feat: 持久化运维审计日志

src/deploy-runs/deploy-runs.service.ts

@@ -61,10 +61,10 @@ export class DeployRunsService {
     }
 
     const project = await this.projectsService.getProject(input.projectKey);
-    this.validateReleaseRequest(input, project);
+    await this.validateReleaseRequest(input, project);
     const run = await this.deployRunRepository.create(input);
 
-    this.auditService.record({
+    await this.auditService.record({
       action: 'DEPLOY_REQUESTED',
       resourceType: 'deploy_run',
       resourceId: run.id,
@@ -94,7 +94,7 @@ export class DeployRunsService {
       );
     }
 
-    this.auditService.record({
+    await this.auditService.record({
       action: 'DEPLOY_CANCELED',
       resourceType: 'deploy_run',
       resourceId: run.id,
@@ -150,7 +150,7 @@ export class DeployRunsService {
       }
     }
 
-    this.auditService.record({
+    await this.auditService.record({
       action: 'JENKINS_SYNC_SWEEP_COMPLETED',
       resourceType: 'deploy_run',
       after: {
@@ -175,7 +175,7 @@ export class DeployRunsService {
     const notification =
       await this.deployNotificationService.sendDeployRunEvent(run, event);
 
-    this.auditService.record({
+    await this.auditService.record({
       action: `DEPLOY_NOTIFICATION_${notification.status.toUpperCase()}`,
       resourceType: 'deploy_run',
       resourceId: run.id,
@@ -194,12 +194,12 @@ export class DeployRunsService {
     );
   }
 
-  private validateReleaseRequest(
+  private async validateReleaseRequest(
     input: CreateDeployRunInput,
     project: ProjectSummary,
-  ): ProjectEnvironmentSummary {
+  ): Promise<ProjectEnvironmentSummary> {
     if (project.status !== 'active') {
-      this.recordDeployRejected(input, 'Project is archived');
+      await this.recordDeployRejected(input, 'Project is archived');
       throw new AppError(
         'VALIDATION_FAILED',
         `Project ${project.key} is archived and cannot be deployed`,
@@ -213,7 +213,7 @@ export class DeployRunsService {
     );
 
     if (!environment) {
-      this.recordDeployRejected(input, 'Environment is not configured');
+      await this.recordDeployRejected(input, 'Environment is not configured');
       throw new AppError(
         'VALIDATION_FAILED',
         `Project ${project.key} does not expose ${input.environment} environment`,
@@ -223,7 +223,10 @@ export class DeployRunsService {
     }
 
     if (!new RegExp(environment.refPattern).test(input.ref)) {
-      this.recordDeployRejected(input, 'Ref does not match release policy');
+      await this.recordDeployRejected(
+        input,
+        'Ref does not match release policy',
+      );
       throw new AppError(
         'VALIDATION_FAILED',
         `Ref ${input.ref} does not match ${environment.releasePolicy} release policy`,
@@ -241,11 +244,11 @@ export class DeployRunsService {
     return environment;
   }
 
-  private recordDeployRejected(
+  private async recordDeployRejected(
     input: CreateDeployRunInput,
     reason: string,
-  ): void {
-    this.auditService.record({
+  ): Promise<void> {
+    await this.auditService.record({
       action: 'DEPLOY_REJECTED',
       resourceType: 'deploy_run',
       actorName: input.operator,