deckhearth

rstillwell/deckhearth

Fork 0

Commit graph

Author	SHA1	Message	Date
Randall Stillwell	f666a885b9	chore(convoys): mark shipped convoys and refresh ship-readiness Close stale convoy frontmatter for merged scanner, lint, and hygiene work; record P1 #11.5 and queued follow-ups as RESOLVED with PR references. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-02 08:48:42 -05:00
varutasu	c197dc61ed	Vocabulary cleanup follow-up (#55 ) Correct dashboard title (My Collection overview, not Lists), sweep remaining marketing/auth copy, update system-list seed description, add vocabulary unit tests, and close the convoy record. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-29 10:01:03 -05:00
varutasu	8c58990fd9	fix(security): stop leaking Gemini API key to browsers (#34 ) Delete the public /api/config/gemini endpoint and remove client auto-load paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit class for the upcoming server-side identify route and a CI gate that blocks reintroducing config key leaks or new browser LLM URLs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-27 08:41:48 -05:00

Author

SHA1

Message

Date

Randall Stillwell

f666a885b9

chore(convoys): mark shipped convoys and refresh ship-readiness

Close stale convoy frontmatter for merged scanner, lint, and hygiene work;
record P1 #11.5 and queued follow-ups as RESOLVED with PR references.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-02 08:48:42 -05:00

varutasu

c197dc61ed

Vocabulary cleanup follow-up (#55 )

Correct dashboard title (My Collection overview, not Lists), sweep
remaining marketing/auth copy, update system-list seed description,
add vocabulary unit tests, and close the convoy record.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-29 10:01:03 -05:00

varutasu

8c58990fd9

fix(security): stop leaking Gemini API key to browsers (#34 )

Delete the public /api/config/gemini endpoint and remove client auto-load
paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit
class for the upcoming server-side identify route and a CI gate that blocks
reintroducing config key leaks or new browser LLM URLs.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-27 08:41:48 -05:00

3 commits