修复: relay token 改环境变量 + api_key 脱敏 + 路径规范化 + create_project 自动建目录

- relay token 必设 DF_RELAY_TOKEN 环境变量,移除硬编码默认
- AiProviderRecord Debug 脱敏 api_key/model_configs/config
- ScriptNode 危险命令告警(rm -rf/DROP TABLE 等)
- bind_directory 路径规范化,拒绝含 .. 的原始路径
- create_project 目录不存在时自动创建
- probe_pwsh OnceLock 全局缓存,异步探测不阻塞 tokio
- retry jitter 改 rand,范围扩大到 ±50%
- EventBus send 错误改 tracing::warn
- StateMachine 文档警告不得在 await 期间持锁
This commit is contained in:
2026-06-28 13:36:18 +08:00
parent f776336eb1
commit b157bc9077
11 changed files with 110 additions and 34 deletions

1
Cargo.lock generated
View File

@@ -881,6 +881,7 @@ dependencies = [
"df-types",
"eventsource-stream",
"futures",
"rand",
"reqwest 0.12.28",
"serde",
"serde_json",