ooodc/PicoBot
ooodc/PicoBot
1
0
Fork 0
Code Pull Requests Activity
479 Commits 1 Branch 0 Tags
Commit Graph

10 Commits

Author SHA1 Message Date
oudecheng
cda14360af chore: 建立工程化基线（rustfmt + clippy + CI + eslint + prettier） 
配置:
- rustfmt.toml: 固化 max_width=100 / 4 空格缩进，cargo fmt 全量格式化
- Cargo.toml: 配置 [lints.rust] 与 [lints.clippy] 渐进式规则
- .github/workflows/ci.yml: Rust(fmt+clippy+test) + 前端(eslint+tsc+test) 双平台 CI
- Makefile: 新增 check/fmt/fix 目标，clippy 对齐 --all-targets --all-features
- web: eslint flat config + prettier 配置 + package.json 脚本与依赖
- src/main.rs: loop→while 修复 clippy::never_loop

对抗性审查发现并修复:
- eslint 缺 caughtErrorsIgnorePattern 导致 catch(_) 误报为 error
- 前端 lint 未接入 CI，现已补上 Lint 步骤
- Makefile 与 CI 的 clippy flags 不一致，已对齐
 2026-08-03 23:24:02 +08:00
oudecheng
58f461c953 fix: 修复 SSRF 重定向绕过 + 符号链接路径遍历 + TodoItemSummary 字段缺失 
P0: src/tools/http_request.rs SSRF 重定向绕过
  - reqwest::Client 默认跟随最多 10 次重定向，is_private_host 仅检查初始 URL
  - 攻击者可用公网 URL 返回 302 → http://127.0.0.1/ 或
    http://169.254.169.254/（云元数据端点）绕过防护访问内网
  - 修复：.redirect(reqwest::redirect::Policy::none()) 完全禁用重定向

P1: src/tools/file_read/write/edit.rs 符号链接路径遍历
  - resolve_path 用 starts_with 检查但未 canonicalize
  - 攻击者可在 allowed_dir 内创建指向 /etc/passwd 的符号链接绕过限制
  - 修复：对 resolved 和 allowed 均执行 canonicalize 后比较
  - file_read: 文件必须存在，canonicalize 失败直接报错
  - file_write/edit: 文件可能不存在，降级到父目录 canonicalize

P1: src/protocol/mod.rs + list_todos.rs TodoItemSummary 字段缺失
  - 后端 TodoItemSummary 仅返回 4 字段，前端期望 7 字段
  - 缺失 priority, created_at, updated_at，前端 TodoPanel 无法显示
    优先级和时间戳
  - 修复：struct 补齐 3 字段，list_todos 构造时传递完整字段
 2026-07-08 16:23:09 +08:00
oudecheng
d1d4998a26 feat: 增加工具结果字符限制，提升处理能力至 100,000 字符 2026-06-04 17:33:01 +08:00
oudecheng
5d3a583915 fix: read工具单行超长时内容被完全丢弃 
单行超过 MAX_CHARS(128K) 时，截断循环 end_idx=0 导致 lines[..0] 为空，
整行内容丢失。改为当首行就超长时使用 take_prefix_chars 字符级截断。

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-29 09:47:47 +08:00
oudecheng
da9cec6d35 feat: 添加参数提取工具函数，优化 JSON 参数处理，确保处理空值和类型转换 2026-05-21 16:30:09 +08:00
oudecheng
8f82009c32 feat: 重命名工具名称，简化工具调用接口 2026-05-19 15:18:04 +08:00
oudecheng
03c95e6b8f feat: 添加文件读取工具的字符截断逻辑，记录截断字符数量 2026-05-12 18:03:49 +08:00
ooodc
73dab09bfe Refactor code for improved readability and consistency 
- Adjusted formatting and indentation in various files for better clarity.
- Consolidated multi-line statements into single lines where appropriate.
- Enhanced error handling messages for better debugging.
- Added a new InboundProcessor struct to handle inbound messages more effectively.
- Updated test cases to ensure they align with the new code structure.
 2026-04-28 10:33:31 +08:00
ooodc
3045a6b596 feat: Enhance ChatMessage with system context and background compaction 
- Added `system_context` field to `ChatMessage` for better message context handling.
- Introduced constants for system context prompts in `message.rs`.
- Updated `Session` to manage background history compaction, including methods to start and finish compaction.
- Implemented logic to schedule background compaction after message processing in `SessionManager`.
- Enhanced database schema to support new `system_context` field in messages.
- Added functionality to compact active history, preserving system messages and summaries.
- Updated tests to validate new compaction logic and ensure message integrity.
- Removed unused functions and cleaned up code in various modules for better maintainability.

Co-authored-by: Copilot <copilot@github.com>
 2026-04-26 09:31:13 +08:00
xiaoski
a9e7aabed4 feat(tools): add file_read tool with pagination support 
- Read file contents with offset/limit pagination
- Returns numbered lines for easy reference
- Handles binary files as base64 encoded
- Supports directory restriction for security
- Includes 4 unit tests
 2026-04-07 23:43:47 +08:00