Randall Stillwell bd865719a2 refactor(auth): add withAdmin() wrapper for admin API routes. ... Extract shared 401/403 gate into permission-middleware and sweep the four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions). Co-authored-by: Cursor <cursoragent@cursor.com>		2026-06-02 11:02:46 -05:00
..
auth-secret.test.js	test(auth): add vitest harness + 16 auth-focused unit tests (Brief 5 of fix-auth-bypass)	2026-05-23 11:12:15 -05:00
card-import-discover.test.js	Prioritize newest missing sets in catalog sync queue. (#49)	2026-05-27 21:49:58 -05:00
card-import-pokemon-github.test.js	Switch Pokémon catalog import to pokemon-tcg-data on GitHub. (#52)	2026-05-28 11:56:01 -05:00
card-import-reconcile-submissions.test.js	Normalize collector numbers in catalog match and harden scanner adds. (#53)	2026-05-28 14:45:55 -05:00
card-import-sync-catalog.test.js	Prioritize newest missing sets in catalog sync queue. (#49)	2026-05-27 21:49:58 -05:00
card-number-utils.test.js	Normalize collector numbers in catalog match and harden scanner adds. (#53)	2026-05-28 14:45:55 -05:00
collection-vocabulary.test.js	Vocabulary cleanup follow-up (#55)	2026-05-29 10:01:03 -05:00
permission-middleware.test.js	refactor(auth): add withAdmin() wrapper for admin API routes.	2026-06-02 11:02:46 -05:00