Help us shape the future of Go! Take the 2026 Go Developer Survey

server

package
v0.15.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 27, 2026 License: AGPL-3.0 Imports: 82 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var BuildVersion = "dev"

BuildVersion is the backend application version, injected from cmd/artex at startup (which in turn gets it from -ldflags "-X main.version=<tag>"). Defaults to "dev" for local builds. Exposed to the frontend via GET /api/health.

Functions

func RestartRequested 

func RestartRequested() <-chan struct{}

RestartRequested 返回一个在"请退出并让守护进程重新拉起我"时关闭的 channel。

func RestoreLegacyRunnerCheckpoint added in v0.12.4 

func RestoreLegacyRunnerCheckpoint(ctx context.Context, dsn string) error

RestoreLegacyRunnerCheckpoint is an offline downgrade operation. Stop both controller and manager first. Only the checkpoint representation changes; task progress is never restored from a stale backup. No content is returned.

func SetBootUpdateState 

func SetBootUpdateState(st selfupdate.State)

SetBootUpdateState 由 main 在启动时调用一次。

func StartLogCapture 

func StartLogCapture()

StartLogCapture redirects the standard log package through the in-memory sink (still writing to stderr). Call once at startup, as early as possible.

Types

type ActivityDTO 

type ActivityDTO struct {
	Seq          int64           `json:"seq"`                 // db Activity.ID
	IntentID     string          `json:"intent_id,omitempty"` // db NodeID
	Worker       string          `json:"worker"`
	TS           string          `json:"ts"` // db CreatedAt
	Kind         string          `json:"kind"`
	Tool         string          `json:"tool,omitempty"`
	ToolUseID    string          `json:"tool_use_id,omitempty"`
	IsError      bool            `json:"is_error"`
	Summary      string          `json:"summary"`
	Detail       string          `json:"detail,omitempty"`
	Metadata     json.RawMessage `json:"metadata,omitempty"`
	SourceTaskID string          `json:"source_task_id,omitempty"`
	Inherited    bool            `json:"inherited,omitempty"`
	MainSeg      *int            `json:"main_seg,omitempty"` // main-agent conversation segment (nil for non-mainagent rows)
	// token usage (set only on kind='result'); used for per-session token totals.
	InputTokens      *int `json:"input_tokens,omitempty"`
	OutputTokens     *int `json:"output_tokens,omitempty"`
	CacheReadTokens  *int `json:"cache_read_tokens,omitempty"`
	CacheWriteTokens *int `json:"cache_write_tokens,omitempty"`
}

type AgentDTO 

type AgentDTO struct {
	ID               string `json:"id"`
	Key              string `json:"key"`
	Name             string `json:"name"`
	Description      string `json:"description"`
	Role             string `json:"role"`
	Builtin          bool   `json:"builtin"`
	Enabled          bool   `json:"enabled"`
	MaxTurns         int    `json:"max_turns"`
	RunSecs          int    `json:"run_seconds"`
	WebSearch        bool   `json:"web_search"`
	InteractiveShell bool   `json:"interactive_shell"`
	LLMProfileID     *int64 `json:"llm_profile_id"` // 绑定的 LLM 配置;null=跟随任务/全局
	// P3 触发后处理策略(仅自定义 agent 有意义)。
	TriggerRunMode     string `json:"trigger_run_mode"`
	TriggerMergeMode   string `json:"trigger_merge_mode"`
	TriggerMaxParallel int    `json:"trigger_max_parallel"`
	// binding counts (populated only by the list endpoint) — shown on agent cards.
	McpCount   int `json:"mcp_count"`
	SkillCount int `json:"skill_count"`
	ToolCount  int `json:"tool_count"`
}

type Broadcaster 

type Broadcaster struct {
	// contains filtered or unexported fields
}

Broadcaster is a per-task in-process pub/sub for live activity events. The engine publishes each appended activity at its single emit point; SSE handlers subscribe per task. Storage (activity table) and the live stream come from the same Publish call, so they never diverge.

func NewBroadcaster 

func NewBroadcaster() *Broadcaster

func (*Broadcaster) Publish 

func (b *Broadcaster) Publish(task string, a db.Activity)

Publish fans an activity out to all subscribers of a task. Non-blocking: if a subscriber's buffer is full the event is dropped — the client reconnects with its last seq cursor and catches up the gap from the DB, so liveness never stalls the engine.

func (*Broadcaster) Subscribe 

func (b *Broadcaster) Subscribe(task string) (<-chan db.Activity, func())

Subscribe returns a buffered channel of activities for a task plus an unsubscribe func the caller must invoke (defer) to release it.

type ConstraintDTO 

type ConstraintDTO struct {
	ID     string `json:"id"`
	Kind   string `json:"kind"` // allow | deny
	Text   string `json:"text"`
	Origin string `json:"origin,omitempty"`
	TS     string `json:"ts,omitempty"`
}

ConstraintDTO is one operation constraint (allow/deny) for the 总览「约束管理」UI.

type CoverageAssetRefDTO 

type CoverageAssetRefDTO struct {
	ID           int64  `json:"id"`
	Kind         string `json:"kind"`
	State        string `json:"state"`
	Summary      string `json:"summary"`
	SourceTaskID string `json:"source_task_id,omitempty"`
	Inherited    bool   `json:"inherited,omitempty"`
}

type DeleteTaskOptions 

type DeleteTaskOptions struct {
	DeleteAssets     bool `json:"delete_assets"`
	DeleteTraffic    bool `json:"delete_traffic"`
	DeleteFiles      bool `json:"delete_files"`
	DeleteFindings   bool `json:"delete_findings"`
	DeleteLLMRecords bool `json:"delete_llm_records"`
}

DeleteTaskOptions controls cleanup of data stored outside the task's own exploration graph. All options default to false for backward compatibility.

type DeleteTaskResult 

type DeleteTaskResult struct {
	Deleted           string `json:"deleted"`
	AssetsDeleted     int64  `json:"assets_deleted"`
	AssetsDetached    int64  `json:"assets_detached"`
	TrafficDeleted    int64  `json:"traffic_deleted"`
	FilesDeleted      bool   `json:"files_deleted"`
	FindingsDeleted   int64  `json:"findings_deleted"`
	LLMRecordsDeleted int64  `json:"llm_records_deleted"`
	CleanupWarning    string `json:"cleanup_warning,omitempty"`
}

DeleteTaskResult makes destructive cleanup auditable to API callers.

type EdgeDTO 

type EdgeDTO struct {
	Src string `json:"src"`
	Dst string `json:"dst"`
	Rel string `json:"rel"`
}

type Engine 

type Engine struct {
	// contains filtered or unexported fields
}

Engine drives the event-driven exploration loop with real LLM agents (docs §4.3/§4.4): on asset/exploration-graph change (debounced) it wakes the planner, which reads the route, queries assets, judges goals and emits intents; N concurrent work agents claim intents and execute them. There is no simulation mode — an LLM provider is required. The planner/worker can be (re)installed at runtime (LLM configured from the UI); the loops always run but idle until an LLM is set.

func NewEngine 

func NewEngine(m *Manager) *Engine

func (*Engine) AbortDelete 

func (e *Engine) AbortDelete(taskID string, keepPaused bool)

func (*Engine) ActiveLLMCalls 

func (e *Engine) ActiveLLMCalls(taskID string) int64

func (*Engine) BeginDelete 

func (e *Engine) BeginDelete(taskID string) bool

BeginDelete installs an execution barrier before task data/files are removed. The temporary pause is not a user pause. The server serializes this transition with lifecycle admission and tells AbortDelete whether the persisted task is paused/queued if cleanup fails.

func (*Engine) BeginLLMCall 

func (e *Engine) BeginLLMCall(taskID string)

BeginLLMCall/EndLLMCall track actual provider calls separately from the scheduler's task-operation counter. A task can have live loops while all of them are waiting for a trigger; that state must remain idle in the UI.

func (*Engine) Broadcaster 

func (e *Engine) Broadcaster() *Broadcaster

Broadcaster exposes the engine's live activity pub/sub (used by the SSE handler).

func (*Engine) Close 

func (e *Engine) Close()

Close prevents new engine admissions and waits for both task loops and already admitted operations, including standalone worker chat turns.

func (*Engine) ControlWork 

func (e *Engine) ControlWork(ctx context.Context, intentID int64, action string) error

ControlWork requests a user-visible pause or cancellation and waits until the worker has fully stopped writing. Cancellation cleanup is performed by the API handler after this returns; pause state is committed by runWorkerStep itself.

func (*Engine) EndLLMCall 

func (e *Engine) EndLLMCall(taskID string)

func (*Engine) IsDeleting 

func (e *Engine) IsDeleting(taskID string) bool

func (*Engine) IsPaused 

func (e *Engine) IsPaused(taskID string) bool

IsPaused reports whether a task is user-paused.

func (*Engine) KillWork 

func (e *Engine) KillWork(intentID int64) error

KillWork cancels the in-flight work running intentID (planner's kill_work tool). The work's agent-core session honors ctx cancellation and aborts promptly.

func (*Engine) LastActivity 

func (e *Engine) LastActivity(taskID string) int64

LastActivity returns the unix time of the last planner/worker activity for a task (0 if none yet).

func (*Engine) Pause 

func (e *Engine) Pause(taskID string, cause error)

Pause stops a task: marks it paused AND cancels any in-flight planner/worker run for it (a long worker.Execute would otherwise keep going until it finishes).

func (*Engine) Ready 

func (e *Engine) Ready() bool

Ready reports whether a global LLM provider is configured (via the readiness predicate wired at startup).

func (*Engine) ReadyFor 

func (e *Engine) ReadyFor(t *Task) bool

ReadyFor reports whether a specific task can resolve a planner/worker pair. An explicit task profile chain can be runnable even when no global default provider is configured, so task status must not rely on Ready alone.

func (*Engine) ReconcileWorkers added in v0.5.0 

func (e *Engine) ReconcileWorkers()

ReconcileWorkers reads the persisted value while serializing updates with task startup/deletion. It never cancels the task's execution context.

func (*Engine) Resume 

func (e *Engine) Resume(t *Task)

Resume un-pauses a task and nudges a fresh planning round. The next exec under it gets a fresh (uncancelled) context.

func (*Engine) Run 

func (e *Engine) Run(ctx context.Context, t *Task)

Run starts the planner loop + N worker loops for a task. The loops always run but no-op until an LLM is configured (so a task created while idle picks up automatically once LLM is set from the UI).

func (*Engine) SetAgentResolver 

func (e *Engine) SetAgentResolver(fn func(t *Task) (*agent.Planner, *agent.Worker))

SetAgentResolver installs a per-task planner/worker resolver (wired by the server). Called once at startup before any task loop runs, so no lock is needed on reads.

func (*Engine) SetAuthoritativeAgentResolver 

func (e *Engine) SetAuthoritativeAgentResolver(fn func(t *Task) (*agent.Planner, *agent.Worker))

SetAuthoritativeAgentResolver installs a resolver whose nil result must not fall through to the global provider. Task-level failover chains use this so a fully exhausted chain cannot silently bypass its configured boundary.

func (*Engine) SetReadiness 

func (e *Engine) SetReadiness(fn func() bool)

SetReadiness wires the global "an LLM provider is configured" predicate (read by Ready() / the llm_configured indicator). Called once at startup.

func (*Engine) Started 

func (e *Engine) Started(taskID string) bool

Started reports whether the engine loops are running for a task.

func (*Engine) SteerWork 

func (e *Engine) SteerWork(intentID int64, msg string) error

SteerWork queues a mid-run course-correction for the work running intentID (the planner's steer_work tool). The worker delivers it before its next tool call and re-plans — no kill. Errors if no work is currently running that intent.

func (*Engine) StopTask 

func (e *Engine) StopTask(taskID string)

StopTask permanently stops every long-lived goroutine and removes all Engine state for a successfully deleted task. The delete barrier remains installed until cleanup finishes, so no new task operation can race the teardown.

type FindingAssetDTO 

type FindingAssetDTO struct {
	ID    string `json:"id"`
	Type  string `json:"type"`
	Label string `json:"label"`
}

FindingAssetDTO is one asset a finding is anchored to, pre-labelled for display.

type FindingDTO 

type FindingDTO struct {
	TrafficCount          int                        `json:"traffic_count"`
	EvidenceVersion       int64                      `json:"evidence_version"`
	ReportEvidenceVersion int64                      `json:"report_evidence_version"`
	ReportStale           bool                       `json:"report_stale"`
	TrafficBindings       []db.FindingTrafficBinding `json:"traffic_bindings,omitempty"`

	ID        string `json:"id"`
	FindingID string `json:"finding_id,omitempty"` // standalone findings-table id — the handle for status updates
	VulnClass string `json:"vulnclass"`
	Name      string `json:"name,omitempty"` // 漏洞名称;为空时前端回退展示 vulnclass
	Severity  string `json:"severity"`       // critical | high | medium | low
	Status    string `json:"status"`         // pending | in_progress | confirmed | resolved | fixed | false_positive | ignored | duplicate | risk_accepted
	Summary   string `json:"summary"`
	Evidence  string `json:"evidence"`
	Report    string `json:"report,omitempty"` // 详细报告(Markdown);仅详情接口返回,列表为空

	IntentID        string            `json:"intent_id,omitempty"`
	ParamID         string            `json:"param_id,omitempty"`
	TaskID          string            `json:"task_id,omitempty"`
	TaskDescription string            `json:"task_description,omitempty"`
	SourceTaskID    string            `json:"source_task_id,omitempty"`
	Inherited       bool              `json:"inherited,omitempty"`
	Assets          []FindingAssetDTO `json:"assets,omitempty"`
	TS              string            `json:"ts"`
}

type FindingSeverityDTO 

type FindingSeverityDTO struct {
	Critical int `json:"critical"`
	High     int `json:"high"`
	Medium   int `json:"medium"`
	Low      int `json:"low"`
}

FindingSeverityDTO 是任务列表里按严重度分档的漏洞计数（严重/高/中/低）。

type GoalDTO 

type GoalDTO struct {
	ID        string `json:"id"`
	Text      string `json:"text"`
	VulnClass string `json:"vulnclass,omitempty"`
	State     string `json:"state"`
	Origin    string `json:"origin,omitempty"`
	TS        string `json:"ts"`
}

GoalDTO is a goal node with its payload unpacked into text/vulnclass — the shape the 总览「目标管理」UI works with (vs TaskNodeDTO which carries raw payload JSON).

type LLMPoolMemberStatus 

type LLMPoolMemberStatus struct {
	ProfileID string `json:"profile_id"`
	Name      string `json:"name"`
	Model     string `json:"model"`
	Format    string `json:"format"`
	Priority  int    `json:"priority"`
	Active    bool   `json:"active"`   // is the globally-activated profile
	Excluded  bool   `json:"excluded"` // pool_exclude — not a failover target
	// Health: state is "ok" | "degraded" (failing but not tripped) | "tripped".
	State        string `json:"state"`
	Fails        int    `json:"fails"`
	Trips        int    `json:"trips"`
	CooldownSecs int    `json:"cooldown_secs"` // remaining cooling-off seconds; 0 = none
	LastError    string `json:"last_error,omitempty"`
	LastAt       string `json:"last_at,omitempty"`
}

LLMPoolMemberStatus is one chain entry as shown in the UI.

type LLMProfileDTO 

type LLMProfileDTO struct {
	ID              string  `json:"id"`
	Name            string  `json:"name"`
	Format          string  `json:"format"`
	BaseURL         string  `json:"base_url,omitempty"`
	Proxy           string  `json:"proxy,omitempty"`
	Model           string  `json:"model"`
	APIKeyHint      string  `json:"api_key_hint,omitempty"`
	RatePerSecond   float64 `json:"rate_per_second"`
	RatePerMinute   float64 `json:"rate_per_minute"`
	ContextWindowK  int     `json:"context_window_k"`
	ThinkingType    string  `json:"thinking_type"`
	ReasoningEffort string  `json:"reasoning_effort"`
	IsDefault       bool    `json:"is_default"`
	// 轮询(故障转移)参数：priority 越大越先被选中(激活配置恒为链首)；
	// pool_exclude=true 则不作为故障转移目标，但仍可被 agent/任务显式绑定。
	Priority    int  `json:"priority"`
	PoolExclude bool `json:"pool_exclude"`
	// 收发模式：true=流式(SSE) | false=非流式。没有 omitempty —— false 必须出现在
	// 响应里，否则前端读不到「非流式」，开关会回落成默认的流式。
	Streaming bool `json:"streaming"`
	// 单次回复输出上限(0=不发送，由服务端默认值决定)，以及它用哪个请求字段名
	// (”=max_tokens | 'max_completion_tokens'，仅 openai 格式有意义)。
	MaxTokens      int    `json:"max_tokens"`
	MaxTokensField string `json:"max_tokens_field"`
	// 自定义会话头名：非空时每次请求带该 HTTP 头，头值=当前会话/意图的 session id。
	// ”=不发送。用于按 session-id 头做提示缓存/粘性路由的网关。
	SessionHeaderKey string `json:"session_header_key"`
	// 本配置对重试的覆盖(建连/空响应/同 provider 安全窗口)。每项 attempts:
	// 0=继承全局策略 | -1=关闭该层重试 | >0=次数；interval_ms: 0=用默认指数退避 |
	// >0=改用该固定毫秒间隔。全 0 = 完全跟随全局，即历史行为。
	Retry db.RetryOverride `json:"retry"`
}

type LogLine 

type LogLine struct {
	Seq   int64  `json:"seq"`
	DBID  int64  `json:"db_id,omitempty"` // server_logs.id; 0 for pre-persistence entries
	TS    string `json:"ts"`
	Level string `json:"level"` // info | warn | error
	Tag   string `json:"tag"`   // the leading [tag] (pg / planner / activity / …), if any
	Text  string `json:"text"`
}

LogLine is one captured backend log entry exposed by the /api/logs endpoints.

type Manager 

type Manager struct {
	// contains filtered or unexported fields
}

Manager owns the PostgreSQL data source (asset graph + every task's exploration graph + config) and the in-memory set of task handles.

func NewManager 

func NewManager(dir, proxyAddr string) (*Manager, error)

NewManager connects to PostgreSQL and, if proxyAddr is non-empty, starts the traffic-recording proxy. PostgreSQL is required (it is the single data source).

func (*Manager) ActiveTask 

func (m *Manager) ActiveTask() *Task

ActiveTask returns the currently active task (or nil).

func (*Manager) ApplyTaskAdmission 

func (m *Manager) ApplyTaskAdmission(id, expectedStatus, status string, queued bool, mode string, preservePosition bool) error

ApplyTaskAdmission atomically commits the lifecycle fields controlled by the concurrency scheduler. Keeping status, paused and queue metadata in one UPDATE prevents a failed resume from leaving a task half-revived (for example running but still user-paused, or dequeued without an Engine start).

preservePosition applies only when the row is already queued. A repeated admission keeps its FIFO timestamp; a task that was explicitly paused and is now re-queued receives a fresh tail position.

func (*Manager) ApplyTaskPause 

func (m *Manager) ApplyTaskPause(id string) error

ApplyTaskPause atomically removes a task from the admission queue and records the user pause. queue_mode is intentionally retained so resuming a never-run bootstrap task still performs goal decomposition, but the next enqueue receives a new queued_at timestamp and therefore moves to the FIFO tail.

func (*Manager) Assets 

func (m *Manager) Assets() *pgdb.AssetStore

func (*Manager) Close 

func (m *Manager) Close() error

func (*Manager) ConcurrencyLimit 

func (m *Manager) ConcurrencyLimit() (enabled bool, limit int)

ConcurrencyLimit returns whether the simultaneous-running-task cap is enabled and its limit (default 5 when enabled but unset). limit is always >=1 when enabled.

func (*Manager) CreateTask 

func (m *Manager) CreateTask(description, goal string, llmProfileID *int64, timeoutSeconds, planHeartbeatSeconds int) (*Task, error)

CreateTask creates a task + its exploration and makes it active. timeoutSeconds is the task-level wall-clock budget (0 = 不限时).

func (*Manager) CreateTaskWithOptions 

func (m *Manager) CreateTaskWithOptions(description, goal string, opts pgdb.TaskCreateOptions) (*Task, error)

func (*Manager) DeleteCompanyWithAssets 

func (m *Manager) DeleteCompanyWithAssets(id int64, deleteAssets bool) (int64, error)

DeleteCompanyWithAssets keeps the database cascade and live task handles in one manager-level critical section. This closes the gap where a task could commit its company scope immediately before registration and miss the post-delete in-memory sweep.

func (*Manager) DeleteTask 

func (m *Manager) DeleteTask(id string, opts DeleteTaskOptions) (DeleteTaskResult, error)

DeleteTask removes a task and optionally its related global data. Traffic has no task-id column, so related exchanges are resolved by exact hosts from the task's asset rows. Files are staged before the database operation; traffic is staged while PostgreSQL excludes asset/anchor writers. Both are restored on a database failure and purged only after its commit.

func (*Manager) DeleteTaskCategory 

func (m *Manager) DeleteTaskCategory(id int64) (bool, error)

DeleteTaskCategory moves all affected live tasks to the uncategorized bucket.

func (*Manager) DequeueTask 

func (m *Manager) DequeueTask(id string, clearMode bool) error

DequeueTask removes the concurrency hold. clearMode=false is used when a user pauses a queued task so a later resume still knows whether bootstrap is needed.

func (*Manager) EnqueueTask 

func (m *Manager) EnqueueTask(id, mode string) error

EnqueueTask persists the concurrency hold and syncs the in-memory handle.

func (*Manager) Enrich 

func (m *Manager) Enrich() *enrich.Engine

Enrich returns the asset auto-completion engine (may be nil if init failed).

func (*Manager) GlobalProxy 

func (m *Manager) GlobalProxy() string

GlobalProxy returns the configured global egress proxy URL (empty = direct).

func (*Manager) HostTools 

func (m *Manager) HostTools() []actool.CoreTool

HostTools are runtime host-provided tools added to EVERY agent's base list (via ToolAugment); the tools table then filters them per-agent binding. Currently the traffic tools, gated by the global capture switch: empty when capture is off, so no agent gets traffic_search/traffic_get regardless of binding.

func (*Manager) LLMPoolBindFallback 

func (m *Manager) LLMPoolBindFallback() bool

LLMPoolBindFallback reports whether an agent/task that is BOUND to a specific profile still falls back to the chain when that profile fails (默认关：绑定即 独占，失败即失败). Only meaningful while LLMPoolEnabled.

func (*Manager) LLMPoolEnabled 

func (m *Manager) LLMPoolEnabled() bool

LLMPoolEnabled reports whether LLM failover ("轮询") is on (默认关； settings.llm_pool_enabled). Read when the provider chain is built (applyLLM), so a change requires a rebuild — putSettings does that.

func (*Manager) LLMRecordEnabled 

func (m *Manager) LLMRecordEnabled() bool

LLMRecordEnabled reports whether LLM request/response recording is on (默认关；settings.llm_record). The recorder consults this per call, so the toggle takes effect immediately without rebuilding agents.

func (*Manager) List 

func (m *Manager) List() []*Task

func (*Manager) LoadExisting 

func (m *Manager) LoadExisting() []*Task

LoadExisting rebuilds in-memory task handles from the PG task registry.

func (*Manager) NoaCompactionEnabled 

func (m *Manager) NoaCompactionEnabled() bool

NoaCompactionEnabled reports whether the experimental noa context-compression mechanism is on (默认关；settings.noa_compaction). Read per agent run via the injected resolver, so a toggle takes effect on the next run without rebuild.

func (*Manager) PG 

func (m *Manager) PG() *pgdb.DB

func (*Manager) ProxyAddr 

func (m *Manager) ProxyAddr() string

ProxyAddr returns the egress proxy address agents route target traffic through:

  • capture ON → the recording MITM proxy (which itself exits via the global proxy when one is set); agents also get its CA (see ProxyCACert).
  • capture OFF → the global egress proxy directly (empty CA — real target certs), or "" when no global proxy is set (direct, no recording).

So the global proxy takes effect in both modes: at the MITM's upstream when capturing, in the agent's own bash env / WebFetch when not.

func (*Manager) ProxyCACert 

func (m *Manager) ProxyCACert() string

ProxyCACert returns the CA cert path agents must trust to verify HTTPS through the egress proxy. Non-empty ONLY when traffic capture is on (the MITM re-signs certs): the global proxy used directly (capture off) is a plain forwarder that preserves real target certs, so no custom CA is needed there. Its emptiness is also the worker's "recording off" signal (see workerSystem).

func (*Manager) RenameTaskCategory 

func (m *Manager) RenameTaskCategory(id int64, name string) (*pgdb.TaskCategory, error)

RenameTaskCategory persists a category name and refreshes every live task DTO that references it. taskStateMu keeps this ordered with task reassignment.

func (*Manager) ReplaceTaskLLMProfiles 

func (m *Manager) ReplaceTaskLLMProfiles(id string, profileIDs []int64, activeProfileID int64) (int64, error)

ReplaceTaskLLMProfiles resets a task's ordered provider chain and mirrors the committed state onto the live task handle. Terminal tasks are editable too — their 主 Agent 对话 keeps running on the chain after the task finishes.

func (*Manager) ResolveTask 

func (m *Manager) ResolveTask(id string) *Task

func (*Manager) SetActive 

func (m *Manager) SetActive(id string) bool

SetActive switches the active task. Returns false if the id is unknown.

func (*Manager) SetConcurrency 

func (m *Manager) SetConcurrency(enabled bool, limit int) error

SetConcurrency persists the running-task concurrency cap. limit<1 is clamped to 1.

func (*Manager) SetGlobalProxy 

func (m *Manager) SetGlobalProxy(raw string) error

SetGlobalProxy validates, persists and applies the global egress proxy (http/https/socks5, optional user:pass; empty = direct). It updates the MITM's upstream immediately; callers must rebuild agents (applyLLM) afterwards so the capture-off path (bash env / WebFetch) picks up the change too.

func (*Manager) SetLLMPoolBindFallback 

func (m *Manager) SetLLMPoolBindFallback(on bool) error

SetLLMPoolBindFallback persists the bound-profile fallback toggle. Callers rebuild agents (applyLLM) afterwards.

func (*Manager) SetLLMPoolEnabled 

func (m *Manager) SetLLMPoolEnabled(on bool) error

SetLLMPoolEnabled persists the failover toggle. Callers rebuild agents (applyLLM) afterwards so it takes effect.

func (*Manager) SetLLMRecordEnabled 

func (m *Manager) SetLLMRecordEnabled(on bool) error

SetLLMRecordEnabled persists and applies the LLM-record toggle. Effective at once — no applyLLM needed, since the recorder reads the flag on every call.

func (*Manager) SetNoaCompaction 

func (m *Manager) SetNoaCompaction(on bool) error

SetNoaCompaction persists the noa toggle. Effective on the next agent run — the resolver reads it per run, so no rebuild is needed.

func (*Manager) SetTaskCategory 

func (m *Manager) SetTaskCategory(taskID string, categoryID *int64) (*pgdb.TaskCategory, error)

SetTaskCategory updates one live task without interrupting its runtime.

func (*Manager) SetTaskPaused 

func (m *Manager) SetTaskPaused(id string, paused bool) error

SetTaskPaused persists a task's paused state.

func (*Manager) SetTaskStatus 

func (m *Manager) SetTaskStatus(id, status string) error

SetTaskStatus persists a task's lifecycle status (e.g. "done") and reflects it on the in-memory handle so the derived DTO status shows it without a reload.

func (*Manager) SetTaskStatusGuarded 

func (m *Manager) SetTaskStatusGuarded(id, status string) (won bool, err error)

SetTaskStatusGuarded sets a TERMINAL status only if the task isn't already terminal (resolves the completed↔timeout race — first terminal writer wins). Reflects the won status on the live handle. won=false means another terminal already stuck.

func (*Manager) SetTasksCategory 

func (m *Manager) SetTasksCategory(taskIDs []string, categoryID *int64) (map[string]bool, *pgdb.TaskCategory, error)

SetTasksCategory applies one category change to several tasks at once. The database write and the in-memory refresh share taskStateMu, so a concurrent single-task update cannot interleave and leave a live DTO stale. The returned set holds the ids that were actually moved; callers report the rest as gone.

func (*Manager) SetTrafficEnabled 

func (m *Manager) SetTrafficEnabled(on bool) error

SetTrafficEnabled persists and applies the traffic-capture toggle. Callers must rebuild the agents (applyLLM) afterwards so the new proxy/tools/prompt take hold.

func (*Manager) SetWebSearch 

func (m *Manager) SetWebSearch(on bool, backend string, braveKey, tavilyKey, proxy *string) error

SetWebSearch persists and applies the web-search settings. braveKey, tavilyKey, and proxy are each left untouched when nil (so toggling the switch doesn't wipe a saved key/proxy; pass a pointer to "" to clear). Callers must rebuild agents (applyLLM) afterwards so the settings take effect.

func (*Manager) SetWorkers 

func (m *Manager) SetWorkers(n int) error

SetWorkers persists the concurrent work-agent count. Values <=0 are rejected.

func (*Manager) StampTaskFirstRun 

func (m *Manager) StampTaskFirstRun(id string) (int64, error)

StampTaskFirstRun stamps first_run_at + deadline_at on the first real run (idempotent in DB) and mirrors deadline_at on the live handle. Returns the deadline unix (0 = 不限).

func (*Manager) Task 

func (m *Manager) Task(id string) (*Task, bool)

func (*Manager) TaskStatus 

func (m *Manager) TaskStatus(id string) string

TaskStatus returns a task's current in-memory status (empty if unknown).

func (*Manager) Traffic 

func (m *Manager) Traffic() *traffic.Traffic

func (*Manager) TrafficEnabled 

func (m *Manager) TrafficEnabled() bool

TrafficEnabled reports whether traffic capture is on (default off). When off, no proxy/traffic tools/prompt are injected into agents (nothing is recorded).

func (*Manager) UpdateTaskMetadata 

func (m *Manager) UpdateTaskMetadata(taskID string, patch pgdb.TaskPatch) (*Task, error)

UpdateTaskMetadata changes list-only task metadata without interrupting any planner, main-agent, or worker call.

func (*Manager) WebSearch 

func (m *Manager) WebSearch() (on bool, backend, braveKey, tavilyKey, proxy string)

WebSearch returns the current web-search config: whether it is enabled, the backend ("ddgs" | "brave-free" | "tavily"), the Brave API key, the Tavily API key (each empty unless set), and the dedicated egress proxy (empty = direct).

func (*Manager) WebSearchOpts 

func (m *Manager) WebSearchOpts() agent.WebSearchOpts

WebSearchOpts returns the config as the agent-package struct the server pushes into each agent. Disabled when off, or when a keyed backend is selected without its key (so a half-configured backend never silently drops the tool at session build).

func (*Manager) Workers 

func (m *Manager) Workers() int

Workers returns the concurrent work-agent count (default 3). The settings API reconciles live task pools after persistence; reductions drain naturally.

type Notifier 

type Notifier struct {
	// contains filtered or unexported fields
}

Notifier 是漏洞推送的投递引擎。

与 Scheduler 并列，作为独立 goroutine 运行（见 server.New）。刻意不复用 Scheduler 的 tick：推送的实时性要求（3 秒）与触发器的业务节奏不同， 且两者的失败互不牵连——推送卡住不该影响 agent 触发。

func (*Notifier) Run 

func (n *Notifier) Run(ctx context.Context)

Run 循环直到 ctx 结束。由 server.New 启动一次。

type Scheduler 

type Scheduler struct {
	// contains filtered or unexported fields
}

Scheduler drives P3 triggers: on each tick it fires due interval triggers and scans for new findings / newly-met goals (any task) to fire event triggers. Each fire enqueues a NEW conversation on the agent's per-agent trigger queue (StartTriggeredRun): fires for the same agent run one at a time in FIFO order, distinct agents still run concurrently. State is persisted (per-trigger last_fire + finding watermark + fired-goal set) so a restart resumes without double-firing. Triggers only attach to CUSTOM agents.

func (*Scheduler) Run 

func (sc *Scheduler) Run(ctx context.Context)

Run loops until ctx is done, ticking the scheduler. Started once from server New.

type Server 

type Server struct {
	// contains filtered or unexported fields
}

Server exposes the ARTEX backend over a JSON HTTP API for the shadcn/ui frontend.

func New 

func New(ctx context.Context, m *Manager, skillDir string, dataDir string, keyDir string) *Server

func (*Server) Close 

func (s *Server) Close()

Close cancels and joins server-owned work before the manager closes its database or callers remove the data directory. It is safe to call repeatedly. Stop accepting HTTP requests before calling Close.

func (*Server) Handler 

func (s *Server) Handler() http.Handler

Handler assembles the API by domain. Authentication and CORS wrap the entire API mux; the embedded frontend remains on the separate public root handler.

func (*Server) StartTriggeredRun 

func (s *Server) StartTriggeredRun(agentKey, title, message string, taskID int64, mergeable bool, taskDesc, taskGoal string)

StartTriggeredRun enqueues a P3 trigger fire for agentKey and pumps the queue. The agent's策略 decides concurrency + merge: serial → run one at a time (optionally merging by task / all / none); parallel → run each fire in its own concurrent conversation up to trigger_max_parallel. Distinct agents always run concurrently.

type Task 

type Task struct {
	ID           string `json:"id"`
	ExpID        int64  `json:"exploration_id"`
	Name         string `json:"name"` // 可选任务名称;空=未命名
	CategoryID   *int64 `json:"category_id,omitempty"`
	CategoryName string `json:"category_name,omitempty"`
	PinnedAt     int64  `json:"pinned_at,omitempty"`
	Description  string `json:"description"`
	Goal         string `json:"goal"`
	CreatedAt    int64  `json:"created_at"`
	CompletedAt  int64  `json:"completed_at,omitempty"` // 进入终态的 unix 秒;0=未完成
	Paused       bool   `json:"paused"`
	Queued       bool   `json:"queued"` // 因并发上限被挂起、等待空位自动启动;true=尚未开跑
	// QueuedAt is an internal Unix-nanosecond ordering key. It is deliberately
	// finer than CreatedAt so several tasks enqueued in the same second retain
	// their real FIFO order.
	QueuedAt           int64   `json:"queued_at,omitempty"`
	QueueMode          string  `json:"queue_mode,omitempty"`
	ParentRef          string  `json:"parent_ref,omitempty"`     // 父任务 id(编排 spawn 记录)
	LLMProfileID       *int64  `json:"llm_profile_id,omitempty"` // 指定运行本任务 planner/worker 的 LLM 配置;nil=用全局激活配置
	LLMProfileIDs      []int64 `json:"llm_profile_ids,omitempty"`
	ActiveLLMProfileID *int64  `json:"active_llm_profile_id,omitempty"`
	LLMChainRevision   int64   `json:"-"`
	LLMFailoverState   string  `json:"llm_failover_state,omitempty"`
	LLMFailoverReason  string  `json:"llm_failover_reason,omitempty"`
	SourceTaskIDs      []int64 `json:"source_task_ids,omitempty"`
	CompanyIDs         []int64 `json:"company_ids,omitempty"`
	Status             string  `json:"status"` // persisted lifecycle status (done/failed/timeout 为终态；空/其它则由运行态推导)
	// 任务级超时(见 docs/任务级超时与收尾设计.md)。DeadlineAt/FirstRunAt 为 unix 秒,0=未设/未运行。
	TimeoutSeconds       int                    `json:"timeout_seconds"`
	PlanHeartbeatSeconds int                    `json:"plan_heartbeat_seconds"` // planner 心跳触发间隔(秒)
	CoverageEnabled      bool                   `json:"coverage_enabled"`       // 资产覆盖度功能开关(创建时定,默认开)
	FirstRunAt           int64                  `json:"first_run_at,omitempty"`
	DeadlineAt           int64                  `json:"deadline_at,omitempty"`
	Store                *pgdb.ExplorationStore `json:"-"`
	Guard                *guard.Guard           `json:"-"`
	// contains filtered or unexported fields
}

Task is one engagement: a description + goal + its own exploration store, sharing the process-wide asset store. ID is the PG task id as a string; ExpID is the exploration the task owns.

func (*Task) Notify 

func (t *Task) Notify()

Notify signals that the asset/exploration graph changed (debounced consumer wakes the planner). Non-blocking.

func (*Task) NotifyCancelled 

func (t *Task) NotifyCancelled(intentID int64, summary, reason string)

NotifyCancelled records that the human deleted intentID (reason = 删除原因), then wakes the planner so the next round spells out which intent was removed and why. summary is the intent's text captured before deletion — needed for hard delete, where the node is gone by the time the planner reads the trigger. Applies to both soft (state='deleted') and hard (physical cascade) delete.

func (*Task) NotifyDone 

func (t *Task) NotifyDone(intentID int64)

NotifyDone is Notify plus a hint: a worker just finished intentID and that is what triggered this wake-up. The planner reads the accumulated triggers next round so it can spell out which intent finished (+ its output). Events pile up (debounce) until the round drains them via drainTriggers.

func (*Task) NotifyFinding 

func (t *Task) NotifyFinding(intentID int64, summary string)

NotifyFinding records that a worker reported a finding on intentID (summary), then wakes the planner — so the round spells out which intent found what.

func (*Task) NotifyGoal 

func (t *Task) NotifyGoal(texts []string)

NotifyGoal records that one OR MORE goals were added in a single set_goals call — by the human via the main agent — then wakes the planner, so the next round spells out "人新增了 N 个目标：…" instead of the planner having to spot new open goals in the overview. One call → one trigger event (set_goals 的一次批量算一条，不逐条刷屏). The event survives an early-returning terminal round (drain happens after the gate), so a set_goals that revives a done task still surfaces it once the task is running.

func (*Task) NotifyGoalDeleted 

func (t *Task) NotifyGoalDeleted(text string)

NotifyGoalDeleted records that the human deleted a goal (via 总览的目标管理), then wakes the planner so the next round spells out which goal was removed. The event survives an early-returning terminal round (drain happens after the gate).

func (*Task) NotifyGoalEdited 

func (t *Task) NotifyGoalEdited(oldText, newText string)

NotifyGoalEdited records that the human edited a goal (via 总览的目标管理), then wakes the planner so the next round spells out the old→new change. The event survives an early-returning terminal round (drain happens after the gate).

func (*Task) NotifyHint 

func (t *Task) NotifyHint(texts []string)

NotifyHint records that one OR MORE hints were added in a single add_hint call — by the human via the main agent, or by cross-task orchestration — then wakes the planner, so the next round is told "人新增了 N 条战略提示：…" and looks at them directly instead of having to spot the new hint folded into the graph overview. One call → one trigger event (a batched add_hint counts as one, not one per hint).

type TaskDTO 

type TaskDTO struct {
	ID                 string             `json:"id"`
	ExplorationID      int64              `json:"exploration_id"`
	Name               string             `json:"name"` // 可选任务名称;空=未命名
	CategoryID         *int64             `json:"category_id,omitempty"`
	CategoryName       string             `json:"category_name,omitempty"`
	Pinned             bool               `json:"pinned"`
	PinnedAt           string             `json:"pinned_at,omitempty"`
	Description        string             `json:"description"`
	Goal               string             `json:"goal"`
	Status             string             `json:"status"` // created | running | paused | done | failed
	CreatedAt          string             `json:"created_at"`
	CreatedUnix        int64              `json:"created_unix"`       // created_at as unix seconds (for run-duration calc)
	CompletedAt        string             `json:"completed_at"`       // RFC3339 finish time (done/failed); "" if unfinished
	CompletedUnix      int64              `json:"completed_unix"`     // completed_at as unix seconds (0 if unfinished)
	LastActivity       int64              `json:"last_activity_unix"` // unix seconds of the last activity (0 if none)
	Paused             bool               `json:"paused"`
	Queued             bool               `json:"queued"`
	Tokens             TokenTotalDTO      `json:"tokens"` // whole-task token consumption
	GoalsTotal         int                `json:"goals_total"`
	GoalsMet           int                `json:"goals_met"`
	InFlight           int                `json:"in_flight"`                // 运行中 Worker 数（state=running 的意图）
	Findings           FindingSeverityDTO `json:"findings"`                 // 该任务已登记的漏洞数（findings 表，按严重度分档）
	LLMProfileID       *int64             `json:"llm_profile_id,omitempty"` // LLM profile used for this task; nil = default
	LLMProfileIDs      []int64            `json:"llm_profile_ids"`
	ActiveLLMProfileID *int64             `json:"active_llm_profile_id,omitempty"`
	LLMFailoverState   string             `json:"llm_failover_state"`
	LLMFailoverReason  string             `json:"llm_failover_reason,omitempty"`
	SourceTaskIDs      []string           `json:"source_task_ids"`
	ArchiveBlockedBy   string             `json:"archive_blocked_by_task_id,omitempty"`
	CompanyIDs         []int64            `json:"company_ids"`
	CoverageEnabled    bool               `json:"coverage_enabled"` // 资产覆盖度功能开关(创建时定)
}

---- Task (frontend "Task") ---- created_at as RFC3339, plus a derived status.

type TaskNodeDTO 

type TaskNodeDTO struct {
	ID           string `json:"id"`
	Type         string `json:"type"` // db Node.Kind
	Payload      string `json:"payload,omitempty"`
	Priority     int    `json:"priority"`
	State        string `json:"state"`
	Origin       string `json:"origin"`
	TS           string `json:"ts"`
	SourceTaskID string `json:"source_task_id,omitempty"`
	Inherited    bool   `json:"inherited,omitempty"`
	DeleteReason string `json:"delete_reason,omitempty"` // 意图假删除(state='deleted')时的删除原因
}

type TokenTotalDTO 

type TokenTotalDTO struct {
	InputTokens      int `json:"input_tokens"`
	OutputTokens     int `json:"output_tokens"`
	CacheReadTokens  int `json:"cache_read_tokens"`
	CacheWriteTokens int `json:"cache_write_tokens"`
}

TokenTotalDTO is a whole-task (all agents) token aggregate.

type TrafficExchangeDTO 

type TrafficExchangeDTO struct {
	ID          string `json:"id"`
	TS          string `json:"ts"`
	Host        string `json:"host"`
	Method      string `json:"method"`
	URL         string `json:"url"`
	Status      int    `json:"status"`
	ContentType string `json:"content_type"`
	RespLen     int    `json:"resp_len"`
}

---- TrafficExchange (frontend "TrafficExchange") ---- ts as RFC3339.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.