程序员阿江(Relakkes) ae7e33cf95 Publish emergency desktop startup recovery release
This release moves the verified desktop H5-auth regression fix into the versioned artifact pipeline so blocked v0.2.3 users can receive a GitHub-built replacement quickly.

Constraint: GitHub Release body is sourced from release-notes/v0.2.4.md in the tagged commit.
Constraint: Release workflow requires the app, Tauri, Cargo, and lockfile versions to match the tag.
Rejected: Ship only the hotfix commit without a release tag | affected desktop users need packaged artifacts from the release workflow.
Confidence: high
Scope-risk: narrow
Directive: Keep v0.2.4 scoped to the startup auth regression; broader H5 improvements belong in a later release.
Tested: bun run scripts/release.ts 0.2.4 --dry
Tested: bun run scripts/release.ts 0.2.4
Not-tested: GitHub release workflow before push; it only runs after the tag is pushed.
2026-05-11 13:45:25 +08:00

1.0 KiB
Raw Blame History

Claude Code Haha v0.2.4

这是一个紧急修复版本,用于解决 v0.2.3 升级后部分桌面用户启动失败的问题。

Highlight

  • 修复桌面启动失败:修复 v0.2.3 H5/LAN 访问改动引入的本地服务鉴权回归,避免桌面端启动时卡在 Missing Authorization header

问题修复

  • 修复桌面 sidecar 绑定局域网地址后Tauri 桌面 WebView 访问本机 127.0.0.1 控制 API 被误判为远程 H5 请求的问题。
  • 保留 H5 远程访问的 token 和 CORS 边界:只有 Tauri WebView 控制本机 loopback sidecar 时可以免 H5 tokenLAN 或公网 H5 访问仍然需要正确授权。

验证

  • 已新增服务端回归测试,覆盖 Tauri WebView origin 启动访问本机 sidecar 不再触发 H5 token 要求。
  • 已确认 H5 token、CORS、WebSocket 鉴权相关服务端测试仍然通过。

安装说明

macOS

首次打开如果提示"已损坏"或"无法验证开发者",请执行:

xattr -cr /Applications/Claude\ Code\ Haha.app