github-featured / rightnow-ai--openfang

发布

0 发布 100 Git 标签

RSS 订阅源
  • v0.6.8 4aa1508f54
    比较

    v0.6.8
    Release / Desktop / macOS ARM64 (push) Has been cancelled
    详情
    Release / Desktop / Windows ARM64 (push) Has been cancelled
    详情
    Release / Desktop / macOS x86_64 (push) Has been cancelled
    详情
    Release / Desktop / Windows x86_64 (push) Has been cancelled
    详情
    Release / Desktop / Linux x86_64 (push) Has been cancelled
    详情
    Release / CLI / aarch64-apple-darwin (push) Has been cancelled
    详情
    Release / CLI / x86_64-apple-darwin (push) Has been cancelled
    详情
    Release / CLI / aarch64-unknown-linux-gnu (push) Has been cancelled
    详情
    Release / CLI / armv7-unknown-linux-gnueabihf (push) Has been cancelled
    详情
    Release / CLI / x86_64-unknown-linux-gnu (push) Has been cancelled
    详情
    Release / CLI / aarch64-pc-windows-msvc (push) Has been cancelled
    详情
    Release / CLI / x86_64-pc-windows-msvc (push) Has been cancelled
    详情
    Release / Docker Image (push) Has been cancelled
    详情

    frostbyte_neo 发布于 2026-05-12 17:44:21 +00:00

    Fixes:

    • #1097 workspace state_dir split (private state stays under ~/.openfang/, user workspace untouched)
    • #1085 dashboard WS auth aligned with HTTP middleware
    • #1038 skill_list / skill_describe / skill_execute agent tools (replaces filesystem fallback)
    • #1170 require_signed wired through POST /api/skills/install with allowed_signer_keys allow-list
    • #1174 POST /api/audit/append endpoint for instance-side wrapper audit integration
    • #1172 HAND.toml SHA-256 auto-logged to Merkle audit chain on every load
    • #780 Telegram message_thread_id routing per-topic to named agents
    • Codex audit findings on installer.rs binding check closed:
      • CRLF and UTF-8 BOM normalization on both sides of compare
      • package.json added to manifest candidate list
      • symlink and canonicalization escape protection
      • TOCTOU closed via private staging dir plus atomic rename

    Providers:

    PR dispositions:

    • closed: #1185 (DoVi consumer-specific), #1166 (decorative native-tls), #1162 (security flaw + DIRTY), #1055 (X-Frame-Options regression), #1044 (superseded), #1039 (scope creep into openfang-cli), #969 (stale overlap)
    • held pending external rebase: #1151, #997, #1093, #946 (all reviewed clean)
    • author rework requested: #943 (IDOR on session endpoints)

    Tests: 2696+ across 14 crates, 0 clippy warnings.

    下载附件