【工具链】日志检索：按角色名聚合行为轨迹

-- 日志检索：按角色聚合
local player = class(actor)
local LOG_SOURCES = {"login", "trade", "combat", "audit"}
local function searchByRole(player, roleName)
    local timeline = {}
    for _, src in ipairs(LOG_SOURCES) do
        local blob = getsysvar("Log_" .. src) or ""
        for line in string.gmatch(blob, "[^\n]+") do
            if string.find(line, roleName, 1, true) then
                timeline[#timeline + 1] = src .. "|" .. line
            end
        end
    end
    table.sort(timeline)
    for i = 1, math.min(50, #timeline) do
        sendmsg(player, 1, 0, timeline[i])
    end
    sendmsg(player, 1, 0, "共 " .. #timeline .. " 条记录，已显示前 50 条。")
end

-- 轨迹标注：异常高亮
local player = class(actor)
local RISK_MARK = {audit = true}
local function renderTimeline(timeline)
    for _, line in ipairs(timeline) do
        local src, body = string.match(line, "([^|]+)|(.+)")
        if RISK_MARK[src] then
            sendmsg(player, 1, 0, "【异常】" .. body)
        else
            sendmsg(player, 1, 0, body)
        end
    end
end