admin/Nexus
1
0
Fork 0
Code Issues Pull Requests Actions 91 Packages Projects Releases Wiki Activity
536 Commits 3 Branches 0 Tags
deafd46a0e1b5741c93aa9349828cf9884f74067
Commit Graph

53 Commits

Author SHA1 Message Date
Nexus Agent deafd46a0e docs(reports): 文件管理移除下载生产验证记录 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 06:52:47 +08:00
Nexus Agent e833b923c8 feat(browser): 远程浏览器 Worker 桥接与顶栏固定悬浮窗 
接入 Playwright Worker、会话 WebSocket 与全局浏览器面板（固定于 App Bar 下）；
含验证码 stealth、设置项默认音与 URL 安全校验；附带 worker 部署与设计文档。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 06:49:20 +08:00
Nexus Agent 49b471eff9 test(e2e): 监测槽时长与指标 UI 生产冒烟 
Playwright 验证默认 30 分 chip、内存/硬盘/负载与进度条；附部署验证报告。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 04:40:40 +08:00
Nexus Agent 32a1885f0d feat(watch): 监测槽开关、8h/24h、到期暂停与探针修复 
支持随时暂停/恢复实时监测并保留槽位；TTL 到期自动暂停不占删槽；修复到期竞态导致空槽与唯一约束冲突；探针 parse_error 与中文错误；移除失败 snackbar。
 2026-06-12 03:47:56 +08:00
Nexus Agent 3a4b2ff3eb docs(reports): 未设路径 fleet 探测与推送验证报告 2026-06-11 23:50:11 +08:00
Nexus Agent f11ad35708 chore(scripts): 推送提权验证脚本与温胜夜生产验证报告
Nexus CI/CD / test (push) Waiting to run
Details
Nexus CI/CD / e2e (push) Blocked by required conditions
Details
Nexus CI/CD / deploy (push) Blocked by required conditions
Details
Nexus Pre-commit Checks / quick-check (push) Waiting to run
Details
2026-06-11 23:28:59 +08:00
Nexus Agent 960598f504 fix(rdp): 服务端 guacd 握手替代透明 TCP 桥接 
guacamole-common-js 不会向 guacd 发送 select/connect；改为 Nexus 用 rdp_hosts 凭据完成握手后再桥接 WebSocket，消除 protocol violation。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 21:33:01 +08:00
Nexus Agent dabfc128b3 feat: 浏览器 RDP、推送提示音与子机指标等多项功能 
- 3389远程页 + guacd 侧车 WebSocket 桥（无 RDP 会话审计）
- 文件推送完成独立提示音，至少一台成功即播放
- 子机列表展开 CPU/内存/磁盘 sparkline 与指标采样落库
- 终端全量服务器列表、连接中状态；告警 Telegram 公网 IP
- SSH 密钥凭据 UI 简化；子机搜索未设路径筛选

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 01:37:32 +08:00
Nexus Agent fc4b46566e docs(audit): 子机离线告警 8 步审计与部署验证 
补全 7209f53 门控审计报告与生产验证记录，更新离线统计审计 DoD。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 17:34:29 +08:00
Nexus Agent a82d69c3e5 feat(servers): add Agent diagnose button and API endpoint 
Expose central heartbeat + SSH probe diagnostics in the servers UI via POST /api/servers/{id}/agent-diagnose, sharing logic with the CLI script.
 2026-06-09 09:26:42 +08:00
Nexus Agent b287707359 docs: record HTTP detail zh production deploy at 64c8bd7 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 08:56:56 +08:00
Nexus Agent 64c8bd74b8 docs: audit and deploy verification for API detail zh rollout 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 08:54:27 +08:00
Nexus Agent 213aad97a4 docs: push category fix verification and refresh handoff to c366ed5 
Record production evidence (101 机器人 vs old 5) and update AI handoff
with current deploy state and TOP 10 priorities.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 08:36:14 +08:00
Nexus Agent adcd8010a5 docs: record production deploy at 863e49e after full rollout. 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 07:14:32 +08:00
Nexus Agent 863e49e518 feat(ops): prod timezone probe, web/app container sync, and D-01 agent upgrade. 
Unify upgrade-agent with install.sh via agent_deploy; auto-sync Git web/app after
Docker upgrade to prevent vite hash drift; extend prod_probe for Beijing TZ checks.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 07:12:38 +08:00
Nexus Agent e3efbd4552 feat(timezone): operator schedules and filters use Beijing wall clock. 
Cron matching, audit/alert date filters, and schedule UI align on Asia/Shanghai
while JWT/TOTP/heartbeat stay UTC; follow-ups add WS alert timestamps, fixed
install timezone copy, and 422 on invalid date filters.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 05:50:32 +08:00
Nexus Agent 9f78207aa2 docs: add agent diff guidance and close deploy verification. 
Record .cursorrules rules to avoid full-repo diffs over web/app/assets,
and document production health checks for the alerts/schedule fix batch.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 02:52:32 +08:00
Nexus Agent 0f6f91e61a fix(api): align alerts/commands contracts and ship full-site test suite. 
Restore alert history filters and stats fields, paginate command/session logs for the SPA, show script labels on schedules, and land integration/E2E coverage with rebuilt web assets.
 2026-06-09 02:13:13 +08:00
Nexus Agent cb49fd9d6d docs(audit): gate7 补资源恢复开关联动与仪表盘去列表 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 13:23:04 +08:00
Nexus Agent 8c86b50d09 feat(servers): 未设路径区块与行内详情；命令栏恢复单色 
服务器页拆分未设路径列表、行内展开详情；API target_path_unset 可选过滤。
命令栏取消 Shell 语法彩色，ANSI 仅保留 xterm SSH 输出区。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 12:48:45 +08:00
Nexus Agent 8312a6cf81 fix(terminal): WebSSH xterm SSH 交互区 ANSI 彩色输出 
PTY 环境变量注入 TERM=xterm-256color，DATA 帧 base64 保 ESC；前端解码写入 xterm；命令栏 Shell 高亮 CSS 与黑屏分离。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 12:35:27 +08:00
Nexus Agent 08a0157c95 feat: 调度表单重构、登录门控、批量任务与页面缓存对齐 
调度页执行周期可视化/单次执行/分类选机/推送源对齐；登录 IP 门控与无缝导航；
服务器批量后台任务、执行记录、凭据合并、各页激活刷新与错误提示修复。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 11:17:21 +08:00
Nexus Agent 06af90d35e feat(scripts): 执行详情服务器名与顶栏居中提示 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 07:20:37 +08:00
Nexus Agent 0b2d7ac50d feat(scripts): 异步执行、全局进度看板与完成提示音设置 
脚本 exec 立即返回 running 并在后台跑批次；/ws/alerts 推送 script_progress/complete；
新增 ScriptRunsPage、Telegram 汇总通知与可配置的浏览器完成提示音。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 07:07:02 +08:00
Nexus Agent df95a2429f feat(frontend): 全选筛选结果与脚本失败分组复制 
服务器列表支持跨页全选当前筛选/分类本组；脚本执行详情按错误类型分组（去动态 IP）并复制失败清单，不做 CSV 导出。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 05:51:11 +08:00
Nexus Agent c8b0663508 feat: 批量IP添加、脚本库历史、推送权限记录与脚本SSH执行修复
Nexus CI/CD / test (push) Waiting to run
Details
Nexus CI/CD / deploy (push) Blocked by required conditions
Details
Nexus Pre-commit Checks / quick-check (push) Waiting to run
Details 
批量添加替代CSV并支持去重；脚本库页内嵌执行历史；推送历史记录 rsync 权限策略；
脚本执行不再依赖 Agent 在线；服务器同步日志与相关单测补齐。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-08 03:15:40 +08:00
Nexus Agent bdb3b3bc34 docs(deploy): 生产对齐部署验证报告与 changelog 补全 
记录 e5a3f25 部署、前端镜像重建与 Agent 1/1 升级结果。
 2026-06-07 23:22:21 +08:00
Nexus Agent e5a3f2524e fix(auth): change_password 改密路径 audit_repo 定义顺序 
部署前补齐门控审计与 Layer3 演练终验记录，消除 ruff F821。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 23:11:28 +08:00
Nexus Agent 7ea94a60ab fix(auth,servers): 修复 refresh 自动登出与服务器状态未知 
API 返回 status 字段供前端显示在线状态；token_version 为 NULL 时 refresh cookie 含 :None 导致续期 401。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 22:53:29 +08:00
Nexus Agent c50f65e8ea docs: Layer 3 巡检 Telegram 用户终验确认 
记录用户已收到引号修复与中文详细通知消息，闭环终验通过。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 21:09:14 +08:00
Nexus Agent ca0de7d04d docs: Layer 3 模拟巡检告警验证报告
Nexus CI/CD / test (push) Waiting to run
Details
Nexus CI/CD / deploy (push) Blocked by required conditions
Details
Nexus Pre-commit Checks / quick-check (push) Waiting to run
Details 
记录 flock 失败计数 bug 修复与 iptables 演练结果。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 20:56:21 +08:00
Nexus Agent b8785d1d51 docs: Layer 3 巡检 Telegram 配置后生产复查 
记录用户配置 Telegram 后 env 同步、health_monitor 就绪与 cron 状态。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 20:49:13 +08:00
Nexus Agent 5b372fb8a2 docs: Layer 3 巡检部署生产验证报告 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 20:19:31 +08:00
Nexus Agent 66a4cba39b docs: 设置页 Telegram 修复生产验证报告 
记录 540a7fc 部署结果与浏览器终验步骤。
 2026-06-07 19:46:43 +08:00
Nexus Agent d0be2fdcf1 fix(deploy): SSH secrets 加载、Docker 运行时检测与外网探测脚本修复 
使 deploy-production.sh 可读本机 secrets 并在非 docker 组用户下用 sudo 识别 1Panel 栈；修复 security_probe_external.sh 的 curl shift 误用与 WebSocket 自动 venv。
 2026-06-07 17:34:27 +08:00
Nexus Agent 72d82d737b fix(security): BL-07 WS 403 澄清与 code-review 跟进加固 
外网无 token WebSocket 的 HTTP 403 为应用层拒绝而非反代故障；边端 agent
在中心 401 时停止心跳重试；install 锁定路由级 404 且归档失败 fail-closed。
同步安全规范与 BL-06 一致，门控 7/7 PASS。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 12:12:49 +08:00
Nexus Agent eab35a35be fix(security): BL-06 强制 Agent per-server key 并合并心跳单次查库 
移除 Agent 认证与安装链路的 global API_KEY 回退，收口 risk-acceptance 接受项 2；巡检补修心跳重复 get_server 并加 assert_called_once 回归测试。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 11:17:41 +08:00
Nexus Agent e5e2582743 fix(security): 外网攻击面加固 BL-01～05 
收紧 PUBLIC 路径误匹配、强制 health/detail 与壁纸 sync 鉴权、默认关闭 OpenAPI；
安装锁定后 /api/install/* 统一 404；附探测脚本、测试与审计文档。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-07 01:45:10 +08:00
Nexus Agent 722917bfc9 fix(api): API 全量巡检 B1–B6 修复 server_ids 上限与 pending 审计 
限制健康检查/推送/脚本执行的 server_ids 规模，补齐 pending 重试失败与删除审计，并附分批巡检报告。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-06 23:57:46 +08:00
Nexus Agent ac17f91106 docs(audit): 14 页 API 契约审计与凭据轮询 SSOT 收尾 
记录凭据轮询/pending 契约对照与生产验证，更新功能指南与附录 J，并将 pending 相关类型集中到 api.ts。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-06 23:50:05 +08:00
Nexus Deploy 49f88a2cd8 fix(install): Docker .env 持久化与 entrypoint 覆盖 Compose 占位符 
向导 init-db 后立即同步 nexus-state 卷；entrypoint 跳过不完整 env 并在启动前 source /app/.env，避免缺 DATABASE_URL 与无密码 REDIS_URL 导致容器崩溃。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-06 11:08:22 +08:00
Nexus Deploy 0100ab2582 docs: consolidate archive, SSOT guide, and agent entry stubs 
Move line-walk/delta/phase2/frontend audits and legacy memory into
docs/archive/, add functional development SSOT, thin AGENTS/CLAUDE stubs,
and regenerate changelog/audit indexes via consolidate_docs.py.
 2026-06-04 23:01:03 +08:00
Nexus Deploy a2ae74d582 release: BUG fixes batch 1-6, full bug scan docs, Ubuntu/Linux dev 
- Backend: auth refresh reuse, schedule/retry/sync/agent/files fixes
- Frontend: push WS, files ETag browse, vite build assets
- Docs: audit/changelog, production deploy gate, bug scan registry B7-77
- Deploy: deploy-production.sh, prune assets, gate logs
 2026-06-04 14:01:14 +08:00
Your Name 8935081ac5 feat: full-site acceptance automation and health/detail fix 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 15:22:42 +08:00
Your Name ab431028c1 fix: 服务器页批量选择绑定 Vuetify4 modelValue 
v-model:selected 无法同步勾选状态；生产已部署 ServersPage-CGp8DUVa.js 并验证「已选择 2 台服务器」。
 2026-06-01 14:54:39 +08:00
Your Name cc2dad7f31 docs: 生产浏览器验收 — SPA/WebSSH/health_monitor 
详见 docs/reports/2026-06-01-browser-verification.md；批量条与 Telegram/Push/kill 留维护窗口或人工确认。
 2026-06-01 14:20:45 +08:00
Your Name 24b4439b2b docs: 单负责人执行计划 — handoff 对齐、生产验收、prune 加固 
计划见 docs/design/plans/2026-06-01-single-owner-execution.md；生产 health/app/Redis/MySQL 已通过。
 2026-06-01 14:09:17 +08:00
Your Name c72631a293 merge: 安装脚本+PHP移除+宝塔适配 合并到main 
合并 claude/condescending-ishizaka-3cff3a 分支:
- deploy/install.sh: 一键安装脚本(宝塔/标准模式自适应)
- deploy/upgrade.sh + uninstall.sh
- docs/install-guide.md: 完整中文安装教程
- PHP完全移除: install.php删除, config.php→config.json
- crypto.py: 移除PHP AES-CBC兼容, 纯Fernet
- install.py: 宝塔Supervisor路径自适应, Fernet密钥生成
- install.html: Step 5宝塔/标准模式条件渲染
- 44个冲突文件使用worktree分支版本(全部最新代码)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-05-25 08:25:29 +08:00
Your Name fbf5eadcf2 fix(security): R2+R3 全面代码审计修复 — 3 CRITICAL / 9 HIGH / 15 MEDIUM / 10 LOW 
CRITICAL:
- C-1: sync_service.py rsync命令shlex.quote防Shell注入回归
- C-2: agent.py exec端点危险命令正则拦截+compare_digest+僵尸进程修复
- C-3: WebSSH JWT token绑定server_id防IDOR

HIGH:
- H-1: 所有PUT/POST端点setattr改为字段白名单防任意字段注入
- H-2: settings/assets/scripts端点添加JWT认证
- H-3: refresh_token invalidate-then-generate防并发重放
- H-4: servers.py Redis pipeline解决N+1查询
- H-7: settings API Key/Secret掩码+禁止修改
- H-8: TOTP暴力破解速率限制(5次/5分钟)
- H-9: get_optional_admin改用request-scoped session

MEDIUM:
- M-2: X-Real-IP优先+X-Forwarded-For取末值防IP伪造
- M-4: asyncssh异常信息脱敏(只含server_id)
- M-5: 分页limit上限(500/200/500/500)
- M-9: API层Redis依赖抽象至dependencies.py
- M-10: WebSocket ConnectionManager多worker Redis聚合
- M-13: login_attempts复合索引
- M-14: ServerRepository.get_by_ids批量查询
- M-15: API错误消息统一中文

R3追加:
- sysctl命令注入防护+regex验证
- $DB_PASS明文存储→masked_command双命令方案
- MYSQL_PWD环境变量替代-p flag
- health端点拆分(公开/需认证)
- repo层**kwargs→字段白名单
- 全局str(e)信息泄露修复(API/Telegram/WebSocket)
- SSRF私有IP拦截
- Nginx HTTPS配置+DB备份脚本
- 前端CDN SRI哈希+XSS修复
- __import__替换为正常import

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-24 10:58:33 +08:00
Your Name 680577fc97 docs: Phase 3 walk-closure report + index update 
- docs/reports/audit-phase-3-walk-closure.md: closure declaration
  covering 3a-3i (12 new FINDINGs, all fixed, code backlog = 0)
- docs/reports/README.md: add Phase 3 closure entry

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-23 15:56:11 +08:00