forge: drop redundant 'core' org — meta repo lives under core user

This commit is contained in:
müde 2026-05-17 01:50:12 +02:00
parent db87167469
commit 68020a15c9

View file

@ -24,11 +24,12 @@ const TOKEN_NAME_PREFIX: &str = "hyperhive";
/// itself to push the meta repo + drive admin API calls (org
/// creation, future webhook setup, etc.). Root-only.
const CORE_TOKEN_PATH: &str = "/var/lib/hyperhive/forge-core-token";
/// Forgejo orgs hive-c0re ensures on startup. `core` holds the meta
/// repo (pushed by the `core` user); `agents` holds per-agent
/// applied config repos (pushed by hive-c0re on every deploy, or by
/// the manager when staging proposals).
const SEEDED_ORGS: &[&str] = &["core", "agents"];
/// Forgejo orgs hive-c0re ensures on startup. The meta repo lives
/// at `core/meta` (the `core` user's own namespace — no org needed);
/// `agents` holds per-agent applied config repos so they're
/// visible/grouped together and access can be granted org-wide
/// (RO membership for the future shared docs/skills repo).
const SEEDED_ORGS: &[&str] = &["agents"];
/// Forgejo scopes the agent's token gets. Broad-but-not-admin: every
/// repo / PR / issue thing an agent needs day-to-day, no admin
/// surface.