OoO
|
153e4c9734
|
fix(observability): revert unrelated quick review commit files
CD Pipeline / deploy (push) Successful in 58s
|
2026-05-06 19:50:52 +08:00 |
|
OoO
|
308efdce25
|
chore(observability): clarify quick review completion copy
CD Pipeline / deploy (push) Successful in 1m4s
|
2026-05-06 19:49:28 +08:00 |
|
OoO
|
4c6e4ca5fb
|
style(ppt): align PPT palette perfectly with MOMO Pro v2 design tokens (Beige, Warm Ink, Caramel Orange) as per frontend upgrade roadmap
|
2026-05-02 15:01:55 +08:00 |
|
OoO
|
136e65b400
|
chore(hooks): momo-db 守門 9 PoC 強化（vuln-verifier 補丁）
CD Pipeline / deploy (push) Successful in 1m8s
回應 vuln-verifier 對前版規則 3e 的 8/9 PoC 繞過警告。
新增/強化擋點：
- psql -f / heredoc / 重定向：hook 看不到 SQL 內容 → 一律擋
- multi-statement: ; 後接內容（去 -- 與 /* */ 註解後判斷）→ 擋
- writable CTE: WITH ... DELETE/INSERT/UPDATE → 擋
- /run/secrets, /proc/*/environ → 擋
- pg_read_file / pg_read_binary_file / lo_export / lo_import → 擋
- COPY ... FROM PROGRAM → 擋
- VACUUM FULL / REINDEX / REFRESH MATERIALIZED / CLUSTER 加入寫入黑名單
- env 加 (?!\\s+\\w+=) lookahead，避免誤殺 env VAR=value
- alias/function 包裝 docker exec：警告（無法靜態判斷後續呼叫）
- 白名單 prefix 不收 WITH（防 writable CTE 漏網），改收 SELECT/EXPLAIN/SHOW/VALUES/TABLE
settings.json: 累積本輪 session 的 read-only 工具放行（py_compile、python3）。
|
2026-04-29 09:12:26 +08:00 |
|
ogt
|
fcac03379d
|
[V10.4-A] 加強 commit-quality Hook + P9 文件歸檔
新增 Edit/Write/MultiEdit 事件攔截（原僅攔截 git commit Bash 指令），
補齊 getenv fallback 模式偵測，防止 hardcoded Token 透過工具直寫入檔案。
- .claude/hooks/commit-quality.js: 改寫為 PreToolUse JSON 格式，覆蓋 Edit/Write/MultiEdit
- .claude/settings.json: 新增 Edit|Write|MultiEdit|Bash matcher 註冊
- .claude/hooks/__test__/commit-quality.test.sh: 4 case 自動化測試
- docs/guides/DISK_EXPANSION_GUIDE.md: 磁碟擴充 SOP 歸檔
- docs/p9_completion_report_*.md: P9-1 + P9-2 Sprint 完成報告
- docs/refactor/callback_prefix_proposal.md: 308 按鈕回呼前綴分析（Method C）
- docs/refactor/openclaw_bot_routes_split_plan.md: 5999 行神檔拆分計畫
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-25 01:42:40 +08:00 |
|
ogt
|
61a9c4c1e3
|
fix(hooks): 移除重複的 commit-quality.js 呼叫
全域 ~/.claude/hooks/commit-quality.js 已透過 secrets.local.json
涵蓋 Telegram/Gemini/Gitea pattern，momo project 設定不需再執行一次
避免每次 commit 重複告警兩次
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-21 23:46:21 +08:00 |
|
ogt
|
0c9a3cd875
|
fix(settings): 修正 Claude Code hook 格式為正確 schema
- bypassPermissions -> permissions.defaultMode: "bypassPermissions"
- 移除無效的 thinking/effort 欄位
- Hook 改用 {matcher, hooks: [{type, command}]} 物件格式
- 新增 branch-protection.local.json: momo main 分支可直接 commit
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-21 23:09:00 +08:00 |
|
ogt
|
cac7303e46
|
feat(devteam): 引進 my-claude-devteam 架構 V11.0
- CLAUDE.md 升版至 V11.0：整合 P7/P9/P10 工作模式、12 人專家團隊、
委派鐵律、三條紅線（保留狙擊手模式精神）
- .claude/hooks/：新增 8 個 Hook（momo-prod-guard / commit-quality /
large-file-warner / mcp-health / audit-log / suggest-compact /
cost-tracker / session-summary）
- .claude/agents/：新增 11 個 Agent 定義（critic / debugger / db-expert /
vuln-verifier / fullstack-engineer / planner / refactor-specialist /
migration-engineer / onboarder / tool-expert / web-researcher）
- .claude/settings.json：啟用 bypassPermissions + Hook 自動政策架構
- .gitignore：加入 settings.local.json 防止 Secret 意外 commit
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-21 22:13:57 +08:00 |
|
ogt
|
1b4f3a7bbe
|
feat: EwoooC 初始化 — 完整專案推版至 Gitea
CD Pipeline / deploy (push) Failing after 59s
- 建立 Gitea Actions CD pipeline (.gitea/workflows/cd.yaml)
- 部署模式: rsync Python 檔案至 188 → docker restart (volume mount)
- Dockerfile/requirements 變動時自動重建 Docker image
- 部署通知: Telegram (開始/成功/失敗)
- 健康檢查: https://mo.wooo.work/health (最多 5 次重試)
- 同步最新 CLAUDE.md / ADR-008 / memory (2026-04-19)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-19 01:21:13 +08:00 |
|