atlas
e92f118bda
add swarm-metrics, an agent CLI for the metrics store ...
swarm-metrics reads the swarm's VictoriaMetrics from inside an agent
container: query, query-range, series, labels and label-values, each one
GET against the store's Prometheus read API through the gateway, printing
the store's JSON. It authenticates the way swarm-logs does, with the
agent's own queue secret read from bao under the agent's leaf, sent as
a swarm-agent bearer.
On the metrics store's host the read API's auth map gains an agent arm
ahead of the Grafana one. It routes to swarm-metrics-agent-auth, a
swarm-logs-auth instance logged in under the existing swarm-metrics-auth
leaf, whose bao grant now includes swarm/agents/+/queue read. The check is
rate-limited per address like the log store's
(deploy.victoriametrics.agentAuth{Rate,Burst,VerdictTtl}).
nix/agent-modules/metrics.nix installs the wrapped binary when the hive
forwards HIVE_AGENT_METRICS_URL (from swarm.victoriametrics.domain) and a
store address, the same gate as swarm-logs. Adds the base:swarm-metrics
skill and the CLI reference with its freshness check.
Fixes #5395
2026-10-17 10:10:17 +02:00
grant manage_root_agent by stored permission only, not by the name ruth
2026-10-17 08:10:08 +02:00
dashboard: serve the dashboard at /, fold kept state in as a tab, add a pages menu
2026-10-16 20:02:28 +02:00
forge: warn when the core avatar marker cannot be written
2026-10-16 13:50:33 +02:00
start: log an unreadable applied-rev marker instead of silently treating it as stale
2026-10-16 15:24:40 +02:00
build every agent from the agent-base template
2026-10-17 09:24:52 +02:00
bound the request line on the host admin and in-agent sockets
2026-10-17 09:09:20 +02:00
remove otel.metricIntervalMs and the host-level otel.debug
2026-10-17 08:00:14 +02:00
hive: remove the read-only schedules page and the old schedule store
2026-10-13 01:45:12 +02:00
grant manage_root_agent by stored permission only, not by the name ruth
2026-10-17 08:10:08 +02:00
remove the hive-side auto-spawn of ruth and the ruthless option
2026-10-16 21:42:26 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
grant manage_root_agent by stored permission only, not by the name ruth
2026-10-17 08:10:08 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
drop the manager socket, the no-op migrate branch and other ruth special cases
2026-10-16 21:42:26 +02:00
drop the manager socket, the no-op migrate branch and other ruth special cases
2026-10-16 21:42:26 +02:00
remove c0re.operatorPronouns and c0re.contextWindowTokens
2026-10-17 08:00:14 +02:00
matrix: one joined-room walk for the Space and the chat room lookups
2026-10-16 13:53:14 +02:00
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
grant manage_root_agent by stored permission only, not by the name ruth
2026-10-17 08:10:08 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
agents: read the hive's name and domain at runtime, not from the build
2026-10-12 10:52:21 +02:00
hive-c0re: stop silently dropping errors on credential/marker writes
2026-10-09 10:24:15 +02:00
bound the request line on the host admin and in-agent sockets
2026-10-17 09:09:20 +02:00
snapshot store: test the sender deadlines and the receiver bounds
2026-10-16 11:45:58 +02:00
hive status publishing: read the hive's OIDC secret from the store, retry until it is there
2026-10-10 01:05:33 +02:00
grant manage_root_agent by stored permission only, not by the name ruth
2026-10-17 08:10:08 +02:00
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
test(hive-c0re): one crate-wide lock for env-mutating tests
2026-08-19 01:38:54 +02:00
e92f118bda