- ConnectMessage → ConnectRequest (precise naming)
- Move encode/decode into ControlStream/SessionStream wrappers
  (actor-on-object: ctrl.send(&msg) instead of msg.encode(&mut stream))
- ControlStream.into_split() → ControlSendStream + ControlRecvStream
  (compile-time separation, no phantom halves)
- From<(S, R)> for stream wrappers (connection.open_bi().await?.into())
- Rename spawned tasks: run_control_reader, run_session_proxy,
  run_agent_connection, run_control_loop
- Spawned tasks own args and handle errors internally
- Collect JoinHandles, abort all on shutdown
- Extract helpers to tunnel_helpers.rs
- Document backoff strategy with examples

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- CaManager::load_or_generate returns Arc<Self> directly
- Rename enrollment token consume → redeem
- Remove unused resolve-target API endpoint + helpers + tests
- Remove routing methods from registry (PR2 scope)
- Remove Option from RouteAdvertisementState (empty = no routes)
- Target enum for typed IP vs domain parsing
- Prefix variables clearly (server_cert_*, ca_*)
- Add TODO for traffic audit and Windows DACL
- Backoff strategy documented with examples

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Address review feedback from Benoit and Marc-André:

- Rename HTTP mountpoint /jet/agent-tunnel → /jet/tunnel
- Replace SkipHostnameVerification with SpkiPinnedVerifier that
  performs full chain + hostname + SPKI pin validation
- Enrollment response now includes server_spki_sha256 for pinning
- Agent sends machine hostname; gateway adds it as DNS SAN alongside
  the UUID SAN (dual names for future direct connectivity)
- Agent connects using real gateway hostname instead of dummy value
- Move sha2/hex to cross-platform deps, add x509-parser + hostname

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- Remove agent_name from EnrollResponse (agent knows it already)
- Agent generates its own UUID and sends it in EnrollRequest
- Rename api/agent_enrollment.rs → api/tunnel.rs (match endpoint)
- Use backoff crate for reconnect loop (same pattern as subscriber.rs)
- ALPN: "devolutions-agent-tunnel" → "gw-agent-tunnel/1" (versioned)
- Protocol version: 2 → 1 (previous was experimental, start fresh)
- Move session tests to integration test file (public API only)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- SanType::Rfc822Name → SanType::URI for urn:uuid: (correct X.509 type)
- GeneralName::RFC822Name → GeneralName::URI in extraction
- Reject duplicate agent UUID on enrollment (409 Conflict)
- tokio::join! instead of select! for session proxy (prevents data loss)
- JoinSet instead of Vec<JoinHandle> (prevents unbounded growth)
- Timeout (30s) on session handshake recv_request/recv_response
- Fix typos: "redeemd" → "redeemed"

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- Move current_time_millis() to agent-tunnel-proto (R1: eliminate duplication)
- Delete DomainInfo, use DomainAdvertisement directly in AgentInfo (R2)
- Merge enroll_agent/bootstrap_and_persist into single function (I1)
- Agent task_handles: Vec<JoinHandle> → JoinSet with reaping (I4)
- Same-epoch route refresh: mutate updated_at in place, no clone (I5)
- Add #[must_use] on enrollment_store::redeem() (I6)
- connect_via_agent: cleaner error extraction with if-let (I3)
- Add TODO for active_stream_count tracking (I2)
- SECS_PER_DAY constant replaces magic 86400 (P4)
- Consistent .context() for ProtoError instead of map_err (P7)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- Hoist protocol version validation before match in both gateway and
  agent control loops (single check, no per-variant boilerplate)
- Validate ConnectResponse protocol version in connect_via_agent
- ServerCertStatus enum for ensure_server_cert (expiry + hostname SAN)
- send.finish() after proxy copy (graceful QUIC EOF)
- Fix constant_time_eq doc (inaccurate timing claim)
- Extract ALPN to agent_tunnel_proto::ALPN_PROTOCOL constant
- Destruct EnrollResponse at parameter level for readability
- ValidatedTunnelConf: make wrong state unrepresentable at type level
  (dto::TunnelConf for JSON, TunnelConf for runtime with non-optional fields)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>