varutasu 708ef45a96 feat(security): rate-limit search/upload/import + gate import routes (P0 #6 - closes last P0) ... Closes P0 #6 from PARTIAL to RESOLVED. 8/8 P0s now closed. Extends lib/rate-limit.js from single-class to 5 named limiters (auth/search/upload/generate/import). Atomically gates the 3 import routes (auth + admin-role check + rate limit) and fixes pages/admin/card-import.js's missing Bearer header in the same commit (architect's critical discovery: API gating alone would have broken the admin UI). Per Decision 1 Option A. 10 files +185/-23. Local: lint 128 baseline, vitest 21/21. CI: Playwright smoke 3/3 in 3.8s, forbidden-cors-headers pass, all gates green. PR #20 architect-commit 60b842e, implementer-commit 51a3a97. Brief 4's login.js + register.js byte-identical.		2026-05-24 22:59:59 -05:00
..
flags	bootstrap: agent pipeline v0.5.0 + ship-readiness review	2026-05-23 02:31:26 -05:00
admin-auth.js	Integrated real database authentication with JWT tokens	2025-07-24 16:36:10 -05:00
ai-ocr.js	✨ Major Scanner Improvements	2025-07-29 14:19:48 -05:00
auth-context.js	✨ Major Scanner Improvements	2025-07-29 14:19:48 -05:00
auth-secret.js	fix(auth): centralize JWT secret + 24h TTL (Brief 1 of fix-auth-bypass)	2026-05-23 10:40:50 -05:00
database.js	Major redesign: Enhanced card display with particle effects, improved filters, and search functionality	2025-07-23 21:26:54 -05:00
mana-symbols.js	✨ Major Scanner Improvements	2025-07-29 14:19:48 -05:00
permission-middleware.js	fix(auth): remove synthetic-admin bypass (Brief 2 of fix-auth-bypass)	2026-05-23 10:57:23 -05:00
rate-limit.js	feat(security): rate-limit search/upload/import + gate import routes (P0 #6 - closes last P0)	2026-05-24 22:59:59 -05:00
slug-utils.js	🔗 Implement Collection Slug URLs	2025-07-26 22:06:52 -05:00
theme-context.js	Major redesign: Enhanced card display with particle effects, improved filters, and search functionality	2025-07-23 21:26:54 -05:00
use-auth.js	🔐 Fix Authentication Issues in Collection Pages	2025-07-26 22:23:31 -05:00