Yaojia Wang bfe1be1dfe feat(relay): B7 — close browser DPoP-subprotocol loop + harden staging mint ...

- Read DPoP proof from term.dpop.<b64u> WS subprotocol (browsers can't set WS headers);
  header wins, else subprotocol. Fail-closed decoder. Unblocks real browser connect.
- F1: rate-limit /auth/mint per-IP via Redis token bucket (salted-hash key, 429 on burst,
  before password compare).
- F2: wire real per-tenant active WS count into activeSessionCount (was hardcoded 0).
- F5: scrub error logs to e.message/.code (no DSN leak, INV9).
relay-run: tsc clean, 92 tests pass (+18). F3/F4 -> Phase 2 backlog.

2026-07-06 16:26:05 +02:00

..

mockups

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00

ARCHITECTURE.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

DEPLOY_RELAY.md

docs(relay): deployment build & ops plan (DEPLOY_RELAY.md)

2026-07-03 14:16:30 +02:00

DESKTOP_PLAN.md

feat(desktop): Electron all-in-one desktop shell (Mac/Windows) embedding the server

2026-07-02 06:13:17 +02:00

DISPATCH.md

build: adopt esbuild for frontend bundling (build:web → public/build/)

2026-06-16 07:36:01 +02:00

EXPLORE_RELAY_SERVICE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

EXPLORE_REMOTE_ACCESS.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

FEATURE_PROJECT_MANAGER.md

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00

FEATURE_WALKAWAY_WORKBENCH.md

docs(v0.7): PRD + implementation plan for Walk-away Workbench (Band A + B)

2026-06-30 15:51:58 +02:00

PLAN_IOS_CLIENT.md

feat(ios): W1 leaf packages — ReconnectMachine/PingScheduler, GateState/AwayDigest, HostRegistry, APIClient+pairing probe

2026-07-04 21:53:41 +02:00

PLAN_IOS_IPAD.md

feat(ipad): T-iPad-1 — device family [1,2] + iPad orientations + CI leg

2026-07-05 18:29:30 +02:00

PLAN_RELAY_AGENT.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_AUTH_ISOLATION.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_CONTROLPLANE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_E2E.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_FRONTEND.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_INDEX.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_PHASE1.md

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

PLAN_RELAY_RECONCILE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_RUN_PHASE0.md

feat(relay-run): Phase 0 single-host relay — real data-plane wiring + integration test

2026-07-04 14:13:04 +02:00

PLAN_RELAY_TRANSPORT.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_VOICE_COMMANDS.md

feat: voice command mapping — context-gated approve/reject over voice

2026-07-01 10:38:32 +02:00

PLAN_WALKAWAY_WORKBENCH.md

docs(v0.7): PRD + implementation plan for Walk-away Workbench (Band A + B)

2026-06-30 15:51:58 +02:00

PLAN.md

build: adopt esbuild for frontend bundling (build:web → public/build/)

2026-06-16 07:36:01 +02:00

PROGRESS_LOG.md

feat(relay): B7 — close browser DPoP-subprotocol loop + harden staging mint

2026-07-06 16:26:05 +02:00

REVIEW_RELAY_SECURITY.md

docs(relay): security audit report + progress log for the relay findings

2026-07-02 16:41:19 +02:00

REVIEW_REPORT.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

TECH_DOC.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

THEME.md

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00