204 lines
7.7 KiB
Python
204 lines
7.7 KiB
Python
|
# =============================================================================
|
|||
|
|
# 企微IT智能服务台 — 阶段5 自动化 动作适配器注册表
|
|||
|
|
# =============================================================================
|
|||
|
|
# 说明：每个场景动作由对应适配器（handler）真正执行。适配器复用阶段1-4 已落
|
|||
|
|
# 地的集成客户端（Huorong / Lianruan / EHR），对 aTrust（零信任）等
|
|||
|
|
# 密钥未到的系统提供安全的占位实现（明确报错，不静默成功）。
|
|||
|
|
#
|
|||
|
|
# 本期 P0 四个场景适配器：
|
|||
|
|
# - terminal_locate → LianruanClient.query_dev_by_params（员工→终端映射，read）
|
|||
|
|
# - virus_scan / virus_quarantine → HuorongClient（扫描/隔离，high）
|
|||
|
|
# - software_install_guide → 内部（推送软件安装指引链接，low）
|
|||
|
|
# - password_reset_link → 内部（推送密码重置链接，high，需员工 H5 确认）
|
|||
|
|
# =============================================================================
|
|||
|
|
|
|||
|
|
from __future__ import annotations
|
|||
|
|
|
|||
|
|
import logging
|
|||
|
|
from dataclasses import dataclass, field
|
|||
|
|
from typing import Any, Awaitable, Callable, Dict, Optional
|
|||
|
|
|
|||
|
|
from app.constants import AutomationErrorCode
|
|||
|
|
from app.integrations.base import BaseClientError
|
|||
|
|
from app.services.automation.exception_handler import AutomationException
|
|||
|
|
|
|||
|
|
logger = logging.getLogger(__name__)
|
|||
|
|
|
|||
|
|
# 审计回调签名
|
|||
|
|
AuditFn = Optional[Callable[..., Awaitable[None]]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
@dataclass
|
|||
|
|
class ActionContext:
|
|||
|
|
"""动作执行上下文，传递给各适配器。"""
|
|||
|
|
|
|||
|
|
db: Any
|
|||
|
|
session: Any
|
|||
|
|
action: Any
|
|||
|
|
mapping: Dict[str, Any] = field(default_factory=dict)
|
|||
|
|
clients: Dict[str, Any] = field(default_factory=dict)
|
|||
|
|
employee_id: str = ""
|
|||
|
|
audit: AuditFn = None
|
|||
|
|
|
|||
|
|
|
|||
|
|
class BaseActionHandler:
|
|||
|
|
"""动作适配器基类。"""
|
|||
|
|
|
|||
|
|
# 语义动作类型，用于注册表索引
|
|||
|
|
action_type: str = ""
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
"""执行动作，返回结果 dict（会被写入 AutoAction.result）。
|
|||
|
|
|
|||
|
|
Raises:
|
|||
|
|
AutomationException: 业务错误（映射失败/配置缺失等）
|
|||
|
|
BaseClientError: 外部系统调用失败（executor 捕获后转 EXTERNAL_CALL_FAILED）
|
|||
|
|
"""
|
|||
|
|
raise NotImplementedError
|
|||
|
|
|
|||
|
|
|
|||
|
|
class TerminalLocateHandler(BaseActionHandler):
|
|||
|
|
"""终端定位：通过联软按员工账号查终端（read）。"""
|
|||
|
|
|
|||
|
|
action_type = "terminal_locate"
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
client = ctx.clients.get("lianruan")
|
|||
|
|
if client is None:
|
|||
|
|
# 联软不可用 → 转 EHR 兜底（映射解析器已尝试，这里直接报错）
|
|||
|
|
raise AutomationException(
|
|||
|
|
AutomationErrorCode.MAPPING_FAILED,
|
|||
|
|
"联软映射客户端未配置，无法定位终端",
|
|||
|
|
)
|
|||
|
|
data = await client.query_dev_by_params(strusername=ctx.employee_id)
|
|||
|
|
items = data.get("items", []) if isinstance(data, dict) else []
|
|||
|
|
terminals = [
|
|||
|
|
{
|
|||
|
|
"strdevname": getattr(t, "strdevname", ""),
|
|||
|
|
"strdevip": getattr(t, "strdevip", ""),
|
|||
|
|
"strusername": getattr(t, "strusername", ""),
|
|||
|
|
"strdeptname": getattr(t, "strdeptname", ""),
|
|||
|
|
}
|
|||
|
|
for t in items
|
|||
|
|
]
|
|||
|
|
return {
|
|||
|
|
"source": "lianruan",
|
|||
|
|
"employee_id": ctx.employee_id,
|
|||
|
|
"terminals": terminals,
|
|||
|
|
"total": len(terminals),
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
class VirusScanHandler(BaseActionHandler):
|
|||
|
|
"""病毒扫描：对映射到的终端发起快速扫描（low）。"""
|
|||
|
|
|
|||
|
|
action_type = "virus_scan"
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
client_ids = (ctx.mapping or {}).get("client_ids") or []
|
|||
|
|
if not client_ids:
|
|||
|
|
raise AutomationException(
|
|||
|
|
AutomationErrorCode.MAPPING_FAILED, "未解析到目标终端，无法扫描"
|
|||
|
|
)
|
|||
|
|
client = ctx.clients.get("huorong")
|
|||
|
|
if client is None:
|
|||
|
|
raise AutomationException(
|
|||
|
|
AutomationErrorCode.CONFIG_ERROR, "火绒客户端未配置，无法执行病毒扫描"
|
|||
|
|
)
|
|||
|
|
result = await client.create_scan_task(client_ids=client_ids, scan_type="quick_scan")
|
|||
|
|
return {"client_ids": client_ids, "task": result}
|
|||
|
|
|
|||
|
|
|
|||
|
|
class VirusQuarantineHandler(BaseActionHandler):
|
|||
|
|
"""病毒查杀/隔离：隔离目标终端（high，需审批）。"""
|
|||
|
|
|
|||
|
|
action_type = "virus_quarantine"
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
client_ids = (ctx.mapping or {}).get("client_ids") or []
|
|||
|
|
if not client_ids:
|
|||
|
|
raise AutomationException(
|
|||
|
|
AutomationErrorCode.MAPPING_FAILED, "未解析到目标终端，无法隔离"
|
|||
|
|
)
|
|||
|
|
client = ctx.clients.get("huorong")
|
|||
|
|
if client is None:
|
|||
|
|
raise AutomationException(
|
|||
|
|
AutomationErrorCode.CONFIG_ERROR, "火绒客户端未配置，无法隔离终端"
|
|||
|
|
)
|
|||
|
|
result = await client.isolate_terminal(client_ids=client_ids)
|
|||
|
|
return {"client_ids": client_ids, "task": result, "isolated": True}
|
|||
|
|
|
|||
|
|
|
|||
|
|
class SoftwareInstallHandler(BaseActionHandler):
|
|||
|
|
"""软件自安装指引：构造安装指引与下载链接（low，内部）。"""
|
|||
|
|
|
|||
|
|
action_type = "software_install_guide"
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
payload = ctx.action.payload or {}
|
|||
|
|
software_name = payload.get("software_name", "")
|
|||
|
|
download_url = payload.get("download_url", "")
|
|||
|
|
guide = (
|
|||
|
|
f"请按以下步骤自助安装「{software_name or '所需软件'}」：\n"
|
|||
|
|
"1. 打开下载链接并完成安装；\n"
|
|||
|
|
"2. 如提示需要管理员权限，请在企业微信中发起「软件安装申请」审批；\n"
|
|||
|
|
"3. 安装完成后重启应用即可使用。"
|
|||
|
|
)
|
|||
|
|
return {
|
|||
|
|
"software_name": software_name,
|
|||
|
|
"download_url": download_url,
|
|||
|
|
"guide": guide,
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
class PasswordResetHandler(BaseActionHandler):
|
|||
|
|
"""密码重置：构造密码重置链接（high，需员工 H5 确认，内部）。"""
|
|||
|
|
|
|||
|
|
action_type = "password_reset_link"
|
|||
|
|
|
|||
|
|
async def execute(self, ctx: ActionContext) -> Dict[str, Any]:
|
|||
|
|
payload = ctx.action.payload or {}
|
|||
|
|
reset_link = payload.get("reset_link", "")
|
|||
|
|
# aTrust（零信任）密钥未到，本期以「重置链接推送」形式落地：
|
|||
|
|
# 链接由管理端配置（AUTOMATION_PASSWORD_RESET_URL），缺省给出占位说明。
|
|||
|
|
if not reset_link:
|
|||
|
|
reset_link = "about:blank#password-reset-not-configured"
|
|||
|
|
return {
|
|||
|
|
"employee_id": ctx.employee_id,
|
|||
|
|
"reset_link": reset_link,
|
|||
|
|
"note": "密码重置链接已生成，需员工在 H5 二次确认后推送至本人。",
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
# --------------------------------------------------------------------------
|
|||
|
|
# 注册表
|
|||
|
|
# --------------------------------------------------------------------------
|
|||
|
|
HANDLER_REGISTRY: Dict[str, BaseActionHandler] = {}
|
|||
|
|
|
|||
|
|
|
|||
|
|
def _register(handler: BaseActionHandler) -> None:
|
|||
|
|
HANDLER_REGISTRY[handler.action_type] = handler
|
|||
|
|
|
|||
|
|
|
|||
|
|
def register_builtin_handlers() -> None:
|
|||
|
|
"""注册内置动作适配器（幂等）。"""
|
|||
|
|
for cls in (
|
|||
|
|
TerminalLocateHandler,
|
|||
|
|
VirusScanHandler,
|
|||
|
|
VirusQuarantineHandler,
|
|||
|
|
SoftwareInstallHandler,
|
|||
|
|
PasswordResetHandler,
|
|||
|
|
):
|
|||
|
|
_register(cls())
|
|||
|
|
|
|||
|
|
|
|||
|
|
def get_handler(action_type: str) -> Optional[BaseActionHandler]:
|
|||
|
|
"""按动作类型取适配器；未注册返回 None。"""
|
|||
|
|
if not HANDLER_REGISTRY:
|
|||
|
|
register_builtin_handlers()
|
|||
|
|
return HANDLER_REGISTRY.get(action_type)
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 模块导入即注册
|
|||
|
|
register_builtin_handlers()
|