fix(hub): remove legacy command credentials #253

Merged

gmackie merged 1 commit from fix/hub-strict-command-auth into main

2026-08-05 12:05:37 +00:00

gmackie commented

2026-08-05 11:57:14 +00:00

Owner

What changed

remove raw API-token and browser-token fallback from command dispatch
report legacy command credentials disabled regardless of stale environment
deploy the hub with migration mode off and require strict health in rollback checks
unset the old-hub bootstrap token before cleanup so post-restart commands must use scoped minting

Production prerequisite

Compatibility-mode deployment run 1288 succeeded, a direct scoped dispatch completed, and managed capture run 3eda2b77-759a-407a-b90d-5f4cdf58edc1 completed with exit code 0 and advanced the 35-artifact last-good generation.

Verification

cd agent && go test ./...
public-feed deployment workflow test: 6 passed
Bash syntax, Prettier, and workflow YAML checks
compatibility-enable scan: none

## What changed - remove raw API-token and browser-token fallback from command dispatch - report legacy command credentials disabled regardless of stale environment - deploy the hub with migration mode off and require strict health in rollback checks - unset the old-hub bootstrap token before cleanup so post-restart commands must use scoped minting ## Production prerequisite Compatibility-mode deployment run 1288 succeeded, a direct scoped dispatch completed, and managed capture run `3eda2b77-759a-407a-b90d-5f4cdf58edc1` completed with exit code 0 and advanced the 35-artifact last-good generation. ## Verification - `cd agent && go test ./...` - public-feed deployment workflow test: 6 passed - Bash syntax, Prettier, and workflow YAML checks - compatibility-enable scan: none

gmackie added the

forgegraph:public-update

label

2026-08-05 11:57:14 +00:00

gmackie added 1 commit

2026-08-05 11:57:14 +00:00