0.8.0: interactive command surface, recoverable identity, device lifecycle - #164

Merged

Abdk4Moura merged 27 commits into

mainfrom

Aug 8, 2026

Commits on Aug 7, 2026

wip: interactive UX redesign, first-touch edits (unbuilt)
Abdk4Moura
committed
39a9401
wip: align help examples and module banner with the new surface
Abdk4Moura
committed
ef78103
wip: align fleet_ui copy and its tests with the add/invite surface
Abdk4Moura
committed
953edf1
wip: remove em dashes from visible command strings
Abdk4Moura
committed
2b61e48
wip: honor the global --json for set/reach/doctor, gate stays strict otherwise
Abdk4Moura
committed
beafe2e
wip: bip39 needs the std feature for from_entropy_in/parse_in/to_entropy
Abdk4Moura
committed
cee134f
wip: build fixes, all tests green
Abdk4Moura
committed
4f31e56
device lifecycle mechanism: signed offline-budget ceiling, effective deadline, periodic liveness observation
Abdk4Moura
committed
6f5c9d7
lifecycle: sweeper, durable revoke, fresh-join bounds overwrite, #155 enrollment side
Abdk4Moura
committed
b8e97d3
lifecycle: advisory depart + durable-lapse helper, test-serialized config-dir tests
Abdk4Moura
committed
c63610b
unify revocation on one certRevoked marker; delete the clearing lines; revocation is absolute
Abdk4Moura
committed
00b6cdc
copy round: devices state lines name the binding clock; join review shows the budget
Abdk4Moura
committed
f6dd810
rebase: drop stray brace left by conflict resolution (cert_revoked_for region)
Abdk4Moura
committed
b530299
rebase artefact: drop the duplicated pre-ceiling revocation guard
Abdk4Moura
committed
3dee078
fix(#161): bind revocation before the first typed-code transfer
Abdk4Moura
committed
188ee46
docs: 0.8.0 changelog entries for the surface, lifecycle, and #161 security fix
Abdk4Moura
committed
ad0f219
fix: store-failure semantics in device_cert_revoked (advisor review)
Abdk4Moura
committed
8813ad3
fix: distinguish absent from unreadable store in device_cert_revoked (advisor)
Abdk4Moura
committed
937a865
fix: macOS skip for the revocation first-op test; forget warns it discards revocation
Abdk4Moura
committed
affa50f
docs: carry the post-#167 verb fixes onto the redesign branch
Abdk4Moura
committed
8e32bac
test: construct the revoked-peer record directly instead of a live pairing ceremony
Abdk4Moura
committed
7831338
test: remove the macOS skip - the flaky pairing ceremony is gone
Abdk4Moura
committed
2a8d2c0
fix(#161): revocation binds on the WebRTC/relay transport too, and the hold expires fail-closed
Abdk4Moura
committed
3820995
fix(#161): transport-up challenge re-issue and link-ready hold gate
Abdk4Moura
committed
ac7e0ec
docs: name the fail-closed bound and the two-transport scope in the #161 Security entry
Abdk4Moura
committed
ac26e98
fix(#161): raise the challenge, hold, and nonce lifetimes together to 20s
Abdk4Moura
committed
0cd50e9
fix(#161): revert the fail-closed expiry; hold-then-decide with the documented residual
Abdk4Moura
committed
5199c13