The LAN-IP rewrite in _getShareBaseUrl() exists to fix unusable 127.0.0.1 links; applying it to every origin meant links copied behind a reverse proxy pointed at http://<LAN-IP>:5100, bypassing TLS. HTTPS and non-localhost origins are now used as-is. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>