release: 将 beta 提升到 main（v1.3.0，118 提交 / 886 文件） - #69
Open
Last-emo-boy wants to merge 126 commits into
Open
Conversation
将默认 AI-facing workflow 收敛到 workflow.search、workflow.run、artifact.read。新增 profile search gateway 和 workflow execution gateway，保留底层工具为 compatibility/specialist surface，并同步文档与回归测试。
Merge PR #64 into beta.
* fix: 修复 gateway 子工具调用和上传地址 * chore: 更新 gateway 上传修复记录
…format fix: 修复 MCP gateway 描述和非 PE 重建报告
…nment fix: 修复 VM 分析入口并统一版本号
- workflow.search: 新增可选 verbose，默认压缩重复的 formats 大数组为 format_count - report.generate: 非 PE 不再误标 pe_image，修 undefinedms，新增多格式证据段 - crackme 工具(symbolic/keygen/patch): approved/approval_token 透传到 PolicyGuard - reconstruct: 组装导出前重查持久化快照，使用晚到的 ghidra 函数索引 - dex.classes.list: 先解包 APK(ZIP) 再解析，修复返回 0 类 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- search_profile: 去掉与顶层重复的 quota_decisions，available_tools 等大列表转 *_count - recommendations: 与 results 完全重复，默认仅保留轻量索引（result_id/rank/score 等） - results 保持全量（score_breakdown/matched_profile_fields 等不变）；verbose=true 仍返回全量 - 全部 31 个 workflow-search 单测通过 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- binary-role-profile: inferBinaryRole 对非 PE 样本（ELF/Mach-O/wasm/dex） 按检测到的文件类型分类，不再统一兜底为 pe_image（fix2 上游根因， report 层 resolveDisplayBinaryRole 保留为防御性兜底）。 - code-functions-reconstruct: degraded 分支区分"ghidra 从未运行"与 "function_index 已完成但未导入"，后者给出 workflow.function_index_recover 的正确修复指引并标记 function_index_not_imported，而非误导性的重跑 ghidra （fix4 全闭环，配合 reconstruct workflow 的迟到产物再查询）。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
fix: 静态分析体验优化（搜索瘦身/报告格式/审批参数/重建竞争/dex列类 + 2 项上游根因）
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| } | ||
|
|
||
| if (mode === 'leak') { | ||
| console.error(`token=${process.env.RIKUNE_TEST_SECRET_VALUE || 'missing'}`) |
This was referenced Jun 29, 2026
Owner
Author
- actions/checkout v4 -> v7 - softprops/action-gh-release v2 -> v3 - docker/setup-qemu-action v3 -> v4 - docker/login-action v3 -> v4 - actions/attest-build-provenance v1 -> v4 对应 dependabot PR #42/#28/#27/#25/#26。checkout/qemu/login/attest 由 ci.yml+ docker-build.yml 在 PR 上验证；gh-release 仅发版打 tag 时触发。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This was referenced Jun 29, 2026
fix1 压缩 workflow.search 响应时遗留 7 处 prettier/prettier 错误， 导致 ci.yml lint 步骤（npm run lint）在 beta/#69 上失败。eslint --fix 自动修复，全仓 lint 现 0 错误。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
概述
将整条
beta开发线提升到main，版本号 bump 到 1.3.0。本分支自beta拉出并已合入origin/main（含其 8 个独有提交），因此对main是无冲突可合并的。tsc --noEmit：0 错误。版本号
main原为 1.2.0，beta为 1.1.0 → 本 PR 统一定为 1.3.0（package.json 与 package-lock.json 根版本号已同步）。三方合并以
beta的状态为准，以下 3 个 dev 依赖回退到 beta 的版本（即 main 上的 dependabot 升级被覆盖）：均为 dev-only 的 patch/minor 级别；合并后 dependabot 会自动重新发起升级 PR。如需保留升级版本，可在合并前在本分支上 bump 这三项后重生成 lock。
主要内容（beta 侧高层）
包含近期全部静态分析能力迭代，最近一批为 PR #68（搜索瘦身 / 报告格式 / 审批参数 / 重建竞争 / dex 列类 + binary.role 非 PE 误标与 reconstruct 降级误导两项上游根因）。完整提交见 commits 列表。
🤖 Generated with Claude Code