Yaojia Wang af630143de feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep) ...

Wire the prod boot to issue frp-client + device leaves from the existing on-disk
P-256 CAs: NATIVE_* env vars, a file-backed KmsResolver (loads the PEM key,
validates prime256v1, never logs key material), buildFileBackedNativeCas threaded
into buildControlPlane via a nativeCas override. Fail-closed on partial NATIVE_*.
281 tests pass.

2026-07-18 15:04:04 +02:00

..

api

feat(control-plane): POST /auth/login mints device:enroll bearer (B1)

2026-07-18 13:32:05 +02:00

audit

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

auth

feat(control-plane): POST /auth/login mints device:enroll bearer (B1)

2026-07-18 13:32:05 +02:00

boot

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

ca

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

db

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

deprovision

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

metering

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

model

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

node-auth

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

pairing

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

registry

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

revoke

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

routing

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

store

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

subdomain

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

util

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

env.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

flat-store.ts

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

main.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

server.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00