mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-13 11:40:53 +08:00
BaaRai
e233c02314
Comments, doc comments, UI labels, log and error messages, LLM prompt strings, markdown docs, test data and assertions. Identifiers, enum keys, routes, placeholders and code structure are unchanged. Notes: - docs/漏洞流量证据.md renamed to docs/vulnerability-traffic-evidence.md - tests that exercised CJK specific handling (GBK zip names, Chinese full text search) now use ASCII equivalents; go build passes and the test suite matches the pre translation baseline (remaining failures need a PostgreSQL DSN and fail identically on the original) - frontend mention syntax now uses English kinds (finding, asset, ...) matching the backend, chat mentions tests pass
109 lines
2.9 KiB
Go
109 lines
2.9 KiB
Go
package server
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/Autumn-27/artex/db"
|
|
)
|
|
|
|
const maxTaskAssetRequestBytes = 512 << 10
|
|
|
|
func writeTaskAssetError(w http.ResponseWriter, err error) {
|
|
switch {
|
|
case errors.Is(err, db.ErrTaskAssetInvalid):
|
|
writeErr(w, http.StatusBadRequest, err.Error())
|
|
case errors.Is(err, db.ErrTaskAssetTaskNotFound), errors.Is(err, db.ErrTaskAssetAssetNotFound):
|
|
writeErr(w, http.StatusNotFound, err.Error())
|
|
default:
|
|
writeErr(w, http.StatusInternalServerError, err.Error())
|
|
}
|
|
}
|
|
|
|
func (s *Server) attachTaskAssets(w http.ResponseWriter, r *http.Request) {
|
|
task, ok := s.m.Task(r.PathValue("id"))
|
|
if !ok {
|
|
writeErr(w, http.StatusNotFound, "task not found")
|
|
return
|
|
}
|
|
r.Body = http.MaxBytesReader(w, r.Body, maxTaskAssetRequestBytes)
|
|
var request struct {
|
|
AssetIDs []int64 `json:"asset_ids"`
|
|
SourceSummary string `json:"source_summary"`
|
|
Scope companyScopeInputs `json:"scope"`
|
|
}
|
|
if err := decode(r, &request); err != nil {
|
|
var tooLarge *http.MaxBytesError
|
|
if errors.As(err, &tooLarge) {
|
|
writeErr(w, http.StatusRequestEntityTooLarge, "request body too large")
|
|
} else {
|
|
writeErr(w, http.StatusBadRequest, err.Error())
|
|
}
|
|
return
|
|
}
|
|
request.SourceSummary = strings.TrimSpace(request.SourceSummary)
|
|
taskID, _ := parseTaskID(task.ID)
|
|
if request.Scope != nil && len(request.AssetIDs) > 0 {
|
|
writeErr(w, http.StatusBadRequest, "scope and asset_ids cannot be submitted together")
|
|
return
|
|
}
|
|
if request.Scope != nil {
|
|
mutation, err := s.m.Assets().RegisterTaskAssetScopes(taskID, request.Scope)
|
|
if err != nil {
|
|
writeTaskAssetError(w, err)
|
|
return
|
|
}
|
|
task.Notify()
|
|
writeJSON(w, http.StatusOK, mutation)
|
|
return
|
|
}
|
|
mutation, err := s.m.Assets().AttachAssetsToTask(taskID, request.AssetIDs, request.SourceSummary)
|
|
if err != nil {
|
|
writeTaskAssetError(w, err)
|
|
return
|
|
}
|
|
task.Notify()
|
|
writeJSON(w, http.StatusOK, mutation)
|
|
}
|
|
|
|
func (s *Server) detachTaskAsset(w http.ResponseWriter, r *http.Request) {
|
|
task, ok := s.m.Task(r.PathValue("id"))
|
|
if !ok {
|
|
writeErr(w, http.StatusNotFound, "task not found")
|
|
return
|
|
}
|
|
assetID, ok := pathInt(r, "assetID")
|
|
if !ok {
|
|
writeErr(w, http.StatusBadRequest, "bad asset id")
|
|
return
|
|
}
|
|
taskID, _ := parseTaskID(task.ID)
|
|
detached, err := s.m.Assets().DetachAssetFromTask(taskID, assetID)
|
|
if err != nil {
|
|
writeTaskAssetError(w, err)
|
|
return
|
|
}
|
|
if !detached {
|
|
writeErr(w, http.StatusNotFound, "asset is not associated with this task")
|
|
return
|
|
}
|
|
task.Notify()
|
|
writeJSON(w, http.StatusOK, map[string]any{"detached": assetID})
|
|
}
|
|
|
|
func (s *Server) taskIntentAssets(w http.ResponseWriter, r *http.Request) {
|
|
task, ok := s.m.Task(r.PathValue("id"))
|
|
if !ok {
|
|
writeErr(w, http.StatusNotFound, "task not found")
|
|
return
|
|
}
|
|
taskID, _ := parseTaskID(task.ID)
|
|
assets, err := s.m.Assets().IntentAssets(taskID)
|
|
if err != nil {
|
|
writeTaskAssetError(w, err)
|
|
return
|
|
}
|
|
writeJSON(w, http.StatusOK, map[string]any{"assets": assets})
|
|
}
|