0e84fe8bc4
The handbook's sections were agent-lifecycle, integrations, swarm, tools, trust-boundary and web-ui, which do not follow how the system is built, so a reader could not tell which layer a page is about. Its pages now sit in swarm/, hives/ and agents/, with the accounts an agent can hold outside the system in external-accounts/. - swarm/: forge, matrix and the knowledge repo join the swarm pages, and so does the swarmctl reference. - hives/: the dashboard, hivectl and its reference, and the operator/agent boundary, with a README that takes over the old web-ui and tools pages. - agents/: the roster, persistence, config changes, the agent's own web page (was web-ui/agent) and the security model, with a README. - external-accounts/: GitHub and GitLab. Pages are moved whole; none is split yet. Every reference follows: relative links in the docs, `docs/2-handbook/...` paths in code comments, the nix checks that regenerate the CLI references and the ignore list, and docs/README.md, whose handbook section is now by layer.
21 lines
969 B
Markdown
21 lines
969 B
Markdown
# hive-priv-sock
|
|
|
|
Wire types for the **`hive-priv` privileged-helper socket**
|
|
(`/run/hive/priv.sock`) — the contract between `hive-priv` (the root helper,
|
|
server) and `hive-c0re` (client, via its `priv_client`).
|
|
|
|
## Why it's its own crate
|
|
|
|
Split out of `hive-sh4re` so `hive-priv` — a **root-privileged** binary —
|
|
depends on just this narrow protocol crate instead of the much larger
|
|
daemon-shared crate. Two wins: fewer dependencies in a root process's supply
|
|
chain, and a small, self-contained interface makes the privilege boundary this
|
|
crate encodes easier to audit. Mirrors `hive-host-sock`'s split for the host
|
|
admin socket.
|
|
|
|
## Shape
|
|
|
|
Serde-derived request/response types only — no server or client logic. Both
|
|
sides import them so the shapes stay in sync. See `docs/2-handbook/hives/boundary.md` +
|
|
`docs/4-implementation/trust-boundary/hive-c0re-privilege.md` for the privilege boundary these types sit on, and
|
|
`hive-priv/README` for the helper itself.
|