@vlian/framework 1.0.0

package/dist/utils/analytics.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/analytics.ts"],"sourcesContent":["import { logger } from './logger';\nimport { SecurityUtils } from './security';\n\n/**\n * 分析事件类型\n */\nexport type AnalyticsEventType = 'pageview' | 'click' | 'custom' | 'error' | 'performance';\n\n/**\n * 分析事件\n */\nexport interface AnalyticsEvent {\n  /**\n   * 事件类型\n   */\n  type: AnalyticsEventType;\n  /**\n   * 事件名称\n   */\n  name: string;\n  /**\n   * 事件属性\n   */\n  properties?: Record<string, unknown>;\n  /**\n   * 时间戳\n   */\n  timestamp?: number;\n}\n\n/**\n * 分析配置\n */\nexport interface AnalyticsConfig {\n  /**\n   * 是否启用分析\n   */\n  enabled?: boolean;\n  /**\n   * 采样率 (0-1)\n   */\n  sampleRate?: number;\n  /**\n   * 是否匿名化数据\n   */\n  anonymize?: boolean;\n  /**\n   * 事件上报回调\n   */\n  onEvent?: (event: AnalyticsEvent) => void;\n  /**\n   * 批量上报回调\n   */\n  onBatch?: (events: AnalyticsEvent[]) => void;\n  /**\n   * 批量上报大小\n   */\n  batchSize?: number;\n  /**\n   * 批量上报间隔（毫秒）\n   */\n  batchInterval?: number;\n}\n\n/**\n * 分析服务类\n */\nexport class AnalyticsService {\n  private config: Required<AnalyticsConfig>;\n  private eventQueue: AnalyticsEvent[] = [];\n  private batchTimer: ReturnType<typeof setInterval> | null = null;\n\n  constructor(config: AnalyticsConfig = {}) {\n    this.config = {\n      enabled: config.enabled ?? true,\n      sampleRate: config.sampleRate ?? 1.0,\n      anonymize: config.anonymize ?? true,\n      onEvent: config.onEvent ?? (() => {}),\n      onBatch: config.onBatch ?? (() => {}),\n      batchSize: config.batchSize ?? 10,\n      batchInterval: config.batchInterval ?? 5000,\n    };\n\n    if (this.config.enabled) {\n      this.startBatchTimer();\n    }\n  }\n\n  /**\n   * 启动批量上报定时器\n   */\n  private startBatchTimer(): void {\n    if (this.batchTimer) {\n      return;\n    }\n\n    this.batchTimer = setInterval(() => {\n      this.flush();\n    }, this.config.batchInterval);\n  }\n\n  /**\n   * 停止批量上报定时器\n   */\n  private stopBatchTimer(): void {\n    if (this.batchTimer) {\n      clearInterval(this.batchTimer);\n      this.batchTimer = null;\n    }\n  }\n\n  /**\n   * 记录事件\n   */\n  track(event: Omit<AnalyticsEvent, 'timestamp'>): void {\n    if (!this.config.enabled) {\n      return;\n    }\n\n    // 采样检查\n    if (Math.random() > this.config.sampleRate) {\n      return;\n    }\n\n    // 匿名化处理\n    const anonymizedEvent: AnalyticsEvent = {\n      ...event,\n      timestamp: Date.now(),\n      properties: this.anonymizeProperties(event.properties),\n    };\n\n    // 添加到队列\n    this.eventQueue.push(anonymizedEvent);\n\n    // 立即上报单个事件\n    if (this.config.onEvent) {\n      this.config.onEvent(anonymizedEvent);\n    }\n\n    // 检查是否需要批量上报\n    if (this.eventQueue.length >= this.config.batchSize) {\n      this.flush();\n    }\n  }\n\n  /**\n   * 记录页面浏览\n   */\n  trackPageView(page: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'pageview',\n      name: 'page_view',\n      properties: {\n        page,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录点击事件\n   */\n  trackClick(element: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'click',\n      name: 'click',\n      properties: {\n        element,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录自定义事件\n   */\n  trackCustom(name: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'custom',\n      name,\n      properties,\n    });\n  }\n\n  /**\n   * 记录错误事件\n   */\n  trackError(error: Error, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'error',\n      name: 'error',\n      properties: {\n        errorName: error.name,\n        errorMessage: error.message,\n        errorStack: error.stack,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录性能事件\n   */\n  trackPerformance(metrics: Record<string, number>, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'performance',\n      name: 'performance',\n      properties: {\n        ...metrics,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 匿名化属性（使用深度脱敏）\n   */\n  private anonymizeProperties(properties?: Record<string, unknown>): Record<string, unknown> | undefined {\n    if (!this.config.anonymize || !properties) {\n      return properties;\n    }\n\n    // 使用深度脱敏处理\n    return SecurityUtils.deepSanitize(properties) as Record<string, unknown>;\n  }\n\n  /**\n   * 刷新队列（批量上报）\n   */\n  flush(): void {\n    if (this.eventQueue.length === 0) {\n      return;\n    }\n\n    const events = [...this.eventQueue];\n    this.eventQueue = [];\n\n    if (this.config.onBatch) {\n      this.config.onBatch(events);\n    }\n\n    logger.debug(`分析服务批量上报 ${events.length} 个事件`);\n  }\n\n  /**\n   * 启用分析\n   */\n  enable(): void {\n    this.config.enabled = true;\n    this.startBatchTimer();\n  }\n\n  /**\n   * 禁用分析\n   */\n  disable(): void {\n    this.config.enabled = false;\n    this.stopBatchTimer();\n    this.flush();\n  }\n\n  /**\n   * 销毁服务\n   */\n  destroy(): void {\n    this.stopBatchTimer();\n    this.flush();\n  }\n}\n\n/**\n * 默认分析服务实例\n */\nlet defaultAnalyticsService: AnalyticsService | null = null;\n\n/**\n * 初始化默认分析服务\n */\nexport function initAnalytics(config?: AnalyticsConfig): AnalyticsService {\n  if (!defaultAnalyticsService) {\n    defaultAnalyticsService = new AnalyticsService(config);\n  }\n  return defaultAnalyticsService;\n}\n\n/**\n * 获取默认分析服务\n */\nexport function getAnalytics(): AnalyticsService {\n  if (!defaultAnalyticsService) {\n    return initAnalytics();\n  }\n  return defaultAnalyticsService;\n}\n"],"names":["AnalyticsService","getAnalytics","initAnalytics","startBatchTimer","batchTimer","setInterval","flush","config","batchInterval","stopBatchTimer","clearInterval","track","event","enabled","Math","random","sampleRate","anonymizedEvent","timestamp","Date","now","properties","anonymizeProperties","eventQueue","push","onEvent","length","batchSize","trackPageView","page","type","name","trackClick","element","trackCustom","trackError","error","errorName","errorMessage","message","errorStack","stack","trackPerformance","metrics","anonymize","SecurityUtils","deepSanitize","events","onBatch","logger","debug","enable","disable","destroy","defaultAnalyticsService"],"mappings":";;;;;;;;;;;QAmEaA;eAAAA;;QA6NGC;eAAAA;;QAVAC;eAAAA;;;wBAtRO;0BACO;;;;;;;;;;;;;;AAkEvB,IAAA,AAAMF,mBAAN,MAAMA;IAqBX;;GAEC,GACD,AAAQG,kBAAwB;QAC9B,IAAI,IAAI,CAACC,UAAU,EAAE;YACnB;QACF;QAEA,IAAI,CAACA,UAAU,GAAGC,YAAY;YAC5B,IAAI,CAACC,KAAK;QACZ,GAAG,IAAI,CAACC,MAAM,CAACC,aAAa;IAC9B;IAEA;;GAEC,GACD,AAAQC,iBAAuB;QAC7B,IAAI,IAAI,CAACL,UAAU,EAAE;YACnBM,cAAc,IAAI,CAACN,UAAU;YAC7B,IAAI,CAACA,UAAU,GAAG;QACpB;IACF;IAEA;;GAEC,GACDO,MAAMC,KAAwC,EAAQ;QACpD,IAAI,CAAC,IAAI,CAACL,MAAM,CAACM,OAAO,EAAE;YACxB;QACF;QAEA,OAAO;QACP,IAAIC,KAAKC,MAAM,KAAK,IAAI,CAACR,MAAM,CAACS,UAAU,EAAE;YAC1C;QACF;QAEA,QAAQ;QACR,MAAMC,kBAAkC;YACtC,GAAGL,KAAK;YACRM,WAAWC,KAAKC,GAAG;YACnBC,YAAY,IAAI,CAACC,mBAAmB,CAACV,MAAMS,UAAU;QACvD;QAEA,QAAQ;QACR,IAAI,CAACE,UAAU,CAACC,IAAI,CAACP;QAErB,WAAW;QACX,IAAI,IAAI,CAACV,MAAM,CAACkB,OAAO,EAAE;YACvB,IAAI,CAAClB,MAAM,CAACkB,OAAO,CAACR;QACtB;QAEA,aAAa;QACb,IAAI,IAAI,CAACM,UAAU,CAACG,MAAM,IAAI,IAAI,CAACnB,MAAM,CAACoB,SAAS,EAAE;YACnD,IAAI,CAACrB,KAAK;QACZ;IACF;IAEA;;GAEC,GACDsB,cAAcC,IAAY,EAAER,UAAoC,EAAQ;QACtE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVQ;gBACA,GAAGR,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDW,WAAWC,OAAe,EAAEZ,UAAoC,EAAQ;QACtE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVY;gBACA,GAAGZ,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDa,YAAYH,IAAY,EAAEV,UAAoC,EAAQ;QACpE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC;YACAV;QACF;IACF;IAEA;;GAEC,GACDc,WAAWC,KAAY,EAAEf,UAAoC,EAAQ;QACnE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVgB,WAAWD,MAAML,IAAI;gBACrBO,cAAcF,MAAMG,OAAO;gBAC3BC,YAAYJ,MAAMK,KAAK;gBACvB,GAAGpB,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDqB,iBAAiBC,OAA+B,EAAEtB,UAAoC,EAAQ;QAC5F,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACV,GAAGsB,OAAO;gBACV,GAAGtB,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACD,AAAQC,oBAAoBD,UAAoC,EAAuC;QACrG,IAAI,CAAC,IAAI,CAACd,MAAM,CAACqC,SAAS,IAAI,CAACvB,YAAY;YACzC,OAAOA;QACT;QAEA,WAAW;QACX,OAAOwB,uBAAa,CAACC,YAAY,CAACzB;IACpC;IAEA;;GAEC,GACDf,QAAc;QACZ,IAAI,IAAI,CAACiB,UAAU,CAACG,MAAM,KAAK,GAAG;YAChC;QACF;QAEA,MAAMqB,SAAS;eAAI,IAAI,CAACxB,UAAU;SAAC;QACnC,IAAI,CAACA,UAAU,GAAG,EAAE;QAEpB,IAAI,IAAI,CAAChB,MAAM,CAACyC,OAAO,EAAE;YACvB,IAAI,CAACzC,MAAM,CAACyC,OAAO,CAACD;QACtB;QAEAE,cAAM,CAACC,KAAK,CAAC,CAAC,SAAS,EAAEH,OAAOrB,MAAM,CAAC,IAAI,CAAC;IAC9C;IAEA;;GAEC,GACDyB,SAAe;QACb,IAAI,CAAC5C,MAAM,CAACM,OAAO,GAAG;QACtB,IAAI,CAACV,eAAe;IACtB;IAEA;;GAEC,GACDiD,UAAgB;QACd,IAAI,CAAC7C,MAAM,CAACM,OAAO,GAAG;QACtB,IAAI,CAACJ,cAAc;QACnB,IAAI,CAACH,KAAK;IACZ;IAEA;;GAEC,GACD+C,UAAgB;QACd,IAAI,CAAC5C,cAAc;QACnB,IAAI,CAACH,KAAK;IACZ;IAnMA,YAAYC,SAA0B,CAAC,CAAC,CAAE;QAJ1C,uBAAQA,UAAR,KAAA;QACA,uBAAQgB,cAA+B,EAAE;QACzC,uBAAQnB,cAAoD;QAG1D,IAAI,CAACG,MAAM,GAAG;YACZM,SAASN,OAAOM,OAAO,IAAI;YAC3BG,YAAYT,OAAOS,UAAU,IAAI;YACjC4B,WAAWrC,OAAOqC,SAAS,IAAI;YAC/BnB,SAASlB,OAAOkB,OAAO,IAAK,CAAA,KAAO,CAAA;YACnCuB,SAASzC,OAAOyC,OAAO,IAAK,CAAA,KAAO,CAAA;YACnCrB,WAAWpB,OAAOoB,SAAS,IAAI;YAC/BnB,eAAeD,OAAOC,aAAa,IAAI;QACzC;QAEA,IAAI,IAAI,CAACD,MAAM,CAACM,OAAO,EAAE;YACvB,IAAI,CAACV,eAAe;QACtB;IACF;AAsLF;AAEA;;CAEC,GACD,IAAImD,0BAAmD;AAKhD,SAASpD,cAAcK,MAAwB;IACpD,IAAI,CAAC+C,yBAAyB;QAC5BA,0BAA0B,IAAItD,iBAAiBO;IACjD;IACA,OAAO+C;AACT;AAKO,SAASrD;IACd,IAAI,CAACqD,yBAAyB;QAC5B,OAAOpD;IACT;IACA,OAAOoD;AACT"}

package/dist/utils/analytics.d.ts

@@ -0,0 +1,128 @@
+/**
+ * 分析事件类型
+ */
+export type AnalyticsEventType = 'pageview' | 'click' | 'custom' | 'error' | 'performance';
+/**
+ * 分析事件
+ */
+export interface AnalyticsEvent {
+    /**
+     * 事件类型
+     */
+    type: AnalyticsEventType;
+    /**
+     * 事件名称
+     */
+    name: string;
+    /**
+     * 事件属性
+     */
+    properties?: Record<string, unknown>;
+    /**
+     * 时间戳
+     */
+    timestamp?: number;
+}
+/**
+ * 分析配置
+ */
+export interface AnalyticsConfig {
+    /**
+     * 是否启用分析
+     */
+    enabled?: boolean;
+    /**
+     * 采样率 (0-1)
+     */
+    sampleRate?: number;
+    /**
+     * 是否匿名化数据
+     */
+    anonymize?: boolean;
+    /**
+     * 事件上报回调
+     */
+    onEvent?: (event: AnalyticsEvent) => void;
+    /**
+     * 批量上报回调
+     */
+    onBatch?: (events: AnalyticsEvent[]) => void;
+    /**
+     * 批量上报大小
+     */
+    batchSize?: number;
+    /**
+     * 批量上报间隔（毫秒）
+     */
+    batchInterval?: number;
+}
+/**
+ * 分析服务类
+ */
+export declare class AnalyticsService {
+    private config;
+    private eventQueue;
+    private batchTimer;
+    constructor(config?: AnalyticsConfig);
+    /**
+     * 启动批量上报定时器
+     */
+    private startBatchTimer;
+    /**
+     * 停止批量上报定时器
+     */
+    private stopBatchTimer;
+    /**
+     * 记录事件
+     */
+    track(event: Omit<AnalyticsEvent, 'timestamp'>): void;
+    /**
+     * 记录页面浏览
+     */
+    trackPageView(page: string, properties?: Record<string, unknown>): void;
+    /**
+     * 记录点击事件
+     */
+    trackClick(element: string, properties?: Record<string, unknown>): void;
+    /**
+     * 记录自定义事件
+     */
+    trackCustom(name: string, properties?: Record<string, unknown>): void;
+    /**
+     * 记录错误事件
+     */
+    trackError(error: Error, properties?: Record<string, unknown>): void;
+    /**
+     * 记录性能事件
+     */
+    trackPerformance(metrics: Record<string, number>, properties?: Record<string, unknown>): void;
+    /**
+     * 匿名化属性（使用深度脱敏）
+     */
+    private anonymizeProperties;
+    /**
+     * 刷新队列（批量上报）
+     */
+    flush(): void;
+    /**
+     * 启用分析
+     */
+    enable(): void;
+    /**
+     * 禁用分析
+     */
+    disable(): void;
+    /**
+     * 销毁服务
+     */
+    destroy(): void;
+}
+/**
+ * 初始化默认分析服务
+ */
+export declare function initAnalytics(config?: AnalyticsConfig): AnalyticsService;
+/**
+ * 获取默认分析服务
+ */
+export declare function getAnalytics(): AnalyticsService;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/utils/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/utils/analytics.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAC1C;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,IAAI,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,UAAU,CAA+C;gBAErD,MAAM,GAAE,eAAoB;IAgBxC;;OAEG;IACH,OAAO,CAAC,eAAe;IAUvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAOtB;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,IAAI;IA+BrD;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAWvE;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAWvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAQrE;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAapE;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAW7F;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;OAEG;IACH,KAAK,IAAI,IAAI;IAeb;;OAEG;IACH,MAAM,IAAI,IAAI;IAKd;;OAEG;IACH,OAAO,IAAI,IAAI;IAMf;;OAEG;IACH,OAAO,IAAI,IAAI;CAIhB;AAOD;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,gBAAgB,CAKxE;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,gBAAgB,CAK/C"}

package/dist/utils/analytics.js

@@ -0,0 +1,204 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+import { logger } from "./logger";
+import { SecurityUtils } from "./security";
+/**
+ * 分析服务类
+ */ export class AnalyticsService {
+    /**
+   * 启动批量上报定时器
+   */ startBatchTimer() {
+        if (this.batchTimer) {
+            return;
+        }
+        this.batchTimer = setInterval(()=>{
+            this.flush();
+        }, this.config.batchInterval);
+    }
+    /**
+   * 停止批量上报定时器
+   */ stopBatchTimer() {
+        if (this.batchTimer) {
+            clearInterval(this.batchTimer);
+            this.batchTimer = null;
+        }
+    }
+    /**
+   * 记录事件
+   */ track(event) {
+        if (!this.config.enabled) {
+            return;
+        }
+        // 采样检查
+        if (Math.random() > this.config.sampleRate) {
+            return;
+        }
+        // 匿名化处理
+        const anonymizedEvent = {
+            ...event,
+            timestamp: Date.now(),
+            properties: this.anonymizeProperties(event.properties)
+        };
+        // 添加到队列
+        this.eventQueue.push(anonymizedEvent);
+        // 立即上报单个事件
+        if (this.config.onEvent) {
+            this.config.onEvent(anonymizedEvent);
+        }
+        // 检查是否需要批量上报
+        if (this.eventQueue.length >= this.config.batchSize) {
+            this.flush();
+        }
+    }
+    /**
+   * 记录页面浏览
+   */ trackPageView(page, properties) {
+        this.track({
+            type: 'pageview',
+            name: 'page_view',
+            properties: {
+                page,
+                ...properties
+            }
+        });
+    }
+    /**
+   * 记录点击事件
+   */ trackClick(element, properties) {
+        this.track({
+            type: 'click',
+            name: 'click',
+            properties: {
+                element,
+                ...properties
+            }
+        });
+    }
+    /**
+   * 记录自定义事件
+   */ trackCustom(name, properties) {
+        this.track({
+            type: 'custom',
+            name,
+            properties
+        });
+    }
+    /**
+   * 记录错误事件
+   */ trackError(error, properties) {
+        this.track({
+            type: 'error',
+            name: 'error',
+            properties: {
+                errorName: error.name,
+                errorMessage: error.message,
+                errorStack: error.stack,
+                ...properties
+            }
+        });
+    }
+    /**
+   * 记录性能事件
+   */ trackPerformance(metrics, properties) {
+        this.track({
+            type: 'performance',
+            name: 'performance',
+            properties: {
+                ...metrics,
+                ...properties
+            }
+        });
+    }
+    /**
+   * 匿名化属性（使用深度脱敏）
+   */ anonymizeProperties(properties) {
+        if (!this.config.anonymize || !properties) {
+            return properties;
+        }
+        // 使用深度脱敏处理
+        return SecurityUtils.deepSanitize(properties);
+    }
+    /**
+   * 刷新队列（批量上报）
+   */ flush() {
+        if (this.eventQueue.length === 0) {
+            return;
+        }
+        const events = [
+            ...this.eventQueue
+        ];
+        this.eventQueue = [];
+        if (this.config.onBatch) {
+            this.config.onBatch(events);
+        }
+        logger.debug(`分析服务批量上报 ${events.length} 个事件`);
+    }
+    /**
+   * 启用分析
+   */ enable() {
+        this.config.enabled = true;
+        this.startBatchTimer();
+    }
+    /**
+   * 禁用分析
+   */ disable() {
+        this.config.enabled = false;
+        this.stopBatchTimer();
+        this.flush();
+    }
+    /**
+   * 销毁服务
+   */ destroy() {
+        this.stopBatchTimer();
+        this.flush();
+    }
+    constructor(config = {}){
+        _define_property(this, "config", void 0);
+        _define_property(this, "eventQueue", []);
+        _define_property(this, "batchTimer", null);
+        this.config = {
+            enabled: config.enabled ?? true,
+            sampleRate: config.sampleRate ?? 1.0,
+            anonymize: config.anonymize ?? true,
+            onEvent: config.onEvent ?? (()=>{}),
+            onBatch: config.onBatch ?? (()=>{}),
+            batchSize: config.batchSize ?? 10,
+            batchInterval: config.batchInterval ?? 5000
+        };
+        if (this.config.enabled) {
+            this.startBatchTimer();
+        }
+    }
+}
+/**
+ * 默认分析服务实例
+ */ let defaultAnalyticsService = null;
+/**
+ * 初始化默认分析服务
+ */ export function initAnalytics(config) {
+    if (!defaultAnalyticsService) {
+        defaultAnalyticsService = new AnalyticsService(config);
+    }
+    return defaultAnalyticsService;
+}
+/**
+ * 获取默认分析服务
+ */ export function getAnalytics() {
+    if (!defaultAnalyticsService) {
+        return initAnalytics();
+    }
+    return defaultAnalyticsService;
+}
+
+//# sourceMappingURL=analytics.js.map

package/dist/utils/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/analytics.ts"],"sourcesContent":["import { logger } from './logger';\nimport { SecurityUtils } from './security';\n\n/**\n * 分析事件类型\n */\nexport type AnalyticsEventType = 'pageview' | 'click' | 'custom' | 'error' | 'performance';\n\n/**\n * 分析事件\n */\nexport interface AnalyticsEvent {\n  /**\n   * 事件类型\n   */\n  type: AnalyticsEventType;\n  /**\n   * 事件名称\n   */\n  name: string;\n  /**\n   * 事件属性\n   */\n  properties?: Record<string, unknown>;\n  /**\n   * 时间戳\n   */\n  timestamp?: number;\n}\n\n/**\n * 分析配置\n */\nexport interface AnalyticsConfig {\n  /**\n   * 是否启用分析\n   */\n  enabled?: boolean;\n  /**\n   * 采样率 (0-1)\n   */\n  sampleRate?: number;\n  /**\n   * 是否匿名化数据\n   */\n  anonymize?: boolean;\n  /**\n   * 事件上报回调\n   */\n  onEvent?: (event: AnalyticsEvent) => void;\n  /**\n   * 批量上报回调\n   */\n  onBatch?: (events: AnalyticsEvent[]) => void;\n  /**\n   * 批量上报大小\n   */\n  batchSize?: number;\n  /**\n   * 批量上报间隔（毫秒）\n   */\n  batchInterval?: number;\n}\n\n/**\n * 分析服务类\n */\nexport class AnalyticsService {\n  private config: Required<AnalyticsConfig>;\n  private eventQueue: AnalyticsEvent[] = [];\n  private batchTimer: ReturnType<typeof setInterval> | null = null;\n\n  constructor(config: AnalyticsConfig = {}) {\n    this.config = {\n      enabled: config.enabled ?? true,\n      sampleRate: config.sampleRate ?? 1.0,\n      anonymize: config.anonymize ?? true,\n      onEvent: config.onEvent ?? (() => {}),\n      onBatch: config.onBatch ?? (() => {}),\n      batchSize: config.batchSize ?? 10,\n      batchInterval: config.batchInterval ?? 5000,\n    };\n\n    if (this.config.enabled) {\n      this.startBatchTimer();\n    }\n  }\n\n  /**\n   * 启动批量上报定时器\n   */\n  private startBatchTimer(): void {\n    if (this.batchTimer) {\n      return;\n    }\n\n    this.batchTimer = setInterval(() => {\n      this.flush();\n    }, this.config.batchInterval);\n  }\n\n  /**\n   * 停止批量上报定时器\n   */\n  private stopBatchTimer(): void {\n    if (this.batchTimer) {\n      clearInterval(this.batchTimer);\n      this.batchTimer = null;\n    }\n  }\n\n  /**\n   * 记录事件\n   */\n  track(event: Omit<AnalyticsEvent, 'timestamp'>): void {\n    if (!this.config.enabled) {\n      return;\n    }\n\n    // 采样检查\n    if (Math.random() > this.config.sampleRate) {\n      return;\n    }\n\n    // 匿名化处理\n    const anonymizedEvent: AnalyticsEvent = {\n      ...event,\n      timestamp: Date.now(),\n      properties: this.anonymizeProperties(event.properties),\n    };\n\n    // 添加到队列\n    this.eventQueue.push(anonymizedEvent);\n\n    // 立即上报单个事件\n    if (this.config.onEvent) {\n      this.config.onEvent(anonymizedEvent);\n    }\n\n    // 检查是否需要批量上报\n    if (this.eventQueue.length >= this.config.batchSize) {\n      this.flush();\n    }\n  }\n\n  /**\n   * 记录页面浏览\n   */\n  trackPageView(page: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'pageview',\n      name: 'page_view',\n      properties: {\n        page,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录点击事件\n   */\n  trackClick(element: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'click',\n      name: 'click',\n      properties: {\n        element,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录自定义事件\n   */\n  trackCustom(name: string, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'custom',\n      name,\n      properties,\n    });\n  }\n\n  /**\n   * 记录错误事件\n   */\n  trackError(error: Error, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'error',\n      name: 'error',\n      properties: {\n        errorName: error.name,\n        errorMessage: error.message,\n        errorStack: error.stack,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 记录性能事件\n   */\n  trackPerformance(metrics: Record<string, number>, properties?: Record<string, unknown>): void {\n    this.track({\n      type: 'performance',\n      name: 'performance',\n      properties: {\n        ...metrics,\n        ...properties,\n      },\n    });\n  }\n\n  /**\n   * 匿名化属性（使用深度脱敏）\n   */\n  private anonymizeProperties(properties?: Record<string, unknown>): Record<string, unknown> | undefined {\n    if (!this.config.anonymize || !properties) {\n      return properties;\n    }\n\n    // 使用深度脱敏处理\n    return SecurityUtils.deepSanitize(properties) as Record<string, unknown>;\n  }\n\n  /**\n   * 刷新队列（批量上报）\n   */\n  flush(): void {\n    if (this.eventQueue.length === 0) {\n      return;\n    }\n\n    const events = [...this.eventQueue];\n    this.eventQueue = [];\n\n    if (this.config.onBatch) {\n      this.config.onBatch(events);\n    }\n\n    logger.debug(`分析服务批量上报 ${events.length} 个事件`);\n  }\n\n  /**\n   * 启用分析\n   */\n  enable(): void {\n    this.config.enabled = true;\n    this.startBatchTimer();\n  }\n\n  /**\n   * 禁用分析\n   */\n  disable(): void {\n    this.config.enabled = false;\n    this.stopBatchTimer();\n    this.flush();\n  }\n\n  /**\n   * 销毁服务\n   */\n  destroy(): void {\n    this.stopBatchTimer();\n    this.flush();\n  }\n}\n\n/**\n * 默认分析服务实例\n */\nlet defaultAnalyticsService: AnalyticsService | null = null;\n\n/**\n * 初始化默认分析服务\n */\nexport function initAnalytics(config?: AnalyticsConfig): AnalyticsService {\n  if (!defaultAnalyticsService) {\n    defaultAnalyticsService = new AnalyticsService(config);\n  }\n  return defaultAnalyticsService;\n}\n\n/**\n * 获取默认分析服务\n */\nexport function getAnalytics(): AnalyticsService {\n  if (!defaultAnalyticsService) {\n    return initAnalytics();\n  }\n  return defaultAnalyticsService;\n}\n"],"names":["logger","SecurityUtils","AnalyticsService","startBatchTimer","batchTimer","setInterval","flush","config","batchInterval","stopBatchTimer","clearInterval","track","event","enabled","Math","random","sampleRate","anonymizedEvent","timestamp","Date","now","properties","anonymizeProperties","eventQueue","push","onEvent","length","batchSize","trackPageView","page","type","name","trackClick","element","trackCustom","trackError","error","errorName","errorMessage","message","errorStack","stack","trackPerformance","metrics","anonymize","deepSanitize","events","onBatch","debug","enable","disable","destroy","defaultAnalyticsService","initAnalytics","getAnalytics"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,MAAM,QAAQ,WAAW;AAClC,SAASC,aAAa,QAAQ,aAAa;AA+D3C;;CAEC,GACD,OAAO,MAAMC;IAqBX;;GAEC,GACD,AAAQC,kBAAwB;QAC9B,IAAI,IAAI,CAACC,UAAU,EAAE;YACnB;QACF;QAEA,IAAI,CAACA,UAAU,GAAGC,YAAY;YAC5B,IAAI,CAACC,KAAK;QACZ,GAAG,IAAI,CAACC,MAAM,CAACC,aAAa;IAC9B;IAEA;;GAEC,GACD,AAAQC,iBAAuB;QAC7B,IAAI,IAAI,CAACL,UAAU,EAAE;YACnBM,cAAc,IAAI,CAACN,UAAU;YAC7B,IAAI,CAACA,UAAU,GAAG;QACpB;IACF;IAEA;;GAEC,GACDO,MAAMC,KAAwC,EAAQ;QACpD,IAAI,CAAC,IAAI,CAACL,MAAM,CAACM,OAAO,EAAE;YACxB;QACF;QAEA,OAAO;QACP,IAAIC,KAAKC,MAAM,KAAK,IAAI,CAACR,MAAM,CAACS,UAAU,EAAE;YAC1C;QACF;QAEA,QAAQ;QACR,MAAMC,kBAAkC;YACtC,GAAGL,KAAK;YACRM,WAAWC,KAAKC,GAAG;YACnBC,YAAY,IAAI,CAACC,mBAAmB,CAACV,MAAMS,UAAU;QACvD;QAEA,QAAQ;QACR,IAAI,CAACE,UAAU,CAACC,IAAI,CAACP;QAErB,WAAW;QACX,IAAI,IAAI,CAACV,MAAM,CAACkB,OAAO,EAAE;YACvB,IAAI,CAAClB,MAAM,CAACkB,OAAO,CAACR;QACtB;QAEA,aAAa;QACb,IAAI,IAAI,CAACM,UAAU,CAACG,MAAM,IAAI,IAAI,CAACnB,MAAM,CAACoB,SAAS,EAAE;YACnD,IAAI,CAACrB,KAAK;QACZ;IACF;IAEA;;GAEC,GACDsB,cAAcC,IAAY,EAAER,UAAoC,EAAQ;QACtE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVQ;gBACA,GAAGR,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDW,WAAWC,OAAe,EAAEZ,UAAoC,EAAQ;QACtE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVY;gBACA,GAAGZ,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDa,YAAYH,IAAY,EAAEV,UAAoC,EAAQ;QACpE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC;YACAV;QACF;IACF;IAEA;;GAEC,GACDc,WAAWC,KAAY,EAAEf,UAAoC,EAAQ;QACnE,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACVgB,WAAWD,MAAML,IAAI;gBACrBO,cAAcF,MAAMG,OAAO;gBAC3BC,YAAYJ,MAAMK,KAAK;gBACvB,GAAGpB,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACDqB,iBAAiBC,OAA+B,EAAEtB,UAAoC,EAAQ;QAC5F,IAAI,CAACV,KAAK,CAAC;YACTmB,MAAM;YACNC,MAAM;YACNV,YAAY;gBACV,GAAGsB,OAAO;gBACV,GAAGtB,UAAU;YACf;QACF;IACF;IAEA;;GAEC,GACD,AAAQC,oBAAoBD,UAAoC,EAAuC;QACrG,IAAI,CAAC,IAAI,CAACd,MAAM,CAACqC,SAAS,IAAI,CAACvB,YAAY;YACzC,OAAOA;QACT;QAEA,WAAW;QACX,OAAOpB,cAAc4C,YAAY,CAACxB;IACpC;IAEA;;GAEC,GACDf,QAAc;QACZ,IAAI,IAAI,CAACiB,UAAU,CAACG,MAAM,KAAK,GAAG;YAChC;QACF;QAEA,MAAMoB,SAAS;eAAI,IAAI,CAACvB,UAAU;SAAC;QACnC,IAAI,CAACA,UAAU,GAAG,EAAE;QAEpB,IAAI,IAAI,CAAChB,MAAM,CAACwC,OAAO,EAAE;YACvB,IAAI,CAACxC,MAAM,CAACwC,OAAO,CAACD;QACtB;QAEA9C,OAAOgD,KAAK,CAAC,CAAC,SAAS,EAAEF,OAAOpB,MAAM,CAAC,IAAI,CAAC;IAC9C;IAEA;;GAEC,GACDuB,SAAe;QACb,IAAI,CAAC1C,MAAM,CAACM,OAAO,GAAG;QACtB,IAAI,CAACV,eAAe;IACtB;IAEA;;GAEC,GACD+C,UAAgB;QACd,IAAI,CAAC3C,MAAM,CAACM,OAAO,GAAG;QACtB,IAAI,CAACJ,cAAc;QACnB,IAAI,CAACH,KAAK;IACZ;IAEA;;GAEC,GACD6C,UAAgB;QACd,IAAI,CAAC1C,cAAc;QACnB,IAAI,CAACH,KAAK;IACZ;IAnMA,YAAYC,SAA0B,CAAC,CAAC,CAAE;QAJ1C,uBAAQA,UAAR,KAAA;QACA,uBAAQgB,cAA+B,EAAE;QACzC,uBAAQnB,cAAoD;QAG1D,IAAI,CAACG,MAAM,GAAG;YACZM,SAASN,OAAOM,OAAO,IAAI;YAC3BG,YAAYT,OAAOS,UAAU,IAAI;YACjC4B,WAAWrC,OAAOqC,SAAS,IAAI;YAC/BnB,SAASlB,OAAOkB,OAAO,IAAK,CAAA,KAAO,CAAA;YACnCsB,SAASxC,OAAOwC,OAAO,IAAK,CAAA,KAAO,CAAA;YACnCpB,WAAWpB,OAAOoB,SAAS,IAAI;YAC/BnB,eAAeD,OAAOC,aAAa,IAAI;QACzC;QAEA,IAAI,IAAI,CAACD,MAAM,CAACM,OAAO,EAAE;YACvB,IAAI,CAACV,eAAe;QACtB;IACF;AAsLF;AAEA;;CAEC,GACD,IAAIiD,0BAAmD;AAEvD;;CAEC,GACD,OAAO,SAASC,cAAc9C,MAAwB;IACpD,IAAI,CAAC6C,yBAAyB;QAC5BA,0BAA0B,IAAIlD,iBAAiBK;IACjD;IACA,OAAO6C;AACT;AAEA;;CAEC,GACD,OAAO,SAASE;IACd,IAAI,CAACF,yBAAyB;QAC5B,OAAOC;IACT;IACA,OAAOD;AACT"}

package/dist/utils/configSecurity.cjs

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "ConfigSecurity", {
+    enumerable: true,
+    get: function() {
+        return ConfigSecurity;
+    }
+});
+const _errors = require("./errors");
+const _security = require("./security");
+const _validation = require("./validation");
+let ConfigSecurity = class ConfigSecurity {
+    /**
+   * 验证配置签名
+   */ static async verifySignature(config, signature, options) {
+        if (!options.enabled) {
+            return true;
+        }
+        if (!options.publicKey) {
+            throw new _errors.SecurityError('签名验证需要提供公钥');
+        }
+        if (!signature || signature.length === 0) {
+            throw new _errors.SecurityError('签名不能为空');
+        }
+        try {
+            // 使用 Web Crypto API 验证签名
+            if (typeof window === 'undefined' || !window.crypto || !window.crypto.subtle) {
+                throw new _errors.SecurityError('签名验证需要浏览器支持 Web Crypto API');
+            }
+            // 将配置转换为字符串（用于签名验证）
+            // 使用稳定的 JSON 序列化（按键排序）
+            const configString = JSON.stringify(config, Object.keys(config).sort());
+            const encoder = new TextEncoder();
+            const data = encoder.encode(configString);
+            // 将签名从 Base64 解码
+            const signatureBuffer = Uint8Array.from(atob(signature), (c)=>c.charCodeAt(0));
+            // 导入公钥（支持 PEM 格式）
+            const algorithm = options.algorithm || 'RSASSA-PKCS1-v1_5';
+            let publicKey;
+            try {
+                // 尝试导入 PEM 格式的公钥
+                const pemHeader = '-----BEGIN PUBLIC KEY-----';
+                const pemFooter = '-----END PUBLIC KEY-----';
+                let pemKey = options.publicKey;
+                if (!pemKey.includes(pemHeader)) {
+                    pemKey = `${pemHeader}\n${pemKey}\n${pemFooter}`;
+                }
+                // 将 PEM 转换为 ArrayBuffer
+                const pemContents = pemKey.replace(pemHeader, '').replace(pemFooter, '').replace(/\s/g, '');
+                const binaryDer = Uint8Array.from(atob(pemContents), (c)=>c.charCodeAt(0));
+                publicKey = await window.crypto.subtle.importKey('spki', binaryDer.buffer, {
+                    name: algorithm,
+                    hash: 'SHA-256'
+                }, false, [
+                    'verify'
+                ]);
+            } catch (importError) {
+                throw new _errors.SecurityError('公钥导入失败', importError instanceof Error ? importError : undefined);
+            }
+            // 验证签名
+            const isValid = await window.crypto.subtle.verify({
+                name: algorithm
+            }, publicKey, signatureBuffer, data);
+            return isValid;
+        } catch (error) {
+            if (error instanceof _errors.SecurityError) {
+                throw error;
+            }
+            throw new _errors.SecurityError('签名验证失败', error instanceof Error ? error : undefined);
+        }
+    }
+    /**
+   * 验证配置来源
+   */ static verifyOrigin(options) {
+        if (!options.allowedOrigins || options.allowedOrigins.length === 0) {
+            return true; // 如果没有配置白名单，允许所有来源
+        }
+        if (typeof window === 'undefined') {
+            return true; // 非浏览器环境，跳过验证
+        }
+        const currentOrigin = window.location.origin;
+        const referer = document.referrer;
+        // 验证当前来源
+        if (options.allowedOrigins.includes(currentOrigin)) {
+            return true;
+        }
+        // 验证 Referer
+        if (options.verifyReferer && referer) {
+            try {
+                const refererOrigin = new URL(referer).origin;
+                if (options.allowedOrigins.includes(refererOrigin)) {
+                    return true;
+                }
+            } catch  {
+            // Referer 解析失败
+            }
+        }
+        return false;
+    }
+    /**
+   * 验证配置白名单
+   */ static verifyWhitelist(config, options) {
+        const errors = [];
+        // 检查允许的键
+        if (options.allowedKeys && options.allowedKeys.length > 0) {
+            const configKeys = Object.keys(config);
+            const invalidKeys = configKeys.filter((key)=>!options.allowedKeys.includes(key));
+            if (invalidKeys.length > 0) {
+                errors.push(`配置包含不允许的键: ${invalidKeys.join(', ')}`);
+            }
+        }
+        // 检查禁止的键
+        if (options.forbiddenKeys && options.forbiddenKeys.length > 0) {
+            const configKeys = Object.keys(config);
+            const forbiddenFound = configKeys.filter((key)=>options.forbiddenKeys.includes(key));
+            if (forbiddenFound.length > 0) {
+                errors.push(`配置包含禁止的键: ${forbiddenFound.join(', ')}`);
+            }
+        }
+        // 验证配置值
+        if (options.valueSchema) {
+            const result = _validation.Validator.validateObject(options.valueSchema, config);
+            if (!result.valid) {
+                errors.push(...result.errors);
+            }
+        }
+        return {
+            valid: errors.length === 0,
+            errors
+        };
+    }
+    /**
+   * 清理配置中的危险内容
+   */ static sanitizeConfig(config) {
+        const sanitized = {};
+        for (const [key, value] of Object.entries(config)){
+            if (typeof value === 'string') {
+                // 检查是否包含危险内容
+                const validation = _security.SecurityUtils.validateInput(value);
+                if (validation.safe && validation.sanitized) {
+                    sanitized[key] = validation.sanitized;
+                } else {
+                    // 包含危险内容，跳过或记录警告
+                    console.warn(`配置项 ${key} 包含潜在危险内容，已跳过`);
+                }
+            } else if (value && typeof value === 'object' && !Array.isArray(value)) {
+                // 递归清理对象
+                sanitized[key] = this.sanitizeConfig(value);
+            } else {
+                sanitized[key] = value;
+            }
+        }
+        return sanitized;
+    }
+    /**
+   * 验证配置安全性
+   */ static async validateConfigSecurity(config, options) {
+        const errors = [];
+        // 验证来源
+        if (options.origin) {
+            const originValid = this.verifyOrigin(options.origin);
+            if (!originValid) {
+                errors.push('配置来源验证失败');
+            }
+        }
+        // 验证白名单
+        if (options.whitelist) {
+            const whitelistResult = this.verifyWhitelist(config, options.whitelist);
+            if (!whitelistResult.valid) {
+                errors.push(...whitelistResult.errors);
+            }
+        }
+        // 清理配置（已实现但暂不使用返回值）
+        // const sanitizedConfig = this.sanitizeConfig(config);
+        return {
+            valid: errors.length === 0,
+            errors
+        };
+    }
+};
+
+//# sourceMappingURL=configSecurity.js.map

package/dist/utils/configSecurity.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/configSecurity.ts"],"sourcesContent":["import { SecurityError } from './errors';\nimport { SecurityUtils } from './security';\nimport { Validator } from './validation';\nimport { z } from 'zod';\n\n/**\n * 配置签名验证选项\n */\nexport interface ConfigSignatureOptions {\n  /**\n   * 是否启用签名验证\n   */\n  enabled: boolean;\n  /**\n   * 公钥（用于验证签名）\n   */\n  publicKey?: string;\n  /**\n   * 签名算法\n   */\n  algorithm?: string;\n}\n\n/**\n * 配置来源验证选项\n */\nexport interface ConfigOriginOptions {\n  /**\n   * 允许的来源列表\n   */\n  allowedOrigins?: string[];\n  /**\n   * 是否验证 CORS\n   */\n  verifyCORS?: boolean;\n  /**\n   * 是否验证 Referer\n   */\n  verifyReferer?: boolean;\n}\n\n/**\n * 配置白名单选项\n */\nexport interface ConfigWhitelistOptions {\n  /**\n   * 允许的配置键列表\n   */\n  allowedKeys?: string[];\n  /**\n   * 禁止的配置键列表\n   */\n  forbiddenKeys?: string[];\n  /**\n   * 配置值验证 Schema\n   */\n  valueSchema?: z.ZodSchema;\n}\n\n/**\n * 配置安全选项\n */\nexport interface ConfigSecurityOptions {\n  /**\n   * 签名验证\n   */\n  signature?: ConfigSignatureOptions;\n  /**\n   * 来源验证\n   */\n  origin?: ConfigOriginOptions;\n  /**\n   * 白名单\n   */\n  whitelist?: ConfigWhitelistOptions;\n}\n\n/**\n * 配置安全工具类\n */\nexport class ConfigSecurity {\n  /**\n   * 验证配置签名\n   */\n  static async verifySignature(\n    config: Record<string, unknown>,\n    signature: string,\n    options: ConfigSignatureOptions\n  ): Promise<boolean> {\n    if (!options.enabled) {\n      return true;\n    }\n\n    if (!options.publicKey) {\n      throw new SecurityError('签名验证需要提供公钥');\n    }\n\n    if (!signature || signature.length === 0) {\n      throw new SecurityError('签名不能为空');\n    }\n\n    try {\n      // 使用 Web Crypto API 验证签名\n      if (typeof window === 'undefined' || !window.crypto || !window.crypto.subtle) {\n        throw new SecurityError('签名验证需要浏览器支持 Web Crypto API');\n      }\n\n      // 将配置转换为字符串（用于签名验证）\n      // 使用稳定的 JSON 序列化（按键排序）\n      const configString = JSON.stringify(config, Object.keys(config).sort());\n      const encoder = new TextEncoder();\n      const data = encoder.encode(configString);\n\n      // 将签名从 Base64 解码\n      const signatureBuffer = Uint8Array.from(atob(signature), (c) => c.charCodeAt(0));\n\n      // 导入公钥（支持 PEM 格式）\n      const algorithm = options.algorithm || 'RSASSA-PKCS1-v1_5';\n      let publicKey: CryptoKey;\n\n      try {\n        // 尝试导入 PEM 格式的公钥\n        const pemHeader = '-----BEGIN PUBLIC KEY-----';\n        const pemFooter = '-----END PUBLIC KEY-----';\n        let pemKey = options.publicKey;\n\n        if (!pemKey.includes(pemHeader)) {\n          pemKey = `${pemHeader}\\n${pemKey}\\n${pemFooter}`;\n        }\n\n        // 将 PEM 转换为 ArrayBuffer\n        const pemContents = pemKey\n          .replace(pemHeader, '')\n          .replace(pemFooter, '')\n          .replace(/\\s/g, '');\n        const binaryDer = Uint8Array.from(atob(pemContents), (c) => c.charCodeAt(0));\n\n        publicKey = await window.crypto.subtle.importKey(\n          'spki',\n          binaryDer.buffer,\n          {\n            name: algorithm,\n            hash: 'SHA-256',\n          },\n          false,\n          ['verify']\n        );\n      } catch (importError) {\n        throw new SecurityError('公钥导入失败', importError instanceof Error ? importError : undefined);\n      }\n\n      // 验证签名\n      const isValid = await window.crypto.subtle.verify(\n        {\n          name: algorithm,\n        },\n        publicKey,\n        signatureBuffer,\n        data\n      );\n\n      return isValid;\n    } catch (error) {\n      if (error instanceof SecurityError) {\n        throw error;\n      }\n      throw new SecurityError('签名验证失败', error instanceof Error ? error : undefined);\n    }\n  }\n\n  /**\n   * 验证配置来源\n   */\n  static verifyOrigin(options: ConfigOriginOptions): boolean {\n    if (!options.allowedOrigins || options.allowedOrigins.length === 0) {\n      return true; // 如果没有配置白名单，允许所有来源\n    }\n\n    if (typeof window === 'undefined') {\n      return true; // 非浏览器环境，跳过验证\n    }\n\n    const currentOrigin = window.location.origin;\n    const referer = document.referrer;\n\n    // 验证当前来源\n    if (options.allowedOrigins.includes(currentOrigin)) {\n      return true;\n    }\n\n    // 验证 Referer\n    if (options.verifyReferer && referer) {\n      try {\n        const refererOrigin = new URL(referer).origin;\n        if (options.allowedOrigins.includes(refererOrigin)) {\n          return true;\n        }\n      } catch {\n        // Referer 解析失败\n      }\n    }\n\n    return false;\n  }\n\n  /**\n   * 验证配置白名单\n   */\n  static verifyWhitelist(\n    config: Record<string, unknown>,\n    options: ConfigWhitelistOptions\n  ): {\n    valid: boolean;\n    errors: string[];\n  } {\n    const errors: string[] = [];\n\n    // 检查允许的键\n    if (options.allowedKeys && options.allowedKeys.length > 0) {\n      const configKeys = Object.keys(config);\n      const invalidKeys = configKeys.filter((key) => !options.allowedKeys!.includes(key));\n      if (invalidKeys.length > 0) {\n        errors.push(`配置包含不允许的键: ${invalidKeys.join(', ')}`);\n      }\n    }\n\n    // 检查禁止的键\n    if (options.forbiddenKeys && options.forbiddenKeys.length > 0) {\n      const configKeys = Object.keys(config);\n      const forbiddenFound = configKeys.filter((key) => options.forbiddenKeys!.includes(key));\n      if (forbiddenFound.length > 0) {\n        errors.push(`配置包含禁止的键: ${forbiddenFound.join(', ')}`);\n      }\n    }\n\n    // 验证配置值\n    if (options.valueSchema) {\n      const result = Validator.validateObject(options.valueSchema, config);\n      if (!result.valid) {\n        errors.push(...result.errors);\n      }\n    }\n\n    return {\n      valid: errors.length === 0,\n      errors,\n    };\n  }\n\n  /**\n   * 清理配置中的危险内容\n   */\n  static sanitizeConfig(config: Record<string, unknown>): Record<string, unknown> {\n    const sanitized: Record<string, unknown> = {};\n\n    for (const [key, value] of Object.entries(config)) {\n      if (typeof value === 'string') {\n        // 检查是否包含危险内容\n        const validation = SecurityUtils.validateInput(value);\n        if (validation.safe && validation.sanitized) {\n          sanitized[key] = validation.sanitized;\n        } else {\n          // 包含危险内容，跳过或记录警告\n          console.warn(`配置项 ${key} 包含潜在危险内容，已跳过`);\n        }\n      } else if (value && typeof value === 'object' && !Array.isArray(value)) {\n        // 递归清理对象\n        sanitized[key] = this.sanitizeConfig(value as Record<string, unknown>);\n      } else {\n        sanitized[key] = value;\n      }\n    }\n\n    return sanitized;\n  }\n\n  /**\n   * 验证配置安全性\n   */\n  static async validateConfigSecurity(\n    config: Record<string, unknown>,\n    options: ConfigSecurityOptions\n  ): Promise<{\n    valid: boolean;\n    errors: string[];\n  }> {\n    const errors: string[] = [];\n\n    // 验证来源\n    if (options.origin) {\n      const originValid = this.verifyOrigin(options.origin);\n      if (!originValid) {\n        errors.push('配置来源验证失败');\n      }\n    }\n\n    // 验证白名单\n    if (options.whitelist) {\n      const whitelistResult = this.verifyWhitelist(config, options.whitelist);\n      if (!whitelistResult.valid) {\n        errors.push(...whitelistResult.errors);\n      }\n    }\n\n    // 清理配置（已实现但暂不使用返回值）\n    // const sanitizedConfig = this.sanitizeConfig(config);\n\n    return {\n      valid: errors.length === 0,\n      errors,\n    };\n  }\n}\n"],"names":["ConfigSecurity","verifySignature","config","signature","options","enabled","publicKey","SecurityError","length","window","crypto","subtle","configString","JSON","stringify","Object","keys","sort","encoder","TextEncoder","data","encode","signatureBuffer","Uint8Array","from","atob","c","charCodeAt","algorithm","pemHeader","pemFooter","pemKey","includes","pemContents","replace","binaryDer","importKey","buffer","name","hash","importError","Error","undefined","isValid","verify","error","verifyOrigin","allowedOrigins","currentOrigin","location","origin","referer","document","referrer","verifyReferer","refererOrigin","URL","verifyWhitelist","errors","allowedKeys","configKeys","invalidKeys","filter","key","push","join","forbiddenKeys","forbiddenFound","valueSchema","result","Validator","validateObject","valid","sanitizeConfig","sanitized","value","entries","validation","SecurityUtils","validateInput","safe","console","warn","Array","isArray","validateConfigSecurity","originValid","whitelist","whitelistResult"],"mappings":";;;;+BAgFaA;;;eAAAA;;;wBAhFiB;0BACA;4BACJ;AA8EnB,IAAA,AAAMA,iBAAN,MAAMA;IACX;;GAEC,GACD,aAAaC,gBACXC,MAA+B,EAC/BC,SAAiB,EACjBC,OAA+B,EACb;QAClB,IAAI,CAACA,QAAQC,OAAO,EAAE;YACpB,OAAO;QACT;QAEA,IAAI,CAACD,QAAQE,SAAS,EAAE;YACtB,MAAM,IAAIC,qBAAa,CAAC;QAC1B;QAEA,IAAI,CAACJ,aAAaA,UAAUK,MAAM,KAAK,GAAG;YACxC,MAAM,IAAID,qBAAa,CAAC;QAC1B;QAEA,IAAI;YACF,yBAAyB;YACzB,IAAI,OAAOE,WAAW,eAAe,CAACA,OAAOC,MAAM,IAAI,CAACD,OAAOC,MAAM,CAACC,MAAM,EAAE;gBAC5E,MAAM,IAAIJ,qBAAa,CAAC;YAC1B;YAEA,oBAAoB;YACpB,uBAAuB;YACvB,MAAMK,eAAeC,KAAKC,SAAS,CAACZ,QAAQa,OAAOC,IAAI,CAACd,QAAQe,IAAI;YACpE,MAAMC,UAAU,IAAIC;YACpB,MAAMC,OAAOF,QAAQG,MAAM,CAACT;YAE5B,iBAAiB;YACjB,MAAMU,kBAAkBC,WAAWC,IAAI,CAACC,KAAKtB,YAAY,CAACuB,IAAMA,EAAEC,UAAU,CAAC;YAE7E,kBAAkB;YAClB,MAAMC,YAAYxB,QAAQwB,SAAS,IAAI;YACvC,IAAItB;YAEJ,IAAI;gBACF,iBAAiB;gBACjB,MAAMuB,YAAY;gBAClB,MAAMC,YAAY;gBAClB,IAAIC,SAAS3B,QAAQE,SAAS;gBAE9B,IAAI,CAACyB,OAAOC,QAAQ,CAACH,YAAY;oBAC/BE,SAAS,GAAGF,UAAU,EAAE,EAAEE,OAAO,EAAE,EAAED,WAAW;gBAClD;gBAEA,wBAAwB;gBACxB,MAAMG,cAAcF,OACjBG,OAAO,CAACL,WAAW,IACnBK,OAAO,CAACJ,WAAW,IACnBI,OAAO,CAAC,OAAO;gBAClB,MAAMC,YAAYZ,WAAWC,IAAI,CAACC,KAAKQ,cAAc,CAACP,IAAMA,EAAEC,UAAU,CAAC;gBAEzErB,YAAY,MAAMG,OAAOC,MAAM,CAACC,MAAM,CAACyB,SAAS,CAC9C,QACAD,UAAUE,MAAM,EAChB;oBACEC,MAAMV;oBACNW,MAAM;gBACR,GACA,OACA;oBAAC;iBAAS;YAEd,EAAE,OAAOC,aAAa;gBACpB,MAAM,IAAIjC,qBAAa,CAAC,UAAUiC,uBAAuBC,QAAQD,cAAcE;YACjF;YAEA,OAAO;YACP,MAAMC,UAAU,MAAMlC,OAAOC,MAAM,CAACC,MAAM,CAACiC,MAAM,CAC/C;gBACEN,MAAMV;YACR,GACAtB,WACAgB,iBACAF;YAGF,OAAOuB;QACT,EAAE,OAAOE,OAAO;YACd,IAAIA,iBAAiBtC,qBAAa,EAAE;gBAClC,MAAMsC;YACR;YACA,MAAM,IAAItC,qBAAa,CAAC,UAAUsC,iBAAiBJ,QAAQI,QAAQH;QACrE;IACF;IAEA;;GAEC,GACD,OAAOI,aAAa1C,OAA4B,EAAW;QACzD,IAAI,CAACA,QAAQ2C,cAAc,IAAI3C,QAAQ2C,cAAc,CAACvC,MAAM,KAAK,GAAG;YAClE,OAAO,MAAM,mBAAmB;QAClC;QAEA,IAAI,OAAOC,WAAW,aAAa;YACjC,OAAO,MAAM,cAAc;QAC7B;QAEA,MAAMuC,gBAAgBvC,OAAOwC,QAAQ,CAACC,MAAM;QAC5C,MAAMC,UAAUC,SAASC,QAAQ;QAEjC,SAAS;QACT,IAAIjD,QAAQ2C,cAAc,CAACf,QAAQ,CAACgB,gBAAgB;YAClD,OAAO;QACT;QAEA,aAAa;QACb,IAAI5C,QAAQkD,aAAa,IAAIH,SAAS;YACpC,IAAI;gBACF,MAAMI,gBAAgB,IAAIC,IAAIL,SAASD,MAAM;gBAC7C,IAAI9C,QAAQ2C,cAAc,CAACf,QAAQ,CAACuB,gBAAgB;oBAClD,OAAO;gBACT;YACF,EAAE,OAAM;YACN,eAAe;YACjB;QACF;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,OAAOE,gBACLvD,MAA+B,EAC/BE,OAA+B,EAI/B;QACA,MAAMsD,SAAmB,EAAE;QAE3B,SAAS;QACT,IAAItD,QAAQuD,WAAW,IAAIvD,QAAQuD,WAAW,CAACnD,MAAM,GAAG,GAAG;YACzD,MAAMoD,aAAa7C,OAAOC,IAAI,CAACd;YAC/B,MAAM2D,cAAcD,WAAWE,MAAM,CAAC,CAACC,MAAQ,CAAC3D,QAAQuD,WAAW,CAAE3B,QAAQ,CAAC+B;YAC9E,IAAIF,YAAYrD,MAAM,GAAG,GAAG;gBAC1BkD,OAAOM,IAAI,CAAC,CAAC,WAAW,EAAEH,YAAYI,IAAI,CAAC,OAAO;YACpD;QACF;QAEA,SAAS;QACT,IAAI7D,QAAQ8D,aAAa,IAAI9D,QAAQ8D,aAAa,CAAC1D,MAAM,GAAG,GAAG;YAC7D,MAAMoD,aAAa7C,OAAOC,IAAI,CAACd;YAC/B,MAAMiE,iBAAiBP,WAAWE,MAAM,CAAC,CAACC,MAAQ3D,QAAQ8D,aAAa,CAAElC,QAAQ,CAAC+B;YAClF,IAAII,eAAe3D,MAAM,GAAG,GAAG;gBAC7BkD,OAAOM,IAAI,CAAC,CAAC,UAAU,EAAEG,eAAeF,IAAI,CAAC,OAAO;YACtD;QACF;QAEA,QAAQ;QACR,IAAI7D,QAAQgE,WAAW,EAAE;YACvB,MAAMC,SAASC,qBAAS,CAACC,cAAc,CAACnE,QAAQgE,WAAW,EAAElE;YAC7D,IAAI,CAACmE,OAAOG,KAAK,EAAE;gBACjBd,OAAOM,IAAI,IAAIK,OAAOX,MAAM;YAC9B;QACF;QAEA,OAAO;YACLc,OAAOd,OAAOlD,MAAM,KAAK;YACzBkD;QACF;IACF;IAEA;;GAEC,GACD,OAAOe,eAAevE,MAA+B,EAA2B;QAC9E,MAAMwE,YAAqC,CAAC;QAE5C,KAAK,MAAM,CAACX,KAAKY,MAAM,IAAI5D,OAAO6D,OAAO,CAAC1E,QAAS;YACjD,IAAI,OAAOyE,UAAU,UAAU;gBAC7B,aAAa;gBACb,MAAME,aAAaC,uBAAa,CAACC,aAAa,CAACJ;gBAC/C,IAAIE,WAAWG,IAAI,IAAIH,WAAWH,SAAS,EAAE;oBAC3CA,SAAS,CAACX,IAAI,GAAGc,WAAWH,SAAS;gBACvC,OAAO;oBACL,iBAAiB;oBACjBO,QAAQC,IAAI,CAAC,CAAC,IAAI,EAAEnB,IAAI,aAAa,CAAC;gBACxC;YACF,OAAO,IAAIY,SAAS,OAAOA,UAAU,YAAY,CAACQ,MAAMC,OAAO,CAACT,QAAQ;gBACtE,SAAS;gBACTD,SAAS,CAACX,IAAI,GAAG,IAAI,CAACU,cAAc,CAACE;YACvC,OAAO;gBACLD,SAAS,CAACX,IAAI,GAAGY;YACnB;QACF;QAEA,OAAOD;IACT;IAEA;;GAEC,GACD,aAAaW,uBACXnF,MAA+B,EAC/BE,OAA8B,EAI7B;QACD,MAAMsD,SAAmB,EAAE;QAE3B,OAAO;QACP,IAAItD,QAAQ8C,MAAM,EAAE;YAClB,MAAMoC,cAAc,IAAI,CAACxC,YAAY,CAAC1C,QAAQ8C,MAAM;YACpD,IAAI,CAACoC,aAAa;gBAChB5B,OAAOM,IAAI,CAAC;YACd;QACF;QAEA,QAAQ;QACR,IAAI5D,QAAQmF,SAAS,EAAE;YACrB,MAAMC,kBAAkB,IAAI,CAAC/B,eAAe,CAACvD,QAAQE,QAAQmF,SAAS;YACtE,IAAI,CAACC,gBAAgBhB,KAAK,EAAE;gBAC1Bd,OAAOM,IAAI,IAAIwB,gBAAgB9B,MAAM;YACvC;QACF;QAEA,oBAAoB;QACpB,uDAAuD;QAEvD,OAAO;YACLc,OAAOd,OAAOlD,MAAM,KAAK;YACzBkD;QACF;IACF;AACF"}