2 Commits

Author	SHA1	Message	Date
admin	e5a18194f4	v0.19.0: bootstrap contract v2 — relay hub retrieval passphrase (no host key in guest) ... Lockstep with felhom-controller v0.40.0. The agent now bakes a v2 bootstrap.json carrying only what the controller needs to PULL its config from the hub: customer.id + hub.url + hub.retrieval_password + the per-guest local_api. Stops baking the agent's host hub key/host_id (and customer name/domain/email) into the guest — the controller gets the customer-scoped key from the hub pull. - internal/provision/doc.go: SchemaV2; DocCustomer{id}; DocHub{url,retrieval_password}. - backhalf.go: render v2; require customer.id + hub.url + hub.retrieval_password. - cmd/.../main.go --selftest=provision: new required -hub-password flag; stop baking APIKey/HostID; -customer-domain/name/email accepted but not baked. - configs/build-golden.sh: default CONTROLLER_IMAGE off stale :v0.35.0 -> :0.40.0. - doc_test.go/backhalf_test.go updated to v2 shape. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-11 13:22:51 +02:00
admin	3fecf4c713	slice 8A (agent half): local-API server + provisioning back-half (v0.10.0) ... internal/localapi: per-guest local-API server (doc 03 §6) — 7 self-scoped endpoints, hashed per-guest token store, persisted self-signed leaf with stable SHA-256 pin, optional 6th daemon goroutine. internal/provision: back-half — mint token, render bootstrap.json (no registry cred), write 0600, chown 100000:100000, attach pct-set bind mount (host-side, F3, no pct exec). --selftest=provision. build-golden.sh bakes the controller image + bootstrap unit. sudoers FELHOM_PROVISION; firewall narrowing artifact. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-10 09:47:42 +02:00