No description
- Require ADMIN_TOKEN bearer auth on /members and new /schedule CRUD routes - Validate JSON body shape and reject empty/malformed writes so a bad multipart POST can no longer wipe authorized.json - Make saveJSON atomic (tmp -> rename) with a one-generation .bak file - Serve a self-contained admin SPA at /admin (public/admin.html) for editing the discount schedule and authorized members without hand- editing JSON, with a /preview endpoint that renders the bot's fallback text for draft entries - Dockerfile now copies public/ into the image Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| config | ||
| public | ||
| src | ||
| .dockerignore | ||
| .gitignore | ||
| docker-compose.yml | ||
| Dockerfile | ||
| index copy.js | ||
| index.js | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||