f862354e43
An agent's capabilities move from the hive's meta repo
(`meta/capabilities.json`, injected as `HIVE_CAPABILITIES`) into the
`capabilities` field of its key in a new `agent-permissions` KV bucket,
which swarm-controller alone writes.
- swarm-queue-client: `agent_permissions` (bucket, key, `AgentPermissions`,
direct-get read, the import subject and its wire types).
- swarm-controller: creates the bucket at start; `GET|PUT|DELETE
/api/agents/{name}/permissions` (deny_unknown_fields and unknown
capability ⇒ 422, duplicate ⇒ 400, agent must be declared by a hive);
answers each hive's one-shot import, writing a key only where there is
none and only for agents that hive's wanted state declares.
- swarmctl: `agent permissions get|set|clear`.
- swarm-nats-auth: a hive reads every key of the bucket and sends its
import on its own subject; the controller subscribes to the imports and
may answer them (`responses`).
- hive-c0re: reads each of its agents' keys every 30s into
/var/lib/hyperhive/swarm-agent-permissions.json and restarts an agent,
gracefully, when its capabilities change. Unset is the compiled-in
default (ruth: manage_root_agent; everyone else: none). A failed read
keeps the stored value. On first boot it seeds that file from
meta/capabilities.json, sends the grants to the controller, and deletes
the file once the controller answers.
Deleted: the capabilities.json reader/writer, `HIVE_CAPABILITIES` in the
rendered meta flake, ruth's capability seed, the capabilities half of the
permissions rebuild job (`PermPayload::Capabilities`/`Combined`), the
dashboard's capabilities table and `capabilities_changed` event, and the
now-unused `Capability::description`.
Part of #5170.
240 lines
6 KiB
CSS
240 lines
6 KiB
CSS
/* ─── SYST3M/BU1LDS section panels — shared by dashboard and /core.html ───
|
||
Rebuild queue, meta inputs and kept-state panels.
|
||
Imported by core.css and dashboard.css. */
|
||
|
||
/* ─── meta inputs panel ────────────────────────────────────────────── */
|
||
.meta-inputs {
|
||
list-style: none;
|
||
padding: 0;
|
||
margin: 0 0 0.8em;
|
||
display: grid;
|
||
gap: 0.2em;
|
||
}
|
||
.meta-inputs li {
|
||
padding: 0.25em 0.6em;
|
||
border: 1px solid var(--border);
|
||
background: color-mix(in srgb, var(--bg-elev) 60%, transparent);
|
||
}
|
||
.meta-inputs label {
|
||
display: flex;
|
||
align-items: baseline;
|
||
gap: 0.5em;
|
||
cursor: pointer;
|
||
font-size: 0.9em;
|
||
}
|
||
.meta-input-name {
|
||
color: var(--amber);
|
||
font-weight: bold;
|
||
}
|
||
.meta-input-rev {
|
||
color: var(--muted);
|
||
}
|
||
.meta-input-ts {
|
||
color: var(--muted);
|
||
font-size: 0.85em;
|
||
}
|
||
.meta-input-url {
|
||
color: var(--muted);
|
||
font-size: 0.85em;
|
||
margin-left: auto;
|
||
overflow: hidden;
|
||
text-overflow: ellipsis;
|
||
white-space: nowrap;
|
||
}
|
||
.meta-inputs-bulk {
|
||
margin: 0 0 0.5em;
|
||
font-size: 0.8em;
|
||
color: var(--muted);
|
||
}
|
||
.meta-bulk-btn {
|
||
font: inherit;
|
||
font-size: 1em;
|
||
background: transparent;
|
||
border: 1px solid var(--purple-dim);
|
||
color: var(--cyan);
|
||
padding: 0.1em 0.6em;
|
||
margin-right: 0.2em;
|
||
cursor: pointer;
|
||
}
|
||
.meta-bulk-btn:hover {
|
||
border-color: var(--cyan);
|
||
text-shadow: 0 0 6px currentColor;
|
||
}
|
||
.meta-input-twig {
|
||
color: var(--purple-dim);
|
||
margin-right: 0.1em;
|
||
}
|
||
.btn-meta-update {
|
||
background: color-mix(in srgb, var(--purple) 12%, transparent);
|
||
border: 1px solid var(--purple);
|
||
color: var(--purple);
|
||
text-shadow: 0 0 4px currentColor;
|
||
padding: 0.3em 1em;
|
||
font: inherit;
|
||
font-size: 0.85em;
|
||
letter-spacing: 0.08em;
|
||
cursor: pointer;
|
||
transition:
|
||
box-shadow 0.15s ease,
|
||
background 0.15s ease;
|
||
}
|
||
.btn-meta-update:hover:not([disabled]) {
|
||
background: color-mix(in srgb, var(--purple) 22%, transparent);
|
||
box-shadow: 0 0 10px -2px currentColor;
|
||
}
|
||
.btn-meta-update[disabled] {
|
||
opacity: 0.35;
|
||
cursor: not-allowed;
|
||
}
|
||
.meta-update-running {
|
||
margin: 0 0 0.7em;
|
||
padding: 0.4em 0.7em;
|
||
border: 1px solid var(--purple);
|
||
background: color-mix(in srgb, var(--purple) 12%, transparent);
|
||
color: var(--purple);
|
||
font-size: 0.85em;
|
||
animation: badge-pulse 1.6s ease-in-out infinite;
|
||
}
|
||
|
||
/* ─── rebuild queue panel ──────────────────────────────────────────────── */
|
||
.rebuild-queue {
|
||
list-style: none;
|
||
padding: 0;
|
||
margin: 0;
|
||
display: grid;
|
||
gap: 0.2em;
|
||
}
|
||
.rebuild-queue-entry {
|
||
padding: 0.3em 0.6em;
|
||
border: 1px solid var(--border);
|
||
background: color-mix(in srgb, var(--bg-elev) 60%, transparent);
|
||
font-size: 0.9em;
|
||
display: flex;
|
||
flex-wrap: wrap;
|
||
align-items: baseline;
|
||
gap: 0.4em;
|
||
}
|
||
.rqe-kind {
|
||
color: var(--cyan);
|
||
}
|
||
.rqe-agent {
|
||
color: var(--amber);
|
||
font-weight: bold;
|
||
}
|
||
/* ─── running-rebuild live log (renderRebuildLiveLog in builds.js) ──────────
|
||
Streams the currently-running rebuild's build log inline under the queue.
|
||
Hidden (native `hidden` attr) when nothing is building. Used on the
|
||
dashboard's R3BU1LD QU3U3 tab. */
|
||
.rebuild-live-log {
|
||
margin-top: 0.8em;
|
||
border: 1px solid var(--purple-dim);
|
||
border-radius: 4px;
|
||
background: color-mix(in srgb, var(--crust) 70%, transparent);
|
||
}
|
||
.rebuild-live-log-header {
|
||
display: flex;
|
||
align-items: center;
|
||
gap: 0.4em;
|
||
padding: 0.4em 0.6em;
|
||
font-size: 0.85em;
|
||
border-bottom: 1px solid var(--border);
|
||
}
|
||
.rebuild-live-log-toggle {
|
||
background: transparent;
|
||
border: 0;
|
||
color: var(--muted);
|
||
cursor: pointer;
|
||
font-family: inherit;
|
||
font-size: 1em;
|
||
padding: 0 0.2em;
|
||
}
|
||
.rebuild-live-log-toggle:hover {
|
||
color: var(--fg);
|
||
}
|
||
.rebuild-live-log-title {
|
||
color: var(--muted);
|
||
}
|
||
.rebuild-live-log-raw {
|
||
margin-left: auto;
|
||
color: var(--purple);
|
||
text-decoration: none;
|
||
font-size: 0.9em;
|
||
}
|
||
.rebuild-live-log-raw:hover {
|
||
text-decoration: underline;
|
||
}
|
||
.rebuild-live-log-badge {
|
||
font-size: 0.75em;
|
||
font-weight: bold;
|
||
padding: 0.05em 0.5em;
|
||
border-radius: 999px;
|
||
letter-spacing: 0.05em;
|
||
}
|
||
.rebuild-live-log-badge.rll-running {
|
||
color: var(--amber);
|
||
background: color-mix(in srgb, var(--amber) 18%, transparent);
|
||
}
|
||
.rebuild-live-log-badge.rll-ok {
|
||
color: var(--green);
|
||
background: color-mix(in srgb, var(--green) 18%, transparent);
|
||
}
|
||
.rebuild-live-log-badge.rll-fail {
|
||
color: var(--red);
|
||
background: color-mix(in srgb, var(--red) 18%, transparent);
|
||
}
|
||
.rebuild-live-log-output {
|
||
margin: 0;
|
||
padding: 0.5em 0.7em;
|
||
max-height: 22em;
|
||
overflow-y: auto;
|
||
white-space: pre-wrap;
|
||
word-break: break-word;
|
||
font-family:
|
||
"JetBrains Mono", "Fira Code", "Cascadia Code", "Source Code Pro", monospace;
|
||
font-size: 0.8em;
|
||
line-height: 1.4;
|
||
color: var(--fg);
|
||
}
|
||
|
||
/* Remove the now-dead `.rqe-step` rule (the `step` sub-step label was
|
||
retired from the wire in `feat(job_queue): retire the now-off-wire step
|
||
sub-step label` — the rule has had no JS referents since then). */
|
||
|
||
/* ─── K3PT ST4T3 › stale permission entries sub-section ────────────────────
|
||
Agents with explicit tool-group entries in the JSON but no live
|
||
container (renamed or manually-deleted agents). Lazy-loaded on tab
|
||
activation, refreshed on tool_groups_changed. */
|
||
.tombstones-stale-heading {
|
||
margin: 1.2em 0 0.3em;
|
||
color: var(--muted);
|
||
font-size: 0.8em;
|
||
text-transform: uppercase;
|
||
letter-spacing: 0.08em;
|
||
border-top: 1px solid var(--border);
|
||
padding-top: 0.8em;
|
||
}
|
||
.tombstones-stale-list {
|
||
list-style: none;
|
||
padding: 0;
|
||
margin: 0;
|
||
display: grid;
|
||
gap: 0.3em;
|
||
}
|
||
.tombstones-stale-row {
|
||
display: flex;
|
||
align-items: center;
|
||
gap: 0.5em;
|
||
padding: 0.35em 0.6em;
|
||
border: 1px dashed var(--border);
|
||
background: color-mix(in srgb, var(--bg-elev) 35%, transparent);
|
||
}
|
||
.tombstones-stale-name {
|
||
color: var(--muted);
|
||
font-weight: bold;
|
||
font-size: 0.9em;
|
||
}
|
||
.tombstones-stale-err {
|
||
margin-top: 0.4em;
|
||
color: var(--red);
|
||
font-size: 0.85em;
|
||
}
|