fix(cleanup): 第三轮收口——#2135 全四项 / #2136 P0·P1 / #2120 切片2·3 / #2124 文档 - #2145
Merged
Conversation
…F1-F4） F1：hub jwtutil 两处 ParseWithClaims 补 jwt.WithLeeway(30s)，与 capability token（tokendance.go）和 edge validate 对齐；过期测试改 -31s 并新增 -10s leeway 内接受用例。 F2：edge delivery journal retention 7d→24h，与 run 终态清理 TTL 对齐， 避免 journal 比派生源 run 活得久导致孤儿重放。 F3：tokenRefreshLead 1min→2min，覆盖 Edge/Hub 时钟偏移；测试随改。 F4：WSReadTimeout = 2×Heartbeat + PingTimeout（65s），pong-miss 检测先于 read 超时触发以保留 metrics 信号；常量测试同步。 Co-authored-by: Cursor <cursor@vectorcontrol.tech>
… P0/P1） P0：ListCustomAgentsByOwner 原无 LIMIT，加 config.MaxPageLimit 硬上限 （其余审计列出的 contacts/requests/reactions/devices 经复核已被 #2105 覆盖）。 P1：documents repo 上限 200 → config.MaxPageLimit=500，与 API 层声明一致。 新增 505/501 行 sqlite 上限回归测试。truncated/hasMore 信号与搜索/agent-team 分页迁移属审计 P2 建议，本 PR 不覆盖（issue 留开）。 Co-authored-by: Cursor <cursor@vectorcontrol.tech>
切片2：pkg/logmask 提供 SensitiveKey/Attr/Value，对 token/secret/ authorization/api_key 等字段统一打 ***；带单测。 切片3：AGENTS.md §9 固化「日志只打标识符不打本体，新打点走 pkg/logmask」纪律。切片1 已由 #2121（body_summary）交付。 Co-authored-by: Cursor <cursor@vectorcontrol.tech>
05-deployment.md 新增「配置面索引」节（hub 8 组 + edge 7 组，含 本批新增的 AGENTHUB_EDGE_SHUTDOWN_TIMEOUT）；edge-server/README.md 补 4 行。doc-ssot 门禁通过（05-deployment 200 行预算内）。 Co-authored-by: Cursor <cursor@vectorcontrol.tech>
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This was referenced Aug 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
内容（4 个 commit）
fix(clock)[可靠性] 时间/TTL 纪律审计（过期边界/时钟一致性/窗口矛盾） #2135 F1-F4：hub jwtutil 两处解析补jwt.WithLeeway(30s)（与 capability/edge 对齐，测试改 -31s + 新增 -10s 用例）；edge journal retention 7d→24h（与 run 终态 TTL 对齐）；tokenRefreshLead 1m→2m；WSReadTimeout 60s→65s（pong-miss 先于 read 超时触发，metrics 不丢）。fix(api)[后端] API 分页契约审计（参数面/语义一致性/截断暴露） #2136 P0/P1：ListCustomAgentsByOwner 补 MaxPageLimit 硬上限；documents repo 上限 200→500 对齐 API 声明。新增 505/501 行 sqlite 回归测试。chore(security)[安全] 日志敏感数据审计（hub+edge 秘密本体泄漏面） #2120 切片 2/3：新增pkg/logmask（SensitiveKey/Attr/Value + 单测）；AGENTS.md §9 固化日志纪律。切片 1 已由 fix(security): Edge dispatch 非成功响应日志摘要化（#2120 切片 1） #2121 交付。docs(deploy)[安全] hub+edge 配置面审计（默认值风险/文档缺口/命名一致性） #2124 切片 3：05-deployment.md 新增「配置面索引」（hub 8 组 + edge 7 组，含 AGENTHUB_EDGE_SHUTDOWN_TIMEOUT）；edge README 补 4 行；doc-ssot 200 行预算内。本地验证
make test0 FAIL、go vet ./...（hub/edge/pkg）、doc SSOT、sleep-ratchet、git diff --check-race：jwtutil/ws/repository/hub/pkg 全绿合入后