Commit graph

  • 12ce346d02 refactor(#2416): drop the now-always-none Spawned.sha field + deny tag leftover damocles 2026-07-15 20:58:37 +02:00
  • c2bd7db998 refactor(#2416): remove the non-pr config-change flow (request_apply_commit / applycommit) damocles 2026-07-15 20:45:29 +02:00
  • fbbd5d921c feat(#2485): remove vestigial Noop + StartupSweep residuals atlas 2026-07-15 20:44:49 +02:00
  • a73216e8be fix agent-logs unit dropdown mismatch, add other hive daemons iris 2026-07-15 20:30:23 +02:00
  • b87eac0a61 feat(#2484): unify in-DAG growth on append_subgraph (drop append_node) atlas 2026-07-15 20:21:39 +02:00
  • 6c4ef5f798 refactor(#2427): extract shared hive-CA trust bind-mount helper atlas 2026-07-15 20:06:43 +02:00
  • edf9fd036e feat(#2453): remove DAG parent_id now that every op is one DAG atlas 2026-07-15 19:50:04 +02:00
  • 2b3130f63c feat(#2476): grow the meta-update cascade in-DAG instead of child DAGs atlas 2026-07-15 18:56:40 +02:00
  • 31752d4089 fix(#2488): verify assignee change landed instead of trusting forge 200 damocles 2026-07-15 18:41:26 +02:00
  • 001b1dae37 feat(#2479): add from/until event-id cursors to read_room damocles 2026-07-15 18:26:31 +02:00
  • d90504b427 fix(#2417): accept forgejo's 'synchronized' pr-update webhook action damocles 2026-07-15 18:33:09 +02:00
  • 4545dd312e feat(#2450): collapse the startup sweep into one inline DAG atlas 2026-07-15 17:29:23 +02:00
  • b6defdeaaf feat(#2450): append_subgraph primitive + sweep MetaLock grows rebuilds in-DAG atlas 2026-07-15 01:11:01 +02:00
  • 44286996ed fix(#2465): split node chain on deps graph, not agent field iris 2026-07-15 17:33:08 +02:00
  • 45cdd62116 fix(#2465): render multi-agent DAG nodes as per-agent subgraph lines iris 2026-07-15 01:18:15 +02:00
  • 0d40583991 feat(#2482): bootstrap cross-signing so agent matrix devices show verified damocles 2026-07-15 18:12:13 +02:00
  • 1961afd9cc feat(#2471): post failing config deploy build log to the config pr damocles 2026-07-15 17:50:38 +02:00
  • 152d54dcdc fix(#2469): supersede stale config-PR approval on PR update instead of skipping damocles 2026-07-15 17:31:19 +02:00
  • d8567fc546 add graceful checkbox to restart confirm dialog iris 2026-07-15 17:44:57 +02:00
  • 207b66e35d feat(#2470): capture config-approval eval/deploy nix runs in build logs damocles 2026-07-15 17:43:24 +02:00
  • 741852a8b4 fix(#2468,#2473): matrix read_room exposes in_reply_to + gates UTD sentinel on encryption damocles 2026-07-15 15:55:30 +02:00
  • 3f1643c594 refactor(#2464): rename hive-ag3nt crate to hive-agent, collapse lib into main damocles 2026-07-15 01:18:22 +02:00
  • 7b54e7aa50 refactor(#2352): subvolume snapshot ops via daemon wire commands damocles 2026-07-15 00:33:57 +02:00
  • 860484a193 refactor(#2439): build hive-wide stop/start/restart DAGs dynamically atlas 2026-07-14 23:34:56 +02:00
  • 3797177e7f refactor(#2352): quota show via daemon wire command damocles 2026-07-14 23:58:55 +02:00
  • e7f8254788 refactor(#2455): split hive-agent-mcp into its own bin crate damocles 2026-07-14 23:45:33 +02:00
  • 59dd3a0aa7 refactor(#2456): split hive-agent-wake into its own bin crate damocles 2026-07-14 23:26:06 +02:00
  • c8bd0f7180 test+docs(#2448): multi-agent restart test + doc shapes atlas 2026-07-14 23:00:21 +02:00
  • 1739716fa2 feat(#2448): emit one multi-agent DAG for hivectl restart / restart-all atlas 2026-07-14 23:00:10 +02:00
  • 53d4f5ca32 refactor(#2352): quota enable/limit via daemon wire commands damocles 2026-07-14 23:00:34 +02:00
  • 9a39a54820 refactor(#2449): dashboard + docs for the SetWanted node atlas 2026-07-14 22:29:09 +02:00
  • 5fe8008cce refactor(#2449): write power intent via a SetWanted DAG node, not a pre-submit side effect atlas 2026-07-14 22:28:59 +02:00
  • 6c654921a0 refactor(#2352): route hivectl github set-token through a daemon wire command damocles 2026-07-14 22:17:09 +02:00
  • 756e850681 fix(#2352): allow too_many_lines on the HostRequest dispatch router damocles 2026-07-14 22:00:15 +02:00
  • a3c916813b refactor(#2352): route hivectl forge create-user through a daemon wire command damocles 2026-07-14 21:51:15 +02:00
  • de69a9f02c refactor(#2441): live-log header shows the streaming node's agent, not the DAG's atlas 2026-07-14 21:56:02 +02:00
  • e2b48d2014 refactor(#2441): update queue consumers + docs for agent-per-node atlas 2026-07-14 21:42:37 +02:00
  • 2a59f2f5fc refactor(#2441): move agent field from DAG onto Node; drop dedup atlas 2026-07-14 21:42:26 +02:00
  • 91607f3896 refactor(#2442): split harness-state persistence out of events.rs damocles 2026-07-14 21:15:37 +02:00
  • bf657177d3 fix(#2438): link config approval commit by full sha, not abbreviated damocles 2026-07-14 20:42:55 +02:00
  • 407965b6e1 fix(#2398): correct stale doc on handle_restart_scoped atlas 2026-07-14 20:26:59 +02:00
  • 901ab6a779 fix(#2398): graceful restart as one atomic DAG, not compose-and-await atlas 2026-07-14 20:21:06 +02:00
  • 4cfa040154 feat(#2398): dagify hivectl restart (RestartScoped) atlas 2026-07-14 19:57:50 +02:00
  • 5853ce2c8d fix(#2417): hardcode external,gateway in forgejo webhook allowlist, drop option damocles 2026-07-14 20:26:02 +02:00
  • 60e4ea8bb8 fix(#2417): keep 'external' in webhook allow-list so public webhooks still deliver damocles 2026-07-14 20:19:49 +02:00
  • 00c9a15ae6 fix(#2417): make webhook allow-list additive via forge.webhookAllowedHosts option damocles 2026-07-14 20:16:12 +02:00
  • cada704856 fix(#2417): allow gateway host in forgejo webhook ssrf list so config-pr webhook delivers damocles 2026-07-14 20:07:27 +02:00
  • e0461e1af6 refactor(#2431): extract hive-priv-sock crate from hive-sh4re atlas 2026-07-14 19:52:12 +02:00
  • ffde085c35 fix(#2433): mkforce container@hive-ci timeoutstartsec to resolve nixpkgs conflict damocles 2026-07-14 19:36:58 +02:00
  • 46bdb78466 hive-forge: validate --forge <label> charset up front iris 2026-07-14 19:37:20 +02:00
  • 8e58793f79 hive-forge: add -f/--forge <label> selector for external forge accounts iris 2026-07-14 19:31:08 +02:00
  • 60a253a2f6 fix(#1763): address argus review on PR #2430 atlas 2026-07-14 19:16:49 +02:00
  • 90af0edab0 feat(#1763): local-file half of btrfs send/receive migration transport atlas 2026-07-14 19:09:44 +02:00
  • f5c8a6a8db fix(#2426): bash wake gives status + read() pointer, not inline stdout/stderr damocles 2026-07-14 19:01:30 +02:00
  • 5869f34390 dashboard: fix stale nix/modules path in extra_forges.rs doc comment iris 2026-07-14 18:54:13 +02:00
  • 2c079afd65 fix(#2391): drop "." entirely from credential/snapshot name charset atlas 2026-07-14 18:46:54 +02:00
  • 720ac81235 fix(#2391): reject ".." in credential/snapshot names (path-traversal hardening) atlas 2026-07-14 18:42:17 +02:00
  • 8f8076b8ed fix(#2391): mandatory hive- prefixed snapshot label, nest subvol snapshot create/delete atlas 2026-07-14 18:26:12 +02:00
  • 7799e0762a feat(#2391): btrfs SnapshotAgentSubvolume/DeleteAgentSnapshot priv ops atlas 2026-07-14 17:52:08 +02:00
  • 0bfe47458c fix(#2401): mirror config-pr deploy tag to forge via push_config damocles 2026-07-14 18:38:42 +02:00
  • 15e56986ad fix(#2417): trust hive ca in forge container for self-signed webhook delivery damocles 2026-07-14 18:17:16 +02:00
  • ec24b96022 forge: drop stale TOKEN_SCOPES/extra.rs cross-reference iris 2026-07-14 18:21:35 +02:00
  • dbf880ac66 extra-forges: fully dashboard-provisioned, no host config iris 2026-07-14 18:11:47 +02:00
  • f025f32ccb fix(#2417): cancel stale config-pr approvals when the pr is no longer open damocles 2026-07-14 18:10:43 +02:00
  • 2bf6290aa0 fix(#2410): bump container@hive-ci TimeoutStartSec to survive slow runner registration atlas 2026-07-13 17:44:44 +02:00
  • 0d416df1e8 fix: shared-netns infra containers must not run their own firewall müde 2026-07-14 00:08:33 +02:00
  • d97659c06a docs: add the network topology map to network.md müde 2026-07-13 23:58:54 +02:00
  • 68afbb01f7 fix: per-key mkDefault for hyperhive.packages so single-key overrides merge müde 2026-07-13 22:48:55 +02:00
  • eba3f206ab docs: reflect the new nix layout and removed options müde 2026-07-13 22:23:20 +02:00
  • 79fec131d6 docs: sweep archaeology comments to present state müde 2026-07-13 22:16:02 +02:00
  • e0cfed7fe8 refactor: jq for tea-login, build-time avatar png, shared leaf-sign script müde 2026-07-13 22:14:25 +02:00
  • 935e967718 feat: hive DNS always follows the host resolver müde 2026-07-13 22:08:55 +02:00
  • 4a48ce5024 refactor: nix/host-modules + nix/agent-modules layout, update doc paths müde 2026-07-13 22:05:49 +02:00
  • cb755b677c refactor: hive-forge module dir owns its theme css müde 2026-07-13 22:02:15 +02:00
  • 7c9d72b9ca refactor: rename templates to agent.nix/ruth.nix, sweep stale name refs müde 2026-07-13 22:01:24 +02:00
  • 7ad2bb9211 refactor: replace deprecated no-op options with mkRemovedOptionModule müde 2026-07-13 21:58:30 +02:00
  • 43bbd64f82 refactor: drop dead http-only TLS branches (gateway is always https) müde 2026-07-13 21:54:30 +02:00
  • 874a900bdc refactor: split c0re module into options/theme/environment, hive-priv standalone müde 2026-07-13 21:50:32 +02:00
  • 281667d5a8 refactor: thread agent packages via option, drop overlay and forge-tools shim müde 2026-07-13 21:43:26 +02:00
  • e7689a6804 refactor: split hive-c0re module, aggregate host stack in nix/modules müde 2026-07-13 21:37:47 +02:00
  • 5f9af9fc97 refactor: split hive-gateway into module dir, DHCP range into hive-network müde 2026-07-13 21:26:30 +02:00
  • ecaad48fad refactor: split harness-base.nix into harness/ feature modules müde 2026-07-13 21:16:29 +02:00
  • c0bd77b314 fix: select rust sources via filesets so new dirs keep the cargo cache müde 2026-07-13 21:16:29 +02:00
  • 3069c11c3d refactor: build workspace once, extract per-bin packages müde 2026-07-13 21:05:12 +02:00
  • 4f8bb6ded2 refactor: slim flake.nix into nix/ entry files müde 2026-07-13 20:55:43 +02:00
  • 6339a2384b fix(#2412): ci-log prefers persisted (complete) log over live streamer snapshot atlas 2026-07-13 18:17:10 +02:00
  • 650224c9c6 fix(#2399): split daemon/harness/MCP bins into per-binary packages atlas 2026-07-13 17:42:37 +02:00
  • 5c08abc1b2 fix(#2399): agent containers get daemonBins, not the full hivectl/hive-forge bundle atlas 2026-07-13 17:32:29 +02:00
  • 9674fd42ac refactor(#2352): move matrix provisioning behind host-socket wire commands damocles 2026-07-12 03:02:38 +02:00
  • 5857f1f871 feat(#2008): rebuild running agents first in the startup sweep damocles 2026-07-13 17:13:11 +02:00
  • 9aae3f9e1d docs(#2273): tell agents reading a forge thread marks its notification read damocles 2026-07-13 18:20:06 +02:00
  • 5e489b0880 docs(#2270): soften take_wake_suppressed one-shot claim per argus review atlas 2026-07-13 16:22:13 +02:00
  • 01cba3c665 fix(#2270): suppress bash-task completion wake already observed via status atlas 2026-07-13 16:14:35 +02:00
  • 4be2279485 chore(#2400): skip the prebuild warm-build when the container is down damocles 2026-07-13 16:12:40 +02:00
  • 436adf6fd0 refactor(#2390): split provision out of the create node in the spawn dag damocles 2026-07-13 16:04:08 +02:00
  • 96c748475e refactor(#2352): re-home host-control wire types into hive-host-sock crate damocles 2026-07-11 16:37:05 +02:00
  • e13a2cb33a fix(#2363): open UDP 67 on the bridge — host firewall dropped DHCP requests müde 2026-07-13 15:24:56 +02:00
  • 2cdd5f334e nix flake update müde 2026-07-13 13:58:53 +02:00
  • 3a3f318779 fix(#2363): grant hive-gateway CAP_NET_ADMIN — dnsmasq DHCP mode requires it müde 2026-07-13 13:57:37 +02:00
  • 2f8c1ec347 docs(#2363): update network.md + hive-ci.nix for full-DHCP model atlas 2026-07-13 11:52:40 +02:00