Security fix / 安全修复
Caught server exceptions no longer flow into HTTP responses. Detailed messages stay in local logs; clients receive stable error codes and fixed bilingual messages. / 捕获到的服务端异常不再进入 HTTP 响应。详细信息只保留在本机日志中，客户端只收到稳定错误码和固定双语提示。
GitHub CodeQL alert #1 (js/stack-trace-exposure) is fixed, with zero open code-scanning alerts after the main-branch analysis. / GitHub CodeQL 告警 #1（js/stack-trace-exposure）已修复，主分支扫描后未处理告警为 0。
Repository maintenance / 仓库维护
Dependabot continues patch and minor updates, while major upgrades require explicit compatibility review. / Dependabot 继续提示补丁和小版本升级，跨大版本升级必须先做明确的兼容性评审。
Verification / 验证
169 automated tests pass on Node 22.19 and Node 24; build, package, secret scan, CodeQL, and production dependency audit pass. / 169 项自动化测试在 Node 22.19 和 Node 24 上通过；构建、打包、敏感信息扫描、CodeQL 和生产依赖审计均通过。