isTravis · Oct 6, 2026 · Oct 3, 2026 · Oct 3, 2026 · Oct 3, 2026 · Oct 3, 2026
diff --git a/.dockerignore b/.dockerignore
diff --git a/.env.local.enc b/.env.local.enc
diff --git a/.env.prod-v2.enc b/.env.prod-v2.enc
@@ -0,0 +1,25 @@
+#ENC[AES256_GCM,data:uyDJVNkWT0y9PTSPX15CsqPxpqCLEutWb4qjKfhtC0BN17PKeVnXeH7A+1eaAQIPjwc8Q8PhGFayFb9VGWMqAh7p9lOeabLL2NfKG8xg432tCyyAazDZFn7hpT/GNAy20SUw/nJiah+i0w+X,iv:254kJ0MBxAkYsasc+asoK5mGMofzqqw2xahqXjIuP+w=,tag:7fUACA6CPX0mbGMlREOeUA==,type:comment]
+SIGNING_KEY=ENC[AES256_GCM,data:A4PAGMONiXri0uQNshY+ur2H1/DSTTkmNcEOh8EVA64PPjhqP7Kt0yuG0g==,iv:Zr0zSimpuW/+c66YO70oHgbpobdiqpbktbb4TGwfiJU=,tag:+tptSTSTlcGiHJIFf0+JcA==,type:str]
+LOCATION_KEY=ENC[AES256_GCM,data:iATgADyTGtQPQznCKg65km+7r0Kw8Pg7vDFp3Bbk3CWA57GZ4M9+4N1ZeQ==,iv:906m8zdHUf5R9VGZsW8HbDaZR4lxS9Cq/1tVr+fuGhM=,tag:SBJCCdodedt2CM/AI7VnQg==,type:str]
+SESSION_SECRET=ENC[AES256_GCM,data:tuILJNlEID8jYVMgQZJF8nrq4RDUfBfD1czDQu/uKVJclq+SrGwK2DYuZg==,iv:sHxO1eu0MvB1rcf1MhpoeX7r1D7jCiW82nmxNP3ovAE=,tag:wFhn34oC7wHlUtnHSfcq8w==,type:str]
+OIDC_CLIENT_SECRET=ENC[AES256_GCM,data:pnIuM3zHuGaUK2eOMYiX5stV5rrd+sICNWxplZYizaLWhiMQ08LR4ftv4SbxVvBVdCb+dwsQZsfQ/tG8NJfUPg==,iv:P6xz2mR1epra8PnO0Lm88GXQsF7lxSsHOP+daa+qwvo=,tag:xghe0n8nqAM4Fjo5Nbz32w==,type:str]
+R2_API_TOKEN=ENC[AES256_GCM,data:o1pmULq8mwcvSTOBWLkBVe7zKWV2CewsP85zexG3CVV1znCkHjhgSW6guqmNWapf8GtnJAg=,iv:DqhfFRBQaF6o4Sz7yRzdzbONEv/IIWPNYKrFYrbh+SQ=,tag:oep7noE6DjCoGkKuQYARvQ==,type:str]
+R2_ACCESS_KEY_ID=ENC[AES256_GCM,data:3ZtWCOe9S3MPjs4cEvRwV732FmuEH5izGGgS+ImBXLg=,iv:CqSvo/Mj76NV6XEB7iqocxYD4Af2zlRJVvaN+FAyO3A=,tag:sjuYfiqngGGFh++GQbRS2Q==,type:str]
+R2_SECRET_ACCESS_KEY=ENC[AES256_GCM,data:PXkrTwKFyFRQgPzJ7QFPThsPqcTmsrYwJMdwQBmDPbyW2Jjf+u8m4xYe7KFT6t0iEM4AAvWBf+DzoYsRcyRPeg==,iv:cl/LUndMCodY904gmyIr0ohoJPmGH3yZHfxj+fFYm2A=,tag:t9u+7vEzWmlmSEtaHNpX7Q==,type:str]
+AUTH_INTERNAL_API_KEY=ENC[AES256_GCM,data:gLtDfJwLbEzzq/ojnn+c9ClXl6AP5oNie+XnMNfWijfzCVXbaVNxDZu35NHhkHVp2T6gRubR+jbd2b0AQC76ow==,iv:joRi9MGLWXbrkNEYpOh2x8ztsmcTxs/9+jw4R8JpFEo=,tag:k29GhDHkc6rp4P3mcpJuvg==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCSGpETTJkaFFBRTlWWGdE\nMlhGVU5SaUh4L3hQa3dDYWZleHFwTTZRdjJvClhMOCtVam5CMXJKT3BYNEpGQzVn\nUVFVZmNNbXJOODNqUXdCdzhGUHFQVmcKLS0tIDVvdDZ0MlUzaW9SNWJzcnZ5d1NX\nR1Awdk1TeGNPL0JsZjRIUk1lblBHblkKtBQfM03Ny/oKza4+p77SPE+B9H2HeHbI\njIcOsOXg3K7ZrN8Zqm146kU5A+zhPuJEuRy64g8xC35LYH+dUwbLtw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age1wravpjmed26772xfjhawmnsnc4933htapg6y5xseqml0jdv8z9hqemzhcr
+sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZXRwY3lHM2F5bCtDMFpR\ndGpDdUpCWVNwb0NWUHgwdGNSbHp4ZzgwK1c0ClBVTzJka3JzK2tsM0F0MkpObTJF\nelhTdWhLZG1tV3RRUGgxT2VNNnNEaDgKLS0tIDArM1ZDdCttSmNyVWlKdk9qTDZF\nNTF3NzdVaXBDZit4RDlXNnhUcHdMaEkKZUK3FHDGsoKJHDai75Uz2sP9ZkvB3WBU\nupiRVOcBx6qcI+8A6LMehtx3Ei41NXN0Cs/WOv7ClzbQzgy27sK+Ug==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_1__map_recipient=age1ysddqggsx3h8zkv7xn3z26sjak5pqms6pyqhnky9ukrvpk7es5jsayz8w7
+sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHczBES0ErM0RCbmxSTFkv\nZWdvcDJqVlphSWxjaEI1cHhNUjI3ak1sK1FBCi84azdkYWZRcVR3ZEViR1B2cWdj\nMDBCeWhtN21wVXU2dURtaFAxS21rY0EKLS0tIHU5MzJGTTQ2RjA4WnBCSHJNZjk2\naWRONHBaUWJ2bk9sWnljQ01aYjdiUlUKIbhUc1duZ/Q38RZw3Ct1MLHz73HWjUx4\npCZXlpQc4ajzqzwd71FLhOuIAfRuD/kxAgOCI1rrBAuPcjJ9GWUlPQ==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_2__map_recipient=age1pgxk292zq30wafwg03gge7hu5dlu3h7yfldp2y8kqekfaljjky7s752uwy
+sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1b1E1bEtvWXZHOCtneGl2\nUHpaRGVkTUYzR05lL1g4enRZdHI3VS9PR3dFCmV2UzhwRURTMnhwb29ZdTQrMmpv\nYnREYStvZ1pVQlQ4UFp5eThGSVhMZTgKLS0tIGc0UjV3REQzWWtJYUhIUm5TWW5R\nZGNtOUk0amdLbkcySFUvTXFMWGE1YXMKM7/x6cmsD8v3GGIeer/OnIuix9OoJTzO\n4Dn8LQhpwhiQzMGOcpb6wKH3hlVtzvaScNnP684ExgeqJVDsFPeuPg==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_3__map_recipient=age1qn0x93jhqjpqwvx5tgxnrwq5e3vuzur9whrkdnrvapd58esm45rqfkuxqh
+sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlL0xhcWd5aGVpYmlSb095\nOGUzRStvdG5seURQMkg2L2l2Wi85dUNqb2tnCmJSTkRIRHQvZnB4c2YyTGFuOU5u\nWHBBU1VUZlpkRzRteXhNaWZuSE40aG8KLS0tIE8xdjN6cHp3N1BxM0hGVEwwVnhw\nakFmM281ZFRQT2I2dm1Zc1F3b29wWlEK6wp6sV/YqcQOvBDYw4/rGSXr+0qsNm06\nBVEKknx/zYMiYDKeQcIsLu9yIEHlURJ0atfop48BUkVsR6PbgmpgNQ==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_4__map_recipient=age1h86dek80u5t677tsparz395uk3zvz4yuj9m5t2v2nsdfsvyjmafsra5yt7
+sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdHpWaU0ycGgwaUcxM0JK\nWmZxWlRvZnlPOEI2c3pJMyszK1gyWENZb0ZNCnpzTUNIZGpsZ2VpUWd5V2tPQnF2\nYjZnVG84Y3B2R01uYWFFbXdsTjYxdlEKLS0tIHBlYmFpd29xT3NLV1VjUCtUVmhR\nVW1YSDg0ZzBtQTd0R0dUQ29LZVdZR3MKeSP91xyZHIt6QXr/Lz7ZhWCn0JvX8gfX\nJg9cDsHdmsVRFdn2ipWP5Acx2qp/C5MosWENB3ITrgV9TEkJ7E9Jcw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_5__map_recipient=age1vfhyk6wmt993dezz5wjf6n3ynkd6xptv2dr0qdl6kmttev9lh5dsfjfs3h
+sops_lastmodified=2026-10-05T18:44:52Z
+sops_mac=ENC[AES256_GCM,data:Cq6n0j7gJ5itoCtqhh4tRgvquH0TcgddlxgEB70wKghvNS8WPmoA55OSvOwTLbwvdGYcxjuIy/VukdJlSqZ2gu3wwaxbnlaJgSGBecIeWlgXk+1BnQu3Au+laECE+spEMSlmxh3rTBKtw26baIGivV6ojfUxOyDeByBtikt2lC4=,iv:zUbxFgvlqYHCRm2Ihp/DnBv5Fm5wV+6n1VSA8YG82tI=,tag:/bU46QR0pMaBKbCAwxuWYQ==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.11.0
diff --git a/.env.staging.enc b/.env.staging.enc
@@ -0,0 +1,25 @@
+#ENC[AES256_GCM,data:L18HvVhVLrA+ki80CVjZV9xs+DsOsEvszm+F9g2yTGZttt84xfWMIqJ3Zlo3b+3A4F/jEhZ8KPLfBqfp7ylI5QsOmfk8PR4zvrtFMHYE/AZB+Keiuin/tK+rag==,iv:x3yKH8w3vyOFcMVhvZ8/MTn0sa27vStt+x67t/YzN6E=,tag:Balm2ehHO8woo2OFrwDvHg==,type:comment]
+SIGNING_KEY=ENC[AES256_GCM,data:Uf9wdQf+EhbqfbufFyyYvwyn2XbKVneF3tU23OTEmfV4e/jvnsi9a0GVEA==,iv:wvaJeETb8ryvRLRQxPILmO23JcFEgPrbVqlZt+TxB1k=,tag:dHC2GV+JhSIKxV9VetbO9A==,type:str]
+LOCATION_KEY=ENC[AES256_GCM,data:srIB/K3yBVjTRd/2VivT6qaaGg83Fxa4VCd+Zk7H2O1L7xxrV1qLX1ofXQ==,iv:GqYlEr0SVb+X+EFL6Q+wszRhcUkakon3Z0TA95PKbNE=,tag:jrk9EZkixCmI8sHzSaDaxg==,type:str]
+SESSION_SECRET=ENC[AES256_GCM,data:M2/TE/R4+NDKyeWBCYN0lzkadg+2MaESsOPh9EoRQYxBGAhZHP4Lt3o+OQ==,iv:ClvpJl/soXCA8fPRmPo+io8b167q7WiODLlpAN27jfY=,tag:Rjhe41njbZ6LNIEQ7J143w==,type:str]
+OIDC_CLIENT_SECRET=ENC[AES256_GCM,data:qKP3W3LSShbJ6pQK0VjNWYYIab6OLha6kZoJM8sUkWXf2JHOL4ZWAtisDsVIkxjzcJWJJ55ZC/bK4sRlVDq8rQ==,iv:AWXZHqNR+jUL3+U7bLepAR6KbD9mwnNXAKuV2GiwIhU=,tag:UUhOqRg3WBhH5m7jenMYkw==,type:str]
+R2_API_TOKEN=ENC[AES256_GCM,data:6xecHO7T6D7npUiqIIHo9CectjDBNwm4VlS/ZGHNwLNqxIMyoHbN5XeKVgo7Taa4B701MNE=,iv:+iNkvek2zJNloaMPZpWMkryREm0naFnQHokbqhFjemA=,tag:i4S8brDoEiBa3gKq7ZqHZA==,type:str]
+R2_ACCESS_KEY_ID=ENC[AES256_GCM,data:ups38t8iyZuDi0k4X76sOh0Njd0F2SJn6ozIiTJOv3g=,iv:jxBqZBUPz81BRYCC34ZWR2heOh8N/ca0biFQab4sX/M=,tag:VlGZQ3M61bLKLhkS6isaYw==,type:str]
+R2_SECRET_ACCESS_KEY=ENC[AES256_GCM,data:deaqHLFsI1dMX+daJCMhQ5FH6GkKc6Jec+ooo3tZz8nlc3HtxMYooHP0g8GbkIX7q2VBjQeOLwUraZzYWdBs2w==,iv:u/5e3cjkdeQyj7QWp7J2WBvUKE8klRYgBfxNmoQpRrs=,tag:cl3ztXz1aJjPTEPIyK7CLQ==,type:str]
+AUTH_INTERNAL_API_KEY=ENC[AES256_GCM,data:tUYoRLvtDCseoEJsVfaWOWPJqS37/2Mefvme7vbIOHEhPI6nTEimCmDZbV/SsYv/1SuSIW34toqcxH1Fnl7MIg==,iv:Urp+ZTkZLvTpybFAt4MMH6o9CQGICZjSIzjrb+AA1S4=,tag:I9lCrmiIuwBwIZww26/OfQ==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaWFJTTEZFRElBckZsSEE3\na1pGQzRac2FGOE1ZSDBmZDBodGZjRjFYNjNjCk9RNVVoWVNCNU5JV2FvVnM2NzJW\nSmhPU1dCN0REdFQrUjFCaGppVlAxS3cKLS0tIGt6OGdNNFhxWGRZT0pNbHY5QWtp\nOWJMUzliSkVqZE8rTStGWFF2eUpNRDAKJMxcuM9S+RNJA6M8cOoDKu21Cd/VLm5A\niHHFWPVgcaHSHVTQnzwbo0zHkE2ue/xhdctm1QD9nRe+AtFm0ogRzA==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age1wravpjmed26772xfjhawmnsnc4933htapg6y5xseqml0jdv8z9hqemzhcr
+sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXek54eDFkVnBCNXkrdjMv\nalptTUVUTXAydDBJdjMwcWlKT2Izdm9GckNNCmw2L1o0dmZyWWVHTjhNd3JmVXM1\nVlVDSHk3ZXgzSmt5S0hYTytuaVEyaEkKLS0tIHpiQmU5K1BjSklYMHVLaW1yM2V6\neW4zeFJFeFEyYXBIMkZHSXFPc1JDUkEKXXzkYVfW0z5dhpRIfQYcKnNY3Z46+HDl\nSIL8E6qzYGB+Wmny0OHkhdy9/yGErCxrwJWH5RGjFt6NzjSvMwOUiw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_1__map_recipient=age1ysddqggsx3h8zkv7xn3z26sjak5pqms6pyqhnky9ukrvpk7es5jsayz8w7
+sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZzRiL3YwU2pybmFVL1k3\nczJ4L3ZkQ0ZsOGlWVlhqbWRMWVN2RUNnTlZzCjJldkdFTnBTcHA1YkkxREpac2xO\nMUVwNkxGVWNydlRFNEN5cGFQck5na28KLS0tIHZEaHhNSTIxcnh2TFkxcjRDczZl\nOUY3cjE1MFBLbFhlQ3hqVXZyWmQ3K2sKyLWvRb79PjFk683XW2SPRbHMX7eZerAi\n1hhjnE8n1V+EJvu6coB+/IG+WQPgT/t8JY/332RQswn/rw+AMwGx9w==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_2__map_recipient=age1pgxk292zq30wafwg03gge7hu5dlu3h7yfldp2y8kqekfaljjky7s752uwy
+sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRTZDa2ZvaDcxZ2tpUTJj\nOGUrbkdkdjNJZmJQcVRkK21OTnUwbUl0d0VrCmNzQ2VOQjk4SDR1UWRrVDRHb3pa\nK0JBeHN5akd2QXhBOW9jVG5rRVRHNDgKLS0tIEFkSlRwNjZzZTdWd01mcnVQYU5h\nK0owb3V4VFZOeldmdVBndUo2NTdlQ28K3v4iS1YCiFPRsSo5fyw99l003KokQqpN\ntEMwdbtD61YPRRgFcrMmN71SkyjoNLUrX/5atBHnEaDkivRw3tCeqg==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_3__map_recipient=age1qn0x93jhqjpqwvx5tgxnrwq5e3vuzur9whrkdnrvapd58esm45rqfkuxqh
+sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1aHJMR01jbnBpdkU3TTdn\nV2Z1dk1aRW5oY1VQdC9KUEQ3NDN6alF0aTBJCnhBcEc0dlJGTWRKZ0dDQ3loWUwz\nUDJiZG1tZzltN0wvbUUyRFpYbDJKM3MKLS0tIDZMK1BySllJeGkxNTRscysrdHJE\nRHVIc1RvMHJFc1dRd3F2SUh1Z1hKZUkKA6vg2GmwBBmGk7UHcb1sbhZIf42Ds3k+\nmg0YaSE7k4iBqm44Lh3arFrmfaosCyPeYB1wyqXlxR+k0nvvijpzvQ==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_4__map_recipient=age1h86dek80u5t677tsparz395uk3zvz4yuj9m5t2v2nsdfsvyjmafsra5yt7
+sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMYzN2cTFMM1hDd3hyYmFp\nOWpoTEM2K3UwNnhjeEVScEVCTmlDSEJlMDBvCmsrZUEzYVhSTHBmSGZ0Mzg0QWtW\nb1YxM3N3VllYZ1VMcEJpc05KZG4xcWcKLS0tIElDT1ZGOWJxRVorNjRpRGZ5akJY\nTlloR0d1QnBMV0pxckRUVzc2bHJVa28KZYl/NOcr3pLFAn+4yaQDejqKJr5A2e0X\neDQuVacIicznbRcryp+IpGfdW8+H+BgXif6insXqjCz0lX2q/xopnw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_5__map_recipient=age1vfhyk6wmt993dezz5wjf6n3ynkd6xptv2dr0qdl6kmttev9lh5dsfjfs3h
+sops_lastmodified=2026-10-04T16:46:10Z
+sops_mac=ENC[AES256_GCM,data:v/OHKSnYStOf//dP8FAnRNfUsn5ixX9GjKBNfJP6ByL9av5MyMUS7Pd7q8lDv/RhQHFn3v+KISOk7f9Ezp5/vLW+7+Rip/FRbViMuzEqwRjCkKqZNO79hzPIzYT+mvknirtDk6BO3NqaYAan/1vnRCwTq43TTSsMoW0swCUirZI=,iv:sizhCYXhA1u0TBlg2joo2W/CpJCXw0SdGqyYycDA4KE=,tag:oGulAwmz5BCr5Zfjbx2vdQ==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.11.0
diff --git a/.env.test b/.env.test
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -9,9 +9,9 @@ run-name: >-
 
 on:
   push:
-    branches: [main]
+    branches: [main, v2-edge]
   pull_request:
-    branches: [main]
+    branches: [main, v2-edge]
 
 concurrency:
   group: ci-${{ github.ref }}
@@ -21,7 +21,7 @@ jobs:
   check:
     name: Lint, typecheck, test
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 20
 
     steps:
       - name: Checkout
@@ -52,3 +52,12 @@ jobs:
 
       - name: Test
         run: pnpm test
+
+      - name: Browser bundle
+        run: pnpm --filter @underlay/protocol check-browser
+
+      - name: CLI build
+        run: pnpm --filter @underlay/cli build && node packages/cli/dist/cli.js --help
+
+      - name: Web build and SSR smoke
+        run: pnpm --filter @underlay/web build && pnpm --filter @underlay/web smoke