RuoJi6
459a484237
Merge pull request #120 from RuoJi6/codex/task-global-assets
...
feat: add opt-in global asset sharing per task
2026-11-05 16:37:07 +08:00
ji ruo
080a46eb2d
feat: make task global asset sharing opt-in
2026-11-05 16:27:44 +08:00
ji ruo
4868b1816f
fix: persist custom egress IP probe service ( #118 )
2026-11-05 16:00:07 +08:00
ji ruo
7140d14a17
feat: use DeepSeek Search API for web search
2026-11-03 14:07:32 +08:00
RuoJi6
05dd5b40e8
Merge pull request #107 from RuoJi6/feat/proxy-pool
...
feat: 全局代理池(健康检查、定时/失效轮换、热切换、脱敏)— Depends on #106
2026-11-02 15:45:28 +08:00
RuoJi6
2d5f41d5b8
security: harden egress probe from PR56
2026-10-27 01:32:45 -07:00
zabcxky-123
3f6df09909
fix(web): align mock finding time order with backend
2026-10-27 15:45:42 +08:00
RuoJi6
cb0a69ef60
Merge pull request #60 from RuoJi6/fix/task-runtime-exclude-pause
...
fix: 运行时长排除暂停时间
2026-10-27 00:44:03 -07:00
RuoJi6
be65ab4425
Merge pull request #59 from zabcxky-123/codex/fix-task-findings-time-sort
...
fix(web): 恢复项目发现页按时间排序
2026-10-27 00:43:51 -07:00
RuoJi6
287021b494
Merge pull request #58 from RuoJi6/feat/task-auto-title
...
feat: 双能力自动标题(任务名 + 对话标题)
2026-10-27 00:43:31 -07:00
zabcxky-123
80316252b8
fix(web): restore chronological sorting in task findings
2026-10-27 14:25:36 +08:00
RuoJi6
7e5c828fc2
fix(web): show egress IPs in navbar middle via settings toggle
2026-10-27 13:46:34 +08:00
artex
41c967f7ad
fix: exclude pause time from task run duration
...
Persist active_run_seconds + run_segment_started_at so task list and
orchestration list_tasks accumulate only actual execution time across
pause/resume/queue/terminal transitions.
2026-10-27 13:37:43 +08:00
artex-bot
6c781f21f4
feat: Agent 任务名与对话标题双能力自动生成
...
新增 task_auto_title_enabled / chat_auto_title_enabled(默认关)、
共享 GenerateAutoTitle、spawn_task 同步写 name、对话首条先截断再异步 AI,
设置页「自动标题」双 Switch。closes #55
2026-10-27 12:33:53 +08:00
RuoJi6
3a4c66d41f
Merge pull request #48 from RuoJi6/feat/finding-dedup-1-2-3
...
feat(findings): 降低重复确认噪音——分组疑似重复建议、候选打分排序、放宽归并验收(方案1+2+3)
2026-10-25 18:37:16 -07:00
ji ruo
71e933c6a3
Merge main and preserve task worker overrides with model pools
2026-10-26 09:36:03 +08:00
RuoJi6
e03bd5c244
Merge pull request #44 from RuoJi6/feat/notes-and-worker-count
...
feat: 任务/模板备注展示与 Worker 运行数量配置
2026-10-25 18:29:16 -07:00
RuoJi6
06801bc5aa
fix: Worker 池评审修复(系统会话可见报错、暂停意图续跑保持绑定模型、加载失败不清空池、原子写入)
...
Code authored by Codex CLI gpt-6.1-sol (addresses Grok review #1 ).
2026-10-24 22:55:34 +08:00
RuoJi6
ddfdc36787
fix: 按 Grok 评审修复 Repeater 录制代理地址、数字主机 SSRF、Cookie 合并等问题(Codex gpt-6.1-sol)( #42 )
2026-10-24 22:46:37 +08:00
RuoJi6
2bd7953313
fix: mock/前端 Worker 与备注校验对齐后端(Codex gpt-6-astra)
2026-10-24 22:31:54 +08:00
RuoJi6
d1b2b5a996
feat: 多模型 Worker 池(#41,Codex 重写:绑定配置不可用时报错而非回退)
...
Code authored by Codex CLI (gpt-6-astra main implementation; gpt-6-sol / gpt-6-astra continuation passes).
2026-10-24 22:22:05 +08:00
RuoJi6
2e6ceddf95
fix: 按评审补齐 mock 校验、Worker 上限保护与测试(Codex gpt-6-sol)
2026-10-24 22:08:35 +08:00
RuoJi6
09e90b4170
feat(findings): grouped duplicate suggestions, ranked candidates, relaxed merged acceptance (Codex rewrite)
...
Authored entirely by Codex CLI (codex exec, reasoning effort high), one session
resumed across capacity fallbacks:
- gpt-6.1-sol (schema + initial db work, stopped at capacity)
- gpt-6-astra (db/server/agent/frontend, stopped at capacity)
- gpt-6-sol (remaining items, tests, fixes; stopped at capacity after final checks)
Schemes 1+2+3: prompt/acceptance (2..20, evidenced differences justify
independent, merged no longer blocked by unified report), group suggestions with
member table, superset reuse/subset superseded, veto-aware reject/exclusion,
anchor re-anchoring trigger, sweep after merge/reject/remove, frontend group card
with stale-response guard, candidate scoring with tier/hit_reasons/strong_total.
2026-10-24 21:55:45 +08:00
RuoJi6
a1dc362bae
feat: 任务/模板备注展示与 Worker 运行数量配置(Codex gpt-6-astra 重写)
2026-10-24 21:46:03 +08:00
RuoJi6
6ffe04cf3d
chore: reset #41 multi-model worker files to origin/main for Codex rewrite
2026-10-24 21:17:59 +08:00
RuoJi6
ba3025d04f
chore: 还原 PR #44 手写实现,准备由 Codex 按新规则重写
2026-10-24 21:17:17 +08:00
RuoJi6
6f09b313d6
feat: 多模型 Worker 池,支持按 LLM 配置分配并发会话
...
实现 #41:系统配置可设置 worker_pools,使本地模型与云端模型等各占用若干 Work Agent 会话并在同一任务内并行执行。空配置保持原 workers 遗留行为。
2026-10-23 19:14:35 +08:00
RuoJi6
45d4e4e67b
feat: 任务/模板备注展示与 Worker 运行数量配置
...
- 新建任务可填写备注;详情页头部展示备注(列表原有 RemarkEditor 保留)
- 任务模板支持备注与 Worker 数量,应用/另存为模板时同步带入
- 新建任务高级设置与模板均可单独设置 Worker 运行数量(0=回落全局默认)
- schema/API/引擎贯通:tasks.worker_count、task_templates.remark/worker_count
2026-10-23 19:01:21 +08:00
RuoJi6
620ca5d96c
Merge pull request #26 from RuoJi6/codex/task-intelligence
...
feat: 新增可选的任务情报自动记录与查看
2026-10-20 13:23:26 +08:00
ji ruo
851e3f99ed
feat: add optional credential processing with dependent switches and traffic evidence
2026-10-20 13:01:03 +08:00
ji ruo
ed7eda5e0c
fix(intercept): default judge failure retries to three
2026-10-20 11:25:04 +08:00
ji ruo
d70dd15e11
feat: add optional task intelligence recording and views
2026-10-20 11:16:04 +08:00
ji ruo
b2373b2b76
fix(intercept): default model failure policy to human approval
2026-10-20 10:31:06 +08:00
ji ruo
316889f76a
feat: add inline remarks for tasks and schedules
2026-10-19 09:17:59 +08:00
ji ruo
d2e7e3a8a7
fix: add configurable model approval retries
2026-10-15 14:45:08 +08:00
ji ruo
6aa0c56d81
fix: improve static script review and default to model judgement
2026-10-13 14:08:00 +08:00
ji ruo
dc72b5b4a9
feat: configure incomplete script review path
2026-10-12 18:01:49 +08:00
ji ruo
97213e357b
fix: avoid false script snapshot reviews
2026-10-12 17:31:33 +08:00
ji ruo
2f2b78cc78
feat: search approval history by content and date
2026-10-12 12:38:31 +08:00
ji ruo
9b0d1bdb3c
feat: expose scripts to review and add approval side chat
2026-10-12 11:06:38 +08:00
RuoJi6
e77c3ae9a3
Merge pull request #2 from RuoJi6/codex/finding-folders
...
feat(findings): 同一漏洞重复上报归并与文件夹展示
2026-10-09 11:07:16 +08:00
ji ruo
24d4726aee
feat(findings): consolidate duplicate reports into expandable cases
2026-10-09 10:43:53 +08:00
ji ruo
04c8c54ff8
feat(auth): add optional HTTP Basic Auth access gate
2026-10-09 10:12:27 +08:00
Autumn-27
86729b65dc
feat(intercept): 模型兜底审批单独计量 token 并在配置页展示
...
兜底审批(LLM judge)调模型判定漏网命令,其 token 消耗此前无法单独查看:
usage 行要么无 worker 归属、要么被并进复用的模型 profile 桶里。
- llmrec 增加 WithWorker 上下文覆盖,reviewer 调用前标注 worker='judge',
让审批调用的计量行可被单独筛出(复用现有 llm_usage.worker 列,无需迁移)。
- db.JudgeUsageStats 返回累计总量 + 近 N 天每日序列(WHERE worker='judge')。
- 新增 GET /api/intercept/judge/usage。
- 配置页「模型兜底审批」开关下方新增用量卡片:调用次数 / 输入 / 输出 /
缓存读写 五项统计 + 近 30 天每日消耗迷你柱图 + 刷新。
2026-10-04 02:43:26 -04:00
Autumn-27
87b3c3c770
feat(tasks): 漏洞列改为按严重度分档显示 严/高/中/低
...
- TaskListMetricsAll 用 COUNT(*) FILTER 按 severity 分四档统计(同一条查询)
- TaskListMetrics.Findings 及 TaskDTO.findings 由数字改为 {critical,high,medium,low}
- 列表页「漏洞」列渲染 x/x/x/x,配色沿用 severity 语义、为 0 的档位弱化
- severity 为空/白名单外的记录不计入任一档;mock 同步为对象结构
2026-09-24 13:32:45 -04:00
Autumn-27
e65d3e5202
feat(tasks): 任务列表新增漏洞数量列,描述/目标列收窄
...
- 任务列表接口 TaskListMetricsAll 批量统计每任务的漏洞数(findings 表,
按 task_id),经 TaskDTO.findings 下发;列表页新增「漏洞」列,>0 高亮
- 描述/目标列宽 max-w-xs → max-w-40,目标列补 title 悬浮全文
- mock data/handler 同步补 findings 字段
2026-09-24 13:26:22 -04:00
Autumn
ec0ae108c4
Merge pull request #150 from Autumn-27/feat/broadcast-search-node-id
...
feat(web): 播报板搜索支持按节点 id 筛选
2026-09-18 01:09:30 +08:00
Autumn-27
4756bb1c45
feat(intent): 意图删除支持假删除/真删除两种模式
...
删除入口区分两种模式(待领/运行中/已暂停的意图均可删除):
- 假删除(默认):意图置 state='deleted'、删除原因记入新字段 delete_reason,
保留节点与全部产出/血缘,不再在图上另挂 fact。
- 真删除:物理删除意图及「仅由它支撑」的独占子孙(沿 yields/derived_from
级联到叶子),避免孤立数据;共享节点、目标、任务根事实保留。被删意图先做
token rollup 并清理 activity/副会话,被删 finding 先删 findings 行。
两种模式都照常用 cancelled 触发通知 planner(带删除前捕获的意图摘要 + 原因),
planner 文案不再声称原因挂为事实。
- DB: 新增 SoftDeleteIntent、重写 CancelIntent 为深度独占级联;schema 加
delete_reason 列与 intent 的 deleted 状态(含旧库迁移)。
- 前端: 删除对话框加模式切换与动态说明,状态徽章/图标新增「已删除」,
播报板展开展示删除原因。
2026-09-17 12:52:57 -04:00
Autumn-27
e2ada7e494
feat(web): 播报板搜索支持按节点 id 筛选
...
搜索框在内容/来源之外,新增节点 id 匹配:纯数字或 UI 展示的「#41」形式
都会精确命中该节点。服务端 NodesPage 在 payload/origin ILIKE 的 OR 组里
追加 id 精确匹配;mock 同步;补 NodesPage id 搜索测试。
2026-09-17 11:31:27 -04:00
Autumn-27
d95f0d002d
feat(web): 播报板节点详情展示上游节点信息与锚定资产
...
上游/下游节点从只显示 id 改为悬停弹出节点名片(类型/状态/来源/时间/摘要/payload);
展开时顺带展示该节点锚定的资产(类型标签 + 可辨识文本)。
服务端 /exploration/nodes 新增 assets 字段(节点id→资产),读 exploration_anchors
并复用发现列表的资产打标逻辑;同页节点互引时用本页 items 兜底 refs 查找表。
2026-09-17 11:23:53 -04:00