Autumn-27 72a52e9202 fix: 修复合并后审查发现的 6 个中/高问题 ...

#102 高:证据正文下载在全局 advisory lock 事务内 io.Copy 给 HTTP 客户端,
verifyFile 又要整读一遍算 SHA-256 —— 一次大文件下载或慢客户端就会挂住
全进程的证据写入。改为事务内只解析绑定元数据(Store.Binding),出锁后再校验
与串流;blob 内容寻址且 GC 有 24h 宽限,已打开的 fd 也不受 unlink 影响。

#102 高:traffic_evidence_snapshots 的 url/req_head/resp_head 直接来自目标
原始报文,未清洗就写 PG TEXT。目标返回非 UTF-8 头(GBK filename)或 NUL 会让
RecordFindingTx 整个事务回滚,已确认的漏洞完全不落库。新增
TrafficEvidenceSnapshot.Normalize(),在算 ID 之前套用仓库既有的 utf8Clean,
保证哈希与入库字节一致。

#102 中:自动绑定默认关闭,reporter 便不会传 evidence_version,
SetFindingReportVersionByNodeID 按 legacy 语义写 -1,报告永久显示「待更新」
且 UI 无处清除;老库还因 reporter_agent_seed_v1 守卫拿不到新触发文案。
触发消息改为无条件先读 get_finding_traffic(只读工具,不依赖捕获开关)并回传
版本,并加一次性迁移刷新老库中未被用户改动的默认文案。

#102 中:开关关闭时 report_finding 只要收到 traffic_refs/evidence_hint_id
就在写入前报错,模型幻觉出多余字段即丢掉一个真实漏洞。改为忽略这两个参数
照常登记,由既有的 evidence_status=not_bound 说明未绑定。

#101 中:删掉 RuleID!=0 判断后,每次模型放行都写一行带完整审计快照的
intercept_pending(单行最坏 24×8KiB 上下文 + 32KiB 输入)。开启兜底裁判的
渗透任务会灌入数百 MB,并经 task_archives 的 SELECT * 进入归档。放行行改为
只留决策元数据与执行结果,丢掉重放快照;ask/deny 路径不变。

#103 中:FindingRetestForConversation 出错时在收尾 defer 注册前就 return,
复测行永远停在 pending —— 漏洞列表常驻「复测中」,后续发起复测被去重拦下,
只有重启才能清。新增 FailPendingRetestForConversation 按会话 ID 收尾。

2026-09-10 10:15:24 -04:00

..

activity_page_test.go

feat(activity): 任务会话历史反向分页 + SSE 可靠性整改

2026-08-11 09:13:12 -04:00

asset_dsl.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

assets_test.go

fix(assets): ip 字段拒收主机名,并告诉调用方该怎么改

2026-08-24 10:32:10 -04:00

assets.go

fix(assets): ip 字段拒收主机名,并告诉调用方该怎么改

2026-08-24 10:32:10 -04:00

commands.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

companies_test.go

修复

2026-08-28 07:37:24 +08:00

companies.go

feat(assets): 去掉企业资产范围 256 条规则上限

2026-08-31 11:22:34 -04:00

company_lock_test.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

company_scope_consistency_test.go

feat(assets): 去掉企业资产范围 256 条规则上限

2026-08-31 11:22:34 -04:00

company_scope_test.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

company_scope.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

config_max_tokens_test.go

feat(llm): 模型配置新增输出上限,支持 max_completion_tokens 字段名

2026-08-31 12:20:31 -04:00

config_test.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

config.go

feat(llm): 五层重试的次数与间隔可配

2026-09-09 13:35:04 -04:00

constants.go

feat(digest): 探索图冷节点压缩(cold-digest)

2026-09-09 11:52:15 -04:00

constraints.go

同步

2026-08-24 14:14:15 +08:00

conversation_pin_test.go

feat(chat): add conversation pinning and rename controls

2026-08-24 19:29:38 +08:00

conversation.go

1、将排序做到border-b transition-colors hover:bg-muted/50 has-aria-expanded:bg-muted/50 data-[state=selected]:bg-muted里，无需单独做个button 2、指定重命名使用ICO，无需使用菜单

2026-08-25 14:56:15 +08:00

customtool_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

db_test.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

db.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

digest.go

feat(digest): 探索图冷节点压缩(cold-digest)

2026-09-09 11:52:15 -04:00

exploration_sources_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

exploration_sources.go

chore: sync upstream v0.3.6 changes

2026-08-28 14:03:07 +08:00

exploration_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

exploration_tokens_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

exploration.go

feat: 增加 Agent 流量绑定开关并补齐证据交接

2026-09-10 14:08:40 +08:00

finding_assets_test.go

feat(findings): 发现页新增「按资产」视图

2026-08-31 10:58:32 -04:00

finding_assets.go

fix(findings): 补齐「按资产」视图的 mock,修两处标签重复

2026-08-31 11:10:47 -04:00

finding_retests_test.go

feat: 支持会话级漏洞复测与运行状态展示

2026-09-10 16:06:08 +08:00

finding_retests.go

fix: 修复合并后审查发现的 6 个中/高问题

2026-09-10 10:15:24 -04:00

finding_traffic_archive_test.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

finding_traffic_archive.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

finding_traffic.go

fix: 修复合并后审查发现的 6 个中/高问题

2026-09-10 10:15:24 -04:00

findings_test.go

归档

2026-08-28 12:56:29 +08:00

findings.go

Merge PR #102: feat: 支持漏洞关联多条流量证据

2026-09-10 10:04:53 -04:00

intent_admission.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

intent_control_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

intercept_detail_test.go

feat(intercept): 增加审批记录详情与执行审计

2026-09-10 15:10:50 +08:00

intercept_detail.go

feat(intercept): 增加审批记录详情与执行审计

2026-09-10 15:10:50 +08:00

intercept.go

feat(intercept): 增加审批记录详情与执行审计

2026-09-10 15:10:50 +08:00

llm_records_migrate_test.go

feat(llmrec): 录制 LLM 请求/响应 HTTP 原文

2026-08-25 09:40:05 -04:00

llm_usage.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

llmhealth.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

llmretry_test.go

feat(llm): 五层重试的次数与间隔可配

2026-09-09 13:35:04 -04:00

llmretry.go

feat(llm): 五层重试的次数与间隔可配

2026-09-09 13:35:04 -04:00

logs.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

nkey.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

schema.sql

Merge PR #102: feat: 支持漏洞关联多条流量证据

2026-09-10 10:04:53 -04:00

settings.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

skill_usage_test.go

feat(skills): track usage and missing dependencies

2026-08-24 19:30:14 +08:00

skill_usage.go

归档

2026-08-28 12:56:29 +08:00

task_archive_aggregate_stats.go

归档

2026-08-28 12:56:29 +08:00

task_archives_restore.go

Merge PR #102: feat: 支持漏洞关联多条流量证据

2026-09-10 10:04:53 -04:00

task_archives_test.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

task_archives.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

task_assets_context.go

fix(assets): 企业归属重算不再被单行非法 ip 打挂,并明确告知是哪些资产

2026-08-24 10:16:17 -04:00

task_assets_test.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

task_assets.go

style(db): 对齐 ICP 范围匹配 SQL 缩进,并注明手工挂载资产的语句顺序依赖

2026-08-24 08:55:55 -04:00

task_categories_test.go

feat(tasks): 任务列表支持批量修改分类

2026-08-24 09:16:44 -04:00

task_categories.go

feat(tasks): 任务列表支持批量修改分类

2026-08-24 09:16:44 -04:00

task_context_lock_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_context_unit_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_context.go

feat(llm): 任务 LLM 配置链改为任何状态都可修改

2026-08-31 09:26:33 -04:00

task_delete_concurrency_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_list_performance_test.go

修复BUG： 1、当存在较多任务时，系统会发生卡顿，加载对话或者加载界面时候存在明显卡顿，优化性能找出问题

2026-08-28 08:00:36 +08:00

task_metadata_test.go

1、将排序做到border-b transition-colors hover:bg-muted/50 has-aria-expanded:bg-muted/50 data-[state=selected]:bg-muted里，无需单独做个button 2、指定重命名使用ICO，无需使用菜单

2026-08-25 14:56:15 +08:00

task_queue_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_scope_test.go

fix(scope): add_task_scope 支持 host:port 目标,入库前剥端口

2026-08-09 09:09:59 -04:00

task_scope.go

fix(assets): 企业归属重算不再被单行非法 ip 打挂,并明确告知是哪些资产

2026-08-24 10:16:17 -04:00

task_source_limit_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_templates_test.go

feat(tasks): add categories templates and batch controls

2026-08-24 19:29:46 +08:00

task_templates.go

feat(tasks): add categories templates and batch controls

2026-08-24 19:29:46 +08:00

tasks_test.go

feat(llm): 任务 LLM 配置链改为任何状态都可修改

2026-08-31 09:26:33 -04:00

tasks.go

修复BUG： 1、当存在较多任务时，系统会发生卡顿，加载对话或者加载界面时候存在明显卡顿，优化性能找出问题

2026-08-28 08:00:36 +08:00

testmain_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

tool_usage_test.go

抽屉优化

2026-08-25 12:05:26 +08:00

tool_usage.go

归档

2026-08-28 12:56:29 +08:00

tools.go

抽屉优化

2026-08-25 12:05:26 +08:00

triggers.go

feat(trigger): 新增"任务创建"触发机制(on_task_create)

2026-08-09 02:19:29 -04:00