You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
加固技能搜索 API 地址校验:生产环境仅允许官方 https://skills.sh,开发/测试环境仅允许 HTTPS localhost。
优化 Electron 打包资源配置,确保更新器依赖和 Next.js standalone 运行时资源随安装包发布。
增加针对文件查看器、端口选择和技能搜索地址白名单的测试覆盖。
English
Completed remaining P1 hardening for desktop local service startup, restart recovery, and port selection.
Improved large source file viewing by switching large files to a plain text renderer with line numbers to avoid syntax-highlighting stalls.
Hardened Skills API base URL validation: production is restricted to official https://skills.sh, while development/test localhost overrides must use HTTPS.
Improved Electron packaging resources so updater dependencies and Next.js standalone runtime files are included in the installer.
Added test coverage for the file viewer, port selection, and Skills API URL allowlist behavior.