feat: M1 — 立项→写章草稿(SSE)→自动保存；连一家 provider

- 薄自建 LLM 网关：OpenAI 兼容适配器(DeepSeek) + instructor 结构化输出 + usage_ledger 记账 + 档位路由 - 记忆服务 assemble：确定性选择(显式+主角+近况) + 渲染卡 + 缓存断点(中性文本) - LangGraph 写章节点 + Postgres checkpointer + SSE 归一(token/done/error) - API：立项 + 写章 draft(SSE) + PUT 自动保存 + 提供商凭据(Fernet 加密/测试连接) - 前端：AppShell + 作品库 + 5 步立项向导 + 写作工作台(流式打字机+自动保存) + 设置页 - M1 E2E：真实 DB + mock 网关零 token 走通闭环
2026-06-18 11:38:28 +02:00
parent d3dc620a71
commit b523b4fd21
70 changed files with 6642 additions and 0 deletions
--- a/apps/api/ww_api/services/credentials.py
+++ b/apps/api/ww_api/services/credentials.py
@@ -0,0 +1,149 @@
+"""凭据存储与提供商探测的接口 + SQLAlchemy/网关实现（ARCH §4.7）。
+
+路由依赖这里的 **接口**（Protocol），测试注入内存替身；运行时用 SQLAlchemy/网关实现。
+单用户原型：`owner_id` 用固定 stub（见 `STUB_OWNER_ID`），多租户化时改为按认证主体取。
+"""
+
+from __future__ import annotations
+
+import uuid
+from dataclasses import dataclass
+from typing import Protocol
+
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+from ww_db.models import ProviderCredential, TierRouting
+from ww_llm_gateway.adapters.base import Capabilities
+
+# 单用户 stub owner（与网关 Scope.user_id 的 stub 约定一致：UUID(int=1)）。
+# 多租户化时此常量由认证主体替换（见 ARCH §4.7 隔离）。
+STUB_OWNER_ID = uuid.UUID(int=1)
+
+
+@dataclass(frozen=True)
+class StoredCredential:
+    """存储层视图：含密文，绝不出 API 边界（路由仅取 provider 并掩码）。"""
+
+    provider: str
+    api_key_enc: bytes
+
+
+@dataclass(frozen=True)
+class StoredRouting:
+    tier: str
+    provider: str
+    model: str
+    fallback: list[str]
+
+
+class CredentialStore(Protocol):
+    """凭据 + 档位路由的读写接口（按 owner_id 隔离）。"""
+
+    async def list_credentials(self, owner_id: uuid.UUID) -> list[StoredCredential]: ...
+
+    async def list_routing(self) -> list[StoredRouting]: ...
+
+    async def get_credential(
+        self, owner_id: uuid.UUID, provider: str
+    ) -> StoredCredential | None: ...
+
+    async def upsert_credential(
+        self, owner_id: uuid.UUID, provider: str, api_key_enc: bytes
+    ) -> None: ...
+
+    async def upsert_routing(self, routing: StoredRouting) -> None: ...
+
+
+class ProviderProbe(Protocol):
+    """最小连通探测：验证 Key + 返回能力矩阵。测试注入假探测，绝不联网。"""
+
+    async def probe(self, owner_id: uuid.UUID, provider: str) -> Capabilities: ...
+
+
+class SqlCredentialStore:
+    """SQLAlchemy 实现：写 `provider_credentials` / `tier_routing`，幂等 upsert。"""
+
+    def __init__(self, session: AsyncSession) -> None:
+        self._session = session
+
+    async def list_credentials(self, owner_id: uuid.UUID) -> list[StoredCredential]:
+        rows = (
+            await self._session.execute(
+                select(ProviderCredential).where(ProviderCredential.owner_id == owner_id)
+            )
+        ).scalars()
+        return [StoredCredential(provider=r.provider, api_key_enc=r.api_key_enc) for r in rows]
+
+    async def list_routing(self) -> list[StoredRouting]:
+        rows = (await self._session.execute(select(TierRouting))).scalars()
+        return [
+            StoredRouting(
+                tier=r.tier, provider=r.provider, model=r.model, fallback=list(r.fallback)
+            )
+            for r in rows
+        ]
+
+    async def get_credential(self, owner_id: uuid.UUID, provider: str) -> StoredCredential | None:
+        row = (
+            await self._session.execute(
+                select(ProviderCredential).where(
+                    ProviderCredential.owner_id == owner_id,
+                    ProviderCredential.provider == provider,
+                )
+            )
+        ).scalar_one_or_none()
+        if row is None:
+            return None
+        return StoredCredential(provider=row.provider, api_key_enc=row.api_key_enc)
+
+    async def upsert_credential(
+        self, owner_id: uuid.UUID, provider: str, api_key_enc: bytes
+    ) -> None:
+        # 显式 read-modify-write：唯一约束含可空 project_id，PG ON CONFLICT
+        # 在 NULL 上不去重（NULLS DISTINCT），故不用 on_conflict。
+        existing = (
+            await self._session.execute(
+                select(ProviderCredential).where(
+                    ProviderCredential.owner_id == owner_id,
+                    ProviderCredential.project_id.is_(None),
+                    ProviderCredential.provider == provider,
+                )
+            )
+        ).scalar_one_or_none()
+        if existing is None:
+            self._session.add(
+                ProviderCredential(
+                    owner_id=owner_id,
+                    project_id=None,
+                    provider=provider,
+                    api_key_enc=api_key_enc,
+                )
+            )
+        else:
+            existing.api_key_enc = api_key_enc
+        await self._session.commit()
+
+    async def upsert_routing(self, routing: StoredRouting) -> None:
+        existing = (
+            await self._session.execute(
+                select(TierRouting).where(
+                    TierRouting.project_id.is_(None),
+                    TierRouting.tier == routing.tier,
+                )
+            )
+        ).scalar_one_or_none()
+        if existing is None:
+            self._session.add(
+                TierRouting(
+                    project_id=None,
+                    tier=routing.tier,
+                    provider=routing.provider,
+                    model=routing.model,
+                    fallback=routing.fallback,
+                )
+            )
+        else:
+            existing.provider = routing.provider
+            existing.model = routing.model
+            existing.fallback = routing.fallback
+        await self._session.commit()