Anonymity-0
78165393e0
Merge branch 'main' into feat/t07-chat-response-envelope
2026-08-11 20:10:06 +08:00
Dennis
931af6af59
chore(pr): keep evidence out of merge tree
2026-08-11 19:51:57 +08:00
chichuan and Claude Opus 4.6
f6a4e0d5ad
fix(eval): replace sed with bash string concat to satisfy shellcheck SC2001
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-08-11 19:51:32 +08:00
Dennis
44311d0160
docs(pr): publish minutes agent e2e evidence
2026-08-11 19:51:08 +08:00
chichuan
afb25ae0e9
Merge remote-tracking branch 'origin/main' into codex/release-fragments
2026-08-11 19:49:49 +08:00
长真
fb44601f21
fix(chat): restrict audit join typed enum
2026-08-11 19:48:24 +08:00
chichuan and Claude Opus 4.6
83c64d31dd
security(eval): add anti-forgery validation for eval-dispatch comments
...
Address P1 lint finding: structured eval-dispatch comments could be
forged by unauthorized users. Add three-layer consumer-side validation:
1. comment.user.login == 'github-actions[bot]' (platform-enforced identity)
2. comment.performed_via_github_app.slug == 'github-actions' (App signature)
3. payload.run_id verified against actual successful workflow run via API
Also adds:
- eval_poll_validate.py: consumer validation module (in-repo, auditable)
- test_eval_poll_validate.py: unit tests proving forged comments are rejected
- Go security contract test updated to assert run_id and validate reference
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-08-11 19:47:52 +08:00
玉澜
293c085634
fix(skill): preserve same-prefix user skills
2026-08-11 19:47:30 +08:00
Dennis
f81d09fb95
fix(localio): pin verified upload file across retries
2026-08-11 19:45:06 +08:00
前津
f8258576ef
feat(chat): support mentions in native card creation
2026-08-11 19:42:06 +08:00
chichuan and Claude Opus 4.6
e437cf4bbb
feat(eval): replace direct internal API call with structured comment for Devix polling
...
The GitHub Actions runner cannot reach internal Aone CI API (structural
network isolation). Replace the curl-to-internal step with a structured
HTML comment (<!-- eval-dispatch: {...} -->) that an internal Devix
polling service picks up every 3 minutes to trigger the Aone CI pipeline.
This eliminates the EVAL_TRIGGER_URL/EVAL_TRIGGER_TOKEN secrets dependency
from the GitHub side — those can be removed once verified.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-08-11 19:40:48 +08:00
Dennis
cd1ba34d96
Merge remote-tracking branch 'origin/main' into codex/minutes-shortcuts
2026-08-11 19:30:15 +08:00
Dennis
2cc410db6c
docs: remove shortcut analysis artifacts
2026-08-11 19:09:30 +08:00
玉澜
f57c002ae7
Merge remote-tracking branch 'origin/main' into feat/skill-mode-migration
2026-08-11 19:06:57 +08:00
长真
495a3b256f
Merge remote-tracking branch 'origin/fix/85313115-chat-catalog-tools' into fix/85313115-chat-catalog-tools
2026-08-11 19:03:09 +08:00
长真
4210334f55
fix(chat): preserve yes shorthand on guarded writes
2026-08-11 19:00:45 +08:00
Dennis
06ec207d17
fix(minutes): harden end-to-end failure handling
2026-08-11 18:54:24 +08:00
xlb1130
30caba5dcb
Merge branch 'main' into fix/85313115-chat-catalog-tools
2026-08-11 18:51:33 +08:00
玉澜
b17634ef7d
fix(skill): fail incomplete bundled skill installs
2026-08-11 18:49:05 +08:00
长真
76316ef5f0
Merge remote-tracking branch 'origin/fix/85313115-chat-catalog-tools' into fix/85313115-chat-catalog-tools
2026-08-11 18:48:18 +08:00
长真
f5b1c2659f
fix(chat): enforce confirmation for chat write tools
2026-08-11 18:47:30 +08:00
github-actions[bot]
b4f0053bbe
Merge pull request #924 from typefield/feat/unified-command-framework-core
...
feat: add unified result framework with dingtalk-dev pilot
2026-08-11 18:34:15 +08:00
玉澜
3593818a46
Merge remote-tracking branch 'upstream/main' into feat/unified-command-framework-core
2026-08-11 18:15:58 +08:00
玉澜
e0fd344a26
fix(skill): always refresh bundled skills
2026-08-11 18:13:44 +08:00
github-actions[bot]
21bbf42ca7
chore: update beta formula for v1.0.58-beta.3 [skip ci]
2026-08-11 10:06:41 +00:00
玉澜
edf1e58141
Merge remote-tracking branch 'upstream/main' into feat/unified-command-framework-core
2026-08-11 17:59:38 +08:00
xlb1130
bd94c63de8
Merge branch 'main' into fix/85313115-chat-catalog-tools
2026-08-11 17:50:56 +08:00
chichuan
43b1936b65
Merge pull request #950 from DingTalk-Real-AI/codex/changelog-v1.0.58-beta.3
...
docs: seal v1.0.58-beta.3 changelog
2026-08-11 17:50:03 +08:00
玉澜
9d8806927f
Merge remote-tracking branch 'upstream/main' into feat/unified-command-framework-core
2026-08-11 17:48:35 +08:00
chichuan
dbe47d58fb
docs: seal v1.0.58-beta.3 changelog
2026-08-11 17:45:44 +08:00
xlb1130
8c2c94e0f1
Merge branch 'main' into fix/85313115-chat-catalog-tools
2026-08-11 17:40:29 +08:00
玉澜
b7b78f0c16
fix(dev): keep recovery commands behind confirmation
2026-08-11 17:36:59 +08:00
john
c38e988b14
Merge branch 'main' into feat/skill-mode-migration
2026-08-11 17:34:26 +08:00
github-actions[bot]
ec7593dabb
Merge pull request #936 from wxianfeng/feature/aone85277391-event-runtime-token-handoff
...
fix(event): securely hand off runtime token to detached bus
2026-08-11 09:32:24 +00:00
chichuan
1df4cc95a6
Merge branch 'main' into feature/aone85277391-event-runtime-token-handoff
2026-08-11 17:15:15 +08:00
Dennis
66468c703f
fix(minutes): preserve upload recovery and schema compatibility
2026-08-11 17:06:22 +08:00
玉澜
773e76a1c6
Merge remote-tracking branch 'fork/feat/skill-mode-migration' into feat/skill-mode-migration
2026-08-11 17:01:44 +08:00
玉澜
f4e39a219b
fix(skill): preserve state on partial setup
2026-08-11 17:01:32 +08:00
john
c170a464e1
Merge branch 'main' into feat/skill-mode-migration
2026-08-11 17:00:13 +08:00
Dennis
74ef426064
Merge remote-tracking branch 'origin/main' into codex/minutes-shortcuts
2026-08-11 16:55:06 +08:00
玉澜
5ce391b49b
Merge remote-tracking branch 'upstream/main' into feat/unified-command-framework-core
2026-08-11 16:41:42 +08:00
xlb1130
4a14f4b1e3
Merge branch 'main' into fix/85313115-chat-catalog-tools
2026-08-11 16:40:45 +08:00
玉澜
451a6fffe7
Merge remote-tracking branch 'upstream/main' into feat/unified-command-framework-core
...
# Conflicts:
# internal/errors/errors.go
# internal/errors/errors_test.go
2026-08-11 16:40:15 +08:00
github-actions[bot]
d052c104d9
Merge pull request #948 from cywan1998/docs/sync-calendar-skill-mono-multi
...
docs(skills): sync calendar reference between mono and multi layouts
2026-08-11 08:39:55 +00:00
Anonymity-0
e4e653d3b3
Merge branch 'main' into feat/t07-chat-response-envelope
2026-08-11 16:26:43 +08:00
xlb1130
6b85867309
Merge branch 'main' into fix/85313115-chat-catalog-tools
2026-08-11 16:23:13 +08:00
fengbai
fdf3e8cc3b
docs(skills): sync calendar reference between mono and multi layouts
2026-08-11 16:21:20 +08:00
前津
a5902ca233
Merge upstream/main into chat response branch
2026-08-11 16:20:06 +08:00
玉澜
4665b42bbf
fix(skill): preserve installer caches during refresh
2026-08-11 16:16:49 +08:00
github-actions[bot]
0fb332c3f3
Merge pull request #934 from DingTalk-Real-AI/feat/eval-dispatch
...
ci: add /eval PR comment dispatch for internal MCP evaluation
2026-08-11 16:15:19 +08:00
Anonymity-0