add Cache-Control: no-store via security headers middleware - #3712

Closed

aydnOktay wants to merge 8 commits into

NousResearch:mainfrom

aydnOktay:feat/security-cache-control-no-store

Commits on Mar 29, 2026

feat(api-server): expose Location, X-Request-Id, Idempotency-Key via CORS
aydnOktay
committed
b297b60
test(api-server): assert Access-Control-Expose-Headers present for CORS
aydnOktay
committed
6ea3792
fix(skills): always surface remote environment reminder; show setup_note even when local setup complete
aydnOktay
committed
4d7cd4a
fix(skills): keep skill_view JSON free of setup_note after local capture; synthesize remote reminder only in message layer
aydnOktay
committed
79700ce
fix(skills): synthesize remote setup note in _build_skill_message; remove broken preloaded prompt block
aydnOktay
committed
7243deb
fix(skills): track loaded skill names in preloaded prompt builder
aydnOktay
committed
e59f0c4
test(api-server): assert Cache-Control: no-store is present
aydnOktay
committed
f87315a
fix(api-server): set Cache-Control: no-store in security headers middleware
aydnOktay
committed
fba44ea