```

feat: 添加飞书集成和改进安全配置

- 集成 lark-oapi 库以支持飞书功能
- 改进 CORS 配置验证器以支持 JSON 格式输入
- 添加安全凭证检查逻辑以防止跨域安全问题
- 在 DirectLLMAdapter 中增加响应解析异常处理

fix: 增强查询参数验证和分页限制

- 为多个路由添加 Query 参数验证器
- 实现 bounded_limit 和 bounded_offset 辅助函数
- 设置查询限制范围为 1-500 之间
- 使用 secrets.compare_digest 提升令牌验证安全性

refactor: 调整文档忽略规则和测试配置

- 更新 .gitignore 文件中的文档路径配置
- 在 smoke 测试中添加必要的环境变量配置
- 重构配置验证器以提高类型兼容性
```

app/modules/business/routes.py

@@ -1,4 +1,4 @@
-from fastapi import APIRouter, Depends, HTTPException
+from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy.orm import Session
 
 from app.core.database import get_db
@@ -18,8 +18,8 @@ def list_domains() -> dict[str, list[str]]:
 @router.get("/{domain}", response_model=DomainListRead)
 def list_records(
     domain: str,
-    limit: int = 50,
-    offset: int = 0,
+    limit: int = Query(default=50, ge=1, le=500),
+    offset: int = Query(default=0, ge=0),
     status: str | None = None,
     db: Session = Depends(get_db),
 ) -> dict:

app/modules/business/service.py

@@ -11,6 +11,7 @@ from sqlalchemy.sql.schema import Column
 from sqlalchemy.orm import Session
 
 from app.core.constants import ActorValue
+from app.core.pagination import bounded_limit, bounded_offset
 from app.modules.audit.constants import AuditRiskLevel, AuditSource
 from app.modules.audit.schemas import AuditLogCreate
 from app.modules.audit.service import AuditService
@@ -89,7 +90,9 @@ class BusinessService:
         if status_filter and hasattr(model, "status"):
             stmt = stmt.where(model.status == status_filter)
             count_stmt = count_stmt.where(model.status == status_filter)
-        stmt = stmt.order_by(model.id.desc()).limit(min(limit, 500)).offset(max(offset, 0))
+        stmt = stmt.order_by(model.id.desc()).limit(bounded_limit(limit)).offset(
+            bounded_offset(offset)
+        )
         total = int(self.db.execute(count_stmt).scalar() or 0)
         return total, [serialize_model(item) for item in self.db.execute(stmt).scalars()]