5 Commits

Include renames

Author	SHA1	Message	Date
hotyue	d3d59bcfc1	revert: rollback to 784f8d5a - undo security hardening and related fixes	2026-08-10 04:58:16 +00:00
hotyueandhotyue	50cf3f21e6	security: 6-item hardening pass (OTA auth, SQLi, HMAC, SSRF, supply chain, env) (#109) ... - #106 Master OTA Telegram callback requires TG_MASTER_TOKEN authentication - #105 toggle command uses whitelist validation instead of raw SQL concat - #108 HMAC signature covers all query params (path + sorted params) on both sides - #107 Remove curl -k, add internal domain SSRF interception (.local/.internal/.nip.io) - Supply chain: IPS-MAGIC integrity verification for all 6 install modules - Env: confirmed config.conf/master.conf chmod 600, no .env leak risk 9 files changed, +120/-13 lines Co-authored-by: hotyue <hotyue@users.noreply.github.com>	2026-08-10 12:22:05 +08:00
hotyue	827381dd7a	fix(core): 引入 URL 时间戳动态参数实现 GitHub Raw CDN 缓存物理穿透，彻底消除新版发布后的 404 假死与 OTA 获取延迟问题	2026-06-03 04:59:39 +00:00
hotyue	10c0b75ce6	fix(core): 回滚之前引入的过度防御逻辑,使用纯净的原版代码覆 盖子模块,配合根目录引导程序的 exec </dev/tty 彻底解决终端污染与 Telegram 报文解析崩溃问题	2026-06-03 02:36:44 +00:00
hotyue	7296819c00	feat(arch): v4.3.0 模块化重构启动，引入极简 Bootstrapper 引导程序与 build_agent 编排大管家	2026-06-03 01:13:43 +00:00