Conversation
Add ResourceResult/ProvisionResult structs so callers can inspect execution statistics and per-resource outcomes. Agent callback now serializes the full result into the JSON payload.
Support tar.gz/tgz, tar.xz/txz, and plain tar formats with glob-based file mapping, strip_components, permission attributes, symlink handling, and marker-based idempotency.
Add --client-cert and --client-key parameters for mutual TLS authentication. Certificates are sent to WebSocket, poll, and callback connections when the callback origin matches the endpoint origin (scheme+host+port).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
--client-cert/--client-keyfor mutual TLS authentication (Cloudflare API Shield compatible)--paramsJSON or agent task payloadbuild_optionswas not exported, user-agent always reported 0.1.0Commits
feat(agent): Add agent command with WebSocket and watch polling modesfeat(agent): Replace SSE with WebSocket connection modefeat(agent): Add mTLS client certificate support with origin-based callback detectionfeat(resource): Add extract resource for archive extractionfeat(resource): Add mount resource for Linux filesystem mountsfeat(resource): Capture output in ApplyResult for execute and file resourcesfeat(provision): Return structured ProvisionResult from run()feat(provision): Add data_bag support for parameter injectionfix(provision): Remove 4KB buffer limit in data_bag params injectionfix(provision): Show log file path on failurefix(agent): Add retry for callback POST requestsfix(agent): Mask password in URL log outputfix: Expose build_options so user-agent reports correct versionTest plan
zig buildandzig build testpass on macOSzig build -Dtarget=x86_64-linux-gnupasses