Production uses two hostnames on the same deployment. Locally, everything runs on one origin.
Changelog
GET /changelog.txt returns plain-text release notes for shipped updates, grouped as Security, Fixed, Added, and Changed. Cache-Control: public, max-age=3600.
Health
GET /health returns JSON with service metadata (name, version, api, flagsCdnBase, docs, openapi, llms), status ("ok" or "degraded"), time, instance uptime (seconds and since — warm serverless instance or local process, not global uptime since deploy), handler latencyMs, checks (dataset and flagManifest with per-check latencyMs), runtime (Node version and memory), and optional deployment fields when running on Vercel. Returns HTTP 503 when checks fail; Cache-Control: no-store.
Flag URLs in JSONCountry flags.* fields are absolute URLs built from FLAGS_CDN_BASE_URL. In production they point at cdn.flags.robskan.nl.
