feat(system):优化后端

1.新增后端测试
2.增加了后端的加密
3.增加了i18n（国际化）

kilostar/api/workflow.py

@@ -119,3 +119,89 @@ async def get_workflow_detail(
         "steps": steps,
         "context_blackboard": context.blackboard if context else {},
     }
+
+
+@workflow_router.post("/{trace_id}/resume")
+async def resume_workflow(
+    trace_id: str,
+    token_data: TokenData = Depends(Accessor.get_current_user),
+):
+    """从 ``workflow_graph_state`` 持久化恢复一个被中断/挂起的工作流。
+
+    新 fire 一个 ray task，task 入口的 ``hydrate`` 检查会自动走 resume 路径
+    把剩余节点跑完。
+    """
+    postgres_database = ray_actor_hook("postgres_database").postgres_database
+    wf = await postgres_database.get_workflow.remote(trace_id)
+    if not wf:
+        raise HTTPException(status_code=404, detail="Workflow not found")
+    if getattr(wf, "user_id", None) != token_data.user_id:
+        raise HTTPException(status_code=403, detail="Forbidden")
+
+    record = await postgres_database.get_workflow_graph_state.remote(trace_id)
+    if record is None:
+        raise HTTPException(
+            status_code=409, detail="该工作流没有可恢复的图持久化记录"
+        )
+
+    global_workflow_manager = ray_actor_hook(
+        "global_workflow_manager"
+    ).global_workflow_manager
+    await global_workflow_manager.create_trace.remote(trace_id)
+
+    from kilostar.core.work.workflow.workflow_engine import run_workflow_task
+
+    # workflow_data 在 resume 路径上不会被使用（hydrate 会走 resume 分支），
+    # 这里给个空 dict 占位即可
+    run_workflow_task.remote({}, trace_id)
+    return {"trace_id": trace_id, "status": "resuming"}
+
+
+@workflow_router.get("/{trace_id}/graph")
+async def get_workflow_graph_mermaid(
+    trace_id: str,
+    token_data: TokenData = Depends(Accessor.get_current_user),
+):
+    """返回当前 workflow 引擎的 mermaid 图源码（节点拓扑）。
+
+    拓扑本身对所有 trace 是同一份；但如果该 trace 已经有 ``workflow_graph_state``
+    持久化记录，会读出 history 里"已经成功跑过的节点"作为 ``highlighted_nodes``
+    传给 mermaid，前端拿到的 mermaid 源码会自带 visited 节点高亮。
+    """
+    from kilostar.core.work.workflow.workflow_engine import workflow_graph
+
+    postgres_database = ray_actor_hook("postgres_database").postgres_database
+    wf = await postgres_database.get_workflow.remote(trace_id)
+    if not wf:
+        raise HTTPException(status_code=404, detail="Workflow not found")
+    if getattr(wf, "user_id", None) != token_data.user_id:
+        raise HTTPException(status_code=403, detail="Forbidden")
+
+    visited: list[str] = []
+    record = await postgres_database.get_workflow_graph_state.remote(trace_id)
+    if record is not None:
+        history = getattr(record, "history", None) or []
+        # history 里每条 NodeSnapshot.id 形如 "ClassName:hash"，截前缀作为 NodeIdent
+        # 只取 status == "success" 的节点（避免 "created" / "running" 带噪声）
+        seen: set[str] = set()
+        for entry in history:
+            if not isinstance(entry, dict):
+                continue
+            if entry.get("kind") != "node":
+                continue
+            if entry.get("status") != "success":
+                continue
+            sid = entry.get("id") or ""
+            cls_name = sid.split(":", 1)[0] if sid else ""
+            if cls_name and cls_name not in seen:
+                seen.add(cls_name)
+                visited.append(cls_name)
+
+    try:
+        if visited:
+            mermaid = workflow_graph.mermaid_code(highlighted_nodes=visited)
+        else:
+            mermaid = workflow_graph.mermaid_code()
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"mermaid 生成失败: {e}")
+    return {"trace_id": trace_id, "mermaid": mermaid, "visited": visited}