v1.2.13

Bug Fixes

Tauri Desktop — Asset detail page infinite loading

Clicking on an asset from the Asset List page in the desktop app (/Applications/Strata.app) caused an endless “Starting services…” spinner. Two root causes were fixed:

CORS blocked all API requests in Tauri dev mode. The backend sidecar was launched with ALLOWED_ORIGINS=tauri://localhost only. The Tauri dev server runs on http://127.0.0.1:143x (port increments dynamically), which was not in the allowlist. Additionally, NestJS’s enableCors() was silently overridden by Helmet. The fix replaces the built-in CORS with a custom Express middleware that runs before Helmet and supports prefix-based origin matching for dev builds.

Asset detail navigation resolved to the Tauri loader. The link href="/assets/detail?id=..." used an absolute path which — in the desktop bundle served under /app/ — resolved to the root loader page (Starting services…). The fix uses import.meta.env.BASE_URL to build base-aware links, so they correctly resolve to /app/assets/detail?id=... in desktop mode and /assets/detail?id=... in web mode.

The same navigation fix was applied to portfolio links.