Rongsong Shen 4ec401672b fix(xcecli): restore dangling CA-cert cleanup misses, enable https support ... bug-1463: commit 94f50ce6 (bug-1453 CA-cert-plumbing removal) missed GetJobOutput's dead tls.Config/loadRootCAs block in request.go, plus peek.go's SetRootCAs call and serverInfo.CACert field access (the field no longer exists on APIServerInfo) -- broke the xcecli build. Removed all three dangling references. Also enabled NewAPIClient's previously-commented-out InsecureSkipVerify TLS config, since no xcecli method set any TLS config at all -- any https:// apiserver URL would have failed cert verification, not just GetJobOutput. Matches bug-1453's documented design (server-side TLS only, no peer verification, mTLS deferred as P3 hardening). Documented both the api-server (http+https) and controller (server-side-cert-only, no client certs) TLS postures in .kiro/steering/security.md, replacing a stale line claiming TLS is handled at the network layer, plus a follow-up note for the planned HAProxy TLS-termination reverse proxy once its cert type and apiserver's own listener fate are decided.		2026-07-23 07:28:01 +00:00
..
apiserver	merge	2026-07-23 12:35:10 +08:00
docs	Merge Go frontend (apiserver + xcecli) into meson build	2026-04-14 11:23:18 +08:00
tests/regression	Merge Go frontend (apiserver + xcecli) into meson build	2026-04-14 11:23:18 +08:00
xcecli	fix(xcecli): restore dangling CA-cert cleanup misses, enable https support	2026-07-23 07:28:01 +00:00
CLAUDE.md	chore: baseline snapshot — prior-session work + ha-consistency-invariants spec family	2026-06-11 13:21:50 +00:00
Makefile	Merge Go frontend (apiserver + xcecli) into meson build	2026-04-14 11:23:18 +08:00
meson.build	Merge Go frontend (apiserver + xcecli) into meson build	2026-04-14 11:23:18 +08:00