feat(ws): harden auth, Redis bridge, and origin handling#3

Open

Snider wants to merge 155 commits intomainfrom

Commits on Apr 14, 2026

feat(ws): authentication helpers + socket additions

Snider
and
Virgil
committed
feat(ws): RFC-aligned auth alias, subscriber stats, raw-byte message callbacks

Snider
and
Virgil
committed
fix(auth): replace banned strings import with core.Lower

Snider
and
Virgil
committed

Commits on Apr 15, 2026

Add reconnect client OnError callback
Claude
committed
Add local Go workspace
Claude
committed
feat: confirm ws RFC implementation
Claude
committed
feat(ws): accept channel targets in client frames
Claude
committed
chore: confirm ws RFC compliance
Claude
committed
chore(ws): confirm RFC compliance

Claude
and
Virgil
committed
feat(ws): report reconnect client disconnect state
Claude
committed
Align Redis bridge lifecycle with RFC
Claude
committed
docs: align ws entry points with AX examples
Claude
committed
Harden websocket trust boundaries
Claude
committed
chore: confirm go-ws RFC coverage
Claude
committed
Add missing websocket coverage tests
Claude
committed
fix(ws): avoid unregister shutdown leaks
Claude
committed
Harden websocket auth and Redis startup
Claude
committed
Add missing ws unit tests
Claude
committed
Align hub subscriptions with hub event loop
Claude
committed
Add nil-safe ws entry points
Claude
committed
Fix reconnect cancellation on connected clients
Claude
committed
Align ws client cleanup with RFC
Claude
committed
Handle nil contexts in websocket entry points
Claude
committed
chore(ws): verify RFC contract

Claude
and
Virgil
committed
chore(ws): verify RFC contract
Claude
committed
Implement local Redis bridge fanout
Claude
committed
Verify go-ws RFC compliance
Claude
committed
Harden subscription and callback handling
Claude
committed
feat(ws): align reconnect and unsubscribe semantics

Claude
and
Virgil
committed
Add missing ws and redis unit coverage
Claude
committed
fix(ws): prioritize nil bridge checks
Claude
committed
Harden websocket and Redis input limits
Claude
committed
Add missing websocket unit tests
Claude
committed
fix(ws): align redis envelope cap with websocket limit

Claude
and
Virgil
committed
docs(ws): add AX usage examples to exported APIs

Claude
and
Virgil
committed
feat(ws): add auth constructor usage examples
Claude
committed
Verify ws RFC compliance
Claude
committed
Clean up stalled websocket subscribers
Claude
committed
feat(ws): verify RFC compliance
Claude
committed
style(auth): format usage examples

Claude
and
Virgil
committed
feat(ws): reject websocket upgrades before hub run
Claude
committed
fix(ws): make same-origin default explicit

Claude
and
Virgil
committed
Harden websocket auth boundaries
Claude
committed
fix(ws): normalize same-origin host comparison
Claude
committed
Add RFC coverage tests
Claude
committed
feat(ws): reconcile RFC contract
Claude
committed
security: harden websocket origin checks
Claude
committed
Add missing websocket unit tests
Claude
committed
Fix reconnecting client message timestamps
Claude
committed
Implement Redis bridge contract checks
Claude
committed
Align ws comments with AX guidance
Claude
committed
ws: confirm RFC alignment

Claude
and
Virgil
committed
Verify ws RFC compliance
Claude
committed
feat(ws): verify RFC-complete implementation

Claude
and
Virgil
committed
bridge broadcasts to Redis independently
Claude
committed
Align ws entrypoint comments with AX usage examples
Claude
committed
go-ws RFC compliance check
Claude
committed
Harden auth user ID handling
Claude
committed
fix(ws): avoid double origin validation
Claude
committed
Add missing websocket contract tests
Claude
committed
Validate websocket RFC compliance
Claude
committed
auth(ws): snapshot api key credentials

Claude
and
Virgil
committed
test: add missing ws coverage
Claude
committed
Respect deprecated reconnect retry limit
Claude
committed
Set default hub subscription cap
Claude
committed
chore: verify ws RFC compliance
Claude
committed
chore: record RFC compliance
Claude
committed
Align ws package with RFC
Claude
committed
chore(ws): verify RFC contract

Claude
and
Virgil
committed
chore: confirm ws RFC parity
Claude
committed
Make ws collection APIs deterministic
Claude
committed
fix(ws): stamp bridged messages
Claude
committed
Harden API key authenticator snapshot
Claude
committed
chore: confirm ws RFC parity
Claude
committed
Add missing WebSocket coverage
Claude
committed
chore: confirm ws RFC parity
Claude
committed
Harden reconnect backoff
Claude
committed
Add missing websocket unit coverage
Claude
committed
Fix reconnect client close lifecycle
Claude
committed
Verify ws RFC compliance
Claude
committed
Tighten reconnect backoff cancellation
Claude
committed
chore: validate ws RFC coverage
Claude
committed
feat(ws): fire reconnect OnDisconnect on close
Claude
committed
feat(ws): verify RFC-complete implementation
Claude
committed
chore(ws): align exported comments with AX examples

Claude
and
Virgil
committed
Align ws examples with RFC auth contract
Claude
committed
Align server timestamps with RFC
Claude
committed
fix: bound redis publish timeouts
Claude
committed
chore(ws): confirm RFC compliance

Claude
and
Virgil
committed
Add missing ws unit coverage
Claude
committed
Align module path with RFC
Claude
committed
Harden Redis bridge forwarded messages
Claude
committed
Add missing ws and redis unit tests
Claude
committed
Preserve websocket message timestamps
Claude
committed
feat(ws): confirm RFC parity
Claude
committed
feat: align ws package with RFC
Claude
committed
feat: align ws package with RFC
Claude
committed
chore: verify ws RFC parity
Claude
committed
chore: confirm ws RFC coverage
Claude
committed
feat(ws): validate redis prefix on publish
Claude
committed
Fix reconnect backoff after disconnect
Claude
committed
ws: harden batched websocket writes

Claude
and
Virgil
committed
Harden Redis bridge process ID validation
Claude
committed
Align ws bridge behavior with RFC
Claude
committed
Add missing ws unit tests
Claude
committed
Preserve Redis bridge message timestamps
Claude
committed
Harden auth claim snapshotting
Claude
committed
Add missing ws unit coverage
Claude
committed
Improve ws API usage example comments
Claude
committed
feat(ws): verify RFC compliance
Claude
committed
chore(ws): format auth examples

Claude
and
Virgil
committed
Align auth snapshots and broadcast order
Claude
committed
ws: verify RFC parity

Claude
and
Virgil
committed
ws: validate RFC implementation
Claude
committed
chore(ws): verify RFC alignment

Claude
and
Virgil
committed
Preserve ws message timestamps across routing
Claude
committed
Audit ws RFC compliance
Claude
committed
Harden auth claim cloning
Claude
committed
chore(ws): verify RFC compliance

Claude
and
Virgil
committed
Add missing auth and ws coverage
Claude
committed
Verify ws RFC compliance
Claude
committed
fix(auth): deep-clone unexported claim fields

Claude
and
Virgil
committed
Add missing ws unit tests
Claude
committed
fix(ws): validate process channel IDs

Claude
and
Virgil
committed

Commits on Apr 16, 2026

Tighten auth claim snapshots
Claude
committed
chore(ws): validate RFC compliance

Claude
and
Virgil
committed
Align server timestamps with RFC
Claude
committed
Fix websocket writer batching cleanup
Claude
committed
chore: verify websocket RFC compliance
Claude
committed
Validate go-ws RFC compliance
Claude
committed
Preserve ws timestamps across Redis fanout
Claude
committed
chore: verify go-ws RFC compliance
Claude
committed
Clarify secure origin defaults
Claude
committed
Tighten process ID validation
Claude
committed
Add auth claim clone coverage
Claude
committed
chore: verify go-ws RFC compliance
Claude
committed
chore: security audit go-ws
Claude
committed
Add RFC coverage for auth and ws tests
Claude
committed
Fix nested auth claims snapshotting
Claude
committed

Commits on Apr 25, 2026

Commits on Apr 27, 2026

Merge remote-tracking branch 'github/dev' into dev
Snider
committed
fix(go-ws): address CodeRabbit findings on PR #3

Snider
and
Hephaestus
committed
fix(ws): address residual CodeRabbit findings on PR #3

Snider
and
codex
committed

Commits on Apr 28, 2026

refactor(core): full v0.9.0 compliance against core/go reference

committed