All notable changes to this project are documented here, following Keep a Changelog and SemVer.
VITE_USE_SECURE_APItoggle to route AI searches through Supabase Edge Functions (keys stay server-side). Defaults to the existing client-side behavior.- Vitest test suite (
npm test) for the RxNorm/OpenFDA adapters and the secure-API toggle. typecheckscript (strict TypeScript) and a workinglintsetup.- CI workflow, Dependabot, governance files, and
docs/supabase-security.md. - Medical disclaimer in the README.
SecureApiWrapper.isSecureApiAvailable()now readsVITE_USE_SECURE_APIinstead of a hardcodedfalse(default behavior unchanged).- Enabled
strictTypeScript intsconfig.app.jsonand fixed the surfaced types. - Realigned ESLint to v9 and
eslint-plugin-react-hooksto stable5.2.0sonpm run lintworks again (was crashing under a mismatched ESLint 10). - Standardized on
package-lock.json; removed the conflictingbun.lockb.
npm audit fixapplied — 0 known vulnerabilities (no breaking upgrades).