chore: retarget upstream portal-tunnel v2.3.1 #79

Merged

ada merged 1 commit from codex/release-v2.3.1-20260606T053818Z-v2.3.1 into master

2026-06-06 06:24:36 +00:00

ada commented

2026-06-06 06:22:38 +00:00

Collaborator

Summary

Retarget Rust relay compatibility baseline to upstream gosuda/portal-tunnel v2.3.1.
Add v2.3.1 admin token auth compatibility, keyless skew alignment, x402 config rejection/shape updates, installer parity, fixtures, docs, and smoke harness updates.
Keep unsupported upstream x402 facilitator behavior fail-fast when enabled.

Checks

build host: targeted cargo tests for admin token auth, keyless replay window, sdk domain fixture, and x402 config rejection
build host: ./scripts/dev-rust-ci.sh
build host: TMPDIR=/var/tmp ./scripts/v218-api-shape-compare.sh
build host: TMPDIR=/var/tmp ./scripts/v218-jwt-verify-compat.sh
build host: TMPDIR=/var/tmp ./scripts/v218-release-http-smoke.sh
build host: TMPDIR=/var/tmp ./scripts/v218-release-lifecycle-smoke.sh
build host: TMPDIR=/var/tmp ./scripts/v218-release-tcp-smoke.sh
build host: TMPDIR=/var/tmp ./scripts/v218-release-udp-smoke.sh
local: bash -n modified smoke scripts
local: git diff --check

Release Audit

Dev counter trail: tagged dev deploy v2.3.1+rs.1-dev.1 / OCI v2.3.1-rs.1-dev.1; no untagged dev deploys were published for this target by this cycle.
Promotion tag: v2.3.1+rs.1 at 3ba4efaadd54bc98f52eb8f871b85c6104d67ba3.
Production image: code.rly.best/gofix/portal-tunnel-rs:v2.3.1-rs.1.
Production digest: code.rly.best/gofix/portal-tunnel-rs@sha256:37a7a39838befc34b79d2aedc698e691aa8dc4fd9693791750d9c4891eec7bff.
Release note: https://code.rly.best/gofix/portal-tunnel-rs/releases/tag/v2.3.1+rs.1
CI: PR run #119 success; target branch run #120 success; dev tag run #121 success; production tag run #122 success.
Live verification: dev and production direct official-client HTTP smokes passed; dev and production multi-hop official-client HTTP smokes passed.
Production deploy: relay reports v2.3.1+rs.1 locally and publicly.
Client rollout: upstream portal v2.3.1 linux/arm64 asset was sha256-verified, installed, and active production expose services were restarted and checked.
Relay cleanup: stopped containers, dangling images, and builder cache pruned; no volumes pruned; post-cleanup root disk use 26% and Docker build cache 0B.

## Summary - Retarget Rust relay compatibility baseline to upstream gosuda/portal-tunnel v2.3.1. - Add v2.3.1 admin token auth compatibility, keyless skew alignment, x402 config rejection/shape updates, installer parity, fixtures, docs, and smoke harness updates. - Keep unsupported upstream x402 facilitator behavior fail-fast when enabled. ## Checks - build host: targeted cargo tests for admin token auth, keyless replay window, sdk domain fixture, and x402 config rejection - build host: ./scripts/dev-rust-ci.sh - build host: TMPDIR=/var/tmp ./scripts/v218-api-shape-compare.sh - build host: TMPDIR=/var/tmp ./scripts/v218-jwt-verify-compat.sh - build host: TMPDIR=/var/tmp ./scripts/v218-release-http-smoke.sh - build host: TMPDIR=/var/tmp ./scripts/v218-release-lifecycle-smoke.sh - build host: TMPDIR=/var/tmp ./scripts/v218-release-tcp-smoke.sh - build host: TMPDIR=/var/tmp ./scripts/v218-release-udp-smoke.sh - local: bash -n modified smoke scripts - local: git diff --check --- ## Release Audit - Dev counter trail: tagged dev deploy `v2.3.1+rs.1-dev.1` / OCI `v2.3.1-rs.1-dev.1`; no untagged dev deploys were published for this target by this cycle. - Promotion tag: `v2.3.1+rs.1` at `3ba4efaadd54bc98f52eb8f871b85c6104d67ba3`. - Production image: `code.rly.best/gofix/portal-tunnel-rs:v2.3.1-rs.1`. - Production digest: `code.rly.best/gofix/portal-tunnel-rs@sha256:37a7a39838befc34b79d2aedc698e691aa8dc4fd9693791750d9c4891eec7bff`. - Release note: https://code.rly.best/gofix/portal-tunnel-rs/releases/tag/v2.3.1+rs.1 - CI: PR run #119 success; target branch run #120 success; dev tag run #121 success; production tag run #122 success. - Live verification: dev and production direct official-client HTTP smokes passed; dev and production multi-hop official-client HTTP smokes passed. - Production deploy: relay reports `v2.3.1+rs.1` locally and publicly. - Client rollout: upstream `portal` `v2.3.1` linux/arm64 asset was sha256-verified, installed, and active production expose services were restarted and checked. - Relay cleanup: stopped containers, dangling images, and builder cache pruned; no volumes pruned; post-cleanup root disk use 26% and Docker build cache 0B.

ada added 1 commit

2026-06-06 06:22:38 +00:00