whit3rabbit 78def09d43 feat(admin-ui): send CSRF token in all state-mutating requests ...

- fetchCsrfToken(): fetches from GET /admin/csrf-token on load, stores in _csrfToken
- mutatingHeaders(): returns authHeaders merged with X-CSRF-Token header
- All POST/PUT/DELETE fetch calls now use mutatingHeaders() instead of authHeaders
- fetchCsrfToken() called before loadDashboard() so token is ready at startup

2026-03-27 23:49:51 -05:00

..

client

chore: format, fix Bedrock match arms, verify line counts

2026-03-25 20:24:00 -05:00

proxy

feat(admin-ui): send CSRF token in all state-mutating requests

2026-03-27 23:49:51 -05:00

translator

feat(translator): apply OpenAI strict mode when Anthropic forces a specific tool

2026-03-27 23:39:06 -05:00