@liuhange/dsh-data-sensitivity-classification 2.0.0

package/README.md

@@ -0,0 +1,41 @@
+# @liuhange/dsh-data-sensitivity-classification
+
+数据敏感度自动分级插件：自动识别数据字段敏感度等级（公开/内部/机密/绝密），并推荐相应脱敏策略。
+
+## Tool 接口
+
+### `classify_sensitivity`
+
+自动识别数据文件中各字段的敏感度等级，生成分级报告和脱敏策略推荐。
+
+**参数：**
+- `filePath` (string, 必填): 待分级数据文件路径
+- `outputPathDir` (string, 可选): 报告输出目录，默认数据文件所在目录
+- `sampleSize` (string, 可选): 样本大小，默认 100
+
+**输出：?**
+- `classification_report.json`: 分级 JSON 报告
+- `classification_report.md`: 分级 Markdown 报告（首行 `【数据敏感度分级报告】`）
+
+## 敏感度等级
+
+| 等级 | 说明 | 推荐策略 |
+|------|------|---------|
+| Public | 公开 | none（不脱敏） |
+| Internal | 内部 | partial（部分脱敏） |
+| Confidential | 机密 | full（完全脱敏） |
+| Secret | 绝密 | encrypt（加密脱敏） |
+
+## 识别方法
+
+1. 字段名模式匹配：根据字段名正&则表达式匹配
+2. 字段值样本匹配：字段名未匹配时，取前 N 个样本值匹配正则
+3. 均未匹配时使用默认等级（Internal）
+
+## 配置节点
+
+`business-rules.json` → `sensitivityClassification` 节点。缺失时使用默认规则。正则编译失败的规则自动跳过并记录。
+
+## v1.0 兼容性
+
+本插件为 v2.0 新增，不影响 v1.0 功能。配置缺失时降级到默认分级规则。

package/lib/types/classificationReportGenerator.d.ts

@@ -0,0 +1,6 @@
+import type { ClassificationReportJson, InvalidRule } from './types.js';
+export declare class ClassificationReportGenerator {
+    writeJson(filePath: string, data: ClassificationReportJson): Promise<void>;
+    writeMarkdown(filePath: string, data: ClassificationReportJson, invalidRules: InvalidRule[]): Promise<void>;
+}
+//# sourceMappingURL=classificationReportGenerator.d.ts.map

package/lib/types/defaultClassificationRules.d.ts

@@ -0,0 +1,3 @@
+import type { SensitivityClassificationConfig } from '@liuhange/dsh-data-asset-shared';
+export declare const defaultClassificationRules: SensitivityClassificationConfig;
+//# sourceMappingURL=defaultClassificationRules.d.ts.map

package/lib/types/fieldNameMatcher.d.ts

@@ -0,0 +1,9 @@
+import type { SensitivityClassificationConfig } from '@liuhange/dsh-data-asset-shared';
+import type { MatchResult, InvalidRule } from './types.js';
+export declare class FieldNameMatcher {
+    match(fieldName: string, rules: SensitivityClassificationConfig['fieldNameRules']): {
+        result: MatchResult;
+        invalidRules: InvalidRule[];
+    };
+}
+//# sourceMappingURL=fieldNameMatcher.d.ts.map

package/lib/types/fieldValueMatcher.d.ts

@@ -0,0 +1,9 @@
+import type { SensitivityClassificationConfig } from '@liuhange/dsh-data-asset-shared';
+import type { MatchResult, InvalidRule } from './types.js';
+export declare class FieldValueMatcher {
+    match(sampleValues: unknown[], rules: SensitivityClassificationConfig['fieldValueRules']): {
+        result: MatchResult;
+        invalidRules: InvalidRule[];
+    };
+}
+//# sourceMappingURL=fieldValueMatcher.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "data-sensitivity-classification";
+export declare const inject: string[];
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,3 @@
+export declare const invariant = "data-sensitivity-classification";
+export declare function install(): void;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/types/sensitivityClassifier.d.ts

@@ -0,0 +1,11 @@
+import type { SensitivityClassificationConfig } from '@liuhange/dsh-data-asset-shared';
+import type { FieldClassification, InvalidRule } from './types.js';
+export declare class SensitivityClassifier {
+    private fieldNameMatcher;
+    private fieldValueMatcher;
+    classify(fields: string[], fieldSamples: Record<string, unknown[]>, config: SensitivityClassificationConfig): {
+        classifications: FieldClassification[];
+        invalidRules: InvalidRule[];
+    };
+}
+//# sourceMappingURL=sensitivityClassifier.d.ts.map

package/lib/types/strategyRecommender.d.ts

@@ -0,0 +1,6 @@
+import type { SensitivityClassificationConfig } from '@liuhange/dsh-data-asset-shared';
+import type { SensitivityLevel, RecommendedStrategy } from './types.js';
+export declare class StrategyRecommender {
+    recommend(level: SensitivityLevel, levelMapping: SensitivityClassificationConfig['levelMapping']): RecommendedStrategy;
+}
+//# sourceMappingURL=strategyRecommender.d.ts.map

package/lib/types/types.d.ts

@@ -0,0 +1,40 @@
+export type SensitivityLevel = 'Public' | 'Internal' | 'Confidential' | 'Secret';
+export type RecommendedStrategy = 'none' | 'partial' | 'full' | 'encrypt';
+export interface ClassifySensitivityParams {
+    filePath: string;
+    outputPathDir?: string;
+    sampleSize?: number;
+}
+export interface MatchResult {
+    matched: boolean;
+    name?: string;
+    pattern?: string;
+    level?: string;
+}
+export interface InvalidRule {
+    ruleName: string;
+    reason: string;
+}
+export interface FieldClassification {
+    fieldName: string;
+    sensitivityLevel: SensitivityLevel;
+    identifiedBy: {
+        ruleName: string;
+        matchType: string;
+    };
+    recommendedStrategy: RecommendedStrategy;
+}
+export interface ClassificationReportJson {
+    fields: FieldClassification[];
+    configStatus: string;
+    classifiedAt: string;
+}
+export interface ClassifySensitivityResult {
+    jsonReportPath: string;
+    markdownReportPath: string;
+    report: ClassificationReportJson;
+    fields: FieldClassification[];
+    status: 'SUCCESS' | 'FAILED';
+    configStatus: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/package.json

@@ -0,0 +1,39 @@
+{
+    "name":  "@liuhange/dsh-data-sensitivity-classification",
+    "description":  "Data sensitivity classification plugin: auto-identify sensitivity levels (Public/Internal/Confidential/Secret) and recommend masking strategies",
+    "version":  "2.0.0",
+    "publishConfig":  {
+                          "access":  "public"
+                      },
+    "repository":  {
+                       "type":  "git",
+                       "url":  "git+https://github.com/liuhange789/data-asset-inspector.git",
+                       "directory":  "packages/data-asset/data-sensitivity-classification"
+                   },
+    "type":  "module",
+    "main":  "lib/index.js",
+    "types":  "lib/types/index.d.ts",
+    "exports":  {
+                    ".":  {
+                              "types":  "./lib/types/index.d.ts",
+                              "default":  "./lib/index.js"
+                          },
+                    "./invariant":  {
+                                        "types":  "./lib/types/invariant.d.ts",
+                                        "default":  "./lib/invariant.js"
+                                    },
+                    "./src/*":  "./src/*",
+                    "./package.json":  "./package.json"
+                },
+    "files":  [
+                  "lib/index.js",
+                  "lib/invariant.js",
+                  "lib/types/**/*.d.ts"
+              ],
+    "license":  "MIT",
+    "peerDependencies":  {
+                             "@deepseek-ai/cordis":  "^0.1.0",
+                             "@deepseek-ai/dsh-tools":  "^0.1.0",
+                             "@liuhange/dsh-data-asset-shared":  "^2.0.0"
+                         }
+}