openclaw-multi-auto 1.5.2 → 1.5.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{audio-preflight-5FEeDooz.js → audio-preflight-DDBLZBdb.js} +4 -4
- package/dist/{audio-transcription-runner-B-UvoDjZ.js → audio-transcription-runner-DZbSWT9E.js} +1 -1
- package/dist/build-info.json +3 -3
- package/dist/canvas-host/a2ui/.bundle.hash +1 -1
- package/dist/{chrome-D45SyhQL.js → chrome-CMU2WVFh.js} +8 -8
- package/dist/{deliver-B9cys0EZ.js → deliver-BXVcFIHL.js} +1 -1
- package/dist/{deliver-runtime-DhaQJ0pI.js → deliver-runtime-DTaIS-1i.js} +3 -3
- package/dist/{deps-send-whatsapp.runtime-DvTL2tzN.js → deps-send-whatsapp.runtime-CIZqFAqb.js} +7 -7
- package/dist/extensionAPI.js +6 -6
- package/dist/{image-DAOPwVXi.js → image-BCVLo0qw.js} +1 -1
- package/dist/{image-runtime-wlCLVvVv.js → image-runtime-DtCKpMPZ.js} +3 -3
- package/dist/{pi-embedded-DYU79yGe.js → pi-embedded-CgQ_W6Xs.js} +24 -24
- package/dist/{pi-embedded-helpers-uTRAmQ4n.js → pi-embedded-helpers-CwuBTKza.js} +3 -3
- package/dist/plugin-sdk/accounts-CJWOBzwB.js +35 -0
- package/dist/plugin-sdk/accounts-DP1-L-QS.js +288 -0
- package/dist/plugin-sdk/accounts-DZhWlEg3.js +46 -0
- package/dist/plugin-sdk/active-listener-B_sLJTXM.js +50 -0
- package/dist/plugin-sdk/api-key-rotation-BRE4X2tf.js +181 -0
- package/dist/plugin-sdk/audio-preflight-DGEUDxxR.js +69 -0
- package/dist/plugin-sdk/audio-transcription-runner-DkoPNPYt.js +2176 -0
- package/dist/plugin-sdk/audit-membership-runtime-DSBHHw7o.js +58 -0
- package/dist/plugin-sdk/bluebubbles.js +2 -2
- package/dist/plugin-sdk/channel-activity-F3d0yUwy.js +94 -0
- package/dist/plugin-sdk/channel-web-QF7EpjeP.js +2256 -0
- package/dist/plugin-sdk/chrome-BXoCyCkY.js +2415 -0
- package/dist/plugin-sdk/commands-registry-t7cXBTfN.js +1125 -0
- package/dist/plugin-sdk/config-BkEnz2Po.js +17913 -0
- package/dist/plugin-sdk/deliver-B6AG_l67.js +1694 -0
- package/dist/plugin-sdk/deliver-runtime-D585kJZc.js +32 -0
- package/dist/plugin-sdk/deps-send-discord.runtime-a_OKY2js.js +23 -0
- package/dist/plugin-sdk/deps-send-imessage.runtime-Baxy9TD4.js +22 -0
- package/dist/plugin-sdk/deps-send-signal.runtime-BwXoCrFl.js +21 -0
- package/dist/plugin-sdk/deps-send-slack.runtime-CLmKjgso.js +19 -0
- package/dist/plugin-sdk/deps-send-telegram.runtime-BKfdBKnZ.js +24 -0
- package/dist/plugin-sdk/deps-send-whatsapp.runtime-BOTwkbx_.js +57 -0
- package/dist/plugin-sdk/diagnostic-CsP-lEkI.js +319 -0
- package/dist/plugin-sdk/errors-DaiAM-yU.js +54 -0
- package/dist/plugin-sdk/fetch-guard-DETCcJzQ.js +156 -0
- package/dist/plugin-sdk/fs-safe-B8y811FR.js +352 -0
- package/dist/plugin-sdk/image-DjTEkYZE.js +2310 -0
- package/dist/plugin-sdk/image-ops-BSiMpAw4.js +584 -0
- package/dist/plugin-sdk/image-runtime-6xPp8m5a.js +25 -0
- package/dist/plugin-sdk/index.js +50 -50
- package/dist/plugin-sdk/ir-DQ7_HbvK.js +1296 -0
- package/dist/plugin-sdk/irc.js +2 -2
- package/dist/plugin-sdk/local-roots-BUP4YBmR.js +186 -0
- package/dist/plugin-sdk/logger-CZY9KIoY.js +1163 -0
- package/dist/plugin-sdk/login-BxEKLlCo.js +57 -0
- package/dist/plugin-sdk/login-qr-BQIpMPr9.js +320 -0
- package/dist/plugin-sdk/manager-I6KbPihW.js +3917 -0
- package/dist/plugin-sdk/manager-runtime-CFfYYWIQ.js +15 -0
- package/dist/plugin-sdk/outbound-NS6UHnB6.js +212 -0
- package/dist/plugin-sdk/outbound-attachment-Dy6fyf6H.js +19 -0
- package/dist/plugin-sdk/path-alias-guards-DBjLbIX_.js +43 -0
- package/dist/plugin-sdk/paths-vTM3Lh3X.js +166 -0
- package/dist/plugin-sdk/pi-embedded-helpers-1R1gu7eX.js +9627 -0
- package/dist/plugin-sdk/pi-model-discovery-runtime-Do9o-dUd.js +8 -0
- package/dist/plugin-sdk/pi-model-discovery-v-XPUOOf.js +134 -0
- package/dist/plugin-sdk/pi-tools.before-tool-call.runtime-D4sFsIks.js +354 -0
- package/dist/plugin-sdk/plugins-DeBZB9l_.js +864 -0
- package/dist/plugin-sdk/proxy-fetch-ChxOhWF4.js +38 -0
- package/dist/plugin-sdk/pw-ai-DEOmCSSC.js +1938 -0
- package/dist/plugin-sdk/qmd-manager-HyYKoEch.js +1448 -0
- package/dist/plugin-sdk/query-expansion-CeyKUeDW.js +1011 -0
- package/dist/plugin-sdk/redact-DjVX-1N3.js +319 -0
- package/dist/plugin-sdk/reply-DAo_Jt8K.js +97916 -0
- package/dist/plugin-sdk/resolve-outbound-target-B42qgQS9.js +40 -0
- package/dist/plugin-sdk/run-with-concurrency-Bt_ks0Qa.js +1994 -0
- package/dist/plugin-sdk/runtime-whatsapp-login.runtime-B6W989eF.js +10 -0
- package/dist/plugin-sdk/runtime-whatsapp-outbound.runtime-c_GDFy37.js +19 -0
- package/dist/plugin-sdk/send-CQpMudwO.js +2587 -0
- package/dist/plugin-sdk/send-DQHLzVyO.js +414 -0
- package/dist/plugin-sdk/send-DTB24bEF.js +3135 -0
- package/dist/plugin-sdk/send-DfHadjZ_.js +503 -0
- package/dist/plugin-sdk/send-XXlW2iny.js +540 -0
- package/dist/plugin-sdk/session-6TF6MyaC.js +169 -0
- package/dist/plugin-sdk/skill-commands-CkGeFUMl.js +342 -0
- package/dist/plugin-sdk/skills-CBkHBYPq.js +1428 -0
- package/dist/plugin-sdk/slash-commands.runtime-CxliuGaP.js +13 -0
- package/dist/plugin-sdk/slash-dispatch.runtime-DFaeYlJQ.js +52 -0
- package/dist/plugin-sdk/slash-skill-commands.runtime-0M0OLCxq.js +16 -0
- package/dist/plugin-sdk/ssrf-cFtplYtS.js +202 -0
- package/dist/plugin-sdk/store-5nyxY3WU.js +81 -0
- package/dist/plugin-sdk/subagent-registry-runtime-DCtmDwna.js +52 -0
- package/dist/plugin-sdk/tables-C47P4GTN.js +55 -0
- package/dist/plugin-sdk/target-errors-Blia4S69.js +195 -0
- package/dist/plugin-sdk/thinking-Bo2eosVa.js +1206 -0
- package/dist/plugin-sdk/tokens-DgNRBwIg.js +52 -0
- package/dist/plugin-sdk/tool-images-Gk_-0y2N.js +274 -0
- package/dist/plugin-sdk/web-CVxZbXyH.js +56 -0
- package/dist/plugin-sdk/whatsapp-actions-Bw0H9g-n.js +80 -0
- package/dist/{pw-ai-GcYO6HPE.js → pw-ai-CmphSzHx.js} +1 -1
- package/dist/{slash-dispatch.runtime-Dh053pQK.js → slash-dispatch.runtime-131yup2e.js} +6 -6
- package/dist/{subagent-registry-runtime-DSi5mnCQ.js → subagent-registry-runtime-DbSf_Je6.js} +6 -6
- package/dist/{web-1hWJDzNA.js → web-MR9d7KyB.js} +6 -6
- package/package.json +1 -1
- package/scripts/create-instance.sh +1 -37
- package/scripts/npm_publish.sh +0 -65
- package/scripts/npm_publish_backup.sh +185 -0
- package/extensions/page-action-cache/dist/actions-executor.d.ts +0 -62
- package/extensions/page-action-cache/dist/actions-executor.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/actions-executor.js +0 -339
- package/extensions/page-action-cache/dist/actions-executor.js.map +0 -1
- package/extensions/page-action-cache/dist/cache-invalidator.d.ts +0 -70
- package/extensions/page-action-cache/dist/cache-invalidator.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/cache-invalidator.js +0 -212
- package/extensions/page-action-cache/dist/cache-invalidator.js.map +0 -1
- package/extensions/page-action-cache/dist/cache-store.d.ts +0 -80
- package/extensions/page-action-cache/dist/cache-store.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/cache-store.js +0 -361
- package/extensions/page-action-cache/dist/cache-store.js.map +0 -1
- package/extensions/page-action-cache/dist/cache-strategy.d.ts +0 -65
- package/extensions/page-action-cache/dist/cache-strategy.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/cache-strategy.js +0 -237
- package/extensions/page-action-cache/dist/cache-strategy.js.map +0 -1
- package/extensions/page-action-cache/dist/hooks-entry.d.ts +0 -29
- package/extensions/page-action-cache/dist/hooks-entry.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/hooks-entry.js +0 -83
- package/extensions/page-action-cache/dist/hooks-entry.js.map +0 -1
- package/extensions/page-action-cache/dist/hooks.d.ts +0 -10
- package/extensions/page-action-cache/dist/hooks.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/hooks.js +0 -277
- package/extensions/page-action-cache/dist/hooks.js.map +0 -1
- package/extensions/page-action-cache/dist/index.d.ts +0 -24
- package/extensions/page-action-cache/dist/index.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/index.js +0 -34
- package/extensions/page-action-cache/dist/index.js.map +0 -1
- package/extensions/page-action-cache/dist/scenario-recognizer.d.ts +0 -45
- package/extensions/page-action-cache/dist/scenario-recognizer.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/scenario-recognizer.js +0 -213
- package/extensions/page-action-cache/dist/scenario-recognizer.js.map +0 -1
- package/extensions/page-action-cache/dist/security-policy.d.ts +0 -62
- package/extensions/page-action-cache/dist/security-policy.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/security-policy.js +0 -219
- package/extensions/page-action-cache/dist/security-policy.js.map +0 -1
- package/extensions/page-action-cache/dist/tools.d.ts +0 -209
- package/extensions/page-action-cache/dist/tools.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/tools.js +0 -383
- package/extensions/page-action-cache/dist/tools.js.map +0 -1
- package/extensions/page-action-cache/dist/types.d.ts +0 -336
- package/extensions/page-action-cache/dist/types.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/types.js +0 -8
- package/extensions/page-action-cache/dist/types.js.map +0 -1
- package/extensions/page-action-cache/dist/ux-enhancer.d.ts +0 -60
- package/extensions/page-action-cache/dist/ux-enhancer.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/ux-enhancer.js +0 -218
- package/extensions/page-action-cache/dist/ux-enhancer.js.map +0 -1
- package/extensions/page-action-cache/dist/variable-resolver.d.ts +0 -28
- package/extensions/page-action-cache/dist/variable-resolver.d.ts.map +0 -1
- package/extensions/page-action-cache/dist/variable-resolver.js +0 -201
- package/extensions/page-action-cache/dist/variable-resolver.js.map +0 -1
- package/extensions/page-action-cache/docs/API.md +0 -555
- package/extensions/page-action-cache/docs/IMPLEMENTATION.md +0 -1792
- package/extensions/page-action-cache/docs/INTEGRATION.md +0 -387
- package/extensions/page-action-cache/docs/README.md +0 -183
- package/extensions/page-action-cache/index.ts +0 -118
- package/extensions/page-action-cache/node_modules/.bin/nlc +0 -21
- package/extensions/page-action-cache/node_modules/.bin/node-llama-cpp +0 -21
- package/extensions/page-action-cache/node_modules/.bin/openclaw +0 -21
- package/extensions/page-action-cache/node_modules/.bin/tsc +0 -21
- package/extensions/page-action-cache/node_modules/.bin/tsserver +0 -21
- package/extensions/page-action-cache/node_modules/.bin/vitest +0 -21
- package/extensions/page-action-cache/openclaw.plugin.json +0 -208
- package/extensions/page-action-cache/package.json +0 -74
- package/extensions/page-action-cache/scripts/npm_publish.sh +0 -80
- package/extensions/page-action-cache/skills/page-action-cache/SKILL.md +0 -216
- package/extensions/page-action-cache/src/actions-executor.ts +0 -441
- package/extensions/page-action-cache/src/cache-invalidator.ts +0 -271
- package/extensions/page-action-cache/src/cache-store.ts +0 -457
- package/extensions/page-action-cache/src/cache-strategy.ts +0 -327
- package/extensions/page-action-cache/src/hooks-entry.ts +0 -114
- package/extensions/page-action-cache/src/hooks.ts +0 -332
- package/extensions/page-action-cache/src/index.ts +0 -89
- package/extensions/page-action-cache/src/scenario-recognizer.ts +0 -259
- package/extensions/page-action-cache/src/security-policy.ts +0 -268
- package/extensions/page-action-cache/src/tools.ts +0 -437
- package/extensions/page-action-cache/src/types.ts +0 -482
- package/extensions/page-action-cache/src/ux-enhancer.ts +0 -266
- package/extensions/page-action-cache/src/variable-resolver.ts +0 -258
- package/extensions/page-action-cache/tests/actions-executor.test.ts +0 -424
- package/extensions/page-action-cache/tests/cache-store.test.ts +0 -267
- package/extensions/page-action-cache/tests/integration-test.ts +0 -62
- package/extensions/page-action-cache/tests/scenario-recognizer.test.ts +0 -140
- package/extensions/page-action-cache/tests/variable-resolver.test.ts +0 -187
- package/extensions/page-action-cache/tsconfig.json +0 -39
|
@@ -1,213 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Scenario Recognizer
|
|
3
|
-
* 场景识别器 - 多层匹配策略
|
|
4
|
-
*/
|
|
5
|
-
import { getCacheStore } from "./cache-store.js";
|
|
6
|
-
// ============================================================================
|
|
7
|
-
// 精确场景规则
|
|
8
|
-
// ============================================================================
|
|
9
|
-
const EXACT_SCENARIO_RULES = [
|
|
10
|
-
{
|
|
11
|
-
scenario: "login",
|
|
12
|
-
keywords: ["登录", "登陆", "注册", "进入", "login to", "sign in", "账号"],
|
|
13
|
-
urlPatterns: ["/login", "/signin", "/auth", "/account"],
|
|
14
|
-
priority: 100,
|
|
15
|
-
cacheLevel: "L3",
|
|
16
|
-
confidence: 90,
|
|
17
|
-
},
|
|
18
|
-
{
|
|
19
|
-
scenario: "logout",
|
|
20
|
-
keywords: ["退出", "登出", "注销", "sign out", "logout"],
|
|
21
|
-
urlPatterns: ["/logout", "/signout", "/signout"],
|
|
22
|
-
priority: 100,
|
|
23
|
-
cacheLevel: "L3",
|
|
24
|
-
confidence: 90,
|
|
25
|
-
},
|
|
26
|
-
{
|
|
27
|
-
scenario: "search",
|
|
28
|
-
keywords: ["搜索", "查找", "找", "search for", "查询"],
|
|
29
|
-
urlPatterns: ["/search", "/query", "/list"],
|
|
30
|
-
priority: 80,
|
|
31
|
-
cacheLevel: "L3",
|
|
32
|
-
confidence: 80,
|
|
33
|
-
},
|
|
34
|
-
{
|
|
35
|
-
scenario: "checkout",
|
|
36
|
-
keywords: ["结账", "结算", "支付", "收银", "买单", "checkout"],
|
|
37
|
-
urlPatterns: ["/checkout", "/cart", "/payment"],
|
|
38
|
-
priority: 90,
|
|
39
|
-
cacheLevel: "L3",
|
|
40
|
-
confidence: 85,
|
|
41
|
-
},
|
|
42
|
-
{
|
|
43
|
-
scenario: "settings",
|
|
44
|
-
keywords: ["设置", "配置", "修改", "编辑", "个人中心"],
|
|
45
|
-
urlPatterns: ["/settings", "/config", "/profile"],
|
|
46
|
-
priority: 75,
|
|
47
|
-
cacheLevel: "L3",
|
|
48
|
-
confidence: 75,
|
|
49
|
-
},
|
|
50
|
-
{
|
|
51
|
-
scenario: "form_fill",
|
|
52
|
-
keywords: ["填写", "填表单", "提交", "submit form"],
|
|
53
|
-
urlPatterns: [], // 不依赖 URL
|
|
54
|
-
priority: 70,
|
|
55
|
-
cacheLevel: "L2",
|
|
56
|
-
confidence: 70,
|
|
57
|
-
},
|
|
58
|
-
{
|
|
59
|
-
scenario: "navigate",
|
|
60
|
-
keywords: ["打开", "进入", "跳转", "go to", "open", "navigate"],
|
|
61
|
-
urlPatterns: [],
|
|
62
|
-
priority: 60,
|
|
63
|
-
cacheLevel: "L2",
|
|
64
|
-
confidence: 60,
|
|
65
|
-
},
|
|
66
|
-
{
|
|
67
|
-
scenario: "screenshot",
|
|
68
|
-
keywords: ["截图", "截图", "snapshot", "screenshot"],
|
|
69
|
-
urlPatterns: [],
|
|
70
|
-
priority: 50,
|
|
71
|
-
cacheLevel: "L1",
|
|
72
|
-
confidence: 50,
|
|
73
|
-
},
|
|
74
|
-
];
|
|
75
|
-
// ============================================================================
|
|
76
|
-
// Scenario Recognizer 类
|
|
77
|
-
// ============================================================================
|
|
78
|
-
/**
|
|
79
|
-
* 场景识别器
|
|
80
|
-
*/
|
|
81
|
-
export class ScenarioRecognizer {
|
|
82
|
-
cacheStore = getCacheStore();
|
|
83
|
-
/**
|
|
84
|
-
* 多层匹配策略
|
|
85
|
-
*/
|
|
86
|
-
async recognize(userInput, currentUrl) {
|
|
87
|
-
// 1. 精确规则匹配(高优先级,低误判)
|
|
88
|
-
const exactMatch = this.matchExactRules(userInput, currentUrl);
|
|
89
|
-
if (exactMatch && exactMatch.confidence >= 90) {
|
|
90
|
-
return exactMatch;
|
|
91
|
-
}
|
|
92
|
-
// 2. 语义理解(使用 LLM)
|
|
93
|
-
const llmMatch = await this.matchWithLLM(userInput, currentUrl);
|
|
94
|
-
if (llmMatch && llmMatch.confidence >= 70) {
|
|
95
|
-
return llmMatch;
|
|
96
|
-
}
|
|
97
|
-
// 3. 历史学习(相似输入匹配)
|
|
98
|
-
const historyMatch = this.matchHistory(userInput);
|
|
99
|
-
if (historyMatch && historyMatch.confidence >= 60) {
|
|
100
|
-
return historyMatch;
|
|
101
|
-
}
|
|
102
|
-
return null; // 都不匹配,交给 LLM 分析
|
|
103
|
-
}
|
|
104
|
-
/**
|
|
105
|
-
* 精确规则匹配
|
|
106
|
-
*/
|
|
107
|
-
matchExactRules(userInput, url) {
|
|
108
|
-
const normalizedInput = userInput.toLowerCase();
|
|
109
|
-
const normalizedUrl = url.toLowerCase();
|
|
110
|
-
for (const rule of EXACT_SCENARIO_RULES) {
|
|
111
|
-
// 关键词匹配
|
|
112
|
-
for (const keyword of rule.keywords) {
|
|
113
|
-
if (normalizedInput.includes(keyword.toLowerCase())) {
|
|
114
|
-
return {
|
|
115
|
-
scenario: rule.scenario,
|
|
116
|
-
confidence: rule.priority,
|
|
117
|
-
method: "keyword",
|
|
118
|
-
matchedPattern: keyword,
|
|
119
|
-
};
|
|
120
|
-
}
|
|
121
|
-
}
|
|
122
|
-
// URL 模式匹配
|
|
123
|
-
for (const pattern of rule.urlPatterns) {
|
|
124
|
-
if (normalizedUrl.includes(pattern.toLowerCase())) {
|
|
125
|
-
return {
|
|
126
|
-
scenario: rule.scenario,
|
|
127
|
-
confidence: rule.priority - 10, // 略低于纯关键词
|
|
128
|
-
method: "url",
|
|
129
|
-
matchedPattern: pattern,
|
|
130
|
-
};
|
|
131
|
-
}
|
|
132
|
-
}
|
|
133
|
-
}
|
|
134
|
-
return null;
|
|
135
|
-
}
|
|
136
|
-
/**
|
|
137
|
-
* LLM 分类
|
|
138
|
-
*/
|
|
139
|
-
async matchWithLLM(_userInput, _url) {
|
|
140
|
-
// TODO: 实现 LLM 分类
|
|
141
|
-
// 使用 OpenClaw 的 LLM 进行意图分类
|
|
142
|
-
// 返回场景类型和置信度
|
|
143
|
-
// 暂时返回 null,等待 LLM 集成
|
|
144
|
-
return null;
|
|
145
|
-
}
|
|
146
|
-
/**
|
|
147
|
-
* 历史匹配
|
|
148
|
-
*/
|
|
149
|
-
matchHistory(userInput) {
|
|
150
|
-
const stats = this.cacheStore.getStats();
|
|
151
|
-
// 如果命中率太低,不做历史匹配
|
|
152
|
-
if (stats.hitRate < 30) {
|
|
153
|
-
return null;
|
|
154
|
-
}
|
|
155
|
-
// 在历史记录中查找相似输入
|
|
156
|
-
// 计算 Jaccard 相似度
|
|
157
|
-
const scenarioMatch = this.cacheStore.getScenarioMatch("search"); // 示例
|
|
158
|
-
if (scenarioMatch) {
|
|
159
|
-
const similarity = this.calculateJaccardSimilarity(userInput, scenarioMatch.scenario);
|
|
160
|
-
if (similarity >= 0.6) {
|
|
161
|
-
return {
|
|
162
|
-
scenario: scenarioMatch.scenario,
|
|
163
|
-
confidence: Math.round(similarity * 100),
|
|
164
|
-
method: "history",
|
|
165
|
-
};
|
|
166
|
-
}
|
|
167
|
-
}
|
|
168
|
-
return null;
|
|
169
|
-
}
|
|
170
|
-
/**
|
|
171
|
-
* 计算 Jaccard 相似度
|
|
172
|
-
*/
|
|
173
|
-
calculateJaccardSimilarity(str1, str2) {
|
|
174
|
-
const set1 = new Set(str1.toLowerCase().split(/\s+/));
|
|
175
|
-
const set2 = new Set(str2.toLowerCase().split(/\s+/));
|
|
176
|
-
const intersection = new Set([...set1].filter((x) => set2.has(x)));
|
|
177
|
-
const union = new Set([...set1, ...set2]);
|
|
178
|
-
return intersection.size / union.size;
|
|
179
|
-
}
|
|
180
|
-
// -------------------------------------------------------------------------
|
|
181
|
-
// 辅助方法
|
|
182
|
-
// -------------------------------------------------------------------------
|
|
183
|
-
/**
|
|
184
|
-
* 获取所有规则
|
|
185
|
-
*/
|
|
186
|
-
getRules() {
|
|
187
|
-
return [...EXACT_SCENARIO_RULES];
|
|
188
|
-
}
|
|
189
|
-
/**
|
|
190
|
-
* 添加自定义规则
|
|
191
|
-
*/
|
|
192
|
-
addRule(rule) {
|
|
193
|
-
EXACT_SCENARIO_RULES.push(rule);
|
|
194
|
-
}
|
|
195
|
-
/**
|
|
196
|
-
* 获取建议的缓存层级
|
|
197
|
-
*/
|
|
198
|
-
getRecommendedCacheLevel(scenario) {
|
|
199
|
-
const rule = EXACT_SCENARIO_RULES.find((r) => r.scenario === scenario);
|
|
200
|
-
return rule?.cacheLevel || "L1";
|
|
201
|
-
}
|
|
202
|
-
}
|
|
203
|
-
// ============================================================================
|
|
204
|
-
// 单例
|
|
205
|
-
// ============================================================================
|
|
206
|
-
let scenarioRecognizerInstance = null;
|
|
207
|
-
export function getScenarioRecognizer() {
|
|
208
|
-
if (!scenarioRecognizerInstance) {
|
|
209
|
-
scenarioRecognizerInstance = new ScenarioRecognizer();
|
|
210
|
-
}
|
|
211
|
-
return scenarioRecognizerInstance;
|
|
212
|
-
}
|
|
213
|
-
//# sourceMappingURL=scenario-recognizer.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"scenario-recognizer.js","sourceRoot":"","sources":["../src/scenario-recognizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,oBAAoB,GAAmB;IAC3C;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;QAC/D,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvD,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC;QAClD,WAAW,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;QAChD,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC;QAC/C,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC3C,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;QACpD,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC;QAC/C,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;QAC1C,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC;QACjD,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC;QAC5C,WAAW,EAAE,EAAE,EAAE,UAAU;QAC3B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QACzD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;QAChD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;CACF,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,UAAU,GAAG,aAAa,EAAE,CAAC;IAErC;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,UAAkB;QAElB,sBAAsB;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,YAAY,IAAI,YAAY,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAClD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAChC,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,SAAiB,EACjB,GAAW;QAEX,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,QAAQ;YACR,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACpD,OAAO;wBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,QAAkB;wBACnC,MAAM,EAAE,SAAS;wBACjB,cAAc,EAAE,OAAO;qBACP,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,WAAW;YACX,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvC,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAClD,OAAO;wBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,EAAE,UAAU;wBAC1C,MAAM,EAAE,KAAK;wBACb,cAAc,EAAE,OAAO;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,UAAkB,EAClB,IAAY;QAEZ,kBAAkB;QAClB,2BAA2B;QAC3B,aAAa;QAEb,sBAAsB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,SAAiB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEzC,iBAAiB;QACjB,IAAI,KAAK,CAAC,OAAO,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe;QACf,iBAAiB;QACjB,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QAEvE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,IAAI,CAAC,0BAA0B,CAChD,SAAS,EACT,aAAa,CAAC,QAAQ,CACvB,CAAC;YAEF,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO;oBACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;oBACxC,MAAM,EAAE,SAAS;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,IAAY,EAAE,IAAY;QAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAE1C,OAAO,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAkB;QACxB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,QAAgB;QACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,OAAO,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;IAClC,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,IAAI,0BAA0B,GAA8B,IAAI,CAAC;AAEjE,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAChC,0BAA0B,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}
|
|
@@ -1,62 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Security Policy
|
|
3
|
-
* 安全策略 - 敏感变量检测、加密存储、访问控制
|
|
4
|
-
*/
|
|
5
|
-
import type { AtomicAction, PageActionCacheEntry, VariableMap } from "./types.js";
|
|
6
|
-
/**
|
|
7
|
-
* 安全策略
|
|
8
|
-
*/
|
|
9
|
-
export declare class SecurityPolicy {
|
|
10
|
-
private allowedUserIds;
|
|
11
|
-
constructor(allowedUserIds?: string[]);
|
|
12
|
-
/**
|
|
13
|
-
* 检查操作是否包含敏感变量
|
|
14
|
-
*/
|
|
15
|
-
isSensitiveAction(action: AtomicAction): boolean;
|
|
16
|
-
/**
|
|
17
|
-
* 检查变量映射是否包含敏感数据
|
|
18
|
-
*/
|
|
19
|
-
hasSensitiveData(variables: VariableMap): boolean;
|
|
20
|
-
/**
|
|
21
|
-
* 获取敏感字段列表
|
|
22
|
-
*/
|
|
23
|
-
getSensitiveFields(): string[];
|
|
24
|
-
/**
|
|
25
|
-
* 加密数据
|
|
26
|
-
*/
|
|
27
|
-
encrypt(data: string): string;
|
|
28
|
-
/**
|
|
29
|
-
* 解密数据
|
|
30
|
-
*/
|
|
31
|
-
decrypt(encrypted: string): string;
|
|
32
|
-
/**
|
|
33
|
-
* 加密缓存条目中的敏感变量
|
|
34
|
-
*/
|
|
35
|
-
encryptCacheEntry(entry: PageActionCacheEntry): PageActionCacheEntry;
|
|
36
|
-
/**
|
|
37
|
-
* 解密缓存条目中的敏感变量
|
|
38
|
-
*/
|
|
39
|
-
decryptCacheEntry(entry: PageActionCacheEntry): PageActionCacheEntry;
|
|
40
|
-
/**
|
|
41
|
-
* 检查是否允许访问
|
|
42
|
-
*/
|
|
43
|
-
canAccessCache(userId?: string): boolean;
|
|
44
|
-
/**
|
|
45
|
-
* 添加允许的用户 ID
|
|
46
|
-
*/
|
|
47
|
-
addAllowedUserId(userId: string): void;
|
|
48
|
-
/**
|
|
49
|
-
* 移除允许的用户 ID
|
|
50
|
-
*/
|
|
51
|
-
removeAllowedUserId(userId: string): void;
|
|
52
|
-
/**
|
|
53
|
-
* 脱敏处理(用于日志输出)
|
|
54
|
-
*/
|
|
55
|
-
sanitizeForLogging(data: any): any;
|
|
56
|
-
/**
|
|
57
|
-
* 脱敏处理操作列表
|
|
58
|
-
*/
|
|
59
|
-
sanitizeActions(actions: AtomicAction[]): AtomicAction[];
|
|
60
|
-
}
|
|
61
|
-
export declare function getSecurityPolicy(allowedUserIds?: string[]): SecurityPolicy;
|
|
62
|
-
//# sourceMappingURL=security-policy.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"security-policy.d.ts","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuBlF;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,cAAc,CAAc;gBAExB,cAAc,GAAE,MAAM,EAAO;IAQzC;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO;IAQhD;;OAEG;IACH,gBAAgB,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO;IASjD;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAQ9B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAoB7B;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IA4BlC;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB;IAoBpE;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB;IAwBpE;;OAEG;IACH,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAYxC;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAItC;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAQzC;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG;IAsBlC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE;CAYzD;AAQD,wBAAgB,iBAAiB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,cAAc,CAK3E"}
|
|
@@ -1,219 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Security Policy
|
|
3
|
-
* 安全策略 - 敏感变量检测、加密存储、访问控制
|
|
4
|
-
*/
|
|
5
|
-
import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
|
|
6
|
-
// ============================================================================
|
|
7
|
-
// 配置
|
|
8
|
-
// ============================================================================
|
|
9
|
-
const SENSITIVE_FIELDS = new Set([
|
|
10
|
-
"password",
|
|
11
|
-
"pwd",
|
|
12
|
-
"token",
|
|
13
|
-
"secret",
|
|
14
|
-
"key",
|
|
15
|
-
"code",
|
|
16
|
-
"otp",
|
|
17
|
-
]);
|
|
18
|
-
const ENCRYPTION_KEY = "default-key-change-in-production"; // 生产环境应从配置读取
|
|
19
|
-
const ENCRYPTION_ALGORITHM = "aes-256-gcm";
|
|
20
|
-
// ============================================================================
|
|
21
|
-
// Security Policy 类
|
|
22
|
-
// ============================================================================
|
|
23
|
-
/**
|
|
24
|
-
* 安全策略
|
|
25
|
-
*/
|
|
26
|
-
export class SecurityPolicy {
|
|
27
|
-
allowedUserIds;
|
|
28
|
-
constructor(allowedUserIds = []) {
|
|
29
|
-
this.allowedUserIds = new Set(allowedUserIds);
|
|
30
|
-
}
|
|
31
|
-
// -------------------------------------------------------------------------
|
|
32
|
-
// 敏感字段检测
|
|
33
|
-
// -------------------------------------------------------------------------
|
|
34
|
-
/**
|
|
35
|
-
* 检查操作是否包含敏感变量
|
|
36
|
-
*/
|
|
37
|
-
isSensitiveAction(action) {
|
|
38
|
-
if (!action.variable) {
|
|
39
|
-
return false;
|
|
40
|
-
}
|
|
41
|
-
return SENSITIVE_FIELDS.has(action.variable.toLowerCase());
|
|
42
|
-
}
|
|
43
|
-
/**
|
|
44
|
-
* 检查变量映射是否包含敏感数据
|
|
45
|
-
*/
|
|
46
|
-
hasSensitiveData(variables) {
|
|
47
|
-
for (const key of Object.keys(variables)) {
|
|
48
|
-
if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
|
|
49
|
-
return true;
|
|
50
|
-
}
|
|
51
|
-
}
|
|
52
|
-
return false;
|
|
53
|
-
}
|
|
54
|
-
/**
|
|
55
|
-
* 获取敏感字段列表
|
|
56
|
-
*/
|
|
57
|
-
getSensitiveFields() {
|
|
58
|
-
return Array.from(SENSITIVE_FIELDS);
|
|
59
|
-
}
|
|
60
|
-
// -------------------------------------------------------------------------
|
|
61
|
-
// 加密/解密
|
|
62
|
-
// -------------------------------------------------------------------------
|
|
63
|
-
/**
|
|
64
|
-
* 加密数据
|
|
65
|
-
*/
|
|
66
|
-
encrypt(data) {
|
|
67
|
-
try {
|
|
68
|
-
const iv = randomBytes(16);
|
|
69
|
-
const cipher = createCipheriv(ENCRYPTION_ALGORITHM, Buffer.from(ENCRYPTION_KEY), iv);
|
|
70
|
-
let encrypted = cipher.update(data, "utf8", "hex");
|
|
71
|
-
encrypted += cipher.final("hex");
|
|
72
|
-
const authTag = cipher.getAuthTag();
|
|
73
|
-
return `${iv.toString("hex")}:${authTag.toString("hex")}:${encrypted}`;
|
|
74
|
-
}
|
|
75
|
-
catch (error) {
|
|
76
|
-
console.error("[SecurityPolicy] Encryption failed:", error);
|
|
77
|
-
return data; // 失败时返回原数据
|
|
78
|
-
}
|
|
79
|
-
}
|
|
80
|
-
/**
|
|
81
|
-
* 解密数据
|
|
82
|
-
*/
|
|
83
|
-
decrypt(encrypted) {
|
|
84
|
-
try {
|
|
85
|
-
const [ivHex, authTagHex, data] = encrypted.split(":");
|
|
86
|
-
if (!ivHex || !authTagHex || !data) {
|
|
87
|
-
return encrypted; // 格式错误,返回原数据
|
|
88
|
-
}
|
|
89
|
-
const iv = Buffer.from(ivHex, "hex");
|
|
90
|
-
const authTag = Buffer.from(authTagHex, "hex");
|
|
91
|
-
const decipher = createDecipheriv(ENCRYPTION_ALGORITHM, Buffer.from(ENCRYPTION_KEY), iv);
|
|
92
|
-
decipher.setAuthTag(authTag);
|
|
93
|
-
let decrypted = decipher.update(data, "hex", "utf8");
|
|
94
|
-
decrypted += decipher.final("utf8");
|
|
95
|
-
return decrypted;
|
|
96
|
-
}
|
|
97
|
-
catch (error) {
|
|
98
|
-
console.error("[SecurityPolicy] Decryption failed:", error);
|
|
99
|
-
return encrypted; // 失败时返回原数据
|
|
100
|
-
}
|
|
101
|
-
}
|
|
102
|
-
/**
|
|
103
|
-
* 加密缓存条目中的敏感变量
|
|
104
|
-
*/
|
|
105
|
-
encryptCacheEntry(entry) {
|
|
106
|
-
if (!entry.variables) {
|
|
107
|
-
return entry;
|
|
108
|
-
}
|
|
109
|
-
const encrypted = { ...entry };
|
|
110
|
-
encrypted.variables = {};
|
|
111
|
-
for (const [key, value] of Object.entries(entry.variables)) {
|
|
112
|
-
if (SENSITIVE_FIELDS.has(key.toLowerCase()) && typeof value === "string") {
|
|
113
|
-
// 敏感字段加密
|
|
114
|
-
encrypted.variables[key] = this.encrypt(value);
|
|
115
|
-
}
|
|
116
|
-
else {
|
|
117
|
-
encrypted.variables[key] = value;
|
|
118
|
-
}
|
|
119
|
-
}
|
|
120
|
-
return encrypted;
|
|
121
|
-
}
|
|
122
|
-
/**
|
|
123
|
-
* 解密缓存条目中的敏感变量
|
|
124
|
-
*/
|
|
125
|
-
decryptCacheEntry(entry) {
|
|
126
|
-
if (!entry.variables) {
|
|
127
|
-
return entry;
|
|
128
|
-
}
|
|
129
|
-
const decrypted = { ...entry };
|
|
130
|
-
decrypted.variables = {};
|
|
131
|
-
for (const [key, value] of Object.entries(entry.variables)) {
|
|
132
|
-
if (SENSITIVE_FIELDS.has(key.toLowerCase()) && typeof value === "string") {
|
|
133
|
-
// 敏感字段解密
|
|
134
|
-
decrypted.variables[key] = this.decrypt(value);
|
|
135
|
-
}
|
|
136
|
-
else {
|
|
137
|
-
decrypted.variables[key] = value;
|
|
138
|
-
}
|
|
139
|
-
}
|
|
140
|
-
return decrypted;
|
|
141
|
-
}
|
|
142
|
-
// -------------------------------------------------------------------------
|
|
143
|
-
// 访问控制
|
|
144
|
-
// -------------------------------------------------------------------------
|
|
145
|
-
/**
|
|
146
|
-
* 检查是否允许访问
|
|
147
|
-
*/
|
|
148
|
-
canAccessCache(userId) {
|
|
149
|
-
if (this.allowedUserIds.size === 0) {
|
|
150
|
-
return true; // 没有限制,允许所有用户
|
|
151
|
-
}
|
|
152
|
-
if (!userId) {
|
|
153
|
-
return false; // 没有用户 ID,拒绝访问
|
|
154
|
-
}
|
|
155
|
-
return this.allowedUserIds.has(userId);
|
|
156
|
-
}
|
|
157
|
-
/**
|
|
158
|
-
* 添加允许的用户 ID
|
|
159
|
-
*/
|
|
160
|
-
addAllowedUserId(userId) {
|
|
161
|
-
this.allowedUserIds.add(userId);
|
|
162
|
-
}
|
|
163
|
-
/**
|
|
164
|
-
* 移除允许的用户 ID
|
|
165
|
-
*/
|
|
166
|
-
removeAllowedUserId(userId) {
|
|
167
|
-
this.allowedUserIds.delete(userId);
|
|
168
|
-
}
|
|
169
|
-
// -------------------------------------------------------------------------
|
|
170
|
-
// 日志脱敏
|
|
171
|
-
// -------------------------------------------------------------------------
|
|
172
|
-
/**
|
|
173
|
-
* 脱敏处理(用于日志输出)
|
|
174
|
-
*/
|
|
175
|
-
sanitizeForLogging(data) {
|
|
176
|
-
if (typeof data !== "object" || data === null) {
|
|
177
|
-
return data;
|
|
178
|
-
}
|
|
179
|
-
const sanitized = Array.isArray(data) ? [] : {};
|
|
180
|
-
for (const [key, value] of Object.entries(data)) {
|
|
181
|
-
if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
|
|
182
|
-
// 敏感字段脱敏
|
|
183
|
-
sanitized[key] = "***REDACTED***";
|
|
184
|
-
}
|
|
185
|
-
else if (typeof value === "object") {
|
|
186
|
-
// 递归处理嵌套对象
|
|
187
|
-
sanitized[key] = this.sanitizeForLogging(value);
|
|
188
|
-
}
|
|
189
|
-
else {
|
|
190
|
-
sanitized[key] = value;
|
|
191
|
-
}
|
|
192
|
-
}
|
|
193
|
-
return sanitized;
|
|
194
|
-
}
|
|
195
|
-
/**
|
|
196
|
-
* 脱敏处理操作列表
|
|
197
|
-
*/
|
|
198
|
-
sanitizeActions(actions) {
|
|
199
|
-
return actions.map((action) => {
|
|
200
|
-
const sanitized = { ...action };
|
|
201
|
-
// 脱敏操作中的敏感文本
|
|
202
|
-
if (sanitized.type === "type" && this.isSensitiveAction(action)) {
|
|
203
|
-
sanitized.text = "***REDACTED***";
|
|
204
|
-
}
|
|
205
|
-
return sanitized;
|
|
206
|
-
});
|
|
207
|
-
}
|
|
208
|
-
}
|
|
209
|
-
// ============================================================================
|
|
210
|
-
// 单例
|
|
211
|
-
// ============================================================================
|
|
212
|
-
let securityPolicyInstance = null;
|
|
213
|
-
export function getSecurityPolicy(allowedUserIds) {
|
|
214
|
-
if (!securityPolicyInstance) {
|
|
215
|
-
securityPolicyInstance = new SecurityPolicy(allowedUserIds);
|
|
216
|
-
}
|
|
217
|
-
return securityPolicyInstance;
|
|
218
|
-
}
|
|
219
|
-
//# sourceMappingURL=security-policy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"security-policy.js","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG5E,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,UAAU;IACV,KAAK;IACL,OAAO;IACP,QAAQ;IACR,KAAK;IACL,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,kCAAkC,CAAC,CAAC,aAAa;AACxE,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAE3C,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,cAAc,CAAc;IAEpC,YAAY,iBAA2B,EAAE;QACvC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAE5E;;OAEG;IACH,iBAAiB,CAAC,MAAoB;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAsB;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,QAAQ;IACR,4EAA4E;IAE5E;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,cAAc,CAC3B,oBAAoB,EACpB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAC3B,EAAE,CACH,CAAC;YAEF,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,CAAC,WAAW;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEvD,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,CAAC,aAAa;YACjC,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,oBAAoB,EACpB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAC3B,EAAE,CACH,CAAC;YAEF,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACrD,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC,CAAC,WAAW;QAC/B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAA2B;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,SAAS,CAAC,SAAS,GAAG,EAAiB,CAAC;QAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzE,SAAS;gBACR,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACL,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAA2B;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,SAAS,CAAC,SAAS,GAAG,EAAiB,CAAC;QAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzE,SAAS;gBACR,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACL,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,cAAc,CAAC,MAAe;QAC5B,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC,cAAc;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,CAAC,eAAe;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAc;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAc;QAChC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,kBAAkB,CAAC,IAAS;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAQ,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,SAAS;gBACT,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,WAAW;gBACX,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAuB;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAEhC,aAAa;YACb,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,SAAiB,CAAC,IAAI,GAAG,gBAAgB,CAAC;YAC7C,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,IAAI,sBAAsB,GAA0B,IAAI,CAAC;AAEzD,MAAM,UAAU,iBAAiB,CAAC,cAAyB;IACzD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC"}
|