HH-390: document cache event collection (#4)

This commit was merged in pull request #4.
This commit is contained in:
2026-08-21 14:47:51 +08:00
parent d4b9c66629
commit 8141969d46
+2 -2
View File
@@ -18,7 +18,7 @@
## Architecture and data flow ## Architecture and data flow
- CDP access validates short-lived credentials, protects the WebSocket connection, discovers targets, binds sessions, maintains heartbeats, and reports disconnects. - CDP access validates short-lived credentials, protects the WebSocket connection, discovers targets, binds sessions, maintains heartbeats, and reports disconnects.
- The collector enables CDP `Network`/`Fetch` as needed, correlates `requestId`, records HTTP and WebSocket lifecycles, and reads response bodies only on demand. - The collector enables CDP `Network`/`Fetch` as needed, correlates `requestId`, records HTTP, cache, and WebSocket lifecycles, and reads response bodies only on demand.
- The policy layer normalizes events, filters by URL/resource/status, and applies redaction, sampling, size, event, and retention limits. - The policy layer normalizes events, filters by URL/resource/status, and applies redaction, sampling, size, event, and retention limits.
- Start storage and query with JSONL containing session, target, request, timing, URL/method, safe header summaries, body availability/reference, and error fields. Do not persist full bodies by default. - Start storage and query with JSONL containing session, target, request, timing, URL/method, safe header summaries, body availability/reference, and error fields. Do not persist full bodies by default.
- Keep query and redacted export session-isolated and paginated. Re-evaluate Postgres, object storage, and asynchronous streams only after MVP evidence. - Keep query and redacted export session-isolated and paginated. Re-evaluate Postgres, object storage, and asynchronous streams only after MVP evidence.
@@ -30,7 +30,7 @@ CDP observes browser-internal decrypted events. It is not a client/server proxy,
## Priority ## Priority
- P0: single-instance CDP access; HTTP request/response/failure and WebSocket events; `requestId` correlation; default redaction; body/event limits; JSONL export; session isolation; disconnect observability. - P0: single-instance CDP access; HTTP request/response/failure, cache, and WebSocket events; `requestId` correlation; default redaction; body/event limits; JSONL export; session isolation; disconnect observability.
- P1: multiple targets/sessions, paginated query, metrics/alerts, permission audit, asynchronous event streams, and tiered storage. - P1: multiple targets/sessions, paginated query, metrics/alerts, permission audit, asynchronous event streams, and tiered storage.
- P2: Fetch mutation, versioned rules, replay, browser-cluster access, and a minimal console. - P2: Fetch mutation, versioned rules, replay, browser-cluster access, and a minimal console.