499 Commits
Author SHA1 Message Date
ji ruo 648bafb593 docs(release): prepare v0.3.18 v0.3.18 2026-10-12 14:30:09 +08:00
RuoJi6 0a0ef70bfb Merge pull request #5 from RuoJi6/codex/review-script-sidechat
新增审查脚本快照、审批旁路问答与审批检索
2026-10-12 13:42:27 +08:00
ji ruo 99c54bfa33 fix: use consistent approval date picker labels 2026-10-12 12:48:47 +08:00
ji ruo 2f2b78cc78 feat: search approval history by content and date 2026-10-12 12:38:31 +08:00
ji ruo e33eedeb17 fix: preserve chat height when side panel is closed 2026-10-12 12:09:18 +08:00
ji ruo a908eb28e4 fix: show explicit script toggle direction 2026-10-12 11:56:09 +08:00
ji ruo a757ece8c3 fix: keep approval script details visible 2026-10-12 11:42:41 +08:00
ji ruo 86c376943f fix: render approval details at intrinsic height 2026-10-12 11:26:49 +08:00
ji ruo 8b95ad1664 fix: prevent approval script panel clipping 2026-10-12 11:20:17 +08:00
ji ruo 9b0d1bdb3c feat: expose scripts to review and add approval side chat 2026-10-12 11:06:38 +08:00
ji ruo ee413324c8 docs(release): prepare v0.3.17 v0.3.17 2026-10-10 09:28:39 +08:00
RuoJi6 5f9d491681 Merge pull request #4 from RuoJi6/codex/schedule-date-range
支持计划任务日期范围与日历选择
2026-10-10 09:17:42 +08:00
ji ruo 0af7132ab7 修复计划暂停来源和时间线刷新 2026-10-10 09:16:28 +08:00
ji ruo 87e62fb904 支持计划任务批量选择操作 2026-10-10 09:01:21 +08:00
ji ruo 96a10878ad 重新设计计划任务运行时间线 2026-10-10 08:56:13 +08:00
ji ruo 8a1c9debbb 让立即运行直接恢复任务 2026-10-10 08:50:15 +08:00
ji ruo 8067f3286b 修复计划任务立即运行并区分状态颜色 2026-10-10 08:45:06 +08:00
ji ruo a5cfec025f 固定显示计划任务时间线入口 2026-10-10 08:39:55 +08:00
ji ruo e52fe67171 将计划任务改为字段表格展示 2026-10-10 00:47:14 +08:00
ji ruo aed3062b4d 增加计划任务检索分页和时间线 2026-10-10 00:38:22 +08:00
ji ruo 30db68a86a 优化计划任务列表展示 2026-10-10 00:30:51 +08:00
ji ruo 98321d8262 支持计划任务日期范围 2026-10-09 23:50:05 +08:00
RuoJi6 6a2bba4637 Merge pull request #3 from RuoJi6/codex/scheduled-tasks
新增日历式计划任务
2026-10-09 23:21:06 +08:00
ji ruo 3254c90a03 新增日历式计划任务 2026-10-09 23:05:44 +08:00
ji ruo 9adbd54627 ci(release): allow replacing release when tag moves v0.3.16 2026-10-09 14:11:39 +08:00
ji ruo aca6e9a8fb fix(ui): match folder task labels to existing table rows 2026-10-09 13:32:57 +08:00
ji ruo 012030b41d fix(ui): align merged folders with existing columns and omit duplicate headers 2026-10-09 13:20:53 +08:00
ji ruo ada09f6c1a fix(ui): restore original controls and limit folders to merged findings 2026-10-09 13:12:54 +08:00
ji ruo d36812b7e1 feat(findings): show consolidation across report task and asset views 2026-10-09 12:41:46 +08:00
ji ruo d68594e81a fix(ui): hide completed finding review history from findings page 2026-10-09 12:27:54 +08:00
ji ruo 7db7b71cdb fix(findings): protect historical reports and verify consolidation results 2026-10-09 12:23:11 +08:00
ji ruo 71ec0f0efd docs(release): prepare v0.3.16 2026-10-09 11:14:57 +08:00
RuoJi6 e77c3ae9a3 Merge pull request #2 from RuoJi6/codex/finding-folders
feat(findings): 同一漏洞重复上报归并与文件夹展示
2026-10-09 11:07:16 +08:00
RuoJi6 444cf6e50a Merge pull request #1 from RuoJi6/codex/http-basic-auth
feat(auth): 添加可选的 HTTP Basic Auth 访问验证
2026-10-09 11:05:40 +08:00
ji ruo 24d4726aee feat(findings): consolidate duplicate reports into expandable cases 2026-10-09 10:43:53 +08:00
ji ruo ead58f0983 fix(auth): keep config persistence off the request lock 2026-10-09 10:39:58 +08:00
ji ruo 04c8c54ff8 feat(auth): add optional HTTP Basic Auth access gate 2026-10-09 10:12:27 +08:00
RuoJi6 979e1fe4eb Update README.md 2026-10-09 09:26:37 +08:00
RuoJi6 735dd61564 Update README.md 2026-10-09 09:26:23 +08:00
ji ruo a91b27feb7 fix(release): retain upstream version 0.3.15 v0.3.15 2026-10-09 09:03:33 +08:00
ji ruo dfef372b64 feat(release): publish standalone repository and Docker Hub images 2026-10-09 09:01:25 +08:00
ji ruo 714b00cccb feat(update): publish fork releases for online self-update 2026-10-09 08:45:33 +08:00
Autumn-27 e6ec569991 docs(changelog): 定版 0.3.15 2026-10-07 08:54:02 -04:00
Autumn fd86f3ceca Merge pull request #197 from Autumn-27/fix/auth-init-fail-open
fix: 密码初始化/登录接口在数据库读失败时 fail closed
2026-10-07 19:47:48 +08:00
Autumn-27 a951e4aad3 fix bug 2026-10-07 07:45:28 -04:00
Autumn b55ceb1fdd Merge pull request #191 from Autumn-27/feat/judge-token-usage
feat(intercept): 模型兜底审批单独计量 token 并在配置页展示
2026-10-04 14:43:54 +08:00
Autumn-27 86729b65dc feat(intercept): 模型兜底审批单独计量 token 并在配置页展示
兜底审批(LLM judge)调模型判定漏网命令,其 token 消耗此前无法单独查看:
usage 行要么无 worker 归属、要么被并进复用的模型 profile 桶里。

- llmrec 增加 WithWorker 上下文覆盖,reviewer 调用前标注 worker='judge',
  让审批调用的计量行可被单独筛出(复用现有 llm_usage.worker 列,无需迁移)。
- db.JudgeUsageStats 返回累计总量 + 近 N 天每日序列(WHERE worker='judge')。
- 新增 GET /api/intercept/judge/usage。
- 配置页「模型兜底审批」开关下方新增用量卡片:调用次数 / 输入 / 输出 /
  缓存读写 五项统计 + 近 30 天每日消耗迷你柱图 + 刷新。
2026-10-04 02:43:26 -04:00
Autumn d0033724a6 Merge pull request #189 from Autumn-27/fix/sse-same-origin
fix(web): SSE 活动流默认同源,修复反代部署连不上 :8787
2026-10-03 08:10:35 +08:00
Autumn-27 e2c8a23a98 fix(web): SSE 活动流默认同源,修复反代部署连不上 :8787
sseUrl() 原先无条件把 SSE 地址拼成 ${hostname}:8787,连生产静态导出
也带这个硬编码。反代到 443 的部署里页面从 https://域名/ 加载,SSE 却被
指向 https://域名:8787/...,而 8787 未对公网开放,导致活动流连不上、反复重连。

改为用 NODE_ENV 区分:生产默认同源(相对路径),仅 next dev 保留 :8787
以绕过 Next.js /api 反代对 SSE 的缓冲。NEXT_PUBLIC_SSE_BASE 覆盖口保留。
验证:NEXT_EXPORT=1 next build 后生产包里 :8787 分支已被 tree-shake。

补充 README 反向代理部署文档(同源说明 + nginx 关缓冲配置)。

Closes #169
2026-10-02 20:10:08 -04:00
Autumn 160fe13c24 Merge pull request #187 from Autumn-27/fix/notify-digest-and-mask
fix(notify): 汇总模式退化、目的地留空误判、SMTP 缺 SSRF 守卫
2026-10-01 19:00:43 +08:00