panda 93ad5e8876 fix: address audit findings — session_id validation, streaming reset, state isolation ...

- Replace truncated 12-char UUID with full 32-char UUID (128-bit entropy)
- Add validate_session_id() regex check to prevent path traversal
- Add _check_session_id() guard on all 6 API endpoints
- Change _step_counter from module global to contextvars.ContextVar
- Filter None values from node_state before merging into agent_state
- Log save_session failures instead of silently swallowing them
- Add finishStreaming() in catch/finally blocks to prevent UI lockup
- Fix broken multiline docstring in chat() endpoint

2026-05-23 09:08:53 +08:00

..

__init__.py

feat: Streamlit多轮对话界面 + 集成测试

2026-05-14 23:21:22 +08:00

test_agent.py

test: add unit/integration/E2E test suites, fix create_session bug, update docs

2026-05-23 08:38:29 +08:00

test_annotation_detector.py

feat: v4 multimodal chat input, multi-format support, and annotation detection

2026-05-20 23:43:16 +08:00

test_api_integration.py

fix: address audit findings — session_id validation, streaming reset, state isolation

2026-05-23 09:08:53 +08:00

test_e2e_ocr.py

fix: logging KeyError with reserved 'filename' key, pytest return-not-none warnings

2026-05-21 22:28:07 +08:00

test_error_kb.py

test: add unit/integration/E2E test suites, fix create_session bug, update docs

2026-05-23 08:38:29 +08:00

test_file_parser_formats.py

feat: v4 multimodal chat input, multi-format support, and annotation detection

2026-05-20 23:43:16 +08:00

test_layered_generation.py

feat: layered precise generation for A4 report images

2026-05-21 08:34:32 +08:00

test_ocr_extraction.py

feat: 新增 OCR 单据字段精确提取模块

2026-05-20 08:06:55 +08:00

test_session.py

fix: address audit findings — session_id validation, streaming reset, state isolation

2026-05-23 09:08:53 +08:00

test_validation.py

feat: Streamlit多轮对话界面 + 集成测试

2026-05-14 23:21:22 +08:00