Add dependency-free "light" WinRM backend behind a runtime toggle - #109

Merged

bertysentry merged 21 commits into

mainfrom

feature/winrm-light

Jul 23, 2026

Commits on Jul 23, 2026

Add dependency-free "light" WinRM backend behind a runtime toggle

bertysentry
and
claude
committed
b1a19ef
Address Codex review: honor backend toggle for file copy, harden XML parsing

bertysentry
and
claude
committed
bb266b8
Harden light backend: reject unencrypted responses, fix timeout/close race

bertysentry
and
claude
committed
1da7d38
Harden light backend NTLM/HTTP protocol parsing (P2 review)

bertysentry
and
claude
committed
b549182
Make the light backend the default (CXF now opt-in)

bertysentry
and
claude
committed
dbb0ad4
Harden light default: auth downgrade, hostname parsing, EndOfSequence scope

bertysentry
and
claude
committed
df65e97
Serialize operations on the light backend's NTLM connection (P1 review)

bertysentry
and
claude
committed
40d5410
Reconnect the light backend after a peer closes an idle keep-alive socket

bertysentry
and
claude
committed
9c8af0b
Harden light backend: reject unknown backend, clamp timeout, closed-state guard (P2 review)

bertysentry
and
claude
committed
6b61322
Add HTTPS support to the light backend (validate TLS by default)

bertysentry
and
claude
committed
1a93929
Extract an AuthScheme seam; move NTLM into NtlmAuthScheme (no behavior change)

bertysentry
and
claude
committed
c6e924a
Add Kerberos (SPNEGO) support to the light backend via JDK JGSS (#105)

bertysentry
and
claude
committed
ab656c7
Remove unused imports left by the AuthScheme extraction (checkstyle)

bertysentry
and
claude
committed
e2261c6
Don't wedge on an auth rejection; fall back on a server-side 401 (review)

bertysentry
and
claude
committed
324154b
Fall through on active-scheme re-auth failure; dispose auth on close (P2 review)

bertysentry
and
claude
committed
2625fcf
Document the light-default upgrade warning (README, site, CHANGELOG)

bertysentry
and
claude
committed
782604e
Decode command output once, not per chunk, to preserve split multibyte chars (P2 review)

bertysentry
and
claude
committed
38c51ab
Match the CXF backend's exception surface and fault mapping (#106)

bertysentry
and
claude
committed
ccfeed6
Add the recorded-exchange protocol test rig and differential harness (#107)

bertysentry
and
claude
committed
b9b41c9
Remove the CXF backend; the dependency-free client is the only one (2.0.0)

bertysentry
and
claude
committed
70c2546
Add AGENTS.md and CLAUDE.md agent instructions

bertysentry
and
claude
committed
83884ba

Navigation Menu

Uh oh!

Add dependency-free "light" WinRM backend behind a runtime toggle - #109

Add dependency-free "light" WinRM backend behind a runtime toggle#109
bertysentry merged 21 commits into
mainfrom
feature/winrm-light

Commits on Jul 23, 2026

Add dependency-free "light" WinRM backend behind a runtime toggle

Address Codex review: honor backend toggle for file copy, harden XML parsing

Harden light backend: reject unencrypted responses, fix timeout/close race

Harden light backend NTLM/HTTP protocol parsing (P2 review)

Make the light backend the default (CXF now opt-in)

Harden light default: auth downgrade, hostname parsing, EndOfSequence scope

Serialize operations on the light backend's NTLM connection (P1 review)

Reconnect the light backend after a peer closes an idle keep-alive socket

Harden light backend: reject unknown backend, clamp timeout, closed-state guard (P2 review)

Add HTTPS support to the light backend (validate TLS by default)

Extract an AuthScheme seam; move NTLM into NtlmAuthScheme (no behavior change)

Add Kerberos (SPNEGO) support to the light backend via JDK JGSS (#105)

Remove unused imports left by the AuthScheme extraction (checkstyle)

Don't wedge on an auth rejection; fall back on a server-side 401 (review)

Fall through on active-scheme re-auth failure; dispose auth on close (P2 review)

Document the light-default upgrade warning (README, site, CHANGELOG)

Decode command output once, not per chunk, to preserve split multibyte chars (P2 review)

Match the CXF backend's exception surface and fault mapping (#106)

Add the recorded-exchange protocol test rig and differential harness (#107)

Remove the CXF backend; the dependency-free client is the only one (2.0.0)

Add AGENTS.md and CLAUDE.md agent instructions