Commit Graph

66 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] e7214e21b7
refactor: address code review - simplify snapshot init, deduplicate IP extraction
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/1de8212f-1deb-462f-8d19-03f82a7ec9fe

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 10:59:38 +00:00
copilot-swe-agent[bot] 1492ba0009
fix: remove clickable links from emails, add public auth page with verification code input
- email-hub.js: Remove all <a href> links from bandwidth-auth and V3 subscription emails
  - Emails now contain only verification code + plain text URL guidance
  - Guide users to manually type guanghulab.online/auth in Chrome browser
  - Remove authPageUrl parameter from sendBandwidthAuthEmail()
  - Remove bwAuthUrl from generateSubscriptionV3Email()
  - Simplify CLI bandwidth-auth and batch sendBandwidthAuthAllEmail()

- subscription-server-v3.js: Add public bandwidth-auth-open endpoint
  - GET /bandwidth-auth-open: Public auth page with email + code input + consent checkbox + "我同意授权" button
  - POST /bandwidth-auth-open: Validate email + code, register contributor, save operation snapshot
  - Add saveAuthSnapshot() function for user operation audit trail
  - Update existing token-based auth page button text to "我同意授权"
  - Add snapshot saving to existing token-based auth POST handler
  - Remove authPageUrl from /bandwidth-send-code/{token} endpoint

- zhuyuan-sovereign.conf: Add /auth short path proxy in preview domain
  - guanghulab.online/auth → V3 subscription service /bandwidth-auth-open
  - Users type short URL instead of full API path

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/1de8212f-1deb-462f-8d19-03f82a7ec9fe

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 10:57:22 +00:00
copilot-swe-agent[bot] bc8af453e5
fix: 提取验证码冷却常量 + Nginx桥接协议说明注释
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5deef078-5765-44a5-b9bf-03476c0fddce

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 10:25:34 +00:00
copilot-swe-agent[bot] eab7e2057e
refactor: 邮件模板语言专业化 + 新增V3订阅邮件 + 带宽授权域名切换guanghulab.online
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5deef078-5765-44a5-b9bf-03476c0fddce

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 10:18:51 +00:00
copilot-swe-agent[bot] 506dd2dc39
feat: 增加带宽验证码一键发送/单独发送工作流 + VPN系统介绍邮件模板
- email-hub.js: 新增 getVpnSystemIntroHtml() VPN系统介绍模块(技术架构+版本号)
- email-hub.js: generateUpdateNotifyEmail() 加入VPN系统介绍和版本号展示
- email-hub.js: generateBandwidthAuthEmail() 加入VPN系统介绍,优化用户选择说明
- email-hub.js: 新增 sendBandwidthAuthAllEmail() 一键批量发送验证码
- email-hub.js: CLI新增 bandwidth-auth-all 命令
- infinity-evolution.yml: 新增 send-bandwidth-auth (一键全发) 和 send-bandwidth-auth-single (单独发送) 工作流操作

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/05c6782a-aa52-420c-8b7f-3de5ecda8da5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 09:42:52 +00:00
copilot-swe-agent[bot] 85125fd1c8
修复代码审查反馈:移除zoom禁用(可访问性)、修复Outlook引号、移除邮件transition、优化字体栈
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b8228c73-6b93-4af9-95a3-6c21b541e045

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 09:09:44 +00:00
copilot-swe-agent[bot] b2d6940e47
重构邮件模板:响应式设计 + 视觉优化 + 修复验证码通道缺失
邮件模板重构:
- wrapEmailTemplate: 添加viewport meta、@media响应式断点(620px/400px)、
  暗色模式支持、table布局兼容Outlook、改善排版层次和间距
- 8种邮件类型全部优化: 更大padding、更好的字体层次、卡片式信息块、
  交替行背景色表格、更宽松的行距(1.8→1.9/2.2)
- 反馈按钮升级为渐变色样式

验证码通道修复:
- CLI bandwidth-auth命令: 根据邮箱查找用户token,构建authPageUrl,
  确保邮件中包含「前往授权页面输入验证码」按钮
- 带宽授权页面(subscription-server-v3.js): 增加@media响应式断点
  (520px/380px)、改善触控体验(更大点击区域)、focus状态增加box-shadow

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b8228c73-6b93-4af9-95a3-6c21b541e045

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 09:07:49 +00:00
copilot-swe-agent[bot] d1290ac5a8
∞+1 安全加固: 盐值持久化 + IP哈希完整 + IP获取日志
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e26c30a9-d5c9-4068-959b-bc4acf16ae4e

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 08:14:52 +00:00
copilot-swe-agent[bot] f840915ba0
∞+1 带宽共享加速 + 蜂群防御 + 用户守护Agent · 冰朔架构落地
新增模块:
- bandwidth-pool-agent.js: 带宽汇聚Agent (验证码授权 + IP加密存储 + 流量池)
- swarm-defense-agent.js: 蜂群防御Agent (融合/分裂 + Moving Target Defense)
- user-guardian-agent.js: 用户守护Agent (威胁切断 + 日志格式化 + 自毁机制)

升级模块:
- email-hub.js: 新增 bandwidth-auth / threat-alert / threat-cleared 邮件类型
- subscription-server-v3.js: 新增 /bandwidth-auth/ 授权页面 + 验证码提交
- ecosystem.brain-proxy-v3.config.js: 注册3个新PM2进程
- infinity-evolution.yml: 新增文件同步 + threat-alert/cleared 工作流操作
- release-notes.json: 更新∞+1版本特性

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e26c30a9-d5c9-4068-959b-bc4acf16ae4e

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 08:12:05 +00:00
copilot-swe-agent[bot] 9893adefeb
fix: 更新通知邮件自动展示∞版本功能特性
修复更新通知邮件只显示「系统已更新」不展示功能特性的问题。
新增 release-notes.json 存储版本特性,email-hub.js 省略描述时自动读取。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5fb77bb4-5bec-463b-9399-e2c41adb63ac

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 05:55:17 +00:00
copilot-swe-agent[bot] 809f65c9ac
feat: 邮件中枢增加单独发送/一键发送双模式 + 用户邮箱列表 + 详细功能清单
- email-hub.js: 新增 update-notify-single 单用户发送命令
- email-hub.js: 新增 list-emails 列出所有用户邮箱
- email-hub.js: 更新通知邮件支持分号分隔多条内容自动渲染功能清单
- infinity-evolution.yml: 新增 send-update-notify-single 和 list-user-emails 工作流选项
- infinity-evolution.yml: 新增 email 输入字段供选择目标邮箱

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/90aad306-0211-4a5b-b8b2-a130ae758c92

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 05:28:03 +00:00
copilot-swe-agent[bot] 76c104e99e
fix: 修复日期比较逻辑 + SMTP超时清理 + 安全临时目录
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c5b8b0a2-c3fb-437f-bd6f-07549f2c5709

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 04:29:58 +00:00
copilot-swe-agent[bot] c10556b6d3
feat: ∞版本 Phase 1 — 邮件中枢 + 自主进化引擎 + 智能分流增强 + 部署配置 + 定时工作流
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c5b8b0a2-c3fb-437f-bd6f-07549f2c5709

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 04:26:30 +00:00
copilot-swe-agent[bot] bbd3f49ce5 feat: add protocol mirror engine for Xray-core auto-update
Adds server/proxy/service/protocol-mirror.js — the Protocol Mirror Engine
that monitors Xray-core releases and manages automatic updates with:

- GitHub API polling (every 6h) with result caching
- Installed vs latest version comparison
- TLS/Reality fingerprint consistency checks
- LLM-powered update risk analysis via llm-router.js
- Safe auto-update: download → backup → install → verify → restart
- Failure protection: 3 consecutive failures triggers admin alert
- Update summary generation for email-hub distribution
- State persistence to data/protocol-mirror-status.json

Runs as a PM2-managed service checking every 30 minutes.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 04:06:17 +00:00
copilot-swe-agent[bot] 4052b7a4b0
fix: move nginx backup files out of sites-enabled to prevent duplicate default_server conflict
Root cause: switch_v3() created backup files (.v2-backup, .pre-repair) inside
/etc/nginx/sites-enabled/. Nginx loads ALL files in sites-enabled/, so backup
files declaring 'listen 80 default_server' caused duplicate default_server errors.

Fix:
- Add NGINX_BACKUP_DIR=/opt/zhuyuan-brain/nginx-backups for storing backups
  outside sites-enabled/
- Add clean_stale_nginx_backups() to remove any residual backup files from
  sites-enabled/ before nginx operations
- Both deploy_v3() and switch_v3() now call cleanup on entry

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/55e3ada6-8ce8-4123-8f45-d20f6b369037

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 01:43:42 +00:00
copilot-swe-agent[bot] 03234032e0
fix: 移除多余trailing echo,修正blank line清理sed模式
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d77eb92f-55c9-4cb8-92db-2c4ce8754a8a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 18:31:34 +00:00
copilot-swe-agent[bot] 09aa1ee35d
fix: V3 nginx注入使用精确定位替代fragile sed模式,添加预检查和自动修复
根因:deploy_v3() 使用 sed '/^}/i\' 在多server块配置中重复注入V3 location块
导致nginx语法错误,switch_v3切换时nginx -t验证失败回滚

修复:
- 新增 inject_v3_nginx_block() 精确定位最后一个顶层}
- 新增 remove_v3_nginx_blocks() 清理错误注入
- 新增 validate_nginx() 显示实际错误信息
- switch_v3() 添加预检查和自动修复已损坏配置
- deploy_v3() 使用安全注入并报告nginx验证失败

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d77eb92f-55c9-4cb8-92db-2c4ce8754a8a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 18:29:44 +00:00
copilot-swe-agent[bot] 34bb7f0b28
feat: 铸渊专线V3正式版上线 — 测试版→正式版迁移完成
- send-subscription.js: 邮件从🧪测试版改为正式版
- subscription-server-v3.js: 注释从测试端口改为生产端口
- deploy-brain-proxy.sh: 部署脚本从测试环境改为生产环境
- deploy-brain-proxy.yml: 工作流名称移除测试字样
- verification-progress.md: 标记V3正式版上线

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/42e61d97-f841-4606-b9fd-409ff4dd883c

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 16:59:34 +00:00
copilot-swe-agent[bot] ee3b862b19
feat: add send-subscription-v3 action to send V3 test subscription links via email
- Add send-subscription-v3 workflow option and job in deploy-brain-proxy.yml
- Add send-v3 command and V3 email template (光湖语言世界 branding) in send-subscription.js
- V3 email includes subscription URL, dashboard URL, and V3 upgrade highlights
- Validate dashboard URL fallback when not explicitly provided

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/62274291-68ff-4ee3-8a3e-e424453f4c6d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 16:26:33 +00:00
copilot-swe-agent[bot] 0bac15c1e3
V3修复: XSS防护(HTML转义), LLM路由器路径修复, context长度限制, deploy grep/sed一致性
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/226aae4f-48b7-4668-850c-7858729e6aa0

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 15:52:35 +00:00
copilot-swe-agent[bot] 7d33e49101
V3升级Phase3: 更新deploy-brain-proxy.sh支持deploy-v3/switch-v3, 更新工作流添加V3操作选项
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/226aae4f-48b7-4668-850c-7858729e6aa0

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 15:48:04 +00:00
copilot-swe-agent[bot] 5a42b0a5e3
V3升级Phase2: 创建subscription-server-v3.js(品牌重命名/硬切/仪表盘/优化配置), 升级proxy-guardian.js, 新增PM2+Nginx V3配置
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/226aae4f-48b7-4668-850c-7858729e6aa0

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 15:45:06 +00:00
copilot-swe-agent[bot] 68d737fc45
V3升级Phase1: 新增llm-router.js + reverse-boost-agent.js, zy-cloud-vpn.js增加consultAI第6接口
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/226aae4f-48b7-4668-850c-7858729e6aa0

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 15:39:42 +00:00
copilot-swe-agent[bot] 2e5ca40f12
D58·代码审查反馈修复·池配额缓存优化+百分比边界处理+注释改进
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e78a092d-e987-459c-96bd-e99135555b3c

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 12:06:55 +00:00
copilot-swe-agent[bot] 8cb9374fa3
D58·铸渊专线2.0正式启用·V1停用·共享流量池2000GB/月·每月1号重置
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e78a092d-e987-459c-96bd-e99135555b3c

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 12:04:47 +00:00
copilot-swe-agent[bot] b2aaeeab88
fix: V2 VPN subscription 404 - nginx path /api/proxy-sub/ → /api/proxy-v2/
Root cause: deploy-brain-proxy.yml generates subscription URLs with
/api/proxy-v2/ path, but nginx config and deploy script incorrectly
used V1 path /api/proxy-sub/, causing 404 on subscription requests.

Changes:
- nginx-brain-proxy-snippet.conf: location /api/proxy-sub/ → /api/proxy-v2/
- deploy-brain-proxy.sh: all inline nginx templates, grep checks,
  perl/sed injections, and health checks updated to /api/proxy-v2/
- Added migration logic to auto-fix existing servers with old path

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/8e4facc2-e5bd-4114-bfd0-ec0d2ca93b6d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 11:11:49 +00:00
copilot-swe-agent[bot] 3178c96b35
fix: V2订阅发送缺少send参数 + URL覆盖未生效
工作流调用send-subscription.js时遗漏send命令参数,
导致邮箱被解析为操作名触发"未知操作"错误。
同时修复generateSubscriptionEmail不接受URL覆盖参数的问题,
使V2工作流传入的/api/proxy-v2/路径正确用于邮件内容。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c366b233-2a6b-4347-bb66-9013b9af3629

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 10:28:02 +00:00
copilot-swe-agent[bot] e646b24139
改进Nginx配置函数: 更灵活的端口匹配+更安全的配置注入+更好的错误处理
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2d8735f4-e1e5-40a4-afec-464aa2dbae9d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 09:02:27 +00:00
copilot-swe-agent[bot] 7907053588
D57修复: Nginx反代端口3802→3803 + 大脑服务器自动Nginx配置
根因: nginx-proxy-snippet.conf指向V1端口3802, 但V2订阅服务监听3803
修复:
- 新建nginx-brain-proxy-snippet.conf (V2·端口3803)
- deploy-brain-proxy.sh新增configure_nginx函数
- install/update操作自动配置Nginx反向代理
- 自动检测并修复3802→3803端口错误
- health_check新增Nginx反代检查
- 更新V1 snippet注释标明仅用于面孔服务器

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2d8735f4-e1e5-40a4-afec-464aa2dbae9d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 09:00:50 +00:00
copilot-swe-agent[bot] bd58cf1b7b
D57: Address code review feedback - configurable timeouts, security fixes, dynamic specs
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:12:16 +00:00
copilot-swe-agent[bot] 4fc20144c3
D57: ZY-CLOUD VPN living module v2 - HLDP dynamic node registration + VPN Worker
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:09:01 +00:00
copilot-swe-agent[bot] f26bb88872
D57: ZY-CLOUD VPN living module with 5 LivingModule interfaces
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:03:55 +00:00
copilot-swe-agent[bot] 5abe4aa852
D57: Three-node smart routing + UUID sync to face server
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:00:05 +00:00
copilot-swe-agent[bot] eb7e05306f
D57: VPN V2 multi-user system with per-email isolation
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 07:54:00 +00:00
copilot-swe-agent[bot] 24b5ec9d80
Phase 0: Add client API endpoints for ZY VPN client (sing-box config, nodes, status, speedtest, diagnostics)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f586f1d5-1eda-4ae0-8827-20cd06a36142

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 17:57:55 +00:00
copilot-swe-agent[bot] bd0b14313c
fix: add cloud firewall diagnostics and ensure UFW port 443 for VPN
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c8257ad8-5a4b-4bd5-8df3-b895d8806ac9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 16:36:29 +00:00
copilot-swe-agent[bot] b72d72036b
fix: 移除 Nginx duplicate default_server 冲突 — 两个部署入口都删除 /etc/nginx/sites-enabled/default (D52)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b6918f45-0c40-4738-978f-5630bf9ab8b4

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 16:11:19 +00:00
copilot-swe-agent[bot] 06ce7d6d38
fix: 代码审查反馈 — sed模式兼容空白、server_name去重检查、.env.keys解析健壮性
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 12:17:20 +00:00
copilot-swe-agent[bot] 578b50dd22
fix: 铸渊专线Nginx反代根因修复 — default_server + localhost + 健康检查Host头 + 全流程验证进度表
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 12:16:09 +00:00
copilot-swe-agent[bot] 37f44b87c9
fix: 解决code review和CodeQL反馈 — 移除tainted format string、EADDRINUSE退出不重试、uncaughtException优雅退出、clientError日志、sed注入proxy_send_timeout
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:47:43 +00:00
copilot-swe-agent[bot] 71eda1389f
fix: 铸渊专线订阅服务修复 — PM2 fork模式、错误处理、Nginx配置路径、健康检查增强
根因分析:
- PM2使用cluster模式可能干扰server.listen('127.0.0.1')绑定
- subscription-server.js缺少try-catch和进程级错误处理,异常导致静默崩溃
- deploy-proxy.sh的configure_nginx()目标文件错误(/etc/nginx/sites-enabled/default → zhuyuan.conf)
- update()不调用configure_nginx(),主部署覆盖Nginx配置后proxy-sub location丢失
- 健康检查仅测直连3802,未验证Nginx反代路径
- Nginx反代缺少proxy_connect_timeout/proxy_read_timeout

修复:
1. ecosystem.proxy.config.js: 添加exec_mode:'fork'防止cluster模式
2. subscription-server.js: 请求级try-catch + server error/clientError事件 + uncaughtException保护
3. deploy-proxy.sh: configure_nginx()自动查找正确配置文件 + update()调用configure_nginx + 双路健康检查
4. zhuyuan-sovereign.conf: 添加proxy timeout配置
5. nginx-proxy-snippet.conf: 同步更新proxy_http_version和timeout

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:45:36 +00:00
copilot-swe-agent[bot] d3965af623
fix: deploy-proxy.sh SMTP凭据写入使用grep+printf替代sed,避免密码特殊字符问题
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:07:17 +00:00
copilot-swe-agent[bot] faf2f28c7c
铸渊专线全面排查修复: Shell注入防护+SMTP持久化+loadConfig通用化+ecosystem环境变量补全
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:04:51 +00:00
copilot-swe-agent[bot] 20800e877e
refactor(proxy): 提取PM2管理逻辑到 start_pm2_services() 消除重复代码
update() 和 restart() 共用 start_pm2_services() 函数,
该函数统一使用 pm2 startOrRestart --update-env 处理启动和重启。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 08:42:55 +00:00
copilot-swe-agent[bot] 59ce18c1c5
fix(proxy): 修复铸渊专线部署3个问题 — ufw警告抑制、PM2服务管理重构(startOrRestart)、版本号N/A
1. deploy-proxy.sh: 修复 ufw delete 'Could not delete non-existent rule' 警告
   — 先检查规则是否存在再删除,消除无效警告输出
2. deploy-proxy.sh: PM2服务管理从 describe+delete+start 重构为 startOrRestart
   — 消除 '⚠️ PM2代理服务未完整注册' 每次update都出现的问题
   — 统一 update() 和 restart() 函数的PM2逻辑
   — 添加 --update-env 确保环境变量同步
3. ecosystem.proxy.config.js: 为三个代理服务添加 version: '1.0.0'
   — 消除 PM2 进程列表中版本显示 N/A 的问题

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 08:40:54 +00:00
copilot-swe-agent[bot] 05634f433f
fix: 铸渊专线订阅服务502修复 — PM2进程不存在时自动启动
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/3a6becc7-9313-432b-b112-d9602a27a514

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:53:24 +00:00
copilot-swe-agent[bot] 5fed40c4f3
fix: address code review feedback - reset editor timer, fix graceful shutdown timeout
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/283b1454-583c-4cf7-8df8-444f15863b52

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:20:03 +00:00
copilot-swe-agent[bot] e2669f05b0
fix(proxy): bind subscription-server to 127.0.0.1 only, add temp file cleanup, graceful shutdown, improve key gen error handling
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/283b1454-583c-4cf7-8df8-444f15863b52

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:18:03 +00:00
copilot-swe-agent[bot] d7cd3099e0
fix: address code review - move npmmirror to 国内直连 section
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d98b0abc-cf0b-4b53-8044-245d309f66a6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 15:47:27 +00:00
copilot-swe-agent[bot] c2cc3f8c1c
fix: 铸渊专线订阅YAML v3.0 · 添加DNS fake-ip + 全局设置 + sniffer + GeoData
根因: 缺少DNS fake-ip配置导致Clash Mi流量为0
修复:
- 添加完整DNS配置 (fake-ip模式 + nameserver + fallback + fallback-filter)
- 添加全局设置 (unified-delay, tcp-concurrent, ipv6:false, geodata-mode)
- 使用mixed-port替代分离的port/socks-port
- 添加sniffer域名嗅探配置
- 添加GeoData数据源URL
- 添加external-controller
- 添加skip-cert-verify:false安全设置
- 扩展路由规则 (Apple直连, 国内常用直连, 局域网直连, 更多社交/流媒体)
- global-client-fingerprint: chrome

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d98b0abc-cf0b-4b53-8044-245d309f66a6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 15:45:18 +00:00