@lievclouds/dsh-cortex 0.4.4 → 1.0.0

package/src/cortex-ui/renderer/components/vuln/ExportReportDialog.tsx

@@ -1,11 +1,15 @@
 import * as DialogPrimitive from '@radix-ui/react-dialog'
 import { Download, FolderOpen, Loader2 } from 'lucide-react'
 import { useEffect, useState } from 'react'
+import type { ExportReportFormat } from '@shared/types'
 import { Button } from '@renderer/components/ui/button'
 import { useI18n } from '@renderer/i18n'
+import { cn } from '@renderer/lib/utils'
 import { getPortalContainer } from '../../../dsh/portal'
+import { DirectoryPickerDialog } from './DirectoryPickerDialog'
 
 const STORAGE_KEY = 'cortex.export.dir'
+const FORMAT_KEY = 'cortex.export.format'
 
 function isAbsoluteLike(value: string): boolean {
   const trimmed = value.trim()
@@ -21,7 +25,7 @@ interface ExportReportDialogProps {
   count: number
   pending: boolean
   onOpenChange: (open: boolean) => void
-  onConfirm: (outputDir: string | undefined) => void
+  onConfirm: (outputDir: string | undefined, format: ExportReportFormat) => void
 }
 
 /**
@@ -38,13 +42,49 @@ export function ExportReportDialog({
 }: ExportReportDialogProps) {
   const { t } = useI18n()
   const [directory, setDirectory] = useState('')
+  const [format, setFormat] = useState<ExportReportFormat>('md')
   const [invalid, setInvalid] = useState(false)
+  const [pickerOpen, setPickerOpen] = useState(false)
 
   useEffect(() => {
     if (!open) return
-    const stored = window.localStorage.getItem(STORAGE_KEY) ?? ''
+    let alive = true
+    let stored = ''
+    try {
+      stored = window.localStorage.getItem(STORAGE_KEY) ?? ''
+    } catch {
+      stored = ''
+    }
+    const storedFormat = (() => {
+      try {
+        return window.localStorage.getItem(FORMAT_KEY)
+      } catch {
+        return null
+      }
+    })()
     setDirectory(stored)
+    setFormat(storedFormat === 'docx' || storedFormat === 'pdf' ? storedFormat : 'md')
     setInvalid(false)
+    // The Host remembers the last successful export directory; prefer it over
+    // any stale per-browser value so a fresh WebView still defaults correctly.
+    void fetch('/cortex-api/cortex/export/settings')
+      .then((response) => (response.ok ? response.json() : null))
+      .then((payload) => {
+        if (!alive) return
+        const hostDir = payload && typeof payload.outputDir === 'string' ? payload.outputDir.trim() : ''
+        if (hostDir.length > 0) {
+          setDirectory(hostDir)
+          try {
+            window.localStorage.setItem(STORAGE_KEY, hostDir)
+          } catch {
+            /* ignore */
+          }
+        }
+      })
+      .catch(() => {})
+    return () => {
+      alive = false
+    }
   }, [open])
 
   const confirm = (): void => {
@@ -53,68 +93,142 @@ export function ExportReportDialog({
       setInvalid(true)
       return
     }
-    if (trimmed !== '') window.localStorage.setItem(STORAGE_KEY, trimmed)
-    else window.localStorage.removeItem(STORAGE_KEY)
-    onConfirm(trimmed === '' ? undefined : trimmed)
+    try {
+      if (trimmed !== '') window.localStorage.setItem(STORAGE_KEY, trimmed)
+      else window.localStorage.removeItem(STORAGE_KEY)
+      window.localStorage.setItem(FORMAT_KEY, format)
+    } catch {
+      /* localStorage may be unavailable; the Host remembers the directory */
+    }
+    onConfirm(trimmed === '' ? undefined : trimmed, format)
   }
 
-  return (
-    <DialogPrimitive.Root open={open} onOpenChange={onOpenChange} modal={false}>
-      <DialogPrimitive.Portal container={getPortalContainer()}>
-        <DialogPrimitive.Overlay className="sheet-overlay fixed inset-0 z-[70] bg-[hsl(224_18%_10%/0.3)]" />
-        <DialogPrimitive.Content
-          data-testid="export-report-dialog"
-          className="fixed left-1/2 top-1/2 z-[70] w-[min(480px,calc(100vw-2rem))] -translate-x-1/2 -translate-y-1/2 rounded-xl border border-border bg-background p-5 shadow-panel focus:outline-none focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-ring"
-        >
-          <DialogPrimitive.Title className="text-[16px] font-medium tracking-tight text-foreground">
-            {t('vuln.export.title')}
-          </DialogPrimitive.Title>
-          <DialogPrimitive.Description className="mt-1.5 text-[12.5px] leading-relaxed text-muted-foreground">
-            {t('vuln.export.description', { count })}
-          </DialogPrimitive.Description>
+  const formats: Array<{ value: ExportReportFormat; label: string; testId: string }> = [
+    { value: 'md', label: t('vuln.export.formatMd'), testId: 'export-format-md' },
+    { value: 'docx', label: t('vuln.export.formatDocx'), testId: 'export-format-docx' },
+    { value: 'pdf', label: t('vuln.export.formatPdf'), testId: 'export-format-pdf' },
+  ]
 
-          <label
-            htmlFor="export-output-dir"
-            className="mt-4 flex items-center gap-1.5 text-[11.5px] font-medium text-foreground"
-          >
-            <FolderOpen aria-hidden="true" className="h-3.5 w-3.5 text-muted-foreground" />
-            {t('vuln.export.dirLabel')}
-          </label>
-          <input
-            id="export-output-dir"
-            data-testid="export-output-dir"
-            value={directory}
-            spellCheck={false}
-            disabled={pending}
-            placeholder={t('vuln.export.dirPlaceholder')}
-            onChange={(event) => {
-              setDirectory(event.target.value)
-              if (invalid) setInvalid(false)
+  return (
+    <>
+      <DialogPrimitive.Root open={open} onOpenChange={onOpenChange} modal={false}>
+        <DialogPrimitive.Portal container={getPortalContainer()}>
+          <DialogPrimitive.Overlay className="sheet-overlay fixed inset-0 z-[70] bg-[hsl(224_18%_10%/0.3)]" />
+          <DialogPrimitive.Content
+            data-testid="export-report-dialog"
+            onInteractOutside={(event) => {
+              // The directory picker is a sibling Radix layer; keep this dialog
+              // open while the user browses folders.
+              if (pickerOpen) event.preventDefault()
             }}
-            onKeyDown={(event) => {
-              if (event.key === 'Enter') confirm()
+            onEscapeKeyDown={(event) => {
+              if (pickerOpen) event.preventDefault()
             }}
-            className="mt-1.5 h-9 w-full rounded-md border border-border bg-background px-2.5 font-mono text-[11.5px] text-foreground placeholder:text-muted-foreground/70 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
-          />
-          <p className={invalid ? 'mt-1.5 text-[10.5px] text-red-700' : 'mt-1.5 text-[10.5px] text-muted-foreground'}>
-            {invalid ? t('vuln.export.dirInvalid') : t('vuln.export.dirHint')}
-          </p>
+            className="fixed left-1/2 top-1/2 z-[70] w-[min(480px,calc(100vw-2rem))] -translate-x-1/2 -translate-y-1/2 rounded-xl border border-border bg-background p-5 shadow-panel focus:outline-none focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-ring"
+          >
+            <DialogPrimitive.Title className="text-[16px] font-medium tracking-tight text-foreground">
+              {t('vuln.export.title')}
+            </DialogPrimitive.Title>
+            <DialogPrimitive.Description className="sr-only">
+              {t('vuln.export.title')}
+            </DialogPrimitive.Description>
+
+            <div className="mt-4">
+              <p className="text-[11.5px] font-medium text-foreground">{t('vuln.export.formatLabel')}</p>
+              <div
+                role="radiogroup"
+                aria-label={t('vuln.export.formatLabel')}
+                className="mt-1.5 inline-flex rounded-md border border-border bg-muted p-0.5"
+              >
+                {formats.map((item) => (
+                  <button
+                    key={item.value}
+                    type="button"
+                    role="radio"
+                    aria-checked={format === item.value}
+                    data-testid={item.testId}
+                    disabled={pending}
+                    onClick={() => setFormat(item.value)}
+                    className={cn(
+                      'h-7 rounded px-2.5 text-[11.5px] transition-colors',
+                      format === item.value
+                        ? 'bg-background font-medium text-foreground shadow-sm'
+                        : 'text-muted-foreground hover:text-foreground'
+                    )}
+                  >
+                    {item.label}
+                  </button>
+                ))}
+              </div>
+            </div>
+
+            <label
+              htmlFor="export-output-dir"
+              className="mt-4 flex items-center gap-1.5 text-[11.5px] font-medium text-foreground"
+            >
+              <FolderOpen aria-hidden="true" className="h-3.5 w-3.5 text-muted-foreground" />
+              {t('vuln.export.dirLabel')}
+            </label>
+            <div className="mt-1.5 flex items-center gap-1.5">
+              <input
+                id="export-output-dir"
+                data-testid="export-output-dir"
+                value={directory}
+                spellCheck={false}
+                disabled={pending}
+                placeholder={t('vuln.export.dirPlaceholder')}
+                onChange={(event) => {
+                  setDirectory(event.target.value)
+                  if (invalid) setInvalid(false)
+                }}
+                onKeyDown={(event) => {
+                  if (event.key === 'Enter') confirm()
+                }}
+                className="h-9 min-w-0 flex-1 rounded-md border border-border bg-background px-2.5 font-mono text-[11.5px] text-foreground placeholder:text-muted-foreground/70 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+              />
+              <Button
+                variant="outline"
+                size="sm"
+                data-testid="export-browse-dir"
+                disabled={pending}
+                onClick={() => setPickerOpen(true)}
+                className="h-9 shrink-0 gap-1.5"
+              >
+                <FolderOpen aria-hidden="true" className="h-3.5 w-3.5" />
+                {t('vuln.export.browse')}
+              </Button>
+            </div>
+            {invalid ? (
+              <p className="mt-1.5 text-[10.5px] text-red-700">{t('vuln.export.dirInvalid')}</p>
+            ) : null}
+
+            <div className="mt-5 flex items-center justify-end gap-2">
+              <Button variant="outline" size="sm" onClick={() => onOpenChange(false)} disabled={pending}>
+                {t('common.cancel')}
+              </Button>
+              <Button size="sm" onClick={confirm} disabled={pending} className="gap-1.5">
+                {pending ? (
+                  <Loader2 aria-hidden="true" className="h-3.5 w-3.5 animate-spin" />
+                ) : (
+                  <Download aria-hidden="true" className="h-3.5 w-3.5" />
+                )}
+                {pending ? t('vuln.detail.exporting') : t('vuln.export.confirm')}
+              </Button>
+            </div>
+          </DialogPrimitive.Content>
+        </DialogPrimitive.Portal>
+      </DialogPrimitive.Root>
 
-          <div className="mt-5 flex items-center justify-end gap-2">
-            <Button variant="outline" size="sm" onClick={() => onOpenChange(false)} disabled={pending}>
-              {t('common.cancel')}
-            </Button>
-            <Button size="sm" onClick={confirm} disabled={pending} className="gap-1.5">
-              {pending ? (
-                <Loader2 aria-hidden="true" className="h-3.5 w-3.5 animate-spin" />
-              ) : (
-                <Download aria-hidden="true" className="h-3.5 w-3.5" />
-              )}
-              {pending ? t('vuln.detail.exporting') : t('vuln.export.confirm')}
-            </Button>
-          </div>
-        </DialogPrimitive.Content>
-      </DialogPrimitive.Portal>
-    </DialogPrimitive.Root>
+      <DirectoryPickerDialog
+        open={pickerOpen}
+        initialPath={directory}
+        onOpenChange={setPickerOpen}
+        onSelect={(path) => {
+          setDirectory(path)
+          setInvalid(false)
+          setPickerOpen(false)
+        }}
+      />
+    </>
   )
 }

package/src/cortex-ui/renderer/components/vuln/VulnDetail.tsx

@@ -254,16 +254,17 @@ export function VulnDetail({
     }
   }
 
-  const handleExport = async (outputDir?: string) => {
+  const handleExport = async (outputDir?: string, format?: 'md' | 'docx' | 'pdf') => {
     if (!detail || loading) return
     const api = getApi()
     if (!api) {
       toast.error(apiUnavailableMessage(t))
+      setExportOpen(false)
       return
     }
     setExporting(true)
     try {
-      const result = await api.exportVulnerabilities([detail.id], outputDir)
+      const result = await api.exportVulnerabilities([detail.id], { outputDir, format })
       if (!result.cancelled) {
         const savedPath = result.savedPaths?.[0]
         toast.success(
@@ -287,7 +288,18 @@ export function VulnDetail({
           if (!next) onClose()
         }}
       >
-        <SheetContent data-testid="vuln-sheet">
+        <SheetContent
+          data-testid="vuln-sheet"
+          onInteractOutside={(event) => {
+            // Nested dialogs (export/build path, delete confirm) are portaled
+            // outside this sheet in the DOM; without this the sheet treats a
+            // click inside them as an outside click and closes itself.
+            if (exportOpen || confirmOpen) event.preventDefault()
+          }}
+          onEscapeKeyDown={(event) => {
+            if (exportOpen || confirmOpen) event.preventDefault()
+          }}
+        >
           <div className="flex h-12 shrink-0 items-center justify-between gap-3 border-b border-border px-6">
             <span className="font-mono text-[10px] uppercase tracking-[0.16em] text-muted-foreground">
               {t('vuln.detail.eyebrow')}
@@ -629,7 +641,7 @@ export function VulnDetail({
         count={1}
         pending={exporting}
         onOpenChange={setExportOpen}
-        onConfirm={(outputDir) => void handleExport(outputDir)}
+        onConfirm={(outputDir, format) => void handleExport(outputDir, format)}
       />
     </>
   )

package/src/cortex-ui/renderer/i18n/messages/common.ts

@@ -21,6 +21,7 @@ export const commonMessages: MessageBundle = {
     'nav.snapshots': '认知快照',
     'nav.mcp': 'MCP 接入',
     'nav.retest': '漏洞复测',
+    'nav.fuzzer': 'Web Fuzzer',
     'sidebar.databaseConnected': '数据库已连接',
     'sidebar.databaseButton': '数据库',
     'mcp.connect.button': '接入 Agent',
@@ -109,6 +110,7 @@ export const commonMessages: MessageBundle = {
     'nav.snapshots': 'Snapshots',
     'nav.mcp': 'MCP Access',
     'nav.retest': 'Vulnerability Retest',
+    'nav.fuzzer': 'Web Fuzzer',
     'sidebar.databaseConnected': 'Database connected',
     'sidebar.databaseButton': 'Database',
     'mcp.connect.button': 'Connect agents',

package/src/cortex-ui/renderer/i18n/messages/fuzzer.ts

@@ -0,0 +1,32 @@
+import type { MessageBundle } from './types'
+
+/**
+ * Web Fuzzer page chrome (manual Yakit-style sender).
+ *
+ * The request/response controls reuse the existing `retest.repeater.*` keys, so
+ * only the page-level target selector needs its own bundle.
+ */
+export const fuzzerMessages: MessageBundle = {
+  zh: {
+    'fuzzer.page.description':
+      'Yakit 风格的手动发包页面：左侧编辑请求、右侧查看响应；请求仍受目标漏洞 origin 白名单约束。',
+    'fuzzer.target.title': '目标漏洞',
+    'fuzzer.target.select': '选择目标漏洞',
+    'fuzzer.target.empty': '没有可用的 Web 漏洞',
+    'fuzzer.target.loadFailed': '无法加载 Web 漏洞：{error}',
+    'fuzzer.target.detailFailed': '无法加载漏洞详情',
+    'fuzzer.request.paneAria': '请求编辑与发送',
+    'fuzzer.response.aria': '响应查看面板'
+  },
+  en: {
+    'fuzzer.page.description':
+      'Yakit-style manual HTTP sender: edit the request on the left and inspect the response on the right. Every request is still constrained by the target finding origin allowlist.',
+    'fuzzer.target.title': 'Target finding',
+    'fuzzer.target.select': 'Select target finding',
+    'fuzzer.target.empty': 'No Web findings available',
+    'fuzzer.target.loadFailed': 'Cannot load Web findings: {error}',
+    'fuzzer.target.detailFailed': 'Cannot load the finding details',
+    'fuzzer.request.paneAria': 'Request editor and send controls',
+    'fuzzer.response.aria': 'Response viewer'
+  }
+}

package/src/cortex-ui/renderer/i18n/messages/index.ts

@@ -2,8 +2,10 @@ import type { MessageBundle } from './types'
 import { assetMessages } from './asset'
 import { commonMessages } from './common'
 import { dashboardMessages } from './dashboard'
+import { fuzzerMessages } from './fuzzer'
 import { internalMessages } from './internal'
 import { mcpMessages } from './mcp'
+import { miniappMessages } from './miniapp'
 import { nebulaMessages } from './nebula'
 import { retestMessages } from './retest'
 import { snapshotMessages } from './snapshot'
@@ -22,7 +24,9 @@ const bundles: MessageBundle[] = [
   snapshotMessages,
   nebulaMessages,
   mcpMessages,
-  retestMessages
+  retestMessages,
+  miniappMessages,
+  fuzzerMessages
 ]
 
 function mergeBundles(lang: 'zh' | 'en'): Record<string, string> {