nexxo 4ffdafc614 fix(vpn): losing the operator roles closes the owner doors by itself ... Ownership alone kept download, block and delete reachable for someone whose roles were removed by any path other than revokeStaff() — a direct role edit, say. Being staff is now part of ownership, so revocation closes these doors without depending on whoever removed the role also remembering the tunnel. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:50:13 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): count downloads in the database; repair the race test	2026-07-25 22:48:38 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Policies	fix(vpn): losing the operator roles closes the owner doors by itself	2026-07-25 22:50:13 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): classify adopted peers as system, not staff; drop duplicate env line	2026-07-25 22:34:18 +02:00
Services	fix(vpn): give the QR code the specified four-module quiet zone	2026-07-25 22:40:54 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00