atlas
58ef299c3c
hive-c0re: remove the approvals subsystem ...
Nothing submits an approval since scheduled prompts left hive-c0re, so the
queue only acted on rows written before that.
- hive-c0re: the approvals store and its migrations, approve/deny/
resolve actions, the ResolveApproval tail node (and meta_update's
approval_id), POST /api/approve and /api/deny, the approval views on
/api/state, the approval_resolved dashboard event, the orphan GC,
destroy/purge failing pending rows, and the approval rows in
get_loose_ends. DestroyBookkeeping loses the purge flag, which only
worded the approval-failure note.
- The CancelLooseEnd request goes: its only hive-c0re arm was the
approval one. cancel_loose_end handles reminder and todo in the harness.
- Wire types: hive_sh4re::approvals (ReminderStats moves to inbox),
LooseEnd::Approval, CancelLooseEndKind, HelperEvent::ApprovalResolved,
ToolGroup::Approvals, HostRequest::{Pending,Approve,Deny} and
HostResponse.approvals. HOST_SOCK_VERSION goes to 2 for the removed
field.
- hivectl loses the approvals verbs; docs/tools/hivectl-cli.md is
regenerated.
- The system prompt drops approval_resolved.
- The approvals table stays in broker.sqlite, unread, the same way the
operator_questions table was left when its store was removed.
- An `approvals` entry still in tool-groups.json is skipped with a warning
by ToolGroup::parse_list, like any unknown group.
- docs/agent-lifecycle/approvals.md is renamed to config-changes.md so the
code's doc pointers resolve; its content follows in the docs commit.
2026-10-04 23:55:32 +02:00
matrix apiUrl: default to https on the gateway vhost
2026-10-04 18:31:24 +02:00
hive-c0re: remove the approvals subsystem
2026-10-04 23:55:32 +02:00
hive-gateway: no hive-domain vhost on a host without a hive
2026-10-04 19:45:14 +02:00
hive-tls: correct two comments that still describe a runtime-generated hive CA
2026-10-04 19:45:14 +02:00
swarm-grafana /dashboards
hive-agent: export ACP-reported cost and context fill over OTLP
2026-09-30 22:24:06 +02:00
bao: disable the unused approle auth method, declaratively
2026-09-28 22:58:36 +02:00
hive-tls: issue the gateway leaf from bao with a per-hive identity
2026-10-04 19:45:14 +02:00
hive-tls: issue the gateway leaf from bao with a per-hive identity
2026-10-04 19:45:14 +02:00
swarm-bao: write every swarm-* grant as a bao granter, not with a 24h token
2026-09-27 22:57:46 +02:00
hive-tls: a store-only host without a hive starts its gateway with the store sealed
2026-10-04 19:45:14 +02:00
bao: OIDC login to the browser UI via authelia, as a metadata-only viewer
2026-09-28 19:56:38 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
hive-tls: a store-only host without a hive starts its gateway with the store sealed
2026-10-04 19:45:14 +02:00
swarm-otel: ship the whole host journal, drop user sessions after it
2026-09-30 23:01:49 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
swarm-nats-auth: verify an agent's own token against the store
2026-09-28 08:24:52 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
swarm-otel: ship the whole host journal, drop user sessions after it
2026-09-30 23:01:49 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
ops: update option pointers after grafana/bao split
2026-10-01 09:53:04 +02:00
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
forge: always behind the gateway; drop behindGateway
2026-10-02 18:50:42 +02:00
matrix apiUrl: default to https on the gateway vhost
2026-10-04 18:31:24 +02:00
matrix apiUrl: default to https on the gateway vhost
2026-10-04 18:31:24 +02:00
fix(nix): require swarm domain only when a hyperhive service is enabled
2026-10-02 13:09:45 +02:00
hive-priv: create agent socket dirs on start; drop hyperhive-agents.conf
2026-09-27 18:55:33 +02:00
hive-gateway: no hive-domain vhost on a host without a hive
2026-10-04 19:45:14 +02:00
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
swarm-controller: read the queue client secret from the store, drop the file
2026-09-28 19:01:05 +02:00
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
nix: split swarm-bao into service and deploy-mode files
2026-10-01 09:37:36 +02:00
swarm-secret-client: hives no longer read swarm/services/*
2026-10-04 23:11:11 +02:00
hive-tls: issue the gateway leaf from bao with a per-hive identity
2026-10-04 19:45:14 +02:00
hive-tls: correct two comments that still describe a runtime-generated hive CA
2026-10-04 19:45:14 +02:00
nix: split swarm-grafana into service and deploy-mode files
2026-10-01 09:30:21 +02:00
swarm-secret-client: hives no longer read swarm/services/*
2026-10-04 23:11:11 +02:00
nix: split swarm-bao into service and deploy-mode files
2026-10-01 09:37:36 +02:00
docs: drop harness systemd settings; swarm-nats-auth: refuse the hive's shared agent client
2026-10-04 22:24:51 +02:00
nix: split swarm-otel into service and deploy-mode files
2026-10-01 13:00:40 +02:00
swarm-secret-client: hives no longer read swarm/services/*
2026-10-04 23:11:11 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
nix: run the forge on one host per swarm (deploy.forgejo.enable)
2026-09-24 23:56:07 +02:00
swarm-secret-client: hives no longer read swarm/services/*
2026-10-04 23:11:11 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
swarm UI: send a message to an agent, without its hive
2026-10-04 03:02:14 +02:00
nix: split swarm-victorialogs into service and deploy-mode files
2026-10-01 10:03:55 +02:00
swarm-ui: build the forge link from swarm.forge.domain
2026-10-02 20:02:02 +02:00
nix: split swarm-victoriametrics into service and deploy-mode files
2026-10-01 10:03:55 +02:00
swarm-ui: build the forge link from swarm.forge.domain
2026-10-02 20:02:02 +02:00
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
hive-tls: issue the gateway leaf from bao with a per-hive identity
2026-10-04 19:45:14 +02:00
58ef299c3c