varutasu b615fac865 refactor(auth): add withAdmin() wrapper for admin API routes. (#68) ... Extract shared 401/403 gate into permission-middleware and sweep the four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions). Co-authored-by: Cursor <cursoragent@cursor.com>		2026-06-02 12:42:22 -05:00
..
[id]	feat(scanner): condition, foil, quantity, and ownership badge (Brief 2) (#43)	2026-05-27 13:54:33 -05:00
[id].js	Created comprehensive admin card editor	2025-07-24 15:16:57 -05:00
find-or-create.js	feat(scanner): server-side scan pipeline (convoy #2) (#35)	2026-05-27 08:47:05 -05:00
identify-by-text.js	feat(scanner): AI Gateway vision + Layer-1 Tesseract/pg_trgm OCR (#38)	2026-05-27 12:59:59 -05:00
import-mtg.js	refactor(auth): add withAdmin() wrapper for admin API routes. (#68)	2026-06-02 12:42:22 -05:00
import-pokemon.js	refactor(auth): add withAdmin() wrapper for admin API routes. (#68)	2026-06-02 12:42:22 -05:00
owned.js	fix(security): drop wildcard CORS + redundant OPTIONS from 24 API routes (P0 #5)	2026-05-24 20:41:38 -05:00
search.js	feat(security): rate-limit search/upload/import + gate import routes (P0 #6 - closes last P0)	2026-05-24 22:59:59 -05:00