Waleed eb367def31 fix(demo): unblock Cal.com booking embed and align work-email validation (#5335) ...

* fix(demo): unblock Cal.com booking embed and align work-email validation

- Exclude /demo from cross-origin isolation headers (COEP credentialless /
  COOP same-origin) that degraded the third-party Cal.com booking iframe,
  mirroring the existing Google Drive Picker exclusion; the booker no longer
  loads under a Storage-Access handshake that often never finished
- Pin the Cal embed theme/layout in the inline config to fix a dark-on-light
  theme race; keep cal('ui') to UI-only settings
- Gate the demo form's Continue on the same work-email rule the server
  enforces via a shared isFreeEmailDomain helper, bundle-isolated in
  lib/messaging/email/free-email.ts so it doesn't bloat other email bundles
- Trim redundant comments in the demo components

* fix(demo): match /demo subroutes in permissive COEP rule

Align the permissive-headers positive match with the strict-COEP negative
lookahead so any future /demo subroute still receives the permissive
COEP/COOP policy instead of falling through to no headers.

* fix(demo): use demo.* in permissive COEP rule (valid route source)

The demo(/.*)? form introduced a nested capturing group, which Next's
path-to-regexp route-source parser rejects ('Capturing groups are not
allowed'), failing the build. demo.* mirrors the strict-rule lookahead's
demo prefix without a nested group, matching the existing w/.* style.

2026-07-01 14:41:48 -07:00

..

docs

feat(linq): audit fixes + native auto-registering webhook trigger (#5301)

2026-06-30 17:18:57 -07:00

pii

feat(pii): add redaction timing metrics across sidecar and persist path (#5264)

2026-06-29 14:04:49 -04:00

realtime

feat(db): resolve DATABASE_URL per role (DATABASE_URL_<ROLE> with fallback) (#5276)

2026-06-30 15:17:55 -04:00

sim

fix(demo): unblock Cal.com booking embed and align work-email validation (#5335)

2026-07-01 14:41:48 -07:00