@zhin.js/agent 0.2.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (152) hide show
  1. package/lib/agent-prompt/resolver.d.ts.map +1 -1
  2. package/lib/agent-prompt/resolver.js.map +1 -1
  3. package/lib/assistant/home-mcp-bridge.d.ts +1 -1
  4. package/lib/assistant/home-mcp-bridge.d.ts.map +1 -1
  5. package/lib/builtin/knowledge-search-tool.d.ts +6 -0
  6. package/lib/builtin/knowledge-search-tool.d.ts.map +1 -0
  7. package/lib/builtin/knowledge-search-tool.js +184 -0
  8. package/lib/builtin/knowledge-search-tool.js.map +1 -0
  9. package/lib/builtin/orchestration-tools.d.ts +2 -1
  10. package/lib/builtin/orchestration-tools.d.ts.map +1 -1
  11. package/lib/builtin/orchestration-tools.js.map +1 -1
  12. package/lib/builtin/run-spec-dry-run-tool.d.ts +1 -4
  13. package/lib/builtin/run-spec-dry-run-tool.d.ts.map +1 -1
  14. package/lib/builtin/run-spec-dry-run-tool.js.map +1 -1
  15. package/lib/builtin/run-validation-spec-tool.d.ts +1 -4
  16. package/lib/builtin/run-validation-spec-tool.d.ts.map +1 -1
  17. package/lib/builtin/run-validation-spec-tool.js.map +1 -1
  18. package/lib/builtin/spawn-task-tool.d.ts +2 -1
  19. package/lib/builtin/spawn-task-tool.d.ts.map +1 -1
  20. package/lib/builtin/spawn-task-tool.js.map +1 -1
  21. package/lib/builtin/web-fetch-tool.d.ts +2 -0
  22. package/lib/builtin/web-fetch-tool.d.ts.map +1 -1
  23. package/lib/builtin/web-fetch-tool.js +53 -8
  24. package/lib/builtin/web-fetch-tool.js.map +1 -1
  25. package/lib/builtin-tools.d.ts +2 -0
  26. package/lib/builtin-tools.d.ts.map +1 -1
  27. package/lib/builtin-tools.js +4 -0
  28. package/lib/builtin-tools.js.map +1 -1
  29. package/lib/config/fix-ai-config.d.ts +1 -1
  30. package/lib/config/fix-ai-config.d.ts.map +1 -1
  31. package/lib/config/normalize-ai-config.d.ts +1 -1
  32. package/lib/config/normalize-ai-config.d.ts.map +1 -1
  33. package/lib/config/provider-instance.d.ts +1 -1
  34. package/lib/config/provider-instance.d.ts.map +1 -1
  35. package/lib/config/provider-instance.js +1 -1
  36. package/lib/config/provider-instance.js.map +1 -1
  37. package/lib/config/types.d.ts +1 -1
  38. package/lib/config/types.d.ts.map +1 -1
  39. package/lib/create-agent-session.d.ts +1 -1
  40. package/lib/create-agent-session.d.ts.map +1 -1
  41. package/lib/deferred-worker-runner.d.ts +1 -1
  42. package/lib/deferred-worker-runner.d.ts.map +1 -1
  43. package/lib/index.d.ts +0 -18
  44. package/lib/index.d.ts.map +1 -1
  45. package/lib/index.js +0 -9
  46. package/lib/index.js.map +1 -1
  47. package/lib/init/activate-ai-database-storage.d.ts +1 -1
  48. package/lib/init/activate-ai-database-storage.d.ts.map +1 -1
  49. package/lib/init/activate-ai-database-storage.js +12 -8
  50. package/lib/init/activate-ai-database-storage.js.map +1 -1
  51. package/lib/init/create-zhin-agent.d.ts.map +1 -1
  52. package/lib/init/create-zhin-agent.js +18 -6
  53. package/lib/init/create-zhin-agent.js.map +1 -1
  54. package/lib/init/message-media.d.ts +2 -1
  55. package/lib/init/message-media.d.ts.map +1 -1
  56. package/lib/init/message-media.js.map +1 -1
  57. package/lib/init/register-builtin-tools.d.ts.map +1 -1
  58. package/lib/init/register-builtin-tools.js +6 -3
  59. package/lib/init/register-builtin-tools.js.map +1 -1
  60. package/lib/init/register-db-upgrade.js.map +1 -1
  61. package/lib/mcp-client/connection.d.ts.map +1 -1
  62. package/lib/mcp-client/connection.js +37 -1
  63. package/lib/mcp-client/connection.js.map +1 -1
  64. package/lib/orchestrator/agent-dispatcher.d.ts +1 -1
  65. package/lib/orchestrator/agent-dispatcher.d.ts.map +1 -1
  66. package/lib/orchestrator/remote-agent-registry.d.ts +1 -1
  67. package/lib/orchestrator/remote-agent-registry.d.ts.map +1 -1
  68. package/lib/routing/runtime-binding.d.ts +1 -1
  69. package/lib/routing/runtime-binding.d.ts.map +1 -1
  70. package/lib/security/audit-logger.d.ts +1 -0
  71. package/lib/security/audit-logger.d.ts.map +1 -1
  72. package/lib/security/audit-logger.js +12 -2
  73. package/lib/security/audit-logger.js.map +1 -1
  74. package/lib/security/dangerous-tool-policy.d.ts.map +1 -1
  75. package/lib/security/dangerous-tool-policy.js +4 -2
  76. package/lib/security/dangerous-tool-policy.js.map +1 -1
  77. package/lib/security/exec-policy.d.ts +1 -1
  78. package/lib/security/exec-policy.d.ts.map +1 -1
  79. package/lib/security/exec-policy.js +47 -0
  80. package/lib/security/exec-policy.js.map +1 -1
  81. package/lib/security/file-role-policy.js +1 -1
  82. package/lib/security/file-role-policy.js.map +1 -1
  83. package/lib/security/index.d.ts +2 -46
  84. package/lib/security/index.d.ts.map +1 -1
  85. package/lib/security/index.js +2 -67
  86. package/lib/security/index.js.map +1 -1
  87. package/lib/security/owner-approve-always-store.js +0 -1
  88. package/lib/security/owner-approve-always-store.js.map +1 -1
  89. package/lib/security/sandbox-docker.d.ts +28 -0
  90. package/lib/security/sandbox-docker.d.ts.map +1 -0
  91. package/lib/security/sandbox-docker.js +177 -0
  92. package/lib/security/sandbox-docker.js.map +1 -0
  93. package/lib/security/sandbox.d.ts +9 -0
  94. package/lib/security/sandbox.d.ts.map +1 -1
  95. package/lib/security/sandbox.js +215 -14
  96. package/lib/security/sandbox.js.map +1 -1
  97. package/lib/service.d.ts +4 -5
  98. package/lib/service.d.ts.map +1 -1
  99. package/lib/service.js +1 -8
  100. package/lib/service.js.map +1 -1
  101. package/lib/subagent.d.ts +7 -3
  102. package/lib/subagent.d.ts.map +1 -1
  103. package/lib/subagent.js +2 -2
  104. package/lib/subagent.js.map +1 -1
  105. package/lib/zhin-agent/builtin-tools.d.ts +1 -1
  106. package/lib/zhin-agent/builtin-tools.d.ts.map +1 -1
  107. package/lib/zhin-agent/config.d.ts +25 -0
  108. package/lib/zhin-agent/config.d.ts.map +1 -1
  109. package/lib/zhin-agent/config.js.map +1 -1
  110. package/lib/zhin-agent/index.d.ts +17 -16
  111. package/lib/zhin-agent/index.d.ts.map +1 -1
  112. package/lib/zhin-agent/index.js +76 -70
  113. package/lib/zhin-agent/index.js.map +1 -1
  114. package/lib/zhin-agent/interfaces.d.ts +63 -0
  115. package/lib/zhin-agent/interfaces.d.ts.map +1 -0
  116. package/lib/zhin-agent/interfaces.js +8 -0
  117. package/lib/zhin-agent/interfaces.js.map +1 -0
  118. package/lib/zhin-agent/prompt-assembly.d.ts +2 -2
  119. package/lib/zhin-agent/prompt-assembly.d.ts.map +1 -1
  120. package/lib/zhin-agent/prompt-assembly.js.map +1 -1
  121. package/lib/zhin-agent/prompt.d.ts +2 -2
  122. package/lib/zhin-agent/prompt.d.ts.map +1 -1
  123. package/lib/zhin-agent/prompt.js +22 -2
  124. package/lib/zhin-agent/prompt.js.map +1 -1
  125. package/lib/zhin-agent/session-io.d.ts +2 -2
  126. package/lib/zhin-agent/session-io.d.ts.map +1 -1
  127. package/lib/zhin-agent/session-io.js +2 -3
  128. package/lib/zhin-agent/session-io.js.map +1 -1
  129. package/lib/zhin-agent/task-continuation.d.ts +4 -4
  130. package/lib/zhin-agent/task-continuation.d.ts.map +1 -1
  131. package/lib/zhin-agent/task-continuation.js.map +1 -1
  132. package/package.json +4 -4
  133. package/lib/monitoring/index.d.ts +0 -79
  134. package/lib/monitoring/index.d.ts.map +0 -1
  135. package/lib/monitoring/index.js +0 -197
  136. package/lib/monitoring/index.js.map +0 -1
  137. package/lib/monitoring/metrics.d.ts +0 -260
  138. package/lib/monitoring/metrics.d.ts.map +0 -1
  139. package/lib/monitoring/metrics.js +0 -550
  140. package/lib/monitoring/metrics.js.map +0 -1
  141. package/lib/security/budget-limiter.d.ts +0 -161
  142. package/lib/security/budget-limiter.d.ts.map +0 -1
  143. package/lib/security/budget-limiter.js +0 -392
  144. package/lib/security/budget-limiter.js.map +0 -1
  145. package/lib/security/network-policy.d.ts +0 -98
  146. package/lib/security/network-policy.d.ts.map +0 -1
  147. package/lib/security/network-policy.js +0 -305
  148. package/lib/security/network-policy.js.map +0 -1
  149. package/lib/security/security-config.example.d.ts +0 -33
  150. package/lib/security/security-config.example.d.ts.map +0 -1
  151. package/lib/security/security-config.example.js +0 -166
  152. package/lib/security/security-config.example.js.map +0 -1
@@ -1,161 +0,0 @@
1
- /**
2
- * Token/Cost 预算限制系统
3
- *
4
- * 控制 AI Agent 的资源使用,防止:
5
- * - Token 滥用
6
- * - 成本超支
7
- * - 资源耗尽
8
- *
9
- */
10
- export interface BudgetConfig {
11
- /** 是否启用预算限制 */
12
- enabled: boolean;
13
- /** 每会话最大 Token 数 */
14
- maxTokensPerSession?: number;
15
- /** 每用户每天最大 Token 数 */
16
- maxTokensPerUserPerDay?: number;
17
- /** 每会话最大成本(美元) */
18
- maxCostPerSession?: number;
19
- /** 每用户每天最大成本(美元) */
20
- maxCostPerUserPerDay?: number;
21
- /** 每会话最大工具调用次数 */
22
- maxToolCallsPerSession?: number;
23
- /** 每会话最大迭代次数 */
24
- maxIterationsPerSession?: number;
25
- /** 每会话最大持续时间(毫秒) */
26
- maxSessionDuration?: number;
27
- /** 警告阈值(百分比) */
28
- warningThreshold?: number;
29
- /** 是否在达到限制时自动结束会话 */
30
- autoTerminate?: boolean;
31
- }
32
- export interface TokenUsage {
33
- /** 输入 Token 数 */
34
- inputTokens: number;
35
- /** 输出 Token 数 */
36
- outputTokens: number;
37
- /** 总 Token 数 */
38
- totalTokens: number;
39
- /** 估算成本(美元) */
40
- estimatedCost: number;
41
- }
42
- export interface SessionBudget {
43
- /** 会话 ID */
44
- sessionId: string;
45
- /** 用户 ID */
46
- userId?: string;
47
- /** 开始时间 */
48
- startTime: number;
49
- /** Token 使用情况 */
50
- tokenUsage: TokenUsage;
51
- /** 工具调用次数 */
52
- toolCallCount: number;
53
- /** 迭代次数 */
54
- iterationCount: number;
55
- /** 是否已达到限制 */
56
- limitReached: boolean;
57
- /** 达到的限制类型 */
58
- limitType?: string;
59
- /** 警告已发送 */
60
- warningsSent: Set<string>;
61
- }
62
- export interface BudgetCheckResult {
63
- allowed: boolean;
64
- reason?: string;
65
- /** 当前使用情况 */
66
- current?: {
67
- tokens: number;
68
- cost: number;
69
- toolCalls: number;
70
- iterations: number;
71
- duration: number;
72
- };
73
- /** 限制情况 */
74
- limits?: {
75
- maxTokens?: number;
76
- maxCost?: number;
77
- maxToolCalls?: number;
78
- maxIterations?: number;
79
- maxDuration?: number;
80
- };
81
- /** 是否为警告 */
82
- isWarning?: boolean;
83
- }
84
- export declare class BudgetLimiter {
85
- private config;
86
- private sessions;
87
- private dailyUsage;
88
- private cleanupTimer?;
89
- private static readonly MAX_DAILY_ENTRIES;
90
- constructor(config?: Partial<BudgetConfig>);
91
- /**
92
- * 创建新会话预算
93
- */
94
- createSession(sessionId: string, userId?: string): SessionBudget;
95
- /**
96
- * 获取会话预算
97
- */
98
- getSession(sessionId: string): SessionBudget | undefined;
99
- /**
100
- * 记录 Token 使用
101
- */
102
- recordTokenUsage(sessionId: string, usage: TokenUsage): BudgetCheckResult;
103
- /**
104
- * 记录工具调用
105
- */
106
- recordToolCall(sessionId: string): BudgetCheckResult;
107
- /**
108
- * 记录迭代
109
- */
110
- recordIteration(sessionId: string): BudgetCheckResult;
111
- /**
112
- * 检查预算限制
113
- */
114
- private checkBudget;
115
- /**
116
- * 更新每日使用情况
117
- */
118
- private updateDailyUsage;
119
- /**
120
- * 清理过期会话和每日记录
121
- */
122
- private cleanup;
123
- /**
124
- * 结束会话
125
- */
126
- endSession(sessionId: string): SessionBudget | undefined;
127
- /**
128
- * 获取会话统计
129
- */
130
- getSessionStats(sessionId: string): {
131
- tokenUsage: TokenUsage;
132
- toolCallCount: number;
133
- iterationCount: number;
134
- duration: number;
135
- limits: Record<string, number | undefined>;
136
- } | undefined;
137
- /**
138
- * 更新配置
139
- */
140
- updateConfig(config: Partial<BudgetConfig>): void;
141
- /**
142
- * 获取配置
143
- */
144
- getConfig(): BudgetConfig;
145
- dispose(): void;
146
- }
147
- /**
148
- * 获取全局预算限制器实例
149
- */
150
- export declare function getBudgetLimiter(): BudgetLimiter;
151
- /**
152
- * 初始化预算限制器
153
- */
154
- export declare function initBudgetLimiter(config: Partial<BudgetConfig>): BudgetLimiter;
155
- /** 重置全局预算限制器(用于测试隔离) */
156
- export declare function resetBudgetLimiter(): void;
157
- /**
158
- * 检查预算限制
159
- */
160
- export declare function checkBudgetLimit(sessionId: string, type: 'tokens' | 'toolCall' | 'iteration', usage?: TokenUsage): BudgetCheckResult;
161
- //# sourceMappingURL=budget-limiter.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"budget-limiter.d.ts","sourceRoot":"","sources":["../../src/security/budget-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,gBAAgB;IAChB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAiBD,MAAM,WAAW,UAAU;IACzB,iBAAiB;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,aAAa;IAC5B,YAAY;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY;IACZ,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC3B;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa;IACb,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,WAAW;IACX,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY;IACZ,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,UAAU,CAAsC;IACxD,OAAO,CAAC,YAAY,CAAC,CAAiC;IACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAS;gBAEtC,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAU9C;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa;IAgBhE;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIxD;;OAEG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,iBAAiB;IAyBzE;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;IAcpD;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;IAcrD;;OAEG;IACH,OAAO,CAAC,WAAW;IAiJnB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;OAEG;IACH,OAAO,CAAC,OAAO;IA+Bf;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAQxD;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG;QAClC,UAAU,EAAE,UAAU,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KAC5C,GAAG,SAAS;IAmBb;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIjD;;OAEG;IACH,SAAS,IAAI,YAAY;IAIzB,OAAO,IAAI,IAAI;CAQhB;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAYhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,aAAa,CAG9E;AAED,wBAAwB;AACxB,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,WAAW,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAcpI"}
@@ -1,392 +0,0 @@
1
- /**
2
- * Token/Cost 预算限制系统
3
- *
4
- * 控制 AI Agent 的资源使用,防止:
5
- * - Token 滥用
6
- * - 成本超支
7
- * - 资源耗尽
8
- *
9
- */
10
- import { getPlugin } from '@zhin.js/core';
11
- const DEFAULT_CONFIG = {
12
- enabled: true,
13
- maxTokensPerSession: 1000000, // 1M tokens
14
- maxTokensPerUserPerDay: 5000000, // 5M tokens
15
- maxCostPerSession: 10.0, // $10
16
- maxCostPerUserPerDay: 50.0, // $50
17
- maxToolCallsPerSession: 100,
18
- maxIterationsPerSession: 20,
19
- maxSessionDuration: 3600000, // 1 小时
20
- warningThreshold: 80, // 80%
21
- autoTerminate: false,
22
- };
23
- // ── 预算限制器类 ──────────────────────────────────────────────────────
24
- export class BudgetLimiter {
25
- config;
26
- sessions = new Map();
27
- dailyUsage = new Map(); // userId -> usage
28
- cleanupTimer;
29
- static MAX_DAILY_ENTRIES = 10000;
30
- constructor(config = {}) {
31
- this.config = { ...DEFAULT_CONFIG, ...config };
32
- // 定期清理过期会话
33
- this.cleanupTimer = setInterval(() => this.cleanup(), 300000);
34
- if (this.cleanupTimer && typeof this.cleanupTimer === 'object' && 'unref' in this.cleanupTimer) {
35
- this.cleanupTimer.unref();
36
- }
37
- }
38
- /**
39
- * 创建新会话预算
40
- */
41
- createSession(sessionId, userId) {
42
- const budget = {
43
- sessionId,
44
- userId,
45
- startTime: Date.now(),
46
- tokenUsage: { inputTokens: 0, outputTokens: 0, totalTokens: 0, estimatedCost: 0 },
47
- toolCallCount: 0,
48
- iterationCount: 0,
49
- limitReached: false,
50
- warningsSent: new Set(),
51
- };
52
- this.sessions.set(sessionId, budget);
53
- return budget;
54
- }
55
- /**
56
- * 获取会话预算
57
- */
58
- getSession(sessionId) {
59
- return this.sessions.get(sessionId);
60
- }
61
- /**
62
- * 记录 Token 使用
63
- */
64
- recordTokenUsage(sessionId, usage) {
65
- if (!this.config.enabled) {
66
- return { allowed: true };
67
- }
68
- const session = this.sessions.get(sessionId);
69
- if (!session) {
70
- return { allowed: true };
71
- }
72
- // 更新会话使用情况
73
- session.tokenUsage.inputTokens += usage.inputTokens;
74
- session.tokenUsage.outputTokens += usage.outputTokens;
75
- session.tokenUsage.totalTokens += usage.totalTokens;
76
- session.tokenUsage.estimatedCost += usage.estimatedCost;
77
- // 更新每日使用情况
78
- if (session.userId) {
79
- this.updateDailyUsage(session.userId, usage);
80
- }
81
- // 检查限制
82
- return this.checkBudget(session);
83
- }
84
- /**
85
- * 记录工具调用
86
- */
87
- recordToolCall(sessionId) {
88
- if (!this.config.enabled) {
89
- return { allowed: true };
90
- }
91
- const session = this.sessions.get(sessionId);
92
- if (!session) {
93
- return { allowed: true };
94
- }
95
- session.toolCallCount++;
96
- return this.checkBudget(session);
97
- }
98
- /**
99
- * 记录迭代
100
- */
101
- recordIteration(sessionId) {
102
- if (!this.config.enabled) {
103
- return { allowed: true };
104
- }
105
- const session = this.sessions.get(sessionId);
106
- if (!session) {
107
- return { allowed: true };
108
- }
109
- session.iterationCount++;
110
- return this.checkBudget(session);
111
- }
112
- /**
113
- * 检查预算限制
114
- */
115
- checkBudget(session) {
116
- const now = Date.now();
117
- const duration = now - session.startTime;
118
- // 构建当前使用情况
119
- const current = {
120
- tokens: session.tokenUsage.totalTokens,
121
- cost: session.tokenUsage.estimatedCost,
122
- toolCalls: session.toolCallCount,
123
- iterations: session.iterationCount,
124
- duration,
125
- };
126
- // 构建限制情况
127
- const limits = {
128
- maxTokens: this.config.maxTokensPerSession,
129
- maxCost: this.config.maxCostPerSession,
130
- maxToolCalls: this.config.maxToolCallsPerSession,
131
- maxIterations: this.config.maxIterationsPerSession,
132
- maxDuration: this.config.maxSessionDuration,
133
- };
134
- // 检查每日成本限制(优先检查成本,因为成本更敏感)
135
- if (session.userId && this.config.maxCostPerUserPerDay) {
136
- const dailyUsage = this.dailyUsage.get(session.userId);
137
- if (dailyUsage && dailyUsage.estimatedCost >= this.config.maxCostPerUserPerDay) {
138
- session.limitReached = true;
139
- session.limitType = 'dailyCost';
140
- return {
141
- allowed: false,
142
- reason: `已达到每日成本限制 ($${this.config.maxCostPerUserPerDay})`,
143
- current,
144
- limits,
145
- };
146
- }
147
- }
148
- // 检查会话成本限制
149
- if (this.config.maxCostPerSession && session.tokenUsage.estimatedCost >= this.config.maxCostPerSession) {
150
- session.limitReached = true;
151
- session.limitType = 'sessionCost';
152
- return {
153
- allowed: false,
154
- reason: `已达到会话成本限制 ($${this.config.maxCostPerSession})`,
155
- current,
156
- limits,
157
- };
158
- }
159
- // 检查每日 Token 限制
160
- if (session.userId && this.config.maxTokensPerUserPerDay) {
161
- const dailyUsage = this.dailyUsage.get(session.userId);
162
- if (dailyUsage && dailyUsage.totalTokens >= this.config.maxTokensPerUserPerDay) {
163
- session.limitReached = true;
164
- session.limitType = 'dailyTokens';
165
- return {
166
- allowed: false,
167
- reason: `已达到每日 Token 使用限制 (${this.config.maxTokensPerUserPerDay})`,
168
- current,
169
- limits,
170
- };
171
- }
172
- }
173
- // 检查会话 Token 限制
174
- if (this.config.maxTokensPerSession && session.tokenUsage.totalTokens >= this.config.maxTokensPerSession) {
175
- session.limitReached = true;
176
- session.limitType = 'sessionTokens';
177
- return {
178
- allowed: false,
179
- reason: `已达到会话 Token 使用限制 (${this.config.maxTokensPerSession})`,
180
- current,
181
- limits,
182
- };
183
- }
184
- // 检查工具调用限制
185
- if (this.config.maxToolCallsPerSession && session.toolCallCount >= this.config.maxToolCallsPerSession) {
186
- session.limitReached = true;
187
- session.limitType = 'toolCalls';
188
- return {
189
- allowed: false,
190
- reason: `已达到工具调用次数限制 (${this.config.maxToolCallsPerSession})`,
191
- current,
192
- limits,
193
- };
194
- }
195
- // 检查迭代限制
196
- if (this.config.maxIterationsPerSession && session.iterationCount >= this.config.maxIterationsPerSession) {
197
- session.limitReached = true;
198
- session.limitType = 'iterations';
199
- return {
200
- allowed: false,
201
- reason: `已达到迭代次数限制 (${this.config.maxIterationsPerSession})`,
202
- current,
203
- limits,
204
- };
205
- }
206
- // 检查会话时长限制
207
- if (this.config.maxSessionDuration && duration >= this.config.maxSessionDuration) {
208
- session.limitReached = true;
209
- session.limitType = 'duration';
210
- return {
211
- allowed: false,
212
- reason: `已达到会话时长限制 (${this.config.maxSessionDuration / 60000} 分钟)`,
213
- current,
214
- limits,
215
- };
216
- }
217
- // 检查警告阈值
218
- const warnings = [];
219
- const threshold = (this.config.warningThreshold || 80) / 100;
220
- if (this.config.maxTokensPerSession) {
221
- const usageRatio = session.tokenUsage.totalTokens / this.config.maxTokensPerSession;
222
- if (usageRatio >= threshold && !session.warningsSent.has('tokens')) {
223
- warnings.push(`Token 使用已达 ${Math.round(usageRatio * 100)}%`);
224
- session.warningsSent.add('tokens');
225
- }
226
- }
227
- if (this.config.maxCostPerSession) {
228
- const usageRatio = session.tokenUsage.estimatedCost / this.config.maxCostPerSession;
229
- if (usageRatio >= threshold && !session.warningsSent.has('cost')) {
230
- warnings.push(`成本已达 ${Math.round(usageRatio * 100)}%`);
231
- session.warningsSent.add('cost');
232
- }
233
- }
234
- if (warnings.length > 0) {
235
- return {
236
- allowed: true,
237
- reason: warnings.join('; '),
238
- current,
239
- limits,
240
- isWarning: true,
241
- };
242
- }
243
- return { allowed: true, current, limits };
244
- }
245
- /**
246
- * 更新每日使用情况
247
- */
248
- updateDailyUsage(userId, usage) {
249
- const today = new Date().toISOString().split('T')[0]; // YYYY-MM-DD
250
- const key = `${userId}:${today}`;
251
- let daily = this.dailyUsage.get(key);
252
- if (!daily) {
253
- daily = { inputTokens: 0, outputTokens: 0, totalTokens: 0, estimatedCost: 0 };
254
- this.dailyUsage.set(key, daily);
255
- }
256
- daily.inputTokens += usage.inputTokens;
257
- daily.outputTokens += usage.outputTokens;
258
- daily.totalTokens += usage.totalTokens;
259
- daily.estimatedCost += usage.estimatedCost;
260
- }
261
- /**
262
- * 清理过期会话和每日记录
263
- */
264
- cleanup() {
265
- const now = Date.now();
266
- const maxAge = 24 * 60 * 60 * 1000; // 24 小时
267
- // 清理过期会话
268
- for (const [sessionId, session] of this.sessions.entries()) {
269
- if (now - session.startTime > maxAge) {
270
- this.sessions.delete(sessionId);
271
- }
272
- }
273
- // 清理过期的每日记录
274
- const today = new Date().toISOString().split('T')[0];
275
- for (const key of this.dailyUsage.keys()) {
276
- if (!key.endsWith(today)) {
277
- this.dailyUsage.delete(key);
278
- }
279
- }
280
- // 防止当日条目无限增长
281
- if (this.dailyUsage.size > BudgetLimiter.MAX_DAILY_ENTRIES) {
282
- const excess = this.dailyUsage.size - BudgetLimiter.MAX_DAILY_ENTRIES;
283
- let removed = 0;
284
- for (const key of this.dailyUsage.keys()) {
285
- if (removed >= excess)
286
- break;
287
- this.dailyUsage.delete(key);
288
- removed++;
289
- }
290
- }
291
- }
292
- /**
293
- * 结束会话
294
- */
295
- endSession(sessionId) {
296
- const session = this.sessions.get(sessionId);
297
- if (session) {
298
- this.sessions.delete(sessionId);
299
- }
300
- return session;
301
- }
302
- /**
303
- * 获取会话统计
304
- */
305
- getSessionStats(sessionId) {
306
- const session = this.sessions.get(sessionId);
307
- if (!session)
308
- return undefined;
309
- return {
310
- tokenUsage: { ...session.tokenUsage },
311
- toolCallCount: session.toolCallCount,
312
- iterationCount: session.iterationCount,
313
- duration: Date.now() - session.startTime,
314
- limits: {
315
- maxTokens: this.config.maxTokensPerSession,
316
- maxCost: this.config.maxCostPerSession,
317
- maxToolCalls: this.config.maxToolCallsPerSession,
318
- maxIterations: this.config.maxIterationsPerSession,
319
- maxDuration: this.config.maxSessionDuration,
320
- },
321
- };
322
- }
323
- /**
324
- * 更新配置
325
- */
326
- updateConfig(config) {
327
- this.config = { ...this.config, ...config };
328
- }
329
- /**
330
- * 获取配置
331
- */
332
- getConfig() {
333
- return { ...this.config };
334
- }
335
- dispose() {
336
- if (this.cleanupTimer) {
337
- clearInterval(this.cleanupTimer);
338
- this.cleanupTimer = undefined;
339
- }
340
- this.sessions.clear();
341
- this.dailyUsage.clear();
342
- }
343
- }
344
- // ── 全局预算限制器实例 ────────────────────────────────────────────────
345
- let globalBudgetLimiter = null;
346
- /**
347
- * 获取全局预算限制器实例
348
- */
349
- export function getBudgetLimiter() {
350
- if (!globalBudgetLimiter) {
351
- try {
352
- const plugin = getPlugin();
353
- // eslint-disable-next-line @typescript-eslint/no-explicit-any
354
- const config = plugin.root?.inject('config')?.ai?.agent?.budget;
355
- globalBudgetLimiter = new BudgetLimiter(config);
356
- }
357
- catch {
358
- globalBudgetLimiter = new BudgetLimiter();
359
- }
360
- }
361
- return globalBudgetLimiter;
362
- }
363
- /**
364
- * 初始化预算限制器
365
- */
366
- export function initBudgetLimiter(config) {
367
- globalBudgetLimiter = new BudgetLimiter(config);
368
- return globalBudgetLimiter;
369
- }
370
- /** 重置全局预算限制器(用于测试隔离) */
371
- export function resetBudgetLimiter() {
372
- globalBudgetLimiter = null;
373
- }
374
- /**
375
- * 检查预算限制
376
- */
377
- export function checkBudgetLimit(sessionId, type, usage) {
378
- const limiter = getBudgetLimiter();
379
- switch (type) {
380
- case 'tokens':
381
- if (!usage)
382
- return { allowed: true };
383
- return limiter.recordTokenUsage(sessionId, usage);
384
- case 'toolCall':
385
- return limiter.recordToolCall(sessionId);
386
- case 'iteration':
387
- return limiter.recordIteration(sessionId);
388
- default:
389
- return { allowed: true };
390
- }
391
- }
392
- //# sourceMappingURL=budget-limiter.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"budget-limiter.js","sourceRoot":"","sources":["../../src/security/budget-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA2B1C,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,IAAI;IACb,mBAAmB,EAAE,OAAO,EAAS,YAAY;IACjD,sBAAsB,EAAE,OAAO,EAAM,YAAY;IACjD,iBAAiB,EAAE,IAAI,EAAc,MAAM;IAC3C,oBAAoB,EAAE,IAAI,EAAW,MAAM;IAC3C,sBAAsB,EAAE,GAAG;IAC3B,uBAAuB,EAAE,EAAE;IAC3B,kBAAkB,EAAE,OAAO,EAAU,OAAO;IAC5C,gBAAgB,EAAE,EAAE,EAAiB,MAAM;IAC3C,aAAa,EAAE,KAAK;CACrB,CAAC;AA+DF,mEAAmE;AAEnE,MAAM,OAAO,aAAa;IAChB,MAAM,CAAe;IACrB,QAAQ,GAA+B,IAAI,GAAG,EAAE,CAAC;IACjD,UAAU,GAA4B,IAAI,GAAG,EAAE,CAAC,CAAC,kBAAkB;IACnE,YAAY,CAAkC;IAC9C,MAAM,CAAU,iBAAiB,GAAG,KAAK,CAAC;IAElD,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAE/C,WAAW;QACX,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB,EAAE,MAAe;QAC9C,MAAM,MAAM,GAAkB;YAC5B,SAAS;YACT,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;YACjF,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,IAAI,GAAG,EAAE;SACxB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB,EAAE,KAAiB;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,WAAW;QACX,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACpD,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;QACtD,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACpD,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;QAExD,WAAW;QACX,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO;QACP,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAAiB;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAsB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;QAEzC,WAAW;QACX,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;YACtC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa;YACtC,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,UAAU,EAAE,OAAO,CAAC,cAAc;YAClC,QAAQ;SACT,CAAC;QAEF,SAAS;QACT,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAC1C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;YAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;YAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SAC5C,CAAC;QAEF,2BAA2B;QAC3B,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAC/E,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG;oBAC1D,OAAO;oBACP,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACvG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG;gBACvD,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,UAAU,IAAI,UAAU,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAC/E,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG;oBAClE,OAAO;oBACP,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACzG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG;gBAC/D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACtG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG;gBAC7D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,SAAS;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACzG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,YAAY,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG;gBAC5D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACjF,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,KAAK,MAAM;gBAClE,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,SAAS;QACT,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC;QAE7D,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACpF,IAAI,UAAU,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACpF,IAAI,UAAU,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3B,OAAO;gBACP,MAAM;gBACN,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAc,EAAE,KAAiB;QACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACnE,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QAEjC,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;QACzC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;QAE5C,SAAS;QACT,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,aAAa,CAAC,iBAAiB,CAAC;YACtE,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,IAAI,MAAM;oBAAE,MAAM;gBAC7B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAO/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,OAAO;YACL,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE;YACrC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;YACxC,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;gBAC1C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;gBAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;aAC5C;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;;AAGH,gEAAgE;AAEhE,IAAI,mBAAmB,GAAyB,IAAI,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,8DAA8D;YAC9D,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC;YACzE,mBAAmB,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB,GAAG,IAAI,aAAa,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA6B;IAC7D,mBAAmB,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,kBAAkB;IAChC,mBAAmB,GAAG,IAAI,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAyC,EAAE,KAAkB;IAC/G,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAEnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC5C;YACE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}
@@ -1,98 +0,0 @@
1
- /**
2
- * 网络访问安全策略
3
- *
4
- * 控制 AI Agent 的网络请求,防止:
5
- * - 访问恶意域名
6
- * - 数据外泄
7
- * - SSRF 攻击
8
- * - 资源滥用
9
- *
10
- */
11
- export interface NetworkPolicyConfig {
12
- /** 是否启用网络策略 */
13
- enabled: boolean;
14
- /** 域名白名单(允许访问) */
15
- allowedDomains?: string[];
16
- /** 域名黑名单(禁止访问) */
17
- blockedDomains?: string[];
18
- /** IP 黑名单 */
19
- blockedIPs?: string[];
20
- /** 禁止私有 IP */
21
- blockPrivateIPs?: boolean;
22
- /** 最大请求大小(字节) */
23
- maxRequestSize?: number;
24
- /** 最大响应大小(字节) */
25
- maxResponseSize?: number;
26
- /** 请求超时(毫秒) */
27
- requestTimeout?: number;
28
- /** 每分钟最大请求数 */
29
- rateLimit?: number;
30
- /** 禁止的协议 */
31
- blockedProtocols?: string[];
32
- /** 禁止的端口 */
33
- blockedPorts?: number[];
34
- }
35
- export interface NetworkPolicyResult {
36
- allowed: boolean;
37
- reason?: string;
38
- /** 脱敏后的 URL */
39
- sanitizedUrl?: string;
40
- }
41
- export declare class NetworkPolicy {
42
- private config;
43
- private rateLimiter;
44
- private cleanupTimer?;
45
- constructor(config?: Partial<NetworkPolicyConfig>);
46
- /**
47
- * 检查 URL 是否允许访问
48
- */
49
- checkUrl(url: string, userId?: string): NetworkPolicyResult;
50
- /**
51
- * 检查域名是否在黑名单中
52
- */
53
- private isBlockedDomain;
54
- /**
55
- * 检查域名是否在白名单中
56
- */
57
- private isAllowedDomain;
58
- /**
59
- * 检查是否为可疑域名
60
- */
61
- private isSuspiciousDomain;
62
- /**
63
- * 检查是否为私有 IP
64
- */
65
- private isPrivateIP;
66
- /**
67
- * 获取默认端口
68
- */
69
- private getDefaultPort;
70
- /**
71
- * 脱敏域名
72
- */
73
- private maskDomain;
74
- /**
75
- * 更新配置
76
- */
77
- updateConfig(config: Partial<NetworkPolicyConfig>): void;
78
- /**
79
- * 获取配置(脱敏)
80
- */
81
- getConfig(): NetworkPolicyConfig;
82
- dispose(): void;
83
- }
84
- /**
85
- * 获取全局网络策略实例
86
- */
87
- export declare function getNetworkPolicy(): NetworkPolicy;
88
- /**
89
- * 初始化网络策略
90
- */
91
- export declare function initNetworkPolicy(config: Partial<NetworkPolicyConfig>): NetworkPolicy;
92
- /** 重置全局网络策略(用于测试隔离) */
93
- export declare function resetNetworkPolicy(): void;
94
- /**
95
- * 检查 URL 是否允许访问
96
- */
97
- export declare function checkNetworkAccess(url: string, userId?: string): NetworkPolicyResult;
98
- //# sourceMappingURL=network-policy.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../../src/security/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,WAAW,mBAAmB;IAClC,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa;IACb,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY;IACZ,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY;IACZ,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAkGD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAC,CAAiC;gBAE1C,MAAM,GAAE,OAAO,CAAC,mBAAmB,CAAM;IAWrD;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAuF3D;;OAEG;IACH,OAAO,CAAC,eAAe;IAavB;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;IACH,OAAO,CAAC,UAAU;IASlB;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI;IAIxD;;OAEG;IACH,SAAS,IAAI,mBAAmB;IAIhC,OAAO,IAAI,IAAI;CAMhB;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAKhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAGrF;AAED,uBAAuB;AACvB,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAEpF"}