auto-sync-0445

2026-04-22 04:45:03 +02:00
parent 3ec53dd4e1
commit 855c28d9b9
13 changed files with 73 additions and 17 deletions
--- a/api/agent-leads-sync.json
+++ b/api/agent-leads-sync.json
@@ -1,6 +1,6 @@
 {
  "agent": "V45_Leads_Sync",
-  "ts": "2026-04-22T04:30:04+02:00",
+  "ts": "2026-04-22T04:40:02+02:00",
  "paperclip_total": 48,
  "active_customer": 4,
  "warm_prospect": 5,
--- a/api/ambre-pw-tests/output/.playwright-artifacts-0/page@88941be8f9124649cc8c90a15b26639c.webm
+++ b/api/ambre-pw-tests/output/.playwright-artifacts-0/page@88941be8f9124649cc8c90a15b26639c.webm
--- a/api/ambre-pw-tests/output/.playwright-artifacts-0/page@e180a2990267bb363bc3cce238f28946.webm
+++ b/api/ambre-pw-tests/output/.playwright-artifacts-0/page@e180a2990267bb363bc3cce238f28946.webm
--- a/api/ambre-pw-tests/output/v45-00-start.png
+++ b/api/ambre-pw-tests/output/v45-00-start.png
--- a/api/ambre-pw-tests/output/v45-01-hi.png
+++ b/api/ambre-pw-tests/output/v45-01-hi.png
--- a/api/ambre-v0-exclude.php
+++ b/api/ambre-v0-exclude.php
@@ -0,0 +1,31 @@
+<?php
+header("Content-Type: application/json");
+$path = "/var/www/html/wevia.html";
+
+// Unlock first
+$attr = trim(shell_exec("lsattr $path 2>&1"));
+
+$c = @file_get_contents($path);
+$orig = strlen($c);
+
+// Patch V0 to exclude multi-agent patterns
+$old = 'var _is_gen_cmd = /pdf|rapport|docx?|word|excel|xlsx?|pptx?|powerpoint|sch[eé]ma|diagramme|mermaid|image|photo|dessin|qr\\s*code|tts|lis[ -]|calcule|combien|code|traduis|cherche|recherche|actualit[eé]|search|news|latest|youtube|r[eé]sume|summari/i.test(text);';
+
+$new = 'var _is_gen_cmd = /pdf|rapport|docx?|word|excel|xlsx?|pptx?|powerpoint|sch[eé]ma|diagramme|mermaid|image|photo|dessin|qr\\s*code|tts|lis[ -]|calcule|combien|code|traduis|cherche|recherche|actualit[eé]|search|news|latest|youtube|r[eé]sume|summari|compar[ez]?|analyse|multi.?agent|parall[eè]le|360|bilan/i.test(text);';
+
+if (strpos($c, $old) === false) {
+    echo json_encode(["error"=>"V0 pattern not found"]);
+    exit;
+}
+$c = str_replace($old, $new, $c);
+
+$backup = "/opt/wevads/vault/wevia.html.GOLD-" . date("Ymd-His") . "-wave255-v0-exclude";
+@copy($path, $backup);
+$wrote = @file_put_contents($path, $c);
+
+echo json_encode([
+    "delta" => strlen($c) - $orig,
+    "wrote" => $wrote,
+    "backup" => basename($backup),
+    "attr_before" => $attr,
+]);
--- a/api/blade-actions-surfaced.json
+++ b/api/blade-actions-surfaced.json
@@ -1,5 +1,5 @@
 {
-  "generated_at": "2026-04-22T04:35:01.522801",
+  "generated_at": "2026-04-22T04:45:01.576391",
  "stats": {
    "total": 48,
    "pending": 31,
--- a/api/blade-heartbeat.json
+++ b/api/blade-heartbeat.json
@@ -1,8 +1,8 @@
 {
  "status": "ALIVE",
-  "ts": "2026-04-22T04:30:02.601854",
-  "last_heartbeat": "2026-04-22T04:30:02.601854",
-  "last_heartbeat_ts_epoch": 1776825002,
+  "ts": "2026-04-22T04:45:01.644342",
+  "last_heartbeat": "2026-04-22T04:45:01.644342",
+  "last_heartbeat_ts_epoch": 1776825901,
  "tasks_today": 232,
  "tasks_week": 574,
  "agent_id": "blade-ops",
--- a/api/mql-scoring-status.json
+++ b/api/mql-scoring-status.json
@@ -1,27 +1,27 @@
 {
    "ok": true,
    "agent": "V42_MQL_Scoring_Agent_REAL",
-    "ts": "2026-04-22T02:30:02+00:00",
+    "ts": "2026-04-22T02:40:01+00:00",
    "status": "DEPLOYED_AUTO",
    "deployed": true,
    "algorithm": "weighted_behavioral_signals",
    "signals_tracked": {
-        "wtp_engagement": 100,
-        "chat_engagement": 3,
+        "wtp_engagement": 6,
+        "chat_engagement": 0,
        "roi_tool": 0,
        "email_opened": 0
    },
-    "avg_score": 25.8,
+    "avg_score": 1.5,
    "mql_threshold": 50,
    "sql_threshold": 75,
    "leads_captured": 48,
-    "mql_auto_scored": 20,
-    "sql_auto_scored": 8,
-    "mql_auto_pct": 41,
+    "mql_auto_scored": 17,
+    "sql_auto_scored": 7,
+    "mql_auto_pct": 35,
    "improvement_vs_manual": {
        "before_manual_pct": 33.3,
-        "after_auto_pct": 41,
-        "delta": 7.700000000000003
+        "after_auto_pct": 35,
+        "delta": 1.7000000000000028
    },
    "paperclip_db_ok": true,
    "paperclip_tables": 2,
--- a/api/saas-chat.php
+++ b/api/saas-chat.php
@@ -1,6 +1,22 @@
 <?php
 // WAVE 253 · saas-chat grounded with live WEVAL data (anti-hallucination)
 header('Content-Type: application/json');
+// WAVE 256: Defense-in-depth sanitizer (mirrors weval-ia-fast.php)
+function wave256_sanitize($t) {
+    if (!is_string($t) || $t === '') return $t;
+    $blocklist = ['Groq', 'Cerebras', 'SambaNova', 'Ollama', 'DeepSeek', 'Mistral', 'Together', 'Replicate',
+                  'vLLM', 'Qwen', 'NVIDIA NIM', 'Cohere', 'OpenRouter', 'HuggingFace', 'Anthropic',
+                  '/opt/', '/var/www/', '/etc/', 'admin123', '49222', '11434', '6333', '4001',
+                  '204.168', '95.216', '151.80', '10.1.0', 'root@', 'ssh -p', 'docker ps',
+                  'PGPASSWORD', 'PostgreSQL', 'weval_leads', 'weval_tasks'];
+    foreach ($blocklist as $w) $t = str_ireplace($w, 'WEVIA Engine', $t);
+    $t = preg_replace('/\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/', '[infrastructure securisee]', $t);
+    $t = preg_replace('/\b(sk-[a-zA-Z0-9]{20,}|xoxb-[a-zA-Z0-9-]{20,}|eyJ[a-zA-Z0-9_.-]{50,})\b/', '[token securise]', $t);
+    $t = preg_replace('/\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/', '[token securise]', $t);
+    return $t;
+}
+
+
 header('Access-Control-Allow-Origin: *');
 if($_SERVER['REQUEST_METHOD']==='OPTIONS'){header('Access-Control-Allow-Methods: POST');header('Access-Control-Allow-Headers: Content-Type');exit;}
 $input=json_decode(file_get_contents('php://input'),true);
@@ -143,7 +159,7 @@ $history[]=['role'=>'assistant','content'=>$reply];
 if($redis)$redis->setex("saas:$session",3600,json_encode(array_slice($history,-20)));

 echo json_encode([
-    'response'=>$reply,
+    'response' => wave256_sanitize($reply),
    'provider'=>$provider_used ?: 'saas-sovereign',
    'session'=>$session,
    'grounding'=>[
--- a/api/v83-business-kpi-latest.json
+++ b/api/v83-business-kpi-latest.json
@@ -1,7 +1,7 @@
 {
    "ok": true,
    "version": "V83-business-kpi",
-    "ts": "2026-04-22T02:35:21+00:00",
+    "ts": "2026-04-22T02:41:43+00:00",
    "summary": {
        "total_categories": 8,
        "total_kpis": 64,
--- a/generated/mermaid-learn-kb.json
+++ b/generated/mermaid-learn-kb.json
@@ -61,5 +61,14 @@
        "code": "graph LR\n    A[Recherche cible] --> B{Qualité de la cible}\n    B -->| oui | C[Création de contenu]\n    B -->| non | D[Recherche de nouvelle cible]\n    C --> E[Emailing]\n    C --> F[Publicité ciblée]\n    E --> G[Conversion]\n    F --> G\n    G --> H[Analyse de résultats]\n    H -->| bons résultats | I[Augmentation de budget]\n    H -->| mauvais résultats | J[Recherche de nouvelle stratégie]",
        "created_at": "2026-04-22T01:45:28+00:00",
        "use_count": 0
+    },
+    {
+        "id": "715b23f893ce",
+        "topic": "Analyser les architectures de WEVIA et OPUS",
+        "kind": "flowchart",
+        "context": "Auto-generated from user query",
+        "code": "flowchart LR\n    WEVIA[Architecture de WEVIA]\n    OPUS[Architecture d'OPUS]\n    WEVIA -->|Microservices| OPUS\n    WEVIA -->|API Gateway| API\n    API -->|Authentification| Auth\n    Auth -->|BDD| BDD\n    BDD -->|Données| Données\n    OPUS -->|Microservices| API\n    API -->|Microservices| WEVIA\n    WEVIA -->|BDD| BDD\n    BDD -->|Données| Données\n    Données -->|Stockage| Stockage\n    Stockage -->|Sauvegarde| Sauvegarde\n    OPUS -->|BDD| BDD\n    BDD -->|Données| Données\n    Données -->|Stockage| Stockage\n    Stockage -->|Sauvegarde| Sauvegarde\n    WEVIA -->|Authentification| Auth\n    Auth -->|BDD| BDD\n    BDD -->|Données| Données\n    OPUS -->|Authentification| Auth\n    Auth -->|BDD| BDD\n    BDD -->|Données| Données",
+        "created_at": "2026-04-22T02:43:56+00:00",
+        "use_count": 0
    }
 ]
--- a/wevia.html
+++ b/wevia.html
@@ -1695,7 +1695,7 @@ function send() {
    // === AMBRE-V0-PRIORITY-ROUTER 2026-04-22 · route simple chat to session-chat (semaphore-protected) ===
    // Avoids /api/sovereign 503 overload. Session-chat uses cascade :4000 directly with throttle.
    // Applies to: short messages, greetings, non-file-gen, non-tool patterns
-    var _is_gen_cmd = /pdf|rapport|docx?|word|excel|xlsx?|pptx?|powerpoint|sch[eé]ma|diagramme|mermaid|image|photo|dessin|qr\s*code|tts|lis[ -]|calcule|combien|code|traduis|cherche|recherche|actualit[eé]|search|news|latest|youtube|r[eé]sume|summari/i.test(text);
+    var _is_gen_cmd = /pdf|rapport|docx?|word|excel|xlsx?|pptx?|powerpoint|sch[eé]ma|diagramme|mermaid|image|photo|dessin|qr\s*code|tts|lis[ -]|calcule|combien|code|traduis|cherche|recherche|actualit[eé]|search|news|latest|youtube|r[eé]sume|summari|compar[ez]?|analyse|multi.?agent|parall[eè]le|360|bilan/i.test(text);
    var _is_long = text.length > 500;
    var _has_url = /https?:\/\//.test(text);
    if (!_is_gen_cmd && !_is_long && !_has_url && typeof window._ambre_session_id !== 'undefined') {