GenarrativeAI/Genarrative
11
0
Fork 0
Code Issues 15 Pull Requests 3 Actions 1 Packages Projects 3 Releases Wiki Activity

修复应用状态调试输出密钥泄漏 #150

Merged
kdletters merged 3 commits from codex/fix-issue-148 into master 2026-08-07 23:56:02 +08:00
Conversation 1 Commits 3 Files Changed 5
+199 -5
kdletters commented 2026-08-07 18:15:40 +08:00
Member
Copy Link
Copy Source

修复 Issue #148。

  • AppConfig、AppState、AppStateInner 改为封闭的手写 Debug 安全摘要
  • SpacetimeClientConfig 隐藏 token、URL 与数据库自由字符串，SpacetimeClient 复用安全摘要
  • 唯一哨兵覆盖五条独立 Debug 路径，并精确锁定 AppConfig 允许输出字段
  • 补充运行时日志规约与项目排障记忆

验证：

  • cargo test -p api-server debug_summaries_redact_all_runtime_credentials
  • cargo check -p spacetime-client -p api-server --all-targets
  • cargo fmt --all --check
  • npm run check:encoding
  • git diff --check

剩余边界：报告第二档中的历史 provider 配置类型独立 Debug 脱敏另行处理，本 PR 聚焦第一档主泄漏链。

Closes #148

修复 Issue #148。 - AppConfig、AppState、AppStateInner 改为封闭的手写 Debug 安全摘要 - SpacetimeClientConfig 隐藏 token、URL 与数据库自由字符串，SpacetimeClient 复用安全摘要 - 唯一哨兵覆盖五条独立 Debug 路径，并精确锁定 AppConfig 允许输出字段 - 补充运行时日志规约与项目排障记忆 验证： - cargo test -p api-server debug_summaries_redact_all_runtime_credentials - cargo check -p spacetime-client -p api-server --all-targets - cargo fmt --all --check - npm run check:encoding - git diff --check 剩余边界：报告第二档中的历史 provider 配置类型独立 Debug 脱敏另行处理，本 PR 聚焦第一档主泄漏链。 Closes #148
kdletters added 1 commit 2026-08-07 18:15:40 +08:00
修复应用状态调试输出泄漏
Project CI / Backend tests (pull_request) Successful in 4m8s
Details
Project CI / Repository checks (pull_request) Successful in 58s
Details
Project CI / Native shell tests (pull_request) Failing after 41s
Details
Project CI / Frontend tests (pull_request) Successful in 2m58s
Details
1f56885b08 
为 AppConfig、AppState 和 AppStateInner 提供封闭安全摘要
为 SpacetimeClientConfig 和 SpacetimeClient 脱敏独立调试路径
增加唯一哨兵回归覆盖五条 Debug 链
补充运行时日志规约与排障记忆
kdletters commented 2026-08-07 18:44:49 +08:00
Author
Member
Copy Link
Copy Source

CI 说明：Native shell tests 的失败来自当前 master 6c53eda71 的 AGC Cargo.lock 漂移，并非本 PR 改动。job 在执行测试前的 cargo fetch --locked --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml 阶段失败；本 PR 未修改该 manifest 或 lock，在当前 master 上本地执行同一命令可稳定复现 cannot update the lock file ... because --locked was passed。其余已完成 CI 均通过；该 master 基线问题应独立修复，避免重复混入两个安全修复。

CI 说明：Native shell tests 的失败来自当前 master `6c53eda71` 的 AGC Cargo.lock 漂移，并非本 PR 改动。job 在执行测试前的 `cargo fetch --locked --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml` 阶段失败；本 PR 未修改该 manifest 或 lock，在当前 master 上本地执行同一命令可稳定复现 `cannot update the lock file ... because --locked was passed`。其余已完成 CI 均通过；该 master 基线问题应独立修复，避免重复混入两个安全修复。
kdletters added a new dependency 2026-08-07 19:22:52 +08:00
#148 AppConfig与AppState调试输出密钥泄漏面
kdletters added 1 commit 2026-08-07 19:56:01 +08:00
Merge branch 'master' into codex/fix-issue-148
Project CI / Repository checks (pull_request) Successful in 1m2s
Details
Project CI / Frontend tests (pull_request) Successful in 3m12s
Details
Project CI / Backend tests (pull_request) Successful in 3m35s
Details
Project CI / Native shell tests (pull_request) Successful in 14m25s
Details
cb7f587824
kdletters removed a dependency 2026-08-07 19:56:55 +08:00
#148 AppConfig与AppState调试输出密钥泄漏面
kdletters scheduled this pull request to auto merge when all checks succeed 2026-08-07 19:57:05 +08:00
kdletters added 1 commit 2026-08-07 20:47:01 +08:00
Merge branch 'master' into codex/fix-issue-148
Project CI / Repository checks (pull_request) Successful in 45s
Details
Project CI / Frontend tests (pull_request) Successful in 3m0s
Details
Project CI / Native shell tests (pull_request) Successful in 14m54s
Details
Project CI / Backend tests (pull_request) Successful in 3m39s
Details
2d74a0a506
kdletters merged commit 4974844090 into master 2026-08-07 23:56:02 +08:00
kdletters deleted branch codex/fix-issue-148 2026-08-07 23:56:02 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
HuangJiaJia JenkenB k88936 (王德宇) kdletters (段舒康) laura2008 (王乐) lhk229 (孔令弘) Loer (农洛儿) loong suzmii (董羽秦) taobaisu (叶东旭) wuxiangwanzi (王子民) YixuanLiu ziyu
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: GenarrativeAI/Genarrative#150
Delete Branch "codex/fix-issue-148"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?