feat(web): agent 控制台重构 — i18n/主题/探活/slashcmd/配置热重载

.github/workflows/ci.yml

@@ -34,11 +34,12 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v9.2.1
         with:
           version: v2.12.2
-          args: --timeout=5m
+          args: --timeout=5m --build-tags "re2_cgo re2_static"
 
   tidy:
     runs-on: ubuntu-22.04
@@ -89,12 +90,13 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+
       - name: Generate embedded resources
         run: go generate ./core/resources/...
 
       - name: Run unit tests with coverage
         run: |
-          go test -race -count=1 -timeout 5m \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m \
             -coverprofile=coverage.out \
             -covermode=atomic \
             ./...
@@ -136,26 +138,27 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+
       - name: Run proxy tool tests
         run: |
-          go test -race -count=1 -timeout 5m -v \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m -v \
             ./pkg/tools/proxy/
 
       - name: Run tmux command tests
         run: |
-          go test -race -count=1 -timeout 5m -v \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m -v \
             -run 'Tmux|BashProxy' \
             ./pkg/commands/
 
       - name: Run PTY interactive session tests
         run: |
-          go test -race -count=1 -timeout 5m -v \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m -v \
             -run 'MultiRound|SendCtrlC' \
             ./pkg/agent/tmux/
 
       - name: Run agent tmux integration tests
         run: |
-          go test -race -count=1 -timeout 5m -v \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m -v \
             -run 'AgentTmux' \
             ./pkg/agent/
 
@@ -177,12 +180,13 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+
       - name: Run go generate for templates
         run: go generate ./core/resources/...
 
       - name: Run resources tests
         run: |
-          go test -race -count=1 -timeout 5m \
+          go test -tags "re2_cgo re2_static" -race -count=1 -timeout 5m \
             ./core/resources/...
 
   # ── E2E tests (depends on test) ───────────────────────────────
@@ -203,11 +207,12 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+
       - name: Run e2e tests
         run: |
           if [ -d pkg/e2e ]; then
             go test -race -count=1 -timeout 10m \
-              -tags e2e \
+              -tags "e2e re2_cgo re2_static" \
               -v \
               ./pkg/e2e/
           else

.gitignore

@@ -23,53 +23,32 @@ dist/
 *.sock.lock
 /aiscan
 /spray
-aiscan_test
-aiscan_test_eval
-aiscan-test-provider
-aiscan-test-ioa*
 out/
 scan_results.jsonl
 pw_driver_bin
 node_modules/
 community.yaml
-aiscan.yaml
-config.yaml
 
-# Local data / logs
-.aiscan/
-.playwright-cli/
-tmp/
-*.log
-*.jsonl
-*.png
-*.jar
+# Local runtime state / operator artifacts
+/aiscan-deploy.yaml
+/*.log
+/.claude/
+# operator scan outputs dumped at repo root (screenshots, IP lists, app dumps, findings/reports)
+/*.png
+/*_ips.txt
+/apps_*.json
+/*_findings.md
+/*_report.md
+
+# frontend build output (generated by npm run build)
+web/static/
+web/static.oldroot*
+web/static.rootold*
+web/static.*
+web/static-stale/
 
-# Test payloads / scratch files
-webhook.json
-xss_payload.json
-xss_prod.json
-cookies.txt
-cookies_sup.txt
-login_data.txt
-weak_pwd.txt
-sqli_payload.txt
-ssrf_payload.json
-ssti_payload.json
-spoof_prod.json
-payload.json
-cart.json
-chat.json
-chat_msg.json
-checkout.json
-cms_body.html
-cms_post.json
-cms_post.txt
-cms_xss.txt
-portal.html
-portal_full.html
-refer/
-agent
-*.events.jsonl
-*.err.log
-*.out.log
-*.pid
+# operator artifacts kept on disk but out of git (2026-07-06 post-reset cleanup)
+/monitor/
+/scripts/
+/scan_report.md
+aiscan.yaml

.gitmodules

@@ -4,3 +4,4 @@
 [submodule "web/frontend/cyber-ui"]
 	path = web/frontend/cyber-ui
 	url = https://github.com/chainreactors/cyber-ui.git
+	branch = main

.goreleaser-community.yml

@@ -32,6 +32,7 @@ builds:
     ldflags:
       - >-
         -s -w
+        -X 'github.com/chainreactors/aiscan/core/config.Version={{.Version}}'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultProvider=deepseek'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultAPIKey={{ .Env.COMMUNITY_LLM_KEY }}'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultModel=deepseek-chat'
@@ -71,6 +72,7 @@ builds:
     ldflags:
       - >-
         -s -w
+        -X 'github.com/chainreactors/aiscan/core/config.Version={{.Version}}'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultProvider=deepseek'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultAPIKey={{ .Env.COMMUNITY_LLM_KEY }}'
         -X 'github.com/chainreactors/aiscan/core/config.DefaultModel=deepseek-chat'

.goreleaser.yml

@@ -4,6 +4,8 @@ project_name: aiscan
 
 before:
   hooks:
+    - npm --prefix web/frontend ci
+    - npm --prefix web/frontend run build
     - go generate ./core/resources
 
 builds:
@@ -31,7 +33,7 @@ builds:
       - osusergo
       - netgo
     ldflags:
-      - -s -w
+      - -s -w -X github.com/chainreactors/aiscan/core/config.Version={{.Version}}
     asmflags:
       - all=-trimpath={{.Env.GOPATH}}
     gcflags:
@@ -63,7 +65,7 @@ builds:
       - full
       - sqlite
     ldflags:
-      - -s -w
+      - -s -w -X github.com/chainreactors/aiscan/core/config.Version={{.Version}}
     asmflags:
       - all=-trimpath={{.Env.GOPATH}}
     gcflags:
@@ -93,7 +95,7 @@ builds:
       - osusergo
       - netgo
     ldflags:
-      - -s -w
+      - -s -w -X github.com/chainreactors/aiscan/core/config.Version={{.Version}}
     asmflags:
       - all=-trimpath={{.Env.GOPATH}}
     gcflags:

Makefile

@@ -0,0 +1,76 @@
+.DEFAULT_GOAL := standard
+
+GO ?= go
+
+WEB_DIR ?= web/frontend
+WEB_ADDR ?= 127.0.0.1:8080
+WEB_TOKEN ?=
+BIN_DIR ?= bin
+
+RE2_TAGS := re2_cgo re2_static
+
+ifeq ($(OS),Windows_NT)
+EXE := .exe
+NPM ?= npm.cmd
+else
+EXE :=
+NPM ?= npm
+endif
+
+STANDARD_BIN ?= $(BIN_DIR)/aiscan$(EXE)
+AGENT_BIN ?= $(BIN_DIR)/aiscan-agent$(EXE)
+FULL_BIN ?= $(BIN_DIR)/aiscan-full$(EXE)
+
+# Keep the local feature tiers aligned with the release workflow.
+STANDARD_TAGS := forceposix emptytemplates noembed osusergo netgo cstx_native $(RE2_TAGS)
+AGENT_TAGS := forceposix emptytemplates noembed osusergo netgo
+FULL_TAGS := forceposix emptytemplates noembed osusergo netgo full sqlite cstx_native katana_slim $(RE2_TAGS)
+BUILD_FLAGS := -trimpath -buildvcs=false
+
+.PHONY: help prepare frontend standard agent full web-build web-run web all clean
+
+help:
+	@echo "AIScan build targets (aligned with release editions):"
+	@echo "  make / make standard  Build the standard AIScan edition"
+	@echo "  make agent            Build the lightweight agent edition"
+	@echo "  make full             Build frontend, then build the full edition"
+	@echo "  make web              Build the full edition and start the Web UI"
+	@echo "  make frontend         Build only web/frontend into web/static"
+	@echo "  make all              Build all three editions"
+	@echo ""
+	@echo "Variables:"
+	@echo "  BIN_DIR=path          Binary output directory (default: $(BIN_DIR))"
+	@echo "  WEB_ADDR=host:port    Web listen address (default: $(WEB_ADDR))"
+	@echo "  WEB_TOKEN=token       Optional fixed Web access token"
+
+prepare:
+	mkdir -p "$(BIN_DIR)"
+
+frontend:
+	$(NPM) --prefix "$(WEB_DIR)" run build
+
+standard: prepare
+	CGO_ENABLED=1 $(GO) build $(BUILD_FLAGS) -ldflags "$(CGO_LDFLAGS)" -tags "$(STANDARD_TAGS)" -o "$(STANDARD_BIN)" ./cmd/aiscan
+	@echo "Built standard edition: $(STANDARD_BIN)"
+
+agent: prepare
+	CGO_ENABLED=0 $(GO) build $(BUILD_FLAGS) -ldflags "-s -w" -tags "$(AGENT_TAGS)" -o "$(AGENT_BIN)" ./cmd/agent
+	@echo "Built agent edition: $(AGENT_BIN)"
+
+# The full binary embeds web/static, so frontend must finish first.
+full: frontend prepare
+	CGO_ENABLED=1 $(GO) build $(BUILD_FLAGS) -ldflags "$(CGO_LDFLAGS)" -tags "$(FULL_TAGS)" -o "$(FULL_BIN)" ./cmd/aiscan
+	@echo "Built full edition: $(FULL_BIN)"
+
+web-build: full
+
+web-run:
+	"$(FULL_BIN)" web --addr "$(WEB_ADDR)" $(if $(strip $(WEB_TOKEN)),--token "$(WEB_TOKEN)",)
+
+web: full
+	"$(FULL_BIN)" web --addr "$(WEB_ADDR)" $(if $(strip $(WEB_TOKEN)),--token "$(WEB_TOKEN)",)
+
+all: standard agent full
+
+clean:
+	rm -f "$(STANDARD_BIN)" "$(AGENT_BIN)" "$(FULL_BIN)"

README.md

@@ -74,6 +74,16 @@ go build -o aiscan ./cmd/aiscan                          # standard
 go build -tags full -o aiscan-full ./cmd/aiscan           # full (playwright/katana/passive)
 ```
 
+The Makefile mirrors the three release editions. The full target builds the
+frontend first so the latest `web/static` assets are embedded into the binary:
+
+```bash
+make                                                      # standard edition
+make agent                                                # lightweight agent edition
+make full                                                 # frontend + full edition
+make web WEB_ADDR=127.0.0.1:18081 WEB_TOKEN=local-dev    # full build + Web UI
+```
+
 ---
 
 ## Features

README_CN.md

@@ -74,6 +74,16 @@ go build -o aiscan ./cmd/aiscan                          # 标准版
 go build -tags full -o aiscan-full ./cmd/aiscan           # 完整版（含 playwright/katana/passive）
 ```
 
+Makefile 对应 Release 的三种功能层级。`make full` 会先构建前端，再将最新的
+`web/static` 嵌入 full 二进制：
+
+```bash
+make                                                      # Standard 默认版
+make agent                                                # Agent 轻量版
+make full                                                 # 前端 + Full 完整版
+make web WEB_ADDR=127.0.0.1:18081 WEB_TOKEN=local-dev    # Full 构建并启动 Web UI
+```
+
 ---
 
 ## Features