From ff06a5c99e4dd2c2749f19bf0b6abf5f177839fe Mon Sep 17 00:00:00 2001
From: MetatronCube Ops <info@metatroncubesolutions.com>
Date: Mon, 2 Nov 2026 15:14:00 +0000
Subject: [PATCH] Security: require agent API key; same-origin API behind login

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 src/lib/api.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/api.js b/src/lib/api.js
index 36cfc29..3899ccc 100644
--- a/src/lib/api.js
+++ b/src/lib/api.js
@@ -1,4 +1,4 @@
-export const API_BASE = "https://rp.api.thedomainnest.com/api";
+export const API_BASE = import.meta.env.VITE_API_BASE || "/api";
 
 async function request(path, { method = "GET", body, headers } = {}) {
   const response = await fetch(`${API_BASE}${path}`, {