feat(admin): 优化后台运维与任务管理

完善平台、基准模型、定价规则和实时负载的紧凑查询与滚动展示，并固定关键操作列。新增管理员任务记录、批量计费结算和用户组限流、额度及模型权限维护能力，同时补充任务脱敏、查询索引与 OpenAPI 契约。验证：pnpm openapi、Go 全量测试、pnpm lint、pnpm test、pnpm build、gofmt 与差异格式检查均通过。
2026-07-25 01:32:49 +08:00
parent b29d539d49
commit de10875439
38 changed files with 5015 additions and 425 deletions
@@ -0,0 +1,87 @@
+package store
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestMaskAdminGatewayTaskRecursivelyMasksSecretsWithoutMutatingSource(t *testing.T) {
+	source := AdminGatewayTask{
+		GatewayTask: GatewayTask{
+			Request: map[string]any{
+				"model": "example",
+				"headers": map[string]any{
+					"Authorization": "Bearer private",
+					"X-Api-Key":     "secret-key",
+				},
+				"usage": map[string]any{"input_tokens": float64(12)},
+			},
+			Result: map[string]any{
+				"nested": []any{map[string]any{"password": "private-password"}},
+			},
+			Attempts: []TaskAttempt{{
+				RequestSnapshot: map[string]any{"client_secret": "private-client-secret"},
+			}},
+		},
+	}
+
+	masked := MaskAdminGatewayTask(source)
+	headers := masked.Request["headers"].(map[string]any)
+	if headers["Authorization"] != maskedAdminTaskValue || headers["X-Api-Key"] != maskedAdminTaskValue {
+		t.Fatalf("sensitive headers were not masked: %#v", headers)
+	}
+	if masked.Request["usage"].(map[string]any)["input_tokens"] != float64(12) {
+		t.Fatalf("token usage must remain visible: %#v", masked.Request)
+	}
+	nested := masked.Result["nested"].([]any)[0].(map[string]any)
+	if nested["password"] != maskedAdminTaskValue {
+		t.Fatalf("nested password was not masked: %#v", nested)
+	}
+	if masked.Attempts[0].RequestSnapshot["client_secret"] != maskedAdminTaskValue {
+		t.Fatalf("attempt snapshot secret was not masked: %#v", masked.Attempts[0])
+	}
+	if source.Request["headers"].(map[string]any)["Authorization"] != "Bearer private" {
+		t.Fatal("masking mutated the source request")
+	}
+	if source.Attempts[0].RequestSnapshot["client_secret"] != "private-client-secret" {
+		t.Fatal("masking mutated the source attempts")
+	}
+}
+
+func TestBuildAdminTaskWhereUsesSharedPlaceholdersAndAllFilters(t *testing.T) {
+	where, args := buildAdminTaskWhere(AdminTaskListFilter{
+		Query:         "needle",
+		GatewayTenant: "00000000-0000-0000-0000-000000000001",
+		GatewayUser:   "00000000-0000-0000-0000-000000000002",
+		UserGroup:     "00000000-0000-0000-0000-000000000003",
+		Status:        "failed",
+		Platform:      "00000000-0000-0000-0000-000000000004",
+		Model:         "model-a",
+		ModelType:     "image_generate",
+		RunMode:       "production",
+		BillingStatus: "settled",
+		APIKey:        "ops",
+	})
+	sql := strings.Join(where, "\n")
+	if strings.Contains(sql, "%!") || strings.Contains(sql, "$%d") {
+		t.Fatalf("SQL contains an unresolved placeholder: %s", sql)
+	}
+	if len(args) != 11 {
+		t.Fatalf("argument count=%d, want 11", len(args))
+	}
+	if strings.Count(sql, "$1") < 10 {
+		t.Fatalf("keyword search should reuse one placeholder, got: %s", sql)
+	}
+	for _, fragment := range []string{
+		"t.gateway_tenant_id",
+		"t.gateway_user_id",
+		"t.user_group_id",
+		"platform_attempt.platform_id",
+		"t.billing_status",
+		"t.api_key_prefix",
+	} {
+		if !strings.Contains(sql, fragment) {
+			t.Fatalf("SQL is missing %q: %s", fragment, sql)
+		}
+	}
+}