2 Commits

Author	SHA1	Message	Date
Shadowbroker	91c76ad1bd	security: agent-shell WS tokens and dependency audit fixes (#409) ... Replace spoofable Host/Origin WebSocket auth with short-lived bootstrap tokens minted over the existing local-operator HTTP path. Docker/browser shell sessions prefetch a token before connecting; loopback peers remain unchanged. Also bump backend ws to 8.21.0 and refresh frontend lockfile to clear npm audit findings (dev toolchain only for frontend). Fixes #405, #406, #407 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-18 16:40:36 -06:00
anoracleofra-code	362a6e2ceb	Initial commit: ShadowBroker v0.1 ... Former-commit-id: 8ed321f2ba	2026-03-04 22:44:08 -07:00