Repository navigation

feat(platform): add project Zero Trust protection - #335

Merged

Brooooooklyn merged 25 commits into

mainfrom

feat/self-hosted-zero-trust

Oct 1, 2026

Merged

feat(platform): add project Zero Trust protection#335
Brooooooklyn merged 25 commits into
mainfrom
feat/self-hosted-zero-trust

Commits on Oct 1, 2026
- feat(platform): add project Zero Trust protection
  
  Brooooooklyn
  and
  claude
  committed
  2b094ea
- feat(platform): add Zero Trust pages to the React admin
  
  Brooooooklyn
  and
  claude
  committed
  2e5dd85
- fix(platform): harden Zero Trust permissions, retries, and ordering
  
  Brooooooklyn
  and
  claude
  committed
  fb30212
- refactor(platform): simplify Zero Trust state and command surface
  
  Brooooooklyn
  and
  claude
  committed
  677fa53
- refactor(platform): split Zero Trust service into modules
  
  Brooooooklyn
  and
  claude
  committed
  f807661
- docs(platform): document project Zero Trust
  
  Brooooooklyn
  and
  claude
  committed
  7001bb9
- fix(platform): keep Zero Trust metadata on its own project's routes
  
  Brooooooklyn
  and
  claude
  committed
  48a8e2d
- fix(platform): retry projects missing Zero Trust state fairly
  
  Brooooooklyn
  and
  claude
  committed
  00cd87c
- fix(platform): skip failed projects only for the live Zero Trust operation
  
  Brooooooklyn
  and
  claude
  committed
  6605bcc
- docs(platform): explain how project Zero Trust protection works
  
  Brooooooklyn
  and
  claude
  committed
  0c456ab
- docs(platform): describe skipped projects during Zero Trust disable
  
  Brooooooklyn
  and
  claude
  committed
  f595837
- fix(platform): call the global fetch unbound in Zero Trust clients
  
  Brooooooklyn
  and
  claude
  committed
  3bbc87f
- fix(platform): keep platform health probes outside project Zero Trust
  
  Brooooooklyn
  and
  claude
  committed
  9579bf2
- fix(platform): route the platform health host like any project host
  
  Brooooooklyn
  and
  claude
  committed
  de6b132
- fix(platform): bypass Access only for the platform health path
  
  Brooooooklyn
  and
  claude
  committed
  9859eb3
- fix(platform): refuse uninstall while project Zero Trust owns Access apps
  
  Brooooooklyn
  and
  claude
  committed
  bf3be56
- fix(platform): hold off Zero Trust writers until uninstall disables traffic
  
  Brooooooklyn
  and
  claude
  committed
  be3c7c3
- fix(platform): point uninstall to rerunning a stopped project deletion
  
  Brooooooklyn
  and
  claude
  committed
  4b46452
- docs(platform): record the uninstall lock's remaining window
  
  Brooooooklyn
  and
  claude
  committed
  34123c5
- test(platform): give the retained-Queue uninstall tests a Zero Trust state
  
  Brooooooklyn
  and
  claude
  committed
  c999d05
- fix(platform): keep a new application domain pending while a project was skipped
  
  Brooooooklyn
  and
  claude
  committed
  9bf6740
- fix(platform): record a removed custom domain for Zero Trust retry in its deletion
  
  Brooooooklyn
  and
  claude
  committed
  3b8ee88
- fix(platform): refuse Zero Trust writers that waited out the uninstall lock
  
  Brooooooklyn
  and
  claude
  committed
  a0cd3fb
- fix(platform): check the uninstall fence before removing a custom domain
  
  Brooooooklyn
  and
  claude
  committed
  ebc6101
- fix(platform): record an expired pending domain for Zero Trust retry in its cleanup
  
  Brooooooklyn
  and
  claude
  committed
  02d88f3

Commits

Commits on Oct 1, 2026