hive-sh4re/lib.rs: scrub remaining self-ref cookies (#717 batch 9 final)

This commit is contained in:
iris 2026-05-31 16:26:50 +02:00 committed by mara
commit c058558a2a

View file

@ -484,8 +484,8 @@ pub const OPERATOR_RECIPIENT: &str = "operator";
/// by hive-c0re at delivery time to whoever `topology::parent_of(sender)`
/// returns, or to [`OPERATOR_RECIPIENT`] when the sender is a root agent
/// (no parent). Lets agents address their parent without hardcoding the
/// label, so runtime reparenting (#486) requires no agent-side restart.
/// The angle brackets are not valid in agent names (validators reject
/// label, so runtime reparenting requires no agent-side restart. The
/// angle brackets are not valid in agent names (validators reject
/// `<`/`>`), so this name can never collide with a real recipient.
pub const PARENT_RECIPIENT: &str = "<parent>";
@ -752,15 +752,15 @@ pub enum ManagerRequest {
#[serde(default, skip_serializing_if = "Option::is_none")]
description: Option<String>,
},
/// Queue an approval to add a scheduled prompt (#444). The
/// requester (caller of this request) is recorded as the schedule
/// owner; on operator approval hive-c0re inserts the schedule and
/// the worker fans the body out at fire time. Even agent-self
/// schedules go through approval — the existing `remind` MCP tool
/// is the unapproved self-wake path.
/// Queue an approval to add a scheduled prompt. The requester
/// (caller of this request) is recorded as the schedule owner; on
/// operator approval hive-c0re inserts the schedule and the worker
/// fans the body out at fire time. Even agent-self schedules go
/// through approval — the existing `remind` MCP tool is the
/// unapproved self-wake path.
RequestSchedulePrompt(SchedulePromptPayload),
/// Cancel a scheduled prompt (#444). `targets = None` cancels the
/// whole schedule; `Some(list)` cancels just those recipients,
/// Cancel a scheduled prompt. `targets = None` cancels the whole
/// schedule; `Some(list)` cancels just those recipients,
/// auto-cancelling the parent when no active targets remain.
/// Authorization: manager can cancel its own schedules + any
/// sub-agent schedules (i.e. owner reachable via topology); the
@ -774,16 +774,16 @@ pub enum ManagerRequest {
/// unfiltered — the dashboard does the topology-filter for the
/// per-agent view.
ListSchedules,
/// Fire a scheduled prompt out of band (#467). Runs the
/// per-target fan-out once immediately without touching
/// Fire a scheduled prompt out of band. Runs the per-target
/// fan-out once immediately without touching
/// `next_fire_at_unix` on recurring schedules; one-shots are
/// consumed by the manual fire. Authorization mirrors
/// `CancelSchedule`: the manager can fire its own schedules and
/// any owned by a sub-agent in its subtree per topology.json;
/// the operator surface bypasses the check.
FireScheduleNow { id: i64 },
/// Edit an existing schedule's mutable fields (#474). Partial
/// PATCH semantics: `None` / missing JSON key = leave alone,
/// Edit an existing schedule's mutable fields. Partial PATCH
/// semantics: `None` / missing JSON key = leave alone,
/// `Some(_)` = set. `interval_seconds` and `description` are
/// doubly-wrapped so `Some(None)` (set explicit null) can flip
/// a recurring schedule back to one-shot / clear the
@ -906,8 +906,8 @@ pub enum ManagerResponse {
Logs {
content: String,
},
/// `ListSchedules` result (#444). Snapshot of every schedule
/// (active + cancelled-but-not-yet-reaped); the dashboard does the
/// `ListSchedules` result. Snapshot of every schedule (active +
/// cancelled-but-not-yet-reaped); the dashboard does the
/// per-agent topology filter on top.
Schedules {
schedules: Vec<WireSchedule>,