atlas
f0844f6da3
agent permissions: one set, tool groups included, set at agent creation ...
mara on #5170 : "dont split caps and perms. its all perms. / dont include
the now empty tool groups / nothing set -> default / also add perms to
agent creation screen".
- hive-sh4re: one `Permission` enum (messaging, meta, inbox, execution,
web_tools, manage_root_agent) replaces `ToolGroup` and `Capability`;
`lifecycle`/`forge` are gone. `Permission::default_for` is the default
for an agent the swarm sets nothing for.
- The record is `{ "permissions": [...] }`. Missing key, unset field or
no successful read yet = default; `[]` = none; a failed read after a
good one keeps the last value.
- hive-agent reads its own key every 10s and builds each turn's --tools,
--allowedTools and MCP config (rewritten before every turn) from it;
the subagent daemon reads it on each start/continue. Agents get a
read-only grant on their own key.
- hive-c0re restarts an agent only when its manage_root_agent changes.
The import now merges meta/capabilities.json and meta/tool-groups.json
into one list per agent and deletes both; the "import pending, don't
read" decision is `ImportOutcome::read_allowed`, table-tested.
- swarm-controller: `GET /api/permissions` (names + default) and an
optional `permissions` on `POST /api/agents`, stored before the job is
queued. swarm-ui's create-agent form gets a permissions field.
- Deleted: HIVE_TOOL_GROUPS and its forward to the subagent daemon,
tool_groups.rs, ruth's tool-group seed, the permissions rebuild job
(PermPayload/WritePermFile/perm_change), the dashboard permissions tab
and its stale-entries panel.
Part of #5170 .
2026-10-15 18:01:40 +02:00
review-classifier: say the 25-line context shows a gate only when it's within 25 lines
2026-10-15 12:43:12 +02:00
matrix: back up agents' room keys with a controller-minted recovery passphrase
2026-10-14 02:09:57 +02:00
swarm-controller: the review classifier reads a diff with 25 lines of context, not 200
2026-10-15 12:43:12 +02:00
swarm: cancel an agent's turn from the swarm queue
2026-10-15 08:26:46 +02:00
swarm: let an agent publish its own icon
2026-09-28 13:47:37 +02:00
swarm-secret-client: agents may list their own subtree; controller rewrites agent policies
2026-10-01 17:43:28 +02:00
swarm: cancel an agent's turn from the swarm queue
2026-10-15 08:26:46 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
swarm-queue-client: re-read a held OIDC client secret when the IdP refuses it
2026-10-13 19:16:04 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up
2026-10-15 13:26:29 +02:00
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
swarm-controller: fall back to the forge diff when a file read fails, and stop rendering at the cap
2026-10-15 12:43:12 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
Guard the creation roll-back by revision
2026-10-15 13:47:14 +02:00
swarm-controller: bound the issue-report forge calls with the forge deadline
2026-10-15 13:30:34 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
swarm-queue-client: request the bearer-authz scope when minting an agent token
2026-09-17 09:51:44 +02:00
swarm-ui, swarm-controller: the review try-out's repo and PR fields offer the repos and PRs to pick
2026-10-12 19:05:37 +02:00
swarm-queue-client: re-read a held OIDC client secret when the IdP refuses it
2026-10-13 19:16:04 +02:00
swarm-secret-client: agents may list their own subtree; controller rewrites agent policies
2026-10-01 17:43:28 +02:00
swarm-controller: the review classifier reads a diff with 200 lines of context
2026-10-15 12:43:12 +02:00
Disambiguate the write link in the revision-writing helper's doc
2026-10-15 13:47:14 +02:00
swarm-controller: make status::render/row pub(crate) so agent_status.rs's doc links resolve
2026-09-02 10:20:29 +02:00
fix doc-comment pointers broken by the module-eval split
2026-09-20 04:31:08 +02:00
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
swarm-controller: let each test nats-server bind its own port
2026-10-14 16:33:19 +02:00
swarm CA: describe the store's pki root as the only anchor in docs and comments
2026-10-05 21:17:10 +02:00
swarm-controller: first credential-renewal pass waits for the queue connection
2026-09-30 15:46:56 +02:00
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
f0844f6da3