feat: SAC 0.7.4 sidebar system stats block with UI toggle

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/app/api/v1/auth.py

@@ -1,78 +1,156 @@
-from fastapi import APIRouter, Depends, HTTPException, Request
-
-from pydantic import BaseModel, Field
-
-from sqlalchemy.orm import Session
-
-
-
-from app.auth.jwt_auth import CurrentUser, create_access_token, get_current_user
-
-from app.config import get_settings
-
-from app.database import get_db
-
-from app.services.login_rate_limit import (
-
-    ensure_login_allowed,
-
-    record_login_failure,
-
-    record_login_success,
-
-)
-
-from app.services.user_auth import authenticate_user
-
-
-
-router = APIRouter(prefix="/auth", tags=["auth"])
-
-
-
-
-
-class LoginRequest(BaseModel):
-
-    username: str
-
-    password: str
-
-
-
-
-
-class TokenResponse(BaseModel):
-
-    access_token: str
-
-    token_type: str = "bearer"
-
-    username: str
-
-    role: str
-
-
-
-
-
-class MeResponse(BaseModel):
-
-    username: str
-
-    role: str
-
-
-
-
-
-@router.post("/login", response_model=TokenResponse)
-
-def login(body: LoginRequest, request: Request, db: Session = Depends(get_db)) -> TokenResponse:
-
-    settings = get_settings()
-
-    if not settings.sac_admin_password and not _has_any_user(db):
-
-        raise HTTPException(
-
+from fastapi import APIRouter, Depends, HTTPException, Request
+
+from pydantic import BaseModel, Field
+
+from sqlalchemy.orm import Session
+
+
+
+from app.auth.jwt_auth import CurrentUser, create_access_token, get_current_user
+
+from app.config import get_settings
+
+from app.database import get_db
+
+from app.services.login_rate_limit import (
+
+    ensure_login_allowed,
+
+    record_login_failure,
+
+    record_login_success,
+
+)
+
+from app.services.user_auth import authenticate_user
+
+
+
+router = APIRouter(prefix="/auth", tags=["auth"])
+
+
+
+
+
+class LoginRequest(BaseModel):
+
+    username: str
+
+    password: str
+
+
+
+
+
+class TokenResponse(BaseModel):
+
+    access_token: str
+
+    token_type: str = "bearer"
+
+    username: str
+
+    role: str
+
+
+
+
+
+class MeResponse(BaseModel):
+
+    username: str
+
+    role: str
+
+
+
+
+
+@router.post("/login", response_model=TokenResponse)
+
+def login(body: LoginRequest, request: Request, db: Session = Depends(get_db)) -> TokenResponse:
+
+    settings = get_settings()
+
+    if not settings.sac_admin_password and not _has_any_user(db):
+
+        raise HTTPException(
+
+            status_code=503,
+
+            detail="SAC UI users are not configured (run alembic upgrade and set SAC_ADMIN_PASSWORD for bootstrap)",
+
+        )
+
+
+
+    ip_address = ensure_login_allowed(db, request)
+
+
+
+    user = authenticate_user(db, body.username, body.password)
+
+    if user is None:
+
+        record_login_failure(db, ip_address=ip_address, username=body.username)
+
+        db.commit()
+
+        raise HTTPException(status_code=401, detail="Invalid username or password")
+
+
+
+    record_login_success(db, ip_address=ip_address, username=user.username)
+
+    db.commit()
+
+
+
+    token = create_access_token(user.username, user.role)
+
+    return TokenResponse(
+
+        access_token=token,
+
+        username=user.username,
+
+        role=user.role,
+
+    )
+
+
+
+
+
+@router.get("/me", response_model=MeResponse)
+
+def me(current_user: CurrentUser = Depends(get_current_user)) -> MeResponse:
+
+    return MeResponse(username=current_user.username, role=current_user.role)
+
+
+
+
+
+def _has_any_user(db: Session) -> bool:
+
+    from sqlalchemy import func, select
+
+
+
+    from app.models.user import User
+
+
+
+    try:
+
+        count = db.scalar(select(func.count()).select_from(User)) or 0
+
+        return count > 0
+
+    except Exception:
+
+        db.rollback()
+
+        return False
+

backend/app/api/v1/router.py

@@ -1,6 +1,6 @@
 from fastapi import APIRouter
 
-from app.api.v1 import auth, dashboards, events, health, hosts, problems, settings, stream, users
+from app.api.v1 import auth, dashboards, events, health, hosts, problems, settings, stream, system, users
 
 api_router = APIRouter()
 api_router.include_router(health.router)
@@ -10,5 +10,6 @@ api_router.include_router(hosts.router)
 api_router.include_router(problems.router)
 api_router.include_router(dashboards.router)
 api_router.include_router(settings.router)
+api_router.include_router(system.router)
 api_router.include_router(users.router)
 api_router.include_router(stream.router)

backend/app/api/v1/settings.py

@@ -28,6 +28,10 @@ from app.services.event_severity_overrides import (
     list_severity_override_items,
     replace_severity_overrides,
 )
+from app.services.ui_settings import (
+    get_effective_ui_settings,
+    upsert_ui_settings,
+)
 
 router = APIRouter(prefix="/settings", tags=["settings"])
 
@@ -392,3 +396,37 @@ def update_severity_overrides(
         ],
         source=SOURCE_DB,
     )
+
+
+class UiSettingsResponse(BaseModel):
+    show_sidebar_system_stats: bool
+    source: str = Field(description="db или default")
+
+
+class UiSettingsUpdate(BaseModel):
+    show_sidebar_system_stats: bool
+
+
+@router.get("/ui", response_model=UiSettingsResponse)
+def get_ui_settings(
+    db: Session = Depends(get_db),
+    _user=Depends(require_admin),
+) -> UiSettingsResponse:
+    cfg = get_effective_ui_settings(db)
+    return UiSettingsResponse(
+        show_sidebar_system_stats=cfg.show_sidebar_system_stats,
+        source=cfg.source,
+    )
+
+
+@router.put("/ui", response_model=UiSettingsResponse)
+def update_ui_settings(
+    body: UiSettingsUpdate,
+    db: Session = Depends(get_db),
+    _user=Depends(require_admin),
+) -> UiSettingsResponse:
+    cfg = upsert_ui_settings(db, show_sidebar_system_stats=body.show_sidebar_system_stats)
+    return UiSettingsResponse(
+        show_sidebar_system_stats=cfg.show_sidebar_system_stats,
+        source=cfg.source,
+    )

backend/app/api/v1/system.py

@@ -0,0 +1,30 @@
+from fastapi import APIRouter, Depends
+from pydantic import BaseModel, Field
+from sqlalchemy.orm import Session
+
+from app.auth.jwt_auth import get_current_user
+from app.database import get_db
+from app.services.system_stats import collect_system_stats
+from app.services.ui_settings import get_effective_ui_settings
+
+router = APIRouter(prefix="/system", tags=["system"])
+
+
+class SystemStatsResponse(BaseModel):
+    visible: bool = Field(description="Показывать блок в боковой панели (глобальная настройка)")
+    collected_at: str
+    cpu_percent: float | None = None
+    memory: dict | None = None
+    disk: dict | None = None
+    database: dict
+    app: dict
+
+
+@router.get("/stats", response_model=SystemStatsResponse)
+def get_system_stats(
+    db: Session = Depends(get_db),
+    _user=Depends(get_current_user),
+) -> SystemStatsResponse:
+    ui = get_effective_ui_settings(db)
+    payload = collect_system_stats(db)
+    return SystemStatsResponse(visible=ui.show_sidebar_system_stats, **payload)