v0.9.0

0.9.0 (2026-10-10)

⚠ BREAKING CHANGES

• agent: carry the WebSocket in a signed upgrade and a sealed channel
• agent: enrol with a token proof and administrator approval
• api: require signed, sealed requests on every agent route

Features

• agentca: issue a 24h responder signing certificate renewed by Reload (3ec83d6)
• agent: carry the WebSocket in a signed upgrade and a sealed channel (83fd4bc)
• agent: choose the TLS roots by transport mode and drop client-certificate TLS (5b6a02c)
• agent: enrol with a token proof and administrator approval (5186fa7)
• agentproto: add HPKE, session AEAD and HTTP message signature primitives (5cc08a7)
• agents: authenticate by client id and serial, verify agent certificates (603fe98)
• agent: sign and seal REST over an ephemeral-key session (f579faf)
• api: require signed, sealed requests on every agent route (6ac6c5e)
• web: approve or reject agent enrolments (b880e0e)

Bug Fixes

• agentproto: session-owned seq with replay protection, raw r||s signatures, responder EKU (60c927a)
• agentproto: sign refusals only after verification and cover Cf-Error (78e2079)
• agent: rate limit signed REST per client instead of per address; retry 429/503 with backoff (bbe3ef7)
• agent: retry a busy handshake and a failed reconcile with backoff (61b774d)
• api: rate limit and session-check secure agent routes, share one nonce cache, cap it, accept listener-name authorities (fbbc684)
• db: derive enrollment_tokens.lookup_id on insert so pre-upgrade backups restore (d87c8f7)
• keep the approval dialog open across refetches, poll past token expiry, lock the pending cap, scope request lookup by org (721a8c3)
• web: name the Clients nav link via aria-label so the badge adds no stray space (b5704d0)
• web: reword retire CA consequence; reject {#id} anchors in help test (0e40cf7)