@standardagents/builder 0.38.1 → 0.39.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/plugin.js CHANGED
@@ -7666,7 +7666,10 @@ ${packedThreadRouteCode}
7666
7666
  // across requests.
7667
7667
  let threadAccess = null;
7668
7668
 
7669
- // Require authentication for all API routes except public ones
7669
+ // Require authentication for all API routes except public ones.
7670
+ // WebSocket tickets are single-use and are consumed here. Controllers
7671
+ // must reuse context.auth (resolveRequestAuth) rather than calling
7672
+ // requireAuth again, or a ticket-only upgrade will 401.
7670
7673
  if (isApiRoute && !publicRoute) {
7671
7674
  const authResult = await requireAuth(request, env);
7672
7675