92559af8e7
The dashboard, its API, the swagger UI and the agent routes move to their own vhost, `swarm.dashboardDomain` = `<hive>.hives.<swarm.domain>`, under the swarm domain so authelia's session cookie reaches it. `/`, `/api/` and `/api/docs/` ask authelia through `auth_request`, and authelia's `operatorsOnly` rule for each hive's dashboard name lets only the admins group in. The hive domain keeps matrix discovery and redirects every other path to the new name. The name rides as a SAN on the hive's own gateway leaf: the per-hive bao role allows it, and hive-tls asks for it and checks coverage. HTTP Basic auth is gone: the htpasswd writer and its test, the `hivectl gateway` verbs and host-socket requests, the `gateway.auth` options (now a removed-option error), the unauthorized page and the bcrypt dependency. tmpfiles deletes a leftover gateway.htpasswd, which held bcrypt hashes at 0644. c0re hands out dashboard and agent URLs on the new name (HYPERHIVE_DASHBOARD_DOMAIN), and the swarm controller's hive roster carries each hive's dashboard name for the swarm UI's hive list. Closes #3469
36 lines
1.4 KiB
Markdown
36 lines
1.4 KiB
Markdown
# hivectl
|
|
|
|
The operator-facing host CLI. A thin client for the `hive-c0re`
|
|
daemon — speaks the host admin socket protocol (`hive-host-sock`) and
|
|
does not link the daemon crate. Container lifecycle and the
|
|
matrix/gateway verbs all forward to the daemon and need it running; a few (`wg`/`peer-config`, `choom`) work off local
|
|
host state instead.
|
|
|
|
## When to use it
|
|
|
|
Reach for this crate when adding an operator-run host command — agents
|
|
talk to the daemon over their own MCP tool surface
|
|
(`hive-agent-mcp`), not this binary. `hivectl` is what a human operator
|
|
(or a host-side script) runs.
|
|
|
|
## Shape
|
|
|
|
One module per subcommand family; `main.rs` is just the clap parse +
|
|
dispatch:
|
|
|
|
- **`agents.rs`** — container lifecycle for an EXISTING agent
|
|
(start/stop/kill/rebuild/restart/…); creation is swarm-level
|
|
(`swarmctl agent create`).
|
|
- **`dag_progress.rs`** — rebuild-queue progress rendering.
|
|
- **`power.rs`** — restart/start/stop at the container level.
|
|
- **`choom.rs`** — drop into an interactive claude session in a
|
|
container.
|
|
- **`forge.rs`** — reconciles an agent's config against its forge
|
|
repo.
|
|
- **`matrix.rs`** — invite a matrix user to the hive Space or a room.
|
|
- **`wg.rs`** — WireGuard mesh helpers.
|
|
- **`subvol.rs`** — btrfs state-subvolume ops.
|
|
- **`quota.rs`**, **`util.rs`**, **`completions.rs`**, **`open.rs`** —
|
|
shared helpers, shell completions, browser-open.
|
|
|
|
Full verb reference: `docs/tools/hivectl.md`.
|