From 790975ac8d9336493b11672833b36c45c43f807f Mon Sep 17 00:00:00 2001
From: atlas <atlas@hyperhive.local>
Date: Mon, 9 Nov 2026 10:42:43 +0100
Subject: [PATCH] fold needs-login gauge into a snapshot registrar, fix doc
 wording

---
 docs/4-implementation/scheduler/observability.md | 2 +-
 hive-c0re/src/stats/otel_metrics.rs              | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/docs/4-implementation/scheduler/observability.md b/docs/4-implementation/scheduler/observability.md
index 00ca137c2..e17998812 100644
--- a/docs/4-implementation/scheduler/observability.md
+++ b/docs/4-implementation/scheduler/observability.md
@@ -354,7 +354,7 @@ filters those series out and the host dashboard's top-10 panels group by
 | `hyperhive.container.cpu.percent`       | `%`  | gauge   | host-normalised percent (custom — no `rate()` needed)                                                                                                                                                                                                                                                                                                         |
 | `hyperhive.agent.unrestricted_internet` | `1`  | gauge   | the agent's `unrestricted_internet` flag in the swarm permissions this hive last read: `1` on, `0` off; a flag never set reads `1`. Omitted while the stored permissions file is unreadable                                                                                                                                                                   |
 | `hyperhive.agent.closure_pullable`      | `1`  | gauge   | `1` when this hive can fetch the agent's latest closure from the swarm's binary cache and verify its signature, else `0` with a `reason` label (`no-record`, `not-cached`, `no-credentials`, `fetch-failed`, `bad-signature`; see [the builder docs](../swarm/builder.md#what-hives-do-with-the-cache)). Omitted before the first probe pass, every 5 minutes |
-| `hyperhive.agent.needs_login`           | `1`  | gauge   | `1` when a running agent needs a claude login (the dashboard's needs-login flag), `0` when it is logged in. Omitted for a stopped agent and before the first container scan                                                                                                                                                                                   |
+| `hyperhive.agent.needs_login`           | `1`  | gauge   | `1` when a running agent needs a claude login (the dashboard's needs-login flag), `0` when it has a login. Omitted for a stopped agent and before the first container scan                                                                                                                                                                                    |
 
 The `hyperhive.`-prefixed metrics have no semconv equivalent (memory
 limit + peak, on-disk footprint, and an instantaneous cpu percent kept
diff --git a/hive-c0re/src/stats/otel_metrics.rs b/hive-c0re/src/stats/otel_metrics.rs
index a9dadd1ba..e19865248 100644
--- a/hive-c0re/src/stats/otel_metrics.rs
+++ b/hive-c0re/src/stats/otel_metrics.rs
@@ -258,11 +258,16 @@ fn register_instruments(provider: &SdkMeterProvider, snapshot: Arc<Mutex<Vec<Con
         })
         .build();
 
-    register_closure_pullable(&meter);
-    register_needs_login(&meter);
+    register_snapshot_gauges(&meter);
     register_hive_instruments(&meter);
 }
 
+/// The per-agent gauges that read hive-c0re state rather than a container sample.
+fn register_snapshot_gauges(meter: &opentelemetry::metrics::Meter) {
+    register_closure_pullable(meter);
+    register_needs_login(meter);
+}
+
 /// 1 when this hive can fetch the agent's latest closure from the swarm's
 /// cache and verify its signature, else 0 with the `reason` it cannot. Nothing
 /// is reported until the first probe pass has run.