3b3d22d0ce
Some checks failed
Demo images / Build & push demo images (push) Has been cancelled
1.2.x's auth-hardening work added Hono secureHeaders() with a default X-Frame-Options: SAMEORIGIN, which unconditionally blocked the Archipelago node dashboard's iframe (different origin by port) — a real regression versus 1.1.0, which never sent this header. Fixed upstream in the botfight repo (commit 8eb27ed): X-Frame-Options is now conditional on ARCHY_EMBEDDED, disabled only for the first-party node-embedded instance. apps/botfights/manifest.yml: image/version -> 1.2.2, adds ARCHY_EMBEDDED=1 to environment, drops the interim metadata.launch.open_in_new_tab workaround (no longer needed — the app can now be framed). app-catalog/catalog.json, scripts/image-versions.sh, neode-ui/public/catalog.json bumped in lockstep via scripts/generate-app-catalog.py. core/archipelago/src/fips/app_ports.rs regenerated (formatting only, same port set). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>