[AnswerInRain]

Summary

• 封面预览域名白名单：默认只保留回环地址，部署经 COVER_PREVIEW_EXTRA_HOSTS（逗号分隔）注入
• .husky/pre-commit 接入 gitleaks（未安装时告警不阻断）

Test plan

• tsc --noEmit 通过
• pre-commit 钩子链（lint-staged+prettier+typecheck）实际跑通
• src 与 README 复扫无 IP/真实域名残留

对应 Sea 治理基线 G2 与规范审计开源红线项。

🤖 Generated with Claude Code

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 83209cf5-3f74-4248-9aa2-33b429e24078

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}