sagit 961c06655a fix(backend): enforce port range restrictions in federation mode (#125) ...

Added dual-layer port range enforcement for federation sharing:

Server-side (Provider):
- federationRuntimeApplyRole: validate runtime.Port against share range
- validateFederationCommandPorts: hardened against malformed JSON bypass
- New helpers: validateRemoteNodePort, remoteNodePortRange

Client-side (Consumer):
- prepareTunnelCreateState: pre-check ports for remote nodes
- tunnelCreate type=1: validate targetPort for remote entry
- forwardCreate/Update/BatchChangeTunnel: port range validation

Prevents consumers from using arbitrary ports outside provider's allowed range.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

2026-02-15 10:42:39 +00:00

..

AGENTS.md

docs: update AGENTS.md hierarchy with new subdirectory docs

2026-02-13 07:52:17 +00:00

control_plane_test.go

chore: remove mobile wrappers and harden go-backend service control

2026-02-08 01:59:45 +00:00

control_plane.go

fix(backend): set udp ttl default for tls tunnel protocol

2026-02-13 14:22:13 +00:00

federation_runtime_test.go

test(federation): add tests for remote node command and offline status

2026-02-13 06:02:01 +00:00

federation_share_test.go

fix(backend): normalize strategy data and proxy ip parsing

2026-02-13 09:42:38 +00:00

federation.go

fix(backend): enforce port range restrictions in federation mode (#125)

2026-02-15 10:42:39 +00:00

flow_policy_federation_test.go

feat(federation): add share flow reset and remote usage visibility

2026-02-10 10:04:31 +00:00

flow_policy.go

fix(backend): normalize strategy data and proxy ip parsing

2026-02-13 09:42:38 +00:00

handler.go

fix(backend): resolve backup handler build conflict after main merge

2026-02-13 08:32:00 +00:00

jobs_test.go

feat: finalize Go backend migration and deployment cutover

2026-02-07 11:03:12 +00:00

jobs.go

feat: finalize Go backend migration and deployment cutover

2026-02-07 11:03:12 +00:00

mutations.go

fix(backend): enforce port range restrictions in federation mode (#125)

2026-02-15 10:42:39 +00:00

upgrade.go

fix(upgrade): stabilize batch node upgrades under long-running operations

2026-02-12 04:57:58 +00:00