fix: fix inconsistent naming pattern

[JisoLya]

Currently, the configuration keys in rest-server.properties use snake_case (e.g., server_port), which is inconsistent with the naming convention expected by ServerOptions.java. This mismatch causes the following issues:

• User-defined configurations are ignored at startup.
• The server defaults to hardcoded values in ServerOptions.java.

Terminal logs show warnings such as: "arthas.xxxx is redundant ...", indicating that the properties are not being recognized or registered.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 1.57%. Comparing base (fc391a7) to head (bda5d52).

❗ There is a different number of reports uploaded between BASE (fc391a7) and HEAD (bda5d52). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (fc391a7)	HEAD (bda5d52)
	3	2

Additional details and impacted files

@@             Coverage Diff              @@
##             master   #2945       +/-   ##
============================================
- Coverage     35.61%   1.57%   -34.04%     
+ Complexity      333      43      -290     
============================================
  Files           801     779       -22     
  Lines         67533   65018     -2515     
  Branches       8780    8332      -448     
============================================
- Hits          24053    1026    -23027     
- Misses        40916   63906    +22990     
+ Partials       2564      86     -2478     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

This PR enhances security for Arthas debugging endpoints by restricting remote access and standardizing configuration naming patterns across the codebase.

Changes:

• Added localhost-only access restriction to the store node's arthasstart endpoint
• Standardized Arthas configuration property names from snake_case to camelCase (e.g., arthas.telnet_port → arthas.telnetPort)
• Changed default Arthas IP binding from 0.0.0.0 to 127.0.0.1 and expanded disabled commands to include jad,ognl,vmtool

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
hugegraph-store/hg-store-node/src/main/resources/application.yml	Added Arthas configuration with localhost-only IP binding and expanded disabled commands
hugegraph-store/hg-store-node/src/main/java/org/apache/hugegraph/store/node/controller/PartitionAPI.java	Added remote access check to arthasstart endpoint and new forbiddenMap helper method
hugegraph-store/hg-store-node/src/main/java/org/apache/hugegraph/store/node/AppConfig.java	Updated default values for Arthas IP and disabled commands
hugegraph-server/hugegraph-dist/src/assembly/static/conf/rest-server.properties	Renamed Arthas properties to camelCase and updated default values
hugegraph-server/hugegraph-api/src/main/java/org/apache/hugegraph/config/ServerOptions.java	Updated default values for Arthas IP binding and disabled commands

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Due to the lack of activity, the current pr is marked as stale and will be closed after 180 days, any update will remove the stale label

[VGalaxies]

Review summary

• Blocking: yes
• Summary: A success path can now throw while constructing the response because nullable payloads are passed into Map.of().
• Evidence:
  • Static review of git diff origin/master...HEAD and PartitionAPI.ok(...).

[VGalaxies]

High: Null success payloads now throw

hugegraph-store/hg-store-node/src/main/java/org/apache/hugegraph/store/node/controller/PartitionAPI.java:174

Evidence

• dumpPartition() returns ok("ok", null) here and cleanPartition() does the same at line 189, while the new helper builds Map.of("status", 200, k, v) at line 238. Java Map.of() rejects null keys or values and throws NullPointerException.

Impact

• GET /v1/partition/dump/{id} and GET /v1/partition/clean/{id} can return HTTP 500 after the operation succeeds; for clean, the data may already have been modified before response construction fails.

Requested fix

• Build the response with a nullable map implementation such as HashMap/LinkedHashMap, or stop passing null values into ok(...).