9 Commits

Author	SHA1	Message	Date
ogt	903cf1a27a	fix: align deploy health checks with live endpoint	2026-06-25 14:45:02 +08:00
OoO	32b7071ab6	V10.614 部署監控頁繁中化	2026-06-16 10:03:18 +08:00
OoO	710f7216d0	Silence disabled GitLab CI monitor	2026-05-24 18:12:58 +08:00
OoO	87a83aed64	統一系統工具頁新版殼層	2026-05-14 18:02:03 +08:00
OoO	bd6310365e	停用 CICD 舊叢集副作用	2026-05-13 19:19:15 +08:00
OoO	84786be06f	refactor(telegram): migrate cicd_routes sender to EventRouter (ADR-019 Phase 5) ... routes/cicd_routes.py 的 send_telegram_message() 用於 CI/CD pipeline 失敗 / Drone build 異常等告警。原本直接 POST sendMessage，改走 services.event_router. dispatch_sync()（event_type=cicd_pipeline_alert, severity=alert）。 行為變化： - parse_mode 從 Markdown 改 HTML（EventRouter 統一）；既有訊息中的 *bold* 等 Markdown 控制字元會以純文字顯示，可讀性不受顯著影響 - 失敗保留 print + return False 同舊行為，不阻斷 caller（send_pipeline_failure_alert 等）的 try/except 結構 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-02 13:09:34 +08:00
ogt	d5c0feab5e	fix: Telegram bot 全功能修復 — 16個await按鈕/AI對話/模型遷移/DB schema ... ## Telegram Bot 功能修復 - 補全 16 個 await: 按鈕的 handler（日期選擇/目標設定/促銷追蹤等）， 新增 _handle_await_callback + _process_await_input 完整狀態機 - cmd: 按鈕加入 ⏳ 即時回饋 + try/except 防 BadRequest - handle_callback 加頂層 try/except 錯誤兜底 - 補 momo:cmd:suggestion + momo:menu:main callback handler - 修復 _enhanced_keyword_matching context NameError ## AI 模型遷移（hermes3@111 → qwen2.5@188） - hermes_analyst_service: URL 192.168.0.111→188, hermes3→qwen2.5:7b-instruct - code_review_pipeline: 改用 HERMES_URL/HERMES_MODEL 常數 - elephant_alpha_orchestrator / nemoton_dispatcher: registry/footprint 同步 - aider_heal_executor: OLLAMA_API_BASE fallback 改 188 - ai_routes: footprint display 字串改 qwen2.5:7b-instruct ## ElephantAlpha 404 修復 - elephant_service: openrouter→NVIDIA NIM, nvidia/llama-3.1-nemotron-ultra-253b-v1 - ai_provider: 模型 ID 同步更新 ## TELEGRAM_CHAT_ID 環境變數修正 - cicd_routes + aider_heal_executor: 優先讀 TELEGRAM_CHAT_IDS[0]， fallback TELEGRAM_CHAT_ID，修復通知靜默失敗 ## AI 對話 logging 改善 - telegram_ai_integration: Hermes 降級改 WARNING，OpenClaw 失敗加 exc_info - hermes_analyst_service: 連線失敗 log 加 host/model context ## DB Schema 修復 - migrations/019: action_plans 補齊全欄位，DROP NOT NULL action_type - autoheal_models: ActionPlan ORM 同步為超集 schema Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-25 03:30:14 +08:00
ogt	1c03d213ac	security: fix shell injection + hardcoded credentials in cicd_routes.py ... CVE-class issues fixed: 1. [HIGH] Shell Injection in gitlab_api_via_ssh (CWE-78) endpoint and json_data were interpolated into f-string cmd and passed as a single SSH remote command string → shell parses it → injection. Fix: build remote_argv as list; each curl argument is a separate item, SSH receives them as independent argv (no shell parsing of user data). 2. [HIGH] Hardcoded credentials in source code (CWE-798) GITLAB_TOKEN, TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID all had live secrets as default fallback values. Tokens are now '' (empty) with a startup warning if env vars are missing. 3. [MEDIUM] Missing pre-validation allowlist on fix_action (CWE-20) ALLOWED_FIX_ACTIONS frozenset added before route handler; any unknown action is rejected with 400 before reaching execution logic. Note: fix_registry/fix_pods/execute_*_rollback use static SSH commands (no user input in cmd strings) so they are not injection risks. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-20 05:44:18 +08:00
ogt	1b4f3a7bbe	feat: EwoooC 初始化 — 完整專案推版至 Gitea ... - 建立 Gitea Actions CD pipeline (.gitea/workflows/cd.yaml) - 部署模式: rsync Python 檔案至 188 → docker restart (volume mount) - Dockerfile/requirements 變動時自動重建 Docker image - 部署通知: Telegram (開始/成功/失敗) - 健康檢查: https://mo.wooo.work/health (最多 5 次重試) - 同步最新 CLAUDE.md / ADR-008 / memory (2026-04-19) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-19 01:21:13 +08:00