Support agent-originated WSS on the dashboard HTTPS connection #8
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "feat/agent-link-websocket"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Fixed-path TLS-verified WebSocket forwarding to the configured API, no arbitrary tunnel/proxy. Manual UI flow: invite outbound agent, masked expiring code, target enrollment form, inspect incoming identity/capabilities, explicit approve/register or reject. Opening a channel alone grants no work access. No cookie-based agent auth, no token in browser storage, no productive replay. Existing direct registration/navigation/account features retained. New actual Chromium + API/vault/native HTTPS/WSS integration tests create invitation via browser, enroll a listener-free target, verify no auto registration, approve, exchange scoped work/reply, revoke via browser. CI tests exact backend candidate 712603d only for reproducible compatibility testing (not runtime/Core pin). Backend Plugins #67. No automatic registration or recreation of deleted infrastructure.