +08:00

channel_repo_account_stats_pricing.go

fix: audit round-3 — proxy safety, intervals persistence, SMTP timeout, sort fix

2026-04-14 09:35:20 +08:00

channel_repo_pricing.go

feat(channel): 渠道管理全链路集成 — 模型映射、定价、限制、用量统计

2026-04-04 11:13:58 +08:00

channel_repo_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

channel_repo.go

fix: merge 5 PR-related improvements

2026-04-14 18:34:57 +08:00

claude_oauth_service_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

claude_oauth_service.go

feat: 网关请求头 wire casing 保持、转发行为开关、调试日志增强及 accept-encoding 恢复

2026-03-26 11:17:25 +08:00

claude_usage_service_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

claude_usage_service.go

feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化

2026-03-27 14:33:05 +08:00

concurrency_cache_benchmark_test.go

…

concurrency_cache_integration_test.go

feat: cleanup stale concurrency slots on startup

2026-03-09 19:55:18 +08:00

concurrency_cache.go

feat: cleanup stale concurrency slots on startup

2026-03-09 19:55:18 +08:00

dashboard_aggregation_repo.go

feat(usage): add account cost display to admin dashboard and usage pages

2026-04-15 15:02:21 +08:00

dashboard_cache_test.go

…

dashboard_cache.go

…

db_pool_test.go

…

db_pool.go

…

email_cache_integration_test.go

…

email_cache_test.go

…

email_cache.go

fix: audit round-3 — proxy safety, intervals persistence, SMTP timeout, sort fix

2026-04-14 09:35:20 +08:00

ent.go

fix: 简易模式仅提升管理员默认并发到30

2026-03-07 18:19:04 +08:00

error_passthrough_cache.go

feat: 新增全局错误透传规则功能

2026-02-05 21:52:54 +08:00

error_passthrough_repo.go

feat: 错误透传规则支持 skip_monitoring 跳过运维监控记录

2026-02-10 11:42:39 +08:00

error_translate.go

…

fixtures_integration_test.go

fix: stabilize repository integration paths

2026-03-12 17:42:41 +08:00

gateway_cache_integration_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

gateway_cache.go

fix: resolve cherry-pick conflicts and restore compilation

2026-04-14 10:18:39 +08:00

gateway_routing_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

gemini_drive_client.go

fix: 将 DriveClient 注入 GeminiOAuthService，消除单元测试中的真实 HTTP 调用

2026-02-26 10:53:04 +08:00

gemini_oauth_client.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

gemini_token_cache_integration_test.go

fix(认证): 修复 OAuth token 缓存失效与 401 处理

2026-01-14 15:55:44 +08:00

gemini_token_cache_test.go

fix(认证): 修复 OAuth token 缓存失效与 401 处理

2026-01-14 15:55:44 +08:00

gemini_token_cache.go

feat(网关): 引入 OpenAI/Claude OAuth token 缓存

2026-01-15 18:27:06 +08:00

geminicli_codeassist_client.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

github_release_service_test.go

…

github_release_service.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

group_repo_integration_test.go

fix: preserve messages dispatch config in repository hydration

2026-04-10 18:13:18 +08:00

group_repo_sort_integration_test.go

fix(lint): 修复 CI 中的 ineffassign 和 unused 代码告警，修正 group 排序集成测试兼容性

2026-04-09 19:25:08 +08:00

group_repo.go

fix(test): restore integration expectations

2026-04-09 22:08:42 +08:00

http_upstream_benchmark_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

http_upstream_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

http_upstream.go

feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化

2026-03-27 14:33:05 +08:00

idempotency_repo_integration_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

idempotency_repo.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

identity_cache_integration_test.go

…

identity_cache_test.go

…

identity_cache.go

feat(identity): 指纹缓存 TTL 懒续期机制

2026-03-02 01:12:41 +08:00

inprocess_transport_test.go

…

integration_harness_test.go

fix: 优化调度快照缓存以避免 Redis 大 MGET

2026-04-08 10:39:15 -07:00

internal500_counter_cache.go

refactor: extract internal500 penalty logic to dedicated file

2026-03-27 20:11:24 +08:00

migrations_runner_checksum_test.go

fix(upgrade): close payment and oidc compatibility gaps

2026-04-22 18:01:51 +08:00

migrations_runner_extra_test.go

fix(upgrade): close payment and oidc compatibility gaps

2026-04-22 18:01:51 +08:00

migrations_runner_notx_test.go

fix(auth): harden oauth identity upgrade paths

2026-04-22 14:56:56 +08:00

migrations_runner.go

fix(upgrade): close payment and oidc compatibility gaps

2026-04-22 18:01:51 +08:00

migrations_schema_integration_test.go

fix(auth): harden oauth identity upgrade paths

2026-04-22 14:56:56 +08:00

openai_oauth_service_test.go

revert: completely remove all Sora functionality

2026-04-05 17:11:01 +08:00

openai_oauth_service.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

ops_repo_alerts.go

feat: merge dev

2026-01-15 15:14:44 +08:00

ops_repo_dashboard_timeout_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

ops_repo_dashboard.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

ops_repo_error_where_test.go

fix(ops): 修复错误日志查询 q 过滤列名二义性

2026-02-14 11:21:30 +08:00

ops_repo_histograms.go

…

ops_repo_latency_histogram_buckets_test.go

…

ops_repo_latency_histogram_buckets.go

feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速

2026-03-03 01:05:11 +08:00

ops_repo_metrics.go

feat(ops): add account switch metrics and trend

2026-01-23 19:39:48 +08:00

ops_repo_openai_token_stats_test.go

feat(ops): 运维监控新增 OpenAI Token 请求统计表

2026-02-12 14:20:14 +08:00

ops_repo_openai_token_stats.go

feat(ops): 运维监控新增 OpenAI Token 请求统计表

2026-02-12 14:20:14 +08:00

ops_repo_preagg.go

fix(网关): 修复账号选择中的调度器快照延迟问题

2026-01-13 22:49:26 -08:00

ops_repo_realtime_traffic.go

…

ops_repo_request_details.go

…

ops_repo_system_logs_test.go

feat(log): 落地统一日志底座与系统日志运维能力

2026-02-12 16:27:29 +08:00

ops_repo_trends.go

fix(ops): count failover kinds with suffix

2026-01-24 01:14:44 +08:00

ops_repo_window_stats.go

…

ops_repo.go

feat(ops): adapt repository INSERT/SELECT + add setOpsEndpointContext in error logger middleware

2026-03-21 23:38:00 +08:00

ops_write_pressure_integration_test.go

Fix ops write pressure integration fixture

2026-03-11 17:40:28 +08:00

pagination.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

pricing_service_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

pricing_service.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

promo_code_repo.go

fix(lint): 修复 CI 中的 ineffassign 和 unused 代码告警，修正 group 排序集成测试兼容性

2026-04-09 19:25:08 +08:00

proxy_latency_cache.go

feat: merge dev

2026-01-15 15:14:44 +08:00

proxy_probe_service_test.go

fix(proxy): 增加代理探测的多 URL 回退机制

2026-02-03 17:12:27 +08:00

proxy_probe_service.go

fix(antigravity): fast-fail on proxy unavailable, temp-unschedule account

2026-03-19 23:48:37 +08:00

proxy_repo_integration_test.go

…

proxy_repo_sort_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

proxy_repo.go

fix(lint): restore repository sort helpers

2026-04-09 21:49:10 +08:00

redeem_cache_integration_test.go

…

redeem_cache_test.go

…

redeem_cache.go

…

redeem_code_repo_integration_test.go

…

redeem_code_repo_sort_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

redeem_code_repo.go

fix(lint): restore repository sort helpers

2026-04-09 21:49:10 +08:00

redis_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

redis.go

merge upstream main

2026-02-02 22:13:50 +08:00

refresh_token_cache.go

feat(auth): 实现 Refresh Token 机制

2026-02-05 12:42:54 +08:00

req_client_pool_test.go

feat(proxy): 集中代理 URL 验证并实现全局 fail-fast

2026-03-02 16:04:20 +08:00

req_client_pool.go

feat: GPT 隐私模式 + no-train 前端展示优化

2026-03-12 21:24:01 +08:00

rpm_cache.go

fix: 修复 gofmt 格式问题

2026-02-28 20:38:35 +08:00

scheduled_test_repo.go

feat(admin): 支持定时测试自动恢复并统一账号恢复入口

2026-03-08 06:59:53 +08:00

scheduler_cache_integration_test.go

fix: 优化调度快照缓存以避免 Redis 大 MGET

2026-04-08 10:39:15 -07:00

scheduler_cache_unit_test.go

fix: preserve openai ws flags in scheduler cache

2026-04-16 02:01:50 +00:00

scheduler_cache.go

fix: preserve openai ws flags in scheduler cache

2026-04-16 02:01:50 +00:00

scheduler_outbox_repo.go

Reduce ops and scheduler write amplification

2026-03-11 17:32:00 +08:00

scheduler_snapshot_outbox_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

security_secret_bootstrap_test.go

test(repository): 补充 JWT 密钥引导并发与兼容性单测

2026-02-12 12:07:20 +08:00

security_secret_bootstrap.go

fix(repository): 修复 JWT 密钥引导冲突一致性与并发读取竞态

2026-02-12 12:04:13 +08:00

session_limit_cache.go

fix: 修复管理页面活跃会话数始终显示为0的问题

2026-02-05 22:36:17 +08:00

setting_repo_integration_test.go

chore: 清理一些无用的文件

2026-03-04 10:15:42 +08:00

setting_repo.go

…

simple_mode_admin_concurrency.go

fix: 简易模式仅提升管理员默认并发到30

2026-03-07 18:19:04 +08:00

simple_mode_default_groups_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

simple_mode_default_groups.go

merge upstream main

2026-02-02 22:13:50 +08:00

soft_delete_ent_integration_test.go

fix: correct migration 061 checksum and add missing BillingCache mock methods

2026-03-03 16:11:05 +08:00

sql_scan.go

…

temp_unsched_cache.go

…

timeout_counter_cache.go

…

tls_fingerprint_profile_cache.go

feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化

2026-03-27 14:33:05 +08:00

tls_fingerprint_profile_repo.go

feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化

2026-03-27 14:33:05 +08:00

totp_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

turnstile_service_test.go

…

turnstile_service.go

…

update_cache_integration_test.go

…

update_cache.go

…

usage_billing_repo_integration_test.go

feat: decouple billing correctness from usage log batching

2026-03-12 16:53:18 +08:00

usage_billing_repo.go

fix: merge 30 general improvements from release branch

2026-04-14 17:35:27 +08:00

usage_cleanup_repo_ent_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

usage_cleanup_repo_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

usage_cleanup_repo.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

usage_log_repo_breakdown_test.go

test(repo): cover requested model repository semantics

2026-03-21 01:23:20 +08:00

usage_log_repo_integration_test.go

test(usage): add unit tests for account_cost and fix gofmt

2026-04-15 15:02:21 +08:00

usage_log_repo_request_type_test.go

test(usage): add unit tests for account_cost and fix gofmt

2026-04-15 15:02:21 +08:00

usage_log_repo_sort_integration_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

usage_log_repo_unit_test.go

fix: harden usage billing idempotency and backpressure

2026-03-12 18:38:09 +08:00

usage_log_repo.go

feat(usage): add account cost to breakdown sub-table and admin usage log

2026-04-15 15:40:40 +08:00

user_attribute_repo.go

…

user_group_rate_repo.go

fix: merge 30 general improvements from release branch

2026-04-14 17:35:27 +08:00

user_msg_queue_cache.go

feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速

2026-03-03 01:05:11 +08:00

user_profile_identity_repo_contract_test.go

fix(test): restore identity repo integration imports

2026-04-22 13:22:33 +08:00

user_profile_identity_repo_unit_test.go

fix(auth): harden oauth identity upgrade paths

2026-04-22 14:56:56 +08:00

user_profile_identity_repo.go

fix(auth): harden oauth identity upgrade paths

2026-04-22 14:56:56 +08:00

user_repo_email_identity_integration_test.go

Add auth identity legacy backfill and email sync

2026-04-21 00:13:40 +08:00

user_repo_email_lookup_unit_test.go

fix(ci): clean up lint and dead code

2026-04-22 16:38:36 +08:00

user_repo_integration_test.go

Fix user profile writes on postgres conflicts

2026-04-21 10:13:28 -07:00

user_repo_sort_integration_test.go

fix(ci): repair integration repository tests

2026-04-22 02:42:43 +08:00

user_repo.go

fix(ci): clean up lint and dead code

2026-04-22 16:38:36 +08:00

user_subscription_repo_integration_test.go

fix: add missing platform parameter to List calls in integration tests

2026-03-18 10:35:03 +08:00

user_subscription_repo.go

feat: add platform type filter to subscription management page

2026-03-18 09:23:19 +08:00

wire.go

feat(monitor): admin channel monitor MVP with SSRF protection and batch aggregation

2026-04-20 20:21:02 +08:00