atlas
2505008b83
swarm-secret-client: hives no longer read swarm/services/* ...
The hive policy rendered by policy::render granted every hive cert read
on secret/data/swarm/services/*, which holds each swarm service's OIDC
client secret. No reader of that tree authenticates with a hive cert:
grafana, the otel collector and the store forwarder each read with
their own leaf, and the bao UI's secret is read by the store's granter.
render() now emits two stanzas: swarm/agents/* and the hive's own
swarm/hives/<hive>/*. Kind::Service had no other caller and is removed.
Docs and comments that described the grant as a decision are rewritten
to the current state.
Closes #4960
2026-10-04 23:11:11 +02:00
hive-c0re: fail on an unparseable resource-limits or topology file, write both atomically
2026-09-27 02:41:38 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re: fix two more comments with the same stale repo-created-after-spawn premise
2026-10-04 21:04:18 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re: fix two more comments with the same stale repo-created-after-spawn premise
2026-10-04 21:04:18 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re: warn on a du failure that isn't just a missing path
2026-09-29 09:37:16 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re: fail on a malformed agent name and on an unreadable container list
2026-09-27 05:13:21 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
gateway: $connection_upgrade does not come from recommendedProxySettings
2026-09-02 09:04:24 +02:00
hive-agent-mcp, hive-c0re, hive-sh4re: drop agent param from get_loose_ends
2026-09-20 05:36:49 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
swarm-secret-client: hives no longer read swarm/services/*
2026-10-04 23:11:11 +02:00
hive-agent: the swarm queue connection is required; retry, then exit
2026-10-04 22:24:51 +02:00
hive-c0re: fail on a malformed agent name and on an unreadable container list
2026-09-27 05:13:21 +02:00
hive-c0re: drop the spawn-time forge user-email, repo-creation and config-repo passes
2026-10-04 20:50:50 +02:00
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
hive-c0re stops owning scheduled prompts; agents lose the schedule tools
2026-10-04 21:23:30 +02:00
refactor( #2862 ): one snapshot store per swarm, not one per peer
2026-07-31 22:15:37 +02:00
swarm: present tense + no-queue-coordinates wording
2026-09-13 12:01:58 +02:00
swarm: present tense + no-queue-coordinates wording
2026-09-13 12:01:58 +02:00
swarm-queue-based lifecycle notices, replacing push_todo(MANAGER_AGENT)
2026-08-24 14:34:37 +02:00
config PRs: remove the hive's config-PR webhook, poll and core merge
2026-10-02 23:13:03 +02:00
test(hive-c0re): one crate-wide lock for env-mutating tests
2026-08-19 01:38:54 +02:00
2505008b83