nexxo 02750a7c9a fix(vpn): lock the owner row while issuing an access ... A revocation committing between the operator check and the insert would find no peer to remove and still leave the revoked colleague with a brand-new tunnel. Issuing now runs in a transaction that locks the owner row — the same row revokeStaff() locks — so the two cannot interleave. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:46:23 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): lock the owner row while issuing an access	2026-07-25 22:46:23 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Policies	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): classify adopted peers as system, not staff; drop duplicate env line	2026-07-25 22:34:18 +02:00
Services	fix(vpn): give the QR code the specified four-module quiet zone	2026-07-25 22:40:54 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00