新增 admin「渠道监控」模块(参考 BingZi-233/check-cx),独立于现有 Channel 体系。
admin 配置 + 后台定时调用上游 LLM chat completions 健康检查 + 所有登录用户只读可见。
后端:
- ent: channel_monitor + channel_monitor_history(AES-256-GCM 加密 api_key)
- service 按职责拆分:service/aggregator/validate/checker/runner/ssrf
- provider strategy map 替代 switch(openai/anthropic/gemini)
- repository batch 聚合(ListLatestForMonitorIDs + ComputeAvailabilityForMonitors)消除 N+1
- runner: ticker(5s) + pond worker pool(5) + inFlight 防并发 + TrySubmit 防雪崩
+ 凌晨 3 点 cron 清理 30 天历史
- SSRF 防护:强制 https + 私网/loopback/云元数据 IP 拒绝(127/8、10/8、172.16/12、
192.168/16、169.254/16、100.64/10、::1、fc00::/7、fe80::/10)+ DialContext
在 socket 层防 DNS rebinding
- API key sanitize:擦除 url.Error 与上游响应 body 中的 sk-/sk-ant-/AIza/JWT 模式
- APIKeyDecryptFailed 标志位 + 单 monitor 路径检测,避免空 key 调用上游
handler:
- admin: CRUD + 手动触发 + 历史接口(api_key 脱敏)
- user: 只读列表 + 状态详情(去除 api_key/endpoint)
- ParseChannelMonitorID 共用 + dto.ChannelMonitorExtraModelStatus 共用
前端:
- 路由 /admin/channels/{pricing,monitor} + /monitor(用户只读)
- AppSidebar 父项 expandOnly 支持
- ChannelMonitorView 拆为 8 个子组件 + ChannelStatusView 拆出 detail dialog
- composables/useChannelMonitorFormat + constants/channelMonitor 共享
- i18n monitorCommon namespace 消除 admin/user 两 view 重复
合规:所有文件符合 CLAUDE.md(Go ≤ 500 行 / Vue ≤ 300 行 / 函数 ≤ 30 行)
CI: go build / gofmt / golangci-lint(0 issues) / make test-unit / pnpm build 全绿
138 lines
6.0 KiB
Go
138 lines
6.0 KiB
Go
package service
|
||
|
||
import (
|
||
"time"
|
||
|
||
infraerrors "github.com/Wei-Shaw/sub2api/internal/pkg/errors"
|
||
)
|
||
|
||
// ChannelMonitor 全局常量。
|
||
// 这些是 MVP 阶段的硬编码值,按需可以提到 config 中。
|
||
const (
|
||
// monitorRequestTimeout 单次模型请求总超时(含 Body 读取)。
|
||
monitorRequestTimeout = 45 * time.Second
|
||
// monitorPingTimeout HEAD 请求 endpoint origin 的超时。
|
||
monitorPingTimeout = 8 * time.Second
|
||
// monitorDegradedThreshold 主请求成功但耗时超过该阈值视为 degraded。
|
||
monitorDegradedThreshold = 6 * time.Second
|
||
// monitorHistoryRetentionDays 历史保留天数(每天清理一次)。
|
||
monitorHistoryRetentionDays = 30
|
||
// monitorWorkerConcurrency 调度器并发执行的监控数(pond 池容量)。
|
||
monitorWorkerConcurrency = 5
|
||
// monitorTickerInterval 调度器扫描"到期监控"的间隔。
|
||
monitorTickerInterval = 5 * time.Second
|
||
// monitorMinIntervalSeconds / monitorMaxIntervalSeconds 用户配置的检测间隔上下限。
|
||
monitorMinIntervalSeconds = 15
|
||
monitorMaxIntervalSeconds = 3600
|
||
// monitorMessageMaxBytes message 字段最大字节数(与 schema/migration 一致)。
|
||
monitorMessageMaxBytes = 500
|
||
// monitorResponseMaxBytes 单次模型响应最大读取字节,防止 OOM。
|
||
monitorResponseMaxBytes = 64 * 1024
|
||
// monitorChallengeMin / monitorChallengeMax challenge 操作数范围。
|
||
monitorChallengeMin = 1
|
||
monitorChallengeMax = 50
|
||
|
||
// providerOpenAIPath OpenAI Chat Completions 路径。
|
||
providerOpenAIPath = "/v1/chat/completions"
|
||
// providerAnthropicPath Anthropic Messages 路径。
|
||
providerAnthropicPath = "/v1/messages"
|
||
// providerGeminiPathTemplate Gemini generateContent 路径模板(含 model 占位)。
|
||
providerGeminiPathTemplate = "/v1beta/models/%s:generateContent"
|
||
|
||
// MonitorProviderOpenAI / Anthropic / Gemini provider 字符串常量(也是 ent enum 的实际值)。
|
||
MonitorProviderOpenAI = "openai"
|
||
MonitorProviderAnthropic = "anthropic"
|
||
MonitorProviderGemini = "gemini"
|
||
|
||
// MonitorStatusOperational 等监控状态字符串常量(与 ent enum 一致)。
|
||
MonitorStatusOperational = "operational"
|
||
MonitorStatusDegraded = "degraded"
|
||
MonitorStatusFailed = "failed"
|
||
MonitorStatusError = "error"
|
||
|
||
// monitorAvailability7Days / 15 / 30 用于聚合查询窗口。
|
||
monitorAvailability7Days = 7
|
||
monitorAvailability15Days = 15
|
||
monitorAvailability30Days = 30
|
||
|
||
// monitorCleanupCheckInterval 历史清理调度器的检查频率(每小时检查"是否到 03:00")。
|
||
monitorCleanupCheckInterval = time.Hour
|
||
// monitorCleanupHour 凌晨 3 点执行历史清理。
|
||
monitorCleanupHour = 3
|
||
|
||
// MonitorHistoryDefaultLimit 历史查询默认返回条数(handler 层共享)。
|
||
MonitorHistoryDefaultLimit = 100
|
||
// MonitorHistoryMaxLimit 历史查询最大返回条数(handler 层共享)。
|
||
MonitorHistoryMaxLimit = 1000
|
||
|
||
// monitorEndpointResolveTimeout validateEndpoint 解析 hostname 的最长耗时。
|
||
monitorEndpointResolveTimeout = 5 * time.Second
|
||
|
||
// ---- checker / runner 行为参数(消除 magic 值)----
|
||
|
||
// monitorAnthropicAPIVersion Anthropic Messages API 版本头。
|
||
monitorAnthropicAPIVersion = "2023-06-01"
|
||
// monitorChallengeMaxTokens 单次 challenge 请求的 max_tokens(足够回答个位数算术)。
|
||
monitorChallengeMaxTokens = 50
|
||
|
||
// monitorListDueTimeout tickDueChecks 查询到期监控的总超时。
|
||
monitorListDueTimeout = 10 * time.Second
|
||
// monitorRunOneBuffer runOne 的总超时缓冲(除请求超时与 ping 超时外的额外裕量)。
|
||
monitorRunOneBuffer = 10 * time.Second
|
||
// monitorCleanupTimeout 历史清理任务的总超时。
|
||
monitorCleanupTimeout = 30 * time.Second
|
||
// monitorCleanupDayLayout 历史清理用于"今日是否已跑过"判定的日期格式。
|
||
monitorCleanupDayLayout = "2006-01-02"
|
||
|
||
// monitorIdleConnTimeout HTTP transport 空闲连接关闭超时。
|
||
monitorIdleConnTimeout = 30 * time.Second
|
||
// monitorTLSHandshakeTimeout HTTP transport TLS 握手超时。
|
||
monitorTLSHandshakeTimeout = 10 * time.Second
|
||
// monitorResponseHeaderTimeout HTTP transport 等待响应头超时。
|
||
monitorResponseHeaderTimeout = 30 * time.Second
|
||
// monitorPingDiscardMaxBytes ping 时丢弃响应体的最大字节数。
|
||
monitorPingDiscardMaxBytes = 1024
|
||
|
||
// monitorDialTimeout 自定义 dialer 单次连接超时。
|
||
monitorDialTimeout = 10 * time.Second
|
||
// monitorDialKeepAlive 自定义 dialer keep-alive 间隔。
|
||
monitorDialKeepAlive = 30 * time.Second
|
||
)
|
||
|
||
// 业务错误(统一在此声明,避免散落)。
|
||
var (
|
||
ErrChannelMonitorNotFound = infraerrors.NotFound(
|
||
"CHANNEL_MONITOR_NOT_FOUND", "channel monitor not found",
|
||
)
|
||
ErrChannelMonitorInvalidProvider = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_INVALID_PROVIDER", "provider must be one of openai/anthropic/gemini",
|
||
)
|
||
ErrChannelMonitorInvalidInterval = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_INVALID_INTERVAL", "interval_seconds must be in [15, 3600]",
|
||
)
|
||
ErrChannelMonitorInvalidEndpoint = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_INVALID_ENDPOINT", "endpoint must be a valid https URL",
|
||
)
|
||
ErrChannelMonitorEndpointScheme = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_ENDPOINT_SCHEME", "endpoint must use https scheme",
|
||
)
|
||
ErrChannelMonitorEndpointPath = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_ENDPOINT_PATH", "endpoint must be base origin only (no path/query/fragment)",
|
||
)
|
||
ErrChannelMonitorEndpointPrivate = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_ENDPOINT_PRIVATE", "endpoint must be a public host",
|
||
)
|
||
ErrChannelMonitorEndpointUnreachable = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_ENDPOINT_UNREACHABLE", "endpoint hostname could not be resolved",
|
||
)
|
||
ErrChannelMonitorMissingAPIKey = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_MISSING_API_KEY", "api_key is required when creating a monitor",
|
||
)
|
||
ErrChannelMonitorMissingPrimaryModel = infraerrors.BadRequest(
|
||
"CHANNEL_MONITOR_MISSING_PRIMARY_MODEL", "primary_model is required",
|
||
)
|
||
ErrChannelMonitorAPIKeyDecryptFailed = infraerrors.InternalServer(
|
||
"CHANNEL_MONITOR_KEY_DECRYPT_FAILED", "api key decryption failed; please re-edit the monitor with a fresh key",
|
||
)
|
||
)
|