FilipBl4gojevic 9153500629 feat(builder): require a bearer token on both HTTP routes when auth is on ...

POST /messages is gated too, and cross-checked against the session's own
identity - otherwise a valid token for one caller could drive another
caller's session by guessing its id.

2026-07-28 19:44:15 +02:00

..

src

feat(builder): require a bearer token on both HTTP routes when auth is on

2026-07-28 19:44:15 +02:00

test

test(builder): pin that config errors never echo a token

2026-07-28 19:36:04 +02:00

package.json

fix: make the shared package a devDependency and drop stale paths

2026-07-28 10:04:05 +02:00

tsconfig.json

refactor: move the MCP server into packages/builder

2026-07-28 10:04:04 +02:00

tsup.config.ts

refactor: move the MCP server into packages/builder

2026-07-28 10:04:04 +02:00