6 Commits

Author	SHA1	Message	Date
matevip	48a7b979df	test(skill): use placeholder bodies in credential-redaction fixtures	2026-08-06 01:55:48 -04:00
matevip	e22173a476	feat(skill): close the self-evolution loop — auto-bind, routine mining, curation provenance and restore points	2026-08-06 01:51:22 -04:00
matevip	d512643960	feat(tool): configurable SSRF allowlist for outbound HTTP guards	2026-06-29 10:33:38 +08:00
倪程伟	398d7a2d80	feat(agent): deterministic Markdown normalization for final answers (#275) ... LLMs routinely emit malformed Markdown (missing heading spaces, glued `---`, unaligned table pipes) that prompt rules cannot reliably prevent. Add a zero-token, regex-only MarkdownNormalizer applied on the FinalAnswerNode convergence path before persistence / channel delivery. It is code-fence aware, idempotent, and conservative (em-dash `---`, `#5`-style refs, stray prose pipes are left untouched). RETURN_DIRECT verbatim output and approval-wait paths return earlier and are unaffected. Closes #274	2026-06-07 19:10:53 +08:00
matevip	adf5d93975	fix(wiki): align HTTP status with R envelope and harden config + edit paths	2026-05-14 23:01:00 +08:00
matevip	7d8d16e458	feat: 5 defensive hardenings ... - ConversationWindowManager: cap reserve token at 50% of effective max to prevent negative historyBudget on small-context models (8K/16K) - common.security.SecretEquals: new constant-time comparison utility (MessageDigest.isEqual wrapper) for secrets/tokens/signatures - WeixinChannelAdapter: migrate context_token comparison to SecretEquals - FeishuChannelAdapter: fail-fast on empty encrypt_key when connection_mode=webhook - TelegramChannelAdapter: sanitize attachment captions — strip control bytes (\p{Cc} except \t\r\n) + format chars (\p{Cf}) + 4096 char cap - AgentGraphBuilder: fallback Anthropic max_tokens to 4096 on null/0/negative Tests: SecretEqualsTest (5) + TelegramCaptionSanitizeTest (5) — all green.	2026-04-15 22:14:55 +08:00