feat(release): stage GitWorkshop and next node updates

neode-ui/src/utils/openExternal.ts

@@ -15,6 +15,8 @@ interface ArchipelagoNativeBridge {
   /** Richer launch (companion ≥0.5.26): catalog icon + display name drive the
    *  native branded loader instead of the site favicon. */
   openInAppEx?: (url: string, iconUrl: string, name: string) => void
+  /** Install only the connected node's CA through Android's system prompt. */
+  installNodeCertificate?: () => void
 }
 
 /** Optional app identity for the native loading screen. */
@@ -58,15 +60,34 @@ export function openExternalUrl(url: string): void {
 export function openInAppOrNewTab(url: string, meta?: InAppLaunchMeta): void {
   if (!url) return
   const native = nativeBridge()
+  // Native WebView.loadUrl requires a complete URL. Browser APIs accept
+  // relative paths, so this only surfaced when a same-origin app was launched
+  // by the companion bridge.
+  let nativeUrl = url
+  if (!/^[a-z][a-z\d+.-]*:/i.test(url)) {
+    try {
+      nativeUrl = new URL(url, window.location.origin).href
+    } catch { /* keep as-is */ }
+  }
   if (native && typeof native.openInAppEx === 'function' && (meta?.iconUrl || meta?.name)) {
     // Absolutize the icon path so the native shell can fetch it directly.
     const icon = meta.iconUrl ? new URL(meta.iconUrl, window.location.origin).href : ''
-    native.openInAppEx(url, icon, meta.name ?? '')
+    native.openInAppEx(nativeUrl, icon, meta.name ?? '')
     return
   }
   if (native && typeof native.openInApp === 'function') {
-    native.openInApp(url)
+    native.openInApp(nativeUrl)
     return
   }
   window.open(url, '_blank', 'noopener,noreferrer')
 }
+
+/** Use Android's credential installer when the dashboard runs in the
+ * companion. Returns false in an ordinary browser so the caller can preserve
+ * the normal file-download behavior. */
+export function installCertificateInCompanion(): boolean {
+  const native = nativeBridge()
+  if (!native || typeof native.installNodeCertificate !== 'function') return false
+  native.installNodeCertificate()
+  return true
+}