varutasu b615fac865 refactor(auth): add withAdmin() wrapper for admin API routes. (#68) ... Extract shared 401/403 gate into permission-middleware and sweep the four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions). Co-authored-by: Cursor <cursoragent@cursor.com>		2026-06-02 12:42:22 -05:00
..
api	test(scanner): cover redesign API and component surfaces (#47)	2026-05-27 14:28:04 -05:00
components	Align UI copy: My Collection vs Lists (#54)	2026-05-29 09:53:40 -05:00
lib	refactor(auth): add withAdmin() wrapper for admin API routes. (#68)	2026-06-02 12:42:22 -05:00
pages	Remove Quick Login + scanner a11y polish (#56)	2026-05-29 22:58:41 -05:00
setup.js	test(auth): add vitest harness + 16 auth-focused unit tests (Brief 5 of fix-auth-bypass)	2026-05-23 11:12:15 -05:00