atlas
ccb5bd3b38
hive-agent: read the per-agent queue secret from bao in process ...
The harness now reads swarm/agents/<agent>/queue from the store itself,
under the agent's own store certificate, and holds it in memory only.
It reads once before the first connect and again on every reconnect
attempt (async-nats `ConnectOptions::with_auth_callback`), so an agent
whose secret was re-minted reconnects with the new value instead of
being refused until the container restarts.
hive-agent-queue-credential.service, the /run file it wrote, and
HIVE_AGENT_QUEUE_AGENT_SECRET_FILE are gone; queue-identity.nix now
hands hive-agent.service the store address, its certificate paths and
the agent name.
A failed or empty read before the first connect still falls back to
the hive's shared client. Each read is bounded by a 10s timeout, and
retries wait out the existing reconnect backoff (500ms doubling, capped
at 60s).
Closes #4783
2026-09-29 10:18:07 +02:00
docs: retire the agent hierarchy from every page that described it
2026-09-21 22:08:47 +02:00
swarm: courier an agent's store identity into its container, and log in with it
2026-09-19 01:55:31 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agent: make claudePlugins additive instead of replacing
2026-09-19 10:48:29 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: pull the forge token from bao; drop tea-login
2026-09-24 17:48:53 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-agent: read the per-agent queue secret from bao in process
2026-09-29 10:18:07 +02:00
agents: pull the forge token from bao; drop tea-login
2026-09-24 17:48:53 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-matrix-mcp: read the main account's token from the store too
2026-09-25 08:31:01 +02:00
agent-modules/mcp: give subagent daemon a longer default bash timeout
2026-09-21 17:20:59 +02:00
agents: pull the forge token from bao; drop tea-login
2026-09-24 17:48:53 +02:00
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-agent: read the per-agent queue secret from bao in process
2026-09-29 10:18:07 +02:00
swarm-nats: give the queue a name, a bao-issued leaf, and require TLS
2026-09-24 17:26:31 +02:00
matrix: drop the per-agent matrix.enable; accounts are the enable signal
2026-09-18 10:35:16 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-priv: create agent socket dirs on start; drop hyperhive-agents.conf
2026-09-27 18:55:33 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
ccb5bd3b38