CalvinBackup/CyberStrikeAI
1
0 Fork 0
mirror of https://github.com/Ed1s0nZ/CyberStrikeAI.git synced 2026-11-14 08:17:36 +01:00
Code Issues Packages Projects Releases Wiki Activity
2,459 Commits 18 Branches 153 Tags
b165fb4cf28fe66f18283f076cf993d589c79312
Commit Graph
2459 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
公明 b165fb4cf2 Merge pull request #397 from Sycun/codex/fix-update-auto-refresh 
fix(update): restore the browser after switching builds
 2026-11-13 11:27:11 +08:00
Sycun 83b0b7b909 fix(tls): reuse the generated HTTPS certificate across updates 
(cherry picked from commit 4f2af3371bd5ff89721f222462713bc16beed4b2)
 2026-11-13 11:14:04 +08:00
Sycun 48065ad75f Merge remote-tracking branch 'origin/main' into HEAD 
# Conflicts:
#	internal/app/app.go
 2026-11-13 11:14:04 +08:00
公明 2a7f13b970 Merge pull request #396 from Sycun/codex/fix-long-chat-scroll 
fix(chat): stabilize scrolling in long streaming conversations
 2026-11-13 11:10:39 +08:00
公明 8ecd44d02d Merge pull request #392 from Sycun/codex/pi-runtime-migration 
refactor(runtime): migrate the agent engine from Eino to Pi
 2026-11-13 11:08:23 +08:00
Sycun f4c7ad10d6 fix(skills): count Pi skill tool calls 
(cherry picked from commit b3ecf73a26c4e2a483b59190f81f2064c88abeeb)
 2026-11-13 10:32:43 +08:00
Sycun 7d2465ec89 fix(update): reload after confirming the accepted update is running 
(cherry picked from commit aa7a533497a6b524fbd4d7d330ca06b04414e2fb)
 2026-11-13 10:07:44 +08:00
Sycun 8819d25e37 fix(chat): stabilize scrolling in long streaming conversations 2026-11-13 08:54:04 +08:00
Sycun f44cf8b1dd test(pi): inject invalid persisted root after path validation 2026-11-12 21:29:58 +08:00
Sycun 634e823739 test(pi): make cleanup failure regression portable 2026-11-12 21:24:54 +08:00
Sycun 7c476fe2ac fix(pi): invalidate deleted sessions and prepare legacy upgrades 2026-11-12 21:18:52 +08:00
公明 13abffb1a2 Merge pull request #391 from Sycun/codex/seamless-one-click-update 
fix(update): activate new versions without interrupting sign-in
 2026-11-12 18:29:49 +08:00
Sycun cfaa95d7bd refactor(runtime): remove Eino and make Pi the sole agent engine 
Delete the Eino model adapters, callbacks, middleware, orchestration,
summarization and single-agent runner together with their dependencies.
Chat, batch tasks, workflow Agent nodes and sub-agents now share the Pi
runtime, and dispatch is a single code path instead of an engine switch.

Configuration migrates eino_middleware/eino_skills to runtime/skills and
drops the retired callback settings while old files still load. Settings,
i18n and docs describe Pi only. Also carry the Pi follow-up fixes: empty
required lists are omitted from tool schemas, historical tool results stay
with their call batch, model proxies work over HTTP/1.1, single-query
retrieval skips query expansion, and finalization docs match Pi lifecycle
events.
 2026-11-12 17:55:36 +08:00
Sycun 35508eb614 feat(pi): add the Pi agent runtime with native workflow and retrieval engines 
Introduce an isolated Node worker that hosts the Pi SDK while Go keeps
business state, permissions, MCP execution, evidence and delivery checks.
The worker is published per source fingerprint, streams events back to Go
and supports tool callbacks, cancellation, session resume and per-model
transport settings.

Agent dispatch, tool search, plan/task tools and migration controls are
wired on top of it: large tool catalogs load through Pi tool_search, the
conversation task board keeps its existing tools, and legacy mode/route
values still resolve. Workflow gains a native DAG with versioned JSON
checkpoints, and knowledge retrieval moves to native documents, splitter,
HTTP embeddings, vector search and reranking.
 2026-11-12 17:55:33 +08:00
Sycun c48984f91d fix(update): switch versions without interrupting sign-in 
(cherry picked from commit 5d98f5d8057f788dea8299dceffb540cf67271cc)
 2026-11-12 17:54:07 +08:00
Sycun 46c38a2d10 fix(update): activate new binaries without a supervisor 
(cherry picked from commit 9ed4e19f5ea600e185771368c540025df80b11bf)
 2026-11-12 17:51:55 +08:00
公明 b43bdb991c Merge pull request #385 from Sycun/codex/fix-eino-interleaved-tool-stream 
fix(multiagent): avoid false empty output on interleaved tool streams
 2026-11-08 17:35:27 +08:00
Sycun e4de840086 fix(multiagent): repair interleaved agentic stream indices 2026-11-06 21:26:00 +08:00
公明 557f74d747 Merge pull request #384 from Sycun/codex/fix-plugin-rbac-login 
fix(plugins): support username-based RBAC login in Burp and browser extensions
 2026-11-03 16:34:50 +08:00
Sycun be99656c1c fix(plugins): support username-based RBAC authentication 2026-11-03 16:25:51 +08:00
公明 d0951fd3fc Merge pull request #379 from nightslient/feat/ai-channel-custom-headers 
feat(headers): 支持为 AI 渠道配置自定义 HTTP 请求头
 2026-11-02 17:37:17 +08:00
Ed1s0nZ 195540b619 fix(headers): mask private names and stabilize empty audit configuration 2026-11-02 17:22:52 +08:00
Ed1s0nZ 5feea8d3c3 fix(headers): isolate credentials across audit, redirects and probes 2026-11-02 17:18:12 +08:00
Ed1s0nZ 585c95a0e2 Merge commit '0340c07363720e356b4cd7adafe343cbee804764' into codex/pr379-header-boundaries 2026-11-02 17:13:25 +08:00
公明 0340c07363 Merge pull request #378 from Sycun/codex/issue-365-word-reports 
feat(vulnerabilities): 单条漏洞下载支持选择 Markdown 或 Word
 2026-11-02 15:47:37 +08:00
Ed1s0nZ 02b295d738 Merge main and preserve both changelog additions for #378 2026-11-02 15:38:16 +08:00
公明 d227396e74 Merge pull request #376 from muhannadalhariri/i18n/ar-SA-ui 
i18n: add Arabic (ar-SA) UI locale with RTL support
 2026-11-02 14:57:23 +08:00
Ed1s0nZ 697e875fa4 feat: make agent task timeout configurable 2026-10-31 16:43:25 +08:00
Ed1s0nZ 6ad8d47c74 fix: restore WebShell batch probe completion 2026-10-31 02:26:46 +08:00
nightslient 691dbd0107 test(headers): 覆盖自定义请求头注入与测试连接链路 
- applyCustomHeaders：覆盖内置头、跳过空值、无配置时保持原行为
- headersRoundTripper：经 Eino 传输链端到端验证头已下发
- %session_id%：有会话时替换、无会话时跳过该头
- TestOpenAI：测试连接会携带静态头，%session_id% 填充探测值，
  未配置 headers 时仍使用 Bearer <api_key>
 2026-10-30 20:16:27 +08:00
root d6b0aed1de feat(headers): 支持为 AI 渠道配置自定义 HTTP 请求头 
部分 OpenAI 兼容供应商（如 opencode）要求私有鉴权头或会话头，
而非标准的 Authorization: Bearer，导致无法接入。

- config: OpenAIConfig / AIChannelConfig 新增 headers 字段，
  值支持 ${ENV_VAR}、${ENV_VAR:-default} 与 %session_id% 占位符
- openai: 新增 headersRoundTripper 接入 Eino ChatModel 传输链，
  同名的内置头（Authorization/User-Agent 等）可被覆盖
- openai: 内置 Client 的 4 处出站请求同样注入自定义头
- handler: 任务开始时把对话 ID 注入 ctx，供 %session_id% 替换；
  连接测试没有真实会话，使用探测值 connect-test
- web: 渠道设置页新增“自定义请求头”编辑区（每行 KEY=VALUE）
- 占位符使用 %session_id% 而非 {{session_id}}，因为 index.html
  由 Go html/template 渲染，双花括号会被当作模板函数解析
 2026-10-30 20:13:56 +08:00
Ed1s0nZ bc0b288d40 Fix audit model thinking compatibility 2026-10-30 16:11:07 +08:00
Sycun baa1d02cd4 feat(vulnerabilities): offer Markdown and Word report downloads 2026-10-30 09:29:44 +08:00
muhannadalhaririandClaude Opus 4.8 caa7700345 i18n: add Arabic (ar-SA) UI locale with RTL support 
Add Modern Standard Arabic (ar-SA) as a selectable UI language alongside
the existing zh-CN, en-US and ru-RU locales.

- web/static/i18n/ar-SA.json: new Arabic locale (4272 leaf strings,
  full key/placeholder parity with en-US). The `c2` and `webshell`
  sections are intentionally omitted and fall back to English via the
  i18next fallback chain (ar-SA -> en-US -> zh-CN).
- web/static/js/i18n.js: register ar-SA, detect `ar*` navigator language,
  preload en-US as fallback, set document dir="rtl" for Arabic, and add
  the ar-SA language label handling.
- web/static/i18n/{zh-CN,en-US,ru-RU}.json: add the `lang.arSA` label.
- web/templates/{index,api-docs}.html: add the العربية option to the
  language dropdown.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-10-29 10:42:55 +03:00
公明 5affb4df1b Merge pull request #370 from GQingL/main 
Enhance RBAC UI with scrolling, spacing, and layout fixes
 2026-10-28 09:45:04 +08:00
lgq 0a6dc6f872 fix: use floating pagination selects across pages for Chrome compatibility 2026-10-27 23:59:47 +08:00
lgq 0dea628e89 fix: open project pagination dropdown upward 2026-10-27 23:23:44 +08:00
lgq 816abfb841 fix: prevent external MCP stats and card controls from overlapping 2026-10-27 23:09:13 +08:00
lgq 9cb6922a88 fix: add spacing below RBAC assignment filters 2026-10-27 20:23:36 +08:00
lgq 07346ca002 fix: allow horizontal scrolling in RBAC resource filter bar 2026-10-27 20:15:57 +08:00
lgq cf98c8bd36 Merge branch 'codex/backup-before-sync-20261027-f0f93283' 2026-10-27 19:40:54 +08:00
lgq f0f93283ee fix: contain RBAC role catalog scrolling within workspace 2026-10-27 19:15:49 +08:00
lgq 4aeb296a98 fix: prevent RBAC member list from shrinking header controls 2026-10-27 19:03:33 +08:00
公明 0993dd8aad Merge pull request #369 from GQingL/main 
fix(settings): allow desktop sidebar to scroll
 2026-10-27 17:04:06 +08:00
lgq 6daac86e06 fix(settings): allow desktop sidebar to scroll 2026-10-27 16:55:18 +08:00
Ed1s0nZ c0d5c8460b feat(api): add durable asynchronous conversation runs 2026-10-23 11:45:15 +08:00
Ed1s0nZ 5c5c5e199d fix(openai): preserve provider-specific reasoning disable intent (#366) 2026-10-21 15:43:53 +08:00
Ed1s0nZ be2c8c04e5 fix(rbac): protect built-in administrator from losing access 2026-10-19 16:44:14 +08:00
Ed1s0nZ e6121e83eb docs: translate four remaining guides and align bilingual navigation 2026-10-16 17:07:02 +08:00
Ed1s0nZ 63955c4d30 docs: remove internal process journals and organize public guides 2026-10-16 16:59:01 +08:00