Skip to content

feat: add terminal session monitoring and AI audit - #4904

Open
huanghongbo-hhb wants to merge 36 commits into
koderover:mainfrom
huanghongbo-hhb:feat/terminal-session-audit-v2
Open

feat: add terminal session monitoring and AI audit#4904
huanghongbo-hhb wants to merge 36 commits into
koderover:mainfrom
huanghongbo-hhb:feat/terminal-session-audit-v2

Conversation

@huanghongbo-hhb

@huanghongbo-hhb huanghongbo-hhb commented Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

  • Add terminal session recording, live monitoring, replay, termination, and bounded AI security audit.

Main Changes

  • Record pod exec, workflow debug, and SSH sessions with searchable command metadata.
  • Broadcast live output across replicas independently from recording; persist redacted AI results and mark truncated analysis as partial.

Risk / Compatibility

  • Adds system APIs and MongoDB collections/indexes; existing terminal APIs remain unchanged.

Test

  • Built all affected packages; compiled targeted audit and PodExec packages without running tests.

Contact: huanghongbo@koderover.com

This change is Reviewable

@huanghongbo-hhb
feat: add terminal session monitoring and AI audit
1b5eb5d 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
docs: remove terminal audit API documentation
15edf18 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
Merge remote-tracking branch 'upstream/main' into feat/terminal-sessi…
39a2235 
…on-audit-v2

Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(llm): share completion retry handling
333ec44 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): retry transient model responses
ae3eec5 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): keep audit records atomic
358ae07 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
chore(terminal-audit): add ai diagnostic logs
8056321 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): analyze chunks concurrently
ef320e9 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
chore(terminal-audit): improve model diagnostics
7a5139c 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(terminal-audit): clarify terminal sequences
42d5d52 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(terminal-audit): name terminal protocol bytes
599a40a 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(terminal-audit): parse wrapped commands
1dc57db 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): expire stale ai analyses
c3469a8 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): scope ai timeouts per chunk
148118c 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): avoid echoing commands in ai output
3f4f953 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): scope findings to chunk commands
6f7f911 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): harden analysis and recording
cbacdb7 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(terminal-audit): remove incidental behavior changes
fbc0f01 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor(podexec): preserve terminal error behavior
cd88d06 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
chore(terminal-audit): remove temporary ai diagnostics
5db8b63 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): align backend pagination limits
321b915 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(podexec): close terminal session on disconnect
1e546b4 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): ignore shell startup as standalone risk
6f946a3 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): fix prompt string syntax
f70f606 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): discard tui input after exit
e988ab1 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix(terminal-audit): restore pod service metadata
1631d43 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor: simplify terminal audit flow and preserve APIs
74d19b7 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
huanghongbo-hhb force-pushed the feat/terminal-session-audit-v2 branch from ea9b08b to 74d19b7 Compare September 1, 2026 08:56
@huanghongbo-hhb
fix: preserve terminal audit result defaults
1f1662b 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix: preserve terminal option masking behavior
0d12350 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor: remove redundant terminal audit guards
6c68a52 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor: remove unreachable terminal audit fallbacks
b520831 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/common/repository/models/terminal_audit.go Outdated
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/common/repository/models/terminal_audit.go Outdated
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/common/repository/mongodb/s3.go
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/common/repository/mongodb/terminal_audit_ai_result.go Outdated
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/common/repository/mongodb/terminal_command.go
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/aslan/core/system/handler/terminal_audit.go Outdated
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/podexec/core/service/ws_terminal.go Outdated
PetrusZ
PetrusZ reviewed Sep 3, 2026
View reviewed changes
Comment thread pkg/microservice/podexec/core/service/workflow_debug.go Outdated
@huanghongbo-hhb
refactor: simplify terminal audit data flow
5d1f224 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix: rename terminal audit permission label
3bb2c36 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor: group terminal session fields
1eb1bf7 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
refactor: clarify terminal session field groups
4128922 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
@huanghongbo-hhb
fix: avoid blocking terminal session close
90af0bd 
Signed-off-by: huanghongbo-hhb <huanghongbo@koderover.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PetrusZ PetrusZ PetrusZ approved these changes
@Cynthia-0203 Cynthia-0203 Awaiting requested review from Cynthia-0203

Assignees

No one assigned

Labels

common service/aslan

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@huanghongbo-hhb @PetrusZ