From 2f5e7b5a0019f2c57ff1b8745ffbd7ab8c00ac0b Mon Sep 17 00:00:00 2001
From: Myron Blair <myronblair@outlook.com>
Date: Wed, 17 Jun 2026 14:18:33 +0000
Subject: [PATCH] fix: remove missing includes/auth.php require from metrics
 and suggestions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Both endpoints tried to require a non-existent includes/auth.php and call
AuthMiddleware::requireAuth() — auth is already handled by api.php before
any endpoint file runs. This caused 500 errors on /api/metrics (which
blocked agent sparklines) and /api/suggestions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 api/endpoints/metrics.php     | 2 --
 api/endpoints/suggestions.php | 2 --
 2 files changed, 4 deletions(-)

diff --git a/api/endpoints/metrics.php b/api/endpoints/metrics.php
index 8763f11..fbbb97b 100644
--- a/api/endpoints/metrics.php
+++ b/api/endpoints/metrics.php
@@ -1,9 +1,7 @@
 <?php
 // Agent metrics history — returns CPU/RAM samples for sparklines
 require_once __DIR__ . '/../config.php';
-require_once __DIR__ . '/../../includes/auth.php';
 header('Content-Type: application/json');
-AuthMiddleware::requireAuth();
 
 $agentId = $_GET['agent_id'] ?? '';
 $hours   = min((int)($_GET['hours'] ?? 2), 24);
diff --git a/api/endpoints/suggestions.php b/api/endpoints/suggestions.php
index d62de35..bec7ed7 100644
--- a/api/endpoints/suggestions.php
+++ b/api/endpoints/suggestions.php
@@ -1,9 +1,7 @@
 <?php
 // Proactive suggestions endpoint — returns time-based command suggestions
 require_once __DIR__ . '/../config.php';
-require_once __DIR__ . '/../../includes/auth.php';
 header('Content-Type: application/json');
-AuthMiddleware::requireAuth();
 
 $hour = (int)date('G');
 $dow  = (int)date('w'); // 0=Sun, 6=Sat