vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

module-eval: restore seven zero-cost literal-pin cases

Browse source 
Refs #5379
This commit is contained in:
atlas 2026-10-16 20:38:40 +02:00 • committed by mara
commit e7a46d9728
5 changed files with 54 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
nix/module-eval/agent-user.nix
View file

@ -26,6 +26,25 @@ let
(agentWith { services.hyperhive.agent.user.name = "iris"; })
.system.activationScripts.hive-agent-user-migrate.text;
cases = [
{
# hive-c0re creates the host work dir as hive-core; this activation is
# the only thing that lets the agent write to it.
name = "the agent's activation hands its own work dir to the agent user";
ok =
lib.hasInfix ''if [ "$(stat -c %U "/agents/$userName/work")" != "$userName" ]; then'' migrate
&& lib.hasInfix ''heal_own_dir "/agents/$userName/work"'' migrate;
}
{
# The helper is the only recursive chown of these dirs; it must hand the
# tree to the agent user and log a failure rather than discard it.
name = "the agent's activation hands state, harness and .claude to the agent user, logging failures";
ok =
lib.hasInfix ''chown -hR "$userName:$userName" "$1" 2>&1'' migrate
&& lib.hasInfix "could not chown $1 to $userName" migrate
&& lib.hasInfix ''heal_own_dir "/agents/$userName/state"'' migrate
&& lib.hasInfix ''heal_own_dir "/agents/$userName/harness"'' migrate
&& lib.hasInfix ''heal_own_dir "$homeDir/.claude"'' migrate;
}
{
# hive-priv creates the host socket dir `0751 root` and never chowns it,
# so this activation is the only thing that lets the harness bind there.