sub2api/backend/migrations/182_prompt_audit_full_prompt.sql at bfabfe60c84cfbb10fbe7900a7ea2bd280aefb75 - sub2api - Gitea: Git with a cup of tea

wushenghua/sub2api

Files

T

mt21625457 ac685ccaf5 feat(security-audit): persist full prompts on audit events and polish event review UI

- Add prompt_audit_events.full_prompt (migration 182) so admins can review
  the exact unredacted prompt that triggered a finding; blocking mode writes
  it from the snapshot, async mode reconstructs it from the Redis scan
  payload so jobs rows stay redaction-only
- Event detail API returns full_prompt (list endpoint stays lean); text is
  NUL-stripped and capped at 65536 runes
- Detail dialog shows the full prompt in a scrollable pane with fallback to
  the legacy redacted preview; page copy updated to match the new behavior
- Rework filter deletion into a dedicated dialog with time-range presets and
  criteria-change preview invalidation; localize decision/risk/category
  labels across the events workspace
- Fix pre-existing i18n message-compile spec by declaring the
  @intlify/message-compiler dev dependency

2026-07-17 14:38:10 +08:00

6 lines

311 B

SQL

Raw Blame History

 -- Retain the full (unredacted) prompt text on audit events so admins can
 -- review the exact content that triggered a finding. Scoped to events only:
 -- transient processing jobs keep storing redacted metadata.
 ALTER TABLE prompt_audit_events
     ADD COLUMN IF NOT EXISTS full_prompt TEXT NOT NULL DEFAULT '';