[LIghtJUNction]

Refines the browser UI toward a restrained minimal/ASCII style and hardens request-body validation, OAuth forwarding, browser login integrity, timestamp handling, and Markdown escaping. Adds focused regression tests. Preserves the latest authorized-channel and permission-guide behavior already on main.

[chatgpt-codex-connector]

You have reached your Codex usage limits for security reviews. Please try again later.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[LIghtJUNction]

2026-10-01 14:07 UTC 更新：语法问题已修复；翻译删除权限说明链接的问题仍存在。当前 main 已到 b4e6edb。

1. 已修复：6824a60d 将 tests/test_http_body_integrity.py 中误连的赋值和 with 拆回两行；当前源码 保留该修复。6824a60d 的 Recovery safety 已成功，完整测试也已越过收集阶段。此前 PR/合并提交的语法失败是历史结果，不再作为当前缺陷。

2. 仍待修复：home_page.py:140–142 仍给包含 /help/permissions 链接的整段 p 添加 data-i18n="channel_hint"；applyLanguage 会用 textContent 替换整个节点，首次加载即调用。因此默认英文也会删除链接，并丢掉可读频道/登录后私有频道的提示。建议只给纯文本 span 加翻译标记，链接独立保留，同步两种语言的完整提示；补一项执行初始化与切换语言后链接仍存在的 DOM 回归测试。

最新 CI（main b4e6edb）已全部结束：Python quality、Recovery safety、Issue recovery、Deployment rehearsal 成功；Rewrite contracts 失败。失败仍是已有的 Todo inbox 与 Bounty inbox，原因见 #82 诊断，不是已修复的语法收集错误。以上为源码与 GitHub CI 核验，本次未另行执行代码。