@changw98ic/cli 1.0.0

package/dist/utils/security.js

@@ -0,0 +1,291 @@
+/**
+ * 安全工具函数
+ *
+ * 迁移自 Python security_utils.py
+ * 提供文件名清洗、原子写入、Git 操作封装
+ */
+import { spawn, spawnSync } from 'child_process';
+import { existsSync, mkdirSync, renameSync, unlinkSync, copyFileSync, readFileSync, writeFileSync, fsyncSync, openSync, closeSync } from 'fs';
+import { basename, dirname, join, extname } from 'path';
+import { randomUUID } from 'crypto';
+// ============================================================================
+// 文件名清洗
+// ============================================================================
+/**
+ * 清理文件名，防止路径遍历攻击 (CWE-22)
+ *
+ * @param name 原始文件名（可能包含路径遍历字符）
+ * @param maxLength 文件名最大长度（默认 100 字符）
+ * @returns 安全的文件名
+ */
+export function sanitizeFilename(name, maxLength = 100) {
+    // Step 1: 仅保留基础文件名（移除所有路径）
+    let safeName = basename(name);
+    // Step 2: 移除路径分隔符（双重保险）
+    safeName = safeName.replace(/[/\\]/g, '_');
+    // Step 3: 只保留安全字符
+    // 允许：中文(\u4e00-\u9fff)、字母(a-zA-Z)、数字(0-9)、下划线(_)、连字符(-)
+    safeName = safeName.replace(/[^\w\u4e00-\u9fff-]/g, '_');
+    // Step 4: 移除连续的下划线（美化）
+    safeName = safeName.replace(/_+/g, '_');
+    // Step 5: 长度限制
+    if (safeName.length > maxLength) {
+        safeName = safeName.slice(0, maxLength);
+    }
+    // Step 6: 移除首尾下划线
+    safeName = safeName.replace(/^_+|_+$/g, '');
+    // Step 7: 确保非空
+    if (!safeName) {
+        safeName = 'unnamed_entity';
+    }
+    return safeName;
+}
+/**
+ * 清理 Git 提交消息，防止命令注入 (CWE-77)
+ *
+ * @param message 原始提交消息
+ * @param maxLength 消息最大长度（默认 200 字符）
+ * @returns 安全的提交消息
+ */
+export function sanitizeCommitMessage(message, maxLength = 200) {
+    // Step 1: 移除换行符（防止多行参数注入）
+    let safeMsg = message.replace(/[\n\r]/g, ' ');
+    // Step 2: 移除 Git 特殊标志（--开头的参数）
+    safeMsg = safeMsg.replace(/--[\w-]+/g, '');
+    // Step 3: 移除引号（防止参数分隔符混淆）
+    safeMsg = safeMsg.replace(/['"]/g, '');
+    // Step 4: 移除前导的 -（防止单字母标志如 -m）
+    safeMsg = safeMsg.replace(/^-+/, '');
+    // Step 5: 移除连续空格
+    safeMsg = safeMsg.replace(/\s+/g, ' ');
+    // Step 6: 长度限制
+    if (safeMsg.length > maxLength) {
+        safeMsg = safeMsg.slice(0, maxLength);
+    }
+    // Step 7: 移除首尾空格
+    safeMsg = safeMsg.trim();
+    // Step 8: 确保非空
+    if (!safeMsg) {
+        safeMsg = 'Untitled commit';
+    }
+    return safeMsg;
+}
+// ============================================================================
+// Git 操作
+// ============================================================================
+let gitAvailable = null;
+/**
+ * 检测 Git 是否可用
+ */
+export function isGitAvailable() {
+    if (gitAvailable !== null) {
+        return gitAvailable;
+    }
+    try {
+        const result = spawnSync('git', ['--version'], {
+            timeout: 5000,
+            encoding: 'utf-8',
+            windowsHide: true,
+        });
+        gitAvailable = result.status === 0;
+    }
+    catch {
+        gitAvailable = false;
+    }
+    return gitAvailable;
+}
+/**
+ * 检测指定目录是否是 Git 仓库
+ */
+export function isGitRepo(path) {
+    if (!isGitAvailable()) {
+        return false;
+    }
+    return existsSync(join(path, '.git'));
+}
+/**
+ * 优雅执行 Git 操作
+ */
+export async function gitGracefulOperation(args, cwd, fallbackMsg = 'Git 不可用，跳过版本控制操作') {
+    if (!isGitAvailable()) {
+        console.warn(`⚠️  ${fallbackMsg}`);
+        return { success: false, output: '', wasSkipped: true };
+    }
+    return new Promise((resolve) => {
+        const proc = spawn('git', args, {
+            cwd,
+            windowsHide: true,
+        });
+        let stdout = '';
+        let stderr = '';
+        proc.stdout?.setEncoding('utf-8');
+        proc.stdout?.on('data', (data) => {
+            stdout += data;
+        });
+        proc.stderr?.setEncoding('utf-8');
+        proc.stderr?.on('data', (data) => {
+            stderr += data;
+        });
+        proc.on('close', (code) => {
+            resolve({
+                success: code === 0,
+                output: stdout || stderr,
+                wasSkipped: false,
+            });
+        });
+        proc.on('error', (err) => {
+            console.warn(`⚠️  Git 操作失败: ${err.message}`);
+            resolve({
+                success: false,
+                output: err.message,
+                wasSkipped: false,
+            });
+        });
+    });
+}
+/**
+ * Git add
+ */
+export async function gitAdd(files, cwd) {
+    return gitGracefulOperation(['add', ...files], cwd, 'Git 不可用，跳过 add 操作');
+}
+/**
+ * Git commit
+ */
+export async function gitCommit(message, cwd) {
+    const safeMessage = sanitizeCommitMessage(message);
+    return gitGracefulOperation(['commit', '-m', safeMessage], cwd, 'Git 不可用，跳过 commit 操作');
+}
+/**
+ * Git status
+ */
+export async function gitStatus(cwd) {
+    const result = await gitGracefulOperation(['status', '--porcelain'], cwd);
+    if (!result.success || !result.output) {
+        return [];
+    }
+    return result.output.trim().split('\n').filter(Boolean);
+}
+// ============================================================================
+// 原子化文件写入
+// ============================================================================
+export class AtomicWriteError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AtomicWriteError';
+    }
+}
+/**
+ * 原子化写入 JSON 文件
+ *
+ * 实现策略：
+ * 1. 写入临时文件（同目录）
+ * 2. 可选：备份原文件
+ * 3. 原子重命名
+ */
+export function writeJsonAtomic(filePath, data, options) {
+    const { backup = true, indent = 2 } = options ?? {};
+    const parentDir = dirname(filePath);
+    if (!existsSync(parentDir)) {
+        mkdirSync(parentDir, { recursive: true });
+    }
+    // 准备 JSON 内容
+    let jsonContent;
+    try {
+        jsonContent = JSON.stringify(data, null, indent);
+    }
+    catch (err) {
+        throw new AtomicWriteError(`JSON 序列化失败: ${err}`);
+    }
+    // 创建临时文件
+    const tempFileName = `${basename(filePath, extname(filePath))}_${randomUUID()}.tmp`;
+    const tempPath = join(parentDir, tempFileName);
+    const backupPath = filePath + '.bak';
+    try {
+        // Step 1: 写入临时文件
+        writeFileSync(tempPath, jsonContent, 'utf-8');
+        // 确保写入磁盘
+        const fd = openSync(tempPath, 'r');
+        try {
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        // Step 2: 备份原文件（如果存在且启用备份）
+        if (backup && existsSync(filePath)) {
+            try {
+                copyFileSync(filePath, backupPath);
+            }
+            catch {
+                // 备份失败不阻止写入
+            }
+        }
+        // Step 3: 原子重命名
+        renameSync(tempPath, filePath);
+    }
+    catch (err) {
+        // 清理临时文件
+        try {
+            if (existsSync(tempPath)) {
+                unlinkSync(tempPath);
+            }
+        }
+        catch {
+            // 忽略清理错误
+        }
+        throw new AtomicWriteError(`原子写入失败: ${err}`);
+    }
+}
+/**
+ * 安全读取 JSON 文件
+ */
+export function readJsonSafe(filePath, defaultValue) {
+    const fallback = defaultValue ?? {};
+    if (!existsSync(filePath)) {
+        return fallback;
+    }
+    try {
+        const content = readFileSync(filePath, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch (err) {
+        console.warn(`⚠️ 读取 JSON 失败 (${filePath}): ${err}`);
+        return fallback;
+    }
+}
+/**
+ * 从备份恢复文件
+ */
+export function restoreFromBackup(filePath) {
+    const backupPath = filePath + '.bak';
+    if (!existsSync(backupPath)) {
+        console.warn(`⚠️ 备份文件不存在: ${backupPath}`);
+        return false;
+    }
+    try {
+        copyFileSync(backupPath, filePath);
+        console.log(`✅ 已从备份恢复: ${filePath}`);
+        return true;
+    }
+    catch (err) {
+        console.error(`❌ 恢复失败: ${err}`);
+        return false;
+    }
+}
+// ============================================================================
+// 整数验证
+// ============================================================================
+/**
+ * 验证并转换整数输入
+ */
+export function validateIntegerInput(value, fieldName) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed)) {
+        const error = `${fieldName} 必须是整数，收到: ${value}`;
+        console.error(`❌ 错误：${error}`);
+        throw new Error(`Invalid integer input for ${fieldName}: ${value}`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=security.js.map

package/dist/utils/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC9I,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAS,GAAG,GAAG;IAC5D,2BAA2B;IAC3B,IAAI,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,wBAAwB;IACxB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE3C,kBAAkB;IAClB,wDAAwD;IACxD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAEzD,uBAAuB;IACvB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAExC,eAAe;IACf,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAChC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,kBAAkB;IAClB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE5C,eAAe;IACf,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,gBAAgB,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAS,GAAG,GAAG;IACpE,0BAA0B;IAC1B,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAE9C,+BAA+B;IAC/B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE3C,0BAA0B;IAC1B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEvC,+BAA+B;IAC/B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAErC,iBAAiB;IACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEvC,eAAe;IACf,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,iBAAiB;IACjB,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAEzB,eAAe;IACf,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,iBAAiB,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,IAAI,YAAY,GAAmB,IAAI,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE;YAC7C,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACxC,CAAC;AAQD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAc,EACd,GAAW,EACX,WAAW,GAAG,kBAAkB;IAEhC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;YAC9B,GAAG;YACH,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACvC,OAAO,CAAC;gBACN,OAAO,EAAE,IAAI,KAAK,CAAC;gBACnB,MAAM,EAAE,MAAM,IAAI,MAAM;gBACxB,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC9B,OAAO,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAe,EAAE,GAAW;IACvD,OAAO,oBAAoB,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,GAAW;IAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,oBAAoB,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAa,EACb,OAGC;IAED,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAEpD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,aAAa;IACb,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,SAAS;IACT,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAErC,IAAI,CAAC;QACH,iBAAiB;QACjB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAE9C,SAAS;QACT,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS;QACT,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,YAAgB;IAEhB,MAAM,QAAQ,GAAG,YAAY,IAAK,EAAQ,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,kBAAkB,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAErC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,SAAiB;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,SAAS,cAAc,KAAK,EAAE,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/status-reporter.d.ts

@@ -0,0 +1,66 @@
+export interface CharacterActivityResult {
+    name: string;
+    tier: string;
+    lastAppearance: number;
+    chaptersSinceLastAppearance: number;
+    status: 'healthy' | 'warning' | 'critical';
+}
+export interface ForeshadowingResult {
+    id: string;
+    content: string;
+    tier: string;
+    plantedChapter: number | null;
+    targetChapter: number | null;
+    elapsedChapters: number | null;
+    remainingChapters: number | null;
+    status: 'healthy' | 'warning' | 'overtime';
+    urgency: number;
+}
+export interface PacingResult {
+    chapterRange: string;
+    coolPointCount: number;
+    avgWordsPerCoolPoint: number;
+    rating: 'excellent' | 'good' | 'fair' | 'poor';
+}
+export interface BasicStats {
+    totalChapters: number;
+    totalWords: number;
+    avgWordsPerChapter: number;
+    progress: number;
+    targetWords: number;
+}
+export interface HealthReport {
+    generatedAt: string;
+    basicStats: BasicStats;
+    characterActivity: CharacterActivityResult[];
+    foreshadowing: ForeshadowingResult[];
+    pacing: PacingResult[];
+}
+export declare class StatusReporter {
+    private _projectRoot;
+    private indexManager;
+    private statePath;
+    private bodyDir;
+    /** Get the project root directory */
+    get projectRoot(): string;
+    constructor(projectRoot: string);
+    /**
+     * 生成健康报告
+     */
+    generateHealthReport(options?: {
+        focus?: 'characters' | 'foreshadowing' | 'pacing' | 'all';
+    }): HealthReport;
+    getBasicStats(): BasicStats;
+    analyzeCharacterActivity(): CharacterActivityResult[];
+    analyzeForeshadowing(): ForeshadowingResult[];
+    analyzePacing(): PacingResult[];
+    /**
+     * 格式化为 Markdown
+     */
+    formatAsMarkdown(report: HealthReport): string;
+    /**
+     * 保存报告到文件
+     */
+    saveReport(report: HealthReport, outputPath: string): void;
+}
+//# sourceMappingURL=status-reporter.d.ts.map

package/dist/utils/status-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-reporter.d.ts","sourceRoot":"","sources":["../../src/utils/status-reporter.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;IACpC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAChD;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAC7C,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;IAExB,qCAAqC;IACrC,IAAI,WAAW,IAAI,MAAM,CAExB;gBAEW,WAAW,EAAE,MAAM;IAS/B;;OAEG;IACH,oBAAoB,CAAC,OAAO,CAAC,EAAE;QAC7B,KAAK,CAAC,EAAE,YAAY,GAAG,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAC;KAC3D,GAAG,YAAY;IAoBhB,aAAa,IAAI,UAAU;IA+C3B,wBAAwB,IAAI,uBAAuB,EAAE;IA4CrD,oBAAoB,IAAI,mBAAmB,EAAE;IA2E7C,aAAa,IAAI,YAAY,EAAE;IA+D/B;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM;IAyE9C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;CAK3D"}

package/dist/utils/status-reporter.js

@@ -0,0 +1,309 @@
+/**
+ * 状态报告器
+ *
+ * 迁移自 Python status_reporter.py
+ * 生成健康报告：角色活跃度、伏笔状态、爽点节奏
+ */
+import { existsSync, readdirSync, readFileSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { IndexManager } from '@changw98ic/data';
+import { readJsonSafe } from './security.js';
+// ============================================================================
+// Status Reporter
+// ============================================================================
+export class StatusReporter {
+    _projectRoot;
+    indexManager;
+    statePath;
+    bodyDir;
+    /** Get the project root directory */
+    get projectRoot() {
+        return this._projectRoot;
+    }
+    constructor(projectRoot) {
+        this._projectRoot = projectRoot;
+        this.indexManager = new IndexManager({ projectRoot });
+        this.statePath = join(projectRoot, '.webnovel', 'state.json');
+        this.bodyDir = join(projectRoot, '正文');
+    }
+    // ==================== Main Report ====================
+    /**
+     * 生成健康报告
+     */
+    generateHealthReport(options) {
+        const focus = options?.focus ?? 'all';
+        return {
+            generatedAt: new Date().toISOString(),
+            basicStats: this.getBasicStats(),
+            characterActivity: focus === 'all' || focus === 'characters'
+                ? this.analyzeCharacterActivity()
+                : [],
+            foreshadowing: focus === 'all' || focus === 'foreshadowing'
+                ? this.analyzeForeshadowing()
+                : [],
+            pacing: focus === 'all' || focus === 'pacing'
+                ? this.analyzePacing()
+                : [],
+        };
+    }
+    // ==================== Basic Stats ====================
+    getBasicStats() {
+        const state = readJsonSafe(this.statePath, {});
+        // Count chapters
+        let totalChapters = 0;
+        let totalWords = 0;
+        if (existsSync(this.bodyDir)) {
+            const files = readdirSync(this.bodyDir).filter(f => f.endsWith('.md'));
+            totalChapters = files.length;
+            for (const file of files) {
+                const filePath = join(this.bodyDir, file);
+                try {
+                    const content = readFileSync(filePath, 'utf-8');
+                    // Count Chinese characters
+                    const chineseChars = (content.match(/[\u4e00-\u9fff]/g) || []).length;
+                    totalWords += chineseChars;
+                }
+                catch {
+                    continue;
+                }
+            }
+        }
+        const avgWordsPerChapter = totalChapters > 0
+            ? Math.round(totalWords / totalChapters)
+            : 0;
+        const targetWords = state.target_words ?? 2000000;
+        const progress = targetWords > 0
+            ? Math.min(100, (totalWords / targetWords) * 100)
+            : 0;
+        return {
+            totalChapters,
+            totalWords,
+            avgWordsPerChapter,
+            progress: Math.round(progress * 10) / 10,
+            targetWords,
+        };
+    }
+    // ==================== Character Activity ====================
+    analyzeCharacterActivity() {
+        const state = readJsonSafe(this.statePath, {});
+        const currentChapter = state.progress?.current_chapter ?? 0;
+        const entities = this.indexManager.getEntities({ type: '角色' });
+        const results = [];
+        for (const entity of entities) {
+            // Skip decorative characters
+            if (entity.tier === '装饰')
+                continue;
+            const lastAppearance = entity.last_appearance ?? 0;
+            const chaptersSince = currentChapter - lastAppearance;
+            let status;
+            if (entity.is_protagonist) {
+                status = chaptersSince > 5 ? 'warning' : 'healthy';
+            }
+            else if (entity.tier === '核心') {
+                status = chaptersSince > 30 ? 'critical' : chaptersSince > 15 ? 'warning' : 'healthy';
+            }
+            else {
+                status = chaptersSince > 50 ? 'critical' : chaptersSince > 30 ? 'warning' : 'healthy';
+            }
+            results.push({
+                name: entity.canonical_name,
+                tier: entity.tier,
+                lastAppearance,
+                chaptersSinceLastAppearance: chaptersSince,
+                status,
+            });
+        }
+        // Sort: critical first, then warning, then healthy
+        return results.sort((a, b) => {
+            const order = { critical: 0, warning: 1, healthy: 2 };
+            return order[a.status] - order[b.status];
+        });
+    }
+    // ==================== Foreshadowing ====================
+    analyzeForeshadowing() {
+        const state = readJsonSafe(this.statePath, {});
+        const currentChapter = state.progress?.current_chapter ?? 0;
+        const foreshadowing = state.plot_threads?.foreshadowing ?? [];
+        const results = [];
+        for (const item of foreshadowing) {
+            // Skip resolved items
+            if (item.status === 'resolved' || item.status === '已回收')
+                continue;
+            const plantedChapter = item.planted_chapter ?? null;
+            const targetChapter = item.target_chapter ?? null;
+            const elapsedChapters = plantedChapter
+                ? currentChapter - plantedChapter
+                : null;
+            const remainingChapters = targetChapter
+                ? targetChapter - currentChapter
+                : null;
+            let status;
+            if (remainingChapters !== null && remainingChapters < 0) {
+                status = 'overtime';
+            }
+            else if (elapsedChapters !== null && elapsedChapters > 100) {
+                status = 'warning';
+            }
+            else {
+                status = 'healthy';
+            }
+            // Calculate urgency
+            let urgency = 0;
+            const tier = item.tier ?? '支线';
+            const tierWeight = tier === '核心' ? 3 : tier === '支线' ? 2 : 1;
+            if (elapsedChapters !== null) {
+                urgency = tierWeight * (elapsedChapters / 50);
+            }
+            if (remainingChapters !== null && remainingChapters < 20) {
+                urgency += (20 - remainingChapters) * tierWeight;
+            }
+            results.push({
+                id: item.id ?? '',
+                content: item.content ?? '[未命名伏笔]',
+                tier,
+                plantedChapter,
+                targetChapter,
+                elapsedChapters,
+                remainingChapters,
+                status,
+                urgency: Math.round(urgency * 10) / 10,
+            });
+        }
+        // Sort by urgency descending
+        return results.sort((a, b) => b.urgency - a.urgency);
+    }
+    // ==================== Pacing ====================
+    analyzePacing() {
+        if (!existsSync(this.bodyDir)) {
+            return [];
+        }
+        const files = readdirSync(this.bodyDir)
+            .filter(f => f.endsWith('.md'))
+            .sort();
+        const results = [];
+        const batchSize = 50;
+        for (let i = 0; i < files.length; i += batchSize) {
+            const batch = files.slice(i, i + batchSize);
+            let totalWords = 0;
+            let coolPointCount = 0;
+            for (const file of batch) {
+                const filePath = join(this.bodyDir, file);
+                try {
+                    const content = readFileSync(filePath, 'utf-8');
+                    const chineseChars = (content.match(/[\u4e00-\u9fff]/g) || []).length;
+                    totalWords += chineseChars;
+                    // Count cool points (爽点标记)
+                    const coolMatches = content.match(/爽点[：:]/g) || [];
+                    coolPointCount += coolMatches.length;
+                }
+                catch {
+                    continue;
+                }
+            }
+            const avgWordsPerCoolPoint = coolPointCount > 0
+                ? Math.round(totalWords / coolPointCount)
+                : totalWords;
+            let rating;
+            if (avgWordsPerCoolPoint <= 1200) {
+                rating = 'excellent';
+            }
+            else if (avgWordsPerCoolPoint <= 1800) {
+                rating = 'good';
+            }
+            else if (avgWordsPerCoolPoint <= 2500) {
+                rating = 'fair';
+            }
+            else {
+                rating = 'poor';
+            }
+            const startChapter = i + 1;
+            const endChapter = Math.min(i + batchSize, files.length);
+            results.push({
+                chapterRange: `第 ${startChapter}-${endChapter} 章`,
+                coolPointCount,
+                avgWordsPerCoolPoint,
+                rating,
+            });
+        }
+        return results;
+    }
+    // ==================== Output ====================
+    /**
+     * 格式化为 Markdown
+     */
+    formatAsMarkdown(report) {
+        const lines = [];
+        lines.push('# 📊 全书健康报告');
+        lines.push('');
+        lines.push(`生成时间: ${report.generatedAt}`);
+        lines.push('');
+        // 基本统计
+        lines.push('## 📈 基本数据');
+        lines.push('');
+        const stats = report.basicStats;
+        lines.push(`- **总章节数**: ${stats.totalChapters} 章`);
+        lines.push(`- **总字数**: ${stats.totalWords.toLocaleString()} 字`);
+        lines.push(`- **平均章节字数**: ${stats.avgWordsPerChapter.toLocaleString()} 字`);
+        lines.push(`- **创作进度**: ${stats.progress}%（目标 ${stats.targetWords.toLocaleString()} 字）`);
+        lines.push('');
+        // 角色活跃度
+        if (report.characterActivity.length > 0) {
+            const dropped = report.characterActivity.filter(c => c.status !== 'healthy');
+            if (dropped.length > 0) {
+                lines.push(`## ⚠️ 角色掉线（${dropped.length}人）`);
+                lines.push('');
+                lines.push('| 角色 | 层级 | 最后出场 | 缺席章节 | 状态 |');
+                lines.push('|------|------|---------|---------|------|');
+                for (const c of dropped) {
+                    const statusIcon = c.status === 'critical' ? '🔴' : '🟡';
+                    const statusText = c.status === 'critical' ? '严重掉线' : '轻度掉线';
+                    lines.push(`| ${c.name} | ${c.tier} | 第 ${c.lastAppearance} 章 | ${c.chaptersSinceLastAppearance} 章 | ${statusIcon} ${statusText} |`);
+                }
+                lines.push('');
+            }
+        }
+        // 伏笔状态
+        if (report.foreshadowing.length > 0) {
+            const overtime = report.foreshadowing.filter(f => f.status === 'overtime');
+            if (overtime.length > 0) {
+                lines.push(`## ⚠️ 伏笔超时（${overtime.length}条）`);
+                lines.push('');
+                lines.push('| 伏笔内容 | 埋设章节 | 已过章节 | 状态 |');
+                lines.push('|---------|---------|---------|------|');
+                for (const f of overtime) {
+                    lines.push(`| ${f.content.slice(0, 30)}... | 第 ${f.plantedChapter} 章 | ${f.elapsedChapters} 章 | 🔴 严重超时 |`);
+                }
+                lines.push('');
+            }
+        }
+        // 爽点节奏
+        if (report.pacing.length > 0) {
+            lines.push('## 📈 爽点节奏分布');
+            lines.push('');
+            lines.push('```');
+            for (const p of report.pacing) {
+                const barLength = Math.round((3000 - p.avgWordsPerCoolPoint) / 150);
+                const bar = '█'.repeat(Math.max(1, barLength));
+                const ratingText = {
+                    excellent: '优秀',
+                    good: '良好',
+                    fair: '良好',
+                    poor: '偏低 ⚠️',
+                }[p.rating];
+                lines.push(`${p.chapterRange.padEnd(12)} ${bar} ${ratingText}（${p.avgWordsPerCoolPoint}字/爽点）`);
+            }
+            lines.push('```');
+            lines.push('');
+        }
+        return lines.join('\n');
+    }
+    /**
+     * 保存报告到文件
+     */
+    saveReport(report, outputPath) {
+        const markdown = this.formatAsMarkdown(report);
+        writeFileSync(outputPath, markdown, 'utf-8');
+        console.log(`✅ 报告已保存: ${outputPath}`);
+    }
+}
+//# sourceMappingURL=status-reporter.js.map