开源贡献日报 · 2026-09-13

记录可验证的修复进展，也记录仍有空间参与的架构与规范讨论。

数据截止：2026-09-13T23:40:00+08:00（Asia/Singapore）。以下是当日截至该时间的记录。

公开资料覆盖：完整；The 23:00 collector completed all 13 enabled repositories and current-action checks; 24/24 focus reviews were completed. Curated design-discussion coverage remains partial.。

1 今天跟进与完成的结果

• Recover compacted turns after completion-only failure (makecindy/cindy#4371，pr) — P1 review fix submitted; CI and rereview pending；The stream now snapshots compaction state before cleanup so a failed completion remains continuation-only instead of replaying the original prompt.
• Keep closed first-line display math out of multiline parsing (CherryHQ/cherry-studio#19576，pr) — review fix submitted; CI/review pending；A signed follow-up commit returns a closed first-line fence to the canonical parser and adds LF, CRLF and trailing-space regressions.
• Add exact workspace token-usage export (multica-ai/multica#8352，pr) — Ready PR submitted; authorization hardening and one CI fixture repair pushed; replacement CI pending；The export resolves timezone-aware half-open intervals on the server, preserves workspace/private-runtime boundaries, paginates deterministically, and emits complete CLI JSON.
• Repair migrated managed image rendering (CherryHQ/cherry-studio#20477，pr) — Signed draft PR submitted; independent acceptance passed；Rendering now resolves managed image fileEntryIds to current physical paths for inline and hoisted messages while preserving external/data URLs and stale-response safety.
• Finalize streamed Markdown responses (anomalyco/opencode#48714，pr) — Ready PR submitted; checks passed; maintainer review pending；Streaming state now follows message completion and final content order.
• Preserve slash skill arguments (anomalyco/opencode#48720，pr) — Ready PR submitted; checks passed; maintainer review pending；Full and Mini transports attach the skill while carrying non-empty trailing text.
• Surface session creation schema errors (anomalyco/opencode#39775，pr) — Ready PR submitted; checks passed; maintainer review pending；Typed safe errors now cross protocol/client/TUI and keep full causes server-side.
• Reduce CLI reasoning hook amplification (cline/cline#14091，issue) — Evidence-backed implementation proposal posted; core approval pending；A 1,000-delta measurement exposed 202.8 MB of avoidable full-event hook traffic and motivated an optional pre-IPC event subscription.
• Keep Bedrock requests within model token ceilings (CherryHQ/cherry-studio#20240，pr) — review repair published; CI and automated review passed；Narrowed canonical thinking mirroring to Vertex Anthropic so Bedrock retains its own reasoning contract and wire totals remain bounded.
• Handle oversized Zhipu rerank requests (CherryHQ/cherry-studio#20483，pr) — review correction approved; current-head CI passed; awaiting other maintainer review or merge；The bounded 400/1214 split and fallback behavior was corrected and revalidated.
• Test proxy settings before saving (CherryHQ/cherry-studio#20481，pr) — review correction approved; current-head CI passed; awaiting other maintainer review or merge；The connection test now rejects late results for edited proxy settings.
• Verify background HTTP readiness (apache/maka#5237，pr) — review repair pushed; CI and maintainer review pending；The revision combines durable PID/lifecycle persistence with Host privacy admission while keeping strict loopback probes local and crediting the complementary #5261 design.
• Recognize supported knowledge files (CherryHQ/cherry-studio#20377，pr) — review correction approved; current-head CI passed; awaiting other maintainer review or merge；The recognition boundary now keeps direct selection and recursive discovery behavior distinct.
• Reconcile stopped ACP steer delivery state (LodyAI/Lody#666，issue) — validated fork comparison published; upstream PR prompt gate pending；The design preserves newer-turn ownership and makes unknown delivery a recoverable explicit state.
• Bound eventful Codex transport attempts (earendil-works/pi#9474，issue) — validated fork comparison and proposal published; maintainer LGTM pending；The Codex transport gets a non-resetting attempt deadline across SSE headers/body and WebSocket attempts while preserving abort behavior.
• Isolate local skill homes on Windows (multica-ai/multica#8338，pr) — merged；The Windows daemon tests now isolate local skill homes.
• Normalize Windows archive entry paths (multica-ai/multica#8297，pr) — merged；Windows archive entry paths are normalized for skill installation.
• Restore bottom-follow after sending (CherryHQ/cherry-studio#20490，pr) — merged；The scoped bottom-follow restoration merged after focused tests and review; it does not claim the separate random composer-focus symptom.
• Guard runtime auth expiry transitions (makecindy/cindy#4381，pr) — P2 fix validated locally but not published；Focused auth tests and typecheck pass, while the repository-mandated aggregate suite remains red on unchanged timeout-heavy tests, so the hard pre-commit gate was respected.
• List remote machine projects without a local daemon (LodyAI/Lody#582，pr) — Existing Ready PR revalidated on current main; maintainer review pending；The remote-project listing change merged cleanly with current main and passed focused tests, CLI typecheck, formatting, docs and diff checks without requiring a code update.
• Bound Apple developer runtime access for Agent Bash (apache/maka#5260，issue) — security-bounded plan and one take posted; assignment pending；The replacement explicitly avoids the withdrawn predecessor’s root-wide access and disabled Git-config semantics.

• Resolve the stopped Maka contribution (apache/maka#5182，issue) — closed upstream by another contributor；The prior user stop and untake were preserved while the final upstream closure and delivered PR links were reconciled.

• 今日合并：3。
  • fix(chat): restore bottom-follow after sending
• 今日关闭（未合并）：0。

今天合并的旧 PR

旧 PR 指今天之前创建、今天合并的 PR；已包含在今日合并总数中。

时间均为 Asia/Singapore。

2 今天吸取的经验

• Parser extensions should reject input already fully handled by the canonical grammar; otherwise later delimiters can turn prose into part of an earlier block.
  • 证据：GitHub
• Multi-tenant regression tests must control the effective workspace selector: a helper-injected header can silently override a query fixture and make a cross-workspace assertion test the wrong tenant.
  • 证据：GitHub
• Pair safe client-visible incident references with complete server-only causes for actionable failures without leaking internals.
  • 证据：GitHub
• Command identifiers and trailing prompt text are separate transport fields; regression tests should cover both argument and no-argument paths.
  • 证据：GitHub
• Async credential invalidation needs compare-and-delete plus an auth-generation check after every awaited boundary; checking identity only before the await is insufficient.
  • 证据：GitHub
• Provider adapters can assign different semantics to similarly named reasoning fields; wire-level budget tests catch errors that normalized-parameter tests miss.
  • 证据：GitHub
• Connection-test UIs should invalidate asynchronous results whenever the tested inputs change, not merely disable duplicate clicks.
  • 证据：GitHub
• A persisted recovery state must be part of the strict shared history schema; an end-to-end writer and replicated-snapshot test catches losses that local object tests miss.
  • 证据：GitHub
• Successful send acknowledgement and viewport-follow ownership are separate transitions; exercise both the dispatcher delegate and the virtualizer state change.
  • 证据：GitHub
• Mixed-version authentication flows need explicit recovery tests: a compatibility client may update a legacy token after a newer client has removed its vault entry, so safe reclaim must require current-token identity plus logout-tombstone protection.
  • 证据：GitHub
• Network health probes need policy admission and transport execution to remain separate: a loopback check can honor privacy and credential gates without routing local traffic through a remote proxy.
  • 证据：GitHub
• A hard pre-commit aggregate gate should remain authoritative even when changed-path tests pass; unrelated timeout failures must be reported precisely instead of being relabeled as a green submission.
  • 证据：GitHub
• Sandbox compatibility fixes must preserve user-visible tool semantics: broad developer roots and disabling global Git config can trade one launch error for filesystem exposure or incorrect ignore behavior.
  • 证据：GitHub

3 有意思的模块与行业动态

• Stream transaction invalidation boundaries（CherryHQ/cherry-studio）
  • 讨论问题：A proposed per-topic attempt state machine would unify invalidation, descendant deletion and quiescence, but maintainers still need to balance that aggregate against smaller reviewable changes.
  • 行业动态：From this case: durable agent streams increasingly need explicit transaction identity and quiescence contracts, not renderer-local cleanup.
  • 总结点：Validate replay and Stop/recovery together.；Treat populated-database migration as part of the design contract.
• Model-specific provider priority（makecindy/cindy）
  • 讨论问题：Model-level priority must compose predictably with global/group priority, weights and circuit-breaker fallback.
  • 行业动态：From this case: routing configuration becomes a policy hierarchy once one model can override a provider group.
  • 总结点：Define inheritance and priority direction first.；Preserve legacy behavior for unconfigured models.
• Deterministic browser-agent evaluation（browser-use/browser-use）
  • 讨论问题：The open design centers on versioned local fixtures and authoritative DOM postconditions before optional external receipts or LLM judging.
  • 行业动态：From this case: agent evaluation is moving toward deterministic system tests before subjective judging layers.
  • 总结点：Version fixture and task IDs.；Keep raw run metadata and optional observers separate.
• Snapshot/revert durability contract（anomalyco/opencode）
  • 讨论问题：Whether tool mutation epochs need pre-side-effect write-ahead durability and conflict-aware revert rather than message-only undo.
  • 行业动态：From this case: agent infrastructure increasingly needs explicit state, policy and coordinate contracts rather than UI-local or wrapper-local conventions.
  • 总结点：Per-tool mutation-owned epochs and crash-safe conflict handling versus message/turn history or message-only undo.；Specify the epoch state machine and test pre-side-effect capture, parallel tools, restart, worktree conflicts, retention and read-only tools.
• ToolNode policy hook contract（langchain-ai/langgraph）
  • 讨论问题：Whether policy enforcement needs a strict decision/receipt envelope beyond existing wraptoolcall.
  • 行业动态：From this case: agent infrastructure increasingly needs explicit state, policy and coordinate contracts rather than UI-local or wrapper-local conventions.
  • 总结点：Small wrapper API versus explicit effective/proposed call binding, fail-open modes and persistent audit receipts.；Trace sync, async, wrapper, alias and delegated-subgraph dispatch paths and design non-bypass/non-replay tests.
• Engine-opened turn origin and stream coordinates（LodyAI/Lody）
  • 讨论问题：How UI origin cues coexist with a stable history-to-stream coordinate contract.
  • 行业动态：From this case: agent infrastructure increasingly needs explicit state, policy and coordinate contracts rather than UI-local or wrapper-local conventions.
  • 总结点：In-row origin metadata preserving 1:1 coordinates versus a global history-to-stream mapping for non-message rows.；Prototype in-row cues and add mixed user/cron/task scroll and search regressions before adopting a global mapping.
• Protocol-neutral Runtime Event annotations（apache/maka）
  • 讨论问题：Whether semantic metadata belongs in the event envelope, provider-neutral content, or a separate action remains open.
  • 行业动态：From this case: cross-provider event systems need explicit semantic and provenance boundaries.
  • 总结点：Define backward compatibility before choosing the carrier.；Keep metadata provenance distinct from a security claim.
• Prepaid tool-wallet provider interface（lobehub/lobehub）
  • 讨论问题：A generic wallet/402 contract must define its Skills/MCP surface and marketplace/auth split.
  • 行业动态：From this case: tool-payment abstractions increasingly need clear authority boundaries.
  • 总结点：Specify the interface before locking a provider implementation.；Separate marketplace responsibility from authentication.
• Reconnect event-log replay RFC（multica-ai/multica）
  • 讨论问题：Post-commit additive replay versus a transactional outbox has different ordering and retention guarantees.
  • 行业动态：From this case: reconnect resilience is becoming a durable event-contract problem.
  • 总结点：Make cross-node ordering explicit.；Bound replay classes and retention.

4 今天在哪些项目做了贡献

• multica-ai/multica：Two earlier Windows portability PRs merged today (#8338 and #8297); the newer exact usage-export PR #8353 remains open with checks passed.（来源 1、来源 2、来源 3）
• anomalyco/opencode：PR #48734 turns schema-drift session creation failures into safe referenced errors across protocol, client and TUI, backed by a real SQLite regression.（来源 1）
• cline/cline：Diagnosed a CLI reasoning-stream hook amplifier and proposed backward-compatible event subscriptions before implementation.（来源 1）
• makecindy/cindy：Validated the newest runtime-auth ownership correction while preserving the repository’s hard related-unit gate when unchanged timeout-heavy tests stayed red.（来源 1、来源 2）
• CherryHQ/cherry-studio：Delivered Bedrock, rerank and proxy review corrections, and merged the focused bottom-follow restoration in PR #20491.（来源 1、来源 2、来源 3、来源 4）
• apache/maka：Strengthened PR #5248 with privacy-aware Host admission and durable PID/lifecycle coverage, and proposed a security-bounded replacement for the Apple Git sandbox defect.（来源 1、来源 2）
• LodyAI/Lody：Kept the stopped-steer recovery reference branch available and revalidated the existing remote-project listing Ready PR against current main.（来源 1、来源 2、来源 3）
• earendil-works/pi：Published a scoped Codex transport timeout reference implementation with targeted SSE/WebSocket and settings validation; an upstream PR awaits the repository LGTM gate.（来源 1、来源 2）