8e23feb01b
An operator links an agent's GitHub personal access token in the swarm UI
(LinkGithubAccountForm, "link github account" on /agents). swarm-controller's
PUT /api/hives/{hive}/agents/{agent}/github-account stores it at
swarm/agents/<agent>/github-token (swarm_secret_client::github), a flat leaf
under the agent's prefix that the agent's existing read grant already covers:
no policy change, and no list grant, since there is one token per agent.
In the agent, hive-agent-github-token (oneshot + 2-minute timer, as the agent
user, under its own store certificate, ordered before hive-github-notify)
reads that path and writes <state>/github-token, 0600 and agent-owned, the
file the gh wrapper, git credential helper and hive-github-notify already
read. It replaces the file by rename only when the bytes changed and never
deletes it: a hive-written github-token stays until a token is linked in the
swarm UI. It is installed only with a store address and
services.hyperhive.agent.github.enable.
Removed: the dashboard's CR3D3NTIALS page (credentials.html/js/css, its
build entries and H0M3 tile; GITHUB was its only tab), hive-c0re's
dashboard/matrix_accounts.rs with GET/POST /api/github-account,
priv_client::write_agent_github_token, the host socket's
SetAgentGithubToken and `hivectl github set-token`, and hive-priv's
WriteAgentGithubToken with write_agent_state_file, its only caller gone.
Docs: integrations/github.md and swarm/ui.md describe the swarm path,
swarm/credentials.md gains the store-path row, and the hive UI docs,
hivectl docs and security.md's hive-priv table drop the removed pieces.
Closes #4347
112 lines
4.6 KiB
HTML
112 lines
4.6 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
<title>hyperhive // h0m3</title>
|
|
<link rel="icon" type="image/svg+xml" href="/favicon.svg" />
|
|
<link rel="stylesheet" href="/static/colors.css" />
|
|
<link rel="stylesheet" href="/static/theme.css" />
|
|
<link rel="stylesheet" href="/static/common.css" />
|
|
<link rel="stylesheet" href="/static/home.css" />
|
|
</head>
|
|
<body class="home-shell">
|
|
<!-- Decorative matrix-rain backdrop: a dimmed full-viewport canvas of
|
|
falling glyphs behind everything (home.js drives it). aria-hidden +
|
|
pointer-events:none so it's purely cosmetic; glyph/bg colours are
|
|
read from the stylix palette at runtime so a theme swap re-colours
|
|
it, and it's disabled under prefers-reduced-motion. -->
|
|
<canvas id="matrix-rain" aria-hidden="true"></canvas>
|
|
|
|
<!-- H0M3: the menu hub. A plain grid of links to every top-level
|
|
surface. This is the page served at `/` — the landing page — with
|
|
the dashboard relocated to /dashboard.html. No tabbar / SSE —
|
|
it's a static portal. -->
|
|
<!-- Padded content wrapper: carries the 1.5em side gutter
|
|
(.page-content, common.css) while <body> stays full-bleed so the
|
|
server-warnings banner spans the full width. -->
|
|
<div class="page-content">
|
|
<header class="home-header">
|
|
<p class="banner-thin" id="hive-identity" hidden></p>
|
|
<pre class="banner">
|
|
░▒▓█▓▒░ ░▒▓█▓▒░ H Y P E R H I V E · H0M3 ░▒▓█▓▒░ ░▒▓█▓▒░</pre
|
|
>
|
|
<p class="banner-thin" id="hive-rev" hidden></p>
|
|
</header>
|
|
|
|
<main class="home-main">
|
|
<nav class="home-menu" aria-label="hyperhive surfaces">
|
|
<a class="home-tile" href="/dashboard.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">🖥</span>
|
|
<span class="home-tile-label">Dashboard</span>
|
|
</span>
|
|
<span class="home-tile-desc"
|
|
>containers · approvals · permissions · schedules · system</span
|
|
>
|
|
</a>
|
|
|
|
<a class="home-tile" href="/flow.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">📡</span>
|
|
<span class="home-tile-label">Flow</span>
|
|
</span>
|
|
<span class="home-tile-desc">live all-agents message firehose</span>
|
|
</a>
|
|
|
|
<a class="home-tile" href="/builds.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">🔨</span>
|
|
<span class="home-tile-label">Builds</span>
|
|
</span>
|
|
<span class="home-tile-desc"
|
|
>rebuild queue · meta inputs · build logs</span
|
|
>
|
|
</a>
|
|
|
|
<a class="home-tile" href="/logs.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">📜</span>
|
|
<span class="home-tile-label">Logs</span>
|
|
</span>
|
|
<span class="home-tile-desc">agent · infra · system logs</span>
|
|
</a>
|
|
|
|
<a class="home-tile" href="/stats.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">📊</span>
|
|
<span class="home-tile-label">Stats</span>
|
|
</span>
|
|
<span class="home-tile-desc"
|
|
>hive-wide turn stats · cost · model mix</span
|
|
>
|
|
</a>
|
|
|
|
<a class="home-tile" href="/core.html">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">⬡</span>
|
|
<span class="home-tile-label">Core</span>
|
|
</span>
|
|
<span class="home-tile-desc">kept state · container load</span>
|
|
</a>
|
|
|
|
<!-- API tile: the OpenAPI spec + Swagger UI are always served by
|
|
hive-c0re itself (docs/web-ui/dashboard.md::Dashboard
|
|
endpoints), so this tile is never gated/hidden. -->
|
|
<a class="home-tile" href="/api/docs">
|
|
<span class="home-tile-head">
|
|
<span class="home-tile-icon" aria-hidden="true">🧬</span>
|
|
<span class="home-tile-label">API</span>
|
|
</span>
|
|
<span class="home-tile-desc"
|
|
>interactive OpenAPI spec (Swagger UI)</span
|
|
>
|
|
</a>
|
|
</nav>
|
|
</main>
|
|
</div>
|
|
<!-- /.page-content -->
|
|
|
|
<script type="module" src="/static/home.js" defer></script>
|
|
</body>
|
|
</html>
|