@vlian/framework 1.2.59 → 1.2.60

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (154) hide show
  1. package/dist/analytics/index.cjs +1 -22
  2. package/dist/analytics.umd.js +1 -1
  3. package/dist/components/LocaleSwitch.cjs +1 -116
  4. package/dist/components/ThemeSwitch.cjs +1 -115
  5. package/dist/components/index.cjs +1 -20
  6. package/dist/components/persistence.cjs +1 -58
  7. package/dist/core/Test.cjs +1 -64
  8. package/dist/core/app/AppContext.cjs +1 -348
  9. package/dist/core/app/AppContext.types.cjs +1 -4
  10. package/dist/core/app/BasicLayout.cjs +1 -122
  11. package/dist/core/app/DefaultApp.cjs +1 -150
  12. package/dist/core/app/index.cjs +1 -41
  13. package/dist/core/config/AppConfig.cjs +1 -139
  14. package/dist/core/config/ConfigLoader.cjs +1 -323
  15. package/dist/core/config/ConfigValidator.cjs +2 -133
  16. package/dist/core/config/index.cjs +1 -28
  17. package/dist/core/dev/DevTools.cjs +1 -226
  18. package/dist/core/error/ErrorBoundary.cjs +1 -401
  19. package/dist/core/error/ErrorHandler.cjs +1 -275
  20. package/dist/core/error/index.cjs +1 -34
  21. package/dist/core/event/AppEventBus.cjs +1 -444
  22. package/dist/core/event/frameworkEvents.cjs +1 -141
  23. package/dist/core/event/hooks.cjs +1 -69
  24. package/dist/core/event/index.cjs +1 -41
  25. package/dist/core/event/types.cjs +1 -62
  26. package/dist/core/event/useEventBus.cjs +1 -25
  27. package/dist/core/index.cjs +1 -140
  28. package/dist/core/initialization/InitializationErrorThrower.cjs +1 -75
  29. package/dist/core/initialization/index.cjs +1 -26
  30. package/dist/core/initialization/initialization.cjs +1 -64
  31. package/dist/core/initialization/initializationErrorState.cjs +1 -66
  32. package/dist/core/kernel/defaultAdapters.cjs +1 -184
  33. package/dist/core/kernel/errors.cjs +1 -69
  34. package/dist/core/kernel/index.cjs +1 -20
  35. package/dist/core/kernel/startKernel.cjs +1 -200
  36. package/dist/core/kernel/types.cjs +1 -4
  37. package/dist/core/middleware.cjs +1 -73
  38. package/dist/core/plugin/PluginEventBus.cjs +1 -298
  39. package/dist/core/plugin/PluginSandbox.cjs +1 -137
  40. package/dist/core/plugin.cjs +1 -494
  41. package/dist/core/router/RouterManager.cjs +1 -286
  42. package/dist/core/router/adapter/AdapterManager.cjs +1 -235
  43. package/dist/core/router/adapter/index.cjs +1 -22
  44. package/dist/core/router/adapter/react-router/ReactRouterAdapter.cjs +1 -128
  45. package/dist/core/router/adapter/react-router/index.cjs +1 -20
  46. package/dist/core/router/adapter/types.cjs +1 -6
  47. package/dist/core/router/dev/RouterDevTools.cjs +1 -260
  48. package/dist/core/router/dev/index.cjs +1 -20
  49. package/dist/core/router/dynamic/DynamicRouteManager.cjs +1 -193
  50. package/dist/core/router/dynamic/index.cjs +1 -20
  51. package/dist/core/router/errors/RouterError.cjs +1 -61
  52. package/dist/core/router/errors/index.cjs +1 -20
  53. package/dist/core/router/index.cjs +1 -36
  54. package/dist/core/router/lifecycle/RouterLifecycleManager.cjs +1 -144
  55. package/dist/core/router/lifecycle/index.cjs +1 -20
  56. package/dist/core/router/middleware/RouterMiddlewareManager.cjs +1 -193
  57. package/dist/core/router/middleware/auth.cjs +1 -66
  58. package/dist/core/router/middleware/index.cjs +1 -22
  59. package/dist/core/router/middleware/types.cjs +1 -6
  60. package/dist/core/router/monitoring/RouterMonitoring.cjs +1 -227
  61. package/dist/core/router/monitoring/index.cjs +1 -20
  62. package/dist/core/router/navigation/RouterNavigation.cjs +1 -239
  63. package/dist/core/router/navigation/index.cjs +1 -20
  64. package/dist/core/router/performance/RouteCache.cjs +1 -305
  65. package/dist/core/router/performance/RoutePreloader.cjs +1 -292
  66. package/dist/core/router/performance/index.cjs +1 -21
  67. package/dist/core/router/plugin/RouterPluginManager.cjs +1 -262
  68. package/dist/core/router/plugin/index.cjs +1 -21
  69. package/dist/core/router/plugin/types.cjs +1 -39
  70. package/dist/core/router/types.cjs +1 -4
  71. package/dist/core/router/utils/adapters/react-router/RouteErrorBoundary.cjs +1 -129
  72. package/dist/core/router/utils/adapters/react-router/transform.cjs +1 -250
  73. package/dist/core/router/utils/transform.cjs +1 -780
  74. package/dist/core/router/validation/RouterConfigValidator.cjs +2 -83
  75. package/dist/core/router/validation/index.cjs +1 -21
  76. package/dist/core/router/validation/schema.cjs +1 -159
  77. package/dist/core/router/version/RouteVersionManager.cjs +1 -205
  78. package/dist/core/router/version/index.cjs +1 -20
  79. package/dist/core/splash/SplashScreen.cjs +1 -341
  80. package/dist/core/splash/index.cjs +1 -22
  81. package/dist/core/splash/splashScreenUtils.cjs +1 -38
  82. package/dist/core/startup/AppInstance.cjs +1 -239
  83. package/dist/core/startup/environment.cjs +1 -169
  84. package/dist/core/startup/index.cjs +1 -23
  85. package/dist/core/startup/initializeServices.cjs +1 -226
  86. package/dist/core/startup/performanceTracker.cjs +1 -179
  87. package/dist/core/startup/renderApp.cjs +1 -314
  88. package/dist/core/startup/startApp.cjs +1 -317
  89. package/dist/core/types.cjs +1 -4
  90. package/dist/index.cjs +1 -52
  91. package/dist/index.umd.cjs +1 -27
  92. package/dist/index.umd.js +1 -1
  93. package/dist/kernel/constants.cjs +1 -65
  94. package/dist/kernel/index.cjs +1 -38
  95. package/dist/kernel/kernel.cjs +1 -295
  96. package/dist/kernel/manager/cacheManager.cjs +1 -46
  97. package/dist/kernel/manager/i18n/I18nManager.cjs +1 -91
  98. package/dist/kernel/manager/i18n/i18n.persistence.cjs +1 -60
  99. package/dist/kernel/manager/i18n/i18n.schema.cjs +1 -86
  100. package/dist/kernel/manager/i18n/index.cjs +1 -11
  101. package/dist/kernel/manager/i18nManager.cjs +1 -11
  102. package/dist/kernel/manager/index.cjs +1 -28
  103. package/dist/kernel/manager/logger/LoggerManager.cjs +1 -107
  104. package/dist/kernel/manager/logger/index.cjs +1 -11
  105. package/dist/kernel/manager/logger/logger.persistence.cjs +1 -62
  106. package/dist/kernel/manager/logger/logger.schema.cjs +1 -74
  107. package/dist/kernel/manager/loggerManager.cjs +1 -11
  108. package/dist/kernel/manager/theme/ThemeManager.cjs +1 -84
  109. package/dist/kernel/manager/theme/index.cjs +1 -11
  110. package/dist/kernel/manager/theme/theme.dom.cjs +1 -61
  111. package/dist/kernel/manager/theme/theme.persistence.cjs +1 -57
  112. package/dist/kernel/manager/theme/theme.schema.cjs +1 -122
  113. package/dist/kernel/manager/themeManager.cjs +1 -11
  114. package/dist/kernel/types.cjs +1 -4
  115. package/dist/library/index.cjs +1 -19
  116. package/dist/library/locale/index.cjs +1 -39
  117. package/dist/library/locale/langs/en-us/index.cjs +1 -32
  118. package/dist/library/locale/langs/zh-cn/index.cjs +1 -32
  119. package/dist/library/locale/types.cjs +1 -4
  120. package/dist/library/storage/cache.cjs +1 -243
  121. package/dist/library/storage/encryption.cjs +1 -147
  122. package/dist/library/storage/index.cjs +1 -124
  123. package/dist/state/StateManager.cjs +1 -166
  124. package/dist/state/adapters/AdapterFactory.cjs +1 -89
  125. package/dist/state/adapters/DefaultAdapter.cjs +1 -75
  126. package/dist/state/adapters/ReduxAdapter.cjs +1 -443
  127. package/dist/state/adapters/ZustandAdapter.cjs +1 -69
  128. package/dist/state/adapters/index.cjs +1 -44
  129. package/dist/state/adapters/types.cjs +1 -20
  130. package/dist/state/core/DerivedStateInstance.cjs +1 -174
  131. package/dist/state/core/StateInstance.cjs +1 -170
  132. package/dist/state/core/StateRegistry.cjs +1 -110
  133. package/dist/state/core/StateScope.cjs +1 -137
  134. package/dist/state/core/index.cjs +1 -30
  135. package/dist/state/index.cjs +1 -30
  136. package/dist/state/types.cjs +1 -12
  137. package/dist/state.umd.js +1 -1
  138. package/dist/types.cjs +1 -4
  139. package/dist/utils/analytics.cjs +1 -217
  140. package/dist/utils/configSecurity.cjs +3 -182
  141. package/dist/utils/csrf.cjs +1 -18
  142. package/dist/utils/errors/ErrorCodes.cjs +1 -25
  143. package/dist/utils/errors.cjs +1 -111
  144. package/dist/utils/index.cjs +1 -135
  145. package/dist/utils/logger.cjs +1 -25
  146. package/dist/utils/logger.types.cjs +1 -11
  147. package/dist/utils/monitoring.cjs +1 -18
  148. package/dist/utils/performance.cjs +1 -22
  149. package/dist/utils/resourceLoader.cjs +1 -22
  150. package/dist/utils/runtimeSecurity.cjs +1 -11
  151. package/dist/utils/security.cjs +1 -19
  152. package/dist/utils/traceId.cjs +1 -37
  153. package/dist/utils/validation.cjs +1 -19
  154. package/package.json +7 -3
package/dist/types.cjs CHANGED
@@ -1,4 +1 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});
@@ -1,217 +1 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- function _export(target, all) {
6
- for(var name in all)Object.defineProperty(target, name, {
7
- enumerable: true,
8
- get: Object.getOwnPropertyDescriptor(all, name).get
9
- });
10
- }
11
- _export(exports, {
12
- get AnalyticsService () {
13
- return AnalyticsService;
14
- },
15
- get getAnalytics () {
16
- return getAnalytics;
17
- },
18
- get initAnalytics () {
19
- return initAnalytics;
20
- }
21
- });
22
- const _logger = require("./logger");
23
- const _security = require("./security");
24
- function _define_property(obj, key, value) {
25
- if (key in obj) {
26
- Object.defineProperty(obj, key, {
27
- value: value,
28
- enumerable: true,
29
- configurable: true,
30
- writable: true
31
- });
32
- } else {
33
- obj[key] = value;
34
- }
35
- return obj;
36
- }
37
- let AnalyticsService = class AnalyticsService {
38
- /**
39
- * 启动批量上报定时器
40
- */ startBatchTimer() {
41
- if (this.batchTimer) {
42
- return;
43
- }
44
- this.batchTimer = setInterval(()=>{
45
- this.flush();
46
- }, this.config.batchInterval);
47
- }
48
- /**
49
- * 停止批量上报定时器
50
- */ stopBatchTimer() {
51
- if (this.batchTimer) {
52
- clearInterval(this.batchTimer);
53
- this.batchTimer = null;
54
- }
55
- }
56
- /**
57
- * 记录事件
58
- */ track(event) {
59
- if (!this.config.enabled) {
60
- return;
61
- }
62
- // 采样检查
63
- if (Math.random() > this.config.sampleRate) {
64
- return;
65
- }
66
- // 匿名化处理
67
- const anonymizedEvent = {
68
- ...event,
69
- timestamp: Date.now(),
70
- properties: this.anonymizeProperties(event.properties)
71
- };
72
- // 添加到队列
73
- this.eventQueue.push(anonymizedEvent);
74
- // 立即上报单个事件
75
- if (this.config.onEvent) {
76
- this.config.onEvent(anonymizedEvent);
77
- }
78
- // 检查是否需要批量上报
79
- if (this.eventQueue.length >= this.config.batchSize) {
80
- this.flush();
81
- }
82
- }
83
- /**
84
- * 记录页面浏览
85
- */ trackPageView(page, properties) {
86
- this.track({
87
- type: 'pageview',
88
- name: 'page_view',
89
- properties: {
90
- page,
91
- ...properties
92
- }
93
- });
94
- }
95
- /**
96
- * 记录点击事件
97
- */ trackClick(element, properties) {
98
- this.track({
99
- type: 'click',
100
- name: 'click',
101
- properties: {
102
- element,
103
- ...properties
104
- }
105
- });
106
- }
107
- /**
108
- * 记录自定义事件
109
- */ trackCustom(name, properties) {
110
- this.track({
111
- type: 'custom',
112
- name,
113
- properties
114
- });
115
- }
116
- /**
117
- * 记录错误事件
118
- */ trackError(error, properties) {
119
- this.track({
120
- type: 'error',
121
- name: 'error',
122
- properties: {
123
- errorName: error.name,
124
- errorMessage: error.message,
125
- errorStack: error.stack,
126
- ...properties
127
- }
128
- });
129
- }
130
- /**
131
- * 记录性能事件
132
- */ trackPerformance(metrics, properties) {
133
- this.track({
134
- type: 'performance',
135
- name: 'performance',
136
- properties: {
137
- ...metrics,
138
- ...properties
139
- }
140
- });
141
- }
142
- /**
143
- * 匿名化属性(使用深度脱敏)
144
- */ anonymizeProperties(properties) {
145
- if (!this.config.anonymize || !properties) {
146
- return properties;
147
- }
148
- // 使用深度脱敏处理
149
- return _security.SecurityUtils.deepSanitize(properties);
150
- }
151
- /**
152
- * 刷新队列(批量上报)
153
- */ flush() {
154
- if (this.eventQueue.length === 0) {
155
- return;
156
- }
157
- const events = [
158
- ...this.eventQueue
159
- ];
160
- this.eventQueue = [];
161
- if (this.config.onBatch) {
162
- this.config.onBatch(events);
163
- }
164
- _logger.logger.debug(`分析服务批量上报 ${events.length} 个事件`);
165
- }
166
- /**
167
- * 启用分析
168
- */ enable() {
169
- this.config.enabled = true;
170
- this.startBatchTimer();
171
- }
172
- /**
173
- * 禁用分析
174
- */ disable() {
175
- this.config.enabled = false;
176
- this.stopBatchTimer();
177
- this.flush();
178
- }
179
- /**
180
- * 销毁服务
181
- */ destroy() {
182
- this.stopBatchTimer();
183
- this.flush();
184
- }
185
- constructor(config = {}){
186
- _define_property(this, "config", void 0);
187
- _define_property(this, "eventQueue", []);
188
- _define_property(this, "batchTimer", null);
189
- this.config = {
190
- enabled: config.enabled ?? true,
191
- sampleRate: config.sampleRate ?? 1.0,
192
- anonymize: config.anonymize ?? true,
193
- onEvent: config.onEvent ?? (()=>{}),
194
- onBatch: config.onBatch ?? (()=>{}),
195
- batchSize: config.batchSize ?? 10,
196
- batchInterval: config.batchInterval ?? 5000
197
- };
198
- if (this.config.enabled) {
199
- this.startBatchTimer();
200
- }
201
- }
202
- };
203
- /**
204
- * 默认分析服务实例
205
- */ let defaultAnalyticsService = null;
206
- function initAnalytics(config) {
207
- if (!defaultAnalyticsService) {
208
- defaultAnalyticsService = new AnalyticsService(config);
209
- }
210
- return defaultAnalyticsService;
211
- }
212
- function getAnalytics() {
213
- if (!defaultAnalyticsService) {
214
- return initAnalytics();
215
- }
216
- return defaultAnalyticsService;
217
- }
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});function _export(target,all){for(var name in all)Object.defineProperty(target,name,{enumerable:true,get:Object.getOwnPropertyDescriptor(all,name).get})}_export(exports,{get AnalyticsService(){return AnalyticsService},get getAnalytics(){return getAnalytics},get initAnalytics(){return initAnalytics}});const _logger=require("./logger");const _security=require("./security");function _define_property(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{obj[key]=value}return obj}let AnalyticsService=class AnalyticsService{startBatchTimer(){if(this.batchTimer){return}this.batchTimer=setInterval(()=>{this.flush()},this.config.batchInterval)}stopBatchTimer(){if(this.batchTimer){clearInterval(this.batchTimer);this.batchTimer=null}}track(event){if(!this.config.enabled){return}if(Math.random()>this.config.sampleRate){return}const anonymizedEvent={...event,timestamp:Date.now(),properties:this.anonymizeProperties(event.properties)};this.eventQueue.push(anonymizedEvent);if(this.config.onEvent){this.config.onEvent(anonymizedEvent)}if(this.eventQueue.length>=this.config.batchSize){this.flush()}}trackPageView(page,properties){this.track({type:"pageview",name:"page_view",properties:{page,...properties}})}trackClick(element,properties){this.track({type:"click",name:"click",properties:{element,...properties}})}trackCustom(name,properties){this.track({type:"custom",name,properties})}trackError(error,properties){this.track({type:"error",name:"error",properties:{errorName:error.name,errorMessage:error.message,errorStack:error.stack,...properties}})}trackPerformance(metrics,properties){this.track({type:"performance",name:"performance",properties:{...metrics,...properties}})}anonymizeProperties(properties){if(!this.config.anonymize||!properties){return properties}return _security.SecurityUtils.deepSanitize(properties)}flush(){if(this.eventQueue.length===0){return}const events=[...this.eventQueue];this.eventQueue=[];if(this.config.onBatch){this.config.onBatch(events)}_logger.logger.debug(`分析服务批量上报 ${events.length} 个事件`)}enable(){this.config.enabled=true;this.startBatchTimer()}disable(){this.config.enabled=false;this.stopBatchTimer();this.flush()}destroy(){this.stopBatchTimer();this.flush()}constructor(config={}){_define_property(this,"config",void 0);_define_property(this,"eventQueue",[]);_define_property(this,"batchTimer",null);this.config={enabled:config.enabled??true,sampleRate:config.sampleRate??1,anonymize:config.anonymize??true,onEvent:config.onEvent??(()=>{}),onBatch:config.onBatch??(()=>{}),batchSize:config.batchSize??10,batchInterval:config.batchInterval??5e3};if(this.config.enabled){this.startBatchTimer()}}};let defaultAnalyticsService=null;function initAnalytics(config){if(!defaultAnalyticsService){defaultAnalyticsService=new AnalyticsService(config)}return defaultAnalyticsService}function getAnalytics(){if(!defaultAnalyticsService){return initAnalytics()}return defaultAnalyticsService}
@@ -1,182 +1,3 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- Object.defineProperty(exports, "ConfigSecurity", {
6
- enumerable: true,
7
- get: function() {
8
- return ConfigSecurity;
9
- }
10
- });
11
- const _errors = require("./errors");
12
- const _security = require("./security");
13
- const _validation = require("./validation");
14
- let ConfigSecurity = class ConfigSecurity {
15
- /**
16
- * 验证配置签名
17
- */ static async verifySignature(config, signature, options) {
18
- if (!options.enabled) {
19
- return true;
20
- }
21
- if (!options.publicKey) {
22
- throw new _errors.SecurityError('签名验证需要提供公钥');
23
- }
24
- if (!signature || signature.length === 0) {
25
- throw new _errors.SecurityError('签名不能为空');
26
- }
27
- try {
28
- // 使用 Web Crypto API 验证签名
29
- if (typeof window === 'undefined' || !window.crypto || !window.crypto.subtle) {
30
- throw new _errors.SecurityError('签名验证需要浏览器支持 Web Crypto API');
31
- }
32
- // 将配置转换为字符串(用于签名验证)
33
- // 使用稳定的 JSON 序列化(按键排序)
34
- const configString = JSON.stringify(config, Object.keys(config).sort());
35
- const encoder = new TextEncoder();
36
- const data = encoder.encode(configString);
37
- // 将签名从 Base64 解码
38
- const signatureBuffer = Uint8Array.from(atob(signature), (c)=>c.charCodeAt(0));
39
- // 导入公钥(支持 PEM 格式)
40
- const algorithm = options.algorithm || 'RSASSA-PKCS1-v1_5';
41
- let publicKey;
42
- try {
43
- // 尝试导入 PEM 格式的公钥
44
- const pemHeader = '-----BEGIN PUBLIC KEY-----';
45
- const pemFooter = '-----END PUBLIC KEY-----';
46
- let pemKey = options.publicKey;
47
- if (!pemKey.includes(pemHeader)) {
48
- pemKey = `${pemHeader}\n${pemKey}\n${pemFooter}`;
49
- }
50
- // 将 PEM 转换为 ArrayBuffer
51
- const pemContents = pemKey.replace(pemHeader, '').replace(pemFooter, '').replace(/\s/g, '');
52
- const binaryDer = Uint8Array.from(atob(pemContents), (c)=>c.charCodeAt(0));
53
- publicKey = await window.crypto.subtle.importKey('spki', binaryDer.buffer, {
54
- name: algorithm,
55
- hash: 'SHA-256'
56
- }, false, [
57
- 'verify'
58
- ]);
59
- } catch (importError) {
60
- throw new _errors.SecurityError('公钥导入失败', importError instanceof Error ? importError : undefined);
61
- }
62
- // 验证签名
63
- const isValid = await window.crypto.subtle.verify({
64
- name: algorithm
65
- }, publicKey, signatureBuffer, data);
66
- return isValid;
67
- } catch (error) {
68
- if (error instanceof _errors.SecurityError) {
69
- throw error;
70
- }
71
- throw new _errors.SecurityError('签名验证失败', error instanceof Error ? error : undefined);
72
- }
73
- }
74
- /**
75
- * 验证配置来源
76
- */ static verifyOrigin(options) {
77
- if (!options.allowedOrigins || options.allowedOrigins.length === 0) {
78
- return true; // 如果没有配置白名单,允许所有来源
79
- }
80
- if (typeof window === 'undefined') {
81
- return true; // 非浏览器环境,跳过验证
82
- }
83
- const currentOrigin = window.location.origin;
84
- const referer = document.referrer;
85
- // 验证当前来源
86
- if (options.allowedOrigins.includes(currentOrigin)) {
87
- return true;
88
- }
89
- // 验证 Referer
90
- if (options.verifyReferer && referer) {
91
- try {
92
- const refererOrigin = new URL(referer).origin;
93
- if (options.allowedOrigins.includes(refererOrigin)) {
94
- return true;
95
- }
96
- } catch {
97
- // Referer 解析失败
98
- }
99
- }
100
- return false;
101
- }
102
- /**
103
- * 验证配置白名单
104
- */ static verifyWhitelist(config, options) {
105
- const errors = [];
106
- // 检查允许的键
107
- if (options.allowedKeys && options.allowedKeys.length > 0) {
108
- const configKeys = Object.keys(config);
109
- const invalidKeys = configKeys.filter((key)=>!options.allowedKeys.includes(key));
110
- if (invalidKeys.length > 0) {
111
- errors.push(`配置包含不允许的键: ${invalidKeys.join(', ')}`);
112
- }
113
- }
114
- // 检查禁止的键
115
- if (options.forbiddenKeys && options.forbiddenKeys.length > 0) {
116
- const configKeys = Object.keys(config);
117
- const forbiddenFound = configKeys.filter((key)=>options.forbiddenKeys.includes(key));
118
- if (forbiddenFound.length > 0) {
119
- errors.push(`配置包含禁止的键: ${forbiddenFound.join(', ')}`);
120
- }
121
- }
122
- // 验证配置值
123
- if (options.valueSchema) {
124
- const result = _validation.Validator.validateObject(options.valueSchema, config);
125
- if (!result.valid) {
126
- errors.push(...result.errors);
127
- }
128
- }
129
- return {
130
- valid: errors.length === 0,
131
- errors
132
- };
133
- }
134
- /**
135
- * 清理配置中的危险内容
136
- */ static sanitizeConfig(config) {
137
- const sanitized = {};
138
- for (const [key, value] of Object.entries(config)){
139
- if (typeof value === 'string') {
140
- // 检查是否包含危险内容
141
- const validation = _security.SecurityUtils.validateInput(value);
142
- if (validation.safe && validation.sanitized) {
143
- sanitized[key] = validation.sanitized;
144
- } else {
145
- // 包含危险内容,跳过或记录警告
146
- console.warn(`配置项 ${key} 包含潜在危险内容,已跳过`);
147
- }
148
- } else if (value && typeof value === 'object' && !Array.isArray(value)) {
149
- // 递归清理对象
150
- sanitized[key] = this.sanitizeConfig(value);
151
- } else {
152
- sanitized[key] = value;
153
- }
154
- }
155
- return sanitized;
156
- }
157
- /**
158
- * 验证配置安全性
159
- */ static async validateConfigSecurity(config, options) {
160
- const errors = [];
161
- // 验证来源
162
- if (options.origin) {
163
- const originValid = this.verifyOrigin(options.origin);
164
- if (!originValid) {
165
- errors.push('配置来源验证失败');
166
- }
167
- }
168
- // 验证白名单
169
- if (options.whitelist) {
170
- const whitelistResult = this.verifyWhitelist(config, options.whitelist);
171
- if (!whitelistResult.valid) {
172
- errors.push(...whitelistResult.errors);
173
- }
174
- }
175
- // 清理配置(已实现但暂不使用返回值)
176
- // const sanitizedConfig = this.sanitizeConfig(config);
177
- return {
178
- valid: errors.length === 0,
179
- errors
180
- };
181
- }
182
- };
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});Object.defineProperty(exports,"ConfigSecurity",{enumerable:true,get:function(){return ConfigSecurity}});const _errors=require("./errors");const _security=require("./security");const _validation=require("./validation");let ConfigSecurity=class ConfigSecurity{static async verifySignature(config,signature,options){if(!options.enabled){return true}if(!options.publicKey){throw new _errors.SecurityError("签名验证需要提供公钥")}if(!signature||signature.length===0){throw new _errors.SecurityError("签名不能为空")}try{if(typeof window==="undefined"||!window.crypto||!window.crypto.subtle){throw new _errors.SecurityError("签名验证需要浏览器支持 Web Crypto API")}const configString=JSON.stringify(config,Object.keys(config).sort());const encoder=new TextEncoder;const data=encoder.encode(configString);const signatureBuffer=Uint8Array.from(atob(signature),c=>c.charCodeAt(0));const algorithm=options.algorithm||"RSASSA-PKCS1-v1_5";let publicKey;try{const pemHeader="-----BEGIN PUBLIC KEY-----";const pemFooter="-----END PUBLIC KEY-----";let pemKey=options.publicKey;if(!pemKey.includes(pemHeader)){pemKey=`${pemHeader}
2
+ ${pemKey}
3
+ ${pemFooter}`}const pemContents=pemKey.replace(pemHeader,"").replace(pemFooter,"").replace(/\s/g,"");const binaryDer=Uint8Array.from(atob(pemContents),c=>c.charCodeAt(0));publicKey=await window.crypto.subtle.importKey("spki",binaryDer.buffer,{name:algorithm,hash:"SHA-256"},false,["verify"])}catch(importError){throw new _errors.SecurityError("公钥导入失败",importError instanceof Error?importError:undefined)}const isValid=await window.crypto.subtle.verify({name:algorithm},publicKey,signatureBuffer,data);return isValid}catch(error){if(error instanceof _errors.SecurityError){throw error}throw new _errors.SecurityError("签名验证失败",error instanceof Error?error:undefined)}}static verifyOrigin(options){if(!options.allowedOrigins||options.allowedOrigins.length===0){return true}if(typeof window==="undefined"){return true}const currentOrigin=window.location.origin;const referer=document.referrer;if(options.allowedOrigins.includes(currentOrigin)){return true}if(options.verifyReferer&&referer){try{const refererOrigin=new URL(referer).origin;if(options.allowedOrigins.includes(refererOrigin)){return true}}catch{}}return false}static verifyWhitelist(config,options){const errors=[];if(options.allowedKeys&&options.allowedKeys.length>0){const configKeys=Object.keys(config);const invalidKeys=configKeys.filter(key=>!options.allowedKeys.includes(key));if(invalidKeys.length>0){errors.push(`配置包含不允许的键: ${invalidKeys.join(", ")}`)}}if(options.forbiddenKeys&&options.forbiddenKeys.length>0){const configKeys=Object.keys(config);const forbiddenFound=configKeys.filter(key=>options.forbiddenKeys.includes(key));if(forbiddenFound.length>0){errors.push(`配置包含禁止的键: ${forbiddenFound.join(", ")}`)}}if(options.valueSchema){const result=_validation.Validator.validateObject(options.valueSchema,config);if(!result.valid){errors.push(...result.errors)}}return{valid:errors.length===0,errors}}static sanitizeConfig(config){const sanitized={};for(const[key,value]of Object.entries(config)){if(typeof value==="string"){const validation=_security.SecurityUtils.validateInput(value);if(validation.safe&&validation.sanitized){sanitized[key]=validation.sanitized}else{console.warn(`配置项 ${key} 包含潜在危险内容,已跳过`)}}else if(value&&typeof value==="object"&&!Array.isArray(value)){sanitized[key]=this.sanitizeConfig(value)}else{sanitized[key]=value}}return sanitized}static async validateConfigSecurity(config,options){const errors=[];if(options.origin){const originValid=this.verifyOrigin(options.origin);if(!originValid){errors.push("配置来源验证失败")}}if(options.whitelist){const whitelistResult=this.verifyWhitelist(config,options.whitelist);if(!whitelistResult.valid){errors.push(...whitelistResult.errors)}}return{valid:errors.length===0,errors}}};
@@ -1,18 +1 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- _export_star(require("@vlian/csrf"), exports);
6
- function _export_star(from, to) {
7
- Object.keys(from).forEach(function(k) {
8
- if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
9
- Object.defineProperty(to, k, {
10
- enumerable: true,
11
- get: function() {
12
- return from[k];
13
- }
14
- });
15
- }
16
- });
17
- return from;
18
- }
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});_export_star(require("@vlian/csrf"),exports);function _export_star(from,to){Object.keys(from).forEach(function(k){if(k!=="default"&&!Object.prototype.hasOwnProperty.call(to,k)){Object.defineProperty(to,k,{enumerable:true,get:function(){return from[k]}})}});return from}
@@ -1,25 +1 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- function _export(target, all) {
6
- for(var name in all)Object.defineProperty(target, name, {
7
- enumerable: true,
8
- get: Object.getOwnPropertyDescriptor(all, name).get
9
- });
10
- }
11
- _export(exports, {
12
- get ErrorCode () {
13
- return _utils.ErrorCode;
14
- },
15
- get ErrorMessages () {
16
- return _utils.ErrorMessages;
17
- },
18
- get getErrorMessage () {
19
- return _utils.getErrorMessage;
20
- },
21
- get getUserFriendlyMessage () {
22
- return _utils.getUserFriendlyMessage;
23
- }
24
- });
25
- const _utils = require("@vlian/utils");
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});function _export(target,all){for(var name in all)Object.defineProperty(target,name,{enumerable:true,get:Object.getOwnPropertyDescriptor(all,name).get})}_export(exports,{get ErrorCode(){return _utils.ErrorCode},get ErrorMessages(){return _utils.ErrorMessages},get getErrorMessage(){return _utils.getErrorMessage},get getUserFriendlyMessage(){return _utils.getUserFriendlyMessage}});const _utils=require("@vlian/utils");
@@ -1,111 +1 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- function _export(target, all) {
6
- for(var name in all)Object.defineProperty(target, name, {
7
- enumerable: true,
8
- get: Object.getOwnPropertyDescriptor(all, name).get
9
- });
10
- }
11
- _export(exports, {
12
- get ConfigError () {
13
- return ConfigError;
14
- },
15
- get ErrorCode () {
16
- return ErrorCode;
17
- },
18
- get ErrorMessages () {
19
- return ErrorMessages;
20
- },
21
- get ErrorSeverity () {
22
- return ErrorSeverity;
23
- },
24
- get ErrorType () {
25
- return ErrorType;
26
- },
27
- get FrameworkError () {
28
- return FrameworkError;
29
- },
30
- get InitializationError () {
31
- return InitializationError;
32
- },
33
- get NetworkError () {
34
- return NetworkError;
35
- },
36
- get SecurityError () {
37
- return SecurityError;
38
- },
39
- get StorageError () {
40
- return StorageError;
41
- },
42
- get ValidationError () {
43
- return ValidationError;
44
- },
45
- get errorUtils () {
46
- return errorUtils;
47
- },
48
- get getErrorMessage () {
49
- return getErrorMessage;
50
- },
51
- get getUserFriendlyMessage () {
52
- return getUserFriendlyMessage;
53
- }
54
- });
55
- const _utils = /*#__PURE__*/ _interop_require_wildcard(require("@vlian/utils"));
56
- function _getRequireWildcardCache(nodeInterop) {
57
- if (typeof WeakMap !== "function") return null;
58
- var cacheBabelInterop = new WeakMap();
59
- var cacheNodeInterop = new WeakMap();
60
- return (_getRequireWildcardCache = function(nodeInterop) {
61
- return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
62
- })(nodeInterop);
63
- }
64
- function _interop_require_wildcard(obj, nodeInterop) {
65
- if (!nodeInterop && obj && obj.__esModule) {
66
- return obj;
67
- }
68
- if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
69
- return {
70
- default: obj
71
- };
72
- }
73
- var cache = _getRequireWildcardCache(nodeInterop);
74
- if (cache && cache.has(obj)) {
75
- return cache.get(obj);
76
- }
77
- var newObj = {
78
- __proto__: null
79
- };
80
- var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
81
- for(var key in obj){
82
- if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
83
- var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
84
- if (desc && (desc.get || desc.set)) {
85
- Object.defineProperty(newObj, key, desc);
86
- } else {
87
- newObj[key] = obj[key];
88
- }
89
- }
90
- }
91
- newObj.default = obj;
92
- if (cache) {
93
- cache.set(obj, newObj);
94
- }
95
- return newObj;
96
- }
97
- const utils = _utils;
98
- const ErrorCode = utils.ErrorCode;
99
- const ErrorMessages = utils.ErrorMessages;
100
- const getErrorMessage = utils.getErrorMessage;
101
- const getUserFriendlyMessage = utils.getUserFriendlyMessage;
102
- const ErrorType = utils.ErrorType;
103
- const ErrorSeverity = utils.ErrorSeverity;
104
- const FrameworkError = utils.FrameworkError;
105
- const InitializationError = utils.InitializationError;
106
- const ConfigError = utils.ConfigError;
107
- const StorageError = utils.StorageError;
108
- const NetworkError = utils.NetworkError;
109
- const ValidationError = utils.ValidationError;
110
- const SecurityError = utils.SecurityError;
111
- const errorUtils = utils.errorUtils;
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:true});function _export(target,all){for(var name in all)Object.defineProperty(target,name,{enumerable:true,get:Object.getOwnPropertyDescriptor(all,name).get})}_export(exports,{get ConfigError(){return ConfigError},get ErrorCode(){return ErrorCode},get ErrorMessages(){return ErrorMessages},get ErrorSeverity(){return ErrorSeverity},get ErrorType(){return ErrorType},get FrameworkError(){return FrameworkError},get InitializationError(){return InitializationError},get NetworkError(){return NetworkError},get SecurityError(){return SecurityError},get StorageError(){return StorageError},get ValidationError(){return ValidationError},get errorUtils(){return errorUtils},get getErrorMessage(){return getErrorMessage},get getUserFriendlyMessage(){return getUserFriendlyMessage}});const _utils=/*#__PURE__*/_interop_require_wildcard(require("@vlian/utils"));function _getRequireWildcardCache(nodeInterop){if(typeof WeakMap!=="function")return null;var cacheBabelInterop=new WeakMap;var cacheNodeInterop=new WeakMap;return(_getRequireWildcardCache=function(nodeInterop){return nodeInterop?cacheNodeInterop:cacheBabelInterop})(nodeInterop)}function _interop_require_wildcard(obj,nodeInterop){if(!nodeInterop&&obj&&obj.__esModule){return obj}if(obj===null||typeof obj!=="object"&&typeof obj!=="function"){return{default:obj}}var cache=_getRequireWildcardCache(nodeInterop);if(cache&&cache.has(obj)){return cache.get(obj)}var newObj={__proto__:null};var hasPropertyDescriptor=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var key in obj){if(key!=="default"&&Object.prototype.hasOwnProperty.call(obj,key)){var desc=hasPropertyDescriptor?Object.getOwnPropertyDescriptor(obj,key):null;if(desc&&(desc.get||desc.set)){Object.defineProperty(newObj,key,desc)}else{newObj[key]=obj[key]}}}newObj.default=obj;if(cache){cache.set(obj,newObj)}return newObj}const utils=_utils;const ErrorCode=utils.ErrorCode;const ErrorMessages=utils.ErrorMessages;const getErrorMessage=utils.getErrorMessage;const getUserFriendlyMessage=utils.getUserFriendlyMessage;const ErrorType=utils.ErrorType;const ErrorSeverity=utils.ErrorSeverity;const FrameworkError=utils.FrameworkError;const InitializationError=utils.InitializationError;const ConfigError=utils.ConfigError;const StorageError=utils.StorageError;const NetworkError=utils.NetworkError;const ValidationError=utils.ValidationError;const SecurityError=utils.SecurityError;const errorUtils=utils.errorUtils;