chore: v2.0 docs, deps, build config, and gitignore for open-source release

- README.md / README_CN.md: updated with v2.0 features (AES-256-GCM vault,
  load balancer, audit bus, browser extension SDK, installers)
- README config tables: added UPSTREAM_LLM_URLS, UPSTREAM_LB_STRATEGY,
  MAPPING_TTL, STATELESS_MODE environment variables
- website-astro: Astro 4→6, TypeScript 5→6, @astrojs/sitemap 1→3
- Dockerfile: added load_balancer.py, audit.py, vault_crypto.py to COPY
- PrivacyGateway.spec: added missing modules to PyInstaller datas
- Version bump v1.1.0→v2.0.0 across main.py, start.py, build.bat,
  installer/setup.iss, packaging/macos/Info.plist, admin.py, website pages
- .gitignore: added installer/Output/, website-astro/dist/,
  website-astro/site.zip, payment QR codes

Author: gunxueqiu6

.gitignore

@@ -76,3 +76,14 @@ sdk/js/coverage/
 # PyInstaller配置
 *.spec
 !PrivacyGateway.spec
+
+# 安装程序构建产物
+installer/Output/
+
+# Astro 构建产物
+website-astro/dist/
+website-astro/site.zip
+
+# 支付二维码（本地文件，不提交）
+website-astro/public/wechat-pay-qr.jpg
+website-astro/public/wechat-qr-alt.jpg

Dockerfile

@@ -19,6 +19,7 @@ RUN pip install --no-cache-dir -r requirements.txt
 
 # 复制源码
 COPY config.py mask_engine.py ner_engine.py stream_buffer.py gateway_core.py database.py main.py ./
+COPY load_balancer.py audit.py vault_crypto.py ./
 
 # 复制路由模块和静态文件
 COPY routers ./routers

PrivacyGateway.spec

@@ -13,6 +13,9 @@ a = Analysis(
         ('stream_buffer.py', '.'),
         ('gateway_core.py', '.'),
         ('database.py', '.'),
+        ('load_balancer.py', '.'),
+        ('audit.py', '.'),
+        ('vault_crypto.py', '.'),
     ],
     hiddenimports=[
         'uvicorn',

README.md

@@ -3,7 +3,7 @@
 > Open-source PII masking proxy for ChatGPT, Claude, Cursor, DeepSeek, and any LLM API.
 > Install a firewall for your AI data in 30 seconds. [MIT Licensed]
 
-**v1.1.0** — A high-performance reverse proxy that automatically detects and masks sensitive data (phone numbers, ID cards, emails, bank cards, names, locations, API keys, and 14+ entity types) in AI API requests and responses. Protects PII before it leaves your machine.
+**v2.0.0** — A high-performance reverse proxy that automatically detects and masks sensitive data (phone numbers, ID cards, emails, bank cards, names, locations, API keys, and 14+ entity types) in AI API requests and responses. Protects PII before it leaves your machine. New in v2.0: AES-256-GCM vault encryption, multi-upstream load balancer, pub/sub audit bus, browser extension SDK, Windows/macOS installers.
 
 <p align="center">
   <a href="https://privacygw.pages.dev"><strong>Website</strong></a> ·
@@ -243,7 +243,11 @@ Download from [Releases](https://github.com/gunxueqiu6/ai-privacy-gateway/releas
 | `DB_PATH` | ./vault_data/privacy_vault.db | SQLite database path |
 | `ADMIN_PASSWORD` | (auto-generated) | Admin dashboard password |
 | `JWT_SECRET` | (auto-generated) | JWT signing secret |
-| `VAULT_ENCRYPT_KEY` | (auto-generated) | Vault encryption key |
+| `VAULT_ENCRYPT_KEY` | (auto-generated) | AES-256-GCM vault encryption key |
+| `UPSTREAM_LLM_URLS` | (empty) | Comma-separated upstream URLs for load balancing |
+| `UPSTREAM_LB_STRATEGY` | round_robin | Load balancer strategy: round_robin / random / least_connections |
+| `MAPPING_TTL` | 259200 (72h) | Mapping TTL in seconds (0 = delete on request complete) |
+| `STATELESS_MODE` | 0 | Set to 1 for in-memory only (no disk writes) |
 
 ---
 
@@ -295,7 +299,14 @@ ai-privacy-gateway/
 │   ├── api.py             # Mask/restore API
 │   ├── admin.py           # Admin dashboard
 │   └── auth.py            # Auth endpoints
+├── load_balancer.py       # Multi-upstream load balancer
+├── audit.py               # Pub/sub audit event bus
+├── vault_crypto.py        # AES-256-GCM vault encryption
 ├── static/                # Admin dashboard UI
+├── sdk/                   # Client SDKs
+│   ├── browser-extension/ # Chrome/Edge extension
+│   ├── js/                # JavaScript/TypeScript SDK
+│   └── flutter/           # Flutter/Dart SDK
 ├── tests/                 # Test suite
 └── website-astro/         # Public website (Astro)
 ```

README_CN.md

@@ -2,7 +2,7 @@
 
 > 你的 AI 数据正在裸奔。30 秒装上防火墙。
 
-**v1.1.0** — 开源 AI API 隐私网关。在数据离开你机器之前自动脱敏。
+**v2.0.0** — 开源 AI API 隐私网关。在数据离开你机器之前自动脱敏。v2.0 新增：AES-256-GCM Vault 加密、多上游负载均衡、发布/订阅审计总线、浏览器扩展 SDK、Windows/macOS 安装程序。
 
 高性能反向代理，自动脱敏 AI API 请求/响应中的敏感数据（手机号、身份证、邮箱、银行卡、人名、地名等），支持所有 OpenAI 兼容服务，包括 DeepSeek、Claude、ChatGPT 和 Cursor。
 
@@ -235,7 +235,11 @@ WantedBy=multi-user.target
 | `DB_PATH` | ./vault_data/privacy_vault.db | SQLite 数据库路径 |
 | `ADMIN_PASSWORD` | （自动生成） | 管理后台密码 |
 | `JWT_SECRET` | （自动生成） | JWT 签名密钥 |
-| `VAULT_ENCRYPT_KEY` | （自动生成） | Vault 加密密钥 |
+| `VAULT_ENCRYPT_KEY` | （自动生成） | AES-256-GCM Vault 加密密钥 |
+| `UPSTREAM_LLM_URLS` | （空） | 多上游 LLM 地址，逗号分隔，用于负载均衡 |
+| `UPSTREAM_LB_STRATEGY` | round_robin | 负载均衡策略：round_robin、random、least_connections |
+| `MAPPING_TTL` | 259200（72小时） | 映射条目 TTL 秒数（0 = 请求完成后即删除） |
+| `STATELESS_MODE` | 0 | 设为 1 启用无状态模式（纯内存，不落盘） |
 
 ---
 
@@ -287,7 +291,14 @@ ai-privacy-gateway/
 │   ├── api.py             # 脱敏/还原 API
 │   ├── admin.py           # 管理后台
 │   └── auth.py            # 认证
+├── load_balancer.py       # 多上游负载均衡器
+├── audit.py               # 发布/订阅审计事件总线
+├── vault_crypto.py        # AES-256-GCM Vault 加密
 ├── static/                # 管理后台前端
+├── sdk/                   # 客户端 SDK
+│   ├── browser-extension/ # Chrome/Edge 浏览器扩展
+│   ├── js/                # JavaScript/TypeScript SDK
+│   └── flutter/           # Flutter/Dart SDK
 ├── tests/                 # 测试用例
 └── website-astro/         # 官网 (Astro)
 ```

build.bat

@@ -42,7 +42,7 @@ if exist "dist\PrivacyGateway.exe" (
         echo   全部构建成功！
         echo.
         echo   EXE:       dist\PrivacyGateway.exe
-        echo   安装程序: installer\Output\AI-Privacy-Gateway-Setup-1.1.0.exe
+        echo   安装程序: installer\Output\AI-Privacy-Gateway-Setup-2.0.0.exe
         echo.
         echo   双击安装程序即可安装到 Program Files。
         echo   或在 dist\ 中直接运行 PrivacyGateway.exe（需同级放 .env）

installer/setup.iss

@@ -5,7 +5,7 @@
 #define MyAppPublisher "AI Privacy Gateway"
 #define MyAppURL "https://privacygw.pages.dev"
 #define MyAppExeName "PrivacyGateway.exe"
-#define MyAppVersion "1.1.0"
+#define MyAppVersion "2.0.0"
 
 [Setup]
 AppId={{A7B8E9C4-2D3F-4A1B-8E6C-9F0D1A2B3C4E}

main.py

@@ -62,7 +62,7 @@ async def cleanup_loop():
 app = FastAPI(
     title="AI隐私网关",
     description="边缘侧本地隐私网关 - 拦截AI请求自动脱敏",
-    version="1.1.0",
+    version="2.0.0",
     lifespan=lifespan,
 )
 
@@ -137,7 +137,7 @@ async def admin_panel_slash():
 
     banner = [
         "=" * 56,
-        "  AI Privacy Gateway  v1.1.0",
+        "  AI Privacy Gateway  v2.0.0",
         "  Your AI Data Privacy Firewall",
         "=" * 56,
         f"  API:          http://localhost:{config.LISTEN_PORT}/v1",

packaging/macos/Info.plist

@@ -9,9 +9,9 @@
     <key>CFBundleIdentifier</key>
     <string>dev.pages.privacygw</string>
     <key>CFBundleVersion</key>
-    <string>1.1.0</string>
+    <string>2.0.0</string>
     <key>CFBundleShortVersionString</key>
-    <string>1.1.0</string>
+    <string>2.0.0</string>
     <key>CFBundleExecutable</key>
     <string>PrivacyGateway</string>
     <key>CFBundlePackageType</key>

start.py

@@ -125,7 +125,7 @@ def print_welcome() -> None:
     """显示欢迎 Logo 和简介。"""
     logo = textwrap.dedent("""\
         +----------------------------------------------+
-        |       AI Privacy Gateway  v1.1.0              |
+        |       AI Privacy Gateway  v2.0.0              |
         |       你的 AI 数据隐私防火墙                    |
         +----------------------------------------------+
     """)