diff --git a/hive-c0re/src/forge.rs b/hive-c0re/src/forge.rs index e007ee4..9097da0 100644 --- a/hive-c0re/src/forge.rs +++ b/hive-c0re/src/forge.rs @@ -24,11 +24,12 @@ const TOKEN_NAME_PREFIX: &str = "hyperhive"; /// itself to push the meta repo + drive admin API calls (org /// creation, future webhook setup, etc.). Root-only. const CORE_TOKEN_PATH: &str = "/var/lib/hyperhive/forge-core-token"; -/// Forgejo orgs hive-c0re ensures on startup. `core` holds the meta -/// repo (pushed by the `core` user); `agents` holds per-agent -/// applied config repos (pushed by hive-c0re on every deploy, or by -/// the manager when staging proposals). -const SEEDED_ORGS: &[&str] = &["core", "agents"]; +/// Forgejo orgs hive-c0re ensures on startup. The meta repo lives +/// at `core/meta` (the `core` user's own namespace — no org needed); +/// `agents` holds per-agent applied config repos so they're +/// visible/grouped together and access can be granted org-wide +/// (RO membership for the future shared docs/skills repo). +const SEEDED_ORGS: &[&str] = &["agents"]; /// Forgejo scopes the agent's token gets. Broad-but-not-admin: every /// repo / PR / issue thing an agent needs day-to-day, no admin /// surface.