Module muxbus 

Modules

agent_credentials

Per-agent M2M Cognito credential fetch/cache — the client side of per-agent credential binding (the relay side is designed in the private cloud repo).

cloud_subscriber

Cloud push subscription — replaces per-agent polling with a single sidecar-level WebSocket to muxbus-ws.agentmux.ai.

delivery_status

Whether cloud (MuxBus) messages are reaching this channel’s agents, made visible: a sign-in that stops working, or a relay that can’t be reached, used to leave nothing but a log line while agents silently stopped getting review, CI and cross-machine messages.

discovery

AgentMux Cloud settings discovery (docs/specs/SPEC_CLOUD_SETTINGS_DISCOVERY_2026_09_27.md).

pkce

PKCE Authorization Code flow for Cognito desktop login.

relay

Outbound cloud relay — jekt delivery tier 4.

wan_lease

One live instance per agent across the WAN — the client side (docs/specs/SPEC_AGENT_SINGLE_LIVE_INSTANCE_2026_09_24.md Phase 5, §4.5).

wan_presence

Publish this install’s presence record to the account’s relay, so a signed-in phone off the LAN can list it (agentmux-mobile’s SPEC_FLEET_HOST_TAGS_AND_CLOUD_HOSTS_2026_10_06 §6.3).

wan_publish

Publish each agent’s WAN key to the account’s cloud key directory, certified by this install’s instance key (SPEC_WAN_JEKT_VERIFICATION_2026_09_24.md §2.2, step D1b).

wan_verify

Verify a same-account agent’s WAN signature on a cloud-delivered jekt (SPEC_WAN_JEKT_VERIFICATION_2026_09_24.md §2.3–2.6, step D2).

Constants

CREDENTIAL_ID

Identifier MuxBus’s single global credential set is registered under with both the broker scheduler (crate::broker) and the OS keychain (backend::storage::muxbus’s secret_store key) — deliberately the same string in both places so the two are trivially correlated in logs.

Functions

stale_sign_in 🔒

stale_sign_in_reason against the global broker and the cloud’s published settings (cached, see discovery::cloud_settings).

stale_sign_in_reason 🔒

Why the stored AgentMux Cloud sign-in can’t work anymore, or None if it still can (docs/specs/SPEC_CLOUD_SETTINGS_DISCOVERY_2026_09_27.md §3.3). Stale means only a new sign-in helps: