5 Commits

Author	SHA1	Message	Date
hotyue	d3d59bcfc1	revert: rollback to 784f8d5a - undo security hardening and related fixes	2026-08-10 04:58:16 +00:00
hotyue	50cf3f21e6	security: 6-item hardening pass (OTA auth, SQLi, HMAC, SSRF, supply chain, env) (#109) ... - #106 Master OTA Telegram callback requires TG_MASTER_TOKEN authentication - #105 toggle command uses whitelist validation instead of raw SQL concat - #108 HMAC signature covers all query params (path + sorted params) on both sides - #107 Remove curl -k, add internal domain SSRF interception (.local/.internal/.nip.io) - Supply chain: IPS-MAGIC integrity verification for all 6 install modules - Env: confirmed config.conf/master.conf chmod 600, no .env leak risk 9 files changed, +120/-13 lines Co-authored-by: hotyue <hotyue@users.noreply.github.com>	2026-08-10 12:22:05 +08:00
hotyue	d22cb98ab8	fix(core): 修复节点别名(NODE_ALIAS)的中文乱码截断。在网络组装模块引入 UTF-8 环境判定并改用 Bash 原生字符切片，杜绝 POSIX 环境下的字节误切 (#87)	2026-06-04 06:28:09 +00:00
hotyue	40a41cc9ea	fix(core): 回滚之前引入的过度防御逻辑，使用纯净的原版代码覆盖子模块，配合根目录引导程序的 exec </dev/tty 彻底解决终端污染与 Telegram 报文解析崩溃问题	2026-06-03 02:30:47 +00:00
hotyue	34d7f63e46	feat(arch): 完成 Agent 端安装逻辑的彻底解耦。将原 1000 行单体脚本无损拆解为 UI、环境清理与网络探测等 4 大专属模块，严格保留原有时序判定树	2026-06-03 01:22:31 +00:00