atlas
0f53e9be6c
swarm-logs: authenticate as the agent with its own queue secret ...
swarm-logs reads `swarm/agents/<agent>/queue` from the swarm secret
store with the agent's own store certificate (the read hive-agent makes
for its queue connection) and presents it as
`Bearer swarm-agent.<agent>.<secret>`, which the gateway's
swarm-logs-auth checks. On a 401 it reads the secret again and retries
once, so a secret re-minted between the read and the check does not
fail the query.
The OIDC mint against the hive's shared `hive-<h>-agent` client is gone
from swarm-logs, along with the unused `HIVE_AGENT_OIDC_CA_FILE` anchor.
logs.nix now gates on the store address instead of the queue's token
endpoint and wraps the binary with the paths queue-identity.nix gives
the harness; the host forwards the query URL wherever it forwards a
store identity.
The shared client is still delivered into containers; removing that is
Part of #4459 .
2026-10-13 08:38:05 +02:00
hive-runtime: respawn the ACP agent when its provider key changed after a failed turn
2026-10-13 08:07:38 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-github-notify: pick up a rotated PAT without a restart
2026-10-13 08:07:47 +02:00
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
agents: login shells read the hive facts too; test the readers
2026-10-12 10:52:21 +02:00
swarm-logs: authenticate as the agent with its own queue secret
2026-10-13 08:38:05 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
agents: always write the memory cap, infinity for none
2026-10-12 10:59:12 +02:00
agent: order bao/github/forge-accounts logins after the isolated-DNS rewrite
2026-10-09 12:34:30 +02:00
agents: read the hive's name and domain at runtime, not from the build
2026-10-12 10:52:21 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
hive-agent: the swarm queue connection is required; retry, then exit
2026-10-04 22:24:51 +02:00
agents: read the memory cap at boot, not from the build
2026-10-12 10:59:11 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
user.nix: log failed ownership heals of the agent's own dirs
2026-10-09 11:30:30 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
0f53e9be6c