From 51b4df788cd721e4868966266a7f9b0c9a59d010 Mon Sep 17 00:00:00 2001 From: phamnazage-jpg Date: Fri, 29 May 2026 11:43:11 +0800 Subject: [PATCH] docs(routing): record managed proxy key verification --- docs/EXECUTION_BOARD.md | 43 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) diff --git a/docs/EXECUTION_BOARD.md b/docs/EXECUTION_BOARD.md index d596f12f..38d9a8f9 100644 --- a/docs/EXECUTION_BOARD.md +++ b/docs/EXECUTION_BOARD.md @@ -432,6 +432,49 @@ - 共回读到 `2` 条 decision log - 最新一条 `upstream_status=200` - 说明控制面 `resolve` 与数据面最小转发已被同一 `request_id` 串成闭环 + - 2026-05-29 已完成真实宿主 managed key 供应路径补充 / `route proxy -> managed subscription -> real host chat` + - 提交：`cffe3332 feat(routing): auto-supply managed proxy keys` + - `POST /api/routing/proxy/chat/completions` 新增： + - 当请求未显式提供 `gateway_api_key` 且带 `subscription_user_id` 时，会自动调用目标宿主的 `EnsureSubscriptionAccess(...)` + - 通过 `shadow_group_id + shadow_host_id` 解析真实宿主 group，再以新签发的 managed subscription key 转发到真实 host `/v1/chat/completions` + - 转发结果继续以同一 `request_id` 追加写回 `route_decision_logs` + - 本地门禁已通过： + - `gofmt -l .` + - `go vet ./...` + - `go test -cover ./internal/...` + - `go test ./tests/integration/... -count=1` + - remote43 已原位升级到 `repo HEAD = cffe3332` + - `http://127.0.0.1:18173/healthz` 返回 `ok` + - remote43 真实服务器 API 验证结果： + - 通过 remote43 本机 `host admin login` 拿到真实宿主管理员 access token + - 已确认 route-lab 真实 shadow group： + - `name=GPT Shared 路由实验-subscription` + - `host_group_id=8` + - 通过真实 CRM API 创建临时 host / logical group / route： + - `host_id=proxy-real-host-1780026133` + - `logical_group_id=p1t7-real-1780026133` + - `route_id=asxs-real-1780026133` + - `shadow_group_id=8` + - `shadow_model=gpt-5.4-asxs` + - 调用 `POST /api/routing/proxy/chat/completions`： + - `request_id=req-p1t7-real-1780026133` + - `subscription_user_id=proxy-managed-1780026133` + - 返回 `effective_gateway_key_source=managed_subscription` + - 返回 `managed_user_id=33` + - 返回 `effective_gateway_key_fingerprint=sha256:f0fa3dec6e94348945431c9470c1faa8258c50fcee1adcb1904dac0fa42a15d6` + - 返回 `forward.ok=false` + - 返回 `forward.upstream_status=503` + - 返回 `forward.response.error.message=Service temporarily unavailable` + - `GET /api/routing/logs/decisions?request_id=req-p1t7-real-1780026133&limit=5` + - 共回读到 `2` 条 decision log + - 最新一条 `upstream_status=503` + - 当前结论： + - 插件控制面 `resolve -> shadow_host/shadow_group/shadow_model` + - managed subscription key 自动供给 + - 真实宿主 `/v1/chat/completions` 转发 + - 插件侧 decision log 回写 + - 以上链路均已真实命中 + - 但该次 upstream 仍返回 `503`，因此当前收口应表述为“真实 managed key 供应路径已打通，真实上游可用性仍待继续压实” - 2026-05-26 已把“最终用户 -> 公网域名 -> OpenClaw”这一跳补进正式验证口径： - 公网根地址当前统一为 `https://sub.tksea.top` - OpenClaw 本地 `MiniMax` 运行时故障已定位为 `pi-ai/openai-node` 未继承系统 `HTTP(S)_PROXY`，不是 allowlist 或模型名大小写问题