2 commits

Author	SHA1	Message	Date
Randall Stillwell	4bc0cfecfc	Follow-up vocabulary cleanup and dashboard h1 fix. ... Correct dashboard title (My Collection overview, not Lists), sweep remaining marketing/auth copy, update system-list seed description, add vocabulary unit tests, and close the convoy record. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-29 09:57:46 -05:00
varutasu	8c58990fd9	fix(security): stop leaking Gemini API key to browsers (#34) ... Delete the public /api/config/gemini endpoint and remove client auto-load paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit class for the upcoming server-side identify route and a CI gate that blocks reintroducing config key leaks or new browser LLM URLs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-27 08:41:48 -05:00