Jason WoltjeandClaude Opus 4.6 399d5a31c8 fix(#411): narrow verifySession allowlist — prevent false-positive infra error classification ...

Replace broad "expired" and "unauthorized" substring matches with specific
patterns to prevent infrastructure errors from being misclassified as auth
errors:

- "expired" -> "token expired", "session expired", or exact match "expired"
- "unauthorized" -> exact match "unauthorized" only

This prevents TLS errors like "certificate has expired" and DB auth errors
like "Unauthorized: Access denied for user" from being silently swallowed
as 401 responses.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

2026-02-16 15:42:10 -06:00

..

api

fix(#411): narrow verifySession allowlist — prevent false-positive infra error classification

2026-02-16 15:42:10 -06:00

coordinator

fix(#374): add pip.conf to coordinator Docker build for private registry

2026-02-15 12:05:04 -06:00

orchestrator

fix: switch Docker images from Alpine to Debian slim for native addon compatibility

2026-02-15 16:02:23 -06:00

web

test(#411): QA-015 — add credentials fallback test + fix refreshSession test name

2026-02-16 14:05:30 -06:00