provide-terminal 2026-03-04
Cloudflare Worker package added with JWT auth, capability-based authorization, and pre-commit profile aligned with bbsbot strictness
213 files · 17,463+ · 1,949-

Cloudflare Worker Package

interface behavioral
19 files changed
  • __init__.py Cloudflare package init
  • __main__.py Package entry point
  • entry.py Cloudflare Worker entry point
  • http_routes.py HTTP routes for the CF Worker
  • ws_routes.py WebSocket routes for the CF Worker
  • hijack.py Hijack bridge for CF Worker
  • upstream_ws.py Upstream WS bridge
  • cf_types.py Cloudflare type definitions
  • cli.py CF Worker CLI
  • config.py CF Worker configuration
  • contracts.py API contract definitions
  • __init__.py Durable Object package init
  • session_runtime.py Durable Object session runtime
  • __init__.py State package init
  • store.py State store
  • __init__.py UI package init
  • assets.py UI static asset serving
  • wrangler.toml Wrangler deployment configuration
  • pyproject.toml Cloudflare package metadata
  • Cloudflare Worker package added with raw WebSocket bridge supporting SSH and telnet proxy connections through CF Workers. interface behavioral
    3 files
    • entry.py
    • upstream_ws.py
    • ws_routes.py
  • Merge conflicts resolved during Cloudflare worker package integration. remediate internal
    1 file
    • pyproject.toml

JWT Auth

harden behavioral
4 files changed
  • jwt.py JWT verification and capability-based authorization
  • config.py JWT deployment configuration
  • auth.py Server-side auth hardening
  • authorization.py Capability-based server authorization
  • Production JWT deployment config added with live JWT E2E test coverage. qualify internal
    2 files
    • config.py
    • test_auth_jwt.py
  • JWT auth enforced with capability-based server authorization in the Cloudflare Worker. harden behavioral
    2 files
    • jwt.py
    • authorization.py
  • Server auth and runtime hardened; handoff checklist added. harden internal
    2 files
    • auth.py
    • runtime.py

Pre-Commit and Lint

baseline behavioral
2 files changed
  • .pre-commit-config.yaml Pre-commit config aligned with bbsbot strictness: ty, mypy, codespell, Ruff S
  • pyproject.toml Ruff S rules and lint profile updates
  • Lint and type gate profile aligned with bbsbot strictness (ty, mypy, codespell). baseline errata
    1 file
    • .pre-commit-config.yaml
  • Strict pre-commit profile made fully green. streamline internal
    2 files
    • .pre-commit-config.yaml
    • pyproject.toml
  • Lint profile tightened (RUF/ARG rules); hooks kept green. streamline errata
    1 file
    • pyproject.toml
  • Ruff S (security) rules enabled with pragmatic noise controls. baseline behavioral
    2 files
    • pyproject.toml
    • .pre-commit-config.yaml

Type Fixes

qualify internal
6 files changed
  • ssh.py ty diagnostics fixed for SSH transport
  • websocket.py ty diagnostics fixed for WebSocket transport
  • gateway.py ty diagnostics fixed for gateway
  • websockets.py ty diagnostics fixed for hijack WS routes
  • rest.py ty diagnostics fixed for hijack REST routes
  • telnet.py ty diagnostics fixed for telnet transport
  • ty diagnostics resolved for SSH transport, gateway, and session logger tests after merge conflict resolution. qualify internal
    2 files
    • ssh.py
    • gateway.py
  • ty diagnostics resolved for WebSocket transport, telnet transport, and Playwright tests. qualify internal
    2 files
    • websocket.py
    • telnet.py
  • ty diagnostics resolved for hijack module tests. qualify internal
    2 files
    • websockets.py
    • rest.py

SessionRuntime Export

decouple internal
1 file changed
  • entry.py SessionRuntime kept exported from Cloudflare entry point
  • SessionRuntime kept exported from the Cloudflare Worker entry point for consumer access. decouple internal
    1 file
    • entry.py

Recording

qualify internal
5 files changed
  • test_auth_jwt.py JWT auth tests
  • test_contracts.py Contract tests
  • test_entry.py Entry point tests
  • test_hijack.py CF hijack tests
  • test_store.py State store tests
  • Recording artifacts refreshed after full test run. qualify internal
    2 files
    • test_auth_jwt.py
    • test_entry.py
← 2026-03-02 provide-terminal changelog → 2026-03-05 provide-terminal →