AdolaniumandNeil d2e4402623 fix(relay): authorize reserve routes before reading request bodies (#36346) ...

* fix(relay): bound internal reserve request bodies

* fix(relay): authorize before reading reserve bodies

Hono reads a chunked body inside the body limit before next(). A caller who fails the director check can no longer stall the refusal, and an oversized body from that caller is not reported as 413.

* test(relay): cover an unavailable demote body

The missing-route check only posted to /internal/reserve. Demote now gets the same oversized request and must stay 404.

---------

Co-authored-by: Neil <neil@stably.ai>

2026-11-06 16:24:06 -08:00

..

src

fix(relay): authorize reserve routes before reading request bodies (#36346)

2026-11-06 16:24:06 -08:00

Dockerfile

fix(cloud): patch relay, push and connector images to Node 24.22.2 and current Alpine fixes (#36560)

2026-10-30 20:53:22 -07:00

package.json

chore(deps): apply reviewed maintenance updates and record full audit (#32349)

2026-10-23 15:14:57 -07:00

tsconfig.build.json

feat(relay): correct regional placement only when the source is idle (#20105)

2026-09-11 14:25:10 -04:00

tsconfig.json

chore(cloud): add the relay fence broker, ops console, Terraform root, scripts, and 24 cloud-* workflows (#18413)

2026-09-03 06:55:14 -04:00

vitest.config.ts

refactor(cloud): group relay assignment headroom modules (#36665)

2026-10-31 04:04:04 -07:00