v1.7.1

v1.7.1

v1.7.0 → v1.7.1 hotfix：远程 Web 部署不再必须先访问 loopback 页面才能开启远程设置；首次开启改为明确风险确认，确认后仅写入 allowRemoteSettings=true，取消则保持只读。既有远程字段 allow-list 与敏感配置本机专属边界不变。
v1.7.0 → v1.7.1 hotfix: remote-only Web deployments no longer need loopback access to opt into remote settings. Enabling now requires an explicit risk confirmation and writes only allowRemoteSettings=true; canceling leaves the page read-only. The existing remote field allow-list and local-only sensitive-setting boundary remain unchanged.

设置与安全 / Settings & security

• 风险确认后允许远程开启设置（#255）：远程 Settings 在权限关闭时显示中英双语风险提示，并明确说明 trustedHosts 不是身份认证。用户确认后通过同一 trusted-host RPC 通道仅开启 allowRemoteSettings 并重新读取设置；取消不产生任何写入。API Key、HTTP provider 凭据、本地 Ollama / LM Studio、产物路径、桌面截图等仍不对远程开放。
• Risk-confirmed remote settings opt-in (#255): when remote permission is disabled, Settings shows a bilingual warning that trustedHosts is not authentication. Confirming enables only allowRemoteSettings through the same trusted-host RPC channel and refreshes the settings view; canceling makes no write. API keys, HTTP-provider credentials, local Ollama / LM Studio, artifact paths, desktop capture, and other excluded fields remain unavailable remotely.

验证 / Validation

• 新增远程授权、确认/取消、client shim 组合与幂等注入回归覆盖；Node 22/24 CI、DSH rc.6/rc.7 contract、三平台 host-sharp、native multimodal cold resume 与 100MP 大图资源压力继续作为发布门禁。
• Adds regression coverage for remote authorization, confirm/cancel behavior, client-shim composition, and idempotent injection; Node 22/24 CI, DSH rc.6/rc.7 contracts, cross-platform host-sharp, native multimodal cold resume, and 100MP image stress remain release gates.

Commits

• docs: prepare v1.7.1 release (#256)
• fix: allow risk-confirmed remote settings opt-in (#255)

Supply-chain verification

• Git commit: dac22f868df20b8fe5ab00e5484f6aaf8862e623
• npm tarball SHA-1: 0bd3f9a877463822c2ba597047d1961741589e0a
• tarball SHA-256: e77a9f56b69365fc1b3d0b7328332557b816c2dcc363331f17377607e0f8acbb
• packed files: 79
• npm provenance: enabled via trusted publishing (OIDC)