BaaRai 68976a7680 secrets: encrypt the exec spec of custom tools at rest ...

Phase 3 of secrets at rest (#213, #216), same AES-256-GCM scheme and key.

- tools.exec joins the secret columns for system=false rows (AAD
  tools.exec): the whole JSON is sealed in the {"__artex_enc":"enc:v1:..."}
  envelope, so headers, body, proxy, script code and command are covered;
  {} stays {}
- CreateCustomTool and UpdateCustomTool seal it; scanTool opens it, so
  GetTool, ListTools and ListCustomTools (and through them customTools,
  the platform tools and the test endpoint) see the clear JSON in memory
- the startup backfill, the no-key refusal and the wrong-key check cover
  it, for system=false rows only; built-in rows stay in clear for the seeds

API: GET /api/tools returns the header values, proxy and body of a custom
tool masked, with headers_set, proxy_set and body_set. On update (API and
update_custom_tool) the placeholder keeps the stored value, an explicit
value replaces it and "" clears it; on create (API and create_custom_tool)
a placeholder is refused. The test endpoint takes an optional key: the
saved tool's stored values replace the placeholders; the editor sends it.

2026-11-13 21:52:27 +01:00

..

ask_operator_test.go

fix(ask_operator): seed the goal targets with bare goal domains (F12)

2026-11-12 11:51:38 +01:00

ask_operator.go

fix(ask_operator): seed the goal targets with bare goal domains (F12)

2026-11-12 11:51:38 +01:00

assembly_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

assembly.go

feat: first-layer prompt-injection hardening for agents

2026-10-12 00:58:53 +02:00

asset_intercept.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

assets_scope_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

assets.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

auth_test.go

fix(auth): rate-limit login per IP, 12-character passwords, loopback default

2026-11-05 16:48:27 +01:00

auth.go

feat(intercept): target-gate schema, opt-in flag and approval requests (S3b 1.2-1.4)

2026-11-10 23:05:47 +01:00

broadcast.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

chat_llm_resolve_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

chat_mentions_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

chat_mentions.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

chatupload.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

claim_heartbeat_test.go

feat(engine): intent claim heartbeat, TTL and fencing token (S3c)

2026-11-10 17:45:11 +01:00

commands.go

chore: sync upstream v0.3.6 changes

2026-08-28 14:03:07 +08:00

constraints_api.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

conversation_status_test.go

feat: 支持会话级漏洞复测与运行状态展示

2026-09-10 16:06:08 +08:00

conversations.go

feat(intercept): spawned tasks and triggered conversations inherit the target gate

2026-11-11 15:47:21 +01:00

core_test.go

fix: test isolation for the escalation streak + compliant goal fixtures

2026-10-21 15:08:37 +02:00

cost_ledger_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

customtool_dial_test.go

Fix doubled scheme in the custom http tool's recording proxy URL

2026-11-11 20:20:16 +01:00

customtool_target_gate_test.go

fix(intercept): match block rules on the declared targets before any lookup

2026-11-11 15:47:58 +01:00

customtool_test.go

feat(intercept): gate the rendered targets of custom tools (S3b 1.8)

2026-11-11 15:04:42 +01:00

customtool.go

secrets: encrypt the exec spec of custom tools at rest

2026-11-13 21:52:27 +01:00

dto.go

secrets: encrypt search keys, proxies and the LLM profile proxy at rest

2026-11-13 21:33:27 +01:00

engine_budget_test.go

Budgets: revive clears the settle state, document config, allow update_finding_report in wrap-up

2026-11-12 18:48:41 +01:00

engine_budget.go

Hierarchical run budgets: min(child, parent) with forced wrap-up (off by default)

2026-11-12 17:27:28 +01:00

engine_cancelcause_test.go

重构 worker 对话：复用 resume 机制，改专属 goroutine 运行

2026-08-31 09:00:21 -04:00

engine_emptyturn_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

engine_llm_calls_test.go

feat(llm): add profile failover and pool health

2026-08-24 19:28:18 +08:00

engine_timeout.go

Coverage ledger: review fixes (one-line capped fields, framed gap lines, per-run end_reason)

2026-11-12 20:48:34 +01:00

engine.go

Coverage ledger: review fixes (one-line capped fields, framed gap lines, per-run end_reason)

2026-11-12 20:48:34 +01:00

env_scrub_test.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

env_scrub.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

fact_source_schema_test.go

server: add the record_fact source enum to existing databases

2026-11-12 01:09:30 +01:00

finding_reasoning_test.go

feat(findings): optional counterevidence and confidence_rationale

2026-11-11 23:43:12 +01:00

finding_retests_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

finding_retests.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

finding_traffic_export.go

feat: 支持漏洞关联多条流量证据

2026-09-10 13:03:20 +08:00

finding_traffic_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

finding_traffic.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

finding_verification_decode_test.go

test(verification): lock that an empty bound body never satisfies a quote

2026-11-10 12:52:56 +01:00

finding_verification_test.go

test: use an 8+ rune quote in the unreadable-store case

2026-11-09 20:43:25 +01:00

finding_verification.go

feat(findings): optional counterevidence and confidence_rationale

2026-11-11 23:43:12 +01:00

finding_workflow_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

finding_workflow.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

findings_groups_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

findings_groups.go

feat: verification status badge, filter and note in the findings UI

2026-11-09 21:04:12 +01:00

goal_gate_test.go

feat(engine): ouroboros takes - goal ambiguity gate, failover escalation, stagnation surfacing

2026-10-21 14:46:56 +02:00

goal_gate.go

feat(engine): ouroboros takes - goal ambiguity gate, failover escalation, stagnation surfacing

2026-10-21 14:46:56 +02:00

goals_api.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

goals_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

goals.go

Budgets: revive clears the settle state, document config, allow update_finding_report in wrap-up

2026-11-12 18:48:41 +01:00

inheritance_api_test.go

fix: inheritance test teardown closes the manager after the DeleteTask cleanups

2026-10-12 18:43:41 +02:00

inheritance_dto_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

intent_intervention.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

intercept_always_allow_pg_test.go

Intercept: always allow a pending Bash prefix (argv allow rule, code-owned denylist)

2026-11-13 11:24:25 +01:00

intercept_argv_test.go

Intercept: always allow a pending Bash prefix (argv allow rule, code-owned denylist)

2026-11-13 11:24:25 +01:00

intercept_decided_by_test.go

feat: show and filter the decided_by actor in the approval records

2026-11-09 22:35:09 +01:00

intercept_detail_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

intercept_filter_test.go

fix(intercept): judge decisions were stored as unknown (prefix case mismatch)

2026-11-09 12:22:46 +01:00

intercept_live_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

intercept_review_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

intercept.go

Intercept: always allow a pending Bash prefix (argv allow rule, code-owned denylist)

2026-11-13 11:24:25 +01:00

lessons_test.go

feat(rsi): evidence-gated lesson library in shadow mode

2026-10-21 14:25:35 +02:00

lessons.go

feat(rsi): evidence-gated lesson library in shadow mode

2026-10-21 14:25:35 +02:00

llm_key_endpoint_test.go

fix(llm): validate custom User-Agent in the connection-test path

2026-11-08 18:15:33 +01:00

llm_ollama_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

llm_test_fallback_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

llmpool_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

llmpool.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

llmrec_raw_test.go

feat(llmrec): 录制 LLM 请求/响应 HTTP 原文

2026-08-25 09:40:05 -04:00

llmretry_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

llmretry.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

login_limit_test.go

fix(auth): trusted proxies for the login rate limit, 12 characters in reset-password.sh

2026-11-05 16:57:48 +01:00

login_limit.go

fix(auth): trusted proxies for the login rate limit, 12 characters in reset-password.sh

2026-11-05 16:57:48 +01:00

logsink.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

manager_delete_files_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

manager_lifecycle_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

manager.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

mcp_health_test.go

feat: surface MCP server connect health to operators and agents

2026-10-11 22:50:00 +02:00

mcpdiscover.go

feat: surface MCP server connect health to operators and agents

2026-10-11 22:50:00 +02:00

mgmt_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

notifier.go

notify: make the summary and asset limits configurable

2026-11-10 16:05:31 +01:00

notify_api_test.go

notify: make the summary and asset limits configurable

2026-11-10 16:05:31 +01:00

notify_api.go

notify: make the summary and asset limits configurable

2026-11-10 16:05:31 +01:00

orchestration.go

fix(tools): migrate the add_task_scope description on existing databases (F8)

2026-11-12 09:38:52 +01:00

planner_quiet_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

platform_tools_test.go

chore: ARTEX 初始化

2026-07-26 04:27:45 -04:00

platform_tools.go

secrets: encrypt the exec spec of custom tools at rest

2026-11-13 21:52:27 +01:00

prompt_vars_test.go

同步

2026-08-24 14:14:15 +08:00

scheduler.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

secrets_api_test.go

secrets: encrypt search keys, proxies and the LLM profile proxy at rest

2026-11-13 21:33:27 +01:00

server_mgmt.go

secrets: encrypt the exec spec of custom tools at rest

2026-11-13 21:52:27 +01:00

server.go

secrets: encrypt search keys, proxies and the LLM profile proxy at rest

2026-11-13 21:33:27 +01:00

shipped_skills_test.go

agent: code-owned prompt-injection tails and planner goal anchor (#124)

2026-11-11 21:47:44 +01:00

side_questions_test.go

feat(intent): 意图删除支持假删除/真删除两种模式

2026-09-17 12:52:57 -04:00

side_questions.go

feat(llm): optional custom User-Agent for LLM requests

2026-11-08 17:11:43 +01:00

skill_frontmatter_test.go

fix: emit safe skill frontmatter YAML and verify it round-trips

2026-10-11 22:26:22 +02:00

skill_gaps_test.go

feat(server): capability-gap report from skill misses

2026-10-19 00:33:08 +02:00

skill_gaps.go

feat(server): capability-gap report from skill misses

2026-10-19 00:33:08 +02:00

skill_upload_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

skill_usage.go

feat(skills): track usage and missing dependencies

2026-08-24 19:30:14 +08:00

skill_zip.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

sync_scopesentry.go

feat: rea reverse-engineering skill + per-server MCP HTTP request timeout

2026-10-11 19:02:23 +02:00

target_gate_flag_test.go

feat(intercept): spawned tasks and triggered conversations inherit the target gate

2026-11-11 15:47:21 +01:00

target_gate_scope_test.go

Hierarchical run budgets: min(child, parent) with forced wrap-up (off by default)

2026-11-12 17:27:28 +01:00

target_gate_wiring_test.go

feat(intercept): target extraction, resolver, exemptions and the gate in the hook (S3b 1.5-1.7)

2026-11-11 00:34:55 +01:00

target_redirect_test.go

feat(intercept): check every redirect hop against the target gate (S3b 1.9)

2026-11-11 17:07:35 +01:00

task_admission_test.go

同步

2026-08-24 14:14:15 +08:00

task_archive_package_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_archive_package.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_archives_test.go

归档

2026-08-28 12:56:29 +08:00

task_archives.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_assets.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_categories_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_categories.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_control_routes_test.go

feat(tasks): add runtime controls and inherited context

2026-08-24 19:29:00 +08:00

task_control.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_credentials_test.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

task_credentials.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

task_delete_barrier_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_detail_metrics_test.go

fix(server): fill task metrics on the detail endpoint

2026-10-13 14:49:47 +02:00

task_end_reason_test.go

Coverage ledger: review fixes (one-line capped fields, framed gap lines, per-run end_reason)

2026-11-12 20:48:34 +01:00

task_intercept.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_llm_escalation_test.go

fix(test): escalation test to the ctx-aware hooks.current signature

2026-10-21 15:16:25 +02:00

task_llm_rotation_test.go

feat(engine): per-intent LLM chain-head rotation (opt-in llm_rotate)

2026-10-21 15:00:16 +02:00

task_llm_test.go

Merge pull request #114 from BaaRai/feat/per-intent-llm-rotation

2026-10-21 15:13:56 +02:00

task_llm.go

Merge pull request #114 from BaaRai/feat/per-intent-llm-rotation

2026-10-21 15:13:56 +02:00

task_metadata_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_metadata.go

feat(intercept): target-gate schema, opt-in flag and approval requests (S3b 1.2-1.4)

2026-11-10 23:05:47 +01:00

task_outcome_test.go

feat(server): per-task outcome card for RSI baselines

2026-10-19 00:28:27 +02:00

task_outcome.go

feat(server): per-task outcome card for RSI baselines

2026-10-19 00:28:27 +02:00

task_pause_deadline_test.go

fix(tasks): freeze the timeout budget while a task is paused

2026-10-09 11:37:30 +02:00

task_resolution.go

ollama llm

2026-10-23 18:12:38 -03:00

task_scope_description_test.go

fix(tools): migrate the add_task_scope description on existing databases (F8)

2026-11-12 09:38:52 +01:00

task_templates_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

task_templates.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

testmain_test.go

Encrypt stored secrets at rest in PostgreSQL

2026-11-13 14:42:56 +01:00

tool_usage_test.go

抽屉优化

2026-08-25 12:05:26 +08:00

tool_usage.go

抽屉优化

2026-08-25 12:05:26 +08:00

tools_secrets_api_test.go

secrets: encrypt the exec spec of custom tools at rest

2026-11-13 21:52:27 +01:00

tools_wire_test.go

fix(tools): harden obj against blank required names and heal seeded list_task_credentials rows

2026-11-10 09:46:49 +01:00

traffic_ingest_test.go

server: skip Postgres-backed tests when no database is configured

2026-11-10 16:28:26 +01:00

traffic_ingest.go

Traffic ingest: capture operator browsing via a browser extension

2026-10-11 14:53:08 +02:00

trigger_merge_test.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

triggers.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

update_check_test.go

Opt-in update banner, off by default

2026-11-12 12:54:25 +01:00

update_check.go

Opt-in update banner, off by default

2026-11-12 12:54:25 +01:00

webui_embed.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

webui_stub.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00

worker_message_test.go

重构 worker 对话：复用 resume 机制，改专属 goroutine 运行

2026-08-31 09:00:21 -04:00

workspace.go

Translate all Chinese text to English

2026-10-08 23:14:34 +02:00