BaboBen edb420393e fix(channels): manage DingTalk interactive card config (#8517) ... * fix(channels): manage DingTalk interactive card config * test(cli): cover nested channel object validation * fix(channels): harden nested management metadata * fix(channels): isolate invalid management descriptors * fix(channels): isolate invalid management metadata from channel runtime * fix(channels): reject reserved unknown keys in management config upserts * fix(channels): harden channel management validation and editor checks Reject management descriptors that lack a fields array at registration so broken plugins are stripped to unmanageable instead of being advertised as manageable and failing every upsert with an unmapped TypeError. Reserve the top-level "type" field key and require enum fields to declare at least one option, both of which the settings store could never accept. Treat whitespace-only number drafts as empty in the channel editor, consistent with the module's other emptiness checks. Also give the SDK descriptor mirror test a runtime wire-shape walk over the built-in catalog, add the parser's timeout rejection boundary, and restore the exact built-in catalog membership assertion. * fix(channels): validate management field shapes and editor bounds (#8517) * fix(channels): align management validation layers and pin gate behavior (#8517) Read envResolvable by truthiness in the settings store so it matches the registration gate and the editor, instead of rejecting the advertised environment references of untyped plugins. Fail closed at registration on non-finite exclusiveMinimum values, empty object property lists, and async validateConfig functions, all of which would otherwise advertise a field or save path that can never succeed. Strip invalid management metadata over a prototype-preserving copy so class-instance plugins keep their createChannel implementation. Move the unchanged-value preservation exemption ahead of the object shape rejection so a stored non-record value (for example a hand-written null) no longer locks every unrelated management edit of that channel. Clamp DingTalk question-card timeouts at the maximum setTimeout delay, since Node treats larger delays as one millisecond and would expire cards instantly. Pin the previously untested load-bearing behaviors: per-key previous threading in the recursive validation, the preservation exemption's precedence over nested required enforcement, nested "type" properties, depth-2 nesting rules, and the nested-only constraints of the daemon descriptor wire contract. * fix(channels): close reserved-key preservation gaps and pin gate behavior (#8517) * test(cli): tolerate IPv6-less hosts in serve ::1 bind tests (#8517) The self-hosted CI containers can have no IPv6 loopback, where the two runQwenServe tests that bind ::1 fail with EADDRNOTAVAIL. Probe the interfaces once and skip only the IPv6-dependent binds there; every assertion still runs on IPv6-capable hosts. * fix(channels): align descriptor type contracts with runtime validation (#8517) The registry already rejects object fields without a non-empty properties array and enums without unique options, but the descriptor types still admitted both, so TS-authored plugins only learned about it when registration stripped their management surface. Make `properties` required, give enums a dedicated descriptor member with required `options`, and drop the never-honored `envResolvable` flag from number descriptors, in both channel-base and the SDK mirror, and export the descriptor sub-types through the webui barrels. Also map a throwing `validateConfig` to the usual invalid-config error and pin the store contracts that had no distinguishing tests: omitting a parent object drops the stored object without checking its nested required, writes replace nested values wholesale, unchanged stored scalars are still re-validated, and valid plugins register by original reference. * fix(channels): defuse validateConfig rejection leak and close descriptor gate gaps (#8517) Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com> --------- Co-authored-by: qwen-code-dev-bot <qwen-code-dev-bot@users.noreply.github.com> Co-authored-by: qwen-code-dev-bot <qwen-code-dev@service.alibaba.com> Co-authored-by: Shaojin Wen <shaojin.wensj@alibaba-inc.com> Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>		2026-08-07 15:47:20 +00:00
..
daemon	fix(serve): Allow approved same-host text reads outside workspace (#8620)	2026-08-07 07:33:16 +00:00
daemon-client-adapters	docs(serve): Close multi-workspace hardening gaps (#7019)	2026-07-16 17:33:53 +00:00
daemon-ui	feat(web-shell): Add sidebar customization API for branding, navigation, session actions, and footer (#7379)	2026-07-21 11:20:51 +00:00
development	feat(telemetry): Track tool execution outcomes (#8180)	2026-08-03 10:21:44 +00:00
examples	docs(serve): Close multi-workspace hardening gaps (#7019)	2026-07-16 17:33:53 +00:00
tools	fix(core): Avoid replaying unsafe MCP tool calls (#8387)	2026-08-03 11:04:38 +00:00
_meta.ts	docs(daemon): Refresh daemon docs in English (#5144)	2026-06-15 22:38:01 +08:00
architecture.md	docs: refresh architecture overview (#8325)	2026-08-02 02:45:00 +00:00
channel-plugins.md	docs(channels): Document loops and proactive delivery (#7628)	2026-07-26 07:32:18 +00:00
contributing.md	revert: remove local PR verification gate (#7031)	2026-07-16 11:24:38 +00:00
qwen-serve-protocol.md	fix(channels): manage DingTalk interactive card config (#8517)	2026-08-07 15:47:20 +00:00
roadmap.md	docs: standardize GitHub Actions capitalization (#6367)	2026-07-06 06:55:07 +00:00
sdk-java.md	feat(sdk-java): Add daemon transport (#7463)	2026-07-23 12:38:34 +00:00
sdk-python.md	doc[sdk-python] Expand Python SDK usage documentation (#3995)	2026-05-12 15:27:00 +08:00
sdk-typescript.md	feat(web-shell): show subagent sessions in detail panel (#7380)	2026-07-22 02:31:08 +00:00