drop the manager socket, the no-op migrate branch and other ruth special cases
start_manager bound the same path register_agent binds. The migrate branch, hive-priv-sock::MANAGER_NAME and MANAGER_CONTAINER were no-ops or dead. The send allow-list docs promised a manager exemption the code never had. Tests that used ruth as the manager fixture use plain names.
This commit is contained in:
parent
df2394963a
commit
746c522f4e
16 changed files with 36 additions and 117 deletions
|
|
@ -27,23 +27,19 @@ in
|
|||
default = [ ];
|
||||
example = [
|
||||
"alice"
|
||||
"manager"
|
||||
"bob"
|
||||
];
|
||||
description = ''
|
||||
Names this agent is allowed to `send` to via
|
||||
`mcp__hyperhive__send`. Empty list (the default) means
|
||||
unrestricted — the agent can message any peer or the
|
||||
manager. Non-empty list constrains the
|
||||
surface: only the listed names + the manager (always
|
||||
allowed) get through; anything else returns an error
|
||||
unrestricted — the agent can message any peer. A non-empty list
|
||||
allows only the listed names; anything else returns an error
|
||||
string to claude without touching the broker.
|
||||
`operator` is refused either way: agents reach the operator
|
||||
over matrix.
|
||||
|
||||
Useful for sandboxing untrusted sub-agents — set
|
||||
`[ "manager" ]` to scope them to manager-only chatter.
|
||||
The manager itself is always exempt; this option only
|
||||
affects sub-agent `send`.
|
||||
`[ "alice" ]` to scope one to chatter with alice.
|
||||
'';
|
||||
};
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue