- X-Content-Type-Options: 'no-sniff' -> 'nosniff' in all three header
paths (security-headers.ts, next.config.ts, scripts/serve.js) — the
old value is invalid, so MIME-sniffing protection was silently off.
- Unquote Manrope in fonts.css (stylelint).
- eslint-disable the compat shim's export * (barrel-files rule) — the
shim's whole job is to mirror @sentry/react's surface.
- Extract the Monaco loader config shared by pages/_app.tsx and
routes/__root.tsx into lib/configure-monaco-loader.ts so the asset
path can't drift between the two runtimes.
- Deduplicate fileKey between useEdgeFunctionsDiff and
EdgeFunctionsDiffPanel (matching must stay behaviourally identical).
- Prettier over compat/next/router{,.test}.ts and TANSTACK_MIGRATION.md
(CI format failure).
Claude-Session: https://claude.ai/code/session_01MLH8WVg8zBJnmZTYTV3ooo
Alaister Young
16983317d4