rowboat/apps/x/packages
fuleinist e0ca073f82 Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint
Fixes two security issues:

1. CLI Bus.unsubscribe (issue #492): Fix splice(-1,1) bug when indexOf returns -1.
   - When unsubscribe is called twice, splice(-1,1) removes the last element instead of doing nothing.
   - Guard with indexOf check before splicing.

2. Copilot stream auth validation (issue #493/#494): Return 401 when Bearer token is missing.
   - Extract and validate apiKey before passing to controller.
   - Prevents undefined apiKey from bypassing auth checks.
2026-04-17 06:06:40 +08:00
..
core Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00
shared add cmd+k palette with chat mode that captures editor cursor context 2026-04-13 17:00:37 +05:30