nexxo 9137eae6df fix(vpn): a stale enable job can no longer resurrect a deleted access ... If an add job was retried after the access had been revoked and its tombstone purged, it found no row and trusted its own enabled=true payload — re-adding a key that no longer had a row anyone could revoke it with. A missing row can only mean the access is gone, so the captured payload may now remove but never enable. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 21:50:57 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): join the host pipeline's allocation lock; re-authorize on every poll	2026-07-25 21:49:09 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	fix(vpn): stop revoked accesses coming back and stale jobs undoing intent	2026-07-25 21:41:03 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): a stale enable job can no longer resurrect a deleted access	2026-07-25 21:50:57 +02:00
Services	fix(vpn): stop revoked accesses coming back and stale jobs undoing intent	2026-07-25 21:41:03 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00