atlas
7c0a622d41
build agents from internal/meta when it pins their config
...
A rebuild's MetaSync resolves the head of the swarm's internal/meta once and
records it; the prebuild and the swap build that flake instead of the hive's
own, and a first deploy does the same in Create. hive-priv takes the commit as
a validated meta_rev on UpdateContainer and CreateContainer and builds from its
own forge URL (HIVE_PRIV_FORGE_URL).
The head is used only when its flake lists the agent at the config commit the
forge's main is at; otherwise, and when the repo has no commit or this hive has
no core token file for nix's git, the hive renders locally as before.
hive-c0re's and hive-priv's gitconfig now share the forge credential helper and
rewrite the forge's https URLs to http, which hive-priv lacked.
2026-10-24 21:13:24 +02:00
..
hive-c0re
build agents from internal/meta when it pins their config
2026-10-24 21:13:24 +02:00
hive-forge
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
hive-gateway
every hive runs its otel collector, and agents export to it by default
2026-10-19 18:35:17 +02:00
lib
build agents from internal/meta when it pins their config
2026-10-24 21:13:24 +02:00
swarm-grafana /dashboards
rename claude.md to agents.md for agents and the repo
2026-10-18 02:33:06 +02:00
bao-bootstrap-policy.hcl
bao: disable the unused approle auth method, declaratively
2026-09-28 22:58:36 +02:00
default.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
deploy.nix
Revert "swarm-otel: run in its own network namespace, receivers on unix sockets"
2026-10-24 15:09:11 +02:00
glue-bao-readers-policy-order.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
glue-bao-readers-store-order.nix
every hive runs its otel collector, and agents export to it by default
2026-10-19 18:35:17 +02:00
glue-bao-tls.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
glue-bao-ui-oidc-client.nix
bao: OIDC login to the browser UI via authelia, as a metadata-only viewer
2026-09-28 19:56:38 +02:00
glue-builder-oidc-client.nix
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
glue-ci-metrics-otel-oidc-client.nix
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
glue-ci-runner-otel-oidc-client.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
glue-claude-login-oidc-client.nix
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
glue-controller-bao-identity.nix
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
glue-controller-env.nix
glue-controller-env: the controller always exports otlp to the swarm's collector
2026-10-17 16:33:52 +02:00
glue-controller-oidc-client.nix
swarm-controller: get its otlp pushes past the collector, log failures
2026-10-17 09:44:33 +02:00
glue-forge-controller.nix
glue: forge's controller-dependent settings move out of the forge module
2026-10-13 22:14:28 +02:00
glue-forge-oidc-client.nix
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
glue-forge-otel-oidc-client.nix
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
glue-grafana-oidc-client.nix
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
glue-grafana-otel-oidc-client.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
glue-hive-otel-authelia.nix
every hive runs its otel collector, and agents export to it by default
2026-10-19 18:35:17 +02:00
glue-hive-tls-bao-identity.nix
hive-tls: the gateway leaf uses the services-issuer identity, not a hive's
2026-10-06 14:54:07 +02:00
glue-hive-tls-controllers.nix
agents fetch the hive CA from bao at boot instead of the meta flake embedding it
2026-10-19 20:15:13 +02:00
glue-logs-auth-bao-identity.nix
swarm-logs-auth: check agent tokens on the log store's query route
2026-10-13 08:38:05 +02:00
glue-matrix-ctl-bao-identity.nix
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
glue-matrix-hive-discovery.nix
move the hive's vhosts and matrix discovery out of the gateway
2026-10-17 15:07:33 +02:00
glue-matrix-oidc-client.nix
swarm: OIDC clients registered wherever authelia runs; nats + matrix secrets from bao
2026-10-05 09:58:02 +02:00
glue-matrix-otel-oidc-client.nix
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
glue-metrics-auth-bao-identity.nix
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
glue-nats-auth-bao-identity.nix
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
glue-nats-bao-identity.nix
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
glue-nats-oidc-client.nix
swarm-nats: forward the queue container's journal to the swarm collector
2026-10-16 09:08:21 +02:00
glue-nats-wireguard.nix
glue: nats firewall on the wireguard interface moves out of the nats module
2026-10-14 10:15:19 +02:00
glue-notify-router-oidc-client.nix
agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close
2026-10-22 07:28:53 +02:00
glue-review-classifier-oidc-client.nix
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
glue-secret-publisher-authelia.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
glue-secret-publisher-bao-identity.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
glue-swarm-bao-otel-oidc-client.nix
ops: update option pointers after grafana/bao split
2026-10-01 09:53:04 +02:00
glue-swarm-otel-oidc-client.nix
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
glue-victorialogs-otel-oidc-client.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
glue-victoriametrics-otel-oidc-client.nix
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
hive-matrix-service.nix
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
hive-matrix.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
hive-network.nix
every hive runs its otel collector, and agents export to it by default
2026-10-19 18:35:17 +02:00
hive-options-removed.nix
publish operators' forge-profile pronouns to kv and list them in the agent prompt
2026-10-17 13:10:05 +02:00
hive-priv.nix
build agents from internal/meta when it pins their config
2026-10-24 21:13:24 +02:00
hive-tls.nix
tls: a CA root change no longer restarts the store or bounces containers
2026-10-21 22:00:13 +02:00
host-ca-removed.nix
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
hyperhive.nix
hyperhive: make the values the meta-flake render reads swarm-wide
2026-10-17 13:43:16 +02:00
local-defaults.nix
swarm-nats: take the callout issuer and user keys from the store
2026-10-06 14:53:33 +02:00
nats-callout-removed.nix
nats-callout-removed: remove the container's OIDC secret copy here, ungated
2026-10-06 15:25:29 +02:00
otel.nix
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
stylix-theme.nix
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
swarm-authelia-service.nix
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
swarm-authelia.nix
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
swarm-bao-service.nix
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
swarm-bao.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
swarm-builder.nix
the meta flake takes docs from the pinned hyperhive input
2026-10-18 20:09:14 +02:00
swarm-ci-metrics.nix
trust the swarm services ca in swarm-ci-metrics
2026-10-17 23:28:03 +02:00
swarm-ci-runner.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-claude-login.nix
move dashboardPort, claudeCodePackage and extraResourceAttributes to deploy.hive-controller
2026-10-17 13:43:16 +02:00
swarm-controller.nix
pin internal/meta's hyperhive on the controller's rev and rebuild agents when it moves
2026-10-24 21:13:24 +02:00
swarm-grafana-service.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-grafana.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
swarm-nats-service.nix
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
swarm-nats.nix
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
swarm-notify-router.nix
agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close
2026-10-22 07:28:53 +02:00
swarm-otel-service.nix
Revert "swarm-otel: run in its own network namespace, receivers on unix sockets"
2026-10-24 15:09:11 +02:00
swarm-otel.nix
Revert "swarm-otel: run in its own network namespace, receivers on unix sockets"
2026-10-24 15:09:11 +02:00
swarm-required-services.nix
agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close
2026-10-22 07:28:53 +02:00
swarm-review-classifier.nix
every hive runs its otel collector, and agents export to it by default
2026-10-19 18:35:17 +02:00
swarm-secret-publisher.nix
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
swarm-snapshot-store.nix
snapshot store: bound the transfer on both ends
2026-10-16 11:45:58 +02:00
swarm-ui.nix
move the hive's vhosts and matrix discovery out of the gateway
2026-10-17 15:07:33 +02:00
swarm-victorialogs-service.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-victorialogs.nix
Revert "drop port-collision checks against swarm.otel.telemetryPort"
2026-10-24 15:09:11 +02:00
swarm-victoriametrics-service.nix
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
swarm-victoriametrics.nix
victorialogs and victoriametrics: own the package for each auth responder they run
2026-10-17 18:38:25 +02:00
swarm-wireguard.nix
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
swarm.nix
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00