Fleet-wide session registry via Cloudflare KV added, TermHubProtocol and rate limiting introduced, and 6 rounds of pre-release fixes applied

113 files · 6,017+ · 3,838-

7 files changed

registry.py Fleet-wide session registry via Cloudflare KV
store.py KV store with 5-min TTL and alarm-driven heartbeat
session_runtime.py Durable Object session runtime with alarm-based lease expiry
test_registry.py Session registry contract tests
test_alarm.py Alarm-based lease expiry tests
test_api_contracts.py API contract tests
test_e2e_wrangler.py pywrangler E2E test infrastructure

Fleet-wide session registry added via Cloudflare KV for cross-worker session visibility. instantiate behavioral
2 files
- registry.py
- store.py
Snapshot endpoint, alarm-based lease expiry, and KV contract tests added. qualify behavioral
3 files
- session_runtime.py
- test_alarm.py
- test_api_contracts.py
KV zombie sessions fixed with 5-min TTL and alarm-driven heartbeat. remediate internal
1 file
- store.py
pywrangler E2E test infrastructure added for live CF testing. qualify internal
1 file
- test_e2e_wrangler.py

2 files changed

JWT required claims reduced to sub+exp for Auth0, Google, and Azure AD compatibility. remediate behavioral
1 file
- jwt.py
CF Worker bugs fixed and API schemas aligned with FastAPI server. remediate behavioral
3 files
- http_routes.py
- ws_routes.py
- auth.py

6 files changed

TermHubProtocol and per-caller REST rate limiting added. instantiate behavioral
3 files
- core.py
- ratelimit.py
- rest.py
Public rate-limit methods exposed on TermHub; unused type: ignore fixed. deprecate internal
1 file
- core.py
Hub internals refactored to public API; pre-release issues fixed. remediate behavioral
3 files
- core.py
- connections.py
- browser_handlers.py
CDN config, recording byte cap, and named startup constant wired. margin internal
2 files
- defaults.py
- config.py
CDN URLs extracted to named constants in models. decouple internal
1 file
- models.py

8 files changed

Round 1: 15 pre-release issues fixed — security, correctness, and architectural concerns. remediate behavioral
3 files
- bridge.py
- websockets.py
- app.py
Round 2: 11 pre-release issues fixed — security, correctness, and robustness. remediate internal
2 files
- ownership.py
- runtime.py
Round 3: 8 issues fixed — XSS, JWKS thread safety, SSH host-key enforcement, config validation, and regression tests. qualify internal
2 files
- auth.py
- ssh.py
Round 4: timeout, dead code, validation, and model cleanup. deprecate errata
1 file
- models.py
Round 5: SSH timeout, UTF-8 input, config validation, bridge reconnect, page double-decode, WS callbacks, and error messages. remediate internal
4 files
- ssh.py
- telnet.py
- bridge.py
- viewer.py
Round 6: browser handler error messages, runtime permanent-error exit, WS close code, changelog wording. specify errata
2 files
- browser_handlers.py
- runtime.py
Additional pre-release code review: security, correctness, and API hardening. remediate behavioral
2 files
- app.py
- api.py
Snapshot field safety and connector config validation fixed. remediate internal
2 files
- base.py
- models.py

1 file changed

CLI scripts renamed from provideterm to uterm across the package. decouple behavioral
1 file
- cli.py

4 files changed

Stale documentation cleaned up and corrected. deprecate internal
2 files
- CHANGELOG.md
- README.md
Missing log lines and docstrings added to hub and REST routes. instantiate behavioral
2 files
- api.py
- core.py
bfiles bundles removed from tracking and gitignored. decouple internal
1 file
- .gitignore