SnapOtter fc718c1684 fix(jobs): strip internal paths from all worker SSE error frames ...

Closes #71. Several error paths in the worker could leak internal
filesystem paths (/tmp/workspace, /data/ai/venv, /app) through SSE
frames, resultPayload objects, and Redis batch-error lists. The
existing stripInternalPaths call at worker.ts line 345 only covered
the single-file processToolJob catch block.

Wrapped 6 additional call sites:
- processPipelineStep: prevError from DB and catch errorMsg
- processPipelineFinalize: composed errorMsg reaching SSE,
  recordChildOutcome, and resultPayload
- processBatchChild: catch error reaching recordChildOutcome
  and resultPayload
- processBatchFinalize: manifest errorMsg from DB rows
- recordChildOutcome (batch-progress.ts): defense-in-depth
  strip before Redis rpush

Added 10 unit tests for stripInternalPaths covering /tmp, /data,
/app, /opt, /home, /workspace, multi-path messages, safe passthrough,
and pipeline-step wrapping.

2026-06-13 10:36:01 +08:00

..

api

fix(jobs): strip internal paths from all worker SSE error frames

2026-06-13 10:36:01 +08:00

demo

chore(deps-dev): bump dev-deps group + fix vitest 3.2.6 mock resolution (#197)

2026-06-04 22:22:40 +08:00

docs

fix(docs): read version from root package.json for nav badge

2026-06-08 17:56:18 +08:00

landing

fix(landing): slow hero message rotation from 3s to 5s

2026-06-08 13:27:08 +08:00

web

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00