feat(similarity): 相似度检测管理前端 (#61)

* update .gitignore

* feat(similarity): scaffold admin similarity dashboard route + menu

Add DiffOutlined menu entry and active-key detection for /admin/similarity.
Create similarity page, SimilarityDashboardClient tabs shell, and five
placeholder tab components (PairsTable, SuspectsTable, IntegrityReviewTable,
IntegrityWhitelistTable, PairWhitelistTable).

* feat(similarity): add frontend similarity API service client

Typed service class wrapping all admin + public similarity endpoints:
pairs list/detail, suspects list, pair whitelist, integrity reviews,
integrity whitelist, and evidence pair detail.

* feat(similarity): add zh-CN translations for Phase 3 admin panel

Merge admin.navigation.similarity, admin.similarity (tabs, columns,
status labels, action labels, drawer/modal strings), similarity.evidence
(disclaimer), and errors.integrity_rejected into the zh-CN locale file.

* feat(similarity): implement PairsTable tab

* feat(similarity): implement SuspectsTable tab

* fix(similarity): integrity_score 0 rendering and consolidate antd imports

- integrity_score === 0 now renders as 0.00 instead of -
- merge split antd imports in SuspectsTable

* feat(similarity): implement integrity review queue tab

* fix(similarity): use non-deprecated Drawer props (size/destroyOnHidden)

* fix(similarity): destroy ResolveReviewModal form on close to prevent state leak

* feat(similarity): add removePairWhitelistByID API client method

* feat(similarity): implement whitelist management tabs

* feat(similarity): add admin pair detail page with Monaco diff viewer

Implements Task 17 — pair detail page under admin/similarity/pairs/[pairId]
with metadata descriptions, whitelist action button, and a CodeDiffViewer
component that uses @monaco-editor/react DiffEditor with per-segment line
decorations via createDecorationsCollection.

* feat(similarity): add semi-public pair evidence page

Implements Task 18 — public-facing evidence page at similarity/pair/[id]
that wraps PairDetailClient with a warning Alert disclaimer banner, sourced
from getEvidencePair API endpoint.

* fix(similarity): use Alert.title instead of deprecated message prop

* fix(similarity): use real CSS class for diff highlights and correct byte→line conversion

- replace Tailwind class names (which Tailwind purges from non-JSX strings)
  with similarity-match-highlight defined in globals.css
- convert UTF-8 byte offsets via TextEncoder to handle non-ASCII source code
  correctly, instead of iterating JS UTF-16 code units

* feat(similarity): show integrity rejection alert on script publish/update

* feat(similarity): add Phase 3 translations for all supported locales

- en-US: proper English translations
- zh-TW: Traditional Chinese translations
- ja-JP / de-DE / ru-RU: English stopgap (pending Crowdin)

* feat(similarity): Phase 4 backfill control panel + stop-fp refresh

Adds the admin UI for §8.5 bootstrap operations:

- BackfillControl component in a new "回填与重扫" dashboard tab,
  polling /admin/similarity/backfill/status every 5s while running.
  Shows total/cursor/progress bar/started_at/finished_at in a
  Descriptions panel with start + restart-from-zero (§8.5 step 9) +
  refresh buttons gated by running flag.
- Manual per-script rescan card with script ID input.
- Stop-fingerprint refresh card with warning copy ("通常不需要手动
  触发"), invoking POST /admin/similarity/stop-fp/refresh — used at
  §8.5 step 8 after the first full backfill completes.
- similarityService adds triggerBackfill / getBackfillStatus /
  manualScan / refreshStopFp methods and BackfillStatus type.
- New admin.similarity.tab_backfill + admin.similarity.backfill.*
  translation keys in zh-CN.

* fix(similarity): flag deleted scripts in pair list with toggle filter

Backend now marks each ScriptBrief with is_deleted and accepts an
exclude_deleted query param. Render deleted scripts with a strikethrough
link and red tag, and add a Switch above the table that lets admins hide
any pair whose either side has been soft-deleted.

* feat(similarity): show signal descriptions in integrity review table

* refactor(similarity): move SIGNAL_DESCRIPTIONS hardcoded Chinese strings to i18n

Replace the hardcoded SIGNAL_DESCRIPTIONS constant in IntegrityReviewTable with
next-intl t() calls under admin.similarity.signal_desc.*, adding translations
for all 6 locales (zh-CN, en-US, de-DE, ja-JP, ru-RU, zh-TW).

* feat(i18n): add missing Phase 4 similarity keys to all non-zh-CN locales

Backfills script_deleted, filter_exclude_deleted, tab_backfill, and the
full backfill sub-object (28 keys) into en-US, de-DE, ja-JP, ru-RU, and
zh-TW — inserted before signal_desc to maintain consistent key ordering.

* style: fix prettier formatting in IntegrityReviewTable

* refactor: extract PairDetailClient and CodeDiffViewer to shared components

Move these components from admin route directory to src/components/similarity/
so both the admin detail page and public evidence page import from the same
shared location, eliminating the cross-layer dependency.

Author: CodFrm

.gitignore

@@ -47,5 +47,6 @@ next-env.d.ts
 /public/assets/prismjs/*
 
 .claude
-
+.omc
 CLAUDE.md
+

public/locales/de-DE/translations.json

@@ -38,7 +38,8 @@
       "scores": "Bewertungsverwaltung",
       "scripts": "Skriptverwaltung",
       "system_config": "Systemkonfiguration",
-      "users": "Benutzerverwaltung"
+      "users": "Benutzerverwaltung",
+      "similarity": "Similarity Detection"
     },
     "no_permission": "Sie haben keine Administratorberechtigung für den Zugriff auf diese Seite.",
     "oauth_apps": {
@@ -211,6 +212,111 @@
       "title": "Benutzerverwaltung",
       "unban_confirm": "Möchten Sie diesen Benutzer wirklich entsperren?",
       "unban_success": "Benutzer erfolgreich entsperrt"
+    },
+    "similarity": {
+      "tab_pairs": "Pairs",
+      "tab_suspects": "Suspects",
+      "tab_integrity_reviews": "Integrity Reviews",
+      "tab_pair_whitelist": "Pair Whitelist",
+      "tab_integrity_whitelist": "Integrity Exemptions",
+      "col_id": "ID",
+      "col_script_a": "Script A",
+      "col_script_b": "Script B",
+      "col_jaccard": "Jaccard",
+      "col_common": "Common Fingerprints",
+      "col_earlier": "Earlier Side",
+      "col_status": "Status",
+      "col_integrity": "Integrity Score",
+      "col_actions": "Actions",
+      "col_script": "Script",
+      "col_max_jaccard": "Max Jaccard",
+      "col_coverage": "External Coverage",
+      "col_pair_count": "Pair Count",
+      "col_detected_at": "Detected At",
+      "col_score": "Score",
+      "col_createtime": "Created",
+      "col_reason": "Reason",
+      "col_added_by": "Added By",
+      "status_pending": "Pending",
+      "status_whitelisted": "Whitelisted",
+      "status_resolved": "Resolved",
+      "review_pending": "Pending",
+      "review_ok": "OK",
+      "review_violated": "Violation",
+      "action_detail": "Details",
+      "action_resolve": "Resolve",
+      "action_whitelist": "Whitelist",
+      "action_remove": "Remove",
+      "confirm_remove_whitelist": "Remove this whitelist entry?",
+      "msg_removed": "Removed",
+      "modal_add_int_whitelist": "Add Integrity Exemption",
+      "label_script_id": "Script ID",
+      "label_reason": "Reason",
+      "btn_add": "Add",
+      "modal_resolve_title": "Mark Integrity Review",
+      "label_decision": "Decision",
+      "label_note": "Note",
+      "decision_ok": "OK",
+      "decision_violated": "Violation",
+      "msg_review_resolved": "Marked successfully",
+      "msg_whitelisted": "Added to whitelist",
+      "drawer_review_detail": "Integrity Review Details",
+      "label_score": "Total Score",
+      "label_sub_scores": "Category Scores",
+      "label_hit_signals": "Hit Signals",
+      "label_jaccard": "Jaccard",
+      "label_common": "Common Fingerprints",
+      "label_earlier": "Earlier Side",
+      "label_detected_at": "Detected At",
+      "label_script_a": "Script A",
+      "label_script_b": "Script B",
+      "label_code_diff": "Code Diff",
+      "script_deleted": "Gelöscht",
+      "filter_exclude_deleted": "Paare mit gelöschten Skripten ausblenden",
+      "tab_backfill": "Nachfüllung & Neuscan",
+      "backfill": {
+        "help_title": "Historische Skript-Nachfüllung",
+        "help_body": "Nach der Bereitstellung des Systems werden nur neu veröffentlichte oder aktualisierte Skripte automatisch auf Ähnlichkeit gescannt. Um historische Skripte einzubeziehen, lösen Sie eine manuelle Nachfüllung aus. Die Nachfüllung sendet für jedes Skript eine Scan-Nachricht, die asynchron verarbeitet wird. Sie können diese Seite während des Vorgangs sicher verlassen.",
+        "status_title": "Nachfüllungsstatus",
+        "label_running": "Status",
+        "label_total": "Gesamt",
+        "label_cursor": "Cursor",
+        "label_progress": "Fortschritt",
+        "label_started_at": "Gestartet am",
+        "label_finished_at": "Beendet am",
+        "state_running": "Läuft",
+        "state_idle": "Inaktiv",
+        "btn_start": "Nachfüllung starten",
+        "btn_restart": "Von Anfang neu starten",
+        "btn_refresh": "Status aktualisieren",
+        "confirm_start_title": "Nachfüllung starten?",
+        "confirm_start_body": "Scan-Nachrichten werden ab der letzten Cursor-Position fortgesetzt.",
+        "confirm_restart_title": "Nachfüllung von Anfang neu starten?",
+        "confirm_restart_body": "Der Cursor wird auf 0 zurückgesetzt und alle Skripte werden erneut gescannt. Dies ist normalerweise nur bei der Erstbereitstellung oder nach Aktualisierung der Stop-FP-Liste erforderlich.",
+        "msg_started": "Nachfüllungsaufgabe gestartet",
+        "manual_scan_title": "Einzelnes Skript manuell scannen",
+        "manual_scan_placeholder": "Skript-ID eingeben",
+        "btn_manual_scan": "Scan senden",
+        "msg_manual_scan_published": "Scan-Nachricht veröffentlicht",
+        "stop_fp_title": "Stop-Fingerprint Aktualisierung",
+        "stop_fp_warn_title": "Manuelles Auslösen normalerweise nicht nötig",
+        "stop_fp_warn_body": "Die Stop-FP-Liste wird automatisch stündlich aktualisiert. Nur einmal nach Abschluss der vollständigen Nachfüllung manuell auslösen, damit Jaccard-Berechnungen Template-Code herausfiltern.",
+        "btn_stop_fp_refresh": "Jetzt aktualisieren",
+        "msg_stop_fp_refreshed": "Stop-Fingerprint-Satz aktualisiert"
+      },
+      "signal_desc": {
+        "avg_line_length": "Durchschnittliche Zeilenlänge zu hoch (Code möglicherweise in wenige lange Zeilen komprimiert)",
+        "max_line_length": "Maximale Zeilenlänge zu hoch (enthält extrem lange Zeilen)",
+        "whitespace_ratio": "Leerzeichenanteil zu niedrig (Code fehlt normale Einrückung)",
+        "comment_ratio": "Kommentaranteil zu niedrig (Code hat fast keine Kommentare)",
+        "single_char_ident_ratio": "Anteil einstelliger Bezeichner zu hoch (Variablennamen auf einzelne Zeichen verkürzt)",
+        "hex_ident_ratio": "Anteil hexadezimaler Bezeichner zu hoch (verwendet _0x-verschleierte Variablennamen)",
+        "large_string_array": "Großes String-Array erkannt (typisch für Verschleierungswerkzeuge)",
+        "dean_edwards_packer": "Dean Edwards Packer erkannt",
+        "aa_encode": "AAEncode-Kodierung erkannt",
+        "jj_encode": "JJEncode-Kodierung erkannt",
+        "eval_density": "eval/dynamische Ausführungsdichte zu hoch"
+      }
     }
   },
   "auth": {
@@ -1841,5 +1947,17 @@
   },
   "utils": {
     "time_format": "DD.MM.YYYY"
+  },
+  "similarity": {
+    "evidence": {
+      "disclaimer_title": "Preliminary Finding, Not a Final Verdict",
+      "disclaimer_body": "This page shows automatically detected similar-code evidence. It is informational only. Please do not draw definitive conclusions about the author from this data."
+    }
+  },
+  "errors": {
+    "integrity_rejected": {
+      "title": "Code Failed Integrity Check",
+      "help": "If this is a false positive, please apply for an exemption via the admin contact listed in the site FAQ."
+    }
   }
 }

public/locales/en-US/translations.json

@@ -65,7 +65,8 @@
       "scores": "Score Management",
       "scripts": "Script Management",
       "system_config": "System Config",
-      "users": "User Management"
+      "users": "User Management",
+      "similarity": "Similarity Detection"
     },
     "no_permission": "You do not have admin permission to access this page.",
     "oauth_apps": {
@@ -250,6 +251,111 @@
       "title": "User Management",
       "unban_confirm": "Are you sure you want to unban this user?",
       "unban_success": "User unbanned successfully"
+    },
+    "similarity": {
+      "tab_pairs": "Pairs",
+      "tab_suspects": "Suspects",
+      "tab_integrity_reviews": "Integrity Reviews",
+      "tab_pair_whitelist": "Pair Whitelist",
+      "tab_integrity_whitelist": "Integrity Exemptions",
+      "col_id": "ID",
+      "col_script_a": "Script A",
+      "col_script_b": "Script B",
+      "col_jaccard": "Jaccard",
+      "col_common": "Common Fingerprints",
+      "col_earlier": "Earlier Side",
+      "col_status": "Status",
+      "col_integrity": "Integrity Score",
+      "col_actions": "Actions",
+      "col_script": "Script",
+      "col_max_jaccard": "Max Jaccard",
+      "col_coverage": "External Coverage",
+      "col_pair_count": "Pair Count",
+      "col_detected_at": "Detected At",
+      "col_score": "Score",
+      "col_createtime": "Created",
+      "col_reason": "Reason",
+      "col_added_by": "Added By",
+      "status_pending": "Pending",
+      "status_whitelisted": "Whitelisted",
+      "status_resolved": "Resolved",
+      "review_pending": "Pending",
+      "review_ok": "OK",
+      "review_violated": "Violation",
+      "action_detail": "Details",
+      "action_resolve": "Resolve",
+      "action_whitelist": "Whitelist",
+      "action_remove": "Remove",
+      "confirm_remove_whitelist": "Remove this whitelist entry?",
+      "msg_removed": "Removed",
+      "modal_add_int_whitelist": "Add Integrity Exemption",
+      "label_script_id": "Script ID",
+      "label_reason": "Reason",
+      "btn_add": "Add",
+      "modal_resolve_title": "Mark Integrity Review",
+      "label_decision": "Decision",
+      "label_note": "Note",
+      "decision_ok": "OK",
+      "decision_violated": "Violation",
+      "msg_review_resolved": "Marked successfully",
+      "msg_whitelisted": "Added to whitelist",
+      "drawer_review_detail": "Integrity Review Details",
+      "label_score": "Total Score",
+      "label_sub_scores": "Category Scores",
+      "label_hit_signals": "Hit Signals",
+      "label_jaccard": "Jaccard",
+      "label_common": "Common Fingerprints",
+      "label_earlier": "Earlier Side",
+      "label_detected_at": "Detected At",
+      "label_script_a": "Script A",
+      "label_script_b": "Script B",
+      "label_code_diff": "Code Diff",
+      "script_deleted": "Deleted",
+      "filter_exclude_deleted": "Hide pairs with deleted scripts",
+      "tab_backfill": "Backfill & Rescan",
+      "backfill": {
+        "help_title": "Historical Script Backfill",
+        "help_body": "After the system is deployed, only newly published or updated scripts are automatically scanned for similarity. To include historical scripts in comparisons, trigger a manual backfill. The backfill sends a scan message for each script, processed asynchronously by background consumers. You can safely leave this page during the process.",
+        "status_title": "Backfill Status",
+        "label_running": "Status",
+        "label_total": "Total",
+        "label_cursor": "Cursor",
+        "label_progress": "Progress",
+        "label_started_at": "Started At",
+        "label_finished_at": "Finished At",
+        "state_running": "Running",
+        "state_idle": "Idle",
+        "btn_start": "Start Backfill",
+        "btn_restart": "Restart from Beginning",
+        "btn_refresh": "Refresh Status",
+        "confirm_start_title": "Start backfill?",
+        "confirm_start_body": "This will continue sending scan messages from the last cursor position.",
+        "confirm_restart_title": "Restart backfill from beginning?",
+        "confirm_restart_body": "The cursor will reset to 0, and all scripts in the database will be re-scanned. This is usually only needed on initial deployment or after refreshing the stop-fp list.",
+        "msg_started": "Backfill task started",
+        "manual_scan_title": "Manually Rescan Single Script",
+        "manual_scan_placeholder": "Enter script ID",
+        "btn_manual_scan": "Send Scan",
+        "msg_manual_scan_published": "Scan message published",
+        "stop_fp_title": "Stop-fingerprint Refresh",
+        "stop_fp_warn_title": "Manual trigger usually not needed",
+        "stop_fp_warn_body": "The stop-fp list is refreshed automatically every hour by a scheduled task. Only trigger manually once after completing the initial full backfill (step 8 in §8.5), so Jaccard calculations filter out common template code.",
+        "btn_stop_fp_refresh": "Refresh Now",
+        "msg_stop_fp_refreshed": "Stop-fingerprint set refreshed"
+      },
+      "signal_desc": {
+        "avg_line_length": "Average line length too high (code may be compressed into few long lines)",
+        "max_line_length": "Maximum line length too high (contains extremely long lines)",
+        "whitespace_ratio": "Whitespace ratio too low (code lacks normal spacing and indentation)",
+        "comment_ratio": "Comment ratio too low (code has almost no comments)",
+        "single_char_ident_ratio": "Single-character identifier ratio too high (variable names shortened to single characters)",
+        "hex_ident_ratio": "Hex identifier ratio too high (uses _0x prefixed obfuscated variable names)",
+        "large_string_array": "Large string array detected (common in obfuscation tool string tables)",
+        "dean_edwards_packer": "Dean Edwards packer detected",
+        "aa_encode": "AAEncode encoding detected",
+        "jj_encode": "JJEncode encoding detected",
+        "eval_density": "eval/dynamic execution call density too high"
+      }
     }
   },
   "auth": {
@@ -1883,5 +1989,17 @@
   },
   "utils": {
     "time_format": "YYYY-MM-DD"
+  },
+  "similarity": {
+    "evidence": {
+      "disclaimer_title": "Preliminary Finding, Not a Final Verdict",
+      "disclaimer_body": "This page shows automatically detected similar-code evidence. It is informational only. Please do not draw definitive conclusions about the author from this data."
+    }
+  },
+  "errors": {
+    "integrity_rejected": {
+      "title": "Code Failed Integrity Check",
+      "help": "If this is a false positive, please apply for an exemption via the admin contact listed in the site FAQ."
+    }
   }
 }