nexxo c0cd367a0e Drop the public endpoint: the command line already carries what the host needs ... The operator was right to challenge POST /enrol. The three values a script needs before the tunnel exists — hub key, hub address, assigned tunnel IP — are all known to the console when the host is created, so they travel in the copied command instead of being fetched. The one thing that forced an endpoint was the hub needing the host's public key before the tunnel is up. So the console generates the pair and hands it over, and the host swaps in a freshly generated key through the tunnel afterwards. The key that passed through a clipboard lives for minutes. Net effect: the network boundary is unchanged. No new way in from outside. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-30 18:25:02 +02:00
..
design	Write the handoff, and rescue the approved templates into the repo	2026-07-27 20:18:20 +02:00
handoffs	Put the price recognition back, all 3526 lines of it	2026-07-30 16:35:55 +02:00
specs	docs: Phase D spec — service framing, redesign & CRUD completeness	2026-07-25 14:13:23 +02:00
superpowers	Drop the public endpoint: the command line already carries what the host needs	2026-07-30 18:25:02 +02:00
deployment.md	feat(deploy): releases you can pin to, and a version that tells the truth	2026-07-26 15:21:38 +02:00
handoff-plan-catalogue.md	docs: handoff for the plan catalogue rebuild	2026-07-26 10:43:17 +02:00
monitoring-uptime-kuma.md	fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe	2026-07-25 20:19:32 +02:00
wireguard-hub.md	docs(wireguard): document the ownership model and config storage	2026-07-25 22:55:14 +02:00