docs: add infra_admin capability to tables; fix get_agent_meta matrix_accounts in turn-loop

This commit is contained in:
iris 2026-07-02 15:10:21 +02:00 committed by mara
commit 9727cee9bd
3 changed files with 6 additions and 1 deletions

View file

@ -311,6 +311,7 @@ The current capabilities are:
| `manage_root_agent` | allows the `set_status` / lifecycle tools on the root agent |
| `read_host_journal` | unlocks `get_host_journal` to read journald from inside a container |
| `query_agent_state` | allows `get_loose_ends(agent: "<name>")` calls targeting other agents |
| `infra_admin` | allows `restart` on hive infrastructure containers (`hive-ci`, `hive-gateway`, `hive-forge`); each restart is logged to the AUDIT trail |
Each row is one agent. Columns are the capability names returned by
`GET /api/capabilities` as `caps: Vec<String>`. Checking or unchecking