spectrax_1

[CRITICAL] Fail closed on wildcard CORS origin in production instead of warning (#807)

feat: added back-to-top FAB and fixed ts build errors (#819)

[CRITICAL] Fix WebSocket authentication bypass — enforce SOCKET_AUTH_TOKEN in production (#805)

fix: remove window.sessionRecorder global leak of compressed pose data (fixes #813) (#816)

History page rendering fixed (#803)