Files
Dario Gabriel LipicarandClaude Opus 5 c1d2f70a5c fix(daemon): file the CLI client's token as INBOUND, not outbound
The daemon auto-issues a token for `cli_client` every boot and registers
the raw value with the in-process TokenManager so the RPC hot path skips
the hash + DB lookup. It registered it with `saveToken`.

Now that the token store is direction-split, `saveToken` is the OUTBOUND
door: it means "when the daemon calls cli_client, present this". But
cli_client never receives calls — it makes them, and this is the token it
presents to us. Filed outbound, the inbound check that authenticates the
client's RPCs finds nothing under "cli_client" and every command falls
back to the slow path (or fails, once inbound is the only door consulted).

Depends on logos-protocol#72, which adds saveInboundToken. Do not merge
before it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-23 17:40:25 -03:00
..