WIP: Agent management and self-enrolling Windows packages #4

2026-10-14T10:54:43-05:00

lussierj commented

2026-10-14 10:54:43 -05:00

Source: codex/review-04-management-packaging
Target: codex/review-03-zones-enrollment

Summary

Adds Agent registry/history, operator management UI, Windows enrollment package generation and delivery, and canonical Windows source inclusion in the backend image.

Exact included commits

b9b5e5e — feat: add agent management
abf5654 — feat: add self-enrolling Windows Agent package

Dependencies

Depends on PRs 1–3 for enrollment, authentication, zones, and Windows runtime/installer infrastructure. PR 5 targets this source branch.

Available validation evidence

The commits include registry, frontend, package, enrollment-source, and PostgreSQL transport-isolation tests.

Later Blocker #2 validation passed package and frontend tests on the final tested tree. Tests were not rerun at this isolated endpoint during branch preparation.

Outstanding testing and security concerns

Run management, registry, package, and transport-isolation suites against this endpoint.
Verify manage-only package authorization, same-origin delivery, no-cache behavior, secret redaction, and token expiry/consumption.
Build from the committed production Docker configuration and verify canonical Windows source inclusion.
Repository-root build-context hardening is separate uncommitted work. Review exposure of runtime state, backups, credentials, and other local artifacts.
Validate package extraction and enrollment with native Windows PowerShell.
This endpoint lacks the existing-agent credential recovery workflow introduced by PR 5.
Full discovery isolation and legacy-control safety remain outstanding stack-wide review concerns.

Deployment status

This PR is not approved for production deployment.

Source: `codex/review-04-management-packaging` Target: `codex/review-03-zones-enrollment` ### Summary Adds Agent registry/history, operator management UI, Windows enrollment package generation and delivery, and canonical Windows source inclusion in the backend image. ### Exact included commits - `b9b5e5e` — feat: add agent management - `abf5654` — feat: add self-enrolling Windows Agent package ### Dependencies Depends on PRs 1–3 for enrollment, authentication, zones, and Windows runtime/installer infrastructure. PR 5 targets this source branch. ### Available validation evidence The commits include registry, frontend, package, enrollment-source, and PostgreSQL transport-isolation tests. Later Blocker #2 validation passed package and frontend tests on the final tested tree. Tests were not rerun at this isolated endpoint during branch preparation. ### Outstanding testing and security concerns - Run management, registry, package, and transport-isolation suites against this endpoint. - Verify manage-only package authorization, same-origin delivery, no-cache behavior, secret redaction, and token expiry/consumption. - Build from the committed production Docker configuration and verify canonical Windows source inclusion. - Repository-root build-context hardening is separate uncommitted work. Review exposure of runtime state, backups, credentials, and other local artifacts. - Validate package extraction and enrollment with native Windows PowerShell. - This endpoint lacks the existing-agent credential recovery workflow introduced by PR 5. - Full discovery isolation and legacy-control safety remain outstanding stack-wide review concerns. ### Deployment status This PR is not approved for production deployment.

lussierj added 2 commits 2026-10-14 10:54:44 -05:00

feat: add agent management b9b5e5e36f

feat: add self-enrolling Windows Agent package abf5654a25

You are not authorized to merge this pull request.

This pull request can be merged automatically.

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin codex/review-04-management-packaging:codex/review-04-management-packaging

git checkout codex/review-04-management-packaging

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: lussierj/minerops#4