Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/hive-c0re/src
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 7b5400ecb8 grant manage_root_agent by stored permission only, not by the name ruth
Permission::default_for and hive-sh4re's MANAGER_AGENT are gone: every
agent with no permissions key holds Permission::DEFAULT, ruth included.
The agent-name parameters that only fed default_for go with it
(permissions::effective, HiveCopy::before_read/after_read and their
callers).

swarm-controller seeds the grant ruth held by name: at start, a declared
ruth whose permissions are unset gets DEFAULT plus manage_root_agent
written into her key, once, logged. A set key is never touched. It is a
one-shot to delete once every swarm has passed it.

The swarm UI setup assistant opens the create form with
manage_root_agent checked, so a new ruth is created with the grant.
permissions_import no longer adds ruth to the import or splits her
default. Docs and help text no longer say ruth holds the grant by
default; swarmctl-cli.md regenerated.
2026-10-17 08:10:08 +02:00
..
agent_config grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
dashboard dashboard: serve the dashboard at /, fold kept state in as a tab, add a pages menu 2026-10-16 20:02:28 +02:00
forge forge: warn when the core avatar marker cannot be written 2026-10-16 13:50:33 +02:00
job_queue start: log an unreadable applied-rev marker instead of silently treating it as stale 2026-10-16 15:24:40 +02:00
lifecycle grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
socket_server drop the manager socket, the no-op migrate branch and other ruth special cases 2026-10-16 21:42:26 +02:00
stats remove otel.metricIntervalMs and the host-level otel.debug 2026-10-17 08:00:14 +02:00
stores hive: remove the read-only schedules page and the old schedule store 2026-10-13 01:45:12 +02:00
workers grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
actions.rs remove the hive-side auto-spawn of ruth and the ruthless option 2026-10-16 21:42:26 +02:00
container_view.rs gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd 2026-10-15 21:44:27 +02:00
coordinator.rs grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
dashboard_events.rs agent permissions: one set, tool groups included, set at agent creation 2026-10-15 18:01:40 +02:00
gateway_nginx.rs drop the manager socket, the no-op migrate branch and other ruth special cases 2026-10-16 21:42:26 +02:00
loose_ends.rs drop the manager socket, the no-op migrate branch and other ruth special cases 2026-10-16 21:42:26 +02:00
main.rs remove c0re.operatorPronouns and c0re.contextWindowTokens 2026-10-17 08:00:14 +02:00
matrix.rs matrix: one joined-room walk for the Space and the chat room lookups 2026-10-16 13:53:14 +02:00
meta.rs remove otel.metricIntervalMs and the host-level otel.debug 2026-10-17 08:00:14 +02:00
migrate.rs grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
paths.rs gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd 2026-10-15 21:44:27 +02:00
priv_client.rs agents: read the hive's name and domain at runtime, not from the build 2026-10-12 10:52:21 +02:00
secret_file.rs hive-c0re: stop silently dropping errors on credential/marker writes 2026-10-09 10:24:15 +02:00
server.rs gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd 2026-10-15 21:44:27 +02:00
snapshot_push.rs snapshot store: test the sender deadlines and the receiver bounds 2026-10-16 11:45:58 +02:00
swarm_agent_status.rs hive status publishing: read the hive's OIDC secret from the store, retry until it is there 2026-10-10 01:05:33 +02:00
swarm_notices.rs grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
swarm_queue.rs swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
swarm_status.rs agent permissions: one set, tool groups included, set at agent creation 2026-10-15 18:01:40 +02:00
test_env.rs test(hive-c0re): one crate-wide lock for env-mutating tests 2026-08-19 01:38:54 +02:00