create-pardx-scaffold 0.1.0

package/template/apps/api/libs/infra/clients/internal/ai/risk-detection.client.ts

@@ -0,0 +1,301 @@
+/**
+ * 火山引擎风险检测 Internal Client
+ *
+ * 职责：仅负责与火山引擎 API 通信
+ * - 不访问数据库
+ * - 不包含缓存逻辑
+ * - 不包含业务逻辑
+ */
+import { Injectable, Inject } from '@nestjs/common';
+import { HttpService } from '@nestjs/axios';
+import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
+import { Logger } from 'winston';
+import { firstValueFrom } from 'rxjs';
+import { Signer } from '@volcengine/openapi';
+import { getKeysConfig } from '@/config/configuration';
+import { RiskConfig } from '@/config/validation';
+import enviroment from '@/utils/enviroment.util';
+
+export interface VolcengineRiskConfig {
+  accessKey: string;
+  secretKey: string;
+  region: string;
+  appId: number;
+  baseUrl: string;
+}
+
+export interface TextRiskResult {
+  DataId: string;
+  Decision: 'PASS' | 'REVIEW' | 'BLOCK';
+  FinalLabel: string;
+  DecisionLabel: string;
+  PassThrough?: any;
+  TextCount?: number;
+  Results?: any[];
+}
+
+export interface ImageRiskResult {
+  DataId: string;
+  Decision: 'PASS' | 'REVIEW' | 'BLOCK';
+  FinalLabel: string;
+  DecisionLabel: string;
+  PassThrough?: any;
+  Results?: any[];
+}
+
+export interface VideoRiskSubmitResult {
+  DataId: string;
+  TaskId?: string;
+}
+
+export interface VideoRiskQueryResult {
+  DataId: string;
+  FinalLabel?: string;
+  DecisionLabel?: string;
+  PassThrough?: any;
+  VideoResults?: {
+    Decision: 'PASS' | 'REVIEW' | 'BLOCK';
+    ImageSliceCount: number;
+    Frames?: any[];
+  };
+  AudioResults?: {
+    Decision: 'PASS' | 'REVIEW' | 'BLOCK';
+    Details?: any[];
+    AudioText?: string;
+  };
+}
+
+@Injectable()
+export class RiskDetectionClient {
+  private readonly riskConfig: VolcengineRiskConfig;
+  private readonly isConfigured: boolean;
+
+  constructor(
+    private readonly httpService: HttpService,
+    @Inject(WINSTON_MODULE_PROVIDER) private readonly logger: Logger,
+  ) {
+    const config = getKeysConfig()?.risk as RiskConfig | undefined;
+
+    if (!config || !config.volcengine) {
+      this.logger.warn('Volcengine Risk config not found');
+      this.isConfigured = false;
+      this.riskConfig = {
+        accessKey: '',
+        secretKey: '',
+        region: 'cn-shanghai',
+        appId: 0,
+        baseUrl: 'https://open.volcengineapi.com',
+      };
+      return;
+    }
+
+    const volcengineConfig = config.volcengine;
+
+    this.riskConfig = {
+      accessKey: volcengineConfig.accessKey || '',
+      secretKey: volcengineConfig.secretKey || '',
+      region: volcengineConfig.region || 'cn-shanghai',
+      appId: volcengineConfig.appId || 0,
+      baseUrl: volcengineConfig.baseUrl || 'https://open.volcengineapi.com',
+    };
+
+    this.isConfigured = !!(
+      this.riskConfig.accessKey && this.riskConfig.secretKey
+    );
+
+    if (this.isConfigured) {
+      if (enviroment.isProduction()) {
+        this.logger.info('RiskDetectionClient initialized successfully', {
+          accessKey: this.riskConfig.accessKey,
+          secretKey: this.riskConfig.secretKey,
+          region: this.riskConfig.region,
+          appId: this.riskConfig.appId,
+          baseUrl: this.riskConfig.baseUrl,
+        });
+      }
+    } else {
+      this.logger.warn('RiskDetectionClient: credentials not configured');
+    }
+  }
+
+  /**
+   * 文本风险检测
+   */
+  async detectTextRisk(
+    text: string,
+    dataId: string,
+  ): Promise<TextRiskResult | undefined> {
+    if (!this.isConfigured) {
+      this.logger.warn('RiskDetectionClient not configured');
+      return undefined;
+    }
+
+    return await this.volcengineApi({
+      body: {
+        AppId: this.riskConfig.appId,
+        Service: 'text_risk',
+        Parameters: {
+          biztype: 'risk_detection',
+          text,
+          account_id: '23332',
+          data_id: dataId,
+        },
+      },
+      params: {
+        Action: 'TextSliceRisk',
+        Version: '2022-11-07',
+      },
+      method: 'POST',
+    });
+  }
+
+  /**
+   * 图片内容风险检测
+   */
+  async detectImageRisk(
+    url: string,
+    dataId: string,
+  ): Promise<ImageRiskResult | undefined> {
+    if (!this.isConfigured) {
+      this.logger.warn('RiskDetectionClient not configured');
+      return undefined;
+    }
+
+    return await this.volcengineApi({
+      body: {
+        AppId: this.riskConfig.appId,
+        Service: 'image_content_risk',
+        Parameters: {
+          biztype: 'image_risk',
+          account_id: '23332',
+          data_id: dataId,
+          url,
+        },
+      },
+      params: {
+        Action: 'ImageContentRiskV2',
+        Version: '2021-11-29',
+      },
+      method: 'POST',
+    });
+  }
+
+  /**
+   * 提交视频风险检测任务（异步）
+   */
+  async submitVideoRisk(
+    url: string,
+    dataId: string,
+  ): Promise<VideoRiskSubmitResult | undefined> {
+    if (!this.isConfigured) {
+      this.logger.warn('RiskDetectionClient not configured');
+      return undefined;
+    }
+
+    return await this.volcengineApi({
+      body: {
+        AppId: this.riskConfig.appId,
+        Service: 'video_risk',
+        Parameters: {
+          biztype: 'video_risk',
+          account_id: '23332',
+          data_id: dataId,
+          url: url,
+        },
+      },
+      params: {
+        Action: 'AsyncVideoRisk',
+        Version: '2021-11-29',
+      },
+    });
+  }
+
+  /**
+   * 查询视频风险检测结果
+   */
+  async queryVideoRisk(
+    dataId: string,
+  ): Promise<VideoRiskQueryResult | undefined> {
+    if (!this.isConfigured) {
+      this.logger.warn('RiskDetectionClient not configured');
+      return undefined;
+    }
+
+    return await this.volcengineApi({
+      params: {
+        AppId: this.riskConfig.appId,
+        Service: 'video_risk',
+        DataId: dataId,
+        Action: 'VideoResult',
+        Version: '2021-11-29',
+      },
+      body: {},
+      method: 'GET',
+    });
+  }
+
+  /**
+   * 调用火山引擎 API
+   */
+  private async volcengineApi<T>({
+    body = {},
+    params,
+    method = 'POST',
+  }: {
+    params: any;
+    body?: any;
+    method?: 'POST' | 'GET' | 'PUT' | 'DELETE' | 'PATCH';
+  }): Promise<T | undefined> {
+    if (body.Parameters && typeof body.Parameters === 'object') {
+      body.Parameters = JSON.stringify({
+        ...body.Parameters,
+        operate_time: Math.floor(Date.now() / 1000),
+      });
+    }
+
+    const openApiRequestData = {
+      region: this.riskConfig.region,
+      method,
+      params: params,
+      headers: {} as Record<string, string>,
+      body: JSON.stringify(body),
+    };
+
+    const signer = new Signer(openApiRequestData, 'BusinessSecurity');
+
+    signer.addAuthorization({
+      accessKeyId: this.riskConfig.accessKey,
+      secretKey: this.riskConfig.secretKey,
+    });
+
+    try {
+      const response = await firstValueFrom(
+        this.httpService.request({
+          url: this.riskConfig.baseUrl,
+          headers: openApiRequestData.headers,
+          params: openApiRequestData.params,
+          method: openApiRequestData.method,
+          data: body,
+        }),
+      );
+
+      this.logger.debug(
+        `RiskDetectionClient response: ${JSON.stringify(response.data)}`,
+      );
+
+      if (response.data?.Result?.Code === 0) {
+        return response.data.Result.Data as T;
+      }
+
+      this.logger.warn(
+        `RiskDetectionClient API error: ${JSON.stringify(response.data?.Result)}`,
+      );
+      return undefined;
+    } catch (error) {
+      this.logger.error(
+        `RiskDetectionClient API call failed: ${(error as Error).message}`,
+      );
+      return undefined;
+    }
+  }
+}

package/template/apps/api/libs/infra/clients/internal/ai/risk-detection.module.ts

@@ -0,0 +1,22 @@
+/**
+ * 风险检测 Internal Client 模块
+ */
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { HttpModule } from '@nestjs/axios';
+import { WinstonModule } from 'nest-winston';
+import { RiskDetectionClient } from './risk-detection.client';
+
+@Module({
+  imports: [
+    ConfigModule,
+    WinstonModule,
+    HttpModule.register({
+      timeout: 10000,
+      maxRedirects: 5,
+    }),
+  ],
+  providers: [RiskDetectionClient],
+  exports: [RiskDetectionClient],
+})
+export class RiskDetectionModule {}

package/template/apps/api/libs/infra/clients/internal/crypt/crypt-client.service.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { CryptClient } from './crypt.client';
+
+describe('CryptClient', () => {
+  let service: CryptClient;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      providers: [CryptClient],
+    }).compile();
+
+    service = module.get<CryptClient>(CryptClient);
+  });
+
+  it('should be defined', () => {
+    expect(service).toBeDefined();
+  });
+});

package/template/apps/api/libs/infra/clients/internal/crypt/crypt.client.ts

@@ -0,0 +1,37 @@
+import { Injectable, Inject } from '@nestjs/common';
+import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
+import { Logger } from 'winston';
+import { ConfigService } from '@nestjs/config';
+import * as cryptoUtil from '@/utils/crypto.util';
+import urlencodeUtil from '@/utils/urlencode.util';
+import { CryptoConfig } from '@/config/validation';
+
+@Injectable()
+export class CryptClient {
+  private config: CryptoConfig;
+  constructor(
+    private readonly configService: ConfigService,
+    @Inject(WINSTON_MODULE_PROVIDER) private readonly logger: Logger,
+  ) {
+    this.config = configService.getOrThrow<CryptoConfig>('crypto');
+  }
+
+  encrypt(text: string, iv?: string, key?: string): string {
+    key = key || this.config.key;
+    iv = iv || this.config.iv;
+    const cry = cryptoUtil.aesCbcEncrypt(text, key, iv);
+    return urlencodeUtil.base64ToUrlSafe(cry);
+  }
+
+  decrypt(text: string, iv?: string, key?: string): string {
+    text = urlencodeUtil.urlSafeToBase64(text);
+    // this.logger.info('decrypt', {key:this.config.key, iv:this.config.iv , text})
+    key = key || this.config.key;
+    iv = iv || this.config.iv;
+    return cryptoUtil.aesCbcDecrypt(text, key, iv);
+  }
+
+  getSignUrl(url: string): string {
+    return cryptoUtil.signUrl(url, this.config.key);
+  }
+}

package/template/apps/api/libs/infra/clients/internal/crypt/crypt.module.ts

@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+import { CryptClient } from './crypt.client';
+import { ConfigModule } from '@nestjs/config';
+
+@Module({
+  imports: [ConfigModule],
+  providers: [CryptClient],
+  exports: [CryptClient],
+})
+export class CryptModule {}

package/template/apps/api/libs/infra/clients/internal/crypt/index.ts

@@ -0,0 +1,2 @@
+export * from './crypt.module';
+export * from './crypt.client';

package/template/apps/api/libs/infra/clients/internal/email/dto/email.dto.ts

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+
+// ============================================================================
+// Email Configuration Schemas
+// ============================================================================
+
+export const EmailKeysSchema = z.object({
+  accessKey: z.string(),
+  accessSecret: z.string(),
+  host: z.string(),
+  port: z.number(),
+  secure: z.boolean(),
+  user: z.string(),
+  pass: z.string(),
+});
+
+export const EmailTemplateSchema = z.object({
+  name: z.string(),
+  subject: z.string(),
+  from: z.string(),
+  templateInvokeName: z.string(),
+  codeExpire: z.number().optional(),
+  frequency: z.number().optional(),
+  sub: z.record(z.string()).nullable().optional(),
+});
+
+export const EmailConfigSchema = z.object({
+  vendor: z.string(),
+  apiUser: z.string(),
+  apiKey: z.string(),
+  domain: z.string(),
+  name: z.string(),
+  templates: z.array(EmailTemplateSchema),
+});
+
+// ============================================================================
+// Email Message Schemas
+// ============================================================================
+
+export const EmailSubValuesSchema = z.object({
+  name: z.string(),
+  code: z.string(),
+});
+
+export const SignalMessageSchema = z.object({
+  to: z.string().email(),
+  subject: z.string().optional(),
+  templateInvokeName: z.string(),
+  sub: z.record(z.array(z.string())),
+  options: z.any().optional(),
+  queueMailId: z.string().optional(),
+  metadata: z.record(z.any()).optional(),
+});
+
+// ============================================================================
+// Type Exports
+// ============================================================================
+
+export type EmailKeys = z.infer<typeof EmailKeysSchema>;
+export type EmailTemplate = z.infer<typeof EmailTemplateSchema>;
+export type EmailConfig = z.infer<typeof EmailConfigSchema>;
+export type EmailSubValues = z.infer<typeof EmailSubValuesSchema>;
+export type SignalMessage = z.infer<typeof SignalMessageSchema>;
+
+// ============================================================================
+// Legacy Namespace (for backward compatibility)
+// ============================================================================
+
+export namespace PardxEmailSender {
+  export type EmailKeys = z.infer<typeof EmailKeysSchema>;
+  export type Config = z.infer<typeof EmailConfigSchema>;
+  export type SignalMessage = z.infer<typeof SignalMessageSchema>;
+  export type RegisterEmailSub = z.infer<typeof EmailSubValuesSchema>;
+  export type EmailTemplate = z.infer<typeof EmailTemplateSchema>;
+}

package/template/apps/api/libs/infra/clients/internal/email/index.ts

@@ -0,0 +1,11 @@
+/**
+ * Email Clients
+ *
+ * 纯 Email API 客户端集合
+ * - 不访问数据库
+ * - 不包含业务逻辑
+ */
+export { SendCloudClient } from './sendcloud.client';
+
+// Re-export DTO types
+export * from './dto/email.dto';