Daniel Salazar 5d60d9c88b refactor(http): internalAuth route option and a shared bodyRecord ...

EventsController and PeerController each checked x-puter-internal-auth by
hand with different compares; an internalAuth RouteOption now picks the
secret from config and one constant-time gate checks it. ShareController and
EventsController share bodyRecord instead of private copies.

2026-10-10 19:10:15 -04:00

..

backend

refactor(http): internalAuth route option and a shared bodyRecord

2026-10-10 19:10:15 -04:00

cli

…

dev-center

Auth limits, reborn-app tokens, seat addresses, drop-area encode (#4148)

2026-10-09 00:12:59 -07:00

docs

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00

gui

fix: settle which plan an org seat resolves to, and confirm a seat's address (#4139)

2026-10-09 16:17:51 -04:00

mcp-connector

fix: cap app lookups and fields, dedupe icon processing, rate-limit app landing pages (PUT-1891) (#4012)

2026-10-01 17:54:25 -07:00

puter-js

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00

worker

Ns/worker no socket (#3944)

2026-09-24 18:55:10 -04:00

worker-types

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00