- Add catch-all 404 handler for unknown /api/* routes after API mounts - Unauthed requests to unknown API paths now return 401, authed return 404 - Add .dockerignore to prevent leaking data/ (DB, secret.key), .git/, node_modules/ - Add test in auth.test.ts verifying unknown /api/nope returns 401 unauthed, 404 authed Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
8 lines
70 B
Plaintext
8 lines
70 B
Plaintext
data/
|
|
.git/
|
|
node_modules/
|
|
web/dist/
|
|
.superpowers/
|
|
*.log
|
|
*.tsbuildinfo
|