new framwork

client/src/pages/api/admin/countTraining.ts

@@ -0,0 +1,37 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { connectToDatabase, TrainingData } from '@/service/mongo';
+import { TrainingModeEnum } from '@/constants/plugin';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    await authUser({ req, authRoot: true });
+
+    await connectToDatabase();
+
+    // split queue data
+    const result = await TrainingData.aggregate([
+      {
+        $group: {
+          _id: '$mode',
+          count: { $sum: 1 }
+        }
+      }
+    ]);
+
+    jsonRes(res, {
+      data: {
+        qaListLen: result.find((item) => item._id === TrainingModeEnum.qa)?.count || 0,
+        vectorListLen: result.find((item) => item._id === TrainingModeEnum.index)?.count || 0
+      }
+    });
+  } catch (error) {
+    console.log(error);
+    jsonRes(res, {
+      code: 500,
+      error
+    });
+  }
+}

client/src/pages/api/chat/chat.ts

@@ -0,0 +1,195 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { connectToDatabase } from '@/service/mongo';
+import { authChat } from '@/service/utils/auth';
+import { modelServiceToolMap } from '@/service/utils/chat';
+import { ChatItemType } from '@/types/chat';
+import { jsonRes } from '@/service/response';
+import { ChatModelMap, ModelVectorSearchModeMap } from '@/constants/model';
+import { pushChatBill } from '@/service/events/pushBill';
+import { resStreamResponse } from '@/service/utils/chat';
+import { appKbSearch } from '../openapi/kb/appKbSearch';
+import { ChatRoleEnum, QUOTE_LEN_HEADER, GUIDE_PROMPT_HEADER } from '@/constants/chat';
+import { BillTypeEnum } from '@/constants/user';
+import { sensitiveCheck } from '@/service/api/text';
+import { NEW_CHATID_HEADER } from '@/constants/chat';
+import { saveChat } from './saveChat';
+import { Types } from 'mongoose';
+
+/* 发送提示词 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  res.on('close', () => {
+    res.end();
+  });
+  res.on('error', () => {
+    console.log('error: ', 'request error');
+    res.end();
+  });
+
+  try {
+    const { chatId, prompt, modelId } = req.body as {
+      prompt: [ChatItemType, ChatItemType];
+      modelId: string;
+      chatId?: string;
+    };
+
+    if (!modelId || !prompt) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+    let startTime = Date.now();
+
+    const { model, showModelDetail, content, userOpenAiKey, systemAuthKey, userId } =
+      await authChat({
+        modelId,
+        chatId,
+        req
+      });
+
+    const modelConstantsData = ChatModelMap[model.chat.chatModel];
+
+    // 读取对话内容
+    const prompts = [...content, prompt[0]];
+
+    const {
+      code = 200,
+      systemPrompts = [],
+      quote = [],
+      guidePrompt = ''
+    } = await (async () => {
+      // 使用了知识库搜索
+      if (model.chat.relatedKbs.length > 0) {
+        const { code, searchPrompts, rawSearch, guidePrompt } = await appKbSearch({
+          model,
+          userId,
+          fixedQuote: content[content.length - 1]?.quote || [],
+          prompt: prompt[0],
+          similarity: ModelVectorSearchModeMap[model.chat.searchMode]?.similarity
+        });
+
+        return {
+          code,
+          quote: rawSearch,
+          systemPrompts: searchPrompts,
+          guidePrompt
+        };
+      }
+      if (model.chat.systemPrompt) {
+        return {
+          guidePrompt: model.chat.systemPrompt,
+          systemPrompts: [
+            {
+              obj: ChatRoleEnum.System,
+              value: model.chat.systemPrompt
+            }
+          ]
+        };
+      }
+      return {};
+    })();
+
+    // get conversationId. create a newId if it is null
+    const conversationId = chatId || String(new Types.ObjectId());
+    !chatId && res.setHeader(NEW_CHATID_HEADER, conversationId);
+    if (showModelDetail) {
+      guidePrompt && res.setHeader(GUIDE_PROMPT_HEADER, encodeURIComponent(guidePrompt));
+      res.setHeader(QUOTE_LEN_HEADER, quote.length);
+    }
+
+    // search result is empty
+    if (code === 201) {
+      const response = systemPrompts[0]?.value;
+      await saveChat({
+        chatId,
+        newChatId: conversationId,
+        modelId,
+        prompts: [
+          prompt[0],
+          {
+            ...prompt[1],
+            quote: [],
+            value: response
+          }
+        ],
+        userId
+      });
+      return res.end(response);
+    }
+
+    prompts.unshift(...systemPrompts);
+
+    // content check
+    await sensitiveCheck({
+      input: [...systemPrompts, prompt[0]].map((item) => item.value).join('')
+    });
+
+    // 计算温度
+    const temperature = (modelConstantsData.maxTemperature * (model.chat.temperature / 10)).toFixed(
+      2
+    );
+
+    // 发出 chat 请求
+    const { streamResponse, responseMessages } = await modelServiceToolMap[
+      model.chat.chatModel
+    ].chatCompletion({
+      apiKey: userOpenAiKey || systemAuthKey,
+      temperature: +temperature,
+      messages: prompts,
+      stream: true,
+      res,
+      chatId: conversationId
+    });
+
+    console.log('api response time:', `${(Date.now() - startTime) / 1000}s`);
+
+    if (res.closed) return res.end();
+
+    try {
+      const { totalTokens, finishMessages, responseContent } = await resStreamResponse({
+        model: model.chat.chatModel,
+        res,
+        chatResponse: streamResponse,
+        prompts: responseMessages
+      });
+
+      // save chat
+      await saveChat({
+        chatId,
+        newChatId: conversationId,
+        modelId,
+        prompts: [
+          prompt[0],
+          {
+            ...prompt[1],
+            value: responseContent,
+            quote: showModelDetail ? quote : [],
+            systemPrompt: showModelDetail ? guidePrompt : ''
+          }
+        ],
+        userId
+      });
+
+      res.end();
+
+      // 只有使用平台的 key 才计费
+      pushChatBill({
+        isPay: !userOpenAiKey,
+        chatModel: model.chat.chatModel,
+        userId,
+        chatId: conversationId,
+        textLen: finishMessages.map((item) => item.value).join('').length,
+        tokens: totalTokens,
+        type: BillTypeEnum.chat
+      });
+    } catch (error) {
+      res.end();
+      console.log('error，结束', error);
+    }
+  } catch (err: any) {
+    res.status(500);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/delChatRecordByContentId.ts

@@ -0,0 +1,44 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { chatId, contentId } = req.query as {
+      chatId: string;
+      contentId: string;
+    };
+
+    if (!chatId || !contentId) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    const chatRecord = await Chat.findById(chatId);
+
+    if (!chatRecord) {
+      throw new Error('找不到对话');
+    }
+
+    // 删除一条数据库记录
+    await Chat.updateOne(
+      {
+        _id: chatId,
+        userId
+      },
+      { $pull: { content: { _id: contentId } } }
+    );
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/history/getHistory.ts

@@ -0,0 +1,39 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import type { HistoryItemType } from '@/types/chat';
+
+/* 获取历史记录 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const data = await Chat.find(
+      {
+        userId
+      },
+      '_id title top customTitle modelId updateTime latestChat'
+    )
+      .sort({ top: -1, updateTime: -1 })
+      .limit(20);
+
+    jsonRes<HistoryItemType[]>(res, {
+      data: data.map((item) => ({
+        _id: item._id,
+        updateTime: item.updateTime,
+        modelId: item.modelId,
+        title: item.customTitle || item.title,
+        latestChat: item.latestChat,
+        top: item.top
+      }))
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/history/getHistoryQuote.ts

@@ -0,0 +1,52 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { Types } from 'mongoose';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { chatId, historyId } = req.query as {
+      chatId: string;
+      historyId: string;
+    };
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    if (!chatId || !historyId) {
+      throw new Error('params is error');
+    }
+
+    const history = await Chat.aggregate([
+      {
+        $match: {
+          _id: new Types.ObjectId(chatId),
+          userId: new Types.ObjectId(userId)
+        }
+      },
+      {
+        $unwind: '$content'
+      },
+      {
+        $match: {
+          'content._id': new Types.ObjectId(historyId)
+        }
+      },
+      {
+        $project: {
+          quote: '$content.quote'
+        }
+      }
+    ]);
+
+    jsonRes(res, {
+      data: history[0]?.quote || []
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/history/updateChatHistory.ts

@@ -0,0 +1,38 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export type Props = {
+  chatId: '' | string;
+  customTitle?: string;
+  top?: boolean;
+};
+
+/* 更新聊天标题 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { chatId, customTitle, top } = req.body as Props;
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    await Chat.findOneAndUpdate(
+      {
+        _id: chatId,
+        userId
+      },
+      {
+        ...(customTitle ? { customTitle } : {}),
+        ...(top ? { top } : { top: null })
+      }
+    );
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/history/updateHistoryQuote.ts

@@ -0,0 +1,51 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { Types } from 'mongoose';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { chatId, historyId, quoteId } = req.query as {
+      chatId: string;
+      historyId: string;
+      quoteId: string;
+    };
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    if (!chatId || !historyId || !quoteId) {
+      throw new Error('params is error');
+    }
+
+    await Chat.updateOne(
+      {
+        _id: new Types.ObjectId(chatId),
+        userId: new Types.ObjectId(userId),
+        'content._id': new Types.ObjectId(historyId)
+      },
+      {
+        $set: {
+          'content.$.quote.$[quoteElem].source': '手动修改'
+        }
+      },
+      {
+        arrayFilters: [
+          {
+            'quoteElem.id': quoteId
+          }
+        ]
+      }
+    );
+
+    jsonRes(res, {
+      data: ''
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/init.ts

@@ -0,0 +1,111 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat, Model } from '@/service/mongo';
+import type { InitChatResponse } from '@/api/response/chat';
+import { authUser } from '@/service/utils/auth';
+import { ChatItemType } from '@/types/chat';
+import { authModel } from '@/service/utils/auth';
+import mongoose from 'mongoose';
+import { ModelStatusEnum } from '@/constants/model';
+import type { ModelSchema } from '@/types/mongoSchema';
+
+/* 初始化我的聊天框，需要身份验证 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    let { modelId, chatId } = req.query as {
+      modelId: '' | string;
+      chatId: '' | string;
+    };
+
+    await connectToDatabase();
+
+    let model: ModelSchema;
+
+    // 没有 modelId 时，直接获取用户的第一个id
+    if (!modelId) {
+      const myModel = await Model.findOne({ userId });
+      if (!myModel) {
+        const { _id } = await Model.create({
+          name: '应用1',
+          userId,
+          status: ModelStatusEnum.running
+        });
+        model = (await Model.findById(_id)) as ModelSchema;
+      } else {
+        model = myModel;
+      }
+      modelId = model._id;
+    } else {
+      // 校验使用权限
+      const authRes = await authModel({
+        modelId,
+        userId,
+        authUser: false,
+        authOwner: false
+      });
+      model = authRes.model;
+    }
+
+    // 历史记录
+    let history: ChatItemType[] = [];
+
+    if (chatId) {
+      // auth chatId
+      const chat = await Chat.countDocuments({
+        _id: chatId,
+        userId
+      });
+      if (chat === 0) {
+        throw new Error('聊天框不存在');
+      }
+      // 获取 chat.content 数据
+      history = await Chat.aggregate([
+        {
+          $match: {
+            _id: new mongoose.Types.ObjectId(chatId),
+            userId: new mongoose.Types.ObjectId(userId)
+          }
+        },
+        {
+          $project: {
+            content: {
+              $slice: ['$content', -50] // 返回 content 数组的最后50个元素
+            }
+          }
+        },
+        { $unwind: '$content' },
+        {
+          $project: {
+            _id: '$content._id',
+            obj: '$content.obj',
+            value: '$content.value',
+            systemPrompt: '$content.systemPrompt',
+            quoteLen: { $size: { $ifNull: ['$content.quote', []] } }
+          }
+        }
+      ]);
+    }
+
+    jsonRes<InitChatResponse>(res, {
+      data: {
+        chatId: chatId || '',
+        modelId: modelId,
+        model: {
+          name: model.name,
+          avatar: model.avatar,
+          intro: model.share.intro,
+          canUse: model.share.isShare || String(model.userId) === userId
+        },
+        chatModel: model.chat.chatModel,
+        history
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/removeHistory.ts

@@ -0,0 +1,26 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Chat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+/* 获取历史记录 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { id } = req.query;
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    await Chat.findOneAndRemove({
+      _id: id,
+      userId
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/saveChat.ts

@@ -0,0 +1,101 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { ChatItemType } from '@/types/chat';
+import { connectToDatabase, Chat, Model } from '@/service/mongo';
+import { authModel } from '@/service/utils/auth';
+import { authUser } from '@/service/utils/auth';
+import mongoose from 'mongoose';
+
+type Props = {
+  newChatId?: string;
+  chatId?: string;
+  modelId: string;
+  prompts: [ChatItemType, ChatItemType];
+};
+
+/* 聊天内容存存储 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { chatId, modelId, prompts, newChatId } = req.body as Props;
+
+    if (!prompts) {
+      throw new Error('缺少参数');
+    }
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    const nId = await saveChat({
+      chatId,
+      modelId,
+      prompts,
+      newChatId,
+      userId
+    });
+
+    jsonRes(res, {
+      data: nId
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}
+
+export async function saveChat({
+  chatId,
+  newChatId,
+  modelId,
+  prompts,
+  userId
+}: Props & { userId: string }) {
+  await connectToDatabase();
+  const { model } = await authModel({ modelId, userId, authOwner: false });
+
+  const content = prompts.map((item) => ({
+    _id: item._id ? new mongoose.Types.ObjectId(item._id) : undefined,
+    obj: item.obj,
+    value: item.value,
+    systemPrompt: item.systemPrompt,
+    quote: item.quote || []
+  }));
+
+  const [id] = await Promise.all([
+    ...(chatId // update chat
+      ? [
+          Chat.findByIdAndUpdate(chatId, {
+            $push: {
+              content: {
+                $each: content
+              }
+            },
+            title: content[0].value.slice(0, 20),
+            latestChat: content[1].value,
+            updateTime: new Date()
+          }).then(() => '')
+        ]
+      : [
+          Chat.create({
+            _id: newChatId ? new mongoose.Types.ObjectId(newChatId) : undefined,
+            userId,
+            modelId,
+            content,
+            title: content[0].value.slice(0, 20),
+            latestChat: content[1].value
+          }).then((res) => res._id)
+        ]),
+    // update model
+    ...(String(model.userId) === userId
+      ? [
+          Model.findByIdAndUpdate(modelId, {
+            updateTime: new Date()
+          })
+        ]
+      : [])
+  ]);
+
+  return {
+    id
+  };
+}

client/src/pages/api/chat/shareChat/chat.ts

@@ -0,0 +1,140 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { connectToDatabase } from '@/service/mongo';
+import { authShareChat } from '@/service/utils/auth';
+import { modelServiceToolMap } from '@/service/utils/chat';
+import { ChatItemSimpleType } from '@/types/chat';
+import { jsonRes } from '@/service/response';
+import { ChatModelMap, ModelVectorSearchModeMap } from '@/constants/model';
+import { pushChatBill, updateShareChatBill } from '@/service/events/pushBill';
+import { resStreamResponse } from '@/service/utils/chat';
+import { ChatRoleEnum } from '@/constants/chat';
+import { BillTypeEnum } from '@/constants/user';
+import { sensitiveCheck } from '@/service/api/text';
+import { appKbSearch } from '../../openapi/kb/appKbSearch';
+
+/* 发送提示词 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  res.on('error', () => {
+    console.log('error: ', 'request error');
+    res.end();
+  });
+
+  try {
+    const { shareId, password, historyId, prompts } = req.body as {
+      prompts: ChatItemSimpleType[];
+      password: string;
+      shareId: string;
+      historyId: string;
+    };
+
+    if (!historyId || !prompts) {
+      throw new Error('分享链接无效');
+    }
+
+    await connectToDatabase();
+    let startTime = Date.now();
+
+    const { model, userOpenAiKey, systemAuthKey, userId } = await authShareChat({
+      shareId,
+      password
+    });
+
+    const modelConstantsData = ChatModelMap[model.chat.chatModel];
+
+    const { code = 200, systemPrompts = [] } = await (async () => {
+      // 使用了知识库搜索
+      if (model.chat.relatedKbs.length > 0) {
+        const { code, searchPrompts } = await appKbSearch({
+          model,
+          userId,
+          fixedQuote: [],
+          prompt: prompts[prompts.length - 1],
+          similarity: ModelVectorSearchModeMap[model.chat.searchMode]?.similarity
+        });
+
+        return {
+          code,
+          systemPrompts: searchPrompts
+        };
+      }
+      if (model.chat.systemPrompt) {
+        return {
+          systemPrompts: [
+            {
+              obj: ChatRoleEnum.System,
+              value: model.chat.systemPrompt
+            }
+          ]
+        };
+      }
+      return {};
+    })();
+
+    // search result is empty
+    if (code === 201) {
+      return res.send(systemPrompts[0]?.value);
+    }
+
+    prompts.unshift(...systemPrompts);
+
+    // content check
+    await sensitiveCheck({
+      input: [...systemPrompts, prompts[prompts.length - 1]].map((item) => item.value).join('')
+    });
+
+    // 计算温度
+    const temperature = (modelConstantsData.maxTemperature * (model.chat.temperature / 10)).toFixed(
+      2
+    );
+
+    // 发出请求
+    const { streamResponse, responseMessages } = await modelServiceToolMap[
+      model.chat.chatModel
+    ].chatCompletion({
+      apiKey: userOpenAiKey || systemAuthKey,
+      temperature: +temperature,
+      messages: prompts,
+      stream: true,
+      res,
+      chatId: historyId
+    });
+
+    console.log('api response time:', `${(Date.now() - startTime) / 1000}s`);
+
+    if (res.closed) return res.end();
+
+    try {
+      const { totalTokens, finishMessages } = await resStreamResponse({
+        model: model.chat.chatModel,
+        res,
+        chatResponse: streamResponse,
+        prompts: responseMessages
+      });
+
+      res.end();
+
+      /* bill */
+      pushChatBill({
+        isPay: !userOpenAiKey,
+        chatModel: model.chat.chatModel,
+        userId,
+        textLen: finishMessages.map((item) => item.value).join('').length,
+        tokens: totalTokens,
+        type: BillTypeEnum.chat
+      });
+      updateShareChatBill({
+        shareId,
+        tokens: totalTokens
+      });
+    } catch (error) {
+      res.end();
+      console.log('error，结束', error);
+    }
+  } catch (err: any) {
+    res.status(500);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/shareChat/create.ts

@@ -0,0 +1,40 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, ShareChat } from '@/service/mongo';
+import { authModel, authUser } from '@/service/utils/auth';
+import type { ShareChatEditType } from '@/types/model';
+
+/* create a shareChat */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { modelId, name, maxContext, password } = req.body as ShareChatEditType & {
+      modelId: string;
+    };
+
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+    await authModel({
+      modelId,
+      userId,
+      authOwner: false
+    });
+
+    const { _id } = await ShareChat.create({
+      userId,
+      modelId,
+      name,
+      password,
+      maxContext
+    });
+
+    jsonRes(res, {
+      data: _id
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/shareChat/delete.ts

@@ -0,0 +1,29 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, ShareChat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+/* delete a shareChat by shareChatId */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { id } = req.query as {
+      id: string;
+    };
+
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await ShareChat.findOneAndRemove({
+      _id: id,
+      userId
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/shareChat/init.ts

@@ -0,0 +1,64 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, ShareChat, User } from '@/service/mongo';
+import type { InitShareChatResponse } from '@/api/response/chat';
+import { authModel } from '@/service/utils/auth';
+import { hashPassword } from '@/service/utils/tools';
+import { HUMAN_ICON } from '@/constants/chat';
+
+/* 初始化我的聊天框，需要身份验证 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { shareId, password = '' } = req.query as {
+      shareId: string;
+      password: string;
+    };
+
+    if (!shareId) {
+      throw new Error('params is error');
+    }
+
+    await connectToDatabase();
+
+    // get shareChat
+    const shareChat = await ShareChat.findById(shareId);
+
+    if (!shareChat) {
+      throw new Error('分享链接已失效');
+    }
+
+    if (shareChat.password !== hashPassword(password)) {
+      return jsonRes(res, {
+        code: 501,
+        message: '密码不正确'
+      });
+    }
+
+    // 校验使用权限
+    const { model } = await authModel({
+      modelId: shareChat.modelId,
+      userId: String(shareChat.userId),
+      authOwner: false
+    });
+
+    const user = await User.findById(shareChat.userId, 'avatar');
+
+    jsonRes<InitShareChatResponse>(res, {
+      data: {
+        maxContext: shareChat.maxContext,
+        userAvatar: user?.avatar || HUMAN_ICON,
+        model: {
+          name: model.name,
+          avatar: model.avatar,
+          intro: model.share.intro
+        },
+        chatModel: model.chat.chatModel
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/chat/shareChat/list.ts

@@ -0,0 +1,43 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, ShareChat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { hashPassword } from '@/service/utils/tools';
+
+/* get shareChat list by modelId */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { modelId } = req.query as {
+      modelId: string;
+    };
+
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    const data = await ShareChat.find({
+      modelId,
+      userId
+    }).sort({
+      _id: -1
+    });
+
+    const blankPassword = hashPassword('');
+
+    jsonRes(res, {
+      data: data.map((item) => ({
+        _id: item._id,
+        name: item.name,
+        password: item.password === blankPassword ? '' : '1',
+        tokens: item.tokens,
+        maxContext: item.maxContext,
+        lastTime: item.lastTime
+      }))
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/create.ts

@@ -0,0 +1,48 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { ModelStatusEnum } from '@/constants/model';
+import { Model } from '@/service/models/model';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { name } = req.body as {
+      name: string;
+    };
+
+    if (!name) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // 上限校验
+    const authCount = await Model.countDocuments({
+      userId
+    });
+    if (authCount >= 30) {
+      throw new Error('上限 30 个应用');
+    }
+
+    // 创建模型
+    const response = await Model.create({
+      name,
+      userId,
+      status: ModelStatusEnum.running
+    });
+
+    jsonRes(res, {
+      data: response._id
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/del.ts

@@ -0,0 +1,55 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { Chat, Model, connectToDatabase, Collection, ShareChat } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { authModel } from '@/service/utils/auth';
+
+/* 获取我的模型 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { modelId } = req.query as { modelId: string };
+
+    if (!modelId) {
+      throw new Error('参数错误');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // 验证是否是该用户的 model
+    await authModel({
+      modelId,
+      userId
+    });
+
+    // 删除对应的聊天
+    await Chat.deleteMany({
+      modelId
+    });
+
+    // 删除收藏列表
+    await Collection.deleteMany({
+      modelId
+    });
+
+    // 删除分享链接
+    await ShareChat.deleteMany({
+      modelId
+    });
+
+    // 删除模型
+    await Model.deleteOne({
+      _id: modelId,
+      userId
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/detail.tsx

@@ -0,0 +1,36 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { authModel } from '@/service/utils/auth';
+
+/* 获取我的模型 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { modelId } = req.query as { modelId: string };
+
+    if (!modelId) {
+      throw new Error('参数错误');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const { model } = await authModel({
+      modelId,
+      userId,
+      authOwner: false
+    });
+
+    jsonRes(res, {
+      data: model
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/list.ts

@@ -0,0 +1,58 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Collection, Model } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import type { ModelListResponse } from '@/api/response/model';
+
+/* 获取模型列表 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // 根据 userId 获取模型信息
+    const [myModels, myCollections] = await Promise.all([
+      Model.find(
+        {
+          userId
+        },
+        '_id avatar name chat.systemPrompt'
+      ).sort({
+        updateTime: -1
+      }),
+      Collection.find({ userId })
+        .populate({
+          path: 'modelId',
+          select: '_id avatar name chat.systemPrompt',
+          match: { 'share.isShare': true }
+        })
+        .then((res) => res.filter((item) => item.modelId))
+    ]);
+
+    jsonRes<ModelListResponse>(res, {
+      data: {
+        myModels: myModels.map((item) => ({
+          _id: item._id,
+          name: item.name,
+          avatar: item.avatar,
+          systemPrompt: item.chat.systemPrompt
+        })),
+        myCollectionModels: myCollections
+          .map((item: any) => ({
+            _id: item.modelId?._id,
+            name: item.modelId?.name,
+            avatar: item.modelId?.avatar,
+            systemPrompt: item.modelId?.chat.systemPrompt
+          }))
+          .filter((item) => !myModels.find((model) => String(model._id) === String(item._id))) // 去重
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/share/collection.ts

@@ -0,0 +1,44 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Collection, Model } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+/* 模型收藏切换 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { modelId } = req.query as { modelId: string };
+
+    if (!modelId) {
+      throw new Error('缺少参数');
+    }
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const collectionRecord = await Collection.findOne({
+      userId,
+      modelId
+    });
+
+    if (collectionRecord) {
+      await Collection.findByIdAndRemove(collectionRecord._id);
+    } else {
+      await Collection.create({
+        userId,
+        modelId
+      });
+    }
+
+    await Model.findByIdAndUpdate(modelId, {
+      'share.collection': await Collection.countDocuments({ modelId })
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/share/getModels.ts

@@ -0,0 +1,111 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Model } from '@/service/mongo';
+import type { PagingData } from '@/types';
+import type { ShareModelItem } from '@/types/model';
+import { parseCookie } from '@/service/utils/auth';
+import { Types } from 'mongoose';
+
+/* 获取模型列表 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const {
+      searchText = '',
+      pageNum = 1,
+      pageSize = 20
+    } = req.body as { searchText: string; pageNum: number; pageSize: number };
+
+    await connectToDatabase();
+
+    let userId = '';
+
+    try {
+      userId = await parseCookie(req.headers.cookie);
+    } catch (error) {
+      error;
+    }
+
+    const regex = new RegExp(searchText, 'i');
+
+    const where = {
+      $and: [
+        { 'share.isShare': true },
+        {
+          $or: [{ name: { $regex: regex } }, { 'share.intro': { $regex: regex } }]
+        }
+      ]
+    };
+    const pipeline = [
+      {
+        $match: where
+      },
+      {
+        $lookup: {
+          from: 'collections',
+          let: { modelId: '$_id' },
+          pipeline: [
+            {
+              $match: {
+                $expr: {
+                  $and: [
+                    { $eq: ['$modelId', '$$modelId'] },
+                    {
+                      $eq: ['$userId', userId ? new Types.ObjectId(userId) : new Types.ObjectId()]
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          as: 'collections'
+        }
+      },
+      {
+        $project: {
+          _id: 1,
+          avatar: { $ifNull: ['$avatar', '/icon/logo.png'] },
+          name: 1,
+          userId: 1,
+          share: 1,
+          isCollection: {
+            $cond: {
+              if: { $gt: [{ $size: '$collections' }, 0] },
+              then: true,
+              else: false
+            }
+          }
+        }
+      },
+      {
+        $sort: { 'share.collection': -1 }
+      },
+      {
+        $skip: (pageNum - 1) * pageSize
+      },
+      {
+        $limit: pageSize
+      }
+    ];
+
+    // 获取被分享的模型
+    const [models, total] = await Promise.all([
+      // @ts-ignore
+      Model.aggregate(pipeline),
+      Model.countDocuments(where)
+    ]);
+
+    jsonRes<PagingData<ShareModelItem>>(res, {
+      data: {
+        pageNum,
+        pageSize,
+        data: models,
+        total
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/model/update.ts

@@ -0,0 +1,52 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { Model } from '@/service/models/model';
+import type { ModelUpdateParams } from '@/types/model';
+import { authModel } from '@/service/utils/auth';
+
+/* 获取我的模型 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { name, avatar, chat, share } = req.body as ModelUpdateParams;
+    const { modelId } = req.query as { modelId: string };
+
+    if (!name || !chat || !modelId) {
+      throw new Error('参数错误');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    await authModel({
+      modelId,
+      userId
+    });
+
+    // 更新模型
+    await Model.updateOne(
+      {
+        _id: modelId,
+        userId
+      },
+      {
+        name,
+        avatar,
+        chat,
+        'share.isShare': share.isShare,
+        'share.isShareDetail': share.isShareDetail,
+        'share.intro': share.intro
+      }
+    );
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/openapi/chat/chat.ts

@@ -0,0 +1,180 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser, authModel, getApiKey } from '@/service/utils/auth';
+import { modelServiceToolMap, resStreamResponse } from '@/service/utils/chat';
+import { ChatItemSimpleType } from '@/types/chat';
+import { jsonRes } from '@/service/response';
+import { ChatModelMap, ModelVectorSearchModeMap } from '@/constants/model';
+import { pushChatBill } from '@/service/events/pushBill';
+import { ChatRoleEnum } from '@/constants/chat';
+import { withNextCors } from '@/service/utils/tools';
+import { BillTypeEnum } from '@/constants/user';
+import { sensitiveCheck } from '@/service/api/text';
+import { NEW_CHATID_HEADER } from '@/constants/chat';
+import { Types } from 'mongoose';
+import { appKbSearch } from '../kb/appKbSearch';
+
+/* 发送提示词 */
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse) {
+  res.on('close', () => {
+    res.end();
+  });
+  res.on('error', () => {
+    console.log('error: ', 'request error');
+    res.end();
+  });
+
+  try {
+    const {
+      chatId,
+      prompts,
+      modelId,
+      isStream = true
+    } = req.body as {
+      chatId?: string;
+      prompts: ChatItemSimpleType[];
+      modelId: string;
+      isStream: boolean;
+    };
+
+    if (!prompts || !modelId) {
+      throw new Error('缺少参数');
+    }
+    if (!Array.isArray(prompts)) {
+      throw new Error('prompts is not array');
+    }
+    if (prompts.length > 30 || prompts.length === 0) {
+      throw new Error('Prompts arr length range 1-30');
+    }
+
+    await connectToDatabase();
+    let startTime = Date.now();
+
+    /* 凭证校验 */
+    const { userId } = await authUser({ req });
+
+    const { model } = await authModel({
+      userId,
+      modelId
+    });
+
+    /* get api key */
+    const { systemAuthKey: apiKey } = await getApiKey({
+      model: model.chat.chatModel,
+      userId,
+      mustPay: true
+    });
+
+    const modelConstantsData = ChatModelMap[model.chat.chatModel];
+
+    let systemPrompts: {
+      obj: ChatRoleEnum;
+      value: string;
+    }[] = [];
+
+    // 使用了知识库搜索
+    if (model.chat.relatedKbs.length > 0) {
+      const { code, searchPrompts } = await appKbSearch({
+        model,
+        userId,
+        fixedQuote: [],
+        prompt: prompts[prompts.length - 1],
+        similarity: ModelVectorSearchModeMap[model.chat.searchMode]?.similarity
+      });
+
+      // search result is empty
+      if (code === 201) {
+        return isStream
+          ? res.send(searchPrompts[0]?.value)
+          : jsonRes(res, {
+              data: searchPrompts[0]?.value,
+              message: searchPrompts[0]?.value
+            });
+      }
+
+      systemPrompts = searchPrompts;
+    } else if (model.chat.systemPrompt) {
+      systemPrompts = [
+        {
+          obj: ChatRoleEnum.System,
+          value: model.chat.systemPrompt
+        }
+      ];
+    }
+
+    prompts.unshift(...systemPrompts);
+
+    // content check
+    await sensitiveCheck({
+      input: [...systemPrompts, prompts[prompts.length - 1]].map((item) => item.value).join('')
+    });
+
+    // 计算温度
+    const temperature = (modelConstantsData.maxTemperature * (model.chat.temperature / 10)).toFixed(
+      2
+    );
+
+    // get conversationId. create a newId if it is null
+    const conversationId = chatId || String(new Types.ObjectId());
+    !chatId && res?.setHeader(NEW_CHATID_HEADER, conversationId);
+
+    // 发出请求
+    const { streamResponse, responseMessages, responseText, totalTokens } =
+      await modelServiceToolMap[model.chat.chatModel].chatCompletion({
+        apiKey,
+        temperature: +temperature,
+        messages: prompts,
+        stream: isStream,
+        res,
+        chatId: conversationId
+      });
+
+    console.log('api response time:', `${(Date.now() - startTime) / 1000}s`);
+
+    if (res.closed) return res.end();
+
+    const { textLen = 0, tokens = totalTokens } = await (async () => {
+      if (isStream) {
+        try {
+          const { finishMessages, totalTokens } = await resStreamResponse({
+            model: model.chat.chatModel,
+            res,
+            chatResponse: streamResponse,
+            prompts: responseMessages
+          });
+          res.end();
+          return {
+            textLen: finishMessages.map((item) => item.value).join('').length,
+            tokens: totalTokens
+          };
+        } catch (error) {
+          res.end();
+          console.log('error，结束', error);
+        }
+      } else {
+        jsonRes(res, {
+          data: responseText
+        });
+        return {
+          textLen: responseMessages.map((item) => item.value).join('').length
+        };
+      }
+      return {};
+    })();
+
+    pushChatBill({
+      isPay: true,
+      chatModel: model.chat.chatModel,
+      userId,
+      textLen,
+      tokens,
+      type: BillTypeEnum.openapiChat
+    });
+  } catch (err: any) {
+    res.status(500);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});

client/src/pages/api/openapi/delKey.ts

@@ -0,0 +1,28 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, OpenApi } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { id } = req.query as { id: string };
+
+    if (!id) {
+      throw new Error('缺少参数');
+    }
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    await OpenApi.findOneAndRemove({ _id: id, userId });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/openapi/getKeys.ts

@@ -0,0 +1,37 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, OpenApi } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { UserOpenApiKey } from '@/types/openapi';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const findResponse = await OpenApi.find({ userId }).sort({ _id: -1 });
+
+    // jus save four data
+    const apiKeys = findResponse.map<UserOpenApiKey>(
+      ({ _id, apiKey, createTime, lastUsedTime }) => {
+        return {
+          id: _id,
+          apiKey: `${apiKey.substring(0, 2)}******${apiKey.substring(apiKey.length - 2)}`,
+          createTime,
+          lastUsedTime
+        };
+      }
+    );
+
+    jsonRes(res, {
+      data: apiKeys
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/openapi/kb/appKbSearch.ts

@@ -0,0 +1,209 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import { withNextCors } from '@/service/utils/tools';
+import type { ChatItemSimpleType } from '@/types/chat';
+import type { ModelSchema } from '@/types/mongoSchema';
+import { appVectorSearchModeEnum } from '@/constants/model';
+import { authModel } from '@/service/utils/auth';
+import { ChatModelMap } from '@/constants/model';
+import { ChatRoleEnum } from '@/constants/chat';
+import { openaiEmbedding } from '../plugin/openaiEmbedding';
+import { modelToolMap } from '@/utils/plugin';
+
+export type QuoteItemType = {
+  id: string;
+  q: string;
+  a: string;
+  source?: string;
+};
+type Props = {
+  prompts: ChatItemSimpleType[];
+  similarity: number;
+  appId: string;
+};
+type Response = {
+  code: 200 | 201;
+  rawSearch: QuoteItemType[];
+  guidePrompt: string;
+  searchPrompts: {
+    obj: ChatRoleEnum;
+    value: string;
+  }[];
+};
+
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { userId } = await authUser({ req });
+
+    if (!userId) {
+      throw new Error('userId is empty');
+    }
+
+    const { prompts, similarity, appId } = req.body as Props;
+
+    if (!similarity || !Array.isArray(prompts) || !appId) {
+      throw new Error('params is error');
+    }
+
+    // auth model
+    const { model } = await authModel({
+      modelId: appId,
+      userId
+    });
+
+    const result = await appKbSearch({
+      model,
+      userId,
+      fixedQuote: [],
+      prompt: prompts[prompts.length - 1],
+      similarity
+    });
+
+    jsonRes<Response>(res, {
+      data: result
+    });
+  } catch (err) {
+    console.log(err);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});
+
+export async function appKbSearch({
+  model,
+  userId,
+  fixedQuote,
+  prompt,
+  similarity
+}: {
+  model: ModelSchema;
+  userId: string;
+  fixedQuote: QuoteItemType[];
+  prompt: ChatItemSimpleType;
+  similarity: number;
+}): Promise<Response> {
+  const modelConstantsData = ChatModelMap[model.chat.chatModel];
+
+  // get vector
+  const promptVector = await openaiEmbedding({
+    userId,
+    input: [prompt.value],
+    type: 'chat'
+  });
+
+  // search kb
+  const res: any = await PgClient.query(
+    `BEGIN;
+    select id,q,a,source from modelData where kb_id IN (${model.chat.relatedKbs
+      .map((item) => `'${item}'`)
+      .join(',')}) AND vector <#> '[${promptVector[0]}]' < -${similarity} order by vector <#> '[${
+      promptVector[0]
+    }]' limit 8;
+    COMMIT;`
+  );
+
+  const searchRes: QuoteItemType[] = res?.[1]?.rows || [];
+
+  // filter same search result
+  const idSet = new Set<string>();
+  const filterSearch = [
+    ...searchRes.slice(0, 3),
+    ...fixedQuote.slice(0, 2),
+    ...searchRes.slice(3),
+    ...fixedQuote.slice(2, 5)
+  ].filter((item) => {
+    if (idSet.has(item.id)) {
+      return false;
+    }
+    idSet.add(item.id);
+    return true;
+  });
+
+  // 计算固定提示词的 token 数量
+  const guidePrompt = model.chat.systemPrompt // user system prompt
+    ? {
+        obj: ChatRoleEnum.System,
+        value: model.chat.systemPrompt
+      }
+    : model.chat.searchMode === appVectorSearchModeEnum.noContext
+    ? {
+        obj: ChatRoleEnum.System,
+        value: `知识库是关于"${model.name}"的内容,根据知识库内容回答问题.`
+      }
+    : {
+        obj: ChatRoleEnum.System,
+        value: `玩一个问答游戏,规则为:
+1.你完全忘记你已有的知识
+2.你只回答关于"${model.name}"的问题
+3.你只从知识库中选择内容进行回答
+4.如果问题不在知识库中,你会回答:"我不知道。"
+请务必遵守规则`
+      };
+
+  const fixedSystemTokens = modelToolMap[model.chat.chatModel].countTokens({
+    messages: [guidePrompt]
+  });
+  const sliceResult = modelToolMap[model.chat.chatModel]
+    .tokenSlice({
+      maxToken: modelConstantsData.systemMaxToken - fixedSystemTokens,
+      messages: filterSearch.map((item) => ({
+        obj: ChatRoleEnum.System,
+        value: `${item.q}\n${item.a}`
+      }))
+    })
+    .map((item) => item.value);
+
+  // slice filterSearch
+  const rawSearch = filterSearch.slice(0, sliceResult.length);
+
+  //  system prompt
+  const systemPrompt = sliceResult.join('\n').trim();
+
+  /* 高相似度+不回复 */
+  if (!systemPrompt && model.chat.searchMode === appVectorSearchModeEnum.hightSimilarity) {
+    return {
+      code: 201,
+      rawSearch: [],
+      guidePrompt: '',
+      searchPrompts: [
+        {
+          obj: ChatRoleEnum.System,
+          value: '对不起，你的问题不在知识库中。'
+        }
+      ]
+    };
+  }
+  /* 高相似度+无上下文，不添加额外知识,仅用系统提示词 */
+  if (!systemPrompt && model.chat.searchMode === appVectorSearchModeEnum.noContext) {
+    return {
+      code: 200,
+      rawSearch: [],
+      guidePrompt: model.chat.systemPrompt || '',
+      searchPrompts: model.chat.systemPrompt
+        ? [
+            {
+              obj: ChatRoleEnum.System,
+              value: model.chat.systemPrompt
+            }
+          ]
+        : []
+    };
+  }
+
+  return {
+    code: 200,
+    rawSearch,
+    guidePrompt: guidePrompt.value || '',
+    searchPrompts: [
+      {
+        obj: ChatRoleEnum.System,
+        value: `知识库:${systemPrompt}`
+      },
+      guidePrompt
+    ]
+  };
+}

client/src/pages/api/openapi/kb/delDataById.ts

@@ -0,0 +1,32 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import { withNextCors } from '@/service/utils/tools';
+
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    let { dataId } = req.query as {
+      dataId: string;
+    };
+
+    if (!dataId) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req });
+
+    await PgClient.delete('modelData', {
+      where: [['user_id', userId], 'AND', ['id', dataId]]
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    console.log(err);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});

client/src/pages/api/openapi/kb/pushData.ts

@@ -0,0 +1,149 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, TrainingData } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { authKb } from '@/service/utils/auth';
+import { withNextCors } from '@/service/utils/tools';
+import { TrainingModeEnum } from '@/constants/plugin';
+import { startQueue } from '@/service/utils/tools';
+import { PgClient } from '@/service/pg';
+
+type DateItemType = { a: string; q: string; source?: string };
+
+export type Props = {
+  kbId: string;
+  data: DateItemType[];
+  mode: `${TrainingModeEnum}`;
+  prompt?: string;
+};
+
+export type Response = {
+  insertLen: number;
+};
+
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { kbId, data, mode, prompt } = req.body as Props;
+
+    if (!kbId || !Array.isArray(data)) {
+      throw new Error('缺少参数');
+    }
+    await connectToDatabase();
+
+    // 凭证校验
+    const { userId } = await authUser({ req });
+
+    jsonRes<Response>(res, {
+      data: await pushDataToKb({
+        kbId,
+        data,
+        userId,
+        mode,
+        prompt
+      })
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});
+
+export async function pushDataToKb({
+  userId,
+  kbId,
+  data,
+  mode,
+  prompt
+}: { userId: string } & Props): Promise<Response> {
+  await authKb({
+    userId,
+    kbId
+  });
+
+  // 过滤重复的 qa 内容
+  const set = new Set();
+  const filterData: DateItemType[] = [];
+
+  data.forEach((item) => {
+    const text = item.q + item.a;
+    if (!set.has(text)) {
+      filterData.push(item);
+      set.add(text);
+    }
+  });
+
+  // 数据库去重
+  const insertData = (
+    await Promise.allSettled(
+      filterData.map(async ({ q, a = '', source }) => {
+        if (mode !== TrainingModeEnum.index) {
+          return Promise.resolve({
+            q,
+            a,
+            source
+          });
+        }
+
+        if (!q) {
+          return Promise.reject('q为空');
+        }
+
+        q = q.replace(/\\n/g, '\n').trim().replace(/'/g, '"');
+        a = a.replace(/\\n/g, '\n').trim().replace(/'/g, '"');
+
+        // Exactly the same data, not push
+        try {
+          const { rows } = await PgClient.query(`
+            SELECT COUNT(*) > 0 AS exists
+            FROM  modelData 
+            WHERE md5(q)=md5('${q}') AND md5(a)=md5('${a}') AND user_id='${userId}' AND kb_id='${kbId}'
+          `);
+          const exists = rows[0]?.exists || false;
+
+          if (exists) {
+            return Promise.reject('已经存在');
+          }
+        } catch (error) {
+          console.log(error);
+          error;
+        }
+        return Promise.resolve({
+          q,
+          a,
+          source
+        });
+      })
+    )
+  )
+    .filter((item) => item.status === 'fulfilled')
+    .map<DateItemType>((item: any) => item.value);
+
+  // 插入记录
+  await TrainingData.insertMany(
+    insertData.map((item) => ({
+      q: item.q,
+      a: item.a,
+      source: item.source,
+      userId,
+      kbId,
+      mode,
+      prompt
+    }))
+  );
+
+  insertData.length > 0 && startQueue();
+
+  return {
+    insertLen: insertData.length
+  };
+}
+
+export const config = {
+  api: {
+    bodyParser: {
+      sizeLimit: '20mb'
+    }
+  }
+};

client/src/pages/api/openapi/kb/updateData.ts

@@ -0,0 +1,53 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import { withNextCors } from '@/service/utils/tools';
+import { openaiEmbedding } from '../plugin/openaiEmbedding';
+
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { dataId, a = '', q = '' } = req.body as { dataId: string; a?: string; q?: string };
+
+    if (!dataId) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req });
+
+    // get vector
+    const vector = await (async () => {
+      if (q) {
+        return openaiEmbedding({
+          userId,
+          input: [q],
+          type: 'chat'
+        });
+      }
+      return [];
+    })();
+
+    // 更新 pg 内容.仅修改a，不需要更新向量。
+    await PgClient.update('modelData', {
+      where: [['id', dataId], 'AND', ['user_id', userId]],
+      values: [
+        { key: 'source', value: '手动修改' },
+        { key: 'a', value: a.replace(/'/g, '"') },
+        ...(q
+          ? [
+              { key: 'q', value: q.replace(/'/g, '"') },
+              { key: 'vector', value: `[${vector[0]}]` }
+            ]
+          : [])
+      ]
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});

client/src/pages/api/openapi/plugin/openaiEmbedding.ts

@@ -0,0 +1,79 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser, getApiKey } from '@/service/utils/auth';
+import { withNextCors } from '@/service/utils/tools';
+import { getOpenAIApi } from '@/service/utils/chat/openai';
+import { embeddingModel } from '@/constants/model';
+import { axiosConfig } from '@/service/utils/tools';
+import { pushGenerateVectorBill } from '@/service/events/pushBill';
+import { ApiKeyType } from '@/service/utils/auth';
+
+type Props = {
+  input: string[];
+  type?: ApiKeyType;
+};
+type Response = number[][];
+
+export default withNextCors(async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { userId } = await authUser({ req });
+    let { input, type } = req.query as Props;
+
+    if (!Array.isArray(input)) {
+      throw new Error('缺少参数');
+    }
+
+    jsonRes<Response>(res, {
+      data: await openaiEmbedding({ userId, input, type, mustPay: true })
+    });
+  } catch (err) {
+    console.log(err);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+});
+
+export async function openaiEmbedding({
+  userId,
+  input,
+  mustPay = false,
+  type = 'chat'
+}: { userId: string; mustPay?: boolean } & Props) {
+  const { userOpenAiKey, systemAuthKey } = await getApiKey({
+    model: 'gpt-3.5-turbo',
+    userId,
+    mustPay,
+    type
+  });
+
+  // 获取 chatAPI
+  const chatAPI = getOpenAIApi();
+
+  // 把输入的内容转成向量
+  const result = await chatAPI
+    .createEmbedding(
+      {
+        model: embeddingModel,
+        input
+      },
+      {
+        timeout: 60000,
+        ...axiosConfig(userOpenAiKey || systemAuthKey)
+      }
+    )
+    .then((res) => ({
+      tokenLen: res.data.usage.total_tokens || 0,
+      vectors: res.data.data.map((item) => item.embedding)
+    }));
+
+  pushGenerateVectorBill({
+    isPay: !userOpenAiKey,
+    userId,
+    text: input.join(''),
+    tokenLen: result.tokenLen
+  });
+
+  return result.vectors;
+}

client/src/pages/api/openapi/postKey.ts

@@ -0,0 +1,37 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, OpenApi } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { customAlphabet } from 'nanoid';
+const nanoid = customAlphabet('abcdefghijklmnopqrstuvwxyz1234567890');
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const count = await OpenApi.find({ userId }).countDocuments();
+
+    if (count >= 5) {
+      throw new Error('最多 5 组API Key');
+    }
+
+    const apiKey = `${userId}-${nanoid()}`;
+
+    await OpenApi.create({
+      userId,
+      apiKey
+    });
+
+    jsonRes(res, {
+      data: apiKey
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/openapi/text/gptMessagesSlice.ts

@@ -0,0 +1,66 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import type { ChatItemSimpleType } from '@/types/chat';
+import { countOpenAIToken } from '@/utils/plugin/openai';
+
+type ModelType = 'gpt-3.5-turbo' | 'gpt-4' | 'gpt-4-32k';
+
+type Props = {
+  messages: ChatItemSimpleType[];
+  model: ModelType;
+  maxLen: number;
+};
+type Response = ChatItemSimpleType[];
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    await authUser({ req });
+
+    const { messages, model, maxLen } = req.body as Props;
+
+    if (!Array.isArray(messages) || !model || !maxLen) {
+      throw new Error('params is error');
+    }
+
+    return jsonRes<Response>(res, {
+      data: gpt_chatItemTokenSlice({
+        messages,
+        model,
+        maxToken: maxLen
+      })
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}
+
+export function gpt_chatItemTokenSlice({
+  messages,
+  model,
+  maxToken
+}: {
+  messages: ChatItemSimpleType[];
+  model: ModelType;
+  maxToken: number;
+}) {
+  let result: ChatItemSimpleType[] = [];
+
+  for (let i = 0; i < messages.length; i++) {
+    const msgs = [...result, messages[i]];
+
+    const tokens = countOpenAIToken({ messages: msgs, model });
+
+    if (tokens < maxToken) {
+      result = msgs;
+    } else {
+      break;
+    }
+  }
+
+  return result.length === 0 && messages[0] ? [messages[0]] : result;
+}

client/src/pages/api/openapi/text/sensitiveCheck.ts

@@ -0,0 +1,48 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser, getSystemOpenAiKey } from '@/service/utils/auth';
+import type { TextPluginRequestParams } from '@/types/plugin';
+import axios from 'axios';
+import { axiosConfig } from '@/service/utils/tools';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    if (process.env.SENSITIVE_CHECK !== '1') {
+      return jsonRes(res);
+    }
+
+    await authUser({ req });
+
+    const { input } = req.body as TextPluginRequestParams;
+
+    const response = await axios({
+      ...axiosConfig(getSystemOpenAiKey('chat')),
+      method: 'POST',
+      url: `/moderations`,
+      data: {
+        input
+      }
+    });
+
+    const data = (response.data.results?.[0]?.category_scores as Record<string, number>) || {};
+
+    const values = Object.values(data);
+
+    for (const val of values) {
+      if (val > 0.2) {
+        return jsonRes(res, {
+          code: 500,
+          message: '您的内容不合规'
+        });
+      }
+    }
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/create.ts

@@ -0,0 +1,35 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, KB } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { name, tags } = req.body as {
+      name: string;
+      tags: string[];
+    };
+
+    if (!name) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const { _id } = await KB.create({
+      name,
+      userId,
+      tags
+    });
+
+    jsonRes(res, { data: _id });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/data/exportModelData.ts

@@ -0,0 +1,79 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, User } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    let { kbId } = req.query as {
+      kbId: string;
+    };
+
+    if (!kbId) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    const thirtyMinutesAgo = new Date(Date.now() - 30 * 60 * 1000);
+
+    // auth export times
+    const authTimes = await User.findOne(
+      {
+        _id: userId,
+        $or: [
+          { 'limit.exportKbTime': { $exists: false } },
+          { 'limit.exportKbTime': { $lte: thirtyMinutesAgo } }
+        ]
+      },
+      '_id limit'
+    );
+
+    if (!authTimes) {
+      throw new Error('上次导出未到半小时，每半小时仅可导出一次。');
+    }
+
+    // 统计数据
+    const count = await PgClient.count('modelData', {
+      where: [['kb_id', kbId], 'AND', ['user_id', userId]]
+    });
+    // 从 pg 中获取所有数据
+    const pgData = await PgClient.select<{ q: string; a: string }>('modelData', {
+      where: [['kb_id', kbId], 'AND', ['user_id', userId]],
+      fields: ['q', 'a'],
+      order: [{ field: 'id', mode: 'DESC' }],
+      limit: count
+    });
+
+    const data: [string, string][] = pgData.rows.map((item) => [
+      item.q.replace(/\n/g, '\\n'),
+      item.a.replace(/\n/g, '\\n')
+    ]);
+
+    // update export time
+    await User.findByIdAndUpdate(userId, {
+      'limit.exportKbTime': new Date()
+    });
+
+    jsonRes(res, {
+      data
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}
+
+export const config = {
+  api: {
+    bodyParser: {
+      sizeLimit: '100mb'
+    }
+  }
+};

client/src/pages/api/plugins/kb/data/getDataById.ts

@@ -0,0 +1,39 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import type { KbDataItemType } from '@/types/plugin';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    let { dataId } = req.query as {
+      dataId: string;
+    };
+    if (!dataId) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const where: any = [['user_id', userId], 'AND', ['id', dataId]];
+
+    const searchRes = await PgClient.select<KbDataItemType>('modelData', {
+      fields: ['id', 'q', 'a', 'source'],
+      where,
+      limit: 1
+    });
+
+    jsonRes(res, {
+      data: searchRes.rows[0]
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/data/getDataList.ts

@@ -0,0 +1,70 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import type { KbDataItemType } from '@/types/plugin';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    let {
+      kbId,
+      pageNum = 1,
+      pageSize = 10,
+      searchText = ''
+    } = req.body as {
+      kbId: string;
+      pageNum: number;
+      pageSize: number;
+      searchText: string;
+    };
+    if (!kbId) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const where: any = [
+      ['user_id', userId],
+      'AND',
+      ['kb_id', kbId],
+      ...(searchText
+        ? [
+            'AND',
+            `(q LIKE '%${searchText}%' OR a LIKE '%${searchText}%' OR source LIKE '%${searchText}%')`
+          ]
+        : [])
+    ];
+
+    const [searchRes, total] = await Promise.all([
+      PgClient.select<KbDataItemType>('modelData', {
+        fields: ['id', 'q', 'a', 'source'],
+        where,
+        order: [{ field: 'id', mode: 'DESC' }],
+        limit: pageSize,
+        offset: pageSize * (pageNum - 1)
+      }),
+      PgClient.count('modelData', {
+        fields: ['id'],
+        where
+      })
+    ]);
+
+    jsonRes(res, {
+      data: {
+        pageNum,
+        pageSize,
+        data: searchRes.rows,
+        total
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/data/getTrainingData.ts

@@ -0,0 +1,52 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, TrainingData } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { TrainingModeEnum } from '@/constants/plugin';
+import { Types } from 'mongoose';
+import { startQueue } from '@/service/utils/tools';
+
+/* 拆分数据成QA */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { kbId, init = false } = req.body as { kbId: string; init: boolean };
+    if (!kbId) {
+      throw new Error('参数错误');
+    }
+    await connectToDatabase();
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    // split queue data
+    const result = await TrainingData.aggregate([
+      {
+        $match: {
+          userId: new Types.ObjectId(userId),
+          kbId: new Types.ObjectId(kbId)
+        }
+      },
+      {
+        $group: {
+          _id: '$mode',
+          count: { $sum: 1 }
+        }
+      }
+    ]);
+
+    jsonRes(res, {
+      data: {
+        qaListLen: result.find((item) => item._id === TrainingModeEnum.qa)?.count || 0,
+        vectorListLen: result.find((item) => item._id === TrainingModeEnum.index)?.count || 0
+      }
+    });
+
+    if (init) {
+      startQueue();
+    }
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/delete.ts

@@ -0,0 +1,55 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, KB, Model, TrainingData } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import { Types } from 'mongoose';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { id } = req.query as {
+      id: string;
+    };
+
+    if (!id) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // delete all pg data
+    await PgClient.delete('modelData', {
+      where: [['user_id', userId], 'AND', ['kb_id', id]]
+    });
+
+    // delete training data
+    await TrainingData.deleteMany({
+      userId,
+      kbId: id
+    });
+
+    // delete related model
+    await Model.updateMany(
+      {
+        userId
+      },
+      { $pull: { 'chat.relatedKbs': new Types.ObjectId(id) } }
+    );
+
+    // delete kb data
+    await KB.findOneAndDelete({
+      _id: id,
+      userId
+    });
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/detail.ts

@@ -0,0 +1,46 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, KB } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { id } = req.query as {
+      id: string;
+    };
+
+    if (!id) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const data = await KB.findOne({
+      _id: id,
+      userId
+    });
+
+    if (!data) {
+      throw new Error('kb is not exist');
+    }
+
+    jsonRes(res, {
+      data: {
+        _id: data._id,
+        avatar: data.avatar,
+        name: data.name,
+        userId: data.userId,
+        updateTime: data.updateTime,
+        tags: data.tags.join(' ')
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/list.ts

@@ -0,0 +1,42 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, KB } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PgClient } from '@/service/pg';
+import { KbItemType } from '@/types/plugin';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const kbList = await KB.find({
+      userId
+    }).sort({ updateTime: -1 });
+
+    const data = await Promise.all(
+      kbList.map(async (item) => ({
+        _id: item._id,
+        avatar: item.avatar,
+        name: item.name,
+        userId: item.userId,
+        updateTime: item.updateTime,
+        tags: item.tags.join(' '),
+        totalData: await PgClient.count('modelData', {
+          where: [['user_id', userId], 'AND', ['kb_id', item._id]]
+        })
+      }))
+    );
+
+    jsonRes<KbItemType[]>(res, {
+      data
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/plugins/kb/update.ts

@@ -0,0 +1,39 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, KB } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import type { KbUpdateParams } from '@/api/plugins/kb';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { id, name, tags, avatar } = req.body as KbUpdateParams;
+
+    if (!id || !name) {
+      throw new Error('缺少参数');
+    }
+
+    // 凭证校验
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    await KB.findOneAndUpdate(
+      {
+        _id: id,
+        userId
+      },
+      {
+        avatar,
+        name,
+        tags: tags.split(' ').filter((item) => item)
+      }
+    );
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/system/getInitData.ts

@@ -0,0 +1,17 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+
+export type InitDateResponse = {
+  beianText: string;
+  googleVerKey: string;
+};
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  jsonRes<InitDateResponse>(res, {
+    data: {
+      beianText: process.env.SAFE_BEIAN_TEXT || '',
+      googleVerKey: process.env.CLIENT_GOOGLE_VER_TOKEN || ''
+    }
+  });
+}

client/src/pages/api/system/getModels.ts

@@ -0,0 +1,23 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import type { ChatModelItemType } from '@/constants/model';
+import { ChatModelMap, OpenAiChatEnum, ClaudeEnum } from '@/constants/model';
+
+// get the models available to the system
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const chatModelList: ChatModelItemType[] = [];
+
+  if (process.env.OPENAIKEY) {
+    chatModelList.push(ChatModelMap[OpenAiChatEnum.GPT35]);
+  }
+  if (process.env.GPT4KEY) {
+    chatModelList.push(ChatModelMap[OpenAiChatEnum.GPT4]);
+  }
+  if (process.env.CLAUDE_KEY) {
+    chatModelList.push(ChatModelMap[ClaudeEnum.Claude]);
+  }
+
+  jsonRes(res, {
+    data: chatModelList
+  });
+}

client/src/pages/api/user/checkPayResult.ts

@@ -0,0 +1,121 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, User, Pay, TrainingData } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { PaySchema, UserModelSchema } from '@/types/mongoSchema';
+import dayjs from 'dayjs';
+import { getPayResult } from '@/service/utils/wxpay';
+import { pushPromotionRecord } from '@/service/utils/promotion';
+import { PRICE_SCALE } from '@/constants/common';
+import { startQueue } from '@/service/utils/tools';
+
+/* 校验支付结果 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { payId } = req.query as { payId: string };
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // 查找订单记录校验
+    const payOrder = await Pay.findById<PaySchema>(payId);
+
+    if (!payOrder) {
+      throw new Error('订单不存在');
+    }
+    if (payOrder.status !== 'NOTPAY') {
+      throw new Error('订单已结算');
+    }
+
+    // 获取当前用户
+    const user = await User.findById(userId);
+    if (!user) {
+      throw new Error('找不到用户');
+    }
+    // 获取邀请者
+    let inviter: UserModelSchema | null = null;
+    if (user.inviterId) {
+      inviter = await User.findById(user.inviterId);
+    }
+
+    const payRes = await getPayResult(payOrder.orderId);
+
+    // 校验下是否超过一天
+    const orderTime = dayjs(payOrder.createTime);
+    const diffInHours = dayjs().diff(orderTime, 'hours');
+
+    if (payRes.trade_state === 'SUCCESS') {
+      // 订单已支付
+      try {
+        // 更新订单状态. 如果没有合适的订单，说明订单重复了
+        const updateRes = await Pay.updateOne(
+          {
+            _id: payId,
+            status: 'NOTPAY'
+          },
+          {
+            status: 'SUCCESS'
+          }
+        );
+        if (updateRes.modifiedCount === 1) {
+          // 给用户账号充钱
+          await User.findByIdAndUpdate(userId, {
+            $inc: { balance: payOrder.price }
+          });
+          // 推广佣金发放
+          if (inviter) {
+            pushPromotionRecord({
+              userId: inviter._id,
+              objUId: userId,
+              type: 'invite',
+              // amount 单位为元，需要除以缩放比例，最后乘比例
+              amount: (payOrder.price / PRICE_SCALE) * inviter.promotion.rate * 0.01
+            });
+          }
+          jsonRes(res, {
+            data: '支付成功'
+          });
+          unlockTask(userId);
+        }
+      } catch (error) {
+        await Pay.findByIdAndUpdate(payId, {
+          status: 'NOTPAY'
+        });
+        console.log(error);
+      }
+    } else if (payRes.trade_state === 'CLOSED' || diffInHours > 24) {
+      // 订单已关闭
+      await Pay.findByIdAndUpdate(payId, {
+        status: 'CLOSED'
+      });
+      jsonRes(res, {
+        data: '订单已过期'
+      });
+    } else {
+      throw new Error(payRes?.trade_state_desc || '订单无效');
+    }
+  } catch (err) {
+    // console.log(err);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}
+
+async function unlockTask(userId: string) {
+  try {
+    await TrainingData.updateMany(
+      {
+        userId
+      },
+      {
+        lockTime: new Date('2000/1/1')
+      }
+    );
+    startQueue();
+  } catch (error) {
+    unlockTask(userId);
+  }
+}

client/src/pages/api/user/getBill.ts

@@ -0,0 +1,49 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Bill } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { adaptBill } from '@/utils/adapt';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { pageNum = 1, pageSize = 10 } = req.query as {
+      pageNum: string;
+      pageSize: string;
+    };
+
+    pageNum = +pageNum;
+    pageSize = +pageSize;
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const where = {
+      userId
+    };
+
+    // get bill record and total by record
+    const [bills, total] = await Promise.all([
+      Bill.find(where)
+        .sort({ time: -1 }) // 按照创建时间倒序排列
+        .skip((pageNum - 1) * pageSize)
+        .limit(pageSize),
+      Bill.countDocuments(where)
+    ]);
+
+    jsonRes(res, {
+      data: {
+        pageNum,
+        pageSize,
+        data: bills.map(adaptBill),
+        total
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/getPayCode.ts

@@ -0,0 +1,43 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { customAlphabet } from 'nanoid';
+import { connectToDatabase, Pay } from '@/service/mongo';
+import { PRICE_SCALE } from '@/constants/common';
+import { nativePay } from '@/service/utils/wxpay';
+
+const nanoid = customAlphabet('abcdefghijklmnopqrstuvwxyz1234567890', 20);
+
+/* 获取支付二维码 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { amount = 0 } = req.query as { amount: string };
+    amount = +amount;
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    const id = nanoid();
+    await connectToDatabase();
+
+    const code_url = await nativePay(amount * 100, id);
+
+    // 充值记录 + 1
+    const payOrder = await Pay.create({
+      userId,
+      price: amount * PRICE_SCALE,
+      orderId: id
+    });
+
+    jsonRes(res, {
+      data: {
+        payId: payOrder._id,
+        codeUrl: code_url
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/getPayOrders.ts

@@ -0,0 +1,27 @@
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { authUser } from '@/service/utils/auth';
+import { connectToDatabase, Pay } from '@/service/mongo';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const records = await Pay.find({
+      userId,
+      status: { $ne: 'CLOSED' }
+    }).sort({ createTime: -1 });
+
+    jsonRes(res, {
+      data: records
+    });
+  } catch (err) {
+    console.log(err);
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/inform/countUnread.ts

@@ -0,0 +1,31 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Inform } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    if (!req.headers.cookie) {
+      return jsonRes(res, {
+        data: 0
+      });
+    }
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const data = await Inform.countDocuments({
+      userId,
+      read: false
+    });
+
+    jsonRes(res, {
+      data
+    });
+  } catch (err) {
+    jsonRes(res, {
+      data: 0
+    });
+  }
+}

client/src/pages/api/user/inform/list.ts

@@ -0,0 +1,40 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Inform } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    const { pageNum, pageSize = 10 } = req.body as {
+      pageNum: number;
+      pageSize: number;
+    };
+
+    await connectToDatabase();
+
+    const [informs, total] = await Promise.all([
+      Inform.find({ userId })
+        .sort({ time: -1 }) // 按照创建时间倒序排列
+        .skip((pageNum - 1) * pageSize)
+        .limit(pageSize),
+      Inform.countDocuments({ userId })
+    ]);
+
+    jsonRes(res, {
+      data: {
+        pageNum,
+        pageSize,
+        data: informs,
+        total
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/inform/read.ts

@@ -0,0 +1,29 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Inform } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const { id } = req.query as { id: string };
+
+    await Inform.findOneAndUpdate(
+      {
+        _id: id,
+        userId
+      },
+      {
+        read: true
+      }
+    );
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res);
+  }
+}

client/src/pages/api/user/inform/send.ts

@@ -0,0 +1,75 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, Inform, User } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { InformTypeEnum } from '@/constants/user';
+
+export type Props = {
+  type: `${InformTypeEnum}`;
+  title: string;
+  content: string;
+  userId?: string;
+};
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    await authUser({ req, authRoot: true });
+
+    await connectToDatabase();
+
+    jsonRes(res, {
+      data: await sendInform(req.body),
+      message: '发送通知成功'
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}
+
+export async function sendInform({ type, title, content, userId }: Props) {
+  if (!type || !title || !content) {
+    return;
+  }
+
+  try {
+    if (userId) {
+      // skip it if have same inform within 5 minutes
+      const inform = await Inform.findOne({
+        type,
+        title,
+        content,
+        userId,
+        read: false,
+        time: { $lte: new Date(Date.now() + 5 * 60 * 1000) }
+      });
+
+      if (inform) return;
+
+      await Inform.create({
+        type,
+        title,
+        content,
+        userId
+      });
+
+      return;
+    }
+
+    // send to all user
+    const users = await User.find({}, '_id');
+    await Inform.insertMany(
+      users.map(({ _id }) => ({
+        type,
+        title,
+        content,
+        userId: _id
+      }))
+    );
+  } catch (error) {
+    console.log('send inform error', error);
+  }
+}

client/src/pages/api/user/loginByPassword.ts

@@ -0,0 +1,48 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { User } from '@/service/models/user';
+import { setCookie } from '@/service/utils/tools';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { username, password } = req.body;
+
+    if (!username || !password) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+
+    // 检测用户是否存在
+    const authUser = await User.findOne({
+      username
+    });
+    if (!authUser) {
+      throw new Error('用户未注册');
+    }
+
+    const user = await User.findOne({
+      username,
+      password
+    });
+
+    if (!user) {
+      throw new Error('密码错误');
+    }
+
+    setCookie(res, user._id);
+
+    jsonRes(res, {
+      data: {
+        user
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/loginout.ts

@@ -0,0 +1,16 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { clearCookie } from '@/service/utils/tools';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    clearCookie(res);
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/promotion/getPromotionData.ts

@@ -0,0 +1,69 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, User, promotionRecord } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import mongoose from 'mongoose';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const invitedAmount = await User.countDocuments({
+      inviterId: userId
+    });
+
+    // 计算累计合
+    const countHistory: { totalAmount: number }[] = await promotionRecord.aggregate([
+      {
+        $match: {
+          userId: new mongoose.Types.ObjectId(userId),
+          amount: { $gt: 0 }
+        }
+      },
+      {
+        $group: {
+          _id: null, // 分组条件，这里使用 null 表示不分组
+          totalAmount: { $sum: '$amount' } // 计算 amount 字段的总和
+        }
+      },
+      {
+        $project: {
+          _id: false, // 排除 _id 字段
+          totalAmount: true // 只返回 totalAmount 字段
+        }
+      }
+    ]);
+    // 计算剩余金额
+    const countResidue: { totalAmount: number }[] = await promotionRecord.aggregate([
+      { $match: { userId: new mongoose.Types.ObjectId(userId) } },
+      {
+        $group: {
+          _id: null, // 分组条件，这里使用 null 表示不分组
+          totalAmount: { $sum: '$amount' } // 计算 amount 字段的总和
+        }
+      },
+      {
+        $project: {
+          _id: false, // 排除 _id 字段
+          totalAmount: true // 只返回 totalAmount 字段
+        }
+      }
+    ]);
+
+    jsonRes(res, {
+      data: {
+        invitedAmount,
+        historyAmount: countHistory[0]?.totalAmount || 0,
+        residueAmount: countResidue[0]?.totalAmount || 0
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/promotion/getPromotions.ts

@@ -0,0 +1,47 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase, promotionRecord } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    let { pageNum = 1, pageSize = 10 } = req.query as {
+      pageNum: string;
+      pageSize: string;
+    };
+    pageNum = +pageNum;
+    pageSize = +pageSize;
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    const data = await promotionRecord
+      .find(
+        {
+          userId
+        },
+        '_id createTime type amount'
+      )
+      .sort({ _id: -1 })
+      .skip((pageNum - 1) * pageSize)
+      .limit(pageSize);
+
+    jsonRes(res, {
+      data: {
+        pageNum,
+        pageSize,
+        data,
+        total: await promotionRecord.countDocuments({
+          userId
+        })
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/register.ts

@@ -0,0 +1,72 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { User } from '@/service/models/user';
+import { AuthCode } from '@/service/models/authCode';
+import { connectToDatabase } from '@/service/mongo';
+import { setCookie } from '@/service/utils/tools';
+import { UserAuthTypeEnum } from '@/constants/common';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { username, code, password, inviterId } = req.body;
+
+    if (!username || !code || !password) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+
+    // 验证码校验
+    const authCode = await AuthCode.findOne({
+      username,
+      code,
+      type: UserAuthTypeEnum.register,
+      expiredTime: { $gte: Date.now() }
+    });
+
+    if (!authCode) {
+      throw new Error('验证码错误');
+    }
+
+    // 重名校验
+    const authRepeat = await User.findOne({
+      username
+    });
+
+    if (authRepeat) {
+      throw new Error('该用户已被注册');
+    }
+
+    const response = await User.create({
+      username,
+      password,
+      inviterId: inviterId ? inviterId : undefined
+    });
+
+    // 根据 id 获取用户信息
+    const user = await User.findById(response._id);
+
+    if (!user) {
+      throw new Error('获取用户信息异常');
+    }
+
+    // 删除验证码记录
+    await AuthCode.deleteMany({
+      username
+    });
+
+    setCookie(res, user._id);
+
+    jsonRes(res, {
+      data: {
+        user
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/sendAuthCode.ts

@@ -0,0 +1,71 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { AuthCode } from '@/service/models/authCode';
+import { connectToDatabase } from '@/service/mongo';
+import { sendPhoneCode, sendEmailCode } from '@/service/utils/sendNote';
+import { UserAuthTypeEnum } from '@/constants/common';
+import { customAlphabet } from 'nanoid';
+const nanoid = customAlphabet('123456789', 6);
+import { authGoogleToken } from '@/utils/plugin/google';
+import requestIp from 'request-ip';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { username, type, googleToken } = req.body as {
+      username: string;
+      type: `${UserAuthTypeEnum}`;
+      googleToken: string;
+    };
+
+    if (!username || !type) {
+      throw new Error('缺少参数');
+    }
+
+    // google auth
+    process.env.SERVICE_GOOGLE_VER_TOKEN &&
+      (await authGoogleToken({
+        secret: process.env.SERVICE_GOOGLE_VER_TOKEN,
+        response: googleToken,
+        remoteip: requestIp.getClientIp(req) || undefined
+      }));
+
+    await connectToDatabase();
+
+    const code = nanoid();
+
+    // 判断 1 分钟内是否有重复数据
+    const authCode = await AuthCode.findOne({
+      username,
+      type,
+      expiredTime: { $gte: Date.now() + 4 * 60 * 1000 } // 如果有一个记录的过期时间，大于当前+4分钟，说明距离上次发送还没到1分钟。（因为默认创建时，过期时间是未来5分钟）
+    });
+
+    if (authCode) {
+      throw new Error('请勿频繁获取验证码');
+    }
+
+    // 创建 auth 记录
+    await AuthCode.create({
+      username,
+      type,
+      code
+    });
+
+    if (username.includes('@')) {
+      await sendEmailCode(username, code, type);
+    } else {
+      // 发送验证码
+      await sendPhoneCode(username, code);
+    }
+
+    jsonRes(res, {
+      message: '发送验证码成功'
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/tokenLogin.ts

@@ -0,0 +1,30 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { connectToDatabase } from '@/service/mongo';
+import { User } from '@/service/models/user';
+import { authUser } from '@/service/utils/auth';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  try {
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+
+    // 根据 id 获取用户信息
+    const user = await User.findById(userId);
+
+    if (!user) {
+      throw new Error('账号异常');
+    }
+
+    jsonRes(res, {
+      data: user
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/update.ts

@@ -0,0 +1,35 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { User } from '@/service/models/user';
+import { connectToDatabase } from '@/service/mongo';
+import { authUser } from '@/service/utils/auth';
+import { UserUpdateParams } from '@/types/user';
+
+/* 更新一些基本信息 */
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { openaiKey, avatar } = req.body as UserUpdateParams;
+
+    const { userId } = await authUser({ req, authToken: true });
+
+    await connectToDatabase();
+    // 更新对应的记录
+    await User.updateOne(
+      {
+        _id: userId
+      },
+      {
+        ...(avatar && { avatar }),
+        ...(openaiKey !== undefined && { openaiKey })
+      }
+    );
+
+    jsonRes(res);
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}

client/src/pages/api/user/updatePasswordByCode.ts

@@ -0,0 +1,64 @@
+// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
+import type { NextApiRequest, NextApiResponse } from 'next';
+import { jsonRes } from '@/service/response';
+import { User } from '@/service/models/user';
+import { AuthCode } from '@/service/models/authCode';
+import { connectToDatabase } from '@/service/mongo';
+import { UserAuthTypeEnum } from '@/constants/common';
+import { setCookie } from '@/service/utils/tools';
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse<any>) {
+  try {
+    const { username, code, password } = req.body;
+
+    if (!username || !code || !password) {
+      throw new Error('缺少参数');
+    }
+
+    await connectToDatabase();
+
+    // 验证码校验
+    const authCode = await AuthCode.findOne({
+      username,
+      code,
+      type: UserAuthTypeEnum.findPassword,
+      expiredTime: { $gte: Date.now() }
+    });
+
+    if (!authCode) {
+      throw new Error('验证码错误');
+    }
+
+    // 更新对应的记录
+    await User.updateOne(
+      {
+        username
+      },
+      {
+        password
+      }
+    );
+
+    // 根据 username 获取用户信息
+    const user = await User.findOne({
+      username
+    });
+
+    if (!user) {
+      throw new Error('获取用户信息异常');
+    }
+
+    setCookie(res, user._id);
+
+    jsonRes(res, {
+      data: {
+        user
+      }
+    });
+  } catch (err) {
+    jsonRes(res, {
+      code: 500,
+      error: err
+    });
+  }
+}