Autumn-27 d5359e1f04 feat: 资产拦截接入执行链，新增任务级拦截/允许规则 ...

在 agent 下发意图(add_intent)与插入资产(insert_assets)两处接入资产闸门；
并新增任务级规则(拦截 block + 允许 allow 白名单)，创建任务时录入、任务详情
总览里可编辑。

- 匹配/执行(db/asset_intercept_match.go)：MatchAssetInterceptRules 纯匹配
  (exact/fuzzy 的 域名·IP·URL + CIDR，URL host 会拆出归类)；EvaluateAssetGate
  「先拦截后允许」闸门——命中拦截即禁止；未命中但存在启用的允许规则且都不命中→
  不允许测试；无启用允许规则则不启用白名单。附单元测试。
- 执行点：add_intent 命中即不下发意图；insert_assets 命中即跳过 Upsert 及
  AddAutoScope 副作用。均合并 全局∪任务级 规则。
- 任务级规则：表 task_intercept_rules(task_id FK CASCADE + action block/allow，
  幂等 ALTER 补旧库)；db/task_intercept.go 提供 List/Split/CRUD/事务插入；
  创建任务随 intercept_rules 提交；CRUD 路由 /api/tasks/{id}/intercept-rules。
- 前端：新建任务抽屉多行录入(拦截/允许 + 类型，用 NativeSelect 避免 Sheet 内
  下拉 portal 导致误关抽屉)；任务详情总览新增规则管理卡片(增删改+启用开关)。

2026-09-19 09:06:22 -04:00

..

assembly_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

assembly.go

fix(agent): 探索图工具在无任务上下文时拒绝而非 nil 崩溃

2026-09-14 13:56:56 -04:00

asset_intercept.go

feat: 新增资产拦截规则（全局黑名单）增删改查

2026-09-19 07:58:23 -04:00

assets_scope_test.go

feat(assets): 去掉企业资产范围 256 条规则上限

2026-08-31 11:22:34 -04:00

assets.go

feat(assets): 任务测试资产支持 DSL 搜索

2026-09-11 11:59:46 -04:00

auth.go

fix(security): jwt.key 移出可浏览工作区(存项目根,自动从 data 迁移)

2026-08-11 10:56:39 -04:00

broadcast.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

chat_llm_resolve_test.go

fix(chat): 会话已选 LLM 时不再被「全局未激活」误拦，提示按状态细分

2026-08-24 11:55:50 -04:00

chat_mentions_test.go

refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词

2026-09-17 09:40:06 -04:00

chat_mentions.go

feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135)

2026-09-16 22:36:07 +08:00

chatupload.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

commands.go

chore: sync upstream v0.3.6 changes

2026-08-28 14:03:07 +08:00

constraints_api.go

同步

2026-08-24 14:14:15 +08:00

conversation_status_test.go

feat: 支持会话级漏洞复测与运行状态展示

2026-09-10 16:06:08 +08:00

conversations.go

feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135)

2026-09-16 22:36:07 +08:00

core_test.go

feat(api): integrate task workflows and mock contracts

2026-08-24 19:31:16 +08:00

customtool_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

customtool.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

dto.go

feat(intent): 意图删除支持假删除/真删除两种模式

2026-09-17 12:52:57 -04:00

engine_cancelcause_test.go

重构 worker 对话：复用 resume 机制，改专属 goroutine 运行

2026-08-31 09:00:21 -04:00

engine_emptyturn_test.go

fix(agent): 空转回合注入续跑指令，复用空响应重试次数

2026-09-10 10:49:11 -04:00

engine_llm_calls_test.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

engine_timeout.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

engine.go

refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词

2026-09-17 09:40:06 -04:00

finding_retests_test.go

feat: 支持会话级漏洞复测与运行状态展示

2026-09-10 16:06:08 +08:00

finding_retests.go

feat: 支持会话级漏洞复测与运行状态展示

2026-09-10 16:06:08 +08:00

finding_traffic_export.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

finding_traffic_test.go

Merge origin/main into codex/btw-side-question

2026-09-11 00:54:51 +08:00

finding_traffic.go

fix: 修复合并后审查发现的 6 个中/高问题

2026-09-10 10:15:24 -04:00

finding_workflow_test.go

fix(traffic): match recorded hosts with port-aware search (#114)

2026-09-15 00:43:20 +08:00

finding_workflow.go

fix(evidence): traffic_search 描述迁移出错不再中断后续 reporter 迁移

2026-09-14 12:44:15 -04:00

findings_groups_test.go

归档

2026-08-28 12:56:29 +08:00

findings_groups.go

feat(findings): 发现页新增「按资产」视图

2026-08-31 10:58:32 -04:00

goals_api.go

同步

2026-08-24 14:14:15 +08:00

goals_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

goals.go

feat(llm): 模型配置新增输出上限,支持 max_completion_tokens 字段名

2026-08-31 12:20:31 -04:00

inheritance_api_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

inheritance_dto_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

intent_intervention.go

feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135)

2026-09-16 22:36:07 +08:00

intercept_detail_test.go

精简动作审查输入并支持审批来源定位 (#125)

2026-09-15 23:51:37 +08:00

intercept_filter_test.go

feat: filter approval records by status and decision source

2026-09-16 17:24:15 +08:00

intercept_live_test.go

精简动作审查输入并支持审批来源定位 (#125)

2026-09-15 23:51:37 +08:00

intercept_review_test.go

精简动作审查输入并支持审批来源定位 (#125)

2026-09-15 23:51:37 +08:00

intercept.go

feat: filter approval records by status and decision source

2026-09-16 17:24:15 +08:00

llmpool_test.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

llmpool.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

llmrec_raw_test.go

feat(llmrec): 录制 LLM 请求/响应 HTTP 原文

2026-08-25 09:40:05 -04:00

llmretry_test.go

feat(llm): 五层重试的次数与间隔可配

2026-09-09 13:35:04 -04:00

llmretry.go

fix(agent): 空转回合注入续跑指令，复用空响应重试次数

2026-09-10 10:49:11 -04:00

logsink.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

manager_delete_files_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

manager_lifecycle_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

manager.go

feat(intent): 意图删除支持假删除/真删除两种模式

2026-09-17 12:52:57 -04:00

mcpdiscover.go

feat: support legacy SSE MCP servers (#117)

2026-09-15 00:56:16 +08:00

mgmt_test.go

fix(security): jwt.key 移出可浏览工作区(存项目根,自动从 data 迁移)

2026-08-11 10:56:39 -04:00

orchestration.go

feat(agent): add_hint 触发的规划轮显式播报「本轮由新增 hint 触发」

2026-09-13 11:36:31 -04:00

platform_tools_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

platform_tools.go

feat: support legacy SSE MCP servers (#117)

2026-09-15 00:56:16 +08:00

prompt_vars_test.go

同步

2026-08-24 14:14:15 +08:00

scheduler.go

fix(trigger): 合并触发会话按任务去重任务描述/目标，避免长目标重复撑爆消息

2026-09-12 09:26:38 -04:00

server_mgmt.go

feat(agent): 支持持久化 /btw 旁路提问

2026-09-10 21:42:25 +08:00

server.go

feat: 资产拦截接入执行链，新增任务级拦截/允许规则

2026-09-19 09:06:22 -04:00

side_questions_test.go

feat(intent): 意图删除支持假删除/真删除两种模式

2026-09-17 12:52:57 -04:00

side_questions.go

feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135)

2026-09-16 22:36:07 +08:00

skill_upload_test.go

fix(skills): 修复技能压缩包上传失败与中文命名被判非法

2026-08-31 11:37:44 -04:00

skill_usage.go

feat(skills): track usage and missing dependencies

2026-08-24 19:30:14 +08:00

skill_zip.go

fix(skills): 修复技能压缩包上传失败与中文命名被判非法

2026-08-31 11:37:44 -04:00

sync_scopesentry.go

fix(mcp): http 传输支持跳过 TLS 证书校验(自签证书)

2026-09-11 11:37:56 -04:00

task_admission_test.go

同步

2026-08-24 14:14:15 +08:00

task_archive_package_test.go

fix: prevent OOM when archiving large tasks

2026-08-28 15:25:20 +08:00

task_archive_package.go

fix: restore changes dropped by the upstream sync merge

2026-08-29 01:37:46 -04:00

task_archives_test.go

归档

2026-08-28 12:56:29 +08:00

task_archives.go

Merge origin/main into codex/btw-side-question

2026-09-11 00:54:51 +08:00

task_assets.go

feat(assets): add editable company and task scopes

2026-08-24 19:29:14 +08:00

task_categories_test.go

feat(tasks): 任务列表支持批量修改分类

2026-08-24 09:16:44 -04:00

task_categories.go

feat(tasks): 任务列表支持批量修改分类

2026-08-24 09:16:44 -04:00

task_control_routes_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_control.go

feat(intent): 意图删除支持假删除/真删除两种模式

2026-09-17 12:52:57 -04:00

task_delete_barrier_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_intercept.go

feat: 资产拦截接入执行链，新增任务级拦截/允许规则

2026-09-19 09:06:22 -04:00

task_llm_test.go

refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词

2026-09-17 09:40:06 -04:00

task_llm.go

refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词

2026-09-17 09:40:06 -04:00

task_metadata_test.go

1、将排序做到border-b transition-colors hover:bg-muted/50 has-aria-expanded:bg-muted/50 data-[state=selected]:bg-muted里，无需单独做个button 2、指定重命名使用ICO，无需使用菜单

2026-08-25 14:56:15 +08:00

task_metadata.go

1、将排序做到border-b transition-colors hover:bg-muted/50 has-aria-expanded:bg-muted/50 data-[state=selected]:bg-muted里，无需单独做个button 2、指定重命名使用ICO，无需使用菜单

2026-08-25 14:56:15 +08:00

task_resolution.go

同步

2026-08-24 14:14:15 +08:00

task_templates_test.go

feat(tasks): add categories templates and batch controls

2026-08-24 19:29:46 +08:00

task_templates.go

feat(tasks): add categories templates and batch controls

2026-08-24 19:29:46 +08:00

testmain_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

tool_usage_test.go

抽屉优化

2026-08-25 12:05:26 +08:00

tool_usage.go

抽屉优化

2026-08-25 12:05:26 +08:00

tools_wire_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

trigger_merge_test.go

fix(trigger): 合并触发会话按任务去重任务描述/目标，避免长目标重复撑爆消息

2026-09-12 09:26:38 -04:00

triggers.go

feat(trigger): 新增"任务创建"触发机制(on_task_create)

2026-08-09 02:19:29 -04:00

update_test.go

feat(update): 页面一键更新 + 守护启动脚本

2026-09-11 12:39:59 -04:00

update.go

feat(update): 页面一键更新 + 守护启动脚本

2026-09-11 12:39:59 -04:00

webui_embed.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

webui_stub.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

worker_message_test.go

重构 worker 对话：复用 resume 机制，改专属 goroutine 运行

2026-08-31 09:00:21 -04:00

workspace.go

feat(workspace): 新增工作空间文件管理器(针对 workDir)

2026-08-09 01:01:19 -04:00