feat(acceptance): 建立同构验收与弹性容量体系

实现本地三节点 K3s 同构环境、脱敏生产快照、Gemini 图片和多参考图视频协议模拟、统一验收报告及故障注入。\n\n新增 Worker 容量控制器、资源与连接预算、任务恢复保护，并将生产验收拆分为 validation 执行和人工 CAS 放量。\n\n验证包括 Go 全量测试、PostgreSQL HTTP 集成测试、go vet、OpenAPI、ShellCheck、前端检查、迁移及发布脚本测试。
2026-07-31 18:02:24 +08:00
parent 93d36d0e55
commit e05922b0f4
94 changed files with 12379 additions and 826 deletions
@@ -85,6 +85,21 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 		baseURL != "http://acceptance-emulator:8090" || credential == "" || credential == token {
 		t.Fatalf("candidate override base=%q credential=%q err=%v", baseURL, credential, err)
 	}
+	capacityProfiles := []CapacityProfileInput{
+		{
+			Kind: "image", StableThroughputPerSecond: 10, AdmittedThroughputPerSecond: 8,
+			MaxRunning: 48, MaxQueued: 480, MaxPredictedWaitSeconds: 60,
+		},
+		{
+			Kind: "video", StableThroughputPerSecond: 1, AdmittedThroughputPerSecond: 0.8,
+			MaxRunning: 48, MaxQueued: 96, MaxPredictedWaitSeconds: 120,
+		},
+	}
+	if _, err := db.StageAcceptanceCapacityProfiles(ctx, StageAcceptanceCapacityProfilesInput{
+		RunID: run.ID, ConfigHash: strings.Repeat("d", 64), CapacityProfiles: capacityProfiles,
+	}); err != nil {
+		t.Fatalf("stage acceptance capacity profiles: %v", err)
+	}
 	if _, err := db.FinishAcceptanceRun(ctx, FinishAcceptanceRunInput{
 		RunID: run.ID, Passed: true, Report: map[string]any{"queueFinal": 0},
 	}); err != nil {
@@ -93,6 +108,8 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 	promotion := PromoteAcceptanceRunInput{
 		RunID: run.ID, Revision: mode.Revision,
 		ReleaseSHA: mode.ReleaseSHA, APIImageDigest: mode.APIImageDigest, WorkerImageDigest: mode.WorkerImageDigest,
+		ConfigHash:       strings.Repeat("d", 64),
+		CapacityProfiles: capacityProfiles,
 	}
 	stale := promotion
 	stale.Revision++
@@ -106,6 +123,30 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 	if live.Mode != "live" || live.Revision != 2 {
 		t.Fatalf("unexpected live mode: %+v", live)
 	}
+	stalePause := PauseGatewayTrafficInput{
+		Revision: live.Revision + 1, ReleaseSHA: live.ReleaseSHA,
+		APIImageDigest: live.APIImageDigest, WorkerImageDigest: live.WorkerImageDigest,
+		Reason: "integration hard gate",
+	}
+	if _, err := db.PauseGatewayTraffic(ctx, stalePause); !errors.Is(err, ErrAcceptanceStateConflict) {
+		t.Fatalf("stale post-promotion pause error=%v, want state conflict", err)
+	}
+	stalePause.Revision = live.Revision
+	paused, err := db.PauseGatewayTraffic(ctx, stalePause)
+	if err != nil {
+		t.Fatalf("pause post-promotion traffic: %v", err)
+	}
+	if paused.Mode != "validation" || paused.RunID != run.ID || paused.Revision != 3 {
+		t.Fatalf("unexpected post-promotion pause mode: %+v", paused)
+	}
+	if _, err := db.AuthorizeAcceptanceTask(ctx, "", "", user); !errors.Is(err, ErrProductionTrafficPaused) {
+		t.Fatalf("production request after monitor pause error=%v, want traffic paused", err)
+	}
+	profiles, err := db.ListCapacityProfiles(ctx)
+	if err != nil || len(profiles) < 2 {
+		t.Fatalf("certified capacity profiles=%+v err=%v", profiles, err)
+	}
+	resetTrafficMode()

 	failedRun, err := db.CreateAcceptanceRun(ctx, CreateAcceptanceRunInput{
 		ReleaseSHA:        strings.Repeat("d", 40),
@@ -187,10 +228,24 @@ SET upstream_submission_status = 'submitting', upstream_submission_updated_at =
 WHERE id = $1::uuid`, submittingAttemptID); err != nil {
 		t.Fatalf("mark acceptance task attempt submitting: %v", err)
 	}
-	if _, err := db.FinishAcceptanceRun(ctx, FinishAcceptanceRunInput{
+	if passed, err := db.FinishAcceptanceRun(ctx, FinishAcceptanceRunInput{
+		RunID: failedRun.ID, Passed: true, Report: map[string]any{"testsPassed": true},
+	}); err != nil || passed.Status != "passed" {
+		t.Fatalf("mark acceptance run passed before external certification=%+v err=%v", passed, err)
+	}
+	if _, err := db.PromoteAcceptanceRun(ctx, PromoteAcceptanceRunInput{
+		RunID: failedRun.ID, Revision: failedMode.Revision,
+		ReleaseSHA: failedMode.ReleaseSHA, APIImageDigest: failedMode.APIImageDigest,
+		WorkerImageDigest: failedMode.WorkerImageDigest,
+		ConfigHash:        strings.Repeat("d", 64),
+		CapacityProfiles:  capacityProfiles,
+	}); !errors.Is(err, ErrAcceptancePromotionGates) {
+		t.Fatalf("unstaged capacity promotion error=%v, want promotion gates", err)
+	}
+	if failed, err := db.FinishAcceptanceRun(ctx, FinishAcceptanceRunInput{
 		RunID: failedRun.ID, Passed: false, FailureReason: "load failed",
-	}); err != nil {
-		t.Fatalf("fail acceptance run: %v", err)
+	}); err != nil || failed.Status != "failed" {
+		t.Fatalf("downgrade unpromoted acceptance run after external gate failure=%+v err=%v", failed, err)
 	}
 	if retried, err := db.RetryAcceptanceRun(ctx, failedRun.ID); err != nil || retried.Status != "running" {
 		t.Fatalf("retry acceptance run=%+v err=%v", retried, err)