From f13691c72f9a8bf429d796183a78023f0df4d0f5 Mon Sep 17 00:00:00 2001 From: zaragoza444 Date: Fri, 3 Jul 2026 02:24:59 -0700 Subject: [PATCH] fix(omnl): expose GUOSMM gazette registry without API key in production Co-authored-by: Cursor --- services/token-aggregation/src/api/middleware/omnl-guards.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/services/token-aggregation/src/api/middleware/omnl-guards.ts b/services/token-aggregation/src/api/middleware/omnl-guards.ts index 43719ce..6474abb 100644 --- a/services/token-aggregation/src/api/middleware/omnl-guards.ts +++ b/services/token-aggregation/src/api/middleware/omnl-guards.ts @@ -50,6 +50,7 @@ const OMNL_PUBLIC_PATH_SUFFIXES = ['/omnl/openapi.json', '/omnl/catalog', '/omnl function isPublicOmnlPath(path: string): boolean { if (OMNL_PUBLIC_PATH_SUFFIXES.some((s) => path.endsWith(s))) return true; + if (path.startsWith('/omnl/gazette/')) return true; // Compliance console is read-only; allow without API key when explicitly enabled (LAN operator UI). if (process.env.OMNL_COMPLIANCE_CONSOLE_PUBLIC === '1' && isComplianceConsolePath(path)) return true; return false;