merge main into codex/unify-http-packet-editor

agent/intelligence.go

@@ -12,7 +12,6 @@ import (
 // Missing host/setting means off. Rechecked on every write for running sessions.
 var IntelligenceEnabled func() bool
 var IntelligenceRecord func(context.Context, int64, int64, string, db.IntelligenceInput) (int64, error)
-var CredentialRecorded func()
 
 func intelligenceEnabled() bool { return IntelligenceEnabled != nil && IntelligenceEnabled() }
 func intelligenceSchema() map[string]any {

db/credentials.go

@@ -39,23 +39,22 @@ type CredentialTraffic struct {
 	Accounts []int  `json:"accounts"`
 }
 type CredentialAnalysis struct {
-	ConversationID int64               `json:"conversation_id,omitempty"`
+	ForceExtract bool                `json:"force_extract,omitempty"`
-	ForceExtract   bool                `json:"force_extract,omitempty"`
+	TrafficNote  string              `json:"traffic_note,omitempty"`
-	TrafficNote    string              `json:"traffic_note,omitempty"`
+	State        string              `json:"state"`
-	State          string              `json:"state"`
+	Lease        string              `json:"lease,omitempty"`
-	Lease          string              `json:"lease,omitempty"`
+	LeaseUntil   time.Time           `json:"lease_until,omitempty"`
-	LeaseUntil     time.Time           `json:"lease_until,omitempty"`
+	SourceHash   string              `json:"source_hash,omitempty"`
-	SourceHash     string              `json:"source_hash,omitempty"`
+	Method       string              `json:"method,omitempty"`
-	Method         string              `json:"method,omitempty"`
+	Accounts     []CredentialAccount `json:"accounts"`
-	Accounts       []CredentialAccount `json:"accounts"`
+	Traffic      []CredentialTraffic `json:"traffic"`
-	Traffic        []CredentialTraffic `json:"traffic"`
+	TrafficState string              `json:"traffic_state"`
-	TrafficState   string              `json:"traffic_state"`
+	Note         string              `json:"note,omitempty"`
-	Note           string              `json:"note,omitempty"`
+	Error        string              `json:"error,omitempty"`
-	Error          string              `json:"error,omitempty"`
+	Model        string              `json:"model,omitempty"`
-	Model          string              `json:"model,omitempty"`
+	InputTokens  int                 `json:"input_tokens"`
-	InputTokens    int                 `json:"input_tokens"`
+	OutputTokens int                 `json:"output_tokens"`
-	OutputTokens   int                 `json:"output_tokens"`
+	ProcessedAt  *time.Time          `json:"processed_at,omitempty"`
-	ProcessedAt    *time.Time          `json:"processed_at,omitempty"`
 }
 
 func CredentialSourceHash(content string) string {

db/findings.go

@@ -23,21 +23,20 @@ type DBFinding struct {
 	ReportEvidenceVersion int64
 	TrafficBindings       []FindingTrafficBinding // populated only for export
 
-	ID                   int64
+	ID              int64
-	TaskID               *int64
+	TaskID          *int64
-	NodeID               *int64
+	NodeID          *int64
-	VulnClass            string
+	VulnClass       string
-	Name                 string // 漏洞名称(可读标题);为空时前端回退展示 VulnClass
+	Name            string // 漏洞名称(可读标题);为空时前端回退展示 VulnClass
-	Severity             string
+	Severity        string
-	Summary              string
+	Summary         string
-	Evidence             string
+	Evidence        string
-	Worker               string
+	Worker          string
-	AssetIDs             []int64
+	AssetIDs        []int64
-	Status               string
+	Status          string
-	Report               string // 详细报告(Markdown);仅 GetFinding 填充,列表查询不带
+	Report          string // 详细报告(Markdown);仅 GetFinding 填充,列表查询不带
-	ReportConversationID *int64 `json:"report_conversation_id,omitempty"`
+	CreatedAt       time.Time
-	CreatedAt            time.Time
+	TaskDescription string // populated via LEFT JOIN on tasks
-	TaskDescription      string // populated via LEFT JOIN on tasks
 }
 
 // Finding triage states (findings.status).
@@ -107,9 +106,9 @@ func (d *DB) AddFinding(taskID, nodeID int64, vulnclass, name, severity, summary
 // findingSelectCols is the column list (with task_description join) every finding
 // list query selects, so scanFinding stays in sync across callers.
 const findingSelectCols = `f.id, f.task_id, f.node_id, f.vulnclass, COALESCE(f.name, ''), f.severity, f.summary,
-		f.evidence, f.worker, f.asset_ids, COALESCE(f.status, 'pending'), f.created_at,
+	       f.evidence, f.worker, f.asset_ids, COALESCE(f.status, 'pending'), f.created_at,
 	       COALESCE(t.description, '') AS task_description, f.evidence_version, f.report_evidence_version,
-	(SELECT count(*) FROM finding_traffic_bindings b WHERE b.finding_id=f.id)`
+ (SELECT count(*) FROM finding_traffic_bindings b WHERE b.finding_id=f.id)`
 
 // scanFindings materializes rows selected via findingSelectCols.
 func scanFindings(rows interface {
@@ -662,14 +661,13 @@ func (d *DB) FindingStats() (*FindingStats, error) {
 func (d *DB) GetFinding(id int64) (*DBFinding, error) {
 	f := &DBFinding{}
 	var aidsJSON string
-	var reportConv sql.NullInt64
+	err := d.QueryRow(`SELECT `+findingSelectCols+`, COALESCE(f.report, '')
-	err := d.QueryRow(`SELECT `+findingSelectCols+`, COALESCE(f.report, ''), f.report_conversation_id
 		FROM findings f
 		LEFT JOIN tasks t ON f.task_id = t.id
 		WHERE f.id = $1`, id).Scan(
 		&f.ID, &f.TaskID, &f.NodeID, &f.VulnClass, &f.Name, &f.Severity,
 		&f.Summary, &f.Evidence, &f.Worker, &aidsJSON, &f.Status, &f.CreatedAt,
-		&f.TaskDescription, &f.EvidenceVersion, &f.ReportEvidenceVersion, &f.TrafficCount, &f.Report, &reportConv)
+		&f.TaskDescription, &f.EvidenceVersion, &f.ReportEvidenceVersion, &f.TrafficCount, &f.Report)
 	if err == sql.ErrNoRows {
 		return nil, nil
 	}
@@ -677,51 +675,9 @@ func (d *DB) GetFinding(id int64) (*DBFinding, error) {
 		return nil, err
 	}
 	_ = json.Unmarshal([]byte(aidsJSON), &f.AssetIDs)
-	if reportConv.Valid {
-		f.ReportConversationID = &reportConv.Int64
-	}
-	if f.ReportConversationID == nil && strings.TrimSpace(f.Report) != "" {
-		if resolved, resolveErr := d.ResolveFindingReportConversation(f.ID); resolveErr == nil {
-			f.ReportConversationID = resolved
-		}
-	}
 	return f, nil
 }
 
-func (d *DB) SetFindingReportConversationID(findingID, conversationID int64) error {
-	_, err := d.Exec(`UPDATE findings SET report_conversation_id=$2 WHERE id=$1`, findingID, conversationID)
-	return err
-}
-
-// ResolveFindingReportConversation backfills links for reports generated before
-// report_conversation_id was persisted.
-func (d *DB) ResolveFindingReportConversation(findingID int64) (*int64, error) {
-	var id int64
-	err := d.QueryRow(`SELECT c.id FROM conversations c
-	JOIN conversation_activities a ON a.conversation_id=c.id
-	WHERE c.agent_key='reporter' AND (
-	 c.title = '漏洞报告 · finding#' || $1::text OR
-	 c.title ILIKE '%finding#' || $1::text || '%' OR
-	 a.detail ILIKE '%finding_id=' || $1::text || '%' OR
-	 a.detail ILIKE '%"finding_id":' || $1::text || '%'
-	)
-	ORDER BY CASE WHEN EXISTS (
-		SELECT 1 FROM conversation_activities r
-		WHERE r.conversation_id=c.id AND (r.tool='update_finding_report' OR r.summary ILIKE 'finding % report updated%')
-	) THEN 0 ELSE 1 END,
-	c.created_at ASC, c.id ASC LIMIT 1`, findingID).Scan(&id)
-	if err == sql.ErrNoRows {
-		return nil, nil
-	}
-	if err != nil {
-		return nil, err
-	}
-	if err := d.SetFindingReportConversationID(findingID, id); err != nil {
-		return nil, err
-	}
-	return &id, nil
-}
-
 // DeleteFinding removes a finding entirely: the standalone findings row and its
 // originating exploration node (kind='finding'), so it disappears from the findings
 // list, the per-task 发现 Tab, and the exploration graph alike. Deleting the node

db/schema.sql

@@ -1162,13 +1162,11 @@ CREATE TABLE IF NOT EXISTS findings (
     status      TEXT NOT NULL DEFAULT 'pending',
     -- 漏洞详细报告(Markdown)；默认空,仅详情页读取/展示,不进列表接口以免 payload 膨胀。
     report      TEXT NOT NULL DEFAULT '',
-    report_conversation_id BIGINT REFERENCES conversations(id) ON DELETE SET NULL,
     created_at  TIMESTAMPTZ NOT NULL DEFAULT now()
 );
 ALTER TABLE findings ADD COLUMN IF NOT EXISTS status TEXT NOT NULL DEFAULT 'pending';
 ALTER TABLE findings ADD COLUMN IF NOT EXISTS name   TEXT NOT NULL DEFAULT '';
 ALTER TABLE findings ADD COLUMN IF NOT EXISTS report TEXT NOT NULL DEFAULT '';
-ALTER TABLE findings ADD COLUMN IF NOT EXISTS report_conversation_id BIGINT REFERENCES conversations(id) ON DELETE SET NULL;
 CREATE INDEX IF NOT EXISTS idx_findings_task ON findings(task_id, created_at DESC);
 CREATE INDEX IF NOT EXISTS idx_findings_time ON findings(created_at DESC);
 CREATE INDEX IF NOT EXISTS idx_findings_status ON findings(status, created_at DESC);

server/assembly.go

@@ -233,13 +233,6 @@ func wireTools(pg *db.DB, domainReg map[string]actool.CoreTool) {
 		if err != nil {
 			return 0, err
 		}
-		if item.Kind == "credential" {
-			// The durable database row is the source of truth; this wake-up only
-			// reduces latency. The recovery ticker handles missed notifications.
-			if agent.CredentialRecorded != nil {
-				agent.CredentialRecorded()
-			}
-		}
 		return item.ID, nil
 	}
 	// Seed the built-in domain tools (first-insert only; DO NOTHING preserves edits).

server/conversations.go

@@ -701,14 +701,6 @@ func (s *Server) readTriggerBehavior(agentKey string) triggerBehavior {
 // merging by task / all / none); parallel → run each fire in its own concurrent
 // conversation up to trigger_max_parallel. Distinct agents always run concurrently.
 func (s *Server) StartTriggeredRun(agentKey, title, message string, taskID int64, mergeable bool, taskDesc, taskGoal string) {
-	s.startTriggeredRun(agentKey, title, message, taskID, mergeable, taskDesc, taskGoal, 0)
-}
-
-func (s *Server) StartTriggeredRunWithConversation(agentKey, title, message string, taskID int64, mergeable bool, taskDesc, taskGoal string, conversationID int64) {
-	s.startTriggeredRun(agentKey, title, message, taskID, mergeable, taskDesc, taskGoal, conversationID)
-}
-
-func (s *Server) startTriggeredRun(agentKey, title, message string, taskID int64, mergeable bool, taskDesc, taskGoal string, conversationID int64) {
 	if s.m.pg == nil || s.chatAgentRef() == nil {
 		return
 	}
@@ -722,7 +714,7 @@ func (s *Server) startTriggeredRun(agentKey, title, message string, taskID int64
 	cfg := s.readTriggerBehavior(agentKey) // DB read BEFORE the lock (never under queueMu)
 	s.queueMu.Lock()
 	s.triggerCfg[agentKey] = cfg
-	s.triggerQ[agentKey] = append(s.triggerQ[agentKey], triggeredRun{conversationID: conversationID, agentKey: agentKey, title: title, message: message, taskID: taskID, taskDesc: taskDesc, taskGoal: taskGoal, mergeable: mergeable})
+	s.triggerQ[agentKey] = append(s.triggerQ[agentKey], triggeredRun{agentKey: agentKey, title: title, message: message, taskID: taskID, taskDesc: taskDesc, taskGoal: taskGoal, mergeable: mergeable})
 	s.pumpLocked(agentKey)
 	s.queueMu.Unlock()
 }

server/credentials.go

@@ -2,7 +2,6 @@ package server
 
 import (
 	"context"
-	"encoding/json"
 	"io"
 	"log"
 	"net/http"
@@ -42,16 +41,13 @@ func (s *Server) seedCredentialProcessor() {
 	_ = s.m.pg.SetBool(flag, true)
 }
 func (s *Server) runCredentialProcessor() {
-	// Events wake the worker immediately. The slow ticker is only a recovery
+	ticker := time.NewTicker(3 * time.Second)
-	// scan for rows created before a notification or after a process restart.
-	ticker := time.NewTicker(30 * time.Second)
 	defer ticker.Stop()
 	for {
 		select {
 		case <-s.ctx.Done():
 			return
 		case <-ticker.C:
-		case <-s.credentialWake:
 		}
 		if !s.m.pg.GetBool(db.SettingTaskIntelligence, false) || !s.m.pg.GetBool(db.SettingCredentialAgent, false) {
 			continue
@@ -97,14 +93,6 @@ func (s *Server) processCredentialJob(parent context.Context, item *db.Intellige
 		}
 	}()
 	result := *item.Credentials
-	conversationID := result.ConversationID
-	if conversationID == 0 {
-		if c, err := s.m.pg.CreateConversation(db.CredentialAgentKey, "凭据整理 · "+firstLine(item.Title, 42), nil); err == nil {
-			conversationID = c.ID
-			result.ConversationID = c.ID
-			_, _ = s.m.pg.AppendConvActivity(c.ID, db.Activity{Worker: db.CredentialAgentKey, Kind: "user", Summary: "收到凭据上报，开始整理", Detail: item.Content})
-		}
-	}
 	needsExtract := result.ForceExtract || result.SourceHash != db.CredentialSourceHash(item.Content) || result.Method == "" || (result.Error != "" && len(result.Accounts) == 0)
 	result.State = "ready"
 	result.ForceExtract = false
@@ -197,20 +185,8 @@ func (s *Server) processCredentialJob(parent context.Context, item *db.Intellige
 	if err := s.m.pg.FinishCredentialJob(finish, item, result); err != nil {
 		log.Printf("[credentials] save record #%d: %v", item.ID, err)
 	}
-	if conversationID > 0 {
-		detail, _ := json.Marshal(result)
-		kind, summary := "result", "凭据整理完成"
-		isError := result.State == "error"
-		if isError {
-			kind, summary = "text", "凭据整理失败："+result.Error
-		}
-		_, _ = s.m.pg.AppendConvActivity(conversationID, db.Activity{Worker: db.CredentialAgentKey, Kind: kind, IsError: isError, Summary: summary, Detail: string(detail), InputTokens: intPtr(result.InputTokens), OutputTokens: intPtr(result.OutputTokens)})
-		_ = s.m.pg.TouchConversation(conversationID)
-	}
 }
 
-func intPtr(v int) *int { return &v }
-
 var credentialURLs = regexp.MustCompile(`https?://[^\s<>"'，；）)]+`)
 var credentialTrafficIDs = regexp.MustCompile(`\b[0-9]{8,}-[0-9]{3,}\b`)
 

server/dto.go

@@ -325,16 +325,15 @@ type FindingDTO struct {
 	ReportStale           bool                       `json:"report_stale"`
 	TrafficBindings       []db.FindingTrafficBinding `json:"traffic_bindings,omitempty"`
 
-	ID                   string `json:"id"`
+	ID        string `json:"id"`
-	FindingID            string `json:"finding_id,omitempty"` // standalone findings-table id — the handle for status updates
+	FindingID string `json:"finding_id,omitempty"` // standalone findings-table id — the handle for status updates
-	VulnClass            string `json:"vulnclass"`
+	VulnClass string `json:"vulnclass"`
-	Name                 string `json:"name,omitempty"` // 漏洞名称;为空时前端回退展示 vulnclass
+	Name      string `json:"name,omitempty"` // 漏洞名称;为空时前端回退展示 vulnclass
-	Severity             string `json:"severity"`       // critical | high | medium | low
+	Severity  string `json:"severity"`       // critical | high | medium | low
-	Status               string `json:"status"`         // pending | in_progress | confirmed | resolved | fixed | false_positive | ignored | duplicate | risk_accepted
+	Status    string `json:"status"`         // pending | in_progress | confirmed | resolved | fixed | false_positive | ignored | duplicate | risk_accepted
-	Summary              string `json:"summary"`
+	Summary   string `json:"summary"`
-	Evidence             string `json:"evidence"`
+	Evidence  string `json:"evidence"`
-	Report               string `json:"report,omitempty"` // 详细报告(Markdown);仅详情接口返回,列表为空
+	Report    string `json:"report,omitempty"` // 详细报告(Markdown);仅详情接口返回,列表为空
-	ReportConversationID *int64 `json:"report_conversation_id,omitempty"`
 
 	IntentID        string            `json:"intent_id,omitempty"`
 	ParamID         string            `json:"param_id,omitempty"`
@@ -465,15 +464,14 @@ func findingFromDB(f *db.DBFinding, assets map[int64]*db.Asset) FindingDTO {
 		FindingID:    i64s(f.ID),
 		TrafficCount: f.TrafficCount, EvidenceVersion: f.EvidenceVersion, ReportEvidenceVersion: f.ReportEvidenceVersion,
 		ReportStale: f.Report != "" && f.EvidenceVersion != f.ReportEvidenceVersion, TrafficBindings: f.TrafficBindings,
-		VulnClass:            f.VulnClass,
+		VulnClass: f.VulnClass,
-		Name:                 f.Name,
+		Name:      f.Name,
-		Severity:             f.Severity,
+		Severity:  f.Severity,
-		Status:               status,
+		Status:    status,
-		Summary:              f.Summary,
+		Summary:   f.Summary,
-		Evidence:             f.Evidence,
+		Evidence:  f.Evidence,
-		Report:               f.Report,
+		Report:    f.Report,
-		ReportConversationID: f.ReportConversationID,
+		TS:        rfc3339(f.CreatedAt),
-		TS:                   rfc3339(f.CreatedAt),
 	}
 	if f.ExportCaseID > 0 {
 		d.ID = "case:" + i64s(f.ExportCaseID)

server/finding_report.go

@@ -58,30 +58,20 @@ func (s *Server) generateFindingReport(w http.ResponseWriter, r *http.Request) {
 		}
 	}
 	message := manualFindingReportMessage(f, taskID)
-	conversation, err := s.m.pg.CreateConversation("reporter", fmt.Sprintf("漏洞报告 · finding#%d", f.ID), nil)
+	s.StartTriggeredRun(
-	if err != nil {
-		writeErr(w, http.StatusInternalServerError, "创建报告对话失败: "+err.Error())
-		return
-	}
-	if err := s.m.pg.SetFindingReportConversationID(f.ID, conversation.ID); err != nil {
-		writeErr(w, http.StatusInternalServerError, "关联报告对话失败: "+err.Error())
-		return
-	}
-	s.StartTriggeredRunWithConversation(
 		"reporter",
 		fmt.Sprintf("人工生成步骤与报告 · finding#%d", f.ID),
 		message,
 		taskID,
 		false,
 		taskDesc,
-		taskGoal, conversation.ID,
+		taskGoal,
 	)
 	writeJSON(w, http.StatusAccepted, map[string]any{
 		"queued":          true,
 		"agent_key":       "reporter",
 		"finding_id":      f.ID,
 		"finding_node_id": *f.NodeID,
-		"conversation_id": conversation.ID,
 	})
 }
 

server/orchestration.go

@@ -11,7 +11,6 @@ import (
 
 	"github.com/Autumn-27/artex/agent"
 	"github.com/Autumn-27/artex/db"
-	"github.com/Autumn-27/artex/intercept"
 	"github.com/Autumn-27/norma/permission"
 	actool "github.com/Autumn-27/norma/tool"
 )
@@ -475,16 +474,6 @@ func (s *Server) toolUpdateFindingReport() actool.CoreTool {
 				if err := s.checkCaseReviewScope(ctx, "update_finding_report", findingCaseRequest{FindingID: json.RawMessage(i64s(fid))}); err != nil {
 					return actool.Errorf(err.Error()), nil
 				}
-				if f, err := s.m.pg.GetFinding(fid); err == nil && f != nil && f.TaskID != nil {
-					if err := s.archiveFindingScreenshots(*f.TaskID, a.Report); err != nil {
-						return actool.Errorf("归档报告截图失败: " + err.Error()), nil
-					}
-				}
-				if conversationID := intercept.ConvIDFromContext(ctx); conversationID > 0 {
-					if err := s.m.pg.SetFindingReportConversationID(fid, conversationID); err != nil {
-						return actool.Errorf("关联报告对话失败: " + err.Error()), nil
-					}
-				}
 			}
 			n, err := s.m.pg.SetFindingReportVersionByNodeID(ctx, nodeID, a.Report, a.EvidenceVersion)
 			if err != nil {

server/server.go

@@ -125,10 +125,9 @@ type Server struct {
 
 	// Cold task archives run through one persistent FIFO worker. The buffered wake
 	// channel coalesces enqueue bursts; the database remains the source of truth.
-	archiveWake    chan struct{}
+	archiveWake chan struct{}
-	archiveWG      sync.WaitGroup
+	archiveWG   sync.WaitGroup
-	credentialWake chan struct{}
+	side        *sideQuestionState
-	side           *sideQuestionState
 }
 
 // provEntry is a cached provider + its config for one LLM profile id.
@@ -162,7 +161,7 @@ func New(ctx context.Context, m *Manager, skillDir string, dataDir string, keyDi
 		triggerActive: map[string]int{}, triggerCfg: map[string]triggerBehavior{},
 		profChatAgents: map[int64]*agent.ChatAgent{},
 		provByProfile:  map[int64]*provEntry{}, llmHealth: newLLMHealthRegistry(m.pg),
-		taskAgents: map[string]*taskAgentBundle{}, archiveWake: make(chan struct{}, 1), credentialWake: make(chan struct{}, 1)}
+		taskAgents: map[string]*taskAgentBundle{}, archiveWake: make(chan struct{}, 1)}
 	s.initSideQuestions()
 	if m.pg != nil {
 		if err := s.basicAuth.load(m.pg); err != nil {
@@ -283,12 +282,6 @@ func New(ctx context.Context, m *Manager, skillDir string, dataDir string, keyDi
 	go s.reconcileConcurrency()
 	s.startTaskArchiveWorker()
 	if m.pg != nil {
-		agent.CredentialRecorded = func() {
-			select {
-			case s.credentialWake <- struct{}{}:
-			default:
-			}
-		}
 		s.seedCredentialProcessor()
 		go s.runCredentialProcessor()
 	}

server/system_metrics.go

@@ -1,8 +1,17 @@
 package server
 
+// Container-level resource metrics. These deliberately read cgroups directly:
+// generic host libraries often report the host's capacity from inside Docker.
+
 import (
 	"encoding/json"
+	"os"
 	"net/http"
+	"path/filepath"
+	"runtime"
+	"strconv"
+	"strings"
+	"syscall"
 	"time"
 )
 
@@ -14,7 +23,6 @@ type metricValue struct {
 
 type systemMetricsResponse struct {
 	Scope     string      `json:"scope"`
-	Supported bool        `json:"supported"`
 	Timestamp time.Time   `json:"timestamp"`
 	CPU       metricValue `json:"cpu"`
 	Memory    metricValue `json:"memory"`
@@ -24,8 +32,71 @@ type systemMetricsResponse struct {
 }
 
 func (s *Server) systemMetrics(w http.ResponseWriter, r *http.Request) {
-	out := systemMetricsSnapshot(s)
+	cpuUse, cpuLimit, ok := cgroupCPU()
+	cpuPct := 0.0
+	if ok {
+		now := time.Now()
+		s.metricsMu.Lock()
+		if !s.lastCPUAt.IsZero() && cpuUse >= s.lastCPUUse {
+			elapsed := now.Sub(s.lastCPUAt).Seconds()
+			if elapsed > 0 {
+				cpuPct = float64(cpuUse-s.lastCPUUse) / 1e6 / elapsed / cpuLimit * 100
+			}
+		}
+		s.lastCPUUse, s.lastCPUAt = cpuUse, now
+		s.metricsMu.Unlock()
+	}
+	memUsed, memTotal, memOK := cgroupMemory()
+	root := diskMetric("/")
+	data := diskMetric(s.dataDir)
+	if data.TotalBytes == 0 { data = root }
+	containerMetrics := ok || memOK
+	scope := "process"
+	if containerMetrics {
+		scope = "container"
+	}
+	out := systemMetricsResponse{Scope: scope, Timestamp: time.Now().UTC(), Container: containerMetrics,
+		CPU: metricValue{Percent: clampPercent(cpuPct)},
+		Memory: metricValue{UsedBytes: memUsed, TotalBytes: memTotal, Percent: percent(memUsed, memTotal)}, Disk: root, DataDisk: data}
 	w.Header().Set("Cache-Control", "no-store")
 	w.Header().Set("Content-Type", "application/json")
 	_ = json.NewEncoder(w).Encode(out)
 }
+
+func cgroupCPU() (uint64, float64, bool) {
+	for _, dir := range []string{"/sys/fs/cgroup", "/sys/fs/cgroup/cpu"} {
+		b, err := os.ReadFile(filepath.Join(dir, "cpu.stat")); if err != nil { continue }
+		var use uint64
+		for _, line := range strings.Split(string(b), "\n") { f := strings.Fields(line); if len(f) == 2 && f[0] == "usage_usec" { use, _ = strconv.ParseUint(f[1], 10, 64) } }
+		limit := float64(runtime.NumCPU())
+		if q, err := os.ReadFile(filepath.Join(dir, "cpu.max")); err == nil { f := strings.Fields(string(q)); if len(f) == 2 && f[0] != "max" { quota, _ := strconv.ParseFloat(f[0], 64); period, _ := strconv.ParseFloat(f[1], 64); if period > 0 { limit = quota / period } } }
+		if use > 0 { return use, limit, true }
+	}
+	return 0, 0, false
+}
+
+func cgroupMemory() (uint64, uint64, bool) {
+	for _, dir := range []string{"/sys/fs/cgroup", "/sys/fs/cgroup/memory"} {
+		cur, e1 := readUint(filepath.Join(dir, "memory.current")); max, e2 := readUint(filepath.Join(dir, "memory.max"))
+		if e1 == nil && e2 == nil { return cur, max, max > 0 }
+		if e1 == nil {
+			if b, err := os.ReadFile(filepath.Join(dir, "memory.max")); err == nil && strings.TrimSpace(string(b)) == "max" {
+				return cur, hostMemoryTotal(), true
+			}
+		}
+		cur, e1 = readUint(filepath.Join(dir, "memory.usage_in_bytes")); max, e2 = readUint(filepath.Join(dir, "memory.limit_in_bytes")); if e1 == nil && e2 == nil && max < ^uint64(0)/2 { return cur, max, true }
+	}
+	return 0, 0, false
+}
+
+func hostMemoryTotal() uint64 {
+	b, err := os.ReadFile("/proc/meminfo"); if err != nil { return 0 }
+	for _, line := range strings.Split(string(b), "\n") { f := strings.Fields(line); if len(f) >= 2 && f[0] == "MemTotal:" { n, _ := strconv.ParseUint(f[1], 10, 64); return n * 1024 } }
+	return 0
+}
+
+func readUint(path string) (uint64, error) { b, err := os.ReadFile(path); if err != nil { return 0, err }; return strconv.ParseUint(strings.TrimSpace(string(b)), 10, 64) }
+
+func diskMetric(path string) metricValue { var st syscall.Statfs_t; if path == "" || syscall.Statfs(path, &st) != nil { return metricValue{} }; total := st.Blocks * uint64(st.Bsize); free := st.Bavail * uint64(st.Bsize); used := total - free; return metricValue{UsedBytes: used, TotalBytes: total, Percent: percent(used, total)} }
+func percent(used, total uint64) float64 { if total == 0 { return 0 }; return clampPercent(float64(used) / float64(total) * 100) }
+func clampPercent(v float64) float64 { if v < 0 { return 0 }; if v > 100 { return 100 }; return v }

server/system_metrics_linux.go

@@ -1,62 +0,0 @@
-//go:build linux
-
-package server
-
-import (
-	"os"
-	"path/filepath"
-	"runtime"
-	"strconv"
-	"strings"
-	"syscall"
-	"time"
-)
-
-func systemMetricsSnapshot(s *Server) systemMetricsResponse {
-	use, limit, cpuOK := cgroupCPU()
-	cpuPct := 0.0
-	if cpuOK {
-		now := time.Now()
-		s.metricsMu.Lock()
-		if !s.lastCPUAt.IsZero() && use >= s.lastCPUUse && limit > 0 {
-			elapsed := now.Sub(s.lastCPUAt).Seconds()
-			if elapsed > 0 { cpuPct = float64(use-s.lastCPUUse) / 1e6 / elapsed / limit * 100 }
-		}
-		s.lastCPUUse, s.lastCPUAt = use, now
-		s.metricsMu.Unlock()
-	}
-	memUsed, memTotal, memOK := cgroupMemory()
-	root, data := diskMetric("/"), diskMetric(s.dataDir)
-	if data.TotalBytes == 0 { data = root }
-	return systemMetricsResponse{Scope: "container", Supported: true, Timestamp: time.Now().UTC(), Container: cpuOK || memOK,
-		CPU: metricValue{Percent: clampPercent(cpuPct)}, Memory: metricValue{UsedBytes: memUsed, TotalBytes: memTotal, Percent: percent(memUsed, memTotal)}, Disk: root, DataDisk: data}
-}
-
-func cgroupCPU() (uint64, float64, bool) {
-	for _, dir := range []string{"/sys/fs/cgroup", "/sys/fs/cgroup/cpu"} {
-		b, err := os.ReadFile(filepath.Join(dir, "cpu.stat")); if err != nil { continue }
-		var use uint64
-		for _, line := range strings.Split(string(b), "\n") { f := strings.Fields(line); if len(f) == 2 && f[0] == "usage_usec" { use, _ = strconv.ParseUint(f[1], 10, 64) } }
-		limit := float64(runtime.NumCPU())
-		if q, err := os.ReadFile(filepath.Join(dir, "cpu.max")); err == nil { f := strings.Fields(string(q)); if len(f) == 2 && f[0] != "max" { quota, _ := strconv.ParseFloat(f[0], 64); period, _ := strconv.ParseFloat(f[1], 64); if period > 0 { limit = quota / period } } }
-		if use > 0 { return use, limit, true }
-	}
-	return 0, 0, false
-}
-
-func cgroupMemory() (uint64, uint64, bool) {
-	for _, dir := range []string{"/sys/fs/cgroup", "/sys/fs/cgroup/memory"} {
-		cur, ce := readUint(filepath.Join(dir, "memory.current")); max, me := readUint(filepath.Join(dir, "memory.max"))
-		if ce == nil && me == nil { return cur, max, max > 0 }
-		if ce == nil { if b, err := os.ReadFile(filepath.Join(dir, "memory.max")); err == nil && strings.TrimSpace(string(b)) == "max" { return cur, hostMemoryTotal(), true } }
-		cur, ce = readUint(filepath.Join(dir, "memory.usage_in_bytes")); max, me = readUint(filepath.Join(dir, "memory.limit_in_bytes"))
-		if ce == nil && me == nil && max < ^uint64(0)/2 { return cur, max, true }
-	}
-	return 0, 0, false
-}
-
-func hostMemoryTotal() uint64 { b, err := os.ReadFile("/proc/meminfo"); if err != nil { return 0 }; for _, line := range strings.Split(string(b), "\n") { f := strings.Fields(line); if len(f) >= 2 && f[0] == "MemTotal:" { n, _ := strconv.ParseUint(f[1], 10, 64); return n * 1024 } }; return 0 }
-func readUint(path string) (uint64, error) { b, err := os.ReadFile(path); if err != nil { return 0, err }; return strconv.ParseUint(strings.TrimSpace(string(b)), 10, 64) }
-func diskMetric(path string) metricValue { var st syscall.Statfs_t; if path == "" || syscall.Statfs(path, &st) != nil { return metricValue{} }; total, free := st.Blocks*uint64(st.Bsize), st.Bavail*uint64(st.Bsize); used := total-free; return metricValue{UsedBytes: used, TotalBytes: total, Percent: percent(used, total)} }
-func percent(used, total uint64) float64 { if total == 0 { return 0 }; return clampPercent(float64(used)/float64(total)*100) }
-func clampPercent(v float64) float64 { if v < 0 { return 0 }; if v > 100 { return 100 }; return v }

server/system_metrics_test.go

@@ -3,7 +3,6 @@ package server
 import (
 	"encoding/json"
 	"net/http/httptest"
-	"runtime"
 	"testing"
 )
 
@@ -22,12 +21,6 @@ func TestSystemMetricsReturnsContainerAndDiskValues(t *testing.T) {
 	if got.Scope == "" || got.Timestamp.IsZero() {
 		t.Fatalf("unexpected response metadata: %+v", got)
 	}
-	if runtime.GOOS != "linux" {
-		if got.Supported || got.Scope != "unsupported" {
-			t.Fatalf("unsupported platform returned metrics: %+v", got)
-		}
-		return
-	}
 	if got.Disk.TotalBytes == 0 || got.DataDisk.TotalBytes == 0 {
 		t.Fatalf("disk metrics missing: %+v", got)
 	}

server/system_metrics_unsupported.go

@@ -1,9 +0,0 @@
-//go:build !linux
-
-package server
-
-import "time"
-
-func systemMetricsSnapshot(_ *Server) systemMetricsResponse {
-	return systemMetricsResponse{Scope: "unsupported", Supported: false, Timestamp: time.Now().UTC()}
-}

server/workspace.go

@@ -2,7 +2,6 @@ package server
 
 import (
 	"bytes"
-	"fmt"
 	"io"
 	"mime/multipart"
 	"net/http"
@@ -310,67 +309,6 @@ func (s *Server) findSessionPreview(rawPath string) (string, bool) {
 	return newest, newest != ""
 }
 
-// archiveFindingScreenshots materializes report-referenced screenshots in the
-// task workspace. Browser runs use per-session working directories, while
-// reports intentionally use the portable findings/screenshots/ path.
-func (s *Server) archiveFindingScreenshots(taskID int64, markdown string) error {
-	if taskID <= 0 {
-		return nil
-	}
-	for _, match := range screenshotMarkdownLink.FindAllStringSubmatch(markdown, -1) {
-		raw := strings.TrimSpace(match[2])
-		rel := filepath.Clean(strings.TrimPrefix(raw, "/"))
-		const prefix = "findings" + string(os.PathSeparator) + "screenshots" + string(os.PathSeparator)
-		if !strings.HasPrefix(rel, prefix) || strings.Contains(rel, ".."+string(os.PathSeparator)) {
-			continue
-		}
-		target := filepath.Join(s.m.dir, "tasks", fmt.Sprint(taskID), rel)
-		if info, err := os.Stat(target); err == nil && !info.IsDir() {
-			continue
-		}
-		source, ok := s.resolveSessionScreenshot(rel)
-		if !ok {
-			continue
-		}
-		if err := os.MkdirAll(filepath.Dir(target), 0o755); err != nil {
-			return err
-		}
-		in, err := os.Open(source)
-		if err != nil {
-			return err
-		}
-		out, err := os.OpenFile(target, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0o644)
-		if err == nil {
-			_, err = io.Copy(out, in)
-		}
-		_ = in.Close()
-		_ = out.Close()
-		if err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-func (s *Server) resolveSessionScreenshot(rel string) (string, bool) {
-	matches, err := filepath.Glob(filepath.Join(filepath.Clean(s.m.dir), "sessions", "*", rel))
-	if err != nil || len(matches) == 0 {
-		return "", false
-	}
-	var newest string
-	var newestTime int64
-	for _, candidate := range matches {
-		info, statErr := os.Stat(candidate)
-		if statErr != nil || info.IsDir() {
-			continue
-		}
-		if newest == "" || info.ModTime().UnixNano() > newestTime {
-			newest, newestTime = candidate, info.ModTime().UnixNano()
-		}
-	}
-	return newest, newest != ""
-}
-
 // POST /api/workspace/upload?path=<dir> — multipart form field "file" (one or more).
 func (s *Server) wsUpload(w http.ResponseWriter, r *http.Request) {
 	dirAbs, ok := s.wsResolve(r.URL.Query().Get("path"))

web/src/app/(main)/dashboard/page.tsx

@@ -9,13 +9,13 @@ import {
   ArrowUpRightIcon,
   BugIcon,
   ClockIcon,
-  CpuIcon,
-  HardDriveIcon,
-  MemoryStickIcon,
   NetworkIcon,
   ShieldCheckIcon,
   TargetIcon,
   ZapIcon,
+  CpuIcon,
+  HardDriveIcon,
+  MemoryStickIcon,
 } from "lucide-react";
 import { Bar, BarChart, CartesianGrid, Tooltip as RechartsTooltip, XAxis, YAxis } from "recharts";
 
@@ -73,6 +73,15 @@ function fmtTokens(n: number): string {
   return String(n);
 }
 
+function fmtBytes(n: number): string {
+  if (!n) return "—";
+  const units = ["B", "KB", "MB", "GB", "TB"];
+  let value = n;
+  let i = 0;
+  while (value >= 1024 && i < units.length - 1) { value /= 1024; i++; }
+  return `${value.toFixed(value >= 10 || i === 0 ? 0 : 1)} ${units[i]}`;
+}
+
 const ASSET_TYPE_LABELS: Record<string, string> = {
   root_domain: "根域名",
   ip: "IP",
@@ -105,35 +114,6 @@ function statusBg(code: number): string {
   return "bg-red-400";
 }
 
-function SystemResourceStatus({ metrics }: { metrics: SystemMetrics | null }) {
-  if (!metrics) return null;
-  if (!metrics.supported) {
-    return <div className="ml-auto text-xs text-muted-foreground" role="status">资源状态：暂不支持</div>;
-  }
-  const items = [
-    [CpuIcon, "CPU", metrics.cpu.percent],
-    [MemoryStickIcon, "内存", metrics.memory.percent],
-    [HardDriveIcon, "磁盘", metrics.data_disk.percent],
-  ] as const;
-  return (
-    <div className="ml-auto flex min-w-0 items-center justify-end gap-3 text-xs text-muted-foreground" role="status" aria-live="polite">
-      <span className="shrink-0 font-medium">容器资源</span>
-      {items.map(([Icon, label, value]) => (
-        <div key={label} className="w-24 min-w-0" title={`${label} ${value.toFixed(1)}%`}>
-          <div className="mb-1 flex items-center justify-between gap-1 text-[10px]">
-            <span className="inline-flex items-center gap-1"><Icon className="size-3" aria-hidden="true" />{label}</span>
-            <span className="tabular-nums">{value.toFixed(1)}%</span>
-          </div>
-          <Progress
-            value={value}
-            className="h-2 bg-muted [&_[data-slot=progress-indicator]]:bg-slate-500 dark:[&_[data-slot=progress-indicator]]:bg-slate-400"
-          />
-        </div>
-      ))}
-    </div>
-  );
-}
-
 // ── sub-components ────────────────────────────────────────────────────────────
 
 function LiveDot({ className }: { className?: string }) {
@@ -184,14 +164,7 @@ export default function DashboardPage() {
 
   React.useEffect(() => {
     let alive = true;
-    const load = async () => {
+    const load = async () => { try { const m = await api.systemMetrics(); if (alive) setSystemMetrics(m); } catch { /* retry */ } };
-      try {
-        const next = await api.systemMetrics();
-        if (alive) setSystemMetrics(next);
-      } catch {
-        /* retry on the next interval */
-      }
-    };
     void load();
     const timer = setInterval(load, 5000);
     return () => { alive = false; clearInterval(timer); };
@@ -544,13 +517,10 @@ export default function DashboardPage() {
     <div className="flex flex-1 flex-col gap-4 pb-6">
       {/* ── Header ── */}
       <div>
-        <div className="flex items-center gap-6">
         <div>
           <h1 className="text-lg font-semibold tracking-tight">总览</h1>
           <p className="text-xs text-muted-foreground">系统全局状态 · 实时刷新</p>
         </div>
-          <SystemResourceStatus metrics={systemMetrics} />
-        </div>
       </div>
 
       {/* ── Row 1: 5 stat cards ── */}
@@ -1181,6 +1151,30 @@ export default function DashboardPage() {
         <Card className="p-4">
           <SectionTitle icon={ShieldCheckIcon}>系统状态</SectionTitle>
 
+          {systemMetrics && (
+            <div className="mb-3 rounded-lg border bg-muted/20 p-3">
+              <div className="mb-2 flex items-center justify-between">
+                <span className="text-[10px] font-medium">容器资源</span>
+                <span className="text-[9px] text-muted-foreground">每 5 秒刷新</span>
+              </div>
+              <div className="grid grid-cols-3 gap-2">
+                {([
+                  [CpuIcon, "CPU", systemMetrics.cpu],
+                  [MemoryStickIcon, "内存", systemMetrics.memory],
+                  [HardDriveIcon, "磁盘", systemMetrics.data_disk],
+                ] as const).map(([Icon, label, metric]) => (
+                  <div key={label} className="min-w-0">
+                    <div className="mb-1 flex items-center gap-1 text-[9px] text-muted-foreground"><Icon className="size-3" />{label}</div>
+                    <Progress value={metric.percent} className="h-1.5" />
+                    <div className="mt-1 truncate text-[9px] tabular-nums">{metric.percent.toFixed(1)}%</div>
+                    {label !== "CPU" && <div className="truncate text-[9px] text-muted-foreground">{fmtBytes(metric.used_bytes)} / {fmtBytes(metric.total_bytes)}</div>}
+                  </div>
+                ))}
+              </div>
+              <div className="mt-2 text-[9px] text-muted-foreground">监控范围：{systemMetrics.scope === "container" ? "ARTEX 容器" : "当前进程（非容器运行）"}</div>
+            </div>
+          )}
+
           <div className="flex flex-col gap-2">
             <div className="flex items-center justify-between rounded-lg border bg-muted/20 px-3 py-2">
               <div className="text-[10px] text-muted-foreground">LLM 配置</div>

web/src/app/(main)/function/findings/detail/page.tsx

@@ -72,7 +72,6 @@ function FindingDetailInner() {
   const [tab, setTab] = React.useState("overview");
   const [reportGenerating, setReportGenerating] = React.useState(false);
   const [autoChatOpen, setAutoChatOpen] = React.useState(false);
-  const [reportChatOpen, setReportChatOpen] = React.useState(false);
   const title = finding?.name || finding?.vulnclass || "未分类";
 
   const load = React.useCallback(() => {
@@ -191,12 +190,6 @@ function FindingDetailInner() {
             <BotIcon data-icon="inline-start" />
             询问 Auto Agent
           </Button>
-          {!finding.inherited ? (
-            <Button variant="outline" size="sm" onClick={() => setReportChatOpen(true)} title="打开当前漏洞报告撰写对话">
-              <FileTextIcon data-icon="inline-start" />
-              调整报告
-            </Button>
-          ) : null}
           {finding.inherited && finding.source_task_id && (
             <Badge variant="outline">来源任务 #{finding.source_task_id} · 只读</Badge>
           )}
@@ -417,17 +410,6 @@ function FindingDetailInner() {
         open={autoChatOpen}
         onOpenChange={setAutoChatOpen}
       />
-      <FindingAutoChat
-        findingId={finding.id}
-        findingTitle={title}
-        agentKey="reporter"
-        agentLabel="报告撰写 Agent"
-        promptPlaceholder="描述要如何调整漏洞报告…"
-        modal
-        initialConversationId={finding.report_conversation_id}
-        open={reportChatOpen}
-        onOpenChange={setReportChatOpen}
-      />
     </>
   );
 }

web/src/app/(main)/function/findings/page.tsx

@@ -923,7 +923,7 @@ export default function FindingsPage() {
           })}
         </div>
 
-        <div className="scrollbar-none flex min-w-0 flex-nowrap items-center gap-2 overflow-x-auto pb-1">
+        <div className="flex min-w-0 flex-nowrap items-center gap-2 overflow-x-auto pb-1">
           <InputGroup className="w-72 shrink-0">
             <InputGroupInput
               type="search"

web/src/components/approval-records.tsx

@@ -65,28 +65,6 @@ function originLabel(row: InterceptApprovalRow) {
   return "—";
 }
 
-// Background task runs carry a pool label such as "work#2 · #2770", while
-// conversation-backed runs carry the agent key (for example "reporter").
-// Present a stable, human-readable agent label in both cases.
-function agentLabel(row: InterceptApprovalRow) {
-  const key = (row.conv_agent_key || "").trim().toLowerCase();
-  const labels: Record<string, string> = {
-    auto: "自动 Agent",
-    mainagent: "主 Agent",
-    planner: "规划 Agent",
-    worker: "执行 Worker",
-    reporter: "报告编写",
-    retester: "复测 Agent",
-    pentest: "渗透测试 Agent",
-  };
-  if (key && labels[key]) return labels[key];
-  const raw = (row.agent_name || "").trim();
-  if (/^work#\d+(?:\s|$)/i.test(raw)) return "执行 Worker";
-  const rawKey = raw.toLowerCase();
-  if (labels[rawKey]) return labels[rawKey];
-  return raw || "未知 Agent";
-}
-
 function ApprovalOrigin({ row, detail = false }: { row: InterceptApprovalRow; detail?: boolean }) {
   const [locating, setLocating] = React.useState(false);
   const label = detail && row.task_id ? `任务 ${row.task_id}` : originLabel(row);
@@ -476,7 +454,7 @@ export function ApprovalDetail({
               <SideQuestionButton side={side} />
             </div>
             <CodeBlock
-              label={`${agentLabel(current)} · 工具请求`}
+              label={`${current.agent_name || current.conv_agent_key || "Agent"} · 工具请求`}
               text={JSON.stringify(row.tool_input ?? {}, null, 2)}
             />
             {command ? (
@@ -748,8 +726,8 @@ function ApprovalTable({
                     <span className="truncate" title={originLabel(row)}>
                       <ApprovalOrigin row={row} />
                     </span>
-                    <span className="truncate text-muted-foreground text-xs" title={agentLabel(row)}>
+                    <span className="truncate text-muted-foreground text-xs">
-                      Agent：{agentLabel(row)}
+                      {row.agent_name || row.conv_agent_key}
                     </span>
                   </div>
                 </TableCell>

web/src/components/finding-auto-chat.tsx

@@ -22,21 +22,11 @@ function mergeActivities(oldItems: Activity[], incoming: Activity[]) {
 export function FindingAutoChat({
   findingId,
   findingTitle,
-  agentKey = "auto",
-  agentLabel = "Auto Agent",
-  promptPlaceholder = "询问这个漏洞…",
-  modal = false,
-  initialConversationId,
   open,
   onOpenChange,
 }: {
     findingId: string;
   findingTitle: string;
-  agentKey?: string;
-  agentLabel?: string;
-  promptPlaceholder?: string;
-  modal?: boolean;
-  initialConversationId?: number;
   open: boolean;
   onOpenChange: (open: boolean) => void;
 }) {
@@ -51,9 +41,8 @@ export function FindingAutoChat({
   const [historyOpen, setHistoryOpen] = React.useState(false);
   const [history, setHistory] = React.useState<Conversation[]>([]);
   const cursor = React.useRef(0);
-  const chatViewportRef = React.useRef<HTMLDivElement | null>(null);
   const safeTitle = findingTitle.replace(/[\[\]\r\n]/g, " ").trim().slice(0, 100);
-  const storageKey = `artex.finding.${agentKey}-conversation.${findingId}`;
+  const storageKey = `artex.finding.auto-conversation.${findingId}`;
 
   const createConversation = React.useCallback(async () => {
     setManualEmpty(false);
@@ -61,7 +50,7 @@ export function FindingAutoChat({
     setRunning(false);
     setLoading(true);
     try {
-      const created = await api.createConversation(agentKey, `漏洞 #${findingId} · ${safeTitle}`);
+      const created = await api.createConversation("auto", `漏洞 #${findingId} · ${safeTitle}`);
       window.localStorage.setItem(storageKey, String(created.id));
       setConversation(created);
     } catch (error) {
@@ -69,19 +58,15 @@ export function FindingAutoChat({
     } finally {
       setLoading(false);
     }
-  }, [agentKey, findingId, safeTitle, storageKey]);
+  }, [findingId, safeTitle, storageKey]);
 
   React.useEffect(() => {
     if (!open || conversation || manualEmpty) return;
-    if (initialConversationId && initialConversationId > 0) {
+    const storedID = Number(window.localStorage.getItem(storageKey));
-      setConversation({ id: initialConversationId, agent_key: agentKey, title: `漏洞 #${findingId} · ${safeTitle}`, created_at: "", updated_at: "" });
-      return;
-    }
-    const storedID = agentKey === "auto" ? Number(window.localStorage.getItem(storageKey)) : 0;
     if (Number.isSafeInteger(storedID) && storedID > 0) {
       setConversation({
         id: storedID,
-        agent_key: agentKey,
+        agent_key: "auto",
         title: `漏洞 #${findingId} · ${safeTitle}`,
         created_at: "",
         updated_at: "",
@@ -89,7 +74,7 @@ export function FindingAutoChat({
       return;
     }
     void createConversation();
-  }, [conversation, createConversation, initialConversationId, manualEmpty, open, safeTitle, storageKey]);
+  }, [conversation, createConversation, manualEmpty, open, safeTitle, storageKey]);
 
   React.useEffect(() => {
     if (!historyOpen && !running) return;
@@ -100,7 +85,7 @@ export function FindingAutoChat({
         const items = await api.conversations();
         if (!live) return;
         const prefix = `漏洞 #${findingId} ·`;
-        setHistory(items.filter((item) => item.agent_key === agentKey && item.title.startsWith(prefix)));
+        setHistory(items.filter((item) => item.agent_key === "auto" && item.title.startsWith(prefix)));
       } catch {
         if (live && historyOpen) setHistory([]);
       } finally {
@@ -112,7 +97,7 @@ export function FindingAutoChat({
       live = false;
       clearTimeout(timer);
     };
-  }, [agentKey, findingId, historyOpen, running]);
+  }, [findingId, historyOpen, running]);
 
   React.useEffect(() => {
     if (!open || !conversation) return;
@@ -137,18 +122,6 @@ export function FindingAutoChat({
     };
   }, [conversation, open, storageKey]);
 
-  React.useEffect(() => {
-    if (!open || !conversation || loading || !messages.length) return;
-    const viewport = chatViewportRef.current;
-    if (!viewport) return;
-    const key = `artex.conversation-scroll.${conversation.id}`;
-    const saved = window.sessionStorage.getItem(key);
-    requestAnimationFrame(() => {
-      if (saved != null) viewport.scrollTop = Number(saved) || 0;
-      else viewport.scrollTop = viewport.scrollHeight;
-    });
-  }, [conversation, loading, messages.length, open]);
-
   React.useEffect(() => {
     if (!open || !conversation || !running) return;
     let live = true;
@@ -230,17 +203,13 @@ export function FindingAutoChat({
   if (!open) return null;
 
   return (
-    <div className={modal
+    <div className="pointer-events-none fixed inset-x-0 top-20 z-40 flex justify-end px-4 pb-4 sm:px-6">
-      ? "pointer-events-none fixed inset-0 z-50 flex items-center justify-center bg-black/35 p-4"
+      <section className="pointer-events-auto flex min-w-0 h-[calc(100svh-6rem)] w-[min(520px,calc(100vw-2rem))] flex-col overflow-hidden rounded-xl border bg-background shadow-2xl">
-      : "pointer-events-none fixed inset-x-0 top-20 z-40 flex justify-end px-4 pb-4 sm:px-6"}>
-      <section className={modal
-        ? "pointer-events-auto flex min-w-0 h-[min(760px,calc(100svh-2rem))] w-[min(760px,calc(100vw-2rem))] flex-col overflow-hidden rounded-xl border bg-background shadow-2xl"
-        : "pointer-events-auto flex min-w-0 h-[calc(100svh-6rem)] w-[min(520px,calc(100vw-2rem))] flex-col overflow-hidden rounded-xl border bg-background shadow-2xl"}>
         <header className="flex items-center gap-2 border-b p-3">
           <BotIcon className="size-4 text-primary" />
           <div className="min-w-0 flex-1">
             <p className="flex items-center gap-2 font-medium">
-              {agentLabel}
+              Auto Agent
               {running && <span className="inline-flex items-center gap-1 rounded bg-blue-500/15 px-1.5 py-0.5 text-blue-600 text-xs"><span className="size-1.5 animate-pulse rounded-full bg-blue-500" />运行中</span>}
             </p>
             <p className="truncate text-muted-foreground text-xs">漏洞 #{findingId} · {safeTitle}</p>
@@ -284,13 +253,7 @@ export function FindingAutoChat({
             <XIcon />
           </Button>
         </header>
-        <div
+        <div className="min-h-0 min-w-0 flex-1 overflow-x-hidden overflow-y-auto p-3">
-          ref={chatViewportRef}
-          onScroll={(event) => {
-            if (conversation) window.sessionStorage.setItem(`artex.conversation-scroll.${conversation.id}`, String(event.currentTarget.scrollTop));
-          }}
-          className="min-h-0 min-w-0 flex-1 overflow-x-hidden overflow-y-auto p-3"
-        >
           <div className="w-full min-w-0 max-w-full">
             {loading ? (
               <div className="flex items-center justify-center py-10 text-muted-foreground text-sm">
@@ -311,7 +274,7 @@ export function FindingAutoChat({
               inputGroup
               onValueChange={setInput}
               disabled={!conversation || loading || sending || running}
-              placeholder={promptPlaceholder}
+              placeholder="询问这个漏洞…"
               onKeyDown={(event) => {
                 if (event.key === "Enter" && !event.shiftKey && !event.nativeEvent.isComposing) {
                   event.preventDefault();

web/src/components/markdown.tsx

@@ -18,8 +18,6 @@ function AuthenticatedImage({
   const [captureTimestamp, setCaptureTimestamp] = React.useState<string | null>(null);
   const [zoomed, setZoomed] = React.useState(false);
   const [zoomScale, setZoomScale] = React.useState(1);
-  const [pan, setPan] = React.useState({ x: 0, y: 0 });
-  const dragRef = React.useRef<{ x: number; y: number; panX: number; panY: number } | null>(null);
   const imageSrc = typeof src === "string" ? src : undefined;
 
   React.useEffect(() => {
@@ -31,7 +29,6 @@ function AuthenticatedImage({
       setCaptureTimestamp(null);
       setZoomed(false);
       setZoomScale(1);
-      setPan({ x: 0, y: 0 });
       return () => {
         cancelled = true;
       };
@@ -78,55 +75,31 @@ function AuthenticatedImage({
         onClick={() => renderedSrc && setZoomed(true)}
         aria-label="放大查看报告截图"
       >
-        <img {...props} src={renderedSrc} alt={alt || "报告截图，点击放大"} draggable={false} onDragStart={(event) => event.preventDefault()} />
+        <img {...props} src={renderedSrc} alt={alt || "报告截图，点击放大"} />
         {timestamp}
       </button>
       <Dialog
         open={zoomed}
         onOpenChange={(next) => {
           setZoomed(next);
-          if (!next) {
+          if (!next) setZoomScale(1);
-            setZoomScale(1);
-            setPan({ x: 0, y: 0 });
-          }
         }}
       >
         <DialogContent
           showCloseButton
           className="flex max-h-[96dvh] max-w-[96vw] items-center justify-center overflow-hidden bg-black/85 p-3 backdrop-blur-sm sm:max-w-[96vw]"
         >
-          <div
+          <div className="relative flex max-h-[90dvh] max-w-full items-center justify-center overflow-auto">
-            className="relative flex h-[90dvh] w-[90vw] max-w-full items-center justify-center overflow-hidden"
+            <div className="relative inline-block origin-center transition-transform duration-150" style={{ transform: `scale(${zoomScale})` }}>
-            onPointerDown={(event) => {
-              if (zoomScale <= 1 || event.button !== 0) return;
-              event.currentTarget.setPointerCapture(event.pointerId);
-              dragRef.current = { x: event.clientX, y: event.clientY, panX: pan.x, panY: pan.y };
-            }}
-            onPointerMove={(event) => {
-              const drag = dragRef.current;
-              if (!drag) return;
-              setPan({ x: drag.panX + event.clientX - drag.x, y: drag.panY + event.clientY - drag.y });
-            }}
-            onPointerUp={(event) => {
-              dragRef.current = null;
-              event.currentTarget.releasePointerCapture?.(event.pointerId);
-            }}
-            onPointerCancel={() => { dragRef.current = null; }}
-            style={{ cursor: zoomScale > 1 ? (dragRef.current ? "grabbing" : "grab") : "default" }}
-          >
-            <div className="relative inline-block origin-center" style={{ transform: `translate(${pan.x}px, ${pan.y}px) scale(${zoomScale})` }}>
               <img
                 src={renderedSrc}
                 alt={alt || "报告截图"}
-                draggable={false}
-                onDragStart={(event) => event.preventDefault()}
                 className="max-h-[90dvh] max-w-[90vw] rounded-md object-contain"
               />
               {timestamp}
             </div>
           </div>
           <div className="absolute top-3 left-3 z-10 flex items-center gap-1 rounded-lg bg-black/60 p-1 backdrop-blur-sm">
-            <span className="px-2 text-xs font-medium text-white tabular-nums">{Math.round(zoomScale * 100)}%</span>
             <Button
               variant="ghost"
               size="icon-sm"

web/src/components/packet-code-editor.tsx

@@ -2,8 +2,14 @@
 
 import * as React from "react";
 import { EditorState } from "@codemirror/state";
-import { drawSelection, EditorView, highlightActiveLine, keymap, lineNumbers } from "@codemirror/view";
+import {
-import { defaultKeymap, history, historyKeymap, indentWithTab } from "@codemirror/commands";
+  drawSelection,
+  EditorView,
+  highlightActiveLine,
+  keymap,
+  lineNumbers,
+} from "@codemirror/view";
+import { defaultKeymap, indentWithTab } from "@codemirror/commands";
 import { defaultHighlightStyle, HighlightStyle, StreamLanguage, syntaxHighlighting } from "@codemirror/language";
 import { tags } from "@lezer/highlight";
 
@@ -31,31 +37,17 @@ const httpLanguage = StreamLanguage.define({
   },
 });
 
-const packetTheme = EditorView.theme(
+const packetTheme = EditorView.theme({
-  {
+  "&": { height: "100%", backgroundColor: "transparent", color: "var(--foreground)" },
-    "&": { height: "100%", backgroundColor: "transparent", color: "var(--foreground)" },
+  ".cm-scroller": { overflow: "auto", fontFamily: "var(--font-mono)", fontSize: "0.75rem", fontWeight: "500", lineHeight: "1.65rem" },
-    ".cm-scroller": {
+  ".cm-content": { minHeight: "100%", padding: "0.5rem 0.5rem" },
-      overflow: "auto",
+  ".cm-gutters": { backgroundColor: "transparent", color: "var(--muted-foreground)", border: "0", borderRight: "1px solid var(--border)" },
-      fontFamily: "var(--font-mono)",
+  ".cm-lineNumbers .cm-gutterElement": { minWidth: "2rem", padding: "0 0.5rem" },
-      fontSize: "0.75rem",
+  ".cm-activeLine": { backgroundColor: "transparent" },
-      fontWeight: "500",
+  ".cm-activeLineGutter": { backgroundColor: "transparent" },
-      lineHeight: "1.65rem",
+  ".cm-selectionBackground, ::selection": { backgroundColor: "#c9d2e3" },
-    },
+  ".cm-cursor": { borderLeftColor: "#222" },
-    ".cm-content": { minHeight: "100%", padding: "0.5rem 0.5rem" },
+}, { dark: false });
-    ".cm-gutters": {
-      backgroundColor: "transparent",
-      color: "var(--muted-foreground)",
-      border: "0",
-      borderRight: "1px solid var(--border)",
-    },
-    ".cm-lineNumbers .cm-gutterElement": { minWidth: "2rem", padding: "0 0.5rem" },
-    ".cm-activeLine": { backgroundColor: "transparent" },
-    ".cm-activeLineGutter": { backgroundColor: "transparent" },
-    ".cm-selectionBackground, ::selection": { backgroundColor: "#c9d2e3" },
-    ".cm-cursor": { borderLeftColor: "#222" },
-  },
-  { dark: false },
-);
 
 export function PacketCodeEditor({
   value,
@@ -84,8 +76,7 @@ export function PacketCodeEditor({
         lineNumbers(),
         drawSelection(),
         highlightActiveLine(),
-        history(),
+        keymap.of([...defaultKeymap, indentWithTab]),
-        keymap.of([...defaultKeymap, ...historyKeymap, indentWithTab]),
         httpLanguage,
         syntaxHighlighting(defaultHighlightStyle),
         syntaxHighlighting(packetHighlight),

web/src/components/repeater/repeater-workspace.tsx

@@ -112,7 +112,7 @@ export function RepeaterWorkspace() {
         </div>
       </div>
       <div className="flex min-h-10 min-w-0 items-center rounded-md border bg-muted/20 p-1">
-        <div className="scrollbar-none flex min-w-0 flex-1 items-center gap-1 overflow-x-auto">
+        <div className="flex min-w-0 flex-1 items-center gap-1 overflow-x-auto">
           {workspace.tabs.map((tab) => {
             const selected = tab.id === workspace.activeTabId;
             return (

web/src/components/ui/input-group.tsx

@@ -14,7 +14,7 @@ function InputGroup({ className, ...props }: React.ComponentProps<"div">) {
       data-slot="input-group"
       role="group"
       className={cn(
-        "group/input-group relative flex h-8 w-full min-w-0 items-center rounded-lg border border-input transition-colors outline-none in-data-[slot=combobox-content]:focus-within:border-inherit in-data-[slot=combobox-content]:focus-within:ring-0 has-disabled:bg-input/50 has-disabled:opacity-50 has-[[data-slot=input-group-control]:focus-visible]:border-ring has-[[data-slot=input-group-control]:focus-visible]:ring-1 has-[[data-slot=input-group-control]:focus-visible]:ring-ring/30 has-[[data-slot][aria-invalid=true]]:border-destructive has-[[data-slot][aria-invalid=true]]:ring-3 has-[[data-slot][aria-invalid=true]]:ring-destructive/20 has-[>[data-align=block-end]]:h-auto has-[>[data-align=block-end]]:flex-col has-[>[data-align=block-start]]:h-auto has-[>[data-align=block-start]]:flex-col has-[>textarea]:h-auto dark:bg-input/30 dark:has-disabled:bg-input/80 dark:has-[[data-slot][aria-invalid=true]]:ring-destructive/40 has-[>[data-align=block-end]]:[&>input]:pt-3 has-[>[data-align=block-start]]:[&>input]:pb-3 has-[>[data-align=inline-end]]:[&>input]:pr-1.5 has-[>[data-align=inline-start]]:[&>input]:pl-1.5",
+        "group/input-group relative flex h-8 w-full min-w-0 items-center rounded-lg border border-input transition-colors outline-none in-data-[slot=combobox-content]:focus-within:border-inherit in-data-[slot=combobox-content]:focus-within:ring-0 has-disabled:bg-input/50 has-disabled:opacity-50 has-[[data-slot=input-group-control]:focus-visible]:border-ring has-[[data-slot=input-group-control]:focus-visible]:ring-3 has-[[data-slot=input-group-control]:focus-visible]:ring-ring/50 has-[[data-slot][aria-invalid=true]]:border-destructive has-[[data-slot][aria-invalid=true]]:ring-3 has-[[data-slot][aria-invalid=true]]:ring-destructive/20 has-[>[data-align=block-end]]:h-auto has-[>[data-align=block-end]]:flex-col has-[>[data-align=block-start]]:h-auto has-[>[data-align=block-start]]:flex-col has-[>textarea]:h-auto dark:bg-input/30 dark:has-disabled:bg-input/80 dark:has-[[data-slot][aria-invalid=true]]:ring-destructive/40 has-[>[data-align=block-end]]:[&>input]:pt-3 has-[>[data-align=block-start]]:[&>input]:pb-3 has-[>[data-align=inline-end]]:[&>input]:pr-1.5 has-[>[data-align=inline-start]]:[&>input]:pl-1.5",
         className
       )}
       {...props}

web/src/lib/types.ts

@@ -529,7 +529,6 @@ export interface Finding {
   summary: string;
   evidence: string;
   report?: string; // 详细报告(Markdown);仅详情接口返回,列表为空
-  report_conversation_id?: number;
   intent_id?: string;
   param_id?: string;
   task_id?: string;
@@ -1339,8 +1338,7 @@ export interface SystemMetricValue {
 }
 
 export interface SystemMetrics {
-  scope: "container" | "unsupported" | string;
+  scope: "container" | string;
-  supported: boolean;
   timestamp: string;
   container_metrics: boolean;
   cpu: SystemMetricValue;