fix(wechat): stop relay bootstrap from hijacking LLM provider selection.

Schedule LLM now binds an explicit provider key and fails closed on network errors so dead relay endpoints cannot block ordinary chat; relay bootstrap is opt-in only. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-01 21:44:08 +08:00
parent 122a25649b
commit dac06753ce
7 changed files with 121 additions and 39 deletions
@@ -190,7 +190,8 @@ export async function bootstrapPortalAgentServices({
  const wordFilterService =
    createWordFilterServiceFn(pool);

-  const relayBootstrapTask = env.H5_RELAY_BOOTSTRAP_DISABLED === '1'
+  // Relay bootstrap is opt-in only; production uses direct provider keys (e.g. DeepSeek).
+  const relayBootstrapTask = env.H5_RELAY_BOOTSTRAP_DISABLED !== '0'
    ? Promise.resolve({ ok: true, created: false, skipped: true })
    : llmProviderService
      .ensureBootstrapRelay()