FenjuFu dc5c816a02 fix(serve): protect MCP route with optional bearer auth (#3100) ... * fix(serve): protect MCP route with optional bearer auth Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com> * fix(serve): clarify MCP auth proxy boundaries Document the Render token incompatibility, expose serve auth in CLI help, and replace source-order assertions with live middleware coverage. Note: full test suite has pre-existing worktree failures because generated parse-worker.js is absent; targeted auth and proxy suites pass. Co-authored-by: Cursor <cursoragent@cursor.com> * chore(docs): preserve existing table formatting Keep the auth clarifications focused without reformatting unrelated Markdown tables. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(proxy): inject backend MCP credentials Replace the consumed edge credential with the configured protocol token only for MCP routes so proxied serve authentication remains composable. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com> Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com>		2026-08-30 17:12:46 +01:00
..
cli	fix(serve): protect MCP route with optional bearer auth (#3100)	2026-08-30 17:12:46 +01:00
config	feat(analyze): add incremental watch mode (#3072)	2026-08-29 10:40:56 +00:00
core	fix(parse): stabilize parse-cache chunks and cheapen ParsedFile loads (#3093)	2026-08-30 08:31:47 +00:00
lib	fix(mcp): stop scaling the detect_changes query with the diff's hunk count (#2915) (#2930)	2026-08-12 14:51:17 +01:00
mcp	fix(mcp): resolve omitted repo from cwd (#3085)	2026-08-29 21:07:43 +00:00
server	fix(serve): protect MCP route with optional bearer auth (#3100)	2026-08-30 17:12:46 +01:00
storage	fix(parse): stabilize parse-cache chunks and cheapen ParsedFile loads (#3093)	2026-08-30 08:31:47 +00:00
types	feat(analyze): add incremental watch mode (#3072)	2026-08-29 10:40:56 +00:00