Said TurkseverandClaude Opus 5.5 0b5b897c11 Allow active TLE group, admit proxied same-origin requests, keep longest cooldown ...

- CelesTrak allowlist includes `active`, which Space Missions'
  getActiveTle() requests; unknown groups still answer 400.
- The CelesTrak gate uses admitSameSiteKeyless so the documented reverse
  proxy keeps working while foreign/opaque Origins and cross-site
  Sec-Fetch-Site are still refused with 403.
- A provider failure never shortens an existing cooldown (CelesTrak and
  Launch Library keep the later deadline).
- Tests: real getActiveTle() through the middleware, proxied app request
  vs unrelated Origin, concurrent failures finishing in both orders.
- docs/CURRENT-STATE.md: eight groups, keyless gate, non-shortening cooldown.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-23 12:26:41 +01:00

..

celestrak.js

Allow active TLE group, admit proxied same-origin requests, keep longest cooldown

2026-10-23 12:26:41 +01:00

cooldown.js

fix(space): respect provider cooldowns and bound TLE groups

2026-10-20 00:28:00 +01:00

launch-library.js

Allow active TLE group, admit proxied same-origin requests, keep longest cooldown

2026-10-23 12:26:41 +01:00