remove the hive's local build of agent closures

A rebuild or create downloads the closure the swarm built and applies it; with none to deploy it fails and changes nothing. hive-priv takes a store path instead of an internal/meta commit and builds nothing.

hive-c0re/src/forge/internal_meta.rs

@@ -20,20 +20,13 @@ const CONFIG_BRANCH: &str = "main";
 /// [`MetaSource`] over the forge API.
 pub(crate) struct ForgeSource {
     api: Forgejo,
-    /// Whether the credential file nix's `git` reads holds this hive's token.
-    nix_credential: bool,
 }
 
-/// A source reading as this hive, or `None` when it holds no forge token. It
-/// also refreshes the credential file nix's `git` fetches with, which the
-/// build after this read needs to be current.
+/// A source reading as this hive, or `None` when it holds no forge token.
 pub(crate) async fn internal_meta_source() -> Option<ForgeSource> {
     let token: ReaderToken = super::reader_token().await?;
     match token.api() {
-        Ok(api) => Some(ForgeSource {
-            api,
-            nix_credential: token.publish_for_nix(),
-        }),
+        Ok(api) => Some(ForgeSource { api }),
         Err(e) => {
             tracing::warn!(error = ?e, "internal/meta: cannot build a forge client");
             None
@@ -72,10 +65,6 @@ impl ForgeSource {
 }
 
 impl MetaSource for ForgeSource {
-    fn nix_can_fetch(&self) -> bool {
-        self.nix_credential
-    }
-
     async fn meta_head(&self) -> anyhow::Result<Option<String>> {
         use anyhow::Context as _;
 
@@ -113,25 +102,3 @@ impl MetaSource for ForgeSource {
         self.branch_head(CONFIG_ORG, agent, CONFIG_BRANCH).await
     }
 }
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use forgejo_api::Auth;
-
-    fn source(nix_credential: bool) -> ForgeSource {
-        let url = url::Url::parse("http://forge.test").expect("url");
-        ForgeSource {
-            api: Forgejo::new(Auth::None, url).expect("client"),
-            nix_credential,
-        }
-    }
-
-    /// The control (`true`) shows the answer follows the field rather than
-    /// being a constant.
-    #[test]
-    fn nix_fetches_only_where_its_credential_was_published() {
-        assert!(source(true).nix_can_fetch());
-        assert!(!source(false).nix_can_fetch());
-    }
-}