Jasper VanandClaude Opus 4.8 e6e67c5fe4 feat(licensing): harden cloud pairing — env keys, clear errors, confirm handshake (#424) ...

Three related robustness fixes for the cloud pairing flow:

1. Trusted license public keys are env-configurable (ZPAN_LICENSE_PUBLIC_KEYS)
   instead of hardcoding dev keys in source — a leaked dev key is rotated via
   config and never baked into production builds. Registered in all platform
   factories.
2. Certificate verification surfaces a specific rejection reason
   (signature/issuer/instance/expired/host), and the pairing modal distinguishes
   a cert-verification failure from a genuine timeout instead of showing both as
   "expired". On failure the poll handler rolls back the orphaned cloud binding.
3. After verifying + storing the certificate, the instance confirms the binding
   to the cloud (zpan-cloud-sdk 2.1.0's POST /licenses/:id/confirm) so the cloud
   pairing page resolves to success only once the instance actually accepted it.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-10 14:43:46 -04:00

..

cloudflare.ts

feat(licensing): harden cloud pairing — env keys, clear errors, confirm handshake (#424)

2026-06-10 14:43:46 -04:00

interface.ts

feat(platform): add getBinding() for platform-native resources

2026-04-22 22:56:35 -04:00

libsql.libsql-test.ts

feat: v2.5.0 T1 — libSQL (Turso) platform adapter + Docker Turso opt-in (#326)

2026-04-22 00:48:21 -04:00

libsql.ts

feat(licensing): harden cloud pairing — env keys, clear errors, confirm handshake (#424)

2026-06-10 14:43:46 -04:00

node.ts

feat(licensing): harden cloud pairing — env keys, clear errors, confirm handshake (#424)

2026-06-10 14:43:46 -04:00