feat: full §10.2 HDKD agent bootstrap — broker link-code endpoints + daemon redeem (#144) by hanwencheng · Pull Request #149 · litentry/agentKeys

feat: full §10.2 HDKD agent bootstrap — broker link-code endpoints + daemon redeem (#144)

hanwencheng

committed

docs(runbook): fold #144 gaps into operator-runbook-wire — broker-upgrade prereq + P.0 in the install step

hanwencheng

committed

feat(#144): drive the shipped CLI in the demo + complete the rendezvous (idempotent)

hanwencheng

committed

docs(runbook)+comment: drop no-op --upgrade from setup-broker-host.sh references

hanwencheng

committed

fix(setup-cloud): self-heal the SSM precondition for step 15 (prod + test brokers)

hanwencheng

committed

fix(setup-cloud,docs): drop no-op --upgrade from setup-broker-host.sh refs + add CLAUDE.md rule

hanwencheng

committed

fix(setup-cloud): default HOME in the step-15 SSM remote script (set -u unbound-var)

hanwencheng

committed

docs(CLAUDE): generalize the never---upgrade rule to any idempotent setup script

hanwencheng

committed

fix(setup-cloud): step-15 poll heartbeat + 25-min cap (cold cargo build is not a hang)

hanwencheng

committed

perf(setup-mcp-host): build agentkeys-mcp-server via cached in-repo cargo build, not cargo install --git

hanwencheng

committed

build+scripts: cache sandbox MCP build, move hosted MCP off cloud setup, drop operator flags

hanwencheng

committed

docs(runbook): from-scratch bring-up order + explicit on-broker setup-broker-host.sh step

hanwencheng

committed

harness(pair): depair + re-pair each fresh run so P.2 actually tests registerAgentDevice

hanwencheng

committed

docs(runbook): document P.depair in the walkthrough + reconcile fresh-device vs stable-omni

hanwencheng

committed

harness(P.0): on 404, say 'broker predates #144 — redeploy' instead of a bare 'no link code'

hanwencheng

committed

docs(runbook): don't git-pull by hand on the broker; --ref handles it + root-owned fix

hanwencheng

committed

setup-broker-host: self-heal repo ownership when run via sudo (fixes git-pull Permission denied)

hanwencheng

committed

harness(pair): fail-loud P.depair/P.2 instead of false-passing a fresh registration (Codex finding #3)

hanwencheng

committed

broker(oidc): gate mint-oidc-jwt for agent_hdkd sessions on on-chain device-active (Codex finding #1)

hanwencheng

committed

daemon/mcp/harness: keep the agent bearer in the sandbox via owner-only file (Codex finding #2)

hanwencheng

committed

harness: fix P.2 false-FAIL (jq on stderr-mixed output) + 0x-prefix ACTOR_OMNI for cap-mint

hanwencheng

committed

security: address 2nd adversarial review — full oidc gate invariant, hardened key writes, reuse bearer custody

hanwencheng

committed

style: cargo fmt the finding-A oidc gate edit (fixes CI fmt gate)

hanwencheng

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: full §10.2 HDKD agent bootstrap — broker link-code endpoints + daemon redeem (#144)#149

feat: full §10.2 HDKD agent bootstrap — broker link-code endpoints + daemon redeem (#144)#149
hanwencheng merged 23 commits into
mainfrom
claude/impl-144-hdkd-bootstrap

Commits on May 31, 2026

feat: full §10.2 HDKD agent bootstrap — broker link-code endpoints + daemon redeem (#144)

docs(runbook): fold #144 gaps into operator-runbook-wire — broker-upgrade prereq + P.0 in the install step

feat(#144): drive the shipped CLI in the demo + complete the rendezvous (idempotent)

docs(runbook)+comment: drop no-op --upgrade from setup-broker-host.sh references

fix(setup-cloud): self-heal the SSM precondition for step 15 (prod + test brokers)

fix(setup-cloud,docs): drop no-op --upgrade from setup-broker-host.sh refs + add CLAUDE.md rule

fix(setup-cloud): default HOME in the step-15 SSM remote script (set -u unbound-var)

docs(CLAUDE): generalize the never---upgrade rule to any idempotent setup script

fix(setup-cloud): step-15 poll heartbeat + 25-min cap (cold cargo build is not a hang)

perf(setup-mcp-host): build agentkeys-mcp-server via cached in-repo cargo build, not cargo install --git

build+scripts: cache sandbox MCP build, move hosted MCP off cloud setup, drop operator flags

docs(runbook): from-scratch bring-up order + explicit on-broker setup-broker-host.sh step

harness(pair): depair + re-pair each fresh run so P.2 actually tests registerAgentDevice

docs(runbook): document P.depair in the walkthrough + reconcile fresh-device vs stable-omni

harness(P.0): on 404, say 'broker predates #144 — redeploy' instead of a bare 'no link code'

docs(runbook): don't git-pull by hand on the broker; --ref handles it + root-owned fix

setup-broker-host: self-heal repo ownership when run via sudo (fixes git-pull Permission denied)

harness(pair): fail-loud P.depair/P.2 instead of false-passing a fresh registration (Codex finding #3)

broker(oidc): gate mint-oidc-jwt for agent_hdkd sessions on on-chain device-active (Codex finding #1)

daemon/mcp/harness: keep the agent bearer in the sandbox via owner-only file (Codex finding #2)

harness: fix P.2 false-FAIL (jq on stderr-mixed output) + 0x-prefix ACTOR_OMNI for cap-mint

security: address 2nd adversarial review — full oidc gate invariant, hardened key writes, reuse bearer custody

style: cargo fmt the finding-A oidc gate edit (fixes CI fmt gate)