FenjuFu
f51f74c46e
chore(starter): normalize package files to LF
...
Preserve repository-standard line endings so the built-in Skill shell regression runs correctly on Linux.
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-06 20:26:51 +08:00
FenjuFu
cb5b614bff
feat(starter): add reviewed SandBase MCP skill
...
Add a provenance-pinned SandBase v0.1.17 package with cost, privacy, setup-approval, and charged-retry boundaries plus a realistic eval. Allow reviewed source packages to remain outside the runtime manifest until their immutable CDN artifact is published.
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-06 20:19:30 +08:00
XiaoSeS
53df1041f5
Merge pull request #818 from iflytek/docs/weekly-w36-official
...
Security / Dependency Review (push) Has been cancelled
Deploy Docs / build (push) Has been cancelled
Security / CodeQL (java-kotlin) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Security / CodeQL (python) (push) Has been cancelled
Deploy Docs / Deploy (push) Has been cancelled
docs(weekly): publish 2026 W36 report
2026-09-04 22:32:00 +08:00
XiaoSeS
5960a6c3bf
docs(weekly): publish 2026 W36 report
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 22:28:12 +08:00
dongmucat
64e1fecbe7
Merge pull request #816 from iflytek/release/cli-v0.1.11
...
chore(cli): release 0.1.11
2026-09-04 18:06:20 +08:00
dongmucat
bb8abbb46e
chore(cli): bump version to 0.1.11
...
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 18:04:19 +08:00
XiaoSeS
5258b24462
Merge pull request #815 from iflytek/fix/cli-explicit-sync-submit-semantics
...
fix(cli): align publish and namespace sync semantics
2026-09-04 17:44:12 +08:00
XiaoSeS
ed925aca99
docs(cli): show repeatable sync skill syntax
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
3421ee7923
docs(cli): clarify sync pull selection option
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
a5a723d8f7
fix(cli): align publish and namespace sync semantics
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
b9972af39f
Merge pull request #814 from iflytek/codex/issue-728-plugin-scanner-20260904
...
feat(builtin-skills): add HOL Guard plugin scanner
2026-09-04 16:32:29 +08:00
XiaoSeS
d73d4590ff
Merge pull request #813 from iflytek/fix/dependabot-security-alerts
...
chore(deps): patch open Dependabot alerts
2026-09-04 16:32:14 +08:00
XiaoSeS
3364869b6f
Merge pull request #812 from FenjuFu/fix/issue-810-spa-cache
...
fix(web): revalidate SPA entry point after upgrades
2026-09-04 16:31:53 +08:00
XiaoSeS
1ea1c0867f
test(builtin-skills): avoid manifest size coupling
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:56:00 +08:00
XiaoSeS
9761205e77
feat(builtin-skills): publish plugin scanner artifact
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:51:31 +08:00
XiaoSeS
bcef4fc5f0
test(builtin-skills): constrain runtime inventory
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:27:04 +08:00
XiaoSeS
7d9ea67169
test(builtin-skills): derive collection size from catalog
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:25:02 +08:00
XiaoSeS
d6345924d8
fix(builtin-skills): isolate scanner policy
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:23:07 +08:00
XiaoSeS
4f79bea9c2
fix(builtin-skills): preserve upstream license text
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:14:05 +08:00
XiaoSeS
6f4f294326
feat(builtin-skills): add plugin scanner
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:11:47 +08:00
dongmucat
dc043a208c
chore(deps): patch open Dependabot alerts
...
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 14:53:43 +08:00
XiaoSeS
63b220420d
Merge pull request #788 from FenjuFu/feat/install-for-agent
...
feat(skill): add install-for-agent prompt
2026-09-04 14:49:19 +08:00
XiaoSeS
a41ce7656c
fix(skill): simplify agent install prompt
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:29:29 +08:00
XiaoSeS
42a0e423f4
fix(skill): version exact-install guidance update
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:01:55 +08:00
XiaoSeS
1f2fe961c5
test(skill): cover exact-source install guidance
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:54:15 +08:00
XiaoSeS
857797f0cc
fix(skill): keep exact installs on selected registry
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:49:57 +08:00
XiaoSeS
5fea369d60
fix(web): preserve registry in agent onboarding
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:56:56 +08:00
XiaoSeS
400240b5d6
test(web): align install guidance expectations
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:34:09 +08:00
FenjuFu
3c9eda199c
fix(web): preserve LF endings in nginx assets
...
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-04 11:56:16 +08:00
FenjuFu
374525468f
test(web): assert SPA cache revalidation
...
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-04 11:29:58 +08:00
FenjuFu
12dba95764
fix(web): revalidate SPA entry point
...
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-04 11:29:23 +08:00
XiaoSeS
7069e87e3b
fix(skill): validate derived registry hosts
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 11:23:03 +08:00
XiaoSeS
b4616e60fd
fix(skill): derive registry URL for default installs
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 11:23:03 +08:00
XiaoSeS
5f17e7a181
fix(skill): align helper update with CLI inventory
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 11:23:03 +08:00
XiaoSeS
613d449d38
feat(skill): complete install-for-agent workflow
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 11:23:03 +08:00
XiaoSeS
d0d43bbf45
Merge remote-tracking branch 'origin/main' into codex/maintain-pr788-20260904
...
# Conflicts:
# web/src/pages/skill-detail.tsx
2026-09-04 09:48:00 +08:00
XiaoSeS
61aa957ecc
Merge pull request #811 from iflytek/codex/feat/issue-690-manual-scan-retry
...
feat(security): retry failed scans
2026-09-03 20:10:57 +08:00
XiaoSeS
4128801c68
Merge pull request #809 from iflytek/codex/fix/issue-808-scan-pending-bound
...
fix(scanner): bound unavailable task recovery
2026-09-03 20:10:23 +08:00
XiaoSeS
1b7e679d45
fix(security): include csrf token in scan retry
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:46:13 +08:00
XiaoSeS
fd932cc160
fix(security): require explicit retry locking
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:45:44 +08:00
XiaoSeS
6770be22c5
test(security): verify retry row locking
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:45:44 +08:00
XiaoSeS
697bb952a4
fix(security): harden scan retry lifecycle
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:45:44 +08:00
XiaoSeS
0fb00f01b6
chore(api): refresh security scan retry schema
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:45:16 +08:00
XiaoSeS
680a5d1b94
feat(security): retry failed scans
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:45:16 +08:00
XiaoSeS
e02c22e678
fix(i18n): align scanner failure reason keys
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:32:37 +08:00
XiaoSeS
ccc13291b2
fix(scanner): keep failure details private
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:32:37 +08:00
XiaoSeS
8b09c23dc4
fix(scanner): make terminal failures recoverable
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:32:37 +08:00
XiaoSeS
4bfb5e2692
fix(scanner): expire unavailable pending tasks
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:32:37 +08:00
XiaoSeS
2e697d1581
test(scanner): reproduce unbounded unavailable task
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-03 19:32:37 +08:00
XiaoSeS
d6afc43364
Merge pull request #807 from iflytek/codex/refactor/issue-622-notification-polling
...
refactor(notification): replace SSE with HTTP polling
2026-09-03 13:48:57 +08:00