vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(turn-loop): dedupe matrix.url rationale, trim historical framing

Browse source
This commit is contained in:
iris 2026-08-15 11:54:37 +02:00 • committed by mara
commit c570da0932
1 changed files with 8 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

17
docs/turn-loop/config.md
View file

@ -50,8 +50,8 @@ hyperhive.user.passwordlessSudo = true; # default
Grants the per-agent unix user passwordless `sudo` (`NOPASSWD: ALL`). Grants the per-agent unix user passwordless `sudo` (`NOPASSWD: ALL`).
Enabled by default so claude's shell tools work for operations that Enabled by default so claude's shell tools work for operations that
need root inside the container (`systemctl`, package managers in dev need root inside the container (`systemctl`, package managers in dev
shells, etc.) — the same privilege surface the previous root-user shape shells, etc.) — the agent user gets root explicitly via `sudo` rather
had, now elevated explicitly rather than implicitly. than running as root itself.
Set to `false` for agents that should be strictly unprivileged. Set to `false` for agents that should be strictly unprivileged.
Any tool invocation that needs root then fails loudly with the standard Any tool invocation that needs root then fails loudly with the standard
@ -162,13 +162,12 @@ Override per-agent when an agent should talk to a different homeserver
— for example a remote hive's tuwunel reached over a VPN, or an — for example a remote hive's tuwunel reached over a VPN, or an
external Matrix server for a federation-only agent. external Matrix server for a federation-only agent.
**Defaults to `null`, meaning "no matrix" — for the same reason **Defaults to `null`, meaning "no matrix" — same reasoning as
`forge.url` does.** The homeserver may live on another host, and a `forge.url` above** (a loopback default would resolve inside the
loopback default resolves inside the agent's own netns to the agent, agent's own netns to the agent itself, not the homeserver). With
so it would be a value that evaluates fine and then talks to the wrong `null` the daemon has no homeserver and no-ops exactly as it does
machine. With `null` the daemon has no homeserver and no-ops exactly as without a token. The hive only forwards `HIVE_MATRIX_URL` when it
it does without a token. The hive only forwards `HIVE_MATRIX_URL` when actually has a matrix vhost to name, so `null` survives where a hive
it actually has a matrix vhost to name, so `null` survives where a hive
runs no homeserver, or where the agent modules are evaluated outside a runs no homeserver, or where the agent modules are evaluated outside a
hive. hive.