DhanushSantosh b0b49764b9 fix: add localhost to CORS_ORIGIN for web mode development ...

The web mode launcher was setting CORS_ORIGIN to only include the system
hostname and 127.0.0.1, but users access via http://localhost:3007 which
wasn't in the allowed list.

Now includes:
- http://localhost:3007 (primary dev URL)
- http://$HOSTNAME:3007 (system hostname if needed)
- http://127.0.0.1:3007 (loopback IP)

Also cleaned up debug logging from CORS check since root cause is now clear.

Fixes: Persistent "Not allowed by CORS" errors in web mode

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

2026-01-18 01:50:41 +05:30

..

lib

docs: add hint about AUTOMAKER_API_KEY env var to API key banner

2026-01-17 13:53:34 +01:00

middleware

feat: add dev server log panel with real-time streaming

2026-01-13 21:56:35 +01:00

providers

refactor: update timeout constants in CLI and Codex providers

2026-01-17 00:52:57 +01:00

routes

fix: sandbox warning persistence and add env var option

2026-01-17 15:33:51 +01:00

services

feat: add HOSTNAME and VITE_HOSTNAME support for improved server URL configuration

2026-01-16 22:40:36 -05:00

tests

chore: update npm audit level in CI workflow

2026-01-07 20:24:49 +05:30

types

refactor: remove kanbanCardDetailLevel from settings and UI components

2026-01-10 13:39:45 -05:00

index.ts

fix: add localhost to CORS_ORIGIN for web mode development

2026-01-18 01:50:41 +05:30