Merge pull request 'The runtime hears on its own inbox' (#17 ) from fix/the-runtime-hears-on-its-own-inbox into main

The runtime hears on its own inbox
Every user's inbox is private to it and the grant names it; a reply space the client invented was refused, and with it every pull for the next message and every answer to a tool call.
2026-09-28 02:30:24 +00:00 · 2026-09-28 04:30:22 +02:00 · 2026-09-28 02:03:46 +00:00
1 changed files with 4 additions and 0 deletions
@@ -85,6 +85,10 @@ export async function connectNats(
    pass: cred.password,
    name: `${cred.node ?? "?"}.${self}`,
    tls: cred.fingerprint ? await pinnedTls(cred.url, cred.fingerprint) : undefined,
+    // Its own inbox, not a random one: every user's inbox is private to it (design 25 §4), and the
+    // grant names `_INBOX.<user>.>` — a reply space the client invented would be refused, and with
+    // it every pull for the next message and every answer to a tool call.
+    inboxPrefix: cred.user ? `_INBOX.${cred.user}` : undefined,
    // Reconnect forever: the bus being restarted is an upgrade, not a reason for every module on
    // the mesh to exit. `close()` stays the only thing that ends the connection.
    maxReconnectAttempts: -1,
Author	SHA1	Message	Date
mesh-admin	10e8191717	Merge pull request 'The runtime hears on its own inbox' (#17 ) from fix/the-runtime-hears-on-its-own-inbox into main	2026-09-28 02:30:24 +00:00
jschoubben	d703cebff4	The runtime hears on its own inbox Every user's inbox is private to it and the grant names it; a reply space the client invented was refused, and with it every pull for the next message and every answer to a tool call.	2026-09-28 04:30:22 +02:00
mesh-admin	46b56d53a6	Merge pull request 'The pin is the only check: the runtime stops verifying the bus's name' (#16 ) from fix/the-pin-is-the-only-check into main	2026-09-28 02:03:46 +00:00