fischer-agentkit/src/agentkit
Chiguyong cb278bb5f0
Test / backend-test (pull_request) Has been cancelled Details
Test / frontend-unit (pull_request) Has been cancelled Details
Test / api-e2e (pull_request) Has been cancelled Details
Test / frontend-e2e (pull_request) Has been cancelled Details
fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644
修复 ce-code-review 发现的全部 P1/P2 residual findings:

P1:
- PERF-1: PII 脱敏接入 gateway chat()/chat_stream() 生产路径
  (env AGENTKIT_PII_FILTER_ENABLED=true 启用,fail-closed)
- API-1/2/5/6/7/9/11/13 + STAND-1 + SEC-3: SCIM router 全面重写
  - API-1: totalResults 用 SELECT COUNT(*) 返回全量总数
  - API-2: 异常处理器转 RFC 7644 错误格式(scope 到 /scim/v2)
  - API-5: create_user 写 user_idp_links(idp_name='scim')
  - API-6: POST /Users 返回 Location 头
  - API-7: PATCH userName UNIQUE 冲突 → 409
  - API-9: 不支持的 filter → 400 invalidFilter
  - API-11: displayName=None
  - API-13: filter 大小写不敏感
  - STAND-1: dict[str, Any] → dict[str, object]
  - SEC-3: active true→false 写审计(延后到事务提交后避免 SQLite 锁竞争)
- API-4: _sso_issue_token_pair 用 secrets.token_urlsafe(32) 生成真实 refresh_token
  (移除 __pending_sso__ 占位符 + 后续 UPDATE 的非原子两步写入)
- API-8: _sso_issue_token_pair 增加 provider_type/provider_name 参数
- API-10: deprovision_user/change_user_role 加 response_model
- DEPLOY-1: install.sh + docs 用 instance 标签选择器替代硬编码 fullname
- DEPLOY-2: 11 处 Redis 客户端构造显式传入 REDIS_PASSWORD env var

P2:
- DEPLOY-4: 移除 agentkit deployment 中死 env POSTGRES_PASSWORD
  (应用通过 DATABASE_URL Slot 3 内嵌密码连接,不读此 env)
- DEPLOY-5: OTel token 格式改为 Authorization=Bearer <token>
  (符合 OTEL_EXPORTER_OTLP_HEADERS key=value 规范)

测试:
- ruff check + format 全部通过
- pytest tests/unit/test_scim_router.py 9 passed
- pytest tests/unit/test_llm_gateway.py + test_handoff.py + test_event_queue_integration.py 70 passed, 5 skipped
- helm lint + helm template 验证 POSTGRES_PASSWORD env 已移除
2026-07-06 11:41:06 +08:00
..
bitable fix(enterprise): ce-code-review P1 fixes — SSO is_active + span leak + Helm chart integration 2026-07-06 08:36:59 +08:00
bus fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
calendar refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
channels refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
chat fix: 私董会数据持久化修复 + emoji 移除计划 2026-07-02 01:07:12 +08:00
cli refactor: remove all emoji from source code (#20) 2026-07-03 02:46:40 +08:00
client fix: 私董会数据持久化修复 + emoji 移除计划 2026-07-02 01:07:12 +08:00
core fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
documents refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
evaluation feat(evaluation): U9 Ragas evaluation pipeline for RAG quality assessment 2026-06-06 22:49:27 +08:00
evolution feat(evolution): pitfall retrieval/injection at planning phase (U7, R12) 2026-07-03 14:27:48 +08:00
experts feat(core): verification defaults for PLAN_EXEC/TEAM_COLLAB + minimum sandbox (U3, R2/R3/RV3) 2026-07-03 12:32:22 +08:00
llm fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
marketplace fix(review): comprehensive P0-P2 code review fixes 2026-06-12 22:18:25 +08:00
mcp refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
memory fix: 私董会数据持久化修复 + emoji 移除计划 2026-07-02 01:07:12 +08:00
orchestrator fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
org feat(marketplace): add Phase B/C - CostAwareRouter, OrganizationContext, AlignmentGuard, Soul Evolution, Auction, Server Integration 2026-06-10 19:09:02 +08:00
prompts fix(review): address all 14 P2 advisory findings 2026-06-06 18:20:46 +08:00
quality fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
rag_platform refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
router fix(router): keyword match tiebreaker should preserve list order, not alphabetical 2026-06-24 10:11:42 +08:00
server fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
session fix(enterprise): ce-debug batch — PERF-1 PII filter + DEPLOY-1/2/4/5 + SCIM RFC 7643/7644 2026-07-06 11:41:06 +08:00
skills refactor: tech debt Wave 3+4 (tools/skills/mcp/rag/calendar/auth/cli/quality/channels/telemetry/session/bus/documents Any 治理) (#11) 2026-07-01 08:08:36 +08:00
telemetry feat(llm): U2 — Prompt Cache 全链路监控 + PII 脱敏 hook 2026-07-06 00:32:35 +08:00
tools fix(bitable/team): U3 — Residual P2 findings (DR-1/3/4/5 + #2/#3) 2026-07-06 03:48:14 +08:00
utils fix(security,reliability): resolve all P2 findings from code review 2026-06-10 15:05:40 +08:00
__init__.py feat(agentkit): v2 Phase 1 - ReAct/LLM Gateway/Skill/Server + review fixes 2026-06-05 23:32:16 +08:00
__main__.py feat(cli): AgentKit CLI with serve/version/health/task/skill/init/usage 2026-06-06 12:45:51 +08:00