feat: expand companion platform, device controls, and memoir workflows

Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
2026-10-08 10:06:44 +08:00
parent 98fb2965d0
commit bf1233d5df
861 changed files with 94614 additions and 3209 deletions
@@ -0,0 +1,19 @@
+// Contract G02 requires source-level protection even with verbose logging enabled.
+const {test}=require('node:test');
+const assert=require('node:assert/strict');
+const fs=require('node:fs');
+const path=require('node:path');
+const root=path.resolve(__dirname,'../components/volc_conv_ai/src');
+function sources(dir){return fs.readdirSync(dir,{withFileTypes:true}).flatMap(x=>x.isDirectory()?sources(path.join(dir,x.name)):x.name.endsWith('.c')?[path.join(dir,x.name)]:[]);}
+test('vendor SDK does not log credential, transcript, config, or HTTP payload buffers',()=>{
+ const unsafe=[];
+ for(const file of sources(root)){
+  const code=fs.readFileSync(file,'utf8').replace(/^\s*\/\/[^\n]*/gm,'');
+  for(const match of code.matchAll(/\bLOG[VDEIWF]\s*\(([^;]+)\);/g)){
+   // Match arguments separately: diagnostic words in a constant message are safe.
+   const args=match[1].replace(/"(?:\\.|[^"\\])*"/g,'');
+   if(/(?<!\.)\b(?:secret|params|param_str|post_data|json_str|json|buffer|token|response|data|extencontent|error_reason|message|decoded_payload|output)\b|->p_token\b/.test(args)&&/%(?:\.\*|\d*)s/.test(match[1]))unsafe.push(path.relative(root,file)+': '+match[0]);
+  }
+ }
+ assert.deepEqual(unsafe,[],'private buffers must not be passed to SDK log macros');
+});