mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

hive-agent-mcp: the send allow-list is gone, agents talk to peers over matrix

Browse source
This commit is contained in:
damocles 2026-11-06 23:28:05 +01:00 • committed by mara
commit c1f7bb798e
1 changed files with 14 additions and 97 deletions
Download patch file Download diff file Expand all files Collapse all files

12
nix/agent-modules/default.nix
View file

@ -34,6 +34,12 @@ let
sets it. Pin it host-side with
services.hyperhive.deploy.hive-controller.claudeCodePackage.
'';
sendAllowRemoved = ''
The `send` allow-list is gone: it limited only the hive-local `send` tool,
which is not the channel agents use to reach peers, and it was never a
boundary. Agents talk to peers over matrix. Remove the setting.
'';
queueRemoved = ''
The harness reads the queue's address at runtime from HIVE_AGENT_NATS_URL,
in /etc/hyperhive-hive-facts, and authenticates with the
@ -115,6 +121,12 @@ in
"agent"
"claudeCodePath"
] claudeCodePathRemoved)
(lib.mkRemovedOptionModule [
"services"
"hyperhive"
"agent"
"allowedRecipients"
] sendAllowRemoved)
(lib.mkRemovedOptionModule [ "services" "hyperhive" "agent" "queue" "natsUrl" ] queueRemoved)
(lib.mkRemovedOptionModule [ "services" "hyperhive" "agent" "queue" "tokenEndpoint" ] queueRemoved)
];