From 63e9e8023287590444c755d8c25f05f865d9bfac Mon Sep 17 00:00:00 2001
From: damocles <damocles@hyperhive.local>
Date: Sat, 27 Jun 2026 16:03:14 +0200
Subject: [PATCH] fix(#2050): use single matrix-token* glob for avatar-sync
 path trigger

---
 nix/templates/harness-base.nix | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/nix/templates/harness-base.nix b/nix/templates/harness-base.nix
index af2fe2fb..46f585d7 100644
--- a/nix/templates/harness-base.nix
+++ b/nix/templates/harness-base.nix
@@ -1650,10 +1650,12 @@ in
     systemd.paths.matrix-avatar-sync = {
       description = "trigger matrix-avatar-sync when a matrix token appears";
       wantedBy = [ "multi-user.target" ];
-      pathConfig.PathExistsGlob = [
-        "/agents/*/state/matrix-token"
-        "/agents/*/state/matrix-token-*"
-      ];
+      # Single `matrix-token*` glob (same as hive-matrix-daemon above) so
+      # both the hive-internal `matrix-token` and any dashboard-provisioned
+      # `matrix-token-<name>` re-fire the sync. A list value here is
+      # unverified for `systemd.paths.*.pathConfig`, and the wildcard
+      # covers both cases anyway.
+      pathConfig.PathExistsGlob = "/agents/*/state/matrix-token*";
     };
 
     # One-shot: hyperhive.icon → matrix profile avatar (two-step media