2 Commits

Include renames

Author	SHA1	Message	Date
Logan CusanoandClaude Opus 5	0bd92269d2	Stop httpx logging API keys in plaintext ... httpx logs every request at INFO as a full URL including the query string, so the Google Maps key appeared in c2-core's container logs on every geocode call -- `?address=Holland+Station&...&key=AIza...`. Anyone who can read the logs, or who is pasted a few lines of them, has the key. It was found exactly that way while checking why the map was empty. Nothing in this service needs per-request client logging; callers already log their own failures with context. httpx and httpcore drop to WARNING, so real transport errors still surface and the URLs stop being printed. This does not un-leak the existing key -- it is in the container's log history and has to be rotated in GCP separately. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-16 20:05:29 -04:00
Logan	2f0597c81b	Initial commit — DRB server stack ... Includes c2-core (FastAPI/MQTT/Firestore), discord-bot (slash commands), frontend (Next.js admin UI), and mosquitto config.	2026-04-05 19:01:39 -04:00