Elie Habib caf2e8fa1a fix(cors): add X-Widget-Key + X-Pro-Key to _cors.js; reduce Max-Age 86400→3600 (#2321) ...

86400s max-age cached old preflight results in browsers for 24h — any CORS
header change left users broken until the cache expired. 3600 (1h) is safer.

Also sync api/_cors.js with server/cors.ts — it was missing X-Widget-Key and
X-Pro-Key, which are needed for widget-agent cross-origin requests.

2026-03-27 00:51:09 +04:00

..

_shared

feat(simulation): MiroFish Phase 2 — theater-limited simulation runner (#2220)

2026-03-25 13:55:59 +04:00

worldmonitor

feat(military): USPTO PatentsView defense/dual-use patent filing seeder (#2047) (#2091)

2026-03-26 17:50:37 +04:00

auth-session.ts

fix(auth): remove 'convex' JWT template dependency for premium RPCs (#2308)

2026-03-26 20:44:40 +04:00

cors.ts

fix(cors): add X-Widget-Key + X-Pro-Key to _cors.js; reduce Max-Age 86400→3600 (#2321)

2026-03-27 00:51:09 +04:00

env.d.ts

refactor(server): consolidate declare const process into shared env.d.ts (#752)

2026-03-02 14:01:41 +04:00

error-mapper.ts

refactor: dedupe error mapper json responses (#1657)

2026-03-15 17:22:49 +04:00

gateway.ts

debug(auth): expose full key comparison detail in Invalid API key 401 (#2313)

2026-03-26 23:16:29 +04:00

router.ts

fix(server): return 405 Method Not Allowed for wrong HTTP method (#757)

2026-03-02 14:20:22 +04:00