kcar 0d76868a42 security: remove VITE_TLSYNC_SECRET from frontend bundle ...

- Remove import.meta.env.VITE_TLSYNC_SECRET from syncService.ts
- Add optional token parameter to SyncConnectionOptions interface
  (caller passes token fetched from API, not a baked-in secret)
- Add clientEnvBlocklist in vite.config.ts to prevent sensitive VITE_
  env vars (TLSYNC_SECRET, MICROSOFT_CLIENT_SECRET*) from reaching bundle
- Remove VITE_TLSYNC_SECRET from .env.example
- Token auth for TLSync now handled server-side or via API endpoint

Ref: t_99d166c6

2026-05-28 13:51:46 +01:00

.gitea/workflows

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

docs

feat(timetable): add frontend routes and comprehensive documentation

2026-02-26 03:27:28 +00:00

public

fix: audio pipeline — 16 kHz AudioContext, 4096-sample buffering, SERVER_READY handshake

2026-05-23 07:26:20 +00:00

src

security: remove VITE_TLSYNC_SECRET from frontend bundle

2026-05-28 13:51:46 +01:00

.dockerignore

chore: add .dockerignore to exclude node_modules from build context

2026-05-26 02:03:17 +01:00

.env.development

feat(timetable): add page components, services, stores and types

2026-02-26 03:27:46 +00:00

.env.example

security: remove VITE_TLSYNC_SECRET from frontend bundle

2026-05-28 13:51:46 +01:00

.gitignore

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

docker-compose.dev.yml

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

docker-compose.yml

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

Dockerfile

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

eslint.config.js

Initial commit

2025-07-11 13:21:49 +00:00

index.html

Initial commit

2025-07-11 13:21:49 +00:00

package-lock.json

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

package.json

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

postcss.config.js

Initial commit

2025-07-11 13:21:49 +00:00

tailwind.config.cjs

Initial commit

2025-07-11 13:21:49 +00:00

tsconfig.json

Initial commit

2025-07-11 13:21:49 +00:00

tsconfig.node.json

Initial commit

2025-07-11 13:21:49 +00:00

vite.config.ts

security: remove VITE_TLSYNC_SECRET from frontend bundle

2026-05-28 13:51:46 +01:00

vitest.config.ts

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

Description

React 18 + TypeScript + TLDraw 3.6 frontend for Classroom Copilot — whiteboard, transcription panel, timetable, and graph views

8.5 MiB

Languages

TypeScript 96.1%

CSS 3.1%

JavaScript 0.5%

Dockerfile 0.2%

HTML 0.1%