fix: pass event to errorResponse for proper CORS on errors

- Error middleware now passes event parameter to errorResponse
- Fixes Firefox extension CORS headers on authentication errors
- Both withErrorHandling and withAuthErrorHandling updated
- Extension origin properly reflected in all error responses

docs/git-history.json

···
 [
   {
-    "hash": "be9f4207b61429400e44ccfda326595c1087235c",
-    "short_hash": "be9f420",
+    "hash": "bb14ec5fb6426bbf4a7bc8bf1661bfbad29f16bd",
+    "short_hash": "bb14ec5",
     "author": "Ariel M. Lighty",
-    "date": "2025-12-28T19:21:29-05:00",
-    "message": "feat: add Firefox support with webextension-polyfill\n\nImplemented cross-browser compatibility for the extension:\n\n- Installed webextension-polyfill for unified browser.* API\n- Replaced all chrome.* API calls with browser.* imports\n- Updated build system to output both chrome/ and firefox/ directories\n- Created Firefox-specific manifest with browser_specific_settings",
-    "files_changed": 12
+    "date": "2025-12-28T20:32:16-05:00",
+    "message": "fix: add Firefox extension CORS support\n\n- Added moz-extension:// origin detection to CORS handler\n- Added cookies permission to Firefox manifest for credentialed requests\n- Functions now properly reflect Firefox extension origins with credentials",
+    "files_changed": 5
   },
   {
     "hash": "603cf0a187850664336a12c9e5cbb49038906f53",
···
     "files_changed": 9
   },
   {
-    "hash": "6ac877ee6d1990bdab4ef3b03ac59f4682afe0a5",
-    "short_hash": "6ac877e",
+    "hash": "d07180cd3a19328b82b35118e525b59d4e2e060b",
+    "short_hash": "d07180c",
     "author": "Ariel M. Lighty",
-    "date": "2025-12-27T16:03:56-05:00",
-    "message": "docs: update decision graph after markdown updates",
-    "files_changed": 2
+    "date": "2025-12-27T18:38:39-05:00",
+    "message": "feat: add Tailwind CSS to extension\n\nReplaced 299 lines of vanilla CSS with Tailwind for design consistency with web app. Production build minified to 13KB.",
+    "files_changed": 9
   },
   {
     "hash": "fe29bb3e5faa0151f63c14724f7509af669860de",
···
     "files_changed": 3
   },
   {
-    "hash": "ba29fd68872913ba0a587aa7f29f97b3d373a732",
-    "short_hash": "ba29fd6",
+    "hash": "32cdee3aeac7ef986df47e0fff786b5f7471e55b",
+    "short_hash": "32cdee3",
     "author": "Ariel M. Lighty",
     "date": "2025-12-25T13:22:32-05:00",
     "message": "configure Netlify dev for monorepo with --filter flag\n\nFixed Netlify CLI monorepo detection issue by using --filter flag:\n- Updated root package.json scripts to use 'npx netlify-cli dev --filter @atlast/web'\n- Updated netlify.toml [dev] section to use npm with --prefix for framework command\n- Added monorepo development instructions to CLAUDE.md\n- Documented Windows Git Bash compatibility issue with netlify command\n\nSolution: Use 'npx netlify-cli dev --filter @atlast/web' to bypass monorepo\nproject selection prompt and specify which workspace package to run.\n\nDev server now runs successfully at http://localhost:8888 with all backend\nfunctions loaded.",
-    "files_changed": 5
+    "files_changed": 4
   },
   {
-    "hash": "32cdee3aeac7ef986df47e0fff786b5f7471e55b",
-    "short_hash": "32cdee3",
+    "hash": "ba29fd68872913ba0a587aa7f29f97b3d373a732",
+    "short_hash": "ba29fd6",
     "author": "Ariel M. Lighty",
     "date": "2025-12-25T13:22:32-05:00",
     "message": "configure Netlify dev for monorepo with --filter flag\n\nFixed Netlify CLI monorepo detection issue by using --filter flag:\n- Updated root package.json scripts to use 'npx netlify-cli dev --filter @atlast/web'\n- Updated netlify.toml [dev] section to use npm with --prefix for framework command\n- Added monorepo development instructions to CLAUDE.md\n- Documented Windows Git Bash compatibility issue with netlify command\n\nSolution: Use 'npx netlify-cli dev --filter @atlast/web' to bypass monorepo\nproject selection prompt and specify which workspace package to run.\n\nDev server now runs successfully at http://localhost:8888 with all backend\nfunctions loaded.",
-    "files_changed": 4
+    "files_changed": 5
   },
   {
     "hash": "c3e7afad396d130791d801a85cbfc9643bcd6309",

docs/graph-data.json

···
       "node_type": "observation",
       "title": "Health check uses HEAD request to root URL (Vite server), not a Netlify function. Doesn't get CORS headers from getCorsHeaders. Need dedicated health endpoint or change check to use existing function.",
       "description": null,
-      "status": "pending",
+      "status": "completed",
       "created_at": "2025-12-28T20:37:22.132717600-05:00",
-      "updated_at": "2025-12-28T20:37:22.132717600-05:00",
+      "updated_at": "2025-12-28T20:38:41.630020900-05:00",
       "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
     },
     {
···
       "node_type": "outcome",
       "title": "Created /health function endpoint with CORS support. Updated checkServerHealth to use /.netlify/functions/health instead of root URL. Extension rebuilt successfully.",
       "description": null,
-      "status": "pending",
+      "status": "completed",
       "created_at": "2025-12-28T20:38:19.981309500-05:00",
-      "updated_at": "2025-12-28T20:38:19.981309500-05:00",
+      "updated_at": "2025-12-28T20:38:41.780183300-05:00",
+      "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
+    },
+    {
+      "id": 390,
+      "change_id": "cfdcf45b-47b3-4239-8053-417bd31957ed",
+      "node_type": "observation",
+      "title": "Server receives session request but returns CORS wildcard (*) instead of extension origin. No session cookie received. Origin header might not be sent by Firefox extension or not detected correctly.",
+      "description": null,
+      "status": "pending",
+      "created_at": "2025-12-28T20:48:12.770638500-05:00",
+      "updated_at": "2025-12-28T20:48:12.770638500-05:00",
+      "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
+    },
+    {
+      "id": 391,
+      "change_id": "2b53a419-9a47-4285-9a12-9bdfaeeb9ff0",
+      "node_type": "observation",
+      "title": "Health endpoint gets CORS headers correctly (moz-extension detected). Session endpoint error middleware doesn't pass event to errorResponse, returns wildcard CORS. Need to fix error middleware to pass event.",
+      "description": null,
+      "status": "pending",
+      "created_at": "2025-12-28T20:55:32.024834200-05:00",
+      "updated_at": "2025-12-28T20:55:32.024834200-05:00",
+      "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
+    },
+    {
+      "id": 392,
+      "change_id": "c941d136-3405-483d-bf34-7fb011f6d072",
+      "node_type": "action",
+      "title": "Fixed error middleware to pass event to errorResponse for proper CORS headers on errors",
+      "description": null,
+      "status": "pending",
+      "created_at": "2025-12-28T20:56:38.876266200-05:00",
+      "updated_at": "2025-12-28T20:56:38.876266200-05:00",
+      "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
+    },
+    {
+      "id": 393,
+      "change_id": "aafd9977-8800-4152-9f7f-b817db6df573",
+      "node_type": "outcome",
+      "title": "Fixed Firefox extension CORS completely. Error middleware now passes event to errorResponse so Firefox extension origin is properly reflected in error responses with credentials. Debug logging removed.",
+      "description": null,
+      "status": "pending",
+      "created_at": "2025-12-28T21:37:22.780953600-05:00",
+      "updated_at": "2025-12-28T21:37:22.780953600-05:00",
       "metadata_json": "{\"branch\":\"master\",\"confidence\":95}"
     }
   ],
···
       "weight": 1.0,
       "rationale": "Fix implemented",
       "created_at": "2025-12-28T20:38:22.044029100-05:00"
+    },
+    {
+      "id": 386,
+      "from_node_id": 389,
+      "to_node_id": 390,
+      "from_change_id": "f522d5b2-c325-4f34-9f27-b8ea5c50618d",
+      "to_change_id": "cfdcf45b-47b3-4239-8053-417bd31957ed",
+      "edge_type": "leads_to",
+      "weight": 1.0,
+      "rationale": "Issue persists - need to debug headers",
+      "created_at": "2025-12-28T20:48:14.949702100-05:00"
+    },
+    {
+      "id": 387,
+      "from_node_id": 390,
+      "to_node_id": 391,
+      "from_change_id": "cfdcf45b-47b3-4239-8053-417bd31957ed",
+      "to_change_id": "2b53a419-9a47-4285-9a12-9bdfaeeb9ff0",
+      "edge_type": "leads_to",
+      "weight": 1.0,
+      "rationale": "Root cause identified from debug logs",
+      "created_at": "2025-12-28T20:55:34.094943700-05:00"
+    },
+    {
+      "id": 388,
+      "from_node_id": 391,
+      "to_node_id": 392,
+      "from_change_id": "2b53a419-9a47-4285-9a12-9bdfaeeb9ff0",
+      "to_change_id": "c941d136-3405-483d-bf34-7fb011f6d072",
+      "edge_type": "leads_to",
+      "weight": 1.0,
+      "rationale": "Fix implemented",
+      "created_at": "2025-12-28T20:57:35.872426900-05:00"
+    },
+    {
+      "id": 389,
+      "from_node_id": 392,
+      "to_node_id": 393,
+      "from_change_id": "c941d136-3405-483d-bf34-7fb011f6d072",
+      "to_change_id": "aafd9977-8800-4152-9f7f-b817db6df573",
+      "edge_type": "leads_to",
+      "weight": 1.0,
+      "rationale": "Complete fix with cleanup",
+      "created_at": "2025-12-28T21:37:27.704906300-05:00"
     }
   ]
 }

packages/functions/src/core/middleware/error.middleware.ts

···
       }
 
       if (error instanceof ApiError) {
-        return errorResponse(error.message, error.statusCode, error.details);
+        return errorResponse(error.message, error.statusCode, error.details, event);
       }
 
       // Unknown errors
···
         "Internal server error",
         500,
         error instanceof Error ? error.message : "Unknown error",
+        event,
       );
     }
   };
···
       console.error("Authenticated handler error:", error);
 
       if (error instanceof ApiError) {
-        return errorResponse(error.message, error.statusCode, error.details);
+        return errorResponse(error.message, error.statusCode, error.details, event);
       }
 
       return errorResponse(
         "Internal server error",
         500,
         error instanceof Error ? error.message : "Unknown error",
+        event,
       );
     }
   };