Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/nix/module-eval
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 626790a464 hive CA: catch a deleted CA file however its path is spelled
The CA-file assertion compared the option's raw string, so
`/var/lib//swarm-ca/root.pem` or `/var/lib/hive-tls/./ca.pem` got past it.
Both sides are normalised lexically now: empty and `.` components drop out,
`..` removes the one before it, a trailing `/` goes. A symlink is not
resolved at eval time, so a path through one still passes; docs/swarm/ca.md
says so.
2026-10-05 21:17:10 +02:00
..
agent-forge-bao.nix forge: external forge accounts live in swarm bao; the agent fetches them itself 2026-10-01 18:05:33 +02:00
agent-github-bao.nix github swarm bao: address argus review on #4892 2026-10-02 17:54:45 +02:00
agent-icon.nix nix: split module-eval into per-subsystem checks 2026-09-20 04:25:54 +02:00
agent-matrix.nix nix: comments state current behaviour, not history 2026-10-05 09:58:50 +02:00
agent-memory.nix nix: split module-eval into per-subsystem checks 2026-09-20 04:25:54 +02:00
agent-otel.nix module-eval: assert the severity table once, not once per tier 2026-09-20 14:23:56 +02:00
agent-plugins.nix nix: split module-eval into per-subsystem checks 2026-09-20 04:25:54 +02:00
agent-queue-bao.nix hive-agent: the swarm queue connection is required; retry, then exit 2026-10-04 22:24:51 +02:00
agent-runtime.nix module-eval: pin a claude agent's subagent store identity 2026-10-03 01:34:01 +02:00
agent-user.nix agents: chown work/ recursively only on owner mismatch 2026-10-05 13:01:14 +02:00
bao-basics.nix matrix: drop the per-hive appservice and its unused token 2026-10-05 07:48:17 +02:00
bao-controller.nix swarm-controller: revoke matrix admin from former operators 2026-10-05 12:39:02 +02:00
bao-grants.nix swarm-ci-runner: run the forge CI runner as a swarm service 2026-10-05 13:55:37 +02:00
bao-matrix-reader.nix module-eval: set the hive-controller option only in tests that need a hive 2026-10-05 09:58:13 +02:00
bao-otel-collector.nix nix: finish the current-behaviour comment sweep in touched files 2026-10-05 09:58:57 +02:00
core-toggle.nix swarm-ci-runner: run the forge CI runner as a swarm service 2026-10-05 13:55:37 +02:00
forge-placement.nix swarm-ci-runner: load the registration token in a register unit of its own 2026-10-05 16:33:24 +02:00
grafana.nix nix: comments state current behaviour, not history 2026-10-05 09:58:50 +02:00
hive-otel.nix swarm-bao: give the store's collector an explicit self-telemetry port 2026-09-23 18:04:33 +02:00
hive-tls.nix hive CA: catch a deleted CA file however its path is spelled 2026-10-05 21:17:10 +02:00
journald-severity.nix module-eval: assert the severity table once, not once per tier 2026-09-20 14:23:56 +02:00
lib.nix module-eval: set the hive-controller option only in tests that need a hive 2026-10-05 09:58:13 +02:00
matrix-core.nix module-eval: set the hive-controller option only in tests that need a hive 2026-10-05 09:58:13 +02:00
name-guards.nix nix: finish the current-behaviour comment sweep in touched files 2026-10-05 09:58:57 +02:00
nats-authelia.nix nix: finish the current-behaviour comment sweep in touched files 2026-10-05 09:58:57 +02:00
nats-tls.nix module-eval: set the hive-controller option only in tests that need a hive 2026-10-05 09:58:13 +02:00
secret-publisher.nix nix: comments state current behaviour, not history 2026-10-05 09:58:50 +02:00
swarm-otel-core.nix nix: follow-ups from the service/deploy split 2026-10-05 19:12:46 +02:00
swarm-otel-identity.nix swarm-bao: refuse a remote reader that named seven of the eight leaves 2026-09-23 10:11:42 +02:00
swarm-services-switch.nix swarm CA: retire the host-held root CA, the store holds the only anchor 2026-10-05 21:17:10 +02:00