4 Commits

Author	SHA1	Message	Date
M1	f7d6eff972	fix: block sub-keys from accessing/modifying email, account key, and other sub-keys	2026-03-18 11:51:52 +04:00
M1	1a7bc4dfa5	fix: sameSite=none for cross-origin cookie (pingql.com → api.pingql.com)	2026-03-18 11:41:00 +04:00
nate	5a0cf5033b	fix: harden auth, SSRF, query engine, and cookie security	2026-03-18 11:37:33 +04:00
M1	841a852491	feat: split web and api into separate apps	2026-03-18 09:33:46 +04:00