Zonghao Yuan
0e4c2ebef4
Squash-merge the cloudflare-migration branch (7 commits by Kai ki) into staging with conflict resolution, feature integration, and bug fixes. Engine: - Paradigm D: single-stream Writer replacing dual-phase Plan/Beats - Delete Architect agent; story bible generated via Writer <plan> tag - Modular prompt architecture (segments/registry/builder) - StreamRouter for tagged stream splitting (<plan>/<story>/<choices>) Infrastructure: - Cloudflare Workers deployment (wrangler.jsonc, OpenNext adapter) - D1 database schema + Drizzle ORM (scaffolded, not yet active) - R2 storage helpers (scaffolded, not yet active) - Story persistence API routes + client-side persistence BYOK (Bring Your Own Key): - /api/llm/user-proxy with SSRF-protected LLM proxy (+ requireUser auth) - CORS-aware fetch in ai-client: auto-detect CORS failure, fallback to server proxy transparently via OpenAI SDK custom fetch - BYO config support added to classify-freeform and vision routes - SettingsModal CORS privacy notice (keys never logged/stored) SSE streaming: - engineClient.ts: fetchSSE helper for progressive scene events - startSession/requestScene accept optional emit callback - Fix SSE error event field name (error → message) in scene/start routes i18n integration: - Wire buildLanguageDirective into paradigm D's prompt builder - Update corsNotice i18n keys (zh-CN/en/ja) with CORS proxy privacy text - Preserve Session.language + LanguageSwitcher from i18n commit Co-authored-by: Kai ki <155355644+zbf1009@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
55 lines
2.0 KiB
Plaintext
55 lines
2.0 KiB
Plaintext
# =============================================================
|
|
# Cloudflare Workers Development Variables (.dev.vars)
|
|
# Copy this file to .dev.vars and fill in real values for local development.
|
|
# NEVER commit .dev.vars (already in .gitignore)
|
|
#
|
|
# For production deployment, set these via Cloudflare Dashboard:
|
|
# Workers & Pages → Your Worker → Settings → Variables and Secrets
|
|
# Or use: wrangler secret put <KEY_NAME>
|
|
# =============================================================
|
|
|
|
# ---- Official LLM API Keys (server-side) ----------------------------
|
|
# These are the fallback keys when users don't configure BYOK (Bring Your Own Key)
|
|
# Same keys from .env.example, migrated to Cloudflare Secrets
|
|
|
|
TEXT_BASE_URL=https://api.deepseek.com/v1
|
|
TEXT_API_KEY=sk-xxx
|
|
TEXT_MODEL=deepseek-v4-flash
|
|
# TEXT_PROVIDER=openai_compatible
|
|
|
|
IMAGE_BASE_URL=https://api.runware.ai/v1
|
|
IMAGE_API_KEY=runware-xxx
|
|
IMAGE_MODEL=runware:400@6
|
|
# IMAGE_PROVIDER=runware
|
|
|
|
VISION_BASE_URL=https://token-plan-sgp.xiaomimimo.com/v1
|
|
VISION_API_KEY=tp-xxx
|
|
VISION_MODEL=mimo-v2.5
|
|
# VISION_PROVIDER=openai_compatible
|
|
|
|
# TTS (optional - leave blank to disable)
|
|
TTS_BASE_URL=https://token-plan-sgp.xiaomimimo.com/v1
|
|
TTS_API_KEY=tp-xxx
|
|
TTS_SPEECH_MODEL=mimo-v2.5-tts
|
|
|
|
# MOCK_IMAGE (for testing)
|
|
MOCK_IMAGE=false
|
|
|
|
# ---- Gallery encryption secret --------------------------------------
|
|
# Server-side secret for AES-256-GCM encryption of .infiplot share files
|
|
# Generate with: openssl rand -hex 32
|
|
# WARNING: Rotating this invalidates all existing share files
|
|
GALLERY_SECRET=<generate_with_openssl_rand_hex_32>
|
|
|
|
# ---- Next.js public variables (build-time inlined) ------------------
|
|
# These are inlined at BUILD time, not runtime
|
|
# For Cloudflare deployment, set via Dashboard Variables (not Secrets)
|
|
NEXT_PUBLIC_IMAGE_PROXY_URL=
|
|
NEXT_PUBLIC_IMAGE_PROXY_ALLOWED_HOSTS=im.runware.ai
|
|
NEXT_PUBLIC_UMAMI_SRC=
|
|
NEXT_PUBLIC_UMAMI_WEBSITE_ID=
|
|
NEXT_PUBLIC_UMAMI_DOMAINS=
|
|
|
|
# ---- Node environment -----------------------------------------------
|
|
NODE_ENV=development
|