Kris
2f6a4c29bb
1. 为渠道账户ID查询添加最小长度校验，统一分析模块常量引用 2. 新增扫码登录向导端点，完善文档说明 3. 优化配对统计接口，移除无效参数 4. 为出站箱接口添加批量上限与202状态码 5. 新增测试用例、访问规则、配额等模块的查询与校验参数 6. 新增适配器健康批量查询、健康检查触发接口 7. 统一告警、审计日志的错误处理方式 8. 新增插件配置账户ID支持，优化批量操作响应 9. 新增环境健康批量查询、Webhook限流与参数校验 10. 完善会话管理、审计日志的参数与文档说明 11. 修复导入模块的校验错误处理逻辑
577 lines
23 KiB
Python
577 lines
23 KiB
Python
"""Import 子域 Router。
|
||
|
||
外部系统限界上下文的导入/导出 API，覆盖以下能力：
|
||
|
||
系统级导入（两阶段流程）：
|
||
1. ``POST /preview``：根据适配器类型与源资产生成系统级导入草稿（系统 + 工具）
|
||
2. ``POST /confirm``：基于草稿执行实际持久化
|
||
|
||
工具级导入（两阶段流程）：
|
||
3. ``POST /tools/preview``：根据适配器类型与源资产生成工具草稿列表（不落库）
|
||
4. ``POST /tools/confirm``：基于草稿执行工具持久化
|
||
|
||
工具导出：
|
||
5. ``GET /tools/export``：导出单个工具配置
|
||
6. ``POST /tools/bulk-export``：批量导出工具配置
|
||
|
||
工具包导入/导出：
|
||
7. ``POST /tool-package/export``：导出工具包（含工具 + 系统 + 环境 + 资产）
|
||
8. ``POST /tool-package/preview``：工具包导入预览（检查冲突，不落库）
|
||
9. ``POST /tool-package/confirm``：工具包导入确认（导入系统/环境/资产/工具）
|
||
|
||
所有端点通过 ``create_use_cases_from_db`` 装配 use_cases，经 ``import_service``
|
||
端口调用用例。Request Schema 与 Input DTO 不共享类，Router 内显式构造 DTO，
|
||
操作人字段（``created_by``）由 ``current_user.uid`` 填充，角色字段
|
||
（``requester_role``）由 ``current_user.role`` 填充。
|
||
|
||
字段约束对齐 ``ExternalSystem`` / ``ExternalTool`` ORM 列定义与其他子域 router
|
||
（``system_router`` / ``tool_router`` / ``asset_router``），在边界层拦截非法输入。
|
||
``include_secrets=True`` 的导出端点在 Router 层显式校验 superadmin 权限，
|
||
``AccessDeniedError`` 交由全局异常处理器映射为 403。
|
||
"""
|
||
|
||
from __future__ import annotations
|
||
|
||
import base64
|
||
import binascii
|
||
import json
|
||
from typing import Any
|
||
|
||
from fastapi import APIRouter, Depends, Query
|
||
from pydantic import BaseModel, ConfigDict, Field, ValidationError, field_validator, model_validator
|
||
from sqlalchemy.ext.asyncio import AsyncSession
|
||
from yuxi.external_systems.exceptions import AccessDeniedError, DomainValidationError
|
||
from yuxi.external_systems.infrastructure.container import create_use_cases_from_db
|
||
from yuxi.external_systems.use_cases.dto.environment import EnvironmentOutput
|
||
from yuxi.external_systems.use_cases.dto.import_draft import (
|
||
BulkExportToolsInput,
|
||
ExportToolInput,
|
||
ImportConfirmInput,
|
||
ImportPreviewInput,
|
||
ToolImportConfirmInput,
|
||
ToolImportPreviewInput,
|
||
ToolPackageAssetInput,
|
||
ToolPackageExportInput,
|
||
ToolPackageImportInput,
|
||
ToolPackageImportPreviewInput,
|
||
ToolPackageInput,
|
||
ToolPackageItemInput,
|
||
)
|
||
from yuxi.external_systems.use_cases.dto.system import (
|
||
ExternalSystemCreateInput,
|
||
SystemImportDraft,
|
||
SystemOutput,
|
||
)
|
||
from yuxi.external_systems.use_cases.dto.tool import (
|
||
ExternalToolCreateInput,
|
||
ToolOutput,
|
||
)
|
||
from yuxi.external_systems.use_cases.services.asset_service import MAX_CONTENT_BYTES
|
||
from yuxi.storage.postgres.models_business import User
|
||
|
||
from server.utils.auth_middleware import get_admin_user, get_db
|
||
|
||
import_router = APIRouter(prefix="/imports", tags=["external-systems-import"])
|
||
|
||
# base64 字符串最大长度（≈10MB 二进制，含 33% 编码开销 + padding 余量）
|
||
# 引用 asset_service.MAX_CONTENT_BYTES，与 asset_router 保持同一上限
|
||
_MAX_BASE64_LENGTH = int(MAX_CONTENT_BYTES * 1.4)
|
||
|
||
# slug 格式正则，对齐 ExternalSystemCreateInput / ExternalToolCreateInput 的 pattern
|
||
_SLUG_PATTERN = r"^[a-zA-Z_][a-zA-Z0-9_-]{0,127}$"
|
||
|
||
# 批量操作的最大列表长度，对齐 system_router.BatchEnabledRequest.max_length
|
||
_MAX_BATCH_LENGTH = 100
|
||
|
||
|
||
def _validate_base64_content(value: str) -> str:
|
||
"""校验 base64 编码字符串，非法时抛 ValueError（由 Pydantic 映射为 422）。
|
||
|
||
对齐 ``asset_router._validate_base64_content``，保证工具包资产与单资产上传
|
||
同一校验标准。
|
||
"""
|
||
try:
|
||
base64.b64decode(value, validate=True)
|
||
except (binascii.Error, ValueError) as exc:
|
||
raise ValueError("content_b64 必须是合法的 base64 编码") from exc
|
||
return value
|
||
|
||
|
||
def _check_secrets_export_permission(include_secrets: bool, user: User) -> None:
|
||
"""校验导出敏感信息的权限。
|
||
|
||
``include_secrets=True`` 时要求 superadmin 角色，否则抛 ``AccessDeniedError``。
|
||
在 Router 层显式校验，避免 admin 请求穿透到 use_case 层才被拒绝。
|
||
"""
|
||
if include_secrets and user.role != "superadmin":
|
||
raise AccessDeniedError("导出敏感信息需要超级管理员权限")
|
||
|
||
|
||
# ---------------- Request Schemas ----------------
|
||
|
||
|
||
class ImportPreviewRequest(BaseModel):
|
||
"""导入预览请求体。字段对齐 ``ImportPreviewInput``。
|
||
|
||
``payload`` 类型为 ``Any``，透传给适配器 ``generate_from_asset``，
|
||
不同适配器期望不同结构（dict/list/str），与 ``ToolImportPreviewRequest``
|
||
及 DTO ``ImportPreviewInput`` 保持一致。
|
||
|
||
字段长度约束对齐 ``ExternalSystem`` ORM 列定义与 ``system_router``：
|
||
``adapter_type`` 对齐 String(32)、``source_type`` 对齐 String(64)。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
adapter_type: str = Field(..., max_length=32)
|
||
source_type: str = Field(..., max_length=64)
|
||
payload: Any
|
||
asset_id: int | None = Field(default=None, ge=1)
|
||
|
||
|
||
class ExternalSystemDraftRequest(BaseModel):
|
||
"""系统级导入草稿中的系统请求体。字段对齐 ``ExternalSystemCreateInput``。"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
slug: str = Field(..., min_length=1, max_length=128, pattern=r"^[a-zA-Z_][a-zA-Z0-9_-]{0,127}$")
|
||
name: str = Field(..., min_length=1, max_length=128)
|
||
description: str = Field(..., min_length=1)
|
||
category: str = Field(default="default", max_length=64)
|
||
adapter_type: str = Field(default="http", max_length=32)
|
||
source_type: str | None = Field(default=None, max_length=64)
|
||
enabled: bool = Field(default=True)
|
||
connection_config: dict[str, Any] = Field(default_factory=dict)
|
||
auth_type: str = Field(default="none", max_length=32)
|
||
auth_config: dict[str, Any] | None = Field(default=None)
|
||
secret_refs: dict[str, Any] = Field(default_factory=dict)
|
||
|
||
|
||
class ExternalToolDraftRequest(BaseModel):
|
||
"""系统级导入草稿中的工具请求体。字段对齐 ``ExternalToolCreateInput``。"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
slug: str = Field(..., min_length=1, max_length=128, pattern=r"^[a-zA-Z_][a-zA-Z0-9_-]{0,127}$")
|
||
name: str = Field(..., min_length=1, max_length=128)
|
||
description: str = Field(..., min_length=1)
|
||
category: str = Field(default="default", max_length=64)
|
||
adapter_type: str = Field(default="http", max_length=32)
|
||
enabled: bool = Field(default=True)
|
||
timeout: int = Field(default=30, ge=1, le=300)
|
||
retry_policy: dict[str, Any] = Field(default_factory=dict)
|
||
auth_type: str = Field(default="none", max_length=32)
|
||
auth_config: dict[str, Any] = Field(default_factory=dict)
|
||
adapter_config: dict[str, Any] = Field(default_factory=dict)
|
||
|
||
|
||
class SystemImportDraftRequest(BaseModel):
|
||
"""系统导入草稿请求体。字段对齐 ``SystemImportDraft``（system + tools）。"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
system: ExternalSystemDraftRequest
|
||
tools: list[ExternalToolDraftRequest] = Field(default_factory=list)
|
||
|
||
|
||
class ImportConfirmRequest(BaseModel):
|
||
"""导入确认请求体。``draft`` 对齐 ``SystemImportDraft`` 结构（system + tools）。
|
||
|
||
``created_by`` 由 Router 用 ``current_user.uid`` 填充，不暴露给客户端。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
draft: SystemImportDraftRequest
|
||
|
||
|
||
# ---------------- 工具级导入 Request Schemas ----------------
|
||
|
||
|
||
class ToolImportPreviewRequest(BaseModel):
|
||
"""工具级导入预览请求体。字段对齐 ``ToolImportPreviewInput``。
|
||
|
||
字段长度约束对齐 ``ImportPreviewRequest``。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
adapter_type: str = Field(..., max_length=32)
|
||
source_type: str = Field(..., max_length=64)
|
||
payload: Any
|
||
|
||
|
||
class ToolImportConfirmRequest(BaseModel):
|
||
"""工具级导入确认请求体。字段对齐 ``ToolImportConfirmInput``。
|
||
|
||
``created_by`` 由 Router 用 ``current_user.uid`` 填充，不暴露给客户端。
|
||
|
||
支持两种输入模式（二选一）：
|
||
- ``drafts`` 非空：前端回传预览阶段获取的完整草稿列表
|
||
- ``adapter_type`` + ``source_type`` + ``payload``：让后端通过适配器重新生成草稿
|
||
|
||
通过 ``model_validator`` 在 Schema 层强制校验输入完整性，避免空 body
|
||
穿透到 use_case 层才报错。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
adapter_type: str = Field(default="", max_length=32)
|
||
source_type: str = Field(default="", max_length=64)
|
||
payload: Any = None
|
||
drafts: list[dict[str, Any]] = Field(default_factory=list)
|
||
selected_slugs: list[str] = Field(default_factory=list)
|
||
override_existing: bool = False
|
||
|
||
@model_validator(mode="after")
|
||
def validate_input_source(self) -> ToolImportConfirmRequest:
|
||
"""校验输入源完整性：要么提供 drafts，要么提供适配器三件套。"""
|
||
if self.drafts:
|
||
return self
|
||
if self.adapter_type and self.source_type and self.payload is not None:
|
||
return self
|
||
raise ValueError("必须提供 drafts（前端回传草稿）或 adapter_type + source_type + payload（适配器重新生成）")
|
||
|
||
|
||
# ---------------- 工具导出 Request Schemas ----------------
|
||
|
||
|
||
class BulkExportToolsRequest(BaseModel):
|
||
"""批量工具导出请求体。字段对齐 ``BulkExportToolsInput``。
|
||
|
||
``requester_role`` 由 Router 用 ``current_user.role`` 填充，不暴露给客户端。
|
||
``slugs`` 限制最多 ``_MAX_BATCH_LENGTH`` 个，防止批量查询过多导致性能问题。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
slugs: list[str] = Field(..., min_length=1, max_length=_MAX_BATCH_LENGTH)
|
||
include_secrets: bool = False
|
||
|
||
|
||
# ---------------- 工具包 Request Schemas ----------------
|
||
|
||
|
||
class ToolPackageAssetRequest(BaseModel):
|
||
"""工具包资产请求体。字段对齐 ``ToolPackageAssetInput``。
|
||
|
||
字段长度约束对齐 ``asset_router.CreateAssetRequest``：
|
||
``adapter_type`` / ``asset_type`` 对齐 String(32)、``name`` 对齐 String(128)。
|
||
``content_b64`` 限制最大长度并校验 base64 格式，与单资产上传同一标准。
|
||
|
||
``size`` 与 ``checksum`` 保留字段（导出端返回，导入端前端回传），
|
||
但 use_case 层会根据 ``content_b64`` 解码后的实际内容重新计算，
|
||
不信任客户端传入的值，防止数据不一致。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
id: int | None = Field(default=None, ge=1)
|
||
adapter_type: str = Field(..., max_length=32)
|
||
asset_type: str = Field(..., max_length=32)
|
||
name: str = Field(..., min_length=1, max_length=128)
|
||
content_b64: str = Field(default="", max_length=_MAX_BASE64_LENGTH)
|
||
size: int = Field(default=0, ge=0)
|
||
checksum: str | None = None
|
||
|
||
@field_validator("content_b64")
|
||
@classmethod
|
||
def validate_content_b64(cls, v: str) -> str:
|
||
if not v:
|
||
return v
|
||
return _validate_base64_content(v)
|
||
|
||
|
||
class ToolPackageItemRequest(BaseModel):
|
||
"""工具包条目请求体。字段对齐 ``ToolPackageItemInput``。
|
||
|
||
``tool``/``system``/``environments`` 使用 ``dict[str, Any]`` 而非显式 Schema：
|
||
其结构对齐 Output DTO（``ToolOutput``/``SystemOutput``/``EnvironmentOutput``），
|
||
字段多且包含元数据（id 等），工具包导入为"导出-导入"闭环，前端回传的就是
|
||
导出端返回的 dict。定义 Request Schema 副本会造成大量字段重复且无业务价值，
|
||
结构校验由 ``_build_tool_package`` 中的 ``ToolOutput(**item.tool)`` 等
|
||
Pydantic 构造完成。``assets`` 使用显式 Schema 是因为 ``ToolPackageAssetInput``
|
||
是专为导入定义的 Input DTO（含 ``content_b64``），字段少且独立。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
tool: dict[str, Any]
|
||
system: dict[str, Any] | None = None
|
||
environments: list[dict[str, Any]] = Field(default_factory=list)
|
||
assets: list[ToolPackageAssetRequest] = Field(default_factory=list)
|
||
|
||
|
||
class ToolPackageRequest(BaseModel):
|
||
"""工具包请求体。字段对齐 ``ToolPackageInput``。"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
items: list[ToolPackageItemRequest] = Field(default_factory=list)
|
||
|
||
|
||
class ToolPackageExportRequest(BaseModel):
|
||
"""工具包导出请求体。字段对齐 ``ToolPackageExportInput``。
|
||
|
||
``requester_role`` 由 Router 用 ``current_user.role`` 填充，不暴露给客户端。
|
||
``slugs`` 限制最多 ``_MAX_BATCH_LENGTH`` 个，与 ``BulkExportToolsRequest`` 一致。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
slugs: list[str] = Field(..., min_length=1, max_length=_MAX_BATCH_LENGTH)
|
||
include_system: bool = True
|
||
include_assets: bool = True
|
||
include_secrets: bool = False
|
||
|
||
|
||
class ToolPackageImportPreviewRequest(BaseModel):
|
||
"""工具包导入预览请求体。字段对齐 ``ToolPackageImportPreviewInput``。"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
package: ToolPackageRequest
|
||
|
||
|
||
class ToolPackageImportConfirmRequest(BaseModel):
|
||
"""工具包导入确认请求体。字段对齐 ``ToolPackageImportInput``。
|
||
|
||
``created_by`` 由 Router 用 ``current_user.uid`` 填充，不暴露给客户端。
|
||
``target_system_slug`` 校验 slug 格式，防止非法字符注入。
|
||
"""
|
||
|
||
model_config = ConfigDict(frozen=True)
|
||
|
||
package: ToolPackageRequest
|
||
override_existing: bool = False
|
||
target_system_slug: str | None = Field(default=None, pattern=_SLUG_PATTERN)
|
||
|
||
|
||
# ---------------- Endpoints ----------------
|
||
|
||
|
||
def _build_tool_package(package: ToolPackageRequest) -> ToolPackageInput:
|
||
"""将 Request Schema ``ToolPackageRequest`` 转换为 Input DTO ``ToolPackageInput``。
|
||
|
||
显式构造嵌套 DTO（``ToolPackageItemInput`` / ``ToolOutput`` / ``SystemOutput`` /
|
||
``EnvironmentOutput`` / ``ToolPackageAssetInput``），保持 Router 层 Schema ↔ DTO
|
||
不共享类的边界。
|
||
|
||
``tool``/``system``/``environments`` 使用 ``dict[str, Any]`` 而非显式 Schema，
|
||
结构校验由此处的 Pydantic 构造完成。若 dict 缺失必填字段或类型不匹配，
|
||
Pydantic 抛出 ``ValidationError``，此处捕获并转换为 ``DomainValidationError``
|
||
（400），避免原生异常穿透到 ``unhandled_exception_handler`` 返回 500。
|
||
"""
|
||
try:
|
||
return ToolPackageInput(
|
||
items=[
|
||
ToolPackageItemInput(
|
||
tool=ToolOutput(**item.tool),
|
||
system=SystemOutput(**item.system) if item.system else None,
|
||
environments=[EnvironmentOutput(**env) for env in item.environments],
|
||
assets=[
|
||
ToolPackageAssetInput(
|
||
id=asset.id,
|
||
adapter_type=asset.adapter_type,
|
||
asset_type=asset.asset_type,
|
||
name=asset.name,
|
||
content_b64=asset.content_b64,
|
||
size=asset.size,
|
||
checksum=asset.checksum,
|
||
)
|
||
for asset in item.assets
|
||
],
|
||
)
|
||
for item in package.items
|
||
]
|
||
)
|
||
except ValidationError as exc:
|
||
raise DomainValidationError(
|
||
"工具包数据结构校验失败",
|
||
details={"errors": json.loads(json.dumps(exc.errors(), default=str))},
|
||
) from exc
|
||
|
||
|
||
@import_router.post("/preview", response_model=dict)
|
||
async def preview_import(
|
||
payload: ImportPreviewRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""生成系统级导入草稿（系统 + 工具），不执行持久化。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = ImportPreviewInput(
|
||
adapter_type=payload.adapter_type,
|
||
source_type=payload.source_type,
|
||
payload=payload.payload,
|
||
asset_id=payload.asset_id,
|
||
)
|
||
output = await use_cases.import_service.preview_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
@import_router.post("/confirm", response_model=dict)
|
||
async def confirm_import(
|
||
payload: ImportConfirmRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""基于草稿执行系统级导入持久化。``created_by`` 取自当前管理员。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
draft = SystemImportDraft(
|
||
system=ExternalSystemCreateInput(**payload.draft.system.model_dump()),
|
||
tools=[ExternalToolCreateInput(**tool.model_dump()) for tool in payload.draft.tools],
|
||
)
|
||
input_dto = ImportConfirmInput(draft=draft, created_by=current_user.uid)
|
||
output = await use_cases.import_service.confirm_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
# ---------------- 工具级导入端点 ----------------
|
||
|
||
|
||
@import_router.post("/tools/preview", response_model=dict)
|
||
async def preview_tool_import(
|
||
payload: ToolImportPreviewRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""工具级导入预览：根据适配器类型与源资产生成工具草稿列表（不落库）。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = ToolImportPreviewInput(
|
||
adapter_type=payload.adapter_type,
|
||
source_type=payload.source_type,
|
||
payload=payload.payload,
|
||
)
|
||
output = await use_cases.import_service.preview_tool_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
@import_router.post("/tools/confirm", response_model=dict)
|
||
async def confirm_tool_import(
|
||
payload: ToolImportConfirmRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""工具级导入确认：基于草稿执行工具持久化。``created_by`` 取自当前管理员。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = ToolImportConfirmInput(
|
||
adapter_type=payload.adapter_type,
|
||
source_type=payload.source_type,
|
||
payload=payload.payload,
|
||
drafts=payload.drafts,
|
||
selected_slugs=payload.selected_slugs,
|
||
override_existing=payload.override_existing,
|
||
created_by=current_user.uid,
|
||
)
|
||
output = await use_cases.import_service.confirm_tool_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
# ---------------- 工具导出端点 ----------------
|
||
|
||
|
||
@import_router.get("/tools/export", response_model=dict)
|
||
async def export_tool(
|
||
slug: str = Query(..., min_length=1, max_length=128, pattern=_SLUG_PATTERN),
|
||
include_secrets: bool = Query(False),
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""导出单个工具配置。``requester_role`` 取自当前用户角色。
|
||
|
||
``include_secrets=True`` 时在 Router 层校验 superadmin 权限，
|
||
避免 admin 请求穿透到 use_case 层才被拒绝。
|
||
"""
|
||
_check_secrets_export_permission(include_secrets, current_user)
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = ExportToolInput(
|
||
slug=slug,
|
||
include_secrets=include_secrets,
|
||
requester_role=current_user.role,
|
||
)
|
||
output = await use_cases.import_service.export_tool(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
@import_router.post("/tools/bulk-export", response_model=dict)
|
||
async def bulk_export_tools(
|
||
payload: BulkExportToolsRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""批量导出工具配置。``requester_role`` 取自当前用户角色。
|
||
|
||
``include_secrets=True`` 时在 Router 层校验 superadmin 权限，
|
||
避免 admin 请求穿透到 use_case 层才被拒绝。
|
||
"""
|
||
_check_secrets_export_permission(payload.include_secrets, current_user)
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = BulkExportToolsInput(
|
||
slugs=payload.slugs,
|
||
include_secrets=payload.include_secrets,
|
||
requester_role=current_user.role,
|
||
)
|
||
output = await use_cases.import_service.bulk_export_tools(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
# ---------------- 工具包导入导出端点 ----------------
|
||
|
||
|
||
@import_router.post("/tool-package/export", response_model=dict)
|
||
async def export_tool_package(
|
||
payload: ToolPackageExportRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""导出工具包（含工具 + 系统 + 环境 + 资产）。``requester_role`` 取自当前用户角色。
|
||
|
||
``include_secrets=True`` 时在 Router 层校验 superadmin 权限，
|
||
避免 admin 请求穿透到 use_case 层才被拒绝。
|
||
"""
|
||
_check_secrets_export_permission(payload.include_secrets, current_user)
|
||
use_cases = create_use_cases_from_db(db)
|
||
input_dto = ToolPackageExportInput(
|
||
slugs=payload.slugs,
|
||
include_system=payload.include_system,
|
||
include_assets=payload.include_assets,
|
||
include_secrets=payload.include_secrets,
|
||
requester_role=current_user.role,
|
||
)
|
||
output = await use_cases.import_service.export_tool_package(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
@import_router.post("/tool-package/preview", response_model=dict)
|
||
async def preview_tool_package_import(
|
||
payload: ToolPackageImportPreviewRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""工具包导入预览：检查包中每个 tool/system/asset 是否与已有记录冲突（不落库）。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
package = _build_tool_package(payload.package)
|
||
input_dto = ToolPackageImportPreviewInput(package=package)
|
||
output = await use_cases.import_service.preview_tool_package_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|
||
|
||
|
||
@import_router.post("/tool-package/confirm", response_model=dict)
|
||
async def confirm_tool_package_import(
|
||
payload: ToolPackageImportConfirmRequest,
|
||
db: AsyncSession = Depends(get_db),
|
||
current_user: User = Depends(get_admin_user),
|
||
) -> dict[str, Any]:
|
||
"""工具包导入确认：导入系统、环境、资产、工具，并重映射资产 ID。``created_by`` 取自当前管理员。"""
|
||
use_cases = create_use_cases_from_db(db)
|
||
package = _build_tool_package(payload.package)
|
||
input_dto = ToolPackageImportInput(
|
||
package=package,
|
||
override_existing=payload.override_existing,
|
||
target_system_slug=payload.target_system_slug,
|
||
created_by=current_user.uid,
|
||
)
|
||
output = await use_cases.import_service.confirm_tool_package_import(input_dto)
|
||
return {"success": True, "data": output.model_dump()}
|