@blueking/bkui-knowledge 0.0.1-beta.14 → 0.0.1-beta.15

package/knowledge/skills/bk-monitor-dev-server/scripts/check-env.sh

@@ -0,0 +1,161 @@
+#!/bin/bash
+
+# 开发环境检查脚本
+# 用法: bash .cursor/skills/dev-server/scripts/check-env.sh
+
+echo "======================================"
+echo "  蓝鲸监控前端开发环境检查"
+echo "======================================"
+echo ""
+
+# 颜色定义
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+# 检查结果
+PASS=0
+FAIL=0
+WARN=0
+
+# 检查函数
+check_pass() {
+    echo -e "${GREEN}✓${NC} $1"
+    ((PASS++))
+}
+
+check_fail() {
+    echo -e "${RED}✗${NC} $1"
+    echo -e "  ${RED}→ $2${NC}"
+    ((FAIL++))
+}
+
+check_warn() {
+    echo -e "${YELLOW}!${NC} $1"
+    echo -e "  ${YELLOW}→ $2${NC}"
+    ((WARN++))
+}
+
+# 1. 检查 Node.js
+echo "检查 Node.js..."
+if command -v node &> /dev/null; then
+    NODE_VERSION=$(node -v | sed 's/v//')
+    REQUIRED_VERSION="20.17.0"
+    
+    # 版本比较
+    if [ "$(printf '%s\n' "$REQUIRED_VERSION" "$NODE_VERSION" | sort -V | head -n1)" = "$REQUIRED_VERSION" ]; then
+        check_pass "Node.js 版本: v$NODE_VERSION (>= $REQUIRED_VERSION)"
+    else
+        check_fail "Node.js 版本: v$NODE_VERSION" "需要 >= $REQUIRED_VERSION，请运行: nvm install $REQUIRED_VERSION && nvm use $REQUIRED_VERSION"
+    fi
+else
+    check_fail "Node.js 未安装" "请安装 Node.js >= 20.17.0，推荐使用 nvm: https://github.com/nvm-sh/nvm"
+fi
+
+# 2. 检查 nvm
+echo ""
+echo "检查 nvm..."
+if command -v nvm &> /dev/null || [ -s "$HOME/.nvm/nvm.sh" ]; then
+    check_pass "nvm 已安装"
+else
+    check_warn "nvm 未安装" "推荐使用 nvm 管理 Node.js 版本: https://github.com/nvm-sh/nvm"
+fi
+
+# 3. 检查 pnpm
+echo ""
+echo "检查 pnpm..."
+if command -v pnpm &> /dev/null; then
+    PNPM_VERSION=$(pnpm -v)
+    check_pass "pnpm 版本: $PNPM_VERSION"
+else
+    check_fail "pnpm 未安装" "请运行: npm i -g pnpm@8"
+fi
+
+# 4. 检查 local.settings.js
+echo ""
+echo "检查配置文件..."
+if [ -f "local.settings.js" ]; then
+    check_pass "local.settings.js 存在"
+    
+    # 检查配置内容
+    if grep -q "devProxyUrl" local.settings.js; then
+        PROXY_URL=$(grep "devProxyUrl" local.settings.js | head -1)
+        if echo "$PROXY_URL" | grep -q "xxx.com"; then
+            check_warn "devProxyUrl 未配置" "请修改 local.settings.js 中的 devProxyUrl 为实际的目标环境地址"
+        else
+            check_pass "devProxyUrl 已配置"
+        fi
+    fi
+    
+    if grep -q "Cookie:" local.settings.js; then
+        COOKIE_LINE=$(grep "Cookie:" local.settings.js | head -1)
+        if echo "$COOKIE_LINE" | grep -q "Cookie: \`\`"; then
+            check_warn "Cookie 未配置" "请在 local.settings.js 中配置 Cookie"
+        else
+            check_pass "Cookie 已配置"
+        fi
+    fi
+else
+    check_fail "local.settings.js 不存在" "请创建配置文件，运行: node .cursor/skills/dev-server/scripts/generate-config.js"
+fi
+
+# 5. 检查 node_modules
+echo ""
+echo "检查依赖..."
+if [ -d "node_modules" ]; then
+    check_pass "node_modules 目录存在"
+else
+    check_fail "依赖未安装" "请运行: pnpm i"
+fi
+
+# 6. 检查 hosts 配置
+echo ""
+echo "检查 hosts 配置..."
+if [ -f "local.settings.js" ]; then
+    # 尝试提取 host 值
+    HOST_PATTERN=$(grep -o "appdev\.[a-z]*\.com" local.settings.js 2>/dev/null || echo "")
+    if [ -n "$HOST_PATTERN" ]; then
+        if grep -q "$HOST_PATTERN" /etc/hosts 2>/dev/null; then
+            check_pass "hosts 已配置: $HOST_PATTERN"
+        else
+            check_warn "hosts 可能未配置" "请检查 /etc/hosts 是否包含: 127.0.0.1 $HOST_PATTERN"
+        fi
+    fi
+fi
+
+# 7. 检查端口
+echo ""
+echo "检查端口..."
+if lsof -i :7001 &> /dev/null; then
+    PROCESS=$(lsof -i :7001 | tail -1 | awk '{print $1}')
+    check_warn "端口 7001 被占用 (进程: $PROCESS)" "开发服务器会自动寻找其他可用端口"
+else
+    check_pass "端口 7001 可用"
+fi
+
+# 输出总结
+echo ""
+echo "======================================"
+echo "  检查结果"
+echo "======================================"
+echo -e "  ${GREEN}通过: $PASS${NC}"
+echo -e "  ${YELLOW}警告: $WARN${NC}"
+echo -e "  ${RED}失败: $FAIL${NC}"
+echo ""
+
+if [ $FAIL -gt 0 ]; then
+    echo -e "${RED}存在问题需要解决后才能启动开发服务器${NC}"
+    exit 1
+elif [ $WARN -gt 0 ]; then
+    echo -e "${YELLOW}存在警告，建议处理后再启动${NC}"
+    exit 0
+else
+    echo -e "${GREEN}环境检查通过！可以启动开发服务器${NC}"
+    echo ""
+    echo "启动命令:"
+    echo "  make dev-pc      # monitor-pc"
+    echo "  make dev-vue3    # trace (Vue3)"
+    echo "  make dev-apm     # apm"
+    exit 0
+fi

package/knowledge/skills/bk-monitor-dev-server/scripts/generate-config.js

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+
+/**
+ * local.settings.js 配置生成脚本
+ * 用法: node .cursor/skills/dev-server/scripts/generate-config.js
+ */
+
+const fs = require('node:fs');
+const path = require('node:path');
+const readline = require('node:readline');
+
+const rl = readline.createInterface({
+  input: process.stdin,
+  output: process.stdout,
+});
+
+const question = prompt =>
+  new Promise(resolve => {
+    rl.question(prompt, resolve);
+  });
+
+const CONFIG_PATH = path.join(process.cwd(), 'local.settings.js');
+
+async function main() {
+  console.log('======================================');
+  console.log('  蓝鲸监控 local.settings.js 配置生成');
+  console.log('======================================\n');
+
+  // 检查是否已存在配置文件
+  if (fs.existsSync(CONFIG_PATH)) {
+    const overwrite = await question('local.settings.js 已存在，是否覆盖？(y/N): ');
+    if (overwrite.toLowerCase() !== 'y') {
+      console.log('已取消');
+      rl.close();
+      return;
+    }
+  }
+
+  console.log('\n请按提示输入配置信息：\n');
+
+  // 获取配置信息
+  const devProxyUrl = await question('目标环境地址 (如 http://bkmonitor.bktencent.com): ');
+
+  if (!devProxyUrl) {
+    console.error('错误：目标环境地址不能为空');
+    rl.close();
+    return;
+  }
+
+  // 验证 URL 格式
+  if (!devProxyUrl.match(/^https?:\/\//)) {
+    console.error('错误：地址必须以 http:// 或 https:// 开头');
+    rl.close();
+    return;
+  }
+
+  console.log('\n提示：以下信息需要从浏览器获取');
+  console.log('1. 登录目标环境');
+  console.log('2. 打开开发者工具 → Network');
+  console.log('3. 刷新页面，选择任意 API 请求');
+  console.log('4. 在 Request Headers 中找到 Cookie 和 X-CSRFToken\n');
+
+  const cookie = await question('Cookie (从请求头复制): ');
+  const csrfToken = await question('X-CSRFToken (从请求头复制): ');
+
+  // 提取 host
+  let host = '';
+  const hostMatch = devProxyUrl.match(/\.([^.]+)\.com\/?$/);
+  if (hostMatch) {
+    host = `appdev.${hostMatch[1]}.com`;
+  } else {
+    host = await question('本地访问域名 (如 appdev.xxx.com): ');
+  }
+
+  // 提取 defaultBizId
+  let defaultBizId = '2';
+  const bizIdMatch = cookie.match(/bk_biz_id=([^;]+)/);
+  if (bizIdMatch) {
+    defaultBizId = bizIdMatch[1];
+  } else {
+    const inputBizId = await question(`默认业务 ID (默认: ${defaultBizId}): `);
+    if (inputBizId) {
+      defaultBizId = inputBizId;
+    }
+  }
+
+  // 生成配置内容
+  const configContent = `const context = ['/apm', '/rest', '/fta', '/api', '/weixin', '/version_log', '/calendars', '/alert', '/query-api'];
+const changeOrigin = true;
+const secure = false;
+const devProxyUrl = '${devProxyUrl}';
+
+const host = '${host}';
+const proxy = {
+  context,
+  changeOrigin,
+  secure,
+  target: devProxyUrl,
+  headers: {
+    host: devProxyUrl.replace(/https?:\\/\\//, ''),
+    referer: devProxyUrl,
+    'X-CSRFToken': '${csrfToken}',
+    Cookie: \`${cookie}\`,
+  },
+};
+const defaultBizId = '${defaultBizId}';
+
+module.exports = {
+  devProxyUrl,
+  host,
+  proxy,
+  defaultBizId,
+};
+`;
+
+  // 写入文件
+  fs.writeFileSync(CONFIG_PATH, configContent);
+  console.log(`\n✅ 配置文件已生成: ${CONFIG_PATH}`);
+
+  // 提示下一步
+  console.log('\n======================================');
+  console.log('  下一步');
+  console.log('======================================');
+  console.log('\n1. 配置 hosts 文件:');
+  console.log('   sudo vim /etc/hosts');
+  console.log(`   添加: 127.0.0.1 ${host}`);
+  console.log('\n2. 启动开发服务器:');
+  console.log('   make dev-pc      # monitor-pc');
+  console.log('   make dev-vue3    # trace (Vue3)');
+  console.log('\n3. 访问:');
+  console.log(`   http://${host}:7001`);
+
+  rl.close();
+}
+
+main().catch(err => {
+  console.error('错误:', err);
+  rl.close();
+  process.exit(1);
+});

package/knowledge/skills/bk-monitor-dev-server/scripts/setup-config.js

@@ -0,0 +1,235 @@
+#!/usr/bin/env node
+
+/**
+ * local.settings.js 非交互式配置生成脚本
+ * 支持 AI Agent 直接调用，无需用户交互输入
+ *
+ * 用法:
+ *   node setup-config.js --url <环境地址> --cookie <cookie> --token <csrf-token> [--bizId <业务ID>]
+ *
+ * 示例:
+ *   node setup-config.js \
+ *     --url "https://bkmonitor.paas3-dev.bktencent.com" \
+ *     --cookie "bk_token=xxx; bk_biz_id=2; ..." \
+ *     --token "abc123"
+ */
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const CONFIG_PATH = path.join(process.cwd(), 'local.settings.js');
+
+/**
+ * 解析命令行参数
+ */
+function parseArgs(args) {
+  const result = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg.startsWith('--')) {
+      const key = arg.slice(2);
+      const value = args[i + 1];
+      if (value && !value.startsWith('--')) {
+        result[key] = value;
+        i++;
+      }
+    }
+  }
+  return result;
+}
+
+/**
+ * 从 URL 提取 host
+ * 示例：
+ *   bkmonitor.paas3-dev.bktencent.com → appdev.bktencent.com
+ *   bkmonitor.bktencent.com → appdev.bktencent.com
+ */
+function extractHost(url) {
+  // 匹配 bktencent.com 或 bk.com 一级域名
+  const match = url.match(/(bktencent|bk)\.com/i);
+  if (match) {
+    return `appdev.${match[1]}.com`;
+  }
+  // 尝试其他格式，提取一级域名
+  const simpleMatch = url.match(/\.([^.]+\.com)\/?$/);
+  if (simpleMatch) {
+    return `appdev.${simpleMatch[1]}`;
+  }
+  return null;
+}
+
+/**
+ * 从 cookie 提取业务 ID
+ */
+function extractBizId(cookie) {
+  const match = cookie.match(/bk_biz_id=([^;]+)/);
+  return match ? match[1] : '2';
+}
+
+/**
+ * 生成配置文件内容
+ * 参考 xxx.js 完整配置模板，包含 proxy、logProxy、tenantProxy
+ */
+function generateConfigContent({ url, cookie, token, bizId, host }) {
+  return `const context = [
+  '/apm',
+  '/rest',
+  '/fta',
+  '/weixin',
+  '/version_log',
+  '/calendars',
+  '/alert',
+  '/query-api',
+  '/ai_agent',
+  '/ai_whale',
+];
+const logContext = ['/apm_log_forward', '/api', '/search'];
+const changeOrigin = true;
+const secure = false;
+const devProxyUrl = '${url}';
+
+const host = '${host}';
+const proxy = {
+  context,
+  changeOrigin,
+  secure,
+  target: devProxyUrl,
+  headers: {
+    host: devProxyUrl.replace(/https?:\\/\\//, ''),
+    referer: devProxyUrl,
+    'X-CSRFToken': '${token}',
+    Cookie: \`${cookie}\`,
+  },
+};
+
+// 日志平台代理：将 bkmonitor 替换为 bklog
+const logProxy = {
+  ...proxy,
+  context: logContext,
+  changeOrigin,
+  secure,
+  target: devProxyUrl.replace('bkmonitor.', 'bklog.').replace('bkm.', 'bklog.'),
+};
+
+const defaultBizId = '${bizId}';
+
+module.exports = {
+  devProxyUrl,
+  host,
+  proxy,
+  logProxy,
+  defaultBizId,
+};
+`;
+}
+
+/**
+ * 检查配置文件是否存在
+ */
+function checkConfigExists() {
+  return fs.existsSync(CONFIG_PATH);
+}
+
+/**
+ * 验证配置文件内容是否完整
+ */
+function validateConfig() {
+  if (!fs.existsSync(CONFIG_PATH)) {
+    return { valid: false, reason: 'CONFIG_NOT_FOUND' };
+  }
+
+  try {
+    const content = fs.readFileSync(CONFIG_PATH, 'utf-8');
+
+    // 检查必要字段
+    if (content.includes("devProxyUrl = 'http://xxx.com'") || content.includes("devProxyUrl = ''")) {
+      return { valid: false, reason: 'URL_NOT_CONFIGURED' };
+    }
+
+    if (content.includes("Cookie: ``") || content.includes("Cookie: '',")) {
+      return { valid: false, reason: 'COOKIE_NOT_CONFIGURED' };
+    }
+
+    if (content.includes("'X-CSRFToken': ''")) {
+      return { valid: false, reason: 'TOKEN_NOT_CONFIGURED' };
+    }
+
+    return { valid: true };
+  } catch {
+    return { valid: false, reason: 'CONFIG_READ_ERROR' };
+  }
+}
+
+/**
+ * 主函数
+ */
+function main() {
+  const args = parseArgs(process.argv.slice(2));
+
+  // 如果没有参数，只做检查
+  if (Object.keys(args).length === 0) {
+    const result = validateConfig();
+    if (result.valid) {
+      console.log('CONFIG_VALID');
+      process.exit(0);
+    } else {
+      console.log(`CONFIG_INVALID:${result.reason}`);
+      process.exit(1);
+    }
+  }
+
+  // 有参数时，生成配置
+  const { url, cookie, token, bizId, force } = args;
+
+  // 验证必要参数
+  if (!url) {
+    console.error('ERROR: --url 参数必填');
+    process.exit(1);
+  }
+
+  if (!cookie) {
+    console.error('ERROR: --cookie 参数必填');
+    process.exit(1);
+  }
+
+  if (!token) {
+    console.error('ERROR: --token 参数必填');
+    process.exit(1);
+  }
+
+  // 检查是否已存在配置
+  if (checkConfigExists() && force !== 'true') {
+    console.log('CONFIG_EXISTS: local.settings.js 已存在，使用 --force true 覆盖');
+    process.exit(0);
+  }
+
+  // 提取 host
+  const host = extractHost(url);
+  if (!host) {
+    console.error('ERROR: 无法从 URL 提取 host，请检查 URL 格式');
+    process.exit(1);
+  }
+
+  // 提取或使用指定的 bizId
+  const finalBizId = bizId || extractBizId(cookie);
+
+  // 生成配置
+  const configContent = generateConfigContent({
+    url,
+    cookie,
+    token,
+    bizId: finalBizId,
+    host,
+  });
+
+  // 写入文件
+  fs.writeFileSync(CONFIG_PATH, configContent);
+
+  // 输出结果
+  console.log('CONFIG_CREATED');
+  console.log(`HOST:${host}`);
+  console.log(`BIZ_ID:${finalBizId}`);
+  console.log(`URL:${url}`);
+}
+
+main();

package/knowledge/skills/bk-monitor-security-audit/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: bk-monitor-security-audit
+description: 对前端代码进行安全审计，检测 XSS、CSRF 等漏洞。当用户请求代码审查或询问代码安全性时使用。
+---
+
+# 前端代码安全审计
+
+## 触发场景
+
+1. 代码提交/审查请求
+2. 询问代码安全性/漏洞
+3. 涉及 DOM 操作、URL 处理、用户输入
+4. 提及 XSS、CSRF、注入等安全关键词
+
+## 审计检查清单
+
+1. DOM 操作安全性（innerHTML、v-html）
+2. URL/重定向安全
+3. 跨域通信安全（postMessage）
+4. 动态代码执行（eval）
+5. 敏感信息处理
+6. 原型污染/ReDoS
+
+## 工作流程
+
+1. 读取代码文件
+2. 按检查清单逐项审计
+3. 按 report-template.md 输出报告
+
+---
+
+## 📦 可用资源
+
+- `skill://bk-monitor-security-audit/references/audit-rules.md`
+- `skill://bk-monitor-security-audit/references/report-template.md`
+- `skill://bk-monitor-security-audit/references/security-checklist.md`