Rongsong Shen 4ec401672b fix(xcecli): restore dangling CA-cert cleanup misses, enable https support ... bug-1463: commit 94f50ce6 (bug-1453 CA-cert-plumbing removal) missed GetJobOutput's dead tls.Config/loadRootCAs block in request.go, plus peek.go's SetRootCAs call and serverInfo.CACert field access (the field no longer exists on APIServerInfo) -- broke the xcecli build. Removed all three dangling references. Also enabled NewAPIClient's previously-commented-out InsecureSkipVerify TLS config, since no xcecli method set any TLS config at all -- any https:// apiserver URL would have failed cert verification, not just GetJobOutput. Matches bug-1453's documented design (server-side TLS only, no peer verification, mTLS deferred as P3 hardening). Documented both the api-server (http+https) and controller (server-side-cert-only, no client certs) TLS postures in .kiro/steering/security.md, replacing a stale line claiming TLS is handled at the network layer, plus a follow-up note for the planned HAProxy TLS-termination reverse proxy once its cert type and apiserver's own listener fate are decided.		2026-07-23 07:28:01 +00:00
..
format	improve frontend jobid display	2026-05-07 02:36:24 +00:00
output	add kiro skills	2026-05-21 03:41:57 +00:00
request	fix(xcecli): restore dangling CA-cert cleanup misses, enable https support	2026-07-23 07:28:01 +00:00
utils	Merge Go frontend (apiserver + xcecli) into meson build	2026-04-14 11:23:18 +08:00