security: P3 — 插件隔离默认开启 + SenSuDB 注册 + 审计日志

- plugins.isolation 默认 true (生产环境进程隔离)
- main.py 注册 SenSuDB 服务
- WebPanelManager 注入 sensu_db 到 app context
- 文件删除/写入操作写入审计日志 (audit_log 表)
- 修复 Session 持久化所需的数据库依赖

Co-Authored-By: Claude <noreply@anthropic.com>

config/framework/base_config.yaml

@@ -11,6 +11,7 @@ plugins:
   auto_load: true
   hot_reload: true
   max_retry_count: 3
+  isolation: true
 # 自动启动脚本 — 框架启动时后台拉起
 auto_start_scripts:
   enabled: true

config/plugins/commands.yaml

@@ -9,10 +9,6 @@ commands:
     permissions:
     - framework.scaffold.plugin
     source: internal
-  echo: &id001
-    description: echo input
-    permissions: []
-    source: plugin.example_plugin
   help:
     description: 显示帮助信息
     permissions:
@@ -38,10 +34,6 @@ commands:
     permissions:
     - framework.permission.read
     source: internal
-  plugin_status: &id002
-    description: show status
-    permissions: []
-    source: plugin.example_plugin
   pm_plugin_status:
     description: '权限管理: 查看插件权限状态'
     permissions:
@@ -97,9 +89,6 @@ commands:
     permissions:
     - framework.command.test
     source: internal
-last_updated: 12019.862122705
+last_updated: 12161.390698641
-plugin_commands:
+plugin_commands: {}
-  example_plugin:
+total_commands: 18
-    echo: *id001
-    plugin_status: *id002
-total_commands: 20

config/services/network_routes.yaml

@@ -1,17 +1,4 @@
 http_port: 4200
-last_updated: 12019.877017393
+last_updated: 12161.450926401
-plugin_routes:
+plugin_routes: {}
-  example_plugin:
-  - methods:
-    - GET
-    path: /example_plugin/api/example/info
-    require_auth: false
-  - methods:
-    - POST
-    path: /example_plugin/api/plugin/echo
-    require_auth: true
-  - methods:
-    - POST
-    path: /example_plugin/api/plugin/plugin_status
-    require_auth: true
 websocket_port: 4240

main.py

@@ -11,6 +11,7 @@ from services.project_engine import ProjectEngine
 from services.pyenv_manager import PyEnvManager
 from services.proxy_service import ProxyService
 from services.web_panel.utils.system_info import SystemInfoCollector
+from services.sensu_db import SenSuDB
 import os
 from pathlib import Path
 
@@ -63,7 +64,11 @@ class SenSuFramework:
             # 2.5 自动启动脚本 (日志服务就绪后)
             await init_service.start_auto_scripts()
 
-            # 2.6 系统信息采集器 (共享实例，TUI + Web面板共用)
+            # 2.6 数据库 (持久化层)
+            sensu_db = SenSuDB()
+            self.service_manager.register_service("sensu_db", sensu_db)
+
+            # 2.7 系统信息采集器 (共享实例，TUI + Web面板共用)
             sys_collector = SystemInfoCollector()
             self.service_manager.register_service("sys_collector", sys_collector)
 

services/init_service.py

@@ -219,7 +219,7 @@ class InitService:
                 'auto_load': True,
                 'hot_reload': True,
                 'max_retry_count': 3,
-                'isolation': False,  # 默认不隔离，插件可在 settings.isolation 中声明
+                'isolation': True,  # 生产默认进程隔离，插件崩溃不影响框架
             },
             'auto_start_scripts': {
                 'enabled': True,

services/web_panel/manager.py

@@ -33,6 +33,7 @@ class WebPanelManager:
         app['service_manager'] = self.sm
         app['auth_service'] = self.sm.get_service("auth")
         app['log_service'] = self.sm.get_service("log")
+        app['sensu_db'] = self.sm.get_service("sensu_db")
         app['panel_config'] = {
             'username': self.panel_user,
             'password': self.panel_pass,

services/web_panel/routes/files.py

@@ -272,6 +272,10 @@ def setup_file_routes(app, service_manager, prefix=''):
             else:
                 p.unlink()
             logger.info(f"🗑 删除: {p}")
+            # 审计日志
+            db = request.app.get("sensu_db")
+            if db:
+                db.log_audit(request.get("user", {}).get("username", "?"), "file_delete", str(p))
             return web.json_response({"ok": True})
         except Exception as e:
             return web.json_response({"error": str(e)}, status=500)
@@ -375,6 +379,9 @@ def setup_file_routes(app, service_manager, prefix=''):
             content = data.get("content", "")
             p.write_text(content, encoding="utf-8")
             logger.info(f"💾 写入文件: {p} ({len(content)} bytes)")
+            db = request.app.get("sensu_db")
+            if db:
+                db.log_audit(request.get("user", {}).get("username", "?"), "file_write", str(p))
             return web.json_response({"ok": True, "size": len(content)})
         except Exception as e:
             return web.json_response({"error": str(e)}, status=500)