MealQuest

4 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	5519676c79	Restrict apiFetch to same-origin /api/v1/ and lint colours in the build CI / ci (push) Successful in 1m33s Details CI / ci (pull_request) Successful in 1m33s Details apiFetch now refuses any path that does not resolve to a same-origin URL under /api/v1/ before attaching X-MealQuest-CSRF or calling fetch, so the cached CSRF token cannot be sent to another origin or another path. npm run build runs lint:colors first, so a hex literal outside tokens.css fails the production build. Maestro task: f1bb5c9e-ca49-4a3c-b07d-7ed79f0e7fe5 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 08:52:44 -04:00
dev_agent	a453a84231	Photo and Icon components (#37 ) CI / ci (push) Successful in 1m30s Details Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:29:16 -04:00
dev_agent	496f2e5375	Feature 05 task 1: Design tokens and self-hosted fonts (#32 ) CI / ci (push) Successful in 1m29s Details Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:16:25 -04:00
dev_agent	f0b2696059	Feature 01 task 2: Vite React TypeScript web skeleton (#3 ) Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-02 22:26:34 -04:00