cclavin 442142d1ee fix(maps): gate CORS on method, narrow /api/maps/ to /styles ... /api/maps/ has ten POST/PATCH/DELETE routes under it (download-remote, extract, marker CRUD, and others). The middleware set Access-Control-Allow-Origin before checking the method, so those responses got the header too. Gate emission to GET/HEAD/OPTIONS. /styles is the only /api/maps/ route another app needs cross-origin (confirmed against the app that surfaced this bug); match it exactly instead of the whole prefix. The other three prefixes are served by AdonisJS's static provider, GET/HEAD only, so they're unaffected.		2026-10-07 18:21:04 -05:00
..
eval	feat(AI): add opt-in relevance check for off-topic retrieval	2026-09-29 15:54:41 -07:00
functional	feat: auto-generating OpenAPI docs with Scalar UI (#1128)	2026-08-04 03:38:33 +00:00
standalone	refactor(drug-reference): make collections JSON the single source for curated data (#1130)	2026-08-04 03:38:35 +00:00
unit	fix(maps): gate CORS on method, narrow /api/maps/ to /styles	2026-10-07 18:21:04 -05:00
bootstrap.ts	feat: initial commit	2025-06-29 15:51:08 -07:00