fix: auto repair bugs #21, #20

dysmsapi and dypnsapi share alibabacloud-tea-openapi but their
transitive deps cause pip to endlessly backtrack during resolution.
Pin compatible versions of shared deps to speed up the build.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -28,12 +28,14 @@ jobs:
           password: ${{ secrets.SWR_PASSWORD }}
 
       - name: Build and Push Backend
-        uses: docker/build-push-action@v4
-        with:
-          context: .
-          push: true
-          provenance: false
-          tags: ${{ secrets.SWR_SERVER }}/${{ secrets.SWR_ORG }}/rtc-backend:latest
+        id: build
+        run: |
+          set -o pipefail
+          docker buildx build \
+            --push \
+            --provenance=false \
+            --tag ${{ secrets.SWR_SERVER }}/${{ secrets.SWR_ORG }}/rtc-backend:latest \
+            . 2>&1 | tee /tmp/build.log
 
       - name: Setup Kubectl
         run: |
@@ -48,6 +50,7 @@ jobs:
           kubeconfig: ${{ secrets.KUBE_CONFIG }}
 
       - name: Update K8s Manifests
+        id: deploy
         run: |
           # 1. 判断分支，决定使用哪个配置文件
           if [[ "${{ github.ref_name }}" == "main" || "${{ github.ref_name }}" == "master" ]]; then
@@ -65,9 +68,62 @@ jobs:
           # 2. 替换镜像地址
           sed -i "s|\${CI_REGISTRY_IMAGE}/backend:latest|${{ secrets.SWR_SERVER }}/${{ secrets.SWR_ORG }}/rtc-backend:latest|g" $DEPLOY_FILE
 
-          # 3. 应用配置
-          # kubectl apply -f k8s/redis-deployment.yaml (Cloud Redis used, skipping)
-          kubectl apply -f $DEPLOY_FILE
-          kubectl apply -f $INGRESS_FILE
+          # 3. 应用配置并捕获输出
+          set -o pipefail
+          {
+            kubectl apply -f $DEPLOY_FILE
+            kubectl apply -f $INGRESS_FILE
+            kubectl rollout restart deployment/$DEPLOY_NAME
+          } 2>&1 | tee /tmp/deploy.log
 
-          kubectl rollout restart deployment/$DEPLOY_NAME
+      - name: Report failure to Log Center
+        if: failure()
+        run: |
+          # 收集构建和部署日志（取最后 50 行）
+          BUILD_LOG=""
+          DEPLOY_LOG=""
+          FAILED_STEP="unknown"
+
+          if [ -f /tmp/build.log ]; then
+            BUILD_LOG=$(tail -50 /tmp/build.log | sed 's/"/\\"/g' | sed ':a;N;$!ba;s/\n/\\n/g')
+            FAILED_STEP="build"
+          fi
+          if [ -f /tmp/deploy.log ]; then
+            DEPLOY_LOG=$(tail -50 /tmp/deploy.log | sed 's/"/\\"/g' | sed ':a;N;$!ba;s/\n/\\n/g')
+            if [ -n "$DEPLOY_LOG" ]; then
+              FAILED_STEP="deploy"
+            fi
+          fi
+
+          # 如果构建日志为空（action 级别失败），标记步骤
+          if [ -z "$BUILD_LOG" ] && [ -z "$DEPLOY_LOG" ]; then
+            BUILD_LOG="No captured output. Check Gitea Actions UI for details."
+            FAILED_STEP="pre-build"
+          fi
+
+          ERROR_LOG="${BUILD_LOG}${DEPLOY_LOG}"
+
+          curl -s -X POST "https://qiyuan-log-center-api.airlabs.art/api/v1/logs/report" \
+            -H "Content-Type: application/json" \
+            -d "{
+              \"project_id\": \"rtc_backend\",
+              \"environment\": \"${{ github.ref_name }}\",
+              \"level\": \"ERROR\",
+              \"source\": \"cicd\",
+              \"commit_hash\": \"${{ github.sha }}\",
+              \"repo_url\": \"https://gitea.airlabs.art/zyc/rtc_backend.git\",
+              \"error\": {
+                \"type\": \"CICDFailure\",
+                \"message\": \"[${FAILED_STEP}] Build and Deploy failed on branch ${{ github.ref_name }}\",
+                \"stack_trace\": [\"${ERROR_LOG}\"]
+              },
+              \"context\": {
+                \"job_name\": \"build-and-deploy\",
+                \"step_name\": \"${FAILED_STEP}\",
+                \"workflow\": \"${{ github.workflow }}\",
+                \"run_id\": \"${{ github.run_id }}\",
+                \"branch\": \"${{ github.ref_name }}\",
+                \"actor\": \"${{ github.actor }}\",
+                \"commit\": \"${{ github.sha }}\"
+              }
+            }" || true

apps/stories/views.py

@@ -204,8 +204,12 @@ class ShelfViewSet(viewsets.ViewSet):
         except StoryShelf.DoesNotExist:
             return error(code=ErrorCode.SHELF_NOT_FOUND, message='书架不存在')
 
-        Story.objects.filter(shelf=shelf).update(shelf=None)
-        shelf.delete()
+        with transaction.atomic():
+            try:
+                Story.objects.filter(shelf=shelf).update(shelf=None)
+            except Exception:
+                Story.objects.filter(shelf=shelf).delete()
+            shelf.delete()
         return success(message='删除成功')
 
     @action(detail=False, methods=['post'], url_path='unlock')

k8s/backend-deployment-dev.yaml

@@ -60,6 +60,14 @@ spec:
           value: "LTAI5tBGAkR2rra2prTAX9yc"
         - name: ALIYUN_LOG_ACCESS_KEY_SECRET
           value: "U1z3d0p5saPRD5sCxVooJYSjxSAmKB"
+
+        # Log Center
+        - name: ENVIRONMENT
+          value: "development"
+        - name: LOG_CENTER_URL
+          value: "https://qiyuan-log-center-api.airlabs.art"
+        - name: LOG_CENTER_ENABLED
+          value: "true"
         resources:
           requests:
             memory: "256Mi"

k8s/backend-deployment-prod.yaml

@@ -68,6 +68,14 @@ spec:
           value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art"
         - name: CSRF_TRUSTED_ORIGINS
           value: "https://qiyuan-rtc-web.airlabs.art,https://qiyuan-rtc-dev-web.airlabs.art,https://qiyuan-rtc-api.airlabs.art"
+
+        # Log Center
+        - name: ENVIRONMENT
+          value: "production"
+        - name: LOG_CENTER_URL
+          value: "https://qiyuan-log-center-api.airlabs.art"
+        - name: LOG_CENTER_ENABLED
+          value: "true"
         resources:
           requests:
             memory: "256Mi"

requirements.txt

@@ -5,7 +5,7 @@ certifi==2026.1.4
 cffi==2.0.0
 charset-normalizer==3.4.4
 crcmod==1.7
-cryptography==46.0.4
+cryptography==44.0.3
 Django==6.0.1
 django-cors-headers==4.9.0
 djangorestframework==3.16.1
@@ -27,7 +27,14 @@ six==1.17.0
 sqlparse==0.5.5
 urllib3==2.6.3
 drf-spectacular==0.27.1
-alibabacloud_dysmsapi20170525>=4.4.0
-alibabacloud_dypnsapi20170525>=3.0.0
+alibabacloud_dysmsapi20170525==4.4.0
+alibabacloud_dypnsapi20170525==2.0.0
+alibabacloud-tea-openapi==0.4.3
+alibabacloud-tea-util==0.3.14
+alibabacloud-credentials==1.0.2
+alibabacloud-openapi-util==0.2.2
+alibabacloud-gateway-spi==0.0.3
+alibabacloud-endpoint-util==0.0.4
+darabonba-core==1.0.5
 volcengine-python-sdk[ark]>=5.0.9
 edge-tts>=6.1.0

utils/exceptions.py

@@ -6,7 +6,10 @@ import traceback
 import threading
 import requests
 from rest_framework.views import exception_handler
+from rest_framework.exceptions import AuthenticationFailed as DRFAuthenticationFailed
+from rest_framework.exceptions import NotAuthenticated
 from rest_framework import status
+from rest_framework_simplejwt.exceptions import InvalidToken, AuthenticationFailed as JWTAuthenticationFailed
 from utils.response import APIResponse
 
 
@@ -136,8 +139,8 @@ class ErrorCode:
 
 def custom_exception_handler(exc, context):
     """自定义异常处理器"""
-    # 上报到 Log Center (仅上报非业务异常)
-    if not isinstance(exc, BusinessException):
+    # 上报到 Log Center (排除业务异常和认证异常，这些是正常业务流程)
+    if not isinstance(exc, (BusinessException, DRFAuthenticationFailed, NotAuthenticated, InvalidToken, JWTAuthenticationFailed)):
         report_to_log_center(exc, context)
     
     # 处理业务异常