@dofe/infra-common 0.1.1

package/dist/utils/audit-log-helper.util.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareAuditLogWithSignature = prepareAuditLogWithSignature;
+exports.verifyAuditLogSignature = verifyAuditLogSignature;
+const audit_signature_util_1 = require("./audit-signature.util");
+const infra_utils_1 = require("@dofe/infra-utils");
+const env_config_service_1 = require("@/config/env-config.service");
+/**
+ * 从 Prisma 创建输入中提取签名载荷
+ */
+function extractSignaturePayload(data) {
+    return {
+        userId: extractUserId(data),
+        operateType: data.operateType,
+        target: data.target,
+        targetId: extractTargetId(data),
+        targetName: data.targetName ?? null,
+        createdAt: data.createdAt ?? new Date(),
+        tenantId: extractTenantId(data),
+        result: data.result ?? 'success',
+    };
+}
+/**
+ * 从 Prisma 关联数据中提取用户 ID
+ */
+function extractUserId(data) {
+    if (data.user?.connect?.id) {
+        return data.user.connect.id;
+    }
+    throw new Error('OperateLog must have user.connect.id');
+}
+/**
+ * 从 Prisma 关联数据中提取目标 ID
+ */
+function extractTargetId(data) {
+    return data.targetId ?? null;
+}
+/**
+ * 从 Prisma 关联数据中提取租户 ID
+ */
+function extractTenantId(data) {
+    if (data.tenant?.connect?.id) {
+        return data.tenant.connect.id;
+    }
+    return null;
+}
+/**
+ * 脱敏审计日志中的敏感字段
+ */
+function maskDetailFields(detail) {
+    if (!detail || typeof detail !== 'object') {
+        return detail;
+    }
+    // 可通过环境变量关闭脱敏（不建议生产环境关闭）
+    if (env_config_service_1.auditConfig.maskEnabled === false) {
+        return detail;
+    }
+    // 对 detail 对象进行脱敏处理
+    return (0, infra_utils_1.maskSensitiveData)(detail);
+}
+/**
+ * 为审计日志数据添加签名并脱敏敏感数据
+ *
+ * @param data Prisma 创建输入数据
+ * @returns 带签名且脱敏后的数据
+ *
+ * @example
+ * ```typescript
+ * const data = prepareAuditLogWithSignature({
+ *   user: { connect: { id: userId } },
+ *   operateType: 'CREATE',
+ *   target: 'BOT',
+ *   targetId: botId,
+ *   detail: { apiKey: 'sk-xxxx' }, // 会被脱敏为 { apiKey: 'sk-***' }
+ * });
+ *
+ * await operateLogService.create(data);
+ * ```
+ */
+function prepareAuditLogWithSignature(data) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const payload = extractSignaturePayload(data);
+    const signature = (0, audit_signature_util_1.generateAuditSignature)(payload);
+    // 脱敏 detail 字段中的敏感数据
+    const maskedDetail = maskDetailFields(data.detail);
+    return {
+        ...data,
+        detail: maskedDetail,
+        signature,
+    };
+}
+/**
+ * 验证审计日志记录的签名
+ *
+ * @param log 审计日志记录
+ * @returns 验证是否通过
+ */
+function verifyAuditLogSignature(log) {
+    if (!log.signature) {
+        return false;
+    }
+    const payload = {
+        userId: log.userId,
+        operateType: log.operateType,
+        target: log.target,
+        targetId: log.targetId ?? null,
+        targetName: log.targetName ?? null,
+        createdAt: log.createdAt,
+        tenantId: log.tenant?.connect?.id ?? null,
+        result: log.result ?? 'success',
+    };
+    const { verifyAuditSignature: verify } = require('./audit-signature.util');
+    return verify(payload, log.signature);
+}
+//# sourceMappingURL=audit-log-helper.util.js.map

package/dist/utils/audit-log-helper.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log-helper.util.js","sourceRoot":"","sources":["../../src/utils/audit-log-helper.util.ts"],"names":[],"mappings":";;AA2GA,oEAeC;AAQD,0DA8BC;AArJD,iEAGgC;AAChC,mDAAsD;AACtD,oEAA0D;AAM1D;;GAEG;AACH,SAAS,uBAAuB,CAC9B,IAAkB;IAElB,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAqB;QACvC,MAAM,EAAE,IAAI,CAAC,MAAgB;QAC7B,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC;QAC/B,UAAU,EAAG,IAAY,CAAC,UAAU,IAAI,IAAI;QAC5C,SAAS,EAAG,IAAY,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE;QAChD,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;KACjC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAkB;IACvC,IAAI,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAkB;IACzC,OAAQ,IAAY,CAAC,QAAQ,IAAI,IAAI,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAkB;IACzC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,MAAyC;IAEzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yBAAyB;IACzB,IAAI,gCAAW,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB;IACpB,OAAO,IAAA,+BAAiB,EACtB,MAAiC,CACT,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,4BAA4B,CAC1C,IAAO;IAEP,8DAA8D;IAC9D,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAW,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAA,6CAAsB,EAAC,OAAO,CAAC,CAAC;IAElD,qBAAqB;IACrB,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;IAE5E,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,YAAY;QACpB,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,GAUC;IAED,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAA0B;QACrC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,WAAqB;QACtC,MAAM,EAAE,GAAG,CAAC,MAAgB;QAC5B,QAAQ,EAAG,GAAG,CAAC,QAAmB,IAAI,IAAI;QAC1C,UAAU,EAAG,GAAG,CAAC,UAAqB,IAAI,IAAI;QAC9C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;QACzC,MAAM,EAAG,GAAG,CAAC,MAAiB,IAAI,SAAS;KAC5C,CAAC;IAEF,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC"}

package/dist/utils/audit-signature.util.d.ts

@@ -0,0 +1,64 @@
+/**
+ * 审计日志签名字段
+ */
+export interface AuditSignaturePayload {
+    /** 用户 ID */
+    userId: string;
+    /** 操作类型 */
+    operateType: string;
+    /** 操作目标 */
+    target: string;
+    /** 目标 ID */
+    targetId?: string | null;
+    /** 目标名称 */
+    targetName?: string | null;
+    /** 创建时间（ISO 字符串） */
+    createdAt: string | Date;
+    /** 租户 ID */
+    tenantId?: string | null;
+    /** 操作结果 */
+    result?: string;
+    /** 父事件 ID（因果链） */
+    parentEventId?: string | null;
+    /** 关联 ID（跨系统追踪） */
+    correlationId?: string | null;
+    /** 事件哈希 */
+    eventHash?: string | null;
+}
+/**
+ * 生成审计日志签名
+ *
+ * @param payload 签名载荷
+ * @returns HMAC-SHA256 签名（十六进制）
+ */
+export declare function generateAuditSignature(payload: AuditSignaturePayload): string;
+/**
+ * 验证审计日志签名
+ *
+ * @param payload 签名载荷
+ * @param signature 待验证的签名
+ * @returns 验证结果
+ */
+export declare function verifyAuditSignature(payload: AuditSignaturePayload, signature: string): boolean;
+/**
+ * 重新计算签名（用于数据修复）
+ * 仅当需要修复损坏的签名时使用
+ *
+ * @param payload 签名载荷
+ * @returns 新签名
+ */
+export declare function recalculateSignature(payload: AuditSignaturePayload): string;
+/**
+ * 批量验证审计日志签名
+ *
+ * @param logs 日志列表
+ * @returns 验证结果列表
+ */
+export declare function batchVerifySignatures(logs: Array<AuditSignaturePayload & {
+    signature?: string | null;
+}>): Array<{
+    id?: string;
+    valid: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=audit-signature.util.d.ts.map

package/dist/utils/audit-signature.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-signature.util.d.ts","sourceRoot":"","sources":["../../src/utils/audit-signature.util.ts"],"names":[],"mappings":"AAkCA;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW;IACX,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oBAAoB;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,kBAAkB;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB;IACnB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW;IACX,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAQ7E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAiBT;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,KAAK,CAAC,qBAAqB,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GACjE,KAAK,CAAC;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBxD"}

package/dist/utils/audit-signature.util.js

@@ -0,0 +1,155 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAuditSignature = generateAuditSignature;
+exports.verifyAuditSignature = verifyAuditSignature;
+exports.recalculateSignature = recalculateSignature;
+exports.batchVerifySignatures = batchVerifySignatures;
+/**
+ * Audit Signature Utility
+ *
+ * 提供审计日志签名生成和验证功能，防止日志被篡改
+ *
+ * 签名算法：HMAC-SHA256
+ * 签名内容：关键字段按固定顺序拼接
+ *
+ * 使用方式：
+ * 1. 创建日志时调用 generateAuditSignature() 生成签名
+ * 2. 验证日志时调用 verifyAuditSignature() 验证完整性
+ */
+const crypto = __importStar(require("crypto"));
+const env_config_service_1 = require("@/config/env-config.service");
+/** 默认签名密钥（仅开发环境使用） */
+const DEFAULT_SECRET = 'dev-audit-signature-secret-change-in-production';
+/**
+ * 获取签名密钥
+ */
+function getSecretKey() {
+    const secret = env_config_service_1.auditConfig.signatureSecret;
+    if (!secret) {
+        if ((0, env_config_service_1.isProduction)()) {
+            throw new Error('Missing AUDIT_SIGNATURE_SECRET environment variable in production');
+        }
+        return DEFAULT_SECRET;
+    }
+    return secret;
+}
+/**
+ * 构建签名字符串
+ * 按固定顺序拼接关键字段，确保签名一致性
+ */
+function buildSignatureString(payload) {
+    const parts = [
+        `userId:${payload.userId}`,
+        `operateType:${payload.operateType}`,
+        `target:${payload.target}`,
+        `targetId:${payload.targetId ?? ''}`,
+        `targetName:${payload.targetName ?? ''}`,
+        `createdAt:${payload.createdAt instanceof Date ? payload.createdAt.toISOString() : payload.createdAt}`,
+        `tenantId:${payload.tenantId ?? ''}`,
+        `result:${payload.result ?? 'success'}`,
+        // Q1 2027 审计链增强字段
+        `parentEventId:${payload.parentEventId ?? ''}`,
+        `correlationId:${payload.correlationId ?? ''}`,
+        `eventHash:${payload.eventHash ?? ''}`,
+    ];
+    return parts.join('|');
+}
+/**
+ * 生成审计日志签名
+ *
+ * @param payload 签名载荷
+ * @returns HMAC-SHA256 签名（十六进制）
+ */
+function generateAuditSignature(payload) {
+    const secret = getSecretKey();
+    const signatureString = buildSignatureString(payload);
+    const signature = crypto
+        .createHmac('sha256', secret)
+        .update(signatureString)
+        .digest('hex');
+    return signature;
+}
+/**
+ * 验证审计日志签名
+ *
+ * @param payload 签名载荷
+ * @param signature 待验证的签名
+ * @returns 验证结果
+ */
+function verifyAuditSignature(payload, signature) {
+    if (!signature) {
+        return false;
+    }
+    const expectedSignature = generateAuditSignature(payload);
+    // 使用常量时间比较防止时序攻击
+    try {
+        return crypto.timingSafeEqual(Buffer.from(signature, 'hex'), Buffer.from(expectedSignature, 'hex'));
+    }
+    catch {
+        // 签名长度不匹配或格式错误
+        return false;
+    }
+}
+/**
+ * 重新计算签名（用于数据修复）
+ * 仅当需要修复损坏的签名时使用
+ *
+ * @param payload 签名载荷
+ * @returns 新签名
+ */
+function recalculateSignature(payload) {
+    return generateAuditSignature(payload);
+}
+/**
+ * 批量验证审计日志签名
+ *
+ * @param logs 日志列表
+ * @returns 验证结果列表
+ */
+function batchVerifySignatures(logs) {
+    return logs.map((log) => {
+        if (!log.signature) {
+            return { valid: false, error: 'Missing signature' };
+        }
+        const { signature, ...payload } = log;
+        const isValid = verifyAuditSignature(payload, signature);
+        return {
+            valid: isValid,
+            error: isValid ? undefined : 'Signature mismatch',
+        };
+    });
+}
+//# sourceMappingURL=audit-signature.util.js.map

package/dist/utils/audit-signature.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-signature.util.js","sourceRoot":"","sources":["../../src/utils/audit-signature.util.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2FA,wDAQC;AASD,oDAoBC;AASD,oDAEC;AAQD,sDAmBC;AAtKD;;;;;;;;;;;GAWG;AACH,+CAAiC;AACjC,oEAAwE;AAExE,sBAAsB;AACtB,MAAM,cAAc,GAAG,iDAAiD,CAAC;AAEzE;;GAEG;AACH,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,gCAAW,CAAC,eAAe,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAA,iCAAY,GAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA+BD;;;GAGG;AACH,SAAS,oBAAoB,CAAC,OAA8B;IAC1D,MAAM,KAAK,GAAG;QACZ,UAAU,OAAO,CAAC,MAAM,EAAE;QAC1B,eAAe,OAAO,CAAC,WAAW,EAAE;QACpC,UAAU,OAAO,CAAC,MAAM,EAAE;QAC1B,YAAY,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;QACpC,cAAc,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE;QACxC,aAAa,OAAO,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;QACtG,YAAY,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;QACpC,UAAU,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE;QACvC,kBAAkB;QAClB,iBAAiB,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE;QAC9C,iBAAiB,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE;QAC9C,aAAa,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE;KACvC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,OAA8B;IACnE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAClC,OAA8B,EAC9B,SAAiB;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE1D,iBAAiB;IACjB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;QACf,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,OAA8B;IACjE,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,IAAkE;IAElE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;QACtC,MAAM,OAAO,GAAG,oBAAoB,CAClC,OAAgC,EAChC,SAAS,CACV,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;SAClD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/prisma-error.util.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Prisma Error Handler Utility
+ * 统一处理 Prisma 数据库操作错误
+ *
+ * 使用四种错误码区分操作类型：
+ * - DbCreateError: 创建操作失败
+ * - DbUpdateError: 更新操作失败
+ * - DbDeleteError: 删除操作失败
+ * - DbQueryError: 查询操作失败
+ *
+ * 具体错误详情通过 ApiException 的 data 字段返回
+ */
+/**
+ * 数据库操作类型
+ */
+export declare enum DbOperationType {
+    CREATE = "create",
+    UPDATE = "update",
+    DELETE = "delete",
+    QUERY = "query"
+}
+/**
+ * Prisma 错误类型枚举
+ */
+export declare enum PrismaErrorType {
+    UNIQUE_CONSTRAINT = "UNIQUE_CONSTRAINT",// P2002 - 唯一约束冲突
+    FOREIGN_KEY_CONSTRAINT = "FOREIGN_KEY_CONSTRAINT",// P2003 - 外键约束失败
+    CONSTRAINT_FAILED = "CONSTRAINT_FAILED",// P2004 - 约束失败
+    RECORD_NOT_FOUND = "RECORD_NOT_FOUND",// P2025 - 记录不存在
+    REQUIRED_RELATION_VIOLATION = "REQUIRED_RELATION_VIOLATION",// P2014 - 必需关系违规
+    RELATED_RECORD_NOT_FOUND = "RELATED_RECORD_NOT_FOUND",// P2015 - 关联记录不存在
+    QUERY_INTERPRETATION_ERROR = "QUERY_INTERPRETATION_ERROR",// P2016 - 查询解释错误
+    RECORDS_NOT_CONNECTED = "RECORDS_NOT_CONNECTED",// P2017 - 记录未连接
+    REQUIRED_CONNECTED_RECORDS_NOT_FOUND = "REQUIRED_CONNECTED_RECORDS_NOT_FOUND",// P2018 - 必需连接记录不存在
+    INPUT_ERROR = "INPUT_ERROR",// P2019 - 输入错误
+    VALUE_TOO_LONG = "VALUE_TOO_LONG",// P2000 - 值过长
+    NULL_CONSTRAINT = "NULL_CONSTRAINT",// P2011 - 非空约束违规
+    MISSING_REQUIRED_VALUE = "MISSING_REQUIRED_VALUE",// P2012 - 缺少必需值
+    TRANSACTION_CONFLICT = "TRANSACTION_CONFLICT",// P2034 - 事务写冲突/死锁
+    TRANSACTION_API_ERROR = "TRANSACTION_API_ERROR",// P2028 - 事务 API 错误
+    CONNECTION_ERROR = "CONNECTION_ERROR",// 数据库连接错误
+    VALIDATION_ERROR = "VALIDATION_ERROR",// 查询验证错误
+    UNKNOWN_ERROR = "UNKNOWN_ERROR"
+}
+/**
+ * Prisma 错误详情接口
+ */
+export interface PrismaErrorDetail {
+    /** 错误类型 */
+    type: PrismaErrorType;
+    /** 原始 Prisma 错误码 */
+    prismaCode?: string;
+    /** 错误描述 */
+    description: string;
+    /** 相关字段（如唯一约束冲突时的字段名） */
+    fields?: string[];
+    /** 相关模型名 */
+    model?: string;
+    /** 目标对象（用于约束错误） */
+    target?: string | string[];
+    /** 原始错误消息 */
+    originalMessage?: string;
+}
+/**
+ * Prisma 错误处理器
+ *
+ * @example
+ * ```typescript
+ * // 在 Service 中使用
+ * async createUser(data: CreateUserInput) {
+ *   try {
+ *     return await this.prisma.write.user.create({ data });
+ *   } catch (error) {
+ *     PrismaErrorHandler.handle(error, DbOperationType.CREATE);
+ *   }
+ * }
+ *
+ * // 使用便捷方法
+ * async updateUser(id: string, data: UpdateUserInput) {
+ *   try {
+ *     return await this.prisma.write.user.update({ where: { id }, data });
+ *   } catch (error) {
+ *     PrismaErrorHandler.handleUpdate(error);
+ *   }
+ * }
+ * ```
+ */
+export declare class PrismaErrorHandler {
+    /**
+     * 处理 Prisma 错误并抛出 ApiException
+     * @param error 原始错误
+     * @param operationType 操作类型
+     * @throws ApiException
+     */
+    static handle(error: unknown, operationType: DbOperationType): never;
+    /**
+     * 处理创建操作错误
+     */
+    static handleCreate(error: unknown): never;
+    /**
+     * 处理更新操作错误
+     */
+    static handleUpdate(error: unknown): never;
+    /**
+     * 处理删除操作错误
+     */
+    static handleDelete(error: unknown): never;
+    /**
+     * 处理查询操作错误
+     */
+    static handleQuery(error: unknown): never;
+    /**
+     * 解析 Prisma 错误，提取详细信息
+     */
+    static parseError(error: unknown): PrismaErrorDetail;
+    /**
+     * 解析 Prisma 已知请求错误
+     */
+    private static parseKnownRequestError;
+    /**
+     * 判断错误是否为 Prisma 错误
+     */
+    static isPrismaError(error: unknown): boolean;
+    /**
+     * 判断是否为可重试的错误（事务冲突/死锁）
+     */
+    static isRetryableError(error: unknown): boolean;
+    /**
+     * 判断是否为唯一约束冲突错误
+     */
+    static isUniqueConstraintError(error: unknown): boolean;
+    /**
+     * 判断是否为记录不存在错误
+     */
+    static isRecordNotFoundError(error: unknown): boolean;
+    /**
+     * 判断是否为外键约束错误
+     */
+    static isForeignKeyError(error: unknown): boolean;
+    /**
+     * 获取唯一约束冲突的字段名
+     */
+    static getUniqueConstraintFields(error: unknown): string[] | null;
+}
+/**
+ * 便捷的错误处理装饰器工厂函数
+ * 用于自动捕获并处理 Prisma 错误
+ *
+ * @example
+ * ```typescript
+ * class UserService {
+ *   @HandlePrismaError(DbOperationType.CREATE)
+ *   async createUser(data: CreateUserInput) {
+ *     return await this.prisma.write.user.create({ data });
+ *   }
+ * }
+ * ```
+ */
+export declare function HandlePrismaError(operationType: DbOperationType): (_target: object, _propertyKey: string, descriptor: PropertyDescriptor) => PropertyDescriptor;
+//# sourceMappingURL=prisma-error.util.d.ts.map

package/dist/utils/prisma-error.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-error.util.d.ts","sourceRoot":"","sources":["../../src/utils/prisma-error.util.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH;;GAEG;AACH,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,KAAK,UAAU;CAChB;AAED;;GAEG;AACH,oBAAY,eAAe;IAEzB,iBAAiB,sBAAsB,CAAE,iBAAiB;IAC1D,sBAAsB,2BAA2B,CAAE,iBAAiB;IACpE,iBAAiB,sBAAsB,CAAE,eAAe;IACxD,gBAAgB,qBAAqB,CAAE,gBAAgB;IACvD,2BAA2B,gCAAgC,CAAE,iBAAiB;IAC9E,wBAAwB,6BAA6B,CAAE,kBAAkB;IACzE,0BAA0B,+BAA+B,CAAE,iBAAiB;IAC5E,qBAAqB,0BAA0B,CAAE,gBAAgB;IACjE,oCAAoC,yCAAyC,CAAE,oBAAoB;IACnG,WAAW,gBAAgB,CAAE,eAAe;IAC5C,cAAc,mBAAmB,CAAE,cAAc;IACjD,eAAe,oBAAoB,CAAE,iBAAiB;IACtD,sBAAsB,2BAA2B,CAAE,gBAAgB;IACnE,oBAAoB,yBAAyB,CAAE,mBAAmB;IAClE,qBAAqB,0BAA0B,CAAE,oBAAoB;IAGrE,gBAAgB,qBAAqB,CAAE,UAAU;IAGjD,gBAAgB,qBAAqB,CAAE,SAAS;IAGhD,aAAa,kBAAkB;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,oBAAoB;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,aAAa;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA0DD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,kBAAkB;IAC7B;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,GAAG,KAAK;IAOpE;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK;IAI1C;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK;IAI1C;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK;IAI1C;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK;IAIzC;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;IAsCpD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA6CrC;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAU7C;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAUhD;;OAEG;IACH,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQvD;;OAEG;IACH,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQrD;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAQjD;;OAEG;IACH,MAAM,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI;CAclE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,eAAe,IAE5D,SAAS,MAAM,EACf,cAAc,MAAM,EACpB,YAAY,kBAAkB,wBAiBjC"}