0e9b1c563d
Third and last of #2860's agent-facing URL fallbacks. The operator's ruling was "any special casing is done on the nix side - same binaries, no hard coded fallback", so the default is deleted rather than replaced. Every layer guessed the same wrong thing, and each guess was only ever correct for a process sharing the host netns: - nix/agent-modules/matrix.nix: matrixUrlDefault = localhost:8008, both as the option's default and as a sentinel the daemon unit compared against to decide whether to write HIVE_MATRIX_URL. Now nullOr str, default null, the guard is != null, and the doc says what forge.url's already says: null means "no matrix", not "guess one". - nix/host-modules/hive-c0re/environment.nix: forwarded http://127.0.0.1:<port> when no gatewayHost was set. hive-c0re shares the host netns so it reads as harmless, but the value is handed to agents, which do not -- there it names the agent itself. Now forwarded only when there is a gateway vhost to name, matching the guard HIVE_MATRIX_PUBLIC_URL already uses twelve lines below. - hive-matrix-mcp: paths::DEFAULT_HOMESERVER was the same address compiled in, so dropping the nix defaults alone would have left the daemon dialling loopback inside the agent's own netns -- the very bug, one layer down. homeserver_url() is now Option, and an account with no homeserver is skipped with a log, exactly as one with no token is. discover_token_accounts already refused to guess for the same reason. Two comments taught the assumption back to the next reader ("shared host netns means every agent container resolves localhost to the same machine"); both now say which side of the netns boundary they describe. MATRIX_HTTP keeps its value -- hive-c0re really does share the host netns -- but no longer claims agents do. Gated with nix eval against the extended agent-base config, as a pair: with no url set the daemon unit carries no HIVE_MATRIX_URL, and with one set it carries exactly that. Either check alone passes on a broken guard.
59 lines
2.5 KiB
Rust
59 lines
2.5 KiB
Rust
//! Per-agent filesystem paths used by `hive-matrix-daemon`.
|
|
//!
|
|
//! All paths are overridable via env vars for dev / test scenarios and
|
|
//! to let the harness point the daemon at non-default locations when
|
|
//! the operator overrides `hyperhive.matrix.*` options.
|
|
|
|
use std::path::PathBuf;
|
|
|
|
/// Resolve the matrix access-token file path. Override via
|
|
/// `HIVE_MATRIX_TOKEN_FILE`; default is `<HYPERHIVE_STATE_DIR>/matrix-token`,
|
|
/// the path `hive-c0re::matrix::ensure_user_for` writes to on agent
|
|
/// account provisioning.
|
|
#[must_use]
|
|
pub fn token_file() -> PathBuf {
|
|
if let Some(p) = std::env::var_os("HIVE_MATRIX_TOKEN_FILE") {
|
|
return PathBuf::from(p);
|
|
}
|
|
let state_dir = std::env::var("HYPERHIVE_STATE_DIR").unwrap_or_default();
|
|
PathBuf::from(format!("{state_dir}/matrix-token"))
|
|
}
|
|
|
|
/// Resolve the homeserver URL from `HIVE_MATRIX_URL`, or `None` when the
|
|
/// harness didn't set one.
|
|
///
|
|
/// There is deliberately no built-in default. A hardcoded `localhost:8008`
|
|
/// used to stand in here, on the reasoning that the tuwunel container shares
|
|
/// the host netns — but *this daemon runs inside an agent*, which does not, so
|
|
/// that address named the agent itself. Unset means the hive has no homeserver
|
|
/// to offer this agent, and the daemon no-ops exactly as it does without a
|
|
/// token; guessing would be a value that starts fine and then talks to the
|
|
/// wrong machine.
|
|
#[must_use]
|
|
pub fn homeserver_url() -> Option<String> {
|
|
std::env::var("HIVE_MATRIX_URL").ok()
|
|
}
|
|
|
|
/// Persistent sqlite store directory for matrix-sdk's state (event
|
|
/// cache, devices, etc.). Lives under the per-agent state dir so it
|
|
/// survives container restart but gets wiped on `destroy --purge`.
|
|
#[must_use]
|
|
pub fn matrix_state_dir() -> PathBuf {
|
|
let state_dir = std::env::var("HYPERHIVE_STATE_DIR").unwrap_or_default();
|
|
PathBuf::from(format!("{state_dir}/matrix-sdk-state"))
|
|
}
|
|
|
|
/// Resolve the live-accounts snapshot file the daemon writes after
|
|
/// startup restores. Override via `HIVE_MATRIX_ACCOUNTS_FILE`; default
|
|
/// is `<HYPERHIVE_STATE_DIR>/matrix-accounts.json` — the host-visible
|
|
/// per-agent state dir (sibling to `matrix-token`) that hive-c0re's
|
|
/// dashboard reads to backfill live up/down status + the effective
|
|
/// homeserver for each provisioned account.
|
|
#[must_use]
|
|
pub fn accounts_file() -> PathBuf {
|
|
if let Some(p) = std::env::var_os("HIVE_MATRIX_ACCOUNTS_FILE") {
|
|
return PathBuf::from(p);
|
|
}
|
|
let state_dir = std::env::var("HYPERHIVE_STATE_DIR").unwrap_or_default();
|
|
PathBuf::from(format!("{state_dir}/matrix-accounts.json"))
|
|
}
|