Files
tiku-backend.net/Tiku.Infrastructure/Jobs/BackgroundJobService.cs

1088 lines
47 KiB
C#

using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.DependencyInjection;
using System.Text.Json;
using System.Formats.Tar;
using System.IO.Compression;
using Tiku.Application.Assets;
using Tiku.Application.Content;
using Tiku.Application.Jobs;
using Tiku.Application.Security;
using Tiku.Application.Tenancy;
using Tiku.Domain.Commerce;
using Tiku.Domain.Common;
using Tiku.Domain.Content;
using Tiku.Domain.Operations;
using Tiku.Infrastructure.Persistence;
using Tiku.Infrastructure.Observability;
using System.Diagnostics;
namespace Tiku.Infrastructure.Jobs;
internal sealed class BackgroundJobService(
TikuDbContext dbContext,
ITenantExecutionScope tenantExecutionScope,
IFeatureAccessService featureAccessService) : IBackgroundJobService
{
private static readonly TimeSpan LeaseDuration = TimeSpan.FromMinutes(5);
public async Task<BackgroundJobItem> EnqueueAsync(
CreateBackgroundJobCommand command,
CancellationToken cancellationToken = default)
{
var normalizedJobType = NormalizeJobType(command.JobType);
var idempotencyKey = NormalizeIdempotencyKey(command.IdempotencyKey);
if (idempotencyKey is not null)
{
var existing = await dbContext.BackgroundJobs.AsNoTracking().SingleOrDefaultAsync(
item => item.TenantId == command.TenantId && item.JobType == normalizedJobType &&
item.IdempotencyKey == idempotencyKey,
cancellationToken);
if (existing is not null)
{
return ToItem(existing);
}
}
if (!command.IsSystemJob && !(await featureAccessService.EvaluateAsync(
command.TenantId,
ResolveRequiredFeature(normalizedJobType, command.Payload),
FeatureAccessOperation.Write,
cancellationToken)).Allowed)
{
throw new InvalidOperationException("Tenant feature entitlement does not allow this background job.");
}
var quotaMetric = command.IsSystemJob ? null : ResolveQuotaMetric(normalizedJobType);
var quotaConsumed = false;
if (quotaMetric is not null)
{
var quota = (await featureAccessService.GetQuotaSummaryAsync(command.TenantId, cancellationToken))
.SingleOrDefault(value => value.MetricCode == quotaMetric);
if (quota is not null)
{
quotaConsumed = await featureAccessService.TryConsumeQuotaAsync(
command.TenantId, quotaMetric, 1, cancellationToken);
if (!quotaConsumed)
{
throw new FeatureAccessException("The background job quota has been exhausted.", "feature_quota_exhausted");
}
}
}
var job = new BackgroundJob
{
TenantId = command.TenantId,
JobType = normalizedJobType,
IdempotencyKey = idempotencyKey,
Payload = command.Payload,
RunAfter = command.RunAfter,
MaxRetries = Math.Clamp(command.MaxRetries, 0, 20)
};
dbContext.BackgroundJobs.Add(job);
try
{
await dbContext.SaveChangesAsync(cancellationToken);
}
catch (DbUpdateException) when (idempotencyKey is not null)
{
dbContext.ChangeTracker.Clear();
var existing = await dbContext.BackgroundJobs.AsNoTracking().SingleOrDefaultAsync(
item => item.TenantId == command.TenantId && item.JobType == normalizedJobType &&
item.IdempotencyKey == idempotencyKey,
cancellationToken);
if (existing is not null)
{
if (quotaConsumed && quotaMetric is not null)
{
await featureAccessService.ReleaseQuotaAsync(command.TenantId, quotaMetric, 1, CancellationToken.None);
}
return ToItem(existing);
}
throw;
}
catch
{
if (quotaConsumed && quotaMetric is not null)
{
await featureAccessService.ReleaseQuotaAsync(command.TenantId, quotaMetric, 1, CancellationToken.None);
}
throw;
}
return ToItem(job);
}
private static string? ResolveQuotaMetric(string jobType) => jobType switch
{
"content_import" => SaasQuotaMetricCatalog.ImportCount,
"content_export" => SaasQuotaMetricCatalog.ExportCount,
_ => null
};
public async Task<int> ProcessPendingAsync(
string workerId,
int batchSize,
bool includeImmediateJobs = true,
CancellationToken cancellationToken = default)
{
var now = DateTimeOffset.UtcNow;
var leaseExpiresAt = now.Add(LeaseDuration);
var claimedIds = await dbContext.Database.SqlQuery<Guid>($"""
UPDATE background_jobs AS job
SET status = 'processing',
locked_by = {workerId},
lock_expires_at = {leaseExpiresAt},
started_at = COALESCE(started_at, {now}),
updated_at = {now}
WHERE job.id IN (
SELECT candidate.id
FROM background_jobs AS candidate
WHERE (
(candidate.status = 'pending' AND ({includeImmediateJobs} OR candidate.run_after IS NOT NULL) AND
(candidate.run_after IS NULL OR candidate.run_after <= {now})) OR
(candidate.status = 'processing' AND candidate.lock_expires_at <= {now})
)
ORDER BY candidate.created_at, candidate.id
FOR UPDATE SKIP LOCKED
LIMIT {Math.Clamp(batchSize, 1, 100)}
)
RETURNING job.id AS "Value"
""")
.ToArrayAsync(cancellationToken);
var processed = 0;
dbContext.ChangeTracker.Clear();
foreach (var jobId in claimedIds)
{
cancellationToken.ThrowIfCancellationRequested();
var job = await dbContext.BackgroundJobs.SingleAsync(value => value.Id == jobId, cancellationToken);
if (await ProcessJobAsync(job, workerId, alreadyClaimed: true, cancellationToken)) processed++;
dbContext.ChangeTracker.Clear();
}
return processed;
}
public async Task<bool> ProcessRequestedAsync(
Guid jobId,
Guid tenantId,
string jobType,
string workerId,
CancellationToken cancellationToken = default)
{
var normalizedJobType = NormalizeJobType(jobType);
var claimed = await dbContext.BackgroundJobs
.Where(item => item.Id == jobId && item.TenantId == tenantId &&
item.JobType == normalizedJobType && item.Status == BackgroundJobStatus.Pending &&
item.RunAfter == null)
.ExecuteUpdateAsync(setters => setters
.SetProperty(item => item.Status, BackgroundJobStatus.Processing)
.SetProperty(item => item.LockedBy, workerId)
.SetProperty(item => item.LockExpiresAt, DateTimeOffset.UtcNow.Add(LeaseDuration))
.SetProperty(item => item.StartedAt, DateTimeOffset.UtcNow), cancellationToken);
if (claimed == 0)
{
return false;
}
dbContext.ChangeTracker.Clear();
var job = await dbContext.BackgroundJobs.SingleOrDefaultAsync(
item => item.Id == jobId && item.TenantId == tenantId,
cancellationToken);
if (job is null)
{
throw new InvalidOperationException("The requested background job does not exist in the target tenant.");
}
if (!string.Equals(job.JobType, normalizedJobType, StringComparison.Ordinal))
{
throw new InvalidOperationException("The requested background job type does not match the persisted job.");
}
return await ProcessJobAsync(job, workerId, alreadyClaimed: true, cancellationToken);
}
private async Task<bool> ProcessJobAsync(
BackgroundJob job,
string workerId,
bool alreadyClaimed,
CancellationToken cancellationToken)
{
var startedTimestamp = Stopwatch.GetTimestamp();
if ((!alreadyClaimed && job.Status != BackgroundJobStatus.Pending) ||
(alreadyClaimed && (job.Status != BackgroundJobStatus.Processing || job.LockedBy != workerId)))
{
return false;
}
await dbContext.Entry(job).ReloadAsync(cancellationToken);
if (job.CancellationRequestedAt.HasValue)
{
job.CompletedAt = DateTimeOffset.UtcNow;
await CompleteAsync(
job,
workerId,
BackgroundJobStatus.Cancelled,
job.Result,
null,
cancellationToken);
return true;
}
if (job.JobType is not ("asset_security_scan" or "tenant_export") && !(await featureAccessService.EvaluateAsync(
job.TenantId,
ResolveRequiredFeature(job.JobType, job.Payload),
FeatureAccessOperation.Write,
cancellationToken)).Allowed)
{
await CompleteAsync(
job,
workerId,
BackgroundJobStatus.Failed,
JsonDefaults.Object(),
"Tenant feature entitlement was revoked before job execution.",
cancellationToken);
return true;
}
if (!alreadyClaimed)
{
var now = DateTimeOffset.UtcNow;
job.Status = BackgroundJobStatus.Processing;
job.LockedBy = workerId;
job.LockExpiresAt = now.Add(LeaseDuration);
job.StartedAt = now;
await dbContext.SaveChangesAsync(cancellationToken);
}
try
{
var result = await tenantExecutionScope.ExecuteAsync(
new SystemScopeRequest(
job.TenantId, SystemScopeCallerType.Worker, workerId,
$"Background job {job.JobType}", job.Id.ToString("N")),
(provider, token) => ProcessCoreAsync(provider, job, token),
cancellationToken);
var cancellationRequested = await dbContext.BackgroundJobs.AsNoTracking()
.Where(item => item.Id == job.Id)
.Select(item => item.CancellationRequestedAt != null)
.SingleAsync(cancellationToken);
job.Status = cancellationRequested ? BackgroundJobStatus.Cancelled : BackgroundJobStatus.Succeeded;
job.CompletedAt = DateTimeOffset.UtcNow;
job.LastError = null;
job.Result = result;
}
catch (Exception exception) when (exception is not OperationCanceledException)
{
job.RetryCount++;
job.LastError = exception is AssetSecurityScannerException scannerException
? $"{scannerException.Code}: {scannerException.Message}"
: exception.Message;
if (exception is AssetSecurityScannerException assetScanException)
{
await RecordAssetScanRetryAsync(job, assetScanException, cancellationToken);
}
job.Status = job.RetryCount > job.MaxRetries
? BackgroundJobStatus.Failed
: BackgroundJobStatus.Pending;
job.RunAfter = job.Status == BackgroundJobStatus.Pending
? DateTimeOffset.UtcNow.AddSeconds(Math.Min(300, 10 * job.RetryCount))
: null;
}
finally
{
await CompleteAsync(job, workerId, job.Status, job.Result, job.LastError, cancellationToken);
WorkerTelemetry.RecordJob(job.JobType, job.Status.ToString(), Stopwatch.GetElapsedTime(startedTimestamp).TotalMilliseconds);
}
return true;
}
private async Task CompleteAsync(
BackgroundJob job,
string workerId,
BackgroundJobStatus status,
JsonElement result,
string? lastError,
CancellationToken cancellationToken)
{
await dbContext.BackgroundJobs
.Where(value => value.Id == job.Id && value.LockedBy == workerId)
.ExecuteUpdateAsync(setters => setters
.SetProperty(value => value.Status, status)
.SetProperty(value => value.RetryCount, job.RetryCount)
.SetProperty(value => value.RunAfter, job.RunAfter)
.SetProperty(value => value.CompletedAt, job.CompletedAt)
.SetProperty(value => value.LastError, lastError)
.SetProperty(value => value.OutputAssetId, job.OutputAssetId)
.SetProperty(value => value.Result, result)
.SetProperty(value => value.LockedBy, (string?)null)
.SetProperty(value => value.LockExpiresAt, (DateTimeOffset?)null),
cancellationToken);
}
public async Task<IReadOnlyCollection<BackgroundJobItem>> ListAsync(
Guid tenantId,
string? jobType = null,
int limit = 50,
CancellationToken cancellationToken = default)
{
var query = dbContext.BackgroundJobs.AsNoTracking()
.Where(job => job.TenantId == tenantId);
if (!string.IsNullOrWhiteSpace(jobType))
{
var normalized = NormalizeJobType(jobType);
query = query.Where(job => job.JobType == normalized);
}
var jobs = await query
.OrderByDescending(job => job.CreatedAt)
.Take(Math.Clamp(limit, 1, 200))
.ToArrayAsync(cancellationToken);
return jobs.Select(ToItem).ToArray();
}
public async Task<BackgroundJobItem?> GetAsync(
Guid jobId,
Guid? tenantId,
CancellationToken cancellationToken = default)
{
var query = dbContext.BackgroundJobs.AsNoTracking().Where(item => item.Id == jobId);
if (tenantId.HasValue)
{
query = query.Where(item => item.TenantId == tenantId.Value);
}
var job = await query.SingleOrDefaultAsync(cancellationToken);
return job is null ? null : ToItem(job);
}
public async Task<IReadOnlyCollection<BackgroundJobItem>> ListPlatformAsync(
Guid? tenantId = null,
string? jobType = null,
BackgroundJobStatus? status = null,
int limit = 100,
CancellationToken cancellationToken = default)
{
var query = dbContext.BackgroundJobs.AsNoTracking().AsQueryable();
if (tenantId.HasValue) query = query.Where(item => item.TenantId == tenantId.Value);
if (!string.IsNullOrWhiteSpace(jobType))
{
var normalized = NormalizeJobType(jobType);
query = query.Where(item => item.JobType == normalized);
}
if (status.HasValue) query = query.Where(item => item.Status == status.Value);
return (await query.OrderByDescending(item => item.CreatedAt)
.Take(Math.Clamp(limit, 1, 500))
.ToArrayAsync(cancellationToken))
.Select(ToItem)
.ToArray();
}
public async Task<BackgroundJobItem> RequestCancellationAsync(
Guid jobId,
Guid? tenantId,
Guid actorUserId,
string reason,
CancellationToken cancellationToken = default)
{
dbContext.ChangeTracker.Clear();
if (string.IsNullOrWhiteSpace(reason))
{
throw new BackgroundJobException("background_job_cancel_reason_required", "Cancellation reason is required.");
}
var job = await FindMutableAsync(jobId, tenantId, cancellationToken);
if (job.Status is BackgroundJobStatus.Succeeded or BackgroundJobStatus.Failed or BackgroundJobStatus.Cancelled)
{
throw new BackgroundJobException("background_job_not_cancellable", "Only pending or processing jobs can be cancelled.");
}
var now = DateTimeOffset.UtcNow;
job.CancellationRequestedAt = now;
job.CancellationRequestedBy = actorUserId;
job.CancellationReason = reason.Trim();
if (job.Status == BackgroundJobStatus.Pending)
{
job.Status = BackgroundJobStatus.Cancelled;
job.CompletedAt = now;
}
AddMutationAudit(job, actorUserId, "background_job.cancel_requested");
await dbContext.SaveChangesAsync(cancellationToken);
return ToItem(job);
}
public async Task<BackgroundJobItem> RetryAsync(
Guid jobId,
Guid? tenantId,
Guid actorUserId,
CancellationToken cancellationToken = default)
{
dbContext.ChangeTracker.Clear();
var job = await FindMutableAsync(jobId, tenantId, cancellationToken);
if (job.Status is not (BackgroundJobStatus.Failed or BackgroundJobStatus.Cancelled))
{
throw new BackgroundJobException("background_job_not_retryable", "Only failed or cancelled jobs can be retried.");
}
job.Status = BackgroundJobStatus.Pending;
job.RunAfter = DateTimeOffset.UtcNow;
job.StartedAt = null;
job.CompletedAt = null;
job.LockedBy = null;
job.LockExpiresAt = null;
job.LastError = null;
job.CancellationRequestedAt = null;
job.CancellationRequestedBy = null;
job.CancellationReason = null;
AddMutationAudit(job, actorUserId, "background_job.retry_requested");
await dbContext.SaveChangesAsync(cancellationToken);
return ToItem(job);
}
private async Task<BackgroundJob> FindMutableAsync(
Guid jobId,
Guid? tenantId,
CancellationToken cancellationToken)
{
var query = dbContext.BackgroundJobs.Where(item => item.Id == jobId);
if (tenantId.HasValue) query = query.Where(item => item.TenantId == tenantId.Value);
return await query.SingleOrDefaultAsync(cancellationToken) ??
throw new BackgroundJobException("background_job_not_found", "Background job was not found.");
}
private void AddMutationAudit(BackgroundJob job, Guid actorUserId, string action)
{
dbContext.AuditLogs.Add(new AuditLog
{
TenantId = job.TenantId,
ActorUserId = actorUserId,
Action = action,
TargetType = "background_job",
TargetId = job.Id.ToString(),
Details = JsonSerializer.SerializeToElement(new { job.JobType, job.Status })
});
}
private async Task<JsonElement> ProcessCoreAsync(
IServiceProvider scopedProvider,
BackgroundJob job,
CancellationToken cancellationToken)
{
cancellationToken.ThrowIfCancellationRequested();
var scopedDbContext = scopedProvider.GetRequiredService<TikuDbContext>();
return job.JobType switch
{
"content_export" => await ProcessContentExportAsync(scopedDbContext, job, cancellationToken),
"content_import" => await ProcessContentImportAsync(scopedProvider, job, cancellationToken),
"asset_security_scan" => await ProcessAssetSecurityScanAsync(scopedProvider, scopedDbContext, job, cancellationToken),
"tenant_export" => await ProcessTenantExportAsync(scopedProvider, scopedDbContext, job, cancellationToken),
"statistics_aggregation" => await ProcessStatisticsAggregationAsync(scopedProvider, scopedDbContext, job, cancellationToken),
"commerce_reconciliation" => await ProcessCommerceReconciliationAsync(scopedDbContext, job, cancellationToken),
"tenant_domain_recheck" => await ProcessTenantDomainRecheckAsync(scopedProvider, cancellationToken),
_ => throw new InvalidOperationException($"Unsupported background job type '{job.JobType}'.")
};
}
private static async Task<JsonElement> ProcessContentImportAsync(
IServiceProvider scopedProvider,
BackgroundJob job,
CancellationToken cancellationToken)
{
var directContentService = scopedProvider.GetRequiredService<IDirectContentService>();
var createdBy = GetJsonGuid(job.Payload, "createdBy") ?? Guid.Empty;
if (createdBy == Guid.Empty)
{
throw new InvalidOperationException("content_import job requires createdBy.");
}
var command = new SimpleImportCommand(
GetJsonString(job.Payload, "importType") ?? throw new InvalidOperationException("content_import job requires importType."),
GetJsonString(job.Payload, "sourceFormat"),
GetJsonString(job.Payload, "sourceName"),
GetJsonGuid(job.Payload, "regionId"),
GetJsonGuid(job.Payload, "entryId"),
GetJsonGuid(job.Payload, "contentNodeId"),
GetJsonGuid(job.Payload, "subjectId"),
GetJsonGuid(job.Payload, "categoryId"),
GetJsonGuid(job.Payload, "questionBankId"),
GetJsonGuid(job.Payload, "collectionId"),
GetJsonArray(job.Payload, "items"),
false);
var result = await directContentService.ExecuteImportAsync(
new DirectContentActor(job.TenantId, createdBy),
command,
cancellationToken);
return JsonSerializer.SerializeToElement(new
{
importJobId = result.Job.Id,
result.Job.ImportType,
result.Job.Status,
result.Job.TotalCount,
result.Job.InsertedCount,
result.Job.UpdatedCount,
result.Job.ErrorCount
});
}
private static async Task<JsonElement> ProcessAssetSecurityScanAsync(
IServiceProvider scopedProvider,
TikuDbContext scopedDbContext,
BackgroundJob job,
CancellationToken cancellationToken)
{
var assetId = GetJsonGuid(job.Payload, "assetId") ??
throw new InvalidOperationException("asset_security_scan job requires assetId.");
var asset = await scopedDbContext.ContentAssets.SingleOrDefaultAsync(
item => item.TenantId == job.TenantId && item.Id == assetId,
cancellationToken) ?? throw new InvalidOperationException("Asset security scan target was not found.");
if (asset.UploadStatus != AssetUploadStatus.Verified ||
string.IsNullOrWhiteSpace(asset.Bucket) ||
string.IsNullOrWhiteSpace(asset.ObjectKey))
{
throw new InvalidOperationException("Asset must have a verified object location before security scanning.");
}
asset.SecurityScanStatus = AssetSecurityScanStatus.Scanning;
await scopedDbContext.SaveChangesAsync(cancellationToken);
var scanner = scopedProvider.GetRequiredService<IAssetSecurityScanner>();
var storage = scopedProvider.GetRequiredService<Tiku.Application.Storage.IObjectStorageService>();
await using var content = await storage.OpenReadAsync(
new Tiku.Application.Storage.ObjectStorageReadRequest(
job.TenantId,
asset.StorageProvider switch
{
AssetStorageProvider.AliyunOss => Tiku.Application.Storage.ObjectStorageProviders.AliyunOss,
AssetStorageProvider.LocalDev => Tiku.Application.Storage.ObjectStorageProviders.LocalDev,
_ => throw new InvalidOperationException("Asset storage provider does not support security scanning.")
},
asset.Bucket,
asset.ObjectKey),
cancellationToken);
var result = await scanner.ScanAsync(content, asset.VerifiedSizeBytes ?? asset.FileSizeBytes, cancellationToken);
var infected = result.Verdict == AssetSecurityScanVerdict.Infected;
asset.SecurityScanStatus = infected ? AssetSecurityScanStatus.Failed : AssetSecurityScanStatus.Passed;
asset.SecurityScannedAt = DateTimeOffset.UtcNow;
asset.SecurityScanProvider = result.Provider;
asset.SecurityScanSummary = JsonSerializer.SerializeToElement(new
{
verdict = result.Verdict.ToString(),
result.Signature,
result.BytesScanned
});
scopedDbContext.ContentAssetSecurityScanEvents.Add(new ContentAssetSecurityScanEvent
{
TenantId = job.TenantId,
AssetId = asset.Id,
Provider = result.Provider,
ScanStatus = asset.SecurityScanStatus,
RiskLevel = infected ? AssetSecurityRiskLevel.Critical : AssetSecurityRiskLevel.None,
IssueCodes = infected ? [result.Signature ?? "malware_detected"] : [],
Details = asset.SecurityScanSummary
});
await scopedDbContext.SaveChangesAsync(cancellationToken);
return JsonSerializer.SerializeToElement(new
{
assetId = asset.Id,
status = asset.SecurityScanStatus.ToString(),
result.Signature,
result.BytesScanned
});
}
private async Task RecordAssetScanRetryAsync(
BackgroundJob job,
AssetSecurityScannerException exception,
CancellationToken cancellationToken)
{
var assetId = GetJsonGuid(job.Payload, "assetId");
if (assetId is null)
{
return;
}
var asset = await dbContext.ContentAssets.SingleOrDefaultAsync(
item => item.TenantId == job.TenantId && item.Id == assetId,
cancellationToken);
if (asset is null)
{
return;
}
asset.SecurityScanStatus = AssetSecurityScanStatus.Pending;
asset.SecurityScanProvider = "clamav";
asset.SecurityScanSummary = JsonSerializer.SerializeToElement(new { errorCode = exception.Code });
dbContext.ContentAssetSecurityScanEvents.Add(new ContentAssetSecurityScanEvent
{
TenantId = job.TenantId,
AssetId = asset.Id,
Provider = "clamav",
ScanStatus = AssetSecurityScanStatus.Pending,
RiskLevel = AssetSecurityRiskLevel.None,
IssueCodes = [exception.Code],
Details = asset.SecurityScanSummary
});
await dbContext.SaveChangesAsync(cancellationToken);
}
private static async Task<JsonElement> ProcessTenantExportAsync(
IServiceProvider scopedProvider,
TikuDbContext scopedDbContext,
BackgroundJob job,
CancellationToken cancellationToken)
{
var operationId = GetJsonGuid(job.Payload, "operationId") ??
throw new InvalidOperationException("tenant_export job requires operationId.");
var operation = await scopedDbContext.TenantLifecycleOperations.SingleOrDefaultAsync(item =>
item.TenantId == job.TenantId && item.Id == operationId &&
item.OperationType == TenantLifecycleOperationType.Export,
cancellationToken) ?? throw new InvalidOperationException("Tenant export operation was not found.");
operation.Status = TenantLifecycleOperationStatus.Processing;
operation.StartedAt ??= DateTimeOffset.UtcNow;
operation.LastError = null;
await scopedDbContext.SaveChangesAsync(cancellationToken);
var temporaryPath = Path.Combine(Path.GetTempPath(), $"tiku-tenant-export-{operation.Id:N}.tar.gz");
try
{
var tenant = await scopedDbContext.Tenants.AsNoTracking().SingleAsync(item => item.Id == job.TenantId, cancellationToken);
var memberships = await scopedDbContext.TenantMemberships.AsNoTracking()
.Where(item => item.TenantId == job.TenantId)
.Select(item => new { item.UserId, item.Role, item.Status, item.CreatedAt, item.UpdatedAt })
.ToArrayAsync(cancellationToken);
var domains = await scopedDbContext.TenantDomains.AsNoTracking()
.Where(item => item.TenantId == job.TenantId)
.Select(item => new { item.Id, item.Host, item.DomainType, item.Status, item.IsPrimary, item.CreatedAt, item.UpdatedAt })
.ToArrayAsync(cancellationToken);
var assets = await scopedDbContext.ContentAssets.AsNoTracking()
.Where(item => item.TenantId == job.TenantId && item.Status == ContentStatus.Active)
.ToArrayAsync(cancellationToken);
var storage = scopedProvider.GetRequiredService<Tiku.Application.Storage.IObjectStorageService>();
await using (var file = new FileStream(temporaryPath, FileMode.CreateNew, FileAccess.Write, FileShare.None, 128 * 1024, FileOptions.Asynchronous))
await using (var gzip = new GZipStream(file, CompressionLevel.Fastest, leaveOpen: false))
await using (var archive = new TarWriter(gzip, TarEntryFormat.Pax, leaveOpen: false))
{
await WriteJsonEntryAsync(archive, "manifest.json", new
{
format = "tiku-tenant-export",
version = 1,
tenantId = job.TenantId,
operationId,
generatedAt = DateTimeOffset.UtcNow,
exclusions = new[] { "password_hashes", "auth_tokens", "refresh_tokens", "secret_plaintext", "data_protection_keys", "global_platform_data" },
tables = new[] { "tenant", "tenant_memberships", "tenant_domains", "content_assets" }
}, cancellationToken);
await WriteJsonLinesEntryAsync(archive, "data/tenant.jsonl", new[]
{
new { tenant.Id, tenant.Slug, tenant.Name, tenant.LegalName, tenant.Status, tenant.Mode, tenant.BillingStatus, tenant.OwnerUserId, tenant.CreatedAt, tenant.UpdatedAt }
}, cancellationToken);
await WriteJsonLinesEntryAsync(archive, "data/tenant_memberships.jsonl", memberships, cancellationToken);
await WriteJsonLinesEntryAsync(archive, "data/tenant_domains.jsonl", domains, cancellationToken);
await WriteJsonLinesEntryAsync(archive, "data/content_assets.jsonl", assets.Select(item => new
{
item.Id,
item.AssetKey,
item.Title,
item.FileName,
item.StorageProvider,
item.Bucket,
item.ObjectKey,
item.MimeType,
item.FileSizeBytes,
item.ChecksumSha256,
item.UploadStatus,
item.SecurityScanStatus,
item.CreatedAt,
item.UpdatedAt
}), cancellationToken);
foreach (var asset in assets.Where(item =>
item.UploadStatus == AssetUploadStatus.Verified &&
item.SecurityScanStatus is AssetSecurityScanStatus.Passed or AssetSecurityScanStatus.NotRequired &&
!string.IsNullOrWhiteSpace(item.Bucket) &&
!string.IsNullOrWhiteSpace(item.ObjectKey)))
{
var provider = asset.StorageProvider switch
{
AssetStorageProvider.AliyunOss => Tiku.Application.Storage.ObjectStorageProviders.AliyunOss,
AssetStorageProvider.LocalDev => Tiku.Application.Storage.ObjectStorageProviders.LocalDev,
_ => null
};
if (provider is null) continue;
await using var content = await storage.OpenReadAsync(
new Tiku.Application.Storage.ObjectStorageReadRequest(
job.TenantId, provider, asset.Bucket!, asset.ObjectKey!),
cancellationToken);
var name = SanitizeTarPath(asset.FileName ?? asset.Id.ToString("N"));
archive.WriteEntry(new PaxTarEntry(TarEntryType.RegularFile, $"assets/{asset.Id:N}/{name}")
{
DataStream = content
});
}
}
await using var upload = new FileStream(temporaryPath, FileMode.Open, FileAccess.Read, FileShare.Read, 128 * 1024, FileOptions.Asynchronous);
var providerName = storage.ConfiguredDefaultProvider();
var bucket = storage.ConfiguredDefaultBucket();
var objectKey = storage.ValidateObjectKey(job.TenantId, $"{job.TenantId:N}/tenant-exports/{operation.Id:N}.tar.gz");
var written = await storage.WriteObjectAsync(
new Tiku.Application.Storage.ObjectStorageWriteRequest(
job.TenantId,
providerName,
bucket,
objectKey,
"application/gzip",
upload,
upload.Length,
Upsert: false),
cancellationToken);
var exportAsset = new ContentAsset
{
TenantId = job.TenantId,
Title = "Tenant export archive",
FileName = $"tenant-export-{operation.Id:N}.tar.gz",
AssetType = ContentAssetType.Document,
StorageProvider = providerName switch
{
Tiku.Application.Storage.ObjectStorageProviders.AliyunOss => AssetStorageProvider.AliyunOss,
Tiku.Application.Storage.ObjectStorageProviders.LocalDev => AssetStorageProvider.LocalDev,
_ => AssetStorageProvider.ExternalUrl
},
Bucket = written.Bucket,
ObjectKey = written.ObjectKey,
MimeType = "application/gzip",
FileSizeBytes = written.SizeBytes,
ChecksumSha256 = written.ChecksumSha256,
UploadStatus = AssetUploadStatus.Verified,
VerifiedAt = DateTimeOffset.UtcNow,
VerifiedSizeBytes = written.SizeBytes,
SecurityScanStatus = AssetSecurityScanStatus.NotRequired,
Source = "tenant_export"
};
scopedDbContext.ContentAssets.Add(exportAsset);
operation.ExportAssetId = exportAsset.Id;
operation.Status = TenantLifecycleOperationStatus.Succeeded;
operation.CompletedAt = DateTimeOffset.UtcNow;
operation.Result = JsonSerializer.SerializeToElement(new
{
exportAssetId = exportAsset.Id,
written.SizeBytes,
assetCount = assets.Length
});
await scopedDbContext.SaveChangesAsync(cancellationToken);
job.OutputAssetId = exportAsset.Id;
return operation.Result;
}
catch (Exception exception) when (exception is not OperationCanceledException)
{
operation.Status = TenantLifecycleOperationStatus.Failed;
operation.LastError = exception.Message;
operation.CompletedAt = DateTimeOffset.UtcNow;
await scopedDbContext.SaveChangesAsync(cancellationToken);
throw;
}
finally
{
if (File.Exists(temporaryPath)) File.Delete(temporaryPath);
}
}
private static async Task WriteJsonEntryAsync<T>(
TarWriter archive,
string name,
T value,
CancellationToken cancellationToken)
{
var stream = new MemoryStream();
await JsonSerializer.SerializeAsync(stream, value, cancellationToken: cancellationToken);
stream.Position = 0;
archive.WriteEntry(new PaxTarEntry(TarEntryType.RegularFile, name) { DataStream = stream });
await stream.DisposeAsync();
}
private static async Task WriteJsonLinesEntryAsync<T>(
TarWriter archive,
string name,
IEnumerable<T> values,
CancellationToken cancellationToken)
{
var stream = new MemoryStream();
await using (var writer = new StreamWriter(stream, new System.Text.UTF8Encoding(false), leaveOpen: true))
{
foreach (var value in values)
{
cancellationToken.ThrowIfCancellationRequested();
await writer.WriteLineAsync(JsonSerializer.Serialize(value));
}
}
stream.Position = 0;
archive.WriteEntry(new PaxTarEntry(TarEntryType.RegularFile, name) { DataStream = stream });
await stream.DisposeAsync();
}
private static string SanitizeTarPath(string value)
{
var name = Path.GetFileName(value).Replace('\\', '_').Replace('/', '_');
return string.IsNullOrWhiteSpace(name) ? "asset.bin" : name;
}
private async Task<JsonElement> ProcessContentExportAsync(
TikuDbContext scopedDbContext,
BackgroundJob job,
CancellationToken cancellationToken)
{
var exportType = GetJsonString(job.Payload, "exportType") ?? "summary";
var assetKey = $"background-jobs/{job.Id:N}/content-export.json";
var asset = await scopedDbContext.ContentAssets.SingleOrDefaultAsync(
item => item.TenantId == job.TenantId && item.AssetKey == assetKey,
cancellationToken);
if (asset is null)
{
asset = new ContentAsset
{
TenantId = job.TenantId,
AssetKey = assetKey,
AssetType = ContentAssetType.Document,
StorageProvider = AssetStorageProvider.ExternalUrl,
UploadStatus = AssetUploadStatus.Verified,
SecurityScanStatus = AssetSecurityScanStatus.NotRequired,
Source = "background_job"
};
scopedDbContext.ContentAssets.Add(asset);
}
var questionBankCount = await scopedDbContext.QuestionBanks.CountAsync(item => item.TenantId == job.TenantId, cancellationToken);
var questionCount = await scopedDbContext.Questions.CountAsync(item => item.TenantId == job.TenantId, cancellationToken);
var studentCount = await scopedDbContext.StudentProfiles.CountAsync(item => item.TenantId == job.TenantId, cancellationToken);
asset.FileName = $"content-export-{DateTimeOffset.UtcNow:yyyyMMddHHmmss}.json";
asset.Title = "Content export manifest";
asset.Description = $"Generated content export manifest for {exportType}.";
asset.ObjectKey = assetKey;
asset.MimeType = "application/json";
asset.Metadata = JsonSerializer.SerializeToElement(new
{
exportType,
generatedAt = DateTimeOffset.UtcNow,
questionBankCount,
questionCount,
studentCount,
payload = job.Payload
});
await scopedDbContext.SaveChangesAsync(cancellationToken);
job.OutputAssetId = asset.Id;
return JsonSerializer.SerializeToElement(new
{
outputAssetId = asset.Id,
asset.AssetKey,
questionBankCount,
questionCount,
studentCount
});
}
private async Task<JsonElement> ProcessCommerceReconciliationAsync(
TikuDbContext scopedDbContext,
BackgroundJob job,
CancellationToken cancellationToken)
{
var provider = NormalizeProvider(GetJsonString(job.Payload, "provider"));
var hasProviderConfig = await scopedDbContext.TenantExternalProviders.AnyAsync(
item =>
item.TenantId == job.TenantId &&
item.Capability == Tiku.Domain.Tenancy.TenantExternalProviderCapability.Payment &&
item.Provider == provider &&
item.Status == Tiku.Domain.Tenancy.TenantExternalProviderStatus.Active,
cancellationToken);
if (!hasProviderConfig)
{
throw new InvalidOperationException($"Active payment provider '{provider}' is required for commerce reconciliation job.");
}
var billDate = GetJsonDateOnly(job.Payload, "billDate") ?? DateOnly.FromDateTime(DateTime.UtcNow.Date);
var billType = GetJsonEnum(job.Payload, "billType", ReconciliationBillType.Combined);
var sourceHash = $"background-job:{job.Id:N}";
var batch = await scopedDbContext.CommerceReconciliationBatches.SingleOrDefaultAsync(
item =>
item.TenantId == job.TenantId &&
item.Provider == provider &&
item.Source == ReconciliationSource.ProviderDownload &&
item.SourceHash == sourceHash,
cancellationToken);
if (batch is null)
{
batch = new CommerceReconciliationBatch
{
TenantId = job.TenantId,
Provider = provider,
BillDate = billDate,
BillType = billType,
Source = ReconciliationSource.ProviderDownload,
SourceName = $"provider-bill:{provider}:{billDate:yyyyMMdd}",
SourceHash = sourceHash,
Status = ReconciliationBatchStatus.Pending,
Metadata = JsonSerializer.SerializeToElement(new
{
jobId = job.Id,
note = "Provider bill job created the reconciliation batch; provider download/parser is handled by a dedicated provider processor."
})
};
scopedDbContext.CommerceReconciliationBatches.Add(batch);
await scopedDbContext.SaveChangesAsync(cancellationToken);
}
return JsonSerializer.SerializeToElement(new
{
batchId = batch.Id,
provider,
billDate,
billType = billType.ToString(),
status = batch.Status.ToString()
});
}
private static async Task<JsonElement> ProcessTenantDomainRecheckAsync(
IServiceProvider scopedProvider,
CancellationToken cancellationToken)
{
var lifecycleService = scopedProvider.GetRequiredService<ITenantDomainLifecycleService>();
var processed = await lifecycleService.ProcessPendingAsync(cancellationToken);
return JsonSerializer.SerializeToElement(new
{
processed
});
}
private async Task<JsonElement> ProcessStatisticsAggregationAsync(
IServiceProvider scopedProvider,
TikuDbContext scopedDbContext,
BackgroundJob job,
CancellationToken cancellationToken)
{
var since = DateTimeOffset.UtcNow.AddDays(-7);
var activeLearnerCount = await scopedDbContext.PracticeSessions
.Where(item => item.TenantId == job.TenantId && item.StartedAt >= since)
.Select(item => item.UserId)
.Distinct()
.CountAsync(cancellationToken);
var paidOrderCount = await scopedDbContext.Orders
.CountAsync(item => item.TenantId == job.TenantId && item.Status == OrderStatus.Paid, cancellationToken);
var revenueCents = await scopedDbContext.Orders
.Where(item => item.TenantId == job.TenantId &&
(item.Status == OrderStatus.Paid ||
item.Status == OrderStatus.PartiallyRefunded ||
item.Status == OrderStatus.Refunded))
.SumAsync(item => item.AmountCents - item.RefundedAmountCents, cancellationToken);
var quotaUsage = await scopedProvider.GetRequiredService<IFeatureUsageReconciliationService>()
.ReconcileTenantAsync(
new ReconcileFeatureUsageRequest(
job.TenantId,
SystemScopeCallerType.Worker,
nameof(BackgroundJobService),
"Reconcile tenant current feature usage during statistics aggregation",
$"feature-usage-{job.Id:N}"),
cancellationToken);
return JsonSerializer.SerializeToElement(new
{
since,
activeLearnerCount,
paidOrderCount,
revenueCents,
quotaUsage
});
}
private static string NormalizeJobType(string jobType)
{
return jobType.Trim().ToLowerInvariant();
}
private static string? NormalizeIdempotencyKey(string? value)
{
var normalized = value?.Trim();
if (string.IsNullOrEmpty(normalized)) return null;
if (normalized.Length > 200)
{
throw new BackgroundJobException("background_job_idempotency_key_too_long", "Idempotency key cannot exceed 200 characters.");
}
return normalized;
}
private static string ResolveRequiredFeature(string jobType, JsonElement payload) => jobType switch
{
"content_import" => SaasFeatureCatalog.ResolveContentImportFeature(GetJsonString(payload, "importType"))
?? throw new InvalidOperationException("Background content import type is not supported."),
"content_export" or "asset_security_scan" => SaasFeatureCatalog.PrivateQuestionBank,
"commerce_reconciliation" => SaasFeatureCatalog.StudentStore,
"statistics_aggregation" or "tenant_domain_recheck" => SaasFeatureCatalog.CoreBackoffice,
_ => SaasFeatureCatalog.CoreBackoffice
};
private static string NormalizeProvider(string? provider)
{
var normalized = (provider ?? string.Empty).Trim().ToLowerInvariant();
return string.IsNullOrWhiteSpace(normalized)
? throw new InvalidOperationException("Background job provider is required.")
: normalized;
}
private static string? GetJsonString(JsonElement element, string propertyName)
{
return element.ValueKind == JsonValueKind.Object &&
element.TryGetProperty(propertyName, out var property) &&
property.ValueKind == JsonValueKind.String
? property.GetString()
: null;
}
private static Guid? GetJsonGuid(JsonElement element, string propertyName)
{
if (element.ValueKind != JsonValueKind.Object ||
!element.TryGetProperty(propertyName, out var property))
{
return null;
}
return property.ValueKind == JsonValueKind.String && Guid.TryParse(property.GetString(), out var value)
? value
: null;
}
private static IReadOnlyCollection<JsonElement> GetJsonArray(JsonElement element, string propertyName)
{
if (element.ValueKind != JsonValueKind.Object ||
!element.TryGetProperty(propertyName, out var property) ||
property.ValueKind != JsonValueKind.Array)
{
return [];
}
return property.EnumerateArray().Select(item => item.Clone()).ToArray();
}
private static DateOnly? GetJsonDateOnly(JsonElement element, string propertyName)
{
var value = GetJsonString(element, propertyName);
return DateOnly.TryParse(value, out var parsed) ? parsed : null;
}
private static TEnum GetJsonEnum<TEnum>(JsonElement element, string propertyName, TEnum fallback)
where TEnum : struct
{
var value = GetJsonString(element, propertyName);
return Enum.TryParse<TEnum>(value, true, out var parsed) ? parsed : fallback;
}
private static BackgroundJobItem ToItem(BackgroundJob job)
{
return new BackgroundJobItem(
job.Id,
job.TenantId,
job.JobType,
job.IdempotencyKey,
job.Status,
job.RetryCount,
job.MaxRetries,
job.RunAfter,
job.StartedAt,
job.CompletedAt,
job.CancellationRequestedAt,
job.CancellationRequestedBy,
job.CancellationReason,
job.LastError,
job.OutputAssetId,
job.Result);
}
}