Yaojia Wang af630143de feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep) ...

Wire the prod boot to issue frp-client + device leaves from the existing on-disk
P-256 CAs: NATIVE_* env vars, a file-backed KmsResolver (loads the PEM key,
validates prime256v1, never logs key material), buildFileBackedNativeCas threaded
into buildControlPlane via a nativeCas override. Fail-closed on partial NATIVE_*.
281 tests pass.

2026-07-18 15:04:04 +02:00

..

bin

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

db

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

src

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

test

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

package-lock.json

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

package.json

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

tsconfig.json

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

vitest.config.ts

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00