feat(hub): host-domain ingest — tables + /host-report + per-host auth + host dead-man's-switch (v0.7.0, slice 3)
Purely additive; the controller path (reports/customer_configs/checkAuthCustomer/
existing checkers) is untouched. Cutover remains slice 10.
- store: new hosts/guests/host_reports tables (full schema incl. columns INERT
until slice 10, so no later ALTER); GetHostByAPIKey/GetHost/ListHosts/UpsertHost/
SaveHostReport/UpsertGuestFromReport (preserves inert cols)/GetHostStaleness/
GuestID; Prune also prunes host_reports.
- api: checkAuthHost (sibling of checkAuthCustomer); POST /host-report (per-host
Bearer, 4MiB, denorm + guest upsert, control envelope); POST /admin/hosts
(PROVISIONAL global-key host mint); host_* event types registered.
- monitor: HostStalenessChecker sibling over host_reports (host_stale/down/
recovered), wired on the existing 60s ticker; controller checkers unchanged.
- tests (hermetic): store intent/inert-column preservation, auth, ingest
(envelope+denorm, mismatch/unknown/blocked/oversize), admin mint round-trip,
host staleness transitions.
CHANGELOG v0.7.0. Contract matches the agent host-report spec field-for-field.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
admin
7c0c75457f