vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
hyperhive/hive-c0re/src
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 867be7bb98 hive-c0re: block direct agent repo creation, add c0re-mediated create (#1787) 
Agents must no longer create repos with their own forge token (a
write-scoped token otherwise creates + owns repos and can self-merge,
bypassing operator-only-merge). Instead:

- Set max_repo_creation=0 on every agent forge user (marker-guarded
  PATCH in sync_agent; covers agents provisioned before this). Blocks
  new direct creation; push/PR/clone and existing repos are untouched.
- Provision a c0re-owned 'agents' org (the namespace agent repos land
  in) plus an empty 'operators' team inside it. The org owns the repos
  so perms stay c0re-managed; the operator joins the team out-of-band.
- create_agent_repo() is the sanctioned path: creates the repo in the
  agents org, adds the requesting agent as a *write* collaborator (not
  owner), and applies branch protection that whitelists merge + required
  approval to the operators team — so the author can't merge its own PR.
- is_hive_managed_namespace() guards 'internal'/'agent-configs'/'core'
  against a future create surface passing an explicit owner.

No existing repos are modified. The agent/hivectl surface that invokes
create_agent_repo is a follow-up commit.
2026-06-21 22:36:45 +02:00
..
bin hive-c0re: polish subvol-upgrade error paths (post-merge review follow-up) 2026-06-21 21:59:56 +02:00
dashboard hive-c0re: route dashboard start/stop through the rebuild queue 2026-06-21 15:04:19 +02:00
actions.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
agent_ports.rs feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration 2026-06-05 23:01:47 +02:00
agent_server.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
agent_sockets.rs feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration 2026-06-05 23:01:47 +02:00
approvals.rs refactor(#1474): replace approvals lookup 7-tuple with named struct, drop type_complexity allow 2026-06-08 19:56:32 +02:00
audit_log.rs audit-log: #[must_use] on record() per review 2026-06-13 17:17:00 +02:00
auto_update.rs fix(#1375): clean up pedantic warnings and re-enable -D warnings without pedantic bypass 2026-06-05 16:55:09 +02:00
bash_tasks_vacuum.rs feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum 2026-06-06 07:57:27 +02:00
broker.rs ci(#1555): prose-ify legacy tracker tags; add lint:allow escape hatch 2026-06-10 13:14:42 +02:00
build_logs.rs feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum 2026-06-06 07:57:27 +02:00
capabilities.rs fix: update stale doc comment example root→ruth in capabilities.rs 2026-06-02 18:18:06 +02:00
client.rs hive-c0re: admin socket server + client (stub dispatch) 2026-05-14 20:49:11 +02:00
container_stats.rs fix agent disk usage reading container-internal state path on the host 2026-06-18 14:01:22 +02:00
container_view.rs chore: drop two more stale clippy allows (ContainerView bools, journal too_many_lines) 2026-06-08 08:17:33 +02:00
coordinator.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
crash_watch.rs feat(#1591): surface pending-login + crashing-agent banner warnings 2026-06-10 13:19:32 +02:00
dashboard.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
dashboard_events.rs fix(#1661): show default-perms agents with effective values in perms tab 2026-06-14 21:20:03 +02:00
events_vacuum.rs feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum 2026-06-06 07:57:27 +02:00
flake_check.rs feat(gateway): hivectl gateway user management + fix htpasswdFile assertion 2026-06-01 23:25:28 +02:00
forge.rs hive-c0re: block direct agent repo creation, add c0re-mediated create (#1787) 2026-06-21 22:36:45 +02:00
gateway_nginx.rs fix(#1375): clean up pedantic warnings and re-enable -D warnings without pedantic bypass 2026-06-05 16:55:09 +02:00
hive_stats.rs feat(stats): hive-wide "favorite tools" rollup on ST4TS 2026-06-08 20:46:19 +02:00
host_stats.rs style(#1591): wrap over-long assert line to satisfy rustfmt 2026-06-10 13:19:32 +02:00
knowledge.rs fix(#1375): clean up pedantic warnings and re-enable -D warnings without pedantic bypass 2026-06-05 16:55:09 +02:00
lib.rs feat(audit): persistent audit log of agent-initiated privileged actions 2026-06-13 13:45:02 +02:00
lifecycle.rs btrfs subvols: scrub tracker tags from comments; harden subvol chown 2026-06-19 13:46:39 +02:00
limits.rs fix(#1164,#1171): harness writes status file, c0re just rescans 2026-06-03 18:33:07 +02:00
loose_ends.rs feat(gateway): hivectl gateway user management + fix htpasswdFile assertion 2026-06-01 23:25:28 +02:00
main.rs hive-c0re: fast lane for dashboard start/stop queue ops 2026-06-21 22:04:19 +02:00
manager_server.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
matrix.rs dashboard: POST /matrix-account-login + account-aware hive-priv matrix-token write (BE-2) 2026-06-16 11:18:18 +02:00
meta.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00
migrate.rs fix(#1375): clean up pedantic warnings and re-enable -D warnings without pedantic bypass 2026-06-05 16:55:09 +02:00
operator_questions.rs chore: drop the stale doc_markdown allow on OpQuestion (#1474) 2026-06-07 23:17:57 +02:00
paths.rs hive-c0re: block direct agent repo creation, add c0re-mediated create (#1787) 2026-06-21 22:36:45 +02:00
priv_client.rs hive-sh4re: type infra containers as an InfraContainer enum 2026-06-21 21:05:52 +02:00
questions.rs refactor(#1474): replace too_many_arguments allows on pub fns with param structs 2026-06-09 11:25:38 +02:00
rebuild_queue.rs hive-c0re: fast lane for dashboard start/stop queue ops 2026-06-21 22:04:19 +02:00
reminder_scheduler.rs fix(#1375): clean up pedantic warnings and re-enable -D warnings without pedantic bypass 2026-06-05 16:55:09 +02:00
scheduled_prompts.rs feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration 2026-06-05 23:01:47 +02:00
scheduled_prompts_worker.rs feat: live SSE updates for the SCH3DUL3S tab 2026-06-05 12:06:32 +02:00
server.rs hive-sh4re: type infra containers as an InfraContainer enum 2026-06-21 21:05:52 +02:00
tool_groups.rs fix: address argus+mara review on #1243 — stale docs, MANAGER_DEFAULT refs, ruth migration 2026-06-04 12:15:03 +02:00
topology.rs hive-c0re: let request_init_config spawn a brand-new sub-agent under its requester 2026-06-21 22:36:35 +02:00