pilichoumao commented on PR #4665: URL: https://github.com/apache/rocketmq-dashboard/pull/4665#issuecomment-5756459137
Context that may help review: single-use consumption is already a documented invariant of this codebase. [docs/ai-agent-architecture.md §9 (安全不变量)](https://github.com/apache/rocketmq-dashboard/blob/5b761df8362eaf464c0b86ebea27e7e9576dd08f/docs/ai-agent-architecture.md) states: > L2/L3 变更走工具协议自身的两步：dry-run 返回 `confirm_token`，apply 消费它。服务端由 `ToolMutationFilter` + `ToolTokenService` + `studio.ai.allow-l3-tools`（默认 `false`）强制。 Before this PR, `ToolTokenService.verify()` validated the token but never consumed it, so the documented "apply consumes it" invariant did not actually hold — one valid token could drive the same non-idempotent mutation repeatedly. This PR closes exactly that documentation-implementation gap and claims no semantics beyond the documented contract (cross-request idempotency, restart recovery and distributed consumption are explicitly out of scope). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
