feat(fleet)!: per-worker fleet keys (full cutover, v1.0.0)#101

Merged

GeiserX merged 10 commits into

mainfrom

feat/per-worker-keys

Jul 10, 2026

Commits on Jul 10, 2026

feat(db): add per-worker key hash column, migration, and helpers
GeiserX
committed
feat(fleet): per-worker key enrollment + cutover on heartbeat
GeiserX
committed
refactor(fleet): store per-worker keys encrypted (enables outbound cutover)
GeiserX
committed
feat(fleet): UI authenticates outbound to each worker with its own key
GeiserX
committed
feat(worker): obtain, persist, and use per-worker fleet key
GeiserX
committed
ci(release): conventional-commit-aware version bump (major on breaking)
GeiserX
committed
docs(fleet): document per-worker keys + v1.0.0 upgrade guide
GeiserX
committed
fix(fleet): re-deliver key until confirmed; harden enrollment (review)
GeiserX
committed
docs: worklog — per-worker-keys cutover shipped as PR #101
GeiserX
committed
test: guard worker_api import in test_worker_keys (docker absent in CI UI env)
GeiserX
committed