剪贴板管理器的魔鬼细节：SQLite WAL 高性能持久化、高熵密码自动脱敏与“顺序流水粘贴”实现

export interface SensitivityAnalysis {
  isSensitive: boolean;
  reason?: 'KNOWN_TOKEN_PREFIX' | 'HIGH_SHANNON_ENTROPY' | 'PRIVATE_KEY_BLOCK';
  maskedPreview: string;
}

const KNOWN_SECRET_PATTERNS: RegExp[] = [
  /^sk-[a-zA-Z0-9_-]{20,}$/,           // OpenAI / DeepSeek API Key
  /^gh[pousr]_[a-zA-Z0-9]{36,}$/,      // GitHub Personal Access Token
  /^AKIA[0-9A-Z]{16}$/,                // AWS Access Key ID
  /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/, // SSH / TLS 私钥
];

/**
 * 计算字符串的香农信息熵 (bits per character)
 */
export function calculateShannonEntropy(str: string): number {
  const len = str.length;
  if (len === 0) return 0;

  const freq = new Map<string, number>();
  for (const ch of str) {
    freq.set(ch, (freq.get(ch) ?? 0) + 1);
  }

  let entropy = 0;
  for (const count of freq.values()) {
    const p = count / len;
    entropy -= p * Math.log2(p);
  }
  return entropy;
}

/**
 * 判定剪贴板文本是否为高敏密钥并生成安全脱敏预览
 */
export function analyzeClipboardSensitivity(rawText: string): SensitivityAnalysis {
  const trimmed = rawText.trim();

  // 1. 匹配已知 API Token 与私钥特征正则
  for (const pattern of KNOWN_SECRET_PATTERNS) {
    if (pattern.test(trimmed)) {
      return {
        isSensitive: true,
        reason: 'KNOWN_TOKEN_PREFIX',
        maskedPreview: maskSecretString(trimmed),
      };
    }
  }

  // 2. 针对无空格的单行紧凑字符串 (12 ~ 128 字符)，检验字符集复杂度与香农熵
  if (trimmed.length >= 12 && trimmed.length <= 128 && !/\s/.test(trimmed)) {
    const hasUpper = /[A-Z]/.test(trimmed);
    const hasLower = /[a-z]/.test(trimmed);
    const hasDigit = /[0-9]/.test(trimmed);
    const hasSymbol = /[^A-Za-z0-9]/.test(trimmed);
    const charClassCount = [hasUpper, hasLower, hasDigit, hasSymbol].filter(Boolean).length;

    const entropy = calculateShannonEntropy(trimmed);
    if (charClassCount >= 3 && entropy >= 4.25) {
      return {
        isSensitive: true,
        reason: 'HIGH_SHANNON_ENTROPY',
        maskedPreview: maskSecretString(trimmed),
      };
    }
  }

  return { isSensitive: false, maskedPreview: trimmed.slice(0, 200) };
}

function maskSecretString(secret: string): string {
  if (secret.length <= 8) return '••••••••';
  return `${secret.slice(0, 4)}••••••••••••${secret.slice(-4)}`;
}

export class SequentialPasteController {
  private currentCursorIndex: number = 0;
  private suppressedHashes = new Set<string>();

  /**
   * 执行单步顺序流水粘贴，并自动推进游标
   */
  public async pasteNextInSequence(): Promise<SequentialPasteResult> {
    const items = await this.clipboardRepo.getRecentItems(50);
    if (items.length === 0) {
      return { status: 'EMPTY' };
    }

    // 越界回绕保护
    if (this.currentCursorIndex >= items.length) {
      this.currentCursorIndex = 0;
    }

    const currentItem = items[this.currentCursorIndex];
    const nextItem = items[(this.currentCursorIndex + 1) % items.length];

    // 1. 注册自写哈希豁免锁：防止本次回写剪贴板触发历史记录重新置顶，打乱队列顺序！
    this.suppressedHashes.add(currentItem.sha256);

    // 2. 将当前游标条目写入系统剪贴板并通过 ztools-uiaccess 穿透注入 Ctrl+V
    await this.nativeBridge.writeClipboardAndPaste(currentItem);

    // 3. 推进游标并返回下一条预告信息供 HUD 展示
    const pastedIndex = this.currentCursorIndex;
    this.currentCursorIndex++;

    return {
      status: 'PASTED',
      currentIndex: pastedIndex + 1,
      totalAvailable: items.length,
      pastedPreview: currentItem.maskedPreview,
      nextPreview: nextItem?.maskedPreview ?? null,
    };
  }

  public resetSequence(): void {
    this.currentCursorIndex = 0;
  }
}