jubnl 41f1dd9ce5 fix(oauth): select ot.user_id instead of u.id in getUserByAccessToken ... u.id was returned by SQLite as `id` but the code read `row.user_id`, which was undefined. This caused all MCP calls to resolve userId as undefined, making list_trips return empty and canAccessTrip deny all access when authenticated via OAuth 2.1.		2026-04-09 23:59:11 +02:00
..
public	chore(CRLF): normalize index.html line endings to LF	2026-04-05 04:35:17 +02:00
scripts	feat: add encryption key migration script and document it in README	2026-04-01 09:35:32 +02:00
src	fix(oauth): select ot.user_id instead of u.id in getUserByAccessToken	2026-04-09 23:59:11 +02:00
tests	fix(mcp): narrow OAuth scope to allowed intersection instead of rejecting	2026-04-09 23:48:05 +02:00
.env.example	feat(mcp): add MCP_MAX_SESSION_PER_USER env var and document it everywhere	2026-04-06 00:09:22 +02:00
package-lock.json	feat(mcp): introduce OAuth 2.1 auth and enforce addon gating	2026-04-09 22:25:58 +02:00
package.json	chore: bump version to 2.9.12 [skip ci]	2026-04-09 15:48:10 +00:00
reset-admin.js	Stabilize core: better-sqlite3, versioned migrations, graceful shutdown	2026-03-22 17:52:24 +01:00
tsconfig.json	some fixes	2026-03-30 06:59:24 +02:00
vitest.config.ts	refactor(mcp): replace direct DB access with service layer calls	2026-04-04 18:12:53 +02:00