fix: close an auth bypass, stop tools reporting failure as success, remove unreachable code#59

Merged

aaronjmars merged 7 commits into

mainfrom

optimize/cleanup

Jul 21, 2026

Commits on Jul 21, 2026

optimize: remove unreferenced code and in-motion comments
aaronjmars
committed
fix(security): reject empty --token= and --http-host= instead of failing open
aaronjmars
committed
fix: stop reporting tool failures to the model as success
aaronjmars
committed
optimize: delete the unreachable pattern tier and prompts workflows
aaronjmars
committed
docs: record this pass's security fix, behavior fixes, and removals
aaronjmars
committed
optimize: quick wins — real CI gate, crash guards, dead halves, NaN
aaronjmars
committed
optimize: fix formatter field mismatches, page_style defaults, reconnect ceiling
aaronjmars
committed