fix lint

internal/apps/openflare/relay/errs.go

@@ -1,9 +1,11 @@
 // Copyright 2026 Arctel.net
 // SPDX-License-Identifier: Apache-2.0
 
+// Package relay provides relay node management and authentication for the OpenFlare platform.
 package relay
 
 const (
+	//nolint:gosec // error message text, not a credential
 	errAgentTokenInvalid     = "无权进行此操作，Agent Token 无效"
 	errRelayNodeTypeMismatch = "此节点不是 TunnelRelay 类型"
 )

internal/apps/openflare/relay/helpers.go

@@ -10,12 +10,17 @@ import (
 	"github.com/Rain-kl/Wavelet/internal/model"
 )
 
+const (
+	relayStatusUnhealthy = "unhealthy"
+	releaseChannelStable = "stable"
+)
+
 func normalizeRelayStatus(status string) string {
 	switch strings.ToLower(strings.TrimSpace(status)) {
 	case "healthy":
 		return "healthy"
-	case "unhealthy":
-		return "unhealthy"
+	case relayStatusUnhealthy:
+		return relayStatusUnhealthy
 	default:
 		return "unknown"
 	}
@@ -25,7 +30,7 @@ func normalizeReleaseChannel(channel string) string {
 	if strings.ToLower(strings.TrimSpace(channel)) == "preview" {
 		return "preview"
 	}
-	return "stable"
+	return releaseChannelStable
 }
 
 func resolveReportedNodeIP(reportedIP string, remoteAddr string) string {
@@ -98,7 +103,7 @@ func BuildSettings(node *model.OpenFlareNode, updateNow bool, updateChannel, upd
 		autoUpdate = node.AutoUpdateEnabled
 	}
 	if strings.TrimSpace(updateChannel) == "" {
-		updateChannel = "stable"
+		updateChannel = releaseChannelStable
 	}
 	return &Settings{
 		HeartbeatInterval:       model.AgentHeartbeatInterval,

internal/apps/openflare/relay/logics.go

@@ -41,7 +41,7 @@ func Heartbeat(ctx context.Context, node *model.OpenFlareNode, payload Heartbeat
 		"last_seen_at":     now,
 		"status":           nodeStatusOnline,
 		"update_requested": false,
-		"update_channel":   "stable",
+		"update_channel":   releaseChannelStable,
 		"update_tag":       "",
 	}
 	if payload.Name != "" && strings.TrimSpace(node.Name) == "" {
@@ -55,7 +55,7 @@ func Heartbeat(ctx context.Context, node *model.OpenFlareNode, payload Heartbeat
 	if !previous.UpdateRequested {
 		delete(changes, "update_requested")
 	}
-	if previous.UpdateChannel == "stable" {
+	if previous.UpdateChannel == releaseChannelStable {
 		delete(changes, "update_channel")
 	}
 	if previous.UpdateTag == "" {
@@ -66,7 +66,7 @@ func Heartbeat(ctx context.Context, node *model.OpenFlareNode, payload Heartbeat
 	node.ExtVersion = payload.ExtVersion
 	node.RelayStatus = payload.RelayStatus
 	node.UpdateRequested = false
-	node.UpdateChannel = "stable"
+	node.UpdateChannel = releaseChannelStable
 	node.UpdateTag = ""
 	lastSeen := now
 	node.LastSeenAt = &lastSeen

internal/apps/openflare/relay/middleware.go

@@ -16,8 +16,8 @@ import (
 
 const ctxRelayNodeKey = "relay_node"
 
-// RelayAuth authenticates relay requests using X-Agent-Token and verifies tunnel_relay type.
-func RelayAuth() gin.HandlerFunc {
+// Auth authenticates relay requests using X-Agent-Token and verifies tunnel_relay type.
+func Auth() gin.HandlerFunc {
 	return func(c *gin.Context) {
 		token := strings.TrimSpace(c.GetHeader("X-Agent-Token"))
 		node, err := authenticateAccessToken(c.Request.Context(), token)
@@ -46,4 +46,4 @@ func authenticateAccessToken(ctx context.Context, token string) (*model.OpenFlar
 		return nil, err
 	}
 	return node, nil
-}
+}

internal/apps/openflare/relay/middleware_test.go

@@ -55,7 +55,7 @@ func TestRelayAuthMissingToken(t *testing.T) {
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
 	engine.Use(response.ErrorHandlerMiddleware())
-	engine.GET("/relay/test", RelayAuth(), func(c *gin.Context) {
+	engine.GET("/relay/test", Auth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})
 
@@ -74,7 +74,7 @@ func TestRelayAuthRejectsWrongNodeType(t *testing.T) {
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
 	engine.Use(response.ErrorHandlerMiddleware())
-	engine.GET("/relay/test", RelayAuth(), func(c *gin.Context) {
+	engine.GET("/relay/test", Auth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})
 
@@ -93,7 +93,7 @@ func TestRelayAuthAcceptsTunnelRelay(t *testing.T) {
 
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
-	engine.GET("/relay/test", RelayAuth(), func(c *gin.Context) {
+	engine.GET("/relay/test", Auth(), func(c *gin.Context) {
 		authNode, ok := c.Get(ctxRelayNodeKey)
 		require.True(t, ok)
 		assert.Equal(t, node.NodeID, authNode.(*model.OpenFlareNode).NodeID)

internal/apps/openflare/relay/observability.go

@@ -24,7 +24,7 @@ func reconcileRelayHealthEvents(ctx context.Context, nodeID string, relayStatus
 		relayFrpsUnhealthyEventType: {},
 	}
 	events := []agent.NodeHealthEvent{}
-	if relayStatus == "unhealthy" {
+	if relayStatus == relayStatusUnhealthy {
 		events = append(events, agent.NodeHealthEvent{
 			EventType:       relayFrpsUnhealthyEventType,
 			Severity:        "critical",

internal/apps/openflare/relay/protocol_alias.go

@@ -5,8 +5,17 @@ package relay
 
 import pkgprotocol "github.com/Rain-kl/Wavelet/pkg/protocol"
 
+// ProxyStat is an alias for protocol.RelayProxyStat.
 type ProxyStat = pkgprotocol.RelayProxyStat
+
+// HeartbeatPayload is an alias for protocol.RelayHeartbeatPayload.
 type HeartbeatPayload = pkgprotocol.RelayHeartbeatPayload
+
+// Config is an alias for protocol.RelayConfig.
 type Config = pkgprotocol.RelayConfig
+
+// Settings is an alias for protocol.RelaySettings.
 type Settings = pkgprotocol.RelaySettings
-type HeartbeatResponse = pkgprotocol.RelayHeartbeatResponse
+
+// HeartbeatResponse is an alias for protocol.RelayHeartbeatResponse.
+type HeartbeatResponse = pkgprotocol.RelayHeartbeatResponse