iven
|
450569dc88
|
fix: 审计后续 3 项修复 — 残留清理 + FTS5 CJK + HTTP 大小限制
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
1. Shell Hands 残留清理 (3处):
- message.rs: 移除过时的 zclaw_hands::slideshow 注释
- user_profiler.rs: slideshow 偏好改为 RecentTopic
- handStore.test.ts: 移除 speech mock 数据 (3→2)
2. zclaw-growth FTS5 CJK 查询修复:
- sanitize_fts_query CJK 路径从精确短语改为 token OR 组合
- "Rust 编程" → "rust" OR "编程" (之前是 "rust 编程" 精确匹配)
- 修复 test_memory_lifecycle + test_semantic_search_ranking
3. WASM HTTP 响应大小限制:
- Content-Length 预检 + 读取后截断 (1MB 上限)
- read_to_string 改为显式错误处理
651 测试全通过，0 失败。
|
2026-04-18 09:23:58 +08:00 |
|
iven
|
4e4eefdde1
|
fix: 深度审计修复 — WASM 安全加固 + A2A 编译路径 + 测试编译
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
CRITICAL:
- zclaw_file_read: 路径遍历修复 — 组件级过滤替代前缀检查
- zclaw_http_fetch: SSRF 防护 — URL scheme 白名单 + 私有IP段阻止
- Phase 4A: 移除 zclaw-protocols a2a feature gate, A2A 始终编译
- 移除 kernel/desktop multi-agent feature (不再控制任何代码)
MEDIUM:
- user_profiler: FactCategory cfg(test) 导入修复 (563 测试全通过)
|
2026-04-18 09:11:15 +08:00 |
|
iven
|
a685e97b17
|
feat(skills): WASM host 函数真实实现 — zclaw_log/http_fetch/file_read (Phase 4B)
替换 stub 为真实实现:
- zclaw_log: 读取 guest 内存并 log
- zclaw_http_fetch: ureq v3 同步 GET (10s timeout, network_allowed 守卫)
- zclaw_file_read: 沙箱 /workspace 目录读取 (路径校验防逃逸)
添加 ureq v3 workspace 依赖, 25 测试全通过。
|
2026-04-18 08:18:08 +08:00 |
|
iven
|
ab0e11a719
|
fix(saas): Phase 5 regression fixes — SQL type casts + test data corrections
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
- Fix usage_stats SQL: add ::timestamptz cast for Option<String> params
- Fix usage_stats SQL: add ::bigint cast for COALESCE(SUM(...))
- Fix telemetry INSERT: add ::timestamptz cast for reported_at column
- Fix config_analysis_empty test: seed data makes total_items > 0
- Fix key_pool_crud test: key_value must be >= 20 chars
- Fix SkillManifest test helpers: add missing tools field
All 1048 tests pass: 580 Rust + 138 SaaS + 330 Desktop Vitest
|
2026-04-07 19:21:45 +08:00 |
|
iven
|
52bdafa633
|
refactor(crates): kernel/generation module split + DeerFlow optimizations + middleware + dead code cleanup
- Split zclaw-kernel/kernel.rs (1486 lines) into 9 domain modules
- Split zclaw-kernel/generation.rs (1080 lines) into 3 modules
- Add DeerFlow-inspired middleware: DanglingTool, SubagentLimit, ToolError, ToolOutputGuard
- Add PromptBuilder for structured system prompt assembly
- Add FactStore (zclaw-memory) for persistent fact extraction
- Add task builtin tool for agent task management
- Driver improvements: Anthropic/OpenAI extended thinking, Gemini safety settings
- Replace let _ = with proper log::warn! across SaaS handlers
- Remove unused dependency (url) from zclaw-hands
|
2026-04-03 00:28:03 +08:00 |
|
iven
|
5fdf96c3f5
|
chore: 提交所有工作进度 — SaaS 后端增强、Admin UI、桌面端集成
包含大量 SaaS 平台改进、Admin 管理后台更新、桌面端集成完善、
文档同步、测试文件重构等内容。为 QA 测试准备干净工作树。
|
2026-03-29 10:46:41 +08:00 |
|