- mocks/ (directory) fix: honor TLS insecure settings in native registry push and refactor docker shell-outs
- remote/ (directory) add public ACME TLS support
- ui/ (directory) fix(ui): improve tree view layout and icon ordering
- attachments.go 9.0 KiB feat: add attachment image push support to CLI and control plane
- attachments_push.go 5.4 KiB refactor: introduce parameter structs for push command functions
- attachments_push_test.go 10.9 KiB add public ACME TLS support
- auth.go 23.9 KiB fix: address coderabbit security review
- auth_scopes_test.go 1.6 KiB fix: address review — DeployIntent always called, repo validation, docker login stdin, ARG docs
- auth_test.go 1.2 KiB refactor(auth): use remote.Resolve(), drop resolveRemoteEntry
- autoroute_allow.go 3.0 KiB feat: security hardening — auto-route domain allowlist, pass token storage, blob upload locking (#125)
- backup.go 5.8 KiB fix: address validated pre-release review findings
- bootstrap.go 3.8 KiB fix: skip mutable sections in post-save verification to prevent false corruption errors
- ca.go 5.5 KiB refactor: resolve pre-release hexarch follow-ups
- config.go 4.8 KiB fix: redact config and secure unsafe secrets
- controlplane.go 3.3 KiB add public ACME TLS support
- controlplane_local.go 19.4 KiB Address public TLS review findings
- controlplane_local_test.go 4.1 KiB Address public TLS review findings
- controlplane_remote.go 6.5 KiB add public ACME TLS support
- controlplane_remote_test.go 366 B fix(app,cli): fail closed on invalid allowlist and log close errors
- controlplane_resolver.go 989 B fix(cli): clean up aggregate routes output
- controlplane_resolver_test.go 1.9 KiB fix: address review feedback — testify assertions and dead code removal
- deploy.go 3.2 KiB refactor(cli): deduplicate deploy failure and remote helpers
- deploy_error.go 2.4 KiB refactor(cli): deduplicate deploy failure and remote helpers
- deploy_error_test.go 1.9 KiB fix(cli): sanitize deploy fallback warnings
- deploy_test.go 4.5 KiB fix(cli): sanitize deploy fallback warnings
- fallback.go 768 B fix(cli) reduce fallback and push cyclomatic complexity and fix lint errors
- fallback_test.go 997 B fix(cli): fallback to local signals when remote admin is unavailable
- images.go 15.9 KiB refactor: add bytesize.Format helper, use human-readable sizes everywhere
- images_test.go 20.5 KiB refactor: add bytesize.Format helper, use human-readable sizes everywhere
- json.go 232 B feat: add --json output to all list commands
- json_parity_test.go 980 B add public ACME TLS support
- json_test.go 9.0 KiB test(cli): rename rollback tests to pin
- local.go 3.9 KiB fix: address CodeRabbit review findings
- local_test.go 2.2 KiB fix(tests) use os.Getpid in PID test and add missing test cases
- networks.go 2.6 KiB fix: address code review findings across CLI and docs
- parity_matrix_test.go 2.6 KiB chore: finalizer pass — update rollback references in README and docs, simplify validateTagExists
- pin.go 6.9 KiB refactor(cli): route pin command output through cliWriteLine/cliWritef, wrap errors
- pin_test.go 2.2 KiB test(cli): rename rollback tests to pin
- presentation.go 1.6 KiB refactor(cli): deduplicate deploy failure and remote helpers
- preview.go 12.2 KiB fix(preview): address CodeRabbit review findings
- push.go 25.8 KiB refactor(cli): make push image-first (#173)
- push_image_ops.go 6.0 KiB fix(cli): wire Resolve() into push, fix remotes list token display
- push_image_ops_test.go 4.0 KiB fix: TTY warning on show-token, remove --revoke stub, fix tests for token exchange
- push_integration_test.go 3.6 KiB refactor: introduce parameter structs for push command functions
- push_test.go 23.7 KiB add public ACME TLS support
- remotes.go 9.7 KiB fix(cli): wire Resolve() into push, fix remotes list token display
- restart.go 1.8 KiB refactor(cli): add local control plane and parity baseline
- root.go 12.3 KiB simplify public ACME TLS implementation
- routes.go 34.6 KiB fix(cli): trim route status spacing
- routes_test.go 27.3 KiB fix(cli): trim route status spacing
- secrets.go 12.1 KiB fix: final cleanup from coderabbit review
- serve.go 591 B refactor: remove deprecated compatibility shims
- tls.go 4.5 KiB Clean up public ACME TLS review issues
- tls_test.go 8.9 KiB address CodeRabbit public ACME TLS findings
- ui_adoption_test.go 5.7 KiB feat: add --json output to all list commands
- volumes.go 4.3 KiB refactor: add bytesize.Format helper, use human-readable sizes everywhere
- volumes_test.go 2.6 KiB feat: infrastructure hygiene — runtime detection, upload cleanup, volume management (#131)