add /api/products-index same-origin proxy (fix VAIX RAG CORS)

index.ts

@@ -1193,6 +1193,19 @@ const server = Bun.serve({
         return new Response("proxy error: " + String(e?.message || e), { status: 502 });
       }
     }},
+    "/api/products-index": { GET: async (req: Request) => {
+      // Same-origin proxy for the full products_index.json (VAIX RAG engine),
+      // avoiding CORS on the HF resolve->xethub redirect from the browser.
+      try {
+        const u = "https://huggingface.co/datasets/bep40/grob-products-updated/resolve/main/products_index.json";
+        const resp = await fetch(u, { headers: { "User-Agent": "Mozilla/5.0 (compatible; VAI-Avatar2/1.0)" }, signal: AbortSignal.timeout(60000) });
+        if (!resp.ok) return new Response("upstream " + resp.status, { status: 502 });
+        const buf = Buffer.from(await resp.arrayBuffer());
+        return new Response(buf, { headers: { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "public, max-age=600", "Access-Control-Allow-Origin": "*" } });
+      } catch (e: any) {
+        return new Response("proxy error: " + String(e?.message || e), { status: 502 });
+      }
+    }},
     "/api/img": { GET: async (req: Request) => {