atlas
0d619e215e
agents: read the memory cap at boot, not from the build ...
An agent's memory cap was rendered into its flake (`memoryMaxBytes` →
`services.hyperhive.agent.claudeMemoryMaxBytes`), so the closure depended
on it and a changed cap reached the JSC heap ceiling and the subagent
`MemoryHigh=` only after a rebuild.
hive-c0re now writes the effective `MemoryMax=` in bytes to the agent's
runtime dir (`/run/hive/memory-max-bytes` inside) in `write_dropins`,
from the same value the drop-in gets. The file is removed for
`infinity` or a RAM percentage, and left alone when the drop-in is kept.
Inside the container, `nix/agent-modules/memory-cap.nix` reads it at
boot: an environment generator sets `BUN_JSC_forceRAMSize` (75%) for
every unit and `machinectl shell`, `/etc/set-environment` exports it in
login shells, and a unit generator writes `MemoryHigh=` (2/3) as a
drop-in for `hive-subagent-daemon`.
The render drops `memoryMaxBytes`, the agent option is removed (both
spellings fail eval with a removal message), and
`effective_memory_bytes_from` goes with its only caller.
Part of #5081 (slice S0-2).
2026-10-12 10:59:11 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: accept the agent's live bao pair as a store path
2026-10-11 10:00:43 +02:00
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
matrix: drop the per-hive appservice and its unused token
2026-10-05 07:48:17 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
forge: fetch the OIDC client secret from bao instead of a host-side copy
2026-10-10 14:07:31 +02:00
nix: the hive's leaf does not read every secret in the store
2026-10-12 01:37:46 +02:00
nix: finish the current-behaviour comment sweep in touched files
2026-10-05 09:58:57 +02:00
swarmctl: log in with the operator's own SSO account and reach the controller through the swarm domain
2026-10-12 01:25:58 +02:00
forge: fetch the OIDC client secret from bao instead of a host-side copy
2026-10-10 14:07:31 +02:00
agents: remove send(operator) and the operator inbox; alert on turn failures
2026-10-12 08:50:06 +02:00
module-eval/hive-otel: pin the fetch reviving a start-limited collector
2026-10-10 01:22:32 +02:00
hive-tls: the root fetch presents the hive identity, as on main
2026-10-06 14:54:07 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
hive telemetry collector: fetch its OIDC secret from the store under the hive's own leaf
2026-10-10 01:10:31 +02:00
module-eval/nats-tls: evaluate the no-URL leaf fixture with hive-c0re on
2026-10-10 01:05:33 +02:00
swarm-secret-publish: drop RemainAfterExit so the path unit re-runs it
2026-10-10 14:08:43 +02:00
nix: follow-ups from the service/deploy split
2026-10-05 19:12:46 +02:00
hive-tls: a gateway host without the services-issuer pair evaluates and goes red at runtime
2026-10-06 14:54:07 +02:00
hive-forge: mirror actions/upload-artifact alongside actions/checkout
2026-10-09 10:40:28 +02:00
0d619e215e