taijibaga/heicode-mananger
9
0
Fork 0
Code Issues 12 Pull Requests Actions Packages Projects 1 Releases Wiki Activity
Files
64ba58357f1c3ca59269cb3fca1f0d4e527e0f1f
heicode-mananger/heicode/controller
T
History
chenchenandClaude Opus 4.8 9a073e5b41 feat(preflight): confirm + audit + tamper-proof version check (#41) 
完成 preflight EPIC(#29)的最后一子项 #41:

- POST /api/heicode/preflight/confirm:重算摘要 → 仅 ready 时可确认 → 派生防篡改
  版本哈希 → 写审计事件 preflight.confirmed(谁/何时/哪个 version)→ 返回 version。
- 防篡改版本 computePreflightVersion:在**稳定安全面**(template + 资源
  binding_id/type/provider/name/status/has_secret + 高危 enum + 必需缺失项)上做
  sha256,刻意排除易变预算数字/agent_slot,避免版本无意义抖动。
- 部署校验:POST /api/heicode/agents 新增可选 preflight_version。默认仅在带了它时
  校验(向后兼容);HEICODE_PREFLIGHT_REQUIRED=true 时强制。确认后资源/模板/高危面
  漂移或被篡改 → 版本不匹配 → 部署拒绝。
- 重构:抽出 buildPreflightSummary(GET/confirm/deploy 共用);GET 现也回 version。

测试:版本确定性/稳定性(不随预算变)、资源篡改翻转版本、normalizeBindingIDs。
go build/vet 干净,controller preflight 测试全过。文档 §4.1/§4.1.1 更新。

Affects: Manager only(新增 confirm 端点 + 部署可选校验,默认向后兼容)。
无计费/审计 schema 改动(复用既有 agent_audit_events)。

Closes #41

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-10 12:55:40 +08:00
..
agent_template_presets
feat(agent): HM-maintained agent template library (md), sent to AM on deploy
2026-06-04 00:05:08 +08:00
agent_approval_test.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
agent_approval.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
agent_async_deploy_test.go
fix(agent): 异步回填加 Pending 状态守卫，避免覆盖用户 stop/delete
2026-06-08 17:17:40 +08:00
agent_callback.go
fix(agent): reconcile deployment from runtime status on read
2026-06-02 00:05:43 +08:00
agent_control_plane_test.go
fix agent deploy caps
2026-06-08 17:49:35 +08:00
agent_control_plane.go
fix agent deploy caps
2026-06-08 17:49:35 +08:00
agent_preflight_test.go
feat(preflight): confirm + audit + tamper-proof version check (#41)
2026-06-10 12:55:40 +08:00
agent_preflight.go
feat(preflight): confirm + audit + tamper-proof version check (#41)
2026-06-10 12:55:40 +08:00
agent_role_template_test.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
agent_role_template.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
agent_runtime_client.go
fix(swarm): align Manager swarm-runtime default routes to HeiCode-Swarm standard
2026-06-02 17:45:00 +08:00
agent_task_bridge.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
agent_template_env.go
feat(agent): align HM to AM's coding_a2a_agent contract
2026-06-04 15:30:33 +08:00
agent_template_handlers.go
feat(preflight): confirm + audit + tamper-proof version check (#41)
2026-06-10 12:55:40 +08:00
agent_template_library.go
fix(agent): review fixes — deployable-template gating, stopped-status guard, UI consistency
2026-06-05 11:06:49 +08:00
agent_template_runtime.go
fix(agent): review fixes — deployable-template gating, stopped-status guard, UI consistency
2026-06-05 11:06:49 +08:00
agent_template_test.go
fix(agent,secret): enforce CRYPTO_SECRET for agent deploy (#31) and guard unscoped vault purge (#33)
2026-06-10 00:33:47 +08:00
azure_resource_discovery.go
feat: add azure key vault resource discovery
2026-05-25 17:41:43 +08:00
billing.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel_affinity_cache.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel_test_internal_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel_upstream_update_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel_upstream_update.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel-billing.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel-test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
channel.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
checkin.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
codex_oauth.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
codex_usage.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
console_migrate.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
custom_oauth.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
deployment.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
desktop_download.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
device_test.go
fix(devices): hide revoked rows from user-facing Devices list
2026-05-22 14:24:20 +08:00
device.go
feat(device): desktop client self-logout endpoint
2026-06-04 16:15:47 +08:00
discord.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
git_source.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
github.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
group.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
heicode_agent_session.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
heicode_auth_proxy.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
heicode_available_models_test.go
feat(heicode): 新增 /api/heicode/available-models,客户端模型列表收口 (#25)
2026-06-09 15:51:21 +08:00
heicode_available_models.go
feat(heicode): 新增 /api/heicode/available-models,客户端模型列表收口 (#25)
2026-06-09 15:51:21 +08:00
heicode_capabilities.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
heicode_config_test.go
feat(heicode): 客户端错误遥测上报端点(默认关闭)(#24) (#27)
2026-06-09 22:16:29 +08:00
heicode_config.go
feat(telemetry): retention purge + context field whitelist + size caps (#32)
2026-06-10 00:40:23 +08:00
heicode_oauth.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
heicode_self_test.go
fix(heicode-self): quota_display_type 补 CUSTOM + 统一大写 + 加 displayQuota 测试
2026-06-08 17:34:03 +08:00
heicode_self.go
fix(heicode-self): quota_display_type 补 CUSTOM + 统一大写 + 加 displayQuota 测试
2026-06-08 17:34:03 +08:00
heicode_telemetry_test.go
feat(telemetry): retention purge + context field whitelist + size caps (#32)
2026-06-10 00:40:23 +08:00
heicode_telemetry.go
feat(telemetry): retention purge + context field whitelist + size caps (#32)
2026-06-10 00:40:23 +08:00
image.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
linuxdo.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
log.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
midjourney.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
misc.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
missing_models.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
model_list_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
model_meta.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
model_sync.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
model.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
oauth.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
oidc.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
option.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
passkey.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
payment_webhook_availability_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
payment_webhook_availability.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
performance.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
playground.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
prefill_group.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
pricing.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
ratio_config.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
ratio_sync.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
redemption.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
relay.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
resource_test.go
feat(agent): unify agnet→agent and implement client/runtime unification spec v0.1 core
2026-06-01 23:45:10 +08:00
resource.go
fix(secret): 闭合 #4 secret 生命周期 — 账户停用全量清理 + 30天 purge + 显式轮换
2026-06-09 00:55:09 +08:00
secret_lifecycle_test.go
fix(agent,secret): enforce CRYPTO_SECRET for agent deploy (#31) and guard unscoped vault purge (#33)
2026-06-10 00:33:47 +08:00
secret_lifecycle.go
fix(agent,secret): enforce CRYPTO_SECRET for agent deploy (#31) and guard unscoped vault purge (#33)
2026-06-10 00:33:47 +08:00
secret_store.go
fix(secret): 撤销资源时删除 Key Vault 凭证材料 (#4) (#13)
2026-06-08 15:26:47 +08:00
secure_verification.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
server_pubkey.go
feat(manager): V2 device-bound signed + body-encrypted protocol
2026-05-20 16:43:36 +08:00
setup.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
subscription_payment_creem.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
subscription_payment_epay.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
subscription_payment_stripe.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
subscription.go
feat(agent): 部署上限按订阅档动态化，闭合 #8 个人5/团队8 (#21)
2026-06-09 14:28:19 +08:00
swag_video.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
task_video.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
task.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
telegram.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
telemetry_retention.go
feat(telemetry): retention purge + context field whitelist + size caps (#32)
2026-06-10 00:40:23 +08:00
token_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
token.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup_creem.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup_stripe.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup_waffo_pancake_test.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup_waffo_pancake.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup_waffo.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
topup.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
twofa.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
uptime_kuma.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
usedata.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
user.go
fix(secret): 闭合 #4 secret 生命周期 — 账户停用全量清理 + 30天 purge + 显式轮换
2026-06-09 00:55:09 +08:00
vendor_meta.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
video_proxy_gemini.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
video_proxy.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00
wechat.go
chore: initial import — heicode manager + website
2026-05-20 14:07:30 +08:00