Zac Gaetano cb7cc9a43e fix(mam-api): narrow cluster carve-out to /cluster/heartbeat only ... Code-review feedback: startsWith('/cluster') was a prefix match that exposed destructive operator endpoints (POST /containers/:id/restart, DELETE /:id, GET /devices/blackmagic/*) unauthenticated. Only POST /heartbeat is genuine node-agent traffic; everything else in cluster.js is operator/UI surface that should go through requireAuth. Long-term: issue node-agent a bound api_token and drop the carve-out entirely.		2026-05-27 14:18:27 -04:00
..
capture	fix(recorders,library): empty-capture handling + right-click context menu	2026-05-23 03:52:30 +00:00
mam-api	fix(mam-api): narrow cluster carve-out to /cluster/heartbeat only	2026-05-27 14:18:27 -04:00
node-agent	chore: 1.2 ship-prep sweep — close 38 issues	2026-05-27 02:06:14 +00:00
premiere-plugin	fix(premiere-plugin): replace oklch() with hex/rgba for CEP Chromium compat	2026-05-27 10:44:39 -04:00
web-ui	chore(web-ui): bump Premiere panel latest to v1.2.0 in data.jsx (#125)	2026-05-27 10:14:12 -04:00
worker	feat(audio-tab): full audio track inspector with meters, mute/solo, faders	2026-05-27 04:53:52 +00:00