Skip to content

activities.md

Latest commit

 

History

History
53 lines (41 loc) · 2.45 KB

activities.md

File metadata and controls

53 lines (41 loc) · 2.45 KB
Raw

Activities

Every mutation is an activity. Inspect, vote on, and wait for them.

Follow authentication first.

tk activity list --limit 50
tk activity list --limit 50 --cursor ACTIVITY_ID
# Keep only pending activities; repeat --status for more than one status.
tk activity list --status pending
# Keep only one activity type; repeat --type for more than one type.
tk activity list --type 'ACTIVITY_TYPE_CREATE_USER_TAG'
# Keep only activities created in the last day.
tk activity list --since 24h --limit 100
tk activity get --id ACTIVITY_ID

Activity records list votes under data.activity.votes with each voter's userId and selection.

Consensus:

# Approver: one vote per command.
tk --profile approver activity approve --id ACTIVITY_ID
tk --profile approver activity reject --id ACTIVITY_ID

# Submitter: block until the activity ends.
tk activity wait --id ACTIVITY_ID --timeout 60

wait fails with api_error when the activity ends rejected or failed and with wait_timeout when time runs out. Run it again with the same ID to resume.

To see which policies decided an activity:

tk policy evaluations --activity-id ACTIVITY_ID

Skills

  • monitoring-activities: approving, rejecting, waiting, and reconciling an unknown outcome.
  • managing-policies: reading policy evaluations for a denial.
  • inspecting-agents: paging pending activities, votes, and mint attribution with jq.
  • provisioning-agent-identity: waiting on a pending agent user creation before the credential DENY.
  • managing-secrets: approving the agent's gated secret export and reading the denial behind a refused one.
  • provisioning-session-agent: approving a pending mint and inspecting it with activity get when activation fails.
  • revoking-agent-keys: matching a delete's key id with activity get and reading the policy evaluations behind a refused revocation.
  • signing-git-commits: waiting on a pending wallet creation before scoping the signing policy.
  • using-ssh: locating a failed signing activity with activity list and reading its policy evaluations.