Extract shared 401/403 gate into permission-middleware and sweep the four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions). Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| .. | ||
| api-routes.mdc | ||
| auth-and-permissions.mdc | ||
| db-and-schema.mdc | ||
| no-go-zones.mdc | ||
| schema-map.mdc | ||
| ui-and-theming.mdc | ||