nexxo 8eb9d7ad30 fix(vpn): serialize hub reads against hub mutations ... A sync could read the hub snapshot just before ApplyVpnPeer removed a peer and purged its tombstone, then adopt what it had seen as a fresh enabled access — restoring a revoked one. Both jobs now hold Cache::lock('wireguard:hub') around read-decide-mutate, so a reconciliation can never straddle a removal. Retry removals are dispatched after the lock is released, because the sync queue driver runs them inline and they take the same lock. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 21:53:13 +02:00
..
AdminConsoleTest.php	feat(admin): dark Tactical-Terminal operator console	2026-07-25 08:35:03 +02:00
AdminHostRestrictionTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
AdminSettingsTest.php	fix(admin): shown-once temp password for invited staff; suppress announcements for cancelled windows at send time	2026-07-25 16:23:21 +02:00
DatacenterTest.php	fix(admin): no admin lockout (is_admin fallback); centered modal width; datacenter edit modal + country dropdown	2026-07-25 18:09:17 +02:00
HostManagementTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
MaintenanceTest.php	fix(portal): scope the per-instance maintenance badge to that instance's host	2026-07-25 19:12:33 +02:00
ProvisioningActionsTest.php	fix(ui): modal above sidebar (z-index); datacenter edit buttons stay right; toast slides from bottom; provisioning retry action	2026-07-25 15:29:37 +02:00
RbacTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
VpnTest.php	fix(vpn): serialize hub reads against hub mutations	2026-07-25 21:53:13 +02:00