fold hive-c0re module tree into the daemon binary + drop dead pub items surfaced by bin-only (#2513)

hive-c0re/src/agent_config/topology.rs

@@ -54,14 +54,6 @@ pub fn read() -> BTreeMap<String, Option<String>> {
     serde_json::from_str(&raw).unwrap_or_default()
 }
 
-/// Look up one agent's parent. Returns `None` when the agent is root
-/// or absent from the file. Cheap convenience over `read()` for
-/// callers that want a single entry.
-#[must_use]
-pub fn parent_of(name: &str) -> Option<String> {
-    read().get(name).cloned().flatten()
-}
-
 /// Return the direct children of `name` — agents whose `topology.json`
 /// entry has `name` as their parent. Reads the map once and scans all
 /// entries; cheap enough for the fan-out path (one disk read per send
@@ -489,30 +481,9 @@ pub fn has_role_in(roles: &BTreeMap<String, Vec<String>>, name: &str, role: &str
         .is_some_and(|rs| rs.iter().any(|r| r == role))
 }
 
-/// Grant or revoke a role for `name`. Idempotent — no disk write when the
-/// state is already correct.
-///
-/// Empty role lists are kept in the map (never removed). An absent key means
-/// "never seen" (seed on next `reconcile_roles`); an empty list means
-/// "explicitly revoked" (do not re-seed). Callers that want to remove an
-/// agent from the map entirely should use `reconcile_roles` (agent departure).
-pub fn set_role(name: &str, role: &str, enabled: bool) -> Result<(), String> {
-    let mut roles = read_roles();
-    let list = roles.entry(name.to_owned()).or_default();
-    let held = list.iter().any(|r| r == role);
-    match (enabled, held) {
-        (true, false) => list.push(role.to_owned()),
-        (false, true) => list.retain(|r| r != role),
-        _ => return Ok(()),
-    }
-    // Intentionally do NOT remove empty entries — an empty list signals an
-    // explicit revoke and prevents reconcile_roles from re-seeding the role.
-    write_roles(&roles).map_err(|e| format!("write roles.json: {e}"))
-}
-
 /// Reconcile `roles.json` against the current agent set:
 /// - Seeds root's default `can_manage_top_level_agents` role on first
-///   appearance (operator can revoke with `set_role`).
+///   appearance.
 /// - Drops entries for agents that no longer exist.
 ///
 /// Returns true when the file changed.