修复AGC原生HTTP能力门禁

同步登录服务器切换后的受控HTTP allowlist 记录Native门禁的现役能力边界
2026-08-19 16:56:16 +08:00
parent 925aefd934
commit 4ba1859f10
2 changed files with 9 additions and 3 deletions
@@ -2441,10 +2441,16 @@ function assertAiGameCreatorShellUserDevBoundary() {
  if (
    !httpPermission ||
    JSON.stringify(httpPermission.allow ?? []) !==
-      JSON.stringify([{ url: 'https://dev.genarrative.world/api/*' }])
+      JSON.stringify([
+        { url: 'https://dev.genarrative.world/api/*' },
+        { url: 'https://www.genarrative.world/api/*' },
+        { url: 'https://*/api/*' },
+        { url: 'http://localhost:*/*' },
+        { url: 'http://127.0.0.1:*/*' },
+      ])
  ) {
    throw new Error(
-      'AI game creator native HTTP scope must stay limited to the dev API',
+      'AI game creator native HTTP scope must match the release, dev, custom HTTPS, and loopback API boundary',
    );
  }