feat(ops): add object storage management and site-mapping CSV import/export
Ship the Ops backstage 对象存储 page (browse / upload / move / delete / folder ops) backed by a new object-storage service + handler, with the shared storage client extended with List/Stat/Copy/Usage/DownloadURL so both MinIO and Aliyun providers cover the new surface. Add ForcePathStyle to the object-storage config and treat r2/s3/custom_s3 as external providers so Cloudflare R2 and other S3-compatibles can share the MinIO client path without spinning up the bundled MinIO. Also add CSV import/export + template download to the site-domain mappings page, raise gin MaxMultipartMemory to 8 MiB for the new multipart endpoints, register Ops swagger routes, and extend the descriptions-parity test to cover the ops router. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -18,6 +18,110 @@ var routeDocs = map[string]routeDoc{
|
||||
"GET /api/health/live": {"存活探针", "Kubernetes liveness 探针，永远返回 200。"},
|
||||
"GET /api/health/ready": {"就绪探针", "Kubernetes readiness 探针，依赖（数据库等）就绪后返回 200。"},
|
||||
|
||||
// --- Ops：认证与账号 ---
|
||||
"GET /api/ops/auth/password-key": {"Ops 登录密码加密公钥", "返回 Ops 登录密码前端加密使用的临时公钥与 key_id。"},
|
||||
"POST /api/ops/auth/login": {"Ops 账号密码登录", "Ops 控制台账号密码登录，返回 access token。"},
|
||||
"GET /api/ops/auth/me": {"Ops 当前用户", "返回当前 Ops JWT 对应的账号信息。"},
|
||||
"POST /api/ops/auth/password": {"Ops 修改密码", "当前 Ops 用户修改自己的密码。"},
|
||||
|
||||
"GET /api/ops/accounts": {"Ops 账号列表", "分页查询 Ops 管理员账号。"},
|
||||
"POST /api/ops/accounts": {"新建 Ops 账号", "创建新的 Ops 管理员账号。"},
|
||||
"GET /api/ops/accounts/:id": {"Ops 账号详情", "读取指定 Ops 管理员账号详情。"},
|
||||
"PATCH /api/ops/accounts/:id": {"更新 Ops 账号", "更新指定 Ops 管理员账号资料。"},
|
||||
"POST /api/ops/accounts/:id/status": {"切换 Ops 账号状态", "启用或停用指定 Ops 管理员账号。"},
|
||||
"POST /api/ops/accounts/:id/password": {"重置 Ops 账号密码", "为指定 Ops 管理员账号重置登录密码。"},
|
||||
|
||||
"GET /api/ops/plans": {"租户套餐列表", "返回可分配给租户管理员的套餐列表。"},
|
||||
"GET /api/ops/roles": {"Ops 角色列表", "返回 Ops 控制台可用角色列表。"},
|
||||
|
||||
"GET /api/ops/admin-users": {"租户管理员列表", "分页查询租户管理员账号。"},
|
||||
"POST /api/ops/admin-users": {"新建租户管理员", "创建租户管理员账号。"},
|
||||
"GET /api/ops/admin-users/:id": {"租户管理员详情", "读取租户管理员账号详情。"},
|
||||
"PATCH /api/ops/admin-users/:id": {"更新租户管理员", "更新租户管理员基础资料。"},
|
||||
"POST /api/ops/admin-users/:id/plan": {"调整租户套餐", "调整租户管理员账号绑定的套餐。"},
|
||||
"POST /api/ops/admin-users/:id/subscription-expiry": {"调整订阅到期时间", "更新租户管理员账号订阅到期时间。"},
|
||||
"POST /api/ops/admin-users/:id/reset-plan-usage": {"重置套餐用量", "重置租户管理员账号套餐用量。"},
|
||||
"POST /api/ops/admin-users/:id/role": {"调整租户角色", "调整租户管理员账号角色。"},
|
||||
"POST /api/ops/admin-users/:id/kol": {"设置 KOL 身份", "设置租户管理员账号的 KOL 状态。"},
|
||||
"POST /api/ops/admin-users/:id/status": {"切换租户管理员状态", "启用或停用租户管理员账号。"},
|
||||
"POST /api/ops/admin-users/:id/password": {"重置租户管理员密码", "重置租户管理员账号登录密码。"},
|
||||
"POST /api/ops/admin-users/:id/reset-login-lock": {"解除登录锁定", "解除租户管理员账号的登录失败锁定。"},
|
||||
|
||||
// --- Ops：业务运营 ---
|
||||
"GET /api/ops/kol/packages": {"KOL 套餐列表（Ops）", "Ops 查看 KOL 市场套餐。"},
|
||||
"GET /api/ops/kol/subscriptions": {"KOL 订阅列表（Ops）", "Ops 查看租户 KOL 订阅记录。"},
|
||||
"POST /api/ops/kol/subscriptions/manual-bind": {"手动绑定 KOL 订阅", "Ops 为租户手动绑定 KOL 订阅。"},
|
||||
"POST /api/ops/kol/subscriptions/:id/approve": {"审批 KOL 订阅", "Ops 审批指定 KOL 订阅。"},
|
||||
"POST /api/ops/kol/subscriptions/:id/revoke": {"撤销 KOL 订阅", "Ops 撤销指定 KOL 订阅。"},
|
||||
"GET /api/ops/audits": {"审计日志列表", "分页查询 Ops 审计日志。"},
|
||||
"GET /api/ops/jobs": {"任务列表（Ops）", "分页查询后台任务。"},
|
||||
"GET /api/ops/jobs/:source/:id": {"任务详情（Ops）", "读取指定来源与 ID 的任务详情。"},
|
||||
"POST /api/ops/jobs/:source/:id/retry": {"重试任务（Ops）", "对失败任务发起重试。"},
|
||||
"POST /api/ops/jobs/:source/:id/cancel": {"取消任务（Ops）", "取消指定后台任务。"},
|
||||
|
||||
// --- Ops：调度器 ---
|
||||
"GET /api/ops/scheduler/jobs": {"调度任务列表", "分页查询调度器任务。"},
|
||||
"GET /api/ops/scheduler/jobs/:key": {"调度任务详情", "读取指定调度任务详情。"},
|
||||
"PATCH /api/ops/scheduler/jobs/:key": {"更新调度任务", "更新调度任务配置。"},
|
||||
"POST /api/ops/scheduler/jobs/:key/enable": {"启用调度任务", "启用指定调度任务。"},
|
||||
"POST /api/ops/scheduler/jobs/:key/disable": {"禁用调度任务", "禁用指定调度任务。"},
|
||||
"POST /api/ops/scheduler/jobs/:key/run": {"手动触发调度任务", "立即触发指定调度任务。"},
|
||||
"POST /api/ops/scheduler/jobs/:key/dry-run": {"试运行调度任务", "以 dry-run 模式触发指定调度任务。"},
|
||||
"GET /api/ops/scheduler/jobs/:key/runs": {"调度运行历史", "查询指定调度任务运行历史。"},
|
||||
"GET /api/ops/scheduler/instances": {"调度器实例列表", "查询当前调度器实例状态。"},
|
||||
|
||||
// --- Ops：站点映射 ---
|
||||
"GET /api/ops/site-domain-mappings": {"站点域名映射列表", "分页查询站点域名映射。"},
|
||||
"GET /api/ops/site-domain-mappings/export": {"导出站点域名映射", "按筛选条件导出站点域名映射 CSV。"},
|
||||
"POST /api/ops/site-domain-mappings/import": {"导入站点域名映射", "Multipart 上传 CSV 批量导入站点域名映射。"},
|
||||
"POST /api/ops/site-domain-mappings": {"新建站点域名映射", "创建站点域名映射。"},
|
||||
"PATCH /api/ops/site-domain-mappings/:id": {"更新站点域名映射", "更新指定站点域名映射。"},
|
||||
"POST /api/ops/site-domain-mappings/:id/active": {"切换站点域名映射状态", "启用或停用指定站点域名映射。"},
|
||||
"DELETE /api/ops/site-domain-mappings/:id": {"删除站点域名映射", "删除指定站点域名映射。"},
|
||||
|
||||
// --- Ops：对象存储 ---
|
||||
"GET /api/ops/object-storage/objects": {"对象存储列表", "按前缀、关键字和递归模式查询对象存储文件。"},
|
||||
"GET /api/ops/object-storage/usage": {"对象存储用量", "读取对象存储 Bucket 原生用量统计。"},
|
||||
"GET /api/ops/object-storage/objects/detail": {"对象详情", "读取对象元数据、公开访问地址和预览地址。"},
|
||||
"GET /api/ops/object-storage/objects/url": {"解析对象访问地址", "生成对象可访问 URL；私有 Bucket 返回短期签名地址。"},
|
||||
"GET /api/ops/object-storage/objects/download-url": {"解析对象下载地址", "生成带下载文件名响应头的短期签名下载地址。"},
|
||||
"GET /api/ops/object-storage/objects/download": {"下载对象", "通过 Ops API 代理下载对象。"},
|
||||
"POST /api/ops/object-storage/objects/upload": {"上传对象", "Multipart 上传单个对象，服务端限制 500MB。"},
|
||||
"POST /api/ops/object-storage/objects/move": {"移动或重命名对象", "复制对象到目标 Key，可选择删除源对象。"},
|
||||
"DELETE /api/ops/object-storage/objects": {"删除对象", "删除指定 Object Key 的对象。"},
|
||||
"POST /api/ops/object-storage/folders": {"创建对象存储目录", "创建以 / 结尾的目录占位对象。"},
|
||||
"DELETE /api/ops/object-storage/folders": {"删除对象存储目录", "按前缀递归删除目录下对象。"},
|
||||
|
||||
// --- Ops：桌面客户端版本 ---
|
||||
"GET /api/ops/desktop-client/releases": {"桌面客户端版本列表", "分页查询桌面客户端版本配置。"},
|
||||
"POST /api/ops/desktop-client/releases/upload": {"上传桌面客户端包", "Multipart 上传桌面客户端安装包或更新包。"},
|
||||
"POST /api/ops/desktop-client/releases": {"新建桌面客户端版本", "创建桌面客户端版本配置。"},
|
||||
"PATCH /api/ops/desktop-client/releases/:id": {"更新桌面客户端版本", "更新桌面客户端版本配置。"},
|
||||
"GET /api/ops/desktop-client/releases/:id/download-url": {"解析桌面客户端下载地址", "解析指定桌面客户端版本的下载地址。"},
|
||||
"POST /api/ops/desktop-client/releases/:id/enabled": {"切换桌面客户端版本状态", "启用或禁用指定桌面客户端版本。"},
|
||||
"DELETE /api/ops/desktop-client/releases/:id": {"删除桌面客户端版本", "删除指定桌面客户端版本配置。"},
|
||||
|
||||
// --- Ops：合规 ---
|
||||
"GET /api/ops/compliance/dictionaries": {"合规词库列表", "分页查询内容合规词库。"},
|
||||
"POST /api/ops/compliance/dictionaries": {"新建合规词库", "创建内容合规词库。"},
|
||||
"PUT /api/ops/compliance/dictionaries/:id": {"更新合规词库", "更新内容合规词库。"},
|
||||
"DELETE /api/ops/compliance/dictionaries/:id": {"删除合规词库", "删除内容合规词库。"},
|
||||
"GET /api/ops/compliance/dictionaries/:id/terms": {"合规词条列表", "查询指定词库下的合规词条。"},
|
||||
"POST /api/ops/compliance/dictionaries/:id/terms": {"新增合规词条", "向指定词库新增合规词条。"},
|
||||
"POST /api/ops/compliance/dictionaries/:id/terms:batch-import": {"批量导入合规词条", "向指定词库批量导入合规词条。"},
|
||||
"DELETE /api/ops/compliance/dictionaries/:id/terms/:term_id": {"删除合规词条", "删除指定合规词条。"},
|
||||
"POST /api/ops/compliance/dictionaries/:id/publish": {"发布合规词库", "发布指定合规词库版本。"},
|
||||
"POST /api/ops/compliance/dictionaries/:id/rollback": {"回滚合规词库", "回滚指定合规词库版本。"},
|
||||
"GET /api/ops/compliance/policy/global": {"全局合规策略", "读取全局内容合规策略。"},
|
||||
"PUT /api/ops/compliance/policy/global": {"更新全局合规策略", "更新全局内容合规策略。"},
|
||||
"POST /api/ops/compliance/policy/global/master-switch": {"切换合规总开关", "启用或关闭全局内容合规总开关。"},
|
||||
"GET /api/ops/compliance/manual-reviews": {"人工审阅列表", "分页查询内容合规人工审阅。"},
|
||||
"GET /api/ops/compliance/manual-reviews/:id": {"人工审阅详情", "读取指定人工审阅详情。"},
|
||||
"POST /api/ops/compliance/manual-reviews/:id/approve": {"通过人工审阅", "通过指定内容合规人工审阅。"},
|
||||
"POST /api/ops/compliance/manual-reviews/:id/reject": {"驳回人工审阅", "驳回指定内容合规人工审阅。"},
|
||||
"GET /api/ops/compliance/stats": {"合规统计", "读取内容合规统计数据。"},
|
||||
"GET /api/ops/compliance/records": {"合规检测记录", "分页查询内容合规检测记录。"},
|
||||
|
||||
// --- Auth ---
|
||||
"GET /api/auth/password-key": {"登录密码加密公钥", "返回登录密码前端加密使用的临时公钥与 key_id。"},
|
||||
"POST /api/auth/login": {"账号密码登录", "客户后台账号密码登录，返回 access/refresh token。"},
|
||||
|
||||
@@ -13,14 +13,17 @@ import (
|
||||
// TestRouteDocs_CoversEveryRouterEntry parses the tenant-api router source and
|
||||
// asserts that every registered route has a corresponding entry in routeDocs.
|
||||
// This is a static-analysis safety net: when a new handler is wired up in
|
||||
// internal/tenant/transport/router.go, this test fails until a Chinese
|
||||
// tenant or ops transport routers, this test fails until a Chinese
|
||||
// summary is added.
|
||||
func TestRouteDocs_CoversEveryRouterEntry(t *testing.T) {
|
||||
routerPath, bootstrapPath := findRepoSources(t)
|
||||
routerPaths, bootstrapPath := findRepoSources(t)
|
||||
|
||||
routes := append(parseRoutes(t, routerPath), parseEngineRoutes(t, bootstrapPath)...)
|
||||
routes := parseEngineRoutes(t, bootstrapPath)
|
||||
for _, routerPath := range routerPaths {
|
||||
routes = append(routes, parseRoutes(t, routerPath)...)
|
||||
}
|
||||
if len(routes) == 0 {
|
||||
t.Fatalf("could not extract any routes from %s", routerPath)
|
||||
t.Fatalf("could not extract any routes from %s", strings.Join(routerPaths, ", "))
|
||||
}
|
||||
|
||||
missing := make([]string, 0)
|
||||
@@ -133,7 +136,7 @@ func parseEngineRoutes(t *testing.T, path string) []parsedRoute {
|
||||
return routes
|
||||
}
|
||||
|
||||
func findRepoSources(t *testing.T) (router, bootstrap string) {
|
||||
func findRepoSources(t *testing.T) (routers []string, bootstrap string) {
|
||||
t.Helper()
|
||||
_, file, _, ok := runtime.Caller(0)
|
||||
if !ok {
|
||||
@@ -142,6 +145,9 @@ func findRepoSources(t *testing.T) (router, bootstrap string) {
|
||||
// .../server/internal/shared/swagger/descriptions_parity_test.go ->
|
||||
// .../server is three levels up from this file's parent dir.
|
||||
serverRoot := filepath.Clean(filepath.Join(filepath.Dir(file), "..", "..", ".."))
|
||||
return filepath.Join(serverRoot, "internal", "tenant", "transport", "router.go"),
|
||||
return []string{
|
||||
filepath.Join(serverRoot, "internal", "tenant", "transport", "router.go"),
|
||||
filepath.Join(serverRoot, "internal", "ops", "transport", "router.go"),
|
||||
},
|
||||
filepath.Join(serverRoot, "internal", "bootstrap", "bootstrap.go")
|
||||
}
|
||||
|
||||
@@ -303,6 +303,17 @@ func queryParameterNames(route gin.RouteInfo) []string {
|
||||
}
|
||||
|
||||
switch {
|
||||
case strings.Contains(path, "/ops/site-domain-mappings"):
|
||||
add("page", "size", "keyword", "is_active")
|
||||
case strings.Contains(path, "/ops/object-storage/objects/detail") ||
|
||||
strings.Contains(path, "/ops/object-storage/objects/url") ||
|
||||
strings.Contains(path, "/ops/object-storage/objects/download-url") ||
|
||||
strings.Contains(path, "/ops/object-storage/objects/download"):
|
||||
add("key")
|
||||
case strings.Contains(path, "/ops/object-storage/objects"):
|
||||
add("prefix", "keyword", "continuation_token", "start_after", "recursive", "size", "key")
|
||||
case strings.Contains(path, "/ops/object-storage/folders"):
|
||||
add("prefix")
|
||||
case strings.Contains(path, "/workspace/ai-point-usage"):
|
||||
add("page", "page_size")
|
||||
case strings.Contains(path, "/tenant/articles"):
|
||||
@@ -357,13 +368,13 @@ func queryParameter(name string) map[string]any {
|
||||
|
||||
func schemaForQueryParameter(name string) map[string]any {
|
||||
switch name {
|
||||
case "page", "page_size", "limit", "offset", "days", "period_days":
|
||||
case "page", "page_size", "limit", "offset", "days", "period_days", "size":
|
||||
return map[string]any{"type": "integer"}
|
||||
case "brand_id", "keyword_id", "question_id", "template_id", "kol_prompt_id", "prompt_rule_id", "group_id", "folder_id", "if_sync_version":
|
||||
return map[string]any{"type": "integer", "format": "int64"}
|
||||
case "force":
|
||||
return map[string]any{"type": "string", "enum": []string{"1"}}
|
||||
case "ungrouped", "undo":
|
||||
case "ungrouped", "undo", "recursive", "is_active":
|
||||
return map[string]any{"type": "string", "enum": []string{"true", "false"}}
|
||||
case "created_from", "created_to", "date_from", "date_to", "business_date":
|
||||
return map[string]any{"type": "string", "format": "date"}
|
||||
@@ -403,6 +414,9 @@ func isMultipartRoute(route gin.RouteInfo) bool {
|
||||
}
|
||||
path := route.Path
|
||||
return path == "/api/tenant/images" ||
|
||||
path == "/api/ops/site-domain-mappings/import" ||
|
||||
path == "/api/ops/object-storage/objects/upload" ||
|
||||
path == "/api/ops/desktop-client/releases/upload" ||
|
||||
path == "/api/tenant/knowledge/items/file" ||
|
||||
path == "/api/tenant/kol/manage/profile/avatar" ||
|
||||
path == "/api/tenant/articles/:id/images"
|
||||
|
||||
Reference in New Issue
Block a user