security: enforce approved-client bearer tokens and origin-bound access#5

Open

JoshuaMorris wants to merge 4 commits intoTechopolis:mainfrom

JoshuaMorris:feature/security-origin-hardening

Commits on Apr 6, 2026

Harden browser access to local server origins
Joshua Morris
committed
Allow official web app origins in browser allowlist
Joshua Morris
committed
Add approved-client token access control and dashboard settings integration
Joshua Morris
committed
Activate app before opening dashboard and chat windows
Joshua Morris
committed