union-ark-web 1.0.1

package/ark-control/src/main/java/com/union/control/dubbo/ProviderAccessLogFilter.java

@@ -0,0 +1,45 @@
+package com.union.control.dubbo;
+
+import com.alibaba.dubbo.rpc.Filter;
+import com.alibaba.dubbo.rpc.Invocation;
+import com.alibaba.dubbo.rpc.Invoker;
+import com.alibaba.dubbo.rpc.Result;
+import com.alibaba.dubbo.rpc.RpcContext;
+import com.alibaba.dubbo.rpc.RpcException;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import java.net.InetSocketAddress;
+import java.util.concurrent.TimeUnit;
+
+public class ProviderAccessLogFilter implements Filter {
+    private static final Logger LOG = LoggerFactory.getLogger(ProviderAccessLogFilter.class);
+
+    @Override
+    public Result invoke(Invoker<?> invoker, Invocation invocation) throws RpcException {
+        String service = invoker.getInterface().getSimpleName();
+        String method = invocation.getMethodName();
+        InetSocketAddress remoteAddress = RpcContext.getContext().getRemoteAddress();
+        String remote = String.valueOf(remoteAddress);
+        long started = System.nanoTime();
+        LOG.info("Dubbo provider request started: service={}, method={}, remote={}",
+                service, method, remote);
+        try {
+            Result result = invoker.invoke(invocation);
+            long elapsedMs = TimeUnit.NANOSECONDS.toMillis(System.nanoTime() - started);
+            if (result.hasException()) {
+                LOG.warn("Dubbo provider request failed: service={}, method={}, elapsedMs={}",
+                        service, method, elapsedMs, result.getException());
+            } else {
+                LOG.info("Dubbo provider request completed: service={}, method={}, elapsedMs={}",
+                        service, method, elapsedMs);
+            }
+            return result;
+        } catch (RpcException error) {
+            long elapsedMs = TimeUnit.NANOSECONDS.toMillis(System.nanoTime() - started);
+            LOG.warn("Dubbo provider request failed: service={}, method={}, elapsedMs={}",
+                    service, method, elapsedMs, error);
+            throw error;
+        }
+    }
+}

package/ark-control/src/main/java/com/union/control/mapper/AgentExecutionMapper.java

@@ -0,0 +1,35 @@
+package com.union.control.mapper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface AgentExecutionMapper {
+    int softDeleteExecutions(@Param("conversationId") String conversationId,
+                             @Param("userId") String userId);
+    int insertRootExecution(@Param("runId") String runId,
+                            @Param("conversationId") String conversationId,
+                            @Param("userId") String userId);
+    int insertCompletedRootExecution(Map<String, Object> execution);
+    int updateRootAgent(@Param("id") Long id,
+                        @Param("agentName") String agentName);
+    int insertChildExecution(@Param("runId") String runId,
+                             @Param("conversationId") String conversationId,
+                             @Param("userId") String userId,
+                             @Param("parentExecutionId") Long parentExecutionId,
+                             @Param("agentName") String agentName,
+                             @Param("delegationCallId") String delegationCallId,
+                             @Param("task") String task);
+    List<Map<String, Object>> findExecutions(@Param("userId") String userId,
+                                             @Param("conversationId") String conversationId);
+    List<Map<String, Object>> findExecution(@Param("userId") String userId,
+                                            @Param("conversationId") String conversationId,
+                                            @Param("runId") String runId,
+                                            @Param("lock") boolean lock);
+    int finishExecution(@Param("id") Long id,
+                        @Param("status") String status,
+                        @Param("errorCode") String errorCode);
+}

package/ark-control/src/main/java/com/union/control/mapper/ConversationMapper.java

@@ -0,0 +1,44 @@
+package com.union.control.mapper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface ConversationMapper {
+    List<Map<String, Object>> findConversations(@Param("userId") String userId,
+                                                @Param("limit") int limit);
+    Map<String, Object> findConversation(@Param("userId") String userId,
+                                         @Param("conversationId") String conversationId);
+    int updateConversationTitle(@Param("title") String title,
+                                @Param("conversationId") String conversationId,
+                                @Param("userId") String userId);
+    int softDeleteMessages(@Param("conversationId") String conversationId,
+                           @Param("userId") String userId);
+    int softDeleteConversation(@Param("conversationId") String conversationId,
+                               @Param("userId") String userId);
+    int insertConversation(@Param("conversationId") String conversationId,
+                           @Param("userId") String userId,
+                           @Param("title") String title);
+    Long currentMessageSequence(@Param("conversationId") String conversationId);
+    int insertMessage(@Param("conversationId") String conversationId,
+                      @Param("userId") String userId,
+                      @Param("messageId") String messageId,
+                      @Param("executionId") Long executionId,
+                      @Param("role") String role,
+                      @Param("sequence") long sequence,
+                      @Param("payload") String payload);
+    int touchConversation(@Param("conversationId") String conversationId,
+                          @Param("userId") String userId);
+    List<Map<String, Object>> findRootMessages(@Param("userId") String userId,
+                                               @Param("conversationId") String conversationId);
+    List<Map<String, Object>> findBrowserMessages(@Param("userId") String userId,
+                                                  @Param("conversationId") String conversationId);
+    Long requireOwnedActive(@Param("conversationId") String conversationId,
+                            @Param("userId") String userId);
+    Long requireOwned(@Param("conversationId") String conversationId,
+                      @Param("userId") String userId,
+                      @Param("lock") boolean lock);
+}

package/ark-control/src/main/java/com/union/control/mapper/MemoryStoreMapper.java

@@ -0,0 +1,41 @@
+package com.union.control.mapper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface MemoryStoreMapper {
+    List<Map<String, Object>> readMemory(@Param("userId") String userId,
+                                         @Param("path") String path);
+    List<String> listMemoryPaths(@Param("userId") String userId,
+                                 @Param("prefix") String prefix,
+                                 @Param("limit") int limit);
+    List<Map<String, Object>> findMemoryOperation(@Param("userId") String userId,
+                                                  @Param("operationId") String operationId,
+                                                  @Param("lock") boolean lock);
+    Long currentMemoryVersion(@Param("userId") String userId,
+                              @Param("path") String path);
+    int updateMemoryFile(@Param("content") String content,
+                         @Param("version") long version,
+                         @Param("operationId") String operationId,
+                         @Param("id") Object id);
+    int insertMemoryFile(@Param("userId") String userId,
+                         @Param("path") String path,
+                         @Param("content") String content,
+                         @Param("version") long version,
+                         @Param("operationId") String operationId);
+    int softDeleteMemoryFile(@Param("id") Object id);
+    List<Map<String, Object>> searchMemory(@Param("userId") String userId,
+                                           @Param("prefix") String prefix,
+                                           @Param("limit") int limit);
+    List<Map<String, Object>> findMemoryRow(@Param("userId") String userId,
+                                            @Param("path") String path);
+    int insertMemoryOperation(@Param("userId") String userId,
+                              @Param("operationId") String operationId,
+                              @Param("fingerprint") String fingerprint,
+                              @Param("version") Long version,
+                              @Param("existed") int existed);
+}

package/ark-control/src/main/java/com/union/control/mapper/ScheduledTaskMapper.java

@@ -0,0 +1,96 @@
+package com.union.control.mapper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface ScheduledTaskMapper {
+    List<Long> lockUserTasks(@Param("userId") String userId);
+
+    int countRunnableTasks(@Param("userId") String userId);
+
+    int insertTask(Map<String, Object> task);
+
+    int updateTask(Map<String, Object> task);
+
+    long countTasks(@Param("userId") String userId,
+                    @Param("keyword") String keyword,
+                    @Param("status") String status);
+
+    List<Map<String, Object>> findTasks(@Param("userId") String userId,
+                                        @Param("keyword") String keyword,
+                                        @Param("status") String status,
+                                        @Param("limit") int limit,
+                                        @Param("offset") int offset);
+
+    Map<String, Object> findTaskDetail(@Param("taskId") long taskId,
+                                       @Param("userId") String userId);
+
+    Map<String, Object> findTaskOwner(@Param("taskId") long taskId,
+                                      @Param("userId") String userId,
+                                      @Param("lock") boolean lock);
+
+    long countRuns(@Param("taskId") long taskId, @Param("userId") String userId);
+
+    List<Map<String, Object>> findRuns(@Param("taskId") long taskId,
+                                       @Param("userId") String userId,
+                                       @Param("limit") int limit,
+                                       @Param("offset") int offset);
+
+    Map<String, Object> findOwnedRun(@Param("runId") long runId,
+                                     @Param("userId") String userId,
+                                     @Param("lock") boolean lock);
+
+    long countUnread(@Param("userId") String userId);
+
+    List<Map<String, Object>> findUnread(@Param("userId") String userId);
+
+    int activateTask(@Param("taskId") long taskId,
+                     @Param("userId") String userId,
+                     @Param("nextRunAt") String nextRunAt);
+
+    int pauseTask(@Param("taskId") long taskId, @Param("userId") String userId);
+
+    int discardTask(@Param("taskId") long taskId, @Param("userId") String userId);
+
+    Map<String, Object> findDueTask();
+
+    int insertRun(Map<String, Object> run);
+
+    int completeOnceTask(@Param("taskId") long taskId);
+
+    int updateNextRun(@Param("taskId") long taskId,
+                      @Param("nextRunAt") String nextRunAt);
+
+    List<Long> findPendingRunIds(@Param("limit") int limit);
+
+    int beginRun(@Param("runId") long runId,
+                 @Param("tokenHash") String tokenHash,
+                 @Param("tokenExpiresAt") String tokenExpiresAt);
+
+    Map<String, Object> findPendingRunContext(@Param("runId") long runId);
+
+    Map<String, Object> resolveScheduledToken(@Param("tokenHash") String tokenHash);
+
+    Map<String, Object> findRunForUpdate(@Param("runId") long runId);
+
+    int completeRun(@Param("runId") long runId, @Param("resultPayload") String resultPayload);
+
+    int failRun(@Param("runId") long runId,
+                @Param("errorCode") String errorCode,
+                @Param("errorMessage") String errorMessage);
+
+    int failStaleRuns(@Param("maxRunSeconds") int maxRunSeconds);
+
+    int markRunRead(@Param("runId") long runId);
+
+    int attachConversation(@Param("runId") long runId,
+                           @Param("conversationId") String conversationId);
+
+    int softDeleteByConversation(@Param("conversationId") String conversationId,
+                                 @Param("userId") String userId);
+
+}

package/ark-control/src/main/java/com/union/control/mapper/SensitiveAddressBookDemo.java

@@ -0,0 +1,31 @@
+package com.union.control.mapper;
+
+import com.nucc.channel.ark.common.annotation.EnDecryptField;
+
+public class SensitiveAddressBookDemo {
+    private Long id;
+    private String name;
+    private String role;
+    @EnDecryptField
+    private String email;
+    @EnDecryptField
+    private String telephone;
+    @EnDecryptField
+    private String mobileNumber;
+    private String createdAt;
+
+    public Long getId() { return id; }
+    public void setId(Long id) { this.id = id; }
+    public String getName() { return name; }
+    public void setName(String name) { this.name = name; }
+    public String getRole() { return role; }
+    public void setRole(String role) { this.role = role; }
+    public String getEmail() { return email; }
+    public void setEmail(String email) { this.email = email; }
+    public String getTelephone() { return telephone; }
+    public void setTelephone(String telephone) { this.telephone = telephone; }
+    public String getMobileNumber() { return mobileNumber; }
+    public void setMobileNumber(String mobileNumber) { this.mobileNumber = mobileNumber; }
+    public String getCreatedAt() { return createdAt; }
+    public void setCreatedAt(String createdAt) { this.createdAt = createdAt; }
+}

package/ark-control/src/main/java/com/union/control/mapper/SensitiveDataDemoMapper.java

@@ -0,0 +1,24 @@
+package com.union.control.mapper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Param;
+
+import java.util.List;
+import java.util.Map;
+
+@Mapper
+public interface SensitiveDataDemoMapper {
+    int insert(@Param("phoneNumber") String phoneNumber);
+
+    List<Map<String, Object>> query();
+
+    int insertSaved(Map<String, Object> row);
+    int update(Map<String, Object> row);
+    Map<String, Object> queryById(@Param("id") long id);
+
+    int insertAddressBook(SensitiveAddressBookDemo row);
+
+    List<SensitiveAddressBookDemo> queryAddressBook();
+    int updateAddressBook(SensitiveAddressBookDemo row);
+    SensitiveAddressBookDemo queryAddressBookById(@Param("id") long id);
+}

package/ark-control/src/main/java/com/union/control/mapper/interceptor/AESInterceptor.java

@@ -0,0 +1,265 @@
+package com.union.control.mapper.interceptor;
+
+import com.alibaba.fastjson.JSON;
+import com.alibaba.fastjson.TypeReference;
+import com.nucc.channel.ark.common.util.Constant;
+import com.union.control.service.sensitive.SensitiveRevealProcessor;
+import org.apache.ibatis.executor.Executor;
+import org.apache.ibatis.mapping.BoundSql;
+import org.apache.ibatis.mapping.MappedStatement;
+import org.apache.ibatis.mapping.ParameterMapping;
+import org.apache.ibatis.mapping.SqlCommandType;
+import org.apache.ibatis.mapping.SqlSource;
+import org.apache.ibatis.plugin.Interceptor;
+import org.apache.ibatis.plugin.Intercepts;
+import org.apache.ibatis.plugin.Invocation;
+import org.apache.ibatis.plugin.Plugin;
+import org.apache.ibatis.plugin.Signature;
+import org.apache.ibatis.session.ResultHandler;
+import org.apache.ibatis.session.RowBounds;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Properties;
+import java.util.Set;
+import java.util.function.Consumer;
+
+@Intercepts({
+        @Signature(type = Executor.class, method = "query", args = {
+                MappedStatement.class, Object.class, RowBounds.class, ResultHandler.class}),
+        @Signature(type = Executor.class, method = "update", args = {
+                MappedStatement.class, Object.class})
+})
+public class AESInterceptor implements Interceptor {
+    private static final Set<String> ADDRESS_BOOK = statements(
+            "com.union.control.mapper.SensitiveDataDemoMapper.insertAddressBook",
+            "com.union.control.mapper.SensitiveDataDemoMapper.updateAddressBook",
+            "com.union.control.mapper.SensitiveDataDemoMapper.queryAddressBookById",
+            "com.union.control.mapper.SensitiveDataDemoMapper.queryAddressBook",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.getAddressBookPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.queryById",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.selectAllUsers",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.selectByOrgCodeList",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.selectByOrgCodeAndParaList",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.getUserEmail",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceUserGroupRelationMapper.getAddressMailOfBusinessType",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceUserGroupRelationMapper.selectNewUserByGroupId",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookMapper.queryByUserAccount",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceUserGroupRelationMapper.selectUserByGroupId");
+    private static final Set<String> DECRYPT = statements(
+            "com.union.control.mapper.SensitiveDataDemoMapper.query",
+            "com.union.control.mapper.SensitiveDataDemoMapper.queryById",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookRecordMapper.selectPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.ReformTrackMapper.queryReformTrackItemsById",
+            "com.nucc.channel.ark.dao.mapper.announce.ReformTrackMapper.queryReformTrackItemsByConditions",
+            "com.nucc.channel.ark.dao.mapper.announce.QuestionnaireMapper.queryQuestionnaireListByUpdateOrgCodeAndNo",
+            "com.nucc.channel.ark.dao.mapper.announce.QuestionnaireMapper.queryQuestionnaireListByParam",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.selectAnnounceMailPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.queryAnnounceMailSend",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.getByBatchId",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.getBy",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.getById",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.queryBySeriesNo",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.queryByIds",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.queryBySeriesNoS",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.selectJiraNoticeResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.selectMailList",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.selectAnnounceMailPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.queryAnnounceMail",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.listBy",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.getNormalMail",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.checkMail",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.getAnnounceMailById",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.getAutoAuditPass",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.queryBySeriesNos",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.queryNoticeExemptionMail",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.selectAppealMailPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.selectRelatedInfo",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.selectAppealPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.selectByPrimaryKey",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.selectProcess",
+            "com.nucc.channel.ark.dao.mapper.announce.TicketMapper.getTicketById",
+            "com.nucc.channel.ark.dao.mapper.announce.TicketMapper.queryTicketListByParamsPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.TicketMapper.exportTicketListByParams",
+            "com.nucc.channel.ark.dao.mapper.announce.TicketMapper.queryTicketByOrgCode",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.selectByPrimaryKey",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.selectByRecord",
+            "com.nucc.channel.ark.dao.mapper.announce.NotifyMapper.selectPageResult",
+            "com.nucc.channel.ark.dao.mapper.announce.NotifyMapper.queryLastNotify",
+            "com.nucc.channel.ark.dao.mapper.announce.NotifyMapper.queryLastDashBoardNotify");
+    private static final Set<String> ENCRYPT = statements(
+            "com.union.control.mapper.SensitiveDataDemoMapper.insert",
+            "com.union.control.mapper.SensitiveDataDemoMapper.insertSaved",
+            "com.union.control.mapper.SensitiveDataDemoMapper.update",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceAddressBookRecordMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.ReformTrackMapper.batchInsertReformTrackItems",
+            "com.nucc.channel.ark.dao.mapper.announce.ReformTrackMapper.batchUpdateReformTrackItems",
+            "com.nucc.channel.ark.dao.mapper.announce.QuestionnaireMapper.updateQuestionnaire",
+            "com.nucc.channel.ark.dao.mapper.announce.QuestionnaireMapper.insertBatchQuestionnaireList",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailSendMapper.insertBatch",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.insertBatch",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.batchUpdateMailAudit",
+            "com.nucc.channel.ark.dao.mapper.announce.AnnounceMailMapper.update",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.insertSelective",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.updateByPrimaryKeySelective",
+            "com.nucc.channel.ark.dao.mapper.announce.AppealMapper.updateByPrimaryKey",
+            "com.nucc.channel.ark.dao.mapper.announce.TicketMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.insert",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.insertSelective",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.updateByPrimaryKeySelective",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.updateByPrimaryKeyWithBLOBs",
+            "com.nucc.channel.ark.dao.mapper.announce.MailDetailMapper.updateByPrimaryKey",
+            "com.nucc.channel.ark.dao.mapper.announce.NotifyMapper.insert");
+
+    @Autowired
+    private SensitiveRevealProcessor processor;
+    @Autowired
+    private AddressBookHandler addressBook;
+    @Value("${sensitive.reveal.enabled:false}")
+    private boolean revealEnabled;
+    @Value("${sensitive.reveal.strict_mode:false}")
+    private boolean strictMode;
+
+    public AESInterceptor() {}
+
+    AESInterceptor(SensitiveRevealProcessor processor, AddressBookHandler addressBook,
+                   boolean revealEnabled) {
+        this.processor = processor;
+        this.addressBook = addressBook;
+        this.revealEnabled = revealEnabled;
+    }
+
+    @Override
+    public Object intercept(Invocation invocation) throws Throwable {
+        MappedStatement statement = (MappedStatement) invocation.getArgs()[0];
+        if (ADDRESS_BOOK.contains(statement.getId())) {
+            return interceptAddressBook(invocation, statement);
+        }
+
+        boolean encrypt = ENCRYPT.contains(statement.getId());
+        if (!encrypt && !DECRYPT.contains(statement.getId())) return invocation.proceed();
+        if (!interceptorEnabled(statement.getId())) return invocation.proceed();
+        requireProcessor();
+        if (encrypt) {
+            processor.encrypt(invocation.getArgs()[1]);
+            return invocation.proceed();
+        }
+        Object parameter = invocation.getArgs()[1];
+        if (statement.isUseCache()) {
+            invocation.getArgs()[0] = copy(statement, parameter,
+                    statement.getBoundSql(parameter).getSql());
+        }
+        try {
+            Object result = invocation.proceed();
+            if (result == null) return null;
+            if (revealEnabled || strictMode) processor.process(result);
+            else processor.decrypt(result);
+            return result;
+        } finally {
+            ((Executor) invocation.getTarget()).clearLocalCache();
+        }
+    }
+
+    private Object interceptAddressBook(Invocation invocation, MappedStatement statement)
+            throws Throwable {
+        requireAddressBook();
+        invocation.getArgs()[0] = addressBook.prepare(statement, invocation.getArgs()[1]);
+        if (statement.getSqlCommandType() != SqlCommandType.SELECT) return invocation.proceed();
+        try {
+            Object result = invocation.proceed();
+            if (result != null) addressBook.processResult(result, revealEnabled, strictMode);
+            return result;
+        } finally {
+            ((Executor) invocation.getTarget()).clearLocalCache();
+        }
+    }
+
+    private void requireProcessor() {
+        if (processor == null) {
+            throw new IllegalStateException("AESInterceptor sensitive dependencies are not configured");
+        }
+    }
+
+    private void requireAddressBook() {
+        if (addressBook == null) {
+            throw new IllegalStateException("AESInterceptor sensitive dependencies are not configured");
+        }
+    }
+
+    private static boolean interceptorEnabled(String statementId) {
+        Object configured = Constant.flagMap.get("interceptorItems");
+        List<String> items = Arrays.asList(Constant.INTERCEPTOR_ITEMS.split(","));
+        if (!Constant.flagMap.isEmpty() && configured != null) {
+            items = JSON.parseObject(configured.toString(),
+                    new TypeReference<ArrayList<String>>() {});
+        }
+        if (items == null) return false;
+        for (String item : items) {
+            if (!item.isEmpty() && statementId.contains(item)) return true;
+        }
+        return false;
+    }
+
+    static MappedStatement copy(MappedStatement statement, Object parameter, String sql) {
+        BoundSql source = statement.getBoundSql(parameter);
+        if (sql.equals(source.getSql()) && !statement.isUseCache()) return statement;
+        BoundSql boundSql = new BoundSql(statement.getConfiguration(), sql,
+                source.getParameterMappings(), parameter);
+        for (ParameterMapping mapping : source.getParameterMappings()) {
+            String property = mapping.getProperty();
+            if (source.hasAdditionalParameter(property)) {
+                boundSql.setAdditionalParameter(property, source.getAdditionalParameter(property));
+            }
+        }
+        MappedStatement.Builder builder = new MappedStatement.Builder(statement.getConfiguration(),
+                statement.getId(), new FixedSqlSource(boundSql), statement.getSqlCommandType());
+        builder.resource(statement.getResource());
+        builder.fetchSize(statement.getFetchSize());
+        builder.statementType(statement.getStatementType());
+        builder.keyGenerator(statement.getKeyGenerator());
+        joined(statement.getKeyProperties(), builder::keyProperty);
+        joined(statement.getKeyColumns(), builder::keyColumn);
+        joined(statement.getResultSets(), builder::resultSets);
+        builder.timeout(statement.getTimeout());
+        builder.parameterMap(statement.getParameterMap());
+        builder.resultMaps(statement.getResultMaps());
+        builder.resultSetType(statement.getResultSetType());
+        builder.cache(statement.getCache());
+        builder.flushCacheRequired(statement.isFlushCacheRequired());
+        builder.useCache(false);
+        builder.resultOrdered(statement.isResultOrdered());
+        builder.databaseId(statement.getDatabaseId());
+        builder.lang(statement.getLang());
+        return builder.build();
+    }
+
+    private static void joined(String[] values, Consumer<String> setter) {
+        if (values != null && values.length > 0) setter.accept(String.join(",", values));
+    }
+
+    @Override
+    public Object plugin(Object target) {
+        return target instanceof Executor ? Plugin.wrap(target, this) : target;
+    }
+
+    @Override
+    public void setProperties(Properties properties) {}
+
+    private static Set<String> statements(String... values) {
+        return Collections.unmodifiableSet(new LinkedHashSet<>(Arrays.asList(values)));
+    }
+
+    private static final class FixedSqlSource implements SqlSource {
+        private final BoundSql boundSql;
+        private FixedSqlSource(BoundSql boundSql) { this.boundSql = boundSql; }
+        @Override public BoundSql getBoundSql(Object parameterObject) { return boundSql; }
+    }
+}