pub fn invalidate_cached_token(agent_id: &str, mstore: &Arc<Store>)Expand description
Clear a per-agent credential’s cached access token — called by cloud_subscriber when a request using it comes back 401 even though the credential looked locally valid (revoked/rotated server-side out-of-band). Without this, the next InjectAvailable round retries the exact same rejected token forever. Best-effort: a store error here just means the stale token survives until its local expiry, matching the pre-existing failure mode rather than introducing a new one. reagentx P1 on PR #2342.