4 Commits

Include renames

Author	SHA1	Message	Date
kcar	67e47fc47f	feat(tlsync): fetch short-lived token from API before multiplayer connect ... - Remove VITE_TLSYNC_SECRET from browser env (no longer exposed to bundle) - Add useTlsyncToken hook that fetches /api/tlsync/token with Supabase auth - Extract TldrawCanvas sub-component: only renders after token is ready - Pass API-issued short-lived token to createSyncConnectionOptions - Add vite.config.ts blocklist to prevent secret leak (defense-in-depth) - Remove VITE_TLSYNC_SECRET from .env.example (server-side only now) Related: t_a69128a1 (API token endpoint), t_41a844a7 (this task)	2026-05-28 18:00:43 +01:00
kcar	6642d5fa22	docs: add .env.example with all app environment variables	2026-05-27 21:55:27 +01:00
kcar	3b4876793e	latest	2025-11-14 14:47:26 +00:00
kcar	8a7ab3ac24	Initial commit	2025-07-11 13:21:49 +00:00