Watch
0
0
Fork
You've already forked hyperhive
0

Commit graph

  • f85db2b773 hive-forge: fix displaced run() doc comment, make the --ignore test pin behaviour not a string damocles 2026-10-09 12:03:58 +02:00
  • 31c7623a69 hive-forge: regenerate forge-cli.md, pin --ignore refusal with a test damocles 2026-10-09 11:56:21 +02:00
  • 902c1ae574 hive-forge: subscription --ignore refuses instead of silently watching (#5052) damocles 2026-10-09 11:41:50 +02:00
  • 4e6c3b4a2f hive-forge: pr create --draft: extract draft_warning so the warning decision is tested atlas 2026-10-09 12:05:35 +02:00
  • 4d164819b3 hive-forge: drop the subscription --ignore change (covered by #5053) atlas 2026-10-09 11:51:25 +02:00
  • 6e32b432ec hive-forge: subscription --ignore errors instead of subscribing; warn on --draft; always print agit PR URL atlas 2026-10-09 11:43:21 +02:00
  • 0e5c61d12c hive-forge: page past the forge's 50-row clamp; show list --json truncation atlas 2026-10-09 11:44:03 +02:00
  • 52f589780f agent: order bao/github/forge-accounts logins after the isolated-DNS rewrite atlas 2026-10-09 10:34:33 +02:00
  • 252b893bbb module-eval: agent-user test asserts the heal_own_dir form atlas 2026-10-09 10:39:43 +02:00
  • 6e1d72bfdb user.nix: log failed ownership heals of the agent's own dirs atlas 2026-10-09 09:56:38 +02:00
  • 6bb13f964d hive-c0re: validate forge env at startup; char-safe short revs atlas 2026-10-09 10:10:24 +02:00
  • 9b711d5ffa hive-forge: mirror actions/upload-artifact alongside actions/checkout atlas 2026-10-09 09:54:40 +02:00
  • b874d21cda hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create atlas 2026-10-09 09:48:03 +02:00
  • f53ccb2740 hive-c0re: stop silently dropping errors on credential/marker writes atlas 2026-10-09 09:47:54 +02:00
  • 54226e027d swarm-bao: build the granter policy units from one helper atlas 2026-10-09 09:37:03 +02:00
  • 4fa1cee620 nix flake update flake-bot 2026-10-09 05:00:55 +02:00
  • 8053462e2a tool_groups: add test for the case-insensitive is_known match damocles 2026-10-08 01:01:15 +02:00
  • 67fd164dfc tool_groups: match names case-insensitively, like capabilities::is_known damocles 2026-10-08 00:49:17 +02:00
  • 1d120289d1 hive-c0re: extract read_from so the prune_unknown test exercises the real wiring damocles 2026-10-08 00:41:29 +02:00
  • e24259dde1 hive-c0re: add prune_unknown table tests + read() coverage, mirroring capabilities.rs damocles 2026-10-08 00:32:23 +02:00
  • 06951ddc30 hive-c0re: drop unrecognised tool-group names on read, matching capabilities' prune_unknown damocles 2026-10-08 00:07:03 +02:00
  • 597fdebaf3 swarm-bao-forge-publisher starts on the deploy that adds it atlas 2026-10-08 13:58:11 +02:00
  • 2d2d7529fc swarm-bao-forge-publisher re-runs on container start and token writes atlas 2026-10-08 13:45:56 +02:00
  • c45f7a5330 swarm-controller gains forge access when the token arrives, without a restart atlas 2026-10-08 13:40:24 +02:00
  • 121c4678aa swarm-controller reads its forge token from the store, not a host file atlas 2026-10-08 13:23:17 +02:00
  • c433bdef92 hive-runtime: log the acp permission decision at the point it is made damocles 2026-10-08 08:33:27 +02:00
  • 90c7600c8a nix flake update flake-bot 2026-10-08 05:00:37 +02:00
  • d071c8df00 hive-subagent-mcp: cover the non-goal interrupted-turn case for #4337 damocles 2026-10-08 04:05:05 +02:00
  • 04a8e2b328 hive-subagent-mcp: write the fake-claude test script via write_executable damocles 2026-10-08 02:01:04 +02:00
  • 70644cb004 hive-c0re: widen nix stderr predicate to cover error:/evaluation warning:, add tests damocles 2026-10-08 00:15:38 +02:00
  • 25893d0f95 hive-c0re, hive-priv: demote three routine, non-actionable log sites damocles 2026-10-07 23:50:36 +02:00
  • 77034a7c9c hive-matrix-mcp: fix matrix.nix comment to match the current diff damocles 2026-10-08 00:07:33 +02:00
  • 7eb338a8c1 hive-matrix-mcp: drop the main.rs fallback edit, keep only the nix RUST_LOG change damocles 2026-10-07 23:56:46 +02:00
  • a28163a008 hive-matrix-mcp: demote backup-key WARN where it actually runs, not just the fallback damocles 2026-10-07 23:48:16 +02:00
  • 2835c08cb0 hive-matrix-mcp: demote matrix-sdk-crypto's benign backup-key WARN by default damocles 2026-10-07 23:37:12 +02:00
  • 8a7aacec13 swarm-grafana: drop stale windows from the subscription usage line, match sibling panel interval iris 2026-10-07 23:54:53 +02:00
  • 5b8d1dd54d swarm-grafana: add a subscription usage line to the claude usage dashboard iris 2026-10-07 23:51:40 +02:00
  • e1df50ee07 hive-forge-notify: fix assigned-issues poll hitting the wrong search path damocles 2026-10-07 23:21:58 +02:00
  • 1ca758daa7 swarm-controller grants internal/docs read to agents; hives stop doing it atlas 2026-10-07 21:02:45 +02:00
  • 4e7142ae53 swarm-controller: refuse new agents named hive-<anything> atlas 2026-10-07 21:05:21 +02:00
  • 21e3f626f4 hives read the forge through their own swarm-minted read account atlas 2026-10-07 20:10:41 +02:00
  • c8472966e9 hive-c0re: drop the remaining "mirror" wording for the removed push atlas 2026-10-07 20:04:07 +02:00
  • 456a4511ab hive-c0re: stop mirroring deploy tags to the forge (drop push_config) atlas 2026-10-07 19:40:16 +02:00
  • c1672218b1 hive-bash-daemon: keep sibling tasks alive when one is OOM-killed atlas 2026-10-07 18:18:15 +02:00
  • 1b061fc9d5 swarm-nats-auth: take the subscribe subjects from the shared definitions atlas 2026-10-07 16:51:53 +02:00
  • d0c2b85d45 swarm-nats-auth: limit hive and swarm-controller subscribe to the subjects they use atlas 2026-10-07 16:05:36 +02:00
  • 22ce8b815a hive-subagent-mcp: a refused continue leaves the session's records alone atlas 2026-10-07 12:20:26 +02:00
  • 0e015197b6 hive-subagent-mcp: refuse a continue whose session is not in the dir searched atlas 2026-10-07 11:55:34 +02:00
  • d03f10822c hive-subagent-mcp: say so when a resume falls back to the bare name atlas 2026-10-06 15:33:20 +02:00
  • 8f2069486d hive-subagent-mcp: resume a subagent by session id, not by name atlas 2026-10-06 14:59:17 +02:00
  • 40687ab4a5 swarm-nats-auth: a failed re-read no longer logs that the stored secret was refused atlas 2026-10-06 16:01:53 +02:00
  • f83030281e nats-callout-removed: remove the container's OIDC secret copy here, ungated atlas 2026-10-06 15:25:29 +02:00
  • 32e28e6096 swarm-nats-auth: bound the OIDC secret re-read, and test the 401 that starts it atlas 2026-10-06 15:25:29 +02:00
  • 6646329da5 swarm-nats-auth: read its own OIDC client secret from the store atlas 2026-10-06 13:43:14 +02:00
  • a66670be87 hive-tls: the root fetch presents the hive identity, as on main atlas 2026-10-06 13:32:55 +02:00
  • 6a9c819136 hive-tls: a gateway host without the services-issuer pair evaluates and goes red at runtime atlas 2026-10-06 11:53:17 +02:00
  • 5761398d60 hive-tls: the gateway leaf uses the services-issuer identity, not a hive's atlas 2026-10-06 09:48:16 +02:00
  • c3ef18ad09 module-eval: assert every removed callout option fails in both namespaces atlas 2026-10-06 11:58:25 +02:00
  • c10cc0e018 swarm-nats: take the callout issuer and user keys from the store atlas 2026-10-06 11:46:28 +02:00
  • 66ac034949 swarm-bao: grant the queue responder the callout issuer and user keys' leaves atlas 2026-10-06 11:46:28 +02:00
  • 8a4bb97377 swarm-nats-auth: read the callout issuer and user seeds from the store atlas 2026-10-06 10:13:34 +02:00
  • 1b18f6dcbd swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's atlas 2026-10-06 12:04:48 +02:00
  • 3c79c5eb5d swarm-nats: the auth responder's store identity path is its own, not the hive's atlas 2026-10-06 09:52:26 +02:00
  • 95b28268ba nix flake update flake-bot 2026-10-06 09:36:21 +02:00
  • 9184df555b swarm-nats-auth: module doc says an unsealed request gets no reply atlas 2026-10-05 22:49:31 +02:00
  • 923554cd62 swarm-nats-auth: refuse an auth request the server did not seal atlas 2026-10-05 22:46:52 +02:00
  • 1ac34a4ad6 docs: callout xkey needs the store at every responder start; split-host order; replacing it atlas 2026-10-05 22:13:59 +02:00
  • 6c4a459773 swarm-nats: test that the server's rendered config carries the callout xkey atlas 2026-10-05 22:13:59 +02:00
  • 531d44d34b swarm-bao: deny the secret publisher the callout xkey's seed atlas 2026-10-05 22:13:58 +02:00
  • 06784e55fa swarm-bao: drop the default-policy grant; swarm/public/ is read by name atlas 2026-10-05 22:13:58 +02:00
  • 52c931c3a7 swarm-nats: require the responder's store identity, and drop its no-store mode atlas 2026-10-05 22:13:58 +02:00
  • 9a241a1df1 swarm-nats: fetch the callout xkey before the server starts and seal callout traffic atlas 2026-10-05 21:25:40 +02:00
  • bb571285fd swarm-bao: the responder may create the callout xkey; every token reads swarm/public/ atlas 2026-10-05 21:25:40 +02:00
  • 1e0b10bb7d swarm-nats-auth: open sealed callout requests and seal the replies atlas 2026-10-05 21:25:40 +02:00
  • 4a289c62e7 docs/scheduler/ci: say it in the active voice where the forwarded enable is refused atlas 2026-10-05 21:52:22 +02:00
  • 65505f5235 deploy: forward swarm.forge.ci to deploy.ci-runner, say what the forwarded enable needs atlas 2026-10-05 21:36:11 +02:00
  • b114c6b165 deploy: rename the old forgejo.ci options to ci-runner instead of removing them atlas 2026-10-05 21:31:38 +02:00
  • b6f5cb0479 swarm CA: say when tmpfiles deletes the old CA files atlas 2026-10-05 20:47:24 +02:00
  • 626790a464 hive CA: catch a deleted CA file however its path is spelled atlas 2026-10-05 20:47:24 +02:00
  • 1a4dc16053 hive TLS: reload the trust bundle's unit on a switch, name the missing root when it's empty atlas 2026-10-05 20:47:20 +02:00
  • cf7d357f17 swarm CA: describe the store's pki root as the only anchor in docs and comments atlas 2026-10-05 20:24:12 +02:00
  • 15f7d4d0cf hive TLS: re-issue a services leaf that does not chain to the store's root, delete the hive CA's leftovers atlas 2026-10-05 20:24:12 +02:00
  • 4e5a642928 hive CA: delete ca.pem, ca-previous.pem and ca-key.pem, the bundle is the store's root atlas 2026-10-05 19:54:55 +02:00
  • 93f1a76ea7 swarm CA: retire the host-held root CA, the store holds the only anchor atlas 2026-10-05 19:37:35 +02:00
  • 5d6ebda3e8 swarm-otel: name the port-collision assertion instead of pointing below atlas 2026-10-05 19:22:55 +02:00
  • dc5c2d8d83 nix: follow-ups from the service/deploy split atlas 2026-10-05 19:12:46 +02:00
  • 960cf9ce30 container stats: bound hive-c0re's wait for the disk measurement, no total for an agent with no paths atlas 2026-10-05 16:33:11 +02:00
  • 98ccc31e2b container stats: measure agent disk usage through hive-priv, unknown on failure atlas 2026-10-05 16:12:33 +02:00
  • 8ffceea8e3 swarm-ci-runner: load the registration token in a register unit of its own atlas 2026-10-05 16:33:24 +02:00
  • 0302b29ca4 swarm-ci-runner: give the registration token only to the register step atlas 2026-10-05 16:06:19 +02:00
  • 84347f122c forgejo: actionsFromSelf defaults to whether this host runs the swarm-controller atlas 2026-10-05 12:54:03 +02:00
  • 80bc92fb49 forgejo: actionsFromSelf defaults to true atlas 2026-10-05 12:44:42 +02:00
  • e2da5509ae swarm-ci-runner: run the forge CI runner as a swarm service atlas 2026-10-05 02:25:05 +02:00
  • 3d43e9588c agents: shorten bind_child_agent_dirs doc under the comment-block limit atlas 2026-10-05 13:24:36 +02:00
  • d2ea50031e agents: work/ in the disk-metric docs, holder never sees work/, chown guard comment atlas 2026-10-05 13:23:39 +02:00
  • 6ff348d88b agents: define the work dir name once and test its creation atlas 2026-10-05 13:10:18 +02:00
  • 8e0597d41d agents: chown work/ recursively only on owner mismatch atlas 2026-10-05 13:01:14 +02:00
  • 89a5d65119 agents: persistent /agents/<n>/work dir outside state/ atlas 2026-10-05 12:56:02 +02:00
  • 962c1548eb swarm-controller: revoke matrix admin from former operators atlas 2026-10-05 10:27:57 +02:00
  • 40d6f30834 nix: leave unit-script comments untouched outside swarm-bao-pki atlas 2026-10-05 08:35:43 +02:00