varutasu 8c58990fd9 fix(security): stop leaking Gemini API key to browsers (#34) ... Delete the public /api/config/gemini endpoint and remove client auto-load paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit class for the upcoming server-side identify route and a CI gate that blocks reintroducing config key leaks or new browser LLM URLs. Co-authored-by: Cursor <cursoragent@cursor.com>		2026-05-27 08:41:48 -05:00
..
flags	bootstrap: agent pipeline v0.5.0 + ship-readiness review	2026-05-23 02:31:26 -05:00
ai-ocr.js	✨ Major Scanner Improvements	2025-07-29 14:19:48 -05:00
auth-secret.js	fix(auth): centralize JWT secret + 24h TTL (Brief 1 of fix-auth-bypass)	2026-05-23 10:40:50 -05:00
mana-symbols.js	✨ Major Scanner Improvements	2025-07-29 14:19:48 -05:00
permission-middleware.js	fix(auth): remove synthetic-admin bypass (Brief 2 of fix-auth-bypass)	2026-05-23 10:57:23 -05:00
rate-limit.js	fix(security): stop leaking Gemini API key to browsers (#34)	2026-05-27 08:41:48 -05:00
slug-utils.js	🔗 Implement Collection Slug URLs	2025-07-26 22:06:52 -05:00
theme-context.js	Major redesign: Enhanced card display with particle effects, improved filters, and search functionality	2025-07-23 21:26:54 -05:00
use-auth.js	🔐 Fix Authentication Issues in Collection Pages	2025-07-26 22:23:31 -05:00