docs(#1970): rewrite for UI-driven shape (github.enable + host switch), purge githubAccount refs, regen hivectl-cli.md

This commit is contained in:
damocles 2026-07-11 11:39:06 +02:00 committed by mara
commit cef9e633f7
7 changed files with 61 additions and 52 deletions

View file

@ -120,17 +120,15 @@ For more details see [`docs/matrix.md`](docs/matrix.md).
### GitHub account
`hyperhive.githubAccount` gives an agent a managed GitHub identity — a `gh` CLI wrapper and `git push` over HTTPS, both authenticated as a configured bot account:
Every agent gets a managed GitHub identity — a `gh` CLI wrapper and `git push` over HTTPS — on by default (`hyperhive.github.enable`), inert until a PAT is provisioned. There is nothing per-agent to declare: paste an operator-supplied personal access token into the agent's dashboard **credentials** tab (or `hivectl github set-token <agent> --token-stdin`) and it works. The `gh` wrapper + git credential helper read the token live (git auths as `x-access-token` + the PAT; github.com only), so a rotated PAT takes effect with no rebuild.
Turn the integration off for the whole hive with the host option:
```nix
hyperhive.githubAccount = {
username = "the-sword-above";
tokenFile = "/agents/myagent/state/github-token"; # PAT provisioned out-of-band
# host = "github.com"; # default; set for GHE
};
services.hyperhive.github.enable = false;
```
The PAT value is never in nix; write it with `hivectl github set-token <agent> --token-stdin`. Both the `gh` wrapper and the git credential helper read the token live, so a rotated PAT takes effect with no rebuild. Single account per agent. For more details see [`docs/github.md`](docs/github.md).
The PAT value is never in nix — only the enable flag. For more details see [`docs/github.md`](docs/github.md).
## Operator CLI