Max Loffgren 3d68074eb1 fix(auth): preserve header credential provenance locally ...

The non-cloud session builder labeled header-sourced API keys as environment credentials. Preserve their resolved API-key source so Core 401 responses receive CREDENTIAL_INVALID recovery, while true environment credentials retain their existing self-hosted error behavior.

2026-08-26 14:39:23 -05:00

..

agent-metadata-policy.test.mjs

…

mcp-search-profile.test.mjs

fix(auth): bypass introspection for API keys

2026-08-26 14:04:24 -05:00

mcp-smoke.test.mjs

fix(auth): preserve header credential provenance locally

2026-08-26 14:39:23 -05:00

nginx-config.test.mjs

…

readme-security.test.mjs

…

www-authenticate.test.mjs

…