mirror of
https://github.com/Wei-Shaw/sub2api.git
synced 2026-09-24 16:05:44 +08:00
新增 admin「渠道监控」模块(参考 BingZi-233/check-cx),独立于现有 Channel 体系。
admin 配置 + 后台定时调用上游 LLM chat completions 健康检查 + 所有登录用户只读可见。
后端:
- ent: channel_monitor + channel_monitor_history(AES-256-GCM 加密 api_key)
- service 按职责拆分:service/aggregator/validate/checker/runner/ssrf
- provider strategy map 替代 switch(openai/anthropic/gemini)
- repository batch 聚合(ListLatestForMonitorIDs + ComputeAvailabilityForMonitors)消除 N+1
- runner: ticker(5s) + pond worker pool(5) + inFlight 防并发 + TrySubmit 防雪崩
+ 凌晨 3 点 cron 清理 30 天历史
- SSRF 防护:强制 https + 私网/loopback/云元数据 IP 拒绝(127/8、10/8、172.16/12、
192.168/16、169.254/16、100.64/10、::1、fc00::/7、fe80::/10)+ DialContext
在 socket 层防 DNS rebinding
- API key sanitize:擦除 url.Error 与上游响应 body 中的 sk-/sk-ant-/AIza/JWT 模式
- APIKeyDecryptFailed 标志位 + 单 monitor 路径检测,避免空 key 调用上游
handler:
- admin: CRUD + 手动触发 + 历史接口(api_key 脱敏)
- user: 只读列表 + 状态详情(去除 api_key/endpoint)
- ParseChannelMonitorID 共用 + dto.ChannelMonitorExtraModelStatus 共用
前端:
- 路由 /admin/channels/{pricing,monitor} + /monitor(用户只读)
- AppSidebar 父项 expandOnly 支持
- ChannelMonitorView 拆为 8 个子组件 + ChannelStatusView 拆出 detail dialog
- composables/useChannelMonitorFormat + constants/channelMonitor 共享
- i18n monitorCommon namespace 消除 admin/user 两 view 重复
合规:所有文件符合 CLAUDE.md(Go ≤ 500 行 / Vue ≤ 300 行 / 函数 ≤ 30 行)
CI: go build / gofmt / golangci-lint(0 issues) / make test-unit / pnpm build 全绿
313 lines
7.4 KiB
Go
313 lines
7.4 KiB
Go
//go:build wireinject
|
|
// +build wireinject
|
|
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"log"
|
|
"net/http"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/Wei-Shaw/sub2api/ent"
|
|
"github.com/Wei-Shaw/sub2api/internal/config"
|
|
"github.com/Wei-Shaw/sub2api/internal/handler"
|
|
"github.com/Wei-Shaw/sub2api/internal/payment"
|
|
"github.com/Wei-Shaw/sub2api/internal/repository"
|
|
"github.com/Wei-Shaw/sub2api/internal/server"
|
|
"github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
|
"github.com/Wei-Shaw/sub2api/internal/service"
|
|
|
|
"github.com/google/wire"
|
|
"github.com/redis/go-redis/v9"
|
|
)
|
|
|
|
type Application struct {
|
|
Server *http.Server
|
|
Cleanup func()
|
|
}
|
|
|
|
func initializeApplication(buildInfo handler.BuildInfo) (*Application, error) {
|
|
wire.Build(
|
|
// Infrastructure layer ProviderSets
|
|
config.ProviderSet,
|
|
|
|
// Business layer ProviderSets
|
|
repository.ProviderSet,
|
|
service.ProviderSet,
|
|
payment.ProviderSet,
|
|
middleware.ProviderSet,
|
|
handler.ProviderSet,
|
|
|
|
// Server layer ProviderSet
|
|
server.ProviderSet,
|
|
|
|
// Privacy client factory for OpenAI training opt-out
|
|
providePrivacyClientFactory,
|
|
|
|
// BuildInfo provider
|
|
provideServiceBuildInfo,
|
|
|
|
// Cleanup function provider
|
|
provideCleanup,
|
|
|
|
// Application struct
|
|
wire.Struct(new(Application), "Server", "Cleanup"),
|
|
)
|
|
return nil, nil
|
|
}
|
|
|
|
func providePrivacyClientFactory() service.PrivacyClientFactory {
|
|
return repository.CreatePrivacyReqClient
|
|
}
|
|
|
|
func provideServiceBuildInfo(buildInfo handler.BuildInfo) service.BuildInfo {
|
|
return service.BuildInfo{
|
|
Version: buildInfo.Version,
|
|
BuildType: buildInfo.BuildType,
|
|
}
|
|
}
|
|
|
|
func provideCleanup(
|
|
entClient *ent.Client,
|
|
rdb *redis.Client,
|
|
opsMetricsCollector *service.OpsMetricsCollector,
|
|
opsAggregation *service.OpsAggregationService,
|
|
opsAlertEvaluator *service.OpsAlertEvaluatorService,
|
|
opsCleanup *service.OpsCleanupService,
|
|
opsScheduledReport *service.OpsScheduledReportService,
|
|
opsSystemLogSink *service.OpsSystemLogSink,
|
|
schedulerSnapshot *service.SchedulerSnapshotService,
|
|
tokenRefresh *service.TokenRefreshService,
|
|
accountExpiry *service.AccountExpiryService,
|
|
subscriptionExpiry *service.SubscriptionExpiryService,
|
|
usageCleanup *service.UsageCleanupService,
|
|
idempotencyCleanup *service.IdempotencyCleanupService,
|
|
pricing *service.PricingService,
|
|
emailQueue *service.EmailQueueService,
|
|
billingCache *service.BillingCacheService,
|
|
usageRecordWorkerPool *service.UsageRecordWorkerPool,
|
|
subscriptionService *service.SubscriptionService,
|
|
oauth *service.OAuthService,
|
|
openaiOAuth *service.OpenAIOAuthService,
|
|
geminiOAuth *service.GeminiOAuthService,
|
|
antigravityOAuth *service.AntigravityOAuthService,
|
|
openAIGateway *service.OpenAIGatewayService,
|
|
scheduledTestRunner *service.ScheduledTestRunnerService,
|
|
backupSvc *service.BackupService,
|
|
paymentOrderExpiry *service.PaymentOrderExpiryService,
|
|
claudeSidecarProbe *service.ClaudeSidecarProbeService,
|
|
channelMonitorRunner *service.ChannelMonitorRunner,
|
|
) func() {
|
|
return func() {
|
|
ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
|
|
defer cancel()
|
|
|
|
type cleanupStep struct {
|
|
name string
|
|
fn func() error
|
|
}
|
|
|
|
// 应用层清理步骤可并行执行,基础设施资源(Redis/Ent)最后按顺序关闭。
|
|
parallelSteps := []cleanupStep{
|
|
{"OpsScheduledReportService", func() error {
|
|
if opsScheduledReport != nil {
|
|
opsScheduledReport.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OpsCleanupService", func() error {
|
|
if opsCleanup != nil {
|
|
opsCleanup.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OpsSystemLogSink", func() error {
|
|
if opsSystemLogSink != nil {
|
|
opsSystemLogSink.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OpsAlertEvaluatorService", func() error {
|
|
if opsAlertEvaluator != nil {
|
|
opsAlertEvaluator.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OpsAggregationService", func() error {
|
|
if opsAggregation != nil {
|
|
opsAggregation.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OpsMetricsCollector", func() error {
|
|
if opsMetricsCollector != nil {
|
|
opsMetricsCollector.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"SchedulerSnapshotService", func() error {
|
|
if schedulerSnapshot != nil {
|
|
schedulerSnapshot.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"UsageCleanupService", func() error {
|
|
if usageCleanup != nil {
|
|
usageCleanup.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"IdempotencyCleanupService", func() error {
|
|
if idempotencyCleanup != nil {
|
|
idempotencyCleanup.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"TokenRefreshService", func() error {
|
|
tokenRefresh.Stop()
|
|
return nil
|
|
}},
|
|
{"ClaudeSidecarProbeService", func() error {
|
|
if claudeSidecarProbe != nil {
|
|
claudeSidecarProbe.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"AccountExpiryService", func() error {
|
|
accountExpiry.Stop()
|
|
return nil
|
|
}},
|
|
{"SubscriptionExpiryService", func() error {
|
|
subscriptionExpiry.Stop()
|
|
return nil
|
|
}},
|
|
{"SubscriptionService", func() error {
|
|
if subscriptionService != nil {
|
|
subscriptionService.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"PricingService", func() error {
|
|
pricing.Stop()
|
|
return nil
|
|
}},
|
|
{"EmailQueueService", func() error {
|
|
emailQueue.Stop()
|
|
return nil
|
|
}},
|
|
{"BillingCacheService", func() error {
|
|
billingCache.Stop()
|
|
return nil
|
|
}},
|
|
{"UsageRecordWorkerPool", func() error {
|
|
if usageRecordWorkerPool != nil {
|
|
usageRecordWorkerPool.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"OAuthService", func() error {
|
|
oauth.Stop()
|
|
return nil
|
|
}},
|
|
{"OpenAIOAuthService", func() error {
|
|
openaiOAuth.Stop()
|
|
return nil
|
|
}},
|
|
{"GeminiOAuthService", func() error {
|
|
geminiOAuth.Stop()
|
|
return nil
|
|
}},
|
|
{"AntigravityOAuthService", func() error {
|
|
antigravityOAuth.Stop()
|
|
return nil
|
|
}},
|
|
{"OpenAIWSPool", func() error {
|
|
if openAIGateway != nil {
|
|
openAIGateway.CloseOpenAIWSPool()
|
|
}
|
|
return nil
|
|
}},
|
|
{"ScheduledTestRunnerService", func() error {
|
|
if scheduledTestRunner != nil {
|
|
scheduledTestRunner.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"BackupService", func() error {
|
|
if backupSvc != nil {
|
|
backupSvc.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"PaymentOrderExpiryService", func() error {
|
|
if paymentOrderExpiry != nil {
|
|
paymentOrderExpiry.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
{"ChannelMonitorRunner", func() error {
|
|
if channelMonitorRunner != nil {
|
|
channelMonitorRunner.Stop()
|
|
}
|
|
return nil
|
|
}},
|
|
}
|
|
|
|
infraSteps := []cleanupStep{
|
|
{"Redis", func() error {
|
|
if rdb == nil {
|
|
return nil
|
|
}
|
|
return rdb.Close()
|
|
}},
|
|
{"Ent", func() error {
|
|
if entClient == nil {
|
|
return nil
|
|
}
|
|
return entClient.Close()
|
|
}},
|
|
}
|
|
|
|
runParallel := func(steps []cleanupStep) {
|
|
var wg sync.WaitGroup
|
|
for i := range steps {
|
|
step := steps[i]
|
|
wg.Add(1)
|
|
go func() {
|
|
defer wg.Done()
|
|
if err := step.fn(); err != nil {
|
|
log.Printf("[Cleanup] %s failed: %v", step.name, err)
|
|
return
|
|
}
|
|
log.Printf("[Cleanup] %s succeeded", step.name)
|
|
}()
|
|
}
|
|
wg.Wait()
|
|
}
|
|
|
|
runSequential := func(steps []cleanupStep) {
|
|
for i := range steps {
|
|
step := steps[i]
|
|
if err := step.fn(); err != nil {
|
|
log.Printf("[Cleanup] %s failed: %v", step.name, err)
|
|
continue
|
|
}
|
|
log.Printf("[Cleanup] %s succeeded", step.name)
|
|
}
|
|
}
|
|
|
|
runParallel(parallelSteps)
|
|
runSequential(infraSteps)
|
|
|
|
// Check if context timed out
|
|
select {
|
|
case <-ctx.Done():
|
|
log.Printf("[Cleanup] Warning: cleanup timed out after 10 seconds")
|
|
default:
|
|
log.Printf("[Cleanup] All cleanup steps completed")
|
|
}
|
|
}
|
|
}
|