From 253117b29232b970c3ed72a6d30549d968f1cbe9 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 29 Jun 2026 23:25:20 +0200 Subject: [PATCH] hub: WIRE HostLeafChecker into the monitor loop (the wiring was missed in v0.22.0) The v0.22.0 commit added the checker but the main.go goroutine edit never applied. Live test caught it (no host_leaf_changed on a leaf regen). Now started on the 60s sweep. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ --- hub/cmd/hub/main.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hub/cmd/hub/main.go b/hub/cmd/hub/main.go index 9d24d9d..e5d26d2 100644 --- a/hub/cmd/hub/main.go +++ b/hub/cmd/hub/main.go @@ -319,6 +319,9 @@ func main() { // v0.44.0-agent: operator alert when an agent reports a degraded privileged capability (a missing // `sudo -n` grant — the 2026-06-28 cutover class). Same 60s sweep + transition/cooldown plumbing. hostCapabilityChecker := monitor.NewHostCapabilityChecker(dataStore, dispatcher.ProcessEvent, logger) + // agent-v0.48.0: proactive fleet-wide agent-re-key detection — alert when a host's reported + // local-API leaf fingerprint changes (independent of the controller channel-check). Same 60s sweep. + hostLeafChecker := monitor.NewHostLeafChecker(dataStore, dispatcher.ProcessEvent, logger) go func() { ticker := time.NewTicker(60 * time.Second) defer ticker.Stop() @@ -330,6 +333,7 @@ func main() { stalenessChecker.Check() hostStalenessChecker.Check() hostCapabilityChecker.Check() + hostLeafChecker.Check() } } }()