docs-drift: dito@6.1.0-rc.26 #21

Closed
opened 2026-10-03 07:03:52 +00:00 by deepnet-bot · 2 comments

Drift report: dito 4.1.12-rc.1 → 6.1.0-rc.26

Added commands

  • user invite — Invite a tenant ditc user: ensure the identity, add it to the tenant's ditc-users group, converge the seat (forge account + membership + scoped credential via the seat engine), then send the invitation — identity, access, seat, message, in that order. --no-email provisions the seat and prints the zero-secret runbook for the operator to hand over instead of sending. Machine seats are the same invited identities: set the password from the recovery link, then ditc session login <address> --device on the machine. Passing --automation or --bundle-out exits 2 with the migration message — pages: src/dito/430-users.md
  • user converge — Converge the tenant's forge state to its ditc groups (the seat engine): provision/migrate group members, revoke non-member human seats, list automation and unclassified seats untouched. --dry-run is the drift report and never gates — pages: src/dito/430-users.md
  • state — Read-only state-dir inventory: what dito's state files are, their writer/age/size/tenant, and the OIDC client-state HEALTH verdict against the tenant's live provider — pages: none
  • state list — Print the state-dir inventory (read-only): writer, age, size in bytes, and tenant per file, plus the OIDC client-state HEALTH verdict against the tenant's live provider — pages: none
  • worktree — Read-only git-worktree inventory (#885): worktrees under the realm repos with branch, merged-into-default status, dirty/clean, and live-process presence — the visibility the silent reaper lacked. Never reaps; the reaper stays the only cleanup mechanism — pages: none
  • worktree list — List git worktrees under the realm repos (read-only): branch, merged-into-default status, dirty/clean, live-process presence, and the reaper's hold count — pages: none

Removed commands

  • user onboard — Onboard a tenant ditc user (Authentik + Forgejo + PAT + AppRole + side-channel bundle). Absorbs new-ditc-user, ditc-grant-access, and app-access create-user — pages: src/dito/430-users.md
## Drift report: dito 4.1.12-rc.1 → 6.1.0-rc.26 ### Added commands - `user invite` — Invite a tenant ditc user: ensure the identity, add it to the tenant's ditc-users group, converge the seat (forge account + membership + scoped credential via the seat engine), then send the invitation — identity, access, seat, message, in that order. `--no-email` provisions the seat and prints the zero-secret runbook for the operator to hand over instead of sending. Machine seats are the same invited identities: set the password from the recovery link, then `ditc session login <address> --device` on the machine. Passing `--automation` or `--bundle-out` exits 2 with the migration message — pages: src/dito/430-users.md - `user converge` — Converge the tenant's forge state to its ditc groups (the seat engine): provision/migrate group members, revoke non-member human seats, list automation and unclassified seats untouched. `--dry-run` is the drift report and never gates — pages: src/dito/430-users.md - `state` — Read-only state-dir inventory: what dito's state files are, their writer/age/size/tenant, and the OIDC client-state HEALTH verdict against the tenant's live provider — pages: none - `state list` — Print the state-dir inventory (read-only): writer, age, size in bytes, and tenant per file, plus the OIDC client-state HEALTH verdict against the tenant's live provider — pages: none - `worktree` — Read-only git-worktree inventory (#885): worktrees under the realm repos with branch, merged-into-default status, dirty/clean, and live-process presence — the visibility the silent reaper lacked. Never reaps; the reaper stays the only cleanup mechanism — pages: none - `worktree list` — List git worktrees under the realm repos (read-only): branch, merged-into-default status, dirty/clean, live-process presence, and the reaper's hold count — pages: none ### Removed commands - `user onboard` — Onboard a tenant ditc user (Authentik + Forgejo + PAT + AppRole + side-channel bundle). Absorbs new-ditc-user, ditc-grant-access, and app-access create-user — pages: src/dito/430-users.md
Owner

Author dispatch complete: #23

One edit-pass per the R13 contract (src/dito/430-users.md; reader grounded on the dito About page; change list: user invite, user converge added, user onboard removed). Dispatch ran twice because of a dispatcher process-tracking bug (fixed on main in d253c07); the surviving author session's edits compose the PR, with one reviewer revert (invite defines no gates). Awaiting the owning realm agent's review and merge.

Author dispatch complete: https://forge.deepnet.com/deepnet/ditdocs/pulls/23 One edit-pass per the R13 contract (src/dito/430-users.md; reader grounded on the dito About page; change list: user invite, user converge added, user onboard removed). Dispatch ran twice because of a dispatcher process-tracking bug (fixed on main in d253c07); the surviving author session's edits compose the PR, with one reviewer revert (invite defines no gates). Awaiting the owning realm agent's review and merge.
Owner

Merged via PR #23 (82da974). Post-merge main verified: dito lockstep 0 fail (FRESHNESS warns 30 → 29 as this page's verified: landed), build --draft green. Closing as repaired.

Merged via PR #23 (82da974). Post-merge main verified: dito lockstep 0 fail (FRESHNESS warns 30 → 29 as this page's verified: landed), build --draft green. Closing as repaired.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
deepnet/ditdocs#21
No description provided.