From aafab015e7f7dac2692d652816ef24edfaf91129 Mon Sep 17 00:00:00 2001
From: Autumn-27 <53844290+Autumn-27@users.noreply.github.com>
Date: Thu, 13 Aug 2026 12:29:01 -0400
Subject: [PATCH] =?UTF-8?q?feat(bench):=20seed=20=E8=B5=B7=E5=A7=8B?=
 =?UTF-8?q?=E6=B8=85=E7=A9=BA=E5=85=A8=E9=83=A8=E6=8B=A6=E6=88=AA=E8=A7=84?=
 =?UTF-8?q?=E5=88=99,=E6=94=BE=E5=BC=80=20CTF=20=E6=B8=97=E9=80=8F?=
 =?UTF-8?q?=E6=93=8D=E4=BD=9C=E9=98=B2=E8=AF=AF=E6=8B=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bench/seed.sh    | 16 ++++++++++++++++
 bench/seed_v2.sh | 16 ++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/bench/seed.sh b/bench/seed.sh
index 2f52dbf..134c1be 100644
--- a/bench/seed.sh
+++ b/bench/seed.sh
@@ -19,6 +19,22 @@ AUTH="Authorization: Bearer $TOKEN"
 CT="Content-Type: application/json"
 post() { curl -s -o /dev/null -w "  $2 %{http_code}\n" -X "${3:-POST}" "$API$1" -H "$AUTH" -H "$CT" --data-binary @-; }
 
+# ---------- 0) 删除全部拦截规则 ----------
+# benchmark/CTF 解题会大量用到 DELETE 请求、清空类接口等操作，破坏性拦截规则会误拦
+# 这些正常渗透动作。这里逐条删除所有拦截规则(含内置)，放开防护，避免 worker 被 deny 卡住。
+# 无 bulk delete 接口，故先 list 再逐个 DELETE。
+del_all_intercept_rules() {
+  local rules ids id n=0
+  rules="$(curl -s "$API/api/intercept/rules" -H "$AUTH")"
+  ids="$(echo "$rules" | jq -r '(.rules // [])[] | .id')"
+  for id in $ids; do
+    curl -s -o /dev/null -X DELETE "$API/api/intercept/rules/$id" -H "$AUTH"
+    n=$((n+1))
+  done
+  log "已删除 $n 条拦截规则"
+}
+del_all_intercept_rules
+
 # ---------- 1) 自定义 agent（先建，后续绑定/提示词依赖它） ----------
 log "创建自定义 agent ..."
 echo '{"key":"tec_benchmark","name":"腾讯BENCHMARK自动化编排","description":"benchmark 自动化编排：拉题/建任务/推进/提交"}' | post /api/agents "agent tec_benchmark"
diff --git a/bench/seed_v2.sh b/bench/seed_v2.sh
index e1d39b4..8abb205 100644
--- a/bench/seed_v2.sh
+++ b/bench/seed_v2.sh
@@ -28,6 +28,22 @@ AUTH="Authorization: Bearer $TOKEN"
 CT="Content-Type: application/json"
 post() { curl -s -o /dev/null -w "  $2 %{http_code}\n" -X "${3:-POST}" "$API$1" -H "$AUTH" -H "$CT" --data-binary @-; }
 
+# ---------- 0) 删除全部拦截规则 ----------
+# benchmark/CTF 解题会大量用到 DELETE 请求、清空类接口等操作，破坏性拦截规则会误拦
+# 这些正常渗透动作。这里逐条删除所有拦截规则(含内置)，放开防护，避免 worker 被 deny 卡住。
+# 无 bulk delete 接口，故先 list 再逐个 DELETE。
+del_all_intercept_rules() {
+  local rules ids id n=0
+  rules="$(curl -s "$API/api/intercept/rules" -H "$AUTH")"
+  ids="$(echo "$rules" | jq -r '(.rules // [])[] | .id')"
+  for id in $ids; do
+    curl -s -o /dev/null -X DELETE "$API/api/intercept/rules/$id" -H "$AUTH"
+    n=$((n+1))
+  done
+  log "已删除 $n 条拦截规则"
+}
+del_all_intercept_rules
+
 # ---------- 1) 自定义 agent（仅 challenge_review；编排交给 scheduler.py） ----------
 log "创建自定义 agent（仅 challenge_review）..."
 echo '{"key":"challenge_review","name":"题目REVIEW","description":"重复题目经验总结：查历史、复用经验、注入 hint"}' | post /api/agents "agent challenge_review"