1.4.24：CORS 自動放行同實例 portal（不再依賴 UI_ORIGINS）＋診斷端點＋portal 導流文案

arcrun-cypher-executor/worker.mjs

@@ -14681,7 +14681,9 @@ app.use("*", cors({
       extra = String(c.env.UI_ORIGINS || "").split(",").map((s) => s.trim()).filter(Boolean);
     } catch {
     }
-    return [...STATIC_ORIGINS, ...extra].includes(origin) ? origin : null;
+    const sub = String(c.env.WORKER_SUBDOMAIN || "").trim();
+    const sibling = sub ? [`https://arcrun-rag-ui.${sub}.workers.dev`] : [];
+    return [...STATIC_ORIGINS, ...sibling, ...extra].includes(origin) ? origin : null;
   },
   allowMethods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
   allowHeaders: ["Content-Type", "Authorization", "X-Arcrun-API-Key"],

manifest.json

@@ -1,14 +1,14 @@
 {
  "schema": 1,
  "built": "2026-08-08",
- "source": "Arcrun@8447165",
+ "source": "Arcrun@07cc7f5",
  "core": [
   {
    "name": "arcrun-cypher-executor",
    "canonical": null,
    "main_module": "worker.mjs",
    "main_file": "arcrun-cypher-executor/worker.mjs",
-   "js_bytes": 549108,
+   "js_bytes": 549258,
    "modules": [],
    "compat_date": "2025-02-19",
    "compat_flags": [
@@ -50,8 +50,8 @@
     "services": 13
    },
    "warnings": [],
-   "sha256": "065090f8c5cbf7c8c27dd2e0b938728f6f8d44da69850daaf3f076fec4161dd8",
-   "bytes": 549108
+   "sha256": "a27a4807305b1d1d877ecd9cb5011a2d0518cbf24428412bee1732dd94977640",
+   "bytes": 549258
   },
   {
    "name": "arcrun-kbdb",
@@ -107,7 +107,6 @@
     "vectorize": 0,
     "ai": false,
     "vars": {
-     "MULTI_TENANT": "false",
      "COMPONENT_ID": "http_request"
     }
    },
@@ -659,7 +658,7 @@
    "tier": 2,
    "main_file": "tier2/ui/index.js",
    "main_module": "index.js",
-   "sha256": "c5c09b0dad59da06f1f2e5a018b01e0cc2a3a96ec7bada996a61e962bc3ab672",
+   "sha256": "ced317ce5e41707cfcb41b81c453045ffbc960147b2ebaa5cc11c0131ce7ea7c",
    "compat_date": "2026-07-01",
    "compat_flags": [],
    "modules": [],
@@ -669,7 +668,7 @@
     "ai": false,
     "vars": {}
    },
-   "bytes": 496294
+   "bytes": 499341
   }
  ],
  "daemon": {
@@ -685,8 +684,8 @@
    "sha256": "791afe80279b13c25e76e56089ab077b92600bdf195ab7c907c91775d38ac858"
   }
  },
- "release": "1.4.22",
+ "release": "1.4.24",
  "built_for": "oauth-installer-lazy-load",
  "notes": [],
- "fingerprint": "ba8f8044d99184392c997e0f6c92002139d3cda917ee89001caba96d0236500b"
+ "fingerprint": "3ef34aaba085572955477ec3ca9149218d62ccbc6f39b88332db600d7a0d5a4c"
 }