Gabriel Vidal dbc5c1223d fix(sidecar): never hand SIDECAR_TOKEN to a run ...

Every run inherited the sidecar's own bearer through os.environ, so any
session could drive /spawn, /message, /interrupt and the account logins
of its sidecar directly, outside the scope its own launch was given.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-11 15:12:29 +02:00

5.4 KiB

Raw Permalink Blame History

View Raw