@hivecast/auth-console (1.1.33)
Installation
@hivecast:registry=npm install @hivecast/auth-console@1.1.33"@hivecast/auth-console": "1.1.33"About this package
Auth Console
Who you are and what is enrolled on your account; for platform operators, every account on the platform and who operates it.
Platform operators also see Activity, backed by system.audit, across all
homes. Filters cover person, operation, outcome, and time. Export CSV exports
the currently filtered rows with spreadsheet-formula neutralization; each row
includes who, what, target, when, outcome, and the refusal code when refused.
What an operator can do here
| Action | What happens | How to undo it |
|---|---|---|
| Make a platform operator | They see every account (names, homes, sign-in methods, never anything inside a home) and can make others operators | Remove operator |
| Remove operator | They keep their account and home but lose the platform view | Make them an operator again |
| Suspend account | Sign-in is blocked, current sessions disconnect, and enrolled machines stop serving; the account, home, data, and enrollments remain | Reactivate account |
| Finish suspension | Shown when credential cuts or the person notification are pending; retries only that unfinished work while sign-in remains blocked. Machines may still be connected until credential cuts finish | Reactivate after suspension finishes |
| Reactivate account | Sign-in is allowed and retained machine enrollments regain access; disconnected sessions do not return | Suspend account with a new reason |
| Repeat Reactivate | Shown when reactivation succeeded but its person notification is pending; retries notification delivery without changing the active account | Nothing else changes |
| Delete account | Its sign-in, home, API keys, conversations and enrolled machines are removed; anything connected is disconnected | Cannot be undone |
| Delete the N accounts shown | After a search (Find accounts by email or home): the same, for every account it shows except you and operators; offered when it shows two or more | Cannot be undone |
| Finish cleaning up | Shown only when a deleted account's grants or sessions are still held by a service: asks that service again to remove them | Nothing to undo; it only removes what belonged to deleted accounts |
Single and bulk account-deletion confirmations state the active enrollment count from the account inventory (including enrollments still finishing). Access is revoked and enrollments removed; the physical computer is not shut down or wiped. An older inventory without a count says it is unavailable. Failed device revocation remains unfinished.
Each action shows this before it runs and runs only on your Confirm; an agent pressing it waits for you. Suspension requires an operator-written reason. Session and machine counts come from the account inventory; an unavailable count is said to be unavailable and is never shown as zero. “Your machines” shows the account-owned machine name and canonical device ID; it does not substitute a topology or host label. Operators cannot suspend themselves or another platform operator from this surface. An unfinished suspension cannot be reactivated. Its Finish suspension action reuses the retained operator reason; it never asks an operator to invent a replacement reason for a retry. system.auth refuses to delete you or an operator, and to remove you, the last operator, or a founding operator (the environment names them; change them where the environment is set up). Every grant and removal is recorded with who did it.
Built from the Console kit
(@open-matrix/dashboard-components/console); design in
docs/architecture/target-v3/APPLICATION-LIFECYCLE-AND-PLATFORM-SURFACES-DESIGN.md §13.
Work on it live
pnpm install
hivedock up # in this folder: it opens from the Start menu, and a saved edit shows without a reload
pnpm test
Platform facts and home progress
The operator view reads principal, stored service-claim, conversation, and directory-row counts from actor operations on the service that owns each record. Conversation and directory totals stay grouped by home/account so a surprising change says which owner to investigate; the Console never reads the database directly.
Homes not ready lists every durable starter-projection record that is not ready, including state,
last error code, attempt, next retry, and last change. Selecting an account still shows all of its
homes. Both views refresh automatically. Retry now calls the existing projection coordinator after a
blocker clears; it does not edit application choices, delete account data, or create a second retry
path. The server checks platform.operator for all reads and retries.
Each open operator tab polls the not-ready list every five seconds, even when no account is selected, so a newly stuck home appears during an outage without requiring a page reload.
Application presentation
The application uses the shared @open-matrix/hivecast-brand/application-header
header with its name, description and icon from matrix.package.json. Existing
application actions keep their handlers; Console primary forms remain available
through console.submit. Colours, typography and layout tokens inherit the
ui-kit theme in both light and dark mode. New styles use --mx-* tokens;
pnpm check:application-styles prevents growth of remaining literal styles.
Dependencies
Dependencies
| ID | Version |
|---|---|
| @open-matrix/contracts | 1.1.33 |
| @open-matrix/core | 1.1.33 |
| @open-matrix/dashboard-components | 1.1.33 |
Development Dependencies
| ID | Version |
|---|---|
| @open-matrix/hive-pm | 1.1.33 |
| @types/node | ^25.0.10 |
| esbuild | ^0.27.3 |
| tsx | ^4.15.6 |
| typescript | ^5.7.0 |
| vite | ^6.0.0 |