You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Security (BREAKING)
Fail-closed engine access by default (#129). With no authentication/authorization handler configured, every mounted SourceMonitor route now returns 403 Forbidden. Configure config.authentication.authenticate_with/authorize_with, or set config.authentication.open_access = true (demo/non-production only). See docs/upgrade.md.
Fixed
Request flashes no longer leak across users (#130). Flash toasts are delivered response-local instead of broadcast to a global ActionCable stream.
Changed
Gem package no longer ships .claude internals (#131). Only .claude/skills/sm-* skills are packaged.
