Autumn-27
ff3d41ea35
severity 严重级: - report_finding 工具 severity 说明改为 critical|high|medium|low - DB 排序 CASE、report 报告 sevRank、FindingStats 增加 critical - 前端 Severity 类型、status.ts 新增 rose 色调(实心高强调,视觉高于高危)、 发现页严重度筛选/统计卡、任务发现 Tab 排序、dashboard 汇总均加入严重 name 漏洞名称: - findings 表加 name 列(schema + ALTER TABLE ADD COLUMN IF NOT EXISTS 补旧库) - report_finding 工具新增 name 入参(非必填),写入 node payload 与独立 findings 行 - DBFinding/AddFinding/AddStandaloneFinding、FindingDTO、findingPayload、report 全链路透传 - 发现列表页与任务发现 Tab 展示 name,为空时回退 vulnclass;vulnclass 移到展开详情「类型」 - report 报告标题优先 name,回退 vulnclass 无 CHECK 约束,旧库仅需补 name 列;critical/name 均向后兼容。 db 测试补充 critical 排序/统计与 name 往返断言。
230 lines
13 KiB
TypeScript
230 lines
13 KiB
TypeScript
// Mock 路由：把 (method, path) 映射到 lib/mock/data 的静态数据。
|
||
// 未命中的一律返回安全默认（[] / {} / {ok:true}），保证任何页面都不崩。
|
||
// 只在 NEXT_PUBLIC_MOCK=1 时经由 api.ts 的 http() 短路进入这里。
|
||
|
||
import * as D from "./data";
|
||
|
||
const delay = (ms = 120) => new Promise((r) => setTimeout(r, ms));
|
||
|
||
function parseBody(body?: BodyInit | null): Record<string, unknown> {
|
||
if (typeof body !== "string") return {};
|
||
try {
|
||
return JSON.parse(body) as Record<string, unknown>;
|
||
} catch {
|
||
return {};
|
||
}
|
||
}
|
||
|
||
export async function mockHandle<T>(method: string, rawPath: string, body?: BodyInit | null): Promise<T> {
|
||
await delay();
|
||
const [path, qs] = rawPath.split("?");
|
||
const q = new URLSearchParams(qs ?? "");
|
||
const seg = path.split("/").filter(Boolean); // ["exploration","activity"]
|
||
const m = method.toUpperCase();
|
||
const b = parseBody(body);
|
||
return route(m, path, seg, q, b) as T;
|
||
}
|
||
|
||
function route(m: string, path: string, seg: string[], q: URLSearchParams, b: Record<string, unknown>): unknown {
|
||
const task = q.get("task") ?? undefined;
|
||
|
||
// ── auth：让 demo 直接进主界面 ──
|
||
if (path === "/auth/status") return { initialized: true };
|
||
if (path === "/auth/login" || path === "/auth/init") return { token: "mock-demo" };
|
||
if (path === "/auth/change-password") return { ok: true };
|
||
|
||
// ── tasks ──
|
||
if (path === "/tasks" && m === "GET") return { tasks: D.tasks, active: D.ACTIVE_TASK };
|
||
if (path === "/tasks" && m === "POST")
|
||
return { ...D.tasks[0], id: "t-new", description: String(b.description ?? "新任务"), goal: String(b.goal ?? ""), status: "created" };
|
||
if (seg[0] === "tasks" && seg.length === 2 && m === "DELETE") return { deleted: 1 };
|
||
if (seg[0] === "tasks" && seg[2] === "control") return { id: seg[1], paused: b.action === "pause" };
|
||
if (seg[0] === "tasks" && seg[2] === "chat" && seg[3] === "stop") return { status: "stopped" };
|
||
if (path === "/active") return { active: String(b.id ?? D.ACTIVE_TASK) };
|
||
|
||
// ── 覆盖度 / 覆盖图 / 资产关联（任务维度）──
|
||
if (seg[0] === "tasks" && seg[2] === "coverage" && seg.length === 3) return D.coverage;
|
||
if (seg[0] === "tasks" && seg[2] === "coverage-graph") return D.coverageGraph;
|
||
if (seg[0] === "tasks" && seg[2] === "asset-refs") return D.assetRefsFor(Number(q.get("asset_id") ?? 0));
|
||
|
||
// ── 工作空间文件管理器（demo：静态示例树；写/建/删走下方写兜底 {ok:true}）──
|
||
if (path === "/workspace/list") return D.workspaceList(q.get("path") ?? "");
|
||
if (path === "/workspace/read") return D.workspaceRead(q.get("path") ?? "");
|
||
|
||
// ── stats ──
|
||
if (path === "/stats") return D.stats(task);
|
||
|
||
// ── assets ──
|
||
if (path === "/assets/counts") return D.assetCounts;
|
||
if (path === "/assets" && m === "GET") {
|
||
const type = q.get("type") ?? "";
|
||
const list = type ? D.assets.filter((a) => a.type === type) : D.assets;
|
||
const limit = Number(q.get("limit") ?? 50);
|
||
const offset = Number(q.get("offset") ?? 0);
|
||
return { count: list.length, total: list.length, assets: list.slice(offset, offset + limit) };
|
||
}
|
||
if (path === "/assets" && m === "DELETE") return { deleted: (b.ids as unknown[])?.length ?? 0 };
|
||
|
||
// ── companies ──
|
||
if (path === "/companies" && m === "GET") return D.companies;
|
||
if (path === "/companies" && m === "POST") return { id: 2, created: true, scope_added: 0 };
|
||
if (seg[0] === "companies" && seg[2] === "scope") return { added: 0, skipped: 0, invalid: 0 };
|
||
if (seg[0] === "companies" && seg.length === 2 && m === "DELETE") return { deleted: 1, assets_deleted: 0 };
|
||
|
||
// ── exploration ──
|
||
if (path === "/exploration/frontier") return D.frontier;
|
||
if (path === "/exploration/findings/stats") {
|
||
const vulnclasses = Array.from(new Set(D.findings.map((f) => f.vulnclass))).sort();
|
||
return {
|
||
total: D.findings.length,
|
||
pending: D.findings.filter((f) => f.status === "pending").length,
|
||
critical: D.findings.filter((f) => f.severity === "critical").length,
|
||
high: D.findings.filter((f) => f.severity === "high").length,
|
||
medium: D.findings.filter((f) => f.severity === "medium").length,
|
||
low: D.findings.filter((f) => f.severity === "low").length,
|
||
vulnclasses,
|
||
};
|
||
}
|
||
if (path === "/exploration/findings") {
|
||
if (task) return D.findings.filter((f) => f.task_id === task);
|
||
// 全局:带 page/limit → 分页对象;否则裸数组(dashboard)。
|
||
if (!q.has("page") && !q.has("limit")) return D.findings;
|
||
const sev = { critical: 4, high: 3, medium: 2, low: 1 } as const;
|
||
let list = D.findings.slice();
|
||
const fSev = q.get("severity");
|
||
const fStatus = q.get("status");
|
||
const fVuln = q.get("vulnclass");
|
||
if (fSev) list = list.filter((f) => f.severity === fSev);
|
||
if (fStatus) list = list.filter((f) => f.status === fStatus);
|
||
if (fVuln) list = list.filter((f) => f.vulnclass === fVuln);
|
||
list.sort((a, b) =>
|
||
q.get("sort") === "severity"
|
||
? sev[b.severity] - sev[a.severity] || +new Date(b.ts) - +new Date(a.ts)
|
||
: +new Date(b.ts) - +new Date(a.ts),
|
||
);
|
||
const page = Number(q.get("page") ?? 1);
|
||
const pageSize = Number(q.get("limit") ?? 20);
|
||
return {
|
||
items: list.slice((page - 1) * pageSize, page * pageSize),
|
||
total: list.length,
|
||
page,
|
||
page_size: pageSize,
|
||
};
|
||
}
|
||
if (path === "/exploration/intents") return D.intents;
|
||
if (path === "/exploration/tokens") return { workers: D.tokenWorkers, total: D.tokenTotal };
|
||
if (path === "/exploration/graph") return D.explorationGraph;
|
||
if (path === "/exploration/activity" && seg.length === 2) {
|
||
const items = D.activityForTask();
|
||
return { items, cursor: items.length ? items[items.length - 1].seq : 0 };
|
||
}
|
||
if (seg[0] === "exploration" && seg[1] === "activity" && seg.length === 3) {
|
||
const a = D.activity.find((x) => x.seq === Number(seg[2]));
|
||
return { detail: a?.detail ?? a?.summary ?? "" };
|
||
}
|
||
if (path === "/tokens/daily") return D.dailyTokens;
|
||
if (path === "/tokens/conversations") return D.convTokens;
|
||
|
||
// ── traffic / audit / settings ──
|
||
if (path === "/audit") return D.audit;
|
||
if (path === "/traffic" && m === "DELETE") return { deleted: 0 };
|
||
if (path === "/traffic/hosts" && m === "DELETE") return { deleted: (b.hosts as unknown[])?.length ?? 0 };
|
||
if (path === "/traffic/hosts") return { hosts: D.trafficHosts };
|
||
if (path === "/traffic") return D.traffic;
|
||
if (path === "/traffic/exchange") return D.trafficDetail;
|
||
if (path === "/settings" && m === "GET") return D.settings;
|
||
if (path === "/settings" && m === "PUT") return { ...D.settings, ...b };
|
||
if (path === "/settings/web-search/test") return { ok: true, count: 5, backend: D.settings.web_search_backend };
|
||
if (path === "/settings/python/detect") return { python_interpreter: "/usr/bin/python3" };
|
||
if (path === "/chat") return { reply: "（demo）我已把该建议注入为一条高优意图，work agent 会尽快执行。", mode: "hint" };
|
||
if (path === "/gc") return { removed: 0 };
|
||
|
||
// ── 工具执行历史 ──
|
||
if (path === "/commands" && m === "GET") return { commands: D.commandRecords, total: D.commandRecords.length };
|
||
|
||
// ── LLM ──
|
||
if (path === "/llm/records" && m === "GET") return { records: D.llmRecords, total: D.llmRecords.length };
|
||
if (path === "/llm/records" && m === "DELETE") return { deleted: 0 };
|
||
if (path === "/llm/records/tasks") return { tasks: D.llmTasks };
|
||
if (seg[0] === "llm" && seg[1] === "records" && seg.length === 3 && m === "GET") return D.llmRecordDetail(Number(seg[2]));
|
||
if (path === "/llm" && m === "GET") return D.llmConfig;
|
||
if (path === "/llm" && m === "POST") return { ok: true };
|
||
if (path === "/llm/test") return { ok: true, latency_ms: 128, model: String(b.model ?? "claude-opus-4-8") };
|
||
if (path === "/llm/profiles" && m === "GET") return { profiles: D.llmProfiles };
|
||
if (path === "/llm/profiles" && m === "POST") return { id: Number(b.id) || 3 };
|
||
if (path === "/llm/profiles/active") return { ok: true };
|
||
if (seg[0] === "llm" && seg[1] === "profiles" && seg.length === 3 && m === "DELETE") return { deleted: Number(seg[2]) };
|
||
|
||
// ── agents ──
|
||
if (path === "/agents" && m === "GET") return { agents: D.agents };
|
||
if (path === "/agents" && m === "POST") return { id: "9", key: String(b.key ?? "custom"), name: String(b.name ?? ""), role: "custom", builtin: false, enabled: true };
|
||
if (seg[0] === "agents" && seg.length === 2 && m === "GET") return D.agentDetail(seg[1]);
|
||
if (seg[0] === "agents" && seg[2] === "triggers" && m === "GET") return { triggers: [] };
|
||
if (seg[0] === "agents" && seg[2] === "prompts") return { versions: D.agentDetail(seg[1]).versions };
|
||
if (seg[0] === "agents" && seg[2] === "variables") return { variables: D.agentDetail(seg[1]).variables };
|
||
if (seg[0] === "agents" && seg[2] === "prompt" && seg[3] === "preview")
|
||
return { rendered: String(b.template ?? "").replace(/\{\{\.(\w+)\}\}/g, "«$1»") };
|
||
if (seg[0] === "agents" && seg[2] === "visibility" && m === "GET") return D.agentDetail(seg[1]).visibility;
|
||
|
||
// ── conversations ──
|
||
if (path === "/conversations" && m === "GET") return { conversations: D.conversations };
|
||
if (path === "/conversations" && m === "POST") return { id: 3, agent_key: String(b.agent_key ?? "mainagent"), title: String(b.title ?? "新会话"), created_at: "2026-07-26T04:00:00Z", updated_at: "2026-07-26T04:00:00Z" };
|
||
if (seg[0] === "conversations" && seg[2] === "messages" && seg.length === 3 && m === "GET") {
|
||
const items = D.conversationMessages[Number(seg[1])] ?? [];
|
||
return { items, cursor: items.length ? items[items.length - 1].seq : 0, running: false };
|
||
}
|
||
if (seg[0] === "conversations" && seg[2] === "messages" && seg.length === 4) {
|
||
const msgs = D.conversationMessages[Number(seg[1])] ?? [];
|
||
const a = msgs.find((x) => x.seq === Number(seg[3]));
|
||
return { detail: a?.detail ?? a?.summary ?? "" };
|
||
}
|
||
if (seg[0] === "conversations" && seg[2] === "messages" && m === "POST") return { status: "ok" };
|
||
if (seg[0] === "conversations" && seg[2] === "stop") return { status: "stopped" };
|
||
|
||
// ── tools ──
|
||
if (path === "/tools" && m === "GET") return { tools: D.tools };
|
||
if (path === "/tools/custom" && m === "POST") return { key: String(b.key ?? "custom-tool") };
|
||
if (path === "/tools/custom/test") return { output: "（demo）工具执行输出示例。", is_error: false };
|
||
|
||
// ── mcp ──
|
||
if (path === "/mcp" && m === "GET") return { servers: D.mcpServers };
|
||
if (path === "/mcp" && m === "POST") return { id: 3 };
|
||
if (seg[0] === "mcp" && seg[2] === "tools") return { tools: D.mcpToolsById[Number(seg[1])] ?? [] };
|
||
if (seg[0] === "mcp" && seg[2] === "refresh") return { tools: D.mcpToolsById[Number(seg[1])] ?? [] };
|
||
if (seg[0] === "mcp" && seg.length === 2 && m === "DELETE") return { deleted: Number(seg[1]) };
|
||
|
||
// ── scopesentry（demo：未配置）──
|
||
if (path === "/sync/scopesentry/status") return { exists: false, configured: false, enabled: false, reachable: false, tools: [] };
|
||
if (path === "/sync/scopesentry/projects") return { projects: [], tag: {} };
|
||
if (path === "/sync/scopesentry/tasks") return { tasks: [] };
|
||
if (path === "/sync/scopesentry/sync") return { synced: {}, companies: null, warnings: null, errors: null };
|
||
|
||
// ── skills ──
|
||
if (path === "/skills" && m === "GET") return { skills: D.skills };
|
||
if (path === "/skills" && m === "POST") return { name: String(b.name ?? "new-skill") };
|
||
if (seg[0] === "skills" && seg[2] === "files" && seg.length === 3) return { files: ["SKILL.md"] };
|
||
if (seg[0] === "skills" && seg[2] === "files" && seg.length >= 4)
|
||
return { content: "# SKILL.md\n\n（demo）这是该 skill 的说明文件示例。", file: seg.slice(3).join("/") };
|
||
|
||
// ── visibility ──
|
||
if (seg[0] === "visibility" && m === "GET") return { agents: [] };
|
||
|
||
// ── intercept ──
|
||
if (path === "/intercept/rules" && m === "GET") return { rules: D.interceptRules };
|
||
if (seg[0] === "intercept" && seg[1] === "rules" && seg[3] === "toggle") return { ok: true, enabled: b.enabled ?? true };
|
||
if (path === "/intercept/pending" && m === "GET") return { pending: D.interceptPending };
|
||
if (seg[0] === "intercept" && seg[1] === "pending" && seg[3] === "decide") return { ok: true };
|
||
if (seg[0] === "intercept" && seg[1] === "pending" && seg.length === 3 && m === "GET")
|
||
return D.interceptPending.find((p) => p.id === Number(seg[2])) ?? null;
|
||
if (path === "/intercept/history") return { items: D.interceptHistory };
|
||
if (seg[0] === "intercept" && seg[1] === "task")
|
||
return { items: D.interceptHistory.filter((r) => r.task_id === seg[2]) };
|
||
if (path === "/intercept/tool-config") return { enabled_tools: ["bash"] };
|
||
|
||
// ── 写操作兜底：成功但不落库 ──
|
||
if (["POST", "PUT", "PATCH", "DELETE"].includes(m)) return { ok: true };
|
||
|
||
// ── 读兜底：集合类给 []，其余 {} ──
|
||
return /(\/(tasks|profiles|conversations|rules|history|projects|tokens|agents|servers|skills|tools|findings|intents)s?$)|s$/.test(path) ? [] : {};
|
||
}
|