Pulse Contributors Code Frequency Recent Commits

2025-09-20 - 2026-09-20

Period: 1 year

1 day 3 days 1 week 1 month 3 months 6 months 1 year

Overview

0 Active Pull Requests

51 Active Issues

0
Merged Pull Requests 0
Proposed Pull Requests 51
Closed Issues 51
New Issues

Excluding merges, 2 authors have pushed 112 commits to master and 112 commits to all branches. On master, 312 files have changed and there have been 144382 additions and 22434 deletions.

1 Release published by 1 user

Published v0.8.3 v0.8.3 工作空间切换链路根治 · 思考强度扩档 — 切换报错TDZ/继承丢数/回显滞后三修复 2026-09-08 21:16:18 +08:00

51 Issues closed from 1 user

Closed #51 [P1/优化] SettingsModal inheritDatabase 复选框未校验源数据库完整性 2026-07-22 09:43:35 +08:00

Closed #50 [P1/高] TokenEstimator estimateMessagesTokens 忽略 toolCall.name 和 toolCall.id 2026-07-22 09:43:34 +08:00

Closed #49 [P1/优化] ErrorBoundary 未上报错误到主进程，无法集中排查 2026-07-22 09:43:32 +08:00

Closed #48 [P1/高] OnboardingWizard 5 步引导用户中途退出未保存进度，需重新填写 2026-07-22 09:43:31 +08:00

Closed #47 [P1/高] ContextBuilder estimateTokens 系数与 token-estimator 不一致，导致估算偏差 2026-07-22 09:43:30 +08:00

Closed #46 [P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离 2026-07-22 09:43:28 +08:00

Closed #45 [P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击 2026-07-22 09:43:27 +08:00

Closed #44 [P1/高] SessionService getMessages 未限制返回条数，超长会话可能 OOM 2026-07-22 09:43:26 +08:00

Closed #43 [P1/高] ContextBuilder 时区硬编码 Asia/Shanghai，跨时区用户显示错误 2026-07-22 09:43:24 +08:00

Closed #42 [P1/优化] messages 表缺少 (session_id, timestamp) 复合索引，长会话加载慢 2026-07-22 09:43:23 +08:00

Closed #41 [P1/优化] MiMo Adapter thinking 模式下 max_completion_tokens 未传默认兜底 2026-07-22 09:43:22 +08:00

Closed #40 [P1/高] ConfirmationDialog autoExecute 选项未做二次确认，误点击导致永久自动执行 2026-07-22 09:43:20 +08:00

Closed #39 [P1/高] useKeyboardShortcuts 14 个快捷键全局监听未区分 input 焦点 2026-07-22 09:43:19 +08:00

Closed #38 [P1/高] AgentStore setCurrentSession 过滤 tool 消息但 UI 仍渲染 ToolMessage，逻辑矛盾 2026-07-22 09:43:18 +08:00

Closed #37 [P1/高] WindowManager sandbox: false 削弱渲染进程隔离 2026-07-22 09:43:16 +08:00

Closed #36 [P1/高] AuditService computeHash 使用 JSON.stringify，对象 key 顺序不稳定导致 hash 不一致 2026-07-22 09:43:15 +08:00

Closed #35 [P1/优化] SessionRecorder appendFileSync 在高频写入时阻塞主进程 2026-07-22 09:43:14 +08:00

Closed #34 [P1/高] SessionService saveMessage 更新 message_count 非原子性，并发下计数错误 2026-07-22 09:43:12 +08:00

Closed #33 [P1/高] DatabaseService 迁移缺少事务包裹，部分失败导致 schema 不一致 2026-07-22 09:43:11 +08:00

Closed #32 [P1/高] MemoryManager store INSERT OR REPLACE 永远不 REPLACE，更新语义丢失 2026-07-22 09:43:10 +08:00

Closed #31 [P1/高] estimateTokens 忽略 tool.parameters，token 估算严重偏低 2026-07-22 09:43:08 +08:00

Closed #30 [P1/高] compressMessages 用 user 角色注入摘要，导致语义混淆 2026-07-22 09:43:07 +08:00

Closed #29 [P1/高] Agent Engine waitForAbort 总是返回 true，无法检测实际 abort 完成状态 2026-07-22 09:43:06 +08:00

Closed #28 [P1/高] Agnes Adapter 多模态索引映射在 system 消息存在时错位 2026-07-22 09:43:04 +08:00

Closed #27 [P1/高] DeepSeek Adapter 静默丢弃 images 字段，多模态输入完全不可用 2026-07-22 09:43:03 +08:00

Closed #26 [P1/高] openai-format tool 消息 content 可能被赋为 undefined，导致 API 400 2026-07-22 09:43:02 +08:00

Closed #25 [P1/高] sse-stream flushToolCallBuffer 静默丢弃 JSON 解析失败的工具调用 2026-07-22 09:43:00 +08:00

Closed #24 [P1/高] BaseAdapter getFetchSignal 每次新建 timer 未清理，导致 timer 泄漏 2026-07-22 09:42:59 +08:00

Closed #23 [P1/高] BaseAdapter mapError 字符串匹配 401/429，会误匹配 URL 中的数字 2026-07-22 09:42:57 +08:00

Closed #22 [P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 2026-07-22 09:42:56 +08:00

Closed #21 [P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞 2026-07-22 09:42:55 +08:00

Closed #20 [P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 2026-07-22 09:42:53 +08:00

Closed #19 [P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 2026-07-22 09:42:52 +08:00

Closed #18 [P1/高] ConfirmationHook waitForConfirmation 超时竞态条件 2026-07-22 09:42:51 +08:00

Closed #17 [P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链 2026-07-22 09:42:49 +08:00

Closed #16 [P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符 2026-07-22 09:42:48 +08:00

Closed #15 [P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过 2026-07-22 09:42:47 +08:00

Closed #14 [P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 2026-07-22 09:42:45 +08:00

Closed #13 [P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 2026-07-22 09:42:44 +08:00

Closed #12 [P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时 2026-07-22 09:42:42 +08:00

Closed #11 [P1/高] ToolRegistry 工具超时后 Promise 未取消，导致资源泄漏 2026-07-22 09:42:41 +08:00

Closed #10 [P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 2026-07-22 09:24:46 +08:00

Closed #9 [P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys 2026-07-22 09:24:44 +08:00

Closed #1 [P0/严重] Ollama Adapter reasoning_content 字段名错误，推理内容永远丢失 2026-07-22 09:24:43 +08:00

Closed #8 [P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 2026-07-22 09:14:54 +08:00

Closed #7 [P0/严重] preload.ts contextBridge 失败时降级到 globalThis 赋值削弱渲染进程隔离 2026-07-22 09:14:52 +08:00

Closed #6 [P0/严重] MCPManager stdio 子进程命令注入风险 2026-07-22 09:14:51 +08:00

Closed #5 [P0/严重] TaskOrchestrator abort 路径未清理 sessionDepth 导致后续任务深度错乱 2026-07-22 09:14:50 +08:00

Closed #4 [P0/严重] TaskOrchestrator SubEngine 共享主 Engine 的 adapter 导致 abort signal 互斥覆盖 2026-07-22 09:14:48 +08:00

Closed #3 [P0/严重] Agent Engine 未调用 adapter.getContextWindow() 同步压缩阈值 2026-07-22 09:14:47 +08:00

Closed #2 [P0/严重] Ollama Adapter 将公网 URL 图片当作 base64 字符串直接传递 2026-07-22 09:14:46 +08:00

51 Issues created by 0 users

Opened #1 [P0/严重] Ollama Adapter reasoning_content 字段名错误，推理内容永远丢失 2026-07-21 21:55:33 +08:00

Opened #2 [P0/严重] Ollama Adapter 将公网 URL 图片当作 base64 字符串直接传递 2026-07-21 21:55:34 +08:00

Opened #3 [P0/严重] Agent Engine 未调用 adapter.getContextWindow() 同步压缩阈值 2026-07-21 21:55:35 +08:00

Opened #4 [P0/严重] TaskOrchestrator SubEngine 共享主 Engine 的 adapter 导致 abort signal 互斥覆盖 2026-07-21 21:55:36 +08:00

Opened #6 [P0/严重] MCPManager stdio 子进程命令注入风险 2026-07-21 21:55:37 +08:00

Opened #5 [P0/严重] TaskOrchestrator abort 路径未清理 sessionDepth 导致后续任务深度错乱 2026-07-21 21:55:37 +08:00

Opened #7 [P0/严重] preload.ts contextBridge 失败时降级到 globalThis 赋值削弱渲染进程隔离 2026-07-21 21:55:38 +08:00

Opened #8 [P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 2026-07-21 21:55:39 +08:00

Opened #9 [P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys 2026-07-21 21:55:40 +08:00

Opened #11 [P1/高] ToolRegistry 工具超时后 Promise 未取消，导致资源泄漏 2026-07-21 21:55:41 +08:00

Opened #10 [P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 2026-07-21 21:55:41 +08:00

Opened #12 [P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时 2026-07-21 21:55:42 +08:00

Opened #13 [P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 2026-07-21 21:55:43 +08:00

Opened #14 [P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 2026-07-21 21:55:44 +08:00

Opened #16 [P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符 2026-07-21 21:55:45 +08:00

Opened #15 [P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过 2026-07-21 21:55:45 +08:00

Opened #17 [P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链 2026-07-21 21:55:46 +08:00

Opened #18 [P1/高] ConfirmationHook waitForConfirmation 超时竞态条件 2026-07-21 21:55:47 +08:00

Opened #19 [P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 2026-07-21 21:55:48 +08:00

Opened #20 [P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 2026-07-21 21:55:49 +08:00

Opened #21 [P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞 2026-07-21 21:55:49 +08:00

Opened #22 [P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 2026-07-21 21:55:50 +08:00

Opened #23 [P1/高] BaseAdapter mapError 字符串匹配 401/429，会误匹配 URL 中的数字 2026-07-21 21:55:51 +08:00

Opened #24 [P1/高] BaseAdapter getFetchSignal 每次新建 timer 未清理，导致 timer 泄漏 2026-07-21 21:55:52 +08:00

Opened #26 [P1/高] openai-format tool 消息 content 可能被赋为 undefined，导致 API 400 2026-07-21 21:55:53 +08:00

Opened #25 [P1/高] sse-stream flushToolCallBuffer 静默丢弃 JSON 解析失败的工具调用 2026-07-21 21:55:53 +08:00

Opened #27 [P1/高] DeepSeek Adapter 静默丢弃 images 字段，多模态输入完全不可用 2026-07-21 21:55:54 +08:00

Opened #28 [P1/高] Agnes Adapter 多模态索引映射在 system 消息存在时错位 2026-07-21 21:55:55 +08:00

Opened #30 [P1/高] compressMessages 用 user 角色注入摘要，导致语义混淆 2026-07-21 21:55:56 +08:00

Opened #29 [P1/高] Agent Engine waitForAbort 总是返回 true，无法检测实际 abort 完成状态 2026-07-21 21:55:56 +08:00

Opened #31 [P1/高] estimateTokens 忽略 tool.parameters，token 估算严重偏低 2026-07-21 21:55:57 +08:00

Opened #32 [P1/高] MemoryManager store INSERT OR REPLACE 永远不 REPLACE，更新语义丢失 2026-07-21 21:55:58 +08:00

Opened #33 [P1/高] DatabaseService 迁移缺少事务包裹，部分失败导致 schema 不一致 2026-07-21 21:55:59 +08:00

Opened #35 [P1/优化] SessionRecorder appendFileSync 在高频写入时阻塞主进程 2026-07-21 21:56:00 +08:00

Opened #34 [P1/高] SessionService saveMessage 更新 message_count 非原子性，并发下计数错误 2026-07-21 21:56:00 +08:00

Opened #36 [P1/高] AuditService computeHash 使用 JSON.stringify，对象 key 顺序不稳定导致 hash 不一致 2026-07-21 21:56:01 +08:00

Opened #37 [P1/高] WindowManager sandbox: false 削弱渲染进程隔离 2026-07-21 21:56:02 +08:00

Opened #38 [P1/高] AgentStore setCurrentSession 过滤 tool 消息但 UI 仍渲染 ToolMessage，逻辑矛盾 2026-07-21 21:56:03 +08:00

Opened #39 [P1/高] useKeyboardShortcuts 14 个快捷键全局监听未区分 input 焦点 2026-07-21 21:56:04 +08:00

Opened #41 [P1/优化] MiMo Adapter thinking 模式下 max_completion_tokens 未传默认兜底 2026-07-21 21:56:05 +08:00

Opened #40 [P1/高] ConfirmationDialog autoExecute 选项未做二次确认，误点击导致永久自动执行 2026-07-21 21:56:05 +08:00

Opened #42 [P1/优化] messages 表缺少 (session_id, timestamp) 复合索引，长会话加载慢 2026-07-21 21:56:06 +08:00

Opened #43 [P1/高] ContextBuilder 时区硬编码 Asia/Shanghai，跨时区用户显示错误 2026-07-21 21:56:07 +08:00

Opened #45 [P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击 2026-07-21 21:56:09 +08:00

Opened #44 [P1/高] SessionService getMessages 未限制返回条数，超长会话可能 OOM 2026-07-21 21:56:09 +08:00

Opened #46 [P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离 2026-07-21 21:56:11 +08:00

Opened #47 [P1/高] ContextBuilder estimateTokens 系数与 token-estimator 不一致，导致估算偏差 2026-07-21 21:56:12 +08:00

Opened #48 [P1/高] OnboardingWizard 5 步引导用户中途退出未保存进度，需重新填写 2026-07-21 21:56:13 +08:00

Opened #49 [P1/优化] ErrorBoundary 未上报错误到主进程，无法集中排查 2026-07-21 21:56:14 +08:00

Opened #50 [P1/高] TokenEstimator estimateMessagesTokens 忽略 toolCall.name 和 toolCall.id 2026-07-21 21:56:15 +08:00

Opened #51 [P1/优化] SettingsModal inheritDatabase 复选框未校验源数据库完整性 2026-07-21 21:56:16 +08:00