fix: 一些错误handler

Author: longsizhuo

.env.example

@@ -8,7 +8,8 @@ PGSSLMODE=require
 
 # Spring Boot JDBC 连接（由上面的 PG 变量转换而来）
 SPRING_DATASOURCE_URL=jdbc:postgresql://ep-xxxx.ap-southeast-2.aws.neon.tech/neondb?sslmode=require
-SPRING_SQL_INIT_MODE=always
+# 首次部署时设为 always 以初始化 schema.sql，之后改为 never
+SPRING_SQL_INIT_MODE=never
 
 # --- 本地开发用 Docker PostgreSQL（无 Neon 账号的开发者使用）---
 POSTGRES_DB=involution_hell
@@ -35,7 +36,8 @@ AUTH_URL=https://involutionhell.com
 # --- Actuator ---
 MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health,info,metrics
 MANAGEMENT_ENDPOINT_HEALTH_PROBES_ENABLED=true
-MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS=always
+# when-authorized 生产推荐；开发时可改为 always
+MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS=when-authorized
 
 # --- 网关（Caddy）---
 CADDY_HTTP_PORT=80

src/main/java/com/involutionhell/backend/openai/service/HttpOpenAiStreamGateway.java

@@ -13,13 +13,18 @@
 import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
+import jakarta.annotation.PostConstruct;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 import org.springframework.stereotype.Service;
 import org.springframework.util.StringUtils;
 import tools.jackson.databind.ObjectMapper;
 
 @Service
 public class HttpOpenAiStreamGateway implements OpenAiStreamGateway {
 
+    private static final Logger log = LoggerFactory.getLogger(HttpOpenAiStreamGateway.class);
+
     private final HttpClient httpClient;
     private final ObjectMapper objectMapper;
     private final OpenAiProperties properties;
@@ -36,6 +41,13 @@ public HttpOpenAiStreamGateway(
         this.properties = properties;
     }
 
+    @PostConstruct
+    void warnIfNotConfigured() {
+        if (!StringUtils.hasText(properties.apiKey())) {
+            log.warn("[OpenAI] OPENAI_API_KEY 未配置，/openai/responses/stream 调用时将返回 400 错误");
+        }
+    }
+
     /**
      * 校验 OpenAI 地址、密钥和模型配置是否满足调用要求。
      */

src/main/resources/application.properties

@@ -9,7 +9,9 @@ spring.datasource.password=${PGPASSWORD:}
 spring.datasource.driver-class-name=org.postgresql.Driver
 
 # 初始化配置
-spring.sql.init.mode=${SPRING_SQL_INIT_MODE:always}
+# 默认 never：生产环境不在每次启动时执行 schema.sql
+# 首次部署或本地初始化时设置 SPRING_SQL_INIT_MODE=always
+spring.sql.init.mode=${SPRING_SQL_INIT_MODE:never}
 spring.sql.init.schema-locations=classpath:schema.sql
 
 # Spring Security OAuth2 Client 配置 (仅保留占位符)
@@ -28,9 +30,10 @@ justauth.type.github.redirect-uri=${AUTH_URL:http://localhost:3000}/api/auth/cal
 # JWT ?? (Temporarily Commented Out for JustAuth Migration)
 # jwt.secret-key=${AUTH_SECRET:involutionhell-default-secret-key-32-chars-long}
 
-# Actuator ??
+# Actuator
 management.endpoints.web.exposure.include=${MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE:health,info,metrics}
-management.endpoint.health.show-details=always
+# when-authorized：未认证请求只看到 UP/DOWN，不暴露数据库、磁盘等细节
+management.endpoint.health.show-details=${MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS:when-authorized}
 
 # AI 配置 (还原为您之前的结构，取消我擅自建议的默认值)
 openai.api-key=${OPENAI_API_KEY:}