rowboat/apps/cli
fuleinist e0ca073f82 Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint
Fixes two security issues:

1. CLI Bus.unsubscribe (issue #492): Fix splice(-1,1) bug when indexOf returns -1.
   - When unsubscribe is called twice, splice(-1,1) removes the last element instead of doing nothing.
   - Guard with indexOf check before splicing.

2. Copilot stream auth validation (issue #493/#494): Return 401 when Bearer token is missing.
   - Extract and validate apiKey before passing to controller.
   - Prevents undefined apiKey from bypassing auth checks.
2026-04-17 06:06:40 +08:00
..
bin initial version of tui 2026-01-16 12:05:33 +05:30
src Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00
.gitignore server for rowboatx 2026-01-16 12:05:33 +05:30
package-lock.json markdown agent files 2026-01-16 12:05:33 +05:30
package.json add migrate agents script 2026-01-16 12:05:33 +05:30
todo.md first commit 2025-11-04 15:31:12 +05:30
tsconfig.json initial version of tui 2026-01-16 12:05:33 +05:30