Waleed e65345b63d test(table): pin the executor auth pairing on the table read route (#6603) ...

* test(table): pin the executor auth pairing on the table read route

fetchTableSchema reaches GET /api/table/[tableId] with a legacy type:'internal'
token, which only works while that route authenticates through
checkSessionOrInternalAuth. Its sibling table routes already moved to the
delegation policy, which rejects that token outright, so migrating this one
without moving the caller in the same change would break every table tool on an
Agent block.

Assert the route still authenticates through the legacy path so that migration
fails here first, and record on the caller why it is deliberately not on
buildExecutorDelegationHeaders yet.

* test(table): assert the Bearer header reaches the legacy verifier

Address review: the pairing test sent no Authorization header and its name
claimed to verify token acceptance, which is pinned separately in
lib/auth/internal.test.ts. Send a representative header, assert it reaches
checkSessionOrInternalAuth unmodified, and scope the name and docs to what this
guard actually covers — the route's choice of verifier.

2026-08-11 22:09:15 -07:00

..

desktop

fix(desktop): fix background tab spawning (#6590)

2026-08-11 20:32:14 -07:00

docs

fix(security): redact workflow snapshot secrets (#6581)

2026-08-11 23:14:15 -04:00

pii

…

realtime

feat(workflows): new workflow block card, progress indicator, colors, dsl for natural language preview, retry configs (#6458)

2026-08-10 19:21:32 -07:00

sim

test(table): pin the executor auth pairing on the table read route (#6603)

2026-08-11 22:09:15 -07:00