61 Commits

Author SHA1 Message Date
cc
e83fcfdc4c Merge pull request #776 from Jasonzhu1207/main
feat(ai): add configurable max_tokens in shared AI settings
2026-04-17 20:23:19 +08:00
Jason
111a1961bf feat(ai): add configurable max_tokens in shared model settings 2026-04-16 23:04:09 +08:00
cc
fd4a214f9f 修复 #773 #714 2026-04-16 22:03:39 +08:00
cc
93bafbd9f7 Merge pull request #760 from Jasonzhu1207/main
feat:AI见解支持结合社交媒体平台消息以进行综合分析
2026-04-14 23:03:49 +08:00
cc
419a53d6ec 图片解密重构 #527 #522 #696;修复 #752 2026-04-14 23:02:06 +08:00
Jason
9f45c3f5eb Merge branch 'hicccc77:main' into main 2026-04-13 23:02:10 +08:00
cc
8f7ece7691 Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev 2026-04-12 23:37:29 +08:00
cc
86daa8ef06 支持自动化条件导出;优化引导页面提示;支持快速添加账号 2026-04-12 23:37:26 +08:00
Jason
1be03734a4 feat: add experimental Weibo context to AI insights 2026-04-12 20:53:10 +08:00
Jason
a734cedac1 feat: add AI insight debug log export toggle 2026-04-12 15:45:43 +08:00
xuncha
f2f78bb4e2 实现了服务号的推送以及未读 2026-04-12 08:03:12 +08:00
cc
b9af7ffc8c 一些更新 2026-04-11 19:52:40 +08:00
Jason
36bed846b2 chore: merge upstream main into fork main 2026-04-10 20:45:04 +08:00
Jason
afa8bb5fe0 fix: clean up garbled Chinese text 2026-04-10 20:13:46 +08:00
cc
22a2616534 修复密钥问题 2026-04-10 19:23:32 +08:00
Jason
d96000f0d9 Merge branch 'hicccc77:main' into main 2026-04-07 23:05:17 +08:00
cc
43fed79204 Merge pull request #653 from Jasonzhu1207/feature/ai-insight
Feature:增加AI见解功能
2026-04-07 22:21:42 +08:00
Jason
a52619c4d5 Merge pull request #9 from Jasonzhu1207/v0/jasonzhu081207-4751-0177d73e
Enable AI insights and Telegram push notifications
2026-04-06 18:13:03 +08:00
v0
cf40d3ad63 feat: optimize prompt caching and add Telegram push
Add system prompt caching, custom prompt, and Telegram push settings.

Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com>
2026-04-06 09:56:11 +00:00
Ocean
f7f6252d0b Merge branch 'main' into fix/http-api-security 2026-04-06 14:11:17 +08:00
huanghe
62395b275d fix(security): harden HTTP API service against multiple vulnerabilities
1. Path traversal in /api/v1/media/ — use path.resolve() and verify
   resolved path stays within media base directory
2. DoS via unlimited POST body — add 10MB size limit to parseBody()
3. Default no-auth — reject all requests when httpApiToken is not
   configured instead of silently allowing everything
4. Overly permissive CORS — restrict Access-Control-Allow-Origin from
   wildcard (*) to localhost/127.0.0.1 only
5. Timing attack on token comparison — use crypto.timingSafeEqual()
   instead of === for token verification
6. Unsafe default bind address — revert httpApiHost default from
   0.0.0.0 back to 127.0.0.1 to prevent network exposure

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-06 14:06:31 +08:00
Jason
b8cd9a8c38 Merge branch 'hicccc77:main' into main 2026-04-06 13:13:15 +08:00
ethan
b8bf29277a 修复与部分引用功能相关联的无法读取解密配置的问题 2026-04-05 17:48:12 -04:00
v0
89f3ec57f5 feat: add configurable AI insight settings and desktop logging
Introduce new configurable fields and log insights to desktop.

Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com>
2026-04-05 17:20:23 +00:00
v0
5971757a28 feat: add aiInsightWhitelist to settings page
Implement aiInsightWhitelist feature with UI and filtering logic.

Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com>
2026-04-05 16:42:43 +00:00
v0
93a9df48f4 feat: implement AI insights service and settings tab
Add core insight service and IPC handlers; update config and settings page.

Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com>
2026-04-05 15:32:22 +00:00
cc
a0189fdd0a 修复 #597;实现 #556;修复 #623与 #543;修复卡片图片问题 2026-04-04 23:14:54 +08:00
xuncha
758de9949b 新增开机自启动 [Enhancement]: 希望能够支持静默启动和开机自启动
Fixes #516
2026-04-03 21:08:05 +08:00
xuncha
0235ec7edc Merge branch 'dev' into dev 2026-04-03 19:49:29 +08:00
cc
54ed35ffb3 新增渠道更新 2026-04-02 22:14:46 +08:00
hejk
e4872a78f5 feat(http): change default API host to 0.0.0.0 for external access
- 修改 httpApiHost 默认值从 127.0.0.1 到 0.0.0.0
- 允许 HTTP API 服务接受外网访问
- 用户需要配置 httpApiToken 以确保安全

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-31 11:32:46 +08:00
hicccc77
83f50cbaee fix: support configurable bind host for HTTP API and fix Windows sherpa-onnx PATH
- fix(#547): HTTP API server now supports configurable bind host (default 127.0.0.1)
  Docker/N8N users can set host to 0.0.0.0 in settings to allow container access.
  Adds httpApiHost config key, UI input in settings, and passes host through
  IPC chain (preload -> main -> httpService).

- fix(#546): Add Windows PATH injection for sherpa-onnx native module
  buildTranscribeWorkerEnv() now adds the sherpa-onnx-win-x64 directory to
  PATH on Windows, fixing 'Could not find sherpa-onnx-node' errors caused
  by missing DLL search path in forked worker processes.
2026-03-25 15:10:16 +08:00
H3CoF6
77e5c44673 feat: 保存api服务的配置,实现随weflow静默启动 2026-03-24 04:11:34 +08:00
H3CoF6
619cc84d15 feat: api接口新增access_token校验 2026-03-24 03:55:37 +08:00
姜北尘
f8e99a34c7 feat: 支持自定义引用消息样式
允许用户在设置中切换引用消息与正文的上下顺序,并使聊天页中的引用回复即时按所选样式展示。
  Close#510
2026-03-21 22:26:09 +08:00
cc
c2502a09a9 优化导出速度,提供可选项优化 2026-03-20 21:43:29 +08:00
xuncha
3fabf961e5 修复html导出问题 2026-03-20 14:57:45 +08:00
cc
de7f7bc8de 计划优化 P5/5 2026-03-19 22:52:51 +08:00
cc
7c5b3f2241 计划优化 P3/5 2026-03-19 21:52:50 +08:00
xuncha
e0b2f152b0 新增了一个消息推送 2026-03-17 23:29:21 +08:00
H3CoF6
1680acb22c fix:修复一些bug 2026-03-17 04:05:50 +08:00
xuncha
f2b1b07f58 新增询问窗口 2026-03-16 17:21:59 +08:00
cc
d6b95036b5 一个简单的安卓岛 2026-03-15 11:42:41 +08:00
tisonhuang
5cb364f754 perf(export): speed up batch text export pipeline 2026-03-04 21:19:10 +08:00
xuncha
b2ef8f5cd2 修复 2026-02-28 21:18:57 +08:00
cc
b547ac1aed 重要安全更新 2026-02-25 13:25:25 +08:00
cc
411f8a8d61 修复朋友圈封面信息被错误解析的问题;解决了一些安全问题 2026-02-25 12:12:08 +08:00
cc
8e28016e5e 朋友圈图片解密的优化 2026-02-17 23:14:42 +08:00
cc
b4248d4a12 支持朋友圈图片解密;视频解密;实况渲染 2026-02-16 23:31:52 +08:00
xuncha
1930b91a5b 修复 2026-02-16 17:26:06 +08:00