v4.13.3
Buzz reference app authentication hardening
- Return an explicit
401 auth_requiredresponse for anonymous feedback mutations instead of relying on a thrown auth helper. - Keep rehearsal and direct function invocations deterministic while preserving authenticated create, vote, comment, and admin-role flows.
- Verified the full 1,197-test public suite, TypeScript documentation snippets, package tarballs, and lockstep publishing for
run402-mcp,run402, and@run402/sdk.
All three npm artifacts were published through GitHub Actions trusted publishing with SLSA provenance.
Full changelog: v4.13.2...v4.13.3