Commit Graph
13 Commits
Author SHA1 Message Date
Jeffery 555611db07 fix(ai-review): 避免建問題模式嚴重結果 fail-open 2026-07-21 14:24:04 +08:00
Jeffery 6a26984bee fix(ai-review): 強化安全防護與建問題留言處理 2026-07-21 13:46:39 +08:00
JefferyandClaude Opus 4.8 5ac73f290e refactor(review): 診斷輸出長度常數提升為模組層級
node-actions/template: CI / BUILD (pull_request) Successful in 5s
CI / TEST (Claude) (pull_request) Successful in 32s
CI / TEST (Antigravity) (pull_request) Successful in 49s
CI / TEST (Codex) (pull_request) Successful in 2m22s
依議題 #24 Bard 建議,將 agentFailureDetail 內的 INPUT_LIMIT/
AGENT_DIAGNOSTIC_OUTPUT_LIMIT 移至模組頂層,與既有 PER_FILE_DIFF_LIMIT/
TOTAL_DIFF_LIMIT 並列集中管理;值與行為不變。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 18:43:06 +08:00
JefferyandClaude Opus 4.8 0c108ab7f9 refactor(ai-review): 重新命名留言閉包並抽出診斷輸出長度常數
- postComment → queueOrPostComment:涵蓋建問題模式下可能只暫存不立即發布的語義。
- ensureIssueCreated → createIssueAndFlushBufferedComments:明示建立 issue 並清空暫存留言的完整行為。
- review.js agentFailureDetail 的 500 字上限抽為具名常數 AGENT_DIAGNOSTIC_OUTPUT_LIMIT。
純內部命名與可讀性調整,無外部行為變更。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 18:04:23 +08:00
JefferyandClaude Opus 4.8 491c170d36 fix(AI 失敗診斷): 失敗時預設併印遮罩後 stdout(claude-code 錯誤寫在 stdout)
node-actions/template: CI / BUILD (pull_request) Successful in 4s
CI / TEST (Codex) (pull_request) Successful in 2m23s
CI / TEST (Claude) (pull_request) Successful in 17s
CI / TEST (Antigravity) (pull_request) Successful in 54s
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 16:37:15 +08:00
JefferyandClaude Opus 4.8 71b93a885a fix(AI 失敗診斷): CLI 失敗預設輸出經遮罩的 stderr 片段以利除錯
node-actions/template: CI / BUILD (pull_request) Successful in 4s
CI / TEST (Claude) (pull_request) Successful in 23s
CI / TEST (Antigravity) (pull_request) Failing after 40s
CI / TEST (Codex) (pull_request) Failing after 2m39s
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 16:17:59 +08:00
JefferyandClaude Opus 4.8 f341dc6e07 perf(AI 失敗診斷): 除錯輸出先截長度上限再遮罩降低掃描成本
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 16:01:05 +08:00
JefferyandClaude Opus 4.8 cfbbbe5f6c docs(review): 修正 postSevereToIssue 註解為建問題模式警告/建議逐條留言
node-actions/template: CI / BUILD (pull_request) Successful in 5s
CI / TEST (Antigravity) (pull_request) Failing after 33s
CI / TEST (Claude) (pull_request) Successful in 22s
CI / TEST (Codex) (pull_request) Failing after 2m55s
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 15:41:17 +08:00
JefferyandClaude Opus 4.8 5c8332928b fix(ai-review 診斷輸出): AI 失敗預設不輸出原始 stdout/stderr、除錯開關下遮罩機密
解決議題 #7 🔴 嚴重(Assassin/security):agentFailureDetail 原本無遮罩擷取 stderr/stdout 各 500 字寫入 CI log,可能長期外洩 token、PII 或原始碼祕密。

- 預設只輸出 exit code/signal/killed 等不含機密的分類資訊。
- 僅在明確開啟 ACTIONS_STEP_DEBUG=true 時,才附上經新增 redactSecrets 遮罩(Authorization/token/URL 帳密/長金鑰)並去除控制字元的片段。
- 另新增 postOthersToIssue:建問題模式下警告+建議改逐條發到 issue,讓每條問題可個別回覆(feat,配合 index.js)。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-20 14:59:38 +08:00
Jeffery 4a68743b66 chore(審查記錄): AI 失敗時輸出 exit code 與 stderr/stdout 供診斷
node-actions/template: CI / BUILD (pull_request) Successful in 4s
CI / TEST (Claude) (pull_request) Successful in 28s
CI / TEST (Codex) (pull_request) Successful in 29s
CI / TEST (Antigravity) (pull_request) Failing after 33s
2026-07-20 13:41:41 +08:00
Jeffery 91fff79f22 feat(建問題模式): 審查留言改發到 issue、跳過舊留言處理並回貼 PR 連結 2026-07-20 11:24:48 +08:00
Jeffery 8662e8ca80 docs(審查步驟編號): 依新順序重編步驟編號與說明
node-actions/template: CI / BUILD (pull_request) Successful in 5s
CI / TEST (Claude) (pull_request) Successful in 27s
CI / TEST (Codex) (pull_request) Successful in 31s
CI / TEST (Antigravity) (pull_request) Failing after 36s
2026-07-20 09:46:12 +08:00
JefferyandClaude Fable 5 d08b97bd87 feat(ai-code-review): 新增 AI 多角色 code review action(攻防審查、findings 保存、建問題模式)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-17 16:53:27 +08:00