Initial MVP for QA asset backend

hy_qa_asset_backend/backend/app/api/settings.py

@@ -0,0 +1,51 @@
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+
+from app import models, schemas
+from app.config import get_settings
+from app.database import get_db
+
+router = APIRouter(prefix="/settings", tags=["settings"])
+
+SENSITIVE_MARKERS = {"secret", "token", "key", "password", "api_key"}
+
+
+@router.get("", response_model=schemas.SafeSettingsRead)
+def read_settings(db: Session = Depends(get_db)) -> schemas.SafeSettingsRead:
+    settings = get_settings()
+    rows = db.query(models.SystemSetting).order_by(models.SystemSetting.key.asc()).all()
+    driver = settings.resolved_database_url.split(":", 1)[0]
+    return schemas.SafeSettingsRead(
+        feishu_configured=settings.feishu_configured,
+        openai_configured=settings.openai_configured,
+        model_name=settings.model_name,
+        schedule_cron=settings.schedule_cron,
+        schedule_timezone=settings.schedule_timezone,
+        mock_mode=settings.mock_mode or not settings.feishu_configured,
+        database_url=f"{driver}://***",
+        feishu_tables_configured={
+            "session": bool(settings.feishu_table_id_session),
+            "raw_qa": bool(settings.feishu_table_id_raw_qa),
+            "standard_qa": bool(settings.feishu_table_id_standard_qa),
+        },
+        system_settings=[
+            {"key": row.key, "value": row.value, "description": row.description, "updated_at": row.updated_at}
+            for row in rows
+        ],
+    )
+
+
+@router.patch("", response_model=schemas.SafeSettingsRead)
+def patch_settings(payload: schemas.SettingsPatch, db: Session = Depends(get_db)) -> schemas.SafeSettingsRead:
+    for key, value in payload.settings.items():
+        lower = key.lower()
+        if any(marker in lower for marker in SENSITIVE_MARKERS):
+            raise HTTPException(status_code=400, detail="敏感密钥不能写入 system_settings，请使用 .env")
+        row = db.query(models.SystemSetting).filter(models.SystemSetting.key == key).first()
+        if row:
+            row.value = value
+        else:
+            db.add(models.SystemSetting(key=key, value=value, description="后台页面写入的非敏感配置"))
+    db.commit()
+    return read_settings(db)
+