mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-22 03:04:03 +00:00
rcourtman
667cb086b0
The desired side of the /api/connections command-policy comparison is contractually the effective config served to the agent after token scope and binding checks, but a host whose recorded TokenID no longer resolved to a live API token skipped sanitization entirely and kept the raw profile desire. A stale binding, typical after a token was revoked and the agent reinstalled, then presented as Command policy mismatch even though the served runtime config could never enable commands and the operator had nothing to fix (seen on issue #1564). When API tokens exist and the host's token cannot be resolved, desired command policy now fails closed to disabled. The contract delta also records the install-token mint semantics that landed with the Add Pulse Agent scope fix, closing the deferred agent-lifecycle delta noted on that commit's contract-neutral trailer. Contract-Neutral: fail-closed bugfix bringing the connections command-policy view into conformance with the existing agent-lifecycle contract clause; the staged agent-lifecycle delta records the semantics, api-contracts/storage-recovery have no real delta