Changed
- Documented the complete named Cloudflare Tunnel ingress and custom config path flow. (#135)
- Added regression coverage for target-engine persistence across reloads and WebSocket resume. (#134)
Security
- Cloudflare Access is now required before exposing the proxy, with an explicit unauthenticated-request check. (#135)
- Updated the web dependency graph and enforced patched transitive versions found during the release security review. (#131)
- Regenerated the npm lockfile without invalid parent-workspace dependency paths.
Many thanks to @johnjheejin for the documentation and regression coverage, and to @dependabot for the dependency update.