diff --git a/nix/modules/hive-gateway.nix b/nix/modules/hive-gateway.nix index d73b5ce1..efc4ae39 100644 --- a/nix/modules/hive-gateway.nix +++ b/nix/modules/hive-gateway.nix @@ -8,6 +8,67 @@ let cfg = config.services.hyperhive.gateway; hyperhiveDomain = config.services.hyperhive.domain; matrixCfg = config.services.hyperhive.matrix; + + # Per-agent web port, mirroring `hive-c0re::lifecycle::agent_web_port` + # exactly so the gateway and the harness agree on what port to talk + # to without a runtime contract. The manager is fixed at + # `MANAGER_PORT`; every sub-agent is `WEB_PORT_BASE + FNV-1a(name) % + # WEB_PORT_RANGE`. Pure + reproducible from just the name, matches + # the rust constants line-for-line (lifecycle.rs:60-79). + # + # **Drift hazard**: if the rust constants change (MANAGER_PORT, + # WEB_PORT_BASE, WEB_PORT_RANGE, MANAGER_NAME, or the FNV-1a + # parameters), this nix copy must change in lockstep — otherwise + # `/agent//` requests get proxied to the wrong port. There's + # no automated cross-check today (#15 v0 follow-up: have c0re emit + # the port mapping as `/var/lib/hyperhive/agent-ports.json` and + # have this module read it via `lib.importJSON`, single-sourcing + # the table). + agentWebPortLib = + let + # ASCII char → byte code lookup, limited to chars valid in agent + # names (lowercase alpha, digits, dash, underscore). Names with + # other chars are an eval-time error rather than a silent wrong + # hash. Add entries here if hyperhive ever loosens the naming + # constraint. + charCode = { + "0" = 48; "1" = 49; "2" = 50; "3" = 51; "4" = 52; "5" = 53; + "6" = 54; "7" = 55; "8" = 56; "9" = 57; + "-" = 45; "_" = 95; + "a" = 97; "b" = 98; "c" = 99; "d" = 100; "e" = 101; + "f" = 102; "g" = 103; "h" = 104; "i" = 105; "j" = 106; + "k" = 107; "l" = 108; "m" = 109; "n" = 110; "o" = 111; + "p" = 112; "q" = 113; "r" = 114; "s" = 115; "t" = 116; + "u" = 117; "v" = 118; "w" = 119; "x" = 120; "y" = 121; + "z" = 122; + }; + + webPortBase = 8100; + webPortRange = 900; + managerPort = 8000; + managerName = "manager"; + + # nix uses signed 64-bit ints; mask each step to u32 to mirror + # rust's `u32::wrapping_mul`. FNV-1a constants identical to the + # rust version (offset basis 2_166_136_261, prime 16_777_619). + fnv1aU32 = + name: + let + chars = lib.stringToCharacters name; + mask32 = h: lib.bitAnd h 4294967295; + step = + acc: c: + mask32 ( + (lib.bitXor acc ( + charCode.${c} + or (throw "agent name '${name}' contains char '${c}' outside the [a-z0-9_-] alphabet — hyperhive.user.name constraint mismatch?") + )) + * 16777619 + ); + in + lib.foldl' step 2166136261 chars; + in + name: if name == managerName then managerPort else webPortBase + lib.mod (fnv1aU32 name) webPortRange; in { # Single nginx in front of every hyperhive surface (#609 / #15 v0). @@ -117,6 +178,49 @@ in around. Requires `services.hyperhive.domain` to be set. ''; }; + + agents = lib.mkOption { + type = lib.types.listOf lib.types.str; + default = [ ]; + example = [ + "iris" + "atlas" + "argus" + "damocles" + ]; + description = '' + Sub-agent names to expose at `http(s):///agent//` + through the gateway (#15 v0). For each name in the list, the + gateway adds a `location /agent//` block that + `proxy_pass`es to `http://127.0.0.1:/`, where `` is + derived from the same `agent_web_port(name)` hash hive-c0re + uses internally (`lifecycle.rs` constants + FNV-1a, replicated + in this module's `let` block). + + **Purely additive** — the old `http://:/` direct + reach still works in parallel; this just gives the operator a + single-origin route. Manager isn't included (no per-agent + prefix needed; manager already gets the `/` route via the + c0re upstream block). + + Empty list (default) leaves the gateway in its pre-#15 shape: + no per-agent routes, only `/` (c0re) + `/matrix/` (fluffychat + when matrix is on) + `.well-known/matrix/*` (matrix + autodiscovery). + + Maintenance: this list is currently operator-managed (the + gateway runs at the host level, the agent list lives in the + meta-flake at runtime, and the host's nix eval doesn't see + the meta-flake's agent dirs). Follow-up tracked at #15: + either auto-derive from + `/var/lib/hyperhive/meta/topology.json` via `lib.importJSON` + in the gateway module (gives a single source of truth at the + cost of an eval-time impurity), or have c0re write an nginx + snippet that the container `include`s + reloads on topology + change (decouples from rebuilds entirely; also handles the + eventual move to per-agent unix sockets). + ''; + }; }; config = lib.mkIf cfg.enable { @@ -248,6 +352,49 @@ in ''; }; } + // + # Per-agent UIs (#15 v0). One `/agent//` + # block per name in `services.hyperhive.gateway.agents`, + # proxying to the agent's harness web server on + # `127.0.0.1:` where `` comes from the + # `agentWebPortLib` FNV-1a hash (matches + # `lifecycle::agent_web_port` line-for-line). + # + # Trailing-slash pair (`/agent//` + `proxy_pass + # http://...:/`) strips the `/agent/` + # prefix on the upstream side, so the agent server + # receives `GET /` for the SPA root, `GET /api/state` + # for the API, `GET /screen/ws` for the websocket, etc. + # The agent's emitted asset URLs are document-relative + # (iris's #731) so they round-trip back through the + # gateway under the same prefix without the harness + # needing prefix-awareness. + # + # `X-Forwarded-Prefix` set so the harness can build + # correct absolute URLs for any case where relative + # isn't enough (server-emitted redirects, OG meta + # tags, etc.). + # + # SSE / websocket support via `proxyWebsockets = true` + # (same as the c0re `/` block below). + # + # Empty `cfg.agents` list → empty attrset → no + # per-agent blocks; old `:/` direct reach + # still works. + builtins.listToAttrs ( + builtins.map (name: { + name = "/agent/${name}/"; + value = { + proxyPass = "http://127.0.0.1:${toString (agentWebPortLib name)}/"; + proxyWebsockets = true; + extraConfig = '' + proxy_set_header X-Forwarded-Prefix /agent/${name}; + proxy_buffering off; + proxy_read_timeout 1d; + ''; + }; + }) cfg.agents + ) // { # Everything else proxies to hive-c0re. Upgrade # headers stay set so SSE (`/dashboard/stream`,