Mohamed Boudra 50cde73137 Extract relay endpoint security boundary from transport and admission ...

Move the daemon-side handshake, record framing, and handshake timeout out of
relay-transport.ts into websocket/secure-relay-ingress.ts, and give both
endpoints one secure-channel entrypoint in @getpaseo/relay/e2ee. Relay
transport now attaches plaintext sockets; bootstrap secures them before
admission. The client selects endpoint security from configuration instead
of inferring it from the relay URL. Behavior-preserving: the legacy
construction is unchanged and no new security guarantee is claimed.

2026-10-21 13:33:56 +02:00

..

executable-resolution

Report failed terminal launches and remove early exits (#6792)

2026-10-14 23:02:39 +02:00

server

Extract relay endpoint security boundary from transport and admission

2026-10-21 13:33:56 +02:00

services

Keep fork owners in Gitea and Forgejo checkout names (#6829)

2026-10-15 10:10:54 +02:00

tasks

Write persisted files atomically

2026-06-03 17:25:07 +07:00

terminal

Send MCP terminal keys in the running program’s input mode (#7343)

2026-10-19 01:53:55 +02:00

test-utils

Run server tests on Linux+Windows matrix (#809)

2026-05-08 10:57:22 +08:00

utils

Keep setup execution and output owned by the workspace (#7473)

2026-10-21 14:16:24 +07:00