iven
|
cb727fdcc7
|
fix(growth): 二次审计修复 — 6项 CRITICAL/HIGH/MEDIUM 全部修复
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
CRITICAL-1/2: json_utils 花括号匹配改为括号平衡算法
- 处理字符串字面量中的花括号和转义引号
- 新增 5 个测试（平衡匹配、字符串内花括号、转义引号、extract_string_array）
HIGH-4: EvolutionMiddleware 只取第一个事件(remove(0))，不丢弃后续
HIGH-5: EvolutionMiddleware 先 read() 判空再 write()，减少锁竞争
HIGH-7: from_experience_store 使用传入 store 的 viking 实例（不再忽略参数）
- ExperienceStore 新增 viking() getter
MEDIUM-9: skill_generator + workflow_composer JSON 数组解析去重
- 新增 json_utils::extract_string_array() 共享函数
MEDIUM-14: EvolutionMiddleware 注入文本去除多余缩进空格
测试: zclaw-growth 133 tests, zclaw-runtime 87 tests, workspace 0 failures
|
2026-04-18 22:30:10 +08:00 |
|
iven
|
a9ea9d8691
|
fix(growth): Evolution Engine 审计修复 — 7项全部完成
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
HIGH-1: 提取共享 json_utils.rs，skill_generator/workflow_composer 去重
HIGH-2: FeedbackCollector Vec→HashMap，消除 unwrap() panic 风险
HIGH-3: ProfileUpdater 改为 collect_updates() 返回字段列表，
growth.rs 直接 async 调用 update_field()，不再用 no-op 闭包
MEDIUM-1: EvolutionMiddleware 注入后自动 drain，防止重复注入
MEDIUM-2: PatternAggregator tools 提取改为直接收集 context 值
MEDIUM-3: evolution_engine.rs 移除 4 个未使用 imports
MEDIUM-4: workflow_composer parse_response pattern 参数加下划线
MEDIUM-7: SkillCandidate 添加 version 字段（默认=1）
测试: zclaw-growth 128 tests, zclaw-runtime 86 tests, workspace 0 failures
|
2026-04-18 22:15:43 +08:00 |
|