diff --git a/agent/tools.go b/agent/tools.go index 12c9dc8..edcdd3d 100644 --- a/agent/tools.go +++ b/agent/tools.go @@ -1947,6 +1947,9 @@ func (t *ToolSet) PlannerTools() []actool.CoreTool { t.addFinding(), // list_companies:查看企业列表 + scope + 资产数(拿 company_id / 理解归属范围)。 t.listCompanies(), + // list_assets:规划时按 DSL 检索全资产库(配合 list_untested_assets 的"范围内未测"视角, + // 补上"按域名/指纹/端口/状态码等条件在整库里查"的能力)。 + t.listAssets(), // add_company_scope:规划时可把域名/IP/CIDR/ICP/关键词纳入某公司的资产范围(自动认领命中资产)。 t.addCompanyScope(), // add_task_scope:主动把整根域/整公司/某子域/IP 纳入本任务测试范围(覆盖度分母)。 diff --git a/server/orchestration.go b/server/orchestration.go index cfd1c87..d963b5a 100644 --- a/server/orchestration.go +++ b/server/orchestration.go @@ -448,6 +448,7 @@ func (s *Server) seedOrchestrationTools() { s.refreshBuiltinToolSchemas() s.seedAutoDefaultBindings() s.seedPlannerDefaultBindings() + s.seedPlannerListAssetsBinding() s.seedCompanyScopeRebind() s.seedAutoReportFindingBinding() s.unbindGoalMetDefault() @@ -719,6 +720,23 @@ func (s *Server) seedPlannerDefaultBindings() { _ = s.m.pg.SetSetting(flag, "true") } +// seedPlannerListAssetsBinding adds "planner" to list_assets's binding ONCE +// (guarded by a settings flag), so existing DBs — whose list_assets row was seeded +// as auto/pentest-only — also let the planner query the asset store by DSL. Fresh +// DBs already get it via PlannerTools(); this only backfills without overriding a +// user unbind. +func (s *Server) seedPlannerListAssetsBinding() { + const flag = "planner_list_assets_v1" + if v, _, _ := s.m.pg.GetSetting(flag); v == "true" { + return + } + if err := s.m.pg.AddAgentToToolBinding("planner", []string{"list_assets"}); err != nil { + log.Printf("[planner] list_assets 默认绑定失败: %v", err) + return + } + _ = s.m.pg.SetSetting(flag, "true") +} + // seedCompanyScopeRebind changes add_company_scope's default binding ONCE on // existing DBs (guarded by a settings flag): the tool moves off worker and onto // planner — defining a company's asset scope is a planning/main/auto concern, not