atlas
5336be7813
hivectl: wireguard mesh setup verbs ( #1756 ) ...
One-time-setup convenience for the inter-hive WireGuard mesh
(services.hyperhive.swarm) so nobody has to remember the wg dance:
- hivectl wg init [--address X] — generate (if absent) the hive's
private key at /etc/wireguard/hive.key (0400, never clobbered),
derive + print the public key, and print the swarm.wireguard nix
snippet to enable the mesh.
- hivectl wg peer <domain> --pubkey --address [--endpoint] — print the
swarm.peers.<domain> nix snippet to add a remote hive.
- hivectl wg status — wrap wg show wg-hive.
Hybrid model per the design: the verb owns the imperative state (the
key file), the operator pastes the printed nix into host config (kept
in git) — nothing mutates declarative config behind their back.
hivectl-only (root host ops, like the gateway htpasswd verbs); no
priv/wire/c0re changes.
flake: wrap hivectl with wireguard-tools on PATH so wg resolves even
before the mesh config (which would otherwise pull it in) exists —
wg init is the first setup step. Add clippy.toml doc-valid-idents for
the WireGuard proper noun. Regenerate hivectl-cli.md.
2026-06-19 14:37:50 +02:00
hivectl: wireguard mesh setup verbs ( #1756 )
2026-06-19 14:37:50 +02:00
hive-c0re: graceful agent stop — quiesce harness, flush state, then stop
2026-06-19 11:50:59 +02:00
btrfs subvols: scrub tracker tags from comments; harden subvol chown
2026-06-19 13:46:39 +02:00
feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration
2026-06-05 23:01:47 +02:00
hive-c0re: graceful agent stop — quiesce harness, flush state, then stop
2026-06-19 11:50:59 +02:00
feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration
2026-06-05 23:01:47 +02:00
refactor( #1474 ): replace approvals lookup 7-tuple with named struct, drop type_complexity allow
2026-06-08 19:56:32 +02:00
audit-log: #[must_use] on record() per review
2026-06-13 17:17:00 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum
2026-06-06 07:57:27 +02:00
ci( #1555 ): prose-ify legacy tracker tags; add lint:allow escape hatch
2026-06-10 13:14:42 +02:00
feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum
2026-06-06 07:57:27 +02:00
fix: update stale doc comment example root→ruth in capabilities.rs
2026-06-02 18:18:06 +02:00
hive-c0re: admin socket server + client (stub dispatch)
2026-05-14 20:49:11 +02:00
fix agent disk usage reading container-internal state path on the host
2026-06-18 14:01:22 +02:00
chore: drop two more stale clippy allows (ContainerView bools, journal too_many_lines)
2026-06-08 08:17:33 +02:00
hive-c0re: graceful agent stop — quiesce harness, flush state, then stop
2026-06-19 11:50:59 +02:00
feat( #1591 ): surface pending-login + crashing-agent banner warnings
2026-06-10 13:19:32 +02:00
bound /api/state container rescan so introspection survives a saturated build backend
2026-06-19 01:20:56 +02:00
fix( #1661 ): show default-perms agents with effective values in perms tab
2026-06-14 21:20:03 +02:00
feat: type-scope events vacuum to prune only stream rows (14d) + drop turn-stats vacuum
2026-06-06 07:57:27 +02:00
feat(gateway): hivectl gateway user management + fix htpasswdFile assertion
2026-06-01 23:25:28 +02:00
forge: revalidate the core token against the live forge before trusting it
2026-06-06 11:26:59 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
feat(stats): hive-wide "favorite tools" rollup on ST4TS
2026-06-08 20:46:19 +02:00
style( #1591 ): wrap over-long assert line to satisfy rustfmt
2026-06-10 13:19:32 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
feat(audit): persistent audit log of agent-initiated privileged actions
2026-06-13 13:45:02 +02:00
btrfs subvols: scrub tracker tags from comments; harden subvol chown
2026-06-19 13:46:39 +02:00
fix(#1164,#1171): harness writes status file, c0re just rescans
2026-06-03 18:33:07 +02:00
feat(gateway): hivectl gateway user management + fix htpasswdFile assertion
2026-06-01 23:25:28 +02:00
feat(c0re): per-container disk-size sampler on container-load ( #1659 )
2026-06-17 19:05:35 +02:00
fix( #1643 ): filter destroyed-agent targets from dashboard schedule view
2026-06-13 15:58:44 +02:00
dashboard: POST /matrix-account-login + account-aware hive-priv matrix-token write (BE-2)
2026-06-16 11:18:18 +02:00
feat(tls): embed hive CA into agent flakes for self-signed trust
2026-06-17 19:42:15 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
chore: drop the stale doc_markdown allow on OpQuestion ( #1474 )
2026-06-07 23:17:57 +02:00
feat(matrix): auto-create a hive chat room as a child of the hive Space
2026-06-06 07:59:24 +02:00
hive-c0re: back agent state dirs with btrfs subvolumes
2026-06-19 13:46:39 +02:00
refactor( #1474 ): replace too_many_arguments allows on pub fns with param structs
2026-06-09 11:25:38 +02:00
hive-c0re: graceful agent stop — quiesce harness, flush state, then stop
2026-06-19 11:50:59 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
feat: group host-side /var/lib/hyperhive state into db/ forge/ matrix/ run/ subdirs with startup migration
2026-06-05 23:01:47 +02:00
feat: live SSE updates for the SCH3DUL3S tab
2026-06-05 12:06:32 +02:00
hive-c0re: wire hivectl --graceful to enqueue GracefulStop
2026-06-19 12:10:23 +02:00
fix: address argus+mara review on #1243 — stale docs, MANAGER_DEFAULT refs, ruth migration
2026-06-04 12:15:03 +02:00
fix( #1375 ): clean up pedantic warnings and re-enable -D warnings without pedantic bypass
2026-06-05 16:55:09 +02:00
5336be7813