cb278bb5f0
fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644
...
Test / backend-test (pull_request) Has been cancelled
Details
Test / frontend-unit (pull_request) Has been cancelled
Details
Test / api-e2e (pull_request) Has been cancelled
Details
Test / frontend-e2e (pull_request) Has been cancelled
Details
修复 ce-code-review 发现的全部 P1/P2 residual findings：
P1:
- PERF-1: PII 脱敏接入 gateway chat()/chat_stream() 生产路径
（env AGENTKIT_PII_FILTER_ENABLED=true 启用，fail-closed）
- API-1/2/5/6/7/9/11/13 + STAND-1 + SEC-3: SCIM router 全面重写
- API-1: totalResults 用 SELECT COUNT(*) 返回全量总数
- API-2: 异常处理器转 RFC 7644 错误格式（scope 到 /scim/v2）
- API-5: create_user 写 user_idp_links（idp_name='scim'）
- API-6: POST /Users 返回 Location 头
- API-7: PATCH userName UNIQUE 冲突 → 409
- API-9: 不支持的 filter → 400 invalidFilter
- API-11: displayName=None
- API-13: filter 大小写不敏感
- STAND-1: dict[str, Any] → dict[str, object]
- SEC-3: active true→false 写审计（延后到事务提交后避免 SQLite 锁竞争）
- API-4: _sso_issue_token_pair 用 secrets.token_urlsafe(32) 生成真实 refresh_token
（移除 __pending_sso__ 占位符 + 后续 UPDATE 的非原子两步写入）
- API-8: _sso_issue_token_pair 增加 provider_type/provider_name 参数
- API-10: deprovision_user/change_user_role 加 response_model
- DEPLOY-1: install.sh + docs 用 instance 标签选择器替代硬编码 fullname
- DEPLOY-2: 11 处 Redis 客户端构造显式传入 REDIS_PASSWORD env var
P2:
- DEPLOY-4: 移除 agentkit deployment 中死 env POSTGRES_PASSWORD
（应用通过 DATABASE_URL Slot 3 内嵌密码连接，不读此 env）
- DEPLOY-5: OTel token 格式改为 Authorization=Bearer <token>
（符合 OTEL_EXPORTER_OTLP_HEADERS key=value 规范）
测试：
- ruff check + format 全部通过
- pytest tests/unit/test_scim_router.py 9 passed
- pytest tests/unit/test_llm_gateway.py + test_handoff.py + test_event_queue_integration.py 70 passed, 5 skipped
- helm lint + helm template 验证 POSTGRES_PASSWORD env 已移除
2026-07-06 11:41:06 +08:00
8620751864
fix(review): address P0+P1 findings from Tier 2 code review
...
P0: MemoryRetriever.retrieve score mutation fix
P1: Redis atomic Lua script, deprecated API fix, SQLite WAL mode,
Redis URL masking, UniqueConstraint, TraceRecorder completed flag,
EpisodicMemory recall improvement, LLMReflector sanitization,
A/B test safety, generator cleanup, ContextCompressor guards,
OpenAIEmbedder reuse, Pipeline failure handling, Metrics O(1),
Health check Redis PING, CLI skill loading, CORS config,
API key direct pass-through
Tests: 924 passed, 18 skipped, 0 failed
2026-06-06 17:57:47 +08:00
f858d279f3
feat(agentkit): Phase 3 upgrade - persistence, memory, evolution, observability
...
10 Implementation Units across 3 phases:
Phase A - Infrastructure:
- U1: RedisTaskStore with Redis/memory backend + factory function
- U2: TraceRecorder for execution trace recording
- U3: PersistentEvolutionStore with SQLite backend
Phase B - Core Capabilities:
- U4: MemoryRetriever integration into ReAct engine
- U5: Embedder abstraction + EpisodicMemory vector search
- U6: LLMReflector for LLM-in-the-loop reflection
- U7: SkillPipeline for multi-skill orchestration
Phase C - Enhancement:
- U8: SKILL.md format + progressive disclosure levels
- U9: ContextCompressor + prompt cache rendering
- U10: Structured logging + metrics endpoint + enhanced health check
Tests: 924 passed, 18 skipped, 0 failed
2026-06-06 17:17:45 +08:00
Chiguyong
chiguyong