weflow-cli 1.5.0 → 1.6.1

package/src/services/chatService.ts

@@ -1,11 +1,12 @@
-import { join, dirname } from 'path'
-import { fileURLToPath } from 'url'
+import { join } from 'path'
 import { existsSync } from 'fs'
 import { WcdbCore } from '../core/wcdbCore.js'
 import { SqlcipherCore } from '../core/sqlcipherCore.js'
 import { NtCore } from '../core/ntCore.js'
 import { configService } from './configService.js'
 import type { ChatSession, Message, Contact, DataVersion } from '../types.js'
+import { collectMessagesInRange } from './messageQuery.js'
+import { resolvePackageRoot } from '../utils/packageRoot.js'
 
 // 创建单例
 const wcdbCore = new WcdbCore()
@@ -57,8 +58,10 @@ export class ChatService {
     const dbPath = configService.get('dbPath')
     const wxid = configService.get('wxid')
     const decryptKey = configService.get('decryptKey')
+    const ntConfigured = !!(configService.get('ntDbPath') && configService.get('ntKey'))
 
-    if (!dbPath || !decryptKey) {
+    // NT 配置完整时无需 decryptKey（非 Windows 平台密钥自动提取不可用，仅有 NT 密钥）
+    if (!dbPath || (!decryptKey && !ntConfigured)) {
       return { success: false, error: '4.x 配置不完整，请运行 weflow-cli init' }
     }
 
@@ -112,7 +115,7 @@ export class ChatService {
 
     // 方案 4: 尝试 WCDB API 连接 (需要 db_storage/session.db 结构，仅 3.x 兼容)
     // Use package root instead of cwd for global install support
-    const pkgRoot = join(dirname(fileURLToPath(import.meta.url)), '..', '..', '..')
+    const pkgRoot = resolvePackageRoot(import.meta.url)
     const resourcesPath = join(pkgRoot, 'resources')
     wcdbCore.setPaths(resourcesPath, '')
 
@@ -236,6 +239,22 @@ export class ChatService {
     return []
   }
 
+  async getMessagesInRange(
+    talker: string,
+    limit = 0,
+    from?: number,
+    to?: number,
+  ): Promise<Message[]> {
+    if (from === undefined && to === undefined) {
+      return this.getMessages(talker, limit)
+    }
+    return collectMessagesInRange(
+      (pageLimit, offset) => this.getMessages(talker, pageLimit, offset),
+      limit,
+      { from, to },
+    )
+  }
+
   async listContacts(keyword?: string, limit = 200): Promise<Contact[]> {
     const conn = await this.connect()
     if (!conn.success) return []
@@ -291,6 +310,116 @@ export class ChatService {
     this.activeVersion = null
     this.useRawSqlite4x = false
   }
+
+  // ====== SNS (朋友圈本地缓存查询) ======
+  // 4.x 支持两条路径: WCDB API 或 NT (Python sqlcipher3)
+
+  /** 当前连接是否支持朋友圈查询 */
+  isSnsSupported(): boolean {
+    if (!this.connected || this.activeVersion !== '4.x') return false
+    // 路径 1: WCDB API (传统 4.x)
+    if (!this.useRawSqlite4x && !this.ntCore) return true
+    // 路径 2: NT + sns config 已配置
+    if (this.ntCore) {
+      const snsPath = configService.get('snsDbPath')
+      const snsKey = configService.get('snsKey')
+      const snsSalt = configService.get('snsSalt')
+      return !!(snsPath && snsKey && snsSalt)
+    }
+    return false
+  }
+
+  async getSnsTimeline(opts: {
+    limit?: number
+    offset?: number
+    usernames?: string[]
+    keyword?: string
+    startTime?: number
+    endTime?: number
+  } = {}): Promise<{ success: boolean; timeline?: any[]; error?: string }> {
+    if (!this.isSnsSupported()) {
+      return { success: false, error: '当前数据通道不支持朋友圈查询 (需 4.x WCDB 或 NT+sns 配置)' }
+    }
+    // NT 路径
+    if (this.ntCore) {
+      const snsPath = configService.get('snsDbPath')
+      const snsKey = configService.get('snsKey')
+      const snsSalt = configService.get('snsSalt')
+      return this.ntCore.getSnsTimeline(snsPath, snsKey, snsSalt, opts)
+    }
+    // WCDB 路径
+    return wcdbCore.getSnsTimeline(
+      opts.limit ?? 20,
+      opts.offset ?? 0,
+      opts.usernames,
+      opts.keyword,
+      opts.startTime,
+      opts.endTime,
+    )
+  }
+
+  async getSnsUsernames(): Promise<{ success: boolean; usernames?: string[]; error?: string }> {
+    if (!this.isSnsSupported()) {
+      return { success: false, error: '当前数据通道不支持朋友圈查询 (需 4.x WCDB 或 NT+sns 配置)' }
+    }
+    if (this.ntCore) {
+      const snsPath = configService.get('snsDbPath')
+      const snsKey = configService.get('snsKey')
+      const snsSalt = configService.get('snsSalt')
+      return this.ntCore.getSnsUsernames(snsPath, snsKey, snsSalt)
+    }
+    return wcdbCore.getSnsUsernames()
+  }
+
+  async getSnsExportStats(myWxid?: string): Promise<{ success: boolean; data?: { totalPosts: number; totalFriends: number; myPosts: number | null }; error?: string }> {
+    if (!this.isSnsSupported()) {
+      return { success: false, error: '当前数据通道不支持朋友圈查询 (需 4.x WCDB 或 NT+sns 配置)' }
+    }
+    if (this.ntCore) {
+      const snsPath = configService.get('snsDbPath')
+      const snsKey = configService.get('snsKey')
+      const snsSalt = configService.get('snsSalt')
+      return this.ntCore.getSnsExportStats(snsPath, snsKey, snsSalt, myWxid)
+    }
+    return wcdbCore.getSnsExportStats(myWxid)
+  }
+
+  // ====== 收藏 (favorite.db, 仅 NT 路径) ======
+
+  /** 当前连接是否支持收藏查询 */
+  isFavSupported(): boolean {
+    if (!this.connected || this.activeVersion !== '4.x' || !this.ntCore) return false
+    const favPath = configService.get('favDbPath')
+    const favKey = configService.get('favKey')
+    const favPass = configService.get('favPassphrase')
+    return !!(favPath && (favKey || favPass))
+  }
+
+  /** 解析收藏密钥: 优先 favKey, 其次从 favPassphrase + 库 salt 派生 */
+  private resolveFavKey(): string | null {
+    const favKey = configService.get('favKey')
+    if (favKey) return favKey
+    const favPass = configService.get('favPassphrase')
+    const favPath = configService.get('favDbPath')
+    if (!favPass || !favPath) return null
+    const salt = NtCore.readDbSalt(favPath)
+    if (!salt) return null
+    const derived = NtCore.deriveRawKey(favPass, salt)
+    configService.set('favKey', derived)
+    return derived
+  }
+
+  async getFavorites(opts: {
+    limit?: number; offset?: number; keyword?: string; favType?: number;
+  } = {}): Promise<{ success: boolean; favorites?: any[]; total?: number; error?: string }> {
+    if (!this.isFavSupported()) {
+      return { success: false, error: '当前数据通道不支持收藏查询 (需 4.x NT 连接 + fav 配置)' }
+    }
+    const favPath = configService.get('favDbPath')
+    const favKey = this.resolveFavKey()
+    if (!favKey) return { success: false, error: '收藏密钥解析失败 (favKey/favPassphrase 配置无效)' }
+    return this.ntCore!.getFavorites(favPath, favKey, opts)
+  }
 }
 
 export const chatService = new ChatService()

package/src/services/configService.ts

@@ -1,5 +1,5 @@
 import { join } from 'path'
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs'
+import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from 'fs'
 import { homedir, hostname, userInfo } from 'os'
 import crypto from 'crypto'
 import { expandHomePath } from '../utils/pathUtils.js'
@@ -25,8 +25,16 @@ interface CliConfig {
   wechatOcAccountId: string
   wechatOcBaseUrl: string
   wechatOcSyncBuf: string
+  /** 持久化的 context_token: wxid -> token (加密 JSON 字符串) */
+  wechatOcContextTokens: string
   // 白名单
   whitelist: string[]
+  // 黑名单 (绝对禁止收发)
+  blacklist: string[]
+  /** 白名单带昵称: {wxid, displayName, addedAt}[] */
+  whitelistEntries: ListEntry[]
+  /** 黑名单带昵称: {wxid, displayName, addedAt, reason?}[] */
+  blacklistEntries: ListEntry[]
   // Vault & Pipeline
   vaultRepo: string
   aiEngine: string
@@ -34,19 +42,58 @@ interface CliConfig {
   wereadApiKey: string
   // AI 引擎 API Key
   deepseekApiKey: string
+  // 朋友圈 (SNS) 数据库
+  snsDbPath: string
+  snsKey: string
+  snsSalt: string
+  // 收藏 (favorite.db)
+  favDbPath: string
+  favKey: string
+  emoticonSeed: string
+  favPassphrase: string
+  // 第二大脑助手
+  /** 隐私模式: open | balanced | strict，默认 strict */
+  assistantPrivacy: string
+  /** 本地推理引擎模型名 (ollama/lmstudio) */
+  localModel: string
+  /** 自定义 AI 端点 (OpenAI 兼容中转站); 设置后云端引擎走此地址 */
+  aiBaseUrl: string
+  /** 自定义端点使用的模型名 */
+  aiModel: string
+  /** 助手白名单 (@im.wechat ID, 逗号/空格分隔); 空 = 拒绝所有人 */
+  assistantWhitelist: string
+  /** 官方通道明确提供群 ID 时才使用；空 = 拒绝所有群 */
+  assistantGroupWhitelist: string
+  /** 群内是否必须明确 @ 机器人；默认开启 */
+  assistantGroupRequireMention: string
+  dailySources: string
+  /** 公众号类别映射，JSON 对象：公众号名称或 gh_ ID -> 类别 */
+  dailySourceCategories: string
+  dailyAiEnabled: string
+}
+
+export interface ListEntry {
+  wxid: string
+  displayName?: string
+  addedAt?: number
+  reason?: string
 }
 
 /** 需要加密存储的字段 */
 const ENCRYPTED_KEYS: ReadonlySet<keyof CliConfig> = new Set([
   'decryptKey', 'decryptKey3x', 'ntKey', 'contactKey',
-  'wechatOcToken', 'wereadApiKey', 'deepseekApiKey',
+  'wechatOcToken', 'wereadApiKey', 'deepseekApiKey', 'snsKey',
+  'favKey', 'favPassphrase',
 ])
 
 const CONFIG_DIR = join(homedir(), '.weflow-cli')
 const CONFIG_FILE = join(CONFIG_DIR, 'config.json')
 
 export class ConfigService {
-  private config: CliConfig = { dbPath: '', wxid: '', decryptKey: '', decryptKey3x: '', dataVersion: '', dbPath3x: '', ntDbPath: '', ntKey: '', ntSalt: '', contactDbPath: '', contactKey: '', contactSalt: '', wechatOcToken: '', wechatOcAccountId: '', wechatOcBaseUrl: '', wechatOcSyncBuf: '', whitelist: [], vaultRepo: '', aiEngine: 'deepseek', wereadApiKey: '', deepseekApiKey: '' }
+  private config: CliConfig = { dbPath: '', wxid: '', decryptKey: '', decryptKey3x: '', dataVersion: '', dbPath3x: '', ntDbPath: '', ntKey: '', ntSalt: '', contactDbPath: '', contactKey: '', contactSalt: '', wechatOcToken: '', wechatOcAccountId: '', wechatOcBaseUrl: '', wechatOcSyncBuf: '', wechatOcContextTokens: '', whitelist: [], blacklist: [], whitelistEntries: [], blacklistEntries: [], vaultRepo: '', aiEngine: 'deepseek', wereadApiKey: '', deepseekApiKey: '', snsDbPath: '', snsKey: '', snsSalt: '', favDbPath: '', favKey: '', favPassphrase: '', emoticonSeed: '', assistantPrivacy: 'strict', localModel: '', aiBaseUrl: '', aiModel: '', assistantWhitelist: '', assistantGroupWhitelist: '', assistantGroupRequireMention: 'true', dailySources: '', dailySourceCategories: '', dailyAiEnabled: 'true' }
+
+  /** 本进程修改过、待回写的字段 (多进程并发写保护) */
+  private dirty = new Set<keyof CliConfig>()
 
   constructor() {
     this.load()
@@ -56,6 +103,15 @@ export class ConfigService {
     try {
       if (existsSync(CONFIG_FILE)) {
         const data = JSON.parse(readFileSync(CONFIG_FILE, 'utf8'))
+        const whitelist = Array.isArray(data.whitelist) ? data.whitelist : []
+        const blacklist = Array.isArray(data.blacklist) ? data.blacklist : []
+        // entries 优先; 缺失时从旧 string[] 迁移
+        const whitelistEntries: ListEntry[] = Array.isArray(data.whitelistEntries)
+          ? data.whitelistEntries
+          : whitelist.map((wxid: string) => ({ wxid }))
+        const blacklistEntries: ListEntry[] = Array.isArray(data.blacklistEntries)
+          ? data.blacklistEntries
+          : blacklist.map((wxid: string) => ({ wxid }))
         this.config = {
           dbPath: data.dbPath || '',
           wxid: data.wxid || '',
@@ -73,11 +129,32 @@ export class ConfigService {
           wechatOcAccountId: data.wechatOcAccountId || '',
           wechatOcBaseUrl: data.wechatOcBaseUrl || '',
           wechatOcSyncBuf: data.wechatOcSyncBuf || '',
-          whitelist: Array.isArray(data.whitelist) ? data.whitelist : [],
+          wechatOcContextTokens: data.wechatOcContextTokens || '',
+          whitelist,
+          blacklist,
+          whitelistEntries,
+          blacklistEntries,
           vaultRepo: data.vaultRepo || '',
           aiEngine: data.aiEngine || 'deepseek',
           wereadApiKey: data.wereadApiKey || '',
           deepseekApiKey: data.deepseekApiKey || '',
+          snsDbPath: data.snsDbPath || '',
+          snsKey: data.snsKey || '',
+          snsSalt: data.snsSalt || '',
+          favDbPath: data.favDbPath || '',
+          favKey: data.favKey || '',
+          favPassphrase: data.favPassphrase || '',
+          emoticonSeed: data.emoticonSeed || '',
+          assistantPrivacy: data.assistantPrivacy || 'strict',
+          localModel: data.localModel || '',
+          aiBaseUrl: data.aiBaseUrl || '',
+          aiModel: data.aiModel || '',
+          assistantWhitelist: data.assistantWhitelist || '',
+          assistantGroupWhitelist: data.assistantGroupWhitelist || '',
+          assistantGroupRequireMention: data.assistantGroupRequireMention === 'false' ? 'false' : 'true',
+          dailySources: data.dailySources || '',
+          dailySourceCategories: data.dailySourceCategories || '',
+          dailyAiEnabled: data.dailyAiEnabled === 'false' ? 'false' : 'true',
         }
       }
     } catch (e) {
@@ -91,7 +168,24 @@ export class ConfigService {
       if (!existsSync(CONFIG_DIR)) {
         mkdirSync(CONFIG_DIR, { recursive: true })
       }
-      writeFileSync(CONFIG_FILE, JSON.stringify(this.config, null, 2), 'utf8')
+      // 多进程安全 (守护进程与 CLI 并发): 只回写本进程修改过的字段,
+      // 其余字段以磁盘最新值保留, 避免旧内存快照覆盖他人写入 (幽灵回写)。
+      let merged: Record<string, unknown> = { ...this.config }
+      try {
+        if (existsSync(CONFIG_FILE) && this.dirty.size > 0) {
+          const onDisk: Record<string, unknown> = JSON.parse(readFileSync(CONFIG_FILE, 'utf8'))
+          merged = { ...onDisk, ...this.config }
+          for (const key of Object.keys(onDisk)) {
+            if (this.dirty.has(key as keyof CliConfig)) continue
+            merged[key] = onDisk[key]
+          }
+        }
+      } catch { /* 磁盘副本不可读时退回整份写入 */ }
+      // 原子写入: 先写临时文件再改名, 防止进程中途被杀导致配置损坏
+      const tmpFile = CONFIG_FILE + '.tmp'
+      writeFileSync(tmpFile, JSON.stringify(merged, null, 2), 'utf8')
+      renameSync(tmpFile, CONFIG_FILE)
+      this.dirty.clear()
     } catch (e) {
       console.error('保存配置失败:', e)
     }
@@ -116,6 +210,7 @@ export class ConfigService {
     } else {
       this.config[key] = value
     }
+    this.dirty.add(key)
     this.save()
   }
 
@@ -133,6 +228,9 @@ export class ConfigService {
       contactDbPath: this.config.contactDbPath,
       contactKey: this.get('contactKey'),
       contactSalt: this.config.contactSalt,
+      snsDbPath: this.config.snsDbPath,
+      snsKey: this.get('snsKey'),
+      snsSalt: this.config.snsSalt,
     }
   }
 
@@ -142,9 +240,76 @@ export class ConfigService {
 
   setWhitelist(list: string[]): void {
     this.config.whitelist = list
+    this.dirty.add('whitelist')
+    this.save()
+  }
+
+  getWhitelistEntries(): ListEntry[] {
+    return this.config.whitelistEntries || []
+  }
+
+  setWhitelistEntries(entries: ListEntry[]): void {
+    this.config.whitelistEntries = entries
+    // 同步 string[] 视图, 供旧代码使用
+    this.config.whitelist = entries.map(e => e.wxid)
+    this.dirty.add('whitelistEntries')
+    this.dirty.add('whitelist')
     this.save()
   }
 
+  getBlacklist(): string[] {
+    return this.config.blacklist || []
+  }
+
+  setBlacklist(list: string[]): void {
+    this.config.blacklist = list
+    this.dirty.add('blacklist')
+    this.save()
+  }
+
+  getBlacklistEntries(): ListEntry[] {
+    return this.config.blacklistEntries || []
+  }
+
+  setBlacklistEntries(entries: ListEntry[]): void {
+    this.config.blacklistEntries = entries
+    this.config.blacklist = entries.map(e => e.wxid)
+    this.dirty.add('blacklistEntries')
+    this.dirty.add('blacklist')
+    this.save()
+  }
+
+  /** 读取持久化的 context_token: wxid -> token */
+  getContextTokens(): Record<string, string> {
+    const raw = this.config.wechatOcContextTokens || ''
+    if (!raw) return {}
+    const json = raw.startsWith(LOCK_PREFIX) ? this.lockDecrypt(raw) : raw
+    if (!json) return {}
+    try {
+      const obj = JSON.parse(json)
+      return (obj && typeof obj === 'object') ? obj as Record<string, string> : {}
+    } catch {
+      return {}
+    }
+  }
+
+  /** 持久化 context_token 集合 (加密存储) */
+  setContextTokens(tokens: Record<string, string>): void {
+    const json = JSON.stringify(tokens || {})
+    this.config.wechatOcContextTokens = json ? this.lockEncrypt(json) : ''
+    this.dirty.add('wechatOcContextTokens')
+    this.save()
+  }
+
+  /** 增量更新单个 wxid 的 context_token */
+  upsertContextToken(wxid: string, token: string): void {
+    if (!wxid || !token) return
+    const tokens = this.getContextTokens()
+    if (tokens[wxid] === token) return
+    tokens[wxid] = token
+    this.setContextTokens(tokens)
+  }
+
   isConfigured(): boolean {
     const has4x = !!(this.config.dbPath && this.config.decryptKey)
     const has3x = !!(this.config.dbPath3x && this.config.decryptKey3x)
@@ -152,8 +317,31 @@ export class ConfigService {
     return has4x || has3x || hasNt
   }
 
+  clearDatabaseKeys(): void {
+    this.clearDatabaseKeysInMemory(true)
+  }
+
+  maskDatabaseKeysForTesting(): void {
+    this.clearDatabaseKeysInMemory(false)
+  }
+
+  private clearDatabaseKeysInMemory(persist: boolean): void {
+    const keyFields: Array<keyof CliConfig> = [
+      'decryptKey', 'decryptKey3x', 'ntKey', 'ntSalt',
+      'contactKey', 'contactSalt', 'snsKey', 'snsSalt',
+      'favKey', 'favPassphrase',
+    ]
+    for (const key of keyFields) {
+      this.config[key] = '' as never
+      if (persist) this.dirty.add(key)
+    }
+    if (persist) this.save()
+  }
+
   clear(): void {
-    this.config = { dbPath: '', wxid: '', decryptKey: '', decryptKey3x: '', dataVersion: '', dbPath3x: '', ntDbPath: '', ntKey: '', ntSalt: '', contactDbPath: '', contactKey: '', contactSalt: '', wechatOcToken: '', wechatOcAccountId: '', wechatOcBaseUrl: '', wechatOcSyncBuf: '', whitelist: [], vaultRepo: '', aiEngine: 'deepseek', wereadApiKey: '', deepseekApiKey: '' }
+    this.config = { dbPath: '', wxid: '', decryptKey: '', decryptKey3x: '', dataVersion: '', dbPath3x: '', ntDbPath: '', ntKey: '', ntSalt: '', contactDbPath: '', contactKey: '', contactSalt: '', wechatOcToken: '', wechatOcAccountId: '', wechatOcBaseUrl: '', wechatOcSyncBuf: '', wechatOcContextTokens: '', whitelist: [], blacklist: [], whitelistEntries: [], blacklistEntries: [], vaultRepo: '', aiEngine: 'deepseek', wereadApiKey: '', deepseekApiKey: '', snsDbPath: '', snsKey: '', snsSalt: '', favDbPath: '', favKey: '', favPassphrase: '', emoticonSeed: '', assistantPrivacy: 'strict', localModel: '', aiBaseUrl: '', aiModel: '', assistantWhitelist: '', assistantGroupWhitelist: '', assistantGroupRequireMention: 'true', dailySources: '', dailySourceCategories: '', dailyAiEnabled: 'true' }
+    // clear 意图是全量重置: 所有字段标记为脏, 覆盖磁盘上的全部旧值
+    this.dirty = new Set(Object.keys(this.config) as (keyof CliConfig)[])
     this.save()
   }
 

package/src/services/evidenceService.ts

@@ -0,0 +1,129 @@
+import { createHash } from 'crypto'
+import { mkdirSync, writeFileSync } from 'fs'
+import { join } from 'path'
+import type { Message } from '../types.js'
+import { redactText, type PrivacyMode } from './assistantPrivacy.js'
+
+export interface EvidenceManifest {
+  schemaVersion: '1.0'
+  generatedAt: string
+  source: 'local-wechat'
+  authorization: 'user-authorized-local-data'
+  talker: string
+  caseNote: string
+  messageCount: number
+  firstMessageAt: string | null
+  lastMessageAt: string | null
+  messageIds: number[]
+  messagesSha256: string
+  notice: string
+}
+
+export interface EvidencePackageResult {
+  path: string
+  manifest: EvidenceManifest
+}
+
+export interface EvidenceReviewInput {
+  transcript: string
+  redactions: number
+  localInference: boolean
+}
+
+const LEGAL_NOTICE = '本包用于本地证据整理，不代表任何法院或机构必然采信；请保留原设备和原始数据，并根据案件情况咨询专业律师。'
+
+function sha256(value: string): string {
+  return createHash('sha256').update(value, 'utf8').digest('hex')
+}
+
+function isoTime(timestamp: number | undefined): string | null {
+  if (!timestamp || !Number.isFinite(timestamp)) return null
+  return new Date(timestamp * 1000).toISOString()
+}
+
+function safePackageName(talker: string): string {
+  const name = talker.replace(/[^a-zA-Z0-9._-]+/g, '_').replace(/^\.+/, '')
+  return (name || 'conversation').slice(0, 80)
+}
+
+export function buildEvidenceManifest(talker: string, messages: Message[], caseNote = '', generatedAt = new Date().toISOString()): EvidenceManifest {
+  const serialized = JSON.stringify(messages, null, 2)
+  const timestamps = messages.map(message => message.createTime).filter(Number.isFinite)
+  return {
+    schemaVersion: '1.0',
+    generatedAt,
+    source: 'local-wechat',
+    authorization: 'user-authorized-local-data',
+    talker,
+    caseNote: caseNote.trim().slice(0, 500),
+    messageCount: messages.length,
+    firstMessageAt: timestamps.length ? isoTime(Math.min(...timestamps)) : null,
+    lastMessageAt: timestamps.length ? isoTime(Math.max(...timestamps)) : null,
+    messageIds: messages.map(message => message.localId).filter(Number.isFinite),
+    messagesSha256: sha256(serialized),
+    notice: LEGAL_NOTICE,
+  }
+}
+
+export function writeEvidencePackage(outputRoot: string, talker: string, messages: Message[], caseNote = ''): EvidencePackageResult {
+  const packagePath = join(outputRoot, `${safePackageName(talker)}-${Date.now()}`)
+  mkdirSync(packagePath, { recursive: true })
+  const messagesText = JSON.stringify(messages, null, 2)
+  const manifest = buildEvidenceManifest(talker, messages, caseNote)
+  writeFileSync(join(packagePath, 'messages.json'), messagesText, { encoding: 'utf8', flag: 'wx' })
+  writeFileSync(join(packagePath, 'manifest.json'), JSON.stringify(manifest, null, 2), { encoding: 'utf8', flag: 'wx' })
+  writeFileSync(join(packagePath, 'README.md'), [
+    '# 本地聊天证据整理包',
+    '',
+    `- 消息数量：${manifest.messageCount}`,
+    `- 生成时间：${manifest.generatedAt}`,
+    `- 原始消息 SHA-256：\`${manifest.messagesSha256}\``,
+    '',
+    '## 使用边界',
+    '',
+    LEGAL_NOTICE,
+    '',
+    '请勿修改 `messages.json`。如需脱敏、摘要或分析，请复制后处理，并保留处理前后的文件哈希和操作记录。',
+    '',
+    '## 建议补充',
+    '',
+    '- 保留原设备、原始数据库和官方导出记录。',
+    '- 记录导出人、导出时间、工具版本和数据范围。',
+    '- 保存完整上下文，不要只截取对自己有利的片段。',
+    '- 将本包交给律师或有权处理案件的机构复核。',
+    '',
+  ].join('\n'), { encoding: 'utf8', flag: 'wx' })
+  return { path: packagePath, manifest }
+}
+
+export const evidenceLegalNotice = LEGAL_NOTICE
+
+export function buildEvidenceReviewInput(talker: string, messages: Message[], mode: PrivacyMode, localInference: boolean): EvidenceReviewInput {
+  let redactions = 0
+  const safeMetadata = (value: string, fallback: string): string => {
+    if (localInference) return value || fallback
+    if (mode === 'strict') return fallback
+    const result = redactText(value || fallback, mode, false)
+    redactions += result.redactions
+    return result.safe
+  }
+  const safeTalker = safeMetadata(talker, '[会话已按严格隐私模式屏蔽]')
+  const lines = messages.map(message => {
+    const rawBody = message.content || message.parsedContent || message.rawContent || ''
+    const body = mode === 'strict' && !localInference
+      ? `[聊天正文已按严格隐私模式屏蔽，共${rawBody.length}字]`
+      : (() => {
+          const result = redactText(rawBody, mode, localInference)
+          redactions += result.redactions
+          return result.safe
+        })()
+    const time = isoTime(message.createTime) || '时间未知'
+    const sender = safeMetadata(message.senderUsername || '', '[发送方已按严格隐私模式屏蔽]')
+    return `[消息ID:${message.localId}] [${time}] [发送方:${sender}] ${body}`
+  })
+  return {
+    transcript: `会话：${safeTalker}\n消息数：${messages.length}\n\n${lines.join('\n')}`,
+    redactions,
+    localInference,
+  }
+}