chiguyong 31c65e01b8 fix(security): P0 安全加固 + 多实例部署一致性 (U1-U4 + U5c) ... U1: LLM gateway KB 缓存 fail-closed — 异常时默认禁用缓存防止 KB 数据泄漏 U2: MCP 危险工具黑名单过滤 — 6+1 端点覆盖，防止绕过 chat confirmation U3: SecretsStore Redis 迁移 — 多 worker 共享凭证，内存降级保留开发模式 U4: channels webhook Redis 状态 — ZSET 滑动窗口限流 + nonce dedup + backpressure U5c: ce-code-review 修复批次: - P0: 统一 MCP 黑名单与 publisher.py 一致 (terminal_execute -> terminal, +file_read) - P1: ZSET 限流 member 加 uuid 后缀避免同时间戳碰撞 - P1: SecretsStore redis 参数 Any -> aioredis.Redis | None (AGENTS.md 合规) - P1: Redis client 添加 socket_timeout 防止单点故障请求挂死 测试: 171 scoped tests pass, ruff clean		2026-06-26 04:05:33 +08:00
..
__init__.py	feat(channels): U10 — message adapter ABC + AES-256-GCM secrets store + channel CRUD routes	2026-06-25 20:13:37 +08:00
test_base.py	feat(channels): U10 — message adapter ABC + AES-256-GCM secrets store + channel CRUD routes	2026-06-25 20:13:37 +08:00
test_dingtalk.py	feat(channels): U12 — DingTalk/WeCom/Slack adapters + multi-channel webhook dispatch	2026-06-25 20:45:43 +08:00
test_feishu.py	feat(channels): U12 — DingTalk/WeCom/Slack adapters + multi-channel webhook dispatch	2026-06-25 20:45:43 +08:00
test_secrets.py	feat(channels): U10 — message adapter ABC + AES-256-GCM secrets store + channel CRUD routes	2026-06-25 20:13:37 +08:00
test_secrets_redis.py	fix(security): P0 安全加固 + 多实例部署一致性 (U1-U4 + U5c)	2026-06-26 04:05:33 +08:00
test_slack.py	feat(channels): U12 — DingTalk/WeCom/Slack adapters + multi-channel webhook dispatch	2026-06-25 20:45:43 +08:00
test_webhook_redis_state.py	fix(security): P0 安全加固 + 多实例部署一致性 (U1-U4 + U5c)	2026-06-26 04:05:33 +08:00
test_wecom.py	fix(review): ce-code-review P1+P2 修复 — 安全/可靠性/性能	2026-06-26 01:40:31 +08:00