Skip to content

Commit 2d734f7

Browse files
committed
chore: release v3.2.2
1 parent 05b7ab9 commit 2d734f7

41 files changed

Lines changed: 2763 additions & 56 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

README.md

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# VFB Chat Client
22

3-
VFB Chat is a Next.js chat interface for exploring Virtual Fly Brain (VFB) data with grounded tool use. The production build is aligned to the governance and privacy controls for launch: structured logging, no free-text analytics logging, reviewed-domain search only, outbound link allow-listing, and production fail-closed checks for the approved ELM endpoint and model.
3+
VFB Chat is a Next.js chat interface for exploring Virtual Fly Brain (VFB) data with grounded tool use. The production build is aligned to the governance and privacy controls for launch: structured logging, no free-text analytics logging, reviewed-domain search only, outbound link allow-listing, and production checks that can enforce an approved ELM endpoint and model when explicit approval values are configured.
44

55
## What Changed
66

@@ -11,7 +11,7 @@ VFB Chat is a Next.js chat interface for exploring Virtual Fly Brain (VFB) data
1111
- Aggregated analytics and structured feedback are retained under `/logs/analytics` and `/logs/feedback`.
1212
- Users can explicitly attach a visible chat transcript to negative feedback; those transcripts are stored separately for up to 30 days.
1313
- Google Analytics is optional and receives structured metrics only. No free-text user queries or model responses are sent.
14-
- Production fails closed unless `OPENAI_BASE_URL` matches the approved ELM gateway and `OPENAI_MODEL` matches the approved model.
14+
- Production fails closed when explicit `APPROVED_ELM_*` values are configured and do not match the active gateway/model.
1515

1616
## Logging Model
1717

@@ -53,21 +53,23 @@ Environment variable:
5353
Required for production:
5454

5555
- `OPENAI_API_KEY`
56-
- `OPENAI_BASE_URL`
57-
- `OPENAI_MODEL`
58-
- `APPROVED_ELM_BASE_URL`
59-
- `APPROVED_ELM_MODEL`
56+
- `OPENAI_BASE_URL` or `APPROVED_ELM_BASE_URL`
57+
- `OPENAI_MODEL` or `APPROVED_ELM_MODEL`
6058
- `LOG_ROOT_DIR=/logs`
6159

6260
Optional:
6361

62+
- `APPROVED_ELM_BASE_URL`
63+
- `APPROVED_ELM_MODEL`
6464
- `RATE_LIMIT_PER_IP`
6565
- `SEARCH_ALLOWLIST`
6666
- `OUTBOUND_ALLOWLIST`
6767
- `REVIEWED_DOCS_INDEX_FILE`
6868
- `GA_MEASUREMENT_ID`
6969
- `GA_API_SECRET`
7070

71+
When `APPROVED_ELM_BASE_URL` and/or `APPROVED_ELM_MODEL` are provided, production enforces that they exactly match the active `OPENAI_*` values. If they are omitted, the app uses the active gateway/model as the approved baseline so existing single-config deployments continue to work.
72+
7173
Default allow-lists:
7274

7375
- Search allow-list: `virtualflybrain.org`, `*.virtualflybrain.org`, `flybase.org`, `neurofly.org`, `*.neurofly.org`
@@ -81,9 +83,14 @@ Create `.env.local` with explicit values:
8183
OPENAI_API_KEY=your-key-here
8284
OPENAI_BASE_URL=https://your-elm-gateway.example/v1
8385
OPENAI_MODEL=your-approved-model
86+
LOG_ROOT_DIR=./logs
87+
```
88+
89+
Optional hardening:
90+
91+
```bash
8492
APPROVED_ELM_BASE_URL=https://your-elm-gateway.example/v1
8593
APPROVED_ELM_MODEL=your-approved-model
86-
LOG_ROOT_DIR=./logs
8794
```
8895

8996
Then run:

RELEASE_NOTES.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,9 @@ This file summarizes the release notes inferred from git tags (tag message/annot
44

55
---
66

7+
## v3.2.2
8+
- Release v3.2.2: Restore production compatibility when explicit approved ELM values are not configured, add partial-summary and clarification fallbacks for broad tool-heavy queries, raise the tool-round budget to 10, and add named example asset generation
9+
710
## v3.2.1
811
- Release v3.2.1: Expand approved site search beyond a hand-maintained VFB page list by adding wider sitemap-backed reviewed search, approved page extraction, and NeuroFly domain allow-list support
912

0 commit comments

Comments
 (0)