thzxx
0 Followers · 0 Following
Repositories Projects Packages Public Activity Starred Repositories
8
thzxx pushed to master at MetonaTeam/metona-ai-desktop 2026-07-22 10:31:29 +08:00
2c2ca4a692 feat: 升级至 v0.3.16 — 工单修复 51 项 + 审查修复 30 项（安全加固/适配器/工具系统/数据层/前端）
thzxx closed issue MetonaTeam/metona-ai-desktop#51 2026-07-22 09:43:35 +08:00
[P1/优化] SettingsModal inheritDatabase 复选框未校验源数据库完整性
thzxx commented on issue MetonaTeam/metona-ai-desktop#51 2026-07-22 09:43:34 +08:00
[P1/优化] SettingsModal inheritDatabase 复选框未校验源数据库完整性

修复说明

文件: electron/ipc/handlers.ts + electron/preload.ts + src/types/global.d.ts + src/components/settings/SettingsModal.tsx

修复: 主进程新增 `workspace:checkDatabaseInteg…

thzxx closed issue MetonaTeam/metona-ai-desktop#50 2026-07-22 09:43:34 +08:00
[P1/高] TokenEstimator estimateMessagesTokens 忽略 toolCall.name 和 toolCall.id
thzxx commented on issue MetonaTeam/metona-ai-desktop#50 2026-07-22 09:43:33 +08:00
[P1/高] TokenEstimator estimateMessagesTokens 忽略 toolCall.name 和 toolCall.id

修复说明

文件: electron/harness/utils/token-estimator.ts

修复: estimateMessagesTokens 的 toolCalls 估算补充 tc.id 和 tc.name，并加 8 token 结构开销（TOOL_CALL_OVERHEAD_TOKENS…

thzxx commented on issue MetonaTeam/metona-ai-desktop#49 2026-07-22 09:43:32 +08:00
[P1/优化] ErrorBoundary 未上报错误到主进程，无法集中排查

修复说明

文件: src/components/common/ErrorBoundary.tsx + electron/preload.ts

修复: preload 暴露 app.reportError（通过 ipcRenderer.send('error:report', payload) 单向发送）；Erro…

thzxx closed issue MetonaTeam/metona-ai-desktop#49 2026-07-22 09:43:32 +08:00
[P1/优化] ErrorBoundary 未上报错误到主进程，无法集中排查
thzxx closed issue MetonaTeam/metona-ai-desktop#48 2026-07-22 09:43:31 +08:00
[P1/高] OnboardingWizard 5 步引导用户中途退出未保存进度，需重新填写
thzxx commented on issue MetonaTeam/metona-ai-desktop#48 2026-07-22 09:43:30 +08:00
[P1/高] OnboardingWizard 5 步引导用户中途退出未保存进度，需重新填写

修复说明

文件: src/components/onboarding/OnboardingWizard.tsx

修复: 添加 localStorage 进度持久化：启动时从 onboarding_progress 恢复 step/provider/baseURL/model/workspacePath/contex…

thzxx closed issue MetonaTeam/metona-ai-desktop#47 2026-07-22 09:43:30 +08:00
[P1/高] ContextBuilder estimateTokens 系数与 token-estimator 不一致，导致估算偏差
thzxx commented on issue MetonaTeam/metona-ai-desktop#47 2026-07-22 09:43:29 +08:00
[P1/高] ContextBuilder estimateTokens 系数与 token-estimator 不一致，导致估算偏差

修复说明

文件: electron/harness/prompts/context-builder.ts

结论: 工单描述的问题不存在（误报）。

工单描述的 estimateTokens 私有实现（Math.ceil(text.length / 4)）在当前代码中…

thzxx closed issue MetonaTeam/metona-ai-desktop#46 2026-07-22 09:43:28 +08:00
[P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离
thzxx commented on issue MetonaTeam/metona-ai-desktop#46 2026-07-22 09:43:28 +08:00
[P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离

修复说明

文件: electron/harness/tools/built-in/browser-window-manager.ts

修复: evaluate 方法添加审计日志（log.info 记录前 500 字符）和 10 秒超时控制（Promise.race + `setTimeout…

thzxx closed issue MetonaTeam/metona-ai-desktop#45 2026-07-22 09:43:27 +08:00
[P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击
thzxx commented on issue MetonaTeam/metona-ai-desktop#45 2026-07-22 09:43:26 +08:00
[P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击

修复说明

文件: electron/harness/tools/built-in/file-editor.ts

修复: 新增 isPotentiallyCatastrophicRegex 函数检测嵌套量词 (a+)+、重叠量词 a+a+、交替分支加量词 `(a

thzxx closed issue MetonaTeam/metona-ai-desktop#44 2026-07-22 09:43:26 +08:00
[P1/高] SessionService getMessages 未限制返回条数，超长会话可能 OOM
thzxx commented on issue MetonaTeam/metona-ai-desktop#44 2026-07-22 09:43:25 +08:00
[P1/高] SessionService getMessages 未限制返回条数，超长会话可能 OOM

修复说明

文件: electron/services/session.service.ts

修复: getMessages 添加可选 options: { limit?, offset? } 参数支持分页。默认 limit=0（不限制），保持向后兼容；调用者可传…

thzxx closed issue MetonaTeam/metona-ai-desktop#43 2026-07-22 09:43:24 +08:00
[P1/高] ContextBuilder 时区硬编码 Asia/Shanghai，跨时区用户显示错误
thzxx commented on issue MetonaTeam/metona-ai-desktop#43 2026-07-22 09:43:24 +08:00
[P1/高] ContextBuilder 时区硬编码 Asia/Shanghai，跨时区用户显示错误

修复说明

文件: electron/harness/prompts/context-builder.ts

修复: 时区硬编码 Asia/Shanghai 改为 Intl.DateTimeFormat().resolvedOptions().timeZone（系统本地时区），兜底回退…