cclavin 442142d1ee fix(maps): gate CORS on method, narrow /api/maps/ to /styles ... /api/maps/ has ten POST/PATCH/DELETE routes under it (download-remote, extract, marker CRUD, and others). The middleware set Access-Control-Allow-Origin before checking the method, so those responses got the header too. Gate emission to GET/HEAD/OPTIONS. /styles is the only /api/maps/ route another app needs cross-origin (confirmed against the app that surfaced this bug); match it exactly instead of the whole prefix. The other three prefixes are served by AdonisJS's static provider, GET/HEAD only, so they're unaffected.		2026-10-07 18:21:04 -05:00
..
controllers	feat(AI): add opt-in relevance check for off-topic retrieval	2026-09-29 15:54:41 -07:00
data	refactor(drug-reference): make collections JSON the single source for curated data (#1130)	2026-08-04 03:38:35 +00:00
exceptions	fix(Docs): documentation renderer fixes	2025-12-23 16:00:33 -08:00
jobs	fix(drug-reference): backfill the missing dataset install row on boot	2026-09-29 15:54:41 -07:00
middleware	fix(maps): gate CORS on method, narrow /api/maps/ to /styles	2026-10-07 18:21:04 -05:00
models	feat(kb): per-file active toggle + collection grouping/bulk toggle (#1286)	2026-09-29 15:54:41 -07:00
services	fix(ai): probe a model the list reports without vision before disabling images	2026-10-05 14:25:28 -07:00
utils	fix(ai): probe a model the list reports without vision before disabling images	2026-10-05 14:25:28 -07:00
validators	fix(gpu): detect Ollama CPU fallback on AMD and offer the right fix	2026-09-29 15:54:41 -07:00