diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/audit-2026-06-18_chatstudio-overlay.md | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/docs/audit-2026-06-18_chatstudio-overlay.md b/docs/audit-2026-06-18_chatstudio-overlay.md index 8134caf..fa3805c 100644 --- a/docs/audit-2026-06-18_chatstudio-overlay.md +++ b/docs/audit-2026-06-18_chatstudio-overlay.md @@ -23,18 +23,18 @@ Files reviewed: module-chatstudio.js (1,064 lines), chat-commands.js (276 lines) | 9 | `_csGlobalsInited` stuck true after init failure — placeholder stubs remain active on retry | module-chatstudio.js:94 vs 1054 | Retry silently does nothing | | 10 | `generateModuleWithAI` uses deprecated global `event` | chat-modules.js:276 | Fails in strict mode | -## P2 — UX & Architecture (8 issues) — NOT YET FIXED - -| # | Issue | File:Line | Notes | -|---|-------|-----------|-------| -| 11 | API key in base64 localStorage — not encryption, trivially decodable | module-chatstudio.js:419 | Should use secret-vault.js | -| 12 | Inconsistent storage encoding — messages plain JSON, logs/settings base64 | module-chatstudio.js:505 | Should be consistent | -| 13 | Chat history no max size — long conversations overflow localStorage | module-chatstudio.js:502-508 | Cap at N messages | -| 14 | Static `?v=5` cache-busting — doesn't use NEWOS4_VERSION | module-chatstudio.js:10489,10550 | Manual version bump needed | -| 15 | `buildChatContext` naive HTML strip — regex-based, easily fooled | module-chatstudio.js:888 | Use DOMParser | -| 16 | User messages get no markdown formatting — asymmetric UX | module-chatstudio.js:548 | Apply formatContent to user msgs too | -| 17 | Activity log hardcoded 50 limit | module-chatstudio.js:325 | Not configurable | -| 18 | `CHATSTUDIO_VERSION` not synced to `NEWOS4_VERSION` | module-chatstudio.js:231 | Stale version info | +## P2 — UX & Architecture (8 issues) — ALL FIXED in v4.5.74 + +| # | Issue | File:Line | Status | +|---|-------|-----------|--------| +| 11 | API key in base64 localStorage | module-chatstudio.js:419 | ✅ Fixed — API key no longer persisted, in-memory only | +| 12 | Inconsistent storage encoding | module-chatstudio.js:505 | ✅ Fixed — logs/settings now plain JSON, backward-compat base64 fallback | +| 13 | Chat history no max size | module-chatstudio.js:502-508 | ✅ Fixed — capped at MAX_MESSAGES=100 | +| 14 | Static `?v=5` cache-busting | module-chatstudio.js | ✅ Fixed — uses NEWOS4_VERSION | +| 15 | `buildChatContext` naive HTML strip | module-chatstudio.js:888 | ✅ Fixed — DOMParser with regex fallback | +| 16 | User messages get no markdown | module-chatstudio.js:548 | ✅ Fixed — formatContent applied to user msgs too | +| 17 | Activity log hardcoded 50 limit | module-chatstudio.js:325 | ✅ Fixed — MAX_LOGS=200, configurable | +| 18 | `CHATSTUDIO_VERSION` not synced | module-chatstudio.js:231 | ✅ Fixed — uses window.NEWOS4_VERSION | ## Tool-Use Optimization — Applied in v4.5.70 |