claude-bot-andresmgsl b99d08ea3d feat(bootstrap): the tenant mechanism converges from fetched definitions — the agent case arms are cut (#110) ... bootstrap-tenant.sh is one mechanism parameterized by a registry definition (template.env parsed against the allowlist, install.sh run as root with the tenant in its environment, creds.md spliced into the shared context skeleton). staging-box stays in-tree — mechanism-adjacent, no agent. The dispatch in bootstrap.sh moves to the '-box' family-suffix rule so a template added to the registry is mintable with zero code changes here; an unknown role's refusal lists what the resolved source actually contains, naming the source. lib/tenant-config.sh — the per-tenant case-arm table — is deleted: the hard cut, #76's discipline.		2026-07-24 23:00:41 +00:00
..
manifest.sh	fix: read a manifest's final line when the file has no trailing newline	2026-07-20 12:48:39 +00:00
runner-config.sh	bootstrap: infer the tailnet tag from the pre-auth key, verify the granted tag	2026-07-17 15:27:09 +00:00
sshd.sh	fix: don't read a missing /run/sshd as a broken sshd config	2026-07-20 17:58:10 +00:00
templates.sh	feat(bootstrap): the tenant mechanism converges from fetched definitions — the agent case arms are cut (#110)	2026-07-24 23:00:41 +00:00
users-config.sh	fix(users): the root-door resolver matches whole fields, not substrings	2026-07-20 11:18:37 +00:00