vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity
hyperhive/hive-agent/src
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 52037133e2 swarm-nats-auth: limit agent subscribe to its own inbox and input 
An agent's queue credential could subscribe to every subject in the swarm
account, so any agent could read every other agent's terminal, turn state,
operator input and request replies. Agents are the least trusted clients
on the queue (mara's ruling on #4901), so their grants now carry a
subscribe allow-list:

- an agent's own credential (the harness and its subagent daemon):
  `_INBOX.agent.<agent>.>` and `$SWARM.input.<agent>`
- the hive's shared agent client: `_INBOX.client.<client-id>.>`

Hive and swarm-controller grants are unchanged (no `sub` claim, so still
every subject).

The clients connect with the matching inbox prefix, so the replies they
rely on still arrive: the icon write's JetStream ack and the schedule
DIRECT.GET. `connect_with_token` takes the agent name and sets the prefix
itself; the hive-shared fallback uses the new
`connect_with_inbox_prefix`.

The harness no longer subscribes to its input subject when it fell back
to the hive's shared client: that identity names no agent, so it cannot
be granted one agent's input without all of them. It logs that and
skips, the same as the schedule reader on that path.

Refs #4901
2026-10-04 19:22:41 +02:00
..
web_ui hive-runtime, hive-agent: clear the ACP picker's pending model on a refusal 2026-09-30 14:54:39 +02:00
boot_announce.rs hive-agent: only wake the boot-announce todo when it actually changed 2026-10-04 19:16:59 +02:00
claude_md_watch.rs hive-agent: warn + emit an OTEL gauge on a grown CLAUDE.md 2026-08-26 18:34:36 +02:00
claude_usage_watch.rs hive-agent: warn on usage responses with no recognisable windows 2026-09-30 20:53:03 +02:00
db_migrate.rs todos: reopen an acked keyed row when the caller says so 2026-08-13 12:55:20 +02:00
disk_watch.rs disk_watch: drop bare tracker tag from test doc-comment 2026-10-04 15:18:32 +02:00
events.rs hive-runtime, hive-agent: model/effort picker for ACP agents from configOptions 2026-09-30 10:53:53 +02:00
harness_state.rs hive-c0re: render the new agent option paths into generated agent flakes 2026-09-17 20:19:30 +02:00
identity.rs docs: restructure into topic subdirectories, collapse duplicated index 2026-09-02 01:55:37 +02:00
login.rs hive-c0re: render the new agent option paths into generated agent flakes 2026-09-17 20:19:30 +02:00
login_session.rs refactor(#2464): rename hive-ag3nt crate to hive-agent, collapse lib into main 2026-07-15 16:09:39 +02:00
main.rs hive-agent: self-announce boot instead of host-side kick_agent 2026-10-04 19:16:59 +02:00
mcp_config.rs remove the get_host_journal MCP tool and its capability 2026-09-21 19:31:45 +02:00
otel_turn_metrics.rs hive-agent: export ACP-reported cost and context fill over OTLP 2026-09-30 22:24:06 +02:00
paths.rs docs: restructure into topic subdirectories, collapse duplicated index 2026-09-02 01:55:37 +02:00
plugins.rs topology: drop the parent field and the hierarchy it fed 2026-09-21 22:08:47 +02:00
prompt.rs hive-c0re: render the new agent option paths into generated agent flakes 2026-09-17 20:19:30 +02:00
reminder_timer.rs docs/hive-c0re: fix ask/answer removal doc gaps argus caught on #3741 2026-08-30 03:02:31 +02:00
reminders.rs hive-sh4re: split approval-queue schema into its own topic module 2026-08-10 23:05:18 +02:00
schedule_timer.rs swarm: named scheduled prompts for one or more agents, fired in each agent 2026-10-04 17:24:57 +02:00
serve_common.rs hive-agent: dashboard Cancel and idle stalls for ACP agents 2026-09-29 23:25:48 +02:00
state_entry_watch.rs fix hint text per argus review: group into subdirs, not split into more top-level files 2026-08-18 22:07:05 +02:00
stats.rs hive-sh4re: split approval-queue schema into its own topic module 2026-08-10 23:05:18 +02:00
swarm_agent_icon.rs swarm: let an agent publish its own icon 2026-09-28 13:47:37 +02:00
swarm_agent_state.rs hive-agent: present this agent's own queue credential, then fall back 2026-09-28 08:24:52 +02:00
swarm_input.rs swarm-nats-auth: limit agent subscribe to its own inbox and input 2026-10-04 19:22:41 +02:00
swarm_queue.rs swarm-nats-auth: limit agent subscribe to its own inbox and input 2026-10-04 19:22:41 +02:00
swarm_term.rs swarm: show subagent terminals in the swarm UI 2026-10-03 01:34:01 +02:00
term_msg.rs swarm: show subagent terminals in the swarm UI 2026-10-03 01:34:01 +02:00
todo_server.rs hive-sh4re: one saturating_age for every loose-end producer 2026-09-02 14:20:25 +02:00
todos.rs todos: reopen an acked keyed row when the caller says so 2026-08-13 12:55:20 +02:00
turn.rs hive-runtime: compact ACP sessions through the agent's compact command 2026-09-30 07:41:47 +02:00
turn_stats.rs swap hive-claude to the crates.io registry dependency (#2931) 2026-08-02 14:19:26 +02:00
vacuum.rs docs: restructure into topic subdirectories, collapse duplicated index 2026-09-02 01:55:37 +02:00