v0.10.0

更新内容

• 新增入站请求体大小限制（默认 32 MiB，可配置），防止超大 JSON body 耗尽网关内存。
• 新增上游连接池复用：Anthropic 与原生 Responses 直连上游复用 TCP/TLS 连接，降低固定延迟；引用计数保证在飞的流式响应不会被提前关闭。
• 新增上游地址校验（SSRF 防护）：拒绝 file://、gopher:// 等非 http(s) 协议、云元数据端点与保留地址；私网地址默认放行以兼容自建推理服务（llama.cpp / vLLM / Ollama）。
• Codex 兼容图像生成（/responses 与 /images/generations），支持批量执行、幂等重试、压缩预览与图像统计。
• 可配置请求日志 payload 捕获与结构化密钥脱敏。
• 管理员登录尝试限流，以及图像结果下载的网络/大小防护。
• 生产环境启动默认禁用 Uvicorn reload（除非显式启用）。
• Provider 模型发现遵循分页模型列表后再替换已存储模型。

Changes

• Request body size limit (default 32 MiB, configurable) to prevent oversized JSON bodies from exhausting gateway memory.
• Shared upstream connection pool: Anthropic and native Responses adapters reuse TCP/TLS connections to direct upstreams, reducing fixed latency; reference counting ensures in-flight streaming responses are never closed early.
• Upstream URL validation (SSRF guard): rejects non-http(s) schemes (file://, gopher://), cloud metadata endpoints, and reserved addresses; private addresses allowed by default for self-hosted inference (llama.cpp / vLLM / Ollama).
• Codex-compatible image generation via /responses and /images/generations, with batch execution, idempotent retries, compressed previews, and image statistics.
• Configurable request-log payload capture and structured secret redaction.
• Admin login attempt throttling, and network/size safeguards for image-result downloads.
• Production startup now disables Uvicorn reload unless explicitly enabled.
• Provider model discovery follows paginated model lists before replacing stored models.

验证 / Verification

• Full test suite: python -m pytest tests/ -q, 745 passed.