JontyLee
|
0ba73f5b87
|
fix(database-operation): 拦截未显式授权的凭据配置表读取
systemconfig 按 SystemConfigKey 聚合实例级 API Key、Cookie 与口令，托管
config.system.get 默认脱敏，但数据库技能脚本与 MCP database_operation 接受
任意 SQL，一条 SELECT 就能整包取回明文。
现在由脚本本身按表拦截：引用 systemconfig 的语句（含引号标识符、模式限定名、
CTE 与子查询）在读写两种模式下都默认拒绝，只有显式 --show-secrets /
show_secrets=true 才放行，失败信息直接给出可执行的下一步，因此 MCP 工具、
技能调用与命令行入口共享同一道边界。宿主策略把开启该开关的查询判定为
SENSITIVE_READ：要求系统管理员确认，结果标记为 SECRET，回执摘要不再保留内容。
门禁范围收敛为单表：userconfig 只承载界面偏好，plugindata 是文档化的诊断路径，
其余表的凭据残留风险改由 SKILL.md 的窄投影要求约束，避免以不可绕过的方式破坏
既有可运维性。MCP 文档、技能说明与相关契约测试同步更新。
|
2026-10-26 20:20:16 +08:00 |
|
DDSRem
|
2de976f6b3
|
Merge pull request #7050 from DDSRem-Dev/codex-comment-migration
docs: 统一全项目中文注释和结构化契约说明
|
2026-10-17 19:26:29 +08:00 |
|
jxxghp
|
47d51c3630
|
feat(agent): align history recall with Hermes SQLite FTS5
|
2026-09-30 16:28:39 +08:00 |
|
moviepilot-codex[bot]
|
1d043bb64e
|
fix(agent): isolate memory by user
|
2026-09-21 08:59:33 +08:00 |
|
jxxghp
|
3eb339b8e0
|
feat(agent): unify memory retrieval and activity history
|
2026-09-16 18:24:30 +08:00 |
|
jxxghp
|
71fffde878
|
feat(agent): 完善系统设置机器可读合同
|
2026-09-15 13:11:29 +08:00 |
|
jxxghp
|
c57605312a
|
fix(agent): close recovery contract CI regressions
|
2026-09-12 13:09:37 +08:00 |
|
jxxghp
|
5fa5b414aa
|
feat(agent): harden tool outcomes, recovery and discovery
|
2026-09-09 19:55:21 +08:00 |
|
jxxghp
|
632363730a
|
feat(agent): expose self-describing service operations
|
2026-08-31 20:45:33 +08:00 |
|
jxxghp
|
3876119375
|
fix(ci): synchronize ruff diagnostic ratchet
|
2026-08-31 18:00:18 +08:00 |
|
jxxghp
|
0cfc62005a
|
fix(ci): silence pylint false positives for lazy facades
|
2026-08-31 17:07:16 +08:00 |
|
jxxghp
|
fdba2c7d64
|
refactor(agent): unify tools behind API gateway and provider skills
|
2026-08-31 16:57:54 +08:00 |
|
jxxghp
|
0c05956814
|
refactor(architecture): enforce module naming policy
|
2026-08-29 22:17:17 +08:00 |
|
jxxghp
|
240a4dffe6
|
refactor(schemas): 统一 message/notification 命名边界，旧名收敛至兼容映射表
- notification 域：渠道能力（MessageChannel→NotificationChannel、ChannelCapability* 迁入 notification.py）
- message 域：消息收发（Notification→Message、NotificationType→MessageType、CommingMessage→IncomingMessage、NotificationHistoryItem→MessageHistoryItem、NotificationClear*→MessageClear*）
- Agent 工具契约：send_notification_message→send_message、notification_callback→message_callback
- 源码不保留旧名物理别名，旧导入经 app/runtime/compat/manifest.py SYMBOL_ALIASES 惰性解析
- API 路径与持久化键冻结不变，前端零改动
- 新增兼容守护测试与 docs/rules/07 命名边界规范
|
2026-08-16 19:32:20 +08:00 |
|
jxxghp
|
7b3444c366
|
refactor backend module architecture
|
2026-08-14 15:45:38 +08:00 |
|
InfinityPacer
|
402543f636
|
refactor(agent): align policy contracts with runtime (#6306)
|
2026-08-13 22:14:43 +08:00 |
|
InfinityPacer
|
dc9f8ef168
|
chore(agent): raise core LangChain dependency baseline (#6301)
|
2026-08-13 17:59:14 +08:00 |
|
InfinityPacer
|
8dc6774d47
|
fix(agent): preserve context during request compaction (#6300)
|
2026-08-13 17:58:31 +08:00 |
|
InfinityPacer
|
f80562915d
|
fix(agent): harden secret confirmation failures (#6287)
|
2026-08-13 10:55:02 +08:00 |
|
InfinityPacer
|
591a1d420d
|
fix(agent): close secret confirmation delivery gaps (#6285)
|
2026-08-13 08:20:14 +08:00 |
|
InfinityPacer
|
4ee7ee2589
|
feat(agent): 建立严格工具身份与调用契约 (#6280)
|
2026-08-13 04:07:59 +08:00 |
|
InfinityPacer
|
010899f369
|
feat(agent): add host policy foundation (#6273)
|
2026-08-12 10:48:14 +08:00 |
|