- ${steps.map(([label, value], index) => `
-
- ${escapeHtml(label)}
- ${escapeHtml(value)}
-
- `).join("")}
+
+
+
+
这里发生了什么 · ${escapeHtml(evidence.kindLabel)}
+
${escapeHtml(conclusion.title)}
+
${escapeHtml(evidence.description)}
+ ${localVerdict ? renderVerdictInline(localVerdict, evidence.policies?.find(isPolicyCode) || "") : ""}
- `;
-}
-function conciseEvidence(value, maxLength = 48) {
- const text = translateText(String(value || "-")).replace(/\s+/g, " ").trim();
- return text.length > maxLength ? `${text.slice(0, maxLength - 1)}…` : text;
-}
-
-function stageRail(records) {
- const stages = [
- ["上下文溯源", records.filter((record) => canonicalDomain(record) === "context").length],
- ["状态完整性", records.filter((record) => canonicalDomain(record) === "state").length],
- ["意图授权", records.filter((record) => canonicalDomain(record) === "intent").length],
- ["工具边界", records.filter((record) => canonicalDomain(record) === "boundary").length],
- ["证据回流", records.filter((record) => canonicalDomain(record) === "feedback").length],
- ];
- return `
-
- ${stages.map(([label, count]) => `
${escapeHtml(label)}${escapeHtml(count)}
`).join("")}
-
- `;
-}
-
-function canonicalDomain(record) {
- const layer = String(record.layer || record.payload?.layer || "");
- const text = searchableText(record);
- if (layer === "Context Provenance" || ["provenance_scan", "llm_input", "lab_command", "session_start", "message_write"].includes(record.type)) return "context";
- if (layer === "State Integrity" || /memory|webhook|poison/i.test(text)) return "state";
- if (layer === "Intent Authorization" || /taskspec|intent|scope|drift|abac/i.test(text)) return "intent";
- if (layer === "Evidence Feedback" || ["tool_result", "approval_cache_hit", "runtime"].includes(record.type)) return "feedback";
- return "boundary";
-}
-
-function issueDigest(records) {
- const issues = [];
- const hardcoded = records.filter((record) => /hardcoded secret/i.test(String(record.payload?.reason || record.summary || record.title || "")));
- const grouped = records.filter((record) => record.type === "finding_group");
- const denied = records.filter((record) => record.type === "tool_decision" && isBlocked(record));
- const timeouts = records.filter((record) => searchableText(record).includes("timed out") || searchableText(record).includes("timeout"));
-
- if (hardcoded.length) issues.push(["硬编码敏感值", hardcoded.length, "warning"]);
- if (grouped.length) issues.push(["已折叠扫描噪声", grouped.reduce((sum, record) => sum + Number(record.payload?.count || 0), 0), "warning"]);
- if (denied.length) issues.push(["工具阻断", denied.length, "danger"]);
- if (timeouts.length) issues.push(["超时", timeouts.length, "warning"]);
- if (!issues.length) return "";
-
- return `
${issues.map(([label, count, tone]) => `${escapeHtml(label)} ${escapeHtml(count)}`).join("")}
`;
-}
-
-function renderFocusMode() {
- for (const node of document.querySelectorAll("[data-focus]")) {
- node.classList.toggle("active", node.dataset.focus === state.focusMode);
- }
-}
-
-function filteredRecords() {
- const query = $("searchInput").value.trim().toLowerCase();
- const severity = $("severityFilter").value;
- const layer = $("layerFilter").value;
- const type = $("typeFilter").value;
-
- let records = sessionRecords();
- records = applyFocusMode(records);
- records = records.filter((record) => {
- if (severity && record.severity !== severity) return false;
- if (layer && record.layer !== layer) return false;
- if (type && record.type !== type) return false;
- if (!query) return true;
- return searchableText(record).includes(query);
- });
-
- return sortRecordsDesc(records);
-}
-
-function resetTimelinePage() {
- state.timelinePage = 1;
-}
-
-function applyFocusMode(records) {
- if (state.focusMode === "all") return records;
- if (state.focusMode === "tools") {
- return records.filter((record) => ["tool_decision", "tool_result", "alert", "approval_request", "approval_resolution", "approval_cache_hit"].includes(record.type));
- }
- if (state.focusMode === "context") {
- return records.filter((record) => canonicalDomain(record) === "context");
- }
- return records.filter((record) => isImportantRecord(record));
-}
+
+ 现场信息
+ ${keyFacts.map((fact) => `- ${escapeHtml(fact.label)}
- ${escapeHtml(fact.value).replace(/\n/g, "
")} `).join("")}
+
-function isImportantRecord(record) {
- if (record.severity === "danger") return true;
- if (["tool_decision", "tool_result", "alert", "response_cover", "approval_request", "approval_resolution", "approval_cache_hit"].includes(record.type)) return true;
- if (record.type === "message_write") {
- const role = record.payload?.role;
- return role === "user" || role === "assistant";
+
+ 技术详情
+
+ ${renderInspectorFacts(evidence.facts)}
+ ${renderInspectorObservations(evidence.observations)}
+ ${renderInspectorRelations(evidence.relations)}
+ ${renderInspectorPolicies(evidence.policies)}
+ ${renderDownstreamDecision(evidence.downstreamDecision)}
+ ${renderEvidenceRecords(evidence.records)}
+ ${meta.length ? `
${meta.map(([label, value]) => `${escapeHtml(label)} ${escapeHtml(value)}`).join("")}
` : ""}
+
+ 原始日志 / Trace
+ ${escapeHtml(JSON.stringify({ selection: selection.value, records: evidence.records }, null, 2))}
+
+
`;
+
+ bindInspectorLinks();
+}
+
+function selectionConclusion(evidence, session) {
+ const stateValue = String(evidence.state || "").toUpperCase();
+ const relation = String(evidence.kind || "").toLowerCase();
+ if (evidence.type === "edge") {
+ if (["blocked_by", "decides"].includes(relation) && session.decision === "deny") return { title: "安全控制已生效", tone: "safe", icon: "shield-check" };
+ if (["taints", "consumes"].includes(relation)) return { title: "攻击传播已确认", tone: "danger", icon: "shield-alert" };
+ if (["targets", "invokes", "requests"].includes(relation)) return { title: "高风险调用链已确认", tone: "warning", icon: "route" };
+ if (["declares", "authorizes"].includes(relation)) return { title: "任务授权关系已确认", tone: "neutral", icon: "badge-check" };
+ if (relation === "produces") return { title: "工具返回已记录", tone: "neutral", icon: "database" };
+ if (relation === "derives") return { title: "数据血缘已记录", tone: "neutral", icon: "git-branch" };
+ return { title: "因果关系已记录", tone: "neutral", icon: "git-branch" };
}
- if (record.type === "guard_finding") {
- const reason = String(record.payload?.reason || record.summary || record.title || "");
- return /hardcoded secret|embedded secrets|sensitive asset/i.test(reason);
+ if (evidence.kind === "decision") {
+ if (stateValue === "DENY") return { title: "已阻断", tone: "safe", icon: "shield-check" };
+ if (["ASK", "REVIEW"].includes(stateValue)) return { title: "等待人工确认", tone: "warning", icon: "clock-alert" };
+ return { title: "已放行", tone: "safe", icon: "badge-check" };
}
- if (record.type === "finding_group") return true;
- if (record.type === "provenance_scan") return Number(record.payload?.findingCount || record.payload?.findings || 0) > 0;
- return ["session_start", "llm_input"].includes(record.type);
-}
-
-function sessionRecords() {
- if (state.selectedSession && state.selectedSession !== ALL_SESSIONS) {
- return state.records.filter((record) => record.session_key === state.selectedSession);
+ if (evidence.kind === "guard") return { title: session.decision === "deny" ? "执行边界阻断成功" : "执行边界校验完成", tone: "safe", icon: "shield-check" };
+ if (evidence.kind === "taint") return { title: "确认 Prompt Injection", tone: "danger", icon: "shield-alert" };
+ if (evidence.kind === "secret") return { title: "敏感数据已标记", tone: "warning", icon: "lock-keyhole" };
+ if (evidence.kind === "sink") return { title: session.decision === "deny" ? "外发在执行前被阻断" : "已识别外部目标", tone: session.decision === "deny" ? "safe" : "warning", icon: session.decision === "deny" ? "shield-check" : "send" };
+ if (evidence.kind === "capability") {
+ if (/未授权|UNSCOPED|DENY|BLOCK/.test(`${evidence.title} ${evidence.state}`)) return { title: "超出任务授权", tone: "warning", icon: "shield-alert" };
+ return { title: "任务授权已确认", tone: "neutral", icon: "badge-check" };
}
- return state.records;
-}
+ if (evidence.kind === "action" && /BLOCK|DENY|UNSCOPED|REJECT/.test(stateValue)) return { title: "危险工具调用已阻断", tone: "safe", icon: "shield-check" };
+ if (evidence.kind === "action") return { title: /SUCCEEDED|COMPLETED|ALLOW/.test(stateValue) ? "工具调用已完成" : "工具调用已记录", tone: "neutral", icon: "wrench" };
+ if (evidence.kind === "data") return { title: "工具返回已记录", tone: "neutral", icon: "database" };
+ if (evidence.kind === "intent") return { title: "用户请求已解析", tone: "neutral", icon: "message-square-text" };
+ if (evidence.kind === "agent") return { title: "Agent 已形成执行计划", tone: "neutral", icon: "bot" };
+ return { title: "当前行为已记录", tone: evidence.tone === "warning" ? "warning" : "neutral", icon: selectionIcon(evidence) };
+}
+
+function selectionKeyFacts(evidence, session) {
+ const conclusion = buildIncidentConclusion(session);
+ const fact = (...labels) => evidence.facts?.find((item) => labels.includes(item.label))?.value || "";
+ const observation = (...labels) => evidence.observations?.find((item) => labels.includes(item.label))?.value || "";
+ const rows = [];
+ const add = (label, value) => {
+ const text = String(value || "").trim();
+ if (text && !rows.some((item) => item.label === label)) rows.push({ label, value: text });
+ };
-function groupTimelineRecords(records) {
- const buckets = new Map();
- for (const record of records) {
- if (!isGroupableProvenanceFinding(record)) continue;
- const key = provenanceFindingKey(record);
- const bucket = buckets.get(key) || [];
- bucket.push(record);
- buckets.set(key, bucket);
+ if (evidence.type === "edge") {
+ add("语义关系", evidence.title);
+ add("来源节点", fact("来源节点"));
+ add("目标节点", fact("目标节点"));
+ add("目标参数", fact("目标参数"));
+ add("发生时间", evidence.occurredAt ? formatDateTime(evidence.occurredAt) : "");
+ } else {
+ add("当前阶段", evidence.title);
+ add("发生时间", evidence.occurredAt ? formatDateTime(evidence.occurredAt) : "");
+ add("用户请求", observation("用户请求"));
+ add("工具", fact("工具"));
+ add("工具参数", observation("工具参数"));
+ add("返回结果", observation("返回预览"));
+ add("当前状态", fact("当前状态") || evidence.state);
+ add("字段路径", fact("字段路径"));
+ add("数据来源", fact("数据来源") || observation("数据来源"));
+ add("外部目标", fact("目标"));
}
- const groupedIds = new Set();
- const firstRecordByKey = new Map();
- for (const [key, bucket] of buckets) {
- if (bucket.length < 3) continue;
- const latest = bucket.slice().sort(compareRecordsDesc)[0];
- firstRecordByKey.set(latest.id, { key, bucket });
- for (const record of bucket) groupedIds.add(record.id);
+ const riskyRelations = new Set(["constrains", "taints", "consumes", "targets", "blocked_by", "reviewed_by", "approved_by", "decides"]);
+ const riskSelection = evidence.type === "edge"
+ ? riskyRelations.has(String(evidence.kind || "").toLowerCase())
+ : ["taint", "secret", "sink", "guard", "decision"].includes(evidence.kind)
+ || evidence.kind === "capability" && /未授权|UNSCOPED|DENY|BLOCK/.test(`${evidence.title} ${evidence.state}`)
+ || evidence.kind === "action" && /BLOCK|DENY|UNSCOPED|REJECT/.test(String(evidence.state || "").toUpperCase());
+ if (riskSelection) {
+ add("攻击类型", conclusion.attackType);
+ add("执行边界", evidence.policies?.find(isPolicyCode) || conclusion.policy);
+ add("处理结果", conclusion.result);
+ add("外发目标", conclusion.target);
+ } else if (evidence.type === "edge") {
+ add("证据依据", fact("证据依据"));
}
-
- const output = [];
- for (const record of sortRecordsDesc(records)) {
- const group = firstRecordByKey.get(record.id);
- if (group) {
- output.push(makeProvenanceFindingGroup(group.key, group.bucket));
- continue;
- }
- if (groupedIds.has(record.id)) continue;
- output.push(record);
+ add("置信度", fact("置信度") || `${Math.round(Number(session.graph?.confidence || 0) * 100)}%`);
+ return rows.slice(0, 8);
+}
+
+function renderInspectorFacts(facts = []) {
+ if (!facts.length) return "";
+ return `
+ 当前节点
+ ${facts.map((fact) => `- ${escapeHtml(fact.label)}
- ${escapeHtml(fact.value).replace(/\n/g, "
")} `).join("")}
+ `;
+}
+
+function renderInspectorObservations(observations = []) {
+ if (!observations.length) return "";
+ return `
+ 玄鉴观测
+ ${observations.map((item) => `
+
${escapeHtml(item.label)}
+
${escapeHtml(item.value).replace(/\n/g, "
")}
+ ${item.recordId ? `
${escapeHtml(item.recordId)}` : ""}
+
`).join("")}
`;
+}
+
+function renderInspectorRelations(relations = []) {
+ if (!relations.length) return "";
+ return `
+ 输入 / 输出
+ ${relations.map((relation) => ``).join("")}
+ `;
+}
+
+function renderInspectorPolicies(policies = []) {
+ if (!policies.length) return "";
+ return `
+ 与此处直接相关的策略
+ ${policies.map((policy) => `${escapeHtml(policy)}`).join("")}
+ `;
+}
+
+function renderDownstreamDecision(decision) {
+ if (!decision?.id) return "";
+ return `
+ 下游裁决
+
+ `;
+}
+
+function renderEvidenceRecords(records = []) {
+ if (!records.length) return `
+ 关联审计记录
+ 该图元素没有独立记录；其关系来自后端因果图投影。
+ `;
+ return `
+ 关联审计记录 ${records.length}
+ ${records.map((record) => `
`).join("")}
`;
+}
+
+function bindInspectorLinks() {
+ for (const button of $("inspectorBody").querySelectorAll("[data-related-edge]")) {
+ button.addEventListener("click", () => selectGraphItem("edge", button.dataset.relatedEdge));
}
- return sortRecordsDesc(output);
-}
-
-function paginate(items, page, pageSize) {
- const total = items.length;
- const pages = Math.max(1, Math.ceil(total / pageSize));
- const safePage = Math.max(1, Math.min(pages, Number(page) || 1));
- const start = (safePage - 1) * pageSize;
- return {
- items: items.slice(start, start + pageSize),
- page: safePage,
- pages,
- total,
- start: total ? start + 1 : 0,
- end: Math.min(total, start + pageSize),
- };
-}
-
-function paginationHtml(id, pageInfo) {
- if (pageInfo.pages <= 1) return "";
- return `
-
- `;
-}
-
-function bindPagination(id, onPage) {
- document.querySelectorAll(`[data-pagination="${id}"] [data-page]`).forEach((button) => {
- button.addEventListener("click", () => onPage(Number(button.dataset.page || 1)));
- });
-}
-
-function isGroupableProvenanceFinding(record) {
- return record.type === "guard_finding"
- && canonicalDomain(record) === "context"
- && record.severity === "warning";
-}
-
-function provenanceFindingKey(record) {
- const payload = record.payload || {};
- const reason = payload.reason || record.summary || record.title || "provenance finding";
- const confidence = payload.evidence?.confidence || "";
- return [record.session_key || "", record.layer || "", record.severity || "", reason, confidence].join("|");
-}
-
-function makeProvenanceFindingGroup(key, bucket) {
- const sortedBucket = bucket.slice().sort(compareRecordsDesc);
- const first = sortedBucket[0];
- const payload = first.payload || {};
- const reason = payload.reason || first.summary || first.title || "provenance finding";
- const paths = Array.from(new Set(bucket.map((record) => record.payload?.evidence?.path).filter(Boolean)));
- const confidence = payload.evidence?.confidence || "medium";
- return {
- id: `group:${key}`,
- created_at: first.created_at,
- run_id: first.run_id,
- session_key: first.session_key,
- type: "finding_group",
- layer: first.layer,
- severity: first.severity,
- title: `${translateText(reason)}（${bucket.length} 项）`,
- summary: `已折叠 ${bucket.length} 条同类溯源扫描发现，涉及 ${paths.length || bucket.length} 个文件。`,
- payload: {
- grouped: true,
- group_type: "provenance_findings",
- count: bucket.length,
- reason,
- confidence,
- paths: paths.slice(0, 120),
- omitted_paths: Math.max(0, paths.length - 120),
- record_ids: sortedBucket.slice(0, 10).map((record) => record.id),
- },
- };
-}
-
-function sortRecordsDesc(records) {
- return records.slice().sort(compareRecordsDesc);
-}
-
-function compareRecordsDesc(a, b) {
- const timeA = new Date(a.created_at || 0).getTime();
- const timeB = new Date(b.created_at || 0).getTime();
- if (timeA !== timeB) return timeB - timeA;
- return String(b.id || "").localeCompare(String(a.id || ""));
-}
-
-function buildSessions() {
- const groups = new Map();
- for (const record of state.records) {
- const key = record.session_key || "session_unknown";
- const item = groups.get(key) || {
- key,
- count: 0,
- latest: record.created_at,
- danger: 0,
- warning: 0,
- alerts: 0,
- toolCalls: 0,
- };
- item.count += 1;
- if (new Date(record.created_at) > new Date(item.latest)) item.latest = record.created_at;
- if (record.severity === "danger") item.danger += 1;
- if (record.severity === "warning") item.warning += 1;
- if (record.type === "alert") item.alerts += 1;
- if (record.type === "tool_decision" || record.type === "tool_result") item.toolCalls += 1;
- groups.set(key, item);
+ for (const button of $("inspectorBody").querySelectorAll("[data-related-node]")) {
+ button.addEventListener("click", () => selectGraphItem("node", button.dataset.relatedNode));
}
- return Array.from(groups.values()).sort((a, b) => new Date(b.latest) - new Date(a.latest));
-}
-
-function eventHtml(record) {
- const active = record.id === state.selectedId ? "active" : "";
- return `
-
-
- ${escapeHtml(formatTime(record.created_at))}
-
-
-
- ${escapeHtml(titleText(record))}
- ${escapeHtml(typeNames[record.type] || record.type)}
-
-
${escapeHtml(summaryText(record))}
-
- ${chip(severityNames[record.severity] || record.severity, record.severity)}
- ${chip(layerNames[record.layer] || record.layer || "-", "layer")}
- ${chip(compactSession(record.session_key), "session")}
-
-
- `;
-}
-
-function bindTimeline(records) {
- for (const node of document.querySelectorAll(".event")) {
- node.addEventListener("click", () => {
- state.selectedId = node.dataset.id || "";
- const record = records.find((item) => item.id === state.selectedId);
- if (record) renderDetail(record);
- for (const item of document.querySelectorAll(".event.active")) item.classList.remove("active");
- node.classList.add("active");
+ for (const button of $("inspectorBody").querySelectorAll("[data-record-id]")) {
+ button.addEventListener("click", () => {
+ const index = currentSession()?.timeline.findIndex((event) => event.id === button.dataset.recordId) ?? -1;
+ if (index >= 0) setPlayhead(index, { live: false, select: true });
});
}
}
-function renderDetail(record) {
- state.selectedRecord = record;
- $("detailMeta").textContent = `${severityNames[record.severity] || record.severity} · ${formatDate(record.created_at)}`;
- $("copyPayloadBtn").disabled = false;
- $("copyPayloadBtn").dataset.recordId = record.id;
- const fullRecord = fullDetailRecord(record.id) || record;
-
- $("detailBody").innerHTML = `
-
- ${escapeHtml(titleText(fullRecord))}
- ${escapeHtml(summaryText(fullRecord))}
-
- ${quickFacts(fullRecord)}
- ${decisionSummary(fullRecord)}
- ${groupSummary(fullRecord)}
- ${record.payload?.__compact && !state.detailCache.has(record.id) ? '
正在读取完整 payload...
' : ""}
-
- 原始 JSON 证据按需展开
- ${escapeHtml(JSON.stringify(fullRecord, null, 2))}
-
- `;
- if (record.payload?.__compact && !state.detailCache.has(record.id)) {
- void loadRecordDetail(record.id);
+function selectionIcon(evidence) {
+ if (evidence.type === "edge") return "git-branch";
+ return ({
+ intent: "user-round",
+ capability: "badge-check",
+ agent: "bot",
+ action: "wrench",
+ data: "database",
+ taint: "shield-alert",
+ secret: "lock-keyhole",
+ sink: "send",
+ guard: "shield-check",
+ judge: "scale",
+ decision: "gavel",
+ collapsed: "ellipsis",
+ })[evidence.kind] || "circle";
+}
+
+function emptyInspector(title, text) {
+ return `
${escapeHtml(title)}${escapeHtml(text)}
`;
+}
+
+function renderIncidentSummary() {
+ const session = currentSession();
+ const text = $("resultSummary");
+ const outcomeTitle = $("outcomeTitle");
+ const actions = $("outcomeActions");
+ if (!session) {
+ text.textContent = "等待真实审计事件";
+ outcomeTitle.textContent = "等待裁决";
+ actions.innerHTML = "";
+ return;
}
-}
-
-function renderEmptyDetail() {
- state.selectedRecord = null;
- $("detailMeta").textContent = "未选择";
- $("copyPayloadBtn").disabled = true;
- $("copyPayloadBtn").dataset.recordId = "";
- $("detailBody").innerHTML = '
选择一条记录查看摘要和 payload。
';
-}
-function quickFacts(record) {
- const payload = record.payload || {};
- const rows = [
- ["类型", typeNames[record.type] || record.type],
- ["层", layerNames[record.layer] || record.layer || "-"],
- ["会话", record.session_key || "-"],
- ["Run", record.run_id || "-"],
+ const conclusion = buildIncidentConclusion(session);
+ text.textContent = brandText(conclusion.summary);
+ outcomeTitle.textContent = brandText(conclusion.result);
+ const guardNode = session.graph.nodes.find((node) => node.kind === "guard");
+ const secretNode = session.graph.nodes.find((node) => node.kind === "secret");
+ const sinkNode = session.graph.nodes.find((node) => node.kind === "sink");
+ const riskyAction = [...session.graph.nodes].reverse().find((node) => node.kind === "action" && (node.authorized === false || /BLOCK|DENY|UNSCOPED|REJECT/i.test(String(node.state || ""))))
+ || [...session.graph.nodes].reverse().find((node) => node.kind === "action");
+ const decisionNode = [...session.graph.nodes].reverse().find((node) => node.kind === "decision");
+ const bypass = session.graph.traceKind === "enforcement_bypass" || session.graph.risk === "execution_after_block";
+ const items = [
+ {
+ icon: bypass ? "triangle-alert" : "shield-check",
+ label: bypass ? "需要进一步处置" : session.decision === "deny" ? "攻击已阻断" : session.decision === "ask" ? "攻击链已暂停" : "授权路径已完成",
+ detail: guardNode?.title || conclusion.policy,
+ tone: bypass ? "danger" : session.decision === "ask" ? "warning" : "safe",
+ id: decisionNode?.id || guardNode?.id,
+ },
+ {
+ icon: "lock-keyhole",
+ label: bypass ? "敏感数据状态待核查" : session.decision === "deny" ? "敏感数据未发送" : session.decision === "ask" ? "敏感数据流已冻结" : "未发现越权数据流",
+ detail: secretNode?.title || "未记录敏感字段",
+ tone: bypass ? "danger" : session.decision === "ask" ? "warning" : "safe",
+ id: secretNode?.id || guardNode?.id,
+ },
+ {
+ icon: "send",
+ label: bypass ? "外部副作用待确认" : session.decision === "deny" ? "外部工具未成功执行" : session.decision === "ask" ? "外部工具等待审批" : "授权工具执行完成",
+ detail: conclusion.target || riskyAction?.title || "未记录外部目标",
+ tone: bypass ? "danger" : session.decision === "ask" ? "warning" : "safe",
+ id: sinkNode?.id || riskyAction?.id || guardNode?.id,
+ },
];
-
- if (payload.toolName || payload.normalized_tool) rows.push(["工具", payload.normalized_tool ? `${displayTool(payload.toolName || "-")} -> ${displayTool(payload.normalized_tool)}` : displayTool(payload.toolName)]);
- if (payload.role) rows.push(["消息角色", roleNames[payload.role] || payload.role]);
- if (payload.stopReason) rows.push(["停止原因", stopReasonNames[payload.stopReason] || payload.stopReason]);
- if (payload.decision || payload.original_decision) rows.push(["裁决", `${decisionNames[payload.decision] || payload.decision || "-"} / ${decisionNames[payload.original_decision] || payload.original_decision || "-"}`]);
- if (payload.risk_score !== undefined) rows.push(["风险分", payload.risk_score]);
- if (payload.approval_cache_hit !== undefined) rows.push(["审批缓存", payload.approval_cache_hit ? "命中" : "未命中"]);
- if (payload.grouped) {
- rows.push(["折叠数量", payload.count || "-"]);
- rows.push(["置信度", confidenceLabel(payload.confidence)]);
+ actions.innerHTML = items.map((entry) => {
+ const selected = state.selectedItem?.type === "node" && state.selectedItem?.value?.id === entry.id;
+ return `
`;
+ }).join("");
+ for (const button of actions.querySelectorAll("[data-summary-id]")) {
+ button.addEventListener("click", () => selectGraphItem("node", button.dataset.summaryId));
}
-
- return `
${rows.map(([label, value]) => `${escapeHtml(label)}${escapeHtml(value)}
`).join("")}`;
-}
-
-function decisionSummary(record) {
- const payload = record.payload || {};
- if (!["tool_decision", "approval_request", "approval_resolution", "approval_cache_hit", "response_cover", "alert"].includes(record.type)) return "";
-
- const findings = Array.isArray(payload.findings) ? payload.findings : [];
- const rows = [
- ["判定", decisionNames[payload.verdict] || decisionNames[payload.decision] || payload.verdict || payload.decision || "-"],
- ["确定性阻断", payload.deterministic_block ? "是" : "否"],
- ["违规原因", translateText((payload.violations || []).join("; ") || payload.summary || "-")],
- ["允许工具", payload.task_spec?.allowed_tools?.map(displayTool).join(", ") || "-"],
- ["发现类型", findingTypeSummary(findings)],
- ];
-
- return `
${rows.map(([label, value]) => `${escapeHtml(label)}${escapeHtml(value)}
`).join("")}`;
-}
-
-function groupSummary(record) {
- const payload = record.payload || {};
- if (!payload.grouped) return "";
- const paths = Array.isArray(payload.paths) ? payload.paths : [];
- const omitted = payload.omitted_paths ? `
另有 ${escapeHtml(payload.omitted_paths)} 个路径未展开。
` : "";
- return `
-
- 涉及文件
- ${escapeHtml(translateText(payload.reason || record.summary || ""))} · ${escapeHtml(confidenceLabel(payload.confidence))}
-
- ${paths.slice(0, 40).map((item) => `- ${escapeHtml(item)}
`).join("")}
-
- ${omitted}
-
- `;
-}
-
-function findingTypeSummary(findings) {
- if (!Array.isArray(findings) || !findings.length) return "-";
- const counts = findings.reduce((acc, finding) => {
- const key = finding.finding_type || "unknown";
- acc[key] = (acc[key] || 0) + 1;
- return acc;
- }, {});
- return Object.entries(counts).map(([key, value]) => `${findingTypeNames[key] || key}:${value}`).join(", ");
-}
-
-function titleText(record) {
- const raw = record.title || typeNames[record.type] || record.type || "";
- return translateText(raw);
}
-function displayTool(value) {
- const key = String(value || "").trim();
- return toolNames[key] || key || "-";
-}
-
-function confidenceLabel(value) {
- return {
- high: "高置信",
- medium: "中置信",
- low: "低置信",
- }[value] || value || "-";
-}
-
-function translateText(value) {
- let text = compactText(value);
- for (const [pattern, replacement] of textTranslations) {
- text = text.replace(pattern, replacement);
+function renderTimeline() {
+ const session = currentSession();
+ const events = session?.timeline || [];
+ const range = $("timelineRange");
+ const max = Math.max(0, events.length - 1);
+ state.playhead = Math.max(0, Math.min(max, state.playhead));
+ range.max = String(max);
+ range.value = String(state.playhead);
+ range.disabled = events.length < 2;
+ range.style.setProperty("--progress", max ? `${(state.playhead / max) * 100}%` : "100%");
+
+ $("timelineTicks").innerHTML = timelineTickIndexes(events.length).map((index) => {
+ const event = events[index];
+ const left = max ? (index / max) * 100 : 0;
+ const stage = timelineStageLabel(event, index, events);
+ const tone = /Prompt|注入|污染/i.test(stage)
+ ? "danger"
+ : /拦截|阻断|裁决|响应返回/i.test(stage) && event.decision === "deny"
+ ? "safe"
+ : /外发|目标|工具调用|系统|配置|敏感/i.test(stage) || event.decision === "ask" || event.severity === "medium"
+ ? "warning"
+ : event.decision === "allow" ? "safe" : "info";
+ const stageLabel = timelineStageLabel(event, index, events);
+ const clock = formatClock(event.time);
+ return `
`;
+ }).join("");
+
+ for (const tick of $("timelineTicks").querySelectorAll("[data-step]")) {
+ tick.addEventListener("click", () => setPlayhead(Number(tick.dataset.step), { live: false, select: true }));
}
- return text;
-}
-
-function summaryText(record) {
- const payload = record.payload || {};
- if (record.type === "finding_group") {
- return `${record.summary || ""} ${translateText(payload.reason || "")}`.trim();
- }
- if (record.type === "tool_decision") {
- return translateText((payload.violations || []).join("; ") || payload.summary || `${displayTool(payload.toolName || "tool")} -> ${decisionNames[payload.decision] || payload.decision || payload.verdict || "裁决"}`);
- }
- if (record.type === "guard_finding") {
- return translateText(payload.reason || record.summary || "");
- }
- if (record.type === "message_write") {
- const preview = previewText(payload.preview);
- if (preview) return `${roleNames[payload.role] || payload.role || "消息"}：${preview}`;
- }
- if (record.type === "tool_result") {
- return payload.error ? translateText(payload.error) : "工具返回完成";
+ const event = events[state.playhead];
+ $("timelineCurrent").textContent = event?.time ? formatDateTime(event.time) : "时间未记录";
+ $("timelineEvent").textContent = event ? brandText(`${event.stage || timelineStageLabel(event, state.playhead, events)} · ${event.title}`) : "等待事件";
+ $("timelineEvent").title = brandText(event?.detail || event?.title || "");
+ $("liveBtn").classList.toggle("active", state.live);
+ $("playbackBadge").classList.toggle("paused", !state.live);
+ $("playbackBadge").innerHTML = state.live ? `
实时` : `
回放 ${state.playhead + 1}/${Math.max(1, events.length)}`;
+ updatePlaybackButton();
+ syncGraphPlayback();
+}
+
+function setPlayhead(value, { live = false, select = true } = {}) {
+ const session = currentSession();
+ const max = Math.max(0, (session?.timeline.length || 1) - 1);
+ state.playhead = Math.max(0, Math.min(max, Number(value) || 0));
+ state.live = live && state.playhead === max;
+ if (!state.live) stopPlayback();
+ if (select) applyTimelineSelection(session?.timeline[state.playhead]);
+ renderTimeline();
+ renderIcons();
+}
+
+function syncGraphPlayback() {
+ const session = currentSession();
+ if (!session) return;
+ const event = session.timeline[state.playhead];
+ semanticGraph.setRevealSequence(state.live ? Number.POSITIVE_INFINITY : Number(event?.revealSequence || 0));
+}
+
+function togglePlayback() {
+ if (state.playing) {
+ stopPlayback();
+ renderTimeline();
+ return;
}
- return translateText(compactText(record.summary || payload.summary || JSON.stringify(payload).slice(0, 220)));
-}
-
-function previewText(value) {
- if (!value) return "";
- try {
- const parsed = JSON.parse(value);
- if (Array.isArray(parsed)) {
- return parsed
- .map((item) => {
- if (item.type === "toolCall") return `调用工具 ${displayTool(item.name || "-")}`;
- if (item.type === "text") return translateText(item.text || "");
- return item.type || "";
- })
- .filter(Boolean)
- .join(" ");
+ const events = currentSession()?.timeline || [];
+ if (!events.length) return;
+ if (state.playhead >= events.length - 1) state.playhead = 0;
+ state.live = false;
+ state.playing = true;
+ state.playbackTimer = window.setInterval(() => {
+ const latestEvents = currentSession()?.timeline || [];
+ if (state.playhead >= latestEvents.length - 1) {
+ stopPlayback();
+ state.live = true;
+ renderTimeline();
+ renderIcons();
+ return;
}
- } catch {
- return translateText(compactText(value));
+ state.playhead += 1;
+ applyTimelineSelection(latestEvents[state.playhead]);
+ renderTimeline();
+ renderIcons();
+ }, 900);
+ renderTimeline();
+ renderIcons();
+}
+
+function stopPlayback() {
+ state.playing = false;
+ if (state.playbackTimer) window.clearInterval(state.playbackTimer);
+ state.playbackTimer = null;
+}
+
+function updatePlaybackButton() {
+ const button = $("playPauseBtn");
+ button.innerHTML = `
${state.playing ? "暂停回放" : "查看会话回放"}`;
+ button.title = state.playing ? "暂停回放" : "查看会话回放";
+ button.setAttribute("aria-label", button.title);
+ $("stepBackBtn").disabled = !currentSession()?.timeline.length || state.playhead <= 0;
+ $("stepForwardBtn").disabled = !currentSession()?.timeline.length || state.playhead >= currentSession().timeline.length - 1;
+}
+
+function jumpToLive() {
+ stopPlayback();
+ const events = currentSession()?.timeline || [];
+ state.playhead = Math.max(0, events.length - 1);
+ state.live = true;
+ applyTimelineSelection(events[state.playhead]);
+ renderTimeline();
+ renderIcons();
+ void refreshData({ keepSelection: true, quiet: true });
+}
+
+async function updateEnforcementMode(mode) {
+ const select = $("modeSelect");
+ select.disabled = true;
+ try {
+ state.enforcement = await fetchJson("/api/settings/enforcement", {
+ method: "POST",
+ headers: { "Content-Type": "application/json" },
+ body: JSON.stringify({ mode }),
+ });
+ showToast(`执行模式已切换为${({ block: "阻断", approval: "审批", observe: "观察" })[mode] || mode}`);
+ await refreshData({ keepSelection: true, quiet: true });
+ } catch (error) {
+ showToast(`模式切换失败：${error?.message || error}`, "error");
+ renderHeader();
+ } finally {
+ select.disabled = false;
}
- return translateText(compactText(value));
}
-function chip(label, kind) {
- return `
${escapeHtml(label || "-")}`;
-}
-
-function isBlocked(record) {
- const payload = record.payload || {};
- return record.severity === "danger" || payload.verdict === "block" || payload.decision === "deny" || payload.original_decision === "deny";
-}
-
-function searchableText(record) {
- return `${record.title} ${record.summary} ${record.type} ${record.layer} ${record.session_key} ${record.run_id} ${JSON.stringify(record.payload)}`.toLowerCase();
-}
-
-function compactSession(value) {
- const text = String(value || "-").replace(/^agent:main:/, "");
- if (text.length <= 34) return text;
- return `${text.slice(0, 22)}...${text.slice(-8)}`;
-}
-
-function compactText(value, max = 420) {
- const text = String(value || "").replace(/\s+/g, " ").trim();
- return text.length > max ? `${text.slice(0, max - 1)}...` : text;
-}
-
-function formatTime(value) {
- if (!value) return "-";
- return new Date(value).toLocaleTimeString("zh-CN", { hour12: false });
+function bindInteractions() {
+ $("refreshBtn").addEventListener("click", () => void refreshData({ keepSelection: true }));
+ $("modeSelect").addEventListener("change", (event) => void updateEnforcementMode(event.target.value));
+ $("sessionSelect").addEventListener("change", (event) => selectSession(event.target.value));
+ $("sessionSearch").addEventListener("input", (event) => {
+ state.search = event.target.value;
+ renderSessions();
+ renderIcons();
+ });
+ $("pathFocusBtn").addEventListener("click", () => {
+ state.pathFocus = !state.pathFocus;
+ renderGraph();
+ renderIcons();
+ });
+ $("zoomInBtn").addEventListener("click", () => semanticGraph.zoom(1.14));
+ $("zoomOutBtn").addEventListener("click", () => semanticGraph.zoom(0.88));
+ $("resetGraphBtn").addEventListener("click", () => {
+ if (semanticGraph.resetLayout()) showToast("图谱已恢复自动布局");
+ });
+ $("fitGraphBtn").addEventListener("click", () => semanticGraph.fit());
+ $("closeInspectorBtn").addEventListener("click", () => {
+ state.selectedItem = null;
+ semanticGraph.clearSelection({ notify: false });
+ $("inspector").classList.remove("open");
+ $("incidentConsole").classList.add("inspector-collapsed");
+ renderInspector(null);
+ renderIcons();
+ });
+ $("contextCollapseBtn").addEventListener("click", () => {
+ const pinned = $("contextCollapseBtn").classList.toggle("active");
+ $("contextCollapseBtn").title = pinned ? "取消固定请求上下文" : "固定请求上下文";
+ $("contextCollapseBtn").setAttribute("aria-label", $("contextCollapseBtn").title);
+ $("contextCollapseBtn").setAttribute("aria-pressed", String(pinned));
+ $("contextCollapseBtn").innerHTML = `
`;
+ showToast(pinned ? "请求上下文已固定" : "请求上下文已取消固定");
+ renderIcons();
+ });
+ $("exportReportBtn").addEventListener("click", exportCurrentReport);
+ $("openTraceBtn").addEventListener("click", openSelectedTrace);
+ $("createRuleBtn").addEventListener("click", () => {
+ window.location.href = "/security-screen#policies";
+ });
+ $("moreActionsBtn").addEventListener("click", (event) => {
+ event.stopPropagation();
+ const menu = $("moreActionsMenu");
+ menu.hidden = !menu.hidden;
+ $("moreActionsBtn").setAttribute("aria-expanded", String(!menu.hidden));
+ });
+ $("moreActionsMenu").addEventListener("click", (event) => event.stopPropagation());
+ $("allowlistBtn").addEventListener("click", () => {
+ $("moreActionsMenu").hidden = true;
+ $("moreActionsBtn").setAttribute("aria-expanded", "false");
+ $("allowlistDialog").showModal();
+ });
+ $("cancelAllowlistBtn").addEventListener("click", () => $("allowlistDialog").close("cancel"));
+ $("confirmAllowlistBtn").addEventListener("click", () => {
+ $("allowlistDialog").close("confirm");
+ showToast("已生成白名单复核草案，当前策略未发生变化");
+ });
+ document.addEventListener("click", () => {
+ $("moreActionsMenu").hidden = true;
+ $("moreActionsBtn").setAttribute("aria-expanded", "false");
+ });
+ $("timelineRange").addEventListener("input", (event) => setPlayhead(Number(event.target.value), { live: false }));
+ $("playPauseBtn").addEventListener("click", togglePlayback);
+ $("stepBackBtn").addEventListener("click", () => setPlayhead(state.playhead - 1, { live: false }));
+ $("stepForwardBtn").addEventListener("click", () => setPlayhead(state.playhead + 1, { live: false }));
+ $("liveBtn").addEventListener("click", jumpToLive);
+ window.addEventListener("resize", () => semanticGraph.resize());
+ window.addEventListener("keydown", (event) => {
+ if (["INPUT", "SELECT", "TEXTAREA"].includes(document.activeElement?.tagName)) return;
+ if (event.code === "Space") {
+ event.preventDefault();
+ togglePlayback();
+ } else if (event.key === "ArrowLeft") setPlayhead(state.playhead - 1, { live: false });
+ else if (event.key === "ArrowRight") setPlayhead(state.playhead + 1, { live: false });
+ });
}
-function formatDate(value) {
- if (!value) return "-";
- return new Date(value).toLocaleString("zh-CN", { hour12: false });
+function openSelectedTrace() {
+ if (!state.selectedItem) state.selectedItem = defaultSelection(currentSession());
+ $("inspector").classList.add("open");
+ $("incidentConsole").classList.remove("inspector-collapsed");
+ renderInspector(state.selectedItem);
+ renderIcons();
+ const technical = $("inspectorBody").querySelector(".technical-details");
+ const raw = $("inspectorBody").querySelector(".raw-evidence");
+ if (technical) technical.open = true;
+ if (raw) raw.open = true;
+ raw?.scrollIntoView({ behavior: "smooth", block: "nearest" });
+}
+
+function currentSession() {
+ return state.model.sessions.find((session) => session.id === state.selectedSessionId) || null;
+}
+
+function preferredSession(sessions) {
+ const requestedSession = new URLSearchParams(window.location.search).get("session");
+ return sessions.find((session) => requestedSession && session.id === requestedSession)
+ || sessions.find((session) => session.graph?.traceKind === "enforcement_bypass")
+ || sessions.find((session) => session.decision === "deny" && !session.graph?.derived)
+ || sessions.find((session) => session.decision === "ask")
+ || sessions.find((session) => !session.graph?.derived)
+ || sessions[0]
+ || null;
+}
+
+function defaultSelection(session) {
+ const id = [...(session?.graph?.nodes || [])].reverse().find((node) => node.kind === "decision")?.id
+ || [...(session?.graph?.nodes || [])].reverse().find((node) => node.kind === "guard")?.id
+ || session?.graph?.selectedNodeId
+ || session?.graph?.pathNodeIds?.at(-1);
+ const node = session?.graph?.nodes?.find((item) => item.id === id);
+ return node ? { type: "node", value: node } : null;
+}
+
+function restoreSelection(session, selection) {
+ if (!selection) return null;
+ const list = selection.type === "edge" ? session.graph.edges : session.graph.nodes;
+ const value = list.find((item) => item.id === selection.value?.id);
+ return value ? { type: selection.type, value } : null;
+}
+
+function selectGraphItem(type, id) {
+ const session = currentSession();
+ const list = type === "edge" ? session?.graph?.edges : session?.graph?.nodes;
+ const value = list?.find((item) => item.id === id);
+ if (!value) return;
+ if (type === "edge") semanticGraph.selectEdge(id);
+ else semanticGraph.selectNode(id);
+}
+
+function applyTimelineSelection(event) {
+ if (!event) return;
+ if (event.nodeId) selectGraphItem("node", event.nodeId);
+ else if (event.edgeId) selectGraphItem("edge", event.edgeId);
+}
+
+function timelineTickIndexes(length) {
+ if (length <= 7) return Array.from({ length }, (_, index) => index);
+ const indexes = new Set([0, length - 1, state.playhead]);
+ for (let index = 1; index < 6; index += 1) indexes.add(Math.round((index / 6) * (length - 1)));
+ return [...indexes].sort((left, right) => left - right);
+}
+
+function shortEventLabel(value) {
+ const text = String(value || "事件").replace(/\s+/g, " ");
+ return text.length > 12 ? `${text.slice(0, 11)}...` : text;
+}
+
+function timelineStageLabel(event, index, events) {
+ if (event?.stage) return event.stage;
+ const text = String(event?.title || "事件");
+ const type = String(event?.type || "");
+ const payload = event?.record?.payload || {};
+ if (index === events.length - 1 && type === "tool_result" && (payload.blocked || event.decision === "deny")) return "响应返回";
+ if (["lab_command", "user_message", "command"].includes(type)) return "用户输入";
+ if (type === "task_spec") return "意图解析";
+ if (type === "tool_result" && (payload.preview || payload.adversarial_input)) return "Prompt 注入";
+ if (type === "tool_call") return "工具调用";
+ if (type === "tool_decision" && event.decision === "deny") return "系统/配置访问";
+ if (type === "alert" && event.decision === "deny") return "玄鉴拦截";
+ if (/用户|user|command/i.test(text)) return "用户输入";
+ if (/intent|意图|任务/i.test(text)) return "意图解析";
+ if (/prompt|注入|taint|污染/i.test(text)) return "Prompt 注入";
+ if (/tool|工具|调用/i.test(text)) return "工具调用";
+ if (/系统|配置|secret|密钥|敏感/i.test(text)) return "系统/配置访问";
+ if (/拦截|阻断|deny|block/i.test(text)) return "玄鉴拦截";
+ if (/返回|result|response/i.test(text)) return "响应返回";
+ return shortEventLabel(text);
+}
+
+function detectionIntentSteps(value) {
+ const text = String(value || "").toLowerCase();
+ const steps = [];
+ if (/ignore|忽略|override|覆盖|bypass|绕过/.test(text)) steps.push("忽略系统指令");
+ if (/credential|secret|token|key|password|凭证|密钥|敏感/.test(text)) steps.push("获取敏感凭证");
+ if (/forward|send|upload|post|exfiltrat|发送|转发|上传|外传/.test(text)) steps.push("发送到外部");
+ if (!steps.length) steps.push("操纵 Agent 行为", "触发越权动作");
+ return steps.slice(0, 3);
+}
+
+function detectionRiskSteps(session, conclusion) {
+ if (session?.decision === "ask") return ["目标超出当前任务范围", "外部副作用需要人工确认"];
+ if (session?.decision === "deny") return [
+ conclusion?.policy || "执行边界策略",
+ conclusion?.target ? `目标：${conclusion.target}` : "高风险工具动作",
+ "执行前被玄鉴阻断",
+ ];
+ return ["行为正在接受玄鉴复核"];
}
-function durationText(start, end) {
- const diff = Math.max(0, new Date(end) - new Date(start));
- if (diff < 1000) return `${diff} ms`;
- if (diff < 60_000) return `${Math.round(diff / 1000)} s`;
- return `${Math.round(diff / 60_000)} min`;
+function isPolicyCode(value) {
+ return /^[A-Z][A-Z0-9_:-]{3,}$/.test(String(value || "").trim());
}
-function setStatus(text, tone) {
- const node = $("status");
- node.textContent = text;
- node.className = `pill ${tone || ""}`;
+function toolDescription(tool) {
+ const text = String(tool || "").toLowerCase();
+ if (/graph/.test(text)) return "图构建工具";
+ if (/search|web|browser/.test(text)) return "文档检索工具";
+ if (/read|file/.test(text)) return "文件读取工具";
+ if (/email|send/.test(text)) return "外部发送工具";
+ if (/shell|exec|code/.test(text)) return "代码执行工具";
+ return "Agent 工具";
}
-function downloadExport(format) {
- const limit = $("limitSelect").value;
- window.location.href = `/api/export?format=${encodeURIComponent(format)}&limit=${encodeURIComponent(limit)}`;
+function incidentId(session) {
+ return String(session?.metadata?.incidentId || session?.alert?.id || session?.records?.at(-1)?.id || session?.id || "未记录");
}
-function escapeHtml(value) {
- return String(value ?? "").replace(/[&<>"']/g, (char) => ({ "&": "&", "<": "<", ">": ">", '"': """, "'": "'" })[char]);
+function formatDateTime(value) {
+ const raw = String(value || "");
+ const date = new Date(raw || 0);
+ if (Number.isNaN(date.getTime())) return String(value || "--");
+ const timeZone = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(raw) ? "Asia/Shanghai" : undefined;
+ return date.toLocaleString("zh-CN", {
+ hour12: false,
+ ...(timeZone ? { timeZone } : {}),
+ year: "numeric",
+ month: "2-digit",
+ day: "2-digit",
+ hour: "2-digit",
+ minute: "2-digit",
+ second: "2-digit",
+ }).replaceAll("/", "-");
}
-async function copySelectedPayload() {
- const id = $("copyPayloadBtn").dataset.recordId;
- const record = await ensureRecordDetail(id);
- if (!record) return;
- const text = JSON.stringify(record, null, 2);
- try {
- await navigator.clipboard.writeText(text);
- $("copyPayloadBtn").textContent = "已复制";
- setTimeout(() => ($("copyPayloadBtn").textContent = "复制 JSON"), 1200);
- } catch {
- $("copyPayloadBtn").textContent = "复制失败";
- setTimeout(() => ($("copyPayloadBtn").textContent = "复制 JSON"), 1200);
+function exportCurrentReport() {
+ const session = currentSession();
+ if (!session) {
+ showToast("当前没有可导出的安全事件", "error");
+ return;
}
+ const report = {
+ incident_id: incidentId(session),
+ exported_at: new Date().toISOString(),
+ decision: session.decision,
+ severity: session.severity,
+ reasons: session.reasons,
+ policies: session.policies,
+ causal_graph: session.graph.raw || session.graph,
+ };
+ const blob = new Blob([JSON.stringify(report, null, 2)], { type: "application/json" });
+ const url = URL.createObjectURL(blob);
+ const anchor = document.createElement("a");
+ anchor.href = url;
+ anchor.download = `${incidentId(session).replace(/[^a-zA-Z0-9._-]+/g, "_")}.json`;
+ anchor.click();
+ window.setTimeout(() => URL.revokeObjectURL(url), 0);
+ showToast("事件报告已导出");
+}
+
+function decisionTone(session) {
+ if (!session) return "safe";
+ if (session.decision === "deny") return "danger";
+ if (session.decision === "ask") return "warning";
+ if (session.decision === "allow") return "safe";
+ return session.tone || "safe";
+}
+
+function setConnection(status, label) {
+ const target = $("connectionStatus");
+ target.className = `connection-state ${status}`;
+ target.querySelector("span:last-child").textContent = label;
+}
+
+function showToast(message, tone = "success") {
+ const toast = $("toast");
+ toast.textContent = message;
+ toast.className = `toast show ${tone}`;
+ window.clearTimeout(showToast.timer);
+ showToast.timer = window.setTimeout(() => { toast.className = "toast"; }, 3200);
+}
+
+function renderIcons() {
+ window.lucide?.createIcons({ attrs: { "stroke-width": 1.8 } });
+}
+
+function formatClock(value) {
+ if (!value) return "--:--:--";
+ const raw = String(value);
+ const date = new Date(raw);
+ if (Number.isNaN(date.getTime())) return String(value).slice(0, 8) || "--:--:--";
+ const timeZone = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(raw) ? "Asia/Shanghai" : undefined;
+ return date.toLocaleTimeString("zh-CN", {
+ hour12: false,
+ ...(timeZone ? { timeZone } : {}),
+ hour: "2-digit",
+ minute: "2-digit",
+ second: "2-digit",
+ });
}
-function fullDetailRecord(id) {
- return state.detailCache.get(id) || null;
-}
-
-async function ensureRecordDetail(id) {
- if (!id) return null;
- if (state.detailCache.has(id)) return state.detailCache.get(id);
- const record = state.selectedRecord?.id === id ? state.selectedRecord : state.records.find((item) => item.id === id);
- if (record && !record.payload?.__compact) return record;
- return loadRecordDetail(id);
-}
-
-async function loadRecordDetail(id) {
- try {
- const response = await fetch(`/api/records/${encodeURIComponent(id)}`, { cache: "no-store" }).then((res) => res.json());
- if (!response.ok || !response.record) throw new Error(response.error || "record not found");
- state.detailCache.set(id, response.record);
- if (state.selectedId === id) renderDetail(response.record);
- return response.record;
- } catch (error) {
- if (state.selectedId === id) {
- const loading = document.querySelector(".detail-loading");
- if (loading) loading.textContent = `读取完整 payload 失败：${error.message || error}`;
- }
- return null;
- }
+function formatNumber(value) {
+ return Number(value || 0).toLocaleString("zh-CN");
}
-function scheduleAutoRefresh() {
- if (state.timer) clearInterval(state.timer);
- state.timer = state.autoRefresh ? setInterval(() => refresh({ keepSelection: true }), 5000) : null;
- $("autoRefreshBtn").textContent = `自动刷新：${state.autoRefresh ? "开" : "关"}`;
+function escapeHtml(value) {
+ return brandText(value).replace(/[&<>"']/g, (character) => ({
+ "&": "&",
+ "<": "<",
+ ">": ">",
+ "\"": """,
+ "'": "'",
+ })[character]);
}
-$("refreshBtn").addEventListener("click", () => refresh({ keepSelection: true }));
-$("autoRefreshBtn").addEventListener("click", () => {
- state.autoRefresh = !state.autoRefresh;
- scheduleAutoRefresh();
-});
-$("focusModeGroup").addEventListener("click", (event) => {
- const target = event.target.closest("[data-focus]");
- if (!target) return;
- state.focusMode = target.dataset.focus || "important";
- state.selectedId = "";
- resetTimelinePage();
- render();
-});
-$("exportJsonBtn").addEventListener("click", () => downloadExport("json"));
-$("exportCsvBtn").addEventListener("click", () => downloadExport("csv"));
-$("copyPayloadBtn").addEventListener("click", copySelectedPayload);
-$("modeSelect")?.addEventListener("change", () => setEnforcementMode($("modeSelect").value));
-$("resetBtn").addEventListener("click", async () => {
- if (!confirm("确认清空玄鉴本地记录？")) return;
- await fetch("/api/reset", { method: "POST" });
- state.selectedId = "";
- state.selectedSession = "";
- await refresh({ keepSelection: false });
-});
-
-for (const id of ["searchInput", "severityFilter", "layerFilter", "typeFilter"]) {
- $(id).addEventListener("input", () => {
- resetTimelinePage();
- render();
- });
- $(id).addEventListener("change", () => {
- resetTimelinePage();
- render();
- });
+function brandText(value) {
+ return String(value ?? "")
+ .replace(/showing latest\s+(\d+)\s+of\s+(\d+)\s+(?:AgentSentry|OpenClaw)\s+plugin\s+records/gi, "最近 $1 / $2 条玄鉴审计记录")
+ .replace(/\b(?:AgentSentry|OpenClaw)\s+plugin\s+records\b/gi, "玄鉴审计记录")
+ .replace(/\b(?:AgentSentry|OpenClaw)\b/gi, "玄鉴");
}
-
-$("limitSelect").addEventListener("change", () => {
- resetTimelinePage();
- refresh({ keepSelection: true });
-});
-
-scheduleAutoRefresh();
-refreshEnforcementMode();
-refresh({ keepSelection: false });
diff --git a/openclaw-plugin/public/brand-mark.png b/openclaw-plugin/public/brand-mark.png
new file mode 100644
index 0000000..7c7cf20
Binary files /dev/null and b/openclaw-plugin/public/brand-mark.png differ
diff --git a/openclaw-plugin/public/command-lab.html b/openclaw-plugin/public/command-lab.html
index a27422f..6a5f3d5 100644
--- a/openclaw-plugin/public/command-lab.html
+++ b/openclaw-plugin/public/command-lab.html
@@ -11,7 +11,7 @@
-
+