2 Commits

Author	SHA1	Message	Date
Claude-Docs-Manager	05724edde2	docs(protocol): the AppRole divergence is resolved history; the lease example and fake follow tenancy's AgentLeaseOut ... DD-0524 — PROTOCOL.md §Divergences bullets 1-2 said monky-tenancy `main` "still implements the AppRole lease and install kit" and that "the kit's generated config uses tenancy.base_url". Both were false when the page was published: tenancy !17 (288df791, merged 07:48Z) shipped AgentLeaseOut{env_id, login_jwt, ttl_s, mount, role, addr}, the ES256 grant signer and the JWKS sixteen minutes before v0.1.0 was tagged, and !22 (61bd0281) made the kit run install.sh with flags instead of writing a config. The two bullets are now dated "Resolved" notes; bullets 3-4 (report `detail`, X-Bundle-Sha) stand. DD-0526 — the lease example sent `reason` and received a nested `vault{}`; tenancy's AgentLease is `{env_id}` and AgentLeaseOut carries `addr` at the top level (no vault object). The example now shows tenancy's shapes (with a note that the agent still sends `reason` and tenancy ignores unknown fields), the checkin example gains `auth_mount`/`auth_role` so it is the full AgentVaultOut, tests/fakes.py emits `addr` the way tenancy does, and tenancy.py's docstring and lease() read `addr` first (the `vault{}` fallback is kept so an older fake or tenancy still leases). Verified against monky-tenancy app/schemas_backends.py at 1fd51454 (AgentLease 296-297, AgentLeaseOut 300-309, AgentVaultOut 278-283). Gates (local, py3.12): ruff format --check, ruff check, pytest 50 passed, bash -n packaging/install.sh. Doc-Drift: DD-0524 fixed Doc-Drift: DD-0526 fixed Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AW3QqEpwLV69KHn24Re45Q	2026-09-06 23:13:09 -07:00
mdella	1c42e913a8	feat: monky-deployd v0.1.0 — pull agent over the mesh (ADR-0028) ... Stdlib-only Python 3.12 agent for docker VMs and laptops: flock → checkin (bearer = the agent's OpenBao token, bootstrapped from the install kit's jwt-tenancy deploy grant) → action apply|none|down → bundle (sha256 verified) → refusal checks (unresolved ${VAR} names only, manifest paths pinned to monky/data/<env>/see/, privileged/host-network, rollback, disk need×1.5+headroom) → lease → POST /v1/auth/jwt-tenancy/login → KV reads → .env 0600 → promote → compose pull/up → wait healthy → report; finally renew-self / re-lease before max TTL, scrub. Exit 0/75/78/1. Redactor log filter. Transports sdk (openziti) / proxy (ziti tunnel proxy 18443/18200) / system. Laptop mode. Packaging: hardened oneshot + 60 s timer + proxy unit, nfpm .deb with /opt/monky-deployd/venv, install.sh for Ubuntu 26.04 (Gitea release download, enrol, ACLs, bootstrap from stdin), ansible role skeleton for osg1-07. CI: lint/test on every change; wheel (openziti on ubuntu:26.04) and package (nfpm) allow_failure until runner egress is proven; GitLab release + release:gitea on v* tags. Docs: README, PROTOCOL, OPERATIONS, CHANGELOG, CLAUDE/AGENTS. Divergence noted: monky-tenancy main (MR !15) still ships the AppRole lease and kit; this agent implements the plan's Gate 1 RESULT (login_jwt, no unwrap) and refuses an AppRole lease loudly (LEASE_SHAPE). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KLB7jieMNRkTsJ2epr4Ds1	2026-09-05 08:01:36 +00:00