bifroest/app/core/metrics.py
2026-10-27 08:34:17 +01:00

160 lines
9 KiB
Python

"""Metriken im Prometheus-Format (prometheus_client).
Zähler und Histogramme gelten je Prozess: Web zählt Requests, der Worker Runs,
Modell- und Tool-Aufrufe und Zustellungen. Der Zustand aus der Datenbank (wartende
Runs, offene Freigaben, Worker-Herzschläge …) wird nur vom Web-Prozess beim Abruf
gelesen (StateCollector), damit er nicht doppelt erscheint.
Labels bleiben klein: Route-Muster statt Pfade, keine IDs, keine Nutzer.
"""
import hmac
import logging
from datetime import timedelta
from prometheus_client import CollectorRegistry, Counter, Gauge, Histogram, generate_latest
from prometheus_client.core import GaugeMetricFamily
from prometheus_client.registry import Collector
from sqlalchemy import func, select
from app.core.config import Settings
from app.core.database import Database, now
log = logging.getLogger(__name__)
CONTENT_TYPE = "text/plain; version=0.0.4; charset=utf-8"
REGISTRY = CollectorRegistry()
http_requests = Counter("aiw_http_requests_total", "HTTP-Requests", ["method", "route", "status"],
registry=REGISTRY)
http_duration = Histogram("aiw_http_request_duration_seconds", "Dauer der HTTP-Requests", ["method", "route"],
buckets=(0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10), registry=REGISTRY)
runs_finished = Counter("aiw_runs_finished_total", "Beendete Run-Versuche", ["kind", "status"], registry=REGISTRY)
run_duration = Histogram("aiw_run_duration_seconds", "Dauer eines Run-Versuchs im Worker", ["kind"],
buckets=(1, 2.5, 5, 10, 20, 30, 60, 120, 300, 600), registry=REGISTRY)
model_calls = Counter("aiw_model_calls_total", "Modellaufrufe", ["model", "outcome"], registry=REGISTRY)
model_duration = Histogram("aiw_model_call_duration_seconds", "Dauer der Modellaufrufe", ["model"],
buckets=(0.5, 1, 2.5, 5, 10, 20, 30, 60, 120), registry=REGISTRY)
model_tokens = Counter("aiw_model_tokens_total", "Verbrauchte Tokens", ["model", "kind"], registry=REGISTRY)
tool_calls = Counter("aiw_tool_calls_total", "Tool-Aufrufe", ["tool", "status"], registry=REGISTRY)
tool_duration = Histogram("aiw_tool_call_duration_seconds", "Dauer der Tool-Aufrufe", ["tool"],
buckets=(0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10, 30), registry=REGISTRY)
notifications_sent = Counter("aiw_notifications_total", "Zustellversuche von Benachrichtigungen",
["channel", "result"], registry=REGISTRY)
untrusted_signals = Counter("aiw_untrusted_signals_total",
"Fremdinhalte, die wie Anweisungen an eine KI aussehen (→ app.security)", ["source"],
registry=REGISTRY)
worker_loop = Gauge("aiw_worker_last_loop_timestamp_seconds", "Letzter Durchlauf der Worker-Schleife",
registry=REGISTRY)
def tool_label(name: str) -> str:
"""MCP-Tools nach Server zusammenfassen, damit die Zahl der Labels begrenzt bleibt."""
return name.split("__", 1)[0] + "__*" if "__" in name else name
def untrusted_signal(source: str) -> None:
untrusted_signals.labels(tool_label(source)[:60]).inc()
class StateCollector(Collector):
"""Zustand aus der Datenbank, beim Abruf gelesen (nur im Web-Prozess registriert)."""
def __init__(self, db: Database, settings: Settings):
self.db, self.settings = db, settings
def collect(self):
from app.approvals.models import ApprovalRequest
from app.notify.models import Notification
from app.tasks.models import TaskRun
from app.tasks.monitor import WorkerHeartbeat
from app.uploads.models import Upload
from app.usage.models import UsageRecord
from app.workspaces.models import Workspace
up = GaugeMetricFamily("aiw_state_up", "1, wenn der Zustand aus der Datenbank gelesen werden konnte")
try:
with self.db.session() as session:
runs = GaugeMetricFamily("aiw_runs", "Runs nach Status", labels=["status"])
for status, count in session.execute(select(TaskRun.status, func.count()).group_by(TaskRun.status)
.where(TaskRun.status.in_(ACTIVE_STATES))):
runs.add_metric([status], count)
yield runs
oldest = session.scalar(select(func.min(TaskRun.available_at)).where(TaskRun.status == "queued",
TaskRun.available_at <= func.now()))
yield GaugeMetricFamily("aiw_runs_oldest_queued_seconds",
"Wartezeit des ältesten fälligen Runs (0 = keiner)",
value=(now() - oldest).total_seconds() if oldest else 0)
yield GaugeMetricFamily("aiw_approvals_pending", "Offene Freigabeanträge", value=session.scalar(
select(func.count()).select_from(ApprovalRequest).where(ApprovalRequest.status == "pending")))
notes = GaugeMetricFamily("aiw_notifications", "Benachrichtigungen nach Status", labels=["status"])
for status, count in session.execute(select(Notification.status, func.count())
.where(Notification.status.in_(("pending", "failed")))
.group_by(Notification.status)):
notes.add_metric([status], count)
yield notes
beats = list(session.scalars(select(WorkerHeartbeat.last_seen)))
alive = now() - timedelta(seconds=self.settings.worker_stale_seconds)
yield GaugeMetricFamily("aiw_workers_alive", "Worker mit frischem Herzschlag",
value=sum(1 for b in beats if b >= alive))
yield GaugeMetricFamily("aiw_worker_last_heartbeat_seconds",
"Sekunden seit dem jüngsten Worker-Herzschlag (-1 = nie)",
value=(now() - max(beats)).total_seconds() if beats else -1)
yield GaugeMetricFamily("aiw_workspaces_trashed", "Workspaces im Papierkorb", value=session.scalar(
select(func.count()).select_from(Workspace).where(Workspace.deleted.is_not(None))))
yield GaugeMetricFamily("aiw_uploads", "Hochgeladene Dateien", value=session.scalar(
select(func.count()).select_from(Upload)))
used = (select(Upload.workspace_id, func.sum(Upload.stored_size).label("bytes"))
.group_by(Upload.workspace_id).subquery())
rows = session.execute(select(Workspace.storage_limit_mb, used.c.bytes)
.join(used, used.c.workspace_id == Workspace.id)
.where(Workspace.deleted.is_(None))).all()
default = self.settings.workspace_storage_mb
yield GaugeMetricFamily("aiw_upload_bytes", "Belegter Speicher aller Uploads (DuckDB-Dateien)",
value=sum(int(b or 0) for _, b in rows))
yield GaugeMetricFamily("aiw_workspaces_storage_high",
"Workspaces mit mindestens 80 % belegtem Speicherkontingent",
value=sum(1 for limit, b in rows
if int(b or 0) >= 0.8 * (limit if limit is not None else default)
* 1024 * 1024))
today = now().replace(hour=0, minute=0, second=0, microsecond=0)
cost = session.scalar(select(func.coalesce(func.sum(UsageRecord.cost), 0))
.where(UsageRecord.time >= today))
yield GaugeMetricFamily("aiw_cost_today", f"Kosten seit Mitternacht (UTC) in "
f"{self.settings.cost_currency}", value=float(cost or 0))
up.add_metric([], 1)
except Exception:
log.exception("Zustand für /metrics nicht lesbar")
up.add_metric([], 0)
yield up
ACTIVE_STATES = ("queued", "running", "waiting_approval", "waiting_input", "needs_reconciliation")
def authorized(header: str | None, settings: Settings) -> bool:
"""Ohne AIW_METRICS_TOKEN ist /metrics aus; sonst muss der Bearer-Token passen."""
if not settings.metrics_token:
return False
sent = (header or "").removeprefix("Bearer ").strip()
return hmac.compare_digest(sent.encode(), settings.metrics_token.encode())
def render(registry: CollectorRegistry = REGISTRY) -> bytes:
return generate_latest(registry)
def web_registry(db: Database, settings: Settings) -> CollectorRegistry:
"""Prozess-Zähler plus Zustand aus der Datenbank für den Web-Prozess."""
registry = CollectorRegistry()
registry.register(_Forward(REGISTRY))
registry.register(StateCollector(db, settings))
return registry
class _Forward(Collector):
def __init__(self, source: CollectorRegistry):
self.source = source
def collect(self):
yield from self.source.collect()