diegosouzapw 858cdfd9b7 fix(a2a): accept dashboard session auth on /a2a route (#12888) ...

The A2A dashboard's Run message/send and Run message/stream buttons
fetch("/a2a", ...) with no Authorization header. authenticateA2ARequest()
only checked for a Bearer/x-api-key, unlike clientApiPolicy (/api/v1/*)
which falls back to isDashboardSessionAuthenticated() when no key is
present. Add that same fallback to the A2A auth helper, give a
session-authenticated caller with no API key a stable 'dashboard' owner
id in resolveA2AOwner(), and send credentials: same-origin from the
dashboard playground fetches so the session cookie always rides along.

2026-09-10 15:35:21 -03:00

..

_helpers

…

_setup

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

benchmarks

…

boundary

…

e2e

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

fixtures

fix(sse): preserve 1min.ai partial output before stream errors (#12466)

2026-09-03 21:06:28 -03:00

golden-set

…

helpers

…

homolog

…

integration

fix(routing): table pricing with catalog fallback for off-table models, pooled latency bootstrap, fresh tier cache (#12792)

2026-09-10 09:20:18 -03:00

live

…

llm-security

…

load

…

manual

…

security

…

snapshots

feat(models): live account catalog for Claude, Codex, Copilot, AGY (#12866)

2026-09-07 09:02:59 -03:00

translator

…

unit

fix(a2a): accept dashboard session auth on /a2a route (#12888)

2026-09-10 15:35:21 -03:00

_cp_mock_hook.mts

…

_cp_mock_module.mts

…

_run_dns_guard_test.sh

…

e2e-tool-calls.sh

…