phsl / new-api

🛡️ fix: prevent OOM on large/decompressed requests; skip heavy prompt meta when token count is disabled

Clamp request body size (including post-decompression) to avoid memory exhaustion caused by huge payloads/zip bombs, especially with large-context Claude requests. Add a configurable `MAX_REQUEST_BODY_MB` (default `32`) and document it.

- Enforce max request body size after gzip/br decompression via `http.MaxBytesReader`
- Add a secondary size guard in `common.GetRequestBody` and cache-safe handling
- Return **413 Request Entity Too Large** on oversized bodies in relay entry
- Avoid building large `TokenCountMeta.CombineText` when both token counting and sensitive check are disabled (use lightweight meta for pricing)
- Update READMEs (CN/EN/FR/JA) with `MAX_REQUEST_BODY_MB`
- Fix a handful of vet/formatting issues encountered during the change
- `go test ./...` passes

feat(auth): enhance IP restriction handling with CIDR support

This reverts commit 2a980bbc.

feat: support gpt tts series model quota calculate

fix(channel_select): adjust priority retry logic for cross-group

feat(adaptor): add '-xhigh' suffix to reasoning effort options

fix: correct sender format issues fix #1347

feat(token): add cross-group retry option for token processing

fix: health check

* fix: 支持aws 通过全局参数透传或者渠道参数透传来 调用

* fix(aws): replace json.Unmarshal with common.Unmarshal for request body processing

---------

Co-authored-by: r0 <liangchunlei@01.ai>
Co-authored-by: CaIon <i@caion.me>

- Adjust sender field format, add space to separate nickname and email address
- Ensure email header format complies with standard RFC specifications
- Fix potential email client sending exceptions (Tencent Cloud)

feat: add openai video remix endpoint

fix: try to fix tool call issues

fix: Use channel proxy settings for task query scenarios

fix: Try to fix login error "already logged in" issue

fix: sidebar color overlap

fix: fetch upstream models

fix: qwen chat_template_kwargs

fix: regex repeat compile