2 Commits

Author	SHA1	Message	Date
Offending Commit	3bb1150773	docs: add header-driven /api proxy implementation plan ... Ten TDD tasks: dispatchFor helper, client/checkConnection/discovery routing, runtime-config simplification, nginx header proxy, allowlist map, vite dev parity, env + docs. Gated by make ci-web after each task.	2026-06-02 11:33:26 -05:00
Offending Commit	ff9b298116	docs: add header-driven /api proxy design spec ... Same-origin reverse proxy removes browser CORS for the web build; upstream named per-request via X-Honcho-Upstream header (frontend stays source of truth). Tauri keeps reqwest-absolute. Optional SSRF allowlist, open by default. Preserves existing Fleet aggregation; new aggregation deferred.	2026-06-02 11:26:50 -05:00