felhom-agent

admin/felhom-agent

Fork 0

Commit Graph

Author	SHA1	Message	Date
admin	cb692f8788	v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep Capture layer: applog.New returns (logger, Ring) — slog fan-out, stderr at the configured level, ~1000-entry ring fixed at LevelDebug (remote diagnostics without a config flip). GET /debug/logs (token-authed, ?raw=1) + request-level DEBUG middleware. Heartbeat log-pull mirrors the report logtail pattern: envelope log_tail_requested -> next heartbeat carries log_tail (128KB cap, consume-once, failed-push retry proven). Gap-fill sweep over netverify/ netstorage/netmount/signedjobs/selfupdate/disks/controller-swap/desired/loop. Red-proofs: ring-at-emit-level FAILs capture test; drain removed FAILs consume-once; dropped phase line FAILs the S7 log-sequence smoke. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6	2026-07-11 16:24:07 +02:00
admin	8033a522cd	feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report) - reconcile: ClassAgentUpdate op class; always Destructive (no provenance blesses replacing the root-adjacent binary). classify test + companion (TestClassify_AgentUpdateAlwaysDestructive). - opsign: `-op agent_update` with -agent-version + -sha256 (isHex64-validated); params {version,sha256}. isHex64 test (Group D). - config: SelfUpdateConfig{URLTemplate,Username,Token,StateDir,DwellSeconds} + WithDefaults + Token redaction. - internal/selfupdate: Executor (download → verify vs the SIGNED sha → sudo -n wrapper `apply`; sha is the only integrity root — mismatch refuses + removes, agent untouched); Manager (startup dwell → `commit`; version-mismatch → no commit + loud WARN + marker left for report visibility; shutdown-before-dwell leaves pending). WrapperRunner seam → tests never shell out. - hub report: additive selfupdate_pending(+version) via SetSelfUpdateReporter seam; both omitempty (Wireguard precedent) so the cross-repo golden contract stays byte-stable — no hub change. - capability manifest: 3 non-critical FELHOM_SELFUPDATE probes. - main.go: updateExec appended to the executor chain; commit-manager wired to the report seam + MaybeCommit goroutine after core init. Tests: Group A (executor happy/sha-mismatch+companion/bad-params/wrapper-fail), B (agent_update rides the real gate: pinned-key executes, non-pinned + retarget rejected), C (commit/version-mismatch/no-pending/shutdown), D (opsign). C2 companion red-proof verified (neutered Go verify → bad binary reaches apply → test fails), reverted. Full go test ./... green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6	2026-07-05 15:32:15 +02:00

Author

SHA1

Message

Date

admin

cb692f8788

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

Capture layer: applog.New returns (logger, Ring) — slog fan-out, stderr at the
configured level, ~1000-entry ring fixed at LevelDebug (remote diagnostics
without a config flip). GET /debug/logs (token-authed, ?raw=1) + request-level
DEBUG middleware. Heartbeat log-pull mirrors the report logtail pattern:
envelope log_tail_requested -> next heartbeat carries log_tail (128KB cap,
consume-once, failed-push retry proven). Gap-fill sweep over netverify/
netstorage/netmount/signedjobs/selfupdate/disks/controller-swap/desired/loop.
Red-proofs: ring-at-emit-level FAILs capture test; drain removed FAILs
consume-once; dropped phase line FAILs the S7 log-sequence smoke.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-11 16:24:07 +02:00

admin

8033a522cd

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

- reconcile: ClassAgentUpdate op class; always Destructive (no provenance
  blesses replacing the root-adjacent binary). classify test + companion
  (TestClassify_AgentUpdateAlwaysDestructive).
- opsign: `-op agent_update` with -agent-version + -sha256 (isHex64-validated);
  params {version,sha256}. isHex64 test (Group D).
- config: SelfUpdateConfig{URLTemplate,Username,Token,StateDir,DwellSeconds}
  + WithDefaults + Token redaction.
- internal/selfupdate: Executor (download → verify vs the SIGNED sha → sudo -n
  wrapper `apply`; sha is the only integrity root — mismatch refuses + removes,
  agent untouched); Manager (startup dwell → `commit`; version-mismatch → no
  commit + loud WARN + marker left for report visibility; shutdown-before-dwell
  leaves pending). WrapperRunner seam → tests never shell out.
- hub report: additive selfupdate_pending(+version) via SetSelfUpdateReporter
  seam; both omitempty (Wireguard precedent) so the cross-repo golden contract
  stays byte-stable — no hub change.
- capability manifest: 3 non-critical FELHOM_SELFUPDATE probes.
- main.go: updateExec appended to the executor chain; commit-manager wired to
  the report seam + MaybeCommit goroutine after core init.

Tests: Group A (executor happy/sha-mismatch+companion/bad-params/wrapper-fail),
B (agent_update rides the real gate: pinned-key executes, non-pinned +
retarget rejected), C (commit/version-mismatch/no-pending/shutdown), D (opsign).
C2 companion red-proof verified (neutered Go verify → bad binary reaches apply
→ test fails), reverted. Full go test ./... green.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-05 15:32:15 +02:00

2 Commits