rowboat/apps/x
fuleinist e0ca073f82 Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint
Fixes two security issues:

1. CLI Bus.unsubscribe (issue #492): Fix splice(-1,1) bug when indexOf returns -1.
   - When unsubscribe is called twice, splice(-1,1) removes the last element instead of doing nothing.
   - Guard with indexOf check before splicing.

2. Copilot stream auth validation (issue #493/#494): Return 401 when Bearer token is missing.
   - Extract and validate apiKey before passing to controller.
   - Prevents undefined apiKey from bypassing auth checks.
2026-04-17 06:06:40 +08:00
..
apps feat(oauth): enhance Rowboat sign-in process to prevent duplicate users (#489) 2026-04-13 18:15:04 +05:30
packages Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00
.gitignore bootstrap new electron app 2026-01-16 12:05:33 +05:30
eslint.config.mts ignore renderer eslint 2026-01-16 12:05:33 +05:30
package.json integrate electron forge 2026-01-17 10:28:44 +05:30
pnpm-lock.yaml add mermaid rendering 2026-04-10 18:00:30 +05:30
pnpm-workspace.yaml fix pnpm postinstall 2026-01-21 10:47:44 +05:30
tsconfig.base.json bootstrap new electron app 2026-01-16 12:05:33 +05:30