vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity
hyperhive/swarm-queue-client/src
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas e405c2b098 swarm-nats-auth: give issued user JWTs an exp 
The user JWT the callout issues carried no exp, so nats-server armed no
expiry timer and a connection kept its grant until the client dropped it:
a deleted or re-minted agent queue secret, a removed OIDC client or an
expired access token never reached a live connection.

Every issued user JWT now expires at the presented OIDC token's exp
(read from the introspection answer) or an hour after issue, whichever
is sooner; the agent queue-secret path has no exp of its own and gets
the hour. Every queue client reconnects through an auth callback that
re-reads or re-mints its credential, so the forced reconnect presents a
current one.

Fixes #5432
2026-10-17 16:29:55 +02:00
..
agent_archetype.rs archetypes: create an agent from an archetype with no config repo 2026-10-17 16:27:21 +02:00
agent_icon.rs hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create 2026-10-09 10:25:48 +02:00
agent_inference.rs swarm-ui: per-agent cap on concurrently running subagents 2026-10-14 10:13:29 +02:00
agent_limits.rs swarm-controller: refuse a cap systemd would ignore; GET creates no bucket 2026-10-12 20:22:21 +02:00
agent_login.rs swarm UI: an agent that needs a Claude login shows it on its card 2026-10-14 20:07:46 +02:00
agent_permissions.rs grant manage_root_agent by stored permission only, not by the name ruth 2026-10-17 08:10:08 +02:00
agent_schedules.rs hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create 2026-10-09 10:25:48 +02:00
agent_status.rs hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create 2026-10-09 10:25:48 +02:00
agent_term.rs swarm-controller: end a dead replay, clamp stale resume ids, test on a real server 2026-10-11 23:26:24 +02:00
agent_token.rs swarm-queue-client: one agent-token spelling, and no hive in AgentCredential 2026-09-28 08:24:52 +02:00
archetypes.rs archetypes: prefill the create form from flake-declared agent archetypes 2026-10-17 12:57:20 +02:00
builder.rs archetypes: prefill the create form from flake-declared agent archetypes 2026-10-17 12:57:20 +02:00
claude_login.rs swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up 2026-10-15 13:26:29 +02:00
kv.rs hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create 2026-10-09 10:25:48 +02:00
lib.rs swarm-nats-auth: give issued user JWTs an exp 2026-10-17 16:29:55 +02:00
notices.rs swarm-queue-client: drop notices::PREFIX, reuse STREAM 2026-08-24 14:34:37 +02:00
operator_profiles.rs keep the operator list under one key and read it with one direct get 2026-10-17 13:10:05 +02:00
review_classifier.rs review-classifier: ask a check once more when its answer isn't valid JSON 2026-10-16 16:55:07 +02:00
startup_read.rs retry: share one backon helper for the client secret reads and convert the remaining doubling tables 2026-10-17 12:31:29 +02:00
status.rs hive-c0re/swarm-*: drop clippy allows and dedupe unix_now + KV open_or_create 2026-10-09 10:25:48 +02:00
stored_secret.rs swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
subagent_term.rs swarm-controller: end a dead replay, clamp stale resume ids, test on a real server 2026-10-11 23:26:24 +02:00
wanted.rs swarm-controller: refuse a cap systemd would ignore; GET creates no bucket 2026-10-12 20:22:21 +02:00