nexxo 371d517261 fix(vpn): dispatch the revocation removal after the transaction commits ... A worker could pick the job up mid-transaction, still see the peer as active, leave it on the hub — and never be asked again, because the committed state is only a soft delete. A revoked colleague would keep their tunnel until some later reconciliation noticed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:36:11 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): dispatch the revocation removal after the transaction commits	2026-07-25 22:36:11 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Policies	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): classify adopted peers as system, not staff; drop duplicate env line	2026-07-25 22:34:18 +02:00
Services	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00