Header carrying the @playlive/tiltify-core build that issued a request.
Proxy-only. Sent exclusively on requests routed through a St. Jude
Tiltify proxy (PROD_PROXY_URL and friends), never on direct calls
to v5api.tiltify.com. Two reasons:
Tiltify has no use for it, and every extra header on a cross-origin
browser request is another entry that has to appear in the upstream's
Access-Control-Allow-Headers or the preflight fails outright.
It is operational telemetry for our infrastructure. The proxy logs
it so we can tell which client builds are still in the wild — the
thing that would have immediately explained a stale consumer pinning
an old release instead of it looking like a proxy regression.
Paired with SOURCE_HEADER_NAME rather than folded into it:
X-Source is consumer-overridable via Tiltify.SetSourceTag(), so once
an app renames it the library identity is gone. This header always
reports the library.
Header carrying the
@playlive/tiltify-corebuild that issued a request.Proxy-only. Sent exclusively on requests routed through a St. Jude Tiltify proxy (PROD_PROXY_URL and friends), never on direct calls to
v5api.tiltify.com. Two reasons:Access-Control-Allow-Headersor the preflight fails outright.Paired with SOURCE_HEADER_NAME rather than folded into it:
X-Sourceis consumer-overridable viaTiltify.SetSourceTag(), so once an app renames it the library identity is gone. This header always reports the library.