d457ccd746
fix: validate empty messages + trim relay host whitespace
...
Address code review: check for empty messages array in relay, and
trim whitespace from CN_RELAY_HOST to avoid silent connection failures.
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/04495ae8-6c76-4458-bbb0-262e3205dccd
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 14:48:32 +00:00
6146dd3aea
fix: address code review feedback - startup validation, error context, security notes
...
- Fail fast on startup if ZY_CN_RELAY_API_KEY is not configured
- Add model endpoint context to error messages for debugging
- Make API timeout configurable via environment variable
- Deduplicate health check curl in workflow
- Add security note about VPN-encrypted relay channel
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f6db708e-8b10-4339-b48f-db5f111ae5cd
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 14:21:44 +00:00
91c957d85e
feat: add trust proxy fix + CN LLM relay service for Guangzhou
...
工单一: Add app.set('trust proxy', 1) to server.js (prevents PM2 crash)
Phase 1: Create server/cn-llm-relay/ - lightweight LLM proxy for Guangzhou
Phase 2: Modify domestic-llm-gateway.js - relay through Guangzhou with fallback
Phase 3: Add deploy-cn-llm-relay.yml workflow for automated deployment
Update server-registry.json with ZY-SVR-003 and cn-llm-relay config
Update deploy-to-zhuyuan-server.yml to inject CN relay env vars
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f6db708e-8b10-4339-b48f-db5f111ae5cd
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 14:18:27 +00:00
e8a6cb4f89
fix: 隐藏错误消息中的环境变量名 + 清理定时器优雅退出
...
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/576c1b97-3ce4-4c28-99f1-9374e2320212
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 09:33:31 +00:00
fdc2ac0035
fix: 修复XSS漏洞、内存泄漏、超时处理等安全问题
...
- 聊天消息HTML转义防止XSS注入
- 匿名会话使用唯一ID替代共享portal-guest
- 上下文Map添加LRU淘汰和TTL过期清理
- 修复Node.js https超时处理使用req.setTimeout()
- MCP工具数从API动态获取替代硬编码
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/576c1b97-3ce4-4c28-99f1-9374e2320212
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 09:31:39 +00:00
d7c613ce1a
feat: 双站点开发 — 光湖语言世界主入口 + 零点原核频道
...
- server/sites/portal/index.html — guanghulab.online 光湖语言世界主入口
- server/sites/yaoming/index.html — guanghuyaoming.com 零点原核频道
- server/app/modules/domestic-llm-gateway.js — 国内四模型智能网关
- server/nginx/guanghuyaoming.conf — 零点原核域名Nginx配置
- 更新 server/app/server.js — 新增 /api/chat/domestic 端点
- 更新部署工作流 — 支持双站点前端同步与Nginx配置注入
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/576c1b97-3ce4-4c28-99f1-9374e2320212
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-11 09:27:38 +00:00
copilot-swe-agent[bot]