5 Commits

Include renames

Author	SHA1	Message	Date
Niccolò Saggese	e2ce7fa38e	Merge remote-tracking branch 'upstream/main' into fix/363-geocode-proxy ... # Conflicts: # SECURITY.md # server/providers/places/google.js	2026-10-05 09:26:08 +02:00
3 people	bb74071dc2	fix(server): throttle the cost-bearing proxies by default ... The OpenAI endpoints (/api/realtime/token, /api/openai/hud-summary) now allow 30 requests per minute per client IP and the Google Places endpoints 120, the caps the Pinokio build already ships. GEV_RATELIMIT_OPENAI_PER_MIN and GEV_RATELIMIT_GOOGLE_PER_MIN still override them and exactly 0 disables them; an unreadable value falls back to the default rather than to unlimited. Salvaged from #683 onto current main. Co-authored-by: Sameh Khamis <[email protected]> Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>	2026-10-02 19:57:29 -07:00
Niccolò Saggese	c5b1d41cba	fix(search): geocode through the server, not the browser ... - Google's Geocoding web service refuses referrer-restricted keys, so the browser call forced GOOGLE_MAPS_API_KEY to ship unrestricted - add /api/google/geocode and /api/google/reverse-geocode, using the server key like Places and Street View already do - the browser key now needs the Map Tiles API only	2026-09-21 11:30:49 +02:00
Sameh Khamis	7e6d89d8f5	style: format extracted place and route modules	2026-09-11 19:57:22 -07:00
Sameh Khamis	2793d7a8df	refactor: extract place-search and routing provider modules	2026-09-11 19:56:48 -07:00