@windrun-huaiin/backend-core 14.2.0 → 14.4.0

package/dist/app/api/stripe/checkout/route.js

@@ -9,7 +9,7 @@ require('../../../../prisma/prisma.js');
 require('../../../../services/database/credit.service.js');
 var transaction_service = require('../../../../services/database/transaction.service.js');
 require('@prisma/client');
-var authUtils = require('../../../../lib/auth-utils.js');
+var authUtils = require('../../../../auth/auth-utils.js');
 var moneyPriceConfig = require('../../../../lib/money-price-config.js');
 
 // Request validation schema

package/dist/app/api/stripe/checkout/route.mjs

@@ -7,7 +7,7 @@ import '../../../../prisma/prisma.mjs';
 import '../../../../services/database/credit.service.mjs';
 import { transactionService } from '../../../../services/database/transaction.service.mjs';
 import '@prisma/client';
-import { ApiAuthUtils } from '../../../../lib/auth-utils.mjs';
+import { ApiAuthUtils } from '../../../../auth/auth-utils.mjs';
 import { getPriceConfig } from '../../../../lib/money-price-config.mjs';
 
 // Request validation schema

package/dist/app/api/stripe/customer-portal/route.js

@@ -4,7 +4,7 @@ var tslib_es6 = require('../../../../node_modules/.pnpm/@rollup_plugin-typescrip
 var server = require('next/server');
 var zod = require('zod');
 var stripeConfig = require('../../../../lib/stripe-config.js');
-var authUtils = require('../../../../lib/auth-utils.js');
+var authUtils = require('../../../../auth/auth-utils.js');
 require('../../../../prisma/prisma.js');
 var subscription_service = require('../../../../services/database/subscription.service.js');
 require('../../../../services/database/credit.service.js');

package/dist/app/api/stripe/customer-portal/route.mjs

@@ -2,7 +2,7 @@ import { __awaiter } from '../../../../node_modules/.pnpm/@rollup_plugin-typescr
 import { NextResponse } from 'next/server';
 import { z } from 'zod';
 import { createOrGetCustomer, createCustomerPortalSession } from '../../../../lib/stripe-config.mjs';
-import { ApiAuthUtils } from '../../../../lib/auth-utils.mjs';
+import { ApiAuthUtils } from '../../../../auth/auth-utils.mjs';
 import '../../../../prisma/prisma.mjs';
 import { subscriptionService } from '../../../../services/database/subscription.service.mjs';
 import '../../../../services/database/credit.service.mjs';

package/dist/app/api/user/anonymous/init/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/app/api/user/anonymous/init/route.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA2rBxD;;;GAGG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,kCAE9C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/app/api/user/anonymous/init/route.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4rBxD;;;GAGG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,kCAE9C"}

package/dist/app/api/user/anonymous/init/route.js

@@ -6,6 +6,7 @@ var server = require('@windrun-huaiin/third-ui/fingerprint/server');
 var server$1 = require('@clerk/nextjs/server');
 var server$2 = require('next/server');
 var userContextService = require('../../../../../services/context/user-context-service.js');
+var userContextFinalizer = require('../../../../../services/context/user-context-finalizer.js');
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 // Fix BigInt serialization issue
@@ -16,7 +17,7 @@ BigInt.prototype.toJSON = function () {
 /** 创建成功响应对象 */
 function createSuccessResponse(params) {
     const response = Object.assign({ success: true, xUser: userContextService.mapUserToXUser(params.entities.user), xCredit: params.entities.credit ? userContextService.mapCreditToXCredit(params.entities.credit) : null, xSubscription: userContextService.mapSubscriptionToXSubscription(params.entities.subscription), isNewUser: params.isNewUser }, params.options);
-    return userContextService.applyUserMockContext(response);
+    return userContextFinalizer.finalizeUserContext(response);
 }
 /** 创建错误响应 */
 function createErrorResponse(message, status = 400) {

package/dist/app/api/user/anonymous/init/route.mjs

@@ -3,7 +3,8 @@ import { anonymousAggregateService } from '../../../../../services/aggregate/ano
 import { extractFingerprintFromNextRequest } from '@windrun-huaiin/third-ui/fingerprint/server';
 import { auth } from '@clerk/nextjs/server';
 import { NextResponse } from 'next/server';
-import { fetchUserContextByClerkUserId, fetchLatestUserContextByFingerprintId, mapSubscriptionToXSubscription, mapCreditToXCredit, mapUserToXUser, applyUserMockContext } from '../../../../../services/context/user-context-service.mjs';
+import { fetchUserContextByClerkUserId, fetchLatestUserContextByFingerprintId, mapSubscriptionToXSubscription, mapCreditToXCredit, mapUserToXUser } from '../../../../../services/context/user-context-service.mjs';
+import { finalizeUserContext } from '../../../../../services/context/user-context-finalizer.mjs';
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 // Fix BigInt serialization issue
@@ -14,7 +15,7 @@ BigInt.prototype.toJSON = function () {
 /** 创建成功响应对象 */
 function createSuccessResponse(params) {
     const response = Object.assign({ success: true, xUser: mapUserToXUser(params.entities.user), xCredit: params.entities.credit ? mapCreditToXCredit(params.entities.credit) : null, xSubscription: mapSubscriptionToXSubscription(params.entities.subscription), isNewUser: params.isNewUser }, params.options);
-    return applyUserMockContext(response);
+    return finalizeUserContext(response);
 }
 /** 创建错误响应 */
 function createErrorResponse(message, status = 400) {

package/dist/auth/auth-middleware.d.ts

@@ -0,0 +1,13 @@
+import type { ClerkMiddlewareAuth } from '@clerk/nextjs/server';
+import { NextRequest, NextResponse } from 'next/server';
+import { type ProviderIdentity } from './auth-shared';
+export declare function buildProtectedPageRoutePatterns(protectedRoots: readonly string[], locales: readonly string[]): string[];
+export interface AuthMiddlewareOptions {
+    protectedPageRoutes: (req: NextRequest) => boolean;
+    protectedApiRoutes: (req: NextRequest) => boolean;
+    publicApiRoutes: (req: NextRequest) => boolean;
+    intlMiddleware: (req: NextRequest) => ReturnType<typeof NextResponse.next> | Response | undefined;
+}
+export declare function buildAuthenticatedRequestHeaders(req: NextRequest, auth: ProviderIdentity): Headers;
+export declare function handleAuthMiddleware(auth: ClerkMiddlewareAuth, req: NextRequest, options: AuthMiddlewareOptions): Promise<Response | null | undefined>;
+//# sourceMappingURL=auth-middleware.d.ts.map

package/dist/auth/auth-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../src/auth/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEpE,wBAAgB,+BAA+B,CAC7C,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,MAAM,EAAE,CAsBV;AAED,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;IACnD,kBAAkB,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;IAClD,eAAe,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;IAC/C,cAAc,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,UAAU,CAAC,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,SAAS,CAAC;CACnG;AAcD,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAKT;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,mBAAmB,EACzB,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,qBAAqB,wCA6C/B"}

package/dist/auth/auth-middleware.js

@@ -0,0 +1,86 @@
+'use strict';
+
+var tslib_es6 = require('../node_modules/.pnpm/@rollup_plugin-typescript@12.1.4_rollup@4.46.2_tslib@2.8.1_typescript@5.9.3/node_modules/tslib/tslib.es6.js');
+var server = require('next/server');
+var authShared = require('./auth-shared.js');
+
+function buildProtectedPageRoutePatterns(protectedRoots, locales) {
+    const uniqueRoots = [...new Set(protectedRoots)]
+        .map((root) => root.trim())
+        .filter(Boolean)
+        .map((root) => (root.startsWith('/') ? root : `/${root}`))
+        .map((root) => root.replace(/\/+$/, ''));
+    const uniqueLocales = [...new Set(locales)]
+        .map((locale) => locale.trim())
+        .filter(Boolean);
+    const patterns = new Set();
+    for (const root of uniqueRoots) {
+        patterns.add(`${root}(.*)`);
+        for (const locale of uniqueLocales) {
+            patterns.add(`/${locale}${root}(.*)`);
+        }
+    }
+    return [...patterns];
+}
+function authenticateWithClerk(auth) {
+    return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+        const { userId } = yield auth();
+        if (!userId) {
+            return null;
+        }
+        return {
+            provider: 'clerk',
+            providerUserId: userId,
+        };
+    });
+}
+function buildAuthenticatedRequestHeaders(req, auth) {
+    const headers = new Headers(req.headers);
+    headers.set(authShared.AUTH_HEADERS.provider, auth.provider);
+    headers.set(authShared.AUTH_HEADERS.providerUserId, auth.providerUserId);
+    return headers;
+}
+function handleAuthMiddleware(auth, req, options) {
+    return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+        const { protectedPageRoutes, protectedApiRoutes, publicApiRoutes, intlMiddleware } = options;
+        if (protectedPageRoutes(req)) {
+            const identity = yield authenticateWithClerk(auth);
+            if (!identity) {
+                return (yield auth()).redirectToSignIn();
+            }
+            const requestHeaders = buildAuthenticatedRequestHeaders(req, identity);
+            console.log('Forward auth context for protected page:', identity.provider, identity.providerUserId);
+            return intlMiddleware(new server.NextRequest(req.url, {
+                headers: requestHeaders,
+                method: req.method,
+                body: req.body,
+            }));
+        }
+        if (protectedApiRoutes(req)) {
+            const identity = yield authenticateWithClerk(auth);
+            if (!identity) {
+                return (yield auth()).redirectToSignIn();
+            }
+            const requestHeaders = buildAuthenticatedRequestHeaders(req, identity);
+            console.log('Forward auth context for protected API:', identity.provider, identity.providerUserId);
+            return server.NextResponse.next({
+                request: {
+                    headers: requestHeaders,
+                },
+            });
+        }
+        if (publicApiRoutes(req)) {
+            console.log('Public API route, no auth required:', req.nextUrl.pathname);
+            return server.NextResponse.next();
+        }
+        if (req.nextUrl.pathname.startsWith('/api/')) {
+            console.log('Other API route, no internationalization:', req.nextUrl.pathname);
+            return server.NextResponse.next();
+        }
+        return null;
+    });
+}
+
+exports.buildAuthenticatedRequestHeaders = buildAuthenticatedRequestHeaders;
+exports.buildProtectedPageRoutePatterns = buildProtectedPageRoutePatterns;
+exports.handleAuthMiddleware = handleAuthMiddleware;

package/dist/auth/auth-middleware.mjs

@@ -0,0 +1,82 @@
+import { __awaiter } from '../node_modules/.pnpm/@rollup_plugin-typescript@12.1.4_rollup@4.46.2_tslib@2.8.1_typescript@5.9.3/node_modules/tslib/tslib.es6.mjs';
+import { NextRequest, NextResponse } from 'next/server';
+import { AUTH_HEADERS } from './auth-shared.mjs';
+
+function buildProtectedPageRoutePatterns(protectedRoots, locales) {
+    const uniqueRoots = [...new Set(protectedRoots)]
+        .map((root) => root.trim())
+        .filter(Boolean)
+        .map((root) => (root.startsWith('/') ? root : `/${root}`))
+        .map((root) => root.replace(/\/+$/, ''));
+    const uniqueLocales = [...new Set(locales)]
+        .map((locale) => locale.trim())
+        .filter(Boolean);
+    const patterns = new Set();
+    for (const root of uniqueRoots) {
+        patterns.add(`${root}(.*)`);
+        for (const locale of uniqueLocales) {
+            patterns.add(`/${locale}${root}(.*)`);
+        }
+    }
+    return [...patterns];
+}
+function authenticateWithClerk(auth) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { userId } = yield auth();
+        if (!userId) {
+            return null;
+        }
+        return {
+            provider: 'clerk',
+            providerUserId: userId,
+        };
+    });
+}
+function buildAuthenticatedRequestHeaders(req, auth) {
+    const headers = new Headers(req.headers);
+    headers.set(AUTH_HEADERS.provider, auth.provider);
+    headers.set(AUTH_HEADERS.providerUserId, auth.providerUserId);
+    return headers;
+}
+function handleAuthMiddleware(auth, req, options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { protectedPageRoutes, protectedApiRoutes, publicApiRoutes, intlMiddleware } = options;
+        if (protectedPageRoutes(req)) {
+            const identity = yield authenticateWithClerk(auth);
+            if (!identity) {
+                return (yield auth()).redirectToSignIn();
+            }
+            const requestHeaders = buildAuthenticatedRequestHeaders(req, identity);
+            console.log('Forward auth context for protected page:', identity.provider, identity.providerUserId);
+            return intlMiddleware(new NextRequest(req.url, {
+                headers: requestHeaders,
+                method: req.method,
+                body: req.body,
+            }));
+        }
+        if (protectedApiRoutes(req)) {
+            const identity = yield authenticateWithClerk(auth);
+            if (!identity) {
+                return (yield auth()).redirectToSignIn();
+            }
+            const requestHeaders = buildAuthenticatedRequestHeaders(req, identity);
+            console.log('Forward auth context for protected API:', identity.provider, identity.providerUserId);
+            return NextResponse.next({
+                request: {
+                    headers: requestHeaders,
+                },
+            });
+        }
+        if (publicApiRoutes(req)) {
+            console.log('Public API route, no auth required:', req.nextUrl.pathname);
+            return NextResponse.next();
+        }
+        if (req.nextUrl.pathname.startsWith('/api/')) {
+            console.log('Other API route, no internationalization:', req.nextUrl.pathname);
+            return NextResponse.next();
+        }
+        return null;
+    });
+}
+
+export { buildAuthenticatedRequestHeaders, buildProtectedPageRoutePatterns, handleAuthMiddleware };

package/dist/auth/auth-shared.d.ts

@@ -0,0 +1,14 @@
+export declare const AUTH_HEADERS: {
+    readonly provider: "x-auth-provider";
+    readonly providerUserId: "x-auth-provider-user-id";
+};
+export declare const AUTH_ERRORS: {
+    readonly unauthorized: "UNAUTHORIZED";
+    readonly userNotFound: "USER_NOT_FOUND";
+};
+export type AuthProvider = 'clerk';
+export interface ProviderIdentity {
+    provider: AuthProvider;
+    providerUserId: string;
+}
+//# sourceMappingURL=auth-shared.d.ts.map

package/dist/auth/auth-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-shared.d.ts","sourceRoot":"","sources":["../../src/auth/auth-shared.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC;AAEnC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/auth/auth-shared.js

@@ -0,0 +1,13 @@
+'use strict';
+
+const AUTH_HEADERS = {
+    provider: 'x-auth-provider',
+    providerUserId: 'x-auth-provider-user-id',
+};
+const AUTH_ERRORS = {
+    unauthorized: 'UNAUTHORIZED',
+    userNotFound: 'USER_NOT_FOUND',
+};
+
+exports.AUTH_ERRORS = AUTH_ERRORS;
+exports.AUTH_HEADERS = AUTH_HEADERS;

package/dist/auth/auth-shared.mjs

@@ -0,0 +1,10 @@
+const AUTH_HEADERS = {
+    provider: 'x-auth-provider',
+    providerUserId: 'x-auth-provider-user-id',
+};
+const AUTH_ERRORS = {
+    unauthorized: 'UNAUTHORIZED',
+    userNotFound: 'USER_NOT_FOUND',
+};
+
+export { AUTH_ERRORS, AUTH_HEADERS };

package/dist/auth/auth-utils.d.ts

@@ -0,0 +1,48 @@
+import { NextRequest } from 'next/server';
+import { User } from '../services/database/prisma-model-type';
+import { type AuthProvider } from './auth-shared';
+/**
+ * 认证结果类型
+ */
+export interface AuthResult {
+    userId: string;
+    user: User;
+    provider: AuthProvider;
+    providerUserId: string;
+}
+/**
+ * 从中间件设置的 Clerk ID 获取完整用户信息
+ */
+export declare function getAuthenticatedUser(req: NextRequest): Promise<AuthResult>;
+/**
+ * 要求用户必须已认证，返回用户ID
+ */
+export declare function requireAuth(req: NextRequest): Promise<string>;
+/**
+ * 要求用户必须已认证，返回完整用户信息
+ */
+export declare function requireAuthWithUser(req: NextRequest): Promise<AuthResult>;
+/**
+ * API Route版本的认证工具函数
+ */
+export declare class ApiAuthUtils {
+    private req;
+    constructor(req: NextRequest);
+    /**
+     * 要求用户必须已认证，返回用户ID
+     */
+    requireAuth(): Promise<string>;
+    /**
+     * 要求用户必须已认证，返回完整用户信息
+     */
+    requireAuthWithUser(): Promise<AuthResult>;
+    /**
+     * 获取用户ID（如果已认证）
+     */
+    getUserId(): Promise<string | null>;
+    /**
+     * 获取完整用户信息（如果已认证）
+     */
+    getUser(): Promise<AuthResult | null>;
+}
+//# sourceMappingURL=auth-utils.d.ts.map

package/dist/auth/auth-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.d.ts","sourceRoot":"","sources":["../../src/auth/auth-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,wCAAwC,CAAC;AAC9D,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBhF;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAGnE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAE/E;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAc;gBAEb,GAAG,EAAE,WAAW;IAI5B;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAIpC;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAAC,UAAU,CAAC;IAIhD;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASzC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAO5C"}

package/dist/auth/auth-utils.js

@@ -0,0 +1,110 @@
+'use strict';
+
+var tslib_es6 = require('../node_modules/.pnpm/@rollup_plugin-typescript@12.1.4_rollup@4.46.2_tslib@2.8.1_typescript@5.9.3/node_modules/tslib/tslib.es6.js');
+var user_service = require('../services/database/user.service.js');
+require('../prisma/prisma.js');
+require('../services/database/credit.service.js');
+require('@prisma/client');
+var authShared = require('./auth-shared.js');
+
+/**
+ * 从中间件设置的 Clerk ID 获取完整用户信息
+ */
+function getAuthenticatedUser(req) {
+    return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+        try {
+            const provider = req.headers.get(authShared.AUTH_HEADERS.provider);
+            const providerUserId = req.headers.get(authShared.AUTH_HEADERS.providerUserId);
+            if (provider !== 'clerk' || !providerUserId) {
+                throw new Error(authShared.AUTH_ERRORS.unauthorized);
+            }
+            const user = yield user_service.userService.findByClerkUserId(providerUserId);
+            if (!user) {
+                throw new Error(authShared.AUTH_ERRORS.userNotFound);
+            }
+            return {
+                userId: user.userId,
+                user,
+                provider: 'clerk',
+                providerUserId,
+            };
+        }
+        catch (error) {
+            console.error('Error getting authenticated user:', error);
+            throw error;
+        }
+    });
+}
+/**
+ * 要求用户必须已认证，返回用户ID
+ */
+function requireAuth(req) {
+    return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+        const auth = yield getAuthenticatedUser(req);
+        return auth.userId;
+    });
+}
+/**
+ * 要求用户必须已认证，返回完整用户信息
+ */
+function requireAuthWithUser(req) {
+    return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+        return yield getAuthenticatedUser(req);
+    });
+}
+/**
+ * API Route版本的认证工具函数
+ */
+class ApiAuthUtils {
+    constructor(req) {
+        this.req = req;
+    }
+    /**
+     * 要求用户必须已认证，返回用户ID
+     */
+    requireAuth() {
+        return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+            return yield requireAuth(this.req);
+        });
+    }
+    /**
+     * 要求用户必须已认证，返回完整用户信息
+     */
+    requireAuthWithUser() {
+        return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+            return yield requireAuthWithUser(this.req);
+        });
+    }
+    /**
+     * 获取用户ID（如果已认证）
+     */
+    getUserId() {
+        return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+            try {
+                const auth = yield getAuthenticatedUser(this.req);
+                return auth.userId;
+            }
+            catch (_a) {
+                return null;
+            }
+        });
+    }
+    /**
+     * 获取完整用户信息（如果已认证）
+     */
+    getUser() {
+        return tslib_es6.__awaiter(this, void 0, void 0, function* () {
+            try {
+                return yield getAuthenticatedUser(this.req);
+            }
+            catch (_a) {
+                return null;
+            }
+        });
+    }
+}
+
+exports.ApiAuthUtils = ApiAuthUtils;
+exports.getAuthenticatedUser = getAuthenticatedUser;
+exports.requireAuth = requireAuth;
+exports.requireAuthWithUser = requireAuthWithUser;

package/dist/auth/auth-utils.mjs

@@ -0,0 +1,105 @@
+import { __awaiter } from '../node_modules/.pnpm/@rollup_plugin-typescript@12.1.4_rollup@4.46.2_tslib@2.8.1_typescript@5.9.3/node_modules/tslib/tslib.es6.mjs';
+import { userService } from '../services/database/user.service.mjs';
+import '../prisma/prisma.mjs';
+import '../services/database/credit.service.mjs';
+import '@prisma/client';
+import { AUTH_HEADERS, AUTH_ERRORS } from './auth-shared.mjs';
+
+/**
+ * 从中间件设置的 Clerk ID 获取完整用户信息
+ */
+function getAuthenticatedUser(req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const provider = req.headers.get(AUTH_HEADERS.provider);
+            const providerUserId = req.headers.get(AUTH_HEADERS.providerUserId);
+            if (provider !== 'clerk' || !providerUserId) {
+                throw new Error(AUTH_ERRORS.unauthorized);
+            }
+            const user = yield userService.findByClerkUserId(providerUserId);
+            if (!user) {
+                throw new Error(AUTH_ERRORS.userNotFound);
+            }
+            return {
+                userId: user.userId,
+                user,
+                provider: 'clerk',
+                providerUserId,
+            };
+        }
+        catch (error) {
+            console.error('Error getting authenticated user:', error);
+            throw error;
+        }
+    });
+}
+/**
+ * 要求用户必须已认证，返回用户ID
+ */
+function requireAuth(req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const auth = yield getAuthenticatedUser(req);
+        return auth.userId;
+    });
+}
+/**
+ * 要求用户必须已认证，返回完整用户信息
+ */
+function requireAuthWithUser(req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return yield getAuthenticatedUser(req);
+    });
+}
+/**
+ * API Route版本的认证工具函数
+ */
+class ApiAuthUtils {
+    constructor(req) {
+        this.req = req;
+    }
+    /**
+     * 要求用户必须已认证，返回用户ID
+     */
+    requireAuth() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield requireAuth(this.req);
+        });
+    }
+    /**
+     * 要求用户必须已认证，返回完整用户信息
+     */
+    requireAuthWithUser() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield requireAuthWithUser(this.req);
+        });
+    }
+    /**
+     * 获取用户ID（如果已认证）
+     */
+    getUserId() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const auth = yield getAuthenticatedUser(this.req);
+                return auth.userId;
+            }
+            catch (_a) {
+                return null;
+            }
+        });
+    }
+    /**
+     * 获取完整用户信息（如果已认证）
+     */
+    getUser() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                return yield getAuthenticatedUser(this.req);
+            }
+            catch (_a) {
+                return null;
+            }
+        });
+    }
+}
+
+export { ApiAuthUtils, getAuthenticatedUser, requireAuth, requireAuthWithUser };

package/dist/index.js

@@ -14,13 +14,13 @@ var user_aggregate_service = require('./services/aggregate/user.aggregate.servic
 var billing_aggregate_service = require('./services/aggregate/billing.aggregate.service.js');
 var anonymous_aggregate_service = require('./services/aggregate/anonymous.aggregate.service.js');
 var userContextService = require('./services/context/user-context-service.js');
+var userContextFinalizer = require('./services/context/user-context-finalizer.js');
 var webhookHandler = require('./services/stripe/webhook-handler.js');
 var moneyPriceConfig = require('./lib/money-price-config.js');
 var moneyPriceHelper = require('./lib/money-price-helper.js');
 var fingerprintConfig = require('./lib/fingerprint-config.js');
 var creditInit = require('./lib/credit-init.js');
 var stripeConfig = require('./lib/stripe-config.js');
-var authUtils = require('./lib/auth-utils.js');
 var upstashConfig = require('./lib/upstash-config.js');
 var redisLock = require('./lib/upstash/redis-lock.js');
 var redisLike = require('./lib/upstash/redis-like.js');
@@ -62,13 +62,13 @@ exports.isValidUserStatus = constants.isValidUserStatus;
 exports.userAggregateService = user_aggregate_service.userAggregateService;
 exports.billingAggregateService = billing_aggregate_service.billingAggregateService;
 exports.anonymousAggregateService = anonymous_aggregate_service.anonymousAggregateService;
-exports.applyUserMockContext = userContextService.applyUserMockContext;
 exports.buildInitUserContextFromEntities = userContextService.buildInitUserContextFromEntities;
 exports.fetchLatestUserContextByFingerprintId = userContextService.fetchLatestUserContextByFingerprintId;
 exports.fetchUserContextByClerkUserId = userContextService.fetchUserContextByClerkUserId;
 exports.mapCreditToXCredit = userContextService.mapCreditToXCredit;
 exports.mapSubscriptionToXSubscription = userContextService.mapSubscriptionToXSubscription;
 exports.mapUserToXUser = userContextService.mapUserToXUser;
+exports.finalizeUserContext = userContextFinalizer.finalizeUserContext;
 exports.handleStripeEvent = webhookHandler.handleStripeEvent;
 exports.getActiveProviderConfig = moneyPriceConfig.getActiveProviderConfig;
 exports.getCreditsFromPriceId = moneyPriceConfig.getCreditsFromPriceId;
@@ -90,10 +90,6 @@ exports.fetchPaymentId = stripeConfig.fetchPaymentId;
 exports.getStripe = stripeConfig.getStripe;
 exports.updateSubscription = stripeConfig.updateSubscription;
 exports.validateStripeWebhook = stripeConfig.validateStripeWebhook;
-exports.ApiAuthUtils = authUtils.ApiAuthUtils;
-exports.getAuthenticatedUser = authUtils.getAuthenticatedUser;
-exports.requireAuth = authUtils.requireAuth;
-exports.requireAuthWithUser = authUtils.requireAuthWithUser;
 exports.getQstash = upstashConfig.getQstash;
 exports.getRedis = upstashConfig.getRedis;
 exports.withQstash = upstashConfig.withQstash;

package/dist/index.mjs

@@ -11,14 +11,14 @@ export { BillingReason, CreditType, OperationType, OrderStatus, PaySupplier, Pay
 export { userAggregateService } from './services/aggregate/user.aggregate.service.mjs';
 export { billingAggregateService } from './services/aggregate/billing.aggregate.service.mjs';
 export { anonymousAggregateService } from './services/aggregate/anonymous.aggregate.service.mjs';
-export { applyUserMockContext, buildInitUserContextFromEntities, fetchLatestUserContextByFingerprintId, fetchUserContextByClerkUserId, mapCreditToXCredit, mapSubscriptionToXSubscription, mapUserToXUser } from './services/context/user-context-service.mjs';
+export { buildInitUserContextFromEntities, fetchLatestUserContextByFingerprintId, fetchUserContextByClerkUserId, mapCreditToXCredit, mapSubscriptionToXSubscription, mapUserToXUser } from './services/context/user-context-service.mjs';
+export { finalizeUserContext } from './services/context/user-context-finalizer.mjs';
 export { handleStripeEvent } from './services/stripe/webhook-handler.mjs';
 export { getActiveProviderConfig, getCreditsFromPriceId, getPriceConfig, moneyPriceConfig } from './lib/money-price-config.mjs';
 export { getMoneyPriceInitUserContext } from './lib/money-price-helper.mjs';
 export { fingerprintConfig } from './lib/fingerprint-config.mjs';
 export { creditsConfig, freeAmount, freeExpiredDays, freeRegisterAmount, oneTimeExpiredDays } from './lib/credit-init.mjs';
 export { ActiveSubscriptionExistsError, cancelSubscription, createCheckoutSession, createCustomerPortalSession, createOrGetCustomer, fetchPaymentId, getStripe, updateSubscription, validateStripeWebhook } from './lib/stripe-config.mjs';
-export { ApiAuthUtils, getAuthenticatedUser, requireAuth, requireAuthWithUser } from './lib/auth-utils.mjs';
 export { getQstash, getRedis, withQstash, withRedis } from './lib/upstash-config.mjs';
 export { acquireLock, releaseLock, withLock } from './lib/upstash/redis-lock.mjs';
 export { getTargetLikeCount, getUserLikedTargets, isTargetLiked, likeTarget, unlikeTarget } from './lib/upstash/redis-like.mjs';

package/dist/lib/index.d.ts

@@ -3,7 +3,6 @@ export * from './money-price-helper';
 export * from './fingerprint-config';
 export * from './credit-init';
 export * from './stripe-config';
-export * from './auth-utils';
 export * from './upstash-config';
 export * from './upstash';
 //# sourceMappingURL=index.d.ts.map