fix(ws): harden Responses connection lifecycle

Revalidate control policy per turn, isolate downstream credentials, and make planner/turn ownership cancellation-safe. Preserve opaque protocol events, align configurable timeout semantics, and extend end-to-end security and settlement coverage.
2026-10-12 12:09:50 +08:00 · 2026-08-17 18:50:29 +08:00
parent 4a0775c4ea
commit c8118edf36
42 changed files with 4017 additions and 1276 deletions
@@ -305,8 +305,8 @@ mod tests {
            remote_addr: "127.0.0.1:65000"
                .parse::<SocketAddr>()
                .expect("remote address should parse"),
+            client_ip: "127.0.0.1".parse().expect("client IP should parse"),
            decision,
-            rpm_bypassed: false,
            websocket_connection_permit: None,
        }
    }