!1373 broke things. Canvas must fetch component metadata in the editor browser so local frontends are reachable. Restore CORS/OPTIONS support across Next, Astro, Nuxt, and TanStack Start while retaining assertion redemption and origin validation. Dev servers should also fail fast when `CANVAS_SITE_URL` is missing. All four examples must sync and render a nested component tree in Canvas.