Harden Link lifecycle and Control operations #3

Merged

ochenstarik-ui merged 2 commits from codex/ttl-backup-acceptance into main

2026-07-19 05:25:11 +00:00

ochenstarik-ui commented

2026-07-19 05:02:01 +00:00

(Migrated from github.com)

What changed

fixes Link disconnection from the dedicated Windows Links page;
adds server-side TTL expiration with firewall reconciliation and retry after partial failure;
adds SQLite schema versioning, retention, maintenance, verified Control DB/CA backup and offline restore;
adds ASP.NET Core pipeline tests, Linux Agent parser tests, and Windows desktop contract checks;
adds a reproducible three-server acceptance runner covering two independent Links, manual isolation, TTL, backup, optional restore/reboot, and temporary Operator certificate revocation.

Why

The alpha needed complete Link lifecycle enforcement and recoverable Control state before physical testing on a public Hub and two secondary Nodes. The Windows Links page also retained selection state in the old shell list, which could prevent the newly selected Link from being disabled.

Validation

26 .NET tests pass;
solution and Desktop formatting checks pass;
Windows x64 Release builds and launches successfully;
UI Automation confirms the dedicated Links page and disconnect controls;
self-contained trimmed Control and Agent publish for linux-x64 and linux-arm64;
Windows desktop contract test passes;
Git Bash validates the acceptance script syntax.

## What changed - fixes Link disconnection from the dedicated Windows Links page; - adds server-side TTL expiration with firewall reconciliation and retry after partial failure; - adds SQLite schema versioning, retention, maintenance, verified Control DB/CA backup and offline restore; - adds ASP.NET Core pipeline tests, Linux Agent parser tests, and Windows desktop contract checks; - adds a reproducible three-server acceptance runner covering two independent Links, manual isolation, TTL, backup, optional restore/reboot, and temporary Operator certificate revocation. ## Why The alpha needed complete Link lifecycle enforcement and recoverable Control state before physical testing on a public Hub and two secondary Nodes. The Windows Links page also retained selection state in the old shell list, which could prevent the newly selected Link from being disabled. ## Validation - 26 .NET tests pass; - solution and Desktop formatting checks pass; - Windows x64 Release builds and launches successfully; - UI Automation confirms the dedicated Links page and disconnect controls; - self-contained trimmed Control and Agent publish for linux-x64 and linux-arm64; - Windows desktop contract test passes; - Git Bash validates the acceptance script syntax.