paseo

mirror of https://github.com/getpaseo/paseo.git synced 2026-10-23 17:52:49 +00:00

Files

T

Mohamed Boudra 7c04eed039 Add protected relay endpoint security with replay protection

Updated peers negotiate Noise_NK_25519_ChaChaPoly_SHA256 inside the
existing e2ee_hello / e2ee_ready exchange and send counter-nonced records
framed with authenticated chunk metadata. Old peers on either side fall
back to the legacy NaCl box channel while the daemon permits it.

Daemon flag daemon.relay.requireProtectedSecurity (default false,
reloadable) refuses legacy relay clients at hello time; pairing offers
and relay URIs then carry minimumSecurityMode=protected. The daemon
advertises server_info.features.relayProtectedSecurity, and a relay
client that negotiated legacy with such a daemon closes 4002 before
admission. The app pins the protected minimum per daemon public key.

Covers getpaseo/paseo#359.

2026-10-21 14:20:49 +02:00

bin

Fix punycode deprecation warning in CLI and daemon entrypoints

2026-04-04 20:29:44 +07:00

src

Add protected relay endpoint security with replay protection

2026-10-21 14:20:49 +02:00

tests

Archive agents beyond the first directory page (#7535 )

2026-10-21 05:52:11 +02:00

cli-client-id

Restore workspace header controls and polish tab management