agents: drop root, run as per-agent unix user with passwordless sudo (#658)

2026-05-30 21:14:46 +02:00 · 2026-05-30 21:14:46 +02:00 · 6b6c6775ee
commit 6b6c6775ee
parent 71211e5722
10 changed files with 349 additions and 71 deletions
--- a/CLAUDE.md
+++ b/CLAUDE.md
@ -184,7 +184,8 @@ hive-ag3nt/        in-container harness crate; produces TWO binaries
                         `label()` / `qualified_label()` / `qualify(label)`.
                         Reads `HYPERHIVE_HIVE_DOMAIN`; falls back to short
                         name when unset.
-  src/login.rs          probe /root/.claude/ for a valid session
+  src/login.rs          probe $HOME/.claude/ (post-#658 `/home/<agent>/.claude`)
+                         for a valid session
  src/login_session.rs  drives `claude auth login` over stdio pipes
  src/prompt.rs         system prompt renderer: filters the unified
                         template through `<!-- role:agent -->` /