feat: add safe video key trace fields

server.mjs

@@ -50,6 +50,8 @@ const server = createServer((request, response) => {
       status: response.statusCode,
       durationMs: Date.now() - startedAt,
       ipHash: hashAuditValue(clientIp(request)),
+      videoKeyId: context.videoKeyId || "",
+      videoKeyHint: context.videoKeyHint || "",
       userAgent: String(request.headers["user-agent"] || "").slice(0, 300),
       referer: sanitizeUrlForLog(request.headers.referer || ""),
     });
@@ -321,7 +323,15 @@ async function streamVideoTask(request, response, taskId) {
   const videoToken = requireVideoToken(request, taskId);
   const startedAt = Date.now();
   const context = requestContext.getStore() || {};
-  writeAuditLog({ level: "info", event: "video.proxy.start", requestId: context.requestId, sessionId: context.sessionId, taskId });
+  writeAuditLog({
+    level: "info",
+    event: "video.proxy.start",
+    requestId: context.requestId,
+    sessionId: context.sessionId,
+    taskId,
+    videoKeyId: context.videoKeyId || "",
+    videoKeyHint: context.videoKeyHint || "",
+  });
 
   const task = await callJson(`https://ai-api.kkidc.com/sd/api/v3/contents/generations/tasks/${encodeURIComponent(taskId)}`, {
     headers: bearerHeaders(videoToken, false),
@@ -353,6 +363,8 @@ async function streamVideoTask(request, response, taskId) {
       requestId: context.requestId,
       sessionId: context.sessionId,
       taskId,
+      videoKeyId: context.videoKeyId || "",
+      videoKeyHint: context.videoKeyHint || "",
       durationMs: Date.now() - startedAt,
       contentType,
       contentLength: Number(upstream.headers.get("content-length") || 0) || null,
@@ -364,6 +376,8 @@ async function streamVideoTask(request, response, taskId) {
       requestId: context.requestId,
       sessionId: context.sessionId,
       taskId,
+      videoKeyId: context.videoKeyId || "",
+      videoKeyHint: context.videoKeyHint || "",
       durationMs: Date.now() - startedAt,
       error: sanitizeLogData({ name: error.name, message: error.message }),
     });
@@ -390,6 +404,8 @@ async function callJson(url, options = {}) {
     sessionId: context.sessionId,
     method,
     target,
+    videoKeyId: context.videoKeyId || "",
+    videoKeyHint: context.videoKeyHint || "",
     request: sanitizeLogData(requestBody),
   });
   const controller = new AbortController();
@@ -418,6 +434,8 @@ async function callJson(url, options = {}) {
       status: response.status,
       durationMs: Date.now() - startedAt,
       trackId: result.trackId,
+      videoKeyId: context.videoKeyId || "",
+      videoKeyHint: context.videoKeyHint || "",
       response: sanitizeLogData(body),
     });
     return result;
@@ -430,6 +448,8 @@ async function callJson(url, options = {}) {
       method,
       target,
       durationMs: Date.now() - startedAt,
+      videoKeyId: context.videoKeyId || "",
+      videoKeyHint: context.videoKeyHint || "",
       error: sanitizeLogData({ name: error.name, message: error.message }),
     });
     throw error;
@@ -511,6 +531,11 @@ function requireVideoToken(request, taskId = "") {
   const token = videoTokenFromRequest(request, taskId);
   if (!token) throw new ClientError("请先输入生视频 Key", 401);
   if (!/^sk-[A-Za-z0-9_-]{8,}$/.test(token)) throw new ClientError("生视频 Key 格式不正确", 401);
+  const context = requestContext.getStore();
+  if (context) {
+    context.videoKeyId = hashAuditValue(token).slice(0, 12);
+    context.videoKeyHint = token.slice(-4);
+  }
   return token;
 }