Commit Graph

  • f3e3f54b6c fix: use Hinln/ARTEX for authenticated release updates main Hinln 2026-10-08 19:05:50 +08:00
  • e6ec569991 docs(changelog): 定版 0.3.15 Autumn-27 2026-10-07 08:54:02 -04:00
  • fd86f3ceca Merge pull request #197 from Autumn-27/fix/auth-init-fail-open Autumn 2026-10-07 19:47:48 +08:00
  • a951e4aad3 fix bug Autumn-27 2026-10-07 07:45:28 -04:00
  • b55ceb1fdd Merge pull request #191 from Autumn-27/feat/judge-token-usage Autumn 2026-10-04 14:43:54 +08:00
  • 86729b65dc feat(intercept): 模型兜底审批单独计量 token 并在配置页展示 Autumn-27 2026-10-04 02:43:26 -04:00
  • d0033724a6 Merge pull request #189 from Autumn-27/fix/sse-same-origin Autumn 2026-10-03 08:10:35 +08:00
  • e2c8a23a98 fix(web): SSE 活动流默认同源,修复反代部署连不上 :8787 Autumn-27 2026-10-02 20:10:08 -04:00
  • 160fe13c24 Merge pull request #187 from Autumn-27/fix/notify-digest-and-mask Autumn 2026-10-01 19:00:43 +08:00
  • 314105e827 Merge pull request #185 from lucksec/feat/vuln-im-push Autumn 2026-10-01 18:58:50 +08:00
  • 5081d95b99 fix(notify): 邮件渠道的 SMTP 拨号补上 SSRF 守卫 Autumn-27 2026-10-01 06:43:48 -04:00
  • 77834f0080 fix(notify): 目的地字段留空不应被判成地址变更 Autumn-27 2026-10-01 06:43:48 -04:00
  • 93c1d39df3 fix(notify): 汇总模式按消息计量限流,批次大小不再被每轮请求预算掐死 Autumn-27 2026-10-01 06:43:29 -04:00
  • f2f35ebc2e fix(notify): 复测判定「已修复」时也要推送状态变更 luckoneandClaude Code 2026-09-30 16:13:52 +08:00
  • ee8929115e refactor(web): 通知页拆分为组件,1095 行降到 605 行 luckoneandClaude Code 2026-09-30 16:11:38 +08:00
  • a049f09b97 fix(notify): 安全审计修复 —— 掩码绕过、SSRF、静默丢失等 12 项 luckoneandClaude Code 2026-09-30 16:11:33 +08:00
  • f3fb37f70d feat(notify): 漏洞发现支持推送到钉钉/飞书/企业微信等六种渠道 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
  • 18589b270e fix(db): 修正公司 ICP 归属用例连接关闭顺序导致的资产残留 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
  • 50b7b2a05b Merge pull request #184 from Autumn-27/fix/finding-asset-tree-scroll Autumn 2026-09-30 16:17:08 +08:00
  • 4b1eda8e92 fix(findings): 「按资产」视图资产列表溢出时补回滚动条 Autumn-27 2026-09-30 04:16:43 -04:00
  • b590898d1f Merge pull request #183 from Autumn-27/feat/intercept-delete-path Autumn 2026-09-30 16:15:15 +08:00
  • 527092f23b feat(intercept): 新增内置拦截规则「删除类接口路径」 Autumn-27 2026-09-30 04:12:57 -04:00
  • a8afd0bb98 Merge pull request #182 from Autumn-27/feat/traffic-clear-all Autumn 2026-09-30 14:55:47 +08:00
  • 2f5f7c0227 feat(traffic): 流量列表新增「清空全部」,并借空库时机压实索引 Autumn-27 2026-09-30 02:50:49 -04:00
  • 61d486160e Merge pull request #180 from Autumn-27/fix/traffic-index-reclaim Autumn 2026-09-30 13:54:28 +08:00
  • 3227f2e54c fix(traffic): 删除流量后把索引空间真正还给操作系统 Autumn-27 2026-09-30 01:44:44 -04:00
  • ca5512b48f Merge pull request #179 from Autumn-27/feat/traffic-search-filter-sort Autumn 2026-09-30 10:04:15 +08:00
  • a4960b514e feat(traffic): 流量列表支持内容检索、路径/状态码/长度筛选与列排序 (#177) Autumn-27 2026-09-29 21:58:17 -04:00
  • 02b1dbe6f8 chore(deps): 升级 norma 到 v0.4.3——工具输出全局兜底截断(harness 统一 CaptureOnce),任何工具都不再溢爆上下文 Autumn-27 2026-09-29 21:14:08 -04:00
  • 71794729fc fix(tools): MCP/自定义工具输出统一走 Capture 截断,修复 mcp 截断不生效 (#176) Autumn-27 2026-09-29 10:09:23 -04:00
  • 25b6018818 fix(llm): 一次性 LLM 调用补挂 session id,让自定义会话头真正生效 (#175) 榆木 2026-09-29 18:21:30 +08:00
  • 69fe9357d3 chore(deps): 升级 norma 到 v0.4.2——修复 noa 压缩后 thinking/tool 消息被 provider 拒绝(#174) Autumn-27 2026-09-29 04:18:58 -04:00
  • 86162d7eda docs(changelog): 定版 0.3.14 Autumn-27 2026-09-24 13:35:48 -04:00
  • 87b3c3c770 feat(tasks): 漏洞列改为按严重度分档显示 严/高/中/低 Autumn-27 2026-09-24 13:32:45 -04:00
  • e65d3e5202 feat(tasks): 任务列表新增漏洞数量列,描述/目标列收窄 Autumn-27 2026-09-24 13:26:22 -04:00
  • 9bc8d16a0b fix(graph): 折叠后消除 digest↔finding 的反向重复边 Autumn-27 2026-09-24 13:23:06 -04:00
  • b5704eb361 refactor(graph_overview): related_tasks 冷区统一走 coldDigestsRecent 并封顶 Autumn-27 2026-09-24 13:11:28 -04:00
  • 3aac6754a8 refactor(graph_overview): 概览各列表加数量上限,止住上下文膨胀 Autumn-27 2026-09-24 13:05:27 -04:00
  • 43d1743dc0 refactor(graph_overview): finding_list 限最新 10 条,findings 计数改名 findings_total Autumn-27 2026-09-24 12:32:43 -04:00
  • 06a43f37ff refactor(graph_overview): 精简态势概览字段 Autumn-27 2026-09-24 12:23:29 -04:00
  • bf7f414477 Update CHANGELOG.md Autumn 2026-09-19 23:37:57 +08:00
  • 7b92395aa0 docs(changelog): 版本号改为 0.3.13 Autumn-27 2026-09-19 11:23:33 -04:00
  • 2943eb2ea6 docs(changelog): 定版 0.4.0 Autumn-27 2026-09-19 11:20:03 -04:00
  • 37950f4a6f fix(task-archive): 遇到符号链接跳过而非整包失败 Autumn-27 2026-09-19 11:08:15 -04:00
  • 33c26dc72a fix(intercept): 收紧裁判输出协议,减少 1024 截断导致的 fail-open Autumn-27 2026-09-19 10:24:08 -04:00
  • 777730e255 feat: 任务模板支持预设分类与任务级拦截/允许规则 Autumn-27 2026-09-19 09:27:03 -04:00
  • d5359e1f04 feat: 资产拦截接入执行链,新增任务级拦截/允许规则 Autumn-27 2026-09-19 09:06:22 -04:00
  • dfc9d2fa2e feat: 新增资产拦截规则(全局黑名单)增删改查 Autumn-27 2026-09-19 07:58:23 -04:00
  • a590b415ba chore(deps): 升级 norma 至 v0.4.1 Autumn-27 2026-09-19 07:26:47 -04:00
  • 6f6be46480 feat(web): 登录前新增使用须知与免责声明弹窗,须勾选同意后方可登录 Autumn-27 2026-09-18 08:09:05 -04:00
  • 9b82b02fe2 docs: 采用 AGPL-3.0 开源协议 Autumn-27 2026-09-18 07:47:13 -04:00
  • 2951e10a4d docs(readme): 完善许可与免责声明 Autumn-27 2026-09-18 07:43:58 -04:00
  • 0ec51e3799 docs(changelog): 定版 0.3.12 Autumn-27 2026-09-17 13:17:39 -04:00
  • ec0ae108c4 Merge pull request #150 from Autumn-27/feat/broadcast-search-node-id Autumn 2026-09-18 01:09:30 +08:00
  • 8a3f40b6f8 Merge pull request #149 from Autumn-27/feat/intent-delete-modes Autumn 2026-09-18 01:05:03 +08:00
  • 4756bb1c45 feat(intent): 意图删除支持假删除/真删除两种模式 Autumn-27 2026-09-17 12:52:57 -04:00
  • 6e3dbf6452 fix(web): 修复新对话未创建时上传文件报「缺少上传文件」 Autumn-27 2026-09-17 12:40:38 -04:00
  • e2ada7e494 feat(web): 播报板搜索支持按节点 id 筛选 Autumn-27 2026-09-17 11:31:27 -04:00
  • c6c5329a18 Merge pull request #147 from Autumn-27/feat/broadcast-node-detail Autumn 2026-09-17 23:28:03 +08:00
  • d95f0d002d feat(web): 播报板节点详情展示上游节点信息与锚定资产 Autumn-27 2026-09-17 11:23:53 -04:00
  • 3b60191e86 refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词 Autumn-27 2026-09-17 09:40:06 -04:00
  • cd5e779a24 Merge pull request #145 from Autumn-27/feat/broadcast-node-id Autumn 2026-09-17 21:19:50 +08:00
  • 3cde43f64f feat(web): 播报板每行显示节点 id Autumn-27 2026-09-17 09:17:30 -04:00
  • e78b35869c chore(server): 删除已死的全局 mainAgent 与 agentsForProfile 等冗余构建 Autumn-27 2026-09-17 09:07:40 -04:00
  • 564096c063 fix(web): 修复静态导出版任务列表页丢失全局头部 Autumn-27 2026-09-17 08:55:04 -04:00
  • 55869705ad Merge fix/cold-digest-wire-per-task-planner: 给 per-task planner 接上 Compactor,修复冷节点压缩从不触发 Autumn-27 2026-09-17 08:53:30 -04:00
  • 96ff07579e fix(digest): 给 per-task planner 接上 Compactor,修复冷节点压缩从不触发 Autumn-27 2026-09-17 08:52:52 -04:00
  • 357ef6a5ab Merge pull request #144 from Autumn-27/feat/exploration-broadcast-board Autumn 2026-09-17 20:50:17 +08:00
  • c03e008d7b feat(web): 任务详情页新增探索链路播报板 Autumn-27 2026-09-17 08:42:49 -04:00
  • 13ce2ea6e3 Merge PR #139: 支持按状态和判定来源筛选审批记录 Autumn-27 2026-09-16 11:16:26 -04:00
  • 2366636575 fix(agent): 使用通用网络安全平台角色描述 (#138) RuoJi6 2026-09-16 23:07:51 +08:00
  • a15285a7ae Merge remote-tracking branch 'origin/main' Autumn-27 2026-09-16 11:07:02 -04:00
  • 6d0614ae79 Merge branch 'fix/demo-finding-traffic-mock':修 demo 漏洞详情页关联流量白屏 Autumn-27 2026-09-16 11:06:12 -04:00
  • 5fbeb35b8c fix(web): 补齐 demo 漏洞详情页关联流量 mock,修白屏 Autumn-27 2026-09-16 11:05:21 -04:00
  • d5c1995641 fix(chat): constrain long message bubbles to the conversation pane (#137) RuoJi6 2026-09-16 22:37:11 +08:00
  • f6b5c11352 feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135) RuoJi6 2026-09-16 22:36:07 +08:00
  • 1c6342d8b3 fix(approvals): load pending requests independently of history pagination (#133) RuoJi6 2026-09-16 22:13:08 +08:00
  • a91c0a7223 feat: filter approval records by status and decision source ji ruo 2026-09-16 17:24:15 +08:00
  • 80a085d157 fix(traffic): 流量录制代理默认只监听 127.0.0.1,避免默认开放代理暴露 (#129) (#130) dingpotian 2026-09-16 09:36:32 +08:00
  • 7f71f77d16 fix(changelog): 移除历史遗留的裸 NUL 字节,恢复文本格式 Autumn-27 2026-09-15 12:39:49 -04:00
  • 8ee890771f docs(changelog): 定版 0.3.11 Autumn-27 2026-09-15 12:37:19 -04:00
  • 95bcd4ef9c Merge branch 'feat/noa-experimental':noa 实验性上下文压缩 Autumn-27 2026-09-15 12:09:24 -04:00
  • c4579637dc refactor(noa): 归档集中到 <workDir>/noa 下,不再分散在任务目录 Autumn-27 2026-09-15 12:01:38 -04:00
  • 04d25eb133 精简动作审查输入并支持审批来源定位 (#125) RuoJi6 2026-09-15 23:51:37 +08:00
  • 865d52267d feat(settings): 增加实验功能开关,可开启 noa 上下文压缩 Autumn-27 2026-09-15 09:20:35 -04:00
  • 4ae319feca chore(deps): 升级 norma 至 v0.4.0(引入 noa 上下文压缩能力) Autumn-27 2026-09-15 09:11:55 -04:00
  • 0d6fa880b8 fix(intercept): 模型裁决被代码块包裹时不再静默放行 (#126) Autumn 2026-09-15 20:40:41 +08:00
  • c0d1aa6f37 feat(intercept): 模型审查补充任务上下文与裁决说明 (#124) RuoJi6 2026-09-15 20:08:12 +08:00
  • 234bd8bf8e test(side): SSE 扫描出错直接失败,不再误判为未收到累积请求 Autumn-27 2026-09-15 07:46:07 -04:00
  • f4d89c64d8 fix(web): 任务复测漏洞选项增加分割线 (#122) RuoJi6 2026-09-15 19:53:29 +08:00
  • 5963281582 fix(agent): 探索图工具在无任务上下文时拒绝而非 nil 崩溃 Autumn-27 2026-09-14 13:56:56 -04:00
  • 1a388e3e9e feat: support legacy SSE MCP servers (#117) RuoJi6 2026-09-15 00:56:16 +08:00
  • 71fa919599 feat: 为审批记录增加翻页 (#115) RuoJi6 2026-09-15 00:52:48 +08:00
  • 5db71f7c53 fix(evidence): traffic_search 描述迁移出错不再中断后续 reporter 迁移 Autumn-27 2026-09-14 12:44:15 -04:00
  • 7c8b55ca6c fix(traffic): match recorded hosts with port-aware search (#114) RuoJi6 2026-09-15 00:43:20 +08:00
  • f2589ad47c fix(web): 修复 demo 任务详情页旁路提问历史缺失导致的整页崩溃 Autumn-27 2026-09-14 09:37:08 -04:00
  • 90f31577f2 docs(changelog): 定版 0.3.10 Autumn-27 2026-09-13 12:37:37 -04:00
  • 9eefeb3f32 docs(changelog): 补齐 Unreleased —— worker 回看工具/node_detail/add_hint 播报、回看工具补绑修复、/btw NUL 修复、合并触发去重 Autumn-27 2026-09-13 12:22:21 -04:00
  • a5abe8ec3c style(agent): 清理 compaction.go 静态检查提示 Autumn-27 2026-09-13 12:05:11 -04:00
  • 3480760d4e chore(bench): 补 .dockerignore 忽略项,bench 容器不再挂持久化卷 Autumn-27 2026-09-13 11:39:05 -04:00