You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
actual: handle split legs, income categories, and the update race (0202cd2)
close a password leak and eight silent-failure paths (629f42c)
fail closed on auth, bound every operation, pin the API (03f1173)
rules: correct action ops, split handling, and id validation (785392c)
BREAKING CHANGES
the server now refuses to start unless MCP_ACTUAL_TOKEN
is set or SECURE_LOCAL_NET=true. Deployments that relied on an unset
token meaning "no auth" must set one of the two before upgrading. This
applies to read-only deployments too, since an unauthenticated read-only
server still exposes the full budget.