fix(web): allow frp-mix.com Host for Vite dev server

FRP reverse-proxy access to :3100 was blocked by Vite host checks.

Co-authored-by: Cursor <cursoragent@cursor.com>

.doc/ops/CURRENT.md

@@ -41,6 +41,7 @@
 | Cursor-Auto | document-revision-runtime-ui-final-report | feature/document-revision-runtime-ui-final-report | - | document-revision-runtime-ui | done |
 | Cursor-Auto | document-revision-evidence-count | fix/document-revision-evidence-count | - | document-revision-evidence-count | done |
 | Cursor-Auto | document-revision-session-close | feature/document-revision-session-close | - | document-revision-session-close | done |
+| Cursor-Auto | vite-frp-allowed-hosts | fix/vite-frp-allowed-hosts | - | web-devserver | done |
 
 > 新任务开始前登记。`branch` 必须为 `feature/<slug>` 或 `fix/<slug>`，**禁止** `dev` / `test` / `main`。同一 `mutex` 同时仅一个 `in_progress`。
 

.doc/ops/short-term/2026-09-14-vite-frp-allowed-hosts.md

@@ -0,0 +1,40 @@
+---
+title: "Vite 允许 FRP Host（frp-mix.com）"
+status: done
+created: 2026-09-14
+updated: 2026-09-14
+owner: Cursor-Auto
+branch: fix/vite-frp-allowed-hosts
+worktree: "-"
+mutex: web-devserver
+---
+
+# Vite 允许 FRP Host（frp-mix.com）
+
+## 目标
+
+通过 FRP 映射访问 `:3100` 时，Vite 不再拦截 `Host: frp-mix.com`。
+
+## 范围
+
+- `web/vite.config.ts`：`server.allowedHosts` 增加 `.frp-mix.com`
+
+## 非目标
+
+- 不改生产 nginx / 反向代理配置
+- 不放开全部任意 Host（保持显式白名单）
+
+## 步骤
+
+1. [x] 在 `fix/vite-frp-allowed-hosts` 上改 `allowedHosts`
+2. [x] 重启本地 Vite `:3100`
+
+## 验收标准
+
+- [x] 通过 `frp-mix.com`（FRP→3100）可打开开发页，不再出现 `Blocked request. This host is not allowed`
+
+## 相关链接
+
+- Checklist: —
+- Handoff: —
+- Test report: —

web/vite.config.ts

@@ -10,6 +10,8 @@ export default defineConfig({
   server: {
     host: '0.0.0.0',
     port: 3100,
+    // FRP / reverse-proxy Host headers (e.g. frp-mix.com → :3100)
+    allowedHosts: ['.frp-mix.com'],
     proxy: {
       '/api': {
         target: 'http://127.0.0.1:8080',