39b95c2ede
Pure `nix fmt` output from the commit before this one — no hand edits. 203 files: 52 md, 42 tsx, 32 js, 32 css, 21 ts, 13 html, 8 json, 3 mjs. Reproduce with `nix develop -c nix fmt` on the parent commit; the result should be byte-identical to this tree. None of the 13 `.prettierignore` entries appears here — verified by intersecting the changed-file list against the ignore file, with a control proving the intersection finds a match when one exists.
253 lines
8.9 KiB
HTML
253 lines
8.9 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
<title>hyperhive // CR3D3NTIALS</title>
|
|
<link rel="icon" type="image/svg+xml" href="/favicon.svg" />
|
|
<link rel="stylesheet" href="/static/colors.css" />
|
|
<link rel="stylesheet" href="/static/theme.css" />
|
|
<link rel="stylesheet" href="/static/common.css" />
|
|
<link rel="stylesheet" href="/static/credentials.css" />
|
|
</head>
|
|
<body class="cred-shell">
|
|
<!-- Minimal chrome: back link + sub-tab strip, same pattern as
|
|
logs.html (MATRIX / GITHUB instead of AGENT/INFRA/SYSTEM). Back
|
|
link points to the H0M3 hub (served at /). -->
|
|
<header class="page-header">
|
|
<a class="page-back" href="/">← home</a>
|
|
<hive-tab-strip
|
|
class="hive-tabbar cred-tabbar"
|
|
id="cred-tabbar"
|
|
prefix="cred"
|
|
role="tablist"
|
|
></hive-tab-strip>
|
|
</header>
|
|
|
|
<main class="cred-main">
|
|
<!-- Agent picker: shared across both tabs (one agent selected at a
|
|
time drives both the matrix account list and the github status). -->
|
|
<h3>◇ agent</h3>
|
|
<label class="ma-field">
|
|
<span>agent</span>
|
|
<select id="ma-agent"></select>
|
|
</label>
|
|
|
|
<!-- MATRIX tab: unchanged from the old /matrix-accounts.html, just
|
|
moved under a tab pane. -->
|
|
<section
|
|
class="cred-pane"
|
|
id="cred-pane-matrix"
|
|
data-tab-pane="matrix"
|
|
role="tabpanel"
|
|
aria-labelledby="cred-tab-matrix"
|
|
>
|
|
<p class="meta">
|
|
provision or log in an <strong>external</strong> matrix account for an
|
|
agent and store its access token. the token is written to the agent's
|
|
<code>matrixAccounts.<account>.tokenFile</code> by the host
|
|
coordinator — it is never displayed back on this page.
|
|
</p>
|
|
|
|
<h3>◇ provisioned accounts</h3>
|
|
<p class="meta">
|
|
accounts that have a stored token (provision one below to add it
|
|
here); a config-declared account that hasn't been provisioned yet
|
|
won't appear until it has a token. status reflects whether a
|
|
<em>token is stored</em>, not a live session — a true
|
|
online/offline indicator is a follow-up that needs the daemon's
|
|
account registry.
|
|
</p>
|
|
<div id="ma-list" class="ma-list">
|
|
<p class="meta">select an agent to see its matrix accounts.</p>
|
|
</div>
|
|
|
|
<h3>◇ provision / log in</h3>
|
|
<form id="ma-form" class="ma-form" autocomplete="off">
|
|
<label class="ma-field">
|
|
<span>account name</span>
|
|
<input
|
|
type="text"
|
|
name="account"
|
|
placeholder="e.g. public"
|
|
required
|
|
/>
|
|
</label>
|
|
<label class="ma-field">
|
|
<span>homeserver</span>
|
|
<input
|
|
type="text"
|
|
name="homeserver"
|
|
placeholder="https://matrix.org"
|
|
required
|
|
/>
|
|
</label>
|
|
|
|
<fieldset class="ma-mode">
|
|
<legend>login method</legend>
|
|
<label
|
|
><input type="radio" name="mode" value="password" checked />
|
|
password</label
|
|
>
|
|
<label
|
|
><input type="radio" name="mode" value="token" /> existing
|
|
token</label
|
|
>
|
|
</fieldset>
|
|
|
|
<div id="ma-pw-fields" class="ma-modefields">
|
|
<label class="ma-field">
|
|
<span>user id</span>
|
|
<input
|
|
type="text"
|
|
name="user_id"
|
|
placeholder="@user:matrix.org"
|
|
autocomplete="username"
|
|
/>
|
|
</label>
|
|
<label class="ma-field">
|
|
<span>password</span>
|
|
<input
|
|
type="password"
|
|
name="password"
|
|
autocomplete="new-password"
|
|
/>
|
|
</label>
|
|
</div>
|
|
|
|
<div id="ma-token-fields" class="ma-modefields" hidden>
|
|
<label class="ma-field">
|
|
<span>access token</span>
|
|
<input type="password" name="token" autocomplete="off" />
|
|
</label>
|
|
<label class="ma-field">
|
|
<span
|
|
>user id
|
|
<span class="meta"
|
|
>(optional — derived via whoami)</span
|
|
></span
|
|
>
|
|
<input
|
|
type="text"
|
|
name="user_id"
|
|
placeholder="@user:matrix.org"
|
|
/>
|
|
</label>
|
|
</div>
|
|
|
|
<button type="submit" class="btn btn-spawn">
|
|
log in & store token
|
|
</button>
|
|
<p id="ma-result" class="ma-result" aria-live="polite"></p>
|
|
</form>
|
|
</section>
|
|
|
|
<!-- GITHUB tab: single-account PAT paste. No login flow — the
|
|
operator pastes an existing PAT for a dedicated bot account.
|
|
Security-warning banner + a link to generate a PAT. -->
|
|
<section
|
|
class="cred-pane"
|
|
id="cred-pane-github"
|
|
data-tab-pane="github"
|
|
role="tabpanel"
|
|
aria-labelledby="cred-tab-github"
|
|
hidden
|
|
>
|
|
<hive-warn level="warning">
|
|
⚠ use a <strong>dedicated bot account</strong>, not a human's —
|
|
and a <strong>minimally-scoped</strong> personal access token (only
|
|
the repos/scopes the agent actually needs, e.g. <code>repo</code> +
|
|
<code>workflow</code>). the container boundary is the enforcement:
|
|
anything within the token's scopes is reachable if the agent is ever
|
|
compromised. the token is injected into the agent's state dir and is
|
|
<strong>never displayed back</strong> on this page.
|
|
</hive-warn>
|
|
|
|
<h3>◇ status</h3>
|
|
<div id="gh-status" class="gh-status">
|
|
<p class="meta">
|
|
select an agent to see its github credential status.
|
|
</p>
|
|
</div>
|
|
|
|
<h3>◇ provision</h3>
|
|
<p class="meta">
|
|
generate a token at
|
|
<a
|
|
href="https://github.com/settings/tokens"
|
|
target="_blank"
|
|
rel="noopener"
|
|
>github.com/settings/tokens</a
|
|
>
|
|
and paste it below. one account per agent — pasting a new token
|
|
replaces the stored one.
|
|
</p>
|
|
<form id="gh-form" class="ma-form" autocomplete="off">
|
|
<label class="ma-field">
|
|
<span>personal access token</span>
|
|
<input type="password" name="token" autocomplete="off" required />
|
|
</label>
|
|
<button type="submit" class="btn btn-spawn">store token</button>
|
|
<p id="gh-result" class="ma-result" aria-live="polite"></p>
|
|
</form>
|
|
</section>
|
|
|
|
<!-- FORGES tab: external Forgejo/Gitea/Codeberg-compatible forges.
|
|
Entirely dashboard-provisioned, no host-side nix config — same
|
|
shape as GITHUB plus a base-URL field (like MATRIX's homeserver).
|
|
The operator creates a token on the external forge themselves
|
|
(however that forge lets them) and pastes label + URL + token
|
|
below. No remote account minting/revoking — purely local. -->
|
|
<section
|
|
class="cred-pane"
|
|
id="cred-pane-forges"
|
|
data-tab-pane="forges"
|
|
role="tabpanel"
|
|
aria-labelledby="cred-tab-forges"
|
|
hidden
|
|
>
|
|
<p class="meta">
|
|
store a <strong>label + base URL + access token</strong> for an
|
|
external Forgejo/Gitea/Codeberg-compatible forge, per agent. no
|
|
account is created on the remote forge — create the token there
|
|
yourself first. the token is never displayed back on this page.
|
|
</p>
|
|
|
|
<h3>◇ provisioned forges</h3>
|
|
<div id="ef-list" class="ef-list">
|
|
<p class="meta">select an agent to see its forge accounts.</p>
|
|
</div>
|
|
|
|
<h3>◇ add forge account</h3>
|
|
<form id="ef-form" class="ma-form" autocomplete="off">
|
|
<label class="ma-field">
|
|
<span>label</span>
|
|
<input
|
|
type="text"
|
|
name="label"
|
|
placeholder="e.g. codeberg"
|
|
required
|
|
/>
|
|
</label>
|
|
<label class="ma-field">
|
|
<span>base url</span>
|
|
<input
|
|
type="text"
|
|
name="base_url"
|
|
placeholder="https://codeberg.org"
|
|
required
|
|
/>
|
|
</label>
|
|
<label class="ma-field">
|
|
<span>access token</span>
|
|
<input type="password" name="token" autocomplete="off" required />
|
|
</label>
|
|
<button type="submit" class="btn btn-spawn">store account</button>
|
|
<p id="ef-result" class="ma-result" aria-live="polite"></p>
|
|
</form>
|
|
</section>
|
|
</main>
|
|
|
|
<script type="module" src="/static/credentials.js" defer></script>
|
|
</body>
|
|
</html>
|