hivectl: add start/stop agent verbs, rename spawn to create

docs/approvals.md

@@ -119,10 +119,10 @@ kind-specific payload carrier.
 - `Spawn` — direct container creation from the agent's config repo.
   `commit_ref` is empty. Submitted via `HostRequest::RequestSpawn`
   (operator-gated, the `◆ R3QU3ST SP4WN` dashboard button +
-  `hivectl agent <name> request-spawn` CLI). The host-level `HostRequest::Spawn`
+  `hivectl agent <name> request-create` CLI). The host-level `HostRequest::Spawn`
   variant bypasses the approval queue entirely — privileged-context use
-  only (operator on the host shell, test scripts, one-off recoveries).
-  This is the **canonical first-spawn**: a new agent's `InitConfig`
+  only (operator on the host shell, test scripts, one-off recoveries;
+  `hivectl agent <name> create`). This is the **canonical first-spawn**: a new agent's `InitConfig`
   seeds its config repo, the submitting agent customises it, then the
   operator spawns to create the container. Subsequent config changes go
   through a `MergeConfigPr` PR.

docs/tools/hivectl-cli.md

@@ -24,8 +24,10 @@ This document contains the help content for the `hivectl` command-line program.
 * [`hivectl agent restart`↴](#hivectl-agent-restart)
 * [`hivectl agent pause`↴](#hivectl-agent-pause)
 * [`hivectl agent resume`↴](#hivectl-agent-resume)
-* [`hivectl agent spawn`↴](#hivectl-agent-spawn)
-* [`hivectl agent request-spawn`↴](#hivectl-agent-request-spawn)
+* [`hivectl agent start`↴](#hivectl-agent-start)
+* [`hivectl agent create`↴](#hivectl-agent-create)
+* [`hivectl agent request-create`↴](#hivectl-agent-request-create)
+* [`hivectl agent stop`↴](#hivectl-agent-stop)
 * [`hivectl agent kill`↴](#hivectl-agent-kill)
 * [`hivectl agent destroy`↴](#hivectl-agent-destroy)
 * [`hivectl agent rebuild`↴](#hivectl-agent-rebuild)
@@ -342,9 +344,11 @@ Everything here targets a single named agent (`hivectl agent foo restart`, `hive
 * `restart` — Stop and start this agent container without rebuilding config
 * `pause` — Park this agent's turn loop, leaving the container running
 * `resume` — Resume this paused agent — it drains whatever queued up while parked
-* `spawn` — Spawn this agent container directly, bypassing the approval queue
-* `request-spawn` — Queue a spawn request for operator approval
-* `kill` — Stop this managed container (graceful)
+* `start` — Start this EXISTING agent container. Fails immediately if `name` has no config/topology entry at all — it never attempts first-time creation. Use `create` for that
+* `create` — Create this agent container from scratch (full first-time provisioning), bypassing the approval queue
+* `request-create` — Queue a first-creation request for operator approval
+* `stop` — Gracefully stop this agent container: signal → drain → reconcile. Never escalates to a hard kill — use `kill` for that
+* `kill` — Hard-stop this managed container
 * `destroy` — Tear down this sub-agent container, keeping its state by default. No undo
 * `rebuild` — Apply pending config to this managed container
 * `set-parent` — Move this agent in the topology tree — under a new parent, or to root
@@ -390,27 +394,43 @@ Resume this paused agent — it drains whatever queued up while parked
 
 
 
-## `hivectl agent spawn`
+## `hivectl agent start`
 
-Spawn this agent container directly, bypassing the approval queue.
+Start this EXISTING agent container. Fails immediately if `name` has no config/topology entry at all — it never attempts first-time creation. Use `create` for that
 
-Operator-on-the-host only; use `request-spawn` for an approval-gated spawn.
-
-**Usage:** `hivectl agent spawn`
+**Usage:** `hivectl agent start`
 
 
 
-## `hivectl agent request-spawn`
+## `hivectl agent create`
 
-Queue a spawn request for operator approval
+Create this agent container from scratch (full first-time provisioning), bypassing the approval queue.
 
-**Usage:** `hivectl agent request-spawn`
+Operator-on-the-host only; use `request-create` for an approval-gated creation.
+
+**Usage:** `hivectl agent create`
+
+
+
+## `hivectl agent request-create`
+
+Queue a first-creation request for operator approval
+
+**Usage:** `hivectl agent request-create`
+
+
+
+## `hivectl agent stop`
+
+Gracefully stop this agent container: signal → drain → reconcile. Never escalates to a hard kill — use `kill` for that
+
+**Usage:** `hivectl agent stop`
 
 
 
 ## `hivectl agent kill`
 
-Stop this managed container (graceful)
+Hard-stop this managed container
 
 **Usage:** `hivectl agent kill`