增强系统级实体覆盖摘要与工作台索引

scripts/lab/render.py

@@ -18,6 +18,7 @@ LEGACY_TEMPLATE_DIR = TEMPLATES_DIR / "legacy"
 LOVART_VENDOR_MANIFEST = LOVART_TEMPLATE_DIR / "vendor" / "source-manifest.json"
 ROOT_JSON_FILES = ["summary.json", "runs.json", "systems.json", "advisories.json", "profiles.json"]
 ROOT_JSON_FILES.append("architecture.json")
+ROOT_JSON_FILES.append("entities.json")
 SECTION_ROUTE_DIRS = ["overview", "runs", "systems", "architecture", "data"]
 
 CATEGORY_LABELS = {
@@ -570,6 +571,7 @@ def _build_architecture_data(summary: Dict[str, Any], source_map: Dict[str, Any]
         _link("entity-queues.json", "/data/entity-queues.json", "discovery/history/latest/workflow 四类队列摘要。"),
         _link("runs.json", "/runs.json", "最近 run 的结构化详情。"),
         _link("systems.json", "/systems.json", "系统级覆盖与浏览器证据摘要。"),
+        _link("entities.json", "/entities.json", "分层实体索引、实体状态和系统归属。"),
         _link("advisories.json", "/advisories.json", "漏洞条目元数据与来源。"),
         _link("profiles.json", "/profiles.json", "复现档案元数据。"),
         _link("architecture.json", "/architecture.json", "当前架构库结构化 JSON。"),
@@ -1363,12 +1365,17 @@ def render_dashboard(
     entity_completeness = read_json(ROOT / "08-threat-intel" / "generated" / "entity-completeness.json", default={}) or {}
     entity_backlog = read_json(ROOT / "08-threat-intel" / "generated" / "entity-discovery-backlog.json", default=[]) or []
     entity_queues = read_json(ROOT / "08-threat-intel" / "generated" / "entity-queues.json", default={}) or {}
+    entity_records = load_json_dir(ROOT / "08-threat-intel" / "registry" / "entities")
     source_map = source_map_data if source_map_data is not None else (read_yaml(SOURCE_MAP_PATH, default={}) or {})
     repro_map = repro_map_data if repro_map_data is not None else (read_yaml(REPRO_MAP_PATH, default={}) or {})
     source_system_map = {item["system_id"]: item for item in source_map.get("systems", []) if item.get("system_id")}
     merged_advisories = _merge_latest_advisories(advisory_records, runs, source_system_map)
     advisory_map = {item["canonical_id"]: item for item in merged_advisories if item.get("canonical_id")}
     profile_map = load_profiles()
+    entity_summary_map = {item.get("system_id"): item for item in (entity_completeness.get("systems") or []) if item.get("system_id")}
+    entities_by_system: Dict[str, List[Dict[str, Any]]] = {}
+    for item in sorted(entity_records, key=lambda value: (value.get("root_system_id") or "", value.get("entity_type") or "", value.get("display_name") or "")):
+        entities_by_system.setdefault(item.get("root_system_id") or "", []).append(item)
 
     _sync_run_bundles(runs)
 
@@ -1419,6 +1426,15 @@ def render_dashboard(
         elif status not in {"verified-synthetic"}:
             family_entry["manual"] += 1
 
+    for system_id, system in systems.items():
+        entity_summary = entity_summary_map.get(system_id, {})
+        system["entity_summary"] = entity_summary
+        system["top_entities"] = entity_summary.get("top_entities", [])
+        system["backlog_preview"] = entity_summary.get("backlog_preview", [])
+        system["entity_total"] = entity_summary.get("cataloged_entity_total", 0)
+        system["entity_backlog"] = entity_summary.get("candidate_entity_total", 0)
+        system["entity_type_counts"] = entity_summary.get("entity_type_counts", {})
+
     recent_runs = sorted(runs, key=lambda item: item.get("finished_at") or "", reverse=True)[:100]
     decorated_runs: List[Dict[str, Any]] = []
     for item in recent_runs:
@@ -1532,6 +1548,7 @@ def render_dashboard(
     write_json(DASHBOARD_DIR / "summary.json", summary)
     write_json(DASHBOARD_DIR / "runs.json", decorated_runs)
     write_json(DASHBOARD_DIR / "systems.json", summary["systems"])
+    write_json(DASHBOARD_DIR / "entities.json", entity_records)
     write_json(DASHBOARD_DIR / "advisories.json", {key: _advisory_meta(value) for key, value in advisory_map.items()})
     write_json(DASHBOARD_DIR / "profiles.json", {key: _profile_meta(value) for key, value in profile_map.items()})
     write_json(DASHBOARD_DIR / "data" / "completeness.json", completeness)