- Enforce AUTH_TOKEN in API middleware — token exists in config but no handler validates it. Wire up bearer token check before exposing outside Tailscale.
- Switch
launchctl load/unloadtolaunchctl bootstrap/bootout— deprecated API ininstall-launchdanduninstall-launchd. Still works but may break in future macOS. - Add log rotation for
~/.dispatch/logs/dispatch.log— currently grows unbounded. Best option is rotating indispatch-launchd-wrapperon restart since launchd holds the fd.