llm-content-creator 0.1.0

package/dist/infrastructure/security/ApiKeyService.d.ts

@@ -0,0 +1,103 @@
+/**
+ * API Key 管理服务
+ *
+ * 提供安全可靠的 API Key 生成、验证和管理功能
+ */
+import { BaseRepository } from '../database/BaseRepository.js';
+/**
+ * API Key 元数据
+ */
+export interface ApiKeyMetadata {
+    name?: string;
+    description?: string;
+    scopes?: string[];
+    ipAddress?: string;
+    userAgent?: string;
+}
+/**
+ * API Key 信息
+ */
+export interface ApiKey {
+    id: string;
+    keyHash: string;
+    userId: string;
+    metadata?: ApiKeyMetadata;
+    isActive: boolean;
+    expiresAt?: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    usageCount: number;
+}
+/**
+ * API Key 创建选项
+ */
+export interface CreateApiKeyOptions {
+    userId: string;
+    name?: string;
+    description?: string;
+    scopes?: string[];
+    expiresIn?: number;
+}
+/**
+ * API Key 服务类
+ */
+export declare class ApiKeyService extends BaseRepository {
+    private algorithm;
+    constructor();
+    /**
+     * 生成 API Key
+     */
+    generateApiKey(): string;
+    /**
+     * 计算 API Key 的哈希值
+     */
+    private hashApiKey;
+    /**
+     * 创建 API Key
+     */
+    createApiKey(options: CreateApiKeyOptions): Promise<{
+        apiKey: string;
+        apiKeyId: string;
+    }>;
+    /**
+     * 验证 API Key
+     */
+    verifyApiKey(apiKey: string): Promise<{
+        valid: boolean;
+        apiKey?: ApiKey;
+        userId?: string;
+    }>;
+    /**
+     * 删除 API Key
+     */
+    deleteApiKey(apiKeyId: string): Promise<boolean>;
+    /**
+     * 禁用 API Key
+     */
+    disableApiKey(apiKeyId: string): Promise<boolean>;
+    /**
+     * 启用 API Key
+     */
+    enableApiKey(apiKeyId: string): Promise<boolean>;
+    /**
+     * 获取用户的 API Key 列表
+     */
+    getUserApiKeys(userId: string): Promise<ApiKey[]>;
+    /**
+     * 获取 API Key 详情
+     */
+    getApiKey(apiKeyId: string): Promise<ApiKey | null>;
+    /**
+     * 清理过期的 API Key
+     */
+    cleanupExpiredKeys(): Promise<number>;
+    /**
+     * 健康检查
+     */
+    healthCheck(): Promise<boolean>;
+}
+/**
+ * API Key 服务单例
+ */
+export declare const apiKeyService: ApiKeyService;
+//# sourceMappingURL=ApiKeyService.d.ts.map

package/dist/infrastructure/security/ApiKeyService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyService.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/ApiKeyService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAI/D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,cAAc;IAC/C,OAAO,CAAC,SAAS,CAAY;;IAM7B;;OAEG;IACH,cAAc,IAAI,MAAM;IAMxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAyC/F;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+DjG;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetD;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAevD;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetD;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA2BvD;;OAEG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+BzD;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;IAgB3C;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAStC;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/infrastructure/security/ApiKeyService.js

@@ -0,0 +1,250 @@
+/**
+ * API Key 管理服务
+ *
+ * 提供安全可靠的 API Key 生成、验证和管理功能
+ */
+import crypto from 'crypto';
+import { createLogger } from '../logging/logger.js';
+import { BaseRepository } from '../database/BaseRepository.js';
+const logger = createLogger('ApiKey');
+/**
+ * API Key 服务类
+ */
+export class ApiKeyService extends BaseRepository {
+    algorithm = 'sha256';
+    constructor() {
+        super();
+    }
+    /**
+     * 生成 API Key
+     */
+    generateApiKey() {
+        const timestamp = Date.now().toString(36);
+        const randomBytes = crypto.randomBytes(16).toString('hex');
+        return `ccak_${timestamp}_${randomBytes}`;
+    }
+    /**
+     * 计算 API Key 的哈希值
+     */
+    hashApiKey(apiKey) {
+        return crypto.createHash(this.algorithm).update(apiKey).digest('hex');
+    }
+    /**
+     * 创建 API Key
+     */
+    async createApiKey(options) {
+        const apiKey = this.generateApiKey();
+        const keyHash = this.hashApiKey(apiKey);
+        const apiKeyId = crypto.randomUUID();
+        const expiresAt = options.expiresIn && options.expiresIn > 0
+            ? new Date(Date.now() + options.expiresIn * 1000)
+            : undefined;
+        try {
+            // 存储到数据库
+            await this.query(`INSERT INTO api_keys (id, key_hash, user_id, metadata, expires_at, created_at)
+         VALUES ($1, $2, $3, $4, $5, NOW())`, [
+                apiKeyId,
+                keyHash,
+                options.userId,
+                JSON.stringify({
+                    name: options.name,
+                    description: options.description,
+                    scopes: options.scopes,
+                }),
+                expiresAt,
+            ]);
+            logger.info('API key created', {
+                apiKeyId,
+                userId: options.userId,
+                name: options.name,
+                expiresAt,
+            });
+            return { apiKey, apiKeyId };
+        }
+        catch (error) {
+            logger.error('Failed to create API key', error);
+            throw new Error('Failed to create API key');
+        }
+    }
+    /**
+     * 验证 API Key
+     */
+    async verifyApiKey(apiKey) {
+        try {
+            const keyHash = this.hashApiKey(apiKey);
+            // 查询数据库
+            const result = await this.query(`SELECT id, key_hash, user_id, metadata, is_active, expires_at, last_used_at, created_at, usage_count
+         FROM api_keys
+         WHERE key_hash = $1`, [keyHash]);
+            if (result.rows.length === 0) {
+                logger.warn('API key not found', { keyHash });
+                return { valid: false };
+            }
+            const row = result.rows[0];
+            // 检查是否激活
+            if (!row.is_active) {
+                logger.warn('API key is inactive', { apiKeyId: row.id });
+                return { valid: false };
+            }
+            // 检查是否过期
+            if (row.expires_at && new Date(row.expires_at) < new Date()) {
+                logger.warn('API key has expired', { apiKeyId: row.id, expiresAt: row.expires_at });
+                return { valid: false };
+            }
+            // 更新最后使用时间和使用次数
+            await this.query(`UPDATE api_keys
+         SET last_used_at = NOW(), usage_count = usage_count + 1
+         WHERE id = $1`, [row.id]);
+            const apiKeyInfo = {
+                id: row.id,
+                keyHash: row.key_hash,
+                userId: row.user_id,
+                metadata: row.metadata,
+                isActive: row.is_active,
+                expiresAt: row.expires_at,
+                lastUsedAt: row.last_used_at,
+                createdAt: row.created_at,
+                usageCount: row.usage_count,
+            };
+            logger.info('API key verified', {
+                apiKeyId: row.id,
+                userId: row.user_id,
+            });
+            return { valid: true, apiKey: apiKeyInfo, userId: row.user_id };
+        }
+        catch (error) {
+            logger.error('Failed to verify API key', error);
+            return { valid: false };
+        }
+    }
+    /**
+     * 删除 API Key
+     */
+    async deleteApiKey(apiKeyId) {
+        try {
+            await this.query(`DELETE FROM api_keys WHERE id = $1`, [apiKeyId]);
+            logger.info('API key deleted', { apiKeyId });
+            return true;
+        }
+        catch (error) {
+            logger.error('Failed to delete API key', error, { apiKeyId });
+            return false;
+        }
+    }
+    /**
+     * 禁用 API Key
+     */
+    async disableApiKey(apiKeyId) {
+        try {
+            await this.query(`UPDATE api_keys SET is_active = false WHERE id = $1`, [apiKeyId]);
+            logger.info('API key disabled', { apiKeyId });
+            return true;
+        }
+        catch (error) {
+            logger.error('Failed to disable API key', error, { apiKeyId });
+            return false;
+        }
+    }
+    /**
+     * 启用 API Key
+     */
+    async enableApiKey(apiKeyId) {
+        try {
+            await this.query(`UPDATE api_keys SET is_active = true WHERE id = $1`, [apiKeyId]);
+            logger.info('API key enabled', { apiKeyId });
+            return true;
+        }
+        catch (error) {
+            logger.error('Failed to enable API key', error, { apiKeyId });
+            return false;
+        }
+    }
+    /**
+     * 获取用户的 API Key 列表
+     */
+    async getUserApiKeys(userId) {
+        try {
+            const result = await this.query(`SELECT id, key_hash, user_id, metadata, is_active, expires_at, last_used_at, created_at, usage_count
+         FROM api_keys
+         WHERE user_id = $1
+         ORDER BY created_at DESC`, [userId]);
+            return result.rows.map((row) => ({
+                id: row.id,
+                keyHash: row.key_hash,
+                userId: row.user_id,
+                metadata: row.metadata,
+                isActive: row.is_active,
+                expiresAt: row.expires_at,
+                lastUsedAt: row.last_used_at,
+                createdAt: row.created_at,
+                usageCount: row.usage_count,
+            }));
+        }
+        catch (error) {
+            logger.error('Failed to get user API keys', error, { userId });
+            return [];
+        }
+    }
+    /**
+     * 获取 API Key 详情
+     */
+    async getApiKey(apiKeyId) {
+        try {
+            const result = await this.query(`SELECT id, key_hash, user_id, metadata, is_active, expires_at, last_used_at, created_at, usage_count
+         FROM api_keys
+         WHERE id = $1`, [apiKeyId]);
+            if (result.rows.length === 0) {
+                return null;
+            }
+            const row = result.rows[0];
+            return {
+                id: row.id,
+                keyHash: row.key_hash,
+                userId: row.user_id,
+                metadata: row.metadata,
+                isActive: row.is_active,
+                expiresAt: row.expires_at,
+                lastUsedAt: row.last_used_at,
+                createdAt: row.created_at,
+                usageCount: row.usage_count,
+            };
+        }
+        catch (error) {
+            logger.error('Failed to get API key', error, { apiKeyId });
+            return null;
+        }
+    }
+    /**
+     * 清理过期的 API Key
+     */
+    async cleanupExpiredKeys() {
+        try {
+            const result = await this.query(`DELETE FROM api_keys WHERE expires_at < NOW()`, []);
+            const count = result.rowCount || 0;
+            logger.info('Expired API keys cleaned up', { count });
+            return count;
+        }
+        catch (error) {
+            logger.error('Failed to cleanup expired API keys', error);
+            return 0;
+        }
+    }
+    /**
+     * 健康检查
+     */
+    async healthCheck() {
+        try {
+            await this.query('SELECT 1', []);
+            return true;
+        }
+        catch (error) {
+            logger.error('API key service health check failed', error);
+            return false;
+        }
+    }
+}
+/**
+ * API Key 服务单例
+ */
+export const apiKeyService = new ApiKeyService();
+//# sourceMappingURL=ApiKeyService.js.map

package/dist/infrastructure/security/ApiKeyService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyService.js","sourceRoot":"","sources":["../../../src/infrastructure/security/ApiKeyService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAuCtC;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,cAAc;IACvC,SAAS,GAAG,QAAQ,CAAC;IAE7B;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,QAAQ,SAAS,IAAI,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,MAAc;QAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC;YAC1D,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC;YACH,SAAS;YACT,MAAM,IAAI,CAAC,KAAK,CACd;4CACoC,EACpC;gBACE,QAAQ;gBACR,OAAO;gBACP,OAAO,CAAC,MAAM;gBACd,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC;gBACF,SAAS;aACV,CACF,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC7B,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS;aACV,CAAC,CAAC;YAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAc,CAAC,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAExC,QAAQ;YACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;6BAEqB,EACrB,CAAC,OAAO,CAAC,CACV,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;YAElC,SAAS;YACT,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YAED,SAAS;YACT,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YAED,gBAAgB;YAChB,MAAM,IAAI,CAAC,KAAK,CACd;;uBAEe,EACf,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;YAEF,MAAM,UAAU,GAAW;gBACzB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,YAAY;gBAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC9B,QAAQ,EAAE,GAAG,CAAC,EAAE;gBAChB,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAc,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CACd,oCAAoC,EACpC,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CACd,qDAAqD,EACrD,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CACd,oDAAoD,EACpD,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;kCAG0B,EAC1B,CAAC,MAAM,CAAC,CACT,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;gBACpC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,YAAY;gBAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;uBAEe,EACf,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,YAAY;gBAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,+CAA+C,EAC/C,EAAE,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAc,CAAC,CAAC;YACnE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAc,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/infrastructure/security/QuotaService.d.ts

@@ -0,0 +1,87 @@
+/**
+ * 配额管理服务
+ *
+ * 提供用户配额检查、预留、消费和重置功能
+ * 使用乐观锁确保并发安全
+ */
+import { BaseRepository } from '../database/BaseRepository.js';
+/**
+ * 配额信息
+ */
+export interface QuotaInfo {
+    userId: string;
+    quotaDaily: number;
+    quotaUsedToday: number;
+    quotaReserved: number;
+    quotaAvailable: number;
+    lastResetAt: Date;
+}
+/**
+ * 配额预留
+ */
+export interface QuotaReservation {
+    id: string;
+    userId: string;
+    amount: number;
+    createdAt: Date;
+    expiresAt: Date;
+}
+/**
+ * 配额服务类
+ */
+export declare class QuotaService extends BaseRepository {
+    private defaultQuota;
+    constructor();
+    /**
+     * 获取用户配额信息
+     */
+    getUserQuota(userId: string): Promise<QuotaInfo | null>;
+    /**
+     * 检查是否有足够配额
+     */
+    checkQuota(userId: string, amount?: number): Promise<boolean>;
+    /**
+     * 预留配额（使用乐观锁）
+     */
+    reserveQuota(userId: string, amount: number, ttl?: number): Promise<{
+        success: boolean;
+        reservationId?: string;
+    }>;
+    /**
+     * 消费预留的配额
+     */
+    consumeQuota(userId: string, reservationId: string): Promise<boolean>;
+    /**
+     * 直接消费配额（无预留）
+     */
+    consumeDirectly(userId: string, amount: number): Promise<boolean>;
+    /**
+     * 释放预留的配额
+     */
+    releaseQuota(userId: string, amount: number): Promise<boolean>;
+    /**
+     * 重置用户今日配额
+     */
+    private resetIfNeed;
+    /**
+     * 手动重置用户配额
+     */
+    resetUserQuota(userId: string): Promise<boolean>;
+    /**
+     * 设置用户每日配额
+     */
+    setUserQuota(userId: string, quotaDaily: number): Promise<boolean>;
+    /**
+     * 清理过期的配额预留
+     */
+    cleanupExpiredReservations(): Promise<number>;
+    /**
+     * 健康检查
+     */
+    healthCheck(): Promise<boolean>;
+}
+/**
+ * 配额服务单例
+ */
+export declare const quotaService: QuotaService;
+//# sourceMappingURL=QuotaService.d.ts.map

package/dist/infrastructure/security/QuotaService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"QuotaService.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/QuotaService.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAK/D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,cAAc;IAC9C,OAAO,CAAC,YAAY,CAAe;;IAMnC;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAqC7D;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtE;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,MAAY,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAmD5H;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAyE3E;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBvE;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBpE;;OAEG;YACW,WAAW;IAiCzB;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBtD;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBxE;;OAEG;IACG,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAiCnD;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAStC;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,cAAqB,CAAC"}