rename: role badge stays 'manager'; unify harness unit name to hive-ag3nt

hive-c0re/src/dashboard.rs

@@ -1157,9 +1157,8 @@ async fn get_journal(
     ])
     .arg(lines.to_string());
     if let Some(u) = q.unit.as_deref().filter(|s| !s.is_empty()) {
-        // accept hive-ag3nt[.service] / hive-m1nd[.service] — anything
-        // else we refuse, again to keep the shell-out tight.
-        let allowed = ["hive-ag3nt.service", "hive-m1nd.service"];
+        // accept hive-ag3nt[.service] — anything else refused.
+        let allowed = ["hive-ag3nt.service"];
         let unit = if u.ends_with(".service") {
             u.to_owned()
         } else {

hive-c0re/src/manager_server.rs

@@ -539,7 +539,7 @@ async fn dispatch(req: &ManagerRequest, coord: &Arc<Coordinator>) -> ManagerResp
             let (status_text, status_set_at, running) =
                 crate::container_view::read_agent_status_live(target).await;
             let role = if target == MANAGER_AGENT {
-                "root"
+                "manager"
             } else {
                 "agent"
             }

hive-c0re/src/meta.rs

@@ -451,7 +451,7 @@ where
                  then hyperhive.nixosConfigurations.root
                  else hyperhive.nixosConfigurations.agent-base;
           input = inputs."agent-${name}";
-          service = if isManager then "hive-root" else "hive-ag3nt";
+          service = "hive-ag3nt";
           parentEnv = if parent == null then {} else { HIVE_PARENT = parent; };
           toolGroupsEnv = if toolGroups == null then {} else { HIVE_TOOL_GROUPS = toolGroups; };
         in