feat: add admin usage statistics and LLM configuration management

qwen3-tts-backend/api/users.py

@@ -17,7 +17,8 @@ from db.crud import (
     update_user,
     delete_user
 )
-from schemas.user import User, UserCreateByAdmin, UserUpdate, UserListResponse
+from schemas.user import User, UserCreateByAdmin, UserUpdate, UserListResponse, AliyunKeyUpdate, AliyunKeyVerifyResponse
+from schemas.audiobook import LLMConfigUpdate, LLMConfigResponse
 
 router = APIRouter(prefix="/users", tags=["users"])
 limiter = Limiter(key_func=get_remote_address)
@@ -177,3 +178,115 @@ async def delete_user_by_id(
             status_code=status.HTTP_404_NOT_FOUND,
             detail="User not found"
         )
+
+
+@router.post("/system/aliyun-key")
+@limiter.limit("5/minute")
+async def set_system_aliyun_key(
+    request: Request,
+    key_data: AliyunKeyUpdate,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from core.security import encrypt_api_key
+    from core.tts_service import AliyunTTSBackend
+    from db.crud import set_system_setting
+
+    api_key = key_data.api_key.strip()
+    aliyun_backend = AliyunTTSBackend(api_key=api_key, region=settings.ALIYUN_REGION)
+    health = await aliyun_backend.health_check()
+    if not health.get("available", False):
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="Invalid Aliyun API key.")
+    set_system_setting(db, "aliyun_api_key", encrypt_api_key(api_key))
+    return {"message": "Aliyun API key updated"}
+
+
+@router.delete("/system/aliyun-key")
+@limiter.limit("5/minute")
+async def delete_system_aliyun_key(
+    request: Request,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from db.crud import delete_system_setting
+    delete_system_setting(db, "aliyun_api_key")
+    return {"message": "Aliyun API key deleted"}
+
+
+@router.get("/system/aliyun-key/verify", response_model=AliyunKeyVerifyResponse)
+@limiter.limit("10/minute")
+async def verify_system_aliyun_key(
+    request: Request,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from core.security import decrypt_api_key
+    from core.tts_service import AliyunTTSBackend
+    from db.crud import get_system_setting
+
+    encrypted = get_system_setting(db, "aliyun_api_key")
+    if not encrypted:
+        return AliyunKeyVerifyResponse(valid=False, message="No Aliyun API key configured")
+    api_key = decrypt_api_key(encrypted)
+    if not api_key:
+        return AliyunKeyVerifyResponse(valid=False, message="Failed to decrypt API key")
+    aliyun_backend = AliyunTTSBackend(api_key=api_key, region=settings.ALIYUN_REGION)
+    health = await aliyun_backend.health_check()
+    if health.get("available", False):
+        return AliyunKeyVerifyResponse(valid=True, message="Aliyun API key is valid and working")
+    return AliyunKeyVerifyResponse(valid=False, message="Aliyun API key is not working.")
+
+
+@router.put("/system/llm-config")
+@limiter.limit("10/minute")
+async def set_system_llm_config(
+    request: Request,
+    config: LLMConfigUpdate,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from core.security import encrypt_api_key
+    from core.llm_service import LLMService
+    from db.crud import set_system_setting
+
+    api_key = config.api_key.strip()
+    base_url = config.base_url.strip()
+    model = config.model.strip()
+    llm = LLMService(base_url=base_url, api_key=api_key, model=model)
+    try:
+        await llm.chat("You are a test assistant.", "Reply with 'ok'.")
+    except Exception as e:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=f"LLM API validation failed: {e}")
+    set_system_setting(db, "llm_api_key", encrypt_api_key(api_key))
+    set_system_setting(db, "llm_base_url", base_url)
+    set_system_setting(db, "llm_model", model)
+    return {"message": "LLM config updated"}
+
+
+@router.get("/system/llm-config", response_model=LLMConfigResponse)
+@limiter.limit("30/minute")
+async def get_system_llm_config(
+    request: Request,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from db.crud import get_system_setting
+    return LLMConfigResponse(
+        base_url=get_system_setting(db, "llm_base_url"),
+        model=get_system_setting(db, "llm_model"),
+        has_key=bool(get_system_setting(db, "llm_api_key")),
+    )
+
+
+@router.delete("/system/llm-config")
+@limiter.limit("10/minute")
+async def delete_system_llm_config(
+    request: Request,
+    db: Session = Depends(get_db),
+    _: User = Depends(require_superuser)
+):
+    from db.crud import delete_system_setting
+    delete_system_setting(db, "llm_api_key")
+    delete_system_setting(db, "llm_base_url")
+    delete_system_setting(db, "llm_model")
+    return {"message": "LLM config deleted"}