Kai (Tam Nhu) TranandGitHub b7d5ce178a fix(cursor-daemon): auto-generate token + expose for callers (#1384) ...

PRs #1373/#1377 gated cursor daemon endpoints behind a token check, but
startDaemon() did not generate or expose a token. Health-check probing
during startup then 401'd against the new auth, so startDaemon waited 30s
then reported failure. Same for tests asserting /404 and validation
behavior — they couldn't reach the downstream logic past the 401 gate.

- Auto-generate a 32-byte hex token in startDaemon when caller did not
  provide one
- Return daemonToken in startDaemon result so callers/tests can attach it
- Update integration tests to include x-ccs-cursor-token header

2026-05-23 22:07:15 -04:00

..

api

refactor(config): adopt config-loader-facade across the codebase

2026-05-03 01:42:53 -04:00

auth

fix(auth): require resource mode value

2026-05-08 23:36:12 -04:00

bin

fix: repair ccsx codex profile resources

2026-05-22 16:27:00 -04:00

channels

fix: ignore internal instance directories in health scans

2026-05-12 22:17:16 -04:00

cliproxy

fix(browser): avoid implicit explicit devtools port for config attach (#1369)

2026-05-23 21:46:04 -04:00

codex-auth

fix(codex-auth): restrict symlink fallback and harden copy path (#1365)

2026-05-23 21:43:51 -04:00

commands

fix: preserve Docker legacy API key during rotation

2026-05-22 16:49:16 -04:00

config

feat(auth): add shared resource controls

2026-05-08 11:15:28 -04:00

copilot

Merge origin/dev into fix/cliproxy-local-port-config

2026-05-03 13:56:43 -04:00

cursor

fix(cursor-daemon): auto-generate token + expose for callers (#1384)

2026-05-23 22:07:15 -04:00

delegation

fix: preserve native Claude passthrough args

2026-05-07 06:14:12 -04:00

dispatcher

fix(codex): pass native ccsx subcommands through (#1290)

2026-05-18 10:48:44 -04:00

docker

fix: disable docker legacy API key auth by default (#1355)

2026-05-23 21:03:24 -04:00

errors

fix: round 2 red-team fixes — onRetry safety, validation, barrel

2026-04-30 14:59:44 -04:00

glmt

fix(sse): make CRLF normalization chunk-boundary safe (#1359)

2026-05-23 21:44:32 -04:00

management

fix(browser): avoid implicit explicit devtools port for config attach (#1369)

2026-05-23 21:46:04 -04:00

proxy

fix(proxy): scope insecure TLS to routed profile

2026-05-19 08:13:40 -04:00

services/logging

refactor(config): adopt config-loader-facade across the codebase

2026-05-03 01:42:53 -04:00

shared

fix(cursor): authenticate local daemon health/runtime traffic (#1373)

2026-05-23 21:44:55 -04:00

targets

fix: create explicit CODEX_HOME with secure permissions (#1380)

2026-05-23 21:45:12 -04:00

types

feat(auth): add shared resource controls

2026-05-08 11:15:28 -04:00

utils

fix(browser): track explicit devtools_port from config (#1383)

2026-05-23 21:55:02 -04:00

web-server

fix(proxy): honor backpressure in cliproxy local streaming (#1379)

2026-05-23 21:45:09 -04:00

ccs.ts

fix(logging): redact CLI argv in lifecycle start logs

2026-05-19 07:57:43 -04:00