@dofe/infra-common 0.1.1

package/dist/index.d.ts

@@ -0,0 +1,60 @@
+export * from './common.module';
+export * from './encryption.service';
+export * from './config/env-config.service';
+export { getKeysConfig, initKeysConfig, getEnvConfig, getConfig } from './config/configuration';
+export type { KeysConfig, YamlConfig, EnvConfig } from './config/validation';
+export type { JwtConfig, EmbeddingKeysConfig, VikingDbKeysConfig } from './config/validation';
+export type { AppConfig, SendCloudConfig, StorageCredentialsConfig, IpInfoConfig, OpenSpeechConfig } from './config/validation';
+export type { TranscodeConfig, TtsConfig } from './config/validation';
+export type { RiskConfig, OpenAIConfig, ExchangeRateConfig, ImageConfig, VectorConfig, AgentXConfig } from './config/validation';
+export type { ZoneConfig, VideoQuality } from './config/validation';
+export type { IpInfoKeysConfig } from './config/validation';
+export { PardxApp, DoFeApp, Locale, LocaleString, VideoResolutionDto } from './config/dto/config.dto';
+export { FeatureNotConfiguredError } from './config/features';
+export { AgentXConfigHelper } from './config/agentx.config';
+export { TRANSCODE_CONSTANTS, SUPPORTED_VIDEO_FORMATS, SUPPORTED_AUDIO_FORMATS, SUPPORTED_IMAGE_FORMATS } from './config/constant/config.constants';
+export * from './filter/exception/api.exception';
+export * from './utils/prisma-error.util';
+export * from './utils/audit-signature.util';
+export * from './utils/audit-log-helper.util';
+export * from './decorators/api-key/api-key.decorator';
+export * from './decorators/app-version/app-version.interceptor';
+export * from './decorators/app-version/app-version.module';
+export * from './decorators/app-version/app-version.service';
+export * from './decorators/audit-log.decorator';
+export * from './decorators/cache/cache.decorator';
+export * from './decorators/data-visibility';
+export * from './decorators/cache/cache.interceptor';
+export * from './decorators/cache/cache.module';
+export * from './decorators/event/event.decorator';
+export * from './decorators/event/event.interceptor';
+export * from './decorators/event/event.module';
+export * from './decorators/feature-flag/feature-flag.decorator';
+export * from './decorators/feature-flag/feature-flag.interceptor';
+export * from './decorators/feature-flag/feature-flag.module';
+export * from './decorators/feature-flag/feature-flag.service';
+export * from './decorators/rate-limit/rate-limit.decorator';
+export * from './decorators/rate-limit/rate-limit.module';
+export * from './decorators/rate-limit/rate-limit.service';
+export * from './decorators/response.decorator';
+export * from './decorators/tenant/tenant.decorator';
+export * from './decorators/transaction/transactional.decorator';
+export * from './decorators/ts-rest-controller.decorator';
+export * from './decorators/validation.decorator';
+export * from './decorators/version/version.decorator';
+export * from './decorators/version/version.interceptor';
+export * from './decorators/version/version.module';
+export * from './guards/api-key.guard';
+export * from './guards/auth.guard';
+export * from './guards/data-visibility.guard';
+export * from './guards/permission.guard';
+export * from './guards/tenant-context.guard';
+export * from './guards/version.guard';
+export * from './middleware/request.middleware';
+export * from './interceptor/audit/audit-log.interceptor';
+export * from './interceptor/mask/mask.interceptor';
+export * from './interceptor/rate-limit/no-rate-limit.interceptor';
+export * from './interceptor/rate-limit/rate-limit.interceptor';
+export * from './interceptor/transform/transform.interceptor';
+export * from './interceptor/version/version-header.interceptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChG,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC7E,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,wBAAwB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChI,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjI,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACpE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACpJ,cAAc,kCAAkC,CAAC;AAGjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAE9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,kDAAkD,CAAC;AACjE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kDAAkD,CAAC;AACjE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,0CAA0C,CAAC;AACzD,cAAc,qCAAqC,CAAC;AAEpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AAEvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,qCAAqC,CAAC;AACpD,cAAc,oDAAoD,CAAC;AACnE,cAAc,iDAAiD,CAAC;AAChE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kDAAkD,CAAC"}

package/dist/index.js

@@ -0,0 +1,85 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_IMAGE_FORMATS = exports.SUPPORTED_AUDIO_FORMATS = exports.SUPPORTED_VIDEO_FORMATS = exports.TRANSCODE_CONSTANTS = exports.AgentXConfigHelper = exports.FeatureNotConfiguredError = exports.VideoResolutionDto = exports.Locale = exports.DoFeApp = exports.PardxApp = exports.getConfig = exports.getEnvConfig = exports.initKeysConfig = exports.getKeysConfig = void 0;
+__exportStar(require("./common.module"), exports);
+__exportStar(require("./encryption.service"), exports);
+__exportStar(require("./config/env-config.service"), exports);
+var configuration_1 = require("./config/configuration");
+Object.defineProperty(exports, "getKeysConfig", { enumerable: true, get: function () { return configuration_1.getKeysConfig; } });
+Object.defineProperty(exports, "initKeysConfig", { enumerable: true, get: function () { return configuration_1.initKeysConfig; } });
+Object.defineProperty(exports, "getEnvConfig", { enumerable: true, get: function () { return configuration_1.getEnvConfig; } });
+Object.defineProperty(exports, "getConfig", { enumerable: true, get: function () { return configuration_1.getConfig; } });
+var config_dto_1 = require("./config/dto/config.dto");
+Object.defineProperty(exports, "PardxApp", { enumerable: true, get: function () { return config_dto_1.PardxApp; } });
+Object.defineProperty(exports, "DoFeApp", { enumerable: true, get: function () { return config_dto_1.DoFeApp; } });
+Object.defineProperty(exports, "Locale", { enumerable: true, get: function () { return config_dto_1.Locale; } });
+Object.defineProperty(exports, "VideoResolutionDto", { enumerable: true, get: function () { return config_dto_1.VideoResolutionDto; } });
+var features_1 = require("./config/features");
+Object.defineProperty(exports, "FeatureNotConfiguredError", { enumerable: true, get: function () { return features_1.FeatureNotConfiguredError; } });
+var agentx_config_1 = require("./config/agentx.config");
+Object.defineProperty(exports, "AgentXConfigHelper", { enumerable: true, get: function () { return agentx_config_1.AgentXConfigHelper; } });
+var config_constants_1 = require("./config/constant/config.constants");
+Object.defineProperty(exports, "TRANSCODE_CONSTANTS", { enumerable: true, get: function () { return config_constants_1.TRANSCODE_CONSTANTS; } });
+Object.defineProperty(exports, "SUPPORTED_VIDEO_FORMATS", { enumerable: true, get: function () { return config_constants_1.SUPPORTED_VIDEO_FORMATS; } });
+Object.defineProperty(exports, "SUPPORTED_AUDIO_FORMATS", { enumerable: true, get: function () { return config_constants_1.SUPPORTED_AUDIO_FORMATS; } });
+Object.defineProperty(exports, "SUPPORTED_IMAGE_FORMATS", { enumerable: true, get: function () { return config_constants_1.SUPPORTED_IMAGE_FORMATS; } });
+__exportStar(require("./filter/exception/api.exception"), exports);
+// Prisma utilities (moved from @dofe/infra-utils)
+__exportStar(require("./utils/prisma-error.util"), exports);
+__exportStar(require("./utils/audit-signature.util"), exports);
+__exportStar(require("./utils/audit-log-helper.util"), exports);
+__exportStar(require("./decorators/api-key/api-key.decorator"), exports);
+__exportStar(require("./decorators/app-version/app-version.interceptor"), exports);
+__exportStar(require("./decorators/app-version/app-version.module"), exports);
+__exportStar(require("./decorators/app-version/app-version.service"), exports);
+__exportStar(require("./decorators/audit-log.decorator"), exports);
+__exportStar(require("./decorators/cache/cache.decorator"), exports);
+__exportStar(require("./decorators/data-visibility"), exports);
+__exportStar(require("./decorators/cache/cache.interceptor"), exports);
+__exportStar(require("./decorators/cache/cache.module"), exports);
+__exportStar(require("./decorators/event/event.decorator"), exports);
+__exportStar(require("./decorators/event/event.interceptor"), exports);
+__exportStar(require("./decorators/event/event.module"), exports);
+__exportStar(require("./decorators/feature-flag/feature-flag.decorator"), exports);
+__exportStar(require("./decorators/feature-flag/feature-flag.interceptor"), exports);
+__exportStar(require("./decorators/feature-flag/feature-flag.module"), exports);
+__exportStar(require("./decorators/feature-flag/feature-flag.service"), exports);
+__exportStar(require("./decorators/rate-limit/rate-limit.decorator"), exports);
+__exportStar(require("./decorators/rate-limit/rate-limit.module"), exports);
+__exportStar(require("./decorators/rate-limit/rate-limit.service"), exports);
+__exportStar(require("./decorators/response.decorator"), exports);
+__exportStar(require("./decorators/tenant/tenant.decorator"), exports);
+__exportStar(require("./decorators/transaction/transactional.decorator"), exports);
+__exportStar(require("./decorators/ts-rest-controller.decorator"), exports);
+__exportStar(require("./decorators/validation.decorator"), exports);
+__exportStar(require("./decorators/version/version.decorator"), exports);
+__exportStar(require("./decorators/version/version.interceptor"), exports);
+__exportStar(require("./decorators/version/version.module"), exports);
+__exportStar(require("./guards/api-key.guard"), exports);
+__exportStar(require("./guards/auth.guard"), exports);
+__exportStar(require("./guards/data-visibility.guard"), exports);
+__exportStar(require("./guards/permission.guard"), exports);
+__exportStar(require("./guards/tenant-context.guard"), exports);
+__exportStar(require("./guards/version.guard"), exports);
+__exportStar(require("./middleware/request.middleware"), exports);
+__exportStar(require("./interceptor/audit/audit-log.interceptor"), exports);
+__exportStar(require("./interceptor/mask/mask.interceptor"), exports);
+__exportStar(require("./interceptor/rate-limit/no-rate-limit.interceptor"), exports);
+__exportStar(require("./interceptor/rate-limit/rate-limit.interceptor"), exports);
+__exportStar(require("./interceptor/transform/transform.interceptor"), exports);
+__exportStar(require("./interceptor/version/version-header.interceptor"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,uDAAqC;AACrC,8DAA4C;AAC5C,wDAAgG;AAAvF,8GAAA,aAAa,OAAA;AAAE,+GAAA,cAAc,OAAA;AAAE,6GAAA,YAAY,OAAA;AAAE,0GAAA,SAAS,OAAA;AAQ/D,sDAAsG;AAA7F,sGAAA,QAAQ,OAAA;AAAE,qGAAA,OAAO,OAAA;AAAE,oGAAA,MAAM,OAAA;AAAgB,gHAAA,kBAAkB,OAAA;AACpE,8CAA8D;AAArD,qHAAA,yBAAyB,OAAA;AAClC,wDAA4D;AAAnD,mHAAA,kBAAkB,OAAA;AAC3B,uEAAoJ;AAA3I,uHAAA,mBAAmB,OAAA;AAAE,2HAAA,uBAAuB,OAAA;AAAE,2HAAA,uBAAuB,OAAA;AAAE,2HAAA,uBAAuB,OAAA;AACvG,mEAAiD;AAEjD,kDAAkD;AAClD,4DAA0C;AAC1C,+DAA6C;AAC7C,gEAA8C;AAE9C,yEAAuD;AACvD,mFAAiE;AACjE,8EAA4D;AAC5D,+EAA6D;AAC7D,mEAAiD;AACjD,qEAAmD;AACnD,+DAA6C;AAC7C,uEAAqD;AACrD,kEAAgD;AAChD,qEAAmD;AACnD,uEAAqD;AACrD,kEAAgD;AAChD,mFAAiE;AACjE,qFAAmE;AACnE,gFAA8D;AAC9D,iFAA+D;AAC/D,+EAA6D;AAC7D,4EAA0D;AAC1D,6EAA2D;AAC3D,kEAAgD;AAChD,uEAAqD;AACrD,mFAAiE;AACjE,4EAA0D;AAC1D,oEAAkD;AAClD,yEAAuD;AACvD,2EAAyD;AACzD,sEAAoD;AAEpD,yDAAuC;AACvC,sDAAoC;AACpC,iEAA+C;AAC/C,4DAA0C;AAC1C,gEAA8C;AAC9C,yDAAuC;AAEvC,kEAAgD;AAChD,4EAA0D;AAC1D,sEAAoD;AACpD,qFAAmE;AACnE,kFAAgE;AAChE,gFAA8D;AAC9D,mFAAiE"}

package/dist/interceptor/audit/audit-log.interceptor.d.ts

@@ -0,0 +1,16 @@
+import { NestInterceptor, ExecutionContext, CallHandler } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Observable } from 'rxjs';
+import { Logger } from 'winston';
+import { OperateLogService } from '@app/db';
+export declare class AuditLogInterceptor implements NestInterceptor {
+    private readonly reflector;
+    private readonly logger;
+    private readonly operateLogService?;
+    constructor(reflector: Reflector, logger: Logger, operateLogService?: OperateLogService);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+    private extractContext;
+    private extractValue;
+    private recordLog;
+}
+//# sourceMappingURL=audit-log.interceptor.d.ts.map

package/dist/interceptor/audit/audit-log.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.interceptor.d.ts","sourceRoot":"","sources":["../../../src/interceptor/audit/audit-log.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,WAAW,EAIZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAuB,MAAM,MAAM,CAAC;AAGvD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,qBACa,mBAAoB,YAAW,eAAe;IAEvD,OAAO,CAAC,QAAQ,CAAC,SAAS;IACO,OAAO,CAAC,QAAQ,CAAC,MAAM;IAGxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAJlB,SAAS,EAAE,SAAS,EACa,MAAM,EAAE,MAAM,EAG/C,iBAAiB,CAAC,EAAE,iBAAiB;IAGxD,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;IAuE5E,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,YAAY;YAmBN,SAAS;CAgDxB"}

package/dist/interceptor/audit/audit-log.interceptor.js

@@ -0,0 +1,156 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const rxjs_1 = require("rxjs");
+const nest_winston_1 = require("nest-winston");
+const winston_1 = require("winston");
+const audit_log_decorator_1 = require("../../decorators/audit-log.decorator");
+const db_1 = require("@app/db");
+let AuditLogInterceptor = class AuditLogInterceptor {
+    reflector;
+    logger;
+    operateLogService;
+    constructor(reflector, logger, operateLogService) {
+        this.reflector = reflector;
+        this.logger = logger;
+        this.operateLogService = operateLogService;
+    }
+    intercept(context, next) {
+        const auditOptions = this.reflector.getAllAndOverride(audit_log_decorator_1.AUDIT_LOG_KEY, [context.getHandler(), context.getClass()]);
+        if (!auditOptions) {
+            return next.handle();
+        }
+        const request = context.switchToHttp().getRequest();
+        const { user, tenantId } = this.extractContext(request);
+        if (!user?.id) {
+            this.logger.warn('[AuditLog] No user context, skipping audit log');
+            return next.handle();
+        }
+        const startTime = Date.now();
+        const targetId = this.extractValue(request, auditOptions.targetIdPath);
+        const targetName = this.extractValue(request, auditOptions.targetNamePath);
+        return next.handle().pipe((0, rxjs_1.tap)(async (response) => {
+            await this.recordLog({
+                auditOptions,
+                userId: user.id,
+                tenantId: tenantId || null,
+                targetId,
+                targetName,
+                request,
+                result: 'success',
+                afterData: response,
+            });
+            this.logger.info('[AuditLog] Operation completed', {
+                operateType: auditOptions.operateType,
+                target: auditOptions.target,
+                targetId,
+                userId: user.id,
+                tenantId,
+                duration: Date.now() - startTime,
+            });
+        }), (0, rxjs_1.catchError)(async (error) => {
+            await this.recordLog({
+                auditOptions,
+                userId: user.id,
+                tenantId: tenantId || null,
+                targetId,
+                targetName,
+                request,
+                result: 'failure',
+                errorMessage: error.message,
+            });
+            this.logger.error('[AuditLog] Operation failed', {
+                operateType: auditOptions.operateType,
+                target: auditOptions.target,
+                targetId,
+                userId: user.id,
+                tenantId,
+                error: error.message,
+                duration: Date.now() - startTime,
+            });
+            throw error;
+        }));
+    }
+    extractContext(request) {
+        // 从 request 中提取用户和租户信息
+        // 这些信息通常由认证中间件注入
+        const user = request.user;
+        const tenantId = request.tenantId;
+        return { user, tenantId };
+    }
+    extractValue(request, path) {
+        if (!path)
+            return undefined;
+        const parts = path.split('.');
+        let value = request;
+        for (const part of parts) {
+            if (value === undefined || value === null)
+                return undefined;
+            value = value[part];
+        }
+        if (value === undefined || value === null)
+            return undefined;
+        if (typeof value === 'string')
+            return value;
+        return String(value);
+    }
+    async recordLog(params) {
+        if (!this.operateLogService) {
+            this.logger.warn('[AuditLog] OperateLogService not available');
+            return;
+        }
+        try {
+            const data = {
+                operateType: params.auditOptions.operateType,
+                target: params.auditOptions.target,
+                targetId: params.targetId,
+                targetName: params.targetName,
+                detail: params.auditOptions.description
+                    ? { description: params.auditOptions.description }
+                    : undefined,
+                beforeData: params.beforeData,
+                afterData: params.afterData,
+                ipAddress: params.request.ip,
+                userAgent: params.request.headers['user-agent'],
+                traceId: params.request.traceId,
+                result: params.result,
+                errorMessage: params.errorMessage,
+            };
+            if (params.tenantId) {
+                data.tenant = { connect: { id: params.tenantId } };
+            }
+            data.user = { connect: { id: params.userId } };
+            await this.operateLogService.create(data);
+        }
+        catch (error) {
+            this.logger.error('[AuditLog] Failed to record audit log', {
+                error: error.message,
+            });
+        }
+    }
+};
+exports.AuditLogInterceptor = AuditLogInterceptor;
+exports.AuditLogInterceptor = AuditLogInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(nest_winston_1.WINSTON_MODULE_PROVIDER)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(db_1.OperateLogService)),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        winston_1.Logger,
+        db_1.OperateLogService])
+], AuditLogInterceptor);
+//# sourceMappingURL=audit-log.interceptor.js.map

package/dist/interceptor/audit/audit-log.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.interceptor.js","sourceRoot":"","sources":["../../../src/interceptor/audit/audit-log.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,uCAAyC;AACzC,+BAAuD;AAEvD,+CAAuD;AACvD,qCAAiC;AACjC,8EAG8C;AAC9C,gCAA4C;AAGrC,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEX;IACiC;IAGjC;IALnB,YACmB,SAAoB,EACa,MAAc,EAG/C,iBAAqC;QAJrC,cAAS,GAAT,SAAS,CAAW;QACa,WAAM,GAAN,MAAM,CAAQ;QAG/C,sBAAiB,GAAjB,iBAAiB,CAAoB;IACrD,CAAC;IAEJ,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACnD,mCAAa,EACb,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QACpE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACrB,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,YAAY;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ,IAAI,IAAI;gBAC1B,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBACjD,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ;gBACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,EACF,IAAA,iBAAU,EAAC,KAAK,EAAE,KAAY,EAAE,EAAE;YAChC,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,YAAY;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ,IAAI,IAAI;gBAC1B,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,KAAK,CAAC,OAAO;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC/C,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ;gBACR,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,OAAuB;QAI5C,uBAAuB;QACvB,iBAAiB;QACjB,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QACnC,MAAM,QAAQ,GAAI,OAAe,CAAC,QAAQ,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAClB,OAAuB,EACvB,IAAa;QAEb,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,GAAQ,OAAO,CAAC;QAEzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5D,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAWvB;QACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAQ;gBAChB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW;gBAC5C,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW;oBACrC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;oBAClD,CAAC,CAAC,SAAS;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;gBAC5B,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC/C,OAAO,EAAG,MAAM,CAAC,OAAe,CAAC,OAAO;gBACxC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrD,CAAC;YAED,IAAI,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAE/C,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACzD,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AA9JY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,sCAAuB,CAAC,CAAA;IAC/B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,sBAAiB,CAAC,CAAA;qCAHE,gBAAS;QACqB,gBAAM;QAG3B,sBAAiB;GAN7C,mBAAmB,CA8J/B"}

package/dist/interceptor/audit/index.d.ts

@@ -0,0 +1,2 @@
+export * from './audit-log.interceptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/interceptor/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/interceptor/audit/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/interceptor/audit/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./audit-log.interceptor"), exports);
+//# sourceMappingURL=index.js.map

package/dist/interceptor/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/interceptor/audit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC"}

package/dist/interceptor/mask/index.d.ts

@@ -0,0 +1,2 @@
+export * from './mask.interceptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/interceptor/mask/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/interceptor/mask/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}

package/dist/interceptor/mask/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./mask.interceptor"), exports);
+//# sourceMappingURL=index.js.map

package/dist/interceptor/mask/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/interceptor/mask/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC"}

package/dist/interceptor/mask/mask.interceptor.d.ts

@@ -0,0 +1,79 @@
+import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Observable } from 'rxjs';
+/**
+ * 脱敏配置元数据 Key
+ */
+export declare const MASK_CONFIG_KEY = "mask:config";
+/**
+ * 脱敏字段配置
+ */
+export interface MaskFieldConfig {
+    /** 字段路径（支持嵌套，如 'user.email'） */
+    field: string;
+    /** 脱敏类型 */
+    type: 'email' | 'mobile' | 'phone' | 'idCard' | 'bankCard' | 'name' | 'address' | 'ip' | 'token' | 'password' | 'custom';
+    /** 自定义脱敏函数（当 type 为 'custom' 时使用） */
+    maskFn?: (value: string) => string;
+}
+/**
+ * 脱敏配置
+ */
+export interface MaskConfig {
+    /** 是否启用自动脱敏（根据字段名自动识别敏感数据） */
+    auto?: boolean;
+    /** 指定字段脱敏配置 */
+    fields?: MaskFieldConfig[];
+    /** 额外需要脱敏的字段名列表 */
+    additionalSensitiveFields?: string[];
+}
+/**
+ * 脱敏装饰器
+ * @param config 脱敏配置
+ *
+ * @example
+ * ```typescript
+ * // 自动脱敏
+ * @Mask({ auto: true })
+ * @Get('users')
+ * async getUsers() { ... }
+ *
+ * // 指定字段脱敏
+ * @Mask({
+ *   fields: [
+ *     { field: 'email', type: 'email' },
+ *     { field: 'phone', type: 'phone' },
+ *   ]
+ * })
+ * @Get('user/:id')
+ * async getUser() { ... }
+ * ```
+ */
+export declare const Mask: (config?: MaskConfig) => import("@nestjs/common").CustomDecorator<string>;
+/**
+ * 跳过脱敏装饰器
+ */
+export declare const SkipMask: () => import("@nestjs/common").CustomDecorator<string>;
+/**
+ * 数据脱敏拦截器
+ *
+ * 用于在 API 响应中自动脱敏敏感数据。
+ *
+ * @example
+ * ```typescript
+ * // 在 Controller 中使用
+ * @UseInterceptors(MaskInterceptor)
+ * @Mask({ auto: true })
+ * @Get('users')
+ * async getUsers() { ... }
+ *
+ * // 全局使用
+ * app.useGlobalInterceptors(new MaskInterceptor(reflector));
+ * ```
+ */
+export declare class MaskInterceptor implements NestInterceptor {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<any>;
+}
+//# sourceMappingURL=mask.interceptor.d.ts.map

package/dist/interceptor/mask/mask.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.interceptor.d.ts","sourceRoot":"","sources":["../../../src/interceptor/mask/mask.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAEhB,eAAe,EAEhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAIlC;;GAEG;AACH,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW;IACX,IAAI,EACA,OAAO,GACP,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,UAAU,GACV,MAAM,GACN,SAAS,GACT,IAAI,GACJ,OAAO,GACP,UAAU,GACV,QAAQ,CAAC;IACb,qCAAqC;IACrC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe;IACf,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,mBAAmB;IACnB,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,IAAI,GAAI,SAAQ,UAA2B,qDAClB,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,QAAQ,wDAAqD,CAAC;AAqH3E;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,eAAgB,YAAW,eAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAEjD,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC;CAuBzE"}