"""外部系统集成相关的 PostgreSQL 数据模型。 表名统一以 `ext_` 为前缀；字段类型复用 `yuxi.storage.postgres.base` 中的 `Base` 与 `JSON_VALUE`。所有表统一包含审计字段（created_by/updated_by/ created_at/updated_at/is_deleted/deleted_at），支持软删除与操作追溯。 """ from __future__ import annotations import base64 from typing import Any from sqlalchemy import ( BigInteger, Boolean, Column, DateTime, ForeignKey, Index, Integer, LargeBinary, String, Text, UniqueConstraint, func, select, ) from sqlalchemy.dialects.postgresql import JSON, JSONB from sqlalchemy.orm import column_property from yuxi.storage.postgres.models_business import Base from yuxi.utils.datetime_utils import format_utc_datetime, utc_now_naive JSON_VALUE = JSON().with_variant(JSONB, "postgresql") class ExternalToolConfig(Base): """外部系统工具配置（通用模型，HTTP 为首个适配器实现）。""" __tablename__ = "ext_tool_configs" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 基础信息 slug = Column(String(128), nullable=False, unique=True, index=True, comment="工具唯一标识") name = Column(String(128), nullable=False, comment="展示名称") description = Column(Text, nullable=False, comment="工具描述（给 LLM 看）") category = Column(String(64), nullable=False, default="default", comment="展示分类") adapter_type = Column(String(32), nullable=False, default="http", comment="适配器类型：http/grpc/...") enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") # 通用执行配置 timeout = Column(Integer, nullable=False, default=30, comment="超时时间（秒）") retry_policy = Column(JSON_VALUE, nullable=False, default=dict, comment="重试策略") auth_type = Column(String(32), nullable=False, default="none", comment="认证类型") auth_config = Column(JSON_VALUE, nullable=True, comment="认证配置（敏感字段加密存储）") # 适配器专属配置（首期由 HTTP 适配器使用） adapter_config = Column(JSON_VALUE, nullable=False, default=dict, comment="适配器专属配置") # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="SET NULL"), nullable=True, index=True, comment="所属系统 ID（为空时自包含运行）", ) # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_tool_configs_system_id_enabled", "system_id", "enabled"), Index("ix_ext_tool_configs_adapter_type_enabled", "adapter_type", "enabled"), Index("ix_ext_tool_configs_category_enabled", "category", "enabled"), ) def to_dict(self) -> dict[str, Any]: """序列化为字典；敏感字段的加解密由 persistence 层承接。""" return { "id": self.id, "slug": self.slug, "name": self.name, "description": self.description, "category": self.category, "adapter_type": self.adapter_type, "enabled": self.enabled, "timeout": self.timeout, "retry_policy": self.retry_policy or {}, "auth_type": self.auth_type, "auth_config": self.auth_config or {}, "adapter_config": self.adapter_config or {}, "system_id": self.system_id, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalToolConfigVersion(Base): """外部工具配置版本历史；每次保存时记录完整快照。""" __tablename__ = "ext_tool_config_versions" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 tool_slug = Column( String(128), ForeignKey("ext_tool_configs.slug", ondelete="CASCADE", onupdate="CASCADE"), nullable=False, index=True, comment="工具 slug", ) # 版本信息 version_id = Column(String(64), nullable=False, comment="展示版本号，如 2026-06-15-001") snapshot = Column(JSON_VALUE, nullable=False, comment="完整工具配置快照（敏感字段已加密）") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = (UniqueConstraint("tool_slug", "version_id", name="uq_ext_tool_config_versions_tool_version"),) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典；snapshot 中的敏感字段保持加密状态，由服务层按需解密。""" return { "id": self.id, "tool_slug": self.tool_slug, "version_id": self.version_id, "snapshot": self.snapshot or {}, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalAdapterAsset(Base): """外部适配器资产（如 proto/reflection/wsdl/openapi 等）。""" __tablename__ = "ext_adapter_assets" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 资产基础信息 adapter_type = Column(String(32), nullable=False, index=True, comment="适配器类型：http/grpc/soap/...") asset_type = Column(String(32), nullable=False, comment="资产类型：proto/reflection/wsdl/openapi/...") name = Column(String(256), nullable=False, comment="资产名称（通常取自上传文件名）") content = Column(LargeBinary, nullable=False, comment="资产原始内容（二进制）") size = Column(Integer, default=0, comment="内容字节数") checksum = Column(String(64), nullable=True, comment="内容 SHA-256 校验和") # 状态信息 status = Column( String(32), nullable=False, default="active", index=True, comment="资产状态：active/parse_failed/inactive", ) status_message = Column(String(512), nullable=True, comment="状态说明，如解析失败原因") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive, index=True) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) def to_dict(self) -> dict[str, Any]: """序列化为字典；content 以 base64 编码返回，便于 JSON 传输。""" content_b64 = base64.b64encode(self.content).decode("utf-8") if self.content else "" return { "id": self.id, "adapter_type": self.adapter_type, "asset_type": self.asset_type, "name": self.name, "content": content_b64, "size": self.size, "checksum": self.checksum, "status": self.status, "status_message": self.status_message, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } def to_list_dict(self) -> dict[str, Any]: """序列化为列表项字典；不包含 content 字段，避免大体积响应。""" return { "id": self.id, "adapter_type": self.adapter_type, "asset_type": self.asset_type, "name": self.name, "size": self.size, "checksum": self.checksum, "status": self.status, "status_message": self.status_message, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystem(Base): """外部系统一级实体。""" __tablename__ = "ext_systems" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 基础信息 slug = Column(String(128), nullable=False, unique=True, index=True, comment="系统唯一标识") name = Column(String(128), nullable=False, comment="展示名称") description = Column(Text, nullable=False, comment="系统描述") category = Column(String(64), nullable=False, default="default", comment="展示分类") adapter_type = Column(String(32), nullable=False, comment="适配器类型") source_type = Column(String(64), nullable=True, comment="渠道 source_type，用于统一操作分派") enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") # 连接与认证配置 connection_config = Column(JSON_VALUE, nullable=False, default=dict, comment="系统级连接配置") auth_type = Column(String(32), nullable=False, default="none", comment="认证类型") auth_config = Column(JSON_VALUE, nullable=True, comment="认证配置（敏感字段加密存储）") secret_refs = Column(JSON_VALUE, nullable=False, default=dict, comment="具名 secret 引用") # 运维治理配置 rate_limit = Column(JSON_VALUE, nullable=False, default=dict, comment="限流配置") circuit_breaker = Column(JSON_VALUE, nullable=False, default=dict, comment="熔断配置") pool_config = Column(JSON_VALUE, nullable=False, default=dict, comment="连接池配置") observability = Column(JSON_VALUE, nullable=False, default=dict, comment="可观测性配置") # 通用执行配置 timeout = Column(Integer, nullable=False, default=30, comment="超时时间（秒）") retry_policy = Column(JSON_VALUE, nullable=False, default=dict, comment="重试策略") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) def to_dict(self) -> dict[str, Any]: return { "id": self.id, "slug": self.slug, "name": self.name, "description": self.description, "category": self.category, "adapter_type": self.adapter_type, "source_type": self.source_type, "enabled": self.enabled, "connection_config": self.connection_config or {}, "auth_type": self.auth_type, "auth_config": self.auth_config or {}, "secret_refs": self.secret_refs or {}, "rate_limit": self.rate_limit or {}, "circuit_breaker": self.circuit_breaker or {}, "pool_config": self.pool_config or {}, "observability": self.observability or {}, "timeout": self.timeout, "retry_policy": self.retry_policy or {}, "env_count": self.env_count or 0, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemEnvironment(Base): """外部系统环境配置（dev / staging / prod）。""" __tablename__ = "ext_system_environments" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属系统 ID", ) # 环境基础信息 env_key = Column(String(32), nullable=False, comment="环境标识") name = Column(String(128), nullable=False, comment="环境名称") is_default = Column(Boolean, nullable=False, default=False, comment="是否默认环境") enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") # 环境级配置 connection_config = Column(JSON_VALUE, nullable=False, default=dict, comment="环境级连接配置") auth_config = Column(JSON_VALUE, nullable=True, comment="环境级认证配置（加密存储）") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( UniqueConstraint("system_id", "env_key", name="uq_ext_system_environments_system_env"), # 每个外部系统只能有一个默认环境 Index( "uq_ext_system_environments_default", "system_id", unique=True, postgresql_where=is_default.is_(True), ), ) def to_dict(self) -> dict[str, Any]: return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "name": self.name, "connection_config": self.connection_config or {}, "auth_config": self.auth_config or {}, "is_default": self.is_default, "enabled": self.enabled, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } # 外部系统环境数：使用关联子查询，避免列表查询时出现 N+1 问题 ExternalSystem.env_count = column_property( select(func.count(ExternalSystemEnvironment.id)) .where(ExternalSystemEnvironment.system_id == ExternalSystem.id) .correlate(ExternalSystem) .scalar_subquery() ) class ExternalSystemToken(Base): """外部系统 Token 持久化。""" __tablename__ = "ext_system_tokens" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, comment="所属系统 ID", ) # Token 基础信息 env_key = Column(String(32), nullable=False, default="default", comment="环境标识") token_type = Column(String(32), nullable=False, comment="Token 类型") access_token = Column(Text, nullable=False, comment="Access Token（加密存储）") refresh_token = Column(Text, nullable=True, comment="Refresh Token（加密存储）") expires_at = Column(DateTime, nullable=True, comment="过期时间") extra = Column(JSON_VALUE, nullable=False, default=dict, comment="额外信息") # 状态信息 is_invalidated = Column(Boolean, nullable=False, default=False, comment="是否已主动失效") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = (UniqueConstraint("system_id", "env_key", name="uq_ext_system_tokens_system_env"),) def to_dict(self) -> dict[str, Any]: """序列化为字典；不返回 Token 明文，仅返回是否存在。 Token 值加密存储于 ``access_token`` / ``refresh_token``，模型层 ``to_dict`` 不直接暴露密文或明文；需要明文的场景由服务层 （如 ``token_service.get_token_detail``）按权限解密后返回。 """ return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "token_type": self.token_type, "has_access_token": bool(self.access_token), "has_refresh_token": bool(self.refresh_token), "expires_at": format_utc_datetime(self.expires_at) if self.expires_at else None, "extra": self.extra or {}, "is_invalidated": self.is_invalidated, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemMetric(Base): """外部系统调用指标（按时间桶聚合）。""" __tablename__ = "ext_system_metrics" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, comment="所属系统 ID", ) # 桶维度 env_key = Column(String(32), nullable=False, default="default", comment="环境标识") bucket_at = Column(DateTime, nullable=False, comment="时间桶起始时间") # 调用计数 total_calls = Column(Integer, nullable=False, default=0) success_calls = Column(Integer, nullable=False, default=0) failed_calls = Column(Integer, nullable=False, default=0) auth_failed_calls = Column(Integer, nullable=False, default=0) ssrf_blocked_calls = Column(Integer, nullable=False, default=0) timeout_calls = Column(Integer, nullable=False, default=0) # 延迟统计 p99_latency_ms = Column(Integer, nullable=True, comment="当前桶的近似峰值延迟") latency_sum_ms = Column( BigInteger, nullable=False, default=0, comment="当前桶调用延迟总和（毫秒），用于原子累加计算真实平均值" ) latency_count = Column(Integer, nullable=False, default=0, comment="当前桶参与统计的调用次数") # Token 与限流统计 token_refresh_count = Column(Integer, nullable=False, default=0) token_refresh_failed = Column(Integer, nullable=False, default=0) throttled_count = Column(Integer, nullable=False, default=0) circuit_open_count = Column(Integer, nullable=False, default=0) # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = (UniqueConstraint("system_id", "env_key", "bucket_at", name="uq_ext_system_metrics_bucket"),) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典；avg_latency_ms 由 latency_sum_ms/latency_count 计算，避免存储不一致。""" latency_count = self.latency_count or 0 latency_sum_ms = self.latency_sum_ms or 0 avg_latency_ms = round(latency_sum_ms / latency_count, 2) if latency_count > 0 else 0.0 return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "bucket_at": format_utc_datetime(self.bucket_at), "total_calls": self.total_calls, "success_calls": self.success_calls, "failed_calls": self.failed_calls, "auth_failed_calls": self.auth_failed_calls, "ssrf_blocked_calls": self.ssrf_blocked_calls, "timeout_calls": self.timeout_calls, "p99_latency_ms": self.p99_latency_ms, "latency_sum_ms": latency_sum_ms, "latency_count": latency_count, "avg_latency_ms": avg_latency_ms, "token_refresh_count": self.token_refresh_count, "token_refresh_failed": self.token_refresh_failed, "throttled_count": self.throttled_count, "circuit_open_count": self.circuit_open_count, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemAuditLog(Base): """外部系统审计日志。 记录系统级变更、Token 失效、缓存清理等运维事件；detail 中不应包含密钥、 Token、密码等敏感信息，由调用方在写入前完成脱敏。 """ __tablename__ = "ext_system_audit_logs" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="SET NULL"), nullable=True, index=True, comment="所属系统 ID", ) # 事件基础信息 env_key = Column(String(32), nullable=True, comment="环境标识") event_type = Column(String(64), nullable=False, index=True, comment="事件类型") action_type = Column( String(64), nullable=True, index=True, comment="操作类型：CREATE/UPDATE/DELETE/ROTATE_SECRET/INVALIDATE_TOKEN/EXPORT/BULK_OPERATION/AUTH/EXECUTE/OTHER", ) resource = Column(String(256), nullable=True, comment="操作对象，如系统:crm_prod") user = Column(String(64), nullable=True, comment="操作人") # 事件详情 detail = Column(JSON_VALUE, nullable=False, default=dict, comment="事件详情（已脱敏）") snapshot_before = Column(JSON_VALUE, nullable=True, comment="变更前快照（已脱敏）") snapshot_after = Column(JSON_VALUE, nullable=True, comment="变更后快照（已脱敏）") description = Column(Text, nullable=True, comment="操作备注/描述") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive, index=True) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_system_audit_logs_system_id_created_at", "system_id", "created_at"), Index("ix_ext_system_audit_logs_action_type_created_at", "action_type", "created_at"), Index("ix_ext_system_audit_logs_user_created_at", "user", "created_at"), Index("ix_ext_system_audit_logs_env_key_created_at", "env_key", "created_at"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "event_type": self.event_type, "action_type": self.action_type, "resource": self.resource, "user": self.user, "detail": self.detail or {}, "snapshot_before": self.snapshot_before, "snapshot_after": self.snapshot_after, "description": self.description, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalToolExecution(Base): """外部系统工具单次执行记录。""" __tablename__ = "ext_tool_executions" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 执行标识 execution_id = Column(String(64), nullable=False, unique=True, index=True, comment="单次执行唯一标识") trace_id = Column(String(64), nullable=False, index=True, comment="调用链路唯一标识") correlation_id = Column(String(64), nullable=True, index=True, comment="业务关联 ID，如 Agent 运行 ID") # 关联关系 system_id = Column(Integer, nullable=False, index=True, comment="所属系统 ID") env_key = Column(String(32), nullable=False, default="default", comment="环境标识") tool_slug = Column(String(128), nullable=False, index=True, comment="工具 slug") # 调用方信息 caller = Column(String(32), nullable=False, comment="调用方：agent/user/workflow/simulate/sync_job/retry") caller_id = Column(String(64), nullable=True, comment="调用方实体 ID") # 执行状态与时间 status = Column( String(32), nullable=False, index=True, comment="pending/running/success/failed/timeout/throttled/cancelled" ) started_at = Column(DateTime, nullable=False, index=True, comment="开始时间") ended_at = Column(DateTime, nullable=True, comment="结束时间") duration_ms = Column(Integer, nullable=True, comment="耗时毫秒") # 操作类型 operation = Column(String(32), nullable=False, default="execute", comment="execute/health_check/test/simulate") # 请求/响应摘要（已脱敏） request_summary = Column(JSON_VALUE, nullable=False, default=dict, comment="请求摘要（已脱敏）") response_summary = Column(JSON_VALUE, nullable=True, comment="响应摘要（已脱敏）") error = Column(JSON_VALUE, nullable=True, comment="错误信息") # 重试与标签 retry_of = Column(String(64), nullable=True, index=True, comment="重试来源 execution_id") retry_count = Column(Integer, nullable=False, default=0, comment="第几次重试") tags = Column(JSON_VALUE, nullable=False, default=dict, comment="业务标签") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_tool_executions_system_started", "system_id", "started_at"), Index("ix_ext_tool_executions_tool_started", "tool_slug", "started_at"), Index("ix_ext_tool_executions_status_started", "status", "started_at"), ) def to_dict(self, *, tool_name: str | None = None) -> dict[str, Any]: """序列化为 API 响应字典。 为前端列表/详情展示提供与字段名语义一致的别名： - execution_time -> started_at - environment -> env_key - tool_name 默认回退到 tool_slug，可由服务层传入真实工具名覆盖。 """ return { "execution_id": self.execution_id, "trace_id": self.trace_id, "correlation_id": self.correlation_id, "system_id": self.system_id, "env_key": self.env_key, "environment": self.env_key, "tool_slug": self.tool_slug, "tool_name": tool_name if tool_name is not None else self.tool_slug, "caller": self.caller, "caller_id": self.caller_id, "status": self.status, "operation": self.operation, "started_at": format_utc_datetime(self.started_at), "execution_time": format_utc_datetime(self.started_at), "ended_at": format_utc_datetime(self.ended_at) if self.ended_at else None, "duration_ms": self.duration_ms, "request_summary": self.request_summary or {}, "response_summary": self.response_summary, "error": self.error, "retry_of": self.retry_of, "retry_count": self.retry_count, "tags": self.tags or {}, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalToolExecutionTrace(Base): """外部系统工具执行调用链路。""" __tablename__ = "ext_execution_traces" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 execution_id = Column(String(64), nullable=False, unique=True, comment="关联执行记录") trace_id = Column(String(64), nullable=False, index=True, comment="调用链路 ID") # 链路数据 spans = Column(JSON_VALUE, nullable=False, comment="完整 Span 树") total_duration_ms = Column(Integer, nullable=True, comment="总耗时") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "execution_id": self.execution_id, "trace_id": self.trace_id, "total_duration_ms": self.total_duration_ms, "spans": self.spans or [], "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemHealthCheck(Base): """外部系统健康检查历史记录。 每个外部系统保留最近一次健康检查结果，用于全局健康检查页的一览展示。 """ __tablename__ = "ext_system_health_checks" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属系统 ID", ) env_key = Column(String(32), nullable=False, default="default", comment="环境标识") # 探测结果 health_status = Column( String(32), nullable=False, default="not_checked", comment="健康状态：healthy/auth_failure/connectivity_issue/not_checked", ) duration_ms = Column(Integer, nullable=True, comment="探测耗时毫秒") detail = Column(Text, nullable=True, comment="探测结果说明") error_code = Column(String(64), nullable=True, comment="错误码") error_message = Column(Text, nullable=True, comment="错误信息") checked_at = Column(DateTime, nullable=True, index=True, comment="探测时间") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( UniqueConstraint("system_id", "env_key", name="uq_ext_system_health_checks_system_env"), Index("ix_ext_system_health_checks_status", "health_status"), Index("ix_ext_system_health_checks_checked_at", "checked_at"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "health_status": self.health_status, "duration_ms": self.duration_ms, "detail": self.detail, "error_code": self.error_code, "error_message": self.error_message, "checked_at": format_utc_datetime(self.checked_at) if self.checked_at else None, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalWebhookSubscription(Base): """外部系统事件订阅（Webhook 入站）。 承载 Yuxi 对外部系统事件的订阅关系：哪个系统/环境的什么事件、由哪个 handler（agent/workflow）处理，以及外部系统返回的订阅 ID、验签密钥、 过期与续期信息。与 ExternalToolExecution 的"主动调用"链路互补，共同 覆盖双向集成场景。 """ __tablename__ = "ext_webhook_subscriptions" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 基础信息 slug = Column(String(128), nullable=False, unique=True, index=True, comment="订阅唯一标识，用于回调路径") name = Column(String(128), nullable=False, comment="展示名称") description = Column(Text, nullable=False, default="", comment="订阅描述") # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属外部系统 ID", ) env_key = Column(String(32), nullable=False, default="default", comment="环境标识") # 事件订阅信息 source_event_type = Column( String(128), nullable=False, index=True, comment="外部事件类型，如 salesforce.account.updated" ) subscription_id = Column(String(256), nullable=True, index=True, comment="外部系统返回的订阅 ID") # 处理方信息 target_handler_type = Column(String(32), nullable=False, comment="处理方类型：agent/workflow/webhook_forward") target_handler_id = Column(String(64), nullable=True, comment="处理方实体 ID") # 回调与验签 callback_path = Column(String(256), nullable=False, comment="Yuxi 接收路径，如 /api/external/webhooks/{slug}") secret = Column(Text, nullable=True, comment="验签密钥（加密存储，to_dict 不暴露明文）") secret_algorithm = Column(String(32), nullable=False, default="hmac_sha256", comment="验签算法") # 过滤与转换规则 filter_rules = Column(JSON_VALUE, nullable=False, default=dict, comment="事件过滤规则") transform_rules = Column(JSON_VALUE, nullable=False, default=dict, comment="事件转换规则") # 状态信息 status = Column( String(32), nullable=False, default="pending", comment="订阅状态：pending/active/paused/expired/disabled", ) enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") # 过期与续期 expires_at = Column(DateTime, nullable=True, index=True, comment="外部系统订阅过期时间") auto_renew = Column(Boolean, nullable=False, default=True, comment="是否自动续期") last_renewed_at = Column(DateTime, nullable=True, comment="上次续期时间") last_renew_error = Column(Text, nullable=True, comment="上次续期错误信息") renewal_attempts = Column(Integer, nullable=False, default=0, comment="续期连续失败次数") # 接收统计 last_received_at = Column(DateTime, nullable=True, comment="最近一次收到事件时间") received_count = Column(BigInteger, nullable=False, default=0, comment="累计收到事件数") retention_days = Column(Integer, nullable=False, default=30, comment="事件保留天数，超期由清理任务删除") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_webhook_subscriptions_system_env_event", "system_id", "env_key", "source_event_type"), Index("ix_ext_webhook_subscriptions_status_enabled", "status", "enabled"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典；secret 仅返回是否存在，明文由服务层按权限解密。""" return { "id": self.id, "slug": self.slug, "name": self.name, "description": self.description, "system_id": self.system_id, "env_key": self.env_key, "source_event_type": self.source_event_type, "subscription_id": self.subscription_id, "target_handler_type": self.target_handler_type, "target_handler_id": self.target_handler_id, "callback_path": self.callback_path, "has_secret": bool(self.secret), "secret_algorithm": self.secret_algorithm, "filter_rules": self.filter_rules or {}, "transform_rules": self.transform_rules or {}, "status": self.status, "enabled": self.enabled, "expires_at": format_utc_datetime(self.expires_at) if self.expires_at else None, "auto_renew": self.auto_renew, "last_renewed_at": format_utc_datetime(self.last_renewed_at) if self.last_renewed_at else None, "last_renew_error": self.last_renew_error, "renewal_attempts": self.renewal_attempts, "last_received_at": format_utc_datetime(self.last_received_at) if self.last_received_at else None, "received_count": self.received_count, "retention_days": self.retention_days, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalWebhookEvent(Base): """Webhook 事件落地。 外部系统推送的原始事件持久化，支持基于 external_event_id 的幂等去重、 重放、关联到智能体运行。payload/headers 由调用方在写入前完成脱敏， 不得包含密钥、Token 等敏感信息。 """ __tablename__ = "ext_webhook_events" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 subscription_id = Column( Integer, ForeignKey("ext_webhook_subscriptions.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属订阅 ID", ) subscription_slug = Column(String(128), nullable=False, index=True, comment="订阅 slug（冗余，便于查询）") # 事件基础信息 external_event_id = Column(String(256), nullable=True, index=True, comment="外部系统事件 ID，用于幂等去重") event_type = Column(String(128), nullable=False, index=True, comment="事件类型") payload = Column(JSON_VALUE, nullable=False, comment="事件载荷（已脱敏）") payload_hash = Column( String(64), nullable=True, index=True, comment="payload SHA-256，用于无 external_event_id 时的去重" ) headers = Column(JSON_VALUE, nullable=False, default=dict, comment="请求头（已脱敏）") signature = Column(String(512), nullable=True, comment="请求签名") signature_verified = Column(Boolean, nullable=False, default=False, comment="是否验签通过") # 接收信息 received_at = Column(DateTime, nullable=False, index=True, comment="收到时间") source_ip = Column(String(64), nullable=True, comment="来源 IP") # 处理状态 processing_status = Column( String(32), nullable=False, default="pending", index=True, comment="处理状态：pending/processing/processed/failed/ignored/duplicate", ) processing_attempts = Column(Integer, nullable=False, default=0, comment="处理尝试次数") last_processed_at = Column(DateTime, nullable=True, comment="上次处理时间") processing_error = Column(Text, nullable=True, comment="处理错误信息") # 触发关联 correlation_id = Column(String(64), nullable=True, index=True, comment="业务关联 ID，如触发的 agent_run_id") triggered_handler_type = Column(String(32), nullable=True, comment="实际触发的处理方类型") triggered_handler_id = Column(String(64), nullable=True, comment="实际触发的处理方 ID") triggered_execution_id = Column(String(64), nullable=True, index=True, comment="触发的执行记录 ID") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( UniqueConstraint("subscription_id", "external_event_id", name="uq_ext_webhook_events_sub_ext_event"), Index("ix_ext_webhook_events_received_status", "received_at", "processing_status"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "subscription_id": self.subscription_id, "subscription_slug": self.subscription_slug, "external_event_id": self.external_event_id, "event_type": self.event_type, "payload": self.payload or {}, "payload_hash": self.payload_hash, "headers": self.headers or {}, "signature": self.signature, "signature_verified": self.signature_verified, "received_at": format_utc_datetime(self.received_at), "source_ip": self.source_ip, "processing_status": self.processing_status, "processing_attempts": self.processing_attempts, "last_processed_at": format_utc_datetime(self.last_processed_at) if self.last_processed_at else None, "processing_error": self.processing_error, "correlation_id": self.correlation_id, "triggered_handler_type": self.triggered_handler_type, "triggered_handler_id": self.triggered_handler_id, "triggered_execution_id": self.triggered_execution_id, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemQuotaUsage(Base): """外部系统 API 配额跟踪。 按时间窗口跟踪外部系统 API 配额使用情况（如 Salesforce 24h 限额、 Microsoft Graph 每日限额）。配额值可从响应头解析或手动配置，用于 调用前预检与接近上限时降级。 """ __tablename__ = "ext_system_quota_usage" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属外部系统 ID", ) env_key = Column(String(32), nullable=False, default="default", comment="环境标识") # 配额定义 quota_key = Column(String(128), nullable=False, comment="配额项标识，如 salesforce.api_calls.24h") quota_name = Column(String(128), nullable=False, comment="配额展示名称") quota_window = Column(String(32), nullable=False, comment="窗口类型：daily/hourly/rolling_24h/minute/custom") window_start = Column(DateTime, nullable=True, comment="窗口起始时间") window_end = Column(DateTime, nullable=True, index=True, comment="窗口结束时间（重置时间）") # 配额数值 limit_value = Column(BigInteger, nullable=False, default=0, comment="配额上限") used_value = Column(BigInteger, nullable=False, default=0, comment="已用值") unit = Column(String(32), nullable=False, default="calls", comment="配额单位：calls/bytes/records") # 配额来源 source = Column(String(32), nullable=False, default="config", comment="配额来源：response_header/manual/config") source_header_name = Column(String(128), nullable=True, comment="响应头字段名，如 X-RateLimit-Remaining") # 告警阈值 warning_threshold = Column(Integer, nullable=False, default=80, comment="告警阈值百分比（0-100）") critical_threshold = Column(Integer, nullable=False, default=95, comment="严重告警阈值百分比（0-100）") # 时间戳 last_updated_at = Column(DateTime, nullable=True, comment="配额数据最后更新时间") last_response_at = Column(DateTime, nullable=True, comment="最后一次响应时间") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( UniqueConstraint("system_id", "env_key", "quota_key", name="uq_ext_system_quota_usage_system_env_key"), Index("ix_ext_system_quota_usage_window_end", "window_end"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典；usage_ratio 由 used/limit 计算，避免存储不一致。""" limit_value = self.limit_value or 0 used_value = self.used_value or 0 usage_ratio = round(used_value / limit_value, 4) if limit_value > 0 else 0.0 return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "quota_key": self.quota_key, "quota_name": self.quota_name, "quota_window": self.quota_window, "window_start": format_utc_datetime(self.window_start) if self.window_start else None, "window_end": format_utc_datetime(self.window_end) if self.window_end else None, "limit_value": limit_value, "used_value": used_value, "remaining_value": max(limit_value - used_value, 0), "usage_ratio": usage_ratio, "unit": self.unit, "source": self.source, "source_header_name": self.source_header_name, "warning_threshold": self.warning_threshold, "critical_threshold": self.critical_threshold, "last_updated_at": format_utc_datetime(self.last_updated_at) if self.last_updated_at else None, "last_response_at": format_utc_datetime(self.last_response_at) if self.last_response_at else None, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSystemAlert(Base): """外部系统告警事件。 记录健康检查失败、熔断打开、Token 连续刷新失败、配额接近上限、连续 超时等运维事件。同一 dedup_key 在 firing 状态下唯一，避免重复告警； resolved 后允许再次触发。用于前端运维大盘展示与通知驱动。 """ __tablename__ = "ext_system_alerts" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="SET NULL"), nullable=True, index=True, comment="所属外部系统 ID（系统删除时置空，保留告警历史）", ) env_key = Column(String(32), nullable=True, comment="环境标识") # 告警分类与状态 alert_type = Column( String(64), nullable=False, index=True, comment="告警类型：health_check_failed/circuit_open/token_refresh_failed/quota_near_limit/continuous_timeout/webhook_expired", ) severity = Column(String(32), nullable=False, default="warning", comment="严重程度：info/warning/critical/fatal") status = Column( String(32), nullable=False, default="firing", index=True, comment="告警状态：firing/acknowledged/resolved/suppressed", ) # 告警内容 title = Column(String(256), nullable=False, comment="告警标题") description = Column(Text, nullable=True, comment="告警描述") detail = Column(JSON_VALUE, nullable=False, default=dict, comment="告警详情") # 关联资源 resource_type = Column(String(32), nullable=True, comment="关联资源类型：system/tool/webhook/sync_job/quota") resource_id = Column(String(128), nullable=True, comment="关联资源 ID") related_execution_id = Column(String(64), nullable=True, comment="关联执行记录 ID") related_trace_id = Column(String(64), nullable=True, comment="关联链路 ID") metric_snapshot = Column(JSON_VALUE, nullable=True, comment="触发时的指标快照") # 去重与时间 dedup_key = Column(String(256), nullable=True, index=True, comment="去重键，相同 key 的 firing 告警合并") triggered_at = Column(DateTime, nullable=False, index=True, comment="告警触发时间") resolved_at = Column(DateTime, nullable=True, comment="告警恢复时间") # 确认与恢复 acknowledged_by = Column(String(64), nullable=True, comment="确认人") acknowledged_at = Column(DateTime, nullable=True, comment="确认时间") resolution_note = Column(Text, nullable=True, comment="恢复备注") # 通知状态 notification_status = Column( String(32), nullable=False, default="pending", comment="通知状态：pending/sent/failed/skipped" ) notification_sent_at = Column(DateTime, nullable=True, comment="通知发送时间") notification_channels = Column(JSON_VALUE, nullable=False, default=dict, comment="通知渠道状态") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_system_alerts_status_severity_triggered", "status", "severity", "triggered_at"), Index("ix_ext_system_alerts_system_status", "system_id", "status"), Index("ix_ext_system_alerts_alert_type_triggered", "alert_type", "triggered_at"), # 同一 dedup_key 在 firing 状态下唯一，避免重复告警 Index( "uq_ext_system_alerts_dedup_firing", "dedup_key", unique=True, postgresql_where="status = 'firing'", ), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "alert_type": self.alert_type, "severity": self.severity, "status": self.status, "title": self.title, "description": self.description, "detail": self.detail or {}, "resource_type": self.resource_type, "resource_id": self.resource_id, "related_execution_id": self.related_execution_id, "related_trace_id": self.related_trace_id, "metric_snapshot": self.metric_snapshot, "dedup_key": self.dedup_key, "triggered_at": format_utc_datetime(self.triggered_at), "resolved_at": format_utc_datetime(self.resolved_at) if self.resolved_at else None, "acknowledged_by": self.acknowledged_by, "acknowledged_at": format_utc_datetime(self.acknowledged_at) if self.acknowledged_at else None, "resolution_note": self.resolution_note, "notification_status": self.notification_status, "notification_sent_at": format_utc_datetime(self.notification_sent_at) if self.notification_sent_at else None, "notification_channels": self.notification_channels or {}, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalSecretRotationPolicy(Base): """外部系统密钥轮换策略。 管理外部系统密钥（OAuth client secret、API key、mTLS 证书等）的轮换 周期与状态。secret_ref 指向 ExternalSystem.secret_refs 中的具名 secret； auto 模式由适配器执行轮换，manual 模式仅提醒。用于满足企业安全合规 要求，避免密钥过期导致的生产事故。 """ __tablename__ = "ext_secret_rotation_policies" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=False, index=True, comment="所属外部系统 ID", ) env_key = Column(String(32), nullable=False, default="default", comment="环境标识") # 密钥定义 secret_type = Column( String(32), nullable=False, comment="密钥类型：client_secret/api_key/cert/password/connection_string" ) secret_name = Column(String(128), nullable=False, comment="密钥名称，如 salesforce_consumer_secret") secret_ref = Column(String(128), nullable=False, comment="引用 ExternalSystem.secret_refs 中的 key") # 轮换策略 rotation_mode = Column(String(32), nullable=False, default="manual", comment="轮换模式：auto/manual") rotation_interval_days = Column(Integer, nullable=False, default=90, comment="轮换周期（天）") notify_before_days = Column(Integer, nullable=False, default=7, comment="提前通知天数") notify_channels = Column(JSON_VALUE, nullable=False, default=dict, comment="通知渠道配置") # 轮换状态 last_rotated_at = Column(DateTime, nullable=True, comment="上次成功轮换时间（仅成功时更新）") next_rotation_at = Column(DateTime, nullable=True, index=True, comment="下次轮换时间") last_rotation_at = Column(DateTime, nullable=True, comment="上次轮换尝试时间（含失败，每次尝试均更新）") last_rotation_status = Column(String(32), nullable=True, comment="上次轮换结果：success/failed/skipped") last_rotation_error = Column(Text, nullable=True, comment="上次轮换错误信息") rotation_count = Column(Integer, nullable=False, default=0, comment="成功轮换次数") max_rotation_retries = Column(Integer, nullable=False, default=3, comment="最大重试次数") # 策略状态 status = Column( String(32), nullable=False, default="active", index=True, comment="策略状态：active/rotating/overdue/failed/disabled", ) # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( UniqueConstraint( "system_id", "env_key", "secret_type", "secret_name", name="uq_ext_secret_rotation_policies_system_env_secret", ), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "system_id": self.system_id, "env_key": self.env_key, "secret_type": self.secret_type, "secret_name": self.secret_name, "secret_ref": self.secret_ref, "rotation_mode": self.rotation_mode, "rotation_interval_days": self.rotation_interval_days, "notify_before_days": self.notify_before_days, "notify_channels": self.notify_channels or {}, "last_rotated_at": format_utc_datetime(self.last_rotated_at) if self.last_rotated_at else None, "next_rotation_at": format_utc_datetime(self.next_rotation_at) if self.next_rotation_at else None, "last_rotation_at": format_utc_datetime(self.last_rotation_at) if self.last_rotation_at else None, "last_rotation_status": self.last_rotation_status, "last_rotation_error": self.last_rotation_error, "rotation_count": self.rotation_count, "max_rotation_retries": self.max_rotation_retries, "status": self.status, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalToolAccessRule(Base): """外部工具访问控制规则。 基于 principal（user/role/department/agent）+ tool + env 的细粒度访问 控制。effect 为 allow/deny，priority 越高优先级越高（deny 默认优先）。 conditions 承载时间窗口、只读约束、调用上限等复杂条件。用于多部门 共用平台时的合规管控。 """ __tablename__ = "ext_tool_access_rules" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 tool_slug = Column( String(128), ForeignKey("ext_tool_configs.slug", ondelete="CASCADE", onupdate="CASCADE"), nullable=True, index=True, comment="工具 slug（为空表示系统下所有工具）", ) system_id = Column( Integer, ForeignKey("ext_systems.id", ondelete="CASCADE"), nullable=True, index=True, comment="所属系统 ID（为空表示全局规则）", ) # 主体信息 principal_type = Column( String(32), nullable=False, index=True, comment="主体类型：user/role/department/agent/service_account" ) principal_id = Column(String(64), nullable=False, index=True, comment="主体 ID") principal_name = Column(String(128), nullable=True, comment="主体名称（冗余，便于展示）") # 约束条件 env_key = Column(String(32), nullable=True, comment="约束到特定环境，为空表示所有环境") effect = Column(String(16), nullable=False, default="allow", comment="规则效果：allow/deny") priority = Column(Integer, nullable=False, default=0, comment="优先级，数字越大优先级越高") conditions = Column( JSON_VALUE, nullable=False, default=dict, comment="附加条件，如 {time_window, read_only, max_calls_per_day}" ) expires_at = Column(DateTime, nullable=True, index=True, comment="规则过期时间，为空表示永久") # 状态信息 enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") description = Column(Text, nullable=True, comment="规则说明") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_tool_access_rules_tool_enabled", "tool_slug", "enabled"), Index("ix_ext_tool_access_rules_principal", "principal_type", "principal_id"), Index("ix_ext_tool_access_rules_system_enabled", "system_id", "enabled"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "tool_slug": self.tool_slug, "system_id": self.system_id, "principal_type": self.principal_type, "principal_id": self.principal_id, "principal_name": self.principal_name, "env_key": self.env_key, "effect": self.effect, "priority": self.priority, "conditions": self.conditions or {}, "expires_at": format_utc_datetime(self.expires_at) if self.expires_at else None, "enabled": self.enabled, "description": self.description, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalToolTestCase(Base): """外部工具回归测试用例。 为关键工具配置请求 fixture 与期望断言，定期运行以监控外部系统 API 变更导致的静默失败（如返回 200 但结构变化）。支持 jsonpath/status_code /response_time 等多种断言类型；连续失败达到阈值时触发告警。 """ __tablename__ = "ext_tool_test_cases" # 主键 id = Column(Integer, primary_key=True, autoincrement=True) # 关联关系 tool_slug = Column( String(128), ForeignKey("ext_tool_configs.slug", ondelete="CASCADE", onupdate="CASCADE"), nullable=False, index=True, comment="被测工具 slug", ) # 用例基础信息 name = Column(String(128), nullable=False, comment="用例名称") description = Column(Text, nullable=True, comment="用例说明") env_key = Column(String(32), nullable=True, comment="测试环境，为空使用默认环境") # 请求与断言 request_fixture = Column(JSON_VALUE, nullable=False, comment="请求参数 fixture") expected_status = Column(String(32), nullable=True, comment="期望状态：success/failed/具体状态码") assertions = Column( JSON_VALUE, nullable=False, default=list, comment="断言列表，如 [{type: jsonpath, path, op, value}]" ) timeout = Column(Integer, nullable=False, default=30, comment="超时时间（秒）") # 调度与启用 enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") schedule_cron = Column(String(64), nullable=True, index=True, comment="运行计划 cron 表达式，为空表示手动运行") # 上次运行结果 last_run_at = Column(DateTime, nullable=True, comment="上次运行时间") last_run_status = Column(String(32), nullable=True, index=True, comment="上次运行结果：passed/failed/error/skipped") last_run_duration_ms = Column(Integer, nullable=True, comment="上次运行耗时毫秒") last_run_response = Column(JSON_VALUE, nullable=True, comment="上次运行响应（已脱敏）") last_run_error = Column(Text, nullable=True, comment="上次运行错误信息") last_run_assertions_result = Column(JSON_VALUE, nullable=True, comment="上次运行断言明细") # 告警配置 consecutive_failures = Column(Integer, nullable=False, default=0, comment="连续失败次数") alert_on_failure = Column(Boolean, nullable=False, default=True, comment="失败是否触发告警") alert_threshold = Column(Integer, nullable=False, default=3, comment="连续失败几次后告警") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_tool_test_cases_tool_enabled", "tool_slug", "enabled"), Index("ix_ext_tool_test_cases_last_run_status", "last_run_status"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典。""" return { "id": self.id, "tool_slug": self.tool_slug, "name": self.name, "description": self.description, "env_key": self.env_key, "request_fixture": self.request_fixture or {}, "expected_status": self.expected_status, "assertions": self.assertions or [], "timeout": self.timeout, "enabled": self.enabled, "schedule_cron": self.schedule_cron, "last_run_at": format_utc_datetime(self.last_run_at) if self.last_run_at else None, "last_run_status": self.last_run_status, "last_run_duration_ms": self.last_run_duration_ms, "last_run_response": self.last_run_response, "last_run_error": self.last_run_error, "last_run_assertions_result": self.last_run_assertions_result, "consecutive_failures": self.consecutive_failures, "alert_on_failure": self.alert_on_failure, "alert_threshold": self.alert_threshold, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), } class ExternalNotificationChannel(Base): """外部系统通知渠道配置。 管理告警通知渠道（Slack webhook、Email SMTP、企业机器人等）的配置， 供 ``NotificationService`` 在发送告警通知时按 ``channel_type`` 分派。 ``config`` 为渠道特定配置 dict，可能含敏感字段（webhook URL、SMTP 密码 等），由 persistence 边界加解密、use_cases mapper 脱敏。 """ __tablename__ = "ext_notification_channels" # 主键 id = Column(BigInteger, primary_key=True, autoincrement=True) # 渠道基础信息 channel_type = Column( String(64), nullable=False, index=True, comment="渠道类型：slack/email/feishu/dingtalk/webhook/..." ) name = Column(String(128), nullable=False, comment="展示名称") description = Column(Text, nullable=True, comment="渠道描述") # 渠道配置（敏感字段加密存储） config = Column(JSON_VALUE, nullable=False, default=dict, comment="渠道配置（敏感字段加密存储）") # 启用状态 enabled = Column(Boolean, nullable=False, default=True, comment="是否启用") # 审计字段 created_by = Column(String(64), nullable=True) updated_by = Column(String(64), nullable=True) created_at = Column(DateTime, nullable=False, default=utc_now_naive) updated_at = Column(DateTime, nullable=False, default=utc_now_naive, onupdate=utc_now_naive) is_deleted = Column(Integer, nullable=False, default=0, index=True) deleted_at = Column(DateTime, nullable=True) __table_args__ = ( Index("ix_ext_notification_channels_type_enabled", "channel_type", "enabled"), Index("ix_ext_notification_channels_name", "name"), ) def to_dict(self) -> dict[str, Any]: """序列化为 API 响应字典；config 不返回明文，仅返回是否存在。""" return { "id": self.id, "channel_type": self.channel_type, "name": self.name, "description": self.description, "has_config": bool(self.config), "enabled": self.enabled, "created_by": self.created_by, "updated_by": self.updated_by, "created_at": format_utc_datetime(self.created_at), "updated_at": format_utc_datetime(self.updated_at), }