slice 10A: hub desired-state serving + signed-jobs queue (Down channel) (hub v0.9.0)

Serve operator intent to authenticated hosts: PUT /admin/hosts/{id}/desired-state
(global key) bumps desired_generation; GET /hosts/{id}/desired-state + /jobs are
per-host self-scoped; the host-report envelope now carries the real generation +
has_signed_ops. New signed_jobs table + store methods. Desired-state stored/served
opaquely (agent owns the schema). Cross-repo golden (envelope + desired-state)
byte-identical with felhom-agent; doc 03 §4/§9 updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

authentik Default Admin

2026-06-10 19:03:14 +02:00

parent f9af3243b9

commit e54f882e70

8 changed files with 669 additions and 30 deletions

									
										hub/internal/api/testdata/control-envelope.golden.json
									
Vendored

		+7
		
												View File
												
				@@ -0,0 +1,7 @@

				{

				  "status": "ok",

				  "poll_interval_seconds": 900,

				  "blocked": false,

				  "desired_generation": 4,

				  "has_signed_ops": true

				}