docs: runbook token listing reads the items envelope (sage)

Darkwing's correction, checked against the 2.7.0 OpenAPI: GET /tokens returns PaginatedAPIToken, with items possibly null. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-08 17:17:18 -05:00
parent 67d29f7da5
commit 7780ef1e54
2 changed files with 6 additions and 1 deletions
@@ -357,7 +357,7 @@ role. The stack never writes this file.
  `svc -X DELETE "$VK/api/v2/tokens/<old id>"`. A revoke hits that one
  token, and it gets 401 on its next request. `mint` printed the old
  id. If you didn't keep it, list the bot's tokens as `svc-$BIZ`:
-  `svc "$VK/api/v2/tokens?owner_id=<bot id>" | jq -c '.[] | {id, title, expires_at}'`.
+  `svc "$VK/api/v2/tokens?owner_id=<bot id>" | jq -c '.items[]? | {id, title, expires_at}'`.
  A plain `GET /tokens` lists only svc's own tokens, which is none, and
  the owner's account gets 403 on the revoke. Then finish with section
  4's `rm -f`, which deletes the header. The broker refuses to