Cloudflare Headers & Terser Targeting Fixes

frontend/index.html

@@ -20,16 +20,16 @@
     <meta property="og:url" content="%VITE_BASE_URL%/" />
 
     <!-- Discord/Twitter Thumbnail Preview -->
-    <meta property="og:image" content="%VITE_BASE_URL%/web-app-manifest-512x512.png?v=20260827" />
+    <meta property="og:image" content="%VITE_BASE_URL%/web-app-manifest-512x512.png?v=20260827-1" />
     <meta name="twitter:card" content="summary" />
 
     <!-- Icons -->
-    <link rel="icon" type="image/png" href="/favicon-96x96.png?v=20260827" sizes="96x96" />
-    <link rel="icon" type="image/svg+xml" href="/favicon.svg?v=20260827" />
-    <link rel="shortcut icon" href="/favicon.ico?v=20260827" />
-    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260827" />
+    <link rel="icon" type="image/png" href="/favicon-96x96.png?v=20260827-1" sizes="96x96" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg?v=20260827-1" />
+    <link rel="shortcut icon" href="/favicon.ico?v=20260827-1" />
+    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260827-1" />
     <meta name="apple-mobile-web-app-title" content="Tickets Bot" />
-    <link rel="manifest" href="/site.webmanifest?v=20260827" />
+    <link rel="manifest" href="/site.webmanifest?v=20260827-1" />
 
     <!-- Structured Data -->
     <script type="application/ld+json">

frontend/public/_headers

@@ -0,0 +1,16 @@
+# Default security and cache headers for all routes
+/*
+  X-Frame-Options: DENY
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: strict-origin-when-cross-origin
+  Permissions-Policy: camera=(), microphone=(), geolocation=()
+  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
+  Cache-Control: public, max-age=0, must-revalidate
+
+# Immutable 1-year cache for Vite hashed production bundle assets
+/assets/*
+  Cache-Control: public, max-age=31536000, immutable
+
+# Prevent stale HTML caching so new deployments hit users immediately
+/index.html
+  Cache-Control: public, max-age=0, must-revalidate

frontend/public/site.webmanifest

@@ -3,13 +3,13 @@
   "short_name": "Tickets",
   "icons": [
     {
-      "src": "/web-app-manifest-192x192.png?v=20260827",
+      "src": "/web-app-manifest-192x192.png?v=20260827-1",
       "sizes": "192x192",
       "type": "image/png",
       "purpose": "maskable"
     },
     {
-      "src": "/web-app-manifest-512x512.png?v=20260827",
+      "src": "/web-app-manifest-512x512.png?v=20260827-1",
       "sizes": "512x512",
       "type": "image/png",
       "purpose": "maskable"

frontend/tsconfig.json

@@ -7,6 +7,7 @@
     },
     "strict": true,
     "skipLibCheck": true,
+    "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "bundler",
     "allowImportingTsExtensions": true,

frontend/vite.config.ts

@@ -100,6 +100,9 @@ export default defineConfig(({ mode }) => {
       },
       target: "es2022",
       minify: "terser",
+      terserOptions: {
+        ecma: 2022, // Retains modern ES syntax during minification
+      },
       sourcemap: false,
     },
   };