23 Commits

Author SHA1 Message Date
jenkins
9d42ff33f5 Merge origin/main (#16 image-builder) into hermes-safe-gitea-pr
Resolve 8 conflicts, uniting #16's daemonless image-release lane with
#14's SCM broker + node-audit boundary. Nothing dropped from either side.

- quality_coverage.py / test_quality_coverage_helpers.py: take main's
  dual-metric gate (line+branch enforced per file at minimum_percent);
  drop #14's now-dead branch_tracked_files/minimum_branch_percent keys.
- quality_contract.json: union all lists (managed_modules, lint_paths,
  coverage_sources, tracked_files, hygiene globs) so #14's scm-broker,
  git_pack_objects, receive_pack_scan, deadline_http and node_polkit_audit
  are branch-checked alongside #16's image-builder modules.
- Vault auth (vault_k8s_auth_configure.sh): coexist both role sets. Keep
  #16's hermes-switchyard split + hermes-jenkins-token-seed; keep #14's
  hermes-scm-broker role. Preserve #14's security property: hermes-agent
  no longer holds developer-gitea (broker role carries it).
- agent-deployment.yaml / stage_runtime_access.py: keep #16's
  jenkins-image-build-token injection/staging; keep #14's removal of the
  agent's gitea-token/gitea-username.
- Bump vault-k8s-auth-hermes job -9 -> -10 (and its health check + test)
  so the merged auth config re-applies over any -9 already in-cluster.
- flux hermes dependsOn: union jenkins + hermes-scm-broker + observer-rbac.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-17 21:07:06 -03:00
jenkins
e8c26ecf85 hermes: add daemonless agent image release lane 2026-08-17 08:25:52 -03:00
jenkins
8c6e3acdac hermes: isolate Atlas SCM write authority 2026-08-17 07:58:44 -03:00
jenkins
89b9f1a4c7 hermes: isolate runtime access and expose activity 2026-08-15 22:15:40 -03:00
jenkins
0843b24625 flux: tolerate offline Hermes access targets 2026-08-15 14:05:40 -03:00
jenkins
d27a9649cf hermes: secure node access and expose live workers 2026-08-15 13:58:42 -03:00
jenkins
046dd6fae4 hermes: activate Telegram and isolate corrupt boards 2026-08-13 12:24:35 -03:00
jenkins
ea015ca787 flux(hermes): retire recovery reconciler 2026-08-13 05:18:49 -03:00
jenkins
abd31a86df flux(hermes): recover blocked router rollout 2026-08-13 05:14:20 -03:00
jenkins
28449b7bc5 flux(hermes): bound rollout health waits 2026-08-13 05:11:35 -03:00
jenkins
cd28f5b5cc hermes: make Telegram setup actionable 2026-08-13 04:52:04 -03:00
jenkins
422f001a93 hermes: make Switchyard the routing authority 2026-08-11 20:22:26 -03:00
jenkins
0922531908 flux(hermes): drop retired Ollama health check 2026-08-11 05:57:22 -03:00
jenkins
377817606b flux(hermes): track owner oauth sidecar health 2026-08-10 21:29:41 -03:00
jenkins
812a2c2ca1 fix(flux): let Hermes auxiliary fixes advance 2026-08-10 00:53:04 -03:00
jenkins
bb73efb285 feat(hermes): split chat agent and triage surfaces 2026-08-08 17:59:57 -03:00
jenkins
5f4bdc6e7e ai(hermes): add isolated user chat instance 2026-08-02 02:31:01 -03:00
jenkins
91d4d98e2e gpu(titan-24): add Hermes local-first fallback handoff 2026-08-01 22:50:58 -03:00
jenkins
307f91028c agent: keep Hermes health independent of Traefik 2026-07-21 21:51:20 -03:00
jenkins
cad0bdee0e agent: decouple Hermes from retired OpenClaw 2026-07-21 21:47:14 -03:00
jenkins
a481a5e2d1 agent: let Flux update Hermes child spec 2026-07-21 21:32:12 -03:00
jenkins
dd469f3e7a agent: reset Hermes rollout window 2026-07-21 21:29:46 -03:00
jenkins
880736b4ff agent: replace OpenClaw with Hermes 2026-07-21 21:02:44 -03:00