anti d1b7e94325 fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44 ...

Uvicorn's h11/httptools HTTP protocols don't populate scope['extensions']['tls'], so /swarm/heartbeat's per-request cert pinning was 403ing every call despite CERT_REQUIRED validating the cert at handshake. Patch RequestResponseCycle.__init__ on both protocol modules to read the peer cert off the asyncio transport and write DER bytes into scope['extensions']['tls']['client_cert_chain']. Importing the module from swarm_api.py auto-installs the patch in the swarmctl uvicorn worker before any request is served.

2026-04-19 22:09:11 -04:00

..

db

feat(swarm): agent→master heartbeat with per-host cert pinning

2026-04-19 21:37:15 -04:00

router

feat(swarm): ship host_uuid + swarmctl-port in agent enroll bundle

2026-04-19 21:44:23 -04:00

templates

feat(swarm): unbundle master-only code from agent tarball + sync systemd units on update

2026-04-19 19:19:17 -04:00

_uvicorn_tls_scope.py

fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44

2026-04-19 22:09:11 -04:00

api.py

perf: migrate hot-path JSON serialization to orjson

2026-04-17 15:07:28 -04:00

auth.py

perf: run bcrypt on a thread so it doesn't block the event loop

2026-04-17 14:52:22 -04:00

dependencies.py

chores: fix linting

2026-04-18 06:46:10 -04:00

ingester.py

perf(ingester): batch log writes into bulk commits

2026-04-17 16:37:34 -04:00

swarm_api.py

fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44

2026-04-19 22:09:11 -04:00