Mohamed Boudra 793b16c0df fix(relay): protect sessions against replayed commands (#7610) ...

Protect relay sessions against replayed commands with authenticated Noise NK negotiation, ordered records, and identity-bound security pins. Preserve legacy admission during migration and add daemon enforcement policy.

All 21 CI checks passed. General engineering review is complete; specialist cryptographic review of the handwritten Noise implementation and static-key reuse remains required before release or deployment.

Closes #359

2026-10-22 19:50:06 +07:00

..

compat

fix(client): keep daemon connections lean by default (#4470)

2026-09-08 12:59:25 +02:00

connection

Keep workspace setup logs scoped to the visible setup panel (#7407)

2026-10-19 18:34:53 +07:00

creation

fix(client): preserve workspace and agent creation on older hosts (#4895)

2026-09-15 22:49:06 +02:00

hosts

Connect saved hosts and delegate agents across daemons (#7370)

2026-10-21 16:10:47 +07:00

node

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

provider-snapshots

fix(subscriptions): isolate observers and silence unrequested feeds (#4596)

2026-09-11 08:07:35 +02:00

terminals

fix(subscriptions): isolate observers and silence unrequested feeds (#4596)

2026-09-11 08:07:35 +02:00

timeline-subscription

Keep older daemons usable and let clients choose timeline recovery (#4737)

2026-09-12 08:50:16 +02:00

connection.test.ts

Keep older daemons usable and let clients choose timeline recovery (#4737)

2026-09-12 08:50:16 +02:00

daemon-client-relay-e2ee-transport.ts

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

daemon-client-runtime-metrics.ts

Extract client SDK package (#1052)

2026-05-28 01:58:18 +08:00

daemon-client-transport-types.ts

perf(relay): reduce encrypted binary traffic overhead (#2480)

2026-07-27 12:12:02 +02:00

daemon-client-transport-utils.ts

Reject oversized messages without disconnecting the host (#6285)

2026-10-14 08:20:40 +02:00

daemon-client-transport.test.ts

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

daemon-client-transport.ts

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

daemon-client-websocket-transport.ts

fix(app): keep browser relay WebSockets protocol-neutral (#2976)

2026-08-07 17:30:43 +08:00

daemon-client.test.ts

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

daemon-client.ts

fix(relay): protect sessions against replayed commands (#7610)

2026-10-22 19:50:06 +07:00

index.test.ts

Connect saved hosts and delegate agents across daemons (#7370)

2026-10-21 16:10:47 +07:00

index.ts

Connect saved hosts and delegate agents across daemons (#7370)

2026-10-21 16:10:47 +07:00

legacy-usage-icons.ts

Sidebar usage shows default percents with logos, and remembers the picked host (#5786)

2026-09-30 21:09:07 +01:00

terminal-stream-router.test.ts

Keep older daemons usable and let clients choose timeline recovery (#4737)

2026-09-12 08:50:16 +02:00

terminal-stream-router.ts

Keep older daemons usable and let clients choose timeline recovery (#4737)

2026-09-12 08:50:16 +02:00