You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maka.apache.org by "Phoenix500526 (via GitHub)" <gi...@apache.org> on 2026/08/31 07:50:16 UTC
[I] tracking(bots): harden onboarding after V1 [maka]
Phoenix500526 opened a new issue, #4327:
URL: https://github.com/apache/maka/issues/4327
## Problem
V1 IM onboarding is implemented, but its remaining security, authorization,
observability, packaging, and provider-lifecycle work exists only in the
architecture document. Without a focused tracker, the shipped onboarding path
can stay partially hardened indefinitely.
## Completed baseline
- #1197 added main-process-owned QR onboarding, secret-free renderer snapshots, fenced credential commit/rollback, runtime reconciliation, and manual fallback.
- #1526 extended onboarding/runtime coverage to QQ, Slack, and WhatsApp.
- Existing sessions keep credentials in the owner-only settings boundary and never expose raw provider responses to the renderer.
## Remaining work
- [ ] Move bot secrets into a Keychain-backed credential authority while preserving masked renderer projection
- [ ] Add pairing approval and a remote permission-profile policy
- [ ] Add bounded retry telemetry and redacted, diagnosable health events
- [ ] Add a packaged Electron smoke for native architecture, ASAR resolution, and SDK resources
- [ ] Define provider-specific revoke/delete behavior while keeping local-only cancellation explicit where necessary
## Non-goals
- Replacing the Bot runtime or moving onboarding into MCP
- Removing provider-specific manual setup
- Exposing secrets, device codes, poll tokens, or raw provider errors
- Bot reply streaming, which is tracked separately by #2504
## Design
- [IM onboarding runtime architecture](https://github.com/apache/maka/blob/main/docs/architecture/bot-onboarding-runtime.zh-CN.md)
- V1 implementation: #1197
- Additional providers: #1526
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] tracking(bots): harden onboarding after V1 [maka]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #4327:
URL: https://github.com/apache/maka/issues/4327#issuecomment-5987850256
<!-- maka-lifecycle:stale-warning -->
This issue has had no human activity for 30 days and has been marked stale. It will be closed in 30 days unless someone comments.
If the issue is still current, please confirm it against the latest `main` and add any information that would help move it forward. Assigned issues and issues labelled `pinned` are exempt from this policy.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] tracking(bots): harden onboarding after V1 [maka]
Posted by "testikun (via GitHub)" <gi...@apache.org>.
testikun commented on issue #4327:
URL: https://github.com/apache/maka/issues/4327#issuecomment-5537529562
The bounded retry-telemetry checklist item now has a focused child issue: #4745 tracks finite redacted onboarding retry-health projection and existing-surface UI status, without changing retry policy or exposing raw provider errors.
_Posted with OpenAI Codex assistance on behalf of @testikun._
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org