6 Commits

Author	SHA1	Message	Date
hongjr03	e049cb6880	fix: clear dependency security advisories	2026-07-10 18:59:03 +08:00
hongjr03	f07f280b8f	fix: prove Linux Agent sandbox boundary	2026-07-10 17:59:56 +08:00
hongjr03	f4968d6657	fix: confine Agent and MCP data access	2026-07-10 16:38:08 +08:00
hongjr03	73fa28a178	feat: provision non-root Hub service	2026-07-10 15:59:35 +08:00
hongjr03	1cfda3ccd2	ci(hub): 补齐 Hub 检查和健康 smoke	2026-07-08 15:14:06 +08:00
hongjr03	1abcc495f4	test(hub): 真实 model 集成测试 + Gitea CI workflow ... real-model.test.ts: 用真 OpenRouter model + 真 cph + 真 workspace 跑 agent tool-calls 循环,验证 MockProvider 测不到的路径(model 返回 tool_calls → dispatch → tool_result 回传 → 继续/stop)。没 OPENROUTER_API_KEY 时自动 skip,不阻塞 CI;有 key 时自动跑。 两个 test:(1) list files → cph check → 回答;(2) write file → read back。 hub-check.yml: Gitea CI workflow,对齐 checker-check/spec-check 的纪律: npm ci → prisma generate → tsc → prisma validate → 装 cph → vitest unit → vitest integration(postgres service container)→ real-model(可选,从 secrets 注入 key)。 全 suite: 60 passed + 2 skipped(无 key)。tsc rc=0。	2026-07-07 23:45:59 +08:00