2 Commits

Author	SHA1	Message	Date
diegosouzapw	c286fdc96a	fix(auth): require admin auth for backup and translator routes ... Protect database backup, export, restore, and translator save endpoints with authentication checks to block unauthenticated data access and state changes. Also remove the insecure API key secret fallback, ignore nested app env files from package publishes, and align tests with explicit application/json Accept headers for non-stream requests	2026-04-12 19:08:06 -03:00
diegosouzapw	592ca9b5c4	fix: remove hardcoded localhost default arg from GET /api/keys, unify coverage to single coverage/ dir, fix test to pass explicit Request ... - Remove `new Request('http://localhost/api/keys')` default arg from GET handler in src/app/api/keys/route.ts (line 26) - Fix api-key-reveal-route.test.mjs to pass explicit Request instead of calling GET() with no args - Add --output-dir coverage to all c8 scripts in package.json - Add coverage.reportsDirectory: 'coverage' to vitest.config.ts and vitest.mcp.config.ts - Fix CHANGELOG.md structure (# Changelog + [Unreleased] to top) - Remove 30+ stale coverage-* directories from project root - Coverage: Statements 78.76% | Branches 72.75% | Functions 80.93% | Lines 78.76% (all thresholds passed)	2026-04-05 23:21:08 -03:00