mirror of
https://github.com/Memo-2023/mana-monorepo.git
synced 2026-05-14 22:21:10 +02:00
SECURITY FIX: The mobile app had Azure OpenAI and Google Gemini API keys exposed in client code (dangerouslyAllowBrowser: true). Changes: - Mobile aiService.ts: Remove OpenAI/Gemini SDKs, route all AI calls through the Context backend API (which uses mana-llm) - Backend ai.controller.ts: Add /generate/mobile and /estimate/mobile endpoints that accept Supabase JWT tokens (extracts userId from payload) - Original /generate and /estimate endpoints unchanged (mana-core-auth) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apps | ||
| CLAUDE.md | ||
| package.json | ||
| pnpm-lock.yaml | ||
| pnpm-workspace.yaml | ||