page-action-cache 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/actions-executor.d.ts +62 -0
- package/dist/actions-executor.d.ts.map +1 -0
- package/dist/actions-executor.js +339 -0
- package/dist/actions-executor.js.map +1 -0
- package/dist/cache-invalidator.d.ts +70 -0
- package/dist/cache-invalidator.d.ts.map +1 -0
- package/dist/cache-invalidator.js +212 -0
- package/dist/cache-invalidator.js.map +1 -0
- package/dist/cache-store.d.ts +80 -0
- package/dist/cache-store.d.ts.map +1 -0
- package/dist/cache-store.js +361 -0
- package/dist/cache-store.js.map +1 -0
- package/dist/cache-strategy.d.ts +65 -0
- package/dist/cache-strategy.d.ts.map +1 -0
- package/dist/cache-strategy.js +237 -0
- package/dist/cache-strategy.js.map +1 -0
- package/dist/hooks-entry.d.ts +18 -0
- package/dist/hooks-entry.d.ts.map +1 -0
- package/dist/hooks-entry.js +27 -0
- package/dist/hooks-entry.js.map +1 -0
- package/dist/hooks.d.ts +10 -0
- package/dist/hooks.d.ts.map +1 -0
- package/dist/hooks.js +277 -0
- package/dist/hooks.js.map +1 -0
- package/dist/index.d.ts +24 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +34 -0
- package/dist/index.js.map +1 -0
- package/dist/scenario-recognizer.d.ts +45 -0
- package/dist/scenario-recognizer.d.ts.map +1 -0
- package/dist/scenario-recognizer.js +213 -0
- package/dist/scenario-recognizer.js.map +1 -0
- package/dist/security-policy.d.ts +62 -0
- package/dist/security-policy.d.ts.map +1 -0
- package/dist/security-policy.js +219 -0
- package/dist/security-policy.js.map +1 -0
- package/dist/tools.d.ts +209 -0
- package/dist/tools.d.ts.map +1 -0
- package/dist/tools.js +383 -0
- package/dist/tools.js.map +1 -0
- package/dist/types.d.ts +336 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +8 -0
- package/dist/types.js.map +1 -0
- package/dist/ux-enhancer.d.ts +60 -0
- package/dist/ux-enhancer.d.ts.map +1 -0
- package/dist/ux-enhancer.js +218 -0
- package/dist/ux-enhancer.js.map +1 -0
- package/dist/variable-resolver.d.ts +28 -0
- package/dist/variable-resolver.d.ts.map +1 -0
- package/dist/variable-resolver.js +201 -0
- package/dist/variable-resolver.js.map +1 -0
- package/docs/API.md +555 -0
- package/docs/IMPLEMENTATION.md +1792 -0
- package/docs/INTEGRATION.md +387 -0
- package/docs/README.md +183 -0
- package/index.ts +118 -0
- package/openclaw.plugin.json +208 -0
- package/package.json +76 -0
- package/skills/page-action-cache/SKILL.md +216 -0
- package/src/actions-executor.ts +441 -0
- package/src/cache-invalidator.ts +271 -0
- package/src/cache-store.ts +457 -0
- package/src/cache-strategy.ts +327 -0
- package/src/hooks-entry.ts +114 -0
- package/src/hooks.ts +332 -0
- package/src/index.ts +104 -0
- package/src/scenario-recognizer.ts +259 -0
- package/src/security-policy.ts +268 -0
- package/src/tools.ts +437 -0
- package/src/types.ts +482 -0
- package/src/ux-enhancer.ts +266 -0
- package/src/variable-resolver.ts +258 -0
package/dist/index.d.ts
ADDED
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Page Action Cache Extension - Main Exports
|
|
3
|
+
* 页面操作缓存扩展 - 主要导出
|
|
4
|
+
*/
|
|
5
|
+
export { getCacheStore } from "./cache-store.js";
|
|
6
|
+
export { getScenarioRecognizer } from "./scenario-recognizer.js";
|
|
7
|
+
export { getVariableResolver } from "./variable-resolver.js";
|
|
8
|
+
export { getActionsExecutor } from "./actions-executor.js";
|
|
9
|
+
export { getSecurityPolicy } from "./security-policy.js";
|
|
10
|
+
export { getCacheInvalidator } from "./cache-invalidator.js";
|
|
11
|
+
export { getUXEnhancer } from "./ux-enhancer.js";
|
|
12
|
+
export type { AtomicAction, Action, AtomicActionType, NavigateAction, ClickAction, TypeAction, PressAction, HoverAction, ScreenshotAction, EvaluateAction, CompositeAction, PageViewport, VariableMap, CacheLevel, PageType, CacheSource, DOMHashFeatures, PageChangeDetection, PageActionCacheEntry, ScenarioRule, ScenarioMatch, CacheStats, CacheConfig, ExecutionResult, PwAi, } from "./types.js";
|
|
13
|
+
export { registerPageActionCacheHooks } from "./hooks.js";
|
|
14
|
+
export { initializePageActionCache, pageActionCacheMeta } from "./hooks-entry.js";
|
|
15
|
+
export { createExecuteCachedTool, executeCached, } from "./tools.js";
|
|
16
|
+
export { createCacheListTool, cacheList, } from "./tools.js";
|
|
17
|
+
export { createCacheStatsTool, cacheStats, } from "./tools.js";
|
|
18
|
+
export { createCacheClearTool, cacheClear, } from "./tools.js";
|
|
19
|
+
export { createScenarioListTool, scenarioList, } from "./tools.js";
|
|
20
|
+
export { createForceRefreshTool, forceRefresh, } from "./tools.js";
|
|
21
|
+
export { CACHE_TOOLS } from "./tools.js";
|
|
22
|
+
export { AutoCacheStrategy, L3OnlyCacheStrategy, L2OnlyCacheStrategy, L1OnlyCacheStrategy, } from "./cache-strategy.js";
|
|
23
|
+
export type { CacheStrategy } from "./cache-strategy.js";
|
|
24
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,YAAY,EACV,YAAY,EACZ,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,WAAW,EACX,eAAe,EACf,IAAI,GACL,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAMlF,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,SAAS,GACV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAMzC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC"}
|
package/dist/index.js
ADDED
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Page Action Cache Extension - Main Exports
|
|
3
|
+
* 页面操作缓存扩展 - 主要导出
|
|
4
|
+
*/
|
|
5
|
+
// ============================================================================
|
|
6
|
+
// 核心模块导出
|
|
7
|
+
// ============================================================================
|
|
8
|
+
export { getCacheStore } from "./cache-store.js";
|
|
9
|
+
export { getScenarioRecognizer } from "./scenario-recognizer.js";
|
|
10
|
+
export { getVariableResolver } from "./variable-resolver.js";
|
|
11
|
+
export { getActionsExecutor } from "./actions-executor.js";
|
|
12
|
+
export { getSecurityPolicy } from "./security-policy.js";
|
|
13
|
+
export { getCacheInvalidator } from "./cache-invalidator.js";
|
|
14
|
+
export { getUXEnhancer } from "./ux-enhancer.js";
|
|
15
|
+
// ============================================================================
|
|
16
|
+
// Hooks 导出
|
|
17
|
+
// ============================================================================
|
|
18
|
+
export { registerPageActionCacheHooks } from "./hooks.js";
|
|
19
|
+
export { initializePageActionCache, pageActionCacheMeta } from "./hooks-entry.js";
|
|
20
|
+
// ============================================================================
|
|
21
|
+
// Tools 导出
|
|
22
|
+
// ============================================================================
|
|
23
|
+
export { createExecuteCachedTool, executeCached, } from "./tools.js";
|
|
24
|
+
export { createCacheListTool, cacheList, } from "./tools.js";
|
|
25
|
+
export { createCacheStatsTool, cacheStats, } from "./tools.js";
|
|
26
|
+
export { createCacheClearTool, cacheClear, } from "./tools.js";
|
|
27
|
+
export { createScenarioListTool, scenarioList, } from "./tools.js";
|
|
28
|
+
export { createForceRefreshTool, forceRefresh, } from "./tools.js";
|
|
29
|
+
export { CACHE_TOOLS } from "./tools.js";
|
|
30
|
+
// ============================================================================
|
|
31
|
+
// Cache Strategy 导出
|
|
32
|
+
// ============================================================================
|
|
33
|
+
export { AutoCacheStrategy, L3OnlyCacheStrategy, L2OnlyCacheStrategy, L1OnlyCacheStrategy, } from "./cache-strategy.js";
|
|
34
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAkCjD,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAElF,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,SAAS,GACV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC"}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Scenario Recognizer
|
|
3
|
+
* 场景识别器 - 多层匹配策略
|
|
4
|
+
*/
|
|
5
|
+
import type { ScenarioRule, ScenarioMatch } from "./types.js";
|
|
6
|
+
/**
|
|
7
|
+
* 场景识别器
|
|
8
|
+
*/
|
|
9
|
+
export declare class ScenarioRecognizer {
|
|
10
|
+
private cacheStore;
|
|
11
|
+
/**
|
|
12
|
+
* 多层匹配策略
|
|
13
|
+
*/
|
|
14
|
+
recognize(userInput: string, currentUrl: string): Promise<ScenarioMatch | null>;
|
|
15
|
+
/**
|
|
16
|
+
* 精确规则匹配
|
|
17
|
+
*/
|
|
18
|
+
private matchExactRules;
|
|
19
|
+
/**
|
|
20
|
+
* LLM 分类
|
|
21
|
+
*/
|
|
22
|
+
private matchWithLLM;
|
|
23
|
+
/**
|
|
24
|
+
* 历史匹配
|
|
25
|
+
*/
|
|
26
|
+
private matchHistory;
|
|
27
|
+
/**
|
|
28
|
+
* 计算 Jaccard 相似度
|
|
29
|
+
*/
|
|
30
|
+
private calculateJaccardSimilarity;
|
|
31
|
+
/**
|
|
32
|
+
* 获取所有规则
|
|
33
|
+
*/
|
|
34
|
+
getRules(): ScenarioRule[];
|
|
35
|
+
/**
|
|
36
|
+
* 添加自定义规则
|
|
37
|
+
*/
|
|
38
|
+
addRule(rule: ScenarioRule): void;
|
|
39
|
+
/**
|
|
40
|
+
* 获取建议的缓存层级
|
|
41
|
+
*/
|
|
42
|
+
getRecommendedCacheLevel(scenario: string): "L3" | "L2" | "L1";
|
|
43
|
+
}
|
|
44
|
+
export declare function getScenarioRecognizer(): ScenarioRecognizer;
|
|
45
|
+
//# sourceMappingURL=scenario-recognizer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scenario-recognizer.d.ts","sourceRoot":"","sources":["../src/scenario-recognizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACd,MAAM,YAAY,CAAC;AA8EpB;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,UAAU,CAAmB;IAErC;;OAEG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAsBhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAoCvB;;OAEG;YACW,YAAY;IAY1B;;OAEG;IACH,OAAO,CAAC,YAAY;IA8BpB;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAclC;;OAEG;IACH,QAAQ,IAAI,YAAY,EAAE;IAI1B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAIjC;;OAEG;IACH,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;CAI/D;AAQD,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D"}
|
|
@@ -0,0 +1,213 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Scenario Recognizer
|
|
3
|
+
* 场景识别器 - 多层匹配策略
|
|
4
|
+
*/
|
|
5
|
+
import { getCacheStore } from "./cache-store.js";
|
|
6
|
+
// ============================================================================
|
|
7
|
+
// 精确场景规则
|
|
8
|
+
// ============================================================================
|
|
9
|
+
const EXACT_SCENARIO_RULES = [
|
|
10
|
+
{
|
|
11
|
+
scenario: "login",
|
|
12
|
+
keywords: ["登录", "登陆", "注册", "进入", "login to", "sign in", "账号"],
|
|
13
|
+
urlPatterns: ["/login", "/signin", "/auth", "/account"],
|
|
14
|
+
priority: 100,
|
|
15
|
+
cacheLevel: "L3",
|
|
16
|
+
confidence: 90,
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
scenario: "logout",
|
|
20
|
+
keywords: ["退出", "登出", "注销", "sign out", "logout"],
|
|
21
|
+
urlPatterns: ["/logout", "/signout", "/signout"],
|
|
22
|
+
priority: 100,
|
|
23
|
+
cacheLevel: "L3",
|
|
24
|
+
confidence: 90,
|
|
25
|
+
},
|
|
26
|
+
{
|
|
27
|
+
scenario: "search",
|
|
28
|
+
keywords: ["搜索", "查找", "找", "search for", "查询"],
|
|
29
|
+
urlPatterns: ["/search", "/query", "/list"],
|
|
30
|
+
priority: 80,
|
|
31
|
+
cacheLevel: "L3",
|
|
32
|
+
confidence: 80,
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
scenario: "checkout",
|
|
36
|
+
keywords: ["结账", "结算", "支付", "收银", "买单", "checkout"],
|
|
37
|
+
urlPatterns: ["/checkout", "/cart", "/payment"],
|
|
38
|
+
priority: 90,
|
|
39
|
+
cacheLevel: "L3",
|
|
40
|
+
confidence: 85,
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
scenario: "settings",
|
|
44
|
+
keywords: ["设置", "配置", "修改", "编辑", "个人中心"],
|
|
45
|
+
urlPatterns: ["/settings", "/config", "/profile"],
|
|
46
|
+
priority: 75,
|
|
47
|
+
cacheLevel: "L3",
|
|
48
|
+
confidence: 75,
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
scenario: "form_fill",
|
|
52
|
+
keywords: ["填写", "填表单", "提交", "submit form"],
|
|
53
|
+
urlPatterns: [], // 不依赖 URL
|
|
54
|
+
priority: 70,
|
|
55
|
+
cacheLevel: "L2",
|
|
56
|
+
confidence: 70,
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
scenario: "navigate",
|
|
60
|
+
keywords: ["打开", "进入", "跳转", "go to", "open", "navigate"],
|
|
61
|
+
urlPatterns: [],
|
|
62
|
+
priority: 60,
|
|
63
|
+
cacheLevel: "L2",
|
|
64
|
+
confidence: 60,
|
|
65
|
+
},
|
|
66
|
+
{
|
|
67
|
+
scenario: "screenshot",
|
|
68
|
+
keywords: ["截图", "截图", "snapshot", "screenshot"],
|
|
69
|
+
urlPatterns: [],
|
|
70
|
+
priority: 50,
|
|
71
|
+
cacheLevel: "L1",
|
|
72
|
+
confidence: 50,
|
|
73
|
+
},
|
|
74
|
+
];
|
|
75
|
+
// ============================================================================
|
|
76
|
+
// Scenario Recognizer 类
|
|
77
|
+
// ============================================================================
|
|
78
|
+
/**
|
|
79
|
+
* 场景识别器
|
|
80
|
+
*/
|
|
81
|
+
export class ScenarioRecognizer {
|
|
82
|
+
cacheStore = getCacheStore();
|
|
83
|
+
/**
|
|
84
|
+
* 多层匹配策略
|
|
85
|
+
*/
|
|
86
|
+
async recognize(userInput, currentUrl) {
|
|
87
|
+
// 1. 精确规则匹配(高优先级,低误判)
|
|
88
|
+
const exactMatch = this.matchExactRules(userInput, currentUrl);
|
|
89
|
+
if (exactMatch && exactMatch.confidence >= 90) {
|
|
90
|
+
return exactMatch;
|
|
91
|
+
}
|
|
92
|
+
// 2. 语义理解(使用 LLM)
|
|
93
|
+
const llmMatch = await this.matchWithLLM(userInput, currentUrl);
|
|
94
|
+
if (llmMatch && llmMatch.confidence >= 70) {
|
|
95
|
+
return llmMatch;
|
|
96
|
+
}
|
|
97
|
+
// 3. 历史学习(相似输入匹配)
|
|
98
|
+
const historyMatch = this.matchHistory(userInput);
|
|
99
|
+
if (historyMatch && historyMatch.confidence >= 60) {
|
|
100
|
+
return historyMatch;
|
|
101
|
+
}
|
|
102
|
+
return null; // 都不匹配,交给 LLM 分析
|
|
103
|
+
}
|
|
104
|
+
/**
|
|
105
|
+
* 精确规则匹配
|
|
106
|
+
*/
|
|
107
|
+
matchExactRules(userInput, url) {
|
|
108
|
+
const normalizedInput = userInput.toLowerCase();
|
|
109
|
+
const normalizedUrl = url.toLowerCase();
|
|
110
|
+
for (const rule of EXACT_SCENARIO_RULES) {
|
|
111
|
+
// 关键词匹配
|
|
112
|
+
for (const keyword of rule.keywords) {
|
|
113
|
+
if (normalizedInput.includes(keyword.toLowerCase())) {
|
|
114
|
+
return {
|
|
115
|
+
scenario: rule.scenario,
|
|
116
|
+
confidence: rule.priority,
|
|
117
|
+
method: "keyword",
|
|
118
|
+
matchedPattern: keyword,
|
|
119
|
+
};
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
// URL 模式匹配
|
|
123
|
+
for (const pattern of rule.urlPatterns) {
|
|
124
|
+
if (normalizedUrl.includes(pattern.toLowerCase())) {
|
|
125
|
+
return {
|
|
126
|
+
scenario: rule.scenario,
|
|
127
|
+
confidence: rule.priority - 10, // 略低于纯关键词
|
|
128
|
+
method: "url",
|
|
129
|
+
matchedPattern: pattern,
|
|
130
|
+
};
|
|
131
|
+
}
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
return null;
|
|
135
|
+
}
|
|
136
|
+
/**
|
|
137
|
+
* LLM 分类
|
|
138
|
+
*/
|
|
139
|
+
async matchWithLLM(_userInput, _url) {
|
|
140
|
+
// TODO: 实现 LLM 分类
|
|
141
|
+
// 使用 OpenClaw 的 LLM 进行意图分类
|
|
142
|
+
// 返回场景类型和置信度
|
|
143
|
+
// 暂时返回 null,等待 LLM 集成
|
|
144
|
+
return null;
|
|
145
|
+
}
|
|
146
|
+
/**
|
|
147
|
+
* 历史匹配
|
|
148
|
+
*/
|
|
149
|
+
matchHistory(userInput) {
|
|
150
|
+
const stats = this.cacheStore.getStats();
|
|
151
|
+
// 如果命中率太低,不做历史匹配
|
|
152
|
+
if (stats.hitRate < 30) {
|
|
153
|
+
return null;
|
|
154
|
+
}
|
|
155
|
+
// 在历史记录中查找相似输入
|
|
156
|
+
// 计算 Jaccard 相似度
|
|
157
|
+
const scenarioMatch = this.cacheStore.getScenarioMatch("search"); // 示例
|
|
158
|
+
if (scenarioMatch) {
|
|
159
|
+
const similarity = this.calculateJaccardSimilarity(userInput, scenarioMatch.scenario);
|
|
160
|
+
if (similarity >= 0.6) {
|
|
161
|
+
return {
|
|
162
|
+
scenario: scenarioMatch.scenario,
|
|
163
|
+
confidence: Math.round(similarity * 100),
|
|
164
|
+
method: "history",
|
|
165
|
+
};
|
|
166
|
+
}
|
|
167
|
+
}
|
|
168
|
+
return null;
|
|
169
|
+
}
|
|
170
|
+
/**
|
|
171
|
+
* 计算 Jaccard 相似度
|
|
172
|
+
*/
|
|
173
|
+
calculateJaccardSimilarity(str1, str2) {
|
|
174
|
+
const set1 = new Set(str1.toLowerCase().split(/\s+/));
|
|
175
|
+
const set2 = new Set(str2.toLowerCase().split(/\s+/));
|
|
176
|
+
const intersection = new Set([...set1].filter((x) => set2.has(x)));
|
|
177
|
+
const union = new Set([...set1, ...set2]);
|
|
178
|
+
return intersection.size / union.size;
|
|
179
|
+
}
|
|
180
|
+
// -------------------------------------------------------------------------
|
|
181
|
+
// 辅助方法
|
|
182
|
+
// -------------------------------------------------------------------------
|
|
183
|
+
/**
|
|
184
|
+
* 获取所有规则
|
|
185
|
+
*/
|
|
186
|
+
getRules() {
|
|
187
|
+
return [...EXACT_SCENARIO_RULES];
|
|
188
|
+
}
|
|
189
|
+
/**
|
|
190
|
+
* 添加自定义规则
|
|
191
|
+
*/
|
|
192
|
+
addRule(rule) {
|
|
193
|
+
EXACT_SCENARIO_RULES.push(rule);
|
|
194
|
+
}
|
|
195
|
+
/**
|
|
196
|
+
* 获取建议的缓存层级
|
|
197
|
+
*/
|
|
198
|
+
getRecommendedCacheLevel(scenario) {
|
|
199
|
+
const rule = EXACT_SCENARIO_RULES.find((r) => r.scenario === scenario);
|
|
200
|
+
return rule?.cacheLevel || "L1";
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
// ============================================================================
|
|
204
|
+
// 单例
|
|
205
|
+
// ============================================================================
|
|
206
|
+
let scenarioRecognizerInstance = null;
|
|
207
|
+
export function getScenarioRecognizer() {
|
|
208
|
+
if (!scenarioRecognizerInstance) {
|
|
209
|
+
scenarioRecognizerInstance = new ScenarioRecognizer();
|
|
210
|
+
}
|
|
211
|
+
return scenarioRecognizerInstance;
|
|
212
|
+
}
|
|
213
|
+
//# sourceMappingURL=scenario-recognizer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scenario-recognizer.js","sourceRoot":"","sources":["../src/scenario-recognizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,oBAAoB,GAAmB;IAC3C;QACE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;QAC/D,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvD,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC;QAClD,WAAW,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;QAChD,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC;QAC/C,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC3C,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;QACpD,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC;QAC/C,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;QAC1C,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC;QACjD,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC;QAC5C,WAAW,EAAE,EAAE,EAAE,UAAU;QAC3B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QACzD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;QAChD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,EAAE;KACf;CACF,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,UAAU,GAAG,aAAa,EAAE,CAAC;IAErC;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,UAAkB;QAElB,sBAAsB;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,YAAY,IAAI,YAAY,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAClD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAChC,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,SAAiB,EACjB,GAAW;QAEX,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,QAAQ;YACR,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACpD,OAAO;wBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,QAAkB;wBACnC,MAAM,EAAE,SAAS;wBACjB,cAAc,EAAE,OAAO;qBACP,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,WAAW;YACX,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvC,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAClD,OAAO;wBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,EAAE,UAAU;wBAC1C,MAAM,EAAE,KAAK;wBACb,cAAc,EAAE,OAAO;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,UAAkB,EAClB,IAAY;QAEZ,kBAAkB;QAClB,2BAA2B;QAC3B,aAAa;QAEb,sBAAsB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,SAAiB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEzC,iBAAiB;QACjB,IAAI,KAAK,CAAC,OAAO,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe;QACf,iBAAiB;QACjB,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QAEvE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,IAAI,CAAC,0BAA0B,CAChD,SAAS,EACT,aAAa,CAAC,QAAQ,CACvB,CAAC;YAEF,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO;oBACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;oBACxC,MAAM,EAAE,SAAS;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,IAAY,EAAE,IAAY;QAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAE1C,OAAO,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,oBAAoB,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAkB;QACxB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,QAAgB;QACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,OAAO,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;IAClC,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,IAAI,0BAA0B,GAA8B,IAAI,CAAC;AAEjE,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAChC,0BAA0B,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Security Policy
|
|
3
|
+
* 安全策略 - 敏感变量检测、加密存储、访问控制
|
|
4
|
+
*/
|
|
5
|
+
import type { AtomicAction, PageActionCacheEntry, VariableMap } from "./types.js";
|
|
6
|
+
/**
|
|
7
|
+
* 安全策略
|
|
8
|
+
*/
|
|
9
|
+
export declare class SecurityPolicy {
|
|
10
|
+
private allowedUserIds;
|
|
11
|
+
constructor(allowedUserIds?: string[]);
|
|
12
|
+
/**
|
|
13
|
+
* 检查操作是否包含敏感变量
|
|
14
|
+
*/
|
|
15
|
+
isSensitiveAction(action: AtomicAction): boolean;
|
|
16
|
+
/**
|
|
17
|
+
* 检查变量映射是否包含敏感数据
|
|
18
|
+
*/
|
|
19
|
+
hasSensitiveData(variables: VariableMap): boolean;
|
|
20
|
+
/**
|
|
21
|
+
* 获取敏感字段列表
|
|
22
|
+
*/
|
|
23
|
+
getSensitiveFields(): string[];
|
|
24
|
+
/**
|
|
25
|
+
* 加密数据
|
|
26
|
+
*/
|
|
27
|
+
encrypt(data: string): string;
|
|
28
|
+
/**
|
|
29
|
+
* 解密数据
|
|
30
|
+
*/
|
|
31
|
+
decrypt(encrypted: string): string;
|
|
32
|
+
/**
|
|
33
|
+
* 加密缓存条目中的敏感变量
|
|
34
|
+
*/
|
|
35
|
+
encryptCacheEntry(entry: PageActionCacheEntry): PageActionCacheEntry;
|
|
36
|
+
/**
|
|
37
|
+
* 解密缓存条目中的敏感变量
|
|
38
|
+
*/
|
|
39
|
+
decryptCacheEntry(entry: PageActionCacheEntry): PageActionCacheEntry;
|
|
40
|
+
/**
|
|
41
|
+
* 检查是否允许访问
|
|
42
|
+
*/
|
|
43
|
+
canAccessCache(userId?: string): boolean;
|
|
44
|
+
/**
|
|
45
|
+
* 添加允许的用户 ID
|
|
46
|
+
*/
|
|
47
|
+
addAllowedUserId(userId: string): void;
|
|
48
|
+
/**
|
|
49
|
+
* 移除允许的用户 ID
|
|
50
|
+
*/
|
|
51
|
+
removeAllowedUserId(userId: string): void;
|
|
52
|
+
/**
|
|
53
|
+
* 脱敏处理(用于日志输出)
|
|
54
|
+
*/
|
|
55
|
+
sanitizeForLogging(data: any): any;
|
|
56
|
+
/**
|
|
57
|
+
* 脱敏处理操作列表
|
|
58
|
+
*/
|
|
59
|
+
sanitizeActions(actions: AtomicAction[]): AtomicAction[];
|
|
60
|
+
}
|
|
61
|
+
export declare function getSecurityPolicy(allowedUserIds?: string[]): SecurityPolicy;
|
|
62
|
+
//# sourceMappingURL=security-policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-policy.d.ts","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuBlF;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,cAAc,CAAc;gBAExB,cAAc,GAAE,MAAM,EAAO;IAQzC;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO;IAQhD;;OAEG;IACH,gBAAgB,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO;IASjD;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAQ9B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAoB7B;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IA4BlC;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB;IAoBpE;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB;IAwBpE;;OAEG;IACH,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAYxC;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAItC;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAQzC;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG;IAsBlC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE;CAYzD;AAQD,wBAAgB,iBAAiB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,cAAc,CAK3E"}
|
|
@@ -0,0 +1,219 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Security Policy
|
|
3
|
+
* 安全策略 - 敏感变量检测、加密存储、访问控制
|
|
4
|
+
*/
|
|
5
|
+
import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
|
|
6
|
+
// ============================================================================
|
|
7
|
+
// 配置
|
|
8
|
+
// ============================================================================
|
|
9
|
+
const SENSITIVE_FIELDS = new Set([
|
|
10
|
+
"password",
|
|
11
|
+
"pwd",
|
|
12
|
+
"token",
|
|
13
|
+
"secret",
|
|
14
|
+
"key",
|
|
15
|
+
"code",
|
|
16
|
+
"otp",
|
|
17
|
+
]);
|
|
18
|
+
const ENCRYPTION_KEY = "default-key-change-in-production"; // 生产环境应从配置读取
|
|
19
|
+
const ENCRYPTION_ALGORITHM = "aes-256-gcm";
|
|
20
|
+
// ============================================================================
|
|
21
|
+
// Security Policy 类
|
|
22
|
+
// ============================================================================
|
|
23
|
+
/**
|
|
24
|
+
* 安全策略
|
|
25
|
+
*/
|
|
26
|
+
export class SecurityPolicy {
|
|
27
|
+
allowedUserIds;
|
|
28
|
+
constructor(allowedUserIds = []) {
|
|
29
|
+
this.allowedUserIds = new Set(allowedUserIds);
|
|
30
|
+
}
|
|
31
|
+
// -------------------------------------------------------------------------
|
|
32
|
+
// 敏感字段检测
|
|
33
|
+
// -------------------------------------------------------------------------
|
|
34
|
+
/**
|
|
35
|
+
* 检查操作是否包含敏感变量
|
|
36
|
+
*/
|
|
37
|
+
isSensitiveAction(action) {
|
|
38
|
+
if (!action.variable) {
|
|
39
|
+
return false;
|
|
40
|
+
}
|
|
41
|
+
return SENSITIVE_FIELDS.has(action.variable.toLowerCase());
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* 检查变量映射是否包含敏感数据
|
|
45
|
+
*/
|
|
46
|
+
hasSensitiveData(variables) {
|
|
47
|
+
for (const key of Object.keys(variables)) {
|
|
48
|
+
if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
|
|
49
|
+
return true;
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
return false;
|
|
53
|
+
}
|
|
54
|
+
/**
|
|
55
|
+
* 获取敏感字段列表
|
|
56
|
+
*/
|
|
57
|
+
getSensitiveFields() {
|
|
58
|
+
return Array.from(SENSITIVE_FIELDS);
|
|
59
|
+
}
|
|
60
|
+
// -------------------------------------------------------------------------
|
|
61
|
+
// 加密/解密
|
|
62
|
+
// -------------------------------------------------------------------------
|
|
63
|
+
/**
|
|
64
|
+
* 加密数据
|
|
65
|
+
*/
|
|
66
|
+
encrypt(data) {
|
|
67
|
+
try {
|
|
68
|
+
const iv = randomBytes(16);
|
|
69
|
+
const cipher = createCipheriv(ENCRYPTION_ALGORITHM, Buffer.from(ENCRYPTION_KEY), iv);
|
|
70
|
+
let encrypted = cipher.update(data, "utf8", "hex");
|
|
71
|
+
encrypted += cipher.final("hex");
|
|
72
|
+
const authTag = cipher.getAuthTag();
|
|
73
|
+
return `${iv.toString("hex")}:${authTag.toString("hex")}:${encrypted}`;
|
|
74
|
+
}
|
|
75
|
+
catch (error) {
|
|
76
|
+
console.error("[SecurityPolicy] Encryption failed:", error);
|
|
77
|
+
return data; // 失败时返回原数据
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
/**
|
|
81
|
+
* 解密数据
|
|
82
|
+
*/
|
|
83
|
+
decrypt(encrypted) {
|
|
84
|
+
try {
|
|
85
|
+
const [ivHex, authTagHex, data] = encrypted.split(":");
|
|
86
|
+
if (!ivHex || !authTagHex || !data) {
|
|
87
|
+
return encrypted; // 格式错误,返回原数据
|
|
88
|
+
}
|
|
89
|
+
const iv = Buffer.from(ivHex, "hex");
|
|
90
|
+
const authTag = Buffer.from(authTagHex, "hex");
|
|
91
|
+
const decipher = createDecipheriv(ENCRYPTION_ALGORITHM, Buffer.from(ENCRYPTION_KEY), iv);
|
|
92
|
+
decipher.setAuthTag(authTag);
|
|
93
|
+
let decrypted = decipher.update(data, "hex", "utf8");
|
|
94
|
+
decrypted += decipher.final("utf8");
|
|
95
|
+
return decrypted;
|
|
96
|
+
}
|
|
97
|
+
catch (error) {
|
|
98
|
+
console.error("[SecurityPolicy] Decryption failed:", error);
|
|
99
|
+
return encrypted; // 失败时返回原数据
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
/**
|
|
103
|
+
* 加密缓存条目中的敏感变量
|
|
104
|
+
*/
|
|
105
|
+
encryptCacheEntry(entry) {
|
|
106
|
+
if (!entry.variables) {
|
|
107
|
+
return entry;
|
|
108
|
+
}
|
|
109
|
+
const encrypted = { ...entry };
|
|
110
|
+
encrypted.variables = {};
|
|
111
|
+
for (const [key, value] of Object.entries(entry.variables)) {
|
|
112
|
+
if (SENSITIVE_FIELDS.has(key.toLowerCase()) && typeof value === "string") {
|
|
113
|
+
// 敏感字段加密
|
|
114
|
+
encrypted.variables[key] = this.encrypt(value);
|
|
115
|
+
}
|
|
116
|
+
else {
|
|
117
|
+
encrypted.variables[key] = value;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
return encrypted;
|
|
121
|
+
}
|
|
122
|
+
/**
|
|
123
|
+
* 解密缓存条目中的敏感变量
|
|
124
|
+
*/
|
|
125
|
+
decryptCacheEntry(entry) {
|
|
126
|
+
if (!entry.variables) {
|
|
127
|
+
return entry;
|
|
128
|
+
}
|
|
129
|
+
const decrypted = { ...entry };
|
|
130
|
+
decrypted.variables = {};
|
|
131
|
+
for (const [key, value] of Object.entries(entry.variables)) {
|
|
132
|
+
if (SENSITIVE_FIELDS.has(key.toLowerCase()) && typeof value === "string") {
|
|
133
|
+
// 敏感字段解密
|
|
134
|
+
decrypted.variables[key] = this.decrypt(value);
|
|
135
|
+
}
|
|
136
|
+
else {
|
|
137
|
+
decrypted.variables[key] = value;
|
|
138
|
+
}
|
|
139
|
+
}
|
|
140
|
+
return decrypted;
|
|
141
|
+
}
|
|
142
|
+
// -------------------------------------------------------------------------
|
|
143
|
+
// 访问控制
|
|
144
|
+
// -------------------------------------------------------------------------
|
|
145
|
+
/**
|
|
146
|
+
* 检查是否允许访问
|
|
147
|
+
*/
|
|
148
|
+
canAccessCache(userId) {
|
|
149
|
+
if (this.allowedUserIds.size === 0) {
|
|
150
|
+
return true; // 没有限制,允许所有用户
|
|
151
|
+
}
|
|
152
|
+
if (!userId) {
|
|
153
|
+
return false; // 没有用户 ID,拒绝访问
|
|
154
|
+
}
|
|
155
|
+
return this.allowedUserIds.has(userId);
|
|
156
|
+
}
|
|
157
|
+
/**
|
|
158
|
+
* 添加允许的用户 ID
|
|
159
|
+
*/
|
|
160
|
+
addAllowedUserId(userId) {
|
|
161
|
+
this.allowedUserIds.add(userId);
|
|
162
|
+
}
|
|
163
|
+
/**
|
|
164
|
+
* 移除允许的用户 ID
|
|
165
|
+
*/
|
|
166
|
+
removeAllowedUserId(userId) {
|
|
167
|
+
this.allowedUserIds.delete(userId);
|
|
168
|
+
}
|
|
169
|
+
// -------------------------------------------------------------------------
|
|
170
|
+
// 日志脱敏
|
|
171
|
+
// -------------------------------------------------------------------------
|
|
172
|
+
/**
|
|
173
|
+
* 脱敏处理(用于日志输出)
|
|
174
|
+
*/
|
|
175
|
+
sanitizeForLogging(data) {
|
|
176
|
+
if (typeof data !== "object" || data === null) {
|
|
177
|
+
return data;
|
|
178
|
+
}
|
|
179
|
+
const sanitized = Array.isArray(data) ? [] : {};
|
|
180
|
+
for (const [key, value] of Object.entries(data)) {
|
|
181
|
+
if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
|
|
182
|
+
// 敏感字段脱敏
|
|
183
|
+
sanitized[key] = "***REDACTED***";
|
|
184
|
+
}
|
|
185
|
+
else if (typeof value === "object") {
|
|
186
|
+
// 递归处理嵌套对象
|
|
187
|
+
sanitized[key] = this.sanitizeForLogging(value);
|
|
188
|
+
}
|
|
189
|
+
else {
|
|
190
|
+
sanitized[key] = value;
|
|
191
|
+
}
|
|
192
|
+
}
|
|
193
|
+
return sanitized;
|
|
194
|
+
}
|
|
195
|
+
/**
|
|
196
|
+
* 脱敏处理操作列表
|
|
197
|
+
*/
|
|
198
|
+
sanitizeActions(actions) {
|
|
199
|
+
return actions.map((action) => {
|
|
200
|
+
const sanitized = { ...action };
|
|
201
|
+
// 脱敏操作中的敏感文本
|
|
202
|
+
if (sanitized.type === "type" && this.isSensitiveAction(action)) {
|
|
203
|
+
sanitized.text = "***REDACTED***";
|
|
204
|
+
}
|
|
205
|
+
return sanitized;
|
|
206
|
+
});
|
|
207
|
+
}
|
|
208
|
+
}
|
|
209
|
+
// ============================================================================
|
|
210
|
+
// 单例
|
|
211
|
+
// ============================================================================
|
|
212
|
+
let securityPolicyInstance = null;
|
|
213
|
+
export function getSecurityPolicy(allowedUserIds) {
|
|
214
|
+
if (!securityPolicyInstance) {
|
|
215
|
+
securityPolicyInstance = new SecurityPolicy(allowedUserIds);
|
|
216
|
+
}
|
|
217
|
+
return securityPolicyInstance;
|
|
218
|
+
}
|
|
219
|
+
//# sourceMappingURL=security-policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-policy.js","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG5E,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,UAAU;IACV,KAAK;IACL,OAAO;IACP,QAAQ;IACR,KAAK;IACL,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,kCAAkC,CAAC,CAAC,aAAa;AACxE,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAE3C,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,cAAc,CAAc;IAEpC,YAAY,iBAA2B,EAAE;QACvC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAE5E;;OAEG;IACH,iBAAiB,CAAC,MAAoB;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAsB;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,QAAQ;IACR,4EAA4E;IAE5E;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,cAAc,CAC3B,oBAAoB,EACpB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAC3B,EAAE,CACH,CAAC;YAEF,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,CAAC,WAAW;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEvD,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,CAAC,aAAa;YACjC,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,oBAAoB,EACpB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAC3B,EAAE,CACH,CAAC;YAEF,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACrD,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC,CAAC,WAAW;QAC/B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAA2B;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,SAAS,CAAC,SAAS,GAAG,EAAiB,CAAC;QAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzE,SAAS;gBACR,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACL,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAA2B;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,SAAS,CAAC,SAAS,GAAG,EAAiB,CAAC;QAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzE,SAAS;gBACR,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACL,SAAS,CAAC,SAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,cAAc,CAAC,MAAe;QAC5B,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC,cAAc;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,CAAC,eAAe;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAc;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAc;QAChC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAE5E;;OAEG;IACH,kBAAkB,CAAC,IAAS;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAQ,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,SAAS;gBACT,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,WAAW;gBACX,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAuB;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAEhC,aAAa;YACb,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,SAAiB,CAAC,IAAI,GAAG,gBAAgB,CAAC;YAC7C,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK;AACL,+EAA+E;AAE/E,IAAI,sBAAsB,GAA0B,IAAI,CAAC;AAEzD,MAAM,UAAU,iBAAiB,CAAC,cAAyB;IACzD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC"}
|