0425cd4d77
refactor skills registries and add GitHub-backed skill discovery ( #2442 )
...
* refactor skills registries and add GitHub-backed skill discovery
* fix ci
* fix command error
* fix default skills install registry behavior
* fix github registry URL parsing and versioned skill links
* fix skills registry config compatibility and URL installs
* * fix lint
* fix deprecated github base url compatibility
* fix skills registry yaml and github default branch handling
* fix github skills registry fallback and install metadata
* fix cli skills install origin metadata
* fix clawhub registry env compatibility
* fix skills registry config merge compatibility
* fix skill install metadata consistency and onboard template copy
* fix yaml overrides for default skills registries
* fix install_skill registry metadata normalization
* fix github skill URL parsing for slash branch names
* fix skills registry install/search validation and github URLs
* fix github skill URL host validation
* fix install_skill validation for invalid registry archives
* fix redundant skills registry names in saved config
* fix github blob skill URL installs and metadata links
* fix github registry URL scheme validation
* fix v0 skills migration preserving github registry defaults
* fix github blob skill install directory resolution
* fix install_skill rollback on origin metadata write failure
* fix github skill URL validation and registry JSON merging
* fix github registry target resolution and metadata links
* fix install_skill force reinstall rollback
* fix skills config compatibility and legacy security overlays
* fix ci
2026-04-14 15:14:16 +08:00
667fc85d54
refactor(config): make config.Channel to multiple instance support
...
add new field type to Channel struct
config.channels refactor to channel_list
update config version to 3
update the docs
2026-04-13 22:21:21 +08:00
93757812fc
refactor config and add ModelConfig.Enabled
2026-03-30 14:01:20 +08:00
b646d3b8fe
refactor config and security to simplified the structure ( #2068 )
2026-03-28 00:03:34 +08:00
cd48c3bde8
fix(config): remove stale wecom security merge fields
2026-03-24 20:27:31 +08:00
a1f95f02bc
refactor(wecom): rebuild ai bot channel
2026-03-24 20:23:29 +08:00
8b6cbd9909
Fix: Prevent security.yml from being overwritten during config migration ( #1966 )
2026-03-24 20:02:58 +08:00
d23c24ce72
fix(config): normalize empty security config before save/load ( #1956 )
...
Normalize missing security sections when attaching, loading, and saving
security config so existing config files without `.security.yml` can still
be updated safely. This fixes Pico channel setup for legacy/existing configs
and adds coverage for the missing security file path and unexported JSON
field behavior.
2026-03-24 17:03:28 +08:00
d921bbb667
bug fix for security initial cause can't save model in launcher ( #1952 )
2026-03-24 16:24:12 +08:00
cf9e0496f7
fix launcher can't save model api_key issue ( #1928 )
...
* fix launcher can't save model api_key issue
* add backup for old data before migrate config and fix migrate to empty
security issue
2026-03-24 03:26:11 +01:00
16d23d8cdc
feat(security): add sensitive data filtering for tool results sent to
...
LLM
Prevent LLM from seeing its own credentials (API keys, tokens, secrets)
by filtering sensitive values from tool call results before sending to
the
model. Values are collected from .security.yml and replaced with
[FILTERED] using an efficient strings.Replacer (O(n+m)).
- Add FilterSensitiveData and FilterMinLength to ToolsConfig
- Implement SensitiveDataReplacer() with sync.Once caching in
SecurityConfig
- Use reflection to collect all sensitive values (Model API keys,
channel
tokens, web tool API keys, skills tokens)
- Apply filtering in agent loop at 4 tool result locations
- Add comprehensive tests covering all token types
2026-03-23 20:55:41 +08:00
5a8aab8143
Merge branch 'main' into version
2026-03-23 11:41:36 +08:00
310f788f5f
rename security.yml to .security.yml
2026-03-23 11:20:42 +08:00
284ced1f5c
Merge branch 'main' into version
2026-03-22 19:58:33 +08:00
3dfe484f66
make yaml indent with 2
2026-03-22 11:07:22 +08:00
7c854fe6d7
Merge branch 'main' into version
2026-03-22 02:53:55 +08:00
e455eb5e67
refactor: seperate security.yml for store keys
2026-03-22 01:55:00 +08:00
lxowalle