Watch
0
0
Fork
You've already forked hyperhive
0

agent: say claude-code is only on PATH for the claude runtime in acp.command

This commit is contained in:
atlas 2026-11-04 21:02:49 +01:00
commit 3cc4fdb54c

View file

@ -133,7 +133,10 @@ at the container level to allowlist `claude-code` specifically —
scoped, only this one package, because each per-agent
`nixosConfiguration` evaluates its own nixpkgs instance and the
operator's host-level `allowUnfree` does **not** propagate in.
Operators don't need to set anything on their side.
Operators don't need to set anything on their side. Only `runtime = "claude"`
agents get `claude` and the allowance; an ACP agent whose `acp.command`
needs `claude` adds `pkgs.claude-code` and
`nixpkgs.config.allowUnfreePackages = [ "claude-code" ]` itself.
That same isolation is why an agent can't pick a claude out of a
_different_ nixpkgs by itself: a container only ever sees the one