feat: 核心模块增强 — 加密 + 运行时配置 + 日志缓冲

- crypto.py: API Key 加密/解密工具
- runtime_config.py: 运行时动态配置管理
- log_buffer.py: 内存日志缓冲区
- config.py: 新增加密配置项
- http_client.py: 增强重试和错误处理

frontend/src/admin/dal.ts

@@ -15,6 +15,11 @@ import type {
   Match,
   Prediction,
   EvalSummary,
+  DataSourceStatus,
+  DataSourceSetting,
+  DataSourceTestResult,
+  LLMAgentConfig,
+  LogEntry,
 } from './types'
 
 // ── 仪表盘 ──────────────────────────────────────────────────────
@@ -53,7 +58,7 @@ export async function triggerCollection(req: CollectionRequest): Promise<any> {
         leagues: req.leagues,
         date_from: req.date_from,
         date_to: req.date_to,
-        status: 'finished',
+        status: req.status || undefined,  // 空 = 已完赛 + 未开赛都采集
       },
     },
     understat: {
@@ -78,10 +83,14 @@ export async function triggerCollection(req: CollectionRequest): Promise<any> {
 // ── 预测管理 ────────────────────────────────────────────────────
 
 export async function triggerPrediction(req: { match_id: number; mode?: string }): Promise<any> {
-  return api.post(`${API_BASE}/predict`, {
-    match_id: req.match_id,
-    mode: req.mode || 'multi',
-  })
+  return api.post(
+    `${API_BASE}/predict`,
+    {
+      match_id: req.match_id,
+      mode: req.mode || 'multi',
+    },
+    { timeoutMs: 300_000 },
+  )
 }
 
 export async function fetchPredictions(limit = 50): Promise<any[]> {
@@ -100,7 +109,7 @@ export async function fetchEvalSummary(): Promise<EvalSummary | null> {
 }
 
 export async function triggerBacktest(req: BacktestRequest): Promise<BacktestSummary> {
-  return api.post<BacktestSummary>(`${API_BASE}/backtest`, req)
+  return api.post<BacktestSummary>(`${API_BASE}/backtest`, req, { timeoutMs: 300_000 })
 }
 
 // ── 辅助数据 ────────────────────────────────────────────────────
@@ -153,29 +162,63 @@ export async function fetchHealth(): Promise<any> {
 // ── 数据源管理 ──────────────────────────────────────────────────
 
 /**
- * 测试数据源连接 — 调用采集 API 验证连通性
+ * 测试数据源连通性 — 后端真实请求上游一次,不触发入库
  */
-export async function testDataSource(source: 'bzzoiro' | 'understat' | 'injuries'): Promise<any> {
-  const sourceMap: Record<string, { path: string; body: any }> = {
-    bzzoiro: { path: `${API_BASE}/ingest/bzzoiro`, body: { leagues: [], date_from: '', date_to: '', status: 'finished' } },
-    understat: { path: `${API_BASE}/ingest/understat`, body: { league: 'EPL', season: new Date().getFullYear() } },
-    injuries: { path: `${API_BASE}/ingest/injuries`, body: { date: new Date().toISOString().slice(0, 10) } },
-  }
-  const cfg = sourceMap[source]
-  if (!cfg) throw new Error(`未知数据源: ${source}`)
-  return api.post(cfg.path, cfg.body)
+export function testDataSourceConnection(name: string): Promise<DataSourceTestResult> {
+  return api.post<DataSourceTestResult>(`${API_BASE}/admin/datasources/${name}/test`)
 }
 
 /**
- * 获取数据源状态 — 后端暂无专用端点,返回模拟状态
+ * 获取数据源状态与配置(脱敏)
  */
-export async function fetchDataSourceStatuses(): Promise<any[]> {
-  // 后端暂无专用配置端点,返回静态信息
-  return [
-    { name: 'bzzoiro', label: 'Bzzoiro', keyConfigured: true, maskedKey: 'bz***xxx', lastIngestion: null, status: 'configured' },
-    { name: 'understat', label: 'Understat', keyConfigured: true, maskedKey: '无需 Key', lastIngestion: null, status: 'configured' },
-    { name: 'injuries', label: 'Injuries', keyConfigured: true, maskedKey: 'inj***xxx', lastIngestion: null, status: 'configured' },
-  ]
+export function fetchDataSourceStatuses(): Promise<DataSourceStatus[]> {
+  return api.get<DataSourceStatus[]>(`${API_BASE}/admin/datasources`)
+}
+
+/**
+ * 探测当前 LLM 服务可用模型(只读,不产生费用)
+ */
+export function fetchLLMModels(): Promise<{ ok: boolean; models: string[]; latency_ms?: number; detail: string }> {
+  return api.get(`${API_BASE}/admin/llm/models`)
+}
+
+/**
+ * 各专家/终裁的独立 LLM 配置状态
+ */
+export function fetchLLMAgents(): Promise<LLMAgentConfig[]> {
+  return api.get<LLMAgentConfig[]>(`${API_BASE}/admin/llm/agents`)
+}
+
+/**
+ * 查询系统日志(内存缓冲,最新在前)
+ */
+export function fetchLogs(params: { level?: string; keyword?: string; limit?: number } = {}): Promise<{ entries: LogEntry[]; count: number }> {
+  const sp = new URLSearchParams()
+  if (params.level) sp.set('level', params.level)
+  if (params.keyword) sp.set('keyword', params.keyword)
+  if (params.limit) sp.set('limit', String(params.limit))
+  return api.get<{ entries: LogEntry[]; count: number }>(`${API_BASE}/admin/logs?${sp}`)
+}
+
+/**
+ * 全部可配置项(脱敏),供各配置页渲染
+ */
+export function fetchSettings(): Promise<DataSourceSetting[]> {
+  return api.get<DataSourceSetting[]>(`${API_BASE}/admin/settings`)
+}
+
+/**
+ * 更新配置项(写入 app_settings,覆盖 .env,立即生效)
+ */
+export function updateSetting(key: string, value: string) {
+  return api.put<{ key: string; masked: string; origin: string }>(`${API_BASE}/admin/settings/${key}`, { value })
+}
+
+/**
+ * 清除配置项的 DB 覆盖值,回落 .env
+ */
+export function clearSetting(key: string) {
+  return api.delete<{ key: string; masked: string; origin: string }>(`${API_BASE}/admin/settings/${key}`)
 }
 
 // ── LLM 配置 ────────────────────────────────────────────────────
@@ -184,10 +227,14 @@ export async function fetchDataSourceStatuses(): Promise<any[]> {
  * 测试 LLM 连接 — 调用预测端点验证
  */
 export async function testLLMConnection(matchId?: number): Promise<any> {
-  return api.post(`${API_BASE}/predict`, {
-    match_id: matchId || 1,
-    mode: 'single',
-  })
+  return api.post(
+    `${API_BASE}/predict`,
+    {
+      match_id: matchId || 1,
+      mode: 'single',
+    },
+    { timeoutMs: 300_000 },
+  )
 }
 
 /**
@@ -231,7 +278,9 @@ export async function fetchSystemConfig(): Promise<any[]> {
     { key: 'LLM_MODEL', value_masked: 'gpt-4o', description: 'LLM 模型', is_sensitive: false },
     { key: 'LLM_BASE_URL', value_masked: 'https://api.openai.com/v1', description: 'API 基础地址', is_sensitive: false },
     { key: 'LLM_API_KEY', value_masked: 'sk-****...****', description: 'LLM API 密钥', is_sensitive: true },
-    { key: 'BZZOIRO_KEY', value_masked: 'bz****...****', description: 'Bzzoiro 数据源密钥', is_sensitive: true },
+    { key: 'ADMIN_PASSWORD', value_masked: '••••••(已配置)', description: '管理后台登录密码', is_sensitive: true },
+    { key: 'ADMIN_API_KEY', value_masked: '未配置时脚本调用不可用', description: '接口鉴权密钥 (X-API-Key)', is_sensitive: true },
+    { key: 'BZZOIRO_KEY', value_masked: 'bz****...****', description: 'Bzzoiro 数据源密钥(可在「数据源」页在线配置)', is_sensitive: true },
     { key: 'DATABASE_URL', value_masked: 'postgresql://****@localhost/profeto', description: '数据库连接', is_sensitive: true },
     { key: 'LOG_LEVEL', value_masked: 'INFO', description: '日志级别', is_sensitive: false },
   ]