Hectoday

Version 0.3.1

setup: Wrap input extraction and validation in error handling so unexpected failures route through onError instead of crashing the server with an unhandled exception (#40).

Version 0.3.0

cors: Only emit CORS headers when the request origin is allowed.
cors: Reflect requested headers in preflight responses when allowHeaders is not configured.
query: Handle malformed percent-encoding gracefully instead of throwing.
setup: Ensure onResponse runs after onRequest and onNotFound errors.
setup: Merge app.request() query option with query params already in the path.
cors: Reflect request origin when credentials: true is used with a wildcard origin.
query: Decode + as space in query string keys and values.
setup: Accept empty request bodies for optional body schemas.