Natalie 8b01246e2e fix(server): require operator token to register a device ... Single-user deployment on a public TLS edge — only the operator (who holds the service token, attached as a Bearer on every client request) should onboard a device. Drop the auth exemption on /client/devices/register so anonymous callers get 401 instead of a working token; /client/devices/:id/status stays open since it is polled before the device token is issued. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-30 09:31:04 -04:00
..
client	fix(inotes): probe Notes with a data event so the Automation prompt fires	2026-06-30 03:41:59 -04:00
server	fix(server): require operator token to register a device	2026-06-30 09:31:04 -04:00