sunjunzhao 3010fca54c fix(app-dev): align embedCsp contract with platform boolean flags ...

- embedCsp is connectSrc + wasmUnsafeEval + blob (all default off), not per-directive lists
- cross-origin script/worker loading is unsupported; fetch + Blob is the supported path
- check-app.sh/selftest validate flags and platform capability boundaries

2026-10-26 01:04:35 +08:00

..

check-app.sh

fix(app-dev): align embedCsp contract with platform boolean flags

2026-10-26 01:04:35 +08:00

selftest-check-app.sh

fix(app-dev): align embedCsp contract with platform boolean flags

2026-10-26 01:04:35 +08:00

sync-skin-tokens.sh

feat(app-dev): add UI and skin-consistency contract for micro apps — checklist gains section H (H1–H12): hardcoded colors, Tailwind palette classes and missing ts-skin skin bridge are die-level; check-app.sh gains H-section static checks (token snapshot integrity, initSkin before createRoot, inline style colors, font stack, z-index, !important); web template now ships external app.css and src/skin/{tokens.ts,apply.ts} with initSkin() called before first frame; new scripts/sync-skin-tokens.sh regenerates the token snapshot from platform skins/index.ts; new references/ui-style.md documents the token table, visual scale and skin-bridge mechanism; SKILL.md adds constraints on var(--sk-*)-only colors, read-only ts-skin bridging and pre-render initSkin, plus skin-related troubleshooting rows

2026-10-22 20:07:26 +08:00