feat(web): relay --auth-file with robot keys, viewer tokens, and the …

[paul-nechifor]

• Adds optional relay authentication through --auth-file. Robots connect with keys tied to their IDs, and viewers connect with access tokens.
• Adds a cockpit login form for entering a viewer token. The browser remembers it until the user logs out. (This should be changed later.)
• Allows the relay to accept connections from other machines when TLS and authentication are configured. Access to the relay's statistics API also requires a viewer token.
• Masks secret values in configuration output and excludes them from saved run and restart metadata.

[greptile-apps]

Confidence Score: 4/5

Merge is not safe until authenticated runs can be restarted without losing required credentials.

Findings

1.  Restart loses credentials ▶

Summary

• Loads validated robot keys and viewer tokens from an authentication file.
• Requires TLS and authentication for protected non-loopback relay binding.
• Propagates robot keys and viewer tokens through the cross-language hello protocol.
• Adds Cockpit token login/logout behavior and protects relay statistics with viewer bearer authentication.
• Masks configured secrets and removes them from persisted run metadata.
• Adds unit, integration, and browser coverage for authentication flows.

_{Reviews (3) · Last reviewed commit: "feat(web): relay --auth-file with robot ..."}

[greptile-apps]

Restart loses credentials

This removes configured --relay-key, --dimos-api-key, and --unitree-aes-128-key values from the stored restart command. dimos restart then launches only that sanitized command, so an authenticated relay or hardware/cloud operation starts without its required credentials and fails. Preserve credentials through a secure restart mechanism, or reject restart requests for runs that require them before merging.

Knowledge Base Used: Core runtime lifecycle

Artifacts

Command output from the check

• Observed output from the final executed validation, including successful pre-restart authentication and failed authentication after the actual restart path.

_{Ran code and verified through T-Rex}

[codecov]

Codecov Report

❌ Patch coverage is 84.47489% with 34 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
dimos/e2e_tests/test_relay_auth_browser.py	19.04%	34 Missing ⚠️

@@            Coverage Diff             @@
##             main    #3953      +/-   ##
==========================================
- Coverage   78.53%   78.50%   -0.03%     
==========================================
  Files        1457     1458       +1     
  Lines      137798   138012     +214     
  Branches    11842    11849       +7     
==========================================
+ Hits       108217   108351     +134     
- Misses      26283    26322      +39     
- Partials     3298     3339      +41     

Components	Coverage Δ
Tests	94.54% <81.00%> (-0.05%)	⬇️

Flag	Coverage Δ
OS-ubuntu-24.04-arm	74.79% <84.47%> (+0.01%)	⬆️
OS-ubuntu-latest	75.41% <84.47%> (+0.01%)	⬆️
Py-3.10	75.40% <84.47%> (+0.01%)	⬆️
Py-3.11	75.40% <84.47%> (+0.01%)	⬆️
Py-3.12	75.40% <84.47%> (+0.01%)	⬆️
Py-3.13	75.40% <84.47%> (+0.01%)	⬆️
Py-3.14	75.40% <84.47%> (+0.01%)	⬆️
Py-3.14t	75.40% <84.47%> (+0.01%)	⬆️
SelfHosted-Large	30.77% <23.74%> (-0.03%)	⬇️
SelfHosted-Linux	35.67% <19.63%> (-0.03%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
dimos/cli/commands/info.py	100.00% <100.00%> (ø)
dimos/cli/test_dimos.py	98.89% <100.00%> (+0.03%)	⬆️
dimos/core/global_config.py	88.97% <100.00%> (-3.77%)	⬇️
dimos/core/run_registry.py	89.23% <100.00%> (+1.84%)	⬆️
dimos/core/test_daemon.py	99.22% <100.00%> (+0.03%)	⬆️
dimos/web/relay_bridge/locate.py	72.09% <ø> (ø)
dimos/web/relay_bridge/module_test_support.py	98.08% <100.00%> (+0.02%)	⬆️
dimos/web/relay_bridge/protocol.py	100.00% <100.00%> (ø)
dimos/web/relay_bridge/relay_bridge_module.py	93.86% <100.00%> (-1.99%)	⬇️
dimos/web/relay_bridge/relay_process.py	82.08% <100.00%> (-1.44%)	⬇️
... and 8 more

... and 4 files with indirect coverage changes

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.