Commit Graph

  • e9527fa8f2 Merge pull request #14 from BaaRai/bot/triage-labels BaaRai 2026-10-10 18:43:27 +02:00
  • 875f2f0f53 Bot: apply type and priority labels when triaging new issues BaaRai 2026-10-10 18:43:21 +02:00
  • 3eebf02596 Merge pull request #12 from BaaRai/bot/issue-pr-bot BaaRai 2026-10-10 18:18:20 +02:00
  • 815a12d91c Merge pull request #11 from BaaRai/ci/add-ci BaaRai 2026-10-10 18:18:16 +02:00
  • 525ad9ffde Skip the four known-broken tests in code instead of CI -skip flags BaaRai 2026-10-10 18:12:42 +02:00
  • 78a2d2c01f ci: serialize test packages against the shared postgres BaaRai 2026-10-10 17:50:07 +02:00
  • 24e40338b1 ci: fix skip typo, add the CI-flaky llmrec test to the list BaaRai 2026-10-10 17:44:57 +02:00
  • 88dbe0cb66 Add triage and reply bot for issues and pull requests BaaRai 2026-10-10 17:38:07 +02:00
  • 74e85bc945 Add CI: go build/vet/test with postgres, web typecheck and static build BaaRai 2026-10-10 17:36:38 +02:00
  • 858021252e Merge pull request #7 from BaaRai/fix/credential-username-placeholder BaaRai 2026-10-09 15:17:24 +02:00
  • 39e630f3fb Clarify credentials username placeholder BaaRai 2026-10-09 15:17:12 +02:00
  • ea933902c9 Merge pull request #6 from BaaRai/fix/credentials-ui-regression BaaRai 2026-10-09 14:46:17 +02:00
  • d3e6f4167e Fix credentials UI regression from #4 BaaRai 2026-10-09 14:45:52 +02:00
  • 6c7169565b Merge pull request #4 from BaaRai/feat/task-credentials BaaRai 2026-10-09 14:34:15 +02:00
  • c177ab9d86 feat(tasks): per-task test-account credentials BaaRai 2026-10-09 14:28:08 +02:00
  • b28829e36d Merge pull request #2 from BaaRai/fix/pause-preserves-timeout-budget BaaRai 2026-10-09 11:46:18 +02:00
  • 353a947285 fix(tasks): freeze the timeout budget while a task is paused BaaRai 2026-10-09 11:37:30 +02:00
  • 0aa837149d README: note this is a private English fork of Autumn-27's ARTEX BaaRai 2026-10-08 23:22:05 +02:00
  • e233c02314 Translate all Chinese text to English BaaRai 2026-10-08 23:14:34 +02:00
  • d1196853dc docs(changelog): 定版 0.3.15 Autumn-27 2026-10-07 08:54:02 -04:00
  • bd4a6e31e8 Merge pull request #197 from Autumn-27/fix/auth-init-fail-open Autumn 2026-10-07 19:47:48 +08:00
  • 66b7006c69 fix bug Autumn-27 2026-10-07 07:45:28 -04:00
  • f4aea9859d Merge pull request #191 from Autumn-27/feat/judge-token-usage Autumn 2026-10-04 14:43:54 +08:00
  • 8bc4d58c85 feat(intercept): 模型兜底审批单独计量 token 并在配置页展示 Autumn-27 2026-10-04 02:43:26 -04:00
  • 2bd1dab7c7 Merge pull request #189 from Autumn-27/fix/sse-same-origin Autumn 2026-10-03 08:10:35 +08:00
  • 6239c46c12 fix(web): SSE 活动流默认同源,修复反代部署连不上 :8787 Autumn-27 2026-10-02 20:10:08 -04:00
  • 9ff7e6f5e4 Merge pull request #187 from Autumn-27/fix/notify-digest-and-mask Autumn 2026-10-01 19:00:43 +08:00
  • 82a2567cec Merge pull request #185 from lucksec/feat/vuln-im-push Autumn 2026-10-01 18:58:50 +08:00
  • 4c8273d9f8 fix(notify): 邮件渠道的 SMTP 拨号补上 SSRF 守卫 Autumn-27 2026-10-01 06:43:48 -04:00
  • b658591f06 fix(notify): 目的地字段留空不应被判成地址变更 Autumn-27 2026-10-01 06:43:48 -04:00
  • 9b88c55af0 fix(notify): 汇总模式按消息计量限流,批次大小不再被每轮请求预算掐死 Autumn-27 2026-10-01 06:43:29 -04:00
  • ee383aa1a9 fix(notify): 复测判定「已修复」时也要推送状态变更 luckoneandClaude Code 2026-09-30 16:13:52 +08:00
  • 311d9d85cf refactor(web): 通知页拆分为组件,1095 行降到 605 行 luckoneandClaude Code 2026-09-30 16:11:38 +08:00
  • 765c0e99e3 fix(notify): 安全审计修复 —— 掩码绕过、SSRF、静默丢失等 12 项 luckoneandClaude Code 2026-09-30 16:11:33 +08:00
  • 4eb5311998 feat(notify): 漏洞发现支持推送到钉钉/飞书/企业微信等六种渠道 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
  • e2679dac2d fix(db): 修正公司 ICP 归属用例连接关闭顺序导致的资产残留 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
  • d663655e9c Merge pull request #184 from Autumn-27/fix/finding-asset-tree-scroll Autumn 2026-09-30 16:17:08 +08:00
  • 587ef91f68 fix(findings): 「按资产」视图资产列表溢出时补回滚动条 Autumn-27 2026-09-30 04:16:43 -04:00
  • cfe5a7d740 Merge pull request #183 from Autumn-27/feat/intercept-delete-path Autumn 2026-09-30 16:15:15 +08:00
  • 5825b3f80c feat(intercept): 新增内置拦截规则「删除类接口路径」 Autumn-27 2026-09-30 04:12:57 -04:00
  • 992ae571b8 Merge pull request #182 from Autumn-27/feat/traffic-clear-all Autumn 2026-09-30 14:55:47 +08:00
  • eb347d5965 feat(traffic): 流量列表新增「清空全部」,并借空库时机压实索引 Autumn-27 2026-09-30 02:50:49 -04:00
  • 399f6768fc Merge pull request #180 from Autumn-27/fix/traffic-index-reclaim Autumn 2026-09-30 13:54:28 +08:00
  • e50f5a3083 fix(traffic): 删除流量后把索引空间真正还给操作系统 Autumn-27 2026-09-30 01:44:44 -04:00
  • f4de2292eb Merge pull request #179 from Autumn-27/feat/traffic-search-filter-sort Autumn 2026-09-30 10:04:15 +08:00
  • 6d8c50a12e feat(traffic): 流量列表支持内容检索、路径/状态码/长度筛选与列排序 (#177) Autumn-27 2026-09-29 21:58:17 -04:00
  • 524efdb1d0 chore(deps): 升级 norma 到 v0.4.3——工具输出全局兜底截断(harness 统一 CaptureOnce),任何工具都不再溢爆上下文 Autumn-27 2026-09-29 21:14:08 -04:00
  • c63955481d fix(tools): MCP/自定义工具输出统一走 Capture 截断,修复 mcp 截断不生效 (#176) Autumn-27 2026-09-29 10:09:23 -04:00
  • 6b146d6c1b fix(llm): 一次性 LLM 调用补挂 session id,让自定义会话头真正生效 (#175) 榆木 2026-09-29 18:21:30 +08:00
  • 84ce61b8c4 chore(deps): 升级 norma 到 v0.4.2——修复 noa 压缩后 thinking/tool 消息被 provider 拒绝(#174) Autumn-27 2026-09-29 04:18:58 -04:00
  • 68ebf51698 docs(changelog): 定版 0.3.14 Autumn-27 2026-09-24 13:35:48 -04:00
  • 1a10c153b0 feat(tasks): 漏洞列改为按严重度分档显示 严/高/中/低 Autumn-27 2026-09-24 13:32:45 -04:00
  • ee33f91bc1 feat(tasks): 任务列表新增漏洞数量列,描述/目标列收窄 Autumn-27 2026-09-24 13:26:22 -04:00
  • 625f6eee50 fix(graph): 折叠后消除 digest↔finding 的反向重复边 Autumn-27 2026-09-24 13:23:06 -04:00
  • da90fa6991 refactor(graph_overview): related_tasks 冷区统一走 coldDigestsRecent 并封顶 Autumn-27 2026-09-24 13:11:28 -04:00
  • 408144cc7f refactor(graph_overview): 概览各列表加数量上限,止住上下文膨胀 Autumn-27 2026-09-24 13:05:27 -04:00
  • 54d4db9715 refactor(graph_overview): finding_list 限最新 10 条,findings 计数改名 findings_total Autumn-27 2026-09-24 12:32:43 -04:00
  • 90ccfadd6f refactor(graph_overview): 精简态势概览字段 Autumn-27 2026-09-24 12:23:29 -04:00
  • b926b7a5d1 Update CHANGELOG.md Autumn 2026-09-19 23:37:57 +08:00
  • d6a873f075 docs(changelog): 版本号改为 0.3.13 Autumn-27 2026-09-19 11:23:33 -04:00
  • f9990dd7be docs(changelog): 定版 0.4.0 Autumn-27 2026-09-19 11:20:03 -04:00
  • 4464137c04 fix(task-archive): 遇到符号链接跳过而非整包失败 Autumn-27 2026-09-19 11:08:15 -04:00
  • b7d30f16c9 fix(intercept): 收紧裁判输出协议,减少 1024 截断导致的 fail-open Autumn-27 2026-09-19 10:24:08 -04:00
  • 93431651be feat: 任务模板支持预设分类与任务级拦截/允许规则 Autumn-27 2026-09-19 09:27:03 -04:00
  • bd1772c62f feat: 资产拦截接入执行链,新增任务级拦截/允许规则 Autumn-27 2026-09-19 09:06:22 -04:00
  • 228674a2ce feat: 新增资产拦截规则(全局黑名单)增删改查 Autumn-27 2026-09-19 07:58:23 -04:00
  • 838362fe26 chore(deps): 升级 norma 至 v0.4.1 Autumn-27 2026-09-19 07:26:47 -04:00
  • 731d3b822a feat(web): 登录前新增使用须知与免责声明弹窗,须勾选同意后方可登录 Autumn-27 2026-09-18 08:09:05 -04:00
  • e6864abe4a docs: 采用 AGPL-3.0 开源协议 Autumn-27 2026-09-18 07:47:13 -04:00
  • df577842fd docs(readme): 完善许可与免责声明 Autumn-27 2026-09-18 07:43:58 -04:00
  • 420530caa5 docs(changelog): 定版 0.3.12 Autumn-27 2026-09-17 13:17:39 -04:00
  • bafedf7fb6 Merge pull request #150 from Autumn-27/feat/broadcast-search-node-id Autumn 2026-09-18 01:09:30 +08:00
  • c387d7e9e7 Merge pull request #149 from Autumn-27/feat/intent-delete-modes Autumn 2026-09-18 01:05:03 +08:00
  • 6f295f48f8 feat(intent): 意图删除支持假删除/真删除两种模式 Autumn-27 2026-09-17 12:52:57 -04:00
  • 0b677909e2 fix(web): 修复新对话未创建时上传文件报「缺少上传文件」 Autumn-27 2026-09-17 12:40:38 -04:00
  • 075b907a7c feat(web): 播报板搜索支持按节点 id 筛选 Autumn-27 2026-09-17 11:31:27 -04:00
  • 0c91c6b60b Merge pull request #147 from Autumn-27/feat/broadcast-node-detail Autumn 2026-09-17 23:28:03 +08:00
  • 0848eb6a0a feat(web): 播报板节点详情展示上游节点信息与锚定资产 Autumn-27 2026-09-17 11:23:53 -04:00
  • 6c6311ff63 refactor(engine): 移除从不执行的全局 planner/worker 空壳,就绪信号改用谓词 Autumn-27 2026-09-17 09:40:06 -04:00
  • f7b8f1878f Merge pull request #145 from Autumn-27/feat/broadcast-node-id Autumn 2026-09-17 21:19:50 +08:00
  • dc4328cc9b feat(web): 播报板每行显示节点 id Autumn-27 2026-09-17 09:17:30 -04:00
  • 79cd8d6d9d chore(server): 删除已死的全局 mainAgent 与 agentsForProfile 等冗余构建 Autumn-27 2026-09-17 09:07:40 -04:00
  • 511cd6719f fix(web): 修复静态导出版任务列表页丢失全局头部 Autumn-27 2026-09-17 08:55:04 -04:00
  • e857e83157 Merge fix/cold-digest-wire-per-task-planner: 给 per-task planner 接上 Compactor,修复冷节点压缩从不触发 Autumn-27 2026-09-17 08:53:30 -04:00
  • 65fdde81f0 fix(digest): 给 per-task planner 接上 Compactor,修复冷节点压缩从不触发 Autumn-27 2026-09-17 08:52:52 -04:00
  • d6fd80630d Merge pull request #144 from Autumn-27/feat/exploration-broadcast-board Autumn 2026-09-17 20:50:17 +08:00
  • b932888b49 feat(web): 任务详情页新增探索链路播报板 Autumn-27 2026-09-17 08:42:49 -04:00
  • 7dfd5f3210 Merge PR #139: 支持按状态和判定来源筛选审批记录 Autumn-27 2026-09-16 11:16:26 -04:00
  • f919a0d43a fix(agent): 使用通用网络安全平台角色描述 (#138) RuoJi6 2026-09-16 23:07:51 +08:00
  • 0fbbf2b2fe Merge remote-tracking branch 'origin/main' Autumn-27 2026-09-16 11:07:02 -04:00
  • c680876fb4 Merge branch 'fix/demo-finding-traffic-mock':修 demo 漏洞详情页关联流量白屏 Autumn-27 2026-09-16 11:06:12 -04:00
  • f0837453e0 fix(web): 补齐 demo 漏洞详情页关联流量 mock,修白屏 Autumn-27 2026-09-16 11:05:21 -04:00
  • ec818da8f5 fix(chat): constrain long message bubbles to the conversation pane (#137) RuoJi6 2026-09-16 22:37:11 +08:00
  • 48b26be980 feat(chat): 支持多类型记录 @ 引用及滚动分页 (#135) RuoJi6 2026-09-16 22:36:07 +08:00
  • a601a4d21c fix(approvals): load pending requests independently of history pagination (#133) RuoJi6 2026-09-16 22:13:08 +08:00
  • f7cd518f79 feat: filter approval records by status and decision source ji ruo 2026-09-16 17:24:15 +08:00
  • f716739fcb fix(traffic): 流量录制代理默认只监听 127.0.0.1,避免默认开放代理暴露 (#129) (#130) dingpotian 2026-09-16 09:36:32 +08:00
  • 84ec5b2217 fix(changelog): 移除历史遗留的裸 NUL 字节,恢复文本格式 Autumn-27 2026-09-15 12:39:49 -04:00
  • b83e9711e5 docs(changelog): 定版 0.3.11 Autumn-27 2026-09-15 12:37:19 -04:00
  • a6515e6f0d Merge branch 'feat/noa-experimental':noa 实验性上下文压缩 Autumn-27 2026-09-15 12:09:24 -04:00