Anso 6fc4a43a04 fix(hub-only): enforce hub-only /api/api-tokens/ boundary (#1894) ...

Add /api/api-tokens/ to HUB_ONLY_PREFIXES. Reuses existing
case-insensitive isHubOnlyPath matcher. Full API-token tests cover
GET/POST/DELETE for both Proxy and Pilot agent modes, plus query-param
(Pilot), mixed-case path, and hub-local CRUD lifecycle using the
created token's returned ID. Existing SSO matrix, disconnected-Pilot,
and mixed-case Secrets regressions are preserved.

2026-09-03 16:21:43 -04:00

..

scripts

docs(git): publish a versioned Git transport support matrix (#1883)

2026-09-01 21:56:02 -04:00

src

fix(hub-only): enforce hub-only /api/api-tokens/ boundary (#1894)

2026-09-03 16:21:43 -04:00

.npmrc

…

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889)

2026-05-02 23:45:44 -04:00

package-lock.json

fix(deps): bump transitive deps to clear fast-uri, qs, and humanfs advisories (#1891)

2026-09-02 18:52:47 +00:00

package.json

docs(git): publish a versioned Git transport support matrix (#1883)

2026-09-01 21:56:02 -04:00

tsconfig.json

perf(build): enable incremental tsc (#827)

2026-04-28 09:15:54 -04:00

vitest.config.ts

fix(security): harden authentication and outbound targets (#1877)

2026-09-01 16:52:12 -04:00

vitest.docker-integration.config.ts

fix: keep running containers until stack pull/build succeeds (#1657)

2026-07-21 12:18:01 -04:00