create-pardx-scaffold 0.1.10 → 0.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pardx-scaffold",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Scaffold a new project from PardxAI monorepo (git-tracked files)",
   "license": "MIT",
   "bin": "./cli.js",

package/template/apps/api/libs/domain/auth/src/auth.service.ts

@@ -97,13 +97,39 @@ export class AuthService {
     await this.redis.saveData('refresh', tokens.refresh, tokens.userId);
     await this.redis.saveData('access', tokens.access, tokens.userId);
 
+    // Convert avatarFileId to headerImg URL
+    let headerImg: string | null = null;
+    if (user.avatarFileId) {
+      const avatarFile = await this.fileSource.get({
+        id: user.avatarFileId,
+      });
+      if (avatarFile) {
+        headerImg = await this.fileCdn.getImageVolcengineCdn(
+          avatarFile.vendor,
+          avatarFile.bucket,
+          avatarFile.key,
+          '360:360:360:360',
+        );
+      }
+    }
+
     return {
       refresh: tokens.refresh,
       expire: tokens.expire,
       access: tokens.access,
       accessExpire: tokens.accessExpire,
       isAnonymity: tokens.isAnonymity,
-      user,
+      user: {
+        id: user.id!,
+        isAnonymity: user.isAnonymity,
+        isAdmin: user.isAdmin,
+        code: user.code,
+        nickname: user.nickname,
+        headerImg,
+        sex: user.sex,
+        mobile: user.mobile,
+        email: user.email,
+      },
     };
   }
 

package/template/apps/api/libs/infra/clients/internal/email/dto/email.dto.ts

@@ -21,7 +21,7 @@ export const EmailTemplateSchema = z.object({
   templateInvokeName: z.string(),
   codeExpire: z.number().optional(),
   frequency: z.number().optional(),
-  sub: z.record(z.string()).nullable().optional(),
+  sub: z.record(z.string(), z.string()).nullable().optional(),
 });
 
 export const EmailConfigSchema = z.object({
@@ -46,10 +46,10 @@ export const SignalMessageSchema = z.object({
   to: z.string().email(),
   subject: z.string().optional(),
   templateInvokeName: z.string(),
-  sub: z.record(z.array(z.string())),
+  sub: z.record(z.string(), z.array(z.string())),
   options: z.any().optional(),
   queueMailId: z.string().optional(),
-  metadata: z.record(z.any()).optional(),
+  metadata: z.record(z.string(), z.any()).optional(),
 });
 
 // ============================================================================

package/template/apps/api/libs/infra/clients/internal/volcengine-tts/dto/tts.dto.ts

@@ -41,10 +41,10 @@ export type TtsResult = z.infer<typeof TtsResultSchema>;
 export class TtsRequestDto implements TtsRequest {
   text: string;
   speaker?: string;
-  format?: string = 'mp3';
-  speech_rate?: number = 0;
-  loudness_rate?: number = 0;
-  pitch?: number = 0;
+  format: string = 'mp3';
+  speech_rate: number = 0;
+  loudness_rate: number = 0;
+  pitch: number = 0;
 }
 
 export class TtsResponseDto implements TtsResponse {

package/template/apps/api/libs/infra/common/common.module.ts

@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { EncryptionService } from './encryption.service';
+
+@Module({
+  imports: [ConfigModule],
+  providers: [EncryptionService],
+  exports: [EncryptionService],
+})
+export class CommonModule {}

package/template/apps/api/libs/infra/common/config/validation/env.validation.ts

@@ -83,7 +83,7 @@ export function validateEnv(): EnvConfig {
   const result = envSchema.safeParse(expandedEnv);
 
   if (!result.success) {
-    const errorMessages = result.error.errors
+    const errorMessages = result.error.issues
       .map((err) => `  - ${err.path.join('.')}: ${err.message}`)
       .join('\n');
 

package/template/apps/api/libs/infra/common/config/validation/keys.validation.ts

@@ -96,7 +96,7 @@ export const smsProviderSchema = z.object({
   region: z.string().optional(),
   appKey: z.string().optional(),
   appCode: z.string().optional(),
-  templates: z.array(z.record(z.any())).optional(),
+  templates: z.array(z.record(z.string(), z.any())).optional(),
 });
 
 export const smsConfigSchema = z.object({
@@ -460,7 +460,7 @@ export function validateKeysConfig(config: unknown): KeysConfig {
 
   if (!result.success) {
     // Mask sensitive data in error messages
-    const errorMessages = result.error.errors
+    const errorMessages = result.error.issues
       .map((err) => {
         const path = err.path.join('.');
         // Don't log actual values for security

package/template/apps/api/libs/infra/common/config/validation/yaml.validation.ts

@@ -185,7 +185,7 @@ export const unleashConfigSchema = z.object({
   /** Metrics reporting interval in milliseconds (default: 60000) */
   metricsInterval: z.number().int().positive().default(60000),
   /** Custom headers for authentication */
-  customHeaders: z.record(z.string()).optional(),
+  customHeaders: z.record(z.string(), z.string()).optional(),
 });
 
 /**
@@ -200,7 +200,7 @@ export const featureFlagsConfigSchema = z
     /** Unleash configuration (required if provider is 'unleash') */
     unleash: unleashConfigSchema.optional(),
     /** Default feature flags (key-value pairs) */
-    defaultFlags: z.record(z.boolean()).optional(),
+    defaultFlags: z.record(z.string(), z.boolean()).optional(),
   })
   .refine(
     (data) => {
@@ -516,7 +516,7 @@ export function validateYamlConfig(config: unknown): YamlConfig {
   const result = yamlConfigSchema.safeParse(config);
 
   if (!result.success) {
-    const errorMessages = result.error.errors
+    const errorMessages = result.error.issues
       .map((err) => `  - ${err.path.join('.')}: ${err.message}`)
       .join('\n');
 

package/template/apps/api/libs/infra/common/decorators/device-info.decorator.ts

@@ -0,0 +1,58 @@
+/**
+ * Device Info Decorator
+ * 设备信息装饰器 - 从请求头提取设备信息
+ *
+ * 使用方式：
+ * ```typescript
+ * @TsRestHandler(c.loginByEmail)
+ * async loginByEmail(@DeviceInfo() deviceInfo: PardxApp.HeaderData) {
+ *   // deviceInfo 自动注入
+ *   const result = await this.signService.loginByEmail(body, deviceInfo);
+ *   return success(result);
+ * }
+ * ```
+ */
+
+import { createParamDecorator, ExecutionContext } from '@nestjs/common';
+import { FastifyRequest } from 'fastify';
+import { PardxApp } from '@/config/dto/config.dto';
+
+/**
+ * @DeviceInfo() decorator - 从请求头提取设备信息
+ *
+ * 自动从以下请求头提取：
+ * - x-platform: 平台标识
+ * - x-os: 操作系统
+ * - x-device-id: 设备ID
+ * - x-mptrail: 营销追踪参数
+ *
+ * @example
+ * // 在控制器方法中使用
+ * async login(@DeviceInfo() deviceInfo: PardxApp.HeaderData) {
+ *   console.log(deviceInfo.platform, deviceInfo.os, deviceInfo.deviceid);
+ * }
+ */
+export const DeviceInfo = createParamDecorator(
+  (data: unknown, ctx: ExecutionContext): PardxApp.HeaderData => {
+    const request = ctx.switchToHttp().getRequest<FastifyRequest>();
+    const headers = request.headers;
+
+    return {
+      platform: (headers['x-platform'] as string) || '',
+      os: (headers['x-os'] as string) || '',
+      deviceid: (headers['x-device-id'] as string) || '',
+      mptrail: headers['x-mptrail'] as string,
+    };
+  },
+);
+
+/**
+ * Get device ID from request headers
+ * 从请求头获取设备ID的辅助函数
+ *
+ * @param request - Fastify request object
+ * @returns Device ID string or 'unknown'
+ */
+export function getDeviceId(request: FastifyRequest): string {
+  return (request.headers['x-device-id'] as string) || 'unknown';
+}

package/template/apps/api/libs/infra/common/decorators/team-info.decorator.ts

@@ -0,0 +1,122 @@
+/**
+ * Team Info Decorator
+ * 团队信息装饰器 - 从请求上下文提取团队信息
+ *
+ * 使用方式：
+ * ```typescript
+ * @TsRestHandler(c.getTeamStatistics)
+ * async getTeamStatistics(@TeamInfo() teamInfo: TeamContext) {
+ *   // teamInfo 自动注入
+ *   const result = await this.teamDomainService.getTeamStatistics(teamInfo.teamId, teamInfo.userId);
+ *   return success(result);
+ * }
+ * ```
+ */
+
+import {
+  createParamDecorator,
+  ExecutionContext,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { FastifyRequest } from 'fastify';
+
+/**
+ * Team context extracted from request
+ */
+export interface TeamContext {
+  /** Team ID (from API Key or user session) */
+  teamId: string;
+  /** User ID (from JWT or API Key) */
+  userId: string;
+  /** User's role in the team (if available) */
+  role?: 'owner' | 'admin' | 'member';
+  /** API Key ID (if using API Key authentication) */
+  userApiKeyId?: string;
+}
+
+/**
+ * @TeamInfo() decorator - 从请求上下文提取团队信息
+ *
+ * 自动从以下来源提取：
+ * 1. API Gateway: API Key 验证后的 request.teamId
+ * 2. Web App: JWT payload 或 request.teamId
+ *
+ * @example
+ * // 在控制器方法中使用
+ * async getTeamStats(@TeamInfo() teamInfo: TeamContext) {
+ *   console.log(teamInfo.teamId, teamInfo.userId);
+ * }
+ */
+export const TeamInfo = createParamDecorator(
+  (data: unknown, ctx: ExecutionContext): TeamContext => {
+    const request = ctx.switchToHttp().getRequest<FastifyRequest>();
+
+    // 优先从 API Key 验证结果获取（Gateway 场景）
+    const teamId = (request as any).teamId;
+    const userId = (request as any).userId;
+    const userApiKeyId = (request as any).userApiKeyId;
+
+    // 如果没有 teamId，尝试从 userInfo 获取
+    const userInfo = (request as any).userInfo;
+    const resolvedUserId = userId || userInfo?.id;
+
+    if (!resolvedUserId) {
+      throw new UnauthorizedException('User not authenticated');
+    }
+
+    // 如果没有 teamId，使用 userId 作为 fallback（用户默认团队）
+    const resolvedTeamId = teamId || resolvedUserId;
+
+    return {
+      teamId: resolvedTeamId,
+      userId: resolvedUserId,
+      userApiKeyId,
+      role: (request as any).teamRole,
+    };
+  },
+);
+
+/**
+ * Get team ID from request context
+ * 从请求上下文获取团队ID的辅助函数
+ *
+ * @param request - Fastify request object
+ * @returns Team ID string
+ */
+export function getTeamId(request: FastifyRequest): string {
+  // 优先使用 teamId（API Key 或 session 设置）
+  const teamId = (request as any).teamId;
+  if (teamId) return teamId;
+
+  // Fallback to userId（默认团队）
+  const userId = (request as any).userId || (request as any).userInfo?.id;
+  if (!userId) {
+    throw new Error('getTeamId: neither teamId nor userId found in request');
+  }
+
+  return userId;
+}
+
+/**
+ * Get team context from request
+ * 从请求获取完整团队上下文的辅助函数
+ *
+ * @param request - Fastify request object
+ * @returns TeamContext object
+ */
+export function getTeamContext(request: FastifyRequest): TeamContext {
+  const teamId = (request as any).teamId;
+  const userId = (request as any).userId || (request as any).userInfo?.id;
+  const userApiKeyId = (request as any).userApiKeyId;
+
+  if (!userId) {
+    throw new Error('getTeamContext: userId not found in request');
+  }
+
+  return {
+    teamId: teamId || userId, // Fallback to userId for default team
+    userId,
+    userApiKeyId,
+    role: (request as any).teamRole,
+  };
+}

package/template/apps/api/libs/infra/common/encryption.service.ts

@@ -0,0 +1,70 @@
+/**
+ * Encryption Service
+ *
+ * AES-256-CBC encryption for provider API keys.
+ * SHA-256 hashing for user API key storage.
+ *
+ * Supports two stored formats for backward compatibility:
+ * - Legacy: "ivHex:cipherTextHex" (raw hex strings joined by colon)
+ * - Current: OpenSSL Base64 (crypto-js native serialization)
+ */
+import { Injectable } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import * as crypto from 'crypto-js';
+
+@Injectable()
+export class EncryptionService {
+  private readonly encryptionKey: string;
+
+  constructor(private readonly configService: ConfigService) {
+    this.encryptionKey = this.configService.get<string>(
+      'ENCRYPTION_KEY',
+      '12345678901234567890123456789012',
+    );
+    if (!this.encryptionKey || this.encryptionKey.length < 32) {
+      throw new Error('ENCRYPTION_KEY must be at least 32 characters');
+    }
+  }
+
+  encrypt(plainText: string): Uint8Array {
+    const iv = crypto.lib.WordArray.random(16);
+    const encrypted = crypto.AES.encrypt(plainText, this.encryptionKey, {
+      iv: iv,
+      mode: crypto.mode.CBC,
+      padding: crypto.pad.Pkcs7,
+    });
+
+    // Store as OpenSSL format (Base64) which is the native crypto-js serialization
+    const combined = encrypted.toString();
+    const bytes = Buffer.from(combined, 'utf-8');
+    return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  }
+
+  decrypt(encryptedBuffer: Uint8Array): string {
+    const combined = Buffer.from(encryptedBuffer).toString('utf-8');
+
+    // Legacy format: "ivHex:cipherTextHex" (contains a colon)
+    // crypto-js.decrypt treats strings as Base64/OpenSSL, so hex ciphertext
+    // must be wrapped in a CipherParams object for correct parsing.
+    if (combined.includes(':')) {
+      const [ivHex, cipherTextHex] = combined.split(':');
+      const cipherParams = crypto.lib.CipherParams.create({
+        ciphertext: crypto.enc.Hex.parse(cipherTextHex),
+      });
+      const decrypted = crypto.AES.decrypt(cipherParams, this.encryptionKey, {
+        iv: crypto.enc.Hex.parse(ivHex),
+        mode: crypto.mode.CBC,
+        padding: crypto.pad.Pkcs7,
+      });
+      return decrypted.toString(crypto.enc.Utf8);
+    }
+
+    // Current format: OpenSSL Base64
+    const decrypted = crypto.AES.decrypt(combined, this.encryptionKey);
+    return decrypted.toString(crypto.enc.Utf8);
+  }
+
+  hash(input: string): string {
+    return crypto.SHA256(input).toString();
+  }
+}

package/template/apps/api/libs/infra/common/index.ts

@@ -0,0 +1,9 @@
+export { CommonModule } from './common.module';
+export { EncryptionService } from './encryption.service';
+export { DeviceInfo, getDeviceId } from './decorators/device-info.decorator';
+export {
+  TeamInfo,
+  getTeamId,
+  getTeamContext,
+  type TeamContext,
+} from './decorators/team-info.decorator';

package/template/apps/api/libs/infra/shared-services/email/dto/email.dto.ts

@@ -21,7 +21,7 @@ export const EmailTemplateSchema = z.object({
   templateInvokeName: z.string(),
   codeExpire: z.number().optional(),
   frequency: z.number().optional(),
-  sub: z.record(z.string()).nullable().optional(),
+  sub: z.record(z.string(), z.string()).nullable().optional(),
 });
 
 export const EmailConfigSchema = z.object({
@@ -46,10 +46,10 @@ export const SignalMessageSchema = z.object({
   to: z.string().email(),
   subject: z.string().optional(),
   templateInvokeName: z.string(),
-  sub: z.record(z.array(z.string())),
+  sub: z.record(z.string(), z.array(z.string())),
   options: z.any().optional(),
   queueMailId: z.string().optional(),
-  metadata: z.record(z.any()).optional(),
+  metadata: z.record(z.string(), z.any()).optional(),
 });
 
 // ============================================================================

package/template/apps/api/libs/infra/shared-services/email/email.service.ts

@@ -236,7 +236,11 @@ export class EmailService implements OnModuleInit {
     const subVery = {};
     if (sub && subValues) {
       for (const key in sub) {
-        subVery['%' + sub[key] + '%'] = [subValues[sub[key]]];
+        const subKey = sub[key as keyof typeof sub];
+        const subValueKey = subValues[subKey as keyof typeof subValues];
+        if (subKey && subValueKey) {
+          subVery['%' + subKey + '%'] = [subValueKey];
+        }
       }
     }
     return {

package/template/apps/api/libs/infra/shared-services/notification/index.ts

@@ -0,0 +1,13 @@
+export { NotificationModule } from './notification.module';
+export {
+  NotificationService,
+  type NotificationChannel,
+  type NotificationPriority,
+  type NotificationStatus,
+  type NotificationRequest,
+  type NotificationRecord,
+  type NotificationTemplate,
+  type NotificationPreferences,
+  type NotificationStats,
+  type WebhookPayload,
+} from './notification.service';

package/template/apps/api/libs/infra/shared-services/notification/notification.module.ts

@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+import { HttpModule } from '@nestjs/axios';
+import { NotificationService } from './notification.service';
+
+@Module({
+  imports: [HttpModule.register({ timeout: 10000 })],
+  providers: [NotificationService],
+  exports: [NotificationService],
+})
+export class NotificationModule {}