2 Commits

Author	SHA1	Message	Date
admin	012e5f3ecc	fix(hub): mgmt_plane_healed alerts on the FIRST auto-heal (TASK G1) — v0.34.1 ... A heal marker is an event, not a baseline: construction seeds pre-existing markers (startup false-alarm guard) but a newly-observed marker now raises the warning, so the first auto-heal surfaces (matches the live drill). Added tests for both halves. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6	2026-07-05 19:12:50 +02:00
admin	05d81810d4	feat(hub,install): break-glass recovery vault + mgmt_plane surfacing (TASK G1) ... Hub half of the management-plane break-glass (prereq for felhom-sshd/H1; agent half = felhom-agent v0.71.0). Closes SPIKE-felhom-sshd §8/#9. - store.host_recovery + methods: per-host root@pam console password, at-rest, operator-retrievable (the PVE-web-console fallback when sshd + auto-heal both fail). - API: PUT /hosts/{id}/recovery-credential (self-scoped, day-0 vaults) + GET /admin/hosts/{id}/recovery-credential (global key only). Secret never logged (red-proofed). - monitor/host_mgmtplane: parses the agent mgmt_plane stanza, raises mgmt_plane_healed WARNING on a new privsep_healed_at (recurring clobber surfaces before lockout; complements host_staleness). - host-install: step_break_glass generates a strong root@pam password (openssl rand, never logged/filed — stdin to chpasswd + curl), vaults via host key; idempotent unless --rotate-recovery. Installs the G1 host artifacts (tmpfiles + agent-independent watchdog timer), RuntimeDirectory-guarded; uninstall removes them. Hub v0.34.0. Non-hollow tests + red-proofs; full suite green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6	2026-07-05 19:03:18 +02:00