@hasna/machines 0.0.26 → 0.0.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -130,6 +130,7 @@ machines screen machine005 --print # print the vnc:// URL instead of ope
130
130
  machines screen machine005 --json # full resolution detail (route, confidence, user)
131
131
  machines screen --all # open every reachable machine
132
132
  machines screen --all --print # list resolved vnc:// URLs for the whole fleet
133
+ machines screen-credentials --all --check-secret
133
134
  ```
134
135
 
135
136
  Enable Remote Management / Screen Sharing on a fresh macOS machine over SSH
@@ -137,12 +138,20 @@ Enable Remote Management / Screen Sharing on a fresh macOS machine over SSH
137
138
  Screen Sharing.app and Apple Remote Desktop):
138
139
 
139
140
  ```bash
140
- machines screen-enable --machine machine005 --user jo --vnc-password steaua17
141
+ secrets set hasna/xyz/opensource/machines/prod/screen-machine005-vnc-password "$VNC_PASSWORD" --type password
142
+ machines screen-enable --machine machine005 --user jo \
143
+ --vnc-password-secret hasna/xyz/opensource/machines/prod/screen-machine005-vnc-password
141
144
  machines screen-enable --machine machine005 --user jo --print # show the SSH command, don't run it
142
145
  ```
143
146
 
144
- `--vnc-password` is truncated to 8 characters by the legacy VNC protocol. The
145
- user comes from the manifest (`metadata.user`) when present, or `--user`.
147
+ The legacy VNC protocol honors only the first 8 password characters. The
148
+ password is read through the `secrets` CLI and piped over SSH stdin; it is not
149
+ embedded in generated command text. If `--vnc-password-secret` is omitted,
150
+ machines defaults to
151
+ `hasna/xyz/opensource/machines/prod/screen-<machine>-vnc-password`. The user
152
+ comes from the manifest (`metadata.user`) when present, or `--user`.
153
+ `screen-credentials` verifies the resolved user and secret key for a machine or
154
+ the full fleet without printing secret values.
146
155
 
147
156
  Consumers that need repo paths can resolve trust-aware workspace mappings
148
157
  without importing the full machines app: