verifact 0.0.0-stage → 0.2.1

package/src/pooled-scan.js

@@ -0,0 +1,109 @@
+'use strict';
+// SPDX-License-Identifier: Apache-2.0
+
+const os = require('os');
+const fs = require('fs');
+const path = require('path');
+const { Worker } = require('worker_threads');
+const { extractClaims } = require('./core/claims');
+const { lintDoc } = require('./core/lint');
+
+/**
+ * worker_threads 池。文档扫描是 CPU 密集且与 IO 交错的活，
+ * 单进程串行在大仓（数千 md）上会明显拖尾，这里按 CPU 数切片并行。
+ * worker_threads 不可用时自动退化为串行，不改变结果。
+ */
+
+function chunk(items, n) {
+  const out = Array.from({ length: n }, () => []);
+  let i = 0;
+  for (const it of items) { out[i % n].push(it); i++; }
+  return out.filter((c) => c.length);
+}
+
+function runInline(files, opts) {
+  const results = [];
+  const errors = [];
+  for (const f of files) {
+    try {
+      let text = fs.readFileSync(f.full, 'utf8');
+      if (text.charCodeAt(0) === 0xFEFF) text = text.slice(1);
+      if (opts.maxBytes && Buffer.byteLength(text) > opts.maxBytes) {
+        errors.push({ rel: f.rel, reason: 'too_large', fatal: false, bytes: Buffer.byteLength(text), limit: opts.maxBytes });
+        continue;
+      }
+      const claims = extractClaims(text, f.rel, { modules: opts.modules, deep: !!opts.deep });
+      const lint = opts.doLint ? lintDoc(text, f.rel, opts.lintOpts) : [];
+      results.push({ rel: f.rel, claims, lint });
+    } catch (e) {
+      if (e && e.name === 'DispositionError') {
+        // 处置声明写错必须让整次运行失败：否则这份文档的声明会静默消失，
+        // 报告少了一整片数字却仍然显示绿色 —— 与本工具反对的假绿同类。
+        errors.push({ rel: f.rel, reason: 'disposition_error', detail: e.message, fatal: true });
+        continue;
+      }
+      // 扫描崩溃 = 这份文档的声明没进统计。默认必须让整次运行失败：
+      // 报告宁可红，也不能少算一片数字还显示绿色（#95）。
+      errors.push({ rel: f.rel, reason: e && e.message ? e.message : 'read_error', fatal: true });
+    }
+  }
+  return Promise.resolve({ results, errors, workers: 0 });
+}
+
+function defaultWorkers(files, max) {
+  const cpu = os.cpus ? Math.max(1, os.cpus().length - 1) : 2;
+  const cap = max || Math.min(6, cpu);
+  return Math.max(1, Math.min(cap, files.length));
+}
+
+function scanFiles(files, opts) {
+  const options = opts || {};
+  if (!files.length) return Promise.resolve({ results: [], errors: [], workers: 0 });
+  let WorkerCtor = Worker;
+  try {
+    if (!WorkerCtor) throw new Error('no_worker_threads');
+  } catch (_) {
+    WorkerCtor = null;
+  }
+  if (!WorkerCtor || files.length < 8) return runInline(files, options);
+
+  const n = defaultWorkers(files, options.concurrency);
+  const groups = chunk(files, n);
+  const workerPath = path.join(__dirname, 'worker.js');
+
+  return Promise.all(groups.map((group) => new Promise((resolve) => {
+    let w;
+    try {
+      w = new WorkerCtor(workerPath, {
+        workerData: {
+          files: group,
+          modules: options.modules || [],
+          deep: !!options.deep,
+          maxBytes: options.maxBytes || 0,
+          doLint: !!options.doLint,
+          lintOpts: options.lintOpts || {}
+        }
+      });
+    } catch (_) {
+      return resolve({ results: [], errors: group.map((f) => ({ rel: f.rel, reason: 'worker_spawn_failed' })), pool: true });
+    }
+
+    let settled = false;
+    const finish = (payload) => { if (!settled) { settled = true; w.terminate().catch(() => {}); resolve(payload); } };
+    w.on('message', (msg) => finish({ results: msg.results || [], errors: msg.errors || [], pool: true }));
+    w.on('error', () => finish({ results: [], errors: group.map((f) => ({ rel: f.rel, reason: 'worker_error' })), pool: true }));
+    w.on('exit', (code) => { if (code !== 0) finish({ results: [], errors: group.map((f) => ({ rel: f.rel, reason: 'worker_exit_' + code })), pool: true }); });
+  }))).then((all) => {
+    const results = [];
+    const errors = [];
+    let pooled = true;
+    for (const a of all) {
+      for (const r of a.results) results.push(r);
+      for (const e of a.errors) errors.push(e);
+      if (!a.pool) pooled = false;
+    }
+    return { results, errors, workers: groups.length, pooled };
+  });
+}
+
+module.exports = { scanFiles, defaultWorkers, chunk };

package/src/server/api.js

@@ -0,0 +1,167 @@
+'use strict';
+// SPDX-License-Identifier: Apache-2.0
+
+const http = require('http');
+const fs = require('fs');
+const path = require('path');
+const url = require('url');
+const { loadConfig } = require('../config');
+const engine = require('../engine');
+const { readRuns } = require('../history');
+const { VerifactError } = require('../errors');
+
+/**
+ * 本地看板 + API。零依赖 node:http。
+ * 只监听 127.0.0.1：这是读本机全盘路径的服务，不对外。
+ */
+
+const MIME = {
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.svg': 'image/svg+xml',
+  '.ico': 'image/x-icon'
+};
+
+let LAST_REPORT = null;
+let RUNNING = false;
+
+function json(res, code, body) {
+  const payload = JSON.stringify(body);
+  res.writeHead(code, {
+    'content-type': 'application/json; charset=utf-8',
+    'content-length': Buffer.byteLength(payload),
+    'cache-control': 'no-store',
+    'x-content-type-options': 'nosniff'
+  });
+  res.end(payload);
+}
+
+function readBody(req, limitBytes) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (c) => {
+      size += c.length;
+      if (size > limitBytes) { reject(new VerifactError('payload_too_large', 'body exceeds limit')); req.destroy(); return; }
+      chunks.push(c);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+    req.on('error', reject);
+  });
+}
+
+function serveStatic(res, rootDir, relPath) {
+  const safe = path.normalize(relPath).replace(/^(\.\.[/\\])+/, '');
+  const full = path.join(rootDir, safe);
+  if (!full.startsWith(path.resolve(rootDir))) { res.writeHead(403); res.end('forbidden'); return; }
+  if (!fs.existsSync(full) || !fs.statSync(full).isFile()) { res.writeHead(404); res.end('not found'); return; }
+  const body = fs.readFileSync(full);
+  res.writeHead(200, {
+    'content-type': MIME[path.extname(full).toLowerCase()] || 'application/octet-stream',
+    'content-length': body.length,
+    'x-content-type-options': 'nosniff'
+  });
+  res.end(body);
+}
+
+function createServer(cfg, log) {
+  const wwwDir = path.join(__dirname, 'www');
+
+  return http.createServer(async (req, res) => {
+    const started = Date.now();
+    const parsed = url.parse(req.url, true);
+    const route = parsed.pathname.replace(/\/+$/, '') || '/';
+
+    try {
+      // 健康检查
+      if (route === '/api/health') {
+        return json(res, 200, {
+          status: 'ok',
+          busy: RUNNING === true,
+          hasReport: !!LAST_REPORT,
+          configFile: cfg.__configFile,
+          runs: readRuns(cfg, cfg.__cwd, 1).length
+        });
+      }
+
+      if (route === '/api/config') {
+        return json(res, 200, {
+          docsRoots: cfg.docs.roots,
+          artifactRoots: cfg.artifacts.roots,
+          minScore: cfg.resolve.minScore,
+          failOn: cfg.gate.failOn,
+          modules: cfg.modules,
+          cacheEnabled: cfg.cache.enabled,
+          cwd: cfg.__cwd
+        });
+      }
+
+      if (route === '/api/report' && req.method === 'GET') {
+        if (!LAST_REPORT) {
+          if (RUNNING) return json(res, 202, { pending: true, message: '一审还在跑' });
+          LAST_REPORT = await engine.run(cfg, { logger: log });
+        }
+        return json(res, 200, LAST_REPORT);
+      }
+
+      if (route === '/api/verify' && req.method === 'POST') {
+        if (RUNNING) return json(res, 409, { error: 'busy', message: '上一次核验仍在进行' });
+        RUNNING = true;
+        const t0 = Date.now();
+        try {
+          let opts = {};
+          const raw = await readBody(req, 64 * 1024);
+          if (raw) { try { opts = JSON.parse(raw) || {}; } catch (_) { /* 空 body 合法 */ } }
+          const report = await engine.run(cfg, {
+            deep: !!opts.deep,
+            noCache: !!opts.noCache,
+            concurrency: opts.concurrency,
+            logger: log
+          });
+          LAST_REPORT = report;
+          log.info('verify_done', { ms: Date.now() - t0, claims: report.counts.claims, drift: report.counts.drift });
+          return json(res, 200, report);
+        } finally {
+          RUNNING = false;
+        }
+      }
+
+      if (route === '/api/history') {
+        const limit = Math.min(200, Number(parsed.query.limit) || 30);
+        return json(res, 200, { runs: readRuns(cfg, cfg.__cwd, limit) });
+      }
+
+      if (route === '/' || route === '') {
+        return serveStatic(res, wwwDir, 'index.html');
+      }
+      if (route.startsWith('/assets/')) {
+        return serveStatic(res, wwwDir, route.slice('/assets/'.length));
+      }
+      if (route === '/app.js') return serveStatic(res, wwwDir, 'app.js');
+      if (route === '/style.css') return serveStatic(res, wwwDir, 'style.css');
+
+      return json(res, 404, { error: 'not_found', message: route });
+    } catch (e) {
+      if (e instanceof VerifactError) return json(res, e.code === 'payload_too_large' ? 413 : 400, e.toJSON());
+      log.error('request_failed', { route, ms: Date.now() - started, message: e && e.message });
+      return json(res, 500, { error: 'internal_error', message: '内部错误，详情见服务端日志' });
+    }
+  });
+}
+
+function start(cfg, log) {
+  return new Promise((resolve, reject) => {
+    const server = createServer(cfg, log || require('../logger').create({ quiet: true }));
+    server.on('error', reject);
+    server.listen(cfg.server.port, cfg.server.host, () => {
+      const addr = server.address();
+      log.info('server_listening', { host: cfg.server.host, port: addr.port });
+      process.stdout.write('verifact dashboard → http://' + cfg.server.host + ':' + addr.port + '\n');
+      resolve(server);
+    });
+  });
+}
+
+module.exports = { start, createServer, loadConfig };

package/src/server/www/app.js

@@ -0,0 +1,203 @@
+'use strict';
+// SPDX-License-Identifier: Apache-2.0
+
+(function () {
+  var state = { report: null, filter: 'all', q: '', lintFilter: 'all', expanded: {} };
+
+  var STATUS_TEXT = {
+    verified: '已核验', drift: '漂移', ambiguous: '候选冲突', unbound: '未绑定',
+    ignored: '已忽略', denied: '已拒绑', disposition: '已分类', 'ref-found': '产出物存在', 'ref-missing': '产出物缺失',
+  reference: '标准编号', sealed: '哈希存证'
+  };
+
+  function $(id) { return document.getElementById(id); }
+
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  function valText(v) {
+    if (!v) return '-';
+    if (v.type === 'ref') return v.raw;
+    return v.raw;
+  }
+
+  function toast(msg, ms) {
+    var t = $('toast');
+    t.textContent = msg;
+    t.hidden = false;
+    clearTimeout(toast._t);
+    toast._t = setTimeout(function () { t.hidden = true; }, ms || 2600);
+  }
+
+  async function api(path, options) {
+    var attempts = 0;
+    for (;;) {
+      attempts++;
+      try {
+        var res = await fetch(path, options);
+        if (res.status === 409) { toast('上一次核验还在进行'); return null; }
+        if (res.status >= 500 && attempts < 3) {
+          await new Promise(function (r) { setTimeout(r, 400 * attempts); });
+          continue;
+        }
+        if (!res.ok) throw new Error('HTTP ' + res.status);
+        return await res.json();
+      } catch (e) {
+        if (attempts >= 3) {
+          toast('连不上本地服务（' + path + '）。确认 verifact serve 仍在运行。');
+          return null;
+        }
+        await new Promise(function (r) { setTimeout(r, 400 * attempts); });
+      }
+    }
+  }
+
+  function renderCards(r) {
+    var c = r.counts, l = r.lintCounts;
+    var items = [
+      { k: '声明总数', v: c.claims, cls: '' },
+      { k: '已核验', v: c.verified, cls: 'ok' },
+      { k: '漂移', v: c.drift, cls: c.drift ? 'bad' : 'ok' },
+      { k: '候选冲突', v: c.ambiguous, cls: c.ambiguous ? 'warn' : '' },
+      { k: '未绑定', v: c.unbound, cls: '' },
+      { k: '引用缺失', v: c.refMissing, cls: c.refMissing ? 'warn' : '' },
+      { k: '用语 high', v: l.high, cls: l.high ? 'bad' : 'ok' },
+      { k: '耗时 ms', v: r.durationMs, cls: '' }
+    ];
+    $('cards').innerHTML = items.map(function (i) {
+      return '<div class="card ' + i.cls + '"><div class="k">' + esc(i.k) + '</div><div class="v">' + esc(i.v) + '</div></div>';
+    }).join('');
+    $('meta').textContent = 'cache=' + r.meta.cache + ' · workers=' + r.meta.workers +
+      ' · 产出物条目 ' + r.counts.artifacts + ' · 门禁 ' + r.gate.policy + ' ' + (r.gate.failed ? 'FAILED' : 'PASSED');
+  }
+
+  function rows(r) {
+    var q = state.q.trim().toLowerCase();
+    return r.claims.filter(function (c) {
+      if (state.filter !== 'all' && c.status !== state.filter) return false;
+      if (!q) return true;
+      var hay = [c.file, c.module, c.key, c.sentence, valText(c.value)].join(' ').toLowerCase();
+      return hay.indexOf(q) >= 0;
+    });
+  }
+
+  function renderTable() {
+    var r = state.report;
+    var list = rows(r);
+    var tb = $('tbody');
+    $('empty').hidden = list.length > 0;
+
+    tb.innerHTML = list.map(function (c) {
+      var open = !!state.expanded[c.id];
+      var main = '<tr class="dr" data-id="' + esc(c.id) + '">' +
+        '<td><span class="chip ' + esc(c.status) + '">' + esc(STATUS_TEXT[c.status] || c.status) + '</span></td>' +
+        '<td class="loc mono">' + esc(c.file) + ':' + c.line + '</td>' +
+        '<td>' + esc(c.module || '-') + '</td>' +
+        '<td class="mono">' + esc(c.key) + '</td>' +
+        '<td class="mono">' + esc(valText(c.value)) + '</td>' +
+        '<td class="mono">' + esc(c.best ? valText(c.best.value) : '-') + '</td>' +
+        '<td class="mono">' + (c.score != null ? Number(c.score).toFixed(2) : '-') + '</td>' +
+        '</tr>';
+      if (!open) return main;
+      var detail = '<tr class="detail"><td colspan="7">' +
+        '<div><strong>原文</strong>：' + esc(c.sentence) + '</div>' +
+        '<div><strong>判定依据</strong>：' + esc(c.note || '-') + '</div>' +
+        '<div><strong>产出物</strong>：' + esc(c.best ? c.best.source + ' :: ' + c.best.path : '-') + '</div>' +
+        (c.alternatives && c.alternatives.length
+          ? '<div><strong>其他候选</strong>：' + c.alternatives.map(function (a) {
+              return esc(a.source + ' :: ' + a.path + ' = ' + valText(a.value) + ' (' + Number(a.score).toFixed(2) + ')');
+            }).join(' ｜ ') + '</div>'
+          : '') +
+        '<div><strong>id</strong>：' + esc(c.id) + '</div>' +
+        '</td></tr>';
+      return main + detail;
+    }).join('');
+
+    Array.prototype.forEach.call(tb.querySelectorAll('tr.dr'), function (tr) {
+      tr.addEventListener('click', function () {
+        var id = tr.getAttribute('data-id');
+        state.expanded[id] = !state.expanded[id];
+        renderTable();
+      });
+    });
+  }
+
+  function renderLint() {
+    var l = state.report.lint.filter(function (f) {
+      return state.lintFilter === 'all' || f.severity === state.lintFilter;
+    }).slice(0, 200);
+    $('lint').innerHTML = l.length ? l.map(function (f) {
+      return '<div class="item"><div class="h">' +
+        '<span class="chip ' + (f.severity === 'high' ? 'drift' : f.severity === 'medium' ? 'ambiguous' : 'unbound') + '">' +
+        esc(f.severity) + '</span>' + esc(f.ruleId) + ' · ' + esc(f.file) + ':' + f.line +
+        ' · 命中「' + esc(f.matched) + '」</div>' +
+        '<div class="b">' + esc(f.sentence) + '</div>' +
+        '<div class="hint">' + esc(f.hint) + '</div></div>';
+    }).join('') : '<p class="note">无。</p>';
+  }
+
+  async function renderHistory() {
+    var h = await api('/api/history?limit=20');
+    var list = (h && h.runs) ? h.runs.slice().reverse() : [];
+    $('history').innerHTML = list.length ? list.map(function (r) {
+      var c = r.counts || {};
+      return '<div class="item"><div class="h">' + esc(String(r.generatedAt).replace('T', ' ').slice(0, 19)) +
+        ' · ' + r.durationMs + 'ms · ' + esc(r.cache) + '</div>' +
+        '<div class="b">声明 ' + esc(c.claims) + ' · 已核验 ' + esc(c.verified) +
+        ' · <span style="color:' + (c.drift ? 'var(--bad)' : 'inherit') + '">漂移 ' + esc(c.drift) + '</span>' +
+        ' · 未绑定 ' + esc(c.unbound) + ' · 门禁 ' + esc(r.gate && r.gate.policy) + ' ' +
+        (r.gate && r.gate.failed ? 'FAILED' : 'PASSED') + '</div></div>';
+    }).join('') : '<p class="note">暂无历史。</p>';
+  }
+
+  function renderAll(r) {
+    state.report = r;
+    renderCards(r);
+    renderTable();
+    renderLint();
+    renderHistory();
+  }
+
+  async function load() {
+    var r = await api('/api/report');
+    if (r) { if (r.pending) { toast('首次核验进行中，稍后刷新'); setTimeout(load, 2500); return; } renderAll(r); }
+  }
+
+  async function doVerify() {
+    var btn = $('btn-verify');
+    btn.disabled = true;
+    btn.textContent = '核验中…';
+    try {
+      var r = await api('/api/verify', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ noCache: $('chk-nocache').checked })
+      });
+      if (r) { renderAll(r); toast('核验完成：漂移 ' + r.counts.drift + ' 条'); }
+    } finally {
+      btn.disabled = false;
+      btn.textContent = '重新核验';
+    }
+  }
+
+  document.addEventListener('DOMContentLoaded', function () {
+    $('btn-verify').addEventListener('click', doVerify);
+    $('q').addEventListener('input', function (e) { state.q = e.target.value; renderTable(); });
+    $('tabs').addEventListener('click', function (e) {
+      var b = e.target.closest('button'); if (!b) return;
+      state.filter = b.getAttribute('data-s');
+      Array.prototype.forEach.call($('tabs').children, function (x) { x.classList.toggle('on', x === b); });
+      renderTable();
+    });
+    $('lint-tabs').addEventListener('click', function (e) {
+      var b = e.target.closest('button'); if (!b) return;
+      state.lintFilter = b.getAttribute('data-x');
+      Array.prototype.forEach.call($('lint-tabs').children, function (x) { x.classList.toggle('on', x === b); });
+      renderLint();
+    });
+    load();
+  });
+})();

package/src/server/www/index.html

@@ -0,0 +1,83 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>verifact · 事实哨兵</title>
+<link rel="stylesheet" href="/style.css">
+</head>
+<body>
+<header class="topbar">
+  <div class="brand">
+    <span class="logo">VF</span>
+    <div>
+      <h1>verifact · 事实哨兵</h1>
+      <p class="sub">文档硬数字声明 ↔ 产出物 逐条核验</p>
+    </div>
+  </div>
+  <div class="actions">
+    <button id="btn-verify" class="btn primary">重新核验</button>
+    <label class="chk"><input type="checkbox" id="chk-nocache"> 跳过缓存</label>
+    <span id="meta" class="meta">—</span>
+  </div>
+</header>
+
+<main>
+  <section class="cards" id="cards"></section>
+
+  <section class="panel">
+    <div class="panel-head">
+      <h2>声明</h2>
+      <div class="tabs" id="tabs">
+        <button data-s="all" class="on">全部</button>
+        <button data-s="drift">漂移</button>
+        <button data-s="ambiguous">候选冲突</button>
+        <button data-s="unbound">未绑定</button>
+        <button data-s="ref-missing">产出物缺失</button>
+        <button data-s="verified">已核验</button>
+      </div>
+    </div>
+    <input id="q" class="search" type="search" placeholder="过滤：文件 / 模块 / 键 / 原文">
+    <div class="table-wrap">
+      <table id="tbl">
+        <thead>
+          <tr>
+            <th style="width:92px">判定</th>
+            <th style="width:220px">位置</th>
+            <th style="width:110px">模块</th>
+            <th style="width:150px">键</th>
+            <th>文档值</th>
+            <th>产出物值</th>
+            <th style="width:64px">评分</th>
+          </tr>
+        </thead>
+        <tbody id="tbody"></tbody>
+      </table>
+    </div>
+    <p id="empty" class="empty" hidden>没有匹配的声明。</p>
+  </section>
+
+  <div class="grid2">
+    <section class="panel">
+      <div class="panel-head"><h2>用语 / 绝对化线索</h2><div class="tabs" id="lint-tabs">
+        <button data-x="all" class="on">全部</button>
+        <button data-x="high">high</button>
+        <button data-x="medium">medium</button>
+        <button data-x="low">low</button>
+      </div></div>
+      <div id="lint" class="list"></div>
+      <p class="note">输出是「需人工复核的信号」，不是漏洞判决。</p>
+    </section>
+
+    <section class="panel">
+      <div class="panel-head"><h2>历史</h2></div>
+      <div id="history" class="list"></div>
+      <p class="note">每次核验追加一条记录，用于看 drift 是从哪次开始出现的。</p>
+    </section>
+  </div>
+</main>
+
+<div id="toast" class="toast" hidden></div>
+<script src="/app.js"></script>
+</body>
+</html>

package/src/server/www/style.css

@@ -0,0 +1,101 @@
+:root {
+  --bg: #f6f7f9;
+  --panel: #ffffff;
+  --line: #e3e6ea;
+  --text: #1b1f24;
+  --muted: #6b7280;
+  --accent: #2f6feb;
+  --ok: #1a7f45;
+  --ok-bg: #e8f5ee;
+  --bad: #c2372b;
+  --bad-bg: #fdecea;
+  --warn: #9a6407;
+  --warn-bg: #fdf3e2;
+  --gray-bg: #eef0f3;
+  --radius: 10px;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0; background: var(--bg); color: var(--text);
+  font: 14px/1.5 -apple-system, "Segoe UI", "Microsoft YaHei", system-ui, sans-serif;
+}
+.topbar {
+  display: flex; align-items: center; justify-content: space-between;
+  padding: 14px 22px; background: var(--panel); border-bottom: 1px solid var(--line);
+  position: sticky; top: 0; z-index: 5;
+}
+.brand { display: flex; align-items: center; gap: 12px; }
+.logo {
+  width: 34px; height: 34px; border-radius: 8px; background: var(--accent);
+  color: #fff; display: grid; place-items: center; font-weight: 700; font-size: 13px;
+}
+.topbar h1 { margin: 0; font-size: 16px; font-weight: 650; }
+.topbar .sub { margin: 0; color: var(--muted); font-size: 12px; }
+.actions { display: flex; align-items: center; gap: 12px; }
+.meta { color: var(--muted); font-size: 12px; }
+.btn {
+  border: 1px solid var(--line); background: var(--panel); color: var(--text);
+  padding: 7px 14px; border-radius: 8px; cursor: pointer; font-size: 13px;
+}
+.btn:hover { border-color: var(--accent); color: var(--accent); }
+.btn.primary { background: var(--accent); border-color: var(--accent); color: #fff; }
+.btn.primary:hover { filter: brightness(1.06); color: #fff; }
+.btn:disabled { opacity: .55; cursor: default; }
+.chk { color: var(--muted); font-size: 12px; display: flex; align-items: center; gap: 5px; }
+
+main { padding: 20px 22px 40px; max-width: 1440px; margin: 0 auto; }
+.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(132px, 1fr)); gap: 12px; margin-bottom: 18px; }
+.card {
+  background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 12px 14px;
+}
+.card .k { color: var(--muted); font-size: 12px; }
+.card .v { font-size: 24px; font-weight: 650; margin-top: 3px; letter-spacing: -.02em; }
+.card.ok .v { color: var(--ok); }
+.card.bad .v { color: var(--bad); }
+.card.warn .v { color: var(--warn); }
+
+.panel { background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 14px 16px; margin-bottom: 18px; }
+.panel-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 12px; gap: 12px; flex-wrap: wrap; }
+.panel-head h2 { margin: 0; font-size: 14px; font-weight: 650; }
+.tabs { display: flex; gap: 6px; flex-wrap: wrap; }
+.tabs button {
+  border: 1px solid var(--line); background: var(--panel); padding: 5px 11px; border-radius: 999px;
+  cursor: pointer; font-size: 12px; color: var(--muted);
+}
+.tabs button.on { background: var(--gray-bg); color: var(--text); border-color: #cfd4da; }
+.search {
+  width: 100%; padding: 8px 11px; border: 1px solid var(--line); border-radius: 8px;
+  margin-bottom: 10px; font-size: 13px; background: #fbfcfd;
+}
+.search:focus { outline: 2px solid #d7e3fb; border-color: var(--accent); }
+
+.table-wrap { overflow: auto; max-height: 62vh; border: 1px solid var(--line); border-radius: 8px; }
+table { width: 100%; border-collapse: collapse; font-size: 13px; }
+thead th {
+  position: sticky; top: 0; background: #fafbfc; text-align: left; padding: 9px 10px;
+  border-bottom: 1px solid var(--line); color: var(--muted); font-weight: 600; font-size: 12px; z-index: 1;
+}
+tbody td { padding: 8px 10px; border-bottom: 1px solid #f1f3f5; vertical-align: top; }
+tbody tr:hover { background: #fafbfc; }
+tbody tr.dr { cursor: pointer; }
+.detail td { background: #fbfcfd; color: var(--muted); font-size: 12px; }
+.chip { padding: 2px 8px; border-radius: 6px; font-size: 11px; white-space: nowrap; border: 1px solid transparent; }
+.chip.verified { background: var(--ok-bg); color: var(--ok); border-color: #c6e6d4; }
+.chip.drift { background: var(--bad-bg); color: var(--bad); border-color: #f5c9c3; }
+.chip.ambiguous, .chip.ref-missing { background: var(--warn-bg); color: var(--warn); border-color: #f0dcae; }
+.chip.unbound, .chip.ignored, .chip.ref-found { background: var(--gray-bg); color: var(--muted); border-color: #dfe3e8; }
+.mono { font-family: ui-monospace, Consolas, Menlo, monospace; font-size: 12px; }
+.loc { color: var(--muted); }
+.empty { color: var(--muted); padding: 18px; text-align: center; }
+.grid2 { display: grid; grid-template-columns: 1fr 1fr; gap: 18px; }
+@media (max-width: 980px) { .grid2 { grid-template-columns: 1fr; } }
+.list { display: flex; flex-direction: column; gap: 7px; max-height: 330px; overflow: auto; }
+.item { border: 1px solid var(--line); border-radius: 8px; padding: 8px 10px; }
+.item .h { display: flex; gap: 8px; align-items: center; font-size: 12px; color: var(--muted); }
+.item .b { margin-top: 3px; font-size: 13px; }
+.item .hint { margin-top: 3px; font-size: 12px; color: var(--muted); }
+.note { color: var(--muted); font-size: 12px; margin: 10px 0 0; }
+.toast {
+  position: fixed; right: 20px; bottom: 20px; background: #1b1f24; color: #fff;
+  padding: 10px 16px; border-radius: 8px; font-size: 13px; z-index: 20;
+}