v8.3.0

8.3.0 (2026-10-01)

Features

• bridge: advertise the web UI port over the first-contact beacon port without the token (eca6c95)
• bridge: bind the web server beyond loopback on AGENT_COMMS_WEB_HOST with token-gated access (8f05dd9)
• bridge: gate non-loopback web requests behind a per-process token with Host and Origin checks (d9e35ca)

Bug Fixes

• bridge: connect at once when a bridge serves the page over the LAN (3fb8bf7)
• bridge: tighten the web access gate for several bridges and every bind spelling (8a996fa)
• bridge: use the page's own origin for the mesh socket when served over plain http (1b0ae26)

Documentation

• state the cleartext and local-proxy limits of LAN exposure (8469e7b)