fix: allow HTTP for configurable service endpoints

DeepSeek Harness and Weixin binding configuration rejected non-loopback HTTP endpoints even when users explicitly selected those internal services. Configurable endpoints now accept valid HTTP and HTTPS URLs without host-location restrictions, while retaining the required protocol and API-key checks.

Release note: 模型连接、DeepSeek Harness 与微信绑定现在可直接使用局域网或公网 HTTP/HTTPS 服务地址，不再强制公网 HTTPS 或本机回环地址。

src/main/agent/create-runtime.test.ts

@@ -100,7 +100,7 @@ describe('createAgentRuntime model compatibility', () => {
         { deepseekHarnessLauncher: vi.fn() }
       )
     ).toThrow(
-      'DeepSeek Harness 需要使用 API Key 的安全 OpenAI 兼容 Chat Completions 模型连接'
+      'DeepSeek Harness 需要使用 API Key 的 OpenAI 兼容 Chat Completions 模型连接'
     )
   })
 

src/main/agent/create-runtime.ts

@@ -190,7 +190,7 @@ export function createAgentRuntime(
     const profile = settings?.deepseekHarnessModelProfile
     if (!profile || !isDeepSeekHarnessModelProfile(profile)) {
       throw new Error(
-        'DeepSeek Harness 需要使用 API Key 的安全 OpenAI 兼容 Chat Completions 模型连接'
+        'DeepSeek Harness 需要使用 API Key 的 OpenAI 兼容 Chat Completions 模型连接'
       )
     }
     if (!profile.apiKey) {

src/main/agent/deepseek-harness-utility-launcher.test.ts

@@ -50,7 +50,7 @@ async function fixture() {
     launchOptions: {
       cwd: workspace,
       signal: new AbortController().signal,
-      baseUrl: 'https://gateway.example/openai/v1',
+      baseUrl: 'http://gateway.example/openai/v1?api-version=1',
       model: 'qwen-plus',
       supportsImageInput: false,
       credentialRefs: [DEEPSEEK_HARNESS_CREDENTIAL_REF],
@@ -102,7 +102,7 @@ describe('DeepSeek Harness utility launcher', () => {
     expect(utility.messages[0]).toMatchObject({
       type: 'start',
       config: {
-        baseUrl: 'https://gateway.example/openai/v1',
+        baseUrl: 'http://gateway.example/openai/v1?api-version=1',
         model: 'qwen-plus',
         supportsImageInput: false,
         credentialRefs: [DEEPSEEK_HARNESS_CREDENTIAL_REF]
@@ -235,10 +235,9 @@ describe('DeepSeek Harness utility launcher', () => {
   })
 
   it.each([
-    'http://gateway.example/v1',
-    'https://user:secret@gateway.example/v1',
-    'https://gateway.example/v1?api-version=2025-01-01'
-  ])('rejects unsafe endpoint %s before forking', async (baseUrl) => {
+    'file:///private/config',
+    'ftp://gateway.example/v1'
+  ])('rejects unsupported endpoint %s before forking', async (baseUrl) => {
     const { dshHome, hostPath, launchOptions } = await fixture()
     const fork = vi.fn()
     const launcher = createDeepSeekHarnessUtilityLauncher({
@@ -250,7 +249,7 @@ describe('DeepSeek Harness utility launcher', () => {
 
     await expect(
       launcher({ ...launchOptions, baseUrl })
-    ).rejects.toThrow('HTTPS')
+    ).rejects.toThrow('HTTP 或 HTTPS')
     expect(fork).not.toHaveBeenCalled()
   })
 })

src/main/agent/deepseek-harness-utility-launcher.ts

@@ -149,7 +149,7 @@ export function createDeepSeekHarnessUtilityLauncher(
     }
     if (!isDeepSeekHarnessCompatibleBaseUrl(options.baseUrl)) {
       throw new Error(
-        'DeepSeek Harness 模型地址必须使用 HTTPS 或本机回环 HTTP，且不得包含凭据、查询参数或片段'
+        'DeepSeek Harness 模型地址必须使用 HTTP 或 HTTPS'
       )
     }
     if (

src/main/agent/runtime-selection.ts

@@ -139,7 +139,7 @@ export function applyRuntimeSelection(
       !isDeepSeekHarnessModelProfile(selectedProfile)
     ) {
       throw new Error(
-        'DeepSeek Harness 仅支持使用 API Key 的安全 OpenAI 兼容 Chat Completions 连接'
+        'DeepSeek Harness 仅支持使用 API Key 的 OpenAI 兼容 Chat Completions 连接'
       )
     }
     return {