hive-agent-mcp: the send allow-list is gone, agents talk to peers over matrix

nix/agent-modules/mcp.nix

@@ -22,27 +22,6 @@ let
   subagentReadsStore = config.services.hyperhive.agent.bao.addr != null;
 in
 {
-  options.services.hyperhive.agent.allowedRecipients = lib.mkOption {
-    type = lib.types.listOf lib.types.str;
-    default = [ ];
-    example = [
-      "alice"
-      "bob"
-    ];
-    description = ''
-      Names this agent is allowed to `send` to via
-      `mcp__hyperhive__send`. Empty list (the default) means
-      unrestricted — the agent can message any peer. A non-empty list
-      allows only the listed names; anything else returns an error
-      string to claude without touching the broker.
-      `operator` is refused either way: agents reach the operator
-      over matrix.
-
-      Useful for sandboxing untrusted sub-agents — set
-      `[ "alice" ]` to scope one to chatter with alice.
-    '';
-  };
-
   options.services.hyperhive.agent.extraMcpServers = lib.mkOption {
     type = lib.types.attrsOf (
       lib.types.submodule {
@@ -304,9 +283,6 @@ in
     environment.etc."hyperhive/extra-mcp.json".text =
       builtins.toJSON config.services.hyperhive.agent.extraMcpServers;
 
-    environment.etc."hyperhive/send-allow.json".text =
-      builtins.toJSON config.services.hyperhive.agent.allowedRecipients;
-
     # Bash task runner daemon — long-running process that owns subprocess
     # monitoring + completion wake signals, and serves the MCP tools
     # (`run`/`status`/`kill`) directly over streamable-http on