zhaoxi
6f1bc27101
1. 人设外键重构：persona_template 成为 system_prompt 唯一权威来源， agent/系统节点通过 persona_id FK 引用，含数据迁移脚本 2. Chat UI：去掉底部AI提示、加号改为弹出菜单、新建对话乐观跳转 3. 意识节点：无可用worker时禁止编造agent_id，只能自行完成或拒绝 4. 日志页面：双tab布局（系统日志 + 工作流日志列表选择） 5. 其他：SSE流式聊天、对话删除/重命名、standalone模式修复 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
126 lines
4.9 KiB
Python
126 lines
4.9 KiB
Python
# Copyright 2026 zhaoxi826
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from typing import List
|
|
|
|
from kilostar.core.postgres_database.model.provider import ProviderModel
|
|
from sqlalchemy import select
|
|
from kilostar.core.postgres_database.database_exception import database_exception
|
|
from kilostar.utils.crypto import (
|
|
CryptoError,
|
|
decrypt_secret,
|
|
encrypt_secret,
|
|
is_encrypted,
|
|
)
|
|
from kilostar.utils.logger import get_logger
|
|
|
|
logger = get_logger("provider_dao")
|
|
|
|
|
|
def _decrypt_apikey(value):
|
|
if not value:
|
|
return value
|
|
if not is_encrypted(value):
|
|
return value
|
|
try:
|
|
return decrypt_secret(value)
|
|
except CryptoError as e:
|
|
logger.error(f"Provider apikey 解密失败: {e}")
|
|
return value
|
|
|
|
|
|
def _encrypt_apikey(value):
|
|
if not value or is_encrypted(value):
|
|
return value
|
|
return encrypt_secret(value)
|
|
|
|
|
|
class ProviderDatabase:
|
|
"""Provider 表的 DAO：模型 Provider 的增删查改；``provider_apikey`` 透明 Fernet 加解密。"""
|
|
|
|
def __init__(self, async_session_maker):
|
|
self.async_session_maker = async_session_maker
|
|
|
|
@database_exception
|
|
async def get_provider(self) -> List[ProviderModel]:
|
|
"""返回全部 Provider，并将每行重新构造为新的 ``ProviderModel`` 实例（脱离 session）。"""
|
|
async with self.async_session_maker() as session:
|
|
statement = select(ProviderModel)
|
|
results = await session.execute(statement)
|
|
results = results.scalars().all()
|
|
providers = [
|
|
ProviderModel(
|
|
provider_id=provider.provider_id,
|
|
provider_title=provider.provider_title,
|
|
provider_url=provider.provider_url,
|
|
provider_apikey=_decrypt_apikey(provider.provider_apikey),
|
|
provider_models=provider.provider_models,
|
|
provider_type=provider.provider_type,
|
|
provider_owner=provider.provider_owner,
|
|
is_active=provider.is_active,
|
|
)
|
|
for provider in results
|
|
]
|
|
return providers
|
|
|
|
@database_exception
|
|
async def add_provider(self, **kwargs) -> None:
|
|
"""新建一条 Provider 记录；``provider_apikey`` 写入前自动加密。"""
|
|
if "provider_apikey" in kwargs:
|
|
kwargs["provider_apikey"] = _encrypt_apikey(kwargs["provider_apikey"])
|
|
async with self.async_session_maker() as session:
|
|
provider = ProviderModel(**kwargs)
|
|
session.add(provider)
|
|
await session.commit()
|
|
|
|
@database_exception
|
|
async def delete_provider(self, provider_id: str) -> None:
|
|
"""删除指定 ID 的 Provider；不存在时静默返回。"""
|
|
async with self.async_session_maker() as session:
|
|
provider = await session.get(ProviderModel, provider_id)
|
|
if provider is not None:
|
|
session.delete(provider)
|
|
await session.commit()
|
|
|
|
@database_exception
|
|
async def delete_provider_by_title(self, provider_title: str) -> None:
|
|
"""按 provider_title 删除 Provider；不存在时静默返回。"""
|
|
async with self.async_session_maker() as session:
|
|
statement = select(ProviderModel).where(
|
|
ProviderModel.provider_title == provider_title
|
|
)
|
|
result = await session.execute(statement)
|
|
provider = result.scalar_one_or_none()
|
|
if provider is not None:
|
|
await session.delete(provider)
|
|
await session.commit()
|
|
|
|
@database_exception
|
|
async def update_provider(self, provider_id: str, **kwargs) -> None:
|
|
"""部分更新指定 Provider 的字段；``provider_apikey`` 写入前自动加密。"""
|
|
if "provider_apikey" in kwargs:
|
|
kwargs["provider_apikey"] = _encrypt_apikey(kwargs["provider_apikey"])
|
|
async with self.async_session_maker() as session:
|
|
provider = await session.get(ProviderModel, provider_id)
|
|
if provider is not None:
|
|
for key, value in kwargs.items():
|
|
setattr(provider, key, value)
|
|
session.add(provider)
|
|
await session.commit()
|
|
await session.refresh(provider)
|
|
# 解密返回，方便上游使用
|
|
provider.provider_apikey = _decrypt_apikey(provider.provider_apikey)
|
|
return provider
|
|
return None
|