POSA_Copyrighter/web/operator-gui/operator-search.js
유창욱 3f7b3a9cf2 chore: initial commit of copyrighter (rights_filter)
Image rights / copyright detection system: SQLite store, HTTP app,
search integrations (Naver, Google Custom Search, Google Cloud Vision
web detection), image analysis (fingerprints, face/person detection,
evidence enrichment, risk scoring), an admin/review layer, governance
and retention policies, batch jobs, and a browser-based operator GUI.

This baseline incorporates a full code-review remediation pass
(46 fixes; 358 tests passing). Highlights:

CRITICAL
- Prevent evidence cascade-delete during the schema-constraint
  migration by disabling FK enforcement around the table rebuild.

Security
- Sandbox served media (neutralize stored XSS from uploaded/collected
  SVGs) via CSP + nosniff on the untrusted media routes.
- Strip embedded EXIF/GPS from external image derivatives before they
  are sent to third-party APIs.
- Return a clean 404 (not an uncaught StopIteration) for PATCH on an
  unknown provider.

Correctness
- LLM-summary failures no longer add +30 to the risk score.
- Decode only explicit JS escapes so Korean image URLs are not mangled.
- Consume search quota only after a successful request.
- Naver/Google adapters map responses inside the failure boundary, so a
  malformed response degrades to evidence instead of crashing enrichment.
- Domain-aware provider attribution; face-box IoU de-duplication; count
  searches (not result items); per-box crop isolation; clamp evidence
  confidence and Google CSE num; real submittedEpoch; and more.

Robustness
- Offline LLM connect fast-fails (short connect timeout) so seed/reload
  requests are not stalled; full read timeout preserved for generation.
- Malformed numeric env vars fall back to defaults instead of crashing
  startup.

Performance
- Per-submission evidence reads (no full-table scan per rescore),
  audit-log LIMIT, lazy active-store lookup, hoisted timestamps.

Tests
- ~24 regression tests added pinning the above fixes.

Runtime data (data/, outputs/, *.sqlite3, *.log), secrets (.env), and
node_modules are gitignored.
2026-06-09 09:50:31 +09:00

37 lines
1,007 B
JavaScript

(function attachOperatorSearch(global) {
function formatQueryStatus(status) {
const labels = {
ok: "성공",
covered: "근거 있음",
empty: "결과 없음",
failed: "실패",
disabled: "중지",
skipped: "건너뜀",
pending: "대기",
not_run: "미실행",
};
return labels[status] || status || "미실행";
}
function formatQueryStrategy(strategy) {
const labels = {
google_title: "구글 페이지 제목 기반",
google_page_title: "구글 페이지 제목 기반",
submission_title: "제출 제목/파일명 기반",
submission_filename: "제출 제목/파일명 기반",
manual: "운영자 입력",
suggested: "추천 쿼리",
};
return labels[strategy] || strategy || "";
}
function normalizeManualSearchProvider(provider) {
return "naver";
}
global.OperatorSearch = {
formatQueryStatus,
formatQueryStrategy,
normalizeManualSearchProvider,
};
})(window);