refactor(Dockerfile): 使用requirements.txt替代硬编码依赖 将Dockerfile中的硬编码pip包列表替换为通过requirements.txt文件安装, 提高依赖管理的灵活性和可维护性。 feat(scheduling): 移除内置APScheduler,采用独立调度系统 移除app/core/background/scheduler.py中原来的APScheduler实现, 改为使用新的应用级调度系统app.application.scheduling。 refactor(task_queue): 调整任务队列模块结构和导入路径 将任务队列相关常量从app.core.background.task_queue.constants迁移至 app.tasks.constants,并更新所有相关导入路径和引用。 refactor(events): 将事件服务重构为独立的应用层组件 将事件分发逻辑从核心层迁移到应用层,使用app.application.events.EventDispatchService 替代原有的app.modules.events.services.EventService。 feat(ai_memory): 增强AI记忆自动写入的安全策略 新增ai_memory_blocked_content_terms配置项用于阻止敏感内容, 添加TTL过期机制控制自动写入条目的生命周期。 fix(security): 强化生产环境安全验证机制 增加model_validator确保生产环境中数据库连接、API密钥、CORS设置等 关键安全配置符合要求。 feat(risks): 优化风险事件操作动作的外键约束 为RiskEventAction模型的风险事件ID字段添加外键约束, 防止孤立记录并增强数据完整性。 refactor(audit): 优化审计服务方法命名和事务处理 将AuditService的log方法重命名为record以反映其阶段行为, 并调整事务提交时机以提高性能。 feat(events): 增强领域事件并发处理和响应模型 添加事件锁定机制防止重复处理,更新API响应模型以提供 更准确的数据类型定义。 ```
93 lines
3.1 KiB
Python
93 lines
3.1 KiB
Python
from typing import Any
|
|
|
|
from sqlalchemy import select
|
|
|
|
from app.core.constants import ActorValue
|
|
from app.core.security import ensure_business_mutations_enabled
|
|
from app.modules.audit.constants import (
|
|
AuditAction,
|
|
AuditRiskLevel,
|
|
AuditSource,
|
|
AuditTargetType,
|
|
)
|
|
from app.modules.audit.schemas import AuditLogCreate
|
|
from app.modules.audit.service import AuditService
|
|
from app.modules.business.constants import (
|
|
CLOSED_RISK_STATUSES,
|
|
)
|
|
from app.modules.business.models import (
|
|
RiskEvent,
|
|
)
|
|
from app.modules.business.service import serialize_model
|
|
from app.modules.risk.constants import (
|
|
RiskGenerationAction,
|
|
RiskGenerationResultKey,
|
|
RiskEventPayloadKey,
|
|
)
|
|
|
|
|
|
class RiskGenerationMixin:
|
|
def generate_events(self, actor: str = ActorValue.API) -> dict[str, Any]:
|
|
"""Generate or refresh risk-event ledger entries from current signals."""
|
|
|
|
ensure_business_mutations_enabled()
|
|
payloads = self._build_event_payloads()
|
|
created = 0
|
|
updated = 0
|
|
skipped = 0
|
|
items: list[dict[str, Any]] = []
|
|
|
|
for payload in payloads:
|
|
record = self.db.execute(
|
|
select(RiskEvent).where(RiskEvent.code == payload[RiskEventPayloadKey.CODE])
|
|
).scalar_one_or_none()
|
|
if record is None:
|
|
record = RiskEvent(**payload)
|
|
self.db.add(record)
|
|
self.db.flush()
|
|
created += 1
|
|
action = RiskGenerationAction.CREATED
|
|
elif record.status in CLOSED_RISK_STATUSES:
|
|
skipped += 1
|
|
items.append(
|
|
{
|
|
RiskGenerationResultKey.ACTION: RiskGenerationAction.SKIPPED,
|
|
RiskGenerationResultKey.RISK_EVENT: serialize_model(record),
|
|
}
|
|
)
|
|
continue
|
|
else:
|
|
for key, value in payload.items():
|
|
if key != RiskEventPayloadKey.CODE:
|
|
setattr(record, key, value)
|
|
updated += 1
|
|
action = RiskGenerationAction.UPDATED
|
|
items.append(
|
|
{
|
|
RiskGenerationResultKey.ACTION: action,
|
|
RiskGenerationResultKey.RISK_EVENT: serialize_model(record),
|
|
}
|
|
)
|
|
|
|
AuditService(self.db).record(
|
|
AuditLogCreate(
|
|
actor=actor,
|
|
source=AuditSource.RISK,
|
|
action=AuditAction.GENERATE_EVENTS,
|
|
target_type=AuditTargetType.RISK_EVENTS,
|
|
risk_level=AuditRiskLevel.MEDIUM,
|
|
response_payload={
|
|
RiskGenerationResultKey.CREATED: created,
|
|
RiskGenerationResultKey.UPDATED: updated,
|
|
RiskGenerationResultKey.SKIPPED: skipped,
|
|
},
|
|
)
|
|
)
|
|
self.db.commit()
|
|
return {
|
|
RiskGenerationResultKey.CREATED: created,
|
|
RiskGenerationResultKey.UPDATED: updated,
|
|
RiskGenerationResultKey.SKIPPED: skipped,
|
|
RiskGenerationResultKey.ITEMS: items,
|
|
}
|