Aska
9c2a37c4ac
agent-98 面板批次:
- 会话管理面板改接 history.ListSessions(主web+次级) + 新建次级会话按钮
- 记忆面板手动添加入口 POST /admin/memories(owner)
- 知识库真正实现 IndexDocument(分块+落projectindex) + POST /admin/rag 导入端点
- 三面板空态诚实表述(去除'后端M10+提供')
- RAG嵌入降级到keyword/line(无直属embedder,不伪造语义,符合红线)
agent-99 design/16 §4.6:
- model.Message.SenderName + 迁移0006 sender_name 列
- 第三方身份边界: session.ResolveActor判定(非LLM猜) + [第三方·昵称]前缀(不改源content)
- 群聊/陌生人落独立sess-xxx(persistIsolated),不写主会话,不广播
- 黑/白名单(allowGroups/denyGroups/allowUsers/denyUsers)最前拦截,不进LLM
- 多账号 CHANNELS_JSON 配置 + 每平台多实例
- 管理只读 GET /admin/channels/{platform}/messages(该平台非主人消息流)
实机验证(JWT): 会话管理返回主会话web / 记忆添加成功 / RAG导入documents非空+Cyrene命中; 后端build/vet/test全绿 + 前端build绿
50 lines
1.8 KiB
Go
50 lines
1.8 KiB
Go
package gateway
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"time"
|
|
|
|
"git.yeij.top/AskaEth/Cyrene_v2/internal/auth"
|
|
)
|
|
|
|
// auditClaims records an admin write with the caller identity read from the
|
|
// request context (populated by auth.Authorize). It is the who/what/when/result
|
|
// audit trail required for admin operations; the "主代理代审" user-facing note is
|
|
// the frontend's job, not the gateway's.
|
|
func (s *Server) auditClaims(r *http.Request, what, result string) {
|
|
who := "anonymous"
|
|
if claims, ok := auth.ClaimsFromContext(r.Context()); ok {
|
|
who = claims.Sub + ":" + string(claims.Role)
|
|
}
|
|
s.audit(r.Context(), who, what, result)
|
|
}
|
|
|
|
// AuditEvent records an external (non-HTTP) audit event with an explicit caller
|
|
// identity, so programmatic sinks outside the request path (for example the
|
|
// channel bridge's blacklist rejection hook, design/16 §4.6 §6) can append to the
|
|
// same who/what/when/result trail. who is a free-form actor label ("channel" or
|
|
// "bridge:telegram"); what is the operation and result its outcome. It is safe for
|
|
// concurrent use.
|
|
func (s *Server) AuditEvent(who, what, result string) {
|
|
s.audit(context.Background(), who, what, result)
|
|
}
|
|
|
|
// audit emits one structured audit record on the gateway logger and persists it to
|
|
// the configured AuditStore (falling back to an in-memory store when none is
|
|
// injected). A persist failure is logged but never blocks the admin write, so a
|
|
// broken audit store cannot take down the audit trail's primary job.
|
|
func (s *Server) audit(ctx context.Context, who, what, result string) {
|
|
s.log.Info("admin audit",
|
|
"who", who,
|
|
"what", what,
|
|
"when", time.Now().UTC().Format(time.RFC3339),
|
|
"result", result,
|
|
)
|
|
if s.obs != nil && s.obs.audit != nil {
|
|
if err := s.obs.audit.Append(ctx, who, what, result, time.Now()); err != nil {
|
|
s.log.Error("admin audit persist", "err", err, "what", what)
|
|
}
|
|
}
|
|
}
|