Minor Changes
- e910984: SSE: the auth token may now be fetched asynchronously, and the kernel
sseconfig can supply it (#1888 lot A, BookShepherd report #1887).EventSourceaccepts no headers, so the token rides in the query string and lands in access logs — apps that refuse to leak a durable credential there can now serve a short-lived, single-use ticket instead:getTokenaccepts() => string | null | Promise<string | null>, awaited before each connect.SSEConfiggainsgetToken(an explicitnullsends no token at all), plusconnectOnSignal/disconnectOnSignalpassthrough — without them the async token was unreachable for anyone using the kernel'ssseconfig rather than building anSSEBridgeby hand. Purely additive: synchronousgetTokenimplementations keep working unchanged. A connect that awaited its token now checks it has not been superseded before opening the connection, so adisconnect()or a secondconnect()during the fetch no longer resurrects a torn-down stream.