steve 9798a2b5fe agent: log accept/complete on backup jobs; audit: populate host.enrolled payload ...

Two warts surfaced during the smoke run:

- Agent was silent between "config.update applied" and "job
  finished" — operators tailing journalctl saw no acknowledgement
  that a command.run had landed. Adds Info logs at job-accept
  ({job_id, paths}) and at successful completion.

- The host.enrolled audit row had an empty {} payload. Now
  carries {hostname, os, arch, has_repo_creds} so an audit-log
  reader can answer "what got enrolled and did the operator
  bundle creds with the token" without joining back to hosts.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-01 18:24:56 +01:00

..

agent_assets.go

phase 1: agent install path — systemd unit, install.sh, asset endpoints

2026-05-01 00:40:36 +01:00

auth_test.go

phase 1: HTTP server + first-run bootstrap

2026-05-01 00:28:18 +01:00

auth.go

server: drop in-process TLS — HTTP-only behind reverse proxy

2026-05-01 11:20:41 +01:00

enrollment_test.go

P1-32: server-side encrypted repo creds + push-on-hello

2026-05-01 12:38:35 +01:00

enrollment.go

agent: log accept/complete on backup jobs; audit: populate host.enrolled payload

2026-05-01 18:24:56 +01:00

host_credentials_test.go

fix: enrollment FK race + log-when-rejected; runbook fixes from dry-run

2026-05-01 14:01:59 +01:00

host_credentials.go

P1-34: e2e smoke runbook + redacted GET /repo-credentials

2026-05-01 13:49:34 +01:00

jobs.go

phase 1: run-now backup — restic wrapper, job lifecycle, end-to-end

2026-05-01 00:45:04 +01:00

middleware.go

phase 1: HTTP server + first-run bootstrap

2026-05-01 00:28:18 +01:00

server.go

P1-34: e2e smoke runbook + redacted GET /repo-credentials

2026-05-01 13:49:34 +01:00

snapshots.go

P1-22: snapshot listing via restic snapshots --json

2026-05-01 11:20:57 +01:00