mai
/
posimai-root
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Root repo: CLAUDE.md, _template, server.js, scripts, deploy scripts
185 Commits 1 Branch 0 Tags 3.9 GiB
HTML 42.7%
JavaScript 36.7%
TypeScript 8.4%
Shell 5.7%
PowerShell 5.3%
Other 1.2%
Go to file
posimai 96f22b6a82 fix(together): close JWT legacy-fallback impersonation hole 
When JWT is present but strict member check fails, verify the body
username belongs to the JWT user before allowing legacy access.
JWT-less clients (no Authorization header) are unaffected.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 		2026-04-19 13:06:14 +09:00
.claude feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
.github/workflows ci: move Linux build workflow to repo root .github/workflows/ 2026-04-13 16:32:42 +09:00
.playwright-mcp feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
.serena feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
.vscode feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
_template chore: update templates — Geist font, Lucide integrity, JWT token handoff 2026-04-10 08:09:36 +09:00
_template-minimal chore: _template-minimal 現行化 + create-app.sh ダッシュボード自動更新 2026-04-11 11:44:15 +09:00
docs chore: enforce vercel alias set on new app creation — add to CLAUDE.md/AGENTS.md/create-app.sh/new-app-guide.md 2026-04-18 23:15:33 +09:00
posimai-atlas@09dd315c5f feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-brief@1337c280b0 feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-dev fix(security): add SRI to xterm CDN, add manifest id, noreferrer to target=_blank 2026-04-17 18:42:38 +09:00
posimai-guard@97cd50f2d8 chore: update posimai-guard submodule pointer 2026-04-17 19:01:44 +09:00
posimai-guard-app feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-guard-ext feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-log@abd706a9e6 feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-roadmap@06d36bf4a2 feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-station-app@9d0ab6043e feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-store@59c8dfe723 feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
posimai-veil@2319982445 feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
routes feat: 購入後マジックリンクメール自動送信 + TTS に purchaseMiddleware 接続 2026-04-11 15:05:23 +09:00
scripts feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
tools/posimai-scribe feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
.gitignore chore: add src-tauri/target to .gitignore (prevent large build artifacts) 2026-04-14 23:30:31 +09:00
AGENTS.md chore: enforce vercel alias set on new app creation — add to CLAUDE.md/AGENTS.md/create-app.sh/new-app-guide.md 2026-04-18 23:15:33 +09:00
APP_IDEAS.md docs: add APP_IDEAS.md, reference in CLAUDE/AGENTS, fix ponshu APK link 2026-03-22 13:27:56 +09:00
CLAUDE.md chore: enforce vercel alias set on new app creation — add to CLAUDE.md/AGENTS.md/create-app.sh/new-app-guide.md 2026-04-18 23:15:33 +09:00
DESIGN.md feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
STATUS.md chore(status): add mai pending tasks section (Firebase key, Stripe, etc.) 2026-04-18 09:55:54 +09:00
claude-settings.json chore: allow Write and Edit tools in settings 2026-03-19 10:02:47 +09:00
create-app.sh chore: enforce vercel alias set on new app creation — add to CLAUDE.md/AGENTS.md/create-app.sh/new-app-guide.md 2026-04-18 23:15:33 +09:00
deploy-edge.sh fix: add --no-verify-jwt to together-archive deploy for Database Webhook auth 2026-04-04 21:05:46 +09:00
deploy-server.sh chore: deploy-server.shにroutes/ディレクトリの転送を追加 2026-04-11 00:19:05 +09:00
package.json feat(ext): integrate rule engine — scan works without API key 2026-04-14 23:05:19 +09:00
server.js fix(together): close JWT legacy-fallback impersonation hole 2026-04-19 13:06:14 +09:00