Katyusha's blog

1
// Package output 将诊断报告渲染为 JSON / YAML / Markdown。
2
package output
3

4
import (
5
  "encoding/json"
6
  "fmt"
7
  "io"
8
  "strings"
9

10
  "gopkg.in/yaml.v3"
11

12
  "github.com/os2026/ebpf-rca/internal/schema"
13
)
14

15
// Write 按指定格式输出一份报告。
16
func Write(w io.Writer, r schema.AnomalyReport, format string) error {
17
  switch strings.ToLower(format) {
18
  case "", "json":
19
    enc := json.NewEncoder(w)
20
    enc.SetIndent("", "  ")
21
    return enc.Encode(r)
22
  case "yaml", "yml":
23
    b, err := yaml.Marshal(r)
24
    if err != nil {
25
      return err
26
    }
27
    if _, err := w.Write(b); err != nil {
28
      return err
29
    }
30
    _, err = io.WriteString(w, "---\n")
31
    return err
32
  case "md", "markdown":
33
    return writeMarkdown(w, r)
34
  default:
35
    return fmt.Errorf("unknown format: %s", format)
36
  }
37
}
38

39
func writeMarkdown(w io.Writer, r schema.AnomalyReport) error {
40
  var b strings.Builder
41
  fmt.Fprintf(&b, "## 诊断报告：%s\n\n", r.AnomalyType)
42
  fmt.Fprintf(&b, "- **关联对象**: pid=%d tid=%d comm=%s\n",
43
    r.RelatedObject.Pid, r.RelatedObject.Tid, r.RelatedObject.Comm)
44
  fmt.Fprintf(&b, "- **时间窗口**: %s ~ %s\n", r.TimeWindow.Start, r.TimeWindow.End)
45
  fmt.Fprintf(&b, "- **疑似根因**: %s（置信度 %.2f）\n", r.SuspectedRootCause, r.Confidence)
46
  fmt.Fprintf(&b, "- **建议**: %s\n\n", r.Suggestion)
47

48
  b.WriteString("**关键指标**:\n\n")
49
  for k, v := range r.KeyMetrics {
50
    fmt.Fprintf(&b, "  - %s: %v\n", k, v)
51
  }
52

53
  b.WriteString("\n**证据链**:\n\n")
54
  for i, e := range r.EvidenceChain {
55
    fmt.Fprintf(&b, "  %d. [%s] %s = %v", i+1, e.Type, e.Name, e.Value)
56
    if e.Threshold != nil {
57
      fmt.Fprintf(&b, "（阈值 %v）", e.Threshold)
58
    }
59
    if e.Func != "" {
60
      fmt.Fprintf(&b, " @ %s", e.Func)
61
    }
62
    if e.Desc != "" {
63
      fmt.Fprintf(&b, " — %s", e.Desc)
64
    }
65
    b.WriteString("\n")
66
  }
67
  b.WriteString("\n---\n")
68
  _, err := io.WriteString(w, b.String())
69
  return err
70
}