| | | 1 | | using System.Text.RegularExpressions; |
| | | 2 | | using Elsa.AI.Abstractions.Contracts; |
| | | 3 | | using Elsa.AI.Abstractions.Models; |
| | | 4 | | using Microsoft.Extensions.DependencyInjection; |
| | | 5 | | using Microsoft.Extensions.Logging; |
| | | 6 | | |
| | | 7 | | namespace Elsa.AI.Host.Context; |
| | | 8 | | |
| | 49 | 9 | | public class AIContextResolver(IServiceScopeFactory scopeFactory, ILogger<AIContextResolver> logger) |
| | | 10 | | { |
| | 2 | 11 | | private static readonly string[] SensitiveKeyFragments = ["secret", "token", "password", "apikey", "api_key", "api-k |
| | 2 | 12 | | private static readonly Regex[] SensitiveValuePatterns = |
| | 2 | 13 | | [ |
| | 2 | 14 | | new(@"\bBearer\s+[A-Za-z0-9._~+/\-=]+", RegexOptions.IgnoreCase | RegexOptions.CultureInvariant | RegexOptions.C |
| | 2 | 15 | | new(@"\b(?:api[_-]?key|token|secret|password)\s*[:=]\s*['""]?[A-Za-z0-9._~+/\-=]{8,}['""]?", RegexOptions.Ignore |
| | 2 | 16 | | ]; |
| | | 17 | | private const string Redacted = "[redacted]"; |
| | | 18 | | |
| | | 19 | | public async ValueTask<IReadOnlyCollection<AIResolvedContext>> ResolveAsync(AIChatRequest request, CancellationToken |
| | | 20 | | { |
| | 46 | 21 | | using var scope = scopeFactory.CreateScope(); |
| | 46 | 22 | | var providers = BuildProviders(scope.ServiceProvider.GetServices<IAIContextProvider>()); |
| | 46 | 23 | | var resolved = new List<AIResolvedContext>(); |
| | 46 | 24 | | var attachmentsWithProviders = request.Attachments |
| | 17 | 25 | | .Select(attachment => new |
| | 17 | 26 | | { |
| | 17 | 27 | | Attachment = attachment, |
| | 17 | 28 | | Provider = providers.GetValueOrDefault(attachment.Kind) |
| | 17 | 29 | | }) |
| | 63 | 30 | | .Where(x => x.Provider != null); |
| | | 31 | | |
| | 123 | 32 | | foreach (var item in attachmentsWithProviders) |
| | | 33 | | { |
| | 16 | 34 | | if (item.Provider is IPlaceholderAIContextProvider) |
| | 1 | 35 | | logger.LogWarning( |
| | 1 | 36 | | "AI context kind {ContextKind} is using placeholder provider {ProviderType}. Replace it before produ |
| | 1 | 37 | | item.Attachment.Kind, |
| | 1 | 38 | | item.Provider.GetType().Name); |
| | | 39 | | |
| | 16 | 40 | | var context = await item.Provider!.ResolveAsync(new AIContextResolutionRequest |
| | 16 | 41 | | { |
| | 16 | 42 | | Attachment = item.Attachment, |
| | 16 | 43 | | TenantId = request.TenantId, |
| | 16 | 44 | | UserId = request.UserId |
| | 16 | 45 | | }, cancellationToken); |
| | | 46 | | |
| | 15 | 47 | | resolved.Add(Redact(context)); |
| | | 48 | | } |
| | | 49 | | |
| | 45 | 50 | | return resolved; |
| | 45 | 51 | | } |
| | | 52 | | |
| | | 53 | | private static AIResolvedContext Redact(AIResolvedContext context) => |
| | 15 | 54 | | context with |
| | 15 | 55 | | { |
| | 15 | 56 | | Summary = RedactText(context.Summary), |
| | 15 | 57 | | Data = RedactObject(context.Data), |
| | 15 | 58 | | Metadata = RedactObject(context.Metadata) |
| | 15 | 59 | | }; |
| | | 60 | | |
| | | 61 | | private static JsonObject RedactObject(JsonObject source) |
| | | 62 | | { |
| | 31 | 63 | | var redacted = new JsonObject(); |
| | | 64 | | |
| | 96 | 65 | | foreach (var property in source) |
| | 17 | 66 | | redacted[property.Key] = IsSensitiveKey(property.Key) ? Redacted : RedactNode(property.Value); |
| | | 67 | | |
| | 31 | 68 | | return redacted; |
| | | 69 | | } |
| | | 70 | | |
| | | 71 | | private static JsonNode? RedactNode(JsonNode? node) => |
| | 17 | 72 | | node switch |
| | 17 | 73 | | { |
| | 1 | 74 | | JsonObject jsonObject => RedactObject(jsonObject), |
| | 1 | 75 | | JsonArray jsonArray => new JsonArray(jsonArray.Select(RedactNode).ToArray()), |
| | 26 | 76 | | JsonValue jsonValue when jsonValue.TryGetValue<string>(out var value) => JsonValue.Create(RedactText(value)) |
| | 2 | 77 | | JsonValue jsonValue => jsonValue.DeepClone(), |
| | 1 | 78 | | _ => node?.DeepClone() |
| | 17 | 79 | | }; |
| | | 80 | | |
| | | 81 | | private static string RedactText(string text) |
| | | 82 | | { |
| | 27 | 83 | | if (string.IsNullOrWhiteSpace(text)) |
| | 1 | 84 | | return text; |
| | | 85 | | |
| | 78 | 86 | | return SensitiveValuePatterns.Aggregate(text, (current, pattern) => pattern.Replace(current, Redacted)); |
| | | 87 | | } |
| | | 88 | | |
| | | 89 | | private static bool IsSensitiveKey(string key) => |
| | 152 | 90 | | SensitiveKeyFragments.Any(fragment => key.Contains(fragment, StringComparison.OrdinalIgnoreCase)); |
| | | 91 | | |
| | | 92 | | private static Dictionary<string, IAIContextProvider> BuildProviders(IEnumerable<IAIContextProvider> providers) |
| | | 93 | | { |
| | 46 | 94 | | return providers |
| | 93 | 95 | | .GroupBy(x => x.Kind, StringComparer.OrdinalIgnoreCase) |
| | 137 | 96 | | .ToDictionary(x => x.Key, SelectProvider, StringComparer.OrdinalIgnoreCase); |
| | | 97 | | } |
| | | 98 | | |
| | | 99 | | private static IAIContextProvider SelectProvider(IEnumerable<IAIContextProvider> providers) |
| | | 100 | | { |
| | 91 | 101 | | var providerList = providers.ToList(); |
| | 183 | 102 | | return providerList.LastOrDefault(x => x is not IPlaceholderAIContextProvider) ?? providerList.Last(); |
| | | 103 | | } |
| | | 104 | | } |