Skip to content

📚 Add WebChat2API Comprehensive Requirements & Integration Analysis #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
codegen-sh wants to merge 2 commits into
base: main
Choose a base branch
from
Open

📚 Add WebChat2API Comprehensive Requirements & Integration Analysis #24

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
96c69db
Add ComputeTower WebChat2API module with comprehensive documentation
codegen-sh[bot] Dec 20, 2025
2b06aa1
Add production implementation architecture and analysis
codegen-sh[bot] Dec 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
82 changes: 82 additions & 0 deletions ComputeTower/.env.example
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,82 @@
# Server Configuration
NODE_ENV=production
PORT=3000
API_VERSION=v1

# Security
JWT_SECRET=your-super-secret-jwt-key-change-this
JWT_EXPIRY=7d
AES_ENCRYPTION_KEY=your-32-character-encryption-key-here
Copy link

@cubic-dev-ai cubic-dev-ai bot Dec 20, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: AES encryption key placeholder says '32-character' but the example is 38 characters. AES-256 requires exactly 32 bytes. Use a correct-length placeholder to avoid confusion.

Prompt for AI agents 
Check if this issue is valid — if so, understand the root cause and fix it. At ComputeTower/.env.example, line 9:

<comment>AES encryption key placeholder says &#39;32-character&#39; but the example is 38 characters. AES-256 requires exactly 32 bytes. Use a correct-length placeholder to avoid confusion.</comment>

<file context>
@@ -0,0 +1,82 @@
+# Security
+JWT_SECRET=your-super-secret-jwt-key-change-this
+JWT_EXPIRY=7d
+AES_ENCRYPTION_KEY=your-32-character-encryption-key-here
+
+# Database Configuration
</file context>
Fix with Cubic


# Database Configuration
DB_HOST=localhost
DB_PORT=5432
DB_NAME=computetower
DB_USER=postgres
DB_PASSWORD=your-database-password
DB_POOL_MIN=2
DB_POOL_MAX=10

# Redis Configuration
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_DB=0
REDIS_KEY_PREFIX=computetower:

# AI/LLM Configuration
# For visual validation (Z.ai GLM-4.5V or similar)
ANTHROPIC_API_KEY=your-zai-or-anthropic-api-key
DEFAULT_VISION_MODEL=glm-4.5v
VISION_API_BASE_URL=https://api.z.ai/v1

# Browser Automation
BROWSER_TYPE=chromium
BROWSER_HEADLESS=true
BROWSER_TIMEOUT=30000
BROWSER_VIEWPORT_WIDTH=1920
BROWSER_VIEWPORT_HEIGHT=1080
BROWSER_USER_AGENT=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

# Proxy Configuration (optional)
USE_PROXY=false
PROXY_SERVER=
PROXY_USERNAME=
PROXY_PASSWORD=

# Session Management
SESSION_TTL=3600
MAX_CONCURRENT_SESSIONS=100
SESSION_CLEANUP_INTERVAL=300000

# Storage
PROFILE_STORAGE_PATH=./data/profiles
SCREENSHOT_STORAGE_PATH=./data/screenshots
LOG_STORAGE_PATH=./data/logs

# Feature Discovery
ENABLE_AUTO_DISCOVERY=true
DISCOVERY_TIMEOUT=60000
MAX_DISCOVERY_ATTEMPTS=3

# Error Recovery
ENABLE_AUTO_RECOVERY=true
MAX_RETRY_ATTEMPTS=3
RETRY_DELAY_MS=2000

# Logging
LOG_LEVEL=info
LOG_FORMAT=json
ENABLE_REQUEST_LOGGING=true

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100

# CORS
CORS_ORIGIN=*
Copy link

@cubic-dev-ai cubic-dev-ai bot Dec 20, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: CORS wildcard (*) combined with CORS_CREDENTIALS=true is insecure. Consider using a restrictive placeholder like http://localhost:3000 to encourage proper CORS configuration.

Prompt for AI agents 
Check if this issue is valid — if so, understand the root cause and fix it. At ComputeTower/.env.example, line 77:

<comment>CORS wildcard (`*`) combined with `CORS_CREDENTIALS=true` is insecure. Consider using a restrictive placeholder like `http://localhost:3000` to encourage proper CORS configuration.</comment>

<file context>
@@ -0,0 +1,82 @@
+RATE_LIMIT_MAX_REQUESTS=100
+
+# CORS
+CORS_ORIGIN=*
+CORS_CREDENTIALS=true
+
</file context>
Suggested change
CORS_ORIGIN=*
CORS_ORIGIN=http://localhost:3000
Fix with Cubic

CORS_CREDENTIALS=true

# Health Check
HEALTH_CHECK_INTERVAL=30000

Loading