plum-e2e 2.8.0 → 2.8.2

package/backend/app.js

@@ -38,6 +38,7 @@ if (!isNodeMode()) {
 	app.use('/test-runs', require('./routes/test-runs.routes'));
 	app.use('/trigger', require('./routes/trigger.routes'));
 	app.use('/active-runs', require('./routes/active-runs.routes'));
+	app.use('/mcp', require('./routes/mcp.routes'));
 }
 
 // Global JSON error handler — Express's default sends HTML, which breaks JSON clients

package/backend/lib/nodeRegister.js

@@ -58,17 +58,9 @@ function saveNodeConfig(dir, cfg) {
  */
 async function registerWithPrimary({ primary, name, url, token, browser }) {
 	const base = primary.replace(/\/$/, '');
-	// The /runners routes require an authenticated admin session, which this
-	// headless flow has no browser/JWT to provide — PLUM_NODE_KEY is the shared
-	// secret that stands in for one (see backend/middleware/jwtAuth.js).
-	const nodeKey = process.env.PLUM_NODE_KEY;
-	const authHeaders = nodeKey ? { Authorization: `ApiKey ${nodeKey}` } : {};
 
 	let existing = null;
-	const listRes = await fetch(`${base}/runners`, {
-		headers: authHeaders,
-		signal: AbortSignal.timeout(10000)
-	});
+	const listRes = await fetch(`${base}/runners`, { signal: AbortSignal.timeout(10000) });
 	if (!listRes.ok) throw new Error(`primary returned HTTP ${listRes.status} listing runners`);
 	const { runners = [] } = await listRes.json();
 	existing = runners.find((r) => r.name === name && r.url === url) ?? null;
@@ -76,7 +68,7 @@ async function registerWithPrimary({ primary, name, url, token, browser }) {
 
 	const res = await fetch(`${base}/runners`, {
 		method: 'POST',
-		headers: { 'Content-Type': 'application/json', ...authHeaders },
+		headers: { 'Content-Type': 'application/json' },
 		body: JSON.stringify({ name, url, token, browser }),
 		signal: AbortSignal.timeout(10000)
 	});