feat(ops): 添加生产监控告警基线

- 新增 Prometheus/Grafana/Loki/Promtail 监控 profile\n- 覆盖 DB、磁盘、慢 API、慢 Prisma、任务失败和小宝摘要 stale 告警\n- 补充 postgres-exporter 自定义查询、Dashboard、部署文档和校验\n\nCo-Authored-By: GPT-5 Codex <codex@openai.com>

scripts/ops-scripts.test.mjs

@@ -1,5 +1,5 @@
 import { spawnSync } from 'node:child_process';
-import { mkdtempSync, writeFileSync, existsSync } from 'node:fs';
+import { mkdtempSync, writeFileSync, existsSync, readFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { describe, it } from 'node:test';
@@ -97,4 +97,45 @@ describe('production ops scripts', () => {
     assert.match(result.stdout, /\/api\/v1\/v2\.2\/requirements\?productId=__smoke__/);
     assert.match(result.stdout, /\/api\/v1\/config\/ai/);
   });
+
+  it('declares the production monitoring baseline without real alert secrets', () => {
+    const alertRules = readFileSync(
+      join(root, 'deploy/monitoring/prometheus/alert-rules.yml'),
+      'utf8',
+    );
+    const postgresQueries = readFileSync(
+      join(root, 'deploy/monitoring/postgres/postgres-queries.yml'),
+      'utf8',
+    );
+    const promtailConfig = readFileSync(
+      join(root, 'deploy/monitoring/promtail/config.yml'),
+      'utf8',
+    );
+    const dashboard = readFileSync(
+      join(root, 'deploy/monitoring/grafana/dashboards/ftb-production-overview.json'),
+      'utf8',
+    );
+
+    for (const alertName of [
+      'FtbPostgresDown',
+      'FtbDiskPressure',
+      'FtbSlowApiLogBurst',
+      'FtbSlowPrismaLogBurst',
+      'FtbJobFailureLogBurst',
+      'FtbXiaobaoSummaryStale',
+    ]) {
+      assert.match(alertRules, new RegExp(alertName));
+    }
+
+    assert.match(postgresQueries, /xiaobao_risk_summaries/);
+    assert.match(postgresQueries, /dirty = true/);
+    assert.match(promtailConfig, /Slow API request/);
+    assert.match(promtailConfig, /Slow Prisma query/);
+    assert.match(promtailConfig, /AppData relation sync failed/);
+    assert.match(dashboard, /FTB Production Overview/);
+
+    const combined = `${alertRules}\n${postgresQueries}\n${promtailConfig}\n${dashboard}`;
+    assert.doesNotMatch(combined, /sk-ant-[A-Za-z0-9]/);
+    assert.doesNotMatch(combined, /hooks\.slack\.com\/services\//);
+  });
 });