AI Gateway Go 0.10.0 源码快照 + 旗舰版需求规划报告

M0-M7 已完成:核心网关(身份/RBAC/TOTP/OIDC/SAML/Provider/配额/路由/内容策略/审计/定价)+ 资源市场(MCP/Skills/数字员工)。含 22 个 PostgreSQL 迁移、管理端/门户端前端源码、OpenAPI 契约、部署 compose。 Co-Authored-By: Claude <noreply@anthropic.com>
2026-08-12 11:45:54 +08:00
commit 5759c1862e
807 changed files with 114727 additions and 0 deletions
@@ -0,0 +1,154 @@
+services:
+  postgres:
+    image: postgres:17-alpine
+    environment:
+      POSTGRES_DB: gateway
+      POSTGRES_USER: gateway
+      POSTGRES_PASSWORD: gateway
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U gateway -d gateway"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  redis-critical:
+    image: redis:8.2-alpine
+    command: ["redis-server", "--appendonly", "yes", "--appendfsync", "everysec", "--maxmemory-policy", "noeviction"]
+    volumes:
+      - redis-critical-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  redis-cache:
+    image: redis:8.2-alpine
+    command: ["redis-server", "--maxmemory", "256mb", "--maxmemory-policy", "allkeys-lfu", "--save", ""]
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  migrator:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        VERSION: ${GATEWAY_VERSION:-0.10.0}
+    entrypoint: ["gateway-migrator"]
+    environment: &gateway-environment
+      APP_ENV: local
+      HTTP_ADDR: :8080
+      DATABASE_URL: postgres://gateway:gateway@postgres:5432/gateway?sslmode=disable
+      REDIS_CRITICAL_URL: redis://redis-critical:6379/0
+      REDIS_CACHE_URL: redis://redis-cache:6379/0
+      GATEWAY_BOOTSTRAP_API_KEY: ${GATEWAY_BOOTSTRAP_API_KEY:-}
+      GATEWAY_BOOTSTRAP_API_KEY_ENABLED: ${GATEWAY_BOOTSTRAP_API_KEY_ENABLED:-false}
+      CREDENTIAL_MASTER_KEY: ${CREDENTIAL_MASTER_KEY:-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=}
+      CREDENTIAL_KEK_VERSION: 1
+      CREDENTIAL_KEK_KEYRING: ${CREDENTIAL_KEK_KEYRING:-}
+      ALLOW_PRIVATE_TOOL_URLS: ${ALLOW_PRIVATE_TOOL_URLS:-false}
+      ALLOW_PRIVATE_WEBHOOK_URLS: ${ALLOW_PRIVATE_WEBHOOK_URLS:-false}
+      UPSTREAM_BASE_URL: ${UPSTREAM_BASE_URL:-https://api.openai.com}
+      UPSTREAM_API_KEY: ${UPSTREAM_API_KEY:-}
+      SHADOW_BASE_URL: ${SHADOW_BASE_URL:-}
+      SHADOW_API_KEY: ${SHADOW_API_KEY:-}
+      SHADOW_SAMPLE_RATE: ${SHADOW_SAMPLE_RATE:-0}
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  gateway-api:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        VERSION: ${GATEWAY_VERSION:-0.10.0}
+    environment: *gateway-environment
+    ports:
+      - "${GATEWAY_PORT:-8080}:8080"
+    depends_on:
+      migrator:
+        condition: service_completed_successfully
+      redis-critical:
+        condition: service_healthy
+      redis-cache:
+        condition: service_healthy
+    restart: unless-stopped
+
+  admin-web:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile.web
+      args:
+        APP: admin
+    ports:
+      - "${ADMIN_PORT:-8081}:80"
+    depends_on:
+      gateway-api:
+        condition: service_started
+    restart: unless-stopped
+
+  portal-web:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile.web
+      args:
+        APP: portal
+    ports:
+      - "${PORTAL_PORT:-8082}:80"
+    depends_on:
+      gateway-api:
+        condition: service_started
+    restart: unless-stopped
+
+  outbox-worker:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        VERSION: ${GATEWAY_VERSION:-0.10.0}
+    entrypoint: ["gateway-outbox-worker"]
+    environment: *gateway-environment
+    depends_on:
+      migrator:
+        condition: service_completed_successfully
+      redis-critical:
+        condition: service_healthy
+    restart: unless-stopped
+
+  maintenance-worker:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        VERSION: ${GATEWAY_VERSION:-0.10.0}
+    entrypoint: ["gateway-maintenance"]
+    environment: *gateway-environment
+    depends_on:
+      migrator:
+        condition: service_completed_successfully
+    restart: unless-stopped
+
+  notification-worker:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        VERSION: ${GATEWAY_VERSION:-0.10.0}
+    entrypoint: ["gateway-notification-worker"]
+    environment: *gateway-environment
+    depends_on:
+      migrator:
+        condition: service_completed_successfully
+      redis-critical:
+        condition: service_healthy
+    restart: unless-stopped
+
+volumes:
+  postgres-data:
+  redis-critical-data: