Files
zyt/server/app/mcp/service/AuditLogger.php
T
2026-09-24 09:45:44 +08:00

64 lines
2.6 KiB
PHP

<?php
declare(strict_types=1);
namespace app\mcp\service;
use think\facade\Db;
use think\facade\Log;
/**
* AI 数据访问日志:记录谁、通过哪个行知任务、查了哪个资源、返回了哪些记录。
* 参数先脱敏再写入;写日志失败不影响查询本身。
*/
class AuditLogger
{
public static function log(array $entry): void
{
try {
$arguments = $entry['arguments'] ?? null;
if (is_array($arguments)) {
$arguments = json_encode(FieldPolicy::maskText($arguments), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
}
Db::name('ai_access_log')->insert([
'grant_id' => (int) ($entry['grant_id'] ?? 0),
'admin_id' => (int) ($entry['admin_id'] ?? 0),
'tool' => mb_substr((string) ($entry['tool'] ?? ''), 0, 64),
'resource' => mb_substr((string) ($entry['resource'] ?? ''), 0, 128),
'arguments' => $arguments === null ? null : mb_substr((string) $arguments, 0, 2000),
'result_rows' => max(0, (int) ($entry['result_rows'] ?? 0)),
'record_ids' => mb_substr(implode(',', array_slice((array) ($entry['record_ids'] ?? []), 0, 200)), 0, 1000),
'status' => mb_substr((string) ($entry['status'] ?? 'ok'), 0, 16),
'message' => mb_substr((string) ($entry['message'] ?? ''), 0, 255),
'duration_ms' => max(0, (int) ($entry['duration_ms'] ?? 0)),
'client_task_id' => mb_substr(preg_replace('/[^\w.\-:]/', '', (string) ($entry['client_task_id'] ?? '')), 0, 64),
'ip' => mb_substr((string) ($entry['ip'] ?? ''), 0, 45),
'create_time' => time(),
]);
if (mt_rand(1, 500) === 1) {
self::purge();
}
} catch (\Throwable $e) {
Log::error('[ai_mcp] 写访问日志失败: ' . $e->getMessage());
}
}
/** 清理超过保留期的日志(按需触发,每次最多 5000 行) */
public static function purge(): int
{
$before = time() - McpConfig::logRetentionDays() * 86400;
return (int) Db::name('ai_access_log')->where('create_time', '<', $before)->limit(5000)->delete();
}
/** 从结果行里取记录 ID,用于回答“谁看过哪个患者” */
public static function recordIds(array $rows): array
{
$ids = [];
foreach ($rows as $row) {
if (is_array($row) && isset($row['id']) && is_scalar($row['id'])) {
$ids[] = (string) $row['id'];
}
}
return $ids;
}
}