Links leave the app instead of opening inside it
Pekan Desktop now draws a hard line between the app window and the rest of the web. The window loads one thing, the board it serves on your own machine, and it will not navigate anywhere else. Links that used to open in a second app window, a link in a task description, a pull request, an attachment you asked to see in a new tab, now open in your normal browser instead, where they belong. Nothing you click disappears, it just arrives in the right place, with your bookmarks, your extensions and your session already there.
The reason is worth stating plainly. Pekan can start terminals, run coding agents, edit files and push branches on your behalf, and everything inside the app window is trusted to ask for that. A page fetched from the internet must never inherit that trust, however it got there. So remote pages can no longer be loaded into the window at all, and a link is checked before it is handed to the operating system: ordinary web links and mail links go through, while file paths, script URLs, data URLs, addresses carrying an embedded username and password, and anything else unexpected are refused outright and quietly logged rather than opened.
Every request the app window makes of the desktop, opening a terminal, writing a file, running Git, is now checked to confirm it really came from the Pekan window before it runs. The Help, changelog, issue tracker, legal and repository links all behave exactly as before, and signing in still hands you to your browser as usual.
Highlights
- Web links, PR links and attachments open in your browser, not in a second app window.
- The app window can only ever load your own local board.
- Unsafe addresses are refused before they reach the operating system.