实现分层实体漏洞知识库与实体级完整度监控

scripts/lab/dashboard_templates/lovart/assets/app.js

@@ -45,6 +45,8 @@ const DOC_HUB_ITEMS = [
   { title: "source-map 镜像", href: "/docs/source-map.html", description: "系统覆盖、来源、输出目录和 secure-code 主题真值。", badge: "source-map" },
   { title: "source catalog audit", href: "/docs/source-catalog-audit.html", description: "active/retired source、replacement map 与覆盖摘要。", badge: "audit" },
   { title: "retired sources", href: "/docs/retired-sources.html", description: "退役源、退役原因和 replacement_sources 真值。", badge: "retired" },
+  { title: "entity catalog report", href: "/docs/entity-catalog-report.html", description: "分层实体覆盖、history-full 完整度与 workflow 指标。", badge: "entities" },
+  { title: "entity discovery backlog", href: "/docs/entity-discovery-backlog.html", description: "待编目 repo / 插件 / 包 backlog 与等待原因。", badge: "backlog" },
   { title: "repro-map 镜像", href: "/docs/repro-map.html", description: "默认漏洞家族、浏览器要求和日志策略真值。", badge: "repro-map" },
   { title: "覆盖矩阵镜像", href: "/docs/coverage-matrix.html", description: "当前全库覆盖矩阵的本地镜像。", badge: "coverage" },
   { title: "安全编码索引", href: "/docs/secure-code-index.html", description: "secure-code 修复主题索引镜像。", badge: "secure-code" },
@@ -58,6 +60,9 @@ const DATA_HUB_ITEMS = [
   { title: "alerts.json", href: "/data/alerts.json", description: "source 告警状态机、failure streak 与 resolved 记录。", badge: "json" },
   { title: "monitor-summary.json", href: "/data/monitor-summary.json", description: "每日监控摘要、open alerts 与最近全绿时间。", badge: "json" },
   { title: "source-catalog-audit.json", href: "/data/source-catalog-audit.json", description: "source catalog 审计真值与 retired/replacement 关系。", badge: "json" },
+  { title: "entity-completeness.json", href: "/data/entity-completeness.json", description: "实体级 catalog 完整度、版本映射和 workflow 覆盖。", badge: "json" },
+  { title: "entity-discovery-backlog.json", href: "/data/entity-discovery-backlog.json", description: "发现但尚未正式编目的 repo / 插件 / 包 backlog。", badge: "json" },
+  { title: "entity-queues.json", href: "/data/entity-queues.json", description: "discovery/history/latest/workflow 四类队列摘要。", badge: "json" },
   { title: "runs.json", href: "/runs.json", description: "最近运行的结构化详情，可用于 UI 和调试。", badge: "json" },
   { title: "systems.json", href: "/systems.json", description: "系统级覆盖、分类、更新时间和浏览器证据统计。", badge: "json" },
   { title: "advisories.json", href: "/advisories.json", description: "漏洞条目元数据、来源和 secure-code 主题。", badge: "json" },
@@ -93,6 +98,7 @@ const state = {
   profiles: {},
   architecture: null,
   completeness: null,
+  entityCompleteness: null,
   sourceHealth: null,
   alerts: [],
   monitorSummary: null,
@@ -288,9 +294,12 @@ function familyOptions() {
 
 function metricCards() {
   const completeness = state.completeness || state.summary?.completeness || {};
+  const entityCoverage = state.entityCompleteness || state.summary?.entity_coverage || completeness.entity_coverage || {};
   const monitoring = state.monitorSummary || state.summary?.monitoring || {};
   const advisoryTotal = Number(completeness.advisory_total || state.summary?.advisory_count || 0);
   const advisorySuccess = Number(completeness.verified_real || 0);
+  const catalogedEntities = Number(entityCoverage.cataloged_entity_total || 0);
+  const candidateEntities = Number(entityCoverage.candidate_entity_total || 0);
   const activeSources = Number(monitoring.active_source_count || state.sourceHealth?.active_source_count || 0);
   const greenSources = Number(monitoring.green_source_count || state.sourceHealth?.green_source_count || 0);
   const openAlerts = Number(monitoring.open_alert_count || state.sourceHealth?.open_alert_count || 0);
@@ -304,6 +313,13 @@ function metricCards() {
       color: "var(--accent-green)",
       iconName: "report"
     },
+    {
+      label: "分层实体",
+      value: catalogedEntities,
+      note: `backlog ${candidateEntities}`,
+      color: "var(--accent-yellow)",
+      iconName: "systems"
+    },
     {
       label: "active sources",
       value: activeSources,
@@ -774,6 +790,7 @@ function renderPanel(panelKey, title, meta, iconName, content) {
 
 function renderCompletenessPanel(panelKey, compact = false) {
   const completeness = state.completeness || state.summary?.completeness || {};
+  const entityCoverage = state.entityCompleteness || state.summary?.entity_coverage || completeness.entity_coverage || {};
   const sourceHealth = state.sourceHealth || completeness.source_health || {};
   const systems = (state.completeness?.systems || []).map((system) => `
     <article class="plan-card">
@@ -816,12 +833,30 @@ function renderCompletenessPanel(panelKey, compact = false) {
           <strong>open alerts</strong>
           <span>${escapeHtml(sourceHealth.open_alert_count || 0)}</span>
         </article>
+        <article class="detail-stat">
+          <strong>cataloged entities</strong>
+          <span>${escapeHtml(entityCoverage.cataloged_entity_total || 0)}</span>
+        </article>
+        <article class="detail-stat">
+          <strong>candidate backlog</strong>
+          <span>${escapeHtml(entityCoverage.candidate_entity_total || 0)}</span>
+        </article>
+        <article class="detail-stat">
+          <strong>workflow complete</strong>
+          <span>${escapeHtml(entityCoverage.workflow_complete_count || 0)}</span>
+        </article>
+        <article class="detail-stat">
+          <strong>version mapped</strong>
+          <span>${escapeHtml(entityCoverage.version_mapped_count || 0)}</span>
+        </article>
       </div>
       <div class="plan-grid" style="margin-top:16px;">${systems || `<div class="empty-state">暂无系统完整度数据。</div>`}</div>
       ${compact ? "" : `
         <div class="detail-actions" style="margin-top:16px;">
           <a class="button button-secondary" href="/docs/testing-completeness-report.html" target="_blank" rel="noreferrer">${icon("docs")}<span>打开中文报告</span></a>
+          <a class="button button-secondary" href="/docs/entity-catalog-report.html" target="_blank" rel="noreferrer">${icon("docs")}<span>打开实体报告</span></a>
           <a class="button button-secondary" href="/data/completeness.json" target="_blank" rel="noreferrer">${icon("json")}<span>打开 completeness.json</span></a>
+          <a class="button button-secondary" href="/data/entity-completeness.json" target="_blank" rel="noreferrer">${icon("json")}<span>打开 entity-completeness.json</span></a>
           <a class="button button-secondary" href="/data/source-health.json" target="_blank" rel="noreferrer">${icon("json")}<span>打开 source-health.json</span></a>
         </div>
         ${failures.length ? `<div class="callout" style="margin-top:16px;"><strong>Ingest 未清零</strong><div class="plan-copy">${escapeHtml(failures.join(" | "))}</div></div>` : ""}
@@ -1114,7 +1149,8 @@ function renderRunWorkspace() {
     { label: "概要", copy: advisory.summary || "当前漏洞条目没有摘要。" },
     { label: "成功判据", copy: (profile.success_criteria || []).join(" | ") || "当前复现档案没有定义成功判据。" },
     { label: "Seed / 攻击思路", copy: (run.reasoning_lines || []).join("\n\n") || "当前运行没有记录思路说明。" },
-    { label: "允许目标", copy: (profile.allowed_target_types || []).join(", ") || "当前复现档案没有声明允许目标类型。" }
+    { label: "允许目标", copy: (profile.allowed_target_types || []).join(", ") || "当前复现档案没有声明允许目标类型。" },
+    { label: "版本与对象", copy: `${advisory.advisory_scope || "core"} · ${advisory.version_confidence || "unknown"} · ${(advisory.affected_version_ranges || []).join(", ") || "版本待补齐"}` }
   ];
 
   const evidenceContent = `
@@ -1239,6 +1275,21 @@ function renderRunWorkspace() {
       <div class="tag-row">
         ${(advisory.aliases || []).map((alias) => `<span class="tag">${escapeHtml(alias)}</span>`).join("")}
         ${(advisory.secure_code_topics || []).map((topic) => `<a class="tag" href="/docs/secure-code-index.html" target="_blank" rel="noreferrer">${escapeHtml(topic)}</a>`).join("")}
+        ${(advisory.entity_refs || []).map((item) => `<span class="tag">${escapeHtml(item.entity_type || "entity")} · ${escapeHtml(item.entity_id || "-")}</span>`).join("")}
+      </div>
+      <div class="plan-grid" style="margin-bottom:16px;">
+        <article class="plan-card">
+          <span class="plan-label">影响对象</span>
+          <div class="plan-copy">${escapeHtml((advisory.affected_components || []).map((item) => item.name).join(" | ") || "未定义")}</div>
+        </article>
+        <article class="plan-card">
+          <span class="plan-label">版本映射</span>
+          <div class="plan-copy">${escapeHtml((advisory.affected_version_ranges || []).join(" | ") || advisory.version_gap_reason || "未定义")}</div>
+        </article>
+        <article class="plan-card">
+          <span class="plan-label">Workflow</span>
+          <div class="plan-copy">${escapeHtml(advisory.workflow?.vuln_family || "unknown")} · ${escapeHtml(advisory.workflow?.entry_surface || "-")}</div>
+        </article>
       </div>
       <div class="source-links">${sourceLinks}</div>
     `)}
@@ -1558,7 +1609,7 @@ async function loadData(preserveSelection = true) {
   renderSyncState("loading", "刷新中", `本地时间 ${new Date().toLocaleTimeString("zh-CN", { hour12: false })}`);
 
   try {
-    const [summary, runs, systems, advisories, profiles, architecture, completeness, sourceHealth, alerts, monitorSummary] = await Promise.all([
+    const [summary, runs, systems, advisories, profiles, architecture, completeness, entityCompleteness, sourceHealth, alerts, monitorSummary] = await Promise.all([
       fetchJson("/summary.json"),
       fetchJson("/runs.json"),
       fetchJson("/systems.json"),
@@ -1566,6 +1617,7 @@ async function loadData(preserveSelection = true) {
       fetchJson("/profiles.json"),
       fetchJson("/architecture.json"),
       fetchJson("/data/completeness.json"),
+      fetchJson("/data/entity-completeness.json"),
       fetchJson("/data/source-health.json"),
       fetchJson("/data/alerts.json"),
       fetchJson("/data/monitor-summary.json")
@@ -1578,6 +1630,7 @@ async function loadData(preserveSelection = true) {
     state.profiles = profiles;
     state.architecture = architecture;
     state.completeness = completeness;
+    state.entityCompleteness = entityCompleteness;
     state.sourceHealth = sourceHealth;
     state.alerts = alerts;
     state.monitorSummary = monitorSummary;