种子页可编辑当前槽配置，并记录遥测上传 by dofastted · Pull Request #610 · dofastted/vm2api

dofastted · 2026-10-19T13:23:27Z

Summary

种子页按当前槽 settings.json 显示配置。env 可直接编辑，theme 可改；autoUpdates 和 grove_enabled 只读，播种时固定。缺少 CLAUDE_CODE_ATTRIBUTION_HEADER 时默认 0。
文件缺失时 claude_setting 返回 null，空文件保持空串，不再用默认串冒充。
「调试上传」默认关闭。打开后显示本槽最近 40 条实际上传，正文是 PostBatch 的 events 包装；落盘前去掉邮箱、账号、组织和设备标识。
同分支还包含线程 beta 固定、服务二进制替换后的出口重启，以及 auto compact 窗口保留。

Test plan

pnpm -C web exec vitest run src/features/vm/seed-settings.test.ts src/features/vm/seed-policy-card.test.ts
pnpm -C web exec tsc -b
node --test test/unit/panel-vm-seed-settings.test.mjs test/unit/seed-policy.test.mjs
cd worker && go test ./internal/telemetry/
部署后验证。当前线上还是上一次的 1.3.199 覆盖层，不含这次提交。

不合并。

Note

High Risk
Touches fleet/container migration, egress process ownership, and outbound beta pinning on threaded Claude hops—failures can leave stale egress binaries or wrong API gates while VMs keep running.

Overview
Redesigns the VM seed tab so admins edit what is actually on disk: live settings.json env/theme rows, an editable claude.setting file, reject-client toggles, and a telemetry lamp that separates policy on/off from whether the sidecar process is running (2s refresh). Saving is an explicit 播种; optional 调试上传 (?debug=1) shows the last 40 redacted telemetry upload lines from the slot run dir.

Backend seed API returns claude_setting from the slot file (null if missing), accepts it on PUT, writes seed files including claude.setting, and when telemetry policy changes on a running VM runs a telemetry-only fleet update instead of a full slot reload. Go telemetry now appends redacted upload audit lines to telemetry-upload.log.

Go slot services move to a persistent per-slot slot-bin bind at /opt/kin-live (layout v3): install/upgrade and fleet-update / fleet-services.mjs publish kin-worker/kin-egress and restart those processes without rebuilding VMs; remote slots can migrate legacy containers (rename to *-legacy-*). kin-egress lifecycle is stricter about deleted binaries and stale PIDs holding ports.

Protocol/routing extras: thread continue turns reuse pinned Anthropic betas from the create turn; auto_compact_window is configurable in panel compat and forwarded into kernel/CLI hop bodies; mid-conversation output-config beta when thread is present.

^{Reviewed by Cursor Bugbot for commit fb2bd5f. Configure here.}

默认跟随请求模型，调用方窗口经内部字段送到当前 job，面板值可热配置。

窗口在入站清理前提取，再经内部字段进入 native body。

窗口必须在 settings 删除前提取，再传给 native body。

A replaced helper keeps the old inode and the listen port. Ownership now treats that process as down and the next start or fleet refresh stops every helper bound to the proxy config, including one the pidfile no longer names.

Fleet refresh now waits for every helper bound to the proxy config to exit before binding the new one. install.sh no longer treats a failed refresh as a successful upgrade.

账本列出文件里的真实配置项，claude.setting 可编辑后播种。遥测开/关与进程状态分开，种子页打开时 2 秒刷新。

编辑框只显示当前槽文件的原文。文件缺失或为空都保持空白，不再回退到策略文本或默认串。

GET /seed-settings 不再用策略默认串填补不存在的文件。空文件仍返回空串，策略字段保持独立。

settings.json 的 env 改成输入框，播种时写回。缺少 CLAUDE_CODE_ATTRIBUTION_HEADER 时默认 0。

默认不拉取。打开后读取本槽 telemetry-upload.log，sidecar 在每次上传后追加正文。

theme 可编辑并随播种写回。autoUpdates 与 grove_enabled 由播种固定，只读显示，不再被环境项过滤掉。

落盘前去掉邮箱、账号、组织和设备标识。超过四十行时原子替换，不再无限追加。

调试开关会改变查询键。保存成功按种子前缀失效，避免日志继续显示旧记录。

batch 日志改为 PostBatch 发出的 BatchRequest。身份字段仍在包装内删除。

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit fb2bd5f. Configure here.}

cursor · 2026-10-19T13:28:00Z

+            concurrency: 1,
+            routing: ctx.routingConfig,
+          })
+          service = report.items?.[0] || report


Seed save restarts kin-egress

High Severity

Toggling telemetry on a seed save now runs fleet telemetry, which copies Go binaries and restarts kin-egress as well as the sidecar. Seed PUT is supposed to write seed files and bounce only the telemetry child, not take the slot’s exit down or treat a config edit as a fleet binary roll.

Additional Locations (2)

src/lib/vm/fleet-update.mjs#L30-L37

src/lib/cluster/remote-slot.mjs#L1086-L1105

^{Triggered by learned rule: Slot-bin v3; telemetry fleet restarts Go only}

^{Reviewed by Cursor Bugbot for commit fb2bd5f. Configure here.}

cursor · 2026-10-19T13:28:00Z

+  const egress = await restartLocalEgress(projectRoot, vm, egressOpts)
+  if (!egress.ok) return egress
+  return { ...telemetry, egress: egress.egress }
+}


Fleet egress restarts race

High Severity

Local fleet telemetry restarts kin-egress per VM with default concurrency 4 and no lock on the proxy run dir. Two slots that share a proxy can stop and spawn the helper at once; the losing process exits and the pidfile can record it, leaving the port busy or not_running.

Additional Locations (1)

scripts/fleet-services.mjs#L3-L8

^{Triggered by learned rule: kin-egress reload waits for old process exit}

^{Reviewed by Cursor Bugbot for commit fb2bd5f. Configure here.}

cursor · 2026-10-19T13:28:00Z

  const out = applyRequiredSeedEnv(env, pol)
  // 2.1.283+ sends x-claude-code-prompt-id only when this is set. Default on.
  out.CLAUDE_CODE_GATEWAY_HINT_HEADERS = '1'
+  if (out.CLAUDE_CODE_ATTRIBUTION_HEADER == null) out.CLAUDE_CODE_ATTRIBUTION_HEADER = '0'


Seed env TZ edits discarded

Medium Severity

The seed page now treats every settings.json env key as editable, including TZ and LANG, and saves them as extra_env. Slot write still overwrites those keys from the VM timezone and locale after the merge, so those form edits never land in the file.

Additional Locations (2)

web/src/features/vm/seed-settings.ts#L138-L147

src/lib/vm/slot-seed.mjs#L31-L38

^{Reviewed by Cursor Bugbot for commit fb2bd5f. Configure here.}

dofastted · 2026-10-19T13:29:20Z

已部署到线上，PR 仍未合并。

VERSION：1.3.199
HEAD：fb2bd5f0
备份：/opt/vm2api/.deploy-bak-vm2api-1.3.199-20261019T132846Z
verify-live.py 1.3.199 --auth-mode master：exit 0
13 个槽，8 个 kin 容器保持 Up，容器 ID 与部署前一致，对话返回 pong
未执行 wrap-cli/sync。新的 kin-worker 只在控制面二进制里；正在跑的遥测 sidecar 要等所在槽下次重启才按新日志规则记录。

dofastted · 2026-10-19T13:33:01Z

发版已拒（厨房水槽 dirty，同 #606）。勿合、勿 tip。

处理：

暂不关本 PR，等主聊是否授权关
从 tip 2bb07d84 另开干净种子增量：仅可编辑 env/theme + 调试上传 40 条脱敏
不含 egress / migration / auto_compact / thread-beta（thread-beta 另开；迁移走 feat(vm): migrate legacy containers for service-only Go updates #605；auto_compact 走 feat(protocol): 保留调用方 auto compact 窗口 #607）

— vm2api代码

dofastted · 2026-10-19T13:33:36Z

主聊已授权关闭。

勿合。 迁移只走 #605；协议（auto_compact）只走 #607；若要种子增量从 tip 2bb07d84 新开干净 PR（仅可编辑 env/theme + 调试上传 40 条脱敏）。thread-beta 另开。

勿 tip。

— vm2api代码

cursor

Agentic security review completed for this head. One HIGH finding remains: host-side seed/telemetry I/O follows guest-writable bind-mount paths without the O_NOFOLLOW / temp+rename pattern already used for cluster slot files.

_{Sent by Cursor Security Agent: Security Reviewer}

cursor · 2026-10-19T13:33:42Z

+          claude_setting = fs
+            .readFileSync(path.join(homeDir, '.claude', 'claude.setting'), 'utf8')
+            .replace(/\r\n?/g, '\n')
+            .replace(/\n+$/g, '')


🔒 Agentic Security Review
Severity: HIGH

Host GET /api/panel/vms/:id/seed-settings now readFileSyncs cli-home/.claude/claude.setting (and, with ?debug=1, vms/<id>/run/telemetry-upload.log). PUT save writes the same claude.setting path via writeSlotSeedFiles using writeFileSync. Both directories are guest-writable bind mounts (/home/kincli, /run/kin). Cluster host I/O already treats the final path component as attacker-controlled and requires O_NOFOLLOW / temp+rename so a guest cannot redirect the control plane.

Impact: A process in the slot can replace those names with a symlink (for example to a sibling slot's credentials.json or internal.token). An admin opening or saving the seed page then leaks or overwrites the target in the host namespace. A FIFO on the same path can also stall the shared Node process.

^{Reviewed by Cursor Security Reviewer for commit fb2bd5f. Configure here.}

从 tip 拣出 #610 种子增量：settings.json env/theme 可编辑播种；契约 env（TZ/LANG/kill-switch/Bedrock/Vertex/gateway hint）与 autoUpdates/grove 只读；缺 CLAUDE_CODE_ATTRIBUTION_HEADER 默认 0。调试上传独立 query，切换不丢未保存编辑；Go sidecar 写脱敏 telemetry-upload.log。不含锁定确认流、空 TZ 跟 SOCKS5、VERSION。勿 tip。

dofastted added 20 commits October 19, 2026 15:03

feat(seed): add editable claude.setting to seed policy

ce99542

merge: 接入 main 上已合入的 thinking 显示与 kernel/cli payload

d7edadf

feat(vm): update Go slot services without VM rebuild

a7c3dfb

feat(protocol): 按模型和请求保留 auto compact 窗口

8997953

默认跟随请求模型，调用方窗口经内部字段送到当前 job，面板值可热配置。

fix(protocol): 清理 settings 前保留 auto compact 窗口

bb0a63c

窗口在入站清理前提取，再经内部字段进入 native body。

fix(web): 去掉协议页未使用的图标导入

a467c45

test(protocol): 确认清理后的 body 不再携带 compact 窗口

acb82f4

窗口必须在 settings 删除前提取，再传给 native body。

feat(vm): migrate legacy containers for service updates

ef9a730

fix(vm): restart kin-egress after its binary is replaced

09a125f

A replaced helper keeps the old inode and the listen port. Ownership now treats that process as down and the next start or fleet refresh stops every helper bound to the proxy config, including one the pidfile no longer names.

fix(vm): fail upgrade until a replaced kin-egress is restarted

0302892

Fleet refresh now waits for every helper bound to the proxy config to exit before binding the new one. install.sh no longer treats a failed refresh as a successful upgrade.

feat(web): 种子页按当前槽 settings.json 显示

e615b2f

账本列出文件里的真实配置项，claude.setting 可编辑后播种。遥测开/关与进程状态分开，种子页打开时 2 秒刷新。

fix(web): 空的 claude.setting 不再显示成默认配置

85db559

编辑框只显示当前槽文件的原文。文件缺失或为空都保持空白，不再回退到策略文本或默认串。

fix(panel): 缺失的 claude.setting 返回 null

2c62e8e

GET /seed-settings 不再用策略默认串填补不存在的文件。空文件仍返回空串，策略字段保持独立。

fix(protocol): pin message thread betas across turns

7776c55

feat(web): 种子配置项可直接编辑

c399c2d

settings.json 的 env 改成输入框，播种时写回。缺少 CLAUDE_CODE_ATTRIBUTION_HEADER 时默认 0。

feat(vm): 调试开关显示遥测实际上传

f8c0246

默认不拉取。打开后读取本槽 telemetry-upload.log，sidecar 在每次上传后追加正文。

fix(web): 种子账本保留顶层配置项

635008b

theme 可编辑并随播种写回。autoUpdates 与 grove_enabled 由播种固定，只读显示，不再被环境项过滤掉。

fix(vm): 遥测上传日志只保留最近四十行

9e61a36

落盘前去掉邮箱、账号、组织和设备标识。超过四十行时原子替换，不再无限追加。

fix(web): 播种后同时刷新调试中的种子查询

3099699

调试开关会改变查询键。保存成功按种子前缀失效，避免日志继续显示旧记录。

fix(vm): 调试日志记录实际上传的 events 包装

fb2bd5f

batch 日志改为 PostBatch 发出的 BatchRequest。身份字段仍在包装内删除。

cursor Bot reviewed Oct 19, 2026

View reviewed changes

dofastted closed this Oct 19, 2026

cursor Bot reviewed Oct 19, 2026

View reviewed changes

dofastted mentioned this pull request Oct 19, 2026

feat(seed): 可编辑 env/theme + 调试上传 40 条脱敏（#610 拆分） #611

Merged

cursor Bot deleted the fix/remote-slot-refresh branch October 19, 2026 13:56

dofastted mentioned this pull request Oct 19, 2026

种子配置默认锁定，时区跟随当前 SOCKS5 #612

Closed

2 of 3 tasks

Navigation Menu

Repository navigation

种子页可编辑当前槽配置，并记录遥测上传 - #610

种子页可编辑当前槽配置，并记录遥测上传#610
dofastted wants to merge 20 commits into
mainfrom
fix/remote-slot-refresh

dofastted commented Oct 19, 2026 •

edited by cursor Bot

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Oct 19, 2026

Uh oh!

cursor Bot Oct 19, 2026

Uh oh!

cursor Bot Oct 19, 2026

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dofastted commented Oct 19, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Oct 19, 2026

Choose a reason for hiding this comment

Seed save restarts kin-egress

Uh oh!

cursor Bot Oct 19, 2026

Choose a reason for hiding this comment

Fleet egress restarts race

Uh oh!

cursor Bot Oct 19, 2026

Choose a reason for hiding this comment

Seed env TZ edits discarded

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

dofastted commented Oct 19, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Oct 19, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dofastted commented Oct 19, 2026 •

edited by cursor Bot

Loading