小墨 bc12a4bb18 feat(engine): API Key read access for events, objects, projections (#36) ...

- Auth middleware now accepts API Key for GET on data endpoints
  (/events, /objects, /projections, /event-defs, /projection-defs, /object-defs)
- Admin write ops (POST defs, reactions, api-keys) still require API_TOKEN
- Valid API Key + admin op → 403 Forbidden
- Invalid token → 401 Unauthorized
- Add 5 tests for API Key read access (#37)

closes #36

2026-04-13 09:51:09 +00:00

..

board

fix(board): use plain number refs in event payloads

2026-04-13 17:00:36 +08:00

cli

feat: GET /events?after=N incremental query support (#26)

2026-04-13 08:09:17 +00:00

dispatcher

feat(dispatcher): load agent profiles from OGraph events (#33)

2026-04-13 08:16:57 +00:00

engine

feat(engine): API Key read access for events, objects, projections (#36)

2026-04-13 09:51:09 +00:00