- Sanitize page_path before router.push (H5) to prevent cross-user login via shared link
- onShareAppMessage: remove unionid/openid/status and related query keys from shared path
- main.ts: fix login(to.query.toString()) bug; when already logged in, strip foreign unionid from URL instead of logout
Made-with: Cursor
Remove local deployment credential files and private weapp config from tracking, and add explicit ignore rules to prevent re-adding them.
Made-with: Cursor
Add the current frontend codebase with a baseline .gitignore and update piano-specific UI terms to teaching-oriented terms for the current product context.
Made-with: Cursor