2 commits

Author	SHA1	Message	Date
jedarden	ea8318bc10	fix(web): re-apply Content-Encoding and relax X-Frame-Options ... R2 Workers binding strips Content-Encoding: gzip from served objects even when stored with that metadata — the Pages Function now re-applies it for .gz keys so browsers decompress the body before parsing as JSON. Change X-Frame-Options from DENY to SAMEORIGIN so the home page can embed /embed.html in its featured-replay iframe (same origin is fine here). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-30 12:48:24 -04:00
jedarden	ae0f072f80	feat(web): route R2 assets through Pages Function instead of r2.aicodebattle.com ... The aicodebattle.com domain was never registered. Replace all hardcoded https://r2.aicodebattle.com references with the /r2/ relative path, served by a Cloudflare Pages Function that reads from the acb-data R2 bucket via binding. Adds web/functions/r2/[[path]].ts and web/wrangler.toml. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-30 07:55:44 -04:00