Shadowbroker 91c76ad1bd security: agent-shell WS tokens and dependency audit fixes (#409) ...

Replace spoofable Host/Origin WebSocket auth with short-lived bootstrap
tokens minted over the existing local-operator HTTP path. Docker/browser
shell sessions prefetch a token before connecting; loopback peers remain
unchanged.

Also bump backend ws to 8.21.0 and refresh frontend lockfile to clear
npm audit findings (dev toolchain only for frontend).

Fixes #405, #406, #407

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-18 16:40:36 -06:00

..

analytics

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

config

Address remaining safe security hardening

2026-06-02 13:34:11 -06:00

data

Ship ShadowBroker v0.9.83 with live Infonet gate messaging and DM protocols.

2026-06-15 15:37:29 -06:00

routers

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

scripts

Close tg12 outbound audit (#348-#366): operator UA, opt-ins, docs

2026-06-03 15:01:32 -06:00

services

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

tests

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

third_party

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

.dockerignore

v0.9.0: in-app auto-updater, ship toggle split, stable entity IDs, performance fixes

2026-03-13 11:32:16 -06:00

.env.example

Ship DM connect delivery, fleet pubkey lookup, OpenClaw Infonet agent, and relay auto-wormhole.

2026-06-12 02:15:56 -06:00

ais_proxy.js

Fix #258: AIS proxy SPKI pinning fallback for expired upstream cert (#262)

2026-05-20 20:31:56 -06:00

auth.py

Fix Extra-participant E2E: live contact send and Tor prekey cache path.

2026-06-14 17:00:13 -06:00

docker-entrypoint.sh

Release v0.9.79 runtime and messaging update

2026-05-12 11:49:46 -06:00

Dockerfile

Ship Meshtastic Chat UX, embedded Infonet/SHELL panels, and Docker dev polish.

2026-06-11 00:55:38 -06:00

gate_sse.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

limiter.py

Fix #287: proxy-aware rate-limit key (#295)

2026-05-22 00:51:54 -06:00

main.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

node_state.py

Harden v0.9.75 wormhole node sync and telemetry panels

2026-05-06 14:04:16 -06:00

package-lock.json

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

package.json

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

pyproject.toml

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

pytest.ini

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

wormhole_server.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00