Manjunath fb74354d30 fix(osm): gate place search cross-site and share its slots fairly ...

From review:
- /api/osm/features now refuses cross-site browser requests like the other
  quota-bearing routes, so a page elsewhere cannot spend the operator's
  Overpass. SECURITY.md lists the route, its limits and its disk cache.
- One client runs one search at a time and two run at once in all, instead
  of one global slot any single client could hold.
- A search gets 45 s across every configured endpoint in turn, answered 504
  when it runs out.
- A cache write no longer waits on the disk prune; prune() waits until the
  cache is idle for callers that need it.

2026-11-03 19:36:16 +05:30

..

boundedCache.js

fix(osm): gate place search cross-site and share its slots fairly

2026-11-03 19:36:16 +05:30

geo.js

style: format extracted place and route modules

2026-09-11 19:57:22 -07:00

http.js

refactor: separate transit sources and request service

2026-09-15 07:41:56 -07:00

query.js

refactor: separate aircraft and vessel server providers

2026-09-11 19:06:09 -07:00

rate-limit.js

fix(server): keep cost throttles on for positive fractional limits

2026-10-02 20:17:21 -07:00

request.js

refactor(voice): isolate gemini live provider core

2026-10-19 21:40:40 +05:30

request.test.mjs

refactor(voice): isolate gemini live provider core

2026-10-19 21:40:40 +05:30

same-site.js

fix(server): admit reverse-proxied same-origin terrain requests

2026-10-17 14:36:24 +05:30

source-root.js

style: format extracted local services

2026-09-12 13:01:49 -07:00