@vlian/framework 1.2.57 → 1.2.60

package/dist/types.cjs

@@ -1,6 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-
-//# sourceMappingURL=types.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});

package/dist/types.js

@@ -1,3 +1 @@
-export { };
-
-//# sourceMappingURL=types.js.map
+export{};

package/dist/utils/analytics.cjs

@@ -1,219 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get AnalyticsService () {
-        return AnalyticsService;
-    },
-    get getAnalytics () {
-        return getAnalytics;
-    },
-    get initAnalytics () {
-        return initAnalytics;
-    }
-});
-const _logger = require("./logger");
-const _security = require("./security");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-let AnalyticsService = class AnalyticsService {
-    /**
-   * 启动批量上报定时器
-   */ startBatchTimer() {
-        if (this.batchTimer) {
-            return;
-        }
-        this.batchTimer = setInterval(()=>{
-            this.flush();
-        }, this.config.batchInterval);
-    }
-    /**
-   * 停止批量上报定时器
-   */ stopBatchTimer() {
-        if (this.batchTimer) {
-            clearInterval(this.batchTimer);
-            this.batchTimer = null;
-        }
-    }
-    /**
-   * 记录事件
-   */ track(event) {
-        if (!this.config.enabled) {
-            return;
-        }
-        // 采样检查
-        if (Math.random() > this.config.sampleRate) {
-            return;
-        }
-        // 匿名化处理
-        const anonymizedEvent = {
-            ...event,
-            timestamp: Date.now(),
-            properties: this.anonymizeProperties(event.properties)
-        };
-        // 添加到队列
-        this.eventQueue.push(anonymizedEvent);
-        // 立即上报单个事件
-        if (this.config.onEvent) {
-            this.config.onEvent(anonymizedEvent);
-        }
-        // 检查是否需要批量上报
-        if (this.eventQueue.length >= this.config.batchSize) {
-            this.flush();
-        }
-    }
-    /**
-   * 记录页面浏览
-   */ trackPageView(page, properties) {
-        this.track({
-            type: 'pageview',
-            name: 'page_view',
-            properties: {
-                page,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录点击事件
-   */ trackClick(element, properties) {
-        this.track({
-            type: 'click',
-            name: 'click',
-            properties: {
-                element,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录自定义事件
-   */ trackCustom(name, properties) {
-        this.track({
-            type: 'custom',
-            name,
-            properties
-        });
-    }
-    /**
-   * 记录错误事件
-   */ trackError(error, properties) {
-        this.track({
-            type: 'error',
-            name: 'error',
-            properties: {
-                errorName: error.name,
-                errorMessage: error.message,
-                errorStack: error.stack,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录性能事件
-   */ trackPerformance(metrics, properties) {
-        this.track({
-            type: 'performance',
-            name: 'performance',
-            properties: {
-                ...metrics,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 匿名化属性（使用深度脱敏）
-   */ anonymizeProperties(properties) {
-        if (!this.config.anonymize || !properties) {
-            return properties;
-        }
-        // 使用深度脱敏处理
-        return _security.SecurityUtils.deepSanitize(properties);
-    }
-    /**
-   * 刷新队列（批量上报）
-   */ flush() {
-        if (this.eventQueue.length === 0) {
-            return;
-        }
-        const events = [
-            ...this.eventQueue
-        ];
-        this.eventQueue = [];
-        if (this.config.onBatch) {
-            this.config.onBatch(events);
-        }
-        _logger.logger.debug(`分析服务批量上报 ${events.length} 个事件`);
-    }
-    /**
-   * 启用分析
-   */ enable() {
-        this.config.enabled = true;
-        this.startBatchTimer();
-    }
-    /**
-   * 禁用分析
-   */ disable() {
-        this.config.enabled = false;
-        this.stopBatchTimer();
-        this.flush();
-    }
-    /**
-   * 销毁服务
-   */ destroy() {
-        this.stopBatchTimer();
-        this.flush();
-    }
-    constructor(config = {}){
-        _define_property(this, "config", void 0);
-        _define_property(this, "eventQueue", []);
-        _define_property(this, "batchTimer", null);
-        this.config = {
-            enabled: config.enabled ?? true,
-            sampleRate: config.sampleRate ?? 1.0,
-            anonymize: config.anonymize ?? true,
-            onEvent: config.onEvent ?? (()=>{}),
-            onBatch: config.onBatch ?? (()=>{}),
-            batchSize: config.batchSize ?? 10,
-            batchInterval: config.batchInterval ?? 5000
-        };
-        if (this.config.enabled) {
-            this.startBatchTimer();
-        }
-    }
-};
-/**
- * 默认分析服务实例
- */ let defaultAnalyticsService = null;
-function initAnalytics(config) {
-    if (!defaultAnalyticsService) {
-        defaultAnalyticsService = new AnalyticsService(config);
-    }
-    return defaultAnalyticsService;
-}
-function getAnalytics() {
-    if (!defaultAnalyticsService) {
-        return initAnalytics();
-    }
-    return defaultAnalyticsService;
-}
-
-//# sourceMappingURL=analytics.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});function _export(target,all){for(var name in all)Object.defineProperty(target,name,{enumerable:true,get:Object.getOwnPropertyDescriptor(all,name).get})}_export(exports,{get AnalyticsService(){return AnalyticsService},get getAnalytics(){return getAnalytics},get initAnalytics(){return initAnalytics}});const _logger=require("./logger");const _security=require("./security");function _define_property(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{obj[key]=value}return obj}let AnalyticsService=class AnalyticsService{startBatchTimer(){if(this.batchTimer){return}this.batchTimer=setInterval(()=>{this.flush()},this.config.batchInterval)}stopBatchTimer(){if(this.batchTimer){clearInterval(this.batchTimer);this.batchTimer=null}}track(event){if(!this.config.enabled){return}if(Math.random()>this.config.sampleRate){return}const anonymizedEvent={...event,timestamp:Date.now(),properties:this.anonymizeProperties(event.properties)};this.eventQueue.push(anonymizedEvent);if(this.config.onEvent){this.config.onEvent(anonymizedEvent)}if(this.eventQueue.length>=this.config.batchSize){this.flush()}}trackPageView(page,properties){this.track({type:"pageview",name:"page_view",properties:{page,...properties}})}trackClick(element,properties){this.track({type:"click",name:"click",properties:{element,...properties}})}trackCustom(name,properties){this.track({type:"custom",name,properties})}trackError(error,properties){this.track({type:"error",name:"error",properties:{errorName:error.name,errorMessage:error.message,errorStack:error.stack,...properties}})}trackPerformance(metrics,properties){this.track({type:"performance",name:"performance",properties:{...metrics,...properties}})}anonymizeProperties(properties){if(!this.config.anonymize||!properties){return properties}return _security.SecurityUtils.deepSanitize(properties)}flush(){if(this.eventQueue.length===0){return}const events=[...this.eventQueue];this.eventQueue=[];if(this.config.onBatch){this.config.onBatch(events)}_logger.logger.debug(`分析服务批量上报 ${events.length} 个事件`)}enable(){this.config.enabled=true;this.startBatchTimer()}disable(){this.config.enabled=false;this.stopBatchTimer();this.flush()}destroy(){this.stopBatchTimer();this.flush()}constructor(config={}){_define_property(this,"config",void 0);_define_property(this,"eventQueue",[]);_define_property(this,"batchTimer",null);this.config={enabled:config.enabled??true,sampleRate:config.sampleRate??1,anonymize:config.anonymize??true,onEvent:config.onEvent??(()=>{}),onBatch:config.onBatch??(()=>{}),batchSize:config.batchSize??10,batchInterval:config.batchInterval??5e3};if(this.config.enabled){this.startBatchTimer()}}};let defaultAnalyticsService=null;function initAnalytics(config){if(!defaultAnalyticsService){defaultAnalyticsService=new AnalyticsService(config)}return defaultAnalyticsService}function getAnalytics(){if(!defaultAnalyticsService){return initAnalytics()}return defaultAnalyticsService}

package/dist/utils/analytics.js

@@ -1,204 +1 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-import { logger } from "./logger";
-import { SecurityUtils } from "./security";
-/**
- * 分析服务类
- */ export class AnalyticsService {
-    /**
-   * 启动批量上报定时器
-   */ startBatchTimer() {
-        if (this.batchTimer) {
-            return;
-        }
-        this.batchTimer = setInterval(()=>{
-            this.flush();
-        }, this.config.batchInterval);
-    }
-    /**
-   * 停止批量上报定时器
-   */ stopBatchTimer() {
-        if (this.batchTimer) {
-            clearInterval(this.batchTimer);
-            this.batchTimer = null;
-        }
-    }
-    /**
-   * 记录事件
-   */ track(event) {
-        if (!this.config.enabled) {
-            return;
-        }
-        // 采样检查
-        if (Math.random() > this.config.sampleRate) {
-            return;
-        }
-        // 匿名化处理
-        const anonymizedEvent = {
-            ...event,
-            timestamp: Date.now(),
-            properties: this.anonymizeProperties(event.properties)
-        };
-        // 添加到队列
-        this.eventQueue.push(anonymizedEvent);
-        // 立即上报单个事件
-        if (this.config.onEvent) {
-            this.config.onEvent(anonymizedEvent);
-        }
-        // 检查是否需要批量上报
-        if (this.eventQueue.length >= this.config.batchSize) {
-            this.flush();
-        }
-    }
-    /**
-   * 记录页面浏览
-   */ trackPageView(page, properties) {
-        this.track({
-            type: 'pageview',
-            name: 'page_view',
-            properties: {
-                page,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录点击事件
-   */ trackClick(element, properties) {
-        this.track({
-            type: 'click',
-            name: 'click',
-            properties: {
-                element,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录自定义事件
-   */ trackCustom(name, properties) {
-        this.track({
-            type: 'custom',
-            name,
-            properties
-        });
-    }
-    /**
-   * 记录错误事件
-   */ trackError(error, properties) {
-        this.track({
-            type: 'error',
-            name: 'error',
-            properties: {
-                errorName: error.name,
-                errorMessage: error.message,
-                errorStack: error.stack,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 记录性能事件
-   */ trackPerformance(metrics, properties) {
-        this.track({
-            type: 'performance',
-            name: 'performance',
-            properties: {
-                ...metrics,
-                ...properties
-            }
-        });
-    }
-    /**
-   * 匿名化属性（使用深度脱敏）
-   */ anonymizeProperties(properties) {
-        if (!this.config.anonymize || !properties) {
-            return properties;
-        }
-        // 使用深度脱敏处理
-        return SecurityUtils.deepSanitize(properties);
-    }
-    /**
-   * 刷新队列（批量上报）
-   */ flush() {
-        if (this.eventQueue.length === 0) {
-            return;
-        }
-        const events = [
-            ...this.eventQueue
-        ];
-        this.eventQueue = [];
-        if (this.config.onBatch) {
-            this.config.onBatch(events);
-        }
-        logger.debug(`分析服务批量上报 ${events.length} 个事件`);
-    }
-    /**
-   * 启用分析
-   */ enable() {
-        this.config.enabled = true;
-        this.startBatchTimer();
-    }
-    /**
-   * 禁用分析
-   */ disable() {
-        this.config.enabled = false;
-        this.stopBatchTimer();
-        this.flush();
-    }
-    /**
-   * 销毁服务
-   */ destroy() {
-        this.stopBatchTimer();
-        this.flush();
-    }
-    constructor(config = {}){
-        _define_property(this, "config", void 0);
-        _define_property(this, "eventQueue", []);
-        _define_property(this, "batchTimer", null);
-        this.config = {
-            enabled: config.enabled ?? true,
-            sampleRate: config.sampleRate ?? 1.0,
-            anonymize: config.anonymize ?? true,
-            onEvent: config.onEvent ?? (()=>{}),
-            onBatch: config.onBatch ?? (()=>{}),
-            batchSize: config.batchSize ?? 10,
-            batchInterval: config.batchInterval ?? 5000
-        };
-        if (this.config.enabled) {
-            this.startBatchTimer();
-        }
-    }
-}
-/**
- * 默认分析服务实例
- */ let defaultAnalyticsService = null;
-/**
- * 初始化默认分析服务
- */ export function initAnalytics(config) {
-    if (!defaultAnalyticsService) {
-        defaultAnalyticsService = new AnalyticsService(config);
-    }
-    return defaultAnalyticsService;
-}
-/**
- * 获取默认分析服务
- */ export function getAnalytics() {
-    if (!defaultAnalyticsService) {
-        return initAnalytics();
-    }
-    return defaultAnalyticsService;
-}
-
-//# sourceMappingURL=analytics.js.map
+function _define_property(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{obj[key]=value}return obj}import{logger}from"./logger";import{SecurityUtils}from"./security";export class AnalyticsService{startBatchTimer(){if(this.batchTimer){return}this.batchTimer=setInterval(()=>{this.flush()},this.config.batchInterval)}stopBatchTimer(){if(this.batchTimer){clearInterval(this.batchTimer);this.batchTimer=null}}track(event){if(!this.config.enabled){return}if(Math.random()>this.config.sampleRate){return}const anonymizedEvent={...event,timestamp:Date.now(),properties:this.anonymizeProperties(event.properties)};this.eventQueue.push(anonymizedEvent);if(this.config.onEvent){this.config.onEvent(anonymizedEvent)}if(this.eventQueue.length>=this.config.batchSize){this.flush()}}trackPageView(page,properties){this.track({type:"pageview",name:"page_view",properties:{page,...properties}})}trackClick(element,properties){this.track({type:"click",name:"click",properties:{element,...properties}})}trackCustom(name,properties){this.track({type:"custom",name,properties})}trackError(error,properties){this.track({type:"error",name:"error",properties:{errorName:error.name,errorMessage:error.message,errorStack:error.stack,...properties}})}trackPerformance(metrics,properties){this.track({type:"performance",name:"performance",properties:{...metrics,...properties}})}anonymizeProperties(properties){if(!this.config.anonymize||!properties){return properties}return SecurityUtils.deepSanitize(properties)}flush(){if(this.eventQueue.length===0){return}const events=[...this.eventQueue];this.eventQueue=[];if(this.config.onBatch){this.config.onBatch(events)}logger.debug(`分析服务批量上报 ${events.length} 个事件`)}enable(){this.config.enabled=true;this.startBatchTimer()}disable(){this.config.enabled=false;this.stopBatchTimer();this.flush()}destroy(){this.stopBatchTimer();this.flush()}constructor(config={}){_define_property(this,"config",void 0);_define_property(this,"eventQueue",[]);_define_property(this,"batchTimer",null);this.config={enabled:config.enabled??true,sampleRate:config.sampleRate??1,anonymize:config.anonymize??true,onEvent:config.onEvent??(()=>{}),onBatch:config.onBatch??(()=>{}),batchSize:config.batchSize??10,batchInterval:config.batchInterval??5e3};if(this.config.enabled){this.startBatchTimer()}}}let defaultAnalyticsService=null;export function initAnalytics(config){if(!defaultAnalyticsService){defaultAnalyticsService=new AnalyticsService(config)}return defaultAnalyticsService}export function getAnalytics(){if(!defaultAnalyticsService){return initAnalytics()}return defaultAnalyticsService}

package/dist/utils/configSecurity.cjs

@@ -1,184 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "ConfigSecurity", {
-    enumerable: true,
-    get: function() {
-        return ConfigSecurity;
-    }
-});
-const _errors = require("./errors");
-const _security = require("./security");
-const _validation = require("./validation");
-let ConfigSecurity = class ConfigSecurity {
-    /**
-   * 验证配置签名
-   */ static async verifySignature(config, signature, options) {
-        if (!options.enabled) {
-            return true;
-        }
-        if (!options.publicKey) {
-            throw new _errors.SecurityError('签名验证需要提供公钥');
-        }
-        if (!signature || signature.length === 0) {
-            throw new _errors.SecurityError('签名不能为空');
-        }
-        try {
-            // 使用 Web Crypto API 验证签名
-            if (typeof window === 'undefined' || !window.crypto || !window.crypto.subtle) {
-                throw new _errors.SecurityError('签名验证需要浏览器支持 Web Crypto API');
-            }
-            // 将配置转换为字符串（用于签名验证）
-            // 使用稳定的 JSON 序列化（按键排序）
-            const configString = JSON.stringify(config, Object.keys(config).sort());
-            const encoder = new TextEncoder();
-            const data = encoder.encode(configString);
-            // 将签名从 Base64 解码
-            const signatureBuffer = Uint8Array.from(atob(signature), (c)=>c.charCodeAt(0));
-            // 导入公钥（支持 PEM 格式）
-            const algorithm = options.algorithm || 'RSASSA-PKCS1-v1_5';
-            let publicKey;
-            try {
-                // 尝试导入 PEM 格式的公钥
-                const pemHeader = '-----BEGIN PUBLIC KEY-----';
-                const pemFooter = '-----END PUBLIC KEY-----';
-                let pemKey = options.publicKey;
-                if (!pemKey.includes(pemHeader)) {
-                    pemKey = `${pemHeader}\n${pemKey}\n${pemFooter}`;
-                }
-                // 将 PEM 转换为 ArrayBuffer
-                const pemContents = pemKey.replace(pemHeader, '').replace(pemFooter, '').replace(/\s/g, '');
-                const binaryDer = Uint8Array.from(atob(pemContents), (c)=>c.charCodeAt(0));
-                publicKey = await window.crypto.subtle.importKey('spki', binaryDer.buffer, {
-                    name: algorithm,
-                    hash: 'SHA-256'
-                }, false, [
-                    'verify'
-                ]);
-            } catch (importError) {
-                throw new _errors.SecurityError('公钥导入失败', importError instanceof Error ? importError : undefined);
-            }
-            // 验证签名
-            const isValid = await window.crypto.subtle.verify({
-                name: algorithm
-            }, publicKey, signatureBuffer, data);
-            return isValid;
-        } catch (error) {
-            if (error instanceof _errors.SecurityError) {
-                throw error;
-            }
-            throw new _errors.SecurityError('签名验证失败', error instanceof Error ? error : undefined);
-        }
-    }
-    /**
-   * 验证配置来源
-   */ static verifyOrigin(options) {
-        if (!options.allowedOrigins || options.allowedOrigins.length === 0) {
-            return true; // 如果没有配置白名单，允许所有来源
-        }
-        if (typeof window === 'undefined') {
-            return true; // 非浏览器环境，跳过验证
-        }
-        const currentOrigin = window.location.origin;
-        const referer = document.referrer;
-        // 验证当前来源
-        if (options.allowedOrigins.includes(currentOrigin)) {
-            return true;
-        }
-        // 验证 Referer
-        if (options.verifyReferer && referer) {
-            try {
-                const refererOrigin = new URL(referer).origin;
-                if (options.allowedOrigins.includes(refererOrigin)) {
-                    return true;
-                }
-            } catch  {
-            // Referer 解析失败
-            }
-        }
-        return false;
-    }
-    /**
-   * 验证配置白名单
-   */ static verifyWhitelist(config, options) {
-        const errors = [];
-        // 检查允许的键
-        if (options.allowedKeys && options.allowedKeys.length > 0) {
-            const configKeys = Object.keys(config);
-            const invalidKeys = configKeys.filter((key)=>!options.allowedKeys.includes(key));
-            if (invalidKeys.length > 0) {
-                errors.push(`配置包含不允许的键: ${invalidKeys.join(', ')}`);
-            }
-        }
-        // 检查禁止的键
-        if (options.forbiddenKeys && options.forbiddenKeys.length > 0) {
-            const configKeys = Object.keys(config);
-            const forbiddenFound = configKeys.filter((key)=>options.forbiddenKeys.includes(key));
-            if (forbiddenFound.length > 0) {
-                errors.push(`配置包含禁止的键: ${forbiddenFound.join(', ')}`);
-            }
-        }
-        // 验证配置值
-        if (options.valueSchema) {
-            const result = _validation.Validator.validateObject(options.valueSchema, config);
-            if (!result.valid) {
-                errors.push(...result.errors);
-            }
-        }
-        return {
-            valid: errors.length === 0,
-            errors
-        };
-    }
-    /**
-   * 清理配置中的危险内容
-   */ static sanitizeConfig(config) {
-        const sanitized = {};
-        for (const [key, value] of Object.entries(config)){
-            if (typeof value === 'string') {
-                // 检查是否包含危险内容
-                const validation = _security.SecurityUtils.validateInput(value);
-                if (validation.safe && validation.sanitized) {
-                    sanitized[key] = validation.sanitized;
-                } else {
-                    // 包含危险内容，跳过或记录警告
-                    console.warn(`配置项 ${key} 包含潜在危险内容，已跳过`);
-                }
-            } else if (value && typeof value === 'object' && !Array.isArray(value)) {
-                // 递归清理对象
-                sanitized[key] = this.sanitizeConfig(value);
-            } else {
-                sanitized[key] = value;
-            }
-        }
-        return sanitized;
-    }
-    /**
-   * 验证配置安全性
-   */ static async validateConfigSecurity(config, options) {
-        const errors = [];
-        // 验证来源
-        if (options.origin) {
-            const originValid = this.verifyOrigin(options.origin);
-            if (!originValid) {
-                errors.push('配置来源验证失败');
-            }
-        }
-        // 验证白名单
-        if (options.whitelist) {
-            const whitelistResult = this.verifyWhitelist(config, options.whitelist);
-            if (!whitelistResult.valid) {
-                errors.push(...whitelistResult.errors);
-            }
-        }
-        // 清理配置（已实现但暂不使用返回值）
-        // const sanitizedConfig = this.sanitizeConfig(config);
-        return {
-            valid: errors.length === 0,
-            errors
-        };
-    }
-};
-
-//# sourceMappingURL=configSecurity.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});Object.defineProperty(exports,"ConfigSecurity",{enumerable:true,get:function(){return ConfigSecurity}});const _errors=require("./errors");const _security=require("./security");const _validation=require("./validation");let ConfigSecurity=class ConfigSecurity{static async verifySignature(config,signature,options){if(!options.enabled){return true}if(!options.publicKey){throw new _errors.SecurityError("签名验证需要提供公钥")}if(!signature||signature.length===0){throw new _errors.SecurityError("签名不能为空")}try{if(typeof window==="undefined"||!window.crypto||!window.crypto.subtle){throw new _errors.SecurityError("签名验证需要浏览器支持 Web Crypto API")}const configString=JSON.stringify(config,Object.keys(config).sort());const encoder=new TextEncoder;const data=encoder.encode(configString);const signatureBuffer=Uint8Array.from(atob(signature),c=>c.charCodeAt(0));const algorithm=options.algorithm||"RSASSA-PKCS1-v1_5";let publicKey;try{const pemHeader="-----BEGIN PUBLIC KEY-----";const pemFooter="-----END PUBLIC KEY-----";let pemKey=options.publicKey;if(!pemKey.includes(pemHeader)){pemKey=`${pemHeader}
+${pemKey}
+${pemFooter}`}const pemContents=pemKey.replace(pemHeader,"").replace(pemFooter,"").replace(/\s/g,"");const binaryDer=Uint8Array.from(atob(pemContents),c=>c.charCodeAt(0));publicKey=await window.crypto.subtle.importKey("spki",binaryDer.buffer,{name:algorithm,hash:"SHA-256"},false,["verify"])}catch(importError){throw new _errors.SecurityError("公钥导入失败",importError instanceof Error?importError:undefined)}const isValid=await window.crypto.subtle.verify({name:algorithm},publicKey,signatureBuffer,data);return isValid}catch(error){if(error instanceof _errors.SecurityError){throw error}throw new _errors.SecurityError("签名验证失败",error instanceof Error?error:undefined)}}static verifyOrigin(options){if(!options.allowedOrigins||options.allowedOrigins.length===0){return true}if(typeof window==="undefined"){return true}const currentOrigin=window.location.origin;const referer=document.referrer;if(options.allowedOrigins.includes(currentOrigin)){return true}if(options.verifyReferer&&referer){try{const refererOrigin=new URL(referer).origin;if(options.allowedOrigins.includes(refererOrigin)){return true}}catch{}}return false}static verifyWhitelist(config,options){const errors=[];if(options.allowedKeys&&options.allowedKeys.length>0){const configKeys=Object.keys(config);const invalidKeys=configKeys.filter(key=>!options.allowedKeys.includes(key));if(invalidKeys.length>0){errors.push(`配置包含不允许的键: ${invalidKeys.join(", ")}`)}}if(options.forbiddenKeys&&options.forbiddenKeys.length>0){const configKeys=Object.keys(config);const forbiddenFound=configKeys.filter(key=>options.forbiddenKeys.includes(key));if(forbiddenFound.length>0){errors.push(`配置包含禁止的键: ${forbiddenFound.join(", ")}`)}}if(options.valueSchema){const result=_validation.Validator.validateObject(options.valueSchema,config);if(!result.valid){errors.push(...result.errors)}}return{valid:errors.length===0,errors}}static sanitizeConfig(config){const sanitized={};for(const[key,value]of Object.entries(config)){if(typeof value==="string"){const validation=_security.SecurityUtils.validateInput(value);if(validation.safe&&validation.sanitized){sanitized[key]=validation.sanitized}else{console.warn(`配置项 ${key} 包含潜在危险内容，已跳过`)}}else if(value&&typeof value==="object"&&!Array.isArray(value)){sanitized[key]=this.sanitizeConfig(value)}else{sanitized[key]=value}}return sanitized}static async validateConfigSecurity(config,options){const errors=[];if(options.origin){const originValid=this.verifyOrigin(options.origin);if(!originValid){errors.push("配置来源验证失败")}}if(options.whitelist){const whitelistResult=this.verifyWhitelist(config,options.whitelist);if(!whitelistResult.valid){errors.push(...whitelistResult.errors)}}return{valid:errors.length===0,errors}}};