vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hive-c0re: scrub manager-surface cookies + SetParent doc fix (#715 batch 7)

Browse source
This commit is contained in:
damocles 2026-05-31 17:42:57 +02:00 • committed by mara
commit 2bdb8c7d51
5 changed files with 37 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

17
hive-c0re/src/bin/hivectl.rs
View file

@ -1,4 +1,4 @@
//! `hivectl` — operator-facing host CLI for hyperhive (#655).
//! `hivectl` — operator-facing host CLI for hyperhive.
//!
//! Sibling binary to the `hive-c0re` daemon. Where `hive-c0re`'s
//! subcommands focus on the broker / approval / topology surface
@ -7,7 +7,7 @@
//! starting with manual user provisioning on the bundled forge +
//! matrix containers when c0re's automatic boot-time sweep is
//! inappropriate (recovery, debugging, single-shot reprovisioning,
//! verifying the registration token path post-#644).
//! verifying the registration token path).
//!
//! Verbs read configuration off the same on-disk paths c0re uses
//! (`/var/lib/hyperhive/forge-core-token`,
@ -69,11 +69,11 @@ enum ForgeCmd {
/// When `<name>` is **not** an agent (a human or any other
/// non-container account), creates the forgejo user and prints the
/// freshly-minted token to stdout — no `/var/lib/hyperhive/agents/`
/// directory is created for the user (#662).
/// directory is created for the user.
///
/// Without `--password` / `--password-stdin` a random throwaway is
/// used (fine for agents — they auth by token via tea / hive-forge).
/// Set a password to log into the forge web UI afterwards (#663).
/// Set a password to log into the forge web UI afterwards.
/// `--password` is idempotent: re-running with the same value sets
/// the same password (covers password resets on already-created
/// accounts since `forgejo admin user create` silently no-ops once
@ -111,21 +111,20 @@ enum MatrixCmd {
/// When `<name>` is **not** an agent (a human or any other
/// non-container account), registers the matrix user and prints
/// the freshly-minted access token to stdout — no
/// `/var/lib/hyperhive/agents/` directory is created for the user
/// (#662).
/// `/var/lib/hyperhive/agents/` directory is created for the user.
///
/// Without `--password` / `--password-stdin` a random throwaway is
/// used (fine for agents — they auth by `access_token`, never by
/// password). Set a password to log into a matrix web client
/// afterwards (#663).
/// afterwards.
CreateUser {
/// Matrix localpart. For agents: the container/agent name.
/// For humans: any matrix localpart — `mara`, `damocles`, etc.
name: String,
/// Set the account password to this string instead of a random
/// throwaway. Use this for operator accounts that need to log
/// into matrix web clients via `m.login.password` (#663).
/// Mutually exclusive with `--password-stdin`. WARNING: the
/// into matrix web clients via `m.login.password`. Mutually
/// exclusive with `--password-stdin`. WARNING: the
/// password is visible in shell history + process listings;
/// prefer `--password-stdin` for anything sensitive.
#[arg(long)]