James Feng 10dfcc6710 fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74) ... 来源: upstream c2ac9a74 (dependency audit findings) 变更 (11 files): - WebFetchTool: getResponseHeader() 防大小写不一致绕过安全校验 + 新测试 - langfuse: Windows USERPROFILE + homedir() 路径脱敏支持 - REPL.tsx: hideTimeout 清理、onInit/diagnosticTracker ref 闭包修复 - claude.ts: 移除冗余 = undefined 初始化 - query.ts: 移除 biome-ignore + 变量声明简化 - staticRender.tsx: 静态渲染完善 - ansiToPng.ts/bridgeMain.ts/SSETransport.ts/WebSocketTransport.ts: 代码质量 - useGlobalKeybindings/useVoiceIntegration: 质量修复 - 测试文件: sliceAnsi/stringUtils/envExpansion 防模板字面量转义 Build: ✅ 565 files | Tests: 65/65 pass (0 new failures)		2026-06-04 15:45:01 +08:00
..
bg	Enable auto mode autonomy commands	2026-06-01 20:17:09 +08:00
handlers	fix(security): Phase 4 — fix remaining reachable CodeQL alerts	2026-06-03 19:51:17 +08:00
src	feat: 完成stub	2026-03-31 20:40:16 +08:00
transports	fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74)	2026-06-04 15:45:01 +08:00
bg.ts	Enable auto mode autonomy commands	2026-06-01 20:17:09 +08:00
exit.ts	Phase 1: security do-now — redaction helpers + RCS defaults hardened	2026-06-03 13:43:38 +08:00
ndjsonSafeStringify.ts	feat: build	2026-03-31 19:22:47 +08:00
print.ts	Phase 2a: mechanical dedup — import rewrite to canonical package	2026-06-03 13:54:22 +08:00
remoteIO.ts	feat: build	2026-03-31 19:22:47 +08:00
rollback.ts	feat: 大规模清理 claude 的类型问题及依赖	2026-03-31 22:21:35 +08:00
structuredIO.ts	fix: resolve tsc errors (provider and print refinements)	2026-06-01 18:47:27 +08:00
up.ts	feat: 大规模清理 claude 的类型问题及依赖	2026-03-31 22:21:35 +08:00
update.ts	feat: build	2026-03-31 19:22:47 +08:00