@h-rig/server 0.0.6-alpha.1 → 0.0.6-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -7,6 +7,29 @@
7
7
  - serve workspace snapshots and artifacts
8
8
  - broker approvals and remote endpoint state
9
9
  - expose websocket events for the UI
10
+ - isolate authenticated remote users in GitHub-user namespaces for auth state,
11
+ project registry records, managed checkouts, and uploaded snapshots
12
+
13
+ ## Remote user namespaces
14
+
15
+ When a remote client imports a GitHub token or completes device auth, the server
16
+ looks up `/user` and derives the namespace from the stable GitHub numeric user id
17
+ (`ghu-<id>`). The login is retained as display metadata/fallback only; raw tokens
18
+ are never used in filesystem paths or API response metadata.
19
+
20
+ Default layout on hosted deployments:
21
+
22
+ ```text
23
+ /srv/rig/users/ghu-123456/.rig/state/github-auth.json
24
+ /srv/rig/users/ghu-123456/.rig/state/projects.json
25
+ /srv/rig/users/ghu-123456/remote-checkouts/<owner>/<repo>
26
+ /srv/rig/users/ghu-123456/remote-snapshots/<owner>/<repo>/<snapshot-id>
27
+ ```
28
+
29
+ `RIG_REMOTE_USER_NAMESPACE_ROOT`, `RIG_REMOTE_CHECKOUT_BASE_DIR`, and
30
+ `RIG_REMOTE_SNAPSHOT_BASE_DIR` can override the roots. Existing
31
+ `remote-checkouts/default` paths are treated as explicit/admin existing paths,
32
+ not as the authenticated default.
10
33
 
11
34
  ## Commands
12
35