58 lines
2.3 KiB
Python
58 lines
2.3 KiB
Python
|
from __future__ import annotations
|
||
|
|
|
||
|
|
from typing import Any
|
||
|
|
|
||
|
|
from yuxi.utils.logging_config import logger
|
||
|
|
|
||
|
|
|
||
|
|
class WeChatElevatedAdapter:
|
||
|
|
def __init__(self):
|
||
|
|
self._elevated_users: set[str] = set()
|
||
|
|
self._elevation_enabled: bool = False
|
||
|
|
|
||
|
|
def load_elevated(self, config: dict[str, Any]) -> None:
|
||
|
|
elevated = config.get("elevated_users", [])
|
||
|
|
if isinstance(elevated, list):
|
||
|
|
self._elevated_users = {f"wx:{u}" if not u.startswith("wx:") else u for u in elevated}
|
||
|
|
self._elevation_enabled = config.get("elevation_enabled", False)
|
||
|
|
logger.info(
|
||
|
|
f"[WeChat/Elevated] Loaded {len(self._elevated_users)} elevated user(s), enabled={self._elevation_enabled}"
|
||
|
|
)
|
||
|
|
|
||
|
|
def is_elevated(self, channel_user_id: str) -> bool:
|
||
|
|
normalized = channel_user_id if channel_user_id.startswith("wx:") else f"wx:{channel_user_id}"
|
||
|
|
return self._elevation_enabled and normalized in self._elevated_users
|
||
|
|
|
||
|
|
def adjust_routing_priority(self, channel_user_id: str, base_priority: int = 0) -> int:
|
||
|
|
if self.is_elevated(channel_user_id):
|
||
|
|
return max(base_priority, 10)
|
||
|
|
return base_priority
|
||
|
|
|
||
|
|
def resolve_elevated_agents(self, channel_user_id: str, config: dict[str, Any]) -> list[str]:
|
||
|
|
if not self.is_elevated(channel_user_id):
|
||
|
|
return []
|
||
|
|
agents = config.get("elevated_agents", [])
|
||
|
|
if isinstance(agents, list):
|
||
|
|
return agents
|
||
|
|
return config.get("agent_id", "1") if isinstance(config.get("agent_id"), str) else ["1"]
|
||
|
|
|
||
|
|
def collect_elevation_audit(self) -> list[dict[str, Any]]:
|
||
|
|
findings: list[dict[str, Any]] = []
|
||
|
|
if self._elevation_enabled and len(self._elevated_users) > 100:
|
||
|
|
findings.append(
|
||
|
|
{
|
||
|
|
"severity": "warning",
|
||
|
|
"category": "elevated_at_scale",
|
||
|
|
"message": f"{len(self._elevated_users)} elevated users (>100)，建议审计特权用户列表",
|
||
|
|
}
|
||
|
|
)
|
||
|
|
if self._elevation_enabled and not self._elevated_users:
|
||
|
|
findings.append(
|
||
|
|
{
|
||
|
|
"severity": "info",
|
||
|
|
"category": "elevated_empty",
|
||
|
|
"message": "特权模式已启用但 elevated_users 为空",
|
||
|
|
}
|
||
|
|
)
|
||
|
|
return findings
|