门禁兼容修复

.env.example

@@ -25,9 +25,16 @@ FIRE_SAFETY_SUPERAGENT_PROBE_TIMEOUT=10m
 
 # User-facing chat API (disabled by default; requires SuperAgent above)
 FIRE_SAFETY_CHAT_ENABLED=false
-# Test-stage static Bearer only. Generate a distinct high-entropy value of at least 32 printable ASCII characters.
+# Test-stage static Bearer only. By default, generate a distinct high-entropy
+# value of at least 32 printable ASCII characters.
 # Never reuse FIRE_SAFETY_SUPERAGENT_OPEN_API_KEY or FIRE_SAFETY_MCP_AUTH_TOKEN.
 FIRE_SAFETY_CHAT_AUTH_TOKEN=
+# Compatibility exception for an already-issued legacy client credential that
+# is shorter than 32 characters. Keep false for new environments. Set true
+# only for a controlled test/migration window; even then the value must be
+# non-empty, at most 4096 bytes, and contain only ASCII 0x21-0x7e (no spaces,
+# controls, or Unicode). Rotate the credential, then restore false.
+FIRE_SAFETY_CHAT_ALLOW_LEGACY_SHORT_TOKEN=false
 # Server-controlled test subject. This is not final end-user identity or authorization.
 FIRE_SAFETY_CHAT_SUBJECT_ID=fire-safety-ymd-chat-test-subject
 # Optional legacy-client compatibility route:
@@ -46,6 +53,7 @@ FIRE_SAFETY_CHAT_MAX_SESSIONS=1000
 # Inbound MCP for SuperAgent (disabled by default)
 FIRE_SAFETY_MCP_ENABLED=false
 # Required when enabled. Use a new per-environment high-entropy token (at least 32 printable ASCII characters).
+# FIRE_SAFETY_CHAT_ALLOW_LEGACY_SHORT_TOKEN never relaxes this MCP requirement.
 # Never reuse FIRE_SAFETY_SUPERAGENT_OPEN_API_KEY.
 FIRE_SAFETY_MCP_AUTH_TOKEN=
 # Trusted server-side data scope: town_allowlist (default) or all.