Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/hive-agent/src
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 89013b5408 agent permissions: hold hive-c0re's stored grant until the agent's own read
Until its first successful read of its key, the harness read its
permissions as the default set, `execution` included. So did the
subagent daemon. An agent the operator had narrowed ran wider than
granted after every restart while the queue was unreachable, and in the
gap before the first 10 s poll. During the meta-repo import, every
non-ruth key is still unset, and the agent read that as the default too,
for as long as the import stayed pending.

mara picked option (a) on #5293: "a, removal of the old path as a follow
up in 1w".

hive-c0re now writes each agent's entry from
swarm-agent-permissions.json into the agent's runtime dir as
swarm-permissions.json (/run/hive in the container), together with
whether the import is still pending. It writes the file at every start
(write_dropins) and after every 30 s pass of the permissions worker. The
harness and the subagent daemon hold that stored list until their own
first read succeeds. While the import is pending, an unset key keeps
the stored list rather than reverting it to the default. A queue that
is down never blocks a start: the agent runs on the stored grant.

The decision lives in swarm_queue_client::agent_permissions::HiveCopy,
shared by both readers.

Part of #5170.
2026-10-15 18:01:40 +02:00
..
web_ui dashboard: the SW4RM tab is the agents tab 2026-10-15 09:50:49 +02:00
boot_announce.rs hive-agent: only wake the boot-announce todo when it actually changed 2026-10-04 19:16:59 +02:00
claude_credentials.rs swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up 2026-10-15 13:26:29 +02:00
claude_md_watch.rs hive-agent: warn + emit an OTEL gauge on a grown CLAUDE.md 2026-08-26 18:34:36 +02:00
claude_usage_watch.rs hive-agent: warn on usage responses with no recognisable windows 2026-09-30 20:53:03 +02:00
db_migrate.rs todos: reopen an acked keyed row when the caller says so 2026-08-13 12:55:20 +02:00
disk_watch.rs disk_watch: drop bare tracker tag from test doc-comment 2026-10-04 15:18:32 +02:00
events.rs agents: remove the hive-level /effort control too 2026-10-11 01:28:44 +02:00
harness_state.rs agents: remove the hive-level /effort control too 2026-10-11 01:28:44 +02:00
identity.rs agents: login shells read the hive facts too; test the readers 2026-10-12 10:52:21 +02:00
login.rs swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up 2026-10-15 13:26:29 +02:00
login_session.rs refactor(#2464): rename hive-ag3nt crate to hive-agent, collapse lib into main 2026-07-15 16:09:39 +02:00
main.rs agent permissions: one set, tool groups included, set at agent creation 2026-10-15 18:01:40 +02:00
mcp_config.rs agent permissions: one set, tool groups included, set at agent creation 2026-10-15 18:01:40 +02:00
otel_turn_metrics.rs hive-agent: export a per-file line count for subagent role files 2026-10-14 13:53:20 +02:00
paths.rs hive-agent: compact tests set the harness dir like the other Bus tests 2026-10-11 03:36:34 +02:00
plugins.rs agents: remove send(operator) and the operator inbox; alert on turn failures 2026-10-12 08:50:06 +02:00
prompt.rs hive-c0re: render the new agent option paths into generated agent flakes 2026-09-17 20:19:30 +02:00
reminder_timer.rs docs/hive-c0re: fix ask/answer removal doc gaps argus caught on #3741 2026-08-30 03:02:31 +02:00
reminders.rs hive-c0re: remove the approvals subsystem 2026-10-04 23:55:32 +02:00
schedule_timer.rs hive-agent: the swarm queue connection is required; retry, then exit 2026-10-04 22:24:51 +02:00
serve_common.rs hive-agent: dashboard Cancel and idle stalls for ACP agents 2026-09-29 23:25:48 +02:00
state_entry_watch.rs fix hint text per argus review: group into subdirs, not split into more top-level files 2026-08-18 22:07:05 +02:00
stats.rs hive-c0re: remove the approvals subsystem 2026-10-04 23:55:32 +02:00
subagent_role_watch.rs hive-agent: export a per-file line count for subagent role files 2026-10-14 13:53:20 +02:00
swarm_agent_icon.rs hive-agent: the swarm queue connection is required; retry, then exit 2026-10-04 22:24:51 +02:00
swarm_agent_state.rs swarm UI: an agent that needs a Claude login shows it on its card 2026-10-14 20:07:46 +02:00
swarm_inference.rs swarm-ui: name the subagent cap in the three descriptions that list inference fields 2026-10-14 10:13:29 +02:00
swarm_input.rs swarm: cancel an agent's turn from the swarm queue 2026-10-15 08:26:46 +02:00
swarm_permissions.rs agent permissions: hold hive-c0re's stored grant until the agent's own read 2026-10-15 18:01:40 +02:00
swarm_queue.rs swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up 2026-10-15 13:26:29 +02:00
swarm_term.rs swarm: keep an agent's terminal rows and replay them on attach 2026-10-11 12:35:31 +02:00
term_msg.rs swarm: show subagent terminals in the swarm UI 2026-10-03 01:34:01 +02:00
todo_server.rs hive-sh4re: one saturating_age for every loose-end producer 2026-09-02 14:20:25 +02:00
todos.rs todos: reopen an acked keyed row when the caller says so 2026-08-13 12:55:20 +02:00
turn.rs agent permissions: one set, tool groups included, set at agent creation 2026-10-15 18:01:40 +02:00
turn_stats.rs swap hive-claude to the crates.io registry dependency (#2931) 2026-08-02 14:19:26 +02:00
vacuum.rs docs: restructure into topic subdirectories, collapse duplicated index 2026-09-02 01:55:37 +02:00