- 迁移 16:diagnostic_grant(token 哈希唯一、15 分钟、单次、绑定 Run)+ user.role(user/admin 检查约束) - 诊断双授权(ADR-004):本人签发 grant(明文 token 只返回一次,库存 SHA-256);读取需登录态 + Hunjing-Diagnostic-Token + Purpose 三重匹配;单次消耗(重放 401)、用途不符 403、响应 no-store/private;返回观测摘要(usage/TTFT/工具轨迹)不含消息正文 - 管理面:pending 司议案列表与处置(content_removed 联动下架目标内容——治理闭环);非管理员 403 - 脱敏支持包:统计聚合(runs/messages/tool/media 按状态),无正文无密钥 - 观测:GET /readyz(DB 连通)与 GET /metrics(Prometheus 文本,真实 SQL 聚合) - 自托管:docker/Dockerfile.backend(uv 构建)+ docker-compose.app.yml(hunjing-api + hunjing-postgres 健康依赖、密码经 .env);Makefile 新增 selfhost-up/down、db-dump/db-restore(备份到 backups/) - 测试 94 项全绿(+3):诊断全路径(无令牌/用途不符/成功/单次重放)、管理面处置联动、支持包与指标
68 lines
2.5 KiB
Python
68 lines
2.5 KiB
Python
"""FastAPI 应用工厂。"""
|
|
|
|
from fastapi import FastAPI
|
|
|
|
from app.auth.routes import router as auth_router
|
|
from app.characters.routes import router as characters_router
|
|
from app.community.routes import router as community_router
|
|
from app.conversations.routes import message_router, run_router
|
|
from app.conversations.routes import router as conversations_router
|
|
from app.core.config import get_settings
|
|
from app.core.errors import install_error_handlers
|
|
from app.core.middleware import RequestContextMiddleware, configure_logging
|
|
from app.db.session import init_engine
|
|
from app.marketplace.routes import finance_router, webhook_router
|
|
from app.marketplace.routes import router as marketplace_router
|
|
from app.media.routes import router as media_router
|
|
from app.memories.routes import cycle_router
|
|
from app.memories.routes import router as memories_router
|
|
from app.ops.routes import admin_router, ops_router
|
|
from app.plugins.routes import inst_router, invoke_router
|
|
from app.plugins.routes import router as plugins_router
|
|
from app.tools.routes import calls_router, tools_router
|
|
from app.workspaces.routes import router as workspaces_router
|
|
|
|
|
|
def create_app() -> FastAPI:
|
|
settings = get_settings()
|
|
configure_logging(settings.log_level)
|
|
app = FastAPI(
|
|
title="Hunjing API",
|
|
version="0.1.0",
|
|
# 公共契约位于 docs/contracts 与 openapi/;本服务 docs 仅供开发调试。
|
|
docs_url="/_dev/docs",
|
|
openapi_url="/_dev/openapi.json",
|
|
)
|
|
install_error_handlers(app)
|
|
init_engine(app)
|
|
app.add_middleware(RequestContextMiddleware)
|
|
app.include_router(auth_router)
|
|
app.include_router(conversations_router)
|
|
app.include_router(run_router)
|
|
app.include_router(message_router)
|
|
app.include_router(cycle_router) # 先于 characters:避免通配生命周期路由拦截
|
|
app.include_router(characters_router)
|
|
app.include_router(memories_router)
|
|
app.include_router(tools_router)
|
|
app.include_router(calls_router)
|
|
app.include_router(marketplace_router)
|
|
app.include_router(finance_router)
|
|
app.include_router(webhook_router)
|
|
app.include_router(community_router)
|
|
app.include_router(workspaces_router)
|
|
app.include_router(plugins_router)
|
|
app.include_router(inst_router)
|
|
app.include_router(invoke_router)
|
|
app.include_router(media_router)
|
|
app.include_router(ops_router)
|
|
app.include_router(admin_router)
|
|
|
|
@app.get("/healthz", tags=["ops"])
|
|
async def healthz() -> dict[str, str]:
|
|
return {"status": "ok", "env": settings.env}
|
|
|
|
return app
|
|
|
|
|
|
app = create_app()
|