ARTEX

520 Commits 112 Branches 4 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
BaaRai	e233c02314	Translate all Chinese text to English Comments, doc comments, UI labels, log and error messages, LLM prompt strings, markdown docs, test data and assertions. Identifiers, enum keys, routes, placeholders and code structure are unchanged. Notes: - docs/漏洞流量证据.md renamed to docs/vulnerability-traffic-evidence.md - tests that exercised CJK specific handling (GBK zip names, Chinese full text search) now use ASCII equivalents; go build passes and the test suite matches the pre translation baseline (remaining failures need a PostgreSQL DSN and fail identically on the original) - frontend mention syntax now uses English kinds (finding, asset, ...) matching the backend, chat mentions tests pass	2026-10-08 23:14:34 +02:00
Autumn-27	bd1772c62f	feat: 资产拦截接入执行链，新增任务级拦截/允许规则在 agent 下发意图(add_intent)与插入资产(insert_assets)两处接入资产闸门；并新增任务级规则(拦截 block + 允许 allow 白名单)，创建任务时录入、任务详情总览里可编辑。 - 匹配/执行(db/asset_intercept_match.go)：MatchAssetInterceptRules 纯匹配 (exact/fuzzy 的域名·IP·URL + CIDR，URL host 会拆出归类)；EvaluateAssetGate 「先拦截后允许」闸门——命中拦截即禁止；未命中但存在启用的允许规则且都不命中→ 不允许测试；无启用允许规则则不启用白名单。附单元测试。 - 执行点：add_intent 命中即不下发意图；insert_assets 命中即跳过 Upsert 及 AddAutoScope 副作用。均合并全局∪任务级规则。 - 任务级规则：表 task_intercept_rules(task_id FK CASCADE + action block/allow，幂等 ALTER 补旧库)；db/task_intercept.go 提供 List/Split/CRUD/事务插入；创建任务随 intercept_rules 提交；CRUD 路由 /api/tasks/{id}/intercept-rules。 - 前端：新建任务抽屉多行录入(拦截/允许 + 类型，用 NativeSelect 避免 Sheet 内下拉 portal 导致误关抽屉)；任务详情总览新增规则管理卡片(增删改+启用开关)。	2026-09-19 09:06:22 -04:00

Author

SHA1

Message

Date

BaaRai

e233c02314

Translate all Chinese text to English

Comments, doc comments, UI labels, log and error messages, LLM prompt
strings, markdown docs, test data and assertions. Identifiers, enum
keys, routes, placeholders and code structure are unchanged.

Notes:
- docs/漏洞流量证据.md renamed to docs/vulnerability-traffic-evidence.md
- tests that exercised CJK specific handling (GBK zip names, Chinese
  full text search) now use ASCII equivalents; go build passes and the
  test suite matches the pre translation baseline (remaining failures
  need a PostgreSQL DSN and fail identically on the original)
- frontend mention syntax now uses English kinds (finding, asset, ...)
  matching the backend, chat mentions tests pass

2026-10-08 23:14:34 +02:00

Autumn-27

bd1772c62f

feat: 资产拦截接入执行链，新增任务级拦截/允许规则

在 agent 下发意图(add_intent)与插入资产(insert_assets)两处接入资产闸门；
并新增任务级规则(拦截 block + 允许 allow 白名单)，创建任务时录入、任务详情
总览里可编辑。

- 匹配/执行(db/asset_intercept_match.go)：MatchAssetInterceptRules 纯匹配
  (exact/fuzzy 的 域名·IP·URL + CIDR，URL host 会拆出归类)；EvaluateAssetGate
  「先拦截后允许」闸门——命中拦截即禁止；未命中但存在启用的允许规则且都不命中→
  不允许测试；无启用允许规则则不启用白名单。附单元测试。
- 执行点：add_intent 命中即不下发意图；insert_assets 命中即跳过 Upsert 及
  AddAutoScope 副作用。均合并 全局∪任务级 规则。
- 任务级规则：表 task_intercept_rules(task_id FK CASCADE + action block/allow，
  幂等 ALTER 补旧库)；db/task_intercept.go 提供 List/Split/CRUD/事务插入；
  创建任务随 intercept_rules 提交；CRUD 路由 /api/tasks/{id}/intercept-rules。
- 前端：新建任务抽屉多行录入(拦截/允许 + 类型，用 NativeSelect 避免 Sheet 内
  下拉 portal 导致误关抽屉)；任务详情总览新增规则管理卡片(增删改+启用开关)。

2026-09-19 09:06:22 -04:00