Conversation
…nding_checks 等新表与存取
# Conflicts: # CHANGELOG.md # agent/tools.go # agent/worker.go # db/intercept.go # guard/guard.go # intercept/prompt.go # intercept/prompt_test.go # server/intercept.go
…ainToolsSurviveNilStores 契约
|
@ymh is attempting to deploy a commit to the Autumn's projects Team on Vercel. A member of the Team first needs to authorize it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
二开整体贡献：内网作战子系统 + 阶段编排 + 部署链加固
动机
把 ARTEX 从「外网自动化探索」扩展为「外网突破 → 立足点 → 内网纵深」的全流程自主渗透平台,并补齐实战中踩出的稳定性与运维短板。所有新能力以独立子系统/新包接入,与上游核心(双图、planner/worker、审批门)零侵入,rebase 冲突面可控。
主要内容(按 commit 分组)
feat(db)feat: 内网作战子系统session/(webshell 加密会话)、tunnel/(suo5/chisel 多层代理隧道)、stage/(受管暂存投递)、recon/(立足点被动侦察)feat(server): 内网作战端点feat(server): 安全与稳定feat(agent)feat: 支撑包feat(deploy)artex doctor部署预检(7 项,FAIL 退出码 1)/外部工具钉版清单(tools-manifest.json,启动自检 sha256)/systemd unit(与退出码 75 换装兼容)feat(web)feat(skills)docs合并上游 main 的冲突解决说明(8 个文件)
原则:两侧语义都保留。唯一例外是
intercept/prompt.go的裁判输出解析——上游换成了严格 JSON 协议,对否定/混合/整词等对抗输入拒绝得更彻底,故取上游实现;我方的 untrusted-data 包裹保留并挪进reviewCompletion内部(整个 ReviewInput JSON 包裹后喂裁判,提示词同步说明标签语义)。另修复一个跨侧整合问题:cancel_intent接入writeExpTool的 nil-store 门卫(单独 commit)。验证
go build ./.../go vet ./...通过;agent/db/guard/intercept/llmpool/tools包测试全过;server包有 4 个既有环境性失败(缺 PG DSN ×3、Windows 路径 ×1,上游即有,与改动无关)tsc --noEmit/ 静态导出构建通过;实体机(Ubuntu 18 + PG10)连续运行,systemd 托管,artex doctor全绿说明