Module cors 

Functions

inject_ath_into_extensions

Bridges State<AllowThem> into request extensions so that [cors_middleware] (which reads from extensions) works in standalone mode. In SaaS mode the tenant router populates extensions directly; this shim is not used there.