vercel.json

{
  "rewrites": [
    {
      "source": "/.well-known/ai-plugin.json",
      "destination": "/api/aiplugin.js"
    },
    {
      "source": "/openapi.yaml",
      "destination": "/api/openapi.js"
    },
    {
      "source": "/api/playlist",
      "destination": "/api/playlist.js"
    },
    {
      "source": "/logo.png",
      "destination": "android-chrome-512x512.png"
    },
    {
      "source": "/api/token",
      "destination": "/api/token.js"
    },
    {
      "source": "/api/auth",
      "destination": "/api/auth.js"
    },
    {
      "source": "/terms",
      "destination": "/api/terms.js"
    },
    {
      "source": "/privacy",
      "destination": "/api/privacy.js"
    },
    {
      "source": "/",
      "destination": "/api/index.js"
    }
  ],
  "headers": [
    {
      "source": "(.*)",
      "headers": [
        { "key": "Access-Control-Allow-Credentials", "value": "true" },
        {
          "key": "Access-Control-Allow-Origin",
          "value": "https://chat.openai.com"
        },
        {
          "key": "Access-Control-Allow-Methods",
          "value": "GET,OPTIONS,PATCH,DELETE,POST,PUT"
        },
        {
          "key": "Access-Control-Allow-Headers",
          "value": "X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version"
        },
        {
          "key": "Strict-Transport-Security",
          "value": "max-age=31536000; includeSubDomains"
        },
        {
          "key": "Content-Security-Policy",
          "value": "default-src 'self'; connect-src 'self' https://www.googleapis.com"
        },
        { "key": "X-Content-Type-Options", "value": "nosniff" },
        { "key": "X-Frame-Options", "value": "SAMEORIGIN" }
      ]
    }
  ]
}