58ef299c3c
Nothing submits an approval since scheduled prompts left hive-c0re, so the
queue only acted on rows written before that.
- hive-c0re: the approvals store and its migrations, approve/deny/
resolve actions, the ResolveApproval tail node (and meta_update's
approval_id), POST /api/approve and /api/deny, the approval views on
/api/state, the approval_resolved dashboard event, the orphan GC,
destroy/purge failing pending rows, and the approval rows in
get_loose_ends. DestroyBookkeeping loses the purge flag, which only
worded the approval-failure note.
- The CancelLooseEnd request goes: its only hive-c0re arm was the
approval one. cancel_loose_end handles reminder and todo in the harness.
- Wire types: hive_sh4re::approvals (ReminderStats moves to inbox),
LooseEnd::Approval, CancelLooseEndKind, HelperEvent::ApprovalResolved,
ToolGroup::Approvals, HostRequest::{Pending,Approve,Deny} and
HostResponse.approvals. HOST_SOCK_VERSION goes to 2 for the removed
field.
- hivectl loses the approvals verbs; docs/tools/hivectl-cli.md is
regenerated.
- The system prompt drops approval_resolved.
- The approvals table stays in broker.sqlite, unread, the same way the
operator_questions table was left when its store was removed.
- An `approvals` entry still in tool-groups.json is skipped with a warning
by ToolGroup::parse_list, like any unknown group.
- docs/agent-lifecycle/approvals.md is renamed to config-changes.md so the
code's doc pointers resolve; its content follows in the docs commit.
51 lines
2.2 KiB
Markdown
51 lines
2.2 KiB
Markdown
# hive-c0re
|
|
|
|
The unprivileged host daemon (runs as `hive-core`). Owns the sqlite
|
|
broker, the reminder queue, the generic job-DAG
|
|
queue, container lifecycle, gateway vhost wiring, forge/matrix config
|
|
reconciliation, per-container stats, and the axum operator dashboard.
|
|
Largest crate in the workspace — bin-only, no separate lib.
|
|
|
|
## When to use it
|
|
|
|
Host-level, cross-container orchestration: spawning/rebuilding/
|
|
destroying agent containers, dashboard-visible
|
|
state, wiring each agent's gateway vhost and reconciling its forge
|
|
config-repo access and matrix room membership. The accounts themselves
|
|
are swarm-controller's (`docs/integrations/forge.md`). Agent-side
|
|
behavior (turn loop, MCP tools) lives in `hive-agent`/`hive-agent-mcp`
|
|
instead — this daemon only talks to agents over the socket wire types
|
|
in `hive-sh4re`.
|
|
|
|
## Shape
|
|
|
|
Cohesive clusters live in directory submodules, each re-exported at
|
|
the crate root (`crate::broker::…` keeps resolving regardless of which
|
|
subdirectory a module actually lives in). One line each — read the
|
|
module's own `//!` doc-comment for real detail, don't expect this file
|
|
to track it:
|
|
|
|
- **`dashboard/`** — the operator dashboard (containers,
|
|
schedules, logs, topology).
|
|
- **`job_queue/`** — the job-DAG queue + desired-state reconciliation
|
|
(`docs/scheduler/coordinator.md`).
|
|
- **`lifecycle/`** — `nixos-container` lifecycle + per-agent config
|
|
flake generation.
|
|
- **`stores/`** — sqlite-backed stores (broker, queues, audit, power).
|
|
- **`workers/`** — background sweeps (crash watch,
|
|
autoupdate, knowledge sync).
|
|
- **`agent_config/`** — per-agent registries (tool groups,
|
|
capabilities, resource limits, topology).
|
|
- **`stats/`** — dashboard metrics aggregation + OTEL export.
|
|
- **`socket_server/`** — the unix-socket request server shared by
|
|
per-agent + manager sockets.
|
|
- **`forge/`** — optional Forgejo wiring (`docs/integrations/forge.md`).
|
|
- **`coordinator.rs`** — top-level wiring for `serve`.
|
|
- **`meta.rs`**, **`migrate.rs`** — the meta flake + schema/state
|
|
migrations.
|
|
- **`matrix.rs`**, **`gateway_nginx.rs`**, **`priv_client.rs`** —
|
|
matrix provisioning, gateway vhosts, and the `hive-priv` client
|
|
respectively.
|
|
|
|
See the top-level `CLAUDE.md`/`docs/` index for the full reading-path
|
|
map.
|