3 Commits

Author	SHA1	Message	Date
木炎	f168f9f375	fix: auto-find correct sgclaw_config.json in parent directory ... Add parent sgClaw directory to config search candidates so Node.js server automatically finds the correct config with DeepSeek API endpoint instead of the test config in claw-new directory. 🤖 Generated with [Qoder][https://qoder.com]	2026-04-16 22:47:39 +08:00
木炎	23845413c5	fix: patch path traversal and baseUrl normalization in scene generator ... - server.js: sanitize static file paths to prevent directory traversal (GET /../../sgclaw_config.json would expose API key) - config-loader.js: fix normalizeBaseUrl to strip /v1 before appending, preventing double /v1 for non-standard base URLs 🤖 Generated with [Qoder][https://qoder.com]	2026-04-16 22:30:35 +08:00
木炎	ead9ea76fa	feat: add config-loader.js and initial server test ... Add config-loader.js module for loading sgclaw_config.json credentials and resolving project root directory. Add initial Rust source-guard test to verify server file paths exist. 🤖 Generated with [Qoder][https://qoder.com]	2026-04-16 22:10:48 +08:00