Files
CLICD/frontend/src/pages/ApiIntegration.tsx
T
MengMengCode 84d98e40c6 FIX #16
2026-06-17 21:06:58 +08:00

1273 lines
53 KiB
TypeScript

import { useCallback, useEffect, useMemo, useState } from 'react'
import {
Check,
ChevronDown,
ChevronUp,
Copy,
Edit3,
Eye,
Key,
Plus,
RefreshCw,
ShieldCheck,
Trash2,
X,
} from 'lucide-react'
import api, { APIResponse, Container } from '../services/api'
import { useLanguage } from '../contexts/LanguageContext'
import { copyToClipboard } from '../utils/clipboard'
interface ApiKeyItem {
id: string
name: string
key?: string
prefix: string
ip_whitelist: string
created_at: string
last_used: string
scopes?: string[]
expires_at?: string
disabled?: boolean
container_uuids?: string[]
last_used_ip?: string
}
interface ApiKeyForm {
name: string
ipWhitelist: string
scopes: string[]
expiresAt: string
disabled: boolean
containerUUIDs: string[]
}
const BASE_URL = window.location.origin
const SAMPLE_BASE_URL = 'https://panel.example.com'
type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'
type EndpointTuple = [HttpMethod, string, string]
interface EndpointDoc {
method: HttpMethod
path: string
desc: string
examplePath: string
body?: Record<string, unknown>
response: unknown
note?: string
}
const scopeGroups = [
{
title: '总览与只读',
scopes: [
['dashboard:read', '控制面板'],
['host:read', '主机资源'],
['routing:read', '路由信息'],
['routing:write', '路由配置'],
['ipv6:read', 'IPv6 状态'],
['task:read', '任务列表'],
['task:delete', '删除任务'],
['image:read', '镜像列表'],
],
},
{
title: '容器',
scopes: [
['container:read', '查看容器'],
['container:create', '创建容器'],
['container:power', '开关机/重启'],
['container:reinstall', '重装系统'],
['container:delete', '删除容器'],
['container:resize', '资源/到期'],
['container:traffic', '流量管理'],
['container:network', '端口映射'],
['container:password', '重置密码'],
['ipv6:assign', '分配 IPv6'],
],
},
{
title: '快照与终端',
scopes: [
['snapshot:read', '查看快照'],
['snapshot:create', '创建快照'],
['snapshot:delete', '删除快照'],
['snapshot:restore', '恢复快照'],
['snapshot:schedule', '计划/配额'],
['terminal:ssh', 'WebSSH 票据'],
['terminal:vnc', 'WebVNC 票据'],
],
},
{
title: '平台管理',
scopes: [
['image:download', '下载镜像'],
['image:delete', '删除镜像'],
['image:toggle', '启停镜像'],
['security:read', '安全数据'],
['security:check', '安全扫描'],
['security:settings', '安全设置'],
['swap:read', 'Swap 信息'],
['swap:manage', 'Swap 管理'],
['subuser:read', '子用户列表'],
['subuser:create', '创建子用户'],
['subuser:update', '更新子用户'],
['audit:read', '操作日志'],
['loginlog:read', '登录日志'],
['apikey:read', 'Key 列表'],
['apikey:create', '创建 Key'],
['apikey:update', '更新 Key'],
['apikey:delete', '删除 Key'],
['admin:access', '管理员接口'],
],
},
]
const defaultReadScopes = [
'dashboard:read',
'container:read',
'task:read',
'image:read',
'snapshot:read',
'routing:read',
'ipv6:read',
'host:read',
]
const endpointGroups: Array<{ title: string; endpoints: EndpointTuple[] }> = [
{
title: '总览',
endpoints: [
['GET', '/api/v1/dashboard', '控制面板统计'],
['GET', '/api/v1/host-info', '主机资源'],
['GET', '/api/v1/routing', 'NAT/IPv4/IPv6 路由'],
['PUT', '/api/v1/routing', '更新公网 IPv4/IPv6 池'],
['POST', '/api/v1/routing/ipv4-scan', '扫描公网 IPv4 段'],
['GET', '/api/v1/ipv6/status', 'IPv6 状态'],
['GET', '/api/v1/tasks', '任务队列'],
['DELETE', '/api/v1/tasks/{task_id}', '删除任务'],
],
},
{
title: '容器',
endpoints: [
['GET', '/api/v1/containers', '容器列表'],
['POST', '/api/v1/containers/list', '容器列表(兼容 POST 写法)'],
['POST', '/api/v1/containers', '创建容器'],
['GET', '/api/v1/containers/{id|uuid|name}', '容器详情'],
['POST', '/api/v1/containers/{id}/start', '开机'],
['POST', '/api/v1/containers/{id}/stop', '关机'],
['POST', '/api/v1/containers/{id}/restart', '重启'],
['POST', '/api/v1/containers/{id}/reinstall', '重装'],
['DELETE', '/api/v1/containers/{id}/delete', '删除'],
['GET', '/api/v1/containers/{id}/usage', '资源用量'],
['GET', '/api/v1/containers/{id}/traffic', '流量统计'],
['POST', '/api/v1/containers/{id}/traffic-reset', '重置流量'],
['PUT', '/api/v1/containers/{id}/traffic-limit', '调整流量限制'],
['PUT', '/api/v1/containers/{id}/resource-limit', '调整资源限制'],
['PUT', '/api/v1/containers/{id}/expiry', '调整到期时间'],
['POST', '/api/v1/containers/{id}/reset-password', '重置 SSH 密码'],
['POST', '/api/v1/containers/{id}/ipv6', '分配 IPv6'],
],
},
{
title: '端口与快照',
endpoints: [
['GET', '/api/v1/containers/{id}/random-port', '随机可用端口'],
['POST', '/api/v1/containers/{id}/port-mappings', '添加端口映射'],
['PUT', '/api/v1/containers/{id}/port-mappings/{index}', '更新端口映射'],
['DELETE', '/api/v1/containers/{id}/port-mappings/{index}', '删除端口映射'],
['GET', '/api/v1/containers/{id}/firewall', '获取防火墙设置'],
['PUT', '/api/v1/containers/{id}/firewall', '更新防火墙设置'],
['GET', '/api/v1/snapshots', '快照总览'],
['GET', '/api/v1/containers/{id}/snapshots', '容器快照'],
['POST', '/api/v1/containers/{id}/snapshots', '创建快照'],
['DELETE', '/api/v1/containers/{id}/snapshots/{snapshot_id}', '删除快照'],
['POST', '/api/v1/containers/{id}/snapshots/{snapshot_id}/restore', '恢复快照'],
['POST', '/api/v1/containers/{id}/snapshots/schedule', '计划快照'],
['PUT', '/api/v1/containers/{id}/snapshots/quota', '快照配额'],
],
},
{
title: '平台管理',
endpoints: [
['GET', '/api/v1/templates', '模板列表'],
['GET', '/api/v1/images', '镜像管理列表'],
['POST', '/api/v1/images/download', '下载镜像'],
['POST', '/api/v1/images/cancel', '取消镜像下载'],
['DELETE', '/api/v1/images/delete', '删除镜像缓存'],
['PUT', '/api/v1/images/toggle', '启用/禁用镜像'],
['GET', '/api/v1/security/alerts', '安全告警'],
['POST', '/api/v1/security/check', '立即安全检查'],
['GET', '/api/v1/security/logs?container={name}', '安全连接日志'],
['GET', '/api/v1/security/summary', '安全汇总'],
['GET', '/api/v1/security/settings', '安全设置'],
['PUT', '/api/v1/security/settings', '更新安全设置'],
['GET', '/api/v1/swap', 'Swap 信息'],
['POST', '/api/v1/swap', '调整 Swap'],
['POST', '/api/v1/batch-create', '批量创建容器'],
['POST', '/api/v1/batch-action', '批量开关机/删除/重装'],
['POST', '/api/v1/ssh-ticket', '创建 WebSSH 票据'],
['POST', '/api/v1/vnc-ticket', '创建 WebVNC 票据'],
],
},
{
title: '账号与日志',
endpoints: [
['POST', '/api/v1/sub-user/create', '创建子用户链接'],
['GET', '/api/v1/sub-users', '子用户列表'],
['POST', '/api/v1/sub-users/{id}/rotate-password', '轮换子用户密码'],
['GET', '/api/v1/sub-users/{id}/audit-logs', '子用户操作日志'],
['GET', '/api/v1/sub-users/{id}/login-logs', '子用户登录日志'],
['GET', '/api/v1/audit-logs', '操作日志'],
['GET', '/api/v1/login-logs', '登录日志'],
['GET', '/api/v1/api-keys', 'API Key 列表'],
['POST', '/api/v1/api-keys', '创建 API Key'],
['PATCH', '/api/v1/api-keys/{id}', '更新 API Key'],
['DELETE', '/api/v1/api-keys/{id}', '删除 API Key'],
],
},
]
const emptyForm = (): ApiKeyForm => ({
name: '',
ipWhitelist: '',
scopes: [...defaultReadScopes],
expiresAt: '',
disabled: false,
containerUUIDs: [],
})
export default function ApiIntegration() {
const { t } = useLanguage()
const [keys, setKeys] = useState<ApiKeyItem[]>([])
const [containers, setContainers] = useState<Container[]>([])
const [loading, setLoading] = useState(true)
const [showForm, setShowForm] = useState(false)
const [editingKey, setEditingKey] = useState<ApiKeyItem | null>(null)
const [form, setForm] = useState<ApiKeyForm>(emptyForm)
const [saving, setSaving] = useState(false)
const [newKey, setNewKey] = useState('')
const [copiedKey, setCopiedKey] = useState(false)
const [showDocs, setShowDocs] = useState(true)
const [selectedEndpoint, setSelectedEndpoint] = useState<EndpointDoc | null>(null)
const [copiedDoc, setCopiedDoc] = useState(false)
const containerNameByUUID = useMemo(() => {
const map = new Map<string, string>()
containers.forEach(c => map.set(c.uuid, c.name))
return map
}, [containers])
const fetchData = useCallback(async () => {
setLoading(true)
try {
const [keyRes, containerRes] = await Promise.all([
api.get<APIResponse<ApiKeyItem[]>>('/api-keys'),
api.get<APIResponse<Container[]>>('/containers'),
])
setKeys(keyRes.data.data || [])
setContainers(containerRes.data.data || [])
} catch {
// keep the page usable if one request fails
} finally {
setLoading(false)
}
}, [])
useEffect(() => {
fetchData()
}, [fetchData])
const openCreate = () => {
setEditingKey(null)
setForm(emptyForm())
setShowForm(true)
}
const openEdit = (item: ApiKeyItem) => {
setEditingKey(item)
setForm({
name: item.name,
ipWhitelist: item.ip_whitelist || '',
scopes: item.scopes?.length ? item.scopes : ['*'],
expiresAt: toDateTimeLocal(item.expires_at || ''),
disabled: Boolean(item.disabled),
containerUUIDs: item.container_uuids || [],
})
setShowForm(true)
}
const saveKey = async () => {
if (!form.name.trim()) return
setSaving(true)
const payload = {
name: form.name.trim(),
ip_whitelist: form.ipWhitelist.trim(),
scopes: form.scopes,
expires_at: fromDateTimeLocal(form.expiresAt),
disabled: form.disabled,
container_uuids: form.containerUUIDs,
}
try {
if (editingKey) {
const res = await api.patch<APIResponse<ApiKeyItem>>(`/api-keys/${editingKey.id}`, payload)
if (res.data.data) {
setKeys(prev => prev.map(k => (k.id === editingKey.id ? res.data.data! : k)))
}
} else {
const res = await api.post<APIResponse<ApiKeyItem>>('/api-keys', payload)
if (res.data.data) {
setKeys(prev => [res.data.data!, ...prev])
if (res.data.data.key) setNewKey(res.data.data.key)
}
}
setShowForm(false)
} catch {
// axios interceptor handles auth; form stays open
} finally {
setSaving(false)
}
}
const deleteKey = async (id: string) => {
if (!window.confirm(t('确定删除这个 API Key 吗?'))) return
try {
await api.delete(`/api-keys/${id}`)
setKeys(prev => prev.filter(k => k.id !== id))
} catch {
// ignore
}
}
const copyKey = async () => {
const copied = await copyToClipboard(newKey)
if (copied) {
setCopiedKey(true)
setTimeout(() => setCopiedKey(false), 1600)
}
}
const copyDocCode = async () => {
if (!selectedEndpoint) return
const copied = await copyToClipboard(buildPythonExample(selectedEndpoint))
if (copied) {
setCopiedDoc(true)
setTimeout(() => setCopiedDoc(false), 1600)
}
}
const toggleScope = (scope: string) => {
setForm(prev => {
if (scope === '*') {
return { ...prev, scopes: prev.scopes.includes('*') ? [...defaultReadScopes] : ['*'] }
}
const withoutAll = prev.scopes.filter(s => s !== '*')
const scopes = withoutAll.includes(scope)
? withoutAll.filter(s => s !== scope)
: [...withoutAll, scope]
return { ...prev, scopes: scopes.length ? scopes : [...defaultReadScopes] }
})
}
const toggleContainer = (uuid: string) => {
setForm(prev => ({
...prev,
containerUUIDs: prev.containerUUIDs.includes(uuid)
? prev.containerUUIDs.filter(item => item !== uuid)
: [...prev.containerUUIDs, uuid],
}))
}
return (
<div className="space-y-6">
<div className="flex flex-wrap items-start justify-between gap-3">
<div>
<h1 className="text-2xl font-bold text-black">API 集成</h1>
<p className="mt-1 text-sm text-gray-500">管理外部调用凭据、权限范围与平台 API 文档</p>
</div>
<button
onClick={openCreate}
className="inline-flex items-center gap-1.5 rounded-md bg-black px-3 py-2 text-sm text-white hover:bg-gray-800"
>
<Plus className="h-4 w-4" />
创建 Key
</button>
</div>
{newKey && (
<div className="rounded-lg border border-amber-200 bg-amber-50 p-4">
<div className="mb-3 flex items-center justify-between gap-3">
<div className="text-sm font-semibold text-amber-800">新的 API Key 已生成</div>
<button onClick={() => setNewKey('')} className="rounded p-1 text-amber-700 hover:bg-amber-100" title="关闭">
<X className="h-4 w-4" />
</button>
</div>
<div className="flex flex-col gap-2 sm:flex-row">
<code className="min-w-0 flex-1 break-all rounded border border-amber-300 bg-white px-3 py-2 font-mono text-xs text-gray-800">
{newKey}
</code>
<button
onClick={copyKey}
className="inline-flex items-center justify-center gap-1.5 rounded-md bg-amber-600 px-3 py-2 text-xs text-white hover:bg-amber-700"
>
{copiedKey ? <Check className="h-3.5 w-3.5" /> : <Copy className="h-3.5 w-3.5" />}
{copiedKey ? '已复制' : '复制'}
</button>
</div>
</div>
)}
<div className="rounded-lg border border-gray-200 bg-white">
<div className="flex items-center justify-between gap-3 border-b border-gray-200 px-5 py-4">
<h2 className="flex items-center gap-2 text-sm font-semibold text-black">
<Key className="h-4 w-4" />
API Keys
</h2>
<button onClick={fetchData} className="rounded p-1.5 text-gray-400 hover:text-black" title="刷新">
<RefreshCw className="h-4 w-4" />
</button>
</div>
{loading ? (
<div className="py-10 text-center text-sm text-gray-400">加载中...</div>
) : keys.length === 0 ? (
<div className="py-10 text-center text-sm text-gray-400">暂无 API Key</div>
) : (
<div className="overflow-x-auto">
<table className="w-full text-sm">
<thead>
<tr className="border-b border-gray-100 text-left text-xs font-medium text-gray-500">
<th className="px-4 py-3">名称</th>
<th className="px-4 py-3">权限</th>
<th className="px-4 py-3">绑定容器</th>
<th className="px-4 py-3">限制</th>
<th className="px-4 py-3">最后使用</th>
<th className="px-4 py-3 text-right">操作</th>
</tr>
</thead>
<tbody className="divide-y divide-gray-100">
{keys.map(item => (
<tr key={item.id} className="hover:bg-gray-50">
<td className="px-4 py-3">
<div className="flex items-center gap-2">
<span className="font-medium text-gray-900">{item.name}</span>
{item.disabled && (
<span className="rounded bg-red-50 px-1.5 py-0.5 text-[10px] font-medium text-red-600">已禁用</span>
)}
</div>
<div className="mt-1 font-mono text-xs text-gray-400">{item.prefix}</div>
</td>
<td className="px-4 py-3">
<ScopeSummary scopes={item.scopes || ['*']} />
</td>
<td className="px-4 py-3 text-xs text-gray-500">
{item.container_uuids?.length
? item.container_uuids.map(uuid => containerNameByUUID.get(uuid) || uuid).join('、')
: '全部容器'}
</td>
<td className="px-4 py-3 text-xs text-gray-500">
<div>{item.ip_whitelist ? 'IP 白名单' : '不限 IP'}</div>
<div>{item.expires_at ? `到期 ${item.expires_at}` : '长期有效'}</div>
</td>
<td className="px-4 py-3 text-xs text-gray-500">
<div>{item.last_used || '从未使用'}</div>
{item.last_used_ip && <div className="font-mono text-[11px] text-gray-400">{item.last_used_ip}</div>}
</td>
<td className="px-4 py-3">
<div className="flex justify-end gap-1">
<button onClick={() => openEdit(item)} className="rounded p-1.5 text-gray-400 hover:text-black" title="编辑">
<Edit3 className="h-3.5 w-3.5" />
</button>
<button onClick={() => deleteKey(item.id)} className="rounded p-1.5 text-gray-400 hover:text-red-600" title="删除">
<Trash2 className="h-3.5 w-3.5" />
</button>
</div>
</td>
</tr>
))}
</tbody>
</table>
</div>
)}
</div>
<div className="rounded-lg border border-gray-200 bg-white">
<button
onClick={() => setShowDocs(value => !value)}
className="flex w-full items-center justify-between gap-3 border-b border-gray-200 px-5 py-4 text-left"
>
<h2 className="flex items-center gap-2 text-sm font-semibold text-black">
<ShieldCheck className="h-4 w-4" />
API 文档
</h2>
{showDocs ? <ChevronUp className="h-4 w-4 text-gray-400" /> : <ChevronDown className="h-4 w-4 text-gray-400" />}
</button>
{showDocs && (
<div className="space-y-6 p-5">
<div className="rounded-lg bg-gray-900 p-4 font-mono text-xs text-gray-100">
<div>curl -X GET {BASE_URL}/api/v1/containers -H "X-API-Key: clicd_sk_xxxx"</div>
<div className="mt-2 text-gray-400">curl -X GET {BASE_URL}/api/v1/dashboard -H "Authorization: Bearer clicd_sk_xxxx"</div>
</div>
{endpointGroups.map(group => (
<section key={group.title}>
<h3 className="mb-2 text-sm font-semibold text-black">{group.title}</h3>
<div className="overflow-hidden rounded-lg border border-gray-200">
{group.endpoints.map(([method, path, desc]) => (
<div key={`${method}-${path}`} className="grid gap-2 border-b border-gray-100 px-3 py-2 text-xs last:border-b-0 md:grid-cols-[72px_minmax(220px,1fr)_180px_72px]">
<span className="w-fit rounded border border-blue-200 bg-blue-50 px-1.5 py-0.5 font-mono font-bold text-blue-700">{method}</span>
<code className="min-w-0 break-all font-mono text-gray-800">{path}</code>
<span className="text-gray-500">{desc}</span>
<button
onClick={() => setSelectedEndpoint(buildEndpointDoc(method, path, desc))}
className="inline-flex w-fit items-center justify-center gap-1 rounded border border-gray-200 px-2 py-1 text-gray-600 hover:border-gray-300 hover:bg-gray-50 hover:text-black"
title="查看使用范例"
>
<Eye className="h-3.5 w-3.5" />
查看
</button>
</div>
))}
</div>
</section>
))}
</div>
)}
</div>
{selectedEndpoint && (
<div className="fixed inset-0 z-50 flex items-center justify-center p-4">
<div className="absolute inset-0 bg-black/50" onClick={() => setSelectedEndpoint(null)} />
<div className="relative flex max-h-[90vh] w-full max-w-5xl flex-col overflow-hidden rounded-lg border border-gray-200 bg-white shadow-xl">
<div className="flex items-center justify-between gap-3 border-b border-gray-200 px-5 py-4">
<div className="min-w-0">
<div className="flex flex-wrap items-center gap-2">
<span className="rounded border border-blue-200 bg-blue-50 px-1.5 py-0.5 font-mono text-xs font-bold text-blue-700">
{selectedEndpoint.method}
</span>
<code className="min-w-0 break-all font-mono text-sm text-gray-900">{selectedEndpoint.path}</code>
</div>
<p className="mt-1 text-xs text-gray-500">{selectedEndpoint.desc}</p>
</div>
<button onClick={() => setSelectedEndpoint(null)} className="shrink-0 rounded p-1 text-gray-400 hover:text-black" title="关闭">
<X className="h-4 w-4" />
</button>
</div>
<div className="min-h-0 flex-1 overflow-y-auto p-5">
<div className="grid gap-4 lg:grid-cols-2">
<section className="min-w-0">
<div className="mb-2 flex items-center justify-between gap-2">
<h3 className="text-sm font-semibold text-black">Python 使用范例</h3>
<button
onClick={copyDocCode}
className="inline-flex items-center gap-1 rounded border border-gray-200 px-2 py-1 text-xs text-gray-600 hover:bg-gray-50"
>
{copiedDoc ? <Check className="h-3.5 w-3.5" /> : <Copy className="h-3.5 w-3.5" />}
{copiedDoc ? '已复制' : '复制'}
</button>
</div>
<pre className="max-h-[52vh] overflow-auto rounded-lg bg-gray-900 p-4 text-xs text-gray-100">
<code>{buildPythonExample(selectedEndpoint)}</code>
</pre>
</section>
<section className="min-w-0">
<h3 className="mb-2 text-sm font-semibold text-black">返回响应样例</h3>
{selectedEndpoint.note && (
<div className="mb-2 rounded border border-gray-200 bg-gray-50 px-3 py-2 text-xs text-gray-500">{selectedEndpoint.note}</div>
)}
<pre className="max-h-[52vh] overflow-auto rounded-lg bg-gray-900 p-4 text-xs text-gray-100">
<code>{formatJSON(selectedEndpoint.response)}</code>
</pre>
</section>
</div>
</div>
</div>
</div>
)}
{showForm && (
<div className="fixed inset-0 z-50 flex items-center justify-center p-4">
<div className="absolute inset-0 bg-black/50" onClick={() => setShowForm(false)} />
<div className="relative flex max-h-[90vh] w-full max-w-4xl flex-col overflow-hidden rounded-lg border border-gray-200 bg-white shadow-xl">
<div className="flex items-center justify-between gap-3 border-b border-gray-200 px-5 py-4">
<h3 className="text-base font-semibold text-black">{editingKey ? '编辑 API Key' : '创建 API Key'}</h3>
<button onClick={() => setShowForm(false)} className="rounded p-1 text-gray-400 hover:text-black" title="关闭">
<X className="h-4 w-4" />
</button>
</div>
<div className="min-h-0 flex-1 overflow-y-auto p-5">
<div className="grid gap-5 lg:grid-cols-[1fr_1.2fr]">
<div className="space-y-4">
<label className="block">
<span className="mb-1 block text-xs text-gray-500">名称</span>
<input
value={form.name}
onChange={e => setForm(prev => ({ ...prev, name: e.target.value }))}
className="w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
placeholder="CI/CD、计费系统、自动化脚本"
/>
</label>
<label className="block">
<span className="mb-1 block text-xs text-gray-500">IP 白名单</span>
<textarea
value={form.ipWhitelist}
onChange={e => setForm(prev => ({ ...prev, ipWhitelist: e.target.value }))}
rows={4}
className="w-full resize-none rounded-md border border-gray-300 px-3 py-2 font-mono text-sm"
placeholder={`1.2.3.4\n10.0.0.0/24`}
/>
</label>
<label className="block">
<span className="mb-1 block text-xs text-gray-500">过期时间</span>
<input
type="datetime-local"
value={form.expiresAt}
onChange={e => setForm(prev => ({ ...prev, expiresAt: e.target.value }))}
className="w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
/>
</label>
<label className="flex items-center gap-2 text-sm text-gray-700">
<input
type="checkbox"
checked={form.disabled}
onChange={e => setForm(prev => ({ ...prev, disabled: e.target.checked }))}
className="h-4 w-4 accent-black"
/>
禁用这个 Key
</label>
<div>
<div className="mb-2 text-xs text-gray-500">绑定容器</div>
<div className="max-h-48 space-y-1 overflow-y-auto rounded-md border border-gray-200 p-2">
<label className="flex items-center gap-2 rounded px-2 py-1.5 text-sm text-gray-700 hover:bg-gray-50">
<input
type="checkbox"
checked={form.containerUUIDs.length === 0}
onChange={() => setForm(prev => ({ ...prev, containerUUIDs: [] }))}
className="h-4 w-4 accent-black"
/>
全部容器
</label>
{containers.map(container => (
<label key={container.uuid} className="flex items-center gap-2 rounded px-2 py-1.5 text-sm text-gray-700 hover:bg-gray-50">
<input
type="checkbox"
checked={form.containerUUIDs.includes(container.uuid)}
onChange={() => toggleContainer(container.uuid)}
className="h-4 w-4 accent-black"
/>
<span className="min-w-0 truncate">{container.name}</span>
<span className="shrink-0 font-mono text-[10px] text-gray-400">{container.uuid.slice(0, 8)}</span>
</label>
))}
</div>
</div>
</div>
<div>
<div className="mb-2 flex items-center justify-between gap-3">
<div className="text-xs text-gray-500">权限范围</div>
<button onClick={() => toggleScope('*')} className="rounded border border-gray-200 px-2 py-1 text-xs text-gray-600 hover:bg-gray-50">
{form.scopes.includes('*') ? '取消全权限' : '全权限'}
</button>
</div>
<div className="space-y-4">
{scopeGroups.map(group => (
<div key={group.title}>
<div className="mb-2 text-xs font-medium text-gray-700">{group.title}</div>
<div className="grid gap-2 sm:grid-cols-2">
{group.scopes.map(([scope, label]) => (
<label key={scope} className="flex items-center gap-2 rounded border border-gray-200 px-2 py-2 text-xs text-gray-700 hover:bg-gray-50">
<input
type="checkbox"
checked={form.scopes.includes('*') || form.scopes.includes(scope)}
disabled={form.scopes.includes('*')}
onChange={() => toggleScope(scope)}
className="h-4 w-4 accent-black"
/>
<span className="min-w-0 flex-1 truncate">{label}</span>
<code className="hidden shrink-0 font-mono text-[10px] text-gray-400 sm:block">{scope}</code>
</label>
))}
</div>
</div>
))}
</div>
</div>
</div>
</div>
<div className="flex justify-end gap-2 border-t border-gray-200 px-5 py-4">
<button onClick={() => setShowForm(false)} className="rounded-md border border-gray-200 px-4 py-2 text-sm text-gray-600 hover:bg-gray-50">
取消
</button>
<button
onClick={saveKey}
disabled={saving || !form.name.trim()}
className="rounded-md bg-black px-4 py-2 text-sm text-white hover:bg-gray-800 disabled:opacity-50"
>
{saving ? '保存中...' : '保存'}
</button>
</div>
</div>
</div>
)}
</div>
)
}
const requestBodySamples: Record<string, Record<string, unknown>> = {
'POST /api/v1/containers/list': {},
'POST /api/v1/containers': {
name: 'demo-lxc-01',
virtualization: 'lxc',
template_id: 'debian-bookworm',
vcpu: 1,
ram_mb: 512,
disk_gb: 10,
network_bw_mbps: 0,
network_down_mbps: 100,
network_up_mbps: 20,
monthly_traffic_gb: 0,
traffic_mode: 'total',
traffic_in_gb: 0,
traffic_out_gb: 0,
io_speed_mbps: 0,
io_read_mbps: 80,
io_write_mbps: 30,
extra_ports: [8080],
port_mapping_count: 2,
assign_nat: true,
snapshot_limit: 1,
assign_ipv4: false,
ipv4_count: 1,
public_ipv4s: [],
assign_ipv6: true,
ipv6_count: 1,
ipv6_addresses: [],
ssh_auth_mode: 'auto_password',
ssh_password: '',
ssh_public_key: '',
expires_at: '',
},
'POST /api/v1/containers/{id}/reinstall': {
template_id: 'debian-bookworm',
ssh_auth_mode: 'keep',
ssh_password: '',
ssh_public_key: '',
},
'PUT /api/v1/containers/{id}/traffic-limit': {
traffic_mode: 'total',
monthly_traffic_gb: 100,
traffic_in_gb: 0,
traffic_out_gb: 0,
},
'PUT /api/v1/containers/{id}/resource-limit': {
vcpu: 1,
ram_mb: 512,
network_down_mbps: 100,
network_up_mbps: 20,
io_read_mbps: 80,
io_write_mbps: 30,
network_bw_mbps: 20,
io_speed_mbps: 30,
},
'PUT /api/v1/containers/{id}/expiry': { expires_at: '2026-12-31 23:59:59' },
'POST /api/v1/containers/{id}/reset-password': { password: 'NewPass123456' },
'POST /api/v1/containers/{id}/port-mappings': {
container_port: 8080,
host_port: 61320,
protocol: 'tcp',
description: 'HTTP',
},
'PUT /api/v1/containers/{id}/port-mappings/{index}': {
container_port: 8081,
host_port: 61320,
protocol: 'tcp',
description: 'HTTP',
},
'POST /api/v1/containers/{id}/snapshots/schedule': {
enabled: true,
interval_hours: 24,
time: '03:00',
},
'PUT /api/v1/containers/{id}/snapshots/quota': { snapshot_limit: 2 },
'POST /api/v1/images/download': { template_id: 'debian-bookworm' },
'POST /api/v1/images/cancel': { template_id: 'debian-bookworm' },
'DELETE /api/v1/images/delete': { template_id: 'debian-bookworm' },
'PUT /api/v1/images/toggle': { template_id: 'debian-bookworm', enabled: true },
'PUT /api/v1/routing': {
items: [
{
address: '203.0.113.10',
interface: 'eth0',
prefix_len: 32,
gateway: '203.0.113.1',
},
],
ipv6_prefixes: [
{
address: '2001:db8:100::2',
prefix: '2001:db8:100::/64',
prefix_len: 64,
interface: 'eth0',
gateway: '2001:db8:100::1',
},
],
},
'POST /api/v1/routing/ipv4-scan': {
cidr: '203.0.113.0/29',
interface: 'eth0',
gateway: '203.0.113.1',
verify: true,
limit: 64,
},
'POST /api/v1/security/check': { container_name: 'example-vm' },
'PUT /api/v1/containers/{id}/firewall': {
enabled: true,
default_action: 'DROP',
rules: [
{ id: '', network: 'ipv4', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv4/NAT4', enabled: true },
{ id: '', network: 'ipv6', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv6', enabled: true },
{ id: '', network: 'all', direction: 'out', protocol: 'tcp', port: '', source_ip: '', action: 'ACCEPT', description: 'Allow outbound TCP', enabled: true },
],
},
'PUT /api/v1/security/settings': { auto_shutdown: false },
'POST /api/v1/swap': { action: 'resize', size_mb: 16384 },
'POST /api/v1/batch-create': {
containers: [
{
name: 'batch-lxc-01',
virtualization: 'lxc',
template_id: 'debian-bookworm',
vcpu: 1,
ram_mb: 512,
disk_gb: 10,
assign_nat: true,
port_mapping_count: 2,
snapshot_limit: 1,
assign_ipv4: false,
ipv4_count: 1,
public_ipv4s: [],
assign_ipv6: true,
ipv6_count: 1,
ipv6_addresses: [],
ssh_auth_mode: 'key',
ssh_public_key: 'ssh-ed25519 AAAA... user@example',
},
],
},
'POST /api/v1/batch-action': {
action: 'reinstall',
containers: [5],
template_id: 'debian-bookworm',
ssh_auth_mode: 'keep',
ssh_password: '',
ssh_public_key: '',
},
'POST /api/v1/ssh-ticket': { container_name: 'example-vm' },
'POST /api/v1/vnc-ticket': { container_name: 'kvm-demo' },
'POST /api/v1/sub-user/create': { container_name: 'example-vm' },
'POST /api/v1/sub-users/{id}/rotate-password': {},
'POST /api/v1/api-keys': {
name: 'Automation',
ip_whitelist: '',
scopes: ['dashboard:read', 'container:read'],
expires_at: '',
disabled: false,
container_uuids: [],
},
'PATCH /api/v1/api-keys/{id}': {
name: 'Automation',
ip_whitelist: '',
scopes: ['dashboard:read', 'container:read'],
expires_at: '',
disabled: false,
container_uuids: [],
},
}
const responseSamples: Record<string, unknown> = {
'GET /api/v1/dashboard': { success: true, data: { running: 31, stopped: 0, total_containers: 31 } },
'GET /api/v1/host-info': {
success: true,
data: {
cpu: { cores: 8, usage_pct: 1.16 },
ram: { total_mb: 31825, used_mb: 1275, free_mb: 30550 },
disk: { total_gb: 1750.49, used_gb: 123.98, free_gb: 1626.51 },
network: {
public_ipv4: '203.0.113.10',
public_ipv4_interface: 'eth0',
public_ipv6: '2001:db8:100::2',
public_ipv6_interface: 'eth0',
},
load: { load1: 0.01, load5: 0.03, load15: 0.01 },
},
},
'GET /api/v1/routing': {
success: true,
data: {
nat4: { used: 62, remaining: '45474', total: '45536' },
nat4_port_range: { start: 20000, end: 65535 },
ipv4: { used: 1, remaining: '3', total: '4' },
ipv6: { used: 31, remaining: 'large', total: 'large' },
public_ipv4_addresses: [{ address: '203.0.113.10', interface: 'eth0', prefix_len: 32, gateway: '203.0.113.1' }],
ipv4_assignments: [{ container_id: 5, container_name: 'example-vm', address: '203.0.113.10', interface: 'eth0', prefix_len: 32, gateway: '203.0.113.1' }],
nat4_mappings: [
{ container_id: 5, container_name: 'example-vm', status: 'running', ip: '10.0.0.10', host_port: 22004, container_port: 22, protocol: 'tcp' },
],
ipv6_assignments: [{ container_id: 5, container_name: 'example-vm', address: '2001:db8:100::1005', prefix_len: 64, interface: 'eth0' }],
},
},
'PUT /api/v1/routing': {
success: true,
data: {
nat4: { used: 62, remaining: '45474', total: '45536' },
nat4_port_range: { start: 20000, end: 65535 },
ipv4: { used: 1, remaining: '3', total: '4' },
public_ipv4_addresses: [{ address: '203.0.113.10', interface: 'eth0', prefix_len: 32, gateway: '203.0.113.1' }],
ipv6_prefixes: [{ interface: 'eth0', address: '2001:db8:100::2', prefix: '2001:db8:100::/64', prefix_len: 64, gateway: '2001:db8:100::1' }],
},
},
'POST /api/v1/routing/ipv4-scan': {
success: true,
data: [
{ address: '203.0.113.10', interface: 'eth0', prefix_len: 32, gateway: '203.0.113.1', status: 'available', usable: true, reason: '' },
],
},
'GET /api/v1/ipv6/status': {
success: true,
data: {
available: true,
reachable: true,
reason: 'usable public IPv6 prefix detected',
prefixes: [{ interface: 'eth0', address: '2001:db8:100::2', prefix: '2001:db8:100::/64', prefix_len: 64, gateway: '2001:db8:100::1' }],
},
},
'GET /api/v1/tasks': { success: true, data: [] },
'DELETE /api/v1/tasks/{task_id}': { success: true, message: 'Task deleted' },
'GET /api/v1/containers': {
success: true,
data: [
{
id: 5,
uuid: '00000000-0000-4000-8000-000000000005',
name: 'example-vm',
virtualization: 'lxc',
template: 'debian-bullseye',
vcpu: 1,
ram_mb: 512,
disk_gb: 10,
status: 'running',
ip: '10.0.0.10',
ipv6: '2001:db8:100::1005',
ssh_port: 22004,
ssh_password: '***',
port_mappings: [
{ container_port: 22, host_port: 22004, protocol: 'tcp', description: 'SSH' },
{ container_port: 20000, host_port: 20000, protocol: 'tcp', description: 'Port-20000' },
],
},
],
},
'POST /api/v1/containers/list': {
success: true,
data: [
{ id: 5, uuid: '00000000-0000-4000-8000-000000000005', name: 'example-vm', status: 'running', ip: '10.0.0.10' },
],
},
'POST /api/v1/containers': { success: true, message: 'Container created successfully' },
'GET /api/v1/containers/{id|uuid|name}': {
success: true,
data: {
id: 5,
uuid: '00000000-0000-4000-8000-000000000005',
name: 'example-vm',
status: 'running',
ip: '10.0.0.10',
ipv6: '2001:db8:100::1005',
ssh_port: 22004,
ssh_password: '***',
policy_blocked: false,
},
},
'POST /api/v1/containers/{id}/start': queuedTaskSample('start'),
'POST /api/v1/containers/{id}/stop': queuedTaskSample('stop'),
'POST /api/v1/containers/{id}/restart': queuedTaskSample('restart'),
'POST /api/v1/containers/{id}/reinstall': queuedTaskSample('reinstall'),
'DELETE /api/v1/containers/{id}/delete': queuedTaskSample('delete'),
'GET /api/v1/containers/{id}/usage': {
success: true,
data: {
cpu_usage_pct: 0,
cpu_usage_usec: 3908852,
memory_usage_bytes: 29331456,
disk_usage_bytes: 515100672,
network_rx_bytes: 131232,
network_tx_bytes: 16828,
load1: 0.1,
load5: 0.06,
load15: 0.01,
},
},
'GET /api/v1/containers/{id}/traffic': {
success: true,
data: {
mode: 'total',
limit_gb: 0,
in_limit_gb: 0,
out_limit_gb: 0,
total_used_bytes: 142082,
rx_used_bytes: 127212,
tx_used_bytes: 14870,
used_pct: 0,
reset_date: '2026-06',
},
},
'POST /api/v1/containers/{id}/traffic-reset': { success: true, message: 'Traffic reset' },
'PUT /api/v1/containers/{id}/traffic-limit': { success: true, message: 'Traffic limit updated' },
'PUT /api/v1/containers/{id}/resource-limit': { success: true, message: 'Resource limits updated' },
'PUT /api/v1/containers/{id}/expiry': { success: true, message: 'Expiry updated' },
'POST /api/v1/containers/{id}/reset-password': { success: true, message: 'SSH password reset successfully', data: { password: '***' } },
'POST /api/v1/containers/{id}/ipv6': { success: true, message: 'IPv6 assigned', data: { id: 5, name: 'example-vm', ipv6: '2001:db8:100::1005' } },
'GET /api/v1/containers/{id}/random-port': { success: true, data: { port: 61320 } },
'POST /api/v1/containers/{id}/port-mappings': {
success: true,
data: [
{ container_port: 22, host_port: 22004, protocol: 'tcp', description: 'SSH' },
{ container_port: 8080, host_port: 61320, protocol: 'tcp', description: 'HTTP' },
],
},
'PUT /api/v1/containers/{id}/port-mappings/{index}': {
success: true,
data: [{ container_port: 8081, host_port: 61320, protocol: 'tcp', description: 'HTTP' }],
},
'DELETE /api/v1/containers/{id}/port-mappings/{index}': { success: true, data: [] },
'GET /api/v1/containers/{id}/firewall': {
success: true,
data: {
enabled: true,
default_action: 'DROP',
rules: [
{ id: 'a1b2c3d4', network: 'ipv4', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv4/NAT4', enabled: true },
{ id: 'e5f6g7h8', network: 'ipv6', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv6', enabled: true },
{ id: 'i9j0k1l2', network: 'all', direction: 'out', protocol: 'tcp', port: '', source_ip: '', action: 'ACCEPT', description: 'Allow outbound TCP', enabled: true },
],
},
},
'PUT /api/v1/containers/{id}/firewall': {
success: true,
message: 'Firewall updated',
data: {
enabled: true,
default_action: 'DROP',
rules: [
{ id: 'a1b2c3d4', network: 'ipv4', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv4/NAT4', enabled: true },
{ id: 'e5f6g7h8', network: 'ipv6', direction: 'in', protocol: 'tcp', port: '22', source_ip: '', action: 'ACCEPT', description: 'Allow SSH over IPv6', enabled: true },
{ id: 'i9j0k1l2', network: 'all', direction: 'out', protocol: 'tcp', port: '', source_ip: '', action: 'ACCEPT', description: 'Allow outbound TCP', enabled: true },
],
},
},
'GET /api/v1/snapshots': { success: true, data: null },
'GET /api/v1/containers/{id}/snapshots': {
success: true,
data: { quota: 1, schedule: { enabled: false, interval_hours: 0, last_run: '', next_run: '', time: '', created_by: '' }, snapshots: [] },
},
'POST /api/v1/containers/{id}/snapshots': {
success: true,
data: { id: 'snap-20260608-001', container_id: 5, container_name: 'example-vm', created_at: '2026-06-08 16:00:00', created_by: 'api:Automation', scheduled: false, size_bytes: 10485760 },
},
'DELETE /api/v1/containers/{id}/snapshots/{snapshot_id}': { success: true, message: 'Snapshot deleted' },
'POST /api/v1/containers/{id}/snapshots/{snapshot_id}/restore': { success: true, message: 'Snapshot restored' },
'POST /api/v1/containers/{id}/snapshots/schedule': { success: true, data: { container: { id: 5, name: 'example-vm', snapshot_schedule_enabled: true, snapshot_schedule_interval_hours: 24, snapshot_schedule_time: '03:00' } } },
'PUT /api/v1/containers/{id}/snapshots/quota': { success: true, data: { quota: 2, container: { id: 5, name: 'example-vm', snapshot_limit: 2 } } },
'GET /api/v1/templates': {
success: true,
data: [
{ id: 'ubuntu-noble', name: 'Ubuntu 24.04', distro: 'ubuntu', release: 'noble', arch: 'amd64', description: 'Ubuntu 24.04 LTS' },
{ id: 'debian-bookworm', name: 'Debian 12', distro: 'debian', release: 'bookworm', arch: 'amd64', description: 'Debian 12 (Bookworm)' },
],
},
'GET /api/v1/images': {
success: true,
data: [
{ id: 'ubuntu-noble', name: 'Ubuntu 24.04', type: 'lxc', downloaded: true, enabled: true, downloading: false, progress: 0, size_bytes: 135005452 },
],
},
'POST /api/v1/images/download': { success: true, message: 'Already downloaded' },
'POST /api/v1/images/cancel': { success: true, message: 'Cancel requested' },
'DELETE /api/v1/images/delete': { success: true, message: 'Deleted' },
'PUT /api/v1/images/toggle': { success: true, message: 'OK' },
'GET /api/v1/security/alerts': { success: true, data: [] },
'POST /api/v1/security/check': { success: true, message: 'Security check completed' },
'GET /api/v1/security/logs?container={name}': { success: true, data: [] },
'GET /api/v1/security/summary': { success: true, data: { critical: 0, high: 0, low: 0, medium: 0, total_alerts: 0 } },
'GET /api/v1/security/settings': { success: true, data: { auto_shutdown: false } },
'PUT /api/v1/security/settings': { success: true, data: { auto_shutdown: false } },
'GET /api/v1/swap': { success: true, data: { total_mb: 16383, used_mb: 0, free_mb: 16383, enabled: true, swap_file: '/swapfile' } },
'POST /api/v1/swap': { success: true, message: 'SWAP adjusted to 16384 MB', data: { total_mb: 16383, used_mb: 0, free_mb: 16383, enabled: true, swap_file: '/swapfile' } },
'POST /api/v1/batch-create': { success: true, data: ['task-12'] },
'POST /api/v1/batch-action': { success: true, data: ['task-13'] },
'POST /api/v1/ssh-ticket': { success: true, data: { ticket: '***60-second valid ticket***' } },
'POST /api/v1/vnc-ticket': { success: true, data: { ticket: '***60-second valid ticket***' } },
'POST /api/v1/sub-user/create': {
success: true,
message: 'Sub-user created',
data: { id: 'sub-xxxxxxxx', username: 'user-xxxxxxxx', password: '***', container_names: ['example-vm'], access_code: '********', created_at: '2026-06-08 16:00:00' },
},
'GET /api/v1/sub-users': { success: true, data: [] },
'POST /api/v1/sub-users/{id}/rotate-password': { success: true, data: { username: 'user-xxxxxxxx', password: '***', access_code: '********' } },
'GET /api/v1/sub-users/{id}/audit-logs': { success: true, data: [] },
'GET /api/v1/sub-users/{id}/login-logs': { success: true, data: [] },
'GET /api/v1/audit-logs': {
success: true,
data: [{ time: '2026-06-08 15:44:40', action: 'apikey.create', target: 'Test', detail: 'scopes=*', user: 'admin', success: true }],
},
'GET /api/v1/login-logs': {
success: true,
data: [{ time: '2026-06-08 08:24:00 UTC', username: 'admin', ip: '198.51.100.23', user_agent: 'Mozilla/5.0 ...', success: true }],
},
'GET /api/v1/api-keys': {
success: true,
data: [{ id: 'c271023f', name: 'Test', prefix: 'clicd_sk_dd9d...', ip_whitelist: '', created_at: '2026-06-08 15:44:40', last_used: '2026-06-08 15:46:10', scopes: ['*'], last_used_ip: '198.51.100.23' }],
},
'POST /api/v1/api-keys': {
success: true,
message: "API key created. Save this key now - it won't be shown again.",
data: { id: 'a1b2c3d4', name: 'Automation', key: 'clicd_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', prefix: 'clicd_sk_xxxx...', scopes: ['dashboard:read', 'container:read'] },
},
'PATCH /api/v1/api-keys/{id}': { success: true, data: { id: 'a1b2c3d4', name: 'Automation', prefix: 'clicd_sk_xxxx...', scopes: ['dashboard:read', 'container:read'], disabled: false } },
'DELETE /api/v1/api-keys/{id}': { success: true, message: 'API key deleted' },
}
function queuedTaskSample(action: string) {
return {
success: true,
message: 'Task queued',
data: { task_id: 'task-10', container_name: 'example-vm', status: 'pending', action },
}
}
function buildEndpointDoc(method: HttpMethod, path: string, desc: string): EndpointDoc {
const key = `${method} ${path}`
return {
method,
path,
desc,
examplePath: examplePathFor(path),
body: requestBodySamples[key],
response: responseSamples[key] || defaultResponseFor(method),
note: endpointNoteFor(key),
}
}
function examplePathFor(path: string) {
return path
.replace('{id|uuid|name}', '5')
.replace('{id}', '5')
.replace('{task_id}', 'task-10')
.replace('{index}', '1')
.replace('{snapshot_id}', 'snap-20260608-001')
.replace('{name}', 'example-vm')
}
function endpointNoteFor(key: string) {
const notes: string[] = []
if (key === 'POST /api/v1/containers') {
notes.push('Linux container creation supports ssh_auth_mode=auto_password|password|key. Public IPv4, IPv6, and NAT can be configured with assign_nat, assign_ipv4, and assign_ipv6.')
notes.push('Supports independent upload/download bandwidth limits and read/write I/O limits. network_bw_mbps and io_speed_mbps are deprecated symmetric compatibility aliases. New integrations should use network_down_mbps, network_up_mbps, io_read_mbps, and io_write_mbps.')
}
if (key === 'POST /api/v1/containers/{id}/reinstall') {
notes.push('Reinstall supports ssh_auth_mode=keep|auto_password|password|key. keep is only for reinstall requests; if SSH fields are omitted, the existing behavior is kept.')
}
if (key === 'POST /api/v1/batch-create') {
notes.push('Each containers[] item in batch creation supports the same network and SSH authentication fields as POST /api/v1/containers.')
}
if (key === 'PUT /api/v1/containers/{id}/resource-limit') {
notes.push('Supports independent download/upload bandwidth limits and read/write I/O limits. Omitted fields keep their current values, and explicitly passing 0 makes that direction unlimited. network_bw_mbps and io_speed_mbps are deprecated symmetric compatibility aliases.')
}
if (key === 'PUT /api/v1/containers/{id}/firewall') {
notes.push('Backward compatible: default_action is optional; if omitted, the existing policy is kept. rule.network is optional; if omitted, it is treated as ipv4. default_action: DROP=deny unmatched traffic, ACCEPT=allow unmatched traffic. network: ipv4=IPv4 NAT/public IPv4, ipv6=IPv6, all=apply to both IPv4 and IPv6. For NAT inbound rules, port is the container internal port, not the host public port.')
}
if (key === 'POST /api/v1/batch-action') {
notes.push('When action=reinstall, you can include template_id, ssh_auth_mode, ssh_password, and ssh_public_key. Other actions ignore these reinstall fields.')
}
if (key === 'PUT /api/v1/routing') {
notes.push('Updating NAT4 port range and public address pools requires routing:write. Addresses already assigned to containers cannot be removed from the pool.')
}
if (key === 'POST /api/v1/routing/ipv4-scan') {
notes.push('Scanning public IPv4 prefixes requires routing:write. When verify=true, the API also attempts to check address availability.')
}
if (key.includes('/vnc-ticket')) notes.push('WebVNC only applies to KVM VMs; LXC containers return "VNC console is only available for KVM VMs".')
if (key.includes('/containers/{id}/delete') || key.includes('/batch-action')) notes.push('This API enters the task queue. Call GET /api/v1/tasks afterward to check execution status.')
if (key.includes('/reset-password') || key.includes('/api-keys') || key.includes('/sub-user')) notes.push('Keys, passwords, and tickets in examples are masked. Full secrets from create APIs appear only once in the creation response.')
return notes.join(' ')
}
function defaultResponseFor(method: HttpMethod) {
if (method === 'GET') return { success: true, data: [] }
if (method === 'DELETE') return { success: true, message: 'Deleted' }
return { success: true, message: 'OK' }
}
function buildPythonExample(doc: EndpointDoc) {
const hasBody = doc.body !== undefined && doc.method !== 'GET'
const bodyJSON = hasBody ? formatJSON(doc.body) : ''
return [
'import json',
'import requests',
'',
`BASE_URL = "${SAMPLE_BASE_URL}"`,
'API_KEY = "clicd_sk_xxxx"',
'',
...(hasBody ? [`payload = json.loads(r'''${bodyJSON}''')`, ''] : []),
`response = requests.${doc.method.toLowerCase()}(`,
` f"{BASE_URL}${doc.examplePath}",`,
' headers={"X-API-Key": API_KEY},',
...(hasBody ? [' json=payload,'] : []),
' timeout=30,',
')',
'response.raise_for_status()',
'print(response.json())',
].join('\n')
}
function formatJSON(value: unknown) {
return JSON.stringify(value, null, 2)
}
function ScopeSummary({ scopes }: { scopes: string[] }) {
if (scopes.includes('*')) {
return <span className="rounded bg-red-50 px-2 py-1 text-xs font-medium text-red-600">全权限</span>
}
const visible = scopes.slice(0, 3)
return (
<div className="flex max-w-xs flex-wrap gap-1">
{visible.map(scope => (
<span key={scope} className="rounded bg-gray-100 px-1.5 py-0.5 font-mono text-[10px] text-gray-600">
{scope}
</span>
))}
{scopes.length > visible.length && (
<span className="rounded bg-gray-100 px-1.5 py-0.5 text-[10px] text-gray-500">+{scopes.length - visible.length}</span>
)}
</div>
)
}
function toDateTimeLocal(value: string) {
if (!value) return ''
return value.replace(' ', 'T').slice(0, 16)
}
function fromDateTimeLocal(value: string) {
if (!value) return ''
return `${value.replace('T', ' ')}:00`
}