feat(configs+queue): managed-config server with token auth; queue_output bridge - #405

Merged

medcl merged 24 commits into

mainfrom

configs-server-and-queue-output

Aug 25, 2026

Commits on Aug 24, 2026

feat(configs): managed-config protocol server with token authentication
medcl
committed
fd3f16b
feat(queue): queue_output processor — chain-tail batch→queue bridge
medcl
committed
8f1834d
feat(pipeline): expose LookupProcessorConstructor
medcl
committed
6568c19
feat(pipeline): clone convention — CloneContextKey + host materialization
medcl
committed
c0b46ea
fix(configs): upsert treated first-registration not-found as a 500
medcl
committed
0f23f79
feat(model): instance AccessToken + Token type (console exchange convention)
medcl
committed
c676550
feat(configs): wire the framework token manager into the managed channel
medcl
committed
c8eeff7
fix(configs): sync 401 — client sends the self token, server only checked the minted one
medcl
committed
8ec9dc6
feat(configs): instance admission — register as pending, admin approves
medcl
committed
c08a3a6
fix(configs): pending instances no longer 401 on sync; bootstrap optional
medcl
committed
4427e6b
feat(configs): enrollment tokens — one-time registration tickets + register rate limiting
medcl
committed
3f8396a
feat(app): -e KEY=VALUE flag — environment overrides from the command line
medcl
committed
ffee24b
fix(configs): re-register also rejected the agent's self token
medcl
committed
d8ea398
refactor(configs): manager credentials now come from the framework token manager
medcl
committed
073fc2b
fix(configs): heartbeat clobbered approved instances back to pending
medcl
committed
662d5ee
fix(configs): register read approval from the payload, not the store
medcl
committed
df63b81
fix(configs): exchange rejected the credentials it exists to serve
medcl
committed
574ce7b
fix(model): advertised endpoint pointed at the non-serving API default
medcl
committed
96f09a1
feat(configs): host the reverse channel — manager reaches one-way agents
medcl
committed
5ee3f94
fix(configs): enrollment ticket demanded on every restart
medcl
committed
bcef902
refactor(configs): rename AgentAccessTokenKeystoreKey to InstanceAccessTokenKeystoreKey
medcl
committed
1f697f4
fix(configs+processors): harden merge blockers found in live LogPilot/Gateway use
medcl
committed
488d169

Navigation Menu

Uh oh!

feat(configs+queue): managed-config server with token auth; queue_output bridge - #405

feat(configs+queue): managed-config server with token auth; queue_output bridge#405
medcl merged 24 commits into
mainfrom
configs-server-and-queue-output

Commits on Aug 24, 2026

feat(configs): managed-config protocol server with token authentication

feat(queue): queue_output processor — chain-tail batch→queue bridge

feat(pipeline): expose LookupProcessorConstructor

feat(pipeline): clone convention — CloneContextKey + host materialization

fix(configs): upsert treated first-registration not-found as a 500

feat(model): instance AccessToken + Token type (console exchange convention)

feat(configs): wire the framework token manager into the managed channel

fix(configs): sync 401 — client sends the self token, server only checked the minted one

feat(configs): instance admission — register as pending, admin approves

fix(configs): pending instances no longer 401 on sync; bootstrap optional

feat(configs): enrollment tokens — one-time registration tickets + register rate limiting

feat(app): -e KEY=VALUE flag — environment overrides from the command line

fix(configs): re-register also rejected the agent's self token

refactor(configs): manager credentials now come from the framework token manager

fix(configs): heartbeat clobbered approved instances back to pending

fix(configs): register read approval from the payload, not the store

fix(configs): exchange rejected the credentials it exists to serve

fix(model): advertised endpoint pointed at the non-serving API default

feat(configs): host the reverse channel — manager reaches one-way agents

fix(configs): enrollment ticket demanded on every restart

refactor(configs): rename AgentAccessTokenKeystoreKey to InstanceAccessTokenKeystoreKey

fix(configs+processors): harden merge blockers found in live LogPilot/Gateway use

Commits on Aug 25, 2026

fix(configs): pending instance sync wiped local managed configs

fix(configs): reverse client loopback rewrite broke specific-IP bindings