@lievclouds/dsh-cortex 0.4.4 → 0.5.4

package/src/cortex-ui/renderer/i18n/messages/retest.ts

@@ -38,6 +38,7 @@ export const retestMessages: MessageBundle = {
     'retest.repeater.stepN': '步骤{n}',
     'retest.repeater.followRedirect': '跟随重定向',
     'retest.repeater.viewRaw': '原始',
+    'retest.repeater.formatJson': '格式化',
     'retest.repeater.viewHtml': '渲染',
     'retest.repeater.htmlPreview': 'HTML 渲染预览',
     'retest.repeater.emptyResponse': '发送请求后显示原始响应',
@@ -486,6 +487,7 @@ export const retestMessages: MessageBundle = {
     'retest.repeater.stepN': 'Step {n}',
     'retest.repeater.followRedirect': 'Follow redirect',
     'retest.repeater.viewRaw': 'Raw',
+    'retest.repeater.formatJson': 'Format',
     'retest.repeater.viewHtml': 'Render',
     'retest.repeater.htmlPreview': 'Rendered HTML preview',
     'retest.repeater.emptyResponse': 'Send a request to inspect the raw response',

package/src/cortex-ui/renderer/i18n/messages/vuln.ts

@@ -92,13 +92,23 @@ export const vulnMessages: MessageBundle = {
     'vuln.toast.exportedMany': '已导出 {count} 份 Markdown 报告',
     'vuln.toast.exported': 'Markdown 报告已导出',
     'vuln.toast.exportedPath': '已保存到：{path}',
-    'vuln.export.title': '导出 Markdown 报告',
-    'vuln.export.description': '共 {count} 份报告。可指定导出目录，留空则使用默认目录。',
+    'vuln.export.title': '导出报告',
     'vuln.export.dirLabel': '导出目录',
+    'vuln.export.browse': '选择文件夹',
     'vuln.export.dirPlaceholder': '例如 C:\\Users\\you\\Downloads',
-    'vuln.export.dirHint': '留空：~/.cortex/exports/<时间戳>/；支持绝对路径或 ~ 开头路径。',
     'vuln.export.dirInvalid': '请输入绝对路径（如 C:\\Reports 或 ~/Reports）',
     'vuln.export.confirm': '导出',
+    'vuln.export.formatLabel': '报告格式',
+    'vuln.export.formatMd': 'Markdown (.md)',
+    'vuln.export.formatDocx': 'Word (.docx)',
+    'vuln.export.formatPdf': 'PDF (.pdf)',
+    'vuln.dirPicker.title': '选择导出文件夹',
+    'vuln.dirPicker.go': '前往',
+    'vuln.dirPicker.up': '上一级',
+    'vuln.dirPicker.loading': '加载中…',
+    'vuln.dirPicker.empty': '该目录下没有子文件夹',
+    'vuln.dirPicker.error': '读取目录失败：{error}',
+    'vuln.dirPicker.select': '使用此文件夹',
     'vuln.toast.exportFailed': '导出失败：{error}',
     'vuln.toast.deleted': '已删除 {id}',
     'vuln.toast.bulkDeleted': '已删除 {count} 条漏洞',
@@ -210,13 +220,23 @@ export const vulnMessages: MessageBundle = {
     'vuln.toast.exportedMany': 'Exported {count} Markdown reports',
     'vuln.toast.exported': 'Markdown report exported',
     'vuln.toast.exportedPath': 'Saved to: {path}',
-    'vuln.export.title': 'Export Markdown report',
-    'vuln.export.description': '{count} report(s). Choose an output directory, or leave empty to use the default.',
+    'vuln.export.title': 'Export report',
     'vuln.export.dirLabel': 'Output directory',
+    'vuln.export.browse': 'Choose folder',
     'vuln.export.dirPlaceholder': 'e.g. C:\\Users\\you\\Downloads',
-    'vuln.export.dirHint': 'Empty: ~/.cortex/exports/<timestamp>/; absolute or ~-prefixed paths are accepted.',
     'vuln.export.dirInvalid': 'Enter an absolute path (e.g. C:\\Reports or ~/Reports)',
     'vuln.export.confirm': 'Export',
+    'vuln.export.formatLabel': 'Report format',
+    'vuln.export.formatMd': 'Markdown (.md)',
+    'vuln.export.formatDocx': 'Word (.docx)',
+    'vuln.export.formatPdf': 'PDF (.pdf)',
+    'vuln.dirPicker.title': 'Choose export folder',
+    'vuln.dirPicker.go': 'Go',
+    'vuln.dirPicker.up': 'Up',
+    'vuln.dirPicker.loading': 'Loading…',
+    'vuln.dirPicker.empty': 'No subfolders in this folder',
+    'vuln.dirPicker.error': 'Failed to read folder: {error}',
+    'vuln.dirPicker.select': 'Use this folder',
     'vuln.toast.exportFailed': 'Export failed: {error}',
     'vuln.toast.deleted': 'Deleted {id}',
     'vuln.toast.bulkDeleted': 'Deleted {count} vulnerabilities',

package/src/cortex-ui/renderer/lib/retestResponse.ts

@@ -0,0 +1,17 @@
+/**
+ * Response formatting helpers for the retest repeater (Yakit/Burp-style JSON
+ * view). Kept away from the TSX component so they are unit-testable.
+ */
+
+/** Pretty-print JSON bodies; null when the body is not JSON. */
+export function prettyJsonBody(body: string, contentType: string): string | null {
+  const trimmed = body.trim()
+  if (trimmed.length === 0) return null
+  if (!/json/i.test(contentType) && !/^[{[]/.test(trimmed)) return null
+  if (trimmed.length > 2_000_000) return null
+  try {
+    return JSON.stringify(JSON.parse(body), null, 2)
+  } catch {
+    return null
+  }
+}

package/src/cortex-ui/renderer/lib/transport/httpClient.ts

@@ -263,7 +263,7 @@ export function createHttpApi(): CortexApi {
      */
     exportVulnerabilities: async (
       ids: string[],
-      _outputDir?: string
+      _options?: { outputDir?: string; format?: string }
     ): Promise<ExportReportsResult> => {
       const response = await request<WebExportResponse>(WEB_API_PATHS.vulnerabilitiesExport, {
         method: 'POST',

package/src/cortex-ui/renderer/pages/DashboardPage.tsx

@@ -304,7 +304,7 @@ export function DashboardPage({
     [items]
   )
 
-  const handleExportSelected = async (outputDir?: string) => {
+  const handleExportSelected = async (outputDir?: string, format?: 'md' | 'docx' | 'pdf') => {
     const ids = [...selectedIds]
     if (ids.length === 0) return
     const api = getApi()
@@ -315,7 +315,7 @@ export function DashboardPage({
     }
     setExporting(true)
     try {
-      const result = await api.exportVulnerabilities(ids, outputDir)
+      const result = await api.exportVulnerabilities(ids, { outputDir, format })
       const savedPath = result.savedPaths?.[0]
       if (!result.cancelled) {
         const message =
@@ -536,7 +536,7 @@ export function DashboardPage({
         count={selectedCount}
         pending={exporting}
         onOpenChange={setExportOpen}
-        onConfirm={(outputDir) => void handleExportSelected(outputDir)}
+        onConfirm={(outputDir, format) => void handleExportSelected(outputDir, format)}
       />
     </>
   )

package/src/cortex-ui/shared/ipc.ts

@@ -159,11 +159,10 @@ export interface CortexApi extends PocApi {
   deleteVulnerability(id: string): Promise<DeleteVulnResult>
   deleteVulnerabilities(ids: string[]): Promise<DeleteVulnsResult>
   /**
-   * Export one or more vulnerability reports as Markdown. `outputDir` is an
-   * absolute directory chosen by the user; omitted/empty means the Host default
-   * (`~/.cortex/exports/<timestamp>/`).
+   * Export one or more vulnerability reports. Options choose the output
+   * directory (absolute, `~` allowed) and the format (`md` default, `docx`, `pdf`).
    */
-  exportVulnerabilities(ids: string[], outputDir?: string): Promise<ExportReportsResult>
+  exportVulnerabilities(ids: string[], options?: ExportReportOptions): Promise<ExportReportsResult>
   listAssets(filters?: AssetFilters): Promise<AssetListItem[]>
   getAssetDetail(hostPort: string): Promise<AssetContext | null>
   getAssetRelatedVulnerabilities(hostPort: string): Promise<VulnerabilityListItem[]>

package/src/cortex-ui/shared/types.ts

@@ -1018,6 +1018,15 @@ export interface DeleteVulnsResult {
   deleted: number
 }
 
+export type ExportReportFormat = 'md' | 'docx' | 'pdf'
+
+export interface ExportReportOptions {
+  /** Absolute output directory chosen by the user; empty means the default. */
+  outputDir?: string
+  /** Markdown (default), Word or PDF. */
+  format?: ExportReportFormat
+}
+
 export interface ExportReportsResult {
   cancelled: boolean
   /** File names (or absolute paths for desktop transports) of exported reports. */

package/src/host/cortex/fs.js

@@ -0,0 +1,72 @@
+/**
+ * Host-side directory browser for the export path picker.
+ *
+ * The DSH desktop WebView cannot expose absolute paths through the browser's
+ * File System Access API, so the export dialog asks the Host to list folders and
+ * the user picks one. Read-only: no filesystem writes happen here.
+ *
+ *   GET /cortex-api/cortex/fs/list?path=<absolute or ~-prefixed> ->
+ *     { path, parent, directories: [{ name, path }], home }
+ */
+
+import { readdirSync, statSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, isAbsolute, join, parse, resolve } from 'node:path'
+import { badRequest, sendJson } from '../http.js'
+
+const MAX_PATH_LENGTH = 2000
+const MAX_DIRECTORIES = 500
+
+function expandTilde(value) {
+  if (!value.startsWith('~')) return value
+  return join(homedir(), value.replace(/^~[/\\]?/, ''))
+}
+
+function queryPath(searchParams) {
+  const raw = searchParams && typeof searchParams.get === 'function' ? searchParams.get('path') : null
+  if (raw === null || raw === undefined) return homedir()
+  const trimmed = String(raw).trim()
+  if (trimmed.length === 0) return homedir()
+  if (trimmed.length > MAX_PATH_LENGTH) {
+    throw badRequest('path is too long', { field: 'path', max: MAX_PATH_LENGTH })
+  }
+  const expanded = expandTilde(trimmed)
+  if (!isAbsolute(expanded)) {
+    throw badRequest('path must be an absolute path', { field: 'path' })
+  }
+  return resolve(expanded)
+}
+
+/** GET /fs/list — list subdirectories of one folder. */
+export function handleList({ res, searchParams }) {
+  const target = queryPath(searchParams)
+  let stat
+  try {
+    stat = statSync(target)
+  } catch {
+    throw badRequest('directory does not exist', { field: 'path' })
+  }
+  if (!stat.isDirectory()) {
+    throw badRequest('path is not a directory', { field: 'path' })
+  }
+
+  let entries
+  try {
+    entries = readdirSync(target, { withFileTypes: true })
+  } catch {
+    throw badRequest('cannot read directory', { field: 'path' })
+  }
+  const directories = entries
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => ({ name: entry.name, path: join(target, entry.name) }))
+    .sort((left, right) => left.name.localeCompare(right.name))
+    .slice(0, MAX_DIRECTORIES)
+
+  const root = parse(target).root
+  sendJson(res, 200, {
+    path: target,
+    parent: target === root ? null : dirname(target),
+    directories,
+    home: homedir(),
+  })
+}

package/src/host/cortex/index.js

@@ -36,7 +36,9 @@ import {
   sendJson,
 } from '../http.js'
 import * as assets from './assets.js'
+import * as fs from './fs.js'
 import * as misc from './misc.js'
+import * as settings from './settings.js'
 import * as repeater from './repeater.js'
 import * as snapshots from './snapshots.js'
 import * as vulns from './vulns.js'
@@ -114,6 +116,11 @@ const ROUTES = [
   { pattern: /^\/poc\/provider-test$/, methods: { POST: misc.unsupportedHandler }, db: false },
 
   { pattern: /^\/repeater\/send$/, methods: { POST: repeater.handleSend } },
+
+  // Directory browser for the export-path picker (read-only).
+  { pattern: /^\/fs\/list$/, methods: { GET: fs.handleList }, db: false },
+  // Remembered export defaults for the export dialog (plugin-local settings).
+  { pattern: /^\/export\/settings$/, methods: { GET: settings.handleGetExportSettings }, db: false },
 ]
 
 /* ------------------------------------------------------------------------- */

package/src/host/cortex/settings.js

@@ -0,0 +1,54 @@
+/**
+ * Small plugin-local settings store (JSON file under ~/.cortex).
+ *
+ * Currently remembers the last successful export directory so the export dialog
+ * can default to it on the next export. Kept out of Cortex's own tables/config
+ * so the desktop app and schema stay untouched.
+ */
+
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { sendJson } from '../http.js'
+
+function settingsPath() {
+  return process.env.CORTEX_SETTINGS_FILE || join(homedir(), '.cortex', 'plugin-settings.json')
+}
+
+function readSettings() {
+  const file = settingsPath()
+  if (!existsSync(file)) return {}
+  try {
+    const parsed = JSON.parse(readFileSync(file, 'utf8'))
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {}
+  } catch {
+    return {}
+  }
+}
+
+function writeSettings(settings) {
+  const file = settingsPath()
+  mkdirSync(dirname(file), { recursive: true })
+  writeFileSync(file, `${JSON.stringify(settings, null, 2)}\n`, 'utf8')
+}
+
+export function getLastExportDir() {
+  const value = readSettings().exportDir
+  return typeof value === 'string' && value.trim().length > 0 ? value : null
+}
+
+/** Best-effort: a settings write failure must never fail an export. */
+export function rememberExportDir(outputDir) {
+  try {
+    const settings = readSettings()
+    settings.exportDir = outputDir
+    writeSettings(settings)
+  } catch {
+    /* ignore */
+  }
+}
+
+/** GET /export/settings -> { outputDir: string | null } */
+export function handleGetExportSettings({ res }) {
+  sendJson(res, 200, { outputDir: getLastExportDir() })
+}

package/src/host/cortex/vulns.js

@@ -34,6 +34,8 @@ import {
 } from '../http.js'
 import * as dto from '../dto.js'
 import { buildVulnReport, reportFilename } from '../reports.js'
+import { renderDocxReport, renderPdfReport } from '../reports-office.js'
+import { rememberExportDir } from './settings.js'
 import { mkdirSync, writeFileSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { isAbsolute, join, resolve } from 'node:path'
@@ -49,6 +51,7 @@ const MAX_ID_LENGTH = 100
 const MAX_BULK_IDS = 500
 const MAX_HOST_FILTER = 255
 const MAX_EXPORT_IDS = 200
+const EXPORT_FORMATS = ['md', 'docx', 'pdf']
 
 const VULN_ORDER = 'ORDER BY created_at DESC, rowid DESC'
 
@@ -499,6 +502,11 @@ export async function handleDeleteMany({ req, res, holder, bumpRev }) {
 export async function handleExport({ req, res, holder, bumpRev }) {
   const body = await readJsonBody(req)
   const ids = requireIdList(body, 'ids', MAX_EXPORT_IDS)
+  /** Report format: Markdown by default; Word/PDF are generated Host-side. */
+  const format = body.format === undefined ? 'md' : String(body.format).trim().toLowerCase()
+  if (!EXPORT_FORMATS.includes(format)) {
+    throw badRequest('format must be md, docx or pdf', { field: 'format' })
+  }
   /** Optional user-selected output directory (absolute path, `~` allowed). */
   let requestedDir
   if (body.outputDir !== undefined) {
@@ -542,16 +550,24 @@ export async function handleExport({ req, res, holder, bumpRev }) {
       targetUrl: item.target_url,
       host: item.host,
     }))
-    files.push({
-      id,
-      filename: reportFilename(row.vuln_name && /^[\x20-\x7e]+$/.test(String(row.vuln_name)) ? String(row.vuln_name) : id),
-      content: buildVulnReport(detail, related),
-    })
+    const baseName = reportFilename(
+      row.vuln_name && /^[\x20-\x7e]+$/.test(String(row.vuln_name)) ? String(row.vuln_name) : id,
+    ).replace(/\.md$/, '')
+    const markdown = buildVulnReport(detail, related)
+    const title = String(row.vuln_name || id)
+    if (format === 'md') {
+      files.push({ id, filename: `${baseName}.md`, content: markdown })
+      continue
+    }
+    const buffer =
+      format === 'docx'
+        ? await renderDocxReport(markdown, { title })
+        : await renderPdfReport(markdown, { title })
+    files.push({ id, filename: `${baseName}.${format}`, format, buffer })
   }
   // The DSH desktop WebView may block browser downloads, so the Host also
-  // writes the Markdown reports to ~/.cortex/exports/<timestamp>/ and returns
-  // the absolute paths. The renderer still attempts a normal download, but the
-  // toast can then point at a real file that always exists.
+  // writes the reports to the selected directory (or ~/.cortex/exports/<stamp>)
+  // and returns the absolute paths. The toast then points at a real file.
   const savedPaths = []
   if (files.length > 0) {
     try {
@@ -566,14 +582,15 @@ export async function handleExport({ req, res, holder, bumpRev }) {
       for (let index = 0; index < files.length; index += 1) {
         const file = files[index]
         const safeName = String(file.filename).replace(/[<>:"/\\|?*\u0000-\u001f]/g, '_').slice(0, 120) || file.id
-        const baseName = safeName.endsWith('.md') ? safeName : `${safeName}.md`
-        const target = join(exportDir, files.length > 1 ? `${String(index + 1).padStart(2, '0')}-${baseName}` : baseName)
-        writeFileSync(target, file.content, 'utf8')
+        const target = join(exportDir, files.length > 1 ? `${String(index + 1).padStart(2, '0')}-${safeName}` : safeName)
+        writeFileSync(target, file.buffer ?? file.content, file.buffer ? undefined : 'utf8')
         savedPaths.push(target)
       }
+      // Remember the directory the user explicitly chose for the next export.
+      if (requestedDir !== undefined) rememberExportDir(exportDir)
     } catch (error) {
       // Filesystem failure must not break the export response; the inline
-      // files still let the browser download attempt proceed. A selected
+      // Markdown still lets the browser download attempt proceed. A selected
       // directory failure is reported so the user can correct the path.
       if (requestedDir !== undefined) {
         throw badRequest(`cannot write to outputDir: ${error instanceof Error ? error.message : String(error)}`, {
@@ -582,9 +599,15 @@ export async function handleExport({ req, res, holder, bumpRev }) {
       }
     }
   }
+  // Binary formats carry no inline body: the saved file is the deliverable.
+  const responseFiles = files.map((file) =>
+    file.buffer
+      ? { id: file.id, filename: file.filename, format: file.format, size: file.buffer.length }
+      : { id: file.id, filename: file.filename, content: file.content },
+  )
   // Export is a read-only projection: no revision bump.
   void bumpRev
-  sendJson(res, 200, { cancelled: files.length === 0, files, savedPaths })
+  sendJson(res, 200, { cancelled: files.length === 0, files: responseFiles, savedPaths })
 }
 
 export { SEVERITIES, STATUSES, REALM_FILTERS, VULN_ORDER }