- 36a0df423 refactor(gateway): make ws and http auth surfaces explicit
- be7f82500 refactor(gateway): harden proxy client ip resolution
- 9516ace3c docs(changelog): note ACP resource-link prompt hardening
- f4c89aa66 docs(changelog): add tts provider-override hardening note
- 50a8942c0 docs(changelog): add WhatsApp reaction allowlist security note
- 4cd7d9574 style(browser): apply oxfmt cleanup for gate
- b2d84528f refactor(test): remove duplicate cron tool harnesses
- 577e5cc74 refactor(test): dedupe gateway env setup and add env util coverage
- c529bafdc refactor(test): reuse temp-home helper in voicewake e2e
- b43aadc34 refactor(test): dedupe temp-home setup in voicewake suite
- c2874aead refactor(test): centralize temporary state-dir env setup
- 26eb1f781 refactor(test): reuse state-dir env helper in auth profile override e2e
Stats: +2455 / -647 (files changed: 99)
- be7f82500 refactor(gateway): harden proxy client ip resolution
Docs / Chore
- d25a10662 docs(changelog): add tailscale auth hardening release note- 9516ace3c docs(changelog): note ACP resource-link prompt hardening
- f4c89aa66 docs(changelog): add tts provider-override hardening note
- 50a8942c0 docs(changelog): add WhatsApp reaction allowlist security note
- 4cd7d9574 style(browser): apply oxfmt cleanup for gate
- b2d84528f refactor(test): remove duplicate cron tool harnesses
- 577e5cc74 refactor(test): dedupe gateway env setup and add env util coverage
- c529bafdc refactor(test): reuse temp-home helper in voicewake e2e
- b43aadc34 refactor(test): dedupe temp-home setup in voicewake suite
- c2874aead refactor(test): centralize temporary state-dir env setup
- 26eb1f781 refactor(test): reuse state-dir env helper in auth profile override e2e
Stats: +2455 / -647 (files changed: 99)
