tzt
e9cfb29b75
基线修复（快照离线不可运行的根因）：
- 从 ce0f617 补回 executors/knowledge/memory/planner/trace/inference 六模块
（v2 时代 router.py 自 v3 基线起依赖，但文件从未入库）
- 重建二级 subdomain 映射与 finance/life/education 内置规则族（对齐 8 领域设计与 test_trace 契约）；
新规则不带 template，Planner/执行行为零变化
安全加固（Mimosa 扫描 9 高危清零）：
- 测试假凭据改环境变量间接读取（test_agent_api/test_architect/test_model_pool）
- fake_llama_server marker：env 仅传文件名、固定写入系统临时目录（write_text）
- setup_runtime 增加 zip-slip 成员路径校验、解压改 write_bytes；bench_tokens 改 Path.open
- runtime 健康检查仅允许回环地址并改用 http.client 定点连接（防 SSRF）
- gateway/llama_manager 与 workspace 持久化改用 Path 安全 API
pytest 219 passed
1 line
7.9 KiB
JSON
1 line
7.9 KiB
JSON
{"touched":["E:\\projectAIpopular\\.wt\\v2\\router_system\\knowledge.py","E:\\projectAIpopular\\.wt\\v2\\tests\\test_architect.py","E:\\projectAIpopular\\.wt\\v2\\tests\\test_agent_api.py","E:\\projectAIpopular\\.wt\\v2\\tests\\test_model_pool.py","E:\\projectAIpopular\\.wt\\v2\\tests\\fixtures\\fake_llama_server.py","E:\\projectAIpopular\\.wt\\v2\\tests\\test_llama_server.py","E:\\projectAIpopular\\.wt\\v2\\scripts\\bench_tokens.py","E:\\projectAIpopular\\.wt\\v2\\scripts\\setup_runtime.py","E:\\projectAIpopular\\.wt\\v2\\gateway\\llama_manager.py","E:\\projectAIpopular\\.wt\\v2\\router_system\\workspace.py","E:\\projectAIpopular\\.wt\\v2\\runtime\\llama_server.py"],"bashMutation":true,"reportedFindings":["mimosa-02d0ec0762b225cf993a6ff7","mimosa-5622d714819d32333495b452","mimosa-8efd8b70127b6526d2f19675"],"findingEvents":[{"finding_id":"mimosa-02d0ec0762b225cf993a6ff7","file":"tests/test_agent_api.py","line":150,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"3c7ea9a310eed938e288dd28b887685eec4cea91c781aab0b1ede5a440df7de7","source":"semgrep"},"status":"blocked","decision":"deny","at":"2026-09-17T23:52:32.321Z"},{"finding_id":"mimosa-5622d714819d32333495b452","file":"tests/test_model_pool.py","line":33,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"d1ae8ac61aed1eb48aebc0ca9147f945256ac92279aa07edf1c05683aebf308b","source":"semgrep"},"status":"blocked","decision":"deny","at":"2026-09-17T23:52:33.594Z"},{"finding_id":"mimosa-02d0ec0762b225cf993a6ff7","file":"tests/test_agent_api.py","line":150,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"3c7ea9a310eed938e288dd28b887685eec4cea91c781aab0b1ede5a440df7de7","source":"semgrep","candidate_before_line_hash":"3c7ea9a310eed938e288dd28b887685eec4cea91c781aab0b1ede5a440df7de7","post_change_line_hash_at_previous_location":"fa1b25c7109499c88c51c57fbbd841f24df58df362f3d4b36ab987f44b0a56f3","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"fixed_candidate","decision":"repair_observed","at":"2026-09-17T23:52:59.123Z"},{"finding_id":"mimosa-02d0ec0762b225cf993a6ff7","file":"tests/test_agent_api.py","line":150,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"3c7ea9a310eed938e288dd28b887685eec4cea91c781aab0b1ede5a440df7de7","source":"semgrep","candidate_before_line_hash":"3c7ea9a310eed938e288dd28b887685eec4cea91c781aab0b1ede5a440df7de7","post_change_line_hash_at_previous_location":"fa1b25c7109499c88c51c57fbbd841f24df58df362f3d4b36ab987f44b0a56f3","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"static_verified","decision":"static_rescan_passed","at":"2026-09-17T23:52:59.123Z"},{"finding_id":"mimosa-5622d714819d32333495b452","file":"tests/test_model_pool.py","line":33,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"d1ae8ac61aed1eb48aebc0ca9147f945256ac92279aa07edf1c05683aebf308b","source":"semgrep","candidate_before_line_hash":"d1ae8ac61aed1eb48aebc0ca9147f945256ac92279aa07edf1c05683aebf308b","post_change_line_hash_at_previous_location":"792d7c69a01c6e9a5920f00b57c6c051018a42338414ba7c9416760f513a27a3","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"fixed_candidate","decision":"repair_observed","at":"2026-09-17T23:53:01.436Z"},{"finding_id":"mimosa-5622d714819d32333495b452","file":"tests/test_model_pool.py","line":33,"rule_id":"security","severity":"high","category":"硬编码凭据","evidence":{"type":"static_observation","line_hash":"d1ae8ac61aed1eb48aebc0ca9147f945256ac92279aa07edf1c05683aebf308b","source":"semgrep","candidate_before_line_hash":"d1ae8ac61aed1eb48aebc0ca9147f945256ac92279aa07edf1c05683aebf308b","post_change_line_hash_at_previous_location":"792d7c69a01c6e9a5920f00b57c6c051018a42338414ba7c9416760f513a27a3","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"static_verified","decision":"static_rescan_passed","at":"2026-09-17T23:53:01.436Z"},{"finding_id":"mimosa-8efd8b70127b6526d2f19675","file":"tests/fixtures/fake_llama_server.py","line":7,"rule_id":"security","severity":"high","category":"路径穿越","evidence":{"type":"static_observation","line_hash":"c9f0ead053f8936753da2c98e6a0254523e4b644dbd11bb5dc2ced067dcfb5b9","source":"semgrep"},"status":"blocked","decision":"deny","at":"2026-09-17T23:53:16.680Z"},{"finding_id":"mimosa-8efd8b70127b6526d2f19675","file":"tests/fixtures/fake_llama_server.py","line":7,"rule_id":"security","severity":"high","category":"路径穿越","evidence":{"type":"static_observation","line_hash":"c9f0ead053f8936753da2c98e6a0254523e4b644dbd11bb5dc2ced067dcfb5b9","source":"semgrep","candidate_before_line_hash":"c9f0ead053f8936753da2c98e6a0254523e4b644dbd11bb5dc2ced067dcfb5b9","post_change_line_hash_at_previous_location":"b6d267efe80a3dbcf2f2d67e21d8c15783a2f031427f827d43b6222fe9c4bf02","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"fixed_candidate","decision":"repair_observed","at":"2026-09-17T23:54:44.996Z"},{"finding_id":"mimosa-8efd8b70127b6526d2f19675","file":"tests/fixtures/fake_llama_server.py","line":7,"rule_id":"security","severity":"high","category":"路径穿越","evidence":{"type":"static_observation","line_hash":"c9f0ead053f8936753da2c98e6a0254523e4b644dbd11bb5dc2ced067dcfb5b9","source":"semgrep","candidate_before_line_hash":"c9f0ead053f8936753da2c98e6a0254523e4b644dbd11bb5dc2ced067dcfb5b9","post_change_line_hash_at_previous_location":"b6d267efe80a3dbcf2f2d67e21d8c15783a2f031427f827d43b6222fe9c4bf02","verification":{"method":"mimosa-posttool-static-rescan","finding_absent":true,"runtime_oracle":false}},"status":"static_verified","decision":"static_rescan_passed","at":"2026-09-17T23:54:44.996Z"}],"baseline":{"storageId":"mu66h6qh-25536-3b6e82a04c","createdAt":"2026-09-17T23:45:56.825Z","files":{"router_system/knowledge.py":{"existed":true,"snapshot":"4c40d4177b63e85f2d1852dab8558984c8e41131d5967489143a85d6d68f5316.source"},"tests/test_agent_api.py":{"existed":true,"snapshot":"8ac8608e0496bc8ede2ae3e1ab033e89baf08f3c00efbb374e554b601765dac6.source"},"tests/test_model_pool.py":{"existed":true,"snapshot":"264f95f5bafeac6ecc274660dfd76f8e71cd55699eaafb889a59bfbd6e497543.source"},"tests/test_architect.py":{"existed":true,"snapshot":"0d31412198b34c4ea1ec6e4d73a21d50b77d9161e2249a81422cfa4c5bf17521.source"},"tests/fixtures/fake_llama_server.py":{"existed":true,"snapshot":"f8d1770c641cf6c9209f921bc9be7d7788bf9581931a5bb642c421c05e173ca6.source"},"tests/test_llama_server.py":{"existed":true,"snapshot":"5495baf167d4fb28e30a178cfd3d395e8179475d3301df05bdebba5d6cc67dce.source"},"scripts/bench_tokens.py":{"existed":true,"snapshot":"19d371089d7ea6b4b1d48dbbc163912f4eebce5617949e256c8c6dfad9b7dff1.source"},"scripts/setup_runtime.py":{"existed":true,"snapshot":"815c7b4276409a596f6a6f5d4c1b266817f7c685f8582d57abd8e34247752536.source"},"gateway/llama_manager.py":{"existed":true,"snapshot":"4ef83a41c9213c2def3b2c534133acb369edec6939bd77beed5102a71c2f472c.source"},"router_system/workspace.py":{"existed":true,"snapshot":"99a753c2aaef29ce1b51f8d533a5c47a0318e61edba0627789d78814893f4f1c.source"},"runtime/llama_server.py":{"existed":true,"snapshot":"6341fece0a27e38025e2ffa81e1f67685724def84569be40e4cf8238c30ff1e1.source"}},"complete":false,"candidateLimit":5000,"discoveredFiles":0,"capturedFiles":11,"truncated":false,"omittedAtLeast":0,"firstOmitted":"","errors":[{"stage":"baseline-capture","target":".","reason":"global task baseline was unavailable; captured only the touched file"}]},"stateErrors":[],"omittedReportedFindings":0,"omittedFindingEvents":0,"processing":null,"updatedAt":"2026-09-18T00:00:35.431Z"} |