@quantabit/risk-control-sdk 1.0.0

package/dist/index.esm.js

@@ -0,0 +1,761 @@
+import { BaseApiClient } from '@quantabit/sdk-config';
+import React, { useState, useCallback, useEffect } from 'react';
+
+/**
+ * Risk Control SDK - API 客户端
+ * 风险控制系统后端接口封装
+ * 
+ * 使用 BaseApiClient 基类简化代码
+ */
+
+
+/**
+ * 风控 API 客户端
+ */
+class RiskControlApiClient extends BaseApiClient {
+  constructor(config = {}) {
+    super('/risk', config);
+  }
+
+  // ============ 风险评估 ============
+
+  /**
+   * 评估风险
+   * @param {Object} data - 评估数据
+   */
+  async assess(data) {
+    return this.post('/assess', data);
+  }
+
+  /**
+   * 检查风险（兼容快捷导出命名）
+   * @param {Object} data - 风险检查数据
+   */
+  async checkRisk(data) {
+    return this.assess(data);
+  }
+
+  /**
+   * 实时风险检测
+   * @param {string} eventType - 事件类型
+   * @param {Object} context - 上下文
+   */
+  async detect(eventType, context) {
+    return this.post('/detect', {
+      event_type: eventType,
+      ...context
+    });
+  }
+
+  /**
+   * 获取用户风险分数
+   * @param {string} userId - 用户 ID
+   */
+  async getUserRiskScore(userId) {
+    return this.get(`/users/${userId}/score`);
+  }
+
+  /**
+   * 获取用户风险画像
+   * @param {string} userId - 用户 ID
+   */
+  async getUserRiskProfile(userId) {
+    return this.get(`/users/${userId}/profile`);
+  }
+
+  // ============ 验证码 ============
+
+  /**
+   * 获取验证码
+   * @param {string} type - 验证码类型
+   * @param {Object} options - 选项
+   */
+  async getCaptcha(type, options = {}) {
+    return this.post('/captcha', {
+      type,
+      ...options
+    });
+  }
+
+  /**
+   * 验证验证码
+   * @param {string} captchaId - 验证码 ID
+   * @param {string} answer - 答案
+   */
+  async verifyCaptcha(captchaId, answer) {
+    return this.post('/captcha/verify', {
+      captcha_id: captchaId,
+      answer
+    });
+  }
+
+  // ============ 规则管理 ============
+
+  /**
+   * 获取规则列表
+   * @param {Object} params - 查询参数
+   */
+  async getRules(params = {}) {
+    return this.get('/rules', params);
+  }
+
+  /**
+   * 获取规则详情
+   * @param {string} ruleId - 规则 ID
+   */
+  async getRule(ruleId) {
+    return this.get(`/rules/${ruleId}`);
+  }
+
+  /**
+   * 创建规则
+   * @param {Object} rule - 规则数据
+   */
+  async createRule(rule) {
+    return this.post('/rules', rule);
+  }
+
+  /**
+   * 更新规则
+   * @param {string} ruleId - 规则 ID
+   * @param {Object} updates - 更新数据
+   */
+  async updateRule(ruleId, updates) {
+    return this.put(`/rules/${ruleId}`, updates);
+  }
+
+  /**
+   * 删除规则
+   * @param {string} ruleId - 规则 ID
+   */
+  async deleteRule(ruleId) {
+    return this.delete(`/rules/${ruleId}`);
+  }
+
+  /**
+   * 切换规则状态
+   * @param {string} ruleId - 规则 ID
+   * @param {boolean} enabled - 是否启用
+   */
+  async toggleRule(ruleId, enabled) {
+    return this.post(`/rules/${ruleId}/toggle`, {
+      enabled
+    });
+  }
+
+  // ============ 事件上报 ============
+
+  /**
+   * 上报风险事件
+   * @param {Object} event - 事件数据
+   */
+  async reportEvent(event) {
+    return this.post('/events', event);
+  }
+
+  /**
+   * 批量上报事件
+   * @param {Object[]} events - 事件列表
+   */
+  async batchReportEvents(events) {
+    return this.post('/events/batch', {
+      events
+    });
+  }
+
+  /**
+   * 获取事件列表
+   * @param {Object} params - 查询参数
+   */
+  async getEvents(params = {}) {
+    return this.get('/events', params);
+  }
+
+  // ============ 处置操作 ============
+
+  /**
+   * 封禁用户
+   * @param {string} userId - 用户 ID
+   * @param {Object} options - 封禁选项
+   */
+  async banUser(userId, options = {}) {
+    return this.post(`/users/${userId}/ban`, options);
+  }
+
+  /**
+   * 解封用户
+   * @param {string} userId - 用户 ID
+   */
+  async unbanUser(userId) {
+    return this.post(`/users/${userId}/unban`);
+  }
+
+  /**
+   * 限制用户
+   * @param {string} userId - 用户 ID
+   * @param {Object} restrictions - 限制配置
+   */
+  async restrictUser(userId, restrictions) {
+    return this.post(`/users/${userId}/restrict`, restrictions);
+  }
+
+  // ============ 统计分析 ============
+
+  /**
+   * 获取风控统计
+   * @param {Object} params - 统计参数
+   */
+  async getStats(params = {}) {
+    return this.get('/stats', params);
+  }
+
+  /**
+   * 获取风险趋势
+   * @param {Object} params - 查询参数
+   */
+  async getTrend(params = {}) {
+    return this.get('/trend', params);
+  }
+
+  /**
+   * 获取告警列表
+   * @param {Object} params - 查询参数
+   */
+  async getAlerts(params = {}) {
+    return this.get('/alerts', params);
+  }
+
+  /**
+   * 处理告警
+   * @param {string} alertId - 告警 ID
+   * @param {Object} action - 处理动作
+   */
+  async handleAlert(alertId, action) {
+    return this.post(`/alerts/${alertId}/handle`, action);
+  }
+
+  // ============ 隐私合规 ============
+
+  /**
+   * 获取用户风控数据概要 — GDPR 第15条: 访问权
+   * 用户有权知道被收集的风控信息
+   * @param {string} userId - 用户 ID
+   * @returns {Promise<object>} 风控数据概要（不含算法细节）
+   */
+  async getUserDataSummary(userId) {
+    return this.get(`/users/${userId}/data-summary`);
+  }
+
+  /**
+   * 获取隐私数据声明
+   */
+  getDataDisclosure() {
+    return {
+      sdk: '@quantabit/risk-control-sdk',
+      privacyLevel: 'essential',
+      consentRequired: false,
+      collected: [{
+        type: 'risk_score',
+        description: 'User risk assessment score',
+        retention: '2 years'
+      }, {
+        type: 'behavior_events',
+        description: 'Security-relevant user actions',
+        retention: '1 year'
+      }, {
+        type: 'device_fingerprint',
+        description: 'Device identification for fraud detection',
+        retention: '90 days'
+      }, {
+        type: 'ip_address',
+        description: 'IP for geo-risk analysis (anonymized after 30 days)',
+        retention: '30 days (full), 1 year (anonymized)'
+      }, {
+        type: 'captcha_responses',
+        description: 'Bot detection verification',
+        retention: '24 hours'
+      }],
+      legalBasis: 'Legitimate interest (fraud prevention, Art. 6(1)(f) GDPR)',
+      compliance: ['GDPR Art. 22 (Automated decision-making)', 'PSD2 SCA'],
+      gdprCapabilities: ['access-summary'],
+      note: 'Risk scoring uses automated processing. Users have the right to contest automated decisions under GDPR Art. 22.'
+    };
+  }
+}
+
+// 创建默认实例
+const riskControlApi = new RiskControlApiClient();
+
+/**
+ * Risk Control SDK - 类型定义
+ */
+
+// 风险等级
+const RiskLevel = {
+  LOW: 'low',
+  MEDIUM: 'medium',
+  HIGH: 'high',
+  CRITICAL: 'critical'
+};
+
+// 事件类型
+const RiskEventType = {
+  LOGIN: 'login',
+  REGISTER: 'register',
+  PAYMENT: 'payment',
+  WITHDRAW: 'withdraw',
+  CONTENT: 'content',
+  INTERACTION: 'interaction'
+};
+const RuleCondition = {
+  EQUALS: 'equals',
+  NOT_EQUALS: 'not_equals',
+  GREATER_THAN: 'greater_than',
+  LESS_THAN: 'less_than',
+  CONTAINS: 'contains',
+  IN: 'in'
+};
+const EventType = RiskEventType;
+const RiskAction = {
+  PASS: 'pass',
+  REVIEW: 'review',
+  BLOCK: 'block',
+  CAPTCHA: 'captcha',
+  LIMIT: 'limit'
+};
+
+/**
+ * Risk Control SDK - 多语言支持
+ */
+
+const messages = {
+  en: {
+    riskControl: 'Risk Control',
+    riskRules: 'Risk Rules',
+    riskEvents: 'Risk Events',
+    antiCheat: 'Anti-Cheat',
+    createRule: 'Create Rule',
+    editRule: 'Edit Rule',
+    ruleName: 'Rule Name',
+    ruleDescription: 'Description',
+    conditions: 'Conditions',
+    actions: 'Actions',
+    priority: 'Priority',
+    enabled: 'Enabled',
+    disabled: 'Disabled',
+    riskLevel: 'Risk Level',
+    high: 'High',
+    medium: 'Medium',
+    low: 'Low',
+    block: 'Block',
+    warn: 'Warn',
+    review: 'Review',
+    pass: 'Pass',
+    challenged: 'Challenged',
+    blocked: 'Blocked',
+    eventType: 'Event Type',
+    login: 'Login',
+    payment: 'Payment',
+    withdraw: 'Withdraw',
+    register: 'Register',
+    timestamp: 'Timestamp',
+    userId: 'User ID',
+    ipAddress: 'IP Address',
+    deviceId: 'Device ID',
+    riskScore: 'Risk Score',
+    triggeredRules: 'Triggered Rules',
+    details: 'Details',
+    loading: 'Loading...',
+    noData: 'No data',
+    save: 'Save',
+    cancel: 'Cancel'
+  },
+  zh: {
+    riskControl: '风控',
+    riskRules: '风控规则',
+    riskEvents: '风险事件',
+    antiCheat: '反作弊',
+    createRule: '创建规则',
+    editRule: '编辑规则',
+    ruleName: '规则名称',
+    ruleDescription: '描述',
+    conditions: '条件',
+    actions: '动作',
+    priority: '优先级',
+    enabled: '启用',
+    disabled: '禁用',
+    riskLevel: '风险等级',
+    high: '高',
+    medium: '中',
+    low: '低',
+    block: '拦截',
+    warn: '警告',
+    review: '人工审核',
+    pass: '通过',
+    challenged: '挑战',
+    blocked: '已拦截',
+    eventType: '事件类型',
+    login: '登录',
+    payment: '支付',
+    withdraw: '提现',
+    register: '注册',
+    timestamp: '时间',
+    userId: '用户ID',
+    ipAddress: 'IP地址',
+    deviceId: '设备ID',
+    riskScore: '风险分数',
+    triggeredRules: '触发规则',
+    details: '详情',
+    loading: '加载中...',
+    noData: '暂无数据',
+    save: '保存',
+    cancel: '取消'
+  },
+  ja: {
+    riskControl: 'リスク管理',
+    riskRules: 'リスクルール',
+    riskEvents: 'リスクイベント',
+    antiCheat: 'アンチチート',
+    createRule: 'ルールの作成',
+    editRule: 'ルールの編集',
+    ruleName: 'ルール名',
+    ruleDescription: '説明',
+    conditions: '条件',
+    actions: 'アクション',
+    priority: '優先度',
+    enabled: '有効',
+    disabled: '無効',
+    riskLevel: 'リスクレベル',
+    high: '高',
+    medium: '中',
+    low: '低',
+    block: 'ブロック',
+    warn: '警告',
+    review: 'レビュー',
+    pass: 'パス',
+    challenged: 'チャレンジ済み',
+    blocked: 'ブロック済み',
+    eventType: 'イベントタイプ',
+    login: 'ログイン',
+    payment: '支払い',
+    withdraw: '出金',
+    register: '登録',
+    timestamp: 'タイムスタンプ',
+    userId: 'ユーザーID',
+    ipAddress: 'IPアドレス',
+    deviceId: 'デバイスID',
+    riskScore: 'リスクスコア',
+    triggeredRules: 'トリガーされたルール',
+    details: '詳細',
+    loading: '読み込み中...',
+    noData: 'データなし',
+    save: '保存',
+    cancel: 'キャンセル'
+  },
+  ko: {
+    riskControl: '리스크 관리',
+    riskRules: '리스크 규칙',
+    riskEvents: '리스크 이벤트',
+    antiCheat: '안티 치트',
+    createRule: '규칙 생성',
+    editRule: '규칙 편집',
+    ruleName: '규칙 이름',
+    ruleDescription: '설명',
+    conditions: '조건',
+    actions: '작업',
+    priority: '우선순위',
+    enabled: '활성화됨',
+    disabled: '비활성화됨',
+    riskLevel: '리스크 수준',
+    high: '높음',
+    medium: '중간',
+    low: '낮음',
+    block: '차단',
+    warn: '경고',
+    review: '검토',
+    pass: '통과',
+    challenged: '도전됨',
+    blocked: '차단됨',
+    eventType: '이벤트 유형',
+    login: '로그인',
+    payment: '결제',
+    withdraw: '출금',
+    register: '등록',
+    timestamp: '타임스탬프',
+    userId: '사용자 ID',
+    ipAddress: 'IP 주소',
+    deviceId: '디바이스 ID',
+    riskScore: '리스크 점수',
+    triggeredRules: '트리거된 규칙',
+    details: '세부 정보',
+    loading: '로딩 중...',
+    noData: '데이터 없음',
+    save: '저장',
+    cancel: '취소'
+  }
+};
+const SUPPORTED_LANGUAGES = ['en', 'zh', 'ja', 'ko'];
+let currentLanguage = 'zh';
+function setLanguage(lang) {
+  if (SUPPORTED_LANGUAGES.includes(lang)) currentLanguage = lang;
+}
+function getLanguage() {
+  return currentLanguage;
+}
+function t(key) {
+  return (messages[currentLanguage] || messages.en)[key] || key;
+}
+
+/**
+ * Risk Control SDK - React Hooks
+ */
+
+function useRiskRules(options = {}) {
+  const [rules, setRules] = useState([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState(null);
+  const fetch = useCallback(async () => {
+    setLoading(true);
+    try {
+      const result = await riskControlApi.getRules(options);
+      setRules(result.items || result);
+      setError(null);
+    } catch (err) {
+      setError(err);
+    } finally {
+      setLoading(false);
+    }
+  }, [JSON.stringify(options)]);
+  useEffect(() => {
+    fetch();
+  }, [fetch]);
+  return {
+    rules,
+    loading,
+    error,
+    refresh: fetch
+  };
+}
+function useRiskEvents(options = {}) {
+  const [events, setEvents] = useState([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState(null);
+  const fetch = useCallback(async () => {
+    setLoading(true);
+    try {
+      const result = await riskControlApi.getEvents(options);
+      setEvents(result.items || result);
+      setError(null);
+    } catch (err) {
+      setError(err);
+    } finally {
+      setLoading(false);
+    }
+  }, [JSON.stringify(options)]);
+  useEffect(() => {
+    fetch();
+  }, [fetch]);
+  return {
+    events,
+    loading,
+    error,
+    refresh: fetch
+  };
+}
+function useRiskCheck() {
+  const [loading, setLoading] = useState(false);
+  const [result, setResult] = useState(null);
+  const checkRisk = useCallback(async data => {
+    setLoading(true);
+    try {
+      const res = await riskControlApi.checkRisk(data);
+      setResult(res);
+      return res;
+    } catch (err) {
+      setResult({
+        error: err.message
+      });
+      throw err;
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  return {
+    checkRisk,
+    result,
+    loading
+  };
+}
+
+/**
+ * Risk Control SDK - 风控组件
+ */
+
+function RiskLevelBadge({
+  level
+}) {
+  const levelMap = {
+    high: 'risk-badge-high',
+    medium: 'risk-badge-medium',
+    low: 'risk-badge-low'
+  };
+  return /*#__PURE__*/React.createElement("span", {
+    className: `risk-badge ${levelMap[level] || levelMap.low}`
+  }, t(level));
+}
+function RiskScore({
+  score
+}) {
+  const level = score >= 70 ? 'high' : score >= 40 ? 'medium' : 'low';
+  return /*#__PURE__*/React.createElement("div", {
+    className: `risk-score risk-score-${level}`
+  }, score);
+}
+function RiskEventTable({
+  events = [],
+  loading = false,
+  onViewDetails,
+  className = ''
+}) {
+  if (loading) {
+    return /*#__PURE__*/React.createElement("div", {
+      className: `risk-card ${className}`
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-loading"
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-spinner"
+    })));
+  }
+  if (events.length === 0) {
+    return /*#__PURE__*/React.createElement("div", {
+      className: `risk-card ${className}`
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-empty"
+    }, /*#__PURE__*/React.createElement("div", {
+      style: {
+        fontSize: '48px',
+        marginBottom: '16px'
+      }
+    }, "\uD83D\uDEE1\uFE0F"), /*#__PURE__*/React.createElement("div", null, t('noData'))));
+  }
+  return /*#__PURE__*/React.createElement("div", {
+    className: `risk-card ${className}`
+  }, /*#__PURE__*/React.createElement("table", {
+    className: "risk-table"
+  }, /*#__PURE__*/React.createElement("thead", null, /*#__PURE__*/React.createElement("tr", null, /*#__PURE__*/React.createElement("th", null, t('timestamp')), /*#__PURE__*/React.createElement("th", null, t('eventType')), /*#__PURE__*/React.createElement("th", null, t('userId')), /*#__PURE__*/React.createElement("th", null, t('riskScore')), /*#__PURE__*/React.createElement("th", null, t('riskLevel')), /*#__PURE__*/React.createElement("th", null))), /*#__PURE__*/React.createElement("tbody", null, events.map(event => /*#__PURE__*/React.createElement("tr", {
+    key: event.id
+  }, /*#__PURE__*/React.createElement("td", null, new Date(event.timestamp).toLocaleString()), /*#__PURE__*/React.createElement("td", null, t(event.event_type) || event.event_type), /*#__PURE__*/React.createElement("td", null, /*#__PURE__*/React.createElement("code", {
+    style: {
+      background: '#f3f4f6',
+      padding: '2px 6px',
+      borderRadius: '4px'
+    }
+  }, event.user_id)), /*#__PURE__*/React.createElement("td", null, /*#__PURE__*/React.createElement(RiskScore, {
+    score: event.risk_score
+  })), /*#__PURE__*/React.createElement("td", null, /*#__PURE__*/React.createElement(RiskLevelBadge, {
+    level: event.risk_level
+  })), /*#__PURE__*/React.createElement("td", null, onViewDetails && /*#__PURE__*/React.createElement("button", {
+    className: "risk-btn risk-btn-outline",
+    style: {
+      padding: '4px 10px',
+      fontSize: '12px'
+    },
+    onClick: () => onViewDetails(event)
+  }, t('details'))))))));
+}
+function RiskRuleCard({
+  rule,
+  onEdit,
+  onToggle
+}) {
+  return /*#__PURE__*/React.createElement("div", {
+    className: "risk-rule-item"
+  }, /*#__PURE__*/React.createElement("div", null, /*#__PURE__*/React.createElement("div", {
+    className: "risk-rule-name"
+  }, rule.name), /*#__PURE__*/React.createElement("div", {
+    className: "risk-rule-desc"
+  }, rule.description)), /*#__PURE__*/React.createElement("div", {
+    style: {
+      display: 'flex',
+      alignItems: 'center',
+      gap: '12px'
+    }
+  }, /*#__PURE__*/React.createElement(RiskLevelBadge, {
+    level: rule.risk_level
+  }), /*#__PURE__*/React.createElement("label", {
+    style: {
+      display: 'flex',
+      alignItems: 'center',
+      gap: '8px',
+      cursor: 'pointer'
+    }
+  }, /*#__PURE__*/React.createElement("input", {
+    type: "checkbox",
+    checked: rule.enabled,
+    onChange: () => onToggle?.(rule.id, !rule.enabled),
+    style: {
+      width: '18px',
+      height: '18px'
+    }
+  }), /*#__PURE__*/React.createElement("span", {
+    style: {
+      fontSize: '13px',
+      color: '#6b7280'
+    }
+  }, rule.enabled ? t('enabled') : t('disabled'))), onEdit && /*#__PURE__*/React.createElement("button", {
+    className: "risk-btn risk-btn-outline",
+    style: {
+      padding: '6px 12px',
+      fontSize: '12px'
+    },
+    onClick: () => onEdit(rule)
+  }, t('editRule'))));
+}
+function RiskRulesList({
+  rules = [],
+  loading = false,
+  onEdit,
+  onToggle,
+  className = ''
+}) {
+  if (loading) {
+    return /*#__PURE__*/React.createElement("div", {
+      className: `risk-card ${className}`
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-loading"
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-spinner"
+    })));
+  }
+  if (rules.length === 0) {
+    return /*#__PURE__*/React.createElement("div", {
+      className: `risk-card ${className}`
+    }, /*#__PURE__*/React.createElement("div", {
+      className: "risk-empty"
+    }, t('noData')));
+  }
+  return /*#__PURE__*/React.createElement("div", {
+    className: `risk-card ${className}`
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "risk-rules-list"
+  }, rules.map(rule => /*#__PURE__*/React.createElement(RiskRuleCard, {
+    key: rule.id,
+    rule: rule,
+    onEdit: onEdit,
+    onToggle: onToggle
+  }))));
+}
+
+/**
+ * @quantabit/risk-control-sdk
+ * Risk Control SDK - Full Version
+ */
+
+const getRules = (...args) => riskControlApi.getRules(...args);
+const createRule = (...args) => riskControlApi.createRule(...args);
+const updateRule = (...args) => riskControlApi.updateRule(...args);
+const getEvents = (...args) => riskControlApi.getEvents(...args);
+const checkRisk = (...args) => riskControlApi.checkRisk(...args);
+
+export { EventType, RiskAction, RiskControlApiClient, RiskEventTable, RiskLevel, RiskLevelBadge, RiskRuleCard, RiskRulesList, RiskScore, RuleCondition, SUPPORTED_LANGUAGES, checkRisk, createRule, getEvents, getLanguage, getRules, messages, riskControlApi, setLanguage, t, updateRule, useRiskCheck, useRiskEvents, useRiskRules };
+//# sourceMappingURL=index.esm.js.map