vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

harden hive-mcp-http: restart=always + document failure-mode/port-collision (atlas review)

Browse source
This commit is contained in:
damocles 2026-07-01 18:31:31 +02:00 • committed by mara
commit a05d093d19
1 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

18
nix/templates/harness-base.nix
View file

@ -853,6 +853,17 @@ in
`allowed_hosts` (`localhost` / `127.0.0.1` / `::1`) rejects Host
headers from anywhere else, so no auth token is required for a
container-local endpoint.
Failure-mode note: enabling this flips the MCP surface from a
transient self-healing race (stdio child re-registers each turn)
to a hard dependency on the `hive-mcp-http` daemon's uptime — while
it's up there is no race ever, but while it's down claude hits a
dead URL with no stdio fallback until the unit restarts (guarded by
`Restart=always`, `RestartSec=3`). Net-better when up; operators
should know the signature flips from "flaps + recovers" to "dead
until the unit restarts". Also pick a port unique per host: two
agents sharing a host that both set the same `httpPort` collide on
bind and the loser Restart-loops.
'';
};
@ -1757,7 +1768,12 @@ in
serviceConfig = {
ExecStart = "${pkgs.hyperhive}/bin/hive mcp --http 127.0.0.1:${toString config.hyperhive.mcp.httpPort}";
SyslogIdentifier = "hive-mcp-http";
Restart = "on-failure";
# `always` (not `on-failure`): this endpoint is load-bearing when
# `httpPort` is set — a down window is total hyperhive-MCP loss with
# no stdio fallback and no per-turn self-heal (the URL just stays
# dead). `always` also covers any unforeseen clean-return path and
# restarts after a stray SIGTERM stops it out from under the harness.
Restart = "always";
RestartSec = 3;
User = userName;
Group = userName;