docs(#1970): rewrite for UI-driven shape (github.enable + host switch), purge githubAccount refs, regen hivectl-cli.md

This commit is contained in:
damocles 2026-07-11 11:39:06 +02:00 committed by mara
commit cef9e633f7
7 changed files with 61 additions and 52 deletions

View file

@ -71,10 +71,12 @@ enum Cmd {
cmd: MatrixCmd,
},
/// GitHub account provisioning: write an operator-supplied personal
/// access token (PAT) into an agent's `hyperhive.githubAccount` token
/// file so its `gh` wrapper + git credential helper can authenticate.
/// Unlike forge/matrix there is no account creation — the operator
/// supplies a PAT for an existing GitHub account.
/// access token (PAT) into an agent's `github-token` state file so its
/// `gh` wrapper + git credential helper can authenticate. Unlike
/// forge/matrix there is no account creation — the operator supplies a
/// PAT for an existing GitHub account. A CLI alternative to the dashboard
/// credentials tab; the integration is on by default
/// (`hyperhive.github.enable`), so no per-agent config is needed.
Github {
#[command(subcommand)]
cmd: GithubCmd,
@ -433,10 +435,10 @@ enum MatrixCmd {
#[derive(Subcommand)]
enum GithubCmd {
/// Write a GitHub PAT into `<agent>`'s state dir (`github-token`, 0600,
/// agent-owned) via hive-priv. The agent must declare
/// `hyperhive.githubAccount` (its `tokenFile` pointing at this path) for
/// the `gh` wrapper + git credential helper to pick it up. The token is
/// read live at invocation, so no rebuild/restart is needed. Prefer
/// agent-owned) via hive-priv. The GitHub integration is on by default
/// (`hyperhive.github.enable`), so the `gh` wrapper + git credential
/// helper pick the token up with no per-agent config. The token is read
/// live at invocation, so no rebuild/restart is needed. Prefer
/// `--token-stdin`: an inline `--token` is visible in shell history +
/// process listings.
SetToken {

View file

@ -285,7 +285,7 @@ pub async fn write_agent_matrix_token(
/// (running as root). Writes `<state>/github-token` 0600, chowned to the agent
/// user so the `gh` wrapper / git credential helper can read it from inside the
/// container. Single account per agent — no account suffix. The token value is
/// operator-supplied (for the agent's `hyperhive.githubAccount`).
/// operator-supplied (for the agent's GitHub integration, `hyperhive.github.enable`).
///
/// # Errors
///