@radaros/transport 0.3.16 → 0.3.17

package/dist/index.d.ts

@@ -87,6 +87,12 @@ declare class MCPManager {
 interface AdminRouterOptions {
     /** Shared MCPManager instance. If omitted, a new one is created. */
     mcpManager?: MCPManager;
+    /**
+     * Express middleware for authentication/authorization.
+     * **IMPORTANT**: These endpoints can add MCP servers and execute tools.
+     * Always add auth middleware in production.
+     */
+    middleware?: any[];
 }
 /**
  * Creates an Express sub-router with admin endpoints for managing

package/dist/index.js

@@ -484,6 +484,14 @@ function createAdminRouter(opts) {
   }
   const router = express.Router();
   const mcpManager = opts?.mcpManager ?? new MCPManager();
+  if (opts?.middleware) {
+    for (const mw of opts.middleware) router.use(mw);
+  }
+  if (!opts?.middleware?.length && process.env.NODE_ENV === "production") {
+    console.warn(
+      "[admin-router] WARNING: Admin routes mounted without authentication middleware. These endpoints can add MCP servers, execute tools, and modify configurations. Pass middleware in AdminRouterOptions to secure them."
+    );
+  }
   router.get("/mcp", (_req, res) => {
     res.json(mcpManager.list());
   });
@@ -1904,6 +1912,9 @@ function createVoiceGateway(opts) {
               result: ev.result
             });
           });
+          session.on("usage", (ev) => {
+            socket.emit("voice.usage", ev);
+          });
           session.on("interrupted", () => {
             socket.emit("voice.interrupted");
           });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radaros/transport",
-  "version": "0.3.16",
+  "version": "0.3.17",
   "description": "HTTP and WebSocket transport layer for RadarOS agents",
   "license": "MIT",
   "repository": {
@@ -39,7 +39,7 @@
     "typescript": "^5.6.0"
   },
   "peerDependencies": {
-    "@radaros/core": "^0.3.16",
+    "@radaros/core": "^0.3.17",
     "@types/express": "^4.0.0 || ^5.0.0",
     "express": "^4.0.0 || ^5.0.0",
     "multer": ">=2.0.0",