Julia McGhee b981cc0926 Fix harness forbidden error: use internal token instead of host check ...

The localhost check using host header and x-forwarded-for was unreliable
in the standalone Next.js server which may inject forwarded headers
internally. Replace with a per-process random token shared between the
PTY server and the API route via env var.

2026-03-21 21:59:45 +00:00

..

api

deploy: update production images to fccf749598

2026-03-21 19:16:47 +00:00

harness

Fix harness forbidden error: use internal token instead of host check

2026-03-21 21:59:45 +00:00

web

deploy: update production images to fccf749598

2026-03-21 19:16:47 +00:00