James Feng 10dfcc6710 fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74) ... 来源: upstream c2ac9a74 (dependency audit findings) 变更 (11 files): - WebFetchTool: getResponseHeader() 防大小写不一致绕过安全校验 + 新测试 - langfuse: Windows USERPROFILE + homedir() 路径脱敏支持 - REPL.tsx: hideTimeout 清理、onInit/diagnosticTracker ref 闭包修复 - claude.ts: 移除冗余 = undefined 初始化 - query.ts: 移除 biome-ignore + 变量声明简化 - staticRender.tsx: 静态渲染完善 - ansiToPng.ts/bridgeMain.ts/SSETransport.ts/WebSocketTransport.ts: 代码质量 - useGlobalKeybindings/useVoiceIntegration: 质量修复 - 测试文件: sliceAnsi/stringUtils/envExpansion 防模板字面量转义 Build: ✅ 565 files | Tests: 65/65 pass (0 new failures)		2026-06-04 15:45:01 +08:00
..
__tests__	fix: support CRLF SSE frame parsing (#223)	2026-06-04 14:55:21 +08:00
src/entrypoints/sdk	feat: 完成stub	2026-03-31 20:40:16 +08:00
ccrClient.ts	fix: resolve tsc errors (upstream type cleanup batch)	2026-06-01 18:44:46 +08:00
HybridTransport.ts	feat: 支持自托管的 remote-control-server (#214)	2026-04-09 17:40:50 +08:00
SerialBatchEventUploader.ts	feat: build	2026-03-31 19:22:47 +08:00
SSETransport.ts	fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74)	2026-06-04 15:45:01 +08:00
Transport.ts	Fix type (#1239)	2026-06-01 17:48:55 +08:00
transportUtils.ts	feat: build	2026-03-31 19:22:47 +08:00
WebSocketTransport.ts	fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74)	2026-06-04 15:45:01 +08:00
WorkerStateUploader.ts	feat: build	2026-03-31 19:22:47 +08:00