refactor(remote): rename probe and tunnel telemetry fields

benches/webdav_provider_range.rs

@@ -690,10 +690,10 @@ fn build_remote_provider() -> BenchResult<ProviderBuild> {
         is_enabled: true,
         transport_mode: RemoteNodeTransportMode::Direct,
         last_capabilities: stored_capabilities,
-        last_error: String::new(),
-        last_checked_at: None,
-        tunnel_last_error: String::new(),
-        tunnel_last_seen_at: None,
+        last_probe_error: String::new(),
+        last_probe_at: None,
+        tunnel_runtime_error: String::new(),
+        tunnel_last_handshake_at: None,
         binding_revision: 1,
         binding_applied_revision: 0,
         created_at: now,

crates/aster_drive_migration/src/lib.rs

@@ -70,6 +70,7 @@ mod m20260813_000001_canonical_file_revision_ledger;
 mod m20260815_000001_virtual_empty_file_blobs;
 mod m20260817_000001_add_remote_binding_control_state;
 mod m20260820_000001_remove_storage_policy_legacy;
+mod m20260821_000001_rename_remote_node_telemetry;
 pub const BASELINE_MIGRATION_NAME: &str = "m20260512_000001_baseline_schema";
 
 const MIGRATION_TABLE: &str = "seaql_migrations";
@@ -213,6 +214,7 @@ impl MigratorTrait for CurrentMigrator {
                 m20260817_000001_add_remote_binding_control_state::Migration,
             ),
             Box::new(m20260820_000001_remove_storage_policy_legacy::Migration),
+            Box::new(m20260821_000001_rename_remote_node_telemetry::Migration),
         ]
     }
 }

crates/aster_drive_migration/src/m20260821_000001_rename_remote_node_telemetry.rs

@@ -0,0 +1,92 @@
+//! 数据库迁移：明确区分 remote-node probe 与 reverse-tunnel 运行态字段。
+
+use sea_orm_migration::prelude::*;
+
+#[derive(DeriveMigrationName)]
+pub struct Migration;
+
+#[async_trait::async_trait]
+impl MigrationTrait for Migration {
+    async fn up(&self, manager: &SchemaManager) -> Result<(), DbErr> {
+        // SQLite 对单条 ALTER TABLE 的支持最稳定；四个列逐一重命名并保留原值。
+        rename_column(
+            manager,
+            ManagedFollowers::LastError,
+            ManagedFollowers::LastProbeError,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::LastCheckedAt,
+            ManagedFollowers::LastProbeAt,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::TunnelLastError,
+            ManagedFollowers::TunnelRuntimeError,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::TunnelLastSeenAt,
+            ManagedFollowers::TunnelLastHandshakeAt,
+        )
+        .await
+    }
+
+    async fn down(&self, manager: &SchemaManager) -> Result<(), DbErr> {
+        rename_column(
+            manager,
+            ManagedFollowers::LastProbeError,
+            ManagedFollowers::LastError,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::LastProbeAt,
+            ManagedFollowers::LastCheckedAt,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::TunnelRuntimeError,
+            ManagedFollowers::TunnelLastError,
+        )
+        .await?;
+        rename_column(
+            manager,
+            ManagedFollowers::TunnelLastHandshakeAt,
+            ManagedFollowers::TunnelLastSeenAt,
+        )
+        .await
+    }
+}
+
+async fn rename_column(
+    manager: &SchemaManager<'_>,
+    from: ManagedFollowers,
+    to: ManagedFollowers,
+) -> Result<(), DbErr> {
+    manager
+        .alter_table(
+            Table::alter()
+                .table(ManagedFollowers::Table)
+                .rename_column(from, to)
+                .to_owned(),
+        )
+        .await
+}
+
+#[derive(DeriveIden)]
+enum ManagedFollowers {
+    Table,
+    LastError,
+    LastCheckedAt,
+    TunnelLastError,
+    TunnelLastSeenAt,
+    LastProbeError,
+    LastProbeAt,
+    TunnelRuntimeError,
+    TunnelLastHandshakeAt,
+}

crates/aster_drive_model/src/entities/managed_follower.rs

@@ -31,19 +31,19 @@ pub struct Model {
     /// Capabilities returned by the most recent explicit remote-node probe.
     pub last_capabilities: String,
     /// Error from the most recent explicit remote-node probe or connection test.
-    pub last_error: String,
+    pub last_probe_error: String,
     #[cfg_attr(all(debug_assertions, feature = "openapi"), schema(value_type = Option<String>))]
-    /// Time at which `last_capabilities` and `last_error` were recorded.
-    pub last_checked_at: Option<DateTimeUtc>,
+    /// Time at which `last_capabilities` and `last_probe_error` were recorded.
+    pub last_probe_at: Option<DateTimeUtc>,
     /// Transient reverse-tunnel runtime error; a successful poll or stream handshake clears it.
-    pub tunnel_last_error: String,
+    pub tunnel_runtime_error: String,
     /// Desired binding-control revision generated by the primary.
     pub binding_revision: i64,
     /// Latest binding-control revision applied by the follower.
     pub binding_applied_revision: i64,
     #[cfg_attr(all(debug_assertions, feature = "openapi"), schema(value_type = Option<String>))]
     /// Last successful reverse-tunnel poll or stream handshake observed by this primary.
-    pub tunnel_last_seen_at: Option<DateTimeUtc>,
+    pub tunnel_last_handshake_at: Option<DateTimeUtc>,
     #[cfg_attr(all(debug_assertions, feature = "openapi"), schema(value_type = String))]
     /// Time at which the remote node record was created.
     pub created_at: DateTimeUtc,
@@ -63,12 +63,12 @@ impl fmt::Debug for Model {
             .field("is_enabled", &self.is_enabled)
             .field("transport_mode", &self.transport_mode)
             .field("last_capabilities", &self.last_capabilities)
-            .field("last_error", &self.last_error)
-            .field("last_checked_at", &self.last_checked_at)
-            .field("tunnel_last_error", &self.tunnel_last_error)
+            .field("last_probe_error", &self.last_probe_error)
+            .field("last_probe_at", &self.last_probe_at)
+            .field("tunnel_runtime_error", &self.tunnel_runtime_error)
             .field("binding_revision", &self.binding_revision)
             .field("binding_applied_revision", &self.binding_applied_revision)
-            .field("tunnel_last_seen_at", &self.tunnel_last_seen_at)
+            .field("tunnel_last_handshake_at", &self.tunnel_last_handshake_at)
             .field("created_at", &self.created_at)
             .field("updated_at", &self.updated_at)
             .finish()
@@ -97,11 +97,11 @@ impl ActiveModelBehavior for ActiveModel {
             if !self.transport_mode.is_set() {
                 self.transport_mode = Set(RemoteNodeTransportMode::Direct);
             }
-            if !self.tunnel_last_error.is_set() {
-                self.tunnel_last_error = Set(String::new());
+            if !self.tunnel_runtime_error.is_set() {
+                self.tunnel_runtime_error = Set(String::new());
             }
-            if !self.tunnel_last_seen_at.is_set() {
-                self.tunnel_last_seen_at = Set(None);
+            if !self.tunnel_last_handshake_at.is_set() {
+                self.tunnel_last_handshake_at = Set(None);
             }
         }
         Ok(self)
@@ -124,12 +124,12 @@ mod tests {
             is_enabled: true,
             transport_mode: RemoteNodeTransportMode::Direct,
             last_capabilities: "{}".to_string(),
-            last_error: String::new(),
-            last_checked_at: None,
-            tunnel_last_error: String::new(),
+            last_probe_error: String::new(),
+            last_probe_at: None,
+            tunnel_runtime_error: String::new(),
             binding_revision: 1,
             binding_applied_revision: 0,
-            tunnel_last_seen_at: None,
+            tunnel_last_handshake_at: None,
             created_at: now,
             updated_at: now,
         };

developer-docs/en/api/admin.md

@@ -352,10 +352,11 @@ Notes:
 - `reverse_tunnel` requires the follower to actively connect back to `/api/v1/internal/remote-tunnel/*`
 - `auto` uses direct when `base_url` is non-empty and reverse tunnel otherwise
 - empty `base_url` usually means the enrollment flow will complete binding later
-- remote-node details include `transport_mode`, `enrollment_status`, `last_error`, `capabilities`, `last_checked_at`, and `tunnel`
-- `last_error` and `last_checked_at` belong to the explicit capability probe or connection test; they describe the most recent probe rather than reverse-tunnel runtime health
-- `tunnel.status` is derived from recent poll / stream handshakes and the online TTL; `tunnel.last_seen_at` is the primary's most recent successful handshake time
-- `tunnel.last_error` is transient reverse-tunnel runtime telemetry. The next successful poll / stream handshake clears it; it is not a historical error log and must not be conflated with the node probe `last_error`
+- remote-node details include `transport_mode`, `enrollment_status`, `last_probe_error`, `capabilities`, `last_probe_at`, and `tunnel`
+- `last_probe_error` and `last_probe_at` belong to the explicit capability probe or connection test; they describe the most recent probe rather than reverse-tunnel runtime health
+- `tunnel.status` is derived from recent poll / stream handshakes and the online TTL; `tunnel.last_handshake_at` is the primary's most recent successful handshake time
+- `tunnel.runtime_error` is transient reverse-tunnel runtime telemetry. The next successful poll / stream handshake clears it; it is not a historical error log and must not be conflated with the node probe `last_probe_error`
+- The renamed fields are the public management contract: the old names are removed without response aliases, so API clients must migrate to `last_probe_error`, `last_probe_at`, `tunnel.runtime_error`, and `tunnel.last_handshake_at` together. The database migration renames columns in place and preserves their values.
 - reverse tunnel cannot be combined with remote browser presigned upload / download strategies
 - remote storage target request bodies match the follower internal storage protocol; see [Internal storage protocol](./internal-storage.md)
 

developer-docs/zh-CN/api/admin.md

@@ -373,10 +373,11 @@ POST /api/v1/admin/policies/action
 - `base_url` 为空时通常走 enrollment 流程，由 follower 兑换绑定信息后再完成实际接入
 - `/enrollment-token` 返回给 CLI 使用的命令信息；follower 会再调用公开 enrollment 接口完成 redeem / ack
 - `GET /admin/remote-nodes` 支持 `limit`、`offset`、`sort_by`、`sort_order`
-- 远端节点详情会返回 `transport_mode`、`enrollment_status`、`last_error`、`capabilities`、`last_checked_at` 和 `tunnel`
-- `last_error` / `last_checked_at` 属于显式 capability probe 或 connection test；它们描述最近一次探测，不是 reverse tunnel 的运行态
-- `tunnel.status` 根据最近 poll / stream handshake 和在线 TTL 推导；`tunnel.last_seen_at` 是 primary 最近一次成功握手时间
-- `tunnel.last_error` 是 reverse tunnel 运行态的暂时错误。下一次成功 poll / stream handshake 会清空它；它不是历史错误日志，也不应与节点探测的 `last_error` 混用
+- 远端节点详情会返回 `transport_mode`、`enrollment_status`、`last_probe_error`、`capabilities`、`last_probe_at` 和 `tunnel`
+- `last_probe_error` / `last_probe_at` 属于显式 capability probe 或 connection test；它们描述最近一次探测，不是 reverse tunnel 的运行态
+- `tunnel.status` 根据最近 poll / stream handshake 和在线 TTL 推导；`tunnel.last_handshake_at` 是 primary 最近一次成功握手时间
+- `tunnel.runtime_error` 是 reverse tunnel 运行态的暂时错误。下一次成功 poll / stream handshake 会清空它；它不是历史错误日志，也不应与节点探测的 `last_probe_error` 混用
+- 这些重命名后的字段属于公开管理契约：旧名称不再返回，也不保留响应 alias，API 客户端需要一次性迁移到 `last_probe_error`、`last_probe_at`、`tunnel.runtime_error` 和 `tunnel.last_handshake_at`。数据库迁移只重命名列并保留原值。
 - reverse tunnel 模式不能配合 remote 浏览器预签名上传 / 下载策略使用。创建或更新远端策略、切换远端节点传输模式时，如果引用该节点的策略使用 `remote_upload_strategy = "presigned"` 或 `remote_download_strategy = "presigned"`，服务端会拒绝这个组合
 - 远程存储目标的请求体和 follower 内部协议一致，见 [内部存储协议](./internal-storage.md)
 

frontend-panel/src/components/admin/admin-remote-nodes-page/RemoteNodeDialog.test.tsx

@@ -181,8 +181,8 @@ const remoteNode = (
 	base_url: "https://edge.example.com",
 	is_enabled: true,
 	enrollment_status: "not_started",
-	last_error: "",
-	last_checked_at: null,
+	last_probe_error: "",
+	last_probe_at: null,
 	capabilities: {
 		protocol_version: "v1",
 		supports_list: true,

frontend-panel/src/components/admin/admin-remote-nodes-page/RemoteNodeDialogCards.tsx

@@ -245,30 +245,31 @@ export function RemoteNodeDiagnosticsCard({
 							{getRemoteNodeTunnelLabel(t, editingNode)}
 						</Badge>
 						<div className="break-all text-xs text-muted-foreground">
-							{t("remote_node_tunnel_last_seen")}:{" "}
-							{formatLastChecked(t, editingNode.tunnel?.last_seen_at)}
+							{t("remote_node_tunnel_last_handshake")}:{" "}
+							{formatLastChecked(t, editingNode.tunnel?.last_handshake_at)}
 						</div>
 						<div className="break-all text-xs text-muted-foreground">
-							{t("remote_node_tunnel_last_error")}:{" "}
-							{editingNode.tunnel?.last_error ||
-								t("remote_node_last_error_empty")}
+							{t("remote_node_tunnel_runtime_error")}:{" "}
+							{editingNode.tunnel?.runtime_error ||
+								t("remote_node_last_probe_error_empty")}
 						</div>
 					</dd>
 				</div>
 				<div>
 					<dt className="text-[11px] font-medium uppercase tracking-[0.14em] text-muted-foreground">
-						{t("remote_node_last_checked")}
+						{t("remote_node_last_probe_at")}
 					</dt>
 					<dd className="mt-1 break-all font-medium">
-						{formatLastChecked(t, editingNode.last_checked_at)}
+						{formatLastChecked(t, editingNode.last_probe_at)}
 					</dd>
 				</div>
 				<div>
 					<dt className="text-[11px] font-medium uppercase tracking-[0.14em] text-muted-foreground">
-						{t("remote_node_last_error")}
+						{t("remote_node_last_probe_error")}
 					</dt>
 					<dd className="mt-1 break-all font-medium">
-						{editingNode.last_error || t("remote_node_last_error_empty")}
+						{editingNode.last_probe_error ||
+							t("remote_node_last_probe_error_empty")}
 					</dd>
 				</div>
 				<div>

frontend-panel/src/components/admin/admin-remote-nodes-page/RemoteNodesTable.test.tsx

@@ -66,12 +66,12 @@ const remoteNode = (
 	transport_mode: "direct",
 	is_enabled: true,
 	enrollment_status: "not_started",
-	last_error: "",
-	last_checked_at: null,
+	last_probe_error: "",
+	last_probe_at: null,
 	tunnel: {
 		status: "offline",
-		last_error: "",
-		last_seen_at: null,
+		runtime_error: "",
+		last_handshake_at: null,
 	},
 	capabilities: {
 		protocol_version: "v1",
@@ -190,8 +190,8 @@ describe("RemoteNodesTable", () => {
 	it("shows deleting and generating states without firing disabled actions", () => {
 		const node = remoteNode({
 			enrollment_status: "pending",
-			last_error: "storage unavailable",
-			last_checked_at: "2026-05-29T08:00:00Z",
+			last_probe_error: "storage unavailable",
+			last_probe_at: "2026-05-29T08:00:00Z",
 		});
 		const onGenerateEnrollmentCommand = vi.fn();
 		const onRequestDelete = vi.fn();
@@ -235,11 +235,11 @@ describe("RemoteNodesTable", () => {
 		renderTable({
 			items: [
 				remoteNode({
-					last_error: nodeError,
+					last_probe_error: nodeError,
 					tunnel: {
 						status: "offline",
-						last_error: tunnelError,
-						last_seen_at: null,
+						runtime_error: tunnelError,
+						last_handshake_at: null,
 					},
 				}),
 			],

frontend-panel/src/components/admin/admin-remote-nodes-page/RemoteNodesTable.tsx

@@ -100,7 +100,7 @@ export function RemoteNodesTable({
 					</AdminSortableTableHead>
 					<TableHead>{t("remote_node_transport_mode")}</TableHead>
 					<AdminSortableTableHead
-						sortKey="last_checked_at"
+						sortKey="last_probe_at"
 						sortBy={sortBy}
 						sortOrder={sortOrder}
 						onSortChange={onSortChange}
@@ -200,9 +200,9 @@ export function RemoteNodesTable({
 											{getRemoteNodeTunnelLabel(t, node)}
 										</Badge>
 									</div>
-									{node.tunnel?.last_error ? (
+									{node.tunnel?.runtime_error ? (
 										<div className="line-clamp-2 text-xs text-muted-foreground">
-											{node.tunnel.last_error}
+											{node.tunnel.runtime_error}
 										</div>
 									) : null}
 								</div>
@@ -231,7 +231,7 @@ export function RemoteNodesTable({
 										</Badge>
 									</div>
 									<div className="text-xs text-muted-foreground">
-										{formatLastChecked(t, node.last_checked_at)}
+										{formatLastChecked(t, node.last_probe_at)}
 									</div>
 								</div>
 							</div>