RuoJi6
09e90b4170
feat(findings): grouped duplicate suggestions, ranked candidates, relaxed merged acceptance (Codex rewrite)
...
Authored entirely by Codex CLI (codex exec, reasoning effort high), one session
resumed across capacity fallbacks:
- gpt-6.1-sol (schema + initial db work, stopped at capacity)
- gpt-6-astra (db/server/agent/frontend, stopped at capacity)
- gpt-6-sol (remaining items, tests, fixes; stopped at capacity after final checks)
Schemes 1+2+3: prompt/acceptance (2..20, evidenced differences justify
independent, merged no longer blocked by unified report), group suggestions with
member table, superset reuse/subset superseded, veto-aware reject/exclusion,
anchor re-anchoring trigger, sweep after merge/reject/remove, frontend group card
with stale-response guard, candidate scoring with tier/hit_reasons/strong_total.
2026-10-24 21:55:45 +08:00
RuoJi6
a1dc362bae
feat: 任务/模板备注展示与 Worker 运行数量配置(Codex gpt-6-astra 重写)
2026-10-24 21:46:03 +08:00
RuoJi6
6ffe04cf3d
chore: reset #41 multi-model worker files to origin/main for Codex rewrite
2026-10-24 21:17:59 +08:00
RuoJi6
f9cf38c16c
revert: 回退手写的 Repeater 实现,准备由 Codex 按新规则重写 ( #42 )
2026-10-24 21:17:55 +08:00
RuoJi6
ba3025d04f
chore: 还原 PR #44 手写实现,准备由 Codex 按新规则重写
2026-10-24 21:17:17 +08:00
RuoJi6
b0d6ad5d76
revert(findings): reset dedup files to origin/main before Codex rewrite
...
Pure git restore (git checkout origin/main -- <files>) so the scheme 1+2+3
implementation can be re-authored entirely by Codex. No hand-written code.
2026-10-24 21:09:20 +08:00
RuoJi6
0c346a7c0a
fix(findings): address Grok review — keep folders mergeable after group reject, re-anchor groups on finding delete, guard stale suggestion list writes
2026-10-24 20:48:35 +08:00
RuoJi6
00ec84d14e
feat(findings): reduce duplicate-confirmation noise with grouped suggestions and ranked candidates
...
- Prompt: evidenced endpoint/handler/param differences justify independent; suggest only with concrete shared points
- Review acceptance: merged no longer blocked by unified report
- Suggestions: 2..N member groups, one-click group confirm with per-member exclusion, related cards cleared
- Candidates: score/tier/hit_reasons ranking, low-score kept paginated
2026-10-24 20:01:37 +08:00
RuoJi6
341caa5e1f
feat: 发现页新增类似 Burp Repeater 的请求重放功能 ( #42 )
...
在发现详情的关联流量区提供 Repeater:可从流量证据一键预填,或空白编辑
方法/URL/头/体后由服务端代发请求并展示原始响应,便于人工验证与报告撰写。
- POST /api/repeater/send:复用 recording/global 代理出口
- 直连路径拨号层拦截环回/链路本地/元数据;字面敏感 IP 在 URL 预检拒绝
- 会话内历史(前端内存);跨主机重定向拒绝
2026-10-23 19:22:51 +08:00
RuoJi6
6f09b313d6
feat: 多模型 Worker 池,支持按 LLM 配置分配并发会话
...
实现 #41:系统配置可设置 worker_pools,使本地模型与云端模型等各占用若干 Work Agent 会话并在同一任务内并行执行。空配置保持原 workers 遗留行为。
2026-10-23 19:14:35 +08:00
RuoJi6
3b2887f349
fix: 模板备注上限与任务备注对齐为 2000 字
2026-10-23 19:05:01 +08:00
RuoJi6
45d4e4e67b
feat: 任务/模板备注展示与 Worker 运行数量配置
...
- 新建任务可填写备注;详情页头部展示备注(列表原有 RemarkEditor 保留)
- 任务模板支持备注与 Worker 数量,应用/另存为模板时同步带入
- 新建任务高级设置与模板均可单独设置 Worker 运行数量(0=回落全局默认)
- schema/API/引擎贯通:tasks.worker_count、task_templates.remark/worker_count
2026-10-23 19:01:21 +08:00
RuoJi6
0a327328f3
fix: 修复发现返回导航( #34 )与情报内容搜索及查看对话( #38 )
...
- #34 : 任务发现页进入漏洞报告详情后,「←返回」回到该任务的发现页
(/function/tasks/detail?id=<task>&tab=findings),而非全局发现列表。
任务自身的 FindingCaseList 与原始上报列表「详情」链接均携带 context_task。
- #38 : 情报搜索除标题/上报者外,同时匹配内容(content)与来源证据(evidence)。
- #38 : 修复「查看对话」点击无反应:任务详情页标签切换同步写入 URL 的 tab 参数,
使跳转 tab=sessions&session=... 时能正确切换到会话并打开对应会话。
Closes #34
Closes #38
2026-10-23 18:09:55 +08:00
jubeater and Claude Opus 5.5
526afeebdb
fix: Go 升级至 1.26.10 以拦截泄露的 eMudhra 中间 CA / bump Go to 1.26.10 for the eMudhra CA distrust
...
Eight eMudhra intermediate CAs were compromised
(https://emudhra.we-have-a-problem.com/ ). Go 1.26.10 is the patched
release; CI builds with the version in go.mod via go-version-file.
Co-Authored-By: Claude Opus 5.5 <[email protected] >
2026-10-21 14:42:41 -04:00
ji ruo
b855370e1b
Remove flag references from agent prompts
2026-10-21 09:22:52 +08:00
RuoJi6
620ca5d96c
Merge pull request #26 from RuoJi6/codex/task-intelligence
...
feat: 新增可选的任务情报自动记录与查看
v0.3.23
2026-10-20 13:23:26 +08:00
RuoJi6
0007bba3c1
Merge pull request #27 from RuoJi6/codex/review-default-retries
...
fix: 默认审查重试 3 次并收紧任务备注列
2026-10-20 13:23:00 +08:00
ji ruo
123b9dcd61
fix: polish credential traffic cards and support copying over HTTP
2026-10-20 13:12:51 +08:00
ji ruo
851e3f99ed
feat: add optional credential processing with dependent switches and traffic evidence
2026-10-20 13:01:03 +08:00
ji ruo
7c2efbc1ca
fix: link intelligence conversation column directly to sessions
2026-10-20 12:19:40 +08:00
ji ruo
a00e58a9bd
fix: navigate intelligence to source sessions and related assets
2026-10-20 12:13:07 +08:00
ji ruo
fb8c3cb6f4
fix: wrap intelligence table text and distinguish category colors
2026-10-20 11:43:24 +08:00
ji ruo
bd787f8883
fix: display task intelligence content directly
2026-10-20 11:35:38 +08:00
ji ruo
14f3f1a805
fix(web): shrink empty remark columns in task lists
2026-10-20 11:31:05 +08:00
ji ruo
ed7eda5e0c
fix(intercept): default judge failure retries to three
2026-10-20 11:25:04 +08:00
ji ruo
d70dd15e11
feat: add optional task intelligence recording and views
2026-10-20 11:16:04 +08:00
RuoJi6
e66789633a
Merge pull request #25 from RuoJi6/codex/default-judge-failure-ask
...
fix(intercept): 模型失败默认转人工审批
2026-10-20 10:33:25 +08:00
ji ruo
b2373b2b76
fix(intercept): default model failure policy to human approval
2026-10-20 10:31:06 +08:00
RuoJi6
b97472f992
Merge pull request #22 from RuoJi6/codex/fix-scheduled-task-manual-start
...
fix: 任务页手动启动不再被计划窗口立即暂停
2026-10-19 16:22:35 +08:00
ji ruo
093b2bd367
fix: preserve manual task starts outside schedule windows
2026-10-19 15:09:17 +08:00
ji ruo
79027eaf1d
fix(demo): retry production version metadata verification
2026-10-19 10:18:34 +08:00
RuoJi6
36043c0ac1
Merge pull request #19 from RuoJi6/codex/task-remarks
...
feat: 支持任务与计划任务行内编辑备注
v0.3.22
2026-10-19 10:04:38 +08:00
ji ruo
de7a668b32
feat: align list editors with name hover actions
2026-10-19 09:58:32 +08:00
ji ruo
bdf0e68644
style: align schedule IDs with task list
2026-10-19 09:29:48 +08:00
ji ruo
316889f76a
feat: add inline remarks for tasks and schedules
2026-10-19 09:17:59 +08:00
zabcxky-123 and zabcxky-123
6c940f4403
fix: avoid skipping calendar windows that open after startup ( #16 )
...
Co-authored-by: zabcxky-123 <[email protected] >
2026-10-19 08:57:50 +08:00
r00t
f5c99f4866
fix(skills): normalize API paths on Windows ( #18 )
2026-10-19 08:50:06 +08:00
RuoJi6
4bec88fc7f
Merge pull request #14 from RuoJi6/codex/online-update-proxy
...
feat: 在线更新支持独立可选代理与统一设置界面
2026-10-19 08:43:41 +08:00
ji ruo
9d8598c91b
docs(demo): link to the maintained production demo
2026-10-15 15:57:59 +08:00
ji ruo
d2ff24d1af
fix(demo): configure production domains through the project API
2026-10-15 15:55:50 +08:00
ji ruo
53d9f0d5d1
fix(demo): bind domain within the configured Vercel team
2026-10-15 15:50:43 +08:00
RuoJi6
db371be93c
feat(demo): deploy published releases to Vercel ( #15 )
2026-10-15 15:47:03 +08:00
ji ruo
6a3d39e969
feat: add optional proxy for online updates
2026-10-15 15:44:55 +08:00
RuoJi6
e94a7d472b
Merge pull request #13 from RuoJi6/codex/fix-llm-strict-rate-limit
...
fix: enforce strict LLM HTTP request rate limits
v0.3.21
2026-10-15 15:04:54 +08:00
RuoJi6
5f3a92a1f1
Merge pull request #12 from RuoJi6/codex/issue-7-approval-retry
...
fix: 支持模型审批失败重试
2026-10-15 15:04:45 +08:00
ji ruo
36eb5c5e89
fix: fill approval prompt editor card height
2026-10-15 14:58:51 +08:00
ji ruo
bfc5e6236e
fix: enforce strict LLM HTTP request rate limits
2026-10-15 14:53:33 +08:00
ji ruo
d2e7e3a8a7
fix: add configurable model approval retries
2026-10-15 14:45:08 +08:00
RuoJi6
23446606a4
Merge pull request #9 from RuoJi6/codex/fix-http-packet-copy
...
fix: 保留 HTTP 报文选中复制时的空行
2026-10-13 17:35:03 +08:00
ji ruo
b9b137dc91
fix: preserve blank lines when copying HTTP packets
2026-10-13 17:30:44 +08:00