vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

docs: three comments point at a nix directory that does not exist

Browse source 
`nix/templates/harness/` is cited from `send_allow.rs` and twice from
`mcp_config.rs`, in the present tense, as where the NixOS module writes
the send allow-list, writes the extra-MCP spec, and defines the MCP http
port default. There is no such directory — `nix/templates/` holds only
`agent.nix` and `ruth.nix`.

All three describe things that live in `nix/agent-modules/mcp.nix`:
send-allow.json is written at :230, extra-mcp.json at :228, and the
`hyperhive.mcp.httpPort` option is declared at :143.

These are the mechanical half of #3923, which explicitly carved the
repointing out from the question of whether the reference gate should
widen. Nothing here changes that question.
This commit is contained in:
atlas 2026-09-02 14:18:13 +02:00 • committed by mara
commit 576294012b
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hive-agent-mcp/src/send_allow.rs
View file

@ -5,7 +5,7 @@
//! a silent drop. //! a silent drop.
/// Where the NixOS module writes the per-agent send allow-list (see /// Where the NixOS module writes the per-agent send allow-list (see
/// `nix/templates/harness/`). Empty list = unrestricted (the /// `nix/agent-modules/mcp.nix`). Empty list = unrestricted (the
/// default). Non-empty list constrains `mcp__hyperhive__send`'s `to` /// default). Non-empty list constrains `mcp__hyperhive__send`'s `to`
/// field; the manager is always implicitly permitted regardless of /// field; the manager is always implicitly permitted regardless of
/// the list contents. /// the list contents.

4
hive-agent/src/mcp_config.rs
View file

@ -13,7 +13,7 @@ pub const SERVER_NAME: &str = "hyperhive";
/// Default loopback port the built-in hyperhive MCP surface is served on /// Default loopback port the built-in hyperhive MCP surface is served on
/// (streamable HTTP, via the persistent `hive-mcp-http` daemon). Overridable /// (streamable HTTP, via the persistent `hive-mcp-http` daemon). Overridable
/// via `hyperhive.mcp.httpPort`; **must match that option's default** in /// via `hyperhive.mcp.httpPort`; **must match that option's default** in
/// `nix/templates/harness/`. Safe as a single fixed value across all /// `nix/agent-modules/mcp.nix`. Safe as a single fixed value across all
/// agents because each container runs in its own private network namespace, /// agents because each container runs in its own private network namespace,
/// so `127.0.0.1:<port>` is per-container-private (no cross-agent collision). /// so `127.0.0.1:<port>` is per-container-private (no cross-agent collision).
pub const DEFAULT_MCP_HTTP_PORT: u16 = 8790; pub const DEFAULT_MCP_HTTP_PORT: u16 = 8790;
@ -242,7 +242,7 @@ pub fn builtin_tools_arg() -> String {
} }
/// Where the NixOS module writes the per-agent extra-MCP spec (see /// Where the NixOS module writes the per-agent extra-MCP spec (see
/// `nix/templates/harness/`). Each entry becomes an additional /// `nix/agent-modules/mcp.nix`). Each entry becomes an additional
/// `mcpServers.<key>` block in the rendered claude config + a /// `mcpServers.<key>` block in the rendered claude config + a
/// `mcp__<key>__<tool>` pattern in `--allowedTools`. /// `mcp__<key>__<tool>` pattern in `--allowedTools`.
const EXTRA_MCP_PATH: &str = "/etc/hyperhive/extra-mcp.json"; const EXTRA_MCP_PATH: &str = "/etc/hyperhive/extra-mcp.json";