feat: remediate HTTP API reliability and developer documentation

api/src/main.ts

@@ -33,13 +33,19 @@ async function bootstrap() {
   const document = SwaggerModule.createDocument(app, swaggerConfig);
   SwaggerModule.setup('api/docs', app, document);
 
-  const clientDocument = SwaggerModule.createDocument(app, new DocumentBuilder()
-    .setTitle('CMPP短信平台 HTTP 客户接口')
-    .setDescription('单条短信发送、短信状态查询、上行短信查询及回调验签接口')
-    .setVersion('1.0.0')
-    .build(), { include: [OpenApiModule] });
-  clientDocument.paths = Object.fromEntries(Object.entries(clientDocument.paths).filter(([path]) => path.startsWith('/api/openapi/v1/')));
-  SwaggerModule.setup('api/client-docs', app, clientDocument);
+  const clientDocument = SwaggerModule.createDocument(
+    app,
+    new DocumentBuilder()
+      .setTitle('CMPP短信平台 HTTP 客户接口')
+      .setDescription('单条短信发送、短信状态查询、上行短信查询及回调验签接口')
+      .setVersion('1.0.0')
+      .build(),
+    { include: [OpenApiModule] },
+  );
+  clientDocument.paths = Object.fromEntries(
+    Object.entries(clientDocument.paths).filter(([path]) => path.startsWith('/api/openapi/v1/')),
+  );
+  SwaggerModule.setup('api/client-docs', app, clientDocument, { ui: false });
 
   const port = Number(process.env.API_PORT ?? 3000);
   // 生产环境只允许 Nginx 访问管理 API；显式绑定回环，避免默认的全网卡监听绕过入口鉴权与限流。
@@ -55,7 +61,10 @@ async function bootstrap() {
       response.writeHead(404).end();
       return;
     }
-    response.writeHead(200, { 'Content-Type': 'text/plain; version=0.0.4; charset=utf-8', 'Cache-Control': 'no-store' });
+    response.writeHead(200, {
+      'Content-Type': 'text/plain; version=0.0.4; charset=utf-8',
+      'Cache-Control': 'no-store',
+    });
     response.end(metrics.render());
   });
   // Metrics use a dedicated loopback listener so Nginx cannot accidentally expose them through /api/.