qing 457bb900fb fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout ...

第五轮审计（J1~J16）全量修复 + 子代理 max_turns 钳制：
- 子代理 max_turns 钳制（0/None 回退默认 10，负数钳制 1）+ 14 项回归测试
- J1 任务系统投毒：add_memo 入库校验（时间/间隔/类型）、调度器预检与触发事务
  防御、展示路径兜底、register 移入 try、add_user_task 补 repeat_end_time 透传
- J2/J13 前端 XSS：三页面 marked 输出经 DOMPurify 净化、entry1 系统消息/任务
  分隔条改 textContent、CDN 脚本补 SRI
- J3 FTS 删除换序（先 fts 后内容表，索引不再残留）
- J5 原子写推广：新增 common/atomic.py（mkstemp+fsync+os.replace），config/prompt/
  history 全部接入；损坏配置备份后回退
- J6 单例初始化加锁（PromptManager/ConfigManager 并发首例不双重加载）
- J7 broadcast 并发发送 + wait_for 超时回收僵死连接
- J4/J8/J9~J12/J14~J16：验证异常脱敏、交互输入容错、MemoDatabase WAL+busy_timeout、
  memo 批量删除、/new 竞态、skills 引号转义、voice_client 清理、死代码移除、
  skill_manager 同名键/help 截断

2026-08-19 07:01:13 +08:00

..

__init__.py

refactor(aibox): 抽离工具类与子系统，附单测基线

2026-08-13 15:48:55 +08:00

_poc_audit_regression.py

fix(aibox): close audit findings H1-H3/M1-M2 (command exec protection chain)

2026-08-17 17:28:41 +08:00

conftest.py

feat(aibox): batch D multi-model profiles + docs

2026-08-17 16:58:33 +08:00

test_b_tools.py

feat(aibox): verify SOCKS5 connectivity before saving proxy config

2026-08-18 07:44:17 +08:00

test_basic_tools.py

docs(aibox): 同步v3.0模块化文档，修复测试路径漂移

2026-08-13 16:26:41 +08:00

test_config.py

fix(aibox): never persist SOCKS5 proxy password to disk (F1/N1, +N11)

2026-08-17 22:37:30 +08:00

test_conversation_compressor.py

fix(aibox): FTS5 中文检索 + Token 压缩阈值生效——Compressor 抽离解耦

2026-08-15 09:51:59 +08:00

test_conversation_history.py

refactor(aibox): 抽离ConversationHistory至subsystems(Wave2阶段1)

2026-08-13 16:54:32 +08:00

test_db.py

fix(aibox): FTS5 中文检索 + Token 压缩阈值生效——Compressor 抽离解耦

2026-08-15 09:51:59 +08:00

test_executors.py

refactor(aibox): 抽离工具类与子系统，附单测基线

2026-08-13 15:48:55 +08:00

test_f2_fixes.py

fix(aibox): registry timeout cleanup + reader thread finalization (F2/N6+N4)

2026-08-17 22:47:37 +08:00

test_g_fixes.py

fix(aibox): batch G audit fixes - llm hardening, thread lifecycle, cancel propagation, db transactions

2026-08-18 07:21:29 +08:00

test_h_fixes.py

fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout

2026-08-19 07:01:13 +08:00

test_i_fixes.py

fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout

2026-08-19 07:01:13 +08:00

test_k_fixes.py

fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout

2026-08-19 07:01:13 +08:00

test_model_config.py

fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout

2026-08-19 07:01:13 +08:00

test_models_profile.py

feat(aibox): failover observability, timeout budget and Retry-After (L4c)

2026-08-18 00:52:39 +08:00

test_once_mode.py

feat(aibox): batch C once mode hardening

2026-08-17 16:32:22 +08:00

test_prompt_manager.py

refactor(aibox): 抽离工具类与子系统，附单测基线

2026-08-13 15:48:55 +08:00

test_skill_manager.py

refactor(aibox): 抽离工具类与子系统，附单测基线

2026-08-13 15:48:55 +08:00

test_subagent_max_turns.py

fix(aibox): round-5 audit batch K - max_turns clamp, task input validation, XSS hardening, atomic writes, broadcast timeout

2026-08-19 07:01:13 +08:00