small gleam coding and persistent agent daemon with a detachable cli and a canvas ui forked from okami.mom/albedo

fix(daemon): authenticate early and bound request bodies

Give each service an explicit policy and read known-length bodies once at ingress. Keep anonymous proxy access and signed webhooks working.


Author aly.codes
Date Commit Parent e04c19de
+675 -572
6 changed files
+675 -572
6 changed files