feat(core): 添加多API密钥支持和配置字段 添加了api_keys、audit_api_keys、approval_api_keys等字段用于支持多个服务密钥, 新增masked_response_fields用于配置响应掩码字段,以及legacy相关配置项。 feat(core): 增强响应数据掩码功能 扩展mask_configured函数支持域名参数,实现更精确的敏感字段掩码控制, 添加自定义掩码字段配置验证器。 feat(scheduler): 添加遗留系统同步调度任务 集成遗留项目和任务同步到定时调度器中,支持通过配置启用或禁用同步功能, 并可设置不同的执行时间计划。 feat(security): 实现多服务密钥认证机制 重构API密钥验证逻辑,支持单个主密钥和多个配置密钥的混合验证模式, 增加服务密钥启用状态检查和角色映射功能。 feat(task_queue): 扩展现有队列任务处理 为日常简报和周报推送任务添加Celery异步处理支持,新增遗留项目和任务同步任务, 统一任务分发接口。 feat(business): 扩展业务模型字段 为工作任务模型添加外部系统标识和外部ID字段,为风险事件模型增加分配、解决、关闭 等相关字段,并创建风险事件操作记录表。 feat(legacy_mysql): 实现遗留任务同步功能 添加遗留任务查询和同步路由,支持从旧MySQL数据库同步任务数据到内部系统, 包括同步结果统计和运行记录。 refactor(dashboard): 更新仪表板统计数据 增加未分配风险和失败推送运行统计,在概览中显示最新的推送和同步运行记录, 完善数据序列化展示。 fix(feishu): 修复审批事件重复处理 实现审批卡片操作事件的唯一性检查,防止重复审批操作,添加事件审计日志记录。 ```
67 lines
1.5 KiB
Python
67 lines
1.5 KiB
Python
from enum import StrEnum
|
|
|
|
|
|
class AuditAction(StrEnum):
|
|
AI_ASK = "ai.ask"
|
|
AI_PROVIDER_HEALTH = "ai.provider_health"
|
|
OPENCLAW_TOOLS_INVOKE = "openclaw.tools.invoke"
|
|
GENERATE_EVENTS = "generate_events"
|
|
FEISHU_WEBHOOK_EVENT = "webhook_event"
|
|
FEISHU_LONG_CONNECTION_EVENT = "long_connection_event"
|
|
FEISHU_SEND_TEXT = "send_text"
|
|
FEISHU_SEND_CARD = "send_card"
|
|
APPROVAL_CREATE = "approval.create"
|
|
APPROVAL_APPROVE = "approval.approve"
|
|
APPROVAL_REJECT = "approval.reject"
|
|
LEGACY_SYNC_PROJECTS = "sync_projects"
|
|
LEGACY_SYNC_TASKS = "sync_tasks"
|
|
RISK_EVENT_ACTION = "risk_event_action"
|
|
REPORT_PUSH = "report_push"
|
|
|
|
|
|
class AuditRiskLevel(StrEnum):
|
|
LOW = "low"
|
|
MEDIUM = "medium"
|
|
HIGH = "high"
|
|
|
|
|
|
class AuditSource(StrEnum):
|
|
API = "api"
|
|
OPENCLAW = "openclaw"
|
|
RISK = "risk"
|
|
FEISHU = "feishu"
|
|
APPROVAL = "approval"
|
|
LEGACY_MYSQL = "legacy_mysql"
|
|
REPORTS = "reports"
|
|
|
|
|
|
class AuditTargetType(StrEnum):
|
|
AI = "ai"
|
|
OPENCLAW_TOOL = "openclaw_tool"
|
|
RISK_EVENTS = "risk-events"
|
|
WORK_REPORTS = "work-reports"
|
|
|
|
|
|
class AuditStatus(StrEnum):
|
|
SUCCESS = "success"
|
|
|
|
|
|
AUDIT_REDACTED_VALUE = "[REDACTED]"
|
|
AUDIT_SENSITIVE_KEYS = frozenset(
|
|
{
|
|
"authorization",
|
|
"api_key",
|
|
"apikey",
|
|
"access_token",
|
|
"tenant_access_token",
|
|
"token",
|
|
"secret",
|
|
"password",
|
|
"openclaw_gateway_token",
|
|
"hermes_api_key",
|
|
"direct_llm_api_key",
|
|
"feishu_app_secret",
|
|
"feishu_verification_token",
|
|
}
|
|
)
|